@miosa/sdk 1.2.4 → 1.2.6

package/dist/index.js

@@ -1,4 +1,4 @@
-import { createHmac, timingSafeEqual, randomUUID } from 'crypto';
+import { randomUUID } from 'crypto';
 import EventEmitter from 'events';
 
 var __require = /* @__PURE__ */ ((x) => typeof require !== "undefined" ? require : typeof Proxy !== "undefined" ? new Proxy(x, {
@@ -601,6 +601,70 @@ var Admin = class {
   }
 };
 
+// src/resources/agent-runs.ts
+function stripUndefined(input) {
+  return Object.fromEntries(Object.entries(input).filter(([, value]) => value !== void 0));
+}
+function createBody(params) {
+  return stripUndefined({
+    target_id: params.target_id ?? params.targetId ?? params.sandbox_id ?? params.sandboxId ?? params.computer_id ?? params.computerId,
+    target_kind: params.target_kind ?? params.targetKind,
+    provider: params.provider,
+    prompt: params.prompt,
+    instruction: params.instruction,
+    command: params.command,
+    model: params.model,
+    cwd: params.cwd,
+    timeout: params.timeout,
+    metadata: params.metadata
+  });
+}
+function listQuery(params) {
+  return {
+    target_id: params.target_id ?? params.targetId ?? params.sandbox_id ?? params.sandboxId ?? params.computer_id ?? params.computerId,
+    limit: params.limit
+  };
+}
+function unwrapRun(response) {
+  const run = response.data ?? response.run;
+  if (!run) {
+    throw new Error("Agent run response was empty.");
+  }
+  return run;
+}
+function unwrapRuns(response) {
+  if (Array.isArray(response)) return response;
+  return response.data ?? response.runs ?? [];
+}
+var AgentRuns = class {
+  constructor(http) {
+    this.http = http;
+  }
+  http;
+  /** Dispatch a prompt to a sandbox/computer and persist the run record. */
+  async create(params) {
+    const response = await this.http.post("/agent-runs", createBody(params));
+    return unwrapRun(response);
+  }
+  /** Alias for create(), matching the product language. */
+  async run(params) {
+    return this.create(params);
+  }
+  /** List recent agent runs for the authenticated tenant. */
+  async list(params = {}) {
+    const response = await this.http.get(
+      "/agent-runs",
+      listQuery(params)
+    );
+    return unwrapRuns(response);
+  }
+  /** Fetch one persisted agent run. */
+  async get(runId) {
+    const response = await this.http.get(`/agent-runs/${runId}`);
+    return unwrapRun(response);
+  }
+};
+
 // src/resources/analytics.ts
 function unwrap(payload) {
   if (payload && typeof payload === "object") {
@@ -611,7 +675,7 @@ function unwrap(payload) {
   }
   return payload;
 }
-function stripUndefined(input) {
+function stripUndefined2(input) {
   return Object.fromEntries(
     Object.entries(input).filter(([, v]) => v !== void 0)
   );
@@ -623,13 +687,13 @@ var Analytics = class {
   http;
   /** Get the platform analytics overview. */
   async overview(filters = {}) {
-    const query = stripUndefined(filters);
+    const query = stripUndefined2(filters);
     const data = await this.http.get("/analytics/overview", query);
     return unwrap(data);
   }
   /** Get a timeseries for a metric over a period. */
   async timeseries(params = {}) {
-    const query = stripUndefined(params);
+    const query = stripUndefined2(params);
     const data = await this.http.get("/analytics/timeseries", query);
     return unwrap(data);
   }
@@ -650,7 +714,7 @@ function listItems(payload, candidateKeys = ["data", "keys", "api_keys", "items"
   }
   return [];
 }
-function stripUndefined2(input) {
+function stripUndefined3(input) {
   return Object.fromEntries(
     Object.entries(input).filter(([, v]) => v !== void 0)
   );
@@ -664,13 +728,13 @@ var ApiKeys = class {
   }
   http;
   async list(params = {}) {
-    const query = stripUndefined2({ ...params });
+    const query = stripUndefined3({ ...params });
     const data = await this.http.get("/api-keys", query);
     return listItems(data);
   }
   async create(params) {
     const { idempotencyKey: ikey, expiresAt, ...rest } = params;
-    const body = stripUndefined2({
+    const body = stripUndefined3({
       ...rest,
       expires_at: expiresAt ?? rest.expires_at
     });
@@ -683,7 +747,7 @@ var ApiKeys = class {
   }
   /** POST /api/v1/api-keys/scoped — L2 delegation token bound to one external user. */
   async createScoped(params) {
-    const body = stripUndefined2({
+    const body = stripUndefined3({
       external_user_id: params.externalUserId,
       scopes: params.scopes,
       expires_at: params.expiresAt
@@ -707,7 +771,7 @@ function unwrap3(payload) {
   }
   return payload;
 }
-function stripUndefined3(input) {
+function stripUndefined4(input) {
   return Object.fromEntries(
     Object.entries(input).filter(([, v]) => v !== void 0)
   );
@@ -719,7 +783,7 @@ var AuditLog = class {
   http;
   /** List audit-log events with optional filters. */
   async list(params = {}) {
-    const query = stripUndefined3(params);
+    const query = stripUndefined4(params);
     const data = await this.http.get("/audit-log", query);
     const result = unwrap3(data);
     if (Array.isArray(result)) return result;
@@ -857,7 +921,7 @@ function unwrap6(payload) {
   }
   return payload;
 }
-function stripUndefined4(input) {
+function stripUndefined5(input) {
   return Object.fromEntries(
     Object.entries(input).filter(([, v]) => v !== void 0)
   );
@@ -874,7 +938,7 @@ var Channels = class {
   http;
   /** List all channels for the tenant. */
   async list(params = {}) {
-    const query = stripUndefined4(params);
+    const query = stripUndefined5(params);
     const data = await this.http.get("/channels", query);
     const result = unwrap6(data);
     if (Array.isArray(result)) return result;
@@ -1734,7 +1798,7 @@ function unwrapList8(payload) {
   }
   return [];
 }
-function stripUndefined5(input) {
+function stripUndefined6(input) {
   return Object.fromEntries(
     Object.entries(input).filter(([, v]) => v !== void 0)
   );
@@ -1743,8 +1807,8 @@ function pickFirst(...values) {
   for (const v of values) if (v !== void 0) return v;
   return void 0;
 }
-function listQuery(params) {
-  return stripUndefined5({
+function listQuery2(params) {
+  return stripUndefined6({
     resource_id: pickFirst(params.resourceId, params.resource_id),
     resource_type: pickFirst(params.resourceType, params.resource_type),
     host: params.host,
@@ -1772,7 +1836,7 @@ var EgressAudit = class {
   async list(params = {}) {
     const data = await this.http.get(
       "/egress/audit",
-      listQuery(params)
+      listQuery2(params)
     );
     return unwrapList8(data);
   }
@@ -1799,7 +1863,7 @@ var EgressAudit = class {
       if (since !== void 0) queryParams.since = since;
       const data = await this.http.get(
         "/egress/audit",
-        listQuery(queryParams)
+        listQuery2(queryParams)
       );
       const events = unwrapList8(data);
       for (const event of events) {
@@ -1883,7 +1947,7 @@ function unwrapList9(payload) {
   }
   return [];
 }
-function stripUndefined6(input) {
+function stripUndefined7(input) {
   return Object.fromEntries(
     Object.entries(input).filter(([, v]) => v !== void 0)
   );
@@ -1893,7 +1957,7 @@ function pickFirst2(...values) {
   return void 0;
 }
 function ruleBody(host, params, effect) {
-  return stripUndefined6({
+  return stripUndefined7({
     host,
     effect,
     methods: params.methods,
@@ -1928,7 +1992,7 @@ var EgressNetwork = class {
   }
   /** List allowlist rules. */
   async rules(params = {}) {
-    const query = stripUndefined6({
+    const query = stripUndefined7({
       policy_id: pickFirst2(params.policyId, params.policy_id),
       resource_id: pickFirst2(params.resourceId, params.resource_id),
       resource_type: pickFirst2(params.resourceType, params.resource_type)
@@ -1943,7 +2007,7 @@ var EgressNetwork = class {
   // ── policies ──────────────────────────────────────────────────────────────
   /** List egress policies. */
   async policies(params = {}) {
-    const query = stripUndefined6({
+    const query = stripUndefined7({
       resource_id: pickFirst2(params.resourceId, params.resource_id),
       resource_type: pickFirst2(params.resourceType, params.resource_type)
     });
@@ -1952,7 +2016,7 @@ var EgressNetwork = class {
   }
   /** Create an egress policy. */
   async createPolicy(params) {
-    const body = stripUndefined6({
+    const body = stripUndefined7({
       name: params.name,
       mode: params.mode ?? "enforce",
       default_effect: pickFirst2(
@@ -1972,7 +2036,7 @@ var EgressNetwork = class {
   }
   /** Update an egress policy by id. */
   async updatePolicy(policyId, params) {
-    const body = stripUndefined6({
+    const body = stripUndefined7({
       mode: params.mode,
       default_effect: pickFirst2(params.defaultEffect, params.default_effect),
       name: params.name,
@@ -2000,7 +2064,7 @@ var EgressNetwork = class {
     if (policyId) {
       return this.updatePolicy(policyId, { mode });
     }
-    const body = resourceId !== void 0 && resourceType !== void 0 ? stripUndefined6({
+    const body = resourceId !== void 0 && resourceType !== void 0 ? stripUndefined7({
       mode,
       resource_id: resourceId,
       resource_type: resourceType
@@ -2014,7 +2078,7 @@ var EgressNetwork = class {
   // ── suggestions ───────────────────────────────────────────────────────────
   /** AI-generated allowlist suggestions from recent denied egress. */
   async suggestions(params = {}) {
-    const query = stripUndefined6({
+    const query = stripUndefined7({
       resource_id: pickFirst2(params.resourceId, params.resource_id),
       resource_type: pickFirst2(params.resourceType, params.resource_type),
       since: params.since ?? "7d"
@@ -2119,7 +2183,7 @@ function unwrapList10(payload) {
   }
   return [];
 }
-function stripUndefined7(input) {
+function stripUndefined8(input) {
   return Object.fromEntries(
     Object.entries(input).filter(([, v]) => v !== void 0)
   );
@@ -2129,7 +2193,7 @@ function pickFirst3(...values) {
   return void 0;
 }
 function setBody(params) {
-  return stripUndefined7({
+  return stripUndefined8({
     name: params.name,
     value: params.value,
     type: params.type ?? "api_key",
@@ -2149,8 +2213,8 @@ function setBody(params) {
     metadata: params.metadata
   });
 }
-function listQuery2(params) {
-  return stripUndefined7({
+function listQuery3(params) {
+  return stripUndefined8({
     scope: params.scope,
     type: params.type,
     workspace_id: pickFirst3(params.workspaceId, params.workspace_id),
@@ -2165,14 +2229,14 @@ function listQuery2(params) {
   });
 }
 function rotateBody(params) {
-  return stripUndefined7({
+  return stripUndefined8({
     value: pickFirst3(params.newValue, params.new_value, params.value),
     refresh_token: pickFirst3(params.refreshToken, params.refresh_token),
     expires_at: pickFirst3(params.expiresAt, params.expires_at)
   });
 }
 function bindingBody(params) {
-  return stripUndefined7({
+  return stripUndefined8({
     secret_id: pickFirst3(params.secretId, params.secret_id),
     resource_id: pickFirst3(params.resourceId, params.resource_id),
     resource_type: pickFirst3(params.resourceType, params.resource_type),
@@ -2180,14 +2244,14 @@ function bindingBody(params) {
   });
 }
 function bindingQuery(params) {
-  return stripUndefined7({
+  return stripUndefined8({
     resource_id: pickFirst3(params.resourceId, params.resource_id),
     resource_type: pickFirst3(params.resourceType, params.resource_type),
     secret_id: pickFirst3(params.secretId, params.secret_id)
   });
 }
 function oauthBody(params) {
-  return stripUndefined7({
+  return stripUndefined8({
     provider: params.provider,
     expose_as_env: pickFirst3(params.exposeAsEnv, params.expose_as_env),
     scope: params.scope,
@@ -2274,7 +2338,7 @@ var EgressSecrets = class {
   async list(params = {}) {
     const data = await this.http.get(
       "/egress/secrets",
-      listQuery2(params)
+      listQuery3(params)
     );
     return unwrapList10(data);
   }
@@ -3399,7 +3463,7 @@ function listItems2(payload, candidateKeys = ["data", "cron_jobs", "executions",
   }
   return [];
 }
-function stripUndefined8(input) {
+function stripUndefined9(input) {
   return Object.fromEntries(
     Object.entries(input).filter(([, v]) => v !== void 0)
   );
@@ -3413,7 +3477,7 @@ var CronJobs = class {
   }
   http;
   async list(params = {}) {
-    const query = stripUndefined8({ ...params });
+    const query = stripUndefined9({ ...params });
     const data = await this.http.get("/cron-jobs", query);
     return listItems2(data);
   }
@@ -3423,7 +3487,7 @@ var CronJobs = class {
   }
   async create(params) {
     const { idempotencyKey: ikey, ...rest } = params;
-    const body = stripUndefined8(rest);
+    const body = stripUndefined9(rest);
     const data = await this.http.request("/cron-jobs", {
       method: "POST",
       body,
@@ -3432,7 +3496,7 @@ var CronJobs = class {
     return unwrap20(data);
   }
   async update(jobId, params) {
-    const body = stripUndefined8(params);
+    const body = stripUndefined9(params);
     const data = await this.http.patch(`/cron-jobs/${jobId}`, body);
     return unwrap20(data);
   }
@@ -3517,7 +3581,7 @@ function listItems3(payload, candidateKeys = ["data", "databases", "items"]) {
   }
   return [];
 }
-function stripUndefined9(input) {
+function stripUndefined10(input) {
   return Object.fromEntries(
     Object.entries(input).filter(([, v]) => v !== void 0)
   );
@@ -3531,7 +3595,7 @@ var Databases = class {
   }
   http;
   async list(params = {}) {
-    const query = stripUndefined9({ ...params });
+    const query = stripUndefined10({ ...params });
     const data = await this.http.get("/databases", query);
     return listItems3(data);
   }
@@ -3548,7 +3612,7 @@ var Databases = class {
       size: _deprecatedSize,
       ...rest
     } = params;
-    const body = stripUndefined9({
+    const body = stripUndefined10({
       ...rest,
       engine_version: engine_version ?? version
     });
@@ -3591,7 +3655,7 @@ var Databases = class {
     return unwrap22(data);
   }
   async logs(databaseId, params = {}) {
-    const query = stripUndefined9({
+    const query = stripUndefined10({
       lines: params.lines,
       since: params.since
     });
@@ -3634,7 +3698,7 @@ function listItems4(payload, candidateKeys = ["items", "deployments", "versions"
   }
   return [];
 }
-function stripUndefined10(input) {
+function stripUndefined11(input) {
   return Object.fromEntries(
     Object.entries(input).filter(([, v]) => v !== void 0)
   );
@@ -3645,42 +3709,6 @@ function dockerDeployMetadata(metadata) {
     deployment_product: "docker_deploy"
   };
 }
-function dockerDeployProduct(deployment) {
-  return deployment.deployment_product ?? deployment.metadata?.["deployment_product"];
-}
-function dockerDeployHostId(deployment) {
-  const metadataHost = deployment.metadata?.["docker_deploy_host_id"];
-  return deployment.docker_deploy_host_id ?? (typeof metadataHost === "string" ? metadataHost : null);
-}
-function dockerDeployApp(deployment) {
-  const app = deployment.metadata?.["docker_deploy"];
-  if (!app || typeof app !== "object" || Array.isArray(app)) return null;
-  return app;
-}
-function dockerDeployAppPort(app) {
-  const url = app?.["url"];
-  if (typeof url !== "string") return null;
-  try {
-    const parsed = new URL(url);
-    const port = Number.parseInt(parsed.port, 10);
-    return Number.isInteger(port) ? port : null;
-  } catch {
-    return null;
-  }
-}
-function addDoctorCheck(checks, name, ok, message, details) {
-  checks.push({ name, ok, message, ...details ? { details } : {} });
-}
-function hostHealthy(host) {
-  return Boolean(
-    host && host.status === "active" && host.appliance_status === "healthy"
-  );
-}
-function probeUrl(publicUrl, probePath) {
-  const url = new URL(publicUrl);
-  url.pathname = probePath.startsWith("/") ? probePath : `/${probePath}`;
-  return url.toString();
-}
 var DeploymentVersions = class {
   constructor(http, deploymentId) {
     this.http = http;
@@ -3689,7 +3717,7 @@ var DeploymentVersions = class {
   http;
   deploymentId;
   async list(params = {}) {
-    const query = stripUndefined10({
+    const query = stripUndefined11({
       state: params.state,
       limit: params.limit,
       cursor: params.cursor,
@@ -3708,7 +3736,7 @@ var DeploymentVersions = class {
     return unwrap23(data);
   }
   async promote(versionId, opts = {}) {
-    const body = stripUndefined10({ environment: opts.environment });
+    const body = stripUndefined11({ environment: opts.environment });
     const data = await this.http.request(
       `/deployments/${this.deploymentId}/versions/${versionId}/promote`,
       {
@@ -3795,7 +3823,7 @@ var DeploymentDomains = class {
       `/deployments/${this.deploymentId}/domains`,
       {
         method: "POST",
-        body: stripUndefined10(body),
+        body: stripUndefined11(body),
         headers: { "Idempotency-Key": idempotencyKey4(params.idempotencyKey) }
       }
     );
@@ -3827,7 +3855,7 @@ var Deployments = class {
   http;
   async list(params = {}) {
     const projectId = params.projectId ?? params.project_id;
-    const query = stripUndefined10({
+    const query = stripUndefined11({
       project_id: projectId,
       state: params.state,
       limit: params.limit,
@@ -3845,7 +3873,7 @@ var Deployments = class {
     return unwrap23(data);
   }
   async create(params) {
-    const body = stripUndefined10({
+    const body = stripUndefined11({
       name: params.name,
       repo_url: params.repoUrl ?? params.repo_url,
       branch: params.branch,
@@ -3874,138 +3902,8 @@ var Deployments = class {
       metadata: dockerDeployMetadata(params.metadata)
     });
   }
-  /**
-   * Verify a Docker Deploy deployment before telling a user or agent it is
-   * live. Checks product markers, appliance host health, route metadata, and
-   * optionally probes the public URL.
-   */
-  async doctorDockerDeploy(deploymentId, params = {}) {
-    const checks = [];
-    const deployment = await this.get(deploymentId);
-    const metadata = deployment.metadata ?? {};
-    const product = dockerDeployProduct(deployment);
-    const hostId = dockerDeployHostId(deployment);
-    addDoctorCheck(
-      checks,
-      "deployment_product",
-      product === "docker_deploy",
-      product === "docker_deploy" ? "Deployment is marked for Docker Deploy." : `Expected deployment_product=docker_deploy, got ${String(product ?? "missing")}.`,
-      { deployment_product: product ?? null }
-    );
-    addDoctorCheck(
-      checks,
-      "docker_deploy_host_id",
-      Boolean(hostId),
-      hostId ? "Deployment has a Docker Deploy host id." : "Deployment has no docker_deploy_host_id.",
-      { docker_deploy_host_id: hostId }
-    );
-    let host;
-    if (hostId) {
-      try {
-        const rawHost = await this.http.get(
-          `/docker-deploy/hosts/${hostId}`
-        );
-        host = unwrap23(rawHost);
-        addDoctorCheck(
-          checks,
-          "docker_deploy_host_health",
-          hostHealthy(host),
-          hostHealthy(host) ? "Docker Deploy host is active and healthy." : `Docker Deploy host status=${host.status} appliance=${host.appliance_status}.`,
-          {
-            status: host.status,
-            appliance_status: host.appliance_status
-          }
-        );
-      } catch (error) {
-        addDoctorCheck(
-          checks,
-          "docker_deploy_host_health",
-          false,
-          error instanceof Error ? error.message : String(error)
-        );
-      }
-    }
-    const app = dockerDeployApp(deployment);
-    const appPort = dockerDeployAppPort(app);
-    const appRunning = app?.["status"] === "running" && appPort !== null;
-    addDoctorCheck(
-      checks,
-      "docker_deploy_app",
-      appRunning,
-      appRunning ? "Docker Deploy app metadata points at a running container." : "Deployment is missing running Docker Deploy app metadata.",
-      app ? {
-        app_id: app["app_id"],
-        container_id: app["container_id"],
-        status: app["status"],
-        url: app["url"],
-        expected_port: appPort
-      } : void 0
-    );
-    const runtime = metadata["runtime"];
-    const hasRuntimeRoute = typeof runtime === "object" && runtime !== null && typeof runtime["ip"] === "string" && typeof runtime["port"] === "number";
-    const runtimeRecord = hasRuntimeRoute && typeof runtime === "object" ? runtime : void 0;
-    const routeMatchesContainerPort = hasRuntimeRoute && (appPort === null || runtimeRecord?.["port"] === appPort);
-    addDoctorCheck(
-      checks,
-      "runtime_route",
-      hasRuntimeRoute && routeMatchesContainerPort,
-      hasRuntimeRoute && routeMatchesContainerPort ? "Deployment route points at the Docker container host port." : hasRuntimeRoute && appPort !== null ? `Deployment route port ${String(runtimeRecord?.["port"])} does not match Docker container host port ${appPort}.` : "Deployment is missing appliance runtime route metadata.",
-      runtimeRecord ? {
-        ...runtimeRecord,
-        expected_port: appPort,
-        docker_deploy_url: app?.["url"]
-      } : void 0
-    );
-    let probe;
-    const publicUrl = deployment.public_url;
-    const path = params.probePath ?? params.probe_path ?? "/";
-    if (publicUrl && typeof fetch === "function") {
-      const url = probeUrl(publicUrl, path);
-      const controller = new AbortController();
-      const timeout = setTimeout(
-        () => controller.abort(),
-        params.timeoutMs ?? params.timeout_ms ?? 1e4
-      );
-      try {
-        const response = await fetch(url, {
-          method: "GET",
-          signal: controller.signal
-        });
-        probe = { url, ok: response.ok, status: response.status };
-        addDoctorCheck(
-          checks,
-          "public_url_probe",
-          response.ok,
-          response.ok ? `Public URL returned HTTP ${response.status}.` : `Public URL returned HTTP ${response.status}.`,
-          { url, status: response.status }
-        );
-      } catch (error) {
-        probe = {
-          url,
-          ok: false,
-          error: error instanceof Error ? error.message : String(error)
-        };
-        addDoctorCheck(
-          checks,
-          "public_url_probe",
-          false,
-          probe.error ?? "Public URL probe failed.",
-          { url }
-        );
-      } finally {
-        clearTimeout(timeout);
-      }
-    }
-    return {
-      ok: checks.every((check) => check.ok),
-      deployment,
-      ...host ? { host } : {},
-      checks,
-      ...probe ? { probe } : {}
-    };
-  }
   async update(deploymentId, params) {
-    const body = stripUndefined10({
+    const body = stripUndefined11({
       name: params.name,
       branch: params.branch,
       build_command: params.buildCommand ?? params.build_command,
@@ -4022,7 +3920,7 @@ var Deployments = class {
     await this.http.delete(`/deployments/${deploymentId}`);
   }
   async publish(deploymentId, params) {
-    const body = stripUndefined10({
+    const body = stripUndefined11({
       source_sandbox_id: params.sourceSandboxId ?? params.source_sandbox_id,
       output_path: params.outputPath ?? params.output_path,
       entrypoint: params.entrypoint,
@@ -4044,7 +3942,7 @@ var Deployments = class {
    * phase. Prefer `publish()` once Phase 2B/3 lands.
    */
   async publishFromSandbox(sandboxId, params = {}) {
-    const body = stripUndefined10({
+    const body = stripUndefined11({
       name: params.name,
       deployment_id: params.deploymentId ?? params.deployment_id,
       output_path: params.outputPath ?? params.output_path,
@@ -4064,7 +3962,7 @@ var Deployments = class {
     return unwrap23(data);
   }
   async rollback(deploymentId, params = {}) {
-    const body = stripUndefined10({
+    const body = stripUndefined11({
       version_id: params.versionId ?? params.version_id
     });
     const data = await this.http.request(
@@ -4096,7 +3994,7 @@ var Deployments = class {
     return listItems4(data);
   }
   async setEnv(deploymentId, vars, opts = {}) {
-    const body = stripUndefined10({ env: vars, environment: opts.environment });
+    const body = stripUndefined11({ env: vars, environment: opts.environment });
     const data = await this.http.post(
       `/deployments/${deploymentId}/env`,
       body
@@ -4395,7 +4293,7 @@ function unwrap25(payload) {
   }
   return payload;
 }
-function stripUndefined11(input) {
+function stripUndefined12(input) {
   return Object.fromEntries(
     Object.entries(input).filter(([, v]) => v !== void 0)
   );
@@ -4414,7 +4312,7 @@ var ExternalKeys = class {
   }
   /** Create / register an external provider key. */
   async create(params) {
-    const body = stripUndefined11(params);
+    const body = stripUndefined12(params);
     const data = await this.http.post("/external-keys", body);
     return unwrap25(data);
   }
@@ -4449,7 +4347,7 @@ function listItems5(payload, candidateKeys = ["data", "domains", "items"]) {
   }
   return [];
 }
-function stripUndefined12(input) {
+function stripUndefined13(input) {
   return Object.fromEntries(
     Object.entries(input).filter(([, v]) => v !== void 0)
   );
@@ -4463,7 +4361,7 @@ var FlatCustomDomains = class {
   }
   http;
   async list(params = {}) {
-    const query = stripUndefined12({ ...params });
+    const query = stripUndefined13({ ...params });
     const data = await this.http.get("/custom-domains", query);
     return listItems5(data);
   }
@@ -4475,7 +4373,7 @@ var FlatCustomDomains = class {
       redirectPolicy,
       ...rest
     } = params;
-    const body = stripUndefined12({
+    const body = stripUndefined13({
       ...rest,
       resource_type: resourceType ?? rest.resource_type,
       resource_id: resourceId ?? rest.resource_id,
@@ -4508,7 +4406,7 @@ function listItems6(payload, candidateKeys = ["data", "functions", "items"]) {
   }
   return [];
 }
-function stripUndefined13(input) {
+function stripUndefined14(input) {
   return Object.fromEntries(
     Object.entries(input).filter(([, v]) => v !== void 0)
   );
@@ -4522,7 +4420,7 @@ var Functions = class {
   }
   http;
   async list(params = {}) {
-    const query = stripUndefined13({ ...params });
+    const query = stripUndefined14({ ...params });
     const data = await this.http.get("/functions", query);
     return listItems6(data);
   }
@@ -4532,7 +4430,7 @@ var Functions = class {
   }
   async create(params) {
     const { idempotencyKey: ikey, memoryMb, timeoutSec, ...rest } = params;
-    const body = stripUndefined13({
+    const body = stripUndefined14({
       ...rest,
       memory_mb: memoryMb ?? rest.memory_mb,
       timeout_sec: timeoutSec ?? rest.timeout_sec
@@ -4546,7 +4444,7 @@ var Functions = class {
   }
   async update(functionId, params) {
     const { memoryMb, timeoutSec, ...rest } = params;
-    const body = stripUndefined13({
+    const body = stripUndefined14({
       ...rest,
       memory_mb: memoryMb ?? rest.memory_mb,
       timeout_sec: timeoutSec ?? rest.timeout_sec
@@ -4592,7 +4490,7 @@ function listItems7(payload, candidateKeys = ["data", "health_checks", "items"])
   }
   return [];
 }
-function stripUndefined14(input) {
+function stripUndefined15(input) {
   return Object.fromEntries(
     Object.entries(input).filter(([, v]) => v !== void 0)
   );
@@ -4606,7 +4504,7 @@ var HealthChecks = class {
   }
   http;
   async list(params = {}) {
-    const query = stripUndefined14({ ...params });
+    const query = stripUndefined15({ ...params });
     const data = await this.http.get("/health-checks", query);
     return listItems7(data);
   }
@@ -4622,7 +4520,7 @@ var HealthChecks = class {
       expectedStatus,
       ...rest
     } = params;
-    const body = stripUndefined14({
+    const body = stripUndefined15({
       ...rest,
       interval_sec: intervalSec ?? rest.interval_sec,
       timeout_sec: timeoutSec ?? rest.timeout_sec,
@@ -4637,7 +4535,7 @@ var HealthChecks = class {
   }
   async update(checkId, params) {
     const { intervalSec, timeoutSec, expectedStatus, ...rest } = params;
-    const body = stripUndefined14({
+    const body = stripUndefined15({
       ...rest,
       interval_sec: intervalSec ?? rest.interval_sec,
       timeout_sec: timeoutSec ?? rest.timeout_sec,
@@ -4669,7 +4567,7 @@ function listItems8(payload) {
   if (Array.isArray(result)) return result;
   return [];
 }
-function stripUndefined15(input) {
+function stripUndefined16(input) {
   return Object.fromEntries(
     Object.entries(input).filter(([, v]) => v !== void 0)
   );
@@ -4721,7 +4619,7 @@ var Integrations = class {
   // ── Test hooks ─────────────────────────────────────────────────────────────
   /** Send a test message to the connected Slack channel. */
   async slackSendTest(params = {}) {
-    const body = stripUndefined15(params);
+    const body = stripUndefined16(params);
     const data = await this.http.post(
       "/integrations/slack/send-test",
       body
@@ -4730,7 +4628,7 @@ var Integrations = class {
   }
   /** Send a test message to the connected Discord channel. */
   async discordSendTest(params = {}) {
-    const body = stripUndefined15(params);
+    const body = stripUndefined16(params);
     const data = await this.http.post(
       "/integrations/discord/send-test",
       body
@@ -4745,7 +4643,7 @@ var Integrations = class {
   }
   /** Create a Linear issue via the connected workspace. */
   async linearCreateIssue(params = {}) {
-    const body = stripUndefined15(params);
+    const body = stripUndefined16(params);
     const data = await this.http.post(
       "/integrations/linear/create-issue",
       body
@@ -4764,7 +4662,7 @@ function unwrap30(payload) {
   }
   return payload;
 }
-function stripUndefined16(input) {
+function stripUndefined17(input) {
   return Object.fromEntries(
     Object.entries(input).filter(([, v]) => v !== void 0)
   );
@@ -4776,7 +4674,7 @@ var Mcp = class {
   http;
   /** Send a JSON-RPC request to the MCP endpoint. */
   async dispatch(params = {}) {
-    const body = stripUndefined16(params);
+    const body = stripUndefined17(params);
     const data = await this.http.post(
       "/mcp",
       Object.keys(body).length > 0 ? body : void 0
@@ -5451,7 +5349,7 @@ function resourcePayload(params) {
   return { resource_type, resource_id };
 }
 function authConfig(params) {
-  return stripUndefined17({
+  return stripUndefined18({
     ...params.config ?? {},
     signup_enabled: params.signup_enabled ?? params.signupEnabled,
     email_confirm_required: params.email_confirm_required ?? params.emailConfirmRequired,
@@ -5459,7 +5357,7 @@ function authConfig(params) {
   });
 }
 function requestBody(params) {
-  return stripUndefined17({
+  return stripUndefined18({
     ...resourcePayload(params),
     config: authConfig(params)
   });
@@ -5473,7 +5371,7 @@ function unwrap32(payload) {
   }
   return payload;
 }
-function stripUndefined17(input) {
+function stripUndefined18(input) {
   return Object.fromEntries(
     Object.entries(input).filter(([, v]) => v !== void 0)
   );
@@ -5528,7 +5426,7 @@ function listItems9(payload) {
   if (Array.isArray(result)) return result;
   return [];
 }
-function stripUndefined18(input) {
+function stripUndefined19(input) {
   return Object.fromEntries(
     Object.entries(input).filter(([, v]) => v !== void 0)
   );
@@ -5545,7 +5443,7 @@ var ProjectIntegrations = class {
   http;
   /** List project integrations. */
   async list(params = {}) {
-    const query = stripUndefined18(params);
+    const query = stripUndefined19(params);
     const data = await this.http.get("/project-integrations", query);
     return listItems9(data);
   }
@@ -5709,6 +5607,10 @@ function encodeContent(content) {
   return btoa(bin);
 }
 var SANDBOX_TEMPLATE = "miosa-sandbox";
+var AGENT_WORKSPACE_TIMEOUT_SEC = 86400;
+var AGENT_WORKSPACE_IDLE_TIMEOUT_SEC = 1800;
+var AGENT_WORKSPACE_SNAPSHOT_EXPIRATION_DAYS = 30;
+var AGENT_WORKSPACE_KEEP_LAST_SNAPSHOTS = 1;
 function unwrap36(payload) {
   if (payload !== null && typeof payload === "object" && "data" in payload && payload.data !== void 0) {
     return payload.data;
@@ -5723,19 +5625,30 @@ function listItems11(payload) {
   if ("items" in payload && Array.isArray(payload.items)) return payload.items;
   return [];
 }
-function createBody(params = {}) {
+function createBody2(params = {}) {
   const templateId = params.templateId ?? params.template_id ?? params.image ?? SANDBOX_TEMPLATE;
-  return stripUndefined19({
+  const persistent = params.persistent;
+  const snapshotExpirationSec = snapshotExpirationSeconds(params);
+  const keepLastSnapshots = params.keepLastSnapshots ?? params.keep_last_snapshots;
+  const metadata = { ...params.metadata ?? {} };
+  if (persistent !== void 0) metadata.miosa_persistent = persistent;
+  if (snapshotExpirationSec !== void 0) {
+    metadata.snapshot_expiration_sec = snapshotExpirationSec;
+  }
+  if (keepLastSnapshots !== void 0) {
+    metadata.keep_last_snapshots = keepLastSnapshots;
+  }
+  return stripUndefined20({
     template_id: templateId,
     cpu_count: params.cpuCount ?? params.cpu_count,
     memory_mb: params.memoryMb ?? params.memory_mb,
     disk_mb: params.diskMb ?? params.disk_mb,
     disk_size_mb: params.diskSizeMb ?? params.disk_size_mb,
-    timeout_sec: params.timeoutSec ?? params.timeout_sec,
-    idle_timeout_sec: params.idleTimeoutSec ?? params.idle_timeout_sec,
+    timeout_sec: params.timeoutSec ?? params.timeout_sec ?? (persistent === true ? 86400 : void 0),
+    idle_timeout_sec: params.idleTimeoutSec ?? params.idle_timeout_sec ?? (persistent === true ? 1800 : void 0),
     always_on: params.alwaysOn ?? params.always_on,
     env: params.env,
-    metadata: params.metadata,
+    metadata: Object.keys(metadata).length > 0 ? metadata : void 0,
     services: params.services,
     readiness_probe: params.readinessProbe ?? params.readiness_probe,
     database: params.database,
@@ -5753,18 +5666,24 @@ function createBody(params = {}) {
   });
 }
 function execBody(command, options = {}) {
-  return stripUndefined19({
+  return stripUndefined20({
     command,
     cwd: options.cwd ?? options.workingDir ?? options.working_dir,
     env: options.env,
     timeout: options.timeout ?? options.timeoutSec ?? options.timeout_sec
   });
 }
-function stripUndefined19(input) {
+function stripUndefined20(input) {
   return Object.fromEntries(
     Object.entries(input).filter(([, value]) => value !== void 0)
   );
 }
+function snapshotExpirationSeconds(params) {
+  const seconds = params.snapshotExpirationSec ?? params.snapshot_expiration_sec;
+  if (seconds !== void 0) return seconds;
+  const days = params.snapshotExpirationDays ?? params.snapshot_expiration_days;
+  return days === void 0 ? void 0 : days * 86400;
+}
 var SandboxCommands = class {
   constructor(sandbox) {
     this.sandbox = sandbox;
@@ -6262,10 +6181,25 @@ var Sandbox = class _Sandbox {
    * PATCH /api/v1/sandboxes/{id} — update mutable sandbox fields.
    */
   async update(params) {
-    const body = {};
-    for (const [k, v] of Object.entries(params)) {
-      if (v !== void 0) body[k] = v;
+    const snapshotExpirationSec = snapshotExpirationSeconds(params);
+    const metadata = { ...params.metadata ?? {} };
+    if (params.persistent !== void 0) metadata.miosa_persistent = params.persistent;
+    if (snapshotExpirationSec !== void 0) {
+      metadata.snapshot_expiration_sec = snapshotExpirationSec;
     }
+    const keepLastSnapshots = params.keepLastSnapshots ?? params.keep_last_snapshots;
+    if (keepLastSnapshots !== void 0) {
+      metadata.keep_last_snapshots = keepLastSnapshots;
+    }
+    const body = stripUndefined20({
+      name: params.name,
+      slug: params.slug,
+      tags: params.tags,
+      metadata: Object.keys(metadata).length > 0 ? metadata : void 0,
+      always_on: params.always_on ?? params.alwaysOn,
+      timeout_sec: params.timeout_sec ?? params.timeoutSec,
+      idle_timeout_sec: params.idle_timeout_sec ?? params.idleTimeoutSec
+    });
     const data = unwrap36(
       await this.http.patch(
         `/sandboxes/${this.id}`,
@@ -6275,6 +6209,16 @@ var Sandbox = class _Sandbox {
     this.data = data;
     return this;
   }
+  async extend(timeoutSec) {
+    const data = unwrap36(
+      await this.http.post(
+        `/sandboxes/${this.id}/extend`,
+        { timeout_sec: timeoutSec }
+      )
+    );
+    this.data = data;
+    return this;
+  }
   /**
    * POST /api/v1/sandboxes/{id}/preview-token → {token, url, expires_at, scope}
    */
@@ -6312,7 +6256,7 @@ var Sandbox = class _Sandbox {
     const idempotencyKey11 = params.idempotencyKey ?? params.idempotency_key;
     const requestOptions = {
       method: "POST",
-      body: stripUndefined19({
+      body: stripUndefined20({
         name: params.name,
         deployment_id: params.deploymentId ?? params.deployment_id,
         output_path: params.outputPath ?? params.output_path ?? params.path ?? params.sourcePath ?? params.source_path,
@@ -6477,11 +6421,37 @@ var Sandboxes = class {
     this.http = http;
   }
   http;
+  /**
+   * Create a persistent agent workspace.
+   *
+   * This is the preferred entry point for AI builders, coding agents, and
+   * product workspaces. It gives the sandbox a stable name, a longer interactive
+   * timeout, and metadata that makes the workspace easy to identify later. The
+   * agent should create/edit files in `/workspace`, run installs/tests/builds
+   * inside the sandbox, expose previews from the sandbox, and publish from the
+   * sandbox when ready.
+   */
+  async createAgentWorkspace(params) {
+    const metadata = {
+      ...params.metadata ?? {},
+      miosa_workspace_kind: "agent_workspace"
+    };
+    return this.getOrCreate({
+      persistent: true,
+      timeoutSec: AGENT_WORKSPACE_TIMEOUT_SEC,
+      idleTimeoutSec: AGENT_WORKSPACE_IDLE_TIMEOUT_SEC,
+      snapshotExpirationDays: AGENT_WORKSPACE_SNAPSHOT_EXPIRATION_DAYS,
+      keepLastSnapshots: AGENT_WORKSPACE_KEEP_LAST_SNAPSHOTS,
+      waitUntilReady: true,
+      ...params,
+      metadata
+    });
+  }
   async create(params = {}) {
     const idempotencyKey11 = params.idempotencyKey ?? params.idempotency_key;
     const requestOptions = {
       method: "POST",
-      body: createBody(params)
+      body: createBody2(params)
     };
     if (idempotencyKey11) {
       requestOptions.headers = { "Idempotency-Key": idempotencyKey11 };
@@ -6513,6 +6483,37 @@ var Sandboxes = class {
   connect(id) {
     return this.get(id);
   }
+  async getByName(name) {
+    const data = unwrap36(
+      await this.http.get(
+        `/sandboxes/by-name/${encodeURIComponent(name)}`
+      )
+    );
+    return new Sandbox(this.http, data);
+  }
+  /**
+   * Idempotently obtain a persistent sandbox by stable name.
+   *
+   * If the sandbox exists, it is returned. If it is paused and `resume !== false`,
+   * it is resumed first. If it does not exist, it is created with the supplied
+   * params. Destroyed sandboxes are permanent and are not resumed by this helper.
+   */
+  async getOrCreate(params) {
+    let sandbox;
+    try {
+      sandbox = await this.getByName(params.name);
+    } catch (error) {
+      if (!(error instanceof NotFoundError)) throw error;
+      sandbox = await this.create(params);
+    }
+    if (sandbox.state === "paused" && params.resume !== false) {
+      await sandbox.resume();
+    }
+    if (params.waitUntilReady === true) {
+      await sandbox.waitUntilReady({ timeout: params.waitTimeoutSec ?? 60 });
+    }
+    return sandbox;
+  }
   async delete(id) {
     await this.http.delete(`/sandboxes/${id}`);
   }
@@ -6540,7 +6541,7 @@ var Sandboxes = class {
   async createTemplate(params) {
     const response = await this.http.post(
       "/sandbox-templates",
-      stripUndefined19({
+      stripUndefined20({
         name: params.name,
         slug: params.slug,
         description: params.description,
@@ -6553,7 +6554,7 @@ var Sandboxes = class {
   async createTemplateBuild(templateId, params = {}) {
     const response = await this.http.post(
       `/sandbox-templates/${templateId}/builds`,
-      stripUndefined19({
+      stripUndefined20({
         build_spec: params.buildSpec ?? params.build_spec,
         metadata: params.metadata
       })
@@ -6598,7 +6599,7 @@ function listItems12(payload, candidateKeys = ["data", "templates", "builds", "i
   }
   return [];
 }
-function stripUndefined20(input) {
+function stripUndefined21(input) {
   return Object.fromEntries(
     Object.entries(input).filter(([, v]) => v !== void 0)
   );
@@ -6635,7 +6636,7 @@ var SandboxTemplates = class {
       name,
       ...rest
     } = params;
-    const body = stripUndefined20({
+    const body = stripUndefined21({
       name,
       build_spec: buildSpec ?? build_spec,
       ...rest
@@ -6669,7 +6670,7 @@ var SandboxTemplates = class {
   }
   async createBuild(templateId, params = {}) {
     const { idempotencyKey: ikey, ...rest } = params;
-    const body = stripUndefined20(rest);
+    const body = stripUndefined21(rest);
     const data = await this.http.request(
       `/sandbox-templates/${templateId}/builds`,
       {
@@ -6703,7 +6704,7 @@ function listItems13(payload) {
   if (Array.isArray(result)) return result;
   return [];
 }
-function stripUndefined21(input) {
+function stripUndefined22(input) {
   return Object.fromEntries(
     Object.entries(input).filter(([, v]) => v !== void 0)
   );
@@ -6720,7 +6721,7 @@ var Settings = class {
   }
   /** Update tenant settings. */
   async update(params) {
-    const body = stripUndefined21(params);
+    const body = stripUndefined22(params);
     const data = await this.http.put("/settings", body);
     return unwrap38(data);
   }
@@ -6732,7 +6733,7 @@ var Settings = class {
   }
   /** Update tenant branding. */
   async updateBranding(params) {
-    const body = stripUndefined21(params);
+    const body = stripUndefined22(params);
     const data = await this.http.put("/settings/branding", body);
     return unwrap38(data);
   }
@@ -6765,7 +6766,7 @@ var Settings = class {
   }
   /** Create or update a BYOK provider key. */
   async upsertProviderKey(provider, params) {
-    const body = stripUndefined21(params);
+    const body = stripUndefined22(params);
     const data = await this.http.put(
       `/settings/provider-keys/${provider}`,
       body
@@ -6833,7 +6834,7 @@ function listItems14(payload, candidateKeys = ["data", "buckets", "objects", "it
   }
   return [];
 }
-function stripUndefined22(input) {
+function stripUndefined23(input) {
   return Object.fromEntries(
     Object.entries(input).filter(([, v]) => v !== void 0)
   );
@@ -6850,7 +6851,7 @@ var Storage = class {
   }
   async createBucket(params) {
     const { name, public: isPublic, visibility, ...rest } = params;
-    const body = stripUndefined22({
+    const body = stripUndefined23({
       name,
       visibility: visibility ?? (isPublic === void 0 ? void 0 : isPublic ? "public" : "private"),
       ...rest
@@ -6867,7 +6868,7 @@ var Storage = class {
   }
   // ── Objects ────────────────────────────────────────────────────────────────
   async listObjects(bucketId, params = {}) {
-    const query = stripUndefined22({
+    const query = stripUndefined23({
       prefix: params.prefix,
       max_keys: params.max_keys ?? params.maxKeys ?? params.limit,
       marker: params.marker ?? params.cursor
@@ -6901,7 +6902,7 @@ var Storage = class {
   // ── Presigned URLs ─────────────────────────────────────────────────────────
   async presign(bucketId, params) {
     const operationMethod = params.operation === "put" ? "PUT" : params.operation === "get" ? "GET" : void 0;
-    const body = stripUndefined22({
+    const body = stripUndefined23({
       key: params.key,
       method: params.method ?? operationMethod ?? "GET",
       expires_in: params.expiresIn ?? params.expires_in ?? params.expiresInSec ?? params.expires_in_sec ?? 3600
@@ -7003,96 +7004,22 @@ var OrgInvites = class {
 function unwrap41(payload) {
   if (payload && typeof payload === "object") {
     const p = payload;
-    for (const k of ["data", "tenant", "branding", "items"]) {
+    for (const k of ["data", "tenant", "items"]) {
       if (k in p) return p[k];
     }
   }
   return payload;
 }
-var PreviewDomain = class {
-  constructor(http) {
-    this.http = http;
-  }
-  http;
-  /** Get the tenant's white-label preview domain settings. */
-  async get() {
-    const data = await this.http.get("/tenant/preview-domain");
-    return unwrap41(data);
-  }
-  /** Set the tenant's white-label preview domain. */
-  async set(domain) {
-    const data = await this.http.put("/tenant/preview-domain", {
-      preview_domain: domain
-    });
-    return unwrap41(data);
-  }
-  /** Re-run DNS verification for the configured preview domain. */
-  async verify() {
-    const data = await this.http.post(
-      "/tenant/preview-domain/verify",
-      {}
-    );
-    return unwrap41(data);
-  }
-  /** Remove the tenant's custom preview domain. */
-  async delete() {
-    await this.http.delete("/tenant/preview-domain");
-  }
-};
-var Branding = class {
-  constructor(http) {
-    this.http = http;
-  }
-  http;
-  /** Get tenant branding used by white-label hosted surfaces. */
-  async get() {
-    const data = await this.http.get("/tenant/branding");
-    return unwrap41(data);
-  }
-  /** Update tenant branding used by white-label hosted surfaces. */
-  async set(params) {
-    const body = Object.fromEntries(
-      Object.entries(params).filter(([, v]) => v !== void 0)
-    );
-    const data = await this.http.put("/tenant/branding", {
-      branding: body
-    });
-    return unwrap41(data);
-  }
-  /** Reset tenant branding to platform defaults. */
-  async delete() {
-    await this.http.delete("/tenant/branding");
-  }
-};
 var Tenant = class {
-  http;
-  preview_domain;
-  branding;
-  /** camelCase alias for SDK consumers that avoid snake_case properties. */
-  previewDomain;
   constructor(http) {
     this.http = http;
-    this.preview_domain = new PreviewDomain(http);
-    this.previewDomain = this.preview_domain;
-    this.branding = new Branding(http);
   }
+  http;
   /** Get the current tenant's plan, limits, and live usage counters. */
   async current() {
     const data = await this.http.get("/tenant/plan");
     return unwrap41(data);
   }
-  /** Convenience alias for `tenant.branding.get()`. */
-  async getBranding() {
-    return this.branding.get();
-  }
-  /** Convenience alias for `tenant.branding.set(...)`. */
-  async setBranding(params) {
-    return this.branding.set(params);
-  }
-  /** Convenience alias for `tenant.branding.delete()`. */
-  async deleteBranding() {
-    await this.branding.delete();
-  }
 };
 
 // src/resources/usage.ts
@@ -7105,7 +7032,7 @@ function unwrap42(payload) {
   }
   return payload;
 }
-function stripUndefined23(input) {
+function stripUndefined24(input) {
   return Object.fromEntries(
     Object.entries(input).filter(([, v]) => v !== void 0)
   );
@@ -7122,7 +7049,7 @@ var Usage = class {
   }
   /** List per-session metering events. */
   async sessions(params = {}) {
-    const query = stripUndefined23(params);
+    const query = stripUndefined24(params);
     const data = await this.http.get("/usage/sessions", query);
     const result = unwrap42(data);
     if (Array.isArray(result)) return result;
@@ -7130,7 +7057,7 @@ var Usage = class {
   }
   /** Get a usage report for a period. */
   async report(params = {}) {
-    const query = stripUndefined23(params);
+    const query = stripUndefined24(params);
     const data = await this.http.get("/usage/summary", query);
     return unwrap42(data);
   }
@@ -7151,7 +7078,7 @@ function listItems15(payload, candidateKeys = ["data", "volumes", "items"]) {
   }
   return [];
 }
-function stripUndefined24(input) {
+function stripUndefined25(input) {
   return Object.fromEntries(
     Object.entries(input).filter(([, v]) => v !== void 0)
   );
@@ -7165,7 +7092,7 @@ var Volumes = class {
   }
   http;
   async list(params = {}) {
-    const query = stripUndefined24({ ...params });
+    const query = stripUndefined25({ ...params });
     const data = await this.http.get("/volumes", query);
     return listItems15(data);
   }
@@ -7175,7 +7102,7 @@ var Volumes = class {
   }
   async create(params) {
     const { idempotencyKey: ikey, sizeGb, ...rest } = params;
-    const body = stripUndefined24({
+    const body = stripUndefined25({
       ...rest,
       size_gb: sizeGb ?? rest.size_gb
     });
@@ -7206,7 +7133,7 @@ function listItems16(payload, candidateKeys = ["data", "webhooks", "deliveries",
   }
   return [];
 }
-function stripUndefined25(input) {
+function stripUndefined26(input) {
   return Object.fromEntries(
     Object.entries(input).filter(([, v]) => v !== void 0)
   );
@@ -7214,44 +7141,13 @@ function stripUndefined25(input) {
 function idempotencyKey10(key) {
   return key ?? randomUUID();
 }
-function bodyBuffer(body) {
-  if (Buffer.isBuffer(body)) return body;
-  if (typeof body === "string") return Buffer.from(body, "utf8");
-  return Buffer.from(body);
-}
-function verifySignature(body, header, secret, toleranceSec = 300) {
-  const parts = Object.fromEntries(
-    header.split(",").map((chunk) => chunk.split("=", 2)).filter(([key, value]) => key && value)
-  );
-  const timestamp = parts.t;
-  const received = parts.v1;
-  if (!timestamp || !received || !secret) return false;
-  const unixSeconds = Number(timestamp);
-  if (!Number.isFinite(unixSeconds)) return false;
-  const ageSec = Math.abs(Date.now() / 1e3 - unixSeconds);
-  if (ageSec > toleranceSec) {
-    throw new Error("webhook timestamp too old");
-  }
-  const rawBody = bodyBuffer(body);
-  const signed = Buffer.concat([Buffer.from(`${timestamp}.`), rawBody]);
-  const expected = createHmac("sha256", secret).update(signed).digest("hex");
-  try {
-    return timingSafeEqual(
-      Buffer.from(expected, "utf8"),
-      Buffer.from(received, "utf8")
-    );
-  } catch {
-    return false;
-  }
-}
 var Webhooks = class {
   constructor(http) {
     this.http = http;
   }
   http;
-  static verifySignature = verifySignature;
   async list(params = {}) {
-    const query = stripUndefined25({ ...params });
+    const query = stripUndefined26({ ...params });
     const data = await this.http.get("/webhooks", query);
     return listItems16(data);
   }
@@ -7261,7 +7157,7 @@ var Webhooks = class {
   }
   async create(params) {
     const { idempotencyKey: ikey, ...rest } = params;
-    const body = stripUndefined25(rest);
+    const body = stripUndefined26(rest);
     const data = await this.http.request("/webhooks", {
       method: "POST",
       body,
@@ -7270,7 +7166,7 @@ var Webhooks = class {
     return unwrap44(data);
   }
   async update(webhookId, params) {
-    const body = stripUndefined25(params);
+    const body = stripUndefined26(params);
     const data = await this.http.patch(`/webhooks/${webhookId}`, body);
     return unwrap44(data);
   }
@@ -7456,6 +7352,8 @@ var DEFAULT_MAX_RETRIES2 = 3;
 var Miosa = class {
   /** Per-workspace user roster — list, add, update role, remove. */
   workspaceMembers;
+  /** Target-agnostic prompt dispatch to sandboxes/computers with durable records. */
+  agentRuns;
   /**
    * Workspace invite flow — create invite, list, revoke, preview, accept.
    * Sending to an email already in the org adds the user directly.
@@ -7578,6 +7476,7 @@ var Miosa = class {
       timeout: config.timeout ?? DEFAULT_TIMEOUT2,
       maxRetries: config.maxRetries ?? DEFAULT_MAX_RETRIES2
     });
+    this.agentRuns = new AgentRuns(this.http);
     this.workspaceMembers = new WorkspaceMembers(this.http);
     this.workspaceInvites = new WorkspaceInvites(this.http);
     this.orgInvites = new OrgInvites(this.http);
@@ -7627,6 +7526,162 @@ var Miosa = class {
   }
 };
 
-export { Admin, Analytics, ApiKeys, AuditLog, AuthError, Benchmarks, BuilderSessions, Channels, Checkpoints, CommandCenter, Community, Completions, Computer, ComputerAudit, ComputerAutoStop, ComputerEnv, ComputerInbox, ComputerLogs, ComputerNetwork, ComputerOsa, ComputerPorts, ComputerSecrets, ComputerTerminal, ComputerVolumes, Computers, Credits, CronJobs, Dashboard, Databases, DeploymentDomains, DeploymentReleases, DeploymentRuntimeInstances, DeploymentVersions, Deployments, Desktop, DockerDeploy, EgressAudit, EgressNetwork, EgressSecrets, Email, EmailCampaigns, EmailInbox, EmailTemplates, Embeddings, Exec, ExternalKeys, Files, FlatCustomDomains, Functions, HealthChecks, InsufficientCreditsError, Integrations, Mcp, Miosa, MiosaError, Models, NetworkError, NetworkPolicy, NotFoundError, OAuthFlow, OpenComputers, OrgInvites, ProjectAuth, ProjectIntegrations, ProviderDefaults, RateLimitError, Regions, SANDBOX_TEMPLATE, Sandbox, SandboxArtifacts, SandboxAudit, SandboxCommands, SandboxEnv, SandboxEvents, SandboxFiles, SandboxNetwork, SandboxPreview, SandboxPreviews, SandboxSecrets, SandboxTags, SandboxTemplates, SandboxTerminal, Sandboxes, ScopedFs, Settings, SnapshotsStandalone, Storage, Tenant, TimeoutError, Usage, ValidationError, Volumes, Webhooks, WorkspaceInvites, WorkspaceMembers, verifySignature };
+// src/resources/app-auth.ts
+function unwrapSession(data) {
+  const d = data && typeof data === "object" && "data" in data ? data.data : data;
+  const userId = d.user_id ?? d.userId;
+  const token = d.token ?? d.access_token;
+  const expiresAt = d.expires_at ?? d.expiresAt ?? "";
+  if (!userId || !token) {
+    throw new Error(
+      `AppAuth: unexpected response shape \u2014 got: ${JSON.stringify(d)}`
+    );
+  }
+  return {
+    userId,
+    token,
+    expiresAt
+  };
+}
+function base64UrlDecode(s) {
+  const padded = s.replace(/-/g, "+").replace(/_/g, "/");
+  const bin = atob(padded);
+  const bytes = new Uint8Array(bin.length);
+  for (let i = 0; i < bin.length; i++) {
+    bytes[i] = bin.charCodeAt(i);
+  }
+  return bytes;
+}
+var AppAuth = class {
+  baseUrl;
+  resourceType;
+  resourceId;
+  jwtSecret;
+  constructor(config) {
+    const authUrl = config.authUrl ?? (typeof process !== "undefined" ? process.env["AUTH_URL"] : void 0);
+    if (!authUrl) {
+      throw new Error(
+        "AppAuth: authUrl is required. Pass authUrl in config or set AUTH_URL env var."
+      );
+    }
+    if (!config.resourceType || !config.resourceId) {
+      throw new Error("AppAuth: resourceType and resourceId are required.");
+    }
+    this.baseUrl = authUrl.replace(/\/$/, "");
+    this.resourceType = config.resourceType;
+    this.resourceId = config.resourceId;
+    this.jwtSecret = config.jwtSecret ?? (typeof process !== "undefined" ? process.env["AUTH_JWT_SECRET"] : void 0);
+  }
+  /** POST /app-auth/:resourceType/:resourceId/signup */
+  async signup(email, password) {
+    return unwrapSession(await this._post("signup", { email, password }));
+  }
+  /** POST /app-auth/:resourceType/:resourceId/login */
+  async login(email, password) {
+    return unwrapSession(await this._post("login", { email, password }));
+  }
+  /**
+   * POST /app-auth/:resourceType/:resourceId/verify
+   * Verifies an email confirmation or magic-link token issued by the backend.
+   */
+  async verify(token) {
+    return unwrapSession(await this._post("verify", { token }));
+  }
+  /** POST /app-auth/:resourceType/:resourceId/password-reset */
+  async passwordReset(email) {
+    const data = await this._post("password-reset", { email });
+    return { ok: true, ...data };
+  }
+  /**
+   * POST /app-auth/:resourceType/:resourceId/logout
+   * Invalidates the given bearer token server-side.
+   */
+  async logout(token) {
+    const data = await this._post("logout", { token });
+    return { ok: true, ...data };
+  }
+  /**
+   * GET /app-auth/:resourceType/:resourceId/me
+   * Returns the session for the bearer token.
+   */
+  async me(token) {
+    const url = `${this.baseUrl}/app-auth/${this.resourceType}/${this.resourceId}/me`;
+    const resp = await fetch(url, {
+      method: "GET",
+      headers: {
+        "Content-Type": "application/json",
+        Authorization: `Bearer ${token}`
+      }
+    });
+    if (!resp.ok) {
+      const body = await resp.text();
+      throw new Error(`AppAuth me failed (${resp.status}): ${body}`);
+    }
+    return unwrapSession(await resp.json());
+  }
+  /**
+   * Verifies a JWT token locally using HS256 + AUTH_JWT_SECRET.
+   *
+   * Does NOT make a network call. Throws if the signature is invalid or the
+   * token is expired. Returns the decoded payload on success.
+   */
+  async verifyToken(token) {
+    if (!this.jwtSecret) {
+      throw new Error(
+        "AppAuth.verifyToken: jwtSecret is required. Pass jwtSecret in config or set AUTH_JWT_SECRET env var."
+      );
+    }
+    const parts = token.split(".");
+    if (parts.length !== 3) {
+      throw new Error("AppAuth.verifyToken: malformed JWT \u2014 expected 3 parts");
+    }
+    const [headerB64, payloadB64, signatureB64] = parts;
+    const payloadJson = new TextDecoder().decode(base64UrlDecode(payloadB64));
+    const payload = JSON.parse(payloadJson);
+    const now = Math.floor(Date.now() / 1e3);
+    if (typeof payload.exp === "number" && payload.exp < now) {
+      throw new Error(
+        `AppAuth.verifyToken: token expired at ${new Date(payload.exp * 1e3).toISOString()}`
+      );
+    }
+    const encoder = new TextEncoder();
+    const signingInput = `${headerB64}.${payloadB64}`;
+    const secretBytes = encoder.encode(this.jwtSecret);
+    const key = await crypto.subtle.importKey(
+      "raw",
+      secretBytes,
+      { name: "HMAC", hash: "SHA-256" },
+      false,
+      ["verify"]
+    );
+    const signatureBytes = base64UrlDecode(signatureB64).buffer;
+    const valid = await crypto.subtle.verify(
+      "HMAC",
+      key,
+      signatureBytes,
+      encoder.encode(signingInput)
+    );
+    if (!valid) {
+      throw new Error("AppAuth.verifyToken: invalid JWT signature");
+    }
+    return payload;
+  }
+  // ── Private ──────────────────────────────────────────────────────────────────
+  async _post(action, body) {
+    const url = `${this.baseUrl}/app-auth/${this.resourceType}/${this.resourceId}/${action}`;
+    const resp = await fetch(url, {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify(body)
+    });
+    if (!resp.ok) {
+      const text = await resp.text();
+      throw new Error(`AppAuth ${action} failed (${resp.status}): ${text}`);
+    }
+    return resp.json();
+  }
+};
+
+export { Admin, AgentRuns, Analytics, ApiKeys, AppAuth, AuditLog, AuthError, Benchmarks, BuilderSessions, Channels, Checkpoints, CommandCenter, Community, Completions, Computer, ComputerAudit, ComputerAutoStop, ComputerEnv, ComputerInbox, ComputerLogs, ComputerNetwork, ComputerOsa, ComputerPorts, ComputerSecrets, ComputerTerminal, ComputerVolumes, Computers, Credits, CronJobs, Dashboard, Databases, DeploymentDomains, DeploymentReleases, DeploymentRuntimeInstances, DeploymentVersions, Deployments, Desktop, DockerDeploy, EgressAudit, EgressNetwork, EgressSecrets, Email, EmailCampaigns, EmailInbox, EmailTemplates, Embeddings, Exec, ExternalKeys, Files, FlatCustomDomains, Functions, HealthChecks, InsufficientCreditsError, Integrations, Mcp, Miosa, MiosaError, Models, NetworkError, NetworkPolicy, NotFoundError, OAuthFlow, OpenComputers, OrgInvites, ProjectAuth, ProjectIntegrations, ProviderDefaults, RateLimitError, Regions, SANDBOX_TEMPLATE, Sandbox, SandboxArtifacts, SandboxAudit, SandboxCommands, SandboxEnv, SandboxEvents, SandboxFiles, SandboxNetwork, SandboxPreview, SandboxPreviews, SandboxSecrets, SandboxTags, SandboxTemplates, SandboxTerminal, Sandboxes, ScopedFs, Settings, SnapshotsStandalone, Storage, Tenant, TimeoutError, Usage, ValidationError, Volumes, Webhooks, WorkspaceInvites, WorkspaceMembers };
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map