@boatdev/sdk 1.9.5 → 1.9.7

package/docs/BoatApi.md

@@ -4,6 +4,7 @@ All URIs are relative to *https://boat.dev/api/v1*
 
 | Method | HTTP request | Description |
 |------------- | ------------- | -------------|
+| [**addCredentialAccount**](BoatApi.md#addcredentialaccount) | **POST** /credential-profiles/{profile}/accounts/{credential} | Add another API key to a credential |
 | [**addEnvironmentRepo**](BoatApi.md#addenvironmentrepooperation) | **POST** /environments/{environmentId}/repos | Add a repository to an environment |
 | [**apiKeyUsage**](BoatApi.md#apikeyusage) | **GET** /api-keys/{apiKeyId}/usage | Get API key usage |
 | [**apiKeys**](BoatApi.md#apikeys) | **GET** /api-keys | List API keys |
@@ -15,12 +16,17 @@ All URIs are relative to *https://boat.dev/api/v1*
 | [**commandStatus**](BoatApi.md#commandstatus) | **GET** /sandboxes/{sandboxId}/commands/{processId} | Get detached command status and logs |
 | [**conversations**](BoatApi.md#conversations) | **GET** /sandboxes/{sandboxId}/conversations | List boat conversations |
 | [**create**](BoatApi.md#create) | **POST** /sandboxes | Create sandbox |
+| [**createCredentialProfile**](BoatApi.md#createcredentialprofileoperation) | **POST** /credential-profiles | Create a credential profile |
 | [**createDownloadUrl**](BoatApi.md#createdownloadurl) | **POST** /sandboxes/{sandboxId}/files/download-url | Get a download URL for a sandbox file |
 | [**createEnvironment**](BoatApi.md#createenvironment) | **POST** /environments | Create a sandbox environment |
 | [**createScopedApiKey**](BoatApi.md#createscopedapikeyoperation) | **POST** /api-keys/scoped | Create a scoped API key |
 | [**createSnapshotShare**](BoatApi.md#createsnapshotshare) | **POST** /named-snapshots/{name}/shares | Share a named snapshot |
 | [**createUploadUrl**](BoatApi.md#createuploadurl) | **POST** /sandboxes/{sandboxId}/files/upload-url | Get an upload URL for a sandbox file |
 | [**createWebhook**](BoatApi.md#createwebhook) | **POST** /webhooks | Create webhook |
+| [**deleteCredentialAccount**](BoatApi.md#deletecredentialaccount) | **DELETE** /credential-profiles/{profile}/accounts/{credential}/{account} | Forget an account of a credential |
+| [**deleteCredentialProfile**](BoatApi.md#deletecredentialprofile) | **DELETE** /credential-profiles/{profile} | Delete a credential profile |
+| [**deleteCredentialProfileCustomApi**](BoatApi.md#deletecredentialprofilecustomapi) | **DELETE** /credential-profiles/{profile}/custom-apis/{name} | Remove a custom API |
+| [**deleteCredentialProfileKey**](BoatApi.md#deletecredentialprofilekey) | **DELETE** /credential-profiles/{profile}/keys/{credential} | Remove a credential profile credential |
 | [**deleteEnvironment**](BoatApi.md#deleteenvironment) | **DELETE** /environments/{environmentId} | Delete a sandbox environment |
 | [**deleteEnvironmentRepo**](BoatApi.md#deleteenvironmentrepo) | **DELETE** /environments/{environmentId}/repos/{repositoryId} | Remove a repository from an environment |
 | [**deleteEnvironmentSecretFile**](BoatApi.md#deleteenvironmentsecretfile) | **DELETE** /environments/{environmentId}/secret-files | Remove one secret file |
@@ -36,11 +42,14 @@ All URIs are relative to *https://boat.dev/api/v1*
 | [**events**](BoatApi.md#events) | **GET** /sandboxes/{sandboxId}/events | List boat events |
 | [**fork**](BoatApi.md#forkoperation) | **POST** /sandboxes/{sandboxId}/fork | Fork sandbox |
 | [**get**](BoatApi.md#get) | **GET** /sandboxes/{sandboxId} | Get sandbox |
+| [**getAiProxy**](BoatApi.md#getaiproxy) | **GET** /ai-proxy | Get AI credentials proxy |
+| [**getAiUsage**](BoatApi.md#getaiusage) | **GET** /ai-usage | Get AI usage |
 | [**getCommand**](BoatApi.md#getcommand) | **GET** /sandboxes/{sandboxId}/command-history/{commandId} | Get one command from the history |
 | [**getDataRetention**](BoatApi.md#getdataretention) | **GET** /account/data-retention | Get account data-retention policy |
 | [**getDeletionOperation**](BoatApi.md#getdeletionoperation) | **GET** /deletion-operations/{operationId} | Get deletion operation |
 | [**getLatestSandboxSnapshot**](BoatApi.md#getlatestsandboxsnapshot) | **GET** /sandboxes/{sandboxId}/snapshots/latest | Get latest boat snapshot |
 | [**getNamedSnapshot**](BoatApi.md#getnamedsnapshot) | **GET** /named-snapshots/{name} | Get a named snapshot |
+| [**getSandboxAiUsage**](BoatApi.md#getsandboxaiusage) | **GET** /sandboxes/{sandboxId}/ai-usage | Get sandbox AI usage |
 | [**getSnapshotDownload**](BoatApi.md#getsnapshotdownload) | **GET** /snapshots/{snapshotId}/download | Get snapshot download |
 | [**getSnapshotFile**](BoatApi.md#getsnapshotfile) | **GET** /snapshots/{snapshotId}/files | Download a file or folder from a snapshot |
 | [**getSnapshotTree**](BoatApi.md#getsnapshottree) | **GET** /snapshots/{snapshotId}/tree | Get snapshot file tree |
@@ -50,6 +59,8 @@ All URIs are relative to *https://boat.dev/api/v1*
 | [**hostPort**](BoatApi.md#hostportoperation) | **POST** /sandboxes/{sandboxId}/host | Expose a sandbox port on a public HTTPS URL |
 | [**interrupt**](BoatApi.md#interrupt) | **POST** /sandboxes/{sandboxId}/interrupt | Interrupt running work |
 | [**limits**](BoatApi.md#limits) | **GET** /limits | Get Boat limits |
+| [**listCredentialAccounts**](BoatApi.md#listcredentialaccounts) | **GET** /credential-profiles/{profile}/accounts/{credential} | List the accounts of a credential |
+| [**listCredentialProfiles**](BoatApi.md#listcredentialprofiles) | **GET** /credential-profiles | List credential profiles |
 | [**listNamedSnapshots**](BoatApi.md#listnamedsnapshots) | **GET** /named-snapshots | List named snapshots |
 | [**listOrganizations**](BoatApi.md#listorganizations) | **GET** /orgs | List organizations |
 | [**listSandboxSnapshots**](BoatApi.md#listsandboxsnapshots) | **GET** /sandboxes/{sandboxId}/snapshots | List boat snapshots |
@@ -73,15 +84,21 @@ All URIs are relative to *https://boat.dev/api/v1*
 | [**secrets**](BoatApi.md#secrets) | **GET** /secrets | Get Boat secrets setup |
 | [**selectRepo**](BoatApi.md#selectrepo) | **POST** /repos | Select repository for sandboxes |
 | [**setActiveOrganization**](BoatApi.md#setactiveorganization) | **PATCH** /orgs/active | Set the active organization |
+| [**setCredentialProfileCustomApi**](BoatApi.md#setcredentialprofilecustomapi) | **PUT** /credential-profiles/{profile}/custom-apis/{name} | Set a custom API |
+| [**setCredentialProfileKey**](BoatApi.md#setcredentialprofilekey) | **PUT** /credential-profiles/{profile}/keys/{credential} | Set a credential profile API key |
 | [**setEnvironmentSecretFile**](BoatApi.md#setenvironmentsecretfileoperation) | **PUT** /environments/{environmentId}/secret-files | Write one secret file |
 | [**setEnvironmentVar**](BoatApi.md#setenvironmentvaroperation) | **PUT** /environments/{environmentId}/vars/{key} | Set one environment variable |
+| [**setSandboxAiAccess**](BoatApi.md#setsandboxaiaccessoperation) | **PUT** /sandboxes/{sandboxId}/ai-access | Block or unblock sandbox AI access |
 | [**setTelemetry**](BoatApi.md#settelemetry) | **PUT** /telemetry | Set OpenTelemetry export |
 | [**share**](BoatApi.md#share) | **POST** /sandboxes/{sandboxId}/share | Share sandbox with the organization |
 | [**sshKey**](BoatApi.md#sshkeyoperation) | **POST** /sandboxes/{sandboxId}/sshkey | Configure sandbox SSH key |
 | [**steer**](BoatApi.md#steeroperation) | **POST** /sandboxes/{sandboxId}/steer | Steer a running turn |
 | [**stop**](BoatApi.md#stopoperation) | **POST** /sandboxes/{sandboxId}/stop | Stop and archive sandbox |
 | [**stopCommand**](BoatApi.md#stopcommand) | **DELETE** /sandboxes/{sandboxId}/commands/{processId} | Stop a detached command |
+| [**switchCredentialAccount**](BoatApi.md#switchcredentialaccount) | **PUT** /credential-profiles/{profile}/accounts/{credential}/{account}/active | Switch a credential to another account |
 | [**update**](BoatApi.md#update) | **PATCH** /sandboxes/{sandboxId} | Update sandbox |
+| [**updateAiProxy**](BoatApi.md#updateaiproxyoperation) | **PUT** /ai-proxy | Turn the AI credentials proxy on or off |
+| [**updateCredentialProfile**](BoatApi.md#updatecredentialprofileoperation) | **PUT** /credential-profiles/{profile} | Update a credential profile |
 | [**updateDataRetention**](BoatApi.md#updatedataretention) | **PATCH** /account/data-retention | Update account data-retention policy |
 | [**updateEnvironment**](BoatApi.md#updateenvironment) | **PUT** /environments/{environmentId} | Update a sandbox environment |
 | [**updateSecrets**](BoatApi.md#updatesecrets) | **POST** /secrets | Update Boat secrets setup |
@@ -92,9 +109,90 @@ All URIs are relative to *https://boat.dev/api/v1*
 
 
 
+## addCredentialAccount
+
+> CredentialAccountsResponse addCredentialAccount(profile, credential, setCredentialKeyRequest)
+
+Add another API key to a credential
+
+Adds an API key as another account of the credential, ready to switch to. The first key of a credential becomes the one in use. A sign-in returns `400 not_an_api_key`; add another sign-in with \"Add another account\" on the dashboard. Needs an API key with `account.admin`.
+
+### Example
+
+```ts
+import {
+  Configuration,
+  BoatApi,
+} from '@boatdev/sdk';
+import type { AddCredentialAccountRequest } from '@boatdev/sdk';
+
+async function example() {
+  console.log("🚀 Testing @boatdev/sdk SDK...");
+  const config = new Configuration({ 
+    // Configure HTTP bearer authorization: BoatBearerAuth
+    accessToken: "YOUR BEARER TOKEN",
+  });
+  const api = new BoatApi(config);
+
+  const body = {
+    // string | Profile id or name.
+    profile: profile_example,
+    // CredentialId
+    credential: ...,
+    // SetCredentialKeyRequest
+    setCredentialKeyRequest: ...,
+  } satisfies AddCredentialAccountRequest;
+
+  try {
+    const data = await api.addCredentialAccount(body);
+    console.log(data);
+  } catch (error) {
+    console.error(error);
+  }
+}
+
+// Run the test
+example().catch(console.error);
+```
+
+### Parameters
+
+
+| Name | Type | Description  | Notes |
+|------------- | ------------- | ------------- | -------------|
+| **profile** | `string` | Profile id or name. | [Defaults to `undefined`] |
+| **credential** | `CredentialId` |  | [Defaults to `undefined`] [Enum: anthropic-api-key, openai-api-key, openrouter-api-key, llmgateway-api-key, deepseek-api-key, moonshot-api-key, mistral-api-key, claude-subscription, chatgpt-subscription, kimi-subscription, mistral-vibe-subscription, claude-bedrock, codex-bedrock] |
+| **setCredentialKeyRequest** | [SetCredentialKeyRequest](SetCredentialKeyRequest.md) |  | |
+
+### Return type
+
+[**CredentialAccountsResponse**](CredentialAccountsResponse.md)
+
+### Authorization
+
+[BoatBearerAuth](../README.md#BoatBearerAuth)
+
+### HTTP request headers
+
+- **Content-Type**: `application/json`
+- **Accept**: `application/json`
+
+
+### HTTP response details
+| Status code | Description | Response headers |
+|-------------|-------------|------------------|
+| **201** | The accounts, the new one included. |  -  |
+| **400** | Invalid request body or parameters. |  -  |
+| **401** | Missing or invalid bearer token. |  -  |
+| **403** | Authenticated token is not allowed to perform this action. |  -  |
+| **404** | Resource not found. |  -  |
+
+[[Back to top]](#) [[Back to API list]](../README.md#api-endpoints) [[Back to Model list]](../README.md#models) [[Back to README]](../README.md)
+
+
 ## addEnvironmentRepo
 
-> EnvironmentItemChangeResponse addEnvironmentRepo(environmentId, addEnvironmentRepoRequest)
+> EnvironmentItemChangeResponse addEnvironmentRepo(environmentId, addEnvironmentRepoRequest, org)
 
 Add a repository to an environment
 
@@ -122,6 +220,8 @@ async function example() {
     environmentId: 38400000-8cf0-11bd-b23e-10b96e4ef00d,
     // AddEnvironmentRepoRequest
     addEnvironmentRepoRequest: ...,
+    // string | Billing wallet for this request: an organization you belong to, by id (`team_…`) or by name as `GET /orgs` lists it (case-insensitive), or `personal`. Omitted, the account\'s active wallet applies (`PATCH /orgs/active`; personal until set). Two organizations sharing the name answer `409 ambiguous_org` and need the id. Sandboxes and snapshots stay creator-private. On `/environments` routes, only this query parameter selects the organization\'s shared environments; the `X-Boat-Org` header and the active wallet do not apply there. Members read them, owners and admins change them. (optional)
+    org: org_example,
   } satisfies AddEnvironmentRepoOperationRequest;
 
   try {
@@ -143,6 +243,7 @@ example().catch(console.error);
 |------------- | ------------- | ------------- | -------------|
 | **environmentId** | `string` |  | [Defaults to `undefined`] |
 | **addEnvironmentRepoRequest** | [AddEnvironmentRepoRequest](AddEnvironmentRepoRequest.md) |  | |
+| **org** | `string` | Billing wallet for this request: an organization you belong to, by id (`team_…`) or by name as `GET /orgs` lists it (case-insensitive), or `personal`. Omitted, the account\'s active wallet applies (`PATCH /orgs/active`; personal until set). Two organizations sharing the name answer `409 ambiguous_org` and need the id. Sandboxes and snapshots stay creator-private. On `/environments` routes, only this query parameter selects the organization\'s shared environments; the `X-Boat-Org` header and the active wallet do not apply there. Members read them, owners and admins change them. | [Optional] [Defaults to `undefined`] |
 
 ### Return type
 
@@ -907,7 +1008,7 @@ async function example() {
   const body = {
     // string | Optional exactly-once key for creating a sandbox. Send your own opaque, account-unique value (a UUID) to make `POST /sandboxes` safe to retry when the response is lost (network timeout, 5xx): the first request creates the sandbox and binds it to the key; every later request with the **same account, key, and request body** returns that same sandbox instead of creating a second, billable one. Behavior: keys are retained for **24 hours**; a concurrent or early retry while the first sandbox is still being minted returns `409` `idempotency_in_progress` (retry shortly, same key); reusing a key with a **different body** returns `409` `idempotency_key_reused`; timeouts and 5xx are safe to retry with the same key; a create that fails before the sandbox exists releases the key within ~2 minutes so a retry can create the sandbox. Omit the header to keep the default (non-idempotent) behavior. (optional)
     idempotencyKey: idempotencyKey_example,
-    // string | Billing wallet for this request: an organization you belong to, by id (`team_…`) or by name as `GET /orgs` lists it (case-insensitive), or `personal`. Omitted, the account\'s active wallet applies (`PATCH /orgs/active`; personal until set). Two organizations sharing the name answer `409 ambiguous_org` and need the id. Sandboxes, snapshots, and environments stay creator-private. (optional)
+    // string | Billing wallet for this request: an organization you belong to, by id (`team_…`) or by name as `GET /orgs` lists it (case-insensitive), or `personal`. Omitted, the account\'s active wallet applies (`PATCH /orgs/active`; personal until set). Two organizations sharing the name answer `409 ambiguous_org` and need the id. Sandboxes and snapshots stay creator-private. On `/environments` routes, only this query parameter selects the organization\'s shared environments; the `X-Boat-Org` header and the active wallet do not apply there. Members read them, owners and admins change them. (optional)
     org: org_example,
     // string | Same as the `org` query parameter. Query wins when both are set. (optional)
     xBoatOrg: xBoatOrg_example,
@@ -933,7 +1034,7 @@ example().catch(console.error);
 | Name | Type | Description  | Notes |
 |------------- | ------------- | ------------- | -------------|
 | **idempotencyKey** | `string` | Optional exactly-once key for creating a sandbox. Send your own opaque, account-unique value (a UUID) to make `POST /sandboxes` safe to retry when the response is lost (network timeout, 5xx): the first request creates the sandbox and binds it to the key; every later request with the **same account, key, and request body** returns that same sandbox instead of creating a second, billable one. Behavior: keys are retained for **24 hours**; a concurrent or early retry while the first sandbox is still being minted returns `409` `idempotency_in_progress` (retry shortly, same key); reusing a key with a **different body** returns `409` `idempotency_key_reused`; timeouts and 5xx are safe to retry with the same key; a create that fails before the sandbox exists releases the key within ~2 minutes so a retry can create the sandbox. Omit the header to keep the default (non-idempotent) behavior. | [Optional] [Defaults to `undefined`] |
-| **org** | `string` | Billing wallet for this request: an organization you belong to, by id (`team_…`) or by name as `GET /orgs` lists it (case-insensitive), or `personal`. Omitted, the account\'s active wallet applies (`PATCH /orgs/active`; personal until set). Two organizations sharing the name answer `409 ambiguous_org` and need the id. Sandboxes, snapshots, and environments stay creator-private. | [Optional] [Defaults to `undefined`] |
+| **org** | `string` | Billing wallet for this request: an organization you belong to, by id (`team_…`) or by name as `GET /orgs` lists it (case-insensitive), or `personal`. Omitted, the account\'s active wallet applies (`PATCH /orgs/active`; personal until set). Two organizations sharing the name answer `409 ambiguous_org` and need the id. Sandboxes and snapshots stay creator-private. On `/environments` routes, only this query parameter selects the organization\'s shared environments; the `X-Boat-Org` header and the active wallet do not apply there. Members read them, owners and admins change them. | [Optional] [Defaults to `undefined`] |
 | **xBoatOrg** | `string` | Same as the `org` query parameter. Query wins when both are set. | [Optional] [Defaults to `undefined`] |
 | **createSandboxRequest** | [CreateSandboxRequest](CreateSandboxRequest.md) |  | [Optional] |
 
@@ -964,6 +1065,81 @@ example().catch(console.error);
 [[Back to top]](#) [[Back to API list]](../README.md#api-endpoints) [[Back to Model list]](../README.md#models) [[Back to README]](../README.md)
 
 
+## createCredentialProfile
+
+> CredentialProfileResponse createCredentialProfile(createCredentialProfileRequest)
+
+Create a credential profile
+
+Creates an empty profile, or a copy of `copyFrom`. With `org`, the profile belongs to that organization and only its owners can create it. Needs an API key with `account.admin`.
+
+### Example
+
+```ts
+import {
+  Configuration,
+  BoatApi,
+} from '@boatdev/sdk';
+import type { CreateCredentialProfileOperationRequest } from '@boatdev/sdk';
+
+async function example() {
+  console.log("🚀 Testing @boatdev/sdk SDK...");
+  const config = new Configuration({ 
+    // Configure HTTP bearer authorization: BoatBearerAuth
+    accessToken: "YOUR BEARER TOKEN",
+  });
+  const api = new BoatApi(config);
+
+  const body = {
+    // CreateCredentialProfileRequest
+    createCredentialProfileRequest: {"name":"work","copyFrom":"default"},
+  } satisfies CreateCredentialProfileOperationRequest;
+
+  try {
+    const data = await api.createCredentialProfile(body);
+    console.log(data);
+  } catch (error) {
+    console.error(error);
+  }
+}
+
+// Run the test
+example().catch(console.error);
+```
+
+### Parameters
+
+
+| Name | Type | Description  | Notes |
+|------------- | ------------- | ------------- | -------------|
+| **createCredentialProfileRequest** | [CreateCredentialProfileRequest](CreateCredentialProfileRequest.md) |  | |
+
+### Return type
+
+[**CredentialProfileResponse**](CredentialProfileResponse.md)
+
+### Authorization
+
+[BoatBearerAuth](../README.md#BoatBearerAuth)
+
+### HTTP request headers
+
+- **Content-Type**: `application/json`
+- **Accept**: `application/json`
+
+
+### HTTP response details
+| Status code | Description | Response headers |
+|-------------|-------------|------------------|
+| **201** | Profile created. |  -  |
+| **400** | Invalid request body or parameters. |  -  |
+| **401** | Missing or invalid bearer token. |  -  |
+| **403** | Authenticated token is not allowed to perform this action. |  -  |
+| **409** | Request conflicts with current account or sandbox state. |  -  |
+
+[[Back to top]](#) [[Back to API list]](../README.md#api-endpoints) [[Back to Model list]](../README.md#models) [[Back to README]](../README.md)
+
+
 ## createDownloadUrl
 
 > FileUrlResponse createDownloadUrl(sandboxId, fileUrlRequest)
@@ -1044,7 +1220,7 @@ example().catch(console.error);
 
 ## createEnvironment
 
-> SandboxEnvironmentListResponse createEnvironment(createSandboxEnvironmentRequest)
+> SandboxEnvironmentListResponse createEnvironment(createSandboxEnvironmentRequest, org)
 
 Create a sandbox environment
 
@@ -1070,6 +1246,8 @@ async function example() {
   const body = {
     // CreateSandboxEnvironmentRequest
     createSandboxEnvironmentRequest: ...,
+    // string | Billing wallet for this request: an organization you belong to, by id (`team_…`) or by name as `GET /orgs` lists it (case-insensitive), or `personal`. Omitted, the account\'s active wallet applies (`PATCH /orgs/active`; personal until set). Two organizations sharing the name answer `409 ambiguous_org` and need the id. Sandboxes and snapshots stay creator-private. On `/environments` routes, only this query parameter selects the organization\'s shared environments; the `X-Boat-Org` header and the active wallet do not apply there. Members read them, owners and admins change them. (optional)
+    org: org_example,
   } satisfies CreateEnvironmentRequest;
 
   try {
@@ -1090,6 +1268,7 @@ example().catch(console.error);
 | Name | Type | Description  | Notes |
 |------------- | ------------- | ------------- | -------------|
 | **createSandboxEnvironmentRequest** | [CreateSandboxEnvironmentRequest](CreateSandboxEnvironmentRequest.md) |  | |
+| **org** | `string` | Billing wallet for this request: an organization you belong to, by id (`team_…`) or by name as `GET /orgs` lists it (case-insensitive), or `personal`. Omitted, the account\'s active wallet applies (`PATCH /orgs/active`; personal until set). Two organizations sharing the name answer `409 ambiguous_org` and need the id. Sandboxes and snapshots stay creator-private. On `/environments` routes, only this query parameter selects the organization\'s shared environments; the `X-Boat-Org` header and the active wallet do not apply there. Members read them, owners and admins change them. | [Optional] [Defaults to `undefined`] |
 
 ### Return type
 
@@ -1416,13 +1595,13 @@ example().catch(console.error);
 [[Back to top]](#) [[Back to API list]](../README.md#api-endpoints) [[Back to Model list]](../README.md#models) [[Back to README]](../README.md)
 
 
-## deleteEnvironment
+## deleteCredentialAccount
 
-> SandboxEnvironmentResponse deleteEnvironment(environmentId)
+> CredentialAccountsResponse deleteCredentialAccount(profile, credential, account)
 
-Delete a sandbox environment
+Forget an account of a credential
 
-Soft-deletes an environment. The default environment cannot be deleted, and at least one environment is always kept.
+Deletes an account. For the account in use, the credential switches to another account first, or is removed when it was the last one. Needs an API key with `account.admin`.
 
 ### Example
 
@@ -1431,7 +1610,7 @@ import {
   Configuration,
   BoatApi,
 } from '@boatdev/sdk';
-import type { DeleteEnvironmentRequest } from '@boatdev/sdk';
+import type { DeleteCredentialAccountRequest } from '@boatdev/sdk';
 
 async function example() {
   console.log("🚀 Testing @boatdev/sdk SDK...");
@@ -1442,12 +1621,16 @@ async function example() {
   const api = new BoatApi(config);
 
   const body = {
-    // string | Environment id returned by `GET /environments`.
-    environmentId: 38400000-8cf0-11bd-b23e-10b96e4ef00d,
-  } satisfies DeleteEnvironmentRequest;
+    // string | Profile id or name.
+    profile: profile_example,
+    // CredentialId
+    credential: ...,
+    // string | The account id from the list.
+    account: account_example,
+  } satisfies DeleteCredentialAccountRequest;
 
   try {
-    const data = await api.deleteEnvironment(body);
+    const data = await api.deleteCredentialAccount(body);
     console.log(data);
   } catch (error) {
     console.error(error);
@@ -1463,11 +1646,13 @@ example().catch(console.error);
 
 | Name | Type | Description  | Notes |
 |------------- | ------------- | ------------- | -------------|
-| **environmentId** | `string` | Environment id returned by `GET /environments`. | [Defaults to `undefined`] |
+| **profile** | `string` | Profile id or name. | [Defaults to `undefined`] |
+| **credential** | `CredentialId` |  | [Defaults to `undefined`] [Enum: anthropic-api-key, openai-api-key, openrouter-api-key, llmgateway-api-key, deepseek-api-key, moonshot-api-key, mistral-api-key, claude-subscription, chatgpt-subscription, kimi-subscription, mistral-vibe-subscription, claude-bedrock, codex-bedrock] |
+| **account** | `string` | The account id from the list. | [Defaults to `undefined`] |
 
 ### Return type
 
-[**SandboxEnvironmentResponse**](SandboxEnvironmentResponse.md)
+[**CredentialAccountsResponse**](CredentialAccountsResponse.md)
 
 ### Authorization
 
@@ -1482,21 +1667,22 @@ example().catch(console.error);
 ### HTTP response details
 | Status code | Description | Response headers |
 |-------------|-------------|------------------|
-| **200** | Environment soft-deleted. |  -  |
+| **200** | The accounts left. |  -  |
+| **400** | Invalid request body or parameters. |  -  |
 | **401** | Missing or invalid bearer token. |  -  |
+| **403** | Authenticated token is not allowed to perform this action. |  -  |
 | **404** | Resource not found. |  -  |
-| **409** | Request conflicts with current account or sandbox state. |  -  |
 
 [[Back to top]](#) [[Back to API list]](../README.md#api-endpoints) [[Back to Model list]](../README.md#models) [[Back to README]](../README.md)
 
 
-## deleteEnvironmentRepo
+## deleteCredentialProfile
 
-> EnvironmentItemChangeResponse deleteEnvironmentRepo(environmentId, repositoryId)
+> CredentialProfileDeletedResponse deleteCredentialProfile(profile)
 
-Remove a repository from an environment
+Delete a credential profile
 
-Removes one repository from the environment\'s selection. Mints a new immutable version.
+Deletes the profile. A default profile returns `409 is_default`. A profile that an environment names returns `409 in_use`. Needs an API key with `account.admin`.
 
 ### Example
 
@@ -1505,7 +1691,7 @@ import {
   Configuration,
   BoatApi,
 } from '@boatdev/sdk';
-import type { DeleteEnvironmentRepoRequest } from '@boatdev/sdk';
+import type { DeleteCredentialProfileRequest } from '@boatdev/sdk';
 
 async function example() {
   console.log("🚀 Testing @boatdev/sdk SDK...");
@@ -1516,14 +1702,12 @@ async function example() {
   const api = new BoatApi(config);
 
   const body = {
-    // string
-    environmentId: 38400000-8cf0-11bd-b23e-10b96e4ef00d,
-    // string | The repository `databaseId`.
-    repositoryId: repositoryId_example,
-  } satisfies DeleteEnvironmentRepoRequest;
+    // string | Profile id or name.
+    profile: profile_example,
+  } satisfies DeleteCredentialProfileRequest;
 
   try {
-    const data = await api.deleteEnvironmentRepo(body);
+    const data = await api.deleteCredentialProfile(body);
     console.log(data);
   } catch (error) {
     console.error(error);
@@ -1539,12 +1723,11 @@ example().catch(console.error);
 
 | Name | Type | Description  | Notes |
 |------------- | ------------- | ------------- | -------------|
-| **environmentId** | `string` |  | [Defaults to `undefined`] |
-| **repositoryId** | `string` | The repository `databaseId`. | [Defaults to `undefined`] |
+| **profile** | `string` | Profile id or name. | [Defaults to `undefined`] |
 
 ### Return type
 
-[**EnvironmentItemChangeResponse**](EnvironmentItemChangeResponse.md)
+[**CredentialProfileDeletedResponse**](CredentialProfileDeletedResponse.md)
 
 ### Authorization
 
@@ -1559,20 +1742,22 @@ example().catch(console.error);
 ### HTTP response details
 | Status code | Description | Response headers |
 |-------------|-------------|------------------|
-| **200** | New version minted. |  -  |
+| **200** | Profile deleted. |  -  |
 | **401** | Missing or invalid bearer token. |  -  |
+| **403** | Authenticated token is not allowed to perform this action. |  -  |
 | **404** | Resource not found. |  -  |
+| **409** | Request conflicts with current account or sandbox state. |  -  |
 
 [[Back to top]](#) [[Back to API list]](../README.md#api-endpoints) [[Back to Model list]](../README.md#models) [[Back to README]](../README.md)
 
 
-## deleteEnvironmentSecretFile
+## deleteCredentialProfileCustomApi
 
-> EnvironmentItemChangeResponse deleteEnvironmentSecretFile(path, environmentId)
+> CredentialProfileResponse deleteCredentialProfileCustomApi(profile, name)
 
-Remove one secret file
+Remove a custom API
 
-Removes the secret file at `path`. Mints a new immutable version.
+Removes one custom API from the profile. Needs an API key with `account.admin`.
 
 ### Example
 
@@ -1581,7 +1766,7 @@ import {
   Configuration,
   BoatApi,
 } from '@boatdev/sdk';
-import type { DeleteEnvironmentSecretFileRequest } from '@boatdev/sdk';
+import type { DeleteCredentialProfileCustomApiRequest } from '@boatdev/sdk';
 
 async function example() {
   console.log("🚀 Testing @boatdev/sdk SDK...");
@@ -1592,14 +1777,14 @@ async function example() {
   const api = new BoatApi(config);
 
   const body = {
-    // string
-    path: path_example,
-    // string
-    environmentId: 38400000-8cf0-11bd-b23e-10b96e4ef00d,
-  } satisfies DeleteEnvironmentSecretFileRequest;
+    // string | Profile id or name.
+    profile: profile_example,
+    // string | Environment variable name of the custom API, for example `STRIPE_KEY`. Provider names (`ANTHROPIC_*`, `OPENAI_*`, and so on) and names that end in `_BASE_URL` are reserved.
+    name: name_example,
+  } satisfies DeleteCredentialProfileCustomApiRequest;
 
   try {
-    const data = await api.deleteEnvironmentSecretFile(body);
+    const data = await api.deleteCredentialProfileCustomApi(body);
     console.log(data);
   } catch (error) {
     console.error(error);
@@ -1615,12 +1800,12 @@ example().catch(console.error);
 
 | Name | Type | Description  | Notes |
 |------------- | ------------- | ------------- | -------------|
-| **path** | `string` |  | [Defaults to `undefined`] |
-| **environmentId** | `string` |  | [Defaults to `undefined`] |
+| **profile** | `string` | Profile id or name. | [Defaults to `undefined`] |
+| **name** | `string` | Environment variable name of the custom API, for example `STRIPE_KEY`. Provider names (`ANTHROPIC_*`, `OPENAI_*`, and so on) and names that end in `_BASE_URL` are reserved. | [Defaults to `undefined`] |
 
 ### Return type
 
-[**EnvironmentItemChangeResponse**](EnvironmentItemChangeResponse.md)
+[**CredentialProfileResponse**](CredentialProfileResponse.md)
 
 ### Authorization
 
@@ -1635,20 +1820,21 @@ example().catch(console.error);
 ### HTTP response details
 | Status code | Description | Response headers |
 |-------------|-------------|------------------|
-| **200** | New version minted. |  -  |
+| **200** | The updated profile. |  -  |
 | **401** | Missing or invalid bearer token. |  -  |
+| **403** | Authenticated token is not allowed to perform this action. |  -  |
 | **404** | Resource not found. |  -  |
 
 [[Back to top]](#) [[Back to API list]](../README.md#api-endpoints) [[Back to Model list]](../README.md#models) [[Back to README]](../README.md)
 
 
-## deleteEnvironmentVar
+## deleteCredentialProfileKey
 
-> EnvironmentItemChangeResponse deleteEnvironmentVar(environmentId, key)
+> CredentialProfileResponse deleteCredentialProfileKey(profile, credential)
 
-Remove one environment variable
+Remove a credential profile credential
 
-Removes a single variable. Mints a new immutable version.
+Removes one credential, an API key or a sign-in. Needs an API key with `account.admin`.
 
 ### Example
 
@@ -1657,7 +1843,7 @@ import {
   Configuration,
   BoatApi,
 } from '@boatdev/sdk';
-import type { DeleteEnvironmentVarRequest } from '@boatdev/sdk';
+import type { DeleteCredentialProfileKeyRequest } from '@boatdev/sdk';
 
 async function example() {
   console.log("🚀 Testing @boatdev/sdk SDK...");
@@ -1668,14 +1854,14 @@ async function example() {
   const api = new BoatApi(config);
 
   const body = {
-    // string
-    environmentId: 38400000-8cf0-11bd-b23e-10b96e4ef00d,
-    // string | Environment variable name.
-    key: key_example,
-  } satisfies DeleteEnvironmentVarRequest;
+    // string | Profile id or name.
+    profile: profile_example,
+    // CredentialId
+    credential: ...,
+  } satisfies DeleteCredentialProfileKeyRequest;
 
   try {
-    const data = await api.deleteEnvironmentVar(body);
+    const data = await api.deleteCredentialProfileKey(body);
     console.log(data);
   } catch (error) {
     console.error(error);
@@ -1691,12 +1877,12 @@ example().catch(console.error);
 
 | Name | Type | Description  | Notes |
 |------------- | ------------- | ------------- | -------------|
-| **environmentId** | `string` |  | [Defaults to `undefined`] |
-| **key** | `string` | Environment variable name. | [Defaults to `undefined`] |
+| **profile** | `string` | Profile id or name. | [Defaults to `undefined`] |
+| **credential** | `CredentialId` |  | [Defaults to `undefined`] [Enum: anthropic-api-key, openai-api-key, openrouter-api-key, llmgateway-api-key, deepseek-api-key, moonshot-api-key, mistral-api-key, claude-subscription, chatgpt-subscription, kimi-subscription, mistral-vibe-subscription, claude-bedrock, codex-bedrock] |
 
 ### Return type
 
-[**EnvironmentItemChangeResponse**](EnvironmentItemChangeResponse.md)
+[**CredentialProfileResponse**](CredentialProfileResponse.md)
 
 ### Authorization
 
@@ -1711,20 +1897,22 @@ example().catch(console.error);
 ### HTTP response details
 | Status code | Description | Response headers |
 |-------------|-------------|------------------|
-| **200** | New version minted. |  -  |
+| **200** | The updated profile. |  -  |
+| **400** | Invalid request body or parameters. |  -  |
 | **401** | Missing or invalid bearer token. |  -  |
+| **403** | Authenticated token is not allowed to perform this action. |  -  |
 | **404** | Resource not found. |  -  |
 
 [[Back to top]](#) [[Back to API list]](../README.md#api-endpoints) [[Back to Model list]](../README.md#models) [[Back to README]](../README.md)
 
 
-## deleteNamedSnapshot
+## deleteEnvironment
 
-> NamedSnapshotDeletedResponse deleteNamedSnapshot(name)
+> SandboxEnvironmentResponse deleteEnvironment(environmentId, org)
 
-Remove a named snapshot
+Delete a sandbox environment
 
-Remove a named snapshot and release its storage (`boat snapshot rm <name>` in the CLI). Sandboxes already deployed from it are unaffected.
+Soft-deletes an environment. The default environment cannot be deleted, and at least one environment is always kept.
 
 ### Example
 
@@ -1733,7 +1921,7 @@ import {
   Configuration,
   BoatApi,
 } from '@boatdev/sdk';
-import type { DeleteNamedSnapshotRequest } from '@boatdev/sdk';
+import type { DeleteEnvironmentRequest } from '@boatdev/sdk';
 
 async function example() {
   console.log("🚀 Testing @boatdev/sdk SDK...");
@@ -1744,12 +1932,14 @@ async function example() {
   const api = new BoatApi(config);
 
   const body = {
-    // string
-    name: name_example,
-  } satisfies DeleteNamedSnapshotRequest;
+    // string | Environment id returned by `GET /environments`.
+    environmentId: 38400000-8cf0-11bd-b23e-10b96e4ef00d,
+    // string | Billing wallet for this request: an organization you belong to, by id (`team_…`) or by name as `GET /orgs` lists it (case-insensitive), or `personal`. Omitted, the account\'s active wallet applies (`PATCH /orgs/active`; personal until set). Two organizations sharing the name answer `409 ambiguous_org` and need the id. Sandboxes and snapshots stay creator-private. On `/environments` routes, only this query parameter selects the organization\'s shared environments; the `X-Boat-Org` header and the active wallet do not apply there. Members read them, owners and admins change them. (optional)
+    org: org_example,
+  } satisfies DeleteEnvironmentRequest;
 
   try {
-    const data = await api.deleteNamedSnapshot(body);
+    const data = await api.deleteEnvironment(body);
     console.log(data);
   } catch (error) {
     console.error(error);
@@ -1765,11 +1955,12 @@ example().catch(console.error);
 
 | Name | Type | Description  | Notes |
 |------------- | ------------- | ------------- | -------------|
-| **name** | `string` |  | [Defaults to `undefined`] |
+| **environmentId** | `string` | Environment id returned by `GET /environments`. | [Defaults to `undefined`] |
+| **org** | `string` | Billing wallet for this request: an organization you belong to, by id (`team_…`) or by name as `GET /orgs` lists it (case-insensitive), or `personal`. Omitted, the account\'s active wallet applies (`PATCH /orgs/active`; personal until set). Two organizations sharing the name answer `409 ambiguous_org` and need the id. Sandboxes and snapshots stay creator-private. On `/environments` routes, only this query parameter selects the organization\'s shared environments; the `X-Boat-Org` header and the active wallet do not apply there. Members read them, owners and admins change them. | [Optional] [Defaults to `undefined`] |
 
 ### Return type
 
-[**NamedSnapshotDeletedResponse**](NamedSnapshotDeletedResponse.md)
+[**SandboxEnvironmentResponse**](SandboxEnvironmentResponse.md)
 
 ### Authorization
 
@@ -1784,21 +1975,21 @@ example().catch(console.error);
 ### HTTP response details
 | Status code | Description | Response headers |
 |-------------|-------------|------------------|
-| **200** | Removed. |  -  |
+| **200** | Environment soft-deleted. |  -  |
 | **401** | Missing or invalid bearer token. |  -  |
 | **404** | Resource not found. |  -  |
-| **409** | `save_in_progress`: a save under this name is still running. Wait for it to settle before removing it. |  -  |
+| **409** | Request conflicts with current account or sandbox state. |  -  |
 
 [[Back to top]](#) [[Back to API list]](../README.md#api-endpoints) [[Back to Model list]](../README.md#models) [[Back to README]](../README.md)
 
 
-## deleteSandbox
+## deleteEnvironmentRepo
 
-> DeletionOperationResponse deleteSandbox(xAsciiConfirmDelete, sandboxId)
+> EnvironmentItemChangeResponse deleteEnvironmentRepo(environmentId, repositoryId, org)
 
-Permanently delete sandbox data
+Remove a repository from an environment
 
-Accept irreversible background deletion of the sandbox machine, snapshots, and content-bearing records. This is not archive: the sandbox cannot be resumed. Named snapshots and other shared artifacts remain independent. Poll the returned operation until `completed`.
+Removes one repository from the environment\'s selection. Mints a new immutable version.
 
 ### Example
 
@@ -1807,7 +1998,7 @@ import {
   Configuration,
   BoatApi,
 } from '@boatdev/sdk';
-import type { DeleteSandboxRequest } from '@boatdev/sdk';
+import type { DeleteEnvironmentRepoRequest } from '@boatdev/sdk';
 
 async function example() {
   console.log("🚀 Testing @boatdev/sdk SDK...");
@@ -1818,14 +2009,16 @@ async function example() {
   const api = new BoatApi(config);
 
   const body = {
-    // string | Must exactly equal the target `sandboxId` or `snapshotId`. A missing or mismatched value returns `409` without accepting deletion.
-    xAsciiConfirmDelete: xAsciiConfirmDelete_example,
-    // string | Public Sandbox id returned by create/list/get sandbox calls.
-    sandboxId: sandboxId_example,
-  } satisfies DeleteSandboxRequest;
+    // string
+    environmentId: 38400000-8cf0-11bd-b23e-10b96e4ef00d,
+    // string | The repository `databaseId`.
+    repositoryId: repositoryId_example,
+    // string | Billing wallet for this request: an organization you belong to, by id (`team_…`) or by name as `GET /orgs` lists it (case-insensitive), or `personal`. Omitted, the account\'s active wallet applies (`PATCH /orgs/active`; personal until set). Two organizations sharing the name answer `409 ambiguous_org` and need the id. Sandboxes and snapshots stay creator-private. On `/environments` routes, only this query parameter selects the organization\'s shared environments; the `X-Boat-Org` header and the active wallet do not apply there. Members read them, owners and admins change them. (optional)
+    org: org_example,
+  } satisfies DeleteEnvironmentRepoRequest;
 
   try {
-    const data = await api.deleteSandbox(body);
+    const data = await api.deleteEnvironmentRepo(body);
     console.log(data);
   } catch (error) {
     console.error(error);
@@ -1841,12 +2034,13 @@ example().catch(console.error);
 
 | Name | Type | Description  | Notes |
 |------------- | ------------- | ------------- | -------------|
-| **xAsciiConfirmDelete** | `string` | Must exactly equal the target `sandboxId` or `snapshotId`. A missing or mismatched value returns `409` without accepting deletion. | [Defaults to `undefined`] |
-| **sandboxId** | `string` | Public Sandbox id returned by create/list/get sandbox calls. | [Defaults to `undefined`] |
+| **environmentId** | `string` |  | [Defaults to `undefined`] |
+| **repositoryId** | `string` | The repository `databaseId`. | [Defaults to `undefined`] |
+| **org** | `string` | Billing wallet for this request: an organization you belong to, by id (`team_…`) or by name as `GET /orgs` lists it (case-insensitive), or `personal`. Omitted, the account\'s active wallet applies (`PATCH /orgs/active`; personal until set). Two organizations sharing the name answer `409 ambiguous_org` and need the id. Sandboxes and snapshots stay creator-private. On `/environments` routes, only this query parameter selects the organization\'s shared environments; the `X-Boat-Org` header and the active wallet do not apply there. Members read them, owners and admins change them. | [Optional] [Defaults to `undefined`] |
 
 ### Return type
 
-[**DeletionOperationResponse**](DeletionOperationResponse.md)
+[**EnvironmentItemChangeResponse**](EnvironmentItemChangeResponse.md)
 
 ### Authorization
 
@@ -1861,22 +2055,20 @@ example().catch(console.error);
 ### HTTP response details
 | Status code | Description | Response headers |
 |-------------|-------------|------------------|
-| **202** | Deletion confirmed and accepted for background processing. |  -  |
+| **200** | New version minted. |  -  |
 | **401** | Missing or invalid bearer token. |  -  |
-| **403** | Authenticated token is not allowed to perform this action. |  -  |
 | **404** | Resource not found. |  -  |
-| **409** | Request conflicts with current account or sandbox state. |  -  |
 
 [[Back to top]](#) [[Back to API list]](../README.md#api-endpoints) [[Back to Model list]](../README.md#models) [[Back to README]](../README.md)
 
 
-## deleteSandboxSnapshots
+## deleteEnvironmentSecretFile
 
-> DeletionOperationListResponse deleteSandboxSnapshots(sandboxId, xAsciiConfirmDelete)
+> EnvironmentItemChangeResponse deleteEnvironmentSecretFile(path, environmentId, org)
 
-Permanently delete all snapshots of a sandbox
+Remove one secret file
 
-Accept irreversible deletion of every unpinned snapshot of this sandbox. The sandbox itself and its named snapshots stay. Snapshots disappear from lists, restores and forks immediately; their stored data is purged in the background. Set `X-Ascii-Confirm-Delete` to the sandbox id.
+Removes the secret file at `path`. Mints a new immutable version.
 
 ### Example
 
@@ -1885,7 +2077,317 @@ import {
   Configuration,
   BoatApi,
 } from '@boatdev/sdk';
-import type { DeleteSandboxSnapshotsRequest } from '@boatdev/sdk';
+import type { DeleteEnvironmentSecretFileRequest } from '@boatdev/sdk';
+
+async function example() {
+  console.log("🚀 Testing @boatdev/sdk SDK...");
+  const config = new Configuration({ 
+    // Configure HTTP bearer authorization: BoatBearerAuth
+    accessToken: "YOUR BEARER TOKEN",
+  });
+  const api = new BoatApi(config);
+
+  const body = {
+    // string
+    path: path_example,
+    // string
+    environmentId: 38400000-8cf0-11bd-b23e-10b96e4ef00d,
+    // string | Billing wallet for this request: an organization you belong to, by id (`team_…`) or by name as `GET /orgs` lists it (case-insensitive), or `personal`. Omitted, the account\'s active wallet applies (`PATCH /orgs/active`; personal until set). Two organizations sharing the name answer `409 ambiguous_org` and need the id. Sandboxes and snapshots stay creator-private. On `/environments` routes, only this query parameter selects the organization\'s shared environments; the `X-Boat-Org` header and the active wallet do not apply there. Members read them, owners and admins change them. (optional)
+    org: org_example,
+  } satisfies DeleteEnvironmentSecretFileRequest;
+
+  try {
+    const data = await api.deleteEnvironmentSecretFile(body);
+    console.log(data);
+  } catch (error) {
+    console.error(error);
+  }
+}
+
+// Run the test
+example().catch(console.error);
+```
+
+### Parameters
+
+
+| Name | Type | Description  | Notes |
+|------------- | ------------- | ------------- | -------------|
+| **path** | `string` |  | [Defaults to `undefined`] |
+| **environmentId** | `string` |  | [Defaults to `undefined`] |
+| **org** | `string` | Billing wallet for this request: an organization you belong to, by id (`team_…`) or by name as `GET /orgs` lists it (case-insensitive), or `personal`. Omitted, the account\'s active wallet applies (`PATCH /orgs/active`; personal until set). Two organizations sharing the name answer `409 ambiguous_org` and need the id. Sandboxes and snapshots stay creator-private. On `/environments` routes, only this query parameter selects the organization\'s shared environments; the `X-Boat-Org` header and the active wallet do not apply there. Members read them, owners and admins change them. | [Optional] [Defaults to `undefined`] |
+
+### Return type
+
+[**EnvironmentItemChangeResponse**](EnvironmentItemChangeResponse.md)
+
+### Authorization
+
+[BoatBearerAuth](../README.md#BoatBearerAuth)
+
+### HTTP request headers
+
+- **Content-Type**: Not defined
+- **Accept**: `application/json`
+
+
+### HTTP response details
+| Status code | Description | Response headers |
+|-------------|-------------|------------------|
+| **200** | New version minted. |  -  |
+| **401** | Missing or invalid bearer token. |  -  |
+| **404** | Resource not found. |  -  |
+
+[[Back to top]](#) [[Back to API list]](../README.md#api-endpoints) [[Back to Model list]](../README.md#models) [[Back to README]](../README.md)
+
+
+## deleteEnvironmentVar
+
+> EnvironmentItemChangeResponse deleteEnvironmentVar(environmentId, key, org)
+
+Remove one environment variable
+
+Removes a single variable. Mints a new immutable version.
+
+### Example
+
+```ts
+import {
+  Configuration,
+  BoatApi,
+} from '@boatdev/sdk';
+import type { DeleteEnvironmentVarRequest } from '@boatdev/sdk';
+
+async function example() {
+  console.log("🚀 Testing @boatdev/sdk SDK...");
+  const config = new Configuration({ 
+    // Configure HTTP bearer authorization: BoatBearerAuth
+    accessToken: "YOUR BEARER TOKEN",
+  });
+  const api = new BoatApi(config);
+
+  const body = {
+    // string
+    environmentId: 38400000-8cf0-11bd-b23e-10b96e4ef00d,
+    // string | Environment variable name.
+    key: key_example,
+    // string | Billing wallet for this request: an organization you belong to, by id (`team_…`) or by name as `GET /orgs` lists it (case-insensitive), or `personal`. Omitted, the account\'s active wallet applies (`PATCH /orgs/active`; personal until set). Two organizations sharing the name answer `409 ambiguous_org` and need the id. Sandboxes and snapshots stay creator-private. On `/environments` routes, only this query parameter selects the organization\'s shared environments; the `X-Boat-Org` header and the active wallet do not apply there. Members read them, owners and admins change them. (optional)
+    org: org_example,
+  } satisfies DeleteEnvironmentVarRequest;
+
+  try {
+    const data = await api.deleteEnvironmentVar(body);
+    console.log(data);
+  } catch (error) {
+    console.error(error);
+  }
+}
+
+// Run the test
+example().catch(console.error);
+```
+
+### Parameters
+
+
+| Name | Type | Description  | Notes |
+|------------- | ------------- | ------------- | -------------|
+| **environmentId** | `string` |  | [Defaults to `undefined`] |
+| **key** | `string` | Environment variable name. | [Defaults to `undefined`] |
+| **org** | `string` | Billing wallet for this request: an organization you belong to, by id (`team_…`) or by name as `GET /orgs` lists it (case-insensitive), or `personal`. Omitted, the account\'s active wallet applies (`PATCH /orgs/active`; personal until set). Two organizations sharing the name answer `409 ambiguous_org` and need the id. Sandboxes and snapshots stay creator-private. On `/environments` routes, only this query parameter selects the organization\'s shared environments; the `X-Boat-Org` header and the active wallet do not apply there. Members read them, owners and admins change them. | [Optional] [Defaults to `undefined`] |
+
+### Return type
+
+[**EnvironmentItemChangeResponse**](EnvironmentItemChangeResponse.md)
+
+### Authorization
+
+[BoatBearerAuth](../README.md#BoatBearerAuth)
+
+### HTTP request headers
+
+- **Content-Type**: Not defined
+- **Accept**: `application/json`
+
+
+### HTTP response details
+| Status code | Description | Response headers |
+|-------------|-------------|------------------|
+| **200** | New version minted. |  -  |
+| **401** | Missing or invalid bearer token. |  -  |
+| **404** | Resource not found. |  -  |
+
+[[Back to top]](#) [[Back to API list]](../README.md#api-endpoints) [[Back to Model list]](../README.md#models) [[Back to README]](../README.md)
+
+
+## deleteNamedSnapshot
+
+> NamedSnapshotDeletedResponse deleteNamedSnapshot(name)
+
+Remove a named snapshot
+
+Remove a named snapshot and release its storage (`boat snapshot rm <name>` in the CLI). Sandboxes already deployed from it are unaffected.
+
+### Example
+
+```ts
+import {
+  Configuration,
+  BoatApi,
+} from '@boatdev/sdk';
+import type { DeleteNamedSnapshotRequest } from '@boatdev/sdk';
+
+async function example() {
+  console.log("🚀 Testing @boatdev/sdk SDK...");
+  const config = new Configuration({ 
+    // Configure HTTP bearer authorization: BoatBearerAuth
+    accessToken: "YOUR BEARER TOKEN",
+  });
+  const api = new BoatApi(config);
+
+  const body = {
+    // string
+    name: name_example,
+  } satisfies DeleteNamedSnapshotRequest;
+
+  try {
+    const data = await api.deleteNamedSnapshot(body);
+    console.log(data);
+  } catch (error) {
+    console.error(error);
+  }
+}
+
+// Run the test
+example().catch(console.error);
+```
+
+### Parameters
+
+
+| Name | Type | Description  | Notes |
+|------------- | ------------- | ------------- | -------------|
+| **name** | `string` |  | [Defaults to `undefined`] |
+
+### Return type
+
+[**NamedSnapshotDeletedResponse**](NamedSnapshotDeletedResponse.md)
+
+### Authorization
+
+[BoatBearerAuth](../README.md#BoatBearerAuth)
+
+### HTTP request headers
+
+- **Content-Type**: Not defined
+- **Accept**: `application/json`
+
+
+### HTTP response details
+| Status code | Description | Response headers |
+|-------------|-------------|------------------|
+| **200** | Removed. |  -  |
+| **401** | Missing or invalid bearer token. |  -  |
+| **404** | Resource not found. |  -  |
+| **409** | `save_in_progress`: a save under this name is still running. Wait for it to settle before removing it. |  -  |
+
+[[Back to top]](#) [[Back to API list]](../README.md#api-endpoints) [[Back to Model list]](../README.md#models) [[Back to README]](../README.md)
+
+
+## deleteSandbox
+
+> DeletionOperationResponse deleteSandbox(xAsciiConfirmDelete, sandboxId)
+
+Permanently delete sandbox data
+
+Accept irreversible background deletion of the sandbox machine, snapshots, and content-bearing records. This is not archive: the sandbox cannot be resumed. Named snapshots and other shared artifacts remain independent. Poll the returned operation until `completed`.
+
+### Example
+
+```ts
+import {
+  Configuration,
+  BoatApi,
+} from '@boatdev/sdk';
+import type { DeleteSandboxRequest } from '@boatdev/sdk';
+
+async function example() {
+  console.log("🚀 Testing @boatdev/sdk SDK...");
+  const config = new Configuration({ 
+    // Configure HTTP bearer authorization: BoatBearerAuth
+    accessToken: "YOUR BEARER TOKEN",
+  });
+  const api = new BoatApi(config);
+
+  const body = {
+    // string | Must exactly equal the target `sandboxId` or `snapshotId`. A missing or mismatched value returns `409` without accepting deletion.
+    xAsciiConfirmDelete: xAsciiConfirmDelete_example,
+    // string | Public Sandbox id returned by create/list/get sandbox calls.
+    sandboxId: sandboxId_example,
+  } satisfies DeleteSandboxRequest;
+
+  try {
+    const data = await api.deleteSandbox(body);
+    console.log(data);
+  } catch (error) {
+    console.error(error);
+  }
+}
+
+// Run the test
+example().catch(console.error);
+```
+
+### Parameters
+
+
+| Name | Type | Description  | Notes |
+|------------- | ------------- | ------------- | -------------|
+| **xAsciiConfirmDelete** | `string` | Must exactly equal the target `sandboxId` or `snapshotId`. A missing or mismatched value returns `409` without accepting deletion. | [Defaults to `undefined`] |
+| **sandboxId** | `string` | Public Sandbox id returned by create/list/get sandbox calls. | [Defaults to `undefined`] |
+
+### Return type
+
+[**DeletionOperationResponse**](DeletionOperationResponse.md)
+
+### Authorization
+
+[BoatBearerAuth](../README.md#BoatBearerAuth)
+
+### HTTP request headers
+
+- **Content-Type**: Not defined
+- **Accept**: `application/json`
+
+
+### HTTP response details
+| Status code | Description | Response headers |
+|-------------|-------------|------------------|
+| **202** | Deletion confirmed and accepted for background processing. |  -  |
+| **401** | Missing or invalid bearer token. |  -  |
+| **403** | Authenticated token is not allowed to perform this action. |  -  |
+| **404** | Resource not found. |  -  |
+| **409** | Request conflicts with current account or sandbox state. |  -  |
+
+[[Back to top]](#) [[Back to API list]](../README.md#api-endpoints) [[Back to Model list]](../README.md#models) [[Back to README]](../README.md)
+
+
+## deleteSandboxSnapshots
+
+> DeletionOperationListResponse deleteSandboxSnapshots(sandboxId, xAsciiConfirmDelete)
+
+Permanently delete all snapshots of a sandbox
+
+Accept irreversible deletion of every unpinned snapshot of this sandbox. The sandbox itself and its named snapshots stay. Snapshots disappear from lists, restores and forks immediately; their stored data is purged in the background. Set `X-Ascii-Confirm-Delete` to the sandbox id.
+
+### Example
+
+```ts
+import {
+  Configuration,
+  BoatApi,
+} from '@boatdev/sdk';
+import type { DeleteSandboxSnapshotsRequest } from '@boatdev/sdk';
 
 async function example() {
   console.log("🚀 Testing @boatdev/sdk SDK...");
@@ -2250,7 +2752,7 @@ example().catch(console.error);
 
 ## environments
 
-> SandboxEnvironmentListResponse environments()
+> SandboxEnvironmentListResponse environments(org)
 
 List Sandbox environments
 
@@ -2273,8 +2775,13 @@ async function example() {
   });
   const api = new BoatApi(config);
 
+  const body = {
+    // string | Billing wallet for this request: an organization you belong to, by id (`team_…`) or by name as `GET /orgs` lists it (case-insensitive), or `personal`. Omitted, the account\'s active wallet applies (`PATCH /orgs/active`; personal until set). Two organizations sharing the name answer `409 ambiguous_org` and need the id. Sandboxes and snapshots stay creator-private. On `/environments` routes, only this query parameter selects the organization\'s shared environments; the `X-Boat-Org` header and the active wallet do not apply there. Members read them, owners and admins change them. (optional)
+    org: org_example,
+  } satisfies EnvironmentsRequest;
+
   try {
-    const data = await api.environments();
+    const data = await api.environments(body);
     console.log(data);
   } catch (error) {
     console.error(error);
@@ -2287,7 +2794,10 @@ example().catch(console.error);
 
 ### Parameters
 
-This endpoint does not need any parameter.
+
+| Name | Type | Description  | Notes |
+|------------- | ------------- | ------------- | -------------|
+| **org** | `string` | Billing wallet for this request: an organization you belong to, by id (`team_…`) or by name as `GET /orgs` lists it (case-insensitive), or `personal`. Omitted, the account\'s active wallet applies (`PATCH /orgs/active`; personal until set). Two organizations sharing the name answer `409 ambiguous_org` and need the id. Sandboxes and snapshots stay creator-private. On `/environments` routes, only this query parameter selects the organization\'s shared environments; the `X-Boat-Org` header and the active wallet do not apply there. Members read them, owners and admins change them. | [Optional] [Defaults to `undefined`] |
 
 ### Return type
 
@@ -2436,7 +2946,161 @@ async function example() {
   } satisfies ForkOperationRequest;
 
   try {
-    const data = await api.fork(body);
+    const data = await api.fork(body);
+    console.log(data);
+  } catch (error) {
+    console.error(error);
+  }
+}
+
+// Run the test
+example().catch(console.error);
+```
+
+### Parameters
+
+
+| Name | Type | Description  | Notes |
+|------------- | ------------- | ------------- | -------------|
+| **sandboxId** | `string` | Public Sandbox id returned by create/list/get sandbox calls. | [Defaults to `undefined`] |
+| **idempotencyKey** | `string` | Optional exactly-once key for creating a sandbox. Send your own opaque, account-unique value (a UUID) to make `POST /sandboxes` safe to retry when the response is lost (network timeout, 5xx): the first request creates the sandbox and binds it to the key; every later request with the **same account, key, and request body** returns that same sandbox instead of creating a second, billable one. Behavior: keys are retained for **24 hours**; a concurrent or early retry while the first sandbox is still being minted returns `409` `idempotency_in_progress` (retry shortly, same key); reusing a key with a **different body** returns `409` `idempotency_key_reused`; timeouts and 5xx are safe to retry with the same key; a create that fails before the sandbox exists releases the key within ~2 minutes so a retry can create the sandbox. Omit the header to keep the default (non-idempotent) behavior. | [Optional] [Defaults to `undefined`] |
+| **forkRequest** | [ForkRequest](ForkRequest.md) |  | [Optional] |
+
+### Return type
+
+[**SandboxActionResponse**](SandboxActionResponse.md)
+
+### Authorization
+
+[BoatBearerAuth](../README.md#BoatBearerAuth)
+
+### HTTP request headers
+
+- **Content-Type**: `application/json`
+- **Accept**: `application/json`
+
+
+### HTTP response details
+| Status code | Description | Response headers |
+|-------------|-------------|------------------|
+| **202** | Fork started. The response `id` is the new forked sandbox id. |  -  |
+| **401** | Missing or invalid bearer token. |  -  |
+| **402** | Account cannot currently create or operate sandboxes. The error body may include a dashboard billing URL, but billing actions are not part of the v1 API. |  -  |
+| **404** | Resource not found. |  -  |
+| **409** | Request conflicts with current account or sandbox state. |  -  |
+| **429** | Machine start or concurrent-sandbox limit reached. Create, fork and resume each count as one machine start against your plan\'s start limits (see the Billing guide; `rate_limited`, naming the window you hit). A sandbox that would exceed your plan\'s concurrent-sandbox cap is refused with `limit_reached`, or `member_limit_reached` when an organization owner has capped you below the plan. |  -  |
+| **503** | No capacity. `no_ready_machine`: a `failFast` create, fork or resume found no ready machine of that type; nothing was started, billed, or counted, and a resumed sandbox stays stopped. `out_of_capacity`: creates and forks are paused until the provisioning queue drains. |  -  |
+
+[[Back to top]](#) [[Back to API list]](../README.md#api-endpoints) [[Back to Model list]](../README.md#models) [[Back to README]](../README.md)
+
+
+## get
+
+> SandboxInfoResponse get(sandboxId)
+
+Get sandbox
+
+Poll this endpoint after create, stop, resume, or fork operations.
+
+### Example
+
+```ts
+import {
+  Configuration,
+  BoatApi,
+} from '@boatdev/sdk';
+import type { GetRequest } from '@boatdev/sdk';
+
+async function example() {
+  console.log("🚀 Testing @boatdev/sdk SDK...");
+  const config = new Configuration({ 
+    // Configure HTTP bearer authorization: BoatBearerAuth
+    accessToken: "YOUR BEARER TOKEN",
+  });
+  const api = new BoatApi(config);
+
+  const body = {
+    // string | Public Sandbox id returned by create/list/get sandbox calls.
+    sandboxId: sandboxId_example,
+  } satisfies GetRequest;
+
+  try {
+    const data = await api.get(body);
+    console.log(data);
+  } catch (error) {
+    console.error(error);
+  }
+}
+
+// Run the test
+example().catch(console.error);
+```
+
+### Parameters
+
+
+| Name | Type | Description  | Notes |
+|------------- | ------------- | ------------- | -------------|
+| **sandboxId** | `string` | Public Sandbox id returned by create/list/get sandbox calls. | [Defaults to `undefined`] |
+
+### Return type
+
+[**SandboxInfoResponse**](SandboxInfoResponse.md)
+
+### Authorization
+
+[BoatBearerAuth](../README.md#BoatBearerAuth)
+
+### HTTP request headers
+
+- **Content-Type**: Not defined
+- **Accept**: `application/json`
+
+
+### HTTP response details
+| Status code | Description | Response headers |
+|-------------|-------------|------------------|
+| **200** | Boat details. |  -  |
+| **401** | Missing or invalid bearer token. |  -  |
+| **404** | Resource not found. |  -  |
+
+[[Back to top]](#) [[Back to API list]](../README.md#api-endpoints) [[Back to Model list]](../README.md#models) [[Back to README]](../README.md)
+
+
+## getAiProxy
+
+> AiProxySettings getAiProxy(org, xBoatOrg)
+
+Get AI credentials proxy
+
+Returns the AI credentials proxy switch of the account in scope, a person or an organization, with its price. Needs an API key with `account.admin`.
+
+### Example
+
+```ts
+import {
+  Configuration,
+  BoatApi,
+} from '@boatdev/sdk';
+import type { GetAiProxyRequest } from '@boatdev/sdk';
+
+async function example() {
+  console.log("🚀 Testing @boatdev/sdk SDK...");
+  const config = new Configuration({ 
+    // Configure HTTP bearer authorization: BoatBearerAuth
+    accessToken: "YOUR BEARER TOKEN",
+  });
+  const api = new BoatApi(config);
+
+  const body = {
+    // string | Billing wallet for this request: an organization you belong to, by id (`team_…`) or by name as `GET /orgs` lists it (case-insensitive), or `personal`. Omitted, the account\'s active wallet applies (`PATCH /orgs/active`; personal until set). Two organizations sharing the name answer `409 ambiguous_org` and need the id. Sandboxes and snapshots stay creator-private. On `/environments` routes, only this query parameter selects the organization\'s shared environments; the `X-Boat-Org` header and the active wallet do not apply there. Members read them, owners and admins change them. (optional)
+    org: org_example,
+    // string | Same as the `org` query parameter. Query wins when both are set. (optional)
+    xBoatOrg: xBoatOrg_example,
+  } satisfies GetAiProxyRequest;
+
+  try {
+    const data = await api.getAiProxy(body);
     console.log(data);
   } catch (error) {
     console.error(error);
@@ -2452,13 +3116,12 @@ example().catch(console.error);
 
 | Name | Type | Description  | Notes |
 |------------- | ------------- | ------------- | -------------|
-| **sandboxId** | `string` | Public Sandbox id returned by create/list/get sandbox calls. | [Defaults to `undefined`] |
-| **idempotencyKey** | `string` | Optional exactly-once key for creating a sandbox. Send your own opaque, account-unique value (a UUID) to make `POST /sandboxes` safe to retry when the response is lost (network timeout, 5xx): the first request creates the sandbox and binds it to the key; every later request with the **same account, key, and request body** returns that same sandbox instead of creating a second, billable one. Behavior: keys are retained for **24 hours**; a concurrent or early retry while the first sandbox is still being minted returns `409` `idempotency_in_progress` (retry shortly, same key); reusing a key with a **different body** returns `409` `idempotency_key_reused`; timeouts and 5xx are safe to retry with the same key; a create that fails before the sandbox exists releases the key within ~2 minutes so a retry can create the sandbox. Omit the header to keep the default (non-idempotent) behavior. | [Optional] [Defaults to `undefined`] |
-| **forkRequest** | [ForkRequest](ForkRequest.md) |  | [Optional] |
+| **org** | `string` | Billing wallet for this request: an organization you belong to, by id (`team_…`) or by name as `GET /orgs` lists it (case-insensitive), or `personal`. Omitted, the account\'s active wallet applies (`PATCH /orgs/active`; personal until set). Two organizations sharing the name answer `409 ambiguous_org` and need the id. Sandboxes and snapshots stay creator-private. On `/environments` routes, only this query parameter selects the organization\'s shared environments; the `X-Boat-Org` header and the active wallet do not apply there. Members read them, owners and admins change them. | [Optional] [Defaults to `undefined`] |
+| **xBoatOrg** | `string` | Same as the `org` query parameter. Query wins when both are set. | [Optional] [Defaults to `undefined`] |
 
 ### Return type
 
-[**SandboxActionResponse**](SandboxActionResponse.md)
+[**AiProxySettings**](AiProxySettings.md)
 
 ### Authorization
 
@@ -2466,31 +3129,26 @@ example().catch(console.error);
 
 ### HTTP request headers
 
-- **Content-Type**: `application/json`
+- **Content-Type**: Not defined
 - **Accept**: `application/json`
 
 
 ### HTTP response details
 | Status code | Description | Response headers |
 |-------------|-------------|------------------|
-| **202** | Fork started. The response `id` is the new forked sandbox id. |  -  |
+| **200** | The switch and its price. |  -  |
 | **401** | Missing or invalid bearer token. |  -  |
-| **402** | Account cannot currently create or operate sandboxes. The error body may include a dashboard billing URL, but billing actions are not part of the v1 API. |  -  |
-| **404** | Resource not found. |  -  |
-| **409** | Request conflicts with current account or sandbox state. |  -  |
-| **429** | Machine start or concurrent-sandbox limit reached. Create, fork and resume each count as one machine start against your plan\'s start limits (see the Billing guide; `rate_limited`, naming the window you hit). A sandbox that would exceed your plan\'s concurrent-sandbox cap is refused with `limit_reached`, or `member_limit_reached` when an organization owner has capped you below the plan. |  -  |
-| **503** | No capacity. `no_ready_machine`: a `failFast` create, fork or resume found no ready machine of that type; nothing was started, billed, or counted, and a resumed sandbox stays stopped. `out_of_capacity`: creates and forks are paused until the provisioning queue drains. |  -  |
 
 [[Back to top]](#) [[Back to API list]](../README.md#api-endpoints) [[Back to Model list]](../README.md#models) [[Back to README]](../README.md)
 
 
-## get
+## getAiUsage
 
-> SandboxInfoResponse get(sandboxId)
+> AccountAiUsageResponse getAiUsage(days, profile, org, xBoatOrg)
 
-Get sandbox
+Get AI usage
 
-Poll this endpoint after create, stop, resume, or fork operations.
+Proxied AI usage, per sandbox and in total, per UTC day, credential and model. Without `profile`, the usage charged to the wallet in scope. With `profile`, the requests made with that profile\'s credentials, whoever pays; only its managers can read it. Needs an API key with `account.read`.
 
 ### Example
 
@@ -2499,7 +3157,7 @@ import {
   Configuration,
   BoatApi,
 } from '@boatdev/sdk';
-import type { GetRequest } from '@boatdev/sdk';
+import type { GetAiUsageRequest } from '@boatdev/sdk';
 
 async function example() {
   console.log("🚀 Testing @boatdev/sdk SDK...");
@@ -2510,12 +3168,18 @@ async function example() {
   const api = new BoatApi(config);
 
   const body = {
-    // string | Public Sandbox id returned by create/list/get sandbox calls.
-    sandboxId: sandboxId_example,
-  } satisfies GetRequest;
+    // number | Days of history, today included. (optional)
+    days: 56,
+    // string | A credential profile id. Counts that profile\'s requests instead of a wallet\'s. (optional)
+    profile: profile_example,
+    // string | Billing wallet for this request: an organization you belong to, by id (`team_…`) or by name as `GET /orgs` lists it (case-insensitive), or `personal`. Omitted, the account\'s active wallet applies (`PATCH /orgs/active`; personal until set). Two organizations sharing the name answer `409 ambiguous_org` and need the id. Sandboxes and snapshots stay creator-private. On `/environments` routes, only this query parameter selects the organization\'s shared environments; the `X-Boat-Org` header and the active wallet do not apply there. Members read them, owners and admins change them. (optional)
+    org: org_example,
+    // string | Same as the `org` query parameter. Query wins when both are set. (optional)
+    xBoatOrg: xBoatOrg_example,
+  } satisfies GetAiUsageRequest;
 
   try {
-    const data = await api.get(body);
+    const data = await api.getAiUsage(body);
     console.log(data);
   } catch (error) {
     console.error(error);
@@ -2531,11 +3195,14 @@ example().catch(console.error);
 
 | Name | Type | Description  | Notes |
 |------------- | ------------- | ------------- | -------------|
-| **sandboxId** | `string` | Public Sandbox id returned by create/list/get sandbox calls. | [Defaults to `undefined`] |
+| **days** | `number` | Days of history, today included. | [Optional] [Defaults to `30`] |
+| **profile** | `string` | A credential profile id. Counts that profile\'s requests instead of a wallet\'s. | [Optional] [Defaults to `undefined`] |
+| **org** | `string` | Billing wallet for this request: an organization you belong to, by id (`team_…`) or by name as `GET /orgs` lists it (case-insensitive), or `personal`. Omitted, the account\'s active wallet applies (`PATCH /orgs/active`; personal until set). Two organizations sharing the name answer `409 ambiguous_org` and need the id. Sandboxes and snapshots stay creator-private. On `/environments` routes, only this query parameter selects the organization\'s shared environments; the `X-Boat-Org` header and the active wallet do not apply there. Members read them, owners and admins change them. | [Optional] [Defaults to `undefined`] |
+| **xBoatOrg** | `string` | Same as the `org` query parameter. Query wins when both are set. | [Optional] [Defaults to `undefined`] |
 
 ### Return type
 
-[**SandboxInfoResponse**](SandboxInfoResponse.md)
+[**AccountAiUsageResponse**](AccountAiUsageResponse.md)
 
 ### Authorization
 
@@ -2550,9 +3217,8 @@ example().catch(console.error);
 ### HTTP response details
 | Status code | Description | Response headers |
 |-------------|-------------|------------------|
-| **200** | Boat details. |  -  |
+| **200** | The usage. |  -  |
 | **401** | Missing or invalid bearer token. |  -  |
-| **404** | Resource not found. |  -  |
 
 [[Back to top]](#) [[Back to API list]](../README.md#api-endpoints) [[Back to Model list]](../README.md#models) [[Back to README]](../README.md)
 
@@ -2913,6 +3579,82 @@ example().catch(console.error);
 [[Back to top]](#) [[Back to API list]](../README.md#api-endpoints) [[Back to Model list]](../README.md#models) [[Back to README]](../README.md)
 
 
+## getSandboxAiUsage
+
+> SandboxAiUsageResponse getSandboxAiUsage(sandboxId, days)
+
+Get sandbox AI usage
+
+One sandbox\'s proxied AI usage per UTC day, credential and model, and whether it is blocked. Needs an API key with `box.read` on the sandbox.
+
+### Example
+
+```ts
+import {
+  Configuration,
+  BoatApi,
+} from '@boatdev/sdk';
+import type { GetSandboxAiUsageRequest } from '@boatdev/sdk';
+
+async function example() {
+  console.log("🚀 Testing @boatdev/sdk SDK...");
+  const config = new Configuration({ 
+    // Configure HTTP bearer authorization: BoatBearerAuth
+    accessToken: "YOUR BEARER TOKEN",
+  });
+  const api = new BoatApi(config);
+
+  const body = {
+    // string | Public Sandbox id returned by create/list/get sandbox calls.
+    sandboxId: sandboxId_example,
+    // number | Days of history, today included. (optional)
+    days: 56,
+  } satisfies GetSandboxAiUsageRequest;
+
+  try {
+    const data = await api.getSandboxAiUsage(body);
+    console.log(data);
+  } catch (error) {
+    console.error(error);
+  }
+}
+
+// Run the test
+example().catch(console.error);
+```
+
+### Parameters
+
+
+| Name | Type | Description  | Notes |
+|------------- | ------------- | ------------- | -------------|
+| **sandboxId** | `string` | Public Sandbox id returned by create/list/get sandbox calls. | [Defaults to `undefined`] |
+| **days** | `number` | Days of history, today included. | [Optional] [Defaults to `30`] |
+
+### Return type
+
+[**SandboxAiUsageResponse**](SandboxAiUsageResponse.md)
+
+### Authorization
+
+[BoatBearerAuth](../README.md#BoatBearerAuth)
+
+### HTTP request headers
+
+- **Content-Type**: Not defined
+- **Accept**: `application/json`
+
+
+### HTTP response details
+| Status code | Description | Response headers |
+|-------------|-------------|------------------|
+| **200** | The usage. |  -  |
+| **401** | Missing or invalid bearer token. |  -  |
+| **404** | Resource not found. |  -  |
+
+[[Back to top]](#) [[Back to API list]](../README.md#api-endpoints) [[Back to Model list]](../README.md#models) [[Back to README]](../README.md)
+
+
 ## getSnapshotDownload
 
 > SnapshotDownloadResponse getSnapshotDownload(snapshotId)
@@ -3382,7 +4124,165 @@ async function example() {
   } satisfies HostPortOperationRequest;
 
   try {
-    const data = await api.hostPort(body);
+    const data = await api.hostPort(body);
+    console.log(data);
+  } catch (error) {
+    console.error(error);
+  }
+}
+
+// Run the test
+example().catch(console.error);
+```
+
+### Parameters
+
+
+| Name | Type | Description  | Notes |
+|------------- | ------------- | ------------- | -------------|
+| **sandboxId** | `string` | Public Sandbox id returned by create/list/get sandbox calls. | [Defaults to `undefined`] |
+| **hostPortRequest** | [HostPortRequest](HostPortRequest.md) |  | |
+
+### Return type
+
+[**HostPortResponse**](HostPortResponse.md)
+
+### Authorization
+
+[BoatBearerAuth](../README.md#BoatBearerAuth)
+
+### HTTP request headers
+
+- **Content-Type**: `application/json`
+- **Accept**: `application/json`
+
+
+### HTTP response details
+| Status code | Description | Response headers |
+|-------------|-------------|------------------|
+| **200** | The public HTTPS URL for the port. |  -  |
+| **400** | Invalid request body or parameters. |  -  |
+| **401** | Missing or invalid bearer token. |  -  |
+| **402** | Account cannot currently create or operate sandboxes. The error body may include a dashboard billing URL, but billing actions are not part of the v1 API. |  -  |
+| **404** | Resource not found. |  -  |
+
+[[Back to top]](#) [[Back to API list]](../README.md#api-endpoints) [[Back to Model list]](../README.md#models) [[Back to README]](../README.md)
+
+
+## interrupt
+
+> SandboxActionResponse interrupt(sandboxId, conversation)
+
+Interrupt running work
+
+Interrupt running agent work. By default this stops **every** conversation on the sandbox. Pass `conversation` to stop just one, leaving the others running. See [Integrated agents](/integrated-agents).
+
+### Example
+
+```ts
+import {
+  Configuration,
+  BoatApi,
+} from '@boatdev/sdk';
+import type { InterruptRequest } from '@boatdev/sdk';
+
+async function example() {
+  console.log("🚀 Testing @boatdev/sdk SDK...");
+  const config = new Configuration({ 
+    // Configure HTTP bearer authorization: BoatBearerAuth
+    accessToken: "YOUR BEARER TOKEN",
+  });
+  const api = new BoatApi(config);
+
+  const body = {
+    // string | Public Sandbox id returned by create/list/get sandbox calls.
+    sandboxId: sandboxId_example,
+    // string | Interrupt only this conversation id. Omit to interrupt the whole sandbox. (optional)
+    conversation: conversation_example,
+  } satisfies InterruptRequest;
+
+  try {
+    const data = await api.interrupt(body);
+    console.log(data);
+  } catch (error) {
+    console.error(error);
+  }
+}
+
+// Run the test
+example().catch(console.error);
+```
+
+### Parameters
+
+
+| Name | Type | Description  | Notes |
+|------------- | ------------- | ------------- | -------------|
+| **sandboxId** | `string` | Public Sandbox id returned by create/list/get sandbox calls. | [Defaults to `undefined`] |
+| **conversation** | `string` | Interrupt only this conversation id. Omit to interrupt the whole sandbox. | [Optional] [Defaults to `undefined`] |
+
+### Return type
+
+[**SandboxActionResponse**](SandboxActionResponse.md)
+
+### Authorization
+
+[BoatBearerAuth](../README.md#BoatBearerAuth)
+
+### HTTP request headers
+
+- **Content-Type**: Not defined
+- **Accept**: `application/json`
+
+
+### HTTP response details
+| Status code | Description | Response headers |
+|-------------|-------------|------------------|
+| **200** | Interrupt requested. |  -  |
+| **401** | Missing or invalid bearer token. |  -  |
+| **402** | Account cannot currently create or operate sandboxes. The error body may include a dashboard billing URL, but billing actions are not part of the v1 API. |  -  |
+| **404** | Resource not found. |  -  |
+| **409** | Request conflicts with current account or sandbox state. |  -  |
+
+[[Back to top]](#) [[Back to API list]](../README.md#api-endpoints) [[Back to Model list]](../README.md#models) [[Back to README]](../README.md)
+
+
+## limits
+
+> LimitsResponse limits(org, xBoatOrg, teamId)
+
+Get Boat limits
+
+Check remaining machine starts, compute time, credits, access readiness, and concurrent-sandbox capacity for the wallet a create would bill: the `org` / `X-Boat-Org` you pass (id or name), else the account\'s active wallet, else personal. The response carries `teamId` when an organization wallet was read.
+
+### Example
+
+```ts
+import {
+  Configuration,
+  BoatApi,
+} from '@boatdev/sdk';
+import type { LimitsRequest } from '@boatdev/sdk';
+
+async function example() {
+  console.log("🚀 Testing @boatdev/sdk SDK...");
+  const config = new Configuration({ 
+    // Configure HTTP bearer authorization: BoatBearerAuth
+    accessToken: "YOUR BEARER TOKEN",
+  });
+  const api = new BoatApi(config);
+
+  const body = {
+    // string | Billing wallet for this request: an organization you belong to, by id (`team_…`) or by name as `GET /orgs` lists it (case-insensitive), or `personal`. Omitted, the account\'s active wallet applies (`PATCH /orgs/active`; personal until set). Two organizations sharing the name answer `409 ambiguous_org` and need the id. Sandboxes and snapshots stay creator-private. On `/environments` routes, only this query parameter selects the organization\'s shared environments; the `X-Boat-Org` header and the active wallet do not apply there. Members read them, owners and admins change them. (optional)
+    org: org_example,
+    // string | Same as the `org` query parameter. Query wins when both are set. (optional)
+    xBoatOrg: xBoatOrg_example,
+    // string | Legacy alias for `org`. Takes precedence over `org` / `X-Boat-Org` when set. (optional)
+    teamId: teamId_example,
+  } satisfies LimitsRequest;
+
+  try {
+    const data = await api.limits(body);
     console.log(data);
   } catch (error) {
     console.error(error);
@@ -3398,12 +4298,13 @@ example().catch(console.error);
 
 | Name | Type | Description  | Notes |
 |------------- | ------------- | ------------- | -------------|
-| **sandboxId** | `string` | Public Sandbox id returned by create/list/get sandbox calls. | [Defaults to `undefined`] |
-| **hostPortRequest** | [HostPortRequest](HostPortRequest.md) |  | |
+| **org** | `string` | Billing wallet for this request: an organization you belong to, by id (`team_…`) or by name as `GET /orgs` lists it (case-insensitive), or `personal`. Omitted, the account\'s active wallet applies (`PATCH /orgs/active`; personal until set). Two organizations sharing the name answer `409 ambiguous_org` and need the id. Sandboxes and snapshots stay creator-private. On `/environments` routes, only this query parameter selects the organization\'s shared environments; the `X-Boat-Org` header and the active wallet do not apply there. Members read them, owners and admins change them. | [Optional] [Defaults to `undefined`] |
+| **xBoatOrg** | `string` | Same as the `org` query parameter. Query wins when both are set. | [Optional] [Defaults to `undefined`] |
+| **teamId** | `string` | Legacy alias for `org`. Takes precedence over `org` / `X-Boat-Org` when set. | [Optional] [Defaults to `undefined`] |
 
 ### Return type
 
-[**HostPortResponse**](HostPortResponse.md)
+[**LimitsResponse**](LimitsResponse.md)
 
 ### Authorization
 
@@ -3411,29 +4312,26 @@ example().catch(console.error);
 
 ### HTTP request headers
 
-- **Content-Type**: `application/json`
+- **Content-Type**: Not defined
 - **Accept**: `application/json`
 
 
 ### HTTP response details
 | Status code | Description | Response headers |
 |-------------|-------------|------------------|
-| **200** | The public HTTPS URL for the port. |  -  |
-| **400** | Invalid request body or parameters. |  -  |
+| **200** | Current creation and concurrent-boat limits. |  -  |
 | **401** | Missing or invalid bearer token. |  -  |
-| **402** | Account cannot currently create or operate sandboxes. The error body may include a dashboard billing URL, but billing actions are not part of the v1 API. |  -  |
-| **404** | Resource not found. |  -  |
 
 [[Back to top]](#) [[Back to API list]](../README.md#api-endpoints) [[Back to Model list]](../README.md#models) [[Back to README]](../README.md)
 
 
-## interrupt
+## listCredentialAccounts
 
-> SandboxActionResponse interrupt(sandboxId, conversation)
+> CredentialAccountsResponse listCredentialAccounts(profile, credential)
 
-Interrupt running work
+List the accounts of a credential
 
-Interrupt running agent work. By default this stops **every** conversation on the sandbox. Pass `conversation` to stop just one, leaving the others running. See [Integrated agents](/integrated-agents).
+Every account of one credential (several ChatGPT sign-ins, several OpenAI keys), in the order they were added, the one in use marked. Labels only, never a secret. Needs an API key with `account.admin`.
 
 ### Example
 
@@ -3442,7 +4340,7 @@ import {
   Configuration,
   BoatApi,
 } from '@boatdev/sdk';
-import type { InterruptRequest } from '@boatdev/sdk';
+import type { ListCredentialAccountsRequest } from '@boatdev/sdk';
 
 async function example() {
   console.log("🚀 Testing @boatdev/sdk SDK...");
@@ -3453,14 +4351,14 @@ async function example() {
   const api = new BoatApi(config);
 
   const body = {
-    // string | Public Sandbox id returned by create/list/get sandbox calls.
-    sandboxId: sandboxId_example,
-    // string | Interrupt only this conversation id. Omit to interrupt the whole sandbox. (optional)
-    conversation: conversation_example,
-  } satisfies InterruptRequest;
+    // string | Profile id or name.
+    profile: profile_example,
+    // CredentialId
+    credential: ...,
+  } satisfies ListCredentialAccountsRequest;
 
   try {
-    const data = await api.interrupt(body);
+    const data = await api.listCredentialAccounts(body);
     console.log(data);
   } catch (error) {
     console.error(error);
@@ -3476,12 +4374,12 @@ example().catch(console.error);
 
 | Name | Type | Description  | Notes |
 |------------- | ------------- | ------------- | -------------|
-| **sandboxId** | `string` | Public Sandbox id returned by create/list/get sandbox calls. | [Defaults to `undefined`] |
-| **conversation** | `string` | Interrupt only this conversation id. Omit to interrupt the whole sandbox. | [Optional] [Defaults to `undefined`] |
+| **profile** | `string` | Profile id or name. | [Defaults to `undefined`] |
+| **credential** | `CredentialId` |  | [Defaults to `undefined`] [Enum: anthropic-api-key, openai-api-key, openrouter-api-key, llmgateway-api-key, deepseek-api-key, moonshot-api-key, mistral-api-key, claude-subscription, chatgpt-subscription, kimi-subscription, mistral-vibe-subscription, claude-bedrock, codex-bedrock] |
 
 ### Return type
 
-[**SandboxActionResponse**](SandboxActionResponse.md)
+[**CredentialAccountsResponse**](CredentialAccountsResponse.md)
 
 ### Authorization
 
@@ -3496,22 +4394,22 @@ example().catch(console.error);
 ### HTTP response details
 | Status code | Description | Response headers |
 |-------------|-------------|------------------|
-| **200** | Interrupt requested. |  -  |
+| **200** | The accounts. |  -  |
+| **400** | Invalid request body or parameters. |  -  |
 | **401** | Missing or invalid bearer token. |  -  |
-| **402** | Account cannot currently create or operate sandboxes. The error body may include a dashboard billing URL, but billing actions are not part of the v1 API. |  -  |
+| **403** | Authenticated token is not allowed to perform this action. |  -  |
 | **404** | Resource not found. |  -  |
-| **409** | Request conflicts with current account or sandbox state. |  -  |
 
 [[Back to top]](#) [[Back to API list]](../README.md#api-endpoints) [[Back to Model list]](../README.md#models) [[Back to README]](../README.md)
 
 
-## limits
+## listCredentialProfiles
 
-> LimitsResponse limits(org, xBoatOrg, teamId)
+> CredentialProfileListResponse listCredentialProfiles()
 
-Get Boat limits
+List credential profiles
 
-Check remaining machine starts, compute time, credits, access readiness, and concurrent-sandbox capacity for the wallet a create would bill: the `org` / `X-Boat-Org` you pass (id or name), else the account\'s active wallet, else personal. The response carries `teamId` when an organization wallet was read.
+Returns every AI credential profile you can use, yours and your organizations\'. Secret values are never returned. Needs an API key with `account.admin`.
 
 ### Example
 
@@ -3520,7 +4418,7 @@ import {
   Configuration,
   BoatApi,
 } from '@boatdev/sdk';
-import type { LimitsRequest } from '@boatdev/sdk';
+import type { ListCredentialProfilesRequest } from '@boatdev/sdk';
 
 async function example() {
   console.log("🚀 Testing @boatdev/sdk SDK...");
@@ -3530,17 +4428,8 @@ async function example() {
   });
   const api = new BoatApi(config);
 
-  const body = {
-    // string | Billing wallet for this request: an organization you belong to, by id (`team_…`) or by name as `GET /orgs` lists it (case-insensitive), or `personal`. Omitted, the account\'s active wallet applies (`PATCH /orgs/active`; personal until set). Two organizations sharing the name answer `409 ambiguous_org` and need the id. Sandboxes, snapshots, and environments stay creator-private. (optional)
-    org: org_example,
-    // string | Same as the `org` query parameter. Query wins when both are set. (optional)
-    xBoatOrg: xBoatOrg_example,
-    // string | Legacy alias for `org`. Takes precedence over `org` / `X-Boat-Org` when set. (optional)
-    teamId: teamId_example,
-  } satisfies LimitsRequest;
-
   try {
-    const data = await api.limits(body);
+    const data = await api.listCredentialProfiles();
     console.log(data);
   } catch (error) {
     console.error(error);
@@ -3553,16 +4442,11 @@ example().catch(console.error);
 
 ### Parameters
 
-
-| Name | Type | Description  | Notes |
-|------------- | ------------- | ------------- | -------------|
-| **org** | `string` | Billing wallet for this request: an organization you belong to, by id (`team_…`) or by name as `GET /orgs` lists it (case-insensitive), or `personal`. Omitted, the account\'s active wallet applies (`PATCH /orgs/active`; personal until set). Two organizations sharing the name answer `409 ambiguous_org` and need the id. Sandboxes, snapshots, and environments stay creator-private. | [Optional] [Defaults to `undefined`] |
-| **xBoatOrg** | `string` | Same as the `org` query parameter. Query wins when both are set. | [Optional] [Defaults to `undefined`] |
-| **teamId** | `string` | Legacy alias for `org`. Takes precedence over `org` / `X-Boat-Org` when set. | [Optional] [Defaults to `undefined`] |
+This endpoint does not need any parameter.
 
 ### Return type
 
-[**LimitsResponse**](LimitsResponse.md)
+[**CredentialProfileListResponse**](CredentialProfileListResponse.md)
 
 ### Authorization
 
@@ -3577,7 +4461,7 @@ example().catch(console.error);
 ### HTTP response details
 | Status code | Description | Response headers |
 |-------------|-------------|------------------|
-| **200** | Current creation and concurrent-boat limits. |  -  |
+| **200** | The profiles. |  -  |
 | **401** | Missing or invalid bearer token. |  -  |
 
 [[Back to top]](#) [[Back to API list]](../README.md#api-endpoints) [[Back to Model list]](../README.md#models) [[Back to README]](../README.md)
@@ -4944,7 +5828,7 @@ async function example() {
   const api = new BoatApi(config);
 
   const body = {
-    // string | Billing wallet for this request: an organization you belong to, by id (`team_…`) or by name as `GET /orgs` lists it (case-insensitive), or `personal`. Omitted, the account\'s active wallet applies (`PATCH /orgs/active`; personal until set). Two organizations sharing the name answer `409 ambiguous_org` and need the id. Sandboxes, snapshots, and environments stay creator-private. (optional)
+    // string | Billing wallet for this request: an organization you belong to, by id (`team_…`) or by name as `GET /orgs` lists it (case-insensitive), or `personal`. Omitted, the account\'s active wallet applies (`PATCH /orgs/active`; personal until set). Two organizations sharing the name answer `409 ambiguous_org` and need the id. Sandboxes and snapshots stay creator-private. On `/environments` routes, only this query parameter selects the organization\'s shared environments; the `X-Boat-Org` header and the active wallet do not apply there. Members read them, owners and admins change them. (optional)
     org: org_example,
     // string | Same as the `org` query parameter. Query wins when both are set. (optional)
     xBoatOrg: xBoatOrg_example,
@@ -4975,7 +5859,7 @@ example().catch(console.error);
 
 | Name | Type | Description  | Notes |
 |------------- | ------------- | ------------- | -------------|
-| **org** | `string` | Billing wallet for this request: an organization you belong to, by id (`team_…`) or by name as `GET /orgs` lists it (case-insensitive), or `personal`. Omitted, the account\'s active wallet applies (`PATCH /orgs/active`; personal until set). Two organizations sharing the name answer `409 ambiguous_org` and need the id. Sandboxes, snapshots, and environments stay creator-private. | [Optional] [Defaults to `undefined`] |
+| **org** | `string` | Billing wallet for this request: an organization you belong to, by id (`team_…`) or by name as `GET /orgs` lists it (case-insensitive), or `personal`. Omitted, the account\'s active wallet applies (`PATCH /orgs/active`; personal until set). Two organizations sharing the name answer `409 ambiguous_org` and need the id. Sandboxes and snapshots stay creator-private. On `/environments` routes, only this query parameter selects the organization\'s shared environments; the `X-Boat-Org` header and the active wallet do not apply there. Members read them, owners and admins change them. | [Optional] [Defaults to `undefined`] |
 | **xBoatOrg** | `string` | Same as the `org` query parameter. Query wins when both are set. | [Optional] [Defaults to `undefined`] |
 | **limit** | `number` | Maximum items to return. | [Optional] [Defaults to `100`] |
 | **cursor** | `string` | Opaque pagination cursor returned as `pageInfo.nextCursor`. | [Optional] [Defaults to `undefined`] |
@@ -5250,7 +6134,248 @@ async function example() {
   } satisfies SetActiveOrganizationRequest;
 
   try {
-    const data = await api.setActiveOrganization(body);
+    const data = await api.setActiveOrganization(body);
+    console.log(data);
+  } catch (error) {
+    console.error(error);
+  }
+}
+
+// Run the test
+example().catch(console.error);
+```
+
+### Parameters
+
+
+| Name | Type | Description  | Notes |
+|------------- | ------------- | ------------- | -------------|
+| **activeOrgUpdateRequest** | [ActiveOrgUpdateRequest](ActiveOrgUpdateRequest.md) |  | |
+
+### Return type
+
+[**ActiveOrgResponse**](ActiveOrgResponse.md)
+
+### Authorization
+
+[BoatBearerAuth](../README.md#BoatBearerAuth)
+
+### HTTP request headers
+
+- **Content-Type**: `application/json`
+- **Accept**: `application/json`
+
+
+### HTTP response details
+| Status code | Description | Response headers |
+|-------------|-------------|------------------|
+| **200** | The wallet now active. |  -  |
+| **400** | Invalid request body or parameters. |  -  |
+| **401** | Missing or invalid bearer token. |  -  |
+| **403** | `not_org_member`: no organization with that id or name that you belong to. |  -  |
+| **409** | `ambiguous_org`: several of your organizations share that name; pass the id. |  -  |
+
+[[Back to top]](#) [[Back to API list]](../README.md#api-endpoints) [[Back to Model list]](../README.md#models) [[Back to README]](../README.md)
+
+
+## setCredentialProfileCustomApi
+
+> CredentialProfileResponse setCredentialProfileCustomApi(profile, name, setCustomApiRequest)
+
+Set a custom API
+
+Adds or replaces one custom API. The sandbox gets `<NAME>` and `<NAME>_BASE_URL`. Needs an API key with `account.admin`.
+
+### Example
+
+```ts
+import {
+  Configuration,
+  BoatApi,
+} from '@boatdev/sdk';
+import type { SetCredentialProfileCustomApiRequest } from '@boatdev/sdk';
+
+async function example() {
+  console.log("🚀 Testing @boatdev/sdk SDK...");
+  const config = new Configuration({ 
+    // Configure HTTP bearer authorization: BoatBearerAuth
+    accessToken: "YOUR BEARER TOKEN",
+  });
+  const api = new BoatApi(config);
+
+  const body = {
+    // string | Profile id or name.
+    profile: profile_example,
+    // string | Environment variable name of the custom API, for example `STRIPE_KEY`. Provider names (`ANTHROPIC_*`, `OPENAI_*`, and so on) and names that end in `_BASE_URL` are reserved.
+    name: name_example,
+    // SetCustomApiRequest
+    setCustomApiRequest: {"value":"sk_live_123","baseUrl":"https://api.stripe.com/v1"},
+  } satisfies SetCredentialProfileCustomApiRequest;
+
+  try {
+    const data = await api.setCredentialProfileCustomApi(body);
+    console.log(data);
+  } catch (error) {
+    console.error(error);
+  }
+}
+
+// Run the test
+example().catch(console.error);
+```
+
+### Parameters
+
+
+| Name | Type | Description  | Notes |
+|------------- | ------------- | ------------- | -------------|
+| **profile** | `string` | Profile id or name. | [Defaults to `undefined`] |
+| **name** | `string` | Environment variable name of the custom API, for example `STRIPE_KEY`. Provider names (`ANTHROPIC_*`, `OPENAI_*`, and so on) and names that end in `_BASE_URL` are reserved. | [Defaults to `undefined`] |
+| **setCustomApiRequest** | [SetCustomApiRequest](SetCustomApiRequest.md) |  | |
+
+### Return type
+
+[**CredentialProfileResponse**](CredentialProfileResponse.md)
+
+### Authorization
+
+[BoatBearerAuth](../README.md#BoatBearerAuth)
+
+### HTTP request headers
+
+- **Content-Type**: `application/json`
+- **Accept**: `application/json`
+
+
+### HTTP response details
+| Status code | Description | Response headers |
+|-------------|-------------|------------------|
+| **200** | The updated profile. |  -  |
+| **400** | Invalid request body or parameters. |  -  |
+| **401** | Missing or invalid bearer token. |  -  |
+| **403** | Authenticated token is not allowed to perform this action. |  -  |
+| **404** | Resource not found. |  -  |
+
+[[Back to top]](#) [[Back to API list]](../README.md#api-endpoints) [[Back to Model list]](../README.md#models) [[Back to README]](../README.md)
+
+
+## setCredentialProfileKey
+
+> CredentialProfileResponse setCredentialProfileKey(profile, credential, setCredentialKeyRequest)
+
+Set a credential profile API key
+
+Sets one API key. A sign-in id returns `400 not_an_api_key`; connect sign-ins on the dashboard Agents page. Running sandboxes that use the profile get the new key. Needs an API key with `account.admin`.
+
+### Example
+
+```ts
+import {
+  Configuration,
+  BoatApi,
+} from '@boatdev/sdk';
+import type { SetCredentialProfileKeyRequest } from '@boatdev/sdk';
+
+async function example() {
+  console.log("🚀 Testing @boatdev/sdk SDK...");
+  const config = new Configuration({ 
+    // Configure HTTP bearer authorization: BoatBearerAuth
+    accessToken: "YOUR BEARER TOKEN",
+  });
+  const api = new BoatApi(config);
+
+  const body = {
+    // string | Profile id or name.
+    profile: profile_example,
+    // CredentialId
+    credential: ...,
+    // SetCredentialKeyRequest
+    setCredentialKeyRequest: ...,
+  } satisfies SetCredentialProfileKeyRequest;
+
+  try {
+    const data = await api.setCredentialProfileKey(body);
+    console.log(data);
+  } catch (error) {
+    console.error(error);
+  }
+}
+
+// Run the test
+example().catch(console.error);
+```
+
+### Parameters
+
+
+| Name | Type | Description  | Notes |
+|------------- | ------------- | ------------- | -------------|
+| **profile** | `string` | Profile id or name. | [Defaults to `undefined`] |
+| **credential** | `CredentialId` |  | [Defaults to `undefined`] [Enum: anthropic-api-key, openai-api-key, openrouter-api-key, llmgateway-api-key, deepseek-api-key, moonshot-api-key, mistral-api-key, claude-subscription, chatgpt-subscription, kimi-subscription, mistral-vibe-subscription, claude-bedrock, codex-bedrock] |
+| **setCredentialKeyRequest** | [SetCredentialKeyRequest](SetCredentialKeyRequest.md) |  | |
+
+### Return type
+
+[**CredentialProfileResponse**](CredentialProfileResponse.md)
+
+### Authorization
+
+[BoatBearerAuth](../README.md#BoatBearerAuth)
+
+### HTTP request headers
+
+- **Content-Type**: `application/json`
+- **Accept**: `application/json`
+
+
+### HTTP response details
+| Status code | Description | Response headers |
+|-------------|-------------|------------------|
+| **200** | The updated profile. |  -  |
+| **400** | Invalid request body or parameters. |  -  |
+| **401** | Missing or invalid bearer token. |  -  |
+| **403** | Authenticated token is not allowed to perform this action. |  -  |
+| **404** | Resource not found. |  -  |
+
+[[Back to top]](#) [[Back to API list]](../README.md#api-endpoints) [[Back to Model list]](../README.md#models) [[Back to README]](../README.md)
+
+
+## setEnvironmentSecretFile
+
+> EnvironmentItemChangeResponse setEnvironmentSecretFile(environmentId, setEnvironmentSecretFileRequest, org)
+
+Write one secret file
+
+Adds or replaces a single secret file by path. Mints a new immutable version.
+
+### Example
+
+```ts
+import {
+  Configuration,
+  BoatApi,
+} from '@boatdev/sdk';
+import type { SetEnvironmentSecretFileOperationRequest } from '@boatdev/sdk';
+
+async function example() {
+  console.log("🚀 Testing @boatdev/sdk SDK...");
+  const config = new Configuration({ 
+    // Configure HTTP bearer authorization: BoatBearerAuth
+    accessToken: "YOUR BEARER TOKEN",
+  });
+  const api = new BoatApi(config);
+
+  const body = {
+    // string
+    environmentId: 38400000-8cf0-11bd-b23e-10b96e4ef00d,
+    // SetEnvironmentSecretFileRequest
+    setEnvironmentSecretFileRequest: ...,
+    // string | Billing wallet for this request: an organization you belong to, by id (`team_…`) or by name as `GET /orgs` lists it (case-insensitive), or `personal`. Omitted, the account\'s active wallet applies (`PATCH /orgs/active`; personal until set). Two organizations sharing the name answer `409 ambiguous_org` and need the id. Sandboxes and snapshots stay creator-private. On `/environments` routes, only this query parameter selects the organization\'s shared environments; the `X-Boat-Org` header and the active wallet do not apply there. Members read them, owners and admins change them. (optional)
+    org: org_example,
+  } satisfies SetEnvironmentSecretFileOperationRequest;
+
+  try {
+    const data = await api.setEnvironmentSecretFile(body);
     console.log(data);
   } catch (error) {
     console.error(error);
@@ -5266,11 +6391,13 @@ example().catch(console.error);
 
 | Name | Type | Description  | Notes |
 |------------- | ------------- | ------------- | -------------|
-| **activeOrgUpdateRequest** | [ActiveOrgUpdateRequest](ActiveOrgUpdateRequest.md) |  | |
+| **environmentId** | `string` |  | [Defaults to `undefined`] |
+| **setEnvironmentSecretFileRequest** | [SetEnvironmentSecretFileRequest](SetEnvironmentSecretFileRequest.md) |  | |
+| **org** | `string` | Billing wallet for this request: an organization you belong to, by id (`team_…`) or by name as `GET /orgs` lists it (case-insensitive), or `personal`. Omitted, the account\'s active wallet applies (`PATCH /orgs/active`; personal until set). Two organizations sharing the name answer `409 ambiguous_org` and need the id. Sandboxes and snapshots stay creator-private. On `/environments` routes, only this query parameter selects the organization\'s shared environments; the `X-Boat-Org` header and the active wallet do not apply there. Members read them, owners and admins change them. | [Optional] [Defaults to `undefined`] |
 
 ### Return type
 
-[**ActiveOrgResponse**](ActiveOrgResponse.md)
+[**EnvironmentItemChangeResponse**](EnvironmentItemChangeResponse.md)
 
 ### Authorization
 
@@ -5285,22 +6412,21 @@ example().catch(console.error);
 ### HTTP response details
 | Status code | Description | Response headers |
 |-------------|-------------|------------------|
-| **200** | The wallet now active. |  -  |
+| **200** | New version minted. |  -  |
 | **400** | Invalid request body or parameters. |  -  |
 | **401** | Missing or invalid bearer token. |  -  |
-| **403** | `not_org_member`: no organization with that id or name that you belong to. |  -  |
-| **409** | `ambiguous_org`: several of your organizations share that name; pass the id. |  -  |
+| **404** | Resource not found. |  -  |
 
 [[Back to top]](#) [[Back to API list]](../README.md#api-endpoints) [[Back to Model list]](../README.md#models) [[Back to README]](../README.md)
 
 
-## setEnvironmentSecretFile
+## setEnvironmentVar
 
-> EnvironmentItemChangeResponse setEnvironmentSecretFile(environmentId, setEnvironmentSecretFileRequest)
+> EnvironmentItemChangeResponse setEnvironmentVar(environmentId, key, setEnvironmentVarRequest, org)
 
-Write one secret file
+Set one environment variable
 
-Adds or replaces a single secret file by path. Mints a new immutable version.
+Sets or replaces a single variable without reading or rewriting the rest. Mints a new immutable version.
 
 ### Example
 
@@ -5309,7 +6435,7 @@ import {
   Configuration,
   BoatApi,
 } from '@boatdev/sdk';
-import type { SetEnvironmentSecretFileOperationRequest } from '@boatdev/sdk';
+import type { SetEnvironmentVarOperationRequest } from '@boatdev/sdk';
 
 async function example() {
   console.log("🚀 Testing @boatdev/sdk SDK...");
@@ -5322,12 +6448,16 @@ async function example() {
   const body = {
     // string
     environmentId: 38400000-8cf0-11bd-b23e-10b96e4ef00d,
-    // SetEnvironmentSecretFileRequest
-    setEnvironmentSecretFileRequest: ...,
-  } satisfies SetEnvironmentSecretFileOperationRequest;
+    // string | Environment variable name.
+    key: key_example,
+    // SetEnvironmentVarRequest
+    setEnvironmentVarRequest: ...,
+    // string | Billing wallet for this request: an organization you belong to, by id (`team_…`) or by name as `GET /orgs` lists it (case-insensitive), or `personal`. Omitted, the account\'s active wallet applies (`PATCH /orgs/active`; personal until set). Two organizations sharing the name answer `409 ambiguous_org` and need the id. Sandboxes and snapshots stay creator-private. On `/environments` routes, only this query parameter selects the organization\'s shared environments; the `X-Boat-Org` header and the active wallet do not apply there. Members read them, owners and admins change them. (optional)
+    org: org_example,
+  } satisfies SetEnvironmentVarOperationRequest;
 
   try {
-    const data = await api.setEnvironmentSecretFile(body);
+    const data = await api.setEnvironmentVar(body);
     console.log(data);
   } catch (error) {
     console.error(error);
@@ -5344,7 +6474,9 @@ example().catch(console.error);
 | Name | Type | Description  | Notes |
 |------------- | ------------- | ------------- | -------------|
 | **environmentId** | `string` |  | [Defaults to `undefined`] |
-| **setEnvironmentSecretFileRequest** | [SetEnvironmentSecretFileRequest](SetEnvironmentSecretFileRequest.md) |  | |
+| **key** | `string` | Environment variable name. | [Defaults to `undefined`] |
+| **setEnvironmentVarRequest** | [SetEnvironmentVarRequest](SetEnvironmentVarRequest.md) |  | |
+| **org** | `string` | Billing wallet for this request: an organization you belong to, by id (`team_…`) or by name as `GET /orgs` lists it (case-insensitive), or `personal`. Omitted, the account\'s active wallet applies (`PATCH /orgs/active`; personal until set). Two organizations sharing the name answer `409 ambiguous_org` and need the id. Sandboxes and snapshots stay creator-private. On `/environments` routes, only this query parameter selects the organization\'s shared environments; the `X-Boat-Org` header and the active wallet do not apply there. Members read them, owners and admins change them. | [Optional] [Defaults to `undefined`] |
 
 ### Return type
 
@@ -5371,13 +6503,13 @@ example().catch(console.error);
 [[Back to top]](#) [[Back to API list]](../README.md#api-endpoints) [[Back to Model list]](../README.md#models) [[Back to README]](../README.md)
 
 
-## setEnvironmentVar
+## setSandboxAiAccess
 
-> EnvironmentItemChangeResponse setEnvironmentVar(environmentId, key, setEnvironmentVarRequest)
+> SandboxAiAccessResponse setSandboxAiAccess(sandboxId, setSandboxAiAccessRequest)
 
-Set one environment variable
+Block or unblock sandbox AI access
 
-Sets or replaces a single variable without reading or rewriting the rest. Mints a new immutable version.
+Blocks or unblocks the sandbox\'s AI placeholders, running or stopped. The proxy refuses a blocked sandbox\'s requests with `403`. It has no effect on a sandbox that holds real keys. The sandbox creator, or a manager of its credential profile, can call it. Needs an API key with `account.admin`.
 
 ### Example
 
@@ -5386,7 +6518,7 @@ import {
   Configuration,
   BoatApi,
 } from '@boatdev/sdk';
-import type { SetEnvironmentVarOperationRequest } from '@boatdev/sdk';
+import type { SetSandboxAiAccessOperationRequest } from '@boatdev/sdk';
 
 async function example() {
   console.log("🚀 Testing @boatdev/sdk SDK...");
@@ -5397,16 +6529,14 @@ async function example() {
   const api = new BoatApi(config);
 
   const body = {
-    // string
-    environmentId: 38400000-8cf0-11bd-b23e-10b96e4ef00d,
-    // string | Environment variable name.
-    key: key_example,
-    // SetEnvironmentVarRequest
-    setEnvironmentVarRequest: ...,
-  } satisfies SetEnvironmentVarOperationRequest;
+    // string | Public Sandbox id returned by create/list/get sandbox calls.
+    sandboxId: sandboxId_example,
+    // SetSandboxAiAccessRequest
+    setSandboxAiAccessRequest: ...,
+  } satisfies SetSandboxAiAccessOperationRequest;
 
   try {
-    const data = await api.setEnvironmentVar(body);
+    const data = await api.setSandboxAiAccess(body);
     console.log(data);
   } catch (error) {
     console.error(error);
@@ -5422,13 +6552,12 @@ example().catch(console.error);
 
 | Name | Type | Description  | Notes |
 |------------- | ------------- | ------------- | -------------|
-| **environmentId** | `string` |  | [Defaults to `undefined`] |
-| **key** | `string` | Environment variable name. | [Defaults to `undefined`] |
-| **setEnvironmentVarRequest** | [SetEnvironmentVarRequest](SetEnvironmentVarRequest.md) |  | |
+| **sandboxId** | `string` | Public Sandbox id returned by create/list/get sandbox calls. | [Defaults to `undefined`] |
+| **setSandboxAiAccessRequest** | [SetSandboxAiAccessRequest](SetSandboxAiAccessRequest.md) |  | |
 
 ### Return type
 
-[**EnvironmentItemChangeResponse**](EnvironmentItemChangeResponse.md)
+[**SandboxAiAccessResponse**](SandboxAiAccessResponse.md)
 
 ### Authorization
 
@@ -5443,9 +6572,10 @@ example().catch(console.error);
 ### HTTP response details
 | Status code | Description | Response headers |
 |-------------|-------------|------------------|
-| **200** | New version minted. |  -  |
+| **200** | The new state. |  -  |
 | **400** | Invalid request body or parameters. |  -  |
 | **401** | Missing or invalid bearer token. |  -  |
+| **403** | Authenticated token is not allowed to perform this action. |  -  |
 | **404** | Resource not found. |  -  |
 
 [[Back to top]](#) [[Back to API list]](../README.md#api-endpoints) [[Back to Model list]](../README.md#models) [[Back to README]](../README.md)
@@ -5914,6 +7044,87 @@ example().catch(console.error);
 [[Back to top]](#) [[Back to API list]](../README.md#api-endpoints) [[Back to Model list]](../README.md#models) [[Back to README]](../README.md)
 
 
+## switchCredentialAccount
+
+> CredentialAccountsResponse switchCredentialAccount(profile, credential, account)
+
+Switch a credential to another account
+
+Makes this account the one in use; the previous one stays as another account. Switching to the account already in use changes nothing. Every sandbox that uses the profile gets it at once, running ones included, with no restart. Use it when one account runs out of credits. Needs an API key with `account.admin`.
+
+### Example
+
+```ts
+import {
+  Configuration,
+  BoatApi,
+} from '@boatdev/sdk';
+import type { SwitchCredentialAccountRequest } from '@boatdev/sdk';
+
+async function example() {
+  console.log("🚀 Testing @boatdev/sdk SDK...");
+  const config = new Configuration({ 
+    // Configure HTTP bearer authorization: BoatBearerAuth
+    accessToken: "YOUR BEARER TOKEN",
+  });
+  const api = new BoatApi(config);
+
+  const body = {
+    // string | Profile id or name.
+    profile: profile_example,
+    // CredentialId
+    credential: ...,
+    // string | The account id from the list.
+    account: account_example,
+  } satisfies SwitchCredentialAccountRequest;
+
+  try {
+    const data = await api.switchCredentialAccount(body);
+    console.log(data);
+  } catch (error) {
+    console.error(error);
+  }
+}
+
+// Run the test
+example().catch(console.error);
+```
+
+### Parameters
+
+
+| Name | Type | Description  | Notes |
+|------------- | ------------- | ------------- | -------------|
+| **profile** | `string` | Profile id or name. | [Defaults to `undefined`] |
+| **credential** | `CredentialId` |  | [Defaults to `undefined`] [Enum: anthropic-api-key, openai-api-key, openrouter-api-key, llmgateway-api-key, deepseek-api-key, moonshot-api-key, mistral-api-key, claude-subscription, chatgpt-subscription, kimi-subscription, mistral-vibe-subscription, claude-bedrock, codex-bedrock] |
+| **account** | `string` | The account id from the list. | [Defaults to `undefined`] |
+
+### Return type
+
+[**CredentialAccountsResponse**](CredentialAccountsResponse.md)
+
+### Authorization
+
+[BoatBearerAuth](../README.md#BoatBearerAuth)
+
+### HTTP request headers
+
+- **Content-Type**: Not defined
+- **Accept**: `application/json`
+
+
+### HTTP response details
+| Status code | Description | Response headers |
+|-------------|-------------|------------------|
+| **200** | The accounts after the switch. |  -  |
+| **400** | Invalid request body or parameters. |  -  |
+| **401** | Missing or invalid bearer token. |  -  |
+| **403** | Authenticated token is not allowed to perform this action. |  -  |
+| **404** | Resource not found. |  -  |
+
+[[Back to top]](#) [[Back to API list]](../README.md#api-endpoints) [[Back to Model list]](../README.md#models) [[Back to README]](../README.md)
+
+
 ## update
 
 > SandboxInfoResponse update(sandboxId, updateSandboxRequest)
@@ -5989,6 +7200,165 @@ example().catch(console.error);
 [[Back to top]](#) [[Back to API list]](../README.md#api-endpoints) [[Back to Model list]](../README.md#models) [[Back to README]](../README.md)
 
 
+## updateAiProxy
+
+> AiProxySettings updateAiProxy(updateAiProxyRequest, org, xBoatOrg)
+
+Turn the AI credentials proxy on or off
+
+With the proxy on, sandboxes get placeholder keys and base URLs that point at Boat. Boat swaps in the real key on each request. Real keys never enter the sandbox.  Running sandboxes switch at their next start. While on, the account pays $1 of Boat time for each UTC day, plus $1 per 1,000 proxied requests, charged to the wallet each sandbox bills. For an organization, only its owner can change the switch. Needs an API key with `account.admin`. 
+
+### Example
+
+```ts
+import {
+  Configuration,
+  BoatApi,
+} from '@boatdev/sdk';
+import type { UpdateAiProxyOperationRequest } from '@boatdev/sdk';
+
+async function example() {
+  console.log("🚀 Testing @boatdev/sdk SDK...");
+  const config = new Configuration({ 
+    // Configure HTTP bearer authorization: BoatBearerAuth
+    accessToken: "YOUR BEARER TOKEN",
+  });
+  const api = new BoatApi(config);
+
+  const body = {
+    // UpdateAiProxyRequest
+    updateAiProxyRequest: ...,
+    // string | Billing wallet for this request: an organization you belong to, by id (`team_…`) or by name as `GET /orgs` lists it (case-insensitive), or `personal`. Omitted, the account\'s active wallet applies (`PATCH /orgs/active`; personal until set). Two organizations sharing the name answer `409 ambiguous_org` and need the id. Sandboxes and snapshots stay creator-private. On `/environments` routes, only this query parameter selects the organization\'s shared environments; the `X-Boat-Org` header and the active wallet do not apply there. Members read them, owners and admins change them. (optional)
+    org: org_example,
+    // string | Same as the `org` query parameter. Query wins when both are set. (optional)
+    xBoatOrg: xBoatOrg_example,
+  } satisfies UpdateAiProxyOperationRequest;
+
+  try {
+    const data = await api.updateAiProxy(body);
+    console.log(data);
+  } catch (error) {
+    console.error(error);
+  }
+}
+
+// Run the test
+example().catch(console.error);
+```
+
+### Parameters
+
+
+| Name | Type | Description  | Notes |
+|------------- | ------------- | ------------- | -------------|
+| **updateAiProxyRequest** | [UpdateAiProxyRequest](UpdateAiProxyRequest.md) |  | |
+| **org** | `string` | Billing wallet for this request: an organization you belong to, by id (`team_…`) or by name as `GET /orgs` lists it (case-insensitive), or `personal`. Omitted, the account\'s active wallet applies (`PATCH /orgs/active`; personal until set). Two organizations sharing the name answer `409 ambiguous_org` and need the id. Sandboxes and snapshots stay creator-private. On `/environments` routes, only this query parameter selects the organization\'s shared environments; the `X-Boat-Org` header and the active wallet do not apply there. Members read them, owners and admins change them. | [Optional] [Defaults to `undefined`] |
+| **xBoatOrg** | `string` | Same as the `org` query parameter. Query wins when both are set. | [Optional] [Defaults to `undefined`] |
+
+### Return type
+
+[**AiProxySettings**](AiProxySettings.md)
+
+### Authorization
+
+[BoatBearerAuth](../README.md#BoatBearerAuth)
+
+### HTTP request headers
+
+- **Content-Type**: `application/json`
+- **Accept**: `application/json`
+
+
+### HTTP response details
+| Status code | Description | Response headers |
+|-------------|-------------|------------------|
+| **200** | The new state. |  -  |
+| **400** | Invalid request body or parameters. |  -  |
+| **401** | Missing or invalid bearer token. |  -  |
+| **403** | Authenticated token is not allowed to perform this action. |  -  |
+
+[[Back to top]](#) [[Back to API list]](../README.md#api-endpoints) [[Back to Model list]](../README.md#models) [[Back to README]](../README.md)
+
+
+## updateCredentialProfile
+
+> CredentialProfileResponse updateCredentialProfile(profile, updateCredentialProfileRequest)
+
+Update a credential profile
+
+Renames the profile, or makes it its owner\'s default. Sandboxes that use the owner\'s default switch to the new default at their next start. Needs an API key with `account.admin`.
+
+### Example
+
+```ts
+import {
+  Configuration,
+  BoatApi,
+} from '@boatdev/sdk';
+import type { UpdateCredentialProfileOperationRequest } from '@boatdev/sdk';
+
+async function example() {
+  console.log("🚀 Testing @boatdev/sdk SDK...");
+  const config = new Configuration({ 
+    // Configure HTTP bearer authorization: BoatBearerAuth
+    accessToken: "YOUR BEARER TOKEN",
+  });
+  const api = new BoatApi(config);
+
+  const body = {
+    // string | Profile id or name.
+    profile: profile_example,
+    // UpdateCredentialProfileRequest
+    updateCredentialProfileRequest: {"isDefault":true},
+  } satisfies UpdateCredentialProfileOperationRequest;
+
+  try {
+    const data = await api.updateCredentialProfile(body);
+    console.log(data);
+  } catch (error) {
+    console.error(error);
+  }
+}
+
+// Run the test
+example().catch(console.error);
+```
+
+### Parameters
+
+
+| Name | Type | Description  | Notes |
+|------------- | ------------- | ------------- | -------------|
+| **profile** | `string` | Profile id or name. | [Defaults to `undefined`] |
+| **updateCredentialProfileRequest** | [UpdateCredentialProfileRequest](UpdateCredentialProfileRequest.md) |  | |
+
+### Return type
+
+[**CredentialProfileResponse**](CredentialProfileResponse.md)
+
+### Authorization
+
+[BoatBearerAuth](../README.md#BoatBearerAuth)
+
+### HTTP request headers
+
+- **Content-Type**: `application/json`
+- **Accept**: `application/json`
+
+
+### HTTP response details
+| Status code | Description | Response headers |
+|-------------|-------------|------------------|
+| **200** | The updated profile. |  -  |
+| **400** | Invalid request body or parameters. |  -  |
+| **401** | Missing or invalid bearer token. |  -  |
+| **403** | Authenticated token is not allowed to perform this action. |  -  |
+| **404** | Resource not found. |  -  |
+| **409** | Request conflicts with current account or sandbox state. |  -  |
+
+[[Back to top]](#) [[Back to API list]](../README.md#api-endpoints) [[Back to Model list]](../README.md#models) [[Back to README]](../README.md)
+
+
 ## updateDataRetention
 
 > DataRetentionPolicyResponse updateDataRetention(dataRetentionUpdateRequest)
@@ -6066,7 +7436,7 @@ example().catch(console.error);
 
 ## updateEnvironment
 
-> SandboxEnvironmentResponse updateEnvironment(environmentId, updateSandboxEnvironmentRequest)
+> SandboxEnvironmentResponse updateEnvironment(environmentId, updateSandboxEnvironmentRequest, org)
 
 Update a sandbox environment
 
@@ -6094,6 +7464,8 @@ async function example() {
     environmentId: 38400000-8cf0-11bd-b23e-10b96e4ef00d,
     // UpdateSandboxEnvironmentRequest
     updateSandboxEnvironmentRequest: ...,
+    // string | Billing wallet for this request: an organization you belong to, by id (`team_…`) or by name as `GET /orgs` lists it (case-insensitive), or `personal`. Omitted, the account\'s active wallet applies (`PATCH /orgs/active`; personal until set). Two organizations sharing the name answer `409 ambiguous_org` and need the id. Sandboxes and snapshots stay creator-private. On `/environments` routes, only this query parameter selects the organization\'s shared environments; the `X-Boat-Org` header and the active wallet do not apply there. Members read them, owners and admins change them. (optional)
+    org: org_example,
   } satisfies UpdateEnvironmentRequest;
 
   try {
@@ -6115,6 +7487,7 @@ example().catch(console.error);
 |------------- | ------------- | ------------- | -------------|
 | **environmentId** | `string` | Environment id returned by `GET /environments`. | [Defaults to `undefined`] |
 | **updateSandboxEnvironmentRequest** | [UpdateSandboxEnvironmentRequest](UpdateSandboxEnvironmentRequest.md) |  | |
+| **org** | `string` | Billing wallet for this request: an organization you belong to, by id (`team_…`) or by name as `GET /orgs` lists it (case-insensitive), or `personal`. Omitted, the account\'s active wallet applies (`PATCH /orgs/active`; personal until set). Two organizations sharing the name answer `409 ambiguous_org` and need the id. Sandboxes and snapshots stay creator-private. On `/environments` routes, only this query parameter selects the organization\'s shared environments; the `X-Boat-Org` header and the active wallet do not apply there. Members read them, owners and admins change them. | [Optional] [Defaults to `undefined`] |
 
 ### Return type
 
@@ -6291,7 +7664,7 @@ example().catch(console.error);
 
 ## upgradeEnvironment
 
-> UpgradeSandboxEnvironmentResponse upgradeEnvironment(environmentId, upgradeSandboxEnvironmentRequest)
+> UpgradeSandboxEnvironmentResponse upgradeEnvironment(environmentId, org, upgradeSandboxEnvironmentRequest)
 
 Upgrade sandboxes to an environment\'s latest version
 
@@ -6317,6 +7690,8 @@ async function example() {
   const body = {
     // string
     environmentId: 38400000-8cf0-11bd-b23e-10b96e4ef00d,
+    // string | Billing wallet for this request: an organization you belong to, by id (`team_…`) or by name as `GET /orgs` lists it (case-insensitive), or `personal`. Omitted, the account\'s active wallet applies (`PATCH /orgs/active`; personal until set). Two organizations sharing the name answer `409 ambiguous_org` and need the id. Sandboxes and snapshots stay creator-private. On `/environments` routes, only this query parameter selects the organization\'s shared environments; the `X-Boat-Org` header and the active wallet do not apply there. Members read them, owners and admins change them. (optional)
+    org: org_example,
     // UpgradeSandboxEnvironmentRequest (optional)
     upgradeSandboxEnvironmentRequest: ...,
   } satisfies UpgradeEnvironmentRequest;
@@ -6339,6 +7714,7 @@ example().catch(console.error);
 | Name | Type | Description  | Notes |
 |------------- | ------------- | ------------- | -------------|
 | **environmentId** | `string` |  | [Defaults to `undefined`] |
+| **org** | `string` | Billing wallet for this request: an organization you belong to, by id (`team_…`) or by name as `GET /orgs` lists it (case-insensitive), or `personal`. Omitted, the account\'s active wallet applies (`PATCH /orgs/active`; personal until set). Two organizations sharing the name answer `409 ambiguous_org` and need the id. Sandboxes and snapshots stay creator-private. On `/environments` routes, only this query parameter selects the organization\'s shared environments; the `X-Boat-Org` header and the active wallet do not apply there. Members read them, owners and admins change them. | [Optional] [Defaults to `undefined`] |
 | **upgradeSandboxEnvironmentRequest** | [UpgradeSandboxEnvironmentRequest](UpgradeSandboxEnvironmentRequest.md) |  | [Optional] |
 
 ### Return type