@open-loyalty/mcp-server 1.0.2 → 1.1.0

package/dist/tools/webhook.js

@@ -1,7 +1,43 @@
 import { z } from "zod";
 import { apiGet, apiPost, apiPut, apiDelete } from "../client/http.js";
 import { formatApiError } from "../utils/errors.js";
-import { getConfig } from "../config.js";
+import { getStoreCode } from "../config.js";
+// SSRF protection: validate webhook URLs are external HTTPS endpoints
+function isValidWebhookUrl(url) {
+    try {
+        const parsed = new URL(url);
+        // Must be HTTPS
+        if (parsed.protocol !== "https:") {
+            return false;
+        }
+        const hostname = parsed.hostname.toLowerCase();
+        // Block localhost and loopback
+        if (hostname === "localhost" ||
+            hostname === "127.0.0.1" ||
+            hostname === "0.0.0.0" ||
+            hostname === "::1" ||
+            hostname.endsWith(".localhost")) {
+            return false;
+        }
+        // Block cloud metadata endpoints
+        if (hostname === "169.254.169.254" || hostname === "metadata.google.internal") {
+            return false;
+        }
+        // Block private IP ranges (basic check for common patterns)
+        if (hostname.startsWith("10.") ||
+            hostname.startsWith("192.168.") ||
+            hostname.match(/^172\.(1[6-9]|2[0-9]|3[0-1])\./)) {
+            return false;
+        }
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+const webhookUrlSchema = z.string()
+    .url("Must be a valid URL")
+    .refine(isValidWebhookUrl, "URL must be an external HTTPS endpoint (no localhost, private IPs, or metadata endpoints)");
 // Input Schemas
 export const WebhookListInputSchema = {
     storeCode: z.string().optional().describe("Store code. If not provided, uses the default store code from configuration."),
@@ -13,7 +49,7 @@ export const WebhookListInputSchema = {
 export const WebhookCreateInputSchema = {
     storeCode: z.string().optional().describe("Store code. If not provided, uses the default store code from configuration."),
     eventName: z.string().describe("Event name to subscribe to. Use webhook_events to discover available events."),
-    url: z.string().describe("URL to receive webhook events."),
+    url: webhookUrlSchema.describe("HTTPS URL to receive webhook events. Must be an external endpoint (no localhost or private IPs)."),
     headers: z.array(z.object({
         headerName: z.string().describe("Header name."),
         headerValue: z.string().describe("Header value."),
@@ -27,7 +63,7 @@ export const WebhookUpdateInputSchema = {
     storeCode: z.string().optional().describe("Store code. If not provided, uses the default store code from configuration."),
     webhookSubscriptionId: z.string().describe("The webhook subscription ID (UUID) to update."),
     eventName: z.string().optional().describe("Event name to subscribe to."),
-    url: z.string().optional().describe("URL to receive webhook events."),
+    url: webhookUrlSchema.optional().describe("HTTPS URL to receive webhook events. Must be an external endpoint (no localhost or private IPs)."),
     headers: z.array(z.object({
         headerName: z.string().describe("Header name."),
         headerValue: z.string().describe("Header value."),
@@ -42,8 +78,7 @@ export const WebhookEventsInputSchema = {
 };
 // Handler functions
 export async function webhookList(input) {
-    const config = getConfig();
-    const storeCode = input.storeCode || config.defaultStoreCode;
+    const storeCode = getStoreCode(input.storeCode);
     const params = new URLSearchParams();
     if (input.page)
         params.append("_page", String(input.page));
@@ -64,8 +99,7 @@ export async function webhookList(input) {
     }
 }
 export async function webhookCreate(input) {
-    const config = getConfig();
-    const storeCode = input.storeCode || config.defaultStoreCode;
+    const storeCode = getStoreCode(input.storeCode);
     const payload = {
         eventName: input.eventName,
         url: input.url,
@@ -82,8 +116,7 @@ export async function webhookCreate(input) {
     }
 }
 export async function webhookGet(input) {
-    const config = getConfig();
-    const storeCode = input.storeCode || config.defaultStoreCode;
+    const storeCode = getStoreCode(input.storeCode);
     try {
         const response = await apiGet(`/${storeCode}/webhook/subscription/${input.webhookSubscriptionId}`);
         return response;
@@ -93,8 +126,7 @@ export async function webhookGet(input) {
     }
 }
 export async function webhookUpdate(input) {
-    const config = getConfig();
-    const storeCode = input.storeCode || config.defaultStoreCode;
+    const storeCode = getStoreCode(input.storeCode);
     const payload = {};
     if (input.eventName)
         payload.eventName = input.eventName;
@@ -110,8 +142,7 @@ export async function webhookUpdate(input) {
     }
 }
 export async function webhookDelete(input) {
-    const config = getConfig();
-    const storeCode = input.storeCode || config.defaultStoreCode;
+    const storeCode = getStoreCode(input.storeCode);
     try {
         await apiDelete(`/${storeCode}/webhook/subscription/${input.webhookSubscriptionId}`);
     }
@@ -120,8 +151,7 @@ export async function webhookDelete(input) {
     }
 }
 export async function webhookEvents(input) {
-    const config = getConfig();
-    const storeCode = input.storeCode || config.defaultStoreCode;
+    const storeCode = getStoreCode(input.storeCode);
     try {
         const response = await apiGet(`/${storeCode}/webhook/event`);
         return response;
@@ -134,37 +164,50 @@ export async function webhookEvents(input) {
 export const webhookToolDefinitions = [
     {
         name: "openloyalty_webhook_list",
+        title: "List Webhook Subscriptions",
         description: "List webhook subscriptions with optional filtering. Returns paginated list of subscriptions with webhookSubscriptionId, eventName, url, and createdAt.",
+        readOnly: true,
         inputSchema: WebhookListInputSchema,
         handler: webhookList,
     },
     {
         name: "openloyalty_webhook_create",
+        title: "Create Webhook Subscription",
         description: "Create a new webhook subscription to receive event notifications. Returns webhookSubscriptionId on success. Use webhook_events to discover available event types before creating subscriptions.",
+        readOnly: false,
         inputSchema: WebhookCreateInputSchema,
         handler: webhookCreate,
     },
     {
         name: "openloyalty_webhook_get",
+        title: "Get Webhook Subscription Details",
         description: "Get full webhook subscription details including headers configuration.",
+        readOnly: true,
         inputSchema: WebhookGetInputSchema,
         handler: webhookGet,
     },
     {
         name: "openloyalty_webhook_update",
+        title: "Update Webhook Subscription",
         description: "Update a webhook subscription. Can update eventName, url, and headers. Returns void on success (204 No Content).",
+        readOnly: false,
         inputSchema: WebhookUpdateInputSchema,
         handler: webhookUpdate,
     },
     {
         name: "openloyalty_webhook_delete",
+        title: "Delete Webhook Subscription (Permanent)",
         description: "Delete a webhook subscription. Returns void on success (204 No Content). The subscription will stop receiving events immediately.",
+        readOnly: false,
+        destructive: true,
         inputSchema: WebhookDeleteInputSchema,
         handler: webhookDelete,
     },
     {
         name: "openloyalty_webhook_events",
+        title: "List Available Webhook Events",
         description: "Get available webhook event types. Returns list of event names that can be used when creating webhook subscriptions. Use this to discover available events before creating subscriptions.",
+        readOnly: true,
         inputSchema: WebhookEventsInputSchema,
         handler: webhookEvents,
     },

package/dist/types/schemas/achievement.d.ts

@@ -607,303 +607,6 @@ export declare const AchievementListItemSchema: z.ZodObject<{
     badgeTypeId?: string | undefined;
 }>;
 export type AchievementListItem = z.infer<typeof AchievementListItemSchema>;
-/**
- * Achievement Create Input Schema.
- * Matches the POST /api/{storeCode}/achievement body structure.
- * IMPORTANT: Request must be wrapped as { achievement: {...} }
- */
-export declare const AchievementCreateInputSchema: z.ZodObject<{
-    translations: z.ZodRecord<z.ZodString, z.ZodObject<{
-        name: z.ZodString;
-        description: z.ZodOptional<z.ZodString>;
-    }, "strip", z.ZodTypeAny, {
-        name: string;
-        description?: string | undefined;
-    }, {
-        name: string;
-        description?: string | undefined;
-    }>>;
-    active: z.ZodOptional<z.ZodBoolean>;
-    activity: z.ZodOptional<z.ZodObject<{
-        startsAt: z.ZodOptional<z.ZodString>;
-        endsAt: z.ZodOptional<z.ZodString>;
-        data: z.ZodOptional<z.ZodString>;
-        operator: z.ZodOptional<z.ZodString>;
-    }, "strip", z.ZodTypeAny, {
-        data?: string | undefined;
-        operator?: string | undefined;
-        startsAt?: string | undefined;
-        endsAt?: string | undefined;
-    }, {
-        data?: string | undefined;
-        operator?: string | undefined;
-        startsAt?: string | undefined;
-        endsAt?: string | undefined;
-    }>>;
-    limit: z.ZodOptional<z.ZodObject<{
-        value: z.ZodOptional<z.ZodNumber>;
-        interval: z.ZodOptional<z.ZodObject<{
-            type: z.ZodString;
-            value: z.ZodOptional<z.ZodNumber>;
-        }, "strip", z.ZodTypeAny, {
-            type: string;
-            value?: number | undefined;
-        }, {
-            type: string;
-            value?: number | undefined;
-        }>>;
-    }, "strip", z.ZodTypeAny, {
-        value?: number | undefined;
-        interval?: {
-            type: string;
-            value?: number | undefined;
-        } | undefined;
-    }, {
-        value?: number | undefined;
-        interval?: {
-            type: string;
-            value?: number | undefined;
-        } | undefined;
-    }>>;
-    rules: z.ZodArray<z.ZodObject<{
-        achievementRuleId: z.ZodOptional<z.ZodString>;
-        translations: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
-            name: z.ZodString;
-            description: z.ZodOptional<z.ZodString>;
-        }, "strip", z.ZodTypeAny, {
-            name: string;
-            description?: string | undefined;
-        }, {
-            name: string;
-            description?: string | undefined;
-        }>>>;
-        trigger: z.ZodOptional<z.ZodString>;
-        type: z.ZodOptional<z.ZodString>;
-        event: z.ZodOptional<z.ZodString>;
-        completeRule: z.ZodObject<{
-            periodGoal: z.ZodUnion<[z.ZodNumber, z.ZodString]>;
-            period: z.ZodOptional<z.ZodObject<{
-                consecutive: z.ZodOptional<z.ZodNumber>;
-                value: z.ZodOptional<z.ZodNumber>;
-            }, "strip", z.ZodTypeAny, {
-                value?: number | undefined;
-                consecutive?: number | undefined;
-            }, {
-                value?: number | undefined;
-                consecutive?: number | undefined;
-            }>>;
-            uniqueAttribute: z.ZodOptional<z.ZodString>;
-        }, "strip", z.ZodTypeAny, {
-            periodGoal: string | number;
-            period?: {
-                value?: number | undefined;
-                consecutive?: number | undefined;
-            } | undefined;
-            uniqueAttribute?: string | undefined;
-        }, {
-            periodGoal: string | number;
-            period?: {
-                value?: number | undefined;
-                consecutive?: number | undefined;
-            } | undefined;
-            uniqueAttribute?: string | undefined;
-        }>;
-        aggregation: z.ZodOptional<z.ZodObject<{
-            rule: z.ZodOptional<z.ZodString>;
-        }, "strip", z.ZodTypeAny, {
-            rule?: string | undefined;
-        }, {
-            rule?: string | undefined;
-        }>>;
-        conditions: z.ZodOptional<z.ZodArray<z.ZodRecord<z.ZodString, z.ZodUnknown>, "many">>;
-        limit: z.ZodOptional<z.ZodObject<{
-            value: z.ZodOptional<z.ZodNumber>;
-            interval: z.ZodOptional<z.ZodObject<{
-                type: z.ZodString;
-                value: z.ZodOptional<z.ZodNumber>;
-            }, "strip", z.ZodTypeAny, {
-                type: string;
-                value?: number | undefined;
-            }, {
-                type: string;
-                value?: number | undefined;
-            }>>;
-        }, "strip", z.ZodTypeAny, {
-            value?: number | undefined;
-            interval?: {
-                type: string;
-                value?: number | undefined;
-            } | undefined;
-        }, {
-            value?: number | undefined;
-            interval?: {
-                type: string;
-                value?: number | undefined;
-            } | undefined;
-        }>>;
-        uniqueReferee: z.ZodOptional<z.ZodBoolean>;
-    }, "strip", z.ZodTypeAny, {
-        completeRule: {
-            periodGoal: string | number;
-            period?: {
-                value?: number | undefined;
-                consecutive?: number | undefined;
-            } | undefined;
-            uniqueAttribute?: string | undefined;
-        };
-        type?: string | undefined;
-        conditions?: Record<string, unknown>[] | undefined;
-        translations?: Record<string, {
-            name: string;
-            description?: string | undefined;
-        }> | undefined;
-        trigger?: string | undefined;
-        event?: string | undefined;
-        achievementRuleId?: string | undefined;
-        aggregation?: {
-            rule?: string | undefined;
-        } | undefined;
-        limit?: {
-            value?: number | undefined;
-            interval?: {
-                type: string;
-                value?: number | undefined;
-            } | undefined;
-        } | undefined;
-        uniqueReferee?: boolean | undefined;
-    }, {
-        completeRule: {
-            periodGoal: string | number;
-            period?: {
-                value?: number | undefined;
-                consecutive?: number | undefined;
-            } | undefined;
-            uniqueAttribute?: string | undefined;
-        };
-        type?: string | undefined;
-        conditions?: Record<string, unknown>[] | undefined;
-        translations?: Record<string, {
-            name: string;
-            description?: string | undefined;
-        }> | undefined;
-        trigger?: string | undefined;
-        event?: string | undefined;
-        achievementRuleId?: string | undefined;
-        aggregation?: {
-            rule?: string | undefined;
-        } | undefined;
-        limit?: {
-            value?: number | undefined;
-            interval?: {
-                type: string;
-                value?: number | undefined;
-            } | undefined;
-        } | undefined;
-        uniqueReferee?: boolean | undefined;
-    }>, "many">;
-    badgeTypeId: z.ZodOptional<z.ZodString>;
-}, "strip", z.ZodTypeAny, {
-    translations: Record<string, {
-        name: string;
-        description?: string | undefined;
-    }>;
-    rules: {
-        completeRule: {
-            periodGoal: string | number;
-            period?: {
-                value?: number | undefined;
-                consecutive?: number | undefined;
-            } | undefined;
-            uniqueAttribute?: string | undefined;
-        };
-        type?: string | undefined;
-        conditions?: Record<string, unknown>[] | undefined;
-        translations?: Record<string, {
-            name: string;
-            description?: string | undefined;
-        }> | undefined;
-        trigger?: string | undefined;
-        event?: string | undefined;
-        achievementRuleId?: string | undefined;
-        aggregation?: {
-            rule?: string | undefined;
-        } | undefined;
-        limit?: {
-            value?: number | undefined;
-            interval?: {
-                type: string;
-                value?: number | undefined;
-            } | undefined;
-        } | undefined;
-        uniqueReferee?: boolean | undefined;
-    }[];
-    active?: boolean | undefined;
-    activity?: {
-        data?: string | undefined;
-        operator?: string | undefined;
-        startsAt?: string | undefined;
-        endsAt?: string | undefined;
-    } | undefined;
-    limit?: {
-        value?: number | undefined;
-        interval?: {
-            type: string;
-            value?: number | undefined;
-        } | undefined;
-    } | undefined;
-    badgeTypeId?: string | undefined;
-}, {
-    translations: Record<string, {
-        name: string;
-        description?: string | undefined;
-    }>;
-    rules: {
-        completeRule: {
-            periodGoal: string | number;
-            period?: {
-                value?: number | undefined;
-                consecutive?: number | undefined;
-            } | undefined;
-            uniqueAttribute?: string | undefined;
-        };
-        type?: string | undefined;
-        conditions?: Record<string, unknown>[] | undefined;
-        translations?: Record<string, {
-            name: string;
-            description?: string | undefined;
-        }> | undefined;
-        trigger?: string | undefined;
-        event?: string | undefined;
-        achievementRuleId?: string | undefined;
-        aggregation?: {
-            rule?: string | undefined;
-        } | undefined;
-        limit?: {
-            value?: number | undefined;
-            interval?: {
-                type: string;
-                value?: number | undefined;
-            } | undefined;
-        } | undefined;
-        uniqueReferee?: boolean | undefined;
-    }[];
-    active?: boolean | undefined;
-    activity?: {
-        data?: string | undefined;
-        operator?: string | undefined;
-        startsAt?: string | undefined;
-        endsAt?: string | undefined;
-    } | undefined;
-    limit?: {
-        value?: number | undefined;
-        interval?: {
-            type: string;
-            value?: number | undefined;
-        } | undefined;
-    } | undefined;
-    badgeTypeId?: string | undefined;
-}>;
-export type AchievementCreateInput = z.infer<typeof AchievementCreateInputSchema>;
 /**
  * Achievement Rule Progress Schema.
  * Tracks a member's progress on a single rule.

package/dist/types/schemas/achievement.js

@@ -123,19 +123,6 @@ export const AchievementListItemSchema = z.object({
     createdAt: z.string().optional(),
     badgeTypeId: z.string().optional(),
 });
-/**
- * Achievement Create Input Schema.
- * Matches the POST /api/{storeCode}/achievement body structure.
- * IMPORTANT: Request must be wrapped as { achievement: {...} }
- */
-export const AchievementCreateInputSchema = z.object({
-    translations: TranslationsSchema.describe("Achievement name and description (at least 'en' required)."),
-    active: z.boolean().optional().describe("Whether achievement is active (default: false)."),
-    activity: AchievementActivitySchema.optional().describe("Time period configuration."),
-    limit: AchievementLimitSchema.optional().describe("Limit configuration."),
-    rules: z.array(AchievementRuleSchema).describe("Achievement rules."),
-    badgeTypeId: z.string().optional().describe("Badge type to award."),
-});
 /**
  * Achievement Rule Progress Schema.
  * Tracks a member's progress on a single rule.

package/dist/types/schemas/admin.d.ts

@@ -79,12 +79,12 @@ export declare const AdminUserSchema: z.ZodObject<{
     createdAt: z.ZodOptional<z.ZodString>;
     dtype: z.ZodOptional<z.ZodString>;
 }, "strip", z.ZodTypeAny, {
-    createdAt?: string | undefined;
-    id?: string | undefined;
     email?: string | undefined;
+    phone?: string | undefined;
     firstName?: string | undefined;
     lastName?: string | undefined;
-    phone?: string | undefined;
+    createdAt?: string | undefined;
+    id?: string | undefined;
     adminId?: string | undefined;
     username?: string | undefined;
     isActive?: boolean | undefined;
@@ -102,12 +102,12 @@ export declare const AdminUserSchema: z.ZodObject<{
     } | undefined;
     dtype?: string | undefined;
 }, {
-    createdAt?: string | undefined;
-    id?: string | undefined;
     email?: string | undefined;
+    phone?: string | undefined;
     firstName?: string | undefined;
     lastName?: string | undefined;
-    phone?: string | undefined;
+    createdAt?: string | undefined;
+    id?: string | undefined;
     adminId?: string | undefined;
     username?: string | undefined;
     isActive?: boolean | undefined;
@@ -139,95 +139,23 @@ export declare const AdminUserListItemSchema: z.ZodObject<{
     isActive: z.ZodOptional<z.ZodBoolean>;
     createdAt: z.ZodOptional<z.ZodString>;
 }, "strip", z.ZodTypeAny, {
-    createdAt?: string | undefined;
-    id?: string | undefined;
     email?: string | undefined;
     firstName?: string | undefined;
     lastName?: string | undefined;
-    username?: string | undefined;
-    isActive?: boolean | undefined;
-}, {
     createdAt?: string | undefined;
     id?: string | undefined;
-    email?: string | undefined;
-    firstName?: string | undefined;
-    lastName?: string | undefined;
     username?: string | undefined;
     isActive?: boolean | undefined;
-}>;
-export type AdminUserListItem = z.infer<typeof AdminUserListItemSchema>;
-/**
- * Admin User Create Input Schema.
- * Input for POST /api/admin/data - uses { admin: {...} } wrapper
- */
-export declare const AdminUserCreateInputSchema: z.ZodObject<{
-    email: z.ZodString;
-    plainPassword: z.ZodString;
-    firstName: z.ZodOptional<z.ZodString>;
-    lastName: z.ZodOptional<z.ZodString>;
-    phone: z.ZodOptional<z.ZodString>;
-    roles: z.ZodOptional<z.ZodArray<z.ZodUnion<[z.ZodString, z.ZodNumber]>, "many">>;
-    isActive: z.ZodOptional<z.ZodBoolean>;
-    external: z.ZodOptional<z.ZodBoolean>;
-    notificationsEnabled: z.ZodOptional<z.ZodBoolean>;
-}, "strip", z.ZodTypeAny, {
-    email: string;
-    plainPassword: string;
-    firstName?: string | undefined;
-    lastName?: string | undefined;
-    phone?: string | undefined;
-    notificationsEnabled?: boolean | undefined;
-    isActive?: boolean | undefined;
-    external?: boolean | undefined;
-    roles?: (string | number)[] | undefined;
-}, {
-    email: string;
-    plainPassword: string;
-    firstName?: string | undefined;
-    lastName?: string | undefined;
-    phone?: string | undefined;
-    notificationsEnabled?: boolean | undefined;
-    isActive?: boolean | undefined;
-    external?: boolean | undefined;
-    roles?: (string | number)[] | undefined;
-}>;
-export type AdminUserCreateInput = z.infer<typeof AdminUserCreateInputSchema>;
-/**
- * Admin User Update Input Schema.
- * Input for PUT /api/admin/data/{adminId} - uses { admin: {...} } wrapper
- */
-export declare const AdminUserUpdateInputSchema: z.ZodObject<{
-    email: z.ZodOptional<z.ZodString>;
-    firstName: z.ZodOptional<z.ZodString>;
-    lastName: z.ZodOptional<z.ZodString>;
-    phone: z.ZodOptional<z.ZodString>;
-    roles: z.ZodOptional<z.ZodArray<z.ZodUnion<[z.ZodString, z.ZodNumber]>, "many">>;
-    isActive: z.ZodOptional<z.ZodBoolean>;
-    external: z.ZodOptional<z.ZodBoolean>;
-    notificationsEnabled: z.ZodOptional<z.ZodBoolean>;
-    plainPassword: z.ZodOptional<z.ZodString>;
-}, "strip", z.ZodTypeAny, {
-    email?: string | undefined;
-    firstName?: string | undefined;
-    lastName?: string | undefined;
-    phone?: string | undefined;
-    notificationsEnabled?: boolean | undefined;
-    isActive?: boolean | undefined;
-    external?: boolean | undefined;
-    roles?: (string | number)[] | undefined;
-    plainPassword?: string | undefined;
 }, {
     email?: string | undefined;
     firstName?: string | undefined;
     lastName?: string | undefined;
-    phone?: string | undefined;
-    notificationsEnabled?: boolean | undefined;
+    createdAt?: string | undefined;
+    id?: string | undefined;
+    username?: string | undefined;
     isActive?: boolean | undefined;
-    external?: boolean | undefined;
-    roles?: (string | number)[] | undefined;
-    plainPassword?: string | undefined;
 }>;
-export type AdminUserUpdateInput = z.infer<typeof AdminUserUpdateInputSchema>;
+export type AdminUserListItem = z.infer<typeof AdminUserListItemSchema>;
 /**
  * Admin Permission Schema.
  * Represents admin permissions.
@@ -246,18 +174,3 @@ export declare const AdminPermissionSchema: z.ZodObject<{
     permissions?: string[] | undefined;
 }>;
 export type AdminPermission = z.infer<typeof AdminPermissionSchema>;
-/**
- * Change Password Input Schema.
- * Input for PUT /api/admin/password
- */
-export declare const ChangePasswordInputSchema: z.ZodObject<{
-    currentPassword: z.ZodString;
-    plainPassword: z.ZodString;
-}, "strip", z.ZodTypeAny, {
-    plainPassword: string;
-    currentPassword: string;
-}, {
-    plainPassword: string;
-    currentPassword: string;
-}>;
-export type ChangePasswordInput = z.infer<typeof ChangePasswordInputSchema>;

package/dist/types/schemas/admin.js

@@ -50,36 +50,6 @@ export const AdminUserListItemSchema = z.object({
     isActive: z.boolean().optional().describe("Whether admin account is active."),
     createdAt: z.string().optional().describe("Account creation timestamp."),
 });
-/**
- * Admin User Create Input Schema.
- * Input for POST /api/admin/data - uses { admin: {...} } wrapper
- */
-export const AdminUserCreateInputSchema = z.object({
-    email: z.string().describe("Admin email address (required)."),
-    plainPassword: z.string().describe("Admin password (required)."),
-    firstName: z.string().optional().describe("Admin first name."),
-    lastName: z.string().optional().describe("Admin last name."),
-    phone: z.string().optional().describe("Admin phone number."),
-    roles: z.array(z.union([z.string(), z.number()])).optional().describe("Role IDs to assign."),
-    isActive: z.boolean().optional().describe("Whether account is active (default: true)."),
-    external: z.boolean().optional().describe("Whether admin is external."),
-    notificationsEnabled: z.boolean().optional().describe("Whether notifications are enabled."),
-});
-/**
- * Admin User Update Input Schema.
- * Input for PUT /api/admin/data/{adminId} - uses { admin: {...} } wrapper
- */
-export const AdminUserUpdateInputSchema = z.object({
-    email: z.string().optional().describe("Admin email address."),
-    firstName: z.string().optional().describe("Admin first name."),
-    lastName: z.string().optional().describe("Admin last name."),
-    phone: z.string().optional().describe("Admin phone number."),
-    roles: z.array(z.union([z.string(), z.number()])).optional().describe("Role IDs to assign."),
-    isActive: z.boolean().optional().describe("Whether account is active."),
-    external: z.boolean().optional().describe("Whether admin is external."),
-    notificationsEnabled: z.boolean().optional().describe("Whether notifications are enabled."),
-    plainPassword: z.string().optional().describe("New password (if changing)."),
-});
 /**
  * Admin Permission Schema.
  * Represents admin permissions.
@@ -89,11 +59,3 @@ export const AdminPermissionSchema = z.object({
     roles: z.array(z.string()).optional().describe("List of role names."),
     permissions: z.array(z.string()).optional().describe("List of permission strings."),
 });
-/**
- * Change Password Input Schema.
- * Input for PUT /api/admin/password
- */
-export const ChangePasswordInputSchema = z.object({
-    currentPassword: z.string().describe("Current password."),
-    plainPassword: z.string().describe("New password."),
-});