@synap-core/workspace-templates 0.23.0 → 0.24.1

package/capabilities/stripe.capability.json

@@ -4,7 +4,7 @@
   "meta": {
     "slug": "stripe",
     "name": "Stripe — Payments & Billing",
-    "description": "Read your Stripe account: list customers, invoices, subscriptions, charges, products and payouts, and read your current balance. Read-only by design — it cannot move money. Needs a Stripe RESTRICTED read-only key, never a full secret key.",
+    "description": "Run your Stripe account from your pod: customers, products, prices, payment links, checkout, invoices, subscriptions, refunds, payouts and Stripe Tax. Reads run at once; every change is filed for your review first. Needs a Stripe restricted key (rk_…), never a full secret key.",
     "tags": [
       "capability"
     ],
@@ -14,14 +14,14 @@
   "spec": {
     "key": "stripe",
     "name": "Stripe — Payments & Billing",
-    "description": "READ-ONLY Stripe access for the user's OWN account (not Connect/marketplace). Authenticates with a Stripe RESTRICTED API key (rk_live_… / rk_test_…) resolved server-side from the vault (vault://stripe) and injected as `Authorization: Bearer <key>` against https://api.stripe.com. List verbs default their limit (20, max 100). Covers customers, charges, invoices, subscriptions, products, payouts and the account balance. This capability deliberately contains NO create/update/refund/cancel verbs — it can read money state but can never move it; a restricted key scoped to read-only (or read + the specific list resources) is the correct credential and a full sk_live secret key should NOT be used. PRECONDITION: a Stripe account with a RESTRICTED API key created in the Dashboard (Developers -> API keys -> Create restricted key); pass it at connect time, it is stored server-encrypted in the vault and never persisted in the template. All endpoints are GET and return data inline, so reads auto-run. NOTE: paths are absolute against baseUrl https://api.stripe.com; response-field shaping (snake_case keys, `.data[]` list envelopes) is verified against Stripe's published API reference (customers/charges/invoices/subscriptions/products/payouts/balance list+retrieve) rather than the live account, and Stripe applies the account's default API version when no `Stripe-Version` header is pinned — so a shape check at first run is prudent. Stripe's top-level list envelope carries `has_more` (there is no `total_count` on the top-level list object), which is surfaced as `hasMore`.",
+    "description": "Stripe for the user's OWN account (not Connect). Authenticates with a Stripe RESTRICTED API key (rk_live_… / rk_test_…) resolved server-side from the vault (vault://stripe) and injected as `Authorization: Bearer <key>` against the fixed host https://api.stripe.com; a call-time path can never change the host. Bodies are sent form-encoded (`config.bodyEncoding: form`), as Stripe v1 requires, with bracket nesting (defaults[tax_behavior]=exclusive, line_items[0][price]=price_…).\n\nGOVERNANCE: every GET verb declares metadata.readOnly and runs at once. Every verb that writes, moves money (refund, payout, invoice, subscription) or changes an account setting (tax settings, tax registrations) is NOT read-only: an agent's call is filed as a proposal the person approves before Stripe sees it. The key's own permissions are the second wall: a Read-only key makes every write fail at Stripe with a permission error, whatever the pod approves.\n\nVERBS: typed verbs per resource for the common acts (their path ids are typed; every other Stripe field goes in `fields`, an object of Stripe's own parameter names, exactly as the API reference spells them), plus three generic verbs for anything else in the API: stripe_api_read (GET), stripe_api_write (POST) and stripe_api_delete (DELETE), each taking `path` relative to /v1/ (e.g. \"tax/settings\", \"customers/cus_123\"; '.', '..' and empty segments are refused) and `params` (query for GET/DELETE, body for POST).\n\nSTRIPE TAX: stripe_get_tax_settings / stripe_update_tax_settings (defaults.tax_behavior = inclusive | exclusive | inferred_by_currency, defaults.tax_code, head_office.address); stripe_list_tax_registrations / stripe_create_tax_registration (country, country_options, active_from) / stripe_update_tax_registration (expires_at to end one). Automatic tax on a sale is per object: automatic_tax[enabled]=true on a checkout session, payment link, invoice or subscription; a price's tax_behavior is set on the price. ADAPTIVE PRICING: the account default is a Dashboard setting (Settings -> Adaptive Pricing), not an API; it is always on for Payment Links, and a checkout session can set adaptive_pricing[enabled].\n\nKEY PERMISSIONS: create the key in Dashboard -> Developers -> API keys -> Create restricted key. Read on everything the agent may look at; Write only on what you want it able to change, among: Customers, Products, Prices, Payment Links, Checkout Sessions, Invoices, Subscriptions, Refunds, Payouts, Balance, Tax Settings, Tax Registrations. A missing permission comes back from Stripe as an error naming it. List verbs default their limit (20, max 100); Stripe's list envelope carries `has_more`, surfaced as `hasMore`.",
     "params": [
       {
         "name": "stripeApiKey",
         "label": "Stripe restricted API key",
         "type": "text",
         "required": true,
-        "description": "A Stripe RESTRICTED API key (Developers -> API keys -> Create restricted key; starts with rk_live_ or rk_test_). Grant only Read (or the specific list/read resources) — never use a full sk_live secret key. Stored server-encrypted in the vault; never persisted in the template."
+        "description": "A Stripe RESTRICTED API key (Developers -> API keys -> Create restricted key; starts with rk_live_ or rk_test_), never a full sk_live secret key. Grant Read on what the pod may see, and Write only on what it may change (Customers, Products, Prices, Payment Links, Checkout Sessions, Invoices, Subscriptions, Refunds, Payouts, Balance, Tax Settings, Tax Registrations). A read-only key keeps every write verb failing at Stripe. Stored server-encrypted in the vault; never persisted in the template."
       }
     ],
     "vault": [
@@ -38,7 +38,7 @@
       {
         "name": "stripe",
         "kind": "provider",
-        "description": "Authenticated READ access to the user's own Stripe REST API (https://api.stripe.com). credentialRef vault://stripe resolves the user's restricted key from the vault, and the dispatcher injects it as `Authorization: Bearer <key>` (Stripe accepts Bearer auth as well as Basic) into a fixed host — a call-time path can never redirect the credentialed request elsewhere. Its credentialRef is remapped to the runtime vault://<id> at apply time.",
+        "description": "Authenticated access to the user's own Stripe REST API (https://api.stripe.com). credentialRef vault://stripe resolves the user's restricted key from the vault, and the dispatcher injects it as `Authorization: Bearer <key>` into a fixed host: a call-time path can never redirect the credentialed request elsewhere. Request bodies are form-encoded (bodyEncoding: form), as Stripe v1 requires. Its credentialRef is remapped to the runtime vault://<id> at apply time.",
         "credentialRef": "stripe",
         "executor": "is-agent",
         "config": {
@@ -48,7 +48,8 @@
             "in": "header",
             "name": "Authorization",
             "prefix": "Bearer "
-          }
+          },
+          "bodyEncoding": "form"
         }
       }
     ],
@@ -98,6 +99,9 @@
               "hasMore": "has_more"
             }
           }
+        },
+        "metadata": {
+          "readOnly": true
         }
       },
       {
@@ -136,14 +140,67 @@
               "balance": "balance"
             }
           }
+        },
+        "metadata": {
+          "readOnly": true
         }
       },
       {
-        "name": "stripe_list_charges",
+        "name": "stripe_create_customer",
+        "kind": "declarative",
+        "scope": "pod",
+        "description": "WRITE, reviewed before it runs: creates a customer. Args: { fields?: object (email, name, description, address, tax_id_data, metadata…) }. `fields` holds Stripe's own parameter names (nested objects and arrays allowed); they are sent form-encoded.",
+        "requires": [
+          "stripe"
+        ],
+        "executionMode": "sync",
+        "timeoutSeconds": 30,
+        "parameters": {
+          "fields": "object?"
+        },
+        "providerSpec": {
+          "tool": "stripe",
+          "method": "POST",
+          "pathTemplate": "/v1/customers",
+          "bodyFrom": "fields"
+        }
+      },
+      {
+        "name": "stripe_update_customer",
+        "kind": "declarative",
+        "scope": "pod",
+        "description": "WRITE, reviewed before it runs: updates a customer. Args: { customerId: string (a cus_… id), fields: object (email, name, address, tax_exempt, invoice_settings, metadata…) }. `fields` holds Stripe's own parameter names (nested objects and arrays allowed); they are sent form-encoded.",
+        "requires": [
+          "stripe"
+        ],
+        "executionMode": "sync",
+        "timeoutSeconds": 30,
+        "parameters": {
+          "customerId": "string",
+          "fields": "object"
+        },
+        "providerSpec": {
+          "tool": "stripe",
+          "method": "POST",
+          "pathTemplate": "/v1/customers/{{customerId}}",
+          "bodyFrom": "fields",
+          "paramMapping": {
+            "customerId": {
+              "required": true,
+              "encode": "uri"
+            },
+            "fields": {
+              "required": true
+            }
+          }
+        }
+      },
+      {
+        "name": "stripe_list_products",
         "intent": "list_records",
         "kind": "declarative",
         "scope": "pod",
-        "description": "Lists the user's Stripe charges (payments), most recent first. Args: { limit?: number (default 20, max 100) }.",
+        "description": "Lists the user's Stripe products, most recently created first. Args: { limit?: number (default 20, max 100) }.",
         "requires": [
           "stripe"
         ],
@@ -155,7 +212,7 @@
         "providerSpec": {
           "tool": "stripe",
           "method": "GET",
-          "pathTemplate": "/v1/charges",
+          "pathTemplate": "/v1/products",
           "query": {
             "limit": "{{limit}}"
           },
@@ -168,98 +225,132 @@
           },
           "responseShape": {
             "collectionPath": "data",
-            "collectionAs": "charges",
+            "collectionAs": "products",
             "item": {
               "id": "id",
-              "amount": "amount",
-              "currency": "currency",
-              "status": "status",
-              "paid": "paid",
-              "refunded": "refunded",
-              "created": "created",
+              "name": "name",
+              "active": "active",
               "description": "description",
-              "customer": "customer",
-              "receiptUrl": "receipt_url"
+              "created": "created",
+              "updated": "updated",
+              "defaultPrice": "default_price"
             },
             "scalar": {
               "count": "@count",
               "hasMore": "has_more"
             }
           }
+        },
+        "metadata": {
+          "readOnly": true
         }
       },
       {
-        "name": "stripe_list_invoices",
-        "intent": "list_records",
+        "name": "stripe_get_product",
+        "intent": "fetch_record",
         "kind": "declarative",
         "scope": "pod",
-        "description": "Lists the user's Stripe invoices, most recently created first. Args: { limit?: number (default 20, max 100) }.",
+        "description": "Gets one product by id. Args: { productId: string (a prod_… id) }.",
         "requires": [
           "stripe"
         ],
         "executionMode": "sync",
         "timeoutSeconds": 30,
         "parameters": {
-          "limit": "number?"
+          "productId": "string"
         },
         "providerSpec": {
           "tool": "stripe",
           "method": "GET",
-          "pathTemplate": "/v1/invoices",
-          "query": {
-            "limit": "{{limit}}"
-          },
+          "pathTemplate": "/v1/products/{{productId}}",
           "paramMapping": {
-            "limit": {
-              "default": 20,
-              "clampMin": 1,
-              "clampMax": 100
+            "productId": {
+              "required": true,
+              "encode": "uri"
             }
-          },
-          "responseShape": {
-            "collectionPath": "data",
-            "collectionAs": "invoices",
-            "item": {
-              "id": "id",
-              "number": "number",
-              "customer": "customer",
-              "customerEmail": "customer_email",
-              "status": "status",
-              "currency": "currency",
-              "amountDue": "amount_due",
-              "amountPaid": "amount_paid",
-              "created": "created",
-              "dueDate": "due_date",
-              "hostedInvoiceUrl": "hosted_invoice_url",
-              "invoicePdf": "invoice_pdf"
+          }
+        },
+        "metadata": {
+          "readOnly": true
+        }
+      },
+      {
+        "name": "stripe_create_product",
+        "kind": "declarative",
+        "scope": "pod",
+        "description": "WRITE, reviewed before it runs: creates a product. Args: { fields: object (name (required), description, tax_code, default_price_data, metadata…) }. `fields` holds Stripe's own parameter names (nested objects and arrays allowed); they are sent form-encoded.",
+        "requires": [
+          "stripe"
+        ],
+        "executionMode": "sync",
+        "timeoutSeconds": 30,
+        "parameters": {
+          "fields": "object"
+        },
+        "providerSpec": {
+          "tool": "stripe",
+          "method": "POST",
+          "pathTemplate": "/v1/products",
+          "bodyFrom": "fields",
+          "paramMapping": {
+            "fields": {
+              "required": true
+            }
+          }
+        }
+      },
+      {
+        "name": "stripe_update_product",
+        "kind": "declarative",
+        "scope": "pod",
+        "description": "WRITE, reviewed before it runs: updates a product (name, active, tax_code, default_price…). Args: { productId: string (a prod_… id), fields: object }. `fields` holds Stripe's own parameter names (nested objects and arrays allowed); they are sent form-encoded.",
+        "requires": [
+          "stripe"
+        ],
+        "executionMode": "sync",
+        "timeoutSeconds": 30,
+        "parameters": {
+          "productId": "string",
+          "fields": "object"
+        },
+        "providerSpec": {
+          "tool": "stripe",
+          "method": "POST",
+          "pathTemplate": "/v1/products/{{productId}}",
+          "bodyFrom": "fields",
+          "paramMapping": {
+            "productId": {
+              "required": true,
+              "encode": "uri"
             },
-            "scalar": {
-              "count": "@count",
-              "hasMore": "has_more"
+            "fields": {
+              "required": true
             }
           }
         }
       },
       {
-        "name": "stripe_list_subscriptions",
+        "name": "stripe_list_prices",
         "intent": "list_records",
         "kind": "declarative",
         "scope": "pod",
-        "description": "Lists the user's Stripe subscriptions. Stripe returns only non-canceled subscriptions by default; canceled ones are omitted unless a status filter is passed. Args: { limit?: number (default 20, max 100) }.",
+        "description": "Lists the account's prices, most recent first. Args: { limit?: number (default 20, max 100), product?: string (a prod_… id to filter by) }.",
         "requires": [
           "stripe"
         ],
         "executionMode": "sync",
         "timeoutSeconds": 30,
         "parameters": {
-          "limit": "number?"
+          "limit": "number?",
+          "product": "string?"
         },
         "providerSpec": {
           "tool": "stripe",
           "method": "GET",
-          "pathTemplate": "/v1/subscriptions",
+          "pathTemplate": "/v1/prices",
           "query": {
-            "limit": "{{limit}}"
+            "limit": "{{limit}}",
+            "product": "{{product}}"
           },
           "paramMapping": {
             "limit": {
@@ -270,29 +361,89 @@
           },
           "responseShape": {
             "collectionPath": "data",
-            "collectionAs": "subscriptions",
+            "collectionAs": "prices",
             "item": {
               "id": "id",
-              "customer": "customer",
-              "status": "status",
+              "product": "product",
               "currency": "currency",
-              "created": "created",
-              "latestInvoice": "latest_invoice",
-              "cancelAtPeriodEnd": "cancel_at_period_end"
+              "unitAmount": "unit_amount",
+              "type": "type",
+              "recurring": "recurring",
+              "taxBehavior": "tax_behavior",
+              "active": "active",
+              "lookupKey": "lookup_key"
             },
             "scalar": {
               "count": "@count",
               "hasMore": "has_more"
             }
           }
+        },
+        "metadata": {
+          "readOnly": true
         }
       },
       {
-        "name": "stripe_list_products",
+        "name": "stripe_create_price",
+        "kind": "declarative",
+        "scope": "pod",
+        "description": "WRITE, reviewed before it runs: creates a price. Args: { fields: object (currency, unit_amount, product or product_data, recurring, tax_behavior (inclusive | exclusive | unspecified), currency_options…) }. `fields` holds Stripe's own parameter names (nested objects and arrays allowed); they are sent form-encoded.",
+        "requires": [
+          "stripe"
+        ],
+        "executionMode": "sync",
+        "timeoutSeconds": 30,
+        "parameters": {
+          "fields": "object"
+        },
+        "providerSpec": {
+          "tool": "stripe",
+          "method": "POST",
+          "pathTemplate": "/v1/prices",
+          "bodyFrom": "fields",
+          "paramMapping": {
+            "fields": {
+              "required": true
+            }
+          }
+        }
+      },
+      {
+        "name": "stripe_update_price",
+        "kind": "declarative",
+        "scope": "pod",
+        "description": "WRITE, reviewed before it runs: updates a price (active, lookup_key, metadata, tax_behavior while it is still unspecified). Args: { priceId: string (a price_… id), fields: object }. `fields` holds Stripe's own parameter names (nested objects and arrays allowed); they are sent form-encoded.",
+        "requires": [
+          "stripe"
+        ],
+        "executionMode": "sync",
+        "timeoutSeconds": 30,
+        "parameters": {
+          "priceId": "string",
+          "fields": "object"
+        },
+        "providerSpec": {
+          "tool": "stripe",
+          "method": "POST",
+          "pathTemplate": "/v1/prices/{{priceId}}",
+          "bodyFrom": "fields",
+          "paramMapping": {
+            "priceId": {
+              "required": true,
+              "encode": "uri"
+            },
+            "fields": {
+              "required": true
+            }
+          }
+        }
+      },
+      {
+        "name": "stripe_list_payment_links",
         "intent": "list_records",
         "kind": "declarative",
         "scope": "pod",
-        "description": "Lists the user's Stripe products, most recently created first. Args: { limit?: number (default 20, max 100) }.",
+        "description": "Lists the account's payment links, most recent first. Args: { limit?: number (default 20, max 100) }.",
         "requires": [
           "stripe"
         ],
@@ -304,7 +455,7 @@
         "providerSpec": {
           "tool": "stripe",
           "method": "GET",
-          "pathTemplate": "/v1/products",
+          "pathTemplate": "/v1/payment_links",
           "query": {
             "limit": "{{limit}}"
           },
@@ -317,29 +468,85 @@
           },
           "responseShape": {
             "collectionPath": "data",
-            "collectionAs": "products",
+            "collectionAs": "payment_links",
             "item": {
               "id": "id",
-              "name": "name",
+              "url": "url",
               "active": "active",
-              "description": "description",
-              "created": "created",
-              "updated": "updated",
-              "defaultPrice": "default_price"
+              "currency": "currency",
+              "automaticTax": "automatic_tax.enabled"
             },
             "scalar": {
               "count": "@count",
               "hasMore": "has_more"
             }
           }
+        },
+        "metadata": {
+          "readOnly": true
         }
       },
       {
-        "name": "stripe_list_payouts",
+        "name": "stripe_create_payment_link",
+        "kind": "declarative",
+        "scope": "pod",
+        "description": "WRITE, reviewed before it runs: creates a payment link (a public URL that charges money once someone pays). Args: { fields: object (line_items[{price, quantity}], automatic_tax[enabled], after_completion, allow_promotion_codes…) }. `fields` holds Stripe's own parameter names (nested objects and arrays allowed); they are sent form-encoded.",
+        "requires": [
+          "stripe"
+        ],
+        "executionMode": "sync",
+        "timeoutSeconds": 30,
+        "parameters": {
+          "fields": "object"
+        },
+        "providerSpec": {
+          "tool": "stripe",
+          "method": "POST",
+          "pathTemplate": "/v1/payment_links",
+          "bodyFrom": "fields",
+          "paramMapping": {
+            "fields": {
+              "required": true
+            }
+          }
+        }
+      },
+      {
+        "name": "stripe_update_payment_link",
+        "kind": "declarative",
+        "scope": "pod",
+        "description": "WRITE, reviewed before it runs: updates a payment link (active false to switch it off, automatic_tax…). Args: { paymentLinkId: string (a plink_… id), fields: object }. `fields` holds Stripe's own parameter names (nested objects and arrays allowed); they are sent form-encoded.",
+        "requires": [
+          "stripe"
+        ],
+        "executionMode": "sync",
+        "timeoutSeconds": 30,
+        "parameters": {
+          "paymentLinkId": "string",
+          "fields": "object"
+        },
+        "providerSpec": {
+          "tool": "stripe",
+          "method": "POST",
+          "pathTemplate": "/v1/payment_links/{{paymentLinkId}}",
+          "bodyFrom": "fields",
+          "paramMapping": {
+            "paymentLinkId": {
+              "required": true,
+              "encode": "uri"
+            },
+            "fields": {
+              "required": true
+            }
+          }
+        }
+      },
+      {
+        "name": "stripe_list_checkout_sessions",
         "intent": "list_records",
         "kind": "declarative",
         "scope": "pod",
-        "description": "Lists the user's Stripe payouts to bank accounts, most recently created first. Args: { limit?: number (default 20, max 100) }.",
+        "description": "Lists the account's checkout sessions, most recent first. Args: { limit?: number (default 20, max 100) }.",
         "requires": [
           "stripe"
         ],
@@ -351,7 +558,7 @@
         "providerSpec": {
           "tool": "stripe",
           "method": "GET",
-          "pathTemplate": "/v1/payouts",
+          "pathTemplate": "/v1/checkout/sessions",
           "query": {
             "limit": "{{limit}}"
           },
@@ -364,42 +571,625 @@
           },
           "responseShape": {
             "collectionPath": "data",
-            "collectionAs": "payouts",
+            "collectionAs": "checkout_sessions",
             "item": {
               "id": "id",
-              "amount": "amount",
-              "currency": "currency",
               "status": "status",
-              "created": "created",
-              "arrivalDate": "arrival_date",
-              "description": "description",
-              "method": "method",
-              "type": "type"
+              "paymentStatus": "payment_status",
+              "amountTotal": "amount_total",
+              "currency": "currency",
+              "customer": "customer",
+              "url": "url"
             },
             "scalar": {
               "count": "@count",
               "hasMore": "has_more"
             }
           }
+        },
+        "metadata": {
+          "readOnly": true
         }
       },
       {
-        "name": "stripe_get_balance",
-        "intent": "fetch_record",
+        "name": "stripe_create_checkout_session",
         "kind": "declarative",
         "scope": "pod",
-        "description": "Gets the account's current Stripe balance: `available` and `pending` are per-currency lists of { amount, currency, source_types }, plus any connect_reserved. No args.",
+        "description": "WRITE, reviewed before it runs: creates a checkout session (a payment page). Args: { fields: object (mode (payment | subscription | setup), line_items, success_url, automatic_tax[enabled], adaptive_pricing[enabled], customer…) }. `fields` holds Stripe's own parameter names (nested objects and arrays allowed); they are sent form-encoded.",
         "requires": [
           "stripe"
         ],
         "executionMode": "sync",
         "timeoutSeconds": 30,
-        "parameters": {},
+        "parameters": {
+          "fields": "object"
+        },
         "providerSpec": {
           "tool": "stripe",
-          "method": "GET",
-          "pathTemplate": "/v1/balance",
-          "responseShape": {
+          "method": "POST",
+          "pathTemplate": "/v1/checkout/sessions",
+          "bodyFrom": "fields",
+          "paramMapping": {
+            "fields": {
+              "required": true
+            }
+          }
+        }
+      },
+      {
+        "name": "stripe_list_invoices",
+        "intent": "list_records",
+        "kind": "declarative",
+        "scope": "pod",
+        "description": "Lists the user's Stripe invoices, most recently created first. Args: { limit?: number (default 20, max 100) }.",
+        "requires": [
+          "stripe"
+        ],
+        "executionMode": "sync",
+        "timeoutSeconds": 30,
+        "parameters": {
+          "limit": "number?"
+        },
+        "providerSpec": {
+          "tool": "stripe",
+          "method": "GET",
+          "pathTemplate": "/v1/invoices",
+          "query": {
+            "limit": "{{limit}}"
+          },
+          "paramMapping": {
+            "limit": {
+              "default": 20,
+              "clampMin": 1,
+              "clampMax": 100
+            }
+          },
+          "responseShape": {
+            "collectionPath": "data",
+            "collectionAs": "invoices",
+            "item": {
+              "id": "id",
+              "number": "number",
+              "customer": "customer",
+              "customerEmail": "customer_email",
+              "status": "status",
+              "currency": "currency",
+              "amountDue": "amount_due",
+              "amountPaid": "amount_paid",
+              "created": "created",
+              "dueDate": "due_date",
+              "hostedInvoiceUrl": "hosted_invoice_url",
+              "invoicePdf": "invoice_pdf"
+            },
+            "scalar": {
+              "count": "@count",
+              "hasMore": "has_more"
+            }
+          }
+        },
+        "metadata": {
+          "readOnly": true
+        }
+      },
+      {
+        "name": "stripe_get_invoice",
+        "intent": "fetch_record",
+        "kind": "declarative",
+        "scope": "pod",
+        "description": "Gets one invoice by id. Args: { invoiceId: string (an in_… id) }.",
+        "requires": [
+          "stripe"
+        ],
+        "executionMode": "sync",
+        "timeoutSeconds": 30,
+        "parameters": {
+          "invoiceId": "string"
+        },
+        "providerSpec": {
+          "tool": "stripe",
+          "method": "GET",
+          "pathTemplate": "/v1/invoices/{{invoiceId}}",
+          "paramMapping": {
+            "invoiceId": {
+              "required": true,
+              "encode": "uri"
+            }
+          }
+        },
+        "metadata": {
+          "readOnly": true
+        }
+      },
+      {
+        "name": "stripe_create_invoice",
+        "kind": "declarative",
+        "scope": "pod",
+        "description": "WRITE, reviewed before it runs: creates a draft invoice for a customer. Args: { fields: object (customer (required), collection_method, days_until_due, automatic_tax[enabled], auto_advance…) }. `fields` holds Stripe's own parameter names (nested objects and arrays allowed); they are sent form-encoded.",
+        "requires": [
+          "stripe"
+        ],
+        "executionMode": "sync",
+        "timeoutSeconds": 30,
+        "parameters": {
+          "fields": "object"
+        },
+        "providerSpec": {
+          "tool": "stripe",
+          "method": "POST",
+          "pathTemplate": "/v1/invoices",
+          "bodyFrom": "fields",
+          "paramMapping": {
+            "fields": {
+              "required": true
+            }
+          }
+        }
+      },
+      {
+        "name": "stripe_create_invoice_item",
+        "kind": "declarative",
+        "scope": "pod",
+        "description": "WRITE, reviewed before it runs: adds a line to a customer's next or draft invoice. Args: { fields: object (customer, invoice, price or amount+currency, quantity, description…) }. `fields` holds Stripe's own parameter names (nested objects and arrays allowed); they are sent form-encoded.",
+        "requires": [
+          "stripe"
+        ],
+        "executionMode": "sync",
+        "timeoutSeconds": 30,
+        "parameters": {
+          "fields": "object"
+        },
+        "providerSpec": {
+          "tool": "stripe",
+          "method": "POST",
+          "pathTemplate": "/v1/invoiceitems",
+          "bodyFrom": "fields",
+          "paramMapping": {
+            "fields": {
+              "required": true
+            }
+          }
+        }
+      },
+      {
+        "name": "stripe_finalize_invoice",
+        "kind": "declarative",
+        "scope": "pod",
+        "description": "WRITE, reviewed before it runs: finalizes a draft invoice (it becomes payable and gets its number). Args: { invoiceId: string (an in_… id), fields?: object }. `fields` holds Stripe's own parameter names (nested objects and arrays allowed); they are sent form-encoded.",
+        "requires": [
+          "stripe"
+        ],
+        "executionMode": "sync",
+        "timeoutSeconds": 30,
+        "parameters": {
+          "invoiceId": "string",
+          "fields": "object?"
+        },
+        "providerSpec": {
+          "tool": "stripe",
+          "method": "POST",
+          "pathTemplate": "/v1/invoices/{{invoiceId}}/finalize",
+          "bodyFrom": "fields",
+          "paramMapping": {
+            "invoiceId": {
+              "required": true,
+              "encode": "uri"
+            }
+          }
+        }
+      },
+      {
+        "name": "stripe_send_invoice",
+        "kind": "declarative",
+        "scope": "pod",
+        "description": "WRITE, reviewed before it runs: emails a finalized invoice to its customer. Args: { invoiceId: string (an in_… id), fields?: object }. `fields` holds Stripe's own parameter names (nested objects and arrays allowed); they are sent form-encoded.",
+        "requires": [
+          "stripe"
+        ],
+        "executionMode": "sync",
+        "timeoutSeconds": 30,
+        "parameters": {
+          "invoiceId": "string",
+          "fields": "object?"
+        },
+        "providerSpec": {
+          "tool": "stripe",
+          "method": "POST",
+          "pathTemplate": "/v1/invoices/{{invoiceId}}/send",
+          "bodyFrom": "fields",
+          "paramMapping": {
+            "invoiceId": {
+              "required": true,
+              "encode": "uri"
+            }
+          }
+        }
+      },
+      {
+        "name": "stripe_void_invoice",
+        "kind": "declarative",
+        "scope": "pod",
+        "description": "WRITE, reviewed before it runs: voids a finalized invoice (it can no longer be paid). Args: { invoiceId: string (an in_… id), fields?: object }. `fields` holds Stripe's own parameter names (nested objects and arrays allowed); they are sent form-encoded.",
+        "requires": [
+          "stripe"
+        ],
+        "executionMode": "sync",
+        "timeoutSeconds": 30,
+        "parameters": {
+          "invoiceId": "string",
+          "fields": "object?"
+        },
+        "providerSpec": {
+          "tool": "stripe",
+          "method": "POST",
+          "pathTemplate": "/v1/invoices/{{invoiceId}}/void",
+          "bodyFrom": "fields",
+          "paramMapping": {
+            "invoiceId": {
+              "required": true,
+              "encode": "uri"
+            }
+          }
+        }
+      },
+      {
+        "name": "stripe_list_subscriptions",
+        "intent": "list_records",
+        "kind": "declarative",
+        "scope": "pod",
+        "description": "Lists the user's Stripe subscriptions. Stripe returns only non-canceled subscriptions by default; canceled ones are omitted unless a status filter is passed. Args: { limit?: number (default 20, max 100) }.",
+        "requires": [
+          "stripe"
+        ],
+        "executionMode": "sync",
+        "timeoutSeconds": 30,
+        "parameters": {
+          "limit": "number?"
+        },
+        "providerSpec": {
+          "tool": "stripe",
+          "method": "GET",
+          "pathTemplate": "/v1/subscriptions",
+          "query": {
+            "limit": "{{limit}}"
+          },
+          "paramMapping": {
+            "limit": {
+              "default": 20,
+              "clampMin": 1,
+              "clampMax": 100
+            }
+          },
+          "responseShape": {
+            "collectionPath": "data",
+            "collectionAs": "subscriptions",
+            "item": {
+              "id": "id",
+              "customer": "customer",
+              "status": "status",
+              "currency": "currency",
+              "created": "created",
+              "latestInvoice": "latest_invoice",
+              "cancelAtPeriodEnd": "cancel_at_period_end"
+            },
+            "scalar": {
+              "count": "@count",
+              "hasMore": "has_more"
+            }
+          }
+        },
+        "metadata": {
+          "readOnly": true
+        }
+      },
+      {
+        "name": "stripe_get_subscription",
+        "intent": "fetch_record",
+        "kind": "declarative",
+        "scope": "pod",
+        "description": "Gets one subscription by id. Args: { subscriptionId: string (a sub_… id) }.",
+        "requires": [
+          "stripe"
+        ],
+        "executionMode": "sync",
+        "timeoutSeconds": 30,
+        "parameters": {
+          "subscriptionId": "string"
+        },
+        "providerSpec": {
+          "tool": "stripe",
+          "method": "GET",
+          "pathTemplate": "/v1/subscriptions/{{subscriptionId}}",
+          "paramMapping": {
+            "subscriptionId": {
+              "required": true,
+              "encode": "uri"
+            }
+          }
+        },
+        "metadata": {
+          "readOnly": true
+        }
+      },
+      {
+        "name": "stripe_create_subscription",
+        "kind": "declarative",
+        "scope": "pod",
+        "description": "WRITE, reviewed before it runs: creates a subscription (it bills the customer). Args: { fields: object (customer, items[{price, quantity}], automatic_tax[enabled], trial_period_days, collection_method…) }. `fields` holds Stripe's own parameter names (nested objects and arrays allowed); they are sent form-encoded.",
+        "requires": [
+          "stripe"
+        ],
+        "executionMode": "sync",
+        "timeoutSeconds": 30,
+        "parameters": {
+          "fields": "object"
+        },
+        "providerSpec": {
+          "tool": "stripe",
+          "method": "POST",
+          "pathTemplate": "/v1/subscriptions",
+          "bodyFrom": "fields",
+          "paramMapping": {
+            "fields": {
+              "required": true
+            }
+          }
+        }
+      },
+      {
+        "name": "stripe_update_subscription",
+        "kind": "declarative",
+        "scope": "pod",
+        "description": "WRITE, reviewed before it runs: updates a subscription (items, cancel_at_period_end, automatic_tax, proration_behavior…). Args: { subscriptionId: string (a sub_… id), fields: object }. `fields` holds Stripe's own parameter names (nested objects and arrays allowed); they are sent form-encoded.",
+        "requires": [
+          "stripe"
+        ],
+        "executionMode": "sync",
+        "timeoutSeconds": 30,
+        "parameters": {
+          "subscriptionId": "string",
+          "fields": "object"
+        },
+        "providerSpec": {
+          "tool": "stripe",
+          "method": "POST",
+          "pathTemplate": "/v1/subscriptions/{{subscriptionId}}",
+          "bodyFrom": "fields",
+          "paramMapping": {
+            "subscriptionId": {
+              "required": true,
+              "encode": "uri"
+            },
+            "fields": {
+              "required": true
+            }
+          }
+        }
+      },
+      {
+        "name": "stripe_cancel_subscription",
+        "kind": "declarative",
+        "scope": "pod",
+        "description": "WRITE, reviewed before it runs: cancels a subscription now (to cancel at period end, update it with cancel_at_period_end instead). Args: { subscriptionId: string (a sub_… id), fields?: object (invoice_now, prorate, cancellation_details) }. `fields` holds Stripe's own parameter names (nested objects and arrays allowed); they are sent form-encoded.",
+        "requires": [
+          "stripe"
+        ],
+        "executionMode": "sync",
+        "timeoutSeconds": 30,
+        "parameters": {
+          "subscriptionId": "string",
+          "fields": "object?"
+        },
+        "providerSpec": {
+          "tool": "stripe",
+          "method": "DELETE",
+          "pathTemplate": "/v1/subscriptions/{{subscriptionId}}",
+          "bodyFrom": "fields",
+          "paramMapping": {
+            "subscriptionId": {
+              "required": true,
+              "encode": "uri"
+            }
+          }
+        }
+      },
+      {
+        "name": "stripe_list_charges",
+        "intent": "list_records",
+        "kind": "declarative",
+        "scope": "pod",
+        "description": "Lists the user's Stripe charges (payments), most recent first. Args: { limit?: number (default 20, max 100) }.",
+        "requires": [
+          "stripe"
+        ],
+        "executionMode": "sync",
+        "timeoutSeconds": 30,
+        "parameters": {
+          "limit": "number?"
+        },
+        "providerSpec": {
+          "tool": "stripe",
+          "method": "GET",
+          "pathTemplate": "/v1/charges",
+          "query": {
+            "limit": "{{limit}}"
+          },
+          "paramMapping": {
+            "limit": {
+              "default": 20,
+              "clampMin": 1,
+              "clampMax": 100
+            }
+          },
+          "responseShape": {
+            "collectionPath": "data",
+            "collectionAs": "charges",
+            "item": {
+              "id": "id",
+              "amount": "amount",
+              "currency": "currency",
+              "status": "status",
+              "paid": "paid",
+              "refunded": "refunded",
+              "created": "created",
+              "description": "description",
+              "customer": "customer",
+              "receiptUrl": "receipt_url"
+            },
+            "scalar": {
+              "count": "@count",
+              "hasMore": "has_more"
+            }
+          }
+        },
+        "metadata": {
+          "readOnly": true
+        }
+      },
+      {
+        "name": "stripe_list_refunds",
+        "intent": "list_records",
+        "kind": "declarative",
+        "scope": "pod",
+        "description": "Lists the account's refunds, most recent first. Args: { limit?: number (default 20, max 100) }.",
+        "requires": [
+          "stripe"
+        ],
+        "executionMode": "sync",
+        "timeoutSeconds": 30,
+        "parameters": {
+          "limit": "number?"
+        },
+        "providerSpec": {
+          "tool": "stripe",
+          "method": "GET",
+          "pathTemplate": "/v1/refunds",
+          "query": {
+            "limit": "{{limit}}"
+          },
+          "paramMapping": {
+            "limit": {
+              "default": 20,
+              "clampMin": 1,
+              "clampMax": 100
+            }
+          },
+          "responseShape": {
+            "collectionPath": "data",
+            "collectionAs": "refunds",
+            "item": {
+              "id": "id",
+              "amount": "amount",
+              "currency": "currency",
+              "status": "status",
+              "charge": "charge",
+              "paymentIntent": "payment_intent",
+              "reason": "reason",
+              "created": "created"
+            },
+            "scalar": {
+              "count": "@count",
+              "hasMore": "has_more"
+            }
+          }
+        },
+        "metadata": {
+          "readOnly": true
+        }
+      },
+      {
+        "name": "stripe_create_refund",
+        "kind": "declarative",
+        "scope": "pod",
+        "description": "WRITE, reviewed before it runs: refunds a payment, in full or in part (money leaves the account). Args: { fields: object (charge or payment_intent (one required), amount, reason…) }. `fields` holds Stripe's own parameter names (nested objects and arrays allowed); they are sent form-encoded.",
+        "requires": [
+          "stripe"
+        ],
+        "executionMode": "sync",
+        "timeoutSeconds": 30,
+        "parameters": {
+          "fields": "object"
+        },
+        "providerSpec": {
+          "tool": "stripe",
+          "method": "POST",
+          "pathTemplate": "/v1/refunds",
+          "bodyFrom": "fields",
+          "paramMapping": {
+            "fields": {
+              "required": true
+            }
+          }
+        }
+      },
+      {
+        "name": "stripe_list_payouts",
+        "intent": "list_records",
+        "kind": "declarative",
+        "scope": "pod",
+        "description": "Lists the user's Stripe payouts to bank accounts, most recently created first. Args: { limit?: number (default 20, max 100) }.",
+        "requires": [
+          "stripe"
+        ],
+        "executionMode": "sync",
+        "timeoutSeconds": 30,
+        "parameters": {
+          "limit": "number?"
+        },
+        "providerSpec": {
+          "tool": "stripe",
+          "method": "GET",
+          "pathTemplate": "/v1/payouts",
+          "query": {
+            "limit": "{{limit}}"
+          },
+          "paramMapping": {
+            "limit": {
+              "default": 20,
+              "clampMin": 1,
+              "clampMax": 100
+            }
+          },
+          "responseShape": {
+            "collectionPath": "data",
+            "collectionAs": "payouts",
+            "item": {
+              "id": "id",
+              "amount": "amount",
+              "currency": "currency",
+              "status": "status",
+              "created": "created",
+              "arrivalDate": "arrival_date",
+              "description": "description",
+              "method": "method",
+              "type": "type"
+            },
+            "scalar": {
+              "count": "@count",
+              "hasMore": "has_more"
+            }
+          }
+        },
+        "metadata": {
+          "readOnly": true
+        }
+      },
+      {
+        "name": "stripe_get_balance",
+        "intent": "fetch_record",
+        "kind": "declarative",
+        "scope": "pod",
+        "description": "Gets the account's current Stripe balance: `available` and `pending` are per-currency lists of { amount, currency, source_types }, plus any connect_reserved. No args.",
+        "requires": [
+          "stripe"
+        ],
+        "executionMode": "sync",
+        "timeoutSeconds": 30,
+        "parameters": {},
+        "providerSpec": {
+          "tool": "stripe",
+          "method": "GET",
+          "pathTemplate": "/v1/balance",
+          "responseShape": {
             "scalar": {
               "object": "object",
               "livemode": "livemode",
@@ -408,6 +1198,292 @@
               "connectReserved": "connect_reserved"
             }
           }
+        },
+        "metadata": {
+          "readOnly": true
+        }
+      },
+      {
+        "name": "stripe_create_payout",
+        "kind": "declarative",
+        "scope": "pod",
+        "description": "WRITE, reviewed before it runs: sends money from the Stripe balance to the bank account. Args: { fields: object (amount, currency (required), description, method…) }. `fields` holds Stripe's own parameter names (nested objects and arrays allowed); they are sent form-encoded.",
+        "requires": [
+          "stripe"
+        ],
+        "executionMode": "sync",
+        "timeoutSeconds": 30,
+        "parameters": {
+          "fields": "object"
+        },
+        "providerSpec": {
+          "tool": "stripe",
+          "method": "POST",
+          "pathTemplate": "/v1/payouts",
+          "bodyFrom": "fields",
+          "paramMapping": {
+            "fields": {
+              "required": true
+            }
+          }
+        }
+      },
+      {
+        "name": "stripe_get_tax_settings",
+        "intent": "fetch_record",
+        "kind": "declarative",
+        "scope": "pod",
+        "description": "Gets the account's Stripe Tax settings: status, defaults (tax_behavior, tax_code) and head office.",
+        "requires": [
+          "stripe"
+        ],
+        "executionMode": "sync",
+        "timeoutSeconds": 30,
+        "parameters": {},
+        "providerSpec": {
+          "tool": "stripe",
+          "method": "GET",
+          "pathTemplate": "/v1/tax/settings"
+        },
+        "metadata": {
+          "readOnly": true
+        }
+      },
+      {
+        "name": "stripe_update_tax_settings",
+        "kind": "declarative",
+        "scope": "pod",
+        "description": "WRITE, reviewed before it runs: changes the account's Stripe Tax settings (an account setting; none can be removed once set). Args: { fields: object (defaults[tax_behavior] = inclusive | exclusive | inferred_by_currency, defaults[tax_code], head_office[address]) }. `fields` holds Stripe's own parameter names (nested objects and arrays allowed); they are sent form-encoded.",
+        "requires": [
+          "stripe"
+        ],
+        "executionMode": "sync",
+        "timeoutSeconds": 30,
+        "parameters": {
+          "fields": "object"
+        },
+        "providerSpec": {
+          "tool": "stripe",
+          "method": "POST",
+          "pathTemplate": "/v1/tax/settings",
+          "bodyFrom": "fields",
+          "paramMapping": {
+            "fields": {
+              "required": true
+            }
+          }
+        }
+      },
+      {
+        "name": "stripe_list_tax_registrations",
+        "intent": "list_records",
+        "kind": "declarative",
+        "scope": "pod",
+        "description": "Lists the account's tax registrations, most recent first. Args: { limit?: number (default 20, max 100), status?: string (active | expired | scheduled | all) }.",
+        "requires": [
+          "stripe"
+        ],
+        "executionMode": "sync",
+        "timeoutSeconds": 30,
+        "parameters": {
+          "limit": "number?",
+          "status": "string?"
+        },
+        "providerSpec": {
+          "tool": "stripe",
+          "method": "GET",
+          "pathTemplate": "/v1/tax/registrations",
+          "query": {
+            "limit": "{{limit}}",
+            "status": "{{status}}"
+          },
+          "paramMapping": {
+            "limit": {
+              "default": 20,
+              "clampMin": 1,
+              "clampMax": 100
+            }
+          },
+          "responseShape": {
+            "collectionPath": "data",
+            "collectionAs": "tax_registrations",
+            "item": {
+              "id": "id",
+              "country": "country",
+              "status": "status",
+              "countryOptions": "country_options",
+              "activeFrom": "active_from",
+              "expiresAt": "expires_at"
+            },
+            "scalar": {
+              "count": "@count",
+              "hasMore": "has_more"
+            }
+          }
+        },
+        "metadata": {
+          "readOnly": true
+        }
+      },
+      {
+        "name": "stripe_create_tax_registration",
+        "kind": "declarative",
+        "scope": "pod",
+        "description": "WRITE, reviewed before it runs: registers the account to collect tax in a country or state (an account setting). Args: { fields: object (country, country_options (e.g. {fr: {type: standard}}), active_from (now | a timestamp), expires_at) }. `fields` holds Stripe's own parameter names (nested objects and arrays allowed); they are sent form-encoded.",
+        "requires": [
+          "stripe"
+        ],
+        "executionMode": "sync",
+        "timeoutSeconds": 30,
+        "parameters": {
+          "fields": "object"
+        },
+        "providerSpec": {
+          "tool": "stripe",
+          "method": "POST",
+          "pathTemplate": "/v1/tax/registrations",
+          "bodyFrom": "fields",
+          "paramMapping": {
+            "fields": {
+              "required": true
+            }
+          }
+        }
+      },
+      {
+        "name": "stripe_update_tax_registration",
+        "kind": "declarative",
+        "scope": "pod",
+        "description": "WRITE, reviewed before it runs: changes a tax registration; set expires_at (now | a timestamp) to stop collecting there. Args: { registrationId: string (a taxreg_… id), fields: object }. `fields` holds Stripe's own parameter names (nested objects and arrays allowed); they are sent form-encoded.",
+        "requires": [
+          "stripe"
+        ],
+        "executionMode": "sync",
+        "timeoutSeconds": 30,
+        "parameters": {
+          "registrationId": "string",
+          "fields": "object"
+        },
+        "providerSpec": {
+          "tool": "stripe",
+          "method": "POST",
+          "pathTemplate": "/v1/tax/registrations/{{registrationId}}",
+          "bodyFrom": "fields",
+          "paramMapping": {
+            "registrationId": {
+              "required": true,
+              "encode": "uri"
+            },
+            "fields": {
+              "required": true
+            }
+          }
+        }
+      },
+      {
+        "name": "stripe_get_account",
+        "intent": "fetch_record",
+        "kind": "declarative",
+        "scope": "pod",
+        "description": "Gets the account itself: business profile, country, default currency, capabilities and settings.",
+        "requires": [
+          "stripe"
+        ],
+        "executionMode": "sync",
+        "timeoutSeconds": 30,
+        "parameters": {},
+        "providerSpec": {
+          "tool": "stripe",
+          "method": "GET",
+          "pathTemplate": "/v1/account"
+        },
+        "metadata": {
+          "readOnly": true
+        }
+      },
+      {
+        "name": "stripe_api_read",
+        "intent": "fetch_record",
+        "kind": "declarative",
+        "scope": "pod",
+        "description": "Reads ANY Stripe GET endpoint the key may read. Args: { path: string (relative to /v1/, e.g. \"tax/settings\", \"customers/cus_123/balance_transactions\", \"invoices/upcoming\"), params?: object (query parameters, nested allowed: {limit: 10, expand: [\"data.customer\"]}) }. Use a typed verb when one fits.",
+        "requires": [
+          "stripe"
+        ],
+        "executionMode": "sync",
+        "timeoutSeconds": 30,
+        "parameters": {
+          "path": "string",
+          "params": "object?"
+        },
+        "providerSpec": {
+          "tool": "stripe",
+          "method": "GET",
+          "pathTemplate": "/v1/{{path}}",
+          "bodyFrom": "params",
+          "paramMapping": {
+            "path": {
+              "required": true,
+              "encode": "path"
+            }
+          }
+        },
+        "metadata": {
+          "readOnly": true
+        }
+      },
+      {
+        "name": "stripe_api_write",
+        "kind": "declarative",
+        "scope": "pod",
+        "description": "WRITE, reviewed before it runs: calls ANY Stripe POST endpoint (create, update or act on any resource the API has: coupons, promotion codes, tax rates, credit notes, quotes, billing portal configuration…). Args: { path: string (relative to /v1/, e.g. \"coupons\", \"quotes/qt_123/finalize\"), params?: object (the request body in Stripe's own parameter names, nested allowed) }. Use a typed verb when one fits.",
+        "requires": [
+          "stripe"
+        ],
+        "executionMode": "sync",
+        "timeoutSeconds": 30,
+        "parameters": {
+          "path": "string",
+          "params": "object?"
+        },
+        "providerSpec": {
+          "tool": "stripe",
+          "method": "POST",
+          "pathTemplate": "/v1/{{path}}",
+          "bodyFrom": "params",
+          "paramMapping": {
+            "path": {
+              "required": true,
+              "encode": "path"
+            }
+          }
+        }
+      },
+      {
+        "name": "stripe_api_delete",
+        "kind": "declarative",
+        "scope": "pod",
+        "description": "WRITE, reviewed before it runs: calls ANY Stripe DELETE endpoint (delete a customer, a coupon, a product with no prices, a subscription item…). Args: { path: string (relative to /v1/, e.g. \"coupons/SUMMER\"), params?: object (query parameters) }.",
+        "requires": [
+          "stripe"
+        ],
+        "executionMode": "sync",
+        "timeoutSeconds": 30,
+        "parameters": {
+          "path": "string",
+          "params": "object?"
+        },
+        "providerSpec": {
+          "tool": "stripe",
+          "method": "DELETE",
+          "pathTemplate": "/v1/{{path}}",
+          "bodyFrom": "params",
+          "paramMapping": {
+            "path": {
+              "required": true,
+              "encode": "path"
+            }
+          }
         }
       }
     ],