@layers/amba-mcp 0.1.1 → 1.0.0

package/dist/index.js

@@ -0,0 +1,3230 @@
+import { readFile } from "node:fs/promises";
+import { join } from "node:path";
+import { homedir } from "node:os";
+import { z } from "zod";
+import { INTEGRATION_PROVIDERS } from "@layers/amba-shared";
+//#region src/auth.ts
+const CREDENTIALS_PATH = join(homedir(), ".amba", "credentials.json");
+async function loadCredentials() {
+	try {
+		const raw = await readFile(CREDENTIALS_PATH, "utf-8");
+		const parsed = JSON.parse(raw);
+		if (typeof parsed !== "object" || parsed === null || !("access_token" in parsed) || !("refresh_token" in parsed) || !("expires_at" in parsed)) throw new Error("Invalid credentials format");
+		const creds = parsed;
+		if (!creds.access_token || typeof creds.access_token !== "string") throw new Error("Missing or invalid access_token in credentials");
+		return creds;
+	} catch (err) {
+		if (err instanceof Error && "code" in err && err.code === "ENOENT") throw new Error(`Credentials file not found at ${CREDENTIALS_PATH}. Run "amba login" to authenticate first.`);
+		throw err;
+	}
+}
+function isTokenExpired(credentials) {
+	if (!credentials.expires_at) return false;
+	const expiresAt = new Date(credentials.expires_at).getTime();
+	return Date.now() > expiresAt - 6e4;
+}
+//#endregion
+//#region src/api-client.ts
+const BASE_URL = "https://api.amba.dev/v1/admin";
+var ApiClient = class {
+	baseUrl;
+	apiRoot;
+	tokenProvider;
+	constructor(options) {
+		const raw = (options?.baseUrl ?? BASE_URL).replace(/\/+$/, "");
+		if (!/\/admin$/.test(raw)) throw new Error(`ApiClient baseUrl must end in /admin (got ${JSON.stringify(raw)}). Set AMBA_API_URL=https://api.amba.dev/v1/admin (or your equivalent versioned host).`);
+		this.baseUrl = raw;
+		this.apiRoot = raw.replace(/\/admin$/, "");
+		this.tokenProvider = options?.getToken;
+	}
+	/**
+	* Returns the configured admin-prefixed base URL (e.g.
+	* `https://api.amba.dev/admin`). Auth tools (`amba_developer_signup`,
+	* `amba_developer_login`, `amba_developer_refresh`) need a sibling root
+	* because the public `/auth/developer/*` endpoints are NOT under `/admin`.
+	*/
+	getBaseUrl() {
+		return this.baseUrl;
+	}
+	/**
+	* Returns the API root with the trailing `/admin` segment stripped —
+	* computed once at construction so tools targeting sibling routes
+	* (`/auth/developer/*`) get a stable root regardless of trailing-slash
+	* normalisation. The constructor enforces the `/admin` suffix invariant.
+	*/
+	getApiRoot() {
+		return this.apiRoot;
+	}
+	/**
+	* Resolve the current developer Bearer token, going through the configured
+	* tokenProvider (or `~/.amba/credentials.json` for the CLI fallback).
+	*
+	* Returns `null` if no provider is configured AND no credentials file exists
+	* — useful for tools like `amba_developer_signup` that may run with no
+	* inbound Bearer at all. All other code paths should treat a thrown error
+	* as a hard auth failure (e.g. expired token).
+	*/
+	async resolveTokenOrNull() {
+		if (this.tokenProvider) try {
+			return await this.tokenProvider() || null;
+		} catch {
+			return null;
+		}
+		try {
+			const credentials = await loadCredentials();
+			if (isTokenExpired(credentials)) return null;
+			return credentials.access_token;
+		} catch {
+			return null;
+		}
+	}
+	async getToken() {
+		if (this.tokenProvider) {
+			const token = await this.tokenProvider();
+			if (!token) throw new Error("Token provider returned an empty token.");
+			return token;
+		}
+		const credentials = await loadCredentials();
+		if (isTokenExpired(credentials)) throw new Error("Developer access token has expired. Run \"amba login\" to re-authenticate.");
+		return credentials.access_token;
+	}
+	async request(method, path, body, query) {
+		const token = await this.getToken();
+		let url = `${this.baseUrl}${path}`;
+		if (query) {
+			const params = new URLSearchParams(query);
+			url += `?${params.toString()}`;
+		}
+		const headers = {
+			Authorization: `Bearer ${token}`,
+			"Content-Type": "application/json",
+			Accept: "application/json"
+		};
+		const res = await fetch(url, {
+			method,
+			headers,
+			body: body !== void 0 ? JSON.stringify(body) : void 0
+		});
+		if (!res.ok) {
+			let errorMessage;
+			try {
+				errorMessage = (await res.json())?.error?.message ?? res.statusText;
+			} catch {
+				errorMessage = res.statusText;
+			}
+			throw new Error(`API error ${res.status}: ${errorMessage}`);
+		}
+		return await res.json();
+	}
+	async get(path, query) {
+		return this.request("GET", path, void 0, query);
+	}
+	async post(path, body) {
+		return this.request("POST", path, body);
+	}
+	async put(path, body) {
+		return this.request("PUT", path, body);
+	}
+	async patch(path, body) {
+		return this.request("PATCH", path, body);
+	}
+	async delete(path) {
+		return this.request("DELETE", path);
+	}
+	/**
+	* GET that returns the raw response body as a string and only reads up to
+	* `maxBytes` bytes. Used by export tools that hit CSV/NDJSON streaming
+	* endpoints — JSON parsing isn't applicable, and we cap at 10k rows worth
+	* of bytes so a multi-million-row export can't blow the MCP context window.
+	*
+	* Errors are still parsed via the JSON envelope where possible to keep the
+	* thrown message human-readable (matches the regular request() behavior).
+	*/
+	async getRaw(path, query, options) {
+		const token = await this.getToken();
+		const maxBytes = options?.maxBytes ?? 1048576;
+		let url = `${this.baseUrl}${path}`;
+		if (query) {
+			const params = new URLSearchParams(query);
+			url += `?${params.toString()}`;
+		}
+		const res = await fetch(url, {
+			method: "GET",
+			headers: {
+				Authorization: `Bearer ${token}`,
+				Accept: "text/csv, application/x-ndjson, */*"
+			}
+		});
+		if (!res.ok) {
+			let errorMessage;
+			try {
+				errorMessage = (await res.json())?.error?.message ?? res.statusText;
+			} catch {
+				errorMessage = res.statusText;
+			}
+			throw new Error(`API error ${res.status}: ${errorMessage}`);
+		}
+		const contentType = res.headers.get("content-type");
+		const reader = res.body?.getReader();
+		if (!reader) {
+			const full = await res.text();
+			const truncated = full.length > maxBytes;
+			return {
+				body: truncated ? full.slice(0, maxBytes) : full,
+				truncated,
+				contentType
+			};
+		}
+		const decoder = new TextDecoder();
+		let received = 0;
+		let truncated = false;
+		let body = "";
+		while (received < maxBytes) {
+			const { done, value } = await reader.read();
+			if (done) break;
+			if (!value) continue;
+			const remaining = maxBytes - received;
+			if (value.byteLength > remaining) {
+				body += decoder.decode(value.slice(0, remaining), { stream: false });
+				received = maxBytes;
+				truncated = true;
+				await reader.cancel();
+				break;
+			}
+			body += decoder.decode(value, { stream: true });
+			received += value.byteLength;
+		}
+		body += decoder.decode();
+		return {
+			body,
+			truncated,
+			contentType
+		};
+	}
+};
+//#endregion
+//#region src/tools/projects.ts
+function registerTools$18(server, apiClient) {
+	server.tool("amba_list_projects", "List all Amba projects owned by the authenticated developer. Returns project id, name, bundle_id, platform, and environment.", {}, async () => {
+		const result = await apiClient.get("/projects");
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_get_project", "Get detailed information about a specific Amba project by its ID, including API keys, integrations, and configuration.", { project_id: z.string().describe("The project ID") }, async ({ project_id }) => {
+		const result = await apiClient.get(`/projects/${project_id}`);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_create_project", "Create a new Amba project. A project represents a mobile app and contains all its engagement configuration (push, segments, config, content, streaks).", {
+		name: z.string().describe("Human-readable project name (e.g. \"My Fitness App\")"),
+		bundle_id: z.string().optional().describe("App bundle identifier (e.g. \"com.example.myapp\")"),
+		platform: z.enum([
+			"ios",
+			"android",
+			"all"
+		]).optional().describe("Target platform. Defaults to \"all\".")
+	}, async ({ name, bundle_id, platform }) => {
+		const body = { name };
+		if (bundle_id !== void 0) body.bundle_id = bundle_id;
+		if (platform !== void 0) body.platform = platform;
+		const result = await apiClient.post("/projects", body);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_update_project", "Update a project. Only `name`, `bundle_id`, `platform`, and `environment` are mutable; other fields are silently ignored. At least one editable field must be supplied.", {
+		project_id: z.string().describe("The project ID"),
+		name: z.string().optional().describe("Human-readable project name."),
+		bundle_id: z.string().optional().describe("App bundle identifier (e.g. \"com.example.myapp\")."),
+		platform: z.enum([
+			"ios",
+			"android",
+			"all"
+		]).optional().describe("Target platform."),
+		environment: z.enum(["development", "production"]).optional().describe("Project environment.")
+	}, async ({ project_id, name, bundle_id, platform, environment }) => {
+		const payload = {};
+		if (name !== void 0) payload.name = name;
+		if (bundle_id !== void 0) payload.bundle_id = bundle_id;
+		if (platform !== void 0) payload.platform = platform;
+		if (environment !== void 0) payload.environment = environment;
+		const result = await apiClient.patch(`/projects/${project_id}`, payload);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_delete_project", "Permanently delete an Amba project. This removes the project from Amba metadata. The associated Neon database is NOT auto-deleted — clean it up via the Neon console if no longer needed.", { project_id: z.string().describe("The project ID") }, async ({ project_id }) => {
+		const result = await apiClient.delete(`/projects/${project_id}`);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_create_api_key", "Generate a new API key for a project. The full key value is returned ONCE in the response and cannot be retrieved later — store it immediately. Server keys are for backend services; client keys are for the Amba client SDKs (@layers/amba-web, @layers/amba-expo, @layers/amba-react-native, @layers/amba-node).", {
+		project_id: z.string().describe("The project ID"),
+		key_type: z.enum(["client", "server"]).describe("Key type. `client` for the SDK on end-user devices; `server` for backend services."),
+		environment: z.enum(["development", "production"]).describe("Environment this key targets.")
+	}, async ({ project_id, key_type, environment }) => {
+		const result = await apiClient.post(`/projects/${project_id}/api-keys`, {
+			key_type,
+			environment
+		});
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_delete_api_key", "Revoke an API key. Subsequent requests using the key will be rejected with 401. Useful when a key is compromised or rotated.", {
+		project_id: z.string().describe("The project ID"),
+		key_id: z.string().describe("The API key ID to revoke")
+	}, async ({ project_id, key_id }) => {
+		const result = await apiClient.delete(`/projects/${project_id}/api-keys/${key_id}`);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_reprovision_project", "Re-drive a failed or stalled project provisioning. Kicks off the same provisioning workflow used at create-time but with a fresh per-attempt id, so duplicate POSTs collapse rather than fan out. Provisioning is idempotent.", { project_id: z.string().describe("The project ID") }, async ({ project_id }) => {
+		const result = await apiClient.post(`/projects/${project_id}/reprovision`);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_get_provisioning_status", "Inspect a project's Neon provisioning state. Returns the provisioning record plus a workflow descriptor (status, run id, start/close times) for the most recent provisioning attempt.", { project_id: z.string().describe("The project ID") }, async ({ project_id }) => {
+		const result = await apiClient.get(`/projects/${project_id}/provisioning-status`);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+}
+//#endregion
+//#region src/tools/push.ts
+function registerTools$17(server, apiClient) {
+	server.tool("amba_create_push_campaign", "Create a new push notification campaign for a project. The campaign starts in \"draft\" status. You can optionally target a segment and schedule delivery.", {
+		project_id: z.string().describe("The project ID"),
+		title: z.string().describe("Push notification title shown to the user"),
+		body: z.string().describe("Push notification body text"),
+		name: z.string().optional().describe("Internal campaign name for developer reference"),
+		segment_id: z.string().optional().describe("Target segment ID. If omitted, targets all users."),
+		data: z.record(z.unknown()).optional().describe("Custom key-value data payload attached to the push notification"),
+		scheduled_at: z.string().optional().describe("ISO 8601 datetime to schedule delivery. If omitted, the campaign remains a draft.")
+	}, async ({ project_id, title, body, name, segment_id, data, scheduled_at }) => {
+		const payload = {
+			title,
+			body
+		};
+		if (name !== void 0) payload.name = name;
+		if (segment_id !== void 0) payload.segment_id = segment_id;
+		if (data !== void 0) payload.data = data;
+		if (scheduled_at !== void 0) payload.scheduled_at = scheduled_at;
+		const result = await apiClient.post(`/projects/${project_id}/push/campaigns`, payload);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_send_push_campaign", "Send (trigger delivery of) a previously created push campaign. The campaign must be in \"draft\" status. Scheduled campaigns fire automatically.", {
+		project_id: z.string().describe("The project ID"),
+		campaign_id: z.string().describe("The push campaign ID to send")
+	}, async ({ project_id, campaign_id }) => {
+		const result = await apiClient.post(`/projects/${project_id}/push/campaigns/${campaign_id}/send`);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_send_test_push", "Send a test push notification. Provide either `app_user_id` (uses the user's most recent active push token) or an explicit `device_token`+`provider` pair. Useful for verifying APNs/FCM configuration before launching a campaign.", {
+		project_id: z.string().describe("The project ID"),
+		title: z.string().describe("Push notification title"),
+		body: z.string().describe("Push notification body text"),
+		app_user_id: z.string().optional().describe("Target app user ID; server looks up their most recent active push token. Either this or device_token+provider is required."),
+		device_token: z.string().optional().describe("Explicit device push token (APNs or FCM). Requires `provider` when set."),
+		provider: z.enum(["apns", "fcm"]).optional().describe("Push provider when `device_token` is supplied. Required with device_token."),
+		data: z.record(z.unknown()).optional().describe("Optional custom data payload")
+	}, async ({ project_id, title, body, app_user_id, device_token, provider, data }) => {
+		const payload = {
+			title,
+			body
+		};
+		if (app_user_id !== void 0) payload.app_user_id = app_user_id;
+		if (device_token !== void 0) payload.device_token = device_token;
+		if (provider !== void 0) payload.provider = provider;
+		if (data !== void 0) payload.data = data;
+		const result = await apiClient.post(`/projects/${project_id}/push/campaigns/test`, payload);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_push_list_campaigns", "List push notification campaigns for a project, ordered by most recent. Returns name, title, body, segment_id, status, scheduled_at, and created_at.", { project_id: z.string().describe("The project ID") }, async ({ project_id }) => {
+		const result = await apiClient.get(`/projects/${project_id}/push/campaigns`);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_push_get_campaign", "Get a single push campaign by ID including its current status (draft, scheduled, sending, sent, failed), schedule, and payload.", {
+		project_id: z.string().describe("The project ID"),
+		campaign_id: z.string().describe("The push campaign ID")
+	}, async ({ project_id, campaign_id }) => {
+		const result = await apiClient.get(`/projects/${project_id}/push/campaigns/${campaign_id}`);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_push_update_campaign", "Update a push campaign before send. Only campaigns in `draft` or `scheduled` state are mutable; anything past that returns 409 ALREADY_SENT. If `scheduled_at` changes on a `scheduled` campaign, the existing Temporal workflow is terminated and re-started with the new startDelay. At least one editable field must be supplied.", {
+		project_id: z.string().describe("The project ID"),
+		campaign_id: z.string().describe("The push campaign ID"),
+		title: z.string().optional().describe("New notification title."),
+		body: z.string().optional().describe("New notification body text."),
+		data: z.record(z.unknown()).optional().describe("New custom data payload (object)."),
+		segment_id: z.string().nullable().optional().describe("New target segment UUID, or null to broadcast to all users."),
+		scheduled_at: z.string().optional().describe("New ISO-8601 send time. Must be in the future. Setting this on a draft promotes it to scheduled.")
+	}, async ({ project_id, campaign_id, title, body, data, segment_id, scheduled_at }) => {
+		const payload = {};
+		if (title !== void 0) payload.title = title;
+		if (body !== void 0) payload.body = body;
+		if (data !== void 0) payload.data = data;
+		if (segment_id !== void 0) payload.segment_id = segment_id;
+		if (scheduled_at !== void 0) payload.scheduled_at = scheduled_at;
+		const result = await apiClient.patch(`/projects/${project_id}/push/campaigns/${campaign_id}`, payload);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_push_delete_campaign", "Cancel and hard-delete a push campaign. Only campaigns in `draft` or `scheduled` state can be deleted; anything past that returns 409 ALREADY_SENT. Any pending Temporal workflow is terminated as part of the delete. Returns 204 No Content on success.", {
+		project_id: z.string().describe("The project ID"),
+		campaign_id: z.string().describe("The push campaign ID")
+	}, async ({ project_id, campaign_id }) => {
+		const result = await apiClient.delete(`/projects/${project_id}/push/campaigns/${campaign_id}`);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+}
+//#endregion
+//#region src/tools/segments.ts
+const segmentConditionSchema = z.object({
+	field: z.string().describe("User property field to evaluate (e.g. \"last_seen_at\", \"properties.plan\", \"entitlements.is_active\")"),
+	op: z.enum([
+		"eq",
+		"neq",
+		"gt",
+		"gte",
+		"lt",
+		"lte",
+		"contains",
+		"not_contains",
+		"exists",
+		"not_exists",
+		"within",
+		"not_within"
+	]).describe("Comparison operator"),
+	value: z.unknown().describe("Value to compare against")
+});
+const segmentRulesSchema = z.object({
+	operator: z.enum(["AND", "OR"]).describe("Logical operator combining conditions"),
+	conditions: z.array(segmentConditionSchema).describe("Array of filter conditions")
+});
+function registerTools$16(server, apiClient) {
+	server.tool("amba_list_segments", "List all user segments for a project. Segments define groups of users based on rules (e.g. \"active in last 7 days\", \"premium users\"). System segments are included.", { project_id: z.string().describe("The project ID") }, async ({ project_id }) => {
+		const result = await apiClient.get(`/projects/${project_id}/segments`);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_create_segment", "Create a custom user segment with rule-based filters. Segments can target users by properties, activity, entitlements, and more. Used for push targeting and analytics.", {
+		project_id: z.string().describe("The project ID"),
+		name: z.string().describe("Segment name (e.g. \"Power Users\", \"Trial Expiring Soon\")"),
+		description: z.string().optional().describe("Human-readable description of the segment"),
+		rules: segmentRulesSchema.describe("Segment filter rules with conditions")
+	}, async ({ project_id, name, description, rules }) => {
+		const payload = {
+			name,
+			rules
+		};
+		if (description !== void 0) payload.description = description;
+		const result = await apiClient.post(`/projects/${project_id}/segments`, payload);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_segments_get", "Get a single segment by id including its rules and is_system flag.", {
+		project_id: z.string().describe("The project ID"),
+		segment_id: z.string().describe("The segment ID")
+	}, async ({ project_id, segment_id }) => {
+		const result = await apiClient.get(`/projects/${project_id}/segments/${segment_id}`);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_segments_patch", "Update a non-system segment's name, description, and/or rules. System segments cannot be edited (API returns 403).", {
+		project_id: z.string().describe("The project ID"),
+		segment_id: z.string().describe("The segment ID"),
+		name: z.string().optional().describe("New segment name"),
+		description: z.string().nullable().optional().describe("New description; pass null to clear"),
+		rules: segmentRulesSchema.optional().describe("Replacement rule tree")
+	}, async ({ project_id, segment_id, name, description, rules }) => {
+		const payload = {};
+		if (name !== void 0) payload.name = name;
+		if (description !== void 0) payload.description = description;
+		if (rules !== void 0) payload.rules = rules;
+		const result = await apiClient.patch(`/projects/${project_id}/segments/${segment_id}`, payload);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_segments_delete", "Delete a non-system segment. System segments cannot be deleted (API returns 403).", {
+		project_id: z.string().describe("The project ID"),
+		segment_id: z.string().describe("The segment ID")
+	}, async ({ project_id, segment_id }) => {
+		const result = await apiClient.delete(`/projects/${project_id}/segments/${segment_id}`);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_segments_evaluate", "Trigger an immediate segment evaluation workflow in Temporal. Useful after a rule change to refresh segment memberships without waiting for the 15-minute scheduled run.", {
+		project_id: z.string().describe("The project ID"),
+		segment_id: z.string().describe("The segment ID to evaluate")
+	}, async ({ project_id, segment_id }) => {
+		const result = await apiClient.post(`/projects/${project_id}/segments/${segment_id}/evaluate`);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+}
+//#endregion
+//#region src/tools/config.ts
+const configConditionSchema = z.object({
+	segment_id: z.string().optional().describe("Segment ID to conditionally apply this value"),
+	percentage: z.number().optional().describe("Percentage rollout (0-100)"),
+	value: z.unknown().describe("Override value for this condition")
+});
+function registerTools$15(server, apiClient) {
+	server.tool("amba_list_configs", "List all remote-config keys for a project. Returns key, value, value_type, description, conditions, and version per active row. Remote config lets you change app behavior without deploying an update.", { project_id: z.string().describe("The project ID") }, async ({ project_id }) => {
+		const result = await apiClient.get(`/projects/${project_id}/config`);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_create_config", "Create or upsert a remote-config key. Supports string, number, boolean, and JSON value types. Can include segment-based or percentage-based conditions for targeted rollouts. The handler is upsert-on-key — calling this for an existing key replaces it.", {
+		project_id: z.string().describe("The project ID"),
+		key: z.string().describe("Config key name (e.g. \"feature_paywall_v2\", \"daily_limit\")"),
+		value: z.unknown().describe("The default config value"),
+		value_type: z.enum([
+			"string",
+			"number",
+			"boolean",
+			"json"
+		]).optional().describe("Value type. Defaults to \"string\"."),
+		description: z.string().optional().describe("Description of what this config controls"),
+		conditions: z.array(configConditionSchema).optional().describe("Conditional overrides based on segments or percentage rollout")
+	}, async ({ project_id, key, value, value_type, description, conditions }) => {
+		const payload = {
+			key,
+			value
+		};
+		if (value_type !== void 0) payload.value_type = value_type;
+		if (description !== void 0) payload.description = description;
+		if (conditions !== void 0) payload.conditions = conditions;
+		const result = await apiClient.post(`/projects/${project_id}/config`, payload);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_update_config", "Partially update a single remote-config key. Only fields provided are touched — other fields are preserved. Updating `value` bumps the per-row version counter; any successful mutation also recomputes the singleton config_versions hash so cached clients see the change.", {
+		project_id: z.string().describe("The project ID"),
+		key: z.string().describe("The config key to update"),
+		value: z.unknown().optional().describe("New default value (omit to leave unchanged)"),
+		description: z.string().nullable().optional().describe("New description (null to clear)"),
+		conditions: z.array(configConditionSchema).optional().describe("New conditional overrides (replaces the existing list)")
+	}, async ({ project_id, key, value, description, conditions }) => {
+		const payload = {};
+		if (value !== void 0) payload.value = value;
+		if (description !== void 0) payload.description = description;
+		if (conditions !== void 0) payload.conditions = conditions;
+		const result = await apiClient.patch(`/projects/${project_id}/config/${encodeURIComponent(key)}`, payload);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_delete_config", "Delete a remote-config key. Idempotent — deleting a non-existent key returns success. Recomputes the config_versions hash so clients refresh cached config on next fetch.", {
+		project_id: z.string().describe("The project ID"),
+		key: z.string().describe("The config key to delete")
+	}, async ({ project_id, key }) => {
+		const result = await apiClient.delete(`/projects/${project_id}/config/${encodeURIComponent(key)}`);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+}
+//#endregion
+//#region src/tools/content.ts
+const contentItemSchema = z.object({
+	title: z.string().optional().describe("Content item title"),
+	body: z.string().describe("Content body text"),
+	media_url: z.string().optional().describe("URL to associated media (image, video)"),
+	category: z.string().optional().describe("Category for organizing content"),
+	tags: z.array(z.string()).optional().describe("Tags for content filtering"),
+	metadata: z.record(z.unknown()).optional().describe("Arbitrary metadata key-value pairs"),
+	is_premium: z.boolean().optional().describe("Whether this content requires a premium entitlement")
+});
+function registerTools$14(server, apiClient) {
+	server.tool("amba_create_content_library", "Create a content library for a project. A content library is a collection of content items (tips, quotes, articles) that can be delivered on a schedule to keep users engaged.", {
+		project_id: z.string().describe("The project ID"),
+		name: z.string().describe("Library name (e.g. \"Daily Motivation\", \"Workout Tips\")"),
+		description: z.string().optional().describe("Description of the library content"),
+		content_schema: z.record(z.unknown()).optional().describe("Optional JSON schema for validating content item metadata")
+	}, async ({ project_id, name, description, content_schema }) => {
+		const payload = { name };
+		if (description !== void 0) payload.description = description;
+		if (content_schema !== void 0) payload.content_schema = content_schema;
+		const result = await apiClient.post(`/projects/${project_id}/content/libraries`, payload);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_add_content_items", "Add one or more content items to an existing content library. Items can include text, media URLs, categories, tags, and metadata.", {
+		project_id: z.string().describe("The project ID"),
+		library_id: z.string().describe("The content library ID"),
+		items: z.array(contentItemSchema).describe("Array of content items to add")
+	}, async ({ project_id, library_id, items }) => {
+		const result = await apiClient.post(`/projects/${project_id}/content/libraries/${library_id}/items`, { items });
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_create_content_schedule", "Create a delivery schedule for a content library. Schedules control how and when content items are delivered to users (daily rotation, weekly, random, or sequential).", {
+		project_id: z.string().describe("The project ID"),
+		library_id: z.string().describe("The content library ID to schedule"),
+		name: z.string().describe("Schedule name (e.g. \"Morning Tip of the Day\")"),
+		schedule_type: z.enum([
+			"daily_rotation",
+			"weekly",
+			"random",
+			"sequential"
+		]).describe("How content items are selected for delivery"),
+		config: z.record(z.unknown()).optional().describe("Schedule-specific configuration (e.g. delivery time, timezone)")
+	}, async ({ project_id, library_id, name, schedule_type, config }) => {
+		const payload = {
+			library_id,
+			name,
+			schedule_type
+		};
+		if (config !== void 0) payload.config = config;
+		const result = await apiClient.post(`/projects/${project_id}/content/schedules`, payload);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_content_list_libraries", "List content libraries for a project.", { project_id: z.string().describe("The project ID") }, async ({ project_id }) => {
+		const result = await apiClient.get(`/projects/${project_id}/content/libraries`);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_content_list_items", "List content items in a specific library. Supports pagination.", {
+		project_id: z.string().describe("The project ID"),
+		library_id: z.string().describe("The content library ID"),
+		limit: z.number().optional().describe("Max results to return (default 50)"),
+		offset: z.number().optional().describe("Offset for pagination (default 0)")
+	}, async ({ project_id, library_id, limit, offset }) => {
+		const query = {};
+		if (limit !== void 0) query.limit = String(limit);
+		if (offset !== void 0) query.offset = String(offset);
+		const result = await apiClient.get(`/projects/${project_id}/content/libraries/${library_id}/items`, query);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_content_list_schedules", "List all content delivery schedules for a project.", { project_id: z.string().describe("The project ID") }, async ({ project_id }) => {
+		const result = await apiClient.get(`/projects/${project_id}/content/schedules`);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_content_delete_item", "Delete a single content item permanently. Historical deliveries referencing this item are preserved.", {
+		project_id: z.string().describe("The project ID"),
+		item_id: z.string().describe("The content item ID")
+	}, async ({ project_id, item_id }) => {
+		const result = await apiClient.delete(`/projects/${project_id}/content/items/${item_id}`);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_content_update_item", "Partially update a content item. Only the supplied fields are touched. Use this to edit body, title, metadata, or active state without recreating the row.", {
+		project_id: z.string().describe("The project ID"),
+		item_id: z.string().describe("The content item ID"),
+		title: z.string().optional().describe("Item title"),
+		body: z.string().optional().describe("Item body / payload text"),
+		metadata: z.record(z.unknown()).optional().describe("Custom metadata"),
+		tags: z.array(z.string()).optional().describe("Tag list (replaces existing tags)"),
+		is_active: z.boolean().optional().describe("Whether the item is active")
+	}, async ({ project_id, item_id, title, body, metadata, tags, is_active }) => {
+		const payload = {};
+		if (title !== void 0) payload.title = title;
+		if (body !== void 0) payload.body = body;
+		if (metadata !== void 0) payload.metadata = metadata;
+		if (tags !== void 0) payload.tags = tags;
+		if (is_active !== void 0) payload.is_active = is_active;
+		const result = await apiClient.patch(`/projects/${project_id}/content/items/${item_id}`, payload);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_content_update_schedule", "Partially update a content delivery schedule. Only the supplied fields are touched. Updating timing or targeting fields restarts the underlying Temporal cron schedule.", {
+		project_id: z.string().describe("The project ID"),
+		schedule_id: z.string().describe("The schedule ID"),
+		name: z.string().optional().describe("Schedule name"),
+		cron: z.string().optional().describe("Cron expression (5-field) for delivery timing"),
+		timezone: z.string().optional().describe("IANA timezone (e.g. \"America/Los_Angeles\")"),
+		segment_id: z.string().nullable().optional().describe("Target segment, or null to broadcast to all users"),
+		is_active: z.boolean().optional().describe("Whether the schedule is active")
+	}, async ({ project_id, schedule_id, name, cron, timezone, segment_id, is_active }) => {
+		const payload = {};
+		if (name !== void 0) payload.name = name;
+		if (cron !== void 0) payload.cron = cron;
+		if (timezone !== void 0) payload.timezone = timezone;
+		if (segment_id !== void 0) payload.segment_id = segment_id;
+		if (is_active !== void 0) payload.is_active = is_active;
+		const result = await apiClient.patch(`/projects/${project_id}/content/schedules/${schedule_id}`, payload);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_content_delete_schedule", "Delete a content delivery schedule. The underlying Temporal cron is terminated as part of the delete.", {
+		project_id: z.string().describe("The project ID"),
+		schedule_id: z.string().describe("The schedule ID")
+	}, async ({ project_id, schedule_id }) => {
+		const result = await apiClient.delete(`/projects/${project_id}/content/schedules/${schedule_id}`);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_content_bulk_import", "Bulk-import multiple content items into a library in a single transactional call. Each item is upsert-on-key within the library. Useful for seed data and for migrating from external content sources.", {
+		project_id: z.string().describe("The project ID"),
+		library_id: z.string().describe("The content library ID"),
+		items: z.array(z.record(z.unknown())).describe("Array of content items to import. Each item should include `key`, `title`, `body`, and optional `metadata`, `tags`.")
+	}, async ({ project_id, library_id, items }) => {
+		const result = await apiClient.post(`/projects/${project_id}/content/libraries/${library_id}/bulk`, { items });
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+}
+//#endregion
+//#region src/tools/streaks.ts
+function registerTools$13(server, apiClient) {
+	server.tool("amba_create_streak", "Create a streak definition for a project. Streaks track consecutive user engagement (e.g. daily logins, workout completions). Supports configurable periods, grace periods, and freeze mechanics.", {
+		project_id: z.string().describe("The project ID"),
+		name: z.string().describe("Streak name (e.g. \"Daily Login\", \"Workout Streak\")"),
+		description: z.string().optional().describe("Description of what this streak tracks"),
+		qualifying_event: z.string().describe("The event name that qualifies for the streak (e.g. \"app_open\", \"workout_completed\")"),
+		period: z.enum(["daily", "weekly"]).optional().describe("Streak period. Defaults to \"daily\"."),
+		grace_period_hours: z.number().optional().describe("Hours of grace before a streak breaks (default 0)"),
+		freeze_enabled: z.boolean().optional().describe("Whether users can freeze their streak to prevent breaking it"),
+		max_freezes: z.number().optional().describe("Maximum number of streak freezes (shields) a user can hold concurrently"),
+		freezes_per_n_events: z.number().nullable().optional().describe("Auto-grant rule: every N consecutive qualifying events grants 1 freeze (shield), capped at max_freezes. Pass null or omit to disable auto-grant.")
+	}, async ({ project_id, name, description, qualifying_event, period, grace_period_hours, freeze_enabled, max_freezes, freezes_per_n_events }) => {
+		const payload = {
+			name,
+			qualifying_event
+		};
+		if (description !== void 0) payload.description = description;
+		if (period !== void 0) payload.period = period;
+		if (grace_period_hours !== void 0) payload.grace_period_hours = grace_period_hours;
+		if (freeze_enabled !== void 0) payload.freeze_enabled = freeze_enabled;
+		if (max_freezes !== void 0) payload.max_freezes = max_freezes;
+		if (freezes_per_n_events !== void 0) payload.freezes_per_n_events = freezes_per_n_events;
+		const result = await apiClient.post(`/projects/${project_id}/streaks`, payload);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_streaks_list", "List all streak definitions for a project, ordered by name.", { project_id: z.string().describe("The project ID") }, async ({ project_id }) => {
+		const result = await apiClient.get(`/projects/${project_id}/streaks`);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_streaks_update", "Update a streak definition. Only the supplied fields are changed; omitted fields are left untouched.", {
+		project_id: z.string().describe("The project ID"),
+		streak_id: z.string().describe("The streak definition ID"),
+		name: z.string().optional().describe("New streak name"),
+		description: z.string().optional().describe("New description"),
+		qualifying_event: z.string().optional().describe("New qualifying event name"),
+		period: z.enum(["daily", "weekly"]).optional().describe("New streak period"),
+		grace_period_hours: z.number().optional().describe("New grace period in hours"),
+		freeze_enabled: z.boolean().optional().describe("Toggle freeze support"),
+		max_freezes: z.number().optional().describe("New shield cap"),
+		freezes_per_n_events: z.number().nullable().optional().describe("Auto-grant rule. Pass null to disable; pass a positive integer to grant 1 shield every N qualifying events (capped at max_freezes).")
+	}, async ({ project_id, streak_id, name, description, qualifying_event, period, grace_period_hours, freeze_enabled, max_freezes, freezes_per_n_events }) => {
+		const payload = {};
+		if (name !== void 0) payload.name = name;
+		if (description !== void 0) payload.description = description;
+		if (qualifying_event !== void 0) payload.qualifying_event = qualifying_event;
+		if (period !== void 0) payload.period = period;
+		if (grace_period_hours !== void 0) payload.grace_period_hours = grace_period_hours;
+		if (freeze_enabled !== void 0) payload.freeze_enabled = freeze_enabled;
+		if (max_freezes !== void 0) payload.max_freezes = max_freezes;
+		if (freezes_per_n_events !== void 0) payload.freezes_per_n_events = freezes_per_n_events;
+		const result = await apiClient.patch(`/projects/${project_id}/streaks/${streak_id}`, payload);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_streaks_delete", "Delete a streak definition. Existing user_streak rows are removed by DB cascade; historical streak_events may be preserved depending on schema.", {
+		project_id: z.string().describe("The project ID"),
+		streak_id: z.string().describe("The streak definition ID")
+	}, async ({ project_id, streak_id }) => {
+		const result = await apiClient.delete(`/projects/${project_id}/streaks/${streak_id}`);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+}
+//#endregion
+//#region src/tools/integrations.ts
+const providerEnum = z.enum(INTEGRATION_PROVIDERS);
+function registerTools$12(server, apiClient) {
+	server.tool("amba_configure_integration", "Configure (create or replace) a third-party integration for a project. Supported providers: \"apns\" (Apple Push), \"fcm\" (Firebase Cloud Messaging), \"revenuecat\" (subscription management), \"superwall\" (paywall management). Each provider requires specific config fields.", {
+		project_id: z.string().describe("The project ID"),
+		provider: providerEnum.describe("Integration provider name"),
+		config: z.record(z.unknown()).describe("Provider-specific configuration. For APNs: { key_id, team_id, bundle_id, key_p8 }. For FCM: { service_account_json }. For RevenueCat: { api_key, webhook_secret }. For Superwall: { api_key }.")
+	}, async ({ project_id, provider, config }) => {
+		const result = await apiClient.post(`/projects/${project_id}/integrations`, {
+			provider,
+			config
+		});
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_test_integration", "Test an existing integration to verify it is configured correctly and can connect to the third-party service. For APNs/FCM this calls the provider with a deliberately-invalid token to prove the credentials themselves are valid.", {
+		project_id: z.string().describe("The project ID"),
+		provider: providerEnum.describe("Integration provider to test")
+	}, async ({ project_id, provider }) => {
+		const result = await apiClient.post(`/projects/${project_id}/integrations/${provider}/test`);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_integrations_list", "List all integrations configured for a project. Returns provider, is_active, and timestamps. Secrets are not returned.", { project_id: z.string().describe("The project ID") }, async ({ project_id }) => {
+		const result = await apiClient.get(`/projects/${project_id}/integrations`);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_integrations_set", "Create or replace an integration (upsert by project+provider). This is an alias for `amba_configure_integration` that matches the audit naming scheme.", {
+		project_id: z.string().describe("The project ID"),
+		provider: providerEnum.describe("Integration provider name"),
+		config: z.record(z.unknown()).describe("Provider-specific configuration (see amba_configure_integration)")
+	}, async ({ project_id, provider, config }) => {
+		const result = await apiClient.post(`/projects/${project_id}/integrations`, {
+			provider,
+			config
+		});
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_integrations_patch", "Patch an existing integration — update its config and/or toggle is_active. Omitted fields are left unchanged.", {
+		project_id: z.string().describe("The project ID"),
+		provider: providerEnum.describe("Integration provider name"),
+		config: z.record(z.unknown()).optional().describe("Replacement provider-specific configuration"),
+		is_active: z.boolean().optional().describe("Toggle whether the integration is active")
+	}, async ({ project_id, provider, config, is_active }) => {
+		const payload = {};
+		if (config !== void 0) payload.config = config;
+		if (is_active !== void 0) payload.is_active = is_active;
+		const result = await apiClient.patch(`/projects/${project_id}/integrations/${provider}`, payload);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+}
+//#endregion
+//#region src/tools/analytics.ts
+function registerTools$11(server, apiClient) {
+	server.tool("amba_get_analytics", "Get analytics overview for a project. Returns DAU, MAU, new users, retention (D1/D7), total events, active streaks, push stats, and premium/free user counts for the specified period.", {
+		project_id: z.string().describe("The project ID"),
+		period: z.enum([
+			"24h",
+			"7d",
+			"30d",
+			"90d"
+		]).optional().describe("Time period for analytics. Defaults to \"7d\".")
+	}, async ({ project_id, period }) => {
+		const query = {};
+		if (period !== void 0) query.period = period;
+		const result = await apiClient.get(`/projects/${project_id}/analytics`, query);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+}
+//#endregion
+//#region src/tools/users.ts
+function registerTools$10(server, apiClient) {
+	server.tool("amba_list_users", "List app users for a project. Supports pagination with offset and limit, plus optional search (matches email / external_id / display_name with ILIKE) and segment filter. Returns user profiles including external_id, email, display_name, properties, and activity timestamps.", {
+		project_id: z.string().describe("The project ID"),
+		limit: z.number().optional().describe("Maximum number of users to return (default 50)"),
+		offset: z.number().optional().describe("Number of users to skip for pagination (default 0)"),
+		segment_id: z.string().optional().describe("Filter users by segment ID"),
+		search: z.string().optional().describe("Free-text search across email, external_id, and display_name (case-insensitive)")
+	}, async ({ project_id, limit, offset, segment_id, search }) => {
+		const query = {};
+		if (limit !== void 0) query.limit = String(limit);
+		if (offset !== void 0) query.offset = String(offset);
+		if (segment_id !== void 0) query.segment_id = segment_id;
+		if (search !== void 0) query.search = search;
+		const result = await apiClient.get(`/projects/${project_id}/users`, query);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_users_get", "Get a single app user by id, with their streaks and entitlements joined in.", {
+		project_id: z.string().describe("The project ID"),
+		user_id: z.string().describe("The app user ID")
+	}, async ({ project_id, user_id }) => {
+		const result = await apiClient.get(`/projects/${project_id}/users/${user_id}`);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_users_list_events", "List a single user's engagement events, newest first. Useful for debugging tracking issues or building a user timeline.", {
+		project_id: z.string().describe("The project ID"),
+		user_id: z.string().describe("The app user ID"),
+		limit: z.number().optional().describe("Max results to return (default 50)"),
+		offset: z.number().optional().describe("Offset for pagination (default 0)")
+	}, async ({ project_id, user_id, limit, offset }) => {
+		const query = {};
+		if (limit !== void 0) query.limit = String(limit);
+		if (offset !== void 0) query.offset = String(offset);
+		const result = await apiClient.get(`/projects/${project_id}/users/${user_id}/events`, query);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_users_export", "Export all app users for a project as CSV (default) or NDJSON. Streams via DB cursor on the API side. The MCP tool reads back at most ~1 MiB of body — for very large tenants prefer `format: \"ndjson\"` (parsable line-by-line) and use a `since` filter to scope the export. The returned `truncated` flag is true if the body was clipped to fit the MCP context budget.", {
+		project_id: z.string().describe("The project ID"),
+		format: z.enum(["csv", "ndjson"]).optional().describe("Response format. Default csv. Recommend ndjson for parsability."),
+		since: z.string().optional().describe("ISO-8601 lower bound on `created_at`. Useful for incremental exports.")
+	}, async ({ project_id, format, since }) => {
+		const query = {};
+		if (format !== void 0) query.format = format;
+		if (since !== void 0) query.since = since;
+		const { body, truncated, contentType } = await apiClient.getRaw(`/projects/${project_id}/users/export`, query);
+		return { content: [{
+			type: "text",
+			text: `# format=${format ?? "csv"} truncated=${truncated} content-type=${contentType ?? "unknown"}\n` + body
+		}] };
+	});
+	server.tool("amba_users_events_export", "Export one user's engagement events as CSV (default) or NDJSON. Streams via DB cursor on the API side. Filters: `since`, `until`, `event_name`. The MCP tool reads back at most ~1 MiB; the returned `truncated` flag indicates whether the body was clipped.", {
+		project_id: z.string().describe("The project ID"),
+		user_id: z.string().describe("The app user ID"),
+		format: z.enum(["csv", "ndjson"]).optional().describe("Response format. Default csv. Recommend ndjson for parsability."),
+		since: z.string().optional().describe("ISO-8601 lower bound on `occurred_at`."),
+		until: z.string().optional().describe("ISO-8601 upper bound on `occurred_at`."),
+		event_name: z.string().optional().describe("Filter to a specific event_name.")
+	}, async ({ project_id, user_id, format, since, until, event_name }) => {
+		const query = {};
+		if (format !== void 0) query.format = format;
+		if (since !== void 0) query.since = since;
+		if (until !== void 0) query.until = until;
+		if (event_name !== void 0) query.event_name = event_name;
+		const { body, truncated, contentType } = await apiClient.getRaw(`/projects/${project_id}/users/${user_id}/events/export`, query);
+		return { content: [{
+			type: "text",
+			text: `# format=${format ?? "csv"} truncated=${truncated} content-type=${contentType ?? "unknown"}\n` + body
+		}] };
+	});
+	server.tool("amba_users_bulk_update", "Apply property merges and/or segment add/remove to up to 1000 users in a single transactional call. Property updates use jsonb concat (top-level merge). Returns `{updated, failed}` where `failed` lists user_ids that did not exist in the project. At least one of `properties`, `add_segment_ids`, or `remove_segment_ids` must be set.", {
+		project_id: z.string().describe("The project ID"),
+		user_ids: z.array(z.string()).min(1).max(1e3).describe("Array of app_user UUIDs (1-1000). Larger batches return BATCH_TOO_LARGE."),
+		updates: z.object({
+			properties: z.record(z.unknown()).optional().describe("Top-level keys merged into each user's jsonb properties."),
+			add_segment_ids: z.array(z.string()).optional().describe("Segment UUIDs to add membership for (idempotent)."),
+			remove_segment_ids: z.array(z.string()).optional().describe("Segment UUIDs to remove membership from.")
+		}).describe("Update payload. At least one field must be present.")
+	}, async ({ project_id, user_ids, updates }) => {
+		const result = await apiClient.post(`/projects/${project_id}/users/bulk-update`, {
+			user_ids,
+			updates
+		});
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_sessions_analytics", "Get session analytics (DAU, active users, total sessions, average and median session duration) for a project across a rolling window.", {
+		project_id: z.string().describe("The project ID"),
+		period: z.enum([
+			"24h",
+			"7d",
+			"30d",
+			"90d"
+		]).optional().describe("Rolling window for the analytics. Defaults to 7d.")
+	}, async ({ project_id, period }) => {
+		const query = {};
+		if (period) query.period = period;
+		const result = await apiClient.get(`/projects/${project_id}/sessions`, query);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_sessions_list", "List recent app sessions for a project, newest first. Supports pagination.", {
+		project_id: z.string().describe("The project ID"),
+		limit: z.number().optional().describe("Max results to return (default 50)"),
+		offset: z.number().optional().describe("Offset for pagination (default 0)")
+	}, async ({ project_id, limit, offset }) => {
+		const query = {};
+		if (limit !== void 0) query.limit = String(limit);
+		if (offset !== void 0) query.offset = String(offset);
+		const result = await apiClient.get(`/projects/${project_id}/sessions/list`, query);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+}
+//#endregion
+//#region src/tools/setup.ts
+const SDK_SNIPPETS = {
+	ios: `// Swift — AppDelegate.swift or App init
+import Amba
+
+@main
+struct MyApp: App {
+    init() {
+        Amba.configure(apiKey: "YOUR_CLIENT_API_KEY")
+    }
+
+    var body: some Scene {
+        WindowGroup {
+            ContentView()
+        }
+    }
+}
+
+// Identify the user after login
+Amba.identify(userId: "user_123", properties: [
+    "email": "user@example.com",
+    "plan": "premium"
+])
+
+// Track events
+Amba.track("workout_completed", properties: [
+    "duration_minutes": 30,
+    "type": "strength"
+])
+
+// Register for push notifications
+Amba.Push.requestPermission()
+
+// In AppDelegate:
+func application(_ application: UIApplication,
+                 didRegisterForRemoteNotificationsWithDeviceToken deviceToken: Data) {
+    Amba.Push.registerToken(deviceToken)
+}
+
+// Get remote config
+let dailyLimit = Amba.Config.get("daily_limit", default: 10)
+
+// Get current streak
+let streak = try await Amba.Streaks.get("daily_login")
+print("Current streak: \\(streak.currentCount)")`,
+	android: `// Kotlin — Application class
+import dev.amba.sdk.Amba
+
+class MyApp : Application() {
+    override fun onCreate() {
+        super.onCreate()
+        Amba.configure(this, apiKey = "YOUR_CLIENT_API_KEY")
+    }
+}
+
+// Identify the user after login
+Amba.identify("user_123", mapOf(
+    "email" to "user@example.com",
+    "plan" to "premium"
+))
+
+// Track events
+Amba.track("workout_completed", mapOf(
+    "duration_minutes" to 30,
+    "type" to "strength"
+))
+
+// Register for push notifications
+Amba.Push.requestPermission(activity)
+
+// Get remote config
+val dailyLimit = Amba.Config.get("daily_limit", default = 10)
+
+// Get current streak
+val streak = Amba.Streaks.get("daily_login")
+println("Current streak: \${streak.currentCount}")`,
+	"react-native": `// Bare React Native — App.tsx
+// For Expo apps, use @layers/amba-expo instead.
+import { Amba } from '@layers/amba-react-native';
+
+// Configure once at app startup
+await Amba.configure({
+  projectId: 'YOUR_PROJECT_ID',
+  apiKey: 'YOUR_CLIENT_API_KEY',
+});
+
+// Track events
+await Amba.events.track('workout_completed', {
+  duration_minutes: 30,
+  type: 'strength',
+});
+
+// Register a push token (obtained from your native push library, e.g. @react-native-firebase/messaging)
+await Amba.push.register(deviceToken, 'ios');
+
+// Read remote config
+const config = await Amba.config.fetch();
+
+// Email sign-in
+await Amba.auth.signInWithEmail('user@example.com', 'hunter2');`,
+	expo: `// Expo — app/_layout.tsx
+import { useEffect } from 'react';
+import { Slot } from 'expo-router';
+import { Amba } from '@layers/amba-expo';
+
+export default function RootLayout() {
+  useEffect(() => {
+    Amba.configure({
+      projectId: process.env.EXPO_PUBLIC_AMBA_PROJECT_ID!,
+      apiKey: 'YOUR_CLIENT_API_KEY',
+    });
+  }, []);
+
+  return <Slot />;
+}
+
+// In any component — no hook required, Amba is a singleton
+import { Amba } from '@layers/amba-expo';
+
+function HomeScreen() {
+  const onComplete = async () => {
+    await Amba.events.track('workout_completed', { type: 'strength' });
+  };
+
+  const onSignInApple = async () => {
+    await Amba.signInWithApple();
+  };
+
+  return (
+    <View>
+      <Button title="Complete Workout" onPress={onComplete} />
+      <Button title="Sign in with Apple" onPress={onSignInApple} />
+    </View>
+  );
+}
+
+// Push + deep links — add to app.json:
+// {
+//   "expo": {
+//     "plugins": [
+//       ["@layers/amba-expo", { "ios": { "pushNotifications": true } }]
+//     ]
+//   }
+// }`,
+	flutter: `// Flutter — main.dart
+import 'package:amba_flutter/amba_flutter.dart';
+
+void main() async {
+  WidgetsFlutterBinding.ensureInitialized();
+  await Amba.configure(apiKey: 'YOUR_CLIENT_API_KEY');
+  runApp(const MyApp());
+}
+
+// Identify the user after login
+await Amba.identify('user_123', properties: {
+  'email': 'user@example.com',
+  'plan': 'premium',
+});
+
+// Track events
+await Amba.track('workout_completed', properties: {
+  'duration_minutes': 30,
+  'type': 'strength',
+});
+
+// Request push permission
+await Amba.push.requestPermission();
+
+// Get remote config
+final dailyLimit = await Amba.config.get<int>('daily_limit', defaultValue: 10);
+
+// Get current streak
+final streak = await Amba.streaks.get('daily_login');
+print('Current streak: \${streak.currentCount}');`
+};
+function registerTools$9(server, _apiClient) {
+	server.tool("amba_get_sdk_setup_instructions", "Get platform-specific code snippets and setup instructions for integrating the Amba client SDK into a mobile app. Supports iOS (Swift), Android (Kotlin), React Native, Expo, and Flutter.", { platform: z.enum([
+		"ios",
+		"android",
+		"react-native",
+		"expo",
+		"flutter"
+	]).describe("The target platform for SDK integration instructions") }, async ({ platform }) => {
+		const snippet = SDK_SNIPPETS[platform];
+		if (!snippet) return { content: [{
+			type: "text",
+			text: `No setup instructions available for platform "${platform}". Supported platforms: ios, android, react-native, expo, flutter.`
+		}] };
+		return { content: [{
+			type: "text",
+			text: [
+				`# Amba SDK Setup — ${platform}`,
+				"",
+				"## Installation",
+				"",
+				...platform === "ios" ? [
+					"```",
+					"// Swift Package Manager",
+					"// Add: https://github.com/amba-dev/amba-ios.git",
+					"```"
+				] : platform === "android" ? [
+					"```gradle",
+					"implementation(\"dev.amba:amba-android:latest\")",
+					"```"
+				] : platform === "react-native" ? [
+					"```bash",
+					"npm install @layers/amba-react-native",
+					"```"
+				] : platform === "expo" ? [
+					"```bash",
+					"npx expo install @layers/amba-expo",
+					"```"
+				] : [
+					"```yaml",
+					"# pubspec.yaml",
+					"dependencies:",
+					"  amba_flutter: ^latest",
+					"```"
+				],
+				"",
+				"## Integration Code",
+				"",
+				"```" + (platform === "ios" ? "swift" : platform === "android" ? "kotlin" : platform === "flutter" ? "dart" : "typescript"),
+				snippet,
+				"```",
+				"",
+				"## Next Steps",
+				"",
+				"1. Replace YOUR_CLIENT_API_KEY with your project's client API key (find it with amba_get_project)",
+				"2. Configure push notification integration (APNs for iOS, FCM for Android) using amba_configure_integration",
+				"3. Create segments to target user groups with amba_create_segment",
+				"4. Set up remote config values with amba_set_config",
+				"5. Create streaks to track user engagement with amba_create_streak"
+			].join("\n")
+		}] };
+	});
+}
+//#endregion
+//#region src/tools/achievements.ts
+const criteriaSchema = z.object({
+	type: z.enum([
+		"event_count",
+		"streak_length",
+		"xp_threshold",
+		"property_value"
+	]).describe("Type of criteria: event_count (track X N times), streak_length (N-day streak), xp_threshold (reach N XP), property_value (user property equals N)"),
+	event_name: z.string().optional().describe("Event name (required for event_count type)"),
+	streak_definition_id: z.string().optional().describe("Streak definition ID (required for streak_length type)"),
+	property_key: z.string().optional().describe("User property key (required for property_value type)"),
+	target_value: z.number().describe("Target value to unlock the achievement")
+});
+function registerTools$8(server, apiClient) {
+	server.tool("amba_create_achievement", "Create an achievement/badge definition. Achievements unlock automatically when users meet the criteria (e.g. track 5 workouts, reach a 7-day streak, earn 5000 XP). Can optionally award bonus XP on unlock.", {
+		project_id: z.string().describe("The project ID"),
+		key: z.string().describe("Unique key for this achievement (e.g. \"first_workout\", \"streak_master_7\")"),
+		name: z.string().describe("Display name (e.g. \"First Workout\", \"Streak Master\")"),
+		description: z.string().optional().describe("Description shown to users"),
+		icon_url: z.string().optional().describe("URL to the achievement badge/icon image"),
+		xp_reward: z.number().optional().describe("Bonus XP to award when the achievement is unlocked (default 0)"),
+		criteria: criteriaSchema.describe("Unlock criteria for the achievement"),
+		is_hidden: z.boolean().optional().describe("Whether this achievement is hidden until unlocked (default false)"),
+		sort_order: z.number().optional().describe("Display order (lower numbers appear first)")
+	}, async ({ project_id, key, name, description, icon_url, xp_reward, criteria, is_hidden, sort_order }) => {
+		const payload = {
+			key,
+			name,
+			criteria
+		};
+		if (description !== void 0) payload.description = description;
+		if (icon_url !== void 0) payload.icon_url = icon_url;
+		if (xp_reward !== void 0) payload.xp_reward = xp_reward;
+		if (is_hidden !== void 0) payload.is_hidden = is_hidden;
+		if (sort_order !== void 0) payload.sort_order = sort_order;
+		const result = await apiClient.post(`/projects/${project_id}/achievements`, payload);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_list_achievements", "List all achievement definitions for a project, including criteria and XP rewards.", { project_id: z.string().describe("The project ID") }, async ({ project_id }) => {
+		const result = await apiClient.get(`/projects/${project_id}/achievements`);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_get_achievement", "Fetch a single achievement definition by ID, including criteria and XP reward.", {
+		project_id: z.string().describe("The project ID"),
+		achievement_id: z.string().describe("The achievement ID")
+	}, async ({ project_id, achievement_id }) => {
+		const result = await apiClient.get(`/projects/${project_id}/achievements/${achievement_id}`);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_update_achievement", "Partially update an achievement definition. Only supply the fields you want to change.", {
+		project_id: z.string().describe("The project ID"),
+		achievement_id: z.string().describe("The achievement ID"),
+		name: z.string().optional().describe("Display name"),
+		description: z.string().optional().describe("Description shown to users"),
+		icon_url: z.string().optional().describe("URL to the achievement badge/icon image"),
+		xp_reward: z.number().optional().describe("Bonus XP awarded on unlock"),
+		criteria: criteriaSchema.optional().describe("New unlock criteria"),
+		is_hidden: z.boolean().optional().describe("Whether the achievement is hidden until unlocked"),
+		sort_order: z.number().optional().describe("Display order")
+	}, async ({ project_id, achievement_id, name, description, icon_url, xp_reward, criteria, is_hidden, sort_order }) => {
+		const payload = {};
+		if (name !== void 0) payload.name = name;
+		if (description !== void 0) payload.description = description;
+		if (icon_url !== void 0) payload.icon_url = icon_url;
+		if (xp_reward !== void 0) payload.xp_reward = xp_reward;
+		if (criteria !== void 0) payload.criteria = criteria;
+		if (is_hidden !== void 0) payload.is_hidden = is_hidden;
+		if (sort_order !== void 0) payload.sort_order = sort_order;
+		const result = await apiClient.patch(`/projects/${project_id}/achievements/${achievement_id}`, payload);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_delete_achievement", "Delete an achievement definition. Existing user unlocks are not removed; the row is hard-deleted from `achievements`.", {
+		project_id: z.string().describe("The project ID"),
+		achievement_id: z.string().describe("The achievement ID")
+	}, async ({ project_id, achievement_id }) => {
+		const result = await apiClient.delete(`/projects/${project_id}/achievements/${achievement_id}`);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+}
+//#endregion
+//#region src/tools/challenges.ts
+function registerTools$7(server, apiClient) {
+	server.tool("amba_create_challenge", "Create a time-limited challenge. Challenges are events that run between start_at and end_at, where users try to reach a goal (e.g. track 10 workouts this week, earn 500 XP in 3 days). Can reward XP and/or unlock an achievement on completion.", {
+		project_id: z.string().describe("The project ID"),
+		name: z.string().describe("Challenge name (e.g. \"7-Day Fitness Sprint\", \"XP Weekend Blitz\")"),
+		description: z.string().optional().describe("Description shown to users"),
+		start_at: z.string().describe("ISO 8601 timestamp when the challenge starts"),
+		end_at: z.string().describe("ISO 8601 timestamp when the challenge ends"),
+		goal_type: z.enum([
+			"event_count",
+			"xp_earned",
+			"streak_maintained"
+		]).describe("Type of goal: event_count (track N events), xp_earned (earn N XP), streak_maintained (keep streak for N days)"),
+		goal_value: z.number().describe("Target value for the goal"),
+		reward_xp: z.number().optional().describe("XP to award on challenge completion (default 0)"),
+		reward_achievement_id: z.string().optional().describe("Achievement to unlock on challenge completion")
+	}, async ({ project_id, name, description, start_at, end_at, goal_type, goal_value, reward_xp, reward_achievement_id }) => {
+		const payload = {
+			name,
+			start_at,
+			end_at,
+			goal_type,
+			goal_value
+		};
+		if (description !== void 0) payload.description = description;
+		if (reward_xp !== void 0) payload.reward_xp = reward_xp;
+		if (reward_achievement_id !== void 0) payload.reward_achievement_id = reward_achievement_id;
+		const result = await apiClient.post(`/projects/${project_id}/challenges`, payload);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_list_challenges", "List challenge definitions for a project. Optionally filter by status (active, upcoming, ended).", {
+		project_id: z.string().describe("The project ID"),
+		status: z.enum([
+			"active",
+			"upcoming",
+			"ended"
+		]).optional().describe("Filter by challenge status")
+	}, async ({ project_id, status }) => {
+		const query = {};
+		if (status !== void 0) query.status = status;
+		const result = await apiClient.get(`/projects/${project_id}/challenges`, query);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_get_challenge", "Fetch a single challenge by ID, including timing, goal, and reward configuration.", {
+		project_id: z.string().describe("The project ID"),
+		challenge_id: z.string().describe("The challenge ID")
+	}, async ({ project_id, challenge_id }) => {
+		const result = await apiClient.get(`/projects/${project_id}/challenges/${challenge_id}`);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_update_challenge", "Partially update a challenge definition. Only the supplied fields are touched.", {
+		project_id: z.string().describe("The project ID"),
+		challenge_id: z.string().describe("The challenge ID"),
+		name: z.string().optional().describe("Challenge name"),
+		description: z.string().optional().describe("Description shown to users"),
+		start_at: z.string().optional().describe("ISO 8601 start timestamp"),
+		end_at: z.string().optional().describe("ISO 8601 end timestamp"),
+		goal_value: z.number().optional().describe("Target value for the goal"),
+		reward_xp: z.number().optional().describe("XP awarded on completion"),
+		reward_achievement_id: z.string().optional().describe("Achievement to unlock on completion")
+	}, async ({ project_id, challenge_id, name, description, start_at, end_at, goal_value, reward_xp, reward_achievement_id }) => {
+		const payload = {};
+		if (name !== void 0) payload.name = name;
+		if (description !== void 0) payload.description = description;
+		if (start_at !== void 0) payload.start_at = start_at;
+		if (end_at !== void 0) payload.end_at = end_at;
+		if (goal_value !== void 0) payload.goal_value = goal_value;
+		if (reward_xp !== void 0) payload.reward_xp = reward_xp;
+		if (reward_achievement_id !== void 0) payload.reward_achievement_id = reward_achievement_id;
+		const result = await apiClient.patch(`/projects/${project_id}/challenges/${challenge_id}`, payload);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_delete_challenge", "Delete a challenge definition. Hard delete — the row is removed; existing participant rows are cleaned up.", {
+		project_id: z.string().describe("The project ID"),
+		challenge_id: z.string().describe("The challenge ID")
+	}, async ({ project_id, challenge_id }) => {
+		const result = await apiClient.delete(`/projects/${project_id}/challenges/${challenge_id}`);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_list_challenge_participants", "List participants of a challenge with their progress toward the goal. Useful for inspecting who is participating and how close they are.", {
+		project_id: z.string().describe("The project ID"),
+		challenge_id: z.string().describe("The challenge ID"),
+		limit: z.number().optional().describe("Max number of participants to return."),
+		offset: z.number().optional().describe("Offset for pagination.")
+	}, async ({ project_id, challenge_id, limit, offset }) => {
+		const query = {};
+		if (limit !== void 0) query.limit = String(limit);
+		if (offset !== void 0) query.offset = String(offset);
+		const result = await apiClient.get(`/projects/${project_id}/challenges/${challenge_id}/participants`, query);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+}
+//#endregion
+//#region src/tools/economy.ts
+function registerTools$6(server, apiClient) {
+	server.tool("amba_create_currency", "Create a virtual currency for a project. Currencies can be soft (earned through gameplay) or premium (purchased with real money). Supports auto-recharge for time-gated mechanics like hearts/energy.", {
+		project_id: z.string().describe("The project ID"),
+		code: z.string().describe("Unique currency code (e.g. \"gold\", \"gems\", \"hearts\")"),
+		name: z.string().describe("Display name (e.g. \"Gold Coins\", \"Gems\", \"Hearts\")"),
+		description: z.string().optional().describe("Description of the currency"),
+		is_premium: z.boolean().optional().describe("Whether this is a premium/hard currency (purchased with real money). Defaults to false."),
+		initial_balance: z.number().optional().describe("Starting balance for new users. Defaults to 0."),
+		max_balance: z.number().optional().describe("Maximum balance cap (null for unlimited)"),
+		auto_recharge_amount: z.number().optional().describe("Amount to auto-recharge (e.g. 1 heart every N hours)"),
+		auto_recharge_interval_hours: z.number().optional().describe("Hours between auto-recharges")
+	}, async ({ project_id, code, name, description, is_premium, initial_balance, max_balance, auto_recharge_amount, auto_recharge_interval_hours }) => {
+		const payload = {
+			code,
+			name
+		};
+		if (description !== void 0) payload.description = description;
+		if (is_premium !== void 0) payload.is_premium = is_premium;
+		if (initial_balance !== void 0) payload.initial_balance = initial_balance;
+		if (max_balance !== void 0) payload.max_balance = max_balance;
+		if (auto_recharge_amount !== void 0) payload.auto_recharge_amount = auto_recharge_amount;
+		if (auto_recharge_interval_hours !== void 0) payload.auto_recharge_interval_hours = auto_recharge_interval_hours;
+		const result = await apiClient.post(`/projects/${project_id}/currencies`, payload);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_list_currencies", "List all virtual currency definitions for a project.", { project_id: z.string().describe("The project ID") }, async ({ project_id }) => {
+		const result = await apiClient.get(`/projects/${project_id}/currencies`);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_grant_currency", "Grant virtual currency to a specific user. Useful for rewards, promotions, or admin adjustments.", {
+		project_id: z.string().describe("The project ID"),
+		app_user_id: z.string().describe("The user to grant currency to"),
+		currency_code: z.string().describe("Currency code (e.g. \"gold\")"),
+		amount: z.number().describe("Amount to grant (positive integer)"),
+		reason: z.string().optional().describe("Reason for the grant (for audit trail)")
+	}, async ({ project_id, app_user_id, currency_code, amount, reason }) => {
+		const payload = {
+			app_user_id,
+			currency_code,
+			amount
+		};
+		if (reason !== void 0) payload.reason = reason;
+		const result = await apiClient.post(`/projects/${project_id}/currencies/grant`, payload);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_create_catalog_item", "Create a catalog item for a project. Items can be durable (owned forever), consumable (used up), or bundles (contain other items).", {
+		project_id: z.string().describe("The project ID"),
+		key: z.string().describe("Unique item key (e.g. \"premium_theme\", \"extra_life\", \"starter_pack\")"),
+		name: z.string().describe("Display name"),
+		description: z.string().optional().describe("Item description"),
+		icon_url: z.string().optional().describe("URL to the item icon"),
+		category: z.string().optional().describe("Category for filtering (e.g. \"themes\", \"powerups\", \"packs\")"),
+		tags: z.array(z.string()).optional().describe("Tags for filtering"),
+		item_type: z.enum([
+			"durable",
+			"consumable",
+			"bundle"
+		]).optional().describe("Item type. Defaults to \"durable\"."),
+		metadata: z.record(z.unknown()).optional().describe("Additional metadata (JSONB)")
+	}, async ({ project_id, key, name, description, icon_url, category, tags, item_type, metadata }) => {
+		const payload = {
+			key,
+			name
+		};
+		if (description !== void 0) payload.description = description;
+		if (icon_url !== void 0) payload.icon_url = icon_url;
+		if (category !== void 0) payload.category = category;
+		if (tags !== void 0) payload.tags = tags;
+		if (item_type !== void 0) payload.item_type = item_type;
+		if (metadata !== void 0) payload.metadata = metadata;
+		const result = await apiClient.post(`/projects/${project_id}/catalog`, payload);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_list_catalog", "List all catalog items for a project, optionally filtered by category.", {
+		project_id: z.string().describe("The project ID"),
+		category: z.string().optional().describe("Filter by category")
+	}, async ({ project_id, category }) => {
+		const query = {};
+		if (category) query.category = category;
+		const result = await apiClient.get(`/projects/${project_id}/catalog`, query);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_set_item_price", "Set the price of a catalog item in a specific virtual currency.", {
+		project_id: z.string().describe("The project ID"),
+		catalog_item_id: z.string().describe("The catalog item ID"),
+		currency_code: z.string().describe("Currency code (e.g. \"gold\", \"gems\")"),
+		price: z.number().describe("Price in the specified currency")
+	}, async ({ project_id, catalog_item_id, currency_code, price }) => {
+		const result = await apiClient.post(`/projects/${project_id}/catalog/${catalog_item_id}/prices`, {
+			currency_code,
+			price
+		});
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_create_store", "Create a store for a project. Stores are curated subsets of the catalog, optionally targeted at specific user segments.", {
+		project_id: z.string().describe("The project ID"),
+		name: z.string().describe("Store name (e.g. \"Main Shop\", \"Premium Store\", \"Daily Deals\")"),
+		description: z.string().optional().describe("Store description"),
+		segment_id: z.string().optional().describe("Target segment ID (only users in this segment see the store)")
+	}, async ({ project_id, name, description, segment_id }) => {
+		const payload = { name };
+		if (description !== void 0) payload.description = description;
+		if (segment_id !== void 0) payload.segment_id = segment_id;
+		const result = await apiClient.post(`/projects/${project_id}/stores`, payload);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_add_store_listing", "Add a catalog item to a store with optional price overrides, scheduling, and purchase limits.", {
+		project_id: z.string().describe("The project ID"),
+		store_id: z.string().describe("The store ID"),
+		catalog_item_id: z.string().describe("The catalog item ID to list"),
+		override_prices: z.record(z.number()).optional().describe("Price overrides by currency code (e.g. {\"gold\": 50, \"gems\": 5})"),
+		sort_order: z.number().optional().describe("Sort order in the store (lower = first)"),
+		available_from: z.string().optional().describe("ISO 8601 timestamp when the listing becomes available"),
+		available_until: z.string().optional().describe("ISO 8601 timestamp when the listing expires"),
+		max_purchases_per_user: z.number().optional().describe("Maximum number of times each user can purchase this listing")
+	}, async ({ project_id, store_id, catalog_item_id, override_prices, sort_order, available_from, available_until, max_purchases_per_user }) => {
+		const payload = { catalog_item_id };
+		if (override_prices !== void 0) payload.override_prices = override_prices;
+		if (sort_order !== void 0) payload.sort_order = sort_order;
+		if (available_from !== void 0) payload.available_from = available_from;
+		if (available_until !== void 0) payload.available_until = available_until;
+		if (max_purchases_per_user !== void 0) payload.max_purchases_per_user = max_purchases_per_user;
+		const result = await apiClient.post(`/projects/${project_id}/stores/${store_id}/listings`, payload);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_grant_item", "Grant a catalog item directly to a user's inventory. Bypasses the purchase flow.", {
+		project_id: z.string().describe("The project ID"),
+		app_user_id: z.string().describe("The user to grant the item to"),
+		catalog_item_id: z.string().describe("The catalog item ID to grant"),
+		quantity: z.number().optional().describe("Quantity to grant (default 1)")
+	}, async ({ project_id, app_user_id, catalog_item_id, quantity }) => {
+		const payload = {
+			app_user_id,
+			catalog_item_id
+		};
+		if (quantity !== void 0) payload.quantity = quantity;
+		const result = await apiClient.post(`/projects/${project_id}/inventory/grant`, payload);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_get_user_inventory", "View a user's inventory including all owned items and quantities.", {
+		project_id: z.string().describe("The project ID"),
+		app_user_id: z.string().describe("The user ID to look up")
+	}, async ({ project_id, app_user_id }) => {
+		const result = await apiClient.get(`/projects/${project_id}/inventory/${app_user_id}`);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_create_referral_program", "Create a referral/promo code with configurable rewards for both referrer and referee. Rewards are granted as virtual currency.", {
+		project_id: z.string().describe("The project ID"),
+		code: z.string().optional().describe("Custom code (auto-generated if not provided)"),
+		reward_referrer: z.record(z.unknown()).optional().describe("Rewards for the referrer (e.g. {\"gold\": 100, \"gems\": 5})"),
+		reward_referee: z.record(z.unknown()).optional().describe("Rewards for the referee (e.g. {\"gold\": 50})"),
+		max_uses: z.number().optional().describe("Maximum number of times this code can be used")
+	}, async ({ project_id, code, reward_referrer, reward_referee, max_uses }) => {
+		const payload = {};
+		if (code !== void 0) payload.code = code;
+		if (reward_referrer !== void 0) payload.reward_referrer = reward_referrer;
+		if (reward_referee !== void 0) payload.reward_referee = reward_referee;
+		if (max_uses !== void 0) payload.max_uses = max_uses;
+		const result = await apiClient.post(`/projects/${project_id}/referrals`, payload);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_get_referral_stats", "Get stats for a specific referral code including total claims and claim history.", {
+		project_id: z.string().describe("The project ID"),
+		referral_code_id: z.string().describe("The referral code ID")
+	}, async ({ project_id, referral_code_id }) => {
+		const result = await apiClient.get(`/projects/${project_id}/referrals/${referral_code_id}/stats`);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_referrals_list", "List all referral/promo codes for a project, newest first.", { project_id: z.string().describe("The project ID") }, async ({ project_id }) => {
+		const result = await apiClient.get(`/projects/${project_id}/referrals`);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_referrals_patch", "Update a referral code. Only the supplied fields are changed; omitted fields are left untouched.", {
+		project_id: z.string().describe("The project ID"),
+		referral_code_id: z.string().describe("The referral code ID"),
+		reward_referrer: z.record(z.unknown()).optional().describe("New rewards for the referrer"),
+		reward_referee: z.record(z.unknown()).optional().describe("New rewards for the referee"),
+		max_uses: z.number().optional().describe("New max usage cap"),
+		is_active: z.boolean().optional().describe("Toggle whether the code is active")
+	}, async ({ project_id, referral_code_id, reward_referrer, reward_referee, max_uses, is_active }) => {
+		const payload = {};
+		if (reward_referrer !== void 0) payload.reward_referrer = reward_referrer;
+		if (reward_referee !== void 0) payload.reward_referee = reward_referee;
+		if (max_uses !== void 0) payload.max_uses = max_uses;
+		if (is_active !== void 0) payload.is_active = is_active;
+		const result = await apiClient.patch(`/projects/${project_id}/referrals/${referral_code_id}`, payload);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_referrals_delete", "Delete a referral code. Existing claim rows are preserved; the code can no longer be redeemed.", {
+		project_id: z.string().describe("The project ID"),
+		referral_code_id: z.string().describe("The referral code ID")
+	}, async ({ project_id, referral_code_id }) => {
+		const result = await apiClient.delete(`/projects/${project_id}/referrals/${referral_code_id}`);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_stores_list", "List all stores for a project, ordered by name.", { project_id: z.string().describe("The project ID") }, async ({ project_id }) => {
+		const result = await apiClient.get(`/projects/${project_id}/stores`);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_stores_patch", "Update a store. Only the supplied fields are changed.", {
+		project_id: z.string().describe("The project ID"),
+		store_id: z.string().describe("The store ID"),
+		name: z.string().optional().describe("New store name"),
+		description: z.string().optional().describe("New store description"),
+		is_active: z.boolean().optional().describe("Toggle store visibility"),
+		segment_id: z.string().optional().describe("Target segment ID (only users in this segment see the store)")
+	}, async ({ project_id, store_id, name, description, is_active, segment_id }) => {
+		const payload = {};
+		if (name !== void 0) payload.name = name;
+		if (description !== void 0) payload.description = description;
+		if (is_active !== void 0) payload.is_active = is_active;
+		if (segment_id !== void 0) payload.segment_id = segment_id;
+		const result = await apiClient.patch(`/projects/${project_id}/stores/${store_id}`, payload);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_stores_delete", "Delete a store. Its listings are deleted as well; historical purchases are preserved.", {
+		project_id: z.string().describe("The project ID"),
+		store_id: z.string().describe("The store ID")
+	}, async ({ project_id, store_id }) => {
+		const result = await apiClient.delete(`/projects/${project_id}/stores/${store_id}`);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_stores_list_listings", "List all listings in a store, including the underlying catalog item details, ordered by sort_order.", {
+		project_id: z.string().describe("The project ID"),
+		store_id: z.string().describe("The store ID")
+	}, async ({ project_id, store_id }) => {
+		const result = await apiClient.get(`/projects/${project_id}/stores/${store_id}/listings`);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_stores_patch_listing", "Update a store listing (price overrides, sort order, availability window, purchase caps).", {
+		project_id: z.string().describe("The project ID"),
+		store_id: z.string().describe("The store ID"),
+		listing_id: z.string().describe("The store listing ID"),
+		override_prices: z.record(z.number()).optional().describe("Price overrides by currency code (e.g. {\"gold\": 50})"),
+		sort_order: z.number().optional().describe("New sort order"),
+		available_from: z.string().optional().describe("ISO 8601 timestamp when the listing becomes available"),
+		available_until: z.string().optional().describe("ISO 8601 timestamp when the listing expires"),
+		max_purchases_per_user: z.number().optional().describe("Maximum number of times each user can purchase this listing")
+	}, async ({ project_id, store_id, listing_id, override_prices, sort_order, available_from, available_until, max_purchases_per_user }) => {
+		const payload = {};
+		if (override_prices !== void 0) payload.override_prices = override_prices;
+		if (sort_order !== void 0) payload.sort_order = sort_order;
+		if (available_from !== void 0) payload.available_from = available_from;
+		if (available_until !== void 0) payload.available_until = available_until;
+		if (max_purchases_per_user !== void 0) payload.max_purchases_per_user = max_purchases_per_user;
+		const result = await apiClient.patch(`/projects/${project_id}/stores/${store_id}/listings/${listing_id}`, payload);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_stores_delete_listing", "Remove a listing from a store. The underlying catalog item is unaffected.", {
+		project_id: z.string().describe("The project ID"),
+		store_id: z.string().describe("The store ID"),
+		listing_id: z.string().describe("The listing ID")
+	}, async ({ project_id, store_id, listing_id }) => {
+		const result = await apiClient.delete(`/projects/${project_id}/stores/${store_id}/listings/${listing_id}`);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_get_catalog_item", "Fetch a single catalog item by ID, including its prices and any bundled content.", {
+		project_id: z.string().describe("The project ID"),
+		item_id: z.string().describe("The catalog item ID")
+	}, async ({ project_id, item_id }) => {
+		const result = await apiClient.get(`/projects/${project_id}/catalog/${item_id}`);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_update_catalog_item", "Partially update a catalog item. Only the supplied fields are touched.", {
+		project_id: z.string().describe("The project ID"),
+		item_id: z.string().describe("The catalog item ID"),
+		name: z.string().optional().describe("Display name"),
+		description: z.string().optional().describe("Item description"),
+		icon_url: z.string().optional().describe("Item icon URL"),
+		type: z.enum([
+			"consumable",
+			"durable",
+			"currency_pack",
+			"bundle"
+		]).optional().describe("Item type"),
+		metadata: z.record(z.unknown()).optional().describe("Custom metadata payload"),
+		is_active: z.boolean().optional().describe("Whether the item is active")
+	}, async ({ project_id, item_id, name, description, icon_url, type, metadata, is_active }) => {
+		const payload = {};
+		if (name !== void 0) payload.name = name;
+		if (description !== void 0) payload.description = description;
+		if (icon_url !== void 0) payload.icon_url = icon_url;
+		if (type !== void 0) payload.type = type;
+		if (metadata !== void 0) payload.metadata = metadata;
+		if (is_active !== void 0) payload.is_active = is_active;
+		const result = await apiClient.patch(`/projects/${project_id}/catalog/${item_id}`, payload);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_delete_catalog_item", "Delete a catalog item. Removes its prices and any bundle membership in the same transaction.", {
+		project_id: z.string().describe("The project ID"),
+		item_id: z.string().describe("The catalog item ID")
+	}, async ({ project_id, item_id }) => {
+		const result = await apiClient.delete(`/projects/${project_id}/catalog/${item_id}`);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_delete_catalog_price", "Remove a single currency price from a catalog item. Other prices on the item remain.", {
+		project_id: z.string().describe("The project ID"),
+		item_id: z.string().describe("The catalog item ID"),
+		currency_code: z.string().describe("The currency code (e.g. \"USD\", \"GEMS\")")
+	}, async ({ project_id, item_id, currency_code }) => {
+		const result = await apiClient.delete(`/projects/${project_id}/catalog/${item_id}/prices/${encodeURIComponent(currency_code)}`);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_add_catalog_bundle_item", "Add a content item to a catalog item's bundle. The catalog item must be of type `bundle`.", {
+		project_id: z.string().describe("The project ID"),
+		item_id: z.string().describe("The catalog item ID (must be a bundle)"),
+		content_item_id: z.string().describe("The content item ID to bundle in"),
+		quantity: z.number().optional().describe("How many of this content item the bundle grants (default 1)")
+	}, async ({ project_id, item_id, content_item_id, quantity }) => {
+		const payload = { content_item_id };
+		if (quantity !== void 0) payload.quantity = quantity;
+		const result = await apiClient.post(`/projects/${project_id}/catalog/${item_id}/bundle`, payload);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_remove_catalog_bundle_item", "Remove a content item from a catalog item's bundle.", {
+		project_id: z.string().describe("The project ID"),
+		item_id: z.string().describe("The catalog item ID (must be a bundle)"),
+		content_item_id: z.string().describe("The content item ID to remove from the bundle")
+	}, async ({ project_id, item_id, content_item_id }) => {
+		const result = await apiClient.delete(`/projects/${project_id}/catalog/${item_id}/bundle/${content_item_id}`);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_update_currency", "Partially update a virtual currency definition.", {
+		project_id: z.string().describe("The project ID"),
+		currency_id: z.string().describe("The currency ID"),
+		name: z.string().optional().describe("Display name"),
+		icon_url: z.string().optional().describe("Currency icon URL"),
+		starting_balance: z.number().optional().describe("Starting balance granted on first user encounter"),
+		max_balance: z.number().optional().describe("Maximum balance a user can hold"),
+		is_active: z.boolean().optional().describe("Whether this currency is active")
+	}, async ({ project_id, currency_id, name, icon_url, starting_balance, max_balance, is_active }) => {
+		const payload = {};
+		if (name !== void 0) payload.name = name;
+		if (icon_url !== void 0) payload.icon_url = icon_url;
+		if (starting_balance !== void 0) payload.starting_balance = starting_balance;
+		if (max_balance !== void 0) payload.max_balance = max_balance;
+		if (is_active !== void 0) payload.is_active = is_active;
+		const result = await apiClient.patch(`/projects/${project_id}/currencies/${currency_id}`, payload);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_delete_currency", "Delete a virtual currency definition. User balances and transaction history are NOT auto-cleaned — handle that explicitly if needed.", {
+		project_id: z.string().describe("The project ID"),
+		currency_id: z.string().describe("The currency ID")
+	}, async ({ project_id, currency_id }) => {
+		const result = await apiClient.delete(`/projects/${project_id}/currencies/${currency_id}`);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_get_currency_transactions", "List currency transactions for a single user, newest first. Useful for inspecting a user's grant/spend history when investigating support requests or fraud.", {
+		project_id: z.string().describe("The project ID"),
+		user_id: z.string().describe("The app user ID"),
+		currency_id: z.string().optional().describe("Filter to one currency"),
+		limit: z.number().optional().describe("Page size"),
+		offset: z.number().optional().describe("Offset for pagination")
+	}, async ({ project_id, user_id, currency_id, limit, offset }) => {
+		const query = {};
+		if (currency_id !== void 0) query.currency_id = currency_id;
+		if (limit !== void 0) query.limit = String(limit);
+		if (offset !== void 0) query.offset = String(offset);
+		const result = await apiClient.get(`/projects/${project_id}/currencies/transactions/${user_id}`, query);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+}
+//#endregion
+//#region src/tools/leaderboards.ts
+function registerTools$5(server, apiClient) {
+	server.tool("amba_create_leaderboard", "Create a leaderboard definition. Leaderboards rank users by XP, streak length, or a custom metric. Supports all-time, daily, weekly, and monthly periods with configurable max entries.", {
+		project_id: z.string().describe("The project ID"),
+		name: z.string().describe("Leaderboard name (e.g. \"Top XP Earners\", \"Weekly Streak Leaders\")"),
+		metric: z.enum([
+			"xp",
+			"streak",
+			"custom"
+		]).describe("What metric to rank by: xp (total XP), streak (longest streak), custom (custom event count)"),
+		period: z.enum([
+			"all_time",
+			"daily",
+			"weekly",
+			"monthly"
+		]).optional().describe("Time period for the leaderboard. Defaults to \"all_time\"."),
+		max_entries: z.number().optional().describe("Maximum number of entries to keep on the leaderboard (default 100)"),
+		custom_event: z.string().optional().describe("Event name to count for custom metric leaderboards")
+	}, async ({ project_id, name, metric, period, max_entries, custom_event }) => {
+		const payload = {
+			name,
+			metric
+		};
+		if (period !== void 0) payload.period = period;
+		if (max_entries !== void 0) payload.max_entries = max_entries;
+		if (custom_event !== void 0) payload.custom_event = custom_event;
+		const result = await apiClient.post(`/projects/${project_id}/leaderboards`, payload);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_get_leaderboard", "Get leaderboard entries with user display names and avatars. Returns ranked entries with scores.", {
+		project_id: z.string().describe("The project ID"),
+		leaderboard_id: z.string().describe("The leaderboard definition ID"),
+		limit: z.number().optional().describe("Number of entries to return (default 50)"),
+		offset: z.number().optional().describe("Offset for pagination (default 0)")
+	}, async ({ project_id, leaderboard_id, limit, offset }) => {
+		const query = {};
+		if (limit !== void 0) query.limit = String(limit);
+		if (offset !== void 0) query.offset = String(offset);
+		const result = await apiClient.get(`/projects/${project_id}/leaderboards/${leaderboard_id}/entries`, query);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_list_leaderboards", "List all leaderboard definitions for a project. Returns name, metric, period, and max_entries per leaderboard. (Use `amba_get_leaderboard` to fetch ranked entries for a specific leaderboard.)", { project_id: z.string().describe("The project ID") }, async ({ project_id }) => {
+		const result = await apiClient.get(`/projects/${project_id}/leaderboards`);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_get_leaderboard_definition", "Fetch a single leaderboard definition by ID — its metric, period, and configuration. (Use `amba_get_leaderboard` for ranked entries instead.)", {
+		project_id: z.string().describe("The project ID"),
+		leaderboard_id: z.string().describe("The leaderboard definition ID")
+	}, async ({ project_id, leaderboard_id }) => {
+		const result = await apiClient.get(`/projects/${project_id}/leaderboards/${leaderboard_id}`);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_update_leaderboard", "Partially update a leaderboard definition. Only the supplied fields are touched.", {
+		project_id: z.string().describe("The project ID"),
+		leaderboard_id: z.string().describe("The leaderboard definition ID"),
+		name: z.string().optional().describe("New display name"),
+		metric: z.enum([
+			"xp",
+			"streak",
+			"custom"
+		]).optional().describe("New ranking metric"),
+		period: z.enum([
+			"all_time",
+			"daily",
+			"weekly",
+			"monthly"
+		]).optional().describe("New time period"),
+		max_entries: z.number().optional().describe("New max entries cap"),
+		custom_event: z.string().optional().describe("Event name to count for custom metric leaderboards")
+	}, async ({ project_id, leaderboard_id, name, metric, period, max_entries, custom_event }) => {
+		const payload = {};
+		if (name !== void 0) payload.name = name;
+		if (metric !== void 0) payload.metric = metric;
+		if (period !== void 0) payload.period = period;
+		if (max_entries !== void 0) payload.max_entries = max_entries;
+		if (custom_event !== void 0) payload.custom_event = custom_event;
+		const result = await apiClient.patch(`/projects/${project_id}/leaderboards/${leaderboard_id}`, payload);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_delete_leaderboard", "Delete a leaderboard definition. Existing entries are cleared as part of the delete.", {
+		project_id: z.string().describe("The project ID"),
+		leaderboard_id: z.string().describe("The leaderboard definition ID")
+	}, async ({ project_id, leaderboard_id }) => {
+		const result = await apiClient.delete(`/projects/${project_id}/leaderboards/${leaderboard_id}`);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+}
+//#endregion
+//#region src/tools/platform.ts
+function registerTools$4(server, apiClient) {
+	server.tool("amba_create_onboarding_flow", "Create an onboarding flow for a project. Onboarding flows define step-by-step experiences for new users (e.g. welcome screens, permission prompts, feature tours).", {
+		project_id: z.string().describe("The project ID"),
+		name: z.string().describe("Flow name (e.g. \"Welcome Flow\", \"Premium Onboarding\")"),
+		steps: z.array(z.object({
+			id: z.string().describe("Unique step identifier"),
+			title: z.string().describe("Step title"),
+			description: z.string().describe("Step description"),
+			type: z.string().describe("Step type (e.g. \"welcome\", \"permission\", \"feature_tour\", \"personalization\")"),
+			config: z.record(z.unknown()).optional().describe("Step-specific configuration")
+		})).describe("Ordered array of onboarding steps"),
+		is_active: z.boolean().optional().describe("Whether the flow is active. Defaults to true.")
+	}, async ({ project_id, name, steps, is_active }) => {
+		const payload = {
+			name,
+			steps
+		};
+		if (is_active !== void 0) payload.is_active = is_active;
+		const result = await apiClient.post(`/projects/${project_id}/onboarding/flows`, payload);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_get_onboarding_stats", "Get onboarding completion statistics for a project. Shows how many users started, completed, and skipped each flow.", { project_id: z.string().describe("The project ID") }, async ({ project_id }) => {
+		const result = await apiClient.get(`/projects/${project_id}/onboarding/stats`);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_onboarding_list", "List all onboarding flows for a project. Returns flow id, name, steps config, and is_active.", { project_id: z.string().describe("The project ID") }, async ({ project_id }) => {
+		const result = await apiClient.get(`/projects/${project_id}/onboarding/flows`);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_onboarding_get", "Get a single onboarding flow by id including its ordered steps.", {
+		project_id: z.string().describe("The project ID"),
+		flow_id: z.string().describe("The onboarding flow ID")
+	}, async ({ project_id, flow_id }) => {
+		const result = await apiClient.get(`/projects/${project_id}/onboarding/flows/${flow_id}`);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_onboarding_update", "Update an onboarding flow. Any omitted fields are left unchanged. Pass `steps` to replace the step list.", {
+		project_id: z.string().describe("The project ID"),
+		flow_id: z.string().describe("The onboarding flow ID"),
+		name: z.string().optional().describe("New flow name"),
+		steps: z.array(z.record(z.unknown())).optional().describe("Replacement ordered step list"),
+		is_active: z.boolean().optional().describe("Toggle whether the flow is active")
+	}, async ({ project_id, flow_id, name, steps, is_active }) => {
+		const payload = {};
+		if (name !== void 0) payload.name = name;
+		if (steps !== void 0) payload.steps = steps;
+		if (is_active !== void 0) payload.is_active = is_active;
+		const result = await apiClient.patch(`/projects/${project_id}/onboarding/flows/${flow_id}`, payload);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_onboarding_delete", "Delete an onboarding flow. Existing user onboarding records referencing this flow are preserved; no new users will enter the deleted flow.", {
+		project_id: z.string().describe("The project ID"),
+		flow_id: z.string().describe("The onboarding flow ID")
+	}, async ({ project_id, flow_id }) => {
+		const result = await apiClient.delete(`/projects/${project_id}/onboarding/flows/${flow_id}`);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_create_role", "Create a role with specific permissions for a project. Roles define what users can do (e.g. admin, moderator, premium). Permissions are string identifiers your app checks at runtime.", {
+		project_id: z.string().describe("The project ID"),
+		name: z.string().describe("Role name (e.g. \"admin\", \"moderator\", \"premium\")"),
+		description: z.string().optional().describe("Human-readable description of the role"),
+		permissions: z.array(z.string()).describe("Array of permission strings (e.g. [\"content:write\", \"users:read\", \"moderation:manage\"])")
+	}, async ({ project_id, name, description, permissions }) => {
+		const payload = {
+			name,
+			permissions
+		};
+		if (description !== void 0) payload.description = description;
+		const result = await apiClient.post(`/projects/${project_id}/roles`, payload);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_list_roles", "List all roles defined for a project.", { project_id: z.string().describe("The project ID") }, async ({ project_id }) => {
+		const result = await apiClient.get(`/projects/${project_id}/roles`);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_assign_role", "Assign a role to an app user. The user will inherit all permissions defined on the role.", {
+		project_id: z.string().describe("The project ID"),
+		app_user_id: z.string().describe("The app user ID to assign the role to"),
+		role_id: z.string().describe("The role ID to assign")
+	}, async ({ project_id, app_user_id, role_id }) => {
+		const result = await apiClient.post(`/projects/${project_id}/roles/assign`, {
+			app_user_id,
+			role_id
+		});
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_create_tracked_link", "Create a tracked deep link for a project. Tracked links have a short slug, destination URL, and optional campaign metadata. Click analytics are recorded automatically.", {
+		project_id: z.string().describe("The project ID"),
+		slug: z.string().describe("Short URL slug (e.g. \"summer-promo\", \"onboarding-cta\")"),
+		destination_url: z.string().describe("The destination URL the link resolves to"),
+		metadata: z.record(z.unknown()).optional().describe("Campaign metadata (e.g. { campaign: \"summer\", source: \"email\", medium: \"newsletter\" })")
+	}, async ({ project_id, slug, destination_url, metadata }) => {
+		const payload = {
+			slug,
+			destination_url
+		};
+		if (metadata !== void 0) payload.metadata = metadata;
+		const result = await apiClient.post(`/projects/${project_id}/deep-links/tracked`, payload);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_get_link_stats", "Get click analytics for a tracked link including total clicks, unique users, and clicks by platform.", {
+		project_id: z.string().describe("The project ID"),
+		link_id: z.string().describe("The tracked link ID")
+	}, async ({ project_id, link_id }) => {
+		const result = await apiClient.get(`/projects/${project_id}/deep-links/tracked/${link_id}/stats`);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_deeplinks_list", "List tracked deep links for a project, newest first. Supports pagination.", {
+		project_id: z.string().describe("The project ID"),
+		limit: z.number().optional().describe("Max results to return (default 50)"),
+		offset: z.number().optional().describe("Offset for pagination (default 0)")
+	}, async ({ project_id, limit, offset }) => {
+		const query = {};
+		if (limit !== void 0) query.limit = String(limit);
+		if (offset !== void 0) query.offset = String(offset);
+		const result = await apiClient.get(`/projects/${project_id}/deep-links/tracked`, query);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_deeplinks_delete", "Delete a tracked deep link. Historical click rows for the link are preserved.", {
+		project_id: z.string().describe("The project ID"),
+		link_id: z.string().describe("The tracked link ID")
+	}, async ({ project_id, link_id }) => {
+		const result = await apiClient.delete(`/projects/${project_id}/deep-links/tracked/${link_id}`);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_deeplinks_get_config", "Get the deep-link configuration (URL scheme, universal link domain, iOS/Android identifiers, fallback URL) for a project.", { project_id: z.string().describe("The project ID") }, async ({ project_id }) => {
+		const result = await apiClient.get(`/projects/${project_id}/deep-links/config`);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_deeplinks_set_config", "Upsert the deep-link configuration (URL scheme, universal link domain, iOS/Android identifiers, fallback URL) for a project.", {
+		project_id: z.string().describe("The project ID"),
+		url_scheme: z.string().optional().describe("Custom URL scheme (e.g. \"myapp\")"),
+		universal_link_domain: z.string().optional().describe("Universal link domain (e.g. \"links.example.com\")"),
+		android_package_name: z.string().optional().describe("Android package name"),
+		ios_bundle_id: z.string().optional().describe("iOS bundle identifier"),
+		fallback_url: z.string().optional().describe("Fallback URL for users without the app installed")
+	}, async ({ project_id, url_scheme, universal_link_domain, android_package_name, ios_bundle_id, fallback_url }) => {
+		const payload = {};
+		if (url_scheme !== void 0) payload.url_scheme = url_scheme;
+		if (universal_link_domain !== void 0) payload.universal_link_domain = universal_link_domain;
+		if (android_package_name !== void 0) payload.android_package_name = android_package_name;
+		if (ios_bundle_id !== void 0) payload.ios_bundle_id = ios_bundle_id;
+		if (fallback_url !== void 0) payload.fallback_url = fallback_url;
+		const result = await apiClient.put(`/projects/${project_id}/deep-links/config`, payload);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_upload_media", "Register a media asset and get a signed upload URL. After calling this, upload the file to the returned upload_url.", {
+		project_id: z.string().describe("The project ID"),
+		filename: z.string().describe("Original filename (e.g. \"hero-banner.png\")"),
+		mime_type: z.string().describe("MIME type (e.g. \"image/png\", \"video/mp4\")"),
+		size_bytes: z.number().optional().describe("File size in bytes"),
+		folder_id: z.string().optional().describe("ID of the folder to place the asset in"),
+		alt_text: z.string().optional().describe("Alt text for accessibility"),
+		metadata: z.record(z.unknown()).optional().describe("Custom metadata")
+	}, async ({ project_id, filename, mime_type, size_bytes, folder_id, alt_text, metadata }) => {
+		const payload = {
+			filename,
+			mime_type
+		};
+		if (size_bytes !== void 0) payload.size_bytes = size_bytes;
+		if (folder_id !== void 0) payload.folder_id = folder_id;
+		if (alt_text !== void 0) payload.alt_text = alt_text;
+		if (metadata !== void 0) payload.metadata = metadata;
+		const result = await apiClient.post(`/projects/${project_id}/media`, payload);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_list_media", "List media assets for a project. Supports pagination and filtering by folder.", {
+		project_id: z.string().describe("The project ID"),
+		folder_id: z.string().optional().describe("Filter by folder ID"),
+		limit: z.number().optional().describe("Max results to return (default 50)"),
+		offset: z.number().optional().describe("Offset for pagination (default 0)")
+	}, async ({ project_id, folder_id, limit, offset }) => {
+		const query = {};
+		if (folder_id) query.folder_id = folder_id;
+		if (limit !== void 0) query.limit = String(limit);
+		if (offset !== void 0) query.offset = String(offset);
+		const result = await apiClient.get(`/projects/${project_id}/media`, query);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_media_delete", "Delete a media asset. This removes the DB row; the underlying object in storage is garbage-collected separately.", {
+		project_id: z.string().describe("The project ID"),
+		asset_id: z.string().describe("The media asset ID")
+	}, async ({ project_id, asset_id }) => {
+		const result = await apiClient.delete(`/projects/${project_id}/media/${asset_id}`);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_media_create_folder", "Create a media folder for organizing assets. Folders can be nested via `parent_id`.", {
+		project_id: z.string().describe("The project ID"),
+		name: z.string().describe("Folder name"),
+		parent_id: z.string().optional().describe("Parent folder ID. Omit for a top-level folder.")
+	}, async ({ project_id, name, parent_id }) => {
+		const payload = { name };
+		if (parent_id !== void 0) payload.parent_id = parent_id;
+		const result = await apiClient.post(`/projects/${project_id}/media/folders`, payload);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_media_list_folders", "List media folders for a project. Pass `parent_id` to list children of a specific folder; omit to list top-level folders.", {
+		project_id: z.string().describe("The project ID"),
+		parent_id: z.string().optional().describe("Parent folder ID. Omit for top-level folders.")
+	}, async ({ project_id, parent_id }) => {
+		const query = {};
+		if (parent_id) query.parent_id = parent_id;
+		const result = await apiClient.get(`/projects/${project_id}/media/folders`, query);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_media_delete_folder", "Delete a media folder. Assets inside the folder are not deleted; their folder_id is left dangling and should be reassigned before calling this tool.", {
+		project_id: z.string().describe("The project ID"),
+		folder_id: z.string().describe("The media folder ID")
+	}, async ({ project_id, folder_id }) => {
+		const result = await apiClient.delete(`/projects/${project_id}/media/folders/${folder_id}`);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_get_moderation_queue", "Get the content moderation queue for a project. Shows reported content pending review.", {
+		project_id: z.string().describe("The project ID"),
+		status: z.enum([
+			"pending",
+			"approved",
+			"rejected",
+			"escalated"
+		]).optional().describe("Filter by status. Defaults to \"pending\"."),
+		limit: z.number().optional().describe("Max results to return (default 50)")
+	}, async ({ project_id, status, limit }) => {
+		const query = {};
+		if (status) query.status = status;
+		if (limit !== void 0) query.limit = String(limit);
+		const result = await apiClient.get(`/projects/${project_id}/moderation/queue`, query);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_configure_moderation", "Create a moderation rule for a project. Rules can auto-filter content based on keywords, regex patterns, or auto-approve trusted users.", {
+		project_id: z.string().describe("The project ID"),
+		name: z.string().describe("Rule name (e.g. \"Profanity Filter\", \"Spam Detection\")"),
+		rule_type: z.enum([
+			"keyword_filter",
+			"regex",
+			"auto_approve_trusted"
+		]).describe("Type of moderation rule"),
+		config: z.record(z.unknown()).describe("Rule configuration (e.g. { keywords: [\"spam\", \"scam\"] } for keyword_filter, { pattern: \"\\\\b(buy now)\\\\b\" } for regex)"),
+		is_active: z.boolean().optional().describe("Whether the rule is active. Defaults to true.")
+	}, async ({ project_id, name, rule_type, config, is_active }) => {
+		const payload = {
+			name,
+			rule_type,
+			config
+		};
+		if (is_active !== void 0) payload.is_active = is_active;
+		const result = await apiClient.post(`/projects/${project_id}/moderation/rules`, payload);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_moderation_queue_list", "List moderation queue items for a project, filtered by status. Pagination via limit+offset.", {
+		project_id: z.string().describe("The project ID"),
+		status: z.enum([
+			"pending",
+			"approved",
+			"rejected",
+			"escalated"
+		]).optional().describe("Queue status filter. Defaults to \"pending\"."),
+		limit: z.number().optional().describe("Max results to return (default 50)"),
+		offset: z.number().optional().describe("Offset for pagination (default 0)")
+	}, async ({ project_id, status, limit, offset }) => {
+		const query = {};
+		if (status) query.status = status;
+		if (limit !== void 0) query.limit = String(limit);
+		if (offset !== void 0) query.offset = String(offset);
+		const result = await apiClient.get(`/projects/${project_id}/moderation/queue`, query);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_moderation_queue_approve", "Approve a moderation-queue item. The item transitions to status=\"approved\" and the reported content stays visible.", {
+		project_id: z.string().describe("The project ID"),
+		item_id: z.string().describe("The moderation queue item ID")
+	}, async ({ project_id, item_id }) => {
+		const result = await apiClient.post(`/projects/${project_id}/moderation/queue/${item_id}/approve`);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_moderation_queue_reject", "Reject a moderation-queue item. The item transitions to status=\"rejected\" — your app should treat the reported content as removed.", {
+		project_id: z.string().describe("The project ID"),
+		item_id: z.string().describe("The moderation queue item ID")
+	}, async ({ project_id, item_id }) => {
+		const result = await apiClient.post(`/projects/${project_id}/moderation/queue/${item_id}/reject`);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_moderation_queue_escalate", "Escalate a moderation-queue item for senior review. Transitions the item to status=\"escalated\".", {
+		project_id: z.string().describe("The project ID"),
+		item_id: z.string().describe("The moderation queue item ID")
+	}, async ({ project_id, item_id }) => {
+		const result = await apiClient.post(`/projects/${project_id}/moderation/queue/${item_id}/escalate`);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_roles_patch", "Update a role's name, description, or permission list. Only the supplied fields are changed.", {
+		project_id: z.string().describe("The project ID"),
+		role_id: z.string().describe("The role ID"),
+		name: z.string().optional().describe("New role name"),
+		description: z.string().optional().describe("New description"),
+		permissions: z.array(z.string()).optional().describe("Replacement array of permission strings")
+	}, async ({ project_id, role_id, name, description, permissions }) => {
+		const payload = {};
+		if (name !== void 0) payload.name = name;
+		if (description !== void 0) payload.description = description;
+		if (permissions !== void 0) payload.permissions = permissions;
+		const result = await apiClient.patch(`/projects/${project_id}/roles/${role_id}`, payload);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_roles_delete", "Delete a role. Users currently assigned to the role lose that assignment via cascade.", {
+		project_id: z.string().describe("The project ID"),
+		role_id: z.string().describe("The role ID")
+	}, async ({ project_id, role_id }) => {
+		const result = await apiClient.delete(`/projects/${project_id}/roles/${role_id}`);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_roles_revoke", "Revoke a role from an app user. The user loses the permissions that were only granted by this role.", {
+		project_id: z.string().describe("The project ID"),
+		app_user_id: z.string().describe("The app user ID"),
+		role_id: z.string().describe("The role ID to revoke")
+	}, async ({ project_id, app_user_id, role_id }) => {
+		const result = await apiClient.post(`/projects/${project_id}/roles/revoke`, {
+			app_user_id,
+			role_id
+		});
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_roles_list_users", "List all users currently assigned to a specific role.", {
+		project_id: z.string().describe("The project ID"),
+		role_id: z.string().describe("The role ID")
+	}, async ({ project_id, role_id }) => {
+		const result = await apiClient.get(`/projects/${project_id}/roles/${role_id}/users`);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_messaging_list_conversations", "List message conversations for a project, newest first. Pagination via limit+offset.", {
+		project_id: z.string().describe("The project ID"),
+		limit: z.number().optional().describe("Max results to return (default 50)"),
+		offset: z.number().optional().describe("Offset for pagination (default 0)")
+	}, async ({ project_id, limit, offset }) => {
+		const query = {};
+		if (limit !== void 0) query.limit = String(limit);
+		if (offset !== void 0) query.offset = String(offset);
+		const result = await apiClient.get(`/projects/${project_id}/messaging/conversations`, query);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_messaging_list_messages", "List messages within a single conversation, ordered by send time.", {
+		project_id: z.string().describe("The project ID"),
+		conversation_id: z.string().describe("The conversation ID"),
+		limit: z.number().optional().describe("Max results to return (default 50)"),
+		offset: z.number().optional().describe("Offset for pagination (default 0)")
+	}, async ({ project_id, conversation_id, limit, offset }) => {
+		const query = {};
+		if (limit !== void 0) query.limit = String(limit);
+		if (offset !== void 0) query.offset = String(offset);
+		const result = await apiClient.get(`/projects/${project_id}/messaging/conversations/${conversation_id}/messages`, query);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_messaging_delete_message", "Delete a single message permanently.", {
+		project_id: z.string().describe("The project ID"),
+		message_id: z.string().describe("The message ID")
+	}, async ({ project_id, message_id }) => {
+		const result = await apiClient.delete(`/projects/${project_id}/messaging/messages/${message_id}`);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_moderation_list_rules", "List moderation rule definitions. Rules drive automatic flag/escalate behavior on inbound content (feed posts, messages, reviews).", { project_id: z.string().describe("The project ID") }, async ({ project_id }) => {
+		const result = await apiClient.get(`/projects/${project_id}/moderation/rules`);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_moderation_update_rule", "Partially update a moderation rule. Only the supplied fields are touched.", {
+		project_id: z.string().describe("The project ID"),
+		rule_id: z.string().describe("The moderation rule ID"),
+		name: z.string().optional().describe("Rule display name"),
+		description: z.string().optional().describe("Rule description"),
+		pattern: z.string().optional().describe("Match pattern (regex or keyword list)"),
+		action: z.enum([
+			"flag",
+			"block",
+			"escalate"
+		]).optional().describe("Action to take when the rule fires"),
+		is_active: z.boolean().optional().describe("Whether the rule is active")
+	}, async ({ project_id, rule_id, name, description, pattern, action, is_active }) => {
+		const payload = {};
+		if (name !== void 0) payload.name = name;
+		if (description !== void 0) payload.description = description;
+		if (pattern !== void 0) payload.pattern = pattern;
+		if (action !== void 0) payload.action = action;
+		if (is_active !== void 0) payload.is_active = is_active;
+		const result = await apiClient.patch(`/projects/${project_id}/moderation/rules/${rule_id}`, payload);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_moderation_delete_rule", "Delete a moderation rule. New content will no longer be evaluated against this rule.", {
+		project_id: z.string().describe("The project ID"),
+		rule_id: z.string().describe("The moderation rule ID")
+	}, async ({ project_id, rule_id }) => {
+		const result = await apiClient.delete(`/projects/${project_id}/moderation/rules/${rule_id}`);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_moderation_list_trust", "List user trust scores. Useful to see who is currently trusted/untrusted by the moderation system.", {
+		project_id: z.string().describe("The project ID"),
+		min_score: z.number().optional().describe("Minimum trust score filter"),
+		max_score: z.number().optional().describe("Maximum trust score filter"),
+		limit: z.number().optional().describe("Page size"),
+		offset: z.number().optional().describe("Offset for pagination")
+	}, async ({ project_id, min_score, max_score, limit, offset }) => {
+		const query = {};
+		if (min_score !== void 0) query.min_score = String(min_score);
+		if (max_score !== void 0) query.max_score = String(max_score);
+		if (limit !== void 0) query.limit = String(limit);
+		if (offset !== void 0) query.offset = String(offset);
+		const result = await apiClient.get(`/projects/${project_id}/moderation/trust`, query);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_moderation_set_trust", "Set or upsert a user trust score. Higher scores reduce moderation friction; lower scores raise it.", {
+		project_id: z.string().describe("The project ID"),
+		user_id: z.string().describe("The app user ID"),
+		score: z.number().describe("Trust score (typically 0-100)"),
+		reason: z.string().optional().describe("Optional human-readable reason for the change")
+	}, async ({ project_id, user_id, score, reason }) => {
+		const payload = {
+			user_id,
+			score
+		};
+		if (reason !== void 0) payload.reason = reason;
+		const result = await apiClient.post(`/projects/${project_id}/moderation/trust`, payload);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+}
+//#endregion
+//#region src/tools/social.ts
+function registerTools$3(server, apiClient) {
+	server.tool("amba_get_friendship_stats", "Get friendship statistics for a project. Returns total friendships, pending requests, accepted friendships, and blocked count.", { project_id: z.string().describe("The project ID") }, async ({ project_id }) => {
+		const result = await apiClient.get(`/projects/${project_id}/friends/stats`);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_create_group", "Create a group (guild) within a project. Groups let users form communities, with configurable visibility and max members.", {
+		project_id: z.string().describe("The project ID"),
+		name: z.string().describe("Group name"),
+		owner_id: z.string().describe("The app_user ID who will own this group"),
+		description: z.string().optional().describe("Group description"),
+		avatar_url: z.string().optional().describe("URL for the group avatar"),
+		is_public: z.boolean().optional().describe("Whether the group is publicly joinable (default true)"),
+		max_members: z.number().optional().describe("Maximum number of members (default 100)"),
+		metadata: z.record(z.unknown()).optional().describe("Arbitrary metadata key-value pairs")
+	}, async ({ project_id, name, owner_id, description, avatar_url, is_public, max_members, metadata }) => {
+		const payload = {
+			name,
+			owner_id
+		};
+		if (description !== void 0) payload.description = description;
+		if (avatar_url !== void 0) payload.avatar_url = avatar_url;
+		if (is_public !== void 0) payload.is_public = is_public;
+		if (max_members !== void 0) payload.max_members = max_members;
+		if (metadata !== void 0) payload.metadata = metadata;
+		const result = await apiClient.post(`/projects/${project_id}/groups`, payload);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_list_groups", "List all groups in a project. Returns groups with member counts, ordered by name.", {
+		project_id: z.string().describe("The project ID"),
+		limit: z.number().optional().describe("Max number of groups to return (default 50)"),
+		offset: z.number().optional().describe("Offset for pagination (default 0)")
+	}, async ({ project_id, limit, offset }) => {
+		const query = {};
+		if (limit !== void 0) query.limit = String(limit);
+		if (offset !== void 0) query.offset = String(offset);
+		const result = await apiClient.get(`/projects/${project_id}/groups`, query);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_create_feed_rule", "Create a feed generation rule. When the specified engagement event occurs, a feed item is automatically created with the given action.", {
+		project_id: z.string().describe("The project ID"),
+		source_event: z.string().describe("The engagement event name that triggers feed item creation (e.g. \"streak_milestone\", \"achievement_unlocked\")"),
+		action: z.string().describe("The action string to use in the feed item (e.g. \"reached_streak_milestone\")"),
+		target_type: z.string().optional().describe("Optional target type for the feed item")
+	}, async ({ project_id, source_event, action, target_type }) => {
+		const payload = {
+			source_event,
+			action
+		};
+		if (target_type !== void 0) payload.target_type = target_type;
+		const result = await apiClient.post(`/projects/${project_id}/feeds/rules`, payload);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_feeds_list_rules", "List all feed generation rules for a project, ordered by source_event.", { project_id: z.string().describe("The project ID") }, async ({ project_id }) => {
+		const result = await apiClient.get(`/projects/${project_id}/feeds/rules`);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_feeds_patch_rule", "Update a feed rule. Omitted fields are left unchanged.", {
+		project_id: z.string().describe("The project ID"),
+		rule_id: z.string().describe("The feed rule ID"),
+		source_event: z.string().optional().describe("New source engagement event name"),
+		action: z.string().optional().describe("New action string for generated feed items"),
+		target_type: z.string().optional().describe("New target type"),
+		is_active: z.boolean().optional().describe("Toggle whether the rule is active")
+	}, async ({ project_id, rule_id, source_event, action, target_type, is_active }) => {
+		const payload = {};
+		if (source_event !== void 0) payload.source_event = source_event;
+		if (action !== void 0) payload.action = action;
+		if (target_type !== void 0) payload.target_type = target_type;
+		if (is_active !== void 0) payload.is_active = is_active;
+		const result = await apiClient.patch(`/projects/${project_id}/feeds/rules/${rule_id}`, payload);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_feeds_delete_rule", "Delete a feed rule. Existing feed items generated by the rule are preserved.", {
+		project_id: z.string().describe("The project ID"),
+		rule_id: z.string().describe("The feed rule ID")
+	}, async ({ project_id, rule_id }) => {
+		const result = await apiClient.delete(`/projects/${project_id}/feeds/rules/${rule_id}`);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_get_messaging_stats", "Get in-app messaging statistics for a project. Returns total conversations, total messages, and active conversations in the last 24 hours.", { project_id: z.string().describe("The project ID") }, async ({ project_id }) => {
+		const result = await apiClient.get(`/projects/${project_id}/messaging/stats`);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_get_review_stats", "Get review and rating statistics for a project. Returns total reviews, average rating, pending approvals, and rating distribution.", { project_id: z.string().describe("The project ID") }, async ({ project_id }) => {
+		const result = await apiClient.get(`/projects/${project_id}/reviews/stats`);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_reviews_list", "List reviews for a project, newest first. Supports pagination and filtering by approval status.", {
+		project_id: z.string().describe("The project ID"),
+		is_approved: z.boolean().optional().describe("Filter to approved (true) or pending (false) reviews. Omit for all."),
+		limit: z.number().optional().describe("Max results to return (default 50)"),
+		offset: z.number().optional().describe("Offset for pagination (default 0)")
+	}, async ({ project_id, is_approved, limit, offset }) => {
+		const query = {};
+		if (is_approved !== void 0) query.is_approved = String(is_approved);
+		if (limit !== void 0) query.limit = String(limit);
+		if (offset !== void 0) query.offset = String(offset);
+		const result = await apiClient.get(`/projects/${project_id}/reviews`, query);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_reviews_patch", "Approve or unapprove a review by toggling `is_approved`. Unapproved reviews are hidden from public listings.", {
+		project_id: z.string().describe("The project ID"),
+		review_id: z.string().describe("The review ID"),
+		is_approved: z.boolean().describe("True to approve, false to hide")
+	}, async ({ project_id, review_id, is_approved }) => {
+		const result = await apiClient.patch(`/projects/${project_id}/reviews/${review_id}`, { is_approved });
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_reviews_delete", "Delete a review permanently.", {
+		project_id: z.string().describe("The project ID"),
+		review_id: z.string().describe("The review ID")
+	}, async ({ project_id, review_id }) => {
+		const result = await apiClient.delete(`/projects/${project_id}/reviews/${review_id}`);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_reviews_list_items", "List reviewable items for a project, ordered by average rating. Use this to see aggregate ratings per reviewable entity.", {
+		project_id: z.string().describe("The project ID"),
+		limit: z.number().optional().describe("Max results to return (default 50)"),
+		offset: z.number().optional().describe("Offset for pagination (default 0)")
+	}, async ({ project_id, limit, offset }) => {
+		const query = {};
+		if (limit !== void 0) query.limit = String(limit);
+		if (offset !== void 0) query.offset = String(offset);
+		const result = await apiClient.get(`/projects/${project_id}/reviews/items`, query);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_reviews_export", "Export reviews for a project as CSV (default) or NDJSON. Streams via DB cursor on the API side. Filters: `since` (created_at lower bound), `rating_min`/`rating_max` (1-5). The MCP tool reads back at most ~1 MiB; for very large tenants prefer `format: \"ndjson\"` and narrow with rating + since filters. The returned `truncated` flag indicates whether the body was clipped.", {
+		project_id: z.string().describe("The project ID"),
+		format: z.enum(["csv", "ndjson"]).optional().describe("Response format. Default csv. Recommend ndjson for parsability."),
+		since: z.string().optional().describe("ISO-8601 lower bound on `created_at`."),
+		rating_min: z.number().int().min(1).max(5).optional().describe("Minimum star rating (1-5)."),
+		rating_max: z.number().int().min(1).max(5).optional().describe("Maximum star rating (1-5).")
+	}, async ({ project_id, format, since, rating_min, rating_max }) => {
+		const query = {};
+		if (format !== void 0) query.format = format;
+		if (since !== void 0) query.since = since;
+		if (rating_min !== void 0) query.rating_min = String(rating_min);
+		if (rating_max !== void 0) query.rating_max = String(rating_max);
+		const { body, truncated, contentType } = await apiClient.getRaw(`/projects/${project_id}/reviews/export`, query);
+		return { content: [{
+			type: "text",
+			text: `# format=${format ?? "csv"} truncated=${truncated} content-type=${contentType ?? "unknown"}\n` + body
+		}] };
+	});
+	server.tool("amba_list_friendships", "List friendship rows for a project. Filter by status, user, or recency. Useful for moderation and engagement analytics.", {
+		project_id: z.string().describe("The project ID"),
+		status: z.enum([
+			"pending",
+			"accepted",
+			"blocked"
+		]).optional().describe("Filter by friendship status"),
+		user_id: z.string().optional().describe("Filter to friendships involving this app user"),
+		limit: z.number().optional().describe("Page size (default 50)"),
+		offset: z.number().optional().describe("Offset for pagination")
+	}, async ({ project_id, status, user_id, limit, offset }) => {
+		const query = {};
+		if (status !== void 0) query.status = status;
+		if (user_id !== void 0) query.user_id = user_id;
+		if (limit !== void 0) query.limit = String(limit);
+		if (offset !== void 0) query.offset = String(offset);
+		const result = await apiClient.get(`/projects/${project_id}/friends`, query);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_delete_friendship", "Delete a friendship row. Used for moderation or cleanup. Idempotent.", {
+		project_id: z.string().describe("The project ID"),
+		friendship_id: z.string().describe("The friendship ID")
+	}, async ({ project_id, friendship_id }) => {
+		const result = await apiClient.delete(`/projects/${project_id}/friends/${friendship_id}`);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_update_group", "Partially update a group definition. Only the supplied fields are touched.", {
+		project_id: z.string().describe("The project ID"),
+		group_id: z.string().describe("The group ID"),
+		name: z.string().optional().describe("Group name"),
+		description: z.string().optional().describe("Group description"),
+		avatar_url: z.string().optional().describe("Group avatar URL"),
+		is_public: z.boolean().optional().describe("Whether the group is publicly joinable"),
+		max_members: z.number().optional().describe("Maximum members allowed"),
+		metadata: z.record(z.unknown()).optional().describe("Arbitrary metadata")
+	}, async ({ project_id, group_id, name, description, avatar_url, is_public, max_members, metadata }) => {
+		const payload = {};
+		if (name !== void 0) payload.name = name;
+		if (description !== void 0) payload.description = description;
+		if (avatar_url !== void 0) payload.avatar_url = avatar_url;
+		if (is_public !== void 0) payload.is_public = is_public;
+		if (max_members !== void 0) payload.max_members = max_members;
+		if (metadata !== void 0) payload.metadata = metadata;
+		const result = await apiClient.patch(`/projects/${project_id}/groups/${group_id}`, payload);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_delete_group", "Delete a group. All membership rows for the group are also removed.", {
+		project_id: z.string().describe("The project ID"),
+		group_id: z.string().describe("The group ID")
+	}, async ({ project_id, group_id }) => {
+		const result = await apiClient.delete(`/projects/${project_id}/groups/${group_id}`);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_list_group_members", "List members of a single group, with their join timestamps and roles.", {
+		project_id: z.string().describe("The project ID"),
+		group_id: z.string().describe("The group ID"),
+		limit: z.number().optional().describe("Page size"),
+		offset: z.number().optional().describe("Offset for pagination")
+	}, async ({ project_id, group_id, limit, offset }) => {
+		const query = {};
+		if (limit !== void 0) query.limit = String(limit);
+		if (offset !== void 0) query.offset = String(offset);
+		const result = await apiClient.get(`/projects/${project_id}/groups/${group_id}/members`, query);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_update_group_member", "Update a group member's role or metadata. Use this to promote/demote members or amend their custom data.", {
+		project_id: z.string().describe("The project ID"),
+		group_id: z.string().describe("The group ID"),
+		member_id: z.string().describe("The membership row ID"),
+		role: z.enum([
+			"member",
+			"moderator",
+			"owner"
+		]).optional().describe("Member role within the group"),
+		metadata: z.record(z.unknown()).optional().describe("Custom metadata")
+	}, async ({ project_id, group_id, member_id, role, metadata }) => {
+		const payload = {};
+		if (role !== void 0) payload.role = role;
+		if (metadata !== void 0) payload.metadata = metadata;
+		const result = await apiClient.patch(`/projects/${project_id}/groups/${group_id}/members/${member_id}`, payload);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_remove_group_member", "Remove a member from a group (kick or self-leave).", {
+		project_id: z.string().describe("The project ID"),
+		group_id: z.string().describe("The group ID"),
+		member_id: z.string().describe("The membership row ID")
+	}, async ({ project_id, group_id, member_id }) => {
+		const result = await apiClient.delete(`/projects/${project_id}/groups/${group_id}/members/${member_id}`);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_feeds_list_items", "List feed items in a project. Useful for moderation review or analytics.", {
+		project_id: z.string().describe("The project ID"),
+		user_id: z.string().optional().describe("Filter to feed items posted by this user"),
+		since: z.string().optional().describe("ISO 8601 lower-bound timestamp"),
+		limit: z.number().optional().describe("Page size"),
+		offset: z.number().optional().describe("Offset for pagination")
+	}, async ({ project_id, user_id, since, limit, offset }) => {
+		const query = {};
+		if (user_id !== void 0) query.user_id = user_id;
+		if (since !== void 0) query.since = since;
+		if (limit !== void 0) query.limit = String(limit);
+		if (offset !== void 0) query.offset = String(offset);
+		const result = await apiClient.get(`/projects/${project_id}/feeds/items`, query);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_feeds_delete_item", "Delete a feed item. Used for moderation. Hard delete — the row is removed.", {
+		project_id: z.string().describe("The project ID"),
+		item_id: z.string().describe("The feed item ID")
+	}, async ({ project_id, item_id }) => {
+		const result = await apiClient.delete(`/projects/${project_id}/feeds/items/${item_id}`);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+}
+//#endregion
+//#region src/tools/xp.ts
+function registerTools$2(server, apiClient) {
+	server.tool("amba_create_xp_rule", "Create an XP rule that auto-awards XP when a matching engagement event is tracked. For example, award 50 XP every time a user completes a workout, with optional daily caps and cooldowns.", {
+		project_id: z.string().describe("The project ID"),
+		name: z.string().describe("Rule name (e.g. \"Workout Completed\", \"Daily Login Bonus\")"),
+		event_name: z.string().describe("The engagement event name that triggers XP (e.g. \"workout_completed\", \"app_open\")"),
+		xp_amount: z.number().describe("Amount of XP to award per event"),
+		max_per_day: z.number().optional().describe("Maximum number of times this rule can fire per user per day (null = unlimited)"),
+		cooldown_seconds: z.number().optional().describe("Minimum seconds between XP awards for the same user (default 0)")
+	}, async ({ project_id, name, event_name, xp_amount, max_per_day, cooldown_seconds }) => {
+		const payload = {
+			name,
+			event_name,
+			xp_amount
+		};
+		if (max_per_day !== void 0) payload.max_per_day = max_per_day;
+		if (cooldown_seconds !== void 0) payload.cooldown_seconds = cooldown_seconds;
+		const result = await apiClient.post(`/projects/${project_id}/xp`, payload);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_list_xp_rules", "List all XP rules configured for a project. Shows event triggers, XP amounts, daily caps, and cooldowns.", { project_id: z.string().describe("The project ID") }, async ({ project_id }) => {
+		const result = await apiClient.get(`/projects/${project_id}/xp`);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_get_user_xp", "Get a specific user's XP total, current level, and XP history. Useful for debugging or customer support.", {
+		project_id: z.string().describe("The project ID"),
+		user_id: z.string().describe("The app user ID")
+	}, async ({ project_id, user_id }) => {
+		const result = await apiClient.get(`/projects/${project_id}/xp/users/${user_id}`);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_xp_update_rule", "Update an XP rule. Only the supplied fields are changed; omitted fields are left untouched.", {
+		project_id: z.string().describe("The project ID"),
+		rule_id: z.string().describe("The XP rule ID"),
+		name: z.string().optional().describe("New rule name"),
+		event_name: z.string().optional().describe("New trigger event name"),
+		xp_amount: z.number().optional().describe("New XP amount per event"),
+		max_per_day: z.number().nullable().optional().describe("New per-user-per-day cap (null = unlimited)"),
+		cooldown_seconds: z.number().optional().describe("New cooldown between awards in seconds"),
+		is_active: z.boolean().optional().describe("Toggle whether the rule is active")
+	}, async ({ project_id, rule_id, name, event_name, xp_amount, max_per_day, cooldown_seconds, is_active }) => {
+		const payload = {};
+		if (name !== void 0) payload.name = name;
+		if (event_name !== void 0) payload.event_name = event_name;
+		if (xp_amount !== void 0) payload.xp_amount = xp_amount;
+		if (max_per_day !== void 0) payload.max_per_day = max_per_day;
+		if (cooldown_seconds !== void 0) payload.cooldown_seconds = cooldown_seconds;
+		if (is_active !== void 0) payload.is_active = is_active;
+		const result = await apiClient.patch(`/projects/${project_id}/xp/${rule_id}`, payload);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_xp_delete_rule", "Delete an XP rule. Historical user_xp rows are preserved.", {
+		project_id: z.string().describe("The project ID"),
+		rule_id: z.string().describe("The XP rule ID")
+	}, async ({ project_id, rule_id }) => {
+		const result = await apiClient.delete(`/projects/${project_id}/xp/${rule_id}`);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_xp_list_users", "List users by total XP (leaderboard view). Ordered by total_xp descending with pagination.", {
+		project_id: z.string().describe("The project ID"),
+		limit: z.number().optional().describe("Max results to return (default 50)"),
+		offset: z.number().optional().describe("Offset for pagination (default 0)")
+	}, async ({ project_id, limit, offset }) => {
+		const query = {};
+		if (limit !== void 0) query.limit = String(limit);
+		if (offset !== void 0) query.offset = String(offset);
+		const result = await apiClient.get(`/projects/${project_id}/xp/users`, query);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+}
+//#endregion
+//#region src/tools/events.ts
+function registerTools$1(server, apiClient) {
+	server.tool("amba_events_list", "List engagement events for a project (most recent first) with cursor pagination on (occurred_at, id). Defaults to the last 24 hours when `since` is omitted. Pass `next_cursor` from a previous page back as `cursor` to continue.", {
+		project_id: z.string().describe("The project ID"),
+		since: z.string().optional().describe("ISO-8601 lower bound for occurred_at. Defaults to 24h ago."),
+		until: z.string().optional().describe("ISO-8601 upper bound for occurred_at."),
+		event_name: z.string().optional().describe("Filter to a specific event_name."),
+		user_id: z.string().optional().describe("Filter to a single app_user UUID."),
+		limit: z.number().optional().describe("Page size (default 100, max 1000)."),
+		cursor: z.string().optional().describe("Opaque cursor returned by a previous page as `next_cursor`.")
+	}, async ({ project_id, since, until, event_name, user_id, limit, cursor }) => {
+		const query = {};
+		if (since !== void 0) query.since = since;
+		if (until !== void 0) query.until = until;
+		if (event_name !== void 0) query.event_name = event_name;
+		if (user_id !== void 0) query.user_id = user_id;
+		if (limit !== void 0) query.limit = String(limit);
+		if (cursor !== void 0) query.cursor = cursor;
+		const result = await apiClient.get(`/projects/${project_id}/events`, query);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	server.tool("amba_events_count", "Aggregate event counts for a project across a time window. `since` is required; range is capped at 90 days. Optional `group_by` returns per-day or per-event_name buckets in addition to the total.", {
+		project_id: z.string().describe("The project ID"),
+		since: z.string().describe("ISO-8601 lower bound for occurred_at (required)."),
+		until: z.string().optional().describe("ISO-8601 upper bound for occurred_at. Defaults to now."),
+		event_name: z.string().optional().describe("Filter to a specific event_name."),
+		group_by: z.enum(["day", "event_name"]).optional().describe("Bucket results by calendar day (UTC) or event_name. Omit for total only.")
+	}, async ({ project_id, since, until, event_name, group_by }) => {
+		const query = { since };
+		if (until !== void 0) query.until = until;
+		if (event_name !== void 0) query.event_name = event_name;
+		if (group_by !== void 0) query.group_by = group_by;
+		const result = await apiClient.get(`/projects/${project_id}/events/count`, query);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+}
+//#endregion
+//#region src/tools/auth.ts
+async function authFetch(apiClient, options) {
+	const url = `${apiClient.getApiRoot()}${options.path}`;
+	const headers = {
+		"Content-Type": "application/json",
+		Accept: "application/json"
+	};
+	if (options.bearer) headers["Authorization"] = `Bearer ${options.bearer}`;
+	const res = await fetch(url, {
+		method: options.method,
+		headers,
+		body: options.body !== void 0 ? JSON.stringify(options.body) : void 0
+	});
+	let body;
+	try {
+		body = await res.json();
+	} catch {
+		body = { error: {
+			code: "INVALID_RESPONSE",
+			message: res.statusText
+		} };
+	}
+	return {
+		status: res.status,
+		body
+	};
+}
+function jsonResult(payload) {
+	return { content: [{
+		type: "text",
+		text: JSON.stringify(payload, null, 2)
+	}] };
+}
+/**
+* Flatten an authFetch result into the agent-facing tool payload.
+*
+* The body is spread FIRST so the HTTP `status` written last cannot be
+* shadowed by a colliding top-level `status` field in the API response.
+* Today no /auth/developer handler emits a top-level `status` key, but
+* agents read `parsed.status` to distinguish 2xx from 4xx/5xx — making
+* that key authoritative defends against a future API change silently
+* breaking error handling.
+*/
+function passthroughResult(result) {
+	return jsonResult({
+		...result.body ?? {},
+		status: result.status
+	});
+}
+function registerTools(server, apiClient) {
+	server.tool("amba_developer_signup", [
+		"Create a new Amba developer account. Returns a long-lived Personal Access Token (PAT)",
+		"plus a real isolated Neon-backed project (provisioning asynchronously).",
+		"Use the PAT for agent flows: pass the returned `pat` as the inbound Bearer for every",
+		"subsequent MCP call — no refresh dance required.",
+		"Verify your account via the returned `project.verify_url`. Poll",
+		"`amba_get_provisioning_status` until the project flips to status='active' (~10s)",
+		"before issuing client-plane traffic against the returned API keys.",
+		"Email is normalized to lowercase. Password must be at least 8 characters.",
+		"Errors: 409 EMAIL_EXISTS, 400 WEAK_PASSWORD/INVALID_INPUT, 429 if rate-limited (5/min, 50/day per IP)."
+	].join(" "), {
+		email: z.string().email().describe("Developer email address. Will be lowercased."),
+		password: z.string().min(8).describe("Password, minimum 8 characters."),
+		name: z.string().optional().describe("Optional display name.")
+	}, async ({ email, password, name }) => {
+		const body = {
+			email,
+			password
+		};
+		if (name !== void 0) body.name = name;
+		return passthroughResult(await authFetch(apiClient, {
+			method: "POST",
+			path: "/auth/developer/signup",
+			body
+		}));
+	});
+	server.tool("amba_developer_login", [
+		"Log in to an existing Amba developer account. Returns access_token + refresh_token + developer record.",
+		"Use the returned access_token as the inbound Bearer header on every subsequent MCP call.",
+		"Errors: 401 INVALID_CREDENTIALS, 429 if rate-limited (10/min, 100/day per IP)."
+	].join(" "), {
+		email: z.string().email().describe("Developer email address."),
+		password: z.string().describe("Developer password.")
+	}, async ({ email, password }) => {
+		return passthroughResult(await authFetch(apiClient, {
+			method: "POST",
+			path: "/auth/developer/login",
+			body: {
+				email,
+				password
+			}
+		}));
+	});
+	server.tool("amba_developer_refresh", [
+		"Rotate a developer access_token using the refresh_token previously issued by signup or login.",
+		"The old refresh_token is revoked and a new pair is issued — do NOT keep using the old one.",
+		"Errors: 401 INVALID_TOKEN if refresh_token is expired/revoked/unknown, 429 if rate-limited."
+	].join(" "), { refresh_token: z.string().describe("The refresh_token from a prior signup/login response.") }, async ({ refresh_token }) => {
+		return passthroughResult(await authFetch(apiClient, {
+			method: "POST",
+			path: "/auth/developer/refresh",
+			body: { refresh_token }
+		}));
+	});
+	server.tool("amba_developer_rotate_pat", [
+		"Rotate the developer PAT. The old PAT stops working immediately (may take up to 30s to propagate).",
+		"Use this if you suspect the current PAT has been exposed, or as a routine credential-hygiene step.",
+		"Requires a valid Bearer (PAT or JWT) on the inbound request — does NOT bypass auth.",
+		"Returns the new pat + pat_prefix + pat_last_4. The full pat is returned ONCE — store it immediately.",
+		"Errors: 401 if Bearer is missing/invalid, 500 ROTATE_FAILED on DB error."
+	].join(" "), {}, async () => {
+		const bearer = await apiClient.resolveTokenOrNull();
+		if (!bearer) return jsonResult({
+			status: 401,
+			error: {
+				code: "MISSING_BEARER",
+				message: "No developer access token available. Call amba_developer_signup or amba_developer_login first."
+			}
+		});
+		return passthroughResult(await authFetch(apiClient, {
+			method: "POST",
+			path: "/auth/developer/pat/rotate",
+			bearer
+		}));
+	});
+	server.tool("amba_developer_me", [
+		"Return the developer profile (id, email, name, oauth_providers, avatar_url, github_username)",
+		"for the access_token currently sent as the inbound Bearer. Useful for confirming the agent",
+		"is authenticated as the expected developer before taking destructive actions.",
+		"Errors: 401 if Bearer is missing/invalid, 404 NOT_FOUND if developer was deleted."
+	].join(" "), {}, async () => {
+		const bearer = await apiClient.resolveTokenOrNull();
+		if (!bearer) return jsonResult({
+			status: 401,
+			error: {
+				code: "MISSING_BEARER",
+				message: "No developer access token available. Call amba_developer_signup or amba_developer_login first, then re-issue this MCP request with the returned access_token as the inbound Bearer."
+			}
+		});
+		return passthroughResult(await authFetch(apiClient, {
+			method: "GET",
+			path: "/auth/developer/me",
+			bearer
+		}));
+	});
+}
+//#endregion
+//#region src/index.ts
+/**
+* Register every Amba MCP tool group against the given server, using the
+* given API client. A single `McpServer` instance should only have this
+* called against it once.
+*/
+function registerAllTools(server, apiClient) {
+	registerTools(server, apiClient);
+	registerTools$18(server, apiClient);
+	registerTools$17(server, apiClient);
+	registerTools$16(server, apiClient);
+	registerTools$15(server, apiClient);
+	registerTools$14(server, apiClient);
+	registerTools$13(server, apiClient);
+	registerTools$12(server, apiClient);
+	registerTools$11(server, apiClient);
+	registerTools$10(server, apiClient);
+	registerTools$9(server, apiClient);
+	registerTools$8(server, apiClient);
+	registerTools$7(server, apiClient);
+	registerTools$6(server, apiClient);
+	registerTools$5(server, apiClient);
+	registerTools$4(server, apiClient);
+	registerTools$3(server, apiClient);
+	registerTools$2(server, apiClient);
+	registerTools$1(server, apiClient);
+}
+/**
+* Convenience factory used by the hosted MCP server to build a per-request
+* `ApiClient` whose Bearer token comes from the inbound HTTP `Authorization`
+* header. Equivalent to `new ApiClient({ baseUrl, getToken: async () => token })`.
+*
+* If `token` is omitted the client falls back to `~/.amba/credentials.json`
+* — that path is only useful for tests or local-dev scripts; production
+* hosted-MCP traffic always passes an explicit token.
+*/
+function createApiClient(options) {
+	const opts = {};
+	if (options.baseUrl !== void 0) opts.baseUrl = options.baseUrl;
+	if (options.token !== void 0) {
+		const token = options.token;
+		opts.getToken = async () => token;
+	}
+	return new ApiClient(opts);
+}
+//#endregion
+export { ApiClient, createApiClient, registerAllTools };