@boatdev/sdk 1.9.5 → 1.9.6

package/docs/BoatApi.md

@@ -15,12 +15,16 @@ All URIs are relative to *https://boat.dev/api/v1*
 | [**commandStatus**](BoatApi.md#commandstatus) | **GET** /sandboxes/{sandboxId}/commands/{processId} | Get detached command status and logs |
 | [**conversations**](BoatApi.md#conversations) | **GET** /sandboxes/{sandboxId}/conversations | List boat conversations |
 | [**create**](BoatApi.md#create) | **POST** /sandboxes | Create sandbox |
+| [**createCredentialProfile**](BoatApi.md#createcredentialprofileoperation) | **POST** /credential-profiles | Create a credential profile |
 | [**createDownloadUrl**](BoatApi.md#createdownloadurl) | **POST** /sandboxes/{sandboxId}/files/download-url | Get a download URL for a sandbox file |
 | [**createEnvironment**](BoatApi.md#createenvironment) | **POST** /environments | Create a sandbox environment |
 | [**createScopedApiKey**](BoatApi.md#createscopedapikeyoperation) | **POST** /api-keys/scoped | Create a scoped API key |
 | [**createSnapshotShare**](BoatApi.md#createsnapshotshare) | **POST** /named-snapshots/{name}/shares | Share a named snapshot |
 | [**createUploadUrl**](BoatApi.md#createuploadurl) | **POST** /sandboxes/{sandboxId}/files/upload-url | Get an upload URL for a sandbox file |
 | [**createWebhook**](BoatApi.md#createwebhook) | **POST** /webhooks | Create webhook |
+| [**deleteCredentialProfile**](BoatApi.md#deletecredentialprofile) | **DELETE** /credential-profiles/{profile} | Delete a credential profile |
+| [**deleteCredentialProfileCustomApi**](BoatApi.md#deletecredentialprofilecustomapi) | **DELETE** /credential-profiles/{profile}/custom-apis/{name} | Remove a custom API |
+| [**deleteCredentialProfileKey**](BoatApi.md#deletecredentialprofilekey) | **DELETE** /credential-profiles/{profile}/keys/{credential} | Remove a credential profile credential |
 | [**deleteEnvironment**](BoatApi.md#deleteenvironment) | **DELETE** /environments/{environmentId} | Delete a sandbox environment |
 | [**deleteEnvironmentRepo**](BoatApi.md#deleteenvironmentrepo) | **DELETE** /environments/{environmentId}/repos/{repositoryId} | Remove a repository from an environment |
 | [**deleteEnvironmentSecretFile**](BoatApi.md#deleteenvironmentsecretfile) | **DELETE** /environments/{environmentId}/secret-files | Remove one secret file |
@@ -36,11 +40,14 @@ All URIs are relative to *https://boat.dev/api/v1*
 | [**events**](BoatApi.md#events) | **GET** /sandboxes/{sandboxId}/events | List boat events |
 | [**fork**](BoatApi.md#forkoperation) | **POST** /sandboxes/{sandboxId}/fork | Fork sandbox |
 | [**get**](BoatApi.md#get) | **GET** /sandboxes/{sandboxId} | Get sandbox |
+| [**getAiProxy**](BoatApi.md#getaiproxy) | **GET** /ai-proxy | Get AI credentials proxy |
+| [**getAiUsage**](BoatApi.md#getaiusage) | **GET** /ai-usage | Get AI usage |
 | [**getCommand**](BoatApi.md#getcommand) | **GET** /sandboxes/{sandboxId}/command-history/{commandId} | Get one command from the history |
 | [**getDataRetention**](BoatApi.md#getdataretention) | **GET** /account/data-retention | Get account data-retention policy |
 | [**getDeletionOperation**](BoatApi.md#getdeletionoperation) | **GET** /deletion-operations/{operationId} | Get deletion operation |
 | [**getLatestSandboxSnapshot**](BoatApi.md#getlatestsandboxsnapshot) | **GET** /sandboxes/{sandboxId}/snapshots/latest | Get latest boat snapshot |
 | [**getNamedSnapshot**](BoatApi.md#getnamedsnapshot) | **GET** /named-snapshots/{name} | Get a named snapshot |
+| [**getSandboxAiUsage**](BoatApi.md#getsandboxaiusage) | **GET** /sandboxes/{sandboxId}/ai-usage | Get sandbox AI usage |
 | [**getSnapshotDownload**](BoatApi.md#getsnapshotdownload) | **GET** /snapshots/{snapshotId}/download | Get snapshot download |
 | [**getSnapshotFile**](BoatApi.md#getsnapshotfile) | **GET** /snapshots/{snapshotId}/files | Download a file or folder from a snapshot |
 | [**getSnapshotTree**](BoatApi.md#getsnapshottree) | **GET** /snapshots/{snapshotId}/tree | Get snapshot file tree |
@@ -50,6 +57,7 @@ All URIs are relative to *https://boat.dev/api/v1*
 | [**hostPort**](BoatApi.md#hostportoperation) | **POST** /sandboxes/{sandboxId}/host | Expose a sandbox port on a public HTTPS URL |
 | [**interrupt**](BoatApi.md#interrupt) | **POST** /sandboxes/{sandboxId}/interrupt | Interrupt running work |
 | [**limits**](BoatApi.md#limits) | **GET** /limits | Get Boat limits |
+| [**listCredentialProfiles**](BoatApi.md#listcredentialprofiles) | **GET** /credential-profiles | List credential profiles |
 | [**listNamedSnapshots**](BoatApi.md#listnamedsnapshots) | **GET** /named-snapshots | List named snapshots |
 | [**listOrganizations**](BoatApi.md#listorganizations) | **GET** /orgs | List organizations |
 | [**listSandboxSnapshots**](BoatApi.md#listsandboxsnapshots) | **GET** /sandboxes/{sandboxId}/snapshots | List boat snapshots |
@@ -73,8 +81,11 @@ All URIs are relative to *https://boat.dev/api/v1*
 | [**secrets**](BoatApi.md#secrets) | **GET** /secrets | Get Boat secrets setup |
 | [**selectRepo**](BoatApi.md#selectrepo) | **POST** /repos | Select repository for sandboxes |
 | [**setActiveOrganization**](BoatApi.md#setactiveorganization) | **PATCH** /orgs/active | Set the active organization |
+| [**setCredentialProfileCustomApi**](BoatApi.md#setcredentialprofilecustomapi) | **PUT** /credential-profiles/{profile}/custom-apis/{name} | Set a custom API |
+| [**setCredentialProfileKey**](BoatApi.md#setcredentialprofilekey) | **PUT** /credential-profiles/{profile}/keys/{credential} | Set a credential profile API key |
 | [**setEnvironmentSecretFile**](BoatApi.md#setenvironmentsecretfileoperation) | **PUT** /environments/{environmentId}/secret-files | Write one secret file |
 | [**setEnvironmentVar**](BoatApi.md#setenvironmentvaroperation) | **PUT** /environments/{environmentId}/vars/{key} | Set one environment variable |
+| [**setSandboxAiAccess**](BoatApi.md#setsandboxaiaccessoperation) | **PUT** /sandboxes/{sandboxId}/ai-access | Block or unblock sandbox AI access |
 | [**setTelemetry**](BoatApi.md#settelemetry) | **PUT** /telemetry | Set OpenTelemetry export |
 | [**share**](BoatApi.md#share) | **POST** /sandboxes/{sandboxId}/share | Share sandbox with the organization |
 | [**sshKey**](BoatApi.md#sshkeyoperation) | **POST** /sandboxes/{sandboxId}/sshkey | Configure sandbox SSH key |
@@ -82,6 +93,8 @@ All URIs are relative to *https://boat.dev/api/v1*
 | [**stop**](BoatApi.md#stopoperation) | **POST** /sandboxes/{sandboxId}/stop | Stop and archive sandbox |
 | [**stopCommand**](BoatApi.md#stopcommand) | **DELETE** /sandboxes/{sandboxId}/commands/{processId} | Stop a detached command |
 | [**update**](BoatApi.md#update) | **PATCH** /sandboxes/{sandboxId} | Update sandbox |
+| [**updateAiProxy**](BoatApi.md#updateaiproxyoperation) | **PUT** /ai-proxy | Turn the AI credentials proxy on or off |
+| [**updateCredentialProfile**](BoatApi.md#updatecredentialprofileoperation) | **PUT** /credential-profiles/{profile} | Update a credential profile |
 | [**updateDataRetention**](BoatApi.md#updatedataretention) | **PATCH** /account/data-retention | Update account data-retention policy |
 | [**updateEnvironment**](BoatApi.md#updateenvironment) | **PUT** /environments/{environmentId} | Update a sandbox environment |
 | [**updateSecrets**](BoatApi.md#updatesecrets) | **POST** /secrets | Update Boat secrets setup |
@@ -94,7 +107,7 @@ All URIs are relative to *https://boat.dev/api/v1*
 
 ## addEnvironmentRepo
 
-> EnvironmentItemChangeResponse addEnvironmentRepo(environmentId, addEnvironmentRepoRequest)
+> EnvironmentItemChangeResponse addEnvironmentRepo(environmentId, addEnvironmentRepoRequest, org)
 
 Add a repository to an environment
 
@@ -122,6 +135,8 @@ async function example() {
     environmentId: 38400000-8cf0-11bd-b23e-10b96e4ef00d,
     // AddEnvironmentRepoRequest
     addEnvironmentRepoRequest: ...,
+    // string | Billing wallet for this request: an organization you belong to, by id (`team_…`) or by name as `GET /orgs` lists it (case-insensitive), or `personal`. Omitted, the account\'s active wallet applies (`PATCH /orgs/active`; personal until set). Two organizations sharing the name answer `409 ambiguous_org` and need the id. Sandboxes and snapshots stay creator-private. On `/environments` routes, only this query parameter selects the organization\'s shared environments; the `X-Boat-Org` header and the active wallet do not apply there. Members read them, owners and admins change them. (optional)
+    org: org_example,
   } satisfies AddEnvironmentRepoOperationRequest;
 
   try {
@@ -143,6 +158,7 @@ example().catch(console.error);
 |------------- | ------------- | ------------- | -------------|
 | **environmentId** | `string` |  | [Defaults to `undefined`] |
 | **addEnvironmentRepoRequest** | [AddEnvironmentRepoRequest](AddEnvironmentRepoRequest.md) |  | |
+| **org** | `string` | Billing wallet for this request: an organization you belong to, by id (`team_…`) or by name as `GET /orgs` lists it (case-insensitive), or `personal`. Omitted, the account\'s active wallet applies (`PATCH /orgs/active`; personal until set). Two organizations sharing the name answer `409 ambiguous_org` and need the id. Sandboxes and snapshots stay creator-private. On `/environments` routes, only this query parameter selects the organization\'s shared environments; the `X-Boat-Org` header and the active wallet do not apply there. Members read them, owners and admins change them. | [Optional] [Defaults to `undefined`] |
 
 ### Return type
 
@@ -907,7 +923,7 @@ async function example() {
   const body = {
     // string | Optional exactly-once key for creating a sandbox. Send your own opaque, account-unique value (a UUID) to make `POST /sandboxes` safe to retry when the response is lost (network timeout, 5xx): the first request creates the sandbox and binds it to the key; every later request with the **same account, key, and request body** returns that same sandbox instead of creating a second, billable one. Behavior: keys are retained for **24 hours**; a concurrent or early retry while the first sandbox is still being minted returns `409` `idempotency_in_progress` (retry shortly, same key); reusing a key with a **different body** returns `409` `idempotency_key_reused`; timeouts and 5xx are safe to retry with the same key; a create that fails before the sandbox exists releases the key within ~2 minutes so a retry can create the sandbox. Omit the header to keep the default (non-idempotent) behavior. (optional)
     idempotencyKey: idempotencyKey_example,
-    // string | Billing wallet for this request: an organization you belong to, by id (`team_…`) or by name as `GET /orgs` lists it (case-insensitive), or `personal`. Omitted, the account\'s active wallet applies (`PATCH /orgs/active`; personal until set). Two organizations sharing the name answer `409 ambiguous_org` and need the id. Sandboxes, snapshots, and environments stay creator-private. (optional)
+    // string | Billing wallet for this request: an organization you belong to, by id (`team_…`) or by name as `GET /orgs` lists it (case-insensitive), or `personal`. Omitted, the account\'s active wallet applies (`PATCH /orgs/active`; personal until set). Two organizations sharing the name answer `409 ambiguous_org` and need the id. Sandboxes and snapshots stay creator-private. On `/environments` routes, only this query parameter selects the organization\'s shared environments; the `X-Boat-Org` header and the active wallet do not apply there. Members read them, owners and admins change them. (optional)
     org: org_example,
     // string | Same as the `org` query parameter. Query wins when both are set. (optional)
     xBoatOrg: xBoatOrg_example,
@@ -933,7 +949,7 @@ example().catch(console.error);
 | Name | Type | Description  | Notes |
 |------------- | ------------- | ------------- | -------------|
 | **idempotencyKey** | `string` | Optional exactly-once key for creating a sandbox. Send your own opaque, account-unique value (a UUID) to make `POST /sandboxes` safe to retry when the response is lost (network timeout, 5xx): the first request creates the sandbox and binds it to the key; every later request with the **same account, key, and request body** returns that same sandbox instead of creating a second, billable one. Behavior: keys are retained for **24 hours**; a concurrent or early retry while the first sandbox is still being minted returns `409` `idempotency_in_progress` (retry shortly, same key); reusing a key with a **different body** returns `409` `idempotency_key_reused`; timeouts and 5xx are safe to retry with the same key; a create that fails before the sandbox exists releases the key within ~2 minutes so a retry can create the sandbox. Omit the header to keep the default (non-idempotent) behavior. | [Optional] [Defaults to `undefined`] |
-| **org** | `string` | Billing wallet for this request: an organization you belong to, by id (`team_…`) or by name as `GET /orgs` lists it (case-insensitive), or `personal`. Omitted, the account\'s active wallet applies (`PATCH /orgs/active`; personal until set). Two organizations sharing the name answer `409 ambiguous_org` and need the id. Sandboxes, snapshots, and environments stay creator-private. | [Optional] [Defaults to `undefined`] |
+| **org** | `string` | Billing wallet for this request: an organization you belong to, by id (`team_…`) or by name as `GET /orgs` lists it (case-insensitive), or `personal`. Omitted, the account\'s active wallet applies (`PATCH /orgs/active`; personal until set). Two organizations sharing the name answer `409 ambiguous_org` and need the id. Sandboxes and snapshots stay creator-private. On `/environments` routes, only this query parameter selects the organization\'s shared environments; the `X-Boat-Org` header and the active wallet do not apply there. Members read them, owners and admins change them. | [Optional] [Defaults to `undefined`] |
 | **xBoatOrg** | `string` | Same as the `org` query parameter. Query wins when both are set. | [Optional] [Defaults to `undefined`] |
 | **createSandboxRequest** | [CreateSandboxRequest](CreateSandboxRequest.md) |  | [Optional] |
 
@@ -964,6 +980,81 @@ example().catch(console.error);
 [[Back to top]](#) [[Back to API list]](../README.md#api-endpoints) [[Back to Model list]](../README.md#models) [[Back to README]](../README.md)
 
 
+## createCredentialProfile
+
+> CredentialProfileResponse createCredentialProfile(createCredentialProfileRequest)
+
+Create a credential profile
+
+Creates an empty profile, or a copy of `copyFrom`. With `org`, the profile belongs to that organization and only its owners can create it. Needs an API key with `account.admin`.
+
+### Example
+
+```ts
+import {
+  Configuration,
+  BoatApi,
+} from '@boatdev/sdk';
+import type { CreateCredentialProfileOperationRequest } from '@boatdev/sdk';
+
+async function example() {
+  console.log("🚀 Testing @boatdev/sdk SDK...");
+  const config = new Configuration({ 
+    // Configure HTTP bearer authorization: BoatBearerAuth
+    accessToken: "YOUR BEARER TOKEN",
+  });
+  const api = new BoatApi(config);
+
+  const body = {
+    // CreateCredentialProfileRequest
+    createCredentialProfileRequest: {"name":"work","copyFrom":"default"},
+  } satisfies CreateCredentialProfileOperationRequest;
+
+  try {
+    const data = await api.createCredentialProfile(body);
+    console.log(data);
+  } catch (error) {
+    console.error(error);
+  }
+}
+
+// Run the test
+example().catch(console.error);
+```
+
+### Parameters
+
+
+| Name | Type | Description  | Notes |
+|------------- | ------------- | ------------- | -------------|
+| **createCredentialProfileRequest** | [CreateCredentialProfileRequest](CreateCredentialProfileRequest.md) |  | |
+
+### Return type
+
+[**CredentialProfileResponse**](CredentialProfileResponse.md)
+
+### Authorization
+
+[BoatBearerAuth](../README.md#BoatBearerAuth)
+
+### HTTP request headers
+
+- **Content-Type**: `application/json`
+- **Accept**: `application/json`
+
+
+### HTTP response details
+| Status code | Description | Response headers |
+|-------------|-------------|------------------|
+| **201** | Profile created. |  -  |
+| **400** | Invalid request body or parameters. |  -  |
+| **401** | Missing or invalid bearer token. |  -  |
+| **403** | Authenticated token is not allowed to perform this action. |  -  |
+| **409** | Request conflicts with current account or sandbox state. |  -  |
+
+[[Back to top]](#) [[Back to API list]](../README.md#api-endpoints) [[Back to Model list]](../README.md#models) [[Back to README]](../README.md)
+
+
 ## createDownloadUrl
 
 > FileUrlResponse createDownloadUrl(sandboxId, fileUrlRequest)
@@ -1044,7 +1135,7 @@ example().catch(console.error);
 
 ## createEnvironment
 
-> SandboxEnvironmentListResponse createEnvironment(createSandboxEnvironmentRequest)
+> SandboxEnvironmentListResponse createEnvironment(createSandboxEnvironmentRequest, org)
 
 Create a sandbox environment
 
@@ -1070,6 +1161,8 @@ async function example() {
   const body = {
     // CreateSandboxEnvironmentRequest
     createSandboxEnvironmentRequest: ...,
+    // string | Billing wallet for this request: an organization you belong to, by id (`team_…`) or by name as `GET /orgs` lists it (case-insensitive), or `personal`. Omitted, the account\'s active wallet applies (`PATCH /orgs/active`; personal until set). Two organizations sharing the name answer `409 ambiguous_org` and need the id. Sandboxes and snapshots stay creator-private. On `/environments` routes, only this query parameter selects the organization\'s shared environments; the `X-Boat-Org` header and the active wallet do not apply there. Members read them, owners and admins change them. (optional)
+    org: org_example,
   } satisfies CreateEnvironmentRequest;
 
   try {
@@ -1090,6 +1183,7 @@ example().catch(console.error);
 | Name | Type | Description  | Notes |
 |------------- | ------------- | ------------- | -------------|
 | **createSandboxEnvironmentRequest** | [CreateSandboxEnvironmentRequest](CreateSandboxEnvironmentRequest.md) |  | |
+| **org** | `string` | Billing wallet for this request: an organization you belong to, by id (`team_…`) or by name as `GET /orgs` lists it (case-insensitive), or `personal`. Omitted, the account\'s active wallet applies (`PATCH /orgs/active`; personal until set). Two organizations sharing the name answer `409 ambiguous_org` and need the id. Sandboxes and snapshots stay creator-private. On `/environments` routes, only this query parameter selects the organization\'s shared environments; the `X-Boat-Org` header and the active wallet do not apply there. Members read them, owners and admins change them. | [Optional] [Defaults to `undefined`] |
 
 ### Return type
 
@@ -1416,13 +1510,13 @@ example().catch(console.error);
 [[Back to top]](#) [[Back to API list]](../README.md#api-endpoints) [[Back to Model list]](../README.md#models) [[Back to README]](../README.md)
 
 
-## deleteEnvironment
+## deleteCredentialProfile
 
-> SandboxEnvironmentResponse deleteEnvironment(environmentId)
+> CredentialProfileDeletedResponse deleteCredentialProfile(profile)
 
-Delete a sandbox environment
+Delete a credential profile
 
-Soft-deletes an environment. The default environment cannot be deleted, and at least one environment is always kept.
+Deletes the profile. A default profile returns `409 is_default`. A profile that an environment names returns `409 in_use`. Needs an API key with `account.admin`.
 
 ### Example
 
@@ -1431,7 +1525,7 @@ import {
   Configuration,
   BoatApi,
 } from '@boatdev/sdk';
-import type { DeleteEnvironmentRequest } from '@boatdev/sdk';
+import type { DeleteCredentialProfileRequest } from '@boatdev/sdk';
 
 async function example() {
   console.log("🚀 Testing @boatdev/sdk SDK...");
@@ -1442,12 +1536,12 @@ async function example() {
   const api = new BoatApi(config);
 
   const body = {
-    // string | Environment id returned by `GET /environments`.
-    environmentId: 38400000-8cf0-11bd-b23e-10b96e4ef00d,
-  } satisfies DeleteEnvironmentRequest;
+    // string | Profile id or name.
+    profile: profile_example,
+  } satisfies DeleteCredentialProfileRequest;
 
   try {
-    const data = await api.deleteEnvironment(body);
+    const data = await api.deleteCredentialProfile(body);
     console.log(data);
   } catch (error) {
     console.error(error);
@@ -1463,11 +1557,11 @@ example().catch(console.error);
 
 | Name | Type | Description  | Notes |
 |------------- | ------------- | ------------- | -------------|
-| **environmentId** | `string` | Environment id returned by `GET /environments`. | [Defaults to `undefined`] |
+| **profile** | `string` | Profile id or name. | [Defaults to `undefined`] |
 
 ### Return type
 
-[**SandboxEnvironmentResponse**](SandboxEnvironmentResponse.md)
+[**CredentialProfileDeletedResponse**](CredentialProfileDeletedResponse.md)
 
 ### Authorization
 
@@ -1482,21 +1576,22 @@ example().catch(console.error);
 ### HTTP response details
 | Status code | Description | Response headers |
 |-------------|-------------|------------------|
-| **200** | Environment soft-deleted. |  -  |
+| **200** | Profile deleted. |  -  |
 | **401** | Missing or invalid bearer token. |  -  |
+| **403** | Authenticated token is not allowed to perform this action. |  -  |
 | **404** | Resource not found. |  -  |
 | **409** | Request conflicts with current account or sandbox state. |  -  |
 
 [[Back to top]](#) [[Back to API list]](../README.md#api-endpoints) [[Back to Model list]](../README.md#models) [[Back to README]](../README.md)
 
 
-## deleteEnvironmentRepo
+## deleteCredentialProfileCustomApi
 
-> EnvironmentItemChangeResponse deleteEnvironmentRepo(environmentId, repositoryId)
+> CredentialProfileResponse deleteCredentialProfileCustomApi(profile, name)
 
-Remove a repository from an environment
+Remove a custom API
 
-Removes one repository from the environment\'s selection. Mints a new immutable version.
+Removes one custom API from the profile. Needs an API key with `account.admin`.
 
 ### Example
 
@@ -1505,7 +1600,7 @@ import {
   Configuration,
   BoatApi,
 } from '@boatdev/sdk';
-import type { DeleteEnvironmentRepoRequest } from '@boatdev/sdk';
+import type { DeleteCredentialProfileCustomApiRequest } from '@boatdev/sdk';
 
 async function example() {
   console.log("🚀 Testing @boatdev/sdk SDK...");
@@ -1516,14 +1611,14 @@ async function example() {
   const api = new BoatApi(config);
 
   const body = {
-    // string
-    environmentId: 38400000-8cf0-11bd-b23e-10b96e4ef00d,
-    // string | The repository `databaseId`.
-    repositoryId: repositoryId_example,
-  } satisfies DeleteEnvironmentRepoRequest;
+    // string | Profile id or name.
+    profile: profile_example,
+    // string | Environment variable name of the custom API, for example `STRIPE_KEY`. Provider names (`ANTHROPIC_*`, `OPENAI_*`, and so on) and names that end in `_BASE_URL` are reserved.
+    name: name_example,
+  } satisfies DeleteCredentialProfileCustomApiRequest;
 
   try {
-    const data = await api.deleteEnvironmentRepo(body);
+    const data = await api.deleteCredentialProfileCustomApi(body);
     console.log(data);
   } catch (error) {
     console.error(error);
@@ -1539,12 +1634,12 @@ example().catch(console.error);
 
 | Name | Type | Description  | Notes |
 |------------- | ------------- | ------------- | -------------|
-| **environmentId** | `string` |  | [Defaults to `undefined`] |
-| **repositoryId** | `string` | The repository `databaseId`. | [Defaults to `undefined`] |
+| **profile** | `string` | Profile id or name. | [Defaults to `undefined`] |
+| **name** | `string` | Environment variable name of the custom API, for example `STRIPE_KEY`. Provider names (`ANTHROPIC_*`, `OPENAI_*`, and so on) and names that end in `_BASE_URL` are reserved. | [Defaults to `undefined`] |
 
 ### Return type
 
-[**EnvironmentItemChangeResponse**](EnvironmentItemChangeResponse.md)
+[**CredentialProfileResponse**](CredentialProfileResponse.md)
 
 ### Authorization
 
@@ -1559,20 +1654,21 @@ example().catch(console.error);
 ### HTTP response details
 | Status code | Description | Response headers |
 |-------------|-------------|------------------|
-| **200** | New version minted. |  -  |
+| **200** | The updated profile. |  -  |
 | **401** | Missing or invalid bearer token. |  -  |
+| **403** | Authenticated token is not allowed to perform this action. |  -  |
 | **404** | Resource not found. |  -  |
 
 [[Back to top]](#) [[Back to API list]](../README.md#api-endpoints) [[Back to Model list]](../README.md#models) [[Back to README]](../README.md)
 
 
-## deleteEnvironmentSecretFile
+## deleteCredentialProfileKey
 
-> EnvironmentItemChangeResponse deleteEnvironmentSecretFile(path, environmentId)
+> CredentialProfileResponse deleteCredentialProfileKey(profile, credential)
 
-Remove one secret file
+Remove a credential profile credential
 
-Removes the secret file at `path`. Mints a new immutable version.
+Removes one credential, an API key or a sign-in. Needs an API key with `account.admin`.
 
 ### Example
 
@@ -1581,7 +1677,7 @@ import {
   Configuration,
   BoatApi,
 } from '@boatdev/sdk';
-import type { DeleteEnvironmentSecretFileRequest } from '@boatdev/sdk';
+import type { DeleteCredentialProfileKeyRequest } from '@boatdev/sdk';
 
 async function example() {
   console.log("🚀 Testing @boatdev/sdk SDK...");
@@ -1592,14 +1688,14 @@ async function example() {
   const api = new BoatApi(config);
 
   const body = {
-    // string
-    path: path_example,
-    // string
-    environmentId: 38400000-8cf0-11bd-b23e-10b96e4ef00d,
-  } satisfies DeleteEnvironmentSecretFileRequest;
+    // string | Profile id or name.
+    profile: profile_example,
+    // CredentialId
+    credential: ...,
+  } satisfies DeleteCredentialProfileKeyRequest;
 
   try {
-    const data = await api.deleteEnvironmentSecretFile(body);
+    const data = await api.deleteCredentialProfileKey(body);
     console.log(data);
   } catch (error) {
     console.error(error);
@@ -1615,12 +1711,12 @@ example().catch(console.error);
 
 | Name | Type | Description  | Notes |
 |------------- | ------------- | ------------- | -------------|
-| **path** | `string` |  | [Defaults to `undefined`] |
-| **environmentId** | `string` |  | [Defaults to `undefined`] |
+| **profile** | `string` | Profile id or name. | [Defaults to `undefined`] |
+| **credential** | `CredentialId` |  | [Defaults to `undefined`] [Enum: anthropic-api-key, openai-api-key, openrouter-api-key, llmgateway-api-key, deepseek-api-key, moonshot-api-key, mistral-api-key, claude-subscription, chatgpt-subscription, kimi-subscription, mistral-vibe-subscription, claude-bedrock, codex-bedrock] |
 
 ### Return type
 
-[**EnvironmentItemChangeResponse**](EnvironmentItemChangeResponse.md)
+[**CredentialProfileResponse**](CredentialProfileResponse.md)
 
 ### Authorization
 
@@ -1635,20 +1731,22 @@ example().catch(console.error);
 ### HTTP response details
 | Status code | Description | Response headers |
 |-------------|-------------|------------------|
-| **200** | New version minted. |  -  |
+| **200** | The updated profile. |  -  |
+| **400** | Invalid request body or parameters. |  -  |
 | **401** | Missing or invalid bearer token. |  -  |
+| **403** | Authenticated token is not allowed to perform this action. |  -  |
 | **404** | Resource not found. |  -  |
 
 [[Back to top]](#) [[Back to API list]](../README.md#api-endpoints) [[Back to Model list]](../README.md#models) [[Back to README]](../README.md)
 
 
-## deleteEnvironmentVar
+## deleteEnvironment
 
-> EnvironmentItemChangeResponse deleteEnvironmentVar(environmentId, key)
+> SandboxEnvironmentResponse deleteEnvironment(environmentId, org)
 
-Remove one environment variable
+Delete a sandbox environment
 
-Removes a single variable. Mints a new immutable version.
+Soft-deletes an environment. The default environment cannot be deleted, and at least one environment is always kept.
 
 ### Example
 
@@ -1657,7 +1755,7 @@ import {
   Configuration,
   BoatApi,
 } from '@boatdev/sdk';
-import type { DeleteEnvironmentVarRequest } from '@boatdev/sdk';
+import type { DeleteEnvironmentRequest } from '@boatdev/sdk';
 
 async function example() {
   console.log("🚀 Testing @boatdev/sdk SDK...");
@@ -1668,14 +1766,14 @@ async function example() {
   const api = new BoatApi(config);
 
   const body = {
-    // string
+    // string | Environment id returned by `GET /environments`.
     environmentId: 38400000-8cf0-11bd-b23e-10b96e4ef00d,
-    // string | Environment variable name.
-    key: key_example,
-  } satisfies DeleteEnvironmentVarRequest;
+    // string | Billing wallet for this request: an organization you belong to, by id (`team_…`) or by name as `GET /orgs` lists it (case-insensitive), or `personal`. Omitted, the account\'s active wallet applies (`PATCH /orgs/active`; personal until set). Two organizations sharing the name answer `409 ambiguous_org` and need the id. Sandboxes and snapshots stay creator-private. On `/environments` routes, only this query parameter selects the organization\'s shared environments; the `X-Boat-Org` header and the active wallet do not apply there. Members read them, owners and admins change them. (optional)
+    org: org_example,
+  } satisfies DeleteEnvironmentRequest;
 
   try {
-    const data = await api.deleteEnvironmentVar(body);
+    const data = await api.deleteEnvironment(body);
     console.log(data);
   } catch (error) {
     console.error(error);
@@ -1691,12 +1789,12 @@ example().catch(console.error);
 
 | Name | Type | Description  | Notes |
 |------------- | ------------- | ------------- | -------------|
-| **environmentId** | `string` |  | [Defaults to `undefined`] |
-| **key** | `string` | Environment variable name. | [Defaults to `undefined`] |
+| **environmentId** | `string` | Environment id returned by `GET /environments`. | [Defaults to `undefined`] |
+| **org** | `string` | Billing wallet for this request: an organization you belong to, by id (`team_…`) or by name as `GET /orgs` lists it (case-insensitive), or `personal`. Omitted, the account\'s active wallet applies (`PATCH /orgs/active`; personal until set). Two organizations sharing the name answer `409 ambiguous_org` and need the id. Sandboxes and snapshots stay creator-private. On `/environments` routes, only this query parameter selects the organization\'s shared environments; the `X-Boat-Org` header and the active wallet do not apply there. Members read them, owners and admins change them. | [Optional] [Defaults to `undefined`] |
 
 ### Return type
 
-[**EnvironmentItemChangeResponse**](EnvironmentItemChangeResponse.md)
+[**SandboxEnvironmentResponse**](SandboxEnvironmentResponse.md)
 
 ### Authorization
 
@@ -1711,20 +1809,21 @@ example().catch(console.error);
 ### HTTP response details
 | Status code | Description | Response headers |
 |-------------|-------------|------------------|
-| **200** | New version minted. |  -  |
+| **200** | Environment soft-deleted. |  -  |
 | **401** | Missing or invalid bearer token. |  -  |
 | **404** | Resource not found. |  -  |
+| **409** | Request conflicts with current account or sandbox state. |  -  |
 
 [[Back to top]](#) [[Back to API list]](../README.md#api-endpoints) [[Back to Model list]](../README.md#models) [[Back to README]](../README.md)
 
 
-## deleteNamedSnapshot
+## deleteEnvironmentRepo
 
-> NamedSnapshotDeletedResponse deleteNamedSnapshot(name)
+> EnvironmentItemChangeResponse deleteEnvironmentRepo(environmentId, repositoryId, org)
 
-Remove a named snapshot
+Remove a repository from an environment
 
-Remove a named snapshot and release its storage (`boat snapshot rm <name>` in the CLI). Sandboxes already deployed from it are unaffected.
+Removes one repository from the environment\'s selection. Mints a new immutable version.
 
 ### Example
 
@@ -1733,7 +1832,7 @@ import {
   Configuration,
   BoatApi,
 } from '@boatdev/sdk';
-import type { DeleteNamedSnapshotRequest } from '@boatdev/sdk';
+import type { DeleteEnvironmentRepoRequest } from '@boatdev/sdk';
 
 async function example() {
   console.log("🚀 Testing @boatdev/sdk SDK...");
@@ -1745,11 +1844,15 @@ async function example() {
 
   const body = {
     // string
-    name: name_example,
-  } satisfies DeleteNamedSnapshotRequest;
+    environmentId: 38400000-8cf0-11bd-b23e-10b96e4ef00d,
+    // string | The repository `databaseId`.
+    repositoryId: repositoryId_example,
+    // string | Billing wallet for this request: an organization you belong to, by id (`team_…`) or by name as `GET /orgs` lists it (case-insensitive), or `personal`. Omitted, the account\'s active wallet applies (`PATCH /orgs/active`; personal until set). Two organizations sharing the name answer `409 ambiguous_org` and need the id. Sandboxes and snapshots stay creator-private. On `/environments` routes, only this query parameter selects the organization\'s shared environments; the `X-Boat-Org` header and the active wallet do not apply there. Members read them, owners and admins change them. (optional)
+    org: org_example,
+  } satisfies DeleteEnvironmentRepoRequest;
 
   try {
-    const data = await api.deleteNamedSnapshot(body);
+    const data = await api.deleteEnvironmentRepo(body);
     console.log(data);
   } catch (error) {
     console.error(error);
@@ -1765,11 +1868,13 @@ example().catch(console.error);
 
 | Name | Type | Description  | Notes |
 |------------- | ------------- | ------------- | -------------|
-| **name** | `string` |  | [Defaults to `undefined`] |
+| **environmentId** | `string` |  | [Defaults to `undefined`] |
+| **repositoryId** | `string` | The repository `databaseId`. | [Defaults to `undefined`] |
+| **org** | `string` | Billing wallet for this request: an organization you belong to, by id (`team_…`) or by name as `GET /orgs` lists it (case-insensitive), or `personal`. Omitted, the account\'s active wallet applies (`PATCH /orgs/active`; personal until set). Two organizations sharing the name answer `409 ambiguous_org` and need the id. Sandboxes and snapshots stay creator-private. On `/environments` routes, only this query parameter selects the organization\'s shared environments; the `X-Boat-Org` header and the active wallet do not apply there. Members read them, owners and admins change them. | [Optional] [Defaults to `undefined`] |
 
 ### Return type
 
-[**NamedSnapshotDeletedResponse**](NamedSnapshotDeletedResponse.md)
+[**EnvironmentItemChangeResponse**](EnvironmentItemChangeResponse.md)
 
 ### Authorization
 
@@ -1784,21 +1889,20 @@ example().catch(console.error);
 ### HTTP response details
 | Status code | Description | Response headers |
 |-------------|-------------|------------------|
-| **200** | Removed. |  -  |
+| **200** | New version minted. |  -  |
 | **401** | Missing or invalid bearer token. |  -  |
 | **404** | Resource not found. |  -  |
-| **409** | `save_in_progress`: a save under this name is still running. Wait for it to settle before removing it. |  -  |
 
 [[Back to top]](#) [[Back to API list]](../README.md#api-endpoints) [[Back to Model list]](../README.md#models) [[Back to README]](../README.md)
 
 
-## deleteSandbox
+## deleteEnvironmentSecretFile
 
-> DeletionOperationResponse deleteSandbox(xAsciiConfirmDelete, sandboxId)
+> EnvironmentItemChangeResponse deleteEnvironmentSecretFile(path, environmentId, org)
 
-Permanently delete sandbox data
+Remove one secret file
 
-Accept irreversible background deletion of the sandbox machine, snapshots, and content-bearing records. This is not archive: the sandbox cannot be resumed. Named snapshots and other shared artifacts remain independent. Poll the returned operation until `completed`.
+Removes the secret file at `path`. Mints a new immutable version.
 
 ### Example
 
@@ -1807,7 +1911,7 @@ import {
   Configuration,
   BoatApi,
 } from '@boatdev/sdk';
-import type { DeleteSandboxRequest } from '@boatdev/sdk';
+import type { DeleteEnvironmentSecretFileRequest } from '@boatdev/sdk';
 
 async function example() {
   console.log("🚀 Testing @boatdev/sdk SDK...");
@@ -1818,14 +1922,16 @@ async function example() {
   const api = new BoatApi(config);
 
   const body = {
-    // string | Must exactly equal the target `sandboxId` or `snapshotId`. A missing or mismatched value returns `409` without accepting deletion.
-    xAsciiConfirmDelete: xAsciiConfirmDelete_example,
-    // string | Public Sandbox id returned by create/list/get sandbox calls.
-    sandboxId: sandboxId_example,
-  } satisfies DeleteSandboxRequest;
+    // string
+    path: path_example,
+    // string
+    environmentId: 38400000-8cf0-11bd-b23e-10b96e4ef00d,
+    // string | Billing wallet for this request: an organization you belong to, by id (`team_…`) or by name as `GET /orgs` lists it (case-insensitive), or `personal`. Omitted, the account\'s active wallet applies (`PATCH /orgs/active`; personal until set). Two organizations sharing the name answer `409 ambiguous_org` and need the id. Sandboxes and snapshots stay creator-private. On `/environments` routes, only this query parameter selects the organization\'s shared environments; the `X-Boat-Org` header and the active wallet do not apply there. Members read them, owners and admins change them. (optional)
+    org: org_example,
+  } satisfies DeleteEnvironmentSecretFileRequest;
 
   try {
-    const data = await api.deleteSandbox(body);
+    const data = await api.deleteEnvironmentSecretFile(body);
     console.log(data);
   } catch (error) {
     console.error(error);
@@ -1841,12 +1947,13 @@ example().catch(console.error);
 
 | Name | Type | Description  | Notes |
 |------------- | ------------- | ------------- | -------------|
-| **xAsciiConfirmDelete** | `string` | Must exactly equal the target `sandboxId` or `snapshotId`. A missing or mismatched value returns `409` without accepting deletion. | [Defaults to `undefined`] |
-| **sandboxId** | `string` | Public Sandbox id returned by create/list/get sandbox calls. | [Defaults to `undefined`] |
+| **path** | `string` |  | [Defaults to `undefined`] |
+| **environmentId** | `string` |  | [Defaults to `undefined`] |
+| **org** | `string` | Billing wallet for this request: an organization you belong to, by id (`team_…`) or by name as `GET /orgs` lists it (case-insensitive), or `personal`. Omitted, the account\'s active wallet applies (`PATCH /orgs/active`; personal until set). Two organizations sharing the name answer `409 ambiguous_org` and need the id. Sandboxes and snapshots stay creator-private. On `/environments` routes, only this query parameter selects the organization\'s shared environments; the `X-Boat-Org` header and the active wallet do not apply there. Members read them, owners and admins change them. | [Optional] [Defaults to `undefined`] |
 
 ### Return type
 
-[**DeletionOperationResponse**](DeletionOperationResponse.md)
+[**EnvironmentItemChangeResponse**](EnvironmentItemChangeResponse.md)
 
 ### Authorization
 
@@ -1861,22 +1968,20 @@ example().catch(console.error);
 ### HTTP response details
 | Status code | Description | Response headers |
 |-------------|-------------|------------------|
-| **202** | Deletion confirmed and accepted for background processing. |  -  |
+| **200** | New version minted. |  -  |
 | **401** | Missing or invalid bearer token. |  -  |
-| **403** | Authenticated token is not allowed to perform this action. |  -  |
 | **404** | Resource not found. |  -  |
-| **409** | Request conflicts with current account or sandbox state. |  -  |
 
 [[Back to top]](#) [[Back to API list]](../README.md#api-endpoints) [[Back to Model list]](../README.md#models) [[Back to README]](../README.md)
 
 
-## deleteSandboxSnapshots
+## deleteEnvironmentVar
 
-> DeletionOperationListResponse deleteSandboxSnapshots(sandboxId, xAsciiConfirmDelete)
+> EnvironmentItemChangeResponse deleteEnvironmentVar(environmentId, key, org)
 
-Permanently delete all snapshots of a sandbox
+Remove one environment variable
 
-Accept irreversible deletion of every unpinned snapshot of this sandbox. The sandbox itself and its named snapshots stay. Snapshots disappear from lists, restores and forks immediately; their stored data is purged in the background. Set `X-Ascii-Confirm-Delete` to the sandbox id.
+Removes a single variable. Mints a new immutable version.
 
 ### Example
 
@@ -1885,7 +1990,7 @@ import {
   Configuration,
   BoatApi,
 } from '@boatdev/sdk';
-import type { DeleteSandboxSnapshotsRequest } from '@boatdev/sdk';
+import type { DeleteEnvironmentVarRequest } from '@boatdev/sdk';
 
 async function example() {
   console.log("🚀 Testing @boatdev/sdk SDK...");
@@ -1896,14 +2001,16 @@ async function example() {
   const api = new BoatApi(config);
 
   const body = {
-    // string | Public Sandbox id returned by create/list/get sandbox calls.
-    sandboxId: sandboxId_example,
-    // string | Must exactly equal the target `sandboxId` or `snapshotId`. A missing or mismatched value returns `409` without accepting deletion.
-    xAsciiConfirmDelete: xAsciiConfirmDelete_example,
-  } satisfies DeleteSandboxSnapshotsRequest;
+    // string
+    environmentId: 38400000-8cf0-11bd-b23e-10b96e4ef00d,
+    // string | Environment variable name.
+    key: key_example,
+    // string | Billing wallet for this request: an organization you belong to, by id (`team_…`) or by name as `GET /orgs` lists it (case-insensitive), or `personal`. Omitted, the account\'s active wallet applies (`PATCH /orgs/active`; personal until set). Two organizations sharing the name answer `409 ambiguous_org` and need the id. Sandboxes and snapshots stay creator-private. On `/environments` routes, only this query parameter selects the organization\'s shared environments; the `X-Boat-Org` header and the active wallet do not apply there. Members read them, owners and admins change them. (optional)
+    org: org_example,
+  } satisfies DeleteEnvironmentVarRequest;
 
   try {
-    const data = await api.deleteSandboxSnapshots(body);
+    const data = await api.deleteEnvironmentVar(body);
     console.log(data);
   } catch (error) {
     console.error(error);
@@ -1919,12 +2026,13 @@ example().catch(console.error);
 
 | Name | Type | Description  | Notes |
 |------------- | ------------- | ------------- | -------------|
-| **sandboxId** | `string` | Public Sandbox id returned by create/list/get sandbox calls. | [Defaults to `undefined`] |
-| **xAsciiConfirmDelete** | `string` | Must exactly equal the target `sandboxId` or `snapshotId`. A missing or mismatched value returns `409` without accepting deletion. | [Defaults to `undefined`] |
+| **environmentId** | `string` |  | [Defaults to `undefined`] |
+| **key** | `string` | Environment variable name. | [Defaults to `undefined`] |
+| **org** | `string` | Billing wallet for this request: an organization you belong to, by id (`team_…`) or by name as `GET /orgs` lists it (case-insensitive), or `personal`. Omitted, the account\'s active wallet applies (`PATCH /orgs/active`; personal until set). Two organizations sharing the name answer `409 ambiguous_org` and need the id. Sandboxes and snapshots stay creator-private. On `/environments` routes, only this query parameter selects the organization\'s shared environments; the `X-Boat-Org` header and the active wallet do not apply there. Members read them, owners and admins change them. | [Optional] [Defaults to `undefined`] |
 
 ### Return type
 
-[**DeletionOperationListResponse**](DeletionOperationListResponse.md)
+[**EnvironmentItemChangeResponse**](EnvironmentItemChangeResponse.md)
 
 ### Authorization
 
@@ -1939,22 +2047,20 @@ example().catch(console.error);
 ### HTTP response details
 | Status code | Description | Response headers |
 |-------------|-------------|------------------|
-| **202** | One accepted deletion operation per snapshot. |  -  |
+| **200** | New version minted. |  -  |
 | **401** | Missing or invalid bearer token. |  -  |
-| **403** | Authenticated token is not allowed to perform this action. |  -  |
 | **404** | Resource not found. |  -  |
-| **409** | Request conflicts with current account or sandbox state. |  -  |
 
 [[Back to top]](#) [[Back to API list]](../README.md#api-endpoints) [[Back to Model list]](../README.md#models) [[Back to README]](../README.md)
 
 
-## deleteSnapshot
+## deleteNamedSnapshot
 
-> DeletionOperationResponse deleteSnapshot(snapshotId, xAsciiConfirmDelete)
+> NamedSnapshotDeletedResponse deleteNamedSnapshot(name)
 
-Permanently delete snapshot data
+Remove a named snapshot
 
-Accept irreversible deletion of an unpinned snapshot owned by the authenticated account. Any such snapshot is accepted: it disappears from lists, restores and forks immediately, and its stored data is purged in the background once nothing still reads it (see the operation\'s `stage`). `409` only means `X-Ascii-Confirm-Delete` is missing or wrong.
+Remove a named snapshot and release its storage (`boat snapshot rm <name>` in the CLI). Sandboxes already deployed from it are unaffected.
 
 ### Example
 
@@ -1963,7 +2069,7 @@ import {
   Configuration,
   BoatApi,
 } from '@boatdev/sdk';
-import type { DeleteSnapshotRequest } from '@boatdev/sdk';
+import type { DeleteNamedSnapshotRequest } from '@boatdev/sdk';
 
 async function example() {
   console.log("🚀 Testing @boatdev/sdk SDK...");
@@ -1974,14 +2080,12 @@ async function example() {
   const api = new BoatApi(config);
 
   const body = {
-    // string | Snapshot id returned by the snapshot list/latest calls.
-    snapshotId: 38400000-8cf0-11bd-b23e-10b96e4ef00d,
-    // string | Must exactly equal the target `sandboxId` or `snapshotId`. A missing or mismatched value returns `409` without accepting deletion.
-    xAsciiConfirmDelete: xAsciiConfirmDelete_example,
-  } satisfies DeleteSnapshotRequest;
+    // string
+    name: name_example,
+  } satisfies DeleteNamedSnapshotRequest;
 
   try {
-    const data = await api.deleteSnapshot(body);
+    const data = await api.deleteNamedSnapshot(body);
     console.log(data);
   } catch (error) {
     console.error(error);
@@ -1997,12 +2101,11 @@ example().catch(console.error);
 
 | Name | Type | Description  | Notes |
 |------------- | ------------- | ------------- | -------------|
-| **snapshotId** | `string` | Snapshot id returned by the snapshot list/latest calls. | [Defaults to `undefined`] |
-| **xAsciiConfirmDelete** | `string` | Must exactly equal the target `sandboxId` or `snapshotId`. A missing or mismatched value returns `409` without accepting deletion. | [Defaults to `undefined`] |
+| **name** | `string` |  | [Defaults to `undefined`] |
 
 ### Return type
 
-[**DeletionOperationResponse**](DeletionOperationResponse.md)
+[**NamedSnapshotDeletedResponse**](NamedSnapshotDeletedResponse.md)
 
 ### Authorization
 
@@ -2017,16 +2120,249 @@ example().catch(console.error);
 ### HTTP response details
 | Status code | Description | Response headers |
 |-------------|-------------|------------------|
-| **202** | Deletion confirmed and accepted for background processing. |  -  |
+| **200** | Removed. |  -  |
 | **401** | Missing or invalid bearer token. |  -  |
-| **403** | Authenticated token is not allowed to perform this action. |  -  |
 | **404** | Resource not found. |  -  |
-| **409** | Request conflicts with current account or sandbox state. |  -  |
+| **409** | `save_in_progress`: a save under this name is still running. Wait for it to settle before removing it. |  -  |
 
 [[Back to top]](#) [[Back to API list]](../README.md#api-endpoints) [[Back to Model list]](../README.md#models) [[Back to README]](../README.md)
 
 
-## deleteTelemetry
+## deleteSandbox
+
+> DeletionOperationResponse deleteSandbox(xAsciiConfirmDelete, sandboxId)
+
+Permanently delete sandbox data
+
+Accept irreversible background deletion of the sandbox machine, snapshots, and content-bearing records. This is not archive: the sandbox cannot be resumed. Named snapshots and other shared artifacts remain independent. Poll the returned operation until `completed`.
+
+### Example
+
+```ts
+import {
+  Configuration,
+  BoatApi,
+} from '@boatdev/sdk';
+import type { DeleteSandboxRequest } from '@boatdev/sdk';
+
+async function example() {
+  console.log("🚀 Testing @boatdev/sdk SDK...");
+  const config = new Configuration({ 
+    // Configure HTTP bearer authorization: BoatBearerAuth
+    accessToken: "YOUR BEARER TOKEN",
+  });
+  const api = new BoatApi(config);
+
+  const body = {
+    // string | Must exactly equal the target `sandboxId` or `snapshotId`. A missing or mismatched value returns `409` without accepting deletion.
+    xAsciiConfirmDelete: xAsciiConfirmDelete_example,
+    // string | Public Sandbox id returned by create/list/get sandbox calls.
+    sandboxId: sandboxId_example,
+  } satisfies DeleteSandboxRequest;
+
+  try {
+    const data = await api.deleteSandbox(body);
+    console.log(data);
+  } catch (error) {
+    console.error(error);
+  }
+}
+
+// Run the test
+example().catch(console.error);
+```
+
+### Parameters
+
+
+| Name | Type | Description  | Notes |
+|------------- | ------------- | ------------- | -------------|
+| **xAsciiConfirmDelete** | `string` | Must exactly equal the target `sandboxId` or `snapshotId`. A missing or mismatched value returns `409` without accepting deletion. | [Defaults to `undefined`] |
+| **sandboxId** | `string` | Public Sandbox id returned by create/list/get sandbox calls. | [Defaults to `undefined`] |
+
+### Return type
+
+[**DeletionOperationResponse**](DeletionOperationResponse.md)
+
+### Authorization
+
+[BoatBearerAuth](../README.md#BoatBearerAuth)
+
+### HTTP request headers
+
+- **Content-Type**: Not defined
+- **Accept**: `application/json`
+
+
+### HTTP response details
+| Status code | Description | Response headers |
+|-------------|-------------|------------------|
+| **202** | Deletion confirmed and accepted for background processing. |  -  |
+| **401** | Missing or invalid bearer token. |  -  |
+| **403** | Authenticated token is not allowed to perform this action. |  -  |
+| **404** | Resource not found. |  -  |
+| **409** | Request conflicts with current account or sandbox state. |  -  |
+
+[[Back to top]](#) [[Back to API list]](../README.md#api-endpoints) [[Back to Model list]](../README.md#models) [[Back to README]](../README.md)
+
+
+## deleteSandboxSnapshots
+
+> DeletionOperationListResponse deleteSandboxSnapshots(sandboxId, xAsciiConfirmDelete)
+
+Permanently delete all snapshots of a sandbox
+
+Accept irreversible deletion of every unpinned snapshot of this sandbox. The sandbox itself and its named snapshots stay. Snapshots disappear from lists, restores and forks immediately; their stored data is purged in the background. Set `X-Ascii-Confirm-Delete` to the sandbox id.
+
+### Example
+
+```ts
+import {
+  Configuration,
+  BoatApi,
+} from '@boatdev/sdk';
+import type { DeleteSandboxSnapshotsRequest } from '@boatdev/sdk';
+
+async function example() {
+  console.log("🚀 Testing @boatdev/sdk SDK...");
+  const config = new Configuration({ 
+    // Configure HTTP bearer authorization: BoatBearerAuth
+    accessToken: "YOUR BEARER TOKEN",
+  });
+  const api = new BoatApi(config);
+
+  const body = {
+    // string | Public Sandbox id returned by create/list/get sandbox calls.
+    sandboxId: sandboxId_example,
+    // string | Must exactly equal the target `sandboxId` or `snapshotId`. A missing or mismatched value returns `409` without accepting deletion.
+    xAsciiConfirmDelete: xAsciiConfirmDelete_example,
+  } satisfies DeleteSandboxSnapshotsRequest;
+
+  try {
+    const data = await api.deleteSandboxSnapshots(body);
+    console.log(data);
+  } catch (error) {
+    console.error(error);
+  }
+}
+
+// Run the test
+example().catch(console.error);
+```
+
+### Parameters
+
+
+| Name | Type | Description  | Notes |
+|------------- | ------------- | ------------- | -------------|
+| **sandboxId** | `string` | Public Sandbox id returned by create/list/get sandbox calls. | [Defaults to `undefined`] |
+| **xAsciiConfirmDelete** | `string` | Must exactly equal the target `sandboxId` or `snapshotId`. A missing or mismatched value returns `409` without accepting deletion. | [Defaults to `undefined`] |
+
+### Return type
+
+[**DeletionOperationListResponse**](DeletionOperationListResponse.md)
+
+### Authorization
+
+[BoatBearerAuth](../README.md#BoatBearerAuth)
+
+### HTTP request headers
+
+- **Content-Type**: Not defined
+- **Accept**: `application/json`
+
+
+### HTTP response details
+| Status code | Description | Response headers |
+|-------------|-------------|------------------|
+| **202** | One accepted deletion operation per snapshot. |  -  |
+| **401** | Missing or invalid bearer token. |  -  |
+| **403** | Authenticated token is not allowed to perform this action. |  -  |
+| **404** | Resource not found. |  -  |
+| **409** | Request conflicts with current account or sandbox state. |  -  |
+
+[[Back to top]](#) [[Back to API list]](../README.md#api-endpoints) [[Back to Model list]](../README.md#models) [[Back to README]](../README.md)
+
+
+## deleteSnapshot
+
+> DeletionOperationResponse deleteSnapshot(snapshotId, xAsciiConfirmDelete)
+
+Permanently delete snapshot data
+
+Accept irreversible deletion of an unpinned snapshot owned by the authenticated account. Any such snapshot is accepted: it disappears from lists, restores and forks immediately, and its stored data is purged in the background once nothing still reads it (see the operation\'s `stage`). `409` only means `X-Ascii-Confirm-Delete` is missing or wrong.
+
+### Example
+
+```ts
+import {
+  Configuration,
+  BoatApi,
+} from '@boatdev/sdk';
+import type { DeleteSnapshotRequest } from '@boatdev/sdk';
+
+async function example() {
+  console.log("🚀 Testing @boatdev/sdk SDK...");
+  const config = new Configuration({ 
+    // Configure HTTP bearer authorization: BoatBearerAuth
+    accessToken: "YOUR BEARER TOKEN",
+  });
+  const api = new BoatApi(config);
+
+  const body = {
+    // string | Snapshot id returned by the snapshot list/latest calls.
+    snapshotId: 38400000-8cf0-11bd-b23e-10b96e4ef00d,
+    // string | Must exactly equal the target `sandboxId` or `snapshotId`. A missing or mismatched value returns `409` without accepting deletion.
+    xAsciiConfirmDelete: xAsciiConfirmDelete_example,
+  } satisfies DeleteSnapshotRequest;
+
+  try {
+    const data = await api.deleteSnapshot(body);
+    console.log(data);
+  } catch (error) {
+    console.error(error);
+  }
+}
+
+// Run the test
+example().catch(console.error);
+```
+
+### Parameters
+
+
+| Name | Type | Description  | Notes |
+|------------- | ------------- | ------------- | -------------|
+| **snapshotId** | `string` | Snapshot id returned by the snapshot list/latest calls. | [Defaults to `undefined`] |
+| **xAsciiConfirmDelete** | `string` | Must exactly equal the target `sandboxId` or `snapshotId`. A missing or mismatched value returns `409` without accepting deletion. | [Defaults to `undefined`] |
+
+### Return type
+
+[**DeletionOperationResponse**](DeletionOperationResponse.md)
+
+### Authorization
+
+[BoatBearerAuth](../README.md#BoatBearerAuth)
+
+### HTTP request headers
+
+- **Content-Type**: Not defined
+- **Accept**: `application/json`
+
+
+### HTTP response details
+| Status code | Description | Response headers |
+|-------------|-------------|------------------|
+| **202** | Deletion confirmed and accepted for background processing. |  -  |
+| **401** | Missing or invalid bearer token. |  -  |
+| **403** | Authenticated token is not allowed to perform this action. |  -  |
+| **404** | Resource not found. |  -  |
+| **409** | Request conflicts with current account or sandbox state. |  -  |
+
+[[Back to top]](#) [[Back to API list]](../README.md#api-endpoints) [[Back to Model list]](../README.md#models) [[Back to README]](../README.md)
+
+
+## deleteTelemetry
 
 > TelemetryResponse deleteTelemetry()
 
@@ -2250,7 +2586,7 @@ example().catch(console.error);
 
 ## environments
 
-> SandboxEnvironmentListResponse environments()
+> SandboxEnvironmentListResponse environments(org)
 
 List Sandbox environments
 
@@ -2273,8 +2609,13 @@ async function example() {
   });
   const api = new BoatApi(config);
 
+  const body = {
+    // string | Billing wallet for this request: an organization you belong to, by id (`team_…`) or by name as `GET /orgs` lists it (case-insensitive), or `personal`. Omitted, the account\'s active wallet applies (`PATCH /orgs/active`; personal until set). Two organizations sharing the name answer `409 ambiguous_org` and need the id. Sandboxes and snapshots stay creator-private. On `/environments` routes, only this query parameter selects the organization\'s shared environments; the `X-Boat-Org` header and the active wallet do not apply there. Members read them, owners and admins change them. (optional)
+    org: org_example,
+  } satisfies EnvironmentsRequest;
+
   try {
-    const data = await api.environments();
+    const data = await api.environments(body);
     console.log(data);
   } catch (error) {
     console.error(error);
@@ -2287,7 +2628,10 @@ example().catch(console.error);
 
 ### Parameters
 
-This endpoint does not need any parameter.
+
+| Name | Type | Description  | Notes |
+|------------- | ------------- | ------------- | -------------|
+| **org** | `string` | Billing wallet for this request: an organization you belong to, by id (`team_…`) or by name as `GET /orgs` lists it (case-insensitive), or `personal`. Omitted, the account\'s active wallet applies (`PATCH /orgs/active`; personal until set). Two organizations sharing the name answer `409 ambiguous_org` and need the id. Sandboxes and snapshots stay creator-private. On `/environments` routes, only this query parameter selects the organization\'s shared environments; the `X-Boat-Org` header and the active wallet do not apply there. Members read them, owners and admins change them. | [Optional] [Defaults to `undefined`] |
 
 ### Return type
 
@@ -2557,6 +2901,162 @@ example().catch(console.error);
 [[Back to top]](#) [[Back to API list]](../README.md#api-endpoints) [[Back to Model list]](../README.md#models) [[Back to README]](../README.md)
 
 
+## getAiProxy
+
+> AiProxySettings getAiProxy(org, xBoatOrg)
+
+Get AI credentials proxy
+
+Returns the AI credentials proxy switch of the account in scope, a person or an organization, with its price. Needs an API key with `account.admin`.
+
+### Example
+
+```ts
+import {
+  Configuration,
+  BoatApi,
+} from '@boatdev/sdk';
+import type { GetAiProxyRequest } from '@boatdev/sdk';
+
+async function example() {
+  console.log("🚀 Testing @boatdev/sdk SDK...");
+  const config = new Configuration({ 
+    // Configure HTTP bearer authorization: BoatBearerAuth
+    accessToken: "YOUR BEARER TOKEN",
+  });
+  const api = new BoatApi(config);
+
+  const body = {
+    // string | Billing wallet for this request: an organization you belong to, by id (`team_…`) or by name as `GET /orgs` lists it (case-insensitive), or `personal`. Omitted, the account\'s active wallet applies (`PATCH /orgs/active`; personal until set). Two organizations sharing the name answer `409 ambiguous_org` and need the id. Sandboxes and snapshots stay creator-private. On `/environments` routes, only this query parameter selects the organization\'s shared environments; the `X-Boat-Org` header and the active wallet do not apply there. Members read them, owners and admins change them. (optional)
+    org: org_example,
+    // string | Same as the `org` query parameter. Query wins when both are set. (optional)
+    xBoatOrg: xBoatOrg_example,
+  } satisfies GetAiProxyRequest;
+
+  try {
+    const data = await api.getAiProxy(body);
+    console.log(data);
+  } catch (error) {
+    console.error(error);
+  }
+}
+
+// Run the test
+example().catch(console.error);
+```
+
+### Parameters
+
+
+| Name | Type | Description  | Notes |
+|------------- | ------------- | ------------- | -------------|
+| **org** | `string` | Billing wallet for this request: an organization you belong to, by id (`team_…`) or by name as `GET /orgs` lists it (case-insensitive), or `personal`. Omitted, the account\'s active wallet applies (`PATCH /orgs/active`; personal until set). Two organizations sharing the name answer `409 ambiguous_org` and need the id. Sandboxes and snapshots stay creator-private. On `/environments` routes, only this query parameter selects the organization\'s shared environments; the `X-Boat-Org` header and the active wallet do not apply there. Members read them, owners and admins change them. | [Optional] [Defaults to `undefined`] |
+| **xBoatOrg** | `string` | Same as the `org` query parameter. Query wins when both are set. | [Optional] [Defaults to `undefined`] |
+
+### Return type
+
+[**AiProxySettings**](AiProxySettings.md)
+
+### Authorization
+
+[BoatBearerAuth](../README.md#BoatBearerAuth)
+
+### HTTP request headers
+
+- **Content-Type**: Not defined
+- **Accept**: `application/json`
+
+
+### HTTP response details
+| Status code | Description | Response headers |
+|-------------|-------------|------------------|
+| **200** | The switch and its price. |  -  |
+| **401** | Missing or invalid bearer token. |  -  |
+
+[[Back to top]](#) [[Back to API list]](../README.md#api-endpoints) [[Back to Model list]](../README.md#models) [[Back to README]](../README.md)
+
+
+## getAiUsage
+
+> AccountAiUsageResponse getAiUsage(days, profile, org, xBoatOrg)
+
+Get AI usage
+
+Proxied AI usage, per sandbox and in total, per UTC day, credential and model. Without `profile`, the usage charged to the wallet in scope. With `profile`, the requests made with that profile\'s credentials, whoever pays; only its managers can read it. Needs an API key with `account.read`.
+
+### Example
+
+```ts
+import {
+  Configuration,
+  BoatApi,
+} from '@boatdev/sdk';
+import type { GetAiUsageRequest } from '@boatdev/sdk';
+
+async function example() {
+  console.log("🚀 Testing @boatdev/sdk SDK...");
+  const config = new Configuration({ 
+    // Configure HTTP bearer authorization: BoatBearerAuth
+    accessToken: "YOUR BEARER TOKEN",
+  });
+  const api = new BoatApi(config);
+
+  const body = {
+    // number | Days of history, today included. (optional)
+    days: 56,
+    // string | A credential profile id. Counts that profile\'s requests instead of a wallet\'s. (optional)
+    profile: profile_example,
+    // string | Billing wallet for this request: an organization you belong to, by id (`team_…`) or by name as `GET /orgs` lists it (case-insensitive), or `personal`. Omitted, the account\'s active wallet applies (`PATCH /orgs/active`; personal until set). Two organizations sharing the name answer `409 ambiguous_org` and need the id. Sandboxes and snapshots stay creator-private. On `/environments` routes, only this query parameter selects the organization\'s shared environments; the `X-Boat-Org` header and the active wallet do not apply there. Members read them, owners and admins change them. (optional)
+    org: org_example,
+    // string | Same as the `org` query parameter. Query wins when both are set. (optional)
+    xBoatOrg: xBoatOrg_example,
+  } satisfies GetAiUsageRequest;
+
+  try {
+    const data = await api.getAiUsage(body);
+    console.log(data);
+  } catch (error) {
+    console.error(error);
+  }
+}
+
+// Run the test
+example().catch(console.error);
+```
+
+### Parameters
+
+
+| Name | Type | Description  | Notes |
+|------------- | ------------- | ------------- | -------------|
+| **days** | `number` | Days of history, today included. | [Optional] [Defaults to `30`] |
+| **profile** | `string` | A credential profile id. Counts that profile\'s requests instead of a wallet\'s. | [Optional] [Defaults to `undefined`] |
+| **org** | `string` | Billing wallet for this request: an organization you belong to, by id (`team_…`) or by name as `GET /orgs` lists it (case-insensitive), or `personal`. Omitted, the account\'s active wallet applies (`PATCH /orgs/active`; personal until set). Two organizations sharing the name answer `409 ambiguous_org` and need the id. Sandboxes and snapshots stay creator-private. On `/environments` routes, only this query parameter selects the organization\'s shared environments; the `X-Boat-Org` header and the active wallet do not apply there. Members read them, owners and admins change them. | [Optional] [Defaults to `undefined`] |
+| **xBoatOrg** | `string` | Same as the `org` query parameter. Query wins when both are set. | [Optional] [Defaults to `undefined`] |
+
+### Return type
+
+[**AccountAiUsageResponse**](AccountAiUsageResponse.md)
+
+### Authorization
+
+[BoatBearerAuth](../README.md#BoatBearerAuth)
+
+### HTTP request headers
+
+- **Content-Type**: Not defined
+- **Accept**: `application/json`
+
+
+### HTTP response details
+| Status code | Description | Response headers |
+|-------------|-------------|------------------|
+| **200** | The usage. |  -  |
+| **401** | Missing or invalid bearer token. |  -  |
+
+[[Back to top]](#) [[Back to API list]](../README.md#api-endpoints) [[Back to Model list]](../README.md#models) [[Back to README]](../README.md)
+
+
 ## getCommand
 
 > CommandInfoResponse getCommand(sandboxId, commandId)
@@ -2913,6 +3413,82 @@ example().catch(console.error);
 [[Back to top]](#) [[Back to API list]](../README.md#api-endpoints) [[Back to Model list]](../README.md#models) [[Back to README]](../README.md)
 
 
+## getSandboxAiUsage
+
+> SandboxAiUsageResponse getSandboxAiUsage(sandboxId, days)
+
+Get sandbox AI usage
+
+One sandbox\'s proxied AI usage per UTC day, credential and model, and whether it is blocked. Needs an API key with `box.read` on the sandbox.
+
+### Example
+
+```ts
+import {
+  Configuration,
+  BoatApi,
+} from '@boatdev/sdk';
+import type { GetSandboxAiUsageRequest } from '@boatdev/sdk';
+
+async function example() {
+  console.log("🚀 Testing @boatdev/sdk SDK...");
+  const config = new Configuration({ 
+    // Configure HTTP bearer authorization: BoatBearerAuth
+    accessToken: "YOUR BEARER TOKEN",
+  });
+  const api = new BoatApi(config);
+
+  const body = {
+    // string | Public Sandbox id returned by create/list/get sandbox calls.
+    sandboxId: sandboxId_example,
+    // number | Days of history, today included. (optional)
+    days: 56,
+  } satisfies GetSandboxAiUsageRequest;
+
+  try {
+    const data = await api.getSandboxAiUsage(body);
+    console.log(data);
+  } catch (error) {
+    console.error(error);
+  }
+}
+
+// Run the test
+example().catch(console.error);
+```
+
+### Parameters
+
+
+| Name | Type | Description  | Notes |
+|------------- | ------------- | ------------- | -------------|
+| **sandboxId** | `string` | Public Sandbox id returned by create/list/get sandbox calls. | [Defaults to `undefined`] |
+| **days** | `number` | Days of history, today included. | [Optional] [Defaults to `30`] |
+
+### Return type
+
+[**SandboxAiUsageResponse**](SandboxAiUsageResponse.md)
+
+### Authorization
+
+[BoatBearerAuth](../README.md#BoatBearerAuth)
+
+### HTTP request headers
+
+- **Content-Type**: Not defined
+- **Accept**: `application/json`
+
+
+### HTTP response details
+| Status code | Description | Response headers |
+|-------------|-------------|------------------|
+| **200** | The usage. |  -  |
+| **401** | Missing or invalid bearer token. |  -  |
+| **404** | Resource not found. |  -  |
+
+[[Back to top]](#) [[Back to API list]](../README.md#api-endpoints) [[Back to Model list]](../README.md#models) [[Back to README]](../README.md)
+
+
 ## getSnapshotDownload
 
 > SnapshotDownloadResponse getSnapshotDownload(snapshotId)
@@ -3460,7 +4036,87 @@ async function example() {
   } satisfies InterruptRequest;
 
   try {
-    const data = await api.interrupt(body);
+    const data = await api.interrupt(body);
+    console.log(data);
+  } catch (error) {
+    console.error(error);
+  }
+}
+
+// Run the test
+example().catch(console.error);
+```
+
+### Parameters
+
+
+| Name | Type | Description  | Notes |
+|------------- | ------------- | ------------- | -------------|
+| **sandboxId** | `string` | Public Sandbox id returned by create/list/get sandbox calls. | [Defaults to `undefined`] |
+| **conversation** | `string` | Interrupt only this conversation id. Omit to interrupt the whole sandbox. | [Optional] [Defaults to `undefined`] |
+
+### Return type
+
+[**SandboxActionResponse**](SandboxActionResponse.md)
+
+### Authorization
+
+[BoatBearerAuth](../README.md#BoatBearerAuth)
+
+### HTTP request headers
+
+- **Content-Type**: Not defined
+- **Accept**: `application/json`
+
+
+### HTTP response details
+| Status code | Description | Response headers |
+|-------------|-------------|------------------|
+| **200** | Interrupt requested. |  -  |
+| **401** | Missing or invalid bearer token. |  -  |
+| **402** | Account cannot currently create or operate sandboxes. The error body may include a dashboard billing URL, but billing actions are not part of the v1 API. |  -  |
+| **404** | Resource not found. |  -  |
+| **409** | Request conflicts with current account or sandbox state. |  -  |
+
+[[Back to top]](#) [[Back to API list]](../README.md#api-endpoints) [[Back to Model list]](../README.md#models) [[Back to README]](../README.md)
+
+
+## limits
+
+> LimitsResponse limits(org, xBoatOrg, teamId)
+
+Get Boat limits
+
+Check remaining machine starts, compute time, credits, access readiness, and concurrent-sandbox capacity for the wallet a create would bill: the `org` / `X-Boat-Org` you pass (id or name), else the account\'s active wallet, else personal. The response carries `teamId` when an organization wallet was read.
+
+### Example
+
+```ts
+import {
+  Configuration,
+  BoatApi,
+} from '@boatdev/sdk';
+import type { LimitsRequest } from '@boatdev/sdk';
+
+async function example() {
+  console.log("🚀 Testing @boatdev/sdk SDK...");
+  const config = new Configuration({ 
+    // Configure HTTP bearer authorization: BoatBearerAuth
+    accessToken: "YOUR BEARER TOKEN",
+  });
+  const api = new BoatApi(config);
+
+  const body = {
+    // string | Billing wallet for this request: an organization you belong to, by id (`team_…`) or by name as `GET /orgs` lists it (case-insensitive), or `personal`. Omitted, the account\'s active wallet applies (`PATCH /orgs/active`; personal until set). Two organizations sharing the name answer `409 ambiguous_org` and need the id. Sandboxes and snapshots stay creator-private. On `/environments` routes, only this query parameter selects the organization\'s shared environments; the `X-Boat-Org` header and the active wallet do not apply there. Members read them, owners and admins change them. (optional)
+    org: org_example,
+    // string | Same as the `org` query parameter. Query wins when both are set. (optional)
+    xBoatOrg: xBoatOrg_example,
+    // string | Legacy alias for `org`. Takes precedence over `org` / `X-Boat-Org` when set. (optional)
+    teamId: teamId_example,
+  } satisfies LimitsRequest;
+
+  try {
+    const data = await api.limits(body);
     console.log(data);
   } catch (error) {
     console.error(error);
@@ -3476,12 +4132,13 @@ example().catch(console.error);
 
 | Name | Type | Description  | Notes |
 |------------- | ------------- | ------------- | -------------|
-| **sandboxId** | `string` | Public Sandbox id returned by create/list/get sandbox calls. | [Defaults to `undefined`] |
-| **conversation** | `string` | Interrupt only this conversation id. Omit to interrupt the whole sandbox. | [Optional] [Defaults to `undefined`] |
+| **org** | `string` | Billing wallet for this request: an organization you belong to, by id (`team_…`) or by name as `GET /orgs` lists it (case-insensitive), or `personal`. Omitted, the account\'s active wallet applies (`PATCH /orgs/active`; personal until set). Two organizations sharing the name answer `409 ambiguous_org` and need the id. Sandboxes and snapshots stay creator-private. On `/environments` routes, only this query parameter selects the organization\'s shared environments; the `X-Boat-Org` header and the active wallet do not apply there. Members read them, owners and admins change them. | [Optional] [Defaults to `undefined`] |
+| **xBoatOrg** | `string` | Same as the `org` query parameter. Query wins when both are set. | [Optional] [Defaults to `undefined`] |
+| **teamId** | `string` | Legacy alias for `org`. Takes precedence over `org` / `X-Boat-Org` when set. | [Optional] [Defaults to `undefined`] |
 
 ### Return type
 
-[**SandboxActionResponse**](SandboxActionResponse.md)
+[**LimitsResponse**](LimitsResponse.md)
 
 ### Authorization
 
@@ -3496,22 +4153,19 @@ example().catch(console.error);
 ### HTTP response details
 | Status code | Description | Response headers |
 |-------------|-------------|------------------|
-| **200** | Interrupt requested. |  -  |
+| **200** | Current creation and concurrent-boat limits. |  -  |
 | **401** | Missing or invalid bearer token. |  -  |
-| **402** | Account cannot currently create or operate sandboxes. The error body may include a dashboard billing URL, but billing actions are not part of the v1 API. |  -  |
-| **404** | Resource not found. |  -  |
-| **409** | Request conflicts with current account or sandbox state. |  -  |
 
 [[Back to top]](#) [[Back to API list]](../README.md#api-endpoints) [[Back to Model list]](../README.md#models) [[Back to README]](../README.md)
 
 
-## limits
+## listCredentialProfiles
 
-> LimitsResponse limits(org, xBoatOrg, teamId)
+> CredentialProfileListResponse listCredentialProfiles()
 
-Get Boat limits
+List credential profiles
 
-Check remaining machine starts, compute time, credits, access readiness, and concurrent-sandbox capacity for the wallet a create would bill: the `org` / `X-Boat-Org` you pass (id or name), else the account\'s active wallet, else personal. The response carries `teamId` when an organization wallet was read.
+Returns every AI credential profile you can use, yours and your organizations\'. Secret values are never returned. Needs an API key with `account.admin`.
 
 ### Example
 
@@ -3520,7 +4174,7 @@ import {
   Configuration,
   BoatApi,
 } from '@boatdev/sdk';
-import type { LimitsRequest } from '@boatdev/sdk';
+import type { ListCredentialProfilesRequest } from '@boatdev/sdk';
 
 async function example() {
   console.log("🚀 Testing @boatdev/sdk SDK...");
@@ -3530,17 +4184,8 @@ async function example() {
   });
   const api = new BoatApi(config);
 
-  const body = {
-    // string | Billing wallet for this request: an organization you belong to, by id (`team_…`) or by name as `GET /orgs` lists it (case-insensitive), or `personal`. Omitted, the account\'s active wallet applies (`PATCH /orgs/active`; personal until set). Two organizations sharing the name answer `409 ambiguous_org` and need the id. Sandboxes, snapshots, and environments stay creator-private. (optional)
-    org: org_example,
-    // string | Same as the `org` query parameter. Query wins when both are set. (optional)
-    xBoatOrg: xBoatOrg_example,
-    // string | Legacy alias for `org`. Takes precedence over `org` / `X-Boat-Org` when set. (optional)
-    teamId: teamId_example,
-  } satisfies LimitsRequest;
-
   try {
-    const data = await api.limits(body);
+    const data = await api.listCredentialProfiles();
     console.log(data);
   } catch (error) {
     console.error(error);
@@ -3553,16 +4198,11 @@ example().catch(console.error);
 
 ### Parameters
 
-
-| Name | Type | Description  | Notes |
-|------------- | ------------- | ------------- | -------------|
-| **org** | `string` | Billing wallet for this request: an organization you belong to, by id (`team_…`) or by name as `GET /orgs` lists it (case-insensitive), or `personal`. Omitted, the account\'s active wallet applies (`PATCH /orgs/active`; personal until set). Two organizations sharing the name answer `409 ambiguous_org` and need the id. Sandboxes, snapshots, and environments stay creator-private. | [Optional] [Defaults to `undefined`] |
-| **xBoatOrg** | `string` | Same as the `org` query parameter. Query wins when both are set. | [Optional] [Defaults to `undefined`] |
-| **teamId** | `string` | Legacy alias for `org`. Takes precedence over `org` / `X-Boat-Org` when set. | [Optional] [Defaults to `undefined`] |
+This endpoint does not need any parameter.
 
 ### Return type
 
-[**LimitsResponse**](LimitsResponse.md)
+[**CredentialProfileListResponse**](CredentialProfileListResponse.md)
 
 ### Authorization
 
@@ -3577,7 +4217,7 @@ example().catch(console.error);
 ### HTTP response details
 | Status code | Description | Response headers |
 |-------------|-------------|------------------|
-| **200** | Current creation and concurrent-boat limits. |  -  |
+| **200** | The profiles. |  -  |
 | **401** | Missing or invalid bearer token. |  -  |
 
 [[Back to top]](#) [[Back to API list]](../README.md#api-endpoints) [[Back to Model list]](../README.md#models) [[Back to README]](../README.md)
@@ -4944,7 +5584,7 @@ async function example() {
   const api = new BoatApi(config);
 
   const body = {
-    // string | Billing wallet for this request: an organization you belong to, by id (`team_…`) or by name as `GET /orgs` lists it (case-insensitive), or `personal`. Omitted, the account\'s active wallet applies (`PATCH /orgs/active`; personal until set). Two organizations sharing the name answer `409 ambiguous_org` and need the id. Sandboxes, snapshots, and environments stay creator-private. (optional)
+    // string | Billing wallet for this request: an organization you belong to, by id (`team_…`) or by name as `GET /orgs` lists it (case-insensitive), or `personal`. Omitted, the account\'s active wallet applies (`PATCH /orgs/active`; personal until set). Two organizations sharing the name answer `409 ambiguous_org` and need the id. Sandboxes and snapshots stay creator-private. On `/environments` routes, only this query parameter selects the organization\'s shared environments; the `X-Boat-Org` header and the active wallet do not apply there. Members read them, owners and admins change them. (optional)
     org: org_example,
     // string | Same as the `org` query parameter. Query wins when both are set. (optional)
     xBoatOrg: xBoatOrg_example,
@@ -4975,7 +5615,7 @@ example().catch(console.error);
 
 | Name | Type | Description  | Notes |
 |------------- | ------------- | ------------- | -------------|
-| **org** | `string` | Billing wallet for this request: an organization you belong to, by id (`team_…`) or by name as `GET /orgs` lists it (case-insensitive), or `personal`. Omitted, the account\'s active wallet applies (`PATCH /orgs/active`; personal until set). Two organizations sharing the name answer `409 ambiguous_org` and need the id. Sandboxes, snapshots, and environments stay creator-private. | [Optional] [Defaults to `undefined`] |
+| **org** | `string` | Billing wallet for this request: an organization you belong to, by id (`team_…`) or by name as `GET /orgs` lists it (case-insensitive), or `personal`. Omitted, the account\'s active wallet applies (`PATCH /orgs/active`; personal until set). Two organizations sharing the name answer `409 ambiguous_org` and need the id. Sandboxes and snapshots stay creator-private. On `/environments` routes, only this query parameter selects the organization\'s shared environments; the `X-Boat-Org` header and the active wallet do not apply there. Members read them, owners and admins change them. | [Optional] [Defaults to `undefined`] |
 | **xBoatOrg** | `string` | Same as the `org` query parameter. Query wins when both are set. | [Optional] [Defaults to `undefined`] |
 | **limit** | `number` | Maximum items to return. | [Optional] [Defaults to `100`] |
 | **cursor** | `string` | Opaque pagination cursor returned as `pageInfo.nextCursor`. | [Optional] [Defaults to `undefined`] |
@@ -5036,7 +5676,221 @@ async function example() {
   } satisfies SaveNamedSnapshotRequest;
 
   try {
-    const data = await api.saveNamedSnapshot(body);
+    const data = await api.saveNamedSnapshot(body);
+    console.log(data);
+  } catch (error) {
+    console.error(error);
+  }
+}
+
+// Run the test
+example().catch(console.error);
+```
+
+### Parameters
+
+
+| Name | Type | Description  | Notes |
+|------------- | ------------- | ------------- | -------------|
+| **namedSnapshotSaveRequest** | [NamedSnapshotSaveRequest](NamedSnapshotSaveRequest.md) |  | |
+
+### Return type
+
+[**NamedSnapshotSavingResponse**](NamedSnapshotSavingResponse.md)
+
+### Authorization
+
+[BoatBearerAuth](../README.md#BoatBearerAuth)
+
+### HTTP request headers
+
+- **Content-Type**: `application/json`
+- **Accept**: `application/json`
+
+
+### HTTP response details
+| Status code | Description | Response headers |
+|-------------|-------------|------------------|
+| **202** | Save accepted and running in the background. |  -  |
+| **400** | Invalid request body or parameters. |  -  |
+| **401** | Missing or invalid bearer token. |  -  |
+| **404** | Resource not found. |  -  |
+| **402** | `credit_required`: the wallet already keeps 10 or more named snapshots and has no credit left. Each named snapshot above the free 10 costs $1.70 a month, charged daily. Add credit or remove one. |  -  |
+| **409** | `save_in_progress` when a save under this name is already running; wait for it to settle rather than retrying immediately. |  -  |
+
+[[Back to top]](#) [[Back to API list]](../README.md#api-endpoints) [[Back to Model list]](../README.md#models) [[Back to README]](../README.md)
+
+
+## secrets
+
+> SecretsResponse secrets()
+
+Get Boat secrets setup
+
+Returns the environment variables and secret files configured for sandboxes.
+
+### Example
+
+```ts
+import {
+  Configuration,
+  BoatApi,
+} from '@boatdev/sdk';
+import type { SecretsRequest } from '@boatdev/sdk';
+
+async function example() {
+  console.log("🚀 Testing @boatdev/sdk SDK...");
+  const config = new Configuration({ 
+    // Configure HTTP bearer authorization: BoatBearerAuth
+    accessToken: "YOUR BEARER TOKEN",
+  });
+  const api = new BoatApi(config);
+
+  try {
+    const data = await api.secrets();
+    console.log(data);
+  } catch (error) {
+    console.error(error);
+  }
+}
+
+// Run the test
+example().catch(console.error);
+```
+
+### Parameters
+
+This endpoint does not need any parameter.
+
+### Return type
+
+[**SecretsResponse**](SecretsResponse.md)
+
+### Authorization
+
+[BoatBearerAuth](../README.md#BoatBearerAuth)
+
+### HTTP request headers
+
+- **Content-Type**: Not defined
+- **Accept**: `application/json`
+
+
+### HTTP response details
+| Status code | Description | Response headers |
+|-------------|-------------|------------------|
+| **200** | Current secret setup metadata. |  -  |
+| **401** | Missing or invalid bearer token. |  -  |
+
+[[Back to top]](#) [[Back to API list]](../README.md#api-endpoints) [[Back to Model list]](../README.md#models) [[Back to README]](../README.md)
+
+
+## selectRepo
+
+> RepoSelectionResponse selectRepo(repoSelectionRequest)
+
+Select repository for sandboxes
+
+Idempotently selects one repository for the sandbox environment. Use `databaseId` from `GET /repos` as `repositoryId`; selecting an already-selected repository updates its `baseBranch`.
+
+### Example
+
+```ts
+import {
+  Configuration,
+  BoatApi,
+} from '@boatdev/sdk';
+import type { SelectRepoRequest } from '@boatdev/sdk';
+
+async function example() {
+  console.log("🚀 Testing @boatdev/sdk SDK...");
+  const config = new Configuration({ 
+    // Configure HTTP bearer authorization: BoatBearerAuth
+    accessToken: "YOUR BEARER TOKEN",
+  });
+  const api = new BoatApi(config);
+
+  const body = {
+    // RepoSelectionRequest
+    repoSelectionRequest: ...,
+  } satisfies SelectRepoRequest;
+
+  try {
+    const data = await api.selectRepo(body);
+    console.log(data);
+  } catch (error) {
+    console.error(error);
+  }
+}
+
+// Run the test
+example().catch(console.error);
+```
+
+### Parameters
+
+
+| Name | Type | Description  | Notes |
+|------------- | ------------- | ------------- | -------------|
+| **repoSelectionRequest** | [RepoSelectionRequest](RepoSelectionRequest.md) |  | |
+
+### Return type
+
+[**RepoSelectionResponse**](RepoSelectionResponse.md)
+
+### Authorization
+
+[BoatBearerAuth](../README.md#BoatBearerAuth)
+
+### HTTP request headers
+
+- **Content-Type**: `application/json`
+- **Accept**: `application/json`
+
+
+### HTTP response details
+| Status code | Description | Response headers |
+|-------------|-------------|------------------|
+| **200** | Updated repository selection. |  -  |
+| **400** | Invalid request body or parameters. |  -  |
+| **401** | Missing or invalid bearer token. |  -  |
+| **409** | Request conflicts with current account or sandbox state. |  -  |
+
+[[Back to top]](#) [[Back to API list]](../README.md#api-endpoints) [[Back to Model list]](../README.md#models) [[Back to README]](../README.md)
+
+
+## setActiveOrganization
+
+> ActiveOrgResponse setActiveOrganization(activeOrgUpdateRequest)
+
+Set the active organization
+
+Set the wallet new sandboxes bill when a request names none, for this account on every client: the API, the CLI (`boat org switch` sets the same value) and the dashboard. Pass an organization id or name you belong to, or `personal` (or `null`) for your own account. `GET /limits` follows it. Sandboxes already running keep the wallet they were created with; leaving or deleting the organization resets the account to personal.
+
+### Example
+
+```ts
+import {
+  Configuration,
+  BoatApi,
+} from '@boatdev/sdk';
+import type { SetActiveOrganizationRequest } from '@boatdev/sdk';
+
+async function example() {
+  console.log("🚀 Testing @boatdev/sdk SDK...");
+  const config = new Configuration({ 
+    // Configure HTTP bearer authorization: BoatBearerAuth
+    accessToken: "YOUR BEARER TOKEN",
+  });
+  const api = new BoatApi(config);
+
+  const body = {
+    // ActiveOrgUpdateRequest
+    activeOrgUpdateRequest: {"org":"acme"},
+  } satisfies SetActiveOrganizationRequest;
+
+  try {
+    const data = await api.setActiveOrganization(body);
     console.log(data);
   } catch (error) {
     console.error(error);
@@ -5052,11 +5906,11 @@ example().catch(console.error);
 
 | Name | Type | Description  | Notes |
 |------------- | ------------- | ------------- | -------------|
-| **namedSnapshotSaveRequest** | [NamedSnapshotSaveRequest](NamedSnapshotSaveRequest.md) |  | |
+| **activeOrgUpdateRequest** | [ActiveOrgUpdateRequest](ActiveOrgUpdateRequest.md) |  | |
 
 ### Return type
 
-[**NamedSnapshotSavingResponse**](NamedSnapshotSavingResponse.md)
+[**ActiveOrgResponse**](ActiveOrgResponse.md)
 
 ### Authorization
 
@@ -5071,23 +5925,22 @@ example().catch(console.error);
 ### HTTP response details
 | Status code | Description | Response headers |
 |-------------|-------------|------------------|
-| **202** | Save accepted and running in the background. |  -  |
+| **200** | The wallet now active. |  -  |
 | **400** | Invalid request body or parameters. |  -  |
 | **401** | Missing or invalid bearer token. |  -  |
-| **404** | Resource not found. |  -  |
-| **402** | `credit_required`: the wallet already keeps 10 or more named snapshots and has no credit left. Each named snapshot above the free 10 costs $1.70 a month, charged daily. Add credit or remove one. |  -  |
-| **409** | `save_in_progress` when a save under this name is already running; wait for it to settle rather than retrying immediately. |  -  |
+| **403** | `not_org_member`: no organization with that id or name that you belong to. |  -  |
+| **409** | `ambiguous_org`: several of your organizations share that name; pass the id. |  -  |
 
 [[Back to top]](#) [[Back to API list]](../README.md#api-endpoints) [[Back to Model list]](../README.md#models) [[Back to README]](../README.md)
 
 
-## secrets
+## setCredentialProfileCustomApi
 
-> SecretsResponse secrets()
+> CredentialProfileResponse setCredentialProfileCustomApi(profile, name, setCustomApiRequest)
 
-Get Boat secrets setup
+Set a custom API
 
-Returns the environment variables and secret files configured for sandboxes.
+Adds or replaces one custom API. The sandbox gets `<NAME>` and `<NAME>_BASE_URL`. Needs an API key with `account.admin`.
 
 ### Example
 
@@ -5096,7 +5949,7 @@ import {
   Configuration,
   BoatApi,
 } from '@boatdev/sdk';
-import type { SecretsRequest } from '@boatdev/sdk';
+import type { SetCredentialProfileCustomApiRequest } from '@boatdev/sdk';
 
 async function example() {
   console.log("🚀 Testing @boatdev/sdk SDK...");
@@ -5106,8 +5959,17 @@ async function example() {
   });
   const api = new BoatApi(config);
 
+  const body = {
+    // string | Profile id or name.
+    profile: profile_example,
+    // string | Environment variable name of the custom API, for example `STRIPE_KEY`. Provider names (`ANTHROPIC_*`, `OPENAI_*`, and so on) and names that end in `_BASE_URL` are reserved.
+    name: name_example,
+    // SetCustomApiRequest
+    setCustomApiRequest: {"value":"sk_live_123","baseUrl":"https://api.stripe.com/v1"},
+  } satisfies SetCredentialProfileCustomApiRequest;
+
   try {
-    const data = await api.secrets();
+    const data = await api.setCredentialProfileCustomApi(body);
     console.log(data);
   } catch (error) {
     console.error(error);
@@ -5120,11 +5982,16 @@ example().catch(console.error);
 
 ### Parameters
 
-This endpoint does not need any parameter.
+
+| Name | Type | Description  | Notes |
+|------------- | ------------- | ------------- | -------------|
+| **profile** | `string` | Profile id or name. | [Defaults to `undefined`] |
+| **name** | `string` | Environment variable name of the custom API, for example `STRIPE_KEY`. Provider names (`ANTHROPIC_*`, `OPENAI_*`, and so on) and names that end in `_BASE_URL` are reserved. | [Defaults to `undefined`] |
+| **setCustomApiRequest** | [SetCustomApiRequest](SetCustomApiRequest.md) |  | |
 
 ### Return type
 
-[**SecretsResponse**](SecretsResponse.md)
+[**CredentialProfileResponse**](CredentialProfileResponse.md)
 
 ### Authorization
 
@@ -5132,26 +5999,29 @@ This endpoint does not need any parameter.
 
 ### HTTP request headers
 
-- **Content-Type**: Not defined
+- **Content-Type**: `application/json`
 - **Accept**: `application/json`
 
 
 ### HTTP response details
 | Status code | Description | Response headers |
 |-------------|-------------|------------------|
-| **200** | Current secret setup metadata. |  -  |
+| **200** | The updated profile. |  -  |
+| **400** | Invalid request body or parameters. |  -  |
 | **401** | Missing or invalid bearer token. |  -  |
+| **403** | Authenticated token is not allowed to perform this action. |  -  |
+| **404** | Resource not found. |  -  |
 
 [[Back to top]](#) [[Back to API list]](../README.md#api-endpoints) [[Back to Model list]](../README.md#models) [[Back to README]](../README.md)
 
 
-## selectRepo
+## setCredentialProfileKey
 
-> RepoSelectionResponse selectRepo(repoSelectionRequest)
+> CredentialProfileResponse setCredentialProfileKey(profile, credential, setCredentialKeyRequest)
 
-Select repository for sandboxes
+Set a credential profile API key
 
-Idempotently selects one repository for the sandbox environment. Use `databaseId` from `GET /repos` as `repositoryId`; selecting an already-selected repository updates its `baseBranch`.
+Sets one API key. A sign-in id returns `400 not_an_api_key`; connect sign-ins on the dashboard Agents page. Running sandboxes that use the profile get the new key. Needs an API key with `account.admin`.
 
 ### Example
 
@@ -5160,7 +6030,7 @@ import {
   Configuration,
   BoatApi,
 } from '@boatdev/sdk';
-import type { SelectRepoRequest } from '@boatdev/sdk';
+import type { SetCredentialProfileKeyRequest } from '@boatdev/sdk';
 
 async function example() {
   console.log("🚀 Testing @boatdev/sdk SDK...");
@@ -5171,12 +6041,16 @@ async function example() {
   const api = new BoatApi(config);
 
   const body = {
-    // RepoSelectionRequest
-    repoSelectionRequest: ...,
-  } satisfies SelectRepoRequest;
+    // string | Profile id or name.
+    profile: profile_example,
+    // CredentialId
+    credential: ...,
+    // SetCredentialKeyRequest
+    setCredentialKeyRequest: ...,
+  } satisfies SetCredentialProfileKeyRequest;
 
   try {
-    const data = await api.selectRepo(body);
+    const data = await api.setCredentialProfileKey(body);
     console.log(data);
   } catch (error) {
     console.error(error);
@@ -5192,11 +6066,13 @@ example().catch(console.error);
 
 | Name | Type | Description  | Notes |
 |------------- | ------------- | ------------- | -------------|
-| **repoSelectionRequest** | [RepoSelectionRequest](RepoSelectionRequest.md) |  | |
+| **profile** | `string` | Profile id or name. | [Defaults to `undefined`] |
+| **credential** | `CredentialId` |  | [Defaults to `undefined`] [Enum: anthropic-api-key, openai-api-key, openrouter-api-key, llmgateway-api-key, deepseek-api-key, moonshot-api-key, mistral-api-key, claude-subscription, chatgpt-subscription, kimi-subscription, mistral-vibe-subscription, claude-bedrock, codex-bedrock] |
+| **setCredentialKeyRequest** | [SetCredentialKeyRequest](SetCredentialKeyRequest.md) |  | |
 
 ### Return type
 
-[**RepoSelectionResponse**](RepoSelectionResponse.md)
+[**CredentialProfileResponse**](CredentialProfileResponse.md)
 
 ### Authorization
 
@@ -5211,21 +6087,22 @@ example().catch(console.error);
 ### HTTP response details
 | Status code | Description | Response headers |
 |-------------|-------------|------------------|
-| **200** | Updated repository selection. |  -  |
+| **200** | The updated profile. |  -  |
 | **400** | Invalid request body or parameters. |  -  |
 | **401** | Missing or invalid bearer token. |  -  |
-| **409** | Request conflicts with current account or sandbox state. |  -  |
+| **403** | Authenticated token is not allowed to perform this action. |  -  |
+| **404** | Resource not found. |  -  |
 
 [[Back to top]](#) [[Back to API list]](../README.md#api-endpoints) [[Back to Model list]](../README.md#models) [[Back to README]](../README.md)
 
 
-## setActiveOrganization
+## setEnvironmentSecretFile
 
-> ActiveOrgResponse setActiveOrganization(activeOrgUpdateRequest)
+> EnvironmentItemChangeResponse setEnvironmentSecretFile(environmentId, setEnvironmentSecretFileRequest, org)
 
-Set the active organization
+Write one secret file
 
-Set the wallet new sandboxes bill when a request names none, for this account on every client: the API, the CLI (`boat org switch` sets the same value) and the dashboard. Pass an organization id or name you belong to, or `personal` (or `null`) for your own account. `GET /limits` follows it. Sandboxes already running keep the wallet they were created with; leaving or deleting the organization resets the account to personal.
+Adds or replaces a single secret file by path. Mints a new immutable version.
 
 ### Example
 
@@ -5234,7 +6111,7 @@ import {
   Configuration,
   BoatApi,
 } from '@boatdev/sdk';
-import type { SetActiveOrganizationRequest } from '@boatdev/sdk';
+import type { SetEnvironmentSecretFileOperationRequest } from '@boatdev/sdk';
 
 async function example() {
   console.log("🚀 Testing @boatdev/sdk SDK...");
@@ -5245,12 +6122,16 @@ async function example() {
   const api = new BoatApi(config);
 
   const body = {
-    // ActiveOrgUpdateRequest
-    activeOrgUpdateRequest: {"org":"acme"},
-  } satisfies SetActiveOrganizationRequest;
+    // string
+    environmentId: 38400000-8cf0-11bd-b23e-10b96e4ef00d,
+    // SetEnvironmentSecretFileRequest
+    setEnvironmentSecretFileRequest: ...,
+    // string | Billing wallet for this request: an organization you belong to, by id (`team_…`) or by name as `GET /orgs` lists it (case-insensitive), or `personal`. Omitted, the account\'s active wallet applies (`PATCH /orgs/active`; personal until set). Two organizations sharing the name answer `409 ambiguous_org` and need the id. Sandboxes and snapshots stay creator-private. On `/environments` routes, only this query parameter selects the organization\'s shared environments; the `X-Boat-Org` header and the active wallet do not apply there. Members read them, owners and admins change them. (optional)
+    org: org_example,
+  } satisfies SetEnvironmentSecretFileOperationRequest;
 
   try {
-    const data = await api.setActiveOrganization(body);
+    const data = await api.setEnvironmentSecretFile(body);
     console.log(data);
   } catch (error) {
     console.error(error);
@@ -5266,11 +6147,13 @@ example().catch(console.error);
 
 | Name | Type | Description  | Notes |
 |------------- | ------------- | ------------- | -------------|
-| **activeOrgUpdateRequest** | [ActiveOrgUpdateRequest](ActiveOrgUpdateRequest.md) |  | |
+| **environmentId** | `string` |  | [Defaults to `undefined`] |
+| **setEnvironmentSecretFileRequest** | [SetEnvironmentSecretFileRequest](SetEnvironmentSecretFileRequest.md) |  | |
+| **org** | `string` | Billing wallet for this request: an organization you belong to, by id (`team_…`) or by name as `GET /orgs` lists it (case-insensitive), or `personal`. Omitted, the account\'s active wallet applies (`PATCH /orgs/active`; personal until set). Two organizations sharing the name answer `409 ambiguous_org` and need the id. Sandboxes and snapshots stay creator-private. On `/environments` routes, only this query parameter selects the organization\'s shared environments; the `X-Boat-Org` header and the active wallet do not apply there. Members read them, owners and admins change them. | [Optional] [Defaults to `undefined`] |
 
 ### Return type
 
-[**ActiveOrgResponse**](ActiveOrgResponse.md)
+[**EnvironmentItemChangeResponse**](EnvironmentItemChangeResponse.md)
 
 ### Authorization
 
@@ -5285,22 +6168,21 @@ example().catch(console.error);
 ### HTTP response details
 | Status code | Description | Response headers |
 |-------------|-------------|------------------|
-| **200** | The wallet now active. |  -  |
+| **200** | New version minted. |  -  |
 | **400** | Invalid request body or parameters. |  -  |
 | **401** | Missing or invalid bearer token. |  -  |
-| **403** | `not_org_member`: no organization with that id or name that you belong to. |  -  |
-| **409** | `ambiguous_org`: several of your organizations share that name; pass the id. |  -  |
+| **404** | Resource not found. |  -  |
 
 [[Back to top]](#) [[Back to API list]](../README.md#api-endpoints) [[Back to Model list]](../README.md#models) [[Back to README]](../README.md)
 
 
-## setEnvironmentSecretFile
+## setEnvironmentVar
 
-> EnvironmentItemChangeResponse setEnvironmentSecretFile(environmentId, setEnvironmentSecretFileRequest)
+> EnvironmentItemChangeResponse setEnvironmentVar(environmentId, key, setEnvironmentVarRequest, org)
 
-Write one secret file
+Set one environment variable
 
-Adds or replaces a single secret file by path. Mints a new immutable version.
+Sets or replaces a single variable without reading or rewriting the rest. Mints a new immutable version.
 
 ### Example
 
@@ -5309,7 +6191,7 @@ import {
   Configuration,
   BoatApi,
 } from '@boatdev/sdk';
-import type { SetEnvironmentSecretFileOperationRequest } from '@boatdev/sdk';
+import type { SetEnvironmentVarOperationRequest } from '@boatdev/sdk';
 
 async function example() {
   console.log("🚀 Testing @boatdev/sdk SDK...");
@@ -5322,12 +6204,16 @@ async function example() {
   const body = {
     // string
     environmentId: 38400000-8cf0-11bd-b23e-10b96e4ef00d,
-    // SetEnvironmentSecretFileRequest
-    setEnvironmentSecretFileRequest: ...,
-  } satisfies SetEnvironmentSecretFileOperationRequest;
+    // string | Environment variable name.
+    key: key_example,
+    // SetEnvironmentVarRequest
+    setEnvironmentVarRequest: ...,
+    // string | Billing wallet for this request: an organization you belong to, by id (`team_…`) or by name as `GET /orgs` lists it (case-insensitive), or `personal`. Omitted, the account\'s active wallet applies (`PATCH /orgs/active`; personal until set). Two organizations sharing the name answer `409 ambiguous_org` and need the id. Sandboxes and snapshots stay creator-private. On `/environments` routes, only this query parameter selects the organization\'s shared environments; the `X-Boat-Org` header and the active wallet do not apply there. Members read them, owners and admins change them. (optional)
+    org: org_example,
+  } satisfies SetEnvironmentVarOperationRequest;
 
   try {
-    const data = await api.setEnvironmentSecretFile(body);
+    const data = await api.setEnvironmentVar(body);
     console.log(data);
   } catch (error) {
     console.error(error);
@@ -5344,7 +6230,9 @@ example().catch(console.error);
 | Name | Type | Description  | Notes |
 |------------- | ------------- | ------------- | -------------|
 | **environmentId** | `string` |  | [Defaults to `undefined`] |
-| **setEnvironmentSecretFileRequest** | [SetEnvironmentSecretFileRequest](SetEnvironmentSecretFileRequest.md) |  | |
+| **key** | `string` | Environment variable name. | [Defaults to `undefined`] |
+| **setEnvironmentVarRequest** | [SetEnvironmentVarRequest](SetEnvironmentVarRequest.md) |  | |
+| **org** | `string` | Billing wallet for this request: an organization you belong to, by id (`team_…`) or by name as `GET /orgs` lists it (case-insensitive), or `personal`. Omitted, the account\'s active wallet applies (`PATCH /orgs/active`; personal until set). Two organizations sharing the name answer `409 ambiguous_org` and need the id. Sandboxes and snapshots stay creator-private. On `/environments` routes, only this query parameter selects the organization\'s shared environments; the `X-Boat-Org` header and the active wallet do not apply there. Members read them, owners and admins change them. | [Optional] [Defaults to `undefined`] |
 
 ### Return type
 
@@ -5371,13 +6259,13 @@ example().catch(console.error);
 [[Back to top]](#) [[Back to API list]](../README.md#api-endpoints) [[Back to Model list]](../README.md#models) [[Back to README]](../README.md)
 
 
-## setEnvironmentVar
+## setSandboxAiAccess
 
-> EnvironmentItemChangeResponse setEnvironmentVar(environmentId, key, setEnvironmentVarRequest)
+> SandboxAiAccessResponse setSandboxAiAccess(sandboxId, setSandboxAiAccessRequest)
 
-Set one environment variable
+Block or unblock sandbox AI access
 
-Sets or replaces a single variable without reading or rewriting the rest. Mints a new immutable version.
+Blocks or unblocks the sandbox\'s AI placeholders, running or stopped. The proxy refuses a blocked sandbox\'s requests with `403`. It has no effect on a sandbox that holds real keys. The sandbox creator, or a manager of its credential profile, can call it. Needs an API key with `account.admin`.
 
 ### Example
 
@@ -5386,7 +6274,7 @@ import {
   Configuration,
   BoatApi,
 } from '@boatdev/sdk';
-import type { SetEnvironmentVarOperationRequest } from '@boatdev/sdk';
+import type { SetSandboxAiAccessOperationRequest } from '@boatdev/sdk';
 
 async function example() {
   console.log("🚀 Testing @boatdev/sdk SDK...");
@@ -5397,16 +6285,14 @@ async function example() {
   const api = new BoatApi(config);
 
   const body = {
-    // string
-    environmentId: 38400000-8cf0-11bd-b23e-10b96e4ef00d,
-    // string | Environment variable name.
-    key: key_example,
-    // SetEnvironmentVarRequest
-    setEnvironmentVarRequest: ...,
-  } satisfies SetEnvironmentVarOperationRequest;
+    // string | Public Sandbox id returned by create/list/get sandbox calls.
+    sandboxId: sandboxId_example,
+    // SetSandboxAiAccessRequest
+    setSandboxAiAccessRequest: ...,
+  } satisfies SetSandboxAiAccessOperationRequest;
 
   try {
-    const data = await api.setEnvironmentVar(body);
+    const data = await api.setSandboxAiAccess(body);
     console.log(data);
   } catch (error) {
     console.error(error);
@@ -5422,13 +6308,12 @@ example().catch(console.error);
 
 | Name | Type | Description  | Notes |
 |------------- | ------------- | ------------- | -------------|
-| **environmentId** | `string` |  | [Defaults to `undefined`] |
-| **key** | `string` | Environment variable name. | [Defaults to `undefined`] |
-| **setEnvironmentVarRequest** | [SetEnvironmentVarRequest](SetEnvironmentVarRequest.md) |  | |
+| **sandboxId** | `string` | Public Sandbox id returned by create/list/get sandbox calls. | [Defaults to `undefined`] |
+| **setSandboxAiAccessRequest** | [SetSandboxAiAccessRequest](SetSandboxAiAccessRequest.md) |  | |
 
 ### Return type
 
-[**EnvironmentItemChangeResponse**](EnvironmentItemChangeResponse.md)
+[**SandboxAiAccessResponse**](SandboxAiAccessResponse.md)
 
 ### Authorization
 
@@ -5443,9 +6328,10 @@ example().catch(console.error);
 ### HTTP response details
 | Status code | Description | Response headers |
 |-------------|-------------|------------------|
-| **200** | New version minted. |  -  |
+| **200** | The new state. |  -  |
 | **400** | Invalid request body or parameters. |  -  |
 | **401** | Missing or invalid bearer token. |  -  |
+| **403** | Authenticated token is not allowed to perform this action. |  -  |
 | **404** | Resource not found. |  -  |
 
 [[Back to top]](#) [[Back to API list]](../README.md#api-endpoints) [[Back to Model list]](../README.md#models) [[Back to README]](../README.md)
@@ -5989,6 +6875,165 @@ example().catch(console.error);
 [[Back to top]](#) [[Back to API list]](../README.md#api-endpoints) [[Back to Model list]](../README.md#models) [[Back to README]](../README.md)
 
 
+## updateAiProxy
+
+> AiProxySettings updateAiProxy(updateAiProxyRequest, org, xBoatOrg)
+
+Turn the AI credentials proxy on or off
+
+With the proxy on, sandboxes get placeholder keys and base URLs that point at Boat. Boat swaps in the real key on each request. Real keys never enter the sandbox.  Running sandboxes switch at their next start. While on, the account pays $1 of Boat time for each UTC day, plus $1 per 1,000 proxied requests, charged to the wallet each sandbox bills. For an organization, only its owner can change the switch. Needs an API key with `account.admin`. 
+
+### Example
+
+```ts
+import {
+  Configuration,
+  BoatApi,
+} from '@boatdev/sdk';
+import type { UpdateAiProxyOperationRequest } from '@boatdev/sdk';
+
+async function example() {
+  console.log("🚀 Testing @boatdev/sdk SDK...");
+  const config = new Configuration({ 
+    // Configure HTTP bearer authorization: BoatBearerAuth
+    accessToken: "YOUR BEARER TOKEN",
+  });
+  const api = new BoatApi(config);
+
+  const body = {
+    // UpdateAiProxyRequest
+    updateAiProxyRequest: ...,
+    // string | Billing wallet for this request: an organization you belong to, by id (`team_…`) or by name as `GET /orgs` lists it (case-insensitive), or `personal`. Omitted, the account\'s active wallet applies (`PATCH /orgs/active`; personal until set). Two organizations sharing the name answer `409 ambiguous_org` and need the id. Sandboxes and snapshots stay creator-private. On `/environments` routes, only this query parameter selects the organization\'s shared environments; the `X-Boat-Org` header and the active wallet do not apply there. Members read them, owners and admins change them. (optional)
+    org: org_example,
+    // string | Same as the `org` query parameter. Query wins when both are set. (optional)
+    xBoatOrg: xBoatOrg_example,
+  } satisfies UpdateAiProxyOperationRequest;
+
+  try {
+    const data = await api.updateAiProxy(body);
+    console.log(data);
+  } catch (error) {
+    console.error(error);
+  }
+}
+
+// Run the test
+example().catch(console.error);
+```
+
+### Parameters
+
+
+| Name | Type | Description  | Notes |
+|------------- | ------------- | ------------- | -------------|
+| **updateAiProxyRequest** | [UpdateAiProxyRequest](UpdateAiProxyRequest.md) |  | |
+| **org** | `string` | Billing wallet for this request: an organization you belong to, by id (`team_…`) or by name as `GET /orgs` lists it (case-insensitive), or `personal`. Omitted, the account\'s active wallet applies (`PATCH /orgs/active`; personal until set). Two organizations sharing the name answer `409 ambiguous_org` and need the id. Sandboxes and snapshots stay creator-private. On `/environments` routes, only this query parameter selects the organization\'s shared environments; the `X-Boat-Org` header and the active wallet do not apply there. Members read them, owners and admins change them. | [Optional] [Defaults to `undefined`] |
+| **xBoatOrg** | `string` | Same as the `org` query parameter. Query wins when both are set. | [Optional] [Defaults to `undefined`] |
+
+### Return type
+
+[**AiProxySettings**](AiProxySettings.md)
+
+### Authorization
+
+[BoatBearerAuth](../README.md#BoatBearerAuth)
+
+### HTTP request headers
+
+- **Content-Type**: `application/json`
+- **Accept**: `application/json`
+
+
+### HTTP response details
+| Status code | Description | Response headers |
+|-------------|-------------|------------------|
+| **200** | The new state. |  -  |
+| **400** | Invalid request body or parameters. |  -  |
+| **401** | Missing or invalid bearer token. |  -  |
+| **403** | Authenticated token is not allowed to perform this action. |  -  |
+
+[[Back to top]](#) [[Back to API list]](../README.md#api-endpoints) [[Back to Model list]](../README.md#models) [[Back to README]](../README.md)
+
+
+## updateCredentialProfile
+
+> CredentialProfileResponse updateCredentialProfile(profile, updateCredentialProfileRequest)
+
+Update a credential profile
+
+Renames the profile, or makes it its owner\'s default. Sandboxes that use the owner\'s default switch to the new default at their next start. Needs an API key with `account.admin`.
+
+### Example
+
+```ts
+import {
+  Configuration,
+  BoatApi,
+} from '@boatdev/sdk';
+import type { UpdateCredentialProfileOperationRequest } from '@boatdev/sdk';
+
+async function example() {
+  console.log("🚀 Testing @boatdev/sdk SDK...");
+  const config = new Configuration({ 
+    // Configure HTTP bearer authorization: BoatBearerAuth
+    accessToken: "YOUR BEARER TOKEN",
+  });
+  const api = new BoatApi(config);
+
+  const body = {
+    // string | Profile id or name.
+    profile: profile_example,
+    // UpdateCredentialProfileRequest
+    updateCredentialProfileRequest: {"isDefault":true},
+  } satisfies UpdateCredentialProfileOperationRequest;
+
+  try {
+    const data = await api.updateCredentialProfile(body);
+    console.log(data);
+  } catch (error) {
+    console.error(error);
+  }
+}
+
+// Run the test
+example().catch(console.error);
+```
+
+### Parameters
+
+
+| Name | Type | Description  | Notes |
+|------------- | ------------- | ------------- | -------------|
+| **profile** | `string` | Profile id or name. | [Defaults to `undefined`] |
+| **updateCredentialProfileRequest** | [UpdateCredentialProfileRequest](UpdateCredentialProfileRequest.md) |  | |
+
+### Return type
+
+[**CredentialProfileResponse**](CredentialProfileResponse.md)
+
+### Authorization
+
+[BoatBearerAuth](../README.md#BoatBearerAuth)
+
+### HTTP request headers
+
+- **Content-Type**: `application/json`
+- **Accept**: `application/json`
+
+
+### HTTP response details
+| Status code | Description | Response headers |
+|-------------|-------------|------------------|
+| **200** | The updated profile. |  -  |
+| **400** | Invalid request body or parameters. |  -  |
+| **401** | Missing or invalid bearer token. |  -  |
+| **403** | Authenticated token is not allowed to perform this action. |  -  |
+| **404** | Resource not found. |  -  |
+| **409** | Request conflicts with current account or sandbox state. |  -  |
+
+[[Back to top]](#) [[Back to API list]](../README.md#api-endpoints) [[Back to Model list]](../README.md#models) [[Back to README]](../README.md)
+
+
 ## updateDataRetention
 
 > DataRetentionPolicyResponse updateDataRetention(dataRetentionUpdateRequest)
@@ -6066,7 +7111,7 @@ example().catch(console.error);
 
 ## updateEnvironment
 
-> SandboxEnvironmentResponse updateEnvironment(environmentId, updateSandboxEnvironmentRequest)
+> SandboxEnvironmentResponse updateEnvironment(environmentId, updateSandboxEnvironmentRequest, org)
 
 Update a sandbox environment
 
@@ -6094,6 +7139,8 @@ async function example() {
     environmentId: 38400000-8cf0-11bd-b23e-10b96e4ef00d,
     // UpdateSandboxEnvironmentRequest
     updateSandboxEnvironmentRequest: ...,
+    // string | Billing wallet for this request: an organization you belong to, by id (`team_…`) or by name as `GET /orgs` lists it (case-insensitive), or `personal`. Omitted, the account\'s active wallet applies (`PATCH /orgs/active`; personal until set). Two organizations sharing the name answer `409 ambiguous_org` and need the id. Sandboxes and snapshots stay creator-private. On `/environments` routes, only this query parameter selects the organization\'s shared environments; the `X-Boat-Org` header and the active wallet do not apply there. Members read them, owners and admins change them. (optional)
+    org: org_example,
   } satisfies UpdateEnvironmentRequest;
 
   try {
@@ -6115,6 +7162,7 @@ example().catch(console.error);
 |------------- | ------------- | ------------- | -------------|
 | **environmentId** | `string` | Environment id returned by `GET /environments`. | [Defaults to `undefined`] |
 | **updateSandboxEnvironmentRequest** | [UpdateSandboxEnvironmentRequest](UpdateSandboxEnvironmentRequest.md) |  | |
+| **org** | `string` | Billing wallet for this request: an organization you belong to, by id (`team_…`) or by name as `GET /orgs` lists it (case-insensitive), or `personal`. Omitted, the account\'s active wallet applies (`PATCH /orgs/active`; personal until set). Two organizations sharing the name answer `409 ambiguous_org` and need the id. Sandboxes and snapshots stay creator-private. On `/environments` routes, only this query parameter selects the organization\'s shared environments; the `X-Boat-Org` header and the active wallet do not apply there. Members read them, owners and admins change them. | [Optional] [Defaults to `undefined`] |
 
 ### Return type
 
@@ -6291,7 +7339,7 @@ example().catch(console.error);
 
 ## upgradeEnvironment
 
-> UpgradeSandboxEnvironmentResponse upgradeEnvironment(environmentId, upgradeSandboxEnvironmentRequest)
+> UpgradeSandboxEnvironmentResponse upgradeEnvironment(environmentId, org, upgradeSandboxEnvironmentRequest)
 
 Upgrade sandboxes to an environment\'s latest version
 
@@ -6317,6 +7365,8 @@ async function example() {
   const body = {
     // string
     environmentId: 38400000-8cf0-11bd-b23e-10b96e4ef00d,
+    // string | Billing wallet for this request: an organization you belong to, by id (`team_…`) or by name as `GET /orgs` lists it (case-insensitive), or `personal`. Omitted, the account\'s active wallet applies (`PATCH /orgs/active`; personal until set). Two organizations sharing the name answer `409 ambiguous_org` and need the id. Sandboxes and snapshots stay creator-private. On `/environments` routes, only this query parameter selects the organization\'s shared environments; the `X-Boat-Org` header and the active wallet do not apply there. Members read them, owners and admins change them. (optional)
+    org: org_example,
     // UpgradeSandboxEnvironmentRequest (optional)
     upgradeSandboxEnvironmentRequest: ...,
   } satisfies UpgradeEnvironmentRequest;
@@ -6339,6 +7389,7 @@ example().catch(console.error);
 | Name | Type | Description  | Notes |
 |------------- | ------------- | ------------- | -------------|
 | **environmentId** | `string` |  | [Defaults to `undefined`] |
+| **org** | `string` | Billing wallet for this request: an organization you belong to, by id (`team_…`) or by name as `GET /orgs` lists it (case-insensitive), or `personal`. Omitted, the account\'s active wallet applies (`PATCH /orgs/active`; personal until set). Two organizations sharing the name answer `409 ambiguous_org` and need the id. Sandboxes and snapshots stay creator-private. On `/environments` routes, only this query parameter selects the organization\'s shared environments; the `X-Boat-Org` header and the active wallet do not apply there. Members read them, owners and admins change them. | [Optional] [Defaults to `undefined`] |
 | **upgradeSandboxEnvironmentRequest** | [UpgradeSandboxEnvironmentRequest](UpgradeSandboxEnvironmentRequest.md) |  | [Optional] |
 
 ### Return type