@truefoundry/trueforge 0.1.0-rc.0 → 0.1.0

package/dist/main.js

@@ -4169,7 +4169,7 @@ import { z } from "@hono/zod-openapi";
 var NameSchema = z.string().min(2).max(64).regex(
   /^[a-z](?:[a-z0-9._-]{0,62}[a-z0-9])$/,
   'must be 2\u201364 lowercase chars: start with a letter, end with alphanumeric, optionally separated by ".", "_" or "-"'
-).describe("Fully qualified name. Unique within a tenant.").openapi("ResourceName");
+).openapi("ResourceName");
 function uniqueNames(entries, ctx) {
   const seen = /* @__PURE__ */ new Set();
   for (const entry of entries) {
@@ -4691,10 +4691,10 @@ var DaytonaSandboxProviderAuthSchema = z5.object({
   api_key: z5.string().min(1).describe(
     "Daytona API key. Responses are redacted; on PUT, a real value sets/rotates and a redacted value keeps the stored key."
   )
-}).strict().openapi("DaytonaSandboxProviderAuth");
+}).strict().describe("Daytona authentication credentials.").openapi("DaytonaSandboxProviderAuth");
 var DaytonaSandboxProviderSchema = z5.object({
   type: z5.literal("daytona").describe("Daytona sandbox provider."),
-  auth: DaytonaSandboxProviderAuthSchema.describe("Daytona authentication credentials."),
+  auth: DaytonaSandboxProviderAuthSchema,
   exec_timeout_ms: z5.number().int().positive().describe("Default sandbox command exec timeout in milliseconds."),
   auto_stop_interval_in_minutes: z5.number().int().nonnegative().describe("Minutes of idle time before Daytona auto-stops the sandbox (0 disables)."),
   auto_archive_interval_in_minutes: z5.number().int().nonnegative().describe("Minutes before Daytona auto-archives the sandbox (0 disables)."),
@@ -4710,17 +4710,16 @@ var SandboxStatusSchema = z5.object({
     "Provider-specific build metadata; null when the provider has none."
   )
 }).strict();
-var SandboxProviderResponseSchema = z5.object({
+var SandboxProviderSchema = z5.object({
   manifest: SandboxProviderManifestSchema,
   status: SandboxBuildStatusSchema,
   status_reason: z5.string().nullable().describe("Human-readable detail for the current status; null when ready.")
-}).strict().openapi("SandboxProviderResponse");
-var PutSandboxProviderRequestSchema = SandboxProviderManifestSchema;
-var PutSandboxProviderResponseSchema = z5.object({
-  data: SandboxProviderResponseSchema
-}).openapi("PutSandboxProviderResponse");
+}).strict().openapi("SandboxProvider");
+var PutSandboxProviderRequestSchema = z5.object({
+  manifest: SandboxProviderManifestSchema
+}).strict().openapi("PutSandboxProviderRequest");
 var GetSandboxProviderResponseSchema = z5.object({
-  data: SandboxProviderResponseSchema
+  data: SandboxProviderSchema
 }).openapi("GetSandboxProviderResponse");
 function toDaytonaSandboxProviderInput(manifest) {
   return {
@@ -4747,7 +4746,7 @@ function toDaytonaSandboxProvider({
     client: new Daytona({ apiKey }),
     ...settings,
     tenantName: tenant_id,
-    sandboxImage: SANDBOX_IMAGE_URI,
+    sandboxImage: build_metadata?.["image_uri"] ?? SANDBOX_IMAGE_URI,
     buildRef: build_metadata?.["build_ref"],
     fileMaxBytesForDownload: config_default.SANDBOX_FILE_MAX_BYTES_FOR_DOWNLOAD,
     logger
@@ -4810,39 +4809,42 @@ var McpServerHeaderAuthSchema = z6.object({
 var McpServerDcrAuthSchema = z6.object({
   type: z6.literal("dcr").describe("Authenticate via OAuth Dynamic Client Registration.")
 }).strict().openapi("McpServerDcrAuth");
-var McpServerAuthSettingsSchema = z6.discriminatedUnion("type", [McpServerHeaderAuthSchema, McpServerDcrAuthSchema]).openapi("ConfiguredMcpServerAuth");
+var McpServerManifestAuthSchema = z6.discriminatedUnion("type", [McpServerHeaderAuthSchema, McpServerDcrAuthSchema]).describe("Optional auth settings. Omit when the server needs no credentials.").openapi("McpServerManifestAuth");
+var McpServerDescriptionSchema = z6.string().trim().min(1).describe("Concise summary of what this MCP server provides.");
 var McpServerManifestObjectSchema = z6.object({
-  type: McpServerTypeSchema.describe("MCP server kind (`remote` today)."),
+  type: McpServerTypeSchema,
   name: NameSchema,
   url: z6.url().describe("URL of the remote MCP server."),
-  auth: McpServerAuthSettingsSchema.optional().describe(
-    "Optional auth settings. Omit when the server needs no credentials."
-  )
+  description: McpServerDescriptionSchema,
+  auth: McpServerManifestAuthSchema.optional()
 }).strict();
 var McpServerManifestSchema = McpServerManifestObjectSchema.openapi("McpServerManifest");
 var McpAuthStatusSchema = z6.object({
   status: z6.enum(["authenticated", "auth_required", "not_required"]).describe("Current auth state for this MCP server."),
   authorization_url: z6.url().optional().describe("When auth is required, this contains the URL to redirect the user to for authorization.")
-}).strict().openapi("McpAuthStatus");
-var ConfiguredMcpServerSchema = McpServerManifestObjectSchema.extend({
+}).strict().describe("Current auth state.").openapi("McpAuthStatus");
+var ConfiguredMcpServerSchema = z6.object({
+  name: NameSchema,
+  manifest: McpServerManifestSchema,
   auth_status: McpAuthStatusSchema
-}).openapi("ConfiguredMcpServer");
-var PutMcpServerRequestSchema = McpServerManifestSchema;
-var PutMcpServerResponseSchema = z6.object({ data: ConfiguredMcpServerSchema }).openapi("PutMcpServerResponse");
-var CreateMcpServerRequestSchema = McpServerManifestObjectSchema.openapi("CreateMcpServerRequest");
+}).strict().openapi("ConfiguredMcpServer");
+var CreateMcpServerRequestSchema = z6.object({
+  manifest: McpServerManifestSchema
+}).strict().openapi("CreateMcpServerRequest");
+var PutMcpServerRequestSchema = z6.object({
+  manifest: McpServerManifestSchema
+}).strict().openapi("PutMcpServerRequest");
 var GetMcpServerResponseSchema = z6.object({ data: ConfiguredMcpServerSchema }).openapi("GetMcpServerResponse");
 var ListMcpServersResponseSchema = z6.object({ data: z6.array(ConfiguredMcpServerSchema) }).openapi("ListMcpServersResponse");
 var McpServerAuthPublicSchema = z6.discriminatedUnion("type", [
   z6.object({ type: z6.literal("dcr") }).strict(),
   z6.object({ type: z6.literal("header") }).strict()
-]).openapi("McpServerAuthPublic");
+]).describe("Auth mechanism when configured (no secrets). Omit when the server needs no credentials.").openapi("McpServerAuthPublic");
 var McpServerReadEntrySchema = z6.object({
   name: NameSchema,
   url: z6.url().describe("URL of the remote MCP server."),
-  auth: McpServerAuthPublicSchema.optional().describe(
-    "Auth mechanism when configured (no secrets). Omit when the server needs no credentials."
-  ),
-  auth_status: McpAuthStatusSchema.describe("Auth state for the calling user.")
+  auth: McpServerAuthPublicSchema.optional(),
+  auth_status: McpAuthStatusSchema
 }).strict().openapi("McpServerReadEntry");
 var ListAvailableMcpServersResponseSchema = z6.object({ data: z6.array(McpServerReadEntrySchema) }).openapi("ListAvailableMcpServersResponse");
 function resolveConfiguredMcpRequestHeaders(manifest) {
@@ -6374,11 +6376,12 @@ import { createRoute as createRoute5 } from "@hono/zod-openapi";
 // src/schemas/mcpCatalog.ts
 import { z as z15 } from "@hono/zod-openapi";
 var CatalogMcpServerSchema = z15.object({
-  type: McpServerTypeSchema.describe("MCP server kind (`remote` today)."),
+  type: McpServerTypeSchema,
   name: NameSchema,
   logo: z15.url().optional().describe("URL of the MCP server logo asset."),
   url: z15.url().describe("URL of the remote MCP server."),
-  auth: McpServerAuthSettingsSchema.optional().describe("Optional default auth settings for the preset.")
+  description: McpServerDescriptionSchema,
+  auth: McpServerManifestAuthSchema.optional()
 }).strict().openapi("CatalogMcpServer");
 var McpCatalogFileSchema = z15.object({
   mcp_servers: z15.array(CatalogMcpServerSchema)
@@ -6401,11 +6404,11 @@ var ModelPropertiesSchema = z16.object({
   context_length: z16.number().int().positive().optional().describe("Maximum context window size in tokens."),
   max_output_tokens: z16.number().int().positive().optional().describe("Maximum output tokens the model can generate."),
   reasoning_efforts: z16.array(ReasoningEffortSchema).min(1).optional().describe("Supported reasoning-effort values for this model.")
-}).strict().openapi("ModelProperties");
+}).strict().describe("Optional model capability metadata.").openapi("ModelProperties");
 var ModelEntrySchema = z16.object({
   model_id: z16.string().min(1).describe("Upstream, provider-specific identifier sent to the provider API."),
-  name: NameSchema.describe("Internal identifier; forms the fully qualified name `name/model_name`."),
-  properties: ModelPropertiesSchema.describe("Optional model capability metadata.")
+  name: NameSchema,
+  properties: ModelPropertiesSchema
 }).strict().openapi("ModelEntry");
 function refineUniqueModels(models, ctx) {
   uniqueNames(models, ctx);
@@ -6425,9 +6428,9 @@ var ModelProviderAuthSchema = z16.object({
   api_key: z16.string().min(1).describe(
     "Provider API key. Responses are redacted; on PUT, a real value sets/rotates and a redacted value keeps the stored key."
   )
-}).strict().openapi("ModelProviderAuth");
+}).strict().describe("Provider authentication credentials.").openapi("ModelProviderAuth");
 var ModelProviderManifestBaseSchema = z16.object({
-  auth: ModelProviderAuthSchema.describe("Provider authentication credentials."),
+  auth: ModelProviderAuthSchema,
   models: z16.array(ModelEntrySchema).min(1).describe("Models exposed by this provider (at least one).")
 }).strict();
 function wellKnownProviderSchema({
@@ -6491,24 +6494,34 @@ var ModelProviderBodySchema = z16.discriminatedUnion("type", [
   AlibabaModelProviderSchema,
   CustomModelProviderSchema
 ]).superRefine(refineModelProviderManifest);
-var ModelProviderSchema = ModelProviderBodySchema.openapi("ModelProvider");
+var ModelProviderManifestSchema = ModelProviderBodySchema.openapi("ModelProviderManifest");
 function modelProviderName(provider) {
   return provider.type === "custom" ? provider.name : provider.type;
 }
+var ModelProviderSchema = z16.object({
+  name: NameSchema,
+  manifest: ModelProviderManifestSchema
+}).strict().openapi("ModelProvider");
+var CreateModelProviderRequestSchema = z16.object({
+  manifest: ModelProviderManifestSchema
+}).strict().openapi("CreateModelProviderRequest");
+var PutModelProviderRequestSchema = z16.object({
+  manifest: ModelProviderManifestSchema
+}).strict().openapi("PutModelProviderRequest");
+var GetModelProviderResponseSchema = z16.object({
+  data: ModelProviderSchema
+}).openapi("GetModelProviderResponse");
 var ListModelProvidersResponseSchema = z16.object({
   data: z16.array(ModelProviderSchema)
 }).openapi("ListModelProvidersResponse");
-var PutModelProviderResponseSchema = z16.object({
-  data: ModelProviderSchema
-}).openapi("PutModelProviderResponse");
 var ModelListProviderSchema = z16.object({
   name: z16.string().min(1).describe("Configured provider resource name; matches the FQN prefix of `name`.")
-}).strict().openapi("ModelListProvider");
+}).strict().describe("Owning configured provider.").openapi("ModelListProvider");
 var ModelSchema = z16.object({
   name: z16.string().describe('Fully qualified name `provider_name/model_name`, e.g. "openai/gpt-5-6-sol". Unique within a tenant.'),
   model_id: z16.string().describe("Upstream, provider-specific identifier sent to the provider API."),
-  provider: ModelListProviderSchema.describe("Owning configured provider."),
-  properties: ModelPropertiesSchema.describe("Optional model capability metadata.")
+  provider: ModelListProviderSchema,
+  properties: ModelPropertiesSchema
 }).strict().openapi("Model");
 var ListModelsResponseSchema = z16.object({
   data: z16.array(ModelSchema)
@@ -6574,9 +6587,18 @@ var SkillManifestObjectSchema = z19.object({
   description: SkillDescriptionSchema
 }).strict();
 var SkillManifestSchema = SkillManifestObjectSchema.openapi("SkillManifest");
-var ConfiguredSkillSchema = SkillManifestSchema;
-var PutSkillResponseSchema = z19.object({ data: ConfiguredSkillSchema }).openapi("PutSkillResponse");
-var ListConfiguredSkillsResponseSchema = z19.object({ data: z19.array(ConfiguredSkillSchema) }).openapi("ListConfiguredSkillsResponse");
+var ConfiguredSkillSchema = z19.object({
+  name: NameSchema,
+  manifest: SkillManifestSchema
+}).strict().openapi("ConfiguredSkill");
+var CreateSkillRequestSchema = z19.object({
+  manifest: SkillManifestSchema
+}).strict().openapi("CreateSkillRequest");
+var PutSkillRequestSchema = z19.object({
+  manifest: SkillManifestSchema
+}).strict().openapi("PutSkillRequest");
+var GetSkillResponseSchema = z19.object({ data: ConfiguredSkillSchema }).openapi("GetSkillResponse");
+var ListSkillsResponseSchema = z19.object({ data: z19.array(ConfiguredSkillSchema) }).openapi("ListSkillsResponse");
 var SkillReadEntrySchema = z19.object({
   name: NameSchema,
   description: SkillDescriptionSchema
@@ -6896,8 +6918,8 @@ var createMcpServerRoute = createRoute7({
     }
   },
   responses: {
-    200: {
-      content: { "application/json": { schema: PutMcpServerResponseSchema } },
+    201: {
+      content: { "application/json": { schema: GetMcpServerResponseSchema } },
       description: "The created MCP server with auth_status"
     },
     400: {
@@ -6930,7 +6952,7 @@ var putMcpServerRoute = createRoute7({
   },
   responses: {
     200: {
-      content: { "application/json": { schema: PutMcpServerResponseSchema } },
+      content: { "application/json": { schema: GetMcpServerResponseSchema } },
       description: "The saved MCP server with auth_status"
     },
     400: {
@@ -7036,7 +7058,7 @@ var deleteAuthorizeMcpServerRoute = createRoute7({
   },
   responses: {
     200: {
-      content: { "application/json": { schema: PutMcpServerResponseSchema } },
+      content: { "application/json": { schema: GetMcpServerResponseSchema } },
       description: "The MCP server after disconnect (auth_required for dcr)."
     },
     404: {
@@ -7125,7 +7147,8 @@ function toConfiguredMcpServer({
   token
 }) {
   return {
-    ...redactMcpServerManifest(record.manifest),
+    name: record.name,
+    manifest: redactMcpServerManifest(record.manifest),
     auth_status: resolveMcpAuthStatus({
       manifest: record.manifest,
       ...token !== void 0 ? { token } : {}
@@ -7172,7 +7195,8 @@ function createSettingsMcpServersRouter(deps) {
     return c.json({ data: toConfiguredMcpServer({ record, token }) }, 200);
   };
   const createHandler = async (c) => {
-    const incomingManifest = c.req.valid("json");
+    const body = c.req.valid("json");
+    const incomingManifest = body.manifest;
     let dcrClientToSave;
     if (incomingManifest.auth?.type === "dcr") {
       try {
@@ -7218,7 +7242,7 @@ function createSettingsMcpServersRouter(deps) {
         }
         return saved;
       });
-      return c.json({ data: toConfiguredMcpServer({ record, token: void 0 }) }, 200);
+      return c.json({ data: toConfiguredMcpServer({ record, token: void 0 }) }, 201);
     } catch (error) {
       if (error instanceof McpServerNameConflictError) {
         return c.json({ error: { message: error.message } }, 409);
@@ -7228,7 +7252,8 @@ function createSettingsMcpServersRouter(deps) {
   };
   const putHandler = async (c) => {
     const userRef = deps.resolveUserContext(c).userRef;
-    const incomingManifest = c.req.valid("json");
+    const body = c.req.valid("json");
+    const incomingManifest = body.manifest;
     try {
       const record = await deps.withTransaction(async (transaction) => {
         const existing = await deps.mcpServerStore.getServerForUpdate(
@@ -7458,7 +7483,7 @@ var listModelProvidersRoute = createRoute9({
   path: "/",
   tags: [MODEL_PROVIDERS_TAG],
   summary: "List configured model providers",
-  description: "All configured providers with their models.",
+  description: "All configured providers with nested manifests.",
   "x-fern-sdk-group-name": ["settings", "modelProviders"],
   "x-fern-sdk-method-name": "list",
   responses: {
@@ -7486,13 +7511,13 @@ var createModelProviderRoute = createRoute9({
   "x-fern-sdk-method-name": "create",
   request: {
     body: {
-      content: { "application/json": { schema: ModelProviderSchema } },
+      content: { "application/json": { schema: CreateModelProviderRequestSchema } },
       required: true
     }
   },
   responses: {
-    200: {
-      content: { "application/json": { schema: PutModelProviderResponseSchema } },
+    201: {
+      content: { "application/json": { schema: GetModelProviderResponseSchema } },
       description: "The created provider"
     },
     400: {
@@ -7515,13 +7540,13 @@ var putModelProviderRoute = createRoute9({
   "x-fern-sdk-method-name": "upsert",
   request: {
     body: {
-      content: { "application/json": { schema: ModelProviderSchema } },
+      content: { "application/json": { schema: PutModelProviderRequestSchema } },
       required: true
     }
   },
   responses: {
     200: {
-      content: { "application/json": { schema: PutModelProviderResponseSchema } },
+      content: { "application/json": { schema: GetModelProviderResponseSchema } },
       description: "The saved provider"
     },
     400: {
@@ -7558,18 +7583,25 @@ function resolveModelProviderManifestForWrite({
     }
   };
 }
+function toWireProvider(record) {
+  return {
+    name: record.name,
+    manifest: redactModelProvider(record.manifest)
+  };
+}
 function createModelProvidersRouter(deps) {
   const listHandler = async (c) => {
     const records = await deps.modelProviderStore.listProviders(TENANT_ID);
-    return c.json({ data: records.map((record) => redactModelProvider(record.manifest)) }, 200);
+    return c.json({ data: records.map(toWireProvider) }, 200);
   };
   const createHandler = async (c) => {
-    const provider = c.req.valid("json");
+    const body = c.req.valid("json");
+    const provider = body.manifest;
     const name = modelProviderName(provider);
     try {
       const manifest = resolveModelProviderManifestForWrite({ incoming: provider, existing: void 0 });
       const record = await deps.modelProviderStore.createProvider({ tenant_id: TENANT_ID, name, manifest });
-      return c.json({ data: redactModelProvider(record.manifest) }, 200);
+      return c.json({ data: toWireProvider(record) }, 201);
     } catch (error) {
       if (error instanceof MissingStoredSecretError) {
         return c.json({ error: { message: "API key is required" } }, 400);
@@ -7581,7 +7613,8 @@ function createModelProvidersRouter(deps) {
     }
   };
   const putHandler = async (c) => {
-    const provider = c.req.valid("json");
+    const body = c.req.valid("json");
+    const provider = body.manifest;
     const name = modelProviderName(provider);
     try {
       const record = await deps.withTransaction(async (transaction) => {
@@ -7595,7 +7628,7 @@ function createModelProvidersRouter(deps) {
         });
         return deps.modelProviderStore.upsertProvider({ tenant_id: TENANT_ID, name, manifest }, transaction);
       });
-      return c.json({ data: redactModelProvider(record.manifest) }, 200);
+      return c.json({ data: toWireProvider(record) }, 200);
     } catch (error) {
       if (error instanceof MissingStoredSecretError) {
         return c.json({ error: { message: "API key is required" } }, 400);
@@ -7652,7 +7685,7 @@ var putSandboxProviderRoute = createRoute10({
   },
   responses: {
     200: {
-      content: { "application/json": { schema: PutSandboxProviderResponseSchema } },
+      content: { "application/json": { schema: GetSandboxProviderResponseSchema } },
       description: "The saved sandbox provider."
     },
     400: {
@@ -7697,7 +7730,8 @@ function createSandboxProvidersRouter(deps) {
     );
   };
   const putHandler = async (c) => {
-    const incoming = c.req.valid("json");
+    const body = c.req.valid("json");
+    const incoming = body.manifest;
     const resolveManifest = (existing) => ({
       ...incoming,
       auth: {
@@ -7711,7 +7745,12 @@ function createSandboxProvidersRouter(deps) {
       const { manifest, status } = await deps.withTransaction(async (transaction) => {
         const locked = await deps.sandboxProviderStore.getSandboxProviderForUpdate(TENANT_ID, transaction);
         const resolved = resolveManifest(locked);
-        const provider = toDaytonaSandboxProvider({ manifest: resolved, tenant_id: TENANT_ID, logger: deps.logger });
+        const provider = toDaytonaSandboxProvider({
+          manifest: resolved,
+          tenant_id: TENANT_ID,
+          logger: deps.logger,
+          ...locked ? { build_metadata: locked.build_metadata } : {}
+        });
         const built = toSandboxStatus(
           await withTimeout(provider.buildImage(), BUILD_REQUEST_TIMEOUT_MS, "sandbox buildImage")
         );
@@ -7778,12 +7817,12 @@ var listConfiguredSkillsRoute = createRoute11({
   path: "/",
   tags: [SKILLS_TAG],
   summary: "List configured skills",
-  description: "All configured skills with full manifests (settings / admin projection).",
+  description: "All configured skills with nested manifests (settings / admin projection).",
   "x-fern-sdk-group-name": ["settings", "skills"],
   "x-fern-sdk-method-name": "list",
   responses: {
     200: {
-      content: { "application/json": { schema: ListConfiguredSkillsResponseSchema } },
+      content: { "application/json": { schema: ListSkillsResponseSchema } },
       description: "All configured skills."
     },
     401: {
@@ -7806,13 +7845,13 @@ var createSkillRoute = createRoute11({
   "x-fern-sdk-method-name": "create",
   request: {
     body: {
-      content: { "application/json": { schema: SkillManifestSchema } },
+      content: { "application/json": { schema: CreateSkillRequestSchema } },
       required: true
     }
   },
   responses: {
-    200: {
-      content: { "application/json": { schema: PutSkillResponseSchema } },
+    201: {
+      content: { "application/json": { schema: GetSkillResponseSchema } },
       description: "The created skill."
     },
     400: {
@@ -7835,13 +7874,13 @@ var putSkillRoute = createRoute11({
   "x-fern-sdk-method-name": "upsert",
   request: {
     body: {
-      content: { "application/json": { schema: SkillManifestSchema } },
+      content: { "application/json": { schema: PutSkillRequestSchema } },
       required: true
     }
   },
   responses: {
     200: {
-      content: { "application/json": { schema: PutSkillResponseSchema } },
+      content: { "application/json": { schema: GetSkillResponseSchema } },
       description: "The saved skill."
     },
     400: {
@@ -7854,8 +7893,8 @@ var putSkillRoute = createRoute11({
 // src/apis/skills.ts
 function toConfiguredSkill(record) {
   return {
-    ...record.manifest,
-    name: record.name
+    name: record.name,
+    manifest: record.manifest
   };
 }
 function createSkillsRouter(deps) {
@@ -7864,14 +7903,15 @@ function createSkillsRouter(deps) {
     return c.json({ data: records.map(toConfiguredSkill) }, 200);
   };
   const createHandler = async (c) => {
-    const manifest = c.req.valid("json");
+    const body = c.req.valid("json");
+    const manifest = body.manifest;
     try {
       const record = await deps.skillStore.createSkill({
         tenant_id: TENANT_ID,
         name: manifest.name,
         manifest
       });
-      return c.json({ data: toConfiguredSkill(record) }, 200);
+      return c.json({ data: toConfiguredSkill(record) }, 201);
     } catch (error) {
       if (error instanceof SkillNameConflictError) {
         return c.json({ error: { message: error.message } }, 409);
@@ -7880,7 +7920,8 @@ function createSkillsRouter(deps) {
     }
   };
   const putHandler = async (c) => {
-    const manifest = c.req.valid("json");
+    const body = c.req.valid("json");
+    const manifest = body.manifest;
     const record = await deps.skillStore.upsertSkill({
       tenant_id: TENANT_ID,
       name: manifest.name,
@@ -9217,7 +9258,7 @@ function loadYamlAtPath(filePath, schema) {
 }
 
 // src/catalog/mcpCatalog.gen.ts
-var shippedMcpCatalogYaml = "# Shipped MCP catalog: server presets offered by\n# GET /api/v1/catalog/mcp-servers for the UI to copy into\n# PUT /api/v1/settings/mcp-servers bodies. Discovery-only \u2014 never executed against.\nmcp_servers:\n  - type: remote\n    name: linear\n    logo: https://assets.production.truefoundry.com/linear.svg\n    url: https://mcp.linear.app/mcp\n    auth:\n      type: dcr\n  - type: remote\n    name: notion\n    logo: https://assets.production.truefoundry.com/notion.svg\n    url: https://mcp.notion.com/mcp\n    auth:\n      type: dcr\n  - type: remote\n    name: sentry\n    logo: https://assets.production.truefoundry.com/sentry.svg\n    url: https://mcp.sentry.dev/mcp\n    auth:\n      type: dcr\n  - type: remote\n    name: deepwiki\n    logo: https://assets.production.truefoundry.com/deepwiki.png\n    url: https://mcp.deepwiki.com/mcp\n  - type: remote\n    name: exa\n    logo: https://assets.production.truefoundry.com/exa.svg\n    url: https://mcp.exa.ai/mcp\n  - type: remote\n    name: parallel-web\n    logo: https://assets.production.truefoundry.com/parallel-web.svg\n    url: https://search.parallel.ai/mcp\n  - type: remote\n    name: github\n    logo: https://assets.production.truefoundry.com/github.svg\n    url: https://api.githubcopilot.com/mcp/\n    auth:\n      type: header\n      headers:\n        Authorization: Bearer YOUR_GITHUB_PAT\n  - type: remote\n    name: tavily\n    logo: https://assets.production.truefoundry.com/tavily.svg\n    url: https://mcp.tavily.com/mcp\n    auth:\n      type: header\n      headers:\n        Authorization: Bearer YOUR_TAVILY_API_KEY\n  - type: remote\n    name: bright-data\n    logo: https://assets.production.truefoundry.com/bright-data.png\n    url: https://mcp.brightdata.com/mcp\n    auth:\n      type: header\n      headers:\n        Authorization: Bearer YOUR_BRIGHT_DATA_API_TOKEN\n  - type: remote\n    name: supabase\n    logo: https://assets.production.truefoundry.com/supabase.svg\n    url: https://mcp.supabase.com/mcp\n    auth:\n      type: dcr\n  - type: remote\n    name: stripe\n    logo: https://assets.production.truefoundry.com/stripe.svg\n    url: https://mcp.stripe.com\n    auth:\n      type: dcr\n  - type: remote\n    name: confluence\n    logo: https://assets.production.truefoundry.com/confluence.svg\n    url: https://mcp.atlassian.com/v1/mcp\n    auth:\n      type: dcr\n  - type: remote\n    name: jira\n    logo: https://assets.production.truefoundry.com/jira.png\n    url: https://mcp.atlassian.com/v1/mcp\n    auth:\n      type: dcr\n";
+var shippedMcpCatalogYaml = "# Shipped MCP catalog: server presets offered by\n# GET /api/v1/catalog/mcp-servers for the UI to copy into\n# PUT /api/v1/settings/mcp-servers bodies. Discovery-only \u2014 never executed against.\nmcp_servers:\n  - type: remote\n    name: linear\n    logo: https://assets.production.truefoundry.com/linear.svg\n    url: https://mcp.linear.app/mcp\n    description: Search, read, and create Linear issues.\n    auth:\n      type: dcr\n  - type: remote\n    name: notion\n    logo: https://assets.production.truefoundry.com/notion.svg\n    url: https://mcp.notion.com/mcp\n    description: Search pages, read content, query databases, create pages.\n    auth:\n      type: dcr\n  - type: remote\n    name: sentry\n    logo: https://assets.production.truefoundry.com/sentry.svg\n    url: https://mcp.sentry.dev/mcp\n    description: Search errors, read stack traces, and check releases.\n    auth:\n      type: dcr\n  - type: remote\n    name: deepwiki\n    logo: https://assets.production.truefoundry.com/deepwiki.png\n    url: https://mcp.deepwiki.com/mcp\n    description: Read documentation and ask questions about any public GitHub repository.\n  - type: remote\n    name: exa\n    logo: https://assets.production.truefoundry.com/exa.svg\n    url: https://mcp.exa.ai/mcp\n    description: Search the web, fetch page contents, and find similar pages.\n  - type: remote\n    name: parallel-web\n    logo: https://assets.production.truefoundry.com/parallel-web.svg\n    url: https://search.parallel.ai/mcp\n    description: Search the web and get ranked results with extracted content.\n  - type: remote\n    name: github\n    logo: https://assets.production.truefoundry.com/github.svg\n    url: https://api.githubcopilot.com/mcp/\n    description: Work with issues, pull requests, repository files, and CI status.\n    auth:\n      type: header\n      headers:\n        Authorization: Bearer YOUR_GITHUB_PAT\n  - type: remote\n    name: tavily\n    logo: https://assets.production.truefoundry.com/tavily.svg\n    url: https://mcp.tavily.com/mcp\n    description: Search the web, extract page content, and crawl sites.\n    auth:\n      type: header\n      headers:\n        Authorization: Bearer YOUR_TAVILY_API_KEY\n  - type: remote\n    name: bright-data\n    logo: https://assets.production.truefoundry.com/bright-data.png\n    url: https://mcp.brightdata.com/mcp\n    description: Search the web and scrape pages, including sites behind bot protection.\n    auth:\n      type: header\n      headers:\n        Authorization: Bearer YOUR_BRIGHT_DATA_API_TOKEN\n  - type: remote\n    name: supabase\n    logo: https://assets.production.truefoundry.com/supabase.svg\n    url: https://mcp.supabase.com/mcp\n    description: Run SQL queries, manage tables, and inspect Supabase projects.\n    auth:\n      type: dcr\n  - type: remote\n    name: stripe\n    logo: https://assets.production.truefoundry.com/stripe.svg\n    url: https://mcp.stripe.com\n    description: Create and manage customers, payments, invoices, and subscriptions.\n    auth:\n      type: dcr\n  - type: remote\n    name: confluence\n    logo: https://assets.production.truefoundry.com/confluence.svg\n    url: https://mcp.atlassian.com/v1/mcp\n    description: Search spaces, read pages, and create or update content.\n    auth:\n      type: dcr\n  - type: remote\n    name: jira\n    logo: https://assets.production.truefoundry.com/jira.png\n    url: https://mcp.atlassian.com/v1/mcp\n    description: Search, read, create, and update Jira issues.\n    auth:\n      type: dcr\n  - type: remote\n    name: posthog\n    logo: https://assets.production.truefoundry.com/posthog.svg\n    url: https://mcp.posthog.com/mcp\n    description: Query product analytics, run SQL, and manage feature flags.\n    auth:\n      type: dcr\n";
 
 // src/catalog/McpCatalog.ts
 var McpCatalog = class _McpCatalog {