@truefoundry/ai-gateway-sdk 0.0.3 → 0.0.4

package/dist/autogen/schema.json

@@ -167,6 +167,26 @@
             },
             "$schema": "http://json-schema.org/draft-04/schema#"
         },
+        "AIFeaturesModels": {
+            "description": "+label=AI Features Models\n+usage=Gateway model to use for each task complexity tier. AI features route each\nrequest to the model matching the estimated difficulty of the task, trading off cost,\nlatency and quality. Each value is a Gateway model FQN in the form provider/model.",
+            "type": "object",
+            "required": ["simple", "medium", "complex"],
+            "properties": {
+                "simple": {
+                    "description": "+label=Simple Tasks\n+usage=Fast, low-cost model for high-volume, well-defined tasks like classification, extraction, formatting and short summaries.\n+sort=1\n+uiType=IntegrationSelect\n+uiProps={\"integrationType\":\"model\",\"descriptionInline\":true,\"valuePattern\":\"${providerAccount.name}/${manifest.name}\"}\n+message=Select a Gateway model for simple tasks",
+                    "type": "string"
+                },
+                "medium": {
+                    "description": "+label=Medium Tasks\n+usage=Balanced mid-tier model for standard tasks like general Q&A, structured output.\n+sort=2\n+uiType=IntegrationSelect\n+uiProps={\"integrationType\":\"model\",\"descriptionInline\":true,\"valuePattern\":\"${providerAccount.name}/${manifest.name}\"}\n+message=Select a Gateway model for medium tasks",
+                    "type": "string"
+                },
+                "complex": {
+                    "description": "+label=Complex Tasks\n+usage=Most capable model for demanding tasks like multi-step reasoning, code generation and nuanced analysis.\n+sort=3\n+uiType=IntegrationSelect\n+uiProps={\"integrationType\":\"model\",\"descriptionInline\":true,\"valuePattern\":\"${providerAccount.name}/${manifest.name}\"}\n+message=Select a Gateway model for complex tasks",
+                    "type": "string"
+                }
+            },
+            "$schema": "http://json-schema.org/draft-04/schema#"
+        },
         "AIFeaturesSettings": {
             "description": "+docs=Describes the configuration for TrueFoundry AI features\n+label=AI Features Settings",
             "type": "object",
@@ -182,9 +202,13 @@
                     "type": "boolean"
                 },
                 "ai_provider": {
-                    "description": "+label=AI Provider\n+usage=AI provider to use for AI features\nWhen TrueFoundry is selected, TrueFoundry will manage and provide the AI models for the features.\n+uiProps={\"disableEdit\":true}",
+                    "description": "+label=AI Provider\n+usage=AI provider to use for AI features.\nTrueFoundry manages models on SaaS. Self-Managed uses your gateway models.\n+sort=2",
                     "type": "string",
-                    "enum": ["truefoundry"]
+                    "enum": ["truefoundry", "self-managed"],
+                    "default": "truefoundry"
+                },
+                "models": {
+                    "$ref": "#/definitions/AIFeaturesModels"
                 }
             },
             "$schema": "http://json-schema.org/draft-04/schema#"
@@ -2289,6 +2313,92 @@
             },
             "$schema": "http://json-schema.org/draft-04/schema#"
         },
+        "AwsAgentCoreHarness": {
+            "description": "+label=AWS AgentCore Harness\n+icon=aws-agentcore-harness\n+usage=Import agents from Amazon Bedrock AgentCore harness into the TrueFoundry agent registry.",
+            "type": "object",
+            "required": ["type", "name", "region"],
+            "properties": {
+                "type": {
+                    "description": "+value=integration/agent-registry/aws/agentcore-harness",
+                    "type": "string",
+                    "enum": ["integration/agent-registry/aws/agentcore-harness"]
+                },
+                "name": {
+                    "description": "+label=Display Name\n+usage=The name of the integration that will be displayed in the TrueFoundry UI.\n+sort=100\n+message=3 to 36 lower case characters long alphanumeric word, may contain - in between, cannot start with a number",
+                    "type": "string",
+                    "pattern": "^[a-z][a-z0-9\\-]{1,34}[a-z0-9]$"
+                },
+                "region": {
+                    "$ref": "#/definitions/AWSRegion"
+                },
+                "syncSchedule": {
+                    "$ref": "#/definitions/CronSyncSchedule"
+                },
+                "auth_data": {
+                    "description": "+label=Auth Data\n+usage=Custom authentication data for the integration.\n+sort=300\n+discriminator=type",
+                    "type": "object",
+                    "oneOf": [
+                        {
+                            "$ref": "#/definitions/AwsAccessKeyBasedAuth"
+                        },
+                        {
+                            "$ref": "#/definitions/AwsAssumedRoleBasedAuth"
+                        }
+                    ]
+                },
+                "authorized_subjects": {
+                    "description": "+label=Access Control\n+usage=List of subjects that are authorized to access this integration. List of user fqn in format <user_type>:<username>.\n+sort=600\n+uiType=AuthorizedSubjects",
+                    "type": "array",
+                    "items": {
+                        "type": "string"
+                    }
+                }
+            },
+            "$schema": "http://json-schema.org/draft-04/schema#"
+        },
+        "AwsAgentCoreRuntime": {
+            "description": "+label=AWS AgentCore Runtime\n+icon=aws-agentcore-runtime\n+usage=Import agents from Amazon Bedrock AgentCore runtime into the TrueFoundry agent registry.",
+            "type": "object",
+            "required": ["type", "name", "region"],
+            "properties": {
+                "type": {
+                    "description": "+value=integration/agent-registry/aws/agentcore-runtime",
+                    "type": "string",
+                    "enum": ["integration/agent-registry/aws/agentcore-runtime"]
+                },
+                "name": {
+                    "description": "+label=Display Name\n+usage=The name of the integration that will be displayed in the TrueFoundry UI.\n+sort=100\n+message=3 to 36 lower case characters long alphanumeric word, may contain - in between, cannot start with a number",
+                    "type": "string",
+                    "pattern": "^[a-z][a-z0-9\\-]{1,34}[a-z0-9]$"
+                },
+                "region": {
+                    "$ref": "#/definitions/AWSRegion"
+                },
+                "syncSchedule": {
+                    "$ref": "#/definitions/CronSyncSchedule"
+                },
+                "auth_data": {
+                    "description": "+label=Auth Data\n+usage=Custom authentication data for the integration.\n+sort=300\n+discriminator=type",
+                    "type": "object",
+                    "oneOf": [
+                        {
+                            "$ref": "#/definitions/AwsAccessKeyBasedAuth"
+                        },
+                        {
+                            "$ref": "#/definitions/AwsAssumedRoleBasedAuth"
+                        }
+                    ]
+                },
+                "authorized_subjects": {
+                    "description": "+label=Access Control\n+usage=List of subjects that are authorized to access this integration. List of user fqn in format <user_type>:<username>.\n+sort=600\n+uiType=AuthorizedSubjects",
+                    "type": "array",
+                    "items": {
+                        "type": "string"
+                    }
+                }
+            },
+            "$schema": "http://json-schema.org/draft-04/schema#"
+        },
         "AwsAssumedRoleBasedAuth": {
             "description": "+label=AWS Assumed Role Based Auth",
             "type": "object",
@@ -2629,6 +2739,12 @@
                 },
                 {
                     "$ref": "#/definitions/AwsEksIntegration"
+                },
+                {
+                    "$ref": "#/definitions/AwsAgentCoreRuntime"
+                },
+                {
+                    "$ref": "#/definitions/AwsAgentCoreHarness"
                 }
             ],
             "$schema": "http://json-schema.org/draft-04/schema#"
@@ -3686,6 +3802,12 @@
                 },
                 {
                     "$ref": "#/definitions/AzureReposIntegration"
+                },
+                {
+                    "$ref": "#/definitions/MicrosoftCopilotStudio"
+                },
+                {
+                    "$ref": "#/definitions/MicrosoftFoundry"
                 }
             ],
             "$schema": "http://json-schema.org/draft-04/schema#"
@@ -6213,6 +6335,78 @@
             },
             "$schema": "http://json-schema.org/draft-04/schema#"
         },
+        "CatoNetworksApiKeyAuth": {
+            "description": "+label=Cato Networks API Key Auth",
+            "type": "object",
+            "required": ["type", "api_key"],
+            "properties": {
+                "type": {
+                    "description": "+value=api-key",
+                    "type": "string",
+                    "enum": ["api-key"]
+                },
+                "api_key": {
+                    "description": "+sort=100\n+usage=API key issued by Cato for this AI Security guard. Sent as a Bearer token. The key secret is never forwarded to Cato as the gateway key alias.\n+message=API key must not be empty\n+uiType=SecretSelect\n+uiProps={\"isPassword\": true, \"enableNew\": true}",
+                    "type": "string",
+                    "pattern": "^\\S+$"
+                }
+            },
+            "$schema": "http://json-schema.org/draft-04/schema#"
+        },
+        "CatoNetworksGuardrailConfig": {
+            "description": "+label=Cato Networks\n+icon=https://assets.production.truefoundry.com/cato.png",
+            "type": "object",
+            "required": ["name", "type", "auth_data", "operation", "enforcing_strategy", "config"],
+            "properties": {
+                "name": {
+                    "description": "+label=Name\n+sort=50\n+usage=The name of the Guardrail Config.\n+message=3 to 36 lower case characters long alphanumeric word, may contain - in between, cannot start with a number\n+uiProps={\"disableEdit\":true}",
+                    "type": "string",
+                    "pattern": "^[a-z][a-z0-9\\-]{1,34}[a-z0-9]$"
+                },
+                "description": {
+                    "description": "+label=Description\n+sort=75\n+usage=Optional description for this Guardrail Config.",
+                    "type": "string",
+                    "default": "Cato AI Security runtime protection for prompts and model responses"
+                },
+                "type": {
+                    "description": "+uiType=Hidden\n+value=integration/guardrail-config/cato-networks",
+                    "type": "string",
+                    "enum": ["integration/guardrail-config/cato-networks"]
+                },
+                "auth_data": {
+                    "$ref": "#/definitions/CatoNetworksApiKeyAuth"
+                },
+                "operation": {
+                    "description": "+label=Operation\n+usage=Validate treats a Cato block or anonymize action as a violation and leaves the payload unchanged. Mutate also replaces the messages with Cato's anonymized versions and continues.\nValidate guardrails are run in parallel while mutate guardrails are run sequentially.\n+uiType=MultiSelectPills\n+uiProps={\"hideRadioIcon\": true}\n+sort=100",
+                    "type": "string",
+                    "enum": ["mutate", "validate"],
+                    "default": "mutate"
+                },
+                "priority": {
+                    "description": "+label=Priority\n+usage=Execution order for mutate guardrails. Lower values run first. Only applicable when operation is mutate.\n+sort=150",
+                    "type": "integer",
+                    "minimum": 0,
+                    "exclusiveMinimum": true,
+                    "default": 1
+                },
+                "enforcing_strategy": {
+                    "$ref": "#/definitions/EnforcingStrategy"
+                },
+                "config": {
+                    "description": "+uiType=Ignore\n+uiProps={\"forwardJsonKey\": true}",
+                    "type": "object",
+                    "required": ["base_url"],
+                    "properties": {
+                        "base_url": {
+                            "description": "+label=Base URL\n+usage=Cato API base URL. Use the regional Cato endpoint or the URL of a Cato Outpost in your environment. Trailing slashes are ignored.\n+sort=50\n+message=Base URL must be an http or https URL",
+                            "type": "string",
+                            "pattern": "^https?:\\/\\/\\S+$"
+                        }
+                    }
+                }
+            },
+            "$schema": "http://json-schema.org/draft-04/schema#"
+        },
         "CedarGuardrailConfig": {
             "description": "+label=Cedar\n+icon=truefoundry",
             "type": "object",
@@ -7140,6 +7334,9 @@
                         },
                         {
                             "$ref": "#/definitions/CustomClassificationStrategy"
+                        },
+                        {
+                            "$ref": "#/definitions/DecisionClassificationStrategy"
                         }
                     ]
                 },
@@ -7314,10 +7511,6 @@
                     "type": "number",
                     "minimum": 0
                 },
-                "cache_read_input_image_token_cost": {
-                    "type": "number",
-                    "minimum": 0
-                },
                 "cache_read_input_token_cost": {
                     "type": "number",
                     "minimum": 0
@@ -7535,6 +7728,29 @@
             },
             "$schema": "http://json-schema.org/draft-04/schema#"
         },
+        "CronSyncSchedule": {
+            "description": "+label=Cron Sync Schedule",
+            "type": "object",
+            "required": ["type", "expression"],
+            "properties": {
+                "type": {
+                    "description": "+value=cron",
+                    "type": "string",
+                    "enum": ["cron"]
+                },
+                "expression": {
+                    "description": "+label=Cron Expression\n+usage=Cron expression for when to run the sync. Minute cannot be configured.\n+uiType=CronInput\n+uiProps={\"disableMinute\": true, \"hideTimezonePicker\": true}\n```\n* * * * *\n  | | | |\n  | | | |___ day of week (0-6) (Sunday is 0)\n  | | |_____ month (1-12)\n  | |_______ day of month (1-31)\n  |_________ hour (0-23)\n```\n+message=Sync schedule must not specify a minute.",
+                    "type": "string",
+                    "pattern": "^0 [^ ]+ [^ ]+ [^ ]+ [^ ]+$"
+                },
+                "timezone": {
+                    "description": "+label=Timezone\n+uiType=TimezoneSelect\n+usage=Timezone against which the cron schedule will be calculated, e.g. \"Asia/Tokyo\". Default is UTC.\nhttps://docs.truefoundry.com/docs/list-of-supported-timezones",
+                    "type": "string",
+                    "default": "UTC"
+                }
+            },
+            "$schema": "http://json-schema.org/draft-04/schema#"
+        },
         "CrowdStrikeAIDRGuardrailConfig": {
             "description": "+label=CrowdStrike AIDR\n+icon=https://assets.production.truefoundry.com/crowdstrike-aidr-logo.svg",
             "type": "object",
@@ -7810,7 +8026,7 @@
                     "$ref": "#/definitions/CustomHeaderAuth"
                 },
                 "headers": {
-                    "description": "+label=Custom Headers\n+usage=Custom headers forwarded to the upstream endpoint with every request. For example: `{\"X-Custom-Header\": \"value\"}`\n+sort=500\n+isAdvanced=true",
+                    "description": "+label=Custom Headers\n+usage=Custom headers forwarded to the upstream endpoint with every request. For example: `{\"X-Custom-Header\": \"value\"}`\n+sort=500\n+isAdvanced=true\n+uiProps={\"keyPlaceholder\": \"X-Custom-Header\", \"valuePlaceholder\": \"value\", \"allowSecrets\": true}",
                     "type": "object",
                     "additionalProperties": {
                         "type": "string"
@@ -8124,6 +8340,14 @@
                     "type": "string",
                     "pattern": "^https:\\/\\/(([a-zA-Z0-9-]{1,63}\\.)+[a-zA-Z]{2,63})(\\/[^\\s]*)?$"
                 },
+                "audiences": {
+                    "description": "+label=Allowed Audiences\n+usage=One or more audience values that must be present in the `aud` claim of incoming JWT tokens. Tokens with an audience not listed here will be rejected. When unset, the login provider client ID is used if configured.\n+sort=350\n+placeholder=e.g. https://api.example.com",
+                    "type": "array",
+                    "items": {
+                        "type": "string",
+                        "pattern": "^\\S+$"
+                    }
+                },
                 "login_provider": {
                     "$ref": "#/definitions/OAuth2LoginProvider"
                 },
@@ -8659,7 +8883,7 @@
             "$schema": "http://json-schema.org/draft-04/schema#"
         },
         "DatabricksServicePrincipalAuth": {
-            "description": "+label=Databricks Service Principal Auth\n+usage=You can authenticate using Databricks service principal. To generate OAuth secret and Client ID, go to Databricks workspace -> Workspace Settings -> Identity and Access -> Service Principals -> Secrets.",
+            "description": "+label=Databricks Service Principal Auth\n+usage=You can authenticate using Databricks service principal. To generate OAuth secret and Client ID, go to Databricks workspace -> Workspace Settings -> Identity and Access -> Service Principals -> Secrets. When generating the secret, select the scopes model-serving and ai-gateway.",
             "type": "object",
             "required": ["type", "oauth_secret", "client_id"],
             "properties": {
@@ -8681,6 +8905,45 @@
             },
             "$schema": "http://json-schema.org/draft-04/schema#"
         },
+        "DecisionClassificationStrategy": {
+            "description": "+label=Decision Model\n+usage=Classify request using a TypeSafe decision model such as Jev. The gateway builds the question itself; the rubric is built in and not configurable.",
+            "type": "object",
+            "required": ["type", "model", "fallback_strategy"],
+            "properties": {
+                "type": {
+                    "description": "+value=decision-classifier\n+sort=1\n+label=Strategy",
+                    "type": "string",
+                    "enum": ["decision-classifier"]
+                },
+                "model": {
+                    "description": "+usage=Catalog model FQN used to classify request complexity. Must be resolvable by this tenant, must be a TypeSafe catalog model (not a virtual model), and must be a decision model.\n+uiType=IntegrationSelect\n+uiProps={\"integrationType\":\"model\", \"valuePattern\": \"${providerAccount.name}/${manifest.name}\", \"filterConfig\": {\"model_types\": [\"decision\"]}}\n+sort=2\n+label=Classifier Model",
+                    "type": "string"
+                },
+                "timeout_ms": {
+                    "description": "+usage=Maximum time to wait for the classifier response in milliseconds before applying the fallback strategy.\n+uiProps={\"descriptionInline\":true}\n+sort=3\n+label=Timeout (ms)",
+                    "type": "integer",
+                    "minimum": 0,
+                    "exclusiveMinimum": true,
+                    "default": 800
+                },
+                "fallback_strategy": {
+                    "description": "+usage=Fallback strategy applied when the classifier fails.\n+uiProps={\"descriptionInline\":true}\n+sort=4\n+label=Fallback Strategy\n+discriminator=type",
+                    "type": "object",
+                    "default": {
+                        "type": "heuristic"
+                    },
+                    "oneOf": [
+                        {
+                            "$ref": "#/definitions/HeuristicFallbackStrategy"
+                        },
+                        {
+                            "$ref": "#/definitions/StaticFallbackStrategy"
+                        }
+                    ]
+                }
+            },
+            "$schema": "http://json-schema.org/draft-04/schema#"
+        },
         "DeepgramApiKeyAuth": {
             "description": "+label=Deepgram API Key Auth\n+icon=https://assets.production.truefoundry.com/deepgram.svg",
             "type": "object",
@@ -12524,25 +12787,66 @@
         "GuardrailsConfig": {
             "description": "+label=Guardrails Configuration",
             "type": "object",
-            "required": ["type", "rules"],
+            "required": [
+                "type",
+                "name",
+                "when",
+                "llm_input_guardrails",
+                "llm_output_guardrails",
+                "mcp_tool_pre_invoke_guardrails",
+                "mcp_tool_post_invoke_guardrails"
+            ],
             "properties": {
                 "type": {
-                    "description": "+value=gateway-guardrails-config\n+sort=2",
+                    "description": "+value=gateway-guardrails-config\n+sort=1",
                     "type": "string",
                     "enum": ["gateway-guardrails-config"]
                 },
-                "rules": {
-                    "description": "+usage=List of guardrail rules\n+uiProps={\"descriptionInline\":true}\n+sort=3\n+label=Guardrail Rules",
+                "name": {
+                    "description": "+usage=Unique name for this guardrails configuration\n+uiProps={\"descriptionInline\":true}\n+label=Configuration Name\n+sort=2",
+                    "type": "string",
+                    "pattern": "^[a-zA-Z](?:[a-zA-Z0-9\\-]{0,60}[a-zA-Z0-9])$"
+                },
+                "when": {
+                    "$ref": "#/definitions/GuardrailsWhen"
+                },
+                "llm_input_guardrails": {
+                    "description": "+usage=Guardrail selectors of the guardrails to apply to the input (format: groupName/guardrailName)\n+uiProps={\"descriptionInline\":true}\n+sort=4\n+label=Input Guardrails",
                     "type": "array",
                     "items": {
-                        "$ref": "#/definitions/GuardrailsRule"
+                        "type": "string"
                     }
+                },
+                "llm_output_guardrails": {
+                    "description": "+usage=Guardrail selectors of the guardrails to apply to the output (format: groupName/guardrailName)\n+uiProps={\"descriptionInline\":true}\n+sort=5\n+label=Output Guardrails",
+                    "type": "array",
+                    "items": {
+                        "type": "string"
+                    }
+                },
+                "mcp_tool_pre_invoke_guardrails": {
+                    "description": "+usage=Guardrail selectors of the guardrails to apply to the MCP tool pre invoke (format: groupName/guardrailName)\n+uiProps={\"descriptionInline\":true}\n+sort=6\n+label=MCP Tool Pre Invoke Guardrails",
+                    "type": "array",
+                    "items": {
+                        "type": "string"
+                    }
+                },
+                "mcp_tool_post_invoke_guardrails": {
+                    "description": "+usage=Guardrail selectors of the guardrails to apply to the MCP tool post invoke (format: groupName/guardrailName)\n+uiProps={\"descriptionInline\":true}\n+sort=7\n+label=MCP Tool Post Invoke Guardrails",
+                    "type": "array",
+                    "items": {
+                        "type": "string"
+                    }
+                },
+                "custom_error_message": {
+                    "description": "+label=Custom Error Message\n+usage=Optional message returned to the client when a guardrail in this config blocks a request. Supported placeholders: {{guardrail_message}} (default guardrail failure detail), {{failed_guardrails}} (comma-separated list of the guardrails that failed).\n+sort=500\n+isAdvanced=true\n+placeholder=Your request was blocked by {{failed_guardrails}}: {{guardrail_message}}\n+uiProps={\"descriptionInline\":true}",
+                    "type": "string"
                 }
             },
             "$schema": "http://json-schema.org/draft-04/schema#"
         },
         "GuardrailsRule": {
-            "description": "+label=Guardrails Rule",
+            "description": "+label=Guardrails Rule (folded/legacy NATS shape)",
             "type": "object",
             "required": [
                 "id",
@@ -13211,7 +13515,7 @@
         },
         "IdentityProviderManifest": {
             "type": "object",
-            "required": ["type", "name", "provider", "config", "resolve_token_to"],
+            "required": ["type", "name", "provider", "config"],
             "properties": {
                 "type": {
                     "description": "+sort=10000\n+value=identity-provider",
@@ -13278,7 +13582,7 @@
         },
         "IdentityProviders": {
             "type": "string",
-            "enum": ["custom", "okta", "azure-entra-id", "auth0"],
+            "enum": ["custom", "okta", "azure-entra-id", "kubernetes", "github", "aws", "gcp", "auth0"],
             "default": "custom",
             "$schema": "http://json-schema.org/draft-04/schema#"
         },
@@ -13406,6 +13710,9 @@
                 {
                     "$ref": "#/definitions/AwsProviderAccount"
                 },
+                {
+                    "$ref": "#/definitions/SnowflakeProviderAccount"
+                },
                 {
                     "$ref": "#/definitions/AzureProviderAccount"
                 },
@@ -13657,9 +13964,6 @@
                 {
                     "$ref": "#/definitions/ProvisioningSettings"
                 },
-                {
-                    "$ref": "#/definitions/LegacyAgentManifest"
-                },
                 {
                     "$ref": "#/definitions/AgentAppManifest"
                 },
@@ -13678,9 +13982,6 @@
                 {
                     "$ref": "#/definitions/OidcClientManifest"
                 },
-                {
-                    "$ref": "#/definitions/AgentManifest"
-                },
                 {
                     "$ref": "#/definitions/ModelConfig"
                 },
@@ -13829,6 +14130,12 @@
                     "description": "+label=JWKS URI\n+usage=The public HTTPS endpoint exposing your provider's JSON Web Key Set (JWKS). TrueFoundry fetches public keys from this URL to verify JWT signatures — ensure it is reachable from the TrueFoundry control plane.\n+sort=2500\n+message=Must be a valid HTTPS URL.\n+placeholder=https://accounts.example.com/.well-known/jwks.json",
                     "type": "string",
                     "pattern": "^https://[^\\s/]+(/[^\\s]*)?$"
+                },
+                "token_ttl_seconds": {
+                    "description": "+label=Token TTL (seconds)\n+usage=Lifetime of tokens TrueFoundry issues after exchanging a token from this provider. Allowed range is 60 to 3600 seconds.\n+sort=3000\n+message=Must be between 60 and 3600 seconds.",
+                    "type": "integer",
+                    "minimum": 60,
+                    "maximum": 3600
                 }
             },
             "$schema": "http://json-schema.org/draft-04/schema#"
@@ -14072,7 +14379,7 @@
                     }
                 },
                 "notification_target": {
-                    "$ref": "#/definitions/NotificationTarget"
+                    "$ref": "#/definitions/NotificationTargetForAlertRule"
                 },
                 "on_start": {
                     "description": "+label=On Start\n+usage=Send an alert when the job starts\n+sort=670",
@@ -14788,7 +15095,7 @@
                 "local_build": {
                     "description": "run docker build locally",
                     "type": "boolean",
-                    "default": true
+                    "default": false
                 }
             },
             "$schema": "http://json-schema.org/draft-04/schema#"
@@ -15908,6 +16215,86 @@
             "enum": ["system", "user", "assistant", "developer"],
             "$schema": "http://json-schema.org/draft-04/schema#"
         },
+        "MicrosoftCopilotStudio": {
+            "description": "+label=Microsoft Copilot Studio\n+icon=copilot-studio\n+usage=Import agents from Microsoft Copilot Studio into the TrueFoundry agent registry.",
+            "type": "object",
+            "required": ["type", "name"],
+            "properties": {
+                "type": {
+                    "description": "+value=integration/agent-registry/azure/microsoft-copilot-studio",
+                    "type": "string",
+                    "enum": ["integration/agent-registry/azure/microsoft-copilot-studio"]
+                },
+                "name": {
+                    "description": "+label=Display Name\n+usage=The name of the integration that will be displayed in the TrueFoundry UI.\n+sort=100\n+message=3 to 36 lower case characters long alphanumeric word, may contain - in between, cannot start with a number",
+                    "type": "string",
+                    "pattern": "^[a-z][a-z0-9\\-]{1,34}[a-z0-9]$"
+                },
+                "syncSchedule": {
+                    "$ref": "#/definitions/CronSyncSchedule"
+                },
+                "auth_data": {
+                    "description": "+label=Auth Data\n+usage=Custom authentication data for the integration.\n+sort=300\n+discriminator=type",
+                    "type": "object",
+                    "oneOf": [
+                        {
+                            "$ref": "#/definitions/AzureCertificateAuth"
+                        },
+                        {
+                            "$ref": "#/definitions/AzureClientSecretAuth"
+                        }
+                    ]
+                },
+                "authorized_subjects": {
+                    "description": "+label=Access Control\n+usage=List of subjects that are authorized to access this integration. List of user fqn in format <user_type>:<username>.\n+sort=600\n+uiType=AuthorizedSubjects",
+                    "type": "array",
+                    "items": {
+                        "type": "string"
+                    }
+                }
+            },
+            "$schema": "http://json-schema.org/draft-04/schema#"
+        },
+        "MicrosoftFoundry": {
+            "description": "+label=Microsoft Foundry\n+icon=microsoft-foundry\n+usage=Import agents from Microsoft Foundry into the TrueFoundry agent registry.",
+            "type": "object",
+            "required": ["type", "name"],
+            "properties": {
+                "type": {
+                    "description": "+value=integration/agent-registry/azure/microsoft-foundry",
+                    "type": "string",
+                    "enum": ["integration/agent-registry/azure/microsoft-foundry"]
+                },
+                "name": {
+                    "description": "+label=Display Name\n+usage=The name of the integration that will be displayed in the TrueFoundry UI.\n+sort=100\n+message=3 to 36 lower case characters long alphanumeric word, may contain - in between, cannot start with a number",
+                    "type": "string",
+                    "pattern": "^[a-z][a-z0-9\\-]{1,34}[a-z0-9]$"
+                },
+                "syncSchedule": {
+                    "$ref": "#/definitions/CronSyncSchedule"
+                },
+                "auth_data": {
+                    "description": "+label=Auth Data\n+usage=Custom authentication data for the integration.\n+sort=300\n+discriminator=type",
+                    "type": "object",
+                    "oneOf": [
+                        {
+                            "$ref": "#/definitions/AzureCertificateAuth"
+                        },
+                        {
+                            "$ref": "#/definitions/AzureClientSecretAuth"
+                        }
+                    ]
+                },
+                "authorized_subjects": {
+                    "description": "+label=Access Control\n+usage=List of subjects that are authorized to access this integration. List of user fqn in format <user_type>:<username>.\n+sort=600\n+uiType=AuthorizedSubjects",
+                    "type": "array",
+                    "items": {
+                        "type": "string"
+                    }
+                }
+            },
+            "$schema": "http://json-schema.org/draft-04/schema#"
+        },
         "MicrosoftFoundryModel": {
             "description": "+label=Microsoft Foundry Model\n+icon=azure",
             "type": "object",
@@ -15980,12 +16367,12 @@
                     "pattern": "^[a-z][a-z0-9\\-]{1,30}[a-z0-9]$"
                 },
                 "openai_endpoint": {
-                    "description": "+label=Azure OpenAI Endpoint\n+sort=300\n+usage=The classic Azure OpenAI endpoint, e.g. https://{resource-name}.openai.azure.com (the /openai or /openai/v1 suffix is optional and stripped automatically).\n+message=Endpoint URL must not be empty",
+                    "description": "+label=Azure OpenAI Endpoint\n+sort=300\n+usage=The classic Azure OpenAI endpoint, e.g. https://{resource-name}.openai.azure.com (the /openai or /openai/v1 suffix is optional and stripped automatically).\n+message=Endpoint URL must not be empty\n+uiProps={\"descriptionInline\":true}",
                     "type": "string",
                     "pattern": "^\\S+$"
                 },
                 "project_endpoint": {
-                    "description": "+label=Project Endpoint\n+sort=310\n+usage=The Microsoft Foundry project endpoint, e.g. https://{resource-name}.services.ai.azure.com/api/projects/{project-name}.\n+message=Endpoint URL must not be empty",
+                    "description": "+label=Project Endpoint\n+sort=310\n+usage=The Microsoft Foundry project endpoint, e.g. https://{resource-name}.services.ai.azure.com/api/projects/{project-name}.\n+message=Endpoint URL must not be empty\n+uiProps={\"descriptionInline\":true}",
                     "type": "string",
                     "pattern": "^\\S+$"
                 },
@@ -16213,6 +16600,7 @@
                 "ocr",
                 "responses",
                 "video",
+                "decision",
                 "unknown",
                 "unsupported"
             ],
@@ -16625,6 +17013,9 @@
                 {
                     "$ref": "#/definitions/WaferProviderAccount"
                 },
+                {
+                    "$ref": "#/definitions/TypeSafeProviderAccount"
+                },
                 {
                     "$ref": "#/definitions/SnowflakeCortexProviderAccount"
                 },
@@ -16674,7 +17065,8 @@
                 "image",
                 "responses",
                 "ocr",
-                "video"
+                "video",
+                "decision"
             ],
             "$schema": "http://json-schema.org/draft-04/schema#"
         },
@@ -16870,88 +17262,16 @@
             "type": "object",
             "required": ["type"],
             "properties": {
-                "type": {
-                    "description": "+value=nodepool_selector",
-                    "type": "string",
-                    "enum": ["nodepool_selector"]
-                },
-                "nodepools": {
-                    "description": "+label=Nodepools\n+usage=Nodepools where you want to run your workload. Multiple nodepools can be selected.\n The workload is guaranteed to be scheduled on one of the nodepool",
-                    "type": "array",
-                    "items": {
-                        "type": "string"
-                    }
-                }
-            },
-            "$schema": "http://json-schema.org/draft-04/schema#"
-        },
-        "CatoNetworksApiKeyAuth": {
-            "description": "+label=Cato Networks API Key Auth",
-            "type": "object",
-            "required": ["type", "api_key"],
-            "properties": {
-                "type": {
-                    "description": "+value=api-key",
-                    "type": "string",
-                    "enum": ["api-key"]
-                },
-                "api_key": {
-                    "description": "+sort=100\n+usage=API key issued by Cato for this AI Security guard. Sent as a Bearer token. The key secret is never forwarded to Cato as the gateway key alias.\n+message=API key must not be empty\n+uiType=SecretSelect\n+uiProps={\"isPassword\": true, \"enableNew\": true}",
-                    "type": "string",
-                    "pattern": "^\\S+$"
-                }
-            },
-            "$schema": "http://json-schema.org/draft-04/schema#"
-        },
-        "CatoNetworksGuardrailConfig": {
-            "description": "+label=Cato Networks\n+icon=https://assets.production.truefoundry.com/cato.png",
-            "type": "object",
-            "required": ["name", "type", "auth_data", "operation", "enforcing_strategy", "config"],
-            "properties": {
-                "name": {
-                    "description": "+label=Name\n+sort=50\n+usage=The name of the Guardrail Config.\n+message=3 to 36 lower case characters long alphanumeric word, may contain - in between, cannot start with a number\n+uiProps={\"disableEdit\":true}",
-                    "type": "string",
-                    "pattern": "^[a-z][a-z0-9\\-]{1,34}[a-z0-9]$"
-                },
-                "description": {
-                    "description": "+label=Description\n+sort=75\n+usage=Optional description for this Guardrail Config.",
-                    "type": "string",
-                    "default": "Cato AI Security runtime protection for prompts and model responses"
-                },
-                "type": {
-                    "description": "+uiType=Hidden\n+value=integration/guardrail-config/cato-networks",
-                    "type": "string",
-                    "enum": ["integration/guardrail-config/cato-networks"]
-                },
-                "auth_data": {
-                    "$ref": "#/definitions/CatoNetworksApiKeyAuth"
-                },
-                "operation": {
-                    "description": "+label=Operation\n+usage=Validate treats a Cato block or anonymize action as a violation and leaves the payload unchanged. Mutate also replaces the messages with Cato's anonymized versions and continues.\nValidate guardrails are run in parallel while mutate guardrails are run sequentially.\n+uiType=MultiSelectPills\n+uiProps={\"hideRadioIcon\": true}\n+sort=100",
-                    "type": "string",
-                    "enum": ["mutate", "validate"],
-                    "default": "mutate"
-                },
-                "priority": {
-                    "description": "+label=Priority\n+usage=Execution order for mutate guardrails. Lower values run first. Only applicable when operation is mutate.\n+sort=150",
-                    "type": "integer",
-                    "minimum": 0,
-                    "exclusiveMinimum": true,
-                    "default": 1
-                },
-                "enforcing_strategy": {
-                    "$ref": "#/definitions/EnforcingStrategy"
+                "type": {
+                    "description": "+value=nodepool_selector",
+                    "type": "string",
+                    "enum": ["nodepool_selector"]
                 },
-                "config": {
-                    "description": "+uiType=Ignore\n+uiProps={\"forwardJsonKey\": true}",
-                    "type": "object",
-                    "required": ["base_url"],
-                    "properties": {
-                        "base_url": {
-                            "description": "+label=Base URL\n+usage=Cato API base URL. Use the regional Cato endpoint or the URL of a Cato Outpost in your environment. Trailing slashes are ignored.\n+sort=50\n+message=Base URL must be an http or https URL",
-                            "type": "string",
-                            "pattern": "^https?:\\/\\/\\S+$"
-                        }
+                "nodepools": {
+                    "description": "+label=Nodepools\n+usage=Nodepools where you want to run your workload. Multiple nodepools can be selected.\n The workload is guaranteed to be scheduled on one of the nodepool",
+                    "type": "array",
+                    "items": {
+                        "type": "string"
                     }
                 }
             },
@@ -17213,7 +17533,7 @@
             "$schema": "http://json-schema.org/draft-04/schema#"
         },
         "NotificationTargetForAlertRule": {
-            "description": "+discriminator=type",
+            "description": "Service, job, workflow, and cluster deployment alerts. Teams is not supported on these alerts.\n+discriminator=type",
             "type": "object",
             "oneOf": [
                 {
@@ -17227,9 +17547,6 @@
                 },
                 {
                     "$ref": "#/definitions/PagerDuty"
-                },
-                {
-                    "$ref": "#/definitions/MSTeamsWebhook"
                 }
             ],
             "$schema": "http://json-schema.org/draft-04/schema#"
@@ -19873,6 +20190,9 @@
                 {
                     "$ref": "#/definitions/AwsIntegrations"
                 },
+                {
+                    "$ref": "#/definitions/SnowflakeIntegrations"
+                },
                 {
                     "$ref": "#/definitions/GcpIntegrations"
                 },
@@ -19996,6 +20316,9 @@
                 {
                     "$ref": "#/definitions/WaferIntegrations"
                 },
+                {
+                    "$ref": "#/definitions/TypeSafeIntegrations"
+                },
                 {
                     "$ref": "#/definitions/HashicorpIntegrations"
                 },
@@ -21315,6 +21638,45 @@
             },
             "$schema": "http://json-schema.org/draft-04/schema#"
         },
+        "RemoteAgentSource": {
+            "description": "+label=Source\n+usage=Where the agent originated from.",
+            "type": "object",
+            "required": ["type"],
+            "properties": {
+                "type": {
+                    "description": "+label=Type\n+usage=Where the agent originated from.\n+sort=100\n+uiType=Select",
+                    "type": "string",
+                    "enum": [
+                        "trueforge",
+                        "aws-agentcore-harness",
+                        "aws-agentcore-runtime",
+                        "microsoft-foundry",
+                        "microsoft-copilot-studio"
+                    ]
+                },
+                "provider_integration_fqn": {
+                    "description": "+label=Provider Integration FQN\n+usage=FQN of the provider integration used by this agent source.\n+sort=250\n+uiType=IntegrationSelect\n+uiProps={\"integrationType\":\"agent-registry\"}",
+                    "type": "string"
+                },
+                "external_name": {
+                    "description": "+label=External Name\n+usage=Name of the agent in the external source system.\n+sort=300",
+                    "type": "string"
+                },
+                "external_id": {
+                    "description": "+label=External ID\n+usage=ID of the agent in the external source system.\n+sort=310",
+                    "type": "string"
+                },
+                "entra_agent_identity_id": {
+                    "description": "+label=Entra Agent Identity ID\n+usage=Entra agent identity object ID (AgentIdentityId).\n+sort=400",
+                    "type": "string"
+                },
+                "entra_blueprint_id": {
+                    "description": "+label=Entra Blueprint ID\n+usage=Entra Agent Identity Blueprint ID (AgentIdentityBlueprintId).\n+sort=410",
+                    "type": "string"
+                }
+            },
+            "$schema": "http://json-schema.org/draft-04/schema#"
+        },
         "RemoteAgentV2": {
             "description": "+label=Remote",
             "type": "object",
@@ -21330,11 +21692,26 @@
                     "type": "string",
                     "pattern": "^[a-z][a-z0-9\\-]{0,62}[a-z0-9]$"
                 },
+                "display_name": {
+                    "description": "+label=Display Name\n+usage=A human-readable label for the Agent in the UI. If omitted, the agent name is shown.\n+message=1 to 128 characters long\n+sort=105",
+                    "type": "string",
+                    "minLength": 1,
+                    "maxLength": 128
+                },
                 "description": {
                     "description": "+label=Description\n+usage=A short note on what this agent does — shown in the registry list and audit trail.\n+sort=110\n+uiType=TextArea",
                     "type": "string",
                     "maxLength": 2000
                 },
+                "source": {
+                    "$ref": "#/definitions/RemoteAgentSource"
+                },
+                "state": {
+                    "description": "+label=State\n+usage=Lifecycle state of the agent. Active: managed and available for use. Unmanaged: imported from an external registry for governance (not fully managed yet). Inactive: disabled and cannot be used or invoked.\n+sort=116\n+uiType=Select",
+                    "type": "string",
+                    "enum": ["active", "unmanaged", "inactive"],
+                    "default": "active"
+                },
                 "identity": {
                     "$ref": "#/definitions/RemoteAgentV2AgentIdentity"
                 },
@@ -22628,7 +23005,7 @@
                     "type": "boolean"
                 },
                 "max_pat_expiry_minutes": {
-                    "description": "+label=Maximum Expiry Time for Personal Access Token (PAT) in days\n+usage=Personal Access Tokens cannot be created with an expiry longer than this. Maximum allowed is 365 days.\n+sort=2\n+message=Maximum expiry time must be between 1 and 365 days",
+                    "description": "+label=Maximum Expiry Time for Personal Access Token (PAT) in days\n+usage=Personal Access Tokens cannot be created with an expiry longer than this. Maximum allowed is 7000 days.\n+sort=2\n+message=Maximum expiry time must be between 1 and 7000 days",
                     "type": "integer",
                     "minimum": 1
                 },
@@ -22637,12 +23014,23 @@
                     "type": "integer",
                     "minimum": 1
                 },
-                "mandate_team_selection_in_pat": {
-                    "description": "+label=Mandate Team Selection in Personal Access Token (PAT)\n+usage=Require a team owner to be selected while creating a Personal Access Token.\n+sort=4\n+uiProps={\"descriptionInline\":true}",
+                "pat_team_assignment_mode": {
+                    "description": "+label=Personal Access Token (PAT) Team Assignment Mode\n+usage=Controls whether assigning a team owner while creating a Personal Access Token is required, optional, or disabled.\n+sort=4\n+uiType=RadioCard\n+uiProps={\"descriptionInline\":true}",
+                    "type": "string",
+                    "enum": ["optional", "required", "disabled"],
+                    "default": "optional"
+                },
+                "enable_pat_retrieval_after_creation": {
+                    "description": "+label=Enable PAT Retrieval After Creation\n+usage=Allow users to retrieve the value of their own Personal Access Tokens via API after creation.\n+sort=5\n+uiProps={\"descriptionInline\":true}",
+                    "type": "boolean",
+                    "default": false
+                },
+                "enable_viewing_secrets": {
+                    "description": "+label=Enable Viewing Secret\n+usage=Allow users with permission to view plaintext secret values in the UI and API. When disabled, secret values are never returned.\n+sort=6\n+uiProps={\"descriptionInline\":true}",
                     "type": "boolean"
                 },
                 "to_emails": {
-                    "description": "+label=Send security updates to\n+usage=Email addresses to receive security-related notifications.\n+sort=5\n+message=Must be a valid email address",
+                    "description": "+label=Send security updates to\n+usage=Email addresses to receive security-related notifications.\n+sort=7\n+message=Must be a valid email address",
                     "type": "array",
                     "items": {
                         "type": "string",
@@ -23036,11 +23424,11 @@
                     "minLength": 1
                 },
                 "channels": {
-                    "description": "+label=Slack Channel Names\n+usage=List of channels to send messages to.\n+message=3 to 81 lower case characters long alphanumeric word, may contain - or _ in between, must start with #\n+sort=665",
+                    "description": "+label=Slack Channel Names\n+usage=List of channels to send messages to.\n+message=2 to 80 lower case characters long alphanumeric word, may contain - or _ in between, optional leading #\n+sort=665",
                     "type": "array",
                     "items": {
                         "type": "string",
-                        "pattern": "^#[a-z0-9\\-_]{2,80}$"
+                        "pattern": "^#?[a-z0-9\\-_]{2,80}$"
                     }
                 }
             },
@@ -23347,6 +23735,37 @@
             },
             "$schema": "http://json-schema.org/draft-04/schema#"
         },
+        "SnowflakeCortexAgentRegistry": {
+            "description": "+label=Snowflake Cortex Agents\n+icon=snowflake-cortex\n+usage=Import agents from Snowflake Cortex into the TrueFoundry agent registry.",
+            "type": "object",
+            "required": ["type", "name"],
+            "properties": {
+                "type": {
+                    "description": "+value=integration/agent-registry/snowflake/cortex-agent",
+                    "type": "string",
+                    "enum": ["integration/agent-registry/snowflake/cortex-agent"]
+                },
+                "name": {
+                    "description": "+label=Display Name\n+usage=The name of the integration that will be displayed in the TrueFoundry UI.\n+sort=100\n+message=3 to 36 lower case characters long alphanumeric word, may contain - in between, cannot start with a number",
+                    "type": "string",
+                    "pattern": "^[a-z][a-z0-9\\-]{1,34}[a-z0-9]$"
+                },
+                "auth_data": {
+                    "$ref": "#/definitions/SnowflakePatTokenAuth"
+                },
+                "syncSchedule": {
+                    "$ref": "#/definitions/CronSyncSchedule"
+                },
+                "authorized_subjects": {
+                    "description": "+label=Access Control\n+usage=List of subjects that are authorized to access this integration. List of user fqn in format <user_type>:<username>.\n+sort=600\n+uiType=AuthorizedSubjects",
+                    "type": "array",
+                    "items": {
+                        "type": "string"
+                    }
+                }
+            },
+            "$schema": "http://json-schema.org/draft-04/schema#"
+        },
         "SnowflakeCortexIntegrations": {
             "$ref": "#/definitions/SnowflakeCortexModel",
             "$schema": "http://json-schema.org/draft-04/schema#"
@@ -23456,6 +23875,64 @@
             },
             "$schema": "http://json-schema.org/draft-04/schema#"
         },
+        "SnowflakeIntegrations": {
+            "$ref": "#/definitions/SnowflakeCortexAgentRegistry",
+            "$schema": "http://json-schema.org/draft-04/schema#"
+        },
+        "SnowflakePatTokenAuth": {
+            "description": "+label=PAT",
+            "type": "object",
+            "required": ["type", "pat_token"],
+            "properties": {
+                "type": {
+                    "description": "+value=pat-token",
+                    "type": "string",
+                    "enum": ["pat-token"]
+                },
+                "pat_token": {
+                    "description": "+label=PAT Token\n+sort=100\n+usage=Snowflake programmatic access token. The account's network policy must allow the TrueFoundry control plane and gateway egress IPs.\n+message=PAT token must not be empty\n+uiType=SecretSelect\n+uiProps={\"isPassword\": true, \"enableNew\": true}",
+                    "type": "string",
+                    "pattern": "^\\S+$"
+                }
+            },
+            "$schema": "http://json-schema.org/draft-04/schema#"
+        },
+        "SnowflakeProviderAccount": {
+            "description": "+label=Snowflake\n+icon=snowflake-cortex\n+heroDataKey=account_identifier",
+            "type": "object",
+            "required": ["type", "name", "account_identifier", "auth_data", "integrations"],
+            "properties": {
+                "type": {
+                    "description": "+value=provider-account/snowflake",
+                    "type": "string",
+                    "enum": ["provider-account/snowflake"]
+                },
+                "name": {
+                    "description": "+label=Name\n+sort=100\n+usage=The name of the Snowflake provider account\n+message=3 to 36 lower case characters long alphanumeric word, may contain - in between, cannot start with a number\n+uiProps={\"disableEdit\":true}",
+                    "type": "string",
+                    "pattern": "^[a-z](?:[a-z0-9]|-(?!-)){1,34}[a-z0-9]$"
+                },
+                "account_identifier": {
+                    "description": "+label=Snowflake Account Identifier\n+sort=200\n+message=Snowflake account identifier must not be empty\n+usage=Snowflake account identifier, as in https://<account_identifier>.snowflakecomputing.com. Insert the identifier only, without the URL.",
+                    "type": "string",
+                    "pattern": "^[A-Za-z0-9][A-Za-z0-9\\-_.]*$"
+                },
+                "auth_data": {
+                    "$ref": "#/definitions/SnowflakePatTokenAuth"
+                },
+                "integrations": {
+                    "description": "+label=Integrations\n+sort=400\n+usage=List of integrations that are associated with the Snowflake provider account\n+uiType=IntegrationsGroup",
+                    "type": "array",
+                    "items": {
+                        "$ref": "#/definitions/SnowflakeIntegrations"
+                    }
+                },
+                "ownedBy": {
+                    "$ref": "#/definitions/OwnedBy"
+                }
+            },
+            "$schema": "http://json-schema.org/draft-04/schema#"
+        },
         "SnowflakeSql": {
             "type": "object",
             "required": ["statement"],
@@ -26513,6 +26990,118 @@
             },
             "$schema": "http://json-schema.org/draft-04/schema#"
         },
+        "TypeSafeAPIKeyAuth": {
+            "description": "+label=TypeSafe API Key Auth\n+icon=https://assets.production.truefoundry.com/typesafe.svg",
+            "type": "object",
+            "required": ["type", "api_key"],
+            "properties": {
+                "type": {
+                    "description": "+value=api-key",
+                    "type": "string",
+                    "enum": ["api-key"]
+                },
+                "api_key": {
+                    "description": "+label=API Key\n+sort=100\n+usage=The TypeSafe API key, sent to the model as an Authorization Bearer token\n+message=API key must not be empty\n+uiType=SecretSelect\n+uiProps={\"isPassword\": true, \"enableNew\": true}",
+                    "type": "string",
+                    "pattern": "^\\S+$"
+                }
+            },
+            "$schema": "http://json-schema.org/draft-04/schema#"
+        },
+        "TypeSafeIntegrations": {
+            "$ref": "#/definitions/TypeSafeModel",
+            "$schema": "http://json-schema.org/draft-04/schema#"
+        },
+        "TypeSafeModel": {
+            "description": "+label=TypeSafe Model\n+icon=https://assets.production.truefoundry.com/typesafe.svg",
+            "type": "object",
+            "required": ["type", "name", "model_id", "model_types"],
+            "properties": {
+                "type": {
+                    "description": "+value=integration/model/typesafe",
+                    "type": "string",
+                    "enum": ["integration/model/typesafe"]
+                },
+                "name": {
+                    "description": "+label=Display Name\n+sort=1\n+usage=A descriptive name to identify this model integration in the UI\n+message=2 to 64 characters long alphanumeric word, may contain - , . or _ in between, cannot start with a number",
+                    "type": "string",
+                    "pattern": "^[a-zA-Z](?:[a-zA-Z0-9\\-._]{0,62}[a-zA-Z0-9])$"
+                },
+                "model_id": {
+                    "description": "+label=Model ID\n+sort=2\n+usage=The TypeSafe model identifier (e.g., jev-1.13.0, jev-latest). Pin a versioned id so confidence thresholds stay stable across releases. On a Cloudflare Workers AI base URL, use the Workers AI model name instead (e.g., typesafe/jev, @cf/cloudflare/clef, @cf/cloudflare/clef-flash).\n+message=Model ID must not be empty\n+uiProps={\"descriptionInline\":true}",
+                    "type": "string",
+                    "pattern": "^\\S+$"
+                },
+                "model_types": {
+                    "description": "+label=Model Types\n+sort=3\n+usage=Specify the type of the TypeSafe model\n+uiProps={\"disableAllOption\": true}",
+                    "type": "array",
+                    "items": {
+                        "$ref": "#/definitions/ModelType"
+                    },
+                    "default": ["decision"]
+                },
+                "cost": {
+                    "$ref": "#/definitions/ModelCostMetric"
+                },
+                "authorized_subjects": {
+                    "description": "+label=Access Control\n+sort=5\n+usage=List of subjects that are authorized to access this integration. List of user fqn in format <user_type>:<username>.\n+uiType=Hidden",
+                    "type": "array",
+                    "items": {
+                        "type": "string"
+                    }
+                }
+            },
+            "$schema": "http://json-schema.org/draft-04/schema#"
+        },
+        "TypeSafeProviderAccount": {
+            "description": "+label=TypeSafe Model Account\n+icon=https://assets.production.truefoundry.com/typesafe.svg",
+            "type": "object",
+            "required": ["type", "name", "auth_data"],
+            "properties": {
+                "type": {
+                    "description": "+value=provider-account/typesafe",
+                    "type": "string",
+                    "enum": ["provider-account/typesafe"]
+                },
+                "name": {
+                    "description": "+label=Name\n+sort=100\n+usage=The name of the TypeSafe model account\n+message=2 to 62 characters long alphanumeric word, may contain - , . or _ in between, cannot start with a number",
+                    "type": "string",
+                    "pattern": "^[a-zA-Z](?:[a-zA-Z0-9\\-._]{0,60}[a-zA-Z0-9])$"
+                },
+                "auth_data": {
+                    "$ref": "#/definitions/TypeSafeAPIKeyAuth"
+                },
+                "base_url": {
+                    "description": "+label=Base URL\n+sort=250\n+usage=Optional custom base URL for the TypeSafe API (defaults to https://api.typesafe.ai). Point this at a Cloudflare account (https://api.cloudflare.com/client/v4/accounts/<account_id>) to serve System One models through Cloudflare Workers AI instead.\n+message=Base URL must not be empty",
+                    "type": "string",
+                    "pattern": "^\\S+$"
+                },
+                "integrations": {
+                    "description": "+label=Integrations\n+sort=300\n+usage=List of integrations that are associated with the TypeSafe model account\n+uiType=IntegrationsGroup",
+                    "type": "array",
+                    "items": {
+                        "$ref": "#/definitions/TypeSafeIntegrations"
+                    }
+                },
+                "collaborators": {
+                    "description": "+label=Collaborators\n+sort=400\n+usage=List of users who have access to this model account\n+uiType=Collaborators",
+                    "type": "array",
+                    "items": {
+                        "$ref": "#/definitions/Collaborator"
+                    }
+                },
+                "ownedBy": {
+                    "$ref": "#/definitions/OwnedBy"
+                },
+                "discount_percent": {
+                    "description": "+label=Discount %\n+sort=650\n+uiProps={\"allowDecimal\": true}\n+usage=Discount % applied to upstream list price for this model account.\n+placeholder=Value should be in the range of 0–100\n+isAdvanced=true",
+                    "type": "number",
+                    "minimum": 0,
+                    "maximum": 100
+                }
+            },
+            "$schema": "http://json-schema.org/draft-04/schema#"
+        },
         "UV": {
             "description": "+usage=Use `uv` to setup env.\nYour build context root must contain `pyproject.toml` and `uv.lock`\n+label=uv",
             "type": "object",
@@ -27062,7 +27651,8 @@
                 "text_to_speech",
                 "image",
                 "responses",
-                "video"
+                "video",
+                "decision"
             ],
             "$schema": "http://json-schema.org/draft-04/schema#"
         },
@@ -27603,7 +28193,7 @@
             "type": "object",
             "properties": {
                 "notification_target": {
-                    "$ref": "#/definitions/NotificationTarget"
+                    "$ref": "#/definitions/NotificationTargetForAlertRule"
                 },
                 "on_completion": {
                     "description": "+label=On Completion\n+usage=Send an alert when the job completes\n+sort=680",
@@ -27857,6 +28447,9 @@
         "AI21ProviderAccount": {
             "$ref": "#/definitions/AI21ProviderAccount"
         },
+        "AIFeaturesModels": {
+            "$ref": "#/definitions/AIFeaturesModels"
+        },
         "AIFeaturesSettings": {
             "$ref": "#/definitions/AIFeaturesSettings"
         },
@@ -28073,6 +28666,12 @@
         "AwsAccessKeyBasedAuth": {
             "$ref": "#/definitions/AwsAccessKeyBasedAuth"
         },
+        "AwsAgentCoreHarness": {
+            "$ref": "#/definitions/AwsAgentCoreHarness"
+        },
+        "AwsAgentCoreRuntime": {
+            "$ref": "#/definitions/AwsAgentCoreRuntime"
+        },
         "AwsAssumedRoleBasedAuth": {
             "$ref": "#/definitions/AwsAssumedRoleBasedAuth"
         },
@@ -28415,6 +29014,12 @@
         "CartesiaProviderAccount": {
             "$ref": "#/definitions/CartesiaProviderAccount"
         },
+        "CatoNetworksApiKeyAuth": {
+            "$ref": "#/definitions/CatoNetworksApiKeyAuth"
+        },
+        "CatoNetworksGuardrailConfig": {
+            "$ref": "#/definitions/CatoNetworksGuardrailConfig"
+        },
         "CedarGuardrailConfig": {
             "$ref": "#/definitions/CedarGuardrailConfig"
         },
@@ -28511,6 +29116,9 @@
         "CronMetric": {
             "$ref": "#/definitions/CronMetric"
         },
+        "CronSyncSchedule": {
+            "$ref": "#/definitions/CronSyncSchedule"
+        },
         "CrowdStrikeAIDRGuardrailConfig": {
             "$ref": "#/definitions/CrowdStrikeAIDRGuardrailConfig"
         },
@@ -28625,6 +29233,9 @@
         "DatabricksServicePrincipalAuth": {
             "$ref": "#/definitions/DatabricksServicePrincipalAuth"
         },
+        "DecisionClassificationStrategy": {
+            "$ref": "#/definitions/DecisionClassificationStrategy"
+        },
         "DeepgramApiKeyAuth": {
             "$ref": "#/definitions/DeepgramApiKeyAuth"
         },
@@ -29048,15 +29659,15 @@
         "HeuristicFallbackStrategy": {
             "$ref": "#/definitions/HeuristicFallbackStrategy"
         },
+        "HostedA2AAgent": {
+            "$ref": "#/definitions/HostedA2AAgent"
+        },
         "HiddenLayerGuardrailConfig": {
             "$ref": "#/definitions/HiddenLayerGuardrailConfig"
         },
         "HiddenLayerOAuth2ClientCredentialsAuth": {
             "$ref": "#/definitions/HiddenLayerOAuth2ClientCredentialsAuth"
         },
-        "HostedA2AAgent": {
-            "$ref": "#/definitions/HostedA2AAgent"
-        },
         "HttpProbe": {
             "$ref": "#/definitions/HttpProbe"
         },
@@ -29375,6 +29986,12 @@
         "MessageOption": {
             "$ref": "#/definitions/MessageOption"
         },
+        "MicrosoftCopilotStudio": {
+            "$ref": "#/definitions/MicrosoftCopilotStudio"
+        },
+        "MicrosoftFoundry": {
+            "$ref": "#/definitions/MicrosoftFoundry"
+        },
         "MicrosoftFoundryModel": {
             "$ref": "#/definitions/MicrosoftFoundryModel"
         },
@@ -29462,12 +30079,6 @@
         "NodepoolSelector": {
             "$ref": "#/definitions/NodepoolSelector"
         },
-        "CatoNetworksApiKeyAuth": {
-            "$ref": "#/definitions/CatoNetworksApiKeyAuth"
-        },
-        "CatoNetworksGuardrailConfig": {
-            "$ref": "#/definitions/CatoNetworksGuardrailConfig"
-        },
         "NomaSecurityApiKeyAuth": {
             "$ref": "#/definitions/NomaSecurityApiKeyAuth"
         },
@@ -29981,6 +30592,9 @@
         "RemoteAgentProxyViaGatewayConfig": {
             "$ref": "#/definitions/RemoteAgentProxyViaGatewayConfig"
         },
+        "RemoteAgentSource": {
+            "$ref": "#/definitions/RemoteAgentSource"
+        },
         "RemoteAgentV2": {
             "$ref": "#/definitions/RemoteAgentV2"
         },
@@ -30194,6 +30808,9 @@
         "SnowflakeConfig": {
             "$ref": "#/definitions/SnowflakeConfig"
         },
+        "SnowflakeCortexAgentRegistry": {
+            "$ref": "#/definitions/SnowflakeCortexAgentRegistry"
+        },
         "SnowflakeCortexIntegrations": {
             "$ref": "#/definitions/SnowflakeCortexIntegrations"
         },
@@ -30206,6 +30823,15 @@
         "SnowflakeCortexProviderAccount": {
             "$ref": "#/definitions/SnowflakeCortexProviderAccount"
         },
+        "SnowflakeIntegrations": {
+            "$ref": "#/definitions/SnowflakeIntegrations"
+        },
+        "SnowflakePatTokenAuth": {
+            "$ref": "#/definitions/SnowflakePatTokenAuth"
+        },
+        "SnowflakeProviderAccount": {
+            "$ref": "#/definitions/SnowflakeProviderAccount"
+        },
         "SnowflakeSql": {
             "$ref": "#/definitions/SnowflakeSql"
         },
@@ -30563,6 +31189,18 @@
         "TruefoundryFlyteTaskTemplate": {
             "$ref": "#/definitions/TruefoundryFlyteTaskTemplate"
         },
+        "TypeSafeAPIKeyAuth": {
+            "$ref": "#/definitions/TypeSafeAPIKeyAuth"
+        },
+        "TypeSafeIntegrations": {
+            "$ref": "#/definitions/TypeSafeIntegrations"
+        },
+        "TypeSafeModel": {
+            "$ref": "#/definitions/TypeSafeModel"
+        },
+        "TypeSafeProviderAccount": {
+            "$ref": "#/definitions/TypeSafeProviderAccount"
+        },
         "UV": {
             "$ref": "#/definitions/UV"
         },