@lerianstudio/matcher-mcp 1.2.0 → 1.3.0

package/dist/config.js

@@ -10,7 +10,6 @@ const DEFAULT_MATCHER_API_URL = 'http://localhost:4018';
 const DEFAULT_TIMEOUT_MS = 30_000;
 const DEFAULT_MAX_BODY_BYTES = 1_048_576; // 1 MiB
 const DEFAULT_OTEL_SERVICE_NAME = 'matcher-mcp';
-const DEFAULT_UPLOAD_MAX_FETCH_BYTES = 52_428_800; // 50 MiB
 /**
  * Parse a port from a raw env string, falling back to the default when unset.
  * An explicitly-set but invalid value is a misconfiguration and throws, rather
@@ -75,36 +74,6 @@ function parseBool(raw, fallback, key) {
     }
     throw new Error(`invalid ${key}: ${raw} (expected one of true, false, 1, 0)`);
 }
-/**
- * Parse a comma-separated hostname allowlist, trimming each entry and dropping
- * empties (so `"a,,b"` or a trailing comma doesn't produce a spurious `""`
- * entry that would never exact-match a real hostname). Unset/empty env ⇒ `[]`
- * — fail-closed default for `MCP_UPLOAD_ALLOWED_HOSTS`.
- */
-function parseAllowedHosts(raw) {
-    if (raw === undefined) {
-        return [];
-    }
-    return raw
-        .split(',')
-        .map((h) => h.trim())
-        .filter((h) => h.length > 0);
-}
-/**
- * Parse a positive byte count from a raw env string, falling back to the default
- * when unset. Shares `parseMaxBodyBytes`'s fail-loud semantics under its own
- * env-var name so the error message names the right key.
- */
-function parseUploadMaxFetchBytes(raw, fallback) {
-    if (raw === undefined || raw === '') {
-        return fallback;
-    }
-    const value = Number(raw);
-    if (!Number.isInteger(value) || value < 1) {
-        throw new Error(`invalid MCP_UPLOAD_MAX_FETCH_BYTES: ${raw} (expected a positive integer of bytes)`);
-    }
-    return value;
-}
 /**
  * Build the config from a given environment map (defaults to process.env).
  * Pure and side-effect-free so tests can drive it with a synthetic env.
@@ -121,8 +90,6 @@ export function loadConfig(env = process.env) {
         enableTelemetry: parseBool(env.ENABLE_TELEMETRY, false, 'ENABLE_TELEMETRY'),
         otelExporterOtlpEndpoint: otelEndpoint || undefined,
         otelServiceName,
-        uploadAllowedHosts: Object.freeze(parseAllowedHosts(env.MCP_UPLOAD_ALLOWED_HOSTS)),
-        uploadMaxFetchBytes: parseUploadMaxFetchBytes(env.MCP_UPLOAD_MAX_FETCH_BYTES, DEFAULT_UPLOAD_MAX_FETCH_BYTES),
     });
 }
 //# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -1 +1 @@
-{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,sDAAsD;AACtD,EAAE;AACF,4EAA4E;AAC5E,4EAA4E;AAC5E,6EAA6E;AAC7E,yEAAyE;AACzE,4EAA4E;AAqD5E,MAAM,YAAY,GAAG,IAAI,CAAA;AACzB,MAAM,uBAAuB,GAAG,uBAAuB,CAAA;AACvD,MAAM,kBAAkB,GAAG,MAAM,CAAA;AACjC,MAAM,sBAAsB,GAAG,SAAS,CAAA,CAAC,QAAQ;AACjD,MAAM,yBAAyB,GAAG,aAAa,CAAA;AAC/C,MAAM,8BAA8B,GAAG,UAAU,CAAA,CAAC,SAAS;AAE3D;;;;GAIG;AACH,SAAS,SAAS,CAAC,GAAuB,EAAE,QAAgB;IAC1D,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,EAAE,EAAE,CAAC;QACpC,OAAO,QAAQ,CAAA;IACjB,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAA;IACzB,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,GAAG,KAAK,EAAE,CAAC;QAC3D,MAAM,IAAI,KAAK,CACb,qBAAqB,GAAG,oCAAoC,CAC7D,CAAA;IACH,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED;;;;GAIG;AACH,SAAS,cAAc,CAAC,GAAuB,EAAE,QAAgB;IAC/D,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,EAAE,EAAE,CAAC;QACpC,OAAO,QAAQ,CAAA;IACjB,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAA;IACzB,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CACb,+BAA+B,GAAG,gDAAgD,CACnF,CAAA;IACH,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED;;;;GAIG;AACH,SAAS,iBAAiB,CAAC,GAAuB,EAAE,QAAgB;IAClE,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,EAAE,EAAE,CAAC;QACpC,OAAO,QAAQ,CAAA;IACjB,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAA;IACzB,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CACb,2BAA2B,GAAG,yCAAyC,CACxE,CAAA;IACH,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED;;;;;GAKG;AACH,SAAS,SAAS,CAAC,GAAuB,EAAE,QAAiB,EAAE,GAAW;IACxE,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,EAAE,EAAE,CAAC;QACpC,OAAO,QAAQ,CAAA;IACjB,CAAC;IACD,MAAM,UAAU,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;IAC3C,IAAI,UAAU,KAAK,MAAM,IAAI,UAAU,KAAK,GAAG,EAAE,CAAC;QAChD,OAAO,IAAI,CAAA;IACb,CAAC;IACD,IAAI,UAAU,KAAK,OAAO,IAAI,UAAU,KAAK,GAAG,EAAE,CAAC;QACjD,OAAO,KAAK,CAAA;IACd,CAAC;IACD,MAAM,IAAI,KAAK,CACb,WAAW,GAAG,KAAK,GAAG,sCAAsC,CAC7D,CAAA;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAS,iBAAiB,CAAC,GAAuB;IAChD,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACtB,OAAO,EAAE,CAAA;IACX,CAAC;IACD,OAAO,GAAG;SACP,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;AAChC,CAAC;AAED;;;;GAIG;AACH,SAAS,wBAAwB,CAC/B,GAAuB,EACvB,QAAgB;IAEhB,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,EAAE,EAAE,CAAC;QACpC,OAAO,QAAQ,CAAA;IACjB,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAA;IACzB,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CACb,uCAAuC,GAAG,yCAAyC,CACpF,CAAA;IACH,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,UAAU,CAAC,MAAyB,OAAO,CAAC,GAAG;IAC7D,MAAM,aAAa,GAAG,GAAG,CAAC,eAAe,EAAE,IAAI,EAAE,IAAI,uBAAuB,CAAA;IAC5E,MAAM,YAAY,GAAG,GAAG,CAAC,2BAA2B,EAAE,IAAI,EAAE,CAAA;IAC5D,MAAM,eAAe,GACnB,GAAG,CAAC,0BAA0B,EAAE,IAAI,EAAE,IAAI,yBAAyB,CAAA;IACrE,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,IAAI,EAAE,SAAS,CAAC,GAAG,CAAC,QAAQ,EAAE,YAAY,CAAC;QAC3C,aAAa,EAAE,aAAa,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;QAChD,SAAS,EAAE,cAAc,CAAC,GAAG,CAAC,kBAAkB,EAAE,kBAAkB,CAAC;QACrE,YAAY,EAAE,iBAAiB,CAAC,GAAG,CAAC,cAAc,EAAE,sBAAsB,CAAC;QAC3E,eAAe,EAAE,SAAS,CAAC,GAAG,CAAC,gBAAgB,EAAE,KAAK,EAAE,kBAAkB,CAAC;QAC3E,wBAAwB,EAAE,YAAY,IAAI,SAAS;QACnD,eAAe;QACf,kBAAkB,EAAE,MAAM,CAAC,MAAM,CAC/B,iBAAiB,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAChD;QACD,mBAAmB,EAAE,wBAAwB,CAC3C,GAAG,CAAC,0BAA0B,EAC9B,8BAA8B,CAC/B;KACF,CAAC,CAAA;AACJ,CAAC"}
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,sDAAsD;AACtD,EAAE;AACF,4EAA4E;AAC5E,4EAA4E;AAC5E,6EAA6E;AAC7E,yEAAyE;AACzE,4EAA4E;AA4C5E,MAAM,YAAY,GAAG,IAAI,CAAA;AACzB,MAAM,uBAAuB,GAAG,uBAAuB,CAAA;AACvD,MAAM,kBAAkB,GAAG,MAAM,CAAA;AACjC,MAAM,sBAAsB,GAAG,SAAS,CAAA,CAAC,QAAQ;AACjD,MAAM,yBAAyB,GAAG,aAAa,CAAA;AAE/C;;;;GAIG;AACH,SAAS,SAAS,CAAC,GAAuB,EAAE,QAAgB;IAC1D,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,EAAE,EAAE,CAAC;QACpC,OAAO,QAAQ,CAAA;IACjB,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAA;IACzB,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,GAAG,KAAK,EAAE,CAAC;QAC3D,MAAM,IAAI,KAAK,CACb,qBAAqB,GAAG,oCAAoC,CAC7D,CAAA;IACH,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED;;;;GAIG;AACH,SAAS,cAAc,CAAC,GAAuB,EAAE,QAAgB;IAC/D,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,EAAE,EAAE,CAAC;QACpC,OAAO,QAAQ,CAAA;IACjB,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAA;IACzB,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CACb,+BAA+B,GAAG,gDAAgD,CACnF,CAAA;IACH,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED;;;;GAIG;AACH,SAAS,iBAAiB,CAAC,GAAuB,EAAE,QAAgB;IAClE,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,EAAE,EAAE,CAAC;QACpC,OAAO,QAAQ,CAAA;IACjB,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAA;IACzB,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CACb,2BAA2B,GAAG,yCAAyC,CACxE,CAAA;IACH,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED;;;;;GAKG;AACH,SAAS,SAAS,CAAC,GAAuB,EAAE,QAAiB,EAAE,GAAW;IACxE,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,EAAE,EAAE,CAAC;QACpC,OAAO,QAAQ,CAAA;IACjB,CAAC;IACD,MAAM,UAAU,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;IAC3C,IAAI,UAAU,KAAK,MAAM,IAAI,UAAU,KAAK,GAAG,EAAE,CAAC;QAChD,OAAO,IAAI,CAAA;IACb,CAAC;IACD,IAAI,UAAU,KAAK,OAAO,IAAI,UAAU,KAAK,GAAG,EAAE,CAAC;QACjD,OAAO,KAAK,CAAA;IACd,CAAC;IACD,MAAM,IAAI,KAAK,CACb,WAAW,GAAG,KAAK,GAAG,sCAAsC,CAC7D,CAAA;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,UAAU,CAAC,MAAyB,OAAO,CAAC,GAAG;IAC7D,MAAM,aAAa,GAAG,GAAG,CAAC,eAAe,EAAE,IAAI,EAAE,IAAI,uBAAuB,CAAA;IAC5E,MAAM,YAAY,GAAG,GAAG,CAAC,2BAA2B,EAAE,IAAI,EAAE,CAAA;IAC5D,MAAM,eAAe,GACnB,GAAG,CAAC,0BAA0B,EAAE,IAAI,EAAE,IAAI,yBAAyB,CAAA;IACrE,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,IAAI,EAAE,SAAS,CAAC,GAAG,CAAC,QAAQ,EAAE,YAAY,CAAC;QAC3C,aAAa,EAAE,aAAa,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;QAChD,SAAS,EAAE,cAAc,CAAC,GAAG,CAAC,kBAAkB,EAAE,kBAAkB,CAAC;QACrE,YAAY,EAAE,iBAAiB,CAAC,GAAG,CAAC,cAAc,EAAE,sBAAsB,CAAC;QAC3E,eAAe,EAAE,SAAS,CAAC,GAAG,CAAC,gBAAgB,EAAE,KAAK,EAAE,kBAAkB,CAAC;QAC3E,wBAAwB,EAAE,YAAY,IAAI,SAAS;QACnD,eAAe;KAChB,CAAC,CAAA;AACJ,CAAC"}

package/dist/spec/enum-policy.js

@@ -0,0 +1,83 @@
+// Enum policy allow-lists — the two sanctioned escapes the enum-parity gate
+// (Task 1.3) consults when a curated tool's Zod field deliberately diverges from
+// the OpenAPI spec's declaration.
+//
+// THE POLICY (full prose + audit table: docs/enum-policy.md)
+// A curated tool models a field as a CLOSED Zod enum only for a closed,
+// slow-moving algebra — comparison operators, context cardinality (1:1|1:N|N:M),
+// fee normalization (NET|GROSS), lifecycle status transitions, fee-rule sides,
+// sort orders, and the like. Anything that GROWS — business-day calendars,
+// metadata field names, connection/config names, exception reason codes, format
+// tokens that expand — is typed as a free `string` whose `.describe()` enumerates
+// the CURRENT known values as a hint. Rationale: a closed enum that lags the
+// backend REJECTS A VALID BACKEND VALUE at the client — strictly worse than a
+// free string that lets the backend do final validation.
+//
+// HOW THE GATE USES THESE
+// The parity gate compares each curated tool field against the spec. Two
+// divergences are legitimate and must be declared here or the gate fails:
+//   - INTENTIONALLY_OPEN_FIELDS: the spec declares an enum but the tool
+//     deliberately types the field as a free string (a growing taxonomy).
+//   - INTENTIONALLY_OMITTED_FIELDS: a spec request-body/query field the curated
+//     tool deliberately does not expose (curation is opinionated). `reason` is
+//     required so the omission is a considered call, not an oversight.
+//
+// Both lists are EMPTY BY DEFAULT — add an entry only with a real, reasoned case.
+// `operationId` is compile-time constrained to a real curated operation.
+import { CURATED_OPERATION_IDS } from './curated-operations.js';
+/**
+ * Spec-enum fields the curated tools deliberately type as a free string because
+ * the underlying value set GROWS. Kept in sync with the tool source, which
+ * carries the same rationale inline at each field.
+ *
+ * NB: both current entries are OUT OF the request-body parity gate's scope —
+ * listExceptions.reason is a query param (GET, no request body) and
+ * uploadFile.format rides a multipart body (no application/json). So the parity
+ * gate never consults these entries; they are policy documentation. The
+ * free-string behavior is instead enforced by the tools' own unit tests
+ * (exception/list.test.ts and ingestion/upload.test.ts each safeParse an
+ * out-of-list value). If either field is ever moved onto a JSON request body,
+ * its entry here becomes gate-live automatically.
+ */
+export const INTENTIONALLY_OPEN_FIELDS = [
+    // Exception reason codes are minted per new engine capability (AGED_BREAK,
+    // OVER_SETTLED, FX_RATE_VARIANCE were recent). A closed filter enum would lag
+    // and reject a valid reason. -> src/tools/exception/list.ts
+    { operationId: 'listExceptions', fieldPath: 'reason' },
+    // Ingestion formats grow with the connector-parity roadmap (new parsers). A
+    // closed enum would block uploading a newly-supported format.
+    // -> src/tools/ingestion/upload.ts
+    { operationId: 'uploadFile', fieldPath: 'format' },
+];
+/**
+ * Spec request fields the curated tools deliberately do not expose. Each carries
+ * a required reason so the omission reads as a considered call, not an oversight.
+ */
+export const INTENTIONALLY_OMITTED_FIELDS = [
+    // context_create models inline `rules[]` and `sources[]` as permissive
+    // passthrough records (z.array(z.record(...))) rather than reproducing the full
+    // nested CreateMatchRule/CreateSource sub-schemas — the tool documents "prefer
+    // context_create with no rules then match_rule_create / source_create for
+    // richer control", and matcher is the authoritative validator of the inline
+    // payload. The array fields THEMSELVES are exposed; only their nested leaves are
+    // omitted here. A brand-new nested field the backend adds will still surface as
+    // a fresh drift (it won't be on this list), keeping the gate's teeth.
+    // -> src/tools/context/create.ts
+    { operationId: 'createContext', fieldPath: 'rules[].priority', reason: 'inline rules[] passed through as an opaque record; matcher validates' },
+    { operationId: 'createContext', fieldPath: 'rules[].type', reason: 'inline rules[] passed through as an opaque record; matcher validates' },
+    { operationId: 'createContext', fieldPath: 'rules[].config', reason: 'inline rules[] passed through as an opaque record; matcher validates' },
+    { operationId: 'createContext', fieldPath: 'sources[].name', reason: 'inline sources[] passed through as an opaque record; matcher validates' },
+    { operationId: 'createContext', fieldPath: 'sources[].type', reason: 'inline sources[] passed through as an opaque record; matcher validates' },
+    { operationId: 'createContext', fieldPath: 'sources[].side', reason: 'inline sources[] passed through as an opaque record; matcher validates' },
+    { operationId: 'createContext', fieldPath: 'sources[].config', reason: 'inline sources[] passed through as an opaque record; matcher validates' },
+    { operationId: 'createContext', fieldPath: 'sources[].mapping', reason: 'inline sources[] passed through as an opaque record; matcher validates' },
+];
+/**
+ * Spec-required fields the curated tools satisfy by INJECTING the value in the
+ * dispatch code rather than exposing a (required) Zod field. Empty by default —
+ * the curated tools mirror the spec's required scalars directly, so nothing is
+ * injected today. Add an entry only when a tool genuinely fills a spec-required
+ * field itself (and cite the injection site), never to silence a real gap.
+ */
+export const INTENTIONALLY_INJECTED_REQUIRED_FIELDS = [];
+//# sourceMappingURL=enum-policy.js.map

package/dist/spec/enum-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"enum-policy.js","sourceRoot":"","sources":["../../src/spec/enum-policy.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,iFAAiF;AACjF,kCAAkC;AAClC,EAAE;AACF,6DAA6D;AAC7D,wEAAwE;AACxE,iFAAiF;AACjF,+EAA+E;AAC/E,2EAA2E;AAC3E,gFAAgF;AAChF,kFAAkF;AAClF,6EAA6E;AAC7E,8EAA8E;AAC9E,yDAAyD;AACzD,EAAE;AACF,0BAA0B;AAC1B,yEAAyE;AACzE,0EAA0E;AAC1E,wEAAwE;AACxE,0EAA0E;AAC1E,gFAAgF;AAChF,+EAA+E;AAC/E,uEAAuE;AACvE,EAAE;AACF,kFAAkF;AAClF,yEAAyE;AAEzE,OAAO,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAA;AAuC/D;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAsC;IAC1E,2EAA2E;IAC3E,8EAA8E;IAC9E,4DAA4D;IAC5D,EAAE,WAAW,EAAE,gBAAgB,EAAE,SAAS,EAAE,QAAQ,EAAE;IACtD,4EAA4E;IAC5E,8DAA8D;IAC9D,mCAAmC;IACnC,EAAE,WAAW,EAAE,YAAY,EAAE,SAAS,EAAE,QAAQ,EAAE;CACnD,CAAA;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAyC;IAChF,uEAAuE;IACvE,gFAAgF;IAChF,+EAA+E;IAC/E,0EAA0E;IAC1E,4EAA4E;IAC5E,iFAAiF;IACjF,gFAAgF;IAChF,sEAAsE;IACtE,iCAAiC;IACjC,EAAE,WAAW,EAAE,eAAe,EAAE,SAAS,EAAE,kBAAkB,EAAE,MAAM,EAAE,sEAAsE,EAAE;IAC/I,EAAE,WAAW,EAAE,eAAe,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,EAAE,sEAAsE,EAAE;IAC3I,EAAE,WAAW,EAAE,eAAe,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,EAAE,sEAAsE,EAAE;IAC7I,EAAE,WAAW,EAAE,eAAe,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,EAAE,wEAAwE,EAAE;IAC/I,EAAE,WAAW,EAAE,eAAe,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,EAAE,wEAAwE,EAAE;IAC/I,EAAE,WAAW,EAAE,eAAe,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,EAAE,wEAAwE,EAAE;IAC/I,EAAE,WAAW,EAAE,eAAe,EAAE,SAAS,EAAE,kBAAkB,EAAE,MAAM,EAAE,wEAAwE,EAAE;IACjJ,EAAE,WAAW,EAAE,eAAe,EAAE,SAAS,EAAE,mBAAmB,EAAE,MAAM,EAAE,wEAAwE,EAAE;CACnJ,CAAA;AAED;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,sCAAsC,GACjD,EAAE,CAAA"}

package/dist/spec/openapi.yaml

@@ -810,6 +810,11 @@ components:
           type: string
         targetSystem:
           description: Target system to dispatch to
+          enum:
+            - JIRA
+            - SERVICENOW
+            - WEBHOOK
+            - MANUAL
           examples:
             - JIRA
           maxLength: 255
@@ -1648,7 +1653,7 @@ components:
       properties:
         config:
           additionalProperties: {}
-          description: Source-specific configuration object (connection and parsing settings).
+          description: Source-specific configuration object (connection and parsing settings). Optional; defaults to an empty object when omitted.
           type: object
         mapping:
           additionalProperties: {}
@@ -1684,7 +1689,6 @@ components:
         - name
         - type
         - side
-        - config
       type: object
     CreateExportJobRequest:
       additionalProperties: false
@@ -1702,19 +1706,16 @@ components:
           format: date
           type: string
         format:
-          description: Export file format (server normalizes to uppercase)
+          description: Export file format (uppercase only).
           enum:
             - CSV
             - JSON
             - XML
-            - csv
-            - json
-            - xml
           examples:
             - CSV
           type: string
         reportType:
-          description: Report type to export
+          description: Report type to export (uppercase only).
           enum:
             - MATCHED
             - UNMATCHED
@@ -1723,13 +1724,6 @@ components:
             - EXCEPTIONS
             - MATCHES
             - UNMATCHED_TRANSACTIONS
-            - matched
-            - unmatched
-            - summary
-            - variance
-            - exceptions
-            - matches
-            - unmatched_transactions
           examples:
             - MATCHED
           type: string
@@ -2089,7 +2083,7 @@ components:
       properties:
         config:
           additionalProperties: {}
-          description: Source-specific configuration object (connection and parsing settings).
+          description: Source-specific configuration object (connection and parsing settings). Optional; defaults to an empty object when omitted.
           type: object
         name:
           description: Human-readable name of the source.
@@ -2121,7 +2115,6 @@ components:
         - name
         - type
         - side
-        - config
       type: object
     CredentialMetadata:
       additionalProperties: false
@@ -3838,6 +3831,11 @@ components:
           examples:
             - file appears semicolon-delimited but the source declares comma; declare delimiter semicolon in the source dialect
           type: string
+        droppedDuplicateReason:
+          description: "Display-only explanation of why droppedDuplicateRows rows were dropped: names the (source, external_id) collapsing key and the field mapping to check so the count does not read as silent data loss. Empty unless droppedDuplicateRows > 0"
+          examples:
+            - Rows repeated a (source, external_id) key already present in this source and were dropped under the keep-first policy.
+          type: string
         droppedDuplicateRows:
           description: Number of rows dropped as duplicates under the keep-first policy (same external_id within the upload or already persisted)
           examples:
@@ -5701,6 +5699,11 @@ components:
     ReconciliationSourceResponse:
       additionalProperties: false
       properties:
+        archivedAt:
+          description: RFC 3339 timestamp when the source was archived; absent when the source is live.
+          examples:
+            - "2025-01-15T10:30:00Z"
+          type: string
         config:
           additionalProperties: {}
           description: Source-specific configuration object (connection and parsing settings).
@@ -6846,6 +6849,11 @@ components:
     SourceWithFieldMapStatusResponse:
       additionalProperties: false
       properties:
+        archivedAt:
+          description: RFC 3339 timestamp when the source was archived; absent when the source is live.
+          examples:
+            - "2025-01-15T10:30:00Z"
+          type: string
         config:
           additionalProperties: {}
           description: Source-specific configuration object (connection and parsing settings).
@@ -7395,10 +7403,7 @@ components:
             - true
           type: boolean
         feeNormalization:
-          description: Fee normalization mode. NET compares amounts after fees are deducted; GROSS compares amounts before fees.
-          enum:
-            - NET
-            - GROSS
+          description: "Fee normalization mode. NET compares amounts after fees are deducted; GROSS compares amounts before fees. Send an empty string to clear the mode; omit to leave it unchanged. (No enum constraint: unlike create, the update path accepts the empty string to clear.)"
           examples:
             - NET
           type: string
@@ -10278,6 +10283,7 @@ paths:
             enum:
               - OPEN
               - ASSIGNED
+              - PENDING_RESOLUTION
               - RESOLVED
             type: string
         - description: Filter by severity
@@ -10649,6 +10655,7 @@ paths:
             enum:
               - OPEN
               - ASSIGNED
+              - PENDING_RESOLUTION
               - RESOLVED
             type: string
         - description: Filter by severity