@raytio/mcp-server 10.0.0 → 10.2.0

package/dist/tools/ixn/index.js

@@ -0,0 +1,8 @@
+import { ixnGeneratedReadTools } from './generated-reads.js';
+import { ixnConversationStartTool } from './ixn-conversation-start.js';
+import { ixnMessageSendTool } from './ixn-message-send.js';
+const ixnWriteTools = [ixnConversationStartTool, ixnMessageSendTool];
+export const ixnTools = [...ixnGeneratedReadTools, ...ixnWriteTools];
+/** Read-only slice used by the `ixn-readonly` selectable sub-domain. */
+export const ixnReadOnlyTools = ixnGeneratedReadTools;
+//# sourceMappingURL=index.js.map

package/dist/tools/ixn/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/tools/ixn/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAC7D,OAAO,EAAE,wBAAwB,EAAE,MAAM,6BAA6B,CAAC;AACvE,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAE3D,MAAM,aAAa,GAAW,CAAC,wBAAwB,EAAE,kBAAkB,CAAC,CAAC;AAE7E,MAAM,CAAC,MAAM,QAAQ,GAAW,CAAC,GAAG,qBAAqB,EAAE,GAAG,aAAa,CAAC,CAAC;AAE7E,wEAAwE;AACxE,MAAM,CAAC,MAAM,gBAAgB,GAAW,qBAAqB,CAAC"}

package/dist/tools/ixn/ixn-conversation-start.d.ts

@@ -0,0 +1,22 @@
+import { Tool } from '../registry.js';
+/**
+ * State-change semantic tool: open a new interaction conversation
+ * (`ixn_conversations`). Starting a conversation binds a channel
+ * endpoint / queue to a work-item, lead, or deal, so the tool
+ * requires:
+ *
+ *  - `confirm: true` to prevent accidental invocation;
+ *  - a `channel_endpoint_id` (the outbound / inbound channel this
+ *    thread is being opened on) — required by the pinned contract.
+ *
+ * Only `thread_id` protects a retry: (channel_endpoint_id, thread_id,
+ * tenant_id) is unique, so a repeat fails with a duplicate-key error.
+ * Without it each call opens another conversation, so the tool is not
+ * idempotent by default.
+ *
+ * `ixn_queues` is EXCLUDED from the MCP surface by the queue
+ * guardrail; queue routing is a persist-side concern and callers
+ * reference the queue by id only.
+ */
+export declare const ixnConversationStartTool: Tool;
+//# sourceMappingURL=ixn-conversation-start.d.ts.map

package/dist/tools/ixn/ixn-conversation-start.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ixn-conversation-start.d.ts","sourceRoot":"","sources":["../../../src/tools/ixn/ixn-conversation-start.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AAStC;;;;;;;;;;;;;;;;;;GAkBG;AACH,eAAO,MAAM,wBAAwB,EAAE,IA+EtC,CAAC"}

package/dist/tools/ixn/ixn-conversation-start.js

@@ -0,0 +1,98 @@
+import { z } from 'zod';
+import { API_ERROR, errorResponse, successResponse } from '../types.js';
+import { cap } from '../../capabilities/tool-capability.js';
+import { confirmFlagSchema, unenforcedIdempotencyKeySchema, writeHeadersWithIdempotency, } from '../_shared/side-effect.js';
+/**
+ * State-change semantic tool: open a new interaction conversation
+ * (`ixn_conversations`). Starting a conversation binds a channel
+ * endpoint / queue to a work-item, lead, or deal, so the tool
+ * requires:
+ *
+ *  - `confirm: true` to prevent accidental invocation;
+ *  - a `channel_endpoint_id` (the outbound / inbound channel this
+ *    thread is being opened on) — required by the pinned contract.
+ *
+ * Only `thread_id` protects a retry: (channel_endpoint_id, thread_id,
+ * tenant_id) is unique, so a repeat fails with a duplicate-key error.
+ * Without it each call opens another conversation, so the tool is not
+ * idempotent by default.
+ *
+ * `ixn_queues` is EXCLUDED from the MCP surface by the queue
+ * guardrail; queue routing is a persist-side concern and callers
+ * reference the queue by id only.
+ */
+export const ixnConversationStartTool = {
+    name: 'ixn_conversation_start',
+    description: 'Start a new interaction conversation (ixn_conversations) on a channel endpoint. ' +
+        'Requires confirm=true and a channel_endpoint_id. With thread_id, a retry on the same ' +
+        'channel endpoint fails with a duplicate-key error. Without it, calling again opens another ' +
+        'conversation, so check ixn_conversations_list before retrying.',
+    inputSchema: z.object({
+        channel_endpoint_id: z
+            .string()
+            .min(1)
+            .describe('UUID of the ixn_channel_endpoints row this conversation runs on'),
+        queue_id: z
+            .string()
+            .min(1)
+            .optional()
+            .describe('UUID of the ixn_queues row that routes this conversation'),
+        thread_id: z
+            .string()
+            .max(512)
+            .optional()
+            .describe('External channel-side thread identifier. Unique per channel endpoint.'),
+        conversation_status: z
+            .string()
+            .max(32)
+            .optional()
+            .describe('Initial status from the IXN_CONVERSATIONS_CONVERSATION_STATUS lookup (OPEN, CLOSED)'),
+        lead_id: z.string().min(1).optional().describe('UUID of the sfa_leads row this conversation is scoped to'),
+        deal_id: z.string().min(1).optional().describe('UUID of the sfa_deals row this conversation is scoped to'),
+        org_id: z.string().min(1).optional().describe('UUID of the hrm_organizations_c row this conversation is scoped to'),
+        work_item_id: z
+            .string()
+            .min(1)
+            .optional()
+            .describe('UUID of the ppm_work_items row this conversation is scoped to'),
+        resource_url: z
+            .string()
+            .optional()
+            .describe('Optional URL of the external resource this conversation is anchored on'),
+        metadata: z.record(z.unknown()).optional(),
+        confirm: confirmFlagSchema,
+        idempotency_key: unenforcedIdempotencyKeySchema,
+    }),
+    capabilities: [cap('ixn_conversations', 'INSERT')],
+    sideEffect: 'state_change',
+    confirmation: 'caller_confirms',
+    idempotency: 'not_idempotent',
+    handler: async (args, ctx) => {
+        const input = args;
+        const body = {
+            channel_endpoint_id: input.channel_endpoint_id,
+        };
+        for (const field of [
+            'queue_id',
+            'thread_id',
+            'conversation_status',
+            'lead_id',
+            'deal_id',
+            'org_id',
+            'work_item_id',
+            'resource_url',
+            'metadata',
+        ]) {
+            if (input[field] !== undefined)
+                body[field] = input[field];
+        }
+        try {
+            const rows = await ctx.apiClient.post(`${ctx.apiClient.dbBasePath}/ixn_conversations?select=*`, body, { headers: writeHeadersWithIdempotency(input.idempotency_key) });
+            return successResponse(rows[0]);
+        }
+        catch (error) {
+            return errorResponse(API_ERROR, `Failed to start IXN conversation: ${error.message}`);
+        }
+    },
+};
+//# sourceMappingURL=ixn-conversation-start.js.map

package/dist/tools/ixn/ixn-conversation-start.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ixn-conversation-start.js","sourceRoot":"","sources":["../../../src/tools/ixn/ixn-conversation-start.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACxE,OAAO,EAAE,GAAG,EAAE,MAAM,uCAAuC,CAAC;AAC5D,OAAO,EACL,iBAAiB,EACjB,8BAA8B,EAC9B,2BAA2B,GAC5B,MAAM,2BAA2B,CAAC;AAEnC;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAS;IAC5C,IAAI,EAAE,wBAAwB;IAC9B,WAAW,EACT,kFAAkF;QAClF,uFAAuF;QACvF,6FAA6F;QAC7F,gEAAgE;IAClE,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB,mBAAmB,EAAE,CAAC;aACnB,MAAM,EAAE;aACR,GAAG,CAAC,CAAC,CAAC;aACN,QAAQ,CAAC,iEAAiE,CAAC;QAC9E,QAAQ,EAAE,CAAC;aACR,MAAM,EAAE;aACR,GAAG,CAAC,CAAC,CAAC;aACN,QAAQ,EAAE;aACV,QAAQ,CAAC,0DAA0D,CAAC;QACvE,SAAS,EAAE,CAAC;aACT,MAAM,EAAE;aACR,GAAG,CAAC,GAAG,CAAC;aACR,QAAQ,EAAE;aACV,QAAQ,CAAC,uEAAuE,CAAC;QACpF,mBAAmB,EAAE,CAAC;aACnB,MAAM,EAAE;aACR,GAAG,CAAC,EAAE,CAAC;aACP,QAAQ,EAAE;aACV,QAAQ,CAAC,qFAAqF,CAAC;QAClG,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,0DAA0D,CAAC;QAC1G,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,0DAA0D,CAAC;QAC1G,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,oEAAoE,CAAC;QACnH,YAAY,EAAE,CAAC;aACZ,MAAM,EAAE;aACR,GAAG,CAAC,CAAC,CAAC;aACN,QAAQ,EAAE;aACV,QAAQ,CAAC,+DAA+D,CAAC;QAC5E,YAAY,EAAE,CAAC;aACZ,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,CAAC,wEAAwE,CAAC;QACrF,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;QAC1C,OAAO,EAAE,iBAAiB;QAC1B,eAAe,EAAE,8BAA8B;KAChD,CAAC;IACF,YAAY,EAAE,CAAC,GAAG,CAAC,mBAAmB,EAAE,QAAQ,CAAC,CAAC;IAClD,UAAU,EAAE,cAAc;IAC1B,YAAY,EAAE,iBAAiB;IAC/B,WAAW,EAAE,gBAAgB;IAC7B,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QAC3B,MAAM,KAAK,GAAG,IAA2B,CAAC;QAC1C,MAAM,IAAI,GAAwB;YAChC,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;SAC/C,CAAC;QACF,KAAK,MAAM,KAAK,IAAI;YAClB,UAAU;YACV,WAAW;YACX,qBAAqB;YACrB,SAAS;YACT,SAAS;YACT,QAAQ;YACR,cAAc;YACd,cAAc;YACd,UAAU;SACX,EAAE,CAAC;YACF,IAAI,KAAK,CAAC,KAAK,CAAC,KAAK,SAAS;gBAAE,IAAI,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;QAC7D,CAAC;QACD,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,IAAI,CACnC,GAAG,GAAG,CAAC,SAAS,CAAC,UAAU,6BAA6B,EACxD,IAAI,EACJ,EAAE,OAAO,EAAE,2BAA2B,CAAC,KAAK,CAAC,eAAe,CAAC,EAAE,CAChE,CAAC;YACF,OAAO,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAClC,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,OAAO,aAAa,CAClB,SAAS,EACT,qCAAqC,KAAK,CAAC,OAAO,EAAE,CACrD,CAAC;QACJ,CAAC;IACH,CAAC;CACF,CAAC"}

package/dist/tools/ixn/ixn-message-send.d.ts

@@ -0,0 +1,28 @@
+import { Tool } from '../registry.js';
+/**
+ * Communication semantic tool: dispatch an outbound message on an
+ * existing conversation (`ixn_messages`). The row this creates is
+ * picked up by the channel delivery worker and sent to the customer,
+ * so the tool requires:
+ *
+ *  - `confirm: true` to prevent accidental invocation.
+ *
+ * Not deduplicated: Persist ignores the `Idempotency-Key` header and
+ * `ixn_messages` has no idempotent create path yet, so a repeat call
+ * sends a second message. The description tells callers to check first.
+ *
+ * `direction` is force-set to `OUTBOUND`, the exact value the
+ * `IXN_MESSAGES_DIRECTION` lookup holds and the only value the delivery
+ * trigger fires on — inbound messages arrive
+ * via the channel delivery worker, never via MCP; a caller wanting
+ * to log an inbound message should use the read tools plus the
+ * dedicated inbound-processing endpoints. `delivery_status` is
+ * server-assigned and returned on the created row for status
+ * polling via `ixn_messages_get`.
+ *
+ * Provider credentials (`ixn_channel_endpoints.outbound_credential_ssm_names`)
+ * are never read or set from this tool — the delivery worker
+ * resolves them server-side.
+ */
+export declare const ixnMessageSendTool: Tool;
+//# sourceMappingURL=ixn-message-send.d.ts.map

package/dist/tools/ixn/ixn-message-send.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ixn-message-send.d.ts","sourceRoot":"","sources":["../../../src/tools/ixn/ixn-message-send.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AAStC;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,eAAO,MAAM,kBAAkB,EAAE,IAmEhC,CAAC"}

package/dist/tools/ixn/ixn-message-send.js

@@ -0,0 +1,92 @@
+import { z } from 'zod';
+import { API_ERROR, errorResponse, successResponse } from '../types.js';
+import { cap } from '../../capabilities/tool-capability.js';
+import { confirmFlagSchema, unenforcedIdempotencyKeySchema, writeHeadersWithIdempotency, } from '../_shared/side-effect.js';
+/**
+ * Communication semantic tool: dispatch an outbound message on an
+ * existing conversation (`ixn_messages`). The row this creates is
+ * picked up by the channel delivery worker and sent to the customer,
+ * so the tool requires:
+ *
+ *  - `confirm: true` to prevent accidental invocation.
+ *
+ * Not deduplicated: Persist ignores the `Idempotency-Key` header and
+ * `ixn_messages` has no idempotent create path yet, so a repeat call
+ * sends a second message. The description tells callers to check first.
+ *
+ * `direction` is force-set to `OUTBOUND`, the exact value the
+ * `IXN_MESSAGES_DIRECTION` lookup holds and the only value the delivery
+ * trigger fires on — inbound messages arrive
+ * via the channel delivery worker, never via MCP; a caller wanting
+ * to log an inbound message should use the read tools plus the
+ * dedicated inbound-processing endpoints. `delivery_status` is
+ * server-assigned and returned on the created row for status
+ * polling via `ixn_messages_get`.
+ *
+ * Provider credentials (`ixn_channel_endpoints.outbound_credential_ssm_names`)
+ * are never read or set from this tool — the delivery worker
+ * resolves them server-side.
+ */
+export const ixnMessageSendTool = {
+    name: 'ixn_message_send',
+    description: 'Dispatch an outbound message on an existing IXN conversation (ixn_messages). ' +
+        'Requires confirm=true, conversation_id, sender_identity and body_text. direction is ' +
+        'forced to OUTBOUND. delivery_status is server-assigned; poll status via ixn_messages_get ' +
+        'on the returned row id. Not deduplicated: calling it again sends the message again, so ' +
+        'check ixn_messages_list filtered on conversation_id before retrying.',
+    inputSchema: z.object({
+        conversation_id: z
+            .string()
+            .min(1)
+            .describe('UUID of the ixn_conversations row this message is posted to'),
+        sender_identity: z
+            .string()
+            .min(1)
+            .max(256)
+            .describe('The sender recorded on the message. Email is sent from the channel endpoint address, not this value.'),
+        body_text: z.string().min(1).describe('The plain-text message body to dispatch'),
+        channel_msg_id: z
+            .string()
+            .max(256)
+            .optional()
+            .describe('Optional caller-supplied channel-side message identifier'),
+        sent_by_worker_id: z
+            .string()
+            .min(1)
+            .optional()
+            .describe('Optional UUID of the wrm_workers row this send is attributed to'),
+        org_id: z
+            .string()
+            .min(1)
+            .optional()
+            .describe('UUID of the hrm_organizations_c row this send is scoped to'),
+        metadata: z.record(z.unknown()).optional(),
+        confirm: confirmFlagSchema,
+        idempotency_key: unenforcedIdempotencyKeySchema,
+    }),
+    capabilities: [cap('ixn_messages', 'INSERT')],
+    sideEffect: 'communication',
+    confirmation: 'caller_confirms',
+    idempotency: 'not_idempotent',
+    handler: async (args, ctx) => {
+        const input = args;
+        const body = {
+            conversation_id: input.conversation_id,
+            sender_identity: input.sender_identity,
+            body_text: input.body_text,
+            direction: 'OUTBOUND',
+        };
+        for (const field of ['channel_msg_id', 'sent_by_worker_id', 'org_id', 'metadata']) {
+            if (input[field] !== undefined)
+                body[field] = input[field];
+        }
+        try {
+            const rows = await ctx.apiClient.post(`${ctx.apiClient.dbBasePath}/ixn_messages?select=*`, body, { headers: writeHeadersWithIdempotency(input.idempotency_key) });
+            return successResponse(rows[0]);
+        }
+        catch (error) {
+            return errorResponse(API_ERROR, `Failed to send IXN outbound message: ${error.message}`);
+        }
+    },
+};
+//# sourceMappingURL=ixn-message-send.js.map

package/dist/tools/ixn/ixn-message-send.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ixn-message-send.js","sourceRoot":"","sources":["../../../src/tools/ixn/ixn-message-send.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACxE,OAAO,EAAE,GAAG,EAAE,MAAM,uCAAuC,CAAC;AAC5D,OAAO,EACL,iBAAiB,EACjB,8BAA8B,EAC9B,2BAA2B,GAC5B,MAAM,2BAA2B,CAAC;AAEnC;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAS;IACtC,IAAI,EAAE,kBAAkB;IACxB,WAAW,EACT,+EAA+E;QAC/E,sFAAsF;QACtF,2FAA2F;QAC3F,yFAAyF;QACzF,sEAAsE;IACxE,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB,eAAe,EAAE,CAAC;aACf,MAAM,EAAE;aACR,GAAG,CAAC,CAAC,CAAC;aACN,QAAQ,CAAC,6DAA6D,CAAC;QAC1E,eAAe,EAAE,CAAC;aACf,MAAM,EAAE;aACR,GAAG,CAAC,CAAC,CAAC;aACN,GAAG,CAAC,GAAG,CAAC;aACR,QAAQ,CAAC,sGAAsG,CAAC;QACnH,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,yCAAyC,CAAC;QAChF,cAAc,EAAE,CAAC;aACd,MAAM,EAAE;aACR,GAAG,CAAC,GAAG,CAAC;aACR,QAAQ,EAAE;aACV,QAAQ,CAAC,0DAA0D,CAAC;QACvE,iBAAiB,EAAE,CAAC;aACjB,MAAM,EAAE;aACR,GAAG,CAAC,CAAC,CAAC;aACN,QAAQ,EAAE;aACV,QAAQ,CAAC,iEAAiE,CAAC;QAC9E,MAAM,EAAE,CAAC;aACN,MAAM,EAAE;aACR,GAAG,CAAC,CAAC,CAAC;aACN,QAAQ,EAAE;aACV,QAAQ,CAAC,4DAA4D,CAAC;QACzE,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;QAC1C,OAAO,EAAE,iBAAiB;QAC1B,eAAe,EAAE,8BAA8B;KAChD,CAAC;IACF,YAAY,EAAE,CAAC,GAAG,CAAC,cAAc,EAAE,QAAQ,CAAC,CAAC;IAC7C,UAAU,EAAE,eAAe;IAC3B,YAAY,EAAE,iBAAiB;IAC/B,WAAW,EAAE,gBAAgB;IAC7B,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QAC3B,MAAM,KAAK,GAAG,IAA2B,CAAC;QAC1C,MAAM,IAAI,GAAwB;YAChC,eAAe,EAAE,KAAK,CAAC,eAAe;YACtC,eAAe,EAAE,KAAK,CAAC,eAAe;YACtC,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,SAAS,EAAE,UAAU;SACtB,CAAC;QACF,KAAK,MAAM,KAAK,IAAI,CAAC,gBAAgB,EAAE,mBAAmB,EAAE,QAAQ,EAAE,UAAU,CAAC,EAAE,CAAC;YAClF,IAAI,KAAK,CAAC,KAAK,CAAC,KAAK,SAAS;gBAAE,IAAI,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;QAC7D,CAAC;QACD,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,IAAI,CACnC,GAAG,GAAG,CAAC,SAAS,CAAC,UAAU,wBAAwB,EACnD,IAAI,EACJ,EAAE,OAAO,EAAE,2BAA2B,CAAC,KAAK,CAAC,eAAe,CAAC,EAAE,CAChE,CAAC;YACF,OAAO,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAClC,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,OAAO,aAAa,CAClB,SAAS,EACT,wCAAwC,KAAK,CAAC,OAAO,EAAE,CACxD,CAAC;QACJ,CAAC;IACH,CAAC;CACF,CAAC"}

package/dist/tools/role-mapping.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"role-mapping.d.ts","sourceRoot":"","sources":["../../src/tools/role-mapping.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAE1D;;;;;;;;GAQG;AACH,MAAM,WAAW,SAAS;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAuCD;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,CAiChE;AAED;;;GAGG;AACH,wBAAsB,eAAe,CACnC,SAAS,EAAE,eAAe,GACzB,OAAO,CAAC,SAAS,EAAE,CAAC,CAEtB;AAED;;;;;;;;GAQG;AACH,wBAAsB,kBAAkB,CACtC,SAAS,EAAE,eAAe,GACzB,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAO7B"}
+{"version":3,"file":"role-mapping.d.ts","sourceRoot":"","sources":["../../src/tools/role-mapping.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAE1D;;;;;;;;GAQG;AACH,MAAM,WAAW,SAAS;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAmDD;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,CA6ChE;AAED;;;GAGG;AACH,wBAAsB,eAAe,CACnC,SAAS,EAAE,eAAe,GACzB,OAAO,CAAC,SAAS,EAAE,CAAC,CAEtB;AAED;;;;;;;;GAQG;AACH,wBAAsB,kBAAkB,CACtC,SAAS,EAAE,eAAe,GACzB,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAO7B"}

package/dist/tools/role-mapping.js

@@ -33,6 +33,18 @@ const ROLE_TO_DOMAINS = {
     'Accounts payable administrator': ['fap'],
     'Accounts payable user': ['fap'],
     'Accounts payable viewer': ['fap-readonly'],
+    'Device administrator': ['dcm'],
+    'Device user': ['dcm'],
+    'Device viewer': ['dcm-readonly'],
+    'Booking administrator': ['bkm'],
+    'Booking user': ['bkm'],
+    'Booking viewer': ['bkm-readonly'],
+    'Merchant administrator': ['xrm'],
+    'Merchant user': ['xrm'],
+    'Merchant viewer': ['xrm-readonly'],
+    'Interaction administrator': ['ixn'],
+    'Interaction user': ['ixn'],
+    'Interaction viewer': ['ixn-readonly'],
 };
 /**
  * Given a list of user group names, resolve the set of tool domain IDs
@@ -72,6 +84,18 @@ export function mapRolesToDomains(groupNames) {
     if (domains.has('fap') && domains.has('fap-readonly')) {
         domains.delete('fap-readonly');
     }
+    if (domains.has('dcm') && domains.has('dcm-readonly')) {
+        domains.delete('dcm-readonly');
+    }
+    if (domains.has('bkm') && domains.has('bkm-readonly')) {
+        domains.delete('bkm-readonly');
+    }
+    if (domains.has('xrm') && domains.has('xrm-readonly')) {
+        domains.delete('xrm-readonly');
+    }
+    if (domains.has('ixn') && domains.has('ixn-readonly')) {
+        domains.delete('ixn-readonly');
+    }
     return [...domains];
 }
 /**

package/dist/tools/role-mapping.js.map

@@ -1 +1 @@
-{"version":3,"file":"role-mapping.js","sourceRoot":"","sources":["../../src/tools/role-mapping.ts"],"names":[],"mappings":"AAgBA;;;;GAIG;AACH,MAAM,eAAe,GAA6B;IAChD,uBAAuB,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC;IAC9C,cAAc,EAAE,CAAC,KAAK,EAAE,KAAK,CAAC;IAC9B,gBAAgB,EAAE,CAAC,cAAc,EAAE,cAAc,CAAC;IAClD,4BAA4B,EAAE,CAAC,KAAK,CAAC;IACrC,mBAAmB,EAAE,CAAC,KAAK,CAAC;IAC5B,qBAAqB,EAAE,CAAC,KAAK,CAAC;IAC9B,sBAAsB,EAAE,CAAC,KAAK,EAAE,KAAK,CAAC;IACtC,aAAa,EAAE,CAAC,KAAK,EAAE,KAAK,CAAC;IAC7B,eAAe,EAAE,CAAC,cAAc,CAAC;IACjC,qBAAqB,EAAE,CAAC,KAAK,EAAE,KAAK,CAAC;IACrC,YAAY,EAAE,CAAC,KAAK,EAAE,KAAK,CAAC;IAC5B,cAAc,EAAE,CAAC,cAAc,CAAC;IAChC,yEAAyE;IACzE,2EAA2E;IAC3E,0EAA0E;IAC1E,uBAAuB,EAAE,CAAC,KAAK,EAAE,KAAK,CAAC;IACvC,YAAY,EAAE,CAAC,KAAK,CAAC;IACrB,qBAAqB,EAAE,CAAC,KAAK,CAAC;IAC9B,YAAY,EAAE,CAAC,KAAK,CAAC;IACrB,cAAc,EAAE,CAAC,cAAc,CAAC;IAChC,4BAA4B,EAAE,CAAC,KAAK,CAAC;IACrC,mBAAmB,EAAE,CAAC,KAAK,CAAC;IAC5B,qBAAqB,EAAE,CAAC,cAAc,CAAC;IACvC,mCAAmC,EAAE,CAAC,KAAK,CAAC;IAC5C,0BAA0B,EAAE,CAAC,KAAK,CAAC;IACnC,4BAA4B,EAAE,CAAC,cAAc,CAAC;IAC9C,gCAAgC,EAAE,CAAC,KAAK,CAAC;IACzC,uBAAuB,EAAE,CAAC,KAAK,CAAC;IAChC,yBAAyB,EAAE,CAAC,cAAc,CAAC;CAC5C,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAAC,UAAoB;IACpD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;QACrC,IAAI,MAAM,EAAE,CAAC;YACX,KAAK,MAAM,CAAC,IAAI,MAAM;gBAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACzC,CAAC;IACH,CAAC;IAED,kFAAkF;IAClF,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC;QACtD,OAAO,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;IACjC,CAAC;IACD,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC;QACtD,OAAO,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;IACjC,CAAC;IACD,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC;QACtD,OAAO,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;IACjC,CAAC;IACD,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC;QACtD,OAAO,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;IACjC,CAAC;IACD,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC;QACtD,OAAO,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;IACjC,CAAC;IACD,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC;QACtD,OAAO,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;IACjC,CAAC;IACD,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC;QACtD,OAAO,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;IACjC,CAAC;IAED,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC;AACtB,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,SAA0B;IAE1B,OAAO,SAAS,CAAC,IAAI,CAAc,kCAAkC,EAAE,EAAE,CAAC,CAAC;AAC7E,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,SAA0B;IAE1B,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,SAAS,CAAC,CAAC;IAChD,MAAM,KAAK,GAAG,MAAM;SACjB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC;SACxB,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACrE,MAAM,OAAO,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;IACzC,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC5D,CAAC"}
+{"version":3,"file":"role-mapping.js","sourceRoot":"","sources":["../../src/tools/role-mapping.ts"],"names":[],"mappings":"AAgBA;;;;GAIG;AACH,MAAM,eAAe,GAA6B;IAChD,uBAAuB,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC;IAC9C,cAAc,EAAE,CAAC,KAAK,EAAE,KAAK,CAAC;IAC9B,gBAAgB,EAAE,CAAC,cAAc,EAAE,cAAc,CAAC;IAClD,4BAA4B,EAAE,CAAC,KAAK,CAAC;IACrC,mBAAmB,EAAE,CAAC,KAAK,CAAC;IAC5B,qBAAqB,EAAE,CAAC,KAAK,CAAC;IAC9B,sBAAsB,EAAE,CAAC,KAAK,EAAE,KAAK,CAAC;IACtC,aAAa,EAAE,CAAC,KAAK,EAAE,KAAK,CAAC;IAC7B,eAAe,EAAE,CAAC,cAAc,CAAC;IACjC,qBAAqB,EAAE,CAAC,KAAK,EAAE,KAAK,CAAC;IACrC,YAAY,EAAE,CAAC,KAAK,EAAE,KAAK,CAAC;IAC5B,cAAc,EAAE,CAAC,cAAc,CAAC;IAChC,yEAAyE;IACzE,2EAA2E;IAC3E,0EAA0E;IAC1E,uBAAuB,EAAE,CAAC,KAAK,EAAE,KAAK,CAAC;IACvC,YAAY,EAAE,CAAC,KAAK,CAAC;IACrB,qBAAqB,EAAE,CAAC,KAAK,CAAC;IAC9B,YAAY,EAAE,CAAC,KAAK,CAAC;IACrB,cAAc,EAAE,CAAC,cAAc,CAAC;IAChC,4BAA4B,EAAE,CAAC,KAAK,CAAC;IACrC,mBAAmB,EAAE,CAAC,KAAK,CAAC;IAC5B,qBAAqB,EAAE,CAAC,cAAc,CAAC;IACvC,mCAAmC,EAAE,CAAC,KAAK,CAAC;IAC5C,0BAA0B,EAAE,CAAC,KAAK,CAAC;IACnC,4BAA4B,EAAE,CAAC,cAAc,CAAC;IAC9C,gCAAgC,EAAE,CAAC,KAAK,CAAC;IACzC,uBAAuB,EAAE,CAAC,KAAK,CAAC;IAChC,yBAAyB,EAAE,CAAC,cAAc,CAAC;IAC3C,sBAAsB,EAAE,CAAC,KAAK,CAAC;IAC/B,aAAa,EAAE,CAAC,KAAK,CAAC;IACtB,eAAe,EAAE,CAAC,cAAc,CAAC;IACjC,uBAAuB,EAAE,CAAC,KAAK,CAAC;IAChC,cAAc,EAAE,CAAC,KAAK,CAAC;IACvB,gBAAgB,EAAE,CAAC,cAAc,CAAC;IAClC,wBAAwB,EAAE,CAAC,KAAK,CAAC;IACjC,eAAe,EAAE,CAAC,KAAK,CAAC;IACxB,iBAAiB,EAAE,CAAC,cAAc,CAAC;IACnC,2BAA2B,EAAE,CAAC,KAAK,CAAC;IACpC,kBAAkB,EAAE,CAAC,KAAK,CAAC;IAC3B,oBAAoB,EAAE,CAAC,cAAc,CAAC;CACvC,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAAC,UAAoB;IACpD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;QACrC,IAAI,MAAM,EAAE,CAAC;YACX,KAAK,MAAM,CAAC,IAAI,MAAM;gBAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACzC,CAAC;IACH,CAAC;IAED,kFAAkF;IAClF,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC;QACtD,OAAO,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;IACjC,CAAC;IACD,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC;QACtD,OAAO,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;IACjC,CAAC;IACD,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC;QACtD,OAAO,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;IACjC,CAAC;IACD,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC;QACtD,OAAO,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;IACjC,CAAC;IACD,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC;QACtD,OAAO,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;IACjC,CAAC;IACD,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC;QACtD,OAAO,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;IACjC,CAAC;IACD,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC;QACtD,OAAO,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;IACjC,CAAC;IACD,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC;QACtD,OAAO,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;IACjC,CAAC;IACD,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC;QACtD,OAAO,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;IACjC,CAAC;IACD,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC;QACtD,OAAO,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;IACjC,CAAC;IACD,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC;QACtD,OAAO,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;IACjC,CAAC;IAED,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC;AACtB,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,SAA0B;IAE1B,OAAO,SAAS,CAAC,IAAI,CAAc,kCAAkC,EAAE,EAAE,CAAC,CAAC;AAC7E,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,SAA0B;IAE1B,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,SAAS,CAAC,CAAC;IAChD,MAAM,KAAK,GAAG,MAAM;SACjB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC;SACxB,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACrE,MAAM,OAAO,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;IACzC,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC5D,CAAC"}

package/dist/tools/xrm/generated-reads.d.ts

@@ -0,0 +1,5 @@
+import { Tool } from '../registry.js';
+import { CatalogueReport } from '../../generated-reads/index.js';
+export declare const xrmGeneratedReadReport: CatalogueReport;
+export declare const xrmGeneratedReadTools: Tool[];
+//# sourceMappingURL=generated-reads.d.ts.map

package/dist/tools/xrm/generated-reads.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"generated-reads.d.ts","sourceRoot":"","sources":["../../../src/tools/xrm/generated-reads.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AACtC,OAAO,EAGL,eAAe,EAChB,MAAM,gCAAgC,CAAC;AAqCxC,eAAO,MAAM,sBAAsB,EAAE,eAC8B,CAAC;AAEpE,eAAO,MAAM,qBAAqB,EAAE,IAAI,EAGvC,CAAC"}

package/dist/tools/xrm/generated-reads.js

@@ -0,0 +1,37 @@
+import { buildGeneratedReadCatalogue, buildGeneratedReadCatalogueReport, } from '../../generated-reads/index.js';
+import { loadPersistResourceContract } from '../../contracts/persist-resource-contract.js';
+/**
+ * Bounded read tools for the XRM module (WI-0003508).
+ *
+ * The schema-driven catalogue (WI-0003500) emits describe/list/get for
+ * every `normal`-sensitivity XRM resource that declares a read
+ * operation and has no side effects. The pinned Persist contract
+ * already excludes credential material via the standard credentials
+ * guardrail — `xrm_merchant_authentication_configuration_details`
+ * and `xrm_merchant_payment_processor_credentials` are never surfaced
+ * — so this module gets bounded reads for the safe subset:
+ *
+ *  - `xrm_merchants` — marketplace merchants (organisation records).
+ *  - `xrm_merchant_classifications` — merchant-to-classification
+ *    mapping used by marketplace faceting.
+ *  - `xrm_merchant_countries` — countries a merchant operates in.
+ *  - `xrm_merchant_items` — merchant-to-item catalogue mapping.
+ *  - `xrm_inbound_domain_rules` / `xrm_inbound_email_addresses` /
+ *    `xrm_inbound_email_rules` — inbound-email routing metadata used
+ *    to configure how incoming messages are dispatched.
+ *  - `xrm_inbound_email_quarantine_items` — the read side of the
+ *    inbound-email quarantine so callers can inspect quarantined
+ *    messages.
+ *
+ * The four inbound resources get `describe` only for now: their `list`
+ * and `get` tools need a SELECT capability that no role holds yet
+ * (WI-0009403), so they appear once Persist adds it.
+ *
+ * Every write on a merchant / rule row lives in a dedicated hand-
+ * written tool with explicit confirmation semantics (see
+ * `xrm-merchant-*`, `xrm-inbound-email-rule-*`).
+ */
+const contract = loadPersistResourceContract();
+export const xrmGeneratedReadReport = buildGeneratedReadCatalogueReport(contract, { modules: ['xrm'] });
+export const xrmGeneratedReadTools = buildGeneratedReadCatalogue(contract, { modules: ['xrm'] });
+//# sourceMappingURL=generated-reads.js.map

package/dist/tools/xrm/generated-reads.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"generated-reads.js","sourceRoot":"","sources":["../../../src/tools/xrm/generated-reads.ts"],"names":[],"mappings":"AACA,OAAO,EACL,2BAA2B,EAC3B,iCAAiC,GAElC,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,2BAA2B,EAAE,MAAM,8CAA8C,CAAC;AAE3F;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAEH,MAAM,QAAQ,GAAG,2BAA2B,EAAE,CAAC;AAE/C,MAAM,CAAC,MAAM,sBAAsB,GACjC,iCAAiC,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;AAEpE,MAAM,CAAC,MAAM,qBAAqB,GAAW,2BAA2B,CACtE,QAAQ,EACR,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,CACrB,CAAC"}

package/dist/tools/xrm/index.d.ts

@@ -0,0 +1,5 @@
+import { Tool } from '../registry.js';
+export declare const xrmTools: Tool[];
+/** Read-only slice used by the `xrm-readonly` selectable sub-domain. */
+export declare const xrmReadOnlyTools: Tool[];
+//# sourceMappingURL=index.d.ts.map

package/dist/tools/xrm/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/tools/xrm/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AAYtC,eAAO,MAAM,QAAQ,EAAE,IAAI,EAAiD,CAAC;AAE7E,wEAAwE;AACxE,eAAO,MAAM,gBAAgB,EAAE,IAAI,EAA0B,CAAC"}

package/dist/tools/xrm/index.js

@@ -0,0 +1,13 @@
+import { xrmGeneratedReadTools } from './generated-reads.js';
+import { xrmMerchantCreateTool } from './xrm-merchant-create.js';
+import { xrmMerchantUpdateTool } from './xrm-merchant-update.js';
+import { xrmInboundEmailRuleCreateTool } from './xrm-inbound-email-rule-create.js';
+const xrmWriteTools = [
+    xrmMerchantCreateTool,
+    xrmMerchantUpdateTool,
+    xrmInboundEmailRuleCreateTool,
+];
+export const xrmTools = [...xrmGeneratedReadTools, ...xrmWriteTools];
+/** Read-only slice used by the `xrm-readonly` selectable sub-domain. */
+export const xrmReadOnlyTools = xrmGeneratedReadTools;
+//# sourceMappingURL=index.js.map

package/dist/tools/xrm/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/tools/xrm/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAC7D,OAAO,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AACjE,OAAO,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AACjE,OAAO,EAAE,6BAA6B,EAAE,MAAM,oCAAoC,CAAC;AAEnF,MAAM,aAAa,GAAW;IAC5B,qBAAqB;IACrB,qBAAqB;IACrB,6BAA6B;CAC9B,CAAC;AAEF,MAAM,CAAC,MAAM,QAAQ,GAAW,CAAC,GAAG,qBAAqB,EAAE,GAAG,aAAa,CAAC,CAAC;AAE7E,wEAAwE;AACxE,MAAM,CAAC,MAAM,gBAAgB,GAAW,qBAAqB,CAAC"}

package/dist/tools/xrm/xrm-inbound-email-rule-create.d.ts

@@ -0,0 +1,21 @@
+import { Tool } from '../registry.js';
+/**
+ * State-change semantic tool: create an inbound email routing rule
+ * (`xrm_inbound_email_rules`). Adding a rule changes how future
+ * incoming email is dispatched (or quarantined) for a given inbound
+ * email address, so the tool requires:
+ *
+ *  - `confirm: true` to prevent a model wiring routing changes into
+ *    live mail delivery accidentally;
+ *  - the target `email_id`, the match rule, and the local-part
+ *    pattern set. Persist validates the match type and the FK. It does
+ *    not validate the match rule: IXN capture only recognises `DROP`
+ *    (or `D`), so any other value is stored and has no effect there.
+ *
+ * Not deduplicated: the table's only unique key is its id, so a retry
+ * creates a second rule. Callers cannot check first through MCP yet,
+ * because no role holds SELECT on the inbound email tables, so the
+ * generated reads do not appear (WI-0009403). The description says so.
+ */
+export declare const xrmInboundEmailRuleCreateTool: Tool;
+//# sourceMappingURL=xrm-inbound-email-rule-create.d.ts.map

package/dist/tools/xrm/xrm-inbound-email-rule-create.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"xrm-inbound-email-rule-create.d.ts","sourceRoot":"","sources":["../../../src/tools/xrm/xrm-inbound-email-rule-create.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AAStC;;;;;;;;;;;;;;;;;GAiBG;AACH,eAAO,MAAM,6BAA6B,EAAE,IAsE3C,CAAC"}

package/dist/tools/xrm/xrm-inbound-email-rule-create.js

@@ -0,0 +1,85 @@
+import { z } from 'zod';
+import { API_ERROR, errorResponse, successResponse } from '../types.js';
+import { cap } from '../../capabilities/tool-capability.js';
+import { confirmFlagSchema, unenforcedIdempotencyKeySchema, writeHeadersWithIdempotency, } from '../_shared/side-effect.js';
+/**
+ * State-change semantic tool: create an inbound email routing rule
+ * (`xrm_inbound_email_rules`). Adding a rule changes how future
+ * incoming email is dispatched (or quarantined) for a given inbound
+ * email address, so the tool requires:
+ *
+ *  - `confirm: true` to prevent a model wiring routing changes into
+ *    live mail delivery accidentally;
+ *  - the target `email_id`, the match rule, and the local-part
+ *    pattern set. Persist validates the match type and the FK. It does
+ *    not validate the match rule: IXN capture only recognises `DROP`
+ *    (or `D`), so any other value is stored and has no effect there.
+ *
+ * Not deduplicated: the table's only unique key is its id, so a retry
+ * creates a second rule. Callers cannot check first through MCP yet,
+ * because no role holds SELECT on the inbound email tables, so the
+ * generated reads do not appear (WI-0009403). The description says so.
+ */
+export const xrmInboundEmailRuleCreateTool = {
+    name: 'xrm_inbound_email_rule_create',
+    description: 'Create an inbound email routing rule (xrm_inbound_email_rules). Requires confirm=true, ' +
+        'the target email_id, a match rule, and the local-part patterns to match. Changes how ' +
+        'future incoming mail is dispatched. Not deduplicated: calling it again creates another ' +
+        'rule, and MCP cannot read existing rules or look up an email_id yet, so do not retry ' +
+        'after an unclear result: ask a person to check instead.',
+    inputSchema: z.object({
+        email_id: z
+            .string()
+            .min(1)
+            .describe('UUID of the xrm_inbound_email_addresses row this rule attaches to'),
+        inbound_sender_email_match_rule: z
+            .string()
+            .max(16)
+            .describe('Match rule. DROP (or D) stops matched mail being captured by IXN. Persist does not ' +
+            'validate this field, and IXN capture recognises no other value.'),
+        inbound_sender_email_local_part_matches_text: z
+            .array(z.string().min(1))
+            .min(1)
+            .describe('Local-part patterns the rule matches on'),
+        inbound_sender_email_match_type: z
+            .string()
+            .max(16)
+            .optional()
+            .describe('Match type from the XRM_SENDER_MATCH_TYPE lookup (EXACT, REGEX). Defaults to EXACT.'),
+        inbound_sender_email_match_destinations: z
+            .array(z.string().min(1))
+            .optional()
+            .describe('Optional set of destinations the matched mail is dispatched to'),
+        metadata: z.record(z.unknown()).optional(),
+        confirm: confirmFlagSchema,
+        idempotency_key: unenforcedIdempotencyKeySchema,
+    }),
+    capabilities: [cap('xrm_inbound_email_rules', 'INSERT')],
+    sideEffect: 'state_change',
+    confirmation: 'caller_confirms',
+    idempotency: 'not_idempotent',
+    handler: async (args, ctx) => {
+        const input = args;
+        const body = {
+            email_id: input.email_id,
+            inbound_sender_email_match_rule: input.inbound_sender_email_match_rule,
+            inbound_sender_email_local_part_matches_text: input.inbound_sender_email_local_part_matches_text,
+        };
+        for (const field of [
+            'inbound_sender_email_match_type',
+            'inbound_sender_email_match_destinations',
+            'metadata',
+        ]) {
+            if (input[field] !== undefined)
+                body[field] = input[field];
+        }
+        try {
+            const rows = await ctx.apiClient.post(`${ctx.apiClient.dbBasePath}/xrm_inbound_email_rules?select=*`, body, { headers: writeHeadersWithIdempotency(input.idempotency_key) });
+            return successResponse(rows[0]);
+        }
+        catch (error) {
+            return errorResponse(API_ERROR, `Failed to create XRM inbound email rule: ${error.message}`);
+        }
+    },
+};
+//# sourceMappingURL=xrm-inbound-email-rule-create.js.map

package/dist/tools/xrm/xrm-inbound-email-rule-create.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"xrm-inbound-email-rule-create.js","sourceRoot":"","sources":["../../../src/tools/xrm/xrm-inbound-email-rule-create.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACxE,OAAO,EAAE,GAAG,EAAE,MAAM,uCAAuC,CAAC;AAC5D,OAAO,EACL,iBAAiB,EACjB,8BAA8B,EAC9B,2BAA2B,GAC5B,MAAM,2BAA2B,CAAC;AAEnC;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAS;IACjD,IAAI,EAAE,+BAA+B;IACrC,WAAW,EACT,yFAAyF;QACzF,uFAAuF;QACvF,yFAAyF;QACzF,uFAAuF;QACvF,yDAAyD;IAC3D,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB,QAAQ,EAAE,CAAC;aACR,MAAM,EAAE;aACR,GAAG,CAAC,CAAC,CAAC;aACN,QAAQ,CAAC,mEAAmE,CAAC;QAChF,+BAA+B,EAAE,CAAC;aAC/B,MAAM,EAAE;aACR,GAAG,CAAC,EAAE,CAAC;aACP,QAAQ,CACP,qFAAqF;YACnF,iEAAiE,CACpE;QACH,4CAA4C,EAAE,CAAC;aAC5C,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;aACxB,GAAG,CAAC,CAAC,CAAC;aACN,QAAQ,CAAC,yCAAyC,CAAC;QACtD,+BAA+B,EAAE,CAAC;aAC/B,MAAM,EAAE;aACR,GAAG,CAAC,EAAE,CAAC;aACP,QAAQ,EAAE;aACV,QAAQ,CAAC,qFAAqF,CAAC;QAClG,uCAAuC,EAAE,CAAC;aACvC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;aACxB,QAAQ,EAAE;aACV,QAAQ,CAAC,gEAAgE,CAAC;QAC7E,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;QAC1C,OAAO,EAAE,iBAAiB;QAC1B,eAAe,EAAE,8BAA8B;KAChD,CAAC;IACF,YAAY,EAAE,CAAC,GAAG,CAAC,yBAAyB,EAAE,QAAQ,CAAC,CAAC;IACxD,UAAU,EAAE,cAAc;IAC1B,YAAY,EAAE,iBAAiB;IAC/B,WAAW,EAAE,gBAAgB;IAC7B,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QAC3B,MAAM,KAAK,GAAG,IAA2B,CAAC;QAC1C,MAAM,IAAI,GAAwB;YAChC,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,+BAA+B,EAAE,KAAK,CAAC,+BAA+B;YACtE,4CAA4C,EAC1C,KAAK,CAAC,4CAA4C;SACrD,CAAC;QACF,KAAK,MAAM,KAAK,IAAI;YAClB,iCAAiC;YACjC,yCAAyC;YACzC,UAAU;SACX,EAAE,CAAC;YACF,IAAI,KAAK,CAAC,KAAK,CAAC,KAAK,SAAS;gBAAE,IAAI,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;QAC7D,CAAC;QACD,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,IAAI,CACnC,GAAG,GAAG,CAAC,SAAS,CAAC,UAAU,mCAAmC,EAC9D,IAAI,EACJ,EAAE,OAAO,EAAE,2BAA2B,CAAC,KAAK,CAAC,eAAe,CAAC,EAAE,CAChE,CAAC;YACF,OAAO,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAClC,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,OAAO,aAAa,CAClB,SAAS,EACT,4CAA4C,KAAK,CAAC,OAAO,EAAE,CAC5D,CAAC;QACJ,CAAC;IACH,CAAC;CACF,CAAC"}

package/dist/tools/xrm/xrm-merchant-create.d.ts

@@ -0,0 +1,22 @@
+import { Tool } from '../registry.js';
+/**
+ * Provisioning semantic tool: create a new marketplace merchant
+ * (`xrm_merchants`) linked to an existing PRM party. Creating a
+ * merchant makes it discoverable to buyers and causes downstream
+ * provisioning (search indexing, listings), so the tool requires:
+ *
+ *  - `confirm: true` to prevent accidental invocation;
+ *  - a `party_id` (natural key — the merchant's owning PRM party).
+ *    (party_id, tenant_id) is unique, so a retry fails with a
+ *    duplicate-key error rather than provisioning a duplicate.
+ *
+ * `merchant_approval_status_code` is deliberately not an input:
+ * approving a merchant is a separate decision from creating one.
+ *
+ * Provider credentials (`xrm_merchant_authentication_configuration_details`
+ * and `xrm_merchant_payment_processor_credentials`) are EXCLUDED from
+ * the MCP surface by the credentials guardrail and are never written
+ * or returned by this tool.
+ */
+export declare const xrmMerchantCreateTool: Tool;
+//# sourceMappingURL=xrm-merchant-create.d.ts.map

package/dist/tools/xrm/xrm-merchant-create.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"xrm-merchant-create.d.ts","sourceRoot":"","sources":["../../../src/tools/xrm/xrm-merchant-create.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AAStC;;;;;;;;;;;;;;;;;;GAkBG;AACH,eAAO,MAAM,qBAAqB,EAAE,IA+DnC,CAAC"}