feat(network): add allow_runloop_mirrors egress flag to network policies (#10350)

Author: stainless-app[bot]

.stats.yml

@@ -1,4 +1,4 @@
 configured_endpoints: 119
-openapi_spec_url: https://storage.googleapis.com/stainless-sdk-openapi-specs/runloop-ai/runloop-53098c6f2c4d6e31f36a6975b3f7f504ad3f8fbe5a209dac9b2304afcd053a77.yml
-openapi_spec_hash: 05dcd360988cd1044b6a7ab03933a5ef
+openapi_spec_url: https://storage.googleapis.com/stainless-sdk-openapi-specs/runloop-ai/runloop-0b7cd0c2fc193b18189cd7f44cf45ece7726b5d485fb72577f7d235266432ea0.yml
+openapi_spec_hash: 78c340dbfb9d3d58b24ef318fc2a657b
 config_hash: 218b8d25038e627faab98532392ee9a0

src/resources/network-policies.ts

@@ -130,6 +130,12 @@ export interface NetworkPolicyCreateParameters {
    */
   allow_mcp_gateway?: boolean | null;
 
+  /**
+   * (Optional) If true, allows devbox egress to Runloop's package/image registry
+   * mirrors. Defaults to false. Implicitly allowed when allow_all is true.
+   */
+  allow_runloop_mirrors?: boolean | null;
+
   /**
    * (Optional) IPv4 CIDR-based allow list with optional port restrictions, additive
    * with allowed_hostnames. Example: [{'cidr': '10.12.0.0/16', 'ports': [{'port':
@@ -193,6 +199,12 @@ export interface NetworkPolicyUpdateParameters {
    */
   allow_mcp_gateway?: boolean | null;
 
+  /**
+   * If true, allows devbox egress to Runloop's package/image registry mirrors.
+   * Implicitly allowed when allow_all is true.
+   */
+  allow_runloop_mirrors?: boolean | null;
+
   /**
    * Updated IPv4 CIDR-based allow list with optional port restrictions, additive
    * with allowed_hostnames.
@@ -278,6 +290,12 @@ export namespace NetworkPolicyView {
      */
     allow_mcp_gateway: boolean;
 
+    /**
+     * If true, allows devbox egress to Runloop's package/image registry mirrors.
+     * Implicitly allowed when allow_all is true.
+     */
+    allow_runloop_mirrors: boolean;
+
     /**
      * CIDR-based allow list with optional port restrictions, additive with
      * allowed_hostnames.
@@ -345,6 +363,12 @@ export interface NetworkPolicyCreateParams {
    */
   allow_mcp_gateway?: boolean | null;
 
+  /**
+   * (Optional) If true, allows devbox egress to Runloop's package/image registry
+   * mirrors. Defaults to false. Implicitly allowed when allow_all is true.
+   */
+  allow_runloop_mirrors?: boolean | null;
+
   /**
    * (Optional) IPv4 CIDR-based allow list with optional port restrictions, additive
    * with allowed_hostnames. Example: [{'cidr': '10.12.0.0/16', 'ports': [{'port':
@@ -385,6 +409,12 @@ export interface NetworkPolicyUpdateParams {
    */
   allow_mcp_gateway?: boolean | null;
 
+  /**
+   * If true, allows devbox egress to Runloop's package/image registry mirrors.
+   * Implicitly allowed when allow_all is true.
+   */
+  allow_runloop_mirrors?: boolean | null;
+
   /**
    * Updated IPv4 CIDR-based allow list with optional port restrictions, additive
    * with allowed_hostnames.

tests/api-resources/network-policies.test.ts

@@ -27,6 +27,7 @@ describe('resource networkPolicies', () => {
       allow_all: true,
       allow_devbox_to_devbox: true,
       allow_mcp_gateway: true,
+      allow_runloop_mirrors: true,
       allowed_cidrs: [
         {
           cidr: 'cidr',
@@ -90,6 +91,7 @@ describe('resource networkPolicies', () => {
           allow_all: true,
           allow_devbox_to_devbox: true,
           allow_mcp_gateway: true,
+          allow_runloop_mirrors: true,
           allowed_cidrs: [
             {
               cidr: 'cidr',