@raytio/mcp-server 9.1.0 → 9.2.0

package/dist/tools/cmm/index.d.ts

@@ -0,0 +1,5 @@
+import { Tool } from '../registry.js';
+export declare const cmmTools: Tool[];
+/** Read-only slice used by the `cmm-readonly` selectable sub-domain. */
+export declare const cmmReadOnlyTools: Tool[];
+//# sourceMappingURL=index.d.ts.map

package/dist/tools/cmm/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/tools/cmm/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AAYtC,eAAO,MAAM,QAAQ,EAAE,IAAI,EAAiD,CAAC;AAE7E,wEAAwE;AACxE,eAAO,MAAM,gBAAgB,EAAE,IAAI,EAA0B,CAAC"}

package/dist/tools/cmm/index.js

@@ -0,0 +1,13 @@
+import { cmmGeneratedReadTools } from './generated-reads.js';
+import { cmmBankAccountRegisterTool } from './cmm-bank-account-register.js';
+import { cmmBankAccountDeactivateTool } from './cmm-bank-account-deactivate.js';
+import { cmmBankAccountUseRegisterTool } from './cmm-bank-account-use-register.js';
+const cmmWriteTools = [
+    cmmBankAccountRegisterTool,
+    cmmBankAccountDeactivateTool,
+    cmmBankAccountUseRegisterTool,
+];
+export const cmmTools = [...cmmGeneratedReadTools, ...cmmWriteTools];
+/** Read-only slice used by the `cmm-readonly` selectable sub-domain. */
+export const cmmReadOnlyTools = cmmGeneratedReadTools;
+//# sourceMappingURL=index.js.map

package/dist/tools/cmm/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/tools/cmm/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAC7D,OAAO,EAAE,0BAA0B,EAAE,MAAM,gCAAgC,CAAC;AAC5E,OAAO,EAAE,4BAA4B,EAAE,MAAM,kCAAkC,CAAC;AAChF,OAAO,EAAE,6BAA6B,EAAE,MAAM,oCAAoC,CAAC;AAEnF,MAAM,aAAa,GAAW;IAC5B,0BAA0B;IAC1B,4BAA4B;IAC5B,6BAA6B;CAC9B,CAAC;AAEF,MAAM,CAAC,MAAM,QAAQ,GAAW,CAAC,GAAG,qBAAqB,EAAE,GAAG,aAAa,CAAC,CAAC;AAE7E,wEAAwE;AACxE,MAAM,CAAC,MAAM,gBAAgB,GAAW,qBAAqB,CAAC"}

package/dist/tools/domains.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"domains.d.ts","sourceRoot":"","sources":["../../src/tools/domains.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC;AAWrC;;;GAGG;AACH,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,IAAI,EAAE,CAAC;CACf;AAED,eAAO,MAAM,cAAc,EAAE,aAAa,EAgEzC,CAAC;AAwDF;;;GAGG;AACH,eAAO,MAAM,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,CAkB9C,CAAC;AAEF;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,EAAE,CAepD"}
+{"version":3,"file":"domains.d.ts","sourceRoot":"","sources":["../../src/tools/domains.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC;AAarC;;;GAGG;AACH,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,IAAI,EAAE,CAAC;CACf;AAED,eAAO,MAAM,cAAc,EAAE,aAAa,EAkFzC,CAAC;AAwDF;;;GAGG;AACH,eAAO,MAAM,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,CAsB9C,CAAC;AAEF;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,EAAE,CAepD"}

package/dist/tools/domains.js

@@ -6,6 +6,8 @@ import { wrmTools } from './wrm/index.js';
 import { fndReadOnlyTools, fndTools } from './fnd/index.js';
 import { hrmReadOnlyTools, hrmTools } from './hrm/index.js';
 import { secReadOnlyTools, secTools } from './sec/index.js';
+import { cmmTools, cmmReadOnlyTools } from './cmm/index.js';
+import { fxmTools, fxmReadOnlyTools } from './fxm/index.js';
 import { fglReadOnlyTools, fglTools } from './fgl/index.js';
 export const primaryDomains = [
     {
@@ -56,6 +58,22 @@ export const primaryDomains = [
         summary: 'Dedicated semantic tools for the QR pairing session lifecycle (start / join / complete / cancel), plus bounded reads with secret redaction. Every write requires confirm=true; cancellation additionally requires a reason.',
         tools: secTools,
     },
+    {
+        id: 'fxm',
+        title: 'FXM — Funds Transfer Management',
+        summary: 'Bounded reads over funds accounts, balances, transactions, statuses, parties, and access consents; ' +
+            'dedicated tools for registering / deactivating external-payer payment methods and granting / revoking ' +
+            'funds-account access consents. Card, IBAN, and bank-account-number columns are redacted; ' +
+            'payment-processor credentials remain hard-excluded upstream.',
+        tools: fxmTools,
+    },
+    {
+        id: 'cmm',
+        title: 'CMM — Cash Management Module',
+        summary: 'Bounded reads over bank accounts and their operating-unit uses (bank-account-number / IBAN redacted); ' +
+            'dedicated tools for registering / deactivating bank accounts and enabling AR/AP/payroll/treasury uses.',
+        tools: cmmTools,
+    },
     {
         id: 'fgl',
         title: 'FGL — Financial General Ledger',
@@ -132,6 +150,10 @@ export const domainIndex = {
     'hrm-readonly': hrmReadOnlyTools,
     sec: secTools,
     'sec-readonly': secReadOnlyTools,
+    fxm: fxmTools,
+    'fxm-readonly': fxmReadOnlyTools,
+    cmm: cmmTools,
+    'cmm-readonly': cmmReadOnlyTools,
     fgl: fglTools,
     'fgl-readonly': fglReadOnlyTools,
 };

package/dist/tools/domains.js.map

@@ -1 +1 @@
-{"version":3,"file":"domains.js","sourceRoot":"","sources":["../../src/tools/domains.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC1C,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC1C,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC1C,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC1C,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC1C,OAAO,EAAE,gBAAgB,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC5D,OAAO,EAAE,gBAAgB,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC5D,OAAO,EAAE,gBAAgB,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC5D,OAAO,EAAE,gBAAgB,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAa5D,MAAM,CAAC,MAAM,cAAc,GAAoB;IAC7C;QACE,EAAE,EAAE,KAAK;QACT,KAAK,EAAE,+BAA+B;QACtC,OAAO,EACL,+FAA+F;QACjG,KAAK,EAAE,QAAQ;KAChB;IACD;QACE,EAAE,EAAE,KAAK;QACT,KAAK,EAAE,oCAAoC;QAC3C,OAAO,EACL,oFAAoF;QACtF,KAAK,EAAE,QAAQ;KAChB;IACD;QACE,EAAE,EAAE,KAAK;QACT,KAAK,EAAE,qCAAqC;QAC5C,OAAO,EACL,6FAA6F;QAC/F,KAAK,EAAE,QAAQ;KAChB;IACD;QACE,EAAE,EAAE,KAAK;QACT,KAAK,EAAE,8BAA8B;QACrC,OAAO,EACL,2IAA2I;QAC7I,KAAK,EAAE,QAAQ;KAChB;IACD;QACE,EAAE,EAAE,KAAK;QACT,KAAK,EAAE,sCAAsC;QAC7C,OAAO,EACL,yHAAyH;QAC3H,KAAK,EAAE,QAAQ;KAChB;IACD;QACE,EAAE,EAAE,KAAK;QACT,KAAK,EAAE,kBAAkB;QACzB,OAAO,EACL,iaAAia;QACna,KAAK,EAAE,QAAQ;KAChB;IACD;QACE,EAAE,EAAE,KAAK;QACT,KAAK,EAAE,kCAAkC;QACzC,OAAO,EACL,sTAAsT;QACxT,KAAK,EAAE,QAAQ;KAChB;IACD;QACE,EAAE,EAAE,KAAK;QACT,KAAK,EAAE,gBAAgB;QACvB,OAAO,EACL,6NAA6N;QAC/N,KAAK,EAAE,QAAQ;KAChB;IACD;QACE,EAAE,EAAE,KAAK;QACT,KAAK,EAAE,gCAAgC;QACvC,OAAO,EACL,yLAAyL;QAC3L,KAAK,EAAE,QAAQ;KAChB;CACF,CAAC;AAEF,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC;IAClC,mBAAmB;IACnB,oBAAoB;IACpB,qBAAqB;IACrB,oBAAoB;IACpB,0BAA0B;IAC1B,yBAAyB;IACzB,+BAA+B;IAC/B,0BAA0B;IAC1B,mBAAmB;IACnB,kBAAkB;IAClB,wBAAwB;CACzB,CAAC,CAAC;AAEH,yEAAyE;AACzE,uEAAuE;AACvE,uEAAuE;AACvE,sEAAsE;AACtE,MAAM,uBAAuB,GAAG,CAAC,IAAY,EAAW,EAAE,CACxD,IAAI,KAAK,gBAAgB;IACzB,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC;IAC1B,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;IACtB,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AAExB,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC;IAClC,eAAe;IACf,cAAc;IACd,uBAAuB;IACvB,sBAAsB;IACtB,eAAe;IACf,cAAc;IACd,oBAAoB;IACpB,mBAAmB;IACnB,mBAAmB;IACnB,sBAAsB;CACvB,CAAC,CAAC;AAEH,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC;IAClC,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACjG,0BAA0B;IAC1B,2BAA2B;IAC3B,2BAA2B;IAC3B,yBAAyB;IACzB,2BAA2B;IAC3B,uBAAuB;IACvB,4BAA4B;IAC5B,4BAA4B;IAC5B,iCAAiC;IACjC,wBAAwB;IACxB,mBAAmB;IACnB,4BAA4B;IAC5B,gCAAgC;CACjC,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,CAAC,MAAM,WAAW,GAA2B;IACjD,GAAG,EAAE,QAAQ;IACb,GAAG,EAAE,QAAQ;IACb,GAAG,EAAE,QAAQ;IACb,GAAG,EAAE,QAAQ;IACb,cAAc,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACvE,cAAc,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,uBAAuB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACvE,cAAc,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACvE,GAAG,EAAE,QAAQ;IACb,cAAc,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACvE,GAAG,EAAE,QAAQ;IACb,cAAc,EAAE,gBAAgB;IAChC,GAAG,EAAE,QAAQ;IACb,cAAc,EAAE,gBAAgB;IAChC,GAAG,EAAE,QAAQ;IACb,cAAc,EAAE,gBAAgB;IAChC,GAAG,EAAE,QAAQ;IACb,cAAc,EAAE,gBAAgB;CACjC,CAAC;AAEF;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,IAAa;IAC1C,MAAM,GAAG,GAAG,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC5E,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAClE,MAAM,GAAG,GAAG,IAAI,GAAG,EAAgB,CAAC;IACpC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACtD,MAAM,IAAI,KAAK,CACb,sCAAsC,IAAI,iBAAiB,SAAS,GAAG,CACxE,CAAC;QACJ,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,KAAK;YAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAC5C,CAAC;IACD,OAAO,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;AAC3B,CAAC"}
+{"version":3,"file":"domains.js","sourceRoot":"","sources":["../../src/tools/domains.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC1C,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC1C,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC1C,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC1C,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC1C,OAAO,EAAE,gBAAgB,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC5D,OAAO,EAAE,gBAAgB,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC5D,OAAO,EAAE,gBAAgB,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC5D,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAC5D,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAC5D,OAAO,EAAE,gBAAgB,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAa5D,MAAM,CAAC,MAAM,cAAc,GAAoB;IAC7C;QACE,EAAE,EAAE,KAAK;QACT,KAAK,EAAE,+BAA+B;QACtC,OAAO,EACL,+FAA+F;QACjG,KAAK,EAAE,QAAQ;KAChB;IACD;QACE,EAAE,EAAE,KAAK;QACT,KAAK,EAAE,oCAAoC;QAC3C,OAAO,EACL,oFAAoF;QACtF,KAAK,EAAE,QAAQ;KAChB;IACD;QACE,EAAE,EAAE,KAAK;QACT,KAAK,EAAE,qCAAqC;QAC5C,OAAO,EACL,6FAA6F;QAC/F,KAAK,EAAE,QAAQ;KAChB;IACD;QACE,EAAE,EAAE,KAAK;QACT,KAAK,EAAE,8BAA8B;QACrC,OAAO,EACL,2IAA2I;QAC7I,KAAK,EAAE,QAAQ;KAChB;IACD;QACE,EAAE,EAAE,KAAK;QACT,KAAK,EAAE,sCAAsC;QAC7C,OAAO,EACL,yHAAyH;QAC3H,KAAK,EAAE,QAAQ;KAChB;IACD;QACE,EAAE,EAAE,KAAK;QACT,KAAK,EAAE,kBAAkB;QACzB,OAAO,EACL,iaAAia;QACna,KAAK,EAAE,QAAQ;KAChB;IACD;QACE,EAAE,EAAE,KAAK;QACT,KAAK,EAAE,kCAAkC;QACzC,OAAO,EACL,sTAAsT;QACxT,KAAK,EAAE,QAAQ;KAChB;IACD;QACE,EAAE,EAAE,KAAK;QACT,KAAK,EAAE,gBAAgB;QACvB,OAAO,EACL,6NAA6N;QAC/N,KAAK,EAAE,QAAQ;KAChB;IACD;QACE,EAAE,EAAE,KAAK;QACT,KAAK,EAAE,iCAAiC;QACxC,OAAO,EACL,qGAAqG;YACrG,wGAAwG;YACxG,2FAA2F;YAC3F,8DAA8D;QAChE,KAAK,EAAE,QAAQ;KAChB;IACD;QACE,EAAE,EAAE,KAAK;QACT,KAAK,EAAE,8BAA8B;QACrC,OAAO,EACL,wGAAwG;YACxG,wGAAwG;QAC1G,KAAK,EAAE,QAAQ;KAChB;IACD;QACE,EAAE,EAAE,KAAK;QACT,KAAK,EAAE,gCAAgC;QACvC,OAAO,EACL,yLAAyL;QAC3L,KAAK,EAAE,QAAQ;KAChB;CACF,CAAC;AAEF,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC;IAClC,mBAAmB;IACnB,oBAAoB;IACpB,qBAAqB;IACrB,oBAAoB;IACpB,0BAA0B;IAC1B,yBAAyB;IACzB,+BAA+B;IAC/B,0BAA0B;IAC1B,mBAAmB;IACnB,kBAAkB;IAClB,wBAAwB;CACzB,CAAC,CAAC;AAEH,yEAAyE;AACzE,uEAAuE;AACvE,uEAAuE;AACvE,sEAAsE;AACtE,MAAM,uBAAuB,GAAG,CAAC,IAAY,EAAW,EAAE,CACxD,IAAI,KAAK,gBAAgB;IACzB,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC;IAC1B,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;IACtB,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AAExB,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC;IAClC,eAAe;IACf,cAAc;IACd,uBAAuB;IACvB,sBAAsB;IACtB,eAAe;IACf,cAAc;IACd,oBAAoB;IACpB,mBAAmB;IACnB,mBAAmB;IACnB,sBAAsB;CACvB,CAAC,CAAC;AAEH,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC;IAClC,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACjG,0BAA0B;IAC1B,2BAA2B;IAC3B,2BAA2B;IAC3B,yBAAyB;IACzB,2BAA2B;IAC3B,uBAAuB;IACvB,4BAA4B;IAC5B,4BAA4B;IAC5B,iCAAiC;IACjC,wBAAwB;IACxB,mBAAmB;IACnB,4BAA4B;IAC5B,gCAAgC;CACjC,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,CAAC,MAAM,WAAW,GAA2B;IACjD,GAAG,EAAE,QAAQ;IACb,GAAG,EAAE,QAAQ;IACb,GAAG,EAAE,QAAQ;IACb,GAAG,EAAE,QAAQ;IACb,cAAc,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACvE,cAAc,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,uBAAuB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACvE,cAAc,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACvE,GAAG,EAAE,QAAQ;IACb,cAAc,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACvE,GAAG,EAAE,QAAQ;IACb,cAAc,EAAE,gBAAgB;IAChC,GAAG,EAAE,QAAQ;IACb,cAAc,EAAE,gBAAgB;IAChC,GAAG,EAAE,QAAQ;IACb,cAAc,EAAE,gBAAgB;IAChC,GAAG,EAAE,QAAQ;IACb,cAAc,EAAE,gBAAgB;IAChC,GAAG,EAAE,QAAQ;IACb,cAAc,EAAE,gBAAgB;IAChC,GAAG,EAAE,QAAQ;IACb,cAAc,EAAE,gBAAgB;CACjC,CAAC;AAEF;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,IAAa;IAC1C,MAAM,GAAG,GAAG,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC5E,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAClE,MAAM,GAAG,GAAG,IAAI,GAAG,EAAgB,CAAC;IACpC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACtD,MAAM,IAAI,KAAK,CACb,sCAAsC,IAAI,iBAAiB,SAAS,GAAG,CACxE,CAAC;QACJ,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,KAAK;YAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAC5C,CAAC;IACD,OAAO,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;AAC3B,CAAC"}

package/dist/tools/fxm/fxm-funds-account-consent-grant.d.ts

@@ -0,0 +1,16 @@
+import { Tool } from '../registry.js';
+/**
+ * Grant a funds-account access consent
+ * (`fxm_funds_accounts_access_consents`).
+ *
+ * Provisioning: authorises a servicing party to read a funds account's
+ * balances / transactions on the owner's behalf. This is the AISP
+ * consent record, so it MUST require an explicit `confirm: true`. Persist
+ * does not deduplicate consents yet (it ignores the `Idempotency-Key`
+ * header; WI-0008817), so a retry can create a second consent.
+ * The consent scope is expressed via `consent_permissions` (JSON object)
+ * — the caller declares exactly what is granted; the server does not
+ * expand a shorthand.
+ */
+export declare const fxmFundsAccountConsentGrantTool: Tool;
+//# sourceMappingURL=fxm-funds-account-consent-grant.d.ts.map

package/dist/tools/fxm/fxm-funds-account-consent-grant.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fxm-funds-account-consent-grant.d.ts","sourceRoot":"","sources":["../../../src/tools/fxm/fxm-funds-account-consent-grant.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AAStC;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,+BAA+B,EAAE,IAmF7C,CAAC"}

package/dist/tools/fxm/fxm-funds-account-consent-grant.js

@@ -0,0 +1,88 @@
+import { z } from 'zod';
+import { API_ERROR, errorResponse, successResponse } from '../types.js';
+import { cap } from '../../capabilities/tool-capability.js';
+import { confirmFlagSchema, idempotencyKeySchema, writeHeadersWithIdempotency, } from '../_shared/side-effect.js';
+/**
+ * Grant a funds-account access consent
+ * (`fxm_funds_accounts_access_consents`).
+ *
+ * Provisioning: authorises a servicing party to read a funds account's
+ * balances / transactions on the owner's behalf. This is the AISP
+ * consent record, so it MUST require an explicit `confirm: true`. Persist
+ * does not deduplicate consents yet (it ignores the `Idempotency-Key`
+ * header; WI-0008817), so a retry can create a second consent.
+ * The consent scope is expressed via `consent_permissions` (JSON object)
+ * — the caller declares exactly what is granted; the server does not
+ * expand a shorthand.
+ */
+export const fxmFundsAccountConsentGrantTool = {
+    name: 'fxm_funds_accounts_access_consent_grant',
+    description: 'Grant a funds-account access consent (fxm_funds_accounts_access_consents). ' +
+        'Authorises a servicing party to read the funds account on the owner\'s behalf. ' +
+        'Requires confirm=true. Not deduplicated: calling it again creates another consent, so ' +
+        'check fxm_funds_accounts_access_consents_list before retrying.',
+    inputSchema: z
+        .object({
+        account_servicing_party_id: z
+            .string()
+            .min(1)
+            .describe('UUID of the party servicing the account (data source)'),
+        consent_servicing_party_id: z
+            .string()
+            .min(1)
+            .describe('UUID of the party receiving the consent (data consumer)'),
+        consent_permissions: z
+            .record(z.any())
+            .describe('JSON object describing what is granted (e.g. {"read_balances": true, "read_transactions": true}). ' +
+            'The server stores this verbatim — no shorthand expansion.'),
+        consent_status: z
+            .string()
+            .max(32)
+            .optional()
+            .describe('Initial status (e.g. AUTHORISED, PENDING). Defaults per backend policy.'),
+        account_access_start_date: z
+            .string()
+            .min(1)
+            .optional()
+            .describe('ISO 8601 date when access starts'),
+        account_access_end_date: z
+            .string()
+            .min(1)
+            .optional()
+            .describe('ISO 8601 date when access ends (must be after start)'),
+        confirm: confirmFlagSchema,
+        idempotency_key: idempotencyKeySchema.describe('Optional. Forwarded as an Idempotency-Key header, but Persist does not enforce it ' +
+            'yet, so a retry can still create a duplicate.'),
+    })
+        .refine((v) => !v.account_access_start_date ||
+        !v.account_access_end_date ||
+        v.account_access_start_date <= v.account_access_end_date, { message: 'account_access_end_date must be on or after account_access_start_date' }),
+    capabilities: [cap('fxm_funds_accounts_access_consents', 'INSERT')],
+    sideEffect: 'provisioning',
+    confirmation: 'caller_confirms',
+    idempotency: 'not_idempotent',
+    handler: async (args, ctx) => {
+        const input = args;
+        const body = {
+            account_servicing_party_id: input.account_servicing_party_id,
+            consent_servicing_party_id: input.consent_servicing_party_id,
+            consent_permissions: input.consent_permissions,
+        };
+        for (const field of [
+            'consent_status',
+            'account_access_start_date',
+            'account_access_end_date',
+        ]) {
+            if (input[field] !== undefined)
+                body[field] = input[field];
+        }
+        try {
+            const rows = await ctx.apiClient.post(`${ctx.apiClient.dbBasePath}/fxm_funds_accounts_access_consents?select=*`, body, { headers: writeHeadersWithIdempotency(input.idempotency_key) });
+            return successResponse(rows[0]);
+        }
+        catch (error) {
+            return errorResponse(API_ERROR, `Failed to grant FXM funds account consent: ${error.message}`);
+        }
+    },
+};
+//# sourceMappingURL=fxm-funds-account-consent-grant.js.map

package/dist/tools/fxm/fxm-funds-account-consent-grant.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fxm-funds-account-consent-grant.js","sourceRoot":"","sources":["../../../src/tools/fxm/fxm-funds-account-consent-grant.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACxE,OAAO,EAAE,GAAG,EAAE,MAAM,uCAAuC,CAAC;AAC5D,OAAO,EACL,iBAAiB,EACjB,oBAAoB,EACpB,2BAA2B,GAC5B,MAAM,2BAA2B,CAAC;AAEnC;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAS;IACnD,IAAI,EAAE,yCAAyC;IAC/C,WAAW,EACT,6EAA6E;QAC7E,iFAAiF;QACjF,wFAAwF;QACxF,gEAAgE;IAClE,WAAW,EAAE,CAAC;SACX,MAAM,CAAC;QACN,0BAA0B,EAAE,CAAC;aAC1B,MAAM,EAAE;aACR,GAAG,CAAC,CAAC,CAAC;aACN,QAAQ,CAAC,uDAAuD,CAAC;QACpE,0BAA0B,EAAE,CAAC;aAC1B,MAAM,EAAE;aACR,GAAG,CAAC,CAAC,CAAC;aACN,QAAQ,CAAC,yDAAyD,CAAC;QACtE,mBAAmB,EAAE,CAAC;aACnB,MAAM,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;aACf,QAAQ,CACP,oGAAoG;YAClG,2DAA2D,CAC9D;QACH,cAAc,EAAE,CAAC;aACd,MAAM,EAAE;aACR,GAAG,CAAC,EAAE,CAAC;aACP,QAAQ,EAAE;aACV,QAAQ,CAAC,yEAAyE,CAAC;QACtF,yBAAyB,EAAE,CAAC;aACzB,MAAM,EAAE;aACR,GAAG,CAAC,CAAC,CAAC;aACN,QAAQ,EAAE;aACV,QAAQ,CAAC,kCAAkC,CAAC;QAC/C,uBAAuB,EAAE,CAAC;aACvB,MAAM,EAAE;aACR,GAAG,CAAC,CAAC,CAAC;aACN,QAAQ,EAAE;aACV,QAAQ,CAAC,sDAAsD,CAAC;QACnE,OAAO,EAAE,iBAAiB;QAC1B,eAAe,EAAE,oBAAoB,CAAC,QAAQ,CAC9C,oFAAoF;YAClF,+CAA+C,CAClD;KACA,CAAC;SACD,MAAM,CACL,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,CAAC,yBAAyB;QAC5B,CAAC,CAAC,CAAC,uBAAuB;QAC1B,CAAC,CAAC,yBAAyB,IAAI,CAAC,CAAC,uBAAuB,EAC1D,EAAE,OAAO,EAAE,uEAAuE,EAAE,CACrF;IACH,YAAY,EAAE,CAAC,GAAG,CAAC,oCAAoC,EAAE,QAAQ,CAAC,CAAC;IACnE,UAAU,EAAE,cAAc;IAC1B,YAAY,EAAE,iBAAiB;IAC/B,WAAW,EAAE,gBAAgB;IAC7B,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QAC3B,MAAM,KAAK,GAAG,IAA2B,CAAC;QAC1C,MAAM,IAAI,GAAwB;YAChC,0BAA0B,EAAE,KAAK,CAAC,0BAA0B;YAC5D,0BAA0B,EAAE,KAAK,CAAC,0BAA0B;YAC5D,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;SAC/C,CAAC;QACF,KAAK,MAAM,KAAK,IAAI;YAClB,gBAAgB;YAChB,2BAA2B;YAC3B,yBAAyB;SAC1B,EAAE,CAAC;YACF,IAAI,KAAK,CAAC,KAAK,CAAC,KAAK,SAAS;gBAAE,IAAI,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;QAC7D,CAAC;QACD,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,IAAI,CACnC,GAAG,GAAG,CAAC,SAAS,CAAC,UAAU,8CAA8C,EACzE,IAAI,EACJ,EAAE,OAAO,EAAE,2BAA2B,CAAC,KAAK,CAAC,eAAe,CAAC,EAAE,CAChE,CAAC;YACF,OAAO,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAClC,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,OAAO,aAAa,CAClB,SAAS,EACT,8CAA8C,KAAK,CAAC,OAAO,EAAE,CAC9D,CAAC;QACJ,CAAC;IACH,CAAC;CACF,CAAC"}

package/dist/tools/fxm/fxm-funds-account-consent-revoke.d.ts

@@ -0,0 +1,13 @@
+import { Tool } from '../registry.js';
+/**
+ * Revoke a funds-account access consent
+ * (`fxm_funds_accounts_access_consents`).
+ *
+ * Sets `consent_status = 'REVOKED'` and `active = false`, closes the
+ * access window (`account_access_end_date`) if it is still open, and
+ * merges the caller reason into the consent's `metadata` audit trail.
+ * Requires `confirm: true` and a `reason`. A consent that is already
+ * revoked is returned unchanged, so retries keep the original reason.
+ */
+export declare const fxmFundsAccountConsentRevokeTool: Tool;
+//# sourceMappingURL=fxm-funds-account-consent-revoke.d.ts.map

package/dist/tools/fxm/fxm-funds-account-consent-revoke.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fxm-funds-account-consent-revoke.d.ts","sourceRoot":"","sources":["../../../src/tools/fxm/fxm-funds-account-consent-revoke.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AAStC;;;;;;;;;GASG;AACH,eAAO,MAAM,gCAAgC,EAAE,IAqD9C,CAAC"}

package/dist/tools/fxm/fxm-funds-account-consent-revoke.js

@@ -0,0 +1,60 @@
+import { z } from 'zod';
+import { cap } from '../../capabilities/tool-capability.js';
+import { confirmFlagSchema, idempotencyKeySchema, reasonSchema, } from '../_shared/side-effect.js';
+import { softDeactivate, softDeactivateEndDateSchema } from '../_shared/soft-deactivate.js';
+/**
+ * Revoke a funds-account access consent
+ * (`fxm_funds_accounts_access_consents`).
+ *
+ * Sets `consent_status = 'REVOKED'` and `active = false`, closes the
+ * access window (`account_access_end_date`) if it is still open, and
+ * merges the caller reason into the consent's `metadata` audit trail.
+ * Requires `confirm: true` and a `reason`. A consent that is already
+ * revoked is returned unchanged, so retries keep the original reason.
+ */
+export const fxmFundsAccountConsentRevokeTool = {
+    name: 'fxm_funds_accounts_access_consent_revoke',
+    description: 'Revoke a funds-account access consent (fxm_funds_accounts_access_consents). ' +
+        'Sets consent_status=REVOKED and active=false, and ends the access window now if it is ' +
+        'still open. Requires confirm=true and a `reason`. Retry-safe: an already revoked consent ' +
+        'is returned unchanged.',
+    inputSchema: z.object({
+        id: z.string().min(1).describe('UUID of the fxm_funds_accounts_access_consents row'),
+        reason: reasonSchema.describe('Human-readable justification recorded on the audit trail'),
+        end_date: softDeactivateEndDateSchema,
+        confirm: confirmFlagSchema,
+        idempotency_key: idempotencyKeySchema,
+    }),
+    capabilities: [cap('fxm_funds_accounts_access_consents', 'UPDATE')],
+    sideEffect: 'state_change',
+    confirmation: 'caller_confirms',
+    idempotency: 'natural_key',
+    handler: async (args, ctx) => {
+        const input = args;
+        return softDeactivate(ctx, {
+            table: 'fxm_funds_accounts_access_consents',
+            id: input.id,
+            label: 'FXM funds account consent',
+            verb: 'revoke',
+            isDone: (row) => row.consent_status === 'REVOKED' && row.active === false,
+            changes: (row) => {
+                const now = new Date();
+                const accessEnd = row.account_access_end_date
+                    ? Date.parse(row.account_access_end_date)
+                    : NaN;
+                return {
+                    consent_status: 'REVOKED',
+                    active: false,
+                    ...(Number.isNaN(accessEnd) || accessEnd > now.getTime()
+                        ? { account_access_end_date: now.toISOString() }
+                        : {}),
+                };
+            },
+            reasonKey: 'revocation_reason',
+            reason: input.reason,
+            endDate: input.end_date,
+            idempotencyKey: input.idempotency_key,
+        });
+    },
+};
+//# sourceMappingURL=fxm-funds-account-consent-revoke.js.map

package/dist/tools/fxm/fxm-funds-account-consent-revoke.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fxm-funds-account-consent-revoke.js","sourceRoot":"","sources":["../../../src/tools/fxm/fxm-funds-account-consent-revoke.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,GAAG,EAAE,MAAM,uCAAuC,CAAC;AAC5D,OAAO,EACL,iBAAiB,EACjB,oBAAoB,EACpB,YAAY,GACb,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,cAAc,EAAE,2BAA2B,EAAE,MAAM,+BAA+B,CAAC;AAE5F;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAAS;IACpD,IAAI,EAAE,0CAA0C;IAChD,WAAW,EACT,8EAA8E;QAC9E,wFAAwF;QACxF,2FAA2F;QAC3F,wBAAwB;IAC1B,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,oDAAoD,CAAC;QACpF,MAAM,EAAE,YAAY,CAAC,QAAQ,CAC3B,0DAA0D,CAC3D;QACD,QAAQ,EAAE,2BAA2B;QACrC,OAAO,EAAE,iBAAiB;QAC1B,eAAe,EAAE,oBAAoB;KACtC,CAAC;IACF,YAAY,EAAE,CAAC,GAAG,CAAC,oCAAoC,EAAE,QAAQ,CAAC,CAAC;IACnE,UAAU,EAAE,cAAc;IAC1B,YAAY,EAAE,iBAAiB;IAC/B,WAAW,EAAE,aAAa;IAC1B,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QAC3B,MAAM,KAAK,GAAG,IAMb,CAAC;QACF,OAAO,cAAc,CAAC,GAAG,EAAE;YACzB,KAAK,EAAE,oCAAoC;YAC3C,EAAE,EAAE,KAAK,CAAC,EAAE;YACZ,KAAK,EAAE,2BAA2B;YAClC,IAAI,EAAE,QAAQ;YACd,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,cAAc,KAAK,SAAS,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK;YACzE,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;gBACf,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;gBACvB,MAAM,SAAS,GAAG,GAAG,CAAC,uBAAuB;oBAC3C,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,uBAAuB,CAAC;oBACzC,CAAC,CAAC,GAAG,CAAC;gBACR,OAAO;oBACL,cAAc,EAAE,SAAS;oBACzB,MAAM,EAAE,KAAK;oBACb,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,SAAS,GAAG,GAAG,CAAC,OAAO,EAAE;wBACtD,CAAC,CAAC,EAAE,uBAAuB,EAAE,GAAG,CAAC,WAAW,EAAE,EAAE;wBAChD,CAAC,CAAC,EAAE,CAAC;iBACR,CAAC;YACJ,CAAC;YACD,SAAS,EAAE,mBAAmB;YAC9B,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,OAAO,EAAE,KAAK,CAAC,QAAQ;YACvB,cAAc,EAAE,KAAK,CAAC,eAAe;SACtC,CAAC,CAAC;IACL,CAAC;CACF,CAAC"}

package/dist/tools/fxm/fxm-payment-method-deactivate.d.ts

@@ -0,0 +1,13 @@
+import { Tool } from '../registry.js';
+/**
+ * Deactivate an external-payer payment method
+ * (`fxm_external_payer_payment_methods`).
+ *
+ * Soft-delete via `active=false`; the caller `reason` is merged into the
+ * row's `metadata` audit trail. Requires `confirm: true`. An already
+ * inactive method is returned unchanged, so retries keep the original
+ * reason. Callers receive a redacted row (card secrets stripped by the
+ * guardrail).
+ */
+export declare const fxmPaymentMethodDeactivateTool: Tool;
+//# sourceMappingURL=fxm-payment-method-deactivate.d.ts.map

package/dist/tools/fxm/fxm-payment-method-deactivate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fxm-payment-method-deactivate.d.ts","sourceRoot":"","sources":["../../../src/tools/fxm/fxm-payment-method-deactivate.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AAUtC;;;;;;;;;GASG;AACH,eAAO,MAAM,8BAA8B,EAAE,IA4C5C,CAAC"}

package/dist/tools/fxm/fxm-payment-method-deactivate.js

@@ -0,0 +1,52 @@
+import { z } from 'zod';
+import { cap } from '../../capabilities/tool-capability.js';
+import { redactRow } from '../../generated-reads/guardrails.js';
+import { confirmFlagSchema, idempotencyKeySchema, reasonSchema, } from '../_shared/side-effect.js';
+import { softDeactivate, softDeactivateEndDateSchema } from '../_shared/soft-deactivate.js';
+/**
+ * Deactivate an external-payer payment method
+ * (`fxm_external_payer_payment_methods`).
+ *
+ * Soft-delete via `active=false`; the caller `reason` is merged into the
+ * row's `metadata` audit trail. Requires `confirm: true`. An already
+ * inactive method is returned unchanged, so retries keep the original
+ * reason. Callers receive a redacted row (card secrets stripped by the
+ * guardrail).
+ */
+export const fxmPaymentMethodDeactivateTool = {
+    name: 'fxm_external_payer_payment_method_deactivate',
+    description: 'Deactivate an FXM external-payer payment method (fxm_external_payer_payment_methods). ' +
+        'Sets active=false and records the reason on the audit trail. Requires confirm=true ' +
+        'and a `reason`. Retry-safe: an already inactive method is returned unchanged.',
+    inputSchema: z.object({
+        id: z
+            .string()
+            .min(1)
+            .describe('UUID of the fxm_external_payer_payment_methods row to deactivate'),
+        reason: reasonSchema.describe('Human-readable justification recorded on the audit trail'),
+        end_date: softDeactivateEndDateSchema,
+        confirm: confirmFlagSchema,
+        idempotency_key: idempotencyKeySchema,
+    }),
+    capabilities: [cap('fxm_external_payer_payment_methods', 'UPDATE')],
+    sideEffect: 'state_change',
+    confirmation: 'caller_confirms',
+    idempotency: 'natural_key',
+    handler: async (args, ctx) => {
+        const input = args;
+        return softDeactivate(ctx, {
+            table: 'fxm_external_payer_payment_methods',
+            id: input.id,
+            label: 'FXM payment method',
+            verb: 'deactivate',
+            isDone: (row) => row.active === false,
+            changes: () => ({ active: false }),
+            reasonKey: 'deactivation_reason',
+            reason: input.reason,
+            endDate: input.end_date,
+            idempotencyKey: input.idempotency_key,
+            present: redactRow,
+        });
+    },
+};
+//# sourceMappingURL=fxm-payment-method-deactivate.js.map

package/dist/tools/fxm/fxm-payment-method-deactivate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fxm-payment-method-deactivate.js","sourceRoot":"","sources":["../../../src/tools/fxm/fxm-payment-method-deactivate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,GAAG,EAAE,MAAM,uCAAuC,CAAC;AAC5D,OAAO,EAAE,SAAS,EAAE,MAAM,qCAAqC,CAAC;AAChE,OAAO,EACL,iBAAiB,EACjB,oBAAoB,EACpB,YAAY,GACb,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,cAAc,EAAE,2BAA2B,EAAE,MAAM,+BAA+B,CAAC;AAE5F;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAS;IAClD,IAAI,EAAE,8CAA8C;IACpD,WAAW,EACT,wFAAwF;QACxF,qFAAqF;QACrF,+EAA+E;IACjF,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB,EAAE,EAAE,CAAC;aACF,MAAM,EAAE;aACR,GAAG,CAAC,CAAC,CAAC;aACN,QAAQ,CAAC,kEAAkE,CAAC;QAC/E,MAAM,EAAE,YAAY,CAAC,QAAQ,CAC3B,0DAA0D,CAC3D;QACD,QAAQ,EAAE,2BAA2B;QACrC,OAAO,EAAE,iBAAiB;QAC1B,eAAe,EAAE,oBAAoB;KACtC,CAAC;IACF,YAAY,EAAE,CAAC,GAAG,CAAC,oCAAoC,EAAE,QAAQ,CAAC,CAAC;IACnE,UAAU,EAAE,cAAc;IAC1B,YAAY,EAAE,iBAAiB;IAC/B,WAAW,EAAE,aAAa;IAC1B,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QAC3B,MAAM,KAAK,GAAG,IAMb,CAAC;QACF,OAAO,cAAc,CAAC,GAAG,EAAE;YACzB,KAAK,EAAE,oCAAoC;YAC3C,EAAE,EAAE,KAAK,CAAC,EAAE;YACZ,KAAK,EAAE,oBAAoB;YAC3B,IAAI,EAAE,YAAY;YAClB,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,KAAK,KAAK;YACrC,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;YAClC,SAAS,EAAE,qBAAqB;YAChC,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,OAAO,EAAE,KAAK,CAAC,QAAQ;YACvB,cAAc,EAAE,KAAK,CAAC,eAAe;YACrC,OAAO,EAAE,SAAS;SACnB,CAAC,CAAC;IACL,CAAC;CACF,CAAC"}

package/dist/tools/fxm/fxm-payment-method-register.d.ts

@@ -0,0 +1,18 @@
+import { Tool } from '../registry.js';
+/**
+ * Register an external-payer payment method (`fxm_external_payer_payment_methods`).
+ *
+ * Provisioning: creates a durable pointer to an instrument the payment
+ * processor already holds. The MCP server never receives the raw
+ * PAN/CVV — callers pass the processor's `payment_processor_payment_method_id`
+ * (Stripe pm_..., Braintree token, etc.) and the safe display fields
+ * (`card_last_4_digits`, `card_expiry_month`, `card_expiry_year`). Full
+ * card numbers, IBAN, and fingerprints are refused by the schema and
+ * would be redacted from the response even if the backend surfaced them.
+ *
+ * Persist only enforces one active primary method per customer, so
+ * registering the same non-primary instrument twice creates two rows,
+ * and it ignores the `Idempotency-Key` header (WI-0008817).
+ */
+export declare const fxmPaymentMethodRegisterTool: Tool;
+//# sourceMappingURL=fxm-payment-method-register.d.ts.map

package/dist/tools/fxm/fxm-payment-method-register.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fxm-payment-method-register.d.ts","sourceRoot":"","sources":["../../../src/tools/fxm/fxm-payment-method-register.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AAUtC;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,4BAA4B,EAAE,IA4F1C,CAAC"}

package/dist/tools/fxm/fxm-payment-method-register.js

@@ -0,0 +1,102 @@
+import { z } from 'zod';
+import { API_ERROR, errorResponse, successResponse } from '../types.js';
+import { cap } from '../../capabilities/tool-capability.js';
+import { redactRow } from '../../generated-reads/guardrails.js';
+import { confirmFlagSchema, idempotencyKeySchema, writeHeadersWithIdempotency, } from '../_shared/side-effect.js';
+/**
+ * Register an external-payer payment method (`fxm_external_payer_payment_methods`).
+ *
+ * Provisioning: creates a durable pointer to an instrument the payment
+ * processor already holds. The MCP server never receives the raw
+ * PAN/CVV — callers pass the processor's `payment_processor_payment_method_id`
+ * (Stripe pm_..., Braintree token, etc.) and the safe display fields
+ * (`card_last_4_digits`, `card_expiry_month`, `card_expiry_year`). Full
+ * card numbers, IBAN, and fingerprints are refused by the schema and
+ * would be redacted from the response even if the backend surfaced them.
+ *
+ * Persist only enforces one active primary method per customer, so
+ * registering the same non-primary instrument twice creates two rows,
+ * and it ignores the `Idempotency-Key` header (WI-0008817).
+ */
+export const fxmPaymentMethodRegisterTool = {
+    name: 'fxm_external_payer_payment_method_register',
+    description: 'Register an external-payer payment method (fxm_external_payer_payment_methods). ' +
+        'Stores a pointer to the processor-held instrument; the raw PAN never touches this ' +
+        'server. Requires confirm=true. Not deduplicated: calling it again creates another ' +
+        'payment method, so check fxm_external_payer_payment_methods_list before retrying.',
+    inputSchema: z.object({
+        customer_id: z.string().min(1).describe('UUID of the FAR customer'),
+        payer_payment_method_type: z
+            .string()
+            .min(1)
+            .max(32)
+            .describe('Payment method type, validated against the ' +
+            'FXM_PAYMENT_METHODS_PAYER_PAYMENT_METHOD_TYPE lookup and the customer\'s ' +
+            'billing profile (e.g. CARD)'),
+        payment_processor_id: z
+            .string()
+            .min(1)
+            .optional()
+            .describe('UUID of the fxm_external_payment_processors row'),
+        payment_processor_payment_method_id: z
+            .string()
+            .min(1)
+            .optional()
+            .describe('Processor-owned instrument id (e.g. Stripe pm_..., Braintree token). ' +
+            'Combined with customer_id + payment_processor_id identifies the instrument.'),
+        card_last_4_digits: z
+            .string()
+            .regex(/^[0-9]{4}$/, 'card_last_4_digits must be exactly 4 digits')
+            .optional(),
+        card_expiry_month: z.number().int().min(1).max(12).optional(),
+        card_expiry_year: z.number().int().min(2000).max(2100).optional(),
+        card_funding_method: z.string().max(64).optional(),
+        payment_method_scheme: z.string().max(64).optional(),
+        payment_method_country_code: z
+            .string()
+            .regex(/^[A-Z]{2}$/, 'country_code must be a 2-letter uppercase ISO 3166-1 alpha-2 code')
+            .optional(),
+        primary_payment_method: z.boolean().optional(),
+        start_date: z.string().min(1).optional().describe('ISO 8601 effective start'),
+        end_date: z.string().min(1).optional().describe('ISO 8601 planned end date'),
+        confirm: confirmFlagSchema,
+        idempotency_key: idempotencyKeySchema.describe('Optional. Forwarded as an Idempotency-Key header, but Persist does not enforce it ' +
+            'yet, so a retry can still create a duplicate.'),
+    }),
+    capabilities: [cap('fxm_external_payer_payment_methods', 'INSERT')],
+    sideEffect: 'provisioning',
+    confirmation: 'caller_confirms',
+    idempotency: 'not_idempotent',
+    handler: async (args, ctx) => {
+        const input = args;
+        const body = {
+            customer_id: input.customer_id,
+            payer_payment_method_type: input.payer_payment_method_type,
+        };
+        const optional = [
+            'payment_processor_id',
+            'payment_processor_payment_method_id',
+            'card_last_4_digits',
+            'card_expiry_month',
+            'card_expiry_year',
+            'card_funding_method',
+            'payment_method_scheme',
+            'payment_method_country_code',
+            'primary_payment_method',
+            'start_date',
+            'end_date',
+        ];
+        for (const field of optional) {
+            if (input[field] !== undefined)
+                body[field] = input[field];
+        }
+        try {
+            const rows = await ctx.apiClient.post(`${ctx.apiClient.dbBasePath}/fxm_external_payer_payment_methods?select=*`, body, { headers: writeHeadersWithIdempotency(input.idempotency_key) });
+            return successResponse(redactRow(rows[0]));
+        }
+        catch (error) {
+            return errorResponse(API_ERROR, `Failed to register FXM payment method: ${error.message}`);
+        }
+    },
+};
+//# sourceMappingURL=fxm-payment-method-register.js.map

package/dist/tools/fxm/fxm-payment-method-register.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fxm-payment-method-register.js","sourceRoot":"","sources":["../../../src/tools/fxm/fxm-payment-method-register.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACxE,OAAO,EAAE,GAAG,EAAE,MAAM,uCAAuC,CAAC;AAC5D,OAAO,EAAE,SAAS,EAAE,MAAM,qCAAqC,CAAC;AAChE,OAAO,EACL,iBAAiB,EACjB,oBAAoB,EACpB,2BAA2B,GAC5B,MAAM,2BAA2B,CAAC;AAEnC;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAS;IAChD,IAAI,EAAE,4CAA4C;IAClD,WAAW,EACT,kFAAkF;QAClF,oFAAoF;QACpF,oFAAoF;QACpF,mFAAmF;IACrF,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,0BAA0B,CAAC;QACnE,yBAAyB,EAAE,CAAC;aACzB,MAAM,EAAE;aACR,GAAG,CAAC,CAAC,CAAC;aACN,GAAG,CAAC,EAAE,CAAC;aACP,QAAQ,CACP,6CAA6C;YAC3C,2EAA2E;YAC3E,6BAA6B,CAChC;QACH,oBAAoB,EAAE,CAAC;aACpB,MAAM,EAAE;aACR,GAAG,CAAC,CAAC,CAAC;aACN,QAAQ,EAAE;aACV,QAAQ,CAAC,iDAAiD,CAAC;QAC9D,mCAAmC,EAAE,CAAC;aACnC,MAAM,EAAE;aACR,GAAG,CAAC,CAAC,CAAC;aACN,QAAQ,EAAE;aACV,QAAQ,CACP,uEAAuE;YACrE,6EAA6E,CAChF;QACH,kBAAkB,EAAE,CAAC;aAClB,MAAM,EAAE;aACR,KAAK,CAAC,YAAY,EAAE,6CAA6C,CAAC;aAClE,QAAQ,EAAE;QACb,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;QAC7D,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;QACjE,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;QAClD,qBAAqB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;QACpD,2BAA2B,EAAE,CAAC;aAC3B,MAAM,EAAE;aACR,KAAK,CAAC,YAAY,EAAE,mEAAmE,CAAC;aACxF,QAAQ,EAAE;QACb,sBAAsB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;QAC9C,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,0BAA0B,CAAC;QAC7E,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,2BAA2B,CAAC;QAC5E,OAAO,EAAE,iBAAiB;QAC1B,eAAe,EAAE,oBAAoB,CAAC,QAAQ,CAC5C,oFAAoF;YAClF,+CAA+C,CAClD;KACF,CAAC;IACF,YAAY,EAAE,CAAC,GAAG,CAAC,oCAAoC,EAAE,QAAQ,CAAC,CAAC;IACnE,UAAU,EAAE,cAAc;IAC1B,YAAY,EAAE,iBAAiB;IAC/B,WAAW,EAAE,gBAAgB;IAC7B,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QAC3B,MAAM,KAAK,GAAG,IAA2B,CAAC;QAC1C,MAAM,IAAI,GAAwB;YAChC,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,yBAAyB,EAAE,KAAK,CAAC,yBAAyB;SAC3D,CAAC;QACF,MAAM,QAAQ,GAAG;YACf,sBAAsB;YACtB,qCAAqC;YACrC,oBAAoB;YACpB,mBAAmB;YACnB,kBAAkB;YAClB,qBAAqB;YACrB,uBAAuB;YACvB,6BAA6B;YAC7B,wBAAwB;YACxB,YAAY;YACZ,UAAU;SACX,CAAC;QACF,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;YAC7B,IAAI,KAAK,CAAC,KAAK,CAAC,KAAK,SAAS;gBAAE,IAAI,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;QAC7D,CAAC;QACD,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,IAAI,CACnC,GAAG,GAAG,CAAC,SAAS,CAAC,UAAU,8CAA8C,EACzE,IAAI,EACJ,EAAE,OAAO,EAAE,2BAA2B,CAAC,KAAK,CAAC,eAAe,CAAC,EAAE,CAChE,CAAC;YACF,OAAO,eAAe,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7C,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,OAAO,aAAa,CAClB,SAAS,EACT,0CAA0C,KAAK,CAAC,OAAO,EAAE,CAC1D,CAAC;QACJ,CAAC;IACH,CAAC;CACF,CAAC"}

package/dist/tools/fxm/generated-reads.d.ts

@@ -0,0 +1,5 @@
+import { Tool } from '../registry.js';
+import { CatalogueReport } from '../../generated-reads/index.js';
+export declare const fxmGeneratedReadReport: CatalogueReport;
+export declare const fxmGeneratedReadTools: Tool[];
+//# sourceMappingURL=generated-reads.d.ts.map

package/dist/tools/fxm/generated-reads.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"generated-reads.d.ts","sourceRoot":"","sources":["../../../src/tools/fxm/generated-reads.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AACtC,OAAO,EAGL,eAAe,EAChB,MAAM,gCAAgC,CAAC;AAwBxC,eAAO,MAAM,sBAAsB,EAAE,eAIjC,CAAC;AAEL,eAAO,MAAM,qBAAqB,EAAE,IAAI,EAGvC,CAAC"}

package/dist/tools/fxm/generated-reads.js

@@ -0,0 +1,27 @@
+import { buildGeneratedReadCatalogue, buildGeneratedReadCatalogueReport, } from '../../generated-reads/index.js';
+import { loadPersistResourceContract } from '../../contracts/persist-resource-contract.js';
+/**
+ * Bounded read tools for the FXM (Funds Transfer Management) module
+ * (WI-0003505).
+ *
+ * The schema-driven catalogue (WI-0003500) emits describe/list/get for
+ * every FXM resource declaring a read operation. The pinned contract
+ * already hard-excludes `fxm_payment_processor_credentials` on the
+ * `credentials` rule, and the sensitive-field guardrail redacts every
+ * bank-account / card / IBAN / fingerprint column from any response
+ * (see WI-0003505 extension to `SENSITIVE_FIELD_PATTERNS`).
+ *
+ * `fxm_external_payer_payment_methods` and `fxm_external_payment_processors`
+ * are `sensitive` — opted-in explicitly here so callers can list them
+ * with the sensitive-field guardrail active. Every write on either goes
+ * through a dedicated tool (`fxm_external_payer_payment_method_register` /
+ * `_deactivate`); the generator refuses to emit CRUD on sensitive
+ * side-effecting surfaces.
+ */
+const contract = loadPersistResourceContract();
+export const fxmGeneratedReadReport = buildGeneratedReadCatalogueReport(contract, {
+    modules: ['fxm'],
+    includeSensitive: true,
+});
+export const fxmGeneratedReadTools = buildGeneratedReadCatalogue(contract, { modules: ['fxm'], includeSensitive: true });
+//# sourceMappingURL=generated-reads.js.map

package/dist/tools/fxm/generated-reads.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"generated-reads.js","sourceRoot":"","sources":["../../../src/tools/fxm/generated-reads.ts"],"names":[],"mappings":"AACA,OAAO,EACL,2BAA2B,EAC3B,iCAAiC,GAElC,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,2BAA2B,EAAE,MAAM,8CAA8C,CAAC;AAE3F;;;;;;;;;;;;;;;;;GAiBG;AAEH,MAAM,QAAQ,GAAG,2BAA2B,EAAE,CAAC;AAE/C,MAAM,CAAC,MAAM,sBAAsB,GACjC,iCAAiC,CAAC,QAAQ,EAAE;IAC1C,OAAO,EAAE,CAAC,KAAK,CAAC;IAChB,gBAAgB,EAAE,IAAI;CACvB,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,qBAAqB,GAAW,2BAA2B,CACtE,QAAQ,EACR,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAC7C,CAAC"}

package/dist/tools/fxm/index.d.ts

@@ -0,0 +1,5 @@
+import { Tool } from '../registry.js';
+export declare const fxmTools: Tool[];
+/** Read-only slice used by the `fxm-readonly` selectable sub-domain. */
+export declare const fxmReadOnlyTools: Tool[];
+//# sourceMappingURL=index.d.ts.map

package/dist/tools/fxm/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/tools/fxm/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AActC,eAAO,MAAM,QAAQ,EAAE,IAAI,EAAiD,CAAC;AAE7E,wEAAwE;AACxE,eAAO,MAAM,gBAAgB,EAAE,IAAI,EAA0B,CAAC"}

package/dist/tools/fxm/index.js

@@ -0,0 +1,15 @@
+import { fxmGeneratedReadTools } from './generated-reads.js';
+import { fxmPaymentMethodRegisterTool } from './fxm-payment-method-register.js';
+import { fxmPaymentMethodDeactivateTool } from './fxm-payment-method-deactivate.js';
+import { fxmFundsAccountConsentGrantTool } from './fxm-funds-account-consent-grant.js';
+import { fxmFundsAccountConsentRevokeTool } from './fxm-funds-account-consent-revoke.js';
+const fxmWriteTools = [
+    fxmPaymentMethodRegisterTool,
+    fxmPaymentMethodDeactivateTool,
+    fxmFundsAccountConsentGrantTool,
+    fxmFundsAccountConsentRevokeTool,
+];
+export const fxmTools = [...fxmGeneratedReadTools, ...fxmWriteTools];
+/** Read-only slice used by the `fxm-readonly` selectable sub-domain. */
+export const fxmReadOnlyTools = fxmGeneratedReadTools;
+//# sourceMappingURL=index.js.map

package/dist/tools/fxm/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/tools/fxm/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAC7D,OAAO,EAAE,4BAA4B,EAAE,MAAM,kCAAkC,CAAC;AAChF,OAAO,EAAE,8BAA8B,EAAE,MAAM,oCAAoC,CAAC;AACpF,OAAO,EAAE,+BAA+B,EAAE,MAAM,sCAAsC,CAAC;AACvF,OAAO,EAAE,gCAAgC,EAAE,MAAM,uCAAuC,CAAC;AAEzF,MAAM,aAAa,GAAW;IAC5B,4BAA4B;IAC5B,8BAA8B;IAC9B,+BAA+B;IAC/B,gCAAgC;CACjC,CAAC;AAEF,MAAM,CAAC,MAAM,QAAQ,GAAW,CAAC,GAAG,qBAAqB,EAAE,GAAG,aAAa,CAAC,CAAC;AAE7E,wEAAwE;AACxE,MAAM,CAAC,MAAM,gBAAgB,GAAW,qBAAqB,CAAC"}

package/dist/tools/role-mapping.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"role-mapping.d.ts","sourceRoot":"","sources":["../../src/tools/role-mapping.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAE1D;;;;;;;;GAQG;AACH,MAAM,WAAW,SAAS;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AA2BD;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,CAqBhE;AAED;;;GAGG;AACH,wBAAsB,eAAe,CACnC,SAAS,EAAE,eAAe,GACzB,OAAO,CAAC,SAAS,EAAE,CAAC,CAEtB;AAED;;;;;;;;GAQG;AACH,wBAAsB,kBAAkB,CACtC,SAAS,EAAE,eAAe,GACzB,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAO7B"}
+{"version":3,"file":"role-mapping.d.ts","sourceRoot":"","sources":["../../src/tools/role-mapping.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAE1D;;;;;;;;GAQG;AACH,MAAM,WAAW,SAAS;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAiCD;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,CA2BhE;AAED;;;GAGG;AACH,wBAAsB,eAAe,CACnC,SAAS,EAAE,eAAe,GACzB,OAAO,CAAC,SAAS,EAAE,CAAC,CAEtB;AAED;;;;;;;;GAQG;AACH,wBAAsB,kBAAkB,CACtC,SAAS,EAAE,eAAe,GACzB,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAO7B"}

package/dist/tools/role-mapping.js

@@ -21,6 +21,12 @@ const ROLE_TO_DOMAINS = {
     // FND conversion rates and COA/daily-rate imports are administrator-only.
     'Finance administrator': ['fgl', 'fnd'],
     'Accountant': ['fgl'],
+    'Funds administrator': ['fxm'],
+    'Funds user': ['fxm'],
+    'Funds viewer': ['fxm-readonly'],
+    'Bank account administrator': ['cmm'],
+    'Bank account user': ['cmm'],
+    'Bank account viewer': ['cmm-readonly'],
 };
 /**
  * Given a list of user group names, resolve the set of tool domain IDs
@@ -48,6 +54,12 @@ export function mapRolesToDomains(groupNames) {
     if (domains.has('sfa') && domains.has('sfa-readonly')) {
         domains.delete('sfa-readonly');
     }
+    if (domains.has('fxm') && domains.has('fxm-readonly')) {
+        domains.delete('fxm-readonly');
+    }
+    if (domains.has('cmm') && domains.has('cmm-readonly')) {
+        domains.delete('cmm-readonly');
+    }
     return [...domains];
 }
 /**