@idapt/browser-app-sdk 0.1.0 → 0.3.0

package/dist/{client-h2Wsvn7a.d.ts → client-CHsdQcgI.d.cts}

@@ -1,4 +1,4 @@
-import { H as HttpContext, C as CallOptions, F as File$1, g as Agent, b as DeletedResponse, j as ApiKey, ac as Permission, aF as SpeechResult, aQ as TranscriptionResult, aG as SpeechStreamEvent, aR as TranscriptionStreamEvent, B as BlobObject, q as Chat, r as ChatCost, a4 as MessageCosts, t as ChatStopResult, a2 as Message, aw as SendMessageResult, i as AgentRunState, h as AgentRun, aq as RepromptResult, R as ExecutionRun, Q as ExecutionBackend, S as ExecutionRunStatus, v as Computer, E as ComputerServerInfo, x as ComputerExecResult, aP as TmuxWindow, ay as SftpEntry, z as ComputerPort, J as ComputerUser, a0 as ListEnvelope, w as ComputerEnvVar, O as DatastoreEntry, d as FileUploadResult, W as WriteOptions, X as ImageModel, V as ImageGenerationResult, Z as LLMModel, a7 as Notification, a8 as NotificationConfig, a9 as NotificationPreference, af as ProviderEndpointKind, aj as ProviderEndpointProviderKey, ae as ProviderEndpointConnectionType, am as ProviderEndpointTransport, ak as ProviderEndpointRuntime, ai as ProviderEndpointProtocol, an as ProviderEndpointVisibility, ag as ProviderEndpointModality, ad as ProviderEndpoint, a1 as ManagedProviderPreset, al as ProviderEndpointTestResult, at as SearchResult, au as Secret, av as SecretWithValue, ax as Settings, aC as ShareResourceType, aB as SharePermission, az as Share, aA as ShareDeletedResult, aD as SharedWithMeItem, aJ as StoreItemType, aI as StoreItem, aH as StoreInstallResult, aL as Subscription, aN as TableCollection, aO as TableRecord, aS as Trigger, K as CreateTriggerInput, aX as TriggerWithSecret, a_ as UpdateTriggerInput, aV as TriggerRun, aU as TriggerCostStats, b1 as User, b0 as UsageSummary, a$ as UsageRecord, b3 as WebSearchResponse, b7 as WorkspaceMemberRole, b4 as Workspace, b6 as WorkspaceMember, b5 as WorkspaceInvitation, k as AppFolder, M as DataFolder, u as ClientMeta, as as RuntimeMode, aK as StoredCredential, P as EscalateRequest } from './data-Chus9wn2.js';
+import { H as HttpContext, C as CallOptions, F as File$1, i as Agent, d as DeletedResponse, l as ApiKey, ap as Permission, aS as SpeechResult, b1 as TranscriptionResult, aT as SpeechStreamEvent, b2 as TranscriptionStreamEvent, r as Automation, S as CreateAutomationInput, v as AutomationWithSecret, b6 as UpdateAutomationInput, u as AutomationRun, t as AutomationCostStats, B as BlobObject, x as Chat, y as ChatCost, ah as MessageCosts, E as ChatStopResult, af as Message, aJ as SendMessageResult, k as AgentRunState, j as AgentRun, aD as RepromptResult, I as Computer, N as ComputerServerInfo, K as ComputerExecResult, b0 as TmuxWindow, aL as SftpEntry, M as ComputerPort, R as ComputerUser, ad as ListEnvelope, J as ComputerEnvVar, Y as DatastoreEntry, f as FileUploadResult, W as WriteOptions, $ as ExecutionRun, _ as ExecutionBackend, a0 as ExecutionRunStatus, a5 as FunctionRun, a4 as FunctionResource, a2 as FunctionDeployment, a3 as FunctionInvokeResult, a8 as ImageModel, a7 as ImageGenerationResult, aa as LLMModel, ak as Notification, al as NotificationConfig, am as NotificationPreference, as as ProviderEndpointKind, aw as ProviderEndpointProviderKey, ar as ProviderEndpointConnectionType, az as ProviderEndpointTransport, ax as ProviderEndpointRuntime, av as ProviderEndpointProtocol, aA as ProviderEndpointVisibility, at as ProviderEndpointModality, aq as ProviderEndpoint, ae as ManagedProviderPreset, ay as ProviderEndpointTestResult, aG as SearchResult, aH as Secret, aI as SecretWithValue, aK as Settings, aP as ShareResourceType, aO as SharePermission, aM as Share, aN as ShareDeletedResult, aQ as SharedWithMeItem, aW as StoreItemType, aV as StoreItem, aU as StoreInstallResult, aY as Subscription, a_ as TableCollection, a$ as TableRecord, b9 as User, b8 as UsageSummary, b7 as UsageRecord, bf as WebSearchResponse, bj as WorkspaceMemberRole, bg as Workspace, bi as WorkspaceMember, bh as WorkspaceInvitation, m as AppFolder, U as DataFolder, G as ClientMeta, aF as RuntimeMode, aX as StoredCredential, Z as EscalateRequest } from './data-DtOpB63U.cjs';
 
 /**
  * Stateless low-level file operations against `/api/v1/drive/files/*`.
@@ -259,6 +259,83 @@ declare class AudioApi {
     streamTranscribe(input: TranscribeInput, opts?: CallOptions): AsyncIterable<TranscriptionStreamEvent>;
 }
 
+/**
+ * AutomationsApi — `/api/v1/automations`.
+ *
+ * Automations fire actions on events (webhook or cron). The `fire` endpoint is
+ * unauthenticated — it validates the
+ * per-automation webhook secret instead of the bearer token. This SDK handles
+ * both modes: regular calls use `this.ctx.key`; `fire` can be called with
+ * an explicit secret override.
+ */
+
+interface FireAutomationInput {
+    /**
+     * Webhook secret for this automation. Overrides the client's `ap_` key.
+     * Required when calling `fire` outside the creating user's session.
+     */
+    secret: string;
+    /** Optional context overrides forwarded to the action. */
+    body?: Record<string, unknown>;
+}
+interface ListAutomationRunsQuery {
+    limit?: number;
+    /** Opaque pagination cursor — echo `pagination.next_cursor`. */
+    cursor?: string;
+}
+interface ListAutomationsQuery {
+    workspace_id?: string;
+    include_archived?: boolean;
+    archived_only?: boolean;
+}
+interface BulkAutomationCostStatsQuery {
+    workspace_id?: string;
+}
+declare class AutomationsApi {
+    private readonly ctx;
+    constructor(ctx: HttpContext);
+    list(query?: ListAutomationsQuery, opts?: CallOptions): Promise<Automation[]>;
+    /**
+     * Create an automation. `workspace_id` is passed in the request BODY
+     * alongside the flat automation definition — it is not a query param. The request
+     * body is flat: every scheduling field (`cron_expression`, …) and every
+     * action field (`agent_id`, `prompt_template`, `function_id`, …) sits at the
+     * top level — there are no nested `trigger_config` / `action_config`
+     * objects any more.
+     *
+     * For a webhook automation the response additionally carries a one-time
+     * plaintext `secret` (use `AutomationWithSecret`); other automation types
+     * resolve to a plain `Automation`.
+     */
+    create(workspaceId: string, input: CreateAutomationInput, opts?: CallOptions): Promise<AutomationWithSecret | Automation>;
+    get(id: string, opts?: CallOptions): Promise<Automation>;
+    update(id: string, input: UpdateAutomationInput, opts?: CallOptions): Promise<Automation>;
+    delete(id: string, opts?: CallOptions): Promise<DeletedResponse>;
+    archive(id: string, opts?: CallOptions): Promise<Automation>;
+    unarchive(id: string, opts?: CallOptions): Promise<Automation>;
+    /**
+     * Fire an automation via its webhook secret. This endpoint does NOT use the
+     * client's `ap_` key — the bearer is the automation's secret — so we build a
+     * one-off HttpContext for it rather than mutating the shared one.
+     *
+     * Responds HTTP 202. The response identifies the fired automation via `id`
+     * only.
+     */
+    fire(id: string, input: FireAutomationInput, opts?: CallOptions): Promise<{
+        id: string;
+    }>;
+    /**
+     * Rotate the webhook secret. Returns the automation with a fresh one-time
+     * plaintext `secret` populated (`AutomationWithSecret`). The old secret
+     * immediately stops working.
+     */
+    rotateSecret(id: string, opts?: CallOptions): Promise<AutomationWithSecret>;
+    /** Recent fires + their success/error outcome. */
+    listRuns(id: string, query?: ListAutomationRunsQuery, opts?: CallOptions): Promise<AutomationRun[]>;
+    getCostStats(id: string, opts?: CallOptions): Promise<AutomationCostStats>;
+    getCostStatsMap(query?: BulkAutomationCostStatsQuery, opts?: CallOptions): Promise<Record<string, AutomationCostStats>>;
+}
+
 /**
  * BlobsApi — `/api/v1/blobs` (the object-storage data plane).
  *
@@ -351,6 +428,12 @@ interface CommandBinding {
     responseKind: "single" | "list" | "created" | "deleted" | "binary";
     /** Long-running → goes through the async-operation layer. */
     async: boolean;
+    /** Client polling parameters for operations that outlive the poller's
+     * defaults (e.g. video generation: 5000ms × 240 ≈ a 20-minute ceiling). */
+    pollHint?: {
+        intervalMs: number;
+        maxAttempts: number;
+    };
     /** For `binary` responses — the served media types (e.g. `text/event-stream`). */
     binaryContentTypes?: readonly string[];
 }
@@ -360,7 +443,7 @@ declare const COMMAND_BINDINGS: Record<string, CommandBinding>;
  * {@link COMMAND_BINDINGS}). Used to type `client.call(action, args)` so a
  * known action autocompletes and a typo is caught at compile time.
  */
-type V1CommandName = "agent archive" | "agent copy-to-workspace" | "agent create" | "agent delete" | "agent get" | "agent list" | "agent move" | "agent permanent-delete" | "agent restore" | "agent unarchive" | "agent update" | "ai-gateway providers" | "ai-gateway usage" | "api-key create" | "api-key delete" | "api-key list" | "api-key rotate" | "api-key update" | "audio models" | "audio search-models" | "audio search-voices" | "audio speak" | "audio speak-stream" | "audio transcribe" | "audio transcribe-stream" | "audio voices" | "blobs delete" | "blobs get" | "blobs head" | "blobs list" | "blobs namespaces" | "blobs put" | "blobs signed-url" | "browser-app create" | "browser-app deploy" | "browser-app deployments" | "browser-app fork" | "browser-app get" | "browser-app list" | "browser-app promote" | "browser-app snapshot" | "chat archive" | "chat copy-to-agent" | "chat copy-to-workspace" | "chat cost" | "chat create" | "chat delete" | "chat export" | "chat fork-to-workspace" | "chat get" | "chat list" | "chat message-costs" | "chat messages" | "chat permanent-delete" | "chat reprompt" | "chat restore" | "chat runs" | "chat send" | "chat stop" | "chat stream" | "chat unarchive" | "chat update" | "ci cancel" | "ci get" | "ci jobs" | "ci list" | "ci run" | "code execute" | "code get" | "code interrupt" | "code list" | "computer activity" | "computer add-local-model" | "computer app-create" | "computer app-delete" | "computer app-exec" | "computer app-expose" | "computer app-external" | "computer app-get" | "computer app-logs" | "computer app-ports" | "computer app-reset" | "computer app-restart" | "computer app-run" | "computer app-runtime" | "computer app-setup-runtime" | "computer app-start" | "computer app-stop" | "computer app-unexpose" | "computer apps" | "computer archive" | "computer compose-up" | "computer create" | "computer create-user" | "computer delete" | "computer delete-user" | "computer delete-user-env" | "computer download" | "computer exec" | "computer expose" | "computer get" | "computer get-user" | "computer hibernate" | "computer link" | "computer links" | "computer list" | "computer local-inference" | "computer local-models" | "computer manage" | "computer pair" | "computer ports" | "computer remove-local-model" | "computer set-ports" | "computer set-user-env" | "computer sftp" | "computer start" | "computer stop" | "computer test-connection" | "computer tmux" | "computer tunnels" | "computer unarchive" | "computer unexpose" | "computer unlink" | "computer update" | "computer update-user" | "computer upload" | "computer user-env" | "computer user-env-setup" | "computer user-env-setup-apply" | "computer user-env-sync" | "computer user-env-sync-repair" | "computer users" | "datastore batch" | "datastore delete" | "datastore get" | "datastore increment" | "datastore list" | "datastore namespaces" | "datastore set" | "drive content-versions" | "drive create-folder" | "drive delete" | "drive get-metadata" | "drive glob" | "drive grep" | "drive list" | "drive move" | "drive permanent-delete" | "drive read" | "drive restore" | "drive restore-version" | "drive run" | "drive update" | "drive upload" | "guide get" | "hook create" | "hook delete" | "hook get" | "hook history" | "hook list" | "hook override" | "hook preview" | "hook toggle" | "hook update" | "hub install" | "hub search" | "hub submissions" | "hub submit" | "hub update" | "hub update-check" | "image generate" | "image models" | "image search" | "me get" | "me usage" | "models list" | "models search" | "notes box-create" | "notes box-delete" | "notes box-get" | "notes box-list" | "notes box-update" | "notes delete" | "notes graph" | "notes index-read" | "notes index-write" | "notes links" | "notes list" | "notes note-rename" | "notes read" | "notes search" | "notes search-all" | "notes tag-list" | "notes tag-rename" | "notes write" | "notification config" | "notification delete" | "notification get" | "notification list" | "notification preferences" | "notification read-all" | "notification send" | "notification update" | "notification update-config" | "notification update-preferences" | "operation cancel" | "operation get" | "operation list" | "provider-endpoint create" | "provider-endpoint delete" | "provider-endpoint list" | "provider-endpoint presets" | "provider-endpoint test" | "provider-endpoint update" | "realtime broadcast" | "realtime presence" | "realtime presence-list" | "realtime subscribe" | "repos branches" | "repos clone-url" | "repos commit" | "repos commits" | "repos create" | "repos delete" | "repos get" | "repos list" | "repos read-file" | "repos set-visibility" | "search query" | "secret create" | "secret delete" | "secret get" | "secret list" | "secret reveal" | "secret update" | "settings get" | "settings update" | "share create" | "share delete" | "share list" | "share update" | "shared-with-me list" | "skill apply-update" | "skill attach" | "skill body" | "skill create" | "skill delete" | "skill detach" | "skill file-delete" | "skill file-list" | "skill file-read" | "skill file-write" | "skill fork" | "skill get" | "skill install" | "skill list" | "skill publish" | "skill render" | "skill search" | "skill update" | "skill update-check" | "subscription get" | "table create" | "table create-record" | "table delete" | "table delete-record" | "table export" | "table get" | "table get-record" | "table import" | "table list" | "table query" | "table update" | "table update-record" | "tasks ancestors" | "tasks assign" | "tasks comment" | "tasks comment-delete" | "tasks comment-list" | "tasks comment-update" | "tasks create" | "tasks delete" | "tasks depend" | "tasks dependencies" | "tasks duplicate" | "tasks events" | "tasks get" | "tasks label-create" | "tasks label-delete" | "tasks label-list" | "tasks label-update" | "tasks list" | "tasks list-create" | "tasks list-delete" | "tasks list-get" | "tasks list-list" | "tasks list-update" | "tasks unassign" | "tasks undepend" | "tasks update" | "trigger archive" | "trigger cost-stats" | "trigger cost-stats-all" | "trigger create" | "trigger delete" | "trigger fire" | "trigger get" | "trigger list" | "trigger rotate-secret" | "trigger runs" | "trigger test-fire" | "trigger unarchive" | "trigger update" | "web fetch" | "web search" | "workspace add-member" | "workspace archive" | "workspace create" | "workspace delete" | "workspace get" | "workspace invitations" | "workspace invite" | "workspace list" | "workspace members" | "workspace remove-member" | "workspace revoke-invitation" | "workspace unarchive" | "workspace update" | "workspace update-member";
+type V1CommandName = "agent archive" | "agent copy-to-workspace" | "agent create" | "agent delete" | "agent get" | "agent list" | "agent move" | "agent permanent-delete" | "agent restore" | "agent unarchive" | "agent update" | "ai-gateway providers" | "ai-gateway usage" | "api-key create" | "api-key delete" | "api-key list" | "api-key rotate" | "api-key update" | "audio models" | "audio search-models" | "audio search-voices" | "audio speak" | "audio speak-stream" | "audio transcribe" | "audio transcribe-stream" | "audio voices" | "automation archive" | "automation cost-stats" | "automation cost-stats-all" | "automation create" | "automation delete" | "automation fire" | "automation get" | "automation list" | "automation rotate-secret" | "automation runs" | "automation test-fire" | "automation unarchive" | "automation update" | "blobs delete" | "blobs get" | "blobs head" | "blobs list" | "blobs namespaces" | "blobs put" | "blobs signed-url" | "browser-app create" | "browser-app deploy" | "browser-app deployments" | "browser-app fork" | "browser-app get" | "browser-app list" | "browser-app promote" | "browser-app snapshot" | "chat archive" | "chat copy-to-agent" | "chat copy-to-workspace" | "chat cost" | "chat create" | "chat delete" | "chat export" | "chat fork-to-workspace" | "chat get" | "chat list" | "chat message-costs" | "chat messages" | "chat permanent-delete" | "chat reprompt" | "chat restore" | "chat runs" | "chat send" | "chat stop" | "chat stream" | "chat unarchive" | "chat update" | "ci cancel" | "ci get" | "ci jobs" | "ci list" | "ci run" | "computer activity" | "computer add-exposure" | "computer add-local-model" | "computer app-create" | "computer app-delete" | "computer app-exec" | "computer app-expose" | "computer app-external" | "computer app-get" | "computer app-logs" | "computer app-ports" | "computer app-reset" | "computer app-restart" | "computer app-run" | "computer app-runtime" | "computer app-setup-runtime" | "computer app-start" | "computer app-stop" | "computer app-unexpose" | "computer apps" | "computer archive" | "computer compose-up" | "computer create" | "computer create-user" | "computer delete" | "computer delete-user" | "computer delete-user-env" | "computer download" | "computer download-to-drive" | "computer ephemeral" | "computer exec" | "computer expose" | "computer get" | "computer get-user" | "computer hibernate" | "computer list" | "computer local-inference" | "computer local-models" | "computer manage" | "computer pair" | "computer ports" | "computer remove-exposure" | "computer remove-local-model" | "computer run" | "computer set-ports" | "computer set-user-env" | "computer sftp" | "computer start" | "computer stop" | "computer test-connection" | "computer tmux" | "computer transfer" | "computer tunnels" | "computer unarchive" | "computer unexpose" | "computer update" | "computer update-exposure" | "computer update-user" | "computer upload" | "computer user-env" | "computer user-env-setup" | "computer user-env-setup-apply" | "computer user-env-sync" | "computer user-env-sync-repair" | "computer users" | "datastore batch" | "datastore delete" | "datastore get" | "datastore increment" | "datastore list" | "datastore namespaces" | "datastore set" | "drive content-versions" | "drive create-folder" | "drive delete" | "drive get-metadata" | "drive glob" | "drive grep" | "drive list" | "drive move" | "drive permanent-delete" | "drive read" | "drive restore" | "drive restore-version" | "drive run" | "drive update" | "drive upload" | "functions create" | "functions delete" | "functions deploy" | "functions deployments" | "functions get" | "functions invoke" | "functions list" | "functions promote" | "functions update" | "guide get" | "hook create" | "hook delete" | "hook get" | "hook history" | "hook list" | "hook override" | "hook preview" | "hook toggle" | "hook update" | "hub install" | "hub search" | "hub submissions" | "hub submit" | "hub update" | "hub update-check" | "image generate" | "image models" | "image search" | "me get" | "me usage" | "memory box-delete" | "memory box-get" | "memory box-list" | "memory box-update" | "memory delete" | "memory index-read" | "memory index-write" | "memory list" | "memory read" | "memory search" | "memory write" | "models list" | "models search" | "notes box-create" | "notes box-delete" | "notes box-get" | "notes box-list" | "notes box-update" | "notes delete" | "notes folder-create" | "notes folder-delete" | "notes folder-list" | "notes folder-move" | "notes folder-rename" | "notes graph" | "notes import" | "notes index-read" | "notes index-write" | "notes links" | "notes list" | "notes note-move" | "notes note-rename" | "notes purge" | "notes read" | "notes restore" | "notes search" | "notes search-all" | "notes tag-list" | "notes tag-rename" | "notes trash-empty" | "notes trash-list" | "notes tree" | "notes write" | "notification config" | "notification delete" | "notification get" | "notification list" | "notification preferences" | "notification read-all" | "notification send" | "notification update" | "notification update-config" | "notification update-preferences" | "operation cancel" | "operation get" | "operation list" | "provider-endpoint create" | "provider-endpoint delete" | "provider-endpoint list" | "provider-endpoint presets" | "provider-endpoint test" | "provider-endpoint update" | "realtime broadcast" | "realtime presence" | "realtime presence-list" | "realtime subscribe" | "repos branches" | "repos clone-url" | "repos commit" | "repos commits" | "repos create" | "repos delete" | "repos get" | "repos list" | "repos read-file" | "repos set-visibility" | "search query" | "secret create" | "secret delete" | "secret get" | "secret list" | "secret reveal" | "secret update" | "settings get" | "settings update" | "share create" | "share delete" | "share list" | "share update" | "shared-with-me list" | "skill apply-update" | "skill attach" | "skill body" | "skill create" | "skill delete" | "skill detach" | "skill file-delete" | "skill file-list" | "skill file-read" | "skill file-write" | "skill fork" | "skill get" | "skill install" | "skill list" | "skill publish" | "skill render" | "skill search" | "skill update" | "skill update-check" | "subscription get" | "table create" | "table create-record" | "table delete" | "table delete-record" | "table export" | "table get" | "table get-record" | "table import" | "table list" | "table query" | "table update" | "table update-record" | "tasks ancestors" | "tasks assign" | "tasks comment" | "tasks comment-delete" | "tasks comment-list" | "tasks comment-update" | "tasks create" | "tasks delete" | "tasks depend" | "tasks dependencies" | "tasks duplicate" | "tasks events" | "tasks get" | "tasks import" | "tasks label-create" | "tasks label-delete" | "tasks label-list" | "tasks label-update" | "tasks list" | "tasks list-create" | "tasks list-delete" | "tasks list-get" | "tasks list-list" | "tasks list-update" | "tasks unassign" | "tasks undepend" | "tasks update" | "video generate" | "video models" | "video search" | "web fetch" | "web search" | "workspace add-member" | "workspace archive" | "workspace create" | "workspace delete" | "workspace get" | "workspace invitations" | "workspace invite" | "workspace list" | "workspace members" | "workspace remove-member" | "workspace revoke-invitation" | "workspace unarchive" | "workspace update" | "workspace update-member";
 
 /**
  * Generic, spec-driven command executor — the SDK twin of the CLI's `runSpec`.
@@ -630,54 +713,6 @@ declare class ChatsApi {
     repromptMessage(chatId: string, messageId: string, input?: RepromptMessageInput, opts?: CallOptions): Promise<RepromptResult>;
 }
 
-/**
- * CodeRunsApi — `/api/v1/code-runs`.
- *
- * Two surfaces:
- *   - `POST /code-runs` — execute a code file in a sandboxed Lambda
- *     environment. Returns stdout, stderr, exit code, timing.
- *   - `GET /code-runs` + `GET /code-runs/:id` — history browsing.
- *
- * Browser-apps use `runs.run()` to invoke a file owned by the user (e.g., a
- * Python helper in the data folder) without needing a full computer.
- */
-
-interface RunCodeInput {
-    file_id: string;
-    /** Hard upper bound on wall-clock runtime. Default 30s server-side. */
-    timeout_seconds?: number;
-    /**
-     * Environment variables passed to the running code. `IDAPT_API_KEY` is
-     * allowed. `AWS_*` and runtime-hijacking vars are stripped server-side.
-     */
-    env?: Record<string, string>;
-}
-/**
- * `GET /v1/code-runs` query params. Cursor-paginated (opaque `cursor`);
- * `backend` and `status` are closed enums.
- */
-interface ListExecutionsQuery {
-    limit?: number;
-    /** Opaque pagination cursor — echo `pagination.next_cursor`. */
-    cursor?: string;
-    backend?: ExecutionBackend;
-    status?: ExecutionRunStatus;
-}
-declare class CodeRunsApi {
-    private readonly ctx;
-    constructor(ctx: HttpContext);
-    /**
-     * Execute a code file. Returns the full `ExecutionRun` row — `id`,
-     * `status`, `stdout`, `stderr`, `exit_code`, and the run timestamps —
-     * the same shape as `GET /code-runs/:id`.
-     */
-    run(input: RunCodeInput, opts?: CallOptions): Promise<ExecutionRun>;
-    /** List recent execution runs. */
-    list(query?: ListExecutionsQuery, opts?: CallOptions): Promise<ExecutionRun[]>;
-    /** Get a single execution run by id. */
-    get(id: string, opts?: CallOptions): Promise<ExecutionRun>;
-}
-
 /**
  * ComputersApi — `/api/v1/computers`.
  *
@@ -699,19 +734,25 @@ declare class CodeRunsApi {
  *   - User env vars     — listUserEnvVars / createUserEnvVar /
  *                          deleteUserEnvVar / setupUserEnv /
  *                          checkUserEnvSetup / syncUserEnv / checkUserEnvSync
- *   - Workspace links   — listWorkspaceLinks / linkWorkspace / unlinkWorkspace
- *                          (share a computer's LOCAL INFERENCE into other
- *                          workspaces; never shell / files / tunnels)
+ *   - Exposures         — expose / updateExposure / unexpose (expose an
+ *                          actor-owned machine into a workspace with a
+ *                          per-capability grant) + transfer (move ownership)
  *   - Pair              — pair (daemon token bootstrap; bearer-overridden,
  *                          mirrors the trigger-fire pattern)
  *
- * Permissions on every authenticated verb default to the caller's
- * `computers:read` / `computers:write` scope. See `lib/computers/Computers.md`
+ * Authenticated verbs are split by surface: generic computer read/write covers
+ * metadata, while lifecycle, exec, files, tunnels, terminal, desktop, local
+ * inference, apps, and admin operations require their explicit computer action
+ * grants. See `backend/packages/computers/src/internal/computers/Computers.md`
  * for the end-to-end computer model.
  */
 
 interface ListComputersQuery {
-    workspace_id: string;
+    /**
+     * Narrow the list to one organization the actor belongs to (its resourceId).
+     * Machines are actor-owned; omit for the actor's own machines + all its orgs'.
+     */
+    organization?: string;
     limit?: number;
     /** Opaque pagination cursor — echo `pagination.next_cursor`. */
     cursor?: string;
@@ -844,20 +885,29 @@ interface PairComputerResult {
     domain: string;
 }
 /**
- * One `computer_workspace` link — a computer shared INTO an additional
- * workspace, granting LOCAL INFERENCE ONLY (never shell / files / tunnels).
- * `workspace_resource_id` is the target workspace's public `ws_…` id.
+ * One `computer_workspace` EXPOSURE — an actor-owned machine exposed INTO a
+ * workspace (Layer 2) with a per-capability grant. `workspace_resource_id` is
+ * the target workspace's public `ws_…` id; `capabilities` is the granted
+ * capability-slug subset.
  */
-interface ComputerWorkspaceLink {
+interface ComputerExposure {
     id: string;
     computer_id: string;
     workspace_id: string;
     workspace_resource_id: string | null;
-    permissions: unknown[] | null;
-    created_by_actor_id: string;
+    capabilities: string[];
+    label: string | null;
+    created_by_actor_id: string | null;
     created_at: number;
     updated_at: number;
 }
+/** `POST /v1/computers/{id}/expose` body. */
+interface ExposeComputerInput {
+    /** Target workspace — public `ws_…` resourceId or slug. */
+    workspace_id: string;
+    /** Capability-slug subset to grant {local-inference, terminal, files, computer-use, tunnels, apps}. */
+    capabilities: string[];
+}
 declare class ComputersApi {
     private readonly ctx;
     constructor(ctx: HttpContext);
@@ -960,30 +1010,37 @@ declare class ComputersApi {
     syncUserEnv(id: string, username: string, opts?: CallOptions): Promise<Record<string, unknown>>;
     checkUserEnvSync(id: string, username: string, opts?: CallOptions): Promise<Record<string, unknown>>;
     /**
-     * List the workspaces a computer's LOCAL INFERENCE is shared into. The home
-     * workspace is never listed (it already has full access). The route returns
-     * the links under a `links` key (not a standard list envelope).
+     * Expose an actor-owned machine INTO a workspace (Layer 2) with a
+     * per-capability grant, so that workspace's members can use it. Requires
+     * machine-admin and membership of the target workspace. Rejects a duplicate
+     * exposure. (CLI verb: `computer add-exposure` — the bare `expose`/`unexpose`
+     * verbs are the tunnel port commands.)
      */
-    listWorkspaceLinks(id: string, opts?: CallOptions): Promise<ComputerWorkspaceLink[]>;
+    expose(id: string, input: ExposeComputerInput, opts?: CallOptions): Promise<ComputerExposure>;
     /**
-     * Share a computer's LOCAL INFERENCE into another workspace (never shell /
-     * files / tunnels). `workspaceId` is the target workspace's `ws_…`
-     * resourceId or slug. Requires EDIT on the computer's home workspace and
-     * membership of the target. Rejects the home workspace and duplicates.
+     * Replace the capability grant on an existing exposure. `workspaceId` is the
+     * exposed workspace's `ws_…` resourceId. Requires machine-admin.
+     * (CLI verb: `computer update-exposure`.)
      */
-    linkWorkspace(id: string, workspaceId: string, opts?: CallOptions): Promise<ComputerWorkspaceLink>;
+    updateExposure(id: string, workspaceId: string, capabilities: string[], opts?: CallOptions): Promise<ComputerExposure>;
     /**
-     * Stop sharing a computer's local inference into a workspace. `workspaceId`
-     * is the target workspace's `ws_…` resourceId. Idempotent — unlinking a
-     * non-existent link still succeeds.
+     * Stop exposing a machine into a workspace. `workspaceId` is the exposed
+     * workspace's `ws_…` resourceId. Allowed for machine-admin OR an admin of the
+     * exposed workspace. Idempotent. (CLI verb: `computer remove-exposure`.)
      */
-    unlinkWorkspace(id: string, workspaceId: string, opts?: CallOptions): Promise<{
-        unlinked: boolean;
+    unexpose(id: string, workspaceId: string, opts?: CallOptions): Promise<{
+        unexposed: boolean;
     }>;
+    /**
+     * Transfer an actor-owned machine to a new owner (self, or an org the caller
+     * administers). `owner` is the target profile's resourceId; existing workspace
+     * exposures are kept. Requires machine-admin. (CLI verb: `computer transfer`.)
+     */
+    transfer(id: string, owner: string, opts?: CallOptions): Promise<Computer>;
     /**
      * Redeem a one-time pair token for a long-lived computer identity. The
      * token itself is the auth — we swap the bearer for the token on this
-     * call only (same pattern as `triggers.fire`).
+     * call only (same pattern as `automations.fire`).
      *
      * Used by `idapt up --token` to bootstrap a daemon. The request body is
      * snake_case; the response is wrapped in the standard `{data:{…}}`
@@ -1117,6 +1174,165 @@ declare class FilesApi {
     run(id: string, input?: RunFileInput, opts?: CallOptions): Promise<ExecutionRun>;
 }
 
+/**
+ * FunctionsApi — `/api/v1/functions` (idapt Functions).
+ *
+ * Two tiers, mirroring the v1 `functions` contract:
+ *
+ *   - One-off runs — `run()` executes a script ONCE in the sandboxed Lambda
+ *     (inline `script` XOR an existing Drive `file_id`) and returns the full
+ *     `FunctionRun` row (the `transformExecutionRun` shape). Anything the script
+ *     writes under `/tmp/output/` is copied into Drive and listed in
+ *     `output_files`. Browse history via the `runs` sub-api
+ *     (`runs.list` / `runs.get` / `runs.interrupt`).
+ *   - Deployed functions — named, versioned, HTTP-invokable units:
+ *     `create` → `deploy` (inline base64 bundle) → `invoke`. `promote` flips /
+ *     rolls back the live deployment; `deployments` lists the version history.
+ *
+ * Surfaced as `client.functions.*`. Replaces the former code-execution
+ * surface. Wire types are snake_case over the wire.
+ */
+
+/**
+ * `POST /functions/runs` body — run a script once. Pass EXACTLY one of inline
+ * `script` (+ optional `language`) or an existing Drive `file_id`.
+ */
+interface RunFunctionInput {
+    /** Inline source (≤ 1 MB). Mutually exclusive with `file_id`. */
+    script?: string;
+    /** An existing Drive file id to execute. Mutually exclusive with `script`. */
+    file_id?: string;
+    /** Language for inline `script` — drives the entrypoint extension. */
+    language?: "node" | "python" | "bash";
+    /** Hard wall-clock bound (1–300s). Default 30s server-side. */
+    timeout_seconds?: number;
+    /** Environment variables injected into the run. */
+    env?: Record<string, string>;
+    /** Workspace secret names to inject as env vars (resolved server-side). */
+    secrets?: string[];
+}
+/**
+ * `GET /functions/runs` query params. Cursor-paginated (opaque `cursor`);
+ * `backend` / `status` narrow the one-off run history.
+ */
+interface ListFunctionRunsQuery {
+    limit?: number;
+    /** Opaque pagination cursor — echo `pagination.next_cursor`. */
+    cursor?: string;
+    backend?: ExecutionBackend;
+    status?: ExecutionRunStatus;
+    /** Scope the listing to a single workspace. */
+    workspace_id?: string;
+}
+/** `GET /functions` query params — list deployed functions. */
+interface ListFunctionsQuery {
+    limit?: number;
+}
+/** One declared permission grant on a function. */
+interface FunctionPermissionInput {
+    resource: string;
+    access: "read" | "write" | "admin";
+    scope?: string;
+}
+/** `POST /functions` body — create a deployed function (config only). */
+interface CreateFunctionInput {
+    name: string;
+    description?: string;
+    runtime?: "node" | "python";
+    entrypoint?: string;
+    auth_mode?: "bearer" | "secret" | "public";
+    timeout_seconds?: number;
+    permissions?: FunctionPermissionInput[];
+    /** Workspace secret names to expose to the function at runtime. */
+    secrets?: string[];
+    source_repo_id?: string;
+    branch?: string;
+    browser_app_id?: string;
+}
+/** `PATCH /functions/:id` body — update a function's config (all optional). */
+interface UpdateFunctionInput {
+    description?: string | null;
+    auth_mode?: "bearer" | "secret" | "public";
+    timeout_seconds?: number;
+    permissions?: FunctionPermissionInput[] | null;
+    secrets?: string[] | null;
+    branch?: string | null;
+}
+/** One file of a deploy bundle — base64-encoded content at a bundle path. */
+interface DeployFunctionFile {
+    path: string;
+    content_b64: string;
+}
+/**
+ * `POST /functions/:id/deploy` body — an inline base64 bundle. Promotes the
+ * new deployment to live immediately unless `promote: false`.
+ */
+interface DeployFunctionInput {
+    files: DeployFunctionFile[];
+    entrypoint?: string;
+    runtime?: "node" | "python";
+    /** Promote the new deployment to live immediately (default true). */
+    promote?: boolean;
+}
+/** `POST /functions/:id/invoke` body — the request handed to the handler. */
+interface InvokeFunctionInput {
+    method?: string;
+    path?: string;
+    query?: Record<string, string>;
+    headers?: Record<string, string>;
+    body?: unknown;
+}
+/** `client.functions.runs` — browse + interrupt one-off runs. */
+declare class FunctionRunsApi {
+    private readonly ctx;
+    constructor(ctx: HttpContext);
+    /** List one-off function runs (cursor-paginated). */
+    list(query?: ListFunctionRunsQuery, opts?: CallOptions): Promise<FunctionRun[]>;
+    /** Get a single one-off run by id. */
+    get(id: string, opts?: CallOptions): Promise<FunctionRun>;
+    /**
+     * Interrupt a running run. Only computer-backed runs can be interrupted;
+     * Lambda-backed runs return 409 (`ConflictError`).
+     */
+    interrupt(id: string, opts?: CallOptions): Promise<FunctionRun>;
+}
+declare class FunctionsApi {
+    private readonly ctx;
+    /** One-off run history — list / get / interrupt. */
+    readonly runs: FunctionRunsApi;
+    constructor(ctx: HttpContext);
+    /**
+     * Run a script ONCE in the sandbox. Pass EITHER inline `script` (+ optional
+     * `language`) OR an existing Drive `file_id`. Returns the full `FunctionRun`
+     * row — `id`, `status`, `stdout`, `stderr`, `exit_code`, the run timestamps,
+     * and any `output_files` the script wrote under `/tmp/output/`.
+     */
+    run(input: RunFunctionInput, opts?: CallOptions): Promise<FunctionRun>;
+    /** List deployed functions in the workspace. */
+    list(query?: ListFunctionsQuery, opts?: CallOptions): Promise<FunctionResource[]>;
+    /** Get a deployed function by its resourceId. */
+    get(id: string, opts?: CallOptions): Promise<FunctionResource>;
+    /** Create a deployed function (config only — `deploy` adds a bundle). */
+    create(input: CreateFunctionInput, opts?: CallOptions): Promise<FunctionResource>;
+    /** Update a deployed function's config. */
+    update(id: string, patch: UpdateFunctionInput, opts?: CallOptions): Promise<FunctionResource>;
+    /** Delete a deployed function + all its deployments. */
+    delete(id: string, opts?: CallOptions): Promise<DeletedResponse>;
+    /**
+     * Deploy a new bundle (inline base64 files). Promotes the new deployment to
+     * live immediately unless `promote: false`. Returns the new deployment.
+     */
+    deploy(id: string, input: DeployFunctionInput, opts?: CallOptions): Promise<FunctionDeployment>;
+    /** List a function's deployments (newest-first). */
+    deployments(id: string, opts?: CallOptions): Promise<FunctionDeployment[]>;
+    /** Promote (or roll back to) a deployment — flips the active one. */
+    promote(id: string, input: {
+        deployment_id: string;
+    }, opts?: CallOptions): Promise<FunctionResource>;
+    /** Invoke a deployed function synchronously; returns its response. */
+    invoke(id: string, input?: InvokeFunctionInput, opts?: CallOptions): Promise<FunctionInvokeResult>;
+}
+
 /**
  * GuideApi — `GET /api/v1/guide`.
  *
@@ -1847,83 +2063,6 @@ declare class TablesApi {
     }>;
 }
 
-/**
- * TriggersApi — `/api/v1/triggers`.
- *
- * Triggers fire actions (run code, run chat) on events (webhook, schedule,
- * manual). The `fire` endpoint is unauthenticated — it validates the
- * per-trigger webhook secret instead of the bearer token. This SDK handles
- * both modes: regular calls use `this.ctx.key`; `fire` can be called with
- * an explicit secret override.
- */
-
-interface FireTriggerInput {
-    /**
-     * Webhook secret for this trigger. Overrides the client's `ap_` key.
-     * Required when calling `fire` outside the creating user's session.
-     */
-    secret: string;
-    /** Optional context overrides forwarded to the action. */
-    body?: Record<string, unknown>;
-}
-interface ListTriggerRunsQuery {
-    limit?: number;
-    /** Opaque pagination cursor — echo `pagination.next_cursor`. */
-    cursor?: string;
-}
-interface ListTriggersQuery {
-    workspace_id?: string;
-    include_archived?: boolean;
-    archived_only?: boolean;
-}
-interface BulkTriggerCostStatsQuery {
-    workspace_id?: string;
-}
-declare class TriggersApi {
-    private readonly ctx;
-    constructor(ctx: HttpContext);
-    list(query?: ListTriggersQuery, opts?: CallOptions): Promise<Trigger[]>;
-    /**
-     * Create a trigger. `workspace_id` is passed in the request BODY (alongside
-     * the flat trigger definition) — it is not a query param. The request
-     * body is flat: every scheduling field (`cron_expression`, …) and every
-     * action field (`agent_id`, `prompt_template`, `file_id`, …) sits at the
-     * top level — there are no nested `trigger_config` / `action_config`
-     * objects any more.
-     *
-     * For a `webhook` trigger the response additionally carries a one-time
-     * plaintext `secret` (use `TriggerWithSecret`); other trigger types
-     * resolve to a plain `Trigger`.
-     */
-    create(workspaceId: string, input: CreateTriggerInput, opts?: CallOptions): Promise<TriggerWithSecret | Trigger>;
-    get(id: string, opts?: CallOptions): Promise<Trigger>;
-    update(id: string, input: UpdateTriggerInput, opts?: CallOptions): Promise<Trigger>;
-    delete(id: string, opts?: CallOptions): Promise<DeletedResponse>;
-    archive(id: string, opts?: CallOptions): Promise<Trigger>;
-    unarchive(id: string, opts?: CallOptions): Promise<Trigger>;
-    /**
-     * Fire a trigger via its webhook secret. This endpoint does NOT use the
-     * client's `ap_` key — the bearer is the trigger's secret — so we build a
-     * one-off HttpContext for it rather than mutating the shared one.
-     *
-     * Responds HTTP 202. The response identifies the fired trigger via `id`
-     * only.
-     */
-    fire(id: string, input: FireTriggerInput, opts?: CallOptions): Promise<{
-        id: string;
-    }>;
-    /**
-     * Rotate the webhook secret. Returns the trigger with a fresh one-time
-     * plaintext `secret` populated (`TriggerWithSecret`). The old secret
-     * immediately stops working.
-     */
-    rotateSecret(id: string, opts?: CallOptions): Promise<TriggerWithSecret>;
-    /** Recent fires + their success/error outcome. */
-    listRuns(id: string, query?: ListTriggerRunsQuery, opts?: CallOptions): Promise<TriggerRun[]>;
-    getCostStats(id: string, opts?: CallOptions): Promise<TriggerCostStats>;
-    getCostStatsMap(query?: BulkTriggerCostStatsQuery, opts?: CallOptions): Promise<Record<string, TriggerCostStats>>;
-}
-
 /**
  * UserApi — identity + usage.
  *
@@ -2098,8 +2237,8 @@ declare class IdaptClient {
     readonly chats: ChatsApi;
     /** Workspaces CRUD + members + invitations + fork. */
     readonly workspaces: WorkspacesApi;
-    /** Triggers CRUD + fire, rotate-secret, runs. */
-    readonly triggers: TriggersApi;
+    /** Automations CRUD + fire, rotate-secret, runs. */
+    readonly automations: AutomationsApi;
     /** Computers CRUD + lifecycle + exec/tmux/sftp + ports + users + env + pair. */
     readonly computers: ComputersApi;
     /** Workspace secrets CRUD. */
@@ -2132,8 +2271,8 @@ declare class IdaptClient {
     readonly images: ImagesApi;
     /** Text-to-speech + transcription. */
     readonly audio: AudioApi;
-    /** Execute code files in sandboxed Lambda. */
-    readonly code: CodeRunsApi;
+    /** Run + invoke serverless functions. */
+    readonly functions: FunctionsApi;
     /** Full-text search across user content. */
     readonly search: SearchApi;
     /** External web search. */
@@ -2210,4 +2349,4 @@ declare class IdaptClient {
     private navigate;
 }
 
-export { type ListRunsQuery as $, type AddMemberInput as A, type BlobMeta as B, COMMAND_BINDINGS as C, DatastoreApi as D, type DeleteInvitationResult as E, type DeletedResult as F, DocsApi as G, type ExecCommandInput as H, IdaptClient as I, type ExecuteCommandOptions as J, FilesApi as K, type FireTriggerInput as L, type GenerateImageInput as M, GuideApi as N, type GuideContent as O, type IdaptClientDeps as P, ImagesApi as Q, type InstallStoreItemInput as R, type ListAgentsQuery as S, type ListApiKeysQuery as T, type ListChatsQuery as U, type ListComputersQuery as V, type ListExecutionsQuery as W, type ListFilesQuery as X, type ListMessagesQuery as Y, type ListNotificationsQuery as Z, type ListResult as _, AgentsApi as a, type V1CommandName as a$, type ListSharedWithMeQuery as a0, type ListSharesQuery as a1, type ListTriggerRunsQuery as a2, type ListUsageHistoryQuery as a3, ModelsApi as a4, type NotificationAudience as a5, type NotificationPreferenceUpdate as a6, NotificationsApi as a7, type PairComputerInput as a8, type PairComputerResult as a9, SharingApi as aA, type SpeakInput as aB, type SseEvent as aC, StoreApi as aD, type SubscribeOptions as aE, SubscriptionApi as aF, type TableQuery as aG, TablesApi as aH, type TmuxInput as aI, type TmuxOp as aJ, type TranscribeInput as aK, TriggersApi as aL, type UpdateAgentInput as aM, type UpdateApiKeyInput as aN, type UpdateChatInput as aO, type UpdateCollectionInput as aP, type UpdateComputerInput as aQ, type UpdateComputerUserInput as aR, type UpdateMemberInput as aS, type UpdateNotificationInput as aT, type UpdateProviderEndpointInput as aU, type UpdateSecretInput as aV, type UpdateSettingsInput as aW, type UpdateShareInput as aX, type UpdateWorkspaceInput as aY, type UploadInput as aZ, UserApi as a_, type PatchFileInput as aa, type PatchPortInput as ab, type PresenceEntry as ac, type PresenceHeartbeatOptions as ad, type ProviderEndpointModelMappingInput as ae, ProviderEndpointsApi as af, RealtimeApi as ag, type RealtimeEvent as ah, type RemoveShareInput as ai, type RepromptMessageInput as aj, type RotateApiKeyInput as ak, type RotateApiKeyResult as al, type RunCodeInput as am, type RunFileInput as an, SearchApi as ao, type SearchInput as ap, type SearchStoreQuery as aq, SecretsApi as ar, type SendMessageInput as as, type SendNotificationInput as at, type SendNotificationResult as au, SettingsApi as av, type SftpInput as aw, type SftpListResult as ax, type SftpOp as ay, type SftpUploadInput as az, ApiKeysApi as b, WebSearchApi as b0, type WebSearchInput as b1, WorkspacesApi as b2, type WritableMemberRole as b3, awaitOperation as b4, executeCommand as b5, getFileBlob as b6, getFileText as b7, listFiles as b8, AudioApi as c, BlobsApi as d, type BlobsListOptions as e, type ChannelHandle as f, ChatsApi as g, CodeRunsApi as h, type CommandBinding as i, ComputersApi as j, type CreateAgentInput as k, type CreateApiKeyInput as l, type CreateChatInput as m, type CreateCollectionInput as n, type CreateComputerInput as o, type CreateComputerUserInput as p, type CreateFolderInput as q, type CreateInvitationInput as r, type CreateInvitationResult as s, type CreateProviderEndpointInput as t, type CreateSecretInput as u, type CreateShareInput as v, type CreateUserEnvVarInput as w, type CreateWorkspaceInput as x, type DatastoreListOptions as y, type DatastoreSetOptions as z };
+export { type ListChatsQuery as $, type AddMemberInput as A, type BlobMeta as B, COMMAND_BINDINGS as C, DatastoreApi as D, type DatastoreSetOptions as E, type DeleteInvitationResult as F, type DeletedResult as G, type DeployFunctionFile as H, IdaptClient as I, type DeployFunctionInput as J, DocsApi as K, type ExecCommandInput as L, type ExecuteCommandOptions as M, FilesApi as N, type FireAutomationInput as O, type FunctionPermissionInput as P, FunctionsApi as Q, type GenerateImageInput as R, GuideApi as S, type GuideContent as T, type IdaptClientDeps as U, ImagesApi as V, type InstallStoreItemInput as W, type InvokeFunctionInput as X, type ListAgentsQuery as Y, type ListApiKeysQuery as Z, type ListAutomationRunsQuery as _, AgentsApi as a, type UpdateProviderEndpointInput as a$, type ListComputersQuery as a0, type ListFilesQuery as a1, type ListFunctionRunsQuery as a2, type ListFunctionsQuery as a3, type ListMessagesQuery as a4, type ListNotificationsQuery as a5, type ListResult as a6, type ListRunsQuery as a7, type ListSharedWithMeQuery as a8, type ListSharesQuery as a9, type SendNotificationInput as aA, type SendNotificationResult as aB, SettingsApi as aC, type SftpInput as aD, type SftpListResult as aE, type SftpOp as aF, type SftpUploadInput as aG, SharingApi as aH, type SpeakInput as aI, type SseEvent as aJ, StoreApi as aK, type SubscribeOptions as aL, SubscriptionApi as aM, type TableQuery as aN, TablesApi as aO, type TmuxInput as aP, type TmuxOp as aQ, type TranscribeInput as aR, type UpdateAgentInput as aS, type UpdateApiKeyInput as aT, type UpdateChatInput as aU, type UpdateCollectionInput as aV, type UpdateComputerInput as aW, type UpdateComputerUserInput as aX, type UpdateFunctionInput as aY, type UpdateMemberInput as aZ, type UpdateNotificationInput as a_, type ListUsageHistoryQuery as aa, ModelsApi as ab, type NotificationAudience as ac, type NotificationPreferenceUpdate as ad, NotificationsApi as ae, type PairComputerInput as af, type PairComputerResult as ag, type PatchFileInput as ah, type PatchPortInput as ai, type PresenceEntry as aj, type PresenceHeartbeatOptions as ak, type ProviderEndpointModelMappingInput as al, ProviderEndpointsApi as am, RealtimeApi as an, type RealtimeEvent as ao, type RemoveShareInput as ap, type RepromptMessageInput as aq, type RotateApiKeyInput as ar, type RotateApiKeyResult as as, type RunFileInput as at, type RunFunctionInput as au, SearchApi as av, type SearchInput as aw, type SearchStoreQuery as ax, SecretsApi as ay, type SendMessageInput as az, ApiKeysApi as b, type UpdateSecretInput as b0, type UpdateSettingsInput as b1, type UpdateShareInput as b2, type UpdateWorkspaceInput as b3, type UploadInput as b4, UserApi as b5, type V1CommandName as b6, WebSearchApi as b7, type WebSearchInput as b8, WorkspacesApi as b9, type WritableMemberRole as ba, awaitOperation as bb, executeCommand as bc, getFileBlob as bd, getFileText as be, listFiles as bf, AudioApi as c, AutomationsApi as d, BlobsApi as e, type BlobsListOptions as f, type ChannelHandle as g, ChatsApi as h, type CommandBinding as i, ComputersApi as j, type CreateAgentInput as k, type CreateApiKeyInput as l, type CreateChatInput as m, type CreateCollectionInput as n, type CreateComputerInput as o, type CreateComputerUserInput as p, type CreateFolderInput as q, type CreateFunctionInput as r, type CreateInvitationInput as s, type CreateInvitationResult as t, type CreateProviderEndpointInput as u, type CreateSecretInput as v, type CreateShareInput as w, type CreateUserEnvVarInput as x, type CreateWorkspaceInput as y, type DatastoreListOptions as z };