feat: Add AI gateway and MCP gateway flags to network policy create (#7638)

Author: stainless-app[bot]

.stats.yml

@@ -1,4 +1,4 @@
 configured_endpoints: 118
-openapi_spec_url: https://storage.googleapis.com/stainless-sdk-openapi-specs/runloop-ai%2Frunloop-1a92de99959f20ab5850a7f89db21cb66269b2e0002ffc5e5afbe660d05b0768.yml
-openapi_spec_hash: 41e4660f26e27e6ab94d223da4ec1253
+openapi_spec_url: https://storage.googleapis.com/stainless-sdk-openapi-specs/runloop-ai%2Frunloop-dd0f43e15cb67179deaf86f83ae04c6fae4ff858ee33e82a3b89231566cdc5bb.yml
+openapi_spec_hash: 569176c1c4f48efd25a44fa526fad9d1
 config_hash: cbda3692cb48ab8582a0df1674b9e5c8

src/resources/network-policies.ts

@@ -88,6 +88,12 @@ export interface NetworkPolicyCreateParameters {
    */
   name: string;
 
+  /**
+   * (Optional) If true, allows devbox egress to the AI credential gateway for
+   * credential proxying. Defaults to false.
+   */
+  allow_ai_gateway?: boolean | null;
+
   /**
    * (Optional) If true, all egress traffic is allowed (ALLOW_ALL policy). Defaults
    * to false.
@@ -101,6 +107,12 @@ export interface NetworkPolicyCreateParameters {
    */
   allow_devbox_to_devbox?: boolean | null;
 
+  /**
+   * (Optional) If true, allows devbox egress to the MCP hub for MCP server access.
+   * Defaults to false.
+   */
+  allow_mcp_gateway?: boolean | null;
+
   /**
    * (Optional) DNS-based allow list with wildcard support. Examples: ['github.com',
    * '*.npmjs.org'].
@@ -138,6 +150,11 @@ export interface NetworkPolicyListView {
  * Parameters for updating an existing NetworkPolicy. All fields are optional.
  */
 export interface NetworkPolicyUpdateParameters {
+  /**
+   * If true, allows devbox egress to the AI credential gateway.
+   */
+  allow_ai_gateway?: boolean | null;
+
   /**
    * If true, all egress traffic is allowed (ALLOW_ALL policy).
    */
@@ -148,6 +165,11 @@ export interface NetworkPolicyUpdateParameters {
    */
   allow_devbox_to_devbox?: boolean | null;
 
+  /**
+   * If true, allows devbox egress to the MCP hub.
+   */
+  allow_mcp_gateway?: boolean | null;
+
   /**
    * Updated DNS-based allow list with wildcard support. Examples: ['github.com',
    * '*.npmjs.org'].
@@ -206,6 +228,12 @@ export namespace NetworkPolicyView {
    * The egress rules for this policy.
    */
   export interface Egress {
+    /**
+     * If true, allows devbox egress to the AI credential gateway for credential
+     * proxying.
+     */
+    allow_ai_gateway: boolean;
+
     /**
      * If true, all egress traffic is allowed and other fields are ignored. Used for
      * ALLOW_ALL policies.
@@ -217,6 +245,11 @@ export namespace NetworkPolicyView {
      */
     allow_devbox_to_devbox: boolean;
 
+    /**
+     * If true, allows devbox egress to the MCP hub for MCP server access.
+     */
+    allow_mcp_gateway: boolean;
+
     /**
      * DNS-based allow list with wildcard support. Examples: ['github.com',
      * '*.npmjs.org', 'api.openai.com']. Empty list with allow_all=false means no
@@ -233,6 +266,12 @@ export interface NetworkPolicyCreateParams {
    */
   name: string;
 
+  /**
+   * (Optional) If true, allows devbox egress to the AI credential gateway for
+   * credential proxying. Defaults to false.
+   */
+  allow_ai_gateway?: boolean | null;
+
   /**
    * (Optional) If true, all egress traffic is allowed (ALLOW_ALL policy). Defaults
    * to false.
@@ -246,6 +285,12 @@ export interface NetworkPolicyCreateParams {
    */
   allow_devbox_to_devbox?: boolean | null;
 
+  /**
+   * (Optional) If true, allows devbox egress to the MCP hub for MCP server access.
+   * Defaults to false.
+   */
+  allow_mcp_gateway?: boolean | null;
+
   /**
    * (Optional) DNS-based allow list with wildcard support. Examples: ['github.com',
    * '*.npmjs.org'].
@@ -259,6 +304,11 @@ export interface NetworkPolicyCreateParams {
 }
 
 export interface NetworkPolicyUpdateParams {
+  /**
+   * If true, allows devbox egress to the AI credential gateway.
+   */
+  allow_ai_gateway?: boolean | null;
+
   /**
    * If true, all egress traffic is allowed (ALLOW_ALL policy).
    */
@@ -269,6 +319,11 @@ export interface NetworkPolicyUpdateParams {
    */
   allow_devbox_to_devbox?: boolean | null;
 
+  /**
+   * If true, allows devbox egress to the MCP hub.
+   */
+  allow_mcp_gateway?: boolean | null;
+
   /**
    * Updated DNS-based allow list with wildcard support. Examples: ['github.com',
    * '*.npmjs.org'].

tests/api-resources/network-policies.test.ts

@@ -23,8 +23,10 @@ describe('resource networkPolicies', () => {
   test('create: required and optional params', async () => {
     const response = await client.networkPolicies.create({
       name: 'name',
+      allow_ai_gateway: true,
       allow_all: true,
       allow_devbox_to_devbox: true,
+      allow_mcp_gateway: true,
       allowed_hostnames: ['string'],
       description: 'description',
     });
@@ -72,8 +74,10 @@ describe('resource networkPolicies', () => {
       client.networkPolicies.update(
         'id',
         {
+          allow_ai_gateway: true,
           allow_all: true,
           allow_devbox_to_devbox: true,
+          allow_mcp_gateway: true,
           allowed_hostnames: ['string'],
           description: 'description',
           name: 'name',