@payware/mcp-server 1.5.0 → 2.0.0

package/src/isv/deep-links/delete-transaction-link.js

@@ -1,155 +0,0 @@
-import { deleteTransactionDeepLink } from '../../shared/deep-links/api.js';
-import { getPartnerIdSafe, getPrivateKeySafe } from '../../config/env.js';
-import { CHANGES } from '../../shared/tool-annotations.js';
-
-/**
- * Delete deep link for a transaction (ISV on behalf of merchant)
- */
-export const deleteTransactionLinkTool = {
-  name: "payware_deep_links_delete_transaction_link",
-  annotations: CHANGES,
-  description: `Delete an active deep link for a transaction on behalf of a merchant. Once deleted, the deep link URL will no longer redirect to the payware mobile app.
-
-**ISV Authentication:**
-- Requires ISV JWT token with merchant partner ID in 'aud' claim
-- Requires OAuth2 token in 'sub' claim
-
-**Use Cases:**
-- Remove expired transaction links
-- Clean up after transaction completion
-- Security cleanup for sensitive transactions
-
-**Important Notes:**
-- Deep links are only supported in production environment
-- Once deleted, the link cannot be recovered - you'll need to create a new one
-- This operation is irreversible`,
-
-  inputSchema: {
-    type: "object",
-    properties: {
-      transactionId: {
-        type: "string",
-        description: "The transaction identifier (e.g., 'pw7e4rCToG')",
-        pattern: "^[a-zA-Z0-9]+$"
-      },
-      merchantPartnerId: {
-        type: "string",
-        description: "Partner ID of the merchant for whom the transaction is being deleted"
-      },
-      oauth2Token: {
-        type: "string",
-        description: "OAuth2 access token for merchant authorization"
-      },
-      isvPartnerId: {
-        type: "string",
-        description: "ISV Partner ID from payware dashboard. Uses PAYWARE_PARTNER_ID env var as default.",
-        default: getPartnerIdSafe()
-      },
-      privateKey: {
-        type: "string",
-        description: "ISV RSA private key for JWT token creation. Uses environment-specific private key as default."
-      }
-    },
-    required: ["transactionId", "merchantPartnerId", "oauth2Token"]
-  },
-
-  async handler(args) {
-    const {
-      transactionId,
-      merchantPartnerId,
-      oauth2Token,
-      isvPartnerId = getPartnerIdSafe(),
-      privateKey = getPrivateKeySafe()
-    } = args;
-
-    if (!transactionId) {
-      throw new Error("transactionId is required");
-    }
-
-    if (!merchantPartnerId) {
-      throw new Error("merchantPartnerId is required for ISV operations");
-    }
-
-    if (!oauth2Token) {
-      throw new Error("oauth2Token is required for ISV operations");
-    }
-
-    if (!isvPartnerId) {
-      throw new Error("ISV Partner ID is required. Provide via 'isvPartnerId' parameter or set PAYWARE_PARTNER_ID environment variable.");
-    }
-
-    if (!privateKey) {
-      throw new Error("Private key is required. Provide via 'privateKey' parameter or set PAYWARE_PRIVATE_KEY environment variable.");
-    }
-
-    try {
-      const result = await deleteTransactionDeepLink({
-        transactionId,
-        partnerType: 'isv',
-        isvPartnerId,
-        privateKey,
-        merchantPartnerId,
-        oauth2Token
-      });
-
-      return {
-        content: [{
-          type: "text",
-          text: `✅ **Transaction Deep Link Deleted (ISV)**
-
-**Deletion Details:**
-- Transaction ID: ${transactionId}
-- Merchant: ${merchantPartnerId}
-- Status: Successfully deleted
-- Link URL: https://go.payware.eu/${transactionId} (now inactive)
-
-**ISV Authentication:**
-- ISV Partner ID: ${isvPartnerId}
-- Merchant Partner ID: ${merchantPartnerId}
-- OAuth2 Token: ${oauth2Token.substring(0, 10)}...
-
-**API Call Details:**
-- Endpoint: DELETE ${result.requestInfo.url}
-- Status: ${result.requestInfo.statusCode}
-- Method: ${result.requestInfo.method}
-
-**Result:**
-- The deep link is no longer active
-- Mobile redirects will no longer work
-- URL will return an error if accessed
-
-**Important Notes:**
-⚠️ This operation is irreversible
-⚠️ Create a new link if needed using \`payware_deep_links_get_transaction_link\`
-⚠️ Any existing shared links will stop working immediately`
-        }]
-      };
-    } catch (error) {
-      return {
-        content: [{
-          type: "text",
-          text: `❌ **Failed to Delete Transaction Deep Link (ISV)**
-
-**Error Details:**
-- Transaction ID: ${transactionId}
-- Merchant: ${merchantPartnerId}
-- Message: ${error.message}
-
-**Common Issues:**
-1. **Link not found**: Deep link may already be deleted or never existed
-2. **Authentication failed**: Verify ISV partner ID, private key, and OAuth2 token
-3. **Authorization failed**: Ensure OAuth2 token authorizes access to merchant
-4. **Sandbox environment**: Deep links are production-only
-5. **Invalid transaction ID**: Ensure transaction ID format is correct
-
-**Troubleshooting:**
-1. Check if deep link exists using \`payware_deep_links_get_transaction_link\`
-2. Check OAuth2 token is valid and not expired
-3. Ensure ISV has permission to access merchant data
-4. Verify running in production environment
-5. Ensure JWT authentication is working`
-        }]
-      };
-    }
-  }
-};

package/src/isv/deep-links/get-product-link.js

@@ -1,169 +0,0 @@
-import { getProductDeepLink } from '../../shared/deep-links/api.js';
-import { getPartnerIdSafe, getPrivateKeySafe } from '../../config/env.js';
-import { ADDS } from '../../shared/tool-annotations.js';
-
-/**
- * Get deep link for a product (ISV on behalf of merchant)
- */
-export const getProductLinkTool = {
-  name: "payware_deep_links_get_product_link",
-  annotations: ADDS,
-  description: `Get an active deep link for a product on behalf of a merchant. Returns a clickable URL that redirects to the payware mobile app. For a link whose payments are attributed to one placement of the product (a poster, an ad, a mailing), use payware_products_get_placement_link instead.
-
-**ISV Authentication:**
-- Requires ISV JWT token with merchant partner ID in 'aud' claim
-- Requires OAuth2 token in 'sub' claim
-
-**Deep Link Format:**
-- Web URL: https://go.payware.eu/{productId}
-- Mobile Redirect: payware:/{productId} (one slash: the identifier is case-sensitive, so it must not sit in the URI host, which redirect services lowercase)
-
-**Use Cases:**
-- Mobile-only e-commerce product references
-- Advertisement links to products
-- Product sharing via messaging
-
-**Important Notes:**
-- Deep links are only supported in production environment
-- Apps that open payware links must accept \`payware:\` followed by one, two or three slashes (QR codes and NFC tags carry \`payware://{id}\`): read the identifier after the scheme and any slashes, up to \`/\`, \`?\` or \`#\`, and keep its case
-- Link expiration is synchronized with the referenced product
-- Traditional deep links that route to app content when app is installed`,
-
-  inputSchema: {
-    type: "object",
-    properties: {
-      productId: {
-        type: "string",
-        description: "The product identifier (e.g., 'pr7e4rCToG')",
-        pattern: "^[a-zA-Z0-9]+$"
-      },
-      merchantPartnerId: {
-        type: "string",
-        description: "Partner ID of the merchant for whom the product is being retrieved"
-      },
-      oauth2Token: {
-        type: "string",
-        description: "OAuth2 access token for merchant authorization"
-      },
-      isvPartnerId: {
-        type: "string",
-        description: "ISV Partner ID from payware dashboard. Uses PAYWARE_PARTNER_ID env var as default.",
-        default: getPartnerIdSafe()
-      },
-      privateKey: {
-        type: "string",
-        description: "ISV RSA private key for JWT token creation. Uses environment-specific private key as default."
-      }
-    },
-    required: ["productId", "merchantPartnerId", "oauth2Token"]
-  },
-
-  async handler(args) {
-    const {
-      productId,
-      merchantPartnerId,
-      oauth2Token,
-      isvPartnerId = getPartnerIdSafe(),
-      privateKey = getPrivateKeySafe()
-    } = args;
-
-    if (!productId) {
-      throw new Error("productId is required");
-    }
-
-    if (!merchantPartnerId) {
-      throw new Error("merchantPartnerId is required for ISV operations");
-    }
-
-    if (!oauth2Token) {
-      throw new Error("oauth2Token is required for ISV operations");
-    }
-
-    if (!isvPartnerId) {
-      throw new Error("ISV Partner ID is required. Provide via 'isvPartnerId' parameter or set PAYWARE_PARTNER_ID environment variable.");
-    }
-
-    if (!privateKey) {
-      throw new Error("Private key is required. Provide via 'privateKey' parameter or set PAYWARE_PRIVATE_KEY environment variable.");
-    }
-
-    try {
-      const result = await getProductDeepLink({
-        productId,
-        partnerType: 'isv',
-        isvPartnerId,
-        privateKey,
-        merchantPartnerId,
-        oauth2Token
-      });
-
-      // Extract the URL - API returns either string directly or object with link property
-      const linkUrl = typeof result.data === 'string' ? result.data : (result.data.link || result.data)
-
-      return {
-        content: [{
-          type: "text",
-          text: `🔗 **Product Deep Link Retrieved (ISV)**
-
-**Deep Link Details:**
-- Product ID: ${productId}
-- Merchant: ${merchantPartnerId}
-- Web URL: ${linkUrl}
-- Mobile Redirect: payware:/${productId}
-
-**ISV Authentication:**
-- ISV Partner ID: ${isvPartnerId}
-- Merchant Partner ID: ${merchantPartnerId}
-- OAuth2 Token: ${oauth2Token.substring(0, 10)}...
-
-**Link Information:**
-- Status: Active
-- Expiration: Synchronized with product
-- Platform: Production only
-
-**API Response:**
-\`\`\`json
-${JSON.stringify(result.data, null, 2)}
-\`\`\`
-
-**API Call Details:**
-- Endpoint: GET ${result.requestInfo.url}
-- Status: ${result.requestInfo.statusCode}
-- Method: ${result.requestInfo.method}
-
-**Usage:**
-1. Share the web URL: \`${linkUrl}\`
-2. On mobile devices, it will redirect to: \`payware:/${productId}\`
-3. Link expires when the product expires
-4. Recreate if product is updated`
-        }]
-      };
-    } catch (error) {
-      return {
-        content: [{
-          type: "text",
-          text: `❌ **Failed to Get Product Deep Link (ISV)**
-
-**Error Details:**
-- Product ID: ${productId}
-- Merchant: ${merchantPartnerId}
-- Message: ${error.message}
-
-**Common Issues:**
-1. **Product not found**: Check if product exists and is not expired
-2. **Authentication failed**: Verify ISV partner ID, private key, and OAuth2 token
-3. **Authorization failed**: Ensure OAuth2 token authorizes access to merchant
-4. **Sandbox environment**: Deep links are production-only
-5. **Invalid product ID**: Ensure product ID format is correct
-
-**Troubleshooting:**
-1. Verify product exists in merchant's payware dashboard
-2. Check OAuth2 token is valid and not expired
-3. Ensure ISV has permission to access merchant data
-4. Check if running in production environment
-5. Ensure JWT authentication is working`
-        }]
-      };
-    }
-  }
-};

package/src/isv/deep-links/get-transaction-link.js

@@ -1,169 +0,0 @@
-import { getTransactionDeepLink } from '../../shared/deep-links/api.js';
-import { getPartnerIdSafe, getPrivateKeySafe } from '../../config/env.js';
-import { ADDS } from '../../shared/tool-annotations.js';
-
-/**
- * Get deep link for a transaction (ISV on behalf of merchant)
- */
-export const getTransactionLinkTool = {
-  name: "payware_deep_links_get_transaction_link",
-  annotations: ADDS,
-  description: `Get an active deep link for a transaction on behalf of a merchant. Returns a clickable URL that redirects to the payware mobile app.
-
-**ISV Authentication:**
-- Requires ISV JWT token with merchant partner ID in 'aud' claim
-- Requires OAuth2 token in 'sub' claim
-
-**Deep Link Format:**
-- Web URL: https://go.payware.eu/{transactionId}
-- Mobile Redirect: payware:/{transactionId} (one slash: the identifier is case-sensitive, so it must not sit in the URI host, which redirect services lowercase)
-
-**Use Cases:**
-- P2P payments via messaging services
-- Mobile-only e-commerce payments
-- Advertisement references
-
-**Important Notes:**
-- Deep links are only supported in production environment
-- Apps that open payware links must accept \`payware:\` followed by one, two or three slashes (QR codes and NFC tags carry \`payware://{id}\`): read the identifier after the scheme and any slashes, up to \`/\`, \`?\` or \`#\`, and keep its case
-- Link expiration is synchronized with the referenced transaction
-- Traditional deep links that route to app content when app is installed`,
-
-  inputSchema: {
-    type: "object",
-    properties: {
-      transactionId: {
-        type: "string",
-        description: "The transaction identifier (e.g., 'pw7e4rCToG')",
-        pattern: "^[a-zA-Z0-9]+$"
-      },
-      merchantPartnerId: {
-        type: "string",
-        description: "Partner ID of the merchant for whom the transaction is being retrieved"
-      },
-      oauth2Token: {
-        type: "string",
-        description: "OAuth2 access token for merchant authorization"
-      },
-      isvPartnerId: {
-        type: "string",
-        description: "ISV Partner ID from payware dashboard. Uses PAYWARE_PARTNER_ID env var as default.",
-        default: getPartnerIdSafe()
-      },
-      privateKey: {
-        type: "string",
-        description: "ISV RSA private key for JWT token creation. Uses environment-specific private key as default."
-      }
-    },
-    required: ["transactionId", "merchantPartnerId", "oauth2Token"]
-  },
-
-  async handler(args) {
-    const {
-      transactionId,
-      merchantPartnerId,
-      oauth2Token,
-      isvPartnerId = getPartnerIdSafe(),
-      privateKey = getPrivateKeySafe()
-    } = args;
-
-    if (!transactionId) {
-      throw new Error("transactionId is required");
-    }
-
-    if (!merchantPartnerId) {
-      throw new Error("merchantPartnerId is required for ISV operations");
-    }
-
-    if (!oauth2Token) {
-      throw new Error("oauth2Token is required for ISV operations");
-    }
-
-    if (!isvPartnerId) {
-      throw new Error("ISV Partner ID is required. Provide via 'isvPartnerId' parameter or set PAYWARE_PARTNER_ID environment variable.");
-    }
-
-    if (!privateKey) {
-      throw new Error("Private key is required. Provide via 'privateKey' parameter or set PAYWARE_PRIVATE_KEY environment variable.");
-    }
-
-    try {
-      const result = await getTransactionDeepLink({
-        transactionId,
-        partnerType: 'isv',
-        isvPartnerId,
-        privateKey,
-        merchantPartnerId,
-        oauth2Token
-      });
-
-      // Extract the URL - API returns either string directly or object with link property
-      const linkUrl = typeof result.data === 'string' ? result.data : (result.data.link || result.data)
-
-      return {
-        content: [{
-          type: "text",
-          text: `🔗 **Transaction Deep Link Retrieved (ISV)**
-
-**Deep Link Details:**
-- Transaction ID: ${transactionId}
-- Merchant: ${merchantPartnerId}
-- Web URL: ${linkUrl}
-- Mobile Redirect: payware:/${transactionId}
-
-**ISV Authentication:**
-- ISV Partner ID: ${isvPartnerId}
-- Merchant Partner ID: ${merchantPartnerId}
-- OAuth2 Token: ${oauth2Token.substring(0, 10)}...
-
-**Link Information:**
-- Status: Active
-- Expiration: Synchronized with transaction
-- Platform: Production only
-
-**API Response:**
-\`\`\`json
-${JSON.stringify(result.data, null, 2)}
-\`\`\`
-
-**API Call Details:**
-- Endpoint: GET ${result.requestInfo.url}
-- Status: ${result.requestInfo.statusCode}
-- Method: ${result.requestInfo.method}
-
-**Usage:**
-1. Share the web URL: \`${linkUrl}\`
-2. On mobile devices, it will redirect to: \`payware:/${transactionId}\`
-3. Link expires when the transaction expires
-4. Recreate if transaction is extended`
-        }]
-      };
-    } catch (error) {
-      return {
-        content: [{
-          type: "text",
-          text: `❌ **Failed to Get Transaction Deep Link (ISV)**
-
-**Error Details:**
-- Transaction ID: ${transactionId}
-- Merchant: ${merchantPartnerId}
-- Message: ${error.message}
-
-**Common Issues:**
-1. **Transaction not found**: Check if transaction exists and is not expired
-2. **Authentication failed**: Verify ISV partner ID, private key, and OAuth2 token
-3. **Authorization failed**: Ensure OAuth2 token authorizes access to merchant
-4. **Sandbox environment**: Deep links are production-only
-5. **Invalid transaction ID**: Ensure transaction ID format is correct
-
-**Troubleshooting:**
-1. Verify transaction exists using \`payware_operations_get_transaction_status\`
-2. Check OAuth2 token is valid and not expired
-3. Ensure ISV has permission to access merchant data
-4. Check if running in production environment
-5. Ensure JWT authentication is working`
-        }]
-      };
-    }
-  }
-};

package/src/isv/deep-links/index.js

@@ -1,23 +0,0 @@
-/**
- * ISV Deep Links Tools
- * Deep link management for ISVs acting on behalf of merchants
- */
-
-import { getTransactionLinkTool } from './get-transaction-link.js';
-import { getProductLinkTool } from './get-product-link.js';
-import { deleteTransactionLinkTool } from './delete-transaction-link.js';
-import { deleteProductLinkTool } from './delete-product-link.js';
-
-export const isvDeepLinksTools = [
-  getTransactionLinkTool,
-  getProductLinkTool,
-  deleteTransactionLinkTool,
-  deleteProductLinkTool
-];
-
-export {
-  getTransactionLinkTool,
-  getProductLinkTool,
-  deleteTransactionLinkTool,
-  deleteProductLinkTool
-};

package/src/merchant/deep-links/delete-product-link.js

@@ -1,122 +0,0 @@
-import { deleteProductDeepLink } from '../../shared/deep-links/api.js';
-import { getPartnerIdSafe, getPrivateKeySafe } from '../../config/env.js';
-import { CHANGES } from '../../shared/tool-annotations.js';
-
-/**
- * Delete deep link for a merchant product
- */
-export const deleteProductLinkTool = {
-  name: "payware_deep_links_delete_product_link",
-  annotations: CHANGES,
-  description: `Delete an active deep link for a product. Once deleted, the deep link URL will no longer redirect to the payware mobile app.
-
-**Use Cases:**
-- Remove expired product links
-- Clean up after product removal
-- Security cleanup for discontinued products
-
-**Important Notes:**
-- Deep links are only supported in production environment
-- Once deleted, the link cannot be recovered - you'll need to create a new one
-- This operation is irreversible`,
-
-  inputSchema: {
-    type: "object",
-    properties: {
-      productId: {
-        type: "string",
-        description: "The product identifier (e.g., 'pr7e4rCToG')",
-        pattern: "^[a-zA-Z0-9]+$"
-      },
-      partnerId: {
-        type: "string",
-        description: "Partner ID from payware dashboard. Uses PAYWARE_PARTNER_ID env var as default.",
-        default: getPartnerIdSafe()
-      },
-      privateKey: {
-        type: "string",
-        description: "RSA private key for JWT token creation. Uses environment-specific private key as default."
-      }
-    },
-    required: ["productId"]
-  },
-
-  async handler(args) {
-    const {
-      productId,
-      partnerId = getPartnerIdSafe(),
-      privateKey = getPrivateKeySafe()
-    } = args;
-
-    if (!productId) {
-      throw new Error("productId is required");
-    }
-
-    if (!partnerId) {
-      throw new Error("Partner ID is required. Provide via 'partnerId' parameter or set PAYWARE_PARTNER_ID environment variable.");
-    }
-
-    if (!privateKey) {
-      throw new Error("Private key is required. Provide via 'privateKey' parameter or set PAYWARE_PRIVATE_KEY environment variable.");
-    }
-
-    try {
-      const result = await deleteProductDeepLink({
-        productId,
-        partnerType: 'merchant',
-        partnerId,
-        privateKey
-      });
-
-      return {
-        content: [{
-          type: "text",
-          text: `✅ **Product Deep Link Deleted**
-
-**Deletion Details:**
-- Product ID: ${productId}
-- Status: Successfully deleted
-- Link URL: https://go.payware.eu/${productId} (now inactive)
-
-**API Call Details:**
-- Endpoint: DELETE ${result.requestInfo.url}
-- Status: ${result.requestInfo.statusCode}
-- Method: ${result.requestInfo.method}
-
-**Result:**
-- The deep link is no longer active
-- Mobile redirects will no longer work
-- URL will return an error if accessed
-
-**Important Notes:**
-⚠️ This operation is irreversible
-⚠️ Create a new link if needed using \`payware_deep_links_get_product_link\`
-⚠️ Any existing shared links will stop working immediately`
-        }]
-      };
-    } catch (error) {
-      return {
-        content: [{
-          type: "text",
-          text: `❌ **Failed to Delete Product Deep Link**
-
-**Error Details:**
-- Product ID: ${productId}
-- Message: ${error.message}
-
-**Common Issues:**
-1. **Link not found**: Deep link may already be deleted or never existed
-2. **Authentication failed**: Verify partner ID and private key
-3. **Sandbox environment**: Deep links are production-only
-4. **Invalid product ID**: Ensure product ID format is correct
-
-**Troubleshooting:**
-1. Check if deep link exists using \`payware_deep_links_get_product_link\`
-2. Verify running in production environment
-3. Ensure JWT authentication is working
-4. Confirm product ID is correct`
-        }]
-      };
-    }
-  }
-};