@miosa/sdk 1.2.6 → 1.2.8

package/dist/index.js

@@ -1,4 +1,4 @@
-import { randomUUID } from 'crypto';
+import { createHmac, timingSafeEqual, randomUUID } from 'crypto';
 import EventEmitter from 'events';
 
 var __require = /* @__PURE__ */ ((x) => typeof require !== "undefined" ? require : typeof Proxy !== "undefined" ? new Proxy(x, {
@@ -22,10 +22,10 @@ var MiosaError = class _MiosaError extends Error {
     this.details = details;
     this.requestId = requestId;
   }
-  static fromResponse(status, body, requestId) {
-    const message = body.error?.message ?? body.message ?? `HTTP ${status}`;
-    const code = body.error?.code ?? body.code ?? "UNKNOWN_ERROR";
-    const details = body.error?.details;
+  static fromResponse(status, body2, requestId) {
+    const message = body2.error?.message ?? body2.message ?? `HTTP ${status}`;
+    const code = body2.error?.code ?? body2.code ?? "UNKNOWN_ERROR";
+    const details = body2.error?.details;
     if (status === 401 || status === 403) {
       return new AuthError(message, status, code, details, requestId);
     }
@@ -167,7 +167,7 @@ var HttpClient = class {
   async request(path, options = {}) {
     const {
       method = "GET",
-      body,
+      body: body2,
       formData,
       binary = false,
       timeout = this.timeout
@@ -176,9 +176,9 @@ var HttpClient = class {
     let fetchBody;
     if (formData) {
       fetchBody = formData;
-    } else if (body !== void 0) {
+    } else if (body2 !== void 0) {
       headers = { ...headers, "Content-Type": "application/json" };
-      fetchBody = JSON.stringify(body);
+      fetchBody = JSON.stringify(body2);
     }
     let lastError;
     for (let attempt = 0; attempt <= this.maxRetries; attempt++) {
@@ -260,17 +260,17 @@ var HttpClient = class {
     }
     return this.request(fullPath, { method: "GET" });
   }
-  async post(path, body) {
-    return this.request(path, { method: "POST", body });
+  async post(path, body2) {
+    return this.request(path, { method: "POST", body: body2 });
   }
-  async patch(path, body) {
-    return this.request(path, { method: "PATCH", body });
+  async patch(path, body2) {
+    return this.request(path, { method: "PATCH", body: body2 });
   }
-  async put(path, body) {
-    return this.request(path, { method: "PUT", body });
+  async put(path, body2) {
+    return this.request(path, { method: "PUT", body: body2 });
   }
-  async delete(path, body) {
-    return this.request(path, { method: "DELETE", body });
+  async delete(path, body2) {
+    return this.request(path, { method: "DELETE", body: body2 });
   }
   async getBinary(path) {
     return this.request(path, { method: "GET", binary: true });
@@ -288,10 +288,10 @@ var HttpClient = class {
       Accept: "text/event-stream",
       ...options.headers
     });
-    let body = null;
+    let body2 = null;
     if (options.body !== void 0) {
       headers = { ...headers, "Content-Type": "application/json" };
-      body = JSON.stringify(options.body);
+      body2 = JSON.stringify(options.body);
     }
     const controller = new AbortController();
     let response;
@@ -299,7 +299,7 @@ var HttpClient = class {
       response = await fetch(`${this.baseUrl}${path}`, {
         method,
         headers,
-        body,
+        body: body2,
         signal: controller.signal
       });
     } catch (err) {
@@ -368,7 +368,7 @@ var Admin = class {
     this.http = http;
   }
   /** Escape hatch — call any admin endpoint by method + path. */
-  async request(method, path, body, query) {
+  async request(method, path, body2, query) {
     const fullPath = query ? (() => {
       const qs = new URLSearchParams();
       for (const [k, v] of Object.entries(query)) {
@@ -381,13 +381,13 @@ var Admin = class {
       case "GET":
         return this.http.get(fullPath);
       case "POST":
-        return this.http.post(fullPath, body);
+        return this.http.post(fullPath, body2);
       case "PUT":
-        return this.http.put(fullPath, body);
+        return this.http.put(fullPath, body2);
       case "PATCH":
-        return this.http.patch(fullPath, body);
+        return this.http.patch(fullPath, body2);
       case "DELETE":
-        return this.http.delete(fullPath, body);
+        return this.http.delete(fullPath, body2);
     }
   }
   // ── Overview ────────────────────────────────────────────────
@@ -601,72 +601,168 @@ var Admin = class {
   }
 };
 
-// src/resources/agent-runs.ts
-function stripUndefined(input) {
-  return Object.fromEntries(Object.entries(input).filter(([, value]) => value !== void 0));
+// src/resources/agent-runtime-profiles.ts
+function unwrap(payload) {
+  if (payload !== null && typeof payload === "object" && "data" in payload && payload.data !== void 0) {
+    return payload.data;
+  }
+  return payload;
 }
-function createBody(params) {
-  return stripUndefined({
-    target_id: params.target_id ?? params.targetId ?? params.sandbox_id ?? params.sandboxId ?? params.computer_id ?? params.computerId,
-    target_kind: params.target_kind ?? params.targetKind,
-    provider: params.provider,
-    prompt: params.prompt,
-    instruction: params.instruction,
-    command: params.command,
-    model: params.model,
-    cwd: params.cwd,
-    timeout: params.timeout,
-    metadata: params.metadata
-  });
+function body(params) {
+  return Object.fromEntries(
+    Object.entries({
+      workspace_id: params.workspaceId ?? params.workspace_id,
+      name: params.name,
+      runtime: params.runtime,
+      description: params.description,
+      applies_to: params.appliesTo ?? params.applies_to,
+      tools: params.tools,
+      connectors: params.connectors,
+      env: params.env,
+      policy: params.policy,
+      metadata: params.metadata,
+      is_default: params.isDefault ?? params.is_default
+    }).filter(([, value]) => value !== void 0)
+  );
 }
-function listQuery(params) {
-  return {
-    target_id: params.target_id ?? params.targetId ?? params.sandbox_id ?? params.sandboxId ?? params.computer_id ?? params.computerId,
-    limit: params.limit
+function normalize(profile) {
+  const normalized = {
+    ...profile
   };
-}
-function unwrapRun(response) {
-  const run = response.data ?? response.run;
-  if (!run) {
-    throw new Error("Agent run response was empty.");
+  const tenantId = profile.tenantId ?? profile.tenant_id;
+  const workspaceId2 = profile.workspaceId ?? profile.workspace_id;
+  const appliesTo = profile.appliesTo ?? profile.applies_to;
+  const isDefault = profile.isDefault ?? profile.is_default;
+  const createdAt = profile.createdAt ?? profile.created_at;
+  const updatedAt = profile.updatedAt ?? profile.updated_at;
+  if (tenantId !== void 0) normalized.tenantId = tenantId;
+  if (workspaceId2 !== void 0) normalized.workspaceId = workspaceId2;
+  if (appliesTo !== void 0) normalized.appliesTo = appliesTo;
+  if (isDefault !== void 0) normalized.isDefault = isDefault;
+  if (createdAt !== void 0) normalized.createdAt = createdAt;
+  if (updatedAt !== void 0) normalized.updatedAt = updatedAt;
+  return normalized;
+}
+var AgentRuntimeProfiles = class {
+  constructor(http) {
+    this.http = http;
+  }
+  http;
+  async list(params = {}) {
+    const response = await this.http.get(
+      "/agent-runtime-profiles",
+      { workspace_id: params.workspaceId ?? params.workspace_id }
+    );
+    return unwrap(response).map(normalize);
   }
-  return run;
+  async get(id) {
+    return normalize(
+      unwrap(
+        await this.http.get(
+          `/agent-runtime-profiles/${encodeURIComponent(id)}`
+        )
+      )
+    );
+  }
+  async create(params) {
+    return normalize(
+      unwrap(
+        await this.http.post(
+          "/agent-runtime-profiles",
+          body(params)
+        )
+      )
+    );
+  }
+  async update(id, params) {
+    return normalize(
+      unwrap(
+        await this.http.put(
+          `/agent-runtime-profiles/${encodeURIComponent(id)}`,
+          body(params)
+        )
+      )
+    );
+  }
+  async delete(id) {
+    await this.http.delete(
+      `/agent-runtime-profiles/${encodeURIComponent(id)}`
+    );
+  }
+};
+
+// src/resources/agent-runs.ts
+function unwrap2(payload) {
+  if (payload && typeof payload === "object" && "data" in payload) {
+    return payload.data;
+  }
+  return payload;
 }
-function unwrapRuns(response) {
-  if (Array.isArray(response)) return response;
-  return response.data ?? response.runs ?? [];
+function stripUndefined(input) {
+  return Object.fromEntries(
+    Object.entries(input).filter(([, value]) => value !== void 0)
+  );
 }
 var AgentRuns = class {
   constructor(http) {
     this.http = http;
   }
   http;
-  /** Dispatch a prompt to a sandbox/computer and persist the run record. */
-  async create(params) {
-    const response = await this.http.post("/agent-runs", createBody(params));
-    return unwrapRun(response);
-  }
-  /** Alias for create(), matching the product language. */
-  async run(params) {
-    return this.create(params);
-  }
-  /** List recent agent runs for the authenticated tenant. */
   async list(params = {}) {
     const response = await this.http.get(
       "/agent-runs",
-      listQuery(params)
+      stripUndefined({
+        target_kind: params.targetKind,
+        target_id: params.targetId,
+        sandbox_id: params.sandboxId,
+        computer_id: params.computerId,
+        status: params.status
+      })
+    );
+    const data = unwrap2(
+      response
     );
-    return unwrapRuns(response);
+    if (Array.isArray(data)) return data;
+    return data.runs ?? data.items ?? [];
+  }
+  async get(id) {
+    return unwrap2(
+      await this.http.get(`/agent-runs/${encodeURIComponent(id)}`)
+    );
+  }
+  async run(params) {
+    const body2 = stripUndefined({
+      prompt: params.prompt,
+      target_kind: params.targetKind,
+      target_id: params.targetId,
+      sandbox_id: params.sandboxId,
+      computer_id: params.computerId,
+      provider: params.provider,
+      model: params.model,
+      command: params.command,
+      runtime_command: params.runtimeCommand,
+      cwd: params.cwd,
+      timeout: params.timeout,
+      env: params.env,
+      agent_runtime_profile_id: params.agentRuntimeProfileId,
+      agent_profile_id: params.agentProfileId,
+      skip_agent_runtime_profile: params.skipAgentRuntimeProfile,
+      metadata: params.metadata
+    });
+    return unwrap2(await this.http.post("/agent-runs", body2));
   }
-  /** Fetch one persisted agent run. */
-  async get(runId) {
-    const response = await this.http.get(`/agent-runs/${runId}`);
-    return unwrapRun(response);
+  async cancel(id) {
+    return unwrap2(
+      await this.http.post(
+        `/agent-runs/${encodeURIComponent(id)}/cancel`,
+        {}
+      )
+    );
   }
 };
 
 // src/resources/analytics.ts
-function unwrap(payload) {
+function unwrap3(payload) {
   if (payload && typeof payload === "object") {
     const p = payload;
     for (const k of ["data", "analytics", "series", "items"]) {
@@ -689,16 +785,16 @@ var Analytics = class {
   async overview(filters = {}) {
     const query = stripUndefined2(filters);
     const data = await this.http.get("/analytics/overview", query);
-    return unwrap(data);
+    return unwrap3(data);
   }
   /** Get a timeseries for a metric over a period. */
   async timeseries(params = {}) {
     const query = stripUndefined2(params);
     const data = await this.http.get("/analytics/timeseries", query);
-    return unwrap(data);
+    return unwrap3(data);
   }
 };
-function unwrap2(payload) {
+function unwrap4(payload) {
   if (payload && typeof payload === "object" && "data" in payload) {
     return payload.data;
   }
@@ -734,26 +830,26 @@ var ApiKeys = class {
   }
   async create(params) {
     const { idempotencyKey: ikey, expiresAt, ...rest } = params;
-    const body = stripUndefined3({
+    const body2 = stripUndefined3({
       ...rest,
       expires_at: expiresAt ?? rest.expires_at
     });
     const data = await this.http.request("/api-keys", {
       method: "POST",
-      body,
+      body: body2,
       headers: { "Idempotency-Key": idempotencyKey(ikey) }
     });
-    return unwrap2(data);
+    return unwrap4(data);
   }
   /** POST /api/v1/api-keys/scoped — L2 delegation token bound to one external user. */
   async createScoped(params) {
-    const body = stripUndefined3({
+    const body2 = stripUndefined3({
       external_user_id: params.externalUserId,
       scopes: params.scopes,
       expires_at: params.expiresAt
     });
-    return unwrap2(
-      await this.http.post("/api-keys/scoped", body)
+    return unwrap4(
+      await this.http.post("/api-keys/scoped", body2)
     );
   }
   async delete(keyId) {
@@ -762,7 +858,7 @@ var ApiKeys = class {
 };
 
 // src/resources/audit-log.ts
-function unwrap3(payload) {
+function unwrap5(payload) {
   if (payload && typeof payload === "object") {
     const p = payload;
     for (const k of ["data", "audit_log", "events", "items"]) {
@@ -785,14 +881,14 @@ var AuditLog = class {
   async list(params = {}) {
     const query = stripUndefined4(params);
     const data = await this.http.get("/audit-log", query);
-    const result = unwrap3(data);
+    const result = unwrap5(data);
     if (Array.isArray(result)) return result;
     return [];
   }
 };
 
 // src/resources/benchmarks.ts
-function unwrap4(data) {
+function unwrap6(data) {
   if (data && typeof data === "object") {
     const d = data;
     for (const k of ["data", "benchmarks", "samples", "items"]) {
@@ -824,19 +920,19 @@ var Benchmarks = class {
     return unwrapList(data);
   }
   async get(benchmarkId) {
-    return unwrap4(
+    return unwrap6(
       await this.http.get(`/admin/benchmarks/${benchmarkId}`)
     );
   }
   /** Start a new benchmark run — pass kind and run-specific options. */
   async create(params) {
-    const body = Object.fromEntries(
+    const body2 = Object.fromEntries(
       Object.entries(params).filter(([, v]) => v !== void 0)
     );
-    return unwrap4(await this.http.post("/admin/benchmarks", body));
+    return unwrap6(await this.http.post("/admin/benchmarks", body2));
   }
   async cancel(benchmarkId) {
-    return unwrap4(
+    return unwrap6(
       await this.http.post(`/admin/benchmarks/${benchmarkId}/cancel`)
     );
   }
@@ -853,17 +949,17 @@ var Benchmarks = class {
   }
   /** Compare two benchmark runs. */
   async compare(params) {
-    const body = Object.fromEntries(
+    const body2 = Object.fromEntries(
       Object.entries(params).filter(([, v]) => v !== void 0)
     );
-    return unwrap4(
-      await this.http.post("/admin/benchmarks/compare", body)
+    return unwrap6(
+      await this.http.post("/admin/benchmarks/compare", body2)
     );
   }
 };
 
 // src/resources/builder-sessions.ts
-function unwrap5(data) {
+function unwrap7(data) {
   if (data && typeof data === "object") {
     const d = data;
     for (const k of ["data", "sessions", "items"]) {
@@ -900,7 +996,7 @@ var BuilderSessions = class {
     return all.find((s) => s.id === sessionId) ?? {};
   }
   async updateTitle(sessionId, title) {
-    return unwrap5(
+    return unwrap7(
       await this.http.patch(`/builder/sessions/${sessionId}/title`, {
         title
       })
@@ -912,7 +1008,7 @@ var BuilderSessions = class {
 };
 
 // src/resources/channels.ts
-function unwrap6(payload) {
+function unwrap8(payload) {
   if (payload && typeof payload === "object") {
     const p = payload;
     for (const k of ["data", "channels", "notifications", "items"]) {
@@ -940,26 +1036,26 @@ var Channels = class {
   async list(params = {}) {
     const query = stripUndefined5(params);
     const data = await this.http.get("/channels", query);
-    const result = unwrap6(data);
+    const result = unwrap8(data);
     if (Array.isArray(result)) return result;
     return [];
   }
   /** Get a single channel. */
   async get(channelId) {
     const data = await this.http.get(`/channels/${channelId}`);
-    return unwrap6(data);
+    return unwrap8(data);
   }
   /** Create a new channel. */
   async create(params) {
-    const body = stripUndefObj(params);
-    const data = await this.http.post("/channels", body);
-    return unwrap6(data);
+    const body2 = stripUndefObj(params);
+    const data = await this.http.post("/channels", body2);
+    return unwrap8(data);
   }
   /** Update a channel. */
   async update(channelId, params) {
-    const body = stripUndefObj(params);
-    const data = await this.http.patch(`/channels/${channelId}`, body);
-    return unwrap6(data);
+    const body2 = stripUndefObj(params);
+    const data = await this.http.patch(`/channels/${channelId}`, body2);
+    return unwrap8(data);
   }
   /** Delete a channel. */
   async delete(channelId) {
@@ -969,30 +1065,30 @@ var Channels = class {
   /** Get notification preferences across all channels. */
   async listNotifications() {
     const data = await this.http.get("/channels/notifications");
-    return unwrap6(data);
+    return unwrap8(data);
   }
   /** Update notification preferences. */
   async updateNotifications(params) {
-    const body = stripUndefObj(params);
-    const data = await this.http.put("/channels/notifications", body);
-    return unwrap6(data);
+    const body2 = stripUndefObj(params);
+    const data = await this.http.put("/channels/notifications", body2);
+    return unwrap8(data);
   }
   /** Enable a channel. */
   async enable(channelId) {
     const data = await this.http.post(`/channels/${channelId}/enable`);
-    return unwrap6(data);
+    return unwrap8(data);
   }
   /** Disable a channel. */
   async disable(channelId) {
     const data = await this.http.post(
       `/channels/${channelId}/disable`
     );
-    return unwrap6(data);
+    return unwrap8(data);
   }
 };
 
 // src/resources/command-center.ts
-function unwrap7(data) {
+function unwrap9(data) {
   if (data && typeof data === "object") {
     const d = data;
     for (const k of [
@@ -1026,7 +1122,7 @@ var CommandCenter = class {
   http;
   /** Top-level snapshot (GET /command-center). */
   async overview() {
-    return unwrap7(await this.http.get("/command-center"));
+    return unwrap9(await this.http.get("/command-center"));
   }
   async agents() {
     return unwrapList3(await this.http.get("/command-center/agents"));
@@ -1037,13 +1133,13 @@ var CommandCenter = class {
     );
   }
   async metrics() {
-    return unwrap7(await this.http.get("/command-center/metrics"));
+    return unwrap9(await this.http.get("/command-center/metrics"));
   }
   async presets() {
     return unwrapList3(await this.http.get("/command-center/presets"));
   }
   async tiers() {
-    return unwrap7(await this.http.get("/command-center/tiers"));
+    return unwrap9(await this.http.get("/command-center/tiers"));
   }
   /** Stream live command-center events via SSE. */
   events() {
@@ -1052,7 +1148,7 @@ var CommandCenter = class {
 };
 
 // src/resources/community.ts
-function unwrap8(data) {
+function unwrap10(data) {
   if (data && typeof data === "object") {
     const d = data;
     for (const k of ["data", "templates", "agents", "items"]) {
@@ -1084,7 +1180,7 @@ var Community = class {
     return unwrapList4(await this.http.get("/community/agents", query));
   }
   async getAgent(agentId) {
-    return unwrap8(await this.http.get(`/community/agents/${agentId}`));
+    return unwrap10(await this.http.get(`/community/agents/${agentId}`));
   }
   // ── Templates ─────────────────────────────────────────────────────────
   async listTemplates(filters = {}) {
@@ -1096,41 +1192,41 @@ var Community = class {
     );
   }
   async getTemplate(templateId) {
-    return unwrap8(
+    return unwrap10(
       await this.http.get(`/community/templates/${templateId}`)
     );
   }
   /** Install a community template into the caller's tenant. */
   async installTemplate(templateId, opts = {}) {
-    const body = Object.fromEntries(
+    const body2 = Object.fromEntries(
       Object.entries(opts).filter(([, v]) => v !== void 0)
     );
-    return unwrap8(
+    return unwrap10(
       await this.http.post(
         `/community/templates/${templateId}/install`,
-        body
+        body2
       )
     );
   }
   /** Rate a community template (1–5). */
   async rateTemplate(templateId, rating, opts = {}) {
-    const body = {
+    const body2 = {
       rating,
       ...Object.fromEntries(
         Object.entries(opts).filter(([, v]) => v !== void 0)
       )
     };
-    return unwrap8(
+    return unwrap10(
       await this.http.post(
         `/community/templates/${templateId}/rate`,
-        body
+        body2
       )
     );
   }
 };
 
 // src/resources/completions.ts
-function unwrap9(data) {
+function unwrap11(data) {
   if (data && typeof data === "object") {
     const d = data;
     if (Array.isArray(d.choices)) return d;
@@ -1149,24 +1245,24 @@ var Completions = class {
   }
   http;
   create(params) {
-    const body = buildBody(params);
+    const body2 = buildBody(params);
     if (params.stream === true) {
       return this.http.stream(
         "/intelligence/completions",
-        { method: "POST", body }
+        { method: "POST", body: body2 }
       );
     }
-    return this.http.post("/intelligence/completions", body).then(unwrap9);
+    return this.http.post("/intelligence/completions", body2).then(unwrap11);
   }
   chat(params) {
-    const body = buildBody(params);
+    const body2 = buildBody(params);
     if (params.stream === true) {
       return this.http.stream(
         "/intelligence/chat/completions",
-        { method: "POST", body }
+        { method: "POST", body: body2 }
       );
     }
-    return this.http.post("/intelligence/chat/completions", body).then(unwrap9);
+    return this.http.post("/intelligence/chat/completions", body2).then(unwrap11);
   }
 };
 
@@ -1289,7 +1385,7 @@ var Checkpoints = class {
 };
 
 // src/resources/computer-auto-stop.ts
-function unwrap10(data) {
+function unwrap12(data) {
   if (data && typeof data === "object") {
     const d = data;
     if ("data" in d && Object.keys(d).length <= 2) {
@@ -1307,13 +1403,13 @@ var ComputerAutoStop = class {
   computerId;
   /** Return the current auto-stop configuration. */
   async get() {
-    return unwrap10(
+    return unwrap12(
       await this.http.get(`/computers/${this.computerId}/auto-stop`)
     );
   }
   /** Set the idle timeout in seconds (0 disables auto-stop). */
   async update(seconds) {
-    return unwrap10(
+    return unwrap12(
       await this.http.patch(
         `/computers/${this.computerId}/auto-stop`,
         { seconds }
@@ -1323,7 +1419,7 @@ var ComputerAutoStop = class {
 };
 
 // src/resources/computer-env.ts
-function unwrap11(data) {
+function unwrap13(data) {
   if (data && typeof data === "object") {
     const d = data;
     if ("data" in d && Object.keys(d).length <= 2) {
@@ -1358,11 +1454,11 @@ var ComputerEnv = class {
   }
   /** Create a new env var. Use update() to change an existing one. */
   async set(name, value) {
-    return unwrap11(await this.http.post(this.base(), { name, value }));
+    return unwrap13(await this.http.post(this.base(), { name, value }));
   }
   /** Patch the value of an existing env var by name. */
   async update(name, value) {
-    return unwrap11(
+    return unwrap13(
       await this.http.patch(`${this.base()}/${name}`, { value })
     );
   }
@@ -1379,7 +1475,7 @@ var ComputerEnv = class {
 };
 
 // src/resources/computer-logs.ts
-function unwrap12(data) {
+function unwrap14(data) {
   if (data && typeof data === "object") {
     const d = data;
     if ("data" in d && Object.keys(d).length <= 2) {
@@ -1400,7 +1496,7 @@ var ComputerLogs = class {
     const query = Object.fromEntries(
       Object.entries(params).filter(([, v]) => v !== void 0)
     );
-    return unwrap12(
+    return unwrap14(
       await this.http.get(`/computers/${this.computerId}/logs`, query)
     );
   }
@@ -1413,7 +1509,7 @@ var ComputerLogs = class {
 };
 
 // src/resources/computer-osa.ts
-function unwrap13(data) {
+function unwrap15(data) {
   if (data && typeof data === "object") {
     const d = data;
     if ("data" in d && Object.keys(d).length <= 2) {
@@ -1431,47 +1527,47 @@ var ComputerOsa = class {
   computerId;
   /** Submit a free-form task to the in-VM OSA agent. */
   async submitTask(task, params = {}) {
-    const body = {
+    const body2 = {
       task,
       ...Object.fromEntries(
         Object.entries(params).filter(([, v]) => v !== void 0)
       )
     };
-    return unwrap13(
+    return unwrap15(
       await this.http.post(
         `/computers/${this.computerId}/osa/task`,
-        body
+        body2
       )
     );
   }
   /** Cancel the currently-running OSA task, if any. */
   async cancelTask() {
-    return unwrap13(
+    return unwrap15(
       await this.http.delete(`/computers/${this.computerId}/osa/task`)
     );
   }
   /** Return OSA's current task / configuration / health snapshot. */
   async status() {
-    return unwrap13(
+    return unwrap15(
       await this.http.get(`/computers/${this.computerId}/osa/status`)
     );
   }
   /** Update OSA runtime configuration (model, tools, secrets, etc.). */
   async configure(config) {
-    const body = Object.fromEntries(
+    const body2 = Object.fromEntries(
       Object.entries(config).filter(([, v]) => v !== void 0)
     );
-    return unwrap13(
+    return unwrap15(
       await this.http.post(
         `/computers/${this.computerId}/osa/configure`,
-        body
+        body2
       )
     );
   }
 };
 
 // src/resources/computer-ports.ts
-function unwrap14(data) {
+function unwrap16(data) {
   if (data && typeof data === "object") {
     const d = data;
     if ("data" in d && Object.keys(d).length <= 2) {
@@ -1510,21 +1606,21 @@ var ComputerPorts = class {
   }
   /** Expose port with the given visibility options. */
   async create(port, opts = {}) {
-    const body = {
+    const body2 = {
       port,
       ...Object.fromEntries(
         Object.entries(opts).filter(([, v]) => v !== void 0)
       )
     };
-    return unwrap14(await this.http.post(this.base(), body));
+    return unwrap16(await this.http.post(this.base(), body2));
   }
   /** Patch visibility / auth options for port. */
   async update(port, opts) {
-    const body = Object.fromEntries(
+    const body2 = Object.fromEntries(
       Object.entries(opts).filter(([, v]) => v !== void 0)
     );
-    return unwrap14(
-      await this.http.patch(`${this.base()}/${port}`, body)
+    return unwrap16(
+      await this.http.patch(`${this.base()}/${port}`, body2)
     );
   }
   /** Stop exposing port. */
@@ -1543,14 +1639,14 @@ var ComputerTerminal = class {
   computerId;
   /** Open a new PTY session. Returns the server payload (session id, etc.). */
   async create(params = {}) {
-    const body = Object.fromEntries(
+    const body2 = Object.fromEntries(
       Object.entries(params).filter(([, v]) => v !== void 0)
     );
     const raw = await this.http.post(
       `/computers/${this.computerId}/terminal`,
-      body
+      body2
     );
-    return unwrap15(raw);
+    return unwrap17(raw);
   }
   /** Resize an existing PTY session. */
   async resize(sessionId, cols, rows) {
@@ -1558,10 +1654,10 @@ var ComputerTerminal = class {
       `/computers/${this.computerId}/pty/${sessionId}/resize`,
       { cols, rows }
     );
-    return unwrap15(raw);
+    return unwrap17(raw);
   }
 };
-function unwrap15(data) {
+function unwrap17(data) {
   if (data && typeof data === "object") {
     const d = data;
     if ("data" in d && Object.keys(d).length <= 2) {
@@ -1572,7 +1668,7 @@ function unwrap15(data) {
 }
 
 // src/resources/computer-volumes.ts
-function unwrap16(data) {
+function unwrap18(data) {
   if (data && typeof data === "object") {
     const d = data;
     if ("data" in d && Object.keys(d).length <= 2) {
@@ -1606,7 +1702,7 @@ var ComputerVolumes = class {
   }
   /** Attach volumeId at mountPath inside the VM. */
   async attach(volumeId, mountPath) {
-    return unwrap16(
+    return unwrap18(
       await this.http.post(this.base(), {
         volume_id: volumeId,
         mount_path: mountPath
@@ -1779,7 +1875,7 @@ var Desktop = class {
 };
 
 // src/resources/egressAudit.ts
-function unwrap17(payload) {
+function unwrap19(payload) {
   if (payload && typeof payload === "object") {
     const p = payload;
     for (const k of ["data", "event", "items"]) {
@@ -1807,7 +1903,7 @@ function pickFirst(...values) {
   for (const v of values) if (v !== void 0) return v;
   return void 0;
 }
-function listQuery2(params) {
+function listQuery(params) {
   return stripUndefined6({
     resource_id: pickFirst(params.resourceId, params.resource_id),
     resource_type: pickFirst(params.resourceType, params.resource_type),
@@ -1836,7 +1932,7 @@ var EgressAudit = class {
   async list(params = {}) {
     const data = await this.http.get(
       "/egress/audit",
-      listQuery2(params)
+      listQuery(params)
     );
     return unwrapList8(data);
   }
@@ -1845,7 +1941,7 @@ var EgressAudit = class {
     const data = await this.http.get(
       `/egress/audit/${id}`
     );
-    return unwrap17(data);
+    return unwrap19(data);
   }
   /**
    * Long-poll the audit endpoint and yield new events as they appear.
@@ -1863,7 +1959,7 @@ var EgressAudit = class {
       if (since !== void 0) queryParams.since = since;
       const data = await this.http.get(
         "/egress/audit",
-        listQuery2(queryParams)
+        listQuery(queryParams)
       );
       const events = unwrapList8(data);
       for (const event of events) {
@@ -1921,7 +2017,7 @@ var ComputerAudit = class extends SandboxAudit {
 };
 
 // src/resources/egressNetwork.ts
-function unwrap18(payload) {
+function unwrap20(payload) {
   if (payload && typeof payload === "object") {
     const p = payload;
     for (const k of ["data", "policy", "rule", "items"]) {
@@ -1980,7 +2076,7 @@ var EgressNetwork = class {
       "/egress/allowlist",
       ruleBody(host, params, "allow")
     );
-    return unwrap18(data);
+    return unwrap20(data);
   }
   /** Add a `deny` rule for `host` to the allowlist. */
   async deny(host, params = {}) {
@@ -1988,7 +2084,7 @@ var EgressNetwork = class {
       "/egress/allowlist",
       ruleBody(host, params, "deny")
     );
-    return unwrap18(data);
+    return unwrap20(data);
   }
   /** List allowlist rules. */
   async rules(params = {}) {
@@ -2016,7 +2112,7 @@ var EgressNetwork = class {
   }
   /** Create an egress policy. */
   async createPolicy(params) {
-    const body = stripUndefined7({
+    const body2 = stripUndefined7({
       name: params.name,
       mode: params.mode ?? "enforce",
       default_effect: pickFirst2(
@@ -2030,13 +2126,13 @@ var EgressNetwork = class {
     });
     const data = await this.http.post(
       "/egress/policies",
-      body
+      body2
     );
-    return unwrap18(data);
+    return unwrap20(data);
   }
   /** Update an egress policy by id. */
   async updatePolicy(policyId, params) {
-    const body = stripUndefined7({
+    const body2 = stripUndefined7({
       mode: params.mode,
       default_effect: pickFirst2(params.defaultEffect, params.default_effect),
       name: params.name,
@@ -2044,9 +2140,9 @@ var EgressNetwork = class {
     });
     const data = await this.http.patch(
       `/egress/policies/${policyId}`,
-      body
+      body2
     );
-    return unwrap18(data);
+    return unwrap20(data);
   }
   // ── mode helpers ──────────────────────────────────────────────────────────
   /** Set the policy to `mode="enforce"` — denied egress is blocked. */
@@ -2064,16 +2160,16 @@ var EgressNetwork = class {
     if (policyId) {
       return this.updatePolicy(policyId, { mode });
     }
-    const body = resourceId !== void 0 && resourceType !== void 0 ? stripUndefined7({
+    const body2 = resourceId !== void 0 && resourceType !== void 0 ? stripUndefined7({
       mode,
       resource_id: resourceId,
       resource_type: resourceType
     }) : { mode };
     const data = await this.http.patch(
       "/egress/policies",
-      body
+      body2
     );
-    return unwrap18(data);
+    return unwrap20(data);
   }
   // ── suggestions ───────────────────────────────────────────────────────────
   /** AI-generated allowlist suggestions from recent denied egress. */
@@ -2129,28 +2225,28 @@ var SandboxNetwork = class {
     return this.delegate.removeRule(ruleId);
   }
   lockdown(params = {}) {
-    const body = {
+    const body2 = {
       resource_id: this.resourceId,
       resource_type: this.resourceType
     };
-    if (params.policyId !== void 0) body.policyId = params.policyId;
-    return this.delegate.lockdown(body);
+    if (params.policyId !== void 0) body2.policyId = params.policyId;
+    return this.delegate.lockdown(body2);
   }
   observe(params = {}) {
-    const body = {
+    const body2 = {
       resource_id: this.resourceId,
       resource_type: this.resourceType
     };
-    if (params.policyId !== void 0) body.policyId = params.policyId;
-    return this.delegate.observe(body);
+    if (params.policyId !== void 0) body2.policyId = params.policyId;
+    return this.delegate.observe(body2);
   }
   suggestions(params = {}) {
-    const body = {
+    const body2 = {
       resource_id: this.resourceId,
       resource_type: this.resourceType
     };
-    if (params.since !== void 0) body.since = params.since;
-    return this.delegate.suggestions(body);
+    if (params.since !== void 0) body2.since = params.since;
+    return this.delegate.suggestions(body2);
   }
   policies() {
     return this.delegate.policies({
@@ -2164,7 +2260,7 @@ var ComputerNetwork = class extends SandboxNetwork {
 };
 
 // src/resources/egressSecrets.ts
-function unwrap19(payload) {
+function unwrap21(payload) {
   if (payload && typeof payload === "object") {
     const p = payload;
     for (const k of ["data", "secret", "binding", "items"]) {
@@ -2213,7 +2309,7 @@ function setBody(params) {
     metadata: params.metadata
   });
 }
-function listQuery3(params) {
+function listQuery2(params) {
   return stripUndefined8({
     scope: params.scope,
     type: params.type,
@@ -2300,7 +2396,7 @@ var OAuthFlow = class {
       const data = await this.http.get("/egress/oauth/status", {
         state: this.state
       });
-      const payload = unwrap19(data) ?? {};
+      const payload = unwrap21(data) ?? {};
       const status = payload.status;
       if (status === "completed" || status === "ready" || status === "succeeded") {
         return payload;
@@ -2332,13 +2428,13 @@ var EgressSecrets = class {
       "/egress/secrets",
       setBody(params)
     );
-    return unwrap19(data);
+    return unwrap21(data);
   }
   /** List secrets. */
   async list(params = {}) {
     const data = await this.http.get(
       "/egress/secrets",
-      listQuery3(params)
+      listQuery2(params)
     );
     return unwrapList10(data);
   }
@@ -2347,16 +2443,16 @@ var EgressSecrets = class {
     const data = await this.http.get(
       `/egress/secrets/${id}`
     );
-    return unwrap19(data);
+    return unwrap21(data);
   }
   /** Rotate the secret's value. */
   async rotate(id, params) {
-    const body = typeof params === "string" ? rotateBody({ newValue: params }) : rotateBody(params);
+    const body2 = typeof params === "string" ? rotateBody({ newValue: params }) : rotateBody(params);
     const data = await this.http.patch(
       `/egress/secrets/${id}`,
-      body
+      body2
     );
-    return unwrap19(data);
+    return unwrap21(data);
   }
   /** Delete a secret. */
   async delete(id) {
@@ -2369,7 +2465,7 @@ var EgressSecrets = class {
       "/egress/bindings",
       bindingBody(params)
     );
-    return unwrap19(data);
+    return unwrap21(data);
   }
   /** List secret bindings. */
   async listBindings(params = {}) {
@@ -2402,7 +2498,7 @@ var EgressSecrets = class {
       "/egress/oauth/start",
       oauthBody(params)
     );
-    const payload = unwrap19(data) ?? {};
+    const payload = unwrap21(data) ?? {};
     return new OAuthFlow(this.http, payload, params.provider);
   }
 };
@@ -2966,12 +3062,12 @@ var ComputerInbox = class {
     return unwrapData(raw);
   }
   async update(fields) {
-    const body = Object.fromEntries(
+    const body2 = Object.fromEntries(
       Object.entries(fields).filter(([, v]) => v !== void 0)
     );
     const raw = await this.http.patch(
       `/computers/${this.computerId}/inbox`,
-      body
+      body2
     );
     return unwrapData(raw);
   }
@@ -3270,12 +3366,12 @@ var Computer = class _Computer {
   }
   /** Clone this computer into a new one. */
   async clone(opts = {}) {
-    const body = Object.fromEntries(
+    const body2 = Object.fromEntries(
       Object.entries(opts).filter(([, v]) => v !== void 0)
     );
     const raw = await this.http.post(
       `/computers/${this.id}/clone`,
-      body
+      body2
     );
     const data = unwrapData(raw);
     return new _Computer(this.http, data);
@@ -3291,12 +3387,12 @@ var Computer = class _Computer {
   }
   /** Move the computer to a different region or host. */
   async move(opts) {
-    const body = Object.fromEntries(
+    const body2 = Object.fromEntries(
       Object.entries(opts).filter(([, v]) => v !== void 0)
     );
     const updated = await this.http.post(
       `/computers/${this.id}/move`,
-      body
+      body2
     );
     this.data = updated;
     return this;
@@ -3374,10 +3470,18 @@ var Computers = class {
    * `computer.start()` once it reaches `stopped` to boot it.
    */
   async create(params) {
+    const {
+      agentRuntimeProfileId,
+      agentProfileId,
+      skipAgentRuntimeProfile,
+      ...body2
+    } = params;
     const data = await this.http.post("/computers", {
       template_type: "miosa-desktop",
       size: "small",
-      ...params
+      ...body2,
+      agent_runtime_profile_id: agentRuntimeProfileId ?? params.agent_runtime_profile_id ?? agentProfileId ?? params.agent_profile_id,
+      skip_agent_runtime_profile: skipAgentRuntimeProfile ?? params.skip_agent_runtime_profile
     });
     return new Computer(this.http, data);
   }
@@ -3447,7 +3551,7 @@ var Credits = class {
     return this.http.get("/credits/usage");
   }
 };
-function unwrap20(payload) {
+function unwrap22(payload) {
   if (payload && typeof payload === "object" && "data" in payload) {
     return payload.data;
   }
@@ -3483,22 +3587,22 @@ var CronJobs = class {
   }
   async get(jobId) {
     const data = await this.http.get(`/cron-jobs/${jobId}`);
-    return unwrap20(data);
+    return unwrap22(data);
   }
   async create(params) {
     const { idempotencyKey: ikey, ...rest } = params;
-    const body = stripUndefined9(rest);
+    const body2 = stripUndefined9(rest);
     const data = await this.http.request("/cron-jobs", {
       method: "POST",
-      body,
+      body: body2,
       headers: { "Idempotency-Key": idempotencyKey2(ikey) }
     });
-    return unwrap20(data);
+    return unwrap22(data);
   }
   async update(jobId, params) {
-    const body = stripUndefined9(params);
-    const data = await this.http.patch(`/cron-jobs/${jobId}`, body);
-    return unwrap20(data);
+    const body2 = stripUndefined9(params);
+    const data = await this.http.patch(`/cron-jobs/${jobId}`, body2);
+    return unwrap22(data);
   }
   async delete(jobId) {
     await this.http.delete(`/cron-jobs/${jobId}`);
@@ -3506,11 +3610,11 @@ var CronJobs = class {
   // ── Control ────────────────────────────────────────────────────────────────
   async pause(jobId) {
     const data = await this.http.post(`/cron-jobs/${jobId}/pause`);
-    return unwrap20(data);
+    return unwrap22(data);
   }
   async resume(jobId) {
     const data = await this.http.post(`/cron-jobs/${jobId}/resume`);
-    return unwrap20(data);
+    return unwrap22(data);
   }
   async runNow(jobId, opts = {}) {
     const data = await this.http.request(
@@ -3520,7 +3624,7 @@ var CronJobs = class {
         headers: { "Idempotency-Key": idempotencyKey2(opts.idempotencyKey) }
       }
     );
-    return unwrap20(data);
+    return unwrap22(data);
   }
   // ── Execution history ──────────────────────────────────────────────────────
   async listExecutions(jobId) {
@@ -3535,12 +3639,12 @@ var CronJobs = class {
     const data = await this.http.get(
       `/cron-jobs/${jobId}/executions/${executionId}`
     );
-    return unwrap20(data);
+    return unwrap22(data);
   }
 };
 
 // src/resources/dashboard.ts
-function unwrap21(payload) {
+function unwrap23(payload) {
   if (payload && typeof payload === "object") {
     const p = payload;
     for (const k of ["data", "dashboard", "overview", "items"]) {
@@ -3557,15 +3661,15 @@ var Dashboard = class {
   /** Aggregated user dashboard payload. */
   async summary() {
     const data = await this.http.get("/dashboard");
-    return unwrap21(data);
+    return unwrap23(data);
   }
   /** Status / health overview (public endpoint). */
   async overview() {
     const data = await this.http.get("/overview");
-    return unwrap21(data);
+    return unwrap23(data);
   }
 };
-function unwrap22(payload) {
+function unwrap24(payload) {
   if (payload && typeof payload === "object" && "data" in payload) {
     return payload.data;
   }
@@ -3601,7 +3705,7 @@ var Databases = class {
   }
   async get(databaseId) {
     const data = await this.http.get(`/databases/${databaseId}`);
-    return unwrap22(data);
+    return unwrap24(data);
   }
   async create(params) {
     const {
@@ -3612,20 +3716,20 @@ var Databases = class {
       size: _deprecatedSize,
       ...rest
     } = params;
-    const body = stripUndefined10({
+    const body2 = stripUndefined10({
       ...rest,
       engine_version: engine_version ?? version
     });
     const data = await this.http.request("/databases", {
       method: "POST",
-      body,
+      body: body2,
       headers: {
         "Idempotency-Key": idempotencyKey3(
           camelIdempotencyKey ?? snakeIdempotencyKey
         )
       }
     });
-    return unwrap22(data);
+    return unwrap24(data);
   }
   async delete(databaseId) {
     await this.http.delete(`/databases/${databaseId}`);
@@ -3635,24 +3739,24 @@ var Databases = class {
     const data = await this.http.post(
       `/databases/${databaseId}/start`
     );
-    return unwrap22(data);
+    return unwrap24(data);
   }
   async stop(databaseId) {
     const data = await this.http.post(`/databases/${databaseId}/stop`);
-    return unwrap22(data);
+    return unwrap24(data);
   }
   async restart(databaseId) {
     const data = await this.http.post(
       `/databases/${databaseId}/restart`
     );
-    return unwrap22(data);
+    return unwrap24(data);
   }
   // ── Credentials + logs ────────────────────────────────────────────────────
   async credentials(databaseId) {
     const data = await this.http.get(
       `/databases/${databaseId}/credentials`
     );
-    return unwrap22(data);
+    return unwrap24(data);
   }
   async logs(databaseId, params = {}) {
     const query = stripUndefined10({
@@ -3682,7 +3786,7 @@ function attributionBody(p) {
 function idempotencyKey4(key) {
   return key ?? randomUUID();
 }
-function unwrap23(payload) {
+function unwrap25(payload) {
   if (payload && typeof payload === "object" && "data" in payload) {
     return payload.data;
   }
@@ -3709,6 +3813,42 @@ function dockerDeployMetadata(metadata) {
     deployment_product: "docker_deploy"
   };
 }
+function dockerDeployProduct(deployment) {
+  return deployment.deployment_product ?? deployment.metadata?.deployment_product;
+}
+function dockerDeployHostId(deployment) {
+  const metadataHost = deployment.metadata?.docker_deploy_host_id;
+  return deployment.docker_deploy_host_id ?? (typeof metadataHost === "string" ? metadataHost : null);
+}
+function dockerDeployApp(deployment) {
+  const app = deployment.metadata?.docker_deploy;
+  if (!app || typeof app !== "object" || Array.isArray(app)) return null;
+  return app;
+}
+function dockerDeployAppPort(app) {
+  const url = app?.url;
+  if (typeof url !== "string") return null;
+  try {
+    const parsed = new URL(url);
+    const port = Number.parseInt(parsed.port, 10);
+    return Number.isInteger(port) ? port : null;
+  } catch {
+    return null;
+  }
+}
+function addDoctorCheck(checks, name, ok, message, details) {
+  checks.push({ name, ok, message, ...details ? { details } : {} });
+}
+function hostHealthy(host) {
+  return Boolean(
+    host && host.status === "active" && host.appliance_status === "healthy"
+  );
+}
+function probeUrl(publicUrl, probePath) {
+  const url = new URL(publicUrl);
+  url.pathname = probePath.startsWith("/") ? probePath : `/${probePath}`;
+  return url.toString();
+}
 var DeploymentVersions = class {
   constructor(http, deploymentId) {
     this.http = http;
@@ -3733,19 +3873,19 @@ var DeploymentVersions = class {
     const data = await this.http.get(
       `/deployments/${this.deploymentId}/versions/${versionId}`
     );
-    return unwrap23(data);
+    return unwrap25(data);
   }
   async promote(versionId, opts = {}) {
-    const body = stripUndefined11({ environment: opts.environment });
+    const body2 = stripUndefined11({ environment: opts.environment });
     const data = await this.http.request(
       `/deployments/${this.deploymentId}/versions/${versionId}/promote`,
       {
         method: "POST",
-        body,
+        body: body2,
         headers: { "Idempotency-Key": idempotencyKey4(opts.idempotencyKey) }
       }
     );
-    return unwrap23(data);
+    return unwrap25(data);
   }
 };
 var DeploymentReleases = class {
@@ -3765,7 +3905,7 @@ var DeploymentReleases = class {
     const data = await this.http.get(
       `/deployments/${this.deploymentId}/releases/${releaseId}`
     );
-    return unwrap23(data);
+    return unwrap25(data);
   }
 };
 var DeploymentRuntimeInstances = class {
@@ -3785,14 +3925,14 @@ var DeploymentRuntimeInstances = class {
     const data = await this.http.get(
       `/deployments/${this.deploymentId}/runtime-instances/${instanceId}`
     );
-    return unwrap23(data);
+    return unwrap25(data);
   }
   async logs(instanceId, lines = 100) {
     const data = await this.http.get(
       `/deployments/${this.deploymentId}/runtime-instances/${instanceId}/logs`,
       { lines }
     );
-    const unwrapped = unwrap23(data);
+    const unwrapped = unwrap25(data);
     const result = { logs: String(unwrapped.logs ?? "") };
     if (typeof unwrapped.runtime_instance_id === "string") {
       result.runtime_instance_id = unwrapped.runtime_instance_id;
@@ -3814,7 +3954,7 @@ var DeploymentDomains = class {
   http;
   deploymentId;
   async add(domain, params = {}) {
-    const body = {
+    const body2 = {
       domain,
       redirect_policy: params.redirectPolicy ?? params.redirect_policy,
       ...attributionBody(params)
@@ -3823,11 +3963,11 @@ var DeploymentDomains = class {
       `/deployments/${this.deploymentId}/domains`,
       {
         method: "POST",
-        body: stripUndefined11(body),
+        body: stripUndefined11(body2),
         headers: { "Idempotency-Key": idempotencyKey4(params.idempotencyKey) }
       }
     );
-    return unwrap23(data);
+    return unwrap25(data);
   }
   async list(filters = {}) {
     const data = await this.http.get(
@@ -3840,7 +3980,7 @@ var DeploymentDomains = class {
     const data = await this.http.post(
       `/deployments/${this.deploymentId}/domains/${domainId}/verify`
     );
-    return unwrap23(data);
+    return unwrap25(data);
   }
   async delete(domainId) {
     await this.http.delete(
@@ -3870,10 +4010,10 @@ var Deployments = class {
   }
   async get(deploymentId) {
     const data = await this.http.get(`/deployments/${deploymentId}`);
-    return unwrap23(data);
+    return unwrap25(data);
   }
   async create(params) {
-    const body = stripUndefined11({
+    const body2 = stripUndefined11({
       name: params.name,
       repo_url: params.repoUrl ?? params.repo_url,
       branch: params.branch,
@@ -3886,10 +4026,10 @@ var Deployments = class {
     });
     const data = await this.http.request("/deployments", {
       method: "POST",
-      body,
+      body: body2,
       headers: { "Idempotency-Key": idempotencyKey4(params.idempotencyKey) }
     });
-    return unwrap23(data);
+    return unwrap25(data);
   }
   /**
    * Create a deployment that runs on the workspace's dedicated Docker Deploy
@@ -3902,8 +4042,141 @@ var Deployments = class {
       metadata: dockerDeployMetadata(params.metadata)
     });
   }
+  /**
+   * Verify a Docker Deploy deployment before telling a user or agent it is
+   * live. Checks product markers, appliance host health, route metadata, and
+   * optionally probes the public URL.
+   */
+  async doctorDockerDeploy(deploymentId, params = {}) {
+    const checks = [];
+    const deployment = await this.get(deploymentId);
+    const metadata = deployment.metadata ?? {};
+    const product = dockerDeployProduct(deployment);
+    const hostId = dockerDeployHostId(deployment);
+    addDoctorCheck(
+      checks,
+      "deployment_product",
+      product === "docker_deploy",
+      product === "docker_deploy" ? "Deployment is marked for Docker Deploy." : `Expected deployment_product=docker_deploy, got ${String(product ?? "missing")}.`,
+      { deployment_product: product ?? null }
+    );
+    addDoctorCheck(
+      checks,
+      "docker_deploy_host_id",
+      Boolean(hostId),
+      hostId ? "Deployment has a Docker Deploy host id." : "Deployment has no docker_deploy_host_id.",
+      { docker_deploy_host_id: hostId }
+    );
+    let host;
+    if (hostId) {
+      try {
+        const rawHost = await this.http.get(
+          `/docker-deploy/hosts/${hostId}`
+        );
+        host = unwrap25(
+          rawHost
+        );
+        addDoctorCheck(
+          checks,
+          "docker_deploy_host_health",
+          hostHealthy(host),
+          hostHealthy(host) ? "Docker Deploy host is active and healthy." : `Docker Deploy host status=${host.status} appliance=${host.appliance_status}.`,
+          {
+            status: host.status,
+            appliance_status: host.appliance_status
+          }
+        );
+      } catch (error) {
+        addDoctorCheck(
+          checks,
+          "docker_deploy_host_health",
+          false,
+          error instanceof Error ? error.message : String(error)
+        );
+      }
+    }
+    const app = dockerDeployApp(deployment);
+    const appPort = dockerDeployAppPort(app);
+    const appRunning = app?.status === "running" && appPort !== null;
+    addDoctorCheck(
+      checks,
+      "docker_deploy_app",
+      appRunning,
+      appRunning ? "Docker Deploy app metadata points at a running container." : "Deployment is missing running Docker Deploy app metadata.",
+      app ? {
+        app_id: app.app_id,
+        container_id: app.container_id,
+        status: app.status,
+        url: app.url,
+        expected_port: appPort
+      } : void 0
+    );
+    const runtime = metadata.runtime;
+    const runtimeCandidate = typeof runtime === "object" && runtime !== null ? runtime : void 0;
+    const hasRuntimeRoute = typeof runtimeCandidate?.ip === "string" && typeof runtimeCandidate.port === "number";
+    const runtimeRecord = hasRuntimeRoute ? runtimeCandidate : void 0;
+    const routeMatchesContainerPort = hasRuntimeRoute && (appPort === null || runtimeRecord?.port === appPort);
+    addDoctorCheck(
+      checks,
+      "runtime_route",
+      hasRuntimeRoute && routeMatchesContainerPort,
+      hasRuntimeRoute && routeMatchesContainerPort ? "Deployment route points at the Docker container host port." : hasRuntimeRoute && appPort !== null ? `Deployment route port ${String(runtimeRecord?.port)} does not match Docker container host port ${appPort}.` : "Deployment is missing appliance runtime route metadata.",
+      runtimeRecord ? {
+        ...runtimeRecord,
+        expected_port: appPort,
+        docker_deploy_url: app?.url
+      } : void 0
+    );
+    let probe;
+    const publicUrl = deployment.public_url;
+    const path = params.probePath ?? params.probe_path ?? "/";
+    if (publicUrl && typeof fetch === "function") {
+      const url = probeUrl(publicUrl, path);
+      const controller = new AbortController();
+      const timeout = setTimeout(
+        () => controller.abort(),
+        params.timeoutMs ?? params.timeout_ms ?? 1e4
+      );
+      try {
+        const response = await fetch(url, {
+          method: "GET",
+          signal: controller.signal
+        });
+        probe = { url, ok: response.ok, status: response.status };
+        addDoctorCheck(
+          checks,
+          "public_url_probe",
+          response.ok,
+          `Public URL returned HTTP ${response.status}.`,
+          { url, status: response.status }
+        );
+      } catch (error) {
+        probe = {
+          url,
+          ok: false,
+          error: error instanceof Error ? error.message : String(error)
+        };
+        addDoctorCheck(
+          checks,
+          "public_url_probe",
+          false,
+          probe.error ?? "Public URL probe failed.",
+          { url }
+        );
+      } finally {
+        clearTimeout(timeout);
+      }
+    }
+    return {
+      ok: checks.every((check) => check.ok),
+      deployment,
+      ...host ? { host } : {},
+      checks,
+      ...probe ? { probe } : {}
+    };
+  }
   async update(deploymentId, params) {
-    const body = stripUndefined11({
+    const body2 = stripUndefined11({
       name: params.name,
       branch: params.branch,
       build_command: params.buildCommand ?? params.build_command,
@@ -3912,15 +4185,15 @@ var Deployments = class {
     });
     const data = await this.http.patch(
       `/deployments/${deploymentId}`,
-      body
+      body2
     );
-    return unwrap23(data);
+    return unwrap25(data);
   }
   async delete(deploymentId) {
     await this.http.delete(`/deployments/${deploymentId}`);
   }
   async publish(deploymentId, params) {
-    const body = stripUndefined11({
+    const body2 = stripUndefined11({
       source_sandbox_id: params.sourceSandboxId ?? params.source_sandbox_id,
       output_path: params.outputPath ?? params.output_path,
       entrypoint: params.entrypoint,
@@ -3930,11 +4203,11 @@ var Deployments = class {
       `/deployments/${deploymentId}/publish`,
       {
         method: "POST",
-        body,
+        body: body2,
         headers: { "Idempotency-Key": idempotencyKey4(params.idempotencyKey) }
       }
     );
-    return unwrap23(data);
+    return unwrap25(data);
   }
   /**
    * Backward-compatible bridge: POST /sandboxes/:id/deploy. Works today;
@@ -3942,7 +4215,7 @@ var Deployments = class {
    * phase. Prefer `publish()` once Phase 2B/3 lands.
    */
   async publishFromSandbox(sandboxId, params = {}) {
-    const body = stripUndefined11({
+    const body2 = stripUndefined11({
       name: params.name,
       deployment_id: params.deploymentId ?? params.deployment_id,
       output_path: params.outputPath ?? params.output_path,
@@ -3955,25 +4228,25 @@ var Deployments = class {
       `/sandboxes/${sandboxId}/deploy`,
       {
         method: "POST",
-        body,
+        body: body2,
         headers: { "Idempotency-Key": idempotencyKey4(params.idempotencyKey) }
       }
     );
-    return unwrap23(data);
+    return unwrap25(data);
   }
   async rollback(deploymentId, params = {}) {
-    const body = stripUndefined11({
+    const body2 = stripUndefined11({
       version_id: params.versionId ?? params.version_id
     });
     const data = await this.http.request(
       `/deployments/${deploymentId}/rollback`,
       {
         method: "POST",
-        body,
+        body: body2,
         headers: { "Idempotency-Key": idempotencyKey4(params.idempotencyKey) }
       }
     );
-    return unwrap23(data);
+    return unwrap25(data);
   }
   async listBuilds(deploymentId) {
     const data = await this.http.get(
@@ -3985,7 +4258,7 @@ var Deployments = class {
     const data = await this.http.get(
       `/deployments/${deploymentId}/builds/${buildId}`
     );
-    return unwrap23(data);
+    return unwrap25(data);
   }
   async listEnv(deploymentId) {
     const data = await this.http.get(
@@ -3994,10 +4267,10 @@ var Deployments = class {
     return listItems4(data);
   }
   async setEnv(deploymentId, vars, opts = {}) {
-    const body = stripUndefined11({ env: vars, environment: opts.environment });
+    const body2 = stripUndefined11({ env: vars, environment: opts.environment });
     const data = await this.http.post(
       `/deployments/${deploymentId}/env`,
-      body
+      body2
     );
     return listItems4(data);
   }
@@ -4023,12 +4296,12 @@ function workspaceId(params) {
   return params?.workspace_id ?? params?.workspaceId;
 }
 function ensureBody(params) {
-  const body = {};
+  const body2 = {};
   const id = params.workspace_id ?? params.workspaceId;
   const externalId = params.external_workspace_id ?? params.externalWorkspaceId;
-  if (id) body.workspace_id = id;
-  if (externalId) body.external_workspace_id = externalId;
-  return body;
+  if (id) body2.workspace_id = id;
+  if (externalId) body2.external_workspace_id = externalId;
+  return body2;
 }
 function unwrapHost(response) {
   const host = response.data ?? response.host;
@@ -4103,7 +4376,7 @@ var DockerDeploy = class {
 };
 
 // src/resources/email.ts
-function unwrap24(data) {
+function unwrap26(data) {
   if (data && typeof data === "object") {
     const d = data;
     for (const k of [
@@ -4155,12 +4428,12 @@ var EmailCampaigns = class {
     );
   }
   async create(attrs) {
-    return unwrap24(
+    return unwrap26(
       await this.http.post("/admin/email-campaigns", strip(attrs))
     );
   }
   async recipientCount(filters = {}) {
-    return unwrap24(
+    return unwrap26(
       await this.http.get(
         "/admin/email-campaigns/recipient-count",
         filters
@@ -4168,7 +4441,7 @@ var EmailCampaigns = class {
     );
   }
   async send(campaignId, opts = {}) {
-    return unwrap24(
+    return unwrap26(
       await this.http.post(
         `/admin/email-campaigns/${campaignId}/send`,
         strip(opts)
@@ -4176,7 +4449,7 @@ var EmailCampaigns = class {
     );
   }
   async cancel(campaignId) {
-    return unwrap24(
+    return unwrap26(
       await this.http.post(
         `/admin/email-campaigns/${campaignId}/cancel`
       )
@@ -4202,7 +4475,7 @@ var EmailTemplates = class {
     );
   }
   async create(key, attrs = {}) {
-    return unwrap24(
+    return unwrap26(
       await this.http.post("/admin/email-templates", {
         key,
         ...strip(attrs)
@@ -4210,7 +4483,7 @@ var EmailTemplates = class {
     );
   }
   async update(key, attrs) {
-    return unwrap24(
+    return unwrap26(
       await this.http.put(
         `/admin/email-templates/${key}`,
         strip(attrs)
@@ -4218,7 +4491,7 @@ var EmailTemplates = class {
     );
   }
   async reset(key) {
-    return unwrap24(
+    return unwrap26(
       await this.http.post(`/admin/email-templates/${key}/reset`)
     );
   }
@@ -4234,17 +4507,17 @@ var EmailInbox = class {
     );
   }
   async send(attrs) {
-    return unwrap24(
+    return unwrap26(
       await this.http.post("/admin/email-inbox/send", strip(attrs))
     );
   }
   async markRead(messageId) {
-    return unwrap24(
+    return unwrap26(
       await this.http.post(`/admin/email-inbox/${messageId}/read`)
     );
   }
   async archive(messageId) {
-    return unwrap24(
+    return unwrap26(
       await this.http.post(`/admin/email-inbox/${messageId}/archive`)
     );
   }
@@ -4273,18 +4546,18 @@ var Embeddings = class {
    * `{ object: "list", data: [...], model, usage }`.
    */
   async create(params) {
-    const body = Object.fromEntries(
+    const body2 = Object.fromEntries(
       Object.entries(params).filter(([, v]) => v !== void 0)
     );
     return this.http.post(
       "/intelligence/embeddings",
-      body
+      body2
     );
   }
 };
 
 // src/resources/external-keys.ts
-function unwrap25(payload) {
+function unwrap27(payload) {
   if (payload && typeof payload === "object") {
     const p = payload;
     for (const k of ["data", "external_keys", "items"]) {
@@ -4306,22 +4579,22 @@ var ExternalKeys = class {
   /** List configured external keys. */
   async list() {
     const data = await this.http.get("/external-keys");
-    const result = unwrap25(data);
+    const result = unwrap27(data);
     if (Array.isArray(result)) return result;
     return [];
   }
   /** Create / register an external provider key. */
   async create(params) {
-    const body = stripUndefined12(params);
-    const data = await this.http.post("/external-keys", body);
-    return unwrap25(data);
+    const body2 = stripUndefined12(params);
+    const data = await this.http.post("/external-keys", body2);
+    return unwrap27(data);
   }
   /** Resolve (preview) the stored key for a provider. */
   async resolve(provider) {
     const data = await this.http.get(
       `/external-keys/${provider}/resolve`
     );
-    return unwrap25(data);
+    return unwrap27(data);
   }
   /**
    * Delete the stored key for a provider.
@@ -4331,7 +4604,7 @@ var ExternalKeys = class {
     await this.http.delete(`/external-keys/${provider}`);
   }
 };
-function unwrap26(payload) {
+function unwrap28(payload) {
   if (payload && typeof payload === "object" && "data" in payload) {
     return payload.data;
   }
@@ -4373,7 +4646,7 @@ var FlatCustomDomains = class {
       redirectPolicy,
       ...rest
     } = params;
-    const body = stripUndefined13({
+    const body2 = stripUndefined13({
       ...rest,
       resource_type: resourceType ?? rest.resource_type,
       resource_id: resourceId ?? rest.resource_id,
@@ -4381,16 +4654,16 @@ var FlatCustomDomains = class {
     });
     const data = await this.http.request("/custom-domains", {
       method: "POST",
-      body,
+      body: body2,
       headers: { "Idempotency-Key": idempotencyKey5(ikey) }
     });
-    return unwrap26(data);
+    return unwrap28(data);
   }
   async delete(domainId) {
     await this.http.delete(`/custom-domains/${domainId}`);
   }
 };
-function unwrap27(payload) {
+function unwrap29(payload) {
   if (payload && typeof payload === "object" && "data" in payload) {
     return payload.data;
   }
@@ -4426,34 +4699,34 @@ var Functions = class {
   }
   async get(functionId) {
     const data = await this.http.get(`/functions/${functionId}`);
-    return unwrap27(data);
+    return unwrap29(data);
   }
   async create(params) {
     const { idempotencyKey: ikey, memoryMb, timeoutSec, ...rest } = params;
-    const body = stripUndefined14({
+    const body2 = stripUndefined14({
       ...rest,
       memory_mb: memoryMb ?? rest.memory_mb,
       timeout_sec: timeoutSec ?? rest.timeout_sec
     });
     const data = await this.http.request("/functions", {
       method: "POST",
-      body,
+      body: body2,
       headers: { "Idempotency-Key": idempotencyKey6(ikey) }
     });
-    return unwrap27(data);
+    return unwrap29(data);
   }
   async update(functionId, params) {
     const { memoryMb, timeoutSec, ...rest } = params;
-    const body = stripUndefined14({
+    const body2 = stripUndefined14({
       ...rest,
       memory_mb: memoryMb ?? rest.memory_mb,
       timeout_sec: timeoutSec ?? rest.timeout_sec
     });
     const data = await this.http.patch(
       `/functions/${functionId}`,
-      body
+      body2
     );
-    return unwrap27(data);
+    return unwrap29(data);
   }
   async delete(functionId) {
     await this.http.delete(`/functions/${functionId}`);
@@ -4474,7 +4747,7 @@ var Functions = class {
     return data ?? {};
   }
 };
-function unwrap28(payload) {
+function unwrap30(payload) {
   if (payload && typeof payload === "object" && "data" in payload) {
     return payload.data;
   }
@@ -4510,7 +4783,7 @@ var HealthChecks = class {
   }
   async get(checkId) {
     const data = await this.http.get(`/health-checks/${checkId}`);
-    return unwrap28(data);
+    return unwrap30(data);
   }
   async create(params) {
     const {
@@ -4520,7 +4793,7 @@ var HealthChecks = class {
       expectedStatus,
       ...rest
     } = params;
-    const body = stripUndefined15({
+    const body2 = stripUndefined15({
       ...rest,
       interval_sec: intervalSec ?? rest.interval_sec,
       timeout_sec: timeoutSec ?? rest.timeout_sec,
@@ -4528,14 +4801,14 @@ var HealthChecks = class {
     });
     const data = await this.http.request("/health-checks", {
       method: "POST",
-      body,
+      body: body2,
       headers: { "Idempotency-Key": idempotencyKey7(ikey) }
     });
-    return unwrap28(data);
+    return unwrap30(data);
   }
   async update(checkId, params) {
     const { intervalSec, timeoutSec, expectedStatus, ...rest } = params;
-    const body = stripUndefined15({
+    const body2 = stripUndefined15({
       ...rest,
       interval_sec: intervalSec ?? rest.interval_sec,
       timeout_sec: timeoutSec ?? rest.timeout_sec,
@@ -4543,9 +4816,9 @@ var HealthChecks = class {
     });
     const data = await this.http.patch(
       `/health-checks/${checkId}`,
-      body
+      body2
     );
-    return unwrap28(data);
+    return unwrap30(data);
   }
   async delete(checkId) {
     await this.http.delete(`/health-checks/${checkId}`);
@@ -4553,7 +4826,7 @@ var HealthChecks = class {
 };
 
 // src/resources/integrations.ts
-function unwrap29(payload) {
+function unwrap31(payload) {
   if (payload && typeof payload === "object") {
     const p = payload;
     for (const k of ["data", "integrations", "catalog", "items"]) {
@@ -4563,7 +4836,7 @@ function unwrap29(payload) {
   return payload;
 }
 function listItems8(payload) {
-  const result = unwrap29(payload);
+  const result = unwrap31(payload);
   if (Array.isArray(result)) return result;
   return [];
 }
@@ -4592,14 +4865,14 @@ var Integrations = class {
     const data = await this.http.get(
       `/integrations/${provider}/start`
     );
-    return unwrap29(data);
+    return unwrap31(data);
   }
   /** Force-refresh the access token for a provider. */
   async refresh(provider) {
     const data = await this.http.post(
       `/integrations/${provider}/refresh`
     );
-    return unwrap29(data);
+    return unwrap31(data);
   }
   /** Disconnect (revoke) an integration. */
   async disconnect(provider) {
@@ -4619,41 +4892,41 @@ var Integrations = class {
   // ── Test hooks ─────────────────────────────────────────────────────────────
   /** Send a test message to the connected Slack channel. */
   async slackSendTest(params = {}) {
-    const body = stripUndefined16(params);
+    const body2 = stripUndefined16(params);
     const data = await this.http.post(
       "/integrations/slack/send-test",
-      body
+      body2
     );
-    return unwrap29(data);
+    return unwrap31(data);
   }
   /** Send a test message to the connected Discord channel. */
   async discordSendTest(params = {}) {
-    const body = stripUndefined16(params);
+    const body2 = stripUndefined16(params);
     const data = await this.http.post(
       "/integrations/discord/send-test",
-      body
+      body2
     );
-    return unwrap29(data);
+    return unwrap31(data);
   }
   // ── Linear dedicated controller ────────────────────────────────────────────
   /** Begin Linear OAuth — Linear has provider-specific error shapes. */
   async linearStart() {
     const data = await this.http.get("/integrations/linear/start");
-    return unwrap29(data);
+    return unwrap31(data);
   }
   /** Create a Linear issue via the connected workspace. */
   async linearCreateIssue(params = {}) {
-    const body = stripUndefined16(params);
+    const body2 = stripUndefined16(params);
     const data = await this.http.post(
       "/integrations/linear/create-issue",
-      body
+      body2
     );
-    return unwrap29(data);
+    return unwrap31(data);
   }
 };
 
 // src/resources/mcp.ts
-function unwrap30(payload) {
+function unwrap32(payload) {
   if (payload && typeof payload === "object") {
     const p = payload;
     for (const k of ["data", "mcp", "result", "items"]) {
@@ -4674,12 +4947,12 @@ var Mcp = class {
   http;
   /** Send a JSON-RPC request to the MCP endpoint. */
   async dispatch(params = {}) {
-    const body = stripUndefined17(params);
+    const body2 = stripUndefined17(params);
     const data = await this.http.post(
       "/mcp",
-      Object.keys(body).length > 0 ? body : void 0
+      Object.keys(body2).length > 0 ? body2 : void 0
     );
-    return unwrap30(data);
+    return unwrap32(data);
   }
   /**
    * Open the MCP listen channel (GET).
@@ -4689,7 +4962,7 @@ var Mcp = class {
    */
   async listen() {
     const data = await this.http.get("/mcp");
-    return unwrap30(data);
+    return unwrap32(data);
   }
   /** Close (terminate) the MCP session. */
   async close() {
@@ -4698,7 +4971,7 @@ var Mcp = class {
 };
 
 // src/resources/models.ts
-function unwrap31(data) {
+function unwrap33(data) {
   if (Array.isArray(data)) return data;
   if (data && typeof data === "object") {
     const d = data;
@@ -4719,7 +4992,7 @@ var Models = class {
       Object.entries(filters).filter(([, v]) => v !== void 0)
     );
     const data = await this.http.get("/intelligence/models", query);
-    return unwrap31(data);
+    return unwrap33(data);
   }
   /**
    * Get a single model by id.
@@ -4742,30 +5015,43 @@ var Agents = class {
   base(hostId) {
     return `/opencomputers/hosts/${hostId}/agent`;
   }
+  unwrapSession(payload) {
+    const value = payload && typeof payload === "object" && "session" in payload ? payload.session : payload && typeof payload === "object" && "data" in payload ? payload.data : payload;
+    const session = value;
+    if (!session.id && session.session_id) {
+      return { ...session, id: session.session_id };
+    }
+    return session;
+  }
+  unwrapList(payload) {
+    if (payload && typeof payload === "object" && "sessions" in payload) {
+      return { data: payload.sessions };
+    }
+    if (Array.isArray(payload)) {
+      return { data: payload };
+    }
+    return payload;
+  }
   /**
    * Dispatch a new agent session on the host.
    */
   async dispatch(hostId, params) {
-    return this.http.post(
-      `${this.base(hostId)}/dispatch`,
-      params
-    );
+    const payload = await this.http.post(`${this.base(hostId)}/dispatch`, params);
+    return this.unwrapSession(payload);
   }
   /**
    * List all agent sessions for a host.
    */
   async list(hostId) {
-    return this.http.get(
-      `${this.base(hostId)}/sessions`
-    );
+    const payload = await this.http.get(`${this.base(hostId)}/sessions`);
+    return this.unwrapList(payload);
   }
   /**
    * Fetch the current state of a specific agent session.
    */
   async get(hostId, sessionId) {
-    return this.http.get(
-      `${this.base(hostId)}/sessions/${sessionId}`
-    );
+    const payload = await this.http.get(`${this.base(hostId)}/sessions/${sessionId}`);
+    return this.unwrapSession(payload);
   }
   /**
    * Stream live events from an agent session.
@@ -5362,7 +5648,7 @@ function requestBody(params) {
     config: authConfig(params)
   });
 }
-function unwrap32(payload) {
+function unwrap34(payload) {
   if (payload && typeof payload === "object") {
     const p = payload;
     for (const k of ["data", "project_auth", "config", "items"]) {
@@ -5387,13 +5673,13 @@ var ProjectAuth = class {
       "/project-auth/status",
       resourcePayload(params)
     );
-    return unwrap32(data);
+    return unwrap34(data);
   }
   /** Enable project auth. */
   async enable(params) {
-    const body = requestBody(params);
-    const data = await this.http.post("/project-auth/enable", body);
-    return unwrap32(data);
+    const body2 = requestBody(params);
+    const data = await this.http.post("/project-auth/enable", body2);
+    return unwrap34(data);
   }
   /** Disable project auth. */
   async disable(params) {
@@ -5401,18 +5687,18 @@ var ProjectAuth = class {
       "/project-auth/disable",
       resourcePayload(params)
     );
-    return unwrap32(data);
+    return unwrap34(data);
   }
   /** Update project-auth configuration. */
   async update(params) {
-    const body = requestBody(params);
-    const data = await this.http.patch("/project-auth/config", body);
-    return unwrap32(data);
+    const body2 = requestBody(params);
+    const data = await this.http.patch("/project-auth/config", body2);
+    return unwrap34(data);
   }
 };
 
 // src/resources/project-integrations.ts
-function unwrap33(payload) {
+function unwrap35(payload) {
   if (payload && typeof payload === "object") {
     const p = payload;
     for (const k of ["data", "project_integrations", "catalog", "items"]) {
@@ -5422,7 +5708,7 @@ function unwrap33(payload) {
   return payload;
 }
 function listItems9(payload) {
-  const result = unwrap33(payload);
+  const result = unwrap35(payload);
   if (Array.isArray(result)) return result;
   return [];
 }
@@ -5457,22 +5743,22 @@ var ProjectIntegrations = class {
     const data = await this.http.get(
       `/project-integrations/${integrationId}`
     );
-    return unwrap33(data);
+    return unwrap35(data);
   }
   /** Create a project integration. */
   async create(params) {
-    const body = stripUndefObj2(params);
-    const data = await this.http.post("/project-integrations", body);
-    return unwrap33(data);
+    const body2 = stripUndefObj2(params);
+    const data = await this.http.post("/project-integrations", body2);
+    return unwrap35(data);
   }
   /** Update a project integration. */
   async update(integrationId, params) {
-    const body = stripUndefObj2(params);
+    const body2 = stripUndefObj2(params);
     const data = await this.http.patch(
       `/project-integrations/${integrationId}`,
-      body
+      body2
     );
-    return unwrap33(data);
+    return unwrap35(data);
   }
   /** Delete a project integration. */
   async delete(integrationId) {
@@ -5481,7 +5767,7 @@ var ProjectIntegrations = class {
 };
 
 // src/resources/provider-defaults.ts
-function unwrap34(data) {
+function unwrap36(data) {
   if (data && typeof data === "object") {
     const d = data;
     for (const k of ["data", "defaults", "provider_defaults", "config"]) {
@@ -5497,7 +5783,7 @@ var ProviderDefaults = class {
   http;
   /** Get the current fleet-wide provider defaults. */
   async list() {
-    return unwrap34(await this.http.get("/admin/provider-defaults"));
+    return unwrap36(await this.http.get("/admin/provider-defaults"));
   }
   /** Return the defaults entry for a single provider, or {} if missing. */
   async get(provider) {
@@ -5510,29 +5796,29 @@ var ProviderDefaults = class {
   }
   /** Replace the fleet-wide defaults (PUT /admin/provider-defaults). */
   async update(opts) {
-    const body = Object.fromEntries(
+    const body2 = Object.fromEntries(
       Object.entries(opts).filter(([, v]) => v !== void 0)
     );
-    return unwrap34(
-      await this.http.put("/admin/provider-defaults", body)
+    return unwrap36(
+      await this.http.put("/admin/provider-defaults", body2)
     );
   }
   // ── Per-tenant overrides ────────────────────────────────────────────────
   async getTenant(tenantId) {
-    return unwrap34(
+    return unwrap36(
       await this.http.get(
         `/admin/tenants/${tenantId}/provider-config`
       )
     );
   }
   async setTenant(tenantId, opts) {
-    const body = Object.fromEntries(
+    const body2 = Object.fromEntries(
       Object.entries(opts).filter(([, v]) => v !== void 0)
     );
-    return unwrap34(
+    return unwrap36(
       await this.http.put(
         `/admin/tenants/${tenantId}/provider-config`,
-        body
+        body2
       )
     );
   }
@@ -5542,7 +5828,7 @@ var ProviderDefaults = class {
 };
 
 // src/resources/regions.ts
-function unwrap35(payload) {
+function unwrap37(payload) {
   if (payload && typeof payload === "object") {
     const p = payload;
     for (const k of [
@@ -5559,7 +5845,7 @@ function unwrap35(payload) {
   return payload;
 }
 function listItems10(payload) {
-  const result = unwrap35(payload);
+  const result = unwrap37(payload);
   if (Array.isArray(result)) return result;
   return [];
 }
@@ -5581,7 +5867,7 @@ var Regions = class {
   /** Get static compute pricing data. */
   async pricing() {
     const data = await this.http.get("/compute/pricing");
-    return unwrap35(data);
+    return unwrap37(data);
   }
   /** List community computer templates. */
   async listTemplates() {
@@ -5593,7 +5879,7 @@ var Regions = class {
     const data = await this.http.get(
       `/compute/templates/${templateId}`
     );
-    return unwrap35(data);
+    return unwrap37(data);
   }
 };
 
@@ -5611,12 +5897,32 @@ var AGENT_WORKSPACE_TIMEOUT_SEC = 86400;
 var AGENT_WORKSPACE_IDLE_TIMEOUT_SEC = 1800;
 var AGENT_WORKSPACE_SNAPSHOT_EXPIRATION_DAYS = 30;
 var AGENT_WORKSPACE_KEEP_LAST_SNAPSHOTS = 1;
-function unwrap36(payload) {
+function unwrap38(payload) {
   if (payload !== null && typeof payload === "object" && "data" in payload && payload.data !== void 0) {
     return payload.data;
   }
   return payload;
 }
+function normalizeExport(value) {
+  const normalized = {
+    ...value,
+    files: (value.files ?? []).map((file) => {
+      const normalized2 = { ...file };
+      const downloadUrl = file.downloadUrl ?? file.download_url;
+      if (downloadUrl !== void 0) normalized2.downloadUrl = downloadUrl;
+      return normalized2;
+    })
+  };
+  const sandboxId = value.sandboxId ?? value.sandbox_id;
+  const archiveDownloadUrl = value.archiveDownloadUrl ?? value.archive_download_url;
+  const createdAt = value.createdAt ?? value.created_at;
+  if (sandboxId !== void 0) normalized.sandboxId = sandboxId;
+  if (archiveDownloadUrl !== void 0) {
+    normalized.archiveDownloadUrl = archiveDownloadUrl;
+  }
+  if (createdAt !== void 0) normalized.createdAt = createdAt;
+  return normalized;
+}
 function listItems11(payload) {
   if (Array.isArray(payload)) return payload;
   if ("data" in payload && Array.isArray(payload.data)) return payload.data;
@@ -5625,7 +5931,7 @@ function listItems11(payload) {
   if ("items" in payload && Array.isArray(payload.items)) return payload.items;
   return [];
 }
-function createBody2(params = {}) {
+function createBody(params = {}) {
   const templateId = params.templateId ?? params.template_id ?? params.image ?? SANDBOX_TEMPLATE;
   const persistent = params.persistent;
   const snapshotExpirationSec = snapshotExpirationSeconds(params);
@@ -5660,6 +5966,8 @@ function createBody2(params = {}) {
     entrypoint: params.entrypoint,
     tags: params.tags,
     slug: params.slug,
+    agent_runtime_profile_id: params.agentRuntimeProfileId ?? params.agent_runtime_profile_id ?? params.agentProfileId ?? params.agent_profile_id,
+    skip_agent_runtime_profile: params.skipAgentRuntimeProfile ?? params.skip_agent_runtime_profile,
     external_workspace_id: params.externalWorkspaceId ?? params.external_workspace_id,
     external_user_id: params.externalUserId ?? params.external_user_id,
     external_project_id: params.externalProjectId ?? params.external_project_id
@@ -5812,11 +6120,11 @@ var SandboxTerminal = class {
   }
   sandbox;
   async create(params = {}) {
-    const body = Object.fromEntries(
+    const body2 = Object.fromEntries(
       Object.entries(params).filter(([, v]) => v !== void 0)
     );
-    const response = unwrap36(
-      await this.sandbox.http.post(`/sandboxes/${this.sandbox.id}/terminal`, body)
+    const response = unwrap38(
+      await this.sandbox.http.post(`/sandboxes/${this.sandbox.id}/terminal`, body2)
     );
     return response;
   }
@@ -5858,21 +6166,21 @@ var SandboxPreviews = class {
     return [];
   }
   async create(port, opts = {}) {
-    const body = {
+    const body2 = {
       port,
       ...Object.fromEntries(
         Object.entries(opts).filter(([, v]) => v !== void 0)
       )
     };
-    return unwrap36(
+    return unwrap38(
       await this.http.post(
         `/sandboxes/${this.sandbox.id}/previews`,
-        body
+        body2
       )
     );
   }
   async get(previewId) {
-    return unwrap36(
+    return unwrap38(
       await this.http.get(
         `/sandboxes/${this.sandbox.id}/previews/${previewId}`
       )
@@ -5885,7 +6193,7 @@ var SandboxPreviews = class {
   }
   /** Mint a share token for previewId. */
   async share(previewId, opts = {}) {
-    return unwrap36(
+    return unwrap38(
       await this.http.post(
         `/sandboxes/${this.sandbox.id}/previews/${previewId}/share`,
         { ttl_seconds: opts.ttl_seconds ?? opts.expires_in_sec ?? 3600 }
@@ -5954,7 +6262,7 @@ var SandboxTags = class {
   sandbox;
   /** Replace the full tag list with tags. */
   async set(tags) {
-    return unwrap36(
+    return unwrap38(
       await this.sandbox.http.patch(`/sandboxes/${this.sandbox.id}/tags`, { tags })
     );
   }
@@ -6022,14 +6330,14 @@ var Sandbox = class _Sandbox {
     return this.data.template_id ?? this.data.image_id ?? "";
   }
   async refresh() {
-    this.data = unwrap36(
+    this.data = unwrap38(
       await this.http.get(`/sandboxes/${this.id}`)
     );
     return this;
   }
   async runExec(command, options) {
     this.assertRunning("exec");
-    const response = unwrap36(
+    const response = unwrap38(
       await this.http.post(
         `/sandboxes/${this.id}/exec`,
         execBody(command, options)
@@ -6072,12 +6380,34 @@ var Sandbox = class _Sandbox {
       `/sandboxes/${this.id}/files/${path.replace(/^\/+/, "")}`
     );
   }
+  async createExport(params) {
+    const body2 = typeof params === "string" ? { path: params } : Array.isArray(params) ? { paths: params } : params;
+    const response = unwrap38(
+      await this.http.post(
+        `/sandboxes/${this.id}/exports`,
+        body2
+      )
+    );
+    return normalizeExport(response);
+  }
+  async downloadExport(paths, options = {}) {
+    const query = new URLSearchParams();
+    if (Array.isArray(paths)) {
+      for (const path of paths) query.append("paths[]", path);
+    } else {
+      query.set("path", paths);
+    }
+    if (options.filename) query.set("filename", options.filename);
+    return this.http.getBinary(
+      `/sandboxes/${this.id}/exports/download?${query.toString()}`
+    );
+  }
   async readFile(path) {
     return new TextDecoder().decode(await this.download(path));
   }
   async listFiles(path = "/workspace") {
     this.assertRunning("files.list");
-    const response = unwrap36(
+    const response = unwrap38(
       await this.http.get(
         `/sandboxes/${this.id}/files`,
         { path }
@@ -6087,7 +6417,7 @@ var Sandbox = class _Sandbox {
   }
   async statFile(path) {
     this.assertRunning("files.stat");
-    return unwrap36(
+    return unwrap38(
       await this.http.post(
         `/sandboxes/${this.id}/files/stat`,
         { path }
@@ -6096,7 +6426,7 @@ var Sandbox = class _Sandbox {
   }
   async expose(port) {
     this.assertRunning("expose");
-    const response = unwrap36(
+    const response = unwrap38(
       await this.http.post(
         `/sandboxes/${this.id}/expose`,
         port === void 0 ? {} : { port }
@@ -6106,7 +6436,7 @@ var Sandbox = class _Sandbox {
   }
   async startTemplate(options = {}) {
     this.assertRunning("startTemplate");
-    return unwrap36(
+    return unwrap38(
       await this.http.post(
         `/sandboxes/${this.id}/template/start`,
         options
@@ -6114,7 +6444,7 @@ var Sandbox = class _Sandbox {
     );
   }
   async getArtifacts() {
-    return unwrap36(
+    return unwrap38(
       await this.http.get(
         `/sandboxes/${this.id}/artifacts`
       )
@@ -6125,7 +6455,7 @@ var Sandbox = class _Sandbox {
       `/sandboxes/${this.id}/logs`,
       { lines }
     );
-    return unwrap36(response);
+    return unwrap38(response);
   }
   streamLogs() {
     return this.http.stream(
@@ -6134,7 +6464,7 @@ var Sandbox = class _Sandbox {
   }
   async createSnapshot(comment) {
     this.assertRunning("snapshots.create");
-    return unwrap36(
+    return unwrap38(
       await this.http.post(
         `/sandboxes/${this.id}/snapshots`,
         comment ? { comment } : {}
@@ -6142,14 +6472,14 @@ var Sandbox = class _Sandbox {
     );
   }
   async listSnapshots() {
-    return unwrap36(
+    return unwrap38(
       await this.http.get(
         `/sandboxes/${this.id}/snapshots`
       )
     );
   }
   async restoreSnapshot(snapshotId) {
-    const data = unwrap36(
+    const data = unwrap38(
       await this.http.post(
         `/sandboxes/${this.id}/restore/${snapshotId}`,
         {}
@@ -6166,13 +6496,13 @@ var Sandbox = class _Sandbox {
    */
   async fork(opts = {}) {
     this.assertRunning("fork");
-    const body = {};
-    if (opts.name !== void 0) body.name = opts.name;
-    if (opts.metadata !== void 0) body.metadata = opts.metadata;
-    const data = unwrap36(
+    const body2 = {};
+    if (opts.name !== void 0) body2.name = opts.name;
+    if (opts.metadata !== void 0) body2.metadata = opts.metadata;
+    const data = unwrap38(
       await this.http.post(
         `/sandboxes/${this.id}/fork`,
-        body
+        body2
       )
     );
     return new _Sandbox(this.http, data);
@@ -6191,7 +6521,7 @@ var Sandbox = class _Sandbox {
     if (keepLastSnapshots !== void 0) {
       metadata.keep_last_snapshots = keepLastSnapshots;
     }
-    const body = stripUndefined20({
+    const body2 = stripUndefined20({
       name: params.name,
       slug: params.slug,
       tags: params.tags,
@@ -6200,17 +6530,17 @@ var Sandbox = class _Sandbox {
       timeout_sec: params.timeout_sec ?? params.timeoutSec,
       idle_timeout_sec: params.idle_timeout_sec ?? params.idleTimeoutSec
     });
-    const data = unwrap36(
+    const data = unwrap38(
       await this.http.patch(
         `/sandboxes/${this.id}`,
-        body
+        body2
       )
     );
     this.data = data;
     return this;
   }
   async extend(timeoutSec) {
-    const data = unwrap36(
+    const data = unwrap38(
       await this.http.post(
         `/sandboxes/${this.id}/extend`,
         { timeout_sec: timeoutSec }
@@ -6233,7 +6563,7 @@ var Sandbox = class _Sandbox {
     return raw;
   }
   async pause() {
-    const data = unwrap36(
+    const data = unwrap38(
       await this.http.post(
         `/sandboxes/${this.id}/pause`,
         {}
@@ -6243,7 +6573,7 @@ var Sandbox = class _Sandbox {
     return this;
   }
   async resume() {
-    const data = unwrap36(
+    const data = unwrap38(
       await this.http.post(
         `/sandboxes/${this.id}/resume`,
         {}
@@ -6279,7 +6609,7 @@ var Sandbox = class _Sandbox {
     if (idempotencyKey11) {
       requestOptions.headers = { "Idempotency-Key": idempotencyKey11 };
     }
-    return unwrap36(
+    return unwrap38(
       await this.http.request(
         `/sandboxes/${this.id}/deploy`,
         requestOptions
@@ -6291,7 +6621,7 @@ var Sandbox = class _Sandbox {
   }
   /** Check readiness of the sandbox (GET /sandboxes/:id/readiness). */
   async readiness() {
-    return unwrap36(
+    return unwrap38(
       await this.http.get(
         `/sandboxes/${this.id}/readiness`
       )
@@ -6407,9 +6737,12 @@ var Sandbox = class _Sandbox {
         "SANDBOX_DESTROYED"
       );
     }
+    if (this.data.state === "paused" && this.data.persistent === true) {
+      return;
+    }
     if (this.data.state !== "running") {
       throw new MiosaError(
-        `Cannot ${operation} on sandbox ${this.id}: state is ${this.data.state}, expected running`,
+        `Cannot ${operation} on sandbox ${this.id}: state is ${this.data.state}, expected running or paused persistent`,
         409,
         "SANDBOX_NOT_RUNNING"
       );
@@ -6451,12 +6784,12 @@ var Sandboxes = class {
     const idempotencyKey11 = params.idempotencyKey ?? params.idempotency_key;
     const requestOptions = {
       method: "POST",
-      body: createBody2(params)
+      body: createBody(params)
     };
     if (idempotencyKey11) {
       requestOptions.headers = { "Idempotency-Key": idempotencyKey11 };
     }
-    const data = unwrap36(
+    const data = unwrap38(
       await this.http.request(
         "/sandboxes",
         requestOptions
@@ -6475,7 +6808,7 @@ var Sandboxes = class {
     return listItems11(data).map((item) => new Sandbox(this.http, item));
   }
   async get(id) {
-    const data = unwrap36(
+    const data = unwrap38(
       await this.http.get(`/sandboxes/${id}`)
     );
     return new Sandbox(this.http, data);
@@ -6484,7 +6817,7 @@ var Sandboxes = class {
     return this.get(id);
   }
   async getByName(name) {
-    const data = unwrap36(
+    const data = unwrap38(
       await this.http.get(
         `/sandboxes/by-name/${encodeURIComponent(name)}`
       )
@@ -6549,7 +6882,7 @@ var Sandboxes = class {
         metadata: params.metadata
       })
     );
-    return unwrap36(response);
+    return unwrap38(response);
   }
   async createTemplateBuild(templateId, params = {}) {
     const response = await this.http.post(
@@ -6559,19 +6892,19 @@ var Sandboxes = class {
         metadata: params.metadata
       })
     );
-    return unwrap36(response);
+    return unwrap38(response);
   }
   async listTemplateBuilds(templateId) {
     const response = await this.http.get(
       `/sandbox-templates/${templateId}/builds`
     );
-    return unwrap36(response);
+    return unwrap38(response);
   }
   async getTemplateBuild(buildId) {
     const response = await this.http.get(
       `/sandbox-template-builds/${buildId}`
     );
-    return unwrap36(response);
+    return unwrap38(response);
   }
 };
 function toBase642(bytes) {
@@ -6583,7 +6916,7 @@ function toBase642(bytes) {
   }
   return btoa(binary);
 }
-function unwrap37(payload) {
+function unwrap39(payload) {
   if (payload && typeof payload === "object" && "data" in payload) {
     return payload.data;
   }
@@ -6626,7 +6959,7 @@ var SandboxTemplates = class {
     const data = await this.http.get(
       `/sandbox-templates/${templateId}`
     );
-    return unwrap37(data);
+    return unwrap39(data);
   }
   async create(params) {
     const {
@@ -6636,17 +6969,17 @@ var SandboxTemplates = class {
       name,
       ...rest
     } = params;
-    const body = stripUndefined21({
+    const body2 = stripUndefined21({
       name,
       build_spec: buildSpec ?? build_spec,
       ...rest
     });
     const data = await this.http.request("/sandbox-templates", {
       method: "POST",
-      body,
+      body: body2,
       headers: { "Idempotency-Key": idempotencyKey8(ikey) }
     });
-    return unwrap37(data);
+    return unwrap39(data);
   }
   async buildSpecSchema() {
     const data = await this.http.get("/sandbox-templates/build-spec");
@@ -6670,21 +7003,21 @@ var SandboxTemplates = class {
   }
   async createBuild(templateId, params = {}) {
     const { idempotencyKey: ikey, ...rest } = params;
-    const body = stripUndefined21(rest);
+    const body2 = stripUndefined21(rest);
     const data = await this.http.request(
       `/sandbox-templates/${templateId}/builds`,
       {
         method: "POST",
-        body,
+        body: body2,
         headers: { "Idempotency-Key": idempotencyKey8(ikey) }
       }
     );
-    return unwrap37(data);
+    return unwrap39(data);
   }
 };
 
 // src/resources/settings.ts
-function unwrap38(payload) {
+function unwrap40(payload) {
   if (payload && typeof payload === "object") {
     const p = payload;
     for (const k of [
@@ -6700,7 +7033,7 @@ function unwrap38(payload) {
   return payload;
 }
 function listItems13(payload) {
-  const result = unwrap38(payload);
+  const result = unwrap40(payload);
   if (Array.isArray(result)) return result;
   return [];
 }
@@ -6717,46 +7050,46 @@ var Settings = class {
   /** Get the current tenant settings. */
   async get() {
     const data = await this.http.get("/settings");
-    return unwrap38(data);
+    return unwrap40(data);
   }
   /** Update tenant settings. */
   async update(params) {
-    const body = stripUndefined22(params);
-    const data = await this.http.put("/settings", body);
-    return unwrap38(data);
+    const body2 = stripUndefined22(params);
+    const data = await this.http.put("/settings", body2);
+    return unwrap40(data);
   }
   // ── Branding ──────────────────────────────────────────────────────────────
   /** Get tenant branding (logo, colors, custom wordmark). */
   async getBranding() {
     const data = await this.http.get("/settings/branding");
-    return unwrap38(data);
+    return unwrap40(data);
   }
   /** Update tenant branding. */
   async updateBranding(params) {
-    const body = stripUndefined22(params);
-    const data = await this.http.put("/settings/branding", body);
-    return unwrap38(data);
+    const body2 = stripUndefined22(params);
+    const data = await this.http.put("/settings/branding", body2);
+    return unwrap40(data);
   }
   // ── Read-only reference data ───────────────────────────────────────────────
   /** Get tenant-scoped compute pricing. */
   async computePricing() {
     const data = await this.http.get("/settings/compute-pricing");
-    return unwrap38(data);
+    return unwrap40(data);
   }
   /** Get tenant-scoped GPU pricing. */
   async gpuPricing() {
     const data = await this.http.get("/settings/gpu-pricing");
-    return unwrap38(data);
+    return unwrap40(data);
   }
   /** List models available to this tenant. */
   async availableModels() {
     const data = await this.http.get("/settings/available-models");
-    return unwrap38(data);
+    return unwrap40(data);
   }
   /** List regions enabled for this tenant. */
   async regions() {
     const data = await this.http.get("/settings/regions");
-    return unwrap38(data);
+    return unwrap40(data);
   }
   // ── BYOK provider keys ────────────────────────────────────────────────────
   /** List tenant-level BYOK provider keys (Anthropic, OpenAI, etc.). */
@@ -6766,12 +7099,12 @@ var Settings = class {
   }
   /** Create or update a BYOK provider key. */
   async upsertProviderKey(provider, params) {
-    const body = stripUndefined22(params);
+    const body2 = stripUndefined22(params);
     const data = await this.http.put(
       `/settings/provider-keys/${provider}`,
-      body
+      body2
     );
-    return unwrap38(data);
+    return unwrap40(data);
   }
   /** Delete a BYOK provider key. */
   async deleteProviderKey(provider) {
@@ -6780,7 +7113,7 @@ var Settings = class {
 };
 
 // src/resources/snapshots-standalone.ts
-function unwrap39(data) {
+function unwrap41(data) {
   if (data && typeof data === "object") {
     const d = data;
     for (const k of ["data", "snapshots", "items"]) {
@@ -6811,14 +7144,14 @@ var SnapshotsStandalone = class {
     return unwrapList12(await this.http.get("/admin/snapshots", query));
   }
   async get(snapshotId) {
-    return unwrap39(
+    return unwrap41(
       await this.http.get(`/admin/snapshots/${snapshotId}`)
     );
   }
 };
 
 // src/resources/storage.ts
-function unwrap40(payload) {
+function unwrap42(payload) {
   if (payload && typeof payload === "object" && "data" in payload) {
     return payload.data;
   }
@@ -6851,17 +7184,17 @@ var Storage = class {
   }
   async createBucket(params) {
     const { name, public: isPublic, visibility, ...rest } = params;
-    const body = stripUndefined23({
+    const body2 = stripUndefined23({
       name,
       visibility: visibility ?? (isPublic === void 0 ? void 0 : isPublic ? "public" : "private"),
       ...rest
     });
-    const data = await this.http.post("/storage/buckets", body);
-    return unwrap40(data);
+    const data = await this.http.post("/storage/buckets", body2);
+    return unwrap42(data);
   }
   async getBucket(bucketId) {
     const data = await this.http.get(`/storage/buckets/${bucketId}`);
-    return unwrap40(data);
+    return unwrap42(data);
   }
   async deleteBucket(bucketId) {
     await this.http.delete(`/storage/buckets/${bucketId}`);
@@ -6902,16 +7235,16 @@ var Storage = class {
   // ── Presigned URLs ─────────────────────────────────────────────────────────
   async presign(bucketId, params) {
     const operationMethod = params.operation === "put" ? "PUT" : params.operation === "get" ? "GET" : void 0;
-    const body = stripUndefined23({
+    const body2 = stripUndefined23({
       key: params.key,
       method: params.method ?? operationMethod ?? "GET",
       expires_in: params.expiresIn ?? params.expires_in ?? params.expiresInSec ?? params.expires_in_sec ?? 3600
     });
     const data = await this.http.post(
       `/storage/buckets/${bucketId}/presign`,
-      body
+      body2
     );
-    return unwrap40(data);
+    return unwrap42(data);
   }
 };
 
@@ -7001,29 +7334,105 @@ var OrgInvites = class {
 };
 
 // src/resources/tenant.ts
-function unwrap41(payload) {
+function unwrap43(payload) {
   if (payload && typeof payload === "object") {
     const p = payload;
-    for (const k of ["data", "tenant", "items"]) {
+    for (const k of ["data", "tenant", "branding", "items"]) {
       if (k in p) return p[k];
     }
   }
   return payload;
 }
+function stripUndefined24(input) {
+  return Object.fromEntries(
+    Object.entries(input).filter(([, v]) => v !== void 0)
+  );
+}
+var PreviewDomain = class {
+  constructor(http) {
+    this.http = http;
+  }
+  http;
+  /** Get the tenant's white-label preview domain settings. */
+  async get() {
+    const data = await this.http.get("/tenant/preview-domain");
+    return unwrap43(data);
+  }
+  /** Set the tenant's white-label preview domain. */
+  async set(domain) {
+    const data = await this.http.put("/tenant/preview-domain", {
+      preview_domain: domain
+    });
+    return unwrap43(data);
+  }
+  /** Re-run DNS verification for the configured preview domain. */
+  async verify() {
+    const data = await this.http.post(
+      "/tenant/preview-domain/verify",
+      {}
+    );
+    return unwrap43(data);
+  }
+  /** Remove the tenant's custom preview domain. */
+  async delete() {
+    await this.http.delete("/tenant/preview-domain");
+  }
+};
+var Branding = class {
+  constructor(http) {
+    this.http = http;
+  }
+  http;
+  /** Get tenant branding used by white-label hosted surfaces. */
+  async get() {
+    const data = await this.http.get("/tenant/branding");
+    return unwrap43(data);
+  }
+  /** Update tenant branding used by white-label hosted surfaces. */
+  async set(params) {
+    const data = await this.http.put("/tenant/branding", {
+      branding: stripUndefined24(params)
+    });
+    return unwrap43(data);
+  }
+  /** Reset tenant branding to platform defaults. */
+  async delete() {
+    await this.http.delete("/tenant/branding");
+  }
+};
 var Tenant = class {
   constructor(http) {
     this.http = http;
+    this.preview_domain = new PreviewDomain(http);
+    this.previewDomain = this.preview_domain;
+    this.branding = new Branding(http);
   }
   http;
+  preview_domain;
+  branding;
+  /** camelCase alias for SDK consumers that avoid snake_case properties. */
+  previewDomain;
   /** Get the current tenant's plan, limits, and live usage counters. */
   async current() {
     const data = await this.http.get("/tenant/plan");
-    return unwrap41(data);
+    return unwrap43(data);
+  }
+  /** Convenience alias for `tenant.branding.get()`. */
+  async getBranding() {
+    return this.branding.get();
+  }
+  /** Convenience alias for `tenant.branding.set(...)`. */
+  async setBranding(params) {
+    return this.branding.set(params);
+  }
+  /** Convenience alias for `tenant.branding.delete()`. */
+  async deleteBranding() {
+    await this.branding.delete();
   }
 };
 
 // src/resources/usage.ts
-function unwrap42(payload) {
+function unwrap44(payload) {
   if (payload && typeof payload === "object") {
     const p = payload;
     for (const k of ["data", "usage", "sessions", "summary", "items"]) {
@@ -7032,7 +7441,7 @@ function unwrap42(payload) {
   }
   return payload;
 }
-function stripUndefined24(input) {
+function stripUndefined25(input) {
   return Object.fromEntries(
     Object.entries(input).filter(([, v]) => v !== void 0)
   );
@@ -7045,24 +7454,24 @@ var Usage = class {
   /** Get the current period usage summary. */
   async current() {
     const data = await this.http.get("/usage/summary");
-    return unwrap42(data);
+    return unwrap44(data);
   }
   /** List per-session metering events. */
   async sessions(params = {}) {
-    const query = stripUndefined24(params);
+    const query = stripUndefined25(params);
     const data = await this.http.get("/usage/sessions", query);
-    const result = unwrap42(data);
+    const result = unwrap44(data);
     if (Array.isArray(result)) return result;
     return [];
   }
   /** Get a usage report for a period. */
   async report(params = {}) {
-    const query = stripUndefined24(params);
+    const query = stripUndefined25(params);
     const data = await this.http.get("/usage/summary", query);
-    return unwrap42(data);
+    return unwrap44(data);
   }
 };
-function unwrap43(payload) {
+function unwrap45(payload) {
   if (payload && typeof payload === "object" && "data" in payload) {
     return payload.data;
   }
@@ -7078,7 +7487,7 @@ function listItems15(payload, candidateKeys = ["data", "volumes", "items"]) {
   }
   return [];
 }
-function stripUndefined25(input) {
+function stripUndefined26(input) {
   return Object.fromEntries(
     Object.entries(input).filter(([, v]) => v !== void 0)
   );
@@ -7092,32 +7501,32 @@ var Volumes = class {
   }
   http;
   async list(params = {}) {
-    const query = stripUndefined25({ ...params });
+    const query = stripUndefined26({ ...params });
     const data = await this.http.get("/volumes", query);
     return listItems15(data);
   }
   async get(volumeId) {
     const data = await this.http.get(`/volumes/${volumeId}`);
-    return unwrap43(data);
+    return unwrap45(data);
   }
   async create(params) {
     const { idempotencyKey: ikey, sizeGb, ...rest } = params;
-    const body = stripUndefined25({
+    const body2 = stripUndefined26({
       ...rest,
       size_gb: sizeGb ?? rest.size_gb
     });
     const data = await this.http.request("/volumes", {
       method: "POST",
-      body,
+      body: body2,
       headers: { "Idempotency-Key": idempotencyKey9(ikey) }
     });
-    return unwrap43(data);
+    return unwrap45(data);
   }
   async delete(volumeId) {
     await this.http.delete(`/volumes/${volumeId}`);
   }
 };
-function unwrap44(payload) {
+function unwrap46(payload) {
   if (payload && typeof payload === "object" && "data" in payload) {
     return payload.data;
   }
@@ -7133,7 +7542,7 @@ function listItems16(payload, candidateKeys = ["data", "webhooks", "deliveries",
   }
   return [];
 }
-function stripUndefined26(input) {
+function stripUndefined27(input) {
   return Object.fromEntries(
     Object.entries(input).filter(([, v]) => v !== void 0)
   );
@@ -7141,34 +7550,65 @@ function stripUndefined26(input) {
 function idempotencyKey10(key) {
   return key ?? randomUUID();
 }
+function bodyBuffer(body2) {
+  if (Buffer.isBuffer(body2)) return body2;
+  if (typeof body2 === "string") return Buffer.from(body2, "utf8");
+  return Buffer.from(body2);
+}
+function verifySignature(body2, header, secret, toleranceSec = 300) {
+  const parts = Object.fromEntries(
+    header.split(",").map((chunk) => chunk.split("=", 2)).filter(([key, value]) => key && value)
+  );
+  const timestamp = parts.t;
+  const received = parts.v1;
+  if (!timestamp || !received || !secret) return false;
+  const unixSeconds = Number(timestamp);
+  if (!Number.isFinite(unixSeconds)) return false;
+  const ageSec = Math.abs(Date.now() / 1e3 - unixSeconds);
+  if (ageSec > toleranceSec) {
+    throw new Error("webhook timestamp too old");
+  }
+  const rawBody = bodyBuffer(body2);
+  const signed = Buffer.concat([Buffer.from(`${timestamp}.`), rawBody]);
+  const expected = createHmac("sha256", secret).update(signed).digest("hex");
+  try {
+    return timingSafeEqual(
+      Buffer.from(expected, "utf8"),
+      Buffer.from(received, "utf8")
+    );
+  } catch {
+    return false;
+  }
+}
 var Webhooks = class {
   constructor(http) {
     this.http = http;
   }
   http;
+  static verifySignature = verifySignature;
   async list(params = {}) {
-    const query = stripUndefined26({ ...params });
+    const query = stripUndefined27({ ...params });
     const data = await this.http.get("/webhooks", query);
     return listItems16(data);
   }
   async get(webhookId) {
     const data = await this.http.get(`/webhooks/${webhookId}`);
-    return unwrap44(data);
+    return unwrap46(data);
   }
   async create(params) {
     const { idempotencyKey: ikey, ...rest } = params;
-    const body = stripUndefined26(rest);
+    const body2 = stripUndefined27(rest);
     const data = await this.http.request("/webhooks", {
       method: "POST",
-      body,
+      body: body2,
       headers: { "Idempotency-Key": idempotencyKey10(ikey) }
     });
-    return unwrap44(data);
+    return unwrap46(data);
   }
   async update(webhookId, params) {
-    const body = stripUndefined26(params);
-    const data = await this.http.patch(`/webhooks/${webhookId}`, body);
-    return unwrap44(data);
+    const body2 = stripUndefined27(params);
+    const data = await this.http.patch(`/webhooks/${webhookId}`, body2);
+    return unwrap46(data);
   }
   async delete(webhookId) {
     await this.http.delete(`/webhooks/${webhookId}`);
@@ -7181,7 +7621,7 @@ var Webhooks = class {
         headers: { "Idempotency-Key": idempotencyKey10(opts.idempotencyKey) }
       }
     );
-    return unwrap44(data);
+    return unwrap46(data);
   }
   async deliveries(webhookId) {
     const data = await this.http.get(
@@ -7352,8 +7792,6 @@ var DEFAULT_MAX_RETRIES2 = 3;
 var Miosa = class {
   /** Per-workspace user roster — list, add, update role, remove. */
   workspaceMembers;
-  /** Target-agnostic prompt dispatch to sandboxes/computers with durable records. */
-  agentRuns;
   /**
    * Workspace invite flow — create invite, list, revoke, preview, accept.
    * Sending to an email already in the org adds the user directly.
@@ -7390,6 +7828,10 @@ var Miosa = class {
   externalKeys;
   /** Model Context Protocol — JSON-RPC dispatch + streaming channel. */
   mcp;
+  /** Agent Runs — prompt dispatch into sandbox targets. */
+  agentRuns;
+  /** Agent runtime profiles — tenant/workspace defaults for sandbox/computer agents. */
+  agentRuntimeProfiles;
   /** Computer management — create, list, get, delete. */
   computers;
   /** Sandboxes — native code-execution environments under `/sandboxes`. */
@@ -7476,7 +7918,6 @@ var Miosa = class {
       timeout: config.timeout ?? DEFAULT_TIMEOUT2,
       maxRetries: config.maxRetries ?? DEFAULT_MAX_RETRIES2
     });
-    this.agentRuns = new AgentRuns(this.http);
     this.workspaceMembers = new WorkspaceMembers(this.http);
     this.workspaceInvites = new WorkspaceInvites(this.http);
     this.orgInvites = new OrgInvites(this.http);
@@ -7493,6 +7934,8 @@ var Miosa = class {
     this.projectAuth = new ProjectAuth(this.http);
     this.externalKeys = new ExternalKeys(this.http);
     this.mcp = new Mcp(this.http);
+    this.agentRuns = new AgentRuns(this.http);
+    this.agentRuntimeProfiles = new AgentRuntimeProfiles(this.http);
     this.computers = new Computers(this.http);
     this.sandboxes = new Sandboxes(this.http);
     this.deployments = new Deployments(this.http);
@@ -7614,8 +8057,8 @@ var AppAuth = class {
       }
     });
     if (!resp.ok) {
-      const body = await resp.text();
-      throw new Error(`AppAuth me failed (${resp.status}): ${body}`);
+      const body2 = await resp.text();
+      throw new Error(`AppAuth me failed (${resp.status}): ${body2}`);
     }
     return unwrapSession(await resp.json());
   }
@@ -7667,12 +8110,12 @@ var AppAuth = class {
     return payload;
   }
   // ── Private ──────────────────────────────────────────────────────────────────
-  async _post(action, body) {
+  async _post(action, body2) {
     const url = `${this.baseUrl}/app-auth/${this.resourceType}/${this.resourceId}/${action}`;
     const resp = await fetch(url, {
       method: "POST",
       headers: { "Content-Type": "application/json" },
-      body: JSON.stringify(body)
+      body: JSON.stringify(body2)
     });
     if (!resp.ok) {
       const text = await resp.text();
@@ -7682,6 +8125,6 @@ var AppAuth = class {
   }
 };
 
-export { Admin, AgentRuns, Analytics, ApiKeys, AppAuth, AuditLog, AuthError, Benchmarks, BuilderSessions, Channels, Checkpoints, CommandCenter, Community, Completions, Computer, ComputerAudit, ComputerAutoStop, ComputerEnv, ComputerInbox, ComputerLogs, ComputerNetwork, ComputerOsa, ComputerPorts, ComputerSecrets, ComputerTerminal, ComputerVolumes, Computers, Credits, CronJobs, Dashboard, Databases, DeploymentDomains, DeploymentReleases, DeploymentRuntimeInstances, DeploymentVersions, Deployments, Desktop, DockerDeploy, EgressAudit, EgressNetwork, EgressSecrets, Email, EmailCampaigns, EmailInbox, EmailTemplates, Embeddings, Exec, ExternalKeys, Files, FlatCustomDomains, Functions, HealthChecks, InsufficientCreditsError, Integrations, Mcp, Miosa, MiosaError, Models, NetworkError, NetworkPolicy, NotFoundError, OAuthFlow, OpenComputers, OrgInvites, ProjectAuth, ProjectIntegrations, ProviderDefaults, RateLimitError, Regions, SANDBOX_TEMPLATE, Sandbox, SandboxArtifacts, SandboxAudit, SandboxCommands, SandboxEnv, SandboxEvents, SandboxFiles, SandboxNetwork, SandboxPreview, SandboxPreviews, SandboxSecrets, SandboxTags, SandboxTemplates, SandboxTerminal, Sandboxes, ScopedFs, Settings, SnapshotsStandalone, Storage, Tenant, TimeoutError, Usage, ValidationError, Volumes, Webhooks, WorkspaceInvites, WorkspaceMembers };
+export { Admin, AgentRuns, AgentRuntimeProfiles, Analytics, ApiKeys, AppAuth, AuditLog, AuthError, Benchmarks, BuilderSessions, Channels, Checkpoints, CommandCenter, Community, Completions, Computer, ComputerAudit, ComputerAutoStop, ComputerEnv, ComputerInbox, ComputerLogs, ComputerNetwork, ComputerOsa, ComputerPorts, ComputerSecrets, ComputerTerminal, ComputerVolumes, Computers, Credits, CronJobs, Dashboard, Databases, DeploymentDomains, DeploymentReleases, DeploymentRuntimeInstances, DeploymentVersions, Deployments, Desktop, DockerDeploy, EgressAudit, EgressNetwork, EgressSecrets, Email, EmailCampaigns, EmailInbox, EmailTemplates, Embeddings, Exec, ExternalKeys, Files, FlatCustomDomains, Functions, HealthChecks, InsufficientCreditsError, Integrations, Mcp, Miosa, MiosaError, Models, NetworkError, NetworkPolicy, NotFoundError, OAuthFlow, OpenComputers, OrgInvites, ProjectAuth, ProjectIntegrations, ProviderDefaults, RateLimitError, Regions, SANDBOX_TEMPLATE, Sandbox, SandboxArtifacts, SandboxAudit, SandboxCommands, SandboxEnv, SandboxEvents, SandboxFiles, SandboxNetwork, SandboxPreview, SandboxPreviews, SandboxSecrets, SandboxTags, SandboxTemplates, SandboxTerminal, Sandboxes, ScopedFs, Settings, SnapshotsStandalone, Storage, Tenant, TimeoutError, Usage, ValidationError, Volumes, Webhooks, WorkspaceInvites, WorkspaceMembers, verifySignature };
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map