@databrainhq/mcp-server 0.3.0-rc.14 → 0.3.0-rc.15

package/dist/index.js

@@ -3,25 +3,32 @@ import {
   DEFAULT_POSTHOG_API_KEY,
   DEFAULT_POSTHOG_HOST,
   loadConfig
-} from "./chunk-S65KA3Z7.js";
+} from "./chunk-NXE2A4WV.js";
+import {
+  loadBrynCatalogue,
+  registerBrynTools,
+  registerBrynTurns,
+  registerCatalogueTurns
+} from "./chunk-V5JINLOA.js";
 import {
   registerAllPrompts,
   registerAllResources,
   registerAllTools
-} from "./chunk-UYFFFAYV.js";
+} from "./chunk-6MD7KOAU.js";
 import {
   DatabrainClient,
   MCP_SERVER_VERSION,
   logger
-} from "./chunk-AWICHHDU.js";
+} from "./chunk-4E57ZRZO.js";
 import "./chunk-2F7V6RZR.js";
+import "./chunk-3AH56XX7.js";
 
 // src/index.ts
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
 
 // src/server.ts
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
-function createServer(config) {
+function createServer(config, brynCatalogue) {
   const client = new DatabrainClient(config);
   const auth = client.getActiveAuth();
   let operatorBlurb;
@@ -82,6 +89,11 @@ Trigger keywords: embed, dashboard, analytics, Databrain, guest token, theme, fi
     }
   );
   registerAllTools(server, client);
+  if (brynCatalogue?.tools.length || brynCatalogue?.turns.length) {
+    registerBrynTools(server, client, brynCatalogue);
+    registerBrynTurns(server, client);
+    registerCatalogueTurns(server, client, brynCatalogue);
+  }
   registerAllResources(server);
   registerAllPrompts(server);
   return server;
@@ -91,6 +103,29 @@ Trigger keywords: embed, dashboard, analytics, Databrain, guest token, theme, fi
 import { createHash } from "crypto";
 import { instrument } from "@posthog/mcp";
 import { PostHog } from "posthog-node";
+var CONTENT_FREE_PROPERTIES = /* @__PURE__ */ new Set([
+  "$mcp_source",
+  "$mcp_duration_ms",
+  "$mcp_is_error",
+  "$mcp_tool_name",
+  "$mcp_tool_category",
+  "$mcp_server_name",
+  "$mcp_server_version",
+  "$mcp_protocol_version",
+  "$process_person_profile"
+]);
+var contentFreeMcpCapture = (event) => {
+  if (event.event === "$exception" || event.event === "$identify") return null;
+  const properties = Object.fromEntries(
+    Object.entries(event.properties).filter(([key, value]) => {
+      if (!CONTENT_FREE_PROPERTIES.has(key)) return false;
+      if (key === "$mcp_tool_name" || key === "$mcp_tool_category")
+        return typeof value === "string" && /^[a-z][a-z0-9_:-]{0,63}$/.test(value);
+      return true;
+    })
+  );
+  return { ...event, properties };
+};
 function distinctIdFromToken(token) {
   if (!token) return null;
   return createHash("sha256").update(token).digest("hex").slice(0, 32);
@@ -107,7 +142,8 @@ function setupAnalytics(server, config) {
   });
   instrument(server, posthog, {
     logger: (msg) => logger.debug(`[posthog] ${msg}`),
-    identify: { distinctId }
+    identify: { distinctId },
+    beforeSend: contentFreeMcpCapture
   });
   return posthog;
 }
@@ -120,12 +156,20 @@ function banner(msg) {
 async function main() {
   try {
     if (process.argv.includes("--http")) {
-      const { startHosted } = await import("./main-QCBVJSSR.js");
+      const { startHosted } = await import("./main-2FKQQLWX.js");
       await startHosted();
       return;
     }
     const config = loadConfig();
-    const server = createServer(config);
+    let brynCatalogue;
+    try {
+      brynCatalogue = await loadBrynCatalogue(new DatabrainClient(config));
+    } catch (error) {
+      logger.warn(
+        `Bryn tool discovery failed: ${error instanceof Error ? error.name : "unknown"}`
+      );
+    }
+    const server = createServer(config, brynCatalogue);
     const posthog = setupAnalytics(server, config);
     const transport = new StdioServerTransport();
     let shuttingDown = false;

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/index.ts","../src/server.ts","../src/utils/analytics.ts"],"sourcesContent":["import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';\nimport { createServer } from './server.js';\nimport { setupAnalytics } from './utils/analytics.js';\nimport { loadConfig } from './utils/config.js';\nimport { logger } from './utils/logger.js';\nimport { MCP_SERVER_VERSION } from './version.js';\n\nfunction banner(msg: string): void {\n  process.stderr.write(`[databrain] ${msg}\\n`);\n}\n\nasync function main(): Promise<void> {\n  try {\n    if (process.argv.includes('--http')) {\n      const { startHosted } = await import('./hosted/main.js');\n      await startHosted();\n      return;\n    }\n    const config = loadConfig();\n    const server = createServer(config);\n    const posthog = setupAnalytics(server, config);\n    const transport = new StdioServerTransport();\n\n    let shuttingDown = false;\n    const flushAnalytics = async (): Promise<void> => {\n      if (shuttingDown || !posthog) return;\n      shuttingDown = true;\n      await posthog.shutdown();\n    };\n    // StdioServerTransport never observes stdin ending, so the MCP client\n    // disconnecting drains the event loop and exits the process without ever\n    // calling transport/server onclose. `beforeExit` is what actually fires\n    // in that path; posthog-node's flush timers are unref'd so they don't\n    // keep the process alive on their own.\n    process.on('beforeExit', () => void flushAnalytics());\n    process.on(\n      'SIGINT',\n      () => void flushAnalytics().then(() => process.exit(0))\n    );\n    process.on(\n      'SIGTERM',\n      () => void flushAnalytics().then(() => process.exit(0))\n    );\n\n    await server.connect(transport);\n    banner(`v${MCP_SERVER_VERSION} ready`);\n  } catch (error) {\n    // An Error serializes to {} in JSON, which left a self-hosted operator with no\n    // reason. Config errors name the setting, never its value; the logger also\n    // scrubs registered secrets.\n    logger.error(\n      `Failed to start server: ${error instanceof Error ? error.message : String(error)}`\n    );\n    process.exit(1);\n  }\n}\n\nmain();\n","import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';\nimport { DatabrainClient } from './client/databrain-client.js';\nimport { registerAllPrompts } from './prompts/registry.js';\nimport { registerAllResources } from './resources/registry.js';\nimport { registerAllTools } from './tools/registry.js';\nimport type { Config } from './utils/config.js';\nimport { MCP_SERVER_VERSION } from './version.js';\n\nexport function createServer(config: Config): McpServer {\n  const client = new DatabrainClient(config);\n  const auth = client.getActiveAuth();\n  let operatorBlurb: string;\n  if (auth.source === 'oauth-client-credentials') {\n    operatorBlurb =\n      'OPERATOR IDENTITY: OAuth client-credentials mode is configured for org-level calls. Tokens identify a service application, not a human operator. The backend must validate the token and map its issuer/subject to an authorized principal. Configuration alone does not prove backend acceptance. Do NOT ask the user for credentials or tokens.\\n\\n';\n  } else if (auth.source === 'service-token') {\n    operatorBlurb =\n      'OPERATOR IDENTITY: service-token mode. Calls are authenticated at org level — actions in the audit log are tagged actor=system, not a specific user. Per-user identity binding will be added when the OAuth-based login flow ships. Do NOT ask the user for credentials or tokens.\\n\\n';\n  } else if (auth.source === 'api-token') {\n    operatorBlurb =\n      'OPERATOR IDENTITY: API-token-only mode. A per-data-app API token is configured, but DATABRAIN_SERVICE_TOKEN is not. Embedding operations can use the configured API token, but org-level setup tools require DATABRAIN_SERVICE_TOKEN in the MCP config.\\n\\n';\n  } else {\n    operatorBlurb =\n      'OPERATOR IDENTITY: no usable token is configured. The MCP server normally refuses this config at startup. Ask the user to add DATABRAIN_SERVICE_TOKEN or DATABRAIN_API_TOKEN to the MCP config before proceeding.\\n\\n';\n  }\n\n  const serviceTokenStatus = config.oauth\n    ? 'OAuth client credentials are configured for service-level operations. A configured DATABRAIN_SERVICE_TOKEN is used only if token acquisition fails.'\n    : config.serviceToken\n      ? 'This MCP server has DATABRAIN_SERVICE_TOKEN configured; never ask the user for it.'\n      : 'DATABRAIN_SERVICE_TOKEN is not configured. Ask the user to add it to the MCP config only if org-level setup is needed.';\n  const apiTokenStatus = client.hasApiToken()\n    ? 'This MCP server has a per-data-app API token configured.'\n    : config.oauth\n      ? 'Created/rotated via create_api_token or rotate_api_token using configured OAuth service credentials, once the backend supports them.'\n      : 'Created/rotated via create_api_token or rotate_api_token during setup when DATABRAIN_SERVICE_TOKEN is available.';\n\n  const server = new McpServer(\n    {\n      name: 'databrain',\n      version: MCP_SERVER_VERSION,\n      description:\n        'Databrain MCP Server — build customer-facing embedded analytics AND run internal analytics on your own data. Supports embed setup, semantic-layer maintenance, natural-language querying, SQL→metric creation (embedded production metrics and unpublished internal workspace metrics), theming, filters, permissions, and guest token generation.',\n    },\n    {\n      instructions:\n        operatorBlurb +\n        'Databrain uses two token types — never confuse them:\\n' +\n        `• SERVICE TOKEN (DATABRAIN_SERVICE_TOKEN): org-level, pre-configured in MCP server config. Used for: list_datasources, discover_datasource_schema, sync_datasource, list_datamarts, create_datamart, list_workspaces, list_data_apps, list_tenants, create_data_app, list_api_tokens, create_api_token, rotate_api_token, list_dashboards (workspace scope), ask_question, get_semantic_layer, update_semantic_layer, start_semantic_layer_generation, get_semantic_layer_generation_status, custom_chart_validate (server check), custom_chart_upload, list_custom_charts, publish_custom_chart. ${serviceTokenStatus}\\n` +\n        `• API TOKEN (per data app): scoped to one data app, used for embedding operations (list_embeds, get_embed_details, create_embed, update_embed, generate_guest_token), data-app scoped dashboard listing, widget CRUD/metric creation through guest-token APIs, and list_scheduled_reports. ${apiTokenStatus}\\n\\n` +\n        'FIRST classify the request before calling tools — this avoids wasted turns:\\n' +\n        '• (A) EMBEDDING: putting Databrain dashboards/charts in front of YOUR customers (data apps, embeds, guest tokens, per-customer dashboard widgets). Needs an API token and usually a clientId.\\n' +\n        '• (B) INTERNAL ANALYTICS: exploring your own data or migrating SQL into your own Databrain metrics for internal use. Workspace-scoped, uses the service token, NO clientId. Creating an unpublished workspace metric (create_workspace_metric) lives here — it is NOT embedding.\\n\\n' +\n        \"5 core use cases — match the user's scenario to the right prompt:\\n\" +\n        '1. Embed existing dashboard → prompt: embed-existing-dashboard (list_data_apps → create_api_token → list_dashboards → create_embed → generate_guest_token → generate_embed_code)\\n' +\n        '2. Blank dashboard per client → prompt: embed-blank-dashboard (list_data_apps → list_datamarts → create_embed with clientId per client → generate_guest_token → generate_embed_code)\\n' +\n        '3. Explore & query data → prompt: query-data (list_datamarts → get_semantic_layer → if empty, auto-generate descriptions with update_semantic_layer or use populate-semantic-layer prompt → ask_question)\\n' +\n        '4. SQL → embedded production metric on a customer dashboard (EMBEDDING, requires clientId) → prompt: sql-to-metric-migration (validate_metric_spec → create_or_update_metric_from_query dry_run → apply only with explicit production confirmation)\\n' +\n        '5. SQL → unpublished workspace metric (INTERNAL ANALYTICS, no clientId, not attached to any dashboard) → prompt: sql-to-workspace-metric (discover_datasource_schema → create_workspace_metric dry_run → apply with explicit confirmation)\\n\\n' +\n        'Production safety: OAuth may not be available yet. In service-token mode, writes are actor=system. For create_datamart and create_or_update_metric_from_query, dry_run is the default. Apply requires confirm=\"APPLY_TO_PRODUCTION\" after the user reviews the plan. Widget validation and mutation tools must verify the resolved embed is tenant-scoped for the requested clientId; if not, they must refuse to touch it as a likely production/data-app dashboard. Do not apply from a vague request.\\n\\n' +\n        'Semantic models: search_semantic_model, get_semantic_entity, propose_semantic_change, apply_semantic_change, and eval_semantic_model use the configured service credential and datamartId from list_datamarts. For a v2 model, use these tools instead of update_semantic_layer. Search and inspect first. Propose a change, review its errors and plan, then evaluate its returned source. Apply that exact source with its expected_content_hash only after the user supplies confirm=\"APPLY_TO_PRODUCTION\" and dry_run=false. Never supply confirmation yourself. Apply changes the live model for every consumer. A conflict requires a new proposal and review. dry_run defaults to true and never writes.\\n\\n' +\n        'Custom chart types (chart type custom:<key>): custom_chart_scaffold returns a draft and project files. In hosted agents, custom_chart_edit sends the description and draft to Chart studio Bryn when installed; if unavailable, edit draft.code yourself. Pass chartTs, manifest, bundleCss and iconSvg for server-side compilation without files or imports. custom_chart_preview shows validated draft code on bounded real sample rows without saving. custom_chart_validate checks a manifest and bundle without persisting, custom_chart_upload creates the chart or a preview version only with mode=\"apply\" and confirm=\"APPLY_TO_PRODUCTION\" (dry_run shows the plan first), and publish_custom_chart makes a version live for every builder only with the same confirmation because every dashboard using that key re-renders. For local projects only, build with `databrain custom-chart build`. A custom metric uses chartType=\"custom:<key>\" and customChart={key,bindings,options}; its MCP App tile loads only the company published bundle in the app/embed sandbox. Hosts without MCP Apps show rows and a clear fallback.\\n\\n' +\n        'Infrastructure creation is intentionally narrow in MCP: datasource and workspace creation still happen outside this workflow; sync_datasource and dry-run/apply create_datamart are available. The semantic layer is populated and maintained via MCP tools (get_semantic_layer, update_semantic_layer, start_semantic_layer_generation, get_semantic_layer_generation_status). When the semantic layer is empty, use these tools — do NOT send the user to the UI for semantic metadata.\\n\\n' +\n        'After embed setup, customize with: brand-my-embed prompt for theming. Use update_embed (body passthrough) for filters, localization, and permissions.\\n' +\n        'Use generate_guest_token for frontend auth and generate_embed_code for framework snippets.\\n' +\n        'For advanced embed configuration (UI toggles, filters, i18n), use update_embed with a body passthrough.\\n' +\n        'To diagnose embed issues, use get_embed_details and reason about the response.\\n' +\n        'Do NOT ask the user for any tokens — manage them via MCP tools.\\n\\n' +\n        'IMPORTANT — accessSettings defaults:\\n' +\n        'When calling create_embed, only pass accessSettings: { datamartName: \"...\" } plus any flags the user explicitly wants enabled. For multi-tenant dashboard embeds, also pass clientId. The tool auto-fills all required isAllow* fields with secure defaults (all false). Do NOT guess or enumerate accessSettings fields.\\n\\n' +\n        'IMPORTANT — create_data_app does NOT accept workspaceName. Only pass { name: \"...\" }.\\n\\n' +\n        'IMPORTANT — Be interactive. Present results from each tool call and ask the user before proceeding to the next step. Never batch multiple mutating operations without user confirmation.\\n' +\n        'Trigger keywords: embed, dashboard, analytics, Databrain, guest token, theme, filters, permissions, datasource, datamart, workspace, metric creation.',\n    }\n  );\n\n  registerAllTools(server, client);\n  registerAllResources(server);\n  registerAllPrompts(server);\n\n  return server;\n}\n","import { createHash } from 'node:crypto';\nimport type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';\nimport { instrument } from '@posthog/mcp';\nimport { PostHog } from 'posthog-node';\nimport type { Config } from './config.js';\nimport { DEFAULT_POSTHOG_API_KEY, DEFAULT_POSTHOG_HOST } from './config.js';\nimport { logger } from './logger.js';\n\n// Derives a stable per-install distinct_id from the active auth token without\n// ever sending the token itself to PostHog.\nfunction distinctIdFromToken(token: string | undefined): string | null {\n  if (!token) return null;\n  return createHash('sha256').update(token).digest('hex').slice(0, 32);\n}\n\n/**\n * Wires PostHog MCP analytics (tool calls, initialize, exceptions) into the\n * server. Always on — not user-configurable. Returns the PostHog client so\n * the caller can flush/shutdown it on exit, or null when no auth token is\n * configured yet (nothing to derive a distinct_id from).\n */\nexport function setupAnalytics(\n  server: McpServer,\n  config: Config\n): PostHog | null {\n  const distinctId = distinctIdFromToken(\n    config.serviceToken || config.apiToken\n  );\n  if (!distinctId) {\n    return null;\n  }\n\n  const posthog = new PostHog(config.posthogApiKey || DEFAULT_POSTHOG_API_KEY, {\n    host: config.posthogHost || DEFAULT_POSTHOG_HOST,\n  });\n\n  instrument(server, posthog, {\n    logger: (msg) => logger.debug(`[posthog] ${msg}`),\n    identify: { distinctId },\n  });\n\n  return posthog;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;AAAA,SAAS,4BAA4B;;;ACArC,SAAS,iBAAiB;AAQnB,SAAS,aAAa,QAA2B;AACtD,QAAM,SAAS,IAAI,gBAAgB,MAAM;AACzC,QAAM,OAAO,OAAO,cAAc;AAClC,MAAI;AACJ,MAAI,KAAK,WAAW,4BAA4B;AAC9C,oBACE;AAAA,EACJ,WAAW,KAAK,WAAW,iBAAiB;AAC1C,oBACE;AAAA,EACJ,WAAW,KAAK,WAAW,aAAa;AACtC,oBACE;AAAA,EACJ,OAAO;AACL,oBACE;AAAA,EACJ;AAEA,QAAM,qBAAqB,OAAO,QAC9B,wJACA,OAAO,eACL,uFACA;AACN,QAAM,iBAAiB,OAAO,YAAY,IACtC,6DACA,OAAO,QACL,yIACA;AAEN,QAAM,SAAS,IAAI;AAAA,IACjB;AAAA,MACE,MAAM;AAAA,MACN,SAAS;AAAA,MACT,aACE;AAAA,IACJ;AAAA,IACA;AAAA,MACE,cACE,gBACA;AAAA,ykBACqkB,kBAAkB;AAAA,kSACzT,cAAc;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAwBhT;AAAA,EACF;AAEA,mBAAiB,QAAQ,MAAM;AAC/B,uBAAqB,MAAM;AAC3B,qBAAmB,MAAM;AAEzB,SAAO;AACT;;;ACjFA,SAAS,kBAAkB;AAE3B,SAAS,kBAAkB;AAC3B,SAAS,eAAe;AAOxB,SAAS,oBAAoB,OAA0C;AACrE,MAAI,CAAC,MAAO,QAAO;AACnB,SAAO,WAAW,QAAQ,EAAE,OAAO,KAAK,EAAE,OAAO,KAAK,EAAE,MAAM,GAAG,EAAE;AACrE;AAQO,SAAS,eACd,QACA,QACgB;AAChB,QAAM,aAAa;AAAA,IACjB,OAAO,gBAAgB,OAAO;AAAA,EAChC;AACA,MAAI,CAAC,YAAY;AACf,WAAO;AAAA,EACT;AAEA,QAAM,UAAU,IAAI,QAAQ,OAAO,iBAAiB,yBAAyB;AAAA,IAC3E,MAAM,OAAO,eAAe;AAAA,EAC9B,CAAC;AAED,aAAW,QAAQ,SAAS;AAAA,IAC1B,QAAQ,CAAC,QAAQ,OAAO,MAAM,aAAa,GAAG,EAAE;AAAA,IAChD,UAAU,EAAE,WAAW;AAAA,EACzB,CAAC;AAED,SAAO;AACT;;;AFnCA,SAAS,OAAO,KAAmB;AACjC,UAAQ,OAAO,MAAM,eAAe,GAAG;AAAA,CAAI;AAC7C;AAEA,eAAe,OAAsB;AACnC,MAAI;AACF,QAAI,QAAQ,KAAK,SAAS,QAAQ,GAAG;AACnC,YAAM,EAAE,YAAY,IAAI,MAAM,OAAO,oBAAkB;AACvD,YAAM,YAAY;AAClB;AAAA,IACF;AACA,UAAM,SAAS,WAAW;AAC1B,UAAM,SAAS,aAAa,MAAM;AAClC,UAAM,UAAU,eAAe,QAAQ,MAAM;AAC7C,UAAM,YAAY,IAAI,qBAAqB;AAE3C,QAAI,eAAe;AACnB,UAAM,iBAAiB,YAA2B;AAChD,UAAI,gBAAgB,CAAC,QAAS;AAC9B,qBAAe;AACf,YAAM,QAAQ,SAAS;AAAA,IACzB;AAMA,YAAQ,GAAG,cAAc,MAAM,KAAK,eAAe,CAAC;AACpD,YAAQ;AAAA,MACN;AAAA,MACA,MAAM,KAAK,eAAe,EAAE,KAAK,MAAM,QAAQ,KAAK,CAAC,CAAC;AAAA,IACxD;AACA,YAAQ;AAAA,MACN;AAAA,MACA,MAAM,KAAK,eAAe,EAAE,KAAK,MAAM,QAAQ,KAAK,CAAC,CAAC;AAAA,IACxD;AAEA,UAAM,OAAO,QAAQ,SAAS;AAC9B,WAAO,IAAI,kBAAkB,QAAQ;AAAA,EACvC,SAAS,OAAO;AAId,WAAO;AAAA,MACL,2BAA2B,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;AAAA,IACnF;AACA,YAAQ,KAAK,CAAC;AAAA,EAChB;AACF;AAEA,KAAK;","names":[]}
+{"version":3,"sources":["../src/index.ts","../src/server.ts","../src/utils/analytics.ts"],"sourcesContent":["import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';\nimport { type BrynCatalogue, loadBrynCatalogue } from './bryn/catalogue.js';\nimport { DatabrainClient } from './client/databrain-client.js';\nimport { createServer } from './server.js';\nimport { setupAnalytics } from './utils/analytics.js';\nimport { loadConfig } from './utils/config.js';\nimport { logger } from './utils/logger.js';\nimport { MCP_SERVER_VERSION } from './version.js';\n\nfunction banner(msg: string): void {\n  process.stderr.write(`[databrain] ${msg}\\n`);\n}\n\nasync function main(): Promise<void> {\n  try {\n    if (process.argv.includes('--http')) {\n      const { startHosted } = await import('./hosted/main.js');\n      await startHosted();\n      return;\n    }\n    const config = loadConfig();\n    let brynCatalogue: BrynCatalogue | undefined;\n    try {\n      brynCatalogue = await loadBrynCatalogue(new DatabrainClient(config));\n    } catch (error) {\n      logger.warn(\n        `Bryn tool discovery failed: ${error instanceof Error ? error.name : 'unknown'}`\n      );\n    }\n    const server = createServer(config, brynCatalogue);\n    const posthog = setupAnalytics(server, config);\n    const transport = new StdioServerTransport();\n\n    let shuttingDown = false;\n    const flushAnalytics = async (): Promise<void> => {\n      if (shuttingDown || !posthog) return;\n      shuttingDown = true;\n      await posthog.shutdown();\n    };\n    // StdioServerTransport never observes stdin ending, so the MCP client\n    // disconnecting drains the event loop and exits the process without ever\n    // calling transport/server onclose. `beforeExit` is what actually fires\n    // in that path; posthog-node's flush timers are unref'd so they don't\n    // keep the process alive on their own.\n    process.on('beforeExit', () => void flushAnalytics());\n    process.on(\n      'SIGINT',\n      () => void flushAnalytics().then(() => process.exit(0))\n    );\n    process.on(\n      'SIGTERM',\n      () => void flushAnalytics().then(() => process.exit(0))\n    );\n\n    await server.connect(transport);\n    banner(`v${MCP_SERVER_VERSION} ready`);\n  } catch (error) {\n    // An Error serializes to {} in JSON, which left a self-hosted operator with no\n    // reason. Config errors name the setting, never its value; the logger also\n    // scrubs registered secrets.\n    logger.error(\n      `Failed to start server: ${error instanceof Error ? error.message : String(error)}`\n    );\n    process.exit(1);\n  }\n}\n\nmain();\n","import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';\nimport type { BrynCatalogue } from './bryn/catalogue.js';\nimport { registerCatalogueTurns } from './bryn/catalogueTurns.js';\nimport { registerBrynTools } from './bryn/register.js';\nimport { registerBrynTurns } from './bryn/turns.js';\nimport { DatabrainClient } from './client/databrain-client.js';\nimport { registerAllPrompts } from './prompts/registry.js';\nimport { registerAllResources } from './resources/registry.js';\nimport { registerAllTools } from './tools/registry.js';\nimport type { Config } from './utils/config.js';\nimport { MCP_SERVER_VERSION } from './version.js';\n\nexport function createServer(\n  config: Config,\n  brynCatalogue?: BrynCatalogue\n): McpServer {\n  const client = new DatabrainClient(config);\n  const auth = client.getActiveAuth();\n  let operatorBlurb: string;\n  if (auth.source === 'oauth-client-credentials') {\n    operatorBlurb =\n      'OPERATOR IDENTITY: OAuth client-credentials mode is configured for org-level calls. Tokens identify a service application, not a human operator. The backend must validate the token and map its issuer/subject to an authorized principal. Configuration alone does not prove backend acceptance. Do NOT ask the user for credentials or tokens.\\n\\n';\n  } else if (auth.source === 'service-token') {\n    operatorBlurb =\n      'OPERATOR IDENTITY: service-token mode. Calls are authenticated at org level — actions in the audit log are tagged actor=system, not a specific user. Per-user identity binding will be added when the OAuth-based login flow ships. Do NOT ask the user for credentials or tokens.\\n\\n';\n  } else if (auth.source === 'api-token') {\n    operatorBlurb =\n      'OPERATOR IDENTITY: API-token-only mode. A per-data-app API token is configured, but DATABRAIN_SERVICE_TOKEN is not. Embedding operations can use the configured API token, but org-level setup tools require DATABRAIN_SERVICE_TOKEN in the MCP config.\\n\\n';\n  } else {\n    operatorBlurb =\n      'OPERATOR IDENTITY: no usable token is configured. The MCP server normally refuses this config at startup. Ask the user to add DATABRAIN_SERVICE_TOKEN or DATABRAIN_API_TOKEN to the MCP config before proceeding.\\n\\n';\n  }\n\n  const serviceTokenStatus = config.oauth\n    ? 'OAuth client credentials are configured for service-level operations. A configured DATABRAIN_SERVICE_TOKEN is used only if token acquisition fails.'\n    : config.serviceToken\n      ? 'This MCP server has DATABRAIN_SERVICE_TOKEN configured; never ask the user for it.'\n      : 'DATABRAIN_SERVICE_TOKEN is not configured. Ask the user to add it to the MCP config only if org-level setup is needed.';\n  const apiTokenStatus = client.hasApiToken()\n    ? 'This MCP server has a per-data-app API token configured.'\n    : config.oauth\n      ? 'Created/rotated via create_api_token or rotate_api_token using configured OAuth service credentials, once the backend supports them.'\n      : 'Created/rotated via create_api_token or rotate_api_token during setup when DATABRAIN_SERVICE_TOKEN is available.';\n\n  const server = new McpServer(\n    {\n      name: 'databrain',\n      version: MCP_SERVER_VERSION,\n      description:\n        'Databrain MCP Server — build customer-facing embedded analytics AND run internal analytics on your own data. Supports embed setup, semantic-layer maintenance, natural-language querying, SQL→metric creation (embedded production metrics and unpublished internal workspace metrics), theming, filters, permissions, and guest token generation.',\n    },\n    {\n      instructions:\n        operatorBlurb +\n        'Databrain uses two token types — never confuse them:\\n' +\n        `• SERVICE TOKEN (DATABRAIN_SERVICE_TOKEN): org-level, pre-configured in MCP server config. Used for: list_datasources, discover_datasource_schema, sync_datasource, list_datamarts, create_datamart, list_workspaces, list_data_apps, list_tenants, create_data_app, list_api_tokens, create_api_token, rotate_api_token, list_dashboards (workspace scope), ask_question, get_semantic_layer, update_semantic_layer, start_semantic_layer_generation, get_semantic_layer_generation_status, custom_chart_validate (server check), custom_chart_upload, list_custom_charts, publish_custom_chart. ${serviceTokenStatus}\\n` +\n        `• API TOKEN (per data app): scoped to one data app, used for embedding operations (list_embeds, get_embed_details, create_embed, update_embed, generate_guest_token), data-app scoped dashboard listing, widget CRUD/metric creation through guest-token APIs, and list_scheduled_reports. ${apiTokenStatus}\\n\\n` +\n        'FIRST classify the request before calling tools — this avoids wasted turns:\\n' +\n        '• (A) EMBEDDING: putting Databrain dashboards/charts in front of YOUR customers (data apps, embeds, guest tokens, per-customer dashboard widgets). Needs an API token and usually a clientId.\\n' +\n        '• (B) INTERNAL ANALYTICS: exploring your own data or migrating SQL into your own Databrain metrics for internal use. Workspace-scoped, uses the service token, NO clientId. Creating an unpublished workspace metric (create_workspace_metric) lives here — it is NOT embedding.\\n\\n' +\n        \"5 core use cases — match the user's scenario to the right prompt:\\n\" +\n        '1. Embed existing dashboard → prompt: embed-existing-dashboard (list_data_apps → create_api_token → list_dashboards → create_embed → generate_guest_token → generate_embed_code)\\n' +\n        '2. Blank dashboard per client → prompt: embed-blank-dashboard (list_data_apps → list_datamarts → create_embed with clientId per client → generate_guest_token → generate_embed_code)\\n' +\n        '3. Explore & query data → prompt: query-data (list_datamarts → get_semantic_layer → if empty, auto-generate descriptions with update_semantic_layer or use populate-semantic-layer prompt → ask_question)\\n' +\n        '4. SQL → embedded production metric on a customer dashboard (EMBEDDING, requires clientId) → prompt: sql-to-metric-migration (validate_metric_spec → create_or_update_metric_from_query dry_run → apply only with explicit production confirmation)\\n' +\n        '5. SQL → unpublished workspace metric (INTERNAL ANALYTICS, no clientId, not attached to any dashboard) → prompt: sql-to-workspace-metric (discover_datasource_schema → create_workspace_metric dry_run → apply with explicit confirmation)\\n\\n' +\n        'Production safety: OAuth may not be available yet. In service-token mode, writes are actor=system. For create_datamart and create_or_update_metric_from_query, dry_run is the default. Apply requires confirm=\"APPLY_TO_PRODUCTION\" after the user reviews the plan. Widget validation and mutation tools must verify the resolved embed is tenant-scoped for the requested clientId; if not, they must refuse to touch it as a likely production/data-app dashboard. Do not apply from a vague request.\\n\\n' +\n        'Semantic models: search_semantic_model, get_semantic_entity, propose_semantic_change, apply_semantic_change, and eval_semantic_model use the configured service credential and datamartId from list_datamarts. For a v2 model, use these tools instead of update_semantic_layer. Search and inspect first. Propose a change, review its errors and plan, then evaluate its returned source. Apply that exact source with its expected_content_hash only after the user supplies confirm=\"APPLY_TO_PRODUCTION\" and dry_run=false. Never supply confirmation yourself. Apply changes the live model for every consumer. A conflict requires a new proposal and review. dry_run defaults to true and never writes.\\n\\n' +\n        'Custom chart types (chart type custom:<key>): custom_chart_scaffold returns a draft and project files. In hosted agents, custom_chart_edit sends the description and draft to Chart studio Bryn when installed; if unavailable, edit draft.code yourself. Pass chartTs, manifest, bundleCss and iconSvg for server-side compilation without files or imports. custom_chart_preview shows validated draft code on bounded real sample rows without saving. custom_chart_validate checks a manifest and bundle without persisting, custom_chart_upload creates the chart or a preview version only with mode=\"apply\" and confirm=\"APPLY_TO_PRODUCTION\" (dry_run shows the plan first), and publish_custom_chart makes a version live for every builder only with the same confirmation because every dashboard using that key re-renders. For local projects only, build with `databrain custom-chart build`. A custom metric uses chartType=\"custom:<key>\" and customChart={key,bindings,options}; its MCP App tile loads only the company published bundle in the app/embed sandbox. Hosts without MCP Apps show rows and a clear fallback.\\n\\n' +\n        'Infrastructure creation is intentionally narrow in MCP: datasource and workspace creation still happen outside this workflow; sync_datasource and dry-run/apply create_datamart are available. The semantic layer is populated and maintained via MCP tools (get_semantic_layer, update_semantic_layer, start_semantic_layer_generation, get_semantic_layer_generation_status). When the semantic layer is empty, use these tools — do NOT send the user to the UI for semantic metadata.\\n\\n' +\n        'After embed setup, customize with: brand-my-embed prompt for theming. Use update_embed (body passthrough) for filters, localization, and permissions.\\n' +\n        'Use generate_guest_token for frontend auth and generate_embed_code for framework snippets.\\n' +\n        'For advanced embed configuration (UI toggles, filters, i18n), use update_embed with a body passthrough.\\n' +\n        'To diagnose embed issues, use get_embed_details and reason about the response.\\n' +\n        'Do NOT ask the user for any tokens — manage them via MCP tools.\\n\\n' +\n        'IMPORTANT — accessSettings defaults:\\n' +\n        'When calling create_embed, only pass accessSettings: { datamartName: \"...\" } plus any flags the user explicitly wants enabled. For multi-tenant dashboard embeds, also pass clientId. The tool auto-fills all required isAllow* fields with secure defaults (all false). Do NOT guess or enumerate accessSettings fields.\\n\\n' +\n        'IMPORTANT — create_data_app does NOT accept workspaceName. Only pass { name: \"...\" }.\\n\\n' +\n        'IMPORTANT — Be interactive. Present results from each tool call and ask the user before proceeding to the next step. Never batch multiple mutating operations without user confirmation.\\n' +\n        'Trigger keywords: embed, dashboard, analytics, Databrain, guest token, theme, filters, permissions, datasource, datamart, workspace, metric creation.',\n    }\n  );\n\n  registerAllTools(server, client);\n  if (brynCatalogue?.tools.length || brynCatalogue?.turns.length) {\n    registerBrynTools(server, client, brynCatalogue);\n    registerBrynTurns(server, client);\n    registerCatalogueTurns(server, client, brynCatalogue);\n  }\n  registerAllResources(server);\n  registerAllPrompts(server);\n\n  return server;\n}\n","import { createHash } from 'node:crypto';\nimport type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';\nimport { type BeforeSendFn, instrument } from '@posthog/mcp';\nimport { PostHog } from 'posthog-node';\nimport type { Config } from './config.js';\nimport { DEFAULT_POSTHOG_API_KEY, DEFAULT_POSTHOG_HOST } from './config.js';\nimport { logger } from './logger.js';\n\nconst CONTENT_FREE_PROPERTIES = new Set([\n  '$mcp_source',\n  '$mcp_duration_ms',\n  '$mcp_is_error',\n  '$mcp_tool_name',\n  '$mcp_tool_category',\n  '$mcp_server_name',\n  '$mcp_server_version',\n  '$mcp_protocol_version',\n  '$process_person_profile',\n]);\n\n/** No prompt, input, response, row, exception stack, or inferred intent leaves stdio. */\nexport const contentFreeMcpCapture: BeforeSendFn = (event) => {\n  if (event.event === '$exception' || event.event === '$identify') return null;\n  const properties = Object.fromEntries(\n    Object.entries(event.properties).filter(([key, value]) => {\n      if (!CONTENT_FREE_PROPERTIES.has(key)) return false;\n      if (key === '$mcp_tool_name' || key === '$mcp_tool_category')\n        return (\n          typeof value === 'string' && /^[a-z][a-z0-9_:-]{0,63}$/.test(value)\n        );\n      return true;\n    })\n  );\n  return { ...event, properties };\n};\n\n// Derives a stable per-install distinct_id from the active auth token without\n// ever sending the token itself to PostHog.\nfunction distinctIdFromToken(token: string | undefined): string | null {\n  if (!token) return null;\n  return createHash('sha256').update(token).digest('hex').slice(0, 32);\n}\n\n/**\n * Wires PostHog MCP analytics (tool calls, initialize, exceptions) into the\n * server. Always on — not user-configurable. Returns the PostHog client so\n * the caller can flush/shutdown it on exit, or null when no auth token is\n * configured yet (nothing to derive a distinct_id from).\n */\nexport function setupAnalytics(\n  server: McpServer,\n  config: Config\n): PostHog | null {\n  const distinctId = distinctIdFromToken(\n    config.serviceToken || config.apiToken\n  );\n  if (!distinctId) {\n    return null;\n  }\n\n  const posthog = new PostHog(config.posthogApiKey || DEFAULT_POSTHOG_API_KEY, {\n    host: config.posthogHost || DEFAULT_POSTHOG_HOST,\n  });\n\n  instrument(server, posthog, {\n    logger: (msg) => logger.debug(`[posthog] ${msg}`),\n    identify: { distinctId },\n    beforeSend: contentFreeMcpCapture,\n  });\n\n  return posthog;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,SAAS,4BAA4B;;;ACArC,SAAS,iBAAiB;AAYnB,SAAS,aACd,QACA,eACW;AACX,QAAM,SAAS,IAAI,gBAAgB,MAAM;AACzC,QAAM,OAAO,OAAO,cAAc;AAClC,MAAI;AACJ,MAAI,KAAK,WAAW,4BAA4B;AAC9C,oBACE;AAAA,EACJ,WAAW,KAAK,WAAW,iBAAiB;AAC1C,oBACE;AAAA,EACJ,WAAW,KAAK,WAAW,aAAa;AACtC,oBACE;AAAA,EACJ,OAAO;AACL,oBACE;AAAA,EACJ;AAEA,QAAM,qBAAqB,OAAO,QAC9B,wJACA,OAAO,eACL,uFACA;AACN,QAAM,iBAAiB,OAAO,YAAY,IACtC,6DACA,OAAO,QACL,yIACA;AAEN,QAAM,SAAS,IAAI;AAAA,IACjB;AAAA,MACE,MAAM;AAAA,MACN,SAAS;AAAA,MACT,aACE;AAAA,IACJ;AAAA,IACA;AAAA,MACE,cACE,gBACA;AAAA,ykBACqkB,kBAAkB;AAAA,kSACzT,cAAc;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAwBhT;AAAA,EACF;AAEA,mBAAiB,QAAQ,MAAM;AAC/B,MAAI,eAAe,MAAM,UAAU,eAAe,MAAM,QAAQ;AAC9D,sBAAkB,QAAQ,QAAQ,aAAa;AAC/C,sBAAkB,QAAQ,MAAM;AAChC,2BAAuB,QAAQ,QAAQ,aAAa;AAAA,EACtD;AACA,uBAAqB,MAAM;AAC3B,qBAAmB,MAAM;AAEzB,SAAO;AACT;;;AC7FA,SAAS,kBAAkB;AAE3B,SAA4B,kBAAkB;AAC9C,SAAS,eAAe;AAKxB,IAAM,0BAA0B,oBAAI,IAAI;AAAA,EACtC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAGM,IAAM,wBAAsC,CAAC,UAAU;AAC5D,MAAI,MAAM,UAAU,gBAAgB,MAAM,UAAU,YAAa,QAAO;AACxE,QAAM,aAAa,OAAO;AAAA,IACxB,OAAO,QAAQ,MAAM,UAAU,EAAE,OAAO,CAAC,CAAC,KAAK,KAAK,MAAM;AACxD,UAAI,CAAC,wBAAwB,IAAI,GAAG,EAAG,QAAO;AAC9C,UAAI,QAAQ,oBAAoB,QAAQ;AACtC,eACE,OAAO,UAAU,YAAY,2BAA2B,KAAK,KAAK;AAEtE,aAAO;AAAA,IACT,CAAC;AAAA,EACH;AACA,SAAO,EAAE,GAAG,OAAO,WAAW;AAChC;AAIA,SAAS,oBAAoB,OAA0C;AACrE,MAAI,CAAC,MAAO,QAAO;AACnB,SAAO,WAAW,QAAQ,EAAE,OAAO,KAAK,EAAE,OAAO,KAAK,EAAE,MAAM,GAAG,EAAE;AACrE;AAQO,SAAS,eACd,QACA,QACgB;AAChB,QAAM,aAAa;AAAA,IACjB,OAAO,gBAAgB,OAAO;AAAA,EAChC;AACA,MAAI,CAAC,YAAY;AACf,WAAO;AAAA,EACT;AAEA,QAAM,UAAU,IAAI,QAAQ,OAAO,iBAAiB,yBAAyB;AAAA,IAC3E,MAAM,OAAO,eAAe;AAAA,EAC9B,CAAC;AAED,aAAW,QAAQ,SAAS;AAAA,IAC1B,QAAQ,CAAC,QAAQ,OAAO,MAAM,aAAa,GAAG,EAAE;AAAA,IAChD,UAAU,EAAE,WAAW;AAAA,IACvB,YAAY;AAAA,EACd,CAAC;AAED,SAAO;AACT;;;AF9DA,SAAS,OAAO,KAAmB;AACjC,UAAQ,OAAO,MAAM,eAAe,GAAG;AAAA,CAAI;AAC7C;AAEA,eAAe,OAAsB;AACnC,MAAI;AACF,QAAI,QAAQ,KAAK,SAAS,QAAQ,GAAG;AACnC,YAAM,EAAE,YAAY,IAAI,MAAM,OAAO,oBAAkB;AACvD,YAAM,YAAY;AAClB;AAAA,IACF;AACA,UAAM,SAAS,WAAW;AAC1B,QAAI;AACJ,QAAI;AACF,sBAAgB,MAAM,kBAAkB,IAAI,gBAAgB,MAAM,CAAC;AAAA,IACrE,SAAS,OAAO;AACd,aAAO;AAAA,QACL,+BAA+B,iBAAiB,QAAQ,MAAM,OAAO,SAAS;AAAA,MAChF;AAAA,IACF;AACA,UAAM,SAAS,aAAa,QAAQ,aAAa;AACjD,UAAM,UAAU,eAAe,QAAQ,MAAM;AAC7C,UAAM,YAAY,IAAI,qBAAqB;AAE3C,QAAI,eAAe;AACnB,UAAM,iBAAiB,YAA2B;AAChD,UAAI,gBAAgB,CAAC,QAAS;AAC9B,qBAAe;AACf,YAAM,QAAQ,SAAS;AAAA,IACzB;AAMA,YAAQ,GAAG,cAAc,MAAM,KAAK,eAAe,CAAC;AACpD,YAAQ;AAAA,MACN;AAAA,MACA,MAAM,KAAK,eAAe,EAAE,KAAK,MAAM,QAAQ,KAAK,CAAC,CAAC;AAAA,IACxD;AACA,YAAQ;AAAA,MACN;AAAA,MACA,MAAM,KAAK,eAAe,EAAE,KAAK,MAAM,QAAQ,KAAK,CAAC,CAAC;AAAA,IACxD;AAEA,UAAM,OAAO,QAAQ,SAAS;AAC9B,WAAO,IAAI,kBAAkB,QAAQ;AAAA,EACvC,SAAS,OAAO;AAId,WAAO;AAAA,MACL,2BAA2B,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;AAAA,IACnF;AACA,YAAQ,KAAK,CAAC;AAAA,EAChB;AACF;AAEA,KAAK;","names":[]}

package/dist/{main-QCBVJSSR.js → main-2FKQQLWX.js}

@@ -1,7 +1,15 @@
 #!/usr/bin/env node
+import {
+  catalogueTurnEntry,
+  isExecutableBrynTool,
+  parseBrynCatalogue,
+  registerBrynTools,
+  registerBrynTurns,
+  registerCatalogueTurns
+} from "./chunk-V5JINLOA.js";
 import {
   registerChartApps
-} from "./chunk-NIC5MAGC.js";
+} from "./chunk-QQ6KNULX.js";
 import {
   PREVIEW_PATH,
   WRITE_CREATE,
@@ -9,26 +17,33 @@ import {
   registerAllPrompts,
   registerAllResources,
   registerAllTools
-} from "./chunk-UYFFFAYV.js";
+} from "./chunk-6MD7KOAU.js";
 import {
+  BrynCatalogueCache,
   DatabrainApiError,
   DatabrainClient,
   MCP_SERVER_VERSION,
+  RateLimitedError,
+  parseBrynStream,
   parseErrorBody,
+  parseRetryAfter,
   parseStudioStream,
+  readBrynStream,
   stringify,
   toolContext,
   toolError,
   toolSuccess
-} from "./chunk-AWICHHDU.js";
+} from "./chunk-4E57ZRZO.js";
 import "./chunk-2F7V6RZR.js";
 import {
   FilePatStore,
-  HOSTED_SCOPES,
-  HostedAuthError,
   createBearerVerifier,
   principalSchema
-} from "./chunk-CEGHG5U3.js";
+} from "./chunk-MUZ3KEJX.js";
+import {
+  HOSTED_SCOPES,
+  HostedAuthError
+} from "./chunk-3AH56XX7.js";
 
 // src/hosted/main.ts
 import { isAbsolute } from "path";
@@ -101,6 +116,11 @@ import {
 import { StreamableHTTPServerTransport } from "@modelcontextprotocol/sdk/server/streamableHttp.js";
 
 // src/hosted/authorization.ts
+function brynEntry(name, catalogue) {
+  return catalogue?.tools.find(
+    (entry) => entry.name === name && isExecutableBrynTool(entry)
+  );
+}
 var TOOL_SCOPES = {
   whoami: [],
   list_datasources: ["mcp:datamarts:read"],
@@ -180,28 +200,51 @@ var TOOL_SCOPES = {
   drill_down: ["mcp:dashboards:read", "mcp:query"],
   change_date_range: ["mcp:dashboards:read", "mcp:query"]
 };
-function requiredScopes(name) {
+var BRYN_TURN_SCOPES = {
+  ask_bryn_metric: ["mcp:query"],
+  ask_bryn_semantic_model: ["mcp:datamarts:read", "mcp:datamarts:write"],
+  ask_bryn_theme: ["mcp:embeds:write"],
+  ask_bryn_custom_chart: ["mcp:custom-charts:write"]
+};
+function requiredScopes(name, catalogue) {
+  if ((catalogue?.tools.length || catalogue?.turns.length) && Object.hasOwn(BRYN_TURN_SCOPES, name))
+    return BRYN_TURN_SCOPES[name];
+  const turn = Object.hasOwn(TOOL_SCOPES, name) ? void 0 : catalogueTurnEntry(name, catalogue);
+  if (turn) return turn.requiredScopes;
+  const bryn = brynEntry(name, catalogue);
+  if (bryn) {
+    if (bryn.requiredScopes) return bryn.requiredScopes;
+    if (bryn.surface === "custom-chart-studio")
+      return ["mcp:custom-charts:write"];
+    return bryn.effect === "read" ? ["mcp:dashboards:read"] : ["mcp:embeds:write"];
+  }
   if (!Object.hasOwn(TOOL_SCOPES, name))
     throw new HostedAuthError(403, "tool_not_authorized");
   return TOOL_SCOPES[name];
 }
-function authorizeTool(name, principal) {
+function authorizeTool(name, principal, catalogue) {
   if (principal.expiresAt !== void 0 && principal.expiresAt <= Date.now() / 1e3)
     throw new HostedAuthError(401, "invalid_token");
-  if (requiredScopes(name).some((scope) => !principal.scopes.includes(scope)))
+  if (requiredScopes(name, catalogue).some(
+    (scope) => !principal.scopes.includes(scope)
+  ))
     throw new HostedAuthError(403, "insufficient_scope");
 }
 var TOOL_ARGUMENT_VALUES = {
   list_dashboards: { scope: ["auto", "data_app", "global"] }
 };
 var TOOL_OPAQUE_ARGUMENTS = {
+  ask_bryn_theme: ["theme", "dark", "schema", "contrast"],
+  ask_bryn_custom_chart: ["draft"],
   preview_chart: ["rows"],
   custom_chart_preview: ["rows", "manifest"],
   custom_chart_edit: ["draft"]
 };
-function assertToolArguments(name, value, principal, delegated = false) {
+function assertToolArguments(name, value, principal, delegated = false, catalogue) {
   const allowed = Object.hasOwn(TOOL_ARGUMENT_VALUES, name) ? TOOL_ARGUMENT_VALUES[name] : {};
-  const opaque = Object.hasOwn(TOOL_OPAQUE_ARGUMENTS, name) ? TOOL_OPAQUE_ARGUMENTS[name] : void 0;
+  const bryn = brynEntry(name, catalogue);
+  const turn = Object.hasOwn(TOOL_SCOPES, name) ? void 0 : catalogueTurnEntry(name, catalogue);
+  const opaque = turn ? turn.opaqueContextFields : bryn ? bryn.opaqueContextFields ? ["input", ...bryn.opaqueContextFields] : ["input", "draft", "theme", "dark", "schema", "contrast", "followUp"] : Object.hasOwn(TOOL_OPAQUE_ARGUMENTS, name) ? TOOL_OPAQUE_ARGUMENTS[name] : void 0;
   const target = selectWorkspace(value, principal);
   if (!value || typeof value !== "object" || Array.isArray(value)) {
     assertBoundArguments(value, principal, { target, delegated });
@@ -426,7 +469,7 @@ function onlyWorkspace(raw, target) {
   return raw;
 }
 var HostedClient = class extends DatabrainClient {
-  constructor(adapter, principal, delegation) {
+  constructor(adapter, principal, delegation, brynCatalogue) {
     super({
       apiUrl: "https://api.usedatabrain.com",
       demoDomain: "https://demo.usedatabrain.com"
@@ -434,6 +477,7 @@ var HostedClient = class extends DatabrainClient {
     this.adapter = adapter;
     this.principal = principal;
     this.delegation = delegation;
+    this.brynCatalogue = brynCatalogue;
   }
   // A generated API credential must never replace the authorizing hosted principal.
   setRuntimeApiToken(_token) {
@@ -445,7 +489,7 @@ var HostedClient = class extends DatabrainClient {
     try {
       const name = toolContext.getStore()?.tool;
       if (!name) throw new HostedAuthError(403, "tool_not_authorized");
-      authorizeTool(name, this.principal);
+      authorizeTool(name, this.principal, this.brynCatalogue);
       const named = callWorkspace.getStore()?.target;
       const target = named ?? selectWorkspace(options.body, this.principal, [
         "workspaceName",
@@ -457,7 +501,17 @@ var HostedClient = class extends DatabrainClient {
       const delegated = this.delegation !== void 0;
       const opaque = options.method === "POST" && options.path === PREVIEW_PATH ? ["rows"] : options.method === "POST" && /^\/api\/v2\/custom-charts\/[a-z][a-z0-9_-]*\/bryn\/turn$/.test(
         options.path
-      ) ? ["draft"] : void 0;
+      ) ? ["draft"] : options.method === "POST" && options.path === "/api/v2/theme-bryn/turn" ? ["theme", "dark", "schema", "contrast"] : options.method === "POST" && /^\/api\/mcp\/bryn\/tools\/[a-z][a-z0-9_]*$/.test(
+        options.path
+      ) ? [
+        "input",
+        "draft",
+        "theme",
+        "dark",
+        "schema",
+        "contrast",
+        "followUp"
+      ] : void 0;
       assertBoundArguments(options.body, this.principal, {
         target,
         delegated,
@@ -551,7 +605,7 @@ function whoami(principal) {
     )
   );
 }
-function createHostedToolServer(principal, adapter, delegation) {
+function createHostedToolServer(principal, adapter, delegation, brynCatalogue) {
   const bound = structuredClone(principal);
   const delegated = delegation !== void 0;
   const server = new McpServer(
@@ -583,8 +637,14 @@ function createHostedToolServer(principal, adapter, delegation) {
     }
     args[index] = async (...values) => {
       try {
-        authorizeTool(name, bound);
-        const target = assertToolArguments(name, values[0], bound, delegated);
+        authorizeTool(name, bound, brynCatalogue);
+        const target = assertToolArguments(
+          name,
+          values[0],
+          bound,
+          delegated,
+          brynCatalogue
+        );
         if (name === "whoami") return whoami(bound);
         const input = values[0] && typeof values[0] === "object" ? values[0] : void 0;
         if (input?.projectDir !== void 0)
@@ -628,9 +688,14 @@ function createHostedToolServer(principal, adapter, delegation) {
     };
     return register(...args);
   });
-  const client = new HostedClient(adapter, bound, delegation);
+  const client = new HostedClient(adapter, bound, delegation, brynCatalogue);
   enableChartApps(server);
   registerAllTools(server, client);
+  if (brynCatalogue?.tools.length || brynCatalogue?.turns.length) {
+    registerBrynTools(server, client, brynCatalogue);
+    registerBrynTurns(server, client);
+    registerCatalogueTurns(server, client, brynCatalogue);
+  }
   registerCreateWorkspace(server, client);
   registerAllResources(server);
   registerAllPrompts(server);
@@ -641,6 +706,7 @@ function createHostedToolServer(principal, adapter, delegation) {
 
 // src/hosted/http.ts
 var HEALTH_BODY = JSON.stringify({ status: "ok" });
+var MAX_MCP_BODY_BYTES = 4 * 1024 * 1024 + 64 * 1024;
 function healthPath(url) {
   const path = (url || "/").split("?")[0];
   return path === "/health";
@@ -657,7 +723,7 @@ async function readBody(req) {
   const chunks = [];
   for await (const chunk of req) {
     size += chunk.length;
-    if (size > 1048576) throw new Error("body_too_large");
+    if (size > MAX_MCP_BODY_BYTES) throw new Error("body_too_large");
     chunks.push(Buffer.from(chunk));
   }
   return JSON.parse(Buffer.concat(chunks).toString("utf8"));
@@ -668,6 +734,7 @@ function createHostedHttpServer(config, adapter, pats) {
   const metadataUrl = `${publicUrl.origin}${metadataPath}`;
   const verify = createBearerVerifier(adapter, config.publicUrl, pats);
   let active = 0;
+  const catalogueCache = new BrynCatalogueCache();
   const server = createServer(async (req, res) => {
     if (healthPath(req.url)) {
       if (req.method !== "GET" && req.method !== "HEAD") {
@@ -776,14 +843,42 @@ function createHostedHttpServer(config, adapter, pats) {
           return;
         }
         const delegation = match[1].startsWith("dbp_") ? void 0 : adapter.delegate?.(match[1], principal);
+        let brynCatalogue = { tools: [], turns: [] };
+        let catalogueRetryAfter;
+        if (adapter.getBrynCatalogue) {
+          const read = await catalogueCache.get(
+            `${principal.companyId}:${principal.userId}:${principal.credentialType}`,
+            async () => {
+              let raw;
+              try {
+                raw = await adapter.getBrynCatalogue(principal, delegation);
+              } catch (error) {
+                if (error instanceof HostedAuthError) {
+                  if (error.detail?.status === 429)
+                    throw new RateLimitedError(error.retryAfterMs);
+                  if (error.status === 404) return { tools: [], turns: [] };
+                }
+                throw error;
+              }
+              try {
+                return parseBrynCatalogue(raw);
+              } catch {
+                return { tools: [], turns: [] };
+              }
+            }
+          );
+          brynCatalogue = read.catalogue;
+          if (read.degraded) catalogueRetryAfter = read.retryAfterSeconds;
+        }
         if (body?.method === "tools/call" && typeof body.params?.name === "string") {
           try {
-            authorizeTool(body.params.name, principal);
+            authorizeTool(body.params.name, principal, brynCatalogue);
             assertToolArguments(
               body.params.name,
               body.params.arguments,
               principal,
-              delegation !== void 0
+              delegation !== void 0,
+              brynCatalogue
             );
           } catch (error) {
             if (error instanceof WorkspaceSelectionError) {
@@ -795,9 +890,10 @@ function createHostedHttpServer(config, adapter, pats) {
               return;
             }
             if (error instanceof HostedAuthError && error.code === "insufficient_scope") {
-              const missing = requiredScopes(body.params.name).filter(
-                (scope) => !principal.scopes.includes(scope)
-              );
+              const missing = requiredScopes(
+                body.params.name,
+                brynCatalogue
+              ).filter((scope) => !principal.scopes.includes(scope));
               reply(res, 200, {
                 jsonrpc: "2.0",
                 id: body.id ?? null,
@@ -805,10 +901,25 @@ function createHostedHttpServer(config, adapter, pats) {
               });
               return;
             }
+            if (catalogueRetryAfter !== void 0 && error instanceof HostedAuthError && error.code === "tool_not_authorized") {
+              reply(res, 200, {
+                jsonrpc: "2.0",
+                id: body.id ?? null,
+                result: toolError(
+                  `Error: Bryn tools are temporarily unavailable because the tool list could not be read (rate limited or busy). Retry in ${catalogueRetryAfter} seconds. (TEMPORARILY_UNAVAILABLE)`
+                )
+              });
+              return;
+            }
             throw error;
           }
         }
-        const mcp = createHostedToolServer(principal, adapter, delegation);
+        const mcp = createHostedToolServer(
+          principal,
+          adapter,
+          delegation,
+          brynCatalogue
+        );
         const transport = new StreamableHTTPServerTransport({
           sessionIdGenerator: void 0,
           enableJsonResponse: true
@@ -909,7 +1020,7 @@ function createProviderAdapter(config) {
   const publicOrigin = new URL(config.publicUrl).origin;
   const bearers = /* @__PURE__ */ new WeakMap();
   const responseSchema = principalSchema.extend({ issuer: z3.literal(config.issuer) }).strip();
-  return {
+  const adapter = {
     async verifyOAuth(token, resource) {
       try {
         const response = await fetch(endpoint, {
@@ -995,7 +1106,7 @@ function createProviderAdapter(config) {
         body: options.body === void 0 ? void 0 : JSON.stringify(options.body),
         signal: AbortSignal.timeout(options.timeoutMs ?? REQUEST_TIMEOUT_MS)
       });
-      const text = await response.text();
+      const text = options.responseFormat === "bryn-sse" && response.ok ? await readBrynStream(response) : await response.text();
       if (!response.ok) {
         const forbidden = response.status === 403 ? errorDetail(403, text, bearer) : void 0;
         if (forbidden?.code && GRANT_DENIALS.has(forbidden.code)) {
@@ -1008,17 +1119,28 @@ function createProviderAdapter(config) {
             } : forbidden
           );
         }
-        const status = response.status === 403 && options.responseFormat === "studio-sse" ? 403 : response.status === 401 ? 401 : response.status >= 500 ? 503 : response.status === 403 || response.status === 404 ? 404 : 400;
+        const status = response.status === 403 && (options.responseFormat === "studio-sse" || options.responseFormat === "bryn-sse") ? 403 : response.status === 401 ? 401 : response.status >= 500 ? 503 : response.status === 403 || response.status === 404 ? 404 : 400;
         const detail = status === 401 || status === 503 || response.status === 403 ? void 0 : errorDetail(response.status, text, bearer);
-        throw new HostedAuthError(status, "delegated_request_denied", detail);
+        throw new HostedAuthError(
+          status,
+          "delegated_request_denied",
+          detail,
+          response.status === 429 ? parseRetryAfter(response.headers.get("retry-after")) : void 0
+        );
       }
       try {
-        return options.responseFormat === "studio-sse" ? parseStudioStream(text) : text ? JSON.parse(text) : null;
+        return options.responseFormat === "studio-sse" ? parseStudioStream(text) : options.responseFormat === "bryn-sse" ? parseBrynStream(text) : text ? JSON.parse(text) : null;
       } catch {
         throw new HostedAuthError(503, "delegated_response_invalid");
       }
     }
   };
+  adapter.getBrynCatalogue = (principal, delegation) => adapter.executeRequest(
+    { method: "GET", path: "/api/mcp/bryn/catalog", auth: "service" },
+    principal,
+    delegation
+  );
+  return adapter;
 }
 
 // src/hosted/main.ts
@@ -1031,7 +1153,7 @@ async function startHosted() {
       throw new Error(
         "Hosted test mode requires an absolute fixture store path."
       );
-    const { createTestOnlyAdapter } = await import("./test-only-6474NMTR.js");
+    const { createTestOnlyAdapter } = await import("./test-only-VH3FF5ML.js");
     adapter = createTestOnlyAdapter(file);
   } else {
     const file = process.env.DATABRAIN_HOSTED_ADAPTER_MODULE;
@@ -1085,4 +1207,4 @@ async function startHosted() {
 export {
   startHosted
 };
-//# sourceMappingURL=main-QCBVJSSR.js.map
+//# sourceMappingURL=main-2FKQQLWX.js.map