@raytio/mcp-server 10.0.0 → 10.2.0

package/dist/tools/xrm/xrm-merchant-create.js

@@ -0,0 +1,85 @@
+import { z } from 'zod';
+import { API_ERROR, errorResponse, successResponse } from '../types.js';
+import { cap } from '../../capabilities/tool-capability.js';
+import { confirmFlagSchema, unenforcedIdempotencyKeySchema, writeHeadersWithIdempotency, } from '../_shared/side-effect.js';
+/**
+ * Provisioning semantic tool: create a new marketplace merchant
+ * (`xrm_merchants`) linked to an existing PRM party. Creating a
+ * merchant makes it discoverable to buyers and causes downstream
+ * provisioning (search indexing, listings), so the tool requires:
+ *
+ *  - `confirm: true` to prevent accidental invocation;
+ *  - a `party_id` (natural key — the merchant's owning PRM party).
+ *    (party_id, tenant_id) is unique, so a retry fails with a
+ *    duplicate-key error rather than provisioning a duplicate.
+ *
+ * `merchant_approval_status_code` is deliberately not an input:
+ * approving a merchant is a separate decision from creating one.
+ *
+ * Provider credentials (`xrm_merchant_authentication_configuration_details`
+ * and `xrm_merchant_payment_processor_credentials`) are EXCLUDED from
+ * the MCP surface by the credentials guardrail and are never written
+ * or returned by this tool.
+ */
+export const xrmMerchantCreateTool = {
+    name: 'xrm_merchant_create',
+    description: 'Provision a new marketplace merchant (xrm_merchants). Requires confirm=true and a ' +
+        'party_id linking the merchant to its owning PRM party. Provider credentials are ' +
+        'never written through this tool. One merchant per party: a retry for the same party ' +
+        'fails with a duplicate-key error instead of creating a second merchant.',
+    inputSchema: z.object({
+        party_id: z
+            .string()
+            .min(1)
+            .describe('UUID of the prm_parties row this merchant is owned by. One merchant per party.'),
+        merchant_name: z.string().min(1).max(256).describe('Display name of the merchant'),
+        merchant_common_name: z
+            .string()
+            .max(256)
+            .optional()
+            .describe('Short / common name of the merchant'),
+        merchant_description: z.string().optional(),
+        merchant_type_code: z.string().max(32).optional(),
+        merchant_class_code: z.string().max(32).optional(),
+        merchant_status_code: z.string().max(32).optional(),
+        merchant_image_url_logo: z.string().url().optional(),
+        merchant_image_url_thumbnail: z.string().url().optional(),
+        display_order: z.number().int().optional(),
+        metadata: z.record(z.unknown()).optional(),
+        confirm: confirmFlagSchema,
+        idempotency_key: unenforcedIdempotencyKeySchema,
+    }),
+    capabilities: [cap('xrm_merchants', 'INSERT')],
+    sideEffect: 'provisioning',
+    confirmation: 'caller_confirms',
+    idempotency: 'natural_key',
+    handler: async (args, ctx) => {
+        const input = args;
+        const body = {
+            party_id: input.party_id,
+            merchant_name: input.merchant_name,
+        };
+        for (const field of [
+            'merchant_common_name',
+            'merchant_description',
+            'merchant_type_code',
+            'merchant_class_code',
+            'merchant_status_code',
+            'merchant_image_url_logo',
+            'merchant_image_url_thumbnail',
+            'display_order',
+            'metadata',
+        ]) {
+            if (input[field] !== undefined)
+                body[field] = input[field];
+        }
+        try {
+            const rows = await ctx.apiClient.post(`${ctx.apiClient.dbBasePath}/xrm_merchants?select=*`, body, { headers: writeHeadersWithIdempotency(input.idempotency_key) });
+            return successResponse(rows[0]);
+        }
+        catch (error) {
+            return errorResponse(API_ERROR, `Failed to create XRM merchant: ${error.message}`);
+        }
+    },
+};
+//# sourceMappingURL=xrm-merchant-create.js.map

package/dist/tools/xrm/xrm-merchant-create.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"xrm-merchant-create.js","sourceRoot":"","sources":["../../../src/tools/xrm/xrm-merchant-create.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACxE,OAAO,EAAE,GAAG,EAAE,MAAM,uCAAuC,CAAC;AAC5D,OAAO,EACL,iBAAiB,EACjB,8BAA8B,EAC9B,2BAA2B,GAC5B,MAAM,2BAA2B,CAAC;AAEnC;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAS;IACzC,IAAI,EAAE,qBAAqB;IAC3B,WAAW,EACT,oFAAoF;QACpF,kFAAkF;QAClF,sFAAsF;QACtF,yEAAyE;IAC3E,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB,QAAQ,EAAE,CAAC;aACR,MAAM,EAAE;aACR,GAAG,CAAC,CAAC,CAAC;aACN,QAAQ,CAAC,gFAAgF,CAAC;QAC7F,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,8BAA8B,CAAC;QAClF,oBAAoB,EAAE,CAAC;aACpB,MAAM,EAAE;aACR,GAAG,CAAC,GAAG,CAAC;aACR,QAAQ,EAAE;aACV,QAAQ,CAAC,qCAAqC,CAAC;QAClD,oBAAoB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC3C,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;QACjD,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;QAClD,oBAAoB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;QACnD,uBAAuB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;QACpD,4BAA4B,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;QACzD,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;QAC1C,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;QAC1C,OAAO,EAAE,iBAAiB;QAC1B,eAAe,EAAE,8BAA8B;KAChD,CAAC;IACF,YAAY,EAAE,CAAC,GAAG,CAAC,eAAe,EAAE,QAAQ,CAAC,CAAC;IAC9C,UAAU,EAAE,cAAc;IAC1B,YAAY,EAAE,iBAAiB;IAC/B,WAAW,EAAE,aAAa;IAC1B,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QAC3B,MAAM,KAAK,GAAG,IAA2B,CAAC;QAC1C,MAAM,IAAI,GAAwB;YAChC,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,aAAa,EAAE,KAAK,CAAC,aAAa;SACnC,CAAC;QACF,KAAK,MAAM,KAAK,IAAI;YAClB,sBAAsB;YACtB,sBAAsB;YACtB,oBAAoB;YACpB,qBAAqB;YACrB,sBAAsB;YACtB,yBAAyB;YACzB,8BAA8B;YAC9B,eAAe;YACf,UAAU;SACX,EAAE,CAAC;YACF,IAAI,KAAK,CAAC,KAAK,CAAC,KAAK,SAAS;gBAAE,IAAI,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;QAC7D,CAAC;QACD,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,IAAI,CACnC,GAAG,GAAG,CAAC,SAAS,CAAC,UAAU,yBAAyB,EACpD,IAAI,EACJ,EAAE,OAAO,EAAE,2BAA2B,CAAC,KAAK,CAAC,eAAe,CAAC,EAAE,CAChE,CAAC;YACF,OAAO,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAClC,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,OAAO,aAAa,CAAC,SAAS,EAAE,kCAAkC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QACrF,CAAC;IACH,CAAC;CACF,CAAC"}

package/dist/tools/xrm/xrm-merchant-update.d.ts

@@ -0,0 +1,14 @@
+import { Tool } from '../registry.js';
+/**
+ * Explicit-schema update for `xrm_merchants` — safe metadata fields
+ * only. `party_id` (natural key) is intentionally not writable through
+ * this tool; retargeting a merchant to a different party is not a
+ * rename operation. `merchant_approval_status_code` is not writable
+ * either: this tool needs no confirmation, so it must not be able to
+ * approve a merchant. Provider credentials are in an excluded table and
+ * are never touched.
+ *
+ * Retry-safe (converges on the same target state).
+ */
+export declare const xrmMerchantUpdateTool: Tool;
+//# sourceMappingURL=xrm-merchant-update.d.ts.map

package/dist/tools/xrm/xrm-merchant-update.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"xrm-merchant-update.d.ts","sourceRoot":"","sources":["../../../src/tools/xrm/xrm-merchant-update.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AAQtC;;;;;;;;;;GAUG;AACH,eAAO,MAAM,qBAAqB,EAAE,IAqDnC,CAAC"}

package/dist/tools/xrm/xrm-merchant-update.js

@@ -0,0 +1,61 @@
+import { z } from 'zod';
+import { API_ERROR, errorResponse, successResponse } from '../types.js';
+import { cap } from '../../capabilities/tool-capability.js';
+import { unenforcedIdempotencyKeySchema, writeHeadersWithIdempotency, } from '../_shared/side-effect.js';
+/**
+ * Explicit-schema update for `xrm_merchants` — safe metadata fields
+ * only. `party_id` (natural key) is intentionally not writable through
+ * this tool; retargeting a merchant to a different party is not a
+ * rename operation. `merchant_approval_status_code` is not writable
+ * either: this tool needs no confirmation, so it must not be able to
+ * approve a merchant. Provider credentials are in an excluded table and
+ * are never touched.
+ *
+ * Retry-safe (converges on the same target state).
+ */
+export const xrmMerchantUpdateTool = {
+    name: 'xrm_merchant_update',
+    description: 'Update marketplace merchant metadata (xrm_merchants) with an explicit safe field set. ' +
+        'party_id and merchant_approval_status_code are not writable. Provider credentials live ' +
+        'in an excluded table and cannot be set through MCP. Retry-safe.',
+    inputSchema: z.object({
+        id: z.string().min(1).describe('UUID of the merchant'),
+        merchant_name: z.string().min(1).max(256).optional(),
+        merchant_common_name: z.string().max(256).nullable().optional(),
+        merchant_description: z.string().nullable().optional(),
+        merchant_type_code: z.string().max(32).nullable().optional(),
+        merchant_class_code: z.string().max(32).nullable().optional(),
+        merchant_status_code: z.string().max(32).nullable().optional(),
+        merchant_image_url_logo: z.string().url().nullable().optional(),
+        merchant_image_url_thumbnail: z.string().url().nullable().optional(),
+        display_order: z.number().int().nullable().optional(),
+        metadata: z.record(z.unknown()).nullable().optional(),
+        idempotency_key: unenforcedIdempotencyKeySchema,
+    }),
+    capabilities: [cap('xrm_merchants', 'UPDATE')],
+    sideEffect: 'state_change',
+    confirmation: 'none',
+    idempotency: 'natural_key',
+    handler: async (args, ctx) => {
+        const { id, idempotency_key, ...rest } = args;
+        const body = {};
+        for (const [k, v] of Object.entries(rest)) {
+            if (v !== undefined)
+                body[k] = v;
+        }
+        if (Object.keys(body).length === 0) {
+            return errorResponse(API_ERROR, 'Update payload is empty — supply at least one field to change.');
+        }
+        try {
+            const rows = await ctx.apiClient.patch(`${ctx.apiClient.dbBasePath}/xrm_merchants?id=eq.${id}&select=*`, body, { headers: writeHeadersWithIdempotency(idempotency_key) });
+            if (!rows || rows.length === 0) {
+                return errorResponse(API_ERROR, `XRM merchant ${id} not found or not accessible`);
+            }
+            return successResponse(rows[0]);
+        }
+        catch (error) {
+            return errorResponse(API_ERROR, `Failed to update XRM merchant: ${error.message}`);
+        }
+    },
+};
+//# sourceMappingURL=xrm-merchant-update.js.map

package/dist/tools/xrm/xrm-merchant-update.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"xrm-merchant-update.js","sourceRoot":"","sources":["../../../src/tools/xrm/xrm-merchant-update.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACxE,OAAO,EAAE,GAAG,EAAE,MAAM,uCAAuC,CAAC;AAC5D,OAAO,EACL,8BAA8B,EAC9B,2BAA2B,GAC5B,MAAM,2BAA2B,CAAC;AAEnC;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAS;IACzC,IAAI,EAAE,qBAAqB;IAC3B,WAAW,EACT,wFAAwF;QACxF,yFAAyF;QACzF,iEAAiE;IACnE,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,sBAAsB,CAAC;QACtD,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;QACpD,oBAAoB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;QAC/D,oBAAoB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;QACtD,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;QAC5D,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;QAC7D,oBAAoB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;QAC9D,uBAAuB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;QAC/D,4BAA4B,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;QACpE,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;QACrD,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;QACrD,eAAe,EAAE,8BAA8B;KAChD,CAAC;IACF,YAAY,EAAE,CAAC,GAAG,CAAC,eAAe,EAAE,QAAQ,CAAC,CAAC;IAC9C,UAAU,EAAE,cAAc;IAC1B,YAAY,EAAE,MAAM;IACpB,WAAW,EAAE,aAAa;IAC1B,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QAC3B,MAAM,EAAE,EAAE,EAAE,eAAe,EAAE,GAAG,IAAI,EAAE,GAAG,IAGd,CAAC;QAC5B,MAAM,IAAI,GAA4B,EAAE,CAAC;QACzC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1C,IAAI,CAAC,KAAK,SAAS;gBAAE,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACnC,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACnC,OAAO,aAAa,CAClB,SAAS,EACT,gEAAgE,CACjE,CAAC;QACJ,CAAC;QACD,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,KAAK,CACpC,GAAG,GAAG,CAAC,SAAS,CAAC,UAAU,wBAAwB,EAAE,WAAW,EAChE,IAAI,EACJ,EAAE,OAAO,EAAE,2BAA2B,CAAC,eAAe,CAAC,EAAE,CAC1D,CAAC;YACF,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC/B,OAAO,aAAa,CAAC,SAAS,EAAE,gBAAgB,EAAE,8BAA8B,CAAC,CAAC;YACpF,CAAC;YACD,OAAO,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAClC,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,OAAO,aAAa,CAAC,SAAS,EAAE,kCAAkC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QACrF,CAAC;IACH,CAAC;CACF,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@raytio/mcp-server",
-  "version": "10.0.0",
+  "version": "10.2.0",
   "description": "MCP server for secure AI agent access to Raytio user data",
   "type": "module",
   "main": "dist/index.js",