@burdenoff/mcp-libs 2026.629.1 → 2026.703.2

package/dist/modules/vibecontrols/index.js

@@ -1,4 +1,4 @@
-import { LIST_AGENTS, GET_AGENT, CREATE_AGENT, UPDATE_AGENT, DELETE_AGENT, PROBE_AGENT_CONNECTION, AGENT_HEALTH_PROBES, AGENT_PLUGINS, INSTALL_AGENT_PLUGIN, REMOVE_AGENT_PLUGIN, LIST_VIBES, GET_VIBE, CREATE_VIBE, UPDATE_VIBE, DELETE_VIBE, UPDATE_VIBE_STATUS, ARCHIVE_VIBE, RESTORE_VIBE, VIBE_HIERARCHY, SEARCH_VIBES, MOVE_VIBE, UPDATE_VIBE_GIT, LIST_SESSIONS, GET_SESSION, CREATE_SESSION, START_SESSION, STOP_SESSION, RESTART_SESSION, TERMINATE_SESSION, SEND_SESSION_INPUT, START_SESSION_TERMINAL, SESSION_OUTPUT, ACTIVE_SESSIONS, CHECK_SESSION_HEALTH, BULK_RESTART_SESSIONS, BULK_STOP_SESSIONS, BULK_TERMINATE_SESSIONS, UPDATE_SESSION, UPDATE_SESSION_STATUS, DELETE_SESSION, KILL_SESSION, STOP_SESSION_TERMINAL, RESTART_SESSION_TERMINAL, START_TARGET_TERMINAL, STOP_TARGET_TERMINAL, EXPORT_SESSIONS, LIST_NOTES, GET_NOTE, CREATE_NOTE, UPDATE_NOTE, DELETE_NOTE, SEARCH_NOTES, PIN_NOTE, UNPIN_NOTE, LIST_CONFIGURATIONS, GET_CONFIGURATION, SET_CONFIGURATION, DELETE_CONFIGURATION, CONFIGURATIONS_BY_SCOPE, SECURITY_PROVIDERS_Q, SET_SECURITY_PROVIDER_M, MY_SECURITY_SCANS_Q, ALL_SECURITY_SCANS_Q, SECURITY_SCAN_Q, RUN_SECURITY_SCAN_M, CANCEL_SECURITY_SCAN_M, SECURITY_FINDINGS_Q, UPDATE_SECURITY_FINDING_STATUS_M, SECURITY_POLICY_DECISION_Q, SECURITY_STATUS_Q, REPOSITORY_SECURITY_CONFIG_Q, UPDATE_REPOSITORY_SECURITY_CONFIG_M, CREATE_SECURITY_EXCEPTION_M, REVOKE_SECURITY_EXCEPTION_M, PRESIGN_SECURITY_EVIDENCE_M, PUSH_SECURITY_SCAN_RUN_M, GET_CI_STATUS_Q, REFRESH_CI_STATUS_M, GET_CI_PIPELINE_RUNS_Q, GET_CI_PIPELINE_DETAILS_Q, GET_REPO_STATS_Q, REFRESH_REPO_STATS_M, LIST_GITOPS_PROVIDERS_Q, GET_GITOPS_PROVIDER_Q, CREATE_GITOPS_PROVIDER_M, UPDATE_GITOPS_PROVIDER_M, DELETE_GITOPS_PROVIDER_M, MY_SETTINGS_Q, MY_SETTINGS_BY_CATEGORY_Q, RESET_SETTINGS_M, UPDATE_PREFERENCES_M, UPDATE_NOTIFICATION_PREFERENCES_M, UPDATE_WORKSPACE_DEFAULTS_M, LIST_SETTINGS_SECRETS_Q, SET_SETTINGS_SECRET_M, DELETE_SETTINGS_SECRET_M, RESOLVE_INTEGRATION_TOKEN_M, LIST_WEBHOOKS, GET_WEBHOOK, CREATE_WEBHOOK, UPDATE_WEBHOOK, DELETE_WEBHOOK, TEST_WEBHOOK, TRIGGER_WEBHOOK, GET_UI_SESSION, SAVE_UI_SESSION, CLEAR_UI_SESSION, LIST_AI_TOOL_EVENTS, CREATE_AI_TOOL_EVENT, RECENT_AI_TOOL_EVENTS, LIST_TARGETS, GET_TARGET, CREATE_TARGET, UPDATE_TARGET, DELETE_TARGET, TEST_TARGET, IMPORT_TARGETS_FROM_CONFIG, SCAN_SSH_CONFIG, INSTALL_AGENT_ON_TARGET, LIST_VIBEDECKS, GET_VIBEDECK, CREATE_VIBEDECK, UPDATE_VIBEDECK, DELETE_VIBEDECK, DUPLICATE_VIBEDECK, SET_DEFAULT_VIBEDECK, LIST_VIBEDECK_BUTTONS, CREATE_VIBEDECK_BUTTON, UPDATE_VIBEDECK_BUTTON, DELETE_VIBEDECK_BUTTON, EXECUTE_VIBEDECK_BUTTON, LIST_DOCS_SITES, GET_DOCS_SITE, CREATE_DOCS_SITE, UPDATE_DOCS_SITE, DELETE_DOCS_SITE, LIST_DOCS_PAGES, GET_DOCS_PAGE, CREATE_DOCS_PAGE, UPDATE_DOCS_PAGE, DELETE_DOCS_PAGE, COMPILE_DOCS_SITE, PUBLISH_DOCS_REVISION, ROLLBACK_DOCS_REVISION, SHARE_SESSION, CREATE_SESSION_SHARE_LINK, REVOKE_SESSION_SHARE, REVOKE_SESSION_SHARE_LINK, SESSION_SHARES, SESSION_SHARE_LINKS, SESSION_COLLABORATORS, SESSIONS_SHARED_WITH_ME, UPDATE_SESSION_SHARE, JOIN_SHARED_SESSION, LEAVE_SHARED_SESSION, REQUEST_SESSION_CONTROL, RELEASE_SESSION_CONTROL, TRANSFER_SESSION_CONTROL, LIST_AUDIT_LOGS, GET_AUDIT_LOG, AUDIT_LOG_STATS, EXPORT_AUDIT_LOGS, DELETE_AUDIT_LOG, LIST_ACTIONS, GET_ACTION, CREATE_ACTION, UPDATE_ACTION, DELETE_ACTION, EXECUTE_ACTION, LIST_ACTION_EXECUTIONS, DUPLICATE_ACTION, INSTALL_ACTION_FROM_STORE, CANCEL_ACTION_EXECUTION, CREATE_SCHEDULED_JOB, DELETE_SCHEDULED_JOB, LIST_SCHEDULED_JOBS, LIST_AI_PROMPTS, GET_AI_PROMPT, CREATE_AI_PROMPT, UPDATE_AI_PROMPT, DELETE_AI_PROMPT, DUPLICATE_AI_PROMPT, RENDER_AI_PROMPT, RECORD_AI_PROMPT_USAGE, LIST_VIBE_DECK_SHARE_LINKS, CREATE_VIBE_DECK_SHARE_LINK, UPDATE_VIBE_DECK_SHARE_LINK, REVOKE_VIBE_DECK_SHARE_LINK, VALIDATE_VIBE_DECK_SHARE_LINK, SHARED_VIBE_DECK, EXECUTE_SHARED_VIBE_DECK_BUTTON, VIBECONTROLS_ANALYTICS, LIST_CATALOGS, GET_CATALOG, GET_CATALOG_DEPENDENCY_GRAPH, GET_CATALOG_SBOM, CREATE_CATALOG, UPDATE_CATALOG, DELETE_CATALOG, ADD_COMPONENT_TO_CATALOG, REMOVE_COMPONENT_FROM_CATALOG, ADD_VIBE_TO_CATALOG, REMOVE_VIBE_FROM_CATALOG, LIST_COMPONENTS, GET_COMPONENT, CREATE_COMPONENT, UPDATE_COMPONENT, DELETE_COMPONENT, FORK_GITHUB_REPO, PUBLISH_COMPONENT_AS_TEMPLATE, LIST_TEMPLATES, GET_TEMPLATE, UPDATE_TEMPLATE, DELETE_TEMPLATE, INSTANTIATE_TEMPLATE, GET_SCORECARD, UPSERT_SCORECARD, ADD_SCORECARD_METRIC, UPDATE_SCORECARD_METRIC, REMOVE_SCORECARD_METRIC, LIST_TUNNELS, PINNED_NOTES, GET_TUNNEL, GET_TUNNEL_BY_SLUG, CREATE_TUNNEL, UPDATE_TUNNEL, DELETE_TUNNEL, START_TUNNEL, STOP_TUNNEL, ROTATE_TUNNEL_CREDENTIALS, ISSUE_TUNNEL_SESSION, REVOKE_TUNNEL_SESSION, LIST_TUNNEL_SESSIONS, LIST_TUNNEL_PROVIDERS, GET_TUNNEL_PROVIDER, LIST_TUNNEL_SHARDS, TUNNEL_USAGE, TUNNEL_AUDIT, LIST_TUNNEL_DOMAINS, GET_TUNNEL_DOMAIN, RESERVE_TUNNEL_SUBDOMAIN, REGISTER_CUSTOM_TUNNEL_DOMAIN, VERIFY_TUNNEL_DOMAIN, ATTACH_TUNNEL_DOMAIN, DETACH_TUNNEL_DOMAIN, DELETE_TUNNEL_DOMAIN, PROBE_AGENT_TUNNEL, ADD_AGENT_FROM_TUNNEL } from '../../chunk-XITZQYB2.js';
+import { LIST_AGENTS, GET_AGENT, CREATE_AGENT, UPDATE_AGENT, DELETE_AGENT, PROBE_AGENT_CONNECTION, AGENT_HEALTH_PROBES, AGENT_PLUGINS, INSTALL_AGENT_PLUGIN, REMOVE_AGENT_PLUGIN, LIST_VIBES, GET_VIBE, CREATE_VIBE, UPDATE_VIBE, DELETE_VIBE, UPDATE_VIBE_STATUS, ARCHIVE_VIBE, RESTORE_VIBE, VIBE_HIERARCHY, SEARCH_VIBES, MOVE_VIBE, UPDATE_VIBE_GIT, LIST_SESSIONS, GET_SESSION, CREATE_SESSION, START_SESSION, STOP_SESSION, RESTART_SESSION, TERMINATE_SESSION, SEND_SESSION_INPUT, START_SESSION_TERMINAL, SESSION_OUTPUT, ACTIVE_SESSIONS, CHECK_SESSION_HEALTH, BULK_RESTART_SESSIONS, BULK_STOP_SESSIONS, BULK_TERMINATE_SESSIONS, UPDATE_SESSION, UPDATE_SESSION_STATUS, DELETE_SESSION, KILL_SESSION, STOP_SESSION_TERMINAL, RESTART_SESSION_TERMINAL, START_TARGET_TERMINAL, STOP_TARGET_TERMINAL, EXPORT_SESSIONS, LIST_NOTES, GET_NOTE, CREATE_NOTE, UPDATE_NOTE, DELETE_NOTE, SEARCH_NOTES, PIN_NOTE, UNPIN_NOTE, LIST_CONFIGURATIONS, GET_CONFIGURATION, SET_CONFIGURATION, DELETE_CONFIGURATION, CONFIGURATIONS_BY_SCOPE, SECURITY_PROVIDERS_Q, SET_SECURITY_PROVIDER_M, MY_SECURITY_SCANS_Q, ALL_SECURITY_SCANS_Q, SECURITY_SCAN_Q, RUN_SECURITY_SCAN_M, CANCEL_SECURITY_SCAN_M, SECURITY_FINDINGS_Q, UPDATE_SECURITY_FINDING_STATUS_M, SECURITY_POLICY_DECISION_Q, SECURITY_STATUS_Q, REPOSITORY_SECURITY_CONFIG_Q, UPDATE_REPOSITORY_SECURITY_CONFIG_M, CREATE_SECURITY_EXCEPTION_M, REVOKE_SECURITY_EXCEPTION_M, PRESIGN_SECURITY_EVIDENCE_M, PUSH_SECURITY_SCAN_RUN_M, GET_CI_STATUS_Q, REFRESH_CI_STATUS_M, GET_CI_PIPELINE_RUNS_Q, GET_CI_PIPELINE_DETAILS_Q, GET_REPO_STATS_Q, REFRESH_REPO_STATS_M, LIST_GITOPS_PROVIDERS_Q, GET_GITOPS_PROVIDER_Q, CREATE_GITOPS_PROVIDER_M, UPDATE_GITOPS_PROVIDER_M, DELETE_GITOPS_PROVIDER_M, MY_SETTINGS_Q, MY_SETTINGS_BY_CATEGORY_Q, RESET_SETTINGS_M, UPDATE_PREFERENCES_M, UPDATE_NOTIFICATION_PREFERENCES_M, UPDATE_WORKSPACE_DEFAULTS_M, LIST_SETTINGS_SECRETS_Q, SET_SETTINGS_SECRET_M, DELETE_SETTINGS_SECRET_M, RESOLVE_INTEGRATION_TOKEN_M, LIST_WEBHOOKS, GET_WEBHOOK, CREATE_WEBHOOK, UPDATE_WEBHOOK, DELETE_WEBHOOK, TEST_WEBHOOK, TRIGGER_WEBHOOK, GET_UI_SESSION, SAVE_UI_SESSION, CLEAR_UI_SESSION, LIST_AI_TOOL_EVENTS, CREATE_AI_TOOL_EVENT, RECENT_AI_TOOL_EVENTS, LIST_TARGETS, GET_TARGET, CREATE_TARGET, UPDATE_TARGET, DELETE_TARGET, TEST_TARGET, IMPORT_TARGETS_FROM_CONFIG, SCAN_SSH_CONFIG, INSTALL_AGENT_ON_TARGET, LIST_VIBEDECKS, GET_VIBEDECK, CREATE_VIBEDECK, UPDATE_VIBEDECK, DELETE_VIBEDECK, DUPLICATE_VIBEDECK, SET_DEFAULT_VIBEDECK, LIST_VIBEDECK_BUTTONS, CREATE_VIBEDECK_BUTTON, UPDATE_VIBEDECK_BUTTON, DELETE_VIBEDECK_BUTTON, EXECUTE_VIBEDECK_BUTTON, LIST_DOCS_SITES, GET_DOCS_SITE, CREATE_DOCS_SITE, UPDATE_DOCS_SITE, DELETE_DOCS_SITE, LIST_DOCS_PAGES, GET_DOCS_PAGE, CREATE_DOCS_PAGE, UPDATE_DOCS_PAGE, DELETE_DOCS_PAGE, COMPILE_DOCS_SITE, PUBLISH_DOCS_REVISION, ROLLBACK_DOCS_REVISION, SHARE_SESSION, CREATE_SESSION_SHARE_LINK, REVOKE_SESSION_SHARE, REVOKE_SESSION_SHARE_LINK, SESSION_SHARES, SESSION_SHARE_LINKS, SESSION_COLLABORATORS, SESSIONS_SHARED_WITH_ME, UPDATE_SESSION_SHARE, JOIN_SHARED_SESSION, LEAVE_SHARED_SESSION, REQUEST_SESSION_CONTROL, RELEASE_SESSION_CONTROL, TRANSFER_SESSION_CONTROL, LIST_AUDIT_LOGS, GET_AUDIT_LOG, AUDIT_LOG_STATS, EXPORT_AUDIT_LOGS, DELETE_AUDIT_LOG, LIST_ACTIONS, GET_ACTION, CREATE_ACTION, UPDATE_ACTION, DELETE_ACTION, EXECUTE_ACTION, LIST_ACTION_EXECUTIONS, DUPLICATE_ACTION, INSTALL_ACTION_FROM_STORE, CANCEL_ACTION_EXECUTION, CREATE_SCHEDULED_JOB, DELETE_SCHEDULED_JOB, LIST_SCHEDULED_JOBS, LIST_AI_PROMPTS, GET_AI_PROMPT, CREATE_AI_PROMPT, UPDATE_AI_PROMPT, DELETE_AI_PROMPT, DUPLICATE_AI_PROMPT, RENDER_AI_PROMPT, RECORD_AI_PROMPT_USAGE, LIST_VIBE_DECK_SHARE_LINKS, CREATE_VIBE_DECK_SHARE_LINK, UPDATE_VIBE_DECK_SHARE_LINK, REVOKE_VIBE_DECK_SHARE_LINK, VALIDATE_VIBE_DECK_SHARE_LINK, SHARED_VIBE_DECK, EXECUTE_SHARED_VIBE_DECK_BUTTON, VIBECONTROLS_ANALYTICS, LIST_CATALOGS, GET_CATALOG, GET_CATALOG_DEPENDENCY_GRAPH, GET_CATALOG_SBOM, CREATE_CATALOG, UPDATE_CATALOG, DELETE_CATALOG, ADD_COMPONENT_TO_CATALOG, REMOVE_COMPONENT_FROM_CATALOG, ADD_VIBE_TO_CATALOG, REMOVE_VIBE_FROM_CATALOG, LIST_COMPONENTS, GET_COMPONENT, CREATE_COMPONENT, UPDATE_COMPONENT, DELETE_COMPONENT, FORK_GITHUB_REPO, PUBLISH_COMPONENT_AS_TEMPLATE, LIST_TEMPLATES, GET_TEMPLATE, UPDATE_TEMPLATE, DELETE_TEMPLATE, INSTANTIATE_TEMPLATE, GET_SCORECARD, UPSERT_SCORECARD, ADD_SCORECARD_METRIC, UPDATE_SCORECARD_METRIC, REMOVE_SCORECARD_METRIC, LIST_TUNNELS, PINNED_NOTES, GET_TUNNEL, GET_TUNNEL_BY_SLUG, CREATE_TUNNEL, UPDATE_TUNNEL, DELETE_TUNNEL, START_TUNNEL, STOP_TUNNEL, ROTATE_TUNNEL_CREDENTIALS, ISSUE_TUNNEL_SESSION, REVOKE_TUNNEL_SESSION, LIST_TUNNEL_SESSIONS, LIST_TUNNEL_PROVIDERS, GET_TUNNEL_PROVIDER, LIST_TUNNEL_SHARDS, TUNNEL_USAGE, TUNNEL_AUDIT, LIST_TUNNEL_DOMAINS, GET_TUNNEL_DOMAIN, RESERVE_TUNNEL_SUBDOMAIN, REGISTER_CUSTOM_TUNNEL_DOMAIN, VERIFY_TUNNEL_DOMAIN, ATTACH_TUNNEL_DOMAIN, DETACH_TUNNEL_DOMAIN, DELETE_TUNNEL_DOMAIN, PROBE_AGENT_TUNNEL, ADD_AGENT_FROM_TUNNEL, LIST_SANDBOXES, GET_SANDBOX, CREATE_SANDBOX, DELETE_SANDBOX, START_SANDBOX, STOP_SANDBOX, EXTEND_SANDBOX_TTL, GET_SANDBOX_CONFIG, UPDATE_SANDBOX_CONFIG, GET_SANDBOX_STATS, GET_SANDBOX_LOGS, TAG_SANDBOX, UNTAG_SANDBOX, GET_SANDBOX_TAGS, REPLACE_SANDBOX_TAGS, CREATE_SANDBOX_TAG, AVAILABLE_SANDBOX_TAGS, LIST_SANDBOX_TEMPLATES, GET_SANDBOX_TEMPLATE, CREATE_SANDBOX_TEMPLATE, UPDATE_SANDBOX_TEMPLATE, DELETE_SANDBOX_TEMPLATE, EXPORT_SANDBOXES, GET_SANDBOX_EXPORT_JOB, LIST_SANDBOX_EXPORT_JOBS, GET_SANDBOX_ARTIFACT_BYTES, GET_ACTIVE_SANDBOXES, GET_RECENT_SANDBOX_ACTIVITY, LIST_ALL_SANDBOXES, LIST_SANDBOX_NODES, PROXY_SANDBOX_REQUEST } from '../../chunk-XITZQYB2.js';
 import { getAuth } from '../../chunk-WWFVD7BO.js';
 import { mcpToolName, jsonResult, errorResult } from '../../chunk-H2OYWLOA.js';
 import { z } from 'zod';
@@ -5905,6 +5905,638 @@ function registerTunnelTools(server, ctx, track) {
     }
   );
 }
+var NO_WORKSPACE = "No workspace set. Run the auth workspace_set tool first.";
+var sandboxTemplate = z.enum([
+  "AI_BUILDER",
+  "WORKFLOW_MULTI_NODE",
+  "MISC_SHELL",
+  "CUSTOM",
+  "VIBECONTROLS"
+]);
+var sandboxStatus = z.enum([
+  "PENDING",
+  "PROVISIONING",
+  "RUNNING",
+  "STOPPING",
+  "STOPPED",
+  "EXPIRED",
+  "FAILED"
+]);
+var sandboxMode = z.enum(["DEPLOYMENT", "JOB"]);
+var storageMode = z.enum(["NONE", "EPHEMERAL", "PERSISTENT"]);
+var sandboxExportFormat = z.enum(["CSV", "JSON"]);
+var resourcesSchema = z.object({
+  cpuRequest: z.string().optional(),
+  cpuLimit: z.string().optional(),
+  memoryRequest: z.string().optional(),
+  memoryLimit: z.string().optional()
+});
+var storageSchema = z.object({
+  mode: storageMode.optional().describe("Storage mode: NONE, EPHEMERAL, PERSISTENT"),
+  sizeGi: z.number().optional(),
+  mountPath: z.string().optional(),
+  retainOnDelete: z.boolean().optional()
+});
+var containersSchema = z.array(z.record(z.unknown())).describe(
+  "Container specs: [{ name, image, ports?[{ containerPort, name?, protocol? }], env?[{ name, value }], command?[], args?[], resources?{ requestsCpu, requestsMemory, limitsCpu, limitsMemory } }]"
+);
+function registerSandboxTools(server, ctx, track) {
+  const w = ctx.gql.workspace;
+  const tool = (name, title, description, inputSchema, handler) => {
+    server.registerTool(
+      track(mcpToolName(ctx.productName, name)),
+      { title, description, inputSchema },
+      async (args) => {
+        try {
+          const data = await handler(args);
+          return jsonResult(data);
+        } catch (error) {
+          ctx.logger.error(`vibecontrols_${name} failed`, { error });
+          return errorResult(`Failed: ${error instanceof Error ? error.message : String(error)}`);
+        }
+      }
+    );
+  };
+  const readWorkspaceId = () => {
+    const auth = ctx.auth.read();
+    return auth?.workspaceId;
+  };
+  tool(
+    "sandboxes_list",
+    "List Sandboxes",
+    "List sandboxes in the current workspace with optional template/status filters.",
+    {
+      template: sandboxTemplate.optional(),
+      status: sandboxStatus.optional(),
+      limit: z.number().optional(),
+      offset: z.number().optional(),
+      page: z.number().optional()
+    },
+    async ({ template, status, limit, offset, page }) => {
+      const workspaceId = readWorkspaceId();
+      if (!workspaceId) throw new Error(NO_WORKSPACE);
+      const filter = {};
+      if (template !== void 0) filter.template = template;
+      if (status !== void 0) filter.status = status;
+      const pagination = {};
+      if (limit !== void 0) pagination.limit = limit;
+      if (offset !== void 0) pagination.offset = offset;
+      if (page !== void 0) pagination.page = page;
+      const data = await w.request(LIST_SANDBOXES, {
+        filter: Object.keys(filter).length ? filter : void 0,
+        pagination: Object.keys(pagination).length ? pagination : void 0,
+        context: { workspaceId }
+      });
+      return data.listSandboxes;
+    }
+  );
+  tool(
+    "sandboxes_get",
+    "Get Sandbox",
+    "Get a sandbox by ID.",
+    { id: z.string().describe("Sandbox ID") },
+    async ({ id }) => {
+      const workspaceId = readWorkspaceId();
+      if (!workspaceId) throw new Error(NO_WORKSPACE);
+      const data = await w.request(GET_SANDBOX, {
+        id,
+        context: { workspaceId }
+      });
+      return data.getSandbox;
+    }
+  );
+  tool(
+    "sandboxes_create",
+    "Create Sandbox",
+    "Create a sandbox from a template + container specs. Workspace context is injected from auth.",
+    {
+      name: z.string(),
+      template: sandboxTemplate,
+      containers: containersSchema,
+      description: z.string().optional(),
+      mode: sandboxMode.optional().describe("Sandbox mode: DEPLOYMENT or JOB"),
+      resources: resourcesSchema.optional(),
+      storage: storageSchema.optional(),
+      ttlSeconds: z.number().optional(),
+      metadata: z.record(z.unknown()).optional(),
+      templateId: z.string().optional()
+    },
+    async (args) => {
+      const workspaceId = readWorkspaceId();
+      if (!workspaceId) throw new Error(NO_WORKSPACE);
+      const input = { ...args, context: { workspaceId } };
+      const data = await w.request(CREATE_SANDBOX, { input });
+      return data.createSandbox;
+    }
+  );
+  tool(
+    "sandboxes_delete",
+    "Delete Sandbox",
+    "Delete a sandbox by ID.",
+    { id: z.string() },
+    async ({ id }) => {
+      const workspaceId = readWorkspaceId();
+      if (!workspaceId) throw new Error(NO_WORKSPACE);
+      const data = await w.request(DELETE_SANDBOX, {
+        id,
+        context: { workspaceId }
+      });
+      return { deleted: data.deleteSandbox, id };
+    }
+  );
+  tool(
+    "sandboxes_start",
+    "Start Sandbox",
+    "Start (resume) a stopped sandbox.",
+    { id: z.string() },
+    async ({ id }) => {
+      const workspaceId = readWorkspaceId();
+      if (!workspaceId) throw new Error(NO_WORKSPACE);
+      const data = await w.request(START_SANDBOX, {
+        id,
+        context: { workspaceId }
+      });
+      return data.startSandbox;
+    }
+  );
+  tool(
+    "sandboxes_stop",
+    "Stop Sandbox",
+    "Stop a running sandbox.",
+    { id: z.string() },
+    async ({ id }) => {
+      const workspaceId = readWorkspaceId();
+      if (!workspaceId) throw new Error(NO_WORKSPACE);
+      const data = await w.request(STOP_SANDBOX, {
+        id,
+        context: { workspaceId }
+      });
+      return data.stopSandbox;
+    }
+  );
+  tool(
+    "sandboxes_extend_ttl",
+    "Extend Sandbox TTL",
+    "Extend a sandbox time-to-live by an additional number of seconds.",
+    {
+      id: z.string(),
+      additionalSeconds: z.number().describe("Seconds to add to the current TTL")
+    },
+    async ({ id, additionalSeconds }) => {
+      const workspaceId = readWorkspaceId();
+      if (!workspaceId) throw new Error(NO_WORKSPACE);
+      const data = await w.request(EXTEND_SANDBOX_TTL, {
+        id,
+        additionalSeconds,
+        context: { workspaceId }
+      });
+      return data.extendSandboxTTL;
+    }
+  );
+  tool(
+    "sandboxes_get_config",
+    "Get Sandbox Config",
+    "Get the sandbox provisioning config (TTL/concurrency/resource defaults) for the workspace.",
+    {},
+    async () => {
+      const workspaceId = readWorkspaceId();
+      if (!workspaceId) throw new Error(NO_WORKSPACE);
+      const data = await w.request(GET_SANDBOX_CONFIG, {
+        context: { workspaceId }
+      });
+      return data.getSandboxConfig;
+    }
+  );
+  tool(
+    "sandboxes_update_config",
+    "Update Sandbox Config",
+    "Update the workspace sandbox config. Workspace context is injected from auth.",
+    {
+      defaultTtlSeconds: z.number().optional(),
+      maxTtlSeconds: z.number().optional(),
+      allowedTemplates: z.array(sandboxTemplate).optional(),
+      maxConcurrentPerUser: z.number().optional(),
+      maxConcurrentPerWorkspace: z.number().optional(),
+      defaultCpuRequest: z.string().optional(),
+      defaultCpuLimit: z.string().optional(),
+      defaultMemoryRequest: z.string().optional(),
+      defaultMemoryLimit: z.string().optional()
+    },
+    async (args) => {
+      const workspaceId = readWorkspaceId();
+      if (!workspaceId) throw new Error(NO_WORKSPACE);
+      const input = { ...args, context: { workspaceId } };
+      const data = await w.request(UPDATE_SANDBOX_CONFIG, {
+        input
+      });
+      return data.updateSandboxConfig;
+    }
+  );
+  tool(
+    "sandboxes_get_stats",
+    "Get Sandbox Stats",
+    "Get aggregate sandbox statistics for the workspace.",
+    {},
+    async () => {
+      const workspaceId = readWorkspaceId();
+      if (!workspaceId) throw new Error(NO_WORKSPACE);
+      const data = await w.request(GET_SANDBOX_STATS, {
+        context: { workspaceId }
+      });
+      return data.getSandboxStats;
+    }
+  );
+  tool(
+    "sandboxes_get_logs",
+    "Get Sandbox Logs",
+    "Fetch container logs for a sandbox.",
+    {
+      id: z.string(),
+      containerName: z.string(),
+      tailLines: z.number().optional().describe("Number of trailing log lines to return")
+    },
+    async ({ id, containerName, tailLines }) => {
+      const workspaceId = readWorkspaceId();
+      if (!workspaceId) throw new Error(NO_WORKSPACE);
+      const data = await w.request(GET_SANDBOX_LOGS, {
+        context: { workspaceId },
+        id,
+        containerName,
+        tailLines
+      });
+      return data.getSandboxLogs;
+    }
+  );
+  tool(
+    "sandboxes_tags_attach",
+    "Tag Sandbox",
+    "Attach an existing tag to a sandbox.",
+    {
+      sandboxId: z.string(),
+      tagId: z.string(),
+      source: z.string().optional(),
+      validFrom: z.string().optional(),
+      validTo: z.string().optional(),
+      metadata: z.record(z.unknown()).optional()
+    },
+    async (args) => {
+      const data = await w.request(TAG_SANDBOX, { input: args });
+      return data.tagSandbox;
+    }
+  );
+  tool(
+    "sandboxes_tags_detach",
+    "Untag Sandbox",
+    "Remove a tag from a sandbox.",
+    { sandboxId: z.string(), tagId: z.string() },
+    async (args) => {
+      const data = await w.request(UNTAG_SANDBOX, { input: args });
+      return data.untagSandbox;
+    }
+  );
+  tool(
+    "sandboxes_tags_get",
+    "Get Sandbox Tags",
+    "Get all tag assignments for a sandbox.",
+    { sandboxId: z.string() },
+    async (args) => {
+      const data = await w.request(GET_SANDBOX_TAGS, { input: args });
+      return data.getSandboxTags;
+    }
+  );
+  tool(
+    "sandboxes_tags_replace",
+    "Replace Sandbox Tags",
+    "Replace the full set of tags on a sandbox with the provided tag IDs.",
+    { sandboxId: z.string(), tagIds: z.array(z.string()) },
+    async (args) => {
+      const data = await w.request(REPLACE_SANDBOX_TAGS, {
+        input: args
+      });
+      return data.replaceSandboxTags;
+    }
+  );
+  tool(
+    "sandboxes_tags_create",
+    "Create Sandbox Tag",
+    "Create a new sandbox tag definition.",
+    { label: z.string(), color: z.string().optional() },
+    async (args) => {
+      const data = await w.request(CREATE_SANDBOX_TAG, {
+        input: args
+      });
+      return data.createSandboxTag;
+    }
+  );
+  tool(
+    "sandboxes_tags_available",
+    "Available Sandbox Tags",
+    "List available sandbox tags, optionally filtered by a search query.",
+    {
+      query: z.string().optional(),
+      limit: z.number().optional()
+    },
+    async ({ query, limit }) => {
+      const data = await w.request(AVAILABLE_SANDBOX_TAGS, {
+        query,
+        limit
+      });
+      return data.availableSandboxTags;
+    }
+  );
+  tool(
+    "sandboxes_templates_list",
+    "List Sandbox Templates",
+    "List sandbox template configs, optionally filtered by template type.",
+    {
+      template: sandboxTemplate.optional(),
+      limit: z.number().optional(),
+      offset: z.number().optional(),
+      page: z.number().optional()
+    },
+    async ({ template, limit, offset, page }) => {
+      const workspaceId = readWorkspaceId();
+      if (!workspaceId) throw new Error(NO_WORKSPACE);
+      const pagination = {};
+      if (limit !== void 0) pagination.limit = limit;
+      if (offset !== void 0) pagination.offset = offset;
+      if (page !== void 0) pagination.page = page;
+      const data = await w.request(LIST_SANDBOX_TEMPLATES, {
+        context: { workspaceId },
+        template,
+        pagination: Object.keys(pagination).length ? pagination : void 0
+      });
+      return data.listSandboxTemplates;
+    }
+  );
+  tool(
+    "sandboxes_templates_get",
+    "Get Sandbox Template",
+    "Get a sandbox template config by ID.",
+    { id: z.string() },
+    async ({ id }) => {
+      const workspaceId = readWorkspaceId();
+      if (!workspaceId) throw new Error(NO_WORKSPACE);
+      const data = await w.request(GET_SANDBOX_TEMPLATE, {
+        context: { workspaceId },
+        id
+      });
+      return data.getSandboxTemplate;
+    }
+  );
+  tool(
+    "sandboxes_templates_create",
+    "Create Sandbox Template",
+    "Create a reusable sandbox template config. Workspace context is injected from auth.",
+    {
+      name: z.string(),
+      template: sandboxTemplate,
+      description: z.string().optional(),
+      isDefault: z.boolean().optional(),
+      containers: containersSchema.optional(),
+      resources: resourcesSchema.optional(),
+      storage: storageSchema.optional(),
+      ttlSeconds: z.number().optional(),
+      config: z.record(z.unknown()).optional(),
+      metadata: z.record(z.unknown()).optional(),
+      allowedImages: z.array(z.string()).optional()
+    },
+    async (args) => {
+      const workspaceId = readWorkspaceId();
+      if (!workspaceId) throw new Error(NO_WORKSPACE);
+      const input = { ...args, context: { workspaceId } };
+      const data = await w.request(CREATE_SANDBOX_TEMPLATE, {
+        input
+      });
+      return data.createSandboxTemplate;
+    }
+  );
+  tool(
+    "sandboxes_templates_update",
+    "Update Sandbox Template",
+    "Update an existing sandbox template config. Workspace context is injected from auth.",
+    {
+      id: z.string(),
+      name: z.string().optional(),
+      description: z.string().optional(),
+      isDefault: z.boolean().optional(),
+      containers: containersSchema.optional(),
+      resources: resourcesSchema.optional(),
+      storage: storageSchema.optional(),
+      ttlSeconds: z.number().optional(),
+      config: z.record(z.unknown()).optional(),
+      metadata: z.record(z.unknown()).optional(),
+      allowedImages: z.array(z.string()).optional()
+    },
+    async (args) => {
+      const workspaceId = readWorkspaceId();
+      if (!workspaceId) throw new Error(NO_WORKSPACE);
+      const input = { ...args, context: { workspaceId } };
+      const data = await w.request(UPDATE_SANDBOX_TEMPLATE, {
+        input
+      });
+      return data.updateSandboxTemplate;
+    }
+  );
+  tool(
+    "sandboxes_templates_delete",
+    "Delete Sandbox Template",
+    "Delete a sandbox template config by ID.",
+    { id: z.string() },
+    async ({ id }) => {
+      const workspaceId = readWorkspaceId();
+      if (!workspaceId) throw new Error(NO_WORKSPACE);
+      const data = await w.request(DELETE_SANDBOX_TEMPLATE, {
+        context: { workspaceId },
+        id
+      });
+      return { deleted: data.deleteSandboxTemplate, id };
+    }
+  );
+  tool(
+    "sandboxes_export_create",
+    "Export Sandboxes",
+    "Start an async export job of sandboxes. Workspace + context injected from auth.",
+    {
+      format: sandboxExportFormat.describe("Export format: CSV or JSON"),
+      template: sandboxTemplate.optional().describe("Filter: template type"),
+      status: sandboxStatus.optional().describe("Filter: sandbox status"),
+      includeUsageEvents: z.boolean().optional()
+    },
+    async ({ format, template, status, includeUsageEvents }) => {
+      const workspaceId = readWorkspaceId();
+      if (!workspaceId) throw new Error(NO_WORKSPACE);
+      const filter = {};
+      if (template !== void 0) filter.template = template;
+      if (status !== void 0) filter.status = status;
+      const input = {
+        workspaceId,
+        format,
+        context: { workspaceId }
+      };
+      if (includeUsageEvents !== void 0) input.includeUsageEvents = includeUsageEvents;
+      if (Object.keys(filter).length) input.filter = filter;
+      const data = await w.request(EXPORT_SANDBOXES, { input });
+      return data.exportSandboxes;
+    }
+  );
+  tool(
+    "sandboxes_export_get",
+    "Get Sandbox Export Job",
+    "Get a sandbox export job by ID.",
+    { jobId: z.string() },
+    async ({ jobId }) => {
+      const workspaceId = readWorkspaceId();
+      if (!workspaceId) throw new Error(NO_WORKSPACE);
+      const data = await w.request(GET_SANDBOX_EXPORT_JOB, {
+        workspaceId,
+        jobId,
+        context: { workspaceId }
+      });
+      return data.getSandboxExportJob;
+    }
+  );
+  tool(
+    "sandboxes_export_list",
+    "List Sandbox Export Jobs",
+    "List sandbox export jobs for the workspace.",
+    {
+      limit: z.number().optional(),
+      offset: z.number().optional(),
+      page: z.number().optional()
+    },
+    async ({ limit, offset, page }) => {
+      const workspaceId = readWorkspaceId();
+      if (!workspaceId) throw new Error(NO_WORKSPACE);
+      const pagination = {};
+      if (limit !== void 0) pagination.limit = limit;
+      if (offset !== void 0) pagination.offset = offset;
+      if (page !== void 0) pagination.page = page;
+      const data = await w.request(LIST_SANDBOX_EXPORT_JOBS, {
+        workspaceId,
+        context: { workspaceId },
+        pagination: Object.keys(pagination).length ? pagination : void 0
+      });
+      return data.listSandboxExportJobs;
+    }
+  );
+  tool(
+    "sandboxes_export_get_artifact_bytes",
+    "Get Sandbox Artifact Bytes",
+    "Fetch raw bytes (base64) of a file artifact from a sandbox session. Context injected from auth.",
+    {
+      sandboxId: z.string(),
+      sessionId: z.string(),
+      path: z.string().describe("Path of the artifact file inside the sandbox"),
+      onBehalfOfUserId: z.string().optional()
+    },
+    async (args) => {
+      const workspaceId = readWorkspaceId();
+      if (!workspaceId) throw new Error(NO_WORKSPACE);
+      const input = { ...args, context: { workspaceId } };
+      const data = await w.request(
+        GET_SANDBOX_ARTIFACT_BYTES,
+        {
+          input
+        }
+      );
+      return data.getSandboxArtifactBytes;
+    }
+  );
+  tool(
+    "sandboxes_admin_get_active",
+    "Get Active Sandboxes",
+    "Admin: list all currently active sandboxes across the workspace.",
+    {},
+    async () => {
+      const workspaceId = readWorkspaceId();
+      if (!workspaceId) throw new Error(NO_WORKSPACE);
+      const data = await w.request(GET_ACTIVE_SANDBOXES, {
+        context: { workspaceId }
+      });
+      return data.getActiveSandboxes;
+    }
+  );
+  tool(
+    "sandboxes_admin_get_recent_activity",
+    "Get Recent Sandbox Activity",
+    "Admin: list recent sandbox activity/audit entries.",
+    { limit: z.number().optional() },
+    async ({ limit }) => {
+      const workspaceId = readWorkspaceId();
+      if (!workspaceId) throw new Error(NO_WORKSPACE);
+      const data = await w.request(
+        GET_RECENT_SANDBOX_ACTIVITY,
+        { context: { workspaceId }, limit }
+      );
+      return data.getRecentSandboxActivity;
+    }
+  );
+  tool(
+    "sandboxes_admin_list_all",
+    "List All Sandboxes",
+    "Admin: list all sandboxes (including other users) with optional filters.",
+    {
+      template: sandboxTemplate.optional(),
+      status: sandboxStatus.optional(),
+      limit: z.number().optional(),
+      offset: z.number().optional(),
+      page: z.number().optional()
+    },
+    async ({ template, status, limit, offset, page }) => {
+      const workspaceId = readWorkspaceId();
+      if (!workspaceId) throw new Error(NO_WORKSPACE);
+      const filter = {};
+      if (template !== void 0) filter.template = template;
+      if (status !== void 0) filter.status = status;
+      const pagination = {};
+      if (limit !== void 0) pagination.limit = limit;
+      if (offset !== void 0) pagination.offset = offset;
+      if (page !== void 0) pagination.page = page;
+      const data = await w.request(LIST_ALL_SANDBOXES, {
+        context: { workspaceId },
+        filter: Object.keys(filter).length ? filter : void 0,
+        pagination: Object.keys(pagination).length ? pagination : void 0
+      });
+      return data.listAllSandboxes;
+    }
+  );
+  tool(
+    "sandboxes_admin_list_nodes",
+    "List Sandbox Nodes",
+    "Admin: list cluster nodes available for sandbox scheduling with capacity info.",
+    {},
+    async () => {
+      const workspaceId = readWorkspaceId();
+      if (!workspaceId) throw new Error(NO_WORKSPACE);
+      const data = await w.request(LIST_SANDBOX_NODES, {
+        context: { workspaceId }
+      });
+      return data.listSandboxNodes;
+    }
+  );
+  tool(
+    "sandboxes_proxy_request",
+    "Proxy Sandbox Request",
+    "Proxy an HTTP request into a running sandbox container. Context injected from auth.",
+    {
+      sandboxId: z.string(),
+      method: z.string().describe("HTTP method, e.g. GET, POST, PUT, DELETE"),
+      path: z.string().describe("Request path inside the sandbox"),
+      body: z.record(z.unknown()).optional(),
+      containerName: z.string().optional()
+    },
+    async (args) => {
+      const workspaceId = readWorkspaceId();
+      if (!workspaceId) throw new Error(NO_WORKSPACE);
+      const input = { ...args, context: { workspaceId } };
+      const data = await w.request(PROXY_SANDBOX_REQUEST, {
+        input
+      });
+      return data.proxySandboxRequest;
+    }
+  );
+}
 function registerUISessionTools(server, ctx, track) {
   server.registerTool(
     track(mcpToolName(ctx.productName, "ui_session_get")),
@@ -7545,6 +8177,7 @@ var vibecontrolsModule = {
     registerConfigSettingsTools(server, ctx, trackTool);
     registerWebhookTools(server, ctx, trackTool);
     registerTunnelTools(server, ctx, trackTool);
+    registerSandboxTools(server, ctx, trackTool);
     registerUISessionTools(server, ctx, trackTool);
     registerAiEventTools(server, ctx, trackTool);
     registerTargetTools(server, ctx, trackTool);