@lerianstudio/matcher-mcp 1.0.0-beta.5

package/dist/tools/dashboard/shared.js

@@ -0,0 +1,122 @@
+// Shared plumbing for the curated dashboard tools.
+//
+// The dashboard family is a set of seven PURE READS over a context's reporting
+// surface — combined aggregates plus six focused slices (cash-impact, match-rate,
+// metrics, sla, source-breakdown, volume). They are NOT CRUD: every op is a GET
+// hanging off /v1/reports/contexts/{contextId}/dashboard[/<slice>] and every op
+// shares the IDENTICAL inputs — a contextId path param plus an optional
+// date_from/date_to/source_id query. This module factors all of that exactly
+// once (the base path + slice builder, the shared input shape, the query
+// builder, and the relay boilerplate) so the seven tools stay thin (just "name
+// the slice") and so curated + generic surfaces map matcher errors through the
+// identical path (toToolError).
+//
+// Security: the bearer token is never read here directly — requireMatcherClient
+// owns the request-scoped relay and fails closed when no usable credential was
+// provided. The contextId path param is a routing identifier (matcher validates
+// the context belongs to the relayed token's tenant); no tenant identifier is
+// ever read or injected, and no dashboard tool input carries one. source_id is a
+// data filter, never a tenant field.
+import { z } from 'zod';
+import { requireMatcherClient, UnauthenticatedError, } from '../../auth/request-token.js';
+import { isMatcherApiError, toToolError } from '../tool-error.js';
+/** Build the context-scoped dashboard base path (the combined-aggregates op). */
+export function contextDashboardPath(contextId) {
+    return `/v1/reports/contexts/${encodeURIComponent(contextId)}/dashboard`;
+}
+/**
+ * Build a focused dashboard slice path (cash-impact, match-rate, metrics, sla,
+ * source-breakdown, volume) under the context's dashboard base. The slice is a
+ * fixed literal owned by each tool, never caller input, so it is appended raw.
+ */
+export function contextDashboardSlicePath(contextId, slice) {
+    return `${contextDashboardPath(contextId)}/${slice}`;
+}
+/**
+ * Zod raw shape shared by all seven dashboard reads: the contextId path param
+ * plus the optional date_from/date_to/source_id query. Spread into each tool's
+ * inputSchema so the seven stay byte-identical and a single edit covers them all.
+ *
+ * Dates are YYYY-MM-DD strings; matcher defaults the window (last 30 days ending
+ * tomorrow UTC) when omitted and enforces a <=90-day span — we relay the bounds
+ * verbatim and let matcher own that validation (a 90-day breach surfaces as a
+ * structured RFC 9457 error). contextId and source_id are routing/data params,
+ * NOT tenant fields.
+ */
+export const dashboardQueryInputShape = {
+    contextId: z
+        .string()
+        .min(1)
+        .describe('The reconciliation context id (UUID) to report on. Routing path param, ' +
+        'not a tenant field.'),
+    date_from: z
+        .string()
+        .optional()
+        .describe('Start date (YYYY-MM-DD), inclusive. Optional — matcher defaults to 30 ' +
+        'days before date_to. The window may not exceed 90 days.'),
+    date_to: z
+        .string()
+        .optional()
+        .describe('End date (YYYY-MM-DD), inclusive. Optional — matcher defaults to ' +
+        'tomorrow (UTC). The window may not exceed 90 days.'),
+    source_id: z
+        .string()
+        .optional()
+        .describe('Optional source id (UUID) to scope the report to a single source. A ' +
+        'data filter, not a tenant field.'),
+};
+/**
+ * Build the shared dashboard query, omitting unset knobs so the request stays
+ * minimal (and matcher applies its own window defaults). contextId is a path
+ * param and is intentionally excluded here.
+ */
+export function buildDashboardQuery(args) {
+    const query = {};
+    if (args.date_from !== undefined) {
+        query.date_from = args.date_from;
+    }
+    if (args.date_to !== undefined) {
+        query.date_to = args.date_to;
+    }
+    if (args.source_id !== undefined) {
+        query.source_id = args.source_id;
+    }
+    return Object.keys(query).length > 0 ? query : undefined;
+}
+/**
+ * Run one assembled request through the relay: fail-closed auth, dispatch, and
+ * RFC 9457 → tool-error mapping — identical to the generic invoke's dispatch so
+ * both surfaces produce the same structured error shape.
+ *
+ * `clientFor` is injectable for tests; production callers pass nothing and get
+ * the request-scoped, fail-closed `requireMatcherClient`.
+ */
+export async function dispatchDashboard(request, extra, clientFor = requireMatcherClient) {
+    let client;
+    try {
+        // Fail-closed on a missing / empty / non-Bearer credential.
+        client = clientFor(extra);
+    }
+    catch (err) {
+        if (err instanceof UnauthenticatedError) {
+            return { isError: true, content: [{ type: 'text', text: err.message }] };
+        }
+        throw err;
+    }
+    try {
+        const result = await client.request(request);
+        // Success → matcher's JSON returned as-is (an empty/204 body → null, though
+        // these reads always return a body).
+        return { content: [{ type: 'text', text: JSON.stringify(result ?? null) }] };
+    }
+    catch (err) {
+        // RFC 9457 problem → the SHARED structured tool error (status/title/detail/
+        // code preserved). A non-matcher error is a bug, not a matcher failure, and
+        // is re-thrown rather than masqueraded as one.
+        if (isMatcherApiError(err)) {
+            return toToolError(err);
+        }
+        throw err;
+    }
+}
+//# sourceMappingURL=shared.js.map

package/dist/tools/dashboard/shared.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shared.js","sourceRoot":"","sources":["../../../src/tools/dashboard/shared.ts"],"names":[],"mappings":"AAAA,mDAAmD;AACnD,EAAE;AACF,+EAA+E;AAC/E,kFAAkF;AAClF,gFAAgF;AAChF,gFAAgF;AAChF,wEAAwE;AACxE,6EAA6E;AAC7E,yEAAyE;AACzE,+EAA+E;AAC/E,+EAA+E;AAC/E,gCAAgC;AAChC,EAAE;AACF,gFAAgF;AAChF,+EAA+E;AAC/E,gFAAgF;AAChF,8EAA8E;AAC9E,iFAAiF;AACjF,qCAAqC;AAErC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAIvB,OAAO,EACL,oBAAoB,EACpB,oBAAoB,GAErB,MAAM,6BAA6B,CAAA;AAEpC,OAAO,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA;AAEjE,iFAAiF;AACjF,MAAM,UAAU,oBAAoB,CAAC,SAAiB;IACpD,OAAO,wBAAwB,kBAAkB,CAAC,SAAS,CAAC,YAAY,CAAA;AAC1E,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,yBAAyB,CACvC,SAAiB,EACjB,KAAa;IAEb,OAAO,GAAG,oBAAoB,CAAC,SAAS,CAAC,IAAI,KAAK,EAAE,CAAA;AACtD,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACtC,SAAS,EAAE,CAAC;SACT,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,CACP,yEAAyE;QACvE,qBAAqB,CACxB;IACH,SAAS,EAAE,CAAC;SACT,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CACP,wEAAwE;QACtE,yDAAyD,CAC5D;IACH,OAAO,EAAE,CAAC;SACP,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CACP,mEAAmE;QACjE,oDAAoD,CACvD;IACH,SAAS,EAAE,CAAC;SACT,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CACP,sEAAsE;QACpE,kCAAkC,CACrC;CACJ,CAAA;AAOD;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CACjC,IAAyB;IAEzB,MAAM,KAAK,GAA2B,EAAE,CAAA;IACxC,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QACjC,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAA;IAClC,CAAC;IACD,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAC/B,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAA;IAC9B,CAAC;IACD,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QACjC,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAA;IAClC,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAA;AAC1D,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,OAAuB,EACvB,KAAmC,EACnC,YAAyD,oBAAoB;IAE7E,IAAI,MAAqB,CAAA;IACzB,IAAI,CAAC;QACH,4DAA4D;QAC5D,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,CAAA;IAC3B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,oBAAoB,EAAE,CAAC;YACxC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,EAAE,CAAA;QAC1E,CAAC;QACD,MAAM,GAAG,CAAA;IACX,CAAC;IAED,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;QAC5C,4EAA4E;QAC5E,qCAAqC;QACrC,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,IAAI,IAAI,CAAC,EAAE,CAAC,EAAE,CAAA;IAC9E,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,4EAA4E;QAC5E,4EAA4E;QAC5E,+CAA+C;QAC/C,IAAI,iBAAiB,CAAC,GAAG,CAAC,EAAE,CAAC;YAC3B,OAAO,WAAW,CAAC,GAAG,CAAC,CAAA;QACzB,CAAC;QACD,MAAM,GAAG,CAAA;IACX,CAAC;AACH,CAAC"}

package/dist/tools/dashboard/sla.js

@@ -0,0 +1,33 @@
+// `dashboard_sla` — curated GET /v1/reports/contexts/{contextId}/dashboard/sla.
+//
+// SLA compliance statistics over the window (spec operationId getSLAStats).
+// Shares the family input shape (contextId path + optional date_from/date_to/
+// source_id query) and the fail-closed relay. contextId is a routing path param
+// and source_id a data filter — neither is a tenant field, and no tenant field
+// is accepted.
+import { buildDashboardQuery, contextDashboardSlicePath, dashboardQueryInputShape, dispatchDashboard, } from './shared.js';
+/** Zod raw shape for `dashboard_sla` input — the shared dashboard shape. */
+export const dashboardSlaInputShape = dashboardQueryInputShape;
+/**
+ * Register `dashboard_sla`. Dispatches a GET to the context's /dashboard/sla
+ * slice with the optional date/source query and returns matcher's SLA stats
+ * verbatim; a matcher error surfaces via the shared toToolError.
+ */
+export function registerDashboardSlaTool(server) {
+    server.registerTool('dashboard_sla', {
+        description: 'Get the SLA compliance statistics for a reconciliation context. Pass ' +
+            'contextId (UUID path param — not a tenant field), and optionally ' +
+            'date_from/date_to (YYYY-MM-DD; matcher defaults to the last 30 days and ' +
+            'caps the window at 90 days) and/or source_id (UUID data filter). No ' +
+            'tenant field is accepted.',
+        inputSchema: dashboardSlaInputShape,
+    }, async (args, extra) => {
+        const query = buildDashboardQuery(args);
+        return dispatchDashboard({
+            method: 'GET',
+            path: contextDashboardSlicePath(args.contextId, 'sla'),
+            ...(query !== undefined ? { query } : {}),
+        }, extra);
+    });
+}
+//# sourceMappingURL=sla.js.map

package/dist/tools/dashboard/sla.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sla.js","sourceRoot":"","sources":["../../../src/tools/dashboard/sla.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,EAAE;AACF,4EAA4E;AAC5E,8EAA8E;AAC9E,gFAAgF;AAChF,+EAA+E;AAC/E,eAAe;AAIf,OAAO,EACL,mBAAmB,EACnB,yBAAyB,EACzB,wBAAwB,EACxB,iBAAiB,GAClB,MAAM,aAAa,CAAA;AAEpB,4EAA4E;AAC5E,MAAM,CAAC,MAAM,sBAAsB,GAAG,wBAAwB,CAAA;AAE9D;;;;GAIG;AACH,MAAM,UAAU,wBAAwB,CAAC,MAAiB;IACxD,MAAM,CAAC,YAAY,CACjB,eAAe,EACf;QACE,WAAW,EACT,uEAAuE;YACvE,mEAAmE;YACnE,0EAA0E;YAC1E,sEAAsE;YACtE,2BAA2B;QAC7B,WAAW,EAAE,sBAAsB;KACpC,EACD,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE;QACpB,MAAM,KAAK,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAA;QACvC,OAAO,iBAAiB,CACtB;YACE,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,yBAAyB,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC;YACtD,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC1C,EACD,KAAK,CACN,CAAA;IACH,CAAC,CACF,CAAA;AACH,CAAC"}

package/dist/tools/dashboard/source-breakdown.js

@@ -0,0 +1,36 @@
+// `dashboard_source_breakdown` — curated GET
+// /v1/reports/contexts/{contextId}/dashboard/source-breakdown.
+//
+// Per-source reconciliation statistics for the context over the window (spec
+// operationId getSourceBreakdown). Shares the family input shape (contextId path
+// + optional date_from/date_to/source_id query) and the fail-closed relay.
+// contextId is a routing path param and source_id a data filter — neither is a
+// tenant field, and no tenant field is accepted.
+import { buildDashboardQuery, contextDashboardSlicePath, dashboardQueryInputShape, dispatchDashboard, } from './shared.js';
+/** Zod raw shape for `dashboard_source_breakdown` input — the shared dashboard shape. */
+export const dashboardSourceBreakdownInputShape = dashboardQueryInputShape;
+/**
+ * Register `dashboard_source_breakdown`. Dispatches a GET to the context's
+ * /dashboard/source-breakdown slice with the optional date/source query and
+ * returns matcher's per-source breakdown verbatim; a matcher error surfaces via
+ * the shared toToolError.
+ */
+export function registerDashboardSourceBreakdownTool(server) {
+    server.registerTool('dashboard_source_breakdown', {
+        description: 'Get the per-source reconciliation breakdown for a context (statistics ' +
+            'grouped by source). Pass contextId (UUID path param — not a tenant ' +
+            'field), and optionally date_from/date_to (YYYY-MM-DD; matcher defaults ' +
+            'to the last 30 days and caps the window at 90 days) and/or source_id ' +
+            '(UUID data filter, to narrow to a single source). No tenant field is ' +
+            'accepted.',
+        inputSchema: dashboardSourceBreakdownInputShape,
+    }, async (args, extra) => {
+        const query = buildDashboardQuery(args);
+        return dispatchDashboard({
+            method: 'GET',
+            path: contextDashboardSlicePath(args.contextId, 'source-breakdown'),
+            ...(query !== undefined ? { query } : {}),
+        }, extra);
+    });
+}
+//# sourceMappingURL=source-breakdown.js.map

package/dist/tools/dashboard/source-breakdown.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"source-breakdown.js","sourceRoot":"","sources":["../../../src/tools/dashboard/source-breakdown.ts"],"names":[],"mappings":"AAAA,6CAA6C;AAC7C,+DAA+D;AAC/D,EAAE;AACF,6EAA6E;AAC7E,iFAAiF;AACjF,2EAA2E;AAC3E,+EAA+E;AAC/E,iDAAiD;AAIjD,OAAO,EACL,mBAAmB,EACnB,yBAAyB,EACzB,wBAAwB,EACxB,iBAAiB,GAClB,MAAM,aAAa,CAAA;AAEpB,yFAAyF;AACzF,MAAM,CAAC,MAAM,kCAAkC,GAAG,wBAAwB,CAAA;AAE1E;;;;;GAKG;AACH,MAAM,UAAU,oCAAoC,CAAC,MAAiB;IACpE,MAAM,CAAC,YAAY,CACjB,4BAA4B,EAC5B;QACE,WAAW,EACT,wEAAwE;YACxE,qEAAqE;YACrE,yEAAyE;YACzE,uEAAuE;YACvE,uEAAuE;YACvE,WAAW;QACb,WAAW,EAAE,kCAAkC;KAChD,EACD,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE;QACpB,MAAM,KAAK,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAA;QACvC,OAAO,iBAAiB,CACtB;YACE,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,yBAAyB,CAAC,IAAI,CAAC,SAAS,EAAE,kBAAkB,CAAC;YACnE,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC1C,EACD,KAAK,CACN,CAAA;IACH,CAAC,CACF,CAAA;AACH,CAAC"}

package/dist/tools/dashboard/volume.js

@@ -0,0 +1,35 @@
+// `dashboard_volume` — curated GET
+// /v1/reports/contexts/{contextId}/dashboard/volume.
+//
+// Transaction volume statistics over the window (spec operationId
+// getVolumeStats). Shares the family input shape (contextId path + optional
+// date_from/date_to/source_id query) and the fail-closed relay. contextId is a
+// routing path param and source_id a data filter — neither is a tenant field,
+// and no tenant field is accepted.
+import { buildDashboardQuery, contextDashboardSlicePath, dashboardQueryInputShape, dispatchDashboard, } from './shared.js';
+/** Zod raw shape for `dashboard_volume` input — the shared dashboard shape. */
+export const dashboardVolumeInputShape = dashboardQueryInputShape;
+/**
+ * Register `dashboard_volume`. Dispatches a GET to the context's
+ * /dashboard/volume slice with the optional date/source query and returns
+ * matcher's volume stats verbatim; a matcher error surfaces via the shared
+ * toToolError.
+ */
+export function registerDashboardVolumeTool(server) {
+    server.registerTool('dashboard_volume', {
+        description: 'Get the transaction volume statistics for a reconciliation context. ' +
+            'Pass contextId (UUID path param — not a tenant field), and optionally ' +
+            'date_from/date_to (YYYY-MM-DD; matcher defaults to the last 30 days and ' +
+            'caps the window at 90 days) and/or source_id (UUID data filter). No ' +
+            'tenant field is accepted.',
+        inputSchema: dashboardVolumeInputShape,
+    }, async (args, extra) => {
+        const query = buildDashboardQuery(args);
+        return dispatchDashboard({
+            method: 'GET',
+            path: contextDashboardSlicePath(args.contextId, 'volume'),
+            ...(query !== undefined ? { query } : {}),
+        }, extra);
+    });
+}
+//# sourceMappingURL=volume.js.map

package/dist/tools/dashboard/volume.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"volume.js","sourceRoot":"","sources":["../../../src/tools/dashboard/volume.ts"],"names":[],"mappings":"AAAA,mCAAmC;AACnC,qDAAqD;AACrD,EAAE;AACF,kEAAkE;AAClE,4EAA4E;AAC5E,+EAA+E;AAC/E,8EAA8E;AAC9E,mCAAmC;AAInC,OAAO,EACL,mBAAmB,EACnB,yBAAyB,EACzB,wBAAwB,EACxB,iBAAiB,GAClB,MAAM,aAAa,CAAA;AAEpB,+EAA+E;AAC/E,MAAM,CAAC,MAAM,yBAAyB,GAAG,wBAAwB,CAAA;AAEjE;;;;;GAKG;AACH,MAAM,UAAU,2BAA2B,CAAC,MAAiB;IAC3D,MAAM,CAAC,YAAY,CACjB,kBAAkB,EAClB;QACE,WAAW,EACT,sEAAsE;YACtE,wEAAwE;YACxE,0EAA0E;YAC1E,sEAAsE;YACtE,2BAA2B;QAC7B,WAAW,EAAE,yBAAyB;KACvC,EACD,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE;QACpB,MAAM,KAAK,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAA;QACvC,OAAO,iBAAiB,CACtB;YACE,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,yBAAyB,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC;YACzD,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC1C,EACD,KAAK,CACN,CAAA;IACH,CAAC,CACF,CAAA;AACH,CAAC"}

package/dist/tools/dispute/close.js

@@ -0,0 +1,49 @@
+// `dispute_close` — curated POST /v1/disputes/{disputeId}/close.
+//
+// A custom action (not CRUD): closes a dispute with a final resolution, marking
+// it won or lost. Mirrors the spec's CloseDisputeRequest — `won` (boolean) and
+// `resolution` (1–5000 chars) are both required. disputeId is a UUID path param
+// and is stripped from the POST body; no tenant field is accepted.
+import { z } from 'zod';
+import { disputeClosePath, dispatchDispute } from './shared.js';
+/** Zod raw shape for `dispute_close` input — id (path) + the resolution body. */
+export const closeDisputeInputShape = {
+    disputeId: z.string().min(1).describe('The dispute id (UUID) to close.'),
+    won: z
+        .boolean()
+        .describe('Whether the dispute was won (true) or lost (false).'),
+    resolution: z
+        .string()
+        .min(1)
+        .max(5000)
+        .describe('Resolution description recorded against the dispute (1–5000 chars), e.g. ' +
+        '"Counterparty acknowledged the error and issued correction".'),
+};
+/** Build the close POST body from the input minus the path-only `disputeId`. */
+export function buildCloseBody(args) {
+    const { disputeId: _disputeId, ...body } = args;
+    void _disputeId;
+    return body;
+}
+/**
+ * Register `dispute_close`. Splits the id (path) from the body, dispatches a POST
+ * to the dispute's /close sub-path through the shared fail-closed relay, and
+ * returns the updated dispute; a matcher error surfaces via the shared
+ * toToolError.
+ */
+export function registerDisputeCloseTool(server) {
+    server.registerTool('dispute_close', {
+        description: 'Close a dispute with a final resolution (by id, UUID). Provide won ' +
+            '(boolean: true if the dispute was won) and resolution (1–5000 chars ' +
+            'describing the outcome) — both required. Returns the updated dispute, ' +
+            'or a structured RFC 9457 error. No tenant field is accepted.',
+        inputSchema: closeDisputeInputShape,
+    }, async (args, extra) => {
+        return dispatchDispute({
+            method: 'POST',
+            path: disputeClosePath(args.disputeId),
+            body: buildCloseBody(args),
+        }, extra);
+    });
+}
+//# sourceMappingURL=close.js.map

package/dist/tools/dispute/close.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"close.js","sourceRoot":"","sources":["../../../src/tools/dispute/close.ts"],"names":[],"mappings":"AAAA,iEAAiE;AACjE,EAAE;AACF,gFAAgF;AAChF,+EAA+E;AAC/E,gFAAgF;AAChF,mEAAmE;AAEnE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAIvB,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAE/D,iFAAiF;AACjF,MAAM,CAAC,MAAM,sBAAsB,GAAG;IACpC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,iCAAiC,CAAC;IACxE,GAAG,EAAE,CAAC;SACH,OAAO,EAAE;SACT,QAAQ,CAAC,qDAAqD,CAAC;IAClE,UAAU,EAAE,CAAC;SACV,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,IAAI,CAAC;SACT,QAAQ,CACP,2EAA2E;QACzE,8DAA8D,CACjE;CACJ,CAAA;AAOD,gFAAgF;AAChF,MAAM,UAAU,cAAc,CAC5B,IAAuB;IAEvB,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,IAAI,EAAE,GAAG,IAAI,CAAA;IAC/C,KAAK,UAAU,CAAA;IACf,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,wBAAwB,CAAC,MAAiB;IACxD,MAAM,CAAC,YAAY,CACjB,eAAe,EACf;QACE,WAAW,EACT,qEAAqE;YACrE,sEAAsE;YACtE,wEAAwE;YACxE,8DAA8D;QAChE,WAAW,EAAE,sBAAsB;KACpC,EACD,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE;QACpB,OAAO,eAAe,CACpB;YACE,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC;YACtC,IAAI,EAAE,cAAc,CAAC,IAAI,CAAC;SAC3B,EACD,KAAK,CACN,CAAA;IACH,CAAC,CACF,CAAA;AACH,CAAC"}

package/dist/tools/dispute/get.js

@@ -0,0 +1,27 @@
+// `dispute_get` — curated GET /v1/disputes/{disputeId}.
+//
+// Reads one dispute by id. disputeId is the only input (a UUID path param). The
+// dispute must belong to the relayed token's tenant — matcher enforces that; no
+// tenant field is accepted.
+import { z } from 'zod';
+import { disputePath, dispatchDispute } from './shared.js';
+/** Zod raw shape for `dispute_get` input — just the dispute id. */
+export const getDisputeInputShape = {
+    disputeId: z.string().min(1).describe('The dispute id (UUID) to fetch.'),
+};
+/**
+ * Register `dispute_get`. Substitutes the id into the path and dispatches a GET
+ * through the shared fail-closed relay; a matcher error (e.g. 404) surfaces via
+ * the shared toToolError.
+ */
+export function registerDisputeGetTool(server) {
+    server.registerTool('dispute_get', {
+        description: 'Fetch a single dispute by id (UUID). The dispute must belong to your ' +
+            "token's tenant. Returns the dispute, or a structured RFC 9457 error " +
+            '(e.g. 404 if it does not exist or is not yours).',
+        inputSchema: getDisputeInputShape,
+    }, async (args, extra) => {
+        return dispatchDispute({ method: 'GET', path: disputePath(args.disputeId) }, extra);
+    });
+}
+//# sourceMappingURL=get.js.map

package/dist/tools/dispute/get.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"get.js","sourceRoot":"","sources":["../../../src/tools/dispute/get.ts"],"names":[],"mappings":"AAAA,wDAAwD;AACxD,EAAE;AACF,gFAAgF;AAChF,gFAAgF;AAChF,4BAA4B;AAE5B,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAIvB,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAE1D,mEAAmE;AACnE,MAAM,CAAC,MAAM,oBAAoB,GAAG;IAClC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,iCAAiC,CAAC;CACzE,CAAA;AAKD;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CAAC,MAAiB;IACtD,MAAM,CAAC,YAAY,CACjB,aAAa,EACb;QACE,WAAW,EACT,uEAAuE;YACvE,sEAAsE;YACtE,kDAAkD;QACpD,WAAW,EAAE,oBAAoB;KAClC,EACD,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE;QACpB,OAAO,eAAe,CACpB,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EACpD,KAAK,CACN,CAAA;IACH,CAAC,CACF,CAAA;AACH,CAAC"}

package/dist/tools/dispute/index.js

@@ -0,0 +1,17 @@
+// Curated dispute vertical: four typed tools over the matcher dispute resource —
+// list, get, close, submit-evidence — covering the dispute lifecycle surface.
+// Each tool shares the fail-closed relay (shared.ts) and the RFC 9457 →
+// tool-error mapping (toToolError) with the generic surface, so curated and
+// generic map matcher errors identically. No tool carries a tenant field.
+import { registerDisputeCloseTool } from './close.js';
+import { registerDisputeGetTool } from './get.js';
+import { registerDisputeListTool } from './list.js';
+import { registerDisputeSubmitEvidenceTool } from './submit-evidence.js';
+/** Register all four curated dispute tools on the given server. */
+export function registerDisputeTools(server) {
+    registerDisputeListTool(server);
+    registerDisputeGetTool(server);
+    registerDisputeCloseTool(server);
+    registerDisputeSubmitEvidenceTool(server);
+}
+//# sourceMappingURL=index.js.map

package/dist/tools/dispute/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/tools/dispute/index.ts"],"names":[],"mappings":"AAAA,iFAAiF;AACjF,8EAA8E;AAC9E,wEAAwE;AACxE,4EAA4E;AAC5E,0EAA0E;AAI1E,OAAO,EAAE,wBAAwB,EAAE,MAAM,YAAY,CAAA;AACrD,OAAO,EAAE,sBAAsB,EAAE,MAAM,UAAU,CAAA;AACjD,OAAO,EAAE,uBAAuB,EAAE,MAAM,WAAW,CAAA;AACnD,OAAO,EAAE,iCAAiC,EAAE,MAAM,sBAAsB,CAAA;AAExE,mEAAmE;AACnE,MAAM,UAAU,oBAAoB,CAAC,MAAiB;IACpD,uBAAuB,CAAC,MAAM,CAAC,CAAA;IAC/B,sBAAsB,CAAC,MAAM,CAAC,CAAA;IAC9B,wBAAwB,CAAC,MAAM,CAAC,CAAA;IAChC,iCAAiC,CAAC,MAAM,CAAC,CAAA;AAC3C,CAAC"}

package/dist/tools/dispute/list.js

@@ -0,0 +1,137 @@
+// `dispute_list` — curated GET /v1/disputes.
+//
+// Cursor-paginated list of the tenant's disputes, with optional state/category
+// filters, a date-range window, and sort knobs. Filters/pagination pass through
+// to matcher and its { items, nextCursor, ... } envelope is returned as-is — no
+// auto-pagination (the model re-calls with the returned cursor). The list is
+// implicitly tenant-scoped by the relayed token; no tenant field is accepted.
+//
+// Input field names are idiomatic camelCase; they map to matcher's snake_case
+// wire query params (date_from/date_to/sort_by/sort_order) in buildListQuery.
+import { z } from 'zod';
+import { dispatchDispute, DISPUTES_PATH } from './shared.js';
+/** Lifecycle states a dispute can be filtered by. */
+export const DISPUTE_STATES = [
+    'DRAFT',
+    'OPEN',
+    'PENDING_EVIDENCE',
+    'WON',
+    'LOST',
+];
+/** Categories a dispute can be filtered by. */
+export const DISPUTE_CATEGORIES = [
+    'BANK_FEE_ERROR',
+    'UNRECOGNIZED_CHARGE',
+    'DUPLICATE_TRANSACTION',
+    'OTHER',
+];
+/** Fields the dispute list can be sorted by. */
+export const DISPUTE_SORT_FIELDS = [
+    'id',
+    'created_at',
+    'updated_at',
+    'state',
+    'category',
+];
+/** Sort directions matcher supports. */
+export const DISPUTE_SORT_ORDERS = ['asc', 'desc'];
+/** Zod raw shape for `dispute_list` input — filters, date window, pagination, sort. */
+export const listDisputesInputShape = {
+    state: z
+        .enum(DISPUTE_STATES)
+        .optional()
+        .describe('Filter by lifecycle state (DRAFT|OPEN|PENDING_EVIDENCE|WON|LOST). Omit ' +
+        'to list all.'),
+    category: z
+        .enum(DISPUTE_CATEGORIES)
+        .optional()
+        .describe('Filter by category (BANK_FEE_ERROR|UNRECOGNIZED_CHARGE|' +
+        'DUPLICATE_TRANSACTION|OTHER). Omit to list all.'),
+    dateFrom: z
+        .string()
+        .optional()
+        .describe('Inclusive lower bound on the filter date, as an RFC 3339 timestamp, e.g. ' +
+        '"2025-01-01T00:00:00Z". Sent as the date_from query param.'),
+    dateTo: z
+        .string()
+        .optional()
+        .describe('Inclusive upper bound on the filter date, as an RFC 3339 timestamp, e.g. ' +
+        '"2025-01-31T23:59:59Z". Sent as the date_to query param.'),
+    limit: z
+        .number()
+        .int()
+        .min(1)
+        .max(200)
+        .optional()
+        .describe('Maximum number of records to return (1–200, default 20).'),
+    cursor: z
+        .string()
+        .optional()
+        .describe('Opaque pagination cursor from a prior response. Re-call with the ' +
+        'returned nextCursor to page forward (there is no auto-pagination).'),
+    sortBy: z
+        .enum(DISPUTE_SORT_FIELDS)
+        .optional()
+        .describe('Field to sort by (id|created_at|updated_at|state|category). Sent as the ' +
+        'sort_by query param.'),
+    sortOrder: z
+        .enum(DISPUTE_SORT_ORDERS)
+        .optional()
+        .describe('Sort direction (asc|desc). Sent as the sort_order query param.'),
+};
+/**
+ * Build the list query, omitting unset knobs so the request stays minimal. The
+ * camelCase input fields map to matcher's snake_case wire query params.
+ */
+export function buildListQuery(args) {
+    const query = {};
+    if (args.state !== undefined) {
+        query.state = args.state;
+    }
+    if (args.category !== undefined) {
+        query.category = args.category;
+    }
+    if (args.dateFrom !== undefined) {
+        query.date_from = args.dateFrom;
+    }
+    if (args.dateTo !== undefined) {
+        query.date_to = args.dateTo;
+    }
+    if (args.limit !== undefined) {
+        query.limit = args.limit;
+    }
+    if (args.cursor !== undefined) {
+        query.cursor = args.cursor;
+    }
+    if (args.sortBy !== undefined) {
+        query.sort_by = args.sortBy;
+    }
+    if (args.sortOrder !== undefined) {
+        query.sort_order = args.sortOrder;
+    }
+    return Object.keys(query).length > 0 ? query : undefined;
+}
+/**
+ * Register `dispute_list`. Passes the filters/pagination/sort through and returns
+ * matcher's pagination envelope verbatim; a matcher error surfaces via the shared
+ * toToolError.
+ */
+export function registerDisputeListTool(server) {
+    server.registerTool('dispute_list', {
+        description: "List the disputes for your token's tenant (cursor-paginated). Filter by " +
+            'state (DRAFT|OPEN|PENDING_EVIDENCE|WON|LOST), category, and/or an RFC ' +
+            '3339 dateFrom/dateTo window; sort by sortBy/sortOrder; page with limit ' +
+            '(1–200) and cursor. The response carries { items, nextCursor } — ' +
+            'paginate by re-calling with the returned nextCursor. No tenant field is ' +
+            'accepted; the tenant is derived from your bearer token.',
+        inputSchema: listDisputesInputShape,
+    }, async (args, extra) => {
+        const query = buildListQuery(args);
+        return dispatchDispute({
+            method: 'GET',
+            path: DISPUTES_PATH,
+            ...(query !== undefined ? { query } : {}),
+        }, extra);
+    });
+}
+//# sourceMappingURL=list.js.map

package/dist/tools/dispute/list.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"list.js","sourceRoot":"","sources":["../../../src/tools/dispute/list.ts"],"names":[],"mappings":"AAAA,6CAA6C;AAC7C,EAAE;AACF,+EAA+E;AAC/E,gFAAgF;AAChF,gFAAgF;AAChF,6EAA6E;AAC7E,8EAA8E;AAC9E,EAAE;AACF,8EAA8E;AAC9E,8EAA8E;AAE9E,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAKvB,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAE5D,qDAAqD;AACrD,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,OAAO;IACP,MAAM;IACN,kBAAkB;IAClB,KAAK;IACL,MAAM;CACE,CAAA;AAEV,+CAA+C;AAC/C,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,gBAAgB;IAChB,qBAAqB;IACrB,uBAAuB;IACvB,OAAO;CACC,CAAA;AAEV,gDAAgD;AAChD,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,IAAI;IACJ,YAAY;IACZ,YAAY;IACZ,OAAO;IACP,UAAU;CACF,CAAA;AAEV,wCAAwC;AACxC,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,KAAK,EAAE,MAAM,CAAU,CAAA;AAE3D,uFAAuF;AACvF,MAAM,CAAC,MAAM,sBAAsB,GAAG;IACpC,KAAK,EAAE,CAAC;SACL,IAAI,CAAC,cAAc,CAAC;SACpB,QAAQ,EAAE;SACV,QAAQ,CACP,yEAAyE;QACvE,cAAc,CACjB;IACH,QAAQ,EAAE,CAAC;SACR,IAAI,CAAC,kBAAkB,CAAC;SACxB,QAAQ,EAAE;SACV,QAAQ,CACP,yDAAyD;QACvD,iDAAiD,CACpD;IACH,QAAQ,EAAE,CAAC;SACR,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CACP,2EAA2E;QACzE,4DAA4D,CAC/D;IACH,MAAM,EAAE,CAAC;SACN,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CACP,2EAA2E;QACzE,0DAA0D,CAC7D;IACH,KAAK,EAAE,CAAC;SACL,MAAM,EAAE;SACR,GAAG,EAAE;SACL,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,GAAG,CAAC;SACR,QAAQ,EAAE;SACV,QAAQ,CAAC,0DAA0D,CAAC;IACvE,MAAM,EAAE,CAAC;SACN,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CACP,mEAAmE;QACjE,oEAAoE,CACvE;IACH,MAAM,EAAE,CAAC;SACN,IAAI,CAAC,mBAAmB,CAAC;SACzB,QAAQ,EAAE;SACV,QAAQ,CACP,0EAA0E;QACxE,sBAAsB,CACzB;IACH,SAAS,EAAE,CAAC;SACT,IAAI,CAAC,mBAAmB,CAAC;SACzB,QAAQ,EAAE;SACV,QAAQ,CAAC,gEAAgE,CAAC;CAC9E,CAAA;AAOD;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,IAAuB;IACpD,MAAM,KAAK,GAAoC,EAAE,CAAA;IACjD,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAC7B,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAA;IAC1B,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QAChC,KAAK,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAA;IAChC,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QAChC,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAA;IACjC,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC9B,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC,MAAM,CAAA;IAC7B,CAAC;IACD,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAC7B,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAA;IAC1B,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC9B,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAA;IAC5B,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC9B,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC,MAAM,CAAA;IAC7B,CAAC;IACD,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QACjC,KAAK,CAAC,UAAU,GAAG,IAAI,CAAC,SAAS,CAAA;IACnC,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAA;AAC1D,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CAAC,MAAiB;IACvD,MAAM,CAAC,YAAY,CACjB,cAAc,EACd;QACE,WAAW,EACT,0EAA0E;YAC1E,wEAAwE;YACxE,yEAAyE;YACzE,mEAAmE;YACnE,0EAA0E;YAC1E,yDAAyD;QAC3D,WAAW,EAAE,sBAAsB;KACpC,EACD,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE;QACpB,MAAM,KAAK,GAAG,cAAc,CAAC,IAAI,CAAC,CAAA;QAClC,OAAO,eAAe,CACpB;YACE,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,aAAa;YACnB,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC1C,EACD,KAAK,CACN,CAAA;IACH,CAAC,CACF,CAAA;AACH,CAAC"}

package/dist/tools/dispute/shared.js

@@ -0,0 +1,66 @@
+// Shared plumbing for the curated dispute tools.
+//
+// Every dispute tool follows the same relay shape: fail-closed auth via
+// requireMatcherClient, dispatch one assembled MatcherRequest, then return
+// matcher's JSON on success or the SHARED toToolError on a MatcherApiError. This
+// module factors that boilerplate exactly once so the four tools stay thin (just
+// "build the request") and so curated + generic surfaces map matcher errors
+// through the identical path (toToolError).
+//
+// Security: the bearer token is never read here directly — requireMatcherClient
+// owns the request-scoped relay and fails closed when no usable credential was
+// provided. No tenant identifier is ever read or injected (matcher derives
+// tenant from the relayed JWT); no dispute tool input carries one.
+import { requireMatcherClient, UnauthenticatedError, } from '../../auth/request-token.js';
+import { isMatcherApiError, toToolError } from '../tool-error.js';
+/** Base path for the dispute resource (tenant-scoped; tenant from the token). */
+export const DISPUTES_PATH = '/v1/disputes';
+/** Build the single-dispute sub-path, URL-encoding the id so reserved chars are safe. */
+export function disputePath(disputeId) {
+    return `${DISPUTES_PATH}/${encodeURIComponent(disputeId)}`;
+}
+/** Build the `/close` action sub-path for a single dispute. */
+export function disputeClosePath(disputeId) {
+    return `${disputePath(disputeId)}/close`;
+}
+/** Build the `/evidence` action sub-path for a single dispute. */
+export function disputeEvidencePath(disputeId) {
+    return `${disputePath(disputeId)}/evidence`;
+}
+/**
+ * Run one assembled request through the relay: fail-closed auth, dispatch, and
+ * RFC 9457 → tool-error mapping — identical to the generic invoke's dispatch so
+ * both surfaces produce the same structured error shape.
+ *
+ * `clientFor` is injectable for tests; production callers pass nothing and get
+ * the request-scoped, fail-closed `requireMatcherClient`.
+ */
+export async function dispatchDispute(request, extra, clientFor = requireMatcherClient) {
+    let client;
+    try {
+        // Fail-closed on a missing / empty / non-Bearer credential.
+        client = clientFor(extra);
+    }
+    catch (err) {
+        if (err instanceof UnauthenticatedError) {
+            return { isError: true, content: [{ type: 'text', text: err.message }] };
+        }
+        throw err;
+    }
+    try {
+        const result = await client.request(request);
+        // Success → matcher's JSON returned as-is (incl. pagination envelopes and
+        // 204 → null for an empty body).
+        return { content: [{ type: 'text', text: JSON.stringify(result ?? null) }] };
+    }
+    catch (err) {
+        // RFC 9457 problem → the SHARED structured tool error (status/title/detail/
+        // code preserved). A non-matcher error is a bug, not a matcher failure, and
+        // is re-thrown rather than masqueraded as one.
+        if (isMatcherApiError(err)) {
+            return toToolError(err);
+        }
+        throw err;
+    }
+}
+//# sourceMappingURL=shared.js.map

package/dist/tools/dispute/shared.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shared.js","sourceRoot":"","sources":["../../../src/tools/dispute/shared.ts"],"names":[],"mappings":"AAAA,iDAAiD;AACjD,EAAE;AACF,wEAAwE;AACxE,2EAA2E;AAC3E,iFAAiF;AACjF,iFAAiF;AACjF,4EAA4E;AAC5E,4CAA4C;AAC5C,EAAE;AACF,gFAAgF;AAChF,+EAA+E;AAC/E,2EAA2E;AAC3E,mEAAmE;AAInE,OAAO,EACL,oBAAoB,EACpB,oBAAoB,GAErB,MAAM,6BAA6B,CAAA;AAEpC,OAAO,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA;AAEjE,iFAAiF;AACjF,MAAM,CAAC,MAAM,aAAa,GAAG,cAAc,CAAA;AAE3C,yFAAyF;AACzF,MAAM,UAAU,WAAW,CAAC,SAAiB;IAC3C,OAAO,GAAG,aAAa,IAAI,kBAAkB,CAAC,SAAS,CAAC,EAAE,CAAA;AAC5D,CAAC;AAED,+DAA+D;AAC/D,MAAM,UAAU,gBAAgB,CAAC,SAAiB;IAChD,OAAO,GAAG,WAAW,CAAC,SAAS,CAAC,QAAQ,CAAA;AAC1C,CAAC;AAED,kEAAkE;AAClE,MAAM,UAAU,mBAAmB,CAAC,SAAiB;IACnD,OAAO,GAAG,WAAW,CAAC,SAAS,CAAC,WAAW,CAAA;AAC7C,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,OAAuB,EACvB,KAAmC,EACnC,YAAyD,oBAAoB;IAE7E,IAAI,MAAqB,CAAA;IACzB,IAAI,CAAC;QACH,4DAA4D;QAC5D,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,CAAA;IAC3B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,oBAAoB,EAAE,CAAC;YACxC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,EAAE,CAAA;QAC1E,CAAC;QACD,MAAM,GAAG,CAAA;IACX,CAAC;IAED,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;QAC5C,0EAA0E;QAC1E,iCAAiC;QACjC,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,IAAI,IAAI,CAAC,EAAE,CAAC,EAAE,CAAA;IAC9E,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,4EAA4E;QAC5E,4EAA4E;QAC5E,+CAA+C;QAC/C,IAAI,iBAAiB,CAAC,GAAG,CAAC,EAAE,CAAC;YAC3B,OAAO,WAAW,CAAC,GAAG,CAAC,CAAA;QACzB,CAAC;QACD,MAAM,GAAG,CAAA;IACX,CAAC;AACH,CAAC"}

package/dist/tools/dispute/submit-evidence.js

@@ -0,0 +1,58 @@
+// `dispute_submit_evidence` — curated POST /v1/disputes/{disputeId}/evidence.
+//
+// A custom action (not CRUD): attaches evidence to a dispute. Mirrors the spec's
+// SubmitEvidenceRequest — `comment` (1–1000 chars) is required and `fileUrl`
+// (≤2048 chars) is an optional link to a supporting file. The body is plain JSON
+// (a URL to an already-uploaded file), NOT a multipart upload. disputeId is a
+// UUID path param and is stripped from the POST body; no tenant field is accepted.
+import { z } from 'zod';
+import { disputeEvidencePath, dispatchDispute } from './shared.js';
+/** Zod raw shape for `dispute_submit_evidence` input — id (path) + evidence body. */
+export const submitEvidenceInputShape = {
+    disputeId: z
+        .string()
+        .min(1)
+        .describe('The dispute id (UUID) to attach evidence to.'),
+    comment: z
+        .string()
+        .min(1)
+        .max(1000)
+        .describe('Comment describing the evidence (1–1000 chars), e.g. "Attached bank ' +
+        'statement showing correct amount".'),
+    fileUrl: z
+        .string()
+        .max(2048)
+        .optional()
+        .describe('Optional URL to an already-uploaded evidence file (≤2048 chars), e.g. ' +
+        '"https://storage.example.com/evidence/doc123.pdf". A link, not a file ' +
+        'upload.'),
+};
+/** Build the evidence POST body from the input minus the path-only `disputeId`. */
+export function buildEvidenceBody(args) {
+    const { disputeId: _disputeId, ...body } = args;
+    void _disputeId;
+    return body;
+}
+/**
+ * Register `dispute_submit_evidence`. Splits the id (path) from the body,
+ * dispatches a POST to the dispute's /evidence sub-path through the shared
+ * fail-closed relay, and returns the updated dispute; a matcher error surfaces
+ * via the shared toToolError.
+ */
+export function registerDisputeSubmitEvidenceTool(server) {
+    server.registerTool('dispute_submit_evidence', {
+        description: 'Submit evidence to a dispute (by id, UUID). Provide comment (1–1000 ' +
+            'chars describing the evidence; required) and optionally fileUrl, a link ' +
+            'to an already-uploaded file (≤2048 chars; this is a URL, not a file ' +
+            'upload). Returns the updated dispute, or a structured RFC 9457 error. ' +
+            'No tenant field is accepted.',
+        inputSchema: submitEvidenceInputShape,
+    }, async (args, extra) => {
+        return dispatchDispute({
+            method: 'POST',
+            path: disputeEvidencePath(args.disputeId),
+            body: buildEvidenceBody(args),
+        }, extra);
+    });
+}
+//# sourceMappingURL=submit-evidence.js.map

package/dist/tools/dispute/submit-evidence.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"submit-evidence.js","sourceRoot":"","sources":["../../../src/tools/dispute/submit-evidence.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,EAAE;AACF,iFAAiF;AACjF,6EAA6E;AAC7E,iFAAiF;AACjF,8EAA8E;AAC9E,mFAAmF;AAEnF,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAIvB,OAAO,EAAE,mBAAmB,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAElE,qFAAqF;AACrF,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACtC,SAAS,EAAE,CAAC;SACT,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,CAAC,8CAA8C,CAAC;IAC3D,OAAO,EAAE,CAAC;SACP,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,IAAI,CAAC;SACT,QAAQ,CACP,sEAAsE;QACpE,oCAAoC,CACvC;IACH,OAAO,EAAE,CAAC;SACP,MAAM,EAAE;SACR,GAAG,CAAC,IAAI,CAAC;SACT,QAAQ,EAAE;SACV,QAAQ,CACP,wEAAwE;QACtE,wEAAwE;QACxE,SAAS,CACZ;CACJ,CAAA;AAOD,mFAAmF;AACnF,MAAM,UAAU,iBAAiB,CAC/B,IAAyB;IAEzB,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,IAAI,EAAE,GAAG,IAAI,CAAA;IAC/C,KAAK,UAAU,CAAA;IACf,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iCAAiC,CAAC,MAAiB;IACjE,MAAM,CAAC,YAAY,CACjB,yBAAyB,EACzB;QACE,WAAW,EACT,sEAAsE;YACtE,0EAA0E;YAC1E,sEAAsE;YACtE,wEAAwE;YACxE,8BAA8B;QAChC,WAAW,EAAE,wBAAwB;KACtC,EACD,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE;QACpB,OAAO,eAAe,CACpB;YACE,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,mBAAmB,CAAC,IAAI,CAAC,SAAS,CAAC;YACzC,IAAI,EAAE,iBAAiB,CAAC,IAAI,CAAC;SAC9B,EACD,KAAK,CACN,CAAA;IACH,CAAC,CACF,CAAA;AACH,CAAC"}