@idapt/browser-app-sdk 0.2.0 → 0.4.0

package/dist/{client-DjipcztO.d.cts → client-BvCqz1Eu.d.cts}

@@ -1,4 +1,4 @@
-import { H as HttpContext, C as CallOptions, F as File$1, i as Agent, d as DeletedResponse, l as ApiKey, ak as Permission, aN as SpeechResult, aY as TranscriptionResult, aO as SpeechStreamEvent, aZ as TranscriptionStreamEvent, B as BlobObject, s as Chat, t as ChatCost, ac as MessageCosts, v as ChatStopResult, aa as Message, aE as SendMessageResult, k as AgentRunState, j as AgentRun, ay as RepromptResult, x as Computer, I as ComputerServerInfo, z as ComputerExecResult, aX as TmuxWindow, aG as SftpEntry, G as ComputerPort, L as ComputerUser, a8 as ListEnvelope, y as ComputerEnvVar, R as DatastoreEntry, f as FileUploadResult, W as WriteOptions, U as ExecutionRun, T as ExecutionBackend, X as ExecutionRunStatus, a0 as FunctionRun, $ as FunctionResource, Z as FunctionDeployment, _ as FunctionInvokeResult, a3 as ImageModel, a2 as ImageGenerationResult, a5 as LLMModel, af as Notification, ag as NotificationConfig, ah as NotificationPreference, an as ProviderEndpointKind, ar as ProviderEndpointProviderKey, am as ProviderEndpointConnectionType, au as ProviderEndpointTransport, as as ProviderEndpointRuntime, aq as ProviderEndpointProtocol, av as ProviderEndpointVisibility, ao as ProviderEndpointModality, al as ProviderEndpoint, a9 as ManagedProviderPreset, at as ProviderEndpointTestResult, aB as SearchResult, aC as Secret, aD as SecretWithValue, aF as Settings, aK as ShareResourceType, aJ as SharePermission, aH as Share, aI as ShareDeletedResult, aL as SharedWithMeItem, aR as StoreItemType, aQ as StoreItem, aP as StoreInstallResult, aT as Subscription, aV as TableCollection, aW as TableRecord, a_ as Trigger, M as CreateTriggerInput, b3 as TriggerWithSecret, b6 as UpdateTriggerInput, b1 as TriggerRun, b0 as TriggerCostStats, b9 as User, b8 as UsageSummary, b7 as UsageRecord, bf as WebSearchResponse, bj as WorkspaceMemberRole, bg as Workspace, bi as WorkspaceMember, bh as WorkspaceInvitation, m as AppFolder, P as DataFolder, w as ClientMeta, aA as RuntimeMode, aS as StoredCredential, S as EscalateRequest } from './data-BuXXki1D.cjs';
+import { H as HttpContext, C as CallOptions, F as File, k as Agent, f as DeletedResponse, p as ApiKey, at as Permission, r as AudioModel, b4 as TtsVoice, v as Automation, _ as CreateAutomationInput, z as AutomationWithSecret, b6 as UpdateAutomationInput, y as AutomationRun, x as AutomationCostStats, E as Chat, G as ChatCost, al as MessageCosts, K as ChatStopResult, aj as Message, aN as SendMessageResult, m as AgentRunState, l as AgentRun, aH as RepromptResult, N as Computer, U as ComputerServerInfo, Q as ComputerExecResult, b0 as TerminalWindow, a4 as FsEntry, T as ComputerPort, Z as ComputerUser, L as ListEnvelope, P as ComputerEnvVar, h as FileUploadResult, W as WriteOptions, a9 as ImageModel, ab as LLMModel, ao as Notification, ap as NotificationConfig, aq as NotificationPreference, aw as ProviderEndpointKind, aA as ProviderEndpointProviderKey, av as ProviderEndpointConnectionType, aD as ProviderEndpointTransport, aB as ProviderEndpointRuntime, az as ProviderEndpointProtocol, aE as ProviderEndpointVisibility, ax as ProviderEndpointModality, au as ProviderEndpoint, ai as ManagedProviderPreset, aC as ProviderEndpointTestResult, aK as SearchResult, aL as Secret, aM as SecretWithValue, aO as Settings, aS as ShareResourceType, aR as SharePermission, aP as Share, aQ as ShareDeletedResult, aT as SharedWithMeItem, a_ as Subscription, b9 as User, b8 as UsageSummary, b7 as UsageRecord, bf as WebSearchResponse, bj as WorkspaceMemberRole, bg as Workspace, bi as WorkspaceMember, bh as WorkspaceInvitation, q as AppFolder, a0 as DataFolder, M as ClientMeta, aJ as RuntimeMode, aZ as StoredCredential, a2 as EscalateRequest } from './data-BEWuiL70.cjs';
 
 /**
  * Stateless low-level file operations against `/api/v1/drive/files/*`.
@@ -15,7 +15,7 @@ import { H as HttpContext, C as CallOptions, F as File$1, i as Agent, d as Delet
  */
 
 /**
- * `GET /v1/files` query params. Cursor-paginated (`limit` + opaque
+ * `GET /v1/drive/files` query params. Cursor-paginated (`limit` + opaque
  * `cursor`). There is NO `workspace_id` filter — list within a workspace by
  * passing the workspace's root folder as `parent_id`.
  *
@@ -47,11 +47,7 @@ interface CreateFolderInput {
     workspace_id?: string;
     icon?: string;
 }
-interface RunFileInput {
-    timeout_seconds?: number;
-    env?: Record<string, string>;
-}
-declare function listFiles(ctx: HttpContext, query?: ListFilesQuery, opts?: CallOptions): Promise<File$1[]>;
+declare function listFiles(ctx: HttpContext, query?: ListFilesQuery, opts?: CallOptions): Promise<File[]>;
 /** GET raw text body (`expectJson: false`). UTF-8 decoded by `fetch`. */
 declare function getFileText(ctx: HttpContext, id: string, opts?: CallOptions): Promise<string>;
 /** GET raw bytes as Blob, preserving Content-Type. */
@@ -97,7 +93,6 @@ interface CreateAgentInput {
     default_model_id?: string;
     default_reasoning_effort?: number | null;
     default_auto_cost_level?: number | null;
-    default_cost_budget_limit_usd?: number | null;
 }
 interface UpdateAgentInput {
     name?: string;
@@ -117,7 +112,6 @@ interface UpdateAgentInput {
     default_model_id?: string | null;
     default_reasoning_effort?: number | null;
     default_auto_cost_level?: number | null;
-    default_cost_budget_limit_usd?: number | null;
 }
 interface MoveAgentInput {
     workspace_id: string;
@@ -215,117 +209,111 @@ declare class ApiKeysApi {
 }
 
 /**
- * AudioApi — `/api/v1/audio/*`.
+ * AudioApi — audio-model + voice DISCOVERY (`GET /api/v1/audio/models` +
+ * `/audio/voices`).
  *
- * Two endpoints:
- *   - `POST /audio/speech`         → text-to-speech, writes a file ref.
- *                                    Responds HTTP 201 (resource created).
- *   - `POST /audio/transcriptions` → multipart upload, returns `{ text }`
- *
- * Transcription accepts any Blob/File you already have in memory (e.g.,
- * from a MediaRecorder session). Speech writes into the caller's workspace.
+ * Audio GENERATION moved to the unified inference surface — use
+ * `client.inference.speech({ text, workspace_id, … })` for TTS and
+ * `client.call("inference transcribe", …)` for STT (multipart). This namespace
+ * now exposes only the model + voice catalogs; model discovery stays
+ * per-modality by design.
  */
 
-interface SpeakInput {
-    text: string;
-    workspace_id: string;
-    model?: string;
-    voice?: string;
-    speed?: number;
-    pitch?: number;
-    emotion?: string;
-    output_path?: string;
-}
-interface TranscribeInput {
-    file: Blob | File;
-    model?: string;
+interface ListVoicesInput {
     language?: string;
-    /** Override the filename attached to the multipart upload. */
-    filename?: string;
-}
-interface SpeakStreamInput {
-    text: string;
-    model?: string;
-    voice?: string;
-    speed?: number;
+    gender?: "male" | "female" | "neutral";
 }
 declare class AudioApi {
     private readonly ctx;
     constructor(ctx: HttpContext);
-    /** Text-to-speech. Responds HTTP 201 with the written file ref under `data`. */
-    speak(input: SpeakInput, opts?: CallOptions): Promise<SpeechResult>;
-    transcribe(input: TranscribeInput, opts?: CallOptions): Promise<TranscriptionResult>;
-    streamSpeech(input: SpeakStreamInput, opts?: CallOptions): AsyncIterable<SpeechStreamEvent>;
-    streamTranscribe(input: TranscribeInput, opts?: CallOptions): AsyncIterable<TranscriptionStreamEvent>;
+    /** List the available TTS / transcription models. */
+    listModels(opts?: CallOptions): Promise<AudioModel[]>;
+    /** List the TTS voice catalog (filter by language / gender). */
+    listVoices(input?: ListVoicesInput, opts?: CallOptions): Promise<TtsVoice[]>;
 }
 
 /**
- * BlobsApi — `/api/v1/blobs` (the object-storage data plane).
+ * AutomationsApi — `/api/v1/automations`.
  *
- * Workspace-scoped object store. Objects live under a `namespace` (a bucket you
- * pick) and a `key`. The companion to `client.kv` (Datastore) — KV holds small
- * inline JSON, Blobs holds large / binary data. Surfaced as `client.blobs.*` on
- * `IdaptClient`.
+ * Automations fire actions on events (webhook or cron). The `fire` endpoint is
+ * unauthenticated — it validates the
+ * per-automation webhook secret instead of the bearer token. This SDK handles
+ * both modes: regular calls use `this.ctx.key`; `fire` can be called with
+ * an explicit secret override.
  */
 
-interface BlobsListOptions extends CallOptions {
-    /** Only keys starting with this prefix. */
-    prefix?: string;
-    cursor?: string;
+interface FireAutomationInput {
+    /**
+     * Webhook secret for this automation. Overrides the client's `ap_` key.
+     * Required when calling `fire` outside the creating user's session.
+     */
+    secret: string;
+    /** Optional context overrides forwarded to the action. */
+    body?: Record<string, unknown>;
+}
+interface ListAutomationRunsQuery {
     limit?: number;
+    /** Opaque pagination cursor — echo `pagination.next_cursor`. */
+    cursor?: string;
 }
-/** Per-object metadata returned by `list`. */
-interface BlobMeta {
-    key: string;
-    content_type: string;
-    size: number;
-    updated_at: string;
+interface ListAutomationsQuery {
+    workspace_id?: string;
+    include_archived?: boolean;
+    archived_only?: boolean;
+}
+interface BulkAutomationCostStatsQuery {
+    workspace_id?: string;
 }
-declare class BlobsApi {
+declare class AutomationsApi {
     private readonly ctx;
     constructor(ctx: HttpContext);
-    /** List objects in a namespace (prefix-filterable). */
-    list(namespace: string, opts?: BlobsListOptions): Promise<BlobMeta[]>;
+    list(query?: ListAutomationsQuery, opts?: CallOptions): Promise<Automation[]>;
     /**
-     * Upload (upsert) an object's bytes. Returns its metadata.
+     * Create an automation. `workspace_id` is passed in the request BODY
+     * alongside the flat automation definition — it is not a query param. The request
+     * body is flat: every scheduling field (`cron_expression`, …) and agent-run
+     * action field (`agent_id`, `prompt_template`, …) sits at the top level —
+     * there are no nested `trigger_config` / `action_config` objects.
      *
-     * Sent as `multipart/form-data` (the bytes ride a `file` part, with an
-     * optional `content_type` field) — the same upload convention as
-     * `client.files.upload`, so it flows through the one multipart transport and
-     * is reachable identically via `client.call("blobs put", …)`. The SDK leaves
-     * `Content-Type` unset so the runtime picks the multipart boundary.
+     * For a webhook automation the response additionally carries a one-time
+     * plaintext `secret` (use `AutomationWithSecret`); other automation types
+     * resolve to a plain `Automation`.
      */
-    put(namespace: string, key: string, content: Blob | ArrayBuffer | Uint8Array, contentType?: string, opts?: CallOptions): Promise<BlobObject>;
+    create(workspaceId: string, input: CreateAutomationInput, opts?: CallOptions): Promise<AutomationWithSecret | Automation>;
+    get(id: string, opts?: CallOptions): Promise<Automation>;
+    update(id: string, input: UpdateAutomationInput, opts?: CallOptions): Promise<Automation>;
+    delete(id: string, opts?: CallOptions): Promise<DeletedResponse>;
+    archive(id: string, opts?: CallOptions): Promise<Automation>;
+    unarchive(id: string, opts?: CallOptions): Promise<Automation>;
     /**
-     * Download an object's raw bytes (preserving its stored Content-Type).
+     * Fire an automation via its webhook secret. This endpoint does NOT use the
+     * client's `ap_` key — the bearer is the automation's secret — so we build a
+     * one-off HttpContext for it rather than mutating the shared one.
      *
-     * `GET /blobs/:ns/:key` returns JSON metadata + a signed URL by default (the
-     * agent/CLI form); `?download=true` is the raw-bytes escape hatch this facade
-     * uses. For the JSON reference instead, call `client.call("blobs get", …)`.
+     * Responds HTTP 202. The response identifies the fired automation via `id`
+     * only.
      */
-    get(namespace: string, key: string, opts?: CallOptions): Promise<{
-        blob: Blob;
-        contentType: string;
-    }>;
-    /** Read an object's metadata (no bytes). */
-    head(namespace: string, key: string, opts?: CallOptions): Promise<BlobObject>;
-    /** Delete an object (idempotent). */
-    delete(namespace: string, key: string, opts?: CallOptions): Promise<DeletedResponse>;
-    /** Mint a time-limited direct-download URL for an object. */
-    createSignedUrl(namespace: string, key: string, expiresIn?: number, opts?: CallOptions): Promise<{
-        url: string;
-        expires_at: string;
+    fire(id: string, input: FireAutomationInput, opts?: CallOptions): Promise<{
+        id: string;
     }>;
-    /** List the blob namespaces in the workspace. */
-    listNamespaces(opts?: CallOptions): Promise<string[]>;
+    /**
+     * Rotate the webhook secret. Returns the automation with a fresh one-time
+     * plaintext `secret` populated (`AutomationWithSecret`). The old secret
+     * immediately stops working.
+     */
+    rotateSecret(id: string, opts?: CallOptions): Promise<AutomationWithSecret>;
+    /** Recent fires + their success/error outcome. */
+    listRuns(id: string, query?: ListAutomationRunsQuery, opts?: CallOptions): Promise<AutomationRun[]>;
+    getCostStats(id: string, opts?: CallOptions): Promise<AutomationCostStats>;
+    getCostStatsMap(query?: BulkAutomationCostStatsQuery, opts?: CallOptions): Promise<Record<string, AutomationCostStats>>;
 }
 
 /**
  * GENERATED FILE — DO NOT EDIT BY HAND.
  *
  * Runtime command-bindings table for the SDK's generic `call(action, args)`
- * executor — one entry per v1 command (HTTP binding only: method, path,
- * pathParams, argLocation, responseKind, async, binary content types).
+ * executor — one entry per SDK-exposed v1 command (HTTP binding only: method,
+ * path, pathParams, argLocation, responseKind, async, binary content types).
  *
  * Generated from the zod contract registry
  * (`packages/api-contracts/src/v1/contracts`) by
@@ -366,7 +354,7 @@ declare const COMMAND_BINDINGS: Record<string, CommandBinding>;
  * {@link COMMAND_BINDINGS}). Used to type `client.call(action, args)` so a
  * known action autocompletes and a typo is caught at compile time.
  */
-type V1CommandName = "agent archive" | "agent copy-to-workspace" | "agent create" | "agent delete" | "agent get" | "agent list" | "agent move" | "agent permanent-delete" | "agent restore" | "agent unarchive" | "agent update" | "ai-gateway providers" | "ai-gateway usage" | "api-key create" | "api-key delete" | "api-key list" | "api-key rotate" | "api-key update" | "audio models" | "audio search-models" | "audio search-voices" | "audio speak" | "audio speak-stream" | "audio transcribe" | "audio transcribe-stream" | "audio voices" | "blobs delete" | "blobs get" | "blobs head" | "blobs list" | "blobs namespaces" | "blobs put" | "blobs signed-url" | "browser-app create" | "browser-app deploy" | "browser-app deployments" | "browser-app fork" | "browser-app get" | "browser-app list" | "browser-app promote" | "browser-app snapshot" | "chat archive" | "chat copy-to-agent" | "chat copy-to-workspace" | "chat cost" | "chat create" | "chat delete" | "chat export" | "chat fork-to-workspace" | "chat get" | "chat list" | "chat message-costs" | "chat messages" | "chat permanent-delete" | "chat reprompt" | "chat restore" | "chat runs" | "chat send" | "chat stop" | "chat stream" | "chat unarchive" | "chat update" | "ci cancel" | "ci get" | "ci jobs" | "ci list" | "ci run" | "computer activity" | "computer add-local-model" | "computer app-create" | "computer app-delete" | "computer app-exec" | "computer app-expose" | "computer app-external" | "computer app-get" | "computer app-logs" | "computer app-ports" | "computer app-reset" | "computer app-restart" | "computer app-run" | "computer app-runtime" | "computer app-setup-runtime" | "computer app-start" | "computer app-stop" | "computer app-unexpose" | "computer apps" | "computer archive" | "computer compose-up" | "computer create" | "computer create-user" | "computer delete" | "computer delete-user" | "computer delete-user-env" | "computer download" | "computer download-to-drive" | "computer ephemeral" | "computer exec" | "computer expose" | "computer get" | "computer get-user" | "computer hibernate" | "computer link" | "computer links" | "computer list" | "computer local-inference" | "computer local-models" | "computer manage" | "computer pair" | "computer ports" | "computer remove-local-model" | "computer set-ports" | "computer set-user-env" | "computer sftp" | "computer start" | "computer stop" | "computer test-connection" | "computer tmux" | "computer tunnels" | "computer unarchive" | "computer unexpose" | "computer unlink" | "computer update" | "computer update-user" | "computer upload" | "computer user-env" | "computer user-env-setup" | "computer user-env-setup-apply" | "computer user-env-sync" | "computer user-env-sync-repair" | "computer users" | "datastore batch" | "datastore delete" | "datastore get" | "datastore increment" | "datastore list" | "datastore namespaces" | "datastore set" | "drive content-versions" | "drive create-folder" | "drive delete" | "drive get-metadata" | "drive glob" | "drive grep" | "drive list" | "drive move" | "drive permanent-delete" | "drive read" | "drive restore" | "drive restore-version" | "drive run" | "drive update" | "drive upload" | "functions create" | "functions delete" | "functions deploy" | "functions deployments" | "functions get" | "functions invoke" | "functions list" | "functions promote" | "functions run" | "functions run-get" | "functions run-interrupt" | "functions run-list" | "functions update" | "guide get" | "hook create" | "hook delete" | "hook get" | "hook history" | "hook list" | "hook override" | "hook preview" | "hook toggle" | "hook update" | "hub install" | "hub search" | "hub submissions" | "hub submit" | "hub update" | "hub update-check" | "image generate" | "image models" | "image search" | "me get" | "me usage" | "memory box-delete" | "memory box-get" | "memory box-list" | "memory box-update" | "memory delete" | "memory index-read" | "memory index-write" | "memory list" | "memory read" | "memory search" | "memory write" | "models list" | "models search" | "notes box-create" | "notes box-delete" | "notes box-get" | "notes box-list" | "notes box-update" | "notes delete" | "notes folder-create" | "notes folder-delete" | "notes folder-list" | "notes folder-move" | "notes folder-rename" | "notes graph" | "notes import" | "notes index-read" | "notes index-write" | "notes links" | "notes list" | "notes note-move" | "notes note-rename" | "notes purge" | "notes read" | "notes restore" | "notes search" | "notes search-all" | "notes tag-list" | "notes tag-rename" | "notes trash-empty" | "notes trash-list" | "notes tree" | "notes write" | "notification config" | "notification delete" | "notification get" | "notification list" | "notification preferences" | "notification read-all" | "notification send" | "notification update" | "notification update-config" | "notification update-preferences" | "operation cancel" | "operation get" | "operation list" | "provider-endpoint create" | "provider-endpoint delete" | "provider-endpoint list" | "provider-endpoint presets" | "provider-endpoint test" | "provider-endpoint update" | "realtime broadcast" | "realtime presence" | "realtime presence-list" | "realtime subscribe" | "repos branches" | "repos clone-url" | "repos commit" | "repos commits" | "repos create" | "repos delete" | "repos get" | "repos list" | "repos read-file" | "repos set-visibility" | "search query" | "secret create" | "secret delete" | "secret get" | "secret list" | "secret reveal" | "secret update" | "settings get" | "settings update" | "share create" | "share delete" | "share list" | "share update" | "shared-with-me list" | "skill apply-update" | "skill attach" | "skill body" | "skill create" | "skill delete" | "skill detach" | "skill file-delete" | "skill file-list" | "skill file-read" | "skill file-write" | "skill fork" | "skill get" | "skill install" | "skill list" | "skill publish" | "skill render" | "skill search" | "skill update" | "skill update-check" | "subscription get" | "table create" | "table create-record" | "table delete" | "table delete-record" | "table export" | "table get" | "table get-record" | "table import" | "table list" | "table query" | "table update" | "table update-record" | "tasks ancestors" | "tasks assign" | "tasks comment" | "tasks comment-delete" | "tasks comment-list" | "tasks comment-update" | "tasks create" | "tasks delete" | "tasks depend" | "tasks dependencies" | "tasks duplicate" | "tasks events" | "tasks get" | "tasks import" | "tasks label-create" | "tasks label-delete" | "tasks label-list" | "tasks label-update" | "tasks list" | "tasks list-create" | "tasks list-delete" | "tasks list-get" | "tasks list-list" | "tasks list-update" | "tasks unassign" | "tasks undepend" | "tasks update" | "trigger archive" | "trigger cost-stats" | "trigger cost-stats-all" | "trigger create" | "trigger delete" | "trigger fire" | "trigger get" | "trigger list" | "trigger rotate-secret" | "trigger runs" | "trigger test-fire" | "trigger unarchive" | "trigger update" | "video generate" | "video models" | "video search" | "web fetch" | "web search" | "workspace add-member" | "workspace archive" | "workspace create" | "workspace delete" | "workspace get" | "workspace invitations" | "workspace invite" | "workspace list" | "workspace members" | "workspace remove-member" | "workspace revoke-invitation" | "workspace unarchive" | "workspace update" | "workspace update-member";
+type V1CommandName = "agent archive" | "agent copy-to-workspace" | "agent create" | "agent delete" | "agent get" | "agent list" | "agent move" | "agent permanent-delete" | "agent restore" | "agent unarchive" | "agent update" | "ai-gateway providers" | "ai-gateway route-preview" | "ai-gateway usage" | "api-key create" | "api-key delete" | "api-key list" | "api-key rotate" | "api-key update" | "audio models" | "audio search-models" | "audio search-voices" | "audio voices" | "automation archive" | "automation cancel-run" | "automation cost-stats" | "automation cost-stats-all" | "automation create" | "automation delete" | "automation fire" | "automation get" | "automation list" | "automation retry-run" | "automation rotate-secret" | "automation runs" | "automation runs-all" | "automation test-fire" | "automation unarchive" | "automation update" | "browser-app create" | "browser-app deploy" | "browser-app deployments" | "browser-app fork" | "browser-app get" | "browser-app list" | "browser-app promote" | "browser-app snapshot" | "chat archive" | "chat copy-to-agent" | "chat copy-to-workspace" | "chat cost" | "chat create" | "chat delete" | "chat export" | "chat fork-to-workspace" | "chat get" | "chat list" | "chat message-costs" | "chat messages" | "chat permanent-delete" | "chat reprompt" | "chat restore" | "chat runs" | "chat send" | "chat stop" | "chat stream" | "chat unarchive" | "chat update" | "ci cancel" | "ci get" | "ci jobs" | "ci list" | "ci run" | "computer activity" | "computer add-exposure" | "computer add-local-model" | "computer app-create" | "computer app-delete" | "computer app-exec" | "computer app-expose" | "computer app-external" | "computer app-get" | "computer app-logs" | "computer app-ports" | "computer app-reset" | "computer app-restart" | "computer app-run" | "computer app-runtime" | "computer app-setup-runtime" | "computer app-start" | "computer app-stop" | "computer app-unexpose" | "computer apps" | "computer archive" | "computer compose-up" | "computer create" | "computer create-user" | "computer delete" | "computer delete-user" | "computer delete-user-env" | "computer download" | "computer download-to-drive" | "computer ephemeral" | "computer exec" | "computer expose" | "computer fs" | "computer get" | "computer get-user" | "computer hibernate" | "computer list" | "computer local-inference" | "computer local-models" | "computer manage" | "computer pair" | "computer ports" | "computer remove-exposure" | "computer remove-local-model" | "computer run" | "computer set-ports" | "computer set-user-env" | "computer start" | "computer stop" | "computer terminal" | "computer test-connection" | "computer transfer" | "computer tunnels" | "computer unarchive" | "computer unexpose" | "computer update" | "computer update-exposure" | "computer update-user" | "computer upload" | "computer user-env" | "computer user-env-setup" | "computer user-env-setup-apply" | "computer user-env-sync" | "computer user-env-sync-repair" | "computer users" | "custom-models create" | "custom-models delete" | "custom-models get" | "custom-models list" | "custom-models update" | "drive content-versions" | "drive create-folder" | "drive delete" | "drive get-metadata" | "drive glob" | "drive grep" | "drive list" | "drive move" | "drive permanent-delete" | "drive read" | "drive restore" | "drive restore-version" | "drive update" | "drive upload" | "guide get" | "hook create" | "hook delete" | "hook get" | "hook history" | "hook list" | "hook override" | "hook preview" | "hook toggle" | "hook update" | "image models" | "image search" | "inference image" | "inference speech" | "inference speech-stream" | "inference text" | "inference text-stream" | "inference transcribe" | "inference video" | "me get" | "me usage" | "memory box-delete" | "memory box-get" | "memory box-list" | "memory box-update" | "memory delete" | "memory index-read" | "memory index-write" | "memory list" | "memory read" | "memory search" | "memory write" | "models list" | "models search" | "notes box-create" | "notes box-delete" | "notes box-get" | "notes box-list" | "notes box-update" | "notes delete" | "notes folder-create" | "notes folder-delete" | "notes folder-list" | "notes folder-move" | "notes folder-rename" | "notes graph" | "notes import" | "notes index-read" | "notes index-write" | "notes links" | "notes list" | "notes note-move" | "notes note-rename" | "notes purge" | "notes read" | "notes restore" | "notes search" | "notes search-all" | "notes tag-list" | "notes tag-rename" | "notes trash-empty" | "notes trash-list" | "notes tree" | "notes write" | "notification config" | "notification delete" | "notification get" | "notification list" | "notification preferences" | "notification read-all" | "notification send" | "notification update" | "notification update-config" | "notification update-preferences" | "operation await" | "operation cancel" | "operation content" | "operation get" | "operation list" | "provider-endpoint create" | "provider-endpoint delete" | "provider-endpoint list" | "provider-endpoint presets" | "provider-endpoint test" | "provider-endpoint update" | "realtime broadcast" | "realtime presence" | "realtime presence-list" | "realtime subscribe" | "search query" | "secret create" | "secret delete" | "secret get" | "secret list" | "secret reveal" | "secret update" | "settings get" | "settings update" | "share create" | "share delete" | "share list" | "share update" | "shared-with-me list" | "subscription get" | "tasks ancestors" | "tasks assign" | "tasks comment" | "tasks comment-delete" | "tasks comment-list" | "tasks comment-update" | "tasks create" | "tasks delete" | "tasks depend" | "tasks dependencies" | "tasks duplicate" | "tasks events" | "tasks get" | "tasks import" | "tasks label-create" | "tasks label-delete" | "tasks label-list" | "tasks label-update" | "tasks list" | "tasks list-create" | "tasks list-delete" | "tasks list-get" | "tasks list-list" | "tasks list-update" | "tasks unassign" | "tasks undepend" | "tasks update" | "video models" | "video search" | "web fetch" | "web search" | "workspace add-member" | "workspace archive" | "workspace create" | "workspace delete" | "workspace get" | "workspace invitations" | "workspace invite" | "workspace list" | "workspace members" | "workspace remove-member" | "workspace revoke-invitation" | "workspace unarchive" | "workspace update" | "workspace update-member";
 
 /**
  * Generic, spec-driven command executor — the SDK twin of the CLI's `runSpec`.
@@ -380,11 +368,11 @@ type V1CommandName = "agent archive" | "agent copy-to-workspace" | "agent create
  * poll the operation handle to completion ({@link awaitOperation}).
  *
  * This is what powers `client.call(action, args)`: because the binding table is
- * generated from the same contract registry the routes are, EVERY v1 command is
- * reachable through this one path — no per-verb code, 100% parity by
- * construction. It deliberately mirrors `packages/cli/src/execute.ts` so the
- * CLI and SDK agree on path-binding, request assembly, envelope unwrap, and
- * operation polling.
+ * generated from the SDK-exposed contract registry, every SDK-exposed v1 command
+ * is reachable through this one path. Pre-GA/default-off commands can opt out of
+ * this public dynamic surface with `sdkExposed: false`. It deliberately mirrors
+ * `packages/cli/src/execute.ts` so the CLI and SDK agree on path-binding,
+ * request assembly, envelope unwrap, and operation polling.
  */
 
 /** Options for {@link executeCommand}. */
@@ -649,27 +637,33 @@ declare class ChatsApi {
  *   - CRUD              — list / create pair token / get / update / delete
  *   - Lifecycle         — archive / unarchive / start / hibernate /
  *                          testConnection
- *   - Exec              — exec (one-shot daemon command)
- *   - Tmux              — tmux (re-attachable windows under `idapt` session)
- *   - SFTP              — sftp (dispatcher), upload / download (binary)
+ *   - Exec              — exec (one-shot daemon command, or `terminal` window)
+ *   - Terminal          — terminal (persistent named tmux windows)
+ *   - FS              — fs (dispatcher), upload / download (binary)
  *   - Ports             — listPorts / updatePort (managed only)
  *   - Unix users        — listUsers / createUser / updateUser / deleteUser
  *   - User env vars     — listUserEnvVars / createUserEnvVar /
  *                          deleteUserEnvVar / setupUserEnv /
  *                          checkUserEnvSetup / syncUserEnv / checkUserEnvSync
- *   - Workspace links   — listWorkspaceLinks / linkWorkspace / unlinkWorkspace
- *                          (share a computer's LOCAL INFERENCE into other
- *                          workspaces; never shell / files / tunnels)
+ *   - Exposures         — expose / updateExposure / unexpose (expose an
+ *                          actor-owned machine into a workspace with a
+ *                          per-capability grant) + transfer (move ownership)
  *   - Pair              — pair (daemon token bootstrap; bearer-overridden,
  *                          mirrors the trigger-fire pattern)
  *
- * Permissions on every authenticated verb default to the caller's
- * `computers:read` / `computers:write` scope. See `lib/computers/Computers.md`
+ * Authenticated verbs are split by surface: generic computer read/write covers
+ * metadata, while lifecycle, exec, files, tunnels, terminal, desktop, local
+ * inference, apps, and admin operations require their explicit computer action
+ * grants. See `backend/packages/computers/src/internal/computers/Computers.md`
  * for the end-to-end computer model.
  */
 
 interface ListComputersQuery {
-    workspace_id: string;
+    /**
+     * Narrow the list to one organization the actor belongs to (its resourceId).
+     * Machines are actor-owned; omit for the actor's own machines + all its orgs'.
+     */
+    organization?: string;
     limit?: number;
     /** Opaque pagination cursor — echo `pagination.next_cursor`. */
     cursor?: string;
@@ -706,9 +700,9 @@ interface ExecCommandInput {
     /** Run as a different POSIX user via `sudo -u`. */
     user?: string;
 }
-type SftpOp = "list" | "stat" | "write" | "mkdir" | "rename" | "delete" | "chmod" | "chown";
-interface SftpInput {
-    op: SftpOp;
+type FsOp = "list" | "stat" | "write" | "mkdir" | "rename" | "delete" | "chmod" | "chown";
+interface FsInput {
+    op: FsOp;
     path: string;
     /** `write` — utf-8 content. */
     content?: string;
@@ -721,11 +715,11 @@ interface SftpInput {
     /** `chown` — optional group name (appended as `owner:group`). */
     group?: string;
 }
-interface SftpListResult {
+interface FsListResult {
     path: string;
-    entries: SftpEntry[];
+    entries: FsEntry[];
 }
-interface SftpUploadInput {
+interface FsUploadInput {
     /** Binary content. Browser `File`/`Blob` both work. */
     file: Blob;
     /** Destination path on the remote computer. */
@@ -735,19 +729,29 @@ interface SftpUploadInput {
     /** Conflict resolution. Default: `replace`. */
     conflict_mode?: "replace" | "skip";
 }
-type TmuxOp = "list" | "run" | "capture" | "send" | "kill";
-interface TmuxInput {
-    op: TmuxOp;
-    /** Required for run/capture/send/kill. POSIX-safe shape. */
+type TerminalOp = "list" | "run" | "capture" | "send" | "kill" | "rename";
+interface TerminalInput {
+    op: TerminalOp;
+    /** Target window name (required for all ops except `list`). */
     name?: string;
-    /** `run` — the shell command. */
+    /** `run` — the shell command (to completion; returns a real exit code). */
     command?: string;
-    /** `run` — optional `cd` prefix. */
+    /** `run` — optional working directory (persists into the window). */
     working_dir?: string;
+    /** `run` — non-secret env vars exported (persistently) into the window. */
+    env?: Record<string, string>;
+    /** `run` — soft timeout in seconds (clamped to ~290). */
+    timeout_seconds?: number;
+    /** `run` — return a running handle immediately; re-poll via `run_id`. */
+    detach?: boolean;
+    /** `run` — re-poll a prior detached run instead of starting a new command. */
+    run_id?: string;
     /** `send` — keys to inject (auto-followed by Enter). */
     keys?: string;
     /** `capture` — number of trailing lines to grab. Default 200. */
     lines?: number;
+    /** `rename` — the new window name. */
+    new_name?: string;
 }
 interface PatchPortInput {
     port: number;
@@ -802,20 +806,29 @@ interface PairComputerResult {
     domain: string;
 }
 /**
- * One `computer_workspace` link — a computer shared INTO an additional
- * workspace, granting LOCAL INFERENCE ONLY (never shell / files / tunnels).
- * `workspace_resource_id` is the target workspace's public `ws_…` id.
+ * One `computer_workspace` EXPOSURE — an actor-owned machine exposed INTO a
+ * workspace (Layer 2) with a per-capability grant. `workspace_resource_id` is
+ * the target workspace's public `ws_…` id; `capabilities` is the granted
+ * capability-slug subset.
  */
-interface ComputerWorkspaceLink {
+interface ComputerExposure {
     id: string;
     computer_id: string;
     workspace_id: string;
     workspace_resource_id: string | null;
-    permissions: unknown[] | null;
-    created_by_actor_id: string;
+    capabilities: string[];
+    label: string | null;
+    created_by_actor_id: string | null;
     created_at: number;
     updated_at: number;
 }
+/** `POST /v1/computers/{id}/expose` body. */
+interface ExposeComputerInput {
+    /** Target workspace — public `ws_…` resourceId or slug. */
+    workspace_id: string;
+    /** Capability-slug subset to grant {local-inference, terminal, files, computer-use, tunnels, apps}. */
+    capabilities: string[];
+}
 declare class ComputersApi {
     private readonly ctx;
     constructor(ctx: HttpContext);
@@ -845,30 +858,31 @@ declare class ComputersApi {
     }>;
     exec(id: string, input: ExecCommandInput, opts?: CallOptions): Promise<ComputerExecResult>;
     /**
-     * tmux dispatcher. Each `op` returns a different shape — see the route
-     * docs for the per-op payload. Common case: `op: "run"` starts a window,
+     * Persistent-terminal dispatcher. Each `op` returns a different shape — see
+     * the route docs for the per-op payload. Common case: `op: "run"` runs a
+     * command to completion in a named window (state persists across runs),
      * `op: "capture"` reads its output.
      */
-    tmux(id: string, input: TmuxInput, opts?: CallOptions): Promise<Record<string, unknown>>;
-    /** Convenience over `tmux({ op: "list" })`. */
-    listTmuxWindows(id: string, opts?: CallOptions): Promise<TmuxWindow[]>;
+    terminal(id: string, input: TerminalInput, opts?: CallOptions): Promise<Record<string, unknown>>;
+    /** Convenience over `terminal({ op: "list" })`. */
+    listTerminals(id: string, opts?: CallOptions): Promise<TerminalWindow[]>;
     /**
-     * Unified SFTP dispatcher. Returns op-shaped payload. For streaming
-     * uploads/downloads use `sftpUpload` / `sftpDownload`.
+     * Unified FS dispatcher. Returns op-shaped payload. For streaming
+     * uploads/downloads use `fsUpload` / `fsDownload`.
      */
-    sftp(id: string, input: SftpInput, opts?: CallOptions): Promise<Record<string, unknown>>;
-    /** Convenience: `sftp({op:"list"})` returning the entries array directly. */
-    sftpList(id: string, path: string, opts?: CallOptions): Promise<SftpListResult>;
+    fs(id: string, input: FsInput, opts?: CallOptions): Promise<Record<string, unknown>>;
+    /** Convenience: `fs({op:"list"})` returning the entries array directly. */
+    fsList(id: string, path: string, opts?: CallOptions): Promise<FsListResult>;
     /**
      * Multipart upload of a file/folder member. Falls back to single-file mode
      * when `relative_path` is omitted.
      */
-    sftpUpload(id: string, input: SftpUploadInput, opts?: CallOptions): Promise<Record<string, unknown>>;
+    fsUpload(id: string, input: FsUploadInput, opts?: CallOptions): Promise<Record<string, unknown>>;
     /**
      * Stream a remote file (or a folder as `tar.gz`) as a `Blob`. The server
      * sends the real MIME type on `Content-Type`.
      */
-    sftpDownload(id: string, remotePath: string, opts?: CallOptions): Promise<Blob>;
+    fsDownload(id: string, remotePath: string, opts?: CallOptions): Promise<Blob>;
     listPorts(id: string, query?: {
         refresh?: boolean;
     }, opts?: CallOptions): Promise<{
@@ -918,30 +932,37 @@ declare class ComputersApi {
     syncUserEnv(id: string, username: string, opts?: CallOptions): Promise<Record<string, unknown>>;
     checkUserEnvSync(id: string, username: string, opts?: CallOptions): Promise<Record<string, unknown>>;
     /**
-     * List the workspaces a computer's LOCAL INFERENCE is shared into. The home
-     * workspace is never listed (it already has full access). The route returns
-     * the links under a `links` key (not a standard list envelope).
+     * Expose an actor-owned machine INTO a workspace (Layer 2) with a
+     * per-capability grant, so that workspace's members can use it. Requires
+     * machine-admin and membership of the target workspace. Rejects a duplicate
+     * exposure. (CLI verb: `computer add-exposure` — the bare `expose`/`unexpose`
+     * verbs are the tunnel port commands.)
      */
-    listWorkspaceLinks(id: string, opts?: CallOptions): Promise<ComputerWorkspaceLink[]>;
+    expose(id: string, input: ExposeComputerInput, opts?: CallOptions): Promise<ComputerExposure>;
     /**
-     * Share a computer's LOCAL INFERENCE into another workspace (never shell /
-     * files / tunnels). `workspaceId` is the target workspace's `ws_…`
-     * resourceId or slug. Requires EDIT on the computer's home workspace and
-     * membership of the target. Rejects the home workspace and duplicates.
+     * Replace the capability grant on an existing exposure. `workspaceId` is the
+     * exposed workspace's `ws_…` resourceId. Requires machine-admin.
+     * (CLI verb: `computer update-exposure`.)
      */
-    linkWorkspace(id: string, workspaceId: string, opts?: CallOptions): Promise<ComputerWorkspaceLink>;
+    updateExposure(id: string, workspaceId: string, capabilities: string[], opts?: CallOptions): Promise<ComputerExposure>;
     /**
-     * Stop sharing a computer's local inference into a workspace. `workspaceId`
-     * is the target workspace's `ws_…` resourceId. Idempotent — unlinking a
-     * non-existent link still succeeds.
+     * Stop exposing a machine into a workspace. `workspaceId` is the exposed
+     * workspace's `ws_…` resourceId. Allowed for machine-admin OR an admin of the
+     * exposed workspace. Idempotent. (CLI verb: `computer remove-exposure`.)
      */
-    unlinkWorkspace(id: string, workspaceId: string, opts?: CallOptions): Promise<{
-        unlinked: boolean;
+    unexpose(id: string, workspaceId: string, opts?: CallOptions): Promise<{
+        unexposed: boolean;
     }>;
+    /**
+     * Transfer an actor-owned machine to a new owner (self, or an org the caller
+     * administers). `owner` is the target profile's resourceId; existing workspace
+     * exposures are kept. Requires machine-admin. (CLI verb: `computer transfer`.)
+     */
+    transfer(id: string, owner: string, opts?: CallOptions): Promise<Computer>;
     /**
      * Redeem a one-time pair token for a long-lived computer identity. The
      * token itself is the auth — we swap the bearer for the token on this
-     * call only (same pattern as `triggers.fire`).
+     * call only (same pattern as `automations.fire`).
      *
      * Used by `idapt up --token` to bootstrap a daemon. The request body is
      * snake_case; the response is wrapped in the standard `{data:{…}}`
@@ -950,55 +971,6 @@ declare class ComputersApi {
     pair(input: PairComputerInput, opts?: CallOptions): Promise<PairComputerResult>;
 }
 
-/**
- * DatastoreApi — `/api/v1/datastore` (the KV data plane).
- *
- * Workspace-scoped key/value store. Entries live under a `namespace` (a bucket
- * you pick) and a `key`. Surfaced as `client.kv.*` on `IdaptClient`.
- */
-
-interface DatastoreListOptions extends CallOptions {
-    /** Only keys starting with this prefix. */
-    prefix?: string;
-    cursor?: string;
-    limit?: number;
-}
-interface DatastoreSetOptions extends CallOptions {
-    /** Seconds until the entry expires; omit for no expiry. */
-    ttlSeconds?: number;
-}
-declare class DatastoreApi {
-    private readonly ctx;
-    constructor(ctx: HttpContext);
-    /** List keys in a namespace (prefix-filterable). */
-    list(namespace: string, opts?: DatastoreListOptions): Promise<{
-        key: string;
-    }[]>;
-    /** Read a KV entry. */
-    get(namespace: string, key: string, opts?: CallOptions): Promise<DatastoreEntry>;
-    /** Upsert a KV entry (optionally with a TTL). */
-    set(namespace: string, key: string, value: unknown, opts?: DatastoreSetOptions): Promise<DatastoreEntry>;
-    /** Delete a KV entry (idempotent). */
-    delete(namespace: string, key: string, opts?: CallOptions): Promise<DeletedResponse>;
-    /** Atomically add `by` (default 1) to a numeric counter. */
-    increment(namespace: string, key: string, by?: number, opts?: CallOptions): Promise<{
-        key: string;
-        value: number;
-    }>;
-    /** List the namespaces in the workspace. */
-    listNamespaces(opts?: CallOptions): Promise<string[]>;
-    /** Read several keys at once. */
-    batchGet(namespace: string, keys: string[], opts?: CallOptions): Promise<DatastoreEntry[]>;
-    /** Upsert several entries at once. */
-    batchSet(namespace: string, entries: {
-        key: string;
-        value: unknown;
-        ttlSeconds?: number | null;
-    }[], opts?: CallOptions): Promise<number>;
-    /** Delete several keys at once; returns the count removed. */
-    batchDelete(namespace: string, keys: string[], opts?: CallOptions): Promise<number>;
-}
-
 /**
  * DocsApi — `GET /api/v1/docs`.
  *
@@ -1027,8 +999,8 @@ declare class DocsApi {
  * Use when:
  *   - The app has elevated `files:*` permission and wants to touch files
  *     outside its `.app-data` scope.
- *   - You need create-folder / move / run endpoints with a workspace_id /
- *     parent_id you choose yourself.
+ *   - You need create-folder / move endpoints with a workspace_id / parent_id
+ *     you choose yourself.
  *
  * For "save preferences in my data folder", prefer `client.data.set(name)`
  * — it handles name→id resolution and OCC for you.
@@ -1040,7 +1012,7 @@ declare class DocsApi {
 declare class FilesApi {
     private readonly ctx;
     constructor(ctx: HttpContext);
-    list(query?: ListFilesQuery, opts?: CallOptions): Promise<File$1[]>;
+    list(query?: ListFilesQuery, opts?: CallOptions): Promise<File[]>;
     /** Multipart upload a Blob/File. Returns the partial file record. */
     upload(input: UploadInput, opts?: CallOptions): Promise<FileUploadResult>;
     /**
@@ -1058,180 +1030,16 @@ declare class FilesApi {
      * Patch file metadata or content. Supports `expectedUpdatedAt` for
      * optimistic concurrency — pass it when you know the version you read.
      */
-    patch(id: string, input: PatchFileInput, opts?: WriteOptions): Promise<File$1>;
+    patch(id: string, input: PatchFileInput, opts?: WriteOptions): Promise<File>;
     delete(id: string, opts?: CallOptions): Promise<DeletedResponse>;
-    restore(id: string, opts?: CallOptions): Promise<File$1>;
+    restore(id: string, opts?: CallOptions): Promise<File>;
     permanentDelete(id: string, opts?: CallOptions): Promise<DeletedResponse>;
     /**
      * Idempotent create-or-get a folder. Returns the existing folder (with
      * `200`) or the new one (`201`) — consumers don't need to distinguish.
      */
-    createFolder(input: CreateFolderInput, opts?: CallOptions): Promise<File$1>;
-    move(id: string, parentId: string | null, opts?: CallOptions): Promise<File$1>;
-    /**
-     * Execute a code file (js/ts/py/sh) in a sandboxed Lambda. Returns the
-     * full `ExecutionRun` record (status, stdout/stderr, exit code, timestamps).
-     */
-    run(id: string, input?: RunFileInput, opts?: CallOptions): Promise<ExecutionRun>;
-}
-
-/**
- * FunctionsApi — `/api/v1/functions` (idapt Functions).
- *
- * Two tiers, mirroring the v1 `functions` contract:
- *
- *   - One-off runs — `run()` executes a script ONCE in the sandboxed Lambda
- *     (inline `script` XOR an existing Drive `file_id`) and returns the full
- *     `FunctionRun` row (the `transformExecutionRun` shape). Anything the script
- *     writes under `/tmp/output/` is copied into Drive and listed in
- *     `output_files`. Browse history via the `runs` sub-api
- *     (`runs.list` / `runs.get` / `runs.interrupt`).
- *   - Deployed functions — named, versioned, HTTP-invokable units:
- *     `create` → `deploy` (inline base64 bundle) → `invoke`. `promote` flips /
- *     rolls back the live deployment; `deployments` lists the version history.
- *
- * Surfaced as `client.functions.*`. Replaces the former code-execution
- * surface. Wire types are snake_case over the wire.
- */
-
-/**
- * `POST /functions/runs` body — run a script once. Pass EXACTLY one of inline
- * `script` (+ optional `language`) or an existing Drive `file_id`.
- */
-interface RunFunctionInput {
-    /** Inline source (≤ 1 MB). Mutually exclusive with `file_id`. */
-    script?: string;
-    /** An existing Drive file id to execute. Mutually exclusive with `script`. */
-    file_id?: string;
-    /** Language for inline `script` — drives the entrypoint extension. */
-    language?: "node" | "python" | "bash";
-    /** Hard wall-clock bound (1–300s). Default 30s server-side. */
-    timeout_seconds?: number;
-    /** Environment variables injected into the run. */
-    env?: Record<string, string>;
-    /** Workspace secret names to inject as env vars (resolved server-side). */
-    secrets?: string[];
-}
-/**
- * `GET /functions/runs` query params. Cursor-paginated (opaque `cursor`);
- * `backend` / `status` narrow the one-off run history.
- */
-interface ListFunctionRunsQuery {
-    limit?: number;
-    /** Opaque pagination cursor — echo `pagination.next_cursor`. */
-    cursor?: string;
-    backend?: ExecutionBackend;
-    status?: ExecutionRunStatus;
-    /** Scope the listing to a single workspace. */
-    workspace_id?: string;
-}
-/** `GET /functions` query params — list deployed functions. */
-interface ListFunctionsQuery {
-    limit?: number;
-}
-/** One declared permission grant on a function. */
-interface FunctionPermissionInput {
-    resource: string;
-    access: "read" | "write" | "admin";
-    scope?: string;
-}
-/** `POST /functions` body — create a deployed function (config only). */
-interface CreateFunctionInput {
-    name: string;
-    description?: string;
-    runtime?: "node" | "python";
-    entrypoint?: string;
-    auth_mode?: "bearer" | "secret" | "public";
-    timeout_seconds?: number;
-    permissions?: FunctionPermissionInput[];
-    /** Workspace secret names to expose to the function at runtime. */
-    secrets?: string[];
-    source_repo_id?: string;
-    branch?: string;
-    browser_app_id?: string;
-}
-/** `PATCH /functions/:id` body — update a function's config (all optional). */
-interface UpdateFunctionInput {
-    description?: string | null;
-    auth_mode?: "bearer" | "secret" | "public";
-    timeout_seconds?: number;
-    permissions?: FunctionPermissionInput[] | null;
-    secrets?: string[] | null;
-    branch?: string | null;
-}
-/** One file of a deploy bundle — base64-encoded content at a bundle path. */
-interface DeployFunctionFile {
-    path: string;
-    content_b64: string;
-}
-/**
- * `POST /functions/:id/deploy` body — an inline base64 bundle. Promotes the
- * new deployment to live immediately unless `promote: false`.
- */
-interface DeployFunctionInput {
-    files: DeployFunctionFile[];
-    entrypoint?: string;
-    runtime?: "node" | "python";
-    /** Promote the new deployment to live immediately (default true). */
-    promote?: boolean;
-}
-/** `POST /functions/:id/invoke` body — the request handed to the handler. */
-interface InvokeFunctionInput {
-    method?: string;
-    path?: string;
-    query?: Record<string, string>;
-    headers?: Record<string, string>;
-    body?: unknown;
-}
-/** `client.functions.runs` — browse + interrupt one-off runs. */
-declare class FunctionRunsApi {
-    private readonly ctx;
-    constructor(ctx: HttpContext);
-    /** List one-off function runs (cursor-paginated). */
-    list(query?: ListFunctionRunsQuery, opts?: CallOptions): Promise<FunctionRun[]>;
-    /** Get a single one-off run by id. */
-    get(id: string, opts?: CallOptions): Promise<FunctionRun>;
-    /**
-     * Interrupt a running run. Only computer-backed runs can be interrupted;
-     * Lambda-backed runs return 409 (`ConflictError`).
-     */
-    interrupt(id: string, opts?: CallOptions): Promise<FunctionRun>;
-}
-declare class FunctionsApi {
-    private readonly ctx;
-    /** One-off run history — list / get / interrupt. */
-    readonly runs: FunctionRunsApi;
-    constructor(ctx: HttpContext);
-    /**
-     * Run a script ONCE in the sandbox. Pass EITHER inline `script` (+ optional
-     * `language`) OR an existing Drive `file_id`. Returns the full `FunctionRun`
-     * row — `id`, `status`, `stdout`, `stderr`, `exit_code`, the run timestamps,
-     * and any `output_files` the script wrote under `/tmp/output/`.
-     */
-    run(input: RunFunctionInput, opts?: CallOptions): Promise<FunctionRun>;
-    /** List deployed functions in the workspace. */
-    list(query?: ListFunctionsQuery, opts?: CallOptions): Promise<FunctionResource[]>;
-    /** Get a deployed function by its resourceId. */
-    get(id: string, opts?: CallOptions): Promise<FunctionResource>;
-    /** Create a deployed function (config only — `deploy` adds a bundle). */
-    create(input: CreateFunctionInput, opts?: CallOptions): Promise<FunctionResource>;
-    /** Update a deployed function's config. */
-    update(id: string, patch: UpdateFunctionInput, opts?: CallOptions): Promise<FunctionResource>;
-    /** Delete a deployed function + all its deployments. */
-    delete(id: string, opts?: CallOptions): Promise<DeletedResponse>;
-    /**
-     * Deploy a new bundle (inline base64 files). Promotes the new deployment to
-     * live immediately unless `promote: false`. Returns the new deployment.
-     */
-    deploy(id: string, input: DeployFunctionInput, opts?: CallOptions): Promise<FunctionDeployment>;
-    /** List a function's deployments (newest-first). */
-    deployments(id: string, opts?: CallOptions): Promise<FunctionDeployment[]>;
-    /** Promote (or roll back to) a deployment — flips the active one. */
-    promote(id: string, input: {
-        deployment_id: string;
-    }, opts?: CallOptions): Promise<FunctionResource>;
-    /** Invoke a deployed function synchronously; returns its response. */
-    invoke(id: string, input?: InvokeFunctionInput, opts?: CallOptions): Promise<FunctionInvokeResult>;
+    createFolder(input: CreateFolderInput, opts?: CallOptions): Promise<File>;
+    move(id: string, parentId: string | null, opts?: CallOptions): Promise<File>;
 }
 
 /**
@@ -1242,7 +1050,7 @@ declare class FunctionsApi {
  * a JSON envelope (`{ data: { content, format } }`).
  */
 
-/** Payload of `GET /v1/skill` — the SKILL.md body plus its format tag. */
+/** Payload of `GET /v1/guide` — the API guide body plus its format tag. */
 interface GuideContent {
     /** The SKILL.md document body. */
     content: string;
@@ -1260,36 +1068,19 @@ declare class GuideApi {
 }
 
 /**
- * ImagesApi — `/api/v1/images/*`.
+ * ImagesApi — image-model DISCOVERY (`GET /api/v1/images/models`).
  *
- * Two endpoints:
- *   - `GET /images/models`        → catalogue of image models. Each item is
- *                                   `{id, display_name, provider, modality}`
- *                                   plus image-specific fields.
- *   - `POST /images/generations`  → generate an image, returns a file ref.
- *                                   Responds HTTP 201 (resource created).
- *
- * `generate()` writes the output into the caller's workspace (required) at
- * an optional path; the response includes a `file_id` you can turn around
- * and pass to `files.get(id)` for the bytes, or use `url` for a signed
- * download link.
+ * Image GENERATION moved to the unified inference surface — use
+ * `client.inference.image({ prompt, workspace_id, … })`. This namespace now
+ * exposes only the model catalog (`image models`); model discovery stays
+ * per-modality by design.
  */
 
-interface GenerateImageInput {
-    prompt: string;
-    workspace_id: string;
-    model?: string;
-    output_path?: string;
-    reference_image_ids?: string[];
-    reference_image_paths?: string[];
-    aspect_ratio?: string;
-}
 declare class ImagesApi {
     private readonly ctx;
     constructor(ctx: HttpContext);
+    /** List the available image-generation models. */
     listModels(opts?: CallOptions): Promise<ImageModel[]>;
-    /** Generate an image. Responds HTTP 201 with the written file ref under `data`. */
-    generate(input: GenerateImageInput, opts?: CallOptions): Promise<ImageGenerationResult>;
 }
 
 /**
@@ -1505,6 +1296,10 @@ interface ProviderEndpointModelMappingInput {
     model_id: string;
     /** Upstream provider model id. Defaults server-side to `model_id`. */
     api_model_id: string;
+    /** Explicit serving context window for this endpoint/model pair. */
+    context_length?: number;
+    /** Explicit maximum completion tokens for this endpoint/model pair. */
+    max_completion_tokens?: number;
 }
 interface CreateProviderEndpointInput {
     kind?: ProviderEndpointKind;
@@ -1831,51 +1626,6 @@ declare class SharingApi {
     listSharedWithMe(query?: ListSharedWithMeQuery, opts?: CallOptions): Promise<SharedWithMeItem[]>;
 }
 
-/**
- * StoreApi — `/api/v1/store/*`.
- *
- * Hub / store surface for browsing and installing community items: skills,
- * agent templates, computer images, workspace templates.
- *
- * Both verbs are feature-gated by FF42 (Hub) server-side. With the flag
- * OFF the routes 404; the SDK relays that as a `NotFoundError`. The CLI's
- * `idapt store` tree gates on the same flag client-side, so visibility of
- * the verbs in `idapt help` matches what the server actually accepts.
- */
-
-interface SearchStoreQuery {
-    q?: string;
-    type?: "all" | StoreItemType;
-    sort?: "popular" | "recent" | "updated";
-    limit?: number;
-    /** Opaque pagination cursor — echo `pagination.next_cursor`. */
-    cursor?: string;
-}
-interface InstallStoreItemInput {
-    /** Destination workspace resourceId. */
-    workspace_id: string;
-    folder_name?: string;
-    /** Parent file resourceId to land the installed folder under. */
-    target_parent_id?: string | null;
-}
-declare class StoreApi {
-    private readonly ctx;
-    constructor(ctx: HttpContext);
-    /**
-     * Search the hub. Open envelope — items are heterogeneous (skills carry
-     * version/license, agents carry icons/prompts, computer templates carry
-     * sizing) so we surface them as `StoreItem` with an open index signature.
-     */
-    search(query?: SearchStoreQuery, opts?: CallOptions): Promise<StoreItem[]>;
-    /**
-     * Install a hub item into one of the caller's workspaces. Returns whatever
-     * the per-template installer produces (folder ids, agent ids, ...) —
-     * `StoreInstallResult` carries the common fields and leaves the rest
-     * open.
-     */
-    install(resourceId: string, input: InstallStoreItemInput, opts?: CallOptions): Promise<StoreInstallResult>;
-}
-
 /**
  * SubscriptionApi — `/api/v1/subscription`.
  *
@@ -1898,149 +1648,6 @@ declare class SubscriptionApi {
     get(opts?: CallOptions): Promise<Subscription>;
 }
 
-/**
- * TablesApi — `/api/v1/tables` (Idapt Tables, structured documents).
- *
- * Collections hold a field schema; records are JSON documents queried via the
- * safe DSL. Surfaced as `client.tables.*` on `IdaptClient`.
- */
-
-interface TableField {
-    key: string;
-    name: string;
-    type: string;
-    options?: unknown[];
-    required?: boolean;
-    default?: unknown;
-}
-interface CollectionSchemaInput {
-    fields: TableField[];
-}
-interface CreateCollectionInput {
-    name: string;
-    description?: string | null;
-    icon?: string | null;
-    schema?: CollectionSchemaInput;
-    workspace_id?: string;
-}
-interface UpdateCollectionInput {
-    name?: string;
-    description?: string | null;
-    icon?: string | null;
-    schema?: CollectionSchemaInput;
-}
-interface TableQuery {
-    where?: unknown;
-    sort?: {
-        field: string;
-        dir?: "asc" | "desc";
-    }[];
-    limit?: number;
-    cursor?: string;
-}
-declare class TablesApi {
-    private readonly ctx;
-    constructor(ctx: HttpContext);
-    list(opts?: CallOptions & {
-        workspaceId?: string;
-        cursor?: string;
-        limit?: number;
-    }): Promise<TableCollection[]>;
-    get(id: string, opts?: CallOptions): Promise<TableCollection>;
-    create(input: CreateCollectionInput, opts?: CallOptions): Promise<TableCollection>;
-    update(id: string, input: UpdateCollectionInput, opts?: CallOptions): Promise<TableCollection>;
-    delete(id: string, opts?: CallOptions): Promise<DeletedResponse>;
-    /** Query a collection's records with the filter/sort/paginate DSL. */
-    query(id: string, query?: TableQuery, opts?: CallOptions): Promise<TableRecord[]>;
-    createRecord(id: string, values: Record<string, unknown>, opts?: CallOptions): Promise<TableRecord>;
-    getRecord(id: string, recordId: string, opts?: CallOptions): Promise<TableRecord>;
-    updateRecord(id: string, recordId: string, values: Record<string, unknown>, opts?: CallOptions): Promise<TableRecord>;
-    deleteRecord(id: string, recordId: string, opts?: CallOptions): Promise<DeletedResponse>;
-    /** Export a collection's records as a CSV string (header row = field keys). */
-    exportCsv(id: string, opts?: CallOptions): Promise<string>;
-    /** Import records into a collection from a CSV string. Returns the count. */
-    importCsv(id: string, csv: string, opts?: CallOptions): Promise<{
-        imported: number;
-    }>;
-}
-
-/**
- * TriggersApi — `/api/v1/triggers`.
- *
- * Triggers fire actions (run code, run chat) on events (webhook, schedule,
- * manual). The `fire` endpoint is unauthenticated — it validates the
- * per-trigger webhook secret instead of the bearer token. This SDK handles
- * both modes: regular calls use `this.ctx.key`; `fire` can be called with
- * an explicit secret override.
- */
-
-interface FireTriggerInput {
-    /**
-     * Webhook secret for this trigger. Overrides the client's `ap_` key.
-     * Required when calling `fire` outside the creating user's session.
-     */
-    secret: string;
-    /** Optional context overrides forwarded to the action. */
-    body?: Record<string, unknown>;
-}
-interface ListTriggerRunsQuery {
-    limit?: number;
-    /** Opaque pagination cursor — echo `pagination.next_cursor`. */
-    cursor?: string;
-}
-interface ListTriggersQuery {
-    workspace_id?: string;
-    include_archived?: boolean;
-    archived_only?: boolean;
-}
-interface BulkTriggerCostStatsQuery {
-    workspace_id?: string;
-}
-declare class TriggersApi {
-    private readonly ctx;
-    constructor(ctx: HttpContext);
-    list(query?: ListTriggersQuery, opts?: CallOptions): Promise<Trigger[]>;
-    /**
-     * Create a trigger. `workspace_id` is passed in the request BODY (alongside
-     * the flat trigger definition) — it is not a query param. The request
-     * body is flat: every scheduling field (`cron_expression`, …) and every
-     * action field (`agent_id`, `prompt_template`, `file_id`, …) sits at the
-     * top level — there are no nested `trigger_config` / `action_config`
-     * objects any more.
-     *
-     * For a `webhook` trigger the response additionally carries a one-time
-     * plaintext `secret` (use `TriggerWithSecret`); other trigger types
-     * resolve to a plain `Trigger`.
-     */
-    create(workspaceId: string, input: CreateTriggerInput, opts?: CallOptions): Promise<TriggerWithSecret | Trigger>;
-    get(id: string, opts?: CallOptions): Promise<Trigger>;
-    update(id: string, input: UpdateTriggerInput, opts?: CallOptions): Promise<Trigger>;
-    delete(id: string, opts?: CallOptions): Promise<DeletedResponse>;
-    archive(id: string, opts?: CallOptions): Promise<Trigger>;
-    unarchive(id: string, opts?: CallOptions): Promise<Trigger>;
-    /**
-     * Fire a trigger via its webhook secret. This endpoint does NOT use the
-     * client's `ap_` key — the bearer is the trigger's secret — so we build a
-     * one-off HttpContext for it rather than mutating the shared one.
-     *
-     * Responds HTTP 202. The response identifies the fired trigger via `id`
-     * only.
-     */
-    fire(id: string, input: FireTriggerInput, opts?: CallOptions): Promise<{
-        id: string;
-    }>;
-    /**
-     * Rotate the webhook secret. Returns the trigger with a fresh one-time
-     * plaintext `secret` populated (`TriggerWithSecret`). The old secret
-     * immediately stops working.
-     */
-    rotateSecret(id: string, opts?: CallOptions): Promise<TriggerWithSecret>;
-    /** Recent fires + their success/error outcome. */
-    listRuns(id: string, query?: ListTriggerRunsQuery, opts?: CallOptions): Promise<TriggerRun[]>;
-    getCostStats(id: string, opts?: CallOptions): Promise<TriggerCostStats>;
-    getCostStatsMap(query?: BulkTriggerCostStatsQuery, opts?: CallOptions): Promise<Record<string, TriggerCostStats>>;
-}
-
 /**
  * UserApi — identity + usage.
  *
@@ -2215,18 +1822,12 @@ declare class IdaptClient {
     readonly chats: ChatsApi;
     /** Workspaces CRUD + members + invitations + fork. */
     readonly workspaces: WorkspacesApi;
-    /** Triggers CRUD + fire, rotate-secret, runs. */
-    readonly triggers: TriggersApi;
-    /** Computers CRUD + lifecycle + exec/tmux/sftp + ports + users + env + pair. */
+    /** Automations CRUD + fire, rotate-secret, runs. */
+    readonly automations: AutomationsApi;
+    /** Computers CRUD + lifecycle + exec/terminal/fs + ports + users + env + pair. */
     readonly computers: ComputersApi;
     /** Workspace secrets CRUD. */
     readonly secrets: SecretsApi;
-    /** Datastore (KV) — workspace key/value store for app + agent state. */
-    readonly kv: DatastoreApi;
-    /** Blobs — workspace object store for large / binary data. */
-    readonly blobs: BlobsApi;
-    /** Idapt Tables — structured document collections + records + query. */
-    readonly tables: TablesApi;
     /** Realtime — broadcast + presence + live SSE subscribe over channels. */
     readonly realtime: RealtimeApi;
     /** User-API-key CRUD (`uk_` keys). Header-auth (API-key transport) is rejected. */
@@ -2239,8 +1840,6 @@ declare class IdaptClient {
     readonly subscription: SubscriptionApi;
     /** Resource shares + the inverse `/shared-with-me` list. */
     readonly sharing: SharingApi;
-    /** Hub / store: search community items + install into a workspace. */
-    readonly store: StoreApi;
     /** LLM model catalogue. */
     readonly models: ModelsApi;
     /** User-owned BYOK and daemon-local model provider endpoints. */
@@ -2249,8 +1848,6 @@ declare class IdaptClient {
     readonly images: ImagesApi;
     /** Text-to-speech + transcription. */
     readonly audio: AudioApi;
-    /** Run + invoke serverless functions. */
-    readonly functions: FunctionsApi;
     /** Full-text search across user content. */
     readonly search: SearchApi;
     /** External web search. */
@@ -2327,4 +1924,4 @@ declare class IdaptClient {
     private navigate;
 }
 
-export { type ListFilesQuery as $, type AddMemberInput as A, type BlobMeta as B, COMMAND_BINDINGS as C, DatastoreApi as D, type DeleteInvitationResult as E, type DeletedResult as F, type DeployFunctionFile as G, type DeployFunctionInput as H, IdaptClient as I, DocsApi as J, type ExecCommandInput as K, type ExecuteCommandOptions as L, FilesApi as M, type FireTriggerInput as N, type FunctionPermissionInput as O, FunctionsApi as P, type GenerateImageInput as Q, GuideApi as R, type GuideContent as S, type IdaptClientDeps as T, ImagesApi as U, type InstallStoreItemInput as V, type InvokeFunctionInput as W, type ListAgentsQuery as X, type ListApiKeysQuery as Y, type ListChatsQuery as Z, type ListComputersQuery as _, AgentsApi as a, type UpdateProviderEndpointInput as a$, type ListFunctionRunsQuery as a0, type ListFunctionsQuery as a1, type ListMessagesQuery as a2, type ListNotificationsQuery as a3, type ListResult as a4, type ListRunsQuery as a5, type ListSharedWithMeQuery as a6, type ListSharesQuery as a7, type ListTriggerRunsQuery as a8, type ListUsageHistoryQuery as a9, type SendNotificationResult as aA, SettingsApi as aB, type SftpInput as aC, type SftpListResult as aD, type SftpOp as aE, type SftpUploadInput as aF, SharingApi as aG, type SpeakInput as aH, type SseEvent as aI, StoreApi as aJ, type SubscribeOptions as aK, SubscriptionApi as aL, type TableQuery as aM, TablesApi as aN, type TmuxInput as aO, type TmuxOp as aP, type TranscribeInput as aQ, TriggersApi as aR, type UpdateAgentInput as aS, type UpdateApiKeyInput as aT, type UpdateChatInput as aU, type UpdateCollectionInput as aV, type UpdateComputerInput as aW, type UpdateComputerUserInput as aX, type UpdateFunctionInput as aY, type UpdateMemberInput as aZ, type UpdateNotificationInput as a_, ModelsApi as aa, type NotificationAudience as ab, type NotificationPreferenceUpdate as ac, NotificationsApi as ad, type PairComputerInput as ae, type PairComputerResult as af, type PatchFileInput as ag, type PatchPortInput as ah, type PresenceEntry as ai, type PresenceHeartbeatOptions as aj, type ProviderEndpointModelMappingInput as ak, ProviderEndpointsApi as al, RealtimeApi as am, type RealtimeEvent as an, type RemoveShareInput as ao, type RepromptMessageInput as ap, type RotateApiKeyInput as aq, type RotateApiKeyResult as ar, type RunFileInput as as, type RunFunctionInput as at, SearchApi as au, type SearchInput as av, type SearchStoreQuery as aw, SecretsApi as ax, type SendMessageInput as ay, type SendNotificationInput as az, ApiKeysApi as b, type UpdateSecretInput as b0, type UpdateSettingsInput as b1, type UpdateShareInput as b2, type UpdateWorkspaceInput as b3, type UploadInput as b4, UserApi as b5, type V1CommandName as b6, WebSearchApi as b7, type WebSearchInput as b8, WorkspacesApi as b9, type WritableMemberRole as ba, awaitOperation as bb, executeCommand as bc, getFileBlob as bd, getFileText as be, listFiles as bf, AudioApi as c, BlobsApi as d, type BlobsListOptions as e, type ChannelHandle as f, ChatsApi as g, type CommandBinding as h, ComputersApi as i, type CreateAgentInput as j, type CreateApiKeyInput as k, type CreateChatInput as l, type CreateCollectionInput as m, type CreateComputerInput as n, type CreateComputerUserInput as o, type CreateFolderInput as p, type CreateFunctionInput as q, type CreateInvitationInput as r, type CreateInvitationResult as s, type CreateProviderEndpointInput as t, type CreateSecretInput as u, type CreateShareInput as v, type CreateUserEnvVarInput as w, type CreateWorkspaceInput as x, type DatastoreListOptions as y, type DatastoreSetOptions as z };
+export { ModelsApi as $, type AddMemberInput as A, type FsListResult as B, COMMAND_BINDINGS as C, type DeleteInvitationResult as D, type ExecuteCommandOptions as E, FilesApi as F, type FsOp as G, type FsUploadInput as H, IdaptClient as I, GuideApi as J, type GuideContent as K, type IdaptClientDeps as L, ImagesApi as M, type ListAgentsQuery as N, type ListApiKeysQuery as O, type ListAutomationRunsQuery as P, type ListChatsQuery as Q, type ListComputersQuery as R, type ListFilesQuery as S, type ListMessagesQuery as T, type ListNotificationsQuery as U, type ListResult as V, type ListRunsQuery as W, type ListSharedWithMeQuery as X, type ListSharesQuery as Y, type ListUsageHistoryQuery as Z, type ListVoicesInput as _, AgentsApi as a, type NotificationAudience as a0, type NotificationPreferenceUpdate as a1, NotificationsApi as a2, type PairComputerInput as a3, type PairComputerResult as a4, type PatchFileInput as a5, type PatchPortInput as a6, type PresenceEntry as a7, type PresenceHeartbeatOptions as a8, type ProviderEndpointModelMappingInput as a9, type UpdateNotificationInput as aA, type UpdateProviderEndpointInput as aB, type UpdateSecretInput as aC, type UpdateSettingsInput as aD, type UpdateShareInput as aE, type UpdateWorkspaceInput as aF, type UploadInput as aG, UserApi as aH, type V1CommandName as aI, WebSearchApi as aJ, type WebSearchInput as aK, WorkspacesApi as aL, type WritableMemberRole as aM, awaitOperation as aN, executeCommand as aO, getFileBlob as aP, getFileText as aQ, listFiles as aR, ProviderEndpointsApi as aa, RealtimeApi as ab, type RealtimeEvent as ac, type RemoveShareInput as ad, type RepromptMessageInput as ae, type RotateApiKeyInput as af, type RotateApiKeyResult as ag, SearchApi as ah, type SearchInput as ai, SecretsApi as aj, type SendMessageInput as ak, type SendNotificationInput as al, type SendNotificationResult as am, SettingsApi as an, SharingApi as ao, type SseEvent as ap, type SubscribeOptions as aq, SubscriptionApi as ar, type TerminalInput as as, type TerminalOp as at, type UpdateAgentInput as au, type UpdateApiKeyInput as av, type UpdateChatInput as aw, type UpdateComputerInput as ax, type UpdateComputerUserInput as ay, type UpdateMemberInput as az, ApiKeysApi as b, AudioApi as c, AutomationsApi as d, type ChannelHandle as e, ChatsApi as f, type CommandBinding as g, ComputersApi as h, type CreateAgentInput as i, type CreateApiKeyInput as j, type CreateChatInput as k, type CreateComputerInput as l, type CreateComputerUserInput as m, type CreateFolderInput as n, type CreateInvitationInput as o, type CreateInvitationResult as p, type CreateProviderEndpointInput as q, type CreateSecretInput as r, type CreateShareInput as s, type CreateUserEnvVarInput as t, type CreateWorkspaceInput as u, type DeletedResult as v, DocsApi as w, type ExecCommandInput as x, type FireAutomationInput as y, type FsInput as z };