@layers/amba-mcp 4.0.5 → 4.0.7

package/dist/index.js

@@ -3,7 +3,7 @@ import { readFile } from "node:fs/promises";
 import { join } from "node:path";
 import { homedir } from "node:os";
 import { z } from "zod";
-import { INTEGRATION_PROVIDERS, integrationConfigSummary } from "@layers/amba-shared";
+import { INTEGRATION_PROVIDERS, getBindingReservationReason, integrationConfigSummary } from "@layers/amba-shared";
 //#region src/auth.ts
 const CREDENTIALS_PATH = join(homedir(), ".amba", "credentials.json");
 async function loadCredentials() {
@@ -310,7 +310,14 @@ const READ_VERBS = new Set([
 	"logs",
 	"query",
 	"aggregate",
-	"results"
+	"results",
+	"explain",
+	"plan",
+	"diff",
+	"drift",
+	"balance",
+	"payouts",
+	"capabilities"
 ]);
 /**
 * Destructive verbs. A tool whose name contains one of these MAY perform
@@ -323,7 +330,8 @@ const DESTRUCTIVE_VERBS = new Set([
 	"remove",
 	"revoke",
 	"drop",
-	"reset"
+	"reset",
+	"ban"
 ]);
 /**
 * Write verbs — mutations that are additive / non-destructive (create a
@@ -345,6 +353,7 @@ const WRITE_VERBS = new Set([
 	"deploy",
 	"send",
 	"add",
+	"attach",
 	"configure",
 	"invoke",
 	"schedule",
@@ -352,6 +361,8 @@ const WRITE_VERBS = new Set([
 	"upload",
 	"rotate",
 	"reprovision",
+	"provision",
+	"payout",
 	"transfer",
 	"pause",
 	"resume",
@@ -367,11 +378,23 @@ const WRITE_VERBS = new Set([
 	"insert",
 	"invite",
 	"register",
+	"define",
+	"map",
+	"adopt",
+	"apply",
 	"purchase",
 	"signup",
 	"login",
 	"refresh",
-	"track"
+	"track",
+	"charge",
+	"refund",
+	"enable",
+	"accept",
+	"generate",
+	"enroll",
+	"request",
+	"clawback"
 ]);
 /**
 * Split a tool name into lowercase verb-candidate tokens, dropping the
@@ -433,7 +456,10 @@ const NOUN_LIKE_VERBS = new Set([
 	"tiers",
 	"analytics",
 	"schedule",
-	"me"
+	"me",
+	"balance",
+	"payouts",
+	"capabilities"
 ]);
 /**
 * The verbs eligible to be a title's leading word: every classification
@@ -624,15 +650,15 @@ function registerPublicTool(server, name, description, schema, handler, aliases
 }
 //#endregion
 //#region src/tools/projects.ts
-function registerTools$35(server, apiClient) {
-	registerTool(server, apiClient, "amba_projects_list", "List all Amba projects owned by the authenticated developer. Returns project id, name, bundle_id, platform, and environment.", {}, async (_, { client }) => {
+function registerTools$42(server, apiClient) {
+	registerTool(server, apiClient, "amba_projects_list", "List all Amba projects owned by the authenticated developer. Returns project id, name, bundle_id, platform, environment, the persisted billing `tier`, and `effective_tier` (the runtime entitlement tier; comped projects are effectively enterprise).", {}, async (_, { client }) => {
 		const result = await client.get("/projects");
 		return { content: [{
 			type: "text",
 			text: JSON.stringify(result, null, 2)
 		}] };
 	}, ["amba_list_projects"]);
-	registerTool(server, apiClient, "amba_projects_get", "Get detailed information about a specific Amba project by its ID, including API keys, integrations, and configuration.", { project_id: z.string().describe("The project ID") }, async ({ project_id }, { client }) => {
+	registerTool(server, apiClient, "amba_projects_get", "Get detailed information about a specific Amba project by its ID, including API keys, integrations, configuration, persisted billing `tier`, and runtime `effective_tier`. Use `effective_tier` for quota/feature decisions; `tier` remains the stored subscription classification.", { project_id: z.string().describe("The project ID") }, async ({ project_id }, { client }) => {
 		const result = await client.get(`/projects/${project_id}`);
 		return { content: [{
 			type: "text",
@@ -731,7 +757,7 @@ function registerTools$35(server, apiClient) {
 }
 //#endregion
 //#region src/tools/push.ts
-function registerTools$34(server, apiClient) {
+function registerTools$41(server, apiClient) {
 	registerTool(server, apiClient, "amba_push_campaigns_create", "Create a new push notification campaign for a project. The campaign starts in \"draft\" status. You can optionally target a segment and schedule delivery.", {
 		project_id: z.string().describe("The project ID"),
 		title: z.string().describe("Push notification title shown to the user"),
@@ -861,7 +887,7 @@ const segmentRulesSchema = z.object({
 	operator: z.enum(["AND", "OR"]).describe("Logical operator combining conditions"),
 	conditions: z.array(segmentConditionSchema).describe("Array of filter conditions")
 });
-function registerTools$33(server, apiClient) {
+function registerTools$40(server, apiClient) {
 	registerTool(server, apiClient, "amba_segments_list", "List user segments for a project. Segments define groups of users based on rules (e.g. \"active in last 7 days\", \"premium users\"). Returns only project-custom segments by default. Pass include_system: true to also include the built-in system segments (e.g. \"all\", \"active_7d\", \"premium\").", {
 		project_id: z.string().describe("The project ID"),
 		include_system: z.boolean().optional().describe("Include built-in system segments in the result. Defaults to false.")
@@ -946,7 +972,7 @@ const configConditionSchema = z.object({
 	percentage: z.number().optional().describe("Percentage rollout (0-100)"),
 	value: z.unknown().describe("Override value for this condition")
 });
-function registerTools$32(server, apiClient) {
+function registerTools$39(server, apiClient) {
 	registerTool(server, apiClient, "amba_remote_configs_list", "List remote-config keys for a project. Returns key, value, value_type, description, conditions, and version per active row. Remote config lets you change app behavior without deploying an update. Returns only project-created config keys by default. Pass include_system: true to also include platform-provided defaults (e.g. app_version_min, maintenance_mode).", {
 		project_id: z.string().describe("The project ID"),
 		include_system: z.boolean().optional().describe("Include platform-provided default config keys in the result. Defaults to false.")
@@ -1024,7 +1050,7 @@ const contentItemSchema = z.object({
 	metadata: z.record(z.unknown()).optional().describe("Arbitrary metadata key-value pairs"),
 	is_premium: z.boolean().optional().describe("Whether this content requires a premium entitlement")
 });
-function registerTools$31(server, apiClient) {
+function registerTools$38(server, apiClient) {
 	registerTool(server, apiClient, "amba_content_libraries_create", "Create a content library for a project. A content library is a collection of content items (tips, quotes, articles) that can be delivered on a schedule to keep users engaged. The library `name` IS the channel handle the in-app SDK uses: `Amba.content.library(name)` reads this library (names are unique). The response echoes it as `channel`.", {
 		project_id: z.string().describe("The project ID"),
 		name: z.string().describe("Library name (e.g. \"Daily Motivation\", \"Workout Tips\")"),
@@ -1189,6 +1215,45 @@ function registerTools$31(server, apiClient) {
 			text: JSON.stringify(result, null, 2)
 		}] };
 	});
+	registerTool(server, apiClient, "amba_content_translations_set", "Set a per-language translation for a content item. The base item carries one title/body in the language it was authored in; this stores a localized title/body for a BCP-47 language tag (e.g. \"es-419\", \"pt-BR\"). In-app, a content read in that language (the SDK forwards the device locale) returns the translated copy, falling back to the base item when no translation exists — so a multi-locale app ships every language from one Amba content library instead of bundling per-language copies in the app binary. This is a PARTIAL update: only the fields you pass are written. Omit a field to leave a previously-stored value untouched (and to share the base item value on first create). Pass an explicit `null` for `title` or `body` to CLEAR a previously-stored translated value so that field falls back to the base item again.", {
+		project_id: z.string().describe("The project ID"),
+		item_id: z.string().describe("The content item ID to translate"),
+		language: z.string().describe("BCP-47 language tag for this translation (e.g. \"en\", \"es-419\", \"pt-BR\")"),
+		title: z.string().nullable().optional().describe("Translated title. Omit to leave the existing value untouched (shares the base item title on first create); pass null to clear a previously-stored title so it falls back to the base item."),
+		body: z.string().nullable().optional().describe("Translated body. Omit to leave the existing value untouched (shares the base item body on first create); pass null to clear a previously-stored body so it falls back to the base item."),
+		metadata: z.record(z.unknown()).optional().describe("Optional per-language metadata (e.g. locale-specific media URL)")
+	}, async ({ project_id, item_id, language, title, body, metadata }, { client }) => {
+		const payload = {};
+		if (title !== void 0) payload.title = title;
+		if (body !== void 0) payload.body = body;
+		if (metadata !== void 0) payload.metadata = metadata;
+		const result = await client.put(`/projects/${project_id}/content/items/${item_id}/translations/${encodeURIComponent(language)}`, payload);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	registerTool(server, apiClient, "amba_content_translations_list", "List every per-language translation for a content item (one row per language). Use this to see which locales an item is already translated into before adding more, or to audit translation coverage across a content library.", {
+		project_id: z.string().describe("The project ID"),
+		item_id: z.string().describe("The content item ID")
+	}, async ({ project_id, item_id }, { client }) => {
+		const result = await client.get(`/projects/${project_id}/content/items/${item_id}/translations`);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	registerTool(server, apiClient, "amba_content_translations_delete", "Delete a single per-language translation for a content item. After deletion, in-app reads in that language fall back to the base item.", {
+		project_id: z.string().describe("The project ID"),
+		item_id: z.string().describe("The content item ID"),
+		language: z.string().describe("BCP-47 language tag of the translation to delete")
+	}, async ({ project_id, item_id, language }, { client }) => {
+		const result = await client.delete(`/projects/${project_id}/content/items/${item_id}/translations/${encodeURIComponent(language)}`);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
 	registerTool(server, apiClient, "amba_content_bulk_import", "Bulk-import multiple content items into a library in a single transactional call. Each item is upsert-on-key within the library. Useful for seed data and for migrating from external content sources.", {
 		project_id: z.string().describe("The project ID"),
 		library_id: z.string().describe("The content library ID"),
@@ -1203,7 +1268,7 @@ function registerTools$31(server, apiClient) {
 }
 //#endregion
 //#region src/tools/streaks.ts
-function registerTools$30(server, apiClient) {
+function registerTools$37(server, apiClient) {
 	registerTool(server, apiClient, "amba_streaks_create", "Create a streak definition for a project. Streaks track consecutive user engagement (e.g. daily logins, workout completions). Supports configurable periods, grace periods, and freeze mechanics.", {
 		project_id: z.string().describe("The project ID"),
 		key: z.string().regex(/^[a-z0-9_-]{1,64}$/).optional().describe("Stable identifier used by the SDK to qualify a streak without knowing its UUID: `Amba.streaks.qualify(\"daily_login\")`. Lowercase letters, digits, underscore, hyphen, 1-64 characters. Immutable after creation — changing it breaks live SDK calls. When omitted the server derives one from `name`."),
@@ -1295,8 +1360,8 @@ function registerTools$30(server, apiClient) {
 //#endregion
 //#region src/tools/integrations.ts
 const providerEnum = z.enum(INTEGRATION_PROVIDERS);
-function registerTools$29(server, apiClient) {
-	registerTool(server, apiClient, "amba_integrations_configure", "Configure (create or replace) a third-party integration for a project. Supported providers: \"apns\" (Apple Push), \"fcm\" (Firebase Cloud Messaging), \"revenuecat\" (subscription management), \"superwall\" (paywall management). Each provider requires specific config fields. Push credentials (.p8 / service-account JSON) are passed inline here and stored server-side automatically — no separate secrets step.", {
+function registerTools$36(server, apiClient) {
+	registerTool(server, apiClient, "amba_integrations_configure", "Configure (create or replace) a third-party integration for a project. Supported providers: \"apns\" (Apple Push), \"fcm\" (Firebase Cloud Messaging), \"revenuecat\" (subscription management), \"superwall\" (paywall management), \"stripe_billing\" (web subscriptions through the app's own Stripe Billing account — web purchases grant the same Amba entitlements as mobile ones; the response includes the webhook_url to register in the Stripe dashboard), \"google_play\" (a Play Console service account with the Android Publisher permission — lets `amba_monetization_apply` create one-time Play products directly, price included). Each provider requires specific config fields. Push credentials (.p8 / service-account JSON) are passed inline here and stored server-side automatically — no separate secrets step.", {
 		project_id: z.string().describe("The project ID"),
 		provider: providerEnum.describe("Integration provider name"),
 		config: z.record(z.unknown()).describe("Provider-specific configuration. " + integrationConfigSummary())
@@ -1365,7 +1430,7 @@ const PERIOD_DAYS = {
 	"30d": "30",
 	"90d": "90"
 };
-function registerTools$28(server, apiClient) {
+function registerTools$35(server, apiClient) {
 	registerTool(server, apiClient, "amba_analytics_get", "Get daily analytics for a project. Returns per-day event counts and unique-user counts for the requested window, plus totals. Use this to verify that end-to-end event tracking is working after seeding and testing.", {
 		project_id: z.string().describe("The project ID"),
 		period: z.enum([
@@ -1438,7 +1503,7 @@ function passthroughResult(result) {
 }
 //#endregion
 //#region src/tools/users.ts
-function registerTools$27(server, apiClient) {
+function registerTools$34(server, apiClient) {
 	registerTool(server, apiClient, "amba_users_list", "List app users for a project. Supports pagination with offset and limit, plus optional search (matches email / external_id / display_name with ILIKE) and segment filter. Returns user profiles including external_id, email, display_name, properties, and activity timestamps.", {
 		project_id: z.string().describe("The project ID"),
 		limit: z.number().optional().describe("Maximum number of users to return (default 50)"),
@@ -1885,7 +1950,7 @@ final dailyLimit = await Amba.config.get<int>('daily_limit', defaultValue: 10);
 final streak = await Amba.streaks.get('daily_login');
 print('Current streak: \${streak.currentCount}');`
 };
-function registerTools$26(server, apiClient) {
+function registerTools$33(server, apiClient) {
 	registerTool(server, apiClient, "amba_sdk_get_setup_instructions", "Get platform-specific code snippets and setup instructions for integrating the Amba client SDK into a mobile app. Supports iOS (Swift), Android (Kotlin), React Native, Expo, and Flutter.", { platform: z.enum([
 		"ios",
 		"android",
@@ -1970,7 +2035,7 @@ const criteriaSchema = z.object({
 	property_key: z.string().optional().describe("User property key (required for property_value type)"),
 	target_value: z.number().describe("Target value to unlock the achievement")
 });
-function registerTools$25(server, apiClient) {
+function registerTools$32(server, apiClient) {
 	registerTool(server, apiClient, "amba_achievements_create", "Create an achievement/badge definition. Achievements unlock automatically when users meet the criteria (e.g. track 5 workouts, reach a 7-day streak, earn 5000 XP). Can optionally award bonus XP on unlock.", {
 		project_id: z.string().describe("The project ID"),
 		key: z.string().describe("Unique key for this achievement (e.g. \"first_workout\", \"streak_master_7\")"),
@@ -2075,7 +2140,7 @@ function registerTools$25(server, apiClient) {
 }
 //#endregion
 //#region src/tools/challenges.ts
-function registerTools$24(server, apiClient) {
+function registerTools$31(server, apiClient) {
 	registerTool(server, apiClient, "amba_challenges_create", "Create a time-limited challenge. Challenges are events that run between start_at and end_at, where users try to reach a goal (e.g. track 10 workouts this week, earn 500 XP in 3 days). Can reward XP and/or unlock an achievement on completion.", {
 		project_id: z.string().describe("The project ID"),
 		name: z.string().describe("Challenge name (e.g. \"7-Day Fitness Sprint\", \"XP Weekend Blitz\")"),
@@ -2186,7 +2251,7 @@ function registerTools$24(server, apiClient) {
 }
 //#endregion
 //#region src/tools/economy.ts
-function registerTools$23(server, apiClient) {
+function registerTools$30(server, apiClient) {
 	registerTool(server, apiClient, "amba_currencies_create", "Create a virtual currency for a project. Currencies can be soft (earned through gameplay) or premium (purchased with real money). Supports auto-recharge for time-gated mechanics like hearts/energy.", {
 		project_id: z.string().describe("The project ID"),
 		code: z.string().describe("Unique currency code (e.g. \"gold\", \"gems\", \"hearts\")"),
@@ -2443,12 +2508,12 @@ function registerTools$23(server, apiClient) {
 		app_user_id: z.string().describe("The app_user UUID to grant the entitlement to"),
 		entitlement_id: z.string().describe("Entitlement identifier (e.g. \"premium\", \"pro_annual\"). Required."),
 		is_active: z.boolean().optional().describe("Whether the entitlement is active. Defaults to true on grant; pass false to revoke."),
-		product_id: z.string().nullable().optional().describe("Store product identifier (e.g. \"stripe_premium_yr\"). Pass null to clear."),
+		product_id: z.string().nullable().optional().describe("Product identifier this grant is for (e.g. \"pro_yearly\"). When it matches a declared product (amba_products_create), the product's mapped entitlements are granted too. Pass null to clear."),
 		store: z.enum([
 			"app_store",
 			"play_store",
-			"stripe"
-		]).nullable().optional().describe("Originating store. Pass null to clear."),
+			"web"
+		]).nullable().optional().describe("Originating store (\"web\" covers any non-native checkout). Pass null to clear."),
 		purchase_date: z.string().nullable().optional().describe("ISO-8601 purchase timestamp. Pass null to clear."),
 		expiration_date: z.string().nullable().optional().describe("ISO-8601 expiration timestamp. Pass null to clear (e.g. for a lifetime grant)."),
 		period_type: z.enum([
@@ -2472,6 +2537,99 @@ function registerTools$23(server, apiClient) {
 			text: JSON.stringify(result, null, 2)
 		}] };
 	});
+	registerTool(server, apiClient, "amba_entitlements_define", ["Define a canonical entitlement your app gates features on with `Amba.entitlements.has(\"pro\")`. Declaring it lets every grant path validate against a known set instead of free-typed strings, and lets you map products to it.", "This is the durable abstraction: features check the entitlement, never a product or a store — so you can change how it is sold without touching app code."].join(" "), {
+		project_id: z.string().describe("The project ID"),
+		key: z.string().describe("Stable entitlement key (e.g. \"pro\", \"premium_content\"). Required."),
+		display_name: z.string().optional().describe("Human-readable name for dashboards."),
+		description: z.string().optional().describe("What this entitlement unlocks."),
+		metadata: z.record(z.unknown()).optional().describe("Opaque metadata object.")
+	}, async ({ project_id, key, display_name, description, metadata }, { client }) => {
+		const payload = { key };
+		if (display_name !== void 0) payload.display_name = display_name;
+		if (description !== void 0) payload.description = description;
+		if (metadata !== void 0) payload.metadata = metadata;
+		const result = await client.post(`/projects/${project_id}/subscriptions/entitlements`, payload);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	registerTool(server, apiClient, "amba_products_create", ["Declare a sellable subscription product and the entitlement it grants. `store_product_refs` maps each store to its own identifier ({ \"app_store\": \"com.app.pro.yearly\", \"play_store\": \"pro_yearly\", \"web\": \"price_123\" }) so one Amba product resolves on whichever store a purchase came from.", "When `grants_entitlement_id` is set, an in-app purchase OR a server grant carrying this product unlocks that entitlement automatically — that resolution is what lets every purchase path (mobile stores, web billing, server grants) land on the same entitlement set."].join(" "), {
+		project_id: z.string().describe("The project ID"),
+		product_id: z.string().describe("Stable, neutral product key (e.g. \"pro_yearly\"). Required."),
+		grants_entitlement_id: z.string().optional().describe("The entitlement key this product unlocks (must be defined first)."),
+		display_name: z.string().optional().describe("Human-readable product name."),
+		description: z.string().optional().describe("Marketing description for the paywall."),
+		product_type: z.enum([
+			"subscription",
+			"consumable",
+			"non_consumable",
+			"non_renewing"
+		]).optional().describe("Product type (default \"subscription\")."),
+		store_product_refs: z.record(z.string()).optional().describe("Map of store id → that store's product identifier."),
+		trial_period_days: z.number().int().nonnegative().optional().describe("Free-trial length in days (display hint)."),
+		duration: z.string().optional().describe("ISO-8601 duration display hint (e.g. \"P1M\", \"P1Y\")."),
+		metadata: z.record(z.unknown()).optional().describe("Opaque metadata object.")
+	}, async ({ project_id, product_id, grants_entitlement_id, display_name, description, product_type, store_product_refs, trial_period_days, duration, metadata }, { client }) => {
+		const payload = { product_id };
+		if (grants_entitlement_id !== void 0) payload.grants_entitlement_id = grants_entitlement_id;
+		if (display_name !== void 0) payload.display_name = display_name;
+		if (description !== void 0) payload.description = description;
+		if (product_type !== void 0) payload.product_type = product_type;
+		if (store_product_refs !== void 0) payload.store_product_refs = store_product_refs;
+		if (trial_period_days !== void 0) payload.trial_period_days = trial_period_days;
+		if (duration !== void 0) payload.duration = duration;
+		if (metadata !== void 0) payload.metadata = metadata;
+		const result = await client.post(`/projects/${project_id}/subscriptions/products`, payload);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	registerTool(server, apiClient, "amba_entitlements_map_product", "Map a product to an (additional) entitlement it unlocks. Products can unlock more than one entitlement (e.g. a bundle); this adds to the set beyond the product's primary grants_entitlement_id. Both the product and the entitlement must already be declared.", {
+		project_id: z.string().describe("The project ID"),
+		product_id: z.string().describe("The declared product id."),
+		entitlement_id: z.string().describe("The declared entitlement key to also grant.")
+	}, async ({ project_id, product_id, entitlement_id }, { client }) => {
+		const result = await client.post(`/projects/${project_id}/subscriptions/products/${product_id}/entitlements`, { entitlement_id });
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	registerTool(server, apiClient, "amba_offerings_create", ["Create (or replace) a subscription offering — the named set of packages your paywall renders, fetched at runtime with `Amba.offerings()`. Each package surfaces one product at a position (e.g. $monthly, $annual).", "Set is_current=true to make this the default offering the SDK returns; exactly one offering is current at a time. The response is fully provider-neutral."].join(" "), {
+		project_id: z.string().describe("The project ID"),
+		offering_id: z.string().describe("Stable offering id (e.g. \"default\", \"holiday_2026\")."),
+		display_name: z.string().optional().describe("Human-readable name."),
+		description: z.string().optional().describe("Internal description."),
+		is_current: z.boolean().optional().describe("Make this the default offering the SDK returns (default false)."),
+		packages: z.array(z.object({
+			package_id: z.string().describe("Package id unique within the offering (e.g. \"$annual\")."),
+			product_id: z.string().optional().describe("The product this package surfaces (by product_id)."),
+			position: z.number().int().nonnegative().optional().describe("Display order (lower first)."),
+			metadata: z.record(z.unknown()).optional().describe("Opaque package metadata.")
+		})).optional().describe("The packages in this offering (replaces the existing set)."),
+		metadata: z.record(z.unknown()).optional().describe("Opaque offering metadata.")
+	}, async ({ project_id, offering_id, display_name, description, is_current, packages, metadata }, { client }) => {
+		const payload = { offering_id };
+		if (display_name !== void 0) payload.display_name = display_name;
+		if (description !== void 0) payload.description = description;
+		if (is_current !== void 0) payload.is_current = is_current;
+		if (packages !== void 0) payload.packages = packages;
+		if (metadata !== void 0) payload.metadata = metadata;
+		const result = await client.post(`/projects/${project_id}/subscriptions/offerings`, payload);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	registerTool(server, apiClient, "amba_offerings_list", "List the project's subscription offerings with their packages and the product behind each — the same provider-neutral shape the client SDK's `offerings()` returns.", { project_id: z.string().describe("The project ID") }, async ({ project_id }, { client }) => {
+		const result = await client.get(`/projects/${project_id}/subscriptions/offerings`);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
 	registerTool(server, apiClient, "amba_users_get_inventory", "View a user's inventory including all owned items and quantities.", {
 		project_id: z.string().describe("The project ID"),
 		app_user_id: z.string().describe("The user ID to look up")
@@ -2776,8 +2934,81 @@ function registerTools$23(server, apiClient) {
 	});
 }
 //#endregion
+//#region src/tools/monetization.ts
+const objectTypeSchema = z.enum([
+	"entitlement",
+	"product",
+	"offering",
+	"package",
+	"paywall"
+]);
+function registerTools$29(server, apiClient) {
+	registerTool(server, apiClient, "amba_monetization_plan", "Preview the monetization plan for a project: a three-way diff between the declared subscription config (entitlements, products, offerings, packages, paywalls), the last-adopted baseline, and the live config in the connected provider (RevenueCat). Returns the op-list an apply WOULD perform (create/update/archive/attach/detach/set-current — including store-product creation steps for declared products that do not exist upstream yet), a store-floor preflight (blocking gaps: dangling product references, or no provider app connected for a store), a `human_floor` checklist (store-side steps no API can do — store SKUs outside the App Store, pricing, agreements/banking/tax, review — each with its exact console location, ready to relay to the developer), and any out-of-band drift. READ-ONLY — computes the plan; applies nothing. Use this before changing monetization so you can see exactly what differs.", { project_id: z.string().describe("The project ID") }, async ({ project_id }, { client }) => {
+		const result = await client.get(`/projects/${project_id}/monetization/plan`);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	registerTool(server, apiClient, "amba_monetization_drift", "Show only the out-of-band drift for a project's monetization: Amba-managed subscription objects whose live state in the provider (RevenueCat) has changed since Amba last adopted them. READ-ONLY — reports drift; reconciles nothing. Use this to detect when someone edited the subscription config directly in the provider dashboard outside the declarative flow.", { project_id: z.string().describe("The project ID") }, async ({ project_id }, { client }) => {
+		const result = await client.get(`/projects/${project_id}/monetization/drift`);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	registerTool(server, apiClient, "amba_monetization_export", "Snapshot a project's LIVE subscription monetization config (from the connected provider, RevenueCat) into a declarative bundle: entitlements, products, offerings, packages, and paywalls keyed by their stable identifiers. READ-ONLY. Use this to capture the current config as Infrastructure-as-Code you can review, version-control, and promote between projects.", { project_id: z.string().describe("The project ID") }, async ({ project_id }, { client }) => {
+		const result = await client.get(`/projects/${project_id}/monetization/export`);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	registerTool(server, apiClient, "amba_monetization_definitions_list", "List the project's current DECLARED monetization definitions (the desired-state entitlements, products, offerings, packages, and paywalls stored in Amba). READ-ONLY. This is the authored Infrastructure-as-Code that `amba_monetization_plan` diffs against the live provider config.", { project_id: z.string().describe("The project ID") }, async ({ project_id }, { client }) => {
+		const result = await client.get(`/projects/${project_id}/monetization/definitions`);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	registerTool(server, apiClient, "amba_monetization_apply", "Apply the declared monetization config to the connected provider (RevenueCat). DURABLE + ASYNC: this starts the apply and returns an `operation_id` — poll it with `amba_operations_get` until `succeeded` | `failed` (writes are paced against the provider's rate limits, so large plans take a few minutes; the apply survives restarts and retries safely via per-op idempotency keys). Additive ops apply automatically: CREATE entitlements/offerings/packages/paywall-DRAFTS, ATTACH products to new packages/entitlements, update display metadata. DESTRUCTIVE ops (detach a product, archive an entitlement/offering/product, remove a package) are GATED behind a confirmation of the exact plan_hash: pass `confirm` = plan_hash up front, or call apply without it to get `confirm_required: true` (the apply then WAITS for confirmation — re-call apply with `confirm` to approve that pending apply; a confirmation that no longer matches the plan is rejected and nothing destructive runs). STORE-PRODUCT steps go further: declared products missing upstream are CREATED through the provider (registered with RevenueCat, and — with store_metadata.push_to_store — created as REAL store products: App Store products in App Store Connect when they declare duration + subscription_group_name; Google Play ONE-TIME products in Google Play directly when they declare play_price_micros + play_currency, with the price set as part of the create — connect a `google_play` integration first), but these store catalog writes NEVER run off an up-front `confirm`: the apply always waits, you review the pending store steps plus the returned `human_floor` checklist (App Store pricing, agreements/banking/tax, review — with exact console locations), then approve by re-calling apply with `confirm`. Setting the current/default offering, publishing a paywall live, store SKUs apply can't create (Play subscriptions + other stores), and App Store pricing are NOT API-driven — they're returned in `refused`/`human_floor` with the exact dashboard step. Pass the `plan_hash` from a fresh `amba_monetization_plan`; apply refuses a stale plan_hash (re-plan), hard-fails on an unresolvable store reference, enforces the ordering invariant (never archives the live current offering; never detaches a product a live customer resolves unless `allow_detach_live`), reads back every write, and STOPS on the first failure without rolling back.", {
+		project_id: z.string().describe("The project ID"),
+		plan_hash: z.string().describe("The plan_hash returned by a fresh amba_monetization_plan. Apply refuses if the provider drifted off this hash."),
+		confirm: z.string().optional().describe("Set to the SAME plan_hash to confirm and EXECUTE the gated destructive ops (detach/archive/remove). When a plan has gated ops and confirm is omitted, the apply waits for confirmation (re-call apply with confirm to approve it); plans without gated ops apply without confirmation. Store-product creation steps ALWAYS wait — an up-front confirm never auto-runs a store catalog write; approve the started apply by re-calling with confirm."),
+		allow_detach_live: z.boolean().optional().describe("Accept detaching a product a live customer currently resolves. Off by default (the apply refuses such a detach to protect live purchases)."),
+		reconcile: z.enum(["amba", "adopt"]).optional().describe("Out-of-band drift mode: 'amba' (default) reverts the provider to the declared config on confirm; 'adopt' pulls the live change back into the declared config instead.")
+	}, async ({ project_id, plan_hash, confirm, allow_detach_live, reconcile }, { client }) => {
+		const body = { plan_hash };
+		if (confirm !== void 0) body["confirm"] = confirm;
+		if (allow_detach_live !== void 0) body["allow_detach_live"] = allow_detach_live;
+		if (reconcile !== void 0) body["reconcile"] = reconcile;
+		const result = await client.post(`/projects/${project_id}/monetization/apply`, body);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	registerTool(server, apiClient, "amba_monetization_adopt", "Adopt a project's live subscription config as Amba's managed baseline: writes the matching declared definitions AND records the current live state as the adopted baseline, so the NEXT plan is a clean no-op and future provider-side edits surface as drift. This writes ONLY Amba's own state — it NEVER changes the provider (RevenueCat). Idempotent. Pass adopt_all: true to adopt everything, or a specific objects list. Use this to bring an existing project's monetization under declarative management.", {
+		project_id: z.string().describe("The project ID"),
+		adopt_all: z.boolean().optional().describe("Adopt every live object. Mutually sufficient with `objects`."),
+		objects: z.array(z.object({
+			object_type: objectTypeSchema.describe("The kind of object to adopt"),
+			identifier: z.string().describe("The object stable identifier (provider id)")
+		})).optional().describe("Specific objects to adopt. Provide this OR adopt_all.")
+	}, async ({ project_id, adopt_all, objects }, { client }) => {
+		const body = {};
+		if (adopt_all !== void 0) body["adopt_all"] = adopt_all;
+		if (objects !== void 0) body["objects"] = objects;
+		const result = await client.post(`/projects/${project_id}/monetization/adopt`, body);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+}
+//#endregion
 //#region src/tools/leaderboards.ts
-function registerTools$22(server, apiClient) {
+function registerTools$28(server, apiClient) {
 	registerTool(server, apiClient, "amba_leaderboards_create", "Create a leaderboard definition. Leaderboards rank users by XP, streak length, or a custom metric. Supports all-time, daily, weekly, and monthly periods with configurable max entries. The returned `key` (which equals `name`) is the exact value the in-app SDK passes to `Amba.leaderboards.getEntries(key)` / `getRank(key)`.", {
 		project_id: z.string().describe("The project ID"),
 		name: z.string().describe("Leaderboard name (e.g. \"Top XP Earners\", \"Weekly Streak Leaders\")"),
@@ -2892,7 +3123,7 @@ function registerTools$22(server, apiClient) {
 * rollover (the scheduled weekly rollover) and score live off `xp_awarded`
 * engagement events.
 */
-function registerTools$21(server, apiClient) {
+function registerTools$27(server, apiClient) {
 	registerTool(server, apiClient, "amba_leagues_create", "Create a league tier (e.g. \"Bronze\", tier_order=1). Leagues are the promote/demote ladder: each week users are grouped into cohorts of `cohort_size`, the top `promote_count` move up a tier and the bottom `demote_count` move down. Create one league per tier (lowest tier_order = entry tier). Members are assigned by the weekly rollover, not at create time.", {
 		project_id: z.string().describe("The project ID"),
 		name: z.string().describe("League tier name, e.g. \"Bronze\", \"Silver\", \"Gold\""),
@@ -2955,7 +3186,7 @@ function registerTools$21(server, apiClient) {
 }
 //#endregion
 //#region src/tools/platform.ts
-function registerTools$20(server, apiClient) {
+function registerTools$26(server, apiClient) {
 	registerTool(server, apiClient, "amba_onboarding_create", "Create an onboarding flow for a project. Onboarding flows define step-by-step experiences for new users (e.g. welcome screens, permission prompts, feature tours).", {
 		project_id: z.string().describe("The project ID"),
 		name: z.string().describe("Flow name (e.g. \"Welcome Flow\", \"Premium Onboarding\")"),
@@ -3230,6 +3461,83 @@ function registerTools$20(server, apiClient) {
 			text: JSON.stringify(result, null, 2)
 		}] };
 	});
+	registerTool(server, apiClient, "amba_media_catalogs_create", "Create a curated media catalog — a named, slug-addressable bundle of media assets your app fetches in one call. Reach for this when an app needs a stable, ordered set of public images/assets (onboarding illustrations, a sticker pack, home-screen heroes) instead of hard-coding asset URLs client-side. Items are added separately with amba_media_catalogs_add_item. `is_public` (default true) gates whether end-user apps can read it via Amba.media.catalog(slug); set it false for drafts.", {
+		project_id: z.string().describe("The project ID"),
+		slug: z.string().describe("URL-safe handle your app reads the catalog by (lowercase, digits, hyphens; e.g. \"onboarding-art\"). Unique per project."),
+		name: z.string().describe("Human-readable catalog name (e.g. \"Onboarding Illustrations\")"),
+		description: z.string().optional().describe("Optional description of what the catalog holds"),
+		is_public: z.boolean().optional().describe("Whether end-user apps can read this catalog by slug. Defaults to true."),
+		metadata: z.record(z.unknown()).optional().describe("Custom metadata")
+	}, async ({ project_id, slug, name, description, is_public, metadata }, { client }) => {
+		const payload = {
+			slug,
+			name
+		};
+		if (description !== void 0) payload.description = description;
+		if (is_public !== void 0) payload.is_public = is_public;
+		if (metadata !== void 0) payload.metadata = metadata;
+		return jsonResult$1(await client.post(`/projects/${project_id}/media/catalogs`, payload));
+	});
+	registerTool(server, apiClient, "amba_media_catalogs_list", "List media catalogs for a project, each with its item count. Use this to see which curated asset bundles exist before adding to or reading one.", {
+		project_id: z.string().describe("The project ID"),
+		limit: z.number().optional().describe("Max results to return (default 50)"),
+		offset: z.number().optional().describe("Offset for pagination (default 0)")
+	}, async ({ project_id, limit, offset }, { client }) => {
+		const query = {};
+		if (limit !== void 0) query.limit = String(limit);
+		if (offset !== void 0) query.offset = String(offset);
+		return jsonResult$1(await client.get(`/projects/${project_id}/media/catalogs`, query));
+	});
+	registerTool(server, apiClient, "amba_media_catalogs_get", "Get a single media catalog and its ordered items, each resolved to a stable public asset URL. Use this to inspect exactly what an app will receive when it reads the catalog by slug.", {
+		project_id: z.string().describe("The project ID"),
+		catalog_id: z.string().describe("The catalog ID")
+	}, async ({ project_id, catalog_id }, { client }) => {
+		return jsonResult$1(await client.get(`/projects/${project_id}/media/catalogs/${catalog_id}`));
+	});
+	registerTool(server, apiClient, "amba_media_catalogs_update", "Update a media catalog's name, slug, description, visibility, or metadata. Flip `is_public` to publish a draft catalog or pull one back to internal.", {
+		project_id: z.string().describe("The project ID"),
+		catalog_id: z.string().describe("The catalog ID"),
+		slug: z.string().optional().describe("New URL-safe slug (lowercase, digits, hyphens)"),
+		name: z.string().optional().describe("New catalog name"),
+		description: z.string().optional().describe("New description"),
+		is_public: z.boolean().optional().describe("Whether end-user apps can read this catalog"),
+		metadata: z.record(z.unknown()).optional().describe("Replacement metadata object")
+	}, async ({ project_id, catalog_id, slug, name, description, is_public, metadata }, { client }) => {
+		const payload = {};
+		if (slug !== void 0) payload.slug = slug;
+		if (name !== void 0) payload.name = name;
+		if (description !== void 0) payload.description = description;
+		if (is_public !== void 0) payload.is_public = is_public;
+		if (metadata !== void 0) payload.metadata = metadata;
+		return jsonResult$1(await client.patch(`/projects/${project_id}/media/catalogs/${catalog_id}`, payload));
+	});
+	registerTool(server, apiClient, "amba_media_catalogs_delete", "Delete a media catalog. This removes the catalog and its item membership; the underlying media assets are NOT deleted (they stay in storage and any other catalog).", {
+		project_id: z.string().describe("The project ID"),
+		catalog_id: z.string().describe("The catalog ID")
+	}, async ({ project_id, catalog_id }, { client }) => {
+		return jsonResult$1(await client.delete(`/projects/${project_id}/media/catalogs/${catalog_id}`));
+	});
+	registerTool(server, apiClient, "amba_media_catalogs_add_item", "Add a media asset to a catalog. The asset keeps its canonical public URL — a catalog is a curated reference, not a copy. Set `position` to control where it lands in the catalog's order, and `caption` for a per-catalog label.", {
+		project_id: z.string().describe("The project ID"),
+		catalog_id: z.string().describe("The catalog ID"),
+		media_id: z.string().describe("ID of the media asset to add (from amba_media_list)"),
+		position: z.number().optional().describe("Sort position within the catalog (lower comes first). Defaults to 0."),
+		caption: z.string().optional().describe("Optional per-catalog caption for this asset"),
+		metadata: z.record(z.unknown()).optional().describe("Custom metadata for this catalog item")
+	}, async ({ project_id, catalog_id, media_id, position, caption, metadata }, { client }) => {
+		const payload = { media_id };
+		if (position !== void 0) payload.position = position;
+		if (caption !== void 0) payload.caption = caption;
+		if (metadata !== void 0) payload.metadata = metadata;
+		return jsonResult$1(await client.post(`/projects/${project_id}/media/catalogs/${catalog_id}/items`, payload));
+	});
+	registerTool(server, apiClient, "amba_media_catalogs_remove_item", "Remove a media asset from a catalog. The asset itself is untouched — only its membership in this catalog is removed.", {
+		project_id: z.string().describe("The project ID"),
+		catalog_id: z.string().describe("The catalog ID"),
+		media_id: z.string().describe("ID of the media asset to remove from the catalog")
+	}, async ({ project_id, catalog_id, media_id }, { client }) => {
+		return jsonResult$1(await client.delete(`/projects/${project_id}/media/catalogs/${catalog_id}/items/${media_id}`));
+	});
 	registerTool(server, apiClient, "amba_moderation_queue_get", "Get the content moderation queue for a project. Shows reported content pending review.", {
 		project_id: z.string().describe("The project ID"),
 		status: z.enum([
@@ -3531,7 +3839,7 @@ function registerTools$20(server, apiClient) {
 }
 //#endregion
 //#region src/tools/social.ts
-function registerTools$19(server, apiClient) {
+function registerTools$25(server, apiClient) {
 	registerTool(server, apiClient, "amba_friendships_get_stats", "Get friendship statistics for a project. Returns total friendships, pending requests, accepted friendships, and blocked count.", { project_id: z.string().describe("The project ID") }, async ({ project_id }, { client }) => {
 		const result = await client.get(`/projects/${project_id}/friends/stats`);
 		return { content: [{
@@ -3856,7 +4164,7 @@ function registerTools$19(server, apiClient) {
 }
 //#endregion
 //#region src/tools/xp.ts
-function registerTools$18(server, apiClient) {
+function registerTools$24(server, apiClient) {
 	registerTool(server, apiClient, "amba_xp_rules_create", "Create an XP rule that auto-awards XP when a matching engagement event is tracked. For example, award 50 XP every time a user completes a workout, with optional daily caps and cooldowns.", {
 		project_id: z.string().describe("The project ID"),
 		name: z.string().describe("Rule name (e.g. \"Workout Completed\", \"Daily Login Bonus\")"),
@@ -3979,7 +4287,7 @@ function registerTools$18(server, apiClient) {
 }
 //#endregion
 //#region src/tools/events.ts
-function registerTools$17(server, apiClient) {
+function registerTools$23(server, apiClient) {
 	registerTool(server, apiClient, "amba_events_list", "List engagement events for a project (most recent first) with cursor pagination on (occurred_at, id). Defaults to the last 24 hours when `since` is omitted. Pass `next_cursor` from a previous page back as `cursor` to continue.", {
 		project_id: z.string().describe("The project ID"),
 		since: z.string().optional().describe("ISO-8601 lower bound for occurred_at. Defaults to 24h ago."),
@@ -4019,6 +4327,22 @@ function registerTools$17(server, apiClient) {
 			text: JSON.stringify(result, null, 2)
 		}] };
 	});
+	registerTool(server, apiClient, "amba_events_explain", [
+		"Dry-run an event against the rule engine: given a candidate event (name + properties + optional user), return which rules WOULD match and what each WOULD produce — XP awards, currency grants, feed items, streak qualification, and webhook deliveries — WITHOUT firing the event or committing any side effect. Pure read-only preview.",
+		"Use it to answer \"what happens if I track this?\" before you wire up the call: see the exact XP delta, currency amount, feed item, and webhook destinations a given event would trigger, so you can confirm your rules are configured the way you intend.",
+		"Pass `user_id` to also preview per-user gating (daily limits, cooldowns, balance caps) — the response notes when an effect would currently be suppressed or reduced. Omit it for the base, user-independent match. Nothing is written either way.",
+		"Returns `{data: {matched: [{rule_type, rule_id, name, would, note?}], evaluated_surfaces, unmatched_reason_samples?}}`. An empty `matched` with a reason sample means no rule targets this event yet."
+	].join(" "), {
+		project_id: z.string().describe("The project ID"),
+		event_name: z.string().describe("Candidate event name to evaluate (e.g. \"lesson_completed\")."),
+		properties: z.record(z.unknown()).optional().describe("Candidate event properties (e.g. {amount: 5}). Read by property-scaled grant rules."),
+		user_id: z.string().optional().describe("Optional app_user UUID. When supplied, the preview also reports per-user gating (daily limit / cooldown / balance cap) without mutating anything.")
+	}, async ({ project_id, event_name, properties, user_id }, { client }) => {
+		const event = { name: event_name };
+		if (properties !== void 0) event.properties = properties;
+		if (user_id !== void 0) event.user_id = user_id;
+		return jsonResult$1(await client.post(`/projects/${project_id}/events/explain`, { event }));
+	});
 	registerTool(server, apiClient, "amba_events_track", [
 		"Track an engagement event on behalf of a user from the server side — the one call that drives the whole reactive pipeline: streak qualification, currency grant rules, XP awards, achievements, segment membership, and any webhooks subscribed to the event all fan out from this single write.",
 		"Use it to dogfood the event→XP→achievement loop without a device: emit the exact event your app will (e.g. \"mission_completed\" with {xp: 100}) and watch the downstream effects land, then read them back with amba_users_get_xp / amba_achievements_list.",
@@ -4054,7 +4378,7 @@ function registerTools$17(server, apiClient) {
 }
 //#endregion
 //#region src/tools/event-catalog.ts
-function registerTools$16(server, apiClient) {
+function registerTools$22(server, apiClient) {
 	registerTool(server, apiClient, "amba_events_catalog", "Discover every event you can subscribe a webhook to — both APP events (inside your app: users, gamification, economy, social, content) and CONTROL-plane lifecycle events (about the project itself: provisioning, deploys, domains, billing). Returns each event's type, plane, payload example, and status (`live` = emitted today, `planned` = catalogued, not yet wired). Production pattern: after standing up a project, call this, then subscribe to the lifecycle events you care about (e.g. `domain.registered`, `site.deploy.completed`) with amba_control_webhooks_create and to app events with amba_webhooks_create. Subscriptions match an exact name, a namespace wildcard (`economy.*`), or all (`*`). Pass plane to filter.", {
 		project_id: z.string().describe("The project ID"),
 		plane: z.enum(["app", "control"]).optional().describe("Filter to one plane. Omit for both.")
@@ -4124,7 +4448,7 @@ const funnelStepSchema = z.object({
 	event: z.string().describe("Event name to match (engagement event_name)."),
 	filters: z.array(funnelFilterSchema).optional().describe("Optional property predicates, ANDed together, that an event must satisfy.")
 });
-function registerTools$15(server, apiClient) {
+function registerTools$21(server, apiClient) {
 	registerTool(server, apiClient, "amba_funnels_list", "List conversion funnels for a project. A funnel is a saved, ordered sequence of steps (event + optional property filters) plus a conversion window. Returns the definitions only — use amba_funnels_query to compute per-step counts.", { project_id: z.string().describe("The project ID") }, async ({ project_id }, { client }) => {
 		const result = await client.get(`/projects/${project_id}/funnels`);
 		return { content: [{
@@ -4340,7 +4664,7 @@ function enrichedAuthResult(result, agentInstructions) {
 		status: result.status
 	});
 }
-function registerTools$14(server, apiClient) {
+function registerTools$20(server, apiClient) {
 	registerPublicTool(server, "amba_developer_signup", [
 		"Create a new Amba developer account. Returns a long-lived Personal Access Token (PAT)",
 		"plus a real isolated Amba project (provisioning asynchronously), plus ready-to-paste",
@@ -4358,7 +4682,34 @@ function registerTools$14(server, apiClient) {
 	].join(" "), {
 		email: z.string().email().describe("Developer email address. Will be lowercased."),
 		password: z.string().min(8).describe("Password, minimum 8 characters."),
-		name: z.string().optional().describe("Optional display name.")
+		name: z.string().optional().describe("Optional display name."),
+		referral_code: z.string().optional().describe("Optional Amba partner referral code the developer arrived with (the `ref` on a partner's link). Attributes a later paid upgrade to that partner; ignored if not a live partner code.")
+	}, async ({ email, password, name, referral_code }) => {
+		const body = {
+			email,
+			password
+		};
+		if (name !== void 0) body.name = name;
+		if (referral_code !== void 0) body.referral_code = referral_code;
+		return enrichedAuthResult(await authFetch(apiClient, {
+			method: "POST",
+			path: "/auth/developer/signup",
+			body
+		}), SIGNUP_AGENT_INSTRUCTIONS);
+	});
+	registerPublicTool(server, "amba_affiliate_signup", [
+		"Join an affiliate program from zero: create an Amba account + org and get a long-lived PAT",
+		"plus ready-to-paste MCP-client config in `mcp_config`. An affiliate IS an Amba org — after",
+		"signing up, give your org id (from amba_orgs_list) to the program owner so they can enroll you",
+		"(amba_affiliate_invite with affiliate_org_id), then set up payouts with",
+		"amba_affiliate_my_payout_account_create. Agent: pass the returned `pat` inline on subsequent calls",
+		"and write the mcp_config snippet to the customer's MCP config for future sessions.",
+		"Email is lowercased; password must be at least 8 characters."
+	].join(" "), {
+		email: z.string().email().describe("Affiliate email address. Will be lowercased."),
+		password: z.string().min(8).describe("Password, minimum 8 characters."),
+		name: z.string().optional().describe("Optional display name."),
+		invite_token: z.string().optional().describe("Optional affiliate invite token (for reference).")
 	}, async ({ email, password, name }) => {
 		const body = {
 			email,
@@ -4447,7 +4798,7 @@ function registerTools$14(server, apiClient) {
 }
 //#endregion
 //#region src/tools/collections.ts
-async function adminFetch(apiClient, options) {
+async function adminFetch$1(apiClient, options) {
 	let url = `${apiClient.getBaseUrl()}${options.path}`;
 	if (options.query && Object.keys(options.query).length > 0) url += `?${new URLSearchParams(options.query).toString()}`;
 	const headers = {
@@ -4455,6 +4806,7 @@ async function adminFetch(apiClient, options) {
 		Accept: "application/json"
 	};
 	if (options.body !== void 0) headers["Content-Type"] = "application/json";
+	if (options.idempotencyKey !== void 0) headers["Idempotency-Key"] = options.idempotencyKey;
 	const res = await fetch(url, {
 		method: options.method,
 		headers,
@@ -4486,7 +4838,7 @@ function catalogShapeWarning(row) {
 	const ownership = "user_id" in row ? `attributed to user_id "${String(row["user_id"])}"` : "attributed to the seeding user (or rejected if the collection requires user_id)";
 	return [`⚠️ This row has catalog-shaped column(s) [${hit.join(", ")}] but is being inserted into a per-user collection, so it will be ${ownership} — other users will NOT see it via the client SDK.`, "If this is shared/global content (a catalog, articles, a media library), use a Content Library (amba_content_libraries_create) or create the collection with shared:true so its rows are readable by every user. Proceeding anyway."].join(" ");
 }
-async function clientFetch(apiClient, options) {
+async function clientFetch$1(apiClient, options) {
 	let url = `${apiClient.getApiRoot()}/client${options.path}`;
 	if (options.query && Object.keys(options.query).length > 0) url += `?${new URLSearchParams(options.query).toString()}`;
 	const headers = {
@@ -4495,6 +4847,7 @@ async function clientFetch(apiClient, options) {
 	};
 	if (options.body !== void 0) headers["Content-Type"] = "application/json";
 	if (options.sessionToken) headers["Authorization"] = `Bearer ${options.sessionToken}`;
+	if (options.idempotencyKey !== void 0) headers["Idempotency-Key"] = options.idempotencyKey;
 	const res = await fetch(url, {
 		method: options.method,
 		headers,
@@ -4521,26 +4874,70 @@ const MISSING_API_KEY_ERROR = jsonResult$1({
 		message: "Client tools require `api_key` (the project client X-Api-Key). Mint one via amba_api_keys_create with key_type=\"client\"."
 	}
 });
+const COLLECTION_COLUMN_TYPES = [
+	"uuid",
+	"text",
+	"integer",
+	"bigint",
+	"numeric",
+	"boolean",
+	"timestamptz",
+	"date",
+	"jsonb",
+	"vector",
+	"text[]",
+	"integer[]",
+	"bigint[]",
+	"numeric[]",
+	"boolean[]",
+	"uuid[]"
+];
+const CHANGE_TYPE_TARGET_TYPES = [
+	"uuid",
+	"text",
+	"integer",
+	"bigint",
+	"numeric",
+	"boolean",
+	"timestamptz",
+	"date",
+	"jsonb",
+	"text[]",
+	"integer[]",
+	"bigint[]",
+	"numeric[]",
+	"boolean[]",
+	"uuid[]"
+];
 const columnSchema = z.object({
-	name: z.string().describe("Column name. Must match /^[a-z][a-z0-9_]*$/."),
-	type: z.string().describe("Column type. One of: text, integer, bigint, boolean, jsonb, timestamptz, date, uuid, numeric, vector, or an array type (text[], integer[], bigint[], numeric[], boolean[], uuid[]). Array columns support the contains/containedBy/overlaps query operators. Vector columns require a \"dimensions\" hint."),
-	nullable: z.boolean().optional().describe("Whether the column accepts NULL. Defaults to true."),
-	default: z.unknown().optional().describe("Default SQL literal (e.g. \"NOW()\", 0, \"''\"). Optional."),
-	dimensions: z.number().optional().describe("Required for `vector` columns; ignored otherwise.")
+	name: z.string().describe("Column name. Must match /^[a-z][a-z0-9_]*$/. Server-managed names (id, user_id, created_at, updated_at, deleted_at) and the query keywords and/or/not are reserved."),
+	type: z.enum(COLLECTION_COLUMN_TYPES).describe("Column type. Scalars: text, integer, bigint, numeric, boolean, timestamptz, date, jsonb, uuid. Arrays: text[], integer[], bigint[], numeric[], boolean[], uuid[] — array columns unlock the contains/contained_by/overlaps query operators. `vector` requires `dimension`. Column defaults are not supported — set values at insert time."),
+	nullable: z.boolean().optional().describe("Whether the column accepts NULL. Defaults to false — columns are NOT NULL unless nullable is true."),
+	dimension: z.number().int().min(1).max(4096).optional().describe("Required for `vector` columns: the embedding dimension (1–4096), e.g. 1536 for OpenAI text-embedding-3-small. Rejected on non-vector columns."),
+	references: z.object({
+		table: z.string().describe("Target table, e.g. app_users."),
+		column: z.string().optional().describe("Target column. Defaults to id."),
+		onDelete: z.enum([
+			"CASCADE",
+			"RESTRICT",
+			"SET NULL",
+			"NO ACTION"
+		]).optional().describe("Cascade behavior. Defaults to RESTRICT.")
+	}).optional().describe("Optional foreign key. Not allowed on vector columns. (Every collection already gets a user_id FK to app_users automatically — no need to declare it.)")
 });
 const indexSchema = z.object({
 	name: z.string().optional().describe("Index name. Defaults to a generated value."),
-	columns: z.array(z.string()).describe("Column names included in the index."),
-	unique: z.boolean().optional().describe("Whether the index enforces uniqueness."),
-	using: z.enum([
-		"btree",
-		"hash",
-		"gin",
-		"gist",
-		"brin",
-		"hnsw",
-		"ivfflat"
-	]).optional().describe("Index method. Defaults to btree.")
+	columns: z.array(z.string()).min(1).describe("Column entries — each is \"<col>\" or \"<col> desc\" (ascending is the default). For a vector index, exactly one entry naming the vector column."),
+	unique: z.boolean().optional().describe("Whether the index enforces uniqueness. Not supported on vector indexes."),
+	vector: z.object({
+		method: z.enum(["ivfflat", "hnsw"]).optional().describe("Index method. Default ivfflat (fast build); hnsw trades slower writes for better recall on read-heavy workloads."),
+		distance: z.enum([
+			"cosine",
+			"l2",
+			"inner_product"
+		]).optional().describe("Distance operator the index optimizes for. Default cosine. Must match the `distance` used by find-nearest queries against the column, or the index is skipped."),
+		lists: z.number().int().min(1).max(1e5).optional().describe("ivfflat only: number of inverted lists. Default 100; sqrt(row count) is a good rule of thumb.")
+	}).optional().describe("Vector index spec — set it (even as {}) to build a similarity index on a vector column for find-nearest. Omit for a standard B-tree index; non-vector indexes never need it.")
 });
 const sdkFilterSchema = z.unknown().describe("SDK-shaped filter. Either a leaf `{column, op, value}` (op ∈ eq|ne|gt|gte|lt|lte|in|not_in|like|ilike|is_null|is_not_null) or a combinator `{and: [...]}` / `{or: [...]}` / `{not: {...}}`.");
 const sdkOrderSchema = z.array(z.object({
@@ -4549,9 +4946,10 @@ const sdkOrderSchema = z.array(z.object({
 })).describe("Ordering. `[{column: \"created_at\", direction: \"desc\"}, ...]`.");
 const adminFindWhereSchema = z.unknown().describe("Server WhereClause shape: column-keyed FieldOps, e.g. {tag: {eq: \"x\"}, count: {gte: 5}} plus optional `and|or|not` combinators.");
 const setSchema = z.record(z.unknown()).describe("Column-value map. Server-managed columns (id, created_at, etc.) are rejected.");
-function registerTools$13(server, apiClient) {
+function registerTools$19(server, apiClient) {
 	registerTool(server, apiClient, "amba_collections_create", [
 		"Create a new collection (schema-first Postgres table) in a project.",
+		"Ownership: by default every row is private to the user who created it. For team/org data, pass owner_scope:'group' with read_policy:'member' and write_policy:'member:admin' — rows are owned by a group and any member reads while admins write, enforced server-side via the group's membership so you don't reimplement authorization in app code.",
 		"The schema change is applied server-side via an async workflow.",
 		"Authenticates as the developer/agent — pass `pat` (the Personal Access Token returned by amba_developer_signup) or send it as the inbound Bearer.",
 		"Returns the workflow id + version + status. Failure responses include `details.workflow_id` for debugging.",
@@ -4561,15 +4959,21 @@ function registerTools$13(server, apiClient) {
 		name: z.string().describe("Collection name. Must match /^[a-z][a-z0-9_]*$/. Reserved prefixes (amba_, coll_amba_) are rejected."),
 		columns: z.array(columnSchema).describe("Column definitions. Server adds id/user_id/created_at/updated_at/deleted_at."),
 		indexes: z.array(indexSchema).optional().describe("Optional extra indexes (server creates a primary key + user_id index by default)."),
-		shared: z.boolean().optional().describe("Set true for developer-seeded GLOBAL content not owned by any single user (question banks, content libraries, lookup tables). Makes user_id NULLABLE so rows can be inserted without a user_id. Defaults to false (every row requires a user_id).")
-	}, async ({ project_id, name, columns, indexes, shared }, { pat }) => {
+		shared: z.boolean().optional().describe("Set true for developer-seeded GLOBAL content not owned by any single user (question banks, content libraries, lookup tables). Makes user_id NULLABLE so rows can be inserted without a user_id. Defaults to false (every row requires a user_id)."),
+		owner_scope: z.enum(["user", "group"]).optional().describe("Row ownership model. 'user' (default) — each row is private to the user who created it (profiles, drafts, per-user state). 'group' — rows are owned by a team (a group_id) and shared with its members; pair with read_policy:'member' / write_policy:'member:admin'. Reach for 'group' the moment two users must read or write the same rows (team workspaces, org-shared data) — Amba resolves membership server-side so you can delete your app-side authorization layer."),
+		read_policy: z.string().optional().describe("Who can READ rows — Postgres-grade row security, declared once and enforced on every query. 'owner' (default, private), 'public' (every signed-in user), 'member' (any member of the owning group; requires owner_scope:'group'), 'member:<role>' (members at role >= <role>, where owner>admin>member>viewer)."),
+		write_policy: z.string().optional().describe("Who can WRITE rows. 'owner' (default), 'authenticated' (any signed-in user may insert), 'member' (any member of the owning group), 'member:admin' (the classic 'members read, admins write'; requires owner_scope:'group'). Reads and writes are independent.")
+	}, async ({ project_id, name, columns, indexes, shared, owner_scope, read_policy, write_policy }, { pat }) => {
 		const body = {
 			name,
 			columns
 		};
 		if (indexes !== void 0) body.indexes = indexes;
 		if (shared !== void 0) body.shared = shared;
-		return passthroughResult(await adminFetch(apiClient, {
+		if (owner_scope !== void 0) body.owner_scope = owner_scope;
+		if (read_policy !== void 0) body.read_policy = read_policy;
+		if (write_policy !== void 0) body.write_policy = write_policy;
+		return passthroughResult(await adminFetch$1(apiClient, {
 			method: "POST",
 			path: `/projects/${project_id}/collections`,
 			body,
@@ -4588,7 +4992,7 @@ function registerTools$13(server, apiClient) {
 		const query = {};
 		if (limit !== void 0) query.limit = String(limit);
 		if (offset !== void 0) query.offset = String(offset);
-		return passthroughResult(await adminFetch(apiClient, {
+		return passthroughResult(await adminFetch$1(apiClient, {
 			method: "GET",
 			path: `/projects/${project_id}/collections`,
 			query,
@@ -4603,7 +5007,7 @@ function registerTools$13(server, apiClient) {
 		project_id: z.string().describe("The project ID."),
 		name: z.string().describe("Collection name (customer-facing, no `coll_` prefix).")
 	}, async ({ project_id, name }, { pat }) => {
-		return passthroughResult(await adminFetch(apiClient, {
+		return passthroughResult(await adminFetch$1(apiClient, {
 			method: "GET",
 			path: `/projects/${project_id}/collections/${encodeURIComponent(name)}`,
 			bearer: pat
@@ -4618,7 +5022,7 @@ function registerTools$13(server, apiClient) {
 		name: z.string().describe("Collection name to drop."),
 		confirm: z.string().describe("Must equal the collection name. Accident guard for destructive drops.")
 	}, async ({ project_id, name, confirm }, { pat }) => {
-		return passthroughResult(await adminFetch(apiClient, {
+		return passthroughResult(await adminFetch$1(apiClient, {
 			method: "DELETE",
 			path: `/projects/${project_id}/collections/${encodeURIComponent(name)}`,
 			query: { confirm },
@@ -4637,7 +5041,7 @@ function registerTools$13(server, apiClient) {
 	}, async ({ project_id, name, hard }, { pat }) => {
 		const query = {};
 		if (hard === false) query.hard = "false";
-		return passthroughResult(await adminFetch(apiClient, {
+		return passthroughResult(await adminFetch$1(apiClient, {
 			method: "DELETE",
 			path: `/projects/${project_id}/collections/${encodeURIComponent(name)}/data`,
 			query,
@@ -4645,7 +5049,8 @@ function registerTools$13(server, apiClient) {
 		}));
 	});
 	registerTool(server, apiClient, "amba_collections_alter", [
-		"Alter a collection: exactly one of `add_column`, `add_index`, `change_type`, `rename_column`, `drop_column`, or `relax_user_id` per call (the underlying saga is built around one SQL blob per workflow).",
+		"Alter a collection: exactly one of `add_column`, `add_index`, `change_type`, `rename_column`, `drop_column`, `relax_user_id`, or `set_policy` per call (the underlying saga is built around one SQL blob per workflow; set_policy is a metadata-only write applied without the saga).",
+		"set_policy changes an existing collection's access policy: read_policy ('owner'|'public'|'member'|'member:<role>') and/or write_policy ('owner'|'authenticated'|'member'|'member:admin'). A 'member' policy requires the collection to have been created with owner_scope:'group' (owner scope is fixed at create time).",
 		"Drop-column is destructive — requires `confirm` to equal the dropped column name.",
 		"change_type changes an existing column to a new type. It REWRITES THE WHOLE TABLE under an exclusive lock — the collection is briefly unreadable/unwritable while it runs, so prefer low-traffic windows for large collections. Casts that are not trivially safe (e.g. text→integer) require a `using` cast expression; known-safe casts (anything→text, integer→bigint, integer/bigint→numeric) do not. Without a `using` for an unsafe cast you get a 400 up front rather than a mid-migration failure.",
 		"rename_column renames a column (metadata-only, fast). It BREAKS any app code referencing the old name — re-run `amba types generate` and update call sites afterward. The new name can’t collide with a server-managed column (id, user_id, created_at, updated_at, deleted_at) or a reserved query keyword (and, or, not).",
@@ -4659,8 +5064,8 @@ function registerTools$13(server, apiClient) {
 		add_index: indexSchema.optional().describe("Index to add. Mutually exclusive with the other alter operations."),
 		change_type: z.object({
 			column: z.string().describe("Existing column to change."),
-			to_type: z.string().describe("Target type (text, integer, bigint, numeric, boolean, timestamptz, date, jsonb, uuid)."),
-			from_type: z.string().optional().describe("Optional current type. When provided, known-safe widening casts (integer→bigint, integer/bigint→numeric) skip the `using` requirement."),
+			to_type: z.enum(CHANGE_TYPE_TARGET_TYPES).describe("Target type — any column type except vector (text, integer, bigint, numeric, boolean, timestamptz, date, jsonb, uuid, or an array type like text[]). To move a column to vector, add a new vector column instead."),
+			from_type: z.enum(COLLECTION_COLUMN_TYPES).optional().describe("Optional current type. When provided, known-safe widening casts (integer→bigint, integer/bigint→numeric) skip the `using` requirement."),
 			using: z.string().optional().describe("SQL cast expression for the USING clause, e.g. \"score::integer\". Required for casts that are not trivially safe; omit only for anything→text or a known-safe widening cast.")
 		}).optional().describe("Change a column’s type. REWRITES THE WHOLE TABLE under an exclusive lock (briefly unreadable/unwritable). Mutually exclusive with the other alter operations."),
 		rename_column: z.object({
@@ -4669,8 +5074,12 @@ function registerTools$13(server, apiClient) {
 		}).optional().describe("Rename a column (metadata-only, fast). BREAKS code referencing the old name — re-run `amba types generate` afterward. Mutually exclusive with the other alter operations."),
 		drop_column: z.string().optional().describe("Column name to drop. Requires `confirm` query param to match."),
 		relax_user_id: z.boolean().optional().describe("Set true to drop the user_id NOT NULL constraint so this collection can hold shared/global rows (NULL user_id). Mutually exclusive with the other operations."),
+		set_policy: z.object({
+			read_policy: z.string().optional(),
+			write_policy: z.string().optional()
+		}).optional().describe("Change the access policy (metadata-only). read_policy: 'owner'|'public'|'member'|'member:<role>'; write_policy: 'owner'|'authenticated'|'member'|'member:admin'. 'member' policies require a group-owned collection (created with owner_scope:'group'). Mutually exclusive with the other operations."),
 		confirm: z.string().optional().describe("Required when drop_column is set; must equal the column name.")
-	}, async ({ project_id, name, add_column, add_index, change_type, rename_column, drop_column, relax_user_id, confirm }, { pat }) => {
+	}, async ({ project_id, name, add_column, add_index, change_type, rename_column, drop_column, relax_user_id, set_policy, confirm }, { pat }) => {
 		const body = {};
 		if (add_column !== void 0) body.add_column = add_column;
 		if (add_index !== void 0) body.add_index = add_index;
@@ -4678,9 +5087,10 @@ function registerTools$13(server, apiClient) {
 		if (rename_column !== void 0) body.rename_column = rename_column;
 		if (drop_column !== void 0) body.drop_column = drop_column;
 		if (relax_user_id !== void 0) body.relax_user_id = relax_user_id;
+		if (set_policy !== void 0) body.set_policy = set_policy;
 		const query = {};
 		if (drop_column !== void 0 && confirm !== void 0) query.confirm = confirm;
-		return passthroughResult(await adminFetch(apiClient, {
+		return passthroughResult(await adminFetch$1(apiClient, {
 			method: "PATCH",
 			path: `/projects/${project_id}/collections/${encodeURIComponent(name)}`,
 			body,
@@ -4699,6 +5109,7 @@ function registerTools$13(server, apiClient) {
 		project_id: z.string().describe("The project ID."),
 		name: z.string().describe("Collection name."),
 		row: z.record(z.unknown()).describe("Column-value map for the new row. Server-managed columns are stripped."),
+		idempotency_key: z.string().min(1).max(255).optional().describe("Request-level idempotency key, sent as the Idempotency-Key header. This is separate from any row column named idempotency_key."),
 		as_system: z.boolean().optional().describe("Write a developer-owned GLOBAL row (user_id = NULL) on a shared:true collection — for content the whole app reads (question banks, lookup tables) rather than data owned by one end-user. Mutually exclusive with a row.user_id. Rejected on non-shared collections."),
 		on_conflict: z.enum([
 			"error",
@@ -4707,7 +5118,7 @@ function registerTools$13(server, apiClient) {
 		]).optional().describe("Conflict policy. \"error\" (default) fails on a unique-constraint clash; \"ignore\" returns the existing row (HTTP 200) unchanged; \"update\" merges the provided columns. Requires conflict_target."),
 		conflict_target: z.array(z.string()).optional().describe("Columns that form the unique index to conflict on (e.g. [\"user_id\",\"kind\"]). Required when on_conflict is \"ignore\" or \"update\"."),
 		return_minimal: z.boolean().optional().describe("When true, the response returns only the inserted row id instead of the full row. Use this for rows with large columns (big JSON blobs) to avoid bloating the response — essential for bulk migrations where echoing full rows exhausts the token budget.")
-	}, async ({ project_id, name, row, as_system, on_conflict, conflict_target, return_minimal }, { pat }) => {
+	}, async ({ project_id, name, row, idempotency_key, as_system, on_conflict, conflict_target, return_minimal }, { pat }) => {
 		const query = {};
 		if (on_conflict !== void 0) query.on_conflict = on_conflict;
 		if (conflict_target !== void 0) query.conflict_target = conflict_target.join(",");
@@ -4716,12 +5127,13 @@ function registerTools$13(server, apiClient) {
 			...row,
 			as_system: true
 		} : row;
-		const result = await adminFetch(apiClient, {
+		const result = await adminFetch$1(apiClient, {
 			method: "POST",
 			path: `/projects/${project_id}/collections/${encodeURIComponent(name)}/rows`,
 			body: requestBody,
 			query: Object.keys(query).length > 0 ? query : void 0,
-			bearer: pat
+			bearer: pat,
+			...idempotency_key !== void 0 && { idempotencyKey: idempotency_key }
 		});
 		const warning = catalogShapeWarning(row);
 		const base = passthroughResult(result);
@@ -4747,7 +5159,7 @@ function registerTools$13(server, apiClient) {
 	}, async ({ project_id, name, rows, on_conflict, return_minimal }, { pat }) => {
 		const body = { rows };
 		if (on_conflict !== void 0) body.on_conflict = on_conflict;
-		return passthroughResult(await adminFetch(apiClient, {
+		return passthroughResult(await adminFetch$1(apiClient, {
 			method: "POST",
 			path: `/projects/${project_id}/collections/${encodeURIComponent(name)}/rows:batch`,
 			body,
@@ -4779,7 +5191,7 @@ function registerTools$13(server, apiClient) {
 		if (cursor !== void 0) findQuery.cursor = cursor;
 		if (select !== void 0) findQuery.select = select;
 		if (include_deleted !== void 0) findQuery.includeDeleted = include_deleted;
-		return passthroughResult(await adminFetch(apiClient, {
+		return passthroughResult(await adminFetch$1(apiClient, {
 			method: "GET",
 			path: `/projects/${project_id}/collections/${encodeURIComponent(name)}/rows`,
 			query: Object.keys(findQuery).length > 0 ? { query: JSON.stringify(findQuery) } : void 0,
@@ -4814,7 +5226,7 @@ function registerTools$13(server, apiClient) {
 		if (group_by !== void 0) body.group_by = group_by;
 		if (where !== void 0) body.where = where;
 		if (include_deleted !== void 0) body.includeDeleted = include_deleted;
-		return passthroughResult(await adminFetch(apiClient, {
+		return passthroughResult(await adminFetch$1(apiClient, {
 			method: "POST",
 			path: `/projects/${project_id}/collections/${encodeURIComponent(name)}/rows/aggregate`,
 			body,
@@ -4824,6 +5236,7 @@ function registerTools$13(server, apiClient) {
 	registerTool(server, apiClient, "amba_admin_update_row", [
 		"Update a single row by id from the developer/agent side — BYPASSES the per-user row scoping the client tools enforce, so it can edit ANY row regardless of which app_user owns it.",
 		"Pass `set` (a column→value map of the fields to write). Server-managed columns (id, created_at, updated_at, deleted_at) are rejected with 400 PROTECTED_COLUMN.",
+		"JSON object values targeting jsonb columns MERGE into the stored object (shallow, atomic merge-patch) instead of replacing it, so concurrent writers patching different keys both survive. Arrays/scalars/null replace the column value. Pass `objects: \"replace\"` to overwrite the whole stored object instead.",
 		"Compare-and-set (optimistic concurrency): pass `expected` (a column→expected-value map) and the update applies ONLY if the row currently still matches those values — otherwise 409 PRECONDITION_FAILED and nothing is written. Null-safe, so `expected: {status: null}` matches a NULL column. Use this for safe read-modify-write (read the row, then update guarded by the values you read) without a transaction.",
 		"For updating many rows by a filter instead of one id, use amba_admin_bulk_update.",
 		"Authenticates as the developer/agent — pass `pat` or send as inbound Bearer.",
@@ -4833,15 +5246,17 @@ function registerTools$13(server, apiClient) {
 		name: z.string().describe("Collection name."),
 		id: z.string().describe("Row UUID to update."),
 		set: setSchema.describe("Column-value map to write. Server-managed columns are rejected."),
-		expected: z.record(z.unknown()).optional().describe("Compare-and-set precondition: column→expected-value map. The update applies only if the row currently matches every entry; otherwise 409 PRECONDITION_FAILED and no write occurs. Null-safe (an entry of null matches a NULL column).")
-	}, async ({ project_id, name, id, set, expected }, { pat }) => {
-		return passthroughResult(await adminFetch(apiClient, {
+		expected: z.record(z.unknown()).optional().describe("Compare-and-set precondition: column→expected-value map. The update applies only if the row currently matches every entry; otherwise 409 PRECONDITION_FAILED and no write occurs. Null-safe (an entry of null matches a NULL column)."),
+		objects: z.enum(["merge", "replace"]).optional().describe("How JSON object values apply to jsonb columns: \"merge\" (default — shallow merge-patch into the stored object) or \"replace\" (overwrite the whole stored object).")
+	}, async ({ project_id, name, id, set, expected, objects }, { pat }) => {
+		return passthroughResult(await adminFetch$1(apiClient, {
 			method: "PATCH",
 			path: `/projects/${project_id}/collections/${encodeURIComponent(name)}/rows/${encodeURIComponent(id)}`,
 			body: expected !== void 0 ? {
 				set,
 				expected
 			} : { set },
+			query: objects === "replace" ? { objects: "replace" } : void 0,
 			bearer: pat
 		}));
 	});
@@ -4858,7 +5273,7 @@ function registerTools$13(server, apiClient) {
 		id: z.string().describe("Row UUID to delete."),
 		hard: z.boolean().optional().describe("false (default) soft-deletes (sets deleted_at so the row stays recoverable); true permanently removes the row (irreversible).")
 	}, async ({ project_id, name, id, hard }, { pat }) => {
-		return passthroughResult(await adminFetch(apiClient, {
+		return passthroughResult(await adminFetch$1(apiClient, {
 			method: "DELETE",
 			path: `/projects/${project_id}/collections/${encodeURIComponent(name)}/rows/${encodeURIComponent(id)}`,
 			query: hard === true ? { hard: "true" } : void 0,
@@ -4869,21 +5284,24 @@ function registerTools$13(server, apiClient) {
 		"Update EVERY row matching a `where` filter in one statement, from the developer/agent side — BYPASSES the per-user row scoping the client tools enforce (updates rows across all app_users).",
 		"`where` is REQUIRED — a bulk update with no filter (which would touch the entire collection) is rejected with 400 WHERE_REQUIRED. To update a single row by id, use amba_admin_update_row instead.",
 		"`set` is the column→value map applied to every matched row. Server-managed columns are rejected with 400 PROTECTED_COLUMN.",
+		"JSON object values targeting jsonb columns MERGE into the stored object per row (shallow, atomic merge-patch) instead of replacing it. Arrays/scalars/null replace the column value. Pass `objects: \"replace\"` to overwrite the whole stored object instead.",
 		"Authenticates as the developer/agent — pass `pat` or send as inbound Bearer.",
 		"Returns `{data: {updated: <n>, ids: [...]}}`. Errors: 400 WHERE_REQUIRED / PROTECTED_COLUMN / INVALID_COLUMN, 404 COLLECTION_NOT_FOUND."
 	].join(" "), {
 		project_id: z.string().describe("The project ID."),
 		name: z.string().describe("Collection name."),
 		set: setSchema.describe("Column-value map applied to every matched row. Required."),
-		where: adminFindWhereSchema.describe("Server WhereClause selecting which rows to update. REQUIRED — there is no \"update all\" shortcut; pass a filter that matches the rows you intend to change.")
-	}, async ({ project_id, name, set, where }, { pat }) => {
-		return passthroughResult(await adminFetch(apiClient, {
+		where: adminFindWhereSchema.describe("Server WhereClause selecting which rows to update. REQUIRED — there is no \"update all\" shortcut; pass a filter that matches the rows you intend to change."),
+		objects: z.enum(["merge", "replace"]).optional().describe("How JSON object values apply to jsonb columns: \"merge\" (default — shallow merge-patch into the stored object) or \"replace\" (overwrite the whole stored object).")
+	}, async ({ project_id, name, set, where, objects }, { pat }) => {
+		return passthroughResult(await adminFetch$1(apiClient, {
 			method: "PATCH",
 			path: `/projects/${project_id}/collections/${encodeURIComponent(name)}/rows`,
 			body: {
 				set,
 				where
 			},
+			query: objects === "replace" ? { objects: "replace" } : void 0,
 			bearer: pat
 		}));
 	});
@@ -4903,7 +5321,7 @@ function registerTools$13(server, apiClient) {
 	}, async ({ project_id, name, where, confirm, hard }, { pat }) => {
 		const query = { confirm: String(confirm) };
 		if (hard === true) query.hard = "true";
-		return passthroughResult(await adminFetch(apiClient, {
+		return passthroughResult(await adminFetch$1(apiClient, {
 			method: "DELETE",
 			path: `/projects/${project_id}/collections/${encodeURIComponent(name)}/rows`,
 			body: { where },
@@ -4919,6 +5337,7 @@ function registerTools$13(server, apiClient) {
 	].join(" "), {
 		name: z.string().describe("Collection name."),
 		row: z.record(z.unknown()).describe("Column-value map. Server-managed columns and user_id are stripped/overridden."),
+		idempotency_key: z.string().min(1).max(255).optional().describe("Request-level idempotency key, sent as the Idempotency-Key header. This is separate from any row column named idempotency_key."),
 		on_conflict: z.enum([
 			"error",
 			"ignore",
@@ -4927,18 +5346,19 @@ function registerTools$13(server, apiClient) {
 		conflict_target: z.array(z.string()).optional().describe("Unique-index columns to conflict on (e.g. [\"user_id\",\"kind\"]). Required for ignore/update."),
 		api_key: z.string().describe("Project client X-Api-Key. End-user tools authenticate via this + an optional session token, NOT via a developer PAT."),
 		session_token: z.string().optional().describe("Optional app_user session Bearer token. Required by the route's clientSessionAuth.")
-	}, async ({ name, row, on_conflict, conflict_target, api_key, session_token }) => {
+	}, async ({ name, row, idempotency_key, on_conflict, conflict_target, api_key, session_token }) => {
 		if (!api_key) return MISSING_API_KEY_ERROR;
 		const query = {};
 		if (on_conflict !== void 0) query.on_conflict = on_conflict;
 		if (conflict_target !== void 0) query.conflict_target = conflict_target.join(",");
-		return passthroughResult(await clientFetch(apiClient, {
+		return passthroughResult(await clientFetch$1(apiClient, {
 			method: "POST",
 			path: `/collections/${encodeURIComponent(name)}`,
 			body: row,
 			...Object.keys(query).length > 0 && { query },
 			apiKey: api_key,
-			...session_token !== void 0 && { sessionToken: session_token }
+			...session_token !== void 0 && { sessionToken: session_token },
+			...idempotency_key !== void 0 && { idempotencyKey: idempotency_key }
 		}));
 	});
 	server.tool("amba_client_list_rows", [
@@ -4966,7 +5386,7 @@ function registerTools$13(server, apiClient) {
 		if (cursor !== void 0) findQuery.cursor = cursor;
 		if (select !== void 0) findQuery.select = select;
 		if (include_deleted !== void 0) findQuery.includeDeleted = include_deleted;
-		return passthroughResult(await clientFetch(apiClient, {
+		return passthroughResult(await clientFetch$1(apiClient, {
 			method: "GET",
 			path: `/collections/${encodeURIComponent(name)}`,
 			query: Object.keys(findQuery).length > 0 ? { query: JSON.stringify(findQuery) } : void 0,
@@ -4985,7 +5405,7 @@ function registerTools$13(server, apiClient) {
 		session_token: z.string().optional().describe("App_user session Bearer. Required by the route.")
 	}, async ({ name, id, api_key, session_token }) => {
 		if (!api_key) return MISSING_API_KEY_ERROR;
-		return passthroughResult(await clientFetch(apiClient, {
+		return passthroughResult(await clientFetch$1(apiClient, {
 			method: "GET",
 			path: `/collections/${encodeURIComponent(name)}/${encodeURIComponent(id)}`,
 			apiKey: api_key,
@@ -4994,6 +5414,7 @@ function registerTools$13(server, apiClient) {
 	});
 	server.tool("amba_client_update_row", [
 		"Update a single row by id. Auto-RLS — only succeeds if the row belongs to the signed-in app_user.",
+		"JSON object values targeting jsonb columns MERGE into the stored object (shallow, atomic merge-patch) instead of replacing it, so concurrent writers patching different keys both survive. Arrays/scalars/null replace the column value. Pass `objects: \"replace\"` to overwrite the whole stored object instead.",
 		"Compare-and-set: pass `expected` (a column→value map) on a single-row update; the write applies only if the row still matches, else 409 PRECONDITION_FAILED. Null-safe. Optimistic concurrency without a transaction.",
 		"For bulk updates with a where-clause, omit `id` and pass `where` + `set`.",
 		"Server-managed columns and user_id are rejected with 400 INVALID_COLUMN.",
@@ -5005,17 +5426,20 @@ function registerTools$13(server, apiClient) {
 		set: setSchema.describe("Column-value map to write. Required."),
 		expected: z.record(z.unknown()).optional().describe("Compare-and-set precondition (single-row only): column→expected-value map. The update applies only if the row currently matches; otherwise 409 PRECONDITION_FAILED."),
 		limit: z.number().optional().describe("Bulk-update cap (default 1000, max 10000). Ignored when `id` is set."),
+		objects: z.enum(["merge", "replace"]).optional().describe("How JSON object values apply to jsonb columns: \"merge\" (default — shallow merge-patch into the stored object) or \"replace\" (overwrite the whole stored object)."),
 		api_key: z.string().describe("Project client X-Api-Key."),
 		session_token: z.string().optional().describe("App_user session Bearer. Required by the route.")
-	}, async ({ name, id, where, set, expected, limit, api_key, session_token }) => {
+	}, async ({ name, id, where, set, expected, limit, objects, api_key, session_token }) => {
 		if (!api_key) return MISSING_API_KEY_ERROR;
-		if (id !== void 0) return passthroughResult(await clientFetch(apiClient, {
+		const objectsQuery = objects === "replace" ? { objects: "replace" } : void 0;
+		if (id !== void 0) return passthroughResult(await clientFetch$1(apiClient, {
 			method: "PATCH",
 			path: `/collections/${encodeURIComponent(name)}/${encodeURIComponent(id)}`,
 			body: expected !== void 0 ? {
 				set,
 				expected
 			} : { set },
+			...objectsQuery !== void 0 && { query: objectsQuery },
 			apiKey: api_key,
 			...session_token !== void 0 && { sessionToken: session_token }
 		}));
@@ -5024,10 +5448,11 @@ function registerTools$13(server, apiClient) {
 			where: where ?? {}
 		};
 		if (limit !== void 0) body.limit = limit;
-		return passthroughResult(await clientFetch(apiClient, {
+		return passthroughResult(await clientFetch$1(apiClient, {
 			method: "PATCH",
 			path: `/collections/${encodeURIComponent(name)}`,
 			body,
+			...objectsQuery !== void 0 && { query: objectsQuery },
 			apiKey: api_key,
 			...session_token !== void 0 && { sessionToken: session_token }
 		}));
@@ -5045,7 +5470,7 @@ function registerTools$13(server, apiClient) {
 		session_token: z.string().optional().describe("App_user session Bearer. Required by the route.")
 	}, async ({ name, id, where, limit, api_key, session_token }) => {
 		if (!api_key) return MISSING_API_KEY_ERROR;
-		if (id !== void 0) return passthroughResult(await clientFetch(apiClient, {
+		if (id !== void 0) return passthroughResult(await clientFetch$1(apiClient, {
 			method: "DELETE",
 			path: `/collections/${encodeURIComponent(name)}/${encodeURIComponent(id)}`,
 			apiKey: api_key,
@@ -5053,7 +5478,7 @@ function registerTools$13(server, apiClient) {
 		}));
 		const body = { where: where ?? {} };
 		if (limit !== void 0) body.limit = limit;
-		return passthroughResult(await clientFetch(apiClient, {
+		return passthroughResult(await clientFetch$1(apiClient, {
 			method: "DELETE",
 			path: `/collections/${encodeURIComponent(name)}`,
 			body,
@@ -5076,7 +5501,7 @@ function registerTools$13(server, apiClient) {
 		const findQuery = {};
 		if (where !== void 0) findQuery.where = where;
 		if (include_deleted !== void 0) findQuery.includeDeleted = include_deleted;
-		return passthroughResult(await clientFetch(apiClient, {
+		return passthroughResult(await clientFetch$1(apiClient, {
 			method: "GET",
 			path: `/collections/${encodeURIComponent(name)}/count`,
 			query: Object.keys(findQuery).length > 0 ? { query: JSON.stringify(findQuery) } : void 0,
@@ -5116,7 +5541,7 @@ function registerTools$13(server, apiClient) {
 		if (cursor !== void 0) body.cursor = cursor;
 		if (select !== void 0) body.select = select;
 		if (include_deleted !== void 0) body.include_deleted = include_deleted;
-		return passthroughResult(await clientFetch(apiClient, {
+		return passthroughResult(await clientFetch$1(apiClient, {
 			method: "POST",
 			path: `/collections/${encodeURIComponent(name)}/find`,
 			body,
@@ -5160,7 +5585,7 @@ function registerTools$13(server, apiClient) {
 		if (where !== void 0) body.where = where;
 		if (cursor !== void 0) body.cursor = cursor;
 		if (include_deleted !== void 0) body.include_deleted = include_deleted;
-		return passthroughResult(await clientFetch(apiClient, {
+		return passthroughResult(await clientFetch$1(apiClient, {
 			method: "POST",
 			path: `/collections/${encodeURIComponent(name)}/find-nearest`,
 			body,
@@ -5201,7 +5626,7 @@ function registerTools$13(server, apiClient) {
 		if (filter !== void 0) body.filter = filter;
 		if (where !== void 0) body.where = where;
 		if (include_deleted !== void 0) body.include_deleted = include_deleted;
-		return passthroughResult(await clientFetch(apiClient, {
+		return passthroughResult(await clientFetch$1(apiClient, {
 			method: "POST",
 			path: `/collections/${encodeURIComponent(name)}/aggregate`,
 			body,
@@ -5324,7 +5749,7 @@ function jsonResult(payload) {
 * of a generic upstream 400.
 */
 const MAX_BUNDLE_BYTES = 10 * 1024 * 1024;
-function registerTools$12(server, apiClient) {
+function registerTools$18(server, apiClient) {
 	registerTool(server, apiClient, "amba_functions_deploy", [
 		"Deploy a function to an Amba project. The supplied `code` is a fully bundled JavaScript module (one entry file) — the deploy endpoint uploads it server-side and records a new active deployment row, superseding any prior active version for the same `name`.",
 		"Function name must match /^[a-z][a-z0-9_-]*$/ and be ≤58 chars. Bundle size cap: 10 MiB (enforced client-side too — oversize uploads are rejected before the round-trip).",
@@ -5397,6 +5822,42 @@ function registerTools$12(server, apiClient) {
 			throw err;
 		}
 	}, ["amba_delete_function"]);
+	registerTool(server, apiClient, "amba_function_domains_attach", [
+		"Attach one exact custom hostname to one deployed function. The complete incoming path and query string are preserved when the hostname routes to the function.",
+		"MVP constraints: exact lowercase hostnames only; no wildcards or path rewrites. Attaching a subdomain does NOT create a `www` hostname automatically.",
+		"The response contains provider-neutral certificate/ownership status plus DNS validation instructions. Publish the returned CNAME and validation records, then call `amba_function_domains_refresh` until `live=true` (both statuses active and routing reconciliation successful).",
+		"MVP limits use the effective project tier (free 1, pro 5, scale 20, enterprise or comped 50), with five attach attempts per project per hour. An unverified claim becomes eligible for exact-host reclaim after 24 hours; Worker route/KV allocation waits for active ownership.",
+		"Podcast/feed clients cannot supply an Amba API key. Their function must be deployed with `public: true`; validate any application-specific private token in the handler."
+	].join(" "), {
+		project_id: z.string().describe("The Amba project ID."),
+		name: z.string().describe("Deployed function name."),
+		hostname: z.string().describe("One exact lowercase hostname, for example feeds.podpod.host.")
+	}, async ({ project_id, name, hostname }, { pat }) => {
+		return jsonResult(await callWithPat(apiClient, pat, "POST", `/projects/${encodeURIComponent(project_id)}/functions/${encodeURIComponent(name)}/domains`, { body: { hostname } }));
+	});
+	registerTool(server, apiClient, "amba_function_domains_list", "List exact custom hostnames attached to one function. Status is provider-neutral: `live=true` only when `cert_status` and `ownership_status` are active and required routing reconciliation succeeded.", {
+		project_id: z.string().describe("The Amba project ID."),
+		name: z.string().describe("Deployed function name.")
+	}, async ({ project_id, name }, { pat }) => {
+		return jsonResult(await callWithPat(apiClient, pat, "GET", `/projects/${encodeURIComponent(project_id)}/functions/${encodeURIComponent(name)}/domains`));
+	});
+	registerTool(server, apiClient, "amba_function_domains_refresh", "Refresh DNS ownership and certificate state for one exact function hostname. Publish any returned validation records and repeat until `live=true`.", {
+		project_id: z.string().describe("The Amba project ID."),
+		name: z.string().describe("Deployed function name."),
+		hostname: z.string().describe("Exact attached hostname to refresh.")
+	}, async ({ project_id, name, hostname }, { pat }) => {
+		return jsonResult(await callWithPat(apiClient, pat, "POST", `/projects/${encodeURIComponent(project_id)}/functions/${encodeURIComponent(name)}/domains/${encodeURIComponent(hostname)}/refresh`));
+	});
+	registerTool(server, apiClient, "amba_function_domains_remove", "Detach one exact custom hostname from a function. Requests to the detached hostname fail closed after routing propagation.", {
+		project_id: z.string().describe("The Amba project ID."),
+		name: z.string().describe("Deployed function name."),
+		hostname: z.string().describe("Exact attached hostname to detach.")
+	}, async ({ project_id, name, hostname }, { pat }) => {
+		return jsonResult(await callWithPat(apiClient, pat, "DELETE", `/projects/${encodeURIComponent(project_id)}/functions/${encodeURIComponent(name)}/domains/${encodeURIComponent(hostname)}`) ?? {
+			hostname,
+			deleted: true
+		});
+	});
 	registerTool(server, apiClient, "amba_functions_schedule", [
 		"Register a cron Schedule for a function. The schedule is keyed deterministically per (project, function) — re-calling with a different cron/timezone replaces the prior schedule rather than creating a duplicate.",
 		"Cron must be a standard 5- or 6-field whitespace-separated expression. `timezone` defaults to \"UTC\" if omitted. Timezones are IANA strings (e.g. \"America/Los_Angeles\").",
@@ -5435,24 +5896,29 @@ function registerTools$12(server, apiClient) {
 	registerTool(server, apiClient, "amba_functions_get_logs", [
 		"Read function logs for one function over a bounded time range.",
 		"Default range: last 1 hour. Max range: last 24 hours. `since` and `until` are ISO 8601 timestamps.",
-		"Default limit: 100 events. Max: 1000. Larger spans require operator-side queries — this tool is for \"tail my function\" UX."
+		"Default limit: 100 events. Max: 1000. Larger spans require operator-side queries — this tool is for \"tail my function\" UX.",
+		"Debugging one request? `since_request_id` starts the range at the oldest event mentioning that request id (\"everything from this request onward\"); `request_id` instead filters to only events mentioning it. The two compose."
 	].join(" "), {
 		project_id: z.string().describe("The Amba project ID."),
 		name: z.string().describe("Function name to read logs for."),
 		since: z.string().optional().describe("ISO 8601 lower bound (inclusive). Defaults to `until - 1h`."),
 		until: z.string().optional().describe("ISO 8601 upper bound (exclusive). Defaults to now."),
-		limit: z.number().int().min(1).max(1e3).optional().describe("Max events (1-1000, default 100).")
-	}, async ({ project_id, name, since, until, limit }, { pat }) => {
+		limit: z.number().int().min(1).max(1e3).optional().describe("Max events (1-1000, default 100)."),
+		request_id: z.string().optional().describe("Only return events whose log/exception text mentions this request id (r_...)."),
+		since_request_id: z.string().optional().describe("Anchor the range start at the oldest event mentioning this request id (r_...). Searched within the last 24h, or within since/until when given. 404s if no event mentions it.")
+	}, async ({ project_id, name, since, until, limit, request_id, since_request_id }, { pat }) => {
 		const query = {};
 		if (since !== void 0) query.since = since;
 		if (until !== void 0) query.until = until;
 		if (limit !== void 0) query.limit = String(limit);
+		if (request_id !== void 0) query.request_id = request_id;
+		if (since_request_id !== void 0) query.since_request_id = since_request_id;
 		return jsonResult(await callWithPat(apiClient, pat, "GET", `/projects/${encodeURIComponent(project_id)}/functions/${encodeURIComponent(name)}/logs`, { query }));
 	}, ["amba_get_function_logs"]);
 }
 //#endregion
 //#region src/tools/sites.ts
-function registerTools$11(server, apiClient) {
+function registerTools$17(server, apiClient) {
 	registerTool(server, apiClient, "amba_sites_deploy", [
 		"Deploy a static site to an Amba project. Creates the site if it does not yet exist, then uploads the supplied files as a new deployment.",
 		"The deployment is immutable — its files live forever under the site's storage prefix — and the site flips to serve the new deployment atomically. Older deployments are kept for rollback via `amba_sites_list`.",
@@ -5521,6 +5987,14 @@ function registerTools$11(server, apiClient) {
 	}, async ({ project_id, name }, { pat }) => {
 		return jsonResult(await callWithPat(apiClient, pat, "GET", `/projects/${encodeURIComponent(project_id)}/sites/${encodeURIComponent(name)}/domains`));
 	}, ["amba_list_site_domains"]);
+	registerTool(server, apiClient, "amba_sites_refresh_domain", "Force a fresh ownership and certificate lifecycle check for a site hostname. Returns both normalized states plus current validation records.", {
+		project_id: z.string().describe("The Amba project ID."),
+		name: z.string().describe("Site name."),
+		hostname: z.string().describe("Hostname to refresh. Lowercased at the tool boundary.")
+	}, async ({ project_id, name, hostname }, { pat }) => {
+		const normalisedHostname = hostname.toLowerCase();
+		return jsonResult(await callWithPat(apiClient, pat, "POST", `/projects/${encodeURIComponent(project_id)}/sites/${encodeURIComponent(name)}/domains/${encodeURIComponent(normalisedHostname)}/refresh-cert`));
+	}, ["amba_refresh_site_domain"]);
 	registerTool(server, apiClient, "amba_sites_remove_domain", "Detach a custom hostname from a site. The upstream binding is dropped server-side; the DB row is removed; the host:<hostname> KV entry is cleared. Idempotent — removing a hostname that is no longer attached returns success.", {
 		project_id: z.string().describe("The Amba project ID."),
 		name: z.string().describe("Site name."),
@@ -5544,7 +6018,7 @@ function registerTools$11(server, apiClient) {
 }
 //#endregion
 //#region src/tools/domains.ts
-function registerTools$10(server, apiClient) {
+function registerTools$16(server, apiClient) {
 	registerTool(server, apiClient, "amba_domains_search", ["Search for available domains to buy through Amba. Pass a keyword or a full domain; returns candidate domains with availability and first-year price (USD).", "Free — searching never costs anything. Use this to help a user pick a name, then `amba_domains_check` to price specific picks and `amba_domains_purchase` to buy."].join(" "), {
 		project_id: z.string().describe("The Amba project ID."),
 		query: z.string().describe("A keyword (e.g. \"getunbury\") or a full domain (e.g. \"unbury.com\")."),
@@ -5597,10 +6071,63 @@ function registerTools$10(server, apiClient) {
 		if (offset !== void 0) query.offset = String(offset);
 		return jsonResult(await callWithPat(apiClient, pat, "GET", `/projects/${encodeURIComponent(project_id)}/domains`, { query }));
 	});
+	registerTool(server, apiClient, "amba_domains_email_status", "Get inbound email-routing status for a domain purchased through Amba.", {
+		project_id: z.string().describe("The Amba project ID."),
+		domain: z.string().describe("Purchased domain, e.g. \"example.com\".")
+	}, async ({ project_id, domain }, { pat }) => jsonResult(await callWithPat(apiClient, pat, "GET", `/projects/${encodeURIComponent(project_id)}/domains/${encodeURIComponent(domain.toLowerCase())}/email`)));
+	registerTool(server, apiClient, "amba_domains_email_enable", ["Enable free inbound email routing for a domain purchased through Amba.", "This safely refuses when the domain already has MX records for another mail provider, so it cannot silently replace an existing mailbox service."].join(" "), {
+		project_id: z.string().describe("The Amba project ID."),
+		domain: z.string().describe("Purchased domain, e.g. \"example.com\".")
+	}, async ({ project_id, domain }, { pat }) => jsonResult(await callWithPat(apiClient, pat, "POST", `/projects/${encodeURIComponent(project_id)}/domains/${encodeURIComponent(domain.toLowerCase())}/email/enable`, { body: {} })));
+	registerTool(server, apiClient, "amba_domains_email_destinations_add", ["Add a mailbox that can receive forwarded mail for a purchased domain.", "The mailbox owner must click the verification email before a forward can activate; pending results return action_required:true."].join(" "), {
+		project_id: z.string().describe("The Amba project ID."),
+		domain: z.string().describe("Purchased domain."),
+		email: z.string().email().describe("External mailbox that will receive forwarded mail.")
+	}, async ({ project_id, domain, email }, { pat }) => jsonResult(await callWithPat(apiClient, pat, "POST", `/projects/${encodeURIComponent(project_id)}/domains/${encodeURIComponent(domain.toLowerCase())}/email/destinations`, { body: { email: email.toLowerCase() } })));
+	registerTool(server, apiClient, "amba_domains_email_destinations_list", "List only this project’s forwarding destinations associated with a purchased domain.", {
+		project_id: z.string().describe("The Amba project ID."),
+		domain: z.string().describe("Purchased domain.")
+	}, async ({ project_id, domain }, { pat }) => jsonResult(await callWithPat(apiClient, pat, "GET", `/projects/${encodeURIComponent(project_id)}/domains/${encodeURIComponent(domain.toLowerCase())}/email/destinations`)));
+	registerTool(server, apiClient, "amba_domains_email_destinations_get", "Poll a forwarding destination after its owner clicks the verification email.", {
+		project_id: z.string().describe("The Amba project ID."),
+		domain: z.string().describe("Purchased domain."),
+		destination_id: z.string().describe("Destination ID returned by the add/list tool.")
+	}, async ({ project_id, domain, destination_id }, { pat }) => jsonResult(await callWithPat(apiClient, pat, "GET", `/projects/${encodeURIComponent(project_id)}/domains/${encodeURIComponent(domain.toLowerCase())}/email/destinations/${encodeURIComponent(destination_id)}`)));
+	registerTool(server, apiClient, "amba_domains_email_forwards_set", ["Create or update a literal email forward such as support@example.com → owner@gmail.com.", "The tool enables routing if safe and starts destination verification when needed. If action_required:true is returned, have the mailbox owner click the verification email, poll the destination, then repeat this same call."].join(" "), {
+		project_id: z.string().describe("The Amba project ID."),
+		domain: z.string().describe("Purchased domain."),
+		source: z.string().describe("Local part or full address on the domain, e.g. \"support\" or \"support@example.com\"."),
+		destination: z.string().email().describe("Verified external mailbox to forward into.")
+	}, async ({ project_id, domain, source, destination }, { pat }) => jsonResult(await callWithPat(apiClient, pat, "POST", `/projects/${encodeURIComponent(project_id)}/domains/${encodeURIComponent(domain.toLowerCase())}/email/forwards`, { body: {
+		source,
+		destination: destination.toLowerCase()
+	} })));
+	registerTool(server, apiClient, "amba_domains_email_forwards_list", "List literal email forwards configured on a purchased domain.", {
+		project_id: z.string().describe("The Amba project ID."),
+		domain: z.string().describe("Purchased domain.")
+	}, async ({ project_id, domain }, { pat }) => jsonResult(await callWithPat(apiClient, pat, "GET", `/projects/${encodeURIComponent(project_id)}/domains/${encodeURIComponent(domain.toLowerCase())}/email/forwards`)));
+	registerTool(server, apiClient, "amba_domains_email_forwards_delete", "Delete a literal email forward from a purchased domain.", {
+		project_id: z.string().describe("The Amba project ID."),
+		domain: z.string().describe("Purchased domain."),
+		forward_id: z.string().describe("Forward ID returned by the set/list tool.")
+	}, async ({ project_id, domain, forward_id }, { pat }) => jsonResult(await callWithPat(apiClient, pat, "DELETE", `/projects/${encodeURIComponent(project_id)}/domains/${encodeURIComponent(domain.toLowerCase())}/email/forwards/${encodeURIComponent(forward_id)}`)));
+	registerTool(server, apiClient, "amba_domains_email_catch_all_get", "Get the catch-all forwarding rule for a purchased domain.", {
+		project_id: z.string().describe("The Amba project ID."),
+		domain: z.string().describe("Purchased domain.")
+	}, async ({ project_id, domain }, { pat }) => jsonResult(await callWithPat(apiClient, pat, "GET", `/projects/${encodeURIComponent(project_id)}/domains/${encodeURIComponent(domain.toLowerCase())}/email/catch-all`)));
+	registerTool(server, apiClient, "amba_domains_email_catch_all_set", ["Enable, change, or disable catch-all forwarding for every unmatched address on a purchased domain.", "When enabling, destination is required and must be verified. A pending mailbox returns action_required:true."].join(" "), {
+		project_id: z.string().describe("The Amba project ID."),
+		domain: z.string().describe("Purchased domain."),
+		enabled: z.boolean().describe("True to enable/update catch-all; false to disable it."),
+		destination: z.string().email().optional().describe("External mailbox. Required when enabled=true; omit when disabling.")
+	}, async ({ project_id, domain, enabled, destination }, { pat }) => jsonResult(await callWithPat(apiClient, pat, "PUT", `/projects/${encodeURIComponent(project_id)}/domains/${encodeURIComponent(domain.toLowerCase())}/email/catch-all`, { body: {
+		enabled,
+		...destination ? { destination: destination.toLowerCase() } : {}
+	} })));
 }
 //#endregion
 //#region src/tools/operations.ts
-function registerTools$9(server, apiClient) {
+function registerTools$15(server, apiClient) {
 	registerTool(server, apiClient, "amba_operations_get", [
 		"Poll an async operation by its operation_id to see whether it has finished.",
 		"Returns the operation `status` (pending | running | succeeded | failed); on `failed`, `failed_reason` says why, and on `succeeded`, `result` holds the outcome.",
@@ -5633,17 +6160,24 @@ function registerTools$9(server, apiClient) {
 }
 //#endregion
 //#region src/tools/secrets.ts
-function registerTools$8(server, apiClient) {
+const SET_SECRET_NAME = z.string().regex(/^[A-Z][A-Z0-9_]{0,62}$/, "Secret name must match /^[A-Z][A-Z0-9_]{0,62}$/ (uppercase, starts with a letter, max 63 characters)").superRefine((name, ctx) => {
+	const reason = getBindingReservationReason(name);
+	if (reason !== null) ctx.addIssue({
+		code: z.ZodIssueCode.custom,
+		message: reason
+	});
+});
+function registerTools$14(server, apiClient) {
 	registerTool(server, apiClient, "amba_secrets_set", [
 		"Set or rotate a secret. Omit `function` for a PROJECT-WIDE secret (one value visible to every function in the project, including ones deployed later) — set it once instead of repeating per function. Pass `function` to scope the secret to just that function.",
 		"Writes a new version to the backing secret store and enqueues the sync. Subsequent function invocations see the new value once sync_status flips to \"synced\" (typically <30s).",
 		"Secret name must match /^[A-Z][A-Z0-9_]{0,62}$/. Function name (when given) must match /^[a-z][a-z0-9_-]{0,57}$/.",
-		"Reserved binding names (AMBA_INTERNAL_TOKEN, EDGE_HEADER_SIGNING_SECRET, STORAGE, EDGE_DB_PROXY, AMBA_API_URL, AMBA_AI_GATEWAY_URL, AMBA_PROJECT_ID) are platform-managed and rejected with 400 RESERVED_BINDING.",
+		"The complete AMBA_ and EDGE_ namespaces, plus the exact names STORAGE and EDGE_DB_PROXY, are platform-managed. MCP rejects them before an API/provider call; the API also returns 400 RESERVED_BINDING.",
 		"Secrets may be set BEFORE deploying the function — the sync drains once a deployment lands, so you can set every secret first and deploy once.",
 		"Value cap: 64 KiB. Plaintext is never returned afterwards."
 	].join(" "), {
 		project_id: z.string().describe("The Amba project ID."),
-		name: z.string().describe("Secret name. UPPER_SNAKE_CASE. /^[A-Z][A-Z0-9_]{0,62}$/."),
+		name: SET_SECRET_NAME.describe("Secret name. UPPER_SNAKE_CASE. The AMBA_ and EDGE_ prefixes and exact names STORAGE and EDGE_DB_PROXY are reserved."),
 		value: z.string().describe("Secret value. Stored encrypted at rest; never returned in plaintext afterwards."),
 		function: z.string().optional().describe("Function this secret binds to. OMIT for a project-wide secret (applied to every function in the project).")
 	}, async ({ project_id, name, value, function: functionName }, { pat }) => {
@@ -5675,7 +6209,7 @@ function registerTools$8(server, apiClient) {
 		return jsonResult(await callWithPat(apiClient, pat, "GET", `/projects/${encodeURIComponent(project_id)}/secrets`));
 	}, ["amba_list_secrets"]);
 	registerTool(server, apiClient, "amba_secrets_delete", [
-		"Delete a secret. Removes the version from the backing store AND the sync-pending row. The Worker-side binding is reaped on the next deploy of the affected function(s) (the binding list is re-emitted without the secret).",
+		"Delete a secret. Removes the backing-store value and durably queues runtime-binding revocation across every affected Worker script. Provider failures retry automatically; the control row remains visible with a revocation status until cleanup succeeds.",
 		"Pass `function` to delete a function-scoped secret; OMIT it to delete the project-wide secret of this name.",
 		"Idempotent: deleting a secret that no longer exists succeeds."
 	].join(" "), {
@@ -5687,6 +6221,7 @@ function registerTools$8(server, apiClient) {
 		try {
 			return jsonResult(await callWithPat(apiClient, pat, "DELETE", `/projects/${encodeURIComponent(project_id)}/secrets/${encodeURIComponent(name)}`, functionName === void 0 ? {} : { query: { function: functionName } }) ?? {
 				deleted: true,
+				revocation_queued: true,
 				name,
 				function: scope
 			});
@@ -5706,27 +6241,259 @@ function registerTools$8(server, apiClient) {
 const PROVIDER_ENUM$1 = z.enum([
 	"anthropic",
 	"openai",
-	"mistral"
+	"mistral",
+	"gemini"
 ]);
 const RATE_LIMIT_SHAPE = z.object({
 	window: z.string().optional().describe("Window length (e.g. \"60s\", \"1m\", \"1h\"). Defaults to \"60s\"."),
 	max: z.number().int().min(1).optional().describe("Max invocations per window. Defaults to 20."),
 	key: z.string().optional().describe("Bucketing key. Typically \"user_id\" or \"session_id\". Defaults to \"user_id\".")
 }).strict();
-function registerTools$7(server, apiClient) {
-	registerTool(server, apiClient, "amba_ai_prompts_create", [
-		"Register a new AI prompt template on a project. Returns the persisted prompt row (name, version, provider, model, client_invokable).",
-		"Name must match /^[a-z][a-z0-9_-]{0,127}$/. Provider must be \"anthropic\", \"openai\", or \"mistral\" and must already be registered via `amba_ai_providers_set`. Model is the provider-native model id (e.g. \"claude-sonnet-4-5-20250929\", \"gpt-4o-2024-08-06\").",
-		"Set `client_invokable=true` to allow SDK callers (e.g. amba-web, amba-react) to invoke the prompt via `Amba.ai.run()`. Defaults false — server-side / admin invocation only.",
-		"Re-issuing this tool with an existing `name` will bump the prompt to a new version; prefer `amba_ai_prompts_update` for that intent."
-	].join(" "), {
-		project_id: z.string().describe("The Amba project ID."),
-		name: z.string().describe("Prompt name. /^[a-z][a-z0-9_-]{0,127}$/."),
-		provider: PROVIDER_ENUM$1.describe("AI provider. Must already be registered via `amba_ai_providers_set`."),
-		model: z.string().describe("Provider-native model id."),
-		system_prompt: z.string().nullable().optional().describe("System prompt sent on every invocation. Omit or null for no system prompt."),
-		max_tokens: z.number().int().min(1).max(2e5).optional().describe("Max output tokens per invocation. Defaults to 4096."),
-		rate_limit: RATE_LIMIT_SHAPE.nullable().optional().describe("Optional per-key rate limit."),
+const DEFAULT_IMAGE_MIME = "image/png";
+/**
+* Normalize an image's `url` / `data` to non-empty values, trimming whitespace
+* and treating a blank result as absent. Returns `null` when NEITHER a real url
+* nor real data survives — such a block carries no image and is dropped by the
+* caller (instead of emitting an empty image URL or an empty base64 block).
+*/
+function normalizeImage(img) {
+	const url = typeof img.url === "string" && img.url.trim().length > 0 ? img.url.trim() : void 0;
+	const data = typeof img.data === "string" && img.data.trim().length > 0 ? img.data.trim() : void 0;
+	if (!url && !data) return null;
+	return {
+		url,
+		data,
+		mime: img.mime
+	};
+}
+/**
+* Map a NORMALIZED vendor-neutral image into the provider's native
+* content-block shape. Anthropic → `{type:'image', source:{...}}`;
+* OpenAI/Mistral → `{type:'image_url', image_url:{url}}` (base64 becomes a
+* data: URL); Gemini → a `parts[]` entry (`inline_data` for base64,
+* `file_data` for a URL). The input is guaranteed to have a real `url` or
+* real `data`.
+*
+* Note: Gemini's image shape is a `contents[].parts[]` entry, NOT a message
+* `content[]` block — so the Gemini path builds `contents[]` directly via
+* `geminiContentsFromMessages` and does NOT route image mapping through
+* `attachImagesToMessages` (which speaks the OpenAI/Anthropic message-content
+* shape). This helper is reused there for the per-part mapping.
+*/
+function imageBlockForProvider(img, provider) {
+	const mime = img.mime ?? DEFAULT_IMAGE_MIME;
+	if (provider === "anthropic") return img.url ? {
+		type: "image",
+		source: {
+			type: "url",
+			url: img.url
+		}
+	} : {
+		type: "image",
+		source: {
+			type: "base64",
+			media_type: mime,
+			data: img.data ?? ""
+		}
+	};
+	if (provider === "gemini") return img.url ? { file_data: {
+		mime_type: mime,
+		file_uri: img.url
+	} } : { inline_data: {
+		mime_type: mime,
+		data: img.data ?? ""
+	} };
+	return {
+		type: "image_url",
+		image_url: { url: img.url ?? `data:${mime};base64,${img.data ?? ""}` }
+	};
+}
+/**
+* Convert ONE content block from a message's content array into the provider's
+* native shape. A vendor-neutral `{type:'image', url|data}` block is mapped via
+* `imageBlockForProvider`; everything else (a `{type:'text'}` block, or an
+* already-native block the agent supplied) passes through unchanged. This keeps
+* the whole message in a SINGLE format so we never mix vendor-neutral and
+* pre-mapped native image blocks in one message (which would be malformed for
+* the raw `/ai/messages` passthrough).
+*
+* Returns `null` only for a vendor-neutral image block that normalizes away
+* (blank url + blank data) — the caller drops it.
+*/
+function nativeContentBlock(block, provider) {
+	if (typeof block === "object" && block !== null) {
+		const b = block;
+		if (b["type"] === "image" && ("url" in b || "data" in b) && !("source" in b)) {
+			const norm = normalizeImage({
+				url: typeof b["url"] === "string" ? b["url"] : void 0,
+				data: typeof b["data"] === "string" ? b["data"] : void 0,
+				mime: typeof b["mime"] === "string" ? b["mime"] : void 0
+			});
+			return norm ? imageBlockForProvider(norm, provider) : null;
+		}
+	}
+	return block;
+}
+/** Does a message's `content` array carry any vendor-neutral image block? */
+function contentHasNeutralImage(content) {
+	if (!Array.isArray(content)) return false;
+	return content.some((b) => {
+		if (typeof b !== "object" || b === null) return false;
+		const bb = b;
+		return bb["type"] === "image" && ("url" in bb || "data" in bb) && !("source" in bb);
+	});
+}
+/** Does ANY message carry a vendor-neutral image block in its content array? */
+function messagesHaveNeutralImage(messages) {
+	return messages.some((m) => contentHasNeutralImage(m?.content));
+}
+/**
+* Normalize ONE message's content array into a single native-shaped block list:
+* a string → a `[{type:'text', text}]` block (empty string → no block); an
+* array → its blocks mapped via `nativeContentBlock` (vendor-neutral images to
+* native, others untouched, normalize-away blocks dropped). Returns the block
+* list for the array/string cases; for any other value returns `null` so the
+* caller can leave it untouched (don't coerce a shape we don't understand).
+*/
+function normalizeContentBlocks(content, provider) {
+	if (typeof content === "string") return content.length > 0 ? [{
+		type: "text",
+		text: content
+	}] : [];
+	if (Array.isArray(content)) return content.map((b) => nativeContentBlock(b, provider)).filter((b) => b !== null);
+	return null;
+}
+/**
+* Map a registered prompt's `messages` into a single provider-native format AND
+* (optionally) attach extra `images` to the last user message.
+*
+* `amba_ai_prompts_invoke` keeps its provider-shaped admin-test envelope for
+* backwards compatibility. Any VENDOR-NEUTRAL `{type:'image', url|data}` block
+* — whether it came
+* from the `images` convenience param OR was put directly in `messages` by the
+* caller — must be mapped to the provider's native shape HERE.
+*
+* Conservative by design: a message is rewritten ONLY when it needs it — it
+* carries vendor-neutral image blocks, OR it's the last user message receiving
+* appended `images`. Plain text / already-native messages pass through
+* byte-identical (no needless string→block conversion). When no user message
+* exists but extra `images` were supplied, a fresh user message is appended.
+* Returns a NEW array — the caller's `messages` is never mutated.
+*/
+function attachImagesToMessages(messages, images, provider) {
+	const imageBlocks = images.map(normalizeImage).filter((img) => img !== null).map((img) => imageBlockForProvider(img, provider));
+	const out = messages.map((m) => ({ ...m }));
+	let lastUserIdx = -1;
+	for (let i = out.length - 1; i >= 0; i--) if (out[i].role === "user") {
+		lastUserIdx = i;
+		break;
+	}
+	for (let i = 0; i < out.length; i++) {
+		const isTarget = i === lastUserIdx && imageBlocks.length > 0;
+		const needsImageMapping = contentHasNeutralImage(out[i].content);
+		if (!isTarget && !needsImageMapping) continue;
+		const blocks = normalizeContentBlocks(out[i].content, provider);
+		if (blocks === null) {
+			if (isTarget) out[i] = {
+				...out[i],
+				content: [{
+					type: "text",
+					text: JSON.stringify(out[i].content ?? "")
+				}, ...imageBlocks]
+			};
+			continue;
+		}
+		const withImages = isTarget ? [...blocks, ...imageBlocks] : blocks;
+		if (withImages.length === 0) continue;
+		out[i] = {
+			...out[i],
+			content: withImages
+		};
+	}
+	if (lastUserIdx === -1 && imageBlocks.length > 0) out.push({
+		role: "user",
+		content: imageBlocks
+	});
+	return out;
+}
+/**
+* Map ONE message's content into Gemini `parts`. A string → a single
+* `{text}` part; a non-string, non-array value → one JSON-stringified `{text}`
+* part; an array → each block mapped (vendor-neutral text → `{text}`,
+* vendor-neutral image → `inline_data`/`file_data`, a normalize-away image
+* dropped, and any UNKNOWN/alien block — e.g. an OpenAI `image_url` or
+* Anthropic `source` shape — dropped). Mirrors the gateway's
+* `mapContentGeminiParts` exactly so a server-side test invocation produces the
+* same upstream body the production `/prompts/:name/invoke` path does.
+*/
+function geminiPartsForContent(content) {
+	if (typeof content === "string") return [{ text: content }];
+	if (!Array.isArray(content)) return [{ text: JSON.stringify(content ?? "") }];
+	const parts = [];
+	for (const block of content) {
+		if (typeof block !== "object" || block === null) continue;
+		const b = block;
+		if (b["type"] === "text" && typeof b["text"] === "string") {
+			parts.push({ text: b["text"] });
+			continue;
+		}
+		if (b["type"] === "image" && ("url" in b || "data" in b)) {
+			const norm = normalizeImage({
+				url: typeof b["url"] === "string" ? b["url"] : void 0,
+				data: typeof b["data"] === "string" ? b["data"] : void 0,
+				mime: typeof b["mime"] === "string" ? b["mime"] : void 0
+			});
+			if (norm) parts.push(imageBlockForProvider(norm, "gemini"));
+			continue;
+		}
+	}
+	return parts;
+}
+/**
+* Build Gemini's `contents[]` from a registered prompt's `messages`, mapping
+* roles (assistant/model → "model", everything else → "user"), translating
+* content into `parts`, and appending any extra `images` to the last user turn
+* (creating one if none exists). Messages whose content maps to NO parts are
+* dropped (an empty turn is rejected upstream). Returns a NEW array — the
+* caller's `messages` is never mutated.
+*/
+function geminiContentsFromMessages(messages, images) {
+	const imageParts = images.map(normalizeImage).filter((img) => img !== null).map((img) => imageBlockForProvider(img, "gemini"));
+	const contents = messages.map((m) => ({
+		role: m.role === "assistant" || m.role === "model" ? "model" : "user",
+		parts: geminiPartsForContent(m.content)
+	}));
+	if (imageParts.length > 0) {
+		let lastUserIdx = -1;
+		for (let i = contents.length - 1; i >= 0; i--) if (contents[i].role === "user") {
+			lastUserIdx = i;
+			break;
+		}
+		if (lastUserIdx === -1) contents.push({
+			role: "user",
+			parts: [...imageParts]
+		});
+		else contents[lastUserIdx] = {
+			role: "user",
+			parts: [...contents[lastUserIdx].parts, ...imageParts]
+		};
+	}
+	return contents.filter((c) => c.parts.length > 0);
+}
+function registerTools$13(server, apiClient) {
+	registerTool(server, apiClient, "amba_ai_prompts_create", [
+		"Register a new AI prompt template on a project. Returns the persisted prompt row (name, version, provider, model, client_invokable).",
+		"Name must match /^[a-z][a-z0-9_-]{0,127}$/. Provider must be \"anthropic\", \"openai\", \"mistral\", or \"gemini\" and must already be registered via `amba_ai_providers_set`. Model is the provider-native model id (e.g. \"claude-sonnet-4-5-20250929\", \"gpt-4o-2024-08-06\", \"gemini-2.5-flash\").",
+		"Set `client_invokable=true` to allow SDK callers (e.g. amba-web, amba-react) to invoke the prompt via `Amba.ai.run()`. Defaults false — server-side / admin invocation only.",
+		"Re-issuing this tool with an existing `name` will bump the prompt to a new version; prefer `amba_ai_prompts_update` for that intent."
+	].join(" "), {
+		project_id: z.string().describe("The Amba project ID."),
+		name: z.string().describe("Prompt name. /^[a-z][a-z0-9_-]{0,127}$/."),
+		provider: PROVIDER_ENUM$1.describe("AI provider. Must already be registered via `amba_ai_providers_set`."),
+		model: z.string().describe("Provider-native model id."),
+		system_prompt: z.string().nullable().optional().describe("System prompt sent on every invocation. Omit or null for no system prompt."),
+		max_tokens: z.number().int().min(1).max(2e5).optional().describe("Max output tokens per invocation. Defaults to 4096."),
+		rate_limit: RATE_LIMIT_SHAPE.nullable().optional().describe("Optional per-key rate limit."),
 		client_invokable: z.boolean().optional().describe("When true, end-user SDK code can invoke this prompt. Defaults false.")
 	}, async ({ project_id, name, provider, model, system_prompt, max_tokens, rate_limit, client_invokable }, { pat }) => {
 		const body = {
@@ -5780,9 +6547,10 @@ function registerTools$7(server, apiClient) {
 		});
 	}, ["amba_delete_ai_prompt"]);
 	registerTool(server, apiClient, "amba_ai_prompts_invoke", [
-		"Server-side test invocation of a registered AI prompt. Looks up the prompt's provider + model + system_prompt + max_tokens, then proxies a Messages-API call through the admin AI gateway using the customer's registered provider key.",
-		"Provide `messages` as a provider-shaped array (e.g. Anthropic: `[{role: \"user\", content: \"...\"}]`). For testing — production traffic goes through the SDK or the function-side `ctx.ai.run()` helper.",
-		"`extra_body` lets you pass additional provider-native parameters (temperature, top_p, response_format, …). These are merged shallow on top of the prompt-derived body — so a `model` override here wins."
+		"Server-side test invocation of a registered AI prompt. Looks up the prompt's provider + model + system_prompt + max_tokens, then proxies the call through the admin AI gateway using the customer's registered provider key. Works for every provider — Anthropic / OpenAI / Mistral build a Messages-style body; Gemini builds its contents[] body automatically.",
+		"Provide `messages` as a simple `[{role: \"user\", content: \"...\"}]` array (roles: \"user\"/\"assistant\"/\"system\"; for Gemini, \"assistant\" maps to \"model\" and \"system\" is taken from the prompt). This server/admin path works even when `client_invokable=false` and enforces the named prompt budget, rate limit, and usage attribution.",
+		"To send IMAGES to a vision-capable model, pass `images` (each `{url}` or `{data, mime}`) — they attach to the last user message, mapped to the provider's native image format for you. The prompt's model must be vision-capable.",
+		"`extra_body` lets you pass allowlisted provider-native tuning parameters (temperature, top_p, response_format, …). The registered prompt model and configured max-token cap remain authoritative."
 	].join(" "), {
 		project_id: z.string().describe("The Amba project ID."),
 		name: z.string().describe("Registered prompt name."),
@@ -5790,21 +6558,39 @@ function registerTools$7(server, apiClient) {
 			role: z.string().describe("Anthropic / OpenAI role (e.g. \"user\", \"assistant\", \"system\")."),
 			content: z.unknown().describe("Message content. String or provider-native array form.")
 		})).min(1).describe("Provider-shaped messages array. At least one message required."),
+		images: z.array(z.object({
+			url: z.string().optional().describe("Remote image URL. Use this OR `data` (base64), not both."),
+			data: z.string().optional().describe("Base64-encoded image bytes (no data: prefix)."),
+			mime: z.string().optional().describe("MIME type for a base64 image (e.g. \"image/png\"). Defaults to image/png.")
+		})).optional().describe("Optional vision input. Each image attaches to the last user message and is mapped to the provider's native image format. The prompt's model must be vision-capable (e.g. claude-sonnet-4-5, gpt-4o, gemini-2.5-pro)."),
 		extra_body: z.record(z.unknown()).optional().describe("Optional extra fields merged into the upstream body. Allowlisted keys only: temperature, top_p, top_k, stop, stop_sequences, response_format, frequency_penalty, presence_penalty, seed, tools, tool_choice, metadata. Unrecognised keys are rejected to prevent provider-body smuggling (e.g. authorization, model overrides).")
-	}, async ({ project_id, name, messages, extra_body }, { pat }) => {
+	}, async ({ project_id, name, messages, images, extra_body }, { pat }) => {
 		const prompt = (await callWithPat(apiClient, pat, "GET", `/projects/${encodeURIComponent(project_id)}/ai/prompts/${encodeURIComponent(name)}`) ?? {}).data;
 		if (!prompt) throw new Error(`Prompt "${name}" not found.`);
-		const body = {
-			model: prompt.model,
-			max_tokens: prompt.max_tokens
-		};
-		if (prompt.provider === "anthropic") {
-			if (prompt.system_prompt) body.system = prompt.system_prompt;
-			body.messages = messages;
-		} else body.messages = prompt.system_prompt ? [{
-			role: "system",
-			content: prompt.system_prompt
-		}, ...messages] : messages;
+		const hasImagesParam = Array.isArray(images) && images.length > 0;
+		let body;
+		if (prompt.provider === "gemini") {
+			body = {
+				model: prompt.model,
+				contents: geminiContentsFromMessages(messages, images ?? []),
+				generationConfig: { maxOutputTokens: prompt.max_tokens }
+			};
+			if (prompt.system_prompt) body.systemInstruction = { parts: [{ text: prompt.system_prompt }] };
+		} else {
+			const messagesHaveImageBlocks = messagesHaveNeutralImage(messages);
+			const effectiveMessages = hasImagesParam || messagesHaveImageBlocks ? attachImagesToMessages(messages, images ?? [], prompt.provider) : messages;
+			body = {
+				model: prompt.model,
+				max_tokens: prompt.max_tokens
+			};
+			if (prompt.provider === "anthropic") {
+				if (prompt.system_prompt) body.system = prompt.system_prompt;
+				body.messages = effectiveMessages;
+			} else body.messages = prompt.system_prompt ? [{
+				role: "system",
+				content: prompt.system_prompt
+			}, ...effectiveMessages] : effectiveMessages;
+		}
 		if (extra_body) {
 			const ALLOWED_EXTRA_KEYS = new Set([
 				"temperature",
@@ -5820,16 +6606,67 @@ function registerTools$7(server, apiClient) {
 				"tool_choice",
 				"metadata"
 			]);
-			for (const [k, v] of Object.entries(extra_body)) {
-				if (!ALLOWED_EXTRA_KEYS.has(k)) throw new Error(`extra_body key "${k}" is not allowed. Allowlist: ${Array.from(ALLOWED_EXTRA_KEYS).join(", ")}`);
-				body[k] = v;
-			}
+			for (const k of Object.keys(extra_body)) if (!ALLOWED_EXTRA_KEYS.has(k)) throw new Error(`extra_body key "${k}" is not allowed. Allowlist: ${Array.from(ALLOWED_EXTRA_KEYS).join(", ")}`);
+			if (prompt.provider === "gemini") {
+				const gc = body.generationConfig ?? {};
+				const GEMINI_KEY = {
+					temperature: "temperature",
+					top_p: "topP",
+					top_k: "topK",
+					seed: "seed",
+					frequency_penalty: "frequencyPenalty",
+					presence_penalty: "presencePenalty"
+				};
+				for (const [k, v] of Object.entries(extra_body)) if (k === "stop" || k === "stop_sequences") gc.stopSequences = Array.isArray(v) ? v : [v];
+				else if (k === "response_format") {
+					const rf = typeof v === "object" && v !== null ? v : null;
+					const rfType = rf?.["type"];
+					if (rfType === "json_object") gc.responseMimeType = "application/json";
+					else if (rfType === "json_schema") {
+						gc.responseMimeType = "application/json";
+						const schema = rf && typeof rf["schema"] === "object" && rf["schema"] !== null ? rf["schema"] : void 0;
+						if (schema !== void 0) gc.responseSchema = schema;
+					}
+				} else if (k in GEMINI_KEY) gc[GEMINI_KEY[k]] = v;
+				else body[k] = v;
+				body.generationConfig = gc;
+			} else for (const [k, v] of Object.entries(extra_body)) body[k] = v;
 		}
-		return jsonResult(await callWithPat(apiClient, pat, "POST", `/projects/${encodeURIComponent(project_id)}/ai/messages`, { body: {
+		return jsonResult(await callWithPat(apiClient, pat, "POST", `/projects/${encodeURIComponent(project_id)}/ai/prompts/${encodeURIComponent(name)}/invoke`, { body: {
 			provider: prompt.provider,
 			body
 		} }));
 	}, ["amba_invoke_ai_prompt"]);
+	registerTool(server, apiClient, "amba_ai_prompts_set_budget", [
+		"Set (or clear) a per-prompt AI spend budget. Caps how much this one prompt can spend on model calls per period; once the period's spend reaches the budget, invocations are denied with a clear `ai_budget_exceeded` error until the period resets — so an exposed prompt can't burn unbounded spend.",
+		"Pass `budget_usd` as a dollar amount (e.g. 25 = $25). Pass `budget_usd: null` to remove the budget (unlimited — the default). `budget_period` is the reset cadence: \"monthly\" (default), \"daily\", or \"total\" (never resets).",
+		"Returns the persisted budget. For the whole-project ceiling instead, use `amba_billing_set_ceiling`."
+	].join(" "), {
+		project_id: z.string().describe("The Amba project ID."),
+		name: z.string().describe("Registered prompt name to budget."),
+		budget_usd: z.number().min(0).max(1e6).nullable().describe("Per-period USD ceiling. Pass null to clear the budget (unlimited)."),
+		budget_period: z.enum([
+			"daily",
+			"monthly",
+			"total"
+		]).optional().describe("Reset cadence. Defaults to \"monthly\" when a budget is set.")
+	}, async ({ project_id, name, budget_usd, budget_period }, { pat }) => {
+		const body = { budget_usd };
+		if (budget_period !== void 0) body.budget_period = budget_period;
+		return jsonResult(await callWithPat(apiClient, pat, "PUT", `/projects/${encodeURIComponent(project_id)}/ai/prompts/${encodeURIComponent(name)}/budget`, { body }));
+	});
+	registerTool(server, apiClient, "amba_ai_prompts_get_spend", ["Read a prompt's AI spend for the current budget period, alongside its budget (if any). Returns { name, period, period_start, spend_usd, budget_usd, exceeded }.", "Spend is summed from the per-call cost of every invocation in the period. Use this to check headroom before raising a budget, or to diagnose an `ai_budget_exceeded` denial. Pass `period` to inspect a different window (defaults to the prompt's configured period, or \"monthly\")."].join(" "), {
+		project_id: z.string().describe("The Amba project ID."),
+		name: z.string().describe("Registered prompt name."),
+		period: z.enum([
+			"daily",
+			"monthly",
+			"total"
+		]).optional().describe("Spend window to report. Defaults to the prompt's configured budget period.")
+	}, async ({ project_id, name, period }, { pat }) => {
+		const query = period ? `?period=${encodeURIComponent(period)}` : "";
+		return jsonResult(await callWithPat(apiClient, pat, "GET", `/projects/${encodeURIComponent(project_id)}/ai/prompts/${encodeURIComponent(name)}/spend${query}`));
+	});
 }
 //#endregion
 //#region src/tools/ai-providers-admin.ts
@@ -5839,7 +6676,7 @@ const PROVIDER_ENUM = z.enum([
 	"mistral",
 	"gemini"
 ]);
-function registerTools$6(server, apiClient) {
+function registerTools$12(server, apiClient) {
 	registerTool(server, apiClient, "amba_ai_providers_set", [
 		"Register or rotate the upstream AI provider API key for a project. This is the key the AI gateway uses to call the model on your behalf when you invoke a prompt or `Amba.ai.*`.",
 		"Call this BEFORE `amba_ai_prompts_create` — a prompt references a registered provider, and invocations fail with `provider_not_configured` (424) until a key is set.",
@@ -5879,7 +6716,7 @@ const STATUS_ENUM = z.enum([
 	"paused",
 	"ended"
 ]).describe("active = assigns + exposes new users; paused = serves existing assignments but issues no new ones; ended = read-only.");
-function registerTools$5(server, apiClient) {
+function registerTools$11(server, apiClient) {
 	registerTool(server, apiClient, "amba_experiments_create", [
 		"Create an A/B experiment: a stable `key`, a display `name`, and >= 2 weighted variants.",
 		"End-users are bucketed into a STICKY variant the first time they request an assignment",
@@ -5982,25 +6819,28 @@ function registerTools$5(server, apiClient) {
 }
 //#endregion
 //#region src/tools/promotion.ts
-function registerTools$4(server, apiClient) {
+function registerTools$10(server, apiClient) {
 	registerTool(server, apiClient, "amba_project_export", [
 		"Export a declarative bundle of a project's reusable configuration so it can be re-created in another project (e.g. promote dev → prod) in one operation.",
-		"The bundle includes (each section only when present): remote configs, collection SCHEMAS (column defs + indexes, no rows), content libraries + their items, and the full gamification set — currencies, achievements, streaks, challenges, leaderboards, and xp rules — as DEFINITIONS only.",
-		"It carries NO secrets, NO per-user data, and NO end-user rows. Pass the returned `bundle` to `amba_project_import` against the target project."
+		"The bundle includes (each section only when present): remote configs, collection SCHEMAS (column defs + indexes, no rows), content libraries + their items, the full gamification set — currencies, achievements, streaks, challenges, leaderboards, and xp rules — as DEFINITIONS only, plus integrations (push providers et al.) as non-secret config: bundle id, team/key ids, environment travel; `.p8` keys, service-account JSON, and API keys are stripped and marked `credentials: \"stripped\"`.",
+		"It carries NO secrets, NO per-user data, and NO end-user rows — safe to save to disk, commit, or diff. Pass the returned `bundle` to `amba_project_import` against the target project; if both projects belong to the same developer, import with `include_integration_credentials: true` and the credentials are copied server-side too, so push works on the target without re-uploading keys."
 	].join(" "), { project_id: z.string().describe("The Amba project ID to export configuration FROM.") }, async ({ project_id }, { pat }) => {
 		return jsonResult(await callWithPat(apiClient, pat, "GET", `/projects/${encodeURIComponent(project_id)}/promotion/export`));
 	});
 	registerTool(server, apiClient, "amba_project_import", [
-		"Import a declarative configuration bundle (from `amba_project_export`) into a project. Idempotently creates remote configs, collections, content libraries + items, and gamification definitions (currencies, achievements, streaks, challenges, leaderboards, xp rules).",
-		"mode=\"skip_existing\" (default) leaves any entity that already exists (by name/key/code) untouched; mode=\"merge\" refreshes the definition of existing entities. Either mode is safe to run twice — re-import never duplicates.",
-		"Returns a per-section summary of { created, skipped, updated }. Collections are create-if-absent only (an existing collection is skipped; alter the schema via the dedicated collection tools)."
+		"Import a declarative configuration bundle (from `amba_project_export`) into a project. Idempotently creates remote configs, collections, content libraries + items, gamification definitions (currencies, achievements, streaks, challenges, leaderboards, xp rules), and integrations.",
+		"mode=\"skip_existing\" (default) leaves any entity that already exists (by name/key/code) untouched; mode=\"merge\" refreshes the definition of existing entities. Either mode is safe to run twice — re-import never duplicates, and merge never clobbers credentials an existing integration already has.",
+		"Integrations: bundles never carry credential material. By default each imported integration lands inactive in a `pending_credentials` state and the response tells you exactly which call uploads the credentials (`amba_integrations_configure`). When the source and target projects belong to the SAME developer, pass `include_integration_credentials: true` instead — the stored credentials are copied server-side between the projects (never through this conversation) and the integrations activate immediately, making dev → prod push promotion a single call. Cross-developer copies are refused with a 403.",
+		"Returns a per-section summary of { created, skipped, updated } plus a per-integration status list. Collections are create-if-absent only (an existing collection is skipped; alter the schema via the dedicated collection tools)."
 	].join(" "), {
 		project_id: z.string().describe("The Amba project ID to import configuration INTO."),
 		bundle: z.record(z.unknown()).describe("The bundle object returned by `amba_project_export` (its `data` field)."),
-		mode: z.enum(["merge", "skip_existing"]).optional().describe("Conflict resolution. \"skip_existing\" (default) no-ops on a name/key/code conflict; \"merge\" updates the existing definition.")
-	}, async ({ project_id, bundle, mode }, { pat }) => {
+		mode: z.enum(["merge", "skip_existing"]).optional().describe("Conflict resolution. \"skip_existing\" (default) no-ops on a name/key/code conflict; \"merge\" updates the existing definition."),
+		include_integration_credentials: z.boolean().optional().describe("Copy integration credentials (push keys, provider API keys) server-side from the bundle's source project and activate the integrations on the target. Only allowed when both projects belong to the same developer; otherwise the import is refused. Omit (default) to create integrations in a pending_credentials state and upload credentials separately via `amba_integrations_configure`.")
+	}, async ({ project_id, bundle, mode, include_integration_credentials }, { pat }) => {
 		const body = { bundle };
 		if (mode !== void 0) body.mode = mode;
+		if (include_integration_credentials !== void 0) body.include_integration_credentials = include_integration_credentials;
 		return jsonResult(await callWithPat(apiClient, pat, "POST", `/projects/${encodeURIComponent(project_id)}/promotion/import`, { body }));
 	});
 }
@@ -6080,7 +6920,11 @@ const TIER_CATALOG = {
 			unit_description: "$0.50 per 10K push"
 		},
 		db_storage_per_gb_month_usd: 1.5,
-		media_storage_per_gb_month_usd: .1
+		media_storage_per_gb_month_usd: .1,
+		app_mcp_tool_calls: {
+			per_unit_usd: .001,
+			unit_description: "$1.00 per 1K agent tool calls"
+		}
 	},
 	telemetry_event_overage: {
 		per_unit_usd: 1e-7,
@@ -6088,8 +6932,8 @@ const TIER_CATALOG = {
 		note: "Use Amba.track(name, props, { telemetry: true }) for high-volume telemetry. Cheaper, no fan-out to segments/workflows/push."
 	}
 };
-function registerTools$3(server, apiClient) {
-	registerTool(server, apiClient, "amba_billing_status", "Get the current billing tier, headroom on each metered axis (MAU, events, push, db_storage, media_storage), projected overage for the current period, spend ceiling, and what (if any) human action is required before the agent can continue safely. Use this BEFORE provisioning new features or running data-heavy workloads so the agent can self-throttle or escalate to the human.", { project_id: z.string().describe("The project ID") }, async ({ project_id }, { client }) => {
+function registerTools$9(server, apiClient) {
+	registerTool(server, apiClient, "amba_billing_status", "Get the persisted billing `tier`, runtime `effective_tier` (use this for quota/feature decisions), comp status, current-period usage by meter (MAU, events, push, db_storage, media_storage, agent tool calls) with per-meter cost, the billing period and its reset date, spend ceiling + percent consumed, a projected end-of-period overage, the live enforcement state (whether the project is in read-only mode — metered writes returning 402 — and which meters are over quota), and what (if any) human action is required before the agent can continue safely. Use this BEFORE provisioning new features or running data-heavy workloads so the agent can self-throttle or escalate to the human.", { project_id: z.string().describe("The project ID") }, async ({ project_id }, { client }) => {
 		const result = await client.get(`/projects/${project_id}/billing/status`);
 		return { content: [{
 			type: "text",
@@ -6102,7 +6946,7 @@ function registerTools$3(server, apiClient) {
 			text: JSON.stringify(TIER_CATALOG, null, 2)
 		}] };
 	});
-	registerTool(server, apiClient, "amba_billing_set_ceiling", "Set or remove the monthly spend ceiling for a project. When usage would push the bill above the ceiling, requests are throttled (returns 429) instead of accruing overage charges. Pass ceiling_usd: null to remove the ceiling (linear overage with no cap). This is a write action — surface to the human before calling.", {
+	registerTool(server, apiClient, "amba_billing_set_ceiling", "Set or remove the monthly spend ceiling for a project. When the current billing period's overage cost reaches the ceiling, the project degrades to read-only mode: metered WRITE operations (tracking events, inserting collection rows, uploads, push sends, new signups) return 402 with a machine-readable payload (code, current usage, ceiling, reset date) while reads keep working. Control-plane webhook events `billing.ceiling_warning` / `billing.ceiling_reached` fire once per period at 80% / 100% so you can alert. The new ceiling takes effect immediately. Pass ceiling_usd: null to remove the ceiling (linear overage with no cap). This is a write action — surface to the human before calling.", {
 		project_id: z.string().describe("The project ID"),
 		ceiling_usd: z.number().min(0).max(1e5).nullable().describe("Maximum monthly bill in USD, or null to disable")
 	}, async ({ project_id, ceiling_usd }, { client }) => {
@@ -6114,8 +6958,120 @@ function registerTools$3(server, apiClient) {
 	});
 }
 //#endregion
+//#region src/tools/payments.ts
+function registerTools$8(server, apiClient) {
+	registerTool(server, apiClient, "amba_payments_account_create", "Create the project's connected payments account so the app can accept payments from its users (the app is the seller; Amba takes a platform fee, Stripe carries the money). Idempotent — returns the existing account if one is already set up. After this, call amba_payments_onboarding_link to finish setup. Note: payments must be enabled on the Amba platform by the platform owner before live accounts can be created.", {
+		project_id: z.string().describe("The project ID"),
+		country: z.string().length(2).optional().describe("Two-letter ISO country code for the seller (e.g. \"US\")"),
+		email: z.string().optional().describe("Contact email for the connected account")
+	}, async ({ project_id, country, email }, { client }) => {
+		const result = await client.post(`/projects/${project_id}/payments/accounts`, {
+			...country ? { country } : {},
+			...email ? { email } : {}
+		});
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	registerTool(server, apiClient, "amba_payments_create_onboarding_link", "Generate a hosted onboarding URL the seller opens to finish setting up payments (identity, bank details — handled entirely by the payment provider, Amba never sees identity documents). Surface this URL to the human as a copy box. The link is single-use and short-lived; generate a fresh one if it expires.", { project_id: z.string().describe("The project ID") }, async ({ project_id }, { client }) => {
+		const result = await client.post(`/projects/${project_id}/payments/accounts/link`, {});
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	registerTool(server, apiClient, "amba_payments_account_status", "Read the connected payments account status — onboarding stage, whether charges and payouts are enabled, and the configured default platform fee. Returns connected_account: null when payments are not set up for the project yet. Check this before attempting a charge.", { project_id: z.string().describe("The project ID") }, async ({ project_id }, { client }) => {
+		const result = await client.get(`/projects/${project_id}/payments/accounts`);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	registerTool(server, apiClient, "amba_payments_set_fee", "Set the default platform fee taken on each payment, in basis points (e.g. 250 = 2.5%). Applied when a charge does not specify its own fee. Pass null to clear the default (each charge must then specify a fee explicitly). This is a money-affecting setting — surface it to the human before calling.", {
+		project_id: z.string().describe("The project ID"),
+		default_platform_fee_bps: z.number().int().min(0).max(1e4).nullable().describe("Platform fee in basis points (250 = 2.5%), or null to clear")
+	}, async ({ project_id, default_platform_fee_bps }, { client }) => {
+		const result = await client.put(`/projects/${project_id}/payments/config`, { default_platform_fee_bps });
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	registerTool(server, apiClient, "amba_payments_charge", "Create a payment (destination charge) on behalf of the seller, taking the platform fee. amount is in the smallest currency unit (cents). The fee is the platform fee (application_fee_amount) — provide application_fee_amount (cents) OR platform_fee_bps (basis points), else the project default is used. Returns a client_secret the app uses to confirm the payment on-device. Money-moving action — surface to the human before calling.", {
+		project_id: z.string().describe("The project ID"),
+		amount: z.number().int().positive().describe("Amount in smallest currency unit (cents)"),
+		currency: z.string().length(3).describe("3-letter ISO currency code (lowercase, e.g. \"usd\")"),
+		application_fee_amount: z.number().int().min(0).optional().describe("Platform fee in cents (overrides bps/default)"),
+		platform_fee_bps: z.number().int().min(0).max(1e4).optional().describe("Platform fee in basis points (250 = 2.5%)"),
+		client_reference: z.string().optional().describe("Opaque reference (e.g. your order id) stored with the payment")
+	}, async ({ project_id, ...body }, { client }) => {
+		const result = await client.post(`/projects/${project_id}/payments/charges`, body);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	registerTool(server, apiClient, "amba_payments_refund", "Refund a payment, in full or in part. Pass the payment id (returned by amba_payments_charge) and optionally an amount in the smallest currency unit (cents) for a partial refund — omit amount to refund the full charge. The customer is refunded and BOTH the platform fee and the seller transfer are reversed proportionally, so neither Amba nor the seller is left funding it. Money-moving and not reversible — surface to the human before calling.", {
+		project_id: z.string().describe("The project ID"),
+		payment_id: z.string().describe("The payment id to refund (returned by amba_payments_charge)"),
+		amount: z.number().int().positive().optional().describe("Partial refund amount in cents; omit to refund the full charge"),
+		reason: z.enum([
+			"duplicate",
+			"fraudulent",
+			"requested_by_customer"
+		]).optional().describe("Optional refund reason"),
+		reference: z.string().optional().describe("Opaque idempotency reference: pass the same value to make a retry safe (returns the same refund); omit it and each call issues a new refund")
+	}, async ({ project_id, payment_id, ...body }, { client }) => {
+		const result = await client.post(`/projects/${project_id}/payments/charges/${payment_id}/refund`, body);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	registerTool(server, apiClient, "amba_payments_balance", "Read the seller's available and pending payment balance per currency. Use this to show the developer how much they've earned that hasn't yet been paid out.", { project_id: z.string().describe("The project ID") }, async ({ project_id }, { client }) => {
+		const result = await client.get(`/projects/${project_id}/payments/balance`);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	registerTool(server, apiClient, "amba_payments_payouts", "List the seller's recent payouts (transfers from the payment balance to their bank), with amount, currency, status, and arrival date.", {
+		project_id: z.string().describe("The project ID"),
+		limit: z.number().int().min(1).max(100).optional().describe("How many payouts to return (default 10)")
+	}, async ({ project_id, limit }, { client }) => {
+		const qs = limit ? `?limit=${limit}` : "";
+		const result = await client.get(`/projects/${project_id}/payments/payouts${qs}`);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+}
+//#endregion
+//#region src/tools/agent-checkout.ts
+function registerTools$7(server, apiClient) {
+	registerTool(server, apiClient, "amba_agent_checkout_enable", "Turn agent checkout on (or off) for a project, so your users' AI agents can pay inside your app and have entitlements unlock in the same motion. Default-deny: it stays off until you enable it. Requires a connected payments account first (set one up with amba_payments_account_create). Returns the per-rail capabilities so you can see which payment methods the account can settle. Money-affecting setting — surface it to the human before calling.", {
+		project_id: z.string().describe("The project ID"),
+		enabled: z.boolean().describe("true to enable agent checkout, false to disable")
+	}, async ({ project_id, enabled }, { client }) => {
+		const result = await client.post(`/projects/${project_id}/agent-checkout/enable`, { enabled });
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	registerTool(server, apiClient, "amba_agent_checkout_capabilities", "Read which agent-checkout settlement rails a project can offer (and, when a rail is unavailable, exactly why). Use this before enabling agent checkout, or to confirm a project is ready to accept agent-initiated payments. Returns enabled plus a per-rail availability list.", { project_id: z.string().describe("The project ID") }, async ({ project_id }, { client }) => {
+		const result = await client.get(`/projects/${project_id}/agent-checkout/capabilities`);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+}
+//#endregion
 //#region src/tools/invites.ts
-function registerTools$2(server, apiClient) {
+function registerTools$6(server, apiClient) {
 	registerTool(server, apiClient, "amba_projects_invite_member", "Invite a teammate by email to collaborate on this project. Returns the invite URL the human should send to their teammate. Roles: admin (can manage members + integrations), member (can write data), viewer (read-only).", {
 		project_id: z.string().describe("The project ID"),
 		email: z.string().describe("Teammate's email address"),
@@ -6164,8 +7120,519 @@ function registerTools$2(server, apiClient) {
 	});
 }
 //#endregion
+//#region src/tools/orgs.ts
+/**
+* Organization tools (migration 049). Orgs are the ownership + payment-entity
+* boundary; affiliates and app-factory child projects are all orgs. These wrap
+* the `/v1/admin/orgs*` and `/v1/admin/provision` routes.
+*/
+function registerTools$5(server, apiClient) {
+	registerTool(server, apiClient, "amba_orgs_create", "Create an organization. Optionally nest it under a parent org (parent_org_id) — a child org can bill to its parent (payment_source=\"parent\") or hold its own card (payment_source=\"self\").", {
+		name: z.string().describe("Human-readable org name"),
+		parent_org_id: z.string().optional().describe("Parent org UUID to nest under (omit for a top-level org)"),
+		payment_source: z.enum(["self", "parent"]).optional().describe("\"self\" = bill this org's own card; \"parent\" = bill the nearest self-paying ancestor. Default \"self\"."),
+		slug: z.string().optional().describe("Optional unique URL slug (lowercase alphanumeric/hyphen)"),
+		external_ref: z.string().optional().describe("Caller-stable idempotency key (unique per parent)")
+	}, async ({ name, parent_org_id, payment_source, slug, external_ref }, { client }) => {
+		const body = { name };
+		if (parent_org_id !== void 0) body["parent_org_id"] = parent_org_id;
+		if (payment_source !== void 0) body["payment_source"] = payment_source;
+		if (slug !== void 0) body["slug"] = slug;
+		if (external_ref !== void 0) body["external_ref"] = external_ref;
+		const result = await client.post("/orgs", body);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	registerTool(server, apiClient, "amba_orgs_list", "List organizations the authenticated developer can access, including descendant orgs in the hierarchy.", {}, async (_, { client }) => {
+		const result = await client.get("/orgs");
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	registerTool(server, apiClient, "amba_orgs_get", "Get an organization by id, including its child-org and project counts and your effective role.", { org_id: z.string().describe("The org UUID") }, async ({ org_id }, { client }) => {
+		const result = await client.get(`/orgs/${org_id}`);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	registerTool(server, apiClient, "amba_orgs_update", "Update an organization: name, slug, or payment_source. Flipping payment_source to \"self\" is the first step of graduating a child org to bill directly.", {
+		org_id: z.string().describe("The org UUID"),
+		name: z.string().optional().describe("New name"),
+		slug: z.string().optional().describe("New slug"),
+		payment_source: z.enum(["self", "parent"]).optional().describe("Billing source toggle")
+	}, async ({ org_id, name, slug, payment_source }, { client }) => {
+		const body = {};
+		if (name !== void 0) body["name"] = name;
+		if (slug !== void 0) body["slug"] = slug;
+		if (payment_source !== void 0) body["payment_source"] = payment_source;
+		const result = await client.patch(`/orgs/${org_id}`, body);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	registerTool(server, apiClient, "amba_orgs_invite_member", "Invite a developer to an organization by email. Returns an invite URL the recipient accepts to join with the given role.", {
+		org_id: z.string().describe("The org UUID"),
+		email: z.string().describe("Invitee email"),
+		role: z.enum([
+			"admin",
+			"member",
+			"viewer"
+		]).optional().describe("Role to grant on accept (default member)"),
+		expires_in_days: z.number().int().optional().describe("Invite expiry in days (1–30, default 7)")
+	}, async ({ org_id, email, role, expires_in_days }, { client }) => {
+		const body = { email };
+		if (role !== void 0) body["role"] = role;
+		if (expires_in_days !== void 0) body["expires_in_days"] = expires_in_days;
+		const result = await client.post(`/orgs/${org_id}/invites`, body);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	registerTool(server, apiClient, "amba_orgs_transfer_owner", "Transfer ownership of an organization to another developer (who must already be reachable). Optionally remove the previous owner instead of demoting them to admin.", {
+		org_id: z.string().describe("The org UUID"),
+		new_owner_developer_id: z.string().describe("Developer UUID of the new owner"),
+		remove_previous_owner: z.boolean().optional().describe("If true, remove the previous owner entirely instead of demoting to admin")
+	}, async ({ org_id, new_owner_developer_id, remove_previous_owner }, { client }) => {
+		const body = { new_owner_developer_id };
+		if (remove_previous_owner !== void 0) body["remove_previous_owner"] = remove_previous_owner;
+		const result = await client.post(`/orgs/${org_id}/transfer-ownership`, body);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	registerTool(server, apiClient, "amba_provision_app", "App factory: atomically create a child org + a project under it and return the project keys. IDEMPOTENT by external_ref — a retry with the same (parent_org_id, external_ref) returns the same org/project (with keys_already_issued=true, since plaintext keys are shown only once). Store the keys from the first response.", {
+		parent_org_id: z.string().describe("Parent org UUID to create the child under"),
+		external_ref: z.string().describe("Stable per-app key for idempotency (e.g. your customer/app id)"),
+		org_name: z.string().optional().describe("Child org display name (defaults to external_ref)"),
+		project_name: z.string().optional().describe("Project display name (defaults to org_name)"),
+		bundle_id: z.string().optional().describe("Apple bundle id / Sign in with Apple audience"),
+		google_oauth_client_id: z.string().optional().describe("Google Sign In audience client id"),
+		platform: z.enum([
+			"ios",
+			"android",
+			"all"
+		]).optional().describe("Target platform (default all)"),
+		billing_mode: z.enum(["self", "parent"]).optional().describe("Child org payment_source: \"parent\" (default — bill the parent) or \"self\"")
+	}, async (args, { client }) => {
+		const body = {
+			parent_org_id: args.parent_org_id,
+			external_ref: args.external_ref
+		};
+		for (const k of [
+			"org_name",
+			"project_name",
+			"bundle_id",
+			"google_oauth_client_id",
+			"platform",
+			"billing_mode"
+		]) if (args[k] !== void 0) body[k] = args[k];
+		const result = await client.post("/provision", body);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+}
+//#endregion
+//#region src/tools/service-accounts.ts
+/**
+* Service-account lifecycle tools for Fork C delegated operator tokens.
+*
+* These tools intentionally cover only SA lifecycle. Delegated token minting is
+* an HTTP backend-to-backend call made by the partner app with the `amb_dsvc_`
+* secret; it is not exposed as an MCP tool.
+*/
+function registerTools$4(server, apiClient) {
+	registerTool(server, apiClient, "amba_service_accounts_create", "Create a scoped service account under an organization. Returns the amb_dsvc_ secret once; store it in the partner backend.", {
+		org_id: z.string().describe("Organization UUID that roots the service-account subtree"),
+		name: z.string().describe("Human-readable service account name"),
+		max_role: z.enum([
+			"owner",
+			"admin",
+			"member",
+			"viewer"
+		]).describe("Maximum role this service account may delegate"),
+		acting_developer_id: z.string().optional().describe("Optional developer UUID stamped as ownership lineage for delegated provisioning. Must be owner/admin on the org.")
+	}, async ({ org_id, name, max_role, acting_developer_id }, { client }) => {
+		const body = {
+			name,
+			max_role
+		};
+		if (acting_developer_id !== void 0) body["acting_developer_id"] = acting_developer_id;
+		const result = await client.post(`/orgs/${org_id}/service-accounts`, body);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	registerTool(server, apiClient, "amba_service_accounts_list", "List service accounts for an organization. Secrets are redacted; only prefix/last-4 and lifecycle metadata are returned.", { org_id: z.string().describe("Organization UUID") }, async ({ org_id }, { client }) => {
+		const result = await client.get(`/orgs/${org_id}/service-accounts`);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	registerTool(server, apiClient, "amba_service_accounts_revoke", "Soft-revoke a service account. Its delegated tokens become invalid after the auth cache TTL.", { service_account_id: z.string().describe("Service account UUID") }, async ({ service_account_id }, { client }) => {
+		const result = await client.post(`/service-accounts/${service_account_id}/revoke`);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+}
+//#endregion
+//#region src/tools/affiliate.ts
+/**
+* Affiliate Programs tools (migration 052). Two personas, structurally scoped:
+*   - `amba_affiliate_*` — the program owner (admin); operates over the whole
+*     program. PAT must manage the program's owner org.
+*   - `amba_affiliate_my_*` — the affiliate (self-service); derives the
+*     affiliate from the PAT's own org(s) and takes NO other-affiliate id, so
+*     an affiliate cannot read a peer's data.
+* Zero-to-enrolled bootstrap is `amba_affiliate_signup` (public, in auth.ts).
+*/
+function registerTools$3(server, apiClient) {
+	registerTool(server, apiClient, "amba_affiliate_programs_create", "Create an affiliate program owned by an org. commission is a JSON tagged-union: {\"type\":\"percentage\",\"bps\":2000} | {\"type\":\"flat\",\"amount_cents\":5000} | {\"type\":\"recurring\",\"bps\":2000,\"max_cycles\":12} | {\"type\":\"tiered\",\"bps\":1000,\"tiers\":[{\"min_conversions\":10,\"bps\":2000}]}. For multi-level programs add a \"multi_level\":[{\"level\":1,\"bps\":500}] ladder and set multi_level_enabled.", {
+		owner_organization_id: z.string().describe("Org that owns the program"),
+		name: z.string().describe("Program name"),
+		commission: z.record(z.any()).describe("Commission model (tagged-union JSON)"),
+		conversion_kind: z.enum([
+			"event",
+			"payment",
+			"entitlement"
+		]).optional().describe("Which qualifying signal counts as a conversion (default event)"),
+		conversion_event_name: z.string().optional().describe("Tenant event name that counts as a conversion (for conversion_kind=event)"),
+		conversion_entitlement_id: z.string().optional().describe("Entitlement id that counts (for conversion_kind=entitlement)"),
+		attribution_model: z.enum(["first_touch", "last_touch"]).optional().describe("Which touch gets the credit (default last_touch)"),
+		attribution_window_days: z.number().int().optional().describe("Days a touch remains attributable (0–365, default 30)"),
+		allow_self_referral: z.boolean().optional().describe("Allow the owner org to enroll as its own affiliate (default false)"),
+		multi_level_enabled: z.boolean().optional().describe("Pay upline overrides per the commission \"multi_level\" ladder (default false)"),
+		currency: z.string().optional().describe("ISO currency (default usd)"),
+		payout_schedule: z.enum([
+			"manual",
+			"weekly",
+			"monthly"
+		]).optional(),
+		payout_threshold_cents: z.number().int().optional(),
+		hold_period_days: z.number().int().optional().describe("Refund-window holdback before commissions become payable"),
+		platform_fee_bps: z.number().int().optional().describe("Amba's cut on payouts (basis points)"),
+		approval_mode: z.enum(["auto", "manual"]).optional(),
+		funding_source: z.enum(["split_at_source", "external"]).optional().describe("Where commission money sources from (split_at_source default | external). Recorded today; the transfer mechanism is gated.")
+	}, async (args, { client }) => {
+		const result = await client.post("/affiliate/programs", args);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	registerTool(server, apiClient, "amba_affiliate_programs_list", "List affiliate programs owned by orgs you can access.", {}, async (_, { client }) => {
+		const result = await client.get("/affiliate/programs");
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	registerTool(server, apiClient, "amba_affiliate_programs_get", "Get an affiliate program by id.", { program_id: z.string() }, async ({ program_id }, { client }) => {
+		const result = await client.get(`/affiliate/programs/${program_id}`);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	registerTool(server, apiClient, "amba_affiliate_programs_update", "Update an affiliate program (status, payout config, fee, approval mode, conversion definition, attribution, multi-level). Set status=\"active\" to launch; set multi_level_enabled=true to start paying upline overrides.", {
+		program_id: z.string(),
+		status: z.enum([
+			"draft",
+			"active",
+			"paused",
+			"archived"
+		]).optional(),
+		payout_threshold_cents: z.number().int().optional(),
+		hold_period_days: z.number().int().optional(),
+		platform_fee_bps: z.number().int().optional(),
+		approval_mode: z.enum(["auto", "manual"]).optional(),
+		funding_source: z.enum(["split_at_source", "external"]).optional(),
+		payout_schedule: z.enum([
+			"manual",
+			"weekly",
+			"monthly"
+		]).optional(),
+		name: z.string().optional(),
+		conversion_kind: z.enum([
+			"event",
+			"payment",
+			"entitlement"
+		]).optional(),
+		conversion_event_name: z.string().nullable().optional(),
+		conversion_entitlement_id: z.string().nullable().optional(),
+		attribution_model: z.enum(["first_touch", "last_touch"]).optional(),
+		attribution_window_days: z.number().int().optional(),
+		allow_self_referral: z.boolean().optional(),
+		multi_level_enabled: z.boolean().optional()
+	}, async ({ program_id, ...rest }, { client }) => {
+		const result = await client.patch(`/affiliate/programs/${program_id}`, rest);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	registerTool(server, apiClient, "amba_affiliate_invite", "Enroll an affiliate. Pass affiliate_org_id to enroll an existing Amba org directly, or email to get guidance for the recipient to amba_affiliate_signup first. For multi-level programs, pass parent_enrollment_id to place the new affiliate under a sponsor (their upline).", {
+		program_id: z.string(),
+		affiliate_org_id: z.string().optional().describe("Existing affiliate org UUID to enroll"),
+		email: z.string().optional().describe("Email of an affiliate who has not yet joined Amba"),
+		parent_enrollment_id: z.string().optional().describe("Sponsor/upline enrollment id in this program (multi-level placement)")
+	}, async ({ program_id, affiliate_org_id, email, parent_enrollment_id }, { client }) => {
+		const body = {};
+		if (affiliate_org_id !== void 0) body["affiliate_org_id"] = affiliate_org_id;
+		if (email !== void 0) body["email"] = email;
+		if (parent_enrollment_id !== void 0) body["parent_enrollment_id"] = parent_enrollment_id;
+		const result = await client.post(`/affiliate/programs/${program_id}/invite`, body);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	registerTool(server, apiClient, "amba_affiliate_affiliates_list", "List a program’s affiliates with their conversion + commission totals.", { program_id: z.string() }, async ({ program_id }, { client }) => {
+		const result = await client.get(`/affiliate/programs/${program_id}/affiliates`);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	registerTool(server, apiClient, "amba_affiliate_affiliate_approve", "Approve (activate) a pending affiliate enrollment.", {
+		program_id: z.string(),
+		enrollment_id: z.string()
+	}, async ({ program_id, enrollment_id }, { client }) => {
+		const result = await client.post(`/affiliate/programs/${program_id}/affiliates/${enrollment_id}/approve`, {});
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	registerTool(server, apiClient, "amba_affiliate_affiliate_ban", "Ban an affiliate from a program (links die; pending conversions voided).", {
+		program_id: z.string(),
+		enrollment_id: z.string()
+	}, async ({ program_id, enrollment_id }, { client }) => {
+		const result = await client.post(`/affiliate/programs/${program_id}/affiliates/${enrollment_id}/ban`, {});
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	registerTool(server, apiClient, "amba_affiliate_affiliate_pause", "Pause an affiliate enrollment (their links stop earning; reversible via approve).", {
+		program_id: z.string(),
+		enrollment_id: z.string()
+	}, async ({ program_id, enrollment_id }, { client }) => {
+		const result = await client.post(`/affiliate/programs/${program_id}/affiliates/${enrollment_id}/pause`, {});
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	registerTool(server, apiClient, "amba_affiliate_affiliates_get", "Get one affiliate enrollment with its codes, conversions, and commission totals.", {
+		program_id: z.string(),
+		enrollment_id: z.string()
+	}, async ({ program_id, enrollment_id }, { client }) => {
+		const result = await client.get(`/affiliate/programs/${program_id}/affiliates/${enrollment_id}`);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	registerTool(server, apiClient, "amba_affiliate_conversions_list", "List conversions for a program (optionally filter by status).", {
+		program_id: z.string(),
+		status: z.enum([
+			"pending",
+			"approved",
+			"rejected",
+			"clawed_back"
+		]).optional()
+	}, async ({ program_id, status }, { client }) => {
+		const qs = status ? `?status=${status}` : "";
+		const result = await client.get(`/affiliate/programs/${program_id}/conversions${qs}`);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	registerTool(server, apiClient, "amba_affiliate_conversion_approve", "Approve a pending conversion so it accrues commission.", {
+		program_id: z.string(),
+		conversion_id: z.string()
+	}, async ({ program_id, conversion_id }, { client }) => {
+		const result = await client.post(`/affiliate/programs/${program_id}/conversions/${conversion_id}/approve`, {});
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	registerTool(server, apiClient, "amba_affiliate_conversion_reject", "Reject a pending conversion so it never accrues commission.", {
+		program_id: z.string(),
+		conversion_id: z.string()
+	}, async ({ program_id, conversion_id }, { client }) => {
+		const result = await client.post(`/affiliate/programs/${program_id}/conversions/${conversion_id}/reject`, {});
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	registerTool(server, apiClient, "amba_affiliate_conversion_clawback", "Claw back an approved/paid conversion (the underlying sale refunded or charged back). Pre-payout commissions are reversed; already-paid commissions become negative carry-forward netted against the affiliate’s next payout.", {
+		program_id: z.string(),
+		conversion_id: z.string(),
+		reason: z.string().optional().describe("Why (e.g. refund, chargeback). Default \"refund\".")
+	}, async ({ program_id, conversion_id, reason }, { client }) => {
+		const body = {};
+		if (reason !== void 0) body["reason"] = reason;
+		const result = await client.post(`/affiliate/programs/${program_id}/conversions/${conversion_id}/clawback`, body);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	registerTool(server, apiClient, "amba_affiliate_analytics_get", "Program-level analytics: conversion + commission totals and an affiliate leaderboard.", { program_id: z.string() }, async ({ program_id }, { client }) => {
+		const result = await client.get(`/affiliate/programs/${program_id}/analytics`);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	registerTool(server, apiClient, "amba_affiliate_leaderboard_get", "Affiliate leaderboard for a program: top affiliates by commission, with clicks + EPC.", {
+		program_id: z.string(),
+		limit: z.number().int().optional()
+	}, async ({ program_id, limit }, { client }) => {
+		const qs = limit !== void 0 ? `?limit=${limit}` : "";
+		const result = await client.get(`/affiliate/programs/${program_id}/leaderboard${qs}`);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	registerTool(server, apiClient, "amba_affiliate_payouts_list", "Settlement (payout) history for a program’s affiliates: net amount, period, transfer id, status.", { program_id: z.string() }, async ({ program_id }, { client }) => {
+		const result = await client.get(`/affiliate/programs/${program_id}/payouts`);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	registerTool(server, apiClient, "amba_affiliate_payout_run", "Run payouts for a program: pay each affiliate org their payable commissions over the threshold via Stripe Connect. Gated by ORG_PAYOUTS_LIVE (money movement).", { program_id: z.string() }, async ({ program_id }, { client }) => {
+		const result = await client.post(`/affiliate/programs/${program_id}/payouts`, {});
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	registerTool(server, apiClient, "amba_affiliate_my_programs_list", "List the affiliate programs your org(s) are enrolled in.", {}, async (_, { client }) => {
+		const result = await client.get("/affiliate-me/programs");
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	registerTool(server, apiClient, "amba_affiliate_my_invites_list", "List affiliate-program invitations pending for your org(s).", {}, async (_, { client }) => {
+		const result = await client.get("/affiliate-me/invites");
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	registerTool(server, apiClient, "amba_affiliate_my_invite_accept", "Accept an affiliate-program invitation addressed to your org (activates the enrollment and returns your referral code).", { enrollment_id: z.string() }, async ({ enrollment_id }, { client }) => {
+		const result = await client.post(`/affiliate-me/invites/${enrollment_id}/accept`, {});
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	registerTool(server, apiClient, "amba_affiliate_my_referral_generate", "Mint a FRESH referral code for a program you are enrolled in (rotates/replaces your current active code).", { program_id: z.string() }, async ({ program_id }, { client }) => {
+		const result = await client.post(`/affiliate-me/programs/${program_id}/referral`, {});
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	registerTool(server, apiClient, "amba_affiliate_my_conversions_list", "List conversions across your affiliate enrollments (optionally filter by status).", { status: z.enum([
+		"pending",
+		"approved",
+		"rejected",
+		"clawed_back"
+	]).optional() }, async ({ status }, { client }) => {
+		const qs = status ? `?status=${status}` : "";
+		const result = await client.get(`/affiliate-me/conversions${qs}`);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	registerTool(server, apiClient, "amba_affiliate_my_payout_request", "Check what one of your orgs is owed and whether its payout account is ready. Does NOT move money — owners settle payable commissions on the program schedule; this surfaces the balance + readiness.", { org_id: z.string() }, async ({ org_id }, { client }) => {
+		const result = await client.post("/affiliate-me/payout-request", { org_id });
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	registerTool(server, apiClient, "amba_affiliate_my_referral_get", "Get your referral code(s) / link(s) for a program you are enrolled in.", { program_id: z.string() }, async ({ program_id }, { client }) => {
+		const result = await client.get(`/affiliate-me/programs/${program_id}/referral`);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	registerTool(server, apiClient, "amba_affiliate_my_stats_get", "Your affiliate stats across all enrollments: conversions, earnings, pending vs paid.", {}, async (_, { client }) => {
+		const result = await client.get("/affiliate-me/stats");
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	registerTool(server, apiClient, "amba_affiliate_my_balance_get", "Your available (unpaid) and lifetime-paid commission balance, per currency.", {}, async (_, { client }) => {
+		const result = await client.get("/affiliate-me/balance");
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	registerTool(server, apiClient, "amba_affiliate_my_payouts_list", "Your payout/settlement history.", {}, async (_, { client }) => {
+		const result = await client.get("/affiliate-me/payouts");
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	registerTool(server, apiClient, "amba_affiliate_my_payout_create", "Create a Stripe Connect payout account for an org you own (so you can receive commissions).", {
+		org_id: z.string(),
+		country: z.string().optional().describe("2-letter country (default US)")
+	}, async ({ org_id, country }, { client }) => {
+		const body = { org_id };
+		if (country !== void 0) body["country"] = country;
+		const result = await client.post("/affiliate-me/payout-account", body);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	registerTool(server, apiClient, "amba_affiliate_my_payout_onboarding", "Get a hosted Stripe onboarding URL to finish setting up an org’s payout account. Surface the URL to the user as a copy box.", { org_id: z.string() }, async ({ org_id }, { client }) => {
+		const result = await client.post("/affiliate-me/payout-account/link", { org_id });
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	registerTool(server, apiClient, "amba_affiliate_my_payout_status", "Check whether an org’s payout account is set up.", { org_id: z.string() }, async ({ org_id }, { client }) => {
+		const result = await client.get(`/affiliate-me/payout-account?org_id=${org_id}`);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+}
+//#endregion
 //#region src/tools/webhooks.ts
-function registerTools$1(server, apiClient) {
+function registerTools$2(server, apiClient) {
 	registerTool(server, apiClient, "amba_webhooks_create", "Register an outbound webhook subscription. Amba sends an HMAC-signed POST to target_url every time an event named event_name fires. The signing secret is returned ONCE in this response — copy it into your receiver config; later reads never include it. target_url must be https:// (http:// is allowed only for localhost during development).", {
 		project_id: z.string().describe("The project ID"),
 		event_name: z.string().describe("Event name to subscribe to. Must match ^[a-z][a-z0-9_.-]{0,127}$ (case-insensitive)."),
@@ -6288,7 +7755,7 @@ function registerTools$1(server, apiClient) {
 }
 //#endregion
 //#region src/tools/email.ts
-function registerTools(server, apiClient) {
+function registerTools$1(server, apiClient) {
 	registerTool(server, apiClient, "amba_email_templates_create", "Create or update a transactional email template (upsert keyed by name — re-creating an existing name overwrites it). Templates are referenced by name when sending. Subject and html_body are required; text_body is an optional plain-text fallback. name must match ^[a-z][a-z0-9_]*$.", {
 		project_id: z.string().describe("The project ID"),
 		name: z.string().describe("Template name. Must match ^[a-z][a-z0-9_]*$."),
@@ -6440,11 +7907,56 @@ function registerTools(server, apiClient) {
 			text: JSON.stringify(result, null, 2)
 		}] };
 	});
-	registerTool(server, apiClient, "amba_email_deliveries_get", "Describe a single email delivery by id, including recipient, template, status, and last error if it failed.", {
+	registerTool(server, apiClient, "amba_email_deliveries_get", "Describe a single email delivery by id, including recipient, template, status, and last error if it failed.", {
+		project_id: z.string().describe("The project ID"),
+		delivery_id: z.string().describe("The delivery UUID")
+	}, async ({ project_id, delivery_id }, { client }) => {
+		const result = await client.get(`/projects/${project_id}/email/deliveries/${delivery_id}`);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+}
+//#endregion
+//#region src/tools/app-mcp.ts
+function registerTools(server, apiClient) {
+	registerTool(server, apiClient, "amba_app_mcp_get_config", "Read the configuration of this app's agent surface (the per-app MCP endpoint whose tools are the app's own collections and functions). Returns: enabled flag, hostname slug, auth_mode (which credential types may connect: all / client_only / developer_only), the exposure allowlist (which collections/functions are projected into agent tools — DEFAULT: none), and ready-to-use connection info (`connection.url` works today; `connection.hostname_url` appears once a slug is set, with a note on activation timing).", { project_id: z.string().describe("The project ID") }, async ({ project_id }, { client }) => {
+		const result = await client.get(`/projects/${project_id}/app-mcp/config`);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	registerTool(server, apiClient, "amba_app_mcp_update_config", "Update the app agent surface configuration. `enabled: false` turns the whole surface off (existing connections lose their tools on the next request). `slug` reserves a friendly hostname label for the surface (lowercase DNS label, globally unique — 409 SLUG_TAKEN on collision; null clears it). `auth_mode` restricts who may connect: \"all\" (default — developer tokens and app client keys), \"client_only\" (only the app's client keys + end-user sessions), or \"developer_only\". Provide at least one field.", {
 		project_id: z.string().describe("The project ID"),
-		delivery_id: z.string().describe("The delivery UUID")
-	}, async ({ project_id, delivery_id }, { client }) => {
-		const result = await client.get(`/projects/${project_id}/email/deliveries/${delivery_id}`);
+		enabled: z.boolean().optional().describe("Turn the agent surface on/off"),
+		slug: z.string().nullable().optional().describe("Hostname label (lowercase DNS label) or null to clear"),
+		auth_mode: z.enum([
+			"all",
+			"client_only",
+			"developer_only"
+		]).optional().describe("Which credential types may connect")
+	}, async ({ project_id, enabled, slug, auth_mode }, { client }) => {
+		const body = {};
+		if (enabled !== void 0) body.enabled = enabled;
+		if (slug !== void 0) body.slug = slug;
+		if (auth_mode !== void 0) body.auth_mode = auth_mode;
+		const result = await client.patch(`/projects/${project_id}/app-mcp/config`, body);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	registerTool(server, apiClient, "amba_app_mcp_set_exposure", "Set which collections and deployed functions the app agent surface exposes as typed tools. EXPLICIT ALLOWLIST with full-set replace semantics per provided kind: `collections: [\"recipes\"]` makes recipes the ONLY exposed collection; an empty array hides everything of that kind; an omitted kind is left unchanged. Nothing is exposed by default — after creating a collection or deploying a function, call this to make it an agent tool. Functions additionally pick up the typed input schema they declared at deploy time (metadata `mcp.input_schema`).", {
+		project_id: z.string().describe("The project ID"),
+		collections: z.array(z.string()).optional().describe("Full replacement list of exposed collection names"),
+		functions: z.array(z.string()).optional().describe("Full replacement list of exposed function names")
+	}, async ({ project_id, collections, functions }, { client }) => {
+		const body = {};
+		if (collections !== void 0) body.collections = collections;
+		if (functions !== void 0) body.functions = functions;
+		const result = await client.put(`/projects/${project_id}/app-mcp/exposure`, body);
 		return { content: [{
 			type: "text",
 			text: JSON.stringify(result, null, 2)
@@ -7738,32 +9250,33 @@ const AMBA_SETUP_SOCIAL_MIME = "text/markdown";
 * Companion to `AMBA_SETUP_GUIDE_MD`. Step 3 of the main playbook
 * tells the agent to fetch this resource when wiring infrastructure.
 *
-* Surface scope: collections (typed DB tables), functions
+* Surface scope: collections (relational Postgres tables), functions
 * (serverless), analytics, AI prompts, secrets, configs / feature
 * flags, third-party integrations, media (file storage + CDN),
 * sites (static asset hosting).
 *
 * Twin: `packages/cli/skill-bundle/references/infrastructure.md`.
-* Drift gate in `amba-setup.test.ts`. No vendor leakage (Postgres /
-* Temporal / R2 names scrubbed before exposing on the wire).
+* Drift gate in `amba-setup.test.ts`. Collections are named as relational
+* Postgres tables; the hosting supplier (Neon) and the rest of the infra
+* stack (Temporal / R2) stay scrubbed before exposing on the wire.
 */
 const AMBA_SETUP_INFRASTRUCTURE_MD = `# Infrastructure
 
-The plumbing that sits behind every other surface: custom database tables (Collections — schema-first, per-tenant), serverless functions (run server-side code without standing up a backend), analytics (events + sessions), AI prompts (managed LLM templates, callable from the SDK with per-tenant keys), secrets, runtime configs, feature flags, third-party integrations (RevenueCat / Superwall / Resend / Stripe / etc.), media (file storage + CDN), and sites (static asset hosting at \`*.app.amba.host\`).
+The plumbing that sits behind every other surface: relational Postgres tables (Collections — schema-first, per-tenant), serverless functions (run server-side code without standing up a backend), analytics (events + sessions), AI prompts (managed LLM templates, callable from the SDK with per-tenant keys), secrets, runtime configs, feature flags, third-party integrations (RevenueCat / Superwall / Stripe / push credentials), media (file storage + CDN), and sites (static asset hosting at \`*.app.amba.host\`).
 
 If gamification, economy, and social are the playable surface, **infrastructure is what you build a custom product on top of**. Anything that doesn't fit the canned surfaces lands here.
 
 ## MCP tools
 
-### Collections (typed tables)
+### Collections (relational Postgres tables)
 
-A collection is a schema-first table inside the project's isolated tenant database. You describe the columns, the server creates the table and any indexes. Rows are scoped to the signed-in \`app_user\` automatically (server-enforced auto row-level isolation) for SDK clients — admin tools bypass this.
+A collection is a relational Postgres table inside the project's isolated tenant database — typed columns, foreign keys, transactions, unique indexes, and vector search. You describe the columns, the server creates the table and any indexes. Rows are scoped to the signed-in \`app_user\` automatically (server-enforced auto row-level isolation) for SDK clients — admin tools bypass this.
 
 Admin tools authenticate the developer/agent (pass \`pat\` or send it as the inbound Bearer) and take \`project_id\`. Client tools authenticate an end-user and take \`api_key\` (+ \`session_token\`) — NOT \`project_id\` and NOT a \`pat\`. Every row tool names the collection with \`name\`, never \`collection\`.
 
 | Tool | Purpose | Example args |
 | --- | --- | --- |
-| \`amba_collections_create\` | Create a typed collection. Pass \`shared: true\` for developer-seeded GLOBAL content (question banks, lookup tables) so \`user_id\` is nullable. | \`{ project_id, name: "todos", columns: [{ name: "title", type: "text", nullable: false }, { name: "done", type: "boolean", nullable: false, default: false }, { name: "due_at", type: "timestamptz", nullable: true }], shared: false }\` |
+| \`amba_collections_create\` | Create a typed collection. Pass \`shared: true\` for developer-seeded GLOBAL content (question banks, lookup tables) so \`user_id\` is nullable. | \`{ project_id, name: "todos", columns: [{ name: "title", type: "text", nullable: false }, { name: "done", type: "boolean", nullable: false }, { name: "due_at", type: "timestamptz", nullable: true }], shared: false }\` |
 | \`amba_collections_list\` | List collections in this project. | \`{ project_id }\` |
 | \`amba_collections_get\` | Read one collection's schema. | \`{ project_id, name: "todos" }\` |
 | \`amba_collections_alter\` | Exactly ONE of: \`add_column\`, \`add_index\`, \`drop_column\`, or \`relax_user_id\` per call. \`relax_user_id: true\` converts an existing collection to shared (drops the \`user_id\` NOT NULL). | \`{ project_id, name: "todos", add_column: { name: "priority", type: "integer", nullable: true } }\` |
@@ -7780,7 +9293,7 @@ Admin tools authenticate the developer/agent (pass \`pat\` or send it as the inb
 | \`amba_client_find_rows\` | Filter / sort / paginate rows (SDK-shaped \`filter\`). | \`{ api_key, session_token, name: "todos", filter: {...}, order: ["created_at desc"], limit: 50 }\` |
 | \`amba_client_find_nearest_rows\` | Vector-similarity search (rows with a \`vector(<dim>)\` column). | \`{ api_key, session_token, name: "todos", column: "embedding", to_vector: [...], k: 10 }\` |
 
-Column types: \`text\`, \`integer\`, \`bigint\`, \`numeric\`, \`boolean\`, \`timestamptz\`, \`date\`, \`jsonb\`, \`uuid\`, \`vector(<dim>)\` (e.g. \`vector(1536)\` for OpenAI embeddings), plus array forms \`text[]\`, \`integer[]\`, \`bigint[]\`, \`numeric[]\`, \`boolean[]\`, \`uuid[]\`. Use \`integer\` (not \`int\`), \`numeric\` (not \`float\`/\`real\`/\`double\`), and \`jsonb\` (not \`json\`) — the validator rejects the aliases.
+Column types: \`text\`, \`integer\`, \`bigint\`, \`numeric\`, \`boolean\`, \`timestamptz\`, \`date\`, \`jsonb\`, \`uuid\`, \`vector\` (pass a separate \`dimension\` field, e.g. \`{ name: "embedding", type: "vector", dimension: 1536 }\` for OpenAI embeddings), plus array forms \`text[]\`, \`integer[]\`, \`bigint[]\`, \`numeric[]\`, \`boolean[]\`, \`uuid[]\`. Columns are NOT NULL unless \`nullable: true\`; column defaults are not supported (set values at insert time). Use \`integer\` (not \`int\`), \`numeric\` (not \`float\`/\`real\`/\`double\`), and \`jsonb\` (not \`json\`) — the validator rejects the aliases.
 
 ### Functions (serverless code)
 
@@ -7797,6 +9310,19 @@ Run user code in a sandbox triggered by HTTP, cron, or webhook. The function get
 | \`amba_functions_pause_schedule\` | Pause a scheduled trigger without deleting it. | \`{ project_id, function_id }\` |
 | \`amba_functions_resume_schedule\` | Resume. | \`{ project_id, function_id }\` |
 | \`amba_functions_trigger_schedule\` | Fire a scheduled function ad-hoc (testing). | \`{ project_id, function_id }\` |
+| \`amba_function_domains_attach\` | Attach one exact hostname to one function; returns DNS validation instructions. | \`{ project_id, name: "feed", hostname: "feeds.example.com" }\` |
+| \`amba_function_domains_list\` | List provider-neutral hostname, ownership, and certificate status. | \`{ project_id, name: "feed" }\` |
+| \`amba_function_domains_refresh\` | Re-poll DNS ownership and certificate state. | \`{ project_id, name: "feed", hostname: "feeds.example.com" }\` |
+| \`amba_function_domains_remove\` | Detach an exact function hostname. | \`{ project_id, name: "feed", hostname: "feeds.example.com" }\` |
+
+Function-domain routing preserves the complete incoming path and query string.
+It is exact-host only (no wildcard/path rewrite and no automatic \`www\` for a
+subdomain). Podcast/feed clients cannot attach an Amba API key, so their
+function must be deployed with \`public: true\` and validate any private token
+inside the handler. Effective-tier caps are free 1, pro 5, scale 20, and
+enterprise/comped 50; attach is limited to five attempts per project per hour.
+Unverified claims become eligible for reclaim after 24 hours, and routing
+resources are allocated only after ownership is active.
 
 ### AI prompts
 
@@ -7815,7 +9341,7 @@ Managed LLM templates: a stored prompt with provider + model + system message, i
 | \`amba_ai_prompts_list\` | List prompts. | \`{ project_id }\` |
 | \`amba_ai_prompts_get\` | Read one prompt. | \`{ project_id, name }\` |
 | \`amba_ai_prompts_update\` | Edit a prompt (replaces all fields; bumps version). | \`{ project_id, name, provider, model, system_prompt: "..." }\` |
-| \`amba_ai_prompts_invoke\` | Invoke a prompt server-side (admin testing). \`messages\` is a provider-shaped array. | \`{ project_id, name, messages: [{ role: "user", content: "..." }] }\` |
+| \`amba_ai_prompts_invoke\` | Invoke by name server-side (admin testing; works with \`client_invokable: false\`). Uses the named gateway path, so the prompt budget, rate limit, token cap, and spend attribution are enforced. | \`{ project_id, name, messages: [{ role: "user", content: "..." }] }\` |
 | \`amba_ai_prompts_delete\` | Delete. | \`{ project_id, name }\` |
 
 ### Analytics + events + sessions
@@ -7832,11 +9358,15 @@ Managed LLM templates: a stored prompt with provider + model + system message, i
 
 ### Secrets + configs + integrations
 
-Secrets here are **function-scoped** — they become environment bindings on your deployed functions. They are NOT where AI provider keys go (use \`amba_ai_providers_set\` for those — see AI prompts above).
+Secrets here become environment bindings on deployed functions. Omit \`function\`
+for a project-wide secret or pass it to scope the value to one function. Setting
+or rotating a secret queues an asynchronous update for already-deployed
+functions; later deployments reconcile the binding too. They are NOT where AI
+provider keys go (use \`amba_ai_providers_set\` for those — see AI prompts above).
 
 | Tool | Purpose | Example args |
 | --- | --- | --- |
-| \`amba_secrets_set\` | Set a function-scoped secret (encrypted at rest; bound on the next deploy). | \`{ project_id, name: "STRIPE_WEBHOOK_SECRET", value: "whsec_..." }\` |
+| \`amba_secrets_set\` | Set or rotate a function secret; omit \`function\` for project-wide scope or pass it for one function. Already-deployed functions receive it asynchronously. | \`{ project_id, name: "STRIPE_WEBHOOK_SECRET", value: "whsec_..." }\` |
 | \`amba_secrets_get\` | Read a secret (returns \`"<redacted>"\` unless explicitly requested). | \`{ project_id, name }\` |
 | \`amba_secrets_list\` | List secret names. | \`{ project_id }\` |
 | \`amba_secrets_delete\` | Delete. | \`{ project_id, name }\` |
@@ -7873,6 +9403,23 @@ Secrets here are **function-scoped** — they become environment bindings on you
 | \`amba_sites_remove_domain\` | Detach a domain. | \`{ project_id, site_id, domain }\` |
 | \`amba_sites_delete\` | Delete a site. | \`{ project_id, site_id }\` |
 
+### Purchased domains + email forwarding
+
+| Tool | Purpose | Example args |
+| --- | --- | --- |
+| \`amba_domains_search\` | Search available domains (free). | \`{ project_id, query: "myapp" }\` |
+| \`amba_domains_check\` | Check authoritative price + availability. | \`{ project_id, domains: ["myapp.com"] }\` |
+| \`amba_domains_purchase\` | Quote, then confirm, a domain purchase. | \`{ project_id, domain: "myapp.com", site: "marketing" }\` |
+| \`amba_domains_list\` | List purchased domains. | \`{ project_id }\` |
+| \`amba_domains_email_enable\` | Enable inbound routing when no MX conflict exists. | \`{ project_id, domain: "myapp.com" }\` |
+| \`amba_domains_email_destinations_add\` | Add a destination mailbox; returns action-required until verified. | \`{ project_id, domain: "myapp.com", email: "owner@example.net" }\` |
+| \`amba_domains_email_destinations_get\` | Poll destination verification. | \`{ project_id, domain: "myapp.com", destination_id }\` |
+| \`amba_domains_email_forwards_set\` | Create/update a literal forward. | \`{ project_id, domain: "myapp.com", source: "support", destination: "owner@example.net" }\` |
+| \`amba_domains_email_forwards_list\` | List literal forwards. | \`{ project_id, domain: "myapp.com" }\` |
+| \`amba_domains_email_forwards_delete\` | Delete a literal forward. | \`{ project_id, domain: "myapp.com", forward_id }\` |
+| \`amba_domains_email_catch_all_set\` | Enable/update/disable catch-all. | \`{ project_id, domain: "myapp.com", enabled: true, destination: "owner@example.net" }\` |
+| \`amba_domains_email_catch_all_get\` | Read catch-all state. | \`{ project_id, domain: "myapp.com" }\` |
+
 ## SDK init per stack
 
 \`Amba.configure(...)\` runs first. The infrastructure surfaces — collections, AI, config, flags, events — are SDK-side reads; the snippets below show what the client calls look like.
@@ -8013,15 +9560,13 @@ Batch.
 
 4. **Analytics:** which tracker do you want?
    - Only Amba's built-in events (recommended — already wired)
-   - Amba + Mixpanel / PostHog / Segment forwarding (configure via \`amba_integrations_configure\`)
+   - Amba + your own analytics pipeline (subscribe a webhook to project events via \`amba_webhooks_create\` and forward server-side)
    - None (rarely useful — events drive XP / achievements / streaks; disabling cripples gamification)
 
 5. **Third-party integrations to set up:**
    - [ ] RevenueCat (IAP / subscriptions on iOS + Android)
    - [ ] Superwall (paywall A/B)
-   - [ ] Resend (transactional email)
-   - [ ] Stripe (web payments / subscriptions)
-   - [ ] Mixpanel / PostHog / Segment (analytics forwarding)
+   - [ ] Stripe Billing (web subscriptions through the app's own Stripe account — provider \`stripe_billing\`)
    - [ ] OpenAI / Anthropic / Mistral / Gemini LLM keys (required for \`Amba.ai.*\` — set via \`amba_ai_providers_set\`, **not** \`amba_integrations_configure\`)
 
 6. **Feature flags:** seed any starter flags?
@@ -8279,6 +9824,9 @@ const TOOL_CATEGORY = {
 	amba_content_list_items: "engagement",
 	amba_content_update_item: "engagement",
 	amba_content_delete_item: "engagement",
+	amba_content_translations_set: "engagement",
+	amba_content_translations_list: "engagement",
+	amba_content_translations_delete: "engagement",
 	amba_content_bulk_import: "engagement",
 	amba_content_schedules_create: "engagement",
 	amba_create_content_schedule: "engagement",
@@ -8361,6 +9909,17 @@ const TOOL_CATEGORY = {
 	amba_delete_challenge: "gamification",
 	amba_challenges_list_participants: "gamification",
 	amba_list_challenge_participants: "gamification",
+	amba_monetization_plan: "economy",
+	amba_monetization_drift: "economy",
+	amba_monetization_export: "economy",
+	amba_monetization_definitions_list: "economy",
+	amba_monetization_adopt: "economy",
+	amba_monetization_apply: "economy",
+	amba_entitlements_define: "economy",
+	amba_products_create: "economy",
+	amba_entitlements_map_product: "economy",
+	amba_offerings_create: "economy",
+	amba_offerings_list: "economy",
 	amba_currencies_create: "economy",
 	amba_create_currency: "economy",
 	amba_currencies_list: "economy",
@@ -8470,6 +10029,7 @@ const TOOL_CATEGORY = {
 	amba_events_list: "analytics",
 	amba_events_count: "analytics",
 	amba_events_track: "analytics",
+	amba_events_explain: "analytics",
 	amba_analytics_get: "analytics",
 	amba_get_analytics: "analytics",
 	amba_sessions_list: "analytics",
@@ -8502,6 +10062,48 @@ const TOOL_CATEGORY = {
 	amba_reprovision_project: "infrastructure",
 	amba_projects_get_provisioning_status: "infrastructure",
 	amba_get_provisioning_status: "infrastructure",
+	amba_orgs_create: "infrastructure",
+	amba_orgs_list: "infrastructure",
+	amba_orgs_get: "infrastructure",
+	amba_orgs_update: "infrastructure",
+	amba_orgs_invite_member: "infrastructure",
+	amba_orgs_transfer_owner: "infrastructure",
+	amba_provision_app: "infrastructure",
+	amba_service_accounts_create: "infrastructure",
+	amba_service_accounts_list: "infrastructure",
+	amba_service_accounts_revoke: "infrastructure",
+	amba_affiliate_signup: "economy",
+	amba_affiliate_programs_create: "economy",
+	amba_affiliate_programs_list: "economy",
+	amba_affiliate_programs_get: "economy",
+	amba_affiliate_programs_update: "economy",
+	amba_affiliate_invite: "economy",
+	amba_affiliate_affiliates_list: "economy",
+	amba_affiliate_affiliates_get: "economy",
+	amba_affiliate_affiliate_approve: "economy",
+	amba_affiliate_affiliate_pause: "economy",
+	amba_affiliate_affiliate_ban: "economy",
+	amba_affiliate_conversions_list: "economy",
+	amba_affiliate_conversion_approve: "economy",
+	amba_affiliate_conversion_reject: "economy",
+	amba_affiliate_conversion_clawback: "economy",
+	amba_affiliate_analytics_get: "economy",
+	amba_affiliate_leaderboard_get: "economy",
+	amba_affiliate_payouts_list: "economy",
+	amba_affiliate_payout_run: "economy",
+	amba_affiliate_my_programs_list: "economy",
+	amba_affiliate_my_referral_get: "economy",
+	amba_affiliate_my_referral_generate: "economy",
+	amba_affiliate_my_stats_get: "economy",
+	amba_affiliate_my_balance_get: "economy",
+	amba_affiliate_my_invites_list: "economy",
+	amba_affiliate_my_invite_accept: "economy",
+	amba_affiliate_my_conversions_list: "economy",
+	amba_affiliate_my_payouts_list: "economy",
+	amba_affiliate_my_payout_request: "economy",
+	amba_affiliate_my_payout_create: "economy",
+	amba_affiliate_my_payout_onboarding: "economy",
+	amba_affiliate_my_payout_status: "economy",
 	amba_collections_create: "infrastructure",
 	amba_create_collection: "infrastructure",
 	amba_collections_list: "infrastructure",
@@ -8547,6 +10149,10 @@ const TOOL_CATEGORY = {
 	amba_resume_function_schedule: "infrastructure",
 	amba_functions_trigger_schedule: "infrastructure",
 	amba_trigger_function_schedule: "infrastructure",
+	amba_function_domains_attach: "infrastructure",
+	amba_function_domains_list: "infrastructure",
+	amba_function_domains_refresh: "infrastructure",
+	amba_function_domains_remove: "infrastructure",
 	amba_sites_list: "infrastructure",
 	amba_list_sites: "infrastructure",
 	amba_sites_get: "infrastructure",
@@ -8557,6 +10163,8 @@ const TOOL_CATEGORY = {
 	amba_delete_site: "infrastructure",
 	amba_sites_add_domain: "infrastructure",
 	amba_add_site_domain: "infrastructure",
+	amba_sites_refresh_domain: "infrastructure",
+	amba_refresh_site_domain: "infrastructure",
 	amba_sites_remove_domain: "infrastructure",
 	amba_remove_site_domain: "infrastructure",
 	amba_sites_list_domains: "infrastructure",
@@ -8565,6 +10173,16 @@ const TOOL_CATEGORY = {
 	amba_domains_check: "infrastructure",
 	amba_domains_purchase: "infrastructure",
 	amba_domains_list: "infrastructure",
+	amba_domains_email_status: "infrastructure",
+	amba_domains_email_enable: "infrastructure",
+	amba_domains_email_destinations_add: "infrastructure",
+	amba_domains_email_destinations_list: "infrastructure",
+	amba_domains_email_destinations_get: "infrastructure",
+	amba_domains_email_forwards_set: "infrastructure",
+	amba_domains_email_forwards_list: "infrastructure",
+	amba_domains_email_forwards_delete: "infrastructure",
+	amba_domains_email_catch_all_get: "infrastructure",
+	amba_domains_email_catch_all_set: "infrastructure",
 	amba_operations_get: "infrastructure",
 	amba_operations_list: "infrastructure",
 	amba_media_upload: "infrastructure",
@@ -8575,6 +10193,13 @@ const TOOL_CATEGORY = {
 	amba_media_create_folder: "infrastructure",
 	amba_media_delete_folder: "infrastructure",
 	amba_media_list_folders: "infrastructure",
+	amba_media_catalogs_create: "infrastructure",
+	amba_media_catalogs_list: "infrastructure",
+	amba_media_catalogs_get: "infrastructure",
+	amba_media_catalogs_update: "infrastructure",
+	amba_media_catalogs_delete: "infrastructure",
+	amba_media_catalogs_add_item: "infrastructure",
+	amba_media_catalogs_remove_item: "infrastructure",
 	amba_secrets_set: "infrastructure",
 	amba_set_secret: "infrastructure",
 	amba_secrets_get: "infrastructure",
@@ -8613,11 +10238,23 @@ const TOOL_CATEGORY = {
 	amba_delete_ai_prompt: "infrastructure",
 	amba_ai_prompts_invoke: "infrastructure",
 	amba_invoke_ai_prompt: "infrastructure",
+	amba_ai_prompts_set_budget: "infrastructure",
+	amba_ai_prompts_get_spend: "infrastructure",
 	amba_sdk_get_setup_instructions: "infrastructure",
 	amba_get_sdk_setup_instructions: "infrastructure",
 	amba_billing_status: "infrastructure",
 	amba_billing_tiers: "infrastructure",
 	amba_billing_set_ceiling: "infrastructure",
+	amba_payments_account_create: "economy",
+	amba_payments_create_onboarding_link: "economy",
+	amba_payments_account_status: "economy",
+	amba_payments_set_fee: "economy",
+	amba_payments_charge: "economy",
+	amba_payments_refund: "economy",
+	amba_payments_balance: "economy",
+	amba_payments_payouts: "economy",
+	amba_agent_checkout_enable: "economy",
+	amba_agent_checkout_capabilities: "economy",
 	amba_projects_invite_member: "infrastructure",
 	amba_projects_list_members: "infrastructure",
 	amba_projects_remove_member: "infrastructure",
@@ -8651,7 +10288,10 @@ const TOOL_CATEGORY = {
 	amba_remote_configs_create: "infrastructure",
 	amba_remote_configs_list: "infrastructure",
 	amba_remote_configs_update: "infrastructure",
-	amba_remote_configs_delete: "infrastructure"
+	amba_remote_configs_delete: "infrastructure",
+	amba_app_mcp_get_config: "infrastructure",
+	amba_app_mcp_update_config: "infrastructure",
+	amba_app_mcp_set_exposure: "infrastructure"
 };
 /**
 * Look up the canonical category for an MCP tool name. Accepts both
@@ -8664,6 +10304,928 @@ function getToolCategory(toolName) {
 	return TOOL_CATEGORY[toolName] ?? null;
 }
 //#endregion
+//#region src/auto/schema-to-zod.ts
+/**
+* Pure mapper: a collection's live schema (the JSON returned by the
+* `GET .../collections/:name` describe endpoint) → the zod raw shapes the
+* auto-generated MCP tools register.
+*
+* Three derived shapes per collection (the auto-MCP wedge §2.2):
+*
+*   - `insertShape` — the typed body of an `insert` tool. Server-managed
+*     columns (`id`, `user_id`, `created_at`, `updated_at`, `deleted_at`)
+*     are omitted (the route stamps them); a column is REQUIRED when it is
+*     NOT NULL and has no default, OPTIONAL otherwise.
+*   - `whereShape` — the typed `where` of a `find` tool: one optional key
+*     per non-vector column whose value is `value | { eq?, ne?, gt?, … }`
+*     typed to the column. This is the single highest-value projection —
+*     it makes the generated tool read like a hand-built typed client
+*     rather than a free-form `where: object` blob.
+*   - `updateShape` — the typed `set` of an `update` tool: every non
+*     server-managed column, all optional (merge-patch semantics).
+*
+* Plus `rowTypeHints` — a column→plain-English type label map the
+* description generator (`describe.ts`) reads, and `vectorColumns` — the
+* vector columns (excluded from row input; they drive `find_nearest`).
+*
+* The mapper is PURE (no I/O, no zod-runtime coupling beyond building the
+* shape) so it unit-tests in isolation and so the same projection can run
+* in the hosted server today and in the CLI / console later.
+*/
+/**
+* Columns Amba manages on every collection. They are stamped by the
+* route, never accepted as tool input, and so are omitted from the
+* insert / update shapes. They ARE filterable (`where`) and selectable.
+*/
+const SERVER_MANAGED_COLUMNS = new Set([
+	"id",
+	"user_id",
+	"created_at",
+	"updated_at",
+	"deleted_at"
+]);
+/**
+* Classify a column into a coarse {@link ColumnKind}. Reads `data_type`
+* first (the only reliable array signal — `data_type === 'ARRAY'`), then
+* `udt_name`. Unknown types fall back to `unknown` (mapped to free JSON)
+* rather than throwing, so a future column type never breaks generation.
+*/
+function classifyColumn(column) {
+	const udt = column.udt_name.toLowerCase();
+	if (column.data_type.toUpperCase() === "ARRAY" || udt.startsWith("_")) switch (udt.replace(/^_/, "")) {
+		case "text":
+		case "varchar":
+		case "bpchar": return "text[]";
+		case "int2":
+		case "int4":
+		case "int8": return "integer[]";
+		case "numeric":
+		case "float4":
+		case "float8": return "number[]";
+		case "bool": return "boolean[]";
+		case "uuid": return "uuid[]";
+		default: return "unknown";
+	}
+	switch (udt) {
+		case "text":
+		case "varchar":
+		case "bpchar": return "text";
+		case "int2":
+		case "int4":
+		case "int8": return "integer";
+		case "numeric":
+		case "float4":
+		case "float8": return "number";
+		case "bool": return "boolean";
+		case "jsonb":
+		case "json": return "json";
+		case "uuid": return "uuid";
+		case "date": return "date";
+		case "timestamptz":
+		case "timestamp": return "timestamp";
+		case "vector": return "vector";
+		default: return "unknown";
+	}
+}
+/** Build the base (scalar/array) zod type for a column kind. */
+function baseTypeForKind(kind) {
+	switch (kind) {
+		case "text": return z.string();
+		case "uuid": return z.string().describe("uuid");
+		case "date": return z.string().describe("ISO-8601 date (YYYY-MM-DD)");
+		case "timestamp": return z.string().describe("ISO-8601 timestamp");
+		case "integer": return z.number().int();
+		case "number": return z.number();
+		case "boolean": return z.boolean();
+		case "json": return z.unknown();
+		case "text[]": return z.array(z.string());
+		case "integer[]": return z.array(z.number().int());
+		case "number[]": return z.array(z.number());
+		case "boolean[]": return z.array(z.boolean());
+		case "uuid[]": return z.array(z.string());
+		case "vector": return z.array(z.number());
+		default: return z.unknown();
+	}
+}
+/**
+* Build the per-column `where` operator object. Every operator is
+* optional; the value type matches the column. A bare value is also
+* accepted as shorthand for `{ eq: value }` (mirrors the server, which
+* treats a non-object field value as equality).
+*/
+function whereTypeForKind(kind, columnName) {
+	const base = baseTypeForKind(kind);
+	const isArray = kind.endsWith("[]");
+	const isComparable = kind === "integer" || kind === "number" || kind === "date" || kind === "timestamp" || kind === "text";
+	const isText = kind === "text";
+	const ops = {
+		eq: base.optional(),
+		ne: base.optional(),
+		in: z.array(base).optional(),
+		notIn: z.array(base).optional(),
+		isNull: z.boolean().optional(),
+		isNotNull: z.boolean().optional()
+	};
+	if (isComparable) {
+		ops.gt = base.optional();
+		ops.gte = base.optional();
+		ops.lt = base.optional();
+		ops.lte = base.optional();
+	}
+	if (isText) {
+		ops.like = z.string().optional().describe("SQL LIKE pattern (case-sensitive).");
+		ops.ilike = z.string().optional().describe("SQL ILIKE pattern (case-insensitive).");
+	}
+	if (isArray) {
+		ops.contains = base.optional().describe("Rows whose array contains all of these elements.");
+		ops.containedBy = base.optional().describe("Rows whose array is contained by these elements.");
+		ops.overlaps = base.optional().describe("Rows whose array shares any element with these.");
+	}
+	return z.union([z.object(ops), base]).optional().describe(`Filter on \`${columnName}\`. Bare value = equality; or an operator object.`);
+}
+/**
+* Whether a column is required on insert: NOT NULL and no column default.
+* A defaulted NOT NULL column is optional (the DB fills it).
+*/
+function isRequiredOnInsert(column) {
+	return column.is_nullable === "NO" && column.column_default === null;
+}
+/**
+* Project a collection schema into the zod raw shapes the auto-MCP tools
+* register. Pure — same input always yields the same shapes.
+*/
+function mapCollectionSchema(schema, options = {}) {
+	const insertShape = {};
+	const whereShape = {};
+	const updateShape = {};
+	const rowTypeHints = {};
+	const vectorColumns = [];
+	for (const column of schema.columns) {
+		const name = column.column_name;
+		const kind = classifyColumn(column);
+		rowTypeHints[name] = kind;
+		if (kind === "vector") {
+			vectorColumns.push(name);
+			continue;
+		}
+		whereShape[name] = whereTypeForKind(kind, name);
+		if (SERVER_MANAGED_COLUMNS.has(name)) {
+			if (name === "user_id" && options.includeUserIdInInsert) insertShape[name] = baseTypeForKind(kind).optional().describe("Optional. The app user id to attribute this row to. Omit to insert without an owner (requires a shared collection) or use as_system.");
+			continue;
+		}
+		const base = baseTypeForKind(kind);
+		updateShape[name] = base.optional();
+		insertShape[name] = isRequiredOnInsert(column) ? base : base.optional();
+	}
+	return {
+		insertShape,
+		whereShape,
+		updateShape,
+		rowTypeHints,
+		vectorColumns,
+		hasVector: vectorColumns.length > 0
+	};
+}
+//#endregion
+//#region src/auto/describe.ts
+/**
+* SDK-grade per-tool description generator for the auto-MCP wedge.
+*
+* The wedge is only worth shipping if the generated tools read like a
+* hand-built typed client, not a thin `find_rows({collection, where})`
+* wrapper (design doc §7). These descriptions are generated from the live
+* column list + access policy so an agent never needs external docs:
+* column names, types, nullability, the access policy in plain words, and
+* a worked example per verb.
+*
+* Pure string builders — snapshot-friendly, no I/O. Collections are named as
+* what they are — relational Postgres tables. The hosting supplier (Neon) and
+* the rest of the infra stack stay hidden: "collection", "row", "column",
+* and "function" are the customer vocabulary, never a supplier name.
+*/
+/** A human-friendly type label for a column kind. */
+function labelForKind(kind) {
+	switch (kind) {
+		case "integer": return "integer";
+		case "number": return "number";
+		case "boolean": return "boolean";
+		case "json": return "JSON";
+		case "uuid": return "uuid (string)";
+		case "date": return "date string";
+		case "timestamp": return "timestamp string";
+		case "vector": return "vector";
+		case "text[]": return "string array";
+		case "integer[]": return "integer array";
+		case "number[]": return "number array";
+		case "boolean[]": return "boolean array";
+		case "uuid[]": return "uuid array";
+		case "text": return "text";
+		default: return "value";
+	}
+}
+/**
+* One-line summary of the collection's columns an agent can write to
+* (insert/update). Server-managed columns are excluded — the route stamps
+* them.
+*/
+function writableColumnSummary(mapped) {
+	const cols = Object.keys(mapped.rowTypeHints).filter((c) => !SERVER_MANAGED_COLUMNS.has(c) && mapped.rowTypeHints[c] !== "vector");
+	if (cols.length === 0) return "(no writable columns)";
+	return cols.map((c) => `${c} (${labelForKind(mapped.rowTypeHints[c])})`).join(", ");
+}
+/** All columns with types, for the find/list filter description. */
+function allColumnSummary(mapped) {
+	const cols = Object.keys(mapped.rowTypeHints);
+	if (cols.length === 0) return "(no columns)";
+	return cols.map((c) => `${c} (${labelForKind(mapped.rowTypeHints[c])})`).join(", ");
+}
+/** Plain-words access-policy sentence for the given scope. */
+function policySentence(ctx) {
+	if (ctx.scope === "admin") return "Developer/admin scope: sees and mutates EVERY row regardless of which app user owns it (no per-user scoping).";
+	return `End-user scope: ${ctx.readPolicy === "public" ? "Reads return all rows (this collection is public-read)." : "Reads return only the signed-in user's own rows (plus shared/unowned rows)."} ${ctx.writePolicy === "authenticated" ? "Any signed-in user may write." : "Writes affect only the signed-in user's own rows."}`;
+}
+/** Build the first writable column name for worked examples. */
+function exampleWritableColumn(mapped) {
+	return Object.keys(mapped.rowTypeHints).find((c) => !SERVER_MANAGED_COLUMNS.has(c) && mapped.rowTypeHints[c] !== "vector") ?? null;
+}
+/** Example value literal for a column kind (for worked examples). */
+function exampleValue(kind) {
+	switch (kind) {
+		case "integer": return "42";
+		case "number": return "3.14";
+		case "boolean": return "true";
+		case "json": return "{\"key\":\"value\"}";
+		case "uuid": return "\"00000000-0000-0000-0000-000000000000\"";
+		case "date": return "\"2026-01-31\"";
+		case "timestamp": return "\"2026-01-31T12:00:00Z\"";
+		case "text[]": return "[\"a\",\"b\"]";
+		case "integer[]": return "[1,2,3]";
+		case "number[]": return "[1.5,2.5]";
+		case "boolean[]": return "[true,false]";
+		case "uuid[]": return "[\"00000000-0000-0000-0000-000000000000\"]";
+		default: return "\"example\"";
+	}
+}
+/**
+* Generate the description string for a single collection tool.
+*/
+function describeCollectionTool(verb, ctx) {
+	const { collection, mapped } = ctx;
+	const policy = policySentence(ctx);
+	const exampleCol = exampleWritableColumn(mapped);
+	const exampleKind = exampleCol ? mapped.rowTypeHints[exampleCol] : "text";
+	switch (verb) {
+		case "list": return [
+			`List rows in the "${collection}" collection, newest first.`,
+			`Returns a page of rows plus a \`next_cursor\` — pass it back as \`cursor\` to fetch the next page.`,
+			`Columns: ${allColumnSummary(mapped)}.`,
+			policy,
+			`Example: { "limit": 20 }.`
+		].join(" ");
+		case "get": return [
+			`Fetch one row from "${collection}" by its \`id\`.`,
+			`Returns the full row, or a 404 if no row with that id exists (or it is outside your scope).`,
+			policy,
+			`Example: { "id": "00000000-0000-0000-0000-000000000000" }.`
+		].join(" ");
+		case "find": return [
+			`Find rows in "${collection}" with a typed, per-column filter.`,
+			`Each \`where\` key is a column; its value is a bare value (equality) or an operator object`,
+			`({ eq, ne, gt, gte, lt, lte, in, notIn, like, ilike, isNull, isNotNull, contains, containedBy, overlaps }).`,
+			`Combine with top-level \`and\`/\`or\`/\`not\`. Supports \`order\`, \`limit\`, and \`cursor\` pagination (returns \`next_cursor\`).`,
+			`Columns: ${allColumnSummary(mapped)}.`,
+			policy,
+			exampleCol ? `Example: { "where": { "${exampleCol}": { "eq": ${exampleValue(exampleKind)} } }, "limit": 20 }.` : `Example: { "where": {}, "limit": 20 }.`
+		].join(" ");
+		case "insert": return [
+			`Insert a new row into "${collection}".`,
+			`Provide values for the writable columns: ${writableColumnSummary(mapped)}.`,
+			`Server-managed columns (id, user_id, created_at, updated_at, deleted_at) are stamped automatically — do not send them.`,
+			policy,
+			exampleCol ? `Example: { "${exampleCol}": ${exampleValue(exampleKind)} }.` : `Example: {}.`
+		].join(" ");
+		case "update": return [
+			`Update an existing row in "${collection}" by \`id\` (merge-patch — only the fields you send change).`,
+			`Writable columns: ${writableColumnSummary(mapped)}.`,
+			`Server-managed columns are rejected.`,
+			policy,
+			exampleCol ? `Example: { "id": "…", "set": { "${exampleCol}": ${exampleValue(exampleKind)} } }.` : `Example: { "id": "…", "set": {} }.`
+		].join(" ");
+		case "delete": return [
+			`Delete a row from "${collection}" by \`id\`.`,
+			`Soft-delete by default (recoverable); pass \`hard: true\` for a permanent removal.`,
+			policy,
+			`Example: { "id": "00000000-0000-0000-0000-000000000000" }.`
+		].join(" ");
+		case "aggregate": return [
+			`Compute aggregates over "${collection}": count / sum / avg / min / max, optionally grouped by columns.`,
+			`\`count\` with no column = COUNT(*). Combine with a typed \`where\` to aggregate a subset.`,
+			`Columns: ${allColumnSummary(mapped)}.`,
+			policy,
+			`Example: { "select": [{ "fn": "count" }] }.`
+		].join(" ");
+		case "find_nearest": return [
+			`Vector similarity search over "${collection}" — returns the rows closest to your query, with a synthesized \`_distance\` column.`,
+			`This tool exists because "${collection}" has a vector column (${mapped.vectorColumns.join(", ")}).`,
+			`Pass \`to_text\` (the server computes the embedding) or a raw \`to_vector\`; optionally narrow with a typed \`where\`.`,
+			policy,
+			`Example: { "to_text": "cozy winter recipes", "k": 5 }.`
+		].join(" ");
+		default: return `Operate on the "${collection}" collection.`;
+	}
+}
+/** Description for the `<ns>_list_collections` meta tool. */
+function describeListCollections(namespace) {
+	return [
+		`List every collection exposed by this app's agent surface (namespace "${namespace}").`,
+		`Each collection is a relational Postgres table — typed columns, foreign keys, transactions, unique indexes, and vector search —`,
+		`projected into typed list/get/find/insert/update/delete/aggregate tools you can call directly.`,
+		`This tool is the index. Returns each collection's name and column summary.`
+	].join(" ");
+}
+/**
+* Generate the description string for a function tool. Honest-confidence
+* rule: a tool with a declared schema reads like a hand-built SDK call; a
+* tool WITHOUT one says so plainly instead of over-claiming.
+*/
+function describeFunctionTool(ctx) {
+	const parts = [];
+	if (ctx.declaredDescription) {
+		parts.push(ctx.declaredDescription.trim());
+		parts.push(`(Deployed function "${ctx.fn}" on this app.)`);
+	} else parts.push(`Invoke the deployed function "${ctx.fn}" on this app.`);
+	if (ctx.hasDeclaredSchema) parts.push("Arguments match the input schema the function declared at deploy time and are sent as the request body.");
+	else parts.push("This function declared no input schema — pass `body` (free-form JSON sent as the request body) and/or `query` (string key/value pairs appended to the URL). Consult the function author for the expected shape.");
+	parts.push("Runs with the same credential as this connection; the response status and body are returned as-is.");
+	return parts.join(" ");
+}
+/** Description for the `<ns>_whoami` meta tool. */
+function describeWhoami(namespace) {
+	return [`Report which app project this agent surface is connected to and the scope of the current credential`, `(namespace "${namespace}"). Use it to confirm you are pointed at the right app before mutating data.`].join(" ");
+}
+//#endregion
+//#region src/auto/collection-tools.ts
+async function proxyFetch(baseUrl, headers, call) {
+	let url = `${baseUrl}${call.path}`;
+	if (call.query && Object.keys(call.query).length > 0) url += `?${new URLSearchParams(call.query).toString()}`;
+	const allHeaders = {
+		Accept: "application/json",
+		...headers
+	};
+	if (call.body !== void 0) allHeaders["Content-Type"] = "application/json";
+	const res = await fetch(url, {
+		method: call.method,
+		headers: allHeaders,
+		body: call.body !== void 0 ? JSON.stringify(call.body) : void 0
+	});
+	let body;
+	try {
+		body = await res.json();
+	} catch {
+		body = { error: {
+			code: "INVALID_RESPONSE",
+			message: res.statusText
+		} };
+	}
+	return {
+		status: res.status,
+		body
+	};
+}
+/** Admin-route fetch (mirrors tools/collections.ts adminFetch). */
+async function adminFetch(apiClient, bearer, call) {
+	return proxyFetch(apiClient.getBaseUrl(), { Authorization: `Bearer ${bearer}` }, call);
+}
+/** Client-route fetch: API key + optional end-user session Bearer. */
+async function clientFetch(clientAuth, call) {
+	const headers = { "X-Api-Key": clientAuth.apiKey };
+	if (clientAuth.sessionToken) headers["Authorization"] = `Bearer ${clientAuth.sessionToken}`;
+	return proxyFetch(clientAuth.baseUrl, headers, call);
+}
+/**
+* Tool-name fragment regex. MCP + `tool-naming.test.ts` require lowercase
+* `_`-separated names. The namespace + collection are sanitized to that
+* shape so a slug like "My App" or a collection like "MyRecipes" never
+* produces an invalid tool name.
+*/
+function sanitizeNameFragment(raw) {
+	const cleaned = raw.toLowerCase().replace(/[^a-z0-9_]+/g, "_").replace(/_+/g, "_").replace(/^_+|_+$/g, "");
+	return /^[a-z]/.test(cleaned) ? cleaned : `c_${cleaned}`;
+}
+/** Build the `<ns>_<coll>_<verb>` tool name. */
+function collectionToolName(namespace, collection, verb) {
+	return `${sanitizeNameFragment(namespace)}_${sanitizeNameFragment(collection)}_${verb}`;
+}
+/**
+* Default `order` for list/find when the caller gives none. A
+* deterministic single-column order is what lets the route return a
+* bootstrap `next_cursor` on the first page (and is what the tool
+* description promises: newest first).
+*/
+const DEFAULT_LIST_ORDER = "created_at desc";
+/**
+* Register the typed CRUD tools for a single collection on `server`,
+* proxying to the existing authoritative routes for the requested scope.
+*/
+function registerCollectionToolsFor(server, apiClient, options) {
+	const { projectId, namespace, collection, schema, policy, scope, clientAuth } = options;
+	if (scope === "client" && !clientAuth) throw new Error("registerCollectionToolsFor: clientAuth is required for client scope");
+	const mapped = mapCollectionSchema(schema, { includeUserIdInInsert: scope === "admin" });
+	const describeCtx = {
+		collection,
+		mapped,
+		readPolicy: policy.read_policy,
+		writePolicy: policy.write_policy,
+		scope
+	};
+	const encColl = encodeURIComponent(collection);
+	const rowsRoot = scope === "admin" ? `/projects/${projectId}/collections/${encColl}/rows` : `/collections/${encColl}`;
+	const name = (verb) => collectionToolName(namespace, collection, verb);
+	/**
+	* Register one verb tool. Admin scope goes through `registerTool` (the
+	* pat-as-argument helper — the developer Bearer flows from the inbound
+	* request or a per-call `pat` arg); client scope registers a plain tool
+	* whose handler closes over the connection's API key + session token
+	* (an end-user agent has no pat — its credential IS the connection).
+	*/
+	function addTool(verb, schemaShape, run) {
+		if (scope === "client") {
+			registerPublicTool(server, name(verb), describeCollectionTool(verb, describeCtx), schemaShape, async (args) => run(args, (call) => clientFetch(clientAuth, call)));
+			return;
+		}
+		registerTool(server, apiClient, name(verb), describeCollectionTool(verb, describeCtx), schemaShape, async (args, { pat }) => run(args, (call) => adminFetch(apiClient, pat, call)));
+	}
+	/** Build the `?query=` JSON for list/find from common args. */
+	function buildFindQuery(args) {
+		const findQuery = {};
+		if (args.where !== void 0) findQuery.where = args.where;
+		findQuery.order = args.order !== void 0 ? args.order : DEFAULT_LIST_ORDER;
+		if (args.limit !== void 0) findQuery.limit = args.limit;
+		if (args.cursor !== void 0) findQuery.cursor = args.cursor;
+		if (args.select !== void 0) findQuery.select = args.select;
+		if (args.include_deleted !== void 0) findQuery.includeDeleted = args.include_deleted;
+		return findQuery;
+	}
+	const listFindCommon = {
+		order: z.union([z.string(), z.array(z.string())]).optional().describe("Order spec, e.g. \"created_at desc\". Defaults to \"created_at desc\"."),
+		limit: z.number().int().positive().optional().describe("Max rows (default 50)."),
+		cursor: z.string().optional().describe("Opaque cursor from a prior page (`next_cursor`). Omit for the first page."),
+		select: z.array(z.string()).optional().describe("Subset of columns to return."),
+		include_deleted: z.boolean().optional().describe("Include soft-deleted rows. Default false.")
+	};
+	addTool("list", { ...listFindCommon }, async (args, exec) => {
+		const findQuery = buildFindQuery(args);
+		return passthroughResult(await exec({
+			method: "GET",
+			path: rowsRoot,
+			query: { query: JSON.stringify(findQuery) }
+		}));
+	});
+	addTool("get", { id: z.string().describe("Row id (uuid).") }, async (args, exec) => {
+		return passthroughResult(await exec({
+			method: "GET",
+			path: `${rowsRoot}/${encodeURIComponent(String(args.id))}`
+		}));
+	});
+	addTool("find", {
+		where: z.object({
+			...mapped.whereShape,
+			and: z.array(z.unknown()).optional().describe("AND-combine nested where clauses."),
+			or: z.array(z.unknown()).optional().describe("OR-combine nested where clauses."),
+			not: z.unknown().optional().describe("Negate a nested where clause.")
+		}).partial().optional().describe("Typed, per-column filter."),
+		...listFindCommon
+	}, async (args, exec) => {
+		const findQuery = buildFindQuery(args);
+		return passthroughResult(await exec({
+			method: "GET",
+			path: rowsRoot,
+			query: { query: JSON.stringify(findQuery) }
+		}));
+	});
+	addTool("insert", {
+		...mapped.insertShape,
+		...scope === "admin" ? { as_system: z.boolean().optional().describe("Admin only. On a shared collection, insert a global row with no owner (user_id NULL). Mutually exclusive with user_id.") } : {}
+	}, async (args, exec) => {
+		const row = {};
+		for (const [k, v] of Object.entries(args)) {
+			if (k === "pat") continue;
+			if (v !== void 0) row[k] = v;
+		}
+		return passthroughResult(await exec({
+			method: "POST",
+			path: rowsRoot,
+			body: row
+		}));
+	});
+	addTool("update", {
+		id: z.string().describe("Row id (uuid) to update."),
+		set: z.object({ ...mapped.updateShape }).describe("Column→value map of the fields to change (merge-patch).")
+	}, async (args, exec) => {
+		return passthroughResult(await exec({
+			method: "PATCH",
+			path: `${rowsRoot}/${encodeURIComponent(String(args.id))}`,
+			body: { set: args.set }
+		}));
+	});
+	addTool("delete", {
+		id: z.string().describe("Row id (uuid) to delete."),
+		...scope === "admin" ? { hard: z.boolean().optional().describe("false (default) soft-deletes (recoverable); true permanently removes.") } : {}
+	}, async (args, exec) => {
+		return passthroughResult(await exec({
+			method: "DELETE",
+			path: `${rowsRoot}/${encodeURIComponent(String(args.id))}`,
+			query: scope === "admin" && args.hard === true ? { hard: "true" } : void 0
+		}));
+	});
+	addTool("aggregate", {
+		select: z.array(z.object({
+			fn: z.enum([
+				"count",
+				"sum",
+				"avg",
+				"min",
+				"max"
+			]),
+			column: z.string().optional().describe("Column to aggregate. Required for sum/avg/min/max; omit for count(*)."),
+			as: z.string().optional().describe("Output alias.")
+		})).min(1).describe("One or more aggregations to compute."),
+		group_by: z.union([z.string(), z.array(z.string())]).optional().describe("Column(s) to group by. Omit for a whole-collection aggregate."),
+		where: z.object({ ...mapped.whereShape }).partial().optional().describe("Typed, per-column filter to aggregate a subset."),
+		include_deleted: z.boolean().optional().describe("Include soft-deleted rows. Default false.")
+	}, async (args, exec) => {
+		const body = { select: args.select };
+		if (args.group_by !== void 0) body.group_by = args.group_by;
+		if (args.where !== void 0) body.where = args.where;
+		if (args.include_deleted !== void 0) if (scope === "admin") body.includeDeleted = args.include_deleted;
+		else body.include_deleted = args.include_deleted;
+		return passthroughResult(await exec({
+			method: "POST",
+			path: `${rowsRoot}/aggregate`,
+			body
+		}));
+	});
+	if (scope === "client" && mapped.hasVector) addTool("find_nearest", {
+		to_text: z.string().optional().describe("Find rows nearest to this text (the server computes the embedding). Exactly one of to_text / to_vector is required."),
+		to_vector: z.array(z.number()).optional().describe("Find rows nearest to this raw vector. Exactly one of to_text / to_vector."),
+		column: z.string().optional().describe(`Vector column to search (default "embedding"). This collection has: ${mapped.vectorColumns.join(", ")}.`),
+		k: z.number().int().positive().optional().describe("How many rows to return (default 10, max 100)."),
+		distance: z.enum([
+			"cosine",
+			"l2",
+			"inner_product"
+		]).optional().describe("Distance metric — must match how the vector index was created (default cosine)."),
+		where: z.object({ ...mapped.whereShape }).partial().optional().describe("Typed, per-column filter applied on top of the nearest search."),
+		include_deleted: z.boolean().optional().describe("Include soft-deleted rows. Default false.")
+	}, async (args, exec) => {
+		const body = {};
+		if (args.to_text !== void 0) body.to_text = args.to_text;
+		if (args.to_vector !== void 0) body.to_vector = args.to_vector;
+		if (args.column !== void 0) body.column = args.column;
+		if (args.k !== void 0) body.k = args.k;
+		if (args.distance !== void 0) body.distance = args.distance;
+		if (args.where !== void 0) body.where = args.where;
+		if (args.include_deleted !== void 0) body.includeDeleted = args.include_deleted;
+		return passthroughResult(await exec({
+			method: "POST",
+			path: `${rowsRoot}/find-nearest`,
+			body
+		}));
+	});
+}
+//#endregion
+//#region src/auto/json-schema-to-zod.ts
+/**
+* Declared-function-input-schema → zod shape mapper (auto-MCP Phase 2,
+* slices C/I).
+*
+* A deployed function may DECLARE its input schema in the deploy
+* annotation (`mcp.input_schema`). The API validates the annotation down
+* to a SUPPORTED SUBSET of JSON Schema at deploy time (see
+* `apps/api/src/lib/function-mcp-schema.ts`); this module converts that
+* subset into the `ZodRawShape` the MCP tool registration consumes, so a
+* declared schema becomes a genuinely typed tool — the agent sees the
+* function's real parameters, not a `body: object` blob.
+*
+* Supported subset (deliberately mirrored with the deploy-time
+* validator — change both together):
+*
+*   - top level: { type: "object", properties, required? }
+*   - property types: string | number | integer | boolean | object | array
+*   - per property: description?, enum? (strings/numbers), items?
+*   - nesting: objects/arrays up to the validator's depth cap
+*
+* Fail-safe posture: this runs against schemas the API already validated,
+* but a manifest could carry an annotation written by an older/newer API.
+* Any construct we can't map cleanly degrades to `z.unknown()` for that
+* property (the tool still works; the typing is just looser) — never a
+* throw, because a registration-time throw would take down the whole
+* tool surface for one bad annotation.
+*/
+function isPlainObject(value) {
+	return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+/** Convert one property schema to a zod type. Never throws. */
+function jsonSchemaPropertyToZod(schema) {
+	if (!isPlainObject(schema)) return z.unknown();
+	const en = schema["enum"];
+	if (Array.isArray(en) && en.length > 0) {
+		if (en.every((v) => typeof v === "string")) {
+			const literals = en.map((v) => z.literal(v));
+			const first = literals[0];
+			if (literals.length === 1) return withDescription(first, schema);
+			return withDescription(z.union([
+				first,
+				literals[1],
+				...literals.slice(2)
+			]), schema);
+		}
+		if (en.every((v) => typeof v === "number")) {
+			const literals = en.map((v) => z.literal(v));
+			const first = literals[0];
+			if (literals.length === 1) return withDescription(first, schema);
+			return withDescription(z.union([
+				first,
+				literals[1],
+				...literals.slice(2)
+			]), schema);
+		}
+		return withDescription(z.unknown(), schema);
+	}
+	switch (schema["type"]) {
+		case "string": return withDescription(z.string(), schema);
+		case "number": return withDescription(z.number(), schema);
+		case "integer": return withDescription(z.number().int(), schema);
+		case "boolean": return withDescription(z.boolean(), schema);
+		case "array": {
+			const items = schema["items"];
+			const elem = items === void 0 ? z.unknown() : jsonSchemaPropertyToZod(items);
+			return withDescription(z.array(elem), schema);
+		}
+		case "object": {
+			const props = schema["properties"];
+			if (!isPlainObject(props)) return withDescription(z.record(z.unknown()), schema);
+			const required = new Set(Array.isArray(schema["required"]) ? schema["required"].filter((r) => typeof r === "string") : []);
+			const shape = {};
+			for (const [key, value] of Object.entries(props)) {
+				const mapped = jsonSchemaPropertyToZod(value);
+				shape[key] = required.has(key) ? mapped : mapped.optional();
+			}
+			return withDescription(z.object(shape), schema);
+		}
+		default: return withDescription(z.unknown(), schema);
+	}
+}
+function withDescription(type, schema) {
+	const description = schema["description"];
+	if (typeof description === "string" && description.length > 0) return type.describe(description);
+	return type;
+}
+/**
+* Convert a declared top-level input schema to a `ZodRawShape` (the MCP
+* tool registration input). Returns `null` when the schema is not the
+* supported `type: "object"` shape — the caller falls back to the
+* generic `{ body?, query? }` tool input.
+*/
+function jsonSchemaToZodShape(schema) {
+	if (!isPlainObject(schema) || schema["type"] !== "object") return null;
+	const props = schema["properties"];
+	if (!isPlainObject(props)) return null;
+	const required = new Set(Array.isArray(schema["required"]) ? schema["required"].filter((r) => typeof r === "string") : []);
+	const shape = {};
+	for (const [key, value] of Object.entries(props)) {
+		const mapped = jsonSchemaPropertyToZod(value);
+		shape[key] = required.has(key) ? mapped : mapped.optional();
+	}
+	return shape;
+}
+//#endregion
+//#region src/auto/function-tools.ts
+/** Build the `<ns>_fn_<name>` tool name. */
+function functionToolName(namespace, fn) {
+	return `${sanitizeNameFragment(namespace)}_fn_${sanitizeNameFragment(fn)}`;
+}
+/** Generic input shape for functions without a declared schema. */
+const GENERIC_FUNCTION_SHAPE = {
+	body: z.unknown().optional().describe("JSON request body forwarded to the function as-is."),
+	query: z.record(z.string()).optional().describe("String key/value pairs appended to the invocation URL as query parameters.")
+};
+/**
+* Invoke the function through its public execution URL with the
+* connection's credential. Returns `{ status, body }` — the function's
+* response verbatim (JSON when parseable, text otherwise).
+*/
+async function invokeFunction(input) {
+	let url = input.invokeUrl;
+	if (input.query && Object.keys(input.query).length > 0) {
+		const qs = new URLSearchParams(input.query).toString();
+		url += url.includes("?") ? `&${qs}` : `?${qs}`;
+	}
+	const headers = {
+		Accept: "application/json",
+		"X-Api-Key": input.clientAuth.apiKey
+	};
+	if (input.clientAuth.sessionToken) headers["Authorization"] = `Bearer ${input.clientAuth.sessionToken}`;
+	let bodyText;
+	if (input.body !== void 0) {
+		headers["Content-Type"] = "application/json";
+		bodyText = JSON.stringify(input.body);
+	}
+	const res = await fetch(url, {
+		method: "POST",
+		headers,
+		body: bodyText
+	});
+	const text = await res.text();
+	let parsed = text;
+	try {
+		parsed = text.length > 0 ? JSON.parse(text) : null;
+	} catch {}
+	return {
+		status: res.status,
+		body: parsed
+	};
+}
+/**
+* Register the tool for a single exposed function on `server`.
+*/
+function registerFunctionToolsFor(server, options) {
+	const { namespace, fn, clientAuth } = options;
+	const toolName = functionToolName(namespace, fn.name);
+	const declaredShape = fn.input_schema ? jsonSchemaToZodShape(fn.input_schema) : null;
+	const description = describeFunctionTool({
+		fn: fn.name,
+		declaredDescription: fn.description ?? null,
+		hasDeclaredSchema: declaredShape !== null,
+		isPublic: fn.public === true
+	});
+	if (declaredShape) {
+		registerPublicTool(server, toolName, description, declaredShape, async (args) => {
+			return jsonResult$1(await invokeFunction({
+				invokeUrl: fn.invoke_url,
+				clientAuth,
+				body: args
+			}));
+		});
+		return;
+	}
+	registerPublicTool(server, toolName, description, GENERIC_FUNCTION_SHAPE, async (args) => {
+		const { body, query } = args;
+		return jsonResult$1(await invokeFunction({
+			invokeUrl: fn.invoke_url,
+			clientAuth,
+			body,
+			...query ? { query } : {}
+		}));
+	});
+}
+//#endregion
+//#region src/auto/index.ts
+/** Verbs a collection's typed tool set advertises (per scope + schema). */
+function verbsFor(scope, schema) {
+	const verbs = [
+		"list",
+		"get",
+		"find",
+		"insert",
+		"update",
+		"delete",
+		"aggregate"
+	];
+	if (scope === "client" && mapCollectionSchema(schema).hasVector) verbs.push("find_nearest");
+	return verbs;
+}
+/** Admin GET helper bound to a Bearer (no pat-arg machinery needed here). */
+async function adminGet(apiClient, path) {
+	const res = await fetch(`${apiClient.getBaseUrl()}${path}`, {
+		method: "GET",
+		headers: {
+			Authorization: `Bearer ${await apiClientToken(apiClient)}`,
+			Accept: "application/json"
+		}
+	});
+	let body;
+	try {
+		body = await res.json();
+	} catch {
+		body = {};
+	}
+	return {
+		status: res.status,
+		body
+	};
+}
+async function apiClientToken(apiClient) {
+	return await apiClient.resolveTokenOrNull() ?? "";
+}
+/**
+* Register the auto-MCP tool surface for one project on `server`.
+*
+* Returns the names of the collections that were exposed plus `listOk`
+* (false when no manifest was available — in which case NO data tools
+* register and the meta tools carry the diagnostic).
+*/
+async function registerAutoMcpTools(server, apiClient, options) {
+	const { projectId, scope, manifest, clientAuth } = options;
+	const namespace = sanitizeNameFragment(options.namespace ?? (manifest?.slug ? manifest.slug : projectId));
+	if (scope === "client") registerPublicTool(server, `${namespace}_whoami`, describeWhoami(namespace), {}, async () => jsonResult$1({
+		status: 200,
+		project_id: projectId,
+		scope,
+		namespace,
+		authenticated: Boolean(clientAuth),
+		end_user_session: Boolean(clientAuth?.sessionToken)
+	}));
+	else registerTool(server, apiClient, `${namespace}_whoami`, describeWhoami(namespace), {}, async (_args, { pat }) => {
+		const me = await adminGet(apiClient.withToken(pat), `/projects/${projectId}`);
+		return jsonResult$1({
+			status: me.status,
+			project_id: projectId,
+			scope,
+			namespace,
+			authenticated: me.status >= 200 && me.status < 300
+		});
+	});
+	if (!manifest) {
+		const diagnosticHandler = async () => jsonResult$1({
+			status: 503,
+			list_complete: false,
+			namespace,
+			project_id: projectId,
+			scope,
+			error: {
+				code: "MANIFEST_UNAVAILABLE",
+				message: "The app tool manifest could not be loaded for this connection. Retry shortly; if it persists, verify the credential belongs to this app and that its agent surface is enabled."
+			},
+			collections: [],
+			functions: []
+		});
+		if (scope === "client") registerPublicTool(server, `${namespace}_list_collections`, describeListCollections(namespace), {}, diagnosticHandler);
+		else registerTool(server, apiClient, `${namespace}_list_collections`, describeListCollections(namespace), {}, diagnosticHandler);
+		return {
+			namespace,
+			collections: [],
+			listOk: false
+		};
+	}
+	const manifestFunctions = (manifest.functions ?? []).filter((f) => f && typeof f.name === "string" && f.name.length > 0 && typeof f.invoke_url === "string");
+	const exposedCollections = manifest.collections.map((c) => ({
+		collection: c.name,
+		exposed: true,
+		tools: verbsFor(scope, c).map((v) => collectionToolName(namespace, c.name, v))
+	}));
+	const exposedFunctions = manifestFunctions.map((f) => ({
+		function: f.name,
+		exposed: scope === "client",
+		tools: scope === "client" ? [functionToolName(namespace, f.name)] : [],
+		typed: Boolean(f.input_schema)
+	}));
+	const listCollectionsHandler = async () => jsonResult$1({
+		status: 200,
+		list_complete: true,
+		namespace,
+		project_id: projectId,
+		scope,
+		manifest_version: manifest.version,
+		exposure_note: exposedCollections.length === 0 && exposedFunctions.length === 0 ? "Nothing is exposed on this agent surface yet. Exposure is an explicit allowlist the app developer manages (collections and functions are NOT exposed by default)." : void 0,
+		collections: exposedCollections,
+		functions: exposedFunctions
+	});
+	if (scope === "client") registerPublicTool(server, `${namespace}_list_collections`, describeListCollections(namespace), {}, listCollectionsHandler);
+	else registerTool(server, apiClient, `${namespace}_list_collections`, describeListCollections(namespace), {}, listCollectionsHandler);
+	for (const entry of manifest.collections) {
+		const policy = {
+			read_policy: entry.read_policy ?? "owner",
+			write_policy: entry.write_policy ?? "owner"
+		};
+		registerCollectionToolsFor(server, apiClient, {
+			projectId,
+			namespace,
+			collection: entry.name,
+			schema: {
+				name: entry.name,
+				columns: entry.columns
+			},
+			policy,
+			scope,
+			clientAuth
+		});
+	}
+	if (scope === "client" && clientAuth) for (const fn of manifestFunctions) registerFunctionToolsFor(server, {
+		namespace,
+		fn,
+		clientAuth: {
+			apiKey: clientAuth.apiKey,
+			...clientAuth.sessionToken ? { sessionToken: clientAuth.sessionToken } : {}
+		}
+	});
+	return {
+		namespace,
+		collections: manifest.collections.map((c) => c.name),
+		listOk: true
+	};
+}
+//#endregion
 //#region src/index.ts
 /**
 * Register every Amba MCP tool group against the given server, using the
@@ -8671,7 +11233,16 @@ function getToolCategory(toolName) {
 * called against it once.
 */
 function registerAllTools(server, apiClient) {
-	registerTools$14(server, apiClient);
+	registerTools$20(server, apiClient);
+	registerTools$42(server, apiClient);
+	registerTools$5(server, apiClient);
+	registerTools$3(server, apiClient);
+	registerTools$41(server, apiClient);
+	registerTools$40(server, apiClient);
+	registerTools$39(server, apiClient);
+	registerTools$38(server, apiClient);
+	registerTools$37(server, apiClient);
+	registerTools$36(server, apiClient);
 	registerTools$35(server, apiClient);
 	registerTools$34(server, apiClient);
 	registerTools$33(server, apiClient);
@@ -8687,12 +11258,12 @@ function registerAllTools(server, apiClient) {
 	registerTools$23(server, apiClient);
 	registerTools$22(server, apiClient);
 	registerTools$21(server, apiClient);
-	registerTools$20(server, apiClient);
 	registerTools$19(server, apiClient);
 	registerTools$18(server, apiClient);
 	registerTools$17(server, apiClient);
 	registerTools$16(server, apiClient);
 	registerTools$15(server, apiClient);
+	registerTools$14(server, apiClient);
 	registerTools$13(server, apiClient);
 	registerTools$12(server, apiClient);
 	registerTools$11(server, apiClient);
@@ -8701,9 +11272,7 @@ function registerAllTools(server, apiClient) {
 	registerTools$8(server, apiClient);
 	registerTools$7(server, apiClient);
 	registerTools$6(server, apiClient);
-	registerTools$5(server, apiClient);
 	registerTools$4(server, apiClient);
-	registerTools$3(server, apiClient);
 	registerTools$2(server, apiClient);
 	registerTools$1(server, apiClient);
 	registerTools(server, apiClient);
@@ -8727,4 +11296,4 @@ function createApiClient(options) {
 	return new ApiClient(opts);
 }
 //#endregion
-export { AMBA_SETUP_ECONOMY_MD, AMBA_SETUP_ECONOMY_MIME, AMBA_SETUP_ECONOMY_URI, AMBA_SETUP_ENGAGEMENT_MD, AMBA_SETUP_ENGAGEMENT_MIME, AMBA_SETUP_ENGAGEMENT_URI, AMBA_SETUP_GAMIFICATION_MD, AMBA_SETUP_GAMIFICATION_MIME, AMBA_SETUP_GAMIFICATION_URI, AMBA_SETUP_GUIDE_BODY_VERSION, AMBA_SETUP_GUIDE_MD, AMBA_SETUP_GUIDE_MIME, AMBA_SETUP_GUIDE_URI, AMBA_SETUP_IDENTITY_MD, AMBA_SETUP_IDENTITY_MIME, AMBA_SETUP_IDENTITY_URI, AMBA_SETUP_INFRASTRUCTURE_MD, AMBA_SETUP_INFRASTRUCTURE_MIME, AMBA_SETUP_INFRASTRUCTURE_URI, AMBA_SETUP_SOCIAL_MD, AMBA_SETUP_SOCIAL_MIME, AMBA_SETUP_SOCIAL_URI, AMBA_SETUP_SUB_RESOURCES, ApiClient, CATEGORY_META, CATEGORY_ORDER, EXPO_BUILD_PROMPT_MD, EXPO_BUILD_PROMPT_MIME, EXPO_BUILD_PROMPT_URI, TOOL_CATEGORY, createApiClient, getToolCategory, registerAllResources, registerAllTools };
+export { AMBA_SETUP_ECONOMY_MD, AMBA_SETUP_ECONOMY_MIME, AMBA_SETUP_ECONOMY_URI, AMBA_SETUP_ENGAGEMENT_MD, AMBA_SETUP_ENGAGEMENT_MIME, AMBA_SETUP_ENGAGEMENT_URI, AMBA_SETUP_GAMIFICATION_MD, AMBA_SETUP_GAMIFICATION_MIME, AMBA_SETUP_GAMIFICATION_URI, AMBA_SETUP_GUIDE_BODY_VERSION, AMBA_SETUP_GUIDE_MD, AMBA_SETUP_GUIDE_MIME, AMBA_SETUP_GUIDE_URI, AMBA_SETUP_IDENTITY_MD, AMBA_SETUP_IDENTITY_MIME, AMBA_SETUP_IDENTITY_URI, AMBA_SETUP_INFRASTRUCTURE_MD, AMBA_SETUP_INFRASTRUCTURE_MIME, AMBA_SETUP_INFRASTRUCTURE_URI, AMBA_SETUP_SOCIAL_MD, AMBA_SETUP_SOCIAL_MIME, AMBA_SETUP_SOCIAL_URI, AMBA_SETUP_SUB_RESOURCES, ApiClient, CATEGORY_META, CATEGORY_ORDER, EXPO_BUILD_PROMPT_MD, EXPO_BUILD_PROMPT_MIME, EXPO_BUILD_PROMPT_URI, SERVER_MANAGED_COLUMNS, TOOL_CATEGORY, classifyColumn, collectionToolName, createApiClient, describeCollectionTool, describeFunctionTool, describeListCollections, describeWhoami, functionToolName, getToolCategory, jsonSchemaToZodShape, mapCollectionSchema, registerAllResources, registerAllTools, registerAutoMcpTools, registerCollectionToolsFor, registerFunctionToolsFor, sanitizeNameFragment };