@lerianstudio/matcher-mcp 5.0.0 → 5.1.0-beta.1

package/dist/matcher/idempotency.js

@@ -34,9 +34,13 @@ export const idempotencyKeyInputField = z
     .describe('Optional idempotency key. OMIT IT normally: a key derived from this ' +
     'request is sent automatically for dispatch operations, so a retry after ' +
     'a timeout replays the recorded answer instead of dispatching a second ' +
-    'time. Supply a distinct value ONLY to deliberately dispatch again after ' +
-    'checking the target system — for example after an MTCH-0514 (outcome ' +
-    'unconfirmed) answer.');
+    'time. Keep that key (keep omitting this field) on a 409 MTCH-0018 (the ' +
+    'first attempt is still in flight: wait, then retry) and on a 409 ' +
+    'MTCH-0022 (an earlier attempt may already have applied: check the ' +
+    'target system). Supply a distinct value ONLY to deliberately dispatch ' +
+    'again: after checking the target system that an MTCH-0514 or MTCH-0022 ' +
+    'outcome did not apply, or after fixing the cause of a refusal such as ' +
+    'a 409 MTCH-0007, which the derived key would otherwise replay.');
 /**
  * Is this path one of matcher's two dispatch routes —
  * `/v1/exceptions/{id}/dispatch` and `/v1/exceptions/bulk/dispatch`?
@@ -50,7 +54,8 @@ export function isDispatchPath(path) {
  *
  * Determinism is the whole point — the model's retry of the same tool call with
  * the same arguments derives the same key, so matcher replays its recorded
- * answer (including a HELD MTCH-0514 refusal) instead of re-executing.
+ * answer, or refuses 409 MTCH-0022 when the first attempt's outcome was never
+ * recorded (an MTCH-0514), instead of re-executing.
  *
  * `exceptionIds` is sorted for the digest only; the body keeps the caller's
  * order. The same SET of ids is the same request whatever order it arrived in,

package/dist/matcher/idempotency.js.map

@@ -1 +1 @@
-{"version":3,"file":"idempotency.js","sourceRoot":"","sources":["../../src/matcher/idempotency.ts"],"names":[],"mappings":"AAAA,qEAAqE;AACrE,EAAE;AACF,qCAAqC;AACrC,4EAA4E;AAC5E,mEAAmE;AACnE,iFAAiF;AACjF,8EAA8E;AAC9E,0DAA0D;AAC1D,EAAE;AACF,kFAAkF;AAClF,gFAAgF;AAChF,8EAA8E;AAC9E,gFAAgF;AAChF,+EAA+E;AAC/E,iFAAiF;AACjF,wBAAwB;AACxB,EAAE;AACF,gFAAgF;AAChF,8EAA8E;AAC9E,iDAAiD;AAEjD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAExC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAEvB,iEAAiE;AACjE,MAAM,CAAC,MAAM,uBAAuB,GAAG,yBAAyB,CAAA;AAEhE;;;;GAIG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC;KACtC,MAAM,EAAE;KACR,KAAK,CACJ,uBAAuB,EACvB,yDAAyD,CAC1D;KACA,QAAQ,EAAE;KACV,QAAQ,CACP,sEAAsE;IACpE,0EAA0E;IAC1E,wEAAwE;IACxE,0EAA0E;IAC1E,uEAAuE;IACvE,sBAAsB,CACzB,CAAA;AAEH;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,OAAO,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAA;AACzE,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,4BAA4B,CAC1C,IAAY,EACZ,IAAa;IAEb,OAAO,YAAY,UAAU,CAAC,QAAQ,CAAC;SACpC,MAAM,CAAC,GAAG,IAAI,IAAI,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;SAC3D,MAAM,CAAC,KAAK,CAAC,EAAE,CAAA;AACpB,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,gBAAgB,CAAC,IAAa;IACrC,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC9C,OAAO,IAAI,IAAI,IAAI,CAAA;IACrB,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACxB,OAAO,IAAI,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAA;IACnC,CAAC;IAED,MAAM,MAAM,GAAG,IAA+B,CAAA;IAC9C,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;QACjB,yEAAyE;QACzE,uEAAuE;QACvE,oEAAoE;QACpE,4CAA4C;SAC3C,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,SAAS,CAAC;SAC1C,IAAI,EAAE;SACN,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC;QACZ,GAAG;QACH,GAAG,KAAK,cAAc,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAClD,CAAC,CAAC,CAAC,GAAI,MAAM,CAAC,GAAG,CAAe,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE;YACpD,CAAC,CAAC,gBAAgB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;KAClC,CAAC,CACL,CAAA;AACH,CAAC"}
+{"version":3,"file":"idempotency.js","sourceRoot":"","sources":["../../src/matcher/idempotency.ts"],"names":[],"mappings":"AAAA,qEAAqE;AACrE,EAAE;AACF,qCAAqC;AACrC,4EAA4E;AAC5E,mEAAmE;AACnE,iFAAiF;AACjF,8EAA8E;AAC9E,0DAA0D;AAC1D,EAAE;AACF,kFAAkF;AAClF,gFAAgF;AAChF,8EAA8E;AAC9E,gFAAgF;AAChF,+EAA+E;AAC/E,iFAAiF;AACjF,wBAAwB;AACxB,EAAE;AACF,gFAAgF;AAChF,8EAA8E;AAC9E,iDAAiD;AAEjD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAExC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAEvB,iEAAiE;AACjE,MAAM,CAAC,MAAM,uBAAuB,GAAG,yBAAyB,CAAA;AAEhE;;;;GAIG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC;KACtC,MAAM,EAAE;KACR,KAAK,CACJ,uBAAuB,EACvB,yDAAyD,CAC1D;KACA,QAAQ,EAAE;KACV,QAAQ,CACP,sEAAsE;IACpE,0EAA0E;IAC1E,wEAAwE;IACxE,yEAAyE;IACzE,mEAAmE;IACnE,oEAAoE;IACpE,wEAAwE;IACxE,yEAAyE;IACzE,wEAAwE;IACxE,gEAAgE,CACnE,CAAA;AAEH;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,OAAO,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAA;AACzE,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,4BAA4B,CAC1C,IAAY,EACZ,IAAa;IAEb,OAAO,YAAY,UAAU,CAAC,QAAQ,CAAC;SACpC,MAAM,CAAC,GAAG,IAAI,IAAI,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;SAC3D,MAAM,CAAC,KAAK,CAAC,EAAE,CAAA;AACpB,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,gBAAgB,CAAC,IAAa;IACrC,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC9C,OAAO,IAAI,IAAI,IAAI,CAAA;IACrB,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACxB,OAAO,IAAI,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAA;IACnC,CAAC;IAED,MAAM,MAAM,GAAG,IAA+B,CAAA;IAC9C,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;QACjB,yEAAyE;QACzE,uEAAuE;QACvE,oEAAoE;QACpE,4CAA4C;SAC3C,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,SAAS,CAAC;SAC1C,IAAI,EAAE;SACN,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC;QACZ,GAAG;QACH,GAAG,KAAK,cAAc,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAClD,CAAC,CAAC,CAAC,GAAI,MAAM,CAAC,GAAG,CAAe,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE;YACpD,CAAC,CAAC,gBAAgB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;KAClC,CAAC,CACL,CAAA;AACH,CAAC"}

package/dist/spec/curated-operations.js

@@ -161,6 +161,10 @@ export const GENERIC_ONLY_OPERATION_IDS = [
     'listCallbackCredentials', // GET    /v1/exceptions/callbacks/credentials
     'rotateCallbackCredential', // POST   /v1/exceptions/callbacks/credentials/{credentialId}/rotate
     'revokeCallbackCredential', // DELETE /v1/exceptions/callbacks/credentials/{credentialId}
+    // aggregator webhook token (generic-only) — list + revoke of the tokens an
+    // operator mints, the same lifecycle CRUD as the callback credentials above.
+    'listAggregatorWebhookTokens', // GET    /v1/discovery/webhooks/tokens
+    'revokeAggregatorWebhookToken', // DELETE /v1/discovery/webhooks/tokens/{tokenId}
     // discovery webhook (generic-only) — inbound aggregator webhook receiver, not
     // an operator-initiated action (cf. processCallback above).
     'receiveAggregatorWebhook', // POST /v1/discovery/webhooks/{provider}/{webhookToken}

package/dist/spec/curated-operations.js.map

@@ -1 +1 @@
-{"version":3,"file":"curated-operations.js","sourceRoot":"","sources":["../../src/spec/curated-operations.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,wDAAwD;AACxD,EAAE;AACF,kBAAkB;AAClB,yDAAyD;AACzD,gFAAgF;AAChF,4EAA4E;AAC5E,mEAAmE;AACnE,2EAA2E;AAC3E,4EAA4E;AAC5E,+EAA+E;AAC/E,yEAAyE;AACzE,4EAA4E;AAC5E,EAAE;AACF,yEAAyE;AACzE,sEAAsE;AACtE,4EAA4E;AAC5E,6EAA6E;AAC7E,6EAA6E;AAC7E,4EAA4E;AAC5E,8EAA8E;AAC9E,mEAAmE;AACnE,8DAA8D;AAC9D,EAAE;AACF,kDAAkD;AAClD,kFAAkF;AAClF,+EAA+E;AAC/E,+EAA+E;AAC/E,6EAA6E;AAC7E,uDAAuD;AAEvD;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,6CAA6C;IAC7C,iBAAiB,EAAE,wBAAwB,EAAE,sBAAsB;IACnE,iBAAiB,EAAE,uCAAuC,EAAE,sBAAsB;IAClF,cAAc,EAAE,oCAAoC,EAAE,mBAAmB;IACzE,gBAAgB,EAAE,uBAAuB,EAAE,oBAAoB;IAC/D,mBAAmB,EAAE,8CAA8C,EAAE,wBAAwB;IAC7F,iBAAiB,EAAE,sCAAsC,EAAE,sBAAsB;IAEjF,qCAAqC;IACrC,aAAa,EAAE,yCAAyC,EAAE,kBAAkB;IAC5E,aAAa,EAAE,kCAAkC,EAAE,kBAAkB;IACrE,UAAU,EAAE,+BAA+B,EAAE,eAAe;IAC5D,YAAY,EAAE,wCAAwC,EAAE,gBAAgB;IACxE,aAAa,EAAE,iCAAiC,EAAE,kBAAkB;IAEpE,yCAAyC;IACzC,eAAe,EAAE,qCAAqC,EAAE,oBAAoB;IAC5E,eAAe,EAAE,gDAAgD,EAAE,oBAAoB;IACvF,YAAY,EAAE,6CAA6C,EAAE,iBAAiB;IAC9E,cAAc,EAAE,oCAAoC,EAAE,kBAAkB;IACxE,iBAAiB,EAAE,6CAA6C,EAAE,qBAAqB;IACvF,eAAe,EAAE,+CAA+C,EAAE,oBAAoB;IAEtF,gHAAgH;IAChH,aAAa,EAAE,mBAAmB,EAAE,iBAAiB;IACrD,UAAU,EAAE,8BAA8B,EAAE,cAAc;IAC1D,YAAY,EAAE,kBAAkB,EAAE,eAAe;IACjD,aAAa,EAAE,gCAAgC,EAAE,iBAAiB;IAClE,cAAc,EAAE,uCAAuC,EAAE,wBAAwB;IACjF,cAAc,EAAE,uCAAuC,EAAE,wBAAwB;IACjF,gBAAgB,EAAE,6CAA6C,EAAE,kCAAkC;IAEnG,8GAA8G;IAC9G,YAAY,EAAE,uCAAuC,EAAE,gBAAgB;IACvE,SAAS,EAAE,iDAAiD,EAAE,aAAa;IAC3E,WAAW,EAAE,sCAAsC,EAAE,cAAc;IACnE,YAAY,EAAE,mDAAmD,EAAE,gBAAgB;IACnF,aAAa,EAAE,0DAA0D,EAAE,uBAAuB;IAClG,aAAa,EAAE,0DAA0D,EAAE,uBAAuB;IAElG,4EAA4E;IAC5E,cAAc,EAAE,6DAA6D,EAAE,mBAAmB;IAClG,mBAAmB,EAAE,4DAA4D,EAAE,gBAAgB;IACnG,oBAAoB,EAAE,yCAAyC,EAAE,iBAAiB;IAClF,cAAc,EAAE,mCAAmC,EAAE,mBAAmB;IACxE,cAAc,EAAE,oCAAoC,EAAE,mBAAmB;IAEzE,qCAAqC;IACrC,WAAW,EAAE,+BAA+B,EAAE,gBAAgB;IAC9D,iBAAiB,EAAE,sCAAsC,EAAE,mBAAmB;IAC9E,aAAa,EAAE,4CAA4C,EAAE,iBAAiB;IAC9E,QAAQ,EAAE,4CAA4C,EAAE,kBAAkB;IAE1E,wCAAwC;IACxC,UAAU,EAAE,4CAA4C,EAAE,wBAAwB;IAClF,oBAAoB,EAAE,gDAAgD,EAAE,yBAAyB;IACjG,oBAAoB,EAAE,iCAAiC,EAAE,wBAAwB;IACjF,sBAAsB,EAAE,mCAAmC,EAAE,0BAA0B;IACvF,qBAAqB,EAAE,kCAAkC,EAAE,yBAAyB;IACpF,aAAa,EAAE,0DAA0D,EAAE,2BAA2B;IACtG,iBAAiB,EAAE,4CAA4C,EAAE,qBAAqB;IACtF,mBAAmB,EAAE,+CAA+C,EAAE,wBAAwB;IAC9F,YAAY,EAAE,kCAAkC,EAAE,gBAAgB;IAClE,mBAAmB,EAAE,0CAA0C,EAAE,oBAAoB;IACrF,YAAY,EAAE,2CAA2C,EAAE,0BAA0B;IACrF,cAAc,EAAE,oBAAoB,EAAE,iBAAiB;IACvD,WAAW,EAAE,4CAA4C,EAAE,yBAAyB;IAEpF,mCAAmC;IACnC,YAAY,EAAE,qCAAqC,EAAE,gBAAgB;IACrE,UAAU,EAAE,8BAA8B,EAAE,cAAc;IAC1D,YAAY,EAAE,kBAAkB,EAAE,eAAe;IACjD,cAAc,EAAE,wCAAwC,EAAE,0BAA0B;IAEpF,uCAAuC;IACvC,sBAAsB,EAAE,0DAA0D,EAAE,4BAA4B;IAChH,eAAe,EAAE,mDAAmD,EAAE,oBAAoB;IAC1F,mBAAmB,EAAE,gEAAgE,EAAE,kCAAkC;IACzH,iBAAiB,EAAE,2CAA2C,EAAE,sBAAsB;IACtF,iBAAiB,EAAE,2EAA2E,EAAE,+BAA+B;IAC/H,kBAAkB,EAAE,0DAA0D,EAAE,gCAAgC;IAChH,UAAU,EAAE,iEAAiE,EAAE,8DAA8D;IAE7I,uCAAuC;IACvC,sBAAsB,EAAE,gDAAgD,EAAE,uBAAuB;IACjG,oBAAoB,EAAE,4DAA4D,EAAE,wBAAwB;IAC5G,iBAAiB,EAAE,2DAA2D,EAAE,uBAAuB;IACvG,0BAA0B,EAAE,wDAAwD,EAAE,oBAAoB;IAC1G,WAAW,EAAE,oDAAoD,EAAE,gBAAgB;IACnF,kBAAkB,EAAE,iEAAiE,EAAE,6BAA6B;IACpH,cAAc,EAAE,uDAAuD,EAAE,mBAAmB;IAE5F,kCAAkC;IAClC,eAAe,EAAE,uDAAuD,EAAE,0BAA0B;IACpG,YAAY,EAAE,oDAAoD,EAAE,uBAAuB;IAC3F,iBAAiB,EAAE,yDAAyD,EAAE,4BAA4B;IAC1G,cAAc,EAAE,sDAAsD,EAAE,yBAAyB;IACjG,sBAAsB,EAAE,wDAAwD,EAAE,2BAA2B;IAC7G,mBAAmB,EAAE,qDAAqD,EAAE,wBAAwB;IACpG,mBAAmB,EAAE,qDAAqD,EAAE,wBAAwB;IACpG,qBAAqB,EAAE,uDAAuD,EAAE,0BAA0B;IAC1G,oBAAoB,EAAE,sDAAsD,EAAE,yBAAyB;IACvG,gBAAgB,EAAE,8CAA8C,EAAE,iBAAiB;IACnF,gBAAgB,EAAE,8CAA8C,EAAE,iBAAiB;IACnF,kBAAkB,EAAE,gDAAgD,EAAE,mBAAmB;IACzF,iBAAiB,EAAE,+CAA+C,EAAE,kBAAkB;IAEtF,iEAAiE;IACjE,mBAAmB,EAAE,2BAA2B,EAAE,0CAA0C;CACpF,CAAA;AAEV,uFAAuF;AACvF,MAAM,CAAC,MAAM,qBAAqB,GAAG,MAAM,CAAC,IAAI,CAC9C,kBAAkB,CACoB,CAAA;AAExC;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG;IACxC,8EAA8E;IAC9E,kEAAkE;IAClE,iBAAiB;IACjB,4EAA4E;IAC5E,+DAA+D;IAC/D,iBAAiB;IACjB,+EAA+E;IAC/E,wEAAwE;IACxE,wBAAwB,EAAE,8CAA8C;IACxE,yBAAyB,EAAE,8CAA8C;IACzE,0BAA0B,EAAE,oEAAoE;IAChG,0BAA0B,EAAE,6DAA6D;IACzF,8EAA8E;IAC9E,4DAA4D;IAC5D,0BAA0B,EAAE,wDAAwD;IACpF,+EAA+E;IAC/E,qEAAqE;IACrE,iBAAiB,EAAE,gCAAgC;IACnD,yEAAyE;IACzE,6EAA6E;IAC7E,8EAA8E;IAC9E,wEAAwE;IACxE,QAAQ,EAAE,kBAAkB;IAC5B,eAAe,EAAE,yBAAyB;IAC1C,0EAA0E;IAC1E,qEAAqE;IACrE,uBAAuB,EAAE,wCAAwC;IACjE,oEAAoE;IACpE,4EAA4E;IAC5E,6EAA6E;IAC7E,2EAA2E;IAC3E,8EAA8E;IAC9E,qCAAqC;IACrC,yBAAyB,EAAE,0CAA0C;IACrE,4BAA4B,EAAE,6CAA6C;IAC3E,qFAAqF;IACrF,sFAAsF;IACtF,uEAAuE;IACvE,6BAA6B,EAAE,uCAAuC;IACtE,qFAAqF;IACrF,+EAA+E;IAC/E,mFAAmF;IACnF,mFAAmF;IACnF,0CAA0C;IAC1C,yBAAyB,EAAE,0CAA0C;IACrE,iFAAiF;IACjF,oFAAoF;IACpF,wEAAwE;IACxE,iFAAiF;IACjF,oFAAoF;IACpF,uBAAuB,EAAE,2BAA2B;CAC5C,CAAA"}
+{"version":3,"file":"curated-operations.js","sourceRoot":"","sources":["../../src/spec/curated-operations.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,wDAAwD;AACxD,EAAE;AACF,kBAAkB;AAClB,yDAAyD;AACzD,gFAAgF;AAChF,4EAA4E;AAC5E,mEAAmE;AACnE,2EAA2E;AAC3E,4EAA4E;AAC5E,+EAA+E;AAC/E,yEAAyE;AACzE,4EAA4E;AAC5E,EAAE;AACF,yEAAyE;AACzE,sEAAsE;AACtE,4EAA4E;AAC5E,6EAA6E;AAC7E,6EAA6E;AAC7E,4EAA4E;AAC5E,8EAA8E;AAC9E,mEAAmE;AACnE,8DAA8D;AAC9D,EAAE;AACF,kDAAkD;AAClD,kFAAkF;AAClF,+EAA+E;AAC/E,+EAA+E;AAC/E,6EAA6E;AAC7E,uDAAuD;AAEvD;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,6CAA6C;IAC7C,iBAAiB,EAAE,wBAAwB,EAAE,sBAAsB;IACnE,iBAAiB,EAAE,uCAAuC,EAAE,sBAAsB;IAClF,cAAc,EAAE,oCAAoC,EAAE,mBAAmB;IACzE,gBAAgB,EAAE,uBAAuB,EAAE,oBAAoB;IAC/D,mBAAmB,EAAE,8CAA8C,EAAE,wBAAwB;IAC7F,iBAAiB,EAAE,sCAAsC,EAAE,sBAAsB;IAEjF,qCAAqC;IACrC,aAAa,EAAE,yCAAyC,EAAE,kBAAkB;IAC5E,aAAa,EAAE,kCAAkC,EAAE,kBAAkB;IACrE,UAAU,EAAE,+BAA+B,EAAE,eAAe;IAC5D,YAAY,EAAE,wCAAwC,EAAE,gBAAgB;IACxE,aAAa,EAAE,iCAAiC,EAAE,kBAAkB;IAEpE,yCAAyC;IACzC,eAAe,EAAE,qCAAqC,EAAE,oBAAoB;IAC5E,eAAe,EAAE,gDAAgD,EAAE,oBAAoB;IACvF,YAAY,EAAE,6CAA6C,EAAE,iBAAiB;IAC9E,cAAc,EAAE,oCAAoC,EAAE,kBAAkB;IACxE,iBAAiB,EAAE,6CAA6C,EAAE,qBAAqB;IACvF,eAAe,EAAE,+CAA+C,EAAE,oBAAoB;IAEtF,gHAAgH;IAChH,aAAa,EAAE,mBAAmB,EAAE,iBAAiB;IACrD,UAAU,EAAE,8BAA8B,EAAE,cAAc;IAC1D,YAAY,EAAE,kBAAkB,EAAE,eAAe;IACjD,aAAa,EAAE,gCAAgC,EAAE,iBAAiB;IAClE,cAAc,EAAE,uCAAuC,EAAE,wBAAwB;IACjF,cAAc,EAAE,uCAAuC,EAAE,wBAAwB;IACjF,gBAAgB,EAAE,6CAA6C,EAAE,kCAAkC;IAEnG,8GAA8G;IAC9G,YAAY,EAAE,uCAAuC,EAAE,gBAAgB;IACvE,SAAS,EAAE,iDAAiD,EAAE,aAAa;IAC3E,WAAW,EAAE,sCAAsC,EAAE,cAAc;IACnE,YAAY,EAAE,mDAAmD,EAAE,gBAAgB;IACnF,aAAa,EAAE,0DAA0D,EAAE,uBAAuB;IAClG,aAAa,EAAE,0DAA0D,EAAE,uBAAuB;IAElG,4EAA4E;IAC5E,cAAc,EAAE,6DAA6D,EAAE,mBAAmB;IAClG,mBAAmB,EAAE,4DAA4D,EAAE,gBAAgB;IACnG,oBAAoB,EAAE,yCAAyC,EAAE,iBAAiB;IAClF,cAAc,EAAE,mCAAmC,EAAE,mBAAmB;IACxE,cAAc,EAAE,oCAAoC,EAAE,mBAAmB;IAEzE,qCAAqC;IACrC,WAAW,EAAE,+BAA+B,EAAE,gBAAgB;IAC9D,iBAAiB,EAAE,sCAAsC,EAAE,mBAAmB;IAC9E,aAAa,EAAE,4CAA4C,EAAE,iBAAiB;IAC9E,QAAQ,EAAE,4CAA4C,EAAE,kBAAkB;IAE1E,wCAAwC;IACxC,UAAU,EAAE,4CAA4C,EAAE,wBAAwB;IAClF,oBAAoB,EAAE,gDAAgD,EAAE,yBAAyB;IACjG,oBAAoB,EAAE,iCAAiC,EAAE,wBAAwB;IACjF,sBAAsB,EAAE,mCAAmC,EAAE,0BAA0B;IACvF,qBAAqB,EAAE,kCAAkC,EAAE,yBAAyB;IACpF,aAAa,EAAE,0DAA0D,EAAE,2BAA2B;IACtG,iBAAiB,EAAE,4CAA4C,EAAE,qBAAqB;IACtF,mBAAmB,EAAE,+CAA+C,EAAE,wBAAwB;IAC9F,YAAY,EAAE,kCAAkC,EAAE,gBAAgB;IAClE,mBAAmB,EAAE,0CAA0C,EAAE,oBAAoB;IACrF,YAAY,EAAE,2CAA2C,EAAE,0BAA0B;IACrF,cAAc,EAAE,oBAAoB,EAAE,iBAAiB;IACvD,WAAW,EAAE,4CAA4C,EAAE,yBAAyB;IAEpF,mCAAmC;IACnC,YAAY,EAAE,qCAAqC,EAAE,gBAAgB;IACrE,UAAU,EAAE,8BAA8B,EAAE,cAAc;IAC1D,YAAY,EAAE,kBAAkB,EAAE,eAAe;IACjD,cAAc,EAAE,wCAAwC,EAAE,0BAA0B;IAEpF,uCAAuC;IACvC,sBAAsB,EAAE,0DAA0D,EAAE,4BAA4B;IAChH,eAAe,EAAE,mDAAmD,EAAE,oBAAoB;IAC1F,mBAAmB,EAAE,gEAAgE,EAAE,kCAAkC;IACzH,iBAAiB,EAAE,2CAA2C,EAAE,sBAAsB;IACtF,iBAAiB,EAAE,2EAA2E,EAAE,+BAA+B;IAC/H,kBAAkB,EAAE,0DAA0D,EAAE,gCAAgC;IAChH,UAAU,EAAE,iEAAiE,EAAE,8DAA8D;IAE7I,uCAAuC;IACvC,sBAAsB,EAAE,gDAAgD,EAAE,uBAAuB;IACjG,oBAAoB,EAAE,4DAA4D,EAAE,wBAAwB;IAC5G,iBAAiB,EAAE,2DAA2D,EAAE,uBAAuB;IACvG,0BAA0B,EAAE,wDAAwD,EAAE,oBAAoB;IAC1G,WAAW,EAAE,oDAAoD,EAAE,gBAAgB;IACnF,kBAAkB,EAAE,iEAAiE,EAAE,6BAA6B;IACpH,cAAc,EAAE,uDAAuD,EAAE,mBAAmB;IAE5F,kCAAkC;IAClC,eAAe,EAAE,uDAAuD,EAAE,0BAA0B;IACpG,YAAY,EAAE,oDAAoD,EAAE,uBAAuB;IAC3F,iBAAiB,EAAE,yDAAyD,EAAE,4BAA4B;IAC1G,cAAc,EAAE,sDAAsD,EAAE,yBAAyB;IACjG,sBAAsB,EAAE,wDAAwD,EAAE,2BAA2B;IAC7G,mBAAmB,EAAE,qDAAqD,EAAE,wBAAwB;IACpG,mBAAmB,EAAE,qDAAqD,EAAE,wBAAwB;IACpG,qBAAqB,EAAE,uDAAuD,EAAE,0BAA0B;IAC1G,oBAAoB,EAAE,sDAAsD,EAAE,yBAAyB;IACvG,gBAAgB,EAAE,8CAA8C,EAAE,iBAAiB;IACnF,gBAAgB,EAAE,8CAA8C,EAAE,iBAAiB;IACnF,kBAAkB,EAAE,gDAAgD,EAAE,mBAAmB;IACzF,iBAAiB,EAAE,+CAA+C,EAAE,kBAAkB;IAEtF,iEAAiE;IACjE,mBAAmB,EAAE,2BAA2B,EAAE,0CAA0C;CACpF,CAAA;AAEV,uFAAuF;AACvF,MAAM,CAAC,MAAM,qBAAqB,GAAG,MAAM,CAAC,IAAI,CAC9C,kBAAkB,CACoB,CAAA;AAExC;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG;IACxC,8EAA8E;IAC9E,kEAAkE;IAClE,iBAAiB;IACjB,4EAA4E;IAC5E,+DAA+D;IAC/D,iBAAiB;IACjB,+EAA+E;IAC/E,wEAAwE;IACxE,wBAAwB,EAAE,8CAA8C;IACxE,yBAAyB,EAAE,8CAA8C;IACzE,0BAA0B,EAAE,oEAAoE;IAChG,0BAA0B,EAAE,6DAA6D;IACzF,2EAA2E;IAC3E,6EAA6E;IAC7E,6BAA6B,EAAE,uCAAuC;IACtE,8BAA8B,EAAE,iDAAiD;IACjF,8EAA8E;IAC9E,4DAA4D;IAC5D,0BAA0B,EAAE,wDAAwD;IACpF,+EAA+E;IAC/E,qEAAqE;IACrE,iBAAiB,EAAE,gCAAgC;IACnD,yEAAyE;IACzE,6EAA6E;IAC7E,8EAA8E;IAC9E,wEAAwE;IACxE,QAAQ,EAAE,kBAAkB;IAC5B,eAAe,EAAE,yBAAyB;IAC1C,0EAA0E;IAC1E,qEAAqE;IACrE,uBAAuB,EAAE,wCAAwC;IACjE,oEAAoE;IACpE,4EAA4E;IAC5E,6EAA6E;IAC7E,2EAA2E;IAC3E,8EAA8E;IAC9E,qCAAqC;IACrC,yBAAyB,EAAE,0CAA0C;IACrE,4BAA4B,EAAE,6CAA6C;IAC3E,qFAAqF;IACrF,sFAAsF;IACtF,uEAAuE;IACvE,6BAA6B,EAAE,uCAAuC;IACtE,qFAAqF;IACrF,+EAA+E;IAC/E,mFAAmF;IACnF,mFAAmF;IACnF,0CAA0C;IAC1C,yBAAyB,EAAE,0CAA0C;IACrE,iFAAiF;IACjF,oFAAoF;IACpF,wEAAwE;IACxE,iFAAiF;IACjF,oFAAoF;IACpF,uBAAuB,EAAE,2BAA2B;CAC5C,CAAA"}

package/dist/spec/openapi.yaml

@@ -113,6 +113,14 @@ components:
           maxLength: 3
           minLength: 3
           type: string
+        direction:
+          description: Side of the adjustment entry, DEBIT or CREDIT. Optional; DEBIT when omitted. The amount stays positive either way
+          enum:
+            - DEBIT
+            - CREDIT
+          examples:
+            - DEBIT
+          type: string
         effectiveAt:
           description: When the adjustment takes effect, as an RFC 3339 timestamp
           examples:
@@ -2328,6 +2336,10 @@ components:
     CreateManualMatchRequest:
       additionalProperties: false
       properties:
+        exceptionId:
+          description: Optional exception the operator is pairing. Its transaction must be one of transactionIds; confirming the match resolves it in the same write, unless it is no longer open or is under an active dispute
+          format: uuid
+          type: string
         notes:
           description: Optional note for the manual match
           type: string
@@ -2423,7 +2435,7 @@ components:
             - file
           type: string
         scheduleSpec:
-          description: Interval schedule spec the binding scheduler reads (cron or @every duration).
+          description: "How often the binding scheduler runs: a positive duration such as 15m, optionally written @every 15m. Cron expressions are refused."
           examples:
             - "@every 1h"
           maxLength: 100
@@ -3145,10 +3157,13 @@ components:
             - BUSINESS_DECISION
           type: string
         resolutionType:
-          description: "How the exception was resolved: FORCE_MATCH (override match) or ADJUST_ENTRY (monetary correction)"
+          description: "How the exception was resolved: FORCE_MATCH (override match), ADJUST_ENTRY (monetary correction), MANUAL_MATCH (the manual match that paired it), AUTO_CONSUME (closed automatically when a run settled its transaction against a carried open item) or UNMATCH_WITHDRAWN (withdrawn by an un-match: the match that raised it, or the manual match that resolved it, was undone)"
           enum:
             - FORCE_MATCH
             - ADJUST_ENTRY
+            - MANUAL_MATCH
+            - AUTO_CONSUME
+            - UNMATCH_WITHDRAWN
           examples:
             - FORCE_MATCH
           type: string
@@ -7692,7 +7707,7 @@ components:
             - file
           type: string
         scheduleSpec:
-          description: Interval schedule spec the binding scheduler reads (cron or @every duration).
+          description: "How often the binding scheduler runs: a positive duration such as 15m, optionally written @every 15m. Cron expressions are refused."
           examples:
             - "@every 1h"
           type: string
@@ -7839,7 +7854,7 @@ components:
       additionalProperties: false
       properties:
         currency:
-          description: ISO 4217 currency code for the monetary amounts in this row.
+          description: ISO 4217 currency code for the monetary amounts in this row; empty when the source holds more than one currency in the window, whose amounts are then a cross-currency sum.
           examples:
             - USD
           type: string
@@ -8270,6 +8285,47 @@ components:
         - healthy
         - latencyMs
       type: object
+    TokenListResponse:
+      additionalProperties: false
+      properties:
+        tokens:
+          description: The tenant's webhook tokens (live and revoked), newest first. Metadata only — never the token or its hash.
+          items:
+            $ref: "#/components/schemas/TokenMetadata"
+          type:
+            - array
+            - "null"
+      required:
+        - tokens
+      type: object
+    TokenMetadata:
+      additionalProperties: false
+      properties:
+        configName:
+          description: Config name of the aggregator connection the token is bound to
+          type: string
+        createdAt:
+          description: Mint time (RFC 3339, UTC)
+          type: string
+        id:
+          description: Surrogate id of the token
+          format: uuid
+          type: string
+        revokedAt:
+          description: When this token was revoked (RFC 3339, UTC); absent if live
+          type: string
+        vendor:
+          description: Aggregator vendor the token is bound to
+          enum:
+            - pluggy
+            - belvo
+          type: string
+      required:
+        - id
+        - vendor
+        - configName
+        - createdAt
+      type: object
     TransactionResponse:
       additionalProperties: false
       properties:
@@ -8754,7 +8810,7 @@ components:
           maxLength: 255
           type: string
         scheduleSpec:
-          description: Interval schedule spec the binding scheduler reads (cron or @every duration).
+          description: "How often the binding scheduler runs: a positive duration such as 15m, optionally written @every 15m. Cron expressions are refused."
           examples:
             - "@every 30m"
           maxLength: 100
@@ -9022,7 +9078,7 @@ components:
       additionalProperties: false
       properties:
         matchedAmount:
-          description: Total monetary value of matched transactions, as a decimal string in the source currency.
+          description: "Total monetary value of matched transactions, as a decimal string: an arithmetic sum across currencies, a money figure only when the window holds one currency."
           examples:
             - "1180000.00"
           type: string
@@ -9045,7 +9101,7 @@ components:
           format: date-time
           type: string
         totalAmount:
-          description: Total monetary value of all transactions, as a decimal string in the source currency.
+          description: "Total monetary value of all transactions, as a decimal string: an arithmetic sum across currencies, a money figure only when the window holds one currency."
           examples:
             - "1250000.00"
           type: string
@@ -9056,7 +9112,7 @@ components:
           format: int64
           type: integer
         unmatchedAmount:
-          description: Total monetary value of unmatched transactions, as a decimal string in the source currency.
+          description: "Total monetary value of unmatched transactions, as a decimal string: an arithmetic sum across currencies, a money figure only when the window holds one currency (see unmatchedByCurrency)."
           examples:
             - "70000.00"
           type: string
@@ -9218,17 +9274,19 @@ info:
 
     ## Idempotency
 
-    POST, PUT and PATCH requests accept an optional `X-Idempotency` header. It is the one header a key travels in and it has no synonym: a mutating request that carries an older spelling and no `X-Idempotency` is refused with 400 rather than processed unkeyed. Keys are 1-128 characters of letters, digits, hyphen, underscore or colon, are scoped per tenant, caller, method and request target, and are strictly opt-in: a request sent without the header is never de-duplicated. A retry under a key whose first attempt completed replays that stored response and carries `X-Idempotency-Replayed: true`; a retry that arrives while the first attempt is still in flight is refused with 409.
+    POST, PUT and PATCH requests accept an optional `X-Idempotency` header. It is the one header a key travels in and it has no synonym: a mutating request that carries an older spelling and no `X-Idempotency` is refused with 400 rather than processed unkeyed. Keys are 1-128 characters of letters, digits, hyphen, underscore or colon, are scoped per tenant, caller, method and request target, and are strictly opt-in: a request sent without the header is never de-duplicated. A retry under a key whose first attempt completed replays that stored response and carries `X-Idempotency-Replayed: true`; a retry that arrives while the first attempt is still in flight is refused with 409 `MTCH-0018`.
 
     A retry must repeat the original request. On an ordinary route the body is part of what identifies it, so a completed key re-sent with a DIFFERENT body is refused with 422 and nothing is applied — send the correction under a new key. The two file routes (`POST /v1/imports/contexts/{contextId}/sources/{sourceId}/upload` and the matching `/preview`) consume their body as a live stream and cannot re-read it, so there the key itself is the identity under that method and path: a completed key re-sent replays the first answer whatever file the retry carries.
 
-    A key is ONE attempt. A refusal the request earned is recorded like any other answer, and every resend under that key replays it for the retention window — a caller that wants to correct its request mints a new key. Three answers do NOT spend the key, because none of them is an answer to the request itself: a 429 from the rate limiter, a 402 from the volume quota, and a 502 with code `MTCH-0513`, where the dispatch target answered and DECLINED before anything was created there. Every other 5xx HOLDS the key, including that code's near neighbour, the dispatch whose outcome could not be confirmed (502, code `MTCH-0514`), whose exception may already exist in the target system: the outcome was not recorded, so every resend under that key is refused 409 and nothing is sent again. Deliberately attempting such an operation again therefore requires a NEW key.
+    A key is ONE attempt. A refusal the request earned is recorded like any other answer, and every resend under that key replays it for the retention window — a caller that wants to correct its request mints a new key. Three answers do NOT spend the key, because none of them is an answer to the request itself: a 429 from the rate limiter, a 402 from the volume quota, and a 502 with code `MTCH-0513`, where the dispatch target answered and DECLINED before anything was created there. Every other 5xx HOLDS the key, including that code's near neighbour, the dispatch whose outcome could not be confirmed (502, code `MTCH-0514`), whose exception may already exist in the target system: the outcome was not recorded, so every resend under that key is refused 409 `MTCH-0022` and nothing is sent again. Deliberately attempting such an operation again therefore requires a NEW key.
 
     `X-Idempotency-Fenced` rides every response whose outcome the guard could not receipt, a 2xx included. `true` means the hold landed: the key still protects the operation and every resend under it is refused 409. Only `false` means a resend would EXECUTE — the answer in hand may already have applied and the key no longer protects it, so check whether the first attempt took effect before sending anything again.
 
-    Two bounds close the contract. A response larger than about 1 MB is delivered to its caller in full, but it is not stored for replay: a duplicate under the same key is answered 409 instead of replayed. And an over-sized body is refused with 413 and spends nothing. On every route but one the service-wide request body limit refuses it before the key is read. The streaming upload (`POST /v1/imports/contexts/{contextId}/sources/{sourceId}/upload`) is exempt from that limit: the key is read first and ingestion enforces its own upload limit inside the handler, so its 413 is a fourth answer that releases the key, and a smaller file may be re-sent under it.
+    `MTCH-0022` is the one code for a 409 saying an earlier attempt under this key already ran: it may already have applied and nothing is run again under that key, so keep the key and check the outcome before sending anything. Every other 409 refuses the request itself.
+
+    Two bounds close the contract. A response larger than about 1 MB is delivered to its caller in full, but it is not stored for replay: a duplicate under the same key is answered 409 `MTCH-0022` instead of replayed. And an over-sized body is refused with 413 and spends nothing. On every route but one the service-wide request body limit refuses it before the key is read. The streaming upload (`POST /v1/imports/contexts/{contextId}/sources/{sourceId}/upload`) is exempt from that limit: the key is read first and ingestion enforces its own upload limit inside the handler, so its 413 is a fourth answer that releases the key, and a smaller file may be re-sent under it.
 
-    Secret mints are another, sharper exception. `POST /v1/discovery/aggregator-connections/{id}/connect-token`, `POST /v1/discovery/webhooks/tokens`, `POST /v1/exceptions/callbacks/credentials` and `POST /v1/exceptions/callbacks/credentials/{credentialId}/rotate` each return a raw credential exactly ONCE, and storing that answer would keep the secret re-readable for the life of the key — so those four routes IGNORE the idempotency header entirely. Nothing is stored, nothing is replayed, and `X-Idempotency-Replayed` is never sent on them. A retry under the same key MINTS AGAIN and leaves a second live credential behind, so treat a mint as non-idempotent: read the first attempt's response rather than resending it. A surplus callback credential can be revoked through its own operation; a surplus aggregator webhook token has no revoke operation today and stays live.
+    Secret mints are another, sharper exception. `POST /v1/discovery/aggregator-connections/{id}/connect-token`, `POST /v1/discovery/webhooks/tokens`, `POST /v1/exceptions/callbacks/credentials` and `POST /v1/exceptions/callbacks/credentials/{credentialId}/rotate` each return a raw credential exactly ONCE, and storing that answer would keep the secret re-readable for the life of the key — so those four routes IGNORE the idempotency header entirely. Nothing is stored, nothing is replayed, and `X-Idempotency-Replayed` is never sent on them. A retry under the same key MINTS AGAIN and leaves a second live credential behind, so treat a mint as non-idempotent: read the first attempt's response rather than resending it. A surplus callback credential or aggregator webhook token shows in its list operation (metadata only, never the secret) and is revoked through its own operation.
   license:
     name: Lerian Studio General License
   title: Matcher Reconciliation API
@@ -11657,6 +11715,27 @@ paths:
       tags:
         - Discovery
   /v1/discovery/webhooks/tokens:
+    get:
+      description: Lists the caller tenant's aggregator webhook tokens (live and revoked), newest first. Returns metadata only — never the token or its hash.
+      operationId: listAggregatorWebhookTokens
+      responses:
+        "200":
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/TokenListResponse"
+          description: OK
+        default:
+          content:
+            application/problem+json:
+              schema:
+                $ref: "#/components/schemas/Detail"
+          description: Error
+      security:
+        - BearerAuth: []
+      summary: List aggregator webhook tokens
+      tags:
+        - Discovery
     post:
       description: Mints a webhook token bound to an existing aggregator connection and returns the raw token plus its provider-facing webhook URL ONCE. Only the token's SHA-256 hash is stored.
       operationId: mintAggregatorWebhookToken
@@ -11684,6 +11763,35 @@ paths:
       summary: Mint an aggregator webhook token
       tags:
         - Discovery
+  /v1/discovery/webhooks/tokens/{tokenId}:
+    delete:
+      description: Revokes an aggregator webhook token so vendor deliveries to its URL are refused. Revocation is terminal and append-only audited. Other live tokens for the same connection keep working.
+      operationId: revokeAggregatorWebhookToken
+      parameters:
+        - description: Id of the token to revoke
+          in: path
+          name: tokenId
+          required: true
+          schema:
+            description: Id of the token to revoke
+            examples:
+              - 550e8400-e29b-41d4-a716-446655440000
+            format: uuid
+            type: string
+      responses:
+        "204":
+          description: No Content
+        default:
+          content:
+            application/problem+json:
+              schema:
+                $ref: "#/components/schemas/Detail"
+          description: Error
+      security:
+        - BearerAuth: []
+      summary: Revoke an aggregator webhook token
+      tags:
+        - Discovery
   /v1/discovery/webhooks/{provider}/{webhookToken}:
     post:
       description: "Receives a Pluggy/Belvo aggregator webhook and asynchronously pulls the signaled data into the ingestion pipeline. This route carries no operator JWT. It is authenticated by an opaque token in the URL path (resolved to a tenant binding server-side, never claimed) PLUS a per-provider source check: a valid HMAC-SHA256 of the raw body in the X-Webhook-Signature header, OR membership in the provider's source-IP allowlist. Both layers fail closed; the tenant is derived solely from the resolved token binding."
@@ -12201,7 +12309,7 @@ paths:
         - Exception
   /v1/exceptions/bulk/assign:
     post:
-      description: Assigns multiple exceptions to a single assignee. Partial success is supported -- each exception is processed independently.
+      description: Assigns multiple exceptions to a single assignee; an exception already assigned moves to the new assignee. Partial success is supported -- each exception is processed independently.
       operationId: bulkAssignExceptions
       requestBody:
         content:
@@ -12604,7 +12712,7 @@ paths:
         - Exception
   /v1/exceptions/{exceptionId}/assign:
     post:
-      description: Assigns a single exception to a user. Mirrors the bulk-assign auth and validation but acts on exactly one exception addressed by path. Returns the updated exception.
+      description: Assigns a single exception to a user; an exception already assigned moves to the new assignee and its history records both. Mirrors the bulk-assign auth and validation but acts on exactly one exception addressed by path. Returns the updated exception.
       operationId: assignException
       parameters:
         - description: Exception ID (UUID)
@@ -14456,7 +14564,7 @@ paths:
         - Ingestion
   /v1/imports/contexts/{contextId}/sources/{sourceId}/fetch:
     post:
-      description: Lists every object matching the supplied transport coordinates (SFTP today) and streams each into the trusted-content ingestion pipeline (dedup + outbox + match-trigger), returning a per-file outcome in fetch order. The tenant is resolved from the JWT and the context/source from the path — NEVER from the body. The body carries connection coordinates plus an OPAQUE credential reference, never a secret. A transport-level fetch failure (the external endpoint is unreachable or rejects the credential) returns 503; per-file intake failures are reported in the response body without failing the batch.
+      description: Lists every object matching the supplied transport coordinates (SFTP today) and streams each into the trusted-content ingestion pipeline (dedup + outbox + match-trigger), returning a per-file outcome in fetch order. The tenant is resolved from the JWT and the context/source from the path — NEVER from the body. The body carries connection coordinates plus an OPAQUE credential reference, never a secret. Settings the transport cannot use (an invalid field, a credential reference that does not resolve, an SFTP fetch without a known_hosts host key) return 400. A transport-level fetch failure (the external endpoint is unreachable or rejects the credential) returns 503; per-file intake failures are reported in the response body without failing the batch.
       operationId: fetchTrigger
       parameters:
         - description: Context ID
@@ -15049,7 +15157,7 @@ paths:
         - Matching
   /v1/matching/candidates:
     get:
-      description: "Returns a ranked list of opposite-side unmatched transactions the engine considers plausible counterparts for the target transaction, each with a confidence score, the rule that drove it, a per-component rationale (the \"why\"), and amount/date deltas. Powers the exception-resolution and manual-match candidate pickers. Scope: proposals are scored by the deterministic rule engine over raw transaction amounts and do NOT apply run-time fee normalization or the FX-variance band; only 1:1 pairwise counterparts are returned."
+      description: "Returns a ranked list of opposite-side unmatched transactions the engine considers plausible counterparts for the target transaction, each with a confidence score, the rule that drove it, a per-component rationale (the \"why\"), and amount/date deltas. Powers the exception-resolution and manual-match candidate pickers. Scope: proposals are scored by the deterministic rule engine over raw transaction amounts and do NOT apply run-time fee normalization or the FX-variance band; only 1:1 pairwise counterparts are returned. A target that is not UNMATCHED (for example an exception raised on an already matched leg) has no counterpart and returns an empty list."
       operationId: listMatchCandidates
       parameters:
         - description: Context ID the transaction belongs to
@@ -15565,7 +15673,7 @@ paths:
         - Matching
   /v1/matching/manual:
     post:
-      description: Manually links multiple transactions (at least 2) into a match group with 100% confidence. Transactions must be UNMATCHED and belong to the specified context.
+      description: Manually links multiple transactions (at least 2) into a match group with 100% confidence. Transactions must be UNMATCHED and belong to the specified context. When exceptionId names the exception being paired, the same write resolves it.
       operationId: createManualMatch
       parameters:
         - description: Context ID the transactions belong to

package/dist/tools/exception/adjust-entry.js

@@ -4,8 +4,8 @@
 // adjustment entry, used when a monetary correction is needed to reconcile the
 // transaction. Mirrors the spec's AdjustEntryRequest — reasonCode, notes, amount
 // (decimal STRING, positive), currency (ISO 4217, 3 letters) and effectiveAt
-// (RFC 3339), all required. exceptionId is a path param; no tenant field is
-// accepted.
+// (RFC 3339), all required, plus an optional direction (DEBIT or CREDIT,
+// DEBIT when omitted). exceptionId is a path param; no tenant field is accepted.
 import { z } from 'zod';
 import { bodyWithout } from '../request-fields.js';
 import { dispatchToolRequest } from '../shared-dispatch.js';
@@ -39,6 +39,10 @@ export const adjustEntryInputShape = {
         .string()
         .describe('When the adjustment takes effect, as an RFC 3339 timestamp (e.g. ' +
         '"2025-01-20T10:30:00Z").'),
+    direction: z
+        .enum(['DEBIT', 'CREDIT'])
+        .optional()
+        .describe('Side of the adjustment entry, DEBIT or CREDIT; DEBIT when omitted. The amount stays positive either way.'),
 };
 /**
  * Build the POST body from the input minus the path-only `exceptionId`. Only the
@@ -57,7 +61,8 @@ export function registerExceptionAdjustEntryTool(server) {
         description: 'Resolve a reconciliation exception by creating a balancing adjustment ' +
             'entry. Provide exceptionId (UUID path param), reasonCode (1–255), notes ' +
             '(1–1000), amount (positive decimal string, e.g. "150.50"), currency (ISO ' +
-            '4217, 3 letters), and effectiveAt (RFC 3339). No tenant field is ' +
+            '4217, 3 letters), effectiveAt (RFC 3339), and optionally direction ' +
+            '(DEBIT or CREDIT, DEBIT when omitted). No tenant field is ' +
             'accepted. Returns the updated exception, or a structured RFC 9457 error.',
         inputSchema: adjustEntryInputShape,
     }, async (args, extra) => {

package/dist/tools/exception/adjust-entry.js.map

@@ -1 +1 @@
-{"version":3,"file":"adjust-entry.js","sourceRoot":"","sources":["../../../src/tools/exception/adjust-entry.ts"],"names":[],"mappings":"AAAA,qFAAqF;AACrF,EAAE;AACF,sEAAsE;AACtE,+EAA+E;AAC/E,iFAAiF;AACjF,6EAA6E;AAC7E,4EAA4E;AAC5E,YAAY;AAEZ,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAGvB,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAA;AAElD,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAA;AAC3D,OAAO,EAAE,wBAAwB,EAAE,MAAM,aAAa,CAAA;AAEtD,oFAAoF;AACpF,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,WAAW,EAAE,CAAC;SACX,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,CAAC,8DAA8D,CAAC;IAC3E,UAAU,EAAE,CAAC;SACV,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,GAAG,CAAC;SACR,QAAQ,CAAC,sEAAsE,CAAC;IACnF,KAAK,EAAE,CAAC;SACL,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,IAAI,CAAC;SACT,QAAQ,CAAC,iDAAiD,CAAC;IAC9D,MAAM,EAAE,CAAC;SACN,MAAM,EAAE;SACR,QAAQ,CACP,wEAAwE;QACtE,gEAAgE,CACnE;IACH,QAAQ,EAAE,CAAC;SACR,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,CAAC,0EAA0E,CAAC;IACvF,WAAW,EAAE,CAAC;SACX,MAAM,EAAE;SACR,QAAQ,CACP,mEAAmE;QACjE,0BAA0B,CAC7B;CACJ,CAAA;AAKD;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAClC,IAAsB;IAEtB,OAAO,WAAW,CAAC,IAAI,EAAE,CAAC,aAAa,CAAC,CAAC,CAAA;AAC3C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gCAAgC,CAAC,MAAiB;IAChE,MAAM,CAAC,YAAY,CACjB,wBAAwB,EACxB;QACE,WAAW,EACT,wEAAwE;YACxE,0EAA0E;YAC1E,2EAA2E;YAC3E,mEAAmE;YACnE,0EAA0E;QAC5E,WAAW,EAAE,qBAAqB;KACnC,EACD,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE;QACpB,OAAO,mBAAmB,CACxB;YACE,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,wBAAwB,CAAC,IAAI,CAAC,WAAW,CAAC;YAChD,IAAI,EAAE,oBAAoB,CAAC,IAAI,CAAC;SACjC,EACD,KAAK,CACN,CAAA;IACH,CAAC,CACF,CAAA;AACH,CAAC"}
+{"version":3,"file":"adjust-entry.js","sourceRoot":"","sources":["../../../src/tools/exception/adjust-entry.ts"],"names":[],"mappings":"AAAA,qFAAqF;AACrF,EAAE;AACF,sEAAsE;AACtE,+EAA+E;AAC/E,iFAAiF;AACjF,6EAA6E;AAC7E,yEAAyE;AACzE,iFAAiF;AAEjF,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAGvB,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAA;AAElD,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAA;AAC3D,OAAO,EAAE,wBAAwB,EAAE,MAAM,aAAa,CAAA;AAEtD,oFAAoF;AACpF,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,WAAW,EAAE,CAAC;SACX,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,CAAC,8DAA8D,CAAC;IAC3E,UAAU,EAAE,CAAC;SACV,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,GAAG,CAAC;SACR,QAAQ,CAAC,sEAAsE,CAAC;IACnF,KAAK,EAAE,CAAC;SACL,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,IAAI,CAAC;SACT,QAAQ,CAAC,iDAAiD,CAAC;IAC9D,MAAM,EAAE,CAAC;SACN,MAAM,EAAE;SACR,QAAQ,CACP,wEAAwE;QACtE,gEAAgE,CACnE;IACH,QAAQ,EAAE,CAAC;SACR,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,CAAC,0EAA0E,CAAC;IACvF,WAAW,EAAE,CAAC;SACX,MAAM,EAAE;SACR,QAAQ,CACP,mEAAmE;QACjE,0BAA0B,CAC7B;IACH,SAAS,EAAE,CAAC;SACT,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;SACzB,QAAQ,EAAE;SACV,QAAQ,CAAC,0GAA0G,CAAC;CACxH,CAAA;AAKD;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAClC,IAAsB;IAEtB,OAAO,WAAW,CAAC,IAAI,EAAE,CAAC,aAAa,CAAC,CAAC,CAAA;AAC3C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gCAAgC,CAAC,MAAiB;IAChE,MAAM,CAAC,YAAY,CACjB,wBAAwB,EACxB;QACE,WAAW,EACT,wEAAwE;YACxE,0EAA0E;YAC1E,2EAA2E;YAC3E,qEAAqE;YACrE,4DAA4D;YAC5D,0EAA0E;QAC5E,WAAW,EAAE,qBAAqB;KACnC,EACD,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE;QACpB,OAAO,mBAAmB,CACxB;YACE,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,wBAAwB,CAAC,IAAI,CAAC,WAAW,CAAC;YAChD,IAAI,EAAE,oBAAoB,CAAC,IAAI,CAAC;SACjC,EACD,KAAK,CACN,CAAA;IACH,CAAC,CACF,CAAA;AACH,CAAC"}

package/dist/tools/tool-error.js

@@ -16,13 +16,32 @@ import { MatcherApiError } from '../matcher/client.js';
 const GUIDANCE_RETRYABLE = 'matcher backend was unavailable/timed out; retry';
 /** Guidance shown alongside `retryable: false` — the request itself must change. */
 const GUIDANCE_NOT_RETRYABLE = 'fix the request';
+/**
+ * The idempotency fence's two 409s mean KEEP THE KEY, the opposite of a domain
+ * refusal (MTCH-0007), which a caller corrects and resends under a new key.
+ */
+const KEY_HELD = {
+    'MTCH-0018': {
+        retryable: true,
+        guidance: 'an earlier request with this idempotency key is still in flight; wait, then retry with the same key',
+    },
+    'MTCH-0022': {
+        retryable: false,
+        guidance: 'an earlier request with this idempotency key already ran and may have applied; check the outcome before sending again; keep the key',
+    },
+};
 /**
  * Classify a matcher HTTP status into a retryability hint. Backend
  * unavailability/timeouts (any 5xx — including the synthetic 504 for transport
  * failures — and 429 Too Many Requests) are retryable as-is; every other
- * client-side 4xx is not (the caller must change the request first).
+ * client-side 4xx is not (the caller must change the request first), except the
+ * idempotency fence codes in KEY_HELD.
  */
-function retryabilityFor(status) {
+function retryabilityFor(status, code) {
+    const held = status === 409 && code !== undefined ? KEY_HELD[code] : undefined;
+    if (held !== undefined) {
+        return held;
+    }
     const retryable = status >= 500 || status === 429;
     return {
         retryable,
@@ -40,7 +59,7 @@ function retryabilityFor(status) {
  */
 export function toToolError(err) {
     const { status, problem } = err;
-    const { retryable, guidance } = retryabilityFor(status);
+    const { retryable, guidance } = retryabilityFor(status, problem.code);
     const payload = {
         status,
         ...(problem.title !== undefined ? { title: problem.title } : {}),

package/dist/tools/tool-error.js.map

@@ -1 +1 @@
-{"version":3,"file":"tool-error.js","sourceRoot":"","sources":["../../src/tools/tool-error.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,EAAE;AACF,8EAA8E;AAC9E,8EAA8E;AAC9E,gFAAgF;AAChF,+EAA+E;AAC/E,qBAAqB;AACrB,EAAE;AACF,4EAA4E;AAC5E,+EAA+E;AAC/E,8EAA8E;AAC9E,qFAAqF;AACrF,kDAAkD;AAIlD,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAA;AA4BtD,qFAAqF;AACrF,MAAM,kBAAkB,GACtB,kDAAkD,CAAA;AACpD,oFAAoF;AACpF,MAAM,sBAAsB,GAAG,iBAAiB,CAAA;AAEhD;;;;;GAKG;AACH,SAAS,eAAe,CAAC,MAAc;IAIrC,MAAM,SAAS,GAAG,MAAM,IAAI,GAAG,IAAI,MAAM,KAAK,GAAG,CAAA;IACjD,OAAO;QACL,SAAS;QACT,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,sBAAsB;KAClE,CAAA;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,WAAW,CAAC,GAAoB;IAC9C,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,GAAG,CAAA;IAC/B,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,eAAe,CAAC,MAAM,CAAC,CAAA;IACvD,MAAM,OAAO,GAAqB;QAChC,MAAM;QACN,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChE,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnE,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7D,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7D,GAAG,CAAC,OAAO,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzE,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnE,SAAS;QACT,QAAQ;KACT,CAAA;IAED,MAAM,OAAO,GACX,OAAO,CAAC,KAAK,KAAK,SAAS;QACzB,CAAC,CAAC,iBAAiB,MAAM,KAAK,OAAO,CAAC,KAAK,EAAE;QAC7C,CAAC,CAAC,iBAAiB,MAAM,EAAE,CAAA;IAE/B,OAAO;QACL,OAAO,EAAE,IAAI;QACb,OAAO,EAAE;YACP,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE;YAC/B,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE;SAChD;KACF,CAAA;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,GAAY;IAC5C,OAAO,GAAG,YAAY,eAAe,CAAA;AACvC,CAAC"}
+{"version":3,"file":"tool-error.js","sourceRoot":"","sources":["../../src/tools/tool-error.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,EAAE;AACF,8EAA8E;AAC9E,8EAA8E;AAC9E,gFAAgF;AAChF,+EAA+E;AAC/E,qBAAqB;AACrB,EAAE;AACF,4EAA4E;AAC5E,+EAA+E;AAC/E,8EAA8E;AAC9E,qFAAqF;AACrF,kDAAkD;AAIlD,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAA;AA4BtD,qFAAqF;AACrF,MAAM,kBAAkB,GACtB,kDAAkD,CAAA;AACpD,oFAAoF;AACpF,MAAM,sBAAsB,GAAG,iBAAiB,CAAA;AAEhD;;;GAGG;AACH,MAAM,QAAQ,GAEV;IACF,WAAW,EAAE;QACX,SAAS,EAAE,IAAI;QACf,QAAQ,EACN,qGAAqG;KACxG;IACD,WAAW,EAAE;QACX,SAAS,EAAE,KAAK;QAChB,QAAQ,EACN,qIAAqI;KACxI;CACF,CAAA;AAED;;;;;;GAMG;AACH,SAAS,eAAe,CACtB,MAAc,EACd,IAAwB;IAKxB,MAAM,IAAI,GAAG,MAAM,KAAK,GAAG,IAAI,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IAC9E,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,OAAO,IAAI,CAAA;IACb,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,IAAI,GAAG,IAAI,MAAM,KAAK,GAAG,CAAA;IACjD,OAAO;QACL,SAAS;QACT,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,sBAAsB;KAClE,CAAA;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,WAAW,CAAC,GAAoB;IAC9C,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,GAAG,CAAA;IAC/B,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,eAAe,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,CAAA;IACrE,MAAM,OAAO,GAAqB;QAChC,MAAM;QACN,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChE,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnE,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7D,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7D,GAAG,CAAC,OAAO,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzE,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnE,SAAS;QACT,QAAQ;KACT,CAAA;IAED,MAAM,OAAO,GACX,OAAO,CAAC,KAAK,KAAK,SAAS;QACzB,CAAC,CAAC,iBAAiB,MAAM,KAAK,OAAO,CAAC,KAAK,EAAE;QAC7C,CAAC,CAAC,iBAAiB,MAAM,EAAE,CAAA;IAE/B,OAAO;QACL,OAAO,EAAE,IAAI;QACb,OAAO,EAAE;YACP,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE;YAC/B,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE;SAChD;KACF,CAAA;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,GAAY;IAC5C,OAAO,GAAG,YAAY,eAAe,CAAA;AACvC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lerianstudio/matcher-mcp",
-  "version": "5.0.0",
+  "version": "5.1.0-beta.1",
   "type": "module",
   "description": "Model Context Protocol server for the Matcher reconciliation engine",
   "license": "Apache-2.0",