@debugbundle/mcp 0.1.1 → 0.1.2

package/dist/main.cjs

@@ -14551,7 +14551,8 @@ function createAlertApi(client) {
       const body = {
         project_id: input.projectId,
         channel: input.channel,
-        condition_type: input.conditionType
+        condition_type: input.conditionType,
+        config: input.config
       };
       if (input.serviceId !== void 0) {
         body.service_id = input.serviceId;
@@ -14559,9 +14560,6 @@ function createAlertApi(client) {
       if (input.severityMin !== void 0) {
         body.severity_min = input.severityMin;
       }
-      if (input.config !== void 0) {
-        body.config = input.config;
-      }
       if (input.isEnabled !== void 0) {
         body.is_enabled = input.isEnabled;
       }
@@ -16225,6 +16223,26 @@ var InlineProbeDataSchema = external_exports.object({
   version: external_exports.literal(1),
   items: external_exports.array(InlineProbeDataItemSchema)
 }).strict();
+var RuntimeMemoryStatsSchema = external_exports.object({
+  rss: external_exports.number().nonnegative().nullable(),
+  heap_total: external_exports.number().nonnegative().nullable(),
+  heap_used: external_exports.number().nonnegative().nullable(),
+  external: external_exports.number().nonnegative().nullable(),
+  peak: external_exports.number().nonnegative().nullable()
+}).strict();
+var BackendRuntimePayloadSchema = external_exports.object({
+  version: external_exports.string().min(1),
+  platform: external_exports.string().min(1).nullable().optional(),
+  arch: external_exports.string().min(1).nullable().optional(),
+  pid: external_exports.number().int().nonnegative().nullable().optional(),
+  cwd: external_exports.string().min(1).nullable().optional(),
+  uptime_sec: external_exports.number().nonnegative().nullable().optional(),
+  hostname: external_exports.string().min(1).nullable().optional(),
+  thread_id: external_exports.union([external_exports.string(), external_exports.number()]).nullable().optional(),
+  framework_version: external_exports.string().min(1).nullable().optional(),
+  memory: RuntimeMemoryStatsSchema.nullable().optional(),
+  framework_extras: external_exports.record(external_exports.string(), external_exports.unknown()).nullable().optional()
+}).strict();
 var BackendExceptionPayloadSchema = external_exports.object({
   name: external_exports.string().min(1),
   message: external_exports.string().min(1),
@@ -16242,9 +16260,7 @@ var BackendExceptionPayloadSchema = external_exports.object({
     headers: external_exports.record(external_exports.string(), external_exports.unknown()).optional(),
     body: external_exports.unknown().optional()
   }),
-  runtime: external_exports.object({
-    version: external_exports.string().min(1)
-  }),
+  runtime: BackendRuntimePayloadSchema,
   probe_data: InlineProbeDataSchema.optional()
 }).strict();
 var RequestEventPayloadSchema = external_exports.object({
@@ -16515,13 +16531,7 @@ var ContextDeploySchema = external_exports.object({
   deployed_at: external_exports.string().datetime().nullable(),
   regression_window: external_exports.boolean().nullable()
 });
-var MemoryStatsSchema = external_exports.object({
-  rss: external_exports.number().nonnegative().nullable(),
-  heap_total: external_exports.number().nonnegative().nullable(),
-  heap_used: external_exports.number().nonnegative().nullable(),
-  external: external_exports.number().nonnegative().nullable(),
-  peak: external_exports.number().nonnegative().nullable()
-});
+var MemoryStatsSchema = RuntimeMemoryStatsSchema;
 var ContextRuntimeSchema = external_exports.object({
   version: external_exports.literal(1),
   name: external_exports.string().min(1),
@@ -17929,7 +17939,7 @@ var RELAY_SPOOL_DELIVERED_MARKER_SUFFIX = ".delivered";
 var RELAY_SPOOL_EVENT_SUFFIX = ".events.json";
 var SUGGESTED_ACTIONS = [
   "Run debugbundle setup if local scaffold files are missing.",
-  "Run debugbundle login to create ~/.debugbundle/auth.json.",
+  "Run debugbundle login to choose an auth flow, or use debugbundle login --github, debugbundle login --github-device, or debugbundle login <dbundle_mem_...> to create ~/.debugbundle/auth.json.",
   "Review .debugbundle/profile.json when architecture changes or the profile becomes stale."
 ];
 async function pathExists3(path, stat) {
@@ -18695,9 +18705,11 @@ function deriveIncidentReasonFromSourceEventTypes(eventTypes) {
   return null;
 }
 
-// ../../packages/auth/src/index.ts
+// ../../packages/auth/src/primitives.ts
 var import_argon2 = require("@node-rs/argon2");
-var DEFAULT_SESSION_LIFETIME_MS = 1e3 * 60 * 60 * 4;
+
+// ../../packages/auth/src/web-session-auth.ts
+var DEFAULT_SESSION_LIFETIME_MS = 1e3 * 60 * 60 * 24 * 7;
 var DEFAULT_EMAIL_AUTH_CODE_LIFETIME_MS = 1e3 * 60 * 10;
 var DEFAULT_GITHUB_OAUTH_STATE_LIFETIME_MS = 1e3 * 60 * 10;
 
@@ -18736,6 +18748,37 @@ var STORAGE_SCHEMA_MIGRATIONS = [
       "ALTER TABLE organizations ADD COLUMN IF NOT EXISTS suspended_at timestamptz",
       "ALTER TABLE organization_members ADD COLUMN IF NOT EXISTS suspended_at timestamptz"
     ]
+  }),
+  defineStorageSchemaMigration({
+    id: "202605120001_add_github_device_authorizations",
+    description: "Add persisted GitHub CLI bootstrap state for device-flow login.",
+    statements: [
+      `
+        CREATE TABLE IF NOT EXISTS github_device_authorizations (
+          id uuid PRIMARY KEY,
+          device_code text NOT NULL UNIQUE,
+          user_code text NOT NULL,
+          verification_uri text NOT NULL,
+          interval_seconds integer NOT NULL,
+          expires_at timestamptz NOT NULL,
+          accepted_terms_at timestamptz,
+          created_at timestamptz NOT NULL DEFAULT now(),
+          completed_at timestamptz,
+          claimed_at timestamptz,
+          terminal_error text,
+          user_id uuid REFERENCES users(id) ON DELETE SET NULL,
+          organization_id uuid REFERENCES organizations(id) ON DELETE SET NULL
+        )
+      `,
+      `
+        CREATE INDEX IF NOT EXISTS github_device_authorizations_user_code_idx
+        ON github_device_authorizations (user_code, created_at DESC)
+      `,
+      `
+        CREATE INDEX IF NOT EXISTS github_device_authorizations_expires_at_idx
+        ON github_device_authorizations (expires_at)
+      `
+    ]
   })
 ];
 
@@ -18749,6 +18792,7 @@ var import_promises5 = require("node:fs/promises");
 var import_node_path6 = require("node:path");
 
 // ../../packages/bundle-engine/src/index.ts
+var DYNAMIC_SEGMENT_PATTERN2 = /^(?:\d+|[0-9a-f]{8}-[0-9a-f-]{27}|[A-Za-z0-9_-]{24,})$/;
 function toIsoTimestamp(value) {
   return new Date(value).toISOString();
 }
@@ -18822,6 +18866,41 @@ function inferSignalTypeFromSourceEventTypes(sourceEventTypes) {
 function extractTopFrames(stack) {
   return stack.split("\n").map((line) => line.trim()).filter((line) => line.startsWith("at ")).slice(0, 3);
 }
+function decodeRouteSegment2(segment) {
+  try {
+    return decodeURIComponent(segment);
+  } catch {
+    return segment.replace(
+      /%([0-9A-Fa-f]{2})/g,
+      (_match, hexByte) => String.fromCharCode(parseInt(hexByte, 16))
+    );
+  }
+}
+function isDynamicRouteSegment2(segment) {
+  if (DYNAMIC_SEGMENT_PATTERN2.test(segment)) {
+    return true;
+  }
+  const decodedSegment = decodeRouteSegment2(segment);
+  if (decodedSegment.includes("/")) {
+    return true;
+  }
+  if (decodedSegment !== segment && DYNAMIC_SEGMENT_PATTERN2.test(decodedSegment)) {
+    return true;
+  }
+  const strippedMalformedPercent = decodedSegment.replace(/%+/g, "");
+  return strippedMalformedPercent !== decodedSegment && DYNAMIC_SEGMENT_PATTERN2.test(strippedMalformedPercent);
+}
+function normalizeRouteTemplate(path) {
+  if (path === null || path.length === 0) {
+    return null;
+  }
+  const pathWithoutQueryOrFragment = path.split(/[?#]/, 1)[0] ?? "";
+  if (pathWithoutQueryOrFragment.length === 0) {
+    return "/";
+  }
+  const normalizedSegments = pathWithoutQueryOrFragment.split("/").filter((segment) => segment.length > 0).map((segment) => isDynamicRouteSegment2(segment) ? "{param}" : segment);
+  return normalizedSegments.length === 0 ? "/" : `/${normalizedSegments.join("/")}`;
+}
 function deriveFirstApplicationFrame(errorContext) {
   const firstFrame = errorContext?.top_frames[0];
   if (firstFrame === void 0) {
@@ -18915,13 +18994,135 @@ function buildRequestContext(envelopes) {
     version: 1,
     method: exceptionEvent.payload.request.method,
     path: exceptionEvent.payload.request.path,
-    route_template: null,
+    route_template: normalizeRouteTemplate(exceptionEvent.payload.request.path),
     query: exceptionEvent.payload.request.query,
     headers: exceptionEvent.payload.request.headers,
     body: exceptionEvent.payload.request.body ?? null,
     request_id: exceptionEvent.correlation?.request_id ?? null
   };
 }
+function titleCaseWord(value) {
+  if (value.toLowerCase() === "github") {
+    return "GitHub";
+  }
+  if (value.toLowerCase() === "api") {
+    return "API";
+  }
+  return `${value.slice(0, 1).toUpperCase()}${value.slice(1)}`;
+}
+function formatDependencyName(name) {
+  return name.split("_").filter((part) => part.length > 0).map(titleCaseWord).join(" ");
+}
+function inferDependencyName(text) {
+  const match = /\b([a-z][a-z0-9]*_api)_(?:invalid_response|error|failure|failed|unavailable|timeout)\b/.exec(text);
+  return match?.[1] ?? null;
+}
+function buildDependenciesContext(incident, errorContext, requestContext) {
+  if (errorContext === null) {
+    return null;
+  }
+  const text = `${incident.title} ${errorContext.name} ${errorContext.message}`.toLowerCase();
+  const dependencyName = inferDependencyName(text);
+  if (dependencyName === null) {
+    return null;
+  }
+  const displayName = formatDependencyName(dependencyName);
+  const route = requestContext?.route_template ?? requestContext?.path ?? null;
+  const requestDescription = requestContext !== null ? `${requestContext.method} ${route ?? requestContext.path}` : "the failing request";
+  const invalidResponse = text.includes("invalid_response");
+  return {
+    version: 1,
+    items: [
+      {
+        name: dependencyName,
+        status: "failed",
+        notes: invalidResponse ? `${displayName} returned an unexpected response shape while handling ${requestDescription}.` : `${displayName} failed while handling ${requestDescription}.`
+      }
+    ]
+  };
+}
+function buildSummaryGuidance(input) {
+  if (input.errorContext === null) {
+    return {
+      likely_cause: null,
+      confidence: 0,
+      recommended_action: null
+    };
+  }
+  const route = input.requestContext?.route_template ?? input.requestContext?.path ?? null;
+  const requestDescription = input.requestContext !== null ? `${input.requestContext.method} ${route ?? input.requestContext.path}` : null;
+  const firstDependency = input.dependenciesContext?.items[0] ?? null;
+  const dependencyDisplayName = firstDependency !== null ? formatDependencyName(firstDependency.name) : null;
+  const firstFrame = input.firstApplicationFrame;
+  const frameDescription = firstFrame?.file !== null && firstFrame?.file !== void 0 ? ` in ${firstFrame.file}` : "";
+  const invalidResponse = input.errorContext.message.toLowerCase().includes("invalid_response");
+  let likelyCause = null;
+  let recommendedAction = null;
+  if (firstDependency !== null && dependencyDisplayName !== null && requestDescription !== null && invalidResponse) {
+    likelyCause = `${dependencyDisplayName} returned a response that did not match the expected schema while handling ${requestDescription}.`;
+    recommendedAction = `Inspect the ${dependencyDisplayName} response handling${frameDescription}, including schema validation and sanitized upstream response shape.`;
+  } else if (firstDependency !== null && dependencyDisplayName !== null && requestDescription !== null) {
+    likelyCause = `${dependencyDisplayName} failed while handling ${requestDescription}.`;
+    recommendedAction = `Inspect the ${dependencyDisplayName} call path${frameDescription} and compare the captured dependency notes with upstream status.`;
+  } else if (requestDescription !== null) {
+    likelyCause = `${input.errorContext.name} occurred while handling ${requestDescription}${frameDescription}.`;
+    recommendedAction = `Inspect the first application frame${frameDescription} and the captured request/response context.`;
+  } else if (firstFrame !== null) {
+    likelyCause = `${input.errorContext.name} originated from the first captured application frame${frameDescription}.`;
+    recommendedAction = `Inspect the first application frame${frameDescription} and surrounding error handling.`;
+  }
+  if (likelyCause === null || recommendedAction === null) {
+    return {
+      likely_cause: null,
+      confidence: 0,
+      recommended_action: null
+    };
+  }
+  let confidence = 0.25;
+  if (input.requestContext !== null) confidence += 0.15;
+  if (input.responseContext !== null) confidence += 0.1;
+  if (firstFrame !== null && firstFrame.file !== null) confidence += 0.1;
+  if (firstDependency !== null) confidence += 0.1;
+  if (input.errorContext.message.length > 0) confidence += 0.05;
+  return {
+    likely_cause: likelyCause,
+    confidence: Math.min(0.8, Number(confidence.toFixed(2))),
+    recommended_action: recommendedAction
+  };
+}
+function normalizeBaseUrl3(value) {
+  const trimmed = value?.trim();
+  if (trimmed === void 0 || trimmed.length === 0) {
+    return null;
+  }
+  return trimmed.replace(/\/+$/, "");
+}
+function buildLinks(incident, linkBaseUrls) {
+  const apiBaseUrl = normalizeBaseUrl3(linkBaseUrls?.api);
+  const appBaseUrl = normalizeBaseUrl3(linkBaseUrls?.app);
+  const docsBaseUrl = normalizeBaseUrl3(linkBaseUrls?.docs);
+  const incidentPath = `/v1/incidents/${encodeURIComponent(incident.incident_id)}`;
+  const appIncidentPath = `/incidents/${encodeURIComponent(incident.incident_id)}`;
+  const appProjectPath = `/projects/${encodeURIComponent(incident.project_id)}`;
+  return {
+    self: apiBaseUrl !== null ? `${apiBaseUrl}${incidentPath}/bundle` : null,
+    reproduction: apiBaseUrl !== null ? `${apiBaseUrl}${incidentPath}/reproduction` : null,
+    incident: appBaseUrl !== null ? `${appBaseUrl}${appIncidentPath}` : null,
+    project: appBaseUrl !== null ? `${appBaseUrl}${appProjectPath}` : null,
+    docs: docsBaseUrl !== null ? `${docsBaseUrl}/bundles` : null
+  };
+}
+function applyBundleRedaction(candidate) {
+  const redactionResult = redact(candidate);
+  const fields = [...new Set(redactionResult.redacted_fields)].sort();
+  const redactedBundle = redactionResult.redacted;
+  redactedBundle["redaction"] = {
+    redacted: true,
+    fields,
+    notes: fields.length > 0 ? "Sensitive bundle fields were redacted before storage." : null
+  };
+  return redactedBundle;
+}
 function buildResponseContext(envelopes) {
   const requestEvent = selectLatestEnvelopeByType(envelopes, isRequestEventEnvelope);
   if (requestEvent !== null) {
@@ -19054,17 +19255,31 @@ function buildFrontendContext(envelopes) {
     dom_context: domContext
   };
 }
-function buildDeployContext(envelopes, trigger) {
+function buildDeployContext(envelopes, trigger, configuredDeploy) {
   const envelope = selectLatestEnvelopeByType(envelopes, isDeployMetadataEnvelope);
-  if (envelope === null) {
+  if (envelope !== null) {
+    return {
+      version: 1,
+      commit_sha: envelope.payload.commit_sha,
+      deploy_version: envelope.payload.version,
+      branch: envelope.payload.branch,
+      deployed_at: toIsoTimestamp(envelope.payload.deployed_at),
+      regression_window: trigger === "regression_reopen"
+    };
+  }
+  const commitSha = configuredDeploy?.commit_sha ?? null;
+  const deployVersion = configuredDeploy?.deploy_version ?? null;
+  const branch = configuredDeploy?.branch ?? null;
+  const deployedAt = configuredDeploy?.deployed_at ?? null;
+  if (commitSha === null && deployVersion === null && branch === null && deployedAt === null) {
     return null;
   }
   return {
     version: 1,
-    commit_sha: envelope.payload.commit_sha,
-    deploy_version: envelope.payload.version,
-    branch: envelope.payload.branch,
-    deployed_at: toIsoTimestamp(envelope.payload.deployed_at),
+    commit_sha: commitSha,
+    deploy_version: deployVersion,
+    branch,
+    deployed_at: deployedAt === null ? null : toIsoTimestamp(deployedAt),
     regression_window: trigger === "regression_reopen"
   };
 }
@@ -19073,34 +19288,49 @@ function buildRuntimeContext(envelopes) {
   if (backendException === null) {
     return null;
   }
+  const runtime = backendException.payload.runtime;
   return {
     version: 1,
     name: backendException.service.runtime ?? "unknown",
-    runtime_version: backendException.payload.runtime.version,
-    platform: null,
-    arch: null,
-    pid: null,
-    cwd: null,
-    uptime_sec: null,
-    hostname: null,
-    thread_id: null,
+    runtime_version: runtime.version,
+    platform: runtime.platform ?? null,
+    arch: runtime.arch ?? null,
+    pid: runtime.pid ?? null,
+    cwd: runtime.cwd ?? null,
+    uptime_sec: runtime.uptime_sec ?? null,
+    hostname: runtime.hostname ?? null,
+    thread_id: runtime.thread_id ?? null,
     framework: backendException.service.framework ?? null,
-    framework_version: null,
-    memory: null,
-    framework_extras: null
+    framework_version: runtime.framework_version ?? null,
+    memory: runtime.memory ?? null,
+    framework_extras: runtime.framework_extras ?? null
   };
 }
-function buildGitContext(envelopes) {
+function buildGitContext(envelopes, configuredDeploy) {
   const deployEnvelope = selectLatestEnvelopeByType(envelopes, isDeployMetadataEnvelope);
   if (deployEnvelope === null) {
-    return null;
+    const commit = configuredDeploy?.commit_sha ?? null;
+    const branch = configuredDeploy?.branch ?? null;
+    const repo = configuredDeploy?.repo ?? null;
+    if (commit === null && branch === null && repo === null) {
+      return null;
+    }
+    return {
+      version: 1,
+      commit,
+      commit_short: commit === null ? null : commit.slice(0, 7),
+      branch,
+      repo,
+      dirty: false,
+      source: "env"
+    };
   }
   return {
     version: 1,
     commit: deployEnvelope.payload.commit_sha,
     commit_short: deployEnvelope.payload.commit_sha.slice(0, 7),
     branch: deployEnvelope.payload.branch,
-    repo: null,
+    repo: configuredDeploy?.repo ?? null,
     dirty: false,
     source: "env"
   };
@@ -19143,10 +19373,11 @@ function buildBundle(input) {
   const responseContext = buildResponseContext(sourceEnvelopes);
   const logsContext = buildLogsContext(sourceEnvelopes);
   const frontendContext = buildFrontendContext(sourceEnvelopes);
-  const deployContext = buildDeployContext(sourceEnvelopes, input.job.trigger);
+  const deployContext = buildDeployContext(sourceEnvelopes, input.job.trigger, input.configuredDeploy);
   const runtimeContext = buildRuntimeContext(sourceEnvelopes);
-  const gitContext = buildGitContext(sourceEnvelopes);
+  const gitContext = buildGitContext(sourceEnvelopes, input.configuredDeploy);
   const deviceContext = buildDeviceContext(sourceEnvelopes);
+  const dependenciesContext = buildDependenciesContext(input.incident, errorContext, requestContext);
   const primarySignalType = primarySignalEnvelope !== null ? mapSignalType(primarySignalEnvelope.event_type) : inferSignalTypeFromSourceEventTypes(sourceEventTypes);
   const primarySourceEvent = errorContext?.name ?? sourceEventTypes[0] ?? "backend_exception";
   const firstSeenAt = new Date(input.incident.first_seen_at).toISOString();
@@ -19155,7 +19386,15 @@ function buildBundle(input) {
   const serviceRuntime = input.incident.service_runtime ?? selectLatestEnvelope(sourceEnvelopes, (envelope) => envelope.event_type !== "probe_event")?.service.runtime ?? null;
   const serviceFramework = input.incident.service_framework ?? selectLatestEnvelope(sourceEnvelopes, (envelope) => envelope.event_type !== "probe_event")?.service.framework ?? null;
   const customerVisible = frontendContext !== null;
-  return BundleV1Schema.parse({
+  const firstApplicationFrame = deriveFirstApplicationFrame(errorContext);
+  const summaryGuidance = buildSummaryGuidance({
+    errorContext,
+    requestContext,
+    responseContext,
+    dependenciesContext,
+    firstApplicationFrame
+  });
+  const candidate = {
     bundle_version: 1,
     bundle_id: `bnd_${input.incident.incident_id}`,
     bundle_type: "failure",
@@ -19190,13 +19429,13 @@ function buildBundle(input) {
     summary: {
       title: input.incident.title,
       description: `Deterministic bundle generated from ${input.job.trigger}`,
-      likely_cause: null,
-      confidence: 0,
-      recommended_action: null,
+      likely_cause: summaryGuidance.likely_cause,
+      confidence: summaryGuidance.confidence,
+      recommended_action: summaryGuidance.recommended_action,
       severity: input.incident.severity,
       error_type: primarySourceEvent,
       error_message: errorContext?.message ?? input.incident.title,
-      first_application_frame: deriveFirstApplicationFrame(errorContext),
+      first_application_frame: firstApplicationFrame,
       primary_signal: primarySignalType,
       signals: {
         new_deploy: input.job.trigger === "deploy_metadata",
@@ -19221,7 +19460,7 @@ function buildBundle(input) {
       deploy: deployContext,
       runtime: runtimeContext,
       git: gitContext,
-      dependencies: null,
+      dependencies: dependenciesContext,
       probe_data: {
         version: 1,
         items: input.probeDataItems
@@ -19242,11 +19481,7 @@ function buildBundle(input) {
       production_verified: false
     },
     links: {
-      self: null,
-      reproduction: null,
-      incident: null,
-      project: null,
-      docs: null
+      ...buildLinks(input.incident, input.linkBaseUrls)
     },
     redaction: {
       redacted: true,
@@ -19259,7 +19494,8 @@ function buildBundle(input) {
       generator_version: "worker-build-bundle-v2",
       generation_number: input.bundleMetadata.generation_number
     }
-  });
+  };
+  return BundleV1Schema.parse(applyBundleRedaction(candidate));
 }
 
 // ../../packages/repro-engine/src/index.ts
@@ -19279,6 +19515,44 @@ function shellQuote(value) {
 function sortRecordEntries(record) {
   return Object.entries(record).sort(([left], [right]) => left.localeCompare(right));
 }
+var REPLAY_HEADER_PRIORITY = [
+  "authorization",
+  "cookie",
+  "accept",
+  "content-type",
+  "origin",
+  "accept-language",
+  "access-control-request-method",
+  "access-control-request-headers",
+  "x-request-id",
+  "x-correlation-id",
+  "x-debugbundle-trace-id"
+];
+var DROPPED_REPLAY_HEADERS = /* @__PURE__ */ new Set([
+  "host",
+  "x-forwarded-host",
+  "x-forwarded-proto",
+  "connection",
+  "keep-alive",
+  "transfer-encoding",
+  "upgrade",
+  "te",
+  "trailer",
+  "proxy-connection",
+  "accept-encoding",
+  "content-length",
+  "cache-control",
+  "pragma",
+  "priority",
+  "sec-ch-ua",
+  "sec-ch-ua-mobile",
+  "sec-ch-ua-platform",
+  "sec-fetch-dest",
+  "sec-fetch-mode",
+  "sec-fetch-site",
+  "sec-fetch-user",
+  "user-agent"
+]);
 function serializeScalarValue(value) {
   if (typeof value === "string") {
     return value;
@@ -19357,12 +19631,25 @@ function buildStructuredReplayQuery(query) {
   return hasStructuredQueryAmbiguity(normalizedQuery) ? normalizedQuery : void 0;
 }
 function buildReplayHeaders(headers) {
-  return Object.fromEntries(
-    sortRecordEntries(headers).filter(([headerName]) => !["host", "x-forwarded-host", "x-forwarded-proto"].includes(headerName.toLowerCase())).map(([headerName, headerValue]) => [headerName, normalizeHeaderValue(headerValue)])
-  );
+  const entries = sortRecordEntries(headers).filter(([headerName]) => !DROPPED_REPLAY_HEADERS.has(headerName.toLowerCase())).map(([headerName, headerValue]) => [headerName, normalizeHeaderValue(headerValue)]);
+  entries.sort(([left], [right]) => {
+    const leftPriority = REPLAY_HEADER_PRIORITY.indexOf(left.toLowerCase());
+    const rightPriority = REPLAY_HEADER_PRIORITY.indexOf(right.toLowerCase());
+    if (leftPriority !== -1 || rightPriority !== -1) {
+      if (leftPriority === -1) {
+        return 1;
+      }
+      if (rightPriority === -1) {
+        return -1;
+      }
+      return leftPriority - rightPriority;
+    }
+    return left.localeCompare(right);
+  });
+  return Object.fromEntries(entries);
 }
 function expandHeaderValues(headers) {
-  return sortRecordEntries(headers).flatMap(([headerName, headerValue]) => {
+  return Object.entries(headers).flatMap(([headerName, headerValue]) => {
     if (Array.isArray(headerValue)) {
       return headerValue.map((item) => [headerName, serializeScalarValue(item)]);
     }
@@ -20472,7 +20759,7 @@ function buildCloudSuggestedActions(status, incidentId, mode = "passive_recent_i
     ];
   }
   return [
-    "Run debugbundle login to create ~/.debugbundle/auth.json before verifying cloud traffic.",
+    "Run debugbundle login to choose an auth flow, or use debugbundle login --github, debugbundle login --github-device, or debugbundle login <dbundle_mem_...> to create ~/.debugbundle/auth.json before verifying cloud traffic.",
     "Generate a live cloud request, then re-run debugbundle verify cloud with the correct project and service filters."
   ];
 }
@@ -21359,7 +21646,8 @@ function createAlertMcpTools(api) {
           bearerToken: String(input["bearerToken"]),
           projectId: String(input["projectId"]),
           channel: String(input["channel"]),
-          conditionType: String(input["conditionType"])
+          conditionType: String(input["conditionType"]),
+          config: input["config"]
         };
         if (typeof input["serviceId"] === "string") {
           requestInput.serviceId = input["serviceId"];
@@ -21367,9 +21655,6 @@ function createAlertMcpTools(api) {
         if (typeof input["severityMin"] === "string") {
           requestInput.severityMin = input["severityMin"];
         }
-        if (typeof input["config"] === "object" && input["config"] !== null) {
-          requestInput.config = input["config"];
-        }
         if (typeof input["isEnabled"] === "boolean") {
           requestInput.isEnabled = input["isEnabled"];
         }
@@ -24726,7 +25011,7 @@ var MCP_TOOL_CATALOG = [
       channel: external_exports.string(),
       conditionType: external_exports.string(),
       severityMin: external_exports.string().optional(),
-      config: jsonObjectSchema.optional(),
+      config: jsonObjectSchema,
       isEnabled: external_exports.boolean().optional()
     })
   },
@@ -25030,7 +25315,7 @@ function createMcpServer(input) {
             },
             serverInfo: {
               name: "@debugbundle/mcp",
-              version: "0.1.1"
+              version: "0.1.2"
             }
           }
         };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@debugbundle/mcp",
-  "version": "0.1.1",
+  "version": "0.1.2",
   "private": false,
   "description": "Model Context Protocol server for DebugBundle",
   "license": "AGPL-3.0-only",