@meetkai/mka1 0.51.36 → 0.51.38

package/bin/mcp-server.js

@@ -52876,9 +52876,9 @@ var init_config = __esm(() => {
   SDK_METADATA = {
     language: "typescript",
     openapiDocVersion: "1.1.0",
-    sdkVersion: "0.51.36",
+    sdkVersion: "0.51.38",
     genVersion: "2.924.0",
-    userAgent: "speakeasy-sdk/typescript 0.51.36 2.924.0 1.1.0 @meetkai/mka1"
+    userAgent: "speakeasy-sdk/typescript 0.51.38 2.924.0 1.1.0 @meetkai/mka1"
   };
 });
 
@@ -57784,24 +57784,6 @@ var init_coderesult = __esm(() => {
   });
 });
 
-// src/models/components/collaboratorrequest.ts
-var CollaboratorRequestRole, CollaboratorRequestRole$inboundSchema, CollaboratorRequestRole$outboundSchema, CollaboratorRequest$inboundSchema, CollaboratorRequest$outboundSchema;
-var init_collaboratorrequest = __esm(() => {
-  init_esm();
-  CollaboratorRequestRole = {
-    Reader: "reader",
-    Writer: "writer"
-  };
-  CollaboratorRequestRole$inboundSchema = nativeEnumType(CollaboratorRequestRole);
-  CollaboratorRequestRole$outboundSchema = CollaboratorRequestRole$inboundSchema;
-  CollaboratorRequest$inboundSchema = objectType({
-    role: CollaboratorRequestRole$inboundSchema
-  });
-  CollaboratorRequest$outboundSchema = objectType({
-    role: CollaboratorRequestRole$outboundSchema
-  });
-});
-
 // src/models/components/commandrequest.ts
 var CommandRequest$inboundSchema, CommandRequest$outboundSchema;
 var init_commandrequest = __esm(() => {
@@ -60328,15 +60310,30 @@ var init_computejob = __esm(() => {
   });
 });
 
+// src/models/components/computeplacementstrategy.ts
+var ComputePlacementStrategy, ComputePlacementStrategy$inboundSchema, ComputePlacementStrategy$outboundSchema;
+var init_computeplacementstrategy = __esm(() => {
+  init_esm();
+  ComputePlacementStrategy = {
+    CapacityOptimized: "capacity_optimized",
+    LowestCost: "lowest_cost"
+  };
+  ComputePlacementStrategy$inboundSchema = nativeEnumType(ComputePlacementStrategy);
+  ComputePlacementStrategy$outboundSchema = ComputePlacementStrategy$inboundSchema;
+});
+
 // src/models/components/computeplacement.ts
 var ComputePlacement$inboundSchema, ComputePlacement$outboundSchema;
 var init_computeplacement = __esm(() => {
   init_esm();
+  init_computeplacementstrategy();
   ComputePlacement$inboundSchema = objectType({
-    providers: arrayType(stringType()).optional()
+    providers: arrayType(stringType()).optional(),
+    strategy: ComputePlacementStrategy$inboundSchema.optional()
   });
   ComputePlacement$outboundSchema = objectType({
-    providers: arrayType(stringType()).optional()
+    providers: arrayType(stringType()).optional(),
+    strategy: ComputePlacementStrategy$outboundSchema.optional()
   });
 });
 
@@ -63817,24 +63814,16 @@ var init_createpromptresponse = __esm(() => {
 });
 
 // src/models/components/createreporequest.ts
-var CreateRepoRequestVisibility, CreateRepoRequestVisibility$inboundSchema, CreateRepoRequestVisibility$outboundSchema, CreateRepoRequest$inboundSchema, CreateRepoRequest$outboundSchema;
+var CreateRepoRequest$inboundSchema, CreateRepoRequest$outboundSchema;
 var init_createreporequest = __esm(() => {
   init_esm();
-  CreateRepoRequestVisibility = {
-    Private: "private",
-    Team: "team"
-  };
-  CreateRepoRequestVisibility$inboundSchema = nativeEnumType(CreateRepoRequestVisibility);
-  CreateRepoRequestVisibility$outboundSchema = CreateRepoRequestVisibility$inboundSchema;
   CreateRepoRequest$inboundSchema = objectType({
     description: stringType().optional(),
-    name: stringType(),
-    visibility: CreateRepoRequestVisibility$inboundSchema.default("private")
+    name: stringType()
   });
   CreateRepoRequest$outboundSchema = objectType({
     description: stringType().optional(),
-    name: stringType(),
-    visibility: CreateRepoRequestVisibility$outboundSchema.default("private")
+    name: stringType()
   });
 });
 
@@ -69067,27 +69056,6 @@ var init_mcptoolcallwithid = __esm(() => {
   });
 });
 
-// src/models/components/member.ts
-var MemberRole, MemberRole$inboundSchema, MemberRole$outboundSchema, Member$inboundSchema, Member$outboundSchema;
-var init_member = __esm(() => {
-  init_esm();
-  MemberRole = {
-    Reader: "reader",
-    Writer: "writer",
-    Owner: "owner"
-  };
-  MemberRole$inboundSchema = nativeEnumType(MemberRole);
-  MemberRole$outboundSchema = MemberRole$inboundSchema;
-  Member$inboundSchema = objectType({
-    role: MemberRole$inboundSchema,
-    user: stringType()
-  });
-  Member$outboundSchema = objectType({
-    role: MemberRole$outboundSchema,
-    user: stringType()
-  });
-});
-
 // src/models/components/memoryentry.ts
 var MemoryEntry$inboundSchema, MemoryEntry$outboundSchema;
 var init_memoryentry = __esm(() => {
@@ -70522,32 +70490,17 @@ var init_outputmessagewithid = __esm(() => {
   });
 });
 
-// src/models/components/visibility.ts
-var Visibility, Visibility$inboundSchema, Visibility$outboundSchema;
-var init_visibility = __esm(() => {
-  init_esm();
-  Visibility = {
-    Private: "private",
-    Team: "team"
-  };
-  Visibility$inboundSchema = nativeEnumType(Visibility);
-  Visibility$outboundSchema = Visibility$inboundSchema;
-});
-
 // src/models/components/patchreporequest.ts
 var PatchRepoRequest$inboundSchema, PatchRepoRequest$outboundSchema;
 var init_patchreporequest = __esm(() => {
   init_esm();
-  init_visibility();
   PatchRepoRequest$inboundSchema = objectType({
     description: stringType().optional(),
-    name: stringType().optional(),
-    visibility: Visibility$inboundSchema.optional()
+    name: stringType().optional()
   });
   PatchRepoRequest$outboundSchema = objectType({
     description: stringType().optional(),
-    name: stringType().optional(),
-    visibility: Visibility$outboundSchema.optional()
+    name: stringType().optional()
   });
 });
 
@@ -70770,14 +70723,12 @@ var Repo$inboundSchema, Repo$outboundSchema;
 var init_repo = __esm(() => {
   init_esm();
   init_primitives();
-  init_visibility();
   Repo$inboundSchema = objectType({
     created_at: stringType().datetime({ offset: true }).transform((v2) => new Date(v2)),
     description: stringType(),
     id: stringType(),
     name: stringType(),
-    org: stringType(),
-    visibility: Visibility$inboundSchema
+    org: stringType()
   }).transform((v2) => {
     return remap(v2, {
       created_at: "createdAt"
@@ -70788,8 +70739,7 @@ var init_repo = __esm(() => {
     description: stringType(),
     id: stringType(),
     name: stringType(),
-    org: stringType(),
-    visibility: Visibility$outboundSchema
+    org: stringType()
   }).transform((v2) => {
     return remap(v2, {
       createdAt: "created_at"
@@ -77013,7 +76963,6 @@ var init_components = __esm(() => {
   init_coderequest();
   init_coderesult();
   init_coderuntime();
-  init_collaboratorrequest();
   init_commandrequest();
   init_commandresult();
   init_compactedresponse();
@@ -77043,6 +76992,7 @@ var init_components = __esm(() => {
   init_computeofferlist();
   init_computeorder();
   init_computeplacement();
+  init_computeplacementstrategy();
   init_computeport();
   init_computepricerange();
   init_computeproviderhealth();
@@ -77284,7 +77234,6 @@ var init_components = __esm(() => {
   init_mcptoolchoice();
   init_mcptooldefinition();
   init_mcptoolfilter();
-  init_member();
   init_memoryentry();
   init_memoryentrydeleted();
   init_memoryentrylist();
@@ -77520,7 +77469,6 @@ var init_components = __esm(() => {
   init_vectorstorelist();
   init_vectorstoresearchresults();
   init_vectorstoresgroupby();
-  init_visibility();
   init_waitaction();
   init_wakeagentrunrequest();
   init_websearchaction();
@@ -83438,7 +83386,7 @@ var init_addmodelcatalogorgaccess = __esm(() => {
 });
 
 // src/models/operations/addteammember.ts
-var AddTeamMemberRequestBody$inboundSchema, AddTeamMemberRequestBody$outboundSchema, AddTeamMemberRequest$inboundSchema, AddTeamMemberRequest$outboundSchema, Member$inboundSchema2, Member$outboundSchema2, AddTeamMemberResponseBody$inboundSchema2, AddTeamMemberResponseBody$outboundSchema2;
+var AddTeamMemberRequestBody$inboundSchema, AddTeamMemberRequestBody$outboundSchema, AddTeamMemberRequest$inboundSchema, AddTeamMemberRequest$outboundSchema, Member$inboundSchema, Member$outboundSchema, AddTeamMemberResponseBody$inboundSchema2, AddTeamMemberResponseBody$outboundSchema2;
 var init_addteammember2 = __esm(() => {
   init_esm();
   init_primitives();
@@ -83470,23 +83418,23 @@ var init_addteammember2 = __esm(() => {
       requestBody: "RequestBody"
     });
   });
-  Member$inboundSchema2 = objectType({
+  Member$inboundSchema = objectType({
     id: stringType(),
     teamId: stringType(),
     userId: stringType(),
     createdAt: stringType()
   });
-  Member$outboundSchema2 = objectType({
+  Member$outboundSchema = objectType({
     id: stringType(),
     teamId: stringType(),
     userId: stringType(),
     createdAt: stringType()
   });
   AddTeamMemberResponseBody$inboundSchema2 = objectType({
-    member: lazyType(() => Member$inboundSchema2)
+    member: lazyType(() => Member$inboundSchema)
   });
   AddTeamMemberResponseBody$outboundSchema2 = objectType({
-    member: lazyType(() => Member$outboundSchema2)
+    member: lazyType(() => Member$outboundSchema)
   });
 });
 
@@ -86976,33 +86924,6 @@ var init_deleteclusterorg2 = __esm(() => {
   });
 });
 
-// src/models/operations/deletecollaborator.ts
-var DeleteCollaboratorRequest$inboundSchema, DeleteCollaboratorRequest$outboundSchema;
-var init_deletecollaborator = __esm(() => {
-  init_esm();
-  init_primitives();
-  DeleteCollaboratorRequest$inboundSchema = objectType({
-    org: stringType(),
-    name: stringType(),
-    user: stringType(),
-    "X-On-Behalf-Of": stringType().optional()
-  }).transform((v2) => {
-    return remap(v2, {
-      "X-On-Behalf-Of": "xOnBehalfOf"
-    });
-  });
-  DeleteCollaboratorRequest$outboundSchema = objectType({
-    org: stringType(),
-    name: stringType(),
-    user: stringType(),
-    xOnBehalfOf: stringType().optional()
-  }).transform((v2) => {
-    return remap(v2, {
-      xOnBehalfOf: "X-On-Behalf-Of"
-    });
-  });
-});
-
 // src/models/operations/deletecomputesecret.ts
 var DeleteComputeSecretRequest$inboundSchema, DeleteComputeSecretRequest$outboundSchema;
 var init_deletecomputesecret = __esm(() => {
@@ -92219,38 +92140,6 @@ var init_listclusterprices = __esm(() => {
   });
 });
 
-// src/models/operations/listcollaborators.ts
-var ListCollaboratorsRequest$inboundSchema, ListCollaboratorsRequest$outboundSchema, ListCollaboratorsResponseBody$inboundSchema, ListCollaboratorsResponseBody$outboundSchema;
-var init_listcollaborators = __esm(() => {
-  init_esm();
-  init_primitives();
-  init_components();
-  ListCollaboratorsRequest$inboundSchema = objectType({
-    org: stringType(),
-    name: stringType(),
-    "X-On-Behalf-Of": stringType().optional()
-  }).transform((v2) => {
-    return remap(v2, {
-      "X-On-Behalf-Of": "xOnBehalfOf"
-    });
-  });
-  ListCollaboratorsRequest$outboundSchema = objectType({
-    org: stringType(),
-    name: stringType(),
-    xOnBehalfOf: stringType().optional()
-  }).transform((v2) => {
-    return remap(v2, {
-      xOnBehalfOf: "X-On-Behalf-Of"
-    });
-  });
-  ListCollaboratorsResponseBody$inboundSchema = objectType({
-    collaborators: arrayType(Member$inboundSchema)
-  });
-  ListCollaboratorsResponseBody$outboundSchema = objectType({
-    collaborators: arrayType(Member$outboundSchema)
-  });
-});
-
 // src/models/operations/listcompletionfeedback.ts
 var ListCompletionFeedbackQueryParamOrder, QueryParamRating, ListCompletionFeedbackQueryParamOrder$inboundSchema, ListCompletionFeedbackQueryParamOrder$outboundSchema, QueryParamRating$inboundSchema, QueryParamRating$outboundSchema, ListCompletionFeedbackRequest$inboundSchema, ListCompletionFeedbackRequest$outboundSchema;
 var init_listcompletionfeedback = __esm(() => {
@@ -95576,38 +95465,6 @@ var init_proxybrowserportrequest = __esm(() => {
   });
 });
 
-// src/models/operations/putcollaborator.ts
-var PutCollaboratorRequest$inboundSchema, PutCollaboratorRequest$outboundSchema;
-var init_putcollaborator = __esm(() => {
-  init_esm();
-  init_primitives();
-  init_components();
-  PutCollaboratorRequest$inboundSchema = objectType({
-    org: stringType(),
-    name: stringType(),
-    user: stringType(),
-    "X-On-Behalf-Of": stringType().optional(),
-    CollaboratorRequest: CollaboratorRequest$inboundSchema
-  }).transform((v2) => {
-    return remap(v2, {
-      "X-On-Behalf-Of": "xOnBehalfOf",
-      CollaboratorRequest: "collaboratorRequest"
-    });
-  });
-  PutCollaboratorRequest$outboundSchema = objectType({
-    org: stringType(),
-    name: stringType(),
-    user: stringType(),
-    xOnBehalfOf: stringType().optional(),
-    collaboratorRequest: CollaboratorRequest$outboundSchema
-  }).transform((v2) => {
-    return remap(v2, {
-      xOnBehalfOf: "X-On-Behalf-Of",
-      collaboratorRequest: "CollaboratorRequest"
-    });
-  });
-});
-
 // src/models/operations/putcomputetenant.ts
 var PutComputeTenantRequest$inboundSchema, PutComputeTenantRequest$outboundSchema, PutComputeTenantResponse$inboundSchema, PutComputeTenantResponse$outboundSchema;
 var init_putcomputetenant = __esm(() => {
@@ -99059,7 +98916,6 @@ var init_operations = __esm(() => {
   init_deleteagentschedule();
   init_deleteapikeybudget();
   init_deleteclusterorg2();
-  init_deletecollaborator();
   init_deletecomputesecret();
   init_deleteevalrun();
   init_deleteevalschedule();
@@ -99176,7 +99032,6 @@ var init_operations = __esm(() => {
   init_listclusterinvites2();
   init_listclusterorgs2();
   init_listclusterprices();
-  init_listcollaborators();
   init_listcompletionfeedback();
   init_listcomputeoffers();
   init_listcomputeproviders();
@@ -99240,7 +99095,6 @@ var init_operations = __esm(() => {
   init_pauseagentschedule();
   init_pausefinetuningjob();
   init_proxybrowserportrequest();
-  init_putcollaborator();
   init_putcomputetenant();
   init_putorgautomodel();
   init_regeneratescopedapikey2();
@@ -134414,19 +134268,135 @@ Revoke a role from a user for a resource, or remove public access by using "*" a
   };
 });
 
-// src/funcs/reposCollaboratorsAdd.ts
-function reposCollaboratorsAdd(client, request, options) {
+// src/funcs/reposCreate.ts
+function reposCreate(client, request, options) {
   return new APIPromise($do300(client, request, options));
 }
 async function $do300(client, request, options) {
-  const parsed = safeParse4(request, (value) => PutCollaboratorRequest$outboundSchema.parse(value), "Input validation failed");
+  const parsed = safeParse4(request, (value) => CreateRepoRequest$outboundSchema2.parse(value), "Input validation failed");
   if (!parsed.ok) {
     return [parsed, { status: "invalid" }];
   }
   const payload = parsed.value;
-  const body = encodeJSON("body", payload.CollaboratorRequest, {
-    explode: true
+  const body = encodeJSON("body", payload.CreateRepoRequest, { explode: true });
+  const path = pathToFunc("/api/v1/repos")();
+  const headers = new Headers(compactMap({
+    "Content-Type": "application/json",
+    Accept: "application/json",
+    "X-On-Behalf-Of": encodeSimple("X-On-Behalf-Of", payload["X-On-Behalf-Of"], { explode: false, charEncoding: "none" })
+  }));
+  const secConfig = await extractSecurity(client._options.bearerAuth);
+  const securityInput = secConfig == null ? {} : { bearerAuth: secConfig };
+  const requestSecurity = resolveGlobalSecurity(securityInput);
+  const context = {
+    options: client._options,
+    baseURL: options?.serverURL ?? client._baseURL ?? "",
+    operationID: "createRepo",
+    oAuth2Scopes: null,
+    resolvedSecurity: requestSecurity,
+    securitySource: client._options.bearerAuth,
+    retryConfig: options?.retries || client._options.retryConfig || {
+      strategy: "backoff",
+      backoff: {
+        initialInterval: 500,
+        maxInterval: 5000,
+        exponent: 1.5,
+        maxElapsedTime: 15000
+      },
+      retryConnectionErrors: true
+    },
+    retryCodes: options?.retryCodes || ["429", "500", "502", "503", "504"]
+  };
+  const requestRes = client._createRequest(context, {
+    security: requestSecurity,
+    method: "POST",
+    baseURL: options?.serverURL,
+    path,
+    headers,
+    body,
+    userAgent: client._options.userAgent,
+    timeoutMs: options?.timeoutMs || client._options.timeoutMs || -1
+  }, options);
+  if (!requestRes.ok) {
+    return [requestRes, { status: "invalid" }];
+  }
+  const req = requestRes.value;
+  const doResult = await client._do(req, {
+    context,
+    isErrorStatusCode: (statusCode) => matchStatusCode({ status: statusCode }, ["4XX", "5XX"]),
+    retryConfig: context.retryConfig,
+    retryCodes: context.retryCodes
   });
+  if (!doResult.ok) {
+    return [doResult, { status: "request-error", request: req }];
+  }
+  const response = doResult.value;
+  const responseFields = {
+    HttpMeta: { Response: response, Request: req }
+  };
+  const [result] = await match(json(201, Repo$inboundSchema), jsonErr([400, 401, 403, 409], RepoError$inboundSchema), jsonErr([500, 502, 503], RepoError$inboundSchema), fail("4XX"), fail("5XX"))(response, req, { extraFields: responseFields });
+  if (!result.ok) {
+    return [result, { status: "complete", request: req, response }];
+  }
+  return [result, { status: "complete", request: req, response }];
+}
+var init_reposCreate = __esm(() => {
+  init_encodings();
+  init_http();
+  init_matchers();
+  init_primitives();
+  init_schemas4();
+  init_security();
+  init_url();
+  init_components();
+  init_errors4();
+  init_operations();
+  init_async();
+});
+
+// src/mcp-server/tools/reposCreate.ts
+var args292, tool$reposCreate;
+var init_reposCreate2 = __esm(() => {
+  init_reposCreate();
+  init_operations();
+  init_tools();
+  args292 = {
+    request: CreateRepoRequest$inboundSchema2
+  };
+  tool$reposCreate = {
+    name: "repos-create",
+    description: `Create a repository
+
+Provisions a repository (org owner/admin only): DB insert
+(authoritative) → Gitea create (rolled back on failure). The repository
+belongs to the caller's org.
+`,
+    args: args292,
+    tool: async (client, args293, ctx) => {
+      const [result, apiCall] = await reposCreate(client, args293.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
+      if (!result.ok) {
+        return {
+          content: [{ type: "text", text: result.error.message }],
+          isError: true
+        };
+      }
+      const value = result.value;
+      return formatResult(value, apiCall);
+    }
+  };
+});
+
+// src/funcs/reposDelete.ts
+function reposDelete(client, request, options) {
+  return new APIPromise($do301(client, request, options));
+}
+async function $do301(client, request, options) {
+  const parsed = safeParse4(request, (value) => DeleteRepoRequest$outboundSchema.parse(value), "Input validation failed");
+  if (!parsed.ok) {
+    return [parsed, { status: "invalid" }];
+  }
+  const payload = parsed.value;
+  const body = null;
   const pathParams = {
     name: encodeSimple("name", payload.name, {
       explode: false,
@@ -134435,15 +134405,10 @@ async function $do300(client, request, options) {
     org: encodeSimple("org", payload.org, {
       explode: false,
       charEncoding: "percent"
-    }),
-    user: encodeSimple("user", payload.user, {
-      explode: false,
-      charEncoding: "percent"
     })
   };
-  const path = pathToFunc("/api/v1/repos/{org}/{name}/collaborators/{user}")(pathParams);
+  const path = pathToFunc("/api/v1/repos/{org}/{name}")(pathParams);
   const headers = new Headers(compactMap({
-    "Content-Type": "application/json",
     Accept: "application/json",
     "X-On-Behalf-Of": encodeSimple("X-On-Behalf-Of", payload["X-On-Behalf-Of"], { explode: false, charEncoding: "none" })
   }));
@@ -134453,7 +134418,7 @@ async function $do300(client, request, options) {
   const context = {
     options: client._options,
     baseURL: options?.serverURL ?? client._baseURL ?? "",
-    operationID: "putCollaborator",
+    operationID: "deleteRepo",
     oAuth2Scopes: null,
     resolvedSecurity: requestSecurity,
     securitySource: client._options.bearerAuth,
@@ -134471,7 +134436,7 @@ async function $do300(client, request, options) {
   };
   const requestRes = client._createRequest(context, {
     security: requestSecurity,
-    method: "PUT",
+    method: "DELETE",
     baseURL: options?.serverURL,
     path,
     headers,
@@ -134496,13 +134461,14 @@ async function $do300(client, request, options) {
   const responseFields = {
     HttpMeta: { Response: response, Request: req }
   };
-  const [result] = await match(json(200, Member$inboundSchema), jsonErr([400, 401, 403, 404], RepoError$inboundSchema), jsonErr(500, RepoError$inboundSchema), fail("4XX"), fail("5XX"))(response, req, { extraFields: responseFields });
+  const [result] = await match(nil(204, voidType()), jsonErr([401, 403, 404], RepoError$inboundSchema), jsonErr(500, RepoError$inboundSchema), fail("4XX"), fail("5XX"))(response, req, { extraFields: responseFields });
   if (!result.ok) {
     return [result, { status: "complete", request: req, response }];
   }
   return [result, { status: "complete", request: req, response }];
 }
-var init_reposCollaboratorsAdd = __esm(() => {
+var init_reposDelete = __esm(() => {
+  init_esm();
   init_encodings();
   init_http();
   init_matchers();
@@ -134510,50 +134476,47 @@ var init_reposCollaboratorsAdd = __esm(() => {
   init_schemas4();
   init_security();
   init_url();
-  init_components();
   init_errors4();
   init_operations();
   init_async();
 });
 
-// src/mcp-server/tools/reposCollaboratorsAdd.ts
-var args292, tool$reposCollaboratorsAdd;
-var init_reposCollaboratorsAdd2 = __esm(() => {
-  init_reposCollaboratorsAdd();
+// src/mcp-server/tools/reposDelete.ts
+var args293, tool$reposDelete;
+var init_reposDelete2 = __esm(() => {
+  init_reposDelete();
   init_operations();
   init_tools();
-  args292 = {
-    request: PutCollaboratorRequest$inboundSchema
+  args293 = {
+    request: DeleteRepoRequest$inboundSchema
   };
-  tool$reposCollaboratorsAdd = {
-    name: "repos-collaborators-add",
-    description: `Add or re-role a collaborator
+  tool$reposDelete = {
+    name: "repos-delete",
+    description: `Delete a repository
 
-Adds a collaborator or changes their role (owner or org admin only): DB
-upsert (authoritative) then a best-effort fga grant. Owner is not a
-grantable role — it is fixed to the creator at create time.
+Removes a repository; org owner/admin only. The DB delete is
+authoritative; the Gitea teardown is best-effort cleanup.
 `,
-    args: args292,
-    tool: async (client, args293, ctx) => {
-      const [result, apiCall] = await reposCollaboratorsAdd(client, args293.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
+    args: args293,
+    tool: async (client, args294, ctx) => {
+      const [result, apiCall] = await reposDelete(client, args294.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
       if (!result.ok) {
         return {
           content: [{ type: "text", text: result.error.message }],
           isError: true
         };
       }
-      const value = result.value;
-      return formatResult(value, apiCall);
+      return formatResult(undefined, apiCall);
     }
   };
 });
 
-// src/funcs/reposCollaboratorsList.ts
-function reposCollaboratorsList(client, request, options) {
-  return new APIPromise($do301(client, request, options));
+// src/funcs/reposGet.ts
+function reposGet(client, request, options) {
+  return new APIPromise($do302(client, request, options));
 }
-async function $do301(client, request, options) {
-  const parsed = safeParse4(request, (value) => ListCollaboratorsRequest$outboundSchema.parse(value), "Input validation failed");
+async function $do302(client, request, options) {
+  const parsed = safeParse4(request, (value) => GetRepoRequest$outboundSchema.parse(value), "Input validation failed");
   if (!parsed.ok) {
     return [parsed, { status: "invalid" }];
   }
@@ -134569,7 +134532,7 @@ async function $do301(client, request, options) {
       charEncoding: "percent"
     })
   };
-  const path = pathToFunc("/api/v1/repos/{org}/{name}/collaborators")(pathParams);
+  const path = pathToFunc("/api/v1/repos/{org}/{name}")(pathParams);
   const headers = new Headers(compactMap({
     Accept: "application/json",
     "X-On-Behalf-Of": encodeSimple("X-On-Behalf-Of", payload["X-On-Behalf-Of"], { explode: false, charEncoding: "none" })
@@ -134580,7 +134543,7 @@ async function $do301(client, request, options) {
   const context = {
     options: client._options,
     baseURL: options?.serverURL ?? client._baseURL ?? "",
-    operationID: "listCollaborators",
+    operationID: "getRepo",
     oAuth2Scopes: null,
     resolvedSecurity: requestSecurity,
     securitySource: client._options.bearerAuth,
@@ -134623,13 +134586,13 @@ async function $do301(client, request, options) {
   const responseFields = {
     HttpMeta: { Response: response, Request: req }
   };
-  const [result] = await match(json(200, ListCollaboratorsResponseBody$inboundSchema), jsonErr([401, 403, 404], RepoError$inboundSchema), fail("4XX"), fail("5XX"))(response, req, { extraFields: responseFields });
+  const [result] = await match(json(200, Repo$inboundSchema), jsonErr([401, 403, 404], RepoError$inboundSchema), fail("4XX"), fail("5XX"))(response, req, { extraFields: responseFields });
   if (!result.ok) {
     return [result, { status: "complete", request: req, response }];
   }
   return [result, { status: "complete", request: req, response }];
 }
-var init_reposCollaboratorsList = __esm(() => {
+var init_reposGet = __esm(() => {
   init_encodings();
   init_http();
   init_matchers();
@@ -134637,30 +134600,31 @@ var init_reposCollaboratorsList = __esm(() => {
   init_schemas4();
   init_security();
   init_url();
+  init_components();
   init_errors4();
   init_operations();
   init_async();
 });
 
-// src/mcp-server/tools/reposCollaboratorsList.ts
-var args293, tool$reposCollaboratorsList;
-var init_reposCollaboratorsList2 = __esm(() => {
-  init_reposCollaboratorsList();
+// src/mcp-server/tools/reposGet.ts
+var args294, tool$reposGet;
+var init_reposGet2 = __esm(() => {
+  init_reposGet();
   init_operations();
   init_tools();
-  args293 = {
-    request: ListCollaboratorsRequest$inboundSchema
+  args294 = {
+    request: GetRepoRequest$inboundSchema
   };
-  tool$reposCollaboratorsList = {
-    name: "repos-collaborators-list",
-    description: `List a repository's collaborators
+  tool$reposGet = {
+    name: "repos-get",
+    description: `Get a repository
 
-Lists the repository's explicit collaborators (\`repo_members\`). Any
-caller with reader access may see them.
+Reads a single repository after the org+role access check (org
+owner/admin of the repository's org only).
 `,
-    args: args293,
-    tool: async (client, args294, ctx) => {
-      const [result, apiCall] = await reposCollaboratorsList(client, args294.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
+    args: args294,
+    tool: async (client, args295, ctx) => {
+      const [result, apiCall] = await reposGet(client, args295.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
       if (!result.ok) {
         return {
           content: [{ type: "text", text: result.error.message }],
@@ -134673,32 +134637,18 @@ caller with reader access may see them.
   };
 });
 
-// src/funcs/reposCollaboratorsRemove.ts
-function reposCollaboratorsRemove(client, request, options) {
-  return new APIPromise($do302(client, request, options));
+// src/funcs/reposList.ts
+function reposList(client, request, options) {
+  return new APIPromise($do303(client, request, options));
 }
-async function $do302(client, request, options) {
-  const parsed = safeParse4(request, (value) => DeleteCollaboratorRequest$outboundSchema.parse(value), "Input validation failed");
+async function $do303(client, request, options) {
+  const parsed = safeParse4(request, (value) => ListReposRequest$outboundSchema.parse(value), "Input validation failed");
   if (!parsed.ok) {
     return [parsed, { status: "invalid" }];
   }
   const payload = parsed.value;
   const body = null;
-  const pathParams = {
-    name: encodeSimple("name", payload.name, {
-      explode: false,
-      charEncoding: "percent"
-    }),
-    org: encodeSimple("org", payload.org, {
-      explode: false,
-      charEncoding: "percent"
-    }),
-    user: encodeSimple("user", payload.user, {
-      explode: false,
-      charEncoding: "percent"
-    })
-  };
-  const path = pathToFunc("/api/v1/repos/{org}/{name}/collaborators/{user}")(pathParams);
+  const path = pathToFunc("/api/v1/repos")();
   const headers = new Headers(compactMap({
     Accept: "application/json",
     "X-On-Behalf-Of": encodeSimple("X-On-Behalf-Of", payload["X-On-Behalf-Of"], { explode: false, charEncoding: "none" })
@@ -134709,7 +134659,7 @@ async function $do302(client, request, options) {
   const context = {
     options: client._options,
     baseURL: options?.serverURL ?? client._baseURL ?? "",
-    operationID: "deleteCollaborator",
+    operationID: "listRepos",
     oAuth2Scopes: null,
     resolvedSecurity: requestSecurity,
     securitySource: client._options.bearerAuth,
@@ -134727,7 +134677,7 @@ async function $do302(client, request, options) {
   };
   const requestRes = client._createRequest(context, {
     security: requestSecurity,
-    method: "DELETE",
+    method: "GET",
     baseURL: options?.serverURL,
     path,
     headers,
@@ -134752,14 +134702,13 @@ async function $do302(client, request, options) {
   const responseFields = {
     HttpMeta: { Response: response, Request: req }
   };
-  const [result] = await match(nil(204, voidType()), jsonErr([401, 403, 404], RepoError$inboundSchema), jsonErr(500, RepoError$inboundSchema), fail("4XX"), fail("5XX"))(response, req, { extraFields: responseFields });
+  const [result] = await match(json(200, ListReposResponseBody$inboundSchema), jsonErr([401, 403], RepoError$inboundSchema), jsonErr([500, 503], RepoError$inboundSchema), fail("4XX"), fail("5XX"))(response, req, { extraFields: responseFields });
   if (!result.ok) {
     return [result, { status: "complete", request: req, response }];
   }
   return [result, { status: "complete", request: req, response }];
 }
-var init_reposCollaboratorsRemove = __esm(() => {
-  init_esm();
+var init_reposList = __esm(() => {
   init_encodings();
   init_http();
   init_matchers();
@@ -134772,48 +134721,59 @@ var init_reposCollaboratorsRemove = __esm(() => {
   init_async();
 });
 
-// src/mcp-server/tools/reposCollaboratorsRemove.ts
-var args294, tool$reposCollaboratorsRemove;
-var init_reposCollaboratorsRemove2 = __esm(() => {
-  init_reposCollaboratorsRemove();
+// src/mcp-server/tools/reposList.ts
+var args295, tool$reposList;
+var init_reposList2 = __esm(() => {
+  init_reposList();
   init_operations();
   init_tools();
-  args294 = {
-    request: DeleteCollaboratorRequest$inboundSchema
+  args295 = {
+    request: ListReposRequest$inboundSchema
   };
-  tool$reposCollaboratorsRemove = {
-    name: "repos-collaborators-remove",
-    description: `Remove a collaborator
+  tool$reposList = {
+    name: "repos-list",
+    description: `List the caller's org's repositories
 
-Removes a collaborator (owner or org admin only): DB delete
-(authoritative) then a best-effort fga revoke of the removed role.
+Returns every repository in the caller's org (org owner/admin only).
+Pure DB read.
 `,
-    args: args294,
-    tool: async (client, args295, ctx) => {
-      const [result, apiCall] = await reposCollaboratorsRemove(client, args295.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
+    args: args295,
+    tool: async (client, args296, ctx) => {
+      const [result, apiCall] = await reposList(client, args296.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
       if (!result.ok) {
         return {
           content: [{ type: "text", text: result.error.message }],
           isError: true
         };
       }
-      return formatResult(undefined, apiCall);
+      const value = result.value;
+      return formatResult(value, apiCall);
     }
   };
 });
 
-// src/funcs/reposCreate.ts
-function reposCreate(client, request, options) {
-  return new APIPromise($do303(client, request, options));
+// src/funcs/reposUpdate.ts
+function reposUpdate(client, request, options) {
+  return new APIPromise($do304(client, request, options));
 }
-async function $do303(client, request, options) {
-  const parsed = safeParse4(request, (value) => CreateRepoRequest$outboundSchema2.parse(value), "Input validation failed");
+async function $do304(client, request, options) {
+  const parsed = safeParse4(request, (value) => PatchRepoRequest$outboundSchema2.parse(value), "Input validation failed");
   if (!parsed.ok) {
     return [parsed, { status: "invalid" }];
   }
   const payload = parsed.value;
-  const body = encodeJSON("body", payload.CreateRepoRequest, { explode: true });
-  const path = pathToFunc("/api/v1/repos")();
+  const body = encodeJSON("body", payload.PatchRepoRequest, { explode: true });
+  const pathParams = {
+    name: encodeSimple("name", payload.name, {
+      explode: false,
+      charEncoding: "percent"
+    }),
+    org: encodeSimple("org", payload.org, {
+      explode: false,
+      charEncoding: "percent"
+    })
+  };
+  const path = pathToFunc("/api/v1/repos/{org}/{name}")(pathParams);
   const headers = new Headers(compactMap({
     "Content-Type": "application/json",
     Accept: "application/json",
@@ -134825,7 +134785,7 @@ async function $do303(client, request, options) {
   const context = {
     options: client._options,
     baseURL: options?.serverURL ?? client._baseURL ?? "",
-    operationID: "createRepo",
+    operationID: "patchRepo",
     oAuth2Scopes: null,
     resolvedSecurity: requestSecurity,
     securitySource: client._options.bearerAuth,
@@ -134843,7 +134803,7 @@ async function $do303(client, request, options) {
   };
   const requestRes = client._createRequest(context, {
     security: requestSecurity,
-    method: "POST",
+    method: "PATCH",
     baseURL: options?.serverURL,
     path,
     headers,
@@ -134868,13 +134828,13 @@ async function $do303(client, request, options) {
   const responseFields = {
     HttpMeta: { Response: response, Request: req }
   };
-  const [result] = await match(json(201, Repo$inboundSchema), jsonErr([400, 401, 409], RepoError$inboundSchema), jsonErr([500, 502, 503], RepoError$inboundSchema), fail("4XX"), fail("5XX"))(response, req, { extraFields: responseFields });
+  const [result] = await match(json(200, Repo$inboundSchema), jsonErr([400, 401, 403, 404, 409], RepoError$inboundSchema), jsonErr(500, RepoError$inboundSchema), fail("4XX"), fail("5XX"))(response, req, { extraFields: responseFields });
   if (!result.ok) {
     return [result, { status: "complete", request: req, response }];
   }
   return [result, { status: "complete", request: req, response }];
 }
-var init_reposCreate = __esm(() => {
+var init_reposUpdate = __esm(() => {
   init_encodings();
   init_http();
   init_matchers();
@@ -134888,26 +134848,26 @@ var init_reposCreate = __esm(() => {
   init_async();
 });
 
-// src/mcp-server/tools/reposCreate.ts
-var args295, tool$reposCreate;
-var init_reposCreate2 = __esm(() => {
-  init_reposCreate();
+// src/mcp-server/tools/reposUpdate.ts
+var args296, tool$reposUpdate;
+var init_reposUpdate2 = __esm(() => {
+  init_reposUpdate();
   init_operations();
   init_tools();
-  args295 = {
-    request: CreateRepoRequest$inboundSchema2
+  args296 = {
+    request: PatchRepoRequest$inboundSchema2
   };
-  tool$reposCreate = {
-    name: "repos-create",
-    description: `Create a repository
+  tool$reposUpdate = {
+    name: "repos-update",
+    description: `Update a repository's labels
 
-Provisions a repository: DB insert (authoritative) → Gitea create
-(rolled back on failure) → best-effort fga owner tuple. The caller
-becomes the owner.
+Applies a label-only update (name/description); org owner/admin only.
+The repository id is stable, so a rename is a one-row DB update — no
+Gitea write. Omitted fields are left unchanged.
 `,
-    args: args295,
-    tool: async (client, args296, ctx) => {
-      const [result, apiCall] = await reposCreate(client, args296.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
+    args: args296,
+    tool: async (client, args297, ctx) => {
+      const [result, apiCall] = await reposUpdate(client, args297.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
       if (!result.ok) {
         return {
           content: [{ type: "text", text: result.error.message }],
@@ -134920,29 +134880,22 @@ becomes the owner.
   };
 });
 
-// src/funcs/reposDelete.ts
-function reposDelete(client, request, options) {
-  return new APIPromise($do304(client, request, options));
+// src/funcs/sandboxCreate.ts
+function sandboxCreate(client, request, options) {
+  return new APIPromise($do305(client, request, options));
 }
-async function $do304(client, request, options) {
-  const parsed = safeParse4(request, (value) => DeleteRepoRequest$outboundSchema.parse(value), "Input validation failed");
+async function $do305(client, request, options) {
+  const parsed = safeParse4(request, (value) => CreateSessionRequest$outboundSchema2.parse(value), "Input validation failed");
   if (!parsed.ok) {
     return [parsed, { status: "invalid" }];
   }
   const payload = parsed.value;
-  const body = null;
-  const pathParams = {
-    name: encodeSimple("name", payload.name, {
-      explode: false,
-      charEncoding: "percent"
-    }),
-    org: encodeSimple("org", payload.org, {
-      explode: false,
-      charEncoding: "percent"
-    })
-  };
-  const path = pathToFunc("/api/v1/repos/{org}/{name}")(pathParams);
+  const body = encodeJSON("body", payload.CreateSessionRequest, {
+    explode: true
+  });
+  const path = pathToFunc("/api/v1/sandbox/sessions")();
   const headers = new Headers(compactMap({
+    "Content-Type": "application/json",
     Accept: "application/json",
     "X-On-Behalf-Of": encodeSimple("X-On-Behalf-Of", payload["X-On-Behalf-Of"], { explode: false, charEncoding: "none" })
   }));
@@ -134952,7 +134905,7 @@ async function $do304(client, request, options) {
   const context = {
     options: client._options,
     baseURL: options?.serverURL ?? client._baseURL ?? "",
-    operationID: "deleteRepo",
+    operationID: "createSession",
     oAuth2Scopes: null,
     resolvedSecurity: requestSecurity,
     securitySource: client._options.bearerAuth,
@@ -134970,7 +134923,7 @@ async function $do304(client, request, options) {
   };
   const requestRes = client._createRequest(context, {
     security: requestSecurity,
-    method: "DELETE",
+    method: "POST",
     baseURL: options?.serverURL,
     path,
     headers,
@@ -134995,14 +134948,13 @@ async function $do304(client, request, options) {
   const responseFields = {
     HttpMeta: { Response: response, Request: req }
   };
-  const [result] = await match(nil(204, voidType()), jsonErr([401, 403, 404], RepoError$inboundSchema), jsonErr(500, RepoError$inboundSchema), fail("4XX"), fail("5XX"))(response, req, { extraFields: responseFields });
+  const [result] = await match(json([200, 202], CreateSessionResponse$inboundSchema), jsonErr(422, HTTPValidationError$inboundSchema), fail("4XX"), fail([501, "5XX"]))(response, req, { extraFields: responseFields });
   if (!result.ok) {
     return [result, { status: "complete", request: req, response }];
   }
   return [result, { status: "complete", request: req, response }];
 }
-var init_reposDelete = __esm(() => {
-  init_esm();
+var init_sandboxCreate = __esm(() => {
   init_encodings();
   init_http();
   init_matchers();
@@ -135010,65 +134962,67 @@ var init_reposDelete = __esm(() => {
   init_schemas4();
   init_security();
   init_url();
+  init_components();
   init_errors4();
   init_operations();
   init_async();
 });
 
-// src/mcp-server/tools/reposDelete.ts
-var args296, tool$reposDelete;
-var init_reposDelete2 = __esm(() => {
-  init_reposDelete();
+// src/mcp-server/tools/sandboxCreate.ts
+var args297, tool$sandboxCreate;
+var init_sandboxCreate2 = __esm(() => {
+  init_sandboxCreate();
   init_operations();
   init_tools();
-  args296 = {
-    request: DeleteRepoRequest$inboundSchema
+  args297 = {
+    request: CreateSessionRequest$inboundSchema2
   };
-  tool$reposDelete = {
-    name: "repos-delete",
-    description: `Delete a repository
+  tool$sandboxCreate = {
+    name: "sandbox-create",
+    description: `Create Session
 
-Removes a repository; owner or org admin only. The DB delete is
-authoritative; the Gitea and fga teardowns are best-effort cleanup.
-`,
-    args: args296,
-    tool: async (client, args297, ctx) => {
-      const [result, apiCall] = await reposDelete(client, args297.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
+Create a sandbox session and return its public session metadata, session token, and provider. Set \`session_kind\` to \`browser\` to start a browser-backed session instead of a standard command/code sandbox. Set \`queue_if_full\` to \`true\` to queue the request instead of failing when runner capacity is temporarily unavailable. It does not queue requests for session kinds the deployment does not support. Browser sessions require a Firecracker-backed deployment; standard-only deployments reject them immediately with \`browser_sessions_not_enabled\`.`,
+    args: args297,
+    tool: async (client, args298, ctx) => {
+      const [result, apiCall] = await sandboxCreate(client, args298.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
       if (!result.ok) {
         return {
           content: [{ type: "text", text: result.error.message }],
           isError: true
         };
       }
-      return formatResult(undefined, apiCall);
+      const value = result.value;
+      return formatResult(value, apiCall);
     }
   };
 });
 
-// src/funcs/reposGet.ts
-function reposGet(client, request, options) {
-  return new APIPromise($do305(client, request, options));
+// src/funcs/sandboxDownloadArchive.ts
+function sandboxDownloadArchive(client, request, options) {
+  return new APIPromise($do306(client, request, options));
 }
-async function $do305(client, request, options) {
-  const parsed = safeParse4(request, (value) => GetRepoRequest$outboundSchema.parse(value), "Input validation failed");
+async function $do306(client, request, options) {
+  const parsed = safeParse4(request, (value) => DownloadWorkspaceArchiveRequest$outboundSchema.parse(value), "Input validation failed");
   if (!parsed.ok) {
     return [parsed, { status: "invalid" }];
   }
   const payload = parsed.value;
-  const body = null;
+  const body = encodeJSON("body", payload.WorkspaceArchiveRequest, {
+    explode: true
+  });
   const pathParams = {
-    name: encodeSimple("name", payload.name, {
-      explode: false,
-      charEncoding: "percent"
-    }),
-    org: encodeSimple("org", payload.org, {
+    session_id: encodeSimple("session_id", payload.session_id, {
       explode: false,
       charEncoding: "percent"
     })
   };
-  const path = pathToFunc("/api/v1/repos/{org}/{name}")(pathParams);
+  const path = pathToFunc("/api/v1/sandbox/sessions/{session_id}/workspace/archive")(pathParams);
+  const query = encodeFormQuery({
+    session_token: payload.session_token
+  });
   const headers = new Headers(compactMap({
-    Accept: "application/json",
+    "Content-Type": "application/json",
+    Accept: "application/zip",
     "X-On-Behalf-Of": encodeSimple("X-On-Behalf-Of", payload["X-On-Behalf-Of"], { explode: false, charEncoding: "none" })
   }));
   const secConfig = await extractSecurity(client._options.bearerAuth);
@@ -135077,7 +135031,7 @@ async function $do305(client, request, options) {
   const context = {
     options: client._options,
     baseURL: options?.serverURL ?? client._baseURL ?? "",
-    operationID: "getRepo",
+    operationID: "downloadWorkspaceArchive",
     oAuth2Scopes: null,
     resolvedSecurity: requestSecurity,
     securitySource: client._options.bearerAuth,
@@ -135095,10 +135049,11 @@ async function $do305(client, request, options) {
   };
   const requestRes = client._createRequest(context, {
     security: requestSecurity,
-    method: "GET",
+    method: "POST",
     baseURL: options?.serverURL,
     path,
     headers,
+    query,
     body,
     userAgent: client._options.userAgent,
     timeoutMs: options?.timeoutMs || client._options.timeoutMs || -1
@@ -135120,13 +135075,16 @@ async function $do305(client, request, options) {
   const responseFields = {
     HttpMeta: { Response: response, Request: req }
   };
-  const [result] = await match(json(200, Repo$inboundSchema), jsonErr([401, 403, 404], RepoError$inboundSchema), fail("4XX"), fail("5XX"))(response, req, { extraFields: responseFields });
+  const [result] = await match(stream(200, instanceOfType(ReadableStream), {
+    ctype: "application/zip"
+  }), jsonErr(422, HTTPValidationError$inboundSchema), fail("4XX"), fail("5XX"))(response, req, { extraFields: responseFields });
   if (!result.ok) {
     return [result, { status: "complete", request: req, response }];
   }
   return [result, { status: "complete", request: req, response }];
 }
-var init_reposGet = __esm(() => {
+var init_sandboxDownloadArchive = __esm(() => {
+  init_esm();
   init_encodings();
   init_http();
   init_matchers();
@@ -135134,29 +135092,28 @@ var init_reposGet = __esm(() => {
   init_schemas4();
   init_security();
   init_url();
-  init_components();
   init_errors4();
   init_operations();
   init_async();
 });
 
-// src/mcp-server/tools/reposGet.ts
-var args297, tool$reposGet;
-var init_reposGet2 = __esm(() => {
-  init_reposGet();
+// src/mcp-server/tools/sandboxDownloadArchive.ts
+var args298, tool$sandboxDownloadArchive;
+var init_sandboxDownloadArchive2 = __esm(() => {
+  init_sandboxDownloadArchive();
   init_operations();
   init_tools();
-  args297 = {
-    request: GetRepoRequest$inboundSchema
+  args298 = {
+    request: DownloadWorkspaceArchiveRequest$inboundSchema
   };
-  tool$reposGet = {
-    name: "repos-get",
-    description: `Get a repository
+  tool$sandboxDownloadArchive = {
+    name: "sandbox-download-archive",
+    description: `Download Workspace Archive
 
-Reads a single repository after a reader-level access check.`,
-    args: args297,
-    tool: async (client, args298, ctx) => {
-      const [result, apiCall] = await reposGet(client, args298.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
+Download a zip archive containing the selected workspace paths.`,
+    args: args298,
+    tool: async (client, args299, ctx) => {
+      const [result, apiCall] = await sandboxDownloadArchive(client, args299.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
       if (!result.ok) {
         return {
           content: [{ type: "text", text: result.error.message }],
@@ -135169,20 +135126,33 @@ Reads a single repository after a reader-level access check.`,
   };
 });
 
-// src/funcs/reposList.ts
-function reposList(client, request, options) {
-  return new APIPromise($do306(client, request, options));
+// src/funcs/sandboxDownloadFile.ts
+function sandboxDownloadFile(client, request, options) {
+  return new APIPromise($do307(client, request, options));
 }
-async function $do306(client, request, options) {
-  const parsed = safeParse4(request, (value) => ListReposRequest$outboundSchema.parse(value), "Input validation failed");
+async function $do307(client, request, options) {
+  const parsed = safeParse4(request, (value) => DownloadWorkspaceFileRequest$outboundSchema.parse(value), "Input validation failed");
   if (!parsed.ok) {
     return [parsed, { status: "invalid" }];
   }
   const payload = parsed.value;
   const body = null;
-  const path = pathToFunc("/api/v1/repos")();
+  const pathParams = {
+    file_path: encodeSimple("file_path", payload.file_path, {
+      explode: false,
+      charEncoding: "percent"
+    }),
+    session_id: encodeSimple("session_id", payload.session_id, {
+      explode: false,
+      charEncoding: "percent"
+    })
+  };
+  const path = pathToFunc("/api/v1/sandbox/sessions/{session_id}/workspace/files/{file_path}")(pathParams);
+  const query = encodeFormQuery({
+    session_token: payload.session_token
+  });
   const headers = new Headers(compactMap({
-    Accept: "application/json",
+    Accept: "application/octet-stream",
     "X-On-Behalf-Of": encodeSimple("X-On-Behalf-Of", payload["X-On-Behalf-Of"], { explode: false, charEncoding: "none" })
   }));
   const secConfig = await extractSecurity(client._options.bearerAuth);
@@ -135191,7 +135161,7 @@ async function $do306(client, request, options) {
   const context = {
     options: client._options,
     baseURL: options?.serverURL ?? client._baseURL ?? "",
-    operationID: "listRepos",
+    operationID: "downloadWorkspaceFile",
     oAuth2Scopes: null,
     resolvedSecurity: requestSecurity,
     securitySource: client._options.bearerAuth,
@@ -135213,6 +135183,7 @@ async function $do306(client, request, options) {
     baseURL: options?.serverURL,
     path,
     headers,
+    query,
     body,
     userAgent: client._options.userAgent,
     timeoutMs: options?.timeoutMs || client._options.timeoutMs || -1
@@ -135234,13 +135205,14 @@ async function $do306(client, request, options) {
   const responseFields = {
     HttpMeta: { Response: response, Request: req }
   };
-  const [result] = await match(json(200, ListReposResponseBody$inboundSchema), jsonErr(401, RepoError$inboundSchema), jsonErr(500, RepoError$inboundSchema), fail("4XX"), fail("5XX"))(response, req, { extraFields: responseFields });
+  const [result] = await match(stream(200, instanceOfType(ReadableStream)), jsonErr(422, HTTPValidationError$inboundSchema), fail("4XX"), fail("5XX"))(response, req, { extraFields: responseFields });
   if (!result.ok) {
     return [result, { status: "complete", request: req, response }];
   }
   return [result, { status: "complete", request: req, response }];
 }
-var init_reposList = __esm(() => {
+var init_sandboxDownloadFile = __esm(() => {
+  init_esm();
   init_encodings();
   init_http();
   init_matchers();
@@ -135253,25 +135225,23 @@ var init_reposList = __esm(() => {
   init_async();
 });
 
-// src/mcp-server/tools/reposList.ts
-var args298, tool$reposList;
-var init_reposList2 = __esm(() => {
-  init_reposList();
+// src/mcp-server/tools/sandboxDownloadFile.ts
+var args299, tool$sandboxDownloadFile;
+var init_sandboxDownloadFile2 = __esm(() => {
+  init_sandboxDownloadFile();
   init_operations();
   init_tools();
-  args298 = {
-    request: ListReposRequest$inboundSchema
+  args299 = {
+    request: DownloadWorkspaceFileRequest$inboundSchema
   };
-  tool$reposList = {
-    name: "repos-list",
-    description: `List the caller's repositories
+  tool$sandboxDownloadFile = {
+    name: "sandbox-download-file",
+    description: `Download Workspace File
 
-Returns the repositories visible to the caller within their (org, team),
-widened to the whole (org, team) for an org admin. Pure DB read.
-`,
-    args: args298,
-    tool: async (client, args299, ctx) => {
-      const [result, apiCall] = await reposList(client, args299.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
+Download raw bytes from a file in the session workspace.`,
+    args: args299,
+    tool: async (client, args300, ctx) => {
+      const [result, apiCall] = await sandboxDownloadFile(client, args300.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
       if (!result.ok) {
         return {
           content: [{ type: "text", text: result.error.message }],
@@ -135284,30 +135254,25 @@ widened to the whole (org, team) for an org admin. Pure DB read.
   };
 });
 
-// src/funcs/reposUpdate.ts
-function reposUpdate(client, request, options) {
-  return new APIPromise($do307(client, request, options));
+// src/funcs/sandboxGet.ts
+function sandboxGet(client, request, options) {
+  return new APIPromise($do308(client, request, options));
 }
-async function $do307(client, request, options) {
-  const parsed = safeParse4(request, (value) => PatchRepoRequest$outboundSchema2.parse(value), "Input validation failed");
+async function $do308(client, request, options) {
+  const parsed = safeParse4(request, (value) => GetSessionRequest$outboundSchema.parse(value), "Input validation failed");
   if (!parsed.ok) {
     return [parsed, { status: "invalid" }];
   }
   const payload = parsed.value;
-  const body = encodeJSON("body", payload.PatchRepoRequest, { explode: true });
+  const body = null;
   const pathParams = {
-    name: encodeSimple("name", payload.name, {
-      explode: false,
-      charEncoding: "percent"
-    }),
-    org: encodeSimple("org", payload.org, {
+    session_id: encodeSimple("session_id", payload.session_id, {
       explode: false,
       charEncoding: "percent"
     })
   };
-  const path = pathToFunc("/api/v1/repos/{org}/{name}")(pathParams);
+  const path = pathToFunc("/api/v1/sandbox/sessions/{session_id}")(pathParams);
   const headers = new Headers(compactMap({
-    "Content-Type": "application/json",
     Accept: "application/json",
     "X-On-Behalf-Of": encodeSimple("X-On-Behalf-Of", payload["X-On-Behalf-Of"], { explode: false, charEncoding: "none" })
   }));
@@ -135317,7 +135282,7 @@ async function $do307(client, request, options) {
   const context = {
     options: client._options,
     baseURL: options?.serverURL ?? client._baseURL ?? "",
-    operationID: "patchRepo",
+    operationID: "getSession",
     oAuth2Scopes: null,
     resolvedSecurity: requestSecurity,
     securitySource: client._options.bearerAuth,
@@ -135335,7 +135300,7 @@ async function $do307(client, request, options) {
   };
   const requestRes = client._createRequest(context, {
     security: requestSecurity,
-    method: "PATCH",
+    method: "GET",
     baseURL: options?.serverURL,
     path,
     headers,
@@ -135360,13 +135325,13 @@ async function $do307(client, request, options) {
   const responseFields = {
     HttpMeta: { Response: response, Request: req }
   };
-  const [result] = await match(json(200, Repo$inboundSchema), jsonErr([400, 401, 403, 404, 409], RepoError$inboundSchema), jsonErr(500, RepoError$inboundSchema), fail("4XX"), fail("5XX"))(response, req, { extraFields: responseFields });
+  const [result] = await match(json(200, SessionRecord$inboundSchema), jsonErr(422, HTTPValidationError$inboundSchema), fail("4XX"), fail("5XX"))(response, req, { extraFields: responseFields });
   if (!result.ok) {
     return [result, { status: "complete", request: req, response }];
   }
   return [result, { status: "complete", request: req, response }];
 }
-var init_reposUpdate = __esm(() => {
+var init_sandboxGet = __esm(() => {
   init_encodings();
   init_http();
   init_matchers();
@@ -135380,27 +135345,23 @@ var init_reposUpdate = __esm(() => {
   init_async();
 });
 
-// src/mcp-server/tools/reposUpdate.ts
-var args299, tool$reposUpdate;
-var init_reposUpdate2 = __esm(() => {
-  init_reposUpdate();
+// src/mcp-server/tools/sandboxGet.ts
+var args300, tool$sandboxGet;
+var init_sandboxGet2 = __esm(() => {
+  init_sandboxGet();
   init_operations();
   init_tools();
-  args299 = {
-    request: PatchRepoRequest$inboundSchema2
+  args300 = {
+    request: GetSessionRequest$inboundSchema
   };
-  tool$reposUpdate = {
-    name: "repos-update",
-    description: `Update a repository's labels
+  tool$sandboxGet = {
+    name: "sandbox-get",
+    description: `Get Session
 
-Applies a label-only update (name/visibility/description); owner or org
-admin only. The repository id is stable, so a rename is a one-row DB
-update — no Gitea/fga writes. Omitted fields are left unchanged;
-\`visibility\` cannot be set to empty.
-`,
-    args: args299,
-    tool: async (client, args300, ctx) => {
-      const [result, apiCall] = await reposUpdate(client, args300.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
+Return the current state, configuration, and resource allocation for a sandbox session.`,
+    args: args300,
+    tool: async (client, args301, ctx) => {
+      const [result, apiCall] = await sandboxGet(client, args301.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
       if (!result.ok) {
         return {
           content: [{ type: "text", text: result.error.message }],
@@ -135413,22 +135374,28 @@ update — no Gitea/fga writes. Omitted fields are left unchanged;
   };
 });
 
-// src/funcs/sandboxCreate.ts
-function sandboxCreate(client, request, options) {
-  return new APIPromise($do308(client, request, options));
+// src/funcs/sandboxGetBrowserUrl.ts
+function sandboxGetBrowserUrl(client, request, options) {
+  return new APIPromise($do309(client, request, options));
 }
-async function $do308(client, request, options) {
-  const parsed = safeParse4(request, (value) => CreateSessionRequest$outboundSchema2.parse(value), "Input validation failed");
+async function $do309(client, request, options) {
+  const parsed = safeParse4(request, (value) => GetBrowserSessionUrlRequest$outboundSchema.parse(value), "Input validation failed");
   if (!parsed.ok) {
     return [parsed, { status: "invalid" }];
   }
   const payload = parsed.value;
-  const body = encodeJSON("body", payload.CreateSessionRequest, {
-    explode: true
+  const body = null;
+  const pathParams = {
+    session_id: encodeSimple("session_id", payload.session_id, {
+      explode: false,
+      charEncoding: "percent"
+    })
+  };
+  const path = pathToFunc("/api/v1/sandbox/sessions/{session_id}/browser-url")(pathParams);
+  const query = encodeFormQuery({
+    session_token: payload.session_token
   });
-  const path = pathToFunc("/api/v1/sandbox/sessions")();
   const headers = new Headers(compactMap({
-    "Content-Type": "application/json",
     Accept: "application/json",
     "X-On-Behalf-Of": encodeSimple("X-On-Behalf-Of", payload["X-On-Behalf-Of"], { explode: false, charEncoding: "none" })
   }));
@@ -135438,7 +135405,7 @@ async function $do308(client, request, options) {
   const context = {
     options: client._options,
     baseURL: options?.serverURL ?? client._baseURL ?? "",
-    operationID: "createSession",
+    operationID: "getBrowserSessionUrl",
     oAuth2Scopes: null,
     resolvedSecurity: requestSecurity,
     securitySource: client._options.bearerAuth,
@@ -135456,10 +135423,11 @@ async function $do308(client, request, options) {
   };
   const requestRes = client._createRequest(context, {
     security: requestSecurity,
-    method: "POST",
+    method: "GET",
     baseURL: options?.serverURL,
     path,
     headers,
+    query,
     body,
     userAgent: client._options.userAgent,
     timeoutMs: options?.timeoutMs || client._options.timeoutMs || -1
@@ -135481,13 +135449,13 @@ async function $do308(client, request, options) {
   const responseFields = {
     HttpMeta: { Response: response, Request: req }
   };
-  const [result] = await match(json([200, 202], CreateSessionResponse$inboundSchema), jsonErr(422, HTTPValidationError$inboundSchema), fail("4XX"), fail([501, "5XX"]))(response, req, { extraFields: responseFields });
+  const [result] = await match(json(200, SessionUrlResponse$inboundSchema), jsonErr(422, HTTPValidationError$inboundSchema), fail("4XX"), fail([501, "5XX"]))(response, req, { extraFields: responseFields });
   if (!result.ok) {
     return [result, { status: "complete", request: req, response }];
   }
   return [result, { status: "complete", request: req, response }];
 }
-var init_sandboxCreate = __esm(() => {
+var init_sandboxGetBrowserUrl = __esm(() => {
   init_encodings();
   init_http();
   init_matchers();
@@ -135501,23 +135469,23 @@ var init_sandboxCreate = __esm(() => {
   init_async();
 });
 
-// src/mcp-server/tools/sandboxCreate.ts
-var args300, tool$sandboxCreate;
-var init_sandboxCreate2 = __esm(() => {
-  init_sandboxCreate();
+// src/mcp-server/tools/sandboxGetBrowserUrl.ts
+var args301, tool$sandboxGetBrowserUrl;
+var init_sandboxGetBrowserUrl2 = __esm(() => {
+  init_sandboxGetBrowserUrl();
   init_operations();
   init_tools();
-  args300 = {
-    request: CreateSessionRequest$inboundSchema2
+  args301 = {
+    request: GetBrowserSessionUrlRequest$inboundSchema
   };
-  tool$sandboxCreate = {
-    name: "sandbox-create",
-    description: `Create Session
+  tool$sandboxGetBrowserUrl = {
+    name: "sandbox-get-browser-url",
+    description: `Get Browser Session URL
 
-Create a sandbox session and return its public session metadata, session token, and provider. Set \`session_kind\` to \`browser\` to start a browser-backed session instead of a standard command/code sandbox. Set \`queue_if_full\` to \`true\` to queue the request instead of failing when runner capacity is temporarily unavailable. It does not queue requests for session kinds the deployment does not support. Browser sessions require a Firecracker-backed deployment; standard-only deployments reject them immediately with \`browser_sessions_not_enabled\`.`,
-    args: args300,
-    tool: async (client, args301, ctx) => {
-      const [result, apiCall] = await sandboxCreate(client, args301.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
+Return the public gateway URL for a browser session's Chrome DevTools Protocol endpoint. Playwright can use this HTTP endpoint directly. For clients that require a WebSocket endpoint, request \`json/version\` and use its rewritten \`webSocketDebuggerUrl\`. Insert subpaths before the query string; for example, use \`/ports/9222/json/version?session_token=...\`. Send the same MKA1 API-key authorization header on the HTTP and WebSocket requests. Standard sessions do not expose a public URL; use the command, code, and workspace operations instead.`,
+    args: args301,
+    tool: async (client, args302, ctx) => {
+      const [result, apiCall] = await sandboxGetBrowserUrl(client, args302.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
       if (!result.ok) {
         return {
           content: [{ type: "text", text: result.error.message }],
@@ -135530,33 +135498,14 @@ Create a sandbox session and return its public session metadata, session token,
   };
 });
 
-// src/funcs/sandboxDownloadArchive.ts
-function sandboxDownloadArchive(client, request, options) {
-  return new APIPromise($do309(client, request, options));
+// src/funcs/sandboxGetPricing.ts
+function sandboxGetPricing(client, options) {
+  return new APIPromise($do310(client, options));
 }
-async function $do309(client, request, options) {
-  const parsed = safeParse4(request, (value) => DownloadWorkspaceArchiveRequest$outboundSchema.parse(value), "Input validation failed");
-  if (!parsed.ok) {
-    return [parsed, { status: "invalid" }];
-  }
-  const payload = parsed.value;
-  const body = encodeJSON("body", payload.WorkspaceArchiveRequest, {
-    explode: true
-  });
-  const pathParams = {
-    session_id: encodeSimple("session_id", payload.session_id, {
-      explode: false,
-      charEncoding: "percent"
-    })
-  };
-  const path = pathToFunc("/api/v1/sandbox/sessions/{session_id}/workspace/archive")(pathParams);
-  const query = encodeFormQuery({
-    session_token: payload.session_token
-  });
+async function $do310(client, options) {
+  const path = pathToFunc("/api/v1/sandbox/pricing")();
   const headers = new Headers(compactMap({
-    "Content-Type": "application/json",
-    Accept: "application/zip",
-    "X-On-Behalf-Of": encodeSimple("X-On-Behalf-Of", payload["X-On-Behalf-Of"], { explode: false, charEncoding: "none" })
+    Accept: "application/json"
   }));
   const secConfig = await extractSecurity(client._options.bearerAuth);
   const securityInput = secConfig == null ? {} : { bearerAuth: secConfig };
@@ -135564,7 +135513,7 @@ async function $do309(client, request, options) {
   const context = {
     options: client._options,
     baseURL: options?.serverURL ?? client._baseURL ?? "",
-    operationID: "downloadWorkspaceArchive",
+    operationID: "getSandboxPricing",
     oAuth2Scopes: null,
     resolvedSecurity: requestSecurity,
     securitySource: client._options.bearerAuth,
@@ -135582,12 +135531,10 @@ async function $do309(client, request, options) {
   };
   const requestRes = client._createRequest(context, {
     security: requestSecurity,
-    method: "POST",
+    method: "GET",
     baseURL: options?.serverURL,
     path,
     headers,
-    query,
-    body,
     userAgent: client._options.userAgent,
     timeoutMs: options?.timeoutMs || client._options.timeoutMs || -1
   }, options);
@@ -135605,48 +135552,34 @@ async function $do309(client, request, options) {
     return [doResult, { status: "request-error", request: req }];
   }
   const response = doResult.value;
-  const responseFields = {
-    HttpMeta: { Response: response, Request: req }
-  };
-  const [result] = await match(stream(200, instanceOfType(ReadableStream), {
-    ctype: "application/zip"
-  }), jsonErr(422, HTTPValidationError$inboundSchema), fail("4XX"), fail("5XX"))(response, req, { extraFields: responseFields });
+  const [result] = await match(json(200, SandboxPricingCard$inboundSchema), fail("4XX"), fail("5XX"))(response, req);
   if (!result.ok) {
     return [result, { status: "complete", request: req, response }];
   }
   return [result, { status: "complete", request: req, response }];
 }
-var init_sandboxDownloadArchive = __esm(() => {
-  init_esm();
-  init_encodings();
+var init_sandboxGetPricing = __esm(() => {
   init_http();
   init_matchers();
   init_primitives();
-  init_schemas4();
   init_security();
   init_url();
-  init_errors4();
-  init_operations();
+  init_components();
   init_async();
 });
 
-// src/mcp-server/tools/sandboxDownloadArchive.ts
-var args301, tool$sandboxDownloadArchive;
-var init_sandboxDownloadArchive2 = __esm(() => {
-  init_sandboxDownloadArchive();
-  init_operations();
+// src/mcp-server/tools/sandboxGetPricing.ts
+var tool$sandboxGetPricing;
+var init_sandboxGetPricing2 = __esm(() => {
+  init_sandboxGetPricing();
   init_tools();
-  args301 = {
-    request: DownloadWorkspaceArchiveRequest$inboundSchema
-  };
-  tool$sandboxDownloadArchive = {
-    name: "sandbox-download-archive",
-    description: `Download Workspace Archive
+  tool$sandboxGetPricing = {
+    name: "sandbox-get-pricing",
+    description: `Get Sandbox Pricing
 
-Download a zip archive containing the selected workspace paths.`,
-    args: args301,
-    tool: async (client, args302, ctx) => {
-      const [result, apiCall] = await sandboxDownloadArchive(client, args302.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
+Current sandbox pricing rate card, keyed by SKU (\`standard\`, \`browser\`, \`eval-python\`). Metered sandbox usage is billed \`hours × (per_hour + reserved_memory_GiB × per_gib_hour)\`; SKUs without a configured rate accrue no spend. Cluster admins only.`,
+    tool: async (client, ctx) => {
+      const [result, apiCall] = await sandboxGetPricing(client, { fetchOptions: { signal: ctx.signal } }).$inspect();
       if (!result.ok) {
         return {
           content: [{ type: "text", text: result.error.message }],
@@ -135659,33 +135592,29 @@ Download a zip archive containing the selected workspace paths.`,
   };
 });
 
-// src/funcs/sandboxDownloadFile.ts
-function sandboxDownloadFile(client, request, options) {
-  return new APIPromise($do310(client, request, options));
+// src/funcs/sandboxGetWorkspace.ts
+function sandboxGetWorkspace(client, request, options) {
+  return new APIPromise($do311(client, request, options));
 }
-async function $do310(client, request, options) {
-  const parsed = safeParse4(request, (value) => DownloadWorkspaceFileRequest$outboundSchema.parse(value), "Input validation failed");
+async function $do311(client, request, options) {
+  const parsed = safeParse4(request, (value) => GetWorkspaceRequest$outboundSchema.parse(value), "Input validation failed");
   if (!parsed.ok) {
     return [parsed, { status: "invalid" }];
   }
   const payload = parsed.value;
   const body = null;
   const pathParams = {
-    file_path: encodeSimple("file_path", payload.file_path, {
-      explode: false,
-      charEncoding: "percent"
-    }),
     session_id: encodeSimple("session_id", payload.session_id, {
       explode: false,
       charEncoding: "percent"
     })
   };
-  const path = pathToFunc("/api/v1/sandbox/sessions/{session_id}/workspace/files/{file_path}")(pathParams);
+  const path = pathToFunc("/api/v1/sandbox/sessions/{session_id}/workspace")(pathParams);
   const query = encodeFormQuery({
     session_token: payload.session_token
   });
   const headers = new Headers(compactMap({
-    Accept: "application/octet-stream",
+    Accept: "application/json",
     "X-On-Behalf-Of": encodeSimple("X-On-Behalf-Of", payload["X-On-Behalf-Of"], { explode: false, charEncoding: "none" })
   }));
   const secConfig = await extractSecurity(client._options.bearerAuth);
@@ -135694,7 +135623,7 @@ async function $do310(client, request, options) {
   const context = {
     options: client._options,
     baseURL: options?.serverURL ?? client._baseURL ?? "",
-    operationID: "downloadWorkspaceFile",
+    operationID: "getWorkspace",
     oAuth2Scopes: null,
     resolvedSecurity: requestSecurity,
     securitySource: client._options.bearerAuth,
@@ -135738,14 +135667,13 @@ async function $do310(client, request, options) {
   const responseFields = {
     HttpMeta: { Response: response, Request: req }
   };
-  const [result] = await match(stream(200, instanceOfType(ReadableStream)), jsonErr(422, HTTPValidationError$inboundSchema), fail("4XX"), fail("5XX"))(response, req, { extraFields: responseFields });
+  const [result] = await match(json(200, WorkspaceManifest$inboundSchema), jsonErr(422, HTTPValidationError$inboundSchema), fail("4XX"), fail("5XX"))(response, req, { extraFields: responseFields });
   if (!result.ok) {
     return [result, { status: "complete", request: req, response }];
   }
   return [result, { status: "complete", request: req, response }];
 }
-var init_sandboxDownloadFile = __esm(() => {
-  init_esm();
+var init_sandboxGetWorkspace = __esm(() => {
   init_encodings();
   init_http();
   init_matchers();
@@ -135753,28 +135681,29 @@ var init_sandboxDownloadFile = __esm(() => {
   init_schemas4();
   init_security();
   init_url();
+  init_components();
   init_errors4();
   init_operations();
   init_async();
 });
 
-// src/mcp-server/tools/sandboxDownloadFile.ts
-var args302, tool$sandboxDownloadFile;
-var init_sandboxDownloadFile2 = __esm(() => {
-  init_sandboxDownloadFile();
+// src/mcp-server/tools/sandboxGetWorkspace.ts
+var args302, tool$sandboxGetWorkspace;
+var init_sandboxGetWorkspace2 = __esm(() => {
+  init_sandboxGetWorkspace();
   init_operations();
   init_tools();
   args302 = {
-    request: DownloadWorkspaceFileRequest$inboundSchema
+    request: GetWorkspaceRequest$inboundSchema
   };
-  tool$sandboxDownloadFile = {
-    name: "sandbox-download-file",
-    description: `Download Workspace File
+  tool$sandboxGetWorkspace = {
+    name: "sandbox-get-workspace",
+    description: `Get Workspace Manifest
 
-Download raw bytes from a file in the session workspace.`,
+List files currently stored in the session workspace, including paths, sizes, and etags.`,
     args: args302,
     tool: async (client, args303, ctx) => {
-      const [result, apiCall] = await sandboxDownloadFile(client, args303.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
+      const [result, apiCall] = await sandboxGetWorkspace(client, args303.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
       if (!result.ok) {
         return {
           content: [{ type: "text", text: result.error.message }],
@@ -135787,24 +135716,18 @@ Download raw bytes from a file in the session workspace.`,
   };
 });
 
-// src/funcs/sandboxGet.ts
-function sandboxGet(client, request, options) {
-  return new APIPromise($do311(client, request, options));
+// src/funcs/sandboxList.ts
+function sandboxList(client, request, options) {
+  return new APIPromise($do312(client, request, options));
 }
-async function $do311(client, request, options) {
-  const parsed = safeParse4(request, (value) => GetSessionRequest$outboundSchema.parse(value), "Input validation failed");
+async function $do312(client, request, options) {
+  const parsed = safeParse4(request, (value) => ListSessionsRequest$outboundSchema.parse(value), "Input validation failed");
   if (!parsed.ok) {
     return [parsed, { status: "invalid" }];
   }
   const payload = parsed.value;
   const body = null;
-  const pathParams = {
-    session_id: encodeSimple("session_id", payload.session_id, {
-      explode: false,
-      charEncoding: "percent"
-    })
-  };
-  const path = pathToFunc("/api/v1/sandbox/sessions/{session_id}")(pathParams);
+  const path = pathToFunc("/api/v1/sandbox/sessions")();
   const headers = new Headers(compactMap({
     Accept: "application/json",
     "X-On-Behalf-Of": encodeSimple("X-On-Behalf-Of", payload["X-On-Behalf-Of"], { explode: false, charEncoding: "none" })
@@ -135815,7 +135738,7 @@ async function $do311(client, request, options) {
   const context = {
     options: client._options,
     baseURL: options?.serverURL ?? client._baseURL ?? "",
-    operationID: "getSession",
+    operationID: "listSessions",
     oAuth2Scopes: null,
     resolvedSecurity: requestSecurity,
     securitySource: client._options.bearerAuth,
@@ -135858,13 +135781,14 @@ async function $do311(client, request, options) {
   const responseFields = {
     HttpMeta: { Response: response, Request: req }
   };
-  const [result] = await match(json(200, SessionRecord$inboundSchema), jsonErr(422, HTTPValidationError$inboundSchema), fail("4XX"), fail("5XX"))(response, req, { extraFields: responseFields });
+  const [result] = await match(json(200, arrayType(SessionRecord$inboundSchema)), jsonErr(422, HTTPValidationError$inboundSchema), fail("4XX"), fail("5XX"))(response, req, { extraFields: responseFields });
   if (!result.ok) {
     return [result, { status: "complete", request: req, response }];
   }
   return [result, { status: "complete", request: req, response }];
 }
-var init_sandboxGet = __esm(() => {
+var init_sandboxList = __esm(() => {
+  init_esm();
   init_encodings();
   init_http();
   init_matchers();
@@ -135878,23 +135802,23 @@ var init_sandboxGet = __esm(() => {
   init_async();
 });
 
-// src/mcp-server/tools/sandboxGet.ts
-var args303, tool$sandboxGet;
-var init_sandboxGet2 = __esm(() => {
-  init_sandboxGet();
+// src/mcp-server/tools/sandboxList.ts
+var args303, tool$sandboxList;
+var init_sandboxList2 = __esm(() => {
+  init_sandboxList();
   init_operations();
   init_tools();
   args303 = {
-    request: GetSessionRequest$inboundSchema
+    request: ListSessionsRequest$inboundSchema
   };
-  tool$sandboxGet = {
-    name: "sandbox-get",
-    description: `Get Session
+  tool$sandboxList = {
+    name: "sandbox-list",
+    description: `List Sessions
 
-Return the current state, configuration, and resource allocation for a sandbox session.`,
+List sandbox sessions visible to the authenticated caller.`,
     args: args303,
     tool: async (client, args304, ctx) => {
-      const [result, apiCall] = await sandboxGet(client, args304.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
+      const [result, apiCall] = await sandboxList(client, args304.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
       if (!result.ok) {
         return {
           content: [{ type: "text", text: result.error.message }],
@@ -135907,24 +135831,32 @@ Return the current state, configuration, and resource allocation for a sandbox s
   };
 });
 
-// src/funcs/sandboxGetBrowserUrl.ts
-function sandboxGetBrowserUrl(client, request, options) {
-  return new APIPromise($do312(client, request, options));
+// src/funcs/sandboxProxyBrowserPortRequest.ts
+function sandboxProxyBrowserPortRequest(client, request, options) {
+  return new APIPromise($do313(client, request, options));
 }
-async function $do312(client, request, options) {
-  const parsed = safeParse4(request, (value) => GetBrowserSessionUrlRequest$outboundSchema.parse(value), "Input validation failed");
+async function $do313(client, request, options) {
+  const parsed = safeParse4(request, (value) => ProxyBrowserPortRequestRequest$outboundSchema.parse(value), "Input validation failed");
   if (!parsed.ok) {
     return [parsed, { status: "invalid" }];
   }
   const payload = parsed.value;
   const body = null;
   const pathParams = {
+    port: encodeSimple("port", payload.port, {
+      explode: false,
+      charEncoding: "percent"
+    }),
     session_id: encodeSimple("session_id", payload.session_id, {
       explode: false,
       charEncoding: "percent"
+    }),
+    subpath: encodeSimple("subpath", payload.subpath, {
+      explode: false,
+      charEncoding: "percent"
     })
   };
-  const path = pathToFunc("/api/v1/sandbox/sessions/{session_id}/browser-url")(pathParams);
+  const path = pathToFunc("/api/v1/sandbox/sessions/{session_id}/ports/{port}/{subpath}")(pathParams);
   const query = encodeFormQuery({
     session_token: payload.session_token
   });
@@ -135938,7 +135870,7 @@ async function $do312(client, request, options) {
   const context = {
     options: client._options,
     baseURL: options?.serverURL ?? client._baseURL ?? "",
-    operationID: "getBrowserSessionUrl",
+    operationID: "proxyBrowserPortRequest",
     oAuth2Scopes: null,
     resolvedSecurity: requestSecurity,
     securitySource: client._options.bearerAuth,
@@ -135982,13 +135914,14 @@ async function $do312(client, request, options) {
   const responseFields = {
     HttpMeta: { Response: response, Request: req }
   };
-  const [result] = await match(json(200, SessionUrlResponse$inboundSchema), jsonErr(422, HTTPValidationError$inboundSchema), fail("4XX"), fail([501, "5XX"]))(response, req, { extraFields: responseFields });
+  const [result] = await match(json(200, anyType()), jsonErr(422, HTTPValidationError$inboundSchema), fail("4XX"), fail("5XX"))(response, req, { extraFields: responseFields });
   if (!result.ok) {
     return [result, { status: "complete", request: req, response }];
   }
   return [result, { status: "complete", request: req, response }];
 }
-var init_sandboxGetBrowserUrl = __esm(() => {
+var init_sandboxProxyBrowserPortRequest = __esm(() => {
+  init_esm();
   init_encodings();
   init_http();
   init_matchers();
@@ -135996,29 +135929,28 @@ var init_sandboxGetBrowserUrl = __esm(() => {
   init_schemas4();
   init_security();
   init_url();
-  init_components();
   init_errors4();
   init_operations();
   init_async();
 });
 
-// src/mcp-server/tools/sandboxGetBrowserUrl.ts
-var args304, tool$sandboxGetBrowserUrl;
-var init_sandboxGetBrowserUrl2 = __esm(() => {
-  init_sandboxGetBrowserUrl();
+// src/mcp-server/tools/sandboxProxyBrowserPortRequest.ts
+var args304, tool$sandboxProxyBrowserPortRequest;
+var init_sandboxProxyBrowserPortRequest2 = __esm(() => {
+  init_sandboxProxyBrowserPortRequest();
   init_operations();
   init_tools();
   args304 = {
-    request: GetBrowserSessionUrlRequest$inboundSchema
+    request: ProxyBrowserPortRequestRequest$inboundSchema
   };
-  tool$sandboxGetBrowserUrl = {
-    name: "sandbox-get-browser-url",
-    description: `Get Browser Session URL
+  tool$sandboxProxyBrowserPortRequest = {
+    name: "sandbox-proxy-browser-port-request",
+    description: `Proxy Browser Port Request
 
-Return the public gateway URL for a browser session's Chrome DevTools Protocol endpoint. Playwright can use this HTTP endpoint directly. For clients that require a WebSocket endpoint, request \`json/version\` and use its rewritten \`webSocketDebuggerUrl\`. Insert subpaths before the query string; for example, use \`/ports/9222/json/version?session_token=...\`. Send the same MKA1 API-key authorization header on the HTTP and WebSocket requests. Standard sessions do not expose a public URL; use the command, code, and workspace operations instead.`,
+Proxy an HTTP request to an exposed browser-session port through the gateway. Use the URL returned by \`GET /sessions/{session_id}/browser-url\` as the base. Insert CDP subpaths such as \`json/version\` or \`json/list\` before its query string, preserving the \`session_token\` parameter. This low-level proxy is intended for browser sessions on port \`9222\` and still requires the normal MKA1 API-key authorization header.`,
     args: args304,
     tool: async (client, args305, ctx) => {
-      const [result, apiCall] = await sandboxGetBrowserUrl(client, args305.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
+      const [result, apiCall] = await sandboxProxyBrowserPortRequest(client, args305.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
       if (!result.ok) {
         return {
           content: [{ type: "text", text: result.error.message }],
@@ -136031,14 +135963,28 @@ Return the public gateway URL for a browser session's Chrome DevTools Protocol e
   };
 });
 
-// src/funcs/sandboxGetPricing.ts
-function sandboxGetPricing(client, options) {
-  return new APIPromise($do313(client, options));
+// src/funcs/sandboxRunCode.ts
+function sandboxRunCode(client, request, options) {
+  return new APIPromise($do314(client, request, options));
 }
-async function $do313(client, options) {
-  const path = pathToFunc("/api/v1/sandbox/pricing")();
+async function $do314(client, request, options) {
+  const parsed = safeParse4(request, (value) => RunCodeRequest$outboundSchema.parse(value), "Input validation failed");
+  if (!parsed.ok) {
+    return [parsed, { status: "invalid" }];
+  }
+  const payload = parsed.value;
+  const body = encodeJSON("body", payload.CodeRequest, { explode: true });
+  const pathParams = {
+    session_id: encodeSimple("session_id", payload.session_id, {
+      explode: false,
+      charEncoding: "percent"
+    })
+  };
+  const path = pathToFunc("/api/v1/sandbox/sessions/{session_id}/code")(pathParams);
   const headers = new Headers(compactMap({
-    Accept: "application/json"
+    "Content-Type": "application/json",
+    Accept: "application/json",
+    "X-On-Behalf-Of": encodeSimple("X-On-Behalf-Of", payload["X-On-Behalf-Of"], { explode: false, charEncoding: "none" })
   }));
   const secConfig = await extractSecurity(client._options.bearerAuth);
   const securityInput = secConfig == null ? {} : { bearerAuth: secConfig };
@@ -136046,7 +135992,7 @@ async function $do313(client, options) {
   const context = {
     options: client._options,
     baseURL: options?.serverURL ?? client._baseURL ?? "",
-    operationID: "getSandboxPricing",
+    operationID: "runCode",
     oAuth2Scopes: null,
     resolvedSecurity: requestSecurity,
     securitySource: client._options.bearerAuth,
@@ -136064,10 +136010,11 @@ async function $do313(client, options) {
   };
   const requestRes = client._createRequest(context, {
     security: requestSecurity,
-    method: "GET",
+    method: "POST",
     baseURL: options?.serverURL,
     path,
     headers,
+    body,
     userAgent: client._options.userAgent,
     timeoutMs: options?.timeoutMs || client._options.timeoutMs || -1
   }, options);
@@ -136085,34 +136032,46 @@ async function $do313(client, options) {
     return [doResult, { status: "request-error", request: req }];
   }
   const response = doResult.value;
-  const [result] = await match(json(200, SandboxPricingCard$inboundSchema), fail("4XX"), fail("5XX"))(response, req);
+  const responseFields = {
+    HttpMeta: { Response: response, Request: req }
+  };
+  const [result] = await match(json(200, CodeResult$inboundSchema), jsonErr(422, HTTPValidationError$inboundSchema), fail("4XX"), fail("5XX"))(response, req, { extraFields: responseFields });
   if (!result.ok) {
     return [result, { status: "complete", request: req, response }];
   }
   return [result, { status: "complete", request: req, response }];
 }
-var init_sandboxGetPricing = __esm(() => {
+var init_sandboxRunCode = __esm(() => {
+  init_encodings();
   init_http();
   init_matchers();
   init_primitives();
+  init_schemas4();
   init_security();
   init_url();
   init_components();
+  init_errors4();
+  init_operations();
   init_async();
 });
 
-// src/mcp-server/tools/sandboxGetPricing.ts
-var tool$sandboxGetPricing;
-var init_sandboxGetPricing2 = __esm(() => {
-  init_sandboxGetPricing();
+// src/mcp-server/tools/sandboxRunCode.ts
+var args305, tool$sandboxRunCode;
+var init_sandboxRunCode2 = __esm(() => {
+  init_sandboxRunCode();
+  init_operations();
   init_tools();
-  tool$sandboxGetPricing = {
-    name: "sandbox-get-pricing",
-    description: `Get Sandbox Pricing
+  args305 = {
+    request: RunCodeRequest$inboundSchema
+  };
+  tool$sandboxRunCode = {
+    name: "sandbox-run-code",
+    description: `Run Code
 
-Current sandbox pricing rate card, keyed by SKU (\`standard\`, \`browser\`, \`eval-python\`). Metered sandbox usage is billed \`hours × (per_hour + reserved_memory_GiB × per_gib_hour)\`; SKUs without a configured rate accrue no spend. Cluster admins only.`,
-    tool: async (client, ctx) => {
-      const [result, apiCall] = await sandboxGetPricing(client, { fetchOptions: { signal: ctx.signal } }).$inspect();
+Execute source code in the session workspace using a supported runtime and return the execution result.`,
+    args: args305,
+    tool: async (client, args306, ctx) => {
+      const [result, apiCall] = await sandboxRunCode(client, args306.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
       if (!result.ok) {
         return {
           content: [{ type: "text", text: result.error.message }],
@@ -136125,28 +136084,26 @@ Current sandbox pricing rate card, keyed by SKU (\`standard\`, \`browser\`, \`ev
   };
 });
 
-// src/funcs/sandboxGetWorkspace.ts
-function sandboxGetWorkspace(client, request, options) {
-  return new APIPromise($do314(client, request, options));
+// src/funcs/sandboxRunCommand.ts
+function sandboxRunCommand(client, request, options) {
+  return new APIPromise($do315(client, request, options));
 }
-async function $do314(client, request, options) {
-  const parsed = safeParse4(request, (value) => GetWorkspaceRequest$outboundSchema.parse(value), "Input validation failed");
+async function $do315(client, request, options) {
+  const parsed = safeParse4(request, (value) => RunCommandRequest$outboundSchema.parse(value), "Input validation failed");
   if (!parsed.ok) {
     return [parsed, { status: "invalid" }];
   }
   const payload = parsed.value;
-  const body = null;
+  const body = encodeJSON("body", payload.CommandRequest, { explode: true });
   const pathParams = {
     session_id: encodeSimple("session_id", payload.session_id, {
       explode: false,
       charEncoding: "percent"
     })
   };
-  const path = pathToFunc("/api/v1/sandbox/sessions/{session_id}/workspace")(pathParams);
-  const query = encodeFormQuery({
-    session_token: payload.session_token
-  });
+  const path = pathToFunc("/api/v1/sandbox/sessions/{session_id}/commands")(pathParams);
   const headers = new Headers(compactMap({
+    "Content-Type": "application/json",
     Accept: "application/json",
     "X-On-Behalf-Of": encodeSimple("X-On-Behalf-Of", payload["X-On-Behalf-Of"], { explode: false, charEncoding: "none" })
   }));
@@ -136156,7 +136113,7 @@ async function $do314(client, request, options) {
   const context = {
     options: client._options,
     baseURL: options?.serverURL ?? client._baseURL ?? "",
-    operationID: "getWorkspace",
+    operationID: "runCommand",
     oAuth2Scopes: null,
     resolvedSecurity: requestSecurity,
     securitySource: client._options.bearerAuth,
@@ -136174,11 +136131,10 @@ async function $do314(client, request, options) {
   };
   const requestRes = client._createRequest(context, {
     security: requestSecurity,
-    method: "GET",
+    method: "POST",
     baseURL: options?.serverURL,
     path,
     headers,
-    query,
     body,
     userAgent: client._options.userAgent,
     timeoutMs: options?.timeoutMs || client._options.timeoutMs || -1
@@ -136200,13 +136156,13 @@ async function $do314(client, request, options) {
   const responseFields = {
     HttpMeta: { Response: response, Request: req }
   };
-  const [result] = await match(json(200, WorkspaceManifest$inboundSchema), jsonErr(422, HTTPValidationError$inboundSchema), fail("4XX"), fail("5XX"))(response, req, { extraFields: responseFields });
+  const [result] = await match(json(200, CommandResult$inboundSchema), jsonErr(422, HTTPValidationError$inboundSchema), fail("4XX"), fail("5XX"))(response, req, { extraFields: responseFields });
   if (!result.ok) {
     return [result, { status: "complete", request: req, response }];
   }
   return [result, { status: "complete", request: req, response }];
 }
-var init_sandboxGetWorkspace = __esm(() => {
+var init_sandboxRunCommand = __esm(() => {
   init_encodings();
   init_http();
   init_matchers();
@@ -136220,23 +136176,23 @@ var init_sandboxGetWorkspace = __esm(() => {
   init_async();
 });
 
-// src/mcp-server/tools/sandboxGetWorkspace.ts
-var args305, tool$sandboxGetWorkspace;
-var init_sandboxGetWorkspace2 = __esm(() => {
-  init_sandboxGetWorkspace();
+// src/mcp-server/tools/sandboxRunCommand.ts
+var args306, tool$sandboxRunCommand;
+var init_sandboxRunCommand2 = __esm(() => {
+  init_sandboxRunCommand();
   init_operations();
   init_tools();
-  args305 = {
-    request: GetWorkspaceRequest$inboundSchema
+  args306 = {
+    request: RunCommandRequest$inboundSchema
   };
-  tool$sandboxGetWorkspace = {
-    name: "sandbox-get-workspace",
-    description: `Get Workspace Manifest
+  tool$sandboxRunCommand = {
+    name: "sandbox-run-command",
+    description: `Run Command
 
-List files currently stored in the session workspace, including paths, sizes, and etags.`,
-    args: args305,
-    tool: async (client, args306, ctx) => {
-      const [result, apiCall] = await sandboxGetWorkspace(client, args306.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
+Run a command in the session workspace and return stdout, stderr, exit code, and changed files.`,
+    args: args306,
+    tool: async (client, args307, ctx) => {
+      const [result, apiCall] = await sandboxRunCommand(client, args307.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
       if (!result.ok) {
         return {
           content: [{ type: "text", text: result.error.message }],
@@ -136249,21 +136205,21 @@ List files currently stored in the session workspace, including paths, sizes, an
   };
 });
 
-// src/funcs/sandboxList.ts
-function sandboxList(client, request, options) {
-  return new APIPromise($do315(client, request, options));
+// src/funcs/sandboxSetPricing.ts
+function sandboxSetPricing(client, request, options) {
+  return new APIPromise($do316(client, request, options));
 }
-async function $do315(client, request, options) {
-  const parsed = safeParse4(request, (value) => ListSessionsRequest$outboundSchema.parse(value), "Input validation failed");
+async function $do316(client, request, options) {
+  const parsed = safeParse4(request, (value) => SandboxPricingUpdate$outboundSchema.parse(value), "Input validation failed");
   if (!parsed.ok) {
     return [parsed, { status: "invalid" }];
   }
   const payload = parsed.value;
-  const body = null;
-  const path = pathToFunc("/api/v1/sandbox/sessions")();
+  const body = encodeJSON("body", payload, { explode: true });
+  const path = pathToFunc("/api/v1/sandbox/pricing")();
   const headers = new Headers(compactMap({
-    Accept: "application/json",
-    "X-On-Behalf-Of": encodeSimple("X-On-Behalf-Of", payload["X-On-Behalf-Of"], { explode: false, charEncoding: "none" })
+    "Content-Type": "application/json",
+    Accept: "application/json"
   }));
   const secConfig = await extractSecurity(client._options.bearerAuth);
   const securityInput = secConfig == null ? {} : { bearerAuth: secConfig };
@@ -136271,7 +136227,7 @@ async function $do315(client, request, options) {
   const context = {
     options: client._options,
     baseURL: options?.serverURL ?? client._baseURL ?? "",
-    operationID: "listSessions",
+    operationID: "setSandboxPricing",
     oAuth2Scopes: null,
     resolvedSecurity: requestSecurity,
     securitySource: client._options.bearerAuth,
@@ -136289,7 +136245,7 @@ async function $do315(client, request, options) {
   };
   const requestRes = client._createRequest(context, {
     security: requestSecurity,
-    method: "GET",
+    method: "PUT",
     baseURL: options?.serverURL,
     path,
     headers,
@@ -136314,14 +136270,13 @@ async function $do315(client, request, options) {
   const responseFields = {
     HttpMeta: { Response: response, Request: req }
   };
-  const [result] = await match(json(200, arrayType(SessionRecord$inboundSchema)), jsonErr(422, HTTPValidationError$inboundSchema), fail("4XX"), fail("5XX"))(response, req, { extraFields: responseFields });
+  const [result] = await match(json(200, SandboxPricingCard$inboundSchema), jsonErr(422, HTTPValidationError$inboundSchema), fail("4XX"), fail("5XX"))(response, req, { extraFields: responseFields });
   if (!result.ok) {
     return [result, { status: "complete", request: req, response }];
   }
   return [result, { status: "complete", request: req, response }];
 }
-var init_sandboxList = __esm(() => {
-  init_esm();
+var init_sandboxSetPricing = __esm(() => {
   init_encodings();
   init_http();
   init_matchers();
@@ -136331,27 +136286,26 @@ var init_sandboxList = __esm(() => {
   init_url();
   init_components();
   init_errors4();
-  init_operations();
   init_async();
 });
 
-// src/mcp-server/tools/sandboxList.ts
-var args306, tool$sandboxList;
-var init_sandboxList2 = __esm(() => {
-  init_sandboxList();
-  init_operations();
+// src/mcp-server/tools/sandboxSetPricing.ts
+var args307, tool$sandboxSetPricing;
+var init_sandboxSetPricing2 = __esm(() => {
+  init_sandboxSetPricing();
+  init_components();
   init_tools();
-  args306 = {
-    request: ListSessionsRequest$inboundSchema
+  args307 = {
+    request: SandboxPricingUpdate$inboundSchema
   };
-  tool$sandboxList = {
-    name: "sandbox-list",
-    description: `List Sessions
+  tool$sandboxSetPricing = {
+    name: "sandbox-set-pricing",
+    description: `Set Sandbox Pricing
 
-List sandbox sessions visible to the authenticated caller.`,
-    args: args306,
-    tool: async (client, args307, ctx) => {
-      const [result, apiCall] = await sandboxList(client, args307.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
+Replace the sandbox pricing rate card. Full-replace semantics: SKUs omitted from the request become unpriced and accrue no spend. Takes effect on the next meter window without a restart. Cluster admins only.`,
+    args: args307,
+    tool: async (client, args308, ctx) => {
+      const [result, apiCall] = await sandboxSetPricing(client, args308.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
       if (!result.ok) {
         return {
           content: [{ type: "text", text: result.error.message }],
@@ -136364,36 +136318,28 @@ List sandbox sessions visible to the authenticated caller.`,
   };
 });
 
-// src/funcs/sandboxProxyBrowserPortRequest.ts
-function sandboxProxyBrowserPortRequest(client, request, options) {
-  return new APIPromise($do316(client, request, options));
+// src/funcs/sandboxTerminate.ts
+function sandboxTerminate(client, request, options) {
+  return new APIPromise($do317(client, request, options));
 }
-async function $do316(client, request, options) {
-  const parsed = safeParse4(request, (value) => ProxyBrowserPortRequestRequest$outboundSchema.parse(value), "Input validation failed");
+async function $do317(client, request, options) {
+  const parsed = safeParse4(request, (value) => TerminateSessionRequest$outboundSchema2.parse(value), "Input validation failed");
   if (!parsed.ok) {
     return [parsed, { status: "invalid" }];
   }
   const payload = parsed.value;
-  const body = null;
+  const body = encodeJSON("body", payload.TerminateSessionRequest, {
+    explode: true
+  });
   const pathParams = {
-    port: encodeSimple("port", payload.port, {
-      explode: false,
-      charEncoding: "percent"
-    }),
     session_id: encodeSimple("session_id", payload.session_id, {
       explode: false,
       charEncoding: "percent"
-    }),
-    subpath: encodeSimple("subpath", payload.subpath, {
-      explode: false,
-      charEncoding: "percent"
     })
   };
-  const path = pathToFunc("/api/v1/sandbox/sessions/{session_id}/ports/{port}/{subpath}")(pathParams);
-  const query = encodeFormQuery({
-    session_token: payload.session_token
-  });
+  const path = pathToFunc("/api/v1/sandbox/sessions/{session_id}/terminate")(pathParams);
   const headers = new Headers(compactMap({
+    "Content-Type": "application/json",
     Accept: "application/json",
     "X-On-Behalf-Of": encodeSimple("X-On-Behalf-Of", payload["X-On-Behalf-Of"], { explode: false, charEncoding: "none" })
   }));
@@ -136403,7 +136349,7 @@ async function $do316(client, request, options) {
   const context = {
     options: client._options,
     baseURL: options?.serverURL ?? client._baseURL ?? "",
-    operationID: "proxyBrowserPortRequest",
+    operationID: "terminateSession",
     oAuth2Scopes: null,
     resolvedSecurity: requestSecurity,
     securitySource: client._options.bearerAuth,
@@ -136421,486 +136367,7 @@ async function $do316(client, request, options) {
   };
   const requestRes = client._createRequest(context, {
     security: requestSecurity,
-    method: "GET",
-    baseURL: options?.serverURL,
-    path,
-    headers,
-    query,
-    body,
-    userAgent: client._options.userAgent,
-    timeoutMs: options?.timeoutMs || client._options.timeoutMs || -1
-  }, options);
-  if (!requestRes.ok) {
-    return [requestRes, { status: "invalid" }];
-  }
-  const req = requestRes.value;
-  const doResult = await client._do(req, {
-    context,
-    isErrorStatusCode: (statusCode) => matchStatusCode({ status: statusCode }, ["4XX", "5XX"]),
-    retryConfig: context.retryConfig,
-    retryCodes: context.retryCodes
-  });
-  if (!doResult.ok) {
-    return [doResult, { status: "request-error", request: req }];
-  }
-  const response = doResult.value;
-  const responseFields = {
-    HttpMeta: { Response: response, Request: req }
-  };
-  const [result] = await match(json(200, anyType()), jsonErr(422, HTTPValidationError$inboundSchema), fail("4XX"), fail("5XX"))(response, req, { extraFields: responseFields });
-  if (!result.ok) {
-    return [result, { status: "complete", request: req, response }];
-  }
-  return [result, { status: "complete", request: req, response }];
-}
-var init_sandboxProxyBrowserPortRequest = __esm(() => {
-  init_esm();
-  init_encodings();
-  init_http();
-  init_matchers();
-  init_primitives();
-  init_schemas4();
-  init_security();
-  init_url();
-  init_errors4();
-  init_operations();
-  init_async();
-});
-
-// src/mcp-server/tools/sandboxProxyBrowserPortRequest.ts
-var args307, tool$sandboxProxyBrowserPortRequest;
-var init_sandboxProxyBrowserPortRequest2 = __esm(() => {
-  init_sandboxProxyBrowserPortRequest();
-  init_operations();
-  init_tools();
-  args307 = {
-    request: ProxyBrowserPortRequestRequest$inboundSchema
-  };
-  tool$sandboxProxyBrowserPortRequest = {
-    name: "sandbox-proxy-browser-port-request",
-    description: `Proxy Browser Port Request
-
-Proxy an HTTP request to an exposed browser-session port through the gateway. Use the URL returned by \`GET /sessions/{session_id}/browser-url\` as the base. Insert CDP subpaths such as \`json/version\` or \`json/list\` before its query string, preserving the \`session_token\` parameter. This low-level proxy is intended for browser sessions on port \`9222\` and still requires the normal MKA1 API-key authorization header.`,
-    args: args307,
-    tool: async (client, args308, ctx) => {
-      const [result, apiCall] = await sandboxProxyBrowserPortRequest(client, args308.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
-      if (!result.ok) {
-        return {
-          content: [{ type: "text", text: result.error.message }],
-          isError: true
-        };
-      }
-      const value = result.value;
-      return formatResult(value, apiCall);
-    }
-  };
-});
-
-// src/funcs/sandboxRunCode.ts
-function sandboxRunCode(client, request, options) {
-  return new APIPromise($do317(client, request, options));
-}
-async function $do317(client, request, options) {
-  const parsed = safeParse4(request, (value) => RunCodeRequest$outboundSchema.parse(value), "Input validation failed");
-  if (!parsed.ok) {
-    return [parsed, { status: "invalid" }];
-  }
-  const payload = parsed.value;
-  const body = encodeJSON("body", payload.CodeRequest, { explode: true });
-  const pathParams = {
-    session_id: encodeSimple("session_id", payload.session_id, {
-      explode: false,
-      charEncoding: "percent"
-    })
-  };
-  const path = pathToFunc("/api/v1/sandbox/sessions/{session_id}/code")(pathParams);
-  const headers = new Headers(compactMap({
-    "Content-Type": "application/json",
-    Accept: "application/json",
-    "X-On-Behalf-Of": encodeSimple("X-On-Behalf-Of", payload["X-On-Behalf-Of"], { explode: false, charEncoding: "none" })
-  }));
-  const secConfig = await extractSecurity(client._options.bearerAuth);
-  const securityInput = secConfig == null ? {} : { bearerAuth: secConfig };
-  const requestSecurity = resolveGlobalSecurity(securityInput);
-  const context = {
-    options: client._options,
-    baseURL: options?.serverURL ?? client._baseURL ?? "",
-    operationID: "runCode",
-    oAuth2Scopes: null,
-    resolvedSecurity: requestSecurity,
-    securitySource: client._options.bearerAuth,
-    retryConfig: options?.retries || client._options.retryConfig || {
-      strategy: "backoff",
-      backoff: {
-        initialInterval: 500,
-        maxInterval: 5000,
-        exponent: 1.5,
-        maxElapsedTime: 15000
-      },
-      retryConnectionErrors: true
-    },
-    retryCodes: options?.retryCodes || ["429", "500", "502", "503", "504"]
-  };
-  const requestRes = client._createRequest(context, {
-    security: requestSecurity,
-    method: "POST",
-    baseURL: options?.serverURL,
-    path,
-    headers,
-    body,
-    userAgent: client._options.userAgent,
-    timeoutMs: options?.timeoutMs || client._options.timeoutMs || -1
-  }, options);
-  if (!requestRes.ok) {
-    return [requestRes, { status: "invalid" }];
-  }
-  const req = requestRes.value;
-  const doResult = await client._do(req, {
-    context,
-    isErrorStatusCode: (statusCode) => matchStatusCode({ status: statusCode }, ["4XX", "5XX"]),
-    retryConfig: context.retryConfig,
-    retryCodes: context.retryCodes
-  });
-  if (!doResult.ok) {
-    return [doResult, { status: "request-error", request: req }];
-  }
-  const response = doResult.value;
-  const responseFields = {
-    HttpMeta: { Response: response, Request: req }
-  };
-  const [result] = await match(json(200, CodeResult$inboundSchema), jsonErr(422, HTTPValidationError$inboundSchema), fail("4XX"), fail("5XX"))(response, req, { extraFields: responseFields });
-  if (!result.ok) {
-    return [result, { status: "complete", request: req, response }];
-  }
-  return [result, { status: "complete", request: req, response }];
-}
-var init_sandboxRunCode = __esm(() => {
-  init_encodings();
-  init_http();
-  init_matchers();
-  init_primitives();
-  init_schemas4();
-  init_security();
-  init_url();
-  init_components();
-  init_errors4();
-  init_operations();
-  init_async();
-});
-
-// src/mcp-server/tools/sandboxRunCode.ts
-var args308, tool$sandboxRunCode;
-var init_sandboxRunCode2 = __esm(() => {
-  init_sandboxRunCode();
-  init_operations();
-  init_tools();
-  args308 = {
-    request: RunCodeRequest$inboundSchema
-  };
-  tool$sandboxRunCode = {
-    name: "sandbox-run-code",
-    description: `Run Code
-
-Execute source code in the session workspace using a supported runtime and return the execution result.`,
-    args: args308,
-    tool: async (client, args309, ctx) => {
-      const [result, apiCall] = await sandboxRunCode(client, args309.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
-      if (!result.ok) {
-        return {
-          content: [{ type: "text", text: result.error.message }],
-          isError: true
-        };
-      }
-      const value = result.value;
-      return formatResult(value, apiCall);
-    }
-  };
-});
-
-// src/funcs/sandboxRunCommand.ts
-function sandboxRunCommand(client, request, options) {
-  return new APIPromise($do318(client, request, options));
-}
-async function $do318(client, request, options) {
-  const parsed = safeParse4(request, (value) => RunCommandRequest$outboundSchema.parse(value), "Input validation failed");
-  if (!parsed.ok) {
-    return [parsed, { status: "invalid" }];
-  }
-  const payload = parsed.value;
-  const body = encodeJSON("body", payload.CommandRequest, { explode: true });
-  const pathParams = {
-    session_id: encodeSimple("session_id", payload.session_id, {
-      explode: false,
-      charEncoding: "percent"
-    })
-  };
-  const path = pathToFunc("/api/v1/sandbox/sessions/{session_id}/commands")(pathParams);
-  const headers = new Headers(compactMap({
-    "Content-Type": "application/json",
-    Accept: "application/json",
-    "X-On-Behalf-Of": encodeSimple("X-On-Behalf-Of", payload["X-On-Behalf-Of"], { explode: false, charEncoding: "none" })
-  }));
-  const secConfig = await extractSecurity(client._options.bearerAuth);
-  const securityInput = secConfig == null ? {} : { bearerAuth: secConfig };
-  const requestSecurity = resolveGlobalSecurity(securityInput);
-  const context = {
-    options: client._options,
-    baseURL: options?.serverURL ?? client._baseURL ?? "",
-    operationID: "runCommand",
-    oAuth2Scopes: null,
-    resolvedSecurity: requestSecurity,
-    securitySource: client._options.bearerAuth,
-    retryConfig: options?.retries || client._options.retryConfig || {
-      strategy: "backoff",
-      backoff: {
-        initialInterval: 500,
-        maxInterval: 5000,
-        exponent: 1.5,
-        maxElapsedTime: 15000
-      },
-      retryConnectionErrors: true
-    },
-    retryCodes: options?.retryCodes || ["429", "500", "502", "503", "504"]
-  };
-  const requestRes = client._createRequest(context, {
-    security: requestSecurity,
-    method: "POST",
-    baseURL: options?.serverURL,
-    path,
-    headers,
-    body,
-    userAgent: client._options.userAgent,
-    timeoutMs: options?.timeoutMs || client._options.timeoutMs || -1
-  }, options);
-  if (!requestRes.ok) {
-    return [requestRes, { status: "invalid" }];
-  }
-  const req = requestRes.value;
-  const doResult = await client._do(req, {
-    context,
-    isErrorStatusCode: (statusCode) => matchStatusCode({ status: statusCode }, ["4XX", "5XX"]),
-    retryConfig: context.retryConfig,
-    retryCodes: context.retryCodes
-  });
-  if (!doResult.ok) {
-    return [doResult, { status: "request-error", request: req }];
-  }
-  const response = doResult.value;
-  const responseFields = {
-    HttpMeta: { Response: response, Request: req }
-  };
-  const [result] = await match(json(200, CommandResult$inboundSchema), jsonErr(422, HTTPValidationError$inboundSchema), fail("4XX"), fail("5XX"))(response, req, { extraFields: responseFields });
-  if (!result.ok) {
-    return [result, { status: "complete", request: req, response }];
-  }
-  return [result, { status: "complete", request: req, response }];
-}
-var init_sandboxRunCommand = __esm(() => {
-  init_encodings();
-  init_http();
-  init_matchers();
-  init_primitives();
-  init_schemas4();
-  init_security();
-  init_url();
-  init_components();
-  init_errors4();
-  init_operations();
-  init_async();
-});
-
-// src/mcp-server/tools/sandboxRunCommand.ts
-var args309, tool$sandboxRunCommand;
-var init_sandboxRunCommand2 = __esm(() => {
-  init_sandboxRunCommand();
-  init_operations();
-  init_tools();
-  args309 = {
-    request: RunCommandRequest$inboundSchema
-  };
-  tool$sandboxRunCommand = {
-    name: "sandbox-run-command",
-    description: `Run Command
-
-Run a command in the session workspace and return stdout, stderr, exit code, and changed files.`,
-    args: args309,
-    tool: async (client, args310, ctx) => {
-      const [result, apiCall] = await sandboxRunCommand(client, args310.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
-      if (!result.ok) {
-        return {
-          content: [{ type: "text", text: result.error.message }],
-          isError: true
-        };
-      }
-      const value = result.value;
-      return formatResult(value, apiCall);
-    }
-  };
-});
-
-// src/funcs/sandboxSetPricing.ts
-function sandboxSetPricing(client, request, options) {
-  return new APIPromise($do319(client, request, options));
-}
-async function $do319(client, request, options) {
-  const parsed = safeParse4(request, (value) => SandboxPricingUpdate$outboundSchema.parse(value), "Input validation failed");
-  if (!parsed.ok) {
-    return [parsed, { status: "invalid" }];
-  }
-  const payload = parsed.value;
-  const body = encodeJSON("body", payload, { explode: true });
-  const path = pathToFunc("/api/v1/sandbox/pricing")();
-  const headers = new Headers(compactMap({
-    "Content-Type": "application/json",
-    Accept: "application/json"
-  }));
-  const secConfig = await extractSecurity(client._options.bearerAuth);
-  const securityInput = secConfig == null ? {} : { bearerAuth: secConfig };
-  const requestSecurity = resolveGlobalSecurity(securityInput);
-  const context = {
-    options: client._options,
-    baseURL: options?.serverURL ?? client._baseURL ?? "",
-    operationID: "setSandboxPricing",
-    oAuth2Scopes: null,
-    resolvedSecurity: requestSecurity,
-    securitySource: client._options.bearerAuth,
-    retryConfig: options?.retries || client._options.retryConfig || {
-      strategy: "backoff",
-      backoff: {
-        initialInterval: 500,
-        maxInterval: 5000,
-        exponent: 1.5,
-        maxElapsedTime: 15000
-      },
-      retryConnectionErrors: true
-    },
-    retryCodes: options?.retryCodes || ["429", "500", "502", "503", "504"]
-  };
-  const requestRes = client._createRequest(context, {
-    security: requestSecurity,
-    method: "PUT",
-    baseURL: options?.serverURL,
-    path,
-    headers,
-    body,
-    userAgent: client._options.userAgent,
-    timeoutMs: options?.timeoutMs || client._options.timeoutMs || -1
-  }, options);
-  if (!requestRes.ok) {
-    return [requestRes, { status: "invalid" }];
-  }
-  const req = requestRes.value;
-  const doResult = await client._do(req, {
-    context,
-    isErrorStatusCode: (statusCode) => matchStatusCode({ status: statusCode }, ["4XX", "5XX"]),
-    retryConfig: context.retryConfig,
-    retryCodes: context.retryCodes
-  });
-  if (!doResult.ok) {
-    return [doResult, { status: "request-error", request: req }];
-  }
-  const response = doResult.value;
-  const responseFields = {
-    HttpMeta: { Response: response, Request: req }
-  };
-  const [result] = await match(json(200, SandboxPricingCard$inboundSchema), jsonErr(422, HTTPValidationError$inboundSchema), fail("4XX"), fail("5XX"))(response, req, { extraFields: responseFields });
-  if (!result.ok) {
-    return [result, { status: "complete", request: req, response }];
-  }
-  return [result, { status: "complete", request: req, response }];
-}
-var init_sandboxSetPricing = __esm(() => {
-  init_encodings();
-  init_http();
-  init_matchers();
-  init_primitives();
-  init_schemas4();
-  init_security();
-  init_url();
-  init_components();
-  init_errors4();
-  init_async();
-});
-
-// src/mcp-server/tools/sandboxSetPricing.ts
-var args310, tool$sandboxSetPricing;
-var init_sandboxSetPricing2 = __esm(() => {
-  init_sandboxSetPricing();
-  init_components();
-  init_tools();
-  args310 = {
-    request: SandboxPricingUpdate$inboundSchema
-  };
-  tool$sandboxSetPricing = {
-    name: "sandbox-set-pricing",
-    description: `Set Sandbox Pricing
-
-Replace the sandbox pricing rate card. Full-replace semantics: SKUs omitted from the request become unpriced and accrue no spend. Takes effect on the next meter window without a restart. Cluster admins only.`,
-    args: args310,
-    tool: async (client, args311, ctx) => {
-      const [result, apiCall] = await sandboxSetPricing(client, args311.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
-      if (!result.ok) {
-        return {
-          content: [{ type: "text", text: result.error.message }],
-          isError: true
-        };
-      }
-      const value = result.value;
-      return formatResult(value, apiCall);
-    }
-  };
-});
-
-// src/funcs/sandboxTerminate.ts
-function sandboxTerminate(client, request, options) {
-  return new APIPromise($do320(client, request, options));
-}
-async function $do320(client, request, options) {
-  const parsed = safeParse4(request, (value) => TerminateSessionRequest$outboundSchema2.parse(value), "Input validation failed");
-  if (!parsed.ok) {
-    return [parsed, { status: "invalid" }];
-  }
-  const payload = parsed.value;
-  const body = encodeJSON("body", payload.TerminateSessionRequest, {
-    explode: true
-  });
-  const pathParams = {
-    session_id: encodeSimple("session_id", payload.session_id, {
-      explode: false,
-      charEncoding: "percent"
-    })
-  };
-  const path = pathToFunc("/api/v1/sandbox/sessions/{session_id}/terminate")(pathParams);
-  const headers = new Headers(compactMap({
-    "Content-Type": "application/json",
-    Accept: "application/json",
-    "X-On-Behalf-Of": encodeSimple("X-On-Behalf-Of", payload["X-On-Behalf-Of"], { explode: false, charEncoding: "none" })
-  }));
-  const secConfig = await extractSecurity(client._options.bearerAuth);
-  const securityInput = secConfig == null ? {} : { bearerAuth: secConfig };
-  const requestSecurity = resolveGlobalSecurity(securityInput);
-  const context = {
-    options: client._options,
-    baseURL: options?.serverURL ?? client._baseURL ?? "",
-    operationID: "terminateSession",
-    oAuth2Scopes: null,
-    resolvedSecurity: requestSecurity,
-    securitySource: client._options.bearerAuth,
-    retryConfig: options?.retries || client._options.retryConfig || {
-      strategy: "backoff",
-      backoff: {
-        initialInterval: 500,
-        maxInterval: 5000,
-        exponent: 1.5,
-        maxElapsedTime: 15000
-      },
-      retryConnectionErrors: true
-    },
-    retryCodes: options?.retryCodes || ["429", "500", "502", "503", "504"]
-  };
-  const requestRes = client._createRequest(context, {
-    security: requestSecurity,
-    method: "POST",
+    method: "POST",
     baseURL: options?.serverURL,
     path,
     headers,
@@ -136946,12 +136413,12 @@ var init_sandboxTerminate = __esm(() => {
 });
 
 // src/mcp-server/tools/sandboxTerminate.ts
-var args311, tool$sandboxTerminate;
+var args308, tool$sandboxTerminate;
 var init_sandboxTerminate2 = __esm(() => {
   init_sandboxTerminate();
   init_operations();
   init_tools();
-  args311 = {
+  args308 = {
     request: TerminateSessionRequest$inboundSchema2
   };
   tool$sandboxTerminate = {
@@ -136959,9 +136426,9 @@ var init_sandboxTerminate2 = __esm(() => {
     description: `Terminate Session
 
 Stop a sandbox session and release the backing sandbox resources.`,
-    args: args311,
-    tool: async (client, args312, ctx) => {
-      const [result, apiCall] = await sandboxTerminate(client, args312.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
+    args: args308,
+    tool: async (client, args309, ctx) => {
+      const [result, apiCall] = await sandboxTerminate(client, args309.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
       if (!result.ok) {
         return {
           content: [{ type: "text", text: result.error.message }],
@@ -136976,9 +136443,9 @@ Stop a sandbox session and release the backing sandbox resources.`,
 
 // src/funcs/sandboxUploadArchive.ts
 function sandboxUploadArchive(client, request, options) {
-  return new APIPromise($do321(client, request, options));
+  return new APIPromise($do318(client, request, options));
 }
-async function $do321(client, request, options) {
+async function $do318(client, request, options) {
   const parsed = safeParse4(request, (value) => UploadWorkspaceArchiveRequest$outboundSchema.parse(value), "Input validation failed");
   if (!parsed.ok) {
     return [parsed, { status: "invalid" }];
@@ -137071,12 +136538,12 @@ var init_sandboxUploadArchive = __esm(() => {
 });
 
 // src/mcp-server/tools/sandboxUploadArchive.ts
-var args312, tool$sandboxUploadArchive;
+var args309, tool$sandboxUploadArchive;
 var init_sandboxUploadArchive2 = __esm(() => {
   init_sandboxUploadArchive();
   init_operations();
   init_tools();
-  args312 = {
+  args309 = {
     request: UploadWorkspaceArchiveRequest$inboundSchema
   };
   tool$sandboxUploadArchive = {
@@ -137084,9 +136551,9 @@ var init_sandboxUploadArchive2 = __esm(() => {
     description: `Upload Workspace Archive
 
 Upload a zip archive and extract its files into the session workspace.`,
-    args: args312,
-    tool: async (client, args313, ctx) => {
-      const [result, apiCall] = await sandboxUploadArchive(client, args313.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
+    args: args309,
+    tool: async (client, args310, ctx) => {
+      const [result, apiCall] = await sandboxUploadArchive(client, args310.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
       if (!result.ok) {
         return {
           content: [{ type: "text", text: result.error.message }],
@@ -137101,9 +136568,9 @@ Upload a zip archive and extract its files into the session workspace.`,
 
 // src/funcs/sandboxUploadFile.ts
 function sandboxUploadFile(client, request, options) {
-  return new APIPromise($do322(client, request, options));
+  return new APIPromise($do319(client, request, options));
 }
-async function $do322(client, request, options) {
+async function $do319(client, request, options) {
   const parsed = safeParse4(request, (value) => UploadWorkspaceFileRequest$outboundSchema.parse(value), "Input validation failed");
   if (!parsed.ok) {
     return [parsed, { status: "invalid" }];
@@ -137200,12 +136667,12 @@ var init_sandboxUploadFile = __esm(() => {
 });
 
 // src/mcp-server/tools/sandboxUploadFile.ts
-var args313, tool$sandboxUploadFile;
+var args310, tool$sandboxUploadFile;
 var init_sandboxUploadFile2 = __esm(() => {
   init_sandboxUploadFile();
   init_operations();
   init_tools();
-  args313 = {
+  args310 = {
     request: UploadWorkspaceFileRequest$inboundSchema
   };
   tool$sandboxUploadFile = {
@@ -137213,9 +136680,9 @@ var init_sandboxUploadFile2 = __esm(() => {
     description: `Upload Workspace File
 
 Upload raw bytes into the session workspace at the given path.`,
-    args: args313,
-    tool: async (client, args314, ctx) => {
-      const [result, apiCall] = await sandboxUploadFile(client, args314.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
+    args: args310,
+    tool: async (client, args311, ctx) => {
+      const [result, apiCall] = await sandboxUploadFile(client, args311.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
       if (!result.ok) {
         return {
           content: [{ type: "text", text: result.error.message }],
@@ -137230,9 +136697,9 @@ Upload raw bytes into the session workspace at the given path.`,
 
 // src/funcs/usageCosts.ts
 function usageCosts(client, request, options) {
-  return new APIPromise($do323(client, request, options));
+  return new APIPromise($do320(client, request, options));
 }
-async function $do323(client, request, options) {
+async function $do320(client, request, options) {
   const parsed = safeParse4(request, (value) => GetCostsRequest$outboundSchema.parse(value), "Input validation failed");
   if (!parsed.ok) {
     return [parsed, { status: "invalid" }];
@@ -137315,12 +136782,12 @@ var init_usageCosts = __esm(() => {
 });
 
 // src/mcp-server/tools/usageCosts.ts
-var args314, tool$usageCosts;
+var args311, tool$usageCosts;
 var init_usageCosts2 = __esm(() => {
   init_usageCosts();
   init_operations();
   init_tools();
-  args314 = {
+  args311 = {
     request: GetCostsRequest$inboundSchema
   };
   tool$usageCosts = {
@@ -137328,9 +136795,9 @@ var init_usageCosts2 = __esm(() => {
     description: `Aggregate cost by dimension
 
 Sums stored per-entry cost over [start_time, end_time), grouped by any of service, task_type, model, api_key_id, team_id, user_id, external_user_id, org_id. Point-in-time correct for chargeback/showback.`,
-    args: args314,
-    tool: async (client, args315, ctx) => {
-      const [result, apiCall] = await usageCosts(client, args315.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
+    args: args311,
+    tool: async (client, args312, ctx) => {
+      const [result, apiCall] = await usageCosts(client, args312.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
       if (!result.ok) {
         return {
           content: [{ type: "text", text: result.error.message }],
@@ -137345,9 +136812,9 @@ Sums stored per-entry cost over [start_time, end_time), grouped by any of servic
 
 // src/funcs/usageSandbox.ts
 function usageSandbox(client, request, options) {
-  return new APIPromise($do324(client, request, options));
+  return new APIPromise($do321(client, request, options));
 }
-async function $do324(client, request, options) {
+async function $do321(client, request, options) {
   const parsed = safeParse4(request, (value) => GetSandboxUsageRequest$outboundSchema.parse(value), "Input validation failed");
   if (!parsed.ok) {
     return [parsed, { status: "invalid" }];
@@ -137438,12 +136905,12 @@ var init_usageSandbox = __esm(() => {
 });
 
 // src/mcp-server/tools/usageSandbox.ts
-var args315, tool$usageSandbox;
+var args312, tool$usageSandbox;
 var init_usageSandbox2 = __esm(() => {
   init_usageSandbox();
   init_operations();
   init_tools();
-  args315 = {
+  args312 = {
     request: GetSandboxUsageRequest$inboundSchema
   };
   tool$usageSandbox = {
@@ -137451,9 +136918,9 @@ var init_usageSandbox2 = __esm(() => {
     description: `Get Sandbox Usage
 
 Aggregate sandbox usage (session lifecycle, execution, and workspace operations) over a time range, bucketed and optionally grouped. Org-scoped: callers see their own usage, org admins their team's; cluster admins may pass \`all_orgs\` or \`org_ids\`. Cost and spend reporting lives in the budgeting API (\`/api/v1/budgeting/usage/costs\`).`,
-    args: args315,
-    tool: async (client, args316, ctx) => {
-      const [result, apiCall] = await usageSandbox(client, args316.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
+    args: args312,
+    tool: async (client, args313, ctx) => {
+      const [result, apiCall] = await usageSandbox(client, args313.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
       if (!result.ok) {
         return {
           content: [{ type: "text", text: result.error.message }],
@@ -137470,7 +136937,7 @@ Aggregate sandbox usage (session lifecycle, execution, and workspace operations)
 function createMCPServer(deps) {
   const server = new McpServer({
     name: "SDK",
-    version: "0.51.36"
+    version: "0.51.38"
   });
   const client = new SDKCore({
     bearerAuth: deps.bearerAuth,
@@ -137805,9 +137272,6 @@ function createMCPServer(deps) {
   tool(tool$authClusterInviteInfo);
   tool(tool$authClusterAcceptInvite);
   tool(tool$authApiKeyGetJwtFromKey);
-  tool(tool$reposCollaboratorsList);
-  tool(tool$reposCollaboratorsRemove);
-  tool(tool$reposCollaboratorsAdd);
   return server;
 }
 var init_server2 = __esm(() => {
@@ -138114,9 +137578,6 @@ var init_server2 = __esm(() => {
   init_permissionsLlmCheck2();
   init_permissionsLlmGrant2();
   init_permissionsLlmRevoke2();
-  init_reposCollaboratorsAdd2();
-  init_reposCollaboratorsList2();
-  init_reposCollaboratorsRemove2();
   init_reposCreate2();
   init_reposDelete2();
   init_reposGet2();
@@ -139316,7 +138777,7 @@ var routes = rn({
 var app = Ve(routes, {
   name: "mcp",
   versionInfo: {
-    currentVersion: "0.51.36"
+    currentVersion: "0.51.38"
   }
 });
 _t(app, process3.argv.slice(2), buildContext(process3));
@@ -139324,5 +138785,5 @@ export {
   app
 };
 
-//# debugId=4731CEA9509C01A864756E2164756E21
+//# debugId=2399EE05031D2BAC64756E2164756E21
 //# sourceMappingURL=mcp-server.js.map