@debugbundle/mcp 1.1.0 → 1.2.0

package/dist/main.cjs

@@ -15094,7 +15094,7 @@ var ProjectMetricsSchema = external_exports.object({
   monthly_raw_ingested_events: external_exports.number().int().nonnegative(),
   retained_bundles: external_exports.number().int().nonnegative(),
   monthly_alert_deliveries: external_exports.number().int().nonnegative()
-}).strict();
+});
 var ProjectRecordSchema = external_exports.object({
   project_id: external_exports.string(),
   organization_id: external_exports.string(),
@@ -15103,6 +15103,7 @@ var ProjectRecordSchema = external_exports.object({
   relationship: external_exports.enum(["owned", "shared"]),
   sharing_state: external_exports.enum(["private", "shared_by_you", "shared_with_you"]),
   effective_role: external_exports.enum(["owner", "admin", "member"]),
+  shared_access_suspended: external_exports.boolean().optional(),
   name: external_exports.string(),
   slug: external_exports.string(),
   environment_default: external_exports.string(),
@@ -15110,13 +15111,13 @@ var ProjectRecordSchema = external_exports.object({
   metrics: ProjectMetricsSchema,
   created_at: external_exports.string(),
   updated_at: external_exports.string()
-}).strict();
+});
 var ProjectListResponseSchema = external_exports.object({
   projects: external_exports.array(ProjectRecordSchema)
-}).strict();
+});
 var ProjectCreateResponseSchema = external_exports.object({
   project: ProjectRecordSchema
-}).strict();
+});
 var DeletedProjectRecordSchema = external_exports.object({
   project_id: external_exports.string(),
   organization_id: external_exports.string(),
@@ -15125,16 +15126,17 @@ var DeletedProjectRecordSchema = external_exports.object({
   relationship: external_exports.enum(["owned", "shared"]),
   sharing_state: external_exports.enum(["private", "shared_by_you", "shared_with_you"]),
   effective_role: external_exports.enum(["owner", "admin", "member"]),
+  shared_access_suspended: external_exports.boolean().optional(),
   name: external_exports.string(),
   slug: external_exports.string(),
   environment_default: external_exports.string(),
   organization_plan: external_exports.enum(["free", "solo", "team"]),
   created_at: external_exports.string(),
   updated_at: external_exports.string()
-}).strict();
+});
 var ProjectDeleteResponseSchema = external_exports.object({
   project: DeletedProjectRecordSchema
-}).strict();
+});
 var ApiErrorResponseSchema4 = external_exports.object({
   error: external_exports.string()
 }).strict();
@@ -15326,6 +15328,9 @@ var IncidentsResponseSchema = external_exports.object({
 var IncidentResponseSchema = external_exports.object({
   incident: IncidentSchema
 }).strict();
+var BulkIncidentResponseSchema = external_exports.object({
+  incidents: external_exports.array(IncidentSchema)
+}).strict();
 var ImprovementResponseSchema = external_exports.object({
   improvement: ImprovementSchema
 }).strict();
@@ -15532,6 +15537,20 @@ function createRetrievalApi(client) {
       );
       return parsed.incident;
     },
+    async resolveIncidents(input) {
+      const parsed = await expectParsed(
+        client.request({
+          method: "POST",
+          path: "/v1/incidents/resolve",
+          bearerToken: input.bearerToken,
+          body: {
+            incident_ids: input.incidentIds
+          }
+        }),
+        BulkIncidentResponseSchema
+      );
+      return parsed.incidents;
+    },
     async reopenIncident(input) {
       const parsed = await expectParsed(
         client.request({
@@ -15543,6 +15562,20 @@ function createRetrievalApi(client) {
       );
       return parsed.incident;
     },
+    async reopenIncidents(input) {
+      const parsed = await expectParsed(
+        client.request({
+          method: "POST",
+          path: "/v1/incidents/reopen",
+          bearerToken: input.bearerToken,
+          body: {
+            incident_ids: input.incidentIds
+          }
+        }),
+        BulkIncidentResponseSchema
+      );
+      return parsed.incidents;
+    },
     async getBundle(input) {
       const bundle = await expectParsed(
         client.request({
@@ -16468,25 +16501,74 @@ var CaptureProbeEventsSchema = external_exports.enum(CaptureProbeEventsValues);
 var RequestSignalClassificationValues = ["incident_signal", "context_signal"];
 var RequestSignalClassificationSchema = external_exports.enum(RequestSignalClassificationValues);
 var RECOMMENDED_IMMEDIATE_CLIENT_ERROR_STATUSES = [401, 403, 409, 422];
+var HTTP_METHOD_VALUES = ["GET", "POST", "PUT", "PATCH", "DELETE", "HEAD", "OPTIONS"];
 var ImmediateClientErrorStatusSchema = external_exports.number().int().min(400).max(499);
+var HttpMethodSchema = external_exports.enum(HTTP_METHOD_VALUES);
 function normalizeImmediateClientErrorStatuses(statuses) {
   return Array.from(new Set(statuses)).sort((left, right) => left - right);
 }
 var ImmediateClientErrorStatusesSchema = external_exports.array(ImmediateClientErrorStatusSchema).max(12).transform((statuses) => normalizeImmediateClientErrorStatuses(statuses));
+function normalizePathPattern(value) {
+  return value.trim().replace(/\/{2,}/g, "/");
+}
+function isValidPathPattern(value) {
+  const normalized = normalizePathPattern(value);
+  if (!normalized.startsWith("/") || normalized.includes("?") || normalized.includes("#")) {
+    return false;
+  }
+  const wildcardIndex = normalized.indexOf("*");
+  return wildcardIndex === -1 || wildcardIndex === normalized.length - 1;
+}
+function normalizeHttpMethods(methods) {
+  if (methods === void 0 || methods.length === 0) {
+    return [];
+  }
+  const normalized = methods.map((method) => method.toUpperCase()).filter(
+    (method) => HTTP_METHOD_VALUES.includes(method)
+  );
+  return Array.from(new Set(normalized)).sort();
+}
+function normalizeImmediateClientErrorPathRules(rules) {
+  const normalized = rules.map((rule) => ({
+    status_code: rule.status_code,
+    path_pattern: normalizePathPattern(rule.path_pattern),
+    methods: normalizeHttpMethods(rule.methods)
+  }));
+  const deduped = /* @__PURE__ */ new Map();
+  for (const rule of normalized) {
+    deduped.set(`${rule.status_code}:${rule.path_pattern}:${rule.methods.join(",")}`, rule);
+  }
+  return Array.from(deduped.values()).sort((left, right) => {
+    if (left.status_code !== right.status_code) return left.status_code - right.status_code;
+    const pathComparison = left.path_pattern.localeCompare(right.path_pattern);
+    if (pathComparison !== 0) return pathComparison;
+    return left.methods.join(",").localeCompare(right.methods.join(","));
+  });
+}
+var ImmediateClientErrorPathRuleSchema = external_exports.object({
+  status_code: ImmediateClientErrorStatusSchema,
+  path_pattern: external_exports.string().min(1).max(256).transform(normalizePathPattern).refine(isValidPathPattern, {
+    message: "path_pattern must start with / and may only use a terminal * wildcard"
+  }),
+  methods: external_exports.array(HttpMethodSchema).max(7).optional().default([]).transform(normalizeHttpMethods)
+});
+var ImmediateClientErrorPathRulesSchema = external_exports.array(ImmediateClientErrorPathRuleSchema).max(25).transform((rules) => normalizeImmediateClientErrorPathRules(rules));
 var ResolvedCapturePolicySchema = external_exports.object({
   preset: CapturePresetSchema,
   capture_logs: CaptureLogsSchema,
   capture_request_events: CaptureRequestEventsSchema,
   capture_breadcrumbs: CaptureBreadcrumbsSchema,
   capture_probe_events: CaptureProbeEventsSchema,
-  immediate_client_error_statuses: ImmediateClientErrorStatusesSchema
+  immediate_client_error_statuses: ImmediateClientErrorStatusesSchema,
+  immediate_client_error_path_rules: ImmediateClientErrorPathRulesSchema.default([])
 });
 var CapturePolicyOverridesSchema = external_exports.object({
   capture_logs: CaptureLogsSchema.nullable(),
   capture_request_events: CaptureRequestEventsSchema.nullable(),
   capture_breadcrumbs: CaptureBreadcrumbsSchema.nullable(),
   capture_probe_events: CaptureProbeEventsSchema.nullable(),
-  immediate_client_error_statuses: ImmediateClientErrorStatusesSchema.nullable()
+  immediate_client_error_statuses: ImmediateClientErrorStatusesSchema.nullable(),
+  immediate_client_error_path_rules: ImmediateClientErrorPathRulesSchema.nullable().default(null)
 });
 var CapturePolicyResponseSchema = external_exports.object({
   access_mode: external_exports.enum(["manage", "preview"]),
@@ -16501,6 +16583,7 @@ var CapturePolicySchema = external_exports.object({
   capture_breadcrumbs: CaptureBreadcrumbsSchema.nullable(),
   capture_probe_events: CaptureProbeEventsSchema.nullable(),
   immediate_client_error_statuses: ImmediateClientErrorStatusesSchema.nullable(),
+  immediate_client_error_path_rules: ImmediateClientErrorPathRulesSchema.nullable().default(null),
   updated_at: external_exports.string().datetime()
 });
 var CapturePolicyUpdateSchema = external_exports.object({
@@ -16509,7 +16592,8 @@ var CapturePolicyUpdateSchema = external_exports.object({
   capture_request_events: CaptureRequestEventsSchema.nullable().optional(),
   capture_breadcrumbs: CaptureBreadcrumbsSchema.nullable().optional(),
   capture_probe_events: CaptureProbeEventsSchema.nullable().optional(),
-  immediate_client_error_statuses: ImmediateClientErrorStatusesSchema.nullable().optional()
+  immediate_client_error_statuses: ImmediateClientErrorStatusesSchema.nullable().optional(),
+  immediate_client_error_path_rules: ImmediateClientErrorPathRulesSchema.nullable().optional()
 });
 var PRESET_DEFAULTS = {
   minimal: {
@@ -16517,30 +16601,69 @@ var PRESET_DEFAULTS = {
     capture_request_events: "failures_only",
     capture_breadcrumbs: "local_only",
     capture_probe_events: "buffer_only",
-    immediate_client_error_statuses: []
+    immediate_client_error_statuses: [],
+    immediate_client_error_path_rules: []
   },
   balanced: {
     capture_logs: "warning",
     capture_request_events: "failures_only",
     capture_breadcrumbs: "exception_only",
     capture_probe_events: "buffer_only",
-    immediate_client_error_statuses: []
+    immediate_client_error_statuses: [],
+    immediate_client_error_path_rules: []
   },
   investigative: {
     capture_logs: "info",
     capture_request_events: "all",
     capture_breadcrumbs: "standalone",
     capture_probe_events: "standalone_when_activated",
-    immediate_client_error_statuses: [...RECOMMENDED_IMMEDIATE_CLIENT_ERROR_STATUSES]
+    immediate_client_error_statuses: [...RECOMMENDED_IMMEDIATE_CLIENT_ERROR_STATUSES],
+    immediate_client_error_path_rules: []
   }
 };
 var BALANCED_IMMEDIATE_REQUEST_STATUSES = /* @__PURE__ */ new Set([408, 423, 424, 425, 429]);
 var INVESTIGATIVE_IMMEDIATE_REQUEST_STATUSES = /* @__PURE__ */ new Set([...BALANCED_IMMEDIATE_REQUEST_STATUSES, 409]);
-var BALANCED_STANDARD_ANOMALY_STATUSES = /* @__PURE__ */ new Set([401, 403, 404, 409, 422]);
-var BALANCED_HIGH_VOLUME_ANOMALY_STATUSES = /* @__PURE__ */ new Set([400, 410]);
-var INVESTIGATIVE_ANOMALY_STATUSES = /* @__PURE__ */ new Set([...BALANCED_STANDARD_ANOMALY_STATUSES, ...BALANCED_HIGH_VOLUME_ANOMALY_STATUSES]);
+function normalizeRequestPath(value) {
+  if (typeof value !== "string") {
+    return null;
+  }
+  const trimmed = value.trim();
+  if (trimmed.length === 0) {
+    return null;
+  }
+  const path = trimmed.startsWith("http://") || trimmed.startsWith("https://") ? (() => {
+    try {
+      return new URL(trimmed).pathname;
+    } catch {
+      return trimmed;
+    }
+  })() : trimmed;
+  return (path.split(/[?#]/, 1)[0] ?? path).replace(/\/{2,}/g, "/");
+}
+function pathPatternMatches(rulePattern, requestPath) {
+  const pattern = normalizePathPattern(rulePattern);
+  if (!pattern.endsWith("*")) {
+    return requestPath === pattern;
+  }
+  const prefix = pattern.slice(0, -1);
+  return requestPath.startsWith(prefix);
+}
+function matchesImmediateClientErrorPathRule(input) {
+  const { responseStatus, immediateClientErrorPathRules = [] } = input;
+  if (responseStatus === null || !Number.isFinite(responseStatus) || immediateClientErrorPathRules.length === 0) {
+    return false;
+  }
+  const requestPath = normalizeRequestPath(input.requestPath);
+  if (requestPath === null) {
+    return false;
+  }
+  const httpMethod = typeof input.httpMethod === "string" ? input.httpMethod.toUpperCase() : null;
+  return immediateClientErrorPathRules.some(
+    (rule) => rule.status_code === responseStatus && (rule.methods.length === 0 || httpMethod !== null && rule.methods.includes(httpMethod)) && pathPatternMatches(rule.path_pattern, requestPath)
+  );
+}
 function classifyRequestStatus(input) {
-  const { responseStatus, capturePreset, immediateClientErrorStatuses = [] } = input;
+  const { responseStatus, capturePreset, immediateClientErrorStatuses = [], immediateClientErrorPathRules = [] } = input;
   if (responseStatus === null || !Number.isFinite(responseStatus)) {
     return "context_signal";
   }
@@ -16550,6 +16673,14 @@ function classifyRequestStatus(input) {
   if (immediateClientErrorStatuses.includes(responseStatus)) {
     return "incident_signal";
   }
+  if (matchesImmediateClientErrorPathRule({
+    responseStatus,
+    requestPath: input.requestPath,
+    httpMethod: input.httpMethod,
+    immediateClientErrorPathRules
+  })) {
+    return "incident_signal";
+  }
   if (capturePreset === "investigative") {
     return INVESTIGATIVE_IMMEDIATE_REQUEST_STATUSES.has(responseStatus) ? "incident_signal" : "context_signal";
   }
@@ -16559,33 +16690,101 @@ function classifyRequestStatus(input) {
   return "context_signal";
 }
 function getRequestAnomalyThreshold(input) {
-  const { responseStatus, capturePreset } = input;
+  const { responseStatus } = input;
   if (responseStatus === null || !Number.isFinite(responseStatus) || responseStatus < 400 || responseStatus >= 500) {
     return null;
   }
-  if (capturePreset === "minimal") {
-    return null;
+  return null;
+}
+
+// ../../packages/shared-types/src/request-failure-noise.ts
+function isLowValueExternalProbeRequestFailure404(input) {
+  if (input.responseStatus !== 404 || input.httpMethod.toUpperCase() !== "GET") {
+    return false;
   }
-  if (capturePreset === "investigative") {
-    return INVESTIGATIVE_ANOMALY_STATUSES.has(responseStatus) ? {
-      minimum_occurrences_5m: 8,
-      minimum_ratio_5m_to_1h: 2
-    } : null;
+  const normalizedRoute = input.routeTemplate.toLowerCase().replace(/\/+$/, "") || "/";
+  const normalizedPath = normalizePath(input.requestPath ?? input.routeTemplate);
+  const routesToCheck = /* @__PURE__ */ new Set([normalizedRoute, normalizedPath]);
+  for (const route of routesToCheck) {
+    if (isRouteOnlyExternalProbe(route)) {
+      return true;
+    }
   }
-  if (BALANCED_STANDARD_ANOMALY_STATUSES.has(responseStatus)) {
-    return {
-      minimum_occurrences_5m: 20,
-      minimum_ratio_5m_to_1h: 3
-    };
+  return isDirectIpRequest(input.headers ?? null) && [...routesToCheck].some(isGenericDirectIpProbeRoute);
+}
+function normalizePath(path) {
+  const withoutQuery = path.split("?")[0] ?? path;
+  return withoutQuery.toLowerCase().replace(/\/+$/, "") || "/";
+}
+function isRouteOnlyExternalProbe(normalizedRoute) {
+  const exactRoutes = /* @__PURE__ */ new Set([
+    "/.env",
+    "/__debug__/render_panel",
+    "/actuator",
+    "/autodiscover/autodiscover.json",
+    "/developmentserver/metadatauploader",
+    "/cpanel",
+    "/favicon.ico",
+    "/geoserver/web",
+    "/hnap1",
+    "/logon/logonpoint/index.html",
+    "/owa/auth/logon.aspx",
+    "/robots.txt",
+    "/rdweb/pages",
+    "/web",
+    "/webclient/login.xhtml",
+    "/webconsole",
+    "/webui",
+    "/whm",
+    "/wp-admin",
+    "/wp-login.php",
+    "/wsman",
+    "/xmlrpc.php"
+  ]);
+  if (exactRoutes.has(normalizedRoute)) {
+    return true;
   }
-  if (BALANCED_HIGH_VOLUME_ANOMALY_STATUSES.has(responseStatus)) {
-    return {
-      minimum_occurrences_5m: 50,
-      minimum_ratio_5m_to_1h: 5
-    };
+  return normalizedRoute.includes("/.git/") || normalizedRoute.includes("/.svn/") || normalizedRoute.includes("/api_keys") || normalizedRoute.includes("/backup/api_keys") || normalizedRoute.includes("/phpmyadmin") || normalizedRoute.includes("/pma/") || normalizedRoute.includes("/vendor/phpunit/") || normalizedRoute.startsWith("/autodiscover/") || normalizedRoute.startsWith("/cgi-bin/") || normalizedRoute.startsWith("/ecp/") || normalizedRoute.endsWith("/.git/config") || normalizedRoute.endsWith("/composer.json") || normalizedRoute.endsWith("/composer.lock") || normalizedRoute.endsWith("/package-lock.json") || normalizedRoute.endsWith("/package.json") || normalizedRoute.endsWith("/server-status") || normalizedRoute.includes("wp-config") || normalizedRoute.startsWith("/owa/") || normalizedRoute.startsWith("/rdweb/") || normalizedRoute.startsWith("/vpn/") || normalizedRoute.startsWith("/wp-") || isSensitiveBackupFileProbe(normalizedRoute);
+}
+function isSensitiveBackupFileProbe(normalizedRoute) {
+  if (!/\.(?:bak|backup|dump|old|orig|save|sql|swp|tar|tar\.gz|zip)$/.test(normalizedRoute)) {
+    return false;
+  }
+  return /(?:^|\/|\.)(?:backup|config|database|db|dump|env|secret|site|www|wp-config)(?:\/|\.|_|-|$)/.test(normalizedRoute);
+}
+function isGenericDirectIpProbeRoute(normalizedRoute) {
+  return [
+    "/admin",
+    "/administrator",
+    "/login",
+    "/logincheck",
+    "/remote/logincheck"
+  ].includes(normalizedRoute);
+}
+function isDirectIpRequest(headers) {
+  if (headers === null) {
+    return false;
+  }
+  const host = readHeader(headers, "x-forwarded-host") ?? readHeader(headers, "host");
+  if (host === null) {
+    return false;
+  }
+  return isIpLikeHost(host);
+}
+function readHeader(headers, name) {
+  const direct = headers[name] ?? headers[name.toLowerCase()];
+  if (typeof direct === "string") {
+    return direct;
+  }
+  if (Array.isArray(direct) && typeof direct[0] === "string") {
+    return direct[0];
   }
   return null;
 }
+function isIpLikeHost(value) {
+  const host = value.trim().replace(/:\d+$/, "");
+  return /^(?:\d{1,3}\.){3}\d{1,3}$/.test(host) || /^\[[0-9a-f:]+\]$/i.test(host) || host.includes(":") && /^[0-9a-f:]+$/i.test(host);
+}
 
 // ../../packages/shared-types/src/capture-rules.ts
 var CAPTURE_RULE_EVENT_TYPES = [
@@ -19203,7 +19402,7 @@ function getRequestResponseStatus(payload) {
   const status = payload?.["response_status"];
   return typeof status === "number" && Number.isFinite(status) ? status : null;
 }
-function classifyEvent(eventType, logLevel, probeActivationId, payload, capturePreset = "minimal", immediateClientErrorStatuses = []) {
+function classifyEvent(eventType, logLevel, probeActivationId, payload, capturePreset = "minimal", immediateClientErrorStatuses = [], immediateClientErrorPathRules = []) {
   switch (eventType) {
     case "backend_exception":
     case "frontend_exception":
@@ -19215,7 +19414,14 @@ function classifyEvent(eventType, logLevel, probeActivationId, payload, captureP
       return "context_signal";
     case "request_event": {
       const responseStatus = getRequestResponseStatus(payload);
-      return classifyRequestStatus({ responseStatus, capturePreset, immediateClientErrorStatuses });
+      return classifyRequestStatus({
+        responseStatus,
+        requestPath: payload?.["path"],
+        httpMethod: payload?.["method"],
+        capturePreset,
+        immediateClientErrorStatuses,
+        immediateClientErrorPathRules
+      });
     }
     case "frontend_breadcrumb":
     case "deploy_metadata":
@@ -20412,6 +20618,7 @@ var STORAGE_BOOTSTRAP_STATEMENTS = [
       capture_breadcrumbs text,
       capture_probe_events text,
       immediate_client_error_statuses jsonb,
+      immediate_client_error_path_rules jsonb,
       updated_at timestamptz NOT NULL DEFAULT now()
     )
   `,
@@ -20963,7 +21170,8 @@ var STORAGE_BOOTSTRAP_STATEMENTS = [
   `
     CREATE TABLE github_dispatch_deliveries (
       id uuid PRIMARY KEY,
-      rule_id uuid NOT NULL REFERENCES github_dispatch_rules(id) ON DELETE CASCADE,
+      rule_id uuid NOT NULL,
+      rule_name text NOT NULL,
       project_id uuid NOT NULL REFERENCES projects(id) ON DELETE CASCADE,
       incident_id uuid REFERENCES incidents(id) ON DELETE CASCADE,
       improvement_opportunity_id uuid REFERENCES improvement_opportunities(id) ON DELETE CASCADE,
@@ -21051,6 +21259,26 @@ var STORAGE_BOOTSTRAP_STATEMENTS = [
   `
     CREATE INDEX trial_lifecycle_events_org_event_created_idx
     ON trial_lifecycle_events (organization_id, event_type, created_at DESC)
+  `,
+  `
+    CREATE TABLE plan_cleanup_tasks (
+      id uuid PRIMARY KEY,
+      organization_id uuid NOT NULL REFERENCES organizations(id) ON DELETE CASCADE,
+      project_id uuid NOT NULL REFERENCES projects(id) ON DELETE CASCADE,
+      cleanup_type text NOT NULL
+        CHECK (cleanup_type IN ('delete_improvement_bundle_objects')),
+      attempt_count integer NOT NULL DEFAULT 0,
+      last_error text,
+      next_attempt_at timestamptz NOT NULL DEFAULT now(),
+      completed_at timestamptz,
+      created_at timestamptz NOT NULL DEFAULT now(),
+      updated_at timestamptz NOT NULL DEFAULT now(),
+      UNIQUE (project_id, cleanup_type)
+    )
+  `,
+  `
+    CREATE INDEX plan_cleanup_tasks_pending_idx
+    ON plan_cleanup_tasks (completed_at, next_attempt_at, created_at)
   `
 ];
 
@@ -21702,6 +21930,57 @@ var STORAGE_SCHEMA_MIGRATIONS = [
         )
       `
     ]
+  }),
+  defineStorageSchemaMigration({
+    id: "202606050001_preserve_github_dispatch_history_when_rules_are_deleted",
+    description: "Snapshot GitHub rule names onto deliveries and decouple delivery history from live rule rows.",
+    statements: [
+      "ALTER TABLE github_dispatch_deliveries ADD COLUMN IF NOT EXISTS rule_name text",
+      `
+        UPDATE github_dispatch_deliveries deliveries
+        SET rule_name = rules.name
+        FROM github_dispatch_rules rules
+        WHERE deliveries.rule_id = rules.id
+          AND deliveries.rule_name IS NULL
+      `,
+      "ALTER TABLE github_dispatch_deliveries ALTER COLUMN rule_name SET DEFAULT ''",
+      "UPDATE github_dispatch_deliveries SET rule_name = '' WHERE rule_name IS NULL",
+      "ALTER TABLE github_dispatch_deliveries ALTER COLUMN rule_name SET NOT NULL",
+      "ALTER TABLE github_dispatch_deliveries DROP CONSTRAINT IF EXISTS github_dispatch_deliveries_rule_id_fkey"
+    ]
+  }),
+  defineStorageSchemaMigration({
+    id: "202606050002_add_durable_plan_cleanup_tasks",
+    description: "Persist retryable external cleanup tasks for side effects that cannot be completed transactionally.",
+    statements: [
+      `
+        CREATE TABLE IF NOT EXISTS plan_cleanup_tasks (
+          id uuid PRIMARY KEY,
+          organization_id uuid NOT NULL REFERENCES organizations(id) ON DELETE CASCADE,
+          project_id uuid NOT NULL REFERENCES projects(id) ON DELETE CASCADE,
+          cleanup_type text NOT NULL
+            CHECK (cleanup_type IN ('delete_improvement_bundle_objects')),
+          attempt_count integer NOT NULL DEFAULT 0,
+          last_error text,
+          next_attempt_at timestamptz NOT NULL DEFAULT now(),
+          completed_at timestamptz,
+          created_at timestamptz NOT NULL DEFAULT now(),
+          updated_at timestamptz NOT NULL DEFAULT now(),
+          UNIQUE (project_id, cleanup_type)
+        )
+      `,
+      `
+        CREATE INDEX IF NOT EXISTS plan_cleanup_tasks_pending_idx
+        ON plan_cleanup_tasks (completed_at, next_attempt_at, created_at)
+      `
+    ]
+  }),
+  defineStorageSchemaMigration({
+    id: "202606080001_add_capture_policy_client_error_path_rules",
+    description: "Add path-scoped client error incident promotion rules to capture policies.",
+    statements: [
+      "ALTER TABLE capture_policies ADD COLUMN IF NOT EXISTS immediate_client_error_path_rules jsonb"
+    ]
   })
 ];
 
@@ -22982,6 +23261,15 @@ function collectRequestAnomalyAggregates(batches, capturePreset) {
       if (threshold === null || responseStatus === null || method === null || routeTemplate === null) {
         continue;
       }
+      if (isLowValueExternalProbeRequestFailure404({
+        httpMethod: method,
+        requestPath: event.payload.path,
+        routeTemplate,
+        responseStatus,
+        headers: event.payload.headers
+      })) {
+        continue;
+      }
       const projectId = requireProjectId(event);
       const incidentFingerprint = buildRequestAnomalyFingerprint({
         projectId,
@@ -26312,6 +26600,67 @@ function createRetrievalMcpTools(api) {
         mapMcpError12(error);
       }
     },
+    async resolve_incidents(input) {
+      try {
+        const incidentIds = Array.from(
+          new Set((Array.isArray(input["incidentIds"]) ? input["incidentIds"] : []).map((value) => String(value)))
+        );
+        const localIncidents = /* @__PURE__ */ new Map();
+        const cloudIncidentIds = [];
+        if (await shouldUseLocalSource(input)) {
+          return {
+            incidents: await Promise.all(
+              incidentIds.map((incidentId) => resolveLocalIncident({ incidentId }))
+            )
+          };
+        }
+        if (await shouldCombineLocalAndCloudSource(input)) {
+          for (const incidentId of incidentIds) {
+            try {
+              localIncidents.set(incidentId, await resolveLocalIncident({ incidentId }));
+            } catch (error) {
+              if (!isNotFoundRetrievalError(error)) {
+                throw error;
+              }
+              cloudIncidentIds.push(incidentId);
+            }
+          }
+        } else {
+          cloudIncidentIds.push(...incidentIds);
+        }
+        if (cloudIncidentIds.length > 0) {
+          const cloudIncidents = api.resolveIncidents === void 0 ? await Promise.all(
+            cloudIncidentIds.map(
+              async (incidentId) => attachSourceToRecord(
+                await api.resolveIncident({
+                  bearerToken: await requireCloudBearerToken(input),
+                  incidentId
+                }),
+                "cloud"
+              )
+            )
+          ) : (await api.resolveIncidents({
+            bearerToken: await requireCloudBearerToken(input),
+            incidentIds: cloudIncidentIds
+          })).map((incident) => attachSourceToRecord(incident, "cloud"));
+          for (const incident of cloudIncidents) {
+            await syncCloudIncidentCacheStatus({
+              incidentId: String(incident["incident_id"]),
+              incident: {
+                ...typeof incident["status"] === "string" ? { status: incident["status"] } : {},
+                resolved_at: typeof incident["resolved_at"] === "string" || incident["resolved_at"] === null ? incident["resolved_at"] : null
+              }
+            });
+            localIncidents.set(String(incident["incident_id"]), incident);
+          }
+        }
+        return {
+          incidents: incidentIds.map((incidentId) => localIncidents.get(incidentId))
+        };
+      } catch (error) {
+        mapMcpError12(error);
+      }
+    },
     async reopen_incident(input) {
       try {
         if (await shouldUseLocalSource(input)) {
@@ -26357,6 +26706,67 @@ function createRetrievalMcpTools(api) {
         mapMcpError12(error);
       }
     },
+    async reopen_incidents(input) {
+      try {
+        const incidentIds = Array.from(
+          new Set((Array.isArray(input["incidentIds"]) ? input["incidentIds"] : []).map((value) => String(value)))
+        );
+        const localIncidents = /* @__PURE__ */ new Map();
+        const cloudIncidentIds = [];
+        if (await shouldUseLocalSource(input)) {
+          return {
+            incidents: await Promise.all(
+              incidentIds.map((incidentId) => reopenLocalIncident({ incidentId }))
+            )
+          };
+        }
+        if (await shouldCombineLocalAndCloudSource(input)) {
+          for (const incidentId of incidentIds) {
+            try {
+              localIncidents.set(incidentId, await reopenLocalIncident({ incidentId }));
+            } catch (error) {
+              if (!isNotFoundRetrievalError(error)) {
+                throw error;
+              }
+              cloudIncidentIds.push(incidentId);
+            }
+          }
+        } else {
+          cloudIncidentIds.push(...incidentIds);
+        }
+        if (cloudIncidentIds.length > 0) {
+          const cloudIncidents = api.reopenIncidents === void 0 ? await Promise.all(
+            cloudIncidentIds.map(
+              async (incidentId) => attachSourceToRecord(
+                await api.reopenIncident({
+                  bearerToken: await requireCloudBearerToken(input),
+                  incidentId
+                }),
+                "cloud"
+              )
+            )
+          ) : (await api.reopenIncidents({
+            bearerToken: await requireCloudBearerToken(input),
+            incidentIds: cloudIncidentIds
+          })).map((incident) => attachSourceToRecord(incident, "cloud"));
+          for (const incident of cloudIncidents) {
+            await syncCloudIncidentCacheStatus({
+              incidentId: String(incident["incident_id"]),
+              incident: {
+                ...typeof incident["status"] === "string" ? { status: incident["status"] } : {},
+                resolved_at: null
+              }
+            });
+            localIncidents.set(String(incident["incident_id"]), incident);
+          }
+        }
+        return {
+          incidents: incidentIds.map((incidentId) => localIncidents.get(incidentId))
+        };
+      } catch (error) {
+        mapMcpError12(error);
+      }
+    },
     async get_bundle(input) {
       try {
         if (await shouldUseLocalSource(input)) {
@@ -28266,7 +28676,7 @@ var zodToJsonSchema = (schema, options) => {
 var package_default = {
   name: "@debugbundle/mcp",
   mcpName: "com.debugbundle/mcp",
-  version: "1.1.0",
+  version: "1.2.0",
   private: false,
   description: "Model Context Protocol server for DebugBundle",
   license: "AGPL-3.0-only",
@@ -28328,6 +28738,11 @@ var incidentLookupInputSchema = external_exports.object({
   source: sourceSchema,
   incidentId: external_exports.string()
 });
+var bulkIncidentLookupInputSchema = external_exports.object({
+  bearerToken: optionalBearerTokenSchema,
+  source: sourceSchema,
+  incidentIds: external_exports.array(external_exports.string()).min(1).max(1e3)
+});
 var improvementLookupInputSchema = external_exports.object({
   bearerToken: external_exports.string(),
   improvementId: external_exports.string()
@@ -28415,12 +28830,24 @@ var MCP_TOOL_CATALOG = [
     description: "Resolve an incident by incident id.",
     inputSchema: incidentLookupInputSchema
   },
+  {
+    name: "resolve_incidents",
+    group: "retrieval",
+    description: "Resolve incidents in bulk by incident id.",
+    inputSchema: bulkIncidentLookupInputSchema
+  },
   {
     name: "reopen_incident",
     group: "retrieval",
-    description: "Reopen a locally stored resolved incident.",
+    description: "Reopen an incident by incident id.",
     inputSchema: incidentLookupInputSchema
   },
+  {
+    name: "reopen_incidents",
+    group: "retrieval",
+    description: "Reopen incidents in bulk by incident id.",
+    inputSchema: bulkIncidentLookupInputSchema
+  },
   {
     name: "get_bundle",
     group: "retrieval",
@@ -29010,7 +29437,12 @@ var MCP_TOOL_CATALOG = [
         capture_request_events: external_exports.string().nullable().optional(),
         capture_breadcrumbs: external_exports.string().nullable().optional(),
         capture_probe_events: external_exports.string().nullable().optional(),
-        immediate_client_error_statuses: external_exports.array(external_exports.number().int().min(400).max(499)).nullable().optional()
+        immediate_client_error_statuses: external_exports.array(external_exports.number().int().min(400).max(499)).nullable().optional(),
+        immediate_client_error_path_rules: external_exports.array(external_exports.object({
+          status_code: external_exports.number().int().min(400).max(499),
+          path_pattern: external_exports.string(),
+          methods: external_exports.array(external_exports.enum(["GET", "POST", "PUT", "PATCH", "DELETE", "HEAD", "OPTIONS"])).optional()
+        })).nullable().optional()
       })
     })
   },

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@debugbundle/mcp",
   "mcpName": "com.debugbundle/mcp",
-  "version": "1.1.0",
+  "version": "1.2.0",
   "private": false,
   "description": "Model Context Protocol server for DebugBundle",
   "license": "AGPL-3.0-only",

package/server.json

@@ -8,13 +8,13 @@
     "source": "github",
     "subfolder": "apps/mcp"
   },
-  "version": "1.1.0",
+  "version": "1.2.0",
   "packages": [
     {
       "registryType": "npm",
       "registryBaseUrl": "https://registry.npmjs.org",
       "identifier": "@debugbundle/mcp",
-      "version": "1.1.0",
+      "version": "1.2.0",
       "transport": {
         "type": "stdio"
       },