@yawlabs/lemonsqueezy-mcp 0.10.6 → 0.10.7

package/CHANGELOG.md

@@ -2,6 +2,16 @@
 
 All notable changes to `@yawlabs/lemonsqueezy-mcp` are documented here. The format follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/) and versioning follows [SEMVER.md](./SEMVER.md).
 
+## [0.10.7] -- 2026-05-16
+
+### Security
+
+- **Allowlist-bypass surface closed at the test layer.** `checkStoreScopedToolInput` in `src/wrapper.ts` enforces `LEMONSQUEEZY_ALLOWED_STORE_IDS` by reading the literal input field name `storeId` from the tool's Zod shape. Today every list tool that filters by store happens to use that name, but the convention wasn't asserted anywhere -- a future tool whose filterMap mapped a differently-named input (e.g. `store`) to `filter[store_id]` would silently bypass the allowlist. `src/api.ts` `listHandler` now exposes its `filterMap` on the returned handler, and `src/tools/tools.test.ts` adds an invariant that fails CI for any drift between the filter key (`store_id`) and the input field name (`storeId`).
+
+### Changed
+
+- **`wrapper.ts` skips the success/error entry literal when no consumer wants it.** A non-destructive read at `LEMONSQUEEZY_LOG` unset (i.e. "off") previously built a full audit entry on every call, then `logEvent` discarded it inside its level check. Now the wrapper consults `wouldLogToolCall({ isDestructive, isError })` -- a new export from `src/logger.ts` -- before allocating. Destructive calls always build the entry because the audit-buffer push is independent of the log level. No observable behavior change; saves a small object literal per non-destructive read on the most common configuration.
+
 ## [0.10.6] -- 2026-05-16
 
 ### Security
@@ -333,7 +343,8 @@ Hardening pass for unattended automation against live billing flows.
 
 Initial release. 59 tools covering all 17 LemonSqueezy API resources.
 
-[Unreleased]: https://github.com/YawLabs/lemonsqueezy-mcp/compare/v0.10.6...HEAD
+[Unreleased]: https://github.com/YawLabs/lemonsqueezy-mcp/compare/v0.10.7...HEAD
+[0.10.7]: https://github.com/YawLabs/lemonsqueezy-mcp/compare/v0.10.6...v0.10.7
 [0.10.6]: https://github.com/YawLabs/lemonsqueezy-mcp/compare/v0.10.5...v0.10.6
 [0.10.5]: https://github.com/YawLabs/lemonsqueezy-mcp/compare/v0.10.4...v0.10.5
 [0.10.4]: https://github.com/YawLabs/lemonsqueezy-mcp/compare/v0.10.3...v0.10.4

package/dist/index.js

@@ -30410,6 +30410,19 @@ function shouldLog(entry, level) {
       return isErrorEntry(entry);
   }
 }
+function wouldLogToolCall(opts) {
+  const level = getLogLevel();
+  switch (level) {
+    case "off":
+      return false;
+    case "all":
+      return true;
+    case "audit":
+      return opts.isDestructive || opts.isError;
+    case "error":
+      return opts.isError;
+  }
+}
 function safeString(value) {
   if (value === void 0) return void 0;
   if (typeof value === "string") return value;
@@ -30886,7 +30899,7 @@ function getHandler(endpoint, idField) {
   };
 }
 function listHandler(endpoint, filterMap = {}) {
-  return async (input) => {
+  const handler = async (input) => {
     const filter = {};
     for (const [inputKey, apiKey] of Object.entries(filterMap)) {
       const val = input[inputKey];
@@ -30899,6 +30912,7 @@ function listHandler(endpoint, filterMap = {}) {
     });
     return apiGet(`${endpoint}${query}`);
   };
+  return Object.assign(handler, { filterMap });
 }
 async function apiGet(path) {
   return apiRequest("GET", path);
@@ -32719,19 +32733,22 @@ function createToolHandler(tool) {
       checkStoreScopedToolInput(toolAsRecord, inputAsRecord);
       const response = await tool.handler(input);
       const latency_ms = Date.now() - start;
-      const successEntry = {
-        event: "tool_call",
-        tool: tool.name,
-        status: response.ok ? "ok" : "error",
-        latency_ms,
-        request_id: response.requestId,
-        error: response.ok ? void 0 : response.error,
-        audit: isDestructive ? true : void 0,
-        inputs: isDestructive ? redactSecrets(input) : void 0
-      };
-      logEvent(successEntry);
-      if (isDestructive) {
-        pushAuditEntry({ ts: (/* @__PURE__ */ new Date()).toISOString(), ...successEntry });
+      const wouldLog = wouldLogToolCall({ isDestructive, isError: !response.ok });
+      if (wouldLog || isDestructive) {
+        const successEntry = {
+          event: "tool_call",
+          tool: tool.name,
+          status: response.ok ? "ok" : "error",
+          latency_ms,
+          request_id: response.requestId,
+          error: response.ok ? void 0 : response.error,
+          audit: isDestructive ? true : void 0,
+          inputs: isDestructive ? redactSecrets(input) : void 0
+        };
+        if (wouldLog) logEvent(successEntry);
+        if (isDestructive) {
+          pushAuditEntry({ ts: (/* @__PURE__ */ new Date()).toISOString(), ...successEntry });
+        }
       }
       if (!response.ok) {
         return {
@@ -32751,18 +32768,21 @@ function createToolHandler(tool) {
     } catch (err) {
       const message = err instanceof Error ? err.message : String(err);
       const latency_ms = Date.now() - start;
-      const errorEntry = {
-        event: "tool_call",
-        tool: tool.name,
-        status: err instanceof GuardrailError ? "guardrail_block" : "exception",
-        latency_ms,
-        error: message,
-        audit: isDestructive ? true : void 0,
-        inputs: isDestructive ? redactSecrets(input) : void 0
-      };
-      logEvent(errorEntry);
-      if (isDestructive) {
-        pushAuditEntry({ ts: (/* @__PURE__ */ new Date()).toISOString(), ...errorEntry });
+      const wouldLog = wouldLogToolCall({ isDestructive, isError: true });
+      if (wouldLog || isDestructive) {
+        const errorEntry = {
+          event: "tool_call",
+          tool: tool.name,
+          status: err instanceof GuardrailError ? "guardrail_block" : "exception",
+          latency_ms,
+          error: message,
+          audit: isDestructive ? true : void 0,
+          inputs: isDestructive ? redactSecrets(input) : void 0
+        };
+        if (wouldLog) logEvent(errorEntry);
+        if (isDestructive) {
+          pushAuditEntry({ ts: (/* @__PURE__ */ new Date()).toISOString(), ...errorEntry });
+        }
       }
       return {
         content: [{ type: "text", text: `Error: ${message}` }],
@@ -32786,7 +32806,7 @@ function readAuditLogResource(uri) {
 }
 
 // src/index.ts
-var version2 = true ? "0.10.6" : (await null).createRequire(import.meta.url)("../package.json").version;
+var version2 = true ? "0.10.7" : (await null).createRequire(import.meta.url)("../package.json").version;
 var subcommand = process.argv[2];
 if (subcommand === "version" || subcommand === "--version") {
   console.log(version2);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@yawlabs/lemonsqueezy-mcp",
-  "version": "0.10.6",
+  "version": "0.10.7",
   "mcpName": "io.github.YawLabs/lemonsqueezy-mcp",
   "description": "LemonSqueezy MCP server for managing your store from AI assistants",
   "license": "MIT",