@meetkai/mka1 0.55.34 → 0.55.36

package/src/funcs/guardrailsGetGuardrailsResourcePolicy.ts

@@ -0,0 +1,186 @@
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ */
+
+import { SDKCore } from "../core.js";
+import { encodeFormQuery, encodeSimple } from "../lib/encodings.js";
+import { matchStatusCode } from "../lib/http.js";
+import * as M from "../lib/matchers.js";
+import { compactMap } from "../lib/primitives.js";
+import { safeParse } from "../lib/schemas.js";
+import { RequestOptions } from "../lib/sdks.js";
+import { extractSecurity, resolveGlobalSecurity } from "../lib/security.js";
+import { pathToFunc } from "../lib/url.js";
+import * as components from "../models/components/index.js";
+import {
+  ConnectionError,
+  InvalidRequestError,
+  RequestAbortedError,
+  RequestTimeoutError,
+  UnexpectedClientError,
+} from "../models/errors/httpclienterrors.js";
+import { ResponseValidationError } from "../models/errors/responsevalidationerror.js";
+import { SDKError } from "../models/errors/sdkerror.js";
+import { SDKValidationError } from "../models/errors/sdkvalidationerror.js";
+import * as operations from "../models/operations/index.js";
+import { APICall, APIPromise } from "../types/async.js";
+import { Result } from "../types/fp.js";
+
+/**
+ * Get a resource guardrails policy
+ *
+ * @remarks
+ * Additional guardrails attached to a saved agent in the active team or a catalog model endpoint throughout the organization. Cluster, organization and team policies are always enforced as well. Model aliases resolve to canonical model IDs; auto is not an attachable endpoint. Only organization admins/owners may change these policies. Policies apply to saved-agent versions and future background executions independently of version snapshots. Configured fallback and image-reroute endpoint policies are checked before dispatch as well, even if a fallback is not eventually needed.
+ *
+ * If set, this operation will use {@link Security.bearerAuth} from the global security.
+ */
+export function guardrailsGetGuardrailsResourcePolicy(
+  client: SDKCore,
+  request: operations.GetGuardrailsResourcePolicyRequest,
+  options?: RequestOptions,
+): APIPromise<
+  Result<
+    components.GetGuardrailsResourcePolicyResponse,
+    | SDKError
+    | ResponseValidationError
+    | ConnectionError
+    | RequestAbortedError
+    | RequestTimeoutError
+    | InvalidRequestError
+    | UnexpectedClientError
+    | SDKValidationError
+  >
+> {
+  return new APIPromise($do(
+    client,
+    request,
+    options,
+  ));
+}
+
+async function $do(
+  client: SDKCore,
+  request: operations.GetGuardrailsResourcePolicyRequest,
+  options?: RequestOptions,
+): Promise<
+  [
+    Result<
+      components.GetGuardrailsResourcePolicyResponse,
+      | SDKError
+      | ResponseValidationError
+      | ConnectionError
+      | RequestAbortedError
+      | RequestTimeoutError
+      | InvalidRequestError
+      | UnexpectedClientError
+      | SDKValidationError
+    >,
+    APICall,
+  ]
+> {
+  const parsed = safeParse(
+    request,
+    (value) =>
+      operations.GetGuardrailsResourcePolicyRequest$outboundSchema.parse(value),
+    "Input validation failed",
+  );
+  if (!parsed.ok) {
+    return [parsed, { status: "invalid" }];
+  }
+  const payload = parsed.value;
+  const body = null;
+
+  const path = pathToFunc("/api/v1/llm/guardrails/resource-policies")();
+
+  const query = encodeFormQuery({
+    "resource_id": payload.resource_id,
+    "resource_type": payload.resource_type,
+  });
+
+  const headers = new Headers(compactMap({
+    Accept: "application/json",
+    "X-On-Behalf-Of": encodeSimple(
+      "X-On-Behalf-Of",
+      payload["X-On-Behalf-Of"],
+      { explode: false, charEncoding: "none" },
+    ),
+  }));
+
+  const secConfig = await extractSecurity(client._options.bearerAuth);
+  const securityInput = secConfig == null ? {} : { bearerAuth: secConfig };
+  const requestSecurity = resolveGlobalSecurity(securityInput, [0]);
+
+  const context = {
+    options: client._options,
+    baseURL: options?.serverURL ?? client._baseURL ?? "",
+    operationID: "getGuardrailsResourcePolicy",
+    oAuth2Scopes: null,
+
+    resolvedSecurity: requestSecurity,
+
+    securitySource: client._options.bearerAuth,
+    retryConfig: options?.retries
+      || client._options.retryConfig
+      || {
+        strategy: "backoff",
+        backoff: {
+          initialInterval: 500,
+          maxInterval: 5000,
+          exponent: 1.5,
+          maxElapsedTime: 15000,
+        },
+        retryConnectionErrors: true,
+      }
+      || { strategy: "none" },
+    retryCodes: options?.retryCodes || ["429", "500", "502", "503", "504"],
+  };
+
+  const requestRes = client._createRequest(context, {
+    security: requestSecurity,
+    method: "GET",
+    baseURL: options?.serverURL,
+    path: path,
+    headers: headers,
+    query: query,
+    body: body,
+    userAgent: client._options.userAgent,
+    timeoutMs: options?.timeoutMs || client._options.timeoutMs || -1,
+  }, options);
+  if (!requestRes.ok) {
+    return [requestRes, { status: "invalid" }];
+  }
+  const req = requestRes.value;
+
+  const doResult = await client._do(req, {
+    context,
+    isErrorStatusCode: (statusCode: number) =>
+      matchStatusCode({ status: statusCode } as Response, ["4XX", "5XX"]),
+    retryConfig: context.retryConfig,
+    retryCodes: context.retryCodes,
+  });
+  if (!doResult.ok) {
+    return [doResult, { status: "request-error", request: req }];
+  }
+  const response = doResult.value;
+
+  const [result] = await M.match<
+    components.GetGuardrailsResourcePolicyResponse,
+    | SDKError
+    | ResponseValidationError
+    | ConnectionError
+    | RequestAbortedError
+    | RequestTimeoutError
+    | InvalidRequestError
+    | UnexpectedClientError
+    | SDKValidationError
+  >(
+    M.json(200, components.GetGuardrailsResourcePolicyResponse$inboundSchema),
+    M.fail("4XX"),
+    M.fail("5XX"),
+  )(response, req);
+  if (!result.ok) {
+    return [result, { status: "complete", request: req, response }];
+  }
+
+  return [result, { status: "complete", request: req, response }];
+}

package/src/funcs/guardrailsUpdateGuardrailsResourcePolicy.ts

@@ -0,0 +1,177 @@
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ */
+
+import { SDKCore } from "../core.js";
+import { encodeJSON } from "../lib/encodings.js";
+import { matchStatusCode } from "../lib/http.js";
+import * as M from "../lib/matchers.js";
+import { compactMap } from "../lib/primitives.js";
+import { safeParse } from "../lib/schemas.js";
+import { RequestOptions } from "../lib/sdks.js";
+import { extractSecurity, resolveGlobalSecurity } from "../lib/security.js";
+import { pathToFunc } from "../lib/url.js";
+import * as components from "../models/components/index.js";
+import {
+  ConnectionError,
+  InvalidRequestError,
+  RequestAbortedError,
+  RequestTimeoutError,
+  UnexpectedClientError,
+} from "../models/errors/httpclienterrors.js";
+import { ResponseValidationError } from "../models/errors/responsevalidationerror.js";
+import { SDKError } from "../models/errors/sdkerror.js";
+import { SDKValidationError } from "../models/errors/sdkvalidationerror.js";
+import { APICall, APIPromise } from "../types/async.js";
+import { Result } from "../types/fp.js";
+
+/**
+ * Set a resource guardrails policy
+ *
+ * @remarks
+ * Additional guardrails attached to a saved agent in the active team or a catalog model endpoint throughout the organization. Cluster, organization and team policies are always enforced as well. Model aliases resolve to canonical model IDs; auto is not an attachable endpoint. Only organization admins/owners may change these policies. Policies apply to saved-agent versions and future background executions independently of version snapshots. Configured fallback and image-reroute endpoint policies are checked before dispatch as well, even if a fallback is not eventually needed.
+ *
+ * If set, this operation will use {@link Security.bearerAuth} from the global security.
+ */
+export function guardrailsUpdateGuardrailsResourcePolicy(
+  client: SDKCore,
+  request: components.UpdateGuardrailsResourcePolicyRequest,
+  options?: RequestOptions,
+): APIPromise<
+  Result<
+    components.GetGuardrailsResourcePolicyResponse,
+    | SDKError
+    | ResponseValidationError
+    | ConnectionError
+    | RequestAbortedError
+    | RequestTimeoutError
+    | InvalidRequestError
+    | UnexpectedClientError
+    | SDKValidationError
+  >
+> {
+  return new APIPromise($do(
+    client,
+    request,
+    options,
+  ));
+}
+
+async function $do(
+  client: SDKCore,
+  request: components.UpdateGuardrailsResourcePolicyRequest,
+  options?: RequestOptions,
+): Promise<
+  [
+    Result<
+      components.GetGuardrailsResourcePolicyResponse,
+      | SDKError
+      | ResponseValidationError
+      | ConnectionError
+      | RequestAbortedError
+      | RequestTimeoutError
+      | InvalidRequestError
+      | UnexpectedClientError
+      | SDKValidationError
+    >,
+    APICall,
+  ]
+> {
+  const parsed = safeParse(
+    request,
+    (value) =>
+      components.UpdateGuardrailsResourcePolicyRequest$outboundSchema.parse(
+        value,
+      ),
+    "Input validation failed",
+  );
+  if (!parsed.ok) {
+    return [parsed, { status: "invalid" }];
+  }
+  const payload = parsed.value;
+  const body = encodeJSON("body", payload, { explode: true });
+
+  const path = pathToFunc("/api/v1/llm/guardrails/resource-policies")();
+
+  const headers = new Headers(compactMap({
+    "Content-Type": "application/json",
+    Accept: "application/json",
+  }));
+
+  const secConfig = await extractSecurity(client._options.bearerAuth);
+  const securityInput = secConfig == null ? {} : { bearerAuth: secConfig };
+  const requestSecurity = resolveGlobalSecurity(securityInput, [0]);
+
+  const context = {
+    options: client._options,
+    baseURL: options?.serverURL ?? client._baseURL ?? "",
+    operationID: "updateGuardrailsResourcePolicy",
+    oAuth2Scopes: null,
+
+    resolvedSecurity: requestSecurity,
+
+    securitySource: client._options.bearerAuth,
+    retryConfig: options?.retries
+      || client._options.retryConfig
+      || {
+        strategy: "backoff",
+        backoff: {
+          initialInterval: 500,
+          maxInterval: 5000,
+          exponent: 1.5,
+          maxElapsedTime: 15000,
+        },
+        retryConnectionErrors: true,
+      }
+      || { strategy: "none" },
+    retryCodes: options?.retryCodes || ["429", "500", "502", "503", "504"],
+  };
+
+  const requestRes = client._createRequest(context, {
+    security: requestSecurity,
+    method: "PUT",
+    baseURL: options?.serverURL,
+    path: path,
+    headers: headers,
+    body: body,
+    userAgent: client._options.userAgent,
+    timeoutMs: options?.timeoutMs || client._options.timeoutMs || -1,
+  }, options);
+  if (!requestRes.ok) {
+    return [requestRes, { status: "invalid" }];
+  }
+  const req = requestRes.value;
+
+  const doResult = await client._do(req, {
+    context,
+    isErrorStatusCode: (statusCode: number) =>
+      matchStatusCode({ status: statusCode } as Response, ["4XX", "5XX"]),
+    retryConfig: context.retryConfig,
+    retryCodes: context.retryCodes,
+  });
+  if (!doResult.ok) {
+    return [doResult, { status: "request-error", request: req }];
+  }
+  const response = doResult.value;
+
+  const [result] = await M.match<
+    components.GetGuardrailsResourcePolicyResponse,
+    | SDKError
+    | ResponseValidationError
+    | ConnectionError
+    | RequestAbortedError
+    | RequestTimeoutError
+    | InvalidRequestError
+    | UnexpectedClientError
+    | SDKValidationError
+  >(
+    M.json(200, components.GetGuardrailsResourcePolicyResponse$inboundSchema),
+    M.fail("4XX"),
+    M.fail("5XX"),
+  )(response, req);
+  if (!result.ok) {
+    return [result, { status: "complete", request: req, response }];
+  }
+
+  return [result, { status: "complete", request: req, response }];
+}

package/src/lib/config.ts

@@ -65,7 +65,7 @@ export function serverURLFromOptions(options: SDKOptions): URL | null {
 export const SDK_METADATA = {
   language: "typescript",
   openapiDocVersion: "1.1.0",
-  sdkVersion: "0.55.34",
+  sdkVersion: "0.55.36",
   genVersion: "2.950.2",
-  userAgent: "speakeasy-sdk/typescript 0.55.34 2.950.2 1.1.0 @meetkai/mka1",
+  userAgent: "speakeasy-sdk/typescript 0.55.36 2.950.2 1.1.0 @meetkai/mka1",
 } as const;

package/src/mcp-server/mcp-server.ts

@@ -19,7 +19,7 @@ const routes = buildRouteMap({
 export const app = buildApplication(routes, {
   name: "mcp",
   versionInfo: {
-    currentVersion: "0.55.34",
+    currentVersion: "0.55.36",
   },
 });
 

package/src/mcp-server/server.ts

@@ -216,15 +216,18 @@ import { tool$flagsSetEnvironmentState } from "./tools/flagsSetEnvironmentState.
 import { tool$flagsUnarchive } from "./tools/flagsUnarchive.js";
 import { tool$flagsUpdate } from "./tools/flagsUpdate.js";
 import { tool$guardrailsDeleteGuardrails } from "./tools/guardrailsDeleteGuardrails.js";
+import { tool$guardrailsDeleteGuardrailsResourcePolicy } from "./tools/guardrailsDeleteGuardrailsResourcePolicy.js";
 import { tool$guardrailsGetClusterDefaultGuardrails } from "./tools/guardrailsGetClusterDefaultGuardrails.js";
 import { tool$guardrailsGetClusterDefaultGuardrailsOrg } from "./tools/guardrailsGetClusterDefaultGuardrailsOrg.js";
 import { tool$guardrailsGetGuardrails } from "./tools/guardrailsGetGuardrails.js";
+import { tool$guardrailsGetGuardrailsResourcePolicy } from "./tools/guardrailsGetGuardrailsResourcePolicy.js";
 import { tool$guardrailsListGuardrailsPolicies } from "./tools/guardrailsListGuardrailsPolicies.js";
 import { tool$guardrailsResetClusterDefaultGuardrails } from "./tools/guardrailsResetClusterDefaultGuardrails.js";
 import { tool$guardrailsTestGuardrails } from "./tools/guardrailsTestGuardrails.js";
 import { tool$guardrailsUpdateClusterDefaultGuardrails } from "./tools/guardrailsUpdateClusterDefaultGuardrails.js";
 import { tool$guardrailsUpdateClusterDefaultGuardrailsOrg } from "./tools/guardrailsUpdateClusterDefaultGuardrailsOrg.js";
 import { tool$guardrailsUpdateGuardrails } from "./tools/guardrailsUpdateGuardrails.js";
+import { tool$guardrailsUpdateGuardrailsResourcePolicy } from "./tools/guardrailsUpdateGuardrailsResourcePolicy.js";
 import { tool$llmAuditGetRequestTrace } from "./tools/llmAuditGetRequestTrace.js";
 import { tool$llmBatchesCancel } from "./tools/llmBatchesCancel.js";
 import { tool$llmBatchesCreate } from "./tools/llmBatchesCreate.js";
@@ -524,7 +527,7 @@ export function createMCPServer(deps: {
 }) {
   const server = new McpServer({
     name: "SDK",
-    version: "0.55.34",
+    version: "0.55.36",
   });
 
   const client = new SDKCore({
@@ -564,6 +567,9 @@ export function createMCPServer(deps: {
   tool(tool$guardrailsResetClusterDefaultGuardrails);
   tool(tool$guardrailsGetClusterDefaultGuardrailsOrg);
   tool(tool$guardrailsUpdateClusterDefaultGuardrailsOrg);
+  tool(tool$guardrailsGetGuardrailsResourcePolicy);
+  tool(tool$guardrailsUpdateGuardrailsResourcePolicy);
+  tool(tool$guardrailsDeleteGuardrailsResourcePolicy);
   tool(tool$sandboxCreate);
   tool(tool$sandboxList);
   tool(tool$sandboxGet);

package/src/mcp-server/tools/agentConnectorsActivateAgentConnector.ts

@@ -16,7 +16,7 @@ export const tool$agentConnectorsActivateAgentConnector: ToolDefinition<
   name: "agent-connectors-activate-agent-connector",
   description: `Activate a connector
 
-Revalidates the stored provider credentials and registers the provider webhook. Use this to retry a connector left in an error state. API-key authentication with every listed scope is required; session authentication is rejected, and the key must belong to the connector's original user or service-account principal so existing conversations keep the same owner.`,
+Revalidates the stored provider credentials and registers the provider webhook. Use this to retry a connector left in an error state. API-key authentication with every listed scope is required; session authentication is rejected, and the key must belong to the connector's original user or service-account principal so existing conversations keep the same owner. Web connectors have no provider webhook; activation only re-authorizes the stored API-key identity.`,
   args,
   tool: async (client, args, ctx) => {
     const [result, apiCall] = await agentConnectorsActivateAgentConnector(

package/src/mcp-server/tools/agentConnectorsCreateAgentConnector.ts

@@ -16,7 +16,7 @@ export const tool$agentConnectorsCreateAgentConnector: ToolDefinition<
   name: "agent-connectors-create-agent-connector",
   description: `Create a connector
 
-Connects the agent to a Telegram bot or WhatsApp Business phone number, validates the provider credentials, and registers the agent's webhook. WhatsApp connector support is beta. Text, photos, and gateway-supported documents can invoke the agent; inbound media additionally requires write:files. Managed outbound files require read:files, and generated images require both file scopes so their transient provider URLs can be materialized before delivery. The optional write:feedback scope enables native thumbs reaction synchronization to gateway response feedback. These conditional scopes are deliberately not part of x-required-scopes because text-only connectors do not need them. An API key with every listed scope is required; its identity tuple and current scopes are stored as a non-widening ceiling, then revalidated with mk-authentication before every connector run; session and delegated end-user contexts are rejected. The required access policy controls which provider users or chats may invoke the agent.`,
+Connects the agent to a Telegram bot or WhatsApp Business phone number, validates the provider credentials, and registers the agent's webhook. WhatsApp connector support is beta. Text, photos, and gateway-supported documents can invoke the agent; inbound media additionally requires write:files. Managed outbound files require read:files, and generated images require both file scopes so their transient provider URLs can be materialized before delivery. The optional write:feedback scope enables native thumbs reaction synchronization to gateway response feedback. These conditional scopes are deliberately not part of x-required-scopes because text-only connectors do not need them. An API key with every listed scope is required; its identity tuple and current scopes are stored as a non-widening ceiling, then revalidated with mk-authentication before every connector run; session and delegated end-user contexts are rejected. The required access policy controls which provider users or chats may invoke the agent. A web connector (provider web) needs no provider credentials or access policy: it is active immediately and returns an embed object with an iframe URL and snippet for an anonymous web chat widget whose visitors are limited by signed sessions, rate limits and the optional allowed_origins list. Creating a web connector returns 409 when the deployment has not enabled web chat.`,
   args,
   tool: async (client, args, ctx) => {
     const [result, apiCall] = await agentConnectorsCreateAgentConnector(

package/src/mcp-server/tools/agentConnectorsDeleteAgentConnector.ts

@@ -16,7 +16,7 @@ export const tool$agentConnectorsDeleteAgentConnector: ToolDefinition<
   name: "agent-connectors-delete-agent-connector",
   description: `Delete a connector
 
-Unregisters the connector-specific provider webhook and deletes the stored connector credentials. Telegram pending updates are dropped; WhatsApp deletion clears only the phone-number callback and does not unsubscribe other numbers in the business account.`,
+Unregisters the connector-specific provider webhook and deletes the stored connector credentials. Telegram pending updates are dropped; WhatsApp deletion clears only the phone-number callback and does not unsubscribe other numbers in the business account. Deleting a web connector disables its embed immediately.`,
   args,
   tool: async (client, args, ctx) => {
     const [result, apiCall] = await agentConnectorsDeleteAgentConnector(

package/src/mcp-server/tools/guardrailsDeleteGuardrailsResourcePolicy.ts

@@ -0,0 +1,39 @@
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ */
+
+import { guardrailsDeleteGuardrailsResourcePolicy } from "../../funcs/guardrailsDeleteGuardrailsResourcePolicy.js";
+import * as components from "../../models/components/index.js";
+import { formatResult, ToolDefinition } from "../tools.js";
+
+const args = {
+  request: components.GuardrailsResourceTarget$inboundSchema,
+};
+
+export const tool$guardrailsDeleteGuardrailsResourcePolicy: ToolDefinition<
+  typeof args
+> = {
+  name: "guardrails-delete-guardrails-resource-policy",
+  description: `Remove a resource guardrails policy
+
+Additional guardrails attached to a saved agent in the active team or a catalog model endpoint throughout the organization. Cluster, organization and team policies are always enforced as well. Model aliases resolve to canonical model IDs; auto is not an attachable endpoint. Only organization admins/owners may change these policies. Policies apply to saved-agent versions and future background executions independently of version snapshots. Configured fallback and image-reroute endpoint policies are checked before dispatch as well, even if a fallback is not eventually needed.`,
+  args,
+  tool: async (client, args, ctx) => {
+    const [result, apiCall] = await guardrailsDeleteGuardrailsResourcePolicy(
+      client,
+      args.request,
+      { fetchOptions: { signal: ctx.mcpReq.signal } },
+    ).$inspect();
+
+    if (!result.ok) {
+      return {
+        content: [{ type: "text", text: result.error.message }],
+        isError: true,
+      };
+    }
+
+    const value = result.value;
+
+    return formatResult(value, apiCall);
+  },
+};

package/src/mcp-server/tools/guardrailsGetGuardrailsResourcePolicy.ts

@@ -0,0 +1,39 @@
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ */
+
+import { guardrailsGetGuardrailsResourcePolicy } from "../../funcs/guardrailsGetGuardrailsResourcePolicy.js";
+import * as operations from "../../models/operations/index.js";
+import { formatResult, ToolDefinition } from "../tools.js";
+
+const args = {
+  request: operations.GetGuardrailsResourcePolicyRequest$inboundSchema,
+};
+
+export const tool$guardrailsGetGuardrailsResourcePolicy: ToolDefinition<
+  typeof args
+> = {
+  name: "guardrails-get-guardrails-resource-policy",
+  description: `Get a resource guardrails policy
+
+Additional guardrails attached to a saved agent in the active team or a catalog model endpoint throughout the organization. Cluster, organization and team policies are always enforced as well. Model aliases resolve to canonical model IDs; auto is not an attachable endpoint. Only organization admins/owners may change these policies. Policies apply to saved-agent versions and future background executions independently of version snapshots. Configured fallback and image-reroute endpoint policies are checked before dispatch as well, even if a fallback is not eventually needed.`,
+  args,
+  tool: async (client, args, ctx) => {
+    const [result, apiCall] = await guardrailsGetGuardrailsResourcePolicy(
+      client,
+      args.request,
+      { fetchOptions: { signal: ctx.mcpReq.signal } },
+    ).$inspect();
+
+    if (!result.ok) {
+      return {
+        content: [{ type: "text", text: result.error.message }],
+        isError: true,
+      };
+    }
+
+    const value = result.value;
+
+    return formatResult(value, apiCall);
+  },
+};

package/src/mcp-server/tools/guardrailsUpdateGuardrailsResourcePolicy.ts

@@ -0,0 +1,39 @@
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ */
+
+import { guardrailsUpdateGuardrailsResourcePolicy } from "../../funcs/guardrailsUpdateGuardrailsResourcePolicy.js";
+import * as components from "../../models/components/index.js";
+import { formatResult, ToolDefinition } from "../tools.js";
+
+const args = {
+  request: components.UpdateGuardrailsResourcePolicyRequest$inboundSchema,
+};
+
+export const tool$guardrailsUpdateGuardrailsResourcePolicy: ToolDefinition<
+  typeof args
+> = {
+  name: "guardrails-update-guardrails-resource-policy",
+  description: `Set a resource guardrails policy
+
+Additional guardrails attached to a saved agent in the active team or a catalog model endpoint throughout the organization. Cluster, organization and team policies are always enforced as well. Model aliases resolve to canonical model IDs; auto is not an attachable endpoint. Only organization admins/owners may change these policies. Policies apply to saved-agent versions and future background executions independently of version snapshots. Configured fallback and image-reroute endpoint policies are checked before dispatch as well, even if a fallback is not eventually needed.`,
+  args,
+  tool: async (client, args, ctx) => {
+    const [result, apiCall] = await guardrailsUpdateGuardrailsResourcePolicy(
+      client,
+      args.request,
+      { fetchOptions: { signal: ctx.mcpReq.signal } },
+    ).$inspect();
+
+    if (!result.ok) {
+      return {
+        content: [{ type: "text", text: result.error.message }],
+        isError: true,
+      };
+    }
+
+    const value = result.value;
+
+    return formatResult(value, apiCall);
+  },
+};

package/src/models/components/agentconnector.ts

@@ -8,6 +8,12 @@ import { safeParse } from "../../lib/schemas.js";
 import { ClosedEnum } from "../../types/enums.js";
 import { Result as SafeParseResult } from "../../types/fp.js";
 import { SDKValidationError } from "../errors/sdkvalidationerror.js";
+import {
+  AgentConnectorEmbed,
+  AgentConnectorEmbed$inboundSchema,
+  AgentConnectorEmbed$Outbound,
+  AgentConnectorEmbed$outboundSchema,
+} from "./agentconnectorembed.js";
 
 export const AgentConnectorObject = {
   AgentConnector: "agent.connector",
@@ -17,6 +23,7 @@ export type AgentConnectorObject = ClosedEnum<typeof AgentConnectorObject>;
 export const Provider = {
   Telegram: "telegram",
   Whatsapp: "whatsapp",
+  Web: "web",
 } as const;
 export type Provider = ClosedEnum<typeof Provider>;
 
@@ -31,7 +38,7 @@ export type AgentConnector = {
    */
   status: string;
   /**
-   * The provider account ID: Telegram bot user ID or WhatsApp phone-number ID.
+   * The provider account ID: Telegram bot user ID, WhatsApp phone-number ID, or web chat embed ID.
    */
   providerAccountId: string;
   /**
@@ -50,6 +57,10 @@ export type AgentConnector = {
   createdAt: Date;
   updatedAt: Date;
   deletedAt: Date | null;
+  /**
+   * Embed details for web connectors; null for other providers, and for web connectors when the deployment has no public connector base URL.
+   */
+  embed: AgentConnectorEmbed | null;
 };
 
 /** @internal */
@@ -90,6 +101,7 @@ export const AgentConnector$inboundSchema: z.ZodType<
   deleted_at: z.nullable(
     z.string().datetime({ offset: true }).transform(v => new Date(v)),
   ),
+  embed: z.nullable(AgentConnectorEmbed$inboundSchema),
 }).transform((v) => {
   return remap$(v, {
     "agent_id": "agentId",
@@ -118,6 +130,7 @@ export type AgentConnector$Outbound = {
   created_at: string;
   updated_at: string;
   deleted_at: string | null;
+  embed: AgentConnectorEmbed$Outbound | null;
 };
 
 /** @internal */
@@ -140,6 +153,7 @@ export const AgentConnector$outboundSchema: z.ZodType<
   createdAt: z.date().transform(v => v.toISOString()),
   updatedAt: z.date().transform(v => v.toISOString()),
   deletedAt: z.nullable(z.date().transform(v => v.toISOString())),
+  embed: z.nullable(AgentConnectorEmbed$outboundSchema),
 }).transform((v) => {
   return remap$(v, {
     agentId: "agent_id",