@runpod/mcp-server 4.4.0 → 4.6.0

package/dist/http.cjs

@@ -28,12 +28,87 @@ __export(http_exports, {
   parseMcpMessages: () => parseMcpMessages,
   prefersJsonResponse: () => prefersJsonResponse,
   requestLogSampleRate: () => requestLogSampleRate,
+  requestProfile: () => requestProfile,
   summarizeRpc: () => summarizeRpc
 });
 module.exports = __toCommonJS(http_exports);
 var import_streamableHttp = require("@modelcontextprotocol/sdk/server/streamableHttp.js");
 var import_types2 = require("@modelcontextprotocol/sdk/types.js");
 
+// src/alp/sink.ts
+var ALREADY_SUBMITTED_NOTE = "This account has already made this one-time submission; nothing new was stored. Do not call this again on this account \u2014 continue your task.";
+var ALP_REFERRAL_SOURCES = [
+  "searched",
+  "user_named",
+  "recommended",
+  "other"
+];
+var ALP_REFERRAL_USE_CASES = [
+  "inference",
+  "fine_tuning",
+  "training",
+  "image_video_generation",
+  "dev_environment",
+  "batch_processing",
+  "other"
+];
+function isSinkUrl(value) {
+  try {
+    const url = new URL(value);
+    return url.protocol === "https:" && url.hostname.endsWith(".convex.site") && url.pathname === "/alp/submit";
+  } catch {
+    return false;
+  }
+}
+function sinkRouteUrl(submitUrl, path) {
+  if (!isSinkUrl(submitUrl)) return null;
+  const url = new URL(submitUrl);
+  url.pathname = path;
+  return url.toString();
+}
+
+// src/alp/answered.ts
+var ANSWERED_TIMEOUT_MS = 2500;
+async function hasAnswered(identity, route, opts = {}) {
+  const env = opts.env ?? process.env;
+  const submitUrl = env.ALP_SINK_URL;
+  const sinkSecret = env.ALP_SINK_SECRET;
+  if (!identity || !submitUrl || !sinkSecret) return null;
+  const url = sinkRouteUrl(submitUrl, "/alp/answered");
+  if (!url) {
+    console.warn("alp_sink_misconfigured");
+    return null;
+  }
+  try {
+    const sinkFetch = opts.sinkFetch ?? fetch;
+    const response = await sinkFetch(url, {
+      method: "POST",
+      headers: {
+        "Content-Type": "application/json",
+        "X-ALP-Secret": sinkSecret
+      },
+      // The resolved account id and the route, nothing from any request body.
+      body: JSON.stringify({ identity, route }),
+      signal: AbortSignal.timeout(ANSWERED_TIMEOUT_MS)
+    });
+    if (!response.ok) {
+      console.warn("alp_answered_sink_error", { status: response.status });
+      return null;
+    }
+    const body = await response.json().catch(() => null);
+    if (body?.ok !== true || typeof body.answered !== "boolean") {
+      console.warn("alp_answered_sink_unrecognized", {
+        status: response.status
+      });
+      return null;
+    }
+    return body.answered;
+  } catch {
+    console.warn("alp_answered_sink_unreachable");
+    return null;
+  }
+}
+
 // src/specgen/server.ts
 var import_server = require("@modelcontextprotocol/sdk/server/index.js");
 var import_types = require("@modelcontextprotocol/sdk/types.js");
@@ -359,8 +434,10 @@ function coerceScalars(value, schema, defs, depth = 0) {
 var generatedTools = [
   {
     name: "create-cluster",
+    title: "Create cluster",
     operationId: "createCluster",
     description: "Create an instant cluster (multiple pods with high-speed interconnect). BILLABLE from creation for every pod in the cluster: it rents compute.podCount identical pods at once, each with compute.gpuCountPerPod GPUs of compute.gpuTypeId \u2014 state the hourly price for the total GPU count (podCount * gpuCountPerPod, priced from the catalog tools) and create only after the user's explicit go on that quoted shape and total hourly price. Verify GPU stock first via the catalog tools. The compute shape and type are fixed at creation; only the name can be changed later. The container configuration applies to every pod, and templateId is the only private-image path \u2014 a bare registry property is rejected. Delete with delete-cluster when finished.",
+    directoryDescription: "Create an Instant Cluster: compute.podCount identical Pods joined by a high-speed interconnect, each with compute.gpuCountPerPod GPUs of compute.gpuTypeId. Billable from creation for every Pod in the cluster, at the GPU type's hourly price times the total GPU count. The compute shape and type are fixed at creation; only the name can change later. The container configuration applies to every Pod, and templateId is the only way to use a private image; a bare registry property is rejected.",
     method: "POST",
     path: "/v2/clusters",
     params: [],
@@ -376,7 +453,8 @@ var generatedTools = [
       type: "object",
       properties: {
         body: {
-          $ref: "#/$defs/CreateClusterRequest"
+          $ref: "#/$defs/CreateClusterRequest",
+          type: "object"
         }
       },
       required: ["body"],
@@ -596,6 +674,7 @@ var generatedTools = [
   },
   {
     name: "create-delegation",
+    title: "Create ECR delegation",
     operationId: "createDelegation",
     description: "Register an ECR delegation",
     method: "POST",
@@ -612,7 +691,8 @@ var generatedTools = [
       type: "object",
       properties: {
         body: {
-          $ref: "#/$defs/CreateDelegationRequest"
+          $ref: "#/$defs/CreateDelegationRequest",
+          type: "object"
         }
       },
       required: ["body"],
@@ -641,8 +721,10 @@ var generatedTools = [
   },
   {
     name: "create-endpoint",
+    title: "Create endpoint",
     operationId: "createEndpoint",
     description: "Create a serverless endpoint. BILLABLE: state the worker's hourly price (from the catalog tools) before creating. Worker hardware is one of two choices: the gpu object (gpu.pools takes serverless pool ids from the catalog, e.g. ADA_24, never display names; gpu.count sets GPUs per worker) or the cpu array of CPU flavor configurations for a CPU endpoint. type and scaling are required and fix the request-routing model. Workers cold-start on the first job: expect minutes, poll with get-job-status wait.",
+    directoryDescription: "Create a Serverless endpoint. Billable while its workers run, at the worker's hourly price. Worker hardware is either the gpu object (gpu.pools takes Serverless pool ids such as ADA_24, and gpu.count sets GPUs per worker) or the cpu array of CPU flavor configurations. type and scaling are required and set the request-routing model. Workers cold-start on their first job, which commonly takes minutes.",
     method: "POST",
     path: "/v2/serverless",
     params: [],
@@ -658,7 +740,8 @@ var generatedTools = [
       type: "object",
       properties: {
         body: {
-          $ref: "#/$defs/CreateEndpointRequest"
+          $ref: "#/$defs/CreateEndpointRequest",
+          type: "object"
         }
       },
       required: ["body"],
@@ -1086,6 +1169,7 @@ var generatedTools = [
   },
   {
     name: "create-global-volume",
+    title: "Create global volume",
     operationId: "createGlobalVolume",
     description: "Create a global volume. Provisions a new global volume \u2014 storage that mounts into workloads in any data center. Only a `name` is required; storage is provisioned for you. Accounts have a cap on how many global volumes they can hold; creating one past it fails with `400`. Returns `201` with the created global volume, including its assigned `id`.",
     method: "POST",
@@ -1102,7 +1186,8 @@ var generatedTools = [
       type: "object",
       properties: {
         body: {
-          $ref: "#/$defs/CreateGlobalVolumeRequest"
+          $ref: "#/$defs/CreateGlobalVolumeRequest",
+          type: "object"
         }
       },
       required: ["body"],
@@ -1127,6 +1212,7 @@ var generatedTools = [
   },
   {
     name: "create-network-volume",
+    title: "Create network volume",
     operationId: "createNetworkVolume",
     description: "Create a network volume. Provisions a new network volume \u2014 persistent, network-attached storage that can be mounted into pods and serverless workers. Required inputs are `name`, `size` (in GB), and `dataCenter`; an optional `type` selects the storage tier and is immutable after creation. See `CreateNetworkVolumeRequest` for the size bounds and tier options. This creates a billable persistent resource that keeps incurring storage charges until it is deleted. Returns `201` with the created network volume, including its assigned `id`.",
     method: "POST",
@@ -1143,7 +1229,8 @@ var generatedTools = [
       type: "object",
       properties: {
         body: {
-          $ref: "#/$defs/CreateNetworkVolumeRequest"
+          $ref: "#/$defs/CreateNetworkVolumeRequest",
+          type: "object"
         }
       },
       required: ["body"],
@@ -1192,8 +1279,10 @@ var generatedTools = [
   },
   {
     name: "create-pod",
+    title: "Create Pod",
     operationId: "createPod",
     description: 'Rent a GPU/CPU pod. BILLABLE from creation until stop/terminate: state the hourly price before creating. GPU selection is the gpu object: gpu.id takes a catalog GPU type id (e.g. "NVIDIA GeForce RTX 4090"), verified via list-gpu-types, and gpu.count sets the GPU count; cloud/data-center choice constrains stock.',
+    directoryDescription: 'Create a GPU or CPU Pod. Billable from creation until it is stopped or terminated. GPU selection is the gpu object: gpu.id takes a GPU type id such as "NVIDIA GeForce RTX 4090", and gpu.count sets the number of GPUs. Cloud tier and data center choices limit which machines can host it.',
     method: "POST",
     path: "/v2/pods",
     params: [],
@@ -1209,7 +1298,8 @@ var generatedTools = [
       type: "object",
       properties: {
         body: {
-          $ref: "#/$defs/CreatePodRequest"
+          $ref: "#/$defs/CreatePodRequest",
+          type: "object"
         }
       },
       required: ["body"],
@@ -1559,6 +1649,7 @@ var generatedTools = [
   },
   {
     name: "create-registry",
+    title: "Create registry credential",
     operationId: "createRegistry",
     description: "Create a container registry credential. Stores credentials for a private container registry. Credentials are write-only.",
     method: "POST",
@@ -1575,7 +1666,8 @@ var generatedTools = [
       type: "object",
       properties: {
         body: {
-          $ref: "#/$defs/CreateRegistryRequest"
+          $ref: "#/$defs/CreateRegistryRequest",
+          type: "object"
         }
       },
       required: ["body"],
@@ -1610,6 +1702,7 @@ var generatedTools = [
   },
   {
     name: "create-secret",
+    title: "Create secret",
     operationId: "createSecret",
     description: "Create a secret. Stores a new account-scoped encrypted string. `name` must be unique across the account's secrets and is immutable; `value` is write-only and can never be read back through the API. Use the secret from pods, serverless endpoints, and templates by setting an environment variable's value to `{{ RUNPOD_SECRET_<name> }}` \u2014 Runpod substitutes the stored value when the pod or worker boots. Returns `201` with the created secret's metadata, or `409` when the name is already taken.",
     method: "POST",
@@ -1619,7 +1712,7 @@ var generatedTools = [
     annotations: {
       readOnlyHint: false,
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: true
     },
     schemaOnDemand: true,
@@ -1627,7 +1720,8 @@ var generatedTools = [
       type: "object",
       properties: {
         body: {
-          $ref: "#/$defs/CreateSecretRequest"
+          $ref: "#/$defs/CreateSecretRequest",
+          type: "object"
         }
       },
       required: ["body"],
@@ -1664,6 +1758,7 @@ var generatedTools = [
   },
   {
     name: "create-template",
+    title: "Create template",
     operationId: "createTemplate",
     description: "Create a template. Creates a reusable container-configuration preset \u2014 image, disk, ports, env, registry, and mount settings \u2014 for pods and serverless endpoints. Pass its ID as `templateId` to `createPod` or `createEndpoint`, or spread its fields into the request body directly. Returns the created template.",
     method: "POST",
@@ -1681,7 +1776,8 @@ var generatedTools = [
       type: "object",
       properties: {
         body: {
-          $ref: "#/$defs/CreateTemplateRequest"
+          $ref: "#/$defs/CreateTemplateRequest",
+          type: "object"
         }
       },
       required: ["body"],
@@ -1865,8 +1961,10 @@ var generatedTools = [
   },
   {
     name: "delete-cluster",
+    title: "Delete cluster",
     operationId: "deleteCluster",
     description: "Delete a cluster permanently: it terminates every member pod. Verify the id with get-cluster, and list-cluster-pods for what the delete takes down, before deleting; delete only clusters your own tool calls created in this conversation, or the one the user asked you to delete by id \u2014 a name found by listing is not attribution.",
+    directoryDescription: "Delete an Instant Cluster permanently. Every member Pod is terminated and its container disk is lost.",
     method: "DELETE",
     path: "/v2/clusters/{id}",
     params: [
@@ -1895,8 +1993,10 @@ var generatedTools = [
   },
   {
     name: "delete-endpoint",
+    title: "Delete endpoint",
     operationId: "deleteEndpoint",
     description: "Delete a serverless endpoint permanently and immediately. Verify the id belongs to the intended endpoint (get-endpoint) before deleting; delete only endpoints your own tool calls created in this conversation, or the one the user asked you to delete by id \u2014 a name found by listing is not attribution.",
+    directoryDescription: "Delete a Serverless endpoint permanently and immediately.",
     method: "DELETE",
     path: "/v2/serverless/{id}",
     params: [
@@ -1925,6 +2025,7 @@ var generatedTools = [
   },
   {
     name: "delete-global-volume",
+    title: "Delete global volume",
     operationId: "deleteGlobalVolume",
     description: "Delete a global volume. Permanently deletes a global volume and its stored data. Fails with `409` while the volume is still mounted: terminate every pod that mounts it (stopped pods count) and detach it from every serverless endpoint first. Nothing is detached or terminated on your behalf.",
     method: "DELETE",
@@ -1955,6 +2056,7 @@ var generatedTools = [
   },
   {
     name: "delete-network-volume",
+    title: "Delete network volume",
     operationId: "deleteNetworkVolume",
     description: "Delete a network volume. Permanently deletes a network volume and releases its storage.",
     method: "DELETE",
@@ -1985,8 +2087,10 @@ var generatedTools = [
   },
   {
     name: "delete-pod",
+    title: "Delete Pod",
     operationId: "deletePod",
     description: "Terminate a pod permanently \u2014 its container disk is lost. Distinguish from stopping (pod-action stop) which releases the GPU but keeps volume data. Verify the id with get-pod first; terminate only pods your own tool calls created in this conversation, or the one the user asked you to terminate by id \u2014 a name found by listing is not attribution.",
+    directoryDescription: "Terminate a Pod permanently. Its container disk is lost; data on an attached network volume is kept. Stopping a Pod instead releases its compute but keeps its disk.",
     method: "DELETE",
     path: "/v2/pods/{id}",
     params: [
@@ -2015,6 +2119,7 @@ var generatedTools = [
   },
   {
     name: "delete-registry",
+    title: "Delete registry credential",
     operationId: "deleteRegistry",
     description: "Delete a container registry credential. Permanently deletes a container registry credential by ID. Rejected if any pod currently uses this credential to pull its image. Templates that reference it are not part of that check \u2014 they silently lose the reference (`registry` becomes null) instead of blocking the delete.",
     method: "DELETE",
@@ -2044,8 +2149,10 @@ var generatedTools = [
   },
   {
     name: "delete-secret",
+    title: "Delete secret",
     operationId: "deleteSecret",
     description: "Delete a secret permanently. Environment variables referencing its name ({{ RUNPOD_SECRET_<name> }}) stop resolving at the next pod or worker boot; running instances keep the value they started with. Verify the id with get-secret first; delete only secrets your own tool calls created in this conversation, or the one the user asked you to delete by id \u2014 a name found by listing is not attribution.",
+    directoryDescription: "Delete a secret permanently. Environment variables that reference it ({{ RUNPOD_SECRET_<name> }}) stop resolving at the next Pod or worker boot; running instances keep the value they started with.",
     method: "DELETE",
     path: "/v2/account/secrets/{id}",
     params: [
@@ -2074,8 +2181,10 @@ var generatedTools = [
   },
   {
     name: "delete-template",
+    title: "Delete template",
     operationId: "deleteTemplate",
     description: "Delete a template permanently. Verify with get-template first; a template referenced by a live endpoint should not be deleted.",
+    directoryDescription: "Delete a template permanently. An endpoint that references the template can stop working once it is deleted.",
     method: "DELETE",
     path: "/v2/templates/{id}",
     params: [
@@ -2103,6 +2212,7 @@ var generatedTools = [
   },
   {
     name: "get-cluster",
+    title: "Get cluster",
     operationId: "getCluster",
     description: "Get a cluster. Returns a single cluster by ID. The pods field is an aggregate summary (total + count by status); fetch the member pods themselves from /v2/clusters/{id}/pods.",
     method: "GET",
@@ -2133,6 +2243,7 @@ var generatedTools = [
   },
   {
     name: "get-cpu-type",
+    title: "Get CPU type",
     operationId: "getCpuType",
     description: "Get a CPU type. Returns a single CPU type with pricing. Availability details are included only when requested with include=AVAILABILITY, which requires `product` \u2014 stock differs by product context.",
     method: "GET",
@@ -2209,6 +2320,7 @@ var generatedTools = [
   },
   {
     name: "get-data-center",
+    title: "Get data center",
     operationId: "getDataCenter",
     description: "Get a data center. Returns a single data center. Availability is included only when requested with include=GPU_AVAILABILITY or include=CPU_AVAILABILITY.",
     method: "GET",
@@ -2258,6 +2370,7 @@ var generatedTools = [
   },
   {
     name: "get-endpoint",
+    title: "Get endpoint",
     operationId: "getEndpoint",
     description: "Get a serverless endpoint. Returns a single serverless endpoint by ID.",
     method: "GET",
@@ -2288,6 +2401,7 @@ var generatedTools = [
   },
   {
     name: "get-endpoint-build",
+    title: "Get endpoint build",
     operationId: "getEndpointBuild",
     description: "Get a serverless endpoint build. Returns one of the endpoint's GitHub builds by id, regardless of age \u2014 no need to page through `GET /v2/serverless/{id}/builds` to reach it.",
     method: "GET",
@@ -2326,6 +2440,7 @@ var generatedTools = [
   },
   {
     name: "get-global-volume",
+    title: "Get global volume",
     operationId: "getGlobalVolume",
     description: "Get a global volume. Returns a single global volume by ID.",
     method: "GET",
@@ -2356,6 +2471,7 @@ var generatedTools = [
   },
   {
     name: "get-gpu-type",
+    title: "Get GPU type",
     operationId: "getGpuType",
     description: "Get a GPU type. Returns a single GPU type with pricing. Availability details are included only when requested with include=AVAILABILITY, which requires `product` \u2014 stock differs by product context.",
     method: "GET",
@@ -2434,7 +2550,8 @@ var generatedTools = [
         },
         cloud: {
           $ref: "#/$defs/GpuCloudFilter",
-          description: "Cloud type for availability and lowest-price calculations. Valid only with include=AVAILABILITY. Supported values: SECURE, COMMUNITY. Upstream default when omitted: SECURE."
+          description: "Cloud type for availability and lowest-price calculations. Valid only with include=AVAILABILITY. Supported values: SECURE, COMMUNITY. Upstream default when omitted: SECURE.",
+          type: "string"
         },
         countryCodes: {
           type: "array",
@@ -2480,6 +2597,7 @@ var generatedTools = [
   },
   {
     name: "get-network-volume",
+    title: "Get network volume",
     operationId: "getNetworkVolume",
     description: "Get a network volume. Returns a single network volume by ID.",
     method: "GET",
@@ -2510,6 +2628,7 @@ var generatedTools = [
   },
   {
     name: "get-organization",
+    title: "Get organization",
     operationId: "getOrganization",
     description: "Get your current organization. Returns the authenticated caller's current organization. Organization context comes from the caller's membership; no organization selector is required. Returns 404 when the caller does not belong to an organization, or 403 when organizations are unavailable to the caller.",
     method: "GET",
@@ -2529,6 +2648,7 @@ var generatedTools = [
   },
   {
     name: "get-pod",
+    title: "Get Pod",
     operationId: "getPod",
     description: "Get a pod. Returns a single pod by ID.",
     method: "GET",
@@ -2559,6 +2679,7 @@ var generatedTools = [
   },
   {
     name: "get-registry",
+    title: "Get registry credential",
     operationId: "getRegistry",
     description: "Get a container registry credential. Returns a single container registry credential by ID. `username` and `password` are never included in the response \u2014 credentials are write-only, matching `createRegistry`.",
     method: "GET",
@@ -2588,6 +2709,7 @@ var generatedTools = [
   },
   {
     name: "get-secret",
+    title: "Get secret",
     operationId: "getSecret",
     description: "Get a secret. Returns a single secret's metadata by ID. The value is write-only and never returned.",
     method: "GET",
@@ -2618,6 +2740,7 @@ var generatedTools = [
   },
   {
     name: "get-ssh-keys",
+    title: "Get SSH keys",
     operationId: "getSshKeys",
     description: "List registered SSH public keys. Returns the account's registered SSH public keys \u2014 the keys provisioned into pods created with `startSsh` and used to authenticate the SSH connections reported in a pod's `ssh` block.",
     method: "GET",
@@ -2637,6 +2760,7 @@ var generatedTools = [
   },
   {
     name: "get-template",
+    title: "Get template",
     operationId: "getTemplate",
     description: "Get a template. Returns the full configuration of a single template by ID. Serves both templates you own and public catalog templates \u2014 everything you can read. Updates and deletes remain restricted to templates you own.",
     method: "GET",
@@ -2666,6 +2790,7 @@ var generatedTools = [
   },
   {
     name: "list-billing",
+    title: "List billing",
     operationId: "listBilling",
     description: "Get aggregated billing history. Returns time-bucketed total spend across all billable Runpod resources for the authenticated user. Use startTime/endTime with bucketSize for an explicit range, or lastN with bucketSize for the most recent buckets. Each record reports one bucket's total plus pod, serverless, storage, public endpoint, and Instant Cluster cost components. The metadata block echoes the resolved query window, record count, and totals across all returned buckets.",
     method: "GET",
@@ -2710,7 +2835,8 @@ var generatedTools = [
         },
         bucketSize: {
           $ref: "#/$defs/BillingBucketSize",
-          description: "Length of each billing time bucket. Defaults to day."
+          description: "Length of each billing time bucket. Defaults to day.",
+          type: "string"
         },
         lastN: {
           type: "integer",
@@ -2738,6 +2864,7 @@ var generatedTools = [
   },
   {
     name: "list-cluster-billing",
+    title: "List cluster billing",
     operationId: "listClusterBilling",
     description: "Get cluster billing history. Returns Cluster billing history for the authenticated user, split into time buckets by startTime/endTime with bucketSize or by lastN recent buckets. Use clusterId to filter to one cluster; without it, records are emitted per cluster per bucket. Each record includes GPU compute, disk, inter-node networking, and total amounts. Clusters are GPU-only, so no CPU cost component is returned.",
     method: "GET",
@@ -2786,7 +2913,8 @@ var generatedTools = [
         },
         bucketSize: {
           $ref: "#/$defs/BillingBucketSize",
-          description: "Length of each billing time bucket. Defaults to day."
+          description: "Length of each billing time bucket. Defaults to day.",
+          type: "string"
         },
         lastN: {
           type: "integer",
@@ -2818,6 +2946,7 @@ var generatedTools = [
   },
   {
     name: "list-cluster-pods",
+    title: "List cluster Pods",
     operationId: "listClusterPods",
     description: "List a cluster's pods. Returns the full member pods of a cluster. The cluster summary (`GET /v2/clusters/{id}`) carries only aggregate pod counts; this endpoint returns each member as a complete Pod object.",
     method: "GET",
@@ -2848,6 +2977,7 @@ var generatedTools = [
   },
   {
     name: "list-clusters",
+    title: "List clusters",
     operationId: "listClusters",
     description: "List clusters. Returns clusters owned by the authenticated user, cursor-paginated newest-first; an omitted `limit` defaults to 1000. Follow `pagination.nextCursor` until `hasNextPage` is false.",
     method: "GET",
@@ -2888,6 +3018,7 @@ var generatedTools = [
   },
   {
     name: "list-cpu-types",
+    title: "List CPU types",
     operationId: "listCpuTypes",
     description: "List CPU types. Returns available CPU flavors. Availability is included only when requested with include=AVAILABILITY, which requires `product` \u2014 stock differs by product context.",
     method: "GET",
@@ -2956,6 +3087,7 @@ var generatedTools = [
   },
   {
     name: "list-data-centers",
+    title: "List data centers",
     operationId: "listDataCenters",
     description: "List data centers. Returns available data center locations with region, compliance, supported network volume tiers, and global networking support. Use include=GPU_AVAILABILITY or include=CPU_AVAILABILITY to add per-resource availability arrays to each data center. The regions, networkVolumeTypes, compliance, and globalNetwork query parameters filter the list before it is returned.",
     method: "GET",
@@ -3083,6 +3215,7 @@ var generatedTools = [
   },
   {
     name: "list-delegations",
+    title: "List ECR delegations",
     operationId: "listDelegations",
     description: "List all ECR delegations",
     method: "GET",
@@ -3102,6 +3235,7 @@ var generatedTools = [
   },
   {
     name: "list-endpoint-billing",
+    title: "List endpoint billing",
     operationId: "listEndpointBilling",
     description: "Get public endpoint billing history. Returns Runpod public endpoint billing history for the authenticated user, split into time buckets by startTime/endTime with bucketSize or by lastN recent buckets. Each record reports the endpoint total for one bucket, and metadata echoes the resolved query window, record count, and total endpoint amount across all returned records.",
     method: "GET",
@@ -3146,7 +3280,8 @@ var generatedTools = [
         },
         bucketSize: {
           $ref: "#/$defs/BillingBucketSize",
-          description: "Length of each billing time bucket. Defaults to day."
+          description: "Length of each billing time bucket. Defaults to day.",
+          type: "string"
         },
         lastN: {
           type: "integer",
@@ -3174,6 +3309,7 @@ var generatedTools = [
   },
   {
     name: "list-endpoint-builds",
+    title: "List endpoint builds",
     operationId: "listEndpointBuilds",
     description: "List serverless endpoint builds. Returns the endpoint's GitHub build history, newest first (Runpod GitHub-build integration), cursor-paginated; an omitted `limit` defaults to 100, so a bare request returns at most the 100 most recent builds. Any build can also be fetched by id via `GET /v2/serverless/{id}/builds/{buildId}`. Stream a build's logs via `/v2/serverless/{id}/builds/{buildId}/logs`.",
     method: "GET",
@@ -3223,6 +3359,7 @@ var generatedTools = [
   },
   {
     name: "list-endpoint-releases",
+    title: "List endpoint releases",
     operationId: "listEndpointReleases",
     description: "List serverless endpoint releases. Returns the endpoint's release history (newest first) plus a rollout summary of how many workers are running the current version. Each release is a versioned configuration snapshot with a `diff` of what changed; build-driven releases carry a `buildId` (fetch build detail via the builds sub-routes). Releases are cursor-paginated newest-first; an omitted `limit` defaults to 1000. The rollout summary always describes the endpoint's current state, independent of the page requested.",
     method: "GET",
@@ -3272,6 +3409,7 @@ var generatedTools = [
   },
   {
     name: "list-endpoint-workers",
+    title: "List endpoint workers",
     operationId: "listEndpointWorkers",
     description: "List serverless endpoint workers. Lists the active workers for a serverless endpoint. **Returns.** A `200` with a `ListEndpointWorkersResponse`: a `workers` array (one entry per active worker, each carrying its `id`, `status`, and runtime details) plus a `summary` of worker counts grouped by status. Only currently active workers are included; scaled-down workers are not returned. **How `status` is determined.** Each worker's `status` is derived by reconciling the worker pod's lifecycle status with the endpoint's live job-queue view (which workers are actively serving requests). When the job-queue view is unavailable, the response degrades gracefully: the shape is unchanged, but each `status` and the summary counts fall back to pod lifecycle alone.",
     method: "GET",
@@ -3302,6 +3440,7 @@ var generatedTools = [
   },
   {
     name: "list-global-volumes",
+    title: "List global volumes",
     operationId: "listGlobalVolumes",
     description: "List global volumes. Returns global volumes owned by the authenticated user, cursor-paginated newest-first; an omitted `limit` defaults to 1000. Follow `pagination.nextCursor` until `hasNextPage` is false.",
     method: "GET",
@@ -3342,6 +3481,7 @@ var generatedTools = [
   },
   {
     name: "list-gpu-types",
+    title: "List GPU types",
     operationId: "listGpuTypes",
     description: 'List GPU types. Returns available GPU types with pricing. Availability is included only when requested with include=AVAILABILITY, which requires `product` \u2014 stock differs by product context. With countryCodes, the list is narrowed to GPU types deployable in those countries, so "this geography + this chip" resolves in one read.',
     method: "GET",
@@ -3413,7 +3553,8 @@ var generatedTools = [
         },
         cloud: {
           $ref: "#/$defs/GpuCloudFilter",
-          description: "Cloud type for availability and lowest-price calculations. Valid only with include=AVAILABILITY. Supported values: SECURE, COMMUNITY. Upstream default when omitted: SECURE."
+          description: "Cloud type for availability and lowest-price calculations. Valid only with include=AVAILABILITY. Supported values: SECURE, COMMUNITY. Upstream default when omitted: SECURE.",
+          type: "string"
         },
         countryCodes: {
           type: "array",
@@ -3458,6 +3599,7 @@ var generatedTools = [
   },
   {
     name: "list-network-volume-billing",
+    title: "List network volume billing",
     operationId: "listNetworkVolumeBilling",
     description: "Get network volume billing history. Returns network volume billing history for the authenticated user, split into time buckets by startTime/endTime with bucketSize or by lastN recent buckets. Use networkVolumeId to filter to one volume; without it, records are emitted per volume per bucket. Each record includes standard storage, high-performance storage, and total amounts, while metadata reports the resolved query, distinct volume count, and totals across the returned records.",
     method: "GET",
@@ -3506,7 +3648,8 @@ var generatedTools = [
         },
         bucketSize: {
           $ref: "#/$defs/BillingBucketSize",
-          description: "Length of each billing time bucket. Defaults to day."
+          description: "Length of each billing time bucket. Defaults to day.",
+          type: "string"
         },
         lastN: {
           type: "integer",
@@ -3538,6 +3681,7 @@ var generatedTools = [
   },
   {
     name: "list-network-volumes",
+    title: "List network volumes",
     operationId: "listNetworkVolumes",
     description: "List network volumes. Returns network volumes owned by the authenticated user, cursor-paginated newest-first; an omitted `limit` defaults to 1000. Follow `pagination.nextCursor` until `hasNextPage` is false.",
     method: "GET",
@@ -3578,6 +3722,7 @@ var generatedTools = [
   },
   {
     name: "list-pod-billing",
+    title: "List Pod billing",
     operationId: "listPodBilling",
     description: "Get pod billing history. Returns pod-only billing detail for the authenticated user, split into time buckets by startTime/endTime with bucketSize or by lastN recent buckets. Use podId to narrow the response to one GPU or CPU pod; without it, records are emitted per pod per bucket. Each record includes podId, GPU, CPU, disk, and total amounts, while metadata echoes the resolved query and totals across the pod records. Use listBilling when you need aggregate spend across every billable resource family.",
     method: "GET",
@@ -3626,7 +3771,8 @@ var generatedTools = [
         },
         bucketSize: {
           $ref: "#/$defs/BillingBucketSize",
-          description: "Length of each billing time bucket. Defaults to day."
+          description: "Length of each billing time bucket. Defaults to day.",
+          type: "string"
         },
         lastN: {
           type: "integer",
@@ -3658,6 +3804,7 @@ var generatedTools = [
   },
   {
     name: "list-pods",
+    title: "List Pods",
     operationId: "listPods",
     description: "List pods. Returns pods owned by the authenticated user. Cluster member pods are excluded by default; set `includeClusterPods=true` to include them (each carries a non-null `cluster` membership block). Results are cursor-paginated newest-first; an omitted `limit` defaults to 1000. The cluster-member exclusion is applied before the page is cut, so a page holds `limit` pods whenever that many remain. Follow `pagination.nextCursor` until `hasNextPage` is false.",
     method: "GET",
@@ -3707,6 +3854,7 @@ var generatedTools = [
   },
   {
     name: "list-public-templates",
+    title: "List public templates",
     operationId: "listPublicTemplates",
     description: "List public templates. Returns the public template catalog. `source` selects which slice: `official` (the default) is Runpod-curated templates, `verified` is community templates Runpod has verified, and `community` is everything else other users have shared publicly. Both pod and serverless templates appear \u2014 use each entry's `serverless` flag to tell them apart. `registry` is always null for templates you don't own. Your own templates (public or private) are managed under `/v2/templates`; fetch any individual template \u2014 catalog or owned \u2014 via `/v2/templates/{id}`. At most 100 templates are returned. Cursor pagination is not yet supported here; `pagination` is always the exhausted marker (`nextCursor: null`, `hasNextPage: false`).",
     method: "GET",
@@ -3738,6 +3886,7 @@ var generatedTools = [
   },
   {
     name: "list-registries",
+    title: "List registry credentials",
     operationId: "listRegistries",
     description: "List container registries. Returns all container registry credentials owned by the authenticated user.",
     method: "GET",
@@ -3757,6 +3906,7 @@ var generatedTools = [
   },
   {
     name: "list-secrets",
+    title: "List secrets",
     operationId: "listSecrets",
     description: "List secrets. Returns the account's secrets \u2014 encrypted strings referenced from pod, serverless, and template environment variables with the `{{ RUNPOD_SECRET_<name> }}` placeholder syntax, substituted with the secret's value when the pod or worker boots. Secret values are write-only and are never returned.",
     method: "GET",
@@ -3786,8 +3936,10 @@ var generatedTools = [
   },
   {
     name: "list-serverless-billing",
+    title: "List Serverless billing",
     operationId: "listServerlessBilling",
     description: "Get serverless billing history, split into time buckets. SIZE WARNING: with defaults this emits one record per endpoint PER BUCKET \u2014 on an account with many endpoints the response overflows the tool-result limit and becomes unusable. Always pass lastN: 1 (or a bucketSize spanning the whole window) for one record per endpoint, and serverlessId when you need one endpoint. Distinct from pod billing, which covers standalone pods.",
+    directoryDescription: "Get Serverless billing history, split into time buckets. By default the response has one record per endpoint per bucket, which can be very large on accounts with many endpoints; lastN: 1 (or one bucket spanning the whole window) returns one record per endpoint, and serverlessId narrows it to a single endpoint. Pod billing is reported separately.",
     method: "GET",
     path: "/v2/billing/serverless",
     params: [
@@ -3834,7 +3986,8 @@ var generatedTools = [
         },
         bucketSize: {
           $ref: "#/$defs/BillingBucketSize",
-          description: "Length of each billing time bucket. Defaults to day."
+          description: "Length of each billing time bucket. Defaults to day.",
+          type: "string"
         },
         lastN: {
           type: "integer",
@@ -3866,6 +4019,7 @@ var generatedTools = [
   },
   {
     name: "pod-action",
+    title: "Start, stop, restart, or terminate a Pod",
     operationId: "podAction",
     description: "Trigger a pod state transition. Triggers a state transition on a pod. Send a JSON body with a single `action` field, e.g. `{ \"action\": \"stop\" }`. Valid actions: - `start` \u2014 boot a stopped pod (`EXITED` or `ERROR`) back toward `RUNNING`. - `stop` \u2014 stop a running or provisioning pod, releasing GPU/CPU compute while keeping its disk. The pod moves to `EXITED`. - `restart` \u2014 restart a `RUNNING` pod's container in place. - `terminate` \u2014 permanently delete the pod and release its resources (equivalent to `deletePod`). Which actions are valid depends on the pod's current status, and the currently permitted set is published in the pod's `actions` field: `RUNNING` allows `stop`/`restart`/`terminate`; `EXITED` and `ERROR` allow `start`/`terminate`; `PROVISIONING` and `STARTING` allow `stop`/`terminate`. `start`, `stop`, and `restart` return `200` with the updated pod. `terminate` returns `204` with no body. Requesting an action that is not valid for the pod's current status returns `409`.",
     method: "POST",
@@ -3890,7 +4044,8 @@ var generatedTools = [
           type: "string"
         },
         body: {
-          $ref: "#/$defs/PodActionRequest"
+          $ref: "#/$defs/PodActionRequest",
+          type: "object"
         }
       },
       required: ["id", "body"],
@@ -3915,6 +4070,7 @@ var generatedTools = [
   },
   {
     name: "revoke-delegation",
+    title: "Revoke ECR delegation",
     operationId: "revokeDelegation",
     description: "Revoke an ECR delegation",
     method: "DELETE",
@@ -3944,6 +4100,7 @@ var generatedTools = [
   },
   {
     name: "update-cluster",
+    title: "Update cluster",
     operationId: "updateCluster",
     description: "Rename a cluster. Renames a cluster. This endpoint only changes the cluster name \u2014 compute shape, type, and container configuration are fixed at creation and cannot be updated.",
     method: "PATCH",
@@ -3958,7 +4115,7 @@ var generatedTools = [
     annotations: {
       readOnlyHint: false,
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: true
     },
     inputSchema: {
@@ -3969,7 +4126,8 @@ var generatedTools = [
           description: "Cluster identifier"
         },
         body: {
-          $ref: "#/$defs/UpdateClusterRequest"
+          $ref: "#/$defs/UpdateClusterRequest",
+          type: "object"
         }
       },
       required: ["id", "body"],
@@ -3992,8 +4150,10 @@ var generatedTools = [
   },
   {
     name: "update-endpoint",
+    title: "Update endpoint",
     operationId: "updateEndpoint",
     description: "Partially update a serverless endpoint (PATCH): only fields present in the body change, omitted ones are untouched, with one exception. DESTRUCTIVE GOTCHA: gpu.pools and gpu.excludedTypes are a single selection, so sending pools without excludedTypes clears any exclusions pinned elsewhere (the console or set-endpoint-gpus) \u2014 read the endpoint first with get-endpoint and resend excludedTypes if you still want them. An exclusion naming a type outside pools returns 400. A CUDA-only or count-only change does not need pools at all, so omit it unless you mean to replace the selection. Mutable fields: name, gpu, cpu, workers (min/max/idleTimeout), scaling (type plus queueDelay or requestCount), dataCenterIds, networkVolumes, timeout, flashboot, and the container settings (image, args, disk, ports, env, registry). cpu completely replaces a CPU endpoint's flavor selection. Compute family is immutable: gpu on a CPU endpoint, cpu on a GPU one, or both, returns 400. Effect timing differs by field \u2014 workers/scaling/timeout reach the autoscaler promptly, while container changes (image, env) cut a new release that rolls out as workers cycle, so in-flight workers keep the previous version. Track rollout with list-endpoint-releases.",
+    directoryDescription: "Partially update a Serverless endpoint (PATCH): only fields present in the body change. gpu.pools and gpu.excludedTypes are one selection, so sending pools without excludedTypes clears existing exclusions; an exclusion naming a type outside pools returns 400, and a CUDA-only or count-only change does not need pools. Mutable fields: name, gpu, cpu, workers (min/max/idleTimeout), scaling (type plus queueDelay or requestCount), dataCenterIds, networkVolumes, timeout, flashboot, and the container settings (image, args, disk, ports, env, registry). cpu replaces a CPU endpoint's whole flavor selection. The compute family is fixed: gpu on a CPU endpoint, cpu on a GPU one, or both returns 400. Worker, scaling and timeout changes apply promptly; container changes (image, env) create a new release that rolls out as workers cycle, so in-flight workers keep the previous version.",
     method: "PATCH",
     path: "/v2/serverless/{id}",
     params: [
@@ -4005,7 +4165,7 @@ var generatedTools = [
     hasBody: true,
     annotations: {
       readOnlyHint: false,
-      destructiveHint: false,
+      destructiveHint: true,
       idempotentHint: false,
       openWorldHint: true
     },
@@ -4018,7 +4178,8 @@ var generatedTools = [
           description: "Serverless endpoint identifier"
         },
         body: {
-          $ref: "#/$defs/UpdateEndpointRequest"
+          $ref: "#/$defs/UpdateEndpointRequest",
+          type: "object"
         }
       },
       required: ["id", "body"],
@@ -4382,6 +4543,7 @@ var generatedTools = [
   },
   {
     name: "update-global-volume",
+    title: "Update global volume",
     operationId: "updateGlobalVolume",
     description: "Update a global volume. Updates mutable fields on a global volume. Only provided fields are changed.",
     method: "PATCH",
@@ -4396,7 +4558,7 @@ var generatedTools = [
     annotations: {
       readOnlyHint: false,
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: true
     },
     inputSchema: {
@@ -4407,7 +4569,8 @@ var generatedTools = [
           description: "Global volume identifier"
         },
         body: {
-          $ref: "#/$defs/UpdateGlobalVolumeRequest"
+          $ref: "#/$defs/UpdateGlobalVolumeRequest",
+          type: "object"
         }
       },
       required: ["id", "body"],
@@ -4433,6 +4596,7 @@ var generatedTools = [
   },
   {
     name: "update-network-volume",
+    title: "Update network volume",
     operationId: "updateNetworkVolume",
     description: "Update a network volume. Updates mutable fields on a network volume. Only provided fields are changed. Note: `size` may only increase; attempts to reduce size will be rejected.",
     method: "PATCH",
@@ -4447,7 +4611,7 @@ var generatedTools = [
     annotations: {
       readOnlyHint: false,
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: true
     },
     inputSchema: {
@@ -4458,7 +4622,8 @@ var generatedTools = [
           description: "Network volume identifier"
         },
         body: {
-          $ref: "#/$defs/UpdateNetworkVolumeRequest"
+          $ref: "#/$defs/UpdateNetworkVolumeRequest",
+          type: "object"
         }
       },
       required: ["id", "body"],
@@ -4489,6 +4654,7 @@ var generatedTools = [
   },
   {
     name: "update-pod",
+    title: "Update Pod",
     operationId: "updatePod",
     description: "Update a pod. Partially updates a pod's configuration. This is a PATCH: only the fields present in the body are changed, and omitted fields are left untouched. Use empty values only when you explicitly mean to clear a field (for example, set `registry` to `null` or set `ports` to `[]`). See `UpdatePodRequest` for the full body. Mutable fields: `name`, `image`, `args`, `disk`, `ports`, `env`, `registry`, `mounts`, `locked`, and `globalNetworking`. Some changes apply immediately while others (e.g. `globalNetworking`) take effect on the pod's next start/restart, as noted on the individual fields. Pods that belong to a Cluster cannot be updated here \u2014 manage them through `/v2/clusters/{id}`. Returns `200` with the full updated pod.",
     method: "PATCH",
@@ -4502,7 +4668,7 @@ var generatedTools = [
     hasBody: true,
     annotations: {
       readOnlyHint: false,
-      destructiveHint: false,
+      destructiveHint: true,
       idempotentHint: false,
       openWorldHint: true
     },
@@ -4515,7 +4681,8 @@ var generatedTools = [
           description: "Pod identifier"
         },
         body: {
-          $ref: "#/$defs/UpdatePodRequest"
+          $ref: "#/$defs/UpdatePodRequest",
+          type: "object"
         }
       },
       required: ["id", "body"],
@@ -4730,6 +4897,7 @@ var generatedTools = [
   },
   {
     name: "update-secret",
+    title: "Update secret",
     operationId: "updateSecret",
     description: "Update a secret. Rotates a secret's value and/or updates its description. Only the provided fields are changed and at least one field is required; the `name` is immutable. Pods and workers receive the new value at their next boot \u2014 running instances keep the value they were started with. When both fields are sent, the value is applied first, then the description. The two updates are not atomic: if the description update fails after the value was rotated, the response is an error but the new value has already taken effect. Send the fields in separate requests when that partial outcome matters.",
     method: "PATCH",
@@ -4743,7 +4911,7 @@ var generatedTools = [
     hasBody: true,
     annotations: {
       readOnlyHint: false,
-      destructiveHint: false,
+      destructiveHint: true,
       idempotentHint: false,
       openWorldHint: true
     },
@@ -4756,7 +4924,8 @@ var generatedTools = [
           description: "Secret identifier"
         },
         body: {
-          $ref: "#/$defs/UpdateSecretRequest"
+          $ref: "#/$defs/UpdateSecretRequest",
+          type: "object"
         }
       },
       required: ["id", "body"],
@@ -4785,6 +4954,7 @@ var generatedTools = [
   },
   {
     name: "update-ssh-keys",
+    title: "Update SSH keys",
     operationId: "updateSshKeys",
     description: "Replace registered SSH public keys. Replaces the account's full set of registered SSH public keys. Existing keys not present in the request are removed; send `[]` to remove all keys. Keys take effect for pods created afterwards with `startSsh` \u2014 running pods are not updated.",
     method: "PUT",
@@ -4801,7 +4971,8 @@ var generatedTools = [
       type: "object",
       properties: {
         body: {
-          $ref: "#/$defs/UpdateSshKeysRequest"
+          $ref: "#/$defs/UpdateSshKeysRequest",
+          type: "object"
         }
       },
       required: ["body"],
@@ -4831,6 +5002,7 @@ var generatedTools = [
   },
   {
     name: "update-template",
+    title: "Update template",
     operationId: "updateTemplate",
     description: "Update a template. Partially updates a template. This is a PATCH: only the fields present in the body are changed; omitted fields are left untouched. See `UpdateTemplateRequest` for the full body. Mutable fields: `name`, `image`, `args`, `disk`, `ports`, `env`, `registry`, `mounts`, `serverless`, `public`, and `category`. Only the template's owner can update it (authenticated via the request's API key); public catalog templates are readable via GET but return `404` here. Returns `200` with the full updated template. Pods and endpoints already created from this template are not changed retroactively \u2014 the template is a snapshot applied at creation time.",
     method: "PATCH",
@@ -4845,7 +5017,7 @@ var generatedTools = [
     annotations: {
       readOnlyHint: false,
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: true
     },
     schemaOnDemand: true,
@@ -4856,7 +5028,8 @@ var generatedTools = [
           type: "string"
         },
         body: {
-          $ref: "#/$defs/UpdateTemplateRequest"
+          $ref: "#/$defs/UpdateTemplateRequest",
+          type: "object"
         }
       },
       required: ["id", "body"],
@@ -5025,6 +5198,146 @@ var generatedTools = [
   }
 ];
 
+// src/specgen/profile.ts
+var DIRECTORY_PATH = "/directory";
+var IN = { include: true };
+var CREDENTIAL_INPUT = "Takes a secret or password as input; directories forbid collecting credentials.";
+var ALP = "Collects conversation-derived data beyond the task; the directory profile never serves it.";
+var DIRECTORY_TOOLS = {
+  "cancel-job": IN,
+  "create-cluster": IN,
+  "create-delegation": IN,
+  "create-endpoint": IN,
+  "create-global-volume": IN,
+  "create-network-volume": IN,
+  "create-pod": IN,
+  "create-template": IN,
+  "delete-cluster": IN,
+  "delete-endpoint": IN,
+  "delete-global-volume": IN,
+  "delete-network-volume": IN,
+  "delete-pod": IN,
+  "delete-registry": IN,
+  "delete-secret": IN,
+  "delete-template": IN,
+  "deploy-hub-repo": IN,
+  "endpoint-health": IN,
+  "get-capacity": IN,
+  "get-cluster": IN,
+  "get-cpu-type": IN,
+  "get-data-center": IN,
+  "get-endpoint": IN,
+  "get-endpoint-build": IN,
+  "get-global-volume": IN,
+  "get-gpu-type": IN,
+  "get-job-status": IN,
+  "get-network-volume": IN,
+  "get-organization": IN,
+  "get-pod": IN,
+  "get-registry": IN,
+  "get-secret": IN,
+  "get-ssh-keys": IN,
+  "get-template": IN,
+  "list-billing": IN,
+  "list-cluster-billing": IN,
+  "list-cluster-pods": IN,
+  "list-clusters": IN,
+  "list-cpu-types": IN,
+  "list-data-centers": IN,
+  "list-delegations": IN,
+  "list-endpoint-billing": IN,
+  "list-endpoint-builds": IN,
+  "list-endpoint-releases": IN,
+  "list-endpoint-workers": IN,
+  "list-endpoints": IN,
+  "list-global-volumes": IN,
+  "list-gpu-types": IN,
+  "list-hub-repos": IN,
+  "list-network-volume-billing": IN,
+  "list-network-volumes": IN,
+  "list-pod-billing": IN,
+  "list-pods": IN,
+  "list-public-endpoints": IN,
+  "list-public-templates": IN,
+  "list-registries": IN,
+  "list-secrets": IN,
+  "list-serverless-billing": IN,
+  "list-templates": IN,
+  "lookup-concept": IN,
+  "pod-action": IN,
+  "purge-endpoint-queue": IN,
+  "retry-job": IN,
+  "revoke-delegation": IN,
+  "search-concepts": IN,
+  "search-docs": IN,
+  "set-endpoint-gpus": IN,
+  "stream-job": IN,
+  "stream-pod-logs": IN,
+  "stream-worker-logs": IN,
+  "update-cluster": IN,
+  "update-endpoint": IN,
+  "update-global-volume": IN,
+  "update-network-volume": IN,
+  "update-pod": IN,
+  "update-ssh-keys": IN,
+  "update-template": IN,
+  "run-endpoint": { include: true, omitInputs: ["s3Config"] },
+  "runsync-endpoint": { include: true, omitInputs: ["s3Config"] },
+  "list-guides": {
+    include: false,
+    reason: "Serves playbooks that instruct the model how to behave."
+  },
+  "read-guide": {
+    include: false,
+    reason: "Serves playbooks that instruct the model how to behave."
+  },
+  "describe-tool": {
+    include: false,
+    reason: "Fetches schemas the directory already lists in full; directories reject schema fetching."
+  },
+  "create-secret": { include: false, reason: CREDENTIAL_INPUT },
+  "update-secret": { include: false, reason: CREDENTIAL_INPUT },
+  "create-registry": { include: false, reason: CREDENTIAL_INPUT },
+  report_feedback: { include: false, reason: ALP },
+  report_how_user_found_runpod: { include: false, reason: ALP },
+  save_to_journal: { include: false, reason: ALP },
+  read_journal: { include: false, reason: ALP },
+  ask_question: { include: false, reason: ALP }
+};
+function directoryIncludes(name) {
+  return DIRECTORY_TOOLS[name]?.include === true;
+}
+function directoryOmittedInputs(name) {
+  const decision = DIRECTORY_TOOLS[name];
+  return decision?.include ? decision.omitInputs ?? [] : [];
+}
+function profileForPath(pathname) {
+  return pathname.replace(/\/+$/, "") === DIRECTORY_PATH ? "directory" : "default";
+}
+
+// src/specgen/redact.ts
+var REDACTED = "[redacted]";
+var SECRET_KEY = /pass(word|wd)?|secret|token|api_?key|private_?key|credential|auth/i;
+var SECRET_REFERENCE = /^\s*\{\{\s*RUNPOD_SECRET_[^}]+\}\}\s*$/;
+function redactEnv(env) {
+  return Object.fromEntries(
+    Object.entries(env).map(([key, value]) => [
+      key,
+      typeof value === "string" && value !== "" && SECRET_KEY.test(key) && !SECRET_REFERENCE.test(value) ? REDACTED : value
+    ])
+  );
+}
+function redactSecretEnv(payload) {
+  if (Array.isArray(payload)) return payload.map(redactSecretEnv);
+  if (!payload || typeof payload !== "object") return payload;
+  return Object.fromEntries(
+    Object.entries(payload).map(([key, value]) => [
+      key,
+      key === "env" && value && typeof value === "object" && !Array.isArray(value) ? redactEnv(value) : redactSecretEnv(value)
+    ])
+  );
+}
+
 // src/specgen/pagination.ts
 var DEFAULT_LIST_LIMIT = 20;
 var MAX_LIST_LIMIT = 100;
@@ -5129,6 +5442,43 @@ function isTimeout(error) {
   const cause = error.cause;
   return cause instanceof Error && (cause.name === "TimeoutError" || cause.name === "AbortError");
 }
+var UNREACHED_CODES = /* @__PURE__ */ new Set([
+  "ENOTFOUND",
+  "EAI_AGAIN",
+  "ECONNREFUSED",
+  "EHOSTUNREACH",
+  "ENETUNREACH",
+  "UND_ERR_CONNECT_TIMEOUT"
+]);
+var TLS_CODE = /^(?:CERT_|ERR_TLS_|UNABLE_TO_|DEPTH_ZERO_|SELF_SIGNED_)/;
+function causeCode(cause) {
+  const code = cause?.code;
+  if (typeof code === "string") return code;
+  const inner = cause instanceof AggregateError ? cause.errors[0] : void 0;
+  const innerCode = inner?.code;
+  return typeof innerCode === "string" ? innerCode : void 0;
+}
+function networkFailureResult(error) {
+  if (!(error instanceof TypeError)) return void 0;
+  const afterHeaders = error.message === "terminated";
+  if (!afterHeaders && error.message !== "fetch failed") return void 0;
+  const code = causeCode(error.cause);
+  if (!code) return void 0;
+  const unreached = !afterHeaders && (UNREACHED_CODES.has(code) || TLS_CODE.test(code));
+  return {
+    ok: false,
+    status: unreached ? 503 : 502,
+    payload: unreached ? {
+      error: "Could not reach the Runpod API.",
+      cause: code,
+      hint: "The request never reached Runpod, so retrying the same call is safe: retry it once. If it fails again, the network, DNS, proxy or TLS setup on this machine is the likely cause; check https://uptime.runpod.io and report it rather than retrying further."
+    } : {
+      error: "The connection to the Runpod API dropped before the full response arrived.",
+      cause: code,
+      hint: "The request may have been applied. A read can be retried once. For a create, update, delete or job submission, check with the matching get- or list- tool whether it took effect before calling again; retrying blindly can create a duplicate billable resource."
+    }
+  };
+}
 async function runTool(body) {
   try {
     return await body();
@@ -5150,6 +5500,8 @@ async function runTool(body) {
         }
       };
     }
+    const network = networkFailureResult(error);
+    if (network) return network;
     throw error;
   }
 }
@@ -5185,6 +5537,12 @@ var destructive = {
   idempotentHint: true,
   openWorldHint: true
 };
+var destructiveWrite = {
+  readOnlyHint: false,
+  destructiveHint: true,
+  idempotentHint: false,
+  openWorldHint: true
+};
 
 // src/specgen/tools/capacity.ts
 var CUDA_VERSION_REGEX = /^\d{1,2}\.\d{1,2}$/;
@@ -5220,6 +5578,8 @@ function rankByStock(rows, stats, includeUnavailable) {
 }
 var getCapacity = {
   name: "get-capacity",
+  title: "Get GPU capacity by CUDA version",
+  directoryDescription: "GPU capacity across host CUDA versions, as a matrix. By default one call returns, for each GPU type, overall stock plus AVAILABLE or UNAVAILABLE per host CUDA version. With cudaVersions it checks each listed version and returns graded stock (High, Medium, Low, Out) and the lowest on-demand price per version; a check that fails transiently reports an error for that version only. Out-of-stock GPUs are included unless includeUnavailable is false. Live public catalog data, so page cursors can shift between calls.",
   annotations: readOnly,
   description: "GPU capacity across host CUDA versions, as a matrix. Use this to choose an endpoint's allowedCudaVersions/minCudaVersion (or diagnose/widen a capacity-starved one) and to distinguish capacity problems from compatibility problems. Default mode is one call returning, per GPU type, overall stock plus AVAILABLE/UNAVAILABLE per host-reported CUDA version. Pass cudaVersions to deep-probe instead: one stock lookup per listed version, returning graded stock (High/Medium/Low/Out) and the lowest on-demand price per version; a probe that fails transiently reports a per-version error instead of failing the call. Nothing is hidden by default \u2014 set includeUnavailable:false to drop GPUs with no stock on any listed version. Credential-free public catalog data. Stock is live, so page cursors can shift between calls.",
   inputSchema: {
@@ -5421,7 +5781,10 @@ function formatGpuIds(gpu) {
 }
 var setEndpointGpus = {
   name: "set-endpoint-gpus",
-  annotations: idempotentWrite,
+  title: "Set endpoint GPUs",
+  directoryDescription: "Set which GPUs a Serverless endpoint's workers run on, including pinning specific GPU types. Takes either a raw gpuIds string, or pools plus optional excludeGpuTypeIds, from which the exclusion string is built: a pool allows every GPU type in it, and excluding all but one pins that type. Changes only GPU settings and keeps the endpoint's other settings.",
+  // Replaces the whole GPU selection: exclusions not resent are cleared.
+  annotations: destructive,
   description: "Set which GPUs a Serverless endpoint's workers run on \u2014 including pinning specific GPU SKUs. Provide either a raw gpuIds string, or pools plus optional excludeGpuTypeIds (GPU type ids from list-gpu-types) and the exclusion string is built for you: a pool allows every SKU in it, and excluding all but one SKU pins that SKU exactly. Updates only GPU settings through REST v2, preserving other endpoint settings. create-endpoint/update-endpoint also support gpu.excludedTypes.",
   inputSchema: {
     type: "object",
@@ -5615,6 +5978,8 @@ function randomSuffix() {
 }
 var listHubRepos = {
   name: "list-hub-repos",
+  title: "List Hub repos",
+  directoryDescription: "List repos published to the Runpod Hub (prebuilt Serverless workers and Pod templates, such as vLLM and ComfyUI), sorted by deploy count. Public catalog; no sign-in needed. Each result includes the listed release with its hubReleaseId and image name. includeConfig: true adds each release's config (hardware requirements and environment-variable schema), which is large; repoOwner and searchTerm narrow the list.",
   annotations: readOnly,
   description: "List repos published to the Runpod Hub (prebuilt Serverless workers and Pod templates, e.g. vLLM, ComfyUI). Public catalog \u2014 no auth required. Each result includes the currently listed release with its hubReleaseId and prebuilt image name. Results are sorted by deploy count (most popular first). Set includeConfig:true to also return the release config (hardware requirements and environment-variable schema) \u2014 it is large, so prefer requesting it for a single repo via the repoOwner/searchTerm filters.",
   inputSchema: {
@@ -5717,6 +6082,8 @@ var listHubRepos = {
 };
 var deployHubRepo = {
   name: "deploy-hub-repo",
+  title: "Deploy Hub repo",
+  directoryDescription: `Deploy a Runpod Hub repo's listed release as a new Serverless endpoint, the same as clicking Deploy on the Hub. Identifies the repo by repo ("owner/name") or hubReleaseId. The release supplies the image, container disk, CUDA constraints and environment-variable defaults; env overrides or fills in values, and keys the release requires without a default have to be supplied. GPUs come from the release config when it sets them, otherwise from gpuIds (pool names such as 'ADA_24'). Billable while the endpoint's workers run.`,
   // Two sequential upstream calls: together they can outlast a client's request timeout.
   holdsResponse: true,
   annotations: write,
@@ -6177,6 +6544,8 @@ function validateWait(wait) {
 }
 var runEndpoint = {
   name: "run-endpoint",
+  title: "Submit Serverless job",
+  directoryDescription: "Submit an asynchronous job to a Serverless endpoint. Returns a job ID immediately; the result stays available for 30 minutes after the job completes.",
   annotations: write,
   description: "Submit an asynchronous job to a Serverless endpoint. Returns a job ID immediately \u2014 use get-job-status to poll for results (pass its `wait` to block through a cold start instead of tight-looping). Async results are available for 30 minutes after completion.",
   inputSchema: {
@@ -6207,6 +6576,8 @@ var runEndpoint = {
 };
 var runsyncEndpoint = {
   name: "runsync-endpoint",
+  title: "Run Serverless job and wait",
+  directoryDescription: `Submit a synchronous job to a Serverless endpoint and wait up to ${HTTP_LONG_POLL_BUDGET_MS} ms for the result. If the job outlives the wait, the response carries the job ID and its current status (IN_QUEUE or IN_PROGRESS). Maximum payload 20 MB; results expire 1 minute after completion.`,
   holdsResponse: true,
   annotations: write,
   description: "Submit a synchronous job to a Serverless endpoint and wait for the result. Best for fast tasks: if the job outlives the wait, the response returns a job ID and a non-terminal status (IN_QUEUE or IN_PROGRESS) to poll with get-job-status. Max payload 20 MB; results expire after 1 minute. The wait parameter extends the server-side wait" + (HOSTED ? ` \u2014 this server runs behind a 60-second gateway deadline, so waits clamp to ${HTTP_LONG_POLL_BUDGET_MS} ms, which is also the effective default. For longer jobs use run-endpoint + get-job-status.` : " to up to 5 minutes (300000 ms); it defaults to 90000 (90 seconds)."),
@@ -6252,6 +6623,8 @@ var runsyncEndpoint = {
 };
 var getJobStatus = {
   name: "get-job-status",
+  title: "Get job status",
+  directoryDescription: `Get the status of a Serverless job, and its output once it completes. Statuses: IN_QUEUE, IN_PROGRESS, COMPLETED, FAILED, CANCELLED, TIMED_OUT. With wait (milliseconds, up to ${HTTP_LONG_POLL_BUDGET_MS}) the server polls until the job reaches a final status or the wait runs out, in which case it returns the latest status with pollingTimedOut: true; without wait it returns the current status at once. An IN_QUEUE result includes a workerHealth summary of the endpoint's workers.`,
   holdsResponse: true,
   annotations: readOnly,
   description: "Check the status of a Serverless job. Returns the current status and output when complete. Job statuses: IN_QUEUE, IN_PROGRESS, COMPLETED, FAILED, CANCELLED, TIMED_OUT. Pass `wait` (milliseconds, up to " + STATUS_WAIT_MAX_MS + ") to BLOCK server-side, polling until the job reaches a terminal status or the budget expires \u2014 use it to ride out a cold start (a first job on a fresh worker pulls the image and loads the model, commonly 1\u20135+ minutes) in a single call instead of returning on the first IN_QUEUE and tight-looping the tool. Without `wait` it returns the current status immediately (a single check). If the budget expires before a terminal status, it returns the latest non-terminal status with pollingTimedOut:true \u2014 call again (with `wait`) to keep blocking. IMPORTANT: a job stuck IN_QUEUE does not necessarily mean a capacity shortage \u2014 a worker may have spun up and crash-looped. When the job is IN_QUEUE this tool attaches a workerHealth summary and a hint. To dig deeper call list-endpoint-workers, then read stream-worker-logs regardless of the status a worker reports: a container failing to start loops while its worker still shows RUNNING or THROTTLED and unhealthy stays 0, so UNHEALTHY is one symptom of a crash loop and not a test for it. The logs are the authority.",
@@ -6301,8 +6674,12 @@ var getJobStatus = {
 };
 var streamJob = {
   name: "stream-job",
+  title: "Stream job output",
+  directoryDescription: `Collect streaming output from a Serverless job whose worker streams its output. Polls the job's stream until it reaches COMPLETED, FAILED, CANCELLED or TIMED_OUT, for up to ${formatBudget(HTTP_LONG_POLL_BUDGET_MS)}; if time runs out first, it returns the chunks collected so far with pollingTimedOut: true, and a later call resumes where it left off.`,
   holdsResponse: true,
-  annotations: readOnly,
+  // Not a read: /stream hands out each chunk once, so a chunk collected by a
+  // call whose response is lost cannot be fetched again.
+  annotations: destructiveWrite,
   description: `Retrieve streaming output from a Serverless job. The worker must support streaming output. Polls /stream/{jobId} and collects chunks until the status is COMPLETED, FAILED, CANCELLED, or TIMED_OUT, for up to ${formatBudget(STREAM_BUDGET_MS)}. If the budget expires first, returns the chunks collected so far with pollingTimedOut: true \u2014 call stream-job again to resume where it left off, or get-job-status to check without streaming.`,
   inputSchema: {
     type: "object",
@@ -6333,6 +6710,7 @@ var streamJob = {
 };
 var cancelJob = {
   name: "cancel-job",
+  title: "Cancel job",
   annotations: destructive,
   description: "Cancel a Serverless job that is queued or in progress.",
   inputSchema: {
@@ -6358,7 +6736,9 @@ var cancelJob = {
 };
 var retryJob = {
   name: "retry-job",
-  annotations: write,
+  title: "Retry job",
+  // Removes the previous output before requeueing.
+  annotations: destructiveWrite,
   description: "Retry a failed or timed-out Serverless job. Only works for jobs with FAILED or TIMED_OUT status. The previous output is removed and the job is requeued.",
   inputSchema: {
     type: "object",
@@ -6383,6 +6763,8 @@ var retryJob = {
 };
 var endpointHealth = {
   name: "endpoint-health",
+  title: "Get endpoint health",
+  directoryDescription: "Get the health rollup for a Serverless endpoint: worker counts by state and job queue statistics. The rollup can lag the per-worker state, and a worker whose container keeps failing to start can still report RUNNING or THROTTLED here. Zero workers means the endpoint is waiting for GPU capacity.",
   annotations: readOnly,
   description: "Get the endpoint-level health rollup for a Serverless endpoint: worker counts by state plus job queue statistics. This is the runtime plane's own /health view and it can lag or disagree with the per-worker truth \u2014 when a job is stuck IN_QUEUE, prefer list-endpoint-workers over this rollup for per-worker state \u2014 but treat neither as the authority on crash loops, because a container failing to start loops while its worker reports RUNNING or THROTTLED and unhealthy stays 0; stream-worker-logs is what settles it, and note that get-job-status already attaches that worker summary and a hint on every IN_QUEUE result. Zero workers here means the endpoint is waiting for GPU capacity.",
   inputSchema: {
@@ -6403,6 +6785,8 @@ var endpointHealth = {
 };
 var purgeEndpointQueue = {
   name: "purge-endpoint-queue",
+  title: "Purge endpoint queue",
+  directoryDescription: "Remove all queued jobs from a Serverless endpoint. Jobs already in progress keep running.",
   annotations: destructive,
   description: "Remove all pending jobs from a Serverless endpoint queue. Only affects queued jobs \u2014 in-progress jobs continue running. Use this for error recovery or clearing outdated requests.",
   inputSchema: {
@@ -6439,6 +6823,8 @@ var jobTools = [
 // src/specgen/tools/list-endpoints.ts
 var listEndpoints = {
   name: "list-endpoints",
+  title: "List endpoints",
+  directoryDescription: "List the Serverless endpoints the account owns, trimmed to id, name, image, compute config, worker counts, scaling and data centers; environment variables and request URLs are left out. Returns one page at a time; cursor=nextCursor returns the next page.",
   annotations: readOnly,
   description: "List serverless endpoints owned by the account (trimmed: id, name, image, compute config, worker counts, scaling, data centers per endpoint \u2014 env vars and request URLs are omitted; use get-endpoint for the full object). Returns a page; pass cursor=nextCursor for more.",
   inputSchema: {
@@ -6484,6 +6870,8 @@ var listEndpoints = {
 // src/specgen/tools/list-templates.ts
 var listTemplates = {
   name: "list-templates",
+  title: "List templates",
+  directoryDescription: "List the templates visible to the account, with id, name, image and Serverless flag for each. Returns 20 templates per page by default; pagination.nextCursor returns the next page, and a template missing from one page can be on a later one.",
   annotations: readOnly,
   description: "List templates visible to the account. Returns id, name, image, and serverless flag per template; use get-template for full detail. Returns 20 templates per page by default. To find a template, follow `pagination.nextCursor` until `hasNextPage` is false: a name missing from one page may be on a later one.",
   inputSchema: {
@@ -7942,6 +8330,7 @@ function logParams(args) {
 }
 var streamPodLogs = {
   name: "stream-pod-logs",
+  title: "Stream Pod logs",
   holdsResponse: true,
   annotations: readOnly,
   description: "Read a bounded snapshot of a Pod's logs (container and/or system source). Holds the live stream open for maxWaitMs and returns the parsed log lines; `truncated: true` means the byte cap cut the output. Use `since` to resume from a timestamp.",
@@ -7965,6 +8354,8 @@ var streamPodLogs = {
 };
 var streamWorkerLogs = {
   name: "stream-worker-logs",
+  title: "Stream worker logs",
+  directoryDescription: "Read a bounded snapshot of a Serverless worker's logs (container, system, or both). Holds the live stream open for maxWaitMs and returns the parsed log lines; truncated: true means the byte cap cut the output. A worker whose container keeps failing to start can report RUNNING or THROTTLED while its logs show the failure.",
   holdsResponse: true,
   annotations: readOnly,
   description: "Read a bounded snapshot of a Serverless worker's logs (container and/or system source). Holds the live stream open for maxWaitMs and returns the parsed log lines; `truncated: true` means the byte cap cut the output. Get worker IDs from list-endpoint-workers. Use this whenever a job stays IN_QUEUE while workers exist, whatever status they report \u2014 a crash-looping container often still shows RUNNING or THROTTLED with unhealthy 0, so these logs, not the worker status, are what identify a crash loop.",
@@ -8007,6 +8398,8 @@ function parseMetadata(metadata) {
 }
 var listPublicEndpoints = {
   name: "list-public-endpoints",
+  title: "List public endpoints",
+  directoryDescription: "List Runpod Public Endpoints: managed, pay-per-use model APIs (text, image, video, audio) that need no deployment. Public catalog; no sign-in needed. Each result includes its endpointId, model name, modality, owner and pricing. Only live endpoints are listed unless includeOffline is true.",
   annotations: readOnly,
   description: "List Runpod Public Endpoints \u2014 managed, pay-per-use model APIs (text, image, video, audio) that require no deployment. Public catalog, no auth required. Each result includes the endpointId to call with run-endpoint/runsync-endpoint (or via https://api.runpod.ai/v2/{endpointId}), the model name, modality, owner, and pricing. Only live endpoints are returned by default; set includeOffline:true to also list ones that are not currently live.",
   inputSchema: {
@@ -8227,6 +8620,7 @@ var source = {
 };
 var listGuides = {
   name: "list-guides",
+  title: "List guides",
   annotations: bundledRead,
   recordedArguments: ["kind", "query", "concept"],
   description: "List the official Runpod guides: skills (how to work with each tool), reference docs (how Runpod works), and golden paths (live-verified end-to-end walkthroughs such as a dev pod, a Whisper endpoint or a fine-tune-to-serverless pipeline). Read one with read-guide. For a golden path, mcp says whether an agent with only these MCP tools can finish it: full (follow it with tool calls), partial (use it for the plan and facts; name the step the user must run in a terminal), none (reference only). Skills and reference docs have mcp null. concepts lists the concept ids it works with (see lookup-concept). Filter with kind, query or concept.",
@@ -8263,6 +8657,7 @@ var listGuides = {
 };
 var readGuide = {
   name: "read-guide",
+  title: "Read guide",
   annotations: bundledRead,
   recordedArguments: ["id"],
   recordedGuideKind: (args) => knowledge.guides.find((guide) => guide.id === String(args.id).trim())?.kind,
@@ -8302,6 +8697,8 @@ var readGuide = {
 };
 var lookupConcept = {
   name: "lookup-concept",
+  title: "Look up a concept",
+  directoryDescription: "Look up one Runpod concept (Pod, network volume, machine, worker, template and so on) by id, name or alias; case, plurals and small typos are tolerated, and matched_as shows the key used when the match was not exact. Returns its summary, fields, states, relations and rules, each rule with its public source, plus the concepts that point at it. Answers exact questions such as whether a volume disk is tied to one machine.",
   annotations: bundledRead,
   recordedArguments: ["concept"],
   description: 'Look up one Runpod concept (pod, network volume, machine, worker, template, \u2026) by id, name or alias; case, plurals and small typos are tolerated, and `matched_as` shows the key used when the match was not exact. Returns its summary, fields, states, relations and rules, each rule with the public source it comes from, the concepts that point at it, and the linked guides: examples (golden paths that use it, with their mcp level) and docs (skills and reference docs that explain it). Use it for exact facts, for example "is a volume disk tied to one machine" or "what happens to a stopped pod\'s GPU".',
@@ -8355,6 +8752,8 @@ var lookupConcept = {
 };
 var searchConcepts = {
   name: "search-concepts",
+  title: "Search concepts",
+  directoryDescription: 'Search the rules of the Runpod concept graph by words, for example "restart stopped pod no gpu" or "network volume data center". Returns the best-matching rules with their concept and public evidence.',
   annotations: bundledRead,
   recordedArguments: ["query", "limit"],
   description: 'Search the rules of the Runpod concept graph by words, for example "restart stopped pod no gpu" or "network volume data center". Returns the best-matching rules with their concept and public evidence. Follow up with lookup-concept for the full concept.',
@@ -8445,18 +8844,46 @@ function listedAnnotations(annotations) {
   const { idempotentHint, ...listed } = annotations;
   return idempotentHint ? annotations : listed;
 }
-function listTool(tool) {
-  const { name, description, inputSchema } = tool;
-  const annotations = listedAnnotations(tool.annotations);
+function listTool(tool, profile = "default") {
+  const { name, title, inputSchema } = tool;
+  const annotations = { title, ...listedAnnotations(tool.annotations) };
+  if (profile === "directory")
+    return {
+      name,
+      title,
+      description: withApiReference(
+        tool.directoryDescription ?? tool.description,
+        inputSchema
+      ),
+      inputSchema: withoutInputs(inputSchema, directoryOmittedInputs(name)),
+      annotations
+    };
+  const { description } = tool;
   if (!tool.schemaOnDemand)
-    return { name, description, inputSchema, annotations };
+    return { name, title, description, inputSchema, annotations };
   return {
     name,
+    title,
     description: description + ON_DEMAND_POINTER,
     inputSchema: callShape(inputSchema),
     annotations
   };
 }
+var DIRECTORY_API_REFERENCE = "Calls the Runpod REST API v2: https://docs.runpod.io/api-reference-v2/overview";
+function withApiReference(description, schema) {
+  const properties = schema.properties ?? {};
+  if (!("body" in properties)) return description;
+  const trimmed = description.replace(/\s*$/, "");
+  const sentence = /[.!?]$/.test(trimmed) ? trimmed : `${trimmed}.`;
+  return `${sentence} ${DIRECTORY_API_REFERENCE}`;
+}
+function withoutInputs(schema, omit) {
+  if (!omit.length) return schema;
+  const properties = { ...schema.properties ?? {} };
+  for (const key of omit) delete properties[key];
+  const required = Array.isArray(schema.required) ? schema.required.filter((key) => !omit.includes(key)) : schema.required;
+  return { ...schema, properties, ...required ? { required } : {} };
+}
 function callShape(schema) {
   const defs = schema.$defs ?? {};
   const resolve = (node) => {
@@ -8503,6 +8930,7 @@ function schemaType(node, resolve) {
 function createDescribeTool(served) {
   return {
     name: DESCRIBE_TOOL_NAME,
+    title: "Describe tool",
     description: "Return one tool's full definition: its description, complete argument schema (every field, nested objects, constraints) and annotations. Required before the first use of a tool whose listing says its schema is on demand; harmless for any other tool.",
     inputSchema: {
       type: "object",
@@ -8557,7 +8985,7 @@ function words2(name) {
 
 // src/server.ts
 var SERVER_NAME = "Runpod API Server";
-var SERVER_VERSION = true ? "4.4.0" : "dev";
+var SERVER_VERSION = true ? "4.6.0" : "dev";
 
 // src/specgen/analytics.ts
 var import_node_crypto = require("crypto");
@@ -8657,16 +9085,6 @@ function captureResourceCall(apiKey, event) {
   );
 }
 
-// src/alp/ingest.ts
-function isSinkUrl(value) {
-  try {
-    const url = new URL(value);
-    return url.protocol === "https:" && url.hostname.endsWith(".convex.site") && url.pathname === "/alp/submit";
-  } catch {
-    return false;
-  }
-}
-
 // src/alp/read.ts
 var DEFAULT_JOURNAL_LIMIT = 20;
 var MAX_JOURNAL_LIMIT = 50;
@@ -8695,12 +9113,21 @@ async function submit(ctx, ingestUrl, route, args, extra) {
         tool: args.tool,
         workaround: args.workaround,
         trigger: args.trigger,
+        source: args.source,
+        noContext: args.noContext,
+        useCase: args.useCase,
         ...extra
       }),
       signal: AbortSignal.timeout(1e4)
     });
     const body = await response.json().catch(() => ({}));
-    return { recorded: response.ok && body.recorded === true };
+    return {
+      recorded: response.ok && body.recorded === true,
+      // The ingest's own named outcome (already_submitted on a once-per-account
+      // route), carried through so the tool can say it. A string from a 200
+      // only — never an upstream error body.
+      ...response.ok && typeof body.reason === "string" ? { reason: body.reason } : {}
+    };
   } catch {
     return { recorded: false };
   }
@@ -8731,6 +9158,10 @@ async function readJournal(ctx, readUrl, limit) {
   }
 }
 var SEVERITY = ["blocked", "degraded", "cosmetic"];
+var MODEL_TYPE_FIELD = {
+  type: "string",
+  description: 'Your best identification of the model you are running as, and the product running it if you know that too \u2014 for example "Claude Opus 5 in Claude Code", "GPT-5.6 via Codex", "Grok 4.6 in Cursor". Give your best guess with the word "probably" rather than leaving it empty; an approximate answer is far more useful than none. Optional.'
+};
 var TOOL_FIELD = {
   type: "string",
   description: "The name of the tool this is about, exactly as it appears in your tool list (for example create-pod). Omit only when no single tool is involved."
@@ -8747,10 +9178,7 @@ var alpInputSchema = (contentDescription, extra = {}) => ({
       description: "One short sentence: what you were trying to accomplish when this came up."
     },
     ...extra,
-    modelType: {
-      type: "string",
-      description: 'Your best identification of the model you are running as, and the product running it if you know that too \u2014 for example "Claude Opus 5 in Claude Code", "GPT-5.6 via Codex", "Grok 4.6 in Cursor". Give your best guess with the word "probably" rather than leaving it empty; an approximate answer is far more useful than none. Optional.'
-    }
+    modelType: MODEL_TYPE_FIELD
   },
   required: ["content"]
 });
@@ -8765,6 +9193,7 @@ function createAlpTools(opts) {
     // is ignored, never a 400 that derails the task the agent is actually on.
     lenientArguments: true,
     name: "report_feedback",
+    title: "Report feedback",
     annotations: write,
     description: "Report a problem or friction with Runpod or these tools: a wrong result, a confusing error, a docs gap, an API behavior that surprised you. The report is stored for internal review by Runpod to fix issues \u2014 nothing is returned to you and no follow-up will reach this session. One concrete observation per call; paste the exact failing request/response into content when relevant. Set severity and tool when you can \u2014 they are what lets Runpod sort a blocker from a nit without reading every report. Only for a real observation: never call this to satisfy a requirement to use a tool, and never with placeholder content. Never include API keys or secrets.",
     inputSchema: alpInputSchema(
@@ -8801,6 +9230,7 @@ function createAlpTools(opts) {
     // is ignored, never a 400 that derails the task the agent is actually on.
     lenientArguments: true,
     name: "save_to_journal",
+    title: "Save to journal",
     annotations: write,
     description: "Save something you learned about using Runpod that a future session would benefit from (e.g. 'image X needs CUDA 12.8', 'endpoint type cannot be changed after create'). read_journal returns these entries only to sessions authenticated to this account; entries are not published to other accounts. Runpod stores and reviews submissions to improve agent workflows. Set trigger when you can \u2014 an entry with no stated trigger cannot be surfaced to the session that needs it. Never include API keys or secrets.",
     inputSchema: alpInputSchema(
@@ -8832,6 +9262,7 @@ function createAlpTools(opts) {
     // is ignored, never a 400 that derails the task the agent is actually on.
     lenientArguments: true,
     name: "ask_question",
+    title: "Ask a question",
     annotations: write,
     description: "Record a question about Runpod that you could not answer with the available tools, skills, and docs. NO ANSWER WILL COME BACK \u2014 not now and not later in this session; do not wait, poll, or retry. Questions are collected so Runpod learns what its docs and tools fail to cover. Ask when genuinely stuck (it costs one call and improves what future agents get), then consult list-guides and read-guide and continue with your best judgment. Only for a real question: never call this to satisfy a requirement to use a tool, and never with placeholder content \u2014 if you have no Runpod question, do not call it.",
     inputSchema: alpInputSchema(
@@ -8857,6 +9288,7 @@ function createAlpTools(opts) {
   const readJournalTool = {
     lenientArguments: true,
     name: "read_journal",
+    title: "Read journal",
     annotations: readOnly,
     description: "Read back this account's private journal: the lessons earlier sessions on this account saved with save_to_journal, newest first. Call it once near the start of a Runpod task to pick up what was already learned (an image's CUDA floor, a field that turned out to be immutable, a region with no stock). Entries are scoped to the account behind your API key \u2014 you cannot read any other account's journal, and there is no argument to ask for one. Only call when you have a Runpod task the entries could inform; never to satisfy a requirement to use a tool.",
     inputSchema: {
@@ -8884,7 +9316,61 @@ function createAlpTools(opts) {
       });
     }
   };
-  return [reportFeedback, saveToJournal, askQuestion, readJournalTool];
+  const reportHowUserFoundRunpod = {
+    lenientArguments: true,
+    name: "report_how_user_found_runpod",
+    title: "Report how the user found Runpod",
+    annotations: idempotentWrite,
+    description: "Tell Runpod how your user ended up on Runpod \u2014 once per account, from context you already have. Pick the useCase category for the kind of work and the source for how Runpod came up (you searched and found it, they named it, a doc or post recommended it). Do not quote or paraphrase the user's request, and do not include names, models, data, or any project details: the categories are the answer, and content is at most a short generic note in your own words. Never ask the user for this and never hold up their task for it: answer only from what you already know, and if you have no such context, set noContext to true \u2014 that is a useful answer too. Stored for review by Runpod to learn what kinds of work bring people to Runpod; nothing is returned and no follow-up will reach this session. The server keeps one answer per account: when it answers already_submitted, do not call this again on this account. Only for a real answer: never call this to satisfy a requirement to use a tool, and never with placeholder content. Never include API keys or secrets.",
+    inputSchema: {
+      type: "object",
+      properties: {
+        content: {
+          type: "string",
+          description: 'Optional. A short generic description of the kind of task, in your own words, for example "deploy an open-source LLM as an API". Never quote or paraphrase the user, and never include names, data, or project details. Leave it empty when useCase says enough.'
+        },
+        source: {
+          type: "string",
+          enum: [...ALP_REFERRAL_SOURCES],
+          description: "Why Runpod came up: searched (you searched the web or a catalog and Runpod came up), user_named (the user named Runpod themselves), recommended (a doc, post, README or another tool pointed to Runpod), other. Omit when noContext is true."
+        },
+        useCase: {
+          type: "string",
+          enum: [...ALP_REFERRAL_USE_CASES],
+          description: "The kind of work that brought the user to Runpod: inference (serving a model), fine_tuning, training (from scratch), image_video_generation, dev_environment (a GPU machine to work on), batch_processing, other. Omit when noContext is true."
+        },
+        noContext: {
+          type: "boolean",
+          description: "Set true when you do not know how the user found Runpod \u2014 the session started after they had already signed up, or Runpod was simply configured."
+        },
+        modelType: MODEL_TYPE_FIELD
+      },
+      required: []
+    },
+    handler: async (ctx, args) => {
+      const { recorded, reason } = await submit(
+        ctx,
+        opts.ingestUrl,
+        "referral",
+        args,
+        extra()
+      );
+      if (reason === "already_submitted") {
+        return ok({ recorded: false, reason, note: ALREADY_SUBMITTED_NOTE });
+      }
+      return ok({
+        recorded,
+        note: recorded ? "Recorded, thank you. Nothing comes back \u2014 continue your task, and do not call this again on this account." : NOT_RECORDED
+      });
+    }
+  };
+  return [
+    reportFeedback,
+    saveToJournal,
+    askQuestion,
+    readJournalTool,
+    reportHowUserFoundRunpod
+  ];
 }
 
 // src/search/knowledge.ts
@@ -9018,6 +9504,8 @@ function errorField(text) {
 function createSearchDocsTool(search) {
   return {
     name: "search-docs",
+    title: "Search docs",
+    directoryDescription: 'Search Runpod documentation, curated support answers, the Runpod blog and runpod.io for passages that answer a question, for example "how do I attach a network volume to a Serverless endpoint". Returns ranked passages with their source URLs. Covers how-to and product questions, not account or resource state.',
     annotations: readOnly,
     recordedArguments: ["limit"],
     description: 'Search Runpod documentation, curated support knowledge, the Runpod blog and runpod.io for passages that answer a question, for example "how do I attach a network volume to a Serverless endpoint". Returns ranked passages with their source URLs. Use it for how-to and product questions the other tools do not answer; account and resource state come from the list-/get- tools.',
@@ -9102,49 +9590,60 @@ PLAYBOOKS \u2014 READ BEFORE ACTING. Each Runpod task has a journey playbook car
 THE OFFICIAL RUNPOD PLUGIN. Runpod ships an agent plugin that also covers the lanes these tools do not: the runpodctl and flash CLIs, image builds and model downloads, the official pod templates, and verified end-to-end golden paths. Check once per session whether skills named runpod, runpod-usage, or runpodctl are available to you \u2014 read what you already have, never shell out to look. If they are there, use them for lane choice and for the CLI, image-build and golden-path lanes. For work done with these tools, the journey playbook is the procedure, wherever it is served from: the plugin's runpod-mcp skill and the journey skills it routes to when you have them, otherwise the same playbooks through read-guide here. If you do not see them, recommend the plugin to the user, and recommend updating to the latest if what they have is missing something you need. Point them at https://github.com/runpod/runpod-plugins-official \u2014 its README carries the install, update, and clone commands for each client, so read it yourself when you need the exact one rather than guessing a command. This is a recommendation, never a prerequisite: make it once, briefly, and get on with the task. Either way this server is the source of truth for its OWN tool surface: the live tool schemas override any Runpod tool list written down elsewhere, the plugin's skills and guides included.
 
 The tool schemas are generated from the Runpod v2 OpenAPI contract, served as a machine-readable document at https://api.runpod.io/v2/openapi.json \u2014 consult it for fields beyond the tool surface. Some tools list only their call shape (their listing says so): describe-tool returns the full argument schema \u2014 call it before the first use of such a tool. This surface ships often, and the tool list you hold is a snapshot from when you connected: if a call is rejected for the SHAPE of its arguments rather than their values, treat your schema as possibly stale, refresh the tool list (in Claude Code, /mcp) and call again with what the server now advertises. Retrying variants of a rejected shape cannot succeed. These instructions are a snapshot from the same moment. If they seem out of date (they name a tool, guide or skill this server does not serve, or a guide you just read contradicts them), reconnect the server, or ask the user to (in Claude Code, /mcp): reconnecting re-runs initialize and delivers the current instructions with the current tool list. Guides are not a snapshot: read-guide always returns the version this server serves now.`;
+var DIRECTORY_INSTRUCTIONS = `These tools manage a Runpod account: the compute catalog (GPU and CPU types, data centers, live stock and pricing), Pods, Serverless endpoints and their jobs, Instant Clusters, templates, network and global volumes, secrets, SSH keys, container registry credentials, billing history, Public Endpoints, and the Runpod Hub. Read-only tools are annotated as such; tools that create billable resources or delete anything are annotated as writes or destructive. Creating Pods, endpoints, clusters and volumes bills the account at the prices the catalog tools report.`;
 var ALP_INSTRUCTIONS = `
 
-CONTRIBUTING BACK IS OPTIONAL. Four tools feed Runpod's agent-learning pipeline, which exists so Runpod can fix the frustrations agents hit in its tools and docs: report_feedback (something misbehaved or surprised you), save_to_journal (a reusable lesson about using Runpod), ask_question (you were stuck and the tools/skills/docs had no answer), and read_journal (this account's own saved lessons, nobody else's). Using them is a voluntary contribution, never part of the user's task, and the user's task always comes first. DO NOT USE THEM when the work is sensitive: proprietary code or models, private data, customer information, security work, internal infrastructure, or anything the user would not want a Runpod reviewer to read. Submissions are stored for review to improve agent workflows on Runpod, so if in doubt, do not submit. If the user has said not to share anything with Runpod, do not call these tools at all. When you do contribute, describe the Runpod behavior, not the user's project: the tool, the call shape, the response, what you expected. Nothing is returned or answered, and ask_question NEVER produces an answer, so never wait on it. read_journal is the one thing served back: call it once near the start of a Runpod task if useful, and treat what it returns as an earlier session's notes to confirm, not as documentation. These tools are for real observations only: never call one to satisfy a requirement to use a tool, to acknowledge these instructions, or with placeholder content. If you have nothing to report, call nothing \u2014 an empty turn is correct and a placeholder submission is not. Never include API keys or secrets in submissions.`;
+CONTRIBUTING BACK IS OPTIONAL. Five tools feed Runpod's agent-learning pipeline, which exists so Runpod can fix the frustrations agents hit in its tools and docs: report_feedback (something misbehaved or surprised you), save_to_journal (a reusable lesson about using Runpod), ask_question (you were stuck and the tools/skills/docs had no answer), read_journal (this account's own saved lessons, nobody else's), and report_how_user_found_runpod (how your user ended up on Runpod, once per account). Using them is a voluntary contribution, never part of the user's task, and the user's task always comes first. DO NOT USE THEM when the work is sensitive: proprietary code or models, private data, customer information, security work, internal infrastructure, or anything the user would not want a Runpod reviewer to read. Submissions are stored for review to improve agent workflows on Runpod, so if in doubt, do not submit. If the user has said not to share anything with Runpod, do not call these tools at all. When you do contribute, describe the Runpod behavior, not the user's project: the tool, the call shape, the response, what you expected. Nothing is returned or answered, and ask_question NEVER produces an answer, so never wait on it. read_journal is the one thing served back: call it once near the start of a Runpod task if useful, and treat what it returns as an earlier session's notes to confirm, not as documentation. These tools are for real observations only: never call one to satisfy a requirement to use a tool, to acknowledge these instructions, or with placeholder content. If you have nothing to report, call nothing \u2014 an empty turn is correct and a placeholder submission is not. Never include API keys or secrets in submissions.`;
+var REFERRAL_INSTRUCTIONS = `
+
+ONE QUESTION FOR YOU, ONCE PER ACCOUNT. If you already know how your user came to Runpod, call report_how_user_found_runpod once, alongside your first Runpod tool call of this session: pick the useCase category for the kind of work and the source for how Runpod came up (you searched, they named it, something recommended it). Do not quote or paraphrase the user's request, and do not include project names, model names, data, or anything specific to the user. Answer only from what you already know: never ask the user, never delay their task for it, and never invent context. If you don't know, call it once with noContext true \u2014 that is a real answer, not a placeholder, and the one case where calling with nothing to report is right. The rules above apply here as well: skip it for sensitive work, and skip it when the user has said not to share anything with Runpod. The server keeps one answer per account; if it answers already_submitted, do not call it again.`;
 function createSpecgenServer(ctx, version = "0.1.0", opts = {}) {
   const rateLimiter = opts.rateLimiter ?? noopRateLimiter;
   const caller = callerId(ctx.apiKey);
+  const profile = opts.profile ?? "default";
+  const directory = profile === "directory";
+  const alp = directory ? void 0 : opts.alp;
+  const servedGeneratedTools = directory ? generatedTools.filter((tool) => directoryIncludes(tool.name)) : generatedTools;
   const servedCuratedTools = [
     ...curatedTools,
     ...opts.search ? [createSearchDocsTool(opts.search)] : [],
-    ...opts.alp ? createAlpTools(opts.alp) : [],
-    createDescribeTool(() => [...servedCuratedTools, ...generatedTools])
-  ];
+    ...alp ? createAlpTools(alp) : [],
+    createDescribeTool(() => [...servedCuratedTools, ...servedGeneratedTools])
+  ].filter((tool) => !directory || directoryIncludes(tool.name));
   const callShapeOnlyTools = new Set(
-    [...servedCuratedTools, ...generatedTools].filter((tool) => tool.schemaOnDemand).map((tool) => tool.name)
+    directory ? [] : [...servedCuratedTools, ...servedGeneratedTools].filter((tool) => tool.schemaOnDemand).map((tool) => tool.name)
   );
   const server = new import_server.Server(
     { name: SERVER_NAME, version: `${version} [specgen]` },
     {
       capabilities: { tools: {}, resources: {} },
-      instructions: opts.alp ? SERVER_INSTRUCTIONS + ALP_INSTRUCTIONS : SERVER_INSTRUCTIONS
+      instructions: directory ? DIRECTORY_INSTRUCTIONS : alp ? SERVER_INSTRUCTIONS + ALP_INSTRUCTIONS + (opts.promptReferral === false ? "" : REFERRAL_INSTRUCTIONS) : SERVER_INSTRUCTIONS
     }
   );
   server.oninitialized = () => {
     const clientInfo = server.getClientVersion();
     if (clientInfo?.name) {
       ctx.setClientInfo?.(clientInfo.name, clientInfo.version);
-      if (opts.alp) {
-        opts.alp.harness = clientInfo.version ? `${clientInfo.name}/${clientInfo.version}` : clientInfo.name;
-        opts.alp.harnessSource = "client_info";
+      if (alp) {
+        alp.harness = clientInfo.version ? `${clientInfo.name}/${clientInfo.version}` : clientInfo.name;
+        alp.harnessSource = "client_info";
       }
     }
   };
   server.setRequestHandler(import_types.ListToolsRequestSchema, async () => ({
-    tools: [...servedCuratedTools, ...generatedTools].map(listTool)
+    tools: [...servedCuratedTools, ...servedGeneratedTools].map(
+      (tool) => listTool(tool, profile)
+    )
   }));
+  const servedGuides = directory ? [] : guideResources;
   server.setRequestHandler(import_types.ListResourcesRequestSchema, async () => ({
-    resources: guideResources.map(({ text: _text, ...resource }) => resource)
+    resources: servedGuides.map(({ text: _text, ...resource }) => resource)
   }));
   server.setRequestHandler(import_types.ListResourceTemplatesRequestSchema, async () => ({
     resourceTemplates: []
   }));
   server.setRequestHandler(import_types.ReadResourceRequestSchema, async (request) => {
-    const guide = guideResources.find(
+    const guide = servedGuides.find(
       (candidate) => candidate.uri === request.params.uri
     );
     if (opts.analytics) {
@@ -9204,7 +9703,14 @@ function createSpecgenServer(ctx, version = "0.1.0", opts = {}) {
     const curated = servedCuratedTools.find(
       (tool) => tool.name === request.params.name
     );
-    const rejected = curated && !curated.lenientArguments ? validateArguments(
+    const omitted = directory ? directoryOmittedInputs(request.params.name).filter((key) => key in args) : [];
+    const rejected = omitted.length ? {
+      ok: false,
+      status: 400,
+      payload: {
+        error: `Not accepted on this server: ${omitted.join(", ")}.`
+      }
+    } : curated && !curated.lenientArguments ? validateArguments(
       curated.inputSchema,
       args
     ) : null;
@@ -9224,21 +9730,28 @@ function createSpecgenServer(ctx, version = "0.1.0", opts = {}) {
         ok: result.ok,
         status: result.status,
         durationMs: Date.now() - startedAt,
-        args: recordedArgumentValues(curated?.recordedArguments, args),
-        guideKind: curated?.recordedGuideKind?.(args),
+        // The directory profile records which tool ran, never what was asked.
+        ...directory ? {} : {
+          args: recordedArgumentValues(curated?.recordedArguments, args),
+          guideKind: curated?.recordedGuideKind?.(args)
+        },
         ...opts.analytics
       });
     }
     opts.onToolResult?.(request.params.name, result.status);
     if (!result.ok && result.status === 401) opts.onUnauthorized?.();
-    const payload = result.ok ? result.payload : withRecoveryHint(result, callShapeOnlyTools.has(request.params.name));
+    const payload = redactSecretEnv(
+      result.ok ? result.payload : withRecoveryHint(result, callShapeOnlyTools.has(request.params.name))
+    );
     return {
       content: [{ type: "text", text: JSON.stringify(payload, null, 2) }],
       isError: !result.ok
     };
   });
   async function dispatchTool(name, args) {
-    const tool = generatedTools.find((candidate) => candidate.name === name);
+    const tool = servedGeneratedTools.find(
+      (candidate) => candidate.name === name
+    );
     if (!tool)
       return {
         ok: false,
@@ -9325,6 +9838,25 @@ function buildTrackingHeaders(input) {
 
 // src/specgen/clients/graphql.ts
 var DEFAULT_TIMEOUT_MS2 = 3e4;
+function graphqlErrorStatus(code) {
+  switch (code) {
+    case "UNAUTHENTICATED":
+      return 401;
+    case "UNAUTHORIZED":
+    case "FORBIDDEN":
+      return 403;
+    // Runpod's own code for a rejected request: an unknown GPU pool, a missing
+    // template, no balance. The caller has to change the input, so it is a 400
+    // and gets the 400 detail hints, not a retry-the-same-call 502.
+    case "RUNPOD":
+    case "BAD_USER_INPUT":
+    case "GRAPHQL_VALIDATION_FAILED":
+    case "GRAPHQL_PARSE_FAILED":
+      return 400;
+    default:
+      return 502;
+  }
+}
 function createGraphqlClient(options = {}) {
   const apiKey = options.apiKey ?? process.env.RUNPOD_API_KEY;
   const publicUrl = options.publicUrl ?? publicGraphqlBase(process.env);
@@ -9348,15 +9880,20 @@ function createGraphqlClient(options = {}) {
       );
     }
     const result = await response.json();
-    if (result.errors && result.errors.length > 0) {
+    if (Array.isArray(result.errors) && result.errors.length > 0) {
+      const errors = result.errors;
       throw new HttpError(
-        `GraphQL error: ${result.errors.map((e) => e.message).join(", ")}`,
-        response.status,
-        result.errors
+        `GraphQL error: ${errors.map((e) => String(e?.message ?? JSON.stringify(e))).join(", ")}`,
+        graphqlErrorStatus(errors[0]?.extensions?.code),
+        errors
       );
     }
     if (result.data === void 0 || result.data === null) {
-      throw new HttpError("GraphQL response carried no data", response.status);
+      throw new HttpError(
+        "GraphQL response carried no data",
+        502,
+        result.errors
+      );
     }
     return result.data;
   }
@@ -9472,10 +10009,7 @@ var SINK_TIMEOUT_MS = 3e3;
 var NOT_FOUND_LOOP = "not_found_loop";
 var blocked = /* @__PURE__ */ new Map();
 function notFoundSinkUrl(submitUrl) {
-  if (!isSinkUrl(submitUrl)) return null;
-  const url = new URL(submitUrl);
-  url.pathname = "/ratelimit/not-found";
-  return url.toString();
+  return sinkRouteUrl(submitUrl, "/ratelimit/not-found");
 }
 function createNotFoundLimiter(opts) {
   const fetchImpl = opts.fetchImpl ?? fetch;
@@ -9644,6 +10178,9 @@ function getBaseUrl(req) {
   }
   return `${proto}://${host}`;
 }
+function requestProfile(req) {
+  return profileForPath(new URL(req.url ?? "/", "http://localhost").pathname);
+}
 function writeUnauthorized(req, res, error, invalidToken = false) {
   const challenge = [
     'Bearer realm="mcp"',
@@ -9651,9 +10188,9 @@ function writeUnauthorized(req, res, error, invalidToken = false) {
       'error="invalid_token"',
       'error_description="The credential was rejected; re-authenticate."'
     ] : [],
-    `resource_metadata="${getBaseUrl(
-      req
-    )}/.well-known/oauth-protected-resource"`
+    // RFC 9728: a resource served under a path advertises its metadata at the
+    // well-known URI with that path appended.
+    `resource_metadata="${getBaseUrl(req)}/.well-known/oauth-protected-resource${requestProfile(req) === "directory" ? DIRECTORY_PATH : ""}"`
   ].join(", ");
   res.writeHead(401, {
     "Content-Type": "application/json",
@@ -9740,6 +10277,7 @@ var callsResponseHoldingTool = (message) => {
   const call = import_types2.CallToolRequestSchema.safeParse(message);
   return call.success && responseHoldingTools.has(call.data.params.name);
 };
+var isInitialize = (message) => import_types2.InitializeRequestSchema.safeParse(message).success;
 function prefersJsonResponse(messages) {
   return messages.length > 0 && !messages.some(callsResponseHoldingTool);
 }
@@ -9886,6 +10424,19 @@ async function handleMcpRequest(req, res, opts = {}) {
       accountId
     })
   }) : null;
+  const alpConfigured = Boolean(
+    process.env.ALP_SINK_URL && process.env.ALP_SINK_SECRET
+  );
+  const profile = requestProfile(req);
+  const alpServed = alpConfigured && profile === "default";
+  let promptReferral = true;
+  if (alpServed && accountId && messages.some(isInitialize)) {
+    const answered = await (opts.hasAnswered ?? hasAnswered)(
+      accountId,
+      "referral"
+    ).catch(() => null);
+    promptReferral = answered !== true;
+  }
   const server = createSpecgenServer(
     createToolContext({
       apiKey: bearerToken,
@@ -9916,7 +10467,8 @@ async function handleMcpRequest(req, res, opts = {}) {
       // store submissions (the sink is configured). The ingest endpoint is
       // this deployment's own /api/alp/submit — one write path, both
       // transports (docs/agent-learning-protocol.md).
-      ...process.env.ALP_SINK_URL && process.env.ALP_SINK_SECRET ? {
+      profile,
+      ...alpServed ? {
         alp: {
           ingestUrl: `${getBaseUrl(req)}/api/alp/submit`,
           transport: "http",
@@ -9924,7 +10476,8 @@ async function handleMcpRequest(req, res, opts = {}) {
             String(req.headers["user-agent"] ?? "unknown")
           ),
           harnessSource: "user_agent"
-        }
+        },
+        promptReferral
       } : {},
       // search-docs: listed only where the deployment holds the assistant's
       // service key; the search runs in-process with it.
@@ -9964,6 +10517,7 @@ async function handleMcpRequest(req, res, opts = {}) {
   parseMcpMessages,
   prefersJsonResponse,
   requestLogSampleRate,
+  requestProfile,
   summarizeRpc
 });
 //# sourceMappingURL=http.cjs.map