@zackbart/connecta 0.28.1 → 0.29.0

package/dist/providers/vercel/mcp-ownership.js

@@ -0,0 +1,212 @@
+// Reviewed 2026-10-08 against the 28 published MCP categories (213 names)
+// linked from https://vercel.com/docs/agent-resources/vercel-mcp/tools and
+// https://openapi.vercel.sh/ (SHA-256: 2d5dd6a91e9df8280bb1c4ef2b1ec045498e28667b7e9a164bedd01a92093028).
+// These are routing ownership facts, not schemas or annotation baselines.
+// Exact operationId matches plus reviewed list/get aliases establish the
+// published hosted counterpart. The four value-unsafe project-env MCP tools
+// are excluded: the authored API owns those operations. Tools outside the
+// reviewed classifier still receive the registry's fail-closed classification.
+export const HOSTED_REST_OPERATIONS = [
+    ["GET", "/v1/query/web-analytics/events/aggregate", "aggregate_events"],
+    ["GET", "/v1/query/web-analytics/visits/aggregate", "aggregate_pageviews"],
+    ["POST", "/v1/edge-cache/invalidate-by-src-images", "invalidate_by_src_images"],
+    ["GET", "/v1/query/web-analytics/events/count", "count_events"],
+    ["GET", "/v1/query/web-analytics/visits/count", "count_pageviews"],
+    ["GET", "/v1/security/firewall/attack-status", "get_active_attack_status"],
+    ["POST", "/v1/registrar/domains/availability", "get_bulk_availability"],
+    ["GET", "/ai-gateway/virtual-model-configs", "get_ai_gateway_virtual_model_config"],
+    ["POST", "/v1/edge-cache/invalidate-by-tags", "invalidate_by_tags"],
+    ["GET", "/v1/billing/contract-commitments", "list_contract_commitments"],
+    ["GET", "/v1/integrations/configurations", "list_integration_configurations"],
+    ["GET", "/v1/integrations/search-repo", "search_repo"],
+    ["GET", "/v1/registrar/tlds/supported", "list_supported_tlds"],
+    ["GET", "/v1/security/firewall/bypass", "get_bypass_ip"],
+    ["PATCH", "/v1/security/firewall/config", "update_firewall_config"],
+    ["PUT", "/v1/security/firewall/config", "put_firewall_config"],
+    ["GET", "/v1/bulk-redirects/versions", "list_bulk_redirect_versions"],
+    ["POST", "/v1/bulk-redirects/versions", "update_version"],
+    ["POST", "/v1/integrations/sso/token", "exchange_sso_token"],
+    ["POST", "/v1/registrar/domains/buy", "buy_domains"],
+    ["GET", "/v2/observability/schema", "get_observability_schema"],
+    ["POST", "/v1/security/attack-mode", "update_attack_challenge_mode"],
+    ["GET", "/v2/sandboxes/snapshots", "list_session_snapshots"],
+    ["POST", "/v2/observability/query", "create_observability_query"],
+    ["GET", "/v2/sandboxes/sessions", "list_sessions"],
+    ["POST", "/v1/connect/connectors", "create_connector"],
+    ["GET", "/v8/artifacts/status", "status"],
+    ["POST", "/storage/stores/blob", "create_storage_stores_blob"],
+    ["POST", "/v8/artifacts/events", "record_events"],
+    ["GET", "/v1/billing/charges", "list_billing_charges"],
+    ["GET", "/v1/projects/traces", "get_project_trace"],
+    ["GET", "/v1/bulk-redirects", "list_bulk_redirects"],
+    ["PUT", "/v1/bulk-redirects", "stage_redirects"],
+    ["GET", "/v1/events/types", "list_event_types"],
+    ["POST", "/v13/deployments", "create_deployment"],
+    ["GET", "/v7/deployments", "list_deployments"],
+    ["POST", "/v1/billing/buy", "buy_credits"],
+    ["POST", "/v1/drains/test", "test_drain"],
+    ["GET", "/v10/projects", "list_projects"],
+    ["GET", "/v2/sandboxes", "list_sandboxes"],
+    ["POST", "/v11/projects", "create_project"],
+    ["POST", "/v2/sandboxes", "create_sandboxes_v2"],
+    ["POST", "/v3/sandboxes", "create_sandboxes_v3"],
+    ["POST", "/v4/sandboxes", "create_sandboxes_v4"],
+    ["POST", "/v8/artifacts", "artifact_query"],
+    ["GET", "/v4/aliases", "list_aliases"],
+    ["GET", "/v5/domains", "list_domains"],
+    ["POST", "/v7/domains", "create_or_transfer_domain"],
+    ["GET", "/v1/drains", "list_drains"],
+    ["GET", "/v3/events", "list_user_events"],
+    ["POST", "/v1/drains", "create_drain"],
+    ["GET", "/v2/teams", "list_teams"],
+    ["GET", "/v8/certs", "list_certs"],
+    ["POST", "/api-keys", "create_api_keys"],
+    ["POST", "/v2/files", "upload_file"],
+    ["POST", "/v8/certs", "issue_cert"],
+    ["PUT", "/v8/certs", "upload_cert"],
+    ["GET", "/v2/user", "get_auth_user"],
+    ["PATCH", "/v1/env", "update_shared_env_variable"],
+    [
+        "GET",
+        "/v1/microfrontends/projects/{projectIdOrName}/production-mfe-config",
+        "get_microfrontends_config_for_project",
+    ],
+    ["GET", "/v1/projects/{projectIdOrName}/feature-flags/sdk-keys", "list_feature_flag_sdk_keys"],
+    ["GET", "/v1/projects/{projectIdOrName}/feature-flags/settings", "get_flag_settings"],
+    ["PATCH", "/v1/projects/{projectIdOrName}/feature-flags/settings", "update_flag_settings"],
+    ["POST", "/v1/projects/{idOrName}/rolling-release/approve-stage", "approve_rolling_release_stage"],
+    ["PUT", "/v1/projects/{projectIdOrName}/feature-flags/sdk-keys", "create_sdk_key"],
+    ["GET", "/v1/registrar/domains/{domain}/contact-verification", "get_domain_contact_verification"],
+    ["GET", "/v1/projects/{projectIdOrName}/feature-flags/flags", "list_flags"],
+    ["GET", "/v1/registrar/domains/{domain}/contact-info/schema", "get_contact_info_schema"],
+    ["GET", "/v2/projects/{projectIdOrName}/feature-flags/flags", "list_flags_v2"],
+    ["PUT", "/v1/projects/{projectIdOrName}/feature-flags/flags", "create_flag"],
+    ["POST", "/v2/sandboxes/sessions/{sessionId}/extend-timeout", "extend_session_timeout"],
+    ["POST", "/v2/sandboxes/sessions/{sessionId}/network-policy", "update_session_network_policy"],
+    ["POST", "/v1/projects/{idOrName}/rolling-release/complete", "complete_rolling_release"],
+    ["GET", "/v1/projects/{idOrName}/rolling-release/billing", "get_rolling_release_billing_status"],
+    ["GET", "/v1/projects/{idOrName}/rolling-release/config", "get_rolling_release_config"],
+    ["PATCH", "/v1/projects/{idOrName}/rolling-release/config", "update_rolling_release_config"],
+    ["POST", "/v1/projects/{idOrName}/rolling-release/start", "start_rolling_release"],
+    ["GET", "/v1/integrations/configuration/{id}/products", "list_integration_configuration_products"],
+    ["GET", "/v1/microfrontends/groups/{groupId}/projects", "list_microfrontends_group_projects"],
+    ["GET", "/v1/security/firewall/config/{configVersion}", "get_firewall_config"],
+    ["GET", "/v1/registrar/domains/{domain}/availability", "get_domain_availability"],
+    ["GET", "/v9/projects/{idOrName}/custom-environments", "list_project_custom_environments"],
+    ["POST", "/v2/sandboxes/sessions/{sessionId}/fs/mkdir", "create_session_directory"],
+    ["POST", "/v2/sandboxes/sessions/{sessionId}/fs/write", "write_session_files"],
+    ["POST", "/v2/sandboxes/sessions/{sessionId}/snapshot", "create_sandboxes_sessions_by_session_id_snapshot_v2"],
+    ["POST", "/v3/sandboxes/sessions/{sessionId}/snapshot", "create_sandboxes_sessions_by_session_id_snapshot_v3"],
+    ["POST", "/v2/sandboxes/sessions/{sessionId}/fs/read", "read_session_file"],
+    ["PATCH", "/v1/projects/{idOrName}/protection-bypass", "update_project_protection_bypass"],
+    ["POST", "/v2/deployments/{deploymentId}/check-runs", "create_deployment_check_run"],
+    ["GET", "/v1/microfrontends/{deploymentId}/config", "get_microfrontends_config"],
+    ["GET", "/v1/projects/{projectId}/promote/aliases", "list_promote_aliases"],
+    ["GET", "/v1/projects/{projectId}/routes/versions", "list_project_route_versions"],
+    ["POST", "/v1/projects/{projectId}/routes/generate", "generate_route"],
+    ["POST", "/v1/projects/{projectId}/routes/versions", "update_route_versions"],
+    ["GET", "/v1/projects/{idOrName}/rolling-release", "get_rolling_release"],
+    ["POST", "/v1/global-config/{edgeConfigId}/schema", "patch_edge_config_schema"],
+    ["POST", "/v1/kms/issuers/{issuerId}/sign/message", "sign_kms_message"],
+    ["POST", "/v2/sandboxes/sessions/{sessionId}/stop", "stop_session"],
+    ["GET", "/v2/sandboxes/sessions/{sessionId}/cmd", "list_session_commands"],
+    ["PATCH", "/v1/global-config/{edgeConfigId}/items", "patch_edge_config_items"],
+    ["POST", "/v1/global-config/{edgeConfigId}/token", "create_edge_config_token"],
+    ["POST", "/v2/sandboxes/sessions/{sessionId}/cmd", "run_session_command"],
+    ["GET", "/v1/access-groups/{idOrName}/projects", "list_access_group_projects"],
+    ["POST", "/v1/deployments/{deploymentId}/checks", "create_check"],
+    ["POST", "/v1/kms/issuers/{issuerId}/sign/token", "sign_kms_token"],
+    ["POST", "/v1/teams/{teamId}/members/teams/join", "join_team"],
+    ["GET", "/v1/access-groups/{idOrName}/members", "list_access_group_members"],
+    ["GET", "/v1/registrar/domains/{domain}/price", "get_domain_price"],
+    ["GET", "/v2/sandboxes/snapshots/{snapshotId}", "get_session_snapshot"],
+    ["GET", "/v1/integrations/configuration/{id}", "get_configuration"],
+    ["POST", "/v1/kms/issuers/{issuerId}/policies", "create_kms_issuer_policy"],
+    ["GET", "/v2/sandboxes/sessions/{sessionId}", "get_session"],
+    ["POST", "/v1/registrar/domains/{domain}/buy", "buy_single_domain"],
+    ["PUT", "/projects/transfer-request/{code}", "accept_project_transfer_request"],
+    ["GET", "/v1/connect/networks/{networkId}", "read_network"],
+    ["GET", "/v3/deployments/{idOrUrl}/events", "list_deployment_events"],
+    ["PATCH", "/v1/connect/networks/{networkId}", "update_network"],
+    ["POST", "/v1/projects/{projectId}/unpause", "unpause_project"],
+    ["POST", "/v10/projects/{idOrName}/domains", "add_project_domain"],
+    ["PUT", "/v1/global-config/{edgeConfigId}", "update_edge_config"],
+    ["GET", "/v1/projects/{projectId}/routes", "list_project_routes"],
+    ["GET", "/v9/projects/{idOrName}/domains", "list_project_domains"],
+    ["PATCH", "/aliases/{id}/protection-bypass", "patch_url_protection_bypass"],
+    ["POST", "/v1/kms/issuers/{issuerId}/keys", "create_kms_signing_key"],
+    ["POST", "/v1/projects/{projectId}/routes", "add_route"],
+    ["PUT", "/v1/projects/{projectId}/routes", "stage_routes"],
+    ["GET", "/v1/registrar/orders/{orderId}", "get_order"],
+    ["GET", "/v1/registrar/tlds/{tld}/price", "get_tld_price"],
+    ["PATCH", "/v1/domains/records/{recordId}", "update_record"],
+    ["POST", "/v1/projects/{projectId}/pause", "pause_project"],
+    ["POST", "/v1/projects/{idOrName}/token", "get_project_token"],
+    ["GET", "/v1/access-groups/{idOrName}", "read_access_group"],
+    ["GET", "/v2/deployments/{id}/aliases", "list_deployment_aliases"],
+    ["PATCH", "/v12/deployments/{id}/cancel", "cancel_deployment"],
+    ["POST", "/v2/deployments/{id}/aliases", "assign_alias"],
+    ["GET", "/domains/records/{recordId}", "get_domains_records_by_record_id"],
+    ["GET", "/v1/kms/issuers/{issuerId}", "get_kms_issuer"],
+    ["GET", "/v13/deployments/{idOrUrl}", "get_deployment"],
+    ["GET", "/v3/teams/{teamId}/members", "list_team_members"],
+    ["GET", "/v6/deployments/{id}/files", "list_deployment_files"],
+    ["PATCH", "/v1/kms/issuers/{issuerId}", "update_kms_issuer"],
+    ["GET", "/v5/user/tokens/{tokenId}", "get_auth_token"],
+    ["PUT", "/domains/{domain}/records", "replace_domains_by_domain_records"],
+    ["GET", "/v1/registrar/tlds/{tld}", "get_tld"],
+    ["GET", "/v9/projects/{idOrName}", "get_project"],
+    ["PATCH", "/v9/projects/{idOrName}", "update_project"],
+    ["GET", "/storage/stores/{id}", "get_storage_stores_by_id"],
+    ["GET", "/v2/sandboxes/{name}", "get_named_sandbox"],
+    ["PATCH", "/v2/sandboxes/{name}", "update_sandbox"],
+    ["PUT", "/v8/artifacts/{hash}", "upload_artifact"],
+    ["GET", "/v2/teams/{teamId}", "get_team"],
+    ["GET", "/v1/webhooks/{id}", "get_webhook"],
+    ["GET", "/v1/drains/{id}", "get_drain"],
+    ["PATCH", "/v1/drains/{id}", "update_drain"],
+    ["GET", "/v1/env/{id}", "get_shared_env_var"],
+    [
+        "GET",
+        "/v1/integrations/integration/{integrationIdOrSlug}/products/{productIdOrSlug}/plans",
+        "list_integration_billing_plans",
+    ],
+    [
+        "POST",
+        "/v1/global-config/{edgeConfigId}/backups/{edgeConfigBackupVersionId}/restore",
+        "restore_edge_config_backup",
+    ],
+    ["GET", "/v1/projects/{projectIdOrName}/feature-flags/segments/{segmentIdOrSlug}", "get_flag_segment"],
+    ["PATCH", "/v1/projects/{projectIdOrName}/feature-flags/segments/{segmentIdOrSlug}", "update_flag_segment"],
+    ["GET", "/v1/global-config/{edgeConfigId}/backups/{edgeConfigBackupVersionId}", "get_edge_config_backup"],
+    ["GET", "/v1/projects/{projectIdOrName}/feature-flags/flags/{flagIdOrSlug}", "get_flag"],
+    ["GET", "/v9/projects/{idOrName}/custom-environments/{environmentSlugOrId}", "get_custom_environment"],
+    ["PATCH", "/v1/projects/{projectIdOrName}/feature-flags/flags/{flagIdOrSlug}", "update_flag"],
+    ["GET", "/v1/projects/{projectId}/deployments/{deploymentId}/runtime-logs", "get_runtime_logs"],
+    ["GET", "/v1/access-groups/{accessGroupIdOrName}/projects/{projectId}", "read_access_group_project"],
+    ["POST", "/v1/deployments/{deploymentId}/checks/{checkId}/rerequest", "rerequest_check"],
+    ["GET", "/v2/deployments/{deploymentId}/check-runs/{checkRunId}", "get_deployment_check_run"],
+    ["PATCH", "/v2/deployments/{deploymentId}/check-runs/{checkRunId}", "update_deployment_check_run"],
+    ["GET", "/v2/projects/{projectIdOrName}/checks/{checkId}/runs", "list_check_runs"],
+    ["GET", "/v2/sandboxes/sessions/{sessionId}/cmd/{cmdId}/logs", "get_session_command_logs"],
+    ["POST", "/v2/sandboxes/sessions/{sessionId}/cmd/{cmdId}/kill", "kill_session_command"],
+    ["POST", "/v1/kms/issuers/{issuerId}/keys/{keyId}/activate", "activate_kms_signing_key"],
+    ["POST", "/v1/projects/{projectId}/rollback/{deploymentId}", "request_rollback"],
+    ["POST", "/v10/projects/{projectId}/promote/{deploymentId}", "request_promote"],
+    ["GET", "/v1/deployments/{deploymentId}/checks/{checkId}", "get_check"],
+    ["GET", "/v2/projects/{projectIdOrName}/checks/{checkId}", "get_project_check"],
+    ["PATCH", "/v1/deployments/{deploymentId}/checks/{checkId}", "update_check"],
+    ["PATCH", "/v2/projects/{projectIdOrName}/checks/{checkId}", "update_project_check"],
+    ["GET", "/v1/global-config/{edgeConfigId}/token/{token}", "get_edge_config_token"],
+    ["GET", "/v2/sandboxes/sessions/{sessionId}/cmd/{cmdId}", "get_session_command"],
+    ["POST", "/v1/kms/issuers/{issuerId}/keys/{keyId}/revoke", "revoke_kms_signing_key"],
+    ["PATCH", "/v1/projects/{projectId}/routes/{routeId}", "edit_route"],
+    ["GET", "/v1/teams/{teamId}/request/{userId}", "get_team_access_request"],
+    ["GET", "/v8/deployments/{id}/files/{fileId}", "get_deployment_file_contents"],
+    ["PATCH", "/v1/kms/issuers/{issuerId}/policies/{kind}/{policyKey}", "update_kms_issuer_policy"],
+];
+// OpenAPI listDrives is not in the published MCP categories. This concrete
+// route must resolve before get_named_sandbox's wildcard name parameter.
+export const UNCOVERED_REST_OPERATIONS = [
+    ["GET", "/v2/sandboxes/drives"],
+];

package/dist/providers/vercel/skill.generated.js

@@ -0,0 +1,11 @@
+// Generated by scripts/generate-providers.mjs; do not edit.
+export const skill = {
+    "content": "`. Every named account-scoped tool accepts a `teamId` override; pass `null` to target the token owner's personal account.\n## REST complement routing\n\nHosted MCP is the default. Configure this complement with `surface: \"api\"`\nand a separate connector id and access-token credential. OAuth and API-token\nstores are independent; failures never switch identity or replay a write.\nTeam defaults route calls and do not constrain the token's permissions.\n\nUse hosted `list_teams`, `list_projects`, `get_project`, `list_deployments`,\n`get_deployment`, `get_deployment_build_logs` or `list_deployment_events`,\n`get_runtime_logs`, `list_project_domains`, `add_project_domain`, and\n`cancel_deployment` for the corresponding operations. Follow their live schemas,\nnot the removed REST argument shapes. Read deployment status before logs and\nnarrow log windows.\n\nThis complement retains `verify_project_domain`, `remove_project_domain`,\nand `delete_deployment` because the reviewed category\npages do not publish equivalent tools. Hosted `request_promote` moves an existing\nbuild to production and does not rebuild it (the rolling-releases category\nprovides the equivalent that the deployments category does not list). New deployments use hosted\n`create_deployment` or `deploy_to_vercel`.\n\n## Environment values\n\n`list_project_env_vars` never decrypts or returns values. Set `upsert: false` on\n`upsert_project_env_var` for create-only writes that refuse to overwrite. `upsert_project_env_var`,\n`update_project_env_var`, and `delete_project_env_var` return metadata without\nvalues. Create/update values are write input only. The hosted connector excludes\n`filter_project_envs`, `get_project_env`, `create_project_env`, and\n`edit_project_env`, whose published contracts lack these response protections.\nEnvironment changes apply to future deployments.\n\n## REST gaps and uploads\n\n`vercel_api_get` and `vercel_api_mutate` reach uncovered endpoints. They refuse\npaths owned by the canonical hosted or value-safe named tools, including\nproject creation/update, pause/unpause and protection bypass. Ownership covers\nthe published tool categories, not just the old reviewed classifier names;\nunreviewed live tools remain fail-closed writes. Do not use a\nraw hatch to restore a removed duplicate. `upload_file` on MCP owns deployment\nfile uploads; `vercel_api_upload` retains other raw-body endpoints and explicit\nheaders. It never reads a local file. Paths include the API version and cannot\nbe absolute URLs. Query parameters are name/value pairs; `personalAccount: true`\nomits this connection's default team. Rate-limit failures carry vendor retry timing.\n# Vercel MCP usage\n\nOfficial MCP surface: tool names, descriptions, argument schemas, and result\nschemas come from Vercel's live server. Connecta preserves retained vendor contracts and\napplies release-reviewed classification. Reviewed writes stay writes even when Vercel claims they only read.\n\nAccount purpose: \n\n- Hosted MCP owns discovery, deployments, logs, project-domain listing/adding,\n  cancellation and file uploads. Use the separately configured REST complement\n  for value-safe project environment variables, uncovered lifecycle/domain\n  operations and REST gaps. It has its own connector id and credential.\n- Discover the live catalog before assuming a tool exists. Vercel can change\n  the surface independently of a Connecta release, and account features may\n  affect what the authorization can reach.\n- Complete authorization and grant access to the owning team before acting. Listing this server does not prove team access. A configured API `teamId` is a routing default, not an authorization boundary.\n- MCP pagination and arguments follow the live MCP schemas; do not apply API pagination or argument shapes to them.\n- Resolve team, project, deployment, run, thread, and order ids with the list\n  and get tools. Do not guess opaque ids.\n- Diagnose deployments with `get_deployment`, then build logs, runtime error\n  clusters, and runtime logs. Narrow time windows before raising result limits.\n- Purchase tools change billing. Read a quote first and carry its price,\n  idempotency key, and requested term into the confirmed purchase unchanged.\n- `get_access_to_vercel_url` creates a temporary access grant. Treat the URL\n  it returns as a credential and do not expose it outside the requested task.\n- `deploy_to_vercel` and `import-claude-design-from-url` can create or update\n  live projects. Read the target and deployment mode before invoking them.\n- An `auth_required` failure means this connector's OAuth grant is missing or\n  expired. Run `authorize_connector` for this connector id, then retry.\n",
+    "instructionsHeading": "Account instructions",
+    "fragments": {
+        "guide_0": "`. Every named account-scoped tool accepts a `teamId` override; pass `null` to target the token owner's personal account.",
+        "guide_1": "\n## REST complement routing\n\nHosted MCP is the default. Configure this complement with `surface: \"api\"`\nand a separate connector id and access-token credential. OAuth and API-token\nstores are independent; failures never switch identity or replay a write.\nTeam defaults route calls and do not constrain the token's permissions.\n\nUse hosted `list_teams`, `list_projects`, `get_project`, `list_deployments`,\n`get_deployment`, `get_deployment_build_logs` or `list_deployment_events`,\n`get_runtime_logs`, `list_project_domains`, `add_project_domain`, and\n`cancel_deployment` for the corresponding operations. Follow their live schemas,\nnot the removed REST argument shapes. Read deployment status before logs and\nnarrow log windows.\n\nThis complement retains `verify_project_domain`, `remove_project_domain`,\nand `delete_deployment` because the reviewed category\npages do not publish equivalent tools. Hosted `request_promote` moves an existing\nbuild to production and does not rebuild it (the rolling-releases category\nprovides the equivalent that the deployments category does not list). New deployments use hosted\n`create_deployment` or `deploy_to_vercel`.\n\n## Environment values\n\n`list_project_env_vars` never decrypts or returns values. Set `upsert: false` on\n`upsert_project_env_var` for create-only writes that refuse to overwrite. `upsert_project_env_var`,\n`update_project_env_var`, and `delete_project_env_var` return metadata without\nvalues. Create/update values are write input only. The hosted connector excludes\n`filter_project_envs`, `get_project_env`, `create_project_env`, and\n`edit_project_env`, whose published contracts lack these response protections.\nEnvironment changes apply to future deployments.\n\n## REST gaps and uploads\n\n`vercel_api_get` and `vercel_api_mutate` reach uncovered endpoints. They refuse\npaths owned by the canonical hosted or value-safe named tools, including\nproject creation/update, pause/unpause and protection bypass. Ownership covers\nthe published tool categories, not just the old reviewed classifier names;\nunreviewed live tools remain fail-closed writes. Do not use a\nraw hatch to restore a removed duplicate. `upload_file` on MCP owns deployment\nfile uploads; `vercel_api_upload` retains other raw-body endpoints and explicit\nheaders. It never reads a local file. Paths include the API version and cannot\nbe absolute URLs. Query parameters are name/value pairs; `personalAccount: true`\nomits this connection's default team. Rate-limit failures carry vendor retry timing.\n",
+        "guide_2": "# Vercel MCP usage\n\nOfficial MCP surface: tool names, descriptions, argument schemas, and result\nschemas come from Vercel's live server. Connecta preserves retained vendor contracts and\napplies release-reviewed classification. Reviewed writes stay writes even when Vercel claims they only read.\n\nAccount purpose: ",
+        "guide_3": "\n\n- Hosted MCP owns discovery, deployments, logs, project-domain listing/adding,\n  cancellation and file uploads. Use the separately configured REST complement\n  for value-safe project environment variables, uncovered lifecycle/domain\n  operations and REST gaps. It has its own connector id and credential.\n- Discover the live catalog before assuming a tool exists. Vercel can change\n  the surface independently of a Connecta release, and account features may\n  affect what the authorization can reach.\n- Complete authorization and grant access to the owning team before acting. Listing this server does not prove team access. A configured API `teamId` is a routing default, not an authorization boundary.\n- MCP pagination and arguments follow the live MCP schemas; do not apply API pagination or argument shapes to them.\n- Resolve team, project, deployment, run, thread, and order ids with the list\n  and get tools. Do not guess opaque ids.\n- Diagnose deployments with `get_deployment`, then build logs, runtime error\n  clusters, and runtime logs. Narrow time windows before raising result limits.\n- Purchase tools change billing. Read a quote first and carry its price,\n  idempotency key, and requested term into the confirmed purchase unchanged.\n- `get_access_to_vercel_url` creates a temporary access grant. Treat the URL\n  it returns as a credential and do not expose it outside the requested task.\n- `deploy_to_vercel` and `import-claude-design-from-url` can create or update\n  live projects. Read the target and deployment mode before invoking them.\n- An `auth_required` failure means this connector's OAuth grant is missing or\n  expired. Run `authorize_connector` for this connector id, then retry.\n"
+    }
+};