@superblocksteam/cli 2.0.156 → 2.0.157-next.1

package/dist/{chunk-O6QF4SNO.js → chunk-KOWVZPVA.js}

@@ -1,7 +1,7 @@
 if (typeof process === 'object' && process !== null &&
     process.env !== null && typeof process.env === 'object') {
   process.env.DD_GIT_REPOSITORY_URL = 'https://token@github.com/superblocksteam/superblocks.git';
-  process.env.DD_GIT_COMMIT_SHA = 'a5b422b6464068a2d19d8b6b1893a1276d5274f9';
+  process.env.DD_GIT_COMMIT_SHA = '26ba1efe16b7d3d563ab105280fd09dd361c3e40';
 }
 import { createRequire as $dd_createRequire } from 'module';
 import { fileURLToPath as $dd_fileURLToPath } from 'url';
@@ -30,21 +30,21 @@ import {
   string,
   union,
   unknown
-} from "./chunk-MIE7VILH.js";
+} from "./chunk-TZ6ZWO5X.js";
 import {
   SuperblocksSdk,
-  import_shared,
+  import_shared2 as import_shared,
   require_dist,
   require_dist2,
   writeApplicationToDisk
-} from "./chunk-I5UAWLVZ.js";
+} from "./chunk-BSGDEWZQ.js";
 import {
   require_lib
-} from "./chunk-2CTGMPIU.js";
+} from "./chunk-S26U3GLS.js";
 import {
   __toESM,
   init_cjs_shims
-} from "./chunk-4UNLK7GB.js";
+} from "./chunk-23SPDUI6.js";
 
 // ../../../../node_modules/.pnpm/@modelcontextprotocol+sdk@1.30.0_zod@4.3.6/node_modules/@modelcontextprotocol/sdk/dist/esm/types.js
 init_cjs_shims();
@@ -1581,7 +1581,7 @@ var UrlElicitationRequiredError = class extends McpError {
 // ../mcp-server/package.json
 var package_default = {
   name: "@superblocksteam/mcp-server",
-  version: "2.0.156",
+  version: "2.0.157-next.1",
   description: "Superblocks MCP server",
   license: "Superblocks Community Software License",
   bin: {
@@ -1638,6 +1638,7 @@ var package_default = {
     zod: "^4.3.6"
   },
   devDependencies: {
+    "@superblocksteam/schemas": "workspace:*",
     "@types/fs-extra": "^11.0.4",
     "@types/node": "catalog:",
     eslint: "catalog:",
@@ -1881,7 +1882,13 @@ function extractMessage(payload) {
 async function callServerApi(options) {
   const url = new URL(options.path, options.baseUrl);
   for (const [key, value] of Object.entries(options.query ?? {})) {
-    if (value !== void 0) {
+    if (value === void 0)
+      continue;
+    if (Array.isArray(value)) {
+      for (const entry of value) {
+        url.searchParams.append(key, entry);
+      }
+    } else {
       url.searchParams.set(key, String(value));
     }
   }
@@ -2240,6 +2247,2713 @@ function resolveBaseUrlTarget(input) {
 
 // ../mcp-server/dist/tools/schemas.js
 init_cjs_shims();
+var import_shared2 = __toESM(require_dist());
+
+// ../mcp-server/dist/tools/plugin-configuration-schema.js
+init_cjs_shims();
+
+// ../mcp-server/dist/tools/datasource-configuration-by-type.schema.json
+var datasource_configuration_by_type_schema_default = {
+  $schema: "http://json-schema.org/draft-07/schema#",
+  $ref: "#/definitions/DatasourceConfigurationByTypeSchema",
+  definitions: {
+    DatasourceConfigurationByTypeSchema: {
+      $ref: "#/definitions/DatasourceConfigurationByType"
+    },
+    DatasourceConfigurationByType: {
+      type: "object",
+      properties: {
+        adls: {
+          type: "object",
+          additionalProperties: {
+            not: true,
+            errorMessage: "extra property is ${0#}"
+          },
+          properties: {
+            bindingFields: { type: "array", items: { type: "string" } },
+            name: { type: "string" },
+            connection: { $ref: "#/definitions/Plugin_AdlsConnection" },
+            dynamicWorkflowConfiguration: {
+              $ref: "#/definitions/DynamicWorkflowConfiguration"
+            }
+          }
+        },
+        aivenkafka: {
+          type: "object",
+          additionalProperties: {
+            not: true,
+            errorMessage: "extra property is ${0#}"
+          },
+          properties: {
+            bindingFields: { type: "array", items: { type: "string" } },
+            name: { type: "string" },
+            cluster: { $ref: "#/definitions/Cluster" },
+            dynamicWorkflowConfiguration: {
+              $ref: "#/definitions/DynamicWorkflowConfiguration"
+            },
+            superblocksMetadata: {
+              type: "object",
+              properties: {
+                pluginVersion: { type: "string" },
+                syncedFromProfileId: { type: "string" }
+              },
+              additionalProperties: {
+                not: true,
+                errorMessage: "extra property is ${0#}"
+              }
+            }
+          }
+        },
+        athena: {
+          type: "object",
+          additionalProperties: {
+            not: true,
+            errorMessage: "extra property is ${0#}"
+          },
+          properties: {
+            bindingFields: { type: "array", items: { type: "string" } },
+            name: { type: "string" },
+            connection: { $ref: "#/definitions/Connection" },
+            dynamicWorkflowConfiguration: {
+              $ref: "#/definitions/DynamicWorkflowConfiguration"
+            }
+          }
+        },
+        bigquery: {
+          type: "object",
+          additionalProperties: {
+            not: true,
+            errorMessage: "extra property is ${0#}"
+          },
+          properties: {
+            bindingFields: { type: "array", items: { type: "string" } },
+            connectionType: {
+              type: "string",
+              enum: ["fields", "service-account-key", "oauth-token-exchange"]
+            },
+            authTypeField: { type: "string" },
+            authConfig: {
+              type: "object",
+              properties: {
+                tokenUrl: { type: "string" },
+                audience: { type: "string" },
+                scope: { type: "string" },
+                subjectTokenType: { type: "string" },
+                subjectTokenSource: { type: "string" },
+                subjectTokenSourceStaticToken: { type: "string" },
+                workforcePoolId: { type: "string" },
+                workforceProviderId: { type: "string" },
+                projectId: { type: "string" },
+                billingProjectNumber: { type: "string" }
+              },
+              additionalProperties: {
+                not: true,
+                errorMessage: "extra property is ${0#}"
+              }
+            },
+            authentication: {
+              type: "object",
+              properties: {
+                custom: {
+                  type: "object",
+                  properties: {
+                    googleServiceAccount: { $ref: "#/definitions/Property" }
+                  },
+                  additionalProperties: {
+                    not: true,
+                    errorMessage: "extra property is ${0#}"
+                  }
+                }
+              },
+              additionalProperties: {
+                not: true,
+                errorMessage: "extra property is ${0#}"
+              }
+            },
+            name: { type: "string" },
+            dynamicWorkflowConfiguration: {
+              $ref: "#/definitions/DynamicWorkflowConfig"
+            },
+            id: { type: "string" },
+            superblocksMetadata: {
+              type: "object",
+              properties: {
+                pluginVersion: { $ref: "#/definitions/SemVer" },
+                syncedFromProfileId: { type: "string" }
+              },
+              additionalProperties: {
+                not: true,
+                errorMessage: "extra property is ${0#}"
+              }
+            }
+          }
+        },
+        cockroachdb: {
+          type: "object",
+          additionalProperties: {
+            not: true,
+            errorMessage: "extra property is ${0#}"
+          },
+          properties: {
+            bindingFields: { type: "array", items: { type: "string" } },
+            connectionType: { type: "string", enum: ["fields", "url"] },
+            connectionUrl: { type: "string" },
+            tunnel: {
+              type: "object",
+              additionalProperties: {
+                not: true,
+                errorMessage: "extra property is ${0#}"
+              },
+              properties: {
+                authMethod: { $ref: "#/definitions/SharedSSHAuthMethod" },
+                authenticationMethod: {
+                  $ref: "#/definitions/SSHAuthMethod"
+                },
+                enabled: { type: "boolean" },
+                host: { type: "string" },
+                passphrase: { type: "string" },
+                password: { type: "string" },
+                port: { type: "number" },
+                privateKey: { type: "string" },
+                publicKey: { type: "string" },
+                username: { type: "string" }
+              }
+            },
+            authentication: {
+              type: "object",
+              properties: {
+                custom: {
+                  type: "object",
+                  properties: {
+                    databaseName: { $ref: "#/definitions/Property" }
+                  },
+                  additionalProperties: {
+                    not: true,
+                    errorMessage: "extra property is ${0#}"
+                  }
+                },
+                username: { type: "string" },
+                password: { type: "string" }
+              },
+              additionalProperties: {
+                not: true,
+                errorMessage: "extra property is ${0#}"
+              }
+            },
+            connection: {
+              type: "object",
+              properties: {
+                useSsl: { type: ["boolean", "string"] },
+                useSelfSignedSsl: { type: ["boolean", "string"] },
+                ca: { type: "string" },
+                key: { type: "string" },
+                cert: { type: "string" },
+                mode: { type: "number", const: 0 }
+              },
+              additionalProperties: {
+                not: true,
+                errorMessage: "extra property is ${0#}"
+              }
+            },
+            endpoint: {
+              type: "object",
+              properties: {
+                host: { type: "string" },
+                port: { type: "number", minimum: 0, maximum: 65536 }
+              },
+              additionalProperties: {
+                not: true,
+                errorMessage: "extra property is ${0#}"
+              }
+            },
+            name: { type: "string" },
+            dynamicWorkflowConfiguration: {
+              $ref: "#/definitions/DynamicWorkflowConfig"
+            },
+            id: { type: "string" },
+            superblocksMetadata: {
+              type: "object",
+              properties: {
+                pluginVersion: { $ref: "#/definitions/SemVer" },
+                syncedFromProfileId: { type: "string" }
+              },
+              additionalProperties: {
+                not: true,
+                errorMessage: "extra property is ${0#}"
+              }
+            }
+          }
+        },
+        confluent: {
+          type: "object",
+          additionalProperties: {
+            not: true,
+            errorMessage: "extra property is ${0#}"
+          },
+          properties: {
+            bindingFields: { type: "array", items: { type: "string" } },
+            name: { type: "string" },
+            cluster: { $ref: "#/definitions/Cluster" },
+            dynamicWorkflowConfiguration: {
+              $ref: "#/definitions/DynamicWorkflowConfiguration"
+            },
+            superblocksMetadata: {
+              type: "object",
+              properties: {
+                pluginVersion: { type: "string" },
+                syncedFromProfileId: { type: "string" }
+              },
+              additionalProperties: {
+                not: true,
+                errorMessage: "extra property is ${0#}"
+              }
+            }
+          }
+        },
+        couchbase: {
+          type: "object",
+          additionalProperties: {
+            not: true,
+            errorMessage: "extra property is ${0#}"
+          },
+          properties: {
+            bindingFields: { type: "array", items: { type: "string" } },
+            name: { type: "string" },
+            connection: {
+              $ref: "#/definitions/Plugin_CouchbaseConnection"
+            },
+            tunnel: { $ref: "#/definitions/SSHConfiguration" },
+            dynamicWorkflowConfiguration: {
+              $ref: "#/definitions/DynamicWorkflowConfiguration"
+            }
+          },
+          required: ["name"]
+        },
+        databricks: {
+          type: "object",
+          additionalProperties: {
+            not: true,
+            errorMessage: "extra property is ${0#}"
+          },
+          properties: {
+            bindingFields: { type: "array", items: { type: "string" } },
+            authTypeField: { type: "string" },
+            oauthType: { type: "string", const: "oauth-token-exchange" },
+            authConfig: { $ref: "#/definitions/AuthConfig" },
+            authType: { $ref: "#/definitions/AuthType" },
+            name: { type: "string" },
+            dynamicWorkflowConfiguration: {
+              $ref: "#/definitions/DynamicWorkflowConfiguration"
+            },
+            id: { type: "string" },
+            superblocksMetadata: {
+              type: "object",
+              properties: {
+                pluginVersion: { $ref: "#/definitions/SemVer" },
+                syncedFromProfileId: { type: "string" }
+              },
+              additionalProperties: {
+                not: true,
+                errorMessage: "extra property is ${0#}"
+              }
+            },
+            connection: {
+              $ref: "#/definitions/Plugin_DatabricksConnection"
+            }
+          },
+          required: ["name"]
+        },
+        dynamodb: {
+          type: "object",
+          additionalProperties: {
+            not: true,
+            errorMessage: "extra property is ${0#}"
+          },
+          properties: {
+            bindingFields: { type: "array", items: { type: "string" } },
+            awsAuthType: { $ref: "#/definitions/AWSAuthType" },
+            authentication: {
+              type: "object",
+              properties: {
+                custom: {
+                  type: "object",
+                  properties: {
+                    region: { $ref: "#/definitions/Property" },
+                    accessKeyID: { $ref: "#/definitions/Property" },
+                    secretKey: { $ref: "#/definitions/Property" },
+                    iamRoleArn: { $ref: "#/definitions/Property" }
+                  },
+                  additionalProperties: {
+                    not: true,
+                    errorMessage: "extra property is ${0#}"
+                  }
+                }
+              },
+              additionalProperties: {}
+            },
+            name: { type: "string" },
+            dynamicWorkflowConfiguration: {
+              $ref: "#/definitions/DynamicWorkflowConfig"
+            },
+            id: { type: "string" },
+            superblocksMetadata: {
+              type: "object",
+              properties: {
+                pluginVersion: { $ref: "#/definitions/SemVer" },
+                syncedFromProfileId: { type: "string" }
+              },
+              additionalProperties: {
+                not: true,
+                errorMessage: "extra property is ${0#}"
+              }
+            }
+          }
+        },
+        email: {
+          type: "object",
+          additionalProperties: {
+            not: true,
+            errorMessage: "extra property is ${0#}"
+          },
+          properties: {
+            bindingFields: { type: "array", items: { type: "string" } },
+            authentication: {
+              type: "object",
+              properties: {
+                custom: {
+                  type: "object",
+                  properties: {
+                    apiKey: { $ref: "#/definitions/Property" },
+                    senderEmail: { $ref: "#/definitions/Property" },
+                    senderName: { $ref: "#/definitions/Property" }
+                  },
+                  additionalProperties: {
+                    not: true,
+                    errorMessage: "extra property is ${0#}"
+                  }
+                }
+              },
+              additionalProperties: {
+                not: true,
+                errorMessage: "extra property is ${0#}"
+              }
+            },
+            sendgridTemplateId: { type: "string" },
+            name: { type: "string" },
+            dynamicWorkflowConfiguration: {
+              $ref: "#/definitions/DynamicWorkflowConfig"
+            },
+            id: { type: "string" },
+            superblocksMetadata: {
+              type: "object",
+              properties: {
+                pluginVersion: { $ref: "#/definitions/SemVer" },
+                syncedFromProfileId: { type: "string" }
+              },
+              additionalProperties: {
+                not: true,
+                errorMessage: "extra property is ${0#}"
+              }
+            }
+          }
+        },
+        gcs: {
+          type: "object",
+          additionalProperties: {
+            not: true,
+            errorMessage: "extra property is ${0#}"
+          },
+          properties: {
+            bindingFields: { type: "array", items: { type: "string" } },
+            authentication: {
+              type: "object",
+              properties: {
+                custom: {
+                  type: "object",
+                  properties: {
+                    googleServiceAccount: { $ref: "#/definitions/Property" }
+                  },
+                  additionalProperties: {
+                    not: true,
+                    errorMessage: "extra property is ${0#}"
+                  }
+                }
+              },
+              additionalProperties: {
+                not: true,
+                errorMessage: "extra property is ${0#}"
+              }
+            },
+            name: { type: "string" },
+            dynamicWorkflowConfiguration: {
+              $ref: "#/definitions/DynamicWorkflowConfig"
+            },
+            id: { type: "string" },
+            superblocksMetadata: {
+              type: "object",
+              properties: {
+                pluginVersion: { $ref: "#/definitions/SemVer" },
+                syncedFromProfileId: { type: "string" }
+              },
+              additionalProperties: {
+                not: true,
+                errorMessage: "extra property is ${0#}"
+              }
+            }
+          }
+        },
+        graphqlintegration: {
+          type: "object",
+          additionalProperties: {
+            not: true,
+            errorMessage: "extra property is ${0#}"
+          },
+          properties: {
+            bindingFields: { type: "array", items: { type: "string" } },
+            path: { type: "string" },
+            headers: {
+              type: "array",
+              items: { $ref: "#/definitions/Property" }
+            },
+            params: {
+              type: "array",
+              items: { $ref: "#/definitions/Property" }
+            },
+            authConfig: { $ref: "#/definitions/AuthConfig" },
+            authType: { $ref: "#/definitions/AuthType" },
+            name: { type: "string" },
+            dynamicWorkflowConfiguration: {
+              $ref: "#/definitions/DynamicWorkflowConfig"
+            },
+            id: { type: "string" },
+            superblocksMetadata: {
+              type: "object",
+              properties: {
+                pluginVersion: { $ref: "#/definitions/SemVer" },
+                syncedFromProfileId: { type: "string" }
+              },
+              additionalProperties: {
+                not: true,
+                errorMessage: "extra property is ${0#}"
+              }
+            }
+          }
+        },
+        graphql: {
+          type: "object",
+          additionalProperties: {
+            not: true,
+            errorMessage: "extra property is ${0#}"
+          },
+          properties: {
+            bindingFields: { type: "array", items: { type: "string" } },
+            path: { type: "string" },
+            headers: {
+              type: "array",
+              items: { $ref: "#/definitions/Property" }
+            },
+            params: {
+              type: "array",
+              items: { $ref: "#/definitions/Property" }
+            },
+            authConfig: { $ref: "#/definitions/AuthConfig" },
+            authType: { $ref: "#/definitions/AuthType" },
+            name: { type: "string" },
+            dynamicWorkflowConfiguration: {
+              $ref: "#/definitions/DynamicWorkflowConfig"
+            },
+            id: { type: "string" },
+            superblocksMetadata: {
+              type: "object",
+              properties: {
+                pluginVersion: { $ref: "#/definitions/SemVer" },
+                syncedFromProfileId: { type: "string" }
+              },
+              additionalProperties: {
+                not: true,
+                errorMessage: "extra property is ${0#}"
+              }
+            }
+          }
+        },
+        javascript: {
+          type: "object",
+          additionalProperties: {
+            not: true,
+            errorMessage: "extra property is ${0#}"
+          },
+          properties: {
+            bindingFields: { type: "array", items: { type: "string" } },
+            name: { type: "string" },
+            dynamicWorkflowConfiguration: {
+              $ref: "#/definitions/DynamicWorkflowConfig"
+            },
+            id: { type: "string" },
+            superblocksMetadata: {
+              type: "object",
+              properties: {
+                pluginVersion: { $ref: "#/definitions/SemVer" },
+                syncedFromProfileId: { type: "string" }
+              },
+              additionalProperties: {
+                not: true,
+                errorMessage: "extra property is ${0#}"
+              }
+            }
+          }
+        },
+        lakebase: {
+          type: "object",
+          additionalProperties: {
+            not: true,
+            errorMessage: "extra property is ${0#}"
+          },
+          properties: {
+            bindingFields: { type: "array", items: { type: "string" } },
+            authTypeField: { type: "string" },
+            oauthType: { type: "string", const: "oauth-token-exchange" },
+            authConfig: { $ref: "#/definitions/AuthConfig" },
+            authType: { $ref: "#/definitions/AuthType" },
+            name: { type: "string" },
+            dynamicWorkflowConfiguration: {
+              $ref: "#/definitions/DynamicWorkflowConfig"
+            },
+            id: { type: "string" },
+            superblocksMetadata: {
+              type: "object",
+              properties: {
+                pluginVersion: { $ref: "#/definitions/SemVer" },
+                syncedFromProfileId: { type: "string" }
+              },
+              additionalProperties: {
+                not: true,
+                errorMessage: "extra property is ${0#}"
+              }
+            },
+            connection: {
+              type: "object",
+              properties: {
+                host: { type: "string" },
+                port: { type: "number" },
+                databaseName: { type: "string" },
+                connectionType: { type: "string" },
+                username: { type: "string" },
+                password: { type: "string" },
+                oauthClientId: { type: "string" },
+                oauthClientSecret: { type: "string" },
+                oauthWorkspaceUrl: { type: "string" }
+              },
+              additionalProperties: {
+                not: true,
+                errorMessage: "extra property is ${0#}"
+              }
+            }
+          }
+        },
+        mariadb: {
+          type: "object",
+          additionalProperties: {
+            not: true,
+            errorMessage: "extra property is ${0#}"
+          },
+          properties: {
+            bindingFields: { type: "array", items: { type: "string" } },
+            connectionType: { type: "string", enum: ["fields", "url"] },
+            connectionUrl: { type: "string" },
+            authentication: {
+              type: "object",
+              properties: {
+                custom: {
+                  type: "object",
+                  properties: {
+                    databaseName: { $ref: "#/definitions/Property" }
+                  },
+                  additionalProperties: {
+                    not: true,
+                    errorMessage: "extra property is ${0#}"
+                  }
+                },
+                username: { type: "string" },
+                password: { type: "string" }
+              },
+              additionalProperties: {
+                not: true,
+                errorMessage: "extra property is ${0#}"
+              }
+            },
+            connection: {
+              type: "object",
+              properties: {
+                useSsl: { type: ["boolean", "string"] },
+                useSelfSignedSsl: { type: ["boolean", "string"] },
+                ca: { type: "string" },
+                key: { type: "string" },
+                cert: { type: "string" },
+                mode: { type: "number", const: 0 }
+              },
+              additionalProperties: {
+                not: true,
+                errorMessage: "extra property is ${0#}"
+              }
+            },
+            endpoint: {
+              type: "object",
+              properties: {
+                host: { type: "string" },
+                port: { type: "number", minimum: 0, maximum: 65536 }
+              },
+              additionalProperties: {
+                not: true,
+                errorMessage: "extra property is ${0#}"
+              }
+            },
+            name: { type: "string" },
+            dynamicWorkflowConfiguration: {
+              $ref: "#/definitions/DynamicWorkflowConfig"
+            },
+            id: { type: "string" },
+            superblocksMetadata: {
+              type: "object",
+              properties: {
+                pluginVersion: { $ref: "#/definitions/SemVer" },
+                syncedFromProfileId: { type: "string" }
+              },
+              additionalProperties: {
+                not: true,
+                errorMessage: "extra property is ${0#}"
+              }
+            }
+          }
+        },
+        mongodb: {
+          type: "object",
+          additionalProperties: {
+            not: true,
+            errorMessage: "extra property is ${0#}"
+          },
+          properties: {
+            bindingFields: { type: "array", items: { type: "string" } },
+            tunnel: {
+              type: "object",
+              additionalProperties: {
+                not: true,
+                errorMessage: "extra property is ${0#}"
+              },
+              properties: {
+                authMethod: { $ref: "#/definitions/SharedSSHAuthMethod" },
+                authenticationMethod: {
+                  $ref: "#/definitions/SSHAuthMethod"
+                },
+                enabled: { type: "boolean" },
+                host: { type: "string" },
+                passphrase: { type: "string" },
+                password: { type: "string" },
+                port: { type: "number" },
+                privateKey: { type: "string" },
+                publicKey: { type: "string" },
+                username: { type: "string" }
+              }
+            },
+            authentication: {
+              type: "object",
+              properties: {
+                custom: {
+                  type: "object",
+                  properties: {
+                    databaseName: { $ref: "#/definitions/Property" }
+                  },
+                  additionalProperties: {
+                    not: true,
+                    errorMessage: "extra property is ${0#}"
+                  }
+                },
+                username: { type: "string" },
+                password: { type: "string" }
+              },
+              additionalProperties: {
+                not: true,
+                errorMessage: "extra property is ${0#}"
+              }
+            },
+            connection: {
+              type: "object",
+              properties: {
+                useSsl: { type: ["boolean", "string"] },
+                useSelfSignedSsl: { type: ["boolean", "string"] },
+                ca: { type: "string" },
+                key: { type: "string" },
+                cert: { type: "string" },
+                mode: { type: "number", const: 0 }
+              },
+              additionalProperties: {
+                not: true,
+                errorMessage: "extra property is ${0#}"
+              }
+            },
+            endpoint: {
+              type: "object",
+              properties: {
+                host: { type: "string" },
+                port: { type: "number", minimum: 0, maximum: 65536 }
+              },
+              additionalProperties: {
+                not: true,
+                errorMessage: "extra property is ${0#}"
+              }
+            },
+            name: { type: "string" },
+            dynamicWorkflowConfiguration: {
+              $ref: "#/definitions/DynamicWorkflowConfig"
+            },
+            id: { type: "string" },
+            superblocksMetadata: {
+              type: "object",
+              properties: {
+                pluginVersion: { $ref: "#/definitions/SemVer" },
+                syncedFromProfileId: { type: "string" }
+              },
+              additionalProperties: {
+                not: true,
+                errorMessage: "extra property is ${0#}"
+              }
+            }
+          }
+        },
+        msk: {
+          type: "object",
+          additionalProperties: {
+            not: true,
+            errorMessage: "extra property is ${0#}"
+          },
+          properties: {
+            bindingFields: { type: "array", items: { type: "string" } },
+            name: { type: "string" },
+            cluster: { $ref: "#/definitions/Cluster" },
+            dynamicWorkflowConfiguration: {
+              $ref: "#/definitions/DynamicWorkflowConfiguration"
+            },
+            superblocksMetadata: {
+              type: "object",
+              properties: {
+                pluginVersion: { type: "string" },
+                syncedFromProfileId: { type: "string" }
+              },
+              additionalProperties: {
+                not: true,
+                errorMessage: "extra property is ${0#}"
+              }
+            }
+          }
+        },
+        mysql: {
+          type: "object",
+          additionalProperties: {
+            not: true,
+            errorMessage: "extra property is ${0#}"
+          },
+          properties: {
+            bindingFields: { type: "array", items: { type: "string" } },
+            connectionType: { type: "string", enum: ["fields", "url"] },
+            connectionUrl: { type: "string" },
+            tunnel: {
+              type: "object",
+              additionalProperties: {
+                not: true,
+                errorMessage: "extra property is ${0#}"
+              },
+              properties: {
+                authMethod: { $ref: "#/definitions/SharedSSHAuthMethod" },
+                authenticationMethod: {
+                  $ref: "#/definitions/SSHAuthMethod"
+                },
+                enabled: { type: "boolean" },
+                host: { type: "string" },
+                passphrase: { type: "string" },
+                password: { type: "string" },
+                port: { type: "number" },
+                privateKey: { type: "string" },
+                publicKey: { type: "string" },
+                username: { type: "string" }
+              }
+            },
+            authentication: {
+              type: "object",
+              properties: {
+                custom: {
+                  type: "object",
+                  properties: {
+                    databaseName: { $ref: "#/definitions/Property" }
+                  },
+                  additionalProperties: {
+                    not: true,
+                    errorMessage: "extra property is ${0#}"
+                  }
+                },
+                username: { type: "string" },
+                password: { type: "string" }
+              },
+              additionalProperties: {
+                not: true,
+                errorMessage: "extra property is ${0#}"
+              }
+            },
+            connection: {
+              type: "object",
+              properties: {
+                useSsl: { type: ["boolean", "string"] },
+                useSelfSignedSsl: { type: ["boolean", "string"] },
+                ca: { type: "string" },
+                key: { type: "string" },
+                cert: { type: "string" },
+                mode: { type: "number", const: 0 }
+              },
+              additionalProperties: {
+                not: true,
+                errorMessage: "extra property is ${0#}"
+              }
+            },
+            endpoint: {
+              type: "object",
+              properties: {
+                host: { type: "string" },
+                port: { type: "number", minimum: 0, maximum: 65536 }
+              },
+              additionalProperties: {
+                not: true,
+                errorMessage: "extra property is ${0#}"
+              }
+            },
+            name: { type: "string" },
+            dynamicWorkflowConfiguration: {
+              $ref: "#/definitions/DynamicWorkflowConfig"
+            },
+            id: { type: "string" },
+            superblocksMetadata: {
+              type: "object",
+              properties: {
+                pluginVersion: { $ref: "#/definitions/SemVer" },
+                syncedFromProfileId: { type: "string" }
+              },
+              additionalProperties: {
+                not: true,
+                errorMessage: "extra property is ${0#}"
+              }
+            }
+          }
+        },
+        openai: {
+          type: "object",
+          additionalProperties: {
+            not: true,
+            errorMessage: "extra property is ${0#}"
+          },
+          properties: {
+            bindingFields: { type: "array", items: { type: "string" } },
+            bearerToken: { type: "string" },
+            organizationId: { type: "string" },
+            name: { type: "string" },
+            dynamicWorkflowConfiguration: {
+              $ref: "#/definitions/DynamicWorkflowConfig"
+            },
+            id: { type: "string" },
+            superblocksMetadata: {
+              type: "object",
+              properties: {
+                pluginVersion: { $ref: "#/definitions/SemVer" },
+                syncedFromProfileId: { type: "string" }
+              },
+              additionalProperties: {
+                not: true,
+                errorMessage: "extra property is ${0#}"
+              }
+            }
+          },
+          required: ["bearerToken"]
+        },
+        oracledb: {
+          type: "object",
+          additionalProperties: {
+            not: true,
+            errorMessage: "extra property is ${0#}"
+          },
+          properties: {
+            bindingFields: { type: "array", items: { type: "string" } },
+            connectionType: { type: "string", enum: ["fields", "url"] },
+            connectionUrl: { type: "string" },
+            name: { type: "string" },
+            connection: { $ref: "#/definitions/Plugin_OracleDbConnection" },
+            dynamicWorkflowConfiguration: {
+              $ref: "#/definitions/DynamicWorkflowConfiguration"
+            }
+          },
+          required: ["name"]
+        },
+        postgres: {
+          anyOf: [
+            {
+              type: "object",
+              additionalProperties: {
+                not: true,
+                errorMessage: "extra property is ${0#}"
+              },
+              properties: {
+                bindingFields: {
+                  type: "array",
+                  items: { type: "string" }
+                },
+                authentication: {
+                  type: "object",
+                  properties: {
+                    authType: { type: "string", const: "password" },
+                    custom: {
+                      type: "object",
+                      properties: {
+                        databaseName: { $ref: "#/definitions/Property" }
+                      },
+                      additionalProperties: {
+                        not: true,
+                        errorMessage: "extra property is ${0#}"
+                      }
+                    },
+                    password: { type: "string" },
+                    username: { type: "string" }
+                  },
+                  additionalProperties: {
+                    not: true,
+                    errorMessage: "extra property is ${0#}"
+                  }
+                },
+                connectionType: {
+                  type: "string",
+                  enum: ["fields", "url"]
+                },
+                connectionUrl: { type: "string" },
+                tunnel: {
+                  type: "object",
+                  additionalProperties: {
+                    not: true,
+                    errorMessage: "extra property is ${0#}"
+                  },
+                  properties: {
+                    authMethod: {
+                      $ref: "#/definitions/SharedSSHAuthMethod"
+                    },
+                    authenticationMethod: {
+                      $ref: "#/definitions/SSHAuthMethod"
+                    },
+                    enabled: { type: "boolean" },
+                    host: { type: "string" },
+                    passphrase: { type: "string" },
+                    password: { type: "string" },
+                    port: { type: "number" },
+                    privateKey: { type: "string" },
+                    publicKey: { type: "string" },
+                    username: { type: "string" }
+                  }
+                },
+                connection: {
+                  type: "object",
+                  properties: {
+                    useSsl: { type: ["boolean", "string"] },
+                    useSelfSignedSsl: { type: ["boolean", "string"] },
+                    ca: { type: "string" },
+                    key: { type: "string" },
+                    cert: { type: "string" },
+                    mode: { type: "number", const: 0 }
+                  },
+                  additionalProperties: {
+                    not: true,
+                    errorMessage: "extra property is ${0#}"
+                  }
+                },
+                endpoint: {
+                  type: "object",
+                  properties: {
+                    host: { type: "string" },
+                    port: { type: "number", minimum: 0, maximum: 65536 }
+                  },
+                  additionalProperties: {
+                    not: true,
+                    errorMessage: "extra property is ${0#}"
+                  }
+                },
+                name: { type: "string" },
+                dynamicWorkflowConfiguration: {
+                  $ref: "#/definitions/DynamicWorkflowConfig"
+                },
+                id: { type: "string" },
+                superblocksMetadata: {
+                  type: "object",
+                  properties: {
+                    pluginVersion: { $ref: "#/definitions/SemVer" },
+                    syncedFromProfileId: { type: "string" }
+                  },
+                  additionalProperties: {
+                    not: true,
+                    errorMessage: "extra property is ${0#}"
+                  }
+                }
+              }
+            },
+            {
+              type: "object",
+              additionalProperties: {
+                not: true,
+                errorMessage: "extra property is ${0#}"
+              },
+              properties: {
+                bindingFields: {
+                  type: "array",
+                  items: { type: "string" }
+                },
+                authentication: {
+                  type: "object",
+                  properties: {
+                    authType: { type: "string", const: "aws_iam_role" },
+                    custom: {
+                      type: "object",
+                      properties: {
+                        databaseName: {
+                          type: "object",
+                          properties: {
+                            key: { type: "string" },
+                            value: { type: "string", minLength: 1 },
+                            editable: { type: "boolean" },
+                            internal: { type: "boolean" },
+                            system: { type: "boolean" },
+                            description: { type: "string" },
+                            mandatory: { type: "boolean" },
+                            type: { type: "string" },
+                            defaultValue: { type: "string" },
+                            minRange: { type: "string" },
+                            maxRange: { type: "string" },
+                            valueOptions: {
+                              type: "array",
+                              items: { type: "string" }
+                            }
+                          },
+                          required: ["value"],
+                          additionalProperties: {
+                            not: true,
+                            errorMessage: "extra property is ${0#}"
+                          }
+                        },
+                        iamRoleArn: {
+                          type: "object",
+                          properties: {
+                            key: { type: "string" },
+                            value: {
+                              type: "string",
+                              description: "Validates stable IAM role ARN wire syntax. Role authorization and allowlist checks remain runtime concerns. The 510-character ARN interior accounts for the path's leading and trailing slashes within IAM's 512-character max.",
+                              minLength: 1,
+                              pattern: "^arn:[a-z0-9-]+:iam::[0-9]{12}:role/(?:[!-~]{1,510}/)?[A-Za-z0-9_+=,.@-]{1,64}$"
+                            },
+                            editable: { type: "boolean" },
+                            internal: { type: "boolean" },
+                            system: { type: "boolean" },
+                            description: { type: "string" },
+                            mandatory: { type: "boolean" },
+                            type: { type: "string" },
+                            defaultValue: { type: "string" },
+                            minRange: { type: "string" },
+                            maxRange: { type: "string" },
+                            valueOptions: {
+                              type: "array",
+                              items: { type: "string" }
+                            }
+                          },
+                          required: ["value"],
+                          additionalProperties: {
+                            not: true,
+                            errorMessage: "extra property is ${0#}"
+                          }
+                        },
+                        region: {
+                          type: "object",
+                          properties: {
+                            key: { type: "string" },
+                            value: {
+                              type: "string",
+                              description: "Validates region identifier syntax without freezing the set of AWS regions. Region existence and availability remain runtime concerns.",
+                              minLength: 1,
+                              pattern: "^[a-z]{2,}(?:-[a-z0-9]+)+-[0-9]+$"
+                            },
+                            editable: { type: "boolean" },
+                            internal: { type: "boolean" },
+                            system: { type: "boolean" },
+                            description: { type: "string" },
+                            mandatory: { type: "boolean" },
+                            type: { type: "string" },
+                            defaultValue: { type: "string" },
+                            minRange: { type: "string" },
+                            maxRange: { type: "string" },
+                            valueOptions: {
+                              type: "array",
+                              items: { type: "string" }
+                            }
+                          },
+                          required: ["value"],
+                          additionalProperties: {
+                            not: true,
+                            errorMessage: "extra property is ${0#}"
+                          }
+                        },
+                        sessionPolicy: { $ref: "#/definitions/Property" }
+                      },
+                      required: ["databaseName", "iamRoleArn", "region"],
+                      additionalProperties: {
+                        not: true,
+                        errorMessage: "extra property is ${0#}"
+                      }
+                    },
+                    username: { type: "string", minLength: 1 }
+                  },
+                  required: ["authType", "custom", "username"],
+                  additionalProperties: {
+                    not: true,
+                    errorMessage: "extra property is ${0#}"
+                  }
+                },
+                connection: {
+                  type: "object",
+                  properties: {
+                    useSsl: { type: "boolean", const: true },
+                    useSelfSignedSsl: { type: ["boolean", "string"] },
+                    ca: { type: "string" },
+                    key: { type: "string" },
+                    cert: { type: "string" },
+                    mode: { type: "number", const: 0 }
+                  },
+                  required: ["useSsl"],
+                  additionalProperties: {
+                    not: true,
+                    errorMessage: "extra property is ${0#}"
+                  }
+                },
+                connectionType: { type: "string", const: "fields" },
+                endpoint: {
+                  type: "object",
+                  properties: {
+                    host: { type: "string", minLength: 1 },
+                    port: { type: "number", minimum: 1, maximum: 65535 }
+                  },
+                  required: ["host", "port"],
+                  additionalProperties: {
+                    not: true,
+                    errorMessage: "extra property is ${0#}"
+                  }
+                },
+                tunnel: {
+                  type: "object",
+                  additionalProperties: {
+                    not: true,
+                    errorMessage: "extra property is ${0#}"
+                  },
+                  properties: {
+                    authMethod: {
+                      $ref: "#/definitions/SharedSSHAuthMethod"
+                    },
+                    authenticationMethod: {
+                      $ref: "#/definitions/SSHAuthMethod"
+                    },
+                    enabled: { type: "boolean" },
+                    host: { type: "string" },
+                    passphrase: { type: "string" },
+                    password: { type: "string" },
+                    port: { type: "number" },
+                    privateKey: { type: "string" },
+                    publicKey: { type: "string" },
+                    username: { type: "string" }
+                  }
+                },
+                name: { type: "string" },
+                dynamicWorkflowConfiguration: {
+                  $ref: "#/definitions/DynamicWorkflowConfig"
+                },
+                id: { type: "string" },
+                superblocksMetadata: {
+                  type: "object",
+                  properties: {
+                    pluginVersion: { $ref: "#/definitions/SemVer" },
+                    syncedFromProfileId: { type: "string" }
+                  },
+                  additionalProperties: {
+                    not: true,
+                    errorMessage: "extra property is ${0#}"
+                  }
+                }
+              },
+              required: [
+                "authentication",
+                "connection",
+                "connectionType",
+                "endpoint"
+              ]
+            }
+          ]
+        },
+        python: {
+          type: "object",
+          additionalProperties: {
+            not: true,
+            errorMessage: "extra property is ${0#}"
+          },
+          properties: {
+            bindingFields: { type: "array", items: { type: "string" } },
+            name: { type: "string" },
+            dynamicWorkflowConfiguration: {
+              $ref: "#/definitions/DynamicWorkflowConfig"
+            },
+            id: { type: "string" },
+            superblocksMetadata: {
+              type: "object",
+              properties: {
+                pluginVersion: { $ref: "#/definitions/SemVer" },
+                syncedFromProfileId: { type: "string" }
+              },
+              additionalProperties: {
+                not: true,
+                errorMessage: "extra property is ${0#}"
+              }
+            }
+          }
+        },
+        redpanda: {
+          type: "object",
+          additionalProperties: {
+            not: true,
+            errorMessage: "extra property is ${0#}"
+          },
+          properties: {
+            bindingFields: { type: "array", items: { type: "string" } },
+            name: { type: "string" },
+            cluster: { $ref: "#/definitions/Cluster" },
+            dynamicWorkflowConfiguration: {
+              $ref: "#/definitions/DynamicWorkflowConfiguration"
+            },
+            superblocksMetadata: {
+              type: "object",
+              properties: {
+                pluginVersion: { type: "string" },
+                syncedFromProfileId: { type: "string" }
+              },
+              additionalProperties: {
+                not: true,
+                errorMessage: "extra property is ${0#}"
+              }
+            }
+          }
+        },
+        redshift: {
+          type: "object",
+          additionalProperties: {
+            not: true,
+            errorMessage: "extra property is ${0#}"
+          },
+          properties: {
+            bindingFields: { type: "array", items: { type: "string" } },
+            connectionType: { type: "string", enum: ["fields", "url"] },
+            connectionUrl: { type: "string" },
+            authentication: {
+              type: "object",
+              properties: {
+                custom: {
+                  type: "object",
+                  properties: {
+                    databaseName: { $ref: "#/definitions/Property" },
+                    databaseSchema: { $ref: "#/definitions/Property" }
+                  },
+                  additionalProperties: {
+                    not: true,
+                    errorMessage: "extra property is ${0#}"
+                  }
+                },
+                username: { type: "string" },
+                password: { type: "string" }
+              },
+              additionalProperties: {
+                not: true,
+                errorMessage: "extra property is ${0#}"
+              }
+            },
+            connection: {
+              type: "object",
+              properties: {
+                useSsl: { type: ["boolean", "string"] },
+                useSelfSignedSsl: { type: ["boolean", "string"] },
+                ca: { type: "string" },
+                key: { type: "string" },
+                cert: { type: "string" },
+                mode: { type: "number", const: 0 }
+              },
+              additionalProperties: {
+                not: true,
+                errorMessage: "extra property is ${0#}"
+              }
+            },
+            endpoint: {
+              type: "object",
+              properties: {
+                host: { type: "string" },
+                port: { type: "number", minimum: 0, maximum: 65536 }
+              },
+              additionalProperties: {
+                not: true,
+                errorMessage: "extra property is ${0#}"
+              }
+            },
+            name: { type: "string" },
+            dynamicWorkflowConfiguration: {
+              $ref: "#/definitions/DynamicWorkflowConfig"
+            },
+            id: { type: "string" },
+            superblocksMetadata: {
+              type: "object",
+              properties: {
+                pluginVersion: { $ref: "#/definitions/SemVer" },
+                syncedFromProfileId: { type: "string" }
+              },
+              additionalProperties: {
+                not: true,
+                errorMessage: "extra property is ${0#}"
+              }
+            }
+          }
+        },
+        restapi: {
+          type: "object",
+          additionalProperties: {
+            not: true,
+            errorMessage: "extra property is ${0#}"
+          },
+          properties: {
+            bindingFields: { type: "array", items: { type: "string" } },
+            urlBase: { type: "string" },
+            AuthCodeExplanation: { type: "string" },
+            FirebaseAlert: { type: "string" },
+            FirebaseAlertToken: { type: "string" },
+            HTTPBasicAlert: { type: "string" },
+            "oauth-callback-alert": { type: "string" },
+            "oauth-connect-button": { type: "string" },
+            "oauth-revoke-shared-tokens-button": { type: "string" },
+            OAuth2PasswordAlert: { type: "string" },
+            openApiSpecRef: { type: "string" },
+            openApiTenantName: { type: "string" },
+            headers: {
+              type: "array",
+              items: { $ref: "#/definitions/Property" }
+            },
+            params: {
+              type: "array",
+              items: { $ref: "#/definitions/Property" }
+            },
+            authConfig: { $ref: "#/definitions/AuthConfig" },
+            authType: { $ref: "#/definitions/AuthType" },
+            name: { type: "string" },
+            dynamicWorkflowConfiguration: {
+              $ref: "#/definitions/DynamicWorkflowConfig"
+            },
+            id: { type: "string" },
+            superblocksMetadata: {
+              type: "object",
+              properties: {
+                pluginVersion: { $ref: "#/definitions/SemVer" },
+                syncedFromProfileId: { type: "string" }
+              },
+              additionalProperties: {
+                not: true,
+                errorMessage: "extra property is ${0#}"
+              }
+            }
+          }
+        },
+        restapiintegration: {
+          type: "object",
+          additionalProperties: {
+            not: true,
+            errorMessage: "extra property is ${0#}"
+          },
+          properties: {
+            bindingFields: { type: "array", items: { type: "string" } },
+            urlBase: { type: "string" },
+            AuthCodeExplanation: { type: "string" },
+            FirebaseAlert: { type: "string" },
+            FirebaseAlertToken: { type: "string" },
+            HTTPBasicAlert: { type: "string" },
+            "oauth-callback-alert": { type: "string" },
+            "oauth-connect-button": { type: "string" },
+            "oauth-revoke-shared-tokens-button": { type: "string" },
+            OAuth2PasswordAlert: { type: "string" },
+            openApiSpecRef: { type: "string" },
+            openApiTenantName: { type: "string" },
+            headers: {
+              type: "array",
+              items: { $ref: "#/definitions/Property" }
+            },
+            params: {
+              type: "array",
+              items: { $ref: "#/definitions/Property" }
+            },
+            authConfig: { $ref: "#/definitions/AuthConfig" },
+            authType: { $ref: "#/definitions/AuthType" },
+            name: { type: "string" },
+            dynamicWorkflowConfiguration: {
+              $ref: "#/definitions/DynamicWorkflowConfig"
+            },
+            id: { type: "string" },
+            superblocksMetadata: {
+              type: "object",
+              properties: {
+                pluginVersion: { $ref: "#/definitions/SemVer" },
+                syncedFromProfileId: { type: "string" }
+              },
+              additionalProperties: {
+                not: true,
+                errorMessage: "extra property is ${0#}"
+              }
+            }
+          }
+        },
+        s3: {
+          type: "object",
+          additionalProperties: {
+            not: true,
+            errorMessage: "extra property is ${0#}"
+          },
+          properties: {
+            bindingFields: { type: "array", items: { type: "string" } },
+            awsAuthType: { $ref: "#/definitions/AWSAuthType" },
+            authentication: {
+              type: "object",
+              properties: {
+                custom: {
+                  type: "object",
+                  properties: {
+                    region: { $ref: "#/definitions/Property" },
+                    accessKeyID: { $ref: "#/definitions/Property" },
+                    secretKey: { $ref: "#/definitions/Property" },
+                    iamRoleArn: { $ref: "#/definitions/Property" }
+                  },
+                  additionalProperties: {
+                    not: true,
+                    errorMessage: "extra property is ${0#}"
+                  }
+                }
+              },
+              additionalProperties: {}
+            },
+            name: { type: "string" },
+            dynamicWorkflowConfiguration: {
+              $ref: "#/definitions/DynamicWorkflowConfig"
+            },
+            id: { type: "string" },
+            superblocksMetadata: {
+              type: "object",
+              properties: {
+                pluginVersion: { $ref: "#/definitions/SemVer" },
+                syncedFromProfileId: { type: "string" }
+              },
+              additionalProperties: {
+                not: true,
+                errorMessage: "extra property is ${0#}"
+              }
+            }
+          }
+        },
+        smtp: {
+          type: "object",
+          additionalProperties: {
+            not: true,
+            errorMessage: "extra property is ${0#}"
+          },
+          properties: {
+            bindingFields: { type: "array", items: { type: "string" } },
+            name: { type: "string" },
+            connection: { $ref: "#/definitions/Plugin_SmtpConnection" },
+            dynamicWorkflowConfiguration: {
+              $ref: "#/definitions/DynamicWorkflowConfiguration"
+            }
+          }
+        },
+        snowflake: {
+          type: "object",
+          additionalProperties: {
+            not: true,
+            errorMessage: "extra property is ${0#}"
+          },
+          properties: {
+            bindingFields: { type: "array", items: { type: "string" } },
+            connectionType: {
+              type: "string",
+              enum: ["fields", "okta", "key-pair", "oauth-token-exchange"]
+            },
+            authTypeField: { type: "string" },
+            okta: {
+              type: "object",
+              properties: { authenticatorUrl: { type: "string" } },
+              additionalProperties: {
+                not: true,
+                errorMessage: "extra property is ${0#}"
+              }
+            },
+            keyPair: {
+              type: "object",
+              properties: {
+                privateKey: { type: "string" },
+                password: { type: "string" }
+              },
+              required: ["privateKey"],
+              additionalProperties: {
+                not: true,
+                errorMessage: "extra property is ${0#}"
+              }
+            },
+            authentication: {
+              type: "object",
+              properties: {
+                username: { type: "string" },
+                password: { type: "string" },
+                custom: {
+                  type: "object",
+                  properties: {
+                    databaseName: { $ref: "#/definitions/Property" },
+                    account: { $ref: "#/definitions/Property" },
+                    warehouse: { $ref: "#/definitions/Property" },
+                    schema: { $ref: "#/definitions/Property" },
+                    role: { $ref: "#/definitions/Property" }
+                  },
+                  additionalProperties: {
+                    not: true,
+                    errorMessage: "extra property is ${0#}"
+                  }
+                }
+              },
+              additionalProperties: {
+                not: true,
+                errorMessage: "extra property is ${0#}"
+              }
+            },
+            connection: {
+              type: "object",
+              properties: {
+                useSsl: { type: ["boolean", "string"] },
+                useSelfSignedSsl: { type: ["boolean", "string"] },
+                ca: { type: "string" },
+                key: { type: "string" },
+                cert: { type: "string" },
+                mode: { type: "number", const: 0 }
+              },
+              additionalProperties: {
+                not: true,
+                errorMessage: "extra property is ${0#}"
+              }
+            },
+            endpoint: {
+              type: "object",
+              properties: {
+                host: { type: "string" },
+                port: { type: "number", minimum: 0, maximum: 65536 }
+              },
+              additionalProperties: {
+                not: true,
+                errorMessage: "extra property is ${0#}"
+              }
+            },
+            name: { type: "string" },
+            dynamicWorkflowConfiguration: {
+              $ref: "#/definitions/DynamicWorkflowConfig"
+            },
+            id: { type: "string" },
+            superblocksMetadata: {
+              type: "object",
+              properties: {
+                pluginVersion: { $ref: "#/definitions/SemVer" },
+                syncedFromProfileId: { type: "string" }
+              },
+              additionalProperties: {
+                not: true,
+                errorMessage: "extra property is ${0#}"
+              }
+            },
+            authConfig: { $ref: "#/definitions/AuthConfig" },
+            authType: { $ref: "#/definitions/AuthType" }
+          }
+        },
+        snowflakecortex: {
+          type: "object",
+          additionalProperties: {
+            not: true,
+            errorMessage: "extra property is ${0#}"
+          },
+          properties: {
+            bindingFields: { type: "array", items: { type: "string" } },
+            urlBase: { type: "string" },
+            AuthCodeExplanation: { type: "string" },
+            FirebaseAlert: { type: "string" },
+            FirebaseAlertToken: { type: "string" },
+            HTTPBasicAlert: { type: "string" },
+            "oauth-callback-alert": { type: "string" },
+            "oauth-connect-button": { type: "string" },
+            "oauth-revoke-shared-tokens-button": { type: "string" },
+            OAuth2PasswordAlert: { type: "string" },
+            openApiSpecRef: { type: "string" },
+            openApiTenantName: { type: "string" },
+            headers: {
+              type: "array",
+              items: { $ref: "#/definitions/Property" }
+            },
+            params: {
+              type: "array",
+              items: { $ref: "#/definitions/Property" }
+            },
+            authConfig: { $ref: "#/definitions/AuthConfig" },
+            authType: { $ref: "#/definitions/AuthType" },
+            name: { type: "string" },
+            dynamicWorkflowConfiguration: {
+              $ref: "#/definitions/DynamicWorkflowConfig"
+            },
+            id: { type: "string" },
+            superblocksMetadata: {
+              type: "object",
+              properties: {
+                pluginVersion: { $ref: "#/definitions/SemVer" },
+                syncedFromProfileId: { type: "string" }
+              },
+              additionalProperties: {
+                not: true,
+                errorMessage: "extra property is ${0#}"
+              }
+            }
+          }
+        },
+        snowflakepostgres: {
+          type: "object",
+          additionalProperties: {
+            not: true,
+            errorMessage: "extra property is ${0#}"
+          },
+          properties: {
+            bindingFields: { type: "array", items: { type: "string" } },
+            name: { type: "string" },
+            connection: {
+              type: "object",
+              properties: {
+                host: { type: "string" },
+                port: { type: "number" },
+                databaseName: { type: "string" },
+                username: { type: "string" },
+                password: { type: "string" },
+                useSelfSignedSsl: { type: "boolean" },
+                ca: { type: "string" },
+                key: { type: "string" },
+                cert: { type: "string" }
+              },
+              additionalProperties: {
+                not: true,
+                errorMessage: "extra property is ${0#}"
+              }
+            },
+            connectionType: { type: "string", enum: ["fields", "url"] },
+            connectionUrl: { type: "string" }
+          }
+        },
+        salesforce: {
+          type: "object",
+          additionalProperties: {
+            not: true,
+            errorMessage: "extra property is ${0#}"
+          },
+          properties: {
+            bindingFields: { type: "array", items: { type: "string" } },
+            name: { type: "string" },
+            connection: {
+              $ref: "#/definitions/Plugin_SalesforceConnection"
+            },
+            authTypeField: { type: "string" },
+            authTypeOnBehalfOfToken: { type: "string" },
+            authConfig: { $ref: "#/definitions/AuthConfig" },
+            authType: { $ref: "#/definitions/AuthType" },
+            dynamicWorkflowConfiguration: {
+              $ref: "#/definitions/DynamicWorkflowConfig"
+            },
+            id: { type: "string" },
+            superblocksMetadata: {
+              type: "object",
+              properties: {
+                pluginVersion: { $ref: "#/definitions/SemVer" },
+                syncedFromProfileId: { type: "string" }
+              },
+              additionalProperties: {
+                not: true,
+                errorMessage: "extra property is ${0#}"
+              }
+            }
+          }
+        },
+        "superblocks-ocr": {
+          type: "object",
+          additionalProperties: {
+            not: true,
+            errorMessage: "extra property is ${0#}"
+          },
+          properties: {
+            bindingFields: { type: "array", items: { type: "string" } },
+            microsoftComputerVisionApiKey: { type: "string" },
+            microsoftComputerVisionResourceBaseUrl: { type: "string" },
+            name: { type: "string" },
+            dynamicWorkflowConfiguration: {
+              $ref: "#/definitions/DynamicWorkflowConfig"
+            },
+            id: { type: "string" },
+            superblocksMetadata: {
+              type: "object",
+              properties: {
+                pluginVersion: { $ref: "#/definitions/SemVer" },
+                syncedFromProfileId: { type: "string" }
+              },
+              additionalProperties: {
+                not: true,
+                errorMessage: "extra property is ${0#}"
+              }
+            }
+          }
+        },
+        workflow: {
+          type: "object",
+          additionalProperties: {
+            not: true,
+            errorMessage: "extra property is ${0#}"
+          },
+          properties: {
+            bindingFields: { type: "array", items: { type: "string" } },
+            name: { type: "string" },
+            dynamicWorkflowConfiguration: {
+              $ref: "#/definitions/DynamicWorkflowConfig"
+            },
+            id: { type: "string" },
+            superblocksMetadata: {
+              type: "object",
+              properties: {
+                pluginVersion: { $ref: "#/definitions/SemVer" },
+                syncedFromProfileId: { type: "string" }
+              },
+              additionalProperties: {
+                not: true,
+                errorMessage: "extra property is ${0#}"
+              }
+            }
+          }
+        },
+        mssql: {
+          type: "object",
+          additionalProperties: {
+            not: true,
+            errorMessage: "extra property is ${0#}"
+          },
+          properties: {
+            bindingFields: { type: "array", items: { type: "string" } },
+            connectionType: { type: "string", enum: ["fields", "url"] },
+            connectionUrl: { type: "string" },
+            authentication: {
+              type: "object",
+              properties: {
+                custom: {
+                  type: "object",
+                  properties: {
+                    databaseName: { $ref: "#/definitions/Property" }
+                  },
+                  additionalProperties: {
+                    not: true,
+                    errorMessage: "extra property is ${0#}"
+                  }
+                },
+                username: { type: "string" },
+                password: { type: "string" }
+              },
+              additionalProperties: {
+                not: true,
+                errorMessage: "extra property is ${0#}"
+              }
+            },
+            connection: {
+              type: "object",
+              properties: {
+                useSsl: { type: ["boolean", "string"] },
+                useSelfSignedSsl: { type: ["boolean", "string"] },
+                ca: { type: "string" },
+                key: { type: "string" },
+                cert: { type: "string" },
+                mode: { type: "number", const: 0 }
+              },
+              additionalProperties: {
+                not: true,
+                errorMessage: "extra property is ${0#}"
+              }
+            },
+            endpoint: {
+              type: "object",
+              properties: {
+                host: { type: "string" },
+                port: { type: "number", minimum: 0, maximum: 65536 }
+              },
+              additionalProperties: {
+                not: true,
+                errorMessage: "extra property is ${0#}"
+              }
+            },
+            name: { type: "string" },
+            dynamicWorkflowConfiguration: {
+              $ref: "#/definitions/DynamicWorkflowConfig"
+            },
+            id: { type: "string" },
+            superblocksMetadata: {
+              type: "object",
+              properties: {
+                pluginVersion: { $ref: "#/definitions/SemVer" },
+                syncedFromProfileId: { type: "string" }
+              },
+              additionalProperties: {
+                not: true,
+                errorMessage: "extra property is ${0#}"
+              }
+            }
+          }
+        },
+        gsheets: {
+          type: "object",
+          additionalProperties: {
+            not: true,
+            errorMessage: "extra property is ${0#}"
+          },
+          properties: {
+            bindingFields: { type: "array", items: { type: "string" } },
+            urlBase: { type: "string" },
+            AuthCodeExplanation: { type: "string" },
+            FirebaseAlert: { type: "string" },
+            FirebaseAlertToken: { type: "string" },
+            HTTPBasicAlert: { type: "string" },
+            "oauth-callback-alert": { type: "string" },
+            "oauth-connect-button": { type: "string" },
+            "oauth-revoke-shared-tokens-button": { type: "string" },
+            OAuth2PasswordAlert: { type: "string" },
+            openApiSpecRef: { type: "string" },
+            openApiTenantName: { type: "string" },
+            headers: {
+              type: "array",
+              items: { $ref: "#/definitions/Property" }
+            },
+            params: {
+              type: "array",
+              items: { $ref: "#/definitions/Property" }
+            },
+            authConfig: { $ref: "#/definitions/AuthConfig" },
+            authType: { $ref: "#/definitions/AuthType" },
+            name: { type: "string" },
+            dynamicWorkflowConfiguration: {
+              $ref: "#/definitions/DynamicWorkflowConfig"
+            },
+            id: { type: "string" },
+            superblocksMetadata: {
+              type: "object",
+              properties: {
+                pluginVersion: { $ref: "#/definitions/SemVer" },
+                syncedFromProfileId: { type: "string" }
+              },
+              additionalProperties: {
+                not: true,
+                errorMessage: "extra property is ${0#}"
+              }
+            }
+          }
+        },
+        kafka: {
+          type: "object",
+          additionalProperties: {
+            not: true,
+            errorMessage: "extra property is ${0#}"
+          },
+          properties: {
+            bindingFields: { type: "array", items: { type: "string" } },
+            name: { type: "string" },
+            cluster: { $ref: "#/definitions/Cluster" },
+            dynamicWorkflowConfiguration: {
+              $ref: "#/definitions/DynamicWorkflowConfiguration"
+            },
+            superblocksMetadata: {
+              type: "object",
+              properties: {
+                pluginVersion: { type: "string" },
+                syncedFromProfileId: { type: "string" }
+              },
+              additionalProperties: {
+                not: true,
+                errorMessage: "extra property is ${0#}"
+              }
+            }
+          }
+        },
+        kinesis: {
+          type: "object",
+          additionalProperties: {
+            not: true,
+            errorMessage: "extra property is ${0#}"
+          },
+          properties: {
+            bindingFields: { type: "array", items: { type: "string" } },
+            name: { type: "string" },
+            connection: { $ref: "#/definitions/Plugin_KinesisConnection" },
+            dynamicWorkflowConfiguration: {
+              $ref: "#/definitions/DynamicWorkflowConfiguration"
+            }
+          }
+        }
+      },
+      additionalProperties: {
+        not: true,
+        errorMessage: "extra property is ${0#}"
+      }
+    },
+    Plugin_AdlsConnection: {
+      type: "object",
+      properties: {
+        accountName: { type: "string" },
+        tenant: { type: "string" },
+        auth: { $ref: "#/definitions/Azure" }
+      },
+      required: ["accountName", "tenant"],
+      additionalProperties: {
+        not: true,
+        errorMessage: "extra property is ${0#}"
+      },
+      description: "We need to repeat that it's Adls because of the schema checker that's built based off of these types. It errors out when there is a duplicate type name."
+    },
+    Azure: {
+      type: "object",
+      properties: {
+        config: {
+          anyOf: [
+            {
+              type: "object",
+              properties: {
+                value: { $ref: "#/definitions/Azure_Key" },
+                case: { type: "string", const: "key" }
+              },
+              required: ["value", "case"],
+              additionalProperties: {
+                not: true,
+                errorMessage: "extra property is ${0#}"
+              }
+            },
+            {
+              type: "object",
+              properties: {
+                value: { $ref: "#/definitions/Azure_ClientCredentials" },
+                case: { type: "string", const: "clientCredentials" }
+              },
+              required: ["value", "case"],
+              additionalProperties: {
+                not: true,
+                errorMessage: "extra property is ${0#}"
+              }
+            },
+            {
+              type: "object",
+              properties: { case: { not: {} }, value: { not: {} } },
+              additionalProperties: {
+                not: true,
+                errorMessage: "extra property is ${0#}"
+              }
+            }
+          ]
+        }
+      },
+      required: ["config"],
+      additionalProperties: {
+        not: true,
+        errorMessage: "extra property is ${0#}"
+      }
+    },
+    Azure_Key: {
+      type: "object",
+      properties: { masterKey: { type: "string" } },
+      required: ["masterKey"],
+      additionalProperties: {
+        not: true,
+        errorMessage: "extra property is ${0#}"
+      }
+    },
+    Azure_ClientCredentials: {
+      type: "object",
+      properties: {
+        clientId: { type: "string" },
+        clientSecret: { type: "string" }
+      },
+      required: ["clientId", "clientSecret"],
+      additionalProperties: {
+        not: true,
+        errorMessage: "extra property is ${0#}"
+      }
+    },
+    DynamicWorkflowConfiguration: {
+      type: "object",
+      properties: {
+        enabled: { type: "boolean" },
+        workflowId: { type: "string" }
+      },
+      additionalProperties: {
+        not: true,
+        errorMessage: "extra property is ${0#}"
+      }
+    },
+    Cluster: {
+      type: "object",
+      properties: {
+        brokers: {
+          type: "string",
+          description: "NOTE(frank): Due to limitations in our plugin template system, we can't use an array....."
+        },
+        ssl: { type: "boolean" },
+        sasl: { $ref: "#/definitions/SASL" }
+      },
+      required: ["brokers", "ssl"],
+      additionalProperties: {
+        not: true,
+        errorMessage: "extra property is ${0#}"
+      }
+    },
+    SASL: {
+      type: "object",
+      properties: {
+        mechanism: { $ref: "#/definitions/SASL_Mechanism" },
+        username: { type: "string", description: "non-aws fields" },
+        password: { type: "string" },
+        accessKeyId: { type: "string", description: "aws fields" },
+        secretKey: { type: "string" },
+        sessionToken: { type: "string" },
+        authorizationIdentity: { type: "string" }
+      },
+      required: ["mechanism"],
+      additionalProperties: {
+        not: true,
+        errorMessage: "extra property is ${0#}"
+      }
+    },
+    SASL_Mechanism: { type: "number", enum: [0, 1, 2, 3, 4] },
+    Connection: {
+      type: "object",
+      properties: {
+        workgroupName: { type: "string" },
+        overrideS3OutputLocation: { type: "boolean" },
+        s3OutputLocation: { type: "string" },
+        s3OutputLocationSuffix: {
+          $ref: "#/definitions/Connection_DateFolderType"
+        },
+        databaseName: { type: "string" },
+        awsConfig: { $ref: "#/definitions/AWSConfig" }
+      },
+      required: ["overrideS3OutputLocation", "databaseName"],
+      additionalProperties: {
+        not: true,
+        errorMessage: "extra property is ${0#}"
+      }
+    },
+    Connection_DateFolderType: { type: "number", enum: [0, 1, 2, 3] },
+    AWSConfig: {
+      type: "object",
+      properties: {
+        region: { type: "string" },
+        auth: { $ref: "#/definitions/AWSConfig_Auth" },
+        endpoint: { type: "string" }
+      },
+      additionalProperties: {
+        not: true,
+        errorMessage: "extra property is ${0#}"
+      }
+    },
+    AWSConfig_Auth: {
+      type: "object",
+      properties: {
+        accessKeyId: { type: "string" },
+        secretKey: { type: "string" },
+        iamRoleArn: { type: "string" }
+      },
+      additionalProperties: {
+        not: true,
+        errorMessage: "extra property is ${0#}"
+      }
+    },
+    Property: {
+      type: "object",
+      properties: {
+        key: { type: "string" },
+        value: { type: "string" },
+        editable: { type: "boolean" },
+        internal: { type: "boolean" },
+        system: { type: "boolean" },
+        description: { type: "string" },
+        mandatory: { type: "boolean" },
+        type: { type: "string" },
+        defaultValue: { type: "string" },
+        minRange: { type: "string" },
+        maxRange: { type: "string" },
+        valueOptions: { type: "array", items: { type: "string" } }
+      },
+      additionalProperties: {
+        not: true,
+        errorMessage: "extra property is ${0#}"
+      }
+    },
+    DynamicWorkflowConfig: {
+      type: "object",
+      properties: {
+        enabled: { type: "boolean" },
+        workflowId: { type: "string" }
+      },
+      additionalProperties: {
+        not: true,
+        errorMessage: "extra property is ${0#}"
+      }
+    },
+    SemVer: { type: "string" },
+    SharedSSHAuthMethod: { type: "number", enum: [0, 1, 2, 3] },
+    SSHAuthMethod: { type: "number", enum: [0, 1, 2, 3, 4] },
+    Plugin_CouchbaseConnection: {
+      type: "object",
+      properties: {
+        user: { type: "string" },
+        password: { type: "string" },
+        url: { type: "string" }
+      },
+      required: ["user", "password", "url"],
+      additionalProperties: {
+        not: true,
+        errorMessage: "extra property is ${0#}"
+      }
+    },
+    SSHConfiguration: {
+      type: "object",
+      properties: {
+        authenticationMethod: { $ref: "#/definitions/SSHAuthMethod" },
+        enabled: { type: "boolean" },
+        host: { type: "string" },
+        passphrase: { type: "string" },
+        password: { type: "string" },
+        port: { type: "number" },
+        privateKey: { type: "string" },
+        publicKey: { type: "string" },
+        username: { type: "string" }
+      },
+      additionalProperties: {
+        not: true,
+        errorMessage: "extra property is ${0#}"
+      }
+    },
+    AuthConfig: {
+      type: "object",
+      additionalProperties: {
+        not: true,
+        errorMessage: "extra property is ${0#}"
+      },
+      properties: {
+        googleServiceAccount: { $ref: "#/definitions/Property" },
+        clientSecret: { type: "string" },
+        usePkce: { type: ["boolean", "string"] },
+        usePkceClientSecret: { type: ["boolean", "string"] },
+        clientId: { type: "string" },
+        authorizationUrl: { type: "string" },
+        authUrl: { type: "string" },
+        userInfoUrl: { type: "string" },
+        tokenUrl: { type: "string" },
+        scope: { type: "string" },
+        audience: { type: "string" },
+        promptType: { type: "string" },
+        refreshTokenFromServer: { type: "boolean" },
+        tokenScope: { $ref: "#/definitions/TokenScope" },
+        revokeTokenUrl: { type: "string" },
+        authToken: { type: "string" },
+        hasToken: { type: "boolean" },
+        userEmail: { type: "string" },
+        sendOAuthState: { type: "boolean" },
+        key: { type: "string" },
+        value: { type: "string" },
+        method: { $ref: "#/definitions/ApiKeyMethod" },
+        apiKeys: {
+          type: "object",
+          additionalProperties: {
+            type: "object",
+            properties: {
+              header: { type: "string" },
+              token: { type: "string" }
+            },
+            additionalProperties: {
+              not: true,
+              errorMessage: "extra property is ${0#}"
+            }
+          }
+        },
+        prefix: { type: "string" },
+        token: { type: "string" },
+        bearerToken: { type: "string" },
+        apiKey: { type: "string" },
+        google: { type: "boolean" },
+        email: { type: "boolean" },
+        subjectTokenSource: { type: "string" },
+        subjectTokenSourceStaticToken: { type: "string" },
+        subjectTokenType: { type: "string" },
+        clientAuthMethod: { $ref: "#/definitions/ClientAuthMethod" },
+        username: { type: "string" },
+        password: { type: "string" },
+        useFixedPasswordCreds: { type: "boolean" },
+        shareBasicAuthCreds: { type: ["boolean", "string"] }
+      }
+    },
+    TokenScope: { type: "string", enum: ["datasource", "user"] },
+    ApiKeyMethod: { type: "string", enum: ["header", "query-param"] },
+    ClientAuthMethod: {
+      type: "string",
+      enum: ["BASIC", "BEARER", "POST"]
+    },
+    AuthType: {
+      anyOf: [
+        { $ref: "#/definitions/IntegrationAuthType" },
+        { $ref: "#/definitions/GoogleSheetsAuthType" },
+        { $ref: "#/definitions/NewAuthType" },
+        { type: "string", enum: ["url", "fields", "okta", "key-pair"] }
+      ]
+    },
+    IntegrationAuthType: {
+      type: "string",
+      enum: [
+        "None",
+        "basic",
+        "oauth-code",
+        "oauth-client-cred",
+        "oauth-implicit",
+        "oauth-pword",
+        "oauth-token-exchange",
+        "oauthTokenExchange",
+        "oauth-idp-token-passthrough",
+        "Firebase",
+        "bearer",
+        "api-key",
+        "token-prefixed",
+        "api-key-form"
+      ]
+    },
+    GoogleSheetsAuthType: {
+      type: "string",
+      enum: ["oauth-code", "service-account"]
+    },
+    NewAuthType: {
+      type: "string",
+      enum: [
+        "passwordGrantFlow",
+        "authorizationCodeFlow",
+        "clientCredentialsFlow",
+        "tokenExchangeFlow"
+      ]
+    },
+    Plugin_DatabricksConnection: {
+      type: "object",
+      properties: {
+        defaultCatalog: { type: "string" },
+        defaultSchema: { type: "string" },
+        hostUrl: { type: "string" },
+        path: { type: "string" },
+        port: { type: "number" },
+        connectionType: { $ref: "#/definitions/Plugin_ConnectionType" },
+        token: { type: "string", description: "PAT" },
+        oauthClientId: { type: "string", description: "M2M" },
+        oauthClientSecret: { type: "string" },
+        scopedCatalogSchemas: {
+          type: "array",
+          items: { $ref: "#/definitions/Plugin_ScopedCatalogSchemas" },
+          description: "Scoped catalog and schemas for metadata filtering"
+        }
+      },
+      required: ["hostUrl", "path", "port", "scopedCatalogSchemas"],
+      additionalProperties: {
+        not: true,
+        errorMessage: "extra property is ${0#}"
+      }
+    },
+    Plugin_ConnectionType: { type: "number", enum: [0, 1, 2, 3] },
+    Plugin_ScopedCatalogSchemas: {
+      type: "object",
+      properties: {
+        catalog: { type: "string" },
+        schemas: { type: "array", items: { type: "string" } }
+      },
+      required: ["catalog", "schemas"],
+      additionalProperties: {
+        not: true,
+        errorMessage: "extra property is ${0#}"
+      }
+    },
+    AWSAuthType: {
+      type: "string",
+      enum: ["access-key", "token-file", "ec2-instance-metadata"]
+    },
+    Plugin_OracleDbConnection: {
+      type: "object",
+      properties: {
+        hostUrl: { type: "string" },
+        port: { type: "number" },
+        user: { type: "string" },
+        password: { type: "string" },
+        databaseService: { type: "string" },
+        useTcps: { type: "boolean" },
+        connectionType: { type: "string" },
+        connectionUrl: { type: "string" }
+      },
+      required: [
+        "hostUrl",
+        "port",
+        "user",
+        "password",
+        "databaseService",
+        "useTcps",
+        "connectionType",
+        "connectionUrl"
+      ],
+      additionalProperties: {
+        not: true,
+        errorMessage: "extra property is ${0#}"
+      }
+    },
+    Plugin_SmtpConnection: {
+      type: "object",
+      properties: {
+        host: { type: "string" },
+        port: { type: "number" },
+        username: { type: "string" },
+        password: { type: "string" },
+        secure: { type: "boolean" }
+      },
+      required: ["host", "port", "username", "password"],
+      additionalProperties: {
+        not: true,
+        errorMessage: "extra property is ${0#}"
+      }
+    },
+    Plugin_SalesforceConnection: {
+      type: "object",
+      properties: {
+        instanceUrl: { type: "string" },
+        auth: { $ref: "#/definitions/Auth" }
+      },
+      required: ["instanceUrl"],
+      additionalProperties: {
+        not: true,
+        errorMessage: "extra property is ${0#}"
+      },
+      description: "children messages"
+    },
+    Auth: {
+      type: "object",
+      properties: {
+        method: {
+          anyOf: [
+            {
+              type: "object",
+              properties: {
+                value: { $ref: "#/definitions/OAuth_PasswordGrantFlow" },
+                case: { type: "string", const: "passwordGrantFlow" }
+              },
+              required: ["value", "case"],
+              additionalProperties: {
+                not: true,
+                errorMessage: "extra property is ${0#}"
+              }
+            },
+            {
+              type: "object",
+              properties: {
+                value: {
+                  $ref: "#/definitions/OAuth_AuthorizationCodeFlow"
+                },
+                case: { type: "string", const: "authorizationCodeFlow" }
+              },
+              required: ["value", "case"],
+              additionalProperties: {
+                not: true,
+                errorMessage: "extra property is ${0#}"
+              }
+            },
+            {
+              type: "object",
+              properties: {
+                value: { $ref: "#/definitions/Basic" },
+                case: { type: "string", const: "basic" }
+              },
+              required: ["value", "case"],
+              additionalProperties: {
+                not: true,
+                errorMessage: "extra property is ${0#}"
+              }
+            },
+            {
+              type: "object",
+              properties: {
+                value: {
+                  $ref: "#/definitions/OAuth_ClientCredentialsFlow"
+                },
+                case: { type: "string", const: "clientCredentialsFlow" }
+              },
+              required: ["value", "case"],
+              additionalProperties: {
+                not: true,
+                errorMessage: "extra property is ${0#}"
+              }
+            },
+            {
+              type: "object",
+              properties: {
+                value: {
+                  $ref: "#/definitions/Azure_Key",
+                  description: "todo: remove me when cosmos updates"
+                },
+                case: { type: "string", const: "key" }
+              },
+              required: ["value", "case"],
+              additionalProperties: {
+                not: true,
+                errorMessage: "extra property is ${0#}"
+              }
+            },
+            {
+              type: "object",
+              properties: {
+                value: {
+                  $ref: "#/definitions/Auth_Nothing",
+                  description: "NOTE:"
+                },
+                case: { type: "string", const: "oauthTokenExchange" }
+              },
+              required: ["value", "case"],
+              additionalProperties: {
+                not: true,
+                errorMessage: "extra property is ${0#}"
+              }
+            },
+            {
+              type: "object",
+              properties: { case: { not: {} }, value: { not: {} } },
+              additionalProperties: {
+                not: true,
+                errorMessage: "extra property is ${0#}"
+              }
+            }
+          ]
+        }
+      },
+      required: ["method"],
+      additionalProperties: {
+        not: true,
+        errorMessage: "extra property is ${0#}"
+      }
+    },
+    OAuth_PasswordGrantFlow: {
+      type: "object",
+      properties: {
+        clientId: { type: "string" },
+        clientSecret: { type: "string" },
+        tokenUrl: { type: "string" },
+        username: { type: "string" },
+        password: { type: "string" },
+        audience: { type: "string" },
+        scope: { type: "string" }
+      },
+      required: [
+        "clientId",
+        "clientSecret",
+        "tokenUrl",
+        "username",
+        "password",
+        "audience",
+        "scope"
+      ],
+      additionalProperties: {
+        not: true,
+        errorMessage: "extra property is ${0#}"
+      }
+    },
+    OAuth_AuthorizationCodeFlow: {
+      type: "object",
+      properties: {
+        clientId: { type: "string" },
+        clientSecret: { type: "string" },
+        tokenUrl: { type: "string" },
+        authUrl: { type: "string" },
+        audience: { type: "string" },
+        scope: { type: "string" },
+        tokenScope: { type: "string" },
+        refreshTokenFromServer: { type: "boolean" },
+        clientAuthMethod: { type: "string" },
+        subjectTokenSource: {
+          $ref: "#/definitions/OAuth_AuthorizationCodeFlow_SubjectTokenSource"
+        },
+        subjectTokenSourceStaticToken: { type: "string" },
+        subjectTokenType: { type: "string" },
+        workforcePoolId: { type: "string" },
+        workforceProviderId: { type: "string" },
+        billingProjectNumber: { type: "string" },
+        projectId: { type: "string" }
+      },
+      required: [
+        "clientId",
+        "clientSecret",
+        "tokenUrl",
+        "authUrl",
+        "audience",
+        "scope",
+        "tokenScope",
+        "refreshTokenFromServer",
+        "clientAuthMethod",
+        "subjectTokenSource",
+        "subjectTokenSourceStaticToken",
+        "subjectTokenType",
+        "workforcePoolId",
+        "workforceProviderId",
+        "billingProjectNumber",
+        "projectId"
+      ],
+      additionalProperties: {
+        not: true,
+        errorMessage: "extra property is ${0#}"
+      }
+    },
+    OAuth_AuthorizationCodeFlow_SubjectTokenSource: {
+      type: "number",
+      enum: [0, 1, 2]
+    },
+    Basic: {
+      type: "object",
+      properties: {
+        username: { type: "string" },
+        password: { type: "string" }
+      },
+      required: ["username", "password"],
+      additionalProperties: {
+        not: true,
+        errorMessage: "extra property is ${0#}"
+      }
+    },
+    OAuth_ClientCredentialsFlow: {
+      type: "object",
+      properties: {
+        clientId: { type: "string" },
+        clientSecret: { type: "string" },
+        tokenUrl: { type: "string" },
+        audience: { type: "string" },
+        scope: { type: "string" }
+      },
+      required: ["clientId", "clientSecret", "tokenUrl", "audience", "scope"],
+      additionalProperties: {
+        not: true,
+        errorMessage: "extra property is ${0#}"
+      }
+    },
+    Auth_Nothing: {
+      type: "object",
+      additionalProperties: {
+        not: true,
+        errorMessage: "extra property is ${0#}"
+      },
+      properties: {}
+    },
+    Plugin_KinesisConnection: {
+      type: "object",
+      properties: { awsConfig: { $ref: "#/definitions/AWSConfig" } },
+      additionalProperties: {
+        not: true,
+        errorMessage: "extra property is ${0#}"
+      }
+    }
+  }
+};
+
+// ../mcp-server/dist/tools/plugin-configuration-schema.js
+var STEP_ONLY_PLUGIN_IDS = /* @__PURE__ */ new Set([
+  "graphql",
+  "javascript",
+  "python",
+  "restapi",
+  "workflow"
+]);
+function isRecord(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function pluginProperties() {
+  const definitions = datasource_configuration_by_type_schema_default.definitions;
+  if (!isRecord(definitions)) {
+    return {};
+  }
+  const byType = definitions.DatasourceConfigurationByType;
+  if (!isRecord(byType) || !isRecord(byType.properties)) {
+    return {};
+  }
+  return byType.properties;
+}
+function listPluginIds() {
+  return Object.keys(pluginProperties()).filter((pluginId) => !STEP_ONLY_PLUGIN_IDS.has(pluginId)).sort();
+}
+var DEFINITION_REF_PREFIX = "#/definitions/";
+function collectRefs(value, found) {
+  if (Array.isArray(value)) {
+    for (const item of value) {
+      collectRefs(item, found);
+    }
+    return;
+  }
+  if (!isRecord(value)) {
+    return;
+  }
+  for (const [key, child] of Object.entries(value)) {
+    if (key === "$ref" && typeof child === "string" && child.startsWith(DEFINITION_REF_PREFIX)) {
+      found.add(child.slice(DEFINITION_REF_PREFIX.length));
+      continue;
+    }
+    collectRefs(child, found);
+  }
+}
+function reachableDefinitions(pluginSchema, allDefinitions) {
+  const needed = /* @__PURE__ */ new Set();
+  collectRefs(pluginSchema, needed);
+  const pending = [...needed];
+  while (pending.length > 0) {
+    const name = pending.pop();
+    const nested = /* @__PURE__ */ new Set();
+    collectRefs(allDefinitions[name], nested);
+    for (const ref of nested) {
+      if (!needed.has(ref)) {
+        needed.add(ref);
+        pending.push(ref);
+      }
+    }
+  }
+  const pruned = {};
+  for (const name of [...needed].sort()) {
+    if (name in allDefinitions) {
+      pruned[name] = allDefinitions[name];
+    }
+  }
+  return pruned;
+}
+function getPluginConfigurationSchema(pluginId) {
+  const pluginSchema = pluginProperties()[pluginId];
+  if (!isRecord(pluginSchema) || STEP_ONLY_PLUGIN_IDS.has(pluginId)) {
+    throw new McpError(ErrorCode.InvalidParams, `Unknown plugin_id "${pluginId}". Known plugin ids: ${listPluginIds().join(", ")}.`);
+  }
+  const definitions = isRecord(datasource_configuration_by_type_schema_default.definitions) ? datasource_configuration_by_type_schema_default.definitions : {};
+  return {
+    $schema: "http://json-schema.org/draft-07/schema#",
+    ...pluginSchema,
+    definitions: reachableDefinitions(pluginSchema, definitions)
+  };
+}
+
+// ../mcp-server/dist/tools/schemas.js
 var APP_URL_PROPERTY = {
   format: "uri",
   type: "string"
@@ -2312,6 +5026,18 @@ var LIMIT_PROPERTY = {
   maximum: 200,
   type: "integer"
 };
+var REVIEW_POLICY_RUNS_LIMIT_PROPERTY = {
+  description: `Maximum number of items to return per page. Defaults to ${import_shared2.DEFAULT_REVIEW_POLICY_RUNS_LIMIT}. Maximum ${import_shared2.MAX_REVIEW_POLICY_RUNS_LIMIT}.`,
+  exclusiveMinimum: 0,
+  maximum: import_shared2.MAX_REVIEW_POLICY_RUNS_LIMIT,
+  type: "integer"
+};
+var REVIEW_POLICY_RUN_FINDINGS_LIMIT_PROPERTY = {
+  description: `Maximum number of items to return per page. Defaults to ${import_shared2.DEFAULT_REVIEW_POLICY_RUN_FINDINGS_LIMIT}. Maximum ${import_shared2.MAX_REVIEW_POLICY_RUN_FINDINGS_LIMIT}.`,
+  exclusiveMinimum: 0,
+  maximum: import_shared2.MAX_REVIEW_POLICY_RUN_FINDINGS_LIMIT,
+  type: "integer"
+};
 var OFFSET_PROPERTY = {
   description: "Number of items to skip before returning results. Defaults to 0.",
   minimum: 0,
@@ -2453,6 +5179,11 @@ var INTEGRATION_KIND_PROPERTY = {
   items: { type: "string" },
   type: "array"
 };
+var PLUGIN_ID_NAME_PROPERTY = {
+  description: "Plugin type id (for example restapiintegration, postgres, snowflake).",
+  minLength: 1,
+  type: "string"
+};
 var ASSIGNMENT_RECORD_ID_PROPERTY = {
   description: "Assignment record ID from RBAC assignments API.",
   format: "uuid",
@@ -2481,6 +5212,16 @@ var OBJECT_PAYLOAD_PROPERTY = {
   description: "Integration payload object sent directly to the integrations API. Include fields required by the target integration type.",
   type: "object"
 };
+var INTEGRATION_CONFIGURATION_PROPERTY = {
+  additionalProperties: true,
+  description: "Plugin configuration fields from get_integration_config_schema. Do not include id, created, integrationId, or bindingFields.",
+  type: "object"
+};
+var INTEGRATION_CREATE_KIND_PROPERTY = {
+  description: "Integration kind. Defaults to PLUGIN.",
+  enum: ["PLUGIN", "SECRET"],
+  type: "string"
+};
 var IS_DEPLOYED_PROPERTY = {
   description: "Filter by deploy status (true = deployed, false = not deployed).",
   type: "boolean"
@@ -2651,13 +5392,36 @@ var findAppsByIntegrationToolInputSchema = {
   required: ["base_url", "integration_id"],
   type: "object"
 };
+var getIntegrationConfigSchemaToolInputSchema = {
+  additionalProperties: false,
+  properties: {
+    base_url: BASE_URL_PROPERTY,
+    // Enumerated here but not on create_integration: this tool can only answer
+    // for plugins the schema models, while creation also accepts secret stores
+    // and proto-backed plugins that it omits.
+    plugin_id: {
+      ...PLUGIN_ID_NAME_PROPERTY,
+      enum: listPluginIds()
+    }
+  },
+  required: ["plugin_id"],
+  type: "object"
+};
 var createIntegrationToolInputSchema = {
   additionalProperties: false,
   properties: {
     base_url: BASE_URL_PROPERTY,
-    payload: OBJECT_PAYLOAD_PROPERTY
+    configuration: INTEGRATION_CONFIGURATION_PROPERTY,
+    kind: INTEGRATION_CREATE_KIND_PROPERTY,
+    name: NAME_PROPERTY,
+    plugin_id: PLUGIN_ID_NAME_PROPERTY,
+    slug: {
+      description: "Optional integration slug.",
+      minLength: 1,
+      type: "string"
+    }
   },
-  required: ["base_url", "payload"],
+  required: ["base_url", "configuration", "name", "plugin_id"],
   type: "object"
 };
 var updateIntegrationToolInputSchema = {
@@ -3069,165 +5833,415 @@ var getAppSbomToolInputSchema = {
       type: "string"
     }
   },
-  required: ["base_url", "application_id"],
+  required: ["base_url", "application_id"],
+  type: "object"
+};
+var listDistinctPackagesInOrgToolInputSchema = {
+  additionalProperties: false,
+  properties: {
+    base_url: BASE_URL_PROPERTY,
+    package_name_prefix: {
+      description: "Case-sensitive prefix match on package_name. '%' and '_' are treated as literal characters.",
+      minLength: 1,
+      type: "string"
+    },
+    dependency_source: {
+      description: "Filter by dependency source: 'root' (root package.json), 'direct' (any non-transitive), 'transitive' (lockfile-only).",
+      enum: ["root", "direct", "transitive"],
+      type: "string"
+    },
+    include_transitive: {
+      description: "When false, excludes transitive (lockfile-only) dependencies. Defaults to true.",
+      type: "boolean"
+    },
+    deployed: {
+      description: "Optional deploy filter. true = only the currently-deployed commit, false = only non-deployed commits, omitted = all indexed commits.",
+      type: "boolean"
+    },
+    limit: {
+      maximum: 200,
+      minimum: 1,
+      type: "integer"
+    },
+    offset: {
+      minimum: 0,
+      type: "integer"
+    }
+  },
+  required: ["base_url"],
+  type: "object"
+};
+var ENTITY_SCOPE_PROPERTY = {
+  description: "Scope of the knowledge entry: org, user, or integration.",
+  enum: ["org", "user", "integration"],
+  type: "string"
+};
+var ACCESS_TYPE_PROPERTY = {
+  description: "Access type: always_inject (core memory) or on_demand (skills).",
+  enum: ["always_inject", "on_demand"],
+  type: "string"
+};
+var IS_ENABLED_PROPERTY = {
+  description: "Filter by enabled status.",
+  type: "boolean"
+};
+var SEARCH_PROPERTY = {
+  description: "Search by name or description substring.",
+  minLength: 1,
+  type: "string"
+};
+var SORT_BY_PROPERTY = {
+  description: "Sort field.",
+  enum: ["name", "created_at", "updated_at"],
+  type: "string"
+};
+var SORT_ORDER_PROPERTY = {
+  description: "Sort direction.",
+  enum: ["asc", "desc"],
+  type: "string"
+};
+var KNOWLEDGE_ID_PROPERTY = {
+  description: "The ID of the knowledge entry.",
+  format: "uuid",
+  type: "string"
+};
+var listKnowledgeToolInputSchema = {
+  additionalProperties: false,
+  properties: {
+    base_url: BASE_URL_PROPERTY,
+    entity_scope: ENTITY_SCOPE_PROPERTY,
+    entity_id: {
+      ...ENTITY_ID_PROPERTY,
+      description: "Filter by entity ID (requires entity_scope)."
+    },
+    access_type: ACCESS_TYPE_PROPERTY,
+    is_enabled: IS_ENABLED_PROPERTY,
+    search: SEARCH_PROPERTY,
+    limit: LIMIT_PROPERTY,
+    offset: OFFSET_PROPERTY,
+    sort_by: SORT_BY_PROPERTY,
+    sort_order: SORT_ORDER_PROPERTY
+  },
+  required: ["base_url"],
+  type: "object"
+};
+var getKnowledgeToolInputSchema = {
+  additionalProperties: false,
+  properties: {
+    base_url: BASE_URL_PROPERTY,
+    knowledge_id: KNOWLEDGE_ID_PROPERTY
+  },
+  required: ["base_url", "knowledge_id"],
+  type: "object"
+};
+var ROLE_ID_PROPERTY = {
+  description: "Role ID (UUID) of the org-level role to assign. Use list_roles with type='org' to find available role IDs.",
+  format: "uuid",
+  pattern: "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$",
+  type: "string"
+};
+var GROUP_ID_PROPERTY = {
+  description: "Group ID (UUID). Use the group management tools to find group IDs.",
+  format: "uuid",
+  pattern: "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$",
+  type: "string"
+};
+var updateUserOrgRoleToolInputSchema = {
+  additionalProperties: false,
+  properties: {
+    base_url: BASE_URL_PROPERTY,
+    user_id: USER_ID_PROPERTY,
+    role_id: ROLE_ID_PROPERTY,
+    organization_id: ORGANIZATION_ID_OPTIONAL_PROPERTY
+  },
+  required: ["base_url", "user_id", "role_id"],
+  type: "object"
+};
+var updateGroupOrgRoleToolInputSchema = {
+  additionalProperties: false,
+  properties: {
+    base_url: BASE_URL_PROPERTY,
+    group_id: GROUP_ID_PROPERTY,
+    role_id: ROLE_ID_PROPERTY,
+    organization_id: ORGANIZATION_ID_OPTIONAL_PROPERTY
+  },
+  required: ["base_url", "group_id", "role_id"],
+  type: "object"
+};
+var deleteGroupOrgRoleToolInputSchema = {
+  additionalProperties: false,
+  properties: {
+    base_url: BASE_URL_PROPERTY,
+    group_id: GROUP_ID_PROPERTY,
+    assignment_record_id: ASSIGNMENT_RECORD_ID_PROPERTY,
+    organization_id: ORGANIZATION_ID_OPTIONAL_PROPERTY
+  },
+  required: ["base_url", "group_id", "assignment_record_id"],
+  type: "object"
+};
+var REASON_PROPERTY = {
+  description: "Optional reason for the action. Echoed in the tool response for the caller's own logging; not persisted server-side.",
+  minLength: 1,
+  type: "string"
+};
+var deactivateUserToolInputSchema = {
+  additionalProperties: false,
+  properties: {
+    base_url: BASE_URL_PROPERTY,
+    user_id: USER_ID_PROPERTY,
+    reason: REASON_PROPERTY
+  },
+  required: ["base_url", "user_id"],
+  type: "object"
+};
+var POLICY_ID_PROPERTY = {
+  format: "uuid",
+  pattern: "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$",
+  type: "string"
+};
+var RUN_ID_PROPERTY = {
+  format: "uuid",
+  pattern: "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$",
+  type: "string"
+};
+var DEPENDENCY_SCAN_SEVERITY_PROPERTY = {
+  description: "Filter by one or more dependency severity levels.",
+  items: {
+    enum: ["none", "low", "medium", "high", "critical", "unknown"],
+    type: "string"
+  },
+  minItems: 1,
+  type: "array"
+};
+var DEPENDENCY_SCAN_DATE_FILTER_PROPERTY = {
+  enum: ["all", "none", "today", "-7d", "-30d", "ytd"],
+  type: "string"
+};
+var REVIEW_FINDING_SEVERITY_ARRAY_PROPERTY = {
+  description: "Filter by one or more finding severity levels.",
+  items: {
+    enum: ["critical", "high", "medium", "low", "info"],
+    type: "string"
+  },
+  minItems: 1,
+  type: "array"
+};
+var ORDER_PROPERTY = {
+  enum: ["asc", "desc"],
+  type: "string"
+};
+var listDependencyScanFindingsToolInputSchema = {
+  additionalProperties: false,
+  properties: {
+    base_url: BASE_URL_PROPERTY,
+    application_id: APPLICATION_ID_PROPERTY,
+    search: {
+      description: "Free-text search over package/app name.",
+      minLength: 1,
+      type: "string"
+    },
+    severity: DEPENDENCY_SCAN_SEVERITY_PROPERTY,
+    hide_apps_without_vulns: {
+      description: "Defaults to true: only return apps with active vulnerabilities. Set false to include apps with none.",
+      type: "boolean"
+    },
+    published: {
+      description: "Filter by last-published date window.",
+      ...DEPENDENCY_SCAN_DATE_FILTER_PROPERTY
+    },
+    updated: {
+      description: "Filter by last-updated date window.",
+      ...DEPENDENCY_SCAN_DATE_FILTER_PROPERTY
+    },
+    sort: {
+      enum: ["severity", "last_updated", "last_published"],
+      type: "string"
+    },
+    order: ORDER_PROPERTY,
+    limit: {
+      description: "Maximum number of items to return per page. Defaults to 25. Maximum 50.",
+      maximum: 50,
+      minimum: 1,
+      type: "integer"
+    },
+    offset: OFFSET_PROPERTY
+  },
+  required: ["base_url"],
+  type: "object"
+};
+var getDependencyScanSummaryToolInputSchema = {
+  additionalProperties: false,
+  properties: {
+    base_url: BASE_URL_PROPERTY
+  },
+  required: ["base_url"],
+  type: "object"
+};
+var lookupPackageVulnerabilitiesToolInputSchema = {
+  additionalProperties: false,
+  properties: {
+    base_url: BASE_URL_PROPERTY,
+    packages: {
+      description: "Batch of npm packages to check, each an object with 'name' and 'version'.",
+      items: {
+        additionalProperties: false,
+        properties: {
+          name: { maxLength: 256, minLength: 1, type: "string" },
+          version: { maxLength: 256, minLength: 1, type: "string" }
+        },
+        required: ["name", "version"],
+        type: "object"
+      },
+      maxItems: 5e3,
+      minItems: 1,
+      type: "array"
+    }
+  },
+  required: ["base_url", "packages"],
+  type: "object"
+};
+var listReviewPoliciesToolInputSchema = {
+  additionalProperties: false,
+  properties: {
+    base_url: BASE_URL_PROPERTY
+  },
+  required: ["base_url"],
   type: "object"
 };
-var listDistinctPackagesInOrgToolInputSchema = {
+var getReviewPolicySummaryToolInputSchema = {
   additionalProperties: false,
   properties: {
     base_url: BASE_URL_PROPERTY,
-    package_name_prefix: {
-      description: "Case-sensitive prefix match on package_name. '%' and '_' are treated as literal characters.",
-      minLength: 1,
-      type: "string"
-    },
-    dependency_source: {
-      description: "Filter by dependency source: 'root' (root package.json), 'direct' (any non-transitive), 'transitive' (lockfile-only).",
-      enum: ["root", "direct", "transitive"],
+    window: {
+      description: `Summary time window. Defaults to ${import_shared2.DEFAULT_REVIEW_POLICY_SUMMARY_WINDOW}.`,
+      enum: ["24h", "7d", "30d"],
       type: "string"
-    },
-    include_transitive: {
-      description: "When false, excludes transitive (lockfile-only) dependencies. Defaults to true.",
-      type: "boolean"
-    },
-    deployed: {
-      description: "Optional deploy filter. true = only the currently-deployed commit, false = only non-deployed commits, omitted = all indexed commits.",
-      type: "boolean"
-    },
-    limit: {
-      maximum: 200,
-      minimum: 1,
-      type: "integer"
-    },
-    offset: {
-      minimum: 0,
-      type: "integer"
     }
   },
   required: ["base_url"],
   type: "object"
 };
-var ENTITY_SCOPE_PROPERTY = {
-  description: "Scope of the knowledge entry: org, user, or integration.",
-  enum: ["org", "user", "integration"],
-  type: "string"
-};
-var ACCESS_TYPE_PROPERTY = {
-  description: "Access type: always_inject (core memory) or on_demand (skills).",
-  enum: ["always_inject", "on_demand"],
-  type: "string"
-};
-var IS_ENABLED_PROPERTY = {
-  description: "Filter by enabled status.",
-  type: "boolean"
-};
-var SEARCH_PROPERTY = {
-  description: "Search by name or description substring.",
-  minLength: 1,
-  type: "string"
-};
-var SORT_BY_PROPERTY = {
-  description: "Sort field.",
-  enum: ["name", "created_at", "updated_at"],
-  type: "string"
-};
-var SORT_ORDER_PROPERTY = {
-  description: "Sort direction.",
-  enum: ["asc", "desc"],
-  type: "string"
-};
-var KNOWLEDGE_ID_PROPERTY = {
-  description: "The ID of the knowledge entry.",
-  format: "uuid",
-  type: "string"
-};
-var listKnowledgeToolInputSchema = {
+var getReviewPolicyToolInputSchema = {
   additionalProperties: false,
   properties: {
     base_url: BASE_URL_PROPERTY,
-    entity_scope: ENTITY_SCOPE_PROPERTY,
-    entity_id: {
-      ...ENTITY_ID_PROPERTY,
-      description: "Filter by entity ID (requires entity_scope)."
-    },
-    access_type: ACCESS_TYPE_PROPERTY,
-    is_enabled: IS_ENABLED_PROPERTY,
-    search: SEARCH_PROPERTY,
-    limit: LIMIT_PROPERTY,
-    offset: OFFSET_PROPERTY,
-    sort_by: SORT_BY_PROPERTY,
-    sort_order: SORT_ORDER_PROPERTY
+    policy_id: POLICY_ID_PROPERTY
   },
-  required: ["base_url"],
+  required: ["base_url", "policy_id"],
   type: "object"
 };
-var getKnowledgeToolInputSchema = {
+var listReviewPolicyRunsToolInputSchema = {
   additionalProperties: false,
   properties: {
     base_url: BASE_URL_PROPERTY,
-    knowledge_id: KNOWLEDGE_ID_PROPERTY
+    policy_id: {
+      description: "When provided, scopes results to runs of this policy. Omit for org-wide runs across every policy.",
+      ...POLICY_ID_PROPERTY
+    },
+    application_id: APPLICATION_ID_PROPERTY,
+    status: {
+      enum: [
+        "queued",
+        "running",
+        "passed",
+        "findings",
+        "blocked",
+        "errored",
+        "timed_out",
+        "canceled",
+        "stale"
+      ],
+      type: "string"
+    },
+    search: { maxLength: import_shared2.REVIEW_POLICY_NAME_MAX_LENGTH, type: "string" },
+    sort: {
+      enum: ["applicationName", "findingsCount", "startedAt", "status"],
+      type: "string"
+    },
+    order: ORDER_PROPERTY,
+    time_start: {
+      description: "Must be provided together with time_end, and no later than it.",
+      format: "date-time",
+      type: "string"
+    },
+    time_end: {
+      description: "Must be provided together with time_start, and no earlier than it.",
+      format: "date-time",
+      type: "string"
+    },
+    triggered_by: {
+      description: "Filter by one or more trigger sources.",
+      items: { enum: ["system", "user"], type: "string" },
+      minItems: 1,
+      type: "array"
+    },
+    triggering_user_ids: {
+      description: "Filter by one or more triggering user IDs.",
+      items: { format: "uuid", type: "string" },
+      minItems: 1,
+      type: "array"
+    },
+    limit: REVIEW_POLICY_RUNS_LIMIT_PROPERTY,
+    offset: OFFSET_PROPERTY
   },
-  required: ["base_url", "knowledge_id"],
+  required: ["base_url"],
   type: "object"
 };
-var ROLE_ID_PROPERTY = {
-  description: "Role ID (UUID) of the org-level role to assign. Use list_roles with type='org' to find available role IDs.",
-  format: "uuid",
-  pattern: "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$",
-  type: "string"
-};
-var GROUP_ID_PROPERTY = {
-  description: "Group ID (UUID). Use the group management tools to find group IDs.",
-  format: "uuid",
-  pattern: "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$",
-  type: "string"
-};
-var updateUserOrgRoleToolInputSchema = {
+var getReviewPolicyRunReportToolInputSchema = {
   additionalProperties: false,
   properties: {
     base_url: BASE_URL_PROPERTY,
-    user_id: USER_ID_PROPERTY,
-    role_id: ROLE_ID_PROPERTY,
-    organization_id: ORGANIZATION_ID_OPTIONAL_PROPERTY
+    policy_id: POLICY_ID_PROPERTY,
+    run_id: RUN_ID_PROPERTY,
+    severity: REVIEW_FINDING_SEVERITY_ARRAY_PROPERTY,
+    order: ORDER_PROPERTY,
+    limit: REVIEW_POLICY_RUN_FINDINGS_LIMIT_PROPERTY,
+    offset: OFFSET_PROPERTY
   },
-  required: ["base_url", "user_id", "role_id"],
+  required: ["base_url", "policy_id", "run_id"],
   type: "object"
 };
-var updateGroupOrgRoleToolInputSchema = {
+var getApplicationPolicyRunFindingsToolInputSchema = {
   additionalProperties: false,
   properties: {
     base_url: BASE_URL_PROPERTY,
-    group_id: GROUP_ID_PROPERTY,
-    role_id: ROLE_ID_PROPERTY,
-    organization_id: ORGANIZATION_ID_OPTIONAL_PROPERTY
+    application_id: APPLICATION_ID_PROPERTY,
+    run_id: RUN_ID_PROPERTY,
+    policy_id: POLICY_ID_PROPERTY,
+    severity: REVIEW_FINDING_SEVERITY_ARRAY_PROPERTY,
+    order: ORDER_PROPERTY,
+    limit: REVIEW_POLICY_RUN_FINDINGS_LIMIT_PROPERTY,
+    offset: OFFSET_PROPERTY
   },
-  required: ["base_url", "group_id", "role_id"],
+  required: ["base_url", "application_id", "run_id", "policy_id"],
   type: "object"
 };
-var deleteGroupOrgRoleToolInputSchema = {
+var getApplicationPublishReadinessToolInputSchema = {
   additionalProperties: false,
   properties: {
     base_url: BASE_URL_PROPERTY,
-    group_id: GROUP_ID_PROPERTY,
-    assignment_record_id: ASSIGNMENT_RECORD_ID_PROPERTY,
-    organization_id: ORGANIZATION_ID_OPTIONAL_PROPERTY
+    application_id: APPLICATION_ID_PROPERTY,
+    commit_id: {
+      description: "The application commit ID to check readiness for.",
+      minLength: 1,
+      type: "string"
+    }
   },
-  required: ["base_url", "group_id", "assignment_record_id"],
+  required: ["base_url", "application_id", "commit_id"],
   type: "object"
 };
-var REASON_PROPERTY = {
-  description: "Optional reason for the action. Echoed in the tool response for the caller's own logging; not persisted server-side.",
-  minLength: 1,
-  type: "string"
-};
-var deactivateUserToolInputSchema = {
+var getApplicationPublishPipelineToolInputSchema = {
   additionalProperties: false,
   properties: {
     base_url: BASE_URL_PROPERTY,
-    user_id: USER_ID_PROPERTY,
-    reason: REASON_PROPERTY
+    application_id: APPLICATION_ID_PROPERTY,
+    commit_id: {
+      description: "The application commit ID to compute the publish plan for.",
+      minLength: 1,
+      type: "string"
+    }
   },
-  required: ["base_url", "user_id"],
+  required: ["base_url", "application_id", "commit_id"],
   type: "object"
 };
 
@@ -3529,7 +6543,7 @@ var updateOrgBillingUsageLimit = {
 
 // ../mcp-server/dist/tools/checkout-application.js
 init_cjs_shims();
-var import_shared2 = __toESM(require_dist());
+var import_shared3 = __toESM(require_dist());
 
 // ../mcp-server/dist/application/materialize-application.js
 init_cjs_shims();
@@ -3735,7 +6749,7 @@ var checkoutApplication = {
     const application = await sdk.fetchApplicationWithComponents({
       applicationId: target.applicationId,
       branch: target.branch,
-      viewMode: commitId ? import_shared2.ExportViewMode.EXPORT_COMMIT : import_shared2.ExportViewMode.EXPORT_LIVE,
+      viewMode: commitId ? import_shared3.ExportViewMode.EXPORT_COMMIT : import_shared3.ExportViewMode.EXPORT_LIVE,
       commitId
     });
     if (!application) {
@@ -3803,14 +6817,53 @@ var createFolder = {
 
 // ../mcp-server/dist/tools/create-integration.js
 init_cjs_shims();
+import { randomUUID } from "node:crypto";
+var import_shared4 = __toESM(require_dist());
 var createIntegrationInputSchema = external_exports.object({
   base_url: external_exports.string().url(),
-  payload: external_exports.record(external_exports.string(), external_exports.unknown())
+  configuration: external_exports.record(external_exports.string(), external_exports.unknown()),
+  kind: external_exports.enum(["PLUGIN", "SECRET"]).optional(),
+  name: external_exports.string().trim().min(1),
+  plugin_id: external_exports.string().trim().min(1),
+  slug: external_exports.string().trim().min(1).optional()
 }).strict();
+function buildCreateIntegrationPayload(input) {
+  const id = randomUUID();
+  const configurationId = randomUUID();
+  return {
+    configurations: [
+      {
+        configuration: input.configuration,
+        created: (/* @__PURE__ */ new Date()).toISOString(),
+        id: configurationId,
+        integrationId: id,
+        isDefault: true
+      }
+    ],
+    id,
+    kind: input.kind ?? import_shared4.IntegrationKind.PLUGIN,
+    name: input.name,
+    pluginId: input.plugin_id,
+    ...input.slug ? { slug: input.slug } : {}
+  };
+}
+function integrationPageUrl(baseUrl, integration) {
+  if (detectEnvironment(baseUrl) === "local") {
+    return void 0;
+  }
+  if (typeof integration !== "object" || integration === null) {
+    return void 0;
+  }
+  const { id, pluginId } = integration;
+  if (typeof id !== "string" || typeof pluginId !== "string") {
+    return void 0;
+  }
+  return `${baseUrl}/integrations/${pluginId}/${id}`;
+}
 var createIntegration = {
   name: "create_integration",
   title: "Create Integration",
-  description: "Create a new integration. Pass the integration payload expected by the integrations API.",
+  description: "Create a new integration. Call get_integration_config_schema first for the plugin_id, then pass name, plugin_id, and configuration. Do not send the integrations API envelope (id, created, configurations wrapper). When the result carries integration_url, show it so the user can open the new integration.",
   inputSchema: createIntegrationToolInputSchema,
   annotations: {
     readOnlyHint: false,
@@ -3824,9 +6877,11 @@ var createIntegration = {
     const baseUrl = normalizeBaseUrl(input.base_url);
     const auth = await resolveAuthForOrigin(baseUrl);
     const sdk = createSdk(auth.token, baseUrl);
-    const integration = await sdk.createIntegration(input.payload);
+    const integration = await sdk.createIntegration(buildCreateIntegrationPayload(input));
+    const integrationUrl = integrationPageUrl(baseUrl, integration);
     return {
       integration,
+      ...integrationUrl ? { integration_url: integrationUrl } : {},
       auth_source: auth.source,
       base_url: baseUrl,
       environment: detectEnvironment(baseUrl)
@@ -4035,7 +7090,7 @@ var deleteIntegration = {
 
 // ../mcp-server/dist/tools/deploy-application.js
 init_cjs_shims();
-var import_shared3 = __toESM(require_dist());
+var import_shared5 = __toESM(require_dist());
 var copiedCommitSchema = external_exports.object({
   commitId: external_exports.string().min(1)
 });
@@ -4111,7 +7166,7 @@ var deployApplication = {
       const commitHistory = await sdk.fetchApplicationCommits({
         applicationId: target.applicationId,
         branch: branchToDeploy,
-        commitType: import_shared3.CommitType.ALL,
+        commitType: import_shared5.CommitType.ALL,
         limit: HISTORY_PAGE_SIZE,
         offset: 0
       });
@@ -4433,7 +7488,7 @@ var getApplicationAccess = {
 
 // ../mcp-server/dist/tools/get-application-commit-history.js
 init_cjs_shims();
-var import_shared4 = __toESM(require_dist());
+var import_shared6 = __toESM(require_dist());
 
 // ../mcp-server/dist/application/commit-history.js
 init_cjs_shims();
@@ -4494,7 +7549,7 @@ var getApplicationCommitHistory = {
     const response = await sdk.fetchApplicationCommits({
       applicationId: target.applicationId,
       branch: target.branch,
-      commitType: import_shared4.CommitType.ALL,
+      commitType: import_shared6.CommitType.ALL,
       limit: limit + 1,
       offset
     });
@@ -4545,18 +7600,151 @@ var getApplicationDeploymentHistory = {
       offset: input.offset
     });
     return {
-      application_id: target.applicationId,
+      application_id: target.applicationId,
+      auth_source: auth.source,
+      base_url: target.baseUrl,
+      deployments: paged.page,
+      environment: target.environment,
+      has_more: paged.has_more,
+      limit: paged.limit,
+      next_offset: paged.next_offset,
+      offset: paged.offset,
+      resolved_from: target.resolvedFrom,
+      returned_count: paged.returned_count,
+      total_count: paged.total_count
+    };
+  }
+};
+
+// ../mcp-server/dist/tools/get-application-policy-run-findings.js
+init_cjs_shims();
+var import_shared7 = __toESM(require_dist());
+var getApplicationPolicyRunFindingsInputSchema = external_exports.object({
+  base_url: external_exports.url(),
+  application_id: external_exports.uuid(),
+  run_id: external_exports.uuid(),
+  policy_id: external_exports.uuid(),
+  severity: external_exports.array(external_exports.enum(import_shared7.REVIEW_FINDING_SEVERITIES)).min(1).optional(),
+  order: external_exports.enum(["asc", "desc"]).optional(),
+  limit: external_exports.number().int().min(1).max(import_shared7.MAX_REVIEW_POLICY_RUN_FINDINGS_LIMIT).optional(),
+  offset: external_exports.number().int().min(0).optional()
+}).strict();
+var getApplicationPolicyRunFindings = {
+  name: "get_application_policy_run_findings",
+  title: "Get Application Policy Run Findings",
+  description: "Get the app-scoped, paginated findings for one policy agent run on a specific application (the publish tab's findings table).",
+  inputSchema: getApplicationPolicyRunFindingsToolInputSchema,
+  annotations: {
+    readOnlyHint: true,
+    destructiveHint: false,
+    idempotentHint: true,
+    openWorldHint: true
+  },
+  audience: "customer",
+  async handler(args) {
+    const input = parseToolInput(getApplicationPolicyRunFindingsInputSchema, args);
+    const baseUrl = normalizeBaseUrl(input.base_url);
+    const auth = await resolveAuthForOrigin(baseUrl);
+    const data = await callServerApi({
+      baseUrl,
+      token: auth.token,
+      method: "GET",
+      path: `/api/v2/applications/${input.application_id}/policy-runs/${input.run_id}/findings`,
+      query: {
+        policyId: input.policy_id,
+        severity: input.severity,
+        order: input.order,
+        limit: input.limit,
+        offset: input.offset
+      }
+    });
+    return {
+      result: data,
+      auth_source: auth.source,
+      base_url: baseUrl,
+      environment: detectEnvironment(baseUrl)
+    };
+  }
+};
+
+// ../mcp-server/dist/tools/get-application-publish-pipeline.js
+init_cjs_shims();
+var getApplicationPublishPipelineInputSchema = external_exports.object({
+  base_url: external_exports.url(),
+  application_id: external_exports.uuid(),
+  commit_id: external_exports.string().trim().min(1)
+}).strict();
+var getApplicationPublishPipeline = {
+  name: "get_application_publish_pipeline",
+  title: "Get Application Publish Pipeline",
+  description: "Get the status-only publish plan for one application commit: the ordered steps (build, policy checks, lifecycle, deploy) that publishing would run, without starting anything.",
+  inputSchema: getApplicationPublishPipelineToolInputSchema,
+  annotations: {
+    readOnlyHint: true,
+    destructiveHint: false,
+    idempotentHint: true,
+    openWorldHint: true
+  },
+  audience: "customer",
+  async handler(args) {
+    const input = parseToolInput(getApplicationPublishPipelineInputSchema, args);
+    const baseUrl = normalizeBaseUrl(input.base_url);
+    const auth = await resolveAuthForOrigin(baseUrl);
+    const data = await callServerApi({
+      baseUrl,
+      token: auth.token,
+      method: "GET",
+      path: `/api/v2/applications/${input.application_id}/publish-pipeline`,
+      query: {
+        commitId: input.commit_id
+      }
+    });
+    return {
+      result: data,
+      auth_source: auth.source,
+      base_url: baseUrl,
+      environment: detectEnvironment(baseUrl)
+    };
+  }
+};
+
+// ../mcp-server/dist/tools/get-application-publish-readiness.js
+init_cjs_shims();
+var getApplicationPublishReadinessInputSchema = external_exports.object({
+  base_url: external_exports.url(),
+  application_id: external_exports.uuid(),
+  commit_id: external_exports.string().trim().min(1)
+}).strict();
+var getApplicationPublishReadiness = {
+  name: "get_application_publish_readiness",
+  title: "Get Application Publish Readiness",
+  description: "Get the policy-gate publish readiness for one application commit: which policy checks are required, their live status, and whether the commit is ready to publish.",
+  inputSchema: getApplicationPublishReadinessToolInputSchema,
+  annotations: {
+    readOnlyHint: true,
+    destructiveHint: false,
+    idempotentHint: true,
+    openWorldHint: true
+  },
+  audience: "customer",
+  async handler(args) {
+    const input = parseToolInput(getApplicationPublishReadinessInputSchema, args);
+    const baseUrl = normalizeBaseUrl(input.base_url);
+    const auth = await resolveAuthForOrigin(baseUrl);
+    const data = await callServerApi({
+      baseUrl,
+      token: auth.token,
+      method: "GET",
+      path: `/api/v2/applications/${input.application_id}/publish-readiness`,
+      query: {
+        commitId: input.commit_id
+      }
+    });
+    return {
+      result: data,
       auth_source: auth.source,
-      base_url: target.baseUrl,
-      deployments: paged.page,
-      environment: target.environment,
-      has_more: paged.has_more,
-      limit: paged.limit,
-      next_offset: paged.next_offset,
-      offset: paged.offset,
-      resolved_from: target.resolvedFrom,
-      returned_count: paged.returned_count,
-      total_count: paged.total_count
+      base_url: baseUrl,
+      environment: detectEnvironment(baseUrl)
     };
   }
 };
@@ -4564,7 +7752,7 @@ var getApplicationDeploymentHistory = {
 // ../mcp-server/dist/tools/get-application-structure.js
 init_cjs_shims();
 var import_fs_extra4 = __toESM(require_lib());
-var import_shared5 = __toESM(require_dist());
+var import_shared8 = __toESM(require_dist());
 
 // ../mcp-server/dist/application/directory-tree.js
 init_cjs_shims();
@@ -4667,7 +7855,7 @@ var getApplicationStructure = {
     const application = await sdk.fetchApplicationWithComponents({
       applicationId: target.applicationId,
       branch: target.branch,
-      viewMode: import_shared5.ExportViewMode.EXPORT_LIVE
+      viewMode: import_shared8.ExportViewMode.EXPORT_LIVE
     });
     if (!application) {
       throw new Error(`Application ${target.applicationId} was not found.`);
@@ -4729,7 +7917,7 @@ var getApplicationStructure = {
 
 // ../mcp-server/dist/tools/get-application-summary.js
 init_cjs_shims();
-var import_shared6 = __toESM(require_dist());
+var import_shared9 = __toESM(require_dist());
 var getApplicationSummary = {
   name: "get_application_summary",
   title: "Get Application Summary",
@@ -4750,7 +7938,7 @@ var getApplicationSummary = {
     const application = await sdk.fetchApplication({
       applicationId: target.applicationId,
       branch: target.branch,
-      viewMode: import_shared6.ExportViewMode.EXPORT_LIVE
+      viewMode: import_shared9.ExportViewMode.EXPORT_LIVE
     });
     if (!application) {
       throw new Error(`Application ${target.applicationId} was not found.`);
@@ -5199,6 +8387,42 @@ var getCurrentUser = {
   }
 };
 
+// ../mcp-server/dist/tools/get-dependency-scan-summary.js
+init_cjs_shims();
+var getDependencyScanSummaryInputSchema = external_exports.object({
+  base_url: external_exports.url()
+}).strict();
+var getDependencyScanSummary = {
+  name: "get_dependency_scan_summary",
+  title: "Get Dependency Scan Summary",
+  description: "Get the org-wide dependency scan summary cards (Security Center CVE fleet view): overall severity counts and how many published apps have active vulnerabilities.",
+  inputSchema: getDependencyScanSummaryToolInputSchema,
+  annotations: {
+    readOnlyHint: true,
+    destructiveHint: false,
+    idempotentHint: true,
+    openWorldHint: true
+  },
+  audience: "customer",
+  async handler(args) {
+    const input = parseToolInput(getDependencyScanSummaryInputSchema, args);
+    const baseUrl = normalizeBaseUrl(input.base_url);
+    const auth = await resolveAuthForOrigin(baseUrl);
+    const data = await callServerApi({
+      baseUrl,
+      token: auth.token,
+      method: "GET",
+      path: "/api/v2/code-security/dependency-scan/summary"
+    });
+    return {
+      result: data,
+      auth_source: auth.source,
+      base_url: baseUrl,
+      environment: detectEnvironment(baseUrl)
+    };
+  }
+};
+
 // ../mcp-server/dist/tools/get-integration-access.js
 init_cjs_shims();
 var getIntegrationAccessInputSchema = external_exports.object({
@@ -5233,6 +8457,34 @@ var getIntegrationAccess = {
   }
 };
 
+// ../mcp-server/dist/tools/get-integration-config-schema.js
+init_cjs_shims();
+var getIntegrationConfigSchemaInputSchema = external_exports.object({
+  base_url: external_exports.string().url().optional(),
+  plugin_id: external_exports.string().trim().min(1)
+}).strict();
+var getIntegrationConfigSchema = {
+  name: "get_integration_config_schema",
+  title: "Get Integration Config Schema",
+  description: "Return the JSON schema for a plugin's configuration object. Call this before create_integration. Pass the returned configuration fields as configuration; do not send API envelope fields such as id, created, integrationId, or bindingFields.",
+  inputSchema: getIntegrationConfigSchemaToolInputSchema,
+  annotations: {
+    readOnlyHint: true,
+    destructiveHint: false,
+    idempotentHint: true,
+    openWorldHint: false
+  },
+  audience: "customer",
+  async handler(args) {
+    const input = parseToolInput(getIntegrationConfigSchemaInputSchema, args);
+    return {
+      plugin_id: input.plugin_id,
+      configuration_schema: getPluginConfigurationSchema(input.plugin_id),
+      notes: "Call get_integration_config_schema, then create_integration with name, plugin_id, and configuration matching this schema. create_integration generates ids, created, kind, and the default configuration wrapper. Do not send those envelope fields yourself."
+    };
+  }
+};
+
 // ../mcp-server/dist/tools/get-integration.js
 init_cjs_shims();
 var getIntegrationInputSchema = external_exports.object({
@@ -5347,7 +8599,7 @@ var getKnowledge = {
 
 // ../mcp-server/dist/tools/get-organization-summary.js
 init_cjs_shims();
-var import_shared7 = __toESM(require_dist());
+var import_shared10 = __toESM(require_dist());
 
 // ../mcp-server/dist/target/resolve-organization-target.js
 init_cjs_shims();
@@ -5397,7 +8649,7 @@ function resolveOrganizationTarget(input) {
 async function resolveOrganizationIdFromApplication(sdk, applicationId) {
   const application = await sdk.fetchApplication({
     applicationId,
-    viewMode: import_shared7.ExportViewMode.EXPORT_LIVE
+    viewMode: import_shared10.ExportViewMode.EXPORT_LIVE
   });
   if (!application) {
     throw new Error(`Application ${applicationId} was not found.`);
@@ -5433,6 +8685,133 @@ var getOrganizationSummary = {
   }
 };
 
+// ../mcp-server/dist/tools/get-review-policy-run-report.js
+init_cjs_shims();
+var import_shared11 = __toESM(require_dist());
+var getReviewPolicyRunReportInputSchema = external_exports.object({
+  base_url: external_exports.url(),
+  policy_id: external_exports.uuid(),
+  run_id: external_exports.uuid(),
+  severity: external_exports.array(external_exports.enum(import_shared11.REVIEW_FINDING_SEVERITIES)).min(1).optional(),
+  order: external_exports.enum(["asc", "desc"]).optional(),
+  limit: external_exports.number().int().min(1).max(import_shared11.MAX_REVIEW_POLICY_RUN_FINDINGS_LIMIT).optional(),
+  offset: external_exports.number().int().min(0).optional()
+}).strict();
+var getReviewPolicyRunReport = {
+  name: "get_review_policy_run_report",
+  title: "Get Review Policy Run Report",
+  description: "Get the full report for a single policy agent run: aggregate blocking/non-blocking counts and severity breakdown, plus the paginated list of individual findings for that run.",
+  inputSchema: getReviewPolicyRunReportToolInputSchema,
+  annotations: {
+    readOnlyHint: true,
+    destructiveHint: false,
+    idempotentHint: true,
+    openWorldHint: true
+  },
+  audience: "customer",
+  async handler(args) {
+    const input = parseToolInput(getReviewPolicyRunReportInputSchema, args);
+    const baseUrl = normalizeBaseUrl(input.base_url);
+    const auth = await resolveAuthForOrigin(baseUrl);
+    const data = await callServerApi({
+      baseUrl,
+      token: auth.token,
+      method: "GET",
+      path: `/api/v1/review-policies/${input.policy_id}/runs/${input.run_id}`,
+      query: {
+        severity: input.severity,
+        order: input.order,
+        limit: input.limit,
+        offset: input.offset
+      }
+    });
+    return {
+      report: data,
+      auth_source: auth.source,
+      base_url: baseUrl,
+      environment: detectEnvironment(baseUrl)
+    };
+  }
+};
+
+// ../mcp-server/dist/tools/get-review-policy-summary.js
+init_cjs_shims();
+var import_shared12 = __toESM(require_dist());
+var getReviewPolicySummaryInputSchema = external_exports.object({
+  base_url: external_exports.url(),
+  window: external_exports.enum(import_shared12.REVIEW_POLICY_SUMMARY_WINDOWS).optional()
+}).strict();
+var getReviewPolicySummary = {
+  name: "get_review_policy_summary",
+  title: "Get Review Policy Summary",
+  description: `Get org-wide policy agent summary stats over a time window (default ${import_shared12.DEFAULT_REVIEW_POLICY_SUMMARY_WINDOW}): active policy count, total runs, findings count, and pass rate.`,
+  inputSchema: getReviewPolicySummaryToolInputSchema,
+  annotations: {
+    readOnlyHint: true,
+    destructiveHint: false,
+    idempotentHint: true,
+    openWorldHint: true
+  },
+  audience: "customer",
+  async handler(args) {
+    const input = parseToolInput(getReviewPolicySummaryInputSchema, args);
+    const baseUrl = normalizeBaseUrl(input.base_url);
+    const auth = await resolveAuthForOrigin(baseUrl);
+    const data = await callServerApi({
+      baseUrl,
+      token: auth.token,
+      method: "GET",
+      path: "/api/v1/review-policies/summary",
+      query: {
+        window: input.window
+      }
+    });
+    return {
+      summary: data,
+      auth_source: auth.source,
+      base_url: baseUrl,
+      environment: detectEnvironment(baseUrl)
+    };
+  }
+};
+
+// ../mcp-server/dist/tools/get-review-policy.js
+init_cjs_shims();
+var getReviewPolicyInputSchema = external_exports.object({
+  base_url: external_exports.url(),
+  policy_id: external_exports.uuid()
+}).strict();
+var getReviewPolicy = {
+  name: "get_review_policy",
+  title: "Get Review Policy",
+  description: "Get the full configuration of a single policy agent / review policy, including its prompt, mode (advisory or blocking), scope, stage, and domain.",
+  inputSchema: getReviewPolicyToolInputSchema,
+  annotations: {
+    readOnlyHint: true,
+    destructiveHint: false,
+    idempotentHint: true,
+    openWorldHint: true
+  },
+  audience: "customer",
+  async handler(args) {
+    const input = parseToolInput(getReviewPolicyInputSchema, args);
+    const baseUrl = normalizeBaseUrl(input.base_url);
+    const auth = await resolveAuthForOrigin(baseUrl);
+    const data = await callServerApi({
+      baseUrl,
+      token: auth.token,
+      method: "GET",
+      path: `/api/v1/review-policies/${input.policy_id}`
+    });
+    return {
+      policy: data,
+      auth_source: auth.source,
+      base_url: baseUrl,
+      environment: detectEnvironment(baseUrl)
+    };
+  }
+};
+
 // ../mcp-server/dist/tools/get-user-permissions.js
 init_cjs_shims();
 var getUserPermissionsInputSchema = external_exports.object({
@@ -5682,7 +9061,7 @@ var listApplications = {
 
 // ../mcp-server/dist/tools/list-audit-event-types.js
 init_cjs_shims();
-var import_shared8 = __toESM(require_dist());
+var import_shared13 = __toESM(require_dist());
 var listAuditEventTypes = {
   name: "list_audit_event_types",
   title: "List Audit Event Types",
@@ -5701,20 +9080,20 @@ var listAuditEventTypes = {
   audience: "customer",
   async handler() {
     const classUids = [
-      ...new Set(import_shared8.AUDIT_EVENT_TYPE_CATALOG.map((e) => e.class_uid))
+      ...new Set(import_shared13.AUDIT_EVENT_TYPE_CATALOG.map((e) => e.class_uid))
     ].sort();
     const resourceTypes = [
-      ...new Set(import_shared8.AUDIT_EVENT_TYPE_CATALOG.map((e) => e.resource_type))
+      ...new Set(import_shared13.AUDIT_EVENT_TYPE_CATALOG.map((e) => e.resource_type))
     ].sort();
     return {
-      event_types: import_shared8.AUDIT_EVENT_TYPE_CATALOG,
+      event_types: import_shared13.AUDIT_EVENT_TYPE_CATALOG,
       summary: {
         class_uids: classUids.map((uid) => ({
           class_uid: uid,
-          class_name: import_shared8.AUDIT_EVENT_TYPE_CATALOG.find((e) => e.class_uid === uid).class_name
+          class_name: import_shared13.AUDIT_EVENT_TYPE_CATALOG.find((e) => e.class_uid === uid).class_name
         })),
         resource_types: resourceTypes,
-        total_operations: import_shared8.AUDIT_EVENT_TYPE_CATALOG.reduce((sum, e) => sum + e.operations.length, 0)
+        total_operations: import_shared13.AUDIT_EVENT_TYPE_CATALOG.reduce((sum, e) => sum + e.operations.length, 0)
       }
     };
   }
@@ -5756,6 +9135,69 @@ var listBuilderSeats = {
   }
 };
 
+// ../mcp-server/dist/tools/list-dependency-scan-findings.js
+init_cjs_shims();
+var import_shared14 = __toESM(require_dist());
+var DATE_FILTERS = ["all", "none", "today", "-7d", "-30d", "ytd"];
+var SORTS = ["severity", "last_updated", "last_published"];
+var listDependencyScanFindingsInputSchema = external_exports.object({
+  base_url: external_exports.url(),
+  application_id: external_exports.uuid().optional(),
+  search: external_exports.string().trim().min(1).optional(),
+  severity: external_exports.array(external_exports.enum(import_shared14.SEVERITY_LEVELS)).min(1).optional(),
+  hide_apps_without_vulns: external_exports.boolean().optional(),
+  published: external_exports.enum(DATE_FILTERS).optional(),
+  updated: external_exports.enum(DATE_FILTERS).optional(),
+  sort: external_exports.enum(SORTS).optional(),
+  order: external_exports.enum(["asc", "desc"]).optional(),
+  limit: external_exports.number().int().min(1).max(50).optional(),
+  offset: external_exports.number().int().min(0).optional()
+}).strict();
+var listDependencyScanFindings = {
+  name: "list_dependency_scan_findings",
+  title: "List Dependency Scan Findings",
+  description: "List per-application CVE / dependency vulnerability findings across the org's fleet (Security Center dependency scan view). Filter by application, one or more severities, a free-text search term, or publish/update date window. Defaults to hiding apps with no active vulnerabilities.",
+  inputSchema: listDependencyScanFindingsToolInputSchema,
+  annotations: {
+    readOnlyHint: true,
+    destructiveHint: false,
+    idempotentHint: true,
+    openWorldHint: true
+  },
+  audience: "customer",
+  async handler(args) {
+    const input = parseToolInput(listDependencyScanFindingsInputSchema, args);
+    const baseUrl = normalizeBaseUrl(input.base_url);
+    const auth = await resolveAuthForOrigin(baseUrl);
+    const data = await callServerApi({
+      baseUrl,
+      token: auth.token,
+      method: "GET",
+      path: "/api/v2/code-security/dependency-scan",
+      query: {
+        application_id: input.application_id,
+        search: input.search,
+        // dependency-scan's parseSeverityLevels splits on commas (unlike review-policy's
+        // asStringArray), so a joined string is the correct wire format here.
+        severity: input.severity?.join(","),
+        hideAppsWithoutVulns: input.hide_apps_without_vulns,
+        published: input.published,
+        updated: input.updated,
+        sort: input.sort,
+        order: input.order,
+        limit: input.limit,
+        offset: input.offset
+      }
+    });
+    return {
+      result: data,
+      auth_source: auth.source,
+      base_url: baseUrl,
+      environment: detectEnvironment(baseUrl)
+    };
+  }
+};
+
 // ../mcp-server/dist/tools/list-distinct-packages-in-org.js
 init_cjs_shims();
 var listDistinctPackagesInOrgInputSchema = external_exports.object({
@@ -6161,6 +9603,107 @@ var listRbacAssignments = {
   }
 };
 
+// ../mcp-server/dist/tools/list-review-policies.js
+init_cjs_shims();
+var listReviewPoliciesInputSchema = external_exports.object({
+  base_url: external_exports.url()
+}).strict();
+var listReviewPolicies = {
+  name: "list_review_policies",
+  title: "List Review Policies",
+  description: "List every policy agent / review policy configured for the org (Security Center Policies view): name, policy type, status, mode (advisory or blocking), scope, stage, domain, and the last run summary for each.",
+  inputSchema: listReviewPoliciesToolInputSchema,
+  annotations: {
+    readOnlyHint: true,
+    destructiveHint: false,
+    idempotentHint: true,
+    openWorldHint: true
+  },
+  audience: "customer",
+  async handler(args) {
+    const input = parseToolInput(listReviewPoliciesInputSchema, args);
+    const baseUrl = normalizeBaseUrl(input.base_url);
+    const auth = await resolveAuthForOrigin(baseUrl);
+    const data = await callServerApi({
+      baseUrl,
+      token: auth.token,
+      method: "GET",
+      path: "/api/v1/review-policies"
+    });
+    return {
+      policies: data,
+      auth_source: auth.source,
+      base_url: baseUrl,
+      environment: detectEnvironment(baseUrl)
+    };
+  }
+};
+
+// ../mcp-server/dist/tools/list-review-policy-runs.js
+init_cjs_shims();
+var import_shared15 = __toESM(require_dist());
+var listReviewPolicyRunsInputSchema = external_exports.object({
+  base_url: external_exports.url(),
+  policy_id: external_exports.uuid().describe("When provided, scopes results to runs of this policy. Omit for org-wide runs across every policy.").optional(),
+  application_id: external_exports.uuid().optional(),
+  status: external_exports.enum(import_shared15.REVIEW_RUN_STATUSES).optional(),
+  search: external_exports.string().trim().max(import_shared15.REVIEW_POLICY_NAME_MAX_LENGTH).optional(),
+  sort: external_exports.enum(import_shared15.REVIEW_POLICY_RUN_SORTS).optional(),
+  order: external_exports.enum(["asc", "desc"]).optional(),
+  time_start: external_exports.iso.datetime().optional(),
+  time_end: external_exports.iso.datetime().optional(),
+  triggered_by: external_exports.array(external_exports.enum(import_shared15.REVIEW_RUN_TRIGGERED_BYS)).min(1).optional(),
+  triggering_user_ids: external_exports.array(external_exports.uuid()).min(1).optional(),
+  limit: external_exports.number().int().min(1).max(import_shared15.MAX_REVIEW_POLICY_RUNS_LIMIT).optional(),
+  offset: external_exports.number().int().min(0).optional()
+}).strict().refine((value) => value.time_start === void 0 === (value.time_end === void 0), {
+  message: "time_start and time_end must both be provided"
+}).refine((value) => value.time_start === void 0 || value.time_end === void 0 || Date.parse(value.time_start) <= Date.parse(value.time_end), { message: "time_end must be after time_start" });
+var listReviewPolicyRuns = {
+  name: "list_review_policy_runs",
+  title: "List Review Policy Runs",
+  description: "List policy agent run history, either org-wide or scoped to a single policy via policy_id. Each run reports its status, decision, findings count, and the triggering app/commit/user.",
+  inputSchema: listReviewPolicyRunsToolInputSchema,
+  annotations: {
+    readOnlyHint: true,
+    destructiveHint: false,
+    idempotentHint: true,
+    openWorldHint: true
+  },
+  audience: "customer",
+  async handler(args) {
+    const input = parseToolInput(listReviewPolicyRunsInputSchema, args);
+    const baseUrl = normalizeBaseUrl(input.base_url);
+    const auth = await resolveAuthForOrigin(baseUrl);
+    const path5 = input.policy_id ? `/api/v1/review-policies/${input.policy_id}/runs` : "/api/v1/review-policies/runs";
+    const data = await callServerApi({
+      baseUrl,
+      token: auth.token,
+      method: "GET",
+      path: path5,
+      query: {
+        applicationId: input.application_id,
+        status: input.status,
+        search: input.search,
+        sort: input.sort,
+        order: input.order,
+        timeStart: input.time_start,
+        timeEnd: input.time_end,
+        triggeredBy: input.triggered_by,
+        triggeringUserId: input.triggering_user_ids,
+        limit: input.limit,
+        offset: input.offset
+      }
+    });
+    return {
+      runs: data,
+      auth_source: auth.source,
+      base_url: baseUrl,
+      environment: detectEnvironment(baseUrl)
+    };
+  }
+};
+
 // ../mcp-server/dist/tools/list-roles.js
 init_cjs_shims();
 var listRolesInputSchema = external_exports.object({
@@ -6338,6 +9881,52 @@ var listUsers = {
   }
 };
 
+// ../mcp-server/dist/tools/lookup-package-vulnerabilities.js
+init_cjs_shims();
+var MAX_PACKAGES = 5e3;
+var FIELD_MAX_LENGTH = 256;
+var lookupPackageVulnerabilitiesInputSchema = external_exports.object({
+  base_url: external_exports.url(),
+  packages: external_exports.array(external_exports.object({
+    name: external_exports.string().min(1).max(FIELD_MAX_LENGTH),
+    version: external_exports.string().min(1).max(FIELD_MAX_LENGTH)
+  }).strict()).min(1).max(MAX_PACKAGES)
+}).strict();
+var lookupPackageVulnerabilities = {
+  name: "lookup_package_vulnerabilities",
+  title: "Lookup Package Vulnerabilities",
+  description: "Check a batch of npm {name, version} pairs against the org-agnostic package vulnerability index before an install. Returns per-package severity, covering advisories, whether the package carries known malware, and a non-binding remediation suggestion ('pass', 'remediatable', or 'block').",
+  inputSchema: lookupPackageVulnerabilitiesToolInputSchema,
+  annotations: {
+    readOnlyHint: true,
+    destructiveHint: false,
+    idempotentHint: true,
+    openWorldHint: true
+  },
+  audience: "customer",
+  async handler(args) {
+    const input = parseToolInput(lookupPackageVulnerabilitiesInputSchema, args);
+    const baseUrl = normalizeBaseUrl(input.base_url);
+    const auth = await resolveAuthForOrigin(baseUrl);
+    const data = await callServerApi({
+      baseUrl,
+      token: auth.token,
+      method: "POST",
+      path: "/api/v1/security/package-lookup",
+      body: { packages: input.packages }
+    });
+    if (!data || !Array.isArray(data.results)) {
+      throw new Error("Unexpected response shape from package-lookup endpoint");
+    }
+    return {
+      results: data.results,
+      auth_source: auth.source,
+      base_url: baseUrl,
+      environment: detectEnvironment(baseUrl)
+    };
+  }
+};
+
 // ../mcp-server/dist/tools/revoke-resource-access.js
 init_cjs_shims();
 var revokeResourceAccessInputSchema = external_exports.object({
@@ -6668,6 +10257,9 @@ var toolDefinitions = [
   getApplicationAccess,
   getApplicationCommitHistory,
   getApplicationDeploymentHistory,
+  getApplicationPolicyRunFindings,
+  getApplicationPublishPipeline,
+  getApplicationPublishReadiness,
   getApplicationStructure,
   getApplicationSummary,
   getAppSbom,
@@ -6678,11 +10270,16 @@ var toolDefinitions = [
   getBillingUsageRecords,
   getChatMessages,
   getCurrentUser,
+  getDependencyScanSummary,
   getIntegration,
   getIntegrationAccess,
+  getIntegrationConfigSchema,
   getJobAccess,
   getKnowledge,
   getOrganizationSummary,
+  getReviewPolicy,
+  getReviewPolicyRunReport,
+  getReviewPolicySummary,
   getUserPermissions,
   getWorkflowAccess,
   grantResourceAccess,
@@ -6690,6 +10287,7 @@ var toolDefinitions = [
   listAuditEventTypes,
   listBillingUsageLimits,
   listBuilderSeats,
+  listDependencyScanFindings,
   listDistinctPackagesInOrg,
   listFolders,
   listIntegrations,
@@ -6697,9 +10295,12 @@ var toolDefinitions = [
   listOrganizationAgents,
   listPackagesByApp,
   listRbacAssignments,
+  listReviewPolicies,
+  listReviewPolicyRuns,
   listRoles,
   listUsers,
   listUsersByRole,
+  lookupPackageVulnerabilities,
   revokeResourceAccess,
   unassignBuilderSeat,
   undeployApplication,
@@ -6908,4 +10509,4 @@ export {
   invalidRequestResponse,
   handleJsonRpc
 };
-//# sourceMappingURL=chunk-O6QF4SNO.js.map
+//# sourceMappingURL=chunk-KOWVZPVA.js.map