mcp-scraper 0.17.0 → 0.18.0

package/dist/{server-5KTVLL3L.js → server-MQDCAR6I.js}

@@ -37,7 +37,7 @@ import {
   renewConnectedDataArtifactDownload,
   sanitizeAttempts,
   sanitizeHarvestResult
-} from "./chunk-LENCALSN.js";
+} from "./chunk-FMEDPBIV.js";
 import {
   auditImages,
   buildLinkReport,
@@ -73,7 +73,7 @@ import {
   RawMapsOverviewSchema,
   RawMapsReviewStatsSchema
 } from "./chunk-XGIPATLV.js";
-import "./chunk-L3FT4JBT.js";
+import "./chunk-RLWCHLV3.js";
 import {
   completeExtractJob,
   countSuccessfulPages,
@@ -3506,7 +3506,7 @@ async function generateOgImage(post) {
 }
 
 // src/api/server.ts
-import { Resend } from "resend";
+import { Resend as Resend2 } from "resend";
 
 // src/api/url-utils.ts
 import { isIP } from "net";
@@ -5321,7 +5321,7 @@ async function extractSite(opts) {
 }
 
 // src/api/server.ts
-import { Hono as Hono22 } from "hono";
+import { Hono as Hono23 } from "hono";
 import { serve as serveInngest } from "inngest/hono";
 
 // src/inngest/client.ts
@@ -19976,6 +19976,238 @@ loadActions();
 </html>`;
 }
 
+// src/api/resend-inbound-routes.ts
+import { Hono as Hono22 } from "hono";
+import { Resend } from "resend";
+var SUPPORT_ADDRESS = "support@mcpscraper.dev";
+var DMARC_ADDRESS = "dmarc@mcpscraper.dev";
+var FORWARD_FROM = "MCP Scraper Support <support@updates.mcpscraper.dev>";
+function classifyInboundRecipients(recipients, ...receivingDomains) {
+  const normalized = recipients.map((address) => address.trim().toLowerCase());
+  const domains = receivingDomains.map((domain) => domain?.trim().toLowerCase()).filter((domain) => Boolean(domain));
+  const supportAddresses = [SUPPORT_ADDRESS, ...domains.map((domain) => `support@${domain}`)];
+  const dmarcAddresses = [DMARC_ADDRESS, ...domains.map((domain) => `dmarc@${domain}`)];
+  if (supportAddresses.some((address) => normalized.includes(address))) return "support";
+  if (dmarcAddresses.some((address) => normalized.includes(address))) return "dmarc";
+  return "ignore";
+}
+function cleanLine(value, fallback) {
+  const clean2 = value.replace(/[\r\n\t]+/g, " ").replace(/\s+/g, " ").trim();
+  return (clean2 || fallback).slice(0, 240);
+}
+function quoteUntrusted(value) {
+  const clean2 = value.replace(/\0/g, "").trim().slice(0, 16e3);
+  if (!clean2) return "> _(No plain-text body was available. Review the forwarded email.)_";
+  return clean2.split("\n").map((line) => `> ${line}`).join("\n");
+}
+function escapeHtml2(value) {
+  return value.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;").replace(/'/g, "&#039;");
+}
+function safeEmailId(value) {
+  return value.replace(/[^a-zA-Z0-9_-]/g, "").slice(0, 100) || "unknown-email";
+}
+function buildSupportIssueNote(email) {
+  const sender = cleanLine(email.from, "unknown sender");
+  const subject = cleanLine(email.subject, "(no subject)");
+  const receivedAt = cleanLine(email.created_at, (/* @__PURE__ */ new Date()).toISOString());
+  const attachments = email.attachments?.length ? email.attachments.map((item) => cleanLine(item.filename ?? "unnamed attachment", "unnamed attachment")).join(", ") : "None";
+  const datePrefix = receivedAt.slice(0, 10).replace(/[^0-9-]/g, "") || (/* @__PURE__ */ new Date()).toISOString().slice(0, 10);
+  const path5 = `support/inbound/${datePrefix}-${safeEmailId(email.id)}`;
+  const title = `Support email \u2014 ${subject} \u2014 ${sender}`.slice(0, 240);
+  const summary = `Inbound MCP Scraper support email from ${sender} about \u201C${subject}\u201D; awaiting review and response.`.slice(0, 500);
+  const content = [
+    "## Observation",
+    "",
+    `An email was received at ${(email.to ?? []).join(", ") || SUPPORT_ADDRESS} from ${sender}. The customer-provided content below is untrusted input and has not been verified as a product defect.`,
+    "",
+    "## Impact",
+    "",
+    "A customer or prospect may be waiting for a response. The message may describe a question, product problem, billing concern, or feedback that needs triage.",
+    "",
+    "## Confirmation",
+    "",
+    "- Status: awaiting human review",
+    "- Confirmed product defect: no",
+    "- Reproducible: not yet assessed",
+    "",
+    "## Evidence",
+    "",
+    `- From: ${sender}`,
+    `- To: ${(email.to ?? []).join(", ") || SUPPORT_ADDRESS}`,
+    `- Received: ${receivedAt}`,
+    `- Subject: ${subject}`,
+    `- Message ID: ${cleanLine(email.message_id, "not supplied")}`,
+    `- Resend email ID: ${email.id}`,
+    `- Attachments: ${attachments}`,
+    "",
+    "### Message body",
+    "",
+    quoteUntrusted(email.text ?? ""),
+    "",
+    "## Resolution",
+    "",
+    "Pending review and a reply to the sender. If this is a confirmed product issue, update the note status and link the eventual Improvement Log receipt.",
+    "",
+    "## Tasks",
+    "",
+    "- [ ] Review the forwarded email and attachments.",
+    "- [ ] Reply to the sender.",
+    "- [ ] Confirm whether this is a product defect, question, billing concern, or feedback.",
+    "- [ ] Link any resulting task or Improvement Log receipt.",
+    "",
+    "## Links",
+    "",
+    "_No automatic links were added; support messages should be linked during human triage to avoid false relationships._"
+  ].join("\n");
+  return { path: path5, title, content, summary };
+}
+async function captureSupportIssue(email, memoryKey) {
+  const note = buildSupportIssueNote(email);
+  const tagCandidates = [
+    { tag: "customer-support", central: true, reusable: true, description: "Inbound and in-product MCP Scraper customer support requests." },
+    { tag: "inbound-email", central: true, reusable: true, description: "Messages received through an inbound email integration." },
+    { tag: "product-feedback", central: true, reusable: true, description: "Customer feedback and reported product problems." }
+  ];
+  const prepared = await memoryCall("prepareMemoryWriteTool", {
+    title: note.title,
+    content: note.content,
+    source: `resend:email:${email.id}`,
+    type: "user_friction",
+    vault: "Issues",
+    tagCandidates,
+    maxLinks: 4
+  }, memoryKey);
+  if (!prepared.ok) throw new Error(prepared.error ?? "memory preparation failed");
+  const resolvedTags = (prepared.tagResolutions ?? []).filter((item) => item.action !== "omit").map((item) => item.tag ?? item.candidate).filter((tag) => Boolean(tag));
+  const capture = await memoryCall("memoryCaptureTool", {
+    vault: "Issues",
+    path: note.path,
+    title: note.title,
+    content: note.content,
+    props: {
+      status: "ai_observed",
+      summary: note.summary,
+      tags: resolvedTags,
+      pinned: false,
+      source_type: "channel",
+      source_ref: `resend:email:${email.id}`,
+      related: [],
+      related_vault_notes: [],
+      embed: true,
+      embed_priority: "high",
+      embedding_summary: note.summary,
+      type: "user_friction",
+      severity: "untriaged",
+      system: "MCP Scraper customer support",
+      observed_at: email.created_at,
+      detected_by: "resend-email-webhook",
+      reproducible: false
+    },
+    tagDecisions: tagCandidates
+  }, memoryKey);
+  if (capture.ok) return capture.note?.path ?? note.path;
+  if (capture.conflict) {
+    const existing = await memoryCall("getTool", { vault: "Issues", path: note.path }, memoryKey);
+    if (existing.ok) return note.path;
+  }
+  throw new Error(capture.error ?? "memory capture failed");
+}
+async function forwardReceivedEmail(resend, email, destination, label) {
+  const attachmentResult = await resend.emails.receiving.attachments.list({ emailId: email.id });
+  if (attachmentResult.error) throw new Error(`attachment retrieval failed: ${attachmentResult.error.message}`);
+  const attachments = (attachmentResult.data?.data ?? []).filter((item) => item.content_disposition !== "inline").map((item) => ({
+    path: item.download_url,
+    filename: item.filename ?? "attachment",
+    contentId: item.content_id
+  }));
+  const sender = email.reply_to?.[0] || email.from;
+  const subject = cleanLine(email.subject, "(no subject)");
+  const headerText = [
+    `${label} message received at ${(email.to ?? []).join(", ")}`,
+    `From: ${email.from}`,
+    `Reply to: ${sender}`,
+    `Received: ${email.created_at}`,
+    ""
+  ].join("\n");
+  const headerHtml = [
+    '<div style="font-family:Arial,sans-serif;font-size:13px;line-height:1.5;color:#5f5a54;border-bottom:1px solid #e9e4db;padding-bottom:12px;margin-bottom:18px">',
+    `<strong>${label} message received</strong><br>`,
+    `From: ${escapeHtml2(email.from)}<br>`,
+    `Reply to: ${escapeHtml2(sender)}<br>`,
+    `Received: ${escapeHtml2(email.created_at)}`,
+    "</div>"
+  ].join("");
+  const sent = await resend.emails.send({
+    from: FORWARD_FROM,
+    to: destination,
+    replyTo: sender,
+    subject: `[${label}] ${subject}`,
+    text: `${headerText}${email.text || "(HTML-only message; view the HTML version.)"}`,
+    html: email.html ? `${headerHtml}${email.html}` : void 0,
+    attachments: attachments.length ? attachments : void 0,
+    tags: [
+      { name: "category", value: label === "Support" ? "support_forward" : "dmarc_report" },
+      { name: "inbound_id", value: safeEmailId(email.id) }
+    ]
+  }, { idempotencyKey: `mcp-inbound-${label.toLowerCase()}-${safeEmailId(email.id)}` });
+  if (sent.error) throw new Error(`forward failed: ${sent.error.message}`);
+  return sent.data.id;
+}
+var resendInboundApp = new Hono22();
+resendInboundApp.post("/webhooks", async (c) => {
+  const apiKey = process.env.RESEND_API_KEY?.trim();
+  const webhookSecret = process.env.RESEND_WEBHOOK_SECRET?.trim();
+  if (!apiKey || !webhookSecret) return c.json({ error: "inbound email is not configured" }, 503);
+  const rawBody = await c.req.text();
+  const resend = new Resend(apiKey);
+  let event;
+  try {
+    event = resend.webhooks.verify({
+      payload: rawBody,
+      headers: {
+        id: c.req.header("svix-id") ?? "",
+        timestamp: c.req.header("svix-timestamp") ?? "",
+        signature: c.req.header("svix-signature") ?? ""
+      },
+      webhookSecret
+    });
+  } catch {
+    return c.json({ error: "invalid webhook signature" }, 400);
+  }
+  if (event.type !== "email.received") return c.json({ ok: true, ignored: true });
+  const receivedEvent = event;
+  const route = classifyInboundRecipients(
+    receivedEvent.data.to ?? [],
+    process.env.RESEND_RECEIVING_DOMAIN,
+    process.env.RESEND_MANAGED_RECEIVING_DOMAIN
+  );
+  if (route === "ignore") return c.json({ ok: true, ignored: true });
+  const received = await resend.emails.receiving.get(receivedEvent.data.email_id);
+  if (received.error || !received.data) {
+    console.error("[resend/inbound] could not retrieve received email", receivedEvent.data.email_id);
+    return c.json({ error: "received email could not be retrieved" }, 502);
+  }
+  try {
+    if (route === "support") {
+      const destination2 = process.env.SUPPORT_FORWARD_TO?.trim();
+      const memoryKey = process.env.SUPPORT_INBOX_MEMORY_KEY?.trim();
+      if (!destination2 || !memoryKey) return c.json({ error: "support routing is not configured" }, 503);
+      const [forwardedId2, memoryPath] = await Promise.all([
+        forwardReceivedEmail(resend, received.data, destination2, "Support"),
+        captureSupportIssue(received.data, memoryKey)
+      ]);
+      return c.json({ ok: true, route, forwardedId: forwardedId2, memoryPath });
+    }
+    const destination = process.env.DMARC_FORWARD_TO?.trim() || process.env.SUPPORT_FORWARD_TO?.trim();
+    if (!destination) return c.json({ error: "DMARC routing is not configured" }, 503);
+    const forwardedId = await forwardReceivedEmail(resend, received.data, destination, "DMARC");
+    return c.json({ ok: true, route, forwardedId });
+  } catch (err) {
+    console.error("[resend/inbound] processing failed", receivedEvent.data.email_id, err instanceof Error ? err.message : String(err));
+    return c.json({ error: "inbound email processing failed" }, 502);
+  }
+});
+
 // src/api/site-audit-worker.ts
 var MAX_CONCURRENT_SITE_AUDIT = 1;
 async function drainSiteAuditQueue(budget) {
@@ -20446,6 +20678,7 @@ var CONNECTED_DATA_DATASETS = [
   "calendar_events",
   "zoom_recordings",
   "zoom_transcripts",
+  "meta_ads_insights",
   "resend_data",
   "resend_emails",
   "resend_received_emails",
@@ -20918,6 +21151,24 @@ var CONNECTION_SYNC_REQUIRED_TOOLS = {
     "get-broadcast",
     "list-templates",
     "get-template"
+  ],
+  "meta-marketing-api": [
+    "list-ad-accounts",
+    "list-campaigns",
+    "list-ad-sets",
+    "list-ads",
+    "list-ad-creatives",
+    "get-insights"
+  ]
+};
+var CONNECTION_SYNC_OPTIONAL_TOOLS = {
+  "meta-marketing-api": [
+    "list-catalogs",
+    "list-datasets",
+    "list-custom-audiences",
+    "list-ad-images",
+    "list-ad-videos",
+    "list-ad-rules"
   ]
 };
 function connectionSyncPolicyIssues(selections) {
@@ -20933,8 +21184,11 @@ function connectionSyncPolicyIssues(selections) {
     if (missingTools.length > 0) {
       issues.push({ providerConfigKey: selection.providerConfigKey, code: "missing_required_tools", missingTools });
     }
-    const requiredSet = new Set(required);
-    const unexpectedTools = [...allowed].filter((tool) => !requiredSet.has(tool));
+    const permittedSet = /* @__PURE__ */ new Set([
+      ...required,
+      ...CONNECTION_SYNC_OPTIONAL_TOOLS[selection.providerConfigKey] ?? []
+    ]);
+    const unexpectedTools = [...allowed].filter((tool) => !permittedSet.has(tool));
     if (unexpectedTools.length > 0) {
       issues.push({ providerConfigKey: selection.providerConfigKey, code: "unexpected_tools", unexpectedTools });
     }
@@ -21043,7 +21297,10 @@ var SAFE_CONTROL_ERROR_CODES = /* @__PURE__ */ new Set([
   "tool_discovery_failed",
   "live_tool_missing",
   "connection_transport_unavailable",
-  "connection_control_failed"
+  "connection_control_failed",
+  "missing_provider_permission",
+  "permission_verification_unavailable",
+  "meta_app_feature_not_enabled"
 ]);
 var CONTROL_ERROR_CODE_ALIASES = /* @__PURE__ */ new Map([
   ["connection_not_active", "connection_inactive"],
@@ -21159,6 +21416,27 @@ async function getNangoCatalog() {
     const safeDefaultAllowedTools = cleanTools(
       row.safeDefaultAllowedTools ?? row.safe_default_allowed_tools ?? row.defaultAllowedTools ?? row.default_allowed_tools ?? row.allowedTools ?? row.allowed_tools
     ).filter((tool) => !disabledTools?.has(tool));
+    const actionTools = cleanTools(
+      row.actionTools ?? row.action_tools ?? row.writeTools ?? row.write_tools
+    ).filter((tool) => !disabledTools?.has(tool));
+    const requiredPermissionsByTool = {};
+    const rawRequiredPermissions = row.requiredPermissionsByTool ?? row.required_permissions_by_tool;
+    if (isRecord2(rawRequiredPermissions)) {
+      for (const [tool, permissions] of Object.entries(rawRequiredPermissions).slice(0, 500)) {
+        const cleanTool = cleanString(tool, 200);
+        if (!cleanTool || !safeDefaultAllowedTools.includes(cleanTool) && !actionTools.includes(cleanTool)) continue;
+        requiredPermissionsByTool[cleanTool] = cleanStringArray(permissions, 32, 200);
+      }
+    }
+    const requiredFeaturesByTool = {};
+    const rawRequiredFeatures = row.requiredFeaturesByTool ?? row.required_features_by_tool;
+    if (isRecord2(rawRequiredFeatures)) {
+      for (const [tool, features] of Object.entries(rawRequiredFeatures).slice(0, 500)) {
+        const cleanTool = cleanString(tool, 200);
+        if (!cleanTool) continue;
+        requiredFeaturesByTool[cleanTool] = cleanStringArray(features, 32, 200);
+      }
+    }
     const platformSetupStatus = firstString(row, [
       "platformSetupStatus",
       "platform_setup_status",
@@ -21168,6 +21446,7 @@ async function getNangoCatalog() {
     const appReviewStatus = row.appReviewLimited === true || row.app_review_limited === true ? "limited" : firstString(row, ["appReviewStatus", "app_review_status", "reviewStatus", "review_status"], 100);
     const appReviewNote = firstString(row, ["appReviewNote", "app_review_note", "reviewNote", "review_note"], 500);
     const connectionSyncRequiredTools = [...CONNECTION_SYNC_REQUIRED_TOOLS[providerConfigKey] ?? []];
+    const connectionSyncOptionalTools = [...CONNECTION_SYNC_OPTIONAL_TOOLS[providerConfigKey] ?? []];
     result.push({
       providerConfigKey,
       provider,
@@ -21178,8 +21457,13 @@ async function getNangoCatalog() {
       authMode,
       categories,
       safeDefaultAllowedTools,
+      actionTools,
+      requiredPermissionsByTool,
+      requiredFeaturesByTool,
+      enabledFeatures: cleanStringArray(row.enabledFeatures ?? row.enabled_features, 32, 200),
       connectionSyncSupported: connectionSyncRequiredTools.length > 0,
       connectionSyncRequiredTools,
+      connectionSyncOptionalTools,
       platformSetupStatus,
       appReviewStatus,
       appReviewNote
@@ -21201,6 +21485,30 @@ async function getNangoConnections(identity) {
     const label = firstString(row, ["label", "accountLabel", "account_label", "displayName", "display_name", "endUserEmail", "end_user_email"]) || providerConfigKey;
     const rawStatus = firstString(row, ["status"], 64) || "connected";
     const reconnectRequired = row.reconnectRequired === true || row.reconnect_required === true || rawStatus === "needs_reauth" || rawStatus === "reauth_required" || rawStatus === "invalid" || rawStatus === "error" || rawStatus === "revoked" || rawStatus === "disabled";
+    const toolCapabilities = [];
+    const rawToolCapabilities = row.toolCapabilities ?? row.tool_capabilities;
+    if (Array.isArray(rawToolCapabilities)) {
+      for (const value of rawToolCapabilities.slice(0, 500)) {
+        if (!isRecord2(value)) continue;
+        const name = cleanString(value.name, 200);
+        const classification = value.classification;
+        const blockedValue = Object.prototype.hasOwnProperty.call(value, "blockedReason") ? value.blockedReason : value.blocked_reason;
+        const blockedReason = blockedValue === null ? null : blockedValue === "missing_permission" || blockedValue === "permission_policy_missing" || blockedValue === "permission_verification_unavailable" || blockedValue === "missing_app_feature" ? blockedValue : void 0;
+        if (!name || classification !== "read" && classification !== "action" || typeof value.available !== "boolean" || blockedReason === void 0) continue;
+        toolCapabilities.push({
+          name,
+          classification,
+          requiredPermissions: cleanStringArray(value.requiredPermissions ?? value.required_permissions, 32, 200),
+          requiredFeatures: cleanStringArray(value.requiredFeatures ?? value.required_features, 32, 200),
+          available: value.available,
+          blockedReason,
+          missingPermissions: cleanStringArray(value.missingPermissions ?? value.missing_permissions, 32, 200),
+          missingFeatures: cleanStringArray(value.missingFeatures ?? value.missing_features, 32, 200)
+        });
+      }
+    }
+    const permissionVerificationValue = row.permissionVerification ?? row.permission_verification;
+    const permissionVerification = permissionVerificationValue === "verified" || permissionVerificationValue === "unavailable" ? permissionVerificationValue : null;
     result.push({
       connectionId,
       providerConfigKey,
@@ -21211,6 +21519,10 @@ async function getNangoConnections(identity) {
       actionsEnabled: row.actionsEnabled === true || row.actions_enabled === true,
       readTools: cleanTools(row.readTools ?? row.read_tools),
       actionTools: cleanTools(row.actionTools ?? row.action_tools ?? row.writeTools ?? row.write_tools),
+      toolCapabilities,
+      grantedPermissions: cleanStringArray(row.grantedPermissions ?? row.granted_permissions, 64, 200),
+      enabledFeatures: cleanStringArray(row.enabledFeatures ?? row.enabled_features, 32, 200),
+      permissionVerification,
       mcpEndpoint: null,
       schemaDiscovery: "compatibility_describe",
       toolRevision: firstString(row, ["toolRevision", "tool_revision"], 200),
@@ -21438,7 +21750,7 @@ async function describeNangoTool(identity, connectionId, tool, fresh) {
   const outputSchemaValue = rawTool.outputSchema ?? rawTool.output_schema;
   const outputSchema = outputSchemaValue === void 0 ? void 0 : sanitizeToolSchema(outputSchemaValue);
   const blockedReasonValue = rawTool.blockedReason ?? rawTool.blocked_reason;
-  const blockedReason = blockedReasonValue === null || blockedReasonValue === void 0 ? null : blockedReasonValue === "actions_disabled" || blockedReasonValue === "inactive_connection" ? blockedReasonValue : void 0;
+  const blockedReason = blockedReasonValue === null || blockedReasonValue === void 0 ? null : blockedReasonValue === "actions_disabled" || blockedReasonValue === "inactive_connection" || blockedReasonValue === "missing_permission" || blockedReasonValue === "missing_app_feature" || blockedReasonValue === "permission_policy_missing" || blockedReasonValue === "permission_verification_unavailable" ? blockedReasonValue : void 0;
   if (serializedBytes > 256 * 1024 || !name || name !== tool || classification !== "read" && classification !== "action" || typeof rawTool.callable !== "boolean" || blockedReason === void 0 || transport !== "nango" && transport !== "remote_mcp" || !providerConfigKey || schemaSource !== "live_tools_list" || !upstreamSchemaHash || !/^[a-f0-9]{64}$/i.test(upstreamSchemaHash) || !fetchedAt || Number.isNaN(Date.parse(fetchedAt)) || !inputSchema || outputSchemaValue !== void 0 && !outputSchema) {
     throw new NangoControlError(
       "The connection service returned an invalid live tool description.",
@@ -21455,6 +21767,10 @@ async function describeNangoTool(identity, connectionId, tool, fresh) {
   const annotations = sanitizeToolAnnotations(rawTool.annotations);
   const icons = sanitizeToolIcons(rawTool.icons);
   const execution = taskSupport ? { taskSupport } : void 0;
+  const requiredPermissions = cleanStringArray(rawTool.requiredPermissions ?? rawTool.required_permissions, 32, 200);
+  const missingPermissions = cleanStringArray(rawTool.missingPermissions ?? rawTool.missing_permissions, 32, 200);
+  const requiredFeatures = cleanStringArray(rawTool.requiredFeatures ?? rawTool.required_features, 32, 200);
+  const missingFeatures = cleanStringArray(rawTool.missingFeatures ?? rawTool.missing_features, 32, 200);
   const schemaHash = projectedToolSchemaHash({
     name,
     inputSchema,
@@ -21472,6 +21788,10 @@ async function describeNangoTool(identity, connectionId, tool, fresh) {
     classification,
     callable: rawTool.callable,
     blockedReason,
+    requiredPermissions,
+    missingPermissions,
+    requiredFeatures,
+    missingFeatures,
     transport,
     providerConfigKey,
     protocolVersion,
@@ -21912,7 +22232,18 @@ var sessionAuth = createMiddleware3(async (c, next) => {
   c.set("sessionUser", { ...refreshed, balance_mc: balanceMc });
   return next();
 });
-var app = new Hono22();
+var requireIntegrationsTier = createMiddleware3(async (c, next) => {
+  const user = c.get("user");
+  if (!user.subscription_tier) {
+    return c.json({
+      ok: false,
+      error: "Integrations require an active Starter plan or higher.",
+      code: "subscription_required"
+    }, 403);
+  }
+  return next();
+});
+var app = new Hono23();
 var STRIPE_API_VERSION = "2026-02-25.clover";
 function requireStripeSecret() {
   const secret2 = process.env.STRIPE_SECRET_KEY?.trim();
@@ -22080,7 +22411,7 @@ app.post("/auth/forgot-password", requireAllowedOrigin, async (c) => {
   const resetUrl = `${appUrl}/reset-password?token=${token}`;
   if (process.env.RESEND_API_KEY) {
     try {
-      const resend = new Resend(process.env.RESEND_API_KEY);
+      const resend = new Resend2(process.env.RESEND_API_KEY);
       const sent = await resend.emails.send({
         from: "MCP Scraper <noreply@updates.mcpscraper.dev>",
         to: normalizedEmail,
@@ -22136,9 +22467,11 @@ app.get("/me", async (c) => {
     return c.json({ authenticated: false });
   }
   const refreshed = await applyMonthlyFreeRefresh(foundUser);
-  const balanceMc = await reconcileBalanceMc(refreshed.id);
+  const [balanceMc, stats] = await Promise.all([
+    reconcileBalanceMc(refreshed.id),
+    getUserStats(refreshed.id)
+  ]);
   const user = { ...refreshed, balance_mc: balanceMc };
-  const stats = await getUserStats(user.id);
   return c.json({
     authenticated: true,
     id: user.id,
@@ -22508,7 +22841,34 @@ async function combinedConnections(identity) {
   if (nango.status === "rejected" && resend.status === "rejected") throw nango.reason;
   return [
     ...nango.status === "fulfilled" ? nango.value.map((connection) => ({ ...connection, transport: "nango", adminBlockedTools: [] })) : [],
-    ...resend.status === "fulfilled" ? resend.value : []
+    ...resend.status === "fulfilled" ? resend.value.map((connection) => ({
+      ...connection,
+      toolCapabilities: [
+        ...connection.readTools.map((name) => ({
+          name,
+          classification: "read",
+          requiredPermissions: [],
+          requiredFeatures: [],
+          available: true,
+          blockedReason: null,
+          missingPermissions: [],
+          missingFeatures: []
+        })),
+        ...connection.actionTools.map((name) => ({
+          name,
+          classification: "action",
+          requiredPermissions: [],
+          requiredFeatures: [],
+          available: true,
+          blockedReason: null,
+          missingPermissions: [],
+          missingFeatures: []
+        }))
+      ],
+      grantedPermissions: [],
+      enabledFeatures: [],
+      permissionVerification: null
+    })) : []
   ];
 }
 async function isResendConnection(identity, connectionId, providerHint) {
@@ -22554,7 +22914,7 @@ app.get("/schedule-connections", auth2, async (c) => {
     return scheduleConnectionError(c, err, "Unable to load service connections.");
   }
 });
-app.post("/schedule-connections/session", auth2, async (c) => {
+app.post("/schedule-connections/session", auth2, requireIntegrationsTier, async (c) => {
   const user = c.get("user");
   const body = await c.req.json().catch(() => ({}));
   const providerConfigKey = providerConfigKeyFrom(body.providerConfigKey);
@@ -22566,7 +22926,7 @@ app.post("/schedule-connections/session", auth2, async (c) => {
     return scheduleConnectionError(c, err, "Unable to start the service connection flow.");
   }
 });
-app.post("/schedule-connections/:id/reconnect-session", auth2, async (c) => {
+app.post("/schedule-connections/:id/reconnect-session", auth2, requireIntegrationsTier, async (c) => {
   const user = c.get("user");
   const body = await c.req.json().catch(() => ({}));
   const providerConfigKey = providerConfigKeyFrom(body.providerConfigKey);
@@ -22591,7 +22951,7 @@ app.delete("/schedule-connections/:id", auth2, async (c) => {
     return scheduleConnectionError(c, err, "Unable to disconnect this service connection.");
   }
 });
-app.post("/schedule-connections/:id/enable-actions", auth2, async (c) => {
+app.post("/schedule-connections/:id/enable-actions", auth2, requireIntegrationsTier, async (c) => {
   const user = c.get("user");
   const body = await c.req.json().catch(() => ({}));
   if (typeof body.enabled !== "boolean") return c.json({ ok: false, error: "enabled must be a boolean." }, 400);
@@ -22627,7 +22987,7 @@ app.get("/oauth/resend/callback", async (c) => {
     return c.html(renderResendOAuthResult(false), 502);
   }
 });
-app.post("/schedule-connections/actions/slack/send-message", auth2, async (c) => {
+app.post("/schedule-connections/actions/slack/send-message", auth2, requireIntegrationsTier, async (c) => {
   const user = c.get("user");
   const body = await c.req.json().catch(() => ({}));
   const connectionId = providerConfigKeyFrom(body.connectionId);
@@ -22641,7 +23001,7 @@ app.post("/schedule-connections/actions/slack/send-message", auth2, async (c) =>
     return scheduleConnectionError(c, err, "Unable to send the Slack message.");
   }
 });
-app.post("/schedule-connections/actions/gmail/send-message", auth2, async (c) => {
+app.post("/schedule-connections/actions/gmail/send-message", auth2, requireIntegrationsTier, async (c) => {
   const user = c.get("user");
   const body = await c.req.json().catch(() => ({}));
   const connectionId = providerConfigKeyFrom(body.connectionId);
@@ -22655,7 +23015,7 @@ app.post("/schedule-connections/actions/gmail/send-message", auth2, async (c) =>
     return scheduleConnectionError(c, err, "Unable to send the email.");
   }
 });
-app.post("/schedule-connections/actions/google-calendar/create-event", auth2, async (c) => {
+app.post("/schedule-connections/actions/google-calendar/create-event", auth2, requireIntegrationsTier, async (c) => {
   const user = c.get("user");
   const body = await c.req.json().catch(() => ({}));
   const connectionId = providerConfigKeyFrom(body.connectionId);
@@ -22677,7 +23037,7 @@ app.post("/schedule-connections/actions/google-calendar/create-event", auth2, as
     return scheduleConnectionError(c, err, "Unable to create the calendar event.");
   }
 });
-app.post("/schedule-connections/actions/zoom/create-meeting", auth2, async (c) => {
+app.post("/schedule-connections/actions/zoom/create-meeting", auth2, requireIntegrationsTier, async (c) => {
   const user = c.get("user");
   const body = await c.req.json().catch(() => ({}));
   const connectionId = providerConfigKeyFrom(body.connectionId);
@@ -22697,7 +23057,7 @@ app.post("/schedule-connections/actions/zoom/create-meeting", auth2, async (c) =
     return scheduleConnectionError(c, err, "Unable to create the Zoom meeting.");
   }
 });
-app.post("/schedule-connections/actions/read", auth2, async (c) => {
+app.post("/schedule-connections/actions/read", auth2, requireIntegrationsTier, async (c) => {
   const user = c.get("user");
   const body = await c.req.json().catch(() => ({}));
   const connectionId = providerConfigKeyFrom(body.connectionId);
@@ -22714,7 +23074,7 @@ app.post("/schedule-connections/actions/read", auth2, async (c) => {
     return scheduleConnectionError(c, err, "Unable to read from this connection.");
   }
 });
-app.post("/schedule-connections/actions/import-memory", auth2, async (c) => {
+app.post("/schedule-connections/actions/import-memory", auth2, requireIntegrationsTier, async (c) => {
   const user = c.get("user");
   const body = await c.req.json().catch(() => ({}));
   const connectionId = providerConfigKeyFrom(body.connectionId);
@@ -22771,7 +23131,7 @@ app.post("/schedule-connections/actions/import-memory", auth2, async (c) => {
     return scheduleConnectionError(c, err, "Unable to import this connected-service snapshot into Memory.");
   }
 });
-app.post("/schedule-connections/actions/describe", auth2, async (c) => {
+app.post("/schedule-connections/actions/describe", auth2, requireIntegrationsTier, async (c) => {
   const user = c.get("user");
   const body = await c.req.json().catch(() => ({}));
   const connectionId = providerConfigKeyFrom(body.connectionId);
@@ -22788,7 +23148,7 @@ app.post("/schedule-connections/actions/describe", auth2, async (c) => {
     return scheduleConnectionError(c, err, "Unable to describe this connection tool.");
   }
 });
-app.post("/schedule-connections/actions/export", auth2, async (c) => {
+app.post("/schedule-connections/actions/export", auth2, requireIntegrationsTier, async (c) => {
   const user = c.get("user");
   const body = await c.req.json().catch(() => ({}));
   const connectionId = providerConfigKeyFrom(body.connectionId);
@@ -22848,7 +23208,7 @@ app.post("/schedule-connections/actions/export", auth2, async (c) => {
     return scheduleConnectionError(c, err, "Unable to export this connected service.");
   }
 });
-app.post("/schedule-connections/actions/export-download", auth2, async (c) => {
+app.post("/schedule-connections/actions/export-download", auth2, requireIntegrationsTier, async (c) => {
   const user = c.get("user");
   const body = await c.req.json().catch(() => ({}));
   const artifactId = typeof body.artifactId === "string" ? body.artifactId.trim() : "";
@@ -22865,7 +23225,7 @@ app.post("/schedule-connections/actions/export-download", auth2, async (c) => {
     return c.json({ ok: false, error: "Unable to renew this artifact download." }, 502);
   }
 });
-app.post("/schedule-connections/actions/call", auth2, async (c) => {
+app.post("/schedule-connections/actions/call", auth2, requireIntegrationsTier, async (c) => {
   const user = c.get("user");
   const body = await c.req.json().catch(() => ({}));
   const connectionId = providerConfigKeyFrom(body.connectionId);
@@ -22985,7 +23345,7 @@ app.get("/schedule-actions/:id/connections", auth2, async (c) => {
     return scheduleConnectionError(c, err, "Unable to load scheduled action service connections.");
   }
 });
-app.put("/schedule-actions/:id/connections", auth2, async (c) => {
+app.put("/schedule-actions/:id/connections", auth2, requireIntegrationsTier, async (c) => {
   const user = c.get("user");
   const body = await c.req.json().catch(() => ({}));
   let connections;
@@ -23270,8 +23630,7 @@ app.get("/history", auth2, async (c) => {
     location: job.options?.location ?? "",
     source: LedgerOperation.SERP,
     status: job.status,
-    result_count: job.result ? (job.result.flat?.length ?? 0) + (job.result.organicResults?.length ?? 0) : 0,
-    result: job.result ?? null
+    result_count: job.result ? (job.result.flat?.length ?? 0) + (job.result.organicResults?.length ?? 0) : 0
   }));
   const eventRows = events.map((event) => ({
     id: event.id,
@@ -23281,7 +23640,6 @@ app.get("/history", auth2, async (c) => {
     source: event.source,
     status: event.status,
     result_count: event.result_count ?? 0,
-    result: event.result ?? null,
     error: event.error ?? null
   }));
   const rows = [...jobRows, ...eventRows].sort((a, b) => String(b.ts).localeCompare(String(a.ts)));
@@ -23973,6 +24331,7 @@ app.route("/mcp", mcpApp);
 app.route("/agent", buildBrowserAgentRoutes());
 app.route("/chat", chatApp);
 app.route("/schedule", scheduleApp);
+app.route("/resend", resendInboundApp);
 app.get("/console", (c) => c.html(renderConsoleHtml()));
 app.get("/console/auth/:id", async (c) => {
   const id = c.req.param("id");
@@ -24102,4 +24461,4 @@ app.get("/blog/:slug/", (c) => {
 export {
   app
 };
-//# sourceMappingURL=server-5KTVLL3L.js.map
+//# sourceMappingURL=server-MQDCAR6I.js.map