@agent-native/core 0.176.1 → 0.176.2-nightly-20260831184159

package/dist/localization/core-messages/fr-FR.js

@@ -41,6 +41,25 @@ const messages = {
     "onboarding.roleOther": "Autre",
     "onboarding.skipForNow": "Ignorer pour l’instant",
     "onboarding.saveRoleError": "Impossible d’enregistrer votre rôle.",
+    "onboarding.builderActivateCredits": "Activer les crédits gratuits Builder.io",
+    "onboarding.builderConnectCredits": "Connecter les crédits gratuits Builder.io",
+    "onboarding.builderActivateDescription": "Créez ou réutilisez votre compte Builder.io et activez ses crédits gratuits en un clic.",
+    "onboarding.builderActiveCredits": "Inclus avec les crédits gratuits Builder.io actifs",
+    "onboarding.builderCredits": "Inclus avec les crédits gratuits Builder.io",
+    "onboarding.builderActivateTitle": "Activer les crédits gratuits",
+    "onboarding.builderAccountExistsTitle": "Vous avez déjà un compte Builder.io",
+    "onboarding.builderAccountExistsDescription": "Connectez-vous pour l’associer.",
+    "onboarding.builderActivationDescription": "Nous créerons automatiquement votre compte Builder.io en un clic.",
+    "onboarding.builderCreateAndActivate": "Créer et activer",
+    "onboarding.builderConsentPrefix": "En continuant, vous acceptez les",
+    "onboarding.builderTerms": "Conditions",
+    "onboarding.builderPrivacy": "Règles de confidentialité",
+    "onboarding.builderConsentAnd": "et",
+    "onboarding.builderExistingAccount": "J’ai un compte Builder.io",
+    "onboarding.builderActivating": "Activation des crédits gratuits Builder.io",
+    "onboarding.builderConnecting": "Connexion aux crédits gratuits Builder.io",
+    "onboarding.builderProvisioningDescription": "Création ou réutilisation de votre compte Builder.io. Cela prend généralement quelques secondes.",
+    "onboarding.builderConnectionDescription": "Terminez la connexion en un clic dans la nouvelle fenêtre.",
     "aboutAgentNative.title": "À propos d’Agent-Native",
     "aboutAgentNative.version": "Version",
     "aboutAgentNative.environment": "Environnement",

package/dist/localization/core-messages/hi-IN.js

@@ -41,6 +41,25 @@ const messages = {
     "onboarding.roleOther": "अन्य",
     "onboarding.skipForNow": "अभी छोड़ें",
     "onboarding.saveRoleError": "आपकी भूमिका सहेजी नहीं जा सकी।",
+    "onboarding.builderActivateCredits": "Builder.io के मुफ़्त क्रेडिट सक्रिय करें",
+    "onboarding.builderConnectCredits": "Builder.io के मुफ़्त क्रेडिट कनेक्ट करें",
+    "onboarding.builderActivateDescription": "एक क्लिक में अपना Builder.io खाता बनाएँ या फिर से इस्तेमाल करें और उसके मुफ़्त क्रेडिट सक्रिय करें।",
+    "onboarding.builderActiveCredits": "सक्रिय Builder.io मुफ़्त क्रेडिट में शामिल",
+    "onboarding.builderCredits": "Builder.io के मुफ़्त क्रेडिट में शामिल",
+    "onboarding.builderActivateTitle": "मुफ़्त क्रेडिट सक्रिय करें",
+    "onboarding.builderAccountExistsTitle": "आपके पास पहले से Builder.io खाता है",
+    "onboarding.builderAccountExistsDescription": "इसे कनेक्ट करने के लिए लॉग इन करें।",
+    "onboarding.builderActivationDescription": "हम एक क्लिक में आपके लिए Builder.io खाता अपने-आप बनाएँगे।",
+    "onboarding.builderCreateAndActivate": "बनाएँ और सक्रिय करें",
+    "onboarding.builderConsentPrefix": "जारी रखकर, आप Builder.io की",
+    "onboarding.builderTerms": "शर्तों",
+    "onboarding.builderPrivacy": "गोपनीयता नीति",
+    "onboarding.builderConsentAnd": "और",
+    "onboarding.builderExistingAccount": "मेरे पास Builder.io खाता है",
+    "onboarding.builderActivating": "Builder.io के मुफ़्त क्रेडिट सक्रिय किए जा रहे हैं",
+    "onboarding.builderConnecting": "Builder.io के मुफ़्त क्रेडिट कनेक्ट किए जा रहे हैं",
+    "onboarding.builderProvisioningDescription": "आपका Builder.io खाता बनाया या फिर से इस्तेमाल किया जा रहा है। इसमें आमतौर पर कुछ सेकंड लगते हैं।",
+    "onboarding.builderConnectionDescription": "नई विंडो में एक क्लिक से कनेक्शन पूरा करें।",
     "aboutAgentNative.title": "Agent-Native के बारे में",
     "aboutAgentNative.version": "संस्करण",
     "aboutAgentNative.environment": "पर्यावरण",

package/dist/localization/core-messages/ja-JP.js

@@ -41,6 +41,25 @@ const messages = {
     "onboarding.roleOther": "その他",
     "onboarding.skipForNow": "今はスキップ",
     "onboarding.saveRoleError": "役割を保存できませんでした。",
+    "onboarding.builderActivateCredits": "Builder.io 無料クレジットを有効化",
+    "onboarding.builderConnectCredits": "Builder.io 無料クレジットに接続",
+    "onboarding.builderActivateDescription": "Builder.io アカウントを作成または再利用し、ワンクリックで無料クレジットを有効化します。",
+    "onboarding.builderActiveCredits": "有効な Builder.io 無料クレジットに含まれるもの",
+    "onboarding.builderCredits": "Builder.io 無料クレジットに含まれるもの",
+    "onboarding.builderActivateTitle": "無料クレジットを有効化",
+    "onboarding.builderAccountExistsTitle": "Builder.io アカウントをすでにお持ちです",
+    "onboarding.builderAccountExistsDescription": "接続するにはログインしてください。",
+    "onboarding.builderActivationDescription": "ワンクリックで Builder.io アカウントを自動的に作成します。",
+    "onboarding.builderCreateAndActivate": "作成して有効化",
+    "onboarding.builderConsentPrefix": "続行すると、Builder.io の",
+    "onboarding.builderTerms": "利用規約",
+    "onboarding.builderPrivacy": "プライバシー",
+    "onboarding.builderConsentAnd": "および",
+    "onboarding.builderExistingAccount": "Builder.io アカウントを持っています",
+    "onboarding.builderActivating": "Builder.io 無料クレジットを有効化しています",
+    "onboarding.builderConnecting": "Builder.io 無料クレジットに接続しています",
+    "onboarding.builderProvisioningDescription": "Builder.io アカウントを作成または再利用しています。通常は数秒かかります。",
+    "onboarding.builderConnectionDescription": "新しいウィンドウでワンクリック接続を完了してください。",
     "aboutAgentNative.title": "Agent-Native について",
     "aboutAgentNative.version": "バージョン",
     "aboutAgentNative.environment": "環境",

package/dist/localization/core-messages/ko-KR.js

@@ -41,6 +41,25 @@ const messages = {
     "onboarding.roleOther": "기타",
     "onboarding.skipForNow": "지금 건너뛰기",
     "onboarding.saveRoleError": "역할을 저장하지 못했습니다.",
+    "onboarding.builderActivateCredits": "Builder.io 무료 크레딧 활성화",
+    "onboarding.builderConnectCredits": "Builder.io 무료 크레딧 연결",
+    "onboarding.builderActivateDescription": "한 번의 클릭으로 Builder.io 계정을 생성하거나 재사용하고 무료 크레딧을 활성화합니다.",
+    "onboarding.builderActiveCredits": "활성 Builder.io 무료 크레딧에 포함",
+    "onboarding.builderCredits": "Builder.io 무료 크레딧에 포함",
+    "onboarding.builderActivateTitle": "무료 크레딧 활성화",
+    "onboarding.builderAccountExistsTitle": "이미 Builder.io 계정이 있습니다",
+    "onboarding.builderAccountExistsDescription": "연결하려면 로그인하세요.",
+    "onboarding.builderActivationDescription": "한 번의 클릭으로 Builder.io 계정을 자동으로 생성합니다.",
+    "onboarding.builderCreateAndActivate": "생성 및 활성화",
+    "onboarding.builderConsentPrefix": "계속하면 Builder.io의",
+    "onboarding.builderTerms": "서비스 약관",
+    "onboarding.builderPrivacy": "개인정보처리방침",
+    "onboarding.builderConsentAnd": "및",
+    "onboarding.builderExistingAccount": "Builder.io 계정이 있습니다",
+    "onboarding.builderActivating": "Builder.io 무료 크레딧 활성화 중",
+    "onboarding.builderConnecting": "Builder.io 무료 크레딧 연결 중",
+    "onboarding.builderProvisioningDescription": "Builder.io 계정을 생성하거나 재사용하는 중입니다. 보통 몇 초 정도 걸립니다.",
+    "onboarding.builderConnectionDescription": "새 창에서 한 번의 클릭으로 연결을 완료하세요.",
     "aboutAgentNative.title": "Agent-Native 정보",
     "aboutAgentNative.version": "버전",
     "aboutAgentNative.environment": "환경",

package/dist/localization/core-messages/pt-BR.js

@@ -41,6 +41,25 @@ const messages = {
     "onboarding.roleOther": "Outro",
     "onboarding.skipForNow": "Pular por enquanto",
     "onboarding.saveRoleError": "Não foi possível salvar sua função.",
+    "onboarding.builderActivateCredits": "Ativar créditos gratuitos do Builder.io",
+    "onboarding.builderConnectCredits": "Conectar créditos gratuitos do Builder.io",
+    "onboarding.builderActivateDescription": "Crie ou reutilize sua conta do Builder.io e ative os créditos gratuitos com um clique.",
+    "onboarding.builderActiveCredits": "Incluído nos créditos gratuitos ativos do Builder.io",
+    "onboarding.builderCredits": "Incluído nos créditos gratuitos do Builder.io",
+    "onboarding.builderActivateTitle": "Ativar créditos gratuitos",
+    "onboarding.builderAccountExistsTitle": "Você já tem uma conta do Builder.io",
+    "onboarding.builderAccountExistsDescription": "Faça login para conectá-la.",
+    "onboarding.builderActivationDescription": "Criaremos automaticamente sua conta do Builder.io com um clique.",
+    "onboarding.builderCreateAndActivate": "Criar e ativar",
+    "onboarding.builderConsentPrefix": "Ao continuar, você concorda com os",
+    "onboarding.builderTerms": "Termos",
+    "onboarding.builderPrivacy": "Privacidade",
+    "onboarding.builderConsentAnd": "e",
+    "onboarding.builderExistingAccount": "Tenho uma conta do Builder.io",
+    "onboarding.builderActivating": "Ativando os créditos gratuitos do Builder.io",
+    "onboarding.builderConnecting": "Conectando os créditos gratuitos do Builder.io",
+    "onboarding.builderProvisioningDescription": "Criando ou reutilizando sua conta do Builder.io. Isso geralmente leva alguns segundos.",
+    "onboarding.builderConnectionDescription": "Conclua a conexão com um clique na nova janela.",
     "aboutAgentNative.title": "Sobre o Agent-Native",
     "aboutAgentNative.version": "Versão",
     "aboutAgentNative.environment": "Ambiente",

package/dist/localization/core-messages/zh-CN.js

@@ -41,6 +41,25 @@ const messages = {
     "onboarding.roleOther": "其他",
     "onboarding.skipForNow": "暂时跳过",
     "onboarding.saveRoleError": "无法保存你的角色。",
+    "onboarding.builderActivateCredits": "激活 Builder.io 免费额度",
+    "onboarding.builderConnectCredits": "连接 Builder.io 免费额度",
+    "onboarding.builderActivateDescription": "一键创建或重新使用您的 Builder.io 账户，并激活免费额度。",
+    "onboarding.builderActiveCredits": "包含在有效的 Builder.io 免费额度中",
+    "onboarding.builderCredits": "包含在 Builder.io 免费额度中",
+    "onboarding.builderActivateTitle": "激活免费额度",
+    "onboarding.builderAccountExistsTitle": "您已有 Builder.io 账户",
+    "onboarding.builderAccountExistsDescription": "登录以连接该账户。",
+    "onboarding.builderActivationDescription": "我们会一键自动为您创建 Builder.io 账户。",
+    "onboarding.builderCreateAndActivate": "创建并激活",
+    "onboarding.builderConsentPrefix": "继续即表示您同意 Builder.io 的",
+    "onboarding.builderTerms": "条款",
+    "onboarding.builderPrivacy": "隐私政策",
+    "onboarding.builderConsentAnd": "和",
+    "onboarding.builderExistingAccount": "我有 Builder.io 账户",
+    "onboarding.builderActivating": "正在激活 Builder.io 免费额度",
+    "onboarding.builderConnecting": "正在连接 Builder.io 免费额度",
+    "onboarding.builderProvisioningDescription": "正在创建或重新使用您的 Builder.io 账户，通常需要几秒钟。",
+    "onboarding.builderConnectionDescription": "在新窗口中一键完成连接。",
     "aboutAgentNative.title": "关于 Agent-Native",
     "aboutAgentNative.version": "版本",
     "aboutAgentNative.environment": "环境",

package/dist/localization/core-messages/zh-TW.js

@@ -41,6 +41,25 @@ const messages = {
     "onboarding.roleOther": "其他",
     "onboarding.skipForNow": "暫時略過",
     "onboarding.saveRoleError": "無法儲存你的角色。",
+    "onboarding.builderActivateCredits": "啟用 Builder.io 免費額度",
+    "onboarding.builderConnectCredits": "連線至 Builder.io 免費額度",
+    "onboarding.builderActivateDescription": "只要按一下即可建立或重新使用您的 Builder.io 帳戶，並啟用免費額度。",
+    "onboarding.builderActiveCredits": "包含於有效的 Builder.io 免費額度",
+    "onboarding.builderCredits": "包含於 Builder.io 免費額度",
+    "onboarding.builderActivateTitle": "啟用免費額度",
+    "onboarding.builderAccountExistsTitle": "您已有 Builder.io 帳戶",
+    "onboarding.builderAccountExistsDescription": "登入以連接該帳戶。",
+    "onboarding.builderActivationDescription": "我們會按一下自動為您建立 Builder.io 帳戶。",
+    "onboarding.builderCreateAndActivate": "建立並啟用",
+    "onboarding.builderConsentPrefix": "繼續即表示您同意 Builder.io 的",
+    "onboarding.builderTerms": "條款",
+    "onboarding.builderPrivacy": "隱私權",
+    "onboarding.builderConsentAnd": "和",
+    "onboarding.builderExistingAccount": "我有 Builder.io 帳戶",
+    "onboarding.builderActivating": "正在啟用 Builder.io 免費額度",
+    "onboarding.builderConnecting": "正在連線至 Builder.io 免費額度",
+    "onboarding.builderProvisioningDescription": "正在建立或重新使用您的 Builder.io 帳戶，通常需要幾秒鐘。",
+    "onboarding.builderConnectionDescription": "在新視窗中按一下即可完成連線。",
     "aboutAgentNative.title": "關於 Agent-Native",
     "aboutAgentNative.version": "版本",
     "aboutAgentNative.environment": "環境",

package/dist/localization/core-messages.d.ts

@@ -43,6 +43,25 @@ export declare const englishAgentChatMessages: {
     readonly "onboarding.roleOther": "Other";
     readonly "onboarding.skipForNow": "Skip for now";
     readonly "onboarding.saveRoleError": "Could not save your role.";
+    readonly "onboarding.builderActivateCredits": "Activate Builder.io free credits";
+    readonly "onboarding.builderConnectCredits": "Connect Builder.io free credits";
+    readonly "onboarding.builderActivateDescription": "Create or reuse your Builder.io account and activate its free credits in one click.";
+    readonly "onboarding.builderActiveCredits": "Included with active Builder.io free credits";
+    readonly "onboarding.builderCredits": "Included with Builder.io free credits";
+    readonly "onboarding.builderActivateTitle": "Activate free credits";
+    readonly "onboarding.builderAccountExistsTitle": "You already have a Builder.io account";
+    readonly "onboarding.builderAccountExistsDescription": "Log in to connect it.";
+    readonly "onboarding.builderActivationDescription": "We'll automatically create your Builder.io account for you in one click.";
+    readonly "onboarding.builderCreateAndActivate": "Create and activate";
+    readonly "onboarding.builderConsentPrefix": "By continuing, you agree to Builder.io's";
+    readonly "onboarding.builderTerms": "Terms";
+    readonly "onboarding.builderPrivacy": "Privacy";
+    readonly "onboarding.builderConsentAnd": "and";
+    readonly "onboarding.builderExistingAccount": "I have a Builder.io account";
+    readonly "onboarding.builderActivating": "Activating Builder.io free credits";
+    readonly "onboarding.builderConnecting": "Connecting Builder.io free credits";
+    readonly "onboarding.builderProvisioningDescription": "Creating or reusing your Builder.io account. This usually takes a few seconds.";
+    readonly "onboarding.builderConnectionDescription": "Finish the one-click connection in the new window.";
     readonly "aboutAgentNative.title": "About Agent-Native";
     readonly "aboutAgentNative.version": "Version";
     readonly "aboutAgentNative.environment": "Environment";

package/dist/localization/default-messages.d.ts

@@ -365,6 +365,17 @@ declare const messages: {
             unableToLoadUsage: string;
             metricsDescriptionBuilder: string;
             metricsDescriptionLlm: string;
+            appAdoption: string;
+            appAdoptionFor: string;
+            yourAppActivity: string;
+            appAdoptionDefinition: string;
+            ownerUnavailable: string;
+            dailyActiveUsers: string;
+            weeklyActiveUsers: string;
+            trackedActions: string;
+            trackedActionBreakdown: string;
+            noTrackedActions: string;
+            viewAppMetrics: string;
             llmCalls: string;
             activeUsers: string;
             workspaceAppsStat: string;

package/dist/localization/default-messages.js

@@ -371,6 +371,17 @@ const messages = {
             unableToLoadUsage: "Unable to load usage.",
             metricsDescriptionBuilder: "Workspace-wide Builder.io credit spend, chat volume, user activity, and app access.",
             metricsDescriptionLlm: "Workspace-wide LLM spend, chat volume, user activity, and app access.",
+            appAdoption: "App adoption",
+            appAdoptionFor: "{{name}} adoption",
+            yourAppActivity: "Your app activity",
+            appAdoptionDefinition: "Active means a tracked action. App opens and views are not included.",
+            ownerUnavailable: "Owner unavailable",
+            dailyActiveUsers: "Daily active",
+            weeklyActiveUsers: "Weekly active",
+            trackedActions: "Tracked actions",
+            trackedActionBreakdown: "Tracked action breakdown",
+            noTrackedActions: "No tracked actions in this window.",
+            viewAppMetrics: "View app metrics",
             llmCalls: "LLM calls",
             activeUsers: "Active users",
             workspaceAppsStat: "Workspace apps",

package/dist/mcp/analytics.d.ts

@@ -0,0 +1,103 @@
+/**
+ * Analytics for the MCP server this app exposes.
+ *
+ * Events and property names follow PostHog's MCP analytics vocabulary
+ * (https://posthog.com/docs/mcp-analytics/events) — `$mcp_tool_call`,
+ * `$mcp_tool_name`, `$mcp_duration_ms`, … — but they are emitted through the
+ * framework's provider-agnostic `track()`, so an app on Mixpanel, Amplitude,
+ * a webhook, or Agent-Native Analytics receives the same events under the
+ * same names. The vocabulary is borrowed rather than invented because
+ * PostHog's MCP dashboards read these keys directly, and a second spelling
+ * would strand every app already built on theirs.
+ *
+ * Emission points live in `build-server.ts` (shared by the HTTP mount and the
+ * stdio transport, so both surfaces report identically) and in `server.ts`
+ * for the initialize handshake, which is the only place the client's own name
+ * and version are on the wire.
+ *
+ * Deliberately NOT emitted: `$mcp_response`. A tool result is app data of
+ * unbounded size; the properties here stay metadata. `$mcp_parameters` is
+ * opt-in for the same reason (`observability.mcpCaptureParameters`) and
+ * redacted
+ * even then.
+ */
+export declare const MCP_ANALYTICS_EVENTS: {
+    readonly initialize: "$mcp_initialize";
+    readonly toolsList: "$mcp_tools_list";
+    readonly toolCall: "$mcp_tool_call";
+    readonly resourcesList: "$mcp_resources_list";
+    readonly resourceRead: "$mcp_resource_read";
+};
+/**
+ * Per-request identity of the MCP exchange: who is calling, over which
+ * transport, against which server build. Resolved once per request and passed
+ * to each event so every `$mcp_*` event carries the same caller columns.
+ */
+export interface McpAnalyticsContext {
+    /** `$mcp_source` — which transport served the request. */
+    source: "http" | "stdio";
+    serverName: string;
+    serverVersion: string;
+    appId?: string;
+    clientName?: string;
+    clientVersion?: string;
+    clientUserAgent?: string;
+    protocolVersion?: string;
+    /** Verified caller, when the request authenticated to one. */
+    userId?: string;
+    /** MCP transport session, when the transport keeps one. */
+    sessionId?: string;
+}
+interface McpRequestLike {
+    params?: {
+        _meta?: Record<string, unknown>;
+    } | undefined;
+    _meta?: Record<string, unknown> | undefined;
+}
+export declare function detectVendorClient(...candidates: Array<string | undefined>): string | undefined;
+/** `{ name, version }` a 2026-era client carries in per-request `_meta`. */
+export declare function readClientInfoFromRequest(request: McpRequestLike | undefined): {
+    clientName?: string;
+    clientVersion?: string;
+    protocolVersion?: string;
+};
+export declare function trackMcpInitialize(ctx: McpAnalyticsContext): void;
+export declare function trackMcpToolsList(ctx: McpAnalyticsContext, args: {
+    toolNames: string[];
+    durationMs: number;
+}): void;
+export declare function trackMcpToolCall(ctx: McpAnalyticsContext, args: {
+    toolName: string;
+    toolDescription?: string;
+    /** `read` for a `readOnly` action, `write` otherwise. */
+    toolCategory?: string;
+    parameters?: Record<string, unknown>;
+    durationMs: number;
+    isError: boolean;
+    errorType?: string;
+    errorMessage?: string;
+}): void;
+export declare function trackMcpResourcesList(ctx: McpAnalyticsContext, args: {
+    resourceCount: number;
+    durationMs: number;
+}): void;
+export declare function trackMcpResourceRead(ctx: McpAnalyticsContext, args: {
+    resourceName?: string;
+    resourceUri?: string;
+    durationMs: number;
+    isError: boolean;
+    errorType?: string;
+    errorMessage?: string;
+}): void;
+/**
+ * Error shape for a `$mcp_*` event.
+ *
+ * `$mcp_error_type` is the class/code a consumer can group by;
+ * `$mcp_error_message` is bounded and redacted by the tracking layer's own
+ * rules when it reaches a provider.
+ */
+export declare function describeMcpError(err: unknown): {
+    errorType: string;
+    errorMessage: string;
+};
+export {};

package/dist/mcp/analytics.js

@@ -0,0 +1,204 @@
+/**
+ * Analytics for the MCP server this app exposes.
+ *
+ * Events and property names follow PostHog's MCP analytics vocabulary
+ * (https://posthog.com/docs/mcp-analytics/events) — `$mcp_tool_call`,
+ * `$mcp_tool_name`, `$mcp_duration_ms`, … — but they are emitted through the
+ * framework's provider-agnostic `track()`, so an app on Mixpanel, Amplitude,
+ * a webhook, or Agent-Native Analytics receives the same events under the
+ * same names. The vocabulary is borrowed rather than invented because
+ * PostHog's MCP dashboards read these keys directly, and a second spelling
+ * would strand every app already built on theirs.
+ *
+ * Emission points live in `build-server.ts` (shared by the HTTP mount and the
+ * stdio transport, so both surfaces report identically) and in `server.ts`
+ * for the initialize handshake, which is the only place the client's own name
+ * and version are on the wire.
+ *
+ * Deliberately NOT emitted: `$mcp_response`. A tool result is app data of
+ * unbounded size; the properties here stay metadata. `$mcp_parameters` is
+ * opt-in for the same reason (`observability.mcpCaptureParameters`) and
+ * redacted
+ * even then.
+ */
+import { getAppConfig } from "../app-config/store.js";
+import { safeValue } from "../tracking/redaction.js";
+import { listTrackingProviders, track } from "../tracking/registry.js";
+/** Reserved request `_meta` keys the 2026-07-28 protocol carries per request. */
+const CLIENT_INFO_META_KEY = "io.modelcontextprotocol/clientInfo";
+const PROTOCOL_VERSION_META_KEY = "io.modelcontextprotocol/protocolVersion";
+export const MCP_ANALYTICS_EVENTS = {
+    initialize: "$mcp_initialize",
+    toolsList: "$mcp_tools_list",
+    toolCall: "$mcp_tool_call",
+    resourcesList: "$mcp_resources_list",
+    resourceRead: "$mcp_resource_read",
+};
+/**
+ * Normalized vendor bucket for the calling host.
+ *
+ * Clients report themselves inconsistently — `claude-code`, `Claude Code`,
+ * `claude-ai`, or nothing but a user agent — so grouping on the raw name
+ * splits one host across several rows. Matching is substring-based against
+ * the lowercased client name and user agent, first match wins.
+ */
+const VENDOR_CLIENT_PATTERNS = [
+    [/claude[\s._-]?code/, "claude-code"],
+    [/claude[\s._-]?desktop/, "claude-desktop"],
+    [/\bclaude\b|anthropic/, "claude"],
+    [/\bcodex\b/, "codex"],
+    [/chatgpt|openai/, "openai"],
+    [/\bcursor\b/, "cursor"],
+    [/windsurf|codeium/, "windsurf"],
+    [/\bcline\b/, "cline"],
+    [/github[\s._-]?copilot|\bcopilot\b/, "copilot"],
+    [/vscode|visual[\s._-]?studio[\s._-]?code/, "vscode"],
+    [/jetbrains|intellij/, "jetbrains"],
+    [/\bzed\b/, "zed"],
+    [/\bgoose\b/, "goose"],
+    [/\bpostman\b/, "postman"],
+    [/mcpjam|mcp[\s._-]?inspector/, "mcp-inspector"],
+    [/agent[\s._-]?native/, "agent-native"],
+];
+export function detectVendorClient(...candidates) {
+    const haystack = candidates
+        .filter((value) => !!value)
+        .join(" ")
+        .toLowerCase();
+    if (!haystack)
+        return undefined;
+    for (const [pattern, vendor] of VENDOR_CLIENT_PATTERNS) {
+        if (pattern.test(haystack))
+            return vendor;
+    }
+    return undefined;
+}
+/** `{ name, version }` a 2026-era client carries in per-request `_meta`. */
+export function readClientInfoFromRequest(request) {
+    const meta = request?.params?._meta ?? request?._meta;
+    if (!meta || typeof meta !== "object")
+        return {};
+    const info = meta[CLIENT_INFO_META_KEY];
+    const protocolVersion = meta[PROTOCOL_VERSION_META_KEY];
+    const record = info && typeof info === "object" ? info : {};
+    return {
+        ...(typeof record.name === "string" ? { clientName: record.name } : {}),
+        ...(typeof record.version === "string"
+            ? { clientVersion: record.version }
+            : {}),
+        ...(typeof protocolVersion === "string" ? { protocolVersion } : {}),
+    };
+}
+function analyticsEnabled() {
+    // A registry with no provider still fans out through `track()` at zero cost,
+    // but building the property bag (redacting arguments, listing tool names) is
+    // not free — skip it when nothing would receive the event.
+    if (listTrackingProviders().length === 0)
+        return false;
+    // Not wrapped: a malformed `MCP_ANALYTICS` value is a deployment error, and
+    // catching it here would turn "your config is wrong" into "MCP usage stopped
+    // being reported" — the exact silent-off state this instrumentation exists to
+    // rule out.
+    return getAppConfig().observability.mcpEvents;
+}
+function captureParameters() {
+    return getAppConfig().observability.mcpCaptureParameters;
+}
+function contextProperties(ctx) {
+    const vendor = detectVendorClient(ctx.clientName, ctx.clientUserAgent);
+    return {
+        $mcp_source: ctx.source,
+        $mcp_server_name: ctx.serverName,
+        $mcp_server_version: ctx.serverVersion,
+        ...(ctx.appId ? { $mcp_app_id: ctx.appId } : {}),
+        ...(ctx.clientName ? { $mcp_client_name: ctx.clientName } : {}),
+        ...(ctx.clientVersion ? { $mcp_client_version: ctx.clientVersion } : {}),
+        ...(ctx.clientUserAgent
+            ? { $mcp_client_user_agent: ctx.clientUserAgent }
+            : {}),
+        ...(vendor ? { $mcp_vendor_client: vendor } : {}),
+        ...(ctx.protocolVersion
+            ? { $mcp_protocol_version: ctx.protocolVersion }
+            : {}),
+    };
+}
+function emit(event, ctx, properties) {
+    try {
+        track(event, { ...contextProperties(ctx), ...properties }, { userId: ctx.userId, sessionId: ctx.sessionId });
+    }
+    catch (err) {
+        console.error(`[mcp-analytics] Failed to emit ${event}:`, err);
+    }
+}
+export function trackMcpInitialize(ctx) {
+    if (!analyticsEnabled())
+        return;
+    emit(MCP_ANALYTICS_EVENTS.initialize, ctx, {});
+}
+export function trackMcpToolsList(ctx, args) {
+    if (!analyticsEnabled())
+        return;
+    emit(MCP_ANALYTICS_EVENTS.toolsList, ctx, {
+        $mcp_listed_tool_names: args.toolNames,
+        $mcp_listed_tool_count: args.toolNames.length,
+        $mcp_duration_ms: args.durationMs,
+    });
+}
+export function trackMcpToolCall(ctx, args) {
+    if (!analyticsEnabled())
+        return;
+    emit(MCP_ANALYTICS_EVENTS.toolCall, ctx, {
+        $mcp_tool_name: args.toolName,
+        ...(args.toolDescription
+            ? { $mcp_tool_description: args.toolDescription }
+            : {}),
+        ...(args.toolCategory ? { $mcp_tool_category: args.toolCategory } : {}),
+        ...(captureParameters() && args.parameters
+            ? { $mcp_parameters: safeValue(args.parameters) }
+            : {}),
+        $mcp_duration_ms: args.durationMs,
+        $mcp_is_error: args.isError,
+        ...(args.errorType ? { $mcp_error_type: args.errorType } : {}),
+        ...(args.errorMessage ? { $mcp_error_message: args.errorMessage } : {}),
+    });
+}
+export function trackMcpResourcesList(ctx, args) {
+    if (!analyticsEnabled())
+        return;
+    emit(MCP_ANALYTICS_EVENTS.resourcesList, ctx, {
+        $mcp_listed_resource_count: args.resourceCount,
+        $mcp_duration_ms: args.durationMs,
+    });
+}
+export function trackMcpResourceRead(ctx, args) {
+    if (!analyticsEnabled())
+        return;
+    emit(MCP_ANALYTICS_EVENTS.resourceRead, ctx, {
+        ...(args.resourceName ? { $mcp_resource_name: args.resourceName } : {}),
+        ...(args.resourceUri ? { $mcp_resource_uri: args.resourceUri } : {}),
+        $mcp_duration_ms: args.durationMs,
+        $mcp_is_error: args.isError,
+        ...(args.errorType ? { $mcp_error_type: args.errorType } : {}),
+        ...(args.errorMessage ? { $mcp_error_message: args.errorMessage } : {}),
+    });
+}
+/**
+ * Error shape for a `$mcp_*` event.
+ *
+ * `$mcp_error_type` is the class/code a consumer can group by;
+ * `$mcp_error_message` is bounded and redacted by the tracking layer's own
+ * rules when it reaches a provider.
+ */
+export function describeMcpError(err) {
+    if (err && typeof err === "object") {
+        const record = err;
+        const code = record.errorCode ?? record.code;
+        return {
+            errorType: typeof code === "string" && code
+                ? code
+                : (err.constructor?.name ?? "Error"),
+            errorMessage: String(record.message ?? err),
+        };
+    }
+    return { errorType: "Error", errorMessage: String(err) };
+}

package/dist/mcp/build-server.d.ts

@@ -176,6 +176,13 @@ export interface MCPRequestMeta {
      * text. Defaults to disabled when unset.
      */
     inlineMcpApps?: boolean;
+    /**
+     * Which transport served this request, for `$mcp_source` in MCP analytics.
+     * Set explicitly by `mountMCP` (`http`) and the stdio standalone entry
+     * (`stdio`); an embedded/test caller that sets neither is reported as the
+     * HTTP mount it stands in for.
+     */
+    transport?: "http" | "stdio";
 }
 /**
  * Deploy-toggleable kill switch for inline MCP App embeds — the `ui://`