@yawlabs/lemonsqueezy-mcp 0.14.2 → 1.0.0

package/dist/index.js

@@ -31561,6 +31561,56 @@ function logEvent(entry) {
   }
 }
 
+// src/redact.ts
+var SECRET_KEY_RE = /^(secret|password|token|api[_-]?key|bearer|authorization|signing[_-]?secret|private[_-]?key|pin|ssn|social[_-]?security[_-]?number|credit[_-]?card|card[_-]?number|cvv|cvc)$/i;
+var JWT_VALUE_RE = /^eyJ[A-Za-z0-9_-]+\.[A-Za-z0-9_-]{4,}\.[A-Za-z0-9_-]{4,}$/;
+var LICENSE_KEY_RE = /^license[_-]?key$/i;
+var MIN_LICENSE_KEY_MASK_LENGTH = 16;
+var REDACTED = "[REDACTED]";
+var CIRCULAR = "[CIRCULAR]";
+function maskLicenseKey(value) {
+  if (typeof value !== "string" || value.length < MIN_LICENSE_KEY_MASK_LENGTH) return REDACTED;
+  return `[REDACTED:last4=${value.slice(-4)}]`;
+}
+var MAX_DEPTH = 32;
+function isPlainObject3(value) {
+  if (value === null || typeof value !== "object") return false;
+  const proto = Object.getPrototypeOf(value);
+  return proto === Object.prototype || proto === null;
+}
+function looksLikeBearerToken(value) {
+  if (typeof value !== "string") return false;
+  if (value.length < 20) return false;
+  return JWT_VALUE_RE.test(value);
+}
+function redactInner(value, ancestors, memo, depth) {
+  if (depth > MAX_DEPTH) return CIRCULAR;
+  if (typeof value === "string" && looksLikeBearerToken(value)) return REDACTED;
+  if (value === null || typeof value !== "object") return value;
+  const isArray = Array.isArray(value);
+  if (!isArray && !isPlainObject3(value)) return value;
+  if (ancestors.has(value)) return CIRCULAR;
+  const cached3 = memo.get(value);
+  if (cached3 !== void 0 && cached3.depth <= depth) return cached3.result;
+  ancestors.add(value);
+  let result;
+  if (isArray) {
+    result = value.map((item) => redactInner(item, ancestors, memo, depth + 1));
+  } else {
+    const out = {};
+    for (const [key, val] of Object.entries(value)) {
+      out[key] = SECRET_KEY_RE.test(key) ? REDACTED : LICENSE_KEY_RE.test(key) ? maskLicenseKey(val) : redactInner(val, ancestors, memo, depth + 1);
+    }
+    result = out;
+  }
+  ancestors.delete(value);
+  memo.set(value, { depth, result });
+  return result;
+}
+function redactSecrets(input) {
+  return redactInner(input, /* @__PURE__ */ new WeakSet(), /* @__PURE__ */ new WeakMap(), 0);
+}
+
 // src/retry.ts
 var REQUEST_TIMEOUT_MS = 3e4;
 var DEFAULT_RETRY_WAIT_MS = 1e3;
@@ -31778,6 +31828,10 @@ function invalidateApiKeyCache() {
 // src/api.ts
 var BASE_URL = "https://api.lemonsqueezy.com/v1";
 var lsIdSchema = external_exports.string().max(1e4).regex(/^[1-9]\d*$/, "ID must be a positive integer string (e.g. '12345')");
+var lsUuidSchema = external_exports.string().max(1e4).regex(
+  /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i,
+  "ID must be a UUID (e.g. '5e8b546c-c561-4a2c-a586-40c18bb2a195')"
+);
 function encodePath(segment) {
   return encodeURIComponent(String(segment));
 }
@@ -31809,30 +31863,17 @@ function decorateError(error51, requestId) {
   return requestId ? `${error51} (request_id: ${requestId})` : error51;
 }
 function extractErrorMessage(parsed) {
-  const first = parsed.errors?.[0];
-  return first?.detail ?? first?.title ?? parsed.error ?? null;
+  if (typeof parsed !== "object" || parsed === null) return null;
+  const envelope = parsed;
+  const first = Array.isArray(envelope.errors) ? envelope.errors[0] : void 0;
+  const str = (v) => typeof v === "string" ? v : void 0;
+  return str(first?.detail) ?? str(first?.title) ?? str(envelope.error) ?? null;
 }
 async function handleErrorResponse(res, route, latency_ms, requestId) {
   const errorBody = await res.text();
+  let parsed;
   try {
-    const parsed = JSON.parse(errorBody);
-    const detail = extractErrorMessage(parsed) ?? errorBody;
-    logEvent({
-      event: "http_call",
-      method: route.method,
-      path: route.path,
-      status: res.status,
-      latency_ms,
-      request_id: requestId,
-      error: detail
-    });
-    return {
-      ok: false,
-      status: res.status,
-      data: parsed,
-      error: decorateError(detail, requestId),
-      requestId
-    };
+    parsed = JSON.parse(errorBody);
   } catch {
     logEvent({
       event: "http_call",
@@ -31850,6 +31891,23 @@ async function handleErrorResponse(res, route, latency_ms, requestId) {
       requestId
     };
   }
+  const detail = extractErrorMessage(parsed) ?? JSON.stringify(redactSecrets(parsed));
+  logEvent({
+    event: "http_call",
+    method: route.method,
+    path: route.path,
+    status: res.status,
+    latency_ms,
+    request_id: requestId,
+    error: detail
+  });
+  return {
+    ok: false,
+    status: res.status,
+    data: parsed,
+    error: decorateError(detail, requestId),
+    requestId
+  };
 }
 async function readJsonBody(res) {
   const bodyText = await res.text();
@@ -32080,7 +32138,9 @@ var checkoutTools = [
       openWorldHint: true
     },
     inputSchema: external_exports.object({
-      checkoutId: lsIdSchema.describe("The checkout ID"),
+      checkoutId: lsUuidSchema.describe(
+        "The checkout ID (a UUID, as returned by ls_list_checkouts / ls_create_checkout)"
+      ),
       include: external_exports.string().max(1e4).optional().describe("Comma-separated related resources to include (e.g. 'store,variant')")
     }),
     handler: getHandler("/checkouts", "checkoutId")
@@ -32248,7 +32308,12 @@ var customerTools = [
     annotations: {
       title: "Update customer",
       readOnlyHint: false,
-      destructiveHint: false,
+      // Static true: MCP defines false as "only additive updates", and every
+      // field here overwrites the existing value (status can archive). The
+      // predicate below still decides per call whether the server-side
+      // destructive limiter and audit log engage (isDestructiveCall in
+      // guardrails.ts never reads this hint when a predicate exists).
+      destructiveHint: true,
       idempotentHint: true,
       openWorldHint: true
     },
@@ -32615,25 +32680,31 @@ var licenseKeyTools = [
   {
     name: "ls_update_license_key",
     authorityClass: "key",
-    description: "Update a license key's activation limit, expiry date, or disabled status. Setting `disabled: true` revokes customer access and is treated as destructive (rate-limited and audited).",
+    description: "Update a license key's activation limit, expiry date, or disabled status. Setting `disabled: true`, changing `activationLimit`, or changing `expiresAt` can revoke customer access and is treated as destructive (rate-limited and audited); `disabled: false` alone is not.",
     annotations: {
       title: "Update license key",
       readOnlyHint: false,
-      destructiveHint: false,
+      // Static true: MCP defines false as "only additive updates", and
+      // several inputs here can revoke access. The predicate below still
+      // decides per call whether the server-side destructive limiter and
+      // audit log engage (isDestructiveCall in guardrails.ts never reads this
+      // hint when a predicate exists).
+      destructiveHint: true,
       idempotentHint: true,
       openWorldHint: true
     },
     // Disabling a license key revokes a customer's access outright. Changing
-    // the activation limit can also revoke access -- setting it to 0, or to
-    // any value below the customer's current activation count, kicks
-    // already-activated instances offline. We can't tell from the input alone
-    // whether a given limit change shrinks or grows, so treat ANY
-    // `activationLimit` change as destructive alongside `disabled: true`.
-    // Benign edits (expiry) stay on the regular path.
-    isDestructive: (input) => input.disabled === true || input.activationLimit !== void 0,
+    // the activation limit or the expiry can also narrow it -- a lower cap on
+    // activations, an earlier end date. We can't tell from the input alone
+    // whether a given change narrows or widens access (a number or a date can
+    // go either way against the current value, which we don't fetch), so
+    // treat ANY `activationLimit` or `expiresAt` change as destructive
+    // alongside `disabled: true`, including null. Only `disabled: false`
+    // (re-enabling) stays on the regular path.
+    isDestructive: (input) => input.disabled === true || input.activationLimit !== void 0 || input.expiresAt !== void 0,
     inputSchema: external_exports.object({
       licenseKeyId: lsIdSchema.describe("The license key ID to update"),
-      activationLimit: external_exports.number().int().min(0).optional().describe("Maximum number of activations allowed (0 = unlimited)"),
+      activationLimit: external_exports.number().int().min(0).nullable().optional().describe("Maximum number of activations allowed. Pass null for unlimited."),
       disabled: external_exports.boolean().optional().describe("Set to true to disable this license key"),
       expiresAt: external_exports.string().max(1e4).nullable().optional().describe("Expiry date (ISO 8601 format). Set to null to remove expiry.")
     }),
@@ -32706,11 +32777,11 @@ var licenseTools = [
   {
     name: "ls_deactivate_license",
     authorityClass: "key",
-    description: "Deactivate a license key instance. Does not require an API key \u2014 uses the license key itself for auth.",
+    description: "Deactivate a license key instance, revoking that instance's access. Destructive: rate-limited and audited, with the license key masked in the audit entry. Does not require an API key \u2014 uses the license key itself for auth.",
     annotations: {
       title: "Deactivate license",
       readOnlyHint: false,
-      destructiveHint: false,
+      destructiveHint: true,
       idempotentHint: true,
       openWorldHint: true
     },
@@ -33569,25 +33640,43 @@ var subscriptionTools = [
   {
     name: "ls_update_subscription",
     authorityClass: "recurring",
-    description: "Update a subscription. Can change the variant (plan switch), pause/unpause, set billing anchor, or update invoice details. Pausing (`pause: 'void'` or `'free'`) or switching plan (`variantId`) is customer-impacting and is treated as destructive (rate-limited and audited); resuming and the billing-neutral edits are not. Use ls_cancel_subscription for cancellation.",
+    description: "Update a subscription. Can change the variant (plan switch), pause/unpause, set billing anchor, or update invoice details. Pausing (`pause: 'void'` or `'free'`), switching plan (`variantId`), changing the billing anchor (`billingAnchor`), invoicing immediately (`invoiceImmediately: true`), or changing the trial end (`trialEndsAt`) changes what the customer pays or when, and is treated as destructive (rate-limited and audited); resuming (`pause: 'resume'`), un-cancelling (`cancelled: false`), `invoiceImmediately: false` and `disableProrations` are not. Use ls_cancel_subscription for cancellation.",
     annotations: {
       title: "Update subscription",
       readOnlyHint: false,
-      destructiveHint: false,
+      // Static true: MCP defines false as "only additive updates", and
+      // several inputs here pause, re-plan or re-bill the customer. The
+      // predicate below still decides per call whether the server-side
+      // destructive limiter and audit log engage (isDestructiveCall in
+      // guardrails.ts never reads this hint when a predicate exists).
+      destructiveHint: true,
       idempotentHint: true,
       openWorldHint: true
     },
-    // A pause (void/free) or plan switch is the customer-impacting subset of
-    // this tool's surface; treat those calls as destructive so they engage
-    // the rate limiter and audit log. Intentional exclusions, all of which
-    // either reverse a destructive action or are billing-neutral:
-    //   - pause === "resume"        un-pause, restoring access
-    //   - cancelled === false       un-cancel before expiry, restoring access
-    //   - billingAnchor             changes anchor day, no immediate charge
-    //   - trialEndsAt               extending or ending a trial
-    //   - invoiceImmediately        toggle on the next prorated edit
-    //   - disableProrations         toggle on plan-change behavior
-    isDestructive: (input) => typeof input.pause === "string" && input.pause !== "resume" || typeof input.variantId === "string",
+    // The calls that change what the customer pays, or when, are destructive
+    // so they engage the rate limiter and audit log:
+    //   - pause "void" / "free"     pauses the subscription
+    //   - variantId                 plan switch
+    //   - billingAnchor             per LemonSqueezy's update-subscription docs,
+    //                               a new anchor issues a paid, prorated trial
+    //                               that is charged when it ends
+    //   - invoiceImmediately: true  per the same docs, the update is charged
+    //                               now: a prorated invoice is generated and
+    //                               payment attempted
+    //   - trialEndsAt (any value)   ending or shortening a trial brings the
+    //                               first charge forward; extending it does
+    //                               not, but telling which needs a fetch, so
+    //                               any change (null included) counts
+    // Intentional exclusions:
+    //   - pause === "resume"        un-pause
+    //   - cancelled === false       un-cancel before expiry
+    //     These two are a consistent pair: each reverses a destructive action
+    //     and returns the customer to billing they had already agreed to, so
+    //     they are treated alike.
+    //   - invoiceImmediately: false the default proration behaviour
+    //   - disableProrations         toggle on plan-change behavior; the plan
+    //                               change itself (variantId) already counts
+    isDestructive: (input) => typeof input.pause === "string" && input.pause !== "resume" || typeof input.variantId === "string" || input.billingAnchor !== void 0 || input.invoiceImmediately === true || input.trialEndsAt !== void 0,
     inputSchema: external_exports.object({
       subscriptionId: lsIdSchema.describe("The subscription ID to update"),
       variantId: lsIdSchema.optional().describe("New variant ID for plan switching"),
@@ -33685,7 +33774,12 @@ var usageRecordTools = [
   },
   {
     name: "ls_create_usage_record",
-    authorityClass: "mutate",
+    // `recurring`, not `mutate`: a usage record changes the metered bill on a
+    // subscription item, the same authority as ls_update_subscription_item's
+    // quantity change. So LEMONSQUEEZY_DISABLE_CLASSES=recurring blocks it,
+    // and a `recurring:N` budget in LEMONSQUEEZY_RATE_LIMIT_PER_CLASS counts
+    // usage reports alongside subscription changes.
+    authorityClass: "recurring",
     description: "Report usage for a metered subscription item. Use 'increment' action to add to the current usage, or 'set' to replace it.",
     annotations: {
       title: "Create usage record",
@@ -33865,14 +33959,22 @@ var webhookTools = [
     annotations: {
       title: "Update webhook",
       readOnlyHint: false,
-      destructiveHint: false,
+      // Static true: MCP defines false as "only additive updates", and every
+      // field here overwrites the existing value. The predicate below still
+      // decides per call whether the server-side destructive limiter and
+      // audit log engage (isDestructiveCall in guardrails.ts never reads this
+      // hint when a predicate exists).
+      destructiveHint: true,
       idempotentHint: true,
       openWorldHint: true
     },
-    // Rotating the signing secret silently breaks signature verification on
-    // every receiver until they redeploy with the new value. URL and events
-    // changes are observable on the next event but don't break anything in
-    // flight, so they stay on the regular path.
+    // Rotating the signing secret breaks signature verification on every
+    // receiver until they redeploy with the new value, and the agent cannot
+    // undo it: the secret is returned only once (see ls_create_webhook), so
+    // the old value cannot be read back and restored. URL and events
+    // changes can be undone -- ls_get_webhook returns the current URL and
+    // events, and a PATCH puts them back -- so they stay on the regular path.
+    // The `secret` input reaches the audit log redacted by key name.
     isDestructive: (input) => input.secret !== void 0,
     inputSchema: external_exports.object({
       webhookId: lsIdSchema.describe("The webhook ID to update"),
@@ -33941,50 +34043,6 @@ function readAuditEntries(limit) {
   return out;
 }
 
-// src/redact.ts
-var SECRET_KEY_RE = /^(secret|password|token|api[_-]?key|bearer|authorization|signing[_-]?secret|private[_-]?key|pin|ssn|social[_-]?security[_-]?number|credit[_-]?card|card[_-]?number|cvv|cvc)$/i;
-var JWT_VALUE_RE = /^eyJ[A-Za-z0-9_-]+\.[A-Za-z0-9_-]{4,}\.[A-Za-z0-9_-]{4,}$/;
-var REDACTED = "[REDACTED]";
-var CIRCULAR = "[CIRCULAR]";
-var MAX_DEPTH = 32;
-function isPlainObject3(value) {
-  if (value === null || typeof value !== "object") return false;
-  const proto = Object.getPrototypeOf(value);
-  return proto === Object.prototype || proto === null;
-}
-function looksLikeBearerToken(value) {
-  if (typeof value !== "string") return false;
-  if (value.length < 20) return false;
-  return JWT_VALUE_RE.test(value);
-}
-function redactInner(value, ancestors, memo, depth) {
-  if (depth > MAX_DEPTH) return CIRCULAR;
-  if (typeof value === "string" && looksLikeBearerToken(value)) return REDACTED;
-  if (value === null || typeof value !== "object") return value;
-  const isArray = Array.isArray(value);
-  if (!isArray && !isPlainObject3(value)) return value;
-  if (ancestors.has(value)) return CIRCULAR;
-  const cached3 = memo.get(value);
-  if (cached3 !== void 0 && cached3.depth <= depth) return cached3.result;
-  ancestors.add(value);
-  let result;
-  if (isArray) {
-    result = value.map((item) => redactInner(item, ancestors, memo, depth + 1));
-  } else {
-    const out = {};
-    for (const [key, val] of Object.entries(value)) {
-      out[key] = SECRET_KEY_RE.test(key) ? REDACTED : redactInner(val, ancestors, memo, depth + 1);
-    }
-    result = out;
-  }
-  ancestors.delete(value);
-  memo.set(value, { depth, result });
-  return result;
-}
-function redactSecrets(input) {
-  return redactInner(input, /* @__PURE__ */ new WeakSet(), /* @__PURE__ */ new WeakMap(), 0);
-}
-
 // src/wrapper.ts
 function createToolHandler(tool) {
   return async (input) => {
@@ -34102,7 +34160,7 @@ function readAuditLogResource(uri) {
 }
 
 // src/index.ts
-var version2 = true ? "0.14.2" : createRequire(import.meta.url)("../package.json").version;
+var version2 = true ? "1.0.0" : createRequire(import.meta.url)("../package.json").version;
 var subcommand = process.argv[2];
 if (subcommand === "version" || subcommand === "--version") {
   console.log(version2);

package/package.json

@@ -1,77 +1,77 @@
-{
-  "name": "@yawlabs/lemonsqueezy-mcp",
-  "version": "0.14.2",
-  "mcpName": "io.github.YawLabs/lemonsqueezy-mcp",
-  "description": "Lemon Squeezy MCP server: stores, orders, subscriptions, license keys, refunds, and webhooks.",
-  "license": "MIT",
-  "author": "YawLabs <contact@yaw.sh>",
-  "repository": {
-    "type": "git",
-    "url": "git+https://github.com/YawLabs/lemonsqueezy-mcp.git"
-  },
-  "bugs": {
-    "url": "https://github.com/YawLabs/lemonsqueezy-mcp/issues"
-  },
-  "keywords": [
-    "lemonsqueezy",
-    "lemon-squeezy",
-    "mcp",
-    "mcp-server",
-    "model-context-protocol",
-    "ai",
-    "agent",
-    "claude",
-    "claude-code",
-    "claude-desktop",
-    "payments",
-    "subscriptions",
-    "refunds",
-    "license-keys",
-    "licensing",
-    "checkout",
-    "webhooks",
-    "billing",
-    "cursor",
-    "ai-agents"
-  ],
-  "type": "module",
-  "main": "dist/index.js",
-  "bin": {
-    "lemonsqueezy-mcp": "bin/lemonsqueezy-mcp.mjs"
-  },
-  "files": [
-    "bin/lemonsqueezy-mcp.mjs",
-    "dist/index.js",
-    "CHANGELOG.md"
-  ],
-  "scripts": {
-    "build": "tsc && node build.mjs",
-    "dev": "tsc --watch",
-    "start": "node dist/index.js",
-    "test": "npm run build && node --test-timeout=300000 --test \"dist/**/*.test.js\"",
-    "test:integration": "npm run build && node --test-timeout=300000 --test dist/integration/*.test.js",
-    "lint": "node scripts/lint.mjs check src/",
-    "lint:fix": "node scripts/lint.mjs check --write src/",
-    "check:oam": "oam check",
-    "build:binary:oam": "node scripts/build-binary.mjs --oam",
-    "gen:containerfile": "node scripts/sync-containerfile.mjs",
-    "check:containerfile": "node scripts/sync-containerfile.mjs --check",
-    "prepublishOnly": "npm run build"
-  },
-  "overrides": {
-    "hono": "^4.13.5"
-  },
-  "devDependencies": {
-    "@biomejs/biome": "^2.4.12",
-    "@modelcontextprotocol/sdk": "^1.30.0",
-    "@types/node": "^26.1.1",
-    "esbuild": "^0.28.1",
-    "postject": "^1.0.0-alpha.6",
-    "typescript": "^7.0.2",
-    "zod": "^4.3.6"
-  },
-  "engines": {
-    "node": ">=22"
-  },
-  "homepage": "https://yaw.sh/mcp-servers/lemonsqueezy-mcp/"
-}
+{
+  "name": "@yawlabs/lemonsqueezy-mcp",
+  "version": "1.0.0",
+  "mcpName": "io.github.YawLabs/lemonsqueezy-mcp",
+  "description": "Lemon Squeezy MCP server: stores, orders, subscriptions, license keys, refunds, and webhooks.",
+  "license": "MIT",
+  "author": "YawLabs <contact@yaw.sh>",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/YawLabs/lemonsqueezy-mcp.git"
+  },
+  "bugs": {
+    "url": "https://github.com/YawLabs/lemonsqueezy-mcp/issues"
+  },
+  "keywords": [
+    "lemonsqueezy",
+    "lemon-squeezy",
+    "mcp",
+    "mcp-server",
+    "model-context-protocol",
+    "ai",
+    "agent",
+    "claude",
+    "claude-code",
+    "claude-desktop",
+    "payments",
+    "subscriptions",
+    "refunds",
+    "license-keys",
+    "licensing",
+    "checkout",
+    "webhooks",
+    "billing",
+    "cursor",
+    "ai-agents"
+  ],
+  "type": "module",
+  "main": "dist/index.js",
+  "bin": {
+    "lemonsqueezy-mcp": "bin/lemonsqueezy-mcp.mjs"
+  },
+  "files": [
+    "bin/lemonsqueezy-mcp.mjs",
+    "dist/index.js",
+    "CHANGELOG.md"
+  ],
+  "scripts": {
+    "build": "tsc && node build.mjs",
+    "dev": "tsc --watch",
+    "start": "node dist/index.js",
+    "test": "npm run build && node --test-timeout=300000 --test \"dist/**/*.test.js\"",
+    "test:integration": "node scripts/require-integration-env.mjs && npm run build && node --test-timeout=300000 --test dist/integration/*.test.js",
+    "lint": "node scripts/lint.mjs check src/",
+    "lint:fix": "node scripts/lint.mjs check --write src/",
+    "check:oam": "oam check",
+    "build:binary:oam": "node scripts/build-binary.mjs --oam",
+    "gen:containerfile": "node scripts/sync-containerfile.mjs",
+    "check:containerfile": "node scripts/sync-containerfile.mjs --check",
+    "prepublishOnly": "npm run build"
+  },
+  "overrides": {
+    "hono": "^4.13.5"
+  },
+  "devDependencies": {
+    "@biomejs/biome": "^2.4.12",
+    "@modelcontextprotocol/sdk": "^1.30.0",
+    "@types/node": "^26.1.1",
+    "esbuild": "^0.28.1",
+    "postject": "^1.0.0-alpha.6",
+    "typescript": "^7.0.2",
+    "zod": "^4.3.6"
+  },
+  "engines": {
+    "node": ">=22"
+  },
+  "homepage": "https://yaw.sh/mcp-servers/lemonsqueezy-mcp/"
+}