@usethrottle/mcp 0.4.0 → 0.4.2

package/dist/lib.cjs

@@ -94,6 +94,8 @@ add("Customers", "customers", ["read", "write"], { read: "View customers", write
 add("Customers", "customer_pii", ["read"], { read: "View customer PII" }, { sensitive: true });
 add("Customers", "customer_addresses", ["read", "write"], { read: "View addresses", write: "Manage addresses" });
 add("Customers", "customer_payment_methods", ["read", "write"], { read: "View stored cards", write: "Manage stored cards" }, { sensitive: true });
+add("Customers", "customer_tokens", ["read"], { read: "Check shoppers' sign-in tokens" });
+add("Customers", "customer_directory", ["read"], { read: "Find customers by name or email" }, { sensitive: true });
 add(
   "Customer accounts",
   "customer_accounts",
@@ -226,6 +228,7 @@ var EVENT_SCOPE_OVERRIDES = {
   "subscription.invoice_refunded": "payment_refunds:read",
   "payment.disputed": "payment_disputes:read",
   "payment.dispute_cleared": "payment_disputes:read",
+  "payment.dispute_lost": "payment_disputes:read",
   "fulfillment.digital.delivered": "fulfillment_digital:read"
 };
 var PREFIX_RULES = [
@@ -344,6 +347,29 @@ function redactShopperPii(value) {
   return walk(value, null, 0);
 }
 
+// ../core-scopes/src/public-payment.ts
+var RAW_PROCESSOR_KEYS = ["processorResponse", "gr4vy_payment_method"];
+var RAW = new Set(RAW_PROCESSOR_KEYS);
+function isPlainObject2(value) {
+  if (value === null || typeof value !== "object") return false;
+  const proto = Object.getPrototypeOf(value);
+  return proto === Object.prototype || proto === null;
+}
+function strip(value, depth) {
+  if (depth > 32) return value;
+  if (Array.isArray(value)) return value.map((v) => strip(v, depth + 1));
+  if (!isPlainObject2(value)) return value;
+  const out = {};
+  for (const [key, child] of Object.entries(value)) {
+    if (RAW.has(key)) continue;
+    out[key] = strip(child, depth + 1);
+  }
+  return out;
+}
+function stripRawProcessorData(value) {
+  return strip(value, 0);
+}
+
 // ../action-catalog/src/actions.ts
 var OAUTH_WITHHELD = "Over an OAuth connection (ChatGPT, Claude) these are withheld, because a buyer can type them: line-item and quote-item names, SKUs and reference ids; company; every address line except the country; the merchant's external ids; notes, messages, reasons and metadata. Describe items by quantity and amount, and say the rest is withheld rather than missing.";
 var ACTIONS = [
@@ -1356,7 +1382,7 @@ var ACTIONS = [
   {
     id: "create_customer",
     title: "Create a customer",
-    description: "Create a customer record. Use search_customers first if the buyer may already exist \u2014 this does not de-duplicate by email.",
+    description: "Create a customer record. Email and externalId are each unique per application: a value that already belongs to a customer fails with 409 customer_already_exists rather than returning the existing record, so use search_customers first if the buyer may already exist.",
     kind: "write",
     scopes: ["customers:write"],
     input: [
@@ -1588,6 +1614,29 @@ var ACTIONS = [
     channels: ["mcp", "zapier", "make", "n8n"],
     idempotent: true
   },
+  {
+    id: "set_subscription_payment_method",
+    title: "Change a subscription's card",
+    description: "Set the saved card one subscription renews on. Only that subscription moves; the customer's default card and their other subscriptions stay as they are. Nothing is charged now.",
+    kind: "write",
+    scopes: ["subscriptions:write"],
+    input: [
+      { name: "id", type: "string", required: true, description: "Subscription id." },
+      {
+        name: "paymentMethodId",
+        type: "string",
+        required: true,
+        description: "One of the subscription customer's saved cards (GET /api/v1/customers/:id/payment-methods): active and in date."
+      }
+    ],
+    requests: [{ method: "PATCH", path: "/api/v1/subscriptions/:id/payment-method" }],
+    channels: ["mcp", "zapier", "make", "n8n"],
+    idempotent: true,
+    guardrails: [
+      "Changes which card future renewals charge. Confirm the subscription and the card (brand, last four) with the user first.",
+      "409 payment_method_unusable: the card is not this customer's active, in-date saved card. 409 invalid_state: the subscription is cancelled or completed."
+    ]
+  },
   {
     id: "cancel_subscription",
     title: "Cancel a subscription",
@@ -2426,6 +2475,14 @@ var HANDLERS = {
       idempotencyKey: `mcp-manage-subscription-${id}-${action}-${Date.now()}`
     });
   },
+  set_subscription_payment_method: async (ctx, args) => {
+    const id = String(args.id);
+    return ctx.client.patch(`/api/v1/subscriptions/${id}/payment-method`, {
+      // `id` is the path parameter; the body is `.strict()`.
+      body: { paymentMethodId: args.paymentMethodId },
+      idempotencyKey: `mcp-set-subscription-card-${id}-${String(args.paymentMethodId)}-${Date.now()}`
+    });
+  },
   create_quote: async (ctx, args) => {
     const items = Array.isArray(args.items) ? args.items : [];
     if (args.netN !== void 0 && items.some((item) => item && item.recurring)) {
@@ -2690,6 +2747,7 @@ var DISPLAY_QUALIFIERS = [
   "Payment processing",
   "Disputed",
   "Authorization expired",
+  "Chargeback lost",
   "Returned",
   "Partially returned",
   "Delivered",
@@ -2767,6 +2825,8 @@ var PAYMENT = {
   cardBrand: S,
   disputed: S,
   disputeOpenedAt: S,
+  disputeOutcome: S,
+  disputeClosedAt: S,
   errorCode: S,
   netN: S,
   netNSource: S,
@@ -2829,6 +2889,10 @@ var SUBSCRIPTION = {
   pendingIntervalCount: S,
   scheduleTotal: S,
   nextPaymentAmount: S,
+  // A physical subscription (0236): the method is an enum, and the ship-to is
+  // kept to its country like every other address here.
+  deliveryMethod: S,
+  shippingAddress: ADDRESS,
   paymentSchedule: [{
     index: S,
     amount: S,
@@ -3205,7 +3269,7 @@ var OAUTH_PROJECTIONS = {
 };
 
 // src/server.ts
-var VERSION = true ? "0.4.0" : "0.0.0-dev";
+var VERSION = true ? "0.4.2" : "0.0.0-dev";
 function registerableActions(policy) {
   const isProduction = policy.identity.environment.providerEnvironment === "production";
   return actionsForChannel("mcp").filter((action) => {
@@ -3318,7 +3382,7 @@ function createServer(options) {
               isError: true
             };
           }
-          const result = await handler(ctx, args ?? {});
+          const result = stripRawProcessorData(await handler(ctx, args ?? {}));
           const shown = redactPii ? redactShopperPii(project(result, OAUTH_PROJECTIONS[action.id])) : result;
           return { content: [{ type: "text", text: formatResult(shown) }] };
         } catch (error) {