@meetkai/mka1 0.54.85 → 0.54.87

package/src/funcs/sandboxNetworkPoliciesSet.ts

@@ -0,0 +1,199 @@
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ */
+
+import { SDKCore } from "../core.js";
+import { encodeFormQuery, encodeJSON, encodeSimple } from "../lib/encodings.js";
+import { matchStatusCode } from "../lib/http.js";
+import * as M from "../lib/matchers.js";
+import { compactMap } from "../lib/primitives.js";
+import { safeParse } from "../lib/schemas.js";
+import { RequestOptions } from "../lib/sdks.js";
+import { extractSecurity, resolveGlobalSecurity } from "../lib/security.js";
+import { pathToFunc } from "../lib/url.js";
+import * as components from "../models/components/index.js";
+import {
+  ConnectionError,
+  InvalidRequestError,
+  RequestAbortedError,
+  RequestTimeoutError,
+  UnexpectedClientError,
+} from "../models/errors/httpclienterrors.js";
+import * as errors from "../models/errors/index.js";
+import { ResponseValidationError } from "../models/errors/responsevalidationerror.js";
+import { SDKError } from "../models/errors/sdkerror.js";
+import { SDKValidationError } from "../models/errors/sdkvalidationerror.js";
+import * as operations from "../models/operations/index.js";
+import { APICall, APIPromise } from "../types/async.js";
+import { Result } from "../types/fp.js";
+
+/**
+ * Set Tenant Network Policy
+ *
+ * @remarks
+ * Administrator-only update with optimistic revision checking. An enabled empty list denies all outbound hosts.
+ *
+ * If set, this operation will use {@link Security.bearerAuth} from the global security.
+ */
+export function sandboxNetworkPoliciesSet(
+  client: SDKCore,
+  request: operations.SetTenantNetworkPolicyRequest,
+  options?: RequestOptions,
+): APIPromise<
+  Result<
+    components.TenantNetworkPolicy,
+    | errors.HTTPValidationError
+    | SDKError
+    | ResponseValidationError
+    | ConnectionError
+    | RequestAbortedError
+    | RequestTimeoutError
+    | InvalidRequestError
+    | UnexpectedClientError
+    | SDKValidationError
+  >
+> {
+  return new APIPromise($do(
+    client,
+    request,
+    options,
+  ));
+}
+
+async function $do(
+  client: SDKCore,
+  request: operations.SetTenantNetworkPolicyRequest,
+  options?: RequestOptions,
+): Promise<
+  [
+    Result<
+      components.TenantNetworkPolicy,
+      | errors.HTTPValidationError
+      | SDKError
+      | ResponseValidationError
+      | ConnectionError
+      | RequestAbortedError
+      | RequestTimeoutError
+      | InvalidRequestError
+      | UnexpectedClientError
+      | SDKValidationError
+    >,
+    APICall,
+  ]
+> {
+  const parsed = safeParse(
+    request,
+    (value) =>
+      operations.SetTenantNetworkPolicyRequest$outboundSchema.parse(value),
+    "Input validation failed",
+  );
+  if (!parsed.ok) {
+    return [parsed, { status: "invalid" }];
+  }
+  const payload = parsed.value;
+  const body = encodeJSON("body", payload.SaveTenantNetworkPolicy, {
+    explode: true,
+  });
+
+  const pathParams = {
+    scope: encodeSimple("scope", payload.scope, {
+      explode: false,
+      charEncoding: "percent",
+    }),
+  };
+  const path = pathToFunc("/api/v1/sandbox/network-policy/{scope}")(pathParams);
+
+  const query = encodeFormQuery({
+    "expected_organization_id": payload.expected_organization_id,
+    "expected_team_id": payload.expected_team_id,
+  });
+
+  const headers = new Headers(compactMap({
+    "Content-Type": "application/json",
+    Accept: "application/json",
+  }));
+
+  const secConfig = await extractSecurity(client._options.bearerAuth);
+  const securityInput = secConfig == null ? {} : { bearerAuth: secConfig };
+  const requestSecurity = resolveGlobalSecurity(securityInput, [0]);
+
+  const context = {
+    options: client._options,
+    baseURL: options?.serverURL ?? client._baseURL ?? "",
+    operationID: "setTenantNetworkPolicy",
+    oAuth2Scopes: null,
+
+    resolvedSecurity: requestSecurity,
+
+    securitySource: client._options.bearerAuth,
+    retryConfig: options?.retries
+      || client._options.retryConfig
+      || {
+        strategy: "backoff",
+        backoff: {
+          initialInterval: 500,
+          maxInterval: 5000,
+          exponent: 1.5,
+          maxElapsedTime: 15000,
+        },
+        retryConnectionErrors: true,
+      }
+      || { strategy: "none" },
+    retryCodes: options?.retryCodes || ["429", "500", "502", "503", "504"],
+  };
+
+  const requestRes = client._createRequest(context, {
+    security: requestSecurity,
+    method: "PUT",
+    baseURL: options?.serverURL,
+    path: path,
+    headers: headers,
+    query: query,
+    body: body,
+    userAgent: client._options.userAgent,
+    timeoutMs: options?.timeoutMs || client._options.timeoutMs || -1,
+  }, options);
+  if (!requestRes.ok) {
+    return [requestRes, { status: "invalid" }];
+  }
+  const req = requestRes.value;
+
+  const doResult = await client._do(req, {
+    context,
+    isErrorStatusCode: (statusCode: number) =>
+      matchStatusCode({ status: statusCode } as Response, ["4XX", "5XX"]),
+    retryConfig: context.retryConfig,
+    retryCodes: context.retryCodes,
+  });
+  if (!doResult.ok) {
+    return [doResult, { status: "request-error", request: req }];
+  }
+  const response = doResult.value;
+
+  const responseFields = {
+    HttpMeta: { Response: response, Request: req },
+  };
+
+  const [result] = await M.match<
+    components.TenantNetworkPolicy,
+    | errors.HTTPValidationError
+    | SDKError
+    | ResponseValidationError
+    | ConnectionError
+    | RequestAbortedError
+    | RequestTimeoutError
+    | InvalidRequestError
+    | UnexpectedClientError
+    | SDKValidationError
+  >(
+    M.json(200, components.TenantNetworkPolicy$inboundSchema),
+    M.jsonErr(422, errors.HTTPValidationError$inboundSchema),
+    M.fail("4XX"),
+    M.fail("5XX"),
+  )(response, req, { extraFields: responseFields });
+  if (!result.ok) {
+    return [result, { status: "complete", request: req, response }];
+  }
+
+  return [result, { status: "complete", request: req, response }];
+}

package/src/lib/config.ts

@@ -65,7 +65,7 @@ export function serverURLFromOptions(options: SDKOptions): URL | null {
 export const SDK_METADATA = {
   language: "typescript",
   openapiDocVersion: "1.1.0",
-  sdkVersion: "0.54.85",
+  sdkVersion: "0.54.87",
   genVersion: "2.948.4",
-  userAgent: "speakeasy-sdk/typescript 0.54.85 2.948.4 1.1.0 @meetkai/mka1",
+  userAgent: "speakeasy-sdk/typescript 0.54.87 2.948.4 1.1.0 @meetkai/mka1",
 } as const;

package/src/mcp-server/mcp-server.ts

@@ -19,7 +19,7 @@ const routes = buildRouteMap({
 export const app = buildApplication(routes, {
   name: "mcp",
   versionInfo: {
-    currentVersion: "0.54.85",
+    currentVersion: "0.54.87",
   },
 });
 

package/src/mcp-server/server.ts

@@ -89,6 +89,7 @@ import { tool$authTeamsList } from "./tools/authTeamsList.js";
 import { tool$authTeamsListMembers } from "./tools/authTeamsListMembers.js";
 import { tool$authTeamsRemoveMember } from "./tools/authTeamsRemoveMember.js";
 import { tool$authTeamsUpdate } from "./tools/authTeamsUpdate.js";
+import { tool$authTeamsUpdateMember } from "./tools/authTeamsUpdateMember.js";
 import { tool$billingCreateOrganizationBillingPortal } from "./tools/billingCreateOrganizationBillingPortal.js";
 import { tool$billingCreateOrganizationBillingSetup } from "./tools/billingCreateOrganizationBillingSetup.js";
 import { tool$billingGetOrganizationBilling } from "./tools/billingGetOrganizationBilling.js";
@@ -409,6 +410,13 @@ import { tool$reposList } from "./tools/reposList.js";
 import { tool$reposTagsDelete } from "./tools/reposTagsDelete.js";
 import { tool$reposTagsList } from "./tools/reposTagsList.js";
 import { tool$reposUpdate } from "./tools/reposUpdate.js";
+import { tool$sandboxConnectorsConnect } from "./tools/sandboxConnectorsConnect.js";
+import { tool$sandboxConnectorsCreateAuthorizationIntent } from "./tools/sandboxConnectorsCreateAuthorizationIntent.js";
+import { tool$sandboxConnectorsDisconnect } from "./tools/sandboxConnectorsDisconnect.js";
+import { tool$sandboxConnectorsList } from "./tools/sandboxConnectorsList.js";
+import { tool$sandboxConnectorsListTools } from "./tools/sandboxConnectorsListTools.js";
+import { tool$sandboxConnectorsSetApiKey } from "./tools/sandboxConnectorsSetApiKey.js";
+import { tool$sandboxConnectorsSetTools } from "./tools/sandboxConnectorsSetTools.js";
 import { tool$sandboxCreate } from "./tools/sandboxCreate.js";
 import { tool$sandboxDownloadArchive } from "./tools/sandboxDownloadArchive.js";
 import { tool$sandboxDownloadFile } from "./tools/sandboxDownloadFile.js";
@@ -436,6 +444,9 @@ import { tool$sandboxGithubPush } from "./tools/sandboxGithubPush.js";
 import { tool$sandboxGithubRefreshRepositories } from "./tools/sandboxGithubRefreshRepositories.js";
 import { tool$sandboxGithubResolveReference } from "./tools/sandboxGithubResolveReference.js";
 import { tool$sandboxList } from "./tools/sandboxList.js";
+import { tool$sandboxNetworkPoliciesEffective } from "./tools/sandboxNetworkPoliciesEffective.js";
+import { tool$sandboxNetworkPoliciesGet } from "./tools/sandboxNetworkPoliciesGet.js";
+import { tool$sandboxNetworkPoliciesSet } from "./tools/sandboxNetworkPoliciesSet.js";
 import { tool$sandboxProxyBrowserPortRequest } from "./tools/sandboxProxyBrowserPortRequest.js";
 import { tool$sandboxRunCode } from "./tools/sandboxRunCode.js";
 import { tool$sandboxRunCommand } from "./tools/sandboxRunCommand.js";
@@ -474,7 +485,7 @@ export function createMCPServer(deps: {
 }) {
   const server = new McpServer({
     name: "SDK",
-    version: "0.54.85",
+    version: "0.54.87",
   });
 
   const client = new SDKCore({
@@ -855,11 +866,6 @@ export function createMCPServer(deps: {
   tool(tool$llmVectorStoresGetFileBatch);
   tool(tool$llmVectorStoresCancelFileBatch);
   tool(tool$llmVectorStoresListFilesInBatch);
-  tool(tool$authApiKeysCreate);
-  tool(tool$authApiKeysList);
-  tool(tool$authApiKeysUpdate);
-  tool(tool$authApiKeysRegenerate);
-  tool(tool$authApiKeysExchangeToken);
   tool(tool$authTeamsCreate);
   tool(tool$authTeamsList);
   tool(tool$authTeamsGet);
@@ -867,7 +873,13 @@ export function createMCPServer(deps: {
   tool(tool$authTeamsDelete);
   tool(tool$authTeamsAddMember);
   tool(tool$authTeamsListMembers);
+  tool(tool$authTeamsUpdateMember);
   tool(tool$authTeamsRemoveMember);
+  tool(tool$authApiKeysCreate);
+  tool(tool$authApiKeysList);
+  tool(tool$authApiKeysUpdate);
+  tool(tool$authApiKeysRegenerate);
+  tool(tool$authApiKeysExchangeToken);
   tool(tool$authServiceAccountsCreate);
   tool(tool$authServiceAccountsList);
   tool(tool$authServiceAccountsGet);
@@ -906,12 +918,22 @@ export function createMCPServer(deps: {
   tool(tool$sandboxGithubDismissSessionRepository);
   tool(tool$sandboxGithubPush);
   tool(tool$sandboxGithubCreateOrUpdatePullRequest);
+  tool(tool$sandboxNetworkPoliciesEffective);
+  tool(tool$sandboxNetworkPoliciesGet);
+  tool(tool$sandboxNetworkPoliciesSet);
   tool(tool$sandboxEnvironmentsList);
   tool(tool$sandboxEnvironmentsCreate);
   tool(tool$sandboxEnvironmentsGet);
   tool(tool$sandboxEnvironmentsUpdate);
   tool(tool$sandboxEnvironmentsDelete);
   tool(tool$sandboxEnvironmentsRunSetup);
+  tool(tool$sandboxConnectorsList);
+  tool(tool$sandboxConnectorsCreateAuthorizationIntent);
+  tool(tool$sandboxConnectorsConnect);
+  tool(tool$sandboxConnectorsSetApiKey);
+  tool(tool$sandboxConnectorsDisconnect);
+  tool(tool$sandboxConnectorsListTools);
+  tool(tool$sandboxConnectorsSetTools);
   tool(tool$reposTagsList);
   tool(tool$reposTagsDelete);
   tool(tool$trackingExperimentsCreate);

package/src/mcp-server/tools/authTeamsUpdateMember.ts

@@ -0,0 +1,37 @@
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ */
+
+import { authTeamsUpdateMember } from "../../funcs/authTeamsUpdateMember.js";
+import * as operations from "../../models/operations/index.js";
+import { formatResult, ToolDefinition } from "../tools.js";
+
+const args = {
+  request: operations.UpdateTeamMemberRequest$inboundSchema,
+};
+
+export const tool$authTeamsUpdateMember: ToolDefinition<typeof args> = {
+  name: "auth-teams-update-member",
+  description: `Set a team member role
+
+Organization owner/admin only. Team admins may manage their own team network policy; other team administration remains org-admin-only.`,
+  args,
+  tool: async (client, args, ctx) => {
+    const [result, apiCall] = await authTeamsUpdateMember(
+      client,
+      args.request,
+      { fetchOptions: { signal: ctx.signal } },
+    ).$inspect();
+
+    if (!result.ok) {
+      return {
+        content: [{ type: "text", text: result.error.message }],
+        isError: true,
+      };
+    }
+
+    const value = result.value;
+
+    return formatResult(value, apiCall);
+  },
+};

package/src/mcp-server/tools/sandboxConnectorsConnect.ts

@@ -0,0 +1,37 @@
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ */
+
+import { sandboxConnectorsConnect } from "../../funcs/sandboxConnectorsConnect.js";
+import * as operations from "../../models/operations/index.js";
+import { formatResult, ToolDefinition } from "../tools.js";
+
+const args = {
+  request: operations.ConnectSandboxConnectorRequest$inboundSchema,
+};
+
+export const tool$sandboxConnectorsConnect: ToolDefinition<typeof args> = {
+  name: "sandbox-connectors-connect",
+  description: `Finish Connector Sign-In
+
+Exchange the \`code\` and \`state\` from the connector's redirect for a stored connection. Call it as the same signed-in user who started the sign-in. The sandbox service keeps the token encrypted and never returns it.`,
+  args,
+  tool: async (client, args, ctx) => {
+    const [result, apiCall] = await sandboxConnectorsConnect(
+      client,
+      args.request,
+      { fetchOptions: { signal: ctx.signal } },
+    ).$inspect();
+
+    if (!result.ok) {
+      return {
+        content: [{ type: "text", text: result.error.message }],
+        isError: true,
+      };
+    }
+
+    const value = result.value;
+
+    return formatResult(value, apiCall);
+  },
+};

package/src/mcp-server/tools/sandboxConnectorsCreateAuthorizationIntent.ts

@@ -0,0 +1,40 @@
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ */
+
+import { sandboxConnectorsCreateAuthorizationIntent } from "../../funcs/sandboxConnectorsCreateAuthorizationIntent.js";
+import * as operations from "../../models/operations/index.js";
+import { formatResult, ToolDefinition } from "../tools.js";
+
+const args = {
+  request:
+    operations.CreateSandboxConnectorAuthorizationIntentRequest$inboundSchema,
+};
+
+export const tool$sandboxConnectorsCreateAuthorizationIntent: ToolDefinition<
+  typeof args
+> = {
+  name: "sandbox-connectors-create-authorization-intent",
+  description: `Start Connector Sign-In
+
+Start connecting an OAuth connector to your account. Send the user to the returned \`authorize_url\`. The connector redirects back to the platform callback page with a \`code\` and the same \`state\`, which it passes to \`POST /connectors/oauth/connections\` before \`expires_in_seconds\` elapses. Each \`state\` works once, and only for the account that started the sign-in.`,
+  args,
+  tool: async (client, args, ctx) => {
+    const [result, apiCall] = await sandboxConnectorsCreateAuthorizationIntent(
+      client,
+      args.request,
+      { fetchOptions: { signal: ctx.signal } },
+    ).$inspect();
+
+    if (!result.ok) {
+      return {
+        content: [{ type: "text", text: result.error.message }],
+        isError: true,
+      };
+    }
+
+    const value = result.value;
+
+    return formatResult(value, apiCall);
+  },
+};

package/src/mcp-server/tools/sandboxConnectorsDisconnect.ts

@@ -0,0 +1,35 @@
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ */
+
+import { sandboxConnectorsDisconnect } from "../../funcs/sandboxConnectorsDisconnect.js";
+import * as operations from "../../models/operations/index.js";
+import { formatResult, ToolDefinition } from "../tools.js";
+
+const args = {
+  request: operations.DisconnectSandboxConnectorRequest$inboundSchema,
+};
+
+export const tool$sandboxConnectorsDisconnect: ToolDefinition<typeof args> = {
+  name: "sandbox-connectors-disconnect",
+  description: `Disconnect Connector
+
+Delete your connection to a connector and revoke its token at the connector when it supports revocation. The connection is deleted even if the connector does not confirm the revocation.`,
+  args,
+  tool: async (client, args, ctx) => {
+    const [result, apiCall] = await sandboxConnectorsDisconnect(
+      client,
+      args.request,
+      { fetchOptions: { signal: ctx.signal } },
+    ).$inspect();
+
+    if (!result.ok) {
+      return {
+        content: [{ type: "text", text: result.error.message }],
+        isError: true,
+      };
+    }
+
+    return formatResult(void 0, apiCall);
+  },
+};

package/src/mcp-server/tools/sandboxConnectorsList.ts

@@ -0,0 +1,37 @@
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ */
+
+import { sandboxConnectorsList } from "../../funcs/sandboxConnectorsList.js";
+import * as operations from "../../models/operations/index.js";
+import { formatResult, ToolDefinition } from "../tools.js";
+
+const args = {
+  request: operations.ListSandboxConnectorsRequest$inboundSchema,
+};
+
+export const tool$sandboxConnectorsList: ToolDefinition<typeof args> = {
+  name: "sandbox-connectors-list",
+  description: `List Connectors
+
+List the connectors you can connect and your connection to each, or \`null\` when you have none. \`status\` is \`needs_login\` when the connector must be reconnected. \`tool_allowlist\` set to \`null\` means sessions may call every tool the connector lists, read or write. Only an environment with \`network_access\` set to \`full\` can list connectors, at most \`max_per_environment\` of them.`,
+  args,
+  tool: async (client, args, ctx) => {
+    const [result, apiCall] = await sandboxConnectorsList(
+      client,
+      args.request,
+      { fetchOptions: { signal: ctx.signal } },
+    ).$inspect();
+
+    if (!result.ok) {
+      return {
+        content: [{ type: "text", text: result.error.message }],
+        isError: true,
+      };
+    }
+
+    const value = result.value;
+
+    return formatResult(value, apiCall);
+  },
+};

package/src/mcp-server/tools/sandboxConnectorsListTools.ts

@@ -0,0 +1,37 @@
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ */
+
+import { sandboxConnectorsListTools } from "../../funcs/sandboxConnectorsListTools.js";
+import * as operations from "../../models/operations/index.js";
+import { formatResult, ToolDefinition } from "../tools.js";
+
+const args = {
+  request: operations.ListSandboxConnectorToolsRequest$inboundSchema,
+};
+
+export const tool$sandboxConnectorsListTools: ToolDefinition<typeof args> = {
+  name: "sandbox-connectors-list-tools",
+  description: `List Connector Tools
+
+List the connector's tools now, with whether each is read-only, your tool allowlist, and \`allowed\`: the tools a session could call. 409 when the connector must be reconnected.`,
+  args,
+  tool: async (client, args, ctx) => {
+    const [result, apiCall] = await sandboxConnectorsListTools(
+      client,
+      args.request,
+      { fetchOptions: { signal: ctx.signal } },
+    ).$inspect();
+
+    if (!result.ok) {
+      return {
+        content: [{ type: "text", text: result.error.message }],
+        isError: true,
+      };
+    }
+
+    const value = result.value;
+
+    return formatResult(value, apiCall);
+  },
+};

package/src/mcp-server/tools/sandboxConnectorsSetApiKey.ts

@@ -0,0 +1,37 @@
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ */
+
+import { sandboxConnectorsSetApiKey } from "../../funcs/sandboxConnectorsSetApiKey.js";
+import * as operations from "../../models/operations/index.js";
+import { formatResult, ToolDefinition } from "../tools.js";
+
+const args = {
+  request: operations.SetSandboxConnectorApiKeyRequest$inboundSchema,
+};
+
+export const tool$sandboxConnectorsSetApiKey: ToolDefinition<typeof args> = {
+  name: "sandbox-connectors-set-api-key",
+  description: `Set Connector API Key
+
+Connect an API-key connector. The key is checked against the connector before it is stored (422 when the connector refuses it) and is never returned.`,
+  args,
+  tool: async (client, args, ctx) => {
+    const [result, apiCall] = await sandboxConnectorsSetApiKey(
+      client,
+      args.request,
+      { fetchOptions: { signal: ctx.signal } },
+    ).$inspect();
+
+    if (!result.ok) {
+      return {
+        content: [{ type: "text", text: result.error.message }],
+        isError: true,
+      };
+    }
+
+    const value = result.value;
+
+    return formatResult(value, apiCall);
+  },
+};

package/src/mcp-server/tools/sandboxConnectorsSetTools.ts

@@ -0,0 +1,37 @@
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ */
+
+import { sandboxConnectorsSetTools } from "../../funcs/sandboxConnectorsSetTools.js";
+import * as operations from "../../models/operations/index.js";
+import { formatResult, ToolDefinition } from "../tools.js";
+
+const args = {
+  request: operations.SetSandboxConnectorToolsRequest$inboundSchema,
+};
+
+export const tool$sandboxConnectorsSetTools: ToolDefinition<typeof args> = {
+  name: "sandbox-connectors-set-tools",
+  description: `Set Connector Tool Allowlist
+
+Choose which of the connector's tools sessions may call. Send a list of tool names, or \`null\` to allow every tool the connector lists, read or write.`,
+  args,
+  tool: async (client, args, ctx) => {
+    const [result, apiCall] = await sandboxConnectorsSetTools(
+      client,
+      args.request,
+      { fetchOptions: { signal: ctx.signal } },
+    ).$inspect();
+
+    if (!result.ok) {
+      return {
+        content: [{ type: "text", text: result.error.message }],
+        isError: true,
+      };
+    }
+
+    const value = result.value;
+
+    return formatResult(value, apiCall);
+  },
+};

package/src/mcp-server/tools/sandboxCreate.ts

@@ -14,7 +14,7 @@ export const tool$sandboxCreate: ToolDefinition<typeof args> = {
   name: "sandbox-create",
   description: `Create Session
 
-Create a sandbox session and return its public session metadata, session token, and provider. Set \`session_kind\` to \`browser\` to start a browser-backed session instead of a standard command/code sandbox. Set \`queue_if_full\` to \`true\` to queue the request instead of failing when runner capacity is temporarily unavailable. It does not queue requests for session kinds the deployment does not support. Browser sessions require a Firecracker-backed deployment; standard-only deployments reject them immediately with \`browser_sessions_not_enabled\`.`,
+Create a sandbox session and return its public session metadata, session token, and provider. Set \`session_kind\` to \`browser\` to start a browser-backed session instead of a standard command/code sandbox. Set \`queue_if_full\` to \`true\` to queue the request instead of failing when runner capacity is temporarily unavailable. It does not queue requests for session kinds the deployment does not support. Browser sessions require a Firecracker-backed deployment; standard-only deployments reject them immediately with \`browser_sessions_not_enabled\`. An optional caller \`network_policy\` restricts outbound hostnames and is intersected with the organization, team and operator policies. An empty allowlist denies outbound access.`,
   args,
   tool: async (client, args, ctx) => {
     const [result, apiCall] = await sandboxCreate(

package/src/mcp-server/tools/sandboxNetworkPoliciesEffective.ts

@@ -0,0 +1,38 @@
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ */
+
+import { sandboxNetworkPoliciesEffective } from "../../funcs/sandboxNetworkPoliciesEffective.js";
+import * as operations from "../../models/operations/index.js";
+import { formatResult, ToolDefinition } from "../tools.js";
+
+const args = {
+  request: operations.GetEffectiveNetworkPolicyRequest$inboundSchema,
+};
+
+export const tool$sandboxNetworkPoliciesEffective: ToolDefinition<typeof args> =
+  {
+    name: "sandbox-network-policies-effective",
+    description: `Get Effective Network Policy
+
+Intersect the authenticated tenant's organization and team hostname allowlists.`,
+    args,
+    tool: async (client, args, ctx) => {
+      const [result, apiCall] = await sandboxNetworkPoliciesEffective(
+        client,
+        args.request,
+        { fetchOptions: { signal: ctx.signal } },
+      ).$inspect();
+
+      if (!result.ok) {
+        return {
+          content: [{ type: "text", text: result.error.message }],
+          isError: true,
+        };
+      }
+
+      const value = result.value;
+
+      return formatResult(value, apiCall);
+    },
+  };