@debugbundle/mcp 1.13.1 → 1.14.0

package/README.md

@@ -42,7 +42,7 @@ Use `npx -y @debugbundle/mcp` in clients that require noninteractive package exe
 | Claude Desktop local MCP      | local MCP server config                           | uses local machine auth/config                    |
 | Claude Code plugin            | `/plugin marketplace add debugbundle/debugbundle` | installs bundled MCP config and DebugBundle skill |
 | Codex developer plugin | `codex plugin add debugbundle-codex@debugbundle` | repository marketplace; local MCP and workflow skill |
-| Codex direct MCP | `codex mcp add debugbundle -- npx -y @debugbundle/mcp@1.13.1 --local-auth` | app, CLI, and IDE on the same host |
+| Codex direct MCP | `codex mcp add debugbundle -- npx -y @debugbundle/mcp@1.14.0 --local-auth` | app, CLI, and IDE on the same host |
 | Cursor                        | MCP config with `npx @debugbundle/mcp`            | stdio transport                                   |
 | VS Code / GitHub MCP Registry | `com.debugbundle/mcp`                             | official registry metadata                        |
 | OpenClaw / ClawHub            | DebugBundle skill plus MCP config                 | use the published skill for workflow guidance     |
@@ -112,6 +112,14 @@ The plugin package lives at `apps/mcp/claude-code/debugbundle` and bundles a Cla
 - List saved analytics funnels and, with owner/admin access, create, update, or archive reusable funnel definitions through `list_saved_analytics_funnels`, `create_saved_analytics_funnel`, `update_saved_analytics_funnel`, and `archive_saved_analytics_funnel`.
 - Inspect hosted health checks, probes, alerts, webhooks, projects, members, billing, capture policy, and GitHub automation state.
 - Run local and hosted verification through tools such as `verify_local`, `verify_cloud`, `doctor`, `smoke`, and `analyze`.
+
+`verify_app_event` provides real SDK-driven app proof, matching the CLI's
+`verify cloud --expect-app-event`. Pass `projectId` and at least one of `service`,
+`traceId`, or `requestId`; `environment`, `maxAgeMinutes`, and `authFilePath` are
+optional. It reads existing incidents/bundles and never sends synthetic events.
+The existing `verify_cloud` schema and description remain unchanged. The new tool
+is available through ordinary and local-auth stdio MCP and its OpenClaw projection;
+hosted read-only and restricted agent catalogs remain unchanged.
 - Resolve or reopen incidents after verification.
 
 For analytics questions, use direct aggregate tools first and generate an AnalyticsBundle only when a bounded analysis needs a durable artifact. The product does not create one bundle per visit.
@@ -147,3 +155,14 @@ For analytics questions, use direct aggregate tools first and generate an Analyt
 ## License
 
 Apache-2.0.
+
+`disconnect_github_installation` calls the existing organization-wide disconnect
+route. It requires the active organization's owner and removes repository assignments
+for all its projects, including cleanup after downgrade. It does not uninstall the
+App on GitHub. Install/reconnect uses the dashboard browser flow to retain the signed
+state cookie. This additive tool brings the ordinary/local-auth catalog to 130 tools;
+the hosted 23-tool and restricted five-tool profiles remain unchanged.
+
+`test_webhook_event` accepts all eight supported webhook events through the existing
+scoped test service. The legacy `test_webhook` schema remains verification-only.
+Both queue a signed synthetic envelope without creating real incidents or bundles.

package/dist/main.cjs

@@ -75020,6 +75020,32 @@ var AnalyticsFlowCaptureSchemas = {
   withdraw: Context.strict()
 };
 
+// ../../packages/shared-types/src/analytics-query.ts
+var DEFAULT_LAST_MS = 7 * 24 * 60 * 60 * 1e3;
+var MAX_LAST_MS = 370 * 24 * 60 * 60 * 1e3;
+var AnalyticsMetricsQuerySchema = external_exports.object({
+  project_id: external_exports.string().uuid(),
+  from: external_exports.string().datetime().optional(),
+  to: external_exports.string().datetime().optional(),
+  last: external_exports.string().trim().min(2).max(16).optional(),
+  granularity: AnalyticsMetricsGranularitySchema.optional().default("day"),
+  service: external_exports.string().trim().min(1).max(120).optional(),
+  environment: external_exports.string().trim().min(1).max(120).optional(),
+  route: external_exports.string().trim().min(1).max(2048).refine((value) => !value.includes("?") && !value.includes("#")).optional(),
+  device_type: external_exports.string().trim().min(1).max(40).optional(),
+  browser: external_exports.string().trim().min(1).max(80).optional(),
+  os: external_exports.string().trim().min(1).max(80).optional(),
+  language: external_exports.string().trim().min(1).max(40).optional(),
+  country: external_exports.string().trim().min(1).max(8).optional(),
+  auth_state: external_exports.enum(["anonymous", "authenticated", "unknown"]).optional(),
+  referrer: external_exports.string().trim().min(1).max(255).optional(),
+  utm_source: external_exports.string().trim().min(1).max(128).optional(),
+  utm_medium: external_exports.string().trim().min(1).max(128).optional(),
+  utm_campaign: external_exports.string().trim().min(1).max(128).optional(),
+  custom_dimensions: external_exports.record(external_exports.string().regex(/^[A-Za-z][A-Za-z0-9_.-]{0,63}$/), external_exports.string().max(128)).refine((value) => Object.keys(value).length <= 8).optional(),
+  limit: external_exports.coerce.number().int().min(1).max(100).optional().default(10)
+}).strict();
+
 // ../../packages/shared-types/src/index.ts
 var SeveritySchema = external_exports.enum(["low", "medium", "high", "critical"]);
 var BundleSdkSchema = external_exports.object({
@@ -76341,7 +76367,12 @@ var WebhookLinksSchema = external_exports.object({
   reproduction: external_exports.string().min(1).optional()
 }).strict();
 var BundleLifecycleWebhookPayloadSchema = external_exports.object({
-  event: external_exports.enum(["bundle.created", "bundle.updated", "bundle.resolved", "improvement_bundle.created"]),
+  event: external_exports.enum([
+    "bundle.created",
+    "bundle.updated",
+    "bundle.resolved",
+    "improvement_bundle.created"
+  ]),
   occurred_at: external_exports.string().datetime(),
   project_id: external_exports.string().min(1),
   bundle_id: external_exports.string().min(1),
@@ -76381,10 +76412,15 @@ var VerificationWebhookTestPayloadSchema = external_exports.object({
     message: external_exports.string().min(1)
   }).strict()
 }).strict();
+var SyntheticWebhookTestPayloadSchema = VerificationWebhookTestPayloadSchema.extend({
+  event: WebhookEventTypeSchema,
+  event_type: WebhookEventTypeSchema
+});
 var WebhookEventPayloadSchema = external_exports.union([
   BundleLifecycleWebhookPayloadSchema,
   IncidentLifecycleWebhookPayloadSchema,
-  VerificationWebhookTestPayloadSchema
+  VerificationWebhookTestPayloadSchema,
+  SyntheticWebhookTestPayloadSchema
 ]);
 var WebhookFiltersSchema = external_exports.object({
   environment: external_exports.array(external_exports.string()).optional(),
@@ -77319,6 +77355,15 @@ async function expectNoContent(responsePromise) {
 }
 function createGitHubManagementApi(client) {
   return {
+    async disconnectInstallation(input2) {
+      return expectNoContent(
+        client.request({
+          method: "DELETE",
+          path: "/v1/github/installation",
+          bearerToken: input2.bearerToken
+        })
+      );
+    },
     async getInstallation(input2) {
       const query = input2.projectId === void 0 ? "" : `?project_id=${encodeURIComponent(input2.projectId)}`;
       return expectInstallation(
@@ -89101,6 +89146,14 @@ function mapMcpError9(error2) {
 }
 function createGitHubMcpTools(api) {
   return {
+    async disconnect_github_installation(input2) {
+      try {
+        await api.disconnectInstallation({ bearerToken: String(input2["bearerToken"]) });
+        return { disconnected: true };
+      } catch (error2) {
+        mapMcpError9(error2);
+      }
+    },
     async get_github_status(input2) {
       try {
         const bearerToken = String(input2["bearerToken"]);
@@ -89173,7 +89226,9 @@ function createGitHubMcpTools(api) {
             ...Array.isArray(input2["services"]) ? { services: input2["services"].map((value) => String(value)) } : {},
             ...typeof input2["severityMin"] === "string" ? { severityMin: input2["severityMin"] } : {},
             ...typeof input2["bundleType"] === "string" ? { bundleType: input2["bundleType"] } : {},
-            ...typeof input2["incidentStatus"] === "string" ? { incidentStatus: input2["incidentStatus"] } : {},
+            ...typeof input2["incidentStatus"] === "string" ? {
+              incidentStatus: input2["incidentStatus"]
+            } : {},
             ...typeof input2["cooldownSeconds"] === "number" ? { cooldownSeconds: input2["cooldownSeconds"] } : {},
             ...typeof input2["enabled"] === "boolean" ? { enabled: input2["enabled"] } : {}
           })
@@ -89204,7 +89259,9 @@ function createGitHubMcpTools(api) {
           deliveries: await api.listProjectDeliveries({
             bearerToken: String(input2["bearerToken"]),
             projectId: String(input2["projectId"]),
-            ...typeof input2["status"] === "string" ? { status: input2["status"] } : {},
+            ...typeof input2["status"] === "string" ? {
+              status: input2["status"]
+            } : {},
             ...typeof input2["limit"] === "number" ? { limit: input2["limit"] } : {}
           })
         };
@@ -118435,6 +118492,16 @@ function parseJsonOutput2(output) {
   }
   return parsed;
 }
+function cloudVerificationOptions(input2) {
+  return {
+    projectId: String(input2["projectId"]),
+    ...typeof input2["service"] === "string" ? { service: input2["service"] } : {},
+    ...typeof input2["environment"] === "string" ? { environment: input2["environment"] } : {},
+    ...typeof input2["maxAgeMinutes"] === "number" ? { maxAgeMinutes: input2["maxAgeMinutes"] } : {},
+    ...typeof input2["authFilePath"] === "string" ? { authFilePath: input2["authFilePath"] } : {},
+    json: true
+  };
+}
 async function runJsonCommand2(command) {
   try {
     const result = await command();
@@ -118472,14 +118539,19 @@ function createSetupMcpTools(commands) {
     async verify_cloud(input2) {
       return runJsonCommand2(
         () => commands.verifyCloudCommand({
-          projectId: String(input2["projectId"]),
-          ...typeof input2["service"] === "string" ? { service: input2["service"] } : {},
-          ...typeof input2["environment"] === "string" ? { environment: input2["environment"] } : {},
-          ...typeof input2["maxAgeMinutes"] === "number" ? { maxAgeMinutes: input2["maxAgeMinutes"] } : {},
+          ...cloudVerificationOptions(input2),
           ...input2["trigger5xx"] === true ? { trigger5xx: true } : {},
-          ...typeof input2["trigger4xxStatus"] === "number" ? { trigger4xxStatus: input2["trigger4xxStatus"] } : {},
-          ...typeof input2["authFilePath"] === "string" ? { authFilePath: input2["authFilePath"] } : {},
-          json: true
+          ...typeof input2["trigger4xxStatus"] === "number" ? { trigger4xxStatus: input2["trigger4xxStatus"] } : {}
+        })
+      );
+    },
+    async verify_app_event(input2) {
+      return runJsonCommand2(
+        () => commands.verifyCloudCommand({
+          ...cloudVerificationOptions(input2),
+          expectAppEvent: true,
+          ...typeof input2["traceId"] === "string" ? { traceId: input2["traceId"] } : {},
+          ...typeof input2["requestId"] === "string" ? { requestId: input2["requestId"] } : {}
         })
       );
     },
@@ -118771,6 +118843,20 @@ function createWebhookMcpTools(api) {
         mapMcpError21(error2);
       }
     },
+    async test_webhook_event(input2) {
+      try {
+        return {
+          delivery: await api.testWebhook({
+            bearerToken: String(input2["bearerToken"]),
+            projectId: String(input2["projectId"]),
+            webhookId: String(input2["webhookId"]),
+            eventType: WebhookEventTypeSchema.parse(input2["eventType"])
+          })
+        };
+      } catch (error2) {
+        mapMcpError21(error2);
+      }
+    },
     async test_webhook(input2) {
       try {
         const requestInput = {
@@ -118890,6 +118976,7 @@ function createWeeklyReportMcpTools(api) {
 
 // src/tool-catalog-foundation.ts
 var optionalBearerTokenSchema = external_exports.string().optional();
+var appVerificationHintSchema = external_exports.string().min(1).refine((value) => value.trim().length > 0);
 var sourceSchema = external_exports.enum(["local", "cloud"]).optional();
 var listIncidentsInputSchema = external_exports.object({
   bearerToken: optionalBearerTokenSchema,
@@ -118956,6 +119043,25 @@ var MCP_TOOL_CATALOG_FOUNDATION = [
       authFilePath: external_exports.string().optional()
     })
   },
+  {
+    name: "verify_app_event",
+    group: "setup",
+    description: "Wait for a real SDK-driven hosted app incident and verify its bundle using service, traceId, or requestId. Read-only proof; does not create synthetic events. Requires local member authentication.",
+    inputSchema: external_exports.object({
+      projectId: external_exports.string().min(1),
+      service: appVerificationHintSchema.optional(),
+      environment: external_exports.string().optional(),
+      maxAgeMinutes: external_exports.number().optional(),
+      traceId: appVerificationHintSchema.optional(),
+      requestId: appVerificationHintSchema.optional(),
+      authFilePath: external_exports.string().optional()
+    }).strict().refine(
+      (input2) => input2.service !== void 0 || input2.traceId !== void 0 || input2.requestId !== void 0,
+      {
+        message: "App-event proof requires service, traceId, or requestId."
+      }
+    )
+  },
   {
     name: "smoke",
     group: "setup",
@@ -119212,6 +119318,12 @@ var MCP_TOOL_CATALOG_FOUNDATION = [
       projectId: external_exports.string()
     })
   },
+  {
+    name: "disconnect_github_installation",
+    group: "github",
+    description: "Disconnect the GitHub installation for the active organization and remove repository assignments across all its projects. Owner only. This does not uninstall the App from GitHub; install/reconnect requires the dashboard browser handoff.",
+    inputSchema: external_exports.object({ bearerToken: external_exports.string().min(1) }).strict()
+  },
   {
     name: "list_project_tokens",
     group: "tokens",
@@ -119253,13 +119365,22 @@ var MCP_TOOL_CATALOG_FOUNDATION = [
     name: "create_agent_token",
     group: "tokens",
     description: "Create a single-project minimized read credential, returned once. Requires owner or project admin.",
-    inputSchema: external_exports.object({ bearerToken: external_exports.string(), projectId: external_exports.string().uuid(), label: external_exports.string().min(1).max(120), expiresAt: external_exports.string().datetime().optional() })
+    inputSchema: external_exports.object({
+      bearerToken: external_exports.string(),
+      projectId: external_exports.string().uuid(),
+      label: external_exports.string().min(1).max(120),
+      expiresAt: external_exports.string().datetime().optional()
+    })
   },
   {
     name: "revoke_agent_token",
     group: "tokens",
     description: "Revoke a project-scoped agent credential. Requires owner or project admin.",
-    inputSchema: external_exports.object({ bearerToken: external_exports.string(), projectId: external_exports.string().uuid(), tokenId: external_exports.string().uuid() })
+    inputSchema: external_exports.object({
+      bearerToken: external_exports.string(),
+      projectId: external_exports.string().uuid(),
+      tokenId: external_exports.string().uuid()
+    })
   },
   {
     name: "list_member_tokens",
@@ -119357,6 +119478,17 @@ var MCP_TOOL_CATALOG_OPERATIONS = [
       eventType: verificationEventTypeSchema.optional()
     })
   },
+  {
+    name: "test_webhook_event",
+    group: "webhooks",
+    description: "Queue a signed synthetic webhook test for any supported lifecycle event. Requires endpoint creator or owner/admin authority; does not create a real incident or bundle. The legacy test_webhook verification contract is retained.",
+    inputSchema: external_exports.object({
+      bearerToken: external_exports.string(),
+      projectId: external_exports.string().min(1),
+      webhookId: external_exports.string().min(1),
+      eventType: WebhookEventTypeSchema
+    }).strict()
+  },
   {
     name: "list_webhook_deliveries",
     group: "webhooks",
@@ -120097,7 +120229,7 @@ var import_node_readline = require("node:readline");
 var package_default = {
   name: "@debugbundle/mcp",
   mcpName: "com.debugbundle/mcp",
-  version: "1.13.1",
+  version: "1.14.0",
   private: false,
   description: "MCP server for runtime error reporting, incident response, health checks, debug bundles, and product analytics",
   license: "Apache-2.0",

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@debugbundle/mcp",
   "mcpName": "com.debugbundle/mcp",
-  "version": "1.13.1",
+  "version": "1.14.0",
   "private": false,
   "description": "MCP server for runtime error reporting, incident response, health checks, debug bundles, and product analytics",
   "license": "Apache-2.0",

package/server.json

@@ -8,13 +8,13 @@
     "source": "github",
     "subfolder": "apps/mcp"
   },
-  "version": "1.13.1",
+  "version": "1.14.0",
   "packages": [
     {
       "registryType": "npm",
       "registryBaseUrl": "https://registry.npmjs.org",
       "identifier": "@debugbundle/mcp",
-      "version": "1.13.1",
+      "version": "1.14.0",
       "transport": {
         "type": "stdio"
       },