@meetkai/mka1 0.51.25 → 0.51.27

package/bin/mcp-server.js

@@ -52876,9 +52876,9 @@ var init_config = __esm(() => {
   SDK_METADATA = {
     language: "typescript",
     openapiDocVersion: "1.1.0",
-    sdkVersion: "0.51.25",
+    sdkVersion: "0.51.27",
     genVersion: "2.924.0",
-    userAgent: "speakeasy-sdk/typescript 0.51.25 2.924.0 1.1.0 @meetkai/mka1"
+    userAgent: "speakeasy-sdk/typescript 0.51.27 2.924.0 1.1.0 @meetkai/mka1"
   };
 });
 
@@ -57914,6 +57914,24 @@ var init_coderesult = __esm(() => {
   });
 });
 
+// src/models/components/collaboratorrequest.ts
+var CollaboratorRequestRole, CollaboratorRequestRole$inboundSchema, CollaboratorRequestRole$outboundSchema, CollaboratorRequest$inboundSchema, CollaboratorRequest$outboundSchema;
+var init_collaboratorrequest = __esm(() => {
+  init_esm();
+  CollaboratorRequestRole = {
+    Reader: "reader",
+    Writer: "writer"
+  };
+  CollaboratorRequestRole$inboundSchema = nativeEnumType(CollaboratorRequestRole);
+  CollaboratorRequestRole$outboundSchema = CollaboratorRequestRole$inboundSchema;
+  CollaboratorRequest$inboundSchema = objectType({
+    role: CollaboratorRequestRole$inboundSchema
+  });
+  CollaboratorRequest$outboundSchema = objectType({
+    role: CollaboratorRequestRole$outboundSchema
+  });
+});
+
 // src/models/components/commandrequest.ts
 var CommandRequest$inboundSchema, CommandRequest$outboundSchema;
 var init_commandrequest = __esm(() => {
@@ -62498,6 +62516,28 @@ var init_createpromptresponse = __esm(() => {
   });
 });
 
+// src/models/components/createreporequest.ts
+var CreateRepoRequestVisibility, CreateRepoRequestVisibility$inboundSchema, CreateRepoRequestVisibility$outboundSchema, CreateRepoRequest$inboundSchema, CreateRepoRequest$outboundSchema;
+var init_createreporequest = __esm(() => {
+  init_esm();
+  CreateRepoRequestVisibility = {
+    Private: "private",
+    Team: "team"
+  };
+  CreateRepoRequestVisibility$inboundSchema = nativeEnumType(CreateRepoRequestVisibility);
+  CreateRepoRequestVisibility$outboundSchema = CreateRepoRequestVisibility$inboundSchema;
+  CreateRepoRequest$inboundSchema = objectType({
+    description: stringType().optional(),
+    name: stringType(),
+    visibility: CreateRepoRequestVisibility$inboundSchema.default("private")
+  });
+  CreateRepoRequest$outboundSchema = objectType({
+    description: stringType().optional(),
+    name: stringType(),
+    visibility: CreateRepoRequestVisibility$outboundSchema.default("private")
+  });
+});
+
 // src/models/components/memorymountaccess.ts
 var MemoryMountAccess, MemoryMountAccess$inboundSchema, MemoryMountAccess$outboundSchema;
 var init_memorymountaccess = __esm(() => {
@@ -67721,6 +67761,27 @@ var init_mcptoolcallwithid = __esm(() => {
   });
 });
 
+// src/models/components/member.ts
+var MemberRole, MemberRole$inboundSchema, MemberRole$outboundSchema, Member$inboundSchema, Member$outboundSchema;
+var init_member = __esm(() => {
+  init_esm();
+  MemberRole = {
+    Reader: "reader",
+    Writer: "writer",
+    Owner: "owner"
+  };
+  MemberRole$inboundSchema = nativeEnumType(MemberRole);
+  MemberRole$outboundSchema = MemberRole$inboundSchema;
+  Member$inboundSchema = objectType({
+    role: MemberRole$inboundSchema,
+    user: stringType()
+  });
+  Member$outboundSchema = objectType({
+    role: MemberRole$outboundSchema,
+    user: stringType()
+  });
+});
+
 // src/models/components/memoryentry.ts
 var MemoryEntry$inboundSchema, MemoryEntry$outboundSchema;
 var init_memoryentry = __esm(() => {
@@ -69491,6 +69552,35 @@ var init_pageservingtenant = __esm(() => {
   });
 });
 
+// src/models/components/visibility.ts
+var Visibility, Visibility$inboundSchema, Visibility$outboundSchema;
+var init_visibility = __esm(() => {
+  init_esm();
+  Visibility = {
+    Private: "private",
+    Team: "team"
+  };
+  Visibility$inboundSchema = nativeEnumType(Visibility);
+  Visibility$outboundSchema = Visibility$inboundSchema;
+});
+
+// src/models/components/patchreporequest.ts
+var PatchRepoRequest$inboundSchema, PatchRepoRequest$outboundSchema;
+var init_patchreporequest = __esm(() => {
+  init_esm();
+  init_visibility();
+  PatchRepoRequest$inboundSchema = objectType({
+    description: stringType().optional(),
+    name: stringType().optional(),
+    visibility: Visibility$inboundSchema.optional()
+  });
+  PatchRepoRequest$outboundSchema = objectType({
+    description: stringType().optional(),
+    name: stringType().optional(),
+    visibility: Visibility$outboundSchema.optional()
+  });
+});
+
 // src/models/components/preconfiguredskill.ts
 var PreconfiguredSkill$inboundSchema, PreconfiguredSkill$outboundSchema;
 var init_preconfiguredskill = __esm(() => {
@@ -69705,6 +69795,38 @@ var init_registrymanagementlistresponse = __esm(() => {
   });
 });
 
+// src/models/components/repo.ts
+var Repo$inboundSchema, Repo$outboundSchema;
+var init_repo = __esm(() => {
+  init_esm();
+  init_primitives();
+  init_visibility();
+  Repo$inboundSchema = objectType({
+    created_at: stringType().datetime({ offset: true }).transform((v2) => new Date(v2)),
+    description: stringType(),
+    id: stringType(),
+    name: stringType(),
+    org: stringType(),
+    visibility: Visibility$inboundSchema
+  }).transform((v2) => {
+    return remap(v2, {
+      created_at: "createdAt"
+    });
+  });
+  Repo$outboundSchema = objectType({
+    createdAt: dateType().transform((v2) => v2.toISOString()),
+    description: stringType(),
+    id: stringType(),
+    name: stringType(),
+    org: stringType(),
+    visibility: Visibility$outboundSchema
+  }).transform((v2) => {
+    return remap(v2, {
+      createdAt: "created_at"
+    });
+  });
+});
+
 // src/models/components/responsestatus.ts
 var ResponseStatus, ResponseStatus$inboundSchema, ResponseStatus$outboundSchema;
 var init_responsestatus = __esm(() => {
@@ -76131,6 +76253,7 @@ var init_components = __esm(() => {
   init_coderequest();
   init_coderesult();
   init_coderuntime();
+  init_collaboratorrequest();
   init_commandrequest();
   init_commandresult();
   init_compactedresponse();
@@ -76174,6 +76297,7 @@ var init_components = __esm(() => {
   init_creatememorystorerequest();
   init_createpromptrequest();
   init_createpromptresponse();
+  init_createreporequest();
   init_createsessionrequest();
   init_createsessionresponse();
   init_createtelegramagentconnectorrequest();
@@ -76355,6 +76479,7 @@ var init_components = __esm(() => {
   init_mcptoolchoice();
   init_mcptooldefinition();
   init_mcptoolfilter();
+  init_member();
   init_memoryentry();
   init_memoryentrydeleted();
   init_memoryentrylist();
@@ -76391,6 +76516,7 @@ var init_components = __esm(() => {
   init_pagerun();
   init_pagesecret();
   init_pageservingtenant();
+  init_patchreporequest();
   init_pendingsafetycheck();
   init_preconfiguredskill();
   init_preconfiguredskilllist();
@@ -76412,6 +76538,7 @@ var init_components = __esm(() => {
   init_registrymodelorigin();
   init_registrysource();
   init_reinforcementhyperparameters();
+  init_repo();
   init_requestcounts();
   init_resourcerole();
   init_responsecancelledevent();
@@ -76605,6 +76732,7 @@ var init_components = __esm(() => {
   init_vectorstorelist();
   init_vectorstoresearchresults();
   init_vectorstoresgroupby();
+  init_visibility();
   init_waitaction();
   init_wakeagentrunrequest();
   init_websearchaction();
@@ -81063,6 +81191,51 @@ var init_removeteammember = __esm(() => {
   }));
 });
 
+// src/models/errors/repoerror.ts
+var RepoError, RepoError$inboundSchema, RepoError$outboundSchema;
+var init_repoerror = __esm(() => {
+  init_esm();
+  init_primitives();
+  init_sdkerror();
+  RepoError = class RepoError extends SDKError {
+    correlationId;
+    error;
+    data$;
+    constructor(err, httpMeta) {
+      const message = "message" in err && typeof err.message === "string" ? err.message : `API error occurred: ${JSON.stringify(err)}`;
+      super(message, httpMeta);
+      this.data$ = err;
+      this.correlationId = err.correlationId;
+      this.error = err.error;
+      this.name = "RepoError";
+    }
+  };
+  RepoError$inboundSchema = objectType({
+    correlation_id: stringType(),
+    error: stringType(),
+    request$: instanceOfType(Request),
+    response$: instanceOfType(Response),
+    body$: stringType()
+  }).transform((v2) => {
+    const remapped = remap(v2, {
+      correlation_id: "correlationId"
+    });
+    return new RepoError(remapped, {
+      request: v2.request$,
+      response: v2.response$,
+      body: v2.body$
+    });
+  });
+  RepoError$outboundSchema = instanceOfType(RepoError).transform((v2) => v2.data$).pipe(objectType({
+    correlationId: stringType(),
+    error: stringType()
+  }).transform((v2) => {
+    return remap(v2, {
+      correlationId: "correlation_id"
+    });
+  }));
+});
+
 // src/models/errors/revokeclusterinvite.ts
 var RevokeClusterInviteAuthClusterResponse429ResponseBody, RevokeClusterInviteAuthClusterResponse409ResponseBody, RevokeClusterInviteAuthClusterResponse404ResponseBody, RevokeClusterInviteAuthClusterResponseResponseBody, RevokeClusterInviteAuthClusterResponseBody, RevokeClusterInviteResponseBody, RevokeClusterInviteAuthClusterResponse429ResponseBody$inboundSchema, RevokeClusterInviteAuthClusterResponse429ResponseBody$outboundSchema, RevokeClusterInviteAuthClusterResponse409ResponseBody$inboundSchema, RevokeClusterInviteAuthClusterResponse409ResponseBody$outboundSchema, RevokeClusterInviteAuthClusterResponse404ResponseBody$inboundSchema, RevokeClusterInviteAuthClusterResponse404ResponseBody$outboundSchema, RevokeClusterInviteAuthClusterResponseResponseBody$inboundSchema, RevokeClusterInviteAuthClusterResponseResponseBody$outboundSchema, RevokeClusterInviteAuthClusterResponseBody$inboundSchema, RevokeClusterInviteAuthClusterResponseBody$outboundSchema, RevokeClusterInviteResponseBody$inboundSchema, RevokeClusterInviteResponseBody$outboundSchema;
 var init_revokeclusterinvite = __esm(() => {
@@ -82360,6 +82533,7 @@ var init_errors4 = __esm(() => {
   init_regenerateserviceaccountapikey();
   init_reissueownerkey();
   init_removeteammember();
+  init_repoerror();
   init_responsevalidationerror();
   init_revokeclusterinvite();
   init_sdkerror();
@@ -82547,7 +82721,7 @@ var init_addmodelcatalogorgaccess = __esm(() => {
 });
 
 // src/models/operations/addteammember.ts
-var AddTeamMemberRequestBody$inboundSchema, AddTeamMemberRequestBody$outboundSchema, AddTeamMemberRequest$inboundSchema, AddTeamMemberRequest$outboundSchema, Member$inboundSchema, Member$outboundSchema, AddTeamMemberResponseBody$inboundSchema2, AddTeamMemberResponseBody$outboundSchema2;
+var AddTeamMemberRequestBody$inboundSchema, AddTeamMemberRequestBody$outboundSchema, AddTeamMemberRequest$inboundSchema, AddTeamMemberRequest$outboundSchema, Member$inboundSchema2, Member$outboundSchema2, AddTeamMemberResponseBody$inboundSchema2, AddTeamMemberResponseBody$outboundSchema2;
 var init_addteammember2 = __esm(() => {
   init_esm();
   init_primitives();
@@ -82579,23 +82753,23 @@ var init_addteammember2 = __esm(() => {
       requestBody: "RequestBody"
     });
   });
-  Member$inboundSchema = objectType({
+  Member$inboundSchema2 = objectType({
     id: stringType(),
     teamId: stringType(),
     userId: stringType(),
     createdAt: stringType()
   });
-  Member$outboundSchema = objectType({
+  Member$outboundSchema2 = objectType({
     id: stringType(),
     teamId: stringType(),
     userId: stringType(),
     createdAt: stringType()
   });
   AddTeamMemberResponseBody$inboundSchema2 = objectType({
-    member: lazyType(() => Member$inboundSchema)
+    member: lazyType(() => Member$inboundSchema2)
   });
   AddTeamMemberResponseBody$outboundSchema2 = objectType({
-    member: lazyType(() => Member$outboundSchema)
+    member: lazyType(() => Member$outboundSchema2)
   });
 });
 
@@ -85032,6 +85206,32 @@ var init_createpromptversion = __esm(() => {
   });
 });
 
+// src/models/operations/createrepo.ts
+var CreateRepoRequest$inboundSchema2, CreateRepoRequest$outboundSchema2;
+var init_createrepo = __esm(() => {
+  init_esm();
+  init_primitives();
+  init_components();
+  CreateRepoRequest$inboundSchema2 = objectType({
+    "X-On-Behalf-Of": stringType().optional(),
+    CreateRepoRequest: CreateRepoRequest$inboundSchema
+  }).transform((v2) => {
+    return remap(v2, {
+      "X-On-Behalf-Of": "xOnBehalfOf",
+      CreateRepoRequest: "createRepoRequest"
+    });
+  });
+  CreateRepoRequest$outboundSchema2 = objectType({
+    xOnBehalfOf: stringType().optional(),
+    createRepoRequest: CreateRepoRequest$outboundSchema
+  }).transform((v2) => {
+    return remap(v2, {
+      xOnBehalfOf: "X-On-Behalf-Of",
+      createRepoRequest: "CreateRepoRequest"
+    });
+  });
+});
+
 // src/lib/event-streams.ts
 function findBoundary(buf, len, from) {
   for (let i = from;i < len; i++) {
@@ -85967,6 +86167,33 @@ var init_deleteclusterorg2 = __esm(() => {
   });
 });
 
+// src/models/operations/deletecollaborator.ts
+var DeleteCollaboratorRequest$inboundSchema, DeleteCollaboratorRequest$outboundSchema;
+var init_deletecollaborator = __esm(() => {
+  init_esm();
+  init_primitives();
+  DeleteCollaboratorRequest$inboundSchema = objectType({
+    org: stringType(),
+    name: stringType(),
+    user: stringType(),
+    "X-On-Behalf-Of": stringType().optional()
+  }).transform((v2) => {
+    return remap(v2, {
+      "X-On-Behalf-Of": "xOnBehalfOf"
+    });
+  });
+  DeleteCollaboratorRequest$outboundSchema = objectType({
+    org: stringType(),
+    name: stringType(),
+    user: stringType(),
+    xOnBehalfOf: stringType().optional()
+  }).transform((v2) => {
+    return remap(v2, {
+      xOnBehalfOf: "X-On-Behalf-Of"
+    });
+  });
+});
+
 // src/models/operations/deleteevalrun.ts
 var DeleteEvalRunRequest$inboundSchema, DeleteEvalRunRequest$outboundSchema;
 var init_deleteevalrun = __esm(() => {
@@ -86339,6 +86566,31 @@ var init_deleteprompt = __esm(() => {
   });
 });
 
+// src/models/operations/deleterepo.ts
+var DeleteRepoRequest$inboundSchema, DeleteRepoRequest$outboundSchema;
+var init_deleterepo = __esm(() => {
+  init_esm();
+  init_primitives();
+  DeleteRepoRequest$inboundSchema = objectType({
+    org: stringType(),
+    name: stringType(),
+    "X-On-Behalf-Of": stringType().optional()
+  }).transform((v2) => {
+    return remap(v2, {
+      "X-On-Behalf-Of": "xOnBehalfOf"
+    });
+  });
+  DeleteRepoRequest$outboundSchema = objectType({
+    org: stringType(),
+    name: stringType(),
+    xOnBehalfOf: stringType().optional()
+  }).transform((v2) => {
+    return remap(v2, {
+      xOnBehalfOf: "X-On-Behalf-Of"
+    });
+  });
+});
+
 // src/models/operations/deleteresponse.ts
 var DeleteResponseRequest$inboundSchema, DeleteResponseRequest$outboundSchema;
 var init_deleteresponse = __esm(() => {
@@ -89519,6 +89771,31 @@ var init_getpromptversion = __esm(() => {
   });
 });
 
+// src/models/operations/getrepo.ts
+var GetRepoRequest$inboundSchema, GetRepoRequest$outboundSchema;
+var init_getrepo = __esm(() => {
+  init_esm();
+  init_primitives();
+  GetRepoRequest$inboundSchema = objectType({
+    org: stringType(),
+    name: stringType(),
+    "X-On-Behalf-Of": stringType().optional()
+  }).transform((v2) => {
+    return remap(v2, {
+      "X-On-Behalf-Of": "xOnBehalfOf"
+    });
+  });
+  GetRepoRequest$outboundSchema = objectType({
+    org: stringType(),
+    name: stringType(),
+    xOnBehalfOf: stringType().optional()
+  }).transform((v2) => {
+    return remap(v2, {
+      xOnBehalfOf: "X-On-Behalf-Of"
+    });
+  });
+});
+
 // src/models/operations/getresponse.ts
 var Include2, Include$inboundSchema2, Include$outboundSchema2, GetResponseRequest$inboundSchema, GetResponseRequest$outboundSchema, GetResponseResponseBody$inboundSchema, GetResponseResponseBody$outboundSchema, GetResponseResponse$inboundSchema, GetResponseResponse$outboundSchema;
 var init_getresponse = __esm(() => {
@@ -91083,6 +91360,38 @@ var init_listclusterprices = __esm(() => {
   });
 });
 
+// src/models/operations/listcollaborators.ts
+var ListCollaboratorsRequest$inboundSchema, ListCollaboratorsRequest$outboundSchema, ListCollaboratorsResponseBody$inboundSchema, ListCollaboratorsResponseBody$outboundSchema;
+var init_listcollaborators = __esm(() => {
+  init_esm();
+  init_primitives();
+  init_components();
+  ListCollaboratorsRequest$inboundSchema = objectType({
+    org: stringType(),
+    name: stringType(),
+    "X-On-Behalf-Of": stringType().optional()
+  }).transform((v2) => {
+    return remap(v2, {
+      "X-On-Behalf-Of": "xOnBehalfOf"
+    });
+  });
+  ListCollaboratorsRequest$outboundSchema = objectType({
+    org: stringType(),
+    name: stringType(),
+    xOnBehalfOf: stringType().optional()
+  }).transform((v2) => {
+    return remap(v2, {
+      xOnBehalfOf: "X-On-Behalf-Of"
+    });
+  });
+  ListCollaboratorsResponseBody$inboundSchema = objectType({
+    collaborators: arrayType(Member$inboundSchema)
+  });
+  ListCollaboratorsResponseBody$outboundSchema = objectType({
+    collaborators: arrayType(Member$outboundSchema)
+  });
+});
+
 // src/models/operations/listcompletionfeedback.ts
 var ListCompletionFeedbackQueryParamOrder, QueryParamRating, ListCompletionFeedbackQueryParamOrder$inboundSchema, ListCompletionFeedbackQueryParamOrder$outboundSchema, QueryParamRating$inboundSchema, QueryParamRating$outboundSchema, ListCompletionFeedbackRequest$inboundSchema, ListCompletionFeedbackRequest$outboundSchema;
 var init_listcompletionfeedback = __esm(() => {
@@ -91198,11 +91507,13 @@ var init_listevalruns = __esm(() => {
     after: stringType().optional(),
     limit: numberType().int().default(20),
     suite_id: stringType().optional(),
+    suite_version: numberType().int().optional(),
     status: Status$inboundSchema2.optional(),
     "X-On-Behalf-Of": stringType().optional()
   }).transform((v2) => {
     return remap(v2, {
       suite_id: "suiteId",
+      suite_version: "suiteVersion",
       "X-On-Behalf-Of": "xOnBehalfOf"
     });
   });
@@ -91210,11 +91521,13 @@ var init_listevalruns = __esm(() => {
     after: stringType().optional(),
     limit: numberType().int().default(20),
     suiteId: stringType().optional(),
+    suiteVersion: numberType().int().optional(),
     status: Status$outboundSchema2.optional(),
     xOnBehalfOf: stringType().optional()
   }).transform((v2) => {
     return remap(v2, {
       suiteId: "suite_id",
+      suiteVersion: "suite_version",
       xOnBehalfOf: "X-On-Behalf-Of"
     });
   });
@@ -91534,12 +91847,14 @@ var init_listevalscheduleruns = __esm(() => {
     after: stringType().optional(),
     limit: numberType().int().default(20),
     suite_id: stringType().optional(),
+    suite_version: numberType().int().optional(),
     status: ListEvalScheduleRunsQueryParamStatus$inboundSchema.optional(),
     "X-On-Behalf-Of": stringType().optional()
   }).transform((v2) => {
     return remap(v2, {
       schedule_id: "scheduleId",
       suite_id: "suiteId",
+      suite_version: "suiteVersion",
       "X-On-Behalf-Of": "xOnBehalfOf"
     });
   });
@@ -91548,12 +91863,14 @@ var init_listevalscheduleruns = __esm(() => {
     after: stringType().optional(),
     limit: numberType().int().default(20),
     suiteId: stringType().optional(),
+    suiteVersion: numberType().int().optional(),
     status: ListEvalScheduleRunsQueryParamStatus$outboundSchema.optional(),
     xOnBehalfOf: stringType().optional()
   }).transform((v2) => {
     return remap(v2, {
       scheduleId: "schedule_id",
       suiteId: "suite_id",
+      suiteVersion: "suite_version",
       xOnBehalfOf: "X-On-Behalf-Of"
     });
   });
@@ -92823,6 +93140,34 @@ var init_listpromptversions = __esm(() => {
   });
 });
 
+// src/models/operations/listrepos.ts
+var ListReposRequest$inboundSchema, ListReposRequest$outboundSchema, ListReposResponseBody$inboundSchema, ListReposResponseBody$outboundSchema;
+var init_listrepos = __esm(() => {
+  init_esm();
+  init_primitives();
+  init_components();
+  ListReposRequest$inboundSchema = objectType({
+    "X-On-Behalf-Of": stringType().optional()
+  }).transform((v2) => {
+    return remap(v2, {
+      "X-On-Behalf-Of": "xOnBehalfOf"
+    });
+  });
+  ListReposRequest$outboundSchema = objectType({
+    xOnBehalfOf: stringType().optional()
+  }).transform((v2) => {
+    return remap(v2, {
+      xOnBehalfOf: "X-On-Behalf-Of"
+    });
+  });
+  ListReposResponseBody$inboundSchema = objectType({
+    repos: arrayType(Repo$inboundSchema)
+  });
+  ListReposResponseBody$outboundSchema = objectType({
+    repos: arrayType(Repo$outboundSchema)
+  });
+});
+
 // src/models/operations/listresponsefeedback.ts
 var ListResponseFeedbackQueryParamOrder, ListResponseFeedbackQueryParamRating, ListResponseFeedbackQueryParamOrder$inboundSchema, ListResponseFeedbackQueryParamOrder$outboundSchema, ListResponseFeedbackQueryParamRating$inboundSchema, ListResponseFeedbackQueryParamRating$outboundSchema, ListResponseFeedbackRequest$inboundSchema, ListResponseFeedbackRequest$outboundSchema;
 var init_listresponsefeedback = __esm(() => {
@@ -93657,6 +94002,36 @@ var init_modifyvectorstore = __esm(() => {
   });
 });
 
+// src/models/operations/patchrepo.ts
+var PatchRepoRequest$inboundSchema2, PatchRepoRequest$outboundSchema2;
+var init_patchrepo = __esm(() => {
+  init_esm();
+  init_primitives();
+  init_components();
+  PatchRepoRequest$inboundSchema2 = objectType({
+    org: stringType(),
+    name: stringType(),
+    "X-On-Behalf-Of": stringType().optional(),
+    PatchRepoRequest: PatchRepoRequest$inboundSchema
+  }).transform((v2) => {
+    return remap(v2, {
+      "X-On-Behalf-Of": "xOnBehalfOf",
+      PatchRepoRequest: "patchRepoRequest"
+    });
+  });
+  PatchRepoRequest$outboundSchema2 = objectType({
+    org: stringType(),
+    name: stringType(),
+    xOnBehalfOf: stringType().optional(),
+    patchRepoRequest: PatchRepoRequest$outboundSchema
+  }).transform((v2) => {
+    return remap(v2, {
+      xOnBehalfOf: "X-On-Behalf-Of",
+      patchRepoRequest: "PatchRepoRequest"
+    });
+  });
+});
+
 // src/models/operations/pauseagentschedule.ts
 var PauseAgentScheduleRequest$inboundSchema, PauseAgentScheduleRequest$outboundSchema;
 var init_pauseagentschedule = __esm(() => {
@@ -93740,6 +94115,38 @@ var init_proxybrowserportrequest = __esm(() => {
   });
 });
 
+// src/models/operations/putcollaborator.ts
+var PutCollaboratorRequest$inboundSchema, PutCollaboratorRequest$outboundSchema;
+var init_putcollaborator = __esm(() => {
+  init_esm();
+  init_primitives();
+  init_components();
+  PutCollaboratorRequest$inboundSchema = objectType({
+    org: stringType(),
+    name: stringType(),
+    user: stringType(),
+    "X-On-Behalf-Of": stringType().optional(),
+    CollaboratorRequest: CollaboratorRequest$inboundSchema
+  }).transform((v2) => {
+    return remap(v2, {
+      "X-On-Behalf-Of": "xOnBehalfOf",
+      CollaboratorRequest: "collaboratorRequest"
+    });
+  });
+  PutCollaboratorRequest$outboundSchema = objectType({
+    org: stringType(),
+    name: stringType(),
+    user: stringType(),
+    xOnBehalfOf: stringType().optional(),
+    collaboratorRequest: CollaboratorRequest$outboundSchema
+  }).transform((v2) => {
+    return remap(v2, {
+      xOnBehalfOf: "X-On-Behalf-Of",
+      collaboratorRequest: "CollaboratorRequest"
+    });
+  });
+});
+
 // src/models/operations/putorgautomodel.ts
 var PutOrgAutoModelRequest$inboundSchema2, PutOrgAutoModelRequest$outboundSchema2;
 var init_putorgautomodel = __esm(() => {
@@ -97096,6 +97503,7 @@ var init_operations = __esm(() => {
   init_creatememorystore();
   init_createprompt();
   init_createpromptversion();
+  init_createrepo();
   init_createresponse();
   init_createresponsefeedback();
   init_createscopedapikey2();
@@ -97116,6 +97524,7 @@ var init_operations = __esm(() => {
   init_deleteagentschedule();
   init_deleteapikeybudget();
   init_deleteclusterorg2();
+  init_deletecollaborator();
   init_deleteevalrun();
   init_deleteevalschedule();
   init_deleteevalsuite();
@@ -97130,6 +97539,7 @@ var init_operations = __esm(() => {
   init_deleteorgautomodel();
   init_deleteorgbudget();
   init_deleteprompt();
+  init_deleterepo();
   init_deleteresponse();
   init_deletesecret();
   init_deleteserviceaccount2();
@@ -97190,6 +97600,7 @@ var init_operations = __esm(() => {
   init_getorgratelimit2();
   init_getprompt();
   init_getpromptversion();
+  init_getrepo();
   init_getresponse();
   init_getresponsefeedback();
   init_getresponsesusage();
@@ -97231,6 +97642,7 @@ var init_operations = __esm(() => {
   init_listclusterinvites2();
   init_listclusterorgs2();
   init_listclusterprices();
+  init_listcollaborators();
   init_listcompletionfeedback();
   init_listeffectiveprices();
   init_listembeddingmodels();
@@ -97258,6 +97670,7 @@ var init_operations = __esm(() => {
   init_listpreconfiguredskills();
   init_listprompts();
   init_listpromptversions();
+  init_listrepos();
   init_listresponsefeedback();
   init_listresponses();
   init_listscopedapikeys2();
@@ -97281,9 +97694,11 @@ var init_operations = __esm(() => {
   init_llmgrant();
   init_llmrevoke();
   init_modifyvectorstore();
+  init_patchrepo();
   init_pauseagentschedule();
   init_pausefinetuningjob();
   init_proxybrowserportrequest();
+  init_putcollaborator();
   init_putorgautomodel();
   init_regeneratescopedapikey2();
   init_regenerateserviceaccountapikey2();
@@ -111371,7 +111786,8 @@ async function $do120(client, request, options) {
     after: payload.after,
     limit: payload.limit,
     status: payload.status,
-    suite_id: payload.suite_id
+    suite_id: payload.suite_id,
+    suite_version: payload.suite_version
   });
   const headers = new Headers(compactMap({
     Accept: "application/json",
@@ -111455,7 +111871,7 @@ var init_llmEvalsListRuns2 = __esm(() => {
     name: "llm-evals-list-runs",
     description: `List eval runs
 
-Returns eval runs visible to the authenticated team context.`,
+Returns eval runs visible to the authenticated team context. suite_version is a per-suite ordinal and must be paired with suite_id; supplying it alone returns 400.`,
     args: args118,
     tool: async (client, args119, ctx) => {
       const [result, apiCall] = await llmEvalsListRuns(client, args119.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
@@ -111617,7 +112033,8 @@ async function $do122(client, request, options) {
     after: payload.after,
     limit: payload.limit,
     status: payload.status,
-    suite_id: payload.suite_id
+    suite_id: payload.suite_id,
+    suite_version: payload.suite_version
   });
   const headers = new Headers(compactMap({
     Accept: "application/json",
@@ -111701,7 +112118,7 @@ var init_llmEvalsListScheduleRuns2 = __esm(() => {
     name: "llm-evals-list-schedule-runs",
     description: `List runs created by an eval schedule
 
-Returns eval runs that were created by the given schedule.`,
+Returns eval runs that were created by the given schedule. suite_version may be used without suite_id here, since the schedule already pins the suite; supplying a suite_id that is not the schedule's returns 400.`,
     args: args120,
     tool: async (client, args121, ctx) => {
       const [result, apiCall] = await llmEvalsListScheduleRuns(client, args121.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
@@ -130059,20 +130476,34 @@ Revoke a role from a user for a resource, or remove public access by using "*" a
   };
 });
 
-// src/funcs/sandboxCreate.ts
-function sandboxCreate(client, request, options) {
+// src/funcs/reposCollaboratorsAdd.ts
+function reposCollaboratorsAdd(client, request, options) {
   return new APIPromise($do279(client, request, options));
 }
 async function $do279(client, request, options) {
-  const parsed = safeParse4(request, (value) => CreateSessionRequest$outboundSchema2.parse(value), "Input validation failed");
+  const parsed = safeParse4(request, (value) => PutCollaboratorRequest$outboundSchema.parse(value), "Input validation failed");
   if (!parsed.ok) {
     return [parsed, { status: "invalid" }];
   }
   const payload = parsed.value;
-  const body = encodeJSON("body", payload.CreateSessionRequest, {
+  const body = encodeJSON("body", payload.CollaboratorRequest, {
     explode: true
   });
-  const path = pathToFunc("/api/v1/sandbox/sessions")();
+  const pathParams = {
+    name: encodeSimple("name", payload.name, {
+      explode: false,
+      charEncoding: "percent"
+    }),
+    org: encodeSimple("org", payload.org, {
+      explode: false,
+      charEncoding: "percent"
+    }),
+    user: encodeSimple("user", payload.user, {
+      explode: false,
+      charEncoding: "percent"
+    })
+  };
+  const path = pathToFunc("/api/v1/repos/{org}/{name}/collaborators/{user}")(pathParams);
   const headers = new Headers(compactMap({
     "Content-Type": "application/json",
     Accept: "application/json",
@@ -130084,7 +130515,7 @@ async function $do279(client, request, options) {
   const context = {
     options: client._options,
     baseURL: options?.serverURL ?? client._baseURL ?? "",
-    operationID: "createSession",
+    operationID: "putCollaborator",
     oAuth2Scopes: null,
     resolvedSecurity: requestSecurity,
     securitySource: client._options.bearerAuth,
@@ -130102,7 +130533,7 @@ async function $do279(client, request, options) {
   };
   const requestRes = client._createRequest(context, {
     security: requestSecurity,
-    method: "POST",
+    method: "PUT",
     baseURL: options?.serverURL,
     path,
     headers,
@@ -130127,13 +130558,13 @@ async function $do279(client, request, options) {
   const responseFields = {
     HttpMeta: { Response: response, Request: req }
   };
-  const [result] = await match(json([200, 202], CreateSessionResponse$inboundSchema), jsonErr(422, HTTPValidationError$inboundSchema), fail("4XX"), fail([501, "5XX"]))(response, req, { extraFields: responseFields });
+  const [result] = await match(json(200, Member$inboundSchema), jsonErr([400, 401, 403, 404], RepoError$inboundSchema), jsonErr(500, RepoError$inboundSchema), fail("4XX"), fail("5XX"))(response, req, { extraFields: responseFields });
   if (!result.ok) {
     return [result, { status: "complete", request: req, response }];
   }
   return [result, { status: "complete", request: req, response }];
 }
-var init_sandboxCreate = __esm(() => {
+var init_reposCollaboratorsAdd = __esm(() => {
   init_encodings();
   init_http();
   init_matchers();
@@ -130147,23 +130578,26 @@ var init_sandboxCreate = __esm(() => {
   init_async();
 });
 
-// src/mcp-server/tools/sandboxCreate.ts
-var args271, tool$sandboxCreate;
-var init_sandboxCreate2 = __esm(() => {
-  init_sandboxCreate();
+// src/mcp-server/tools/reposCollaboratorsAdd.ts
+var args271, tool$reposCollaboratorsAdd;
+var init_reposCollaboratorsAdd2 = __esm(() => {
+  init_reposCollaboratorsAdd();
   init_operations();
   init_tools();
   args271 = {
-    request: CreateSessionRequest$inboundSchema2
+    request: PutCollaboratorRequest$inboundSchema
   };
-  tool$sandboxCreate = {
-    name: "sandbox-create",
-    description: `Create Session
+  tool$reposCollaboratorsAdd = {
+    name: "repos-collaborators-add",
+    description: `Add or re-role a collaborator
 
-Create a sandbox session and return its public session metadata, session token, and provider. Set \`session_kind\` to \`browser\` to start a browser-backed session instead of a standard command/code sandbox. Set \`queue_if_full\` to \`true\` to queue the request instead of failing when runner capacity is temporarily unavailable. It does not queue requests for session kinds the deployment does not support. Browser sessions require a Firecracker-backed deployment; standard-only deployments reject them immediately with \`browser_sessions_not_enabled\`.`,
+Adds a collaborator or changes their role (owner or org admin only): DB
+upsert (authoritative) then a best-effort fga grant. Owner is not a
+grantable role — it is fixed to the creator at create time.
+`,
     args: args271,
     tool: async (client, args272, ctx) => {
-      const [result, apiCall] = await sandboxCreate(client, args272.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
+      const [result, apiCall] = await reposCollaboratorsAdd(client, args272.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
       if (!result.ok) {
         return {
           content: [{ type: "text", text: result.error.message }],
@@ -130176,32 +130610,30 @@ Create a sandbox session and return its public session metadata, session token,
   };
 });
 
-// src/funcs/sandboxDownloadArchive.ts
-function sandboxDownloadArchive(client, request, options) {
+// src/funcs/reposCollaboratorsList.ts
+function reposCollaboratorsList(client, request, options) {
   return new APIPromise($do280(client, request, options));
 }
 async function $do280(client, request, options) {
-  const parsed = safeParse4(request, (value) => DownloadWorkspaceArchiveRequest$outboundSchema.parse(value), "Input validation failed");
+  const parsed = safeParse4(request, (value) => ListCollaboratorsRequest$outboundSchema.parse(value), "Input validation failed");
   if (!parsed.ok) {
     return [parsed, { status: "invalid" }];
   }
   const payload = parsed.value;
-  const body = encodeJSON("body", payload.WorkspaceArchiveRequest, {
-    explode: true
-  });
+  const body = null;
   const pathParams = {
-    session_id: encodeSimple("session_id", payload.session_id, {
+    name: encodeSimple("name", payload.name, {
+      explode: false,
+      charEncoding: "percent"
+    }),
+    org: encodeSimple("org", payload.org, {
       explode: false,
       charEncoding: "percent"
     })
   };
-  const path = pathToFunc("/api/v1/sandbox/sessions/{session_id}/workspace/archive")(pathParams);
-  const query = encodeFormQuery({
-    session_token: payload.session_token
-  });
+  const path = pathToFunc("/api/v1/repos/{org}/{name}/collaborators")(pathParams);
   const headers = new Headers(compactMap({
-    "Content-Type": "application/json",
-    Accept: "application/zip",
+    Accept: "application/json",
     "X-On-Behalf-Of": encodeSimple("X-On-Behalf-Of", payload["X-On-Behalf-Of"], { explode: false, charEncoding: "none" })
   }));
   const secConfig = await extractSecurity(client._options.bearerAuth);
@@ -130210,7 +130642,7 @@ async function $do280(client, request, options) {
   const context = {
     options: client._options,
     baseURL: options?.serverURL ?? client._baseURL ?? "",
-    operationID: "downloadWorkspaceArchive",
+    operationID: "listCollaborators",
     oAuth2Scopes: null,
     resolvedSecurity: requestSecurity,
     securitySource: client._options.bearerAuth,
@@ -130228,11 +130660,10 @@ async function $do280(client, request, options) {
   };
   const requestRes = client._createRequest(context, {
     security: requestSecurity,
-    method: "POST",
+    method: "GET",
     baseURL: options?.serverURL,
     path,
     headers,
-    query,
     body,
     userAgent: client._options.userAgent,
     timeoutMs: options?.timeoutMs || client._options.timeoutMs || -1
@@ -130254,16 +130685,13 @@ async function $do280(client, request, options) {
   const responseFields = {
     HttpMeta: { Response: response, Request: req }
   };
-  const [result] = await match(stream(200, instanceOfType(ReadableStream), {
-    ctype: "application/zip"
-  }), jsonErr(422, HTTPValidationError$inboundSchema), fail("4XX"), fail("5XX"))(response, req, { extraFields: responseFields });
+  const [result] = await match(json(200, ListCollaboratorsResponseBody$inboundSchema), jsonErr([401, 403, 404], RepoError$inboundSchema), fail("4XX"), fail("5XX"))(response, req, { extraFields: responseFields });
   if (!result.ok) {
     return [result, { status: "complete", request: req, response }];
   }
   return [result, { status: "complete", request: req, response }];
 }
-var init_sandboxDownloadArchive = __esm(() => {
-  init_esm();
+var init_reposCollaboratorsList = __esm(() => {
   init_encodings();
   init_http();
   init_matchers();
@@ -130276,23 +130704,25 @@ var init_sandboxDownloadArchive = __esm(() => {
   init_async();
 });
 
-// src/mcp-server/tools/sandboxDownloadArchive.ts
-var args272, tool$sandboxDownloadArchive;
-var init_sandboxDownloadArchive2 = __esm(() => {
-  init_sandboxDownloadArchive();
+// src/mcp-server/tools/reposCollaboratorsList.ts
+var args272, tool$reposCollaboratorsList;
+var init_reposCollaboratorsList2 = __esm(() => {
+  init_reposCollaboratorsList();
   init_operations();
   init_tools();
   args272 = {
-    request: DownloadWorkspaceArchiveRequest$inboundSchema
+    request: ListCollaboratorsRequest$inboundSchema
   };
-  tool$sandboxDownloadArchive = {
-    name: "sandbox-download-archive",
-    description: `Download Workspace Archive
+  tool$reposCollaboratorsList = {
+    name: "repos-collaborators-list",
+    description: `List a repository's collaborators
 
-Download a zip archive containing the selected workspace paths.`,
+Lists the repository's explicit collaborators (\`repo_members\`). Any
+caller with reader access may see them.
+`,
     args: args272,
     tool: async (client, args273, ctx) => {
-      const [result, apiCall] = await sandboxDownloadArchive(client, args273.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
+      const [result, apiCall] = await reposCollaboratorsList(client, args273.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
       if (!result.ok) {
         return {
           content: [{ type: "text", text: result.error.message }],
@@ -130305,33 +130735,34 @@ Download a zip archive containing the selected workspace paths.`,
   };
 });
 
-// src/funcs/sandboxDownloadFile.ts
-function sandboxDownloadFile(client, request, options) {
+// src/funcs/reposCollaboratorsRemove.ts
+function reposCollaboratorsRemove(client, request, options) {
   return new APIPromise($do281(client, request, options));
 }
 async function $do281(client, request, options) {
-  const parsed = safeParse4(request, (value) => DownloadWorkspaceFileRequest$outboundSchema.parse(value), "Input validation failed");
+  const parsed = safeParse4(request, (value) => DeleteCollaboratorRequest$outboundSchema.parse(value), "Input validation failed");
   if (!parsed.ok) {
     return [parsed, { status: "invalid" }];
   }
   const payload = parsed.value;
   const body = null;
   const pathParams = {
-    file_path: encodeSimple("file_path", payload.file_path, {
+    name: encodeSimple("name", payload.name, {
       explode: false,
       charEncoding: "percent"
     }),
-    session_id: encodeSimple("session_id", payload.session_id, {
+    org: encodeSimple("org", payload.org, {
+      explode: false,
+      charEncoding: "percent"
+    }),
+    user: encodeSimple("user", payload.user, {
       explode: false,
       charEncoding: "percent"
     })
   };
-  const path = pathToFunc("/api/v1/sandbox/sessions/{session_id}/workspace/files/{file_path}")(pathParams);
-  const query = encodeFormQuery({
-    session_token: payload.session_token
-  });
+  const path = pathToFunc("/api/v1/repos/{org}/{name}/collaborators/{user}")(pathParams);
   const headers = new Headers(compactMap({
-    Accept: "application/octet-stream",
+    Accept: "application/json",
     "X-On-Behalf-Of": encodeSimple("X-On-Behalf-Of", payload["X-On-Behalf-Of"], { explode: false, charEncoding: "none" })
   }));
   const secConfig = await extractSecurity(client._options.bearerAuth);
@@ -130340,7 +130771,7 @@ async function $do281(client, request, options) {
   const context = {
     options: client._options,
     baseURL: options?.serverURL ?? client._baseURL ?? "",
-    operationID: "downloadWorkspaceFile",
+    operationID: "deleteCollaborator",
     oAuth2Scopes: null,
     resolvedSecurity: requestSecurity,
     securitySource: client._options.bearerAuth,
@@ -130358,11 +130789,10 @@ async function $do281(client, request, options) {
   };
   const requestRes = client._createRequest(context, {
     security: requestSecurity,
-    method: "GET",
+    method: "DELETE",
     baseURL: options?.serverURL,
     path,
     headers,
-    query,
     body,
     userAgent: client._options.userAgent,
     timeoutMs: options?.timeoutMs || client._options.timeoutMs || -1
@@ -130384,13 +130814,13 @@ async function $do281(client, request, options) {
   const responseFields = {
     HttpMeta: { Response: response, Request: req }
   };
-  const [result] = await match(stream(200, instanceOfType(ReadableStream)), jsonErr(422, HTTPValidationError$inboundSchema), fail("4XX"), fail("5XX"))(response, req, { extraFields: responseFields });
+  const [result] = await match(nil(204, voidType()), jsonErr([401, 403, 404], RepoError$inboundSchema), jsonErr(500, RepoError$inboundSchema), fail("4XX"), fail("5XX"))(response, req, { extraFields: responseFields });
   if (!result.ok) {
     return [result, { status: "complete", request: req, response }];
   }
   return [result, { status: "complete", request: req, response }];
 }
-var init_sandboxDownloadFile = __esm(() => {
+var init_reposCollaboratorsRemove = __esm(() => {
   init_esm();
   init_encodings();
   init_http();
@@ -130404,54 +130834,50 @@ var init_sandboxDownloadFile = __esm(() => {
   init_async();
 });
 
-// src/mcp-server/tools/sandboxDownloadFile.ts
-var args273, tool$sandboxDownloadFile;
-var init_sandboxDownloadFile2 = __esm(() => {
-  init_sandboxDownloadFile();
+// src/mcp-server/tools/reposCollaboratorsRemove.ts
+var args273, tool$reposCollaboratorsRemove;
+var init_reposCollaboratorsRemove2 = __esm(() => {
+  init_reposCollaboratorsRemove();
   init_operations();
   init_tools();
   args273 = {
-    request: DownloadWorkspaceFileRequest$inboundSchema
+    request: DeleteCollaboratorRequest$inboundSchema
   };
-  tool$sandboxDownloadFile = {
-    name: "sandbox-download-file",
-    description: `Download Workspace File
+  tool$reposCollaboratorsRemove = {
+    name: "repos-collaborators-remove",
+    description: `Remove a collaborator
 
-Download raw bytes from a file in the session workspace.`,
+Removes a collaborator (owner or org admin only): DB delete
+(authoritative) then a best-effort fga revoke of the removed role.
+`,
     args: args273,
     tool: async (client, args274, ctx) => {
-      const [result, apiCall] = await sandboxDownloadFile(client, args274.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
+      const [result, apiCall] = await reposCollaboratorsRemove(client, args274.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
       if (!result.ok) {
         return {
           content: [{ type: "text", text: result.error.message }],
           isError: true
         };
       }
-      const value = result.value;
-      return formatResult(value, apiCall);
+      return formatResult(undefined, apiCall);
     }
   };
 });
 
-// src/funcs/sandboxGet.ts
-function sandboxGet(client, request, options) {
+// src/funcs/reposCreate.ts
+function reposCreate(client, request, options) {
   return new APIPromise($do282(client, request, options));
 }
 async function $do282(client, request, options) {
-  const parsed = safeParse4(request, (value) => GetSessionRequest$outboundSchema.parse(value), "Input validation failed");
+  const parsed = safeParse4(request, (value) => CreateRepoRequest$outboundSchema2.parse(value), "Input validation failed");
   if (!parsed.ok) {
     return [parsed, { status: "invalid" }];
   }
   const payload = parsed.value;
-  const body = null;
-  const pathParams = {
-    session_id: encodeSimple("session_id", payload.session_id, {
-      explode: false,
-      charEncoding: "percent"
-    })
-  };
-  const path = pathToFunc("/api/v1/sandbox/sessions/{session_id}")(pathParams);
+  const body = encodeJSON("body", payload.CreateRepoRequest, { explode: true });
+  const path = pathToFunc("/api/v1/repos")();
   const headers = new Headers(compactMap({
+    "Content-Type": "application/json",
     Accept: "application/json",
     "X-On-Behalf-Of": encodeSimple("X-On-Behalf-Of", payload["X-On-Behalf-Of"], { explode: false, charEncoding: "none" })
   }));
@@ -130461,7 +130887,7 @@ async function $do282(client, request, options) {
   const context = {
     options: client._options,
     baseURL: options?.serverURL ?? client._baseURL ?? "",
-    operationID: "getSession",
+    operationID: "createRepo",
     oAuth2Scopes: null,
     resolvedSecurity: requestSecurity,
     securitySource: client._options.bearerAuth,
@@ -130479,7 +130905,7 @@ async function $do282(client, request, options) {
   };
   const requestRes = client._createRequest(context, {
     security: requestSecurity,
-    method: "GET",
+    method: "POST",
     baseURL: options?.serverURL,
     path,
     headers,
@@ -130504,13 +130930,13 @@ async function $do282(client, request, options) {
   const responseFields = {
     HttpMeta: { Response: response, Request: req }
   };
-  const [result] = await match(json(200, SessionRecord$inboundSchema), jsonErr(422, HTTPValidationError$inboundSchema), fail("4XX"), fail("5XX"))(response, req, { extraFields: responseFields });
+  const [result] = await match(json(201, Repo$inboundSchema), jsonErr([400, 401, 409], RepoError$inboundSchema), jsonErr([500, 502, 503], RepoError$inboundSchema), fail("4XX"), fail("5XX"))(response, req, { extraFields: responseFields });
   if (!result.ok) {
     return [result, { status: "complete", request: req, response }];
   }
   return [result, { status: "complete", request: req, response }];
 }
-var init_sandboxGet = __esm(() => {
+var init_reposCreate = __esm(() => {
   init_encodings();
   init_http();
   init_matchers();
@@ -130524,23 +130950,26 @@ var init_sandboxGet = __esm(() => {
   init_async();
 });
 
-// src/mcp-server/tools/sandboxGet.ts
-var args274, tool$sandboxGet;
-var init_sandboxGet2 = __esm(() => {
-  init_sandboxGet();
+// src/mcp-server/tools/reposCreate.ts
+var args274, tool$reposCreate;
+var init_reposCreate2 = __esm(() => {
+  init_reposCreate();
   init_operations();
   init_tools();
   args274 = {
-    request: GetSessionRequest$inboundSchema
+    request: CreateRepoRequest$inboundSchema2
   };
-  tool$sandboxGet = {
-    name: "sandbox-get",
-    description: `Get Session
+  tool$reposCreate = {
+    name: "repos-create",
+    description: `Create a repository
 
-Return the current state, configuration, and resource allocation for a sandbox session.`,
+Provisions a repository: DB insert (authoritative) → Gitea create
+(rolled back on failure) → best-effort fga owner tuple. The caller
+becomes the owner.
+`,
     args: args274,
     tool: async (client, args275, ctx) => {
-      const [result, apiCall] = await sandboxGet(client, args275.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
+      const [result, apiCall] = await reposCreate(client, args275.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
       if (!result.ok) {
         return {
           content: [{ type: "text", text: result.error.message }],
@@ -130553,27 +130982,28 @@ Return the current state, configuration, and resource allocation for a sandbox s
   };
 });
 
-// src/funcs/sandboxGetBrowserUrl.ts
-function sandboxGetBrowserUrl(client, request, options) {
+// src/funcs/reposDelete.ts
+function reposDelete(client, request, options) {
   return new APIPromise($do283(client, request, options));
 }
 async function $do283(client, request, options) {
-  const parsed = safeParse4(request, (value) => GetBrowserSessionUrlRequest$outboundSchema.parse(value), "Input validation failed");
+  const parsed = safeParse4(request, (value) => DeleteRepoRequest$outboundSchema.parse(value), "Input validation failed");
   if (!parsed.ok) {
     return [parsed, { status: "invalid" }];
   }
   const payload = parsed.value;
   const body = null;
   const pathParams = {
-    session_id: encodeSimple("session_id", payload.session_id, {
+    name: encodeSimple("name", payload.name, {
+      explode: false,
+      charEncoding: "percent"
+    }),
+    org: encodeSimple("org", payload.org, {
       explode: false,
       charEncoding: "percent"
     })
   };
-  const path = pathToFunc("/api/v1/sandbox/sessions/{session_id}/browser-url")(pathParams);
-  const query = encodeFormQuery({
-    session_token: payload.session_token
-  });
+  const path = pathToFunc("/api/v1/repos/{org}/{name}")(pathParams);
   const headers = new Headers(compactMap({
     Accept: "application/json",
     "X-On-Behalf-Of": encodeSimple("X-On-Behalf-Of", payload["X-On-Behalf-Of"], { explode: false, charEncoding: "none" })
@@ -130584,7 +131014,7 @@ async function $do283(client, request, options) {
   const context = {
     options: client._options,
     baseURL: options?.serverURL ?? client._baseURL ?? "",
-    operationID: "getBrowserSessionUrl",
+    operationID: "deleteRepo",
     oAuth2Scopes: null,
     resolvedSecurity: requestSecurity,
     securitySource: client._options.bearerAuth,
@@ -130602,11 +131032,10 @@ async function $do283(client, request, options) {
   };
   const requestRes = client._createRequest(context, {
     security: requestSecurity,
-    method: "GET",
+    method: "DELETE",
     baseURL: options?.serverURL,
     path,
     headers,
-    query,
     body,
     userAgent: client._options.userAgent,
     timeoutMs: options?.timeoutMs || client._options.timeoutMs || -1
@@ -130628,13 +131057,14 @@ async function $do283(client, request, options) {
   const responseFields = {
     HttpMeta: { Response: response, Request: req }
   };
-  const [result] = await match(json(200, SessionUrlResponse$inboundSchema), jsonErr(422, HTTPValidationError$inboundSchema), fail("4XX"), fail([501, "5XX"]))(response, req, { extraFields: responseFields });
+  const [result] = await match(nil(204, voidType()), jsonErr([401, 403, 404], RepoError$inboundSchema), jsonErr(500, RepoError$inboundSchema), fail("4XX"), fail("5XX"))(response, req, { extraFields: responseFields });
   if (!result.ok) {
     return [result, { status: "complete", request: req, response }];
   }
   return [result, { status: "complete", request: req, response }];
 }
-var init_sandboxGetBrowserUrl = __esm(() => {
+var init_reposDelete = __esm(() => {
+  init_esm();
   init_encodings();
   init_http();
   init_matchers();
@@ -130642,156 +131072,63 @@ var init_sandboxGetBrowserUrl = __esm(() => {
   init_schemas4();
   init_security();
   init_url();
-  init_components();
   init_errors4();
   init_operations();
   init_async();
 });
 
-// src/mcp-server/tools/sandboxGetBrowserUrl.ts
-var args275, tool$sandboxGetBrowserUrl;
-var init_sandboxGetBrowserUrl2 = __esm(() => {
-  init_sandboxGetBrowserUrl();
+// src/mcp-server/tools/reposDelete.ts
+var args275, tool$reposDelete;
+var init_reposDelete2 = __esm(() => {
+  init_reposDelete();
   init_operations();
   init_tools();
   args275 = {
-    request: GetBrowserSessionUrlRequest$inboundSchema
+    request: DeleteRepoRequest$inboundSchema
   };
-  tool$sandboxGetBrowserUrl = {
-    name: "sandbox-get-browser-url",
-    description: `Get Browser Session URL
+  tool$reposDelete = {
+    name: "repos-delete",
+    description: `Delete a repository
 
-Return the public gateway URL for a browser session's Chrome DevTools Protocol endpoint. Playwright can use this HTTP endpoint directly. For clients that require a WebSocket endpoint, request \`json/version\` and use its rewritten \`webSocketDebuggerUrl\`. Insert subpaths before the query string; for example, use \`/ports/9222/json/version?session_token=...\`. Send the same MKA1 API-key authorization header on the HTTP and WebSocket requests. Standard sessions do not expose a public URL; use the command, code, and workspace operations instead.`,
+Removes a repository; owner or org admin only. The DB delete is
+authoritative; the Gitea and fga teardowns are best-effort cleanup.
+`,
     args: args275,
     tool: async (client, args276, ctx) => {
-      const [result, apiCall] = await sandboxGetBrowserUrl(client, args276.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
+      const [result, apiCall] = await reposDelete(client, args276.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
       if (!result.ok) {
         return {
           content: [{ type: "text", text: result.error.message }],
           isError: true
         };
       }
-      const value = result.value;
-      return formatResult(value, apiCall);
-    }
-  };
-});
-
-// src/funcs/sandboxGetPricing.ts
-function sandboxGetPricing(client, options) {
-  return new APIPromise($do284(client, options));
-}
-async function $do284(client, options) {
-  const path = pathToFunc("/api/v1/sandbox/pricing")();
-  const headers = new Headers(compactMap({
-    Accept: "application/json"
-  }));
-  const secConfig = await extractSecurity(client._options.bearerAuth);
-  const securityInput = secConfig == null ? {} : { bearerAuth: secConfig };
-  const requestSecurity = resolveGlobalSecurity(securityInput);
-  const context = {
-    options: client._options,
-    baseURL: options?.serverURL ?? client._baseURL ?? "",
-    operationID: "getSandboxPricing",
-    oAuth2Scopes: null,
-    resolvedSecurity: requestSecurity,
-    securitySource: client._options.bearerAuth,
-    retryConfig: options?.retries || client._options.retryConfig || {
-      strategy: "backoff",
-      backoff: {
-        initialInterval: 500,
-        maxInterval: 5000,
-        exponent: 1.5,
-        maxElapsedTime: 15000
-      },
-      retryConnectionErrors: true
-    },
-    retryCodes: options?.retryCodes || ["429", "500", "502", "503", "504"]
-  };
-  const requestRes = client._createRequest(context, {
-    security: requestSecurity,
-    method: "GET",
-    baseURL: options?.serverURL,
-    path,
-    headers,
-    userAgent: client._options.userAgent,
-    timeoutMs: options?.timeoutMs || client._options.timeoutMs || -1
-  }, options);
-  if (!requestRes.ok) {
-    return [requestRes, { status: "invalid" }];
-  }
-  const req = requestRes.value;
-  const doResult = await client._do(req, {
-    context,
-    isErrorStatusCode: (statusCode) => matchStatusCode({ status: statusCode }, ["4XX", "5XX"]),
-    retryConfig: context.retryConfig,
-    retryCodes: context.retryCodes
-  });
-  if (!doResult.ok) {
-    return [doResult, { status: "request-error", request: req }];
-  }
-  const response = doResult.value;
-  const [result] = await match(json(200, SandboxPricingCard$inboundSchema), fail("4XX"), fail("5XX"))(response, req);
-  if (!result.ok) {
-    return [result, { status: "complete", request: req, response }];
-  }
-  return [result, { status: "complete", request: req, response }];
-}
-var init_sandboxGetPricing = __esm(() => {
-  init_http();
-  init_matchers();
-  init_primitives();
-  init_security();
-  init_url();
-  init_components();
-  init_async();
-});
-
-// src/mcp-server/tools/sandboxGetPricing.ts
-var tool$sandboxGetPricing;
-var init_sandboxGetPricing2 = __esm(() => {
-  init_sandboxGetPricing();
-  init_tools();
-  tool$sandboxGetPricing = {
-    name: "sandbox-get-pricing",
-    description: `Get Sandbox Pricing
-
-Current sandbox pricing rate card, keyed by SKU (\`standard\`, \`browser\`, \`eval-python\`). Metered sandbox usage is billed \`hours × (per_hour + reserved_memory_GiB × per_gib_hour)\`; SKUs without a configured rate accrue no spend. Cluster admins only.`,
-    tool: async (client, ctx) => {
-      const [result, apiCall] = await sandboxGetPricing(client, { fetchOptions: { signal: ctx.signal } }).$inspect();
-      if (!result.ok) {
-        return {
-          content: [{ type: "text", text: result.error.message }],
-          isError: true
-        };
-      }
-      const value = result.value;
-      return formatResult(value, apiCall);
+      return formatResult(undefined, apiCall);
     }
   };
 });
 
-// src/funcs/sandboxGetWorkspace.ts
-function sandboxGetWorkspace(client, request, options) {
-  return new APIPromise($do285(client, request, options));
+// src/funcs/reposGet.ts
+function reposGet(client, request, options) {
+  return new APIPromise($do284(client, request, options));
 }
-async function $do285(client, request, options) {
-  const parsed = safeParse4(request, (value) => GetWorkspaceRequest$outboundSchema.parse(value), "Input validation failed");
+async function $do284(client, request, options) {
+  const parsed = safeParse4(request, (value) => GetRepoRequest$outboundSchema.parse(value), "Input validation failed");
   if (!parsed.ok) {
     return [parsed, { status: "invalid" }];
   }
   const payload = parsed.value;
   const body = null;
   const pathParams = {
-    session_id: encodeSimple("session_id", payload.session_id, {
+    name: encodeSimple("name", payload.name, {
+      explode: false,
+      charEncoding: "percent"
+    }),
+    org: encodeSimple("org", payload.org, {
       explode: false,
       charEncoding: "percent"
     })
   };
-  const path = pathToFunc("/api/v1/sandbox/sessions/{session_id}/workspace")(pathParams);
-  const query = encodeFormQuery({
-    session_token: payload.session_token
-  });
+  const path = pathToFunc("/api/v1/repos/{org}/{name}")(pathParams);
   const headers = new Headers(compactMap({
     Accept: "application/json",
     "X-On-Behalf-Of": encodeSimple("X-On-Behalf-Of", payload["X-On-Behalf-Of"], { explode: false, charEncoding: "none" })
@@ -130802,7 +131139,7 @@ async function $do285(client, request, options) {
   const context = {
     options: client._options,
     baseURL: options?.serverURL ?? client._baseURL ?? "",
-    operationID: "getWorkspace",
+    operationID: "getRepo",
     oAuth2Scopes: null,
     resolvedSecurity: requestSecurity,
     securitySource: client._options.bearerAuth,
@@ -130824,7 +131161,6 @@ async function $do285(client, request, options) {
     baseURL: options?.serverURL,
     path,
     headers,
-    query,
     body,
     userAgent: client._options.userAgent,
     timeoutMs: options?.timeoutMs || client._options.timeoutMs || -1
@@ -130846,13 +131182,13 @@ async function $do285(client, request, options) {
   const responseFields = {
     HttpMeta: { Response: response, Request: req }
   };
-  const [result] = await match(json(200, WorkspaceManifest$inboundSchema), jsonErr(422, HTTPValidationError$inboundSchema), fail("4XX"), fail("5XX"))(response, req, { extraFields: responseFields });
+  const [result] = await match(json(200, Repo$inboundSchema), jsonErr([401, 403, 404], RepoError$inboundSchema), fail("4XX"), fail("5XX"))(response, req, { extraFields: responseFields });
   if (!result.ok) {
     return [result, { status: "complete", request: req, response }];
   }
   return [result, { status: "complete", request: req, response }];
 }
-var init_sandboxGetWorkspace = __esm(() => {
+var init_reposGet = __esm(() => {
   init_encodings();
   init_http();
   init_matchers();
@@ -130866,23 +131202,23 @@ var init_sandboxGetWorkspace = __esm(() => {
   init_async();
 });
 
-// src/mcp-server/tools/sandboxGetWorkspace.ts
-var args276, tool$sandboxGetWorkspace;
-var init_sandboxGetWorkspace2 = __esm(() => {
-  init_sandboxGetWorkspace();
+// src/mcp-server/tools/reposGet.ts
+var args276, tool$reposGet;
+var init_reposGet2 = __esm(() => {
+  init_reposGet();
   init_operations();
   init_tools();
   args276 = {
-    request: GetWorkspaceRequest$inboundSchema
+    request: GetRepoRequest$inboundSchema
   };
-  tool$sandboxGetWorkspace = {
-    name: "sandbox-get-workspace",
-    description: `Get Workspace Manifest
+  tool$reposGet = {
+    name: "repos-get",
+    description: `Get a repository
 
-List files currently stored in the session workspace, including paths, sizes, and etags.`,
+Reads a single repository after a reader-level access check.`,
     args: args276,
     tool: async (client, args277, ctx) => {
-      const [result, apiCall] = await sandboxGetWorkspace(client, args277.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
+      const [result, apiCall] = await reposGet(client, args277.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
       if (!result.ok) {
         return {
           content: [{ type: "text", text: result.error.message }],
@@ -130895,18 +131231,18 @@ List files currently stored in the session workspace, including paths, sizes, an
   };
 });
 
-// src/funcs/sandboxList.ts
-function sandboxList(client, request, options) {
-  return new APIPromise($do286(client, request, options));
+// src/funcs/reposList.ts
+function reposList(client, request, options) {
+  return new APIPromise($do285(client, request, options));
 }
-async function $do286(client, request, options) {
-  const parsed = safeParse4(request, (value) => ListSessionsRequest$outboundSchema.parse(value), "Input validation failed");
+async function $do285(client, request, options) {
+  const parsed = safeParse4(request, (value) => ListReposRequest$outboundSchema.parse(value), "Input validation failed");
   if (!parsed.ok) {
     return [parsed, { status: "invalid" }];
   }
   const payload = parsed.value;
   const body = null;
-  const path = pathToFunc("/api/v1/sandbox/sessions")();
+  const path = pathToFunc("/api/v1/repos")();
   const headers = new Headers(compactMap({
     Accept: "application/json",
     "X-On-Behalf-Of": encodeSimple("X-On-Behalf-Of", payload["X-On-Behalf-Of"], { explode: false, charEncoding: "none" })
@@ -130917,7 +131253,7 @@ async function $do286(client, request, options) {
   const context = {
     options: client._options,
     baseURL: options?.serverURL ?? client._baseURL ?? "",
-    operationID: "listSessions",
+    operationID: "listRepos",
     oAuth2Scopes: null,
     resolvedSecurity: requestSecurity,
     securitySource: client._options.bearerAuth,
@@ -130960,14 +131296,13 @@ async function $do286(client, request, options) {
   const responseFields = {
     HttpMeta: { Response: response, Request: req }
   };
-  const [result] = await match(json(200, arrayType(SessionRecord$inboundSchema)), jsonErr(422, HTTPValidationError$inboundSchema), fail("4XX"), fail("5XX"))(response, req, { extraFields: responseFields });
+  const [result] = await match(json(200, ListReposResponseBody$inboundSchema), jsonErr(401, RepoError$inboundSchema), jsonErr(500, RepoError$inboundSchema), fail("4XX"), fail("5XX"))(response, req, { extraFields: responseFields });
   if (!result.ok) {
     return [result, { status: "complete", request: req, response }];
   }
   return [result, { status: "complete", request: req, response }];
 }
-var init_sandboxList = __esm(() => {
-  init_esm();
+var init_reposList = __esm(() => {
   init_encodings();
   init_http();
   init_matchers();
@@ -130975,29 +131310,30 @@ var init_sandboxList = __esm(() => {
   init_schemas4();
   init_security();
   init_url();
-  init_components();
   init_errors4();
   init_operations();
   init_async();
 });
 
-// src/mcp-server/tools/sandboxList.ts
-var args277, tool$sandboxList;
-var init_sandboxList2 = __esm(() => {
-  init_sandboxList();
+// src/mcp-server/tools/reposList.ts
+var args277, tool$reposList;
+var init_reposList2 = __esm(() => {
+  init_reposList();
   init_operations();
   init_tools();
   args277 = {
-    request: ListSessionsRequest$inboundSchema
+    request: ListReposRequest$inboundSchema
   };
-  tool$sandboxList = {
-    name: "sandbox-list",
-    description: `List Sessions
+  tool$reposList = {
+    name: "repos-list",
+    description: `List the caller's repositories
 
-List sandbox sessions visible to the authenticated caller.`,
+Returns the repositories visible to the caller within their (org, team),
+widened to the whole (org, team) for an org admin. Pure DB read.
+`,
     args: args277,
     tool: async (client, args278, ctx) => {
-      const [result, apiCall] = await sandboxList(client, args278.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
+      const [result, apiCall] = await reposList(client, args278.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
       if (!result.ok) {
         return {
           content: [{ type: "text", text: result.error.message }],
@@ -131010,36 +131346,30 @@ List sandbox sessions visible to the authenticated caller.`,
   };
 });
 
-// src/funcs/sandboxProxyBrowserPortRequest.ts
-function sandboxProxyBrowserPortRequest(client, request, options) {
-  return new APIPromise($do287(client, request, options));
+// src/funcs/reposUpdate.ts
+function reposUpdate(client, request, options) {
+  return new APIPromise($do286(client, request, options));
 }
-async function $do287(client, request, options) {
-  const parsed = safeParse4(request, (value) => ProxyBrowserPortRequestRequest$outboundSchema.parse(value), "Input validation failed");
+async function $do286(client, request, options) {
+  const parsed = safeParse4(request, (value) => PatchRepoRequest$outboundSchema2.parse(value), "Input validation failed");
   if (!parsed.ok) {
     return [parsed, { status: "invalid" }];
   }
   const payload = parsed.value;
-  const body = null;
+  const body = encodeJSON("body", payload.PatchRepoRequest, { explode: true });
   const pathParams = {
-    port: encodeSimple("port", payload.port, {
-      explode: false,
-      charEncoding: "percent"
-    }),
-    session_id: encodeSimple("session_id", payload.session_id, {
+    name: encodeSimple("name", payload.name, {
       explode: false,
       charEncoding: "percent"
     }),
-    subpath: encodeSimple("subpath", payload.subpath, {
+    org: encodeSimple("org", payload.org, {
       explode: false,
       charEncoding: "percent"
     })
   };
-  const path = pathToFunc("/api/v1/sandbox/sessions/{session_id}/ports/{port}/{subpath}")(pathParams);
-  const query = encodeFormQuery({
-    session_token: payload.session_token
-  });
+  const path = pathToFunc("/api/v1/repos/{org}/{name}")(pathParams);
   const headers = new Headers(compactMap({
+    "Content-Type": "application/json",
     Accept: "application/json",
     "X-On-Behalf-Of": encodeSimple("X-On-Behalf-Of", payload["X-On-Behalf-Of"], { explode: false, charEncoding: "none" })
   }));
@@ -131049,7 +131379,7 @@ async function $do287(client, request, options) {
   const context = {
     options: client._options,
     baseURL: options?.serverURL ?? client._baseURL ?? "",
-    operationID: "proxyBrowserPortRequest",
+    operationID: "patchRepo",
     oAuth2Scopes: null,
     resolvedSecurity: requestSecurity,
     securitySource: client._options.bearerAuth,
@@ -131067,11 +131397,10 @@ async function $do287(client, request, options) {
   };
   const requestRes = client._createRequest(context, {
     security: requestSecurity,
-    method: "GET",
+    method: "PATCH",
     baseURL: options?.serverURL,
     path,
     headers,
-    query,
     body,
     userAgent: client._options.userAgent,
     timeoutMs: options?.timeoutMs || client._options.timeoutMs || -1
@@ -131093,14 +131422,13 @@ async function $do287(client, request, options) {
   const responseFields = {
     HttpMeta: { Response: response, Request: req }
   };
-  const [result] = await match(json(200, anyType()), jsonErr(422, HTTPValidationError$inboundSchema), fail("4XX"), fail("5XX"))(response, req, { extraFields: responseFields });
+  const [result] = await match(json(200, Repo$inboundSchema), jsonErr([400, 401, 403, 404, 409], RepoError$inboundSchema), jsonErr(500, RepoError$inboundSchema), fail("4XX"), fail("5XX"))(response, req, { extraFields: responseFields });
   if (!result.ok) {
     return [result, { status: "complete", request: req, response }];
   }
   return [result, { status: "complete", request: req, response }];
 }
-var init_sandboxProxyBrowserPortRequest = __esm(() => {
-  init_esm();
+var init_reposUpdate = __esm(() => {
   init_encodings();
   init_http();
   init_matchers();
@@ -131108,28 +131436,33 @@ var init_sandboxProxyBrowserPortRequest = __esm(() => {
   init_schemas4();
   init_security();
   init_url();
+  init_components();
   init_errors4();
   init_operations();
   init_async();
 });
 
-// src/mcp-server/tools/sandboxProxyBrowserPortRequest.ts
-var args278, tool$sandboxProxyBrowserPortRequest;
-var init_sandboxProxyBrowserPortRequest2 = __esm(() => {
-  init_sandboxProxyBrowserPortRequest();
+// src/mcp-server/tools/reposUpdate.ts
+var args278, tool$reposUpdate;
+var init_reposUpdate2 = __esm(() => {
+  init_reposUpdate();
   init_operations();
   init_tools();
   args278 = {
-    request: ProxyBrowserPortRequestRequest$inboundSchema
+    request: PatchRepoRequest$inboundSchema2
   };
-  tool$sandboxProxyBrowserPortRequest = {
-    name: "sandbox-proxy-browser-port-request",
-    description: `Proxy Browser Port Request
+  tool$reposUpdate = {
+    name: "repos-update",
+    description: `Update a repository's labels
 
-Proxy an HTTP request to an exposed browser-session port through the gateway. Use the URL returned by \`GET /sessions/{session_id}/browser-url\` as the base. Insert CDP subpaths such as \`json/version\` or \`json/list\` before its query string, preserving the \`session_token\` parameter. This low-level proxy is intended for browser sessions on port \`9222\` and still requires the normal MKA1 API-key authorization header.`,
+Applies a label-only update (name/visibility/description); owner or org
+admin only. The repository id is stable, so a rename is a one-row DB
+update — no Gitea/fga writes. Omitted fields are left unchanged;
+\`visibility\` cannot be set to empty.
+`,
     args: args278,
     tool: async (client, args279, ctx) => {
-      const [result, apiCall] = await sandboxProxyBrowserPortRequest(client, args279.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
+      const [result, apiCall] = await reposUpdate(client, args279.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
       if (!result.ok) {
         return {
           content: [{ type: "text", text: result.error.message }],
@@ -131142,24 +131475,20 @@ Proxy an HTTP request to an exposed browser-session port through the gateway. Us
   };
 });
 
-// src/funcs/sandboxRunCode.ts
-function sandboxRunCode(client, request, options) {
-  return new APIPromise($do288(client, request, options));
+// src/funcs/sandboxCreate.ts
+function sandboxCreate(client, request, options) {
+  return new APIPromise($do287(client, request, options));
 }
-async function $do288(client, request, options) {
-  const parsed = safeParse4(request, (value) => RunCodeRequest$outboundSchema.parse(value), "Input validation failed");
+async function $do287(client, request, options) {
+  const parsed = safeParse4(request, (value) => CreateSessionRequest$outboundSchema2.parse(value), "Input validation failed");
   if (!parsed.ok) {
     return [parsed, { status: "invalid" }];
   }
   const payload = parsed.value;
-  const body = encodeJSON("body", payload.CodeRequest, { explode: true });
-  const pathParams = {
-    session_id: encodeSimple("session_id", payload.session_id, {
-      explode: false,
-      charEncoding: "percent"
-    })
-  };
-  const path = pathToFunc("/api/v1/sandbox/sessions/{session_id}/code")(pathParams);
+  const body = encodeJSON("body", payload.CreateSessionRequest, {
+    explode: true
+  });
+  const path = pathToFunc("/api/v1/sandbox/sessions")();
   const headers = new Headers(compactMap({
     "Content-Type": "application/json",
     Accept: "application/json",
@@ -131171,7 +131500,7 @@ async function $do288(client, request, options) {
   const context = {
     options: client._options,
     baseURL: options?.serverURL ?? client._baseURL ?? "",
-    operationID: "runCode",
+    operationID: "createSession",
     oAuth2Scopes: null,
     resolvedSecurity: requestSecurity,
     securitySource: client._options.bearerAuth,
@@ -131214,13 +131543,13 @@ async function $do288(client, request, options) {
   const responseFields = {
     HttpMeta: { Response: response, Request: req }
   };
-  const [result] = await match(json(200, CodeResult$inboundSchema), jsonErr(422, HTTPValidationError$inboundSchema), fail("4XX"), fail("5XX"))(response, req, { extraFields: responseFields });
+  const [result] = await match(json([200, 202], CreateSessionResponse$inboundSchema), jsonErr(422, HTTPValidationError$inboundSchema), fail("4XX"), fail([501, "5XX"]))(response, req, { extraFields: responseFields });
   if (!result.ok) {
     return [result, { status: "complete", request: req, response }];
   }
   return [result, { status: "complete", request: req, response }];
 }
-var init_sandboxRunCode = __esm(() => {
+var init_sandboxCreate = __esm(() => {
   init_encodings();
   init_http();
   init_matchers();
@@ -131234,23 +131563,23 @@ var init_sandboxRunCode = __esm(() => {
   init_async();
 });
 
-// src/mcp-server/tools/sandboxRunCode.ts
-var args279, tool$sandboxRunCode;
-var init_sandboxRunCode2 = __esm(() => {
-  init_sandboxRunCode();
+// src/mcp-server/tools/sandboxCreate.ts
+var args279, tool$sandboxCreate;
+var init_sandboxCreate2 = __esm(() => {
+  init_sandboxCreate();
   init_operations();
   init_tools();
   args279 = {
-    request: RunCodeRequest$inboundSchema
+    request: CreateSessionRequest$inboundSchema2
   };
-  tool$sandboxRunCode = {
-    name: "sandbox-run-code",
-    description: `Run Code
+  tool$sandboxCreate = {
+    name: "sandbox-create",
+    description: `Create Session
 
-Execute source code in the session workspace using a supported runtime and return the execution result.`,
+Create a sandbox session and return its public session metadata, session token, and provider. Set \`session_kind\` to \`browser\` to start a browser-backed session instead of a standard command/code sandbox. Set \`queue_if_full\` to \`true\` to queue the request instead of failing when runner capacity is temporarily unavailable. It does not queue requests for session kinds the deployment does not support. Browser sessions require a Firecracker-backed deployment; standard-only deployments reject them immediately with \`browser_sessions_not_enabled\`.`,
     args: args279,
     tool: async (client, args280, ctx) => {
-      const [result, apiCall] = await sandboxRunCode(client, args280.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
+      const [result, apiCall] = await sandboxCreate(client, args280.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
       if (!result.ok) {
         return {
           content: [{ type: "text", text: result.error.message }],
@@ -131263,27 +131592,32 @@ Execute source code in the session workspace using a supported runtime and retur
   };
 });
 
-// src/funcs/sandboxRunCommand.ts
-function sandboxRunCommand(client, request, options) {
-  return new APIPromise($do289(client, request, options));
+// src/funcs/sandboxDownloadArchive.ts
+function sandboxDownloadArchive(client, request, options) {
+  return new APIPromise($do288(client, request, options));
 }
-async function $do289(client, request, options) {
-  const parsed = safeParse4(request, (value) => RunCommandRequest$outboundSchema.parse(value), "Input validation failed");
+async function $do288(client, request, options) {
+  const parsed = safeParse4(request, (value) => DownloadWorkspaceArchiveRequest$outboundSchema.parse(value), "Input validation failed");
   if (!parsed.ok) {
     return [parsed, { status: "invalid" }];
   }
   const payload = parsed.value;
-  const body = encodeJSON("body", payload.CommandRequest, { explode: true });
+  const body = encodeJSON("body", payload.WorkspaceArchiveRequest, {
+    explode: true
+  });
   const pathParams = {
     session_id: encodeSimple("session_id", payload.session_id, {
       explode: false,
       charEncoding: "percent"
     })
   };
-  const path = pathToFunc("/api/v1/sandbox/sessions/{session_id}/commands")(pathParams);
+  const path = pathToFunc("/api/v1/sandbox/sessions/{session_id}/workspace/archive")(pathParams);
+  const query = encodeFormQuery({
+    session_token: payload.session_token
+  });
   const headers = new Headers(compactMap({
     "Content-Type": "application/json",
-    Accept: "application/json",
+    Accept: "application/zip",
     "X-On-Behalf-Of": encodeSimple("X-On-Behalf-Of", payload["X-On-Behalf-Of"], { explode: false, charEncoding: "none" })
   }));
   const secConfig = await extractSecurity(client._options.bearerAuth);
@@ -131292,7 +131626,7 @@ async function $do289(client, request, options) {
   const context = {
     options: client._options,
     baseURL: options?.serverURL ?? client._baseURL ?? "",
-    operationID: "runCommand",
+    operationID: "downloadWorkspaceArchive",
     oAuth2Scopes: null,
     resolvedSecurity: requestSecurity,
     securitySource: client._options.bearerAuth,
@@ -131314,6 +131648,7 @@ async function $do289(client, request, options) {
     baseURL: options?.serverURL,
     path,
     headers,
+    query,
     body,
     userAgent: client._options.userAgent,
     timeoutMs: options?.timeoutMs || client._options.timeoutMs || -1
@@ -131335,13 +131670,16 @@ async function $do289(client, request, options) {
   const responseFields = {
     HttpMeta: { Response: response, Request: req }
   };
-  const [result] = await match(json(200, CommandResult$inboundSchema), jsonErr(422, HTTPValidationError$inboundSchema), fail("4XX"), fail("5XX"))(response, req, { extraFields: responseFields });
+  const [result] = await match(stream(200, instanceOfType(ReadableStream), {
+    ctype: "application/zip"
+  }), jsonErr(422, HTTPValidationError$inboundSchema), fail("4XX"), fail("5XX"))(response, req, { extraFields: responseFields });
   if (!result.ok) {
     return [result, { status: "complete", request: req, response }];
   }
   return [result, { status: "complete", request: req, response }];
 }
-var init_sandboxRunCommand = __esm(() => {
+var init_sandboxDownloadArchive = __esm(() => {
+  init_esm();
   init_encodings();
   init_http();
   init_matchers();
@@ -131349,29 +131687,28 @@ var init_sandboxRunCommand = __esm(() => {
   init_schemas4();
   init_security();
   init_url();
-  init_components();
   init_errors4();
   init_operations();
   init_async();
 });
 
-// src/mcp-server/tools/sandboxRunCommand.ts
-var args280, tool$sandboxRunCommand;
-var init_sandboxRunCommand2 = __esm(() => {
-  init_sandboxRunCommand();
+// src/mcp-server/tools/sandboxDownloadArchive.ts
+var args280, tool$sandboxDownloadArchive;
+var init_sandboxDownloadArchive2 = __esm(() => {
+  init_sandboxDownloadArchive();
   init_operations();
   init_tools();
   args280 = {
-    request: RunCommandRequest$inboundSchema
+    request: DownloadWorkspaceArchiveRequest$inboundSchema
   };
-  tool$sandboxRunCommand = {
-    name: "sandbox-run-command",
-    description: `Run Command
+  tool$sandboxDownloadArchive = {
+    name: "sandbox-download-archive",
+    description: `Download Workspace Archive
 
-Run a command in the session workspace and return stdout, stderr, exit code, and changed files.`,
+Download a zip archive containing the selected workspace paths.`,
     args: args280,
     tool: async (client, args281, ctx) => {
-      const [result, apiCall] = await sandboxRunCommand(client, args281.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
+      const [result, apiCall] = await sandboxDownloadArchive(client, args281.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
       if (!result.ok) {
         return {
           content: [{ type: "text", text: result.error.message }],
@@ -131384,21 +131721,34 @@ Run a command in the session workspace and return stdout, stderr, exit code, and
   };
 });
 
-// src/funcs/sandboxSetPricing.ts
-function sandboxSetPricing(client, request, options) {
-  return new APIPromise($do290(client, request, options));
+// src/funcs/sandboxDownloadFile.ts
+function sandboxDownloadFile(client, request, options) {
+  return new APIPromise($do289(client, request, options));
 }
-async function $do290(client, request, options) {
-  const parsed = safeParse4(request, (value) => SandboxPricingUpdate$outboundSchema.parse(value), "Input validation failed");
+async function $do289(client, request, options) {
+  const parsed = safeParse4(request, (value) => DownloadWorkspaceFileRequest$outboundSchema.parse(value), "Input validation failed");
   if (!parsed.ok) {
     return [parsed, { status: "invalid" }];
   }
   const payload = parsed.value;
-  const body = encodeJSON("body", payload, { explode: true });
-  const path = pathToFunc("/api/v1/sandbox/pricing")();
+  const body = null;
+  const pathParams = {
+    file_path: encodeSimple("file_path", payload.file_path, {
+      explode: false,
+      charEncoding: "percent"
+    }),
+    session_id: encodeSimple("session_id", payload.session_id, {
+      explode: false,
+      charEncoding: "percent"
+    })
+  };
+  const path = pathToFunc("/api/v1/sandbox/sessions/{session_id}/workspace/files/{file_path}")(pathParams);
+  const query = encodeFormQuery({
+    session_token: payload.session_token
+  });
   const headers = new Headers(compactMap({
-    "Content-Type": "application/json",
-    Accept: "application/json"
+    Accept: "application/octet-stream",
+    "X-On-Behalf-Of": encodeSimple("X-On-Behalf-Of", payload["X-On-Behalf-Of"], { explode: false, charEncoding: "none" })
   }));
   const secConfig = await extractSecurity(client._options.bearerAuth);
   const securityInput = secConfig == null ? {} : { bearerAuth: secConfig };
@@ -131406,7 +131756,7 @@ async function $do290(client, request, options) {
   const context = {
     options: client._options,
     baseURL: options?.serverURL ?? client._baseURL ?? "",
-    operationID: "setSandboxPricing",
+    operationID: "downloadWorkspaceFile",
     oAuth2Scopes: null,
     resolvedSecurity: requestSecurity,
     securitySource: client._options.bearerAuth,
@@ -131424,10 +131774,11 @@ async function $do290(client, request, options) {
   };
   const requestRes = client._createRequest(context, {
     security: requestSecurity,
-    method: "PUT",
+    method: "GET",
     baseURL: options?.serverURL,
     path,
     headers,
+    query,
     body,
     userAgent: client._options.userAgent,
     timeoutMs: options?.timeoutMs || client._options.timeoutMs || -1
@@ -131449,13 +131800,14 @@ async function $do290(client, request, options) {
   const responseFields = {
     HttpMeta: { Response: response, Request: req }
   };
-  const [result] = await match(json(200, SandboxPricingCard$inboundSchema), jsonErr(422, HTTPValidationError$inboundSchema), fail("4XX"), fail("5XX"))(response, req, { extraFields: responseFields });
+  const [result] = await match(stream(200, instanceOfType(ReadableStream)), jsonErr(422, HTTPValidationError$inboundSchema), fail("4XX"), fail("5XX"))(response, req, { extraFields: responseFields });
   if (!result.ok) {
     return [result, { status: "complete", request: req, response }];
   }
   return [result, { status: "complete", request: req, response }];
 }
-var init_sandboxSetPricing = __esm(() => {
+var init_sandboxDownloadFile = __esm(() => {
+  init_esm();
   init_encodings();
   init_http();
   init_matchers();
@@ -131463,28 +131815,28 @@ var init_sandboxSetPricing = __esm(() => {
   init_schemas4();
   init_security();
   init_url();
-  init_components();
   init_errors4();
+  init_operations();
   init_async();
 });
 
-// src/mcp-server/tools/sandboxSetPricing.ts
-var args281, tool$sandboxSetPricing;
-var init_sandboxSetPricing2 = __esm(() => {
-  init_sandboxSetPricing();
-  init_components();
+// src/mcp-server/tools/sandboxDownloadFile.ts
+var args281, tool$sandboxDownloadFile;
+var init_sandboxDownloadFile2 = __esm(() => {
+  init_sandboxDownloadFile();
+  init_operations();
   init_tools();
   args281 = {
-    request: SandboxPricingUpdate$inboundSchema
+    request: DownloadWorkspaceFileRequest$inboundSchema
   };
-  tool$sandboxSetPricing = {
-    name: "sandbox-set-pricing",
-    description: `Set Sandbox Pricing
+  tool$sandboxDownloadFile = {
+    name: "sandbox-download-file",
+    description: `Download Workspace File
 
-Replace the sandbox pricing rate card. Full-replace semantics: SKUs omitted from the request become unpriced and accrue no spend. Takes effect on the next meter window without a restart. Cluster admins only.`,
+Download raw bytes from a file in the session workspace.`,
     args: args281,
     tool: async (client, args282, ctx) => {
-      const [result, apiCall] = await sandboxSetPricing(client, args282.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
+      const [result, apiCall] = await sandboxDownloadFile(client, args282.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
       if (!result.ok) {
         return {
           content: [{ type: "text", text: result.error.message }],
@@ -131497,28 +131849,25 @@ Replace the sandbox pricing rate card. Full-replace semantics: SKUs omitted from
   };
 });
 
-// src/funcs/sandboxTerminate.ts
-function sandboxTerminate(client, request, options) {
-  return new APIPromise($do291(client, request, options));
+// src/funcs/sandboxGet.ts
+function sandboxGet(client, request, options) {
+  return new APIPromise($do290(client, request, options));
 }
-async function $do291(client, request, options) {
-  const parsed = safeParse4(request, (value) => TerminateSessionRequest$outboundSchema2.parse(value), "Input validation failed");
+async function $do290(client, request, options) {
+  const parsed = safeParse4(request, (value) => GetSessionRequest$outboundSchema.parse(value), "Input validation failed");
   if (!parsed.ok) {
     return [parsed, { status: "invalid" }];
   }
   const payload = parsed.value;
-  const body = encodeJSON("body", payload.TerminateSessionRequest, {
-    explode: true
-  });
+  const body = null;
   const pathParams = {
     session_id: encodeSimple("session_id", payload.session_id, {
       explode: false,
       charEncoding: "percent"
     })
   };
-  const path = pathToFunc("/api/v1/sandbox/sessions/{session_id}/terminate")(pathParams);
+  const path = pathToFunc("/api/v1/sandbox/sessions/{session_id}")(pathParams);
   const headers = new Headers(compactMap({
-    "Content-Type": "application/json",
     Accept: "application/json",
     "X-On-Behalf-Of": encodeSimple("X-On-Behalf-Of", payload["X-On-Behalf-Of"], { explode: false, charEncoding: "none" })
   }));
@@ -131528,7 +131877,7 @@ async function $do291(client, request, options) {
   const context = {
     options: client._options,
     baseURL: options?.serverURL ?? client._baseURL ?? "",
-    operationID: "terminateSession",
+    operationID: "getSession",
     oAuth2Scopes: null,
     resolvedSecurity: requestSecurity,
     securitySource: client._options.bearerAuth,
@@ -131546,7 +131895,7 @@ async function $do291(client, request, options) {
   };
   const requestRes = client._createRequest(context, {
     security: requestSecurity,
-    method: "POST",
+    method: "GET",
     baseURL: options?.serverURL,
     path,
     headers,
@@ -131571,13 +131920,13 @@ async function $do291(client, request, options) {
   const responseFields = {
     HttpMeta: { Response: response, Request: req }
   };
-  const [result] = await match(json(200, TerminateSessionResponse$inboundSchema), jsonErr(422, HTTPValidationError$inboundSchema), fail("4XX"), fail("5XX"))(response, req, { extraFields: responseFields });
+  const [result] = await match(json(200, SessionRecord$inboundSchema), jsonErr(422, HTTPValidationError$inboundSchema), fail("4XX"), fail("5XX"))(response, req, { extraFields: responseFields });
   if (!result.ok) {
     return [result, { status: "complete", request: req, response }];
   }
   return [result, { status: "complete", request: req, response }];
 }
-var init_sandboxTerminate = __esm(() => {
+var init_sandboxGet = __esm(() => {
   init_encodings();
   init_http();
   init_matchers();
@@ -131591,23 +131940,23 @@ var init_sandboxTerminate = __esm(() => {
   init_async();
 });
 
-// src/mcp-server/tools/sandboxTerminate.ts
-var args282, tool$sandboxTerminate;
-var init_sandboxTerminate2 = __esm(() => {
-  init_sandboxTerminate();
+// src/mcp-server/tools/sandboxGet.ts
+var args282, tool$sandboxGet;
+var init_sandboxGet2 = __esm(() => {
+  init_sandboxGet();
   init_operations();
   init_tools();
   args282 = {
-    request: TerminateSessionRequest$inboundSchema2
+    request: GetSessionRequest$inboundSchema
   };
-  tool$sandboxTerminate = {
-    name: "sandbox-terminate",
-    description: `Terminate Session
+  tool$sandboxGet = {
+    name: "sandbox-get",
+    description: `Get Session
 
-Stop a sandbox session and release the backing sandbox resources.`,
+Return the current state, configuration, and resource allocation for a sandbox session.`,
     args: args282,
     tool: async (client, args283, ctx) => {
-      const [result, apiCall] = await sandboxTerminate(client, args283.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
+      const [result, apiCall] = await sandboxGet(client, args283.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
       if (!result.ok) {
         return {
           content: [{ type: "text", text: result.error.message }],
@@ -131620,29 +131969,28 @@ Stop a sandbox session and release the backing sandbox resources.`,
   };
 });
 
-// src/funcs/sandboxUploadArchive.ts
-function sandboxUploadArchive(client, request, options) {
-  return new APIPromise($do292(client, request, options));
+// src/funcs/sandboxGetBrowserUrl.ts
+function sandboxGetBrowserUrl(client, request, options) {
+  return new APIPromise($do291(client, request, options));
 }
-async function $do292(client, request, options) {
-  const parsed = safeParse4(request, (value) => UploadWorkspaceArchiveRequest$outboundSchema.parse(value), "Input validation failed");
+async function $do291(client, request, options) {
+  const parsed = safeParse4(request, (value) => GetBrowserSessionUrlRequest$outboundSchema.parse(value), "Input validation failed");
   if (!parsed.ok) {
     return [parsed, { status: "invalid" }];
   }
   const payload = parsed.value;
-  const body = payload.RequestBody instanceof Uint8Array ? new Uint8Array(payload.RequestBody).buffer : payload.RequestBody;
+  const body = null;
   const pathParams = {
     session_id: encodeSimple("session_id", payload.session_id, {
       explode: false,
       charEncoding: "percent"
     })
   };
-  const path = pathToFunc("/api/v1/sandbox/sessions/{session_id}/workspace/archive")(pathParams);
+  const path = pathToFunc("/api/v1/sandbox/sessions/{session_id}/browser-url")(pathParams);
   const query = encodeFormQuery({
     session_token: payload.session_token
   });
   const headers = new Headers(compactMap({
-    "Content-Type": "application/zip",
     Accept: "application/json",
     "X-On-Behalf-Of": encodeSimple("X-On-Behalf-Of", payload["X-On-Behalf-Of"], { explode: false, charEncoding: "none" })
   }));
@@ -131652,7 +132000,7 @@ async function $do292(client, request, options) {
   const context = {
     options: client._options,
     baseURL: options?.serverURL ?? client._baseURL ?? "",
-    operationID: "uploadWorkspaceArchive",
+    operationID: "getBrowserSessionUrl",
     oAuth2Scopes: null,
     resolvedSecurity: requestSecurity,
     securitySource: client._options.bearerAuth,
@@ -131670,7 +132018,7 @@ async function $do292(client, request, options) {
   };
   const requestRes = client._createRequest(context, {
     security: requestSecurity,
-    method: "PUT",
+    method: "GET",
     baseURL: options?.serverURL,
     path,
     headers,
@@ -131696,14 +132044,13 @@ async function $do292(client, request, options) {
   const responseFields = {
     HttpMeta: { Response: response, Request: req }
   };
-  const [result] = await match(json(200, recordType(stringType())), jsonErr(422, HTTPValidationError$inboundSchema), fail("4XX"), fail("5XX"))(response, req, { extraFields: responseFields });
+  const [result] = await match(json(200, SessionUrlResponse$inboundSchema), jsonErr(422, HTTPValidationError$inboundSchema), fail("4XX"), fail([501, "5XX"]))(response, req, { extraFields: responseFields });
   if (!result.ok) {
     return [result, { status: "complete", request: req, response }];
   }
   return [result, { status: "complete", request: req, response }];
 }
-var init_sandboxUploadArchive = __esm(() => {
-  init_esm();
+var init_sandboxGetBrowserUrl = __esm(() => {
   init_encodings();
   init_http();
   init_matchers();
@@ -131711,28 +132058,29 @@ var init_sandboxUploadArchive = __esm(() => {
   init_schemas4();
   init_security();
   init_url();
+  init_components();
   init_errors4();
   init_operations();
   init_async();
 });
 
-// src/mcp-server/tools/sandboxUploadArchive.ts
-var args283, tool$sandboxUploadArchive;
-var init_sandboxUploadArchive2 = __esm(() => {
-  init_sandboxUploadArchive();
+// src/mcp-server/tools/sandboxGetBrowserUrl.ts
+var args283, tool$sandboxGetBrowserUrl;
+var init_sandboxGetBrowserUrl2 = __esm(() => {
+  init_sandboxGetBrowserUrl();
   init_operations();
   init_tools();
   args283 = {
-    request: UploadWorkspaceArchiveRequest$inboundSchema
+    request: GetBrowserSessionUrlRequest$inboundSchema
   };
-  tool$sandboxUploadArchive = {
-    name: "sandbox-upload-archive",
-    description: `Upload Workspace Archive
+  tool$sandboxGetBrowserUrl = {
+    name: "sandbox-get-browser-url",
+    description: `Get Browser Session URL
 
-Upload a zip archive and extract its files into the session workspace.`,
+Return the public gateway URL for a browser session's Chrome DevTools Protocol endpoint. Playwright can use this HTTP endpoint directly. For clients that require a WebSocket endpoint, request \`json/version\` and use its rewritten \`webSocketDebuggerUrl\`. Insert subpaths before the query string; for example, use \`/ports/9222/json/version?session_token=...\`. Send the same MKA1 API-key authorization header on the HTTP and WebSocket requests. Standard sessions do not expose a public URL; use the command, code, and workspace operations instead.`,
     args: args283,
     tool: async (client, args284, ctx) => {
-      const [result, apiCall] = await sandboxUploadArchive(client, args284.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
+      const [result, apiCall] = await sandboxGetBrowserUrl(client, args284.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
       if (!result.ok) {
         return {
           content: [{ type: "text", text: result.error.message }],
@@ -131745,35 +132093,14 @@ Upload a zip archive and extract its files into the session workspace.`,
   };
 });
 
-// src/funcs/sandboxUploadFile.ts
-function sandboxUploadFile(client, request, options) {
-  return new APIPromise($do293(client, request, options));
+// src/funcs/sandboxGetPricing.ts
+function sandboxGetPricing(client, options) {
+  return new APIPromise($do292(client, options));
 }
-async function $do293(client, request, options) {
-  const parsed = safeParse4(request, (value) => UploadWorkspaceFileRequest$outboundSchema.parse(value), "Input validation failed");
-  if (!parsed.ok) {
-    return [parsed, { status: "invalid" }];
-  }
-  const payload = parsed.value;
-  const body = payload.RequestBody instanceof Uint8Array ? new Uint8Array(payload.RequestBody).buffer : payload.RequestBody;
-  const pathParams = {
-    file_path: encodeSimple("file_path", payload.file_path, {
-      explode: false,
-      charEncoding: "percent"
-    }),
-    session_id: encodeSimple("session_id", payload.session_id, {
-      explode: false,
-      charEncoding: "percent"
-    })
-  };
-  const path = pathToFunc("/api/v1/sandbox/sessions/{session_id}/workspace/files/{file_path}")(pathParams);
-  const query = encodeFormQuery({
-    session_token: payload.session_token
-  });
+async function $do292(client, options) {
+  const path = pathToFunc("/api/v1/sandbox/pricing")();
   const headers = new Headers(compactMap({
-    "Content-Type": "application/octet-stream",
-    Accept: "application/json",
-    "X-On-Behalf-Of": encodeSimple("X-On-Behalf-Of", payload["X-On-Behalf-Of"], { explode: false, charEncoding: "none" })
+    Accept: "application/json"
   }));
   const secConfig = await extractSecurity(client._options.bearerAuth);
   const securityInput = secConfig == null ? {} : { bearerAuth: secConfig };
@@ -131781,7 +132108,7 @@ async function $do293(client, request, options) {
   const context = {
     options: client._options,
     baseURL: options?.serverURL ?? client._baseURL ?? "",
-    operationID: "uploadWorkspaceFile",
+    operationID: "getSandboxPricing",
     oAuth2Scopes: null,
     resolvedSecurity: requestSecurity,
     securitySource: client._options.bearerAuth,
@@ -131799,12 +132126,10 @@ async function $do293(client, request, options) {
   };
   const requestRes = client._createRequest(context, {
     security: requestSecurity,
-    method: "PUT",
+    method: "GET",
     baseURL: options?.serverURL,
     path,
     headers,
-    query,
-    body,
     userAgent: client._options.userAgent,
     timeoutMs: options?.timeoutMs || client._options.timeoutMs || -1
   }, options);
@@ -131822,46 +132147,34 @@ async function $do293(client, request, options) {
     return [doResult, { status: "request-error", request: req }];
   }
   const response = doResult.value;
-  const responseFields = {
-    HttpMeta: { Response: response, Request: req }
-  };
-  const [result] = await match(json(200, recordType(stringType())), jsonErr(422, HTTPValidationError$inboundSchema), fail("4XX"), fail("5XX"))(response, req, { extraFields: responseFields });
+  const [result] = await match(json(200, SandboxPricingCard$inboundSchema), fail("4XX"), fail("5XX"))(response, req);
   if (!result.ok) {
     return [result, { status: "complete", request: req, response }];
   }
   return [result, { status: "complete", request: req, response }];
 }
-var init_sandboxUploadFile = __esm(() => {
-  init_esm();
-  init_encodings();
+var init_sandboxGetPricing = __esm(() => {
   init_http();
   init_matchers();
   init_primitives();
-  init_schemas4();
   init_security();
   init_url();
-  init_errors4();
-  init_operations();
+  init_components();
   init_async();
 });
 
-// src/mcp-server/tools/sandboxUploadFile.ts
-var args284, tool$sandboxUploadFile;
-var init_sandboxUploadFile2 = __esm(() => {
-  init_sandboxUploadFile();
-  init_operations();
+// src/mcp-server/tools/sandboxGetPricing.ts
+var tool$sandboxGetPricing;
+var init_sandboxGetPricing2 = __esm(() => {
+  init_sandboxGetPricing();
   init_tools();
-  args284 = {
-    request: UploadWorkspaceFileRequest$inboundSchema
-  };
-  tool$sandboxUploadFile = {
-    name: "sandbox-upload-file",
-    description: `Upload Workspace File
+  tool$sandboxGetPricing = {
+    name: "sandbox-get-pricing",
+    description: `Get Sandbox Pricing
 
-Upload raw bytes into the session workspace at the given path.`,
-    args: args284,
-    tool: async (client, args285, ctx) => {
-      const [result, apiCall] = await sandboxUploadFile(client, args285.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
+Current sandbox pricing rate card, keyed by SKU (\`standard\`, \`browser\`, \`eval-python\`). Metered sandbox usage is billed \`hours × (per_hour + reserved_memory_GiB × per_gib_hour)\`; SKUs without a configured rate accrue no spend. Cluster admins only.`,
+    tool: async (client, ctx) => {
+      const [result, apiCall] = await sandboxGetPricing(client, { fetchOptions: { signal: ctx.signal } }).$inspect();
       if (!result.ok) {
         return {
           content: [{ type: "text", text: result.error.message }],
@@ -131874,24 +132187,27 @@ Upload raw bytes into the session workspace at the given path.`,
   };
 });
 
-// src/funcs/servingAcceleratorsGet.ts
-function servingAcceleratorsGet(client, request, options) {
-  return new APIPromise($do294(client, request, options));
+// src/funcs/sandboxGetWorkspace.ts
+function sandboxGetWorkspace(client, request, options) {
+  return new APIPromise($do293(client, request, options));
 }
-async function $do294(client, request, options) {
-  const parsed = safeParse4(request, (value) => GetAcceleratorRequest$outboundSchema.parse(value), "Input validation failed");
+async function $do293(client, request, options) {
+  const parsed = safeParse4(request, (value) => GetWorkspaceRequest$outboundSchema.parse(value), "Input validation failed");
   if (!parsed.ok) {
     return [parsed, { status: "invalid" }];
   }
   const payload = parsed.value;
   const body = null;
   const pathParams = {
-    name: encodeSimple("name", payload.name, {
+    session_id: encodeSimple("session_id", payload.session_id, {
       explode: false,
       charEncoding: "percent"
     })
   };
-  const path = pathToFunc("/api/v1/serving/accelerators/{name}")(pathParams);
+  const path = pathToFunc("/api/v1/sandbox/sessions/{session_id}/workspace")(pathParams);
+  const query = encodeFormQuery({
+    session_token: payload.session_token
+  });
   const headers = new Headers(compactMap({
     Accept: "application/json",
     "X-On-Behalf-Of": encodeSimple("X-On-Behalf-Of", payload["X-On-Behalf-Of"], { explode: false, charEncoding: "none" })
@@ -131902,7 +132218,7 @@ async function $do294(client, request, options) {
   const context = {
     options: client._options,
     baseURL: options?.serverURL ?? client._baseURL ?? "",
-    operationID: "getAccelerator",
+    operationID: "getWorkspace",
     oAuth2Scopes: null,
     resolvedSecurity: requestSecurity,
     securitySource: client._options.bearerAuth,
@@ -131924,6 +132240,7 @@ async function $do294(client, request, options) {
     baseURL: options?.serverURL,
     path,
     headers,
+    query,
     body,
     userAgent: client._options.userAgent,
     timeoutMs: options?.timeoutMs || client._options.timeoutMs || -1
@@ -131945,13 +132262,13 @@ async function $do294(client, request, options) {
   const responseFields = {
     HttpMeta: { Response: response, Request: req }
   };
-  const [result] = await match(json(200, AcceleratorType$inboundSchema), jsonErr([403, 404], ServingError$inboundSchema), fail([401, "4XX"]), fail("5XX"))(response, req, { extraFields: responseFields });
+  const [result] = await match(json(200, WorkspaceManifest$inboundSchema), jsonErr(422, HTTPValidationError$inboundSchema), fail("4XX"), fail("5XX"))(response, req, { extraFields: responseFields });
   if (!result.ok) {
     return [result, { status: "complete", request: req, response }];
   }
   return [result, { status: "complete", request: req, response }];
 }
-var init_servingAcceleratorsGet = __esm(() => {
+var init_sandboxGetWorkspace = __esm(() => {
   init_encodings();
   init_http();
   init_matchers();
@@ -131965,23 +132282,23 @@ var init_servingAcceleratorsGet = __esm(() => {
   init_async();
 });
 
-// src/mcp-server/tools/servingAcceleratorsGet.ts
-var args285, tool$servingAcceleratorsGet;
-var init_servingAcceleratorsGet2 = __esm(() => {
-  init_servingAcceleratorsGet();
+// src/mcp-server/tools/sandboxGetWorkspace.ts
+var args284, tool$sandboxGetWorkspace;
+var init_sandboxGetWorkspace2 = __esm(() => {
+  init_sandboxGetWorkspace();
   init_operations();
   init_tools();
-  args285 = {
-    request: GetAcceleratorRequest$inboundSchema
+  args284 = {
+    request: GetWorkspaceRequest$inboundSchema
   };
-  tool$servingAcceleratorsGet = {
-    name: "serving-accelerators-get",
-    description: `Get an accelerator type
+  tool$sandboxGetWorkspace = {
+    name: "sandbox-get-workspace",
+    description: `Get Workspace Manifest
 
-Retrieve one accelerator type from the curated catalog, including its workload affinity, placements, and live market fields when available.`,
-    args: args285,
-    tool: async (client, args286, ctx) => {
-      const [result, apiCall] = await servingAcceleratorsGet(client, args286.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
+List files currently stored in the session workspace, including paths, sizes, and etags.`,
+    args: args284,
+    tool: async (client, args285, ctx) => {
+      const [result, apiCall] = await sandboxGetWorkspace(client, args285.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
       if (!result.ok) {
         return {
           content: [{ type: "text", text: result.error.message }],
@@ -131994,18 +132311,18 @@ Retrieve one accelerator type from the curated catalog, including its workload a
   };
 });
 
-// src/funcs/servingAcceleratorsList.ts
-function servingAcceleratorsList(client, request, options) {
-  return new APIPromise($do295(client, request, options));
+// src/funcs/sandboxList.ts
+function sandboxList(client, request, options) {
+  return new APIPromise($do294(client, request, options));
 }
-async function $do295(client, request, options) {
-  const parsed = safeParse4(request, (value) => ListAcceleratorsRequest$outboundSchema.parse(value), "Input validation failed");
+async function $do294(client, request, options) {
+  const parsed = safeParse4(request, (value) => ListSessionsRequest$outboundSchema.parse(value), "Input validation failed");
   if (!parsed.ok) {
     return [parsed, { status: "invalid" }];
   }
   const payload = parsed.value;
   const body = null;
-  const path = pathToFunc("/api/v1/serving/accelerators")();
+  const path = pathToFunc("/api/v1/sandbox/sessions")();
   const headers = new Headers(compactMap({
     Accept: "application/json",
     "X-On-Behalf-Of": encodeSimple("X-On-Behalf-Of", payload["X-On-Behalf-Of"], { explode: false, charEncoding: "none" })
@@ -132016,7 +132333,7 @@ async function $do295(client, request, options) {
   const context = {
     options: client._options,
     baseURL: options?.serverURL ?? client._baseURL ?? "",
-    operationID: "listAccelerators",
+    operationID: "listSessions",
     oAuth2Scopes: null,
     resolvedSecurity: requestSecurity,
     securitySource: client._options.bearerAuth,
@@ -132059,13 +132376,14 @@ async function $do295(client, request, options) {
   const responseFields = {
     HttpMeta: { Response: response, Request: req }
   };
-  const [result] = await match(json(200, PageAcceleratorType$inboundSchema), jsonErr(403, ServingError$inboundSchema), fail([401, "4XX"]), fail("5XX"))(response, req, { extraFields: responseFields });
+  const [result] = await match(json(200, arrayType(SessionRecord$inboundSchema)), jsonErr(422, HTTPValidationError$inboundSchema), fail("4XX"), fail("5XX"))(response, req, { extraFields: responseFields });
   if (!result.ok) {
     return [result, { status: "complete", request: req, response }];
   }
   return [result, { status: "complete", request: req, response }];
 }
-var init_servingAcceleratorsList = __esm(() => {
+var init_sandboxList = __esm(() => {
+  init_esm();
   init_encodings();
   init_http();
   init_matchers();
@@ -132079,23 +132397,23 @@ var init_servingAcceleratorsList = __esm(() => {
   init_async();
 });
 
-// src/mcp-server/tools/servingAcceleratorsList.ts
-var args286, tool$servingAcceleratorsList;
-var init_servingAcceleratorsList2 = __esm(() => {
-  init_servingAcceleratorsList();
+// src/mcp-server/tools/sandboxList.ts
+var args285, tool$sandboxList;
+var init_sandboxList2 = __esm(() => {
+  init_sandboxList();
   init_operations();
   init_tools();
-  args286 = {
-    request: ListAcceleratorsRequest$inboundSchema
+  args285 = {
+    request: ListSessionsRequest$inboundSchema
   };
-  tool$servingAcceleratorsList = {
-    name: "serving-accelerators-list",
-    description: `List available accelerator types
+  tool$sandboxList = {
+    name: "sandbox-list",
+    description: `List Sessions
 
-List the accelerator types available to your organization (GPU, NPU, TPU).`,
-    args: args286,
-    tool: async (client, args287, ctx) => {
-      const [result, apiCall] = await servingAcceleratorsList(client, args287.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
+List sandbox sessions visible to the authenticated caller.`,
+    args: args285,
+    tool: async (client, args286, ctx) => {
+      const [result, apiCall] = await sandboxList(client, args286.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
       if (!result.ok) {
         return {
           content: [{ type: "text", text: result.error.message }],
@@ -132108,20 +132426,36 @@ List the accelerator types available to your organization (GPU, NPU, TPU).`,
   };
 });
 
-// src/funcs/servingSecretsCreate.ts
-function servingSecretsCreate(client, request, options) {
-  return new APIPromise($do296(client, request, options));
+// src/funcs/sandboxProxyBrowserPortRequest.ts
+function sandboxProxyBrowserPortRequest(client, request, options) {
+  return new APIPromise($do295(client, request, options));
 }
-async function $do296(client, request, options) {
-  const parsed = safeParse4(request, (value) => CreateSecretRequest$outboundSchema.parse(value), "Input validation failed");
+async function $do295(client, request, options) {
+  const parsed = safeParse4(request, (value) => ProxyBrowserPortRequestRequest$outboundSchema.parse(value), "Input validation failed");
   if (!parsed.ok) {
     return [parsed, { status: "invalid" }];
   }
   const payload = parsed.value;
-  const body = encodeJSON("body", payload.SecretCreate, { explode: true });
-  const path = pathToFunc("/api/v1/serving/secrets")();
+  const body = null;
+  const pathParams = {
+    port: encodeSimple("port", payload.port, {
+      explode: false,
+      charEncoding: "percent"
+    }),
+    session_id: encodeSimple("session_id", payload.session_id, {
+      explode: false,
+      charEncoding: "percent"
+    }),
+    subpath: encodeSimple("subpath", payload.subpath, {
+      explode: false,
+      charEncoding: "percent"
+    })
+  };
+  const path = pathToFunc("/api/v1/sandbox/sessions/{session_id}/ports/{port}/{subpath}")(pathParams);
+  const query = encodeFormQuery({
+    session_token: payload.session_token
+  });
   const headers = new Headers(compactMap({
-    "Content-Type": "application/json",
     Accept: "application/json",
     "X-On-Behalf-Of": encodeSimple("X-On-Behalf-Of", payload["X-On-Behalf-Of"], { explode: false, charEncoding: "none" })
   }));
@@ -132131,7 +132465,7 @@ async function $do296(client, request, options) {
   const context = {
     options: client._options,
     baseURL: options?.serverURL ?? client._baseURL ?? "",
-    operationID: "createSecret",
+    operationID: "proxyBrowserPortRequest",
     oAuth2Scopes: null,
     resolvedSecurity: requestSecurity,
     securitySource: client._options.bearerAuth,
@@ -132149,10 +132483,11 @@ async function $do296(client, request, options) {
   };
   const requestRes = client._createRequest(context, {
     security: requestSecurity,
-    method: "POST",
+    method: "GET",
     baseURL: options?.serverURL,
     path,
     headers,
+    query,
     body,
     userAgent: client._options.userAgent,
     timeoutMs: options?.timeoutMs || client._options.timeoutMs || -1
@@ -132174,13 +132509,14 @@ async function $do296(client, request, options) {
   const responseFields = {
     HttpMeta: { Response: response, Request: req }
   };
-  const [result] = await match(json(201, Secret$inboundSchema), jsonErr(403, ServingError$inboundSchema), jsonErr(422, ServingHTTPValidationError$inboundSchema), fail([401, "4XX"]), fail("5XX"))(response, req, { extraFields: responseFields });
+  const [result] = await match(json(200, anyType()), jsonErr(422, HTTPValidationError$inboundSchema), fail("4XX"), fail("5XX"))(response, req, { extraFields: responseFields });
   if (!result.ok) {
     return [result, { status: "complete", request: req, response }];
   }
   return [result, { status: "complete", request: req, response }];
 }
-var init_servingSecretsCreate = __esm(() => {
+var init_sandboxProxyBrowserPortRequest = __esm(() => {
+  init_esm();
   init_encodings();
   init_http();
   init_matchers();
@@ -132188,29 +132524,28 @@ var init_servingSecretsCreate = __esm(() => {
   init_schemas4();
   init_security();
   init_url();
-  init_components();
   init_errors4();
   init_operations();
   init_async();
 });
 
-// src/mcp-server/tools/servingSecretsCreate.ts
-var args287, tool$servingSecretsCreate;
-var init_servingSecretsCreate2 = __esm(() => {
-  init_servingSecretsCreate();
+// src/mcp-server/tools/sandboxProxyBrowserPortRequest.ts
+var args286, tool$sandboxProxyBrowserPortRequest;
+var init_sandboxProxyBrowserPortRequest2 = __esm(() => {
+  init_sandboxProxyBrowserPortRequest();
   init_operations();
   init_tools();
-  args287 = {
-    request: CreateSecretRequest$inboundSchema
+  args286 = {
+    request: ProxyBrowserPortRequestRequest$inboundSchema
   };
-  tool$servingSecretsCreate = {
-    name: "serving-secrets-create",
-    description: `Create a secret
+  tool$sandboxProxyBrowserPortRequest = {
+    name: "sandbox-proxy-browser-port-request",
+    description: `Proxy Browser Port Request
 
-Create a secret whose values are injected into your workloads as env vars.`,
-    args: args287,
-    tool: async (client, args288, ctx) => {
-      const [result, apiCall] = await servingSecretsCreate(client, args288.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
+Proxy an HTTP request to an exposed browser-session port through the gateway. Use the URL returned by \`GET /sessions/{session_id}/browser-url\` as the base. Insert CDP subpaths such as \`json/version\` or \`json/list\` before its query string, preserving the \`session_token\` parameter. This low-level proxy is intended for browser sessions on port \`9222\` and still requires the normal MKA1 API-key authorization header.`,
+    args: args286,
+    tool: async (client, args287, ctx) => {
+      const [result, apiCall] = await sandboxProxyBrowserPortRequest(client, args287.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
       if (!result.ok) {
         return {
           content: [{ type: "text", text: result.error.message }],
@@ -132223,25 +132558,26 @@ Create a secret whose values are injected into your workloads as env vars.`,
   };
 });
 
-// src/funcs/servingSecretsDelete.ts
-function servingSecretsDelete(client, request, options) {
-  return new APIPromise($do297(client, request, options));
+// src/funcs/sandboxRunCode.ts
+function sandboxRunCode(client, request, options) {
+  return new APIPromise($do296(client, request, options));
 }
-async function $do297(client, request, options) {
-  const parsed = safeParse4(request, (value) => DeleteSecretRequest$outboundSchema.parse(value), "Input validation failed");
+async function $do296(client, request, options) {
+  const parsed = safeParse4(request, (value) => RunCodeRequest$outboundSchema.parse(value), "Input validation failed");
   if (!parsed.ok) {
     return [parsed, { status: "invalid" }];
   }
   const payload = parsed.value;
-  const body = null;
+  const body = encodeJSON("body", payload.CodeRequest, { explode: true });
   const pathParams = {
-    secret_id: encodeSimple("secret_id", payload.secret_id, {
+    session_id: encodeSimple("session_id", payload.session_id, {
       explode: false,
       charEncoding: "percent"
     })
   };
-  const path = pathToFunc("/api/v1/serving/secrets/{secret_id}")(pathParams);
+  const path = pathToFunc("/api/v1/sandbox/sessions/{session_id}/code")(pathParams);
   const headers = new Headers(compactMap({
+    "Content-Type": "application/json",
     Accept: "application/json",
     "X-On-Behalf-Of": encodeSimple("X-On-Behalf-Of", payload["X-On-Behalf-Of"], { explode: false, charEncoding: "none" })
   }));
@@ -132251,7 +132587,7 @@ async function $do297(client, request, options) {
   const context = {
     options: client._options,
     baseURL: options?.serverURL ?? client._baseURL ?? "",
-    operationID: "deleteSecret",
+    operationID: "runCode",
     oAuth2Scopes: null,
     resolvedSecurity: requestSecurity,
     securitySource: client._options.bearerAuth,
@@ -132269,7 +132605,7 @@ async function $do297(client, request, options) {
   };
   const requestRes = client._createRequest(context, {
     security: requestSecurity,
-    method: "DELETE",
+    method: "POST",
     baseURL: options?.serverURL,
     path,
     headers,
@@ -132294,14 +132630,13 @@ async function $do297(client, request, options) {
   const responseFields = {
     HttpMeta: { Response: response, Request: req }
   };
-  const [result] = await match(nil(204, voidType()), jsonErr([403, 404, 409], ServingError$inboundSchema), jsonErr(422, ServingHTTPValidationError$inboundSchema), fail([401, "4XX"]), fail("5XX"))(response, req, { extraFields: responseFields });
+  const [result] = await match(json(200, CodeResult$inboundSchema), jsonErr(422, HTTPValidationError$inboundSchema), fail("4XX"), fail("5XX"))(response, req, { extraFields: responseFields });
   if (!result.ok) {
     return [result, { status: "complete", request: req, response }];
   }
   return [result, { status: "complete", request: req, response }];
 }
-var init_servingSecretsDelete = __esm(() => {
-  init_esm();
+var init_sandboxRunCode = __esm(() => {
   init_encodings();
   init_http();
   init_matchers();
@@ -132309,58 +132644,61 @@ var init_servingSecretsDelete = __esm(() => {
   init_schemas4();
   init_security();
   init_url();
+  init_components();
   init_errors4();
   init_operations();
   init_async();
 });
 
-// src/mcp-server/tools/servingSecretsDelete.ts
-var args288, tool$servingSecretsDelete;
-var init_servingSecretsDelete2 = __esm(() => {
-  init_servingSecretsDelete();
+// src/mcp-server/tools/sandboxRunCode.ts
+var args287, tool$sandboxRunCode;
+var init_sandboxRunCode2 = __esm(() => {
+  init_sandboxRunCode();
   init_operations();
   init_tools();
-  args288 = {
-    request: DeleteSecretRequest$inboundSchema
+  args287 = {
+    request: RunCodeRequest$inboundSchema
   };
-  tool$servingSecretsDelete = {
-    name: "serving-secrets-delete",
-    description: `Delete a secret
+  tool$sandboxRunCode = {
+    name: "sandbox-run-code",
+    description: `Run Code
 
-Delete a secret.`,
-    args: args288,
-    tool: async (client, args289, ctx) => {
-      const [result, apiCall] = await servingSecretsDelete(client, args289.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
+Execute source code in the session workspace using a supported runtime and return the execution result.`,
+    args: args287,
+    tool: async (client, args288, ctx) => {
+      const [result, apiCall] = await sandboxRunCode(client, args288.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
       if (!result.ok) {
         return {
           content: [{ type: "text", text: result.error.message }],
           isError: true
         };
       }
-      return formatResult(undefined, apiCall);
+      const value = result.value;
+      return formatResult(value, apiCall);
     }
   };
 });
 
-// src/funcs/servingSecretsGet.ts
-function servingSecretsGet(client, request, options) {
-  return new APIPromise($do298(client, request, options));
+// src/funcs/sandboxRunCommand.ts
+function sandboxRunCommand(client, request, options) {
+  return new APIPromise($do297(client, request, options));
 }
-async function $do298(client, request, options) {
-  const parsed = safeParse4(request, (value) => GetSecretRequest$outboundSchema.parse(value), "Input validation failed");
+async function $do297(client, request, options) {
+  const parsed = safeParse4(request, (value) => RunCommandRequest$outboundSchema.parse(value), "Input validation failed");
   if (!parsed.ok) {
     return [parsed, { status: "invalid" }];
   }
   const payload = parsed.value;
-  const body = null;
+  const body = encodeJSON("body", payload.CommandRequest, { explode: true });
   const pathParams = {
-    secret_id: encodeSimple("secret_id", payload.secret_id, {
+    session_id: encodeSimple("session_id", payload.session_id, {
       explode: false,
       charEncoding: "percent"
     })
   };
-  const path = pathToFunc("/api/v1/serving/secrets/{secret_id}")(pathParams);
+  const path = pathToFunc("/api/v1/sandbox/sessions/{session_id}/commands")(pathParams);
   const headers = new Headers(compactMap({
+    "Content-Type": "application/json",
     Accept: "application/json",
     "X-On-Behalf-Of": encodeSimple("X-On-Behalf-Of", payload["X-On-Behalf-Of"], { explode: false, charEncoding: "none" })
   }));
@@ -132370,7 +132708,7 @@ async function $do298(client, request, options) {
   const context = {
     options: client._options,
     baseURL: options?.serverURL ?? client._baseURL ?? "",
-    operationID: "getSecret",
+    operationID: "runCommand",
     oAuth2Scopes: null,
     resolvedSecurity: requestSecurity,
     securitySource: client._options.bearerAuth,
@@ -132388,7 +132726,7 @@ async function $do298(client, request, options) {
   };
   const requestRes = client._createRequest(context, {
     security: requestSecurity,
-    method: "GET",
+    method: "POST",
     baseURL: options?.serverURL,
     path,
     headers,
@@ -132413,13 +132751,13 @@ async function $do298(client, request, options) {
   const responseFields = {
     HttpMeta: { Response: response, Request: req }
   };
-  const [result] = await match(json(200, Secret$inboundSchema), jsonErr([403, 404], ServingError$inboundSchema), jsonErr(422, ServingHTTPValidationError$inboundSchema), fail([401, "4XX"]), fail("5XX"))(response, req, { extraFields: responseFields });
+  const [result] = await match(json(200, CommandResult$inboundSchema), jsonErr(422, HTTPValidationError$inboundSchema), fail("4XX"), fail("5XX"))(response, req, { extraFields: responseFields });
   if (!result.ok) {
     return [result, { status: "complete", request: req, response }];
   }
   return [result, { status: "complete", request: req, response }];
 }
-var init_servingSecretsGet = __esm(() => {
+var init_sandboxRunCommand = __esm(() => {
   init_encodings();
   init_http();
   init_matchers();
@@ -132433,23 +132771,23 @@ var init_servingSecretsGet = __esm(() => {
   init_async();
 });
 
-// src/mcp-server/tools/servingSecretsGet.ts
-var args289, tool$servingSecretsGet;
-var init_servingSecretsGet2 = __esm(() => {
-  init_servingSecretsGet();
+// src/mcp-server/tools/sandboxRunCommand.ts
+var args288, tool$sandboxRunCommand;
+var init_sandboxRunCommand2 = __esm(() => {
+  init_sandboxRunCommand();
   init_operations();
   init_tools();
-  args289 = {
-    request: GetSecretRequest$inboundSchema
+  args288 = {
+    request: RunCommandRequest$inboundSchema
   };
-  tool$servingSecretsGet = {
-    name: "serving-secrets-get",
-    description: `Get a secret
+  tool$sandboxRunCommand = {
+    name: "sandbox-run-command",
+    description: `Run Command
 
-Retrieve secret metadata: key names and allowed use. Values are never returned.`,
-    args: args289,
-    tool: async (client, args290, ctx) => {
-      const [result, apiCall] = await servingSecretsGet(client, args290.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
+Run a command in the session workspace and return stdout, stderr, exit code, and changed files.`,
+    args: args288,
+    tool: async (client, args289, ctx) => {
+      const [result, apiCall] = await sandboxRunCommand(client, args289.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
       if (!result.ok) {
         return {
           content: [{ type: "text", text: result.error.message }],
@@ -132462,25 +132800,21 @@ Retrieve secret metadata: key names and allowed use. Values are never returned.`
   };
 });
 
-// src/funcs/servingSecretsList.ts
-function servingSecretsList(client, request, options) {
-  return new APIPromise($do299(client, request, options));
+// src/funcs/sandboxSetPricing.ts
+function sandboxSetPricing(client, request, options) {
+  return new APIPromise($do298(client, request, options));
 }
-async function $do299(client, request, options) {
-  const parsed = safeParse4(request, (value) => ListSecretsRequest$outboundSchema.parse(value), "Input validation failed");
+async function $do298(client, request, options) {
+  const parsed = safeParse4(request, (value) => SandboxPricingUpdate$outboundSchema.parse(value), "Input validation failed");
   if (!parsed.ok) {
     return [parsed, { status: "invalid" }];
   }
   const payload = parsed.value;
-  const body = null;
-  const path = pathToFunc("/api/v1/serving/secrets")();
-  const query = encodeFormQuery({
-    cursor: payload.cursor,
-    limit: payload.limit
-  });
+  const body = encodeJSON("body", payload, { explode: true });
+  const path = pathToFunc("/api/v1/sandbox/pricing")();
   const headers = new Headers(compactMap({
-    Accept: "application/json",
-    "X-On-Behalf-Of": encodeSimple("X-On-Behalf-Of", payload["X-On-Behalf-Of"], { explode: false, charEncoding: "none" })
+    "Content-Type": "application/json",
+    Accept: "application/json"
   }));
   const secConfig = await extractSecurity(client._options.bearerAuth);
   const securityInput = secConfig == null ? {} : { bearerAuth: secConfig };
@@ -132488,7 +132822,7 @@ async function $do299(client, request, options) {
   const context = {
     options: client._options,
     baseURL: options?.serverURL ?? client._baseURL ?? "",
-    operationID: "listSecrets",
+    operationID: "setSandboxPricing",
     oAuth2Scopes: null,
     resolvedSecurity: requestSecurity,
     securitySource: client._options.bearerAuth,
@@ -132506,11 +132840,10 @@ async function $do299(client, request, options) {
   };
   const requestRes = client._createRequest(context, {
     security: requestSecurity,
-    method: "GET",
+    method: "PUT",
     baseURL: options?.serverURL,
     path,
     headers,
-    query,
     body,
     userAgent: client._options.userAgent,
     timeoutMs: options?.timeoutMs || client._options.timeoutMs || -1
@@ -132532,13 +132865,13 @@ async function $do299(client, request, options) {
   const responseFields = {
     HttpMeta: { Response: response, Request: req }
   };
-  const [result] = await match(json(200, PageSecret$inboundSchema), jsonErr(403, ServingError$inboundSchema), jsonErr(422, ServingHTTPValidationError$inboundSchema), fail([401, "4XX"]), fail("5XX"))(response, req, { extraFields: responseFields });
+  const [result] = await match(json(200, SandboxPricingCard$inboundSchema), jsonErr(422, HTTPValidationError$inboundSchema), fail("4XX"), fail("5XX"))(response, req, { extraFields: responseFields });
   if (!result.ok) {
     return [result, { status: "complete", request: req, response }];
   }
   return [result, { status: "complete", request: req, response }];
 }
-var init_servingSecretsList = __esm(() => {
+var init_sandboxSetPricing = __esm(() => {
   init_encodings();
   init_http();
   init_matchers();
@@ -132548,27 +132881,26 @@ var init_servingSecretsList = __esm(() => {
   init_url();
   init_components();
   init_errors4();
-  init_operations();
   init_async();
 });
 
-// src/mcp-server/tools/servingSecretsList.ts
-var args290, tool$servingSecretsList;
-var init_servingSecretsList2 = __esm(() => {
-  init_servingSecretsList();
-  init_operations();
+// src/mcp-server/tools/sandboxSetPricing.ts
+var args289, tool$sandboxSetPricing;
+var init_sandboxSetPricing2 = __esm(() => {
+  init_sandboxSetPricing();
+  init_components();
   init_tools();
-  args290 = {
-    request: ListSecretsRequest$inboundSchema
+  args289 = {
+    request: SandboxPricingUpdate$inboundSchema
   };
-  tool$servingSecretsList = {
-    name: "serving-secrets-list",
-    description: `List secrets (names only)
+  tool$sandboxSetPricing = {
+    name: "sandbox-set-pricing",
+    description: `Set Sandbox Pricing
 
-List your secrets by name (values are never returned).`,
-    args: args290,
-    tool: async (client, args291, ctx) => {
-      const [result, apiCall] = await servingSecretsList(client, args291.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
+Replace the sandbox pricing rate card. Full-replace semantics: SKUs omitted from the request become unpriced and accrue no spend. Takes effect on the next meter window without a restart. Cluster admins only.`,
+    args: args289,
+    tool: async (client, args290, ctx) => {
+      const [result, apiCall] = await sandboxSetPricing(client, args290.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
       if (!result.ok) {
         return {
           content: [{ type: "text", text: result.error.message }],
@@ -132581,23 +132913,28 @@ List your secrets by name (values are never returned).`,
   };
 });
 
-// src/funcs/servingSpendGet.ts
-function servingSpendGet(client, request, options) {
-  return new APIPromise($do300(client, request, options));
+// src/funcs/sandboxTerminate.ts
+function sandboxTerminate(client, request, options) {
+  return new APIPromise($do299(client, request, options));
 }
-async function $do300(client, request, options) {
-  const parsed = safeParse4(request, (value) => GetServingUsageRequest$outboundSchema.parse(value), "Input validation failed");
+async function $do299(client, request, options) {
+  const parsed = safeParse4(request, (value) => TerminateSessionRequest$outboundSchema2.parse(value), "Input validation failed");
   if (!parsed.ok) {
     return [parsed, { status: "invalid" }];
   }
   const payload = parsed.value;
-  const body = null;
-  const path = pathToFunc("/api/v1/serving/usage")();
-  const query = encodeFormQuery({
-    end: payload.end,
-    start: payload.start
+  const body = encodeJSON("body", payload.TerminateSessionRequest, {
+    explode: true
   });
+  const pathParams = {
+    session_id: encodeSimple("session_id", payload.session_id, {
+      explode: false,
+      charEncoding: "percent"
+    })
+  };
+  const path = pathToFunc("/api/v1/sandbox/sessions/{session_id}/terminate")(pathParams);
   const headers = new Headers(compactMap({
+    "Content-Type": "application/json",
     Accept: "application/json",
     "X-On-Behalf-Of": encodeSimple("X-On-Behalf-Of", payload["X-On-Behalf-Of"], { explode: false, charEncoding: "none" })
   }));
@@ -132607,7 +132944,7 @@ async function $do300(client, request, options) {
   const context = {
     options: client._options,
     baseURL: options?.serverURL ?? client._baseURL ?? "",
-    operationID: "getServingUsage",
+    operationID: "terminateSession",
     oAuth2Scopes: null,
     resolvedSecurity: requestSecurity,
     securitySource: client._options.bearerAuth,
@@ -132625,11 +132962,10 @@ async function $do300(client, request, options) {
   };
   const requestRes = client._createRequest(context, {
     security: requestSecurity,
-    method: "GET",
+    method: "POST",
     baseURL: options?.serverURL,
     path,
     headers,
-    query,
     body,
     userAgent: client._options.userAgent,
     timeoutMs: options?.timeoutMs || client._options.timeoutMs || -1
@@ -132651,13 +132987,13 @@ async function $do300(client, request, options) {
   const responseFields = {
     HttpMeta: { Response: response, Request: req }
   };
-  const [result] = await match(json(200, SpendSummary$inboundSchema), jsonErr([401, 403], ServingError$inboundSchema), jsonErr(422, ServingHTTPValidationError$inboundSchema), jsonErr([500, 503], ServingError$inboundSchema), fail("4XX"), fail("5XX"))(response, req, { extraFields: responseFields });
+  const [result] = await match(json(200, TerminateSessionResponse$inboundSchema), jsonErr(422, HTTPValidationError$inboundSchema), fail("4XX"), fail("5XX"))(response, req, { extraFields: responseFields });
   if (!result.ok) {
     return [result, { status: "complete", request: req, response }];
   }
   return [result, { status: "complete", request: req, response }];
 }
-var init_servingSpendGet = __esm(() => {
+var init_sandboxTerminate = __esm(() => {
   init_encodings();
   init_http();
   init_matchers();
@@ -132671,23 +133007,23 @@ var init_servingSpendGet = __esm(() => {
   init_async();
 });
 
-// src/mcp-server/tools/servingSpendGet.ts
-var args291, tool$servingSpendGet;
-var init_servingSpendGet2 = __esm(() => {
-  init_servingSpendGet();
+// src/mcp-server/tools/sandboxTerminate.ts
+var args290, tool$sandboxTerminate;
+var init_sandboxTerminate2 = __esm(() => {
+  init_sandboxTerminate();
   init_operations();
   init_tools();
-  args291 = {
-    request: GetServingUsageRequest$inboundSchema
+  args290 = {
+    request: TerminateSessionRequest$inboundSchema2
   };
-  tool$servingSpendGet = {
-    name: "serving-spend-get",
-    description: `Cost and spend summary
+  tool$sandboxTerminate = {
+    name: "sandbox-terminate",
+    description: `Terminate Session
 
-Aggregate spend for your organization, computed from retained compute ledgers as price × runtime overlap with the requested window. Spend is derived on read and is never stored.`,
-    args: args291,
-    tool: async (client, args292, ctx) => {
-      const [result, apiCall] = await servingSpendGet(client, args292.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
+Stop a sandbox session and release the backing sandbox resources.`,
+    args: args290,
+    tool: async (client, args291, ctx) => {
+      const [result, apiCall] = await sandboxTerminate(client, args291.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
       if (!result.ok) {
         return {
           content: [{ type: "text", text: result.error.message }],
@@ -132700,25 +133036,29 @@ Aggregate spend for your organization, computed from retained compute ledgers as
   };
 });
 
-// src/funcs/servingTenantsGet.ts
-function servingTenantsGet(client, request, options) {
-  return new APIPromise($do301(client, request, options));
+// src/funcs/sandboxUploadArchive.ts
+function sandboxUploadArchive(client, request, options) {
+  return new APIPromise($do300(client, request, options));
 }
-async function $do301(client, request, options) {
-  const parsed = safeParse4(request, (value) => GetServingTenantRequest$outboundSchema.parse(value), "Input validation failed");
+async function $do300(client, request, options) {
+  const parsed = safeParse4(request, (value) => UploadWorkspaceArchiveRequest$outboundSchema.parse(value), "Input validation failed");
   if (!parsed.ok) {
     return [parsed, { status: "invalid" }];
   }
   const payload = parsed.value;
-  const body = null;
+  const body = payload.RequestBody instanceof Uint8Array ? new Uint8Array(payload.RequestBody).buffer : payload.RequestBody;
   const pathParams = {
-    org_id: encodeSimple("org_id", payload.org_id, {
+    session_id: encodeSimple("session_id", payload.session_id, {
       explode: false,
       charEncoding: "percent"
     })
   };
-  const path = pathToFunc("/api/v1/serving/tenants/{org_id}")(pathParams);
+  const path = pathToFunc("/api/v1/sandbox/sessions/{session_id}/workspace/archive")(pathParams);
+  const query = encodeFormQuery({
+    session_token: payload.session_token
+  });
   const headers = new Headers(compactMap({
+    "Content-Type": "application/zip",
     Accept: "application/json",
     "X-On-Behalf-Of": encodeSimple("X-On-Behalf-Of", payload["X-On-Behalf-Of"], { explode: false, charEncoding: "none" })
   }));
@@ -132728,7 +133068,7 @@ async function $do301(client, request, options) {
   const context = {
     options: client._options,
     baseURL: options?.serverURL ?? client._baseURL ?? "",
-    operationID: "getServingTenant",
+    operationID: "uploadWorkspaceArchive",
     oAuth2Scopes: null,
     resolvedSecurity: requestSecurity,
     securitySource: client._options.bearerAuth,
@@ -132746,10 +133086,11 @@ async function $do301(client, request, options) {
   };
   const requestRes = client._createRequest(context, {
     security: requestSecurity,
-    method: "GET",
+    method: "PUT",
     baseURL: options?.serverURL,
     path,
     headers,
+    query,
     body,
     userAgent: client._options.userAgent,
     timeoutMs: options?.timeoutMs || client._options.timeoutMs || -1
@@ -132771,13 +133112,14 @@ async function $do301(client, request, options) {
   const responseFields = {
     HttpMeta: { Response: response, Request: req }
   };
-  const [result] = await match(json(200, ServingTenant$inboundSchema), jsonErr([403, 404], ServingError$inboundSchema), jsonErr(422, ServingHTTPValidationError$inboundSchema), fail([401, "4XX"]), fail("5XX"))(response, req, { extraFields: responseFields });
+  const [result] = await match(json(200, recordType(stringType())), jsonErr(422, HTTPValidationError$inboundSchema), fail("4XX"), fail("5XX"))(response, req, { extraFields: responseFields });
   if (!result.ok) {
     return [result, { status: "complete", request: req, response }];
   }
   return [result, { status: "complete", request: req, response }];
 }
-var init_servingTenantsGet = __esm(() => {
+var init_sandboxUploadArchive = __esm(() => {
+  init_esm();
   init_encodings();
   init_http();
   init_matchers();
@@ -132785,29 +133127,28 @@ var init_servingTenantsGet = __esm(() => {
   init_schemas4();
   init_security();
   init_url();
-  init_components();
   init_errors4();
   init_operations();
   init_async();
 });
 
-// src/mcp-server/tools/servingTenantsGet.ts
-var args292, tool$servingTenantsGet;
-var init_servingTenantsGet2 = __esm(() => {
-  init_servingTenantsGet();
+// src/mcp-server/tools/sandboxUploadArchive.ts
+var args291, tool$sandboxUploadArchive;
+var init_sandboxUploadArchive2 = __esm(() => {
+  init_sandboxUploadArchive();
   init_operations();
   init_tools();
-  args292 = {
-    request: GetServingTenantRequest$inboundSchema
+  args291 = {
+    request: UploadWorkspaceArchiveRequest$inboundSchema
   };
-  tool$servingTenantsGet = {
-    name: "serving-tenants-get",
-    description: `Get a serving tenant
+  tool$sandboxUploadArchive = {
+    name: "sandbox-upload-archive",
+    description: `Upload Workspace Archive
 
-Get one organization's serving enablement record. Cluster administrators only. Deprecated: this operation has moved to the operator admin plane at \`GET /api/v1/admin/tenants/{org_id}\`. This path keeps working for one transition release (responses carry \`Deprecation: true\` and a \`Link\` successor header) and is removed from this document in the next SDK major.`,
-    args: args292,
-    tool: async (client, args293, ctx) => {
-      const [result, apiCall] = await servingTenantsGet(client, args293.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
+Upload a zip archive and extract its files into the session workspace.`,
+    args: args291,
+    tool: async (client, args292, ctx) => {
+      const [result, apiCall] = await sandboxUploadArchive(client, args292.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
       if (!result.ok) {
         return {
           content: [{ type: "text", text: result.error.message }],
@@ -132820,23 +133161,33 @@ Get one organization's serving enablement record. Cluster administrators only. D
   };
 });
 
-// src/funcs/servingTenantsList.ts
-function servingTenantsList(client, request, options) {
-  return new APIPromise($do302(client, request, options));
+// src/funcs/sandboxUploadFile.ts
+function sandboxUploadFile(client, request, options) {
+  return new APIPromise($do301(client, request, options));
 }
-async function $do302(client, request, options) {
-  const parsed = safeParse4(request, (value) => ListServingTenantsRequest$outboundSchema.parse(value), "Input validation failed");
+async function $do301(client, request, options) {
+  const parsed = safeParse4(request, (value) => UploadWorkspaceFileRequest$outboundSchema.parse(value), "Input validation failed");
   if (!parsed.ok) {
     return [parsed, { status: "invalid" }];
   }
   const payload = parsed.value;
-  const body = null;
-  const path = pathToFunc("/api/v1/serving/tenants")();
+  const body = payload.RequestBody instanceof Uint8Array ? new Uint8Array(payload.RequestBody).buffer : payload.RequestBody;
+  const pathParams = {
+    file_path: encodeSimple("file_path", payload.file_path, {
+      explode: false,
+      charEncoding: "percent"
+    }),
+    session_id: encodeSimple("session_id", payload.session_id, {
+      explode: false,
+      charEncoding: "percent"
+    })
+  };
+  const path = pathToFunc("/api/v1/sandbox/sessions/{session_id}/workspace/files/{file_path}")(pathParams);
   const query = encodeFormQuery({
-    cursor: payload.cursor,
-    limit: payload.limit
+    session_token: payload.session_token
   });
   const headers = new Headers(compactMap({
+    "Content-Type": "application/octet-stream",
     Accept: "application/json",
     "X-On-Behalf-Of": encodeSimple("X-On-Behalf-Of", payload["X-On-Behalf-Of"], { explode: false, charEncoding: "none" })
   }));
@@ -132846,7 +133197,7 @@ async function $do302(client, request, options) {
   const context = {
     options: client._options,
     baseURL: options?.serverURL ?? client._baseURL ?? "",
-    operationID: "listServingTenants",
+    operationID: "uploadWorkspaceFile",
     oAuth2Scopes: null,
     resolvedSecurity: requestSecurity,
     securitySource: client._options.bearerAuth,
@@ -132864,7 +133215,1072 @@ async function $do302(client, request, options) {
   };
   const requestRes = client._createRequest(context, {
     security: requestSecurity,
-    method: "GET",
+    method: "PUT",
+    baseURL: options?.serverURL,
+    path,
+    headers,
+    query,
+    body,
+    userAgent: client._options.userAgent,
+    timeoutMs: options?.timeoutMs || client._options.timeoutMs || -1
+  }, options);
+  if (!requestRes.ok) {
+    return [requestRes, { status: "invalid" }];
+  }
+  const req = requestRes.value;
+  const doResult = await client._do(req, {
+    context,
+    isErrorStatusCode: (statusCode) => matchStatusCode({ status: statusCode }, ["4XX", "5XX"]),
+    retryConfig: context.retryConfig,
+    retryCodes: context.retryCodes
+  });
+  if (!doResult.ok) {
+    return [doResult, { status: "request-error", request: req }];
+  }
+  const response = doResult.value;
+  const responseFields = {
+    HttpMeta: { Response: response, Request: req }
+  };
+  const [result] = await match(json(200, recordType(stringType())), jsonErr(422, HTTPValidationError$inboundSchema), fail("4XX"), fail("5XX"))(response, req, { extraFields: responseFields });
+  if (!result.ok) {
+    return [result, { status: "complete", request: req, response }];
+  }
+  return [result, { status: "complete", request: req, response }];
+}
+var init_sandboxUploadFile = __esm(() => {
+  init_esm();
+  init_encodings();
+  init_http();
+  init_matchers();
+  init_primitives();
+  init_schemas4();
+  init_security();
+  init_url();
+  init_errors4();
+  init_operations();
+  init_async();
+});
+
+// src/mcp-server/tools/sandboxUploadFile.ts
+var args292, tool$sandboxUploadFile;
+var init_sandboxUploadFile2 = __esm(() => {
+  init_sandboxUploadFile();
+  init_operations();
+  init_tools();
+  args292 = {
+    request: UploadWorkspaceFileRequest$inboundSchema
+  };
+  tool$sandboxUploadFile = {
+    name: "sandbox-upload-file",
+    description: `Upload Workspace File
+
+Upload raw bytes into the session workspace at the given path.`,
+    args: args292,
+    tool: async (client, args293, ctx) => {
+      const [result, apiCall] = await sandboxUploadFile(client, args293.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
+      if (!result.ok) {
+        return {
+          content: [{ type: "text", text: result.error.message }],
+          isError: true
+        };
+      }
+      const value = result.value;
+      return formatResult(value, apiCall);
+    }
+  };
+});
+
+// src/funcs/servingAcceleratorsGet.ts
+function servingAcceleratorsGet(client, request, options) {
+  return new APIPromise($do302(client, request, options));
+}
+async function $do302(client, request, options) {
+  const parsed = safeParse4(request, (value) => GetAcceleratorRequest$outboundSchema.parse(value), "Input validation failed");
+  if (!parsed.ok) {
+    return [parsed, { status: "invalid" }];
+  }
+  const payload = parsed.value;
+  const body = null;
+  const pathParams = {
+    name: encodeSimple("name", payload.name, {
+      explode: false,
+      charEncoding: "percent"
+    })
+  };
+  const path = pathToFunc("/api/v1/serving/accelerators/{name}")(pathParams);
+  const headers = new Headers(compactMap({
+    Accept: "application/json",
+    "X-On-Behalf-Of": encodeSimple("X-On-Behalf-Of", payload["X-On-Behalf-Of"], { explode: false, charEncoding: "none" })
+  }));
+  const secConfig = await extractSecurity(client._options.bearerAuth);
+  const securityInput = secConfig == null ? {} : { bearerAuth: secConfig };
+  const requestSecurity = resolveGlobalSecurity(securityInput);
+  const context = {
+    options: client._options,
+    baseURL: options?.serverURL ?? client._baseURL ?? "",
+    operationID: "getAccelerator",
+    oAuth2Scopes: null,
+    resolvedSecurity: requestSecurity,
+    securitySource: client._options.bearerAuth,
+    retryConfig: options?.retries || client._options.retryConfig || {
+      strategy: "backoff",
+      backoff: {
+        initialInterval: 500,
+        maxInterval: 5000,
+        exponent: 1.5,
+        maxElapsedTime: 15000
+      },
+      retryConnectionErrors: true
+    },
+    retryCodes: options?.retryCodes || ["429", "500", "502", "503", "504"]
+  };
+  const requestRes = client._createRequest(context, {
+    security: requestSecurity,
+    method: "GET",
+    baseURL: options?.serverURL,
+    path,
+    headers,
+    body,
+    userAgent: client._options.userAgent,
+    timeoutMs: options?.timeoutMs || client._options.timeoutMs || -1
+  }, options);
+  if (!requestRes.ok) {
+    return [requestRes, { status: "invalid" }];
+  }
+  const req = requestRes.value;
+  const doResult = await client._do(req, {
+    context,
+    isErrorStatusCode: (statusCode) => matchStatusCode({ status: statusCode }, ["4XX", "5XX"]),
+    retryConfig: context.retryConfig,
+    retryCodes: context.retryCodes
+  });
+  if (!doResult.ok) {
+    return [doResult, { status: "request-error", request: req }];
+  }
+  const response = doResult.value;
+  const responseFields = {
+    HttpMeta: { Response: response, Request: req }
+  };
+  const [result] = await match(json(200, AcceleratorType$inboundSchema), jsonErr([403, 404], ServingError$inboundSchema), fail([401, "4XX"]), fail("5XX"))(response, req, { extraFields: responseFields });
+  if (!result.ok) {
+    return [result, { status: "complete", request: req, response }];
+  }
+  return [result, { status: "complete", request: req, response }];
+}
+var init_servingAcceleratorsGet = __esm(() => {
+  init_encodings();
+  init_http();
+  init_matchers();
+  init_primitives();
+  init_schemas4();
+  init_security();
+  init_url();
+  init_components();
+  init_errors4();
+  init_operations();
+  init_async();
+});
+
+// src/mcp-server/tools/servingAcceleratorsGet.ts
+var args293, tool$servingAcceleratorsGet;
+var init_servingAcceleratorsGet2 = __esm(() => {
+  init_servingAcceleratorsGet();
+  init_operations();
+  init_tools();
+  args293 = {
+    request: GetAcceleratorRequest$inboundSchema
+  };
+  tool$servingAcceleratorsGet = {
+    name: "serving-accelerators-get",
+    description: `Get an accelerator type
+
+Retrieve one accelerator type from the curated catalog, including its workload affinity, placements, and live market fields when available.`,
+    args: args293,
+    tool: async (client, args294, ctx) => {
+      const [result, apiCall] = await servingAcceleratorsGet(client, args294.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
+      if (!result.ok) {
+        return {
+          content: [{ type: "text", text: result.error.message }],
+          isError: true
+        };
+      }
+      const value = result.value;
+      return formatResult(value, apiCall);
+    }
+  };
+});
+
+// src/funcs/servingAcceleratorsList.ts
+function servingAcceleratorsList(client, request, options) {
+  return new APIPromise($do303(client, request, options));
+}
+async function $do303(client, request, options) {
+  const parsed = safeParse4(request, (value) => ListAcceleratorsRequest$outboundSchema.parse(value), "Input validation failed");
+  if (!parsed.ok) {
+    return [parsed, { status: "invalid" }];
+  }
+  const payload = parsed.value;
+  const body = null;
+  const path = pathToFunc("/api/v1/serving/accelerators")();
+  const headers = new Headers(compactMap({
+    Accept: "application/json",
+    "X-On-Behalf-Of": encodeSimple("X-On-Behalf-Of", payload["X-On-Behalf-Of"], { explode: false, charEncoding: "none" })
+  }));
+  const secConfig = await extractSecurity(client._options.bearerAuth);
+  const securityInput = secConfig == null ? {} : { bearerAuth: secConfig };
+  const requestSecurity = resolveGlobalSecurity(securityInput);
+  const context = {
+    options: client._options,
+    baseURL: options?.serverURL ?? client._baseURL ?? "",
+    operationID: "listAccelerators",
+    oAuth2Scopes: null,
+    resolvedSecurity: requestSecurity,
+    securitySource: client._options.bearerAuth,
+    retryConfig: options?.retries || client._options.retryConfig || {
+      strategy: "backoff",
+      backoff: {
+        initialInterval: 500,
+        maxInterval: 5000,
+        exponent: 1.5,
+        maxElapsedTime: 15000
+      },
+      retryConnectionErrors: true
+    },
+    retryCodes: options?.retryCodes || ["429", "500", "502", "503", "504"]
+  };
+  const requestRes = client._createRequest(context, {
+    security: requestSecurity,
+    method: "GET",
+    baseURL: options?.serverURL,
+    path,
+    headers,
+    body,
+    userAgent: client._options.userAgent,
+    timeoutMs: options?.timeoutMs || client._options.timeoutMs || -1
+  }, options);
+  if (!requestRes.ok) {
+    return [requestRes, { status: "invalid" }];
+  }
+  const req = requestRes.value;
+  const doResult = await client._do(req, {
+    context,
+    isErrorStatusCode: (statusCode) => matchStatusCode({ status: statusCode }, ["4XX", "5XX"]),
+    retryConfig: context.retryConfig,
+    retryCodes: context.retryCodes
+  });
+  if (!doResult.ok) {
+    return [doResult, { status: "request-error", request: req }];
+  }
+  const response = doResult.value;
+  const responseFields = {
+    HttpMeta: { Response: response, Request: req }
+  };
+  const [result] = await match(json(200, PageAcceleratorType$inboundSchema), jsonErr(403, ServingError$inboundSchema), fail([401, "4XX"]), fail("5XX"))(response, req, { extraFields: responseFields });
+  if (!result.ok) {
+    return [result, { status: "complete", request: req, response }];
+  }
+  return [result, { status: "complete", request: req, response }];
+}
+var init_servingAcceleratorsList = __esm(() => {
+  init_encodings();
+  init_http();
+  init_matchers();
+  init_primitives();
+  init_schemas4();
+  init_security();
+  init_url();
+  init_components();
+  init_errors4();
+  init_operations();
+  init_async();
+});
+
+// src/mcp-server/tools/servingAcceleratorsList.ts
+var args294, tool$servingAcceleratorsList;
+var init_servingAcceleratorsList2 = __esm(() => {
+  init_servingAcceleratorsList();
+  init_operations();
+  init_tools();
+  args294 = {
+    request: ListAcceleratorsRequest$inboundSchema
+  };
+  tool$servingAcceleratorsList = {
+    name: "serving-accelerators-list",
+    description: `List available accelerator types
+
+List the accelerator types available to your organization (GPU, NPU, TPU).`,
+    args: args294,
+    tool: async (client, args295, ctx) => {
+      const [result, apiCall] = await servingAcceleratorsList(client, args295.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
+      if (!result.ok) {
+        return {
+          content: [{ type: "text", text: result.error.message }],
+          isError: true
+        };
+      }
+      const value = result.value;
+      return formatResult(value, apiCall);
+    }
+  };
+});
+
+// src/funcs/servingSecretsCreate.ts
+function servingSecretsCreate(client, request, options) {
+  return new APIPromise($do304(client, request, options));
+}
+async function $do304(client, request, options) {
+  const parsed = safeParse4(request, (value) => CreateSecretRequest$outboundSchema.parse(value), "Input validation failed");
+  if (!parsed.ok) {
+    return [parsed, { status: "invalid" }];
+  }
+  const payload = parsed.value;
+  const body = encodeJSON("body", payload.SecretCreate, { explode: true });
+  const path = pathToFunc("/api/v1/serving/secrets")();
+  const headers = new Headers(compactMap({
+    "Content-Type": "application/json",
+    Accept: "application/json",
+    "X-On-Behalf-Of": encodeSimple("X-On-Behalf-Of", payload["X-On-Behalf-Of"], { explode: false, charEncoding: "none" })
+  }));
+  const secConfig = await extractSecurity(client._options.bearerAuth);
+  const securityInput = secConfig == null ? {} : { bearerAuth: secConfig };
+  const requestSecurity = resolveGlobalSecurity(securityInput);
+  const context = {
+    options: client._options,
+    baseURL: options?.serverURL ?? client._baseURL ?? "",
+    operationID: "createSecret",
+    oAuth2Scopes: null,
+    resolvedSecurity: requestSecurity,
+    securitySource: client._options.bearerAuth,
+    retryConfig: options?.retries || client._options.retryConfig || {
+      strategy: "backoff",
+      backoff: {
+        initialInterval: 500,
+        maxInterval: 5000,
+        exponent: 1.5,
+        maxElapsedTime: 15000
+      },
+      retryConnectionErrors: true
+    },
+    retryCodes: options?.retryCodes || ["429", "500", "502", "503", "504"]
+  };
+  const requestRes = client._createRequest(context, {
+    security: requestSecurity,
+    method: "POST",
+    baseURL: options?.serverURL,
+    path,
+    headers,
+    body,
+    userAgent: client._options.userAgent,
+    timeoutMs: options?.timeoutMs || client._options.timeoutMs || -1
+  }, options);
+  if (!requestRes.ok) {
+    return [requestRes, { status: "invalid" }];
+  }
+  const req = requestRes.value;
+  const doResult = await client._do(req, {
+    context,
+    isErrorStatusCode: (statusCode) => matchStatusCode({ status: statusCode }, ["4XX", "5XX"]),
+    retryConfig: context.retryConfig,
+    retryCodes: context.retryCodes
+  });
+  if (!doResult.ok) {
+    return [doResult, { status: "request-error", request: req }];
+  }
+  const response = doResult.value;
+  const responseFields = {
+    HttpMeta: { Response: response, Request: req }
+  };
+  const [result] = await match(json(201, Secret$inboundSchema), jsonErr(403, ServingError$inboundSchema), jsonErr(422, ServingHTTPValidationError$inboundSchema), fail([401, "4XX"]), fail("5XX"))(response, req, { extraFields: responseFields });
+  if (!result.ok) {
+    return [result, { status: "complete", request: req, response }];
+  }
+  return [result, { status: "complete", request: req, response }];
+}
+var init_servingSecretsCreate = __esm(() => {
+  init_encodings();
+  init_http();
+  init_matchers();
+  init_primitives();
+  init_schemas4();
+  init_security();
+  init_url();
+  init_components();
+  init_errors4();
+  init_operations();
+  init_async();
+});
+
+// src/mcp-server/tools/servingSecretsCreate.ts
+var args295, tool$servingSecretsCreate;
+var init_servingSecretsCreate2 = __esm(() => {
+  init_servingSecretsCreate();
+  init_operations();
+  init_tools();
+  args295 = {
+    request: CreateSecretRequest$inboundSchema
+  };
+  tool$servingSecretsCreate = {
+    name: "serving-secrets-create",
+    description: `Create a secret
+
+Create a secret whose values are injected into your workloads as env vars.`,
+    args: args295,
+    tool: async (client, args296, ctx) => {
+      const [result, apiCall] = await servingSecretsCreate(client, args296.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
+      if (!result.ok) {
+        return {
+          content: [{ type: "text", text: result.error.message }],
+          isError: true
+        };
+      }
+      const value = result.value;
+      return formatResult(value, apiCall);
+    }
+  };
+});
+
+// src/funcs/servingSecretsDelete.ts
+function servingSecretsDelete(client, request, options) {
+  return new APIPromise($do305(client, request, options));
+}
+async function $do305(client, request, options) {
+  const parsed = safeParse4(request, (value) => DeleteSecretRequest$outboundSchema.parse(value), "Input validation failed");
+  if (!parsed.ok) {
+    return [parsed, { status: "invalid" }];
+  }
+  const payload = parsed.value;
+  const body = null;
+  const pathParams = {
+    secret_id: encodeSimple("secret_id", payload.secret_id, {
+      explode: false,
+      charEncoding: "percent"
+    })
+  };
+  const path = pathToFunc("/api/v1/serving/secrets/{secret_id}")(pathParams);
+  const headers = new Headers(compactMap({
+    Accept: "application/json",
+    "X-On-Behalf-Of": encodeSimple("X-On-Behalf-Of", payload["X-On-Behalf-Of"], { explode: false, charEncoding: "none" })
+  }));
+  const secConfig = await extractSecurity(client._options.bearerAuth);
+  const securityInput = secConfig == null ? {} : { bearerAuth: secConfig };
+  const requestSecurity = resolveGlobalSecurity(securityInput);
+  const context = {
+    options: client._options,
+    baseURL: options?.serverURL ?? client._baseURL ?? "",
+    operationID: "deleteSecret",
+    oAuth2Scopes: null,
+    resolvedSecurity: requestSecurity,
+    securitySource: client._options.bearerAuth,
+    retryConfig: options?.retries || client._options.retryConfig || {
+      strategy: "backoff",
+      backoff: {
+        initialInterval: 500,
+        maxInterval: 5000,
+        exponent: 1.5,
+        maxElapsedTime: 15000
+      },
+      retryConnectionErrors: true
+    },
+    retryCodes: options?.retryCodes || ["429", "500", "502", "503", "504"]
+  };
+  const requestRes = client._createRequest(context, {
+    security: requestSecurity,
+    method: "DELETE",
+    baseURL: options?.serverURL,
+    path,
+    headers,
+    body,
+    userAgent: client._options.userAgent,
+    timeoutMs: options?.timeoutMs || client._options.timeoutMs || -1
+  }, options);
+  if (!requestRes.ok) {
+    return [requestRes, { status: "invalid" }];
+  }
+  const req = requestRes.value;
+  const doResult = await client._do(req, {
+    context,
+    isErrorStatusCode: (statusCode) => matchStatusCode({ status: statusCode }, ["4XX", "5XX"]),
+    retryConfig: context.retryConfig,
+    retryCodes: context.retryCodes
+  });
+  if (!doResult.ok) {
+    return [doResult, { status: "request-error", request: req }];
+  }
+  const response = doResult.value;
+  const responseFields = {
+    HttpMeta: { Response: response, Request: req }
+  };
+  const [result] = await match(nil(204, voidType()), jsonErr([403, 404, 409], ServingError$inboundSchema), jsonErr(422, ServingHTTPValidationError$inboundSchema), fail([401, "4XX"]), fail("5XX"))(response, req, { extraFields: responseFields });
+  if (!result.ok) {
+    return [result, { status: "complete", request: req, response }];
+  }
+  return [result, { status: "complete", request: req, response }];
+}
+var init_servingSecretsDelete = __esm(() => {
+  init_esm();
+  init_encodings();
+  init_http();
+  init_matchers();
+  init_primitives();
+  init_schemas4();
+  init_security();
+  init_url();
+  init_errors4();
+  init_operations();
+  init_async();
+});
+
+// src/mcp-server/tools/servingSecretsDelete.ts
+var args296, tool$servingSecretsDelete;
+var init_servingSecretsDelete2 = __esm(() => {
+  init_servingSecretsDelete();
+  init_operations();
+  init_tools();
+  args296 = {
+    request: DeleteSecretRequest$inboundSchema
+  };
+  tool$servingSecretsDelete = {
+    name: "serving-secrets-delete",
+    description: `Delete a secret
+
+Delete a secret.`,
+    args: args296,
+    tool: async (client, args297, ctx) => {
+      const [result, apiCall] = await servingSecretsDelete(client, args297.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
+      if (!result.ok) {
+        return {
+          content: [{ type: "text", text: result.error.message }],
+          isError: true
+        };
+      }
+      return formatResult(undefined, apiCall);
+    }
+  };
+});
+
+// src/funcs/servingSecretsGet.ts
+function servingSecretsGet(client, request, options) {
+  return new APIPromise($do306(client, request, options));
+}
+async function $do306(client, request, options) {
+  const parsed = safeParse4(request, (value) => GetSecretRequest$outboundSchema.parse(value), "Input validation failed");
+  if (!parsed.ok) {
+    return [parsed, { status: "invalid" }];
+  }
+  const payload = parsed.value;
+  const body = null;
+  const pathParams = {
+    secret_id: encodeSimple("secret_id", payload.secret_id, {
+      explode: false,
+      charEncoding: "percent"
+    })
+  };
+  const path = pathToFunc("/api/v1/serving/secrets/{secret_id}")(pathParams);
+  const headers = new Headers(compactMap({
+    Accept: "application/json",
+    "X-On-Behalf-Of": encodeSimple("X-On-Behalf-Of", payload["X-On-Behalf-Of"], { explode: false, charEncoding: "none" })
+  }));
+  const secConfig = await extractSecurity(client._options.bearerAuth);
+  const securityInput = secConfig == null ? {} : { bearerAuth: secConfig };
+  const requestSecurity = resolveGlobalSecurity(securityInput);
+  const context = {
+    options: client._options,
+    baseURL: options?.serverURL ?? client._baseURL ?? "",
+    operationID: "getSecret",
+    oAuth2Scopes: null,
+    resolvedSecurity: requestSecurity,
+    securitySource: client._options.bearerAuth,
+    retryConfig: options?.retries || client._options.retryConfig || {
+      strategy: "backoff",
+      backoff: {
+        initialInterval: 500,
+        maxInterval: 5000,
+        exponent: 1.5,
+        maxElapsedTime: 15000
+      },
+      retryConnectionErrors: true
+    },
+    retryCodes: options?.retryCodes || ["429", "500", "502", "503", "504"]
+  };
+  const requestRes = client._createRequest(context, {
+    security: requestSecurity,
+    method: "GET",
+    baseURL: options?.serverURL,
+    path,
+    headers,
+    body,
+    userAgent: client._options.userAgent,
+    timeoutMs: options?.timeoutMs || client._options.timeoutMs || -1
+  }, options);
+  if (!requestRes.ok) {
+    return [requestRes, { status: "invalid" }];
+  }
+  const req = requestRes.value;
+  const doResult = await client._do(req, {
+    context,
+    isErrorStatusCode: (statusCode) => matchStatusCode({ status: statusCode }, ["4XX", "5XX"]),
+    retryConfig: context.retryConfig,
+    retryCodes: context.retryCodes
+  });
+  if (!doResult.ok) {
+    return [doResult, { status: "request-error", request: req }];
+  }
+  const response = doResult.value;
+  const responseFields = {
+    HttpMeta: { Response: response, Request: req }
+  };
+  const [result] = await match(json(200, Secret$inboundSchema), jsonErr([403, 404], ServingError$inboundSchema), jsonErr(422, ServingHTTPValidationError$inboundSchema), fail([401, "4XX"]), fail("5XX"))(response, req, { extraFields: responseFields });
+  if (!result.ok) {
+    return [result, { status: "complete", request: req, response }];
+  }
+  return [result, { status: "complete", request: req, response }];
+}
+var init_servingSecretsGet = __esm(() => {
+  init_encodings();
+  init_http();
+  init_matchers();
+  init_primitives();
+  init_schemas4();
+  init_security();
+  init_url();
+  init_components();
+  init_errors4();
+  init_operations();
+  init_async();
+});
+
+// src/mcp-server/tools/servingSecretsGet.ts
+var args297, tool$servingSecretsGet;
+var init_servingSecretsGet2 = __esm(() => {
+  init_servingSecretsGet();
+  init_operations();
+  init_tools();
+  args297 = {
+    request: GetSecretRequest$inboundSchema
+  };
+  tool$servingSecretsGet = {
+    name: "serving-secrets-get",
+    description: `Get a secret
+
+Retrieve secret metadata: key names and allowed use. Values are never returned.`,
+    args: args297,
+    tool: async (client, args298, ctx) => {
+      const [result, apiCall] = await servingSecretsGet(client, args298.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
+      if (!result.ok) {
+        return {
+          content: [{ type: "text", text: result.error.message }],
+          isError: true
+        };
+      }
+      const value = result.value;
+      return formatResult(value, apiCall);
+    }
+  };
+});
+
+// src/funcs/servingSecretsList.ts
+function servingSecretsList(client, request, options) {
+  return new APIPromise($do307(client, request, options));
+}
+async function $do307(client, request, options) {
+  const parsed = safeParse4(request, (value) => ListSecretsRequest$outboundSchema.parse(value), "Input validation failed");
+  if (!parsed.ok) {
+    return [parsed, { status: "invalid" }];
+  }
+  const payload = parsed.value;
+  const body = null;
+  const path = pathToFunc("/api/v1/serving/secrets")();
+  const query = encodeFormQuery({
+    cursor: payload.cursor,
+    limit: payload.limit
+  });
+  const headers = new Headers(compactMap({
+    Accept: "application/json",
+    "X-On-Behalf-Of": encodeSimple("X-On-Behalf-Of", payload["X-On-Behalf-Of"], { explode: false, charEncoding: "none" })
+  }));
+  const secConfig = await extractSecurity(client._options.bearerAuth);
+  const securityInput = secConfig == null ? {} : { bearerAuth: secConfig };
+  const requestSecurity = resolveGlobalSecurity(securityInput);
+  const context = {
+    options: client._options,
+    baseURL: options?.serverURL ?? client._baseURL ?? "",
+    operationID: "listSecrets",
+    oAuth2Scopes: null,
+    resolvedSecurity: requestSecurity,
+    securitySource: client._options.bearerAuth,
+    retryConfig: options?.retries || client._options.retryConfig || {
+      strategy: "backoff",
+      backoff: {
+        initialInterval: 500,
+        maxInterval: 5000,
+        exponent: 1.5,
+        maxElapsedTime: 15000
+      },
+      retryConnectionErrors: true
+    },
+    retryCodes: options?.retryCodes || ["429", "500", "502", "503", "504"]
+  };
+  const requestRes = client._createRequest(context, {
+    security: requestSecurity,
+    method: "GET",
+    baseURL: options?.serverURL,
+    path,
+    headers,
+    query,
+    body,
+    userAgent: client._options.userAgent,
+    timeoutMs: options?.timeoutMs || client._options.timeoutMs || -1
+  }, options);
+  if (!requestRes.ok) {
+    return [requestRes, { status: "invalid" }];
+  }
+  const req = requestRes.value;
+  const doResult = await client._do(req, {
+    context,
+    isErrorStatusCode: (statusCode) => matchStatusCode({ status: statusCode }, ["4XX", "5XX"]),
+    retryConfig: context.retryConfig,
+    retryCodes: context.retryCodes
+  });
+  if (!doResult.ok) {
+    return [doResult, { status: "request-error", request: req }];
+  }
+  const response = doResult.value;
+  const responseFields = {
+    HttpMeta: { Response: response, Request: req }
+  };
+  const [result] = await match(json(200, PageSecret$inboundSchema), jsonErr(403, ServingError$inboundSchema), jsonErr(422, ServingHTTPValidationError$inboundSchema), fail([401, "4XX"]), fail("5XX"))(response, req, { extraFields: responseFields });
+  if (!result.ok) {
+    return [result, { status: "complete", request: req, response }];
+  }
+  return [result, { status: "complete", request: req, response }];
+}
+var init_servingSecretsList = __esm(() => {
+  init_encodings();
+  init_http();
+  init_matchers();
+  init_primitives();
+  init_schemas4();
+  init_security();
+  init_url();
+  init_components();
+  init_errors4();
+  init_operations();
+  init_async();
+});
+
+// src/mcp-server/tools/servingSecretsList.ts
+var args298, tool$servingSecretsList;
+var init_servingSecretsList2 = __esm(() => {
+  init_servingSecretsList();
+  init_operations();
+  init_tools();
+  args298 = {
+    request: ListSecretsRequest$inboundSchema
+  };
+  tool$servingSecretsList = {
+    name: "serving-secrets-list",
+    description: `List secrets (names only)
+
+List your secrets by name (values are never returned).`,
+    args: args298,
+    tool: async (client, args299, ctx) => {
+      const [result, apiCall] = await servingSecretsList(client, args299.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
+      if (!result.ok) {
+        return {
+          content: [{ type: "text", text: result.error.message }],
+          isError: true
+        };
+      }
+      const value = result.value;
+      return formatResult(value, apiCall);
+    }
+  };
+});
+
+// src/funcs/servingSpendGet.ts
+function servingSpendGet(client, request, options) {
+  return new APIPromise($do308(client, request, options));
+}
+async function $do308(client, request, options) {
+  const parsed = safeParse4(request, (value) => GetServingUsageRequest$outboundSchema.parse(value), "Input validation failed");
+  if (!parsed.ok) {
+    return [parsed, { status: "invalid" }];
+  }
+  const payload = parsed.value;
+  const body = null;
+  const path = pathToFunc("/api/v1/serving/usage")();
+  const query = encodeFormQuery({
+    end: payload.end,
+    start: payload.start
+  });
+  const headers = new Headers(compactMap({
+    Accept: "application/json",
+    "X-On-Behalf-Of": encodeSimple("X-On-Behalf-Of", payload["X-On-Behalf-Of"], { explode: false, charEncoding: "none" })
+  }));
+  const secConfig = await extractSecurity(client._options.bearerAuth);
+  const securityInput = secConfig == null ? {} : { bearerAuth: secConfig };
+  const requestSecurity = resolveGlobalSecurity(securityInput);
+  const context = {
+    options: client._options,
+    baseURL: options?.serverURL ?? client._baseURL ?? "",
+    operationID: "getServingUsage",
+    oAuth2Scopes: null,
+    resolvedSecurity: requestSecurity,
+    securitySource: client._options.bearerAuth,
+    retryConfig: options?.retries || client._options.retryConfig || {
+      strategy: "backoff",
+      backoff: {
+        initialInterval: 500,
+        maxInterval: 5000,
+        exponent: 1.5,
+        maxElapsedTime: 15000
+      },
+      retryConnectionErrors: true
+    },
+    retryCodes: options?.retryCodes || ["429", "500", "502", "503", "504"]
+  };
+  const requestRes = client._createRequest(context, {
+    security: requestSecurity,
+    method: "GET",
+    baseURL: options?.serverURL,
+    path,
+    headers,
+    query,
+    body,
+    userAgent: client._options.userAgent,
+    timeoutMs: options?.timeoutMs || client._options.timeoutMs || -1
+  }, options);
+  if (!requestRes.ok) {
+    return [requestRes, { status: "invalid" }];
+  }
+  const req = requestRes.value;
+  const doResult = await client._do(req, {
+    context,
+    isErrorStatusCode: (statusCode) => matchStatusCode({ status: statusCode }, ["4XX", "5XX"]),
+    retryConfig: context.retryConfig,
+    retryCodes: context.retryCodes
+  });
+  if (!doResult.ok) {
+    return [doResult, { status: "request-error", request: req }];
+  }
+  const response = doResult.value;
+  const responseFields = {
+    HttpMeta: { Response: response, Request: req }
+  };
+  const [result] = await match(json(200, SpendSummary$inboundSchema), jsonErr([401, 403], ServingError$inboundSchema), jsonErr(422, ServingHTTPValidationError$inboundSchema), jsonErr([500, 503], ServingError$inboundSchema), fail("4XX"), fail("5XX"))(response, req, { extraFields: responseFields });
+  if (!result.ok) {
+    return [result, { status: "complete", request: req, response }];
+  }
+  return [result, { status: "complete", request: req, response }];
+}
+var init_servingSpendGet = __esm(() => {
+  init_encodings();
+  init_http();
+  init_matchers();
+  init_primitives();
+  init_schemas4();
+  init_security();
+  init_url();
+  init_components();
+  init_errors4();
+  init_operations();
+  init_async();
+});
+
+// src/mcp-server/tools/servingSpendGet.ts
+var args299, tool$servingSpendGet;
+var init_servingSpendGet2 = __esm(() => {
+  init_servingSpendGet();
+  init_operations();
+  init_tools();
+  args299 = {
+    request: GetServingUsageRequest$inboundSchema
+  };
+  tool$servingSpendGet = {
+    name: "serving-spend-get",
+    description: `Cost and spend summary
+
+Aggregate spend for your organization, computed from retained compute ledgers as price × runtime overlap with the requested window. Spend is derived on read and is never stored.`,
+    args: args299,
+    tool: async (client, args300, ctx) => {
+      const [result, apiCall] = await servingSpendGet(client, args300.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
+      if (!result.ok) {
+        return {
+          content: [{ type: "text", text: result.error.message }],
+          isError: true
+        };
+      }
+      const value = result.value;
+      return formatResult(value, apiCall);
+    }
+  };
+});
+
+// src/funcs/servingTenantsGet.ts
+function servingTenantsGet(client, request, options) {
+  return new APIPromise($do309(client, request, options));
+}
+async function $do309(client, request, options) {
+  const parsed = safeParse4(request, (value) => GetServingTenantRequest$outboundSchema.parse(value), "Input validation failed");
+  if (!parsed.ok) {
+    return [parsed, { status: "invalid" }];
+  }
+  const payload = parsed.value;
+  const body = null;
+  const pathParams = {
+    org_id: encodeSimple("org_id", payload.org_id, {
+      explode: false,
+      charEncoding: "percent"
+    })
+  };
+  const path = pathToFunc("/api/v1/serving/tenants/{org_id}")(pathParams);
+  const headers = new Headers(compactMap({
+    Accept: "application/json",
+    "X-On-Behalf-Of": encodeSimple("X-On-Behalf-Of", payload["X-On-Behalf-Of"], { explode: false, charEncoding: "none" })
+  }));
+  const secConfig = await extractSecurity(client._options.bearerAuth);
+  const securityInput = secConfig == null ? {} : { bearerAuth: secConfig };
+  const requestSecurity = resolveGlobalSecurity(securityInput);
+  const context = {
+    options: client._options,
+    baseURL: options?.serverURL ?? client._baseURL ?? "",
+    operationID: "getServingTenant",
+    oAuth2Scopes: null,
+    resolvedSecurity: requestSecurity,
+    securitySource: client._options.bearerAuth,
+    retryConfig: options?.retries || client._options.retryConfig || {
+      strategy: "backoff",
+      backoff: {
+        initialInterval: 500,
+        maxInterval: 5000,
+        exponent: 1.5,
+        maxElapsedTime: 15000
+      },
+      retryConnectionErrors: true
+    },
+    retryCodes: options?.retryCodes || ["429", "500", "502", "503", "504"]
+  };
+  const requestRes = client._createRequest(context, {
+    security: requestSecurity,
+    method: "GET",
+    baseURL: options?.serverURL,
+    path,
+    headers,
+    body,
+    userAgent: client._options.userAgent,
+    timeoutMs: options?.timeoutMs || client._options.timeoutMs || -1
+  }, options);
+  if (!requestRes.ok) {
+    return [requestRes, { status: "invalid" }];
+  }
+  const req = requestRes.value;
+  const doResult = await client._do(req, {
+    context,
+    isErrorStatusCode: (statusCode) => matchStatusCode({ status: statusCode }, ["4XX", "5XX"]),
+    retryConfig: context.retryConfig,
+    retryCodes: context.retryCodes
+  });
+  if (!doResult.ok) {
+    return [doResult, { status: "request-error", request: req }];
+  }
+  const response = doResult.value;
+  const responseFields = {
+    HttpMeta: { Response: response, Request: req }
+  };
+  const [result] = await match(json(200, ServingTenant$inboundSchema), jsonErr([403, 404], ServingError$inboundSchema), jsonErr(422, ServingHTTPValidationError$inboundSchema), fail([401, "4XX"]), fail("5XX"))(response, req, { extraFields: responseFields });
+  if (!result.ok) {
+    return [result, { status: "complete", request: req, response }];
+  }
+  return [result, { status: "complete", request: req, response }];
+}
+var init_servingTenantsGet = __esm(() => {
+  init_encodings();
+  init_http();
+  init_matchers();
+  init_primitives();
+  init_schemas4();
+  init_security();
+  init_url();
+  init_components();
+  init_errors4();
+  init_operations();
+  init_async();
+});
+
+// src/mcp-server/tools/servingTenantsGet.ts
+var args300, tool$servingTenantsGet;
+var init_servingTenantsGet2 = __esm(() => {
+  init_servingTenantsGet();
+  init_operations();
+  init_tools();
+  args300 = {
+    request: GetServingTenantRequest$inboundSchema
+  };
+  tool$servingTenantsGet = {
+    name: "serving-tenants-get",
+    description: `Get a serving tenant
+
+Get one organization's serving enablement record. Cluster administrators only. Deprecated: this operation has moved to the operator admin plane at \`GET /api/v1/admin/tenants/{org_id}\`. This path keeps working for one transition release (responses carry \`Deprecation: true\` and a \`Link\` successor header) and is removed from this document in the next SDK major.`,
+    args: args300,
+    tool: async (client, args301, ctx) => {
+      const [result, apiCall] = await servingTenantsGet(client, args301.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
+      if (!result.ok) {
+        return {
+          content: [{ type: "text", text: result.error.message }],
+          isError: true
+        };
+      }
+      const value = result.value;
+      return formatResult(value, apiCall);
+    }
+  };
+});
+
+// src/funcs/servingTenantsList.ts
+function servingTenantsList(client, request, options) {
+  return new APIPromise($do310(client, request, options));
+}
+async function $do310(client, request, options) {
+  const parsed = safeParse4(request, (value) => ListServingTenantsRequest$outboundSchema.parse(value), "Input validation failed");
+  if (!parsed.ok) {
+    return [parsed, { status: "invalid" }];
+  }
+  const payload = parsed.value;
+  const body = null;
+  const path = pathToFunc("/api/v1/serving/tenants")();
+  const query = encodeFormQuery({
+    cursor: payload.cursor,
+    limit: payload.limit
+  });
+  const headers = new Headers(compactMap({
+    Accept: "application/json",
+    "X-On-Behalf-Of": encodeSimple("X-On-Behalf-Of", payload["X-On-Behalf-Of"], { explode: false, charEncoding: "none" })
+  }));
+  const secConfig = await extractSecurity(client._options.bearerAuth);
+  const securityInput = secConfig == null ? {} : { bearerAuth: secConfig };
+  const requestSecurity = resolveGlobalSecurity(securityInput);
+  const context = {
+    options: client._options,
+    baseURL: options?.serverURL ?? client._baseURL ?? "",
+    operationID: "listServingTenants",
+    oAuth2Scopes: null,
+    resolvedSecurity: requestSecurity,
+    securitySource: client._options.bearerAuth,
+    retryConfig: options?.retries || client._options.retryConfig || {
+      strategy: "backoff",
+      backoff: {
+        initialInterval: 500,
+        maxInterval: 5000,
+        exponent: 1.5,
+        maxElapsedTime: 15000
+      },
+      retryConnectionErrors: true
+    },
+    retryCodes: options?.retryCodes || ["429", "500", "502", "503", "504"]
+  };
+  const requestRes = client._createRequest(context, {
+    security: requestSecurity,
+    method: "GET",
     baseURL: options?.serverURL,
     path,
     headers,
@@ -132911,12 +134327,12 @@ var init_servingTenantsList = __esm(() => {
 });
 
 // src/mcp-server/tools/servingTenantsList.ts
-var args293, tool$servingTenantsList;
+var args301, tool$servingTenantsList;
 var init_servingTenantsList2 = __esm(() => {
   init_servingTenantsList();
   init_operations();
   init_tools();
-  args293 = {
+  args301 = {
     request: ListServingTenantsRequest$inboundSchema
   };
   tool$servingTenantsList = {
@@ -132924,9 +134340,9 @@ var init_servingTenantsList2 = __esm(() => {
     description: `List serving tenants
 
 List organization-wide serving enablement records. Cluster administrators only; a missing organization is not provisioned. Deprecated: this operation has moved to the operator admin plane at \`GET /api/v1/admin/tenants\`. This path keeps working for one transition release (responses carry \`Deprecation: true\` and a \`Link\` successor header) and is removed from this document in the next SDK major.`,
-    args: args293,
-    tool: async (client, args294, ctx) => {
-      const [result, apiCall] = await servingTenantsList(client, args294.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
+    args: args301,
+    tool: async (client, args302, ctx) => {
+      const [result, apiCall] = await servingTenantsList(client, args302.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
       if (!result.ok) {
         return {
           content: [{ type: "text", text: result.error.message }],
@@ -132941,9 +134357,9 @@ List organization-wide serving enablement records. Cluster administrators only;
 
 // src/funcs/servingTenantsSet.ts
 function servingTenantsSet(client, request, options) {
-  return new APIPromise($do303(client, request, options));
+  return new APIPromise($do311(client, request, options));
 }
-async function $do303(client, request, options) {
+async function $do311(client, request, options) {
   const parsed = safeParse4(request, (value) => SetServingTenantRequest$outboundSchema.parse(value), "Input validation failed");
   if (!parsed.ok) {
     return [parsed, { status: "invalid" }];
@@ -133032,12 +134448,12 @@ var init_servingTenantsSet = __esm(() => {
 });
 
 // src/mcp-server/tools/servingTenantsSet.ts
-var args294, tool$servingTenantsSet;
+var args302, tool$servingTenantsSet;
 var init_servingTenantsSet2 = __esm(() => {
   init_servingTenantsSet();
   init_operations();
   init_tools();
-  args294 = {
+  args302 = {
     request: SetServingTenantRequest$inboundSchema
   };
   tool$servingTenantsSet = {
@@ -133045,9 +134461,9 @@ var init_servingTenantsSet2 = __esm(() => {
     description: `Set serving tenant enablement
 
 Enable or disable serving for an organization and all of its teams. Disabling blocks product API access but does not stop existing workloads or callbacks. Cluster administrators only. Deprecated: this operation has moved to the operator admin plane at \`PUT /api/v1/admin/tenants/{org_id}\`. This path keeps working for one transition release (responses carry \`Deprecation: true\` and a \`Link\` successor header) and is removed from this document in the next SDK major.`,
-    args: args294,
-    tool: async (client, args295, ctx) => {
-      const [result, apiCall] = await servingTenantsSet(client, args295.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
+    args: args302,
+    tool: async (client, args303, ctx) => {
+      const [result, apiCall] = await servingTenantsSet(client, args303.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
       if (!result.ok) {
         return {
           content: [{ type: "text", text: result.error.message }],
@@ -133062,9 +134478,9 @@ Enable or disable serving for an organization and all of its teams. Disabling bl
 
 // src/funcs/usageCosts.ts
 function usageCosts(client, request, options) {
-  return new APIPromise($do304(client, request, options));
+  return new APIPromise($do312(client, request, options));
 }
-async function $do304(client, request, options) {
+async function $do312(client, request, options) {
   const parsed = safeParse4(request, (value) => GetCostsRequest$outboundSchema.parse(value), "Input validation failed");
   if (!parsed.ok) {
     return [parsed, { status: "invalid" }];
@@ -133147,12 +134563,12 @@ var init_usageCosts = __esm(() => {
 });
 
 // src/mcp-server/tools/usageCosts.ts
-var args295, tool$usageCosts;
+var args303, tool$usageCosts;
 var init_usageCosts2 = __esm(() => {
   init_usageCosts();
   init_operations();
   init_tools();
-  args295 = {
+  args303 = {
     request: GetCostsRequest$inboundSchema
   };
   tool$usageCosts = {
@@ -133160,9 +134576,9 @@ var init_usageCosts2 = __esm(() => {
     description: `Aggregate cost by dimension
 
 Sums stored per-entry cost over [start_time, end_time), grouped by any of service, task_type, model, api_key_id, team_id, user_id, external_user_id, org_id. Point-in-time correct for chargeback/showback.`,
-    args: args295,
-    tool: async (client, args296, ctx) => {
-      const [result, apiCall] = await usageCosts(client, args296.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
+    args: args303,
+    tool: async (client, args304, ctx) => {
+      const [result, apiCall] = await usageCosts(client, args304.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
       if (!result.ok) {
         return {
           content: [{ type: "text", text: result.error.message }],
@@ -133177,9 +134593,9 @@ Sums stored per-entry cost over [start_time, end_time), grouped by any of servic
 
 // src/funcs/usageSandbox.ts
 function usageSandbox(client, request, options) {
-  return new APIPromise($do305(client, request, options));
+  return new APIPromise($do313(client, request, options));
 }
-async function $do305(client, request, options) {
+async function $do313(client, request, options) {
   const parsed = safeParse4(request, (value) => GetSandboxUsageRequest$outboundSchema.parse(value), "Input validation failed");
   if (!parsed.ok) {
     return [parsed, { status: "invalid" }];
@@ -133270,12 +134686,12 @@ var init_usageSandbox = __esm(() => {
 });
 
 // src/mcp-server/tools/usageSandbox.ts
-var args296, tool$usageSandbox;
+var args304, tool$usageSandbox;
 var init_usageSandbox2 = __esm(() => {
   init_usageSandbox();
   init_operations();
   init_tools();
-  args296 = {
+  args304 = {
     request: GetSandboxUsageRequest$inboundSchema
   };
   tool$usageSandbox = {
@@ -133283,9 +134699,9 @@ var init_usageSandbox2 = __esm(() => {
     description: `Get Sandbox Usage
 
 Aggregate sandbox usage (session lifecycle, execution, and workspace operations) over a time range, bucketed and optionally grouped. Org-scoped: callers see their own usage, org admins their team's; cluster admins may pass \`all_orgs\` or \`org_ids\`. Cost and spend reporting lives in the budgeting API (\`/api/v1/budgeting/usage/costs\`).`,
-    args: args296,
-    tool: async (client, args297, ctx) => {
-      const [result, apiCall] = await usageSandbox(client, args297.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
+    args: args304,
+    tool: async (client, args305, ctx) => {
+      const [result, apiCall] = await usageSandbox(client, args305.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
       if (!result.ok) {
         return {
           content: [{ type: "text", text: result.error.message }],
@@ -133302,7 +134718,7 @@ Aggregate sandbox usage (session lifecycle, execution, and workspace operations)
 function createMCPServer(deps) {
   const server = new McpServer({
     name: "SDK",
-    version: "0.51.25"
+    version: "0.51.27"
   });
   const client = new SDKCore({
     bearerAuth: deps.bearerAuth,
@@ -133382,6 +134798,11 @@ function createMCPServer(deps) {
   tool(tool$fineTuneJobsGetServingRunEvents);
   tool(tool$fineTuneJobsGetServingRunLogs);
   tool(tool$deploymentsDeleteServingRun);
+  tool(tool$reposList);
+  tool(tool$reposCreate);
+  tool(tool$reposDelete);
+  tool(tool$reposGet);
+  tool(tool$reposUpdate);
   tool(tool$permissionsLlmGrant);
   tool(tool$permissionsLlmRevoke);
   tool(tool$permissionsLlmCheck);
@@ -133621,6 +135042,9 @@ function createMCPServer(deps) {
   tool(tool$servingTenantsGet);
   tool(tool$servingTenantsSet);
   tool(tool$servingSpendGet);
+  tool(tool$reposCollaboratorsList);
+  tool(tool$reposCollaboratorsRemove);
+  tool(tool$reposCollaboratorsAdd);
   return server;
 }
 var init_server2 = __esm(() => {
@@ -133906,6 +135330,14 @@ var init_server2 = __esm(() => {
   init_permissionsLlmCheck2();
   init_permissionsLlmGrant2();
   init_permissionsLlmRevoke2();
+  init_reposCollaboratorsAdd2();
+  init_reposCollaboratorsList2();
+  init_reposCollaboratorsRemove2();
+  init_reposCreate2();
+  init_reposDelete2();
+  init_reposGet2();
+  init_reposList2();
+  init_reposUpdate2();
   init_sandboxCreate2();
   init_sandboxDownloadArchive2();
   init_sandboxDownloadFile2();
@@ -135110,7 +136542,7 @@ var routes = rn({
 var app = Ve(routes, {
   name: "mcp",
   versionInfo: {
-    currentVersion: "0.51.25"
+    currentVersion: "0.51.27"
   }
 });
 _t(app, process3.argv.slice(2), buildContext(process3));
@@ -135118,5 +136550,5 @@ export {
   app
 };
 
-//# debugId=0DEECFF8B363B01064756E2164756E21
+//# debugId=ADCB701EBF67369864756E2164756E21
 //# sourceMappingURL=mcp-server.js.map