feat(agent): publish orchestration CLI primitives

* fix(sandbox): expiry warning, destroyed-not-paused guidance, surface boot last_error, 1h examples

Addresses teammate bug report: warn when sandbox <5min remaining; clearer SANDBOX_NOT_RUNNING/destroyed messaging; surface metadata.last_error.reason on create --wait failures; recommend --timeout 1h for app-building.

* feat(cli): add miosa auth project-auth enable/disable/status commands

Adds `miosa auth project-auth status|enable|disable` subcommands so
developers can manage built-in per-resource auth from the CLI.
Mirrors the POST /api/v1/project-auth/enable|disable and GET
/api/v1/project-auth/status REST endpoints.

* feat(agent): expose runtime orchestration commands

* feat(agent): support async group dispatch

* chore(release): bump cli to 1.0.76

* feat(agent): add group event CLI

* feat(agent): publish orchestration CLI primitives

Author: robertohluna

package-lock.json

@@ -1,6 +1,6 @@
 {
   "name": "@miosa/cli",
-  "version": "1.0.67",
+  "version": "1.0.78",
   "description": "MIOSA platform CLI — projects, sandboxes, deploys, databases, more",
   "type": "module",
   "bin": {

package.json

@@ -167,6 +167,10 @@ const commandModules = [
   "../commands/computers.js",
   "../commands/snapshot.js",
   "../commands/sandbox.js",
+  "../commands/agent-run-groups.js",
+  "../commands/agent-runs.js",
+  "../commands/agent-runtime-profiles.js",
+  "../commands/runtime-env.js",
   "../commands/connect.js",
   "../commands/ssh.js",
   "../commands/exec.js",

pnpm-lock.yaml

@@ -138,6 +138,49 @@ export class MiosaClient {
     return this.get<T>(path);
   }
 
+  /** Generic binary GET for file/artifact download routes. */
+  async apiGetBinary(path: string): Promise<Buffer> {
+    let res: Dispatcher.ResponseData;
+    try {
+      res = await request(this.url(path), {
+        method: "GET",
+        headers: this.headers(),
+      });
+    } catch (err) {
+      throw new NetworkError(
+        `Network error: ${err instanceof Error ? err.message : String(err)}`,
+        "Check your connection and endpoint: miosa status",
+      );
+    }
+    if (res.statusCode >= 400) return this.parseError(res, "GET", path);
+    const chunks: Buffer[] = [];
+    for await (const chunk of res.body) {
+      chunks.push(Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk));
+    }
+    return Buffer.concat(chunks);
+  }
+
+  /** Generic SSE GET for command groups that stream API events. */
+  async apiStream(path: string): Promise<Dispatcher.ResponseData> {
+    let res: Dispatcher.ResponseData;
+    try {
+      res = await request(this.url(path), {
+        method: "GET",
+        headers: {
+          ...this.headers(),
+          Accept: "text/event-stream",
+        },
+      });
+    } catch (err) {
+      throw new NetworkError(
+        `Network error: ${err instanceof Error ? err.message : String(err)}`,
+        "Check your connection and endpoint: miosa status",
+      );
+    }
+    if (res.statusCode >= 400) return this.parseError(res, "GET", path);
+    return res;
+  }
+
   /** Generic POST for command groups that map directly to stable API routes. */
   async apiPost<T>(path: string, body?: unknown): Promise<T> {
     return this.post<T>(path, body);