@extenshi/mcp 0.6.0 → 0.8.0

package/dist/pay.d.ts

@@ -0,0 +1,214 @@
+/** Published packages deliberately carry this small contract locally; BFF validates again. */
+import { z } from 'zod';
+export declare const paySchemas: {
+    readonly listPayApps: z.ZodObject<{
+        includeArchived: z.ZodOptional<z.ZodBoolean>;
+        cursor: z.ZodOptional<z.ZodString>;
+        limit: z.ZodOptional<z.ZodNumber>;
+    }, "strict", z.ZodTypeAny, {
+        includeArchived?: boolean | undefined;
+        cursor?: string | undefined;
+        limit?: number | undefined;
+    }, {
+        includeArchived?: boolean | undefined;
+        cursor?: string | undefined;
+        limit?: number | undefined;
+    }>;
+    readonly createPayApp: z.ZodObject<{
+        name: z.ZodString;
+        linkedProjectId: z.ZodOptional<z.ZodString>;
+    }, "strict", z.ZodTypeAny, {
+        name: string;
+        linkedProjectId?: string | undefined;
+    }, {
+        name: string;
+        linkedProjectId?: string | undefined;
+    }>;
+    readonly getPayApp: z.ZodObject<{
+        appId: z.ZodString;
+    }, "strict", z.ZodTypeAny, {
+        appId: string;
+    }, {
+        appId: string;
+    }>;
+    readonly getPayReadiness: z.ZodObject<{
+        appId: z.ZodString;
+    }, "strict", z.ZodTypeAny, {
+        appId: string;
+    }, {
+        appId: string;
+    }>;
+    readonly linkPayApp: z.ZodObject<{
+        appId: z.ZodString;
+    } & {
+        projectId: z.ZodString;
+    }, "strict", z.ZodTypeAny, {
+        appId: string;
+        projectId: string;
+    }, {
+        appId: string;
+        projectId: string;
+    }>;
+    readonly unlinkPayApp: z.ZodObject<{
+        appId: z.ZodString;
+    }, "strict", z.ZodTypeAny, {
+        appId: string;
+    }, {
+        appId: string;
+    }>;
+    readonly archivePayApp: z.ZodObject<{
+        appId: z.ZodString;
+    }, "strict", z.ZodTypeAny, {
+        appId: string;
+    }, {
+        appId: string;
+    }>;
+    readonly exportPayData: z.ZodObject<{
+        appId: z.ZodString;
+    } & {
+        resource: z.ZodEnum<["offers", "payments", "subscriptions", "entitlements", "customers"]>;
+        cursor: z.ZodOptional<z.ZodString>;
+        limit: z.ZodOptional<z.ZodNumber>;
+    }, "strict", z.ZodTypeAny, {
+        appId: string;
+        resource: "offers" | "payments" | "subscriptions" | "entitlements" | "customers";
+        cursor?: string | undefined;
+        limit?: number | undefined;
+    }, {
+        appId: string;
+        resource: "offers" | "payments" | "subscriptions" | "entitlements" | "customers";
+        cursor?: string | undefined;
+        limit?: number | undefined;
+    }>;
+    readonly getPaySeller: z.ZodObject<{
+        appId: z.ZodString;
+    }, "strict", z.ZodTypeAny, {
+        appId: string;
+    }, {
+        appId: string;
+    }>;
+    readonly connectPaySeller: z.ZodObject<{
+        appId: z.ZodString;
+    } & {
+        provider: z.ZodDefault<z.ZodLiteral<"stripe">>;
+        accountKind: z.ZodDefault<z.ZodEnum<["standard", "express"]>>;
+    }, "strict", z.ZodTypeAny, {
+        appId: string;
+        provider: "stripe";
+        accountKind: "standard" | "express";
+    }, {
+        appId: string;
+        provider?: "stripe" | undefined;
+        accountKind?: "standard" | "express" | undefined;
+    }>;
+    readonly refreshPaySeller: z.ZodObject<{
+        appId: z.ZodString;
+    }, "strict", z.ZodTypeAny, {
+        appId: string;
+    }, {
+        appId: string;
+    }>;
+    readonly setPaySellerProfile: z.ZodObject<{
+        appId: z.ZodString;
+    } & {
+        profile: z.ZodObject<{
+            displayName: z.ZodString;
+            supportUrl: z.ZodUnion<[z.ZodEffects<z.ZodString, string, string>, z.ZodString]>;
+            termsUrl: z.ZodNullable<z.ZodEffects<z.ZodString, string, string>>;
+        }, "strict", z.ZodTypeAny, {
+            displayName: string;
+            supportUrl: string;
+            termsUrl: string | null;
+        }, {
+            displayName: string;
+            supportUrl: string;
+            termsUrl: string | null;
+        }>;
+    }, "strict", z.ZodTypeAny, {
+        appId: string;
+        profile: {
+            displayName: string;
+            supportUrl: string;
+            termsUrl: string | null;
+        };
+    }, {
+        appId: string;
+        profile: {
+            displayName: string;
+            supportUrl: string;
+            termsUrl: string | null;
+        };
+    }>;
+    readonly upsertPayOffer: z.ZodObject<{
+        appId: z.ZodString;
+    } & {
+        sku: z.ZodString;
+        kind: z.ZodEnum<["one_time", "subscription", "lifetime"]>;
+        interval: z.ZodDefault<z.ZodNullable<z.ZodEnum<["month", "year"]>>>;
+        amountMinor: z.ZodNumber;
+        currency: z.ZodEnum<["usd", "eur", "gbp"]>;
+        title: z.ZodString;
+        description: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+        features: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        sortOrder: z.ZodDefault<z.ZodNumber>;
+    }, "strict", z.ZodTypeAny, {
+        appId: string;
+        sku: string;
+        kind: "one_time" | "subscription" | "lifetime";
+        interval: "month" | "year" | null;
+        amountMinor: number;
+        currency: "usd" | "eur" | "gbp";
+        title: string;
+        description: string | null;
+        features: string[];
+        sortOrder: number;
+    }, {
+        appId: string;
+        sku: string;
+        kind: "one_time" | "subscription" | "lifetime";
+        amountMinor: number;
+        currency: "usd" | "eur" | "gbp";
+        title: string;
+        interval?: "month" | "year" | null | undefined;
+        description?: string | null | undefined;
+        features?: string[] | undefined;
+        sortOrder?: number | undefined;
+    }>;
+    readonly archivePayOffer: z.ZodObject<{
+        appId: z.ZodString;
+    } & {
+        sku: z.ZodString;
+    }, "strict", z.ZodTypeAny, {
+        appId: string;
+        sku: string;
+    }, {
+        appId: string;
+        sku: string;
+    }>;
+    readonly setPayEnabled: z.ZodObject<{
+        appId: z.ZodString;
+    } & {
+        enabled: z.ZodBoolean;
+    }, "strict", z.ZodTypeAny, {
+        appId: string;
+        enabled: boolean;
+    }, {
+        appId: string;
+        enabled: boolean;
+    }>;
+    readonly rotatePayKey: z.ZodObject<{
+        appId: z.ZodString;
+    }, "strict", z.ZodTypeAny, {
+        appId: string;
+    }, {
+        appId: string;
+    }>;
+};
+export type PayMethod = keyof typeof paySchemas;
+export type PayBff = {
+    [M in PayMethod]: (input: z.infer<(typeof paySchemas)[M]>) => Promise<unknown>;
+};
+export declare const PAY_OPERATIONS: readonly [readonly ["listPayApps", "list_pay_apps", "list", "payApp.list", false, "List your independent Pay applications. No development project required. Paginated: nextCursor is set while more results exist."], readonly ["createPayApp", "create_pay_app", "create", "payApp.create", true, "Create an independent Pay application; linking a development project is optional. Not idempotent: each call creates a new application, including a call repeated after a timeout."], readonly ["getPayApp", "get_pay_app", "get", "payApp.get", false, "Read your Pay application and optional project link."], readonly ["getPayReadiness", "get_pay_readiness", "readiness", "payApp.readiness", false, "Check current checkout and launch prerequisites. A passing checkout check does not prove a live external purchase or SDK publication."], readonly ["linkPayApp", "link_pay_app", "link", "payApp.link", true, "Link your Pay application to your development project. Existing purchases remain attached to the Pay application."], readonly ["unlinkPayApp", "unlink_pay_app", "unlink", "payApp.unlink", true, "Remove the optional development-project link without deleting Pay data."], readonly ["archivePayApp", "archive_pay_app", "archive", "payApp.archive", true, "Archive your application and stop new checkout. Payment records and existing entitlements are preserved."], readonly ["exportPayData", "export_pay_data", "export", "payApp.export", false, "Export one page of one resource (offers, payments, subscriptions, entitlements or customers). nextCursor is null on the last page. The output contains sensitive customer and payment data."], readonly ["getPaySeller", "get_pay_seller", "seller", "paySeller.get", false, "Read seller connection, public profile, offers, the publishable SDK key and the public entitlement verification key. Those two keys are the ones meant to be embedded in extension code; secret keys are not part of the response. Agreement signing and KYC take place in the browser."], readonly ["connectPaySeller", "connect_pay_seller", "connect", "paySeller.connect", true, "Start Stripe Connect onboarding and return a browser action URL. KYC and legal acceptance are completed by the author at that URL; this tool does not perform them."], readonly ["refreshPaySeller", "refresh_pay_seller", "refresh", "paySeller.refreshStatus", true, "Refresh current payment-provider onboarding status. This does not complete KYC or accept agreements."], readonly ["setPaySellerProfile", "set_pay_seller_profile", "profile", "paySeller.setPublicProfile", true, "Save the public seller profile: display name, support URL or email, and terms URL. The values are stored as provided and are publicly visible."], readonly ["upsertPayOffer", "upsert_pay_offer", "offer-upsert", "paySeller.upsertOffer", true, "Create or update an offer keyed by a stable SKU. Price is in minor currency units. Subscriptions keep the given billing interval; one-time and lifetime offers store no interval. Price and features are stored as provided."], readonly ["archivePayOffer", "archive_pay_offer", "offer-archive", "paySeller.archiveOffer", true, "Stop offering a SKU for new checkout; historical purchases are preserved."], readonly ["setPayEnabled", "set_pay_enabled", "enable", "paySeller.setEnabled", true, "Enable or disable new payments for the application; requires a connected payment provider. Enabling re-reads the seller status from the provider (charges and payouts). It does not verify the public profile, agreement or offer sync: buyers can check out only when every readiness check reported by get_pay_readiness passes. Enabling is a live commerce change."], readonly ["rotatePayKey", "rotate_pay_key", "rotate-key", "paySeller.rotatePublishableKey", true, "Generate a new publishable SDK key. Not idempotent: each call issues another key. Prior keys remain accepted for installed extension builds; this does not revoke any secret."]];
+/** The legacy seller API uses projectId as the payment namespace. Never substitute a linked project ID. */
+export declare function payWireInput(method: PayMethod, input: Record<string, unknown>): Record<string, unknown>;
+//# sourceMappingURL=pay.d.ts.map

package/dist/pay.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pay.d.ts","sourceRoot":"","sources":["../src/pay.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAavB,eAAO,MAAM,UAAU;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAkDb,CAAA;AACV,MAAM,MAAM,SAAS,GAAG,MAAM,OAAO,UAAU,CAAA;AAC/C,MAAM,MAAM,MAAM,GAAG;KAAG,CAAC,IAAI,SAAS,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,OAAO,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,OAAO,CAAC;CAAE,CAAA;AACvG,eAAO,MAAM,cAAc,m1HAiIjB,CAAA;AAEV,2GAA2G;AAC3G,wBAAgB,YAAY,CAAC,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAIvG"}

package/dist/pay.js

@@ -0,0 +1,202 @@
+/** Published packages deliberately carry this small contract locally; BFF validates again. */
+import { z } from 'zod';
+const app = z.object({ appId: z.string().uuid() }).strict();
+const sku = z.string().regex(/^[a-z0-9][a-z0-9_-]{1,39}$/);
+const publicUrl = z
+    .string()
+    .trim()
+    .max(2048)
+    .url()
+    .refine((value) => {
+    const url = new URL(value);
+    return url.protocol === 'https:' && !url.username && !url.password;
+}, 'Use an HTTPS URL without credentials');
+export const paySchemas = {
+    listPayApps: z
+        .object({
+        includeArchived: z.boolean().optional(),
+        cursor: z.string().uuid().optional(),
+        limit: z.number().int().min(1).max(100).optional(),
+    })
+        .strict(),
+    createPayApp: z
+        .object({ name: z.string().trim().min(1).max(120), linkedProjectId: z.string().uuid().optional() })
+        .strict(),
+    getPayApp: app,
+    getPayReadiness: app,
+    linkPayApp: app.extend({ projectId: z.string().uuid() }),
+    unlinkPayApp: app,
+    archivePayApp: app,
+    exportPayData: app.extend({
+        resource: z.enum(['offers', 'payments', 'subscriptions', 'entitlements', 'customers']),
+        cursor: z.string().uuid().optional(),
+        limit: z.number().int().min(1).max(500).optional(),
+    }),
+    getPaySeller: app,
+    connectPaySeller: app.extend({
+        provider: z.literal('stripe').default('stripe'),
+        accountKind: z.enum(['standard', 'express']).default('standard'),
+    }),
+    refreshPaySeller: app,
+    setPaySellerProfile: app.extend({
+        profile: z
+            .object({
+            displayName: z.string().trim().min(1).max(160),
+            supportUrl: z.union([publicUrl, z.string().trim().email().max(254)]),
+            termsUrl: publicUrl.nullable(),
+        })
+            .strict(),
+    }),
+    upsertPayOffer: app.extend({
+        sku,
+        kind: z.enum(['one_time', 'subscription', 'lifetime']),
+        interval: z.enum(['month', 'year']).nullable().default(null),
+        amountMinor: z.number().int().min(199).max(100_000_00),
+        currency: z.enum(['usd', 'eur', 'gbp']),
+        title: z.string().trim().min(1).max(80),
+        description: z.string().trim().max(500).nullable().default(null),
+        features: z.array(z.string().trim().min(1).max(60)).max(20).default([]),
+        sortOrder: z.number().int().min(0).max(1000).default(0),
+    }),
+    archivePayOffer: app.extend({ sku }),
+    setPayEnabled: app.extend({ enabled: z.boolean() }),
+    rotatePayKey: app,
+};
+export const PAY_OPERATIONS = [
+    [
+        'listPayApps',
+        'list_pay_apps',
+        'list',
+        'payApp.list',
+        false,
+        'List your independent Pay applications. No development project required. Paginated: nextCursor is set while more results exist.',
+    ],
+    [
+        'createPayApp',
+        'create_pay_app',
+        'create',
+        'payApp.create',
+        true,
+        'Create an independent Pay application; linking a development project is optional. Not idempotent: each call creates a new application, including a call repeated after a timeout.',
+    ],
+    [
+        'getPayApp',
+        'get_pay_app',
+        'get',
+        'payApp.get',
+        false,
+        'Read your Pay application and optional project link.',
+    ],
+    [
+        'getPayReadiness',
+        'get_pay_readiness',
+        'readiness',
+        'payApp.readiness',
+        false,
+        'Check current checkout and launch prerequisites. A passing checkout check does not prove a live external purchase or SDK publication.',
+    ],
+    [
+        'linkPayApp',
+        'link_pay_app',
+        'link',
+        'payApp.link',
+        true,
+        'Link your Pay application to your development project. Existing purchases remain attached to the Pay application.',
+    ],
+    [
+        'unlinkPayApp',
+        'unlink_pay_app',
+        'unlink',
+        'payApp.unlink',
+        true,
+        'Remove the optional development-project link without deleting Pay data.',
+    ],
+    [
+        'archivePayApp',
+        'archive_pay_app',
+        'archive',
+        'payApp.archive',
+        true,
+        'Archive your application and stop new checkout. Payment records and existing entitlements are preserved.',
+    ],
+    [
+        'exportPayData',
+        'export_pay_data',
+        'export',
+        'payApp.export',
+        false,
+        'Export one page of one resource (offers, payments, subscriptions, entitlements or customers). nextCursor is null on the last page. The output contains sensitive customer and payment data.',
+    ],
+    [
+        'getPaySeller',
+        'get_pay_seller',
+        'seller',
+        'paySeller.get',
+        false,
+        'Read seller connection, public profile, offers, the publishable SDK key and the public entitlement verification key. Those two keys are the ones meant to be embedded in extension code; secret keys are not part of the response. Agreement signing and KYC take place in the browser.',
+    ],
+    [
+        'connectPaySeller',
+        'connect_pay_seller',
+        'connect',
+        'paySeller.connect',
+        true,
+        'Start Stripe Connect onboarding and return a browser action URL. KYC and legal acceptance are completed by the author at that URL; this tool does not perform them.',
+    ],
+    [
+        'refreshPaySeller',
+        'refresh_pay_seller',
+        'refresh',
+        'paySeller.refreshStatus',
+        true,
+        'Refresh current payment-provider onboarding status. This does not complete KYC or accept agreements.',
+    ],
+    [
+        'setPaySellerProfile',
+        'set_pay_seller_profile',
+        'profile',
+        'paySeller.setPublicProfile',
+        true,
+        'Save the public seller profile: display name, support URL or email, and terms URL. The values are stored as provided and are publicly visible.',
+    ],
+    [
+        'upsertPayOffer',
+        'upsert_pay_offer',
+        'offer-upsert',
+        'paySeller.upsertOffer',
+        true,
+        'Create or update an offer keyed by a stable SKU. Price is in minor currency units. Subscriptions keep the given billing interval; one-time and lifetime offers store no interval. Price and features are stored as provided.',
+    ],
+    [
+        'archivePayOffer',
+        'archive_pay_offer',
+        'offer-archive',
+        'paySeller.archiveOffer',
+        true,
+        'Stop offering a SKU for new checkout; historical purchases are preserved.',
+    ],
+    [
+        'setPayEnabled',
+        'set_pay_enabled',
+        'enable',
+        'paySeller.setEnabled',
+        true,
+        'Enable or disable new payments for the application; requires a connected payment provider. Enabling re-reads the seller status from the provider (charges and payouts). It does not verify the public profile, agreement or offer sync: buyers can check out only when every readiness check reported by get_pay_readiness passes. Enabling is a live commerce change.',
+    ],
+    [
+        'rotatePayKey',
+        'rotate_pay_key',
+        'rotate-key',
+        'paySeller.rotatePublishableKey',
+        true,
+        'Generate a new publishable SDK key. Not idempotent: each call issues another key. Prior keys remain accepted for installed extension builds; this does not revoke any secret.',
+    ],
+];
+/** The legacy seller API uses projectId as the payment namespace. Never substitute a linked project ID. */
+export function payWireInput(method, input) {
+    if (!PAY_OPERATIONS.find(([key]) => key === method)?.[3].startsWith('paySeller.'))
+        return input;
+    const { appId, ...rest } = input;
+    return { ...rest, projectId: appId };
+}
+//# sourceMappingURL=pay.js.map

package/dist/pay.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pay.js","sourceRoot":"","sources":["../src/pay.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAEvB,MAAM,GAAG,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAA;AAC3D,MAAM,GAAG,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAA;AAC1D,MAAM,SAAS,GAAG,CAAC;KACjB,MAAM,EAAE;KACR,IAAI,EAAE;KACN,GAAG,CAAC,IAAI,CAAC;KACT,GAAG,EAAE;KACL,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;IACjB,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAA;IAC1B,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,QAAQ,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAA;AACnE,CAAC,EAAE,sCAAsC,CAAC,CAAA;AAC3C,MAAM,CAAC,MAAM,UAAU,GAAG;IACzB,WAAW,EAAE,CAAC;SACZ,MAAM,CAAC;QACP,eAAe,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;QACvC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;QACpC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;KAClD,CAAC;SACD,MAAM,EAAE;IACV,YAAY,EAAE,CAAC;SACb,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC;SAClG,MAAM,EAAE;IACV,SAAS,EAAE,GAAG;IACd,eAAe,EAAE,GAAG;IACpB,UAAU,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC;IACxD,YAAY,EAAE,GAAG;IACjB,aAAa,EAAE,GAAG;IAClB,aAAa,EAAE,GAAG,CAAC,MAAM,CAAC;QACzB,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,UAAU,EAAE,eAAe,EAAE,cAAc,EAAE,WAAW,CAAC,CAAC;QACtF,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;QACpC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;KAClD,CAAC;IACF,YAAY,EAAE,GAAG;IACjB,gBAAgB,EAAE,GAAG,CAAC,MAAM,CAAC;QAC5B,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;QAC/C,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC;KAChE,CAAC;IACF,gBAAgB,EAAE,GAAG;IACrB,mBAAmB,EAAE,GAAG,CAAC,MAAM,CAAC;QAC/B,OAAO,EAAE,CAAC;aACR,MAAM,CAAC;YACP,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;YAC9C,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;YACpE,QAAQ,EAAE,SAAS,CAAC,QAAQ,EAAE;SAC9B,CAAC;aACD,MAAM,EAAE;KACV,CAAC;IACF,cAAc,EAAE,GAAG,CAAC,MAAM,CAAC;QAC1B,GAAG;QACH,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,cAAc,EAAE,UAAU,CAAC,CAAC;QACtD,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;QAC5D,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC;QACtD,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;QACvC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;QACvC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;QAChE,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;QACvE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;KACvD,CAAC;IACF,eAAe,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC;IACpC,aAAa,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;IACnD,YAAY,EAAE,GAAG;CACR,CAAA;AAGV,MAAM,CAAC,MAAM,cAAc,GAAG;IAC7B;QACC,aAAa;QACb,eAAe;QACf,MAAM;QACN,aAAa;QACb,KAAK;QACL,iIAAiI;KACjI;IACD;QACC,cAAc;QACd,gBAAgB;QAChB,QAAQ;QACR,eAAe;QACf,IAAI;QACJ,mLAAmL;KACnL;IACD;QACC,WAAW;QACX,aAAa;QACb,KAAK;QACL,YAAY;QACZ,KAAK;QACL,sDAAsD;KACtD;IACD;QACC,iBAAiB;QACjB,mBAAmB;QACnB,WAAW;QACX,kBAAkB;QAClB,KAAK;QACL,uIAAuI;KACvI;IACD;QACC,YAAY;QACZ,cAAc;QACd,MAAM;QACN,aAAa;QACb,IAAI;QACJ,mHAAmH;KACnH;IACD;QACC,cAAc;QACd,gBAAgB;QAChB,QAAQ;QACR,eAAe;QACf,IAAI;QACJ,yEAAyE;KACzE;IACD;QACC,eAAe;QACf,iBAAiB;QACjB,SAAS;QACT,gBAAgB;QAChB,IAAI;QACJ,0GAA0G;KAC1G;IACD;QACC,eAAe;QACf,iBAAiB;QACjB,QAAQ;QACR,eAAe;QACf,KAAK;QACL,6LAA6L;KAC7L;IACD;QACC,cAAc;QACd,gBAAgB;QAChB,QAAQ;QACR,eAAe;QACf,KAAK;QACL,yRAAyR;KACzR;IACD;QACC,kBAAkB;QAClB,oBAAoB;QACpB,SAAS;QACT,mBAAmB;QACnB,IAAI;QACJ,qKAAqK;KACrK;IACD;QACC,kBAAkB;QAClB,oBAAoB;QACpB,SAAS;QACT,yBAAyB;QACzB,IAAI;QACJ,sGAAsG;KACtG;IACD;QACC,qBAAqB;QACrB,wBAAwB;QACxB,SAAS;QACT,4BAA4B;QAC5B,IAAI;QACJ,gJAAgJ;KAChJ;IACD;QACC,gBAAgB;QAChB,kBAAkB;QAClB,cAAc;QACd,uBAAuB;QACvB,IAAI;QACJ,8NAA8N;KAC9N;IACD;QACC,iBAAiB;QACjB,mBAAmB;QACnB,eAAe;QACf,wBAAwB;QACxB,IAAI;QACJ,2EAA2E;KAC3E;IACD;QACC,eAAe;QACf,iBAAiB;QACjB,QAAQ;QACR,sBAAsB;QACtB,IAAI;QACJ,wWAAwW;KACxW;IACD;QACC,cAAc;QACd,gBAAgB;QAChB,YAAY;QACZ,gCAAgC;QAChC,IAAI;QACJ,+KAA+K;KAC/K;CACQ,CAAA;AAEV,2GAA2G;AAC3G,MAAM,UAAU,YAAY,CAAC,MAAiB,EAAE,KAA8B;IAC7E,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,YAAY,CAAC;QAAE,OAAO,KAAK,CAAA;IAC/F,MAAM,EAAE,KAAK,EAAE,GAAG,IAAI,EAAE,GAAG,KAAK,CAAA;IAChC,OAAO,EAAE,GAAG,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAA;AACrC,CAAC"}

package/dist/search-filters.js

@@ -35,7 +35,7 @@ export const STORE_SPECIFIC_FILTERS = [
  * can never drift because both read STORE_SPECIFIC_FILTERS.
  */
 export function describeStoreConstraints() {
-    const lines = STORE_SPECIFIC_FILTERS.map((f) => `\`${f.field}\` only applies to ${f.supportedStores.join('/')} — omit it or include one of those stores in \`stores\``);
+    const lines = STORE_SPECIFIC_FILTERS.map((f) => `\`${f.field}\` only applies to ${f.supportedStores.join('/')}; combining it with a \`stores\` filter that excludes those stores is rejected`);
     return `Store-specific constraints (validated client-side, before any request): ${lines.join('; ')}.`;
 }
 /**

package/dist/search-filters.js.map

@@ -1 +1 @@
-{"version":3,"file":"search-filters.js","sourceRoot":"","sources":["../src/search-filters.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAaH,MAAM,CAAC,MAAM,sBAAsB,GAAmC;IACrE;QACC,KAAK,EAAE,oBAAoB;QAC3B,eAAe,EAAE,CAAC,SAAS,CAAC;QAC5B,IAAI,EACH,uFAAuF;YACvF,yFAAyF;YACzF,6EAA6E;KAC9E;CACD,CAAA;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,wBAAwB;IACvC,MAAM,KAAK,GAAG,sBAAsB,CAAC,GAAG,CACvC,CAAC,CAAC,EAAE,EAAE,CACL,KAAK,CAAC,CAAC,KAAK,sBAAsB,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,yDAAyD,CACvH,CAAA;IACD,OAAO,2EAA2E,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAA;AACtG,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CAAC,IAA6B;IAClE,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAE,IAAI,CAAC,MAAmB,CAAC,CAAC,CAAC,IAAI,CAAA;IAC5E,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA;IAC/C,KAAK,MAAM,CAAC,IAAI,sBAAsB,EAAE,CAAC;QACxC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,SAAS,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,IAAI;YAAE,SAAQ;QACnE,MAAM,SAAS,GAAG,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAA;QACnE,IAAI,CAAC,SAAS,EAAE,CAAC;YAChB,OAAO,oBAAoB,CAAC,CAAC,IAAI,uBAAuB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAA;QAC7E,CAAC;IACF,CAAC;IACD,OAAO,IAAI,CAAA;AACZ,CAAC"}
+{"version":3,"file":"search-filters.js","sourceRoot":"","sources":["../src/search-filters.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAaH,MAAM,CAAC,MAAM,sBAAsB,GAAmC;IACrE;QACC,KAAK,EAAE,oBAAoB;QAC3B,eAAe,EAAE,CAAC,SAAS,CAAC;QAC5B,IAAI,EACH,uFAAuF;YACvF,yFAAyF;YACzF,6EAA6E;KAC9E;CACD,CAAA;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,wBAAwB;IACvC,MAAM,KAAK,GAAG,sBAAsB,CAAC,GAAG,CACvC,CAAC,CAAC,EAAE,EAAE,CACL,KAAK,CAAC,CAAC,KAAK,sBAAsB,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,gFAAgF,CAC9I,CAAA;IACD,OAAO,2EAA2E,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAA;AACtG,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CAAC,IAA6B;IAClE,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAE,IAAI,CAAC,MAAmB,CAAC,CAAC,CAAC,IAAI,CAAA;IAC5E,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA;IAC/C,KAAK,MAAM,CAAC,IAAI,sBAAsB,EAAE,CAAC;QACxC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,SAAS,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,IAAI;YAAE,SAAQ;QACnE,MAAM,SAAS,GAAG,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAA;QACnE,IAAI,CAAC,SAAS,EAAE,CAAC;YAChB,OAAO,oBAAoB,CAAC,CAAC,IAAI,uBAAuB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAA;QAC7E,CAAC;IACF,CAAC;IACD,OAAO,IAAI,CAAA;AACZ,CAAC"}

package/dist/shape.d.ts

@@ -39,6 +39,14 @@ export declare function shapeReviews(result: unknown, limit: number): Obj;
  * Reduces each browser's warnings to their human-readable lines for terseness.
  */
 export declare function shapeInstallDialog(preview: unknown): Obj | undefined;
+/** Capability phrase for a scanner key; unknown keys get a generic phrase, never the raw name. */
+export declare function scannerPhrase(scanner: unknown): string | undefined;
+/**
+ * Some rule ids carry the scanner key as a namespace (`jstap:document-cookie-access`);
+ * the same string is often the finding title. Drop a known scanner prefix so the
+ * tool name never leaks through the rule or title either.
+ */
+export declare function stripScannerPrefix(value: unknown): unknown;
 /** Curate the security view: risk summary + grouped findings (top N per severity). */
 export declare function shapeSecurity(security: unknown, riskSummary: unknown, installDialogPreview?: unknown): Obj;
 /**
@@ -68,5 +76,31 @@ export declare function shapeStoreRiskBatch(rows: unknown, requested: Array<{
     storeId: string;
     store: string;
 }>): Obj;
+/** Facet groups `market_overview` can return, selectable via its `facets` argument. */
+export declare const MARKET_FACETS: readonly ["stats", "stores", "categories", "extended", "questionnaire", "downloads"];
+export type MarketFacet = (typeof MARKET_FACETS)[number];
+/** Default number of entries kept per open-ended facet list (categories, permissions, sites). */
+export declare const DEFAULT_MARKET_TOP_N = 10;
+export declare const MAX_MARKET_TOP_N = 100;
+export interface MarketOverviewInput {
+    scope: 'search' | 'catalog-wide';
+    stats?: unknown;
+    /** Raw facets as the BFF returns them (search facets, or the catalog-wide assembly). */
+    facets?: unknown;
+    note?: string;
+}
+export interface MarketShapeOpts {
+    facets?: readonly string[];
+    topN?: number;
+}
+/**
+ * Trim a market_overview payload for the model's context: pick the requested
+ * facet groups (default: all), cut open-ended lists to the `topN` largest
+ * entries, and reduce category nodes to name/slug/count. Counts are passed
+ * through unchanged — this shapes the response, it does not recompute data.
+ * A `truncated` map says how many entries each trimmed list dropped, so the
+ * caller knows when a larger `top_n` would reveal more.
+ */
+export declare function shapeMarketOverview(input: MarketOverviewInput, opts?: MarketShapeOpts): Obj;
 export {};
 //# sourceMappingURL=shape.d.ts.map

package/dist/shape.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"shape.d.ts","sourceRoot":"","sources":["../src/shape.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,UAAU,WAAW;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAA;CACjB;AAED,mFAAmF;AACnF,wBAAgB,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,GAAE,WAAgB,EAAE,KAAK,SAAI,GAAG,OAAO,CAqBlF;AAED,KAAK,GAAG,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;AA6DlC,+DAA+D;AAC/D,wBAAgB,WAAW,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,GAAG,GAAG,CAS/D;AAED,6DAA6D;AAC7D,wBAAgB,cAAc,CAAC,MAAM,EAAE,OAAO,GAAG,OAAO,CAkCvD;AAuDD;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,GAAG,GAAG,CAUhE;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,OAAO,GAAG,GAAG,GAAG,SAAS,CAqBpE;AAkBD,sFAAsF;AACtF,wBAAgB,aAAa,CAAC,QAAQ,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,oBAAoB,CAAC,EAAE,OAAO,GAAG,GAAG,CAkD1G;AAKD;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,OAAO,GAAG,GAAG,CA+BnD;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CAClC,IAAI,EAAE,OAAO,EACb,SAAS,EAAE,KAAK,CAAC;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,GAClD,GAAG,CAiBL"}
+{"version":3,"file":"shape.d.ts","sourceRoot":"","sources":["../src/shape.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,UAAU,WAAW;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAA;CACjB;AAED,mFAAmF;AACnF,wBAAgB,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,GAAE,WAAgB,EAAE,KAAK,SAAI,GAAG,OAAO,CAqBlF;AAED,KAAK,GAAG,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;AA6DlC,+DAA+D;AAC/D,wBAAgB,WAAW,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,GAAG,GAAG,CAS/D;AAED,6DAA6D;AAC7D,wBAAgB,cAAc,CAAC,MAAM,EAAE,OAAO,GAAG,OAAO,CAkCvD;AAuDD;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,GAAG,GAAG,CAUhE;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,OAAO,GAAG,GAAG,GAAG,SAAS,CAqBpE;AAsBD,kGAAkG;AAClG,wBAAgB,aAAa,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAGlE;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAK1D;AAkBD,sFAAsF;AACtF,wBAAgB,aAAa,CAAC,QAAQ,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,oBAAoB,CAAC,EAAE,OAAO,GAAG,GAAG,CAkD1G;AAKD;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,OAAO,GAAG,GAAG,CA+BnD;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CAClC,IAAI,EAAE,OAAO,EACb,SAAS,EAAE,KAAK,CAAC;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,GAClD,GAAG,CAiBL;AAID,uFAAuF;AACvF,eAAO,MAAM,aAAa,sFAOhB,CAAA;AACV,MAAM,MAAM,WAAW,GAAG,CAAC,OAAO,aAAa,CAAC,CAAC,MAAM,CAAC,CAAA;AAExD,iGAAiG;AACjG,eAAO,MAAM,oBAAoB,KAAK,CAAA;AACtC,eAAO,MAAM,gBAAgB,MAAM,CAAA;AAEnC,MAAM,WAAW,mBAAmB;IACnC,KAAK,EAAE,QAAQ,GAAG,cAAc,CAAA;IAChC,KAAK,CAAC,EAAE,OAAO,CAAA;IACf,wFAAwF;IACxF,MAAM,CAAC,EAAE,OAAO,CAAA;IAChB,IAAI,CAAC,EAAE,MAAM,CAAA;CACb;AAED,MAAM,WAAW,eAAe;IAC/B,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IAC1B,IAAI,CAAC,EAAE,MAAM,CAAA;CACb;AA0CD;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,mBAAmB,EAAE,IAAI,GAAE,eAAoB,GAAG,GAAG,CAmD/F"}