@keystrokehq/platform 0.1.116 → 0.1.118

package/dist/{start-B8JPSU7i.mjs → start-zbLIFKlv.mjs}

@@ -1,8 +1,8 @@
-import { $ as CompleteProjectArtifactResponseSchema, $n as TriggerAttachmentUpdateRequestSchema, $r as mapUserOrganization, $t as ListProjectFilesResponseSchema, A as describeCredentialBindings, An as ProjectSourceResourcesSchema, Ar as WorkspaceTriggerFileSchema, At as GraphqlDiscoverRequestSchema, B as setCredentialInstanceSecret, Bn as SkillSummaryListResponseSchema, Br as displayCredentialAppName, Bt as ListAgentMemoryFilesResponseSchema, C as userAvatarStorageKey, Cn as PresignUserAvatarRequestSchema, Cr as WorkflowFormUpsertBodySchema, Ct as FilePartSchema, D as beginMcpOAuthConnect, Dn as ProjectSettingsResponseSchema, Dr as WorkflowSummaryListResponseSchema, Dt as GetCredentialResponseSchema, E as cronPayloadSchema, En as ProjectResponseSchema, Er as WorkflowSummaryDetailResponseSchema, Et as GetAppCatalogEntryResponseSchema, F as withCredentialAssignments, Fn as PublishedFormListResponseSchema, Fr as agentMemoryFileId, Ft as HistoryRunListResponseSchema, G as AgentMemoryFileSummarySchema, Gn as StartMcpOAuthConnectionResultSchema, Gr as listenPortFromPublicUrl, Gt as ListCredentialsPageQuerySchema, H as ACTIVE_ORG_HEADER, Hn as SlugAvailabilityQuerySchema, Hr as isHelloWorldTemplateSlug, Ht as ListApiKeysResponseSchema, I as PublicHttpUrlError, In as PublishedFormSchema, Ir as agentWorkspaceFileId, It as InviteOrganizationMembersRequestSchema, J as AgentSummarySchema, Jn as SubmitMarketingContactResponseSchema, Jr as mapProject, Jt as ListOrganizationInvitationsResponseSchema, K as AgentSummaryDetailResponseSchema, Kn as StoredProjectSourceManifestSchema, Kr as mapOrganizationInvitation, Kt as ListCredentialsPageResponseSchema, L as deleteCredentialInstanceSecret, Ln as RecentResourceListResponseSchema, Lr as buildCredentialInstanceLabel, Lt as InviteOrganizationMembersResponseSchema, M as discoverMcpApp, Mn as PublicFormSubmitBodySchema, Mr as WorkspaceTriggerOverviewSchema, Mt as HistoryRunCancelResponseSchema, N as discoverOpenApiApp, Nn as PublicFormSubmitResponseSchema, Nr as WorkspaceTriggerRunListResponseSchema, Nt as HistoryRunDetailResponseSchema, O as completeMcpOAuthConnect, On as ProjectSlugAvailabilityQuerySchema, Or as WorkflowSummarySchema, Ot as GetCustomAppResponseSchema, P as isDiscoveryError, Pn as PublicModelsResponseSchema, Pr as WorkspaceWorkflowOverviewSchema, Pt as HistoryRunListQuerySchema, Q as ChannelPlatformSchema, Qn as TemplateKindSchema, Qr as mapProjectSettings, Qt as ListProjectDeploymentsResponseSchema, R as deleteManagedServiceCredential$1, Rn as RecentResourceSchema, Rr as chatAttachmentExtension, Rt as InviteProjectMembersRequestSchema, S as publicKeystrokeAssetsObjectUrl, Sn as PresignProjectSourceResponseSchema, Sr as WorkflowFormResponseSchema, St as ErrorResponseSchema, T as defaultSchedulerPlugin, Tn as ProjectReachabilityResponseSchema, Tr as WorkflowRunInputsSchema, Tt as FinalizeCustomAppLogoResponseSchema, U as AcceptOrganizationInvitationResponseSchema, Un as SlugAvailabilityResponseSchema, Ur as isLlmProviderSlug, Ut as ListAppsResponseSchema, V as setManagedServiceCredential, Vn as SkillSummarySchema, Vr as isAllowedChatAttachmentMediaType, Vt as ListAgentWorkspaceFilesResponseSchema, W as ActiveOrganizationResponseSchema, Wn as StartMcpOAuthConnectionInputSchema, Wr as jsonSchemaToWorkflowInputSchema, Wt as ListChannelPlatformsResponseSchema, X as AppSlugAvailabilityQuerySchema, Xn as SubmitTeamRequestResponseSchema, Xr as mapProjectDeployment, Xt as ListOrganizationMembersPageResponseSchema, Y as AgentWorkspaceFileSummarySchema, Yn as SubmitTeamRequestRequestSchema, Yr as mapProjectArtifact, Yt as ListOrganizationMembersPageQuerySchema, Z as AppSlugAvailabilityResponseSchema, Zn as TemplateFilesResponseSchema, Zr as mapProjectMember, Zt as ListOrganizationsResponseSchema, _ as loadProjectSourceFiles, _n as PresignCustomAppLogoRequestSchema, _r as UserPreferencesPatchSchema, _t as DeclineOrganizationInvitationResponseSchema, a as ensureKeystrokeAssetsBucket, ai as parseAppSlug, an as ManagedServiceCredentialSchema, ar as UpdateManagedServiceCredentialRequestSchema, at as CreateCustomAppRequestSchema, b as projectArtifactKey, bn as PresignOrgLogoResponseSchema, br as WorkflowCanvasRunSchema, bt as DuplicateCredentialRequestSchema, c as isChatAttachmentStorageKey, ci as resolveExternalPlatformOrigin, cn as McpDiscoverResponseSchema, cr as UpdateOrganizationRequestSchema, ct as CreateOrganizationResponseSchema, d as isOrgLogoStorageKey, di as schemaHasFileFields, dn as OrganizationSidebarBrandingPatchSchema, dr as UpdateProjectRequestSchema, dt as CreateProjectResponseSchema, ei as mcpEntityId, en as ListProjectMembersResponseSchema, er as TriggerInvokeInputsSchema, et as ConnectManagedServiceCredentialRequestSchema, f as isStorageBucketNotFoundError, fi as schemaHasUnsupportedFormFields, fn as OrganizationSidebarBrandingSchema, fr as UpdateProjectSettingsRequestSchema, ft as DEFAULT_CLOUD_PLATFORM_ORIGIN, g as keystrokeAssetsOrgLogoKeyFromPublicUrl, gi as validationErrorResponse, gn as PresignChatAttachmentResponseSchema, gr as UserAvatarSchema, gt as DbProxyQueryRequestSchema, h as keystrokeAssetsAvatarKeyFromPublicUrl, hi as validateWorkflowRunInputValues, hn as PresignChatAttachmentRequestSchema, hr as UserAvatarPatchSchema, ht as DEFAULT_WORKFLOW_OVERVIEW_MODEL, i as createAssetsStorageClient, ii as organizationSlugErrorCodeFromMessage, in as MICRO_CREDITS_PER_CREDIT, ir as UpdateCredentialRequestSchema, it as CreateCredentialsResponseSchema, j as discoverGraphqlApp, jn as PublicFormMetadataSchema, jr as WorkspaceTriggerListResponseSchema, jt as GraphqlDiscoverResponseSchema, k as decodeOAuthState, kn as ProjectSlugAvailabilityResponseSchema, kr as WorkspaceTriggerDetailSchema, kt as GetTemplateResponseSchema, l as isKeystrokeAssetsAvatarPublicUrl, li as resolvePublicFormFields, ln as OpenApiDiscoverRequestSchema, lr as UpdateProjectMemberRequestSchema, lt as CreateProjectArtifactResponseSchema, m as isUserAvatarStorageKey, mi as validateFormFieldConfig, mn as PROJECT_SLUG_TAKEN_MESSAGE, mr as UploadProjectSourceResponseSchema, mt as DEFAULT_WORKFLOW_CANVAS_MODEL, n as appLogoStorageKey, ni as normalizeUserPreferences, nn as ListProjectsResponseSchema, nr as TriggerInvokeResponseSchema, nt as CreateApiKeyResponseSchema, o as extractRouteManifestFromArtifact, oi as parseStoredRouteManifest, on as ManagedServiceKindSchema, or as UpdateOrganizationMemberRequestSchema, ot as CreateCustomAppResponseSchema, p as isStorageNotFoundError$1, pi as validateCredentialValueAgainstFields, pn as PLATFORM_RESOURCE_UNSUPPORTED_TEXT, pr as UploadProjectSourceManifestRequestSchema, pt as DEFAULT_TRIGGER_OVERVIEW_MODEL, q as AgentSummaryListResponseSchema, qn as SubmitMarketingContactRequestSchema, qr as mapOrganizationMember, qt as ListManagedServiceCredentialsResponseSchema, r as chatAttachmentStorageKey, ri as organizationInvitationAcceptPath, rn as ListTemplatesResponseSchema, rr as TriggerRunListQuerySchema, rt as CreateCredentialsRequestSchema, s as isAppLogoStorageKey, si as projectFileId, sn as McpDiscoverRequestSchema, sr as UpdateOrganizationMemberResponseSchema, st as CreateOrganizationRequestSchema, t as RouteManifestNotFoundError, ti as mergeUserPreferences, tn as ListProjectMetricsResponseSchema, tr as TriggerInvokeRequestSchema, tt as CreateApiKeyRequestSchema, u as isKeystrokeAssetsOrgLogoPublicUrl, ui as resolveUniqueCredentialInstanceLabel, un as OpenApiDiscoverResponseSchema, ur as UpdateProjectMemberResponseSchema, ut as CreateProjectRequestSchema, vn as PresignCustomAppLogoResponseSchema, vr as UserPreferencesSchema, vt as DownloadActiveProjectArtifactResponseSchema, w as createJobQueue, wn as PresignUserAvatarResponseSchema, wr as WorkflowRunInputsPutBodySchema, wt as FinalizeCustomAppLogoRequestSchema, x as projectSourceBlobKey, xn as PresignProjectSourceRequestSchema, xr as WorkflowCanvasSchema, xt as DuplicateCredentialsResponseSchema, y as orgLogoStorageKey, yn as PresignOrgLogoRequestSchema, yr as WorkflowCanvasCredentialBindingsSchema, yt as DownloadActiveProjectSourceResponseSchema, z as readCredentialInstanceSecret, zn as SkillSummaryDetailResponseSchema, zr as deriveCredentialInstanceSlug, zt as InviteProjectMembersResponseSchema } from "./dist-06B__3tk.mjs";
-import { a as verifyOrgWorkerToken, i as pingProjectTarget, n as fetchDeployStatus, r as mintOrgWorkerToken } from "./dist-Da9lzYN7.mjs";
+import { $ as ChannelPlatformSchema, $n as TemplateKindSchema, $r as mapProjectSettings, $t as ListProjectDeploymentsResponseSchema, A as decodeOAuthState, An as ProjectSlugAvailabilityResponseSchema, Ar as WorkspaceTriggerDetailSchema, At as GetTemplateResponseSchema, B as readCredentialInstanceSecret, Bn as SkillSummaryDetailResponseSchema, Br as deriveCredentialInstanceSlug, Bt as InviteProjectMembersResponseSchema, C as userAvatarStorageKey, Cn as PresignProjectSourceResponseSchema, Cr as WorkflowFormResponseSchema, Ct as ErrorResponseSchema, D as McpOAuthConnectError, Dn as ProjectResponseSchema, Dr as WorkflowSummaryDetailResponseSchema, Dt as GetAppCatalogEntryResponseSchema, E as cronPayloadSchema, En as ProjectReachabilityResponseSchema, Er as WorkflowRunInputsSchema, Et as FinalizeCustomAppLogoResponseSchema, F as isDiscoveryError, Fn as PublicModelsResponseSchema, Fr as WorkspaceWorkflowOverviewSchema, Ft as HistoryRunListQuerySchema, G as ActiveOrganizationResponseSchema, Gn as StartMcpOAuthConnectionInputSchema, Gr as jsonSchemaToWorkflowInputSchema, Gt as ListChannelPlatformsResponseSchema, H as setManagedServiceCredential, Hn as SkillSummarySchema, Hr as isAllowedChatAttachmentMediaType, Ht as ListAgentWorkspaceFilesResponseSchema, I as withCredentialAssignments, In as PublishedFormListResponseSchema, Ir as agentMemoryFileId, It as HistoryRunListResponseSchema, J as AgentSummaryListResponseSchema, Jn as SubmitMarketingContactRequestSchema, Jr as mapOrganizationMember, Jt as ListManagedServiceCredentialsResponseSchema, K as AgentMemoryFileSummarySchema, Kn as StartMcpOAuthConnectionResultSchema, Kr as listenPortFromPublicUrl, Kt as ListCredentialsPageQuerySchema, L as PublicHttpUrlError, Ln as PublishedFormSchema, Lr as agentWorkspaceFileId, Lt as InviteOrganizationMembersRequestSchema, M as discoverGraphqlApp, Mn as PublicFormMetadataSchema, Mr as WorkspaceTriggerListResponseSchema, Mt as GraphqlDiscoverResponseSchema, N as discoverMcpApp, Nn as PublicFormSubmitBodySchema, Nr as WorkspaceTriggerOverviewSchema, Nt as HistoryRunCancelResponseSchema, O as beginMcpOAuthConnect, On as ProjectSettingsResponseSchema, Or as WorkflowSummaryListResponseSchema, Ot as GetCredentialResponseSchema, P as discoverOpenApiApp, Pn as PublicFormSubmitResponseSchema, Pr as WorkspaceTriggerRunListResponseSchema, Pt as HistoryRunDetailResponseSchema, Q as AppSlugAvailabilityResponseSchema, Qn as TemplateFilesResponseSchema, Qr as mapProjectMember, Qt as ListOrganizationsResponseSchema, R as deleteCredentialInstanceSecret, Rn as RecentResourceListResponseSchema, Rr as buildCredentialInstanceLabel, Rt as InviteOrganizationMembersResponseSchema, S as publicKeystrokeAssetsObjectUrl, Sn as PresignProjectSourceRequestSchema, Sr as WorkflowCanvasSchema, St as DuplicateCredentialsResponseSchema, T as defaultSchedulerPlugin, Tn as PresignUserAvatarResponseSchema, Tr as WorkflowRunInputsPutBodySchema, Tt as FinalizeCustomAppLogoRequestSchema, U as ACTIVE_ORG_HEADER, Un as SlugAvailabilityQuerySchema, Ur as isHelloWorldTemplateSlug, Ut as ListApiKeysResponseSchema, V as setCredentialInstanceSecret, Vn as SkillSummaryListResponseSchema, Vr as displayCredentialAppName, Vt as ListAgentMemoryFilesResponseSchema, W as AcceptOrganizationInvitationResponseSchema, Wn as SlugAvailabilityResponseSchema, Wr as isLlmProviderSlug, Wt as ListAppsResponseSchema, X as AgentWorkspaceFileSummarySchema, Xn as SubmitTeamRequestRequestSchema, Xr as mapProjectArtifact, Xt as ListOrganizationMembersPageQuerySchema, Y as AgentSummarySchema, Yn as SubmitMarketingContactResponseSchema, Yr as mapProject, Yt as ListOrganizationInvitationsResponseSchema, Z as AppSlugAvailabilityQuerySchema, Zn as SubmitTeamRequestResponseSchema, Zr as mapProjectDeployment, Zt as ListOrganizationMembersPageResponseSchema, _ as loadProjectSourceFiles, _i as validationErrorResponse, _n as PresignChatAttachmentResponseSchema, _r as UserAvatarSchema, _t as DbProxyQueryRequestSchema, a as ensureKeystrokeAssetsBucket, ai as organizationSlugErrorCodeFromMessage, an as MICRO_CREDITS_PER_CREDIT, ar as UpdateCredentialRequestSchema, at as CreateCredentialsResponseSchema, b as projectArtifactKey, bn as PresignOrgLogoRequestSchema, br as WorkflowCanvasCredentialBindingsSchema, bt as DownloadActiveProjectSourceResponseSchema, c as isChatAttachmentStorageKey, ci as projectFileId, cn as McpDiscoverRequestSchema, cr as UpdateOrganizationMemberResponseSchema, ct as CreateOrganizationRequestSchema, d as isOrgLogoStorageKey, di as resolveUniqueCredentialInstanceLabel, dn as OpenApiDiscoverResponseSchema, dr as UpdateProjectMemberResponseSchema, dt as CreateProjectRequestSchema, ei as mapUserOrganization, en as ListProjectFilesResponseSchema, er as TriggerAttachmentUpdateRequestSchema, et as CompleteProjectArtifactResponseSchema, f as isStorageBucketNotFoundError, fi as schemaHasFileFields, fn as OrganizationSidebarBrandingPatchSchema, fr as UpdateProjectRequestSchema, ft as CreateProjectResponseSchema, g as keystrokeAssetsOrgLogoKeyFromPublicUrl, gi as validateWorkflowRunInputValues, gn as PresignChatAttachmentRequestSchema, gr as UserAvatarPatchSchema, gt as DEFAULT_WORKFLOW_OVERVIEW_MODEL, h as keystrokeAssetsAvatarKeyFromPublicUrl, hi as validateFormFieldConfig, hn as PROJECT_SLUG_TAKEN_MESSAGE, hr as UploadProjectSourceResponseSchema, ht as DEFAULT_WORKFLOW_CANVAS_MODEL, i as createAssetsStorageClient, ii as organizationInvitationAcceptPath, in as ListTemplatesResponseSchema, ir as TriggerRunListQuerySchema, it as CreateCredentialsRequestSchema, j as describeCredentialBindings, jn as ProjectSourceResourcesSchema, jr as WorkspaceTriggerFileSchema, jt as GraphqlDiscoverRequestSchema, k as completeMcpOAuthConnect, kn as ProjectSlugAvailabilityQuerySchema, kr as WorkflowSummarySchema, kt as GetCustomAppResponseSchema, l as isKeystrokeAssetsAvatarPublicUrl, li as resolveExternalPlatformOrigin, ln as McpDiscoverResponseSchema, lr as UpdateOrganizationRequestSchema, lt as CreateOrganizationResponseSchema, m as isUserAvatarStorageKey, mi as validateCredentialValueAgainstFields, mn as PLATFORM_RESOURCE_UNSUPPORTED_TEXT, mr as UploadProjectSourceManifestRequestSchema, mt as DEFAULT_TRIGGER_OVERVIEW_MODEL, n as appLogoStorageKey, ni as mergeUserPreferences, nn as ListProjectMetricsResponseSchema, nr as TriggerInvokeRequestSchema, nt as CreateApiKeyRequestSchema, o as extractRouteManifestFromArtifact, oi as parseAppSlug, on as ManagedServiceCredentialSchema, or as UpdateManagedServiceCredentialRequestSchema, ot as CreateCustomAppRequestSchema, p as isStorageNotFoundError$1, pi as schemaHasUnsupportedFormFields, pn as OrganizationSidebarBrandingSchema, pr as UpdateProjectSettingsRequestSchema, pt as DEFAULT_CLOUD_PLATFORM_ORIGIN, q as AgentSummaryDetailResponseSchema, qn as StoredProjectSourceManifestSchema, qr as mapOrganizationInvitation, qt as ListCredentialsPageResponseSchema, r as chatAttachmentStorageKey, ri as normalizeUserPreferences, rn as ListProjectsResponseSchema, rr as TriggerInvokeResponseSchema, rt as CreateApiKeyResponseSchema, s as isAppLogoStorageKey, si as parseStoredRouteManifest, sn as ManagedServiceKindSchema, sr as UpdateOrganizationMemberRequestSchema, st as CreateCustomAppResponseSchema, t as RouteManifestNotFoundError, ti as mcpEntityId, tn as ListProjectMembersResponseSchema, tr as TriggerInvokeInputsSchema, tt as ConnectManagedServiceCredentialRequestSchema, u as isKeystrokeAssetsOrgLogoPublicUrl, ui as resolvePublicFormFields, un as OpenApiDiscoverRequestSchema, ur as UpdateProjectMemberRequestSchema, ut as CreateProjectArtifactResponseSchema, vn as PresignCustomAppLogoRequestSchema, vr as UserPreferencesPatchSchema, vt as DeclineOrganizationInvitationResponseSchema, w as createJobQueue, wn as PresignUserAvatarRequestSchema, wr as WorkflowFormUpsertBodySchema, wt as FilePartSchema, x as projectSourceBlobKey, xn as PresignOrgLogoResponseSchema, xr as WorkflowCanvasRunSchema, xt as DuplicateCredentialRequestSchema, y as orgLogoStorageKey, yn as PresignCustomAppLogoResponseSchema, yr as UserPreferencesSchema, yt as DownloadActiveProjectArtifactResponseSchema, z as deleteManagedServiceCredential$1, zn as RecentResourceSchema, zr as chatAttachmentExtension, zt as InviteProjectMembersRequestSchema } from "./dist-B2lPLfrR.mjs";
+import { a as verifyOrgWorkerToken, i as pingProjectTarget, n as fetchDeployStatus, r as mintOrgWorkerToken } from "./dist-BBJhHiW3.mjs";
 import "./chunk-BZUGFHVS-B2NchobP.mjs";
 import { n as d$4, t as _$1 } from "./chunk-TN7HHBQW-B8PYcKz5.mjs";
-import { n as readWorkerTokenFromRequest, r as requireWorkerToken, t as withProjectScope } from "./with-project-scope-CTrtQy8z.mjs";
+import { n as readWorkerTokenFromRequest, r as requireWorkerToken, t as withProjectScope } from "./with-project-scope-5Gfc8263.mjs";
 import { createRequire } from "node:module";
 import { createHash } from "node:crypto";
 import "node:fs/promises";
@@ -59,6 +59,29 @@ async function groupIdentify(input) {
 		return;
 	}
 }
+function contextAttributes(attributes) {
+	const context = getTelemetryContext();
+	const merged = {
+		...context?.actorId ? { actor_id: context.actorId } : {},
+		...context?.analyticsId ? { analytics_id: context.analyticsId } : {},
+		...context?.organizationId ? { organization_id: context.organizationId } : {},
+		...context?.projectId ? { project_id: context.projectId } : {},
+		...context?.sessionId ? { session_id: context.sessionId } : {},
+		...attributes
+	};
+	return Object.keys(merged).length > 0 ? merged : void 0;
+}
+function emitLog(level, message, attributes) {
+	const merged = contextAttributes(attributes);
+	const line = merged ? `${message} ${JSON.stringify(merged)}` : message;
+	(level === "debug" ? console.debug : level === "info" ? console.info : level === "warn" ? console.warn : console.error)(line);
+}
+const log = {
+	debug: (message, attributes) => emitLog("debug", message, attributes),
+	info: (message, attributes) => emitLog("info", message, attributes),
+	warn: (message, attributes) => emitLog("warn", message, attributes),
+	error: (message, attributes) => emitLog("error", message, attributes)
+};
 const replaceEditSchema = z.object({
 	oldText: z.string().describe("Exact text to replace. Must be unique in the file and must not overlap other edits in this call."),
 	newText: z.string().describe("Replacement text")
@@ -22909,43 +22932,43 @@ var tt = [
 	},
 	{
 		name: "cat",
-		load: async () => (await import("./cat-TSFMZVYS-CkwNl54c.mjs")).catCommand
+		load: async () => (await import("./cat-TSFMZVYS-B9ZweZ0g.mjs")).catCommand
 	},
 	{
 		name: "printf",
-		load: async () => (await import("./printf-TWGXF445-28RqQWhG.mjs")).printfCommand
+		load: async () => (await import("./printf-TWGXF445-BFtTTFUx.mjs")).printfCommand
 	},
 	{
 		name: "ls",
-		load: async () => (await import("./ls-ZJGQER7M-BeFruBgl.mjs")).lsCommand
+		load: async () => (await import("./ls-ZJGQER7M-CDvVLwGN.mjs")).lsCommand
 	},
 	{
 		name: "mkdir",
-		load: async () => (await import("./mkdir-MEPGZOB6-H0tBQtjo.mjs")).mkdirCommand
+		load: async () => (await import("./mkdir-MEPGZOB6-KgCHTAGt.mjs")).mkdirCommand
 	},
 	{
 		name: "rmdir",
-		load: async () => (await import("./rmdir-OC4ZLPYA-CEJSJ6A1.mjs")).rmdirCommand
+		load: async () => (await import("./rmdir-OC4ZLPYA-DBRCWWxY.mjs")).rmdirCommand
 	},
 	{
 		name: "touch",
-		load: async () => (await import("./touch-UA33VN3N-C7WkFgl9.mjs")).touchCommand
+		load: async () => (await import("./touch-UA33VN3N-Clj615aH.mjs")).touchCommand
 	},
 	{
 		name: "rm",
-		load: async () => (await import("./rm-SSGETQVQ-Dqrc3jE1.mjs")).rmCommand
+		load: async () => (await import("./rm-SSGETQVQ-CSmxrWHU.mjs")).rmCommand
 	},
 	{
 		name: "cp",
-		load: async () => (await import("./cp-BISAAS7A-CvK9sTBw.mjs")).cpCommand
+		load: async () => (await import("./cp-BISAAS7A-Baa7jHjq.mjs")).cpCommand
 	},
 	{
 		name: "mv",
-		load: async () => (await import("./mv-W5BIQ646-BbhqKmzw.mjs")).mvCommand
+		load: async () => (await import("./mv-W5BIQ646-m6KvTj2j.mjs")).mvCommand
 	},
 	{
 		name: "ln",
-		load: async () => (await import("./ln-4LGSXXGD-BjPc8rbU.mjs")).lnCommand
+		load: async () => (await import("./ln-4LGSXXGD-DK1HQ-Z7.mjs")).lnCommand
 	},
 	{
 		name: "chmod",
@@ -22961,15 +22984,15 @@ var tt = [
 	},
 	{
 		name: "head",
-		load: async () => (await import("./head-442HYESI-DtllcF1s.mjs")).headCommand
+		load: async () => (await import("./head-442HYESI-C6Z7-vE9.mjs")).headCommand
 	},
 	{
 		name: "tail",
-		load: async () => (await import("./tail-R4PCA2C4-c0nW2CyO.mjs")).tailCommand
+		load: async () => (await import("./tail-R4PCA2C4-D8gTAJv4.mjs")).tailCommand
 	},
 	{
 		name: "wc",
-		load: async () => (await import("./wc-LF7NU4LA-CtqoQj3c.mjs")).wcCommand
+		load: async () => (await import("./wc-LF7NU4LA-CrZ2_f9J.mjs")).wcCommand
 	},
 	{
 		name: "stat",
@@ -22977,95 +23000,95 @@ var tt = [
 	},
 	{
 		name: "grep",
-		load: async () => (await import("./grep-V3LQVMRQ-DwK2lHc5.mjs")).grepCommand
+		load: async () => (await import("./grep-V3LQVMRQ-BKB3zi73.mjs")).grepCommand
 	},
 	{
 		name: "fgrep",
-		load: async () => (await import("./grep-V3LQVMRQ-DwK2lHc5.mjs")).fgrepCommand
+		load: async () => (await import("./grep-V3LQVMRQ-BKB3zi73.mjs")).fgrepCommand
 	},
 	{
 		name: "egrep",
-		load: async () => (await import("./grep-V3LQVMRQ-DwK2lHc5.mjs")).egrepCommand
+		load: async () => (await import("./grep-V3LQVMRQ-BKB3zi73.mjs")).egrepCommand
 	},
 	{
 		name: "rg",
-		load: async () => (await import("./rg-S4FXYXWB-D81ZWHI9.mjs")).rgCommand
+		load: async () => (await import("./rg-S4FXYXWB-DvLBW3FF.mjs")).rgCommand
 	},
 	{
 		name: "sed",
-		load: async () => (await import("./sed-S5UIK574-Chy3VxE9.mjs")).sedCommand
+		load: async () => (await import("./sed-S5UIK574-BPN7JI6S.mjs")).sedCommand
 	},
 	{
 		name: "awk",
-		load: async () => (await import("./awk2-LA3USKJP-cJ-Z6J9j.mjs")).awkCommand2
+		load: async () => (await import("./awk2-LA3USKJP-OaTNLGfL.mjs")).awkCommand2
 	},
 	{
 		name: "sort",
-		load: async () => (await import("./sort-SW2YEO5B-BixT2IGq.mjs")).sortCommand
+		load: async () => (await import("./sort-SW2YEO5B-OWnbfe9g.mjs")).sortCommand
 	},
 	{
 		name: "uniq",
-		load: async () => (await import("./uniq-XSIZR6PB-Bqd4ELx5.mjs")).uniqCommand
+		load: async () => (await import("./uniq-XSIZR6PB-DTNQOumC.mjs")).uniqCommand
 	},
 	{
 		name: "comm",
-		load: async () => (await import("./comm-VV2LDX2J-CiGWgPMT.mjs")).commCommand
+		load: async () => (await import("./comm-VV2LDX2J-CwlEnHpG.mjs")).commCommand
 	},
 	{
 		name: "cut",
-		load: async () => (await import("./cut-OKARJCCV-5SkYB3UW.mjs")).cutCommand
+		load: async () => (await import("./cut-OKARJCCV-BB4GpDEw.mjs")).cutCommand
 	},
 	{
 		name: "paste",
-		load: async () => (await import("./paste-7JC6S4DX-o6U9XjU7.mjs")).pasteCommand
+		load: async () => (await import("./paste-7JC6S4DX-BPZM8va6.mjs")).pasteCommand
 	},
 	{
 		name: "tr",
-		load: async () => (await import("./tr-36LHWFRQ-CGja3l0p.mjs")).trCommand
+		load: async () => (await import("./tr-36LHWFRQ-DPz3syv0.mjs")).trCommand
 	},
 	{
 		name: "rev",
-		load: async () => (await import("./rev-5EHFX4EJ-DwXsQgcN.mjs")).rev
+		load: async () => (await import("./rev-5EHFX4EJ-DT84cm7e.mjs")).rev
 	},
 	{
 		name: "nl",
-		load: async () => (await import("./nl-WSDW7I4O-CNnDTT1z.mjs")).nl
+		load: async () => (await import("./nl-WSDW7I4O-BOU_uI5i.mjs")).nl
 	},
 	{
 		name: "fold",
-		load: async () => (await import("./fold-4TQNYMSW-D_qTDJiB.mjs")).fold
+		load: async () => (await import("./fold-4TQNYMSW-DMdiKJ06.mjs")).fold
 	},
 	{
 		name: "expand",
-		load: async () => (await import("./expand-JSPG6VOP-CEgbfGV6.mjs")).expand
+		load: async () => (await import("./expand-JSPG6VOP-B3OiXvMy.mjs")).expand
 	},
 	{
 		name: "unexpand",
-		load: async () => (await import("./unexpand-CADSA4VO-BkAfFBwc.mjs")).unexpand
+		load: async () => (await import("./unexpand-CADSA4VO-C0IRoV5k.mjs")).unexpand
 	},
 	{
 		name: "strings",
-		load: async () => (await import("./strings-6WDHLGMX-V2dSbxzd.mjs")).strings
+		load: async () => (await import("./strings-6WDHLGMX-DPcD3lVo.mjs")).strings
 	},
 	{
 		name: "split",
-		load: async () => (await import("./split-4KKZZXXE-D5nTYjy5.mjs")).split
+		load: async () => (await import("./split-4KKZZXXE-Do1z2dE5.mjs")).split
 	},
 	{
 		name: "column",
-		load: async () => (await import("./column-XT6UFXNQ-D6Fbpwt1.mjs")).column
+		load: async () => (await import("./column-XT6UFXNQ-Cv-T7URw.mjs")).column
 	},
 	{
 		name: "join",
-		load: async () => (await import("./join-TBRGI3LQ-B30ZmR0Q.mjs")).join
+		load: async () => (await import("./join-TBRGI3LQ-CytgtxxD.mjs")).join
 	},
 	{
 		name: "tee",
-		load: async () => (await import("./tee-YUZ2FKCJ-DuUbDRxw.mjs")).teeCommand
+		load: async () => (await import("./tee-YUZ2FKCJ-BeZbMeQg.mjs")).teeCommand
 	},
 	{
 		name: "find",
-		load: async () => (await import("./find-INTH3OLC-RdP-hsVF.mjs")).findCommand
+		load: async () => (await import("./find-INTH3OLC-BXgosBN-.mjs")).findCommand
 	},
 	{
 		name: "basename",
@@ -23077,19 +23100,19 @@ var tt = [
 	},
 	{
 		name: "tree",
-		load: async () => (await import("./tree-YLD52CNT-DSyy-MaG.mjs")).treeCommand
+		load: async () => (await import("./tree-YLD52CNT-BbMGKPvW.mjs")).treeCommand
 	},
 	{
 		name: "du",
-		load: async () => (await import("./du-572XNP42-CHAO-EDI.mjs")).duCommand
+		load: async () => (await import("./du-572XNP42-B4W75agS.mjs")).duCommand
 	},
 	{
 		name: "env",
-		load: async () => (await import("./env-36M5BO7M-C9VWir-k.mjs")).envCommand
+		load: async () => (await import("./env-36M5BO7M-CzYSWBAm.mjs")).envCommand
 	},
 	{
 		name: "printenv",
-		load: async () => (await import("./env-36M5BO7M-C9VWir-k.mjs")).printenvCommand
+		load: async () => (await import("./env-36M5BO7M-CzYSWBAm.mjs")).printenvCommand
 	},
 	{
 		name: "alias",
@@ -23105,7 +23128,7 @@ var tt = [
 	},
 	{
 		name: "xargs",
-		load: async () => (await import("./xargs-MGZPH7AX-BkmiflqU.mjs")).xargsCommand
+		load: async () => (await import("./xargs-MGZPH7AX-zJMHUR_2.mjs")).xargsCommand
 	},
 	{
 		name: "true",
@@ -23121,23 +23144,23 @@ var tt = [
 	},
 	{
 		name: "bash",
-		load: async () => (await import("./bash-YZ33HQZQ-WlueOlNq.mjs")).bashCommand
+		load: async () => (await import("./bash-YZ33HQZQ-DukphZlQ.mjs")).bashCommand
 	},
 	{
 		name: "sh",
-		load: async () => (await import("./bash-YZ33HQZQ-WlueOlNq.mjs")).shCommand
+		load: async () => (await import("./bash-YZ33HQZQ-DukphZlQ.mjs")).shCommand
 	},
 	{
 		name: "jq",
-		load: async () => (await import("./jq-4XLYLOS5-DQ6iLRD3.mjs")).jqCommand
+		load: async () => (await import("./jq-4XLYLOS5-BhbSj1D9.mjs")).jqCommand
 	},
 	{
 		name: "base64",
-		load: async () => (await import("./base64-C2AIWVNC-Cs404cyq.mjs")).base64Command
+		load: async () => (await import("./base64-C2AIWVNC-DcAp1c2p.mjs")).base64Command
 	},
 	{
 		name: "diff",
-		load: async () => (await import("./diff-MWJFIG7X-FpRPeBBI.mjs")).diffCommand
+		load: async () => (await import("./diff-MWJFIG7X-CoLpB5r8.mjs")).diffCommand
 	},
 	{
 		name: "date",
@@ -23145,15 +23168,15 @@ var tt = [
 	},
 	{
 		name: "sleep",
-		load: async () => (await import("./sleep-X22JJINO-CczkV6Jp.mjs")).sleepCommand
+		load: async () => (await import("./sleep-X22JJINO-C85vW9bl.mjs")).sleepCommand
 	},
 	{
 		name: "timeout",
-		load: async () => (await import("./timeout-YDCRSLPQ-C9Veu7n5.mjs")).timeoutCommand
+		load: async () => (await import("./timeout-YDCRSLPQ-BYQu8FB_.mjs")).timeoutCommand
 	},
 	{
 		name: "time",
-		load: async () => (await import("./time-D4LNBSWX-BRz7RnVy.mjs")).timeCommand
+		load: async () => (await import("./time-D4LNBSWX-CwNJDX9k.mjs")).timeCommand
 	},
 	{
 		name: "seq",
@@ -23161,19 +23184,19 @@ var tt = [
 	},
 	{
 		name: "expr",
-		load: async () => (await import("./expr-5JAACS4X-KKuazyxt.mjs")).exprCommand
+		load: async () => (await import("./expr-5JAACS4X-C4pTNZ3u.mjs")).exprCommand
 	},
 	{
 		name: "md5sum",
-		load: async () => (await import("./md5sum-SPU24VSG-AYgghvvm.mjs")).md5sumCommand
+		load: async () => (await import("./md5sum-SPU24VSG-10wb8jSM.mjs")).md5sumCommand
 	},
 	{
 		name: "sha1sum",
-		load: async () => (await import("./sha1sum-2PTOAFR6-DKC60eG9.mjs")).sha1sumCommand
+		load: async () => (await import("./sha1sum-2PTOAFR6-CaclrBG7.mjs")).sha1sumCommand
 	},
 	{
 		name: "sha256sum",
-		load: async () => (await import("./sha256sum-NS7D3IXX-Db_9vDzm.mjs")).sha256sumCommand
+		load: async () => (await import("./sha256sum-NS7D3IXX-Dirjqo9R.mjs")).sha256sumCommand
 	},
 	{
 		name: "file",
@@ -23181,11 +23204,11 @@ var tt = [
 	},
 	{
 		name: "html-to-markdown",
-		load: async () => (await import("./html-to-markdown-JW4MSQZO-DqeKb1nJ.mjs")).htmlToMarkdownCommand
+		load: async () => (await import("./html-to-markdown-JW4MSQZO-DUhiVkMF.mjs")).htmlToMarkdownCommand
 	},
 	{
 		name: "help",
-		load: async () => (await import("./help-HZ6M2CKN-C9cpA_J5.mjs")).helpCommand
+		load: async () => (await import("./help-HZ6M2CKN-CZ6qTcLB.mjs")).helpCommand
 	},
 	{
 		name: "which",
@@ -23193,7 +23216,7 @@ var tt = [
 	},
 	{
 		name: "tac",
-		load: async () => (await import("./tac-2STMMJYW-BqghTfkz.mjs")).tac
+		load: async () => (await import("./tac-2STMMJYW-Bap8fjvo.mjs")).tac
 	},
 	{
 		name: "hostname",
@@ -23205,49 +23228,49 @@ var tt = [
 	},
 	{
 		name: "od",
-		load: async () => (await import("./od-WOKFDJTP-D5s8wG2y.mjs")).od
+		load: async () => (await import("./od-WOKFDJTP-D9CDg_0N.mjs")).od
 	},
 	{
 		name: "gzip",
-		load: async () => (await import("./gzip-O5ASJAFY-CeiWqkFz.mjs")).gzipCommand
+		load: async () => (await import("./gzip-O5ASJAFY-qGwUq87o.mjs")).gzipCommand
 	},
 	{
 		name: "gunzip",
-		load: async () => (await import("./gzip-O5ASJAFY-CeiWqkFz.mjs")).gunzipCommand
+		load: async () => (await import("./gzip-O5ASJAFY-qGwUq87o.mjs")).gunzipCommand
 	},
 	{
 		name: "zcat",
-		load: async () => (await import("./gzip-O5ASJAFY-CeiWqkFz.mjs")).zcatCommand
+		load: async () => (await import("./gzip-O5ASJAFY-qGwUq87o.mjs")).zcatCommand
 	}
 ];
 (typeof __BROWSER__ > "u" || !__BROWSER__) && (tt.push({
 	name: "tar",
-	load: async () => (await import("./tar-STHHZTZ6-B96J4oRi.mjs")).tarCommand
+	load: async () => (await import("./tar-STHHZTZ6-BvaMjwan.mjs")).tarCommand
 }), tt.push({
 	name: "yq",
-	load: async () => (await import("./yq-4QJW3EQG-VXsgb_hI.mjs")).yqCommand
+	load: async () => (await import("./yq-4QJW3EQG-B_jhRTwa.mjs")).yqCommand
 }), tt.push({
 	name: "xan",
-	load: async () => (await import("./xan-Y6WF3IRG--gAjwdYb.mjs")).xanCommand
+	load: async () => (await import("./xan-Y6WF3IRG-rLQOC4c5.mjs")).xanCommand
 }), tt.push({
 	name: "sqlite3",
-	load: async () => (await import("./sqlite3-CGOEFJAO-DJBV9PV_.mjs")).sqlite3Command
+	load: async () => (await import("./sqlite3-CGOEFJAO-DrBY4xSR.mjs")).sqlite3Command
 }));
 var Yt = [];
 (typeof __BROWSER__ > "u" || !__BROWSER__) && (Yt.push({
 	name: "python3",
-	load: async () => (await import("./python3-POMOR4OA-y8l5MsiF.mjs")).python3Command
+	load: async () => (await import("./python3-POMOR4OA-BrPhKjye.mjs")).python3Command
 }), Yt.push({
 	name: "python",
-	load: async () => (await import("./python3-POMOR4OA-y8l5MsiF.mjs")).pythonCommand
+	load: async () => (await import("./python3-POMOR4OA-BrPhKjye.mjs")).pythonCommand
 }));
 var Qt = [];
 (typeof __BROWSER__ > "u" || !__BROWSER__) && (Qt.push({
 	name: "js-exec",
-	load: async () => (await import("./js-exec-N5KEZBH7-CjOi5GO8.mjs")).jsExecCommand
+	load: async () => (await import("./js-exec-N5KEZBH7-B2gt37yR.mjs")).jsExecCommand
 }), Qt.push({
 	name: "node",
-	load: async () => (await import("./js-exec-N5KEZBH7-CjOi5GO8.mjs")).nodeStubCommand
+	load: async () => (await import("./js-exec-N5KEZBH7-B2gt37yR.mjs")).nodeStubCommand
 }));
 new TextEncoder();
 Object.freeze({
@@ -29182,6 +29205,8 @@ function catalogSecretKeyPreviews(app) {
 }
 function resolveConnectionKind(row, app) {
 	if (row.authKind === "oauth_managed") return "oauth";
+	if (app?.credentialScheme === "NO_AUTH") return "none";
+	if (app?.source === "mcp" && app.authKind === "api_key" && !hasCredentialFieldTemplate(app)) return "none";
 	if (row.authKind === "keystroke") return app && hasCredentialFieldTemplate(app) ? "manual" : "oauth";
 	return "manual";
 }
@@ -29208,9 +29233,10 @@ async function toCredentialSummary(row, scope, lookups) {
 	const app = lookups.appsBySlug.get(row.appSlug);
 	const connectionKind = resolveConnectionKind(row, app);
 	const usesOAuthConnection = connectionKind === "oauth";
+	const usesSecretFields = connectionKind === "manual";
 	const appName = displayAppName(row.appSlug);
 	const connection = row.connectionId ? lookups.connectionsById.get(row.connectionId) : void 0;
-	const secretKeys = !usesOAuthConnection && app ? catalogSecretKeyPreviews(app) : null;
+	const secretKeys = usesSecretFields && app ? catalogSecretKeyPreviews(app) : null;
 	const projectId = scope === "project" ? row.scopeId ?? row.projectId : void 0;
 	const projectName = projectId ? lookups.projectNameById.get(projectId) : void 0;
 	const grantedScopes = connection?.grantedScopes ?? row.grantedScopes;
@@ -29319,7 +29345,7 @@ const handler$35 = async (c) => {
 		const siblings = await withTargetScope$1(target, () => selectCredentialInstancesForScope(input.appId, target.scopeType, target.scopeId));
 		siblingCounts.set(target, siblings.length);
 	}
-	const value = input.value;
+	const value = input.connectionKind === "none" ? {} : input.value;
 	const createdIds = [];
 	for (const target of targets) {
 		const siblings = await withTargetScope$1(target, () => selectCredentialInstancesForScope(input.appId, target.scopeType, target.scopeId));
@@ -29874,7 +29900,8 @@ function appRowToCatalogSummary(row) {
 		authKind: row.authKind,
 		source: row.source,
 		...row.url ? { url: row.url } : {},
-		...hasCredentialFieldTemplate(row) ? { hasCredentialFields: true } : {}
+		...hasCredentialFieldTemplate(row) ? { hasCredentialFields: true } : {},
+		...row.credentialScheme ? { credentialScheme: row.credentialScheme } : {}
 	};
 }
 /** Map a platform `apps` row to the full connect-picker detail shape. */
@@ -30040,6 +30067,21 @@ const handler$18 = async (c) => {
 	}
 };
 //#endregion
+//#region src/lib/sanitized-url.ts
+/** Strip credentials/query/hash before logging URLs. */
+function sanitizedUrl(value) {
+	try {
+		const url = new URL(value);
+		url.username = "";
+		url.password = "";
+		url.search = "";
+		url.hash = "";
+		return url.toString();
+	} catch {
+		return;
+	}
+}
+//#endregion
 //#region src/routes/account/apps/[slug]/mcp/oauth/connections/POST.ts
 const handler$17 = async (c) => {
 	const organization = c.get("organization");
@@ -30082,7 +30124,38 @@ const handler$17 = async (c) => {
 		});
 		return c.json(StartMcpOAuthConnectionResultSchema.parse(result));
 	} catch (error) {
-		const message = error instanceof Error ? error.message : "Failed to start MCP OAuth connection";
+		const message = error instanceof McpOAuthConnectError ? error.message : "Failed to start MCP OAuth connection";
+		const failurePhase = error instanceof McpOAuthConnectError ? error.phase : "authorization_start";
+		log.error("mcp.oauth.connect.failed", {
+			app_slug: appSlug,
+			...app.url && sanitizedUrl(app.url) ? { app_url: sanitizedUrl(app.url) } : {},
+			organization_id: organization.organizationId,
+			user_id: user.id,
+			error_name: error instanceof Error ? error.name : "UnknownError",
+			error_message: message,
+			failure_phase: failurePhase,
+			...error instanceof McpOAuthConnectError ? {
+				...error.diagnostics.correlationId ? { correlation_id: error.diagnostics.correlationId } : {},
+				...error.diagnostics.authorizationServerUrl ? { authorization_server_url: sanitizedUrl(error.diagnostics.authorizationServerUrl) } : {},
+				...error.diagnostics.registrationEndpoint ? { registration_endpoint: sanitizedUrl(error.diagnostics.registrationEndpoint) } : {},
+				...error.diagnostics.grantTypes ? { grant_types: error.diagnostics.grantTypes.join(" ") } : {},
+				...error.diagnostics.tokenEndpointAuthMethod ? { token_endpoint_auth_method: error.diagnostics.tokenEndpointAuthMethod } : {},
+				...error.diagnostics.providerHttpStatus ? { provider_http_status: error.diagnostics.providerHttpStatus } : {},
+				...error.diagnostics.oauthError ? { oauth_error: error.diagnostics.oauthError } : {}
+			} : {}
+		});
+		trackProductEvent({
+			name: "credential:connect_failed",
+			actorId: user.id,
+			organizationId: organization.organizationId,
+			properties: {
+				app_slug: appSlug,
+				app_source: "mcp",
+				connection_kind: "oauth",
+				auth_kind: "oauth",
+				failure_phase: failurePhase
+			}
+		}).catch(() => {});
 		return c.json({ error: message }, 500);
 	}
 };
@@ -30101,44 +30174,68 @@ function buildOAuthWebLandingUrl(webOrigin, params) {
 }
 //#endregion
 //#region src/routes/account/mcp/oauth/callback/GET.ts
+function normalizedOAuthError(value) {
+	return /^[a-z0-9_]+$/i.test(value) ? value : "authorization_failed";
+}
 const handler$16 = async (c) => {
 	const code = c.req.query("code")?.trim();
 	const state = c.req.query("state")?.trim();
 	const oauthError = c.req.query("error")?.trim();
 	if (oauthError) {
-		if (state) try {
-			const payload = decodeOAuthState(state);
-			trackProductEvent({
-				name: "credential:connect_failed",
-				actorId: payload.userId,
-				organizationId: payload.organizationId,
-				properties: {
-					app_slug: payload.appSlug,
-					app_source: "mcp",
-					connection_kind: "oauth",
-					auth_kind: "oauth"
-				}
-			}).catch(() => {});
-		} catch (decodeError) {
-			console.warn("[mcp-oauth-callback] state decode for analytics failed", decodeError);
+		if (!state) return c.json({ error: "Missing or invalid OAuth state" }, 400);
+		let payload;
+		try {
+			payload = await decodeOAuthState(state);
+		} catch (error) {
+			log.error("mcp.oauth.connect.failed", {
+				failure_phase: "authorization_callback",
+				error_name: error instanceof Error ? error.name : "InvalidOAuthState",
+				error_message: error instanceof Error ? error.message : "Missing or invalid OAuth state"
+			});
+			return c.json({ error: "Missing or invalid OAuth state" }, 400);
 		}
+		const errorCode = normalizedOAuthError(oauthError);
+		log.error("mcp.oauth.connect.failed", {
+			app_slug: payload.appSlug,
+			organization_id: payload.organizationId,
+			user_id: payload.userId,
+			correlation_id: payload.correlationId,
+			failure_phase: "authorization_callback",
+			oauth_error: errorCode,
+			error_name: "OAuthProviderError",
+			error_message: "OAuth authorization was not completed"
+		});
+		trackProductEvent({
+			name: "credential:connect_failed",
+			actorId: payload.userId,
+			organizationId: payload.organizationId,
+			properties: {
+				app_slug: payload.appSlug,
+				app_source: "mcp",
+				connection_kind: "oauth",
+				auth_kind: "oauth",
+				failure_phase: "authorization_callback"
+			}
+		}).catch(() => {});
 		const redirect = buildOAuthWebLandingUrl(process.env.PUBLIC_WEB_URL, {
-			key: "mcp",
+			key: payload.appSlug,
 			ok: false,
-			error: oauthError
+			error: errorCode
 		});
 		if (redirect) return c.redirect(redirect, 302);
-		return c.json({ error: oauthError }, 400);
+		return c.json({ error: errorCode }, 400);
 	}
 	if (!code || !state) return c.json({ error: "Missing code or state" }, 400);
 	let appSlug = "mcp";
+	let callbackPayload;
 	try {
-		const payload = decodeOAuthState(state);
+		const payload = await decodeOAuthState(state);
+		callbackPayload = payload;
 		appSlug = payload.appSlug;
 		const organization = await selectOrganizationById(payload.organizationId);
 		if (!organization) return c.json({ error: "Organization not found" }, 404);
 		const result = await runWithOrganizationScope(organization.id, () => runWithProjectDatabase(resolveOrgProjectDatabaseOptions(organization), () => runWithTenantScope(organization.id, () => completeMcpOAuthConnect({
-			state,
+			payload,
 			code
 		}))));
 		let app;
@@ -30171,30 +30268,44 @@ const handler$16 = async (c) => {
 			app: result.appSlug
 		});
 	} catch (error) {
-		console.error("[mcp-oauth-callback] OAuth connection failed", error);
-		if (state) try {
-			const payload = decodeOAuthState(state);
-			trackProductEvent({
-				name: "credential:connect_failed",
-				actorId: payload.userId,
-				organizationId: payload.organizationId,
-				properties: {
-					app_slug: payload.appSlug,
-					app_source: "mcp",
-					connection_kind: "oauth",
-					auth_kind: "oauth"
-				}
-			}).catch(() => {});
-		} catch (decodeError) {
-			console.warn("[mcp-oauth-callback] state decode for analytics failed", decodeError);
-		}
+		const failurePhase = error instanceof McpOAuthConnectError ? error.phase : "authorization_callback";
+		const message = error instanceof McpOAuthConnectError ? error.message : "OAuth connection failed";
+		log.error("mcp.oauth.connect.failed", {
+			...callbackPayload ? {
+				app_slug: callbackPayload.appSlug,
+				organization_id: callbackPayload.organizationId,
+				user_id: callbackPayload.userId,
+				correlation_id: callbackPayload.correlationId
+			} : {},
+			failure_phase: failurePhase,
+			error_name: error instanceof Error ? error.name : "UnknownError",
+			error_message: message,
+			...error instanceof McpOAuthConnectError ? {
+				...error.diagnostics.authorizationServerUrl ? { authorization_server_url: sanitizedUrl(error.diagnostics.authorizationServerUrl) } : {},
+				...error.diagnostics.providerHttpStatus ? { provider_http_status: error.diagnostics.providerHttpStatus } : {},
+				...error.diagnostics.oauthError ? { oauth_error: error.diagnostics.oauthError } : {}
+			} : {}
+		});
+		if (callbackPayload) trackProductEvent({
+			name: "credential:connect_failed",
+			actorId: callbackPayload.userId,
+			organizationId: callbackPayload.organizationId,
+			properties: {
+				app_slug: callbackPayload.appSlug,
+				app_source: "mcp",
+				connection_kind: "oauth",
+				auth_kind: "oauth",
+				failure_phase: failurePhase
+			}
+		}).catch(() => {});
 		const redirect = buildOAuthWebLandingUrl(process.env.PUBLIC_WEB_URL, {
 			key: appSlug,
 			ok: false,
-			error: "OAuth connection failed"
+			error: message
 		});
 		if (redirect) return c.redirect(redirect, 302);
-		return c.json({ error: "OAuth connection failed" }, 500);
+		const status = failurePhase === "authorization_callback" ? 400 : failurePhase === "token_exchange" ? 502 : 500;
+		return c.json({ error: message }, status);
 	}
 };
 //#endregion
@@ -31452,4 +31563,4 @@ async function startPlatformServer(platformConfig, hooks = {}) {
 //#endregion
 export { r1 as S, o as _, c as a, b$1 as b, a$1 as c, c$1 as d, r as f, e as g, u as h, n$1 as i, d$1 as l, b as m, n, p as o, r$1 as p, i as r, x as s, startPlatformServer as t, x$1 as u, r$3 as v, I1 as x, h as y };
 
-//# sourceMappingURL=start-B8JPSU7i.mjs.map
+//# sourceMappingURL=start-zbLIFKlv.mjs.map