@carrierllc/mcp 0.13.39 → 0.13.40

package/README.md

@@ -7,6 +7,14 @@ Natural language control of your MVNO/eSIM fleet. 43 OCS tools + 9 intelligence
 
 ---
 
+## Durable inventory issuance
+
+`assign_package` with `account_for_subs` (or no ICCID) calls the authenticated Carrier API's `/v1/subscribers/issue-from-inventory` route. Supply a stable `request_key`: 1–200 characters, first character alphanumeric, remaining characters alphanumeric, `_`, `.`, `:`, or `-`. No key is generated. Optional `business_reference` identifies an existing storefront order; the API must authorize it, it is not proof of ownership.
+
+Set `CARRIER_API_TOKEN` to your own Carrier credential. Hosted MCP and `carrier packages assign --account-id … --template-id … --request-key … --commit` forward the current authenticated session credential. Explicit ICCID assignment remains the scoped OCS subscriber path, mutually exclusive with inventory/business reference.
+
+Unknown response/transport outcomes preserve `request_key` and never trigger an automatic second dispatch. Reconcile using the same key; do not mint a replacement. Dry-run validates without allocating or resolving credentials.
+
 ## Quick start
 
 ### Interactive CLI (non-developers)
@@ -304,7 +312,9 @@ For multi-user deployments with OAuth 2.1 + PKCE, use the remote endpoint:
 
 | Variable | Required | Default | Description |
 |----------|----------|---------|-------------|
-| `ESIMVAULT_API_TOKEN` | Yes | — | Your eSIMVault OCS API token |
+| `CARRIER_API_TOKEN` | Inventory issuance | — | Your own authenticated Carrier API credential. Required for durable `assign_package` inventory; never falls back to an OCS token. |
+| `CARRIER_API_BASE_URL` | No | `https://api.carrier.llc` | Carrier REST API origin for durable inventory. Do not use the OCS provider URL. |
+| `ESIMVAULT_API_TOKEN` | Explicit OCS tools | — | Your eSIMVault OCS API token; not a Carrier API credential |
 | `CARRIER_OCS_API_TOKEN` | Alternative | — | Alias for `ESIMVAULT_API_TOKEN` |
 | `CARRIER_OCS_BASE_URL` | No | `https://ocs.esimvault.cloud` | OCS base URL (no trailing slash) |
 | `BROWSER_USE_API_KEY` | No | — | Browser Use Cloud key. Enables the browsing agent (`ui_agent_ask`). Runs are billed to this key at roughly **$0.20–1.00 each** |

package/dist/{chunk-I3Z5WYDG.js → chunk-WVXII7ZR.js}

@@ -1855,7 +1855,7 @@ function storefrontScreen(input) {
 // package.json
 var package_default = {
   name: "@carrierllc/mcp",
-  version: "0.13.39",
+  version: "0.13.40",
   description: "Carrier MCP \u2014 natural-language control of MVNO/eSIM fleets via eSIMVault OCS. Stdio mode for direct integration with Claude Desktop, Cursor, Windsurf, and MCP-compatible clients. Ships the `carrier` CLI (plugin install + white-label eSIM storefront scaffold).",
   license: "MIT",
   author: "Carrier (Lifecycle Innovations Limited)",
@@ -3097,7 +3097,7 @@ async function runWithBudget(method, attempt, budget = ocsBudgetFor(method)) {
   throw lastTimeout ?? new OcsTimeoutError(method, budget.attemptMs, budget.totalMs, Math.max(attempts, 1));
 }
 
-// ../../packages/ocs-client/dist/chunk-HPVVOVWZ.js
+// ../../packages/ocs-client/dist/chunk-IU7WF2BY.js
 var RATE_LIMIT = 10;
 var WINDOW_MS = 1e3;
 var windows = /* @__PURE__ */ new Map();
@@ -3563,9 +3563,16 @@ var OcsClient = class {
           }
           throw err;
         }
-        if (json.status?.code !== 0) {
-          const ocsCode = json.status?.code ?? -1;
-          const rawMsg = json.status?.msg ?? "Unknown error";
+        const status = json !== null && typeof json === "object" && !Array.isArray(json) ? json.status : void 0;
+        const ocsCode = status !== null && typeof status === "object" && !Array.isArray(status) ? status.code : void 0;
+        if (typeof ocsCode !== "number" || !Number.isFinite(ocsCode)) {
+          throw new OcsContractError(method, [{
+            path: "status.code",
+            message: "Expected a finite numeric OCS status code"
+          }], json);
+        }
+        if (ocsCode !== 0) {
+          const rawMsg = typeof status?.msg === "string" ? status.msg : "Unknown error";
           const rawBody = json;
           const { message, details } = ocsErrorMessage(ocsCode, rawMsg, rawBody);
           throw new OcsApiError(ocsCode, message, method, details);
@@ -5534,4 +5541,4 @@ export {
   package_default,
   CARRIER_VERSION
 };
-//# sourceMappingURL=chunk-I3Z5WYDG.js.map
+//# sourceMappingURL=chunk-WVXII7ZR.js.map