@unchainedshop/api 4.8.12 → 5.0.0-alpha.2

package/lib/mcp/tools/users/schemas.js

@@ -1,139 +1,220 @@
-import { z } from 'zod/v4-mini';
-import { PaginationSchema, SortingSchema, SearchSchema, createManagementSchemaFromValidators, } from "../../utils/sharedSchemas.js";
+import { z } from 'zod';
+import { PaginationSchema, SortingSchema, SearchSchema, DateRangeSchema, } from "../../utils/sharedSchemas.js";
 export const UserProfileSchema = z.object({
-    displayName: z.optional(z.string()).check(z.describe("User's display name shown in the interface")),
-    birthday: z.optional(z.string()).check(z.describe("User's birthday in ISO date format (YYYY-MM-DD)")),
-    phoneMobile: z.optional(z.string()).check(z.describe("User's mobile phone number")),
+    displayName: z.string().optional().describe("User's display name shown in the interface"),
+    birthday: z.string().optional().describe("User's birthday in ISO date format (YYYY-MM-DD)"),
+    phoneMobile: z.string().optional().describe("User's mobile phone number"),
     address: z
-        .optional(z.object({
-        firstName: z.optional(z.string()).check(z.describe('First name for billing/shipping address')),
-        lastName: z.optional(z.string()).check(z.describe('Last name for billing/shipping address')),
-        addressLine: z.optional(z.string()).check(z.describe('Primary address line (street address)')),
-        addressLine2: z
-            .optional(z.string())
-            .check(z.describe('Secondary address line (apartment, suite, etc.)')),
-        postalCode: z.optional(z.string()).check(z.describe('Postal/ZIP code')),
-        city: z.optional(z.string()).check(z.describe('City name')),
-        regionCode: z.optional(z.string()).check(z.describe('Region/state code (e.g. "CA", "TX")')),
-        countryCode: z
-            .optional(z.string())
-            .check(z.describe('ISO country code (e.g. "US", "DE", "CH")')),
-    }))
-        .check(z.describe("User's address information for billing and shipping")),
+        .object({
+        firstName: z.string().optional().describe('First name for billing/shipping address'),
+        lastName: z.string().optional().describe('Last name for billing/shipping address'),
+        addressLine: z.string().optional().describe('Primary address line (street address)'),
+        addressLine2: z.string().optional().describe('Secondary address line (apartment, suite, etc.)'),
+        postalCode: z.string().optional().describe('Postal/ZIP code'),
+        city: z.string().optional().describe('City name'),
+        regionCode: z.string().optional().describe('Region/state code (e.g. "CA", "TX")'),
+        countryCode: z.string().optional().describe('ISO country code (e.g. "US", "DE", "CH")'),
+    })
+        .optional()
+        .describe("User's address information for billing and shipping"),
 });
 export const actionValidators = {
     LIST: z.object({
         ...PaginationSchema,
         ...SortingSchema,
         ...SearchSchema,
-        includeGuests: z.optional(z.boolean()).check(z.describe('Include guest users in results')),
-        emailVerified: z.optional(z.boolean()).check(z.describe('Filter by email verification status')),
+        includeGuests: z.boolean().optional().describe('Include guest users in results'),
+        emailVerified: z.boolean().optional().describe('Filter by email verification status'),
         lastLogin: z
-            .optional(z.object({
-            start: z.optional(z.string()),
-            end: z.optional(z.string()),
-        }))
-            .check(z.describe('Filter by last login date range')),
+            .object({
+            start: z.string().optional(),
+            end: z.string().optional(),
+        })
+            .optional()
+            .describe('Filter by last login date range'),
     }),
     COUNT: z.object({
         ...SearchSchema,
-        includeGuests: z.optional(z.boolean()).check(z.describe('Include guest users in count')),
-        emailVerified: z.optional(z.boolean()).check(z.describe('Filter by email verification status')),
+        includeGuests: z.boolean().optional().describe('Include guest users in count'),
+        emailVerified: z.boolean().optional().describe('Filter by email verification status'),
         lastLogin: z
-            .optional(z.object({
-            start: z.optional(z.string()),
-            end: z.optional(z.string()),
-        }))
-            .check(z.describe('Filter by last login date range')),
+            .object({
+            start: z.string().optional(),
+            end: z.string().optional(),
+        })
+            .optional()
+            .describe('Filter by last login date range'),
     }),
     GET: z.object({
-        userId: z.string().check(z.describe('User ID to retrieve')),
+        userId: z.string().describe('User ID to retrieve'),
     }),
     CREATE: z.object({
-        username: z.optional(z.string()).check(z.describe('Username for the new user')),
-        email: z.optional(z.string()).check(z.describe('Email address for the new user')),
-        password: z.optional(z.string()).check(z.describe('Password for the new user')),
-        profile: z.optional(UserProfileSchema).check(z.describe('User profile information')),
+        username: z.string().optional().describe('Username for the new user'),
+        email: z.string().optional().describe('Email address for the new user'),
+        password: z.string().optional().describe('Password for the new user'),
+        profile: UserProfileSchema.optional().describe('User profile information'),
     }),
     UPDATE: z.object({
-        userId: z.string().check(z.describe('User ID to update')),
-        profile: z.optional(UserProfileSchema).check(z.describe('Profile updates')),
-        meta: z.optional(z.any()).check(z.describe('Additional metadata')),
+        userId: z.string().describe('User ID to update'),
+        profile: UserProfileSchema.optional().describe('Profile updates'),
+        meta: z.any().optional().describe('Additional metadata'),
     }),
     REMOVE: z.object({
-        userId: z.string().check(z.describe('User ID to remove')),
-        removeUserReviews: z._default(z.boolean(), false).check(z.describe('Also remove user reviews')),
+        userId: z.string().describe('User ID to remove'),
+        removeUserReviews: z.boolean().optional().default(false).describe('Also remove user reviews'),
     }),
     ENROLL: z.object({
-        email: z.string().check(z.describe('Email address for enrollment')),
-        profile: UserProfileSchema.check(z.describe('Profile information for new user')),
+        email: z.string().describe('Email address for enrollment'),
+        profile: UserProfileSchema.describe('Profile information for new user'),
         password: z
-            .optional(z.string())
-            .check(z.describe('Optional password (if not provided, enrollment email sent)')),
+            .string()
+            .optional()
+            .describe('Optional password (if not provided, enrollment email sent)'),
     }),
     SET_TAGS: z.object({
-        userId: z.string().check(z.describe('User ID to update')),
-        tags: z.array(z.string()).check(z.describe('Array of tags to assign')),
+        userId: z.string().describe('User ID to update'),
+        tags: z.array(z.string()).describe('Array of tags to assign'),
     }),
     SET_USERNAME: z.object({
-        userId: z.string().check(z.describe('User ID to update')),
-        username: z.string().check(z.describe('New username to set')),
+        userId: z.string().describe('User ID to update'),
+        username: z.string().describe('New username to set'),
     }),
     ADD_EMAIL: z.object({
-        userId: z.optional(z.string()).check(z.describe('User ID (optional, defaults to current user)')),
-        email: z.string().check(z.describe('Email address to add')),
+        userId: z.string().optional().describe('User ID (optional, defaults to current user)'),
+        email: z.string().describe('Email address to add'),
     }),
     REMOVE_EMAIL: z.object({
-        userId: z.optional(z.string()).check(z.describe('User ID (optional, defaults to current user)')),
-        email: z.string().check(z.describe('Email address to remove')),
+        userId: z.string().optional().describe('User ID (optional, defaults to current user)'),
+        email: z.string().describe('Email address to remove'),
     }),
     SEND_ENROLLMENT_EMAIL: z.object({
-        email: z.string().check(z.describe('Email address to send enrollment to')),
+        email: z.string().describe('Email address to send enrollment to'),
     }),
     SEND_VERIFICATION_EMAIL: z.object({
-        email: z.optional(z.string()).check(z.describe('Email address to verify (optional)')),
+        email: z.string().optional().describe('Email address to verify (optional)'),
     }),
     REMOVE_PRODUCT_REVIEWS: z.object({
-        userId: z.string().check(z.describe('User ID whose reviews to remove')),
+        userId: z.string().describe('User ID whose reviews to remove'),
     }),
     GET_ORDERS: z.object({
-        userId: z.string().check(z.describe('User ID to get orders for')),
+        userId: z.string().describe('User ID to get orders for'),
         ...PaginationSchema,
         ...SortingSchema,
         ...SearchSchema,
-        includeCarts: z._default(z.boolean(), false).check(z.describe('Include cart orders')),
-        status: z.optional(z.array(z.string())).check(z.describe('Filter by order status')),
+        includeCarts: z.boolean().optional().default(false).describe('Include cart orders'),
+        status: z.array(z.string()).optional().describe('Filter by order status'),
     }),
     GET_ENROLLMENTS: z.object({
-        userId: z.string().check(z.describe('User ID to get enrollments for')),
+        userId: z.string().describe('User ID to get enrollments for'),
         ...PaginationSchema,
         ...SortingSchema,
         ...SearchSchema,
-        status: z.optional(z.array(z.string())).check(z.describe('Filter by enrollment status')),
+        status: z.array(z.string()).optional().describe('Filter by enrollment status'),
     }),
     GET_QUOTATIONS: z.object({
-        userId: z.string().check(z.describe('User ID to get quotations for')),
+        userId: z.string().describe('User ID to get quotations for'),
         ...PaginationSchema,
         ...SortingSchema,
         ...SearchSchema,
     }),
     GET_BOOKMARKS: z.object({
-        userId: z.string().check(z.describe('User ID to get bookmarks for')),
+        userId: z.string().describe('User ID to get bookmarks for'),
     }),
     GET_CURRENT_USER: z.object({}),
     GET_PAYMENT_CREDENTIALS: z.object({
-        userId: z.string().check(z.describe('User ID to get payment credentials for')),
+        userId: z.string().describe('User ID to get payment credentials for'),
     }),
     GET_AVATAR: z.object({
-        userId: z.string().check(z.describe('User ID to get avatar for')),
+        userId: z.string().describe('User ID to get avatar for'),
     }),
     GET_REVIEWS: z.object({
-        userId: z.string().check(z.describe('User ID to get reviews for')),
+        userId: z.string().describe('User ID to get reviews for'),
         ...PaginationSchema,
         ...SortingSchema,
     }),
     GET_REVIEWS_COUNT: z.object({
-        userId: z.string().check(z.describe('User ID to count reviews for')),
+        userId: z.string().describe('User ID to count reviews for'),
     }),
 };
-export const UsersManagementSchema = createManagementSchemaFromValidators(actionValidators);
+export const UsersManagementSchema = {
+    action: z
+        .enum([
+        'LIST',
+        'COUNT',
+        'GET',
+        'CREATE',
+        'UPDATE',
+        'REMOVE',
+        'ENROLL',
+        'SET_TAGS',
+        'SET_USERNAME',
+        'ADD_EMAIL',
+        'REMOVE_EMAIL',
+        'SEND_ENROLLMENT_EMAIL',
+        'SEND_VERIFICATION_EMAIL',
+        'REMOVE_PRODUCT_REVIEWS',
+        'GET_ORDERS',
+        'GET_ENROLLMENTS',
+        'GET_QUOTATIONS',
+        'GET_BOOKMARKS',
+        'GET_PAYMENT_CREDENTIALS',
+        'GET_AVATAR',
+        'GET_REVIEWS',
+        'GET_REVIEWS_COUNT',
+        'GET_CURRENT_USER',
+    ])
+        .describe('User management action to perform. LIST: list users with filters and pagination. COUNT: count users matching criteria. GET: retrieve single user by ID. CREATE: create new user account. UPDATE: update user profile/metadata. REMOVE: mark user as deleted. ENROLL: create user and send enrollment email. SET_TAGS: assign tags to user. SET_USERNAME: set user username. ADD_EMAIL/REMOVE_EMAIL: manage user email addresses. SEND_ENROLLMENT_EMAIL/SEND_VERIFICATION_EMAIL: trigger email workflows. REMOVE_PRODUCT_REVIEWS: delete all reviews by user. GET_ORDERS/GET_ENROLLMENTS/GET_QUOTATIONS/GET_BOOKMARKS/GET_PAYMENT_CREDENTIALS/GET_AVATAR/GET_REVIEWS/GET_REVIEWS_COUNT/GET_CURRENT_USER: retrieve user-related data with optional filtering and pagination.'),
+    userId: z
+        .string()
+        .optional()
+        .describe('Required for: GET, UPDATE, REMOVE, SET_TAGS, SET_USERNAME, GET_ORDERS, GET_ENROLLMENTS, GET_QUOTATIONS, GET_BOOKMARKS, GET_PAYMENT_CREDENTIALS, GET_AVATAR, GET_REVIEWS, GET_REVIEWS_COUNT, REMOVE_PRODUCT_REVIEWS. Optional for: ADD_EMAIL, REMOVE_EMAIL (defaults to current user if not provided)'),
+    username: z
+        .string()
+        .optional()
+        .describe('Used for: CREATE (optional username for new user), SET_USERNAME (new username to assign)'),
+    email: z
+        .string()
+        .optional()
+        .describe('Used for: CREATE (optional email for new user), ENROLL (required email for enrollment), ADD_EMAIL/REMOVE_EMAIL (email address to add/remove), SEND_ENROLLMENT_EMAIL/SEND_VERIFICATION_EMAIL (target email address)'),
+    password: z
+        .string()
+        .optional()
+        .describe('Used for: CREATE (optional password for new user), ENROLL (optional password - if not provided, enrollment email is sent)'),
+    profile: UserProfileSchema.optional().describe('Used for: CREATE (optional profile data for new user), UPDATE (profile updates to apply), ENROLL (required profile data for new user including displayName, birthday, phoneMobile, address)'),
+    tags: z
+        .array(z.string())
+        .optional()
+        .describe('Used for: SET_TAGS (array of tag names to assign to user for categorization/filtering)'),
+    removeUserReviews: z
+        .boolean()
+        .optional()
+        .describe('Used for: REMOVE (if true, also delete all product reviews authored by the user when removing the user account)'),
+    ...PaginationSchema,
+    ...SortingSchema,
+    ...SearchSchema,
+    ...DateRangeSchema,
+    includeGuests: z
+        .boolean()
+        .optional()
+        .describe('Used for: LIST, COUNT (if true, include guest/anonymous users in results, default: false)'),
+    emailVerified: z
+        .boolean()
+        .optional()
+        .describe('Used for: LIST, COUNT (filter users by email verification status - true: only verified emails, false: only unverified emails, undefined: all users)'),
+    lastLogin: z
+        .object({
+        start: z.string().optional().describe('ISO date string for earliest last login date'),
+        end: z.string().optional().describe('ISO date string for latest last login date'),
+    })
+        .optional()
+        .describe('Used for: LIST, COUNT (filter users by their last login date range)'),
+    includeCarts: z
+        .boolean()
+        .optional()
+        .describe('Used for: GET_ORDERS (if true, include cart/open orders in results along with completed orders, default: false)'),
+    status: z
+        .array(z.string())
+        .optional()
+        .describe('Used for: GET_ORDERS (filter by order status like ["PENDING", "CONFIRMED"]), GET_ENROLLMENTS (filter by enrollment status like ["ACTIVE", "PAUSED"])'),
+};
+export const UsersManagementZodSchema = z.object(UsersManagementSchema);

package/lib/mcp/tools/users/usersManagement.d.ts

@@ -1,6 +1,6 @@
 import type { Context } from '../../../context.ts';
-import { UsersManagementSchema, type UsersManagementParams } from './schemas.ts';
-export { UsersManagementSchema };
+import { UsersManagementSchema, UsersManagementZodSchema, type UsersManagementParams } from './schemas.ts';
+export { UsersManagementSchema, UsersManagementZodSchema };
 export type { UsersManagementParams };
 export declare function usersManagement(context: Context, params: UsersManagementParams): Promise<{
     content: {

package/lib/mcp/tools/users/usersManagement.js

@@ -1,8 +1,8 @@
 import { log } from '@unchainedshop/logger';
-import { actionValidators, UsersManagementSchema, } from "./schemas.js";
+import { actionValidators, UsersManagementSchema, UsersManagementZodSchema, } from "./schemas.js";
 import actionHandlers from "./handlers/index.js";
 import { createMcpResponse, createMcpErrorResponse } from "../../utils/sharedSchemas.js";
-export { UsersManagementSchema };
+export { UsersManagementSchema, UsersManagementZodSchema };
 export async function usersManagement(context, params) {
     const { action, ...actionParams } = params;
     log('MCP handler usersManagement ', { userId: context.userId, params });

package/lib/mcp/utils/getNormalizedQuotationDetails.d.ts

@@ -24,6 +24,8 @@ export declare function getNormalizedQuotationDetails(quotationId: string, conte
         pushSubscriptions: import("@unchainedshop/core-users").PushSubscriptionObject[];
         username?: string;
         meta?: any;
+        tokenVersion?: number;
+        oidcLogoutAt?: Date;
         created: Date;
         updated?: Date;
     };

package/lib/mcp/utils/getNormalizedUserDetails.d.ts

@@ -35,6 +35,8 @@ export declare function getNormalizedUserDetails(userId: string, context: Contex
     pushSubscriptions: import("@unchainedshop/core-users").PushSubscriptionObject[];
     username?: string;
     meta?: any;
+    tokenVersion?: number;
+    oidcLogoutAt?: Date;
     created: Date;
     updated?: Date;
 } | null>;

package/lib/mcp/utils/normalizeMediaUrl.js

@@ -1,4 +1,4 @@
-import { getFileAdapter } from '@unchainedshop/core-files';
+import { getFileAdapter } from '@unchainedshop/core';
 const normalizeMediaUrl = async (medias = [], context) => {
     if (medias?.length) {
         const normalizedMedias = await Promise.all(medias

package/lib/mcp/utils/sanitizeLocalizationEntityData.d.ts

@@ -1,4 +1,4 @@
-import type { LocalizationType, LocalizationEntity, LocalizationUpdateEntity } from '../tools/localization/types.ts';
+import type { LocalizationType, LocalizationEntity, LocalizationUpdateEntity } from '../tools/localization/schemas.ts';
 declare const sanitizeEntityData: (localizationType: LocalizationType, entity: LocalizationEntity | LocalizationUpdateEntity) => {
     isoCode: string;
     contractAddress?: string;

package/lib/mcp/utils/sharedSchemas.d.ts

@@ -1,33 +1,33 @@
-import { z } from 'zod/v4-mini';
+import { z } from 'zod';
 export declare const PaginationSchema: {
-    limit: z.ZodMiniOptional<z.ZodMiniNumberFormat>;
-    offset: z.ZodMiniOptional<z.ZodMiniNumberFormat>;
+    limit: z.ZodOptional<z.ZodNumber>;
+    offset: z.ZodOptional<z.ZodNumber>;
 };
 export declare const SortingSchema: {
-    sort: z.ZodMiniOptional<z.ZodMiniArray<z.ZodMiniObject<{
-        key: z.ZodMiniString<string>;
-        value: z.ZodMiniEnum<{
+    sort: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        key: z.ZodString;
+        value: z.ZodEnum<{
             [x: string]: string;
         }>;
     }, z.core.$strip>>>;
 };
 export declare const SearchSchema: {
-    queryString: z.ZodMiniOptional<z.ZodMiniString<string>>;
-    includeInactive: z.ZodMiniDefault<z.ZodMiniBoolean<boolean>>;
+    queryString: z.ZodOptional<z.ZodString>;
+    includeInactive: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
 };
-export declare const LocalizationTextSchema: z.ZodMiniObject<{
-    locale: z.ZodMiniString<string>;
-    title: z.ZodMiniString<string>;
-    subtitle: z.ZodMiniOptional<z.ZodMiniString<string>>;
+export declare const LocalizationTextSchema: z.ZodObject<{
+    locale: z.ZodString;
+    title: z.ZodString;
+    subtitle: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>;
 export declare const DateRangeSchema: {
-    from: z.ZodMiniOptional<z.iso.ZodMiniISODateTime>;
-    to: z.ZodMiniOptional<z.iso.ZodMiniISODateTime>;
+    from: z.ZodOptional<z.ZodString>;
+    to: z.ZodOptional<z.ZodString>;
 };
 export declare const OrderFilterSchema: {
-    paymentProviderIds: z.ZodMiniOptional<z.ZodMiniArray<z.ZodMiniString<string>>>;
-    deliveryProviderIds: z.ZodMiniOptional<z.ZodMiniArray<z.ZodMiniString<string>>>;
-    status: z.ZodMiniOptional<z.ZodMiniArray<z.ZodMiniEnum<{
+    paymentProviderIds: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    deliveryProviderIds: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    status: z.ZodOptional<z.ZodArray<z.ZodEnum<{
         DELIVERED: "DELIVERED";
         PENDING: "PENDING";
         CONFIRMED: "CONFIRMED";
@@ -36,36 +36,26 @@ export declare const OrderFilterSchema: {
     }>>>;
 };
 export declare const EntityIdSchema: {
-    id: z.ZodMiniOptional<z.ZodMiniString<string>>;
+    id: z.ZodOptional<z.ZodString>;
 };
 export declare const MediaUrlSchema: {
-    url: z.ZodMiniOptional<z.ZodMiniURL>;
+    url: z.ZodOptional<z.ZodString>;
 };
-export declare function createManagementSchema<T extends readonly string[]>(actions: T, additionalFields?: Record<string, z.core.$ZodType>): {
-    queryString: z.ZodMiniOptional<z.ZodMiniString<string>>;
-    includeInactive: z.ZodMiniDefault<z.ZodMiniBoolean<boolean>>;
-    sort: z.ZodMiniOptional<z.ZodMiniArray<z.ZodMiniObject<{
-        key: z.ZodMiniString<string>;
-        value: z.ZodMiniEnum<{
+export declare function createManagementSchema<T extends readonly string[]>(actions: T, additionalFields?: Record<string, z.ZodType>): {
+    queryString: z.ZodOptional<z.ZodString>;
+    includeInactive: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+    sort: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        key: z.ZodString;
+        value: z.ZodEnum<{
             [x: string]: string;
         }>;
     }, z.core.$strip>>>;
-    limit: z.ZodMiniOptional<z.ZodMiniNumberFormat>;
-    offset: z.ZodMiniOptional<z.ZodMiniNumberFormat>;
-    action: z.ZodMiniEnum<{
+    limit: z.ZodOptional<z.ZodNumber>;
+    offset: z.ZodOptional<z.ZodNumber>;
+    action: z.ZodEnum<{
         [x: string]: any;
     }>;
 };
-export interface ManagementParams {
-    action: string;
-    [key: string]: unknown;
-}
-type ManagementSchemaShape = {
-    action: z.core.$ZodType<string>;
-} & Record<string, z.core.$ZodType>;
-export declare function createManagementSchemaFromValidators(validators: Record<string, {
-    shape: Record<string, z.core.$ZodType>;
-}>): ManagementSchemaShape;
 export declare function createMcpResponse(response: any): {
     content: {
         type: "text";
@@ -78,4 +68,3 @@ export declare function createMcpErrorResponse(action: string, error: Error): {
         text: string;
     }[];
 };
-export {};

package/lib/mcp/utils/sharedSchemas.js

@@ -1,81 +1,62 @@
-import { z } from 'zod/v4-mini';
+import { z } from 'zod';
 import { SortDirection } from '@unchainedshop/utils';
 const sortDirectionKeys = Object.keys(SortDirection);
 export const PaginationSchema = {
-    limit: z
-        .optional(z.int().check(z.gte(1), z.lte(100)))
-        .check(z.describe('Maximum number of results to return')),
-    offset: z
-        .optional(z.int().check(z.gte(0)))
-        .check(z.describe('Number of results to skip for pagination')),
+    limit: z.number().int().min(1).max(100).optional().describe('Maximum number of results to return'),
+    offset: z.number().int().min(0).optional().describe('Number of results to skip for pagination'),
 };
 export const SortingSchema = {
     sort: z
-        .optional(z.array(z.object({
-        key: z.string().check(z.describe('Field to sort by')),
-        value: z.enum(sortDirectionKeys).check(z.describe('Sort direction (ASC/DESC)')),
-    })))
-        .check(z.describe('Array of sort options')),
+        .array(z.object({
+        key: z.string().describe('Field to sort by'),
+        value: z.enum(sortDirectionKeys).describe('Sort direction (ASC/DESC)'),
+    }))
+        .optional()
+        .describe('Array of sort options'),
 };
 export const SearchSchema = {
-    queryString: z.optional(z.string()).check(z.describe('Search query string for text-based filtering')),
+    queryString: z.string().optional().describe('Search query string for text-based filtering'),
     includeInactive: z
-        ._default(z.boolean(), true)
-        .check(z.describe('Whether to include inactive/disabled items')),
+        .boolean()
+        .optional()
+        .default(true)
+        .describe('Whether to include inactive/disabled items'),
 };
 export const LocalizationTextSchema = z.object({
     locale: z
         .string()
-        .check(z.minLength(2), z.describe('Locale code (e.g., "en-US", "de-CH"). Must match an available language from the shop languages resource. If the language does not exist, prompt the user to add it first. NEVER add it automatically unless explicitly specified by the user.')),
-    title: z.string().check(z.minLength(1), z.describe('Localized title')),
-    subtitle: z.optional(z.string()).check(z.describe('Optional localized subtitle')),
+        .min(2)
+        .describe('Locale code (e.g., "en-US", "de-CH"). Must match an available language from the shop languages resource. If the language does not exist, prompt the user to add it first. NEVER add it automatically unless explicitly specified by the user.'),
+    title: z.string().min(1).describe('Localized title'),
+    subtitle: z.string().optional().describe('Optional localized subtitle'),
 });
 export const DateRangeSchema = {
-    from: z.optional(z.iso.datetime()).check(z.describe('Start date in ISO format')),
-    to: z.optional(z.iso.datetime()).check(z.describe('End date in ISO format')),
+    from: z.string().datetime().optional().describe('Start date in ISO format'),
+    to: z.string().datetime().optional().describe('End date in ISO format'),
 };
 export const OrderFilterSchema = {
-    paymentProviderIds: z
-        .optional(z.array(z.string()))
-        .check(z.describe('Filter by payment provider IDs')),
-    deliveryProviderIds: z
-        .optional(z.array(z.string()))
-        .check(z.describe('Filter by delivery provider IDs')),
+    paymentProviderIds: z.array(z.string()).optional().describe('Filter by payment provider IDs'),
+    deliveryProviderIds: z.array(z.string()).optional().describe('Filter by delivery provider IDs'),
     status: z
-        .optional(z.array(z.enum(['PENDING', 'CONFIRMED', 'SHIPPED', 'DELIVERED', 'CANCELLED'])))
-        .check(z.describe('Filter by order statuses')),
+        .array(z.enum(['PENDING', 'CONFIRMED', 'SHIPPED', 'DELIVERED', 'CANCELLED']))
+        .optional()
+        .describe('Filter by order statuses'),
 };
 export const EntityIdSchema = {
-    id: z.optional(z.string().check(z.minLength(1))).check(z.describe('Entity ID')),
+    id: z.string().min(1).optional().describe('Entity ID'),
 };
 export const MediaUrlSchema = {
-    url: z.optional(z.url()).check(z.describe('Media URL')),
+    url: z.string().url().optional().describe('Media URL'),
 };
 export function createManagementSchema(actions, additionalFields = {}) {
     return {
-        action: z.enum(actions).check(z.describe(`Management action: ${actions.join(', ')}`)),
+        action: z.enum(actions).describe(`Management action: ${actions.join(', ')}`),
         ...PaginationSchema,
         ...SortingSchema,
         ...SearchSchema,
         ...additionalFields,
     };
 }
-export function createManagementSchemaFromValidators(validators) {
-    const merged = {};
-    for (const validator of Object.values(validators)) {
-        for (const [key, schema] of Object.entries(validator.shape)) {
-            if (!merged[key]) {
-                merged[key] = z.optional(schema);
-            }
-        }
-    }
-    return {
-        action: z
-            .enum(Object.keys(validators))
-            .check(z.describe('Action to perform')),
-        ...merged,
-    };
-}
 export function createMcpResponse(response) {
     return {
         content: [

package/lib/mcp/utils/validateIsoCode.d.ts

@@ -1,3 +1,3 @@
-import type { LocalizationType } from '../tools/localization/types.ts';
+import type { LocalizationType } from '../tools/localization/schemas.ts';
 declare const validateIsoCode: (localizationType: LocalizationType, isoCode: string) => string;
 export default validateIsoCode;

package/lib/middleware/createAuthMiddleware.js

@@ -65,9 +65,8 @@ export async function createAuthContext(params, authConfig) {
     const fingerprintCookie = getCookie(UNCHAINED_FINGERPRINT_COOKIE_NAME);
     const verifyToken = createAuthHandler(authConfig);
     const authResult = token ? await verifyToken(token) : {};
-    let fingerprintValid = true;
     if (authResult.fingerprintHash && fingerprintCookie) {
-        fingerprintValid = verifyFingerprint(fingerprintCookie, authResult.fingerprintHash);
+        const fingerprintValid = verifyFingerprint(fingerprintCookie, authResult.fingerprintHash);
         if (!fingerprintValid) {
             logger.warn('Token sidejacking detected: fingerprint mismatch', {
                 userId: authResult.userId,
@@ -81,7 +80,6 @@ export async function createAuthContext(params, authConfig) {
         logger.warn('Token sidejacking detected: fingerprint cookie missing', {
             userId: authResult.userId,
         });
-        fingerprintValid = false;
         authResult.userId = undefined;
         authResult.tokenVersion = undefined;
         authResult.impersonatorId = undefined;

package/lib/resolvers/mutations/accounts/changePassword.js

@@ -13,8 +13,7 @@ export default async function changePassword(root, params, { modules, userId })
     catch (e) {
         if (e.cause === 'PASSWORD_INVALID')
             throw new PasswordInvalidError({ userId });
-        else
-            throw e;
+        throw e;
     }
     return { success: true };
 }