@idapt/browser-app-sdk 0.2.0 → 0.3.0

package/dist/{client-CZAWglsD.d.ts → client-CHsdQcgI.d.cts}

@@ -1,4 +1,4 @@
-import { H as HttpContext, C as CallOptions, F as File$1, i as Agent, d as DeletedResponse, l as ApiKey, ak as Permission, aN as SpeechResult, aY as TranscriptionResult, aO as SpeechStreamEvent, aZ as TranscriptionStreamEvent, B as BlobObject, s as Chat, t as ChatCost, ac as MessageCosts, v as ChatStopResult, aa as Message, aE as SendMessageResult, k as AgentRunState, j as AgentRun, ay as RepromptResult, x as Computer, I as ComputerServerInfo, z as ComputerExecResult, aX as TmuxWindow, aG as SftpEntry, G as ComputerPort, L as ComputerUser, a8 as ListEnvelope, y as ComputerEnvVar, R as DatastoreEntry, f as FileUploadResult, W as WriteOptions, U as ExecutionRun, T as ExecutionBackend, X as ExecutionRunStatus, a0 as FunctionRun, $ as FunctionResource, Z as FunctionDeployment, _ as FunctionInvokeResult, a3 as ImageModel, a2 as ImageGenerationResult, a5 as LLMModel, af as Notification, ag as NotificationConfig, ah as NotificationPreference, an as ProviderEndpointKind, ar as ProviderEndpointProviderKey, am as ProviderEndpointConnectionType, au as ProviderEndpointTransport, as as ProviderEndpointRuntime, aq as ProviderEndpointProtocol, av as ProviderEndpointVisibility, ao as ProviderEndpointModality, al as ProviderEndpoint, a9 as ManagedProviderPreset, at as ProviderEndpointTestResult, aB as SearchResult, aC as Secret, aD as SecretWithValue, aF as Settings, aK as ShareResourceType, aJ as SharePermission, aH as Share, aI as ShareDeletedResult, aL as SharedWithMeItem, aR as StoreItemType, aQ as StoreItem, aP as StoreInstallResult, aT as Subscription, aV as TableCollection, aW as TableRecord, a_ as Trigger, M as CreateTriggerInput, b3 as TriggerWithSecret, b6 as UpdateTriggerInput, b1 as TriggerRun, b0 as TriggerCostStats, b9 as User, b8 as UsageSummary, b7 as UsageRecord, bf as WebSearchResponse, bj as WorkspaceMemberRole, bg as Workspace, bi as WorkspaceMember, bh as WorkspaceInvitation, m as AppFolder, P as DataFolder, w as ClientMeta, aA as RuntimeMode, aS as StoredCredential, S as EscalateRequest } from './data-BuXXki1D.js';
+import { H as HttpContext, C as CallOptions, F as File$1, i as Agent, d as DeletedResponse, l as ApiKey, ap as Permission, aS as SpeechResult, b1 as TranscriptionResult, aT as SpeechStreamEvent, b2 as TranscriptionStreamEvent, r as Automation, S as CreateAutomationInput, v as AutomationWithSecret, b6 as UpdateAutomationInput, u as AutomationRun, t as AutomationCostStats, B as BlobObject, x as Chat, y as ChatCost, ah as MessageCosts, E as ChatStopResult, af as Message, aJ as SendMessageResult, k as AgentRunState, j as AgentRun, aD as RepromptResult, I as Computer, N as ComputerServerInfo, K as ComputerExecResult, b0 as TmuxWindow, aL as SftpEntry, M as ComputerPort, R as ComputerUser, ad as ListEnvelope, J as ComputerEnvVar, Y as DatastoreEntry, f as FileUploadResult, W as WriteOptions, $ as ExecutionRun, _ as ExecutionBackend, a0 as ExecutionRunStatus, a5 as FunctionRun, a4 as FunctionResource, a2 as FunctionDeployment, a3 as FunctionInvokeResult, a8 as ImageModel, a7 as ImageGenerationResult, aa as LLMModel, ak as Notification, al as NotificationConfig, am as NotificationPreference, as as ProviderEndpointKind, aw as ProviderEndpointProviderKey, ar as ProviderEndpointConnectionType, az as ProviderEndpointTransport, ax as ProviderEndpointRuntime, av as ProviderEndpointProtocol, aA as ProviderEndpointVisibility, at as ProviderEndpointModality, aq as ProviderEndpoint, ae as ManagedProviderPreset, ay as ProviderEndpointTestResult, aG as SearchResult, aH as Secret, aI as SecretWithValue, aK as Settings, aP as ShareResourceType, aO as SharePermission, aM as Share, aN as ShareDeletedResult, aQ as SharedWithMeItem, aW as StoreItemType, aV as StoreItem, aU as StoreInstallResult, aY as Subscription, a_ as TableCollection, a$ as TableRecord, b9 as User, b8 as UsageSummary, b7 as UsageRecord, bf as WebSearchResponse, bj as WorkspaceMemberRole, bg as Workspace, bi as WorkspaceMember, bh as WorkspaceInvitation, m as AppFolder, U as DataFolder, G as ClientMeta, aF as RuntimeMode, aX as StoredCredential, Z as EscalateRequest } from './data-DtOpB63U.cjs';
 
 /**
  * Stateless low-level file operations against `/api/v1/drive/files/*`.
@@ -259,6 +259,83 @@ declare class AudioApi {
     streamTranscribe(input: TranscribeInput, opts?: CallOptions): AsyncIterable<TranscriptionStreamEvent>;
 }
 
+/**
+ * AutomationsApi — `/api/v1/automations`.
+ *
+ * Automations fire actions on events (webhook or cron). The `fire` endpoint is
+ * unauthenticated — it validates the
+ * per-automation webhook secret instead of the bearer token. This SDK handles
+ * both modes: regular calls use `this.ctx.key`; `fire` can be called with
+ * an explicit secret override.
+ */
+
+interface FireAutomationInput {
+    /**
+     * Webhook secret for this automation. Overrides the client's `ap_` key.
+     * Required when calling `fire` outside the creating user's session.
+     */
+    secret: string;
+    /** Optional context overrides forwarded to the action. */
+    body?: Record<string, unknown>;
+}
+interface ListAutomationRunsQuery {
+    limit?: number;
+    /** Opaque pagination cursor — echo `pagination.next_cursor`. */
+    cursor?: string;
+}
+interface ListAutomationsQuery {
+    workspace_id?: string;
+    include_archived?: boolean;
+    archived_only?: boolean;
+}
+interface BulkAutomationCostStatsQuery {
+    workspace_id?: string;
+}
+declare class AutomationsApi {
+    private readonly ctx;
+    constructor(ctx: HttpContext);
+    list(query?: ListAutomationsQuery, opts?: CallOptions): Promise<Automation[]>;
+    /**
+     * Create an automation. `workspace_id` is passed in the request BODY
+     * alongside the flat automation definition — it is not a query param. The request
+     * body is flat: every scheduling field (`cron_expression`, …) and every
+     * action field (`agent_id`, `prompt_template`, `function_id`, …) sits at the
+     * top level — there are no nested `trigger_config` / `action_config`
+     * objects any more.
+     *
+     * For a webhook automation the response additionally carries a one-time
+     * plaintext `secret` (use `AutomationWithSecret`); other automation types
+     * resolve to a plain `Automation`.
+     */
+    create(workspaceId: string, input: CreateAutomationInput, opts?: CallOptions): Promise<AutomationWithSecret | Automation>;
+    get(id: string, opts?: CallOptions): Promise<Automation>;
+    update(id: string, input: UpdateAutomationInput, opts?: CallOptions): Promise<Automation>;
+    delete(id: string, opts?: CallOptions): Promise<DeletedResponse>;
+    archive(id: string, opts?: CallOptions): Promise<Automation>;
+    unarchive(id: string, opts?: CallOptions): Promise<Automation>;
+    /**
+     * Fire an automation via its webhook secret. This endpoint does NOT use the
+     * client's `ap_` key — the bearer is the automation's secret — so we build a
+     * one-off HttpContext for it rather than mutating the shared one.
+     *
+     * Responds HTTP 202. The response identifies the fired automation via `id`
+     * only.
+     */
+    fire(id: string, input: FireAutomationInput, opts?: CallOptions): Promise<{
+        id: string;
+    }>;
+    /**
+     * Rotate the webhook secret. Returns the automation with a fresh one-time
+     * plaintext `secret` populated (`AutomationWithSecret`). The old secret
+     * immediately stops working.
+     */
+    rotateSecret(id: string, opts?: CallOptions): Promise<AutomationWithSecret>;
+    /** Recent fires + their success/error outcome. */
+    listRuns(id: string, query?: ListAutomationRunsQuery, opts?: CallOptions): Promise<AutomationRun[]>;
+    getCostStats(id: string, opts?: CallOptions): Promise<AutomationCostStats>;
+    getCostStatsMap(query?: BulkAutomationCostStatsQuery, opts?: CallOptions): Promise<Record<string, AutomationCostStats>>;
+}
+
 /**
  * BlobsApi — `/api/v1/blobs` (the object-storage data plane).
  *
@@ -366,7 +443,7 @@ declare const COMMAND_BINDINGS: Record<string, CommandBinding>;
  * {@link COMMAND_BINDINGS}). Used to type `client.call(action, args)` so a
  * known action autocompletes and a typo is caught at compile time.
  */
-type V1CommandName = "agent archive" | "agent copy-to-workspace" | "agent create" | "agent delete" | "agent get" | "agent list" | "agent move" | "agent permanent-delete" | "agent restore" | "agent unarchive" | "agent update" | "ai-gateway providers" | "ai-gateway usage" | "api-key create" | "api-key delete" | "api-key list" | "api-key rotate" | "api-key update" | "audio models" | "audio search-models" | "audio search-voices" | "audio speak" | "audio speak-stream" | "audio transcribe" | "audio transcribe-stream" | "audio voices" | "blobs delete" | "blobs get" | "blobs head" | "blobs list" | "blobs namespaces" | "blobs put" | "blobs signed-url" | "browser-app create" | "browser-app deploy" | "browser-app deployments" | "browser-app fork" | "browser-app get" | "browser-app list" | "browser-app promote" | "browser-app snapshot" | "chat archive" | "chat copy-to-agent" | "chat copy-to-workspace" | "chat cost" | "chat create" | "chat delete" | "chat export" | "chat fork-to-workspace" | "chat get" | "chat list" | "chat message-costs" | "chat messages" | "chat permanent-delete" | "chat reprompt" | "chat restore" | "chat runs" | "chat send" | "chat stop" | "chat stream" | "chat unarchive" | "chat update" | "ci cancel" | "ci get" | "ci jobs" | "ci list" | "ci run" | "computer activity" | "computer add-local-model" | "computer app-create" | "computer app-delete" | "computer app-exec" | "computer app-expose" | "computer app-external" | "computer app-get" | "computer app-logs" | "computer app-ports" | "computer app-reset" | "computer app-restart" | "computer app-run" | "computer app-runtime" | "computer app-setup-runtime" | "computer app-start" | "computer app-stop" | "computer app-unexpose" | "computer apps" | "computer archive" | "computer compose-up" | "computer create" | "computer create-user" | "computer delete" | "computer delete-user" | "computer delete-user-env" | "computer download" | "computer download-to-drive" | "computer ephemeral" | "computer exec" | "computer expose" | "computer get" | "computer get-user" | "computer hibernate" | "computer link" | "computer links" | "computer list" | "computer local-inference" | "computer local-models" | "computer manage" | "computer pair" | "computer ports" | "computer remove-local-model" | "computer set-ports" | "computer set-user-env" | "computer sftp" | "computer start" | "computer stop" | "computer test-connection" | "computer tmux" | "computer tunnels" | "computer unarchive" | "computer unexpose" | "computer unlink" | "computer update" | "computer update-user" | "computer upload" | "computer user-env" | "computer user-env-setup" | "computer user-env-setup-apply" | "computer user-env-sync" | "computer user-env-sync-repair" | "computer users" | "datastore batch" | "datastore delete" | "datastore get" | "datastore increment" | "datastore list" | "datastore namespaces" | "datastore set" | "drive content-versions" | "drive create-folder" | "drive delete" | "drive get-metadata" | "drive glob" | "drive grep" | "drive list" | "drive move" | "drive permanent-delete" | "drive read" | "drive restore" | "drive restore-version" | "drive run" | "drive update" | "drive upload" | "functions create" | "functions delete" | "functions deploy" | "functions deployments" | "functions get" | "functions invoke" | "functions list" | "functions promote" | "functions run" | "functions run-get" | "functions run-interrupt" | "functions run-list" | "functions update" | "guide get" | "hook create" | "hook delete" | "hook get" | "hook history" | "hook list" | "hook override" | "hook preview" | "hook toggle" | "hook update" | "hub install" | "hub search" | "hub submissions" | "hub submit" | "hub update" | "hub update-check" | "image generate" | "image models" | "image search" | "me get" | "me usage" | "memory box-delete" | "memory box-get" | "memory box-list" | "memory box-update" | "memory delete" | "memory index-read" | "memory index-write" | "memory list" | "memory read" | "memory search" | "memory write" | "models list" | "models search" | "notes box-create" | "notes box-delete" | "notes box-get" | "notes box-list" | "notes box-update" | "notes delete" | "notes folder-create" | "notes folder-delete" | "notes folder-list" | "notes folder-move" | "notes folder-rename" | "notes graph" | "notes import" | "notes index-read" | "notes index-write" | "notes links" | "notes list" | "notes note-move" | "notes note-rename" | "notes purge" | "notes read" | "notes restore" | "notes search" | "notes search-all" | "notes tag-list" | "notes tag-rename" | "notes trash-empty" | "notes trash-list" | "notes tree" | "notes write" | "notification config" | "notification delete" | "notification get" | "notification list" | "notification preferences" | "notification read-all" | "notification send" | "notification update" | "notification update-config" | "notification update-preferences" | "operation cancel" | "operation get" | "operation list" | "provider-endpoint create" | "provider-endpoint delete" | "provider-endpoint list" | "provider-endpoint presets" | "provider-endpoint test" | "provider-endpoint update" | "realtime broadcast" | "realtime presence" | "realtime presence-list" | "realtime subscribe" | "repos branches" | "repos clone-url" | "repos commit" | "repos commits" | "repos create" | "repos delete" | "repos get" | "repos list" | "repos read-file" | "repos set-visibility" | "search query" | "secret create" | "secret delete" | "secret get" | "secret list" | "secret reveal" | "secret update" | "settings get" | "settings update" | "share create" | "share delete" | "share list" | "share update" | "shared-with-me list" | "skill apply-update" | "skill attach" | "skill body" | "skill create" | "skill delete" | "skill detach" | "skill file-delete" | "skill file-list" | "skill file-read" | "skill file-write" | "skill fork" | "skill get" | "skill install" | "skill list" | "skill publish" | "skill render" | "skill search" | "skill update" | "skill update-check" | "subscription get" | "table create" | "table create-record" | "table delete" | "table delete-record" | "table export" | "table get" | "table get-record" | "table import" | "table list" | "table query" | "table update" | "table update-record" | "tasks ancestors" | "tasks assign" | "tasks comment" | "tasks comment-delete" | "tasks comment-list" | "tasks comment-update" | "tasks create" | "tasks delete" | "tasks depend" | "tasks dependencies" | "tasks duplicate" | "tasks events" | "tasks get" | "tasks import" | "tasks label-create" | "tasks label-delete" | "tasks label-list" | "tasks label-update" | "tasks list" | "tasks list-create" | "tasks list-delete" | "tasks list-get" | "tasks list-list" | "tasks list-update" | "tasks unassign" | "tasks undepend" | "tasks update" | "trigger archive" | "trigger cost-stats" | "trigger cost-stats-all" | "trigger create" | "trigger delete" | "trigger fire" | "trigger get" | "trigger list" | "trigger rotate-secret" | "trigger runs" | "trigger test-fire" | "trigger unarchive" | "trigger update" | "video generate" | "video models" | "video search" | "web fetch" | "web search" | "workspace add-member" | "workspace archive" | "workspace create" | "workspace delete" | "workspace get" | "workspace invitations" | "workspace invite" | "workspace list" | "workspace members" | "workspace remove-member" | "workspace revoke-invitation" | "workspace unarchive" | "workspace update" | "workspace update-member";
+type V1CommandName = "agent archive" | "agent copy-to-workspace" | "agent create" | "agent delete" | "agent get" | "agent list" | "agent move" | "agent permanent-delete" | "agent restore" | "agent unarchive" | "agent update" | "ai-gateway providers" | "ai-gateway usage" | "api-key create" | "api-key delete" | "api-key list" | "api-key rotate" | "api-key update" | "audio models" | "audio search-models" | "audio search-voices" | "audio speak" | "audio speak-stream" | "audio transcribe" | "audio transcribe-stream" | "audio voices" | "automation archive" | "automation cost-stats" | "automation cost-stats-all" | "automation create" | "automation delete" | "automation fire" | "automation get" | "automation list" | "automation rotate-secret" | "automation runs" | "automation test-fire" | "automation unarchive" | "automation update" | "blobs delete" | "blobs get" | "blobs head" | "blobs list" | "blobs namespaces" | "blobs put" | "blobs signed-url" | "browser-app create" | "browser-app deploy" | "browser-app deployments" | "browser-app fork" | "browser-app get" | "browser-app list" | "browser-app promote" | "browser-app snapshot" | "chat archive" | "chat copy-to-agent" | "chat copy-to-workspace" | "chat cost" | "chat create" | "chat delete" | "chat export" | "chat fork-to-workspace" | "chat get" | "chat list" | "chat message-costs" | "chat messages" | "chat permanent-delete" | "chat reprompt" | "chat restore" | "chat runs" | "chat send" | "chat stop" | "chat stream" | "chat unarchive" | "chat update" | "ci cancel" | "ci get" | "ci jobs" | "ci list" | "ci run" | "computer activity" | "computer add-exposure" | "computer add-local-model" | "computer app-create" | "computer app-delete" | "computer app-exec" | "computer app-expose" | "computer app-external" | "computer app-get" | "computer app-logs" | "computer app-ports" | "computer app-reset" | "computer app-restart" | "computer app-run" | "computer app-runtime" | "computer app-setup-runtime" | "computer app-start" | "computer app-stop" | "computer app-unexpose" | "computer apps" | "computer archive" | "computer compose-up" | "computer create" | "computer create-user" | "computer delete" | "computer delete-user" | "computer delete-user-env" | "computer download" | "computer download-to-drive" | "computer ephemeral" | "computer exec" | "computer expose" | "computer get" | "computer get-user" | "computer hibernate" | "computer list" | "computer local-inference" | "computer local-models" | "computer manage" | "computer pair" | "computer ports" | "computer remove-exposure" | "computer remove-local-model" | "computer run" | "computer set-ports" | "computer set-user-env" | "computer sftp" | "computer start" | "computer stop" | "computer test-connection" | "computer tmux" | "computer transfer" | "computer tunnels" | "computer unarchive" | "computer unexpose" | "computer update" | "computer update-exposure" | "computer update-user" | "computer upload" | "computer user-env" | "computer user-env-setup" | "computer user-env-setup-apply" | "computer user-env-sync" | "computer user-env-sync-repair" | "computer users" | "datastore batch" | "datastore delete" | "datastore get" | "datastore increment" | "datastore list" | "datastore namespaces" | "datastore set" | "drive content-versions" | "drive create-folder" | "drive delete" | "drive get-metadata" | "drive glob" | "drive grep" | "drive list" | "drive move" | "drive permanent-delete" | "drive read" | "drive restore" | "drive restore-version" | "drive run" | "drive update" | "drive upload" | "functions create" | "functions delete" | "functions deploy" | "functions deployments" | "functions get" | "functions invoke" | "functions list" | "functions promote" | "functions update" | "guide get" | "hook create" | "hook delete" | "hook get" | "hook history" | "hook list" | "hook override" | "hook preview" | "hook toggle" | "hook update" | "hub install" | "hub search" | "hub submissions" | "hub submit" | "hub update" | "hub update-check" | "image generate" | "image models" | "image search" | "me get" | "me usage" | "memory box-delete" | "memory box-get" | "memory box-list" | "memory box-update" | "memory delete" | "memory index-read" | "memory index-write" | "memory list" | "memory read" | "memory search" | "memory write" | "models list" | "models search" | "notes box-create" | "notes box-delete" | "notes box-get" | "notes box-list" | "notes box-update" | "notes delete" | "notes folder-create" | "notes folder-delete" | "notes folder-list" | "notes folder-move" | "notes folder-rename" | "notes graph" | "notes import" | "notes index-read" | "notes index-write" | "notes links" | "notes list" | "notes note-move" | "notes note-rename" | "notes purge" | "notes read" | "notes restore" | "notes search" | "notes search-all" | "notes tag-list" | "notes tag-rename" | "notes trash-empty" | "notes trash-list" | "notes tree" | "notes write" | "notification config" | "notification delete" | "notification get" | "notification list" | "notification preferences" | "notification read-all" | "notification send" | "notification update" | "notification update-config" | "notification update-preferences" | "operation cancel" | "operation get" | "operation list" | "provider-endpoint create" | "provider-endpoint delete" | "provider-endpoint list" | "provider-endpoint presets" | "provider-endpoint test" | "provider-endpoint update" | "realtime broadcast" | "realtime presence" | "realtime presence-list" | "realtime subscribe" | "repos branches" | "repos clone-url" | "repos commit" | "repos commits" | "repos create" | "repos delete" | "repos get" | "repos list" | "repos read-file" | "repos set-visibility" | "search query" | "secret create" | "secret delete" | "secret get" | "secret list" | "secret reveal" | "secret update" | "settings get" | "settings update" | "share create" | "share delete" | "share list" | "share update" | "shared-with-me list" | "skill apply-update" | "skill attach" | "skill body" | "skill create" | "skill delete" | "skill detach" | "skill file-delete" | "skill file-list" | "skill file-read" | "skill file-write" | "skill fork" | "skill get" | "skill install" | "skill list" | "skill publish" | "skill render" | "skill search" | "skill update" | "skill update-check" | "subscription get" | "table create" | "table create-record" | "table delete" | "table delete-record" | "table export" | "table get" | "table get-record" | "table import" | "table list" | "table query" | "table update" | "table update-record" | "tasks ancestors" | "tasks assign" | "tasks comment" | "tasks comment-delete" | "tasks comment-list" | "tasks comment-update" | "tasks create" | "tasks delete" | "tasks depend" | "tasks dependencies" | "tasks duplicate" | "tasks events" | "tasks get" | "tasks import" | "tasks label-create" | "tasks label-delete" | "tasks label-list" | "tasks label-update" | "tasks list" | "tasks list-create" | "tasks list-delete" | "tasks list-get" | "tasks list-list" | "tasks list-update" | "tasks unassign" | "tasks undepend" | "tasks update" | "video generate" | "video models" | "video search" | "web fetch" | "web search" | "workspace add-member" | "workspace archive" | "workspace create" | "workspace delete" | "workspace get" | "workspace invitations" | "workspace invite" | "workspace list" | "workspace members" | "workspace remove-member" | "workspace revoke-invitation" | "workspace unarchive" | "workspace update" | "workspace update-member";
 
 /**
  * Generic, spec-driven command executor — the SDK twin of the CLI's `runSpec`.
@@ -657,19 +734,25 @@ declare class ChatsApi {
  *   - User env vars     — listUserEnvVars / createUserEnvVar /
  *                          deleteUserEnvVar / setupUserEnv /
  *                          checkUserEnvSetup / syncUserEnv / checkUserEnvSync
- *   - Workspace links   — listWorkspaceLinks / linkWorkspace / unlinkWorkspace
- *                          (share a computer's LOCAL INFERENCE into other
- *                          workspaces; never shell / files / tunnels)
+ *   - Exposures         — expose / updateExposure / unexpose (expose an
+ *                          actor-owned machine into a workspace with a
+ *                          per-capability grant) + transfer (move ownership)
  *   - Pair              — pair (daemon token bootstrap; bearer-overridden,
  *                          mirrors the trigger-fire pattern)
  *
- * Permissions on every authenticated verb default to the caller's
- * `computers:read` / `computers:write` scope. See `lib/computers/Computers.md`
+ * Authenticated verbs are split by surface: generic computer read/write covers
+ * metadata, while lifecycle, exec, files, tunnels, terminal, desktop, local
+ * inference, apps, and admin operations require their explicit computer action
+ * grants. See `backend/packages/computers/src/internal/computers/Computers.md`
  * for the end-to-end computer model.
  */
 
 interface ListComputersQuery {
-    workspace_id: string;
+    /**
+     * Narrow the list to one organization the actor belongs to (its resourceId).
+     * Machines are actor-owned; omit for the actor's own machines + all its orgs'.
+     */
+    organization?: string;
     limit?: number;
     /** Opaque pagination cursor — echo `pagination.next_cursor`. */
     cursor?: string;
@@ -802,20 +885,29 @@ interface PairComputerResult {
     domain: string;
 }
 /**
- * One `computer_workspace` link — a computer shared INTO an additional
- * workspace, granting LOCAL INFERENCE ONLY (never shell / files / tunnels).
- * `workspace_resource_id` is the target workspace's public `ws_…` id.
+ * One `computer_workspace` EXPOSURE — an actor-owned machine exposed INTO a
+ * workspace (Layer 2) with a per-capability grant. `workspace_resource_id` is
+ * the target workspace's public `ws_…` id; `capabilities` is the granted
+ * capability-slug subset.
  */
-interface ComputerWorkspaceLink {
+interface ComputerExposure {
     id: string;
     computer_id: string;
     workspace_id: string;
     workspace_resource_id: string | null;
-    permissions: unknown[] | null;
-    created_by_actor_id: string;
+    capabilities: string[];
+    label: string | null;
+    created_by_actor_id: string | null;
     created_at: number;
     updated_at: number;
 }
+/** `POST /v1/computers/{id}/expose` body. */
+interface ExposeComputerInput {
+    /** Target workspace — public `ws_…` resourceId or slug. */
+    workspace_id: string;
+    /** Capability-slug subset to grant {local-inference, terminal, files, computer-use, tunnels, apps}. */
+    capabilities: string[];
+}
 declare class ComputersApi {
     private readonly ctx;
     constructor(ctx: HttpContext);
@@ -918,30 +1010,37 @@ declare class ComputersApi {
     syncUserEnv(id: string, username: string, opts?: CallOptions): Promise<Record<string, unknown>>;
     checkUserEnvSync(id: string, username: string, opts?: CallOptions): Promise<Record<string, unknown>>;
     /**
-     * List the workspaces a computer's LOCAL INFERENCE is shared into. The home
-     * workspace is never listed (it already has full access). The route returns
-     * the links under a `links` key (not a standard list envelope).
+     * Expose an actor-owned machine INTO a workspace (Layer 2) with a
+     * per-capability grant, so that workspace's members can use it. Requires
+     * machine-admin and membership of the target workspace. Rejects a duplicate
+     * exposure. (CLI verb: `computer add-exposure` — the bare `expose`/`unexpose`
+     * verbs are the tunnel port commands.)
      */
-    listWorkspaceLinks(id: string, opts?: CallOptions): Promise<ComputerWorkspaceLink[]>;
+    expose(id: string, input: ExposeComputerInput, opts?: CallOptions): Promise<ComputerExposure>;
     /**
-     * Share a computer's LOCAL INFERENCE into another workspace (never shell /
-     * files / tunnels). `workspaceId` is the target workspace's `ws_…`
-     * resourceId or slug. Requires EDIT on the computer's home workspace and
-     * membership of the target. Rejects the home workspace and duplicates.
+     * Replace the capability grant on an existing exposure. `workspaceId` is the
+     * exposed workspace's `ws_…` resourceId. Requires machine-admin.
+     * (CLI verb: `computer update-exposure`.)
      */
-    linkWorkspace(id: string, workspaceId: string, opts?: CallOptions): Promise<ComputerWorkspaceLink>;
+    updateExposure(id: string, workspaceId: string, capabilities: string[], opts?: CallOptions): Promise<ComputerExposure>;
     /**
-     * Stop sharing a computer's local inference into a workspace. `workspaceId`
-     * is the target workspace's `ws_…` resourceId. Idempotent — unlinking a
-     * non-existent link still succeeds.
+     * Stop exposing a machine into a workspace. `workspaceId` is the exposed
+     * workspace's `ws_…` resourceId. Allowed for machine-admin OR an admin of the
+     * exposed workspace. Idempotent. (CLI verb: `computer remove-exposure`.)
      */
-    unlinkWorkspace(id: string, workspaceId: string, opts?: CallOptions): Promise<{
-        unlinked: boolean;
+    unexpose(id: string, workspaceId: string, opts?: CallOptions): Promise<{
+        unexposed: boolean;
     }>;
+    /**
+     * Transfer an actor-owned machine to a new owner (self, or an org the caller
+     * administers). `owner` is the target profile's resourceId; existing workspace
+     * exposures are kept. Requires machine-admin. (CLI verb: `computer transfer`.)
+     */
+    transfer(id: string, owner: string, opts?: CallOptions): Promise<Computer>;
     /**
      * Redeem a one-time pair token for a long-lived computer identity. The
      * token itself is the auth — we swap the bearer for the token on this
-     * call only (same pattern as `triggers.fire`).
+     * call only (same pattern as `automations.fire`).
      *
      * Used by `idapt up --token` to bootstrap a daemon. The request body is
      * snake_case; the response is wrapped in the standard `{data:{…}}`
@@ -1964,83 +2063,6 @@ declare class TablesApi {
     }>;
 }
 
-/**
- * TriggersApi — `/api/v1/triggers`.
- *
- * Triggers fire actions (run code, run chat) on events (webhook, schedule,
- * manual). The `fire` endpoint is unauthenticated — it validates the
- * per-trigger webhook secret instead of the bearer token. This SDK handles
- * both modes: regular calls use `this.ctx.key`; `fire` can be called with
- * an explicit secret override.
- */
-
-interface FireTriggerInput {
-    /**
-     * Webhook secret for this trigger. Overrides the client's `ap_` key.
-     * Required when calling `fire` outside the creating user's session.
-     */
-    secret: string;
-    /** Optional context overrides forwarded to the action. */
-    body?: Record<string, unknown>;
-}
-interface ListTriggerRunsQuery {
-    limit?: number;
-    /** Opaque pagination cursor — echo `pagination.next_cursor`. */
-    cursor?: string;
-}
-interface ListTriggersQuery {
-    workspace_id?: string;
-    include_archived?: boolean;
-    archived_only?: boolean;
-}
-interface BulkTriggerCostStatsQuery {
-    workspace_id?: string;
-}
-declare class TriggersApi {
-    private readonly ctx;
-    constructor(ctx: HttpContext);
-    list(query?: ListTriggersQuery, opts?: CallOptions): Promise<Trigger[]>;
-    /**
-     * Create a trigger. `workspace_id` is passed in the request BODY (alongside
-     * the flat trigger definition) — it is not a query param. The request
-     * body is flat: every scheduling field (`cron_expression`, …) and every
-     * action field (`agent_id`, `prompt_template`, `file_id`, …) sits at the
-     * top level — there are no nested `trigger_config` / `action_config`
-     * objects any more.
-     *
-     * For a `webhook` trigger the response additionally carries a one-time
-     * plaintext `secret` (use `TriggerWithSecret`); other trigger types
-     * resolve to a plain `Trigger`.
-     */
-    create(workspaceId: string, input: CreateTriggerInput, opts?: CallOptions): Promise<TriggerWithSecret | Trigger>;
-    get(id: string, opts?: CallOptions): Promise<Trigger>;
-    update(id: string, input: UpdateTriggerInput, opts?: CallOptions): Promise<Trigger>;
-    delete(id: string, opts?: CallOptions): Promise<DeletedResponse>;
-    archive(id: string, opts?: CallOptions): Promise<Trigger>;
-    unarchive(id: string, opts?: CallOptions): Promise<Trigger>;
-    /**
-     * Fire a trigger via its webhook secret. This endpoint does NOT use the
-     * client's `ap_` key — the bearer is the trigger's secret — so we build a
-     * one-off HttpContext for it rather than mutating the shared one.
-     *
-     * Responds HTTP 202. The response identifies the fired trigger via `id`
-     * only.
-     */
-    fire(id: string, input: FireTriggerInput, opts?: CallOptions): Promise<{
-        id: string;
-    }>;
-    /**
-     * Rotate the webhook secret. Returns the trigger with a fresh one-time
-     * plaintext `secret` populated (`TriggerWithSecret`). The old secret
-     * immediately stops working.
-     */
-    rotateSecret(id: string, opts?: CallOptions): Promise<TriggerWithSecret>;
-    /** Recent fires + their success/error outcome. */
-    listRuns(id: string, query?: ListTriggerRunsQuery, opts?: CallOptions): Promise<TriggerRun[]>;
-    getCostStats(id: string, opts?: CallOptions): Promise<TriggerCostStats>;
-    getCostStatsMap(query?: BulkTriggerCostStatsQuery, opts?: CallOptions): Promise<Record<string, TriggerCostStats>>;
-}
-
 /**
  * UserApi — identity + usage.
  *
@@ -2215,8 +2237,8 @@ declare class IdaptClient {
     readonly chats: ChatsApi;
     /** Workspaces CRUD + members + invitations + fork. */
     readonly workspaces: WorkspacesApi;
-    /** Triggers CRUD + fire, rotate-secret, runs. */
-    readonly triggers: TriggersApi;
+    /** Automations CRUD + fire, rotate-secret, runs. */
+    readonly automations: AutomationsApi;
     /** Computers CRUD + lifecycle + exec/tmux/sftp + ports + users + env + pair. */
     readonly computers: ComputersApi;
     /** Workspace secrets CRUD. */
@@ -2327,4 +2349,4 @@ declare class IdaptClient {
     private navigate;
 }
 
-export { type ListFilesQuery as $, type AddMemberInput as A, type BlobMeta as B, COMMAND_BINDINGS as C, DatastoreApi as D, type DeleteInvitationResult as E, type DeletedResult as F, type DeployFunctionFile as G, type DeployFunctionInput as H, IdaptClient as I, DocsApi as J, type ExecCommandInput as K, type ExecuteCommandOptions as L, FilesApi as M, type FireTriggerInput as N, type FunctionPermissionInput as O, FunctionsApi as P, type GenerateImageInput as Q, GuideApi as R, type GuideContent as S, type IdaptClientDeps as T, ImagesApi as U, type InstallStoreItemInput as V, type InvokeFunctionInput as W, type ListAgentsQuery as X, type ListApiKeysQuery as Y, type ListChatsQuery as Z, type ListComputersQuery as _, AgentsApi as a, type UpdateProviderEndpointInput as a$, type ListFunctionRunsQuery as a0, type ListFunctionsQuery as a1, type ListMessagesQuery as a2, type ListNotificationsQuery as a3, type ListResult as a4, type ListRunsQuery as a5, type ListSharedWithMeQuery as a6, type ListSharesQuery as a7, type ListTriggerRunsQuery as a8, type ListUsageHistoryQuery as a9, type SendNotificationResult as aA, SettingsApi as aB, type SftpInput as aC, type SftpListResult as aD, type SftpOp as aE, type SftpUploadInput as aF, SharingApi as aG, type SpeakInput as aH, type SseEvent as aI, StoreApi as aJ, type SubscribeOptions as aK, SubscriptionApi as aL, type TableQuery as aM, TablesApi as aN, type TmuxInput as aO, type TmuxOp as aP, type TranscribeInput as aQ, TriggersApi as aR, type UpdateAgentInput as aS, type UpdateApiKeyInput as aT, type UpdateChatInput as aU, type UpdateCollectionInput as aV, type UpdateComputerInput as aW, type UpdateComputerUserInput as aX, type UpdateFunctionInput as aY, type UpdateMemberInput as aZ, type UpdateNotificationInput as a_, ModelsApi as aa, type NotificationAudience as ab, type NotificationPreferenceUpdate as ac, NotificationsApi as ad, type PairComputerInput as ae, type PairComputerResult as af, type PatchFileInput as ag, type PatchPortInput as ah, type PresenceEntry as ai, type PresenceHeartbeatOptions as aj, type ProviderEndpointModelMappingInput as ak, ProviderEndpointsApi as al, RealtimeApi as am, type RealtimeEvent as an, type RemoveShareInput as ao, type RepromptMessageInput as ap, type RotateApiKeyInput as aq, type RotateApiKeyResult as ar, type RunFileInput as as, type RunFunctionInput as at, SearchApi as au, type SearchInput as av, type SearchStoreQuery as aw, SecretsApi as ax, type SendMessageInput as ay, type SendNotificationInput as az, ApiKeysApi as b, type UpdateSecretInput as b0, type UpdateSettingsInput as b1, type UpdateShareInput as b2, type UpdateWorkspaceInput as b3, type UploadInput as b4, UserApi as b5, type V1CommandName as b6, WebSearchApi as b7, type WebSearchInput as b8, WorkspacesApi as b9, type WritableMemberRole as ba, awaitOperation as bb, executeCommand as bc, getFileBlob as bd, getFileText as be, listFiles as bf, AudioApi as c, BlobsApi as d, type BlobsListOptions as e, type ChannelHandle as f, ChatsApi as g, type CommandBinding as h, ComputersApi as i, type CreateAgentInput as j, type CreateApiKeyInput as k, type CreateChatInput as l, type CreateCollectionInput as m, type CreateComputerInput as n, type CreateComputerUserInput as o, type CreateFolderInput as p, type CreateFunctionInput as q, type CreateInvitationInput as r, type CreateInvitationResult as s, type CreateProviderEndpointInput as t, type CreateSecretInput as u, type CreateShareInput as v, type CreateUserEnvVarInput as w, type CreateWorkspaceInput as x, type DatastoreListOptions as y, type DatastoreSetOptions as z };
+export { type ListChatsQuery as $, type AddMemberInput as A, type BlobMeta as B, COMMAND_BINDINGS as C, DatastoreApi as D, type DatastoreSetOptions as E, type DeleteInvitationResult as F, type DeletedResult as G, type DeployFunctionFile as H, IdaptClient as I, type DeployFunctionInput as J, DocsApi as K, type ExecCommandInput as L, type ExecuteCommandOptions as M, FilesApi as N, type FireAutomationInput as O, type FunctionPermissionInput as P, FunctionsApi as Q, type GenerateImageInput as R, GuideApi as S, type GuideContent as T, type IdaptClientDeps as U, ImagesApi as V, type InstallStoreItemInput as W, type InvokeFunctionInput as X, type ListAgentsQuery as Y, type ListApiKeysQuery as Z, type ListAutomationRunsQuery as _, AgentsApi as a, type UpdateProviderEndpointInput as a$, type ListComputersQuery as a0, type ListFilesQuery as a1, type ListFunctionRunsQuery as a2, type ListFunctionsQuery as a3, type ListMessagesQuery as a4, type ListNotificationsQuery as a5, type ListResult as a6, type ListRunsQuery as a7, type ListSharedWithMeQuery as a8, type ListSharesQuery as a9, type SendNotificationInput as aA, type SendNotificationResult as aB, SettingsApi as aC, type SftpInput as aD, type SftpListResult as aE, type SftpOp as aF, type SftpUploadInput as aG, SharingApi as aH, type SpeakInput as aI, type SseEvent as aJ, StoreApi as aK, type SubscribeOptions as aL, SubscriptionApi as aM, type TableQuery as aN, TablesApi as aO, type TmuxInput as aP, type TmuxOp as aQ, type TranscribeInput as aR, type UpdateAgentInput as aS, type UpdateApiKeyInput as aT, type UpdateChatInput as aU, type UpdateCollectionInput as aV, type UpdateComputerInput as aW, type UpdateComputerUserInput as aX, type UpdateFunctionInput as aY, type UpdateMemberInput as aZ, type UpdateNotificationInput as a_, type ListUsageHistoryQuery as aa, ModelsApi as ab, type NotificationAudience as ac, type NotificationPreferenceUpdate as ad, NotificationsApi as ae, type PairComputerInput as af, type PairComputerResult as ag, type PatchFileInput as ah, type PatchPortInput as ai, type PresenceEntry as aj, type PresenceHeartbeatOptions as ak, type ProviderEndpointModelMappingInput as al, ProviderEndpointsApi as am, RealtimeApi as an, type RealtimeEvent as ao, type RemoveShareInput as ap, type RepromptMessageInput as aq, type RotateApiKeyInput as ar, type RotateApiKeyResult as as, type RunFileInput as at, type RunFunctionInput as au, SearchApi as av, type SearchInput as aw, type SearchStoreQuery as ax, SecretsApi as ay, type SendMessageInput as az, ApiKeysApi as b, type UpdateSecretInput as b0, type UpdateSettingsInput as b1, type UpdateShareInput as b2, type UpdateWorkspaceInput as b3, type UploadInput as b4, UserApi as b5, type V1CommandName as b6, WebSearchApi as b7, type WebSearchInput as b8, WorkspacesApi as b9, type WritableMemberRole as ba, awaitOperation as bb, executeCommand as bc, getFileBlob as bd, getFileText as be, listFiles as bf, AudioApi as c, AutomationsApi as d, BlobsApi as e, type BlobsListOptions as f, type ChannelHandle as g, ChatsApi as h, type CommandBinding as i, ComputersApi as j, type CreateAgentInput as k, type CreateApiKeyInput as l, type CreateChatInput as m, type CreateCollectionInput as n, type CreateComputerInput as o, type CreateComputerUserInput as p, type CreateFolderInput as q, type CreateFunctionInput as r, type CreateInvitationInput as s, type CreateInvitationResult as t, type CreateProviderEndpointInput as u, type CreateSecretInput as v, type CreateShareInput as w, type CreateUserEnvVarInput as x, type CreateWorkspaceInput as y, type DatastoreListOptions as z };