@miosa/sdk 1.2.5 → 1.2.7

package/dist/index.js

@@ -22,10 +22,10 @@ var MiosaError = class _MiosaError extends Error {
     this.details = details;
     this.requestId = requestId;
   }
-  static fromResponse(status, body, requestId) {
-    const message = body.error?.message ?? body.message ?? `HTTP ${status}`;
-    const code = body.error?.code ?? body.code ?? "UNKNOWN_ERROR";
-    const details = body.error?.details;
+  static fromResponse(status, body2, requestId) {
+    const message = body2.error?.message ?? body2.message ?? `HTTP ${status}`;
+    const code = body2.error?.code ?? body2.code ?? "UNKNOWN_ERROR";
+    const details = body2.error?.details;
     if (status === 401 || status === 403) {
       return new AuthError(message, status, code, details, requestId);
     }
@@ -167,7 +167,7 @@ var HttpClient = class {
   async request(path, options = {}) {
     const {
       method = "GET",
-      body,
+      body: body2,
       formData,
       binary = false,
       timeout = this.timeout
@@ -176,9 +176,9 @@ var HttpClient = class {
     let fetchBody;
     if (formData) {
       fetchBody = formData;
-    } else if (body !== void 0) {
+    } else if (body2 !== void 0) {
       headers = { ...headers, "Content-Type": "application/json" };
-      fetchBody = JSON.stringify(body);
+      fetchBody = JSON.stringify(body2);
     }
     let lastError;
     for (let attempt = 0; attempt <= this.maxRetries; attempt++) {
@@ -260,17 +260,17 @@ var HttpClient = class {
     }
     return this.request(fullPath, { method: "GET" });
   }
-  async post(path, body) {
-    return this.request(path, { method: "POST", body });
+  async post(path, body2) {
+    return this.request(path, { method: "POST", body: body2 });
   }
-  async patch(path, body) {
-    return this.request(path, { method: "PATCH", body });
+  async patch(path, body2) {
+    return this.request(path, { method: "PATCH", body: body2 });
   }
-  async put(path, body) {
-    return this.request(path, { method: "PUT", body });
+  async put(path, body2) {
+    return this.request(path, { method: "PUT", body: body2 });
   }
-  async delete(path, body) {
-    return this.request(path, { method: "DELETE", body });
+  async delete(path, body2) {
+    return this.request(path, { method: "DELETE", body: body2 });
   }
   async getBinary(path) {
     return this.request(path, { method: "GET", binary: true });
@@ -288,10 +288,10 @@ var HttpClient = class {
       Accept: "text/event-stream",
       ...options.headers
     });
-    let body = null;
+    let body2 = null;
     if (options.body !== void 0) {
       headers = { ...headers, "Content-Type": "application/json" };
-      body = JSON.stringify(options.body);
+      body2 = JSON.stringify(options.body);
     }
     const controller = new AbortController();
     let response;
@@ -299,7 +299,7 @@ var HttpClient = class {
       response = await fetch(`${this.baseUrl}${path}`, {
         method,
         headers,
-        body,
+        body: body2,
         signal: controller.signal
       });
     } catch (err) {
@@ -368,7 +368,7 @@ var Admin = class {
     this.http = http;
   }
   /** Escape hatch — call any admin endpoint by method + path. */
-  async request(method, path, body, query) {
+  async request(method, path, body2, query) {
     const fullPath = query ? (() => {
       const qs = new URLSearchParams();
       for (const [k, v] of Object.entries(query)) {
@@ -381,13 +381,13 @@ var Admin = class {
       case "GET":
         return this.http.get(fullPath);
       case "POST":
-        return this.http.post(fullPath, body);
+        return this.http.post(fullPath, body2);
       case "PUT":
-        return this.http.put(fullPath, body);
+        return this.http.put(fullPath, body2);
       case "PATCH":
-        return this.http.patch(fullPath, body);
+        return this.http.patch(fullPath, body2);
       case "DELETE":
-        return this.http.delete(fullPath, body);
+        return this.http.delete(fullPath, body2);
     }
   }
   // ── Overview ────────────────────────────────────────────────
@@ -592,10 +592,143 @@ var Admin = class {
       model_id: modelId
     });
   }
+  /** POST /api/v1/admin/impersonate — returns {token, expires_at}. */
+  impersonate(externalUserId, options = {}) {
+    return this.http.post("/admin/impersonate", {
+      external_user_id: externalUserId,
+      ttl_sec: options.ttlSec ?? 3600
+    });
+  }
 };
 
-// src/resources/analytics.ts
+// src/resources/agent-runtime-profiles.ts
 function unwrap(payload) {
+  if (payload !== null && typeof payload === "object" && "data" in payload && payload.data !== void 0) {
+    return payload.data;
+  }
+  return payload;
+}
+function body(params) {
+  return Object.fromEntries(
+    Object.entries({
+      workspace_id: params.workspaceId ?? params.workspace_id,
+      name: params.name,
+      runtime: params.runtime,
+      description: params.description,
+      applies_to: params.appliesTo ?? params.applies_to,
+      tools: params.tools,
+      connectors: params.connectors,
+      env: params.env,
+      policy: params.policy,
+      metadata: params.metadata,
+      is_default: params.isDefault ?? params.is_default
+    }).filter(([, value]) => value !== void 0)
+  );
+}
+function normalize(profile) {
+  const normalized = {
+    ...profile
+  };
+  const tenantId = profile.tenantId ?? profile.tenant_id;
+  const workspaceId2 = profile.workspaceId ?? profile.workspace_id;
+  const appliesTo = profile.appliesTo ?? profile.applies_to;
+  const isDefault = profile.isDefault ?? profile.is_default;
+  const createdAt = profile.createdAt ?? profile.created_at;
+  const updatedAt = profile.updatedAt ?? profile.updated_at;
+  if (tenantId !== void 0) normalized.tenantId = tenantId;
+  if (workspaceId2 !== void 0) normalized.workspaceId = workspaceId2;
+  if (appliesTo !== void 0) normalized.appliesTo = appliesTo;
+  if (isDefault !== void 0) normalized.isDefault = isDefault;
+  if (createdAt !== void 0) normalized.createdAt = createdAt;
+  if (updatedAt !== void 0) normalized.updatedAt = updatedAt;
+  return normalized;
+}
+var AgentRuntimeProfiles = class {
+  constructor(http) {
+    this.http = http;
+  }
+  http;
+  async list(params = {}) {
+    const response = await this.http.get(
+      "/agent-runtime-profiles",
+      { workspace_id: params.workspaceId ?? params.workspace_id }
+    );
+    return unwrap(response).map(normalize);
+  }
+  async get(id) {
+    return normalize(
+      unwrap(
+        await this.http.get(
+          `/agent-runtime-profiles/${encodeURIComponent(id)}`
+        )
+      )
+    );
+  }
+  async create(params) {
+    return normalize(
+      unwrap(
+        await this.http.post(
+          "/agent-runtime-profiles",
+          body(params)
+        )
+      )
+    );
+  }
+  async update(id, params) {
+    return normalize(
+      unwrap(
+        await this.http.put(
+          `/agent-runtime-profiles/${encodeURIComponent(id)}`,
+          body(params)
+        )
+      )
+    );
+  }
+  async delete(id) {
+    await this.http.delete(
+      `/agent-runtime-profiles/${encodeURIComponent(id)}`
+    );
+  }
+};
+
+// src/resources/agent-runs.ts
+function unwrap2(payload) {
+  if (payload && typeof payload === "object" && "data" in payload) {
+    return payload.data;
+  }
+  return payload;
+}
+function stripUndefined(input) {
+  return Object.fromEntries(
+    Object.entries(input).filter(([, value]) => value !== void 0)
+  );
+}
+var AgentRuns = class {
+  constructor(http) {
+    this.http = http;
+  }
+  http;
+  async run(params) {
+    const body2 = stripUndefined({
+      prompt: params.prompt,
+      target_kind: params.targetKind,
+      target_id: params.targetId,
+      sandbox_id: params.sandboxId,
+      computer_id: params.computerId,
+      provider: params.provider,
+      model: params.model,
+      command: params.command,
+      runtime_command: params.runtimeCommand,
+      cwd: params.cwd,
+      timeout: params.timeout,
+      metadata: params.metadata
+    });
+    return unwrap2(await this.http.post("/agent-runs", body2));
+  }
+};
+
+// src/resources/analytics.ts
+function unwrap3(payload) {
   if (payload && typeof payload === "object") {
     const p = payload;
     for (const k of ["data", "analytics", "series", "items"]) {
@@ -604,7 +737,7 @@ function unwrap(payload) {
   }
   return payload;
 }
-function stripUndefined(input) {
+function stripUndefined2(input) {
   return Object.fromEntries(
     Object.entries(input).filter(([, v]) => v !== void 0)
   );
@@ -616,18 +749,18 @@ var Analytics = class {
   http;
   /** Get the platform analytics overview. */
   async overview(filters = {}) {
-    const query = stripUndefined(filters);
+    const query = stripUndefined2(filters);
     const data = await this.http.get("/analytics/overview", query);
-    return unwrap(data);
+    return unwrap3(data);
   }
   /** Get a timeseries for a metric over a period. */
   async timeseries(params = {}) {
-    const query = stripUndefined(params);
+    const query = stripUndefined2(params);
     const data = await this.http.get("/analytics/timeseries", query);
-    return unwrap(data);
+    return unwrap3(data);
   }
 };
-function unwrap2(payload) {
+function unwrap4(payload) {
   if (payload && typeof payload === "object" && "data" in payload) {
     return payload.data;
   }
@@ -643,7 +776,7 @@ function listItems(payload, candidateKeys = ["data", "keys", "api_keys", "items"
   }
   return [];
 }
-function stripUndefined2(input) {
+function stripUndefined3(input) {
   return Object.fromEntries(
     Object.entries(input).filter(([, v]) => v !== void 0)
   );
@@ -657,22 +790,33 @@ var ApiKeys = class {
   }
   http;
   async list(params = {}) {
-    const query = stripUndefined2({ ...params });
+    const query = stripUndefined3({ ...params });
     const data = await this.http.get("/api-keys", query);
     return listItems(data);
   }
   async create(params) {
     const { idempotencyKey: ikey, expiresAt, ...rest } = params;
-    const body = stripUndefined2({
+    const body2 = stripUndefined3({
       ...rest,
       expires_at: expiresAt ?? rest.expires_at
     });
     const data = await this.http.request("/api-keys", {
       method: "POST",
-      body,
+      body: body2,
       headers: { "Idempotency-Key": idempotencyKey(ikey) }
     });
-    return unwrap2(data);
+    return unwrap4(data);
+  }
+  /** POST /api/v1/api-keys/scoped — L2 delegation token bound to one external user. */
+  async createScoped(params) {
+    const body2 = stripUndefined3({
+      external_user_id: params.externalUserId,
+      scopes: params.scopes,
+      expires_at: params.expiresAt
+    });
+    return unwrap4(
+      await this.http.post("/api-keys/scoped", body2)
+    );
   }
   async delete(keyId) {
     await this.http.delete(`/api-keys/${keyId}`);
@@ -680,7 +824,7 @@ var ApiKeys = class {
 };
 
 // src/resources/audit-log.ts
-function unwrap3(payload) {
+function unwrap5(payload) {
   if (payload && typeof payload === "object") {
     const p = payload;
     for (const k of ["data", "audit_log", "events", "items"]) {
@@ -689,7 +833,7 @@ function unwrap3(payload) {
   }
   return payload;
 }
-function stripUndefined3(input) {
+function stripUndefined4(input) {
   return Object.fromEntries(
     Object.entries(input).filter(([, v]) => v !== void 0)
   );
@@ -701,16 +845,16 @@ var AuditLog = class {
   http;
   /** List audit-log events with optional filters. */
   async list(params = {}) {
-    const query = stripUndefined3(params);
+    const query = stripUndefined4(params);
     const data = await this.http.get("/audit-log", query);
-    const result = unwrap3(data);
+    const result = unwrap5(data);
     if (Array.isArray(result)) return result;
     return [];
   }
 };
 
 // src/resources/benchmarks.ts
-function unwrap4(data) {
+function unwrap6(data) {
   if (data && typeof data === "object") {
     const d = data;
     for (const k of ["data", "benchmarks", "samples", "items"]) {
@@ -742,19 +886,19 @@ var Benchmarks = class {
     return unwrapList(data);
   }
   async get(benchmarkId) {
-    return unwrap4(
+    return unwrap6(
       await this.http.get(`/admin/benchmarks/${benchmarkId}`)
     );
   }
   /** Start a new benchmark run — pass kind and run-specific options. */
   async create(params) {
-    const body = Object.fromEntries(
+    const body2 = Object.fromEntries(
       Object.entries(params).filter(([, v]) => v !== void 0)
     );
-    return unwrap4(await this.http.post("/admin/benchmarks", body));
+    return unwrap6(await this.http.post("/admin/benchmarks", body2));
   }
   async cancel(benchmarkId) {
-    return unwrap4(
+    return unwrap6(
       await this.http.post(`/admin/benchmarks/${benchmarkId}/cancel`)
     );
   }
@@ -771,17 +915,17 @@ var Benchmarks = class {
   }
   /** Compare two benchmark runs. */
   async compare(params) {
-    const body = Object.fromEntries(
+    const body2 = Object.fromEntries(
       Object.entries(params).filter(([, v]) => v !== void 0)
     );
-    return unwrap4(
-      await this.http.post("/admin/benchmarks/compare", body)
+    return unwrap6(
+      await this.http.post("/admin/benchmarks/compare", body2)
     );
   }
 };
 
 // src/resources/builder-sessions.ts
-function unwrap5(data) {
+function unwrap7(data) {
   if (data && typeof data === "object") {
     const d = data;
     for (const k of ["data", "sessions", "items"]) {
@@ -818,7 +962,7 @@ var BuilderSessions = class {
     return all.find((s) => s.id === sessionId) ?? {};
   }
   async updateTitle(sessionId, title) {
-    return unwrap5(
+    return unwrap7(
       await this.http.patch(`/builder/sessions/${sessionId}/title`, {
         title
       })
@@ -830,7 +974,7 @@ var BuilderSessions = class {
 };
 
 // src/resources/channels.ts
-function unwrap6(payload) {
+function unwrap8(payload) {
   if (payload && typeof payload === "object") {
     const p = payload;
     for (const k of ["data", "channels", "notifications", "items"]) {
@@ -839,7 +983,7 @@ function unwrap6(payload) {
   }
   return payload;
 }
-function stripUndefined4(input) {
+function stripUndefined5(input) {
   return Object.fromEntries(
     Object.entries(input).filter(([, v]) => v !== void 0)
   );
@@ -856,28 +1000,28 @@ var Channels = class {
   http;
   /** List all channels for the tenant. */
   async list(params = {}) {
-    const query = stripUndefined4(params);
+    const query = stripUndefined5(params);
     const data = await this.http.get("/channels", query);
-    const result = unwrap6(data);
+    const result = unwrap8(data);
     if (Array.isArray(result)) return result;
     return [];
   }
   /** Get a single channel. */
   async get(channelId) {
     const data = await this.http.get(`/channels/${channelId}`);
-    return unwrap6(data);
+    return unwrap8(data);
   }
   /** Create a new channel. */
   async create(params) {
-    const body = stripUndefObj(params);
-    const data = await this.http.post("/channels", body);
-    return unwrap6(data);
+    const body2 = stripUndefObj(params);
+    const data = await this.http.post("/channels", body2);
+    return unwrap8(data);
   }
   /** Update a channel. */
   async update(channelId, params) {
-    const body = stripUndefObj(params);
-    const data = await this.http.patch(`/channels/${channelId}`, body);
-    return unwrap6(data);
+    const body2 = stripUndefObj(params);
+    const data = await this.http.patch(`/channels/${channelId}`, body2);
+    return unwrap8(data);
   }
   /** Delete a channel. */
   async delete(channelId) {
@@ -887,30 +1031,30 @@ var Channels = class {
   /** Get notification preferences across all channels. */
   async listNotifications() {
     const data = await this.http.get("/channels/notifications");
-    return unwrap6(data);
+    return unwrap8(data);
   }
   /** Update notification preferences. */
   async updateNotifications(params) {
-    const body = stripUndefObj(params);
-    const data = await this.http.put("/channels/notifications", body);
-    return unwrap6(data);
+    const body2 = stripUndefObj(params);
+    const data = await this.http.put("/channels/notifications", body2);
+    return unwrap8(data);
   }
   /** Enable a channel. */
   async enable(channelId) {
     const data = await this.http.post(`/channels/${channelId}/enable`);
-    return unwrap6(data);
+    return unwrap8(data);
   }
   /** Disable a channel. */
   async disable(channelId) {
     const data = await this.http.post(
       `/channels/${channelId}/disable`
     );
-    return unwrap6(data);
+    return unwrap8(data);
   }
 };
 
 // src/resources/command-center.ts
-function unwrap7(data) {
+function unwrap9(data) {
   if (data && typeof data === "object") {
     const d = data;
     for (const k of [
@@ -944,7 +1088,7 @@ var CommandCenter = class {
   http;
   /** Top-level snapshot (GET /command-center). */
   async overview() {
-    return unwrap7(await this.http.get("/command-center"));
+    return unwrap9(await this.http.get("/command-center"));
   }
   async agents() {
     return unwrapList3(await this.http.get("/command-center/agents"));
@@ -955,13 +1099,13 @@ var CommandCenter = class {
     );
   }
   async metrics() {
-    return unwrap7(await this.http.get("/command-center/metrics"));
+    return unwrap9(await this.http.get("/command-center/metrics"));
   }
   async presets() {
     return unwrapList3(await this.http.get("/command-center/presets"));
   }
   async tiers() {
-    return unwrap7(await this.http.get("/command-center/tiers"));
+    return unwrap9(await this.http.get("/command-center/tiers"));
   }
   /** Stream live command-center events via SSE. */
   events() {
@@ -970,7 +1114,7 @@ var CommandCenter = class {
 };
 
 // src/resources/community.ts
-function unwrap8(data) {
+function unwrap10(data) {
   if (data && typeof data === "object") {
     const d = data;
     for (const k of ["data", "templates", "agents", "items"]) {
@@ -1002,7 +1146,7 @@ var Community = class {
     return unwrapList4(await this.http.get("/community/agents", query));
   }
   async getAgent(agentId) {
-    return unwrap8(await this.http.get(`/community/agents/${agentId}`));
+    return unwrap10(await this.http.get(`/community/agents/${agentId}`));
   }
   // ── Templates ─────────────────────────────────────────────────────────
   async listTemplates(filters = {}) {
@@ -1014,41 +1158,41 @@ var Community = class {
     );
   }
   async getTemplate(templateId) {
-    return unwrap8(
+    return unwrap10(
       await this.http.get(`/community/templates/${templateId}`)
     );
   }
   /** Install a community template into the caller's tenant. */
   async installTemplate(templateId, opts = {}) {
-    const body = Object.fromEntries(
+    const body2 = Object.fromEntries(
       Object.entries(opts).filter(([, v]) => v !== void 0)
     );
-    return unwrap8(
+    return unwrap10(
       await this.http.post(
         `/community/templates/${templateId}/install`,
-        body
+        body2
       )
     );
   }
   /** Rate a community template (1–5). */
   async rateTemplate(templateId, rating, opts = {}) {
-    const body = {
+    const body2 = {
       rating,
       ...Object.fromEntries(
         Object.entries(opts).filter(([, v]) => v !== void 0)
       )
     };
-    return unwrap8(
+    return unwrap10(
       await this.http.post(
         `/community/templates/${templateId}/rate`,
-        body
+        body2
       )
     );
   }
 };
 
 // src/resources/completions.ts
-function unwrap9(data) {
+function unwrap11(data) {
   if (data && typeof data === "object") {
     const d = data;
     if (Array.isArray(d.choices)) return d;
@@ -1067,24 +1211,24 @@ var Completions = class {
   }
   http;
   create(params) {
-    const body = buildBody(params);
+    const body2 = buildBody(params);
     if (params.stream === true) {
       return this.http.stream(
         "/intelligence/completions",
-        { method: "POST", body }
+        { method: "POST", body: body2 }
       );
     }
-    return this.http.post("/intelligence/completions", body).then(unwrap9);
+    return this.http.post("/intelligence/completions", body2).then(unwrap11);
   }
   chat(params) {
-    const body = buildBody(params);
+    const body2 = buildBody(params);
     if (params.stream === true) {
       return this.http.stream(
         "/intelligence/chat/completions",
-        { method: "POST", body }
+        { method: "POST", body: body2 }
       );
     }
-    return this.http.post("/intelligence/chat/completions", body).then(unwrap9);
+    return this.http.post("/intelligence/chat/completions", body2).then(unwrap11);
   }
 };
 
@@ -1207,7 +1351,7 @@ var Checkpoints = class {
 };
 
 // src/resources/computer-auto-stop.ts
-function unwrap10(data) {
+function unwrap12(data) {
   if (data && typeof data === "object") {
     const d = data;
     if ("data" in d && Object.keys(d).length <= 2) {
@@ -1225,13 +1369,13 @@ var ComputerAutoStop = class {
   computerId;
   /** Return the current auto-stop configuration. */
   async get() {
-    return unwrap10(
+    return unwrap12(
       await this.http.get(`/computers/${this.computerId}/auto-stop`)
     );
   }
   /** Set the idle timeout in seconds (0 disables auto-stop). */
   async update(seconds) {
-    return unwrap10(
+    return unwrap12(
       await this.http.patch(
         `/computers/${this.computerId}/auto-stop`,
         { seconds }
@@ -1241,7 +1385,7 @@ var ComputerAutoStop = class {
 };
 
 // src/resources/computer-env.ts
-function unwrap11(data) {
+function unwrap13(data) {
   if (data && typeof data === "object") {
     const d = data;
     if ("data" in d && Object.keys(d).length <= 2) {
@@ -1276,11 +1420,11 @@ var ComputerEnv = class {
   }
   /** Create a new env var. Use update() to change an existing one. */
   async set(name, value) {
-    return unwrap11(await this.http.post(this.base(), { name, value }));
+    return unwrap13(await this.http.post(this.base(), { name, value }));
   }
   /** Patch the value of an existing env var by name. */
   async update(name, value) {
-    return unwrap11(
+    return unwrap13(
       await this.http.patch(`${this.base()}/${name}`, { value })
     );
   }
@@ -1297,7 +1441,7 @@ var ComputerEnv = class {
 };
 
 // src/resources/computer-logs.ts
-function unwrap12(data) {
+function unwrap14(data) {
   if (data && typeof data === "object") {
     const d = data;
     if ("data" in d && Object.keys(d).length <= 2) {
@@ -1318,7 +1462,7 @@ var ComputerLogs = class {
     const query = Object.fromEntries(
       Object.entries(params).filter(([, v]) => v !== void 0)
     );
-    return unwrap12(
+    return unwrap14(
       await this.http.get(`/computers/${this.computerId}/logs`, query)
     );
   }
@@ -1331,7 +1475,7 @@ var ComputerLogs = class {
 };
 
 // src/resources/computer-osa.ts
-function unwrap13(data) {
+function unwrap15(data) {
   if (data && typeof data === "object") {
     const d = data;
     if ("data" in d && Object.keys(d).length <= 2) {
@@ -1349,47 +1493,47 @@ var ComputerOsa = class {
   computerId;
   /** Submit a free-form task to the in-VM OSA agent. */
   async submitTask(task, params = {}) {
-    const body = {
+    const body2 = {
       task,
       ...Object.fromEntries(
         Object.entries(params).filter(([, v]) => v !== void 0)
       )
     };
-    return unwrap13(
+    return unwrap15(
       await this.http.post(
         `/computers/${this.computerId}/osa/task`,
-        body
+        body2
       )
     );
   }
   /** Cancel the currently-running OSA task, if any. */
   async cancelTask() {
-    return unwrap13(
+    return unwrap15(
       await this.http.delete(`/computers/${this.computerId}/osa/task`)
     );
   }
   /** Return OSA's current task / configuration / health snapshot. */
   async status() {
-    return unwrap13(
+    return unwrap15(
       await this.http.get(`/computers/${this.computerId}/osa/status`)
     );
   }
   /** Update OSA runtime configuration (model, tools, secrets, etc.). */
   async configure(config) {
-    const body = Object.fromEntries(
+    const body2 = Object.fromEntries(
       Object.entries(config).filter(([, v]) => v !== void 0)
     );
-    return unwrap13(
+    return unwrap15(
       await this.http.post(
         `/computers/${this.computerId}/osa/configure`,
-        body
+        body2
       )
     );
   }
 };
 
 // src/resources/computer-ports.ts
-function unwrap14(data) {
+function unwrap16(data) {
   if (data && typeof data === "object") {
     const d = data;
     if ("data" in d && Object.keys(d).length <= 2) {
@@ -1428,21 +1572,21 @@ var ComputerPorts = class {
   }
   /** Expose port with the given visibility options. */
   async create(port, opts = {}) {
-    const body = {
+    const body2 = {
       port,
       ...Object.fromEntries(
         Object.entries(opts).filter(([, v]) => v !== void 0)
       )
     };
-    return unwrap14(await this.http.post(this.base(), body));
+    return unwrap16(await this.http.post(this.base(), body2));
   }
   /** Patch visibility / auth options for port. */
   async update(port, opts) {
-    const body = Object.fromEntries(
+    const body2 = Object.fromEntries(
       Object.entries(opts).filter(([, v]) => v !== void 0)
     );
-    return unwrap14(
-      await this.http.patch(`${this.base()}/${port}`, body)
+    return unwrap16(
+      await this.http.patch(`${this.base()}/${port}`, body2)
     );
   }
   /** Stop exposing port. */
@@ -1461,14 +1605,14 @@ var ComputerTerminal = class {
   computerId;
   /** Open a new PTY session. Returns the server payload (session id, etc.). */
   async create(params = {}) {
-    const body = Object.fromEntries(
+    const body2 = Object.fromEntries(
       Object.entries(params).filter(([, v]) => v !== void 0)
     );
     const raw = await this.http.post(
       `/computers/${this.computerId}/terminal`,
-      body
+      body2
     );
-    return unwrap15(raw);
+    return unwrap17(raw);
   }
   /** Resize an existing PTY session. */
   async resize(sessionId, cols, rows) {
@@ -1476,10 +1620,10 @@ var ComputerTerminal = class {
       `/computers/${this.computerId}/pty/${sessionId}/resize`,
       { cols, rows }
     );
-    return unwrap15(raw);
+    return unwrap17(raw);
   }
 };
-function unwrap15(data) {
+function unwrap17(data) {
   if (data && typeof data === "object") {
     const d = data;
     if ("data" in d && Object.keys(d).length <= 2) {
@@ -1490,7 +1634,7 @@ function unwrap15(data) {
 }
 
 // src/resources/computer-volumes.ts
-function unwrap16(data) {
+function unwrap18(data) {
   if (data && typeof data === "object") {
     const d = data;
     if ("data" in d && Object.keys(d).length <= 2) {
@@ -1524,7 +1668,7 @@ var ComputerVolumes = class {
   }
   /** Attach volumeId at mountPath inside the VM. */
   async attach(volumeId, mountPath) {
-    return unwrap16(
+    return unwrap18(
       await this.http.post(this.base(), {
         volume_id: volumeId,
         mount_path: mountPath
@@ -1697,7 +1841,7 @@ var Desktop = class {
 };
 
 // src/resources/egressAudit.ts
-function unwrap17(payload) {
+function unwrap19(payload) {
   if (payload && typeof payload === "object") {
     const p = payload;
     for (const k of ["data", "event", "items"]) {
@@ -1716,7 +1860,7 @@ function unwrapList8(payload) {
   }
   return [];
 }
-function stripUndefined5(input) {
+function stripUndefined6(input) {
   return Object.fromEntries(
     Object.entries(input).filter(([, v]) => v !== void 0)
   );
@@ -1726,7 +1870,7 @@ function pickFirst(...values) {
   return void 0;
 }
 function listQuery(params) {
-  return stripUndefined5({
+  return stripUndefined6({
     resource_id: pickFirst(params.resourceId, params.resource_id),
     resource_type: pickFirst(params.resourceType, params.resource_type),
     host: params.host,
@@ -1763,7 +1907,7 @@ var EgressAudit = class {
     const data = await this.http.get(
       `/egress/audit/${id}`
     );
-    return unwrap17(data);
+    return unwrap19(data);
   }
   /**
    * Long-poll the audit endpoint and yield new events as they appear.
@@ -1839,7 +1983,7 @@ var ComputerAudit = class extends SandboxAudit {
 };
 
 // src/resources/egressNetwork.ts
-function unwrap18(payload) {
+function unwrap20(payload) {
   if (payload && typeof payload === "object") {
     const p = payload;
     for (const k of ["data", "policy", "rule", "items"]) {
@@ -1865,7 +2009,7 @@ function unwrapList9(payload) {
   }
   return [];
 }
-function stripUndefined6(input) {
+function stripUndefined7(input) {
   return Object.fromEntries(
     Object.entries(input).filter(([, v]) => v !== void 0)
   );
@@ -1875,7 +2019,7 @@ function pickFirst2(...values) {
   return void 0;
 }
 function ruleBody(host, params, effect) {
-  return stripUndefined6({
+  return stripUndefined7({
     host,
     effect,
     methods: params.methods,
@@ -1898,7 +2042,7 @@ var EgressNetwork = class {
       "/egress/allowlist",
       ruleBody(host, params, "allow")
     );
-    return unwrap18(data);
+    return unwrap20(data);
   }
   /** Add a `deny` rule for `host` to the allowlist. */
   async deny(host, params = {}) {
@@ -1906,11 +2050,11 @@ var EgressNetwork = class {
       "/egress/allowlist",
       ruleBody(host, params, "deny")
     );
-    return unwrap18(data);
+    return unwrap20(data);
   }
   /** List allowlist rules. */
   async rules(params = {}) {
-    const query = stripUndefined6({
+    const query = stripUndefined7({
       policy_id: pickFirst2(params.policyId, params.policy_id),
       resource_id: pickFirst2(params.resourceId, params.resource_id),
       resource_type: pickFirst2(params.resourceType, params.resource_type)
@@ -1925,7 +2069,7 @@ var EgressNetwork = class {
   // ── policies ──────────────────────────────────────────────────────────────
   /** List egress policies. */
   async policies(params = {}) {
-    const query = stripUndefined6({
+    const query = stripUndefined7({
       resource_id: pickFirst2(params.resourceId, params.resource_id),
       resource_type: pickFirst2(params.resourceType, params.resource_type)
     });
@@ -1934,7 +2078,7 @@ var EgressNetwork = class {
   }
   /** Create an egress policy. */
   async createPolicy(params) {
-    const body = stripUndefined6({
+    const body2 = stripUndefined7({
       name: params.name,
       mode: params.mode ?? "enforce",
       default_effect: pickFirst2(
@@ -1948,13 +2092,13 @@ var EgressNetwork = class {
     });
     const data = await this.http.post(
       "/egress/policies",
-      body
+      body2
     );
-    return unwrap18(data);
+    return unwrap20(data);
   }
   /** Update an egress policy by id. */
   async updatePolicy(policyId, params) {
-    const body = stripUndefined6({
+    const body2 = stripUndefined7({
       mode: params.mode,
       default_effect: pickFirst2(params.defaultEffect, params.default_effect),
       name: params.name,
@@ -1962,9 +2106,9 @@ var EgressNetwork = class {
     });
     const data = await this.http.patch(
       `/egress/policies/${policyId}`,
-      body
+      body2
     );
-    return unwrap18(data);
+    return unwrap20(data);
   }
   // ── mode helpers ──────────────────────────────────────────────────────────
   /** Set the policy to `mode="enforce"` — denied egress is blocked. */
@@ -1982,21 +2126,21 @@ var EgressNetwork = class {
     if (policyId) {
       return this.updatePolicy(policyId, { mode });
     }
-    const body = resourceId !== void 0 && resourceType !== void 0 ? stripUndefined6({
+    const body2 = resourceId !== void 0 && resourceType !== void 0 ? stripUndefined7({
       mode,
       resource_id: resourceId,
       resource_type: resourceType
     }) : { mode };
     const data = await this.http.patch(
       "/egress/policies",
-      body
+      body2
     );
-    return unwrap18(data);
+    return unwrap20(data);
   }
   // ── suggestions ───────────────────────────────────────────────────────────
   /** AI-generated allowlist suggestions from recent denied egress. */
   async suggestions(params = {}) {
-    const query = stripUndefined6({
+    const query = stripUndefined7({
       resource_id: pickFirst2(params.resourceId, params.resource_id),
       resource_type: pickFirst2(params.resourceType, params.resource_type),
       since: params.since ?? "7d"
@@ -2047,28 +2191,28 @@ var SandboxNetwork = class {
     return this.delegate.removeRule(ruleId);
   }
   lockdown(params = {}) {
-    const body = {
+    const body2 = {
       resource_id: this.resourceId,
       resource_type: this.resourceType
     };
-    if (params.policyId !== void 0) body.policyId = params.policyId;
-    return this.delegate.lockdown(body);
+    if (params.policyId !== void 0) body2.policyId = params.policyId;
+    return this.delegate.lockdown(body2);
   }
   observe(params = {}) {
-    const body = {
+    const body2 = {
       resource_id: this.resourceId,
       resource_type: this.resourceType
     };
-    if (params.policyId !== void 0) body.policyId = params.policyId;
-    return this.delegate.observe(body);
+    if (params.policyId !== void 0) body2.policyId = params.policyId;
+    return this.delegate.observe(body2);
   }
   suggestions(params = {}) {
-    const body = {
+    const body2 = {
       resource_id: this.resourceId,
       resource_type: this.resourceType
     };
-    if (params.since !== void 0) body.since = params.since;
-    return this.delegate.suggestions(body);
+    if (params.since !== void 0) body2.since = params.since;
+    return this.delegate.suggestions(body2);
   }
   policies() {
     return this.delegate.policies({
@@ -2082,7 +2226,7 @@ var ComputerNetwork = class extends SandboxNetwork {
 };
 
 // src/resources/egressSecrets.ts
-function unwrap19(payload) {
+function unwrap21(payload) {
   if (payload && typeof payload === "object") {
     const p = payload;
     for (const k of ["data", "secret", "binding", "items"]) {
@@ -2101,7 +2245,7 @@ function unwrapList10(payload) {
   }
   return [];
 }
-function stripUndefined7(input) {
+function stripUndefined8(input) {
   return Object.fromEntries(
     Object.entries(input).filter(([, v]) => v !== void 0)
   );
@@ -2111,7 +2255,7 @@ function pickFirst3(...values) {
   return void 0;
 }
 function setBody(params) {
-  return stripUndefined7({
+  return stripUndefined8({
     name: params.name,
     value: params.value,
     type: params.type ?? "api_key",
@@ -2132,7 +2276,7 @@ function setBody(params) {
   });
 }
 function listQuery2(params) {
-  return stripUndefined7({
+  return stripUndefined8({
     scope: params.scope,
     type: params.type,
     workspace_id: pickFirst3(params.workspaceId, params.workspace_id),
@@ -2147,14 +2291,14 @@ function listQuery2(params) {
   });
 }
 function rotateBody(params) {
-  return stripUndefined7({
+  return stripUndefined8({
     value: pickFirst3(params.newValue, params.new_value, params.value),
     refresh_token: pickFirst3(params.refreshToken, params.refresh_token),
     expires_at: pickFirst3(params.expiresAt, params.expires_at)
   });
 }
 function bindingBody(params) {
-  return stripUndefined7({
+  return stripUndefined8({
     secret_id: pickFirst3(params.secretId, params.secret_id),
     resource_id: pickFirst3(params.resourceId, params.resource_id),
     resource_type: pickFirst3(params.resourceType, params.resource_type),
@@ -2162,14 +2306,14 @@ function bindingBody(params) {
   });
 }
 function bindingQuery(params) {
-  return stripUndefined7({
+  return stripUndefined8({
     resource_id: pickFirst3(params.resourceId, params.resource_id),
     resource_type: pickFirst3(params.resourceType, params.resource_type),
     secret_id: pickFirst3(params.secretId, params.secret_id)
   });
 }
 function oauthBody(params) {
-  return stripUndefined7({
+  return stripUndefined8({
     provider: params.provider,
     expose_as_env: pickFirst3(params.exposeAsEnv, params.expose_as_env),
     scope: params.scope,
@@ -2218,7 +2362,7 @@ var OAuthFlow = class {
       const data = await this.http.get("/egress/oauth/status", {
         state: this.state
       });
-      const payload = unwrap19(data) ?? {};
+      const payload = unwrap21(data) ?? {};
       const status = payload.status;
       if (status === "completed" || status === "ready" || status === "succeeded") {
         return payload;
@@ -2250,7 +2394,7 @@ var EgressSecrets = class {
       "/egress/secrets",
       setBody(params)
     );
-    return unwrap19(data);
+    return unwrap21(data);
   }
   /** List secrets. */
   async list(params = {}) {
@@ -2265,16 +2409,16 @@ var EgressSecrets = class {
     const data = await this.http.get(
       `/egress/secrets/${id}`
     );
-    return unwrap19(data);
+    return unwrap21(data);
   }
   /** Rotate the secret's value. */
   async rotate(id, params) {
-    const body = typeof params === "string" ? rotateBody({ newValue: params }) : rotateBody(params);
+    const body2 = typeof params === "string" ? rotateBody({ newValue: params }) : rotateBody(params);
     const data = await this.http.patch(
       `/egress/secrets/${id}`,
-      body
+      body2
     );
-    return unwrap19(data);
+    return unwrap21(data);
   }
   /** Delete a secret. */
   async delete(id) {
@@ -2287,7 +2431,7 @@ var EgressSecrets = class {
       "/egress/bindings",
       bindingBody(params)
     );
-    return unwrap19(data);
+    return unwrap21(data);
   }
   /** List secret bindings. */
   async listBindings(params = {}) {
@@ -2320,7 +2464,7 @@ var EgressSecrets = class {
       "/egress/oauth/start",
       oauthBody(params)
     );
-    const payload = unwrap19(data) ?? {};
+    const payload = unwrap21(data) ?? {};
     return new OAuthFlow(this.http, payload, params.provider);
   }
 };
@@ -2884,12 +3028,12 @@ var ComputerInbox = class {
     return unwrapData(raw);
   }
   async update(fields) {
-    const body = Object.fromEntries(
+    const body2 = Object.fromEntries(
       Object.entries(fields).filter(([, v]) => v !== void 0)
     );
     const raw = await this.http.patch(
       `/computers/${this.computerId}/inbox`,
-      body
+      body2
     );
     return unwrapData(raw);
   }
@@ -3188,12 +3332,12 @@ var Computer = class _Computer {
   }
   /** Clone this computer into a new one. */
   async clone(opts = {}) {
-    const body = Object.fromEntries(
+    const body2 = Object.fromEntries(
       Object.entries(opts).filter(([, v]) => v !== void 0)
     );
     const raw = await this.http.post(
       `/computers/${this.id}/clone`,
-      body
+      body2
     );
     const data = unwrapData(raw);
     return new _Computer(this.http, data);
@@ -3209,12 +3353,12 @@ var Computer = class _Computer {
   }
   /** Move the computer to a different region or host. */
   async move(opts) {
-    const body = Object.fromEntries(
+    const body2 = Object.fromEntries(
       Object.entries(opts).filter(([, v]) => v !== void 0)
     );
     const updated = await this.http.post(
       `/computers/${this.id}/move`,
-      body
+      body2
     );
     this.data = updated;
     return this;
@@ -3292,10 +3436,18 @@ var Computers = class {
    * `computer.start()` once it reaches `stopped` to boot it.
    */
   async create(params) {
+    const {
+      agentRuntimeProfileId,
+      agentProfileId,
+      skipAgentRuntimeProfile,
+      ...body2
+    } = params;
     const data = await this.http.post("/computers", {
       template_type: "miosa-desktop",
       size: "small",
-      ...params
+      ...body2,
+      agent_runtime_profile_id: agentRuntimeProfileId ?? params.agent_runtime_profile_id ?? agentProfileId ?? params.agent_profile_id,
+      skip_agent_runtime_profile: skipAgentRuntimeProfile ?? params.skip_agent_runtime_profile
     });
     return new Computer(this.http, data);
   }
@@ -3365,7 +3517,7 @@ var Credits = class {
     return this.http.get("/credits/usage");
   }
 };
-function unwrap20(payload) {
+function unwrap22(payload) {
   if (payload && typeof payload === "object" && "data" in payload) {
     return payload.data;
   }
@@ -3381,7 +3533,7 @@ function listItems2(payload, candidateKeys = ["data", "cron_jobs", "executions",
   }
   return [];
 }
-function stripUndefined8(input) {
+function stripUndefined9(input) {
   return Object.fromEntries(
     Object.entries(input).filter(([, v]) => v !== void 0)
   );
@@ -3395,28 +3547,28 @@ var CronJobs = class {
   }
   http;
   async list(params = {}) {
-    const query = stripUndefined8({ ...params });
+    const query = stripUndefined9({ ...params });
     const data = await this.http.get("/cron-jobs", query);
     return listItems2(data);
   }
   async get(jobId) {
     const data = await this.http.get(`/cron-jobs/${jobId}`);
-    return unwrap20(data);
+    return unwrap22(data);
   }
   async create(params) {
     const { idempotencyKey: ikey, ...rest } = params;
-    const body = stripUndefined8(rest);
+    const body2 = stripUndefined9(rest);
     const data = await this.http.request("/cron-jobs", {
       method: "POST",
-      body,
+      body: body2,
       headers: { "Idempotency-Key": idempotencyKey2(ikey) }
     });
-    return unwrap20(data);
+    return unwrap22(data);
   }
   async update(jobId, params) {
-    const body = stripUndefined8(params);
-    const data = await this.http.patch(`/cron-jobs/${jobId}`, body);
-    return unwrap20(data);
+    const body2 = stripUndefined9(params);
+    const data = await this.http.patch(`/cron-jobs/${jobId}`, body2);
+    return unwrap22(data);
   }
   async delete(jobId) {
     await this.http.delete(`/cron-jobs/${jobId}`);
@@ -3424,11 +3576,11 @@ var CronJobs = class {
   // ── Control ────────────────────────────────────────────────────────────────
   async pause(jobId) {
     const data = await this.http.post(`/cron-jobs/${jobId}/pause`);
-    return unwrap20(data);
+    return unwrap22(data);
   }
   async resume(jobId) {
     const data = await this.http.post(`/cron-jobs/${jobId}/resume`);
-    return unwrap20(data);
+    return unwrap22(data);
   }
   async runNow(jobId, opts = {}) {
     const data = await this.http.request(
@@ -3438,7 +3590,7 @@ var CronJobs = class {
         headers: { "Idempotency-Key": idempotencyKey2(opts.idempotencyKey) }
       }
     );
-    return unwrap20(data);
+    return unwrap22(data);
   }
   // ── Execution history ──────────────────────────────────────────────────────
   async listExecutions(jobId) {
@@ -3453,12 +3605,12 @@ var CronJobs = class {
     const data = await this.http.get(
       `/cron-jobs/${jobId}/executions/${executionId}`
     );
-    return unwrap20(data);
+    return unwrap22(data);
   }
 };
 
 // src/resources/dashboard.ts
-function unwrap21(payload) {
+function unwrap23(payload) {
   if (payload && typeof payload === "object") {
     const p = payload;
     for (const k of ["data", "dashboard", "overview", "items"]) {
@@ -3475,15 +3627,15 @@ var Dashboard = class {
   /** Aggregated user dashboard payload. */
   async summary() {
     const data = await this.http.get("/dashboard");
-    return unwrap21(data);
+    return unwrap23(data);
   }
   /** Status / health overview (public endpoint). */
   async overview() {
     const data = await this.http.get("/overview");
-    return unwrap21(data);
+    return unwrap23(data);
   }
 };
-function unwrap22(payload) {
+function unwrap24(payload) {
   if (payload && typeof payload === "object" && "data" in payload) {
     return payload.data;
   }
@@ -3499,7 +3651,7 @@ function listItems3(payload, candidateKeys = ["data", "databases", "items"]) {
   }
   return [];
 }
-function stripUndefined9(input) {
+function stripUndefined10(input) {
   return Object.fromEntries(
     Object.entries(input).filter(([, v]) => v !== void 0)
   );
@@ -3513,13 +3665,13 @@ var Databases = class {
   }
   http;
   async list(params = {}) {
-    const query = stripUndefined9({ ...params });
+    const query = stripUndefined10({ ...params });
     const data = await this.http.get("/databases", query);
     return listItems3(data);
   }
   async get(databaseId) {
     const data = await this.http.get(`/databases/${databaseId}`);
-    return unwrap22(data);
+    return unwrap24(data);
   }
   async create(params) {
     const {
@@ -3530,20 +3682,20 @@ var Databases = class {
       size: _deprecatedSize,
       ...rest
     } = params;
-    const body = stripUndefined9({
+    const body2 = stripUndefined10({
       ...rest,
       engine_version: engine_version ?? version
     });
     const data = await this.http.request("/databases", {
       method: "POST",
-      body,
+      body: body2,
       headers: {
         "Idempotency-Key": idempotencyKey3(
           camelIdempotencyKey ?? snakeIdempotencyKey
         )
       }
     });
-    return unwrap22(data);
+    return unwrap24(data);
   }
   async delete(databaseId) {
     await this.http.delete(`/databases/${databaseId}`);
@@ -3553,27 +3705,27 @@ var Databases = class {
     const data = await this.http.post(
       `/databases/${databaseId}/start`
     );
-    return unwrap22(data);
+    return unwrap24(data);
   }
   async stop(databaseId) {
     const data = await this.http.post(`/databases/${databaseId}/stop`);
-    return unwrap22(data);
+    return unwrap24(data);
   }
   async restart(databaseId) {
     const data = await this.http.post(
       `/databases/${databaseId}/restart`
     );
-    return unwrap22(data);
+    return unwrap24(data);
   }
   // ── Credentials + logs ────────────────────────────────────────────────────
   async credentials(databaseId) {
     const data = await this.http.get(
       `/databases/${databaseId}/credentials`
     );
-    return unwrap22(data);
+    return unwrap24(data);
   }
   async logs(databaseId, params = {}) {
-    const query = stripUndefined9({
+    const query = stripUndefined10({
       lines: params.lines,
       since: params.since
     });
@@ -3600,7 +3752,7 @@ function attributionBody(p) {
 function idempotencyKey4(key) {
   return key ?? randomUUID();
 }
-function unwrap23(payload) {
+function unwrap25(payload) {
   if (payload && typeof payload === "object" && "data" in payload) {
     return payload.data;
   }
@@ -3616,46 +3768,52 @@ function listItems4(payload, candidateKeys = ["items", "deployments", "versions"
   }
   return [];
 }
-function stripUndefined10(input) {
+function stripUndefined11(input) {
   return Object.fromEntries(
     Object.entries(input).filter(([, v]) => v !== void 0)
   );
 }
-function dockerDeployMetadata(metadata, templateId) {
-  return stripUndefined10({
+function dockerDeployMetadata(metadata) {
+  return {
     ...metadata ?? {},
-    deployment_product: "docker_deploy",
-    docker_deploy_template_id: templateId
-  });
-}
-function isRecord(value) {
-  return !!value && typeof value === "object" && !Array.isArray(value);
+    deployment_product: "docker_deploy"
+  };
 }
-function stringValue(value) {
-  return typeof value === "string" && value.length > 0 ? value : void 0;
+function dockerDeployProduct(deployment) {
+  return deployment.deployment_product ?? deployment.metadata?.deployment_product;
 }
-function runtimeMetadata(metadata) {
-  const runtime = metadata.runtime;
-  return isRecord(runtime) ? runtime : void 0;
+function dockerDeployHostId(deployment) {
+  const metadataHost = deployment.metadata?.docker_deploy_host_id;
+  return deployment.docker_deploy_host_id ?? (typeof metadataHost === "string" ? metadataHost : null);
 }
-function publicProbeUrl(publicUrl, probePath) {
-  const url = new URL(publicUrl);
-  const normalizedPath = probePath.startsWith("/") ? probePath : `/${probePath}`;
-  url.pathname = normalizedPath;
-  return url.toString();
+function dockerDeployApp(deployment) {
+  const app = deployment.metadata?.docker_deploy;
+  if (!app || typeof app !== "object" || Array.isArray(app)) return null;
+  return app;
 }
-function looksLikeMiosaGatewayJson(body) {
+function dockerDeployAppPort(app) {
+  const url = app?.url;
+  if (typeof url !== "string") return null;
   try {
-    const parsed = JSON.parse(body);
-    return isRecord(parsed) && parsed.ok === true && typeof parsed.run_id === "string" && Object.keys(parsed).every((key) => ["ok", "run_id"].includes(key));
+    const parsed = new URL(url);
+    const port = Number.parseInt(parsed.port, 10);
+    return Number.isInteger(port) ? port : null;
   } catch {
-    return false;
+    return null;
   }
 }
-function addDoctorCheck(checks, name, ok, message, data) {
-  const check = { name, ok, message };
-  if (data !== void 0) check.data = data;
-  checks.push(check);
+function addDoctorCheck(checks, name, ok, message, details) {
+  checks.push({ name, ok, message, ...details ? { details } : {} });
+}
+function hostHealthy(host) {
+  return Boolean(
+    host && host.status === "active" && host.appliance_status === "healthy"
+  );
+}
+function probeUrl(publicUrl, probePath) {
+  const url = new URL(publicUrl);
+  url.pathname = probePath.startsWith("/") ? probePath : `/${probePath}`;
+  return url.toString();
 }
 var DeploymentVersions = class {
   constructor(http, deploymentId) {
@@ -3665,7 +3823,7 @@ var DeploymentVersions = class {
   http;
   deploymentId;
   async list(params = {}) {
-    const query = stripUndefined10({
+    const query = stripUndefined11({
       state: params.state,
       limit: params.limit,
       cursor: params.cursor,
@@ -3681,19 +3839,19 @@ var DeploymentVersions = class {
     const data = await this.http.get(
       `/deployments/${this.deploymentId}/versions/${versionId}`
     );
-    return unwrap23(data);
+    return unwrap25(data);
   }
   async promote(versionId, opts = {}) {
-    const body = stripUndefined10({ environment: opts.environment });
+    const body2 = stripUndefined11({ environment: opts.environment });
     const data = await this.http.request(
       `/deployments/${this.deploymentId}/versions/${versionId}/promote`,
       {
         method: "POST",
-        body,
+        body: body2,
         headers: { "Idempotency-Key": idempotencyKey4(opts.idempotencyKey) }
       }
     );
-    return unwrap23(data);
+    return unwrap25(data);
   }
 };
 var DeploymentReleases = class {
@@ -3713,7 +3871,7 @@ var DeploymentReleases = class {
     const data = await this.http.get(
       `/deployments/${this.deploymentId}/releases/${releaseId}`
     );
-    return unwrap23(data);
+    return unwrap25(data);
   }
 };
 var DeploymentRuntimeInstances = class {
@@ -3733,14 +3891,14 @@ var DeploymentRuntimeInstances = class {
     const data = await this.http.get(
       `/deployments/${this.deploymentId}/runtime-instances/${instanceId}`
     );
-    return unwrap23(data);
+    return unwrap25(data);
   }
   async logs(instanceId, lines = 100) {
     const data = await this.http.get(
       `/deployments/${this.deploymentId}/runtime-instances/${instanceId}/logs`,
       { lines }
     );
-    const unwrapped = unwrap23(data);
+    const unwrapped = unwrap25(data);
     const result = { logs: String(unwrapped.logs ?? "") };
     if (typeof unwrapped.runtime_instance_id === "string") {
       result.runtime_instance_id = unwrapped.runtime_instance_id;
@@ -3762,7 +3920,7 @@ var DeploymentDomains = class {
   http;
   deploymentId;
   async add(domain, params = {}) {
-    const body = {
+    const body2 = {
       domain,
       redirect_policy: params.redirectPolicy ?? params.redirect_policy,
       ...attributionBody(params)
@@ -3771,11 +3929,11 @@ var DeploymentDomains = class {
       `/deployments/${this.deploymentId}/domains`,
       {
         method: "POST",
-        body: stripUndefined10(body),
+        body: stripUndefined11(body2),
         headers: { "Idempotency-Key": idempotencyKey4(params.idempotencyKey) }
       }
     );
-    return unwrap23(data);
+    return unwrap25(data);
   }
   async list(filters = {}) {
     const data = await this.http.get(
@@ -3788,7 +3946,7 @@ var DeploymentDomains = class {
     const data = await this.http.post(
       `/deployments/${this.deploymentId}/domains/${domainId}/verify`
     );
-    return unwrap23(data);
+    return unwrap25(data);
   }
   async delete(domainId) {
     await this.http.delete(
@@ -3803,7 +3961,7 @@ var Deployments = class {
   http;
   async list(params = {}) {
     const projectId = params.projectId ?? params.project_id;
-    const query = stripUndefined10({
+    const query = stripUndefined11({
       project_id: projectId,
       state: params.state,
       limit: params.limit,
@@ -3818,10 +3976,10 @@ var Deployments = class {
   }
   async get(deploymentId) {
     const data = await this.http.get(`/deployments/${deploymentId}`);
-    return unwrap23(data);
+    return unwrap25(data);
   }
   async create(params) {
-    const body = stripUndefined10({
+    const body2 = stripUndefined11({
       name: params.name,
       repo_url: params.repoUrl ?? params.repo_url,
       branch: params.branch,
@@ -3829,16 +3987,15 @@ var Deployments = class {
       run_command: params.runCommand ?? params.run_command,
       auto_deploy: params.autoDeploy ?? params.auto_deploy,
       database: params.database,
-      docker_deploy_template_id: params.dockerDeployTemplateId ?? params.docker_deploy_template_id,
       metadata: params.metadata,
       ...attributionBody(params)
     });
     const data = await this.http.request("/deployments", {
       method: "POST",
-      body,
+      body: body2,
       headers: { "Idempotency-Key": idempotencyKey4(params.idempotencyKey) }
     });
-    return unwrap23(data);
+    return unwrap25(data);
   }
   /**
    * Create a deployment that runs on the workspace's dedicated Docker Deploy
@@ -3846,184 +4003,146 @@ var Deployments = class {
    * deployment so the control plane attaches it to the workspace Docker host.
    */
   async createDockerDeploy(params) {
-    const templateId = params.dockerDeployTemplateId ?? params.docker_deploy_template_id;
     return this.create({
       ...params,
-      metadata: dockerDeployMetadata(params.metadata, templateId)
-    });
-  }
-  async listDockerDeployHosts(params = {}) {
-    const data = await this.http.get(
-      "/docker-deploy/hosts",
-      stripUndefined10({
-        workspace_id: params.workspaceId ?? params.workspace_id
-      })
-    );
-    return listItems4(data, ["hosts", "items"]);
-  }
-  async ensureDockerDeployHost(params) {
-    const data = await this.http.request("/docker-deploy/hosts/ensure", {
-      method: "POST",
-      body: stripUndefined10({
-        workspace_id: params.workspaceId ?? params.workspace_id,
-        region: params.region,
-        size: params.size,
-        appliance_image: params.applianceImage ?? params.appliance_image,
-        metadata: params.metadata
-      }),
-      headers: { "Idempotency-Key": idempotencyKey4(params.idempotencyKey) }
+      metadata: dockerDeployMetadata(params.metadata)
     });
-    return unwrap23(data);
-  }
-  async getDockerDeployHost(hostId) {
-    const data = await this.http.get(`/docker-deploy/hosts/${hostId}`);
-    return unwrap23(data);
   }
   /**
-   * Verify a Docker Deploy deployment end-to-end.
-   *
-   * This checks the deployment product marker, Docker Deploy host linkage,
-   * appliance health, route runtime metadata, and optionally the public URL.
-   * It is intentionally agent-friendly: use this after sandbox.deployDocker()
-   * or createDockerDeploy() before telling a user the app is live.
+   * Verify a Docker Deploy deployment before telling a user or agent it is
+   * live. Checks product markers, appliance host health, route metadata, and
+   * optionally probes the public URL.
    */
   async doctorDockerDeploy(deploymentId, params = {}) {
     const checks = [];
     const deployment = await this.get(deploymentId);
-    const metadata = isRecord(deployment.metadata) ? deployment.metadata : {};
-    const product = stringValue(deployment.deployment_product) ?? stringValue(metadata.deployment_product);
-    const hostId = stringValue(deployment.docker_deploy_host_id) ?? stringValue(metadata.docker_deploy_host_id);
+    const metadata = deployment.metadata ?? {};
+    const product = dockerDeployProduct(deployment);
+    const hostId = dockerDeployHostId(deployment);
     addDoctorCheck(
       checks,
       "deployment_product",
       product === "docker_deploy",
-      product === "docker_deploy" ? "Deployment is marked as Docker Deploy." : `Expected deployment_product=docker_deploy, got ${product ?? "missing"}.`,
-      { product: product ?? null }
+      product === "docker_deploy" ? "Deployment is marked for Docker Deploy." : `Expected deployment_product=docker_deploy, got ${String(product ?? "missing")}.`,
+      { deployment_product: product ?? null }
     );
     addDoctorCheck(
       checks,
       "docker_deploy_host_id",
-      !!hostId,
-      hostId ? "Deployment is linked to a Docker Deploy appliance host." : "Deployment has no docker_deploy_host_id.",
-      { docker_deploy_host_id: hostId ?? null }
+      Boolean(hostId),
+      hostId ? "Deployment has a Docker Deploy host id." : "Deployment has no docker_deploy_host_id.",
+      { docker_deploy_host_id: hostId }
     );
     let host;
     if (hostId) {
       try {
-        host = await this.getDockerDeployHost(hostId);
-        const status = host.status ?? null;
-        const applianceStatus = host.appliance_status ?? null;
-        const badHostStates = /* @__PURE__ */ new Set(["failed", "error", "destroyed"]);
-        const badApplianceStates = /* @__PURE__ */ new Set(["failed", "error", "unhealthy"]);
-        const ok = !badHostStates.has(String(status)) && !badApplianceStates.has(String(applianceStatus));
+        const rawHost = await this.http.get(
+          `/docker-deploy/hosts/${hostId}`
+        );
+        host = unwrap25(
+          rawHost
+        );
         addDoctorCheck(
           checks,
           "docker_deploy_host_health",
-          ok,
-          ok ? "Docker Deploy host is not reporting a failed state." : `Docker Deploy host is unhealthy: status=${status}, appliance_status=${applianceStatus}.`,
-          { status, appliance_status: applianceStatus }
+          hostHealthy(host),
+          hostHealthy(host) ? "Docker Deploy host is active and healthy." : `Docker Deploy host status=${host.status} appliance=${host.appliance_status}.`,
+          {
+            status: host.status,
+            appliance_status: host.appliance_status
+          }
         );
-      } catch (err) {
+      } catch (error) {
         addDoctorCheck(
           checks,
           "docker_deploy_host_health",
           false,
-          `Could not fetch Docker Deploy host ${hostId}: ${err instanceof Error ? err.message : String(err)}`
+          error instanceof Error ? error.message : String(error)
         );
       }
     }
-    const runtime = runtimeMetadata(metadata);
-    const runtimeIp = runtime ? stringValue(runtime.ip) ?? stringValue(runtime.ip_address) : void 0;
-    const runtimePort = runtime?.port;
+    const app = dockerDeployApp(deployment);
+    const appPort = dockerDeployAppPort(app);
+    const appRunning = app?.status === "running" && appPort !== null;
     addDoctorCheck(
       checks,
-      "route_runtime",
-      !!runtimeIp && runtimePort !== void 0 && runtimePort !== null,
-      runtimeIp && runtimePort !== void 0 && runtimePort !== null ? "Deployment route metadata points at a runtime target." : "Deployment metadata has no runtime ip/port target.",
-      { ip: runtimeIp ?? null, port: runtimePort ?? null }
-    );
-    const publicUrl = stringValue(deployment.public_url) ?? stringValue(metadata.public_url);
+      "docker_deploy_app",
+      appRunning,
+      appRunning ? "Docker Deploy app metadata points at a running container." : "Deployment is missing running Docker Deploy app metadata.",
+      app ? {
+        app_id: app.app_id,
+        container_id: app.container_id,
+        status: app.status,
+        url: app.url,
+        expected_port: appPort
+      } : void 0
+    );
+    const runtime = metadata.runtime;
+    const runtimeCandidate = typeof runtime === "object" && runtime !== null ? runtime : void 0;
+    const hasRuntimeRoute = typeof runtimeCandidate?.ip === "string" && typeof runtimeCandidate.port === "number";
+    const runtimeRecord = hasRuntimeRoute ? runtimeCandidate : void 0;
+    const routeMatchesContainerPort = hasRuntimeRoute && (appPort === null || runtimeRecord?.port === appPort);
     addDoctorCheck(
       checks,
-      "public_url",
-      !!publicUrl,
-      publicUrl ? "Deployment has a public URL." : "Deployment has no public URL to probe.",
-      { public_url: publicUrl ?? null }
+      "runtime_route",
+      hasRuntimeRoute && routeMatchesContainerPort,
+      hasRuntimeRoute && routeMatchesContainerPort ? "Deployment route points at the Docker container host port." : hasRuntimeRoute && appPort !== null ? `Deployment route port ${String(runtimeRecord?.port)} does not match Docker container host port ${appPort}.` : "Deployment is missing appliance runtime route metadata.",
+      runtimeRecord ? {
+        ...runtimeRecord,
+        expected_port: appPort,
+        docker_deploy_url: app?.url
+      } : void 0
     );
     let probe;
-    if (params.probe !== false && publicUrl) {
-      const fetchImpl = params.fetchImpl ?? fetch;
-      const url = publicProbeUrl(publicUrl, params.probePath ?? "/");
+    const publicUrl = deployment.public_url;
+    const path = params.probePath ?? params.probe_path ?? "/";
+    if (publicUrl && typeof fetch === "function") {
+      const url = probeUrl(publicUrl, path);
       const controller = new AbortController();
-      const timer = setTimeout(() => controller.abort(), params.timeoutMs ?? 2e4);
+      const timeout = setTimeout(
+        () => controller.abort(),
+        params.timeoutMs ?? params.timeout_ms ?? 1e4
+      );
       try {
-        const response = await fetchImpl(url, {
-          headers: { Accept: "*/*" },
+        const response = await fetch(url, {
+          method: "GET",
           signal: controller.signal
         });
-        const text = await response.text();
-        const gatewayJson = looksLikeMiosaGatewayJson(text);
-        const ok = response.ok && !gatewayJson;
-        probe = {
-          url,
-          status: response.status,
-          ok,
-          responseSnippet: text.slice(0, 500)
-        };
-        if (gatewayJson) probe.gatewayJson = true;
+        probe = { url, ok: response.ok, status: response.status };
         addDoctorCheck(
           checks,
           "public_url_probe",
-          ok,
-          ok ? `Public URL returned HTTP ${response.status}.` : gatewayJson ? "Public URL returned MIOSA gateway JSON instead of the app." : `Public URL returned HTTP ${response.status}.`,
-          { status: response.status, gateway_json: gatewayJson }
+          response.ok,
+          `Public URL returned HTTP ${response.status}.`,
+          { url, status: response.status }
         );
-      } catch (err) {
-        const message = err instanceof Error ? err.message : String(err);
-        probe = { url, status: null, ok: false, responseSnippet: message };
+      } catch (error) {
+        probe = {
+          url,
+          ok: false,
+          error: error instanceof Error ? error.message : String(error)
+        };
         addDoctorCheck(
           checks,
           "public_url_probe",
           false,
-          `Public URL probe failed: ${message}`
+          probe.error ?? "Public URL probe failed.",
+          { url }
         );
       } finally {
-        clearTimeout(timer);
+        clearTimeout(timeout);
       }
     }
-    const result = {
+    return {
       ok: checks.every((check) => check.ok),
       deployment,
-      checks
+      ...host ? { host } : {},
+      checks,
+      ...probe ? { probe } : {}
     };
-    if (host) result.host = host;
-    if (publicUrl !== void 0) result.publicUrl = publicUrl;
-    if (probe) result.probe = probe;
-    return result;
-  }
-  async listDockerDeployTemplates(params = {}) {
-    const query = {
-      category: params.category,
-      runtime: params.runtime,
-      framework: params.framework,
-      include_preview: params.includePreview ?? params.include_preview
-    };
-    const data = await this.http.get(
-      "/docker-deploy/templates",
-      stripUndefined10(query)
-    );
-    const templates = unwrap23(data);
-    if (Array.isArray(templates)) return templates;
-    return (templates?.templates ?? templates?.items ?? templates?.data ?? []) || [];
-  }
-  async getDockerDeployTemplate(templateId) {
-    const data = await this.http.get(
-      `/docker-deploy/templates/${templateId}`
-    );
-    return unwrap23(data);
   }
   async update(deploymentId, params) {
-    const body = stripUndefined10({
+    const body2 = stripUndefined11({
       name: params.name,
       branch: params.branch,
       build_command: params.buildCommand ?? params.build_command,
@@ -4032,37 +4151,29 @@ var Deployments = class {
     });
     const data = await this.http.patch(
       `/deployments/${deploymentId}`,
-      body
+      body2
     );
-    return unwrap23(data);
+    return unwrap25(data);
   }
   async delete(deploymentId) {
     await this.http.delete(`/deployments/${deploymentId}`);
   }
   async publish(deploymentId, params) {
-    const body = stripUndefined10({
+    const body2 = stripUndefined11({
       source_sandbox_id: params.sourceSandboxId ?? params.source_sandbox_id,
       output_path: params.outputPath ?? params.output_path,
       entrypoint: params.entrypoint,
-      promote: params.promote,
-      build_command: params.buildCommand ?? params.build_command,
-      run_command: params.runCommand ?? params.run_command,
-      port: params.port,
-      health_check_path: params.healthCheckPath ?? params.health_check_path,
-      deployment_type: params.deploymentType ?? params.deployment_type,
-      docker_deploy_template_id: params.dockerDeployTemplateId ?? params.docker_deploy_template_id,
-      data_services: params.dataServices ?? params.data_services,
-      ...attributionBody(params)
+      promote: params.promote
     });
     const data = await this.http.request(
       `/deployments/${deploymentId}/publish`,
       {
         method: "POST",
-        body,
+        body: body2,
         headers: { "Idempotency-Key": idempotencyKey4(params.idempotencyKey) }
       }
     );
-    return unwrap23(data);
+    return unwrap25(data);
   }
   /**
    * Backward-compatible bridge: POST /sandboxes/:id/deploy. Works today;
@@ -4070,46 +4181,38 @@ var Deployments = class {
    * phase. Prefer `publish()` once Phase 2B/3 lands.
    */
   async publishFromSandbox(sandboxId, params = {}) {
-    const body = stripUndefined10({
+    const body2 = stripUndefined11({
       name: params.name,
       deployment_id: params.deploymentId ?? params.deployment_id,
       output_path: params.outputPath ?? params.output_path,
       source_snapshot_path: params.sourceSnapshotPath ?? params.source_snapshot_path,
       entrypoint: params.entrypoint,
       domain: params.domain,
-      custom_domain: params.customDomain ?? params.custom_domain,
-      build_command: params.buildCommand ?? params.build_command,
-      run_command: params.runCommand ?? params.run_command,
-      port: params.port,
-      health_check_path: params.healthCheckPath ?? params.health_check_path,
-      deployment_type: params.deploymentType ?? params.deployment_type,
-      docker_deploy_template_id: params.dockerDeployTemplateId ?? params.docker_deploy_template_id,
-      data_services: params.dataServices ?? params.data_services,
-      ...attributionBody(params)
+      custom_domain: params.customDomain ?? params.custom_domain
     });
     const data = await this.http.request(
       `/sandboxes/${sandboxId}/deploy`,
       {
         method: "POST",
-        body,
+        body: body2,
         headers: { "Idempotency-Key": idempotencyKey4(params.idempotencyKey) }
       }
     );
-    return unwrap23(data);
+    return unwrap25(data);
   }
   async rollback(deploymentId, params = {}) {
-    const body = stripUndefined10({
+    const body2 = stripUndefined11({
       version_id: params.versionId ?? params.version_id
     });
     const data = await this.http.request(
       `/deployments/${deploymentId}/rollback`,
       {
         method: "POST",
-        body,
+        body: body2,
         headers: { "Idempotency-Key": idempotencyKey4(params.idempotencyKey) }
       }
     );
-    return unwrap23(data);
+    return unwrap25(data);
   }
   async listBuilds(deploymentId) {
     const data = await this.http.get(
@@ -4121,7 +4224,7 @@ var Deployments = class {
     const data = await this.http.get(
       `/deployments/${deploymentId}/builds/${buildId}`
     );
-    return unwrap23(data);
+    return unwrap25(data);
   }
   async listEnv(deploymentId) {
     const data = await this.http.get(
@@ -4130,10 +4233,10 @@ var Deployments = class {
     return listItems4(data);
   }
   async setEnv(deploymentId, vars, opts = {}) {
-    const body = stripUndefined10({ env: vars, environment: opts.environment });
+    const body2 = stripUndefined11({ env: vars, environment: opts.environment });
     const data = await this.http.post(
       `/deployments/${deploymentId}/env`,
-      body
+      body2
     );
     return listItems4(data);
   }
@@ -4154,208 +4257,92 @@ var Deployments = class {
   }
 };
 
-// src/resources/devices.ts
-var DEVICE_CATALOG = [
-  {
-    kind: "sandbox_worker",
-    label: "Sandbox Worker",
-    purpose: "Isolated Linux workspace for agents to create files, run code, preview apps, snapshot, fork, and publish.",
-    lifecycle: "Persistent by default; use stop/resume/snapshot/fork where the account backend supports saved state.",
-    persistence: "Use one-hour timeouts for interactive builds and checkpoint before long pauses.",
-    primaryCommands: [
-      "miosa.sandboxes.create({ templateId: 'nextjs', timeoutSec: 3600 })",
-      "sandbox.exec.run('codex ...', { cwd: '/workspace' })",
-      "sandbox.files.write('/workspace/app/page.jsx', source)",
-      "miosa.deployments.publishFromSandbox(...)"
-    ],
-    useWhen: [
-      "Coding agents should build inside the remote filesystem.",
-      "You need command execution, file writes, package installs, previews, artifacts, or app publish.",
-      "You want virtual-device behavior without a GUI desktop."
-    ],
-    avoidWhen: [
-      "The workflow requires full browser/desktop control.",
-      "The app is ready for production; publish it to a deployment runtime."
-    ]
-  },
-  {
-    kind: "computer",
-    label: "Computer",
-    purpose: "Durable VM/desktop device for browser automation, CUA sessions, SSH, tunnels, and persistent agent control.",
-    lifecycle: "Managed as a Computer with desktop/browser and operator-style control surfaces.",
-    persistence: "Use checkpoints, volumes, tunnels, and agent sessions for long-lived desktop workflows.",
-    primaryCommands: [
-      "miosa.computers.create({ name: 'browser-agent' })",
-      "computer.exec.run('npm test')",
-      "computer.desktop.open()"
-    ],
-    useWhen: [
-      "The agent needs Chromium or a full desktop.",
-      "The workflow logs into dashboards, fills forms, clicks buttons, or captures screenshots.",
-      "A human and agent share the same persistent machine state."
-    ],
-    avoidWhen: [
-      "Simple code generation/build/test work fits a cheaper sandbox worker.",
-      "You only need durable app hosting."
-    ]
-  },
-  {
-    kind: "local_device",
-    label: "Local Device",
-    purpose: "Developer-owned machine connected through CLI/MCP for local discovery and private tooling.",
-    lifecycle: "Not hosted by MIOSA; the user owns uptime and state.",
-    persistence: "State is local machine state. Do not assume cloud resume semantics.",
-    primaryCommands: ["miosa mcp install", "miosa doctor --json"],
-    useWhen: [
-      "The agent needs local repository discovery before cloud execution.",
-      "The user intentionally wants local private tools."
-    ],
-    avoidWhen: [
-      "Customer code must stay isolated in MIOSA-hosted infrastructure.",
-      "The workflow needs reproducible shared cloud state."
-    ]
-  },
-  {
-    kind: "docker_deploy_host",
-    label: "Docker Deploy Host",
-    purpose: "Workspace appliance VM that runs Docker containers for durable apps published from sandboxes.",
-    lifecycle: "Always-on deployment capacity; not an interactive coding workspace.",
-    persistence: "Versioned releases and routing are durable; edits happen in sandboxes before publish.",
-    primaryCommands: [
-      "miosa sandbox publish <id> --docker-deploy",
-      "miosa deploy --docker-deploy"
-    ],
-    useWhen: [
-      "You need many small apps, APIs, funnels, or client sites in one workspace appliance.",
-      "You want stable public URLs backed by Docker containers."
-    ],
-    avoidWhen: [
-      "Interactive agent work is still happening.",
-      "The app needs the standard MIOSA Deploy runtime."
-    ]
-  }
-];
-var Devices = class {
-  http;
+// src/resources/docker-deploy.ts
+function workspaceId(params) {
+  return params?.workspace_id ?? params?.workspaceId;
+}
+function ensureBody(params) {
+  const body2 = {};
+  const id = params.workspace_id ?? params.workspaceId;
+  const externalId = params.external_workspace_id ?? params.externalWorkspaceId;
+  if (id) body2.workspace_id = id;
+  if (externalId) body2.external_workspace_id = externalId;
+  return body2;
+}
+function unwrapHost(response) {
+  const host = response.data ?? response.host;
+  if (!host) {
+    throw new Error("Docker Deploy host response was empty.");
+  }
+  return host;
+}
+function unwrapTemplates(response) {
+  return response.data ?? response.templates ?? [];
+}
+function unwrapTemplate(response) {
+  const template = response.data ?? response.template;
+  if (!template) {
+    throw new Error("Docker Deploy template response was empty.");
+  }
+  return template;
+}
+var DockerDeploy = class {
   constructor(http) {
     this.http = http;
   }
+  http;
   /**
-   * Return the static device catalog used by orchestration apps to choose the
-   * right MIOSA execution surface before creating resources.
+   * List Docker Deploy appliance hosts scoped to the current tenant.
+   *
+   * Pass a workspace ID to inspect the dedicated always-on appliance machine
+   * for one white-label workspace.
    */
-  catalog() {
-    return DEVICE_CATALOG.map((entry) => ({ ...entry }));
+  async listHosts(params = {}) {
+    const res = await this.http.get(
+      "/docker-deploy/hosts",
+      { workspace_id: workspaceId(params) }
+    );
+    return res.data ?? res.hosts ?? [];
   }
   /**
-   * List hosted devices by normalizing existing sandboxes and computers.
-   * Partial backend failures are returned in `errors` so orchestration UIs can
-   * still show usable inventory instead of failing the whole page.
+   * Ensure a workspace has its dedicated Docker Deploy appliance host.
+   *
+   * The host may still be `pending`, `provisioning`, or `bootstrapping` after
+   * this call. Treat `status === "active"` and `appliance_status === "healthy"`
+   * as the ready condition before sending app/container traffic to it.
    */
-  async list(params = {}) {
-    const kind = normalizeKind(params.kind ?? "all");
-    const devices = [];
-    const errors = [];
-    if (kind === "all" || kind === "sandbox_worker") {
-      try {
-        const sandboxes = await this.http.get("/sandboxes");
-        devices.push(...unwrapList11(sandboxes, ["sandboxes"]).map(normalizeSandbox));
-      } catch (err) {
-        errors.push(toListError("sandboxes", err));
-      }
-    }
-    if (kind === "all" || kind === "computer") {
-      try {
-        const computers = await this.http.get("/computers");
-        devices.push(...unwrapList11(computers, ["computers"]).map(normalizeComputer));
-      } catch (err) {
-        errors.push(toListError("computers", err));
-      }
-    }
-    return { devices, errors };
+  async ensureHost(params = {}) {
+    const res = await this.http.post(
+      "/docker-deploy/hosts/ensure",
+      ensureBody(params)
+    );
+    return { host: unwrapHost(res), queued: res.queued ?? false };
   }
-};
-function normalizeKind(kind) {
-  if (kind === "all") return "all";
-  if (kind === "sandbox" || kind === "sandbox_worker") {
-    return "sandbox_worker";
-  }
-  if (kind === "computer") return "computer";
-  throw new Error(`Unsupported device kind: ${kind}`);
-}
-function normalizeSandbox(row) {
-  return compactRecord({
-    id: stringField(row, "id"),
-    kind: "sandbox_worker",
-    source: "sandboxes",
-    name: optionalString(row, "name"),
-    state: optionalString(row, "state") ?? optionalString(row, "status"),
-    ready: optionalBoolean(row, "ready"),
-    persistent: optionalBoolean(row, "persistent"),
-    alwaysOn: optionalBoolean(row, "always_on"),
-    template: optionalString(row, "template_id") ?? optionalString(row, "template"),
-    previewUrl: optionalString(row, "preview_url"),
-    timeoutRemainingMs: optionalNumber(row, "timeout_remaining_ms")
-  });
-}
-function normalizeComputer(row) {
-  return compactRecord({
-    id: stringField(row, "id"),
-    kind: "computer",
-    source: "computers",
-    name: optionalString(row, "name"),
-    state: optionalString(row, "status") ?? optionalString(row, "state"),
-    ready: optionalBoolean(row, "ready"),
-    region: optionalString(row, "region"),
-    template: optionalString(row, "template_type") ?? optionalString(row, "template")
-  });
-}
-function compactRecord(record) {
-  return Object.fromEntries(
-    Object.entries(record).filter(([, value]) => value !== void 0)
-  );
-}
-function unwrapList11(payload, keys) {
-  const value = isRecord2(payload) && "data" in payload ? payload.data : payload;
-  if (Array.isArray(value)) return value.filter(isRecord2);
-  if (isRecord2(value)) {
-    for (const key of keys) {
-      const nested = value[key];
-      if (Array.isArray(nested)) return nested.filter(isRecord2);
-    }
+  /** Fetch one Docker Deploy host by ID. */
+  async getHost(hostId) {
+    const res = await this.http.get(
+      `/docker-deploy/hosts/${hostId}`
+    );
+    return unwrapHost(res);
   }
-  return [];
-}
-function toListError(source, err) {
-  const message = err instanceof Error ? err.message : String(err);
-  return {
-    source,
-    message,
-    retryable: /fetch failed|ECONNRESET|HTTP 502|other side closed|socket hang up|bad gateway/i.test(
-      message
-    )
-  };
-}
-function stringField(row, key) {
-  const value = row[key];
-  return typeof value === "string" ? value : String(value ?? "");
-}
-function optionalString(row, key) {
-  const value = row[key];
-  return typeof value === "string" && value.length > 0 ? value : void 0;
-}
-function optionalBoolean(row, key) {
-  return typeof row[key] === "boolean" ? row[key] : void 0;
-}
-function optionalNumber(row, key) {
-  return typeof row[key] === "number" ? row[key] : void 0;
-}
-function isRecord2(value) {
-  return value !== null && typeof value === "object" && !Array.isArray(value);
-}
+  /** List Docker Deploy starter templates. */
+  async listTemplates() {
+    const res = await this.http.get(
+      "/docker-deploy/templates"
+    );
+    return unwrapTemplates(res);
+  }
+  /** Fetch one Docker Deploy starter template by ID. */
+  async getTemplate(templateId) {
+    const res = await this.http.get(
+      `/docker-deploy/templates/${encodeURIComponent(templateId)}`
+    );
+    return unwrapTemplate(res);
+  }
+};
 
 // src/resources/email.ts
-function unwrap24(data) {
+function unwrap26(data) {
   if (data && typeof data === "object") {
     const d = data;
     for (const k of [
@@ -4371,7 +4358,7 @@ function unwrap24(data) {
   }
   return data;
 }
-function unwrapList12(data) {
+function unwrapList11(data) {
   if (Array.isArray(data)) return data;
   if (data && typeof data === "object") {
     const d = data;
@@ -4399,7 +4386,7 @@ var EmailCampaigns = class {
   }
   http;
   async list(filters = {}) {
-    return unwrapList12(
+    return unwrapList11(
       await this.http.get(
         "/admin/email-campaigns",
         filters
@@ -4407,12 +4394,12 @@ var EmailCampaigns = class {
     );
   }
   async create(attrs) {
-    return unwrap24(
+    return unwrap26(
       await this.http.post("/admin/email-campaigns", strip(attrs))
     );
   }
   async recipientCount(filters = {}) {
-    return unwrap24(
+    return unwrap26(
       await this.http.get(
         "/admin/email-campaigns/recipient-count",
         filters
@@ -4420,7 +4407,7 @@ var EmailCampaigns = class {
     );
   }
   async send(campaignId, opts = {}) {
-    return unwrap24(
+    return unwrap26(
       await this.http.post(
         `/admin/email-campaigns/${campaignId}/send`,
         strip(opts)
@@ -4428,14 +4415,14 @@ var EmailCampaigns = class {
     );
   }
   async cancel(campaignId) {
-    return unwrap24(
+    return unwrap26(
       await this.http.post(
         `/admin/email-campaigns/${campaignId}/cancel`
       )
     );
   }
   async deliveries(campaignId, filters = {}) {
-    return unwrapList12(
+    return unwrapList11(
       await this.http.get(
         `/admin/email-campaigns/${campaignId}/deliveries`,
         filters
@@ -4449,12 +4436,12 @@ var EmailTemplates = class {
   }
   http;
   async list(filters = {}) {
-    return unwrapList12(
+    return unwrapList11(
       await this.http.get("/admin/email-templates", filters)
     );
   }
   async create(key, attrs = {}) {
-    return unwrap24(
+    return unwrap26(
       await this.http.post("/admin/email-templates", {
         key,
         ...strip(attrs)
@@ -4462,7 +4449,7 @@ var EmailTemplates = class {
     );
   }
   async update(key, attrs) {
-    return unwrap24(
+    return unwrap26(
       await this.http.put(
         `/admin/email-templates/${key}`,
         strip(attrs)
@@ -4470,7 +4457,7 @@ var EmailTemplates = class {
     );
   }
   async reset(key) {
-    return unwrap24(
+    return unwrap26(
       await this.http.post(`/admin/email-templates/${key}/reset`)
     );
   }
@@ -4481,22 +4468,22 @@ var EmailInbox = class {
   }
   http;
   async list(filters = {}) {
-    return unwrapList12(
+    return unwrapList11(
       await this.http.get("/admin/email-inbox", filters)
     );
   }
   async send(attrs) {
-    return unwrap24(
+    return unwrap26(
       await this.http.post("/admin/email-inbox/send", strip(attrs))
     );
   }
   async markRead(messageId) {
-    return unwrap24(
+    return unwrap26(
       await this.http.post(`/admin/email-inbox/${messageId}/read`)
     );
   }
   async archive(messageId) {
-    return unwrap24(
+    return unwrap26(
       await this.http.post(`/admin/email-inbox/${messageId}/archive`)
     );
   }
@@ -4525,18 +4512,18 @@ var Embeddings = class {
    * `{ object: "list", data: [...], model, usage }`.
    */
   async create(params) {
-    const body = Object.fromEntries(
+    const body2 = Object.fromEntries(
       Object.entries(params).filter(([, v]) => v !== void 0)
     );
     return this.http.post(
       "/intelligence/embeddings",
-      body
+      body2
     );
   }
 };
 
 // src/resources/external-keys.ts
-function unwrap25(payload) {
+function unwrap27(payload) {
   if (payload && typeof payload === "object") {
     const p = payload;
     for (const k of ["data", "external_keys", "items"]) {
@@ -4545,7 +4532,7 @@ function unwrap25(payload) {
   }
   return payload;
 }
-function stripUndefined11(input) {
+function stripUndefined12(input) {
   return Object.fromEntries(
     Object.entries(input).filter(([, v]) => v !== void 0)
   );
@@ -4558,22 +4545,22 @@ var ExternalKeys = class {
   /** List configured external keys. */
   async list() {
     const data = await this.http.get("/external-keys");
-    const result = unwrap25(data);
+    const result = unwrap27(data);
     if (Array.isArray(result)) return result;
     return [];
   }
   /** Create / register an external provider key. */
   async create(params) {
-    const body = stripUndefined11(params);
-    const data = await this.http.post("/external-keys", body);
-    return unwrap25(data);
+    const body2 = stripUndefined12(params);
+    const data = await this.http.post("/external-keys", body2);
+    return unwrap27(data);
   }
   /** Resolve (preview) the stored key for a provider. */
   async resolve(provider) {
     const data = await this.http.get(
       `/external-keys/${provider}/resolve`
     );
-    return unwrap25(data);
+    return unwrap27(data);
   }
   /**
    * Delete the stored key for a provider.
@@ -4583,7 +4570,7 @@ var ExternalKeys = class {
     await this.http.delete(`/external-keys/${provider}`);
   }
 };
-function unwrap26(payload) {
+function unwrap28(payload) {
   if (payload && typeof payload === "object" && "data" in payload) {
     return payload.data;
   }
@@ -4599,7 +4586,7 @@ function listItems5(payload, candidateKeys = ["data", "domains", "items"]) {
   }
   return [];
 }
-function stripUndefined12(input) {
+function stripUndefined13(input) {
   return Object.fromEntries(
     Object.entries(input).filter(([, v]) => v !== void 0)
   );
@@ -4613,7 +4600,7 @@ var FlatCustomDomains = class {
   }
   http;
   async list(params = {}) {
-    const query = stripUndefined12({ ...params });
+    const query = stripUndefined13({ ...params });
     const data = await this.http.get("/custom-domains", query);
     return listItems5(data);
   }
@@ -4625,7 +4612,7 @@ var FlatCustomDomains = class {
       redirectPolicy,
       ...rest
     } = params;
-    const body = stripUndefined12({
+    const body2 = stripUndefined13({
       ...rest,
       resource_type: resourceType ?? rest.resource_type,
       resource_id: resourceId ?? rest.resource_id,
@@ -4633,16 +4620,16 @@ var FlatCustomDomains = class {
     });
     const data = await this.http.request("/custom-domains", {
       method: "POST",
-      body,
+      body: body2,
       headers: { "Idempotency-Key": idempotencyKey5(ikey) }
     });
-    return unwrap26(data);
+    return unwrap28(data);
   }
   async delete(domainId) {
     await this.http.delete(`/custom-domains/${domainId}`);
   }
 };
-function unwrap27(payload) {
+function unwrap29(payload) {
   if (payload && typeof payload === "object" && "data" in payload) {
     return payload.data;
   }
@@ -4658,7 +4645,7 @@ function listItems6(payload, candidateKeys = ["data", "functions", "items"]) {
   }
   return [];
 }
-function stripUndefined13(input) {
+function stripUndefined14(input) {
   return Object.fromEntries(
     Object.entries(input).filter(([, v]) => v !== void 0)
   );
@@ -4672,40 +4659,40 @@ var Functions = class {
   }
   http;
   async list(params = {}) {
-    const query = stripUndefined13({ ...params });
+    const query = stripUndefined14({ ...params });
     const data = await this.http.get("/functions", query);
     return listItems6(data);
   }
   async get(functionId) {
     const data = await this.http.get(`/functions/${functionId}`);
-    return unwrap27(data);
+    return unwrap29(data);
   }
   async create(params) {
     const { idempotencyKey: ikey, memoryMb, timeoutSec, ...rest } = params;
-    const body = stripUndefined13({
+    const body2 = stripUndefined14({
       ...rest,
       memory_mb: memoryMb ?? rest.memory_mb,
       timeout_sec: timeoutSec ?? rest.timeout_sec
     });
     const data = await this.http.request("/functions", {
       method: "POST",
-      body,
+      body: body2,
       headers: { "Idempotency-Key": idempotencyKey6(ikey) }
     });
-    return unwrap27(data);
+    return unwrap29(data);
   }
   async update(functionId, params) {
     const { memoryMb, timeoutSec, ...rest } = params;
-    const body = stripUndefined13({
+    const body2 = stripUndefined14({
       ...rest,
       memory_mb: memoryMb ?? rest.memory_mb,
       timeout_sec: timeoutSec ?? rest.timeout_sec
     });
     const data = await this.http.patch(
       `/functions/${functionId}`,
-      body
+      body2
     );
-    return unwrap27(data);
+    return unwrap29(data);
   }
   async delete(functionId) {
     await this.http.delete(`/functions/${functionId}`);
@@ -4726,7 +4713,7 @@ var Functions = class {
     return data ?? {};
   }
 };
-function unwrap28(payload) {
+function unwrap30(payload) {
   if (payload && typeof payload === "object" && "data" in payload) {
     return payload.data;
   }
@@ -4742,7 +4729,7 @@ function listItems7(payload, candidateKeys = ["data", "health_checks", "items"])
   }
   return [];
 }
-function stripUndefined14(input) {
+function stripUndefined15(input) {
   return Object.fromEntries(
     Object.entries(input).filter(([, v]) => v !== void 0)
   );
@@ -4756,13 +4743,13 @@ var HealthChecks = class {
   }
   http;
   async list(params = {}) {
-    const query = stripUndefined14({ ...params });
+    const query = stripUndefined15({ ...params });
     const data = await this.http.get("/health-checks", query);
     return listItems7(data);
   }
   async get(checkId) {
     const data = await this.http.get(`/health-checks/${checkId}`);
-    return unwrap28(data);
+    return unwrap30(data);
   }
   async create(params) {
     const {
@@ -4772,7 +4759,7 @@ var HealthChecks = class {
       expectedStatus,
       ...rest
     } = params;
-    const body = stripUndefined14({
+    const body2 = stripUndefined15({
       ...rest,
       interval_sec: intervalSec ?? rest.interval_sec,
       timeout_sec: timeoutSec ?? rest.timeout_sec,
@@ -4780,14 +4767,14 @@ var HealthChecks = class {
     });
     const data = await this.http.request("/health-checks", {
       method: "POST",
-      body,
+      body: body2,
       headers: { "Idempotency-Key": idempotencyKey7(ikey) }
     });
-    return unwrap28(data);
+    return unwrap30(data);
   }
   async update(checkId, params) {
     const { intervalSec, timeoutSec, expectedStatus, ...rest } = params;
-    const body = stripUndefined14({
+    const body2 = stripUndefined15({
       ...rest,
       interval_sec: intervalSec ?? rest.interval_sec,
       timeout_sec: timeoutSec ?? rest.timeout_sec,
@@ -4795,9 +4782,9 @@ var HealthChecks = class {
     });
     const data = await this.http.patch(
       `/health-checks/${checkId}`,
-      body
+      body2
     );
-    return unwrap28(data);
+    return unwrap30(data);
   }
   async delete(checkId) {
     await this.http.delete(`/health-checks/${checkId}`);
@@ -4805,7 +4792,7 @@ var HealthChecks = class {
 };
 
 // src/resources/integrations.ts
-function unwrap29(payload) {
+function unwrap31(payload) {
   if (payload && typeof payload === "object") {
     const p = payload;
     for (const k of ["data", "integrations", "catalog", "items"]) {
@@ -4815,11 +4802,11 @@ function unwrap29(payload) {
   return payload;
 }
 function listItems8(payload) {
-  const result = unwrap29(payload);
+  const result = unwrap31(payload);
   if (Array.isArray(result)) return result;
   return [];
 }
-function stripUndefined15(input) {
+function stripUndefined16(input) {
   return Object.fromEntries(
     Object.entries(input).filter(([, v]) => v !== void 0)
   );
@@ -4844,14 +4831,14 @@ var Integrations = class {
     const data = await this.http.get(
       `/integrations/${provider}/start`
     );
-    return unwrap29(data);
+    return unwrap31(data);
   }
   /** Force-refresh the access token for a provider. */
   async refresh(provider) {
     const data = await this.http.post(
       `/integrations/${provider}/refresh`
     );
-    return unwrap29(data);
+    return unwrap31(data);
   }
   /** Disconnect (revoke) an integration. */
   async disconnect(provider) {
@@ -4871,41 +4858,41 @@ var Integrations = class {
   // ── Test hooks ─────────────────────────────────────────────────────────────
   /** Send a test message to the connected Slack channel. */
   async slackSendTest(params = {}) {
-    const body = stripUndefined15(params);
+    const body2 = stripUndefined16(params);
     const data = await this.http.post(
       "/integrations/slack/send-test",
-      body
+      body2
     );
-    return unwrap29(data);
+    return unwrap31(data);
   }
   /** Send a test message to the connected Discord channel. */
   async discordSendTest(params = {}) {
-    const body = stripUndefined15(params);
+    const body2 = stripUndefined16(params);
     const data = await this.http.post(
       "/integrations/discord/send-test",
-      body
+      body2
     );
-    return unwrap29(data);
+    return unwrap31(data);
   }
   // ── Linear dedicated controller ────────────────────────────────────────────
   /** Begin Linear OAuth — Linear has provider-specific error shapes. */
   async linearStart() {
     const data = await this.http.get("/integrations/linear/start");
-    return unwrap29(data);
+    return unwrap31(data);
   }
   /** Create a Linear issue via the connected workspace. */
   async linearCreateIssue(params = {}) {
-    const body = stripUndefined15(params);
+    const body2 = stripUndefined16(params);
     const data = await this.http.post(
       "/integrations/linear/create-issue",
-      body
+      body2
     );
-    return unwrap29(data);
+    return unwrap31(data);
   }
 };
 
 // src/resources/mcp.ts
-function unwrap30(payload) {
+function unwrap32(payload) {
   if (payload && typeof payload === "object") {
     const p = payload;
     for (const k of ["data", "mcp", "result", "items"]) {
@@ -4914,7 +4901,7 @@ function unwrap30(payload) {
   }
   return payload;
 }
-function stripUndefined16(input) {
+function stripUndefined17(input) {
   return Object.fromEntries(
     Object.entries(input).filter(([, v]) => v !== void 0)
   );
@@ -4926,12 +4913,12 @@ var Mcp = class {
   http;
   /** Send a JSON-RPC request to the MCP endpoint. */
   async dispatch(params = {}) {
-    const body = stripUndefined16(params);
+    const body2 = stripUndefined17(params);
     const data = await this.http.post(
       "/mcp",
-      Object.keys(body).length > 0 ? body : void 0
+      Object.keys(body2).length > 0 ? body2 : void 0
     );
-    return unwrap30(data);
+    return unwrap32(data);
   }
   /**
    * Open the MCP listen channel (GET).
@@ -4941,7 +4928,7 @@ var Mcp = class {
    */
   async listen() {
     const data = await this.http.get("/mcp");
-    return unwrap30(data);
+    return unwrap32(data);
   }
   /** Close (terminate) the MCP session. */
   async close() {
@@ -4950,7 +4937,7 @@ var Mcp = class {
 };
 
 // src/resources/models.ts
-function unwrap31(data) {
+function unwrap33(data) {
   if (Array.isArray(data)) return data;
   if (data && typeof data === "object") {
     const d = data;
@@ -4971,7 +4958,7 @@ var Models = class {
       Object.entries(filters).filter(([, v]) => v !== void 0)
     );
     const data = await this.http.get("/intelligence/models", query);
-    return unwrap31(data);
+    return unwrap33(data);
   }
   /**
    * Get a single model by id.
@@ -4994,30 +4981,43 @@ var Agents = class {
   base(hostId) {
     return `/opencomputers/hosts/${hostId}/agent`;
   }
+  unwrapSession(payload) {
+    const value = payload && typeof payload === "object" && "session" in payload ? payload.session : payload && typeof payload === "object" && "data" in payload ? payload.data : payload;
+    const session = value;
+    if (!session.id && session.session_id) {
+      return { ...session, id: session.session_id };
+    }
+    return session;
+  }
+  unwrapList(payload) {
+    if (payload && typeof payload === "object" && "sessions" in payload) {
+      return { data: payload.sessions };
+    }
+    if (Array.isArray(payload)) {
+      return { data: payload };
+    }
+    return payload;
+  }
   /**
    * Dispatch a new agent session on the host.
    */
   async dispatch(hostId, params) {
-    return this.http.post(
-      `${this.base(hostId)}/dispatch`,
-      params
-    );
+    const payload = await this.http.post(`${this.base(hostId)}/dispatch`, params);
+    return this.unwrapSession(payload);
   }
   /**
    * List all agent sessions for a host.
    */
   async list(hostId) {
-    return this.http.get(
-      `${this.base(hostId)}/sessions`
-    );
+    const payload = await this.http.get(`${this.base(hostId)}/sessions`);
+    return this.unwrapList(payload);
   }
   /**
    * Fetch the current state of a specific agent session.
    */
   async get(hostId, sessionId) {
-    return this.http.get(
-      `${this.base(hostId)}/sessions/${sessionId}`
-    );
+    const payload = await this.http.get(`${this.base(hostId)}/sessions/${sessionId}`);
+    return this.unwrapSession(payload);
   }
   /**
    * Stream live events from an agent session.
@@ -5505,49 +5505,49 @@ var OcWorkspaces = class {
   /**
    * Fetch a single workspace.
    */
-  async get(hostId, workspaceId) {
+  async get(hostId, workspaceId2) {
     return this.http.get(
-      `${this.base(hostId)}/${workspaceId}`
+      `${this.base(hostId)}/${workspaceId2}`
     );
   }
   /**
    * Update workspace metadata (name, branch).
    */
-  async update(hostId, workspaceId, params) {
+  async update(hostId, workspaceId2, params) {
     return this.http.patch(
-      `${this.base(hostId)}/${workspaceId}`,
+      `${this.base(hostId)}/${workspaceId2}`,
       params
     );
   }
   /**
    * Delete a workspace.
    */
-  async delete(hostId, workspaceId) {
-    return this.http.delete(`${this.base(hostId)}/${workspaceId}`);
+  async delete(hostId, workspaceId2) {
+    return this.http.delete(`${this.base(hostId)}/${workspaceId2}`);
   }
   /**
    * Pull the latest changes from the remote repository.
    */
-  async pull(hostId, workspaceId) {
+  async pull(hostId, workspaceId2) {
     return this.http.post(
-      `${this.base(hostId)}/${workspaceId}/pull`
+      `${this.base(hostId)}/${workspaceId2}/pull`
     );
   }
   /**
    * Open a terminal session scoped to the workspace root directory.
    * Returns a short-lived WebSocket ticket.
    */
-  async openTerminal(hostId, workspaceId) {
+  async openTerminal(hostId, workspaceId2) {
     return this.http.post(
-      `${this.base(hostId)}/${workspaceId}/open-terminal`
+      `${this.base(hostId)}/${workspaceId2}/open-terminal`
     );
   }
   /**
    * Stream workspace setup / clone / install events.
    */
-  events(hostId, workspaceId) {
+  events(hostId, workspaceId2) {
     return this.http.stream(
-      `${this.base(hostId)}/${workspaceId}/events`
+      `${this.base(hostId)}/${workspaceId2}/events`
     );
   }
 };
@@ -5601,7 +5601,7 @@ function resourcePayload(params) {
   return { resource_type, resource_id };
 }
 function authConfig(params) {
-  return stripUndefined17({
+  return stripUndefined18({
     ...params.config ?? {},
     signup_enabled: params.signup_enabled ?? params.signupEnabled,
     email_confirm_required: params.email_confirm_required ?? params.emailConfirmRequired,
@@ -5609,12 +5609,12 @@ function authConfig(params) {
   });
 }
 function requestBody(params) {
-  return stripUndefined17({
+  return stripUndefined18({
     ...resourcePayload(params),
     config: authConfig(params)
   });
 }
-function unwrap32(payload) {
+function unwrap34(payload) {
   if (payload && typeof payload === "object") {
     const p = payload;
     for (const k of ["data", "project_auth", "config", "items"]) {
@@ -5623,7 +5623,7 @@ function unwrap32(payload) {
   }
   return payload;
 }
-function stripUndefined17(input) {
+function stripUndefined18(input) {
   return Object.fromEntries(
     Object.entries(input).filter(([, v]) => v !== void 0)
   );
@@ -5639,13 +5639,13 @@ var ProjectAuth = class {
       "/project-auth/status",
       resourcePayload(params)
     );
-    return unwrap32(data);
+    return unwrap34(data);
   }
   /** Enable project auth. */
   async enable(params) {
-    const body = requestBody(params);
-    const data = await this.http.post("/project-auth/enable", body);
-    return unwrap32(data);
+    const body2 = requestBody(params);
+    const data = await this.http.post("/project-auth/enable", body2);
+    return unwrap34(data);
   }
   /** Disable project auth. */
   async disable(params) {
@@ -5653,18 +5653,18 @@ var ProjectAuth = class {
       "/project-auth/disable",
       resourcePayload(params)
     );
-    return unwrap32(data);
+    return unwrap34(data);
   }
   /** Update project-auth configuration. */
   async update(params) {
-    const body = requestBody(params);
-    const data = await this.http.patch("/project-auth/config", body);
-    return unwrap32(data);
+    const body2 = requestBody(params);
+    const data = await this.http.patch("/project-auth/config", body2);
+    return unwrap34(data);
   }
 };
 
 // src/resources/project-integrations.ts
-function unwrap33(payload) {
+function unwrap35(payload) {
   if (payload && typeof payload === "object") {
     const p = payload;
     for (const k of ["data", "project_integrations", "catalog", "items"]) {
@@ -5674,11 +5674,11 @@ function unwrap33(payload) {
   return payload;
 }
 function listItems9(payload) {
-  const result = unwrap33(payload);
+  const result = unwrap35(payload);
   if (Array.isArray(result)) return result;
   return [];
 }
-function stripUndefined18(input) {
+function stripUndefined19(input) {
   return Object.fromEntries(
     Object.entries(input).filter(([, v]) => v !== void 0)
   );
@@ -5695,7 +5695,7 @@ var ProjectIntegrations = class {
   http;
   /** List project integrations. */
   async list(params = {}) {
-    const query = stripUndefined18(params);
+    const query = stripUndefined19(params);
     const data = await this.http.get("/project-integrations", query);
     return listItems9(data);
   }
@@ -5709,22 +5709,22 @@ var ProjectIntegrations = class {
     const data = await this.http.get(
       `/project-integrations/${integrationId}`
     );
-    return unwrap33(data);
+    return unwrap35(data);
   }
   /** Create a project integration. */
   async create(params) {
-    const body = stripUndefObj2(params);
-    const data = await this.http.post("/project-integrations", body);
-    return unwrap33(data);
+    const body2 = stripUndefObj2(params);
+    const data = await this.http.post("/project-integrations", body2);
+    return unwrap35(data);
   }
   /** Update a project integration. */
   async update(integrationId, params) {
-    const body = stripUndefObj2(params);
+    const body2 = stripUndefObj2(params);
     const data = await this.http.patch(
       `/project-integrations/${integrationId}`,
-      body
+      body2
     );
-    return unwrap33(data);
+    return unwrap35(data);
   }
   /** Delete a project integration. */
   async delete(integrationId) {
@@ -5733,7 +5733,7 @@ var ProjectIntegrations = class {
 };
 
 // src/resources/provider-defaults.ts
-function unwrap34(data) {
+function unwrap36(data) {
   if (data && typeof data === "object") {
     const d = data;
     for (const k of ["data", "defaults", "provider_defaults", "config"]) {
@@ -5749,7 +5749,7 @@ var ProviderDefaults = class {
   http;
   /** Get the current fleet-wide provider defaults. */
   async list() {
-    return unwrap34(await this.http.get("/admin/provider-defaults"));
+    return unwrap36(await this.http.get("/admin/provider-defaults"));
   }
   /** Return the defaults entry for a single provider, or {} if missing. */
   async get(provider) {
@@ -5762,29 +5762,29 @@ var ProviderDefaults = class {
   }
   /** Replace the fleet-wide defaults (PUT /admin/provider-defaults). */
   async update(opts) {
-    const body = Object.fromEntries(
+    const body2 = Object.fromEntries(
       Object.entries(opts).filter(([, v]) => v !== void 0)
     );
-    return unwrap34(
-      await this.http.put("/admin/provider-defaults", body)
+    return unwrap36(
+      await this.http.put("/admin/provider-defaults", body2)
     );
   }
   // ── Per-tenant overrides ────────────────────────────────────────────────
   async getTenant(tenantId) {
-    return unwrap34(
+    return unwrap36(
       await this.http.get(
         `/admin/tenants/${tenantId}/provider-config`
       )
     );
   }
   async setTenant(tenantId, opts) {
-    const body = Object.fromEntries(
+    const body2 = Object.fromEntries(
       Object.entries(opts).filter(([, v]) => v !== void 0)
     );
-    return unwrap34(
+    return unwrap36(
       await this.http.put(
         `/admin/tenants/${tenantId}/provider-config`,
-        body
+        body2
       )
     );
   }
@@ -5794,7 +5794,7 @@ var ProviderDefaults = class {
 };
 
 // src/resources/regions.ts
-function unwrap35(payload) {
+function unwrap37(payload) {
   if (payload && typeof payload === "object") {
     const p = payload;
     for (const k of [
@@ -5811,7 +5811,7 @@ function unwrap35(payload) {
   return payload;
 }
 function listItems10(payload) {
-  const result = unwrap35(payload);
+  const result = unwrap37(payload);
   if (Array.isArray(result)) return result;
   return [];
 }
@@ -5833,7 +5833,7 @@ var Regions = class {
   /** Get static compute pricing data. */
   async pricing() {
     const data = await this.http.get("/compute/pricing");
-    return unwrap35(data);
+    return unwrap37(data);
   }
   /** List community computer templates. */
   async listTemplates() {
@@ -5845,7 +5845,7 @@ var Regions = class {
     const data = await this.http.get(
       `/compute/templates/${templateId}`
     );
-    return unwrap35(data);
+    return unwrap37(data);
   }
 };
 
@@ -5859,12 +5859,36 @@ function encodeContent(content) {
   return btoa(bin);
 }
 var SANDBOX_TEMPLATE = "miosa-sandbox";
-function unwrap36(payload) {
+var AGENT_WORKSPACE_TIMEOUT_SEC = 86400;
+var AGENT_WORKSPACE_IDLE_TIMEOUT_SEC = 1800;
+var AGENT_WORKSPACE_SNAPSHOT_EXPIRATION_DAYS = 30;
+var AGENT_WORKSPACE_KEEP_LAST_SNAPSHOTS = 1;
+function unwrap38(payload) {
   if (payload !== null && typeof payload === "object" && "data" in payload && payload.data !== void 0) {
     return payload.data;
   }
   return payload;
 }
+function normalizeExport(value) {
+  const normalized = {
+    ...value,
+    files: (value.files ?? []).map((file) => {
+      const normalized2 = { ...file };
+      const downloadUrl = file.downloadUrl ?? file.download_url;
+      if (downloadUrl !== void 0) normalized2.downloadUrl = downloadUrl;
+      return normalized2;
+    })
+  };
+  const sandboxId = value.sandboxId ?? value.sandbox_id;
+  const archiveDownloadUrl = value.archiveDownloadUrl ?? value.archive_download_url;
+  const createdAt = value.createdAt ?? value.created_at;
+  if (sandboxId !== void 0) normalized.sandboxId = sandboxId;
+  if (archiveDownloadUrl !== void 0) {
+    normalized.archiveDownloadUrl = archiveDownloadUrl;
+  }
+  if (createdAt !== void 0) normalized.createdAt = createdAt;
+  return normalized;
+}
 function listItems11(payload) {
   if (Array.isArray(payload)) return payload;
   if ("data" in payload && Array.isArray(payload.data)) return payload.data;
@@ -5875,17 +5899,28 @@ function listItems11(payload) {
 }
 function createBody(params = {}) {
   const templateId = params.templateId ?? params.template_id ?? params.image ?? SANDBOX_TEMPLATE;
-  return stripUndefined19({
+  const persistent = params.persistent;
+  const snapshotExpirationSec = snapshotExpirationSeconds(params);
+  const keepLastSnapshots = params.keepLastSnapshots ?? params.keep_last_snapshots;
+  const metadata = { ...params.metadata ?? {} };
+  if (persistent !== void 0) metadata.miosa_persistent = persistent;
+  if (snapshotExpirationSec !== void 0) {
+    metadata.snapshot_expiration_sec = snapshotExpirationSec;
+  }
+  if (keepLastSnapshots !== void 0) {
+    metadata.keep_last_snapshots = keepLastSnapshots;
+  }
+  return stripUndefined20({
     template_id: templateId,
     cpu_count: params.cpuCount ?? params.cpu_count,
     memory_mb: params.memoryMb ?? params.memory_mb,
     disk_mb: params.diskMb ?? params.disk_mb,
     disk_size_mb: params.diskSizeMb ?? params.disk_size_mb,
-    timeout_sec: params.timeoutSec ?? params.timeout_sec,
-    idle_timeout_sec: params.idleTimeoutSec ?? params.idle_timeout_sec,
+    timeout_sec: params.timeoutSec ?? params.timeout_sec ?? (persistent === true ? 86400 : void 0),
+    idle_timeout_sec: params.idleTimeoutSec ?? params.idle_timeout_sec ?? (persistent === true ? 1800 : void 0),
     always_on: params.alwaysOn ?? params.always_on,
     env: params.env,
-    metadata: params.metadata,
+    metadata: Object.keys(metadata).length > 0 ? metadata : void 0,
     services: params.services,
     readiness_probe: params.readinessProbe ?? params.readiness_probe,
     database: params.database,
@@ -5897,24 +5932,32 @@ function createBody(params = {}) {
     entrypoint: params.entrypoint,
     tags: params.tags,
     slug: params.slug,
+    agent_runtime_profile_id: params.agentRuntimeProfileId ?? params.agent_runtime_profile_id ?? params.agentProfileId ?? params.agent_profile_id,
+    skip_agent_runtime_profile: params.skipAgentRuntimeProfile ?? params.skip_agent_runtime_profile,
     external_workspace_id: params.externalWorkspaceId ?? params.external_workspace_id,
     external_user_id: params.externalUserId ?? params.external_user_id,
     external_project_id: params.externalProjectId ?? params.external_project_id
   });
 }
 function execBody(command, options = {}) {
-  return stripUndefined19({
+  return stripUndefined20({
     command,
     cwd: options.cwd ?? options.workingDir ?? options.working_dir,
     env: options.env,
     timeout: options.timeout ?? options.timeoutSec ?? options.timeout_sec
   });
 }
-function stripUndefined19(input) {
+function stripUndefined20(input) {
   return Object.fromEntries(
     Object.entries(input).filter(([, value]) => value !== void 0)
   );
 }
+function snapshotExpirationSeconds(params) {
+  const seconds = params.snapshotExpirationSec ?? params.snapshot_expiration_sec;
+  if (seconds !== void 0) return seconds;
+  const days = params.snapshotExpirationDays ?? params.snapshot_expiration_days;
+  return days === void 0 ? void 0 : days * 86400;
+}
 var SandboxCommands = class {
   constructor(sandbox) {
     this.sandbox = sandbox;
@@ -6043,11 +6086,11 @@ var SandboxTerminal = class {
   }
   sandbox;
   async create(params = {}) {
-    const body = Object.fromEntries(
+    const body2 = Object.fromEntries(
       Object.entries(params).filter(([, v]) => v !== void 0)
     );
-    const response = unwrap36(
-      await this.sandbox.http.post(`/sandboxes/${this.sandbox.id}/terminal`, body)
+    const response = unwrap38(
+      await this.sandbox.http.post(`/sandboxes/${this.sandbox.id}/terminal`, body2)
     );
     return response;
   }
@@ -6089,21 +6132,21 @@ var SandboxPreviews = class {
     return [];
   }
   async create(port, opts = {}) {
-    const body = {
+    const body2 = {
       port,
       ...Object.fromEntries(
         Object.entries(opts).filter(([, v]) => v !== void 0)
       )
     };
-    return unwrap36(
+    return unwrap38(
       await this.http.post(
         `/sandboxes/${this.sandbox.id}/previews`,
-        body
+        body2
       )
     );
   }
   async get(previewId) {
-    return unwrap36(
+    return unwrap38(
       await this.http.get(
         `/sandboxes/${this.sandbox.id}/previews/${previewId}`
       )
@@ -6116,7 +6159,7 @@ var SandboxPreviews = class {
   }
   /** Mint a share token for previewId. */
   async share(previewId, opts = {}) {
-    return unwrap36(
+    return unwrap38(
       await this.http.post(
         `/sandboxes/${this.sandbox.id}/previews/${previewId}/share`,
         { ttl_seconds: opts.ttl_seconds ?? opts.expires_in_sec ?? 3600 }
@@ -6185,7 +6228,7 @@ var SandboxTags = class {
   sandbox;
   /** Replace the full tag list with tags. */
   async set(tags) {
-    return unwrap36(
+    return unwrap38(
       await this.sandbox.http.patch(`/sandboxes/${this.sandbox.id}/tags`, { tags })
     );
   }
@@ -6253,14 +6296,14 @@ var Sandbox = class _Sandbox {
     return this.data.template_id ?? this.data.image_id ?? "";
   }
   async refresh() {
-    this.data = unwrap36(
+    this.data = unwrap38(
       await this.http.get(`/sandboxes/${this.id}`)
     );
     return this;
   }
   async runExec(command, options) {
     this.assertRunning("exec");
-    const response = unwrap36(
+    const response = unwrap38(
       await this.http.post(
         `/sandboxes/${this.id}/exec`,
         execBody(command, options)
@@ -6303,12 +6346,34 @@ var Sandbox = class _Sandbox {
       `/sandboxes/${this.id}/files/${path.replace(/^\/+/, "")}`
     );
   }
+  async createExport(params) {
+    const body2 = typeof params === "string" ? { path: params } : Array.isArray(params) ? { paths: params } : params;
+    const response = unwrap38(
+      await this.http.post(
+        `/sandboxes/${this.id}/exports`,
+        body2
+      )
+    );
+    return normalizeExport(response);
+  }
+  async downloadExport(paths, options = {}) {
+    const query = new URLSearchParams();
+    if (Array.isArray(paths)) {
+      for (const path of paths) query.append("paths[]", path);
+    } else {
+      query.set("path", paths);
+    }
+    if (options.filename) query.set("filename", options.filename);
+    return this.http.getBinary(
+      `/sandboxes/${this.id}/exports/download?${query.toString()}`
+    );
+  }
   async readFile(path) {
     return new TextDecoder().decode(await this.download(path));
   }
   async listFiles(path = "/workspace") {
     this.assertRunning("files.list");
-    const response = unwrap36(
+    const response = unwrap38(
       await this.http.get(
         `/sandboxes/${this.id}/files`,
         { path }
@@ -6318,7 +6383,7 @@ var Sandbox = class _Sandbox {
   }
   async statFile(path) {
     this.assertRunning("files.stat");
-    return unwrap36(
+    return unwrap38(
       await this.http.post(
         `/sandboxes/${this.id}/files/stat`,
         { path }
@@ -6327,7 +6392,7 @@ var Sandbox = class _Sandbox {
   }
   async expose(port) {
     this.assertRunning("expose");
-    const response = unwrap36(
+    const response = unwrap38(
       await this.http.post(
         `/sandboxes/${this.id}/expose`,
         port === void 0 ? {} : { port }
@@ -6337,7 +6402,7 @@ var Sandbox = class _Sandbox {
   }
   async startTemplate(options = {}) {
     this.assertRunning("startTemplate");
-    return unwrap36(
+    return unwrap38(
       await this.http.post(
         `/sandboxes/${this.id}/template/start`,
         options
@@ -6345,7 +6410,7 @@ var Sandbox = class _Sandbox {
     );
   }
   async getArtifacts() {
-    return unwrap36(
+    return unwrap38(
       await this.http.get(
         `/sandboxes/${this.id}/artifacts`
       )
@@ -6356,7 +6421,7 @@ var Sandbox = class _Sandbox {
       `/sandboxes/${this.id}/logs`,
       { lines }
     );
-    return unwrap36(response);
+    return unwrap38(response);
   }
   streamLogs() {
     return this.http.stream(
@@ -6365,7 +6430,7 @@ var Sandbox = class _Sandbox {
   }
   async createSnapshot(comment) {
     this.assertRunning("snapshots.create");
-    return unwrap36(
+    return unwrap38(
       await this.http.post(
         `/sandboxes/${this.id}/snapshots`,
         comment ? { comment } : {}
@@ -6373,14 +6438,14 @@ var Sandbox = class _Sandbox {
     );
   }
   async listSnapshots() {
-    return unwrap36(
+    return unwrap38(
       await this.http.get(
         `/sandboxes/${this.id}/snapshots`
       )
     );
   }
   async restoreSnapshot(snapshotId) {
-    const data = unwrap36(
+    const data = unwrap38(
       await this.http.post(
         `/sandboxes/${this.id}/restore/${snapshotId}`,
         {}
@@ -6397,13 +6462,13 @@ var Sandbox = class _Sandbox {
    */
   async fork(opts = {}) {
     this.assertRunning("fork");
-    const body = {};
-    if (opts.name !== void 0) body.name = opts.name;
-    if (opts.metadata !== void 0) body.metadata = opts.metadata;
-    const data = unwrap36(
+    const body2 = {};
+    if (opts.name !== void 0) body2.name = opts.name;
+    if (opts.metadata !== void 0) body2.metadata = opts.metadata;
+    const data = unwrap38(
       await this.http.post(
         `/sandboxes/${this.id}/fork`,
-        body
+        body2
       )
     );
     return new _Sandbox(this.http, data);
@@ -6412,14 +6477,39 @@ var Sandbox = class _Sandbox {
    * PATCH /api/v1/sandboxes/{id} — update mutable sandbox fields.
    */
   async update(params) {
-    const body = {};
-    for (const [k, v] of Object.entries(params)) {
-      if (v !== void 0) body[k] = v;
+    const snapshotExpirationSec = snapshotExpirationSeconds(params);
+    const metadata = { ...params.metadata ?? {} };
+    if (params.persistent !== void 0) metadata.miosa_persistent = params.persistent;
+    if (snapshotExpirationSec !== void 0) {
+      metadata.snapshot_expiration_sec = snapshotExpirationSec;
     }
-    const data = unwrap36(
+    const keepLastSnapshots = params.keepLastSnapshots ?? params.keep_last_snapshots;
+    if (keepLastSnapshots !== void 0) {
+      metadata.keep_last_snapshots = keepLastSnapshots;
+    }
+    const body2 = stripUndefined20({
+      name: params.name,
+      slug: params.slug,
+      tags: params.tags,
+      metadata: Object.keys(metadata).length > 0 ? metadata : void 0,
+      always_on: params.always_on ?? params.alwaysOn,
+      timeout_sec: params.timeout_sec ?? params.timeoutSec,
+      idle_timeout_sec: params.idle_timeout_sec ?? params.idleTimeoutSec
+    });
+    const data = unwrap38(
       await this.http.patch(
         `/sandboxes/${this.id}`,
-        body
+        body2
+      )
+    );
+    this.data = data;
+    return this;
+  }
+  async extend(timeoutSec) {
+    const data = unwrap38(
+      await this.http.post(
+        `/sandboxes/${this.id}/extend`,
+        { timeout_sec: timeoutSec }
       )
     );
     this.data = data;
@@ -6439,7 +6529,7 @@ var Sandbox = class _Sandbox {
     return raw;
   }
   async pause() {
-    const data = unwrap36(
+    const data = unwrap38(
       await this.http.post(
         `/sandboxes/${this.id}/pause`,
         {}
@@ -6449,7 +6539,7 @@ var Sandbox = class _Sandbox {
     return this;
   }
   async resume() {
-    const data = unwrap36(
+    const data = unwrap38(
       await this.http.post(
         `/sandboxes/${this.id}/resume`,
         {}
@@ -6462,7 +6552,7 @@ var Sandbox = class _Sandbox {
     const idempotencyKey11 = params.idempotencyKey ?? params.idempotency_key;
     const requestOptions = {
       method: "POST",
-      body: stripUndefined19({
+      body: stripUndefined20({
         name: params.name,
         deployment_id: params.deploymentId ?? params.deployment_id,
         output_path: params.outputPath ?? params.output_path ?? params.path ?? params.sourcePath ?? params.source_path,
@@ -6474,7 +6564,6 @@ var Sandbox = class _Sandbox {
         port: params.port,
         health_check_path: params.healthCheckPath ?? params.health_check_path,
         deployment_type: params.deploymentType ?? params.deployment_type,
-        docker_deploy_template_id: params.dockerDeployTemplateId ?? params.docker_deploy_template_id,
         type: params.type,
         mode: params.mode,
         database: params.database,
@@ -6486,7 +6575,7 @@ var Sandbox = class _Sandbox {
     if (idempotencyKey11) {
       requestOptions.headers = { "Idempotency-Key": idempotencyKey11 };
     }
-    return unwrap36(
+    return unwrap38(
       await this.http.request(
         `/sandboxes/${this.id}/deploy`,
         requestOptions
@@ -6498,7 +6587,7 @@ var Sandbox = class _Sandbox {
   }
   /** Check readiness of the sandbox (GET /sandboxes/:id/readiness). */
   async readiness() {
-    return unwrap36(
+    return unwrap38(
       await this.http.get(
         `/sandboxes/${this.id}/readiness`
       )
@@ -6628,6 +6717,32 @@ var Sandboxes = class {
     this.http = http;
   }
   http;
+  /**
+   * Create a persistent agent workspace.
+   *
+   * This is the preferred entry point for AI builders, coding agents, and
+   * product workspaces. It gives the sandbox a stable name, a longer interactive
+   * timeout, and metadata that makes the workspace easy to identify later. The
+   * agent should create/edit files in `/workspace`, run installs/tests/builds
+   * inside the sandbox, expose previews from the sandbox, and publish from the
+   * sandbox when ready.
+   */
+  async createAgentWorkspace(params) {
+    const metadata = {
+      ...params.metadata ?? {},
+      miosa_workspace_kind: "agent_workspace"
+    };
+    return this.getOrCreate({
+      persistent: true,
+      timeoutSec: AGENT_WORKSPACE_TIMEOUT_SEC,
+      idleTimeoutSec: AGENT_WORKSPACE_IDLE_TIMEOUT_SEC,
+      snapshotExpirationDays: AGENT_WORKSPACE_SNAPSHOT_EXPIRATION_DAYS,
+      keepLastSnapshots: AGENT_WORKSPACE_KEEP_LAST_SNAPSHOTS,
+      waitUntilReady: true,
+      ...params,
+      metadata
+    });
+  }
   async create(params = {}) {
     const idempotencyKey11 = params.idempotencyKey ?? params.idempotency_key;
     const requestOptions = {
@@ -6637,7 +6752,7 @@ var Sandboxes = class {
     if (idempotencyKey11) {
       requestOptions.headers = { "Idempotency-Key": idempotencyKey11 };
     }
-    const data = unwrap36(
+    const data = unwrap38(
       await this.http.request(
         "/sandboxes",
         requestOptions
@@ -6656,7 +6771,7 @@ var Sandboxes = class {
     return listItems11(data).map((item) => new Sandbox(this.http, item));
   }
   async get(id) {
-    const data = unwrap36(
+    const data = unwrap38(
       await this.http.get(`/sandboxes/${id}`)
     );
     return new Sandbox(this.http, data);
@@ -6664,6 +6779,37 @@ var Sandboxes = class {
   connect(id) {
     return this.get(id);
   }
+  async getByName(name) {
+    const data = unwrap38(
+      await this.http.get(
+        `/sandboxes/by-name/${encodeURIComponent(name)}`
+      )
+    );
+    return new Sandbox(this.http, data);
+  }
+  /**
+   * Idempotently obtain a persistent sandbox by stable name.
+   *
+   * If the sandbox exists, it is returned. If it is paused and `resume !== false`,
+   * it is resumed first. If it does not exist, it is created with the supplied
+   * params. Destroyed sandboxes are permanent and are not resumed by this helper.
+   */
+  async getOrCreate(params) {
+    let sandbox;
+    try {
+      sandbox = await this.getByName(params.name);
+    } catch (error) {
+      if (!(error instanceof NotFoundError)) throw error;
+      sandbox = await this.create(params);
+    }
+    if (sandbox.state === "paused" && params.resume !== false) {
+      await sandbox.resume();
+    }
+    if (params.waitUntilReady === true) {
+      await sandbox.waitUntilReady({ timeout: params.waitTimeoutSec ?? 60 });
+    }
+    return sandbox;
+  }
   async delete(id) {
     await this.http.delete(`/sandboxes/${id}`);
   }
@@ -6691,7 +6837,7 @@ var Sandboxes = class {
   async createTemplate(params) {
     const response = await this.http.post(
       "/sandbox-templates",
-      stripUndefined19({
+      stripUndefined20({
         name: params.name,
         slug: params.slug,
         description: params.description,
@@ -6699,29 +6845,29 @@ var Sandboxes = class {
         metadata: params.metadata
       })
     );
-    return unwrap36(response);
+    return unwrap38(response);
   }
   async createTemplateBuild(templateId, params = {}) {
     const response = await this.http.post(
       `/sandbox-templates/${templateId}/builds`,
-      stripUndefined19({
+      stripUndefined20({
         build_spec: params.buildSpec ?? params.build_spec,
         metadata: params.metadata
       })
     );
-    return unwrap36(response);
+    return unwrap38(response);
   }
   async listTemplateBuilds(templateId) {
     const response = await this.http.get(
       `/sandbox-templates/${templateId}/builds`
     );
-    return unwrap36(response);
+    return unwrap38(response);
   }
   async getTemplateBuild(buildId) {
     const response = await this.http.get(
       `/sandbox-template-builds/${buildId}`
     );
-    return unwrap36(response);
+    return unwrap38(response);
   }
 };
 function toBase642(bytes) {
@@ -6733,7 +6879,7 @@ function toBase642(bytes) {
   }
   return btoa(binary);
 }
-function unwrap37(payload) {
+function unwrap39(payload) {
   if (payload && typeof payload === "object" && "data" in payload) {
     return payload.data;
   }
@@ -6749,7 +6895,7 @@ function listItems12(payload, candidateKeys = ["data", "templates", "builds", "i
   }
   return [];
 }
-function stripUndefined20(input) {
+function stripUndefined21(input) {
   return Object.fromEntries(
     Object.entries(input).filter(([, v]) => v !== void 0)
   );
@@ -6776,7 +6922,7 @@ var SandboxTemplates = class {
     const data = await this.http.get(
       `/sandbox-templates/${templateId}`
     );
-    return unwrap37(data);
+    return unwrap39(data);
   }
   async create(params) {
     const {
@@ -6786,17 +6932,17 @@ var SandboxTemplates = class {
       name,
       ...rest
     } = params;
-    const body = stripUndefined20({
+    const body2 = stripUndefined21({
       name,
       build_spec: buildSpec ?? build_spec,
       ...rest
     });
     const data = await this.http.request("/sandbox-templates", {
       method: "POST",
-      body,
+      body: body2,
       headers: { "Idempotency-Key": idempotencyKey8(ikey) }
     });
-    return unwrap37(data);
+    return unwrap39(data);
   }
   async buildSpecSchema() {
     const data = await this.http.get("/sandbox-templates/build-spec");
@@ -6820,21 +6966,21 @@ var SandboxTemplates = class {
   }
   async createBuild(templateId, params = {}) {
     const { idempotencyKey: ikey, ...rest } = params;
-    const body = stripUndefined20(rest);
+    const body2 = stripUndefined21(rest);
     const data = await this.http.request(
       `/sandbox-templates/${templateId}/builds`,
       {
         method: "POST",
-        body,
+        body: body2,
         headers: { "Idempotency-Key": idempotencyKey8(ikey) }
       }
     );
-    return unwrap37(data);
+    return unwrap39(data);
   }
 };
 
 // src/resources/settings.ts
-function unwrap38(payload) {
+function unwrap40(payload) {
   if (payload && typeof payload === "object") {
     const p = payload;
     for (const k of [
@@ -6850,11 +6996,11 @@ function unwrap38(payload) {
   return payload;
 }
 function listItems13(payload) {
-  const result = unwrap38(payload);
+  const result = unwrap40(payload);
   if (Array.isArray(result)) return result;
   return [];
 }
-function stripUndefined21(input) {
+function stripUndefined22(input) {
   return Object.fromEntries(
     Object.entries(input).filter(([, v]) => v !== void 0)
   );
@@ -6867,46 +7013,46 @@ var Settings = class {
   /** Get the current tenant settings. */
   async get() {
     const data = await this.http.get("/settings");
-    return unwrap38(data);
+    return unwrap40(data);
   }
   /** Update tenant settings. */
   async update(params) {
-    const body = stripUndefined21(params);
-    const data = await this.http.put("/settings", body);
-    return unwrap38(data);
+    const body2 = stripUndefined22(params);
+    const data = await this.http.put("/settings", body2);
+    return unwrap40(data);
   }
   // ── Branding ──────────────────────────────────────────────────────────────
   /** Get tenant branding (logo, colors, custom wordmark). */
   async getBranding() {
     const data = await this.http.get("/settings/branding");
-    return unwrap38(data);
+    return unwrap40(data);
   }
   /** Update tenant branding. */
   async updateBranding(params) {
-    const body = stripUndefined21(params);
-    const data = await this.http.put("/settings/branding", body);
-    return unwrap38(data);
+    const body2 = stripUndefined22(params);
+    const data = await this.http.put("/settings/branding", body2);
+    return unwrap40(data);
   }
   // ── Read-only reference data ───────────────────────────────────────────────
   /** Get tenant-scoped compute pricing. */
   async computePricing() {
     const data = await this.http.get("/settings/compute-pricing");
-    return unwrap38(data);
+    return unwrap40(data);
   }
   /** Get tenant-scoped GPU pricing. */
   async gpuPricing() {
     const data = await this.http.get("/settings/gpu-pricing");
-    return unwrap38(data);
+    return unwrap40(data);
   }
   /** List models available to this tenant. */
   async availableModels() {
     const data = await this.http.get("/settings/available-models");
-    return unwrap38(data);
+    return unwrap40(data);
   }
   /** List regions enabled for this tenant. */
   async regions() {
     const data = await this.http.get("/settings/regions");
-    return unwrap38(data);
+    return unwrap40(data);
   }
   // ── BYOK provider keys ────────────────────────────────────────────────────
   /** List tenant-level BYOK provider keys (Anthropic, OpenAI, etc.). */
@@ -6916,12 +7062,12 @@ var Settings = class {
   }
   /** Create or update a BYOK provider key. */
   async upsertProviderKey(provider, params) {
-    const body = stripUndefined21(params);
+    const body2 = stripUndefined22(params);
     const data = await this.http.put(
       `/settings/provider-keys/${provider}`,
-      body
+      body2
     );
-    return unwrap38(data);
+    return unwrap40(data);
   }
   /** Delete a BYOK provider key. */
   async deleteProviderKey(provider) {
@@ -6930,7 +7076,7 @@ var Settings = class {
 };
 
 // src/resources/snapshots-standalone.ts
-function unwrap39(data) {
+function unwrap41(data) {
   if (data && typeof data === "object") {
     const d = data;
     for (const k of ["data", "snapshots", "items"]) {
@@ -6939,7 +7085,7 @@ function unwrap39(data) {
   }
   return data;
 }
-function unwrapList13(data) {
+function unwrapList12(data) {
   if (Array.isArray(data)) return data;
   if (data && typeof data === "object") {
     const d = data;
@@ -6958,17 +7104,17 @@ var SnapshotsStandalone = class {
     const query = Object.fromEntries(
       Object.entries(filters).filter(([, v]) => v !== void 0)
     );
-    return unwrapList13(await this.http.get("/admin/snapshots", query));
+    return unwrapList12(await this.http.get("/admin/snapshots", query));
   }
   async get(snapshotId) {
-    return unwrap39(
+    return unwrap41(
       await this.http.get(`/admin/snapshots/${snapshotId}`)
     );
   }
 };
 
 // src/resources/storage.ts
-function unwrap40(payload) {
+function unwrap42(payload) {
   if (payload && typeof payload === "object" && "data" in payload) {
     return payload.data;
   }
@@ -6984,7 +7130,7 @@ function listItems14(payload, candidateKeys = ["data", "buckets", "objects", "it
   }
   return [];
 }
-function stripUndefined22(input) {
+function stripUndefined23(input) {
   return Object.fromEntries(
     Object.entries(input).filter(([, v]) => v !== void 0)
   );
@@ -7001,24 +7147,24 @@ var Storage = class {
   }
   async createBucket(params) {
     const { name, public: isPublic, visibility, ...rest } = params;
-    const body = stripUndefined22({
+    const body2 = stripUndefined23({
       name,
       visibility: visibility ?? (isPublic === void 0 ? void 0 : isPublic ? "public" : "private"),
       ...rest
     });
-    const data = await this.http.post("/storage/buckets", body);
-    return unwrap40(data);
+    const data = await this.http.post("/storage/buckets", body2);
+    return unwrap42(data);
   }
   async getBucket(bucketId) {
     const data = await this.http.get(`/storage/buckets/${bucketId}`);
-    return unwrap40(data);
+    return unwrap42(data);
   }
   async deleteBucket(bucketId) {
     await this.http.delete(`/storage/buckets/${bucketId}`);
   }
   // ── Objects ────────────────────────────────────────────────────────────────
   async listObjects(bucketId, params = {}) {
-    const query = stripUndefined22({
+    const query = stripUndefined23({
       prefix: params.prefix,
       max_keys: params.max_keys ?? params.maxKeys ?? params.limit,
       marker: params.marker ?? params.cursor
@@ -7052,16 +7198,16 @@ var Storage = class {
   // ── Presigned URLs ─────────────────────────────────────────────────────────
   async presign(bucketId, params) {
     const operationMethod = params.operation === "put" ? "PUT" : params.operation === "get" ? "GET" : void 0;
-    const body = stripUndefined22({
+    const body2 = stripUndefined23({
       key: params.key,
       method: params.method ?? operationMethod ?? "GET",
       expires_in: params.expiresIn ?? params.expires_in ?? params.expiresInSec ?? params.expires_in_sec ?? 3600
     });
     const data = await this.http.post(
       `/storage/buckets/${bucketId}/presign`,
-      body
+      body2
     );
-    return unwrap40(data);
+    return unwrap42(data);
   }
 };
 
@@ -7151,29 +7297,105 @@ var OrgInvites = class {
 };
 
 // src/resources/tenant.ts
-function unwrap41(payload) {
+function unwrap43(payload) {
   if (payload && typeof payload === "object") {
     const p = payload;
-    for (const k of ["data", "tenant", "items"]) {
+    for (const k of ["data", "tenant", "branding", "items"]) {
       if (k in p) return p[k];
     }
   }
   return payload;
 }
+function stripUndefined24(input) {
+  return Object.fromEntries(
+    Object.entries(input).filter(([, v]) => v !== void 0)
+  );
+}
+var PreviewDomain = class {
+  constructor(http) {
+    this.http = http;
+  }
+  http;
+  /** Get the tenant's white-label preview domain settings. */
+  async get() {
+    const data = await this.http.get("/tenant/preview-domain");
+    return unwrap43(data);
+  }
+  /** Set the tenant's white-label preview domain. */
+  async set(domain) {
+    const data = await this.http.put("/tenant/preview-domain", {
+      preview_domain: domain
+    });
+    return unwrap43(data);
+  }
+  /** Re-run DNS verification for the configured preview domain. */
+  async verify() {
+    const data = await this.http.post(
+      "/tenant/preview-domain/verify",
+      {}
+    );
+    return unwrap43(data);
+  }
+  /** Remove the tenant's custom preview domain. */
+  async delete() {
+    await this.http.delete("/tenant/preview-domain");
+  }
+};
+var Branding = class {
+  constructor(http) {
+    this.http = http;
+  }
+  http;
+  /** Get tenant branding used by white-label hosted surfaces. */
+  async get() {
+    const data = await this.http.get("/tenant/branding");
+    return unwrap43(data);
+  }
+  /** Update tenant branding used by white-label hosted surfaces. */
+  async set(params) {
+    const data = await this.http.put("/tenant/branding", {
+      branding: stripUndefined24(params)
+    });
+    return unwrap43(data);
+  }
+  /** Reset tenant branding to platform defaults. */
+  async delete() {
+    await this.http.delete("/tenant/branding");
+  }
+};
 var Tenant = class {
   constructor(http) {
     this.http = http;
+    this.preview_domain = new PreviewDomain(http);
+    this.previewDomain = this.preview_domain;
+    this.branding = new Branding(http);
   }
   http;
+  preview_domain;
+  branding;
+  /** camelCase alias for SDK consumers that avoid snake_case properties. */
+  previewDomain;
   /** Get the current tenant's plan, limits, and live usage counters. */
   async current() {
     const data = await this.http.get("/tenant/plan");
-    return unwrap41(data);
+    return unwrap43(data);
+  }
+  /** Convenience alias for `tenant.branding.get()`. */
+  async getBranding() {
+    return this.branding.get();
+  }
+  /** Convenience alias for `tenant.branding.set(...)`. */
+  async setBranding(params) {
+    return this.branding.set(params);
+  }
+  /** Convenience alias for `tenant.branding.delete()`. */
+  async deleteBranding() {
+    await this.branding.delete();
   }
 };
 
 // src/resources/usage.ts
-function unwrap42(payload) {
+function unwrap44(payload) {
   if (payload && typeof payload === "object") {
     const p = payload;
     for (const k of ["data", "usage", "sessions", "summary", "items"]) {
@@ -7182,7 +7404,7 @@ function unwrap42(payload) {
   }
   return payload;
 }
-function stripUndefined23(input) {
+function stripUndefined25(input) {
   return Object.fromEntries(
     Object.entries(input).filter(([, v]) => v !== void 0)
   );
@@ -7195,24 +7417,24 @@ var Usage = class {
   /** Get the current period usage summary. */
   async current() {
     const data = await this.http.get("/usage/summary");
-    return unwrap42(data);
+    return unwrap44(data);
   }
   /** List per-session metering events. */
   async sessions(params = {}) {
-    const query = stripUndefined23(params);
+    const query = stripUndefined25(params);
     const data = await this.http.get("/usage/sessions", query);
-    const result = unwrap42(data);
+    const result = unwrap44(data);
     if (Array.isArray(result)) return result;
     return [];
   }
   /** Get a usage report for a period. */
   async report(params = {}) {
-    const query = stripUndefined23(params);
+    const query = stripUndefined25(params);
     const data = await this.http.get("/usage/summary", query);
-    return unwrap42(data);
+    return unwrap44(data);
   }
 };
-function unwrap43(payload) {
+function unwrap45(payload) {
   if (payload && typeof payload === "object" && "data" in payload) {
     return payload.data;
   }
@@ -7228,7 +7450,7 @@ function listItems15(payload, candidateKeys = ["data", "volumes", "items"]) {
   }
   return [];
 }
-function stripUndefined24(input) {
+function stripUndefined26(input) {
   return Object.fromEntries(
     Object.entries(input).filter(([, v]) => v !== void 0)
   );
@@ -7242,32 +7464,32 @@ var Volumes = class {
   }
   http;
   async list(params = {}) {
-    const query = stripUndefined24({ ...params });
+    const query = stripUndefined26({ ...params });
     const data = await this.http.get("/volumes", query);
     return listItems15(data);
   }
   async get(volumeId) {
     const data = await this.http.get(`/volumes/${volumeId}`);
-    return unwrap43(data);
+    return unwrap45(data);
   }
   async create(params) {
     const { idempotencyKey: ikey, sizeGb, ...rest } = params;
-    const body = stripUndefined24({
+    const body2 = stripUndefined26({
       ...rest,
       size_gb: sizeGb ?? rest.size_gb
     });
     const data = await this.http.request("/volumes", {
       method: "POST",
-      body,
+      body: body2,
       headers: { "Idempotency-Key": idempotencyKey9(ikey) }
     });
-    return unwrap43(data);
+    return unwrap45(data);
   }
   async delete(volumeId) {
     await this.http.delete(`/volumes/${volumeId}`);
   }
 };
-function unwrap44(payload) {
+function unwrap46(payload) {
   if (payload && typeof payload === "object" && "data" in payload) {
     return payload.data;
   }
@@ -7283,7 +7505,7 @@ function listItems16(payload, candidateKeys = ["data", "webhooks", "deliveries",
   }
   return [];
 }
-function stripUndefined25(input) {
+function stripUndefined27(input) {
   return Object.fromEntries(
     Object.entries(input).filter(([, v]) => v !== void 0)
   );
@@ -7291,43 +7513,35 @@ function stripUndefined25(input) {
 function idempotencyKey10(key) {
   return key ?? randomUUID();
 }
-function parseSignatureHeader(header) {
-  const parts = header.split(",").map((part) => part.trim());
-  let timestamp = null;
-  const signatures = [];
-  for (const part of parts) {
-    const [key, value] = part.split("=", 2);
-    if (!key || !value) continue;
-    if (key === "t") {
-      const parsed = Number(value);
-      if (Number.isFinite(parsed)) timestamp = parsed;
-    } else if (key === "v1") {
-      signatures.push(value);
-    }
+function bodyBuffer(body2) {
+  if (Buffer.isBuffer(body2)) return body2;
+  if (typeof body2 === "string") return Buffer.from(body2, "utf8");
+  return Buffer.from(body2);
+}
+function verifySignature(body2, header, secret, toleranceSec = 300) {
+  const parts = Object.fromEntries(
+    header.split(",").map((chunk) => chunk.split("=", 2)).filter(([key, value]) => key && value)
+  );
+  const timestamp = parts.t;
+  const received = parts.v1;
+  if (!timestamp || !received || !secret) return false;
+  const unixSeconds = Number(timestamp);
+  if (!Number.isFinite(unixSeconds)) return false;
+  const ageSec = Math.abs(Date.now() / 1e3 - unixSeconds);
+  if (ageSec > toleranceSec) {
+    throw new Error("webhook timestamp too old");
+  }
+  const rawBody = bodyBuffer(body2);
+  const signed = Buffer.concat([Buffer.from(`${timestamp}.`), rawBody]);
+  const expected = createHmac("sha256", secret).update(signed).digest("hex");
+  try {
+    return timingSafeEqual(
+      Buffer.from(expected, "utf8"),
+      Buffer.from(received, "utf8")
+    );
+  } catch {
+    return false;
   }
-  if (timestamp == null || signatures.length === 0) return null;
-  return { timestamp, signatures };
-}
-function verifySignature(body, header, secret, options = {}) {
-  const parsed = parseSignatureHeader(header);
-  if (!parsed) return false;
-  const toleranceSeconds = options.toleranceSeconds ?? 300;
-  const ageSeconds = Math.abs(Math.floor(Date.now() / 1e3) - parsed.timestamp);
-  if (ageSeconds > toleranceSeconds) {
-    throw new Error("Webhook signature timestamp is too old");
-  }
-  const bodyBuffer = Buffer.isBuffer(body) ? body : Buffer.from(body);
-  const signedPayload = Buffer.concat([
-    Buffer.from(`${parsed.timestamp}.`),
-    bodyBuffer
-  ]);
-  const expected = createHmac("sha256", secret).update(signedPayload).digest("hex");
-  const expectedBuffer = Buffer.from(expected, "hex");
-  return parsed.signatures.some((signature) => {
-    const actualBuffer = Buffer.from(signature, "hex");
-    if (actualBuffer.length !== expectedBuffer.length) return false;
-    return timingSafeEqual(actualBuffer, expectedBuffer);
-  });
 }
 var Webhooks = class {
   constructor(http) {
@@ -7335,30 +7549,29 @@ var Webhooks = class {
   }
   http;
   static verifySignature = verifySignature;
-  static verify_signature = verifySignature;
   async list(params = {}) {
-    const query = stripUndefined25({ ...params });
+    const query = stripUndefined27({ ...params });
     const data = await this.http.get("/webhooks", query);
     return listItems16(data);
   }
   async get(webhookId) {
     const data = await this.http.get(`/webhooks/${webhookId}`);
-    return unwrap44(data);
+    return unwrap46(data);
   }
   async create(params) {
     const { idempotencyKey: ikey, ...rest } = params;
-    const body = stripUndefined25(rest);
+    const body2 = stripUndefined27(rest);
     const data = await this.http.request("/webhooks", {
       method: "POST",
-      body,
+      body: body2,
       headers: { "Idempotency-Key": idempotencyKey10(ikey) }
     });
-    return unwrap44(data);
+    return unwrap46(data);
   }
   async update(webhookId, params) {
-    const body = stripUndefined25(params);
-    const data = await this.http.patch(`/webhooks/${webhookId}`, body);
-    return unwrap44(data);
+    const body2 = stripUndefined27(params);
+    const data = await this.http.patch(`/webhooks/${webhookId}`, body2);
+    return unwrap46(data);
   }
   async delete(webhookId) {
     await this.http.delete(`/webhooks/${webhookId}`);
@@ -7371,7 +7584,7 @@ var Webhooks = class {
         headers: { "Idempotency-Key": idempotencyKey10(opts.idempotencyKey) }
       }
     );
-    return unwrap44(data);
+    return unwrap46(data);
   }
   async deliveries(webhookId) {
     const data = await this.http.get(
@@ -7400,9 +7613,9 @@ var WorkspaceInvites = class {
    *
    * `POST /workspaces/:id/invites`
    */
-  async create(workspaceId, params) {
+  async create(workspaceId2, params) {
     return this.http.post(
-      `/workspaces/${workspaceId}/invites`,
+      `/workspaces/${workspaceId2}/invites`,
       params
     );
   }
@@ -7411,9 +7624,9 @@ var WorkspaceInvites = class {
    *
    * `GET /workspaces/:id/invites`
    */
-  async list(workspaceId) {
+  async list(workspaceId2) {
     const res = await this.http.get(
-      `/workspaces/${workspaceId}/invites`
+      `/workspaces/${workspaceId2}/invites`
     );
     return res.data ?? [];
   }
@@ -7425,9 +7638,9 @@ var WorkspaceInvites = class {
    *
    * `DELETE /workspaces/:id/invites/:invite_id`
    */
-  async revoke(workspaceId, inviteId) {
+  async revoke(workspaceId2, inviteId) {
     return this.http.delete(
-      `/workspaces/${workspaceId}/invites/${inviteId}`
+      `/workspaces/${workspaceId2}/invites/${inviteId}`
     );
   }
   /**
@@ -7481,9 +7694,9 @@ var WorkspaceMembers = class {
    *
    * `GET /workspaces/:id/members`
    */
-  async list(workspaceId) {
+  async list(workspaceId2) {
     const res = await this.http.get(
-      `/workspaces/${workspaceId}/members`
+      `/workspaces/${workspaceId2}/members`
     );
     return res.data ?? res;
   }
@@ -7499,9 +7712,9 @@ var WorkspaceMembers = class {
    * @throws `MiosaError` with code `NOT_TENANT_MEMBER` if the user is not an
    *   org member.
    */
-  async add(workspaceId, params) {
+  async add(workspaceId2, params) {
     const res = await this.http.post(
-      `/workspaces/${workspaceId}/members`,
+      `/workspaces/${workspaceId2}/members`,
       params
     );
     return res.data ?? res;
@@ -7511,9 +7724,9 @@ var WorkspaceMembers = class {
    *
    * `PATCH /workspaces/:id/members/:user_id`
    */
-  async updateRole(workspaceId, userId, params) {
+  async updateRole(workspaceId2, userId, params) {
     const res = await this.http.patch(
-      `/workspaces/${workspaceId}/members/${userId}`,
+      `/workspaces/${workspaceId2}/members/${userId}`,
       params
     );
     return res.data ?? res;
@@ -7528,9 +7741,9 @@ var WorkspaceMembers = class {
    *
    * @throws `MiosaError` with code `LAST_OWNER` if the target is the sole owner.
    */
-  async remove(workspaceId, userId) {
+  async remove(workspaceId2, userId) {
     return this.http.delete(
-      `/workspaces/${workspaceId}/members/${userId}`
+      `/workspaces/${workspaceId2}/members/${userId}`
     );
   }
 };
@@ -7578,17 +7791,21 @@ var Miosa = class {
   externalKeys;
   /** Model Context Protocol — JSON-RPC dispatch + streaming channel. */
   mcp;
+  /** Agent Runs — prompt dispatch into sandbox targets. */
+  agentRuns;
+  /** Agent runtime profiles — tenant/workspace defaults for sandbox/computer agents. */
+  agentRuntimeProfiles;
   /** Computer management — create, list, get, delete. */
   computers;
   /** Sandboxes — native code-execution environments under `/sandboxes`. */
   sandboxes;
-  /** Agent device facade — route work across Sandboxes, Computers, and deploy hosts. */
-  devices;
   /**
    * Deployments — publish from a sandbox to a stable production URL.
    * Versions, releases, rollback, custom domains.
    */
   deployments;
+  /** Docker Deploy appliance hosts — one always-on workspace host, many apps. */
+  dockerDeploy;
   /** Credit balance and usage. */
   credits;
   /** Admin surface (`/api/v1/admin/*`) — requires an admin credential. */
@@ -7680,10 +7897,12 @@ var Miosa = class {
     this.projectAuth = new ProjectAuth(this.http);
     this.externalKeys = new ExternalKeys(this.http);
     this.mcp = new Mcp(this.http);
+    this.agentRuns = new AgentRuns(this.http);
+    this.agentRuntimeProfiles = new AgentRuntimeProfiles(this.http);
     this.computers = new Computers(this.http);
     this.sandboxes = new Sandboxes(this.http);
-    this.devices = new Devices(this.http);
     this.deployments = new Deployments(this.http);
+    this.dockerDeploy = new DockerDeploy(this.http);
     this.credits = new Credits(this.http);
     this.admin = new Admin(this.http);
     this.openComputers = new OpenComputers(this.http);
@@ -7713,6 +7932,162 @@ var Miosa = class {
   }
 };
 
-export { Admin, Analytics, ApiKeys, AuditLog, AuthError, Benchmarks, BuilderSessions, Channels, Checkpoints, CommandCenter, Community, Completions, Computer, ComputerAudit, ComputerAutoStop, ComputerEnv, ComputerInbox, ComputerLogs, ComputerNetwork, ComputerOsa, ComputerPorts, ComputerSecrets, ComputerTerminal, ComputerVolumes, Computers, Credits, CronJobs, Dashboard, Databases, DeploymentDomains, DeploymentReleases, DeploymentRuntimeInstances, DeploymentVersions, Deployments, Desktop, Devices, EgressAudit, EgressNetwork, EgressSecrets, Email, EmailCampaigns, EmailInbox, EmailTemplates, Embeddings, Exec, ExternalKeys, Files, FlatCustomDomains, Functions, HealthChecks, InsufficientCreditsError, Integrations, Mcp, Miosa, MiosaError, Models, NetworkError, NetworkPolicy, NotFoundError, OAuthFlow, OpenComputers, OrgInvites, ProjectAuth, ProjectIntegrations, ProviderDefaults, RateLimitError, Regions, SANDBOX_TEMPLATE, Sandbox, SandboxArtifacts, SandboxAudit, SandboxCommands, SandboxEnv, SandboxEvents, SandboxFiles, SandboxNetwork, SandboxPreview, SandboxPreviews, SandboxSecrets, SandboxTags, SandboxTemplates, SandboxTerminal, Sandboxes, ScopedFs, Settings, SnapshotsStandalone, Storage, Tenant, TimeoutError, Usage, ValidationError, Volumes, Webhooks, WorkspaceInvites, WorkspaceMembers, verifySignature };
+// src/resources/app-auth.ts
+function unwrapSession(data) {
+  const d = data && typeof data === "object" && "data" in data ? data.data : data;
+  const userId = d.user_id ?? d.userId;
+  const token = d.token ?? d.access_token;
+  const expiresAt = d.expires_at ?? d.expiresAt ?? "";
+  if (!userId || !token) {
+    throw new Error(
+      `AppAuth: unexpected response shape \u2014 got: ${JSON.stringify(d)}`
+    );
+  }
+  return {
+    userId,
+    token,
+    expiresAt
+  };
+}
+function base64UrlDecode(s) {
+  const padded = s.replace(/-/g, "+").replace(/_/g, "/");
+  const bin = atob(padded);
+  const bytes = new Uint8Array(bin.length);
+  for (let i = 0; i < bin.length; i++) {
+    bytes[i] = bin.charCodeAt(i);
+  }
+  return bytes;
+}
+var AppAuth = class {
+  baseUrl;
+  resourceType;
+  resourceId;
+  jwtSecret;
+  constructor(config) {
+    const authUrl = config.authUrl ?? (typeof process !== "undefined" ? process.env["AUTH_URL"] : void 0);
+    if (!authUrl) {
+      throw new Error(
+        "AppAuth: authUrl is required. Pass authUrl in config or set AUTH_URL env var."
+      );
+    }
+    if (!config.resourceType || !config.resourceId) {
+      throw new Error("AppAuth: resourceType and resourceId are required.");
+    }
+    this.baseUrl = authUrl.replace(/\/$/, "");
+    this.resourceType = config.resourceType;
+    this.resourceId = config.resourceId;
+    this.jwtSecret = config.jwtSecret ?? (typeof process !== "undefined" ? process.env["AUTH_JWT_SECRET"] : void 0);
+  }
+  /** POST /app-auth/:resourceType/:resourceId/signup */
+  async signup(email, password) {
+    return unwrapSession(await this._post("signup", { email, password }));
+  }
+  /** POST /app-auth/:resourceType/:resourceId/login */
+  async login(email, password) {
+    return unwrapSession(await this._post("login", { email, password }));
+  }
+  /**
+   * POST /app-auth/:resourceType/:resourceId/verify
+   * Verifies an email confirmation or magic-link token issued by the backend.
+   */
+  async verify(token) {
+    return unwrapSession(await this._post("verify", { token }));
+  }
+  /** POST /app-auth/:resourceType/:resourceId/password-reset */
+  async passwordReset(email) {
+    const data = await this._post("password-reset", { email });
+    return { ok: true, ...data };
+  }
+  /**
+   * POST /app-auth/:resourceType/:resourceId/logout
+   * Invalidates the given bearer token server-side.
+   */
+  async logout(token) {
+    const data = await this._post("logout", { token });
+    return { ok: true, ...data };
+  }
+  /**
+   * GET /app-auth/:resourceType/:resourceId/me
+   * Returns the session for the bearer token.
+   */
+  async me(token) {
+    const url = `${this.baseUrl}/app-auth/${this.resourceType}/${this.resourceId}/me`;
+    const resp = await fetch(url, {
+      method: "GET",
+      headers: {
+        "Content-Type": "application/json",
+        Authorization: `Bearer ${token}`
+      }
+    });
+    if (!resp.ok) {
+      const body2 = await resp.text();
+      throw new Error(`AppAuth me failed (${resp.status}): ${body2}`);
+    }
+    return unwrapSession(await resp.json());
+  }
+  /**
+   * Verifies a JWT token locally using HS256 + AUTH_JWT_SECRET.
+   *
+   * Does NOT make a network call. Throws if the signature is invalid or the
+   * token is expired. Returns the decoded payload on success.
+   */
+  async verifyToken(token) {
+    if (!this.jwtSecret) {
+      throw new Error(
+        "AppAuth.verifyToken: jwtSecret is required. Pass jwtSecret in config or set AUTH_JWT_SECRET env var."
+      );
+    }
+    const parts = token.split(".");
+    if (parts.length !== 3) {
+      throw new Error("AppAuth.verifyToken: malformed JWT \u2014 expected 3 parts");
+    }
+    const [headerB64, payloadB64, signatureB64] = parts;
+    const payloadJson = new TextDecoder().decode(base64UrlDecode(payloadB64));
+    const payload = JSON.parse(payloadJson);
+    const now = Math.floor(Date.now() / 1e3);
+    if (typeof payload.exp === "number" && payload.exp < now) {
+      throw new Error(
+        `AppAuth.verifyToken: token expired at ${new Date(payload.exp * 1e3).toISOString()}`
+      );
+    }
+    const encoder = new TextEncoder();
+    const signingInput = `${headerB64}.${payloadB64}`;
+    const secretBytes = encoder.encode(this.jwtSecret);
+    const key = await crypto.subtle.importKey(
+      "raw",
+      secretBytes,
+      { name: "HMAC", hash: "SHA-256" },
+      false,
+      ["verify"]
+    );
+    const signatureBytes = base64UrlDecode(signatureB64).buffer;
+    const valid = await crypto.subtle.verify(
+      "HMAC",
+      key,
+      signatureBytes,
+      encoder.encode(signingInput)
+    );
+    if (!valid) {
+      throw new Error("AppAuth.verifyToken: invalid JWT signature");
+    }
+    return payload;
+  }
+  // ── Private ──────────────────────────────────────────────────────────────────
+  async _post(action, body2) {
+    const url = `${this.baseUrl}/app-auth/${this.resourceType}/${this.resourceId}/${action}`;
+    const resp = await fetch(url, {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify(body2)
+    });
+    if (!resp.ok) {
+      const text = await resp.text();
+      throw new Error(`AppAuth ${action} failed (${resp.status}): ${text}`);
+    }
+    return resp.json();
+  }
+};
+
+export { Admin, AgentRuns, AgentRuntimeProfiles, Analytics, ApiKeys, AppAuth, AuditLog, AuthError, Benchmarks, BuilderSessions, Channels, Checkpoints, CommandCenter, Community, Completions, Computer, ComputerAudit, ComputerAutoStop, ComputerEnv, ComputerInbox, ComputerLogs, ComputerNetwork, ComputerOsa, ComputerPorts, ComputerSecrets, ComputerTerminal, ComputerVolumes, Computers, Credits, CronJobs, Dashboard, Databases, DeploymentDomains, DeploymentReleases, DeploymentRuntimeInstances, DeploymentVersions, Deployments, Desktop, DockerDeploy, EgressAudit, EgressNetwork, EgressSecrets, Email, EmailCampaigns, EmailInbox, EmailTemplates, Embeddings, Exec, ExternalKeys, Files, FlatCustomDomains, Functions, HealthChecks, InsufficientCreditsError, Integrations, Mcp, Miosa, MiosaError, Models, NetworkError, NetworkPolicy, NotFoundError, OAuthFlow, OpenComputers, OrgInvites, ProjectAuth, ProjectIntegrations, ProviderDefaults, RateLimitError, Regions, SANDBOX_TEMPLATE, Sandbox, SandboxArtifacts, SandboxAudit, SandboxCommands, SandboxEnv, SandboxEvents, SandboxFiles, SandboxNetwork, SandboxPreview, SandboxPreviews, SandboxSecrets, SandboxTags, SandboxTemplates, SandboxTerminal, Sandboxes, ScopedFs, Settings, SnapshotsStandalone, Storage, Tenant, TimeoutError, Usage, ValidationError, Volumes, Webhooks, WorkspaceInvites, WorkspaceMembers, verifySignature };
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map