@yawlabs/lemonsqueezy-mcp 0.4.1 → 0.6.0

package/README.md

@@ -54,7 +54,7 @@ Add to `claude_desktop_config.json`:
 }
 ```
 
-## Tools (59)
+## Tools (61)
 
 ### Users
 - `ls_get_user` — Get the authenticated user
@@ -157,7 +157,7 @@ Add to `claude_desktop_config.json`:
 
 ## Features
 
-- **Full API coverage** — All 17 LemonSqueezy API resources with 59 tools
+- **Full API coverage** — All 17 LemonSqueezy API resources with 61 tools
 - **JSON:API support** — Filtering, pagination, and relationship inclusion on all list/get operations
 - **Zero runtime dependencies** — Single bundled file for instant `npx` startup
 - **License API** — Activate, validate, and deactivate license keys without an API key
@@ -174,9 +174,9 @@ All configuration is via environment variables. Only `LEMONSQUEEZY_API_KEY` (or
 | --- | --- |
 | `LEMONSQUEEZY_API_KEY` | LemonSqueezy API token. |
 | `LEMONSQUEEZY_API_KEY_COMMAND` | Command whose stdout produces the API key. Overrides `LEMONSQUEEZY_API_KEY`. Output is cached for 1 hour. Use this to pull short-lived credentials from a vault (`op read`, `gcloud secrets versions access`, etc.) without writing them to env vars. |
-| `LEMONSQUEEZY_ALLOWED_STORE_IDS` | Comma-separated allowlist of store IDs. When set, tools that receive a `storeId` input reject calls to any other store. Note: operations that don't take an explicit `storeId` (e.g. `ls_refund_order`) are not gated by this — pair with `LEMONSQUEEZY_MAX_REFUND_AMOUNT_CENTS`. |
-| `LEMONSQUEEZY_MAX_REFUND_AMOUNT_CENTS` | Rejects `ls_refund_order` calls above this amount. |
-| `LEMONSQUEEZY_DESTRUCTIVE_RATE_LIMIT` | Max destructive tool calls per 60-second rolling window. In-process limit — per MCP server instance, not global. |
+| `LEMONSQUEEZY_ALLOWED_STORE_IDS` | Comma-separated allowlist of store IDs. When set: (1) any tool whose input includes a `storeId` rejects calls to a non-allowed store; (2) tools that *accept* a `storeId` filter (e.g. `ls_list_orders`, `ls_list_subscriptions`) require it — calls without one are blocked so a missing filter cannot return data from every store the API key can see. Tools with no `storeId` field at all (e.g. `ls_refund_order`, `ls_list_stores`) are not gated by this — pair with `LEMONSQUEEZY_MAX_REFUND_AMOUNT_CENTS` and `LEMONSQUEEZY_DESTRUCTIVE_RATE_LIMIT`. |
+| `LEMONSQUEEZY_MAX_REFUND_AMOUNT_CENTS` | Rejects `ls_refund_order` and `ls_refund_subscription_invoice` calls above this amount. |
+| `LEMONSQUEEZY_DESTRUCTIVE_RATE_LIMIT` | Max destructive tool calls per 60-second rolling window. In-process limit — per MCP server instance, not global; each `npx` cold start resets the window. Counts include `ls_update_license_key` calls that set `disabled: true`. |
 | `LEMONSQUEEZY_LOG=json` | Emit one JSON log line to stderr per tool and HTTP call. Destructive calls are tagged `audit: true` and include their inputs. |
 
 ### Logging format
@@ -214,6 +214,23 @@ npm test                  # full unit + handler suite
 npm run test:integration  # requires LEMONSQUEEZY_TEST_API_KEY + LEMONSQUEEZY_TEST_STORE_ID
 ```
 
+## Releasing
+
+Releases are cut locally — there is no CI pipeline. From a clean checkout of `main`:
+
+```bash
+./release.sh 0.6.0
+```
+
+The script lints, tests, builds, bumps the version, commits and tags, pushes to `origin`, publishes to npm, and creates a GitHub release. Each step is idempotent — re-running with the same version after a partial failure resumes from where it stopped.
+
+One-time setup on the release machine:
+
+```bash
+npm login --auth-type=web   # publisher of @yawlabs/lemonsqueezy-mcp
+gh auth login               # GitHub CLI for the release-creation step
+```
+
 ## License
 
 MIT

package/dist/index.js

@@ -21073,6 +21073,24 @@ function checkDestructiveRateLimit(now = Date.now()) {
   }
   destructiveTimestamps.push(now);
 }
+function isStoreAllowlistActive() {
+  return loadOptions().allowedStoreIds !== null;
+}
+function checkStoreScopedToolInput(toolAcceptsStoreId, input) {
+  if (!toolAcceptsStoreId) return;
+  const raw = input.storeId;
+  if (raw !== void 0 && raw !== null && raw !== "") {
+    checkStoreAllowed(String(raw));
+    return;
+  }
+  if (isStoreAllowlistActive()) {
+    throw new GuardrailError("storeId is required when LEMONSQUEEZY_ALLOWED_STORE_IDS is set");
+  }
+}
+function isDestructiveCall(tool, input) {
+  if (typeof tool.isDestructive === "function") return tool.isDestructive(input);
+  return tool.annotations?.destructiveHint === true;
+}
 
 // src/logger.ts
 function isEnabled() {
@@ -21083,6 +21101,25 @@ function logEvent(entry) {
   try {
     const line = JSON.stringify({ ts: (/* @__PURE__ */ new Date()).toISOString(), ...entry });
     process.stderr.write(`${line}
+`);
+    return;
+  } catch {
+  }
+  try {
+    const fallback = JSON.stringify({
+      ts: (/* @__PURE__ */ new Date()).toISOString(),
+      event: entry.event,
+      tool: entry.tool,
+      method: entry.method,
+      path: entry.path,
+      status: entry.status,
+      latency_ms: entry.latency_ms,
+      request_id: entry.request_id,
+      audit: entry.audit,
+      error: entry.error,
+      log_error: "inputs_not_serializable"
+    });
+    process.stderr.write(`${fallback}
 `);
   } catch {
   }
@@ -21223,6 +21260,9 @@ async function loadApiKey() {
 
 // src/api.ts
 var BASE_URL = "https://api.lemonsqueezy.com/v1";
+function encodePath(segment) {
+  return encodeURIComponent(String(segment));
+}
 function buildQuery(params) {
   if (!params) return "";
   const parts = [];
@@ -21421,7 +21461,7 @@ async function licenseRequest(path, body) {
 function getHandler(endpoint, idField) {
   return async (input) => {
     const query = buildQuery({ include: input.include?.split(",") });
-    return apiGet(`${endpoint}/${input[idField]}${query}`);
+    return apiGet(`${endpoint}/${encodePath(input[idField])}${query}`);
   };
 }
 function listHandler(endpoint, filterMap = {}) {
@@ -21548,7 +21588,7 @@ var checkoutTools = [
       billingAddressZip: external_exports.string().max(1e4).optional().describe("Prefill billing ZIP/postal code"),
       taxNumber: external_exports.string().max(1e4).optional().describe("Prefill tax/VAT number"),
       discountCode: external_exports.string().max(1e4).optional().describe("Pre-apply a discount code"),
-      customData: external_exports.record(external_exports.unknown()).optional().describe("Custom data object to attach to the order"),
+      customData: external_exports.record(external_exports.string(), external_exports.unknown()).optional().describe("Custom data object to attach to the order"),
       expiresAt: external_exports.string().max(1e4).optional().describe("Checkout expiry date (ISO 8601 format)")
     }),
     handler: async (input) => {
@@ -21559,13 +21599,11 @@ var checkoutTools = [
       const checkoutData = {};
       if (input.email !== void 0) checkoutData.email = input.email;
       if (input.name !== void 0) checkoutData.name = input.name;
-      if (input.billingAddressCountry !== void 0)
-        checkoutData.billing_address = { country: input.billingAddressCountry };
-      if (input.billingAddressZip !== void 0) {
-        checkoutData.billing_address = {
-          ...checkoutData.billing_address || {},
-          zip: input.billingAddressZip
-        };
+      if (input.billingAddressCountry !== void 0 || input.billingAddressZip !== void 0) {
+        const billingAddress = {};
+        if (input.billingAddressCountry !== void 0) billingAddress.country = input.billingAddressCountry;
+        if (input.billingAddressZip !== void 0) billingAddress.zip = input.billingAddressZip;
+        checkoutData.billing_address = billingAddress;
       }
       if (input.taxNumber !== void 0) checkoutData.tax_number = input.taxNumber;
       if (input.discountCode !== void 0) checkoutData.discount_code = input.discountCode;
@@ -21617,7 +21655,7 @@ var customerTools = [
     },
     inputSchema: external_exports.object({
       storeId: external_exports.string().max(1e4).optional().describe("Filter by store ID"),
-      email: external_exports.string().max(1e4).optional().describe("Filter by customer email"),
+      email: external_exports.string().email().max(320).optional().describe("Filter by customer email"),
       include: external_exports.string().max(1e4).optional().describe("Comma-separated related resources to include (e.g. 'store,orders,subscriptions,license-keys')"),
       pageNumber: external_exports.number().int().min(1).optional().describe("Page number (1-indexed)"),
       pageSize: external_exports.number().int().min(1).max(100).optional().describe("Results per page (1-100)")
@@ -21637,7 +21675,7 @@ var customerTools = [
     inputSchema: external_exports.object({
       storeId: external_exports.string().max(1e4).describe("The store ID to create the customer in"),
       name: external_exports.string().max(1e4).describe("Customer's full name"),
-      email: external_exports.string().max(1e4).describe("Customer's email address"),
+      email: external_exports.string().email().max(320).describe("Customer's email address"),
       city: external_exports.string().max(1e4).optional().describe("Customer's city"),
       region: external_exports.string().max(1e4).optional().describe("Customer's region/state"),
       country: external_exports.string().max(1e4).optional().describe("Customer's country (ISO 3166-1 alpha-2 code, e.g. 'US')")
@@ -21674,7 +21712,7 @@ var customerTools = [
     inputSchema: external_exports.object({
       customerId: external_exports.string().max(1e4).describe("The customer ID to update"),
       name: external_exports.string().max(1e4).optional().describe("New name"),
-      email: external_exports.string().max(1e4).optional().describe("New email"),
+      email: external_exports.string().email().max(320).optional().describe("New email"),
       city: external_exports.string().max(1e4).optional().describe("New city"),
       region: external_exports.string().max(1e4).optional().describe("New region/state"),
       country: external_exports.string().max(1e4).optional().describe("New country (ISO 3166-1 alpha-2 code)"),
@@ -21688,7 +21726,7 @@ var customerTools = [
       if (input.region !== void 0) attributes.region = input.region;
       if (input.country !== void 0) attributes.country = input.country;
       if (input.status !== void 0) attributes.status = input.status;
-      return apiPatch(`/customers/${input.customerId}`, {
+      return apiPatch(`/customers/${encodePath(input.customerId)}`, {
         data: {
           type: "customers",
           id: input.customerId,
@@ -21711,7 +21749,7 @@ var customerTools = [
       customerId: external_exports.string().max(1e4).describe("The customer ID to archive")
     }),
     handler: async (input) => {
-      return apiPatch(`/customers/${input.customerId}`, {
+      return apiPatch(`/customers/${encodePath(input.customerId)}`, {
         data: {
           type: "customers",
           id: input.customerId,
@@ -21869,7 +21907,7 @@ var discountTools = [
       discountId: external_exports.string().max(1e4).describe("The discount ID to delete")
     }),
     handler: async (input) => {
-      return apiDelete(`/discounts/${input.discountId}`);
+      return apiDelete(`/discounts/${encodePath(input.discountId)}`);
     }
   }
 ];
@@ -22000,7 +22038,7 @@ var licenseKeyTools = [
   },
   {
     name: "ls_update_license_key",
-    description: "Update a license key's activation limit, expiry date, or disabled status.",
+    description: "Update a license key's activation limit, expiry date, or disabled status. Setting `disabled: true` revokes customer access and is treated as destructive (rate-limited and audited).",
     annotations: {
       title: "Update license key",
       readOnlyHint: false,
@@ -22008,6 +22046,11 @@ var licenseKeyTools = [
       idempotentHint: true,
       openWorldHint: true
     },
+    // Disabling a license key revokes a customer's access. Tag the call as
+    // destructive only when `disabled: true` so the rate limiter and audit log
+    // engage on revocation, while benign edits (expiry, activation limit) stay
+    // on the regular path.
+    isDestructive: (input) => input.disabled === true,
     inputSchema: external_exports.object({
       licenseKeyId: external_exports.string().max(1e4).describe("The license key ID to update"),
       activationLimit: external_exports.number().int().min(0).optional().describe("Maximum number of activations allowed (0 = unlimited)"),
@@ -22019,7 +22062,7 @@ var licenseKeyTools = [
       if (input.activationLimit !== void 0) attributes.activation_limit = input.activationLimit;
       if (input.disabled !== void 0) attributes.disabled = input.disabled;
       if (input.expiresAt !== void 0) attributes.expires_at = input.expiresAt;
-      return apiPatch(`/license-keys/${input.licenseKeyId}`, {
+      return apiPatch(`/license-keys/${encodePath(input.licenseKeyId)}`, {
         data: {
           type: "license-keys",
           id: input.licenseKeyId,
@@ -22168,7 +22211,7 @@ var orderTools = [
     },
     inputSchema: external_exports.object({
       storeId: external_exports.string().max(1e4).optional().describe("Filter by store ID"),
-      userEmail: external_exports.string().max(1e4).optional().describe("Filter by user email"),
+      userEmail: external_exports.string().email().max(320).optional().describe("Filter by user email"),
       include: external_exports.string().max(1e4).optional().describe(
         "Comma-separated related resources to include (e.g. 'store,customer,order-items,subscriptions,license-keys,discount-redemptions')"
       ),
@@ -22209,7 +22252,7 @@ var orderTools = [
       if (input.notes !== void 0) params.set("notes", input.notes);
       if (input.locale !== void 0) params.set("locale", input.locale);
       const qs = params.toString();
-      return apiPost(`/orders/${input.orderId}/generate-invoice${qs ? `?${qs}` : ""}`);
+      return apiPost(`/orders/${encodePath(input.orderId)}/generate-invoice${qs ? `?${qs}` : ""}`);
     }
   },
   {
@@ -22228,7 +22271,7 @@ var orderTools = [
     }),
     handler: async (input) => {
       checkRefundAmount(input.amount);
-      return apiPost(`/orders/${input.orderId}/refund`, {
+      return apiPost(`/orders/${encodePath(input.orderId)}/refund`, {
         data: { type: "orders", id: input.orderId, attributes: { amount: input.amount } }
       });
     }
@@ -22428,7 +22471,9 @@ var subscriptionInvoiceTools = [
       if (input.notes !== void 0) params.set("notes", input.notes);
       if (input.locale !== void 0) params.set("locale", input.locale);
       const qs = params.toString();
-      return apiPost(`/subscription-invoices/${input.subscriptionInvoiceId}/generate-invoice${qs ? `?${qs}` : ""}`);
+      return apiPost(
+        `/subscription-invoices/${encodePath(input.subscriptionInvoiceId)}/generate-invoice${qs ? `?${qs}` : ""}`
+      );
     }
   },
   {
@@ -22446,7 +22491,8 @@ var subscriptionInvoiceTools = [
       amount: external_exports.number().int().min(1).describe("Refund amount in cents (e.g. 1000 = $10.00)")
     }),
     handler: async (input) => {
-      return apiPost(`/subscription-invoices/${input.subscriptionInvoiceId}/refund`, {
+      checkRefundAmount(input.amount);
+      return apiPost(`/subscription-invoices/${encodePath(input.subscriptionInvoiceId)}/refund`, {
         data: {
           type: "subscription-invoices",
           id: input.subscriptionInvoiceId,
@@ -22509,7 +22555,7 @@ var subscriptionItemTools = [
       quantity: external_exports.number().int().min(1).describe("New quantity for the subscription item")
     }),
     handler: async (input) => {
-      return apiPatch(`/subscription-items/${input.subscriptionItemId}`, {
+      return apiPatch(`/subscription-items/${encodePath(input.subscriptionItemId)}`, {
         data: {
           type: "subscription-items",
           id: input.subscriptionItemId,
@@ -22532,7 +22578,7 @@ var subscriptionItemTools = [
       subscriptionItemId: external_exports.string().max(1e4).describe("The subscription item ID")
     }),
     handler: async (input) => {
-      return apiGet(`/subscription-items/${input.subscriptionItemId}/current-usage`);
+      return apiGet(`/subscription-items/${encodePath(input.subscriptionItemId)}/current-usage`);
     }
   }
 ];
@@ -22573,7 +22619,7 @@ var subscriptionTools = [
       orderItemId: external_exports.string().max(1e4).optional().describe("Filter by order item ID"),
       productId: external_exports.string().max(1e4).optional().describe("Filter by product ID"),
       variantId: external_exports.string().max(1e4).optional().describe("Filter by variant ID"),
-      userEmail: external_exports.string().max(1e4).optional().describe("Filter by user email"),
+      userEmail: external_exports.string().email().max(320).optional().describe("Filter by user email"),
       status: external_exports.enum(["on_trial", "active", "paused", "past_due", "unpaid", "cancelled", "expired"]).optional().describe("Filter by subscription status"),
       include: external_exports.string().max(1e4).optional().describe(
         "Comma-separated related resources to include (e.g. 'store,customer,order,order-item,product,variant')"
@@ -22603,7 +22649,7 @@ var subscriptionTools = [
     },
     inputSchema: external_exports.object({
       subscriptionId: external_exports.string().max(1e4).describe("The subscription ID to update"),
-      variantId: external_exports.string().max(1e4).optional().describe("New variant ID for plan switching"),
+      variantId: external_exports.string().max(1e4).regex(/^[1-9]\d*$/, "variantId must be a positive integer string (e.g. '12345')").optional().describe("New variant ID for plan switching"),
       pause: external_exports.enum(["void", "free", "resume"]).optional().describe("Pause mode: 'void' (pause, skip billing), 'free' (pause, keep access free), or 'resume' to unpause"),
       cancelled: external_exports.literal(false).optional().describe(
         "Set to false to un-cancel a subscription before it expires. To cancel, use ls_cancel_subscription instead."
@@ -22611,7 +22657,7 @@ var subscriptionTools = [
       billingAnchor: external_exports.number().int().min(1).max(28).optional().describe("Day of month (1-28) to anchor billing to"),
       invoiceImmediately: external_exports.boolean().optional().describe("If true, invoice immediately when updating (default false for prorated changes)"),
       disableProrations: external_exports.boolean().optional().describe("If true, disable prorations when changing plans"),
-      trialEndsAt: external_exports.string().max(1e4).optional().describe("Set trial end date (ISO 8601 format). Set to null to end trial immediately.")
+      trialEndsAt: external_exports.string().max(1e4).nullable().optional().describe("Set trial end date (ISO 8601 format). Set to null to end trial immediately.")
     }),
     handler: async (input) => {
       const attributes = {};
@@ -22622,7 +22668,7 @@ var subscriptionTools = [
       if (input.invoiceImmediately !== void 0) attributes.invoice_immediately = input.invoiceImmediately;
       if (input.disableProrations !== void 0) attributes.disable_prorations = input.disableProrations;
       if (input.trialEndsAt !== void 0) attributes.trial_ends_at = input.trialEndsAt;
-      return apiPatch(`/subscriptions/${input.subscriptionId}`, {
+      return apiPatch(`/subscriptions/${encodePath(input.subscriptionId)}`, {
         data: {
           type: "subscriptions",
           id: input.subscriptionId,
@@ -22645,7 +22691,7 @@ var subscriptionTools = [
       subscriptionId: external_exports.string().max(1e4).describe("The subscription ID to cancel")
     }),
     handler: async (input) => {
-      return apiDelete(`/subscriptions/${input.subscriptionId}`);
+      return apiDelete(`/subscriptions/${encodePath(input.subscriptionId)}`);
     }
   }
 ];
@@ -22862,14 +22908,14 @@ var webhookTools = [
       webhookId: external_exports.string().max(1e4).describe("The webhook ID to update"),
       url: external_exports.string().max(1e4).optional().describe("New URL to send webhook events to"),
       events: external_exports.array(external_exports.string()).optional().describe("Updated list of event types to subscribe to"),
-      secret: external_exports.string().max(1e4).optional().describe("New signing secret")
+      secret: external_exports.string().min(6).max(40).optional().describe("New signing secret")
     }),
     handler: async (input) => {
       const attributes = {};
       if (input.url !== void 0) attributes.url = input.url;
       if (input.events !== void 0) attributes.events = input.events;
       if (input.secret !== void 0) attributes.secret = input.secret;
-      return apiPatch(`/webhooks/${input.webhookId}`, {
+      return apiPatch(`/webhooks/${encodePath(input.webhookId)}`, {
         data: {
           type: "webhooks",
           id: input.webhookId,
@@ -22892,13 +22938,13 @@ var webhookTools = [
       webhookId: external_exports.string().max(1e4).describe("The webhook ID to delete")
     }),
     handler: async (input) => {
-      return apiDelete(`/webhooks/${input.webhookId}`);
+      return apiDelete(`/webhooks/${encodePath(input.webhookId)}`);
     }
   }
 ];
 
 // src/index.ts
-var version2 = true ? "0.4.1" : (await null).createRequire(import.meta.url)("../package.json").version;
+var version2 = true ? "0.6.0" : (await null).createRequire(import.meta.url)("../package.json").version;
 var subcommand = process.argv[2];
 if (subcommand === "version" || subcommand === "--version") {
   console.log(version2);
@@ -22932,18 +22978,18 @@ var server = new McpServer({
   version: version2
 });
 for (const tool of allTools) {
-  const isDestructive = tool.annotations?.destructiveHint === true;
+  const toolAcceptsStoreId = "storeId" in tool.inputSchema.shape;
   server.tool(
     tool.name,
     tool.description,
     tool.inputSchema.shape,
     tool.annotations,
     async (input) => {
+      const isDestructive = isDestructiveCall(tool, input);
       const start = Date.now();
       try {
         if (isDestructive) checkDestructiveRateLimit();
-        const storeId = input.storeId;
-        if (typeof storeId === "string") checkStoreAllowed(storeId);
+        checkStoreScopedToolInput(toolAcceptsStoreId, input);
         const result = await tool.handler(input);
         const response = result;
         const latency_ms = Date.now() - start;

package/package.json

@@ -1,55 +1,54 @@
-{
-  "name": "@yawlabs/lemonsqueezy-mcp",
-  "version": "0.4.1",
-  "description": "LemonSqueezy MCP server for managing your store from AI assistants",
-  "license": "MIT",
-  "author": "YawLabs <contact@yaw.sh>",
-  "repository": {
-    "type": "git",
-    "url": "git+https://github.com/YawLabs/lemonsqueezy-mcp.git"
-  },
-  "keywords": [
-    "lemonsqueezy",
-    "lemon-squeezy",
-    "mcp",
-    "model-context-protocol",
-    "ai",
-    "payments",
-    "subscriptions",
-    "licensing"
-  ],
-  "type": "module",
-  "main": "dist/index.js",
-  "bin": {
-    "lemonsqueezy-mcp": "dist/index.js"
-  },
-  "files": [
-    "dist/index.js"
-  ],
-  "scripts": {
-    "build": "tsc && node build.mjs",
-    "dev": "tsc --watch",
-    "start": "node dist/index.js",
-    "test": "npm run build && node --test dist/**/*.test.js",
-    "test:ci": "npm run test",
-    "test:integration": "npm run build && node --test dist/integration/*.test.js",
-    "lint": "biome check src/",
-    "lint:fix": "biome check --write src/",
-    "prepublishOnly": "npm run build && node --test dist/**/*.test.js"
-  },
-  "dependencies": {},
-  "overrides": {
-    "hono": "^4.12.14"
-  },
-  "devDependencies": {
-    "@biomejs/biome": "^1.9.4",
-    "@modelcontextprotocol/sdk": "^1.29.0",
-    "@types/node": "^22.15.2",
-    "esbuild": "^0.28.0",
-    "typescript": "^5.8.3",
-    "zod": "^3.24.4"
-  },
-  "engines": {
-    "node": ">=18"
-  }
-}
+{
+  "name": "@yawlabs/lemonsqueezy-mcp",
+  "version": "0.6.0",
+  "description": "LemonSqueezy MCP server for managing your store from AI assistants",
+  "license": "MIT",
+  "author": "YawLabs <contact@yaw.sh>",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/YawLabs/lemonsqueezy-mcp.git"
+  },
+  "keywords": [
+    "lemonsqueezy",
+    "lemon-squeezy",
+    "mcp",
+    "model-context-protocol",
+    "ai",
+    "payments",
+    "subscriptions",
+    "licensing"
+  ],
+  "type": "module",
+  "main": "dist/index.js",
+  "bin": {
+    "lemonsqueezy-mcp": "dist/index.js"
+  },
+  "files": [
+    "dist/index.js"
+  ],
+  "scripts": {
+    "build": "tsc && node build.mjs",
+    "dev": "tsc --watch",
+    "start": "node dist/index.js",
+    "test": "npm run build && node --test dist/**/*.test.js",
+    "test:integration": "npm run build && node --test dist/integration/*.test.js",
+    "lint": "biome check src/",
+    "lint:fix": "biome check --write src/",
+    "prepublishOnly": "npm run build && node --test dist/**/*.test.js"
+  },
+  "dependencies": {},
+  "overrides": {
+    "hono": "^4.12.14"
+  },
+  "devDependencies": {
+    "@biomejs/biome": "^2.4.12",
+    "@modelcontextprotocol/sdk": "^1.29.0",
+    "@types/node": "^25.6.0",
+    "esbuild": "^0.28.0",
+    "typescript": "^6.0.3",
+    "zod": "^4.3.6"
+  },
+  "engines": {
+    "node": ">=18"
+  }
+}