@truefoundry/ai-gateway-sdk 0.0.2 → 0.0.4-rc.0

package/dist/autogen/models.d.ts

@@ -137,9 +137,10 @@ export type AgentSkillManifest = BaseArtifactVersion & {
     ml_repo: string;
 };
 /**
+ * Service, job, workflow, and cluster deployment alerts. Teams is not supported on these alerts.
  * +discriminator=type
  */
-export type NotificationTargetForAlertRule = Email | SlackWebhook | SlackBot | PagerDuty | MSTeamsWebhook;
+export type NotificationTargetForAlertRule = Email | SlackWebhook | SlackBot | PagerDuty;
 export type AlertSeverity = 'warning' | 'critical';
 /**
  * +label=All Data
@@ -278,7 +279,7 @@ export type MimeType = 'text/plain' | 'application/json' | 'image/png' | 'image/
 /**
  * +discriminator=type
  */
-export type AwsIntegrations = AwsEcr | AwsS3 | AwsParameterStore | AwsSecretsManager | AwsEksIntegration;
+export type AwsIntegrations = AwsEcr | AwsS3 | AwsParameterStore | AwsSecretsManager | AwsEksIntegration | AwsAgentCoreRuntime | AwsAgentCoreHarness;
 /**
  * +label=Assumed Role Based
  */
@@ -294,7 +295,7 @@ export type AzureContentSafetyCategory = 'Hate' | 'SelfHarm' | 'Sexual' | 'Viole
 /**
  * +discriminator=type
  */
-export type AzureIntegrations = AzureAksIntegration | AzureContainerRegistry | AzureBlobStorage | AzureVault | AzureReposIntegration;
+export type AzureIntegrations = AzureAksIntegration | AzureContainerRegistry | AzureBlobStorage | AzureVault | AzureReposIntegration | MicrosoftCopilotStudio | MicrosoftFoundry;
 export type AzurePIICategory = '*' | 'ABARoutingNumber' | 'Address' | 'Age' | 'ARNationalIdentityNumber' | 'AUBankAccountNumber' | 'AUDriversLicenseNumber' | 'AUMedicalAccountNumber' | 'AUPassportNumber' | 'AUTaxFileNumber' | 'AUBusinessNumber' | 'AUCompanyNumber' | 'ATIdentityCard' | 'ATTaxIdentificationNumber' | 'ATValueAddedTaxNumber' | 'AzureDocumentDBAuthKey' | 'AzureIAASDatabaseConnectionAndSQLString' | 'AzureIoTConnectionString' | 'AzurePublishSettingPassword' | 'AzureRedisCacheString' | 'AzureSAS' | 'AzureServiceBusString' | 'AzureStorageAccountKey' | 'AzureStorageAccountGeneric' | 'BankAccountNumber' | 'BENationalNumber' | 'BEValueAddedTaxNumber' | 'BRCPFNumber' | 'BRLegalEntityNumber' | 'BRNationalIDRG' | 'BGUniformCivilNumber' | 'CABankAccountNumber' | 'CADriversLicenseNumber' | 'CAHealthServiceNumber' | 'CAPassportNumber' | 'CAPersonalHealthID' | 'CASocialInsuranceNumber' | 'CLIdentityCardNumber' | 'CNResidentIdentityCardNumber' | 'CreditCardNumber' | 'HRIdentityCardNumber' | 'HRNationalIDCardNumber' | 'HRPersonalIdentificationNumber' | 'CYIdentityCard' | 'CYTaxIdentificationNumber' | 'CZPersonalIdentityNumber' | 'Date' | 'DateTime' | 'DKPersonalIdentificationNumber' | 'DEANumber' | 'Email' | 'EEPersonalIdentificationCode' | 'EUDebitCardNumber' | 'EUDriversLicenseNumber' | 'EUGPSCoordinates' | 'EUNationalIdentificationNumber' | 'EUPassportNumber' | 'EUSocialSecurityNumber' | 'EUTaxIdentificationNumber' | 'FIEuropeanHealthNumber' | 'FINationalID' | 'FIPassportNumber' | 'FRDriversLicenseNumber' | 'FRHealthInsuranceNumber' | 'FRNationalID' | 'FRPassportNumber' | 'FRSocialSecurityNumber' | 'FRTaxIdentificationNumber' | 'FRValueAddedTaxNumber' | 'DEDriversLicenseNumber' | 'DEPassportNumber' | 'DEIdentityCardNumber' | 'DETaxIdentificationNumber' | 'DEValueAddedTaxNumber' | 'GRNationalIDCard' | 'GRTaxIdentificationNumber' | 'HKIdentityCardNumber' | 'HUValueAddedTaxNumber' | 'HUPersonalIdentificationNumber' | 'HUTaxIdentificationNumber' | 'INPermanentAccountNumber' | 'INUniqueIdentificationNumber' | 'IDIdentityCardNumber' | 'InternationalBankingAccountNumber' | 'IPAddress' | 'IEPersonalPublicServiceNumber' | 'ILBankAccountNumber' | 'ILNationalID' | 'ITDriversLicenseNumber' | 'ITFiscalCode' | 'ITValueAddedTaxNumber' | 'JPBankAccountNumber' | 'JPDriversLicenseNumber' | 'JPPassportNumber' | 'JPResidentRegistrationNumber' | 'JPSocialInsuranceNumber' | 'JPMyNumberCorporate' | 'JPMyNumberPersonal' | 'JPResidenceCardNumber' | 'LVPersonalCode' | 'LTPersonalCode' | 'LUNationalIdentificationNumberNatural' | 'LUNationalIdentificationNumberNonNatural' | 'MYIdentityCardNumber' | 'MTIdentityCardNumber' | 'MTTaxIDNumber' | 'NLCitizensServiceNumber' | 'NLTaxIdentificationNumber' | 'NLValueAddedTaxNumber' | 'NZBankAccountNumber' | 'NZDriversLicenseNumber' | 'NZInlandRevenueNumber' | 'NZMinistryOfHealthNumber' | 'NZSocialWelfareNumber' | 'NOIdentityNumber' | 'Organization' | 'Person' | 'PersonType' | 'PHUnifiedMultiPurposeIDNumber' | 'PhoneNumber' | 'PLIdentityCard' | 'PLNationalID' | 'PLPassportNumber' | 'PLTaxIdentificationNumber' | 'PLREGONNumber' | 'PTCitizenCardNumber' | 'PTTaxIdentificationNumber' | 'ROPersonalNumericalCode' | 'RUPassportNumberDomestic' | 'RUPassportNumberInternational' | 'SANationalID' | 'SGNationalRegistrationIdentityCardNumber' | 'SKPersonalNumber' | 'SITaxIdentificationNumber' | 'SIUniqueMasterCitizenNumber' | 'ZAIdentificationNumber' | 'KRResidentRegistrationNumber' | 'ESDNI' | 'ESSocialSecurityNumber' | 'ESTaxIdentificationNumber' | 'AzureSQLConnectionString' | 'SENationalID' | 'SEPassportNumber' | 'SETaxIdentificationNumber' | 'SWIFTCode' | 'CHSocialSecurityNumber' | 'TWNationalID' | 'TWPassportNumber' | 'TWResidentCertificate' | 'THPopulationIdentificationCode' | 'TRNationalIdentificationNumber' | 'UKDriversLicenseNumber' | 'UKElectoralRollNumber' | 'UKNationalHealthNumber' | 'UKNationalInsuranceNumber' | 'UKUniqueTaxpayerNumber' | 'USUKPassportNumber' | 'USBankAccountNumber' | 'USDriversLicenseNumber' | 'USIndividualTaxpayerIdentification' | 'USSocialSecurityNumber' | 'URL';
 /**
  * +discriminator=type
@@ -695,18 +696,18 @@ export type OPAAuth = OPAHeaderAuth | OPABearerAuth;
  * +discriminator=type
  */
 export type HeaderRoutingConfig = WeightBasedLoadBalancing | LatencyBasedLoadBalancing | PriorityBasedLoadBalancing | ComplexityBasedLoadBalancing;
-export type IdentityProviders = 'custom' | 'okta' | 'azure-entra-id' | 'auth0';
+export type IdentityProviders = 'custom' | 'okta' | 'azure-entra-id' | 'kubernetes' | 'github' | 'aws' | 'gcp' | 'auth0';
 /**
  * +usage=Name of the method used for inference
  * +label=Inference Method Name
  */
 export type InferMethodName = 'predict' | 'predict_proba';
-export type InfraProviderAccount = AwsProviderAccount | AzureProviderAccount | GcpProviderAccount | DockerhubProviderAccount | BitbucketProviderAccount | CustomProviderAccount | GithubProviderAccount | GitlabProviderAccount | JfrogProviderAccount | TTLProviderAccount | TrueFoundryProviderAccount | QuayProviderAccount | SlackProviderAccount | WebhookProviderAccount | PagerDutyProviderAccount | MSTeamsProviderAccount | HashicorpProviderAccount;
+export type InfraProviderAccount = AwsProviderAccount | SnowflakeProviderAccount | AzureProviderAccount | GcpProviderAccount | DockerhubProviderAccount | BitbucketProviderAccount | CustomProviderAccount | GithubProviderAccount | GitlabProviderAccount | JfrogProviderAccount | TTLProviderAccount | TrueFoundryProviderAccount | QuayProviderAccount | SlackProviderAccount | WebhookProviderAccount | PagerDutyProviderAccount | MSTeamsProviderAccount | HashicorpProviderAccount;
 /**
  * +discriminator=type
  */
 export type SlackIntegrations = SlackWebhookIntegration | SlackBotIntegration;
-export type Input = AccountManifest | ClusterManifest | VirtualAccountManifest | PersonalAccessTokenManifest | WorkspaceManifest | ProviderIntegrations | Service | AsyncService | Workflow | Job | SparkJob | Helm | Volume | Notebook | SparkNotebook | Codeserver | SSHServer | RStudio | ApplicationSet | Intercept | MCPServerManifest | MLRepoManifest | ModelManifest | ArtifactManifest | DataDirectoryManifest | GatewayConfig | GatewayPolicyManifest | CacheConfig | HeaderRoutingConfig | TeamManifest | EnvironmentManifest | PolicyManifest | RoleManifest | RoleBindingManifest | AlertConfig | TracingProjectManifest | TracingApplicationManifest | ProviderAccounts | ChatPromptManifest | AgentSkillManifest | AWSTerraformConfig | GCPTerraformConfig | AzureTerraformConfig | GenericTerraformConfig | CommonToolsSettings | AIFeaturesSettings | SSOSettings | SecuritySettings | TracingProjectsControlPlaneStorage | FeaturesSettings | ThemeSettings | ProvisioningSettings | LegacyAgentManifest | AgentAppManifest | GatewayInstallationManifest | SecretGroupManifest | IdentityProviderManifest | AgentIdentityManifest | OidcClientManifest | AgentManifest | ModelConfig | MCPUserAuthInput | MCPUserAuthInputV2 | AgentManifestV2 | AgentChannelManifest;
+export type Input = AccountManifest | ClusterManifest | VirtualAccountManifest | PersonalAccessTokenManifest | WorkspaceManifest | ProviderIntegrations | Service | AsyncService | Workflow | Job | SparkJob | Helm | Volume | Notebook | SparkNotebook | Codeserver | SSHServer | RStudio | ApplicationSet | Intercept | MCPServerManifest | MLRepoManifest | ModelManifest | ArtifactManifest | DataDirectoryManifest | GatewayConfig | GatewayPolicyManifest | CacheConfig | HeaderRoutingConfig | TeamManifest | EnvironmentManifest | PolicyManifest | RoleManifest | RoleBindingManifest | AlertConfig | TracingProjectManifest | TracingApplicationManifest | ProviderAccounts | ChatPromptManifest | AgentSkillManifest | AWSTerraformConfig | GCPTerraformConfig | AzureTerraformConfig | GenericTerraformConfig | CommonToolsSettings | AIFeaturesSettings | SSOSettings | SecuritySettings | TracingProjectsControlPlaneStorage | FeaturesSettings | ThemeSettings | ProvisioningSettings | AgentAppManifest | GatewayInstallationManifest | SecretGroupManifest | IdentityProviderManifest | AgentIdentityManifest | OidcClientManifest | ModelConfig | MCPUserAuthInput | MCPUserAuthInputV2 | AgentManifestV2 | AgentChannelManifest;
 /**
  * +label=Sync to Secret Manager
  * +sort=6
@@ -715,7 +716,7 @@ export type Input = AccountManifest | ClusterManifest | VirtualAccountManifest |
  * +discriminator=type
  */
 export type SecretStoreConfig = SecretStoreIntegrationConfig | TfySecretsConfig;
-export type ProviderIntegrations = AwsIntegrations | GcpIntegrations | AzureIntegrations | DockerhubIntegrations | CustomIntegrations | JFrogIntegrations | TTLIntegrations | TrueFoundryIntegrations | QuayIntegrations | CohereIntegrations | AI21Integrations | AnthropicIntegrations | AnyscaleIntegrations | DeepinfraIntegrations | GroqIntegrations | MistralAIIntegrations | PerplexityIntegrations | TogetherAIIntegrations | NomicIntegrations | PalmIntegrations | OllamaIntegrations | OpenAIIntegrations | SlackIntegrations | WebhookIntegrations | XAIIntegrations | BasetenIntegrations | DatabricksIntegrations | BedrockModel | VertexModel | GeminiModel | AzureOpenAIModel | AzureFoundryModel | MicrosoftFoundryModel | ClouderaIntegrations | PagerDutyIntegration | MSTeamsWebhookIntegration | SelfHostedModel | OpenRouterIntegrations | SambaNovaIntegrations | SagemakerIntegrations | CerebrasIntegrations | WaferIntegrations | TypeSafeIntegrations | HashicorpIntegrations | SnowflakeCortexIntegrations | ElevenLabsIntegrations | DeepgramIntegrations | CartesiaIntegrations | SmallestAiIntegrations | AWSClaudePlatformIntegrations | BedrockMantleModel | CustomEndpointIntegrations | TrueFoundryModelsIntegrations;
+export type ProviderIntegrations = AwsIntegrations | SnowflakeIntegrations | GcpIntegrations | AzureIntegrations | DockerhubIntegrations | CustomIntegrations | JFrogIntegrations | TTLIntegrations | TrueFoundryIntegrations | QuayIntegrations | CohereIntegrations | AI21Integrations | AnthropicIntegrations | AnyscaleIntegrations | DeepinfraIntegrations | GroqIntegrations | MistralAIIntegrations | PerplexityIntegrations | TogetherAIIntegrations | NomicIntegrations | PalmIntegrations | OllamaIntegrations | OpenAIIntegrations | SlackIntegrations | WebhookIntegrations | XAIIntegrations | BasetenIntegrations | DatabricksIntegrations | BedrockModel | VertexModel | GeminiModel | AzureOpenAIModel | AzureFoundryModel | MicrosoftFoundryModel | ClouderaIntegrations | PagerDutyIntegration | MSTeamsWebhookIntegration | SelfHostedModel | OpenRouterIntegrations | SambaNovaIntegrations | SagemakerIntegrations | CerebrasIntegrations | WaferIntegrations | TypeSafeIntegrations | HashicorpIntegrations | SnowflakeCortexIntegrations | ElevenLabsIntegrations | DeepgramIntegrations | CartesiaIntegrations | SmallestAiIntegrations | AWSClaudePlatformIntegrations | BedrockMantleModel | CustomEndpointIntegrations | TrueFoundryModelsIntegrations;
 export type SelfHostedModelCostMetric = PerThousandTokensCostMetric | PerThousandEmbeddingTokensCostMetric | PerMillionCharactersCostMetric | PerMinuteOfAudioCostMetric | OCRCostMetric | PublicCostMetric;
 /**
  * +label=Driver Config
@@ -1383,6 +1384,41 @@ export interface OwnedBy {
      */
     account: string;
 }
+/**
+ * +label=AI Features Models
+ * +usage=Gateway model to use for each task complexity tier. AI features route each
+ * request to the model matching the estimated difficulty of the task, trading off cost,
+ * latency and quality. Each value is a Gateway model FQN in the form provider/model.
+ */
+export interface AIFeaturesModels {
+    /**
+     * +label=Simple Tasks
+     * +usage=Fast, low-cost model for high-volume, well-defined tasks like classification, extraction, formatting and short summaries.
+     * +sort=1
+     * +uiType=IntegrationSelect
+     * +uiProps={"integrationType":"model","descriptionInline":true,"valuePattern":"${providerAccount.name}/${manifest.name}"}
+     * +message=Select a Gateway model for simple tasks
+     */
+    simple: string;
+    /**
+     * +label=Medium Tasks
+     * +usage=Balanced mid-tier model for standard tasks like general Q&A, structured output.
+     * +sort=2
+     * +uiType=IntegrationSelect
+     * +uiProps={"integrationType":"model","descriptionInline":true,"valuePattern":"${providerAccount.name}/${manifest.name}"}
+     * +message=Select a Gateway model for medium tasks
+     */
+    medium: string;
+    /**
+     * +label=Complex Tasks
+     * +usage=Most capable model for demanding tasks like multi-step reasoning, code generation and nuanced analysis.
+     * +sort=3
+     * +uiType=IntegrationSelect
+     * +uiProps={"integrationType":"model","descriptionInline":true,"valuePattern":"${providerAccount.name}/${manifest.name}"}
+     * +message=Select a Gateway model for complex tasks
+     */
+    complex: string;
+}
 /**
  * +docs=Describes the configuration for TrueFoundry AI features
  * +label=AI Features Settings
@@ -1401,11 +1437,12 @@ export interface AIFeaturesSettings {
     enabled: boolean;
     /**
      * +label=AI Provider
-     * +usage=AI provider to use for AI features
-     * When TrueFoundry is selected, TrueFoundry will manage and provide the AI models for the features.
-     * +uiProps={"disableEdit":true}
+     * +usage=AI provider to use for AI features.
+     * TrueFoundry manages models on SaaS. Self-Managed uses your gateway models.
+     * +sort=2
      */
-    ai_provider: 'truefoundry';
+    ai_provider: 'truefoundry' | 'self-managed';
+    models?: AIFeaturesModels;
 }
 /**
  * +docs=Describes the configuration for the input AMQP worker
@@ -2650,7 +2687,7 @@ export interface SlackBot {
     /**
      * +label=Slack Channel Names
      * +usage=List of channels to send messages to.
-     * +message=3 to 81 lower case characters long alphanumeric word, may contain - or _ in between, must start with #
+     * +message=2 to 80 lower case characters long alphanumeric word, may contain - or _ in between, optional leading #
      * +sort=665
      */
     channels: string[];
@@ -3476,6 +3513,13 @@ export interface AgentManifestV2 {
      * +message=2 to 64 lower case characters long alphanumeric word, may contain - in between, cannot start with a number
      */
     name: string;
+    /**
+     * +label=Display Name
+     * +usage=A human-readable label for the Agent in the UI. If omitted, the agent name is shown.
+     * +message=1 to 128 characters long
+     * +sort=105
+     */
+    display_name?: string;
     /**
      * +label=Description
      * +usage=A short note on what this agent does — shown in the registry list and audit trail.
@@ -3483,6 +3527,14 @@ export interface AgentManifestV2 {
      * +uiType=TextArea
      */
     description: string;
+    source?: RemoteAgentSource;
+    /**
+     * +label=State
+     * +usage=Lifecycle state of the agent. Active: managed and available for use. Unmanaged: imported from an external registry for governance (not fully managed yet). Inactive: disabled and cannot be used or invoked.
+     * +sort=116
+     * +uiType=Select
+     */
+    state?: 'active' | 'unmanaged' | 'inactive';
     identity: RemoteAgentV2AgentIdentity;
     proxy_via_gateway: RemoteAgentProxyViaGatewayConfig;
     /**
@@ -3501,6 +3553,51 @@ export interface AgentManifestV2 {
      */
     tags?: {};
 }
+/**
+ * +label=Source
+ * +usage=Where the agent originated from.
+ */
+export interface RemoteAgentSource {
+    /**
+     * +label=Type
+     * +usage=Where the agent originated from.
+     * +sort=100
+     * +uiType=Select
+     */
+    type: 'trueforge' | 'aws-agentcore-harness' | 'aws-agentcore-runtime' | 'microsoft-foundry' | 'microsoft-copilot-studio';
+    /**
+     * +label=Provider Integration FQN
+     * +usage=FQN of the provider integration used by this agent source.
+     * +sort=250
+     * +uiType=IntegrationSelect
+     * +uiProps={"integrationType":"agent-registry"}
+     */
+    provider_integration_fqn?: string;
+    /**
+     * +label=External Name
+     * +usage=Name of the agent in the external source system.
+     * +sort=300
+     */
+    external_name?: string;
+    /**
+     * +label=External ID
+     * +usage=ID of the agent in the external source system.
+     * +sort=310
+     */
+    external_id?: string;
+    /**
+     * +label=Entra Agent Identity ID
+     * +usage=Entra agent identity object ID (AgentIdentityId).
+     * +sort=400
+     */
+    entra_agent_identity_id?: string;
+    /**
+     * +label=Entra Blueprint ID
+     * +usage=Entra Agent Identity Blueprint ID (AgentIdentityBlueprintId).
+     * +sort=410
+     */
+    entra_blueprint_id?: string;
+}
 /**
  * +label=TrueFoundry-backed
  * +usage=We issue and sign the token. Simplest option for agents you build and run yourself.
@@ -6004,7 +6101,7 @@ export interface JobAlert {
      * +sort=665
      */
     to_emails?: string[];
-    notification_target?: NotificationTarget;
+    notification_target?: NotificationTargetForAlertRule;
     /**
      * +label=On Start
      * +usage=Send an alert when the job starts
@@ -6339,6 +6436,106 @@ export interface AutoRotate {
      */
     grace_period: number;
 }
+/**
+ * +label=AWS AgentCore Harness
+ * +icon=aws-agentcore-harness
+ * +usage=Import agents from Amazon Bedrock AgentCore harness into the TrueFoundry agent registry.
+ */
+export interface AwsAgentCoreHarness {
+    /**
+     * +value=integration/agent-registry/aws/agentcore-harness
+     */
+    type: 'integration/agent-registry/aws/agentcore-harness';
+    /**
+     * +label=Display Name
+     * +usage=The name of the integration that will be displayed in the TrueFoundry UI.
+     * +sort=100
+     * +message=3 to 36 lower case characters long alphanumeric word, may contain - in between, cannot start with a number
+     */
+    name: string;
+    region: AWSRegion;
+    syncSchedule?: CronSyncSchedule;
+    /**
+     * +label=Auth Data
+     * +usage=Custom authentication data for the integration.
+     * +sort=300
+     * +discriminator=type
+     */
+    auth_data?: AwsAccessKeyBasedAuth | AwsAssumedRoleBasedAuth;
+    /**
+     * +label=Access Control
+     * +usage=List of subjects that are authorized to access this integration. List of user fqn in format <user_type>:<username>.
+     * +sort=600
+     * +uiType=AuthorizedSubjects
+     */
+    authorized_subjects?: string[];
+}
+/**
+ * +label=Cron Sync Schedule
+ */
+export interface CronSyncSchedule {
+    /**
+     * +value=cron
+     */
+    type: 'cron';
+    /**
+     * +label=Cron Expression
+     * +usage=Cron expression for when to run the sync. Minute cannot be configured.
+     * +uiType=CronInput
+     * +uiProps={"disableMinute": true, "hideTimezonePicker": true}
+     * ```
+     * * * * * *
+     *   | | | |
+     *   | | | |___ day of week (0-6) (Sunday is 0)
+     *   | | |_____ month (1-12)
+     *   | |_______ day of month (1-31)
+     *   |_________ hour (0-23)
+     * ```
+     * +message=Sync schedule must not specify a minute.
+     */
+    expression: string;
+    /**
+     * +label=Timezone
+     * +uiType=TimezoneSelect
+     * +usage=Timezone against which the cron schedule will be calculated, e.g. "Asia/Tokyo". Default is UTC.
+     * https://docs.truefoundry.com/docs/list-of-supported-timezones
+     */
+    timezone?: string;
+}
+/**
+ * +label=AWS AgentCore Runtime
+ * +icon=aws-agentcore-runtime
+ * +usage=Import agents from Amazon Bedrock AgentCore runtime into the TrueFoundry agent registry.
+ */
+export interface AwsAgentCoreRuntime {
+    /**
+     * +value=integration/agent-registry/aws/agentcore-runtime
+     */
+    type: 'integration/agent-registry/aws/agentcore-runtime';
+    /**
+     * +label=Display Name
+     * +usage=The name of the integration that will be displayed in the TrueFoundry UI.
+     * +sort=100
+     * +message=3 to 36 lower case characters long alphanumeric word, may contain - in between, cannot start with a number
+     */
+    name: string;
+    region: AWSRegion;
+    syncSchedule?: CronSyncSchedule;
+    /**
+     * +label=Auth Data
+     * +usage=Custom authentication data for the integration.
+     * +sort=300
+     * +discriminator=type
+     */
+    auth_data?: AwsAccessKeyBasedAuth | AwsAssumedRoleBasedAuth;
+    /**
+     * +label=Access Control
+     * +usage=List of subjects that are authorized to access this integration. List of user fqn in format <user_type>:<username>.
+     * +sort=600
+     * +uiType=AuthorizedSubjects
+     */
+    authorized_subjects?: string[];
+}
 /**
  * +label=Bedrock Mantle Model
  * +icon=aws-bedrock
@@ -7758,6 +7955,72 @@ export interface VCSTokenAuthData {
      */
     token: string;
 }
+/**
+ * +label=Microsoft Copilot Studio
+ * +icon=copilot-studio
+ * +usage=Import agents from Microsoft Copilot Studio into the TrueFoundry agent registry.
+ */
+export interface MicrosoftCopilotStudio {
+    /**
+     * +value=integration/agent-registry/azure/microsoft-copilot-studio
+     */
+    type: 'integration/agent-registry/azure/microsoft-copilot-studio';
+    /**
+     * +label=Display Name
+     * +usage=The name of the integration that will be displayed in the TrueFoundry UI.
+     * +sort=100
+     * +message=3 to 36 lower case characters long alphanumeric word, may contain - in between, cannot start with a number
+     */
+    name: string;
+    syncSchedule?: CronSyncSchedule;
+    /**
+     * +label=Auth Data
+     * +usage=Custom authentication data for the integration.
+     * +sort=300
+     * +discriminator=type
+     */
+    auth_data?: AzureCertificateAuth | AzureClientSecretAuth;
+    /**
+     * +label=Access Control
+     * +usage=List of subjects that are authorized to access this integration. List of user fqn in format <user_type>:<username>.
+     * +sort=600
+     * +uiType=AuthorizedSubjects
+     */
+    authorized_subjects?: string[];
+}
+/**
+ * +label=Microsoft Foundry
+ * +icon=microsoft-foundry
+ * +usage=Import agents from Microsoft Foundry into the TrueFoundry agent registry.
+ */
+export interface MicrosoftFoundry {
+    /**
+     * +value=integration/agent-registry/azure/microsoft-foundry
+     */
+    type: 'integration/agent-registry/azure/microsoft-foundry';
+    /**
+     * +label=Display Name
+     * +usage=The name of the integration that will be displayed in the TrueFoundry UI.
+     * +sort=100
+     * +message=3 to 36 lower case characters long alphanumeric word, may contain - in between, cannot start with a number
+     */
+    name: string;
+    syncSchedule?: CronSyncSchedule;
+    /**
+     * +label=Auth Data
+     * +usage=Custom authentication data for the integration.
+     * +sort=300
+     * +discriminator=type
+     */
+    auth_data?: AzureCertificateAuth | AzureClientSecretAuth;
+    /**
+     * +label=Access Control
+     * +usage=List of subjects that are authorized to access this integration. List of user fqn in format <user_type>:<username>.
+     * +sort=600
+     * +uiType=AuthorizedSubjects
+     */
+    authorized_subjects?: string[];
+}
 /**
  * +label=Create New Cluster
  */
@@ -9416,6 +9679,78 @@ export interface CartesiaProviderAccount {
      */
     discount_percent?: number;
 }
+/**
+ * +label=Cato Networks API Key Auth
+ */
+export interface CatoNetworksApiKeyAuth {
+    /**
+     * +value=api-key
+     */
+    type: 'api-key';
+    /**
+     * +sort=100
+     * +usage=API key issued by Cato for this AI Security guard. Sent as a Bearer token. The key secret is never forwarded to Cato as the gateway key alias.
+     * +message=API key must not be empty
+     * +uiType=SecretSelect
+     * +uiProps={"isPassword": true, "enableNew": true}
+     */
+    api_key: string;
+}
+/**
+ * +label=Cato Networks
+ * +icon=https://assets.production.truefoundry.com/cato.png
+ */
+export interface CatoNetworksGuardrailConfig {
+    /**
+     * +label=Name
+     * +sort=50
+     * +usage=The name of the Guardrail Config.
+     * +message=3 to 36 lower case characters long alphanumeric word, may contain - in between, cannot start with a number
+     * +uiProps={"disableEdit":true}
+     */
+    name: string;
+    /**
+     * +label=Description
+     * +sort=75
+     * +usage=Optional description for this Guardrail Config.
+     */
+    description?: string;
+    /**
+     * +uiType=Hidden
+     * +value=integration/guardrail-config/cato-networks
+     */
+    type: 'integration/guardrail-config/cato-networks';
+    auth_data: CatoNetworksApiKeyAuth;
+    /**
+     * +label=Operation
+     * +usage=Validate treats a Cato block or anonymize action as a violation and leaves the payload unchanged. Mutate also replaces the messages with Cato's anonymized versions and continues.
+     * Validate guardrails are run in parallel while mutate guardrails are run sequentially.
+     * +uiType=MultiSelectPills
+     * +uiProps={"hideRadioIcon": true}
+     * +sort=100
+     */
+    operation: 'mutate' | 'validate';
+    /**
+     * +label=Priority
+     * +usage=Execution order for mutate guardrails. Lower values run first. Only applicable when operation is mutate.
+     * +sort=150
+     */
+    priority?: number;
+    enforcing_strategy: EnforcingStrategy;
+    /**
+     * +uiType=Ignore
+     * +uiProps={"forwardJsonKey": true}
+     */
+    config: {
+        /**
+         * +label=Base URL
+         * +usage=Cato API base URL. Use the regional Cato endpoint or the URL of a Cato Outpost in your environment. Trailing slashes are ignored.
+         * +sort=50
+         * +message=Base URL must be an http or https URL
+         */
+        base_url: string;
+    };
+}
 /**
  * +label=Cedar
  * +icon=truefoundry
@@ -11257,7 +11592,6 @@ export interface Cost {
     cache_creation_input_token_cost?: number;
     cache_creation_input_token_cost_per_hour?: number;
     cache_read_input_audio_token_cost?: number;
-    cache_read_input_image_token_cost?: number;
     cache_read_input_token_cost?: number;
     input_cost_per_annotated_page?: number;
     input_cost_per_audio_token?: number;
@@ -11447,6 +11781,7 @@ export interface CustomEndpoint {
      * +usage=Custom headers forwarded to the upstream endpoint with every request. For example: `{"X-Custom-Header": "value"}`
      * +sort=500
      * +isAdvanced=true
+     * +uiProps={"keyPlaceholder": "X-Custom-Header", "valuePlaceholder": "value", "allowSecrets": true}
      */
     headers?: {
         [k: string]: string;
@@ -11563,6 +11898,7 @@ export interface CustomEndpointIntegrations {
      * +usage=Custom headers forwarded to the upstream endpoint with every request. For example: `{"X-Custom-Header": "value"}`
      * +sort=500
      * +isAdvanced=true
+     * +uiProps={"keyPlaceholder": "X-Custom-Header", "valuePlaceholder": "value", "allowSecrets": true}
      */
     headers?: {
         [k: string]: string;
@@ -11877,6 +12213,13 @@ export interface CustomJWTAuthIntegration {
      * +sort=300
      */
     jwks_uri: string;
+    /**
+     * +label=Allowed Audiences
+     * +usage=One or more audience values that must be present in the `aud` claim of incoming JWT tokens. Tokens with an audience not listed here will be rejected. When unset, the login provider client ID is used if configured.
+     * +sort=350
+     * +placeholder=e.g. https://api.example.com
+     */
+    audiences?: string[];
     login_provider?: OAuth2LoginProvider;
     /**
      * +label=Access Control
@@ -12323,7 +12666,7 @@ export interface DatabricksProviderAccount {
 }
 /**
  * +label=Databricks Service Principal Auth
- * +usage=You can authenticate using Databricks service principal. To generate OAuth secret and Client ID, go to Databricks workspace -> Workspace Settings -> Identity and Access -> Service Principals -> Secrets.
+ * +usage=You can authenticate using Databricks service principal. To generate OAuth secret and Client ID, go to Databricks workspace -> Workspace Settings -> Identity and Access -> Service Principals -> Secrets. When generating the secret, select the scopes model-serving and ai-gateway.
  */
 export interface DatabricksServicePrincipalAuth {
     /**
@@ -14644,7 +14987,6 @@ export interface LoadBalancingWhen {
 }
 /**
  * +label=Guardrails Configuration
- * Named single-rule manifest (same grain as gateway-logging-config).
  */
 export interface GuardrailsConfig {
     /**
@@ -14705,8 +15047,8 @@ export interface GuardrailsConfig {
     custom_error_message?: string;
 }
 /**
- * Runtime rule shape used for matching. Named GuardrailsConfig maps to this via name → id.
- * Also the element type of the legacy folded NATS document `{ type, rules: [...] }`.
+ * Folded / legacy rule shape published under the single NATS key for older gateways.
+ * API manifests use GuardrailsConfig (named) instead.
  */
 export interface GuardrailsRule {
     id: string;
@@ -14717,11 +15059,6 @@ export interface GuardrailsRule {
     mcp_tool_post_invoke_guardrails: string[];
     custom_error_message?: string;
 }
-/** Legacy folded NATS projection published alongside named configs for older gateways. */
-export interface FoldedGuardrailsConfig {
-    type: 'gateway-guardrails-config';
-    rules: GuardrailsRule[];
-}
 export interface GuardrailsWhen {
     target?: TargetConditionGroup;
     subjects?: SubjectConditionGroup;
@@ -17274,82 +17611,10 @@ export interface OPABearerAuth {
     bearer_token: string;
 }
 /**
- * +label=Cato Networks
- * +icon=https://assets.production.truefoundry.com/cato.png
+ * +label=Noma Security
+ * +icon=https://assets.production.truefoundry.com/noma.ico
  */
-export interface CatoNetworksGuardrailConfig {
-    /**
-     * +label=Name
-     * +sort=50
-     * +usage=The name of the Guardrail Config.
-     * +message=3 to 36 lower case characters long alphanumeric word, may contain - in between, cannot start with a number
-     * +uiProps={"disableEdit":true}
-     */
-    name: string;
-    /**
-     * +label=Description
-     * +sort=75
-     * +usage=Optional description for this Guardrail Config.
-     */
-    description?: string;
-    /**
-     * +uiType=Hidden
-     * +value=integration/guardrail-config/cato-networks
-     */
-    type: 'integration/guardrail-config/cato-networks';
-    auth_data: CatoNetworksApiKeyAuth;
-    /**
-     * +label=Operation
-     * +usage=Validate treats a Cato block or anonymize action as a violation and leaves the payload unchanged. Mutate also replaces the messages with Cato's anonymized versions and continues.
-     * Validate guardrails are run in parallel while mutate guardrails are run sequentially.
-     * +uiType=MultiSelectPills
-     * +uiProps={"hideRadioIcon": true}
-     * +sort=100
-     */
-    operation: 'mutate' | 'validate';
-    /**
-     * +label=Priority
-     * +usage=Execution order for mutate guardrails. Lower values run first. Only applicable when operation is mutate.
-     * +sort=150
-     */
-    priority?: number;
-    enforcing_strategy: EnforcingStrategy;
-    /**
-     * +uiType=Ignore
-     * +uiProps={"forwardJsonKey": true}
-     */
-    config: {
-        /**
-         * +label=Base URL
-         * +usage=Cato API base URL. Use the regional Cato endpoint or the URL of a Cato Outpost in your environment. Trailing slashes are ignored.
-         * +sort=50
-         * +message=Base URL must be an http or https URL
-         */
-        base_url: string;
-    };
-}
-/**
- * +label=Cato Networks API Key Auth
- */
-export interface CatoNetworksApiKeyAuth {
-    /**
-     * +value=api-key
-     */
-    type: 'api-key';
-    /**
-     * +sort=100
-     * +usage=API key issued by Cato for this AI Security guard. Sent as a Bearer token. The key secret is never forwarded to Cato as the gateway key alias.
-     * +message=API key must not be empty
-     * +uiType=SecretSelect
-     * +uiProps={"isPassword": true, "enableNew": true}
-     */
-    api_key: string;
-}
-/**
- * +label=Noma Security
- * +icon=https://assets.production.truefoundry.com/noma.ico
- */
-export interface NomaSecurityGuardrailConfig {
+export interface NomaSecurityGuardrailConfig {
     /**
      * +label=Name
      * +sort=50
@@ -17833,7 +18098,7 @@ export interface IdentityProviderManifest {
      * +usage=Controls how JWT token claims are mapped to a TrueFoundry identity. Tokens can be resolved to a Virtual Account (recommended for machine users or shared external identities) or directly to a TrueFoundry User. If both options are configured, Virtual Account resolution takes precedence.
      * +sort=10040
      */
-    resolve_token_to: {
+    resolve_token_to?: {
         virtual_account?: ResolveToVirtualAccount;
         user?: ResolveToUser;
         agent?: ResolveToAgent;
@@ -17901,6 +18166,13 @@ export interface JWTBasedValidationConfig {
      * +placeholder=https://accounts.example.com/.well-known/jwks.json
      */
     jwks_uri: string;
+    /**
+     * +label=Token TTL (seconds)
+     * +usage=Lifetime of tokens TrueFoundry issues after exchanging a token from this provider. Allowed range is 60 to 3600 seconds.
+     * +sort=3000
+     * +message=Must be between 60 and 3600 seconds.
+     */
+    token_ttl_seconds?: number;
 }
 /**
  * +label=Virtual Account
@@ -18011,6 +18283,86 @@ export interface OktaCrossAppAccessSettings {
         [k: string]: string;
     };
 }
+/**
+ * +label=Snowflake
+ * +icon=snowflake-cortex
+ * +heroDataKey=account_identifier
+ */
+export interface SnowflakeProviderAccount {
+    /**
+     * +value=provider-account/snowflake
+     */
+    type: 'provider-account/snowflake';
+    /**
+     * +label=Name
+     * +sort=100
+     * +usage=The name of the Snowflake provider account
+     * +message=3 to 36 lower case characters long alphanumeric word, may contain - in between, cannot start with a number
+     * +uiProps={"disableEdit":true}
+     */
+    name: string;
+    /**
+     * +label=Snowflake Account Identifier
+     * +sort=200
+     * +message=Snowflake account identifier must not be empty
+     * +usage=Snowflake account identifier, as in https://<account_identifier>.snowflakecomputing.com. Insert the identifier only, without the URL.
+     */
+    account_identifier: string;
+    auth_data: SnowflakePatTokenAuth;
+    /**
+     * +label=Integrations
+     * +sort=400
+     * +usage=List of integrations that are associated with the Snowflake provider account
+     * +uiType=IntegrationsGroup
+     */
+    integrations: SnowflakeIntegrations[];
+    ownedBy?: OwnedBy;
+}
+/**
+ * +label=PAT
+ */
+export interface SnowflakePatTokenAuth {
+    /**
+     * +value=pat-token
+     */
+    type: 'pat-token';
+    /**
+     * +label=PAT Token
+     * +sort=100
+     * +usage=Snowflake programmatic access token. The account's network policy must allow the TrueFoundry control plane and gateway egress IPs.
+     * +message=PAT token must not be empty
+     * +uiType=SecretSelect
+     * +uiProps={"isPassword": true, "enableNew": true}
+     */
+    pat_token: string;
+}
+/**
+ * +label=Snowflake Cortex Agents
+ * +icon=snowflake-cortex
+ * +usage=Import agents from Snowflake Cortex into the TrueFoundry agent registry.
+ */
+export interface SnowflakeIntegrations {
+    /**
+     * +value=integration/agent-registry/snowflake/cortex-agent
+     */
+    type: 'integration/agent-registry/snowflake/cortex-agent';
+    /**
+     * +label=Display Name
+     * +usage=The name of the integration that will be displayed in the TrueFoundry UI.
+     * +sort=100
+     * +message=3 to 36 lower case characters long alphanumeric word, may contain - in between, cannot start with a number
+     */
+    name: string;
+    auth_data?: SnowflakePatTokenAuth;
+    syncSchedule?: CronSyncSchedule;
+    /**
+     * +label=Access Control
+     * +usage=List of subjects that are authorized to access this integration. List of user fqn in format <user_type>:<username>.
+     * +sort=600
+     * +uiType=AuthorizedSubjects
+     */
+    authorized_subjects?: string[];
+}
 /**
  * +label=Jfrog
  * +icon=jfrog
@@ -19570,7 +19922,7 @@ export interface TypeSafeIntegrations {
     /**
      * +label=Model ID
      * +sort=2
-     * +usage=The TypeSafe model identifier (e.g., jev-1.13.0, jev-latest). Pin a versioned id so confidence thresholds stay stable across releases.
+     * +usage=The TypeSafe model identifier (e.g., jev-1.13.0, jev-latest). Pin a versioned id so confidence thresholds stay stable across releases. On a Cloudflare Workers AI base URL, use the Workers AI model name instead (e.g., typesafe/jev, @cf/cloudflare/clef, @cf/cloudflare/clef-flash).
      * +message=Model ID must not be empty
      * +uiProps={"descriptionInline":true}
      */
@@ -19582,7 +19934,7 @@ export interface TypeSafeIntegrations {
      * +uiProps={"disableAllOption": true}
      */
     model_types: ModelType[];
-    cost?: PerThousandTokensCostMetric;
+    cost?: ModelCostMetric;
     /**
      * +label=Access Control
      * +sort=5
@@ -19750,7 +20102,7 @@ export interface Workflow {
  * +label=Alert
  */
 export interface WorkflowAlert {
-    notification_target?: NotificationTarget;
+    notification_target?: NotificationTargetForAlertRule;
     /**
      * +label=On Completion
      * +usage=Send an alert when the job completes
@@ -21672,6 +22024,7 @@ export interface MicrosoftFoundryProviderAccount {
      * +sort=300
      * +usage=The classic Azure OpenAI endpoint, e.g. https://{resource-name}.openai.azure.com (the /openai or /openai/v1 suffix is optional and stripped automatically).
      * +message=Endpoint URL must not be empty
+     * +uiProps={"descriptionInline":true}
      */
     openai_endpoint: string;
     /**
@@ -21679,6 +22032,7 @@ export interface MicrosoftFoundryProviderAccount {
      * +sort=310
      * +usage=The Microsoft Foundry project endpoint, e.g. https://{resource-name}.services.ai.azure.com/api/projects/{project-name}.
      * +message=Endpoint URL must not be empty
+     * +uiProps={"descriptionInline":true}
      */
     project_endpoint: string;
     /**
@@ -22520,7 +22874,7 @@ export interface TypeSafeProviderAccount {
     /**
      * +label=Base URL
      * +sort=250
-     * +usage=Optional custom base URL for the TypeSafe API (defaults to https://api.typesafe.ai)
+     * +usage=Optional custom base URL for the TypeSafe API (defaults to https://api.typesafe.ai). Point this at a Cloudflare account (https://api.cloudflare.com/client/v4/accounts/<account_id>) to serve System One models through Cloudflare Workers AI instead.
      * +message=Base URL must not be empty
      */
     base_url?: string;
@@ -23212,9 +23566,9 @@ export interface SecuritySettings {
     enabled: boolean;
     /**
      * +label=Maximum Expiry Time for Personal Access Token (PAT) in days
-     * +usage=Personal Access Tokens cannot be created with an expiry longer than this. Maximum allowed is 365 days.
+     * +usage=Personal Access Tokens cannot be created with an expiry longer than this. Maximum allowed is 7000 days.
      * +sort=2
-     * +message=Maximum expiry time must be between 1 and 365 days
+     * +message=Maximum expiry time must be between 1 and 7000 days
      */
     max_pat_expiry_minutes: number;
     /**
@@ -23226,16 +23580,31 @@ export interface SecuritySettings {
      */
     max_pats_per_user?: number;
     /**
-     * +label=Mandate Team Selection in Personal Access Token (PAT)
-     * +usage=Require a team owner to be selected while creating a Personal Access Token.
+     * +label=Personal Access Token (PAT) Team Assignment Mode
+     * +usage=Controls whether assigning a team owner while creating a Personal Access Token is required, optional, or disabled.
      * +sort=4
+     * +uiType=RadioCard
+     * +uiProps={"descriptionInline":true}
+     */
+    pat_team_assignment_mode?: 'optional' | 'required' | 'disabled';
+    /**
+     * +label=Enable PAT Retrieval After Creation
+     * +usage=Allow users to retrieve the value of their own Personal Access Tokens via API after creation.
+     * +sort=5
+     * +uiProps={"descriptionInline":true}
+     */
+    enable_pat_retrieval_after_creation?: boolean;
+    /**
+     * +label=Enable Viewing Secret
+     * +usage=Allow users with permission to view plaintext secret values in the UI and API. When disabled, secret values are never returned.
+     * +sort=6
      * +uiProps={"descriptionInline":true}
      */
-    mandate_team_selection_in_pat?: boolean;
+    enable_viewing_secrets?: boolean;
     /**
      * +label=Send security updates to
      * +usage=Email addresses to receive security-related notifications.
-     * +sort=5
+     * +sort=7
      * +message=Must be a valid email address
      */
     to_emails?: string[];
@@ -23603,47 +23972,6 @@ export interface JfrogArtifactsRegistry {
      */
     authorized_subjects?: string[];
 }
-/**
- * +label=TrueFoundry Models Model
- * +icon=truefoundry
- */
-export interface TrueFoundryModelsModel {
-    /**
-     * +value=integration/model/truefoundry-models
-     */
-    type: 'integration/model/truefoundry-models';
-    /**
-     * +label=Display Name
-     * +sort=1
-     * +usage=A descriptive name to identify this model integration in the UI
-     * +message=2 to 64 characters long alphanumeric word, may contain - , . or _ in between, cannot start with a number
-     */
-    name: string;
-    /**
-     * +label=Model ID
-     * +sort=2
-     * +usage=The full model name including the virtual model group prefix (e.g., tfy-managed/grok-4.7).
-     * +message=Model ID must not be empty
-     * +uiProps={"descriptionInline":true}
-     */
-    model_id: string;
-    /**
-     * +label=Model Types
-     * +sort=3
-     * +usage=Specify the type of the TrueFoundry Models model
-     * +uiType=Select
-     * +uiProps={"disableAllOption": true}
-     */
-    model_types: ModelType[];
-    cost?: ModelCostMetric;
-    /**
-     * +label=Access Control
-     * +sort=5
-     * +usage=List of subjects that are authorized to access this integration. List of user fqn in format <user_type>:<username>.
-     * +uiType=Hidden
-     */
-    authorized_subjects?: string[];
-}
 /**
  * +label=MCP Tool Approval Policy
  */
@@ -24000,6 +24328,13 @@ export interface RemoteAgentV2 {
      * +message=2 to 64 lower case characters long alphanumeric word, may contain - in between, cannot start with a number
      */
     name: string;
+    /**
+     * +label=Display Name
+     * +usage=A human-readable label for the Agent in the UI. If omitted, the agent name is shown.
+     * +message=1 to 128 characters long
+     * +sort=105
+     */
+    display_name?: string;
     /**
      * +label=Description
      * +usage=A short note on what this agent does — shown in the registry list and audit trail.
@@ -24007,6 +24342,14 @@ export interface RemoteAgentV2 {
      * +uiType=TextArea
      */
     description: string;
+    source?: RemoteAgentSource;
+    /**
+     * +label=State
+     * +usage=Lifecycle state of the agent. Active: managed and available for use. Unmanaged: imported from an external registry for governance (not fully managed yet). Inactive: disabled and cannot be used or invoked.
+     * +sort=116
+     * +uiType=Select
+     */
+    state?: 'active' | 'unmanaged' | 'inactive';
     identity: RemoteAgentV2AgentIdentity;
     proxy_via_gateway: RemoteAgentProxyViaGatewayConfig;
     /**
@@ -24065,6 +24408,33 @@ export interface SambaNovaModel {
      */
     authorized_subjects?: string[];
 }
+/**
+ * +label=Snowflake Cortex Agents
+ * +icon=snowflake-cortex
+ * +usage=Import agents from Snowflake Cortex into the TrueFoundry agent registry.
+ */
+export interface SnowflakeCortexAgentRegistry {
+    /**
+     * +value=integration/agent-registry/snowflake/cortex-agent
+     */
+    type: 'integration/agent-registry/snowflake/cortex-agent';
+    /**
+     * +label=Display Name
+     * +usage=The name of the integration that will be displayed in the TrueFoundry UI.
+     * +sort=100
+     * +message=3 to 36 lower case characters long alphanumeric word, may contain - in between, cannot start with a number
+     */
+    name: string;
+    auth_data?: SnowflakePatTokenAuth;
+    syncSchedule?: CronSyncSchedule;
+    /**
+     * +label=Access Control
+     * +usage=List of subjects that are authorized to access this integration. List of user fqn in format <user_type>:<username>.
+     * +sort=600
+     * +uiType=AuthorizedSubjects
+     */
+    authorized_subjects?: string[];
+}
 export interface SnowflakeCortexModel {
     /**
      * +value=integration/model/snowflake-cortex
@@ -24229,14 +24599,14 @@ export interface TrueFoundryDBSSM {
     authorized_subjects?: string[];
 }
 /**
- * +label=Wafer Model
- * +icon=https://assets.production.truefoundry.com/wafer.svg
+ * +label=TrueFoundry Models Model
+ * +icon=truefoundry
  */
-export interface WaferModel {
+export interface TrueFoundryModelsModel {
     /**
-     * +value=integration/model/wafer
+     * +value=integration/model/truefoundry-models
      */
-    type: 'integration/model/wafer';
+    type: 'integration/model/truefoundry-models';
     /**
      * +label=Display Name
      * +sort=1
@@ -24247,7 +24617,7 @@ export interface WaferModel {
     /**
      * +label=Model ID
      * +sort=2
-     * +usage=The Wafer model identifier (e.g., deepseek-v4-pro, deepseek-v4-flash). See https://docs.wafer.ai/serverless for the public catalog.
+     * +usage=The full model name including the virtual model group prefix (e.g., tfy-managed/grok-4.7).
      * +message=Model ID must not be empty
      * +uiProps={"descriptionInline":true}
      */
@@ -24255,7 +24625,8 @@ export interface WaferModel {
     /**
      * +label=Model Types
      * +sort=3
-     * +usage=Specify the type of the Wafer model
+     * +usage=Specify the type of the TrueFoundry Models model
+     * +uiType=Select
      * +uiProps={"disableAllOption": true}
      */
     model_types: ModelType[];
@@ -24287,7 +24658,7 @@ export interface TypeSafeModel {
     /**
      * +label=Model ID
      * +sort=2
-     * +usage=The TypeSafe model identifier (e.g., jev-1.13.0, jev-latest). Pin a versioned id so confidence thresholds stay stable across releases.
+     * +usage=The TypeSafe model identifier (e.g., jev-1.13.0, jev-latest). Pin a versioned id so confidence thresholds stay stable across releases. On a Cloudflare Workers AI base URL, use the Workers AI model name instead (e.g., typesafe/jev, @cf/cloudflare/clef, @cf/cloudflare/clef-flash).
      * +message=Model ID must not be empty
      * +uiProps={"descriptionInline":true}
      */
@@ -24299,7 +24670,47 @@ export interface TypeSafeModel {
      * +uiProps={"disableAllOption": true}
      */
     model_types: ModelType[];
-    cost?: PerThousandTokensCostMetric;
+    cost?: ModelCostMetric;
+    /**
+     * +label=Access Control
+     * +sort=5
+     * +usage=List of subjects that are authorized to access this integration. List of user fqn in format <user_type>:<username>.
+     * +uiType=Hidden
+     */
+    authorized_subjects?: string[];
+}
+/**
+ * +label=Wafer Model
+ * +icon=https://assets.production.truefoundry.com/wafer.svg
+ */
+export interface WaferModel {
+    /**
+     * +value=integration/model/wafer
+     */
+    type: 'integration/model/wafer';
+    /**
+     * +label=Display Name
+     * +sort=1
+     * +usage=A descriptive name to identify this model integration in the UI
+     * +message=2 to 64 characters long alphanumeric word, may contain - , . or _ in between, cannot start with a number
+     */
+    name: string;
+    /**
+     * +label=Model ID
+     * +sort=2
+     * +usage=The Wafer model identifier (e.g., deepseek-v4-pro, deepseek-v4-flash). See https://docs.wafer.ai/serverless for the public catalog.
+     * +message=Model ID must not be empty
+     * +uiProps={"descriptionInline":true}
+     */
+    model_id: string;
+    /**
+     * +label=Model Types
+     * +sort=3
+     * +usage=Specify the type of the Wafer model
+     * +uiProps={"disableAllOption": true}
+     */
+    model_types: ModelType[];
+    cost?: ModelCostMetric;
     /**
      * +label=Access Control
      * +sort=5