@carrierllc/mcp 0.13.16 → 0.13.18

package/dist/index.js

@@ -80,7 +80,7 @@ import {
   verifyStorefront,
   withOcsListSummary,
   withTemplateResellerId
-} from "./chunk-D6VGTHND.js";
+} from "./chunk-VXROP2SU.js";
 import "./chunk-SHKKVIIA.js";
 
 // src/index.ts
@@ -291,9 +291,9 @@ async function fail(resp) {
   throw new BedrockError(text || `Bedrock returned HTTP ${resp.status}`, resp.status);
 }
 function timedOut() {
-  const err7 = new Error("Bedrock call timed out before a usable response");
-  err7.name = "TimeoutError";
-  return err7;
+  const err8 = new Error("Bedrock call timed out before a usable response");
+  err8.name = "TimeoutError";
+  return err8;
 }
 function sleep(ms, signal) {
   if (signal.aborted) return Promise.resolve();
@@ -317,9 +317,9 @@ async function sendWithRetry(aws, url, init, signal, deadlineAt) {
     let resp;
     try {
       resp = await aws.fetch(url, init);
-    } catch (err7) {
+    } catch (err8) {
       if (signal.aborted && throttled) return throttled;
-      throw err7;
+      throw err8;
     }
     if (!retryable(resp.status)) return resp;
     throttled = resp;
@@ -668,8 +668,8 @@ async function beginUiAgentRun(prompt, title, env, opts) {
       ...opts?.model ? { model: opts.model } : {},
       ...opts?.outputSchema ? { outputSchema: opts.outputSchema } : {}
     });
-  } catch (err7) {
-    const message = err7 instanceof Error ? err7.message : String(err7);
+  } catch (err8) {
+    const message = err8 instanceof Error ? err8.message : String(err8);
     await putTask(env, {
       ...base,
       status: "error",
@@ -681,7 +681,7 @@ async function beginUiAgentRun(prompt, title, env, opts) {
         screenshots_taken: 0
       }
     });
-    throw err7;
+    throw err8;
   }
   const dispatched = {
     ...base,
@@ -695,8 +695,8 @@ async function beginUiAgentRun(prompt, title, env, opts) {
     let run;
     try {
       run = await waitForRun(env, created.runId);
-    } catch (err7) {
-      const message = err7 instanceof Error ? err7.message : String(err7);
+    } catch (err8) {
+      const message = err8 instanceof Error ? err8.message : String(err8);
       const failed = {
         success: false,
         summary: `Browser Use run failed: ${message}`,
@@ -837,8 +837,8 @@ function writeAgentAudit(env, entry) {
       ],
       indexes: [entry.task_id]
     });
-  } catch (err7) {
-    console.error(`[browser-use-agent] audit write failed: ${err7.message}`);
+  } catch (err8) {
+    console.error(`[browser-use-agent] audit write failed: ${err8.message}`);
   }
 }
 
@@ -1073,22 +1073,22 @@ function boundZonesResult(raw, opts = {}) {
   const { verbose = false, resellerId } = opts;
   const maxZones = opts.maxZones ?? ZONES_MAX_ZONES;
   const maxOperators = opts.maxOperators ?? (verbose ? ZONES_VERBOSE_MAX_OPERATORS : ZONES_MAX_OPERATORS);
-  const totalOperators = all.reduce((n, z25) => n + (z25.operators?.length ?? 0), 0);
+  const totalOperators = all.reduce((n, z26) => n + (z26.operators?.length ?? 0), 0);
   const keptZones = all.slice(0, maxZones);
   let budget = maxOperators;
   let returnedOperators = 0;
-  const zones = keptZones.map((z25) => {
-    const ops = z25.operators ?? [];
+  const zones = keptZones.map((z26) => {
+    const ops = z26.operators ?? [];
     const take = Math.max(0, Math.min(ops.length, budget));
     budget -= take;
     returnedOperators += take;
     const sliced = ops.slice(0, take);
     if (verbose) {
-      return { ...z25, operators: sliced, operatorCount: ops.length };
+      return { ...z26, operators: sliced, operatorCount: ops.length };
     }
     return {
-      zoneId: z25.zoneId,
-      zoneName: z25.zoneName,
+      zoneId: z26.zoneId,
+      zoneName: z26.zoneName,
       operatorCount: ops.length,
       operators: sliced.map((o) => ({
         net: o.networkId,
@@ -1278,9 +1278,9 @@ function wrapHandler(toolName, ocsMethod, requiredScope, ctx, handler, options)
     try {
       const token2 = await ctx.getUserToken(ctx.props.sub);
       result2 = await handler(args, token2);
-    } catch (err7) {
+    } catch (err8) {
       try {
-        Sentry.captureException(err7, {
+        Sentry.captureException(err8, {
           tags: {
             tool: toolName,
             feature: "mcp",
@@ -1289,8 +1289,8 @@ function wrapHandler(toolName, ocsMethod, requiredScope, ctx, handler, options)
         });
       } catch {
       }
-      const message = err7 instanceof Error ? err7.message : String(err7);
-      const ocsCode = err7 instanceof OcsApiError ? err7.code : void 0;
+      const message = err8 instanceof Error ? err8.message : String(err8);
+      const ocsCode = err8 instanceof OcsApiError ? err8.code : void 0;
       ctx.audit({
         tool_name: toolName,
         ocs_method: ocsMethod,
@@ -3668,8 +3668,8 @@ async function safeCall(env, token2, method, params = {}) {
     const client2 = new OcsClient(env.CARRIER_OCS_BASE_URL, token2);
     const data = await client2.call(method, params);
     return { data, error: null };
-  } catch (err7) {
-    return { data: null, error: err7 instanceof Error ? err7.message : String(err7) };
+  } catch (err8) {
+    return { data: null, error: err8 instanceof Error ? err8.message : String(err8) };
   }
 }
 async function fetchActiveSubscribers(env, token2, accountId, resellerId) {
@@ -5083,7 +5083,7 @@ function registerAllBacklogTools(server2, ctx) {
 }
 
 // src/tools-carrier-ask.ts
-import { z as z13 } from "zod";
+import { z as z14 } from "zod";
 
 // src/tools-ui-agent.ts
 import { z as z4 } from "zod";
@@ -5244,7 +5244,7 @@ var RunBudget = class {
   }
 };
 function createUiAgentRuntime(processEnv = process.env) {
-  const apiKey2 = processEnv.BROWSER_USE_API_KEY;
+  const apiKey3 = processEnv.BROWSER_USE_API_KEY;
   const spend = { runs: 0, costUsd: 0 };
   const audit2 = (row) => {
     const cost = row.doubles?.[1];
@@ -5255,13 +5255,13 @@ function createUiAgentRuntime(processEnv = process.env) {
   };
   return {
     env: {
-      ...apiKey2 ? { apiKey: apiKey2 } : {},
+      ...apiKey3 ? { apiKey: apiKey3 } : {},
       store: createMemoryStore(),
       audit: audit2
     },
     budget: new RunBudget(maxRunsPerProcess(processEnv)),
     spend,
-    configured: Boolean(apiKey2),
+    configured: Boolean(apiKey3),
     dispatchedTaskIds: /* @__PURE__ */ new Set()
   };
 }
@@ -5356,8 +5356,8 @@ function wrapPortalHandler(toolName, gapId, requiredScope, ctx, runtime, optIn,
     }
     try {
       runtime.budget.reserve();
-    } catch (err7) {
-      if (err7 instanceof SpendLimitError) {
+    } catch (err8) {
+      if (err8 instanceof SpendLimitError) {
         ctx.audit({
           tool_name: toolName,
           ocs_method: ocsMethod,
@@ -5369,11 +5369,11 @@ function wrapPortalHandler(toolName, gapId, requiredScope, ctx, runtime, optIn,
           event_type: "ui_agent_dispatch"
         });
         return jsonResult(
-          { error: "run_limit_reached", message: err7.message },
+          { error: "run_limit_reached", message: err8.message },
           true
         );
       }
-      throw err7;
+      throw err8;
     }
     try {
       const result2 = await runUiAgent(
@@ -5436,7 +5436,7 @@ function wrapPortalHandler(toolName, gapId, requiredScope, ctx, runtime, optIn,
         note: "The run completed in-process \u2014 a local CLI has no background runtime, so this call blocked for its duration.",
         portal_password_note: PORTAL_PASSWORD_RUN_NOTE
       });
-    } catch (err7) {
+    } catch (err8) {
       ctx.audit({
         tool_name: toolName,
         ocs_method: ocsMethod,
@@ -5451,7 +5451,7 @@ function wrapPortalHandler(toolName, gapId, requiredScope, ctx, runtime, optIn,
           {
             type: "text",
             text: redact(
-              `Error dispatching the UI agent: ${err7 instanceof Error ? err7.message : String(err7)}`
+              `Error dispatching the UI agent: ${err8 instanceof Error ? err8.message : String(err8)}`
             )
           }
         ]
@@ -5944,13 +5944,13 @@ function registerUiAgentAskTools(server2, ctx, runtime) {
           taskIds = listing.keys.map(
             (k) => k.name.slice(PENDING_ASK_PREFIX.length)
           );
-        } catch (err7) {
+        } catch (err8) {
           return {
             isError: true,
             content: [
               {
                 type: "text",
-                text: `Error listing pending tasks: ${err7 instanceof Error ? err7.message : String(err7)}`
+                text: `Error listing pending tasks: ${err8 instanceof Error ? err8.message : String(err8)}`
               }
             ]
           };
@@ -6827,6 +6827,33 @@ function requireBinding(binding, tool, name, subject) {
   );
 }
 
+// src/stripe-headers.ts
+var STRIPE_API_VERSION = "2025-08-27.basil";
+function isStripeOrgKey(stripeKey) {
+  return stripeKey.startsWith("sk_org_");
+}
+function stripeAccountHeaders(stripeKey, connectedAccountId, platformAccountId) {
+  if (isStripeOrgKey(stripeKey)) {
+    if (connectedAccountId) {
+      return {
+        "Stripe-Context": platformAccountId ? `${platformAccountId}/${connectedAccountId}` : connectedAccountId
+      };
+    }
+    return platformAccountId ? { "Stripe-Context": platformAccountId } : {};
+  }
+  if (connectedAccountId) return { "Stripe-Account": connectedAccountId };
+  return {};
+}
+function buildStripeHeaders(stripeKey, opts = {}) {
+  const headers = {
+    Authorization: `Bearer ${stripeKey}`,
+    "Stripe-Version": STRIPE_API_VERSION,
+    ...stripeAccountHeaders(stripeKey, opts.connectedAccountId, opts.platformAccountId)
+  };
+  if (opts.idempotencyKey) headers["Idempotency-Key"] = opts.idempotencyKey;
+  return headers;
+}
+
 // src/stripe-connect-tools.ts
 async function verifyConfirmToken(env, sub, toolName, token2) {
   requireBinding(
@@ -6861,23 +6888,21 @@ function err2(text) {
   return { isError: true, content: [{ type: "text", text }] };
 }
 async function stripeGet(stripeKey, path, connectedAccountId) {
-  const headers = {
-    Authorization: `Bearer ${stripeKey}`,
-    "Stripe-Version": "2025-08-27.basil"
-  };
-  if (connectedAccountId) headers["Stripe-Account"] = connectedAccountId;
+  const headers = buildStripeHeaders(stripeKey, {
+    connectedAccountId,
+    platformAccountId: process.env.STRIPE_PLATFORM_ACCOUNT_ID
+  });
   const res = await fetch(`https://api.stripe.com${path}`, { headers });
   const data = await res.json();
   return { ok: res.ok, status: res.status, data };
 }
 async function stripePost(stripeKey, path, params, connectedAccountId, idempotencyKey) {
-  const headers = {
-    Authorization: `Bearer ${stripeKey}`,
-    "Stripe-Version": "2025-08-27.basil",
-    "Content-Type": "application/x-www-form-urlencoded"
-  };
-  if (connectedAccountId) headers["Stripe-Account"] = connectedAccountId;
-  if (idempotencyKey) headers["Idempotency-Key"] = idempotencyKey;
+  const headers = buildStripeHeaders(stripeKey, {
+    connectedAccountId,
+    platformAccountId: process.env.STRIPE_PLATFORM_ACCOUNT_ID,
+    idempotencyKey
+  });
+  headers["Content-Type"] = "application/x-www-form-urlencoded";
   const res = await fetch(`https://api.stripe.com${path}`, {
     method: "POST",
     headers,
@@ -6932,7 +6957,7 @@ function registerStripeConnectTools(server2, ctx) {
       const opKvKey = operator_id ? `stripe_account:${operator_id}` : kvKey;
       const start = Date.now();
       try {
-        const stripeKey = env.STRIPE_SECRET_KEY;
+        const stripeKey = env.STRIPE_ORG_SECRET_KEY ?? env.STRIPE_SECRET_KEY;
         if (!stripeKey) return err2("Stripe not configured");
         const accountId = await env.CARRIER_USERS.get(opKvKey);
         if (!accountId) {
@@ -6985,7 +7010,7 @@ function registerStripeConnectTools(server2, ctx) {
       if (denied) return denied;
       const start = Date.now();
       try {
-        const stripeKey = env.STRIPE_SECRET_KEY;
+        const stripeKey = env.STRIPE_ORG_SECRET_KEY ?? env.STRIPE_SECRET_KEY;
         if (!stripeKey) return err2("Stripe not configured");
         const accountId = await getAccountId();
         if (!accountId) return err2("No connected Stripe account found.");
@@ -7022,7 +7047,7 @@ function registerStripeConnectTools(server2, ctx) {
       if (denied) return denied;
       const start = Date.now();
       try {
-        const stripeKey = env.STRIPE_SECRET_KEY;
+        const stripeKey = env.STRIPE_ORG_SECRET_KEY ?? env.STRIPE_SECRET_KEY;
         if (!stripeKey) return err2("Stripe not configured");
         const accountId = await getAccountId();
         if (!accountId) return err2("No connected Stripe account found.");
@@ -7079,7 +7104,7 @@ Call again with confirm_token="${token2}" to execute. Token expires in 5 minutes
         return err2("Invalid or expired confirm_token. Call without token to get a new one.");
       }
       try {
-        const stripeKey = env.STRIPE_SECRET_KEY;
+        const stripeKey = env.STRIPE_ORG_SECRET_KEY ?? env.STRIPE_SECRET_KEY;
         if (!stripeKey) return err2("Stripe not configured");
         const accountId = await getAccountId();
         if (!accountId) return err2("No connected Stripe account found.");
@@ -7126,7 +7151,7 @@ Call again with confirm_token="${token2}" to execute. Token expires in 5 minutes
       if (denied) return denied;
       const start = Date.now();
       try {
-        const stripeKey = env.STRIPE_SECRET_KEY;
+        const stripeKey = env.STRIPE_ORG_SECRET_KEY ?? env.STRIPE_SECRET_KEY;
         if (!stripeKey) return err2("Stripe not configured");
         const accountId = await getAccountId();
         if (!accountId) return err2("No connected Stripe account found.");
@@ -7171,7 +7196,7 @@ Call again with confirm_token="${token2}" to execute. Token expires in 5 minutes
       }
       const start = Date.now();
       try {
-        const stripeKey = env.STRIPE_SECRET_KEY;
+        const stripeKey = env.STRIPE_ORG_SECRET_KEY ?? env.STRIPE_SECRET_KEY;
         if (!stripeKey) return err2("Stripe not configured");
         const params = new URLSearchParams({ limit: String(limit) });
         if (open_only) params.set("open", "true");
@@ -7225,7 +7250,7 @@ Call again with confirm_token="${token2}" to execute. Expires in 5 minutes.`
       const valid = await verifyConfirmToken(env, props2.sub, toolName, confirm_token);
       if (!valid) return err2("Invalid or expired confirm_token.");
       try {
-        const stripeKey = env.STRIPE_SECRET_KEY;
+        const stripeKey = env.STRIPE_ORG_SECRET_KEY ?? env.STRIPE_SECRET_KEY;
         if (!stripeKey) return err2("Stripe not configured");
         const result2 = await stripePost(
           stripeKey,
@@ -7281,7 +7306,7 @@ Expires in 5 minutes.`
       const valid = await verifyConfirmToken(env, props2.sub, toolName, confirm_token);
       if (!valid) return err2("Invalid or expired confirm_token.");
       try {
-        const stripeKey = env.STRIPE_SECRET_KEY;
+        const stripeKey = env.STRIPE_ORG_SECRET_KEY ?? env.STRIPE_SECRET_KEY;
         if (!stripeKey) return err2("Stripe not configured");
         const result2 = await stripePost(
           stripeKey,
@@ -7338,7 +7363,7 @@ Expires in 5 minutes.`
       const valid = await verifyConfirmToken(env, props2.sub, toolName, confirm_token);
       if (!valid) return err2("Invalid or expired confirm_token.");
       try {
-        const stripeKey = env.STRIPE_SECRET_KEY;
+        const stripeKey = env.STRIPE_ORG_SECRET_KEY ?? env.STRIPE_SECRET_KEY;
         if (!stripeKey) return err2("Stripe not configured");
         const result2 = await stripePost(
           stripeKey,
@@ -7601,9 +7626,103 @@ function registerStorefrontDeployTools(server2, props2) {
   );
 }
 
-// src/tools-atlas.ts
+// src/tools-storefront-plan.ts
 import { z as z11 } from "zod";
 
+// src/lib/storefront-plan-update.ts
+function storefrontPlanUpdate(input) {
+  if (input.priceCents === void 0 && input.active === void 0 && input.sortOrder === void 0) {
+    return { ok: false, message: "Send a price, whether the plan is for sale, or a sort order." };
+  }
+  if (input.priceCents !== void 0 && (!Number.isSafeInteger(input.priceCents) || input.priceCents <= 0)) {
+    return { ok: false, message: "Price must be a positive number of minor units." };
+  }
+  if (input.sortOrder !== void 0 && (!Number.isSafeInteger(input.sortOrder) || input.sortOrder < 0)) {
+    return { ok: false, message: "sort_order must be a non-negative integer." };
+  }
+  const body2 = {};
+  if (input.priceCents !== void 0) body2.price_cents = input.priceCents;
+  if (input.active !== void 0) body2.active = input.active;
+  if (input.sortOrder !== void 0) body2.sort_order = input.sortOrder;
+  return { ok: true, body: body2 };
+}
+
+// src/tools-storefront-plan.ts
+var STOREFRONT_PLAN_TOOL_SCOPES = {
+  update_storefront_plan: "write"
+};
+var ok4 = (text) => ({ content: [{ type: "text", text }] });
+var err5 = (text) => ({ isError: true, content: [{ type: "text", text }] });
+var DEFAULT_API = "https://api.carrier.llc";
+function apiOrigin() {
+  return (process.env.CARRIER_API_URL ?? DEFAULT_API).replace(/\/$/, "");
+}
+function apiKey2() {
+  return process.env.CARRIER_API_KEY?.trim() || process.env.CARRIER_ORG_API_KEY?.trim() || null;
+}
+async function patchStorefrontPlan(storefrontId, slug, body2) {
+  const key = apiKey2();
+  if (!key) {
+    return { ok: false, status: 401, body: { error: "not_signed_in", message: "Not signed in." } };
+  }
+  const res = await fetch(
+    `${apiOrigin()}/v1/storefronts/${encodeURIComponent(storefrontId)}/plans/${encodeURIComponent(slug)}`,
+    {
+      method: "PATCH",
+      headers: {
+        Authorization: `Bearer ${key}`,
+        Accept: "application/json",
+        "Content-Type": "application/json"
+      },
+      body: JSON.stringify(body2)
+    }
+  );
+  const raw = await res.text();
+  let parsed = raw;
+  try {
+    parsed = raw.trim() === "" ? {} : JSON.parse(raw);
+  } catch {
+    parsed = { message: raw };
+  }
+  return { ok: res.ok, status: res.status, body: parsed };
+}
+function registerStorefrontPlanTools(server2, props2, call = (path, body2) => {
+  const [storefrontId, slug] = path.split("/");
+  return patchStorefrontPlan(storefrontId ?? "", slug ?? "", body2);
+}) {
+  server2.registerTool(
+    "update_storefront_plan",
+    {
+      title: "Update Storefront Plan",
+      description: "Change the retail price, whether a plan is for sale, or its display order on the caller's own hosted storefront. The plan must already exist. A price of zero or less is refused. A plan on another storefront is not found and is left unchanged. This writes the shop's own price. It does not create or change a Stripe price.",
+      inputSchema: {
+        storefront_id: z11.string().min(1).describe("Id of the hosted storefront"),
+        slug: z11.string().min(1).describe("Plan slug, such as eu-1gb"),
+        price_cents: z11.number().int().positive().optional().describe("Retail price in minor units. Must be greater than zero. Omit to leave the price."),
+        active: z11.boolean().optional().describe("Whether the plan is for sale. Omit to leave it."),
+        sort_order: z11.number().int().nonnegative().optional().describe("Display order, lowest first. Omit to leave it.")
+      },
+      annotations: annotationsFor("update_storefront_plan", "write")
+    },
+    async ({ storefront_id, slug, price_cents, active, sort_order }) => {
+      const denied = denyUnlessScoped(props2, "update_storefront_plan", STOREFRONT_PLAN_TOOL_SCOPES);
+      if (denied) return denied;
+      const update = storefrontPlanUpdate({ priceCents: price_cents, active, sortOrder: sort_order });
+      if (!update.ok) return err5(update.message);
+      try {
+        const result2 = await call(`${storefront_id}/${slug}`, update.body);
+        const text = JSON.stringify(result2.body);
+        return result2.ok ? ok4(text) : err5(text);
+      } catch (e) {
+        return err5(e instanceof Error ? e.message : "plan update failed");
+      }
+    }
+  );
+}
+
+// src/tools-atlas.ts
+import { z as z12 } from "zod";
+
 // src/atlas-public.ts
 var ATLAS_PUBLIC_BASE_URL = "https://atlas.carrier.llc";
 function atlasBaseUrl(env) {
@@ -7634,8 +7753,8 @@ async function atlasPublicGet(baseUrl2, path) {
       headers: { Accept: "application/json" },
       signal: AbortSignal.timeout(8e3)
     });
-  } catch (err7) {
-    const message = err7 instanceof Error ? err7.message : String(err7);
+  } catch (err8) {
+    const message = err8 instanceof Error ? err8.message : String(err8);
     throw new Error(`Atlas request failed: ${message}`);
   }
   const text = await response.text();
@@ -7660,13 +7779,13 @@ var ATLAS_TOOL_SCOPES = {
   get_atlas_network_status: "read"
 };
 var coverageSchema = {
-  country: z11.string().regex(/^[A-Za-z]{2}$/, "country must be a 2-letter ISO code").describe("ISO 3166-1 alpha-2 country code, for example JP or NL"),
-  status: z11.enum(["up", "degraded", "down", "unknown"]).optional().describe("Keep only networks whose latest probe has this status"),
-  technology: z11.enum(["2G", "3G", "4G", "5G"]).optional().describe("Keep only networks of this radio generation")
+  country: z12.string().regex(/^[A-Za-z]{2}$/, "country must be a 2-letter ISO code").describe("ISO 3166-1 alpha-2 country code, for example JP or NL"),
+  status: z12.enum(["up", "degraded", "down", "unknown"]).optional().describe("Keep only networks whose latest probe has this status"),
+  technology: z12.enum(["2G", "3G", "4G", "5G"]).optional().describe("Keep only networks of this radio generation")
 };
 var networkSchema = {
-  mcc: z11.string().regex(/^\d{3}$/, "mcc must be 3 digits").describe("Mobile Country Code"),
-  mnc: z11.string().regex(/^\d{2,3}$/, "mnc must be 2 or 3 digits").describe("Mobile Network Code")
+  mcc: z12.string().regex(/^\d{3}$/, "mcc must be 3 digits").describe("Mobile Country Code"),
+  mnc: z12.string().regex(/^\d{2,3}$/, "mnc must be 2 or 3 digits").describe("Mobile Network Code")
 };
 function jsonResult2(body2) {
   return {
@@ -7721,15 +7840,15 @@ function registerAtlasTools(server2, ctx) {
 }
 
 // src/tools-network-default.ts
-import { z as z12 } from "zod";
+import { z as z13 } from "zod";
 var NETWORK_DEFAULT_TOOL_SCOPES = {
   get_network_default: "read",
   set_network_default: "write",
   plan_network_default: "read"
 };
-var choiceShape = z12.object({
-  mode: z12.enum(NETWORK_DEFAULT_MODES),
-  steeringListId: z12.number().int().positive().optional()
+var choiceShape = z13.object({
+  mode: z13.enum(NETWORK_DEFAULT_MODES),
+  steeringListId: z13.number().int().positive().optional()
 }).describe("`cheapest_available`, `all`, or `custom` with a steeringListId from list_steering_lists");
 function ioFor(ctx, token2) {
   const kv = ctx.env.CARRIER_USERS;
@@ -7784,9 +7903,9 @@ function registerNetworkDefaultTools(server2, ctx) {
       title: "Set Network Default",
       description: "Use this to set the organisation's network default to `cheapest_available`, `all`, or `custom` (a steering list id from `list_steering_lists`, which must exist). This only stores the setting. It changes no SIM, writes nothing to OCS and does not migrate existing customers: it applies to NEW assignments. A single assignment can still override it with `plan_network_default`'s `simOverride`. Params: `mode` (required), `steeringListId` (required when mode is `custom`), `dry_run` (preview only). Do NOT use this to assign a list to one SIM \u2014 use `modify_subscriber_steering_list`.",
       inputSchema: {
-        mode: z12.enum(NETWORK_DEFAULT_MODES).describe("cheapest_available | all | custom"),
-        steeringListId: z12.number().int().positive().optional().describe("Required when mode is custom"),
-        dry_run: z12.boolean().optional().describe("If true, validate and return what would be stored; store nothing")
+        mode: z13.enum(NETWORK_DEFAULT_MODES).describe("cheapest_available | all | custom"),
+        steeringListId: z13.number().int().positive().optional().describe("Required when mode is custom"),
+        dry_run: z13.boolean().optional().describe("If true, validate and return what would be stored; store nothing")
       },
       annotations: { readOnlyHint: false, idempotentHint: true, destructiveHint: false }
     },
@@ -7815,10 +7934,10 @@ function registerNetworkDefaultTools(server2, ctx) {
       title: "Plan Network Default",
       description: "Use this to see which networks a SIM would be given in one or more countries, before anything is assigned. By default that is the cheapest available network per country (lowest data rate above zero, among rules really in force). Precedence: `simOverride`, then `packageOverride`, then the org default, then `cheapest_available`. Read only: `applied` is always false. If the tariff is missing or cannot be compared it falls back to ALL networks and says so in `warnings` and `summary` (`fellBackToAll: true`); never present that as a cheapest choice. The price basis is the wholesale data rate per MB, not the end price. Creating a steering list has no OCS REST method, so when no existing list matches the result is `needs_list`, not a created list. Params: `countries` (ISO-3166 alpha-2 codes, required), `simOverride`, `packageOverride`, `resellerId` (optional).",
       inputSchema: {
-        countries: z12.array(z12.string().length(2)).min(1).describe('ISO-3166 alpha-2 codes, e.g. ["CA"]'),
+        countries: z13.array(z13.string().length(2)).min(1).describe('ISO-3166 alpha-2 codes, e.g. ["CA"]'),
         simOverride: choiceShape.optional(),
         packageOverride: choiceShape.optional(),
-        resellerId: z12.number().int().positive().optional().describe("Omit to use the token owner's reseller")
+        resellerId: z13.number().int().positive().optional().describe("Omit to use the token owner's reseller")
       },
       annotations: { readOnlyHint: true }
     },
@@ -9206,6 +9325,7 @@ var ALL_TOOL_SCOPES = Object.freeze({
   ...STOREFRONT_LOGO_TOOL_SCOPES,
   // Storefront deploy tools exist only in this package, not in the Worker.
   ...STOREFRONT_DEPLOY_TOOL_SCOPES,
+  ...STOREFRONT_PLAN_TOOL_SCOPES,
   ...ATLAS_TOOL_SCOPES,
   ...NETWORK_DEFAULT_TOOL_SCOPES
 });
@@ -9768,16 +9888,16 @@ Pre-resolved context: ${JSON.stringify(definedContext)}` : "";
         ...onUsage ? { onUsage } : {}
       }
     );
-  } catch (err7) {
-    if (err7 instanceof BedrockRateLimitError) {
-      const parsedSeconds = err7.retryAfter ? parseInt(err7.retryAfter, 10) : 60;
+  } catch (err8) {
+    if (err8 instanceof BedrockRateLimitError) {
+      const parsedSeconds = err8.retryAfter ? parseInt(err8.retryAfter, 10) : 60;
       return {
         match: "rate_limited",
         retry_after_seconds: Number.isFinite(parsedSeconds) ? parsedSeconds : 60,
         suggestion: "Bedrock rate limit reached. Please retry after the indicated delay."
       };
     }
-    throw err7;
+    throw err8;
   }
   if (!toolCall) {
     return {
@@ -9882,15 +10002,15 @@ function registerAllCarrierAskTools(server2, ctx) {
       title: "Natural Language Carrier Tool Router",
       description: "Use this when you want to perform a carrier operation but don't know which specific tool to call. Describe your intent in plain language and carrier_ask will identify the correct tool(s) and suggest the required parameters. For simple read intents, it executes directly and returns results. For destructive operations it returns a confirm_token that you must pass in a second call. Params: `intent` (string \u2014 natural language description of what you want to do), `context` (optional: iccid, account_id, reseller_id if already known). Returns: RouteResult \u2014 confirmed | pending_confirm | ambiguous | none. Do NOT use this when you know the right tool \u2014 direct calls are faster and cheaper.",
       inputSchema: {
-        intent: z13.string().min(3).describe(
+        intent: z14.string().min(3).describe(
           "Natural-language description of the operation to perform (e.g. 'suspend ICCID 89316 until next month', 'show fleet health', 'assign Europe 5GB package to subscriber 89316...')"
         ),
-        context: z13.object({
-          iccid: z13.string().optional().describe("Subscriber ICCID if already known"),
-          account_id: z13.number().optional().describe("Account ID if already known"),
-          reseller_id: z13.number().optional().describe("Reseller ID if already known")
+        context: z14.object({
+          iccid: z14.string().optional().describe("Subscriber ICCID if already known"),
+          account_id: z14.number().optional().describe("Account ID if already known"),
+          reseller_id: z14.number().optional().describe("Reseller ID if already known")
         }).optional().describe("Optional pre-resolved context to improve routing accuracy"),
-        confirm_token: z13.string().optional().describe(
+        confirm_token: z14.string().optional().describe(
           "One-time token from a previous carrier_ask call with confirm_required=true. Providing this executes the previously staged destructive operation."
         )
       }
@@ -9991,8 +10111,8 @@ function registerAllCarrierAskTools(server2, ctx) {
               modelRan = true;
             }
           });
-        } catch (err7) {
-          if (err7 instanceof AskRouterNotConfiguredError) {
+        } catch (err8) {
+          if (err8 instanceof AskRouterNotConfiguredError) {
             writeCarrierAskAudit(ctx.env, {
               intent_hash: intentHash,
               match: "error",
@@ -10012,8 +10132,8 @@ function registerAllCarrierAskTools(server2, ctx) {
                   type: "text",
                   text: JSON.stringify({
                     error: "router_not_configured",
-                    missing: err7.missing,
-                    message: err7.message
+                    missing: err8.missing,
+                    message: err8.message
                   })
                 }
               ],
@@ -10043,7 +10163,7 @@ function registerAllCarrierAskTools(server2, ctx) {
                 type: "text",
                 text: JSON.stringify({
                   error: "routing_error",
-                  message: err7 instanceof Error ? err7.message : "An unexpected error occurred during routing."
+                  message: err8 instanceof Error ? err8.message : "An unexpected error occurred during routing."
                 })
               }
             ],
@@ -10094,7 +10214,7 @@ function registerAllCarrierAskTools(server2, ctx) {
       title: "Describe a Carrier Tool",
       description: "Get full documentation for any registered Carrier MCP tool: description, parameters, 2-3 example invocations, required scope, destructive flag, and guidance. Params: `tool_name` (exact MCP tool name, e.g. 'assign_package'). Returns: structured tool metadata. Does NOT execute the tool.",
       inputSchema: {
-        tool_name: z13.string().describe("The exact MCP tool name to describe (e.g. 'assign_package', 'hlr_set_bitrate')")
+        tool_name: z14.string().describe("The exact MCP tool name to describe (e.g. 'assign_package', 'hlr_set_bitrate')")
       }
     },
     wrapHandler(
@@ -10187,7 +10307,7 @@ function buildExamples(toolName) {
 }
 
 // src/list-recent-ocs-events.ts
-import { z as z14 } from "zod";
+import { z as z15 } from "zod";
 
 // src/ocs-scoping.ts
 function managedOwnAccountId(auth) {
@@ -10220,10 +10340,10 @@ async function assertManagedIccidAccess(baseUrl2, auth, iccid) {
       return { ok: false, error: "Subscriber not found" };
     }
     return { ok: true };
-  } catch (err7) {
+  } catch (err8) {
     return {
       ok: false,
-      error: err7 instanceof Error ? err7.message : String(err7)
+      error: err8 instanceof Error ? err8.message : String(err8)
     };
   }
 }
@@ -10355,10 +10475,10 @@ var ALLOWED_EVENT_TYPES = [
   "usage.anomaly"
 ];
 var listRecentOcsEventsSchema = {
-  iccid: z14.string().regex(/^\d{19,20}$/).describe("ICCID, 19 or 20 digits, ITU-T E.118 format"),
-  limit: z14.number().int().min(1).max(50).default(20).describe("Max events to return, newest first"),
-  event_types: z14.array(z14.enum(ALLOWED_EVENT_TYPES)).optional().describe("Filter to specific event types"),
-  since: z14.string().datetime().optional().describe("ISO-8601 timestamp; only events after this point")
+  iccid: z15.string().regex(/^\d{19,20}$/).describe("ICCID, 19 or 20 digits, ITU-T E.118 format"),
+  limit: z15.number().int().min(1).max(50).default(20).describe("Max events to return, newest first"),
+  event_types: z15.array(z15.enum(ALLOWED_EVENT_TYPES)).optional().describe("Filter to specific event types"),
+  since: z15.string().datetime().optional().describe("ISO-8601 timestamp; only events after this point")
 };
 async function listRecentOcsEvents2(iccid, limit, eventTypes, since, kv) {
   return listRecentOcsEvents(iccid, limit, eventTypes, since, kv);
@@ -10409,8 +10529,8 @@ function registerListRecentOcsEventsTool(server2, ctx) {
         return {
           content: [{ type: "text", text: JSON.stringify(result2, null, 2) }]
         };
-      } catch (err7) {
-        const message = err7 instanceof Error ? err7.message : String(err7);
+      } catch (err8) {
+        const message = err8 instanceof Error ? err8.message : String(err8);
         return {
           isError: true,
           content: [{ type: "text", text: `Error reading OCS event buffer: ${message}` }]
@@ -10421,7 +10541,7 @@ function registerListRecentOcsEventsTool(server2, ctx) {
 }
 
 // src/tools-rate-governor.ts
-import { z as z15 } from "zod";
+import { z as z16 } from "zod";
 var MONITORED_ENDPOINTS = [
   "subscriberNetworkEventsOverPeriod",
   // 30/min
@@ -10453,7 +10573,7 @@ function registerRateLimitStatusTool(server2, ctx) {
       title: "API Rate-Limit Governor Status",
       description: "Inspect Bridge4IP OCS rate-limit governor state \u2014 bucket fill levels, per-endpoint limits, and 80% alert thresholds. Use this to answer: 'are we rate limited', 'check ocs quota', 'how full is the rate limit bucket', 'rate limit status'. Params: `endpoint` (optional \u2014 OCS camelCase method name to inspect a single bucket, e.g. 'subscriberUsageOverPeriod'; omit for all monitored endpoints). Returns: per-endpoint { limit_per_min, batch_cap_per_min, calls_in_window, batch_calls_in_window, utilisation_pct, alert (true when \u226580% of limit) }. Note: counts come from the in-process sliding-window log (same key as OCS calls: API token + endpoint) \u2014 they reset when the Worker isolate recycles. Use as a relative signal, not an exact counter. Do NOT use this to adjust limits \u2014 limits are set by Bridge4IP contract and cannot be changed via MCP.",
       inputSchema: {
-        endpoint: z15.string().optional().describe(
+        endpoint: z16.string().optional().describe(
           "OCS method name in camelCase (e.g. 'subscriberUsageOverPeriod'). Omit to return status for all monitored endpoints."
         )
       },
@@ -10509,11 +10629,11 @@ function registerRateLimitStatusTool(server2, ctx) {
 }
 
 // src/tools-depletion-events.ts
-import { z as z16 } from "zod";
-function ok4(payload) {
+import { z as z17 } from "zod";
+function ok5(payload) {
   return { content: [{ type: "text", text: JSON.stringify(payload, null, 2) }] };
 }
-function err5(message) {
+function err6(message) {
   return { isError: true, content: [{ type: "text", text: message }] };
 }
 async function ownershipToken(ctx) {
@@ -10537,10 +10657,10 @@ function registerDepletionEventsTool(server2, ctx) {
       title: "Subscriber Bundle Depletion Events",
       description: "Look up bundle depletion events for a subscriber (or list recent fleet-wide depletions). Returns the most recent bundle.depleted event stored when the prepaid usage webhook received a last_slice notification. Events are retained for 7 days. Use subscriberId to check a specific subscriber, or omit to list the 20 most recent fleet-wide depletions. Requires 'read' scope.",
       inputSchema: {
-        subscriberId: z16.string().optional().describe(
+        subscriberId: z17.string().optional().describe(
           "OCS subscriber ID to look up. Omit to list the 20 most recent fleet-wide depletions."
         ),
-        since: z16.string().optional().describe(
+        since: z17.string().optional().describe(
           "ISO-8601 timestamp \u2014 only return events at or after this time (for single-subscriber lookup)."
         )
       },
@@ -10548,13 +10668,13 @@ function registerDepletionEventsTool(server2, ctx) {
     },
     async (args) => {
       if (!ctx.props.scope.includes("read")) {
-        return err5(
+        return err6(
           `Scope denied: subscriber_depletion_events requires 'read' scope. Your token has: [${ctx.props.scope.join(", ")}].`
         );
       }
       const kv = ctx.env.RATE_LIMIT_KV;
       if (!kv) {
-        return err5(
+        return err6(
           "subscriber_depletion_events cannot answer here. Depletion events are written by the Carrier webhook receiver as they arrive from the network and kept for 7 days in hosted storage; a local stdio server receives no webhooks and has nowhere to keep them, so there is no history on this machine to read. There is nothing to set in your environment. Use the hosted MCP at https://mcp.carrier.llc/mcp for this tool. To see a subscriber's current bundle state instead of its depletion history, `get_subscriber` and `list_subscriber_packages` query OCS directly and work here."
         );
       }
@@ -10563,14 +10683,14 @@ function registerDepletionEventsTool(server2, ctx) {
       try {
         scopeToken = await ownershipToken(ctx);
       } catch (e) {
-        return err5(
+        return err6(
           `Could not resolve the OCS credential needed to scope this read: ${e instanceof Error ? e.message : String(e)}`
         );
       }
       if (subscriberId) {
         const raw = await kv.get(`bundle-depleted:${subscriberId}`, "text");
         if (!raw) {
-          return ok4({
+          return ok5({
             subscriber_id: subscriberId,
             depleted: false,
             event: null,
@@ -10581,7 +10701,7 @@ function registerDepletionEventsTool(server2, ctx) {
         try {
           event = JSON.parse(raw);
         } catch {
-          return ok4({
+          return ok5({
             subscriber_id: subscriberId,
             depleted: false,
             event: null,
@@ -10589,7 +10709,7 @@ function registerDepletionEventsTool(server2, ctx) {
           });
         }
         if (!await ownsEvent(ctx, scopeToken, event.iccid)) {
-          return ok4({
+          return ok5({
             subscriber_id: subscriberId,
             depleted: false,
             event: null,
@@ -10597,14 +10717,14 @@ function registerDepletionEventsTool(server2, ctx) {
           });
         }
         if (since && event.depletedAt < since) {
-          return ok4({
+          return ok5({
             subscriber_id: subscriberId,
             depleted: false,
             event: null,
             note: `No bundle depletion after ${since}.`
           });
         }
-        return ok4({
+        return ok5({
           subscriber_id: subscriberId,
           depleted: true,
           event: {
@@ -10618,7 +10738,7 @@ function registerDepletionEventsTool(server2, ctx) {
       }
       const listResult = await kv.list({ prefix: "bundle-depleted:", limit: 20 });
       if (listResult.keys.length === 0) {
-        return ok4({
+        return ok5({
           depletions: [],
           total: 0,
           note: "No bundle depletion events in the last 7 days."
@@ -10645,7 +10765,7 @@ function registerDepletionEventsTool(server2, ctx) {
         })
       );
       events.sort((a, b) => b.depleted_at.localeCompare(a.depleted_at));
-      return ok4({
+      return ok5({
         depletions: events,
         total: events.length,
         list_truncated: !listResult.list_complete
@@ -10655,7 +10775,7 @@ function registerDepletionEventsTool(server2, ctx) {
 }
 
 // src/tools-country-history.ts
-import { z as z17 } from "zod";
+import { z as z18 } from "zod";
 function isoDate(now, daysAgo = 0) {
   const d = new Date(now.getTime() - daysAgo * 864e5);
   return d.toISOString().slice(0, 10);
@@ -10678,10 +10798,10 @@ function registerCountryHistoryTool(server2, ctx) {
       title: "Subscriber Country History",
       description: "Return cross-border movement history for a subscriber, reconstructed from OCS Gy charging events. Reads `gyAnswer.events` from `subscriberNetworkEventsOverPeriod` \u2014 every Gy record carries its own country, operator and MCC \u2014 and collapses consecutive same-country records into stays with first-seen and last-seen timestamps. This needs no webhook: it works with Relay LU and Relay Gy off. Relay `country.entered` events from the 24h ring-buffer are merged in as a supplement when present. Use this to answer: 'where has subscriber X traveled', 'show country history for ICCID', 'border crossings for this SIM'. Params: `subscriberId` (ICCID, 19\u201320 digits), `startDate`/`endDate` (YYYY-MM-DD, max 7 days apart, default the last 7 days), `limit` (1\u201350, default 20, newest first). Returns: `stays` ({ country, country_name, first_seen, last_seen, operators, mccs, event_count, used_bytes }), `transitions` ({ from, to, at }), and `country_events` in the legacy flat shape. `used_bytes` already handles the string-typed `usedUnits` and its 'N/A' values. Do NOT use this for raw per-session records \u2014 use `subscriber_network_events` for those.",
       inputSchema: {
-        subscriberId: z17.string().regex(/^\d{19,20}$/, "subscriberId must be a 19\u201320 digit ICCID").describe("Subscriber ICCID (19\u201320 digits, ITU-T E.118)"),
-        startDate: z17.string().regex(/^\d{4}-\d{2}-\d{2}$/, "startDate must be YYYY-MM-DD").optional().describe("Start of the period, YYYY-MM-DD inclusive (default: 7 days ago)"),
-        endDate: z17.string().regex(/^\d{4}-\d{2}-\d{2}$/, "endDate must be YYYY-MM-DD").optional().describe("End of the period, YYYY-MM-DD inclusive, max 7 days from start (default: today)"),
-        limit: z17.number().int().min(1).max(50).default(20).optional().describe("Maximum number of country_events to return, newest first (default 20, max 50)")
+        subscriberId: z18.string().regex(/^\d{19,20}$/, "subscriberId must be a 19\u201320 digit ICCID").describe("Subscriber ICCID (19\u201320 digits, ITU-T E.118)"),
+        startDate: z18.string().regex(/^\d{4}-\d{2}-\d{2}$/, "startDate must be YYYY-MM-DD").optional().describe("Start of the period, YYYY-MM-DD inclusive (default: 7 days ago)"),
+        endDate: z18.string().regex(/^\d{4}-\d{2}-\d{2}$/, "endDate must be YYYY-MM-DD").optional().describe("End of the period, YYYY-MM-DD inclusive, max 7 days from start (default: today)"),
+        limit: z18.number().int().min(1).max(50).default(20).optional().describe("Maximum number of country_events to return, newest first (default 20, max 50)")
       },
       annotations: { readOnlyHint: true, idempotentHint: true }
     },
@@ -10712,8 +10832,8 @@ function registerCountryHistoryTool(server2, ctx) {
             networkEventsOverPeriodParams(subscriberId, start, end)
           );
           gy = gyCountryHistoryFromResponse(events);
-        } catch (err7) {
-          gyError = err7 instanceof Error ? err7.message : String(err7);
+        } catch (err8) {
+          gyError = err8 instanceof Error ? err8.message : String(err8);
         }
         let syntheticRingIccid = null;
         const msisdnRaw = msisdnFieldFromSubscriberPayload(subscriberPayload);
@@ -10789,7 +10909,7 @@ function registerCountryHistoryTool(server2, ctx) {
 }
 
 // src/apps/fleet-health-app.ts
-import { z as z18 } from "zod";
+import { z as z19 } from "zod";
 import {
   registerAppTool,
   registerAppResource,
@@ -10840,8 +10960,8 @@ var FLEET_APP_RESOURCE_URI = "ui://fleet-health-dashboard";
 async function safeCall2(client2, method, params) {
   try {
     return { data: await client2.call(method, params), error: null };
-  } catch (err7) {
-    return { data: null, error: err7 instanceof Error ? err7.message : String(err7) };
+  } catch (err8) {
+    return { data: null, error: err8 instanceof Error ? err8.message : String(err8) };
   }
 }
 async function loadFleet(ctx, accountId) {
@@ -10873,7 +10993,7 @@ function registerFleetHealthApp(server2, ctx) {
       let html;
       try {
         html = renderHtml(fleetScreen(await loadFleet(ctx)));
-      } catch (err7) {
+      } catch (err8) {
         html = renderHtml({
           id: "fleet-health",
           title: "Fleet health",
@@ -10881,7 +11001,7 @@ function registerFleetHealthApp(server2, ctx) {
             {
               kind: "note",
               tone: "critical",
-              text: `Could not load fleet data: ${err7 instanceof Error ? err7.message : String(err7)}`
+              text: `Could not load fleet data: ${err8 instanceof Error ? err8.message : String(err8)}`
             }
           ]
         });
@@ -10905,7 +11025,7 @@ function registerFleetHealthApp(server2, ctx) {
       title: "Fleet Health Dashboard",
       description: "Draw the fleet overview as an interactive panel: eSIM status, per-account breakdown and low-balance alerts. Returns structuredContent for the panel, so it only helps a client that can render MCP UI resources. Do NOT use this when the answer has to be readable text, or in any headless or scripted context \u2014 `fleet_health` returns the same data as prose.",
       inputSchema: {
-        accountId: z18.number().optional().describe("Filter to a specific account (omit for all)")
+        accountId: z19.number().optional().describe("Filter to a specific account (omit for all)")
       },
       annotations: { readOnlyHint: true },
       _meta: {
@@ -10948,7 +11068,7 @@ function registerFleetHealthApp(server2, ctx) {
 }
 
 // src/apps/provisioning-wizard.ts
-import { z as z19 } from "zod";
+import { z as z20 } from "zod";
 import {
   registerAppTool as registerAppTool2,
   registerAppResource as registerAppResource2,
@@ -11001,10 +11121,10 @@ async function deleteWizardSession(env, sub, wizardId) {
 async function safeCallWithToken(client2, _token, method, params = {}) {
   try {
     return { data: await client2.call(method, params), error: null };
-  } catch (err7) {
+  } catch (err8) {
     return {
       data: null,
-      error: err7 instanceof Error ? err7.message : String(err7)
+      error: err8 instanceof Error ? err8.message : String(err8)
     };
   }
 }
@@ -11053,10 +11173,10 @@ function registerProvisioningWizard(server2, ctx) {
       title: "eSIM Provisioning Wizard",
       description: "Interactive 3-step wizard to provision an eSIM: select subscriber, choose package template, preview (dry_run) and confirm execution.",
       inputSchema: {
-        step: z19.enum(["init", "select-package", "preview", "confirm"]).describe("Current wizard step"),
-        wizardId: z19.string().optional().describe("Wizard session ID (absent on init)"),
-        subscriber_iccid: z19.string().optional().describe("Subscriber ICCID (required for select-package)"),
-        package_template_id: z19.number().optional().describe("Package template ID (required for preview)")
+        step: z20.enum(["init", "select-package", "preview", "confirm"]).describe("Current wizard step"),
+        wizardId: z20.string().optional().describe("Wizard session ID (absent on init)"),
+        subscriber_iccid: z20.string().optional().describe("Subscriber ICCID (required for select-package)"),
+        package_template_id: z20.number().optional().describe("Package template ID (required for preview)")
       },
       _meta: {
         ui: {
@@ -11326,7 +11446,7 @@ function registerProvisioningWizard(server2, ctx) {
 }
 
 // src/apps/balance-topup.ts
-import { z as z20 } from "zod";
+import { z as z21 } from "zod";
 import {
   registerAppTool as registerAppTool3,
   registerAppResource as registerAppResource3,
@@ -11335,10 +11455,10 @@ import {
 async function safeCallWithToken2(client2, _token, method, params = {}) {
   try {
     return { data: await client2.call(method, params), error: null };
-  } catch (err7) {
+  } catch (err8) {
     return {
       data: null,
-      error: err7 instanceof Error ? err7.message : String(err7)
+      error: err8 instanceof Error ? err8.message : String(err8)
     };
   }
 }
@@ -11379,9 +11499,9 @@ function registerBalanceTopupApp(server2, ctx) {
       title: "Balance Top-up Form",
       description: "Adjust the OCS reseller-account balance behind one subscriber, through a form panel the user can review before it commits. Defaults to preview: a call that omits `preview` returns a projection and writes nothing. Only `preview: false` performs the OCS write. Params: `iccid` (subscriber identifier used to find the account), `delta` (amount to add when positive, deduct when negative), `preview` (boolean, default true). Requires `admin` scope plus recent MFA, and a client that can render UI panels. Do NOT use this in a headless or scripted context \u2014 call `modify_account_balance` directly, which takes an `accountId` and needs no panel. Do NOT use this for a subscriber's own balance \u2014 the `iccid` here only locates the account; per-subscriber money is `modify_subscriber_balance`. Do NOT use this for the Carrier prepaid wallet or MCP credits \u2014 see `wallet_topup_checkout` and `credit_balance`.",
       inputSchema: {
-        iccid: z20.string().describe("The subscriber ICCID for the account lookup"),
-        delta: z20.number().describe("Amount to add (positive) or deduct (negative) from the account balance"),
-        preview: z20.boolean().default(true).describe("If true, return preview without writing. If false, execute the balance change.")
+        iccid: z21.string().describe("The subscriber ICCID for the account lookup"),
+        delta: z21.number().describe("Amount to add (positive) or deduct (negative) from the account balance"),
+        preview: z21.boolean().default(true).describe("If true, return preview without writing. If false, execute the balance change.")
       },
       annotations: { destructiveHint: true },
       _meta: {
@@ -11464,7 +11584,7 @@ function registerAllApps(server2, ctx) {
 }
 
 // src/prompts.ts
-import { z as z21 } from "zod";
+import { z as z22 } from "zod";
 function registerAllPrompts(server2) {
   server2.registerPrompt(
     "fleet_health_report",
@@ -11500,7 +11620,7 @@ Format as a structured report with sections, tables, and actionable recommendati
     {
       title: "Subscriber Deep Dive",
       description: "Comprehensive analysis of a single subscriber: profile, packages, usage patterns, location history, recommendations.",
-      argsSchema: { iccid: z21.string().describe("The subscriber ICCID to analyse") }
+      argsSchema: { iccid: z22.string().describe("The subscriber ICCID to analyse") }
     },
     async ({ iccid }) => ({
       messages: [
@@ -11599,7 +11719,7 @@ Analyze and present:
     {
       title: "Bulk Operations Planner",
       description: "Plan bulk operations safely: mass package assignments, account migrations, balance adjustments, or status changes.",
-      argsSchema: { operation: z21.string().describe("Describe the bulk operation you want to perform") }
+      argsSchema: { operation: z22.string().describe("Describe the bulk operation you want to perform") }
     },
     async ({ operation }) => ({
       messages: [
@@ -11632,7 +11752,7 @@ NEVER execute destructive operations without confirmation.`
 }
 
 // src/tools-pricing.ts
-import { z as z22 } from "zod";
+import { z as z23 } from "zod";
 function registerAllPricingTools(server2, ctx) {
   const allTools = [...PRICING_TOOLS, ...PROJECTS_TOOLS];
   for (const tool of allTools) {
@@ -11714,8 +11834,8 @@ function buildPricingHandler(tool, ctx) {
           }
         ]
       };
-    } catch (err7) {
-      const message = err7 instanceof Error ? err7.message : String(err7);
+    } catch (err8) {
+      const message = err8 instanceof Error ? err8.message : String(err8);
       ctx.audit({
         tool_name: tool.name,
         ocs_method: "billing",
@@ -11739,19 +11859,19 @@ function buildZodSchema(schema) {
   for (const [key, prop] of Object.entries(properties)) {
     let field;
     if (prop.enum) {
-      field = z22.enum(prop.enum);
+      field = z23.enum(prop.enum);
     } else if (prop.type === "number") {
-      field = z22.number();
+      field = z23.number();
     } else if (prop.type === "boolean") {
-      field = z22.boolean();
+      field = z23.boolean();
     } else if (prop.type === "array") {
       if (prop.items?.type === "number") {
-        field = z22.array(z22.number());
+        field = z23.array(z23.number());
       } else {
-        field = z22.array(z22.string());
+        field = z23.array(z23.string());
       }
     } else {
-      field = z22.string();
+      field = z23.string();
     }
     const required = schema.required ?? [];
     if (!required.includes(key)) {
@@ -11766,7 +11886,7 @@ function buildZodSchema(schema) {
 }
 
 // src/tools-greenzone.ts
-import { z as z23 } from "zod";
+import { z as z24 } from "zod";
 
 // src/greenzone-whitelist.ts
 var STATE_KEY = "greenzone:state";
@@ -12043,10 +12163,10 @@ function resolvePortalBaseUrl(env) {
 function getGreenzoneKv(env) {
   return env.GREENZONE_STATE_KV ?? null;
 }
-function ok5(payload) {
+function ok6(payload) {
   return { content: [{ type: "text", text: JSON.stringify(payload, null, 2) }] };
 }
-function err6(message) {
+function err7(message) {
   return { isError: true, content: [{ type: "text", text: message }] };
 }
 var KAPTURE_UNAVAILABLE_MSG = "Execute each Kapture step using mcp__kapture__* tools in sequence. Ensure the Kapture extension is active in Chrome before invoking.";
@@ -12057,21 +12177,21 @@ function registerGreenzoneTools(server2, ctx) {
       title: "Greenzone Whitelist \u2014 Add",
       description: "Add a hostname and/or IP address to the Bridge4IP Greenzone whitelist. The Greenzone whitelist controls which hosts/IPs are exempt from data charging after a subscriber's bundle is depleted. This operates via browser automation (Kapture) against the OCS portal \u2014 no REST API exists for this surface. Provide `host` (e.g. 'example.com') and/or `ip` (e.g. '203.0.113.0/24'). At least one of host or ip must be provided. Returns Kapture step sequence for Claude Code to execute. Requires 'write' scope and Kapture running in Sam's Chrome.",
       inputSchema: {
-        host: z23.string().optional().describe("Hostname to whitelist (e.g. 'example.com')"),
-        ip: z23.string().optional().describe("IP address or CIDR to whitelist (e.g. '203.0.113.0/24')"),
-        dry_run: z23.boolean().optional().describe("If true, return the Kapture steps without executing portal automation")
+        host: z24.string().optional().describe("Hostname to whitelist (e.g. 'example.com')"),
+        ip: z24.string().optional().describe("IP address or CIDR to whitelist (e.g. '203.0.113.0/24')"),
+        dry_run: z24.boolean().optional().describe("If true, return the Kapture steps without executing portal automation")
       },
       annotations: { destructiveHint: true }
     },
     async (args) => {
       if (!ctx.props.scope.includes("write")) {
-        return err6(
+        return err7(
           `Scope denied: greenzone_whitelist_add requires 'write' scope. Your token has: [${ctx.props.scope.join(", ")}].`
         );
       }
       const { host, ip, dry_run } = args;
       if (!host && !ip) {
-        return err6("At least one of 'host' or 'ip' must be provided.");
+        return err7("At least one of 'host' or 'ip' must be provided.");
       }
       const portalBaseUrl = resolvePortalBaseUrl(ctx.env);
       const steps = [
@@ -12079,7 +12199,7 @@ function registerGreenzoneTools(server2, ctx) {
         ...ip ? buildAddIpSteps(portalBaseUrl, ip) : []
       ];
       if (dry_run) {
-        return ok5({
+        return ok6({
           dry_run: true,
           message: "Would execute the following Kapture steps against the OCS portal:",
           kapture_steps: steps,
@@ -12102,7 +12222,7 @@ function registerGreenzoneTools(server2, ctx) {
       } else {
         kvWarning = "GREENZONE_STATE_KV not bound in stdio mode \u2014 state not persisted.";
       }
-      return ok5({
+      return ok6({
         requires_kapture: true,
         message: "Execute the Kapture steps below to apply the change in the OCS portal. " + KAPTURE_UNAVAILABLE_MSG,
         kapture_steps: steps,
@@ -12118,21 +12238,21 @@ function registerGreenzoneTools(server2, ctx) {
       title: "Greenzone Whitelist \u2014 Remove",
       description: "Remove a hostname and/or IP address from the Bridge4IP Greenzone whitelist. This operates via browser automation (Kapture) against the OCS portal. Provide `host` and/or `ip` to remove \u2014 at least one required. Returns Kapture step sequence for Claude Code to execute. Requires 'write' scope and Kapture running in Sam's Chrome.",
       inputSchema: {
-        host: z23.string().optional().describe("Hostname to remove from whitelist"),
-        ip: z23.string().optional().describe("IP address or CIDR to remove from whitelist"),
-        dry_run: z23.boolean().optional().describe("If true, return the Kapture steps without executing portal automation")
+        host: z24.string().optional().describe("Hostname to remove from whitelist"),
+        ip: z24.string().optional().describe("IP address or CIDR to remove from whitelist"),
+        dry_run: z24.boolean().optional().describe("If true, return the Kapture steps without executing portal automation")
       },
       annotations: { destructiveHint: true }
     },
     async (args) => {
       if (!ctx.props.scope.includes("write")) {
-        return err6(
+        return err7(
           `Scope denied: greenzone_whitelist_remove requires 'write' scope. Your token has: [${ctx.props.scope.join(", ")}].`
         );
       }
       const { host, ip, dry_run } = args;
       if (!host && !ip) {
-        return err6("At least one of 'host' or 'ip' must be provided.");
+        return err7("At least one of 'host' or 'ip' must be provided.");
       }
       const portalBaseUrl = resolvePortalBaseUrl(ctx.env);
       const steps = [
@@ -12140,7 +12260,7 @@ function registerGreenzoneTools(server2, ctx) {
         ...ip ? buildRemoveIpSteps(portalBaseUrl, ip) : []
       ];
       if (dry_run) {
-        return ok5({
+        return ok6({
           dry_run: true,
           message: "Would execute the following Kapture steps to remove from OCS portal:",
           kapture_steps: steps,
@@ -12163,7 +12283,7 @@ function registerGreenzoneTools(server2, ctx) {
       } else {
         kvWarning = "GREENZONE_STATE_KV not bound in stdio mode \u2014 state not persisted.";
       }
-      return ok5({
+      return ok6({
         requires_kapture: true,
         message: "Execute the Kapture steps below to apply the removal in the OCS portal. " + KAPTURE_UNAVAILABLE_MSG,
         kapture_steps: steps,
@@ -12179,7 +12299,7 @@ function registerGreenzoneTools(server2, ctx) {
       title: "Greenzone Whitelist \u2014 List",
       description: "List current Greenzone whitelist entries from the KV cache. Returns all whitelisted hosts and IPs, when the state was last synced, and whether the last hourly reconciliation detected drift from the portal. This is a fast read from KV \u2014 no browser automation required. Use `from_portal: true` to trigger a live portal read via Kapture instead of KV. Requires 'read' scope.",
       inputSchema: {
-        from_portal: z23.boolean().optional().describe(
+        from_portal: z24.boolean().optional().describe(
           "When true, return Kapture steps to read live portal state instead of KV cache"
         )
       },
@@ -12187,14 +12307,14 @@ function registerGreenzoneTools(server2, ctx) {
     },
     async (args) => {
       if (!ctx.props.scope.includes("read")) {
-        return err6(
+        return err7(
           `Scope denied: greenzone_whitelist_list requires 'read' scope. Your token has: [${ctx.props.scope.join(", ")}].`
         );
       }
       const { from_portal } = args;
       if (from_portal) {
         const portalBaseUrl = resolvePortalBaseUrl(ctx.env);
-        return ok5({
+        return ok6({
           requires_kapture: true,
           message: "Execute the Kapture steps below to read live Greenzone whitelist state from the OCS portal.",
           kapture_steps: buildListSteps(portalBaseUrl),
@@ -12203,7 +12323,7 @@ function registerGreenzoneTools(server2, ctx) {
       }
       const kv = getGreenzoneKv(ctx.env);
       if (!kv) {
-        return ok5({
+        return ok6({
           source: "kv_cache",
           hosts: [],
           ips: [],
@@ -12215,7 +12335,7 @@ function registerGreenzoneTools(server2, ctx) {
       }
       try {
         const state = await readState(kv);
-        return ok5({
+        return ok6({
           source: "kv_cache",
           hosts: state.hosts,
           ips: state.ips,
@@ -12224,14 +12344,14 @@ function registerGreenzoneTools(server2, ctx) {
           reconcile_drift: state.reconcile_drift ?? false
         });
       } catch (e) {
-        return err6(`Failed to read Greenzone state from KV: ${e instanceof Error ? e.message : String(e)}`);
+        return err7(`Failed to read Greenzone state from KV: ${e instanceof Error ? e.message : String(e)}`);
       }
     }
   );
 }
 
 // src/tools-ui-agent-generic.ts
-import { z as z24 } from "zod";
+import { z as z25 } from "zod";
 var COST_PER_STEP_USD = 0.014;
 var SESSION_OVERHEAD_USD = 5e-3;
 function estimateCostUsd2(steps) {
@@ -12273,13 +12393,13 @@ function registerUiAgentGenericTools(server2, ctx, runtime) {
       title: "Dispatch Generic Browsing Agent",
       description: "Send a plain-language task to a hosted browsing agent, which drives a real browser on the open web \u2014 navigating pages, searching, extracting content, filling forms outside the OCS portal. Each run costs roughly $0.20-1.00 in model spend against your own BROWSER_USE_API_KEY, so treat it as the expensive last resort, not a lookup. Limited to CARRIER_BROWSER_USE_MAX_RUNS runs per CLI session (default 10). Params: `prompt` (1-4000 chars \u2014 name the target URL and the exact data or action), `max_steps` (1-30, default 15; prices the dry-run estimate only), `dry_run` (true returns only `estimated_cost_usd` and creates no session). Returns the finished result: unlike the hosted Worker, a local CLI has no background runtime, so this call blocks for the length of the run. Requires `write` scope. Do NOT use this to work out which Carrier tool answers a request \u2014 that is `carrier_ask`, which costs nothing. Do NOT use this for anything the OCS API already covers; every other tool here is faster, free, and audited.",
       inputSchema: {
-        prompt: z24.string().min(1).max(4e3).describe(
+        prompt: z25.string().min(1).max(4e3).describe(
           "Natural-language task description for the browsing agent. Be specific: include target URLs, data to extract, or actions to perform."
         ),
-        max_steps: z24.number().int().min(1).max(30).optional().describe(
+        max_steps: z25.number().int().min(1).max(30).optional().describe(
           "Advisory step budget (1\u201330, default 15). Prices the dry-run estimate; the hosted agent sets its own depth."
         ),
-        dry_run: z24.boolean().optional().describe(
+        dry_run: z25.boolean().optional().describe(
           "Preview cost estimate without dispatching. Returns estimated_cost_usd only \u2014 no browser session is created."
         )
       }
@@ -12322,8 +12442,8 @@ function registerUiAgentGenericTools(server2, ctx, runtime) {
       }
       try {
         runtime.budget.reserve();
-      } catch (err7) {
-        if (err7 instanceof SpendLimitError) {
+      } catch (err8) {
+        if (err8 instanceof SpendLimitError) {
           ctx.audit({
             tool_name: toolName,
             ocs_method: "[ui-agent:generic-ask]",
@@ -12342,13 +12462,13 @@ function registerUiAgentGenericTools(server2, ctx, runtime) {
                 type: "text",
                 text: JSON.stringify({
                   error: "run_limit_reached",
-                  message: err7.message
+                  message: err8.message
                 })
               }
             ]
           };
         }
-        throw err7;
+        throw err8;
       }
       try {
         const result2 = await runUiAgent(
@@ -12386,7 +12506,7 @@ function registerUiAgentGenericTools(server2, ctx, runtime) {
             }
           ]
         };
-      } catch (err7) {
+      } catch (err8) {
         ctx.audit({
           tool_name: toolName,
           ocs_method: "[ui-agent:generic-ask]",
@@ -12402,7 +12522,7 @@ function registerUiAgentGenericTools(server2, ctx, runtime) {
               type: "text",
               text: JSON.stringify({
                 error: "ui_agent_failed",
-                message: err7 instanceof Error ? err7.message : String(err7)
+                message: err8 instanceof Error ? err8.message : String(err8)
               })
             }
           ]
@@ -12416,7 +12536,7 @@ function registerUiAgentGenericTools(server2, ctx, runtime) {
       title: "Poll Browsing Agent Task Status",
       description: "Returns the current state of a browsing-agent task by `task_id`, including its result once finished. In the local CLI, ui_agent_ask already returns the finished result, so this is mainly for re-reading a task within the same session. Task records do not survive the CLI process exiting. Requires `read` scope.",
       inputSchema: {
-        task_id: z24.string().describe("Task ID returned by ui_agent_ask")
+        task_id: z25.string().describe("Task ID returned by ui_agent_ask")
       }
     },
     async (args) => {
@@ -12478,6 +12598,10 @@ var stdioEnv = {
   CARRIER_USERS: null,
   DOWNLOADS: null,
   STRIPE_SECRET_KEY: process.env.STRIPE_SECRET_KEY ?? "",
+  // Undefined (not "") when absent so `ORG ?? SECRET` falls back in the
+  // stripe-connect tools; an empty string would shadow the legacy key.
+  STRIPE_ORG_SECRET_KEY: process.env.STRIPE_ORG_SECRET_KEY,
+  STRIPE_PLATFORM_ACCOUNT_ID: process.env.STRIPE_PLATFORM_ACCOUNT_ID,
   // Browser Use Cloud. Read from the environment with a real fallback, the way
   // STRIPE_SECRET_KEY above and the wallet values below are — unlike the
   // MANUS_API_KEY this replaces, which was hardcoded to "" with no fallback at
@@ -12564,6 +12688,7 @@ registerStorefrontLogoTools(
   props
 );
 registerStorefrontDeployTools(server, props);
+registerStorefrontPlanTools(server, props);
 registerAtlasTools(server, toolCtx);
 registerAllPrompts(server);
 var transport = new StdioServerTransport();