@centrali-io/centrali-mcp 5.2.0 → 5.4.0

package/dist/tools/describe.js

@@ -10,6 +10,7 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.registerDescribeTools = registerDescribeTools;
+const _register_js_1 = require("./_register.js");
 /**
  * Introspection tools that teach AI assistants the valid shapes, schemas,
  * and domain concepts for every Centrali API. These tools return static
@@ -20,7 +21,7 @@ exports.registerDescribeTools = registerDescribeTools;
  */
 function registerDescribeTools(server) {
     // ── Master describe tool ────────────────────────────────────────────
-    server.tool("describe_centrali", "Get an overview of all Centrali platform capabilities and API domains. Call this first to understand what Centrali can do and which describe_* tool to call for deeper schema details.", {}, () => __awaiter(this, void 0, void 0, function* () {
+    (0, _register_js_1.registerTool)(server, "describe_centrali", "Get an overview of all Centrali platform capabilities and API domains. Call this first to understand what Centrali can do and which describe_* tool to call for deeper schema details.", {}, () => __awaiter(this, void 0, void 0, function* () {
         return ({
             content: [
                 {
@@ -178,6 +179,22 @@ function registerDescribeTools(server) {
                                     "refresh_auth_provider_jwks",
                                 ],
                             },
+                            webhooks: {
+                                summary: "Outbound webhook subscriptions for record events. Centrali POSTs a signed JSON payload to your URL on record_created, record_updated, record_deleted, and records_bulk_created. Each dispatch is signed with HMAC-SHA256 under the subscription's whsec_ secret and every attempt is recorded in the delivery log for inspection and replay.",
+                                describeWith: "describe_webhooks",
+                                tools: [
+                                    "list_webhook_subscriptions",
+                                    "get_webhook_subscription",
+                                    "create_webhook_subscription",
+                                    "update_webhook_subscription",
+                                    "delete_webhook_subscription",
+                                    "rotate_webhook_subscription_secret",
+                                    "list_webhook_deliveries",
+                                    "get_webhook_delivery",
+                                    "retry_webhook_delivery",
+                                    "cancel_webhook_delivery",
+                                ],
+                            },
                             service_accounts: {
                                 summary: "Machine identities for backend-to-backend API access. Create service accounts with client_credentials OAuth2 flow, manage roles and groups for fine-grained permissions, and introspect access with permission scanning.",
                                 describeWith: "describe_service_accounts",
@@ -270,6 +287,7 @@ function registerDescribeTools(server) {
                                 "Anomaly insights": { sdk: true, mcp: true, console: true },
                                 "Search": { sdk: true, mcp: true, console: true },
                                 "Function runs (execution history)": { sdk: true, mcp: true, console: true },
+                                "Outbound webhooks": { sdk: true, mcp: true, console: true, note: "SDK namespace (client.webhookSubscriptions) and MCP tools wrap the REST surface including delivery replay" },
                                 "Service accounts & IAM": { sdk: false, mcp: true, console: true, note: "MCP tools for full SA lifecycle, roles, groups, and permission introspection" },
                                 "File uploads": { sdk: true, mcp: false, console: true, note: "SDK-only — use client.uploadFile() in app code" },
                             },
@@ -489,7 +507,7 @@ function registerDescribeTools(server) {
         });
     }));
     // ── Collections ────────────────────────────────────────────────────
-    server.tool("describe_collections", "Get the schema reference for Centrali collections. Explains field types, property shapes, constraints, and how to define data models.", {}, () => __awaiter(this, void 0, void 0, function* () {
+    (0, _register_js_1.registerTool)(server, "describe_collections", "Get the schema reference for Centrali collections. Explains field types, property shapes, constraints, and how to define data models.", {}, () => __awaiter(this, void 0, void 0, function* () {
         return ({
             content: [
                 {
@@ -567,7 +585,7 @@ function registerDescribeTools(server) {
         });
     }));
     // ── Records ────────────────────────────────────────────────────────
-    server.tool("describe_records", "Get the schema reference for Centrali record operations. Explains filter syntax, sort syntax, pagination, expand, and the data. prefix convention.", {}, () => __awaiter(this, void 0, void 0, function* () {
+    (0, _register_js_1.registerTool)(server, "describe_records", "Get the schema reference for Centrali record operations. Explains filter syntax, sort syntax, pagination, expand, and the data. prefix convention.", {}, () => __awaiter(this, void 0, void 0, function* () {
         return ({
             content: [
                 {
@@ -669,7 +687,7 @@ function registerDescribeTools(server) {
         });
     }));
     // ── Search ─────────────────────────────────────────────────────────
-    server.tool("describe_search", "Get the schema reference for Centrali full-text search. Explains search behavior, filtering, and result format.", {}, () => __awaiter(this, void 0, void 0, function* () {
+    (0, _register_js_1.registerTool)(server, "describe_search", "Get the schema reference for Centrali full-text search. Explains search behavior, filtering, and result format.", {}, () => __awaiter(this, void 0, void 0, function* () {
         return ({
             content: [
                 {
@@ -699,7 +717,7 @@ function registerDescribeTools(server) {
         });
     }));
     // ── Compute ────────────────────────────────────────────────────────
-    server.tool("describe_compute", "Get the schema reference for Centrali compute functions and triggers. Explains function types, trigger execution modes, and invocation patterns.", {}, () => __awaiter(this, void 0, void 0, function* () {
+    (0, _register_js_1.registerTool)(server, "describe_compute", "Get the schema reference for Centrali compute functions and triggers. Explains function types, trigger execution modes, and invocation patterns.", {}, () => __awaiter(this, void 0, void 0, function* () {
         return ({
             content: [
                 {
@@ -905,10 +923,12 @@ function registerDescribeTools(server) {
                             utilities: "api.uuid, api.formatDate, api.chunk, api.merge, api.math, api.evaluate, api.renderTemplate, api.log, api.logError, api.toCSV, api.toJSON",
                         },
                         secrets: {
-                            description: "Compute functions have NO built-in environment variables or secrets field.",
-                            recommended: "Wrap the function in an orchestration and use encrypted params on the compute step. Encrypted params are stored with AES-256-GCM at rest, decrypted at execution time, and arrive in triggerParams.",
-                            alternative: "Pass secrets in the trigger invocation payload via executionParams. This works but means the calling app is the courier for the secret.",
-                            encrypted_params_flow: "Create orchestration → add compute step with encryptedParams: { API_KEY: { value: 'secret', encrypt: true } } → at execution, API_KEY arrives decrypted in triggerParams.API_KEY",
+                            description: "Set encrypted params directly on any trigger's triggerMetadata.params. Shape at create/update: { paramName: { value: 'plaintext', encrypt: true } }. Stored AES-256-GCM at rest, decrypted at execution time, arrive in triggerParams[paramName] as plaintext.",
+                            works_on: "event-driven, scheduled, http-trigger, endpoint, and on-demand triggers — plus orchestration compute steps (same mechanism, scoped to a step via encryptedParams).",
+                            example_event_driven: "create_trigger({ executionType: 'event-driven', triggerMetadata: { eventType: 'record_created', recordSlug: 'stripe-events', params: { SLACK_WEBHOOK_URL: { value: 'https://hooks.slack.com/...', encrypt: true } } } }) — function accesses triggerParams.SLACK_WEBHOOK_URL as plaintext.",
+                            update_semantics: "To rotate a value: send { KEY: { value: 'new-plaintext', encrypt: true } }. To preserve an existing encrypted value without rotating: send { KEY: { value: '********', encrypted: true, keyVersion: N } } (use get_trigger to see the stored shape).",
+                            alternative: "Pass secrets in the invocation payload via executionParams — only when the caller is already holding the secret and you don't want to store it on the trigger.",
+                            orchestration_note: "Orchestration compute steps use encryptedParams with the same { value, encrypt: true } shape — equivalent mechanism, just scoped to a single step.",
                         },
                         async_execution: {
                             description: "Trigger invocation is ASYNCHRONOUS. invoke_trigger returns a job ID, not the execution result. There are two ways to get the result.",
@@ -946,7 +966,7 @@ function registerDescribeTools(server) {
                             "Use get_function_run or list_function_runs to check execution results after invoking a trigger",
                             "Use api.crypto.signJwt() for GitHub App, Google Cloud, or Azure AD authentication flows",
                             "Before creating functions that call external APIs, add the target domains with add_allowed_domain",
-                            "For secrets (API keys, credentials), use orchestration encrypted params — see the 'secrets' section above",
+                            "For secrets (API keys, credentials), set encrypted params on the trigger (triggerMetadata.params with { value, encrypt: true }) — see the 'secrets' section above",
                         ],
                     }, null, 2),
                 },
@@ -954,7 +974,7 @@ function registerDescribeTools(server) {
         });
     }));
     // ── Smart Queries ──────────────────────────────────────────────────
-    server.tool("describe_smart_queries", "Get the schema reference for Centrali smart queries. Explains parameterized queries, variable substitution, and execution.", {}, () => __awaiter(this, void 0, void 0, function* () {
+    (0, _register_js_1.registerTool)(server, "describe_smart_queries", "Get the schema reference for Centrali smart queries. Explains parameterized queries, variable substitution, and execution.", {}, () => __awaiter(this, void 0, void 0, function* () {
         return ({
             content: [
                 {
@@ -1028,7 +1048,7 @@ function registerDescribeTools(server) {
         });
     }));
     // ── Orchestrations ─────────────────────────────────────────────────
-    server.tool("describe_orchestrations", "Get the schema reference for Centrali orchestrations. Explains multi-step workflows, runs, steps, and execution model.", {}, () => __awaiter(this, void 0, void 0, function* () {
+    (0, _register_js_1.registerTool)(server, "describe_orchestrations", "Get the schema reference for Centrali orchestrations. Explains multi-step workflows, runs, steps, and execution model.", {}, () => __awaiter(this, void 0, void 0, function* () {
         return ({
             content: [
                 {
@@ -1197,8 +1217,141 @@ function registerDescribeTools(server) {
             ],
         });
     }));
+    // ── Webhooks ───────────────────────────────────────────────────────
+    (0, _register_js_1.registerTool)(server, "describe_webhooks", "Get the schema reference for Centrali outbound webhooks. Explains subscription shape, supported event types, signature verification, retry behavior, and delivery-status lifecycle.", {}, () => __awaiter(this, void 0, void 0, function* () {
+        return ({
+            content: [
+                {
+                    type: "text",
+                    text: JSON.stringify({
+                        domain: "Webhook Subscriptions",
+                        description: "Centrali emits record lifecycle events to external URLs. A subscription binds an HTTPS URL to one or more event types (optionally scoped to a subset of collections). Every dispatch is signed with HMAC-SHA256 and recorded in the delivery log — successes, retries, and terminal failures are all preserved.",
+                        subscription_shape: {
+                            id: "UUID",
+                            name: "string",
+                            url: "string — HTTPS URL that receives the POSTed payload",
+                            events: "RecordEventType[] — subscribed events",
+                            recordSlugs: "string[] — restrict to these collections. An empty array (or null on a read from an older row) means the subscription receives events for all collections. On update_webhook_subscription, pass [] to clear the restriction; omit the field to leave scope unchanged.",
+                            active: "boolean — when false, dispatches are skipped",
+                            secret: "string | undefined — `whsec_<base64url>` signing secret. Returned ONLY on create_webhook_subscription and rotate_webhook_subscription_secret; omitted on list/get.",
+                            createdAt: "ISO 8601 datetime",
+                            updatedAt: "ISO 8601 datetime",
+                        },
+                        event_types: {
+                            record_created: "A new record was inserted",
+                            record_updated: "An existing record was modified",
+                            record_deleted: "A record was deleted (soft or hard)",
+                            records_bulk_created: "Multiple records were inserted in a batch",
+                        },
+                        outbound_payload_shape: {
+                            description: "Body shape Centrali POSTs to the subscribed URL. JSON-serialized; the raw bytes of this body are what gets HMAC-signed into X-Signature.",
+                            event: "string — one of 'record_created' | 'record_updated' | 'record_deleted' | 'records_bulk_created'",
+                            workspaceSlug: "string — the workspace that produced the event",
+                            recordSlug: "string | undefined — the collection slug (absent on some bulk events)",
+                            recordId: "string — the affected record's UUID (or the batch marker for bulk events)",
+                            data: "object | undefined — the record snapshot for created/updated events (absent on deletes)",
+                            timestamp: "string | undefined — ISO 8601 time the event was emitted",
+                            createdBy: "string | undefined — actor user ID; populated on 'record_created'",
+                            updatedBy: "string | undefined — actor user ID; populated on 'record_updated'",
+                            deletedBy: "string | undefined — actor user ID; populated on 'record_deleted'",
+                            note: "Actor fields are per-event: a create delivery carries createdBy, an update carries updatedBy, a delete carries deletedBy. They are the source of truth for 'who did this' — don't infer it from `data`.",
+                        },
+                        signature: {
+                            header: "X-Signature",
+                            algorithm: "HMAC-SHA256",
+                            secret_format: "`whsec_<base64url>` — strip the `whsec_` prefix and base64url-decode the remainder to get the raw HMAC key bytes.",
+                            signed_value: "The raw JSON request body (the outbound_payload_shape above, as bytes). Verify before parsing.",
+                            output_encoding: "base64 (standard, not base64url)",
+                            verify_example: [
+                                "// Node.js verification",
+                                "const key = Buffer.from(secret.replace(/^whsec_/, ''), 'base64url');",
+                                "const expected = crypto.createHmac('sha256', key).update(rawBody).digest('base64');",
+                                "// then timing-safe compare expected to req.headers['x-signature']",
+                            ].join("\n"),
+                        },
+                        delivery_shape: {
+                            id: "UUID",
+                            webhookSubscriptionId: "UUID — parent subscription",
+                            event: "string — the event name that triggered the dispatch",
+                            status: "'success' | 'failed' | 'retrying'",
+                            attemptCount: "number — number of HTTP attempts made against the target",
+                            httpStatus: "number | null — the response status on the last attempt",
+                            lastError: "string | null — last error message; 'Cancelled by user' for cancelled retries",
+                            lastAttemptAt: "ISO 8601 datetime",
+                            nextAttemptAt: "ISO 8601 datetime | null — scheduled time of the next retry (null when terminal)",
+                            requestPayload: "object — only present on get_webhook_delivery (list_webhook_deliveries trims it for efficiency)",
+                            responseBody: "string | null — first 1000 chars of the target response; only present on get_webhook_delivery",
+                            replayedFrom: "UUID | null — delivery ID this row was replayed from; null for originals",
+                            createdAt: "ISO 8601 datetime",
+                            updatedAt: "ISO 8601 datetime",
+                        },
+                        retry_behavior: {
+                            description: "Failed deliveries retry with fixed backoffs. After exhausting all attempts the row terminates as 'failed'. Circuit-open rejections count as spent attempts.",
+                            max_attempts: 5,
+                            terminal_statuses: ["success", "failed"],
+                            replay: "retry_webhook_delivery inserts a new delivery row and preserves the original payload and signature. The retry counter restarts for the replay.",
+                            cancel: "cancel_webhook_delivery only works on 'retrying' rows. It flips the row to 'failed' with lastError='Cancelled by user' and clears nextAttemptAt.",
+                        },
+                        crud_tools: {
+                            create_webhook_subscription: {
+                                description: "Create a subscription. The signing secret is ONLY returned on this call — surface it to the user once.",
+                                required_params: ["name", "url", "events"],
+                                optional_params: ["recordSlugs", "active"],
+                                example: {
+                                    name: "Orders webhook",
+                                    url: "https://api.example.com/hooks/centrali",
+                                    events: ["record_created", "record_updated"],
+                                    recordSlugs: ["orders"],
+                                },
+                            },
+                            update_webhook_subscription: {
+                                description: "Update editable fields. The signing secret is server-managed — use rotate instead.",
+                                required_params: ["subscriptionId"],
+                                optional_params: ["name", "url", "events", "recordSlugs", "active"],
+                            },
+                            rotate_webhook_subscription_secret: {
+                                description: "Regenerate the signing secret. Immediate cutover — surface the new secret to the user; it is not returned on reads.",
+                                required_params: ["subscriptionId"],
+                            },
+                            delete_webhook_subscription: {
+                                description: "Delete a subscription. Historical delivery rows are retained for audit.",
+                                required_params: ["subscriptionId"],
+                            },
+                            list_webhook_deliveries: {
+                                description: "List deliveries for a subscription. Rows omit the request payload and response body — fetch them via get_webhook_delivery when needed.",
+                                required_params: ["subscriptionId"],
+                                optional_params: ["status", "since", "until", "limit", "offset"],
+                            },
+                            get_webhook_delivery: {
+                                description: "Get a single delivery including the full request payload and response body.",
+                                required_params: ["subscriptionId", "deliveryId"],
+                            },
+                            retry_webhook_delivery: {
+                                description: "Replay a delivery. Works on any non-retrying row (use cancel first if the row is still retrying).",
+                                required_params: ["deliveryId"],
+                                note: "deliveryId is the global delivery ID — it does NOT need to be nested under a subscription because the backend route is /webhook-subscriptions/deliveries/{id}/retry.",
+                            },
+                            cancel_webhook_delivery: {
+                                description: "Cancel a delivery that is currently retrying. Returns 409 if the row is not retrying or is mid-dispatch.",
+                                required_params: ["deliveryId"],
+                            },
+                        },
+                        tips: [
+                            "Store the `whsec_` secret the moment create_webhook_subscription or rotate_webhook_subscription_secret returns it — it is not retrievable afterwards.",
+                            "Use recordSlugs to keep webhook traffic scoped to the collections that matter — cuts noise and reduces retry pressure.",
+                            "The signed value is the raw request body, not a canonical JSON; verify signatures before parsing.",
+                            "get_webhook_delivery is the only tool that returns requestPayload and responseBody — list_webhook_deliveries trims them to keep responses manageable.",
+                            "Use since/until on list_webhook_deliveries to scope a forensic pass to a time window.",
+                            "retry_webhook_delivery preserves the original signature — pair it with a fixed bug on the receiver's side instead of regenerating payloads.",
+                            "cancel_webhook_delivery only works while the row is 'retrying'. If the dispatcher has already claimed the row the call returns 409; wait a second and try again.",
+                        ],
+                    }, null, 2),
+                },
+            ],
+        });
+    }));
     // ── Insights ───────────────────────────────────────────────────────
-    server.tool("describe_insights", "Get the schema reference for Centrali anomaly insights. Explains anomaly detection, severity levels, and the acknowledge/dismiss workflow.", {}, () => __awaiter(this, void 0, void 0, function* () {
+    (0, _register_js_1.registerTool)(server, "describe_insights", "Get the schema reference for Centrali anomaly insights. Explains anomaly detection, severity levels, and the acknowledge/dismiss workflow.", {}, () => __awaiter(this, void 0, void 0, function* () {
         return ({
             content: [
                 {
@@ -1241,7 +1394,7 @@ function registerDescribeTools(server) {
         });
     }));
     // ── Validation ─────────────────────────────────────────────────────
-    server.tool("describe_validation", "Get the schema reference for Centrali data quality validation. Explains scan types, suggestion lifecycle, and how to review/apply fixes.", {}, () => __awaiter(this, void 0, void 0, function* () {
+    (0, _register_js_1.registerTool)(server, "describe_validation", "Get the schema reference for Centrali data quality validation. Explains scan types, suggestion lifecycle, and how to review/apply fixes.", {}, () => __awaiter(this, void 0, void 0, function* () {
         return ({
             content: [
                 {
@@ -1288,7 +1441,7 @@ function registerDescribeTools(server) {
         });
     }));
     // ── Pages ──────────────────────────────────────────────────────────
-    server.tool("describe_pages", "Get the schema reference for Centrali pages. Explains page types, the definition structure, sections, blocks, and the publish lifecycle.", {}, () => __awaiter(this, void 0, void 0, function* () {
+    (0, _register_js_1.registerTool)(server, "describe_pages", "Get the schema reference for Centrali pages. Explains page types, the definition structure, sections, blocks, and the publish lifecycle.", {}, () => __awaiter(this, void 0, void 0, function* () {
         return ({
             content: [
                 {
@@ -1388,7 +1541,7 @@ function registerDescribeTools(server) {
         });
     }));
     // ── Page Definition Schema ─────────────────────────────────────────
-    server.tool("describe_page_definition", "Get the full schema for a page definition — the JSON structure passed to save_page_draft. Explains sections, blocks, data sources, and how they compose together.", {}, () => __awaiter(this, void 0, void 0, function* () {
+    (0, _register_js_1.registerTool)(server, "describe_page_definition", "Get the full schema for a page definition — the JSON structure passed to save_page_draft. Explains sections, blocks, data sources, and how they compose together.", {}, () => __awaiter(this, void 0, void 0, function* () {
         return ({
             content: [
                 {
@@ -1594,7 +1747,7 @@ function registerDescribeTools(server) {
         });
     }));
     // ── Page Block Types ───────────────────────────────────────────────
-    server.tool("describe_page_blocks", "Get all available page block types and their configuration shapes. Each block type has specific data source requirements and presentation options.", {}, () => __awaiter(this, void 0, void 0, function* () {
+    (0, _register_js_1.registerTool)(server, "describe_page_blocks", "Get all available page block types and their configuration shapes. Each block type has specific data source requirements and presentation options.", {}, () => __awaiter(this, void 0, void 0, function* () {
         return ({
             content: [
                 {
@@ -1876,7 +2029,7 @@ function registerDescribeTools(server) {
         });
     }));
     // ── Page Actions ───────────────────────────────────────────────────
-    server.tool("describe_page_actions", "Get all available page action types and their configuration shapes. Actions define interactive behaviors on blocks (button clicks, row clicks, form submissions).", {}, () => __awaiter(this, void 0, void 0, function* () {
+    (0, _register_js_1.registerTool)(server, "describe_page_actions", "Get all available page action types and their configuration shapes. Actions define interactive behaviors on blocks (button clicks, row clicks, form submissions).", {}, () => __awaiter(this, void 0, void 0, function* () {
         return ({
             content: [
                 {
@@ -1988,7 +2141,7 @@ function registerDescribeTools(server) {
         });
     }));
     // ── Navigation ─────────────────────────────────────────────────────
-    server.tool("describe_navigation", "Get the full schema for the workspace navigation configuration. Explains how to construct the sidebar/nav shell that wraps published pages — item types, grouping, branding, and limits.", {}, () => __awaiter(this, void 0, void 0, function* () {
+    (0, _register_js_1.registerTool)(server, "describe_navigation", "Get the full schema for the workspace navigation configuration. Explains how to construct the sidebar/nav shell that wraps published pages — item types, grouping, branding, and limits.", {}, () => __awaiter(this, void 0, void 0, function* () {
         return ({
             content: [
                 {
@@ -2104,7 +2257,7 @@ function registerDescribeTools(server) {
         });
     }));
     // ── Auth Providers (BYOT) ──────────────────────────────────────────
-    server.tool("describe_auth_providers", "Get the full reference for configuring external auth providers (BYOT — Bring Your Own Token). Explains how to connect Clerk, Auth0, Okta, or any OIDC provider so your app's users authenticate with their existing IdP while Centrali handles authorization.", {}, () => __awaiter(this, void 0, void 0, function* () {
+    (0, _register_js_1.registerTool)(server, "describe_auth_providers", "Get the full reference for configuring external auth providers (BYOT — Bring Your Own Token). Explains how to connect Clerk, Auth0, Okta, or any OIDC provider so your app's users authenticate with their existing IdP while Centrali handles authorization.", {}, () => __awaiter(this, void 0, void 0, function* () {
         return ({
             content: [
                 {
@@ -2223,7 +2376,7 @@ function registerDescribeTools(server) {
         });
     }));
     // ── Service Accounts & IAM ──────────────────────────────────────
-    server.tool("describe_service_accounts", "Get the full reference for managing service accounts, roles, groups, and permissions. Explains the complete IAM setup flow from creating a service account to granting fine-grained access.", {}, () => __awaiter(this, void 0, void 0, function* () {
+    (0, _register_js_1.registerTool)(server, "describe_service_accounts", "Get the full reference for managing service accounts, roles, groups, and permissions. Explains the complete IAM setup flow from creating a service account to granting fine-grained access.", {}, () => __awaiter(this, void 0, void 0, function* () {
         return ({
             content: [
                 {

package/dist/tools/insights.js

@@ -11,32 +11,9 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.registerInsightTools = registerInsightTools;
 const zod_1 = require("zod");
-function formatError(error, context) {
-    var _a, _b;
-    if (error && typeof error === "object") {
-        const e = error;
-        if ("message" in e) {
-            let msg = `Error ${context}`;
-            if ("code" in e || "status" in e) {
-                msg += `: [${(_b = (_a = e.code) !== null && _a !== void 0 ? _a : e.status) !== null && _b !== void 0 ? _b : "ERROR"}] ${e.message}`;
-            }
-            else {
-                msg += `: ${e.message}`;
-            }
-            if (Array.isArray(e.fieldErrors) && e.fieldErrors.length > 0) {
-                msg +=
-                    "\nField errors:\n" +
-                        e.fieldErrors
-                            .map((f) => `  ${f.field}: ${f.message}`)
-                            .join("\n");
-            }
-            return msg;
-        }
-    }
-    return `Error ${context}: ${error instanceof Error ? error.message : String(error)}`;
-}
+const _register_js_1 = require("./_register.js");
 function registerInsightTools(server, sdk) {
-    server.tool("list_insights", "List anomaly insights detected by Centrali's AI analysis. Insights flag unusual patterns in your data such as spikes, drops, or outliers.", {
+    (0, _register_js_1.registerTool)(server, "list_insights", "List anomaly insights detected by Centrali's AI analysis. Insights flag unusual patterns in your data such as spikes, drops, or outliers.", {
         recordSlug: zod_1.z
             .string()
             .optional()
@@ -65,12 +42,12 @@ function registerInsightTools(server, sdk) {
         }
         catch (error) {
             return {
-                content: [{ type: "text", text: formatError(error, "listing insights") }],
+                content: [{ type: "text", text: (0, _register_js_1.formatError)(error, "listing insights") }],
                 isError: true,
             };
         }
     }));
-    server.tool("get_insight", "Get full details of a single anomaly insight by ID.", {
+    (0, _register_js_1.registerTool)(server, "get_insight", "Get full details of a single anomaly insight by ID.", {
         insightId: zod_1.z.string().describe("The insight ID (UUID)"),
     }, (_a) => __awaiter(this, [_a], void 0, function* ({ insightId }) {
         try {
@@ -82,13 +59,13 @@ function registerInsightTools(server, sdk) {
         catch (error) {
             return {
                 content: [
-                    { type: "text", text: formatError(error, `getting insight '${insightId}'`) },
+                    { type: "text", text: (0, _register_js_1.formatError)(error, `getting insight '${insightId}'`) },
                 ],
                 isError: true,
             };
         }
     }));
-    server.tool("acknowledge_insight", "Mark an anomaly insight as acknowledged (reviewed/handled). The insight remains visible but is flagged as addressed.", {
+    (0, _register_js_1.registerTool)(server, "acknowledge_insight", "Mark an anomaly insight as acknowledged (reviewed/handled). The insight remains visible but is flagged as addressed.", {
         insightId: zod_1.z.string().describe("The insight ID (UUID) to acknowledge"),
     }, (_a) => __awaiter(this, [_a], void 0, function* ({ insightId }) {
         try {
@@ -102,14 +79,14 @@ function registerInsightTools(server, sdk) {
                 content: [
                     {
                         type: "text",
-                        text: formatError(error, `acknowledging insight '${insightId}'`),
+                        text: (0, _register_js_1.formatError)(error, `acknowledging insight '${insightId}'`),
                     },
                 ],
                 isError: true,
             };
         }
     }));
-    server.tool("dismiss_insight", "Dismiss an anomaly insight, marking it as a false positive or not relevant.", {
+    (0, _register_js_1.registerTool)(server, "dismiss_insight", "Dismiss an anomaly insight, marking it as a false positive or not relevant.", {
         insightId: zod_1.z.string().describe("The insight ID (UUID) to dismiss"),
     }, (_a) => __awaiter(this, [_a], void 0, function* ({ insightId }) {
         try {
@@ -121,13 +98,13 @@ function registerInsightTools(server, sdk) {
         catch (error) {
             return {
                 content: [
-                    { type: "text", text: formatError(error, `dismissing insight '${insightId}'`) },
+                    { type: "text", text: (0, _register_js_1.formatError)(error, `dismissing insight '${insightId}'`) },
                 ],
                 isError: true,
             };
         }
     }));
-    server.tool("get_insights_summary", "Get a summary of anomaly insights in the workspace — counts by status and severity. Optionally filter by collection.", {
+    (0, _register_js_1.registerTool)(server, "get_insights_summary", "Get a summary of anomaly insights in the workspace — counts by status and severity. Optionally filter by collection.", {
         recordSlug: zod_1.z
             .string()
             .optional()
@@ -142,13 +119,13 @@ function registerInsightTools(server, sdk) {
         catch (error) {
             return {
                 content: [
-                    { type: "text", text: formatError(error, "getting insights summary") },
+                    { type: "text", text: (0, _register_js_1.formatError)(error, "getting insights summary") },
                 ],
                 isError: true,
             };
         }
     }));
-    server.tool("trigger_anomaly_analysis", "Trigger AI-powered anomaly analysis for a collection. Starts a background analysis to detect unusual patterns. Check list_insights after the scan completes.", {
+    (0, _register_js_1.registerTool)(server, "trigger_anomaly_analysis", "Trigger AI-powered anomaly analysis for a collection. Starts a background analysis to detect unusual patterns. Check list_insights after the scan completes.", {
         recordSlug: zod_1.z.string().describe("The collection's record slug to analyze"),
     }, (_a) => __awaiter(this, [_a], void 0, function* ({ recordSlug }) {
         try {
@@ -162,7 +139,7 @@ function registerInsightTools(server, sdk) {
                 content: [
                     {
                         type: "text",
-                        text: formatError(error, `triggering anomaly analysis for '${recordSlug}'`),
+                        text: (0, _register_js_1.formatError)(error, `triggering anomaly analysis for '${recordSlug}'`),
                     },
                 ],
                 isError: true,