@miosa/sdk 0.3.0 → 1.1.0

package/dist/index.d.ts

@@ -214,6 +214,9 @@ interface ApiKeyCreateParams {
     expires_at?: string;
     expiresAt?: string;
     idempotencyKey?: string;
+    /** Scope this key to a single workspace. Omit for a tenant-wide key. */
+    workspaceId?: string;
+    workspace_id?: string;
     [key: string]: unknown;
 }
 declare class ApiKeys {
@@ -745,6 +748,12 @@ interface ComputerCreateParams {
     size?: ComputerSize;
     visibility?: ComputerVisibility;
     metadata?: Record<string, string>;
+    externalWorkspaceId?: string;
+    external_workspace_id?: string;
+    externalUserId?: string;
+    external_user_id?: string;
+    externalProjectId?: string;
+    external_project_id?: string;
 }
 interface ComputerUpdateParams {
     name?: string;
@@ -1349,6 +1358,507 @@ declare class Desktop$1 {
     launch(appName: string): Promise<DesktopActionResult>;
 }
 
+/**
+ * Egress audit log — paginated query + live tail.
+ *
+ * Backed by:
+ *   GET    /api/v1/egress/audit
+ *   GET    /api/v1/egress/audit/:id
+ *
+ * `client.audit.tail()` long-polls the REST endpoint and yields new
+ * events as they arrive. The sandbox-scoped variant
+ * (`sandbox.audit.tail()`) upgrades to a live SSE connection backed by
+ * `GET /sandboxes/:id/audit/stream` so the tail latency is
+ * sub-second.
+ */
+
+interface EgressAuditEvent {
+    id: string;
+    action?: string;
+    effect?: string;
+    host?: string;
+    method?: string;
+    path?: string;
+    status_code?: number;
+    actor_id?: string;
+    resource_id?: string;
+    resource_type?: string;
+    policy_id?: string;
+    rule_id?: string;
+    external_user_id?: string;
+    external_workspace_id?: string;
+    metadata?: Record<string, unknown>;
+    inserted_at?: string;
+    timestamp?: string;
+    [key: string]: unknown;
+}
+interface AuditListParams {
+    resourceId?: string;
+    resource_id?: string;
+    resourceType?: string;
+    resource_type?: string;
+    host?: string;
+    action?: string;
+    since?: string;
+    until?: string;
+    limit?: number;
+    cursor?: string;
+    externalUserId?: string;
+    external_user_id?: string;
+    externalWorkspaceId?: string;
+    external_workspace_id?: string;
+}
+interface AuditTailParams extends AuditListParams {
+    pollIntervalMs?: number;
+}
+declare class EgressAudit {
+    protected readonly http: HttpClient;
+    constructor(http: HttpClient);
+    /** List audit events with optional filters. */
+    list(params?: AuditListParams): Promise<EgressAuditEvent[]>;
+    /** Get a single audit event by id. */
+    get(id: string): Promise<EgressAuditEvent>;
+    /**
+     * Long-poll the audit endpoint and yield new events as they appear.
+     *
+     * Tenant-wide `client.audit.tail()` is REST-based long polling. A
+     * live WebSocket / SSE tail is only available for the sandbox-scoped
+     * variant — see {@link SandboxAudit.tail}.
+     */
+    tail(params?: AuditTailParams): AsyncIterableIterator<EgressAuditEvent>;
+}
+/**
+ * Sandbox-bound view of {@link EgressAudit}. `list()` pre-scopes
+ * `resource_id` + `resource_type="sandbox"`. `tail()` upgrades to the
+ * per-sandbox SSE stream for sub-second tail latency.
+ */
+declare class SandboxAudit {
+    protected readonly http: HttpClient;
+    protected readonly resourceId: string;
+    protected readonly resourceType: string;
+    private readonly delegate;
+    constructor(http: HttpClient, resourceId: string);
+    list(params?: AuditListParams): Promise<EgressAuditEvent[]>;
+    get(id: string): Promise<EgressAuditEvent>;
+    /** SSE tail of the sandbox-scoped audit stream. */
+    tail(params?: AuditTailParams): AsyncIterableIterator<EgressAuditEvent>;
+}
+/** Computer-bound audit — same surface, `resource_type="computer"`. */
+declare class ComputerAudit extends SandboxAudit {
+    protected readonly resourceType: string;
+}
+
+/**
+ * Egress network — policies, allowlist, suggestions.
+ *
+ * Backed by:
+ *   GET    /api/v1/egress/policies
+ *   POST   /api/v1/egress/policies
+ *   PATCH  /api/v1/egress/policies/:id   (or no id for tenant default)
+ *
+ *   GET    /api/v1/egress/allowlist
+ *   POST   /api/v1/egress/allowlist
+ *   DELETE /api/v1/egress/allowlist/:id
+ *
+ *   GET    /api/v1/egress/audit/suggestions
+ */
+
+type EgressPolicyMode = "enforce" | "audit_only";
+type EgressRuleEffect = "allow" | "deny";
+interface EgressAllowlistRule {
+    id: string;
+    host: string;
+    effect: EgressRuleEffect | string;
+    methods?: string[];
+    path_glob?: string | null;
+    policy_id?: string | null;
+    resource_id?: string | null;
+    resource_type?: string | null;
+    note?: string | null;
+    created_at?: string;
+    [key: string]: unknown;
+}
+interface EgressPolicyData {
+    id: string;
+    name?: string;
+    mode: EgressPolicyMode | string;
+    default_effect: EgressRuleEffect | string;
+    description?: string | null;
+    resource_id?: string | null;
+    resource_type?: string | null;
+    rules?: EgressAllowlistRule[];
+    created_at?: string;
+    updated_at?: string;
+    [key: string]: unknown;
+}
+interface EgressSuggestion {
+    host: string;
+    methods?: string[];
+    path_glob?: string | null;
+    count?: number;
+    first_seen?: string;
+    last_seen?: string;
+    resource_id?: string | null;
+    [key: string]: unknown;
+}
+interface AllowParams {
+    methods?: string[];
+    pathGlob?: string;
+    path_glob?: string;
+    policyId?: string;
+    policy_id?: string;
+    resourceId?: string;
+    resource_id?: string;
+    resourceType?: string;
+    resource_type?: string;
+    note?: string;
+}
+interface PolicyCreateParams {
+    name: string;
+    mode?: EgressPolicyMode | string;
+    defaultEffect?: EgressRuleEffect | string;
+    default_effect?: EgressRuleEffect | string;
+    resourceId?: string;
+    resource_id?: string;
+    resourceType?: string;
+    resource_type?: string;
+    description?: string;
+}
+interface PolicyUpdateParams {
+    mode?: EgressPolicyMode | string;
+    defaultEffect?: EgressRuleEffect | string;
+    default_effect?: EgressRuleEffect | string;
+    name?: string;
+    description?: string;
+}
+interface ModeParams {
+    policyId?: string;
+    policy_id?: string;
+    resourceId?: string;
+    resource_id?: string;
+    resourceType?: string;
+    resource_type?: string;
+}
+interface SuggestionsParams {
+    resourceId?: string;
+    resource_id?: string;
+    resourceType?: string;
+    resource_type?: string;
+    since?: string;
+}
+interface PolicyListParams {
+    resourceId?: string;
+    resource_id?: string;
+    resourceType?: string;
+    resource_type?: string;
+}
+interface RulesListParams {
+    policyId?: string;
+    policy_id?: string;
+    resourceId?: string;
+    resource_id?: string;
+    resourceType?: string;
+    resource_type?: string;
+}
+declare class EgressNetwork {
+    protected readonly http: HttpClient;
+    constructor(http: HttpClient);
+    /** Add an `allow` rule for `host` to the allowlist. */
+    allow(host: string, params?: AllowParams): Promise<EgressAllowlistRule>;
+    /** Add a `deny` rule for `host` to the allowlist. */
+    deny(host: string, params?: AllowParams): Promise<EgressAllowlistRule>;
+    /** List allowlist rules. */
+    rules(params?: RulesListParams): Promise<EgressAllowlistRule[]>;
+    /** Delete an allowlist rule by id. */
+    removeRule(ruleId: string): Promise<void>;
+    /** List egress policies. */
+    policies(params?: PolicyListParams): Promise<EgressPolicyData[]>;
+    /** Create an egress policy. */
+    createPolicy(params: PolicyCreateParams): Promise<EgressPolicyData>;
+    /** Update an egress policy by id. */
+    updatePolicy(policyId: string, params: PolicyUpdateParams): Promise<EgressPolicyData>;
+    /** Set the policy to `mode="enforce"` — denied egress is blocked. */
+    lockdown(params?: ModeParams): Promise<EgressPolicyData>;
+    /** Set the policy to `mode="audit_only"` — log but do not block. */
+    observe(params?: ModeParams): Promise<EgressPolicyData>;
+    private setMode;
+    /** AI-generated allowlist suggestions from recent denied egress. */
+    suggestions(params?: SuggestionsParams): Promise<EgressSuggestion[]>;
+}
+/**
+ * Sandbox-bound view of {@link EgressNetwork}. Pre-scopes
+ * `resource_id` + `resource_type="sandbox"` on every call.
+ */
+declare class SandboxNetwork {
+    protected readonly resourceId: string;
+    protected readonly resourceType: string;
+    private readonly delegate;
+    constructor(http: HttpClient, resourceId: string);
+    private resolvedResourceId;
+    private resolvedResourceType;
+    allow(host: string, params?: AllowParams): Promise<EgressAllowlistRule>;
+    deny(host: string, params?: AllowParams): Promise<EgressAllowlistRule>;
+    rules(params?: RulesListParams): Promise<EgressAllowlistRule[]>;
+    removeRule(ruleId: string): Promise<void>;
+    lockdown(params?: {
+        policyId?: string;
+    }): Promise<EgressPolicyData>;
+    observe(params?: {
+        policyId?: string;
+    }): Promise<EgressPolicyData>;
+    suggestions(params?: {
+        since?: string;
+    }): Promise<EgressSuggestion[]>;
+    policies(): Promise<EgressPolicyData[]>;
+}
+/** Computer-bound network — same surface, `resource_type="computer"`. */
+declare class ComputerNetwork extends SandboxNetwork {
+    protected readonly resourceType: string;
+}
+
+/**
+ * Egress secrets — encrypted API key + OAuth credential vault.
+ *
+ * Backed by:
+ *   POST   /api/v1/egress/secrets
+ *   GET    /api/v1/egress/secrets
+ *   GET    /api/v1/egress/secrets/:id
+ *   PATCH  /api/v1/egress/secrets/:id     (rotate)
+ *   DELETE /api/v1/egress/secrets/:id
+ *
+ *   POST   /api/v1/egress/bindings
+ *   GET    /api/v1/egress/bindings
+ *   DELETE /api/v1/egress/bindings/:id
+ *
+ *   GET    /api/v1/egress/oauth/providers
+ *   POST   /api/v1/egress/oauth/start
+ *   GET    /api/v1/egress/oauth/status?state=...
+ */
+
+type EgressSecretType = "api_key" | "oauth_token" | "bearer" | "basic" | "generic";
+type EgressSecretScope = "user" | "workspace" | "tenant" | "external_user" | "external_workspace";
+interface EgressSecretData {
+    id: string;
+    name?: string;
+    type?: EgressSecretType | string;
+    scope?: EgressSecretScope | string;
+    workspace_id?: string | null;
+    owner_user_id?: string | null;
+    external_user_id?: string | null;
+    external_workspace_id?: string | null;
+    resource_id?: string | null;
+    resource_type?: string | null;
+    masked_value?: string | null;
+    expires_at?: string | null;
+    metadata?: Record<string, unknown>;
+    created_at?: string;
+    updated_at?: string;
+    [key: string]: unknown;
+}
+interface EgressBindingData {
+    id: string;
+    secret_id: string;
+    resource_id: string;
+    resource_type: string;
+    expose_as_env: string;
+    created_at?: string;
+    [key: string]: unknown;
+}
+interface OauthProvider {
+    name: string;
+    display_name?: string;
+    scopes?: string[];
+    [key: string]: unknown;
+}
+interface SecretSetParams {
+    name: string;
+    value: string;
+    type?: EgressSecretType | string;
+    scope?: EgressSecretScope | string;
+    exposeAsEnv?: string;
+    expose_as_env?: string;
+    workspaceId?: string;
+    workspace_id?: string;
+    ownerUserId?: string;
+    owner_user_id?: string;
+    externalUserId?: string;
+    external_user_id?: string;
+    externalWorkspaceId?: string;
+    external_workspace_id?: string;
+    resourceId?: string;
+    resource_id?: string;
+    resourceType?: string;
+    resource_type?: string;
+    refreshToken?: string;
+    refresh_token?: string;
+    expiresAt?: string;
+    expires_at?: string;
+    metadata?: Record<string, unknown>;
+}
+interface SecretListParams {
+    scope?: string;
+    type?: string;
+    workspaceId?: string;
+    workspace_id?: string;
+    ownerUserId?: string;
+    owner_user_id?: string;
+    externalUserId?: string;
+    external_user_id?: string;
+    externalWorkspaceId?: string;
+    external_workspace_id?: string;
+    resourceId?: string;
+    resource_id?: string;
+    resourceType?: string;
+    resource_type?: string;
+}
+interface SecretRotateParams {
+    newValue?: string;
+    new_value?: string;
+    value?: string;
+    refreshToken?: string;
+    refresh_token?: string;
+    expiresAt?: string;
+    expires_at?: string;
+}
+interface BindingCreateParams {
+    secretId?: string;
+    secret_id?: string;
+    resourceId?: string;
+    resource_id?: string;
+    resourceType?: string;
+    resource_type?: string;
+    exposeAsEnv?: string;
+    expose_as_env?: string;
+}
+interface BindingListParams {
+    resourceId?: string;
+    resource_id?: string;
+    resourceType?: string;
+    resource_type?: string;
+    secretId?: string;
+    secret_id?: string;
+}
+interface OauthConnectParams {
+    provider: string;
+    exposeAsEnv?: string;
+    expose_as_env?: string;
+    scope?: string;
+    ownerUserId?: string;
+    owner_user_id?: string;
+    externalUserId?: string;
+    external_user_id?: string;
+    externalWorkspaceId?: string;
+    external_workspace_id?: string;
+    resourceId?: string;
+    resource_id?: string;
+    resourceType?: string;
+    resource_type?: string;
+    redirectUri?: string;
+    redirect_uri?: string;
+}
+interface OauthStartResult {
+    authorize_url: string;
+    authorizeUrl?: string;
+    state: string;
+    provider?: string;
+    expires_at?: string;
+    [key: string]: unknown;
+}
+interface OauthStatusResult {
+    status: string;
+    state?: string;
+    secret_id?: string;
+    error?: string;
+    message?: string;
+    [key: string]: unknown;
+}
+/**
+ * A pending OAuth flow.
+ *
+ * The SDK does NOT auto-open a browser — the caller is responsible for
+ * surfacing `authorizeUrl` to the end user. Once the user grants
+ * consent, call `waitForCompletion()` to poll the upstream provider
+ * status.
+ */
+declare class OAuthFlow {
+    readonly authorizeUrl: string;
+    readonly state: string;
+    readonly provider?: string;
+    readonly data: OauthStartResult;
+    private readonly http;
+    constructor(http: HttpClient, payload: OauthStartResult, provider?: string);
+    /**
+     * Poll `GET /egress/oauth/status?state=...` until the flow completes.
+     *
+     * Returns the status payload once the upstream provider issues
+     * tokens. Rejects with a `TimeoutError`-style Error if the flow does
+     * not complete within `timeoutSec` seconds, or if the upstream
+     * returns a failed status.
+     */
+    waitForCompletion(options?: {
+        timeoutSec?: number;
+        pollIntervalMs?: number;
+    }): Promise<OauthStatusResult>;
+}
+declare class EgressSecrets {
+    protected readonly http: HttpClient;
+    constructor(http: HttpClient);
+    /**
+     * Create a secret. When `exposeAsEnv` is provided together with
+     * `resourceId` the backend also creates a binding so the value is
+     * injected as an env-var on that resource.
+     */
+    set(params: SecretSetParams): Promise<EgressSecretData>;
+    /** List secrets. */
+    list(params?: SecretListParams): Promise<EgressSecretData[]>;
+    /** Get a single secret by id. */
+    get(id: string): Promise<EgressSecretData>;
+    /** Rotate the secret's value. */
+    rotate(id: string, params: SecretRotateParams | string): Promise<EgressSecretData>;
+    /** Delete a secret. */
+    delete(id: string): Promise<void>;
+    /** Bind a secret to a resource as an env var. */
+    createBinding(params: BindingCreateParams): Promise<EgressBindingData>;
+    /** List secret bindings. */
+    listBindings(params?: BindingListParams): Promise<EgressBindingData[]>;
+    /** Delete a binding. */
+    deleteBinding(id: string): Promise<void>;
+    /** List OAuth providers visible to the current tenant. */
+    providers(): Promise<OauthProvider[]>;
+    /**
+     * Start an OAuth Connect flow.
+     *
+     * Returns an {@link OAuthFlow} — the caller must surface
+     * `flow.authorizeUrl` to the end user (the SDK does NOT open the
+     * browser) and then call `flow.waitForCompletion()` to receive the
+     * resulting secret id.
+     */
+    connect(params: OauthConnectParams): Promise<OAuthFlow>;
+}
+/**
+ * Sandbox-bound view of {@link EgressSecrets}. Pre-scopes
+ * `resource_id` + `resource_type="sandbox"` on every call.
+ */
+declare class SandboxSecrets {
+    protected readonly resourceId: string;
+    protected readonly resourceType: string;
+    private readonly delegate;
+    constructor(http: HttpClient, resourceId: string);
+    private resolvedResourceId;
+    private resolvedResourceType;
+    set(params: SecretSetParams): Promise<EgressSecretData>;
+    list(params?: SecretListParams): Promise<EgressSecretData[]>;
+    get(id: string): Promise<EgressSecretData>;
+    rotate(id: string, params: SecretRotateParams | string): Promise<EgressSecretData>;
+    delete(id: string): Promise<void>;
+    connect(params: OauthConnectParams): Promise<OAuthFlow>;
+    listBindings(params?: BindingListParams): Promise<EgressBindingData[]>;
+}
+/** Computer-bound secrets — same shape, `resource_type="computer"`. */
+declare class ComputerSecrets extends SandboxSecrets {
+    protected readonly resourceType: string;
+}
+
 /** Options for `Exec.stream()`. */
 interface ExecStreamOptions {
     /** Command to execute. */
@@ -1650,6 +2160,12 @@ declare class Computer {
     readonly ports: ComputerPorts;
     /** Volume attachment — list, attach, detach. */
     readonly volumes: ComputerVolumes;
+    /** Encrypted secrets + OAuth credentials scoped to this computer. */
+    readonly secrets: ComputerSecrets;
+    /** Egress allowlist + policies scoped to this computer. */
+    readonly network: ComputerNetwork;
+    /** Egress audit log + live tail scoped to this computer. */
+    readonly audit: ComputerAudit;
     private readonly http;
     constructor(http: HttpClient, data: ComputerData);
     get id(): ComputerId;
@@ -1892,6 +2408,12 @@ interface CronJobCreateParams {
     name: string;
     schedule: string;
     idempotencyKey?: string;
+    externalWorkspaceId?: string;
+    external_workspace_id?: string;
+    externalUserId?: string;
+    external_user_id?: string;
+    externalProjectId?: string;
+    external_project_id?: string;
     [key: string]: unknown;
 }
 interface CronJobUpdateParams {
@@ -2075,7 +2597,7 @@ interface DeploymentData {
      * with `source_sandbox_id` on the version row. Will become nullable.
      */
     repo_url?: string;
-    repo_provider?: "github";
+    repo_provider?: "github" | "gitlab" | "bitbucket";
     branch?: string;
     build_command?: string | null;
     run_command?: string | null;
@@ -2246,6 +2768,9 @@ interface DeploymentCreateParams extends ExternalAttribution {
     autoDeploy?: boolean;
     database?: DeploymentDatabaseRequest;
     metadata?: Record<string, unknown>;
+    /** Pin build and runtime VMs to a specific DC. One of: "us-west", "us-east", "us-mia". */
+    target_region?: string;
+    targetRegion?: string;
     idempotencyKey?: string;
 }
 interface DeploymentUpdateParams {
@@ -2384,7 +2909,9 @@ declare class Deployments {
     rollback(deploymentId: string, params?: RollbackParams): Promise<DeploymentData>;
     listBuilds(deploymentId: string): Promise<DeploymentBuildData[]>;
     getBuild(deploymentId: string, buildId: string): Promise<DeploymentBuildData>;
-    listEnv(deploymentId: string): Promise<Record<string, unknown>[]>;
+    listEnv(deploymentId: string, opts?: {
+        environment?: string;
+    }): Promise<Record<string, unknown>[]>;
     setEnv(deploymentId: string, vars: Record<string, string>, opts?: {
         environment?: string;
     }): Promise<Record<string, unknown>[]>;
@@ -2533,6 +3060,12 @@ interface CustomDomainCreateParams {
     redirect_policy?: "none" | "www_to_apex" | "apex_to_www";
     redirectPolicy?: "none" | "www_to_apex" | "apex_to_www";
     idempotencyKey?: string;
+    externalWorkspaceId?: string;
+    external_workspace_id?: string;
+    externalUserId?: string;
+    external_user_id?: string;
+    externalProjectId?: string;
+    external_project_id?: string;
     [key: string]: unknown;
 }
 declare class FlatCustomDomains {
@@ -2580,6 +3113,12 @@ interface FunctionCreateParams {
     timeoutSec?: number;
     env?: Record<string, string>;
     idempotencyKey?: string;
+    externalWorkspaceId?: string;
+    external_workspace_id?: string;
+    externalUserId?: string;
+    external_user_id?: string;
+    externalProjectId?: string;
+    external_project_id?: string;
     [key: string]: unknown;
 }
 interface FunctionUpdateParams {
@@ -2807,7 +3346,7 @@ type TunnelId = string & {
 type ClusterId = string & {
     readonly __brand: "ClusterId";
 };
-type WorkspaceId = string & {
+type WorkspaceId$1 = string & {
     readonly __brand: "WorkspaceId";
 };
 type SecretId = string & {
@@ -3020,7 +3559,7 @@ interface AppInstallEvent {
 }
 type OcWorkspaceStatus = "creating" | "ready" | "running" | "stopped" | "error";
 interface OcWorkspaceData {
-    id: WorkspaceId;
+    id: WorkspaceId$1;
     host_id: HostId;
     name: string;
     repo_url: string | null;
@@ -3045,7 +3584,7 @@ interface OcWorkspaceListResponse {
 }
 interface OcWorkspaceEvent {
     type: string;
-    workspace_id: WorkspaceId;
+    workspace_id: WorkspaceId$1;
     data: unknown;
     timestamp: string;
 }
@@ -3521,28 +4060,28 @@ declare class OcWorkspaces {
     /**
      * Fetch a single workspace.
      */
-    get(hostId: HostId | string, workspaceId: WorkspaceId | string): Promise<OcWorkspaceData>;
+    get(hostId: HostId | string, workspaceId: WorkspaceId$1 | string): Promise<OcWorkspaceData>;
     /**
      * Update workspace metadata (name, branch).
      */
-    update(hostId: HostId | string, workspaceId: WorkspaceId | string, params: OcWorkspaceUpdateParams): Promise<OcWorkspaceData>;
+    update(hostId: HostId | string, workspaceId: WorkspaceId$1 | string, params: OcWorkspaceUpdateParams): Promise<OcWorkspaceData>;
     /**
      * Delete a workspace.
      */
-    delete(hostId: HostId | string, workspaceId: WorkspaceId | string): Promise<void>;
+    delete(hostId: HostId | string, workspaceId: WorkspaceId$1 | string): Promise<void>;
     /**
      * Pull the latest changes from the remote repository.
      */
-    pull(hostId: HostId | string, workspaceId: WorkspaceId | string): Promise<OcWorkspaceData>;
+    pull(hostId: HostId | string, workspaceId: WorkspaceId$1 | string): Promise<OcWorkspaceData>;
     /**
      * Open a terminal session scoped to the workspace root directory.
      * Returns a short-lived WebSocket ticket.
      */
-    openTerminal(hostId: HostId | string, workspaceId: WorkspaceId | string): Promise<WsTicket>;
+    openTerminal(hostId: HostId | string, workspaceId: WorkspaceId$1 | string): Promise<WsTicket>;
     /**
      * Stream workspace setup / clone / install events.
      */
-    events(hostId: HostId | string, workspaceId: WorkspaceId | string): AsyncIterableIterator<OcWorkspaceEvent>;
+    events(hostId: HostId | string, workspaceId: WorkspaceId$1 | string): AsyncIterableIterator<OcWorkspaceEvent>;
 }
 
 /**
@@ -3812,6 +4351,7 @@ interface SandboxCreateParams {
     tags?: string[];
     idempotencyKey?: string;
     idempotency_key?: string;
+    slug?: string;
     externalWorkspaceId?: string;
     external_workspace_id?: string;
     externalUserId?: string;
@@ -3972,6 +4512,38 @@ interface SandboxFileEntry {
     modifiedAt?: string;
     [key: string]: unknown;
 }
+interface SandboxFileTreeNode {
+    path: string;
+    name: string;
+    type: "file" | "dir";
+    size?: number;
+    modified_at?: string;
+    children?: SandboxFileTreeNode[];
+}
+interface SandboxWriteManyEntry {
+    path: string;
+    content: string | Uint8Array;
+}
+interface SandboxWriteManyResult {
+    written: Array<{
+        path: string;
+        size_bytes: number;
+    }>;
+    failed: Array<{
+        path: string;
+        error: string;
+    }>;
+}
+interface SandboxFileChange {
+    type: "created" | "modified" | "deleted";
+    path: string;
+    size_bytes?: number;
+}
+interface SandboxEnvVar {
+    key: string;
+    encrypted: boolean;
+    value?: string;
+}
 interface SandboxFileList {
     path?: string;
     entries: SandboxFileEntry[];
@@ -4029,6 +4601,12 @@ declare class SandboxFiles {
     stat(path: string): Promise<SandboxFileStat>;
     upload(path: string, content: string | Uint8Array): Promise<void>;
     download(path: string): Promise<Uint8Array>;
+    /** GET /api/v1/sandboxes/{id}/files/tree — recursive directory tree. */
+    tree(path?: string, depth?: number): Promise<SandboxFileTreeNode>;
+    /** POST /api/v1/sandboxes/{id}/files/write-many — write multiple files atomically. */
+    writeMany(files: SandboxWriteManyEntry[]): Promise<SandboxWriteManyResult>;
+    /** GET /api/v1/sandboxes/{id}/files/watch (SSE) — live file change events. */
+    watch(): AsyncIterableIterator<SandboxFileChange>;
 }
 declare class SandboxPreview {
     private readonly sandbox;
@@ -4091,11 +4669,19 @@ declare class SandboxPreviews {
 declare class SandboxEnv {
     private readonly sandbox;
     constructor(sandbox: Sandbox);
-    /**
-     * Read-only listing of sandbox env vars.
-     * The backend has no per-name CRUD route; use Sandbox.create(env=...) to set values.
-     */
-    list(): Promise<Record<string, unknown>>;
+    private get http();
+    /** GET /api/v1/sandboxes/{id}/env → list of env vars. */
+    get(): Promise<SandboxEnvVar[]>;
+    /** @deprecated Use get() */
+    list(): Promise<SandboxEnvVar[]>;
+    /** PUT /api/v1/sandboxes/{id}/env — set (replace) env vars. */
+    set(vars: Array<{
+        key: string;
+        value: string;
+        encrypted?: boolean;
+    }>): Promise<SandboxEnvVar[]>;
+    /** DELETE /api/v1/sandboxes/{id}/env/{key} — remove a single env var. */
+    delete(key: string): Promise<void>;
 }
 declare class SandboxTags {
     private readonly sandbox;
@@ -4123,6 +4709,12 @@ declare class Sandbox {
     readonly env: SandboxEnv;
     /** Tag replacement. */
     readonly tags: SandboxTags;
+    /** Encrypted secrets + OAuth credentials scoped to this sandbox. */
+    readonly secrets: SandboxSecrets;
+    /** Egress allowlist + policies scoped to this sandbox. */
+    readonly network: SandboxNetwork;
+    /** Egress audit log + live tail scoped to this sandbox. */
+    readonly audit: SandboxAudit;
     constructor(http: HttpClient, data: SandboxData);
     get id(): SandboxId;
     get state(): SandboxState;
@@ -4145,11 +4737,67 @@ declare class Sandbox {
     listSnapshots(): Promise<SandboxSnapshot[]>;
     restoreSnapshot(snapshotId: string): Promise<Sandbox>;
     deleteSnapshot(snapshotId: string): Promise<void>;
+    /**
+     * Fork (clone) this sandbox into a new sandbox via copy-on-write snapshot.
+     * The original sandbox continues running unchanged.
+     */
+    fork(opts?: {
+        name?: string;
+        metadata?: Record<string, unknown>;
+    }): Promise<Sandbox>;
+    /**
+     * PATCH /api/v1/sandboxes/{id} — update mutable sandbox fields.
+     */
+    update(params: {
+        name?: string;
+        slug?: string;
+        tags?: string[];
+        metadata?: Record<string, unknown>;
+        always_on?: boolean;
+        timeout_sec?: number;
+        idle_timeout_sec?: number;
+    }): Promise<Sandbox>;
+    /**
+     * POST /api/v1/sandboxes/{id}/preview-token → {token, url, expires_at, scope}
+     */
+    previewToken(expiresIn?: number, scope?: string): Promise<{
+        token: string;
+        url: string;
+        expires_at: string;
+        scope: string;
+        [key: string]: unknown;
+    }>;
     pause(): Promise<Sandbox>;
     resume(): Promise<Sandbox>;
     deploy(params?: SandboxDeployParams): Promise<Record<string, unknown>>;
     /** Check readiness of the sandbox (GET /sandboxes/:id/readiness). */
     readiness(): Promise<Record<string, unknown>>;
+    /**
+     * Block until the sandbox reports ready, or *timeout* seconds elapse.
+     *
+     * When `stream` is `true` (the default) this opens an SSE connection
+     * to `GET /sandboxes/:id/readiness/stream` and waits for an
+     * `event: ready` frame. The server emits `ready` immediately if the
+     * sandbox is already ready, otherwise as soon as the readiness PubSub
+     * message fires.
+     *
+     * Returns `true` once the sandbox is ready, `false` on `event: timeout`
+     * or when the local timeout elapses before ready.
+     *
+     * If the SSE endpoint returns 404 (server pre-dates the streaming
+     * endpoint) this transparently falls back to polling
+     * {@link readiness} every 10 ms until ready or timeout.
+     */
+    waitUntilReady(options?: {
+        timeout?: number;
+        stream?: boolean;
+    }): Promise<boolean>;
+    /**
+     * Returns `true` / `false` for terminal SSE events, or `null` if the
+     * stream endpoint is unavailable (404 or transport error) so callers
+     * can fall back to polling.
+     */
+    private tryReadinessStream;
     destroy(): Promise<void>;
     delete(): Promise<void>;
     private assertRunning;
@@ -4334,6 +4982,12 @@ interface BucketCreateParams {
     visibility?: "private" | "public";
     quota_bytes?: number;
     public?: boolean;
+    externalWorkspaceId?: string;
+    external_workspace_id?: string;
+    externalUserId?: string;
+    external_user_id?: string;
+    externalProjectId?: string;
+    external_project_id?: string;
     [key: string]: unknown;
 }
 interface ObjectListParams {
@@ -4377,7 +5031,134 @@ declare class Storage {
 }
 
 /**
- * Tenant — current tenant info and plan/usage.
+ * Org Invites — email invite flow for org (tenant) membership.
+ *
+ * Public endpoints (no auth):
+ *   GET  /invites/:token
+ *
+ * Authenticated endpoints (admin/owner role required for create/list/revoke):
+ *   POST   /tenants/:id/invites
+ *   GET    /tenants/:id/invites
+ *   DELETE /tenants/:id/invites/:invite_id
+ *   POST   /invites/:token/accept
+ */
+
+type OrgRole = "owner" | "admin" | "member";
+interface OrgInvite {
+    id: string;
+    tenant_id: string;
+    email: string;
+    role: OrgRole;
+    invited_by: string | null;
+    expires_at: string;
+    accepted_at: string | null;
+    created_at: string;
+}
+interface OrgInviteCreated {
+    invite_id: string;
+    email: string;
+    role: OrgRole;
+    expires_at: string;
+    /**
+     * Full URL for the invite landing page. On white-label tenants this uses
+     * the tenant's custom domain.
+     */
+    invite_url: string;
+}
+interface OrgInvitePreview {
+    email: string;
+    tenant_name: string;
+    role: OrgRole;
+    expires_at: string;
+    expired: boolean;
+    accepted: boolean;
+}
+interface TenantSummary {
+    id: string;
+    name: string;
+    slug: string;
+    owner_user_id: string | null;
+    plan_id: string | null;
+    plan_name: string | null;
+    settings: Record<string, unknown>;
+    inserted_at: string;
+    updated_at: string;
+}
+interface CreateOrgInviteParams {
+    email: string;
+    role?: OrgRole;
+}
+interface OrgInviteCreatedResponse {
+    data: OrgInviteCreated;
+}
+interface OrgInviteListResponse {
+    data: OrgInvite[];
+    total: number;
+}
+interface OrgInviteRevokeResponse {
+    invite_id: string;
+    revoked: boolean;
+}
+interface AcceptOrgInviteResponse {
+    accepted: boolean;
+    tenant_id: string;
+    tenant: TenantSummary | null;
+}
+declare class OrgInvites {
+    private readonly http;
+    constructor(http: HttpClient);
+    /**
+     * Create an org invite and dispatch the invite email.
+     *
+     * The invite URL in the response is host-aware: on white-label tenants it
+     * uses the custom domain so the recipient lands on the branded experience.
+     * Requires `admin` or `owner` role in the tenant.
+     *
+     * `POST /tenants/:id/invites`
+     */
+    create(tenantId: string, params: CreateOrgInviteParams): Promise<OrgInviteCreated>;
+    /**
+     * List all pending (non-expired, non-accepted, non-revoked) org invites.
+     *
+     * Requires `admin` or `owner` role.
+     *
+     * `GET /tenants/:id/invites`
+     */
+    list(tenantId: string): Promise<OrgInvite[]>;
+    /**
+     * Revoke a pending org invite.
+     *
+     * Returns `409` when the invite was already legitimately accepted.
+     * Requires `admin` or `owner` role.
+     *
+     * `DELETE /tenants/:id/invites/:invite_id`
+     */
+    revoke(tenantId: string, inviteId: string): Promise<OrgInviteRevokeResponse>;
+    /**
+     * Preview an org invite by token (no auth required).
+     *
+     * Returns `null` when the token is unknown or has been revoked.
+     *
+     * `GET /invites/:token`
+     */
+    preview(token: string): Promise<OrgInvitePreview | null>;
+    /**
+     * Accept an org invite on behalf of the authenticated user.
+     *
+     * The caller's JWT email must match the invite email (case-insensitive).
+     * On success inserts a `tenant_members` row.
+     *
+     * Error responses:
+     * - `400` — invalid or expired token.
+     * - `422 EMAIL_MISMATCH` — JWT email does not match the invite email.
+     *
+     * `POST /invites/:token/accept`
+     */
+    accept(token: string): Promise<AcceptOrgInviteResponse>;
+}
+
+/**
+ * Tenant — current tenant info, preview domain, and branding.
  */
 
 interface TenantPlan {
@@ -4387,8 +5168,53 @@ interface TenantPlan {
     usage?: Record<string, unknown>;
     [key: string]: unknown;
 }
+interface PreviewDomainData {
+    domain: string;
+    verified_at?: string | null;
+    cname_target?: string;
+    [key: string]: unknown;
+}
+interface PreviewDomainVerifyResult {
+    verified: boolean;
+    target?: string;
+    records?: unknown[];
+    [key: string]: unknown;
+}
+interface BrandingData {
+    product_name?: string;
+    logo_url?: string;
+    support_url?: string;
+    support_email?: string;
+    primary_color?: string;
+    background_color?: string;
+    [key: string]: unknown;
+}
+declare class PreviewDomain {
+    private readonly http;
+    constructor(http: HttpClient);
+    /** GET /api/v1/tenant/preview-domain → {domain, verified_at, cname_target} */
+    get(): Promise<PreviewDomainData>;
+    /** PUT /api/v1/tenant/preview-domain — set the preview domain. */
+    set(domain: string): Promise<PreviewDomainData>;
+    /** POST /api/v1/tenant/preview-domain/verify → {verified, target, records} */
+    verify(): Promise<PreviewDomainVerifyResult>;
+    /** DELETE /api/v1/tenant/preview-domain */
+    delete(): Promise<void>;
+}
+declare class Branding {
+    private readonly http;
+    constructor(http: HttpClient);
+    /** GET /api/v1/tenant/branding */
+    get(): Promise<BrandingData>;
+    /** PUT /api/v1/tenant/branding — keys: product_name, logo_url, support_url, support_email, primary_color, background_color */
+    set(branding: BrandingData): Promise<BrandingData>;
+    /** DELETE /api/v1/tenant/branding */
+    delete(): Promise<void>;
+}
 declare class Tenant {
     private readonly http;
+    readonly preview_domain: PreviewDomain;
+    readonly branding: Branding;
     constructor(http: HttpClient);
     /** Get the current tenant's plan, limits, and live usage counters. */
     current(): Promise<TenantPlan>;
@@ -4464,6 +5290,12 @@ interface VolumeCreateParams {
     sizeGb?: number;
     region?: string;
     idempotencyKey?: string;
+    externalWorkspaceId?: string;
+    external_workspace_id?: string;
+    externalUserId?: string;
+    external_user_id?: string;
+    externalProjectId?: string;
+    external_project_id?: string;
     [key: string]: unknown;
 }
 declare class Volumes {
@@ -4541,6 +5373,345 @@ declare class Webhooks {
         idempotencyKey?: string;
     }): Promise<Record<string, unknown>>;
     deliveries(webhookId: string): Promise<WebhookDeliveryData[]>;
+    /**
+     * Verify an incoming ``X-Miosa-Signature`` header.
+     *
+     * Header format: ``t=<unix_ts>,v1=<hex_hmac>``
+     * HMAC body:     ``<t>.<raw_payload>``
+     *
+     * Throws if timestamp is older than 5 minutes.
+     * Returns true if signature matches.
+     */
+    static verifySignature(payload: string | Uint8Array, signatureHeader: string, secret: string): boolean;
+}
+
+/**
+ * Workspace Members — per-workspace user roster.
+ *
+ * Endpoints:
+ *   GET    /workspaces/:id/members
+ *   POST   /workspaces/:id/members
+ *   PATCH  /workspaces/:id/members/:user_id
+ *   DELETE /workspaces/:id/members/:user_id
+ */
+
+/** Role a user can hold within a workspace. */
+type WorkspaceRole = "owner" | "admin" | "member" | "viewer";
+/**
+ * Workspace member as returned by `list` — includes denormalised user fields
+ * for display.
+ */
+interface WorkspaceMember {
+    user_id: string;
+    email: string | null;
+    name: string | null;
+    avatar_url: string | null;
+    role: WorkspaceRole;
+    joined_at: string | null;
+    added_by: string | null;
+}
+/** Raw workspace_members row returned after add/update operations. */
+interface WorkspaceMemberRecord {
+    user_id: string;
+    workspace_id: string;
+    role: WorkspaceRole;
+    joined_at: string | null;
+    added_by: string | null;
+}
+interface AddWorkspaceMemberParams {
+    /** UUID of the tenant user to add. Must already be an org member. */
+    user_id: string;
+    /** Role to assign; defaults to `"member"`. */
+    role?: WorkspaceRole;
+}
+interface UpdateWorkspaceMemberRoleParams {
+    role: WorkspaceRole;
+}
+interface WorkspaceMemberListResponse {
+    data: WorkspaceMember[];
+}
+interface WorkspaceMemberRecordResponse {
+    data: WorkspaceMemberRecord;
+}
+interface WorkspaceMemberDeleteResponse {
+    deleted: boolean;
+}
+declare class WorkspaceMembers {
+    private readonly http;
+    constructor(http: HttpClient);
+    /**
+     * List all members of a workspace.
+     *
+     * `GET /workspaces/:id/members`
+     */
+    list(workspaceId: string): Promise<WorkspaceMember[]>;
+    /**
+     * Add an existing tenant user to a workspace.
+     *
+     * The `user_id` must already hold a `tenant_members` row for the parent org.
+     * Use {@link WorkspaceInvites.create} to invite someone who is not yet an org
+     * member.
+     *
+     * `POST /workspaces/:id/members`
+     *
+     * @throws `MiosaError` with code `NOT_TENANT_MEMBER` if the user is not an
+     *   org member.
+     */
+    add(workspaceId: string, params: AddWorkspaceMemberParams): Promise<WorkspaceMemberRecord>;
+    /**
+     * Change a workspace member's role.
+     *
+     * `PATCH /workspaces/:id/members/:user_id`
+     */
+    updateRole(workspaceId: string, userId: string, params: UpdateWorkspaceMemberRoleParams): Promise<WorkspaceMemberRecord>;
+    /**
+     * Remove a user from a workspace.
+     *
+     * The last `owner` of a workspace cannot be removed. Promote another member
+     * to `owner` first using {@link updateRole}.
+     *
+     * `DELETE /workspaces/:id/members/:user_id`
+     *
+     * @throws `MiosaError` with code `LAST_OWNER` if the target is the sole owner.
+     */
+    remove(workspaceId: string, userId: string): Promise<WorkspaceMemberDeleteResponse>;
+}
+
+/**
+ * Workspace Invites — email invite flow for workspace access.
+ *
+ * Sending an invite to an email that already belongs to a tenant member
+ * short-circuits to directly adding that user (returns `type: "added"`).
+ * Accepting a workspace invite for an unknown email auto-creates both a
+ * `tenant_members` and a `workspace_members` row atomically.
+ *
+ * Public endpoints (no auth):
+ *   GET  /workspace-invites/:token
+ *
+ * Authenticated endpoints:
+ *   POST   /workspaces/:id/invites
+ *   GET    /workspaces/:id/invites
+ *   DELETE /workspaces/:id/invites/:invite_id
+ *   POST   /workspace-invites/:token/accept
+ */
+
+interface WorkspaceInvite {
+    id: string;
+    workspace_id: string;
+    tenant_id: string;
+    email: string;
+    role: WorkspaceRole;
+    invited_by: string | null;
+    expires_at: string;
+    accepted_at: string | null;
+    inserted_at: string;
+}
+interface WorkspaceInvitePreview {
+    workspace_name: string;
+    tenant_name: string;
+    role: WorkspaceRole;
+    email: string;
+    expires_at: string;
+    expired: boolean;
+    revoked: boolean;
+    accepted: boolean;
+}
+interface CreateWorkspaceInviteParams {
+    email: string;
+    role?: WorkspaceRole;
+}
+/** Returned when the email was unknown — an invite was created. */
+interface WorkspaceInviteCreatedResponse {
+    data: WorkspaceInvite;
+    type: "invited";
+}
+/** Returned when the email already had a tenant_members row — added directly. */
+interface WorkspaceMemberAddedResponse {
+    data: WorkspaceMemberRecord;
+    type: "added";
+}
+type CreateWorkspaceInviteResponse = WorkspaceInviteCreatedResponse | WorkspaceMemberAddedResponse;
+interface WorkspaceInviteListResponse {
+    data: WorkspaceInvite[];
+    total: number;
+}
+interface WorkspaceInviteRevokeResponse {
+    invite_id: string;
+    revoked: boolean;
+}
+interface AcceptWorkspaceInviteResponse {
+    accepted: boolean;
+    workspace_id: string;
+    tenant_id: string;
+    role: WorkspaceRole;
+}
+declare class WorkspaceInvites {
+    private readonly http;
+    constructor(http: HttpClient);
+    /**
+     * Create a workspace invite or add a member directly.
+     *
+     * If `email` already maps to a tenant member the user is added directly and
+     * `type === "added"` is returned with a `WorkspaceMemberRecord`. Otherwise
+     * an invite row is created and `type === "invited"` is returned.
+     *
+     * `POST /workspaces/:id/invites`
+     */
+    create(workspaceId: string, params: CreateWorkspaceInviteParams): Promise<CreateWorkspaceInviteResponse>;
+    /**
+     * List all pending (non-expired, non-accepted, non-revoked) workspace invites.
+     *
+     * `GET /workspaces/:id/invites`
+     */
+    list(workspaceId: string): Promise<WorkspaceInvite[]>;
+    /**
+     * Revoke a pending workspace invite.
+     *
+     * Already-revoked invites are idempotent (returns `revoked: true`). An invite
+     * that was legitimately accepted throws `409 ALREADY_ACCEPTED`.
+     *
+     * `DELETE /workspaces/:id/invites/:invite_id`
+     */
+    revoke(workspaceId: string, inviteId: string): Promise<WorkspaceInviteRevokeResponse>;
+    /**
+     * Preview a workspace invite by token (no auth required).
+     *
+     * Use this to render the invite landing page before prompting the user to
+     * log in or sign up. Returns `null` when the token is unknown or revoked.
+     *
+     * `GET /workspace-invites/:token`
+     */
+    preview(token: string): Promise<WorkspaceInvitePreview | null>;
+    /**
+     * Accept a workspace invite on behalf of the authenticated user.
+     *
+     * The caller's JWT email must match the invite email (case-insensitive).
+     *
+     * Error codes:
+     * - `INVALID_TOKEN` (404) — token not found.
+     * - `EXPIRED` (410) — invite TTL elapsed.
+     * - `REVOKED` (409) — invite was revoked.
+     * - `ALREADY_ACCEPTED` (409) — already used.
+     * - `EMAIL_MISMATCH` (422) — JWT email differs from invite email.
+     *
+     * `POST /workspace-invites/:token/accept`
+     */
+    accept(token: string): Promise<AcceptWorkspaceInviteResponse>;
+}
+
+/**
+ * Workspaces resource — top-level tenant workspaces grouping computers.
+ *
+ * A workspace is a logical bucket of computers (handy for teams / projects).
+ * Accessed via `miosa.workspaces` on the top-level client.
+ *
+ * @example
+ * ```ts
+ * const ws = await miosa.workspaces.create({ name: "prod" });
+ * const computers = await miosa.workspaces.listComputers(ws.id);
+ * ```
+ */
+
+type WorkspaceId = string & {
+    readonly __brand: "WorkspaceId";
+};
+interface WorkspaceData {
+    id: WorkspaceId;
+    tenant_id: string;
+    name: string;
+    slug?: string | null;
+    description?: string | null;
+    metadata?: Record<string, unknown> | null;
+    settings?: Record<string, unknown> | null;
+    created_at?: string;
+    updated_at?: string;
+    [key: string]: unknown;
+}
+interface WorkspaceCreateParams {
+    name: string;
+    slug?: string;
+    description?: string;
+    metadata?: Record<string, unknown>;
+}
+interface WorkspaceUpdateParams {
+    name?: string;
+    description?: string;
+    metadata?: Record<string, unknown>;
+}
+interface WorkspaceComputerTemplateCreateParams {
+    name: string;
+    templateType?: string;
+    template_type?: string;
+    description?: string;
+    [key: string]: unknown;
+}
+declare class Workspaces {
+    private readonly http;
+    constructor(http: HttpClient);
+    /**
+     * Create a new workspace.
+     */
+    create(params: WorkspaceCreateParams): Promise<WorkspaceData>;
+    /**
+     * List all workspaces visible to the current credential.
+     */
+    list(): Promise<WorkspaceData[]>;
+    /**
+     * Get a single workspace by ID.
+     */
+    get(id: WorkspaceId | string): Promise<WorkspaceData>;
+    /**
+     * Update a workspace's metadata.
+     */
+    update(id: WorkspaceId | string, params: WorkspaceUpdateParams): Promise<WorkspaceData>;
+    /**
+     * Delete a workspace. Does not delete member computers.
+     */
+    delete(id: WorkspaceId | string): Promise<void>;
+    /**
+     * Update workspace-level settings.
+     */
+    updateSettings(id: WorkspaceId | string, settings: Record<string, unknown>): Promise<WorkspaceData>;
+    /**
+     * List all computers that belong to the given workspace.
+     */
+    listComputers(id: WorkspaceId | string): Promise<Computer[]>;
+    /**
+     * List all sandboxes that belong to this workspace.
+     */
+    listSandboxes(id: WorkspaceId | string): Promise<Record<string, unknown>[]>;
+    /**
+     * List all deployments that belong to this workspace.
+     */
+    listDeployments(id: WorkspaceId | string): Promise<Record<string, unknown>[]>;
+    /**
+     * List all managed databases that belong to this workspace.
+     */
+    listDatabases(id: WorkspaceId | string): Promise<Record<string, unknown>[]>;
+    /**
+     * List all projects that belong to this workspace.
+     */
+    listProjects(id: WorkspaceId | string): Promise<Record<string, unknown>[]>;
+    /**
+     * Return aggregate resource stats for this workspace.
+     */
+    stats(id: WorkspaceId | string): Promise<Record<string, unknown>>;
+    /**
+     * Return metered usage data for this workspace.
+     */
+    usage(id: WorkspaceId | string): Promise<Record<string, unknown>>;
+    /**
+     * Return activity feed for this workspace.
+     */
+    activity(id: WorkspaceId | string): Promise<Record<string, unknown>[]>;
+    /**
+     * List computer templates available in this workspace.
+     */
+    listComputerTemplates(id: WorkspaceId | string): Promise<Record<string, unknown>[]>;
+    /**
+     * Create a computer template scoped to this workspace.
+     */
+    createComputerTemplate(id: WorkspaceId | string, params: WorkspaceComputerTemplateCreateParams): Promise<Record<string, unknown>>;
 }
 
 /**
@@ -4557,6 +5728,20 @@ declare class Webhooks {
  * ```
  */
 declare class Miosa {
+    /** Workspace CRUD — create, list, get, update, delete, and sub-resource queries. */
+    readonly workspaces: Workspaces;
+    /** Per-workspace user roster — list, add, update role, remove. */
+    readonly workspaceMembers: WorkspaceMembers;
+    /**
+     * Workspace invite flow — create invite, list, revoke, preview, accept.
+     * Sending to an email already in the org adds the user directly.
+     */
+    readonly workspaceInvites: WorkspaceInvites;
+    /**
+     * Org invite flow — create invite, list, revoke, preview, accept.
+     * Requires admin/owner role for write operations.
+     */
+    readonly orgInvites: OrgInvites;
     /** Current tenant plan, limits, and live usage counters. */
     readonly tenant: Tenant;
     /** Datacenter regions, compute sizes, pricing, community templates. */
@@ -4641,6 +5826,12 @@ declare class Miosa {
     readonly builderSessions: BuilderSessions;
     /** Admin: fleet-wide snapshot index. */
     readonly snapshotsStandalone: SnapshotsStandalone;
+    /** Encrypted secret + OAuth credential vault (`/egress/secrets`). */
+    readonly secrets: EgressSecrets;
+    /** Egress allowlist + policies — host-level firewall (`/egress/policies`). */
+    readonly network: EgressNetwork;
+    /** Egress audit log — every outbound request, paginated query + tail. */
+    readonly audit: EgressAudit;
     private readonly http;
     constructor(config: MiosaClientConfig);
 }
@@ -4686,4 +5877,4 @@ declare class NetworkError extends MiosaError {
     constructor(message: string, cause: Error);
 }
 
-export { type AddDomainParams, Admin, type AgentDispatchParams, type AgentEvent$1 as AgentEvent, type AgentEventType, type AgentSessionCreateParams, type AgentSessionData, type AgentSessionListResponse$1 as AgentSessionListResponse, type AgentSessionStatus$1 as AgentSessionStatus, Analytics, type AnalyticsFilters, type ApiKeyCreateParams, type ApiKeyCreateResult, type ApiKeyData, type ApiKeyId, type ApiKeyListParams, ApiKeys, type AppCatalogEntry, type AppInstallData, type AppInstallEvent, AuditLog, type AuditLogEvent, type AuditLogListParams, AuthError, type BenchmarkCompareParams, type BenchmarkCreateParams, Benchmarks, type BrandingUpdateParams, type BucketCreateParams, type BucketData, type BucketId, type BuilderSessionListParams, BuilderSessions, type BulkUserActionParams, type ChannelCreateParams, type ChannelData, type ChannelListParams, type ChannelUpdateParams, Channels, type ChatCompletionCreateParams, type ChatCompletionCreateStreamParams, Checkpoints, type ClickParams, type ClusterCreateParams, type ClusterData, type ClusterEvent, type ClusterId, type ClusterListResponse, type ClusterStatus, CommandCenter, Community, type CompletionCreateParams, type CompletionCreateStreamParams, Completions, Computer, ComputerAutoStop, type ComputerCreateParams, type ComputerData, ComputerEnv, type ComputerId, ComputerInbox, type ComputerListParams, type ComputerListResponse, ComputerLogs, type ComputerLogsGetParams, ComputerOsa, ComputerPorts, type ComputerSize, type ComputerStatus, type ComputerTemplateType, ComputerTerminal, type ComputerUpdateParams, type ComputerVisibility, ComputerVolumes, Computers, type CopyParams, type CreateAdminApiKeyParams, type CreditBalance, type CreditTransaction, type CreditTransactionListResponse, type CreditUsage, Credits, type CronJobCreateParams, type CronJobData, type CronJobExecutionData, type CronJobExecutionId, type CronJobId, type CronJobListParams, type CronJobUpdateParams, CronJobs, type CursorInfo, type CustomDomainCreateParams, type CustomDomainData, type CustomDomainId, type CustomDomainListParams, Dashboard, type DashboardSummary, type DatabaseCreateParams, type DatabaseCredentials, type DatabaseData, type DatabaseId, type DatabaseListParams, type DatabaseLogsParams, type DatabaseLogsResult, Databases, type DeploymentBuildData, type DeploymentCreateParams, type DeploymentData, DeploymentDomains, type DeploymentId, type DeploymentListParams, type DeploymentReleaseData, type DeploymentReleaseId, DeploymentReleases, DeploymentRuntimeInstances, type DeploymentServiceData, type DeploymentServiceId, type DeploymentServiceType, type DeploymentSourceType, type DeploymentState, type DeploymentUpdateParams, type DeploymentVersionData, type DeploymentVersionId, type DeploymentVersionKind, type DeploymentVersionState, DeploymentVersions, Deployments, Desktop$1 as Desktop, type DesktopActionResult, type DirEntry, type DirListResult, type DiscordSendTestParams, type DoubleClickParams, type DragParams, Email, EmailCampaigns, EmailInbox, EmailTemplates, type EmbeddingCreateParams, Embeddings, Exec, type ExecParams, type ExecPythonParams, type ExecResult, type ExternalAttribution, type ExternalKeyCreateParams, type ExternalKeyData, ExternalKeys, type FileDeleteParams, type FileDownloadParams, type FileEntry, type FileExportParams, type FileExportResult, type FileListParams, type FileListResult, type FileStat, Files, FlatCustomDomains, type FsEntry, type FsListResponse, type FsStat, type FunctionCreateParams, type FunctionData, type FunctionId, type FunctionInvokeParams, type FunctionListParams, type FunctionUpdateParams, Functions, type GithubRepo, type GithubSshKey, type HealthCheckCreateParams, type HealthCheckData, type HealthCheckId, type HealthCheckListParams, type HealthCheckUpdateParams, HealthChecks, type HostCreateParams, type HostData, type HostEvent, type HostId, type HostListResponse, type HostStatus, type HostUpdateParams, InsufficientCreditsError, type IntegrationCatalogEntry, type IntegrationData, Integrations, type JobData, type JobEvent, type JobEventType, type JobId, type JobListResponse, type JobRunParams, type JobStatus, type KeyParams, type LaunchParams, type LinearCreateIssueParams, type ListAdminApiKeysParams, type ListAdminComputersParams, type ListAdminTenantsParams, type ListAdminUsersParams, Mcp, type McpDispatchParams, Miosa, type MiosaClientConfig, MiosaError, type MkdirParams, Models, type MouseButton, NetworkError, NetworkPolicy, type NetworkPolicyData, type NetworkPolicyEffect, type NetworkPolicyProtocol, type NetworkPolicyRule, type NetworkPolicySetParams, NotFoundError, type NotificationPrefsUpdateParams, type ObjectListParams, type AgentEvent as OcAgentEvent, type OcAgentSessionData, type AgentSessionListResponse as OcAgentSessionListResponse, type OcWorkspaceCreateParams, type OcWorkspaceData, type OcWorkspaceEvent, type OcWorkspaceListResponse, type OcWorkspaceStatus, type OcWorkspaceUpdateParams, OpenComputers, type OverviewData, type PresignParams, type PresignResult, ProjectAuth, type ProjectAuthEnableParams, type ProjectAuthStatus, type ProjectAuthUpdateParams, type ProjectIntegrationCatalogEntry, type ProjectIntegrationCreateParams, type ProjectIntegrationData, type ProjectIntegrationListParams, type ProjectIntegrationUpdateParams, ProjectIntegrations, ProviderDefaults, type ProviderKeyUpsertParams, type PublishFromSandboxParams, type PublishParams, type PublishResult, RateLimitError, type RegionData, Regions, type RollbackParams, type RuntimeInstanceData, type RuntimeInstanceId, type RuntimeInstanceState, type RuntimeLogsResult, SANDBOX_TEMPLATE, Sandbox, SandboxArtifacts, type SandboxBuildSpec, type SandboxBuildSpecError, type SandboxBuildSpecValidation, SandboxCommands, type SandboxCreateParams, type SandboxData, SandboxEnv, SandboxEvents, type SandboxExecOptions, type SandboxExecResult, SandboxFiles, type SandboxId, type SandboxListParams, SandboxPreview, SandboxPreviews, type SandboxState, SandboxTags, type SandboxTemplate, type SandboxTemplateBuild, type SandboxTemplateBuildCreateParams, type SandboxTemplateBuildResourceData, type SandboxTemplateBuildResourceId, type SandboxTemplateCreateParams, type SandboxTemplateList, type SandboxTemplateListParams, type SandboxTemplateResourceData, type SandboxTemplateResourceId, SandboxTemplates, SandboxTerminal, Sandboxes, ScopedFs, type ScrollDirection, type ScrollParams, type SecretCreateParams, type SecretData, type SecretId, type SecretUpdateParams, type SessionId, Settings, type SettingsUpdateParams, type SizeData, type SlackSendTestParams, type SnapshotCreateParams, type SnapshotData, type SnapshotListResponse, type SnapshotProgressEvent, type SnapshotRestoreResult, type SnapshotStatus, SnapshotsStandalone, Storage, type StorageObjectData, type TemplateBuildCreateParams, type TemplateCreateParams, type TemplateData, Tenant, type TenantId, type TenantPlan, type TerminalCreateParams, TimeoutError, type TimeseriesParams, type TunnelAuthMode, type TunnelCreateParams, type TunnelData, type TunnelId, type TunnelListResponse, type TunnelUpdateParams, type TypeParams, Usage, type UsageReportParams, type UsageSession, type UsageSessionsParams, type UsageSummary, ValidationError, type VersionListParams, type VolumeCreateParams, type VolumeData, type VolumeId, type VolumeListParams, Volumes, type WaitParams, type WebhookCreateParams, type WebhookData, type WebhookDeliveryData, type WebhookDeliveryId, type WebhookId, type WebhookListParams, type WebhookUpdateParams, Webhooks, type WindowFocusParams, type WindowInfo, type WorkspaceId, type WsTicket };
+export { type AcceptOrgInviteResponse, type AcceptWorkspaceInviteResponse, type AddDomainParams, type AddWorkspaceMemberParams, Admin, type AgentDispatchParams, type AgentEvent$1 as AgentEvent, type AgentEventType, type AgentSessionCreateParams, type AgentSessionData, type AgentSessionListResponse$1 as AgentSessionListResponse, type AgentSessionStatus$1 as AgentSessionStatus, type AllowParams, Analytics, type AnalyticsFilters, type ApiKeyCreateParams, type ApiKeyCreateResult, type ApiKeyData, type ApiKeyId, type ApiKeyListParams, ApiKeys, type AppCatalogEntry, type AppInstallData, type AppInstallEvent, type AuditListParams, AuditLog, type AuditLogEvent, type AuditLogListParams, type AuditTailParams, AuthError, type BenchmarkCompareParams, type BenchmarkCreateParams, Benchmarks, type BindingCreateParams, type BindingListParams, type BrandingUpdateParams, type BucketCreateParams, type BucketData, type BucketId, type BuilderSessionListParams, BuilderSessions, type BulkUserActionParams, type ChannelCreateParams, type ChannelData, type ChannelListParams, type ChannelUpdateParams, Channels, type ChatCompletionCreateParams, type ChatCompletionCreateStreamParams, Checkpoints, type ClickParams, type ClusterCreateParams, type ClusterData, type ClusterEvent, type ClusterId, type ClusterListResponse, type ClusterStatus, CommandCenter, Community, type CompletionCreateParams, type CompletionCreateStreamParams, Completions, Computer, ComputerAudit, ComputerAutoStop, type ComputerCreateParams, type ComputerData, ComputerEnv, type ComputerId, ComputerInbox, type ComputerListParams, type ComputerListResponse, ComputerLogs, type ComputerLogsGetParams, ComputerNetwork, ComputerOsa, ComputerPorts, ComputerSecrets, type ComputerSize, type ComputerStatus, type ComputerTemplateType, ComputerTerminal, type ComputerUpdateParams, type ComputerVisibility, ComputerVolumes, Computers, type CopyParams, type CreateAdminApiKeyParams, type CreateOrgInviteParams, type CreateWorkspaceInviteParams, type CreateWorkspaceInviteResponse, type CreditBalance, type CreditTransaction, type CreditTransactionListResponse, type CreditUsage, Credits, type CronJobCreateParams, type CronJobData, type CronJobExecutionData, type CronJobExecutionId, type CronJobId, type CronJobListParams, type CronJobUpdateParams, CronJobs, type CursorInfo, type CustomDomainCreateParams, type CustomDomainData, type CustomDomainId, type CustomDomainListParams, Dashboard, type DashboardSummary, type DatabaseCreateParams, type DatabaseCredentials, type DatabaseData, type DatabaseId, type DatabaseListParams, type DatabaseLogsParams, type DatabaseLogsResult, Databases, type DeploymentBuildData, type DeploymentCreateParams, type DeploymentData, DeploymentDomains, type DeploymentId, type DeploymentListParams, type DeploymentReleaseData, type DeploymentReleaseId, DeploymentReleases, DeploymentRuntimeInstances, type DeploymentServiceData, type DeploymentServiceId, type DeploymentServiceType, type DeploymentSourceType, type DeploymentState, type DeploymentUpdateParams, type DeploymentVersionData, type DeploymentVersionId, type DeploymentVersionKind, type DeploymentVersionState, DeploymentVersions, Deployments, Desktop$1 as Desktop, type DesktopActionResult, type DirEntry, type DirListResult, type DiscordSendTestParams, type DoubleClickParams, type DragParams, type EgressAllowlistRule, EgressAudit, type EgressAuditEvent, type EgressBindingData, EgressNetwork, type EgressPolicyData, type EgressPolicyMode, type EgressRuleEffect, type EgressSecretData, type EgressSecretScope, type EgressSecretType, EgressSecrets, type EgressSuggestion, Email, EmailCampaigns, EmailInbox, EmailTemplates, type EmbeddingCreateParams, Embeddings, Exec, type ExecParams, type ExecPythonParams, type ExecResult, type ExternalAttribution, type ExternalKeyCreateParams, type ExternalKeyData, ExternalKeys, type FileDeleteParams, type FileDownloadParams, type FileEntry, type FileExportParams, type FileExportResult, type FileListParams, type FileListResult, type FileStat, Files, FlatCustomDomains, type FsEntry, type FsListResponse, type FsStat, type FunctionCreateParams, type FunctionData, type FunctionId, type FunctionInvokeParams, type FunctionListParams, type FunctionUpdateParams, Functions, type GithubRepo, type GithubSshKey, type HealthCheckCreateParams, type HealthCheckData, type HealthCheckId, type HealthCheckListParams, type HealthCheckUpdateParams, HealthChecks, type HostCreateParams, type HostData, type HostEvent, type HostId, type HostListResponse, type HostStatus, type HostUpdateParams, InsufficientCreditsError, type IntegrationCatalogEntry, type IntegrationData, Integrations, type JobData, type JobEvent, type JobEventType, type JobId, type JobListResponse, type JobRunParams, type JobStatus, type KeyParams, type LaunchParams, type LinearCreateIssueParams, type ListAdminApiKeysParams, type ListAdminComputersParams, type ListAdminTenantsParams, type ListAdminUsersParams, Mcp, type McpDispatchParams, Miosa, type MiosaClientConfig, MiosaError, type MkdirParams, type ModeParams, Models, type MouseButton, NetworkError, NetworkPolicy, type NetworkPolicyData, type NetworkPolicyEffect, type NetworkPolicyProtocol, type NetworkPolicyRule, type NetworkPolicySetParams, NotFoundError, type NotificationPrefsUpdateParams, OAuthFlow, type OauthConnectParams, type OauthProvider, type OauthStartResult, type OauthStatusResult, type ObjectListParams, type AgentEvent as OcAgentEvent, type OcAgentSessionData, type AgentSessionListResponse as OcAgentSessionListResponse, type OcWorkspaceCreateParams, type OcWorkspaceData, type OcWorkspaceEvent, type OcWorkspaceListResponse, type OcWorkspaceStatus, type OcWorkspaceUpdateParams, OpenComputers, type OrgInvite, type OrgInviteCreated, type OrgInviteCreatedResponse, type OrgInviteListResponse, type OrgInvitePreview, type OrgInviteRevokeResponse, OrgInvites, type OrgRole, type OverviewData, type PolicyCreateParams, type PolicyListParams, type PolicyUpdateParams, type PresignParams, type PresignResult, ProjectAuth, type ProjectAuthEnableParams, type ProjectAuthStatus, type ProjectAuthUpdateParams, type ProjectIntegrationCatalogEntry, type ProjectIntegrationCreateParams, type ProjectIntegrationData, type ProjectIntegrationListParams, type ProjectIntegrationUpdateParams, ProjectIntegrations, ProviderDefaults, type ProviderKeyUpsertParams, type PublishFromSandboxParams, type PublishParams, type PublishResult, RateLimitError, type RegionData, Regions, type RollbackParams, type RulesListParams, type RuntimeInstanceData, type RuntimeInstanceId, type RuntimeInstanceState, type RuntimeLogsResult, SANDBOX_TEMPLATE, Sandbox, SandboxArtifacts, SandboxAudit, type SandboxBuildSpec, type SandboxBuildSpecError, type SandboxBuildSpecValidation, SandboxCommands, type SandboxCreateParams, type SandboxData, SandboxEnv, SandboxEvents, type SandboxExecOptions, type SandboxExecResult, SandboxFiles, type SandboxId, type SandboxListParams, SandboxNetwork, SandboxPreview, SandboxPreviews, SandboxSecrets, type SandboxState, SandboxTags, type SandboxTemplate, type SandboxTemplateBuild, type SandboxTemplateBuildCreateParams, type SandboxTemplateBuildResourceData, type SandboxTemplateBuildResourceId, type SandboxTemplateCreateParams, type SandboxTemplateList, type SandboxTemplateListParams, type SandboxTemplateResourceData, type SandboxTemplateResourceId, SandboxTemplates, SandboxTerminal, Sandboxes, ScopedFs, type ScrollDirection, type ScrollParams, type SecretCreateParams, type SecretData, type SecretId, type SecretListParams, type SecretRotateParams, type SecretSetParams, type SecretUpdateParams, type SessionId, Settings, type SettingsUpdateParams, type SizeData, type SlackSendTestParams, type SnapshotCreateParams, type SnapshotData, type SnapshotListResponse, type SnapshotProgressEvent, type SnapshotRestoreResult, type SnapshotStatus, SnapshotsStandalone, Storage, type StorageObjectData, type SuggestionsParams, type TemplateBuildCreateParams, type TemplateCreateParams, type TemplateData, Tenant, type TenantId, type TenantPlan, type TenantSummary, type WorkspaceId as TenantWorkspaceId, type TerminalCreateParams, TimeoutError, type TimeseriesParams, type TunnelAuthMode, type TunnelCreateParams, type TunnelData, type TunnelId, type TunnelListResponse, type TunnelUpdateParams, type TypeParams, type UpdateWorkspaceMemberRoleParams, Usage, type UsageReportParams, type UsageSession, type UsageSessionsParams, type UsageSummary, ValidationError, type VersionListParams, type VolumeCreateParams, type VolumeData, type VolumeId, type VolumeListParams, Volumes, type WaitParams, type WebhookCreateParams, type WebhookData, type WebhookDeliveryData, type WebhookDeliveryId, type WebhookId, type WebhookListParams, type WebhookUpdateParams, Webhooks, type WindowFocusParams, type WindowInfo, type WorkspaceComputerTemplateCreateParams, type WorkspaceCreateParams, type WorkspaceData, type WorkspaceId$1 as WorkspaceId, type WorkspaceInvite, type WorkspaceInviteCreatedResponse, type WorkspaceInviteListResponse, type WorkspaceInvitePreview, type WorkspaceInviteRevokeResponse, WorkspaceInvites, type WorkspaceMember, type WorkspaceMemberAddedResponse, type WorkspaceMemberDeleteResponse, type WorkspaceMemberListResponse, type WorkspaceMemberRecord, type WorkspaceMemberRecordResponse, WorkspaceMembers, type WorkspaceRole, type WorkspaceUpdateParams, Workspaces, type WsTicket };