@carrierllc/mcp 0.13.17 → 0.13.19

package/dist/index.js

@@ -80,7 +80,7 @@ import {
   verifyStorefront,
   withOcsListSummary,
   withTemplateResellerId
-} from "./chunk-SAZFMURF.js";
+} from "./chunk-NUVSW46O.js";
 import "./chunk-SHKKVIIA.js";
 
 // src/index.ts
@@ -291,9 +291,9 @@ async function fail(resp) {
   throw new BedrockError(text || `Bedrock returned HTTP ${resp.status}`, resp.status);
 }
 function timedOut() {
-  const err8 = new Error("Bedrock call timed out before a usable response");
-  err8.name = "TimeoutError";
-  return err8;
+  const err9 = new Error("Bedrock call timed out before a usable response");
+  err9.name = "TimeoutError";
+  return err9;
 }
 function sleep(ms, signal) {
   if (signal.aborted) return Promise.resolve();
@@ -317,9 +317,9 @@ async function sendWithRetry(aws, url, init, signal, deadlineAt) {
     let resp;
     try {
       resp = await aws.fetch(url, init);
-    } catch (err8) {
+    } catch (err9) {
       if (signal.aborted && throttled) return throttled;
-      throw err8;
+      throw err9;
     }
     if (!retryable(resp.status)) return resp;
     throttled = resp;
@@ -668,8 +668,8 @@ async function beginUiAgentRun(prompt, title, env, opts) {
       ...opts?.model ? { model: opts.model } : {},
       ...opts?.outputSchema ? { outputSchema: opts.outputSchema } : {}
     });
-  } catch (err8) {
-    const message = err8 instanceof Error ? err8.message : String(err8);
+  } catch (err9) {
+    const message = err9 instanceof Error ? err9.message : String(err9);
     await putTask(env, {
       ...base,
       status: "error",
@@ -681,7 +681,7 @@ async function beginUiAgentRun(prompt, title, env, opts) {
         screenshots_taken: 0
       }
     });
-    throw err8;
+    throw err9;
   }
   const dispatched = {
     ...base,
@@ -695,8 +695,8 @@ async function beginUiAgentRun(prompt, title, env, opts) {
     let run;
     try {
       run = await waitForRun(env, created.runId);
-    } catch (err8) {
-      const message = err8 instanceof Error ? err8.message : String(err8);
+    } catch (err9) {
+      const message = err9 instanceof Error ? err9.message : String(err9);
       const failed = {
         success: false,
         summary: `Browser Use run failed: ${message}`,
@@ -837,8 +837,8 @@ function writeAgentAudit(env, entry) {
       ],
       indexes: [entry.task_id]
     });
-  } catch (err8) {
-    console.error(`[browser-use-agent] audit write failed: ${err8.message}`);
+  } catch (err9) {
+    console.error(`[browser-use-agent] audit write failed: ${err9.message}`);
   }
 }
 
@@ -1073,22 +1073,22 @@ function boundZonesResult(raw, opts = {}) {
   const { verbose = false, resellerId } = opts;
   const maxZones = opts.maxZones ?? ZONES_MAX_ZONES;
   const maxOperators = opts.maxOperators ?? (verbose ? ZONES_VERBOSE_MAX_OPERATORS : ZONES_MAX_OPERATORS);
-  const totalOperators = all.reduce((n, z26) => n + (z26.operators?.length ?? 0), 0);
+  const totalOperators = all.reduce((n, z27) => n + (z27.operators?.length ?? 0), 0);
   const keptZones = all.slice(0, maxZones);
   let budget = maxOperators;
   let returnedOperators = 0;
-  const zones = keptZones.map((z26) => {
-    const ops = z26.operators ?? [];
+  const zones = keptZones.map((z27) => {
+    const ops = z27.operators ?? [];
     const take = Math.max(0, Math.min(ops.length, budget));
     budget -= take;
     returnedOperators += take;
     const sliced = ops.slice(0, take);
     if (verbose) {
-      return { ...z26, operators: sliced, operatorCount: ops.length };
+      return { ...z27, operators: sliced, operatorCount: ops.length };
     }
     return {
-      zoneId: z26.zoneId,
-      zoneName: z26.zoneName,
+      zoneId: z27.zoneId,
+      zoneName: z27.zoneName,
       operatorCount: ops.length,
       operators: sliced.map((o) => ({
         net: o.networkId,
@@ -1278,9 +1278,9 @@ function wrapHandler(toolName, ocsMethod, requiredScope, ctx, handler, options)
     try {
       const token2 = await ctx.getUserToken(ctx.props.sub);
       result2 = await handler(args, token2);
-    } catch (err8) {
+    } catch (err9) {
       try {
-        Sentry.captureException(err8, {
+        Sentry.captureException(err9, {
           tags: {
             tool: toolName,
             feature: "mcp",
@@ -1289,8 +1289,8 @@ function wrapHandler(toolName, ocsMethod, requiredScope, ctx, handler, options)
         });
       } catch {
       }
-      const message = err8 instanceof Error ? err8.message : String(err8);
-      const ocsCode = err8 instanceof OcsApiError ? err8.code : void 0;
+      const message = err9 instanceof Error ? err9.message : String(err9);
+      const ocsCode = err9 instanceof OcsApiError ? err9.code : void 0;
       ctx.audit({
         tool_name: toolName,
         ocs_method: ocsMethod,
@@ -3668,8 +3668,8 @@ async function safeCall(env, token2, method, params = {}) {
     const client2 = new OcsClient(env.CARRIER_OCS_BASE_URL, token2);
     const data = await client2.call(method, params);
     return { data, error: null };
-  } catch (err8) {
-    return { data: null, error: err8 instanceof Error ? err8.message : String(err8) };
+  } catch (err9) {
+    return { data: null, error: err9 instanceof Error ? err9.message : String(err9) };
   }
 }
 async function fetchActiveSubscribers(env, token2, accountId, resellerId) {
@@ -5083,7 +5083,7 @@ function registerAllBacklogTools(server2, ctx) {
 }
 
 // src/tools-carrier-ask.ts
-import { z as z14 } from "zod";
+import { z as z15 } from "zod";
 
 // src/tools-ui-agent.ts
 import { z as z4 } from "zod";
@@ -5356,8 +5356,8 @@ function wrapPortalHandler(toolName, gapId, requiredScope, ctx, runtime, optIn,
     }
     try {
       runtime.budget.reserve();
-    } catch (err8) {
-      if (err8 instanceof SpendLimitError) {
+    } catch (err9) {
+      if (err9 instanceof SpendLimitError) {
         ctx.audit({
           tool_name: toolName,
           ocs_method: ocsMethod,
@@ -5369,11 +5369,11 @@ function wrapPortalHandler(toolName, gapId, requiredScope, ctx, runtime, optIn,
           event_type: "ui_agent_dispatch"
         });
         return jsonResult(
-          { error: "run_limit_reached", message: err8.message },
+          { error: "run_limit_reached", message: err9.message },
           true
         );
       }
-      throw err8;
+      throw err9;
     }
     try {
       const result2 = await runUiAgent(
@@ -5436,7 +5436,7 @@ function wrapPortalHandler(toolName, gapId, requiredScope, ctx, runtime, optIn,
         note: "The run completed in-process \u2014 a local CLI has no background runtime, so this call blocked for its duration.",
         portal_password_note: PORTAL_PASSWORD_RUN_NOTE
       });
-    } catch (err8) {
+    } catch (err9) {
       ctx.audit({
         tool_name: toolName,
         ocs_method: ocsMethod,
@@ -5451,7 +5451,7 @@ function wrapPortalHandler(toolName, gapId, requiredScope, ctx, runtime, optIn,
           {
             type: "text",
             text: redact(
-              `Error dispatching the UI agent: ${err8 instanceof Error ? err8.message : String(err8)}`
+              `Error dispatching the UI agent: ${err9 instanceof Error ? err9.message : String(err9)}`
             )
           }
         ]
@@ -5944,13 +5944,13 @@ function registerUiAgentAskTools(server2, ctx, runtime) {
           taskIds = listing.keys.map(
             (k) => k.name.slice(PENDING_ASK_PREFIX.length)
           );
-        } catch (err8) {
+        } catch (err9) {
           return {
             isError: true,
             content: [
               {
                 type: "text",
-                text: `Error listing pending tasks: ${err8 instanceof Error ? err8.message : String(err8)}`
+                text: `Error listing pending tasks: ${err9 instanceof Error ? err9.message : String(err9)}`
               }
             ]
           };
@@ -6827,6 +6827,36 @@ function requireBinding(binding, tool, name, subject) {
   );
 }
 
+// src/stripe-headers.ts
+var STRIPE_API_VERSION = "2025-08-27.basil";
+function isStripeOrgKey(stripeKey) {
+  return stripeKey.startsWith("sk_org_");
+}
+var ORG_KEY_NEEDS_PLATFORM_ACCOUNT = "STRIPE_ORG_SECRET_KEY is set but STRIPE_PLATFORM_ACCOUNT_ID is not. Organization keys reach a connected account only through Stripe-Context <platform>/<connected>, so set STRIPE_PLATFORM_ACCOUNT_ID to your platform's acct_ id (or unset STRIPE_ORG_SECRET_KEY to use STRIPE_SECRET_KEY).";
+function stripeAccountHeaders(stripeKey, connectedAccountId, platformAccountId) {
+  if (isStripeOrgKey(stripeKey)) {
+    if (connectedAccountId) {
+      if (!platformAccountId) throw new Error(ORG_KEY_NEEDS_PLATFORM_ACCOUNT);
+      return { "Stripe-Context": `${platformAccountId}/${connectedAccountId}` };
+    }
+    return platformAccountId ? { "Stripe-Context": platformAccountId } : {};
+  }
+  if (connectedAccountId) return { "Stripe-Account": connectedAccountId };
+  return {};
+}
+function buildStripeHeaders(stripeKey, opts = {}) {
+  if (opts.requirePlatformScope && isStripeOrgKey(stripeKey) && !opts.platformAccountId) {
+    throw new Error(ORG_KEY_NEEDS_PLATFORM_ACCOUNT);
+  }
+  const headers = {
+    Authorization: `Bearer ${stripeKey}`,
+    "Stripe-Version": STRIPE_API_VERSION,
+    ...stripeAccountHeaders(stripeKey, opts.connectedAccountId, opts.platformAccountId)
+  };
+  if (opts.idempotencyKey) headers["Idempotency-Key"] = opts.idempotencyKey;
+  return headers;
+}
+
 // src/stripe-connect-tools.ts
 async function verifyConfirmToken(env, sub, toolName, token2) {
   requireBinding(
@@ -6861,23 +6891,22 @@ function err2(text) {
   return { isError: true, content: [{ type: "text", text }] };
 }
 async function stripeGet(stripeKey, path, connectedAccountId) {
-  const headers = {
-    Authorization: `Bearer ${stripeKey}`,
-    "Stripe-Version": "2025-08-27.basil"
-  };
-  if (connectedAccountId) headers["Stripe-Account"] = connectedAccountId;
+  const headers = buildStripeHeaders(stripeKey, {
+    connectedAccountId,
+    platformAccountId: process.env.STRIPE_PLATFORM_ACCOUNT_ID,
+    requirePlatformScope: path.startsWith("/v1/accounts/")
+  });
   const res = await fetch(`https://api.stripe.com${path}`, { headers });
   const data = await res.json();
   return { ok: res.ok, status: res.status, data };
 }
 async function stripePost(stripeKey, path, params, connectedAccountId, idempotencyKey) {
-  const headers = {
-    Authorization: `Bearer ${stripeKey}`,
-    "Stripe-Version": "2025-08-27.basil",
-    "Content-Type": "application/x-www-form-urlencoded"
-  };
-  if (connectedAccountId) headers["Stripe-Account"] = connectedAccountId;
-  if (idempotencyKey) headers["Idempotency-Key"] = idempotencyKey;
+  const headers = buildStripeHeaders(stripeKey, {
+    connectedAccountId,
+    platformAccountId: process.env.STRIPE_PLATFORM_ACCOUNT_ID,
+    idempotencyKey
+  });
+  headers["Content-Type"] = "application/x-www-form-urlencoded";
   const res = await fetch(`https://api.stripe.com${path}`, {
     method: "POST",
     headers,
@@ -6932,7 +6961,7 @@ function registerStripeConnectTools(server2, ctx) {
       const opKvKey = operator_id ? `stripe_account:${operator_id}` : kvKey;
       const start = Date.now();
       try {
-        const stripeKey = env.STRIPE_SECRET_KEY;
+        const stripeKey = env.STRIPE_ORG_SECRET_KEY ?? env.STRIPE_SECRET_KEY;
         if (!stripeKey) return err2("Stripe not configured");
         const accountId = await env.CARRIER_USERS.get(opKvKey);
         if (!accountId) {
@@ -6985,7 +7014,7 @@ function registerStripeConnectTools(server2, ctx) {
       if (denied) return denied;
       const start = Date.now();
       try {
-        const stripeKey = env.STRIPE_SECRET_KEY;
+        const stripeKey = env.STRIPE_ORG_SECRET_KEY ?? env.STRIPE_SECRET_KEY;
         if (!stripeKey) return err2("Stripe not configured");
         const accountId = await getAccountId();
         if (!accountId) return err2("No connected Stripe account found.");
@@ -7022,7 +7051,7 @@ function registerStripeConnectTools(server2, ctx) {
       if (denied) return denied;
       const start = Date.now();
       try {
-        const stripeKey = env.STRIPE_SECRET_KEY;
+        const stripeKey = env.STRIPE_ORG_SECRET_KEY ?? env.STRIPE_SECRET_KEY;
         if (!stripeKey) return err2("Stripe not configured");
         const accountId = await getAccountId();
         if (!accountId) return err2("No connected Stripe account found.");
@@ -7079,7 +7108,7 @@ Call again with confirm_token="${token2}" to execute. Token expires in 5 minutes
         return err2("Invalid or expired confirm_token. Call without token to get a new one.");
       }
       try {
-        const stripeKey = env.STRIPE_SECRET_KEY;
+        const stripeKey = env.STRIPE_ORG_SECRET_KEY ?? env.STRIPE_SECRET_KEY;
         if (!stripeKey) return err2("Stripe not configured");
         const accountId = await getAccountId();
         if (!accountId) return err2("No connected Stripe account found.");
@@ -7126,7 +7155,7 @@ Call again with confirm_token="${token2}" to execute. Token expires in 5 minutes
       if (denied) return denied;
       const start = Date.now();
       try {
-        const stripeKey = env.STRIPE_SECRET_KEY;
+        const stripeKey = env.STRIPE_ORG_SECRET_KEY ?? env.STRIPE_SECRET_KEY;
         if (!stripeKey) return err2("Stripe not configured");
         const accountId = await getAccountId();
         if (!accountId) return err2("No connected Stripe account found.");
@@ -7171,7 +7200,7 @@ Call again with confirm_token="${token2}" to execute. Token expires in 5 minutes
       }
       const start = Date.now();
       try {
-        const stripeKey = env.STRIPE_SECRET_KEY;
+        const stripeKey = env.STRIPE_ORG_SECRET_KEY ?? env.STRIPE_SECRET_KEY;
         if (!stripeKey) return err2("Stripe not configured");
         const params = new URLSearchParams({ limit: String(limit) });
         if (open_only) params.set("open", "true");
@@ -7225,7 +7254,7 @@ Call again with confirm_token="${token2}" to execute. Expires in 5 minutes.`
       const valid = await verifyConfirmToken(env, props2.sub, toolName, confirm_token);
       if (!valid) return err2("Invalid or expired confirm_token.");
       try {
-        const stripeKey = env.STRIPE_SECRET_KEY;
+        const stripeKey = env.STRIPE_ORG_SECRET_KEY ?? env.STRIPE_SECRET_KEY;
         if (!stripeKey) return err2("Stripe not configured");
         const result2 = await stripePost(
           stripeKey,
@@ -7281,7 +7310,7 @@ Expires in 5 minutes.`
       const valid = await verifyConfirmToken(env, props2.sub, toolName, confirm_token);
       if (!valid) return err2("Invalid or expired confirm_token.");
       try {
-        const stripeKey = env.STRIPE_SECRET_KEY;
+        const stripeKey = env.STRIPE_ORG_SECRET_KEY ?? env.STRIPE_SECRET_KEY;
         if (!stripeKey) return err2("Stripe not configured");
         const result2 = await stripePost(
           stripeKey,
@@ -7338,7 +7367,7 @@ Expires in 5 minutes.`
       const valid = await verifyConfirmToken(env, props2.sub, toolName, confirm_token);
       if (!valid) return err2("Invalid or expired confirm_token.");
       try {
-        const stripeKey = env.STRIPE_SECRET_KEY;
+        const stripeKey = env.STRIPE_ORG_SECRET_KEY ?? env.STRIPE_SECRET_KEY;
         if (!stripeKey) return err2("Stripe not configured");
         const result2 = await stripePost(
           stripeKey,
@@ -7728,8 +7757,8 @@ async function atlasPublicGet(baseUrl2, path) {
       headers: { Accept: "application/json" },
       signal: AbortSignal.timeout(8e3)
     });
-  } catch (err8) {
-    const message = err8 instanceof Error ? err8.message : String(err8);
+  } catch (err9) {
+    const message = err9 instanceof Error ? err9.message : String(err9);
     throw new Error(`Atlas request failed: ${message}`);
   }
   const text = await response.text();
@@ -7926,6 +7955,176 @@ function registerNetworkDefaultTools(server2, ctx) {
   );
 }
 
+// src/affiliate-tools.ts
+import { z as z14 } from "zod";
+var AFFILIATE_TOOL_SCOPES = {
+  affiliate_status: "read",
+  affiliate_commissions: "read",
+  affiliate_join: "write"
+};
+var REF_ALPHABET = "ABCDEFGHJKLMNPQRSTUVWXYZ23456789";
+var LINK_BASE = "https://app.carrier.llc/sign-up";
+function newRefCode() {
+  const bytes = crypto.getRandomValues(new Uint8Array(8));
+  return Array.from(bytes, (b) => REF_ALPHABET[b % REF_ALPHABET.length]).join("");
+}
+var linkFor = (code) => `${LINK_BASE}?ref=${code}`;
+function ok5(text) {
+  return { content: [{ type: "text", text }] };
+}
+function err6(text) {
+  return { isError: true, content: [{ type: "text", text }] };
+}
+function registerAffiliateTools(server2, ctx) {
+  const { env, props: props2 } = ctx;
+  const operatorId = props2.org_id ?? props2.sub;
+  server2.registerTool(
+    "affiliate_status",
+    {
+      title: "Affiliate Status",
+      description: "Read-only: returns the affiliate profile, referral code, link, counts, money owed and paid, and Connect payouts status for the authenticated operator.",
+      inputSchema: {},
+      annotations: annotationsFor("affiliate_status", "read")
+    },
+    async () => {
+      const denied = denyUnlessScoped(props2, "affiliate_status", AFFILIATE_TOOL_SCOPES);
+      if (denied) return denied;
+      try {
+        requireBinding(env.BILLING_DB, "affiliate_status", "BILLING_DB", "affiliate data");
+        const me = await env.BILLING_DB.prepare("SELECT ref_code, status, created_at FROM affiliates WHERE org_id = ?").bind(operatorId).first();
+        if (!me) {
+          return err6("Not an affiliate yet. Call affiliate_join to join.");
+        }
+        const stats = await env.BILLING_DB.prepare(
+          `SELECT (SELECT COUNT(*) FROM affiliate_referrals WHERE affiliate_org_id = ?) AS referrals,
+                    COALESCE((SELECT SUM(commission_cents) FROM affiliate_commissions WHERE affiliate_org_id = ? AND status <> 'paid'), 0) AS pending_cents,
+                    COALESCE((SELECT SUM(commission_cents) FROM affiliate_commissions WHERE affiliate_org_id = ? AND status = 'paid'), 0) AS paid_cents,
+                    COALESCE((SELECT payouts_enabled FROM operator_stripe_accounts WHERE operator_id = ?), 0) AS payouts_enabled`
+        ).bind(operatorId, operatorId, operatorId, operatorId).first();
+        return ok5(
+          JSON.stringify(
+            {
+              ref_code: me.ref_code,
+              link: linkFor(me.ref_code),
+              status: me.status,
+              referrals: stats?.referrals ?? 0,
+              pending_cents: stats?.pending_cents ?? 0,
+              paid_cents: stats?.paid_cents ?? 0,
+              payouts_enabled: Boolean(stats?.payouts_enabled)
+            },
+            null,
+            2
+          )
+        );
+      } catch (e) {
+        return err6(e instanceof Error ? e.message : "unknown");
+      }
+    }
+  );
+  server2.registerTool(
+    "affiliate_commissions",
+    {
+      title: "Affiliate Commissions",
+      description: "Read-only: returns the list of commission records for the authenticated operator.",
+      inputSchema: {
+        limit: z14.number().int().min(1).max(200).optional().default(50).describe("Maximum number of commission records to return (1-200, default: 50).")
+      },
+      annotations: annotationsFor("affiliate_commissions", "read")
+    },
+    async ({ limit }) => {
+      const denied = denyUnlessScoped(props2, "affiliate_commissions", AFFILIATE_TOOL_SCOPES);
+      if (denied) return denied;
+      try {
+        requireBinding(env.BILLING_DB, "affiliate_commissions", "BILLING_DB", "affiliate data");
+        const rawLimit = limit ?? 50;
+        const clampedLimit = Number.isFinite(rawLimit) ? Math.min(200, Math.max(1, rawLimit)) : 50;
+        const rows = await env.BILLING_DB.prepare(
+          `SELECT period, referred_org_id, base_cents, commission_bps, commission_cents, status, unmeasured_rows
+             FROM affiliate_commissions
+             WHERE affiliate_org_id = ?
+             ORDER BY period DESC, id DESC
+             LIMIT ?`
+        ).bind(operatorId, clampedLimit).all();
+        return ok5(
+          JSON.stringify(
+            {
+              commissions: rows.results ?? []
+            },
+            null,
+            2
+          )
+        );
+      } catch (e) {
+        return err6(e instanceof Error ? e.message : "unknown");
+      }
+    }
+  );
+  server2.registerTool(
+    "affiliate_join",
+    {
+      title: "Join Affiliate Program",
+      description: "Join the Carrier affiliate program and generate a personal referral code and link.",
+      inputSchema: {},
+      annotations: annotationsFor("affiliate_join", "write")
+    },
+    async () => {
+      const denied = denyUnlessScoped(props2, "affiliate_join", AFFILIATE_TOOL_SCOPES);
+      if (denied) return denied;
+      try {
+        requireBinding(env.BILLING_DB, "affiliate_join", "BILLING_DB", "affiliate data");
+        const existing = await env.BILLING_DB.prepare("SELECT ref_code FROM affiliates WHERE org_id = ?").bind(operatorId).first();
+        if (existing) {
+          return ok5(
+            JSON.stringify(
+              {
+                ref_code: existing.ref_code,
+                link: linkFor(existing.ref_code)
+              },
+              null,
+              2
+            )
+          );
+        }
+        for (let attempt = 0; attempt < 5; attempt++) {
+          const code = newRefCode();
+          try {
+            await env.BILLING_DB.prepare("INSERT INTO affiliates (org_id, ref_code, created_at) VALUES (?, ?, ?)").bind(operatorId, code, Date.now()).run();
+            return ok5(
+              JSON.stringify(
+                {
+                  ref_code: code,
+                  link: linkFor(code)
+                },
+                null,
+                2
+              )
+            );
+          } catch (errCatch) {
+            const msg = errCatch instanceof Error ? errCatch.message : "";
+            if (!/UNIQUE|constraint/i.test(msg)) throw errCatch;
+            const raced = await env.BILLING_DB.prepare("SELECT ref_code FROM affiliates WHERE org_id = ?").bind(operatorId).first();
+            if (raced) {
+              return ok5(
+                JSON.stringify(
+                  {
+                    ref_code: raced.ref_code,
+                    link: linkFor(raced.ref_code)
+                  },
+                  null,
+                  2
+                )
+              );
+            }
+          }
+        }
+        return err6("Could not allocate a referral code");
+      } catch (e) {
+        return err6(e instanceof Error ? e.message : "unknown");
+      }
+    }
+  );
+}
+
 // src/credits.ts
 var TIER_CREDIT_ALLOTMENTS = {
   free: 5e3,
@@ -9302,7 +9501,8 @@ var ALL_TOOL_SCOPES = Object.freeze({
   ...STOREFRONT_DEPLOY_TOOL_SCOPES,
   ...STOREFRONT_PLAN_TOOL_SCOPES,
   ...ATLAS_TOOL_SCOPES,
-  ...NETWORK_DEFAULT_TOOL_SCOPES
+  ...NETWORK_DEFAULT_TOOL_SCOPES,
+  ...AFFILIATE_TOOL_SCOPES
 });
 var TOOL_REGISTRY = new Set(Object.keys(ALL_TOOL_SCOPES));
 var UNREGISTERED_TOOLS = /* @__PURE__ */ new Set(["stripe_proxy_call"]);
@@ -9863,16 +10063,16 @@ Pre-resolved context: ${JSON.stringify(definedContext)}` : "";
         ...onUsage ? { onUsage } : {}
       }
     );
-  } catch (err8) {
-    if (err8 instanceof BedrockRateLimitError) {
-      const parsedSeconds = err8.retryAfter ? parseInt(err8.retryAfter, 10) : 60;
+  } catch (err9) {
+    if (err9 instanceof BedrockRateLimitError) {
+      const parsedSeconds = err9.retryAfter ? parseInt(err9.retryAfter, 10) : 60;
       return {
         match: "rate_limited",
         retry_after_seconds: Number.isFinite(parsedSeconds) ? parsedSeconds : 60,
         suggestion: "Bedrock rate limit reached. Please retry after the indicated delay."
       };
     }
-    throw err8;
+    throw err9;
   }
   if (!toolCall) {
     return {
@@ -9977,15 +10177,15 @@ function registerAllCarrierAskTools(server2, ctx) {
       title: "Natural Language Carrier Tool Router",
       description: "Use this when you want to perform a carrier operation but don't know which specific tool to call. Describe your intent in plain language and carrier_ask will identify the correct tool(s) and suggest the required parameters. For simple read intents, it executes directly and returns results. For destructive operations it returns a confirm_token that you must pass in a second call. Params: `intent` (string \u2014 natural language description of what you want to do), `context` (optional: iccid, account_id, reseller_id if already known). Returns: RouteResult \u2014 confirmed | pending_confirm | ambiguous | none. Do NOT use this when you know the right tool \u2014 direct calls are faster and cheaper.",
       inputSchema: {
-        intent: z14.string().min(3).describe(
+        intent: z15.string().min(3).describe(
           "Natural-language description of the operation to perform (e.g. 'suspend ICCID 89316 until next month', 'show fleet health', 'assign Europe 5GB package to subscriber 89316...')"
         ),
-        context: z14.object({
-          iccid: z14.string().optional().describe("Subscriber ICCID if already known"),
-          account_id: z14.number().optional().describe("Account ID if already known"),
-          reseller_id: z14.number().optional().describe("Reseller ID if already known")
+        context: z15.object({
+          iccid: z15.string().optional().describe("Subscriber ICCID if already known"),
+          account_id: z15.number().optional().describe("Account ID if already known"),
+          reseller_id: z15.number().optional().describe("Reseller ID if already known")
         }).optional().describe("Optional pre-resolved context to improve routing accuracy"),
-        confirm_token: z14.string().optional().describe(
+        confirm_token: z15.string().optional().describe(
           "One-time token from a previous carrier_ask call with confirm_required=true. Providing this executes the previously staged destructive operation."
         )
       }
@@ -10086,8 +10286,8 @@ function registerAllCarrierAskTools(server2, ctx) {
               modelRan = true;
             }
           });
-        } catch (err8) {
-          if (err8 instanceof AskRouterNotConfiguredError) {
+        } catch (err9) {
+          if (err9 instanceof AskRouterNotConfiguredError) {
             writeCarrierAskAudit(ctx.env, {
               intent_hash: intentHash,
               match: "error",
@@ -10107,8 +10307,8 @@ function registerAllCarrierAskTools(server2, ctx) {
                   type: "text",
                   text: JSON.stringify({
                     error: "router_not_configured",
-                    missing: err8.missing,
-                    message: err8.message
+                    missing: err9.missing,
+                    message: err9.message
                   })
                 }
               ],
@@ -10138,7 +10338,7 @@ function registerAllCarrierAskTools(server2, ctx) {
                 type: "text",
                 text: JSON.stringify({
                   error: "routing_error",
-                  message: err8 instanceof Error ? err8.message : "An unexpected error occurred during routing."
+                  message: err9 instanceof Error ? err9.message : "An unexpected error occurred during routing."
                 })
               }
             ],
@@ -10189,7 +10389,7 @@ function registerAllCarrierAskTools(server2, ctx) {
       title: "Describe a Carrier Tool",
       description: "Get full documentation for any registered Carrier MCP tool: description, parameters, 2-3 example invocations, required scope, destructive flag, and guidance. Params: `tool_name` (exact MCP tool name, e.g. 'assign_package'). Returns: structured tool metadata. Does NOT execute the tool.",
       inputSchema: {
-        tool_name: z14.string().describe("The exact MCP tool name to describe (e.g. 'assign_package', 'hlr_set_bitrate')")
+        tool_name: z15.string().describe("The exact MCP tool name to describe (e.g. 'assign_package', 'hlr_set_bitrate')")
       }
     },
     wrapHandler(
@@ -10282,7 +10482,7 @@ function buildExamples(toolName) {
 }
 
 // src/list-recent-ocs-events.ts
-import { z as z15 } from "zod";
+import { z as z16 } from "zod";
 
 // src/ocs-scoping.ts
 function managedOwnAccountId(auth) {
@@ -10315,10 +10515,10 @@ async function assertManagedIccidAccess(baseUrl2, auth, iccid) {
       return { ok: false, error: "Subscriber not found" };
     }
     return { ok: true };
-  } catch (err8) {
+  } catch (err9) {
     return {
       ok: false,
-      error: err8 instanceof Error ? err8.message : String(err8)
+      error: err9 instanceof Error ? err9.message : String(err9)
     };
   }
 }
@@ -10450,10 +10650,10 @@ var ALLOWED_EVENT_TYPES = [
   "usage.anomaly"
 ];
 var listRecentOcsEventsSchema = {
-  iccid: z15.string().regex(/^\d{19,20}$/).describe("ICCID, 19 or 20 digits, ITU-T E.118 format"),
-  limit: z15.number().int().min(1).max(50).default(20).describe("Max events to return, newest first"),
-  event_types: z15.array(z15.enum(ALLOWED_EVENT_TYPES)).optional().describe("Filter to specific event types"),
-  since: z15.string().datetime().optional().describe("ISO-8601 timestamp; only events after this point")
+  iccid: z16.string().regex(/^\d{19,20}$/).describe("ICCID, 19 or 20 digits, ITU-T E.118 format"),
+  limit: z16.number().int().min(1).max(50).default(20).describe("Max events to return, newest first"),
+  event_types: z16.array(z16.enum(ALLOWED_EVENT_TYPES)).optional().describe("Filter to specific event types"),
+  since: z16.string().datetime().optional().describe("ISO-8601 timestamp; only events after this point")
 };
 async function listRecentOcsEvents2(iccid, limit, eventTypes, since, kv) {
   return listRecentOcsEvents(iccid, limit, eventTypes, since, kv);
@@ -10504,8 +10704,8 @@ function registerListRecentOcsEventsTool(server2, ctx) {
         return {
           content: [{ type: "text", text: JSON.stringify(result2, null, 2) }]
         };
-      } catch (err8) {
-        const message = err8 instanceof Error ? err8.message : String(err8);
+      } catch (err9) {
+        const message = err9 instanceof Error ? err9.message : String(err9);
         return {
           isError: true,
           content: [{ type: "text", text: `Error reading OCS event buffer: ${message}` }]
@@ -10516,7 +10716,7 @@ function registerListRecentOcsEventsTool(server2, ctx) {
 }
 
 // src/tools-rate-governor.ts
-import { z as z16 } from "zod";
+import { z as z17 } from "zod";
 var MONITORED_ENDPOINTS = [
   "subscriberNetworkEventsOverPeriod",
   // 30/min
@@ -10548,7 +10748,7 @@ function registerRateLimitStatusTool(server2, ctx) {
       title: "API Rate-Limit Governor Status",
       description: "Inspect Bridge4IP OCS rate-limit governor state \u2014 bucket fill levels, per-endpoint limits, and 80% alert thresholds. Use this to answer: 'are we rate limited', 'check ocs quota', 'how full is the rate limit bucket', 'rate limit status'. Params: `endpoint` (optional \u2014 OCS camelCase method name to inspect a single bucket, e.g. 'subscriberUsageOverPeriod'; omit for all monitored endpoints). Returns: per-endpoint { limit_per_min, batch_cap_per_min, calls_in_window, batch_calls_in_window, utilisation_pct, alert (true when \u226580% of limit) }. Note: counts come from the in-process sliding-window log (same key as OCS calls: API token + endpoint) \u2014 they reset when the Worker isolate recycles. Use as a relative signal, not an exact counter. Do NOT use this to adjust limits \u2014 limits are set by Bridge4IP contract and cannot be changed via MCP.",
       inputSchema: {
-        endpoint: z16.string().optional().describe(
+        endpoint: z17.string().optional().describe(
           "OCS method name in camelCase (e.g. 'subscriberUsageOverPeriod'). Omit to return status for all monitored endpoints."
         )
       },
@@ -10604,11 +10804,11 @@ function registerRateLimitStatusTool(server2, ctx) {
 }
 
 // src/tools-depletion-events.ts
-import { z as z17 } from "zod";
-function ok5(payload) {
+import { z as z18 } from "zod";
+function ok6(payload) {
   return { content: [{ type: "text", text: JSON.stringify(payload, null, 2) }] };
 }
-function err6(message) {
+function err7(message) {
   return { isError: true, content: [{ type: "text", text: message }] };
 }
 async function ownershipToken(ctx) {
@@ -10632,10 +10832,10 @@ function registerDepletionEventsTool(server2, ctx) {
       title: "Subscriber Bundle Depletion Events",
       description: "Look up bundle depletion events for a subscriber (or list recent fleet-wide depletions). Returns the most recent bundle.depleted event stored when the prepaid usage webhook received a last_slice notification. Events are retained for 7 days. Use subscriberId to check a specific subscriber, or omit to list the 20 most recent fleet-wide depletions. Requires 'read' scope.",
       inputSchema: {
-        subscriberId: z17.string().optional().describe(
+        subscriberId: z18.string().optional().describe(
           "OCS subscriber ID to look up. Omit to list the 20 most recent fleet-wide depletions."
         ),
-        since: z17.string().optional().describe(
+        since: z18.string().optional().describe(
           "ISO-8601 timestamp \u2014 only return events at or after this time (for single-subscriber lookup)."
         )
       },
@@ -10643,13 +10843,13 @@ function registerDepletionEventsTool(server2, ctx) {
     },
     async (args) => {
       if (!ctx.props.scope.includes("read")) {
-        return err6(
+        return err7(
           `Scope denied: subscriber_depletion_events requires 'read' scope. Your token has: [${ctx.props.scope.join(", ")}].`
         );
       }
       const kv = ctx.env.RATE_LIMIT_KV;
       if (!kv) {
-        return err6(
+        return err7(
           "subscriber_depletion_events cannot answer here. Depletion events are written by the Carrier webhook receiver as they arrive from the network and kept for 7 days in hosted storage; a local stdio server receives no webhooks and has nowhere to keep them, so there is no history on this machine to read. There is nothing to set in your environment. Use the hosted MCP at https://mcp.carrier.llc/mcp for this tool. To see a subscriber's current bundle state instead of its depletion history, `get_subscriber` and `list_subscriber_packages` query OCS directly and work here."
         );
       }
@@ -10658,14 +10858,14 @@ function registerDepletionEventsTool(server2, ctx) {
       try {
         scopeToken = await ownershipToken(ctx);
       } catch (e) {
-        return err6(
+        return err7(
           `Could not resolve the OCS credential needed to scope this read: ${e instanceof Error ? e.message : String(e)}`
         );
       }
       if (subscriberId) {
         const raw = await kv.get(`bundle-depleted:${subscriberId}`, "text");
         if (!raw) {
-          return ok5({
+          return ok6({
             subscriber_id: subscriberId,
             depleted: false,
             event: null,
@@ -10676,7 +10876,7 @@ function registerDepletionEventsTool(server2, ctx) {
         try {
           event = JSON.parse(raw);
         } catch {
-          return ok5({
+          return ok6({
             subscriber_id: subscriberId,
             depleted: false,
             event: null,
@@ -10684,7 +10884,7 @@ function registerDepletionEventsTool(server2, ctx) {
           });
         }
         if (!await ownsEvent(ctx, scopeToken, event.iccid)) {
-          return ok5({
+          return ok6({
             subscriber_id: subscriberId,
             depleted: false,
             event: null,
@@ -10692,14 +10892,14 @@ function registerDepletionEventsTool(server2, ctx) {
           });
         }
         if (since && event.depletedAt < since) {
-          return ok5({
+          return ok6({
             subscriber_id: subscriberId,
             depleted: false,
             event: null,
             note: `No bundle depletion after ${since}.`
           });
         }
-        return ok5({
+        return ok6({
           subscriber_id: subscriberId,
           depleted: true,
           event: {
@@ -10713,7 +10913,7 @@ function registerDepletionEventsTool(server2, ctx) {
       }
       const listResult = await kv.list({ prefix: "bundle-depleted:", limit: 20 });
       if (listResult.keys.length === 0) {
-        return ok5({
+        return ok6({
           depletions: [],
           total: 0,
           note: "No bundle depletion events in the last 7 days."
@@ -10740,7 +10940,7 @@ function registerDepletionEventsTool(server2, ctx) {
         })
       );
       events.sort((a, b) => b.depleted_at.localeCompare(a.depleted_at));
-      return ok5({
+      return ok6({
         depletions: events,
         total: events.length,
         list_truncated: !listResult.list_complete
@@ -10750,7 +10950,7 @@ function registerDepletionEventsTool(server2, ctx) {
 }
 
 // src/tools-country-history.ts
-import { z as z18 } from "zod";
+import { z as z19 } from "zod";
 function isoDate(now, daysAgo = 0) {
   const d = new Date(now.getTime() - daysAgo * 864e5);
   return d.toISOString().slice(0, 10);
@@ -10773,10 +10973,10 @@ function registerCountryHistoryTool(server2, ctx) {
       title: "Subscriber Country History",
       description: "Return cross-border movement history for a subscriber, reconstructed from OCS Gy charging events. Reads `gyAnswer.events` from `subscriberNetworkEventsOverPeriod` \u2014 every Gy record carries its own country, operator and MCC \u2014 and collapses consecutive same-country records into stays with first-seen and last-seen timestamps. This needs no webhook: it works with Relay LU and Relay Gy off. Relay `country.entered` events from the 24h ring-buffer are merged in as a supplement when present. Use this to answer: 'where has subscriber X traveled', 'show country history for ICCID', 'border crossings for this SIM'. Params: `subscriberId` (ICCID, 19\u201320 digits), `startDate`/`endDate` (YYYY-MM-DD, max 7 days apart, default the last 7 days), `limit` (1\u201350, default 20, newest first). Returns: `stays` ({ country, country_name, first_seen, last_seen, operators, mccs, event_count, used_bytes }), `transitions` ({ from, to, at }), and `country_events` in the legacy flat shape. `used_bytes` already handles the string-typed `usedUnits` and its 'N/A' values. Do NOT use this for raw per-session records \u2014 use `subscriber_network_events` for those.",
       inputSchema: {
-        subscriberId: z18.string().regex(/^\d{19,20}$/, "subscriberId must be a 19\u201320 digit ICCID").describe("Subscriber ICCID (19\u201320 digits, ITU-T E.118)"),
-        startDate: z18.string().regex(/^\d{4}-\d{2}-\d{2}$/, "startDate must be YYYY-MM-DD").optional().describe("Start of the period, YYYY-MM-DD inclusive (default: 7 days ago)"),
-        endDate: z18.string().regex(/^\d{4}-\d{2}-\d{2}$/, "endDate must be YYYY-MM-DD").optional().describe("End of the period, YYYY-MM-DD inclusive, max 7 days from start (default: today)"),
-        limit: z18.number().int().min(1).max(50).default(20).optional().describe("Maximum number of country_events to return, newest first (default 20, max 50)")
+        subscriberId: z19.string().regex(/^\d{19,20}$/, "subscriberId must be a 19\u201320 digit ICCID").describe("Subscriber ICCID (19\u201320 digits, ITU-T E.118)"),
+        startDate: z19.string().regex(/^\d{4}-\d{2}-\d{2}$/, "startDate must be YYYY-MM-DD").optional().describe("Start of the period, YYYY-MM-DD inclusive (default: 7 days ago)"),
+        endDate: z19.string().regex(/^\d{4}-\d{2}-\d{2}$/, "endDate must be YYYY-MM-DD").optional().describe("End of the period, YYYY-MM-DD inclusive, max 7 days from start (default: today)"),
+        limit: z19.number().int().min(1).max(50).default(20).optional().describe("Maximum number of country_events to return, newest first (default 20, max 50)")
       },
       annotations: { readOnlyHint: true, idempotentHint: true }
     },
@@ -10807,8 +11007,8 @@ function registerCountryHistoryTool(server2, ctx) {
             networkEventsOverPeriodParams(subscriberId, start, end)
           );
           gy = gyCountryHistoryFromResponse(events);
-        } catch (err8) {
-          gyError = err8 instanceof Error ? err8.message : String(err8);
+        } catch (err9) {
+          gyError = err9 instanceof Error ? err9.message : String(err9);
         }
         let syntheticRingIccid = null;
         const msisdnRaw = msisdnFieldFromSubscriberPayload(subscriberPayload);
@@ -10884,7 +11084,7 @@ function registerCountryHistoryTool(server2, ctx) {
 }
 
 // src/apps/fleet-health-app.ts
-import { z as z19 } from "zod";
+import { z as z20 } from "zod";
 import {
   registerAppTool,
   registerAppResource,
@@ -10935,8 +11135,8 @@ var FLEET_APP_RESOURCE_URI = "ui://fleet-health-dashboard";
 async function safeCall2(client2, method, params) {
   try {
     return { data: await client2.call(method, params), error: null };
-  } catch (err8) {
-    return { data: null, error: err8 instanceof Error ? err8.message : String(err8) };
+  } catch (err9) {
+    return { data: null, error: err9 instanceof Error ? err9.message : String(err9) };
   }
 }
 async function loadFleet(ctx, accountId) {
@@ -10968,7 +11168,7 @@ function registerFleetHealthApp(server2, ctx) {
       let html;
       try {
         html = renderHtml(fleetScreen(await loadFleet(ctx)));
-      } catch (err8) {
+      } catch (err9) {
         html = renderHtml({
           id: "fleet-health",
           title: "Fleet health",
@@ -10976,7 +11176,7 @@ function registerFleetHealthApp(server2, ctx) {
             {
               kind: "note",
               tone: "critical",
-              text: `Could not load fleet data: ${err8 instanceof Error ? err8.message : String(err8)}`
+              text: `Could not load fleet data: ${err9 instanceof Error ? err9.message : String(err9)}`
             }
           ]
         });
@@ -11000,7 +11200,7 @@ function registerFleetHealthApp(server2, ctx) {
       title: "Fleet Health Dashboard",
       description: "Draw the fleet overview as an interactive panel: eSIM status, per-account breakdown and low-balance alerts. Returns structuredContent for the panel, so it only helps a client that can render MCP UI resources. Do NOT use this when the answer has to be readable text, or in any headless or scripted context \u2014 `fleet_health` returns the same data as prose.",
       inputSchema: {
-        accountId: z19.number().optional().describe("Filter to a specific account (omit for all)")
+        accountId: z20.number().optional().describe("Filter to a specific account (omit for all)")
       },
       annotations: { readOnlyHint: true },
       _meta: {
@@ -11043,7 +11243,7 @@ function registerFleetHealthApp(server2, ctx) {
 }
 
 // src/apps/provisioning-wizard.ts
-import { z as z20 } from "zod";
+import { z as z21 } from "zod";
 import {
   registerAppTool as registerAppTool2,
   registerAppResource as registerAppResource2,
@@ -11096,10 +11296,10 @@ async function deleteWizardSession(env, sub, wizardId) {
 async function safeCallWithToken(client2, _token, method, params = {}) {
   try {
     return { data: await client2.call(method, params), error: null };
-  } catch (err8) {
+  } catch (err9) {
     return {
       data: null,
-      error: err8 instanceof Error ? err8.message : String(err8)
+      error: err9 instanceof Error ? err9.message : String(err9)
     };
   }
 }
@@ -11148,10 +11348,10 @@ function registerProvisioningWizard(server2, ctx) {
       title: "eSIM Provisioning Wizard",
       description: "Interactive 3-step wizard to provision an eSIM: select subscriber, choose package template, preview (dry_run) and confirm execution.",
       inputSchema: {
-        step: z20.enum(["init", "select-package", "preview", "confirm"]).describe("Current wizard step"),
-        wizardId: z20.string().optional().describe("Wizard session ID (absent on init)"),
-        subscriber_iccid: z20.string().optional().describe("Subscriber ICCID (required for select-package)"),
-        package_template_id: z20.number().optional().describe("Package template ID (required for preview)")
+        step: z21.enum(["init", "select-package", "preview", "confirm"]).describe("Current wizard step"),
+        wizardId: z21.string().optional().describe("Wizard session ID (absent on init)"),
+        subscriber_iccid: z21.string().optional().describe("Subscriber ICCID (required for select-package)"),
+        package_template_id: z21.number().optional().describe("Package template ID (required for preview)")
       },
       _meta: {
         ui: {
@@ -11421,7 +11621,7 @@ function registerProvisioningWizard(server2, ctx) {
 }
 
 // src/apps/balance-topup.ts
-import { z as z21 } from "zod";
+import { z as z22 } from "zod";
 import {
   registerAppTool as registerAppTool3,
   registerAppResource as registerAppResource3,
@@ -11430,10 +11630,10 @@ import {
 async function safeCallWithToken2(client2, _token, method, params = {}) {
   try {
     return { data: await client2.call(method, params), error: null };
-  } catch (err8) {
+  } catch (err9) {
     return {
       data: null,
-      error: err8 instanceof Error ? err8.message : String(err8)
+      error: err9 instanceof Error ? err9.message : String(err9)
     };
   }
 }
@@ -11474,9 +11674,9 @@ function registerBalanceTopupApp(server2, ctx) {
       title: "Balance Top-up Form",
       description: "Adjust the OCS reseller-account balance behind one subscriber, through a form panel the user can review before it commits. Defaults to preview: a call that omits `preview` returns a projection and writes nothing. Only `preview: false` performs the OCS write. Params: `iccid` (subscriber identifier used to find the account), `delta` (amount to add when positive, deduct when negative), `preview` (boolean, default true). Requires `admin` scope plus recent MFA, and a client that can render UI panels. Do NOT use this in a headless or scripted context \u2014 call `modify_account_balance` directly, which takes an `accountId` and needs no panel. Do NOT use this for a subscriber's own balance \u2014 the `iccid` here only locates the account; per-subscriber money is `modify_subscriber_balance`. Do NOT use this for the Carrier prepaid wallet or MCP credits \u2014 see `wallet_topup_checkout` and `credit_balance`.",
       inputSchema: {
-        iccid: z21.string().describe("The subscriber ICCID for the account lookup"),
-        delta: z21.number().describe("Amount to add (positive) or deduct (negative) from the account balance"),
-        preview: z21.boolean().default(true).describe("If true, return preview without writing. If false, execute the balance change.")
+        iccid: z22.string().describe("The subscriber ICCID for the account lookup"),
+        delta: z22.number().describe("Amount to add (positive) or deduct (negative) from the account balance"),
+        preview: z22.boolean().default(true).describe("If true, return preview without writing. If false, execute the balance change.")
       },
       annotations: { destructiveHint: true },
       _meta: {
@@ -11559,7 +11759,7 @@ function registerAllApps(server2, ctx) {
 }
 
 // src/prompts.ts
-import { z as z22 } from "zod";
+import { z as z23 } from "zod";
 function registerAllPrompts(server2) {
   server2.registerPrompt(
     "fleet_health_report",
@@ -11595,7 +11795,7 @@ Format as a structured report with sections, tables, and actionable recommendati
     {
       title: "Subscriber Deep Dive",
       description: "Comprehensive analysis of a single subscriber: profile, packages, usage patterns, location history, recommendations.",
-      argsSchema: { iccid: z22.string().describe("The subscriber ICCID to analyse") }
+      argsSchema: { iccid: z23.string().describe("The subscriber ICCID to analyse") }
     },
     async ({ iccid }) => ({
       messages: [
@@ -11694,7 +11894,7 @@ Analyze and present:
     {
       title: "Bulk Operations Planner",
       description: "Plan bulk operations safely: mass package assignments, account migrations, balance adjustments, or status changes.",
-      argsSchema: { operation: z22.string().describe("Describe the bulk operation you want to perform") }
+      argsSchema: { operation: z23.string().describe("Describe the bulk operation you want to perform") }
     },
     async ({ operation }) => ({
       messages: [
@@ -11727,7 +11927,7 @@ NEVER execute destructive operations without confirmation.`
 }
 
 // src/tools-pricing.ts
-import { z as z23 } from "zod";
+import { z as z24 } from "zod";
 function registerAllPricingTools(server2, ctx) {
   const allTools = [...PRICING_TOOLS, ...PROJECTS_TOOLS];
   for (const tool of allTools) {
@@ -11809,8 +12009,8 @@ function buildPricingHandler(tool, ctx) {
           }
         ]
       };
-    } catch (err8) {
-      const message = err8 instanceof Error ? err8.message : String(err8);
+    } catch (err9) {
+      const message = err9 instanceof Error ? err9.message : String(err9);
       ctx.audit({
         tool_name: tool.name,
         ocs_method: "billing",
@@ -11834,19 +12034,19 @@ function buildZodSchema(schema) {
   for (const [key, prop] of Object.entries(properties)) {
     let field;
     if (prop.enum) {
-      field = z23.enum(prop.enum);
+      field = z24.enum(prop.enum);
     } else if (prop.type === "number") {
-      field = z23.number();
+      field = z24.number();
     } else if (prop.type === "boolean") {
-      field = z23.boolean();
+      field = z24.boolean();
     } else if (prop.type === "array") {
       if (prop.items?.type === "number") {
-        field = z23.array(z23.number());
+        field = z24.array(z24.number());
       } else {
-        field = z23.array(z23.string());
+        field = z24.array(z24.string());
       }
     } else {
-      field = z23.string();
+      field = z24.string();
     }
     const required = schema.required ?? [];
     if (!required.includes(key)) {
@@ -11861,7 +12061,7 @@ function buildZodSchema(schema) {
 }
 
 // src/tools-greenzone.ts
-import { z as z24 } from "zod";
+import { z as z25 } from "zod";
 
 // src/greenzone-whitelist.ts
 var STATE_KEY = "greenzone:state";
@@ -12138,10 +12338,10 @@ function resolvePortalBaseUrl(env) {
 function getGreenzoneKv(env) {
   return env.GREENZONE_STATE_KV ?? null;
 }
-function ok6(payload) {
+function ok7(payload) {
   return { content: [{ type: "text", text: JSON.stringify(payload, null, 2) }] };
 }
-function err7(message) {
+function err8(message) {
   return { isError: true, content: [{ type: "text", text: message }] };
 }
 var KAPTURE_UNAVAILABLE_MSG = "Execute each Kapture step using mcp__kapture__* tools in sequence. Ensure the Kapture extension is active in Chrome before invoking.";
@@ -12152,21 +12352,21 @@ function registerGreenzoneTools(server2, ctx) {
       title: "Greenzone Whitelist \u2014 Add",
       description: "Add a hostname and/or IP address to the Bridge4IP Greenzone whitelist. The Greenzone whitelist controls which hosts/IPs are exempt from data charging after a subscriber's bundle is depleted. This operates via browser automation (Kapture) against the OCS portal \u2014 no REST API exists for this surface. Provide `host` (e.g. 'example.com') and/or `ip` (e.g. '203.0.113.0/24'). At least one of host or ip must be provided. Returns Kapture step sequence for Claude Code to execute. Requires 'write' scope and Kapture running in Sam's Chrome.",
       inputSchema: {
-        host: z24.string().optional().describe("Hostname to whitelist (e.g. 'example.com')"),
-        ip: z24.string().optional().describe("IP address or CIDR to whitelist (e.g. '203.0.113.0/24')"),
-        dry_run: z24.boolean().optional().describe("If true, return the Kapture steps without executing portal automation")
+        host: z25.string().optional().describe("Hostname to whitelist (e.g. 'example.com')"),
+        ip: z25.string().optional().describe("IP address or CIDR to whitelist (e.g. '203.0.113.0/24')"),
+        dry_run: z25.boolean().optional().describe("If true, return the Kapture steps without executing portal automation")
       },
       annotations: { destructiveHint: true }
     },
     async (args) => {
       if (!ctx.props.scope.includes("write")) {
-        return err7(
+        return err8(
           `Scope denied: greenzone_whitelist_add requires 'write' scope. Your token has: [${ctx.props.scope.join(", ")}].`
         );
       }
       const { host, ip, dry_run } = args;
       if (!host && !ip) {
-        return err7("At least one of 'host' or 'ip' must be provided.");
+        return err8("At least one of 'host' or 'ip' must be provided.");
       }
       const portalBaseUrl = resolvePortalBaseUrl(ctx.env);
       const steps = [
@@ -12174,7 +12374,7 @@ function registerGreenzoneTools(server2, ctx) {
         ...ip ? buildAddIpSteps(portalBaseUrl, ip) : []
       ];
       if (dry_run) {
-        return ok6({
+        return ok7({
           dry_run: true,
           message: "Would execute the following Kapture steps against the OCS portal:",
           kapture_steps: steps,
@@ -12197,7 +12397,7 @@ function registerGreenzoneTools(server2, ctx) {
       } else {
         kvWarning = "GREENZONE_STATE_KV not bound in stdio mode \u2014 state not persisted.";
       }
-      return ok6({
+      return ok7({
         requires_kapture: true,
         message: "Execute the Kapture steps below to apply the change in the OCS portal. " + KAPTURE_UNAVAILABLE_MSG,
         kapture_steps: steps,
@@ -12213,21 +12413,21 @@ function registerGreenzoneTools(server2, ctx) {
       title: "Greenzone Whitelist \u2014 Remove",
       description: "Remove a hostname and/or IP address from the Bridge4IP Greenzone whitelist. This operates via browser automation (Kapture) against the OCS portal. Provide `host` and/or `ip` to remove \u2014 at least one required. Returns Kapture step sequence for Claude Code to execute. Requires 'write' scope and Kapture running in Sam's Chrome.",
       inputSchema: {
-        host: z24.string().optional().describe("Hostname to remove from whitelist"),
-        ip: z24.string().optional().describe("IP address or CIDR to remove from whitelist"),
-        dry_run: z24.boolean().optional().describe("If true, return the Kapture steps without executing portal automation")
+        host: z25.string().optional().describe("Hostname to remove from whitelist"),
+        ip: z25.string().optional().describe("IP address or CIDR to remove from whitelist"),
+        dry_run: z25.boolean().optional().describe("If true, return the Kapture steps without executing portal automation")
       },
       annotations: { destructiveHint: true }
     },
     async (args) => {
       if (!ctx.props.scope.includes("write")) {
-        return err7(
+        return err8(
           `Scope denied: greenzone_whitelist_remove requires 'write' scope. Your token has: [${ctx.props.scope.join(", ")}].`
         );
       }
       const { host, ip, dry_run } = args;
       if (!host && !ip) {
-        return err7("At least one of 'host' or 'ip' must be provided.");
+        return err8("At least one of 'host' or 'ip' must be provided.");
       }
       const portalBaseUrl = resolvePortalBaseUrl(ctx.env);
       const steps = [
@@ -12235,7 +12435,7 @@ function registerGreenzoneTools(server2, ctx) {
         ...ip ? buildRemoveIpSteps(portalBaseUrl, ip) : []
       ];
       if (dry_run) {
-        return ok6({
+        return ok7({
           dry_run: true,
           message: "Would execute the following Kapture steps to remove from OCS portal:",
           kapture_steps: steps,
@@ -12258,7 +12458,7 @@ function registerGreenzoneTools(server2, ctx) {
       } else {
         kvWarning = "GREENZONE_STATE_KV not bound in stdio mode \u2014 state not persisted.";
       }
-      return ok6({
+      return ok7({
         requires_kapture: true,
         message: "Execute the Kapture steps below to apply the removal in the OCS portal. " + KAPTURE_UNAVAILABLE_MSG,
         kapture_steps: steps,
@@ -12274,7 +12474,7 @@ function registerGreenzoneTools(server2, ctx) {
       title: "Greenzone Whitelist \u2014 List",
       description: "List current Greenzone whitelist entries from the KV cache. Returns all whitelisted hosts and IPs, when the state was last synced, and whether the last hourly reconciliation detected drift from the portal. This is a fast read from KV \u2014 no browser automation required. Use `from_portal: true` to trigger a live portal read via Kapture instead of KV. Requires 'read' scope.",
       inputSchema: {
-        from_portal: z24.boolean().optional().describe(
+        from_portal: z25.boolean().optional().describe(
           "When true, return Kapture steps to read live portal state instead of KV cache"
         )
       },
@@ -12282,14 +12482,14 @@ function registerGreenzoneTools(server2, ctx) {
     },
     async (args) => {
       if (!ctx.props.scope.includes("read")) {
-        return err7(
+        return err8(
           `Scope denied: greenzone_whitelist_list requires 'read' scope. Your token has: [${ctx.props.scope.join(", ")}].`
         );
       }
       const { from_portal } = args;
       if (from_portal) {
         const portalBaseUrl = resolvePortalBaseUrl(ctx.env);
-        return ok6({
+        return ok7({
           requires_kapture: true,
           message: "Execute the Kapture steps below to read live Greenzone whitelist state from the OCS portal.",
           kapture_steps: buildListSteps(portalBaseUrl),
@@ -12298,7 +12498,7 @@ function registerGreenzoneTools(server2, ctx) {
       }
       const kv = getGreenzoneKv(ctx.env);
       if (!kv) {
-        return ok6({
+        return ok7({
           source: "kv_cache",
           hosts: [],
           ips: [],
@@ -12310,7 +12510,7 @@ function registerGreenzoneTools(server2, ctx) {
       }
       try {
         const state = await readState(kv);
-        return ok6({
+        return ok7({
           source: "kv_cache",
           hosts: state.hosts,
           ips: state.ips,
@@ -12319,14 +12519,14 @@ function registerGreenzoneTools(server2, ctx) {
           reconcile_drift: state.reconcile_drift ?? false
         });
       } catch (e) {
-        return err7(`Failed to read Greenzone state from KV: ${e instanceof Error ? e.message : String(e)}`);
+        return err8(`Failed to read Greenzone state from KV: ${e instanceof Error ? e.message : String(e)}`);
       }
     }
   );
 }
 
 // src/tools-ui-agent-generic.ts
-import { z as z25 } from "zod";
+import { z as z26 } from "zod";
 var COST_PER_STEP_USD = 0.014;
 var SESSION_OVERHEAD_USD = 5e-3;
 function estimateCostUsd2(steps) {
@@ -12368,13 +12568,13 @@ function registerUiAgentGenericTools(server2, ctx, runtime) {
       title: "Dispatch Generic Browsing Agent",
       description: "Send a plain-language task to a hosted browsing agent, which drives a real browser on the open web \u2014 navigating pages, searching, extracting content, filling forms outside the OCS portal. Each run costs roughly $0.20-1.00 in model spend against your own BROWSER_USE_API_KEY, so treat it as the expensive last resort, not a lookup. Limited to CARRIER_BROWSER_USE_MAX_RUNS runs per CLI session (default 10). Params: `prompt` (1-4000 chars \u2014 name the target URL and the exact data or action), `max_steps` (1-30, default 15; prices the dry-run estimate only), `dry_run` (true returns only `estimated_cost_usd` and creates no session). Returns the finished result: unlike the hosted Worker, a local CLI has no background runtime, so this call blocks for the length of the run. Requires `write` scope. Do NOT use this to work out which Carrier tool answers a request \u2014 that is `carrier_ask`, which costs nothing. Do NOT use this for anything the OCS API already covers; every other tool here is faster, free, and audited.",
       inputSchema: {
-        prompt: z25.string().min(1).max(4e3).describe(
+        prompt: z26.string().min(1).max(4e3).describe(
           "Natural-language task description for the browsing agent. Be specific: include target URLs, data to extract, or actions to perform."
         ),
-        max_steps: z25.number().int().min(1).max(30).optional().describe(
+        max_steps: z26.number().int().min(1).max(30).optional().describe(
           "Advisory step budget (1\u201330, default 15). Prices the dry-run estimate; the hosted agent sets its own depth."
         ),
-        dry_run: z25.boolean().optional().describe(
+        dry_run: z26.boolean().optional().describe(
           "Preview cost estimate without dispatching. Returns estimated_cost_usd only \u2014 no browser session is created."
         )
       }
@@ -12417,8 +12617,8 @@ function registerUiAgentGenericTools(server2, ctx, runtime) {
       }
       try {
         runtime.budget.reserve();
-      } catch (err8) {
-        if (err8 instanceof SpendLimitError) {
+      } catch (err9) {
+        if (err9 instanceof SpendLimitError) {
           ctx.audit({
             tool_name: toolName,
             ocs_method: "[ui-agent:generic-ask]",
@@ -12437,13 +12637,13 @@ function registerUiAgentGenericTools(server2, ctx, runtime) {
                 type: "text",
                 text: JSON.stringify({
                   error: "run_limit_reached",
-                  message: err8.message
+                  message: err9.message
                 })
               }
             ]
           };
         }
-        throw err8;
+        throw err9;
       }
       try {
         const result2 = await runUiAgent(
@@ -12481,7 +12681,7 @@ function registerUiAgentGenericTools(server2, ctx, runtime) {
             }
           ]
         };
-      } catch (err8) {
+      } catch (err9) {
         ctx.audit({
           tool_name: toolName,
           ocs_method: "[ui-agent:generic-ask]",
@@ -12497,7 +12697,7 @@ function registerUiAgentGenericTools(server2, ctx, runtime) {
               type: "text",
               text: JSON.stringify({
                 error: "ui_agent_failed",
-                message: err8 instanceof Error ? err8.message : String(err8)
+                message: err9 instanceof Error ? err9.message : String(err9)
               })
             }
           ]
@@ -12511,7 +12711,7 @@ function registerUiAgentGenericTools(server2, ctx, runtime) {
       title: "Poll Browsing Agent Task Status",
       description: "Returns the current state of a browsing-agent task by `task_id`, including its result once finished. In the local CLI, ui_agent_ask already returns the finished result, so this is mainly for re-reading a task within the same session. Task records do not survive the CLI process exiting. Requires `read` scope.",
       inputSchema: {
-        task_id: z25.string().describe("Task ID returned by ui_agent_ask")
+        task_id: z26.string().describe("Task ID returned by ui_agent_ask")
       }
     },
     async (args) => {
@@ -12573,6 +12773,10 @@ var stdioEnv = {
   CARRIER_USERS: null,
   DOWNLOADS: null,
   STRIPE_SECRET_KEY: process.env.STRIPE_SECRET_KEY ?? "",
+  // Undefined (not "") when absent so `ORG ?? SECRET` falls back in the
+  // stripe-connect tools; an empty string would shadow the legacy key.
+  STRIPE_ORG_SECRET_KEY: process.env.STRIPE_ORG_SECRET_KEY,
+  STRIPE_PLATFORM_ACCOUNT_ID: process.env.STRIPE_PLATFORM_ACCOUNT_ID,
   // Browser Use Cloud. Read from the environment with a real fallback, the way
   // STRIPE_SECRET_KEY above and the wallet values below are — unlike the
   // MANUS_API_KEY this replaces, which was hardcoded to "" with no fallback at
@@ -12650,6 +12854,7 @@ registerScheduleAndUsageTools(server, toolCtx, uiAgentRuntime);
 registerAllUiAgentTools(server, toolCtx, uiAgentRuntime, portalOptIn);
 registerUiAgentAskTools(server, toolCtx, uiAgentRuntime);
 registerStripeConnectTools(server, { env: stdioEnv, props });
+registerAffiliateTools(server, { env: stdioEnv, props });
 registerWalletTools(server, { env: stdioEnv, props });
 registerGreenzoneTools(server, toolCtx);
 registerUiAgentGenericTools(server, toolCtx, uiAgentRuntime);