@yawlabs/lemonsqueezy-mcp 0.6.2 → 0.7.1

package/README.md

@@ -173,11 +173,11 @@ All configuration is via environment variables. Only `LEMONSQUEEZY_API_KEY` (or
 | Variable | Purpose |
 | --- | --- |
 | `LEMONSQUEEZY_API_KEY` | LemonSqueezy API token. |
-| `LEMONSQUEEZY_API_KEY_COMMAND` | Command whose stdout produces the API key. Overrides `LEMONSQUEEZY_API_KEY`. Output is cached for 1 hour. Use this to pull short-lived credentials from a vault (`op read`, `gcloud secrets versions access`, etc.) without writing them to env vars. |
-| `LEMONSQUEEZY_ALLOWED_STORE_IDS` | Comma-separated allowlist of store IDs. When set: (1) any tool whose input includes a `storeId` rejects calls to a non-allowed store; (2) tools that *accept* a `storeId` filter (e.g. `ls_list_orders`, `ls_list_subscriptions`) require it — calls without one are blocked so a missing filter cannot return data from every store the API key can see. Tools with no `storeId` field at all (e.g. `ls_refund_order`, `ls_list_stores`) are not gated by this — pair with `LEMONSQUEEZY_MAX_REFUND_AMOUNT_CENTS` and `LEMONSQUEEZY_DESTRUCTIVE_RATE_LIMIT`. |
+| `LEMONSQUEEZY_API_KEY_COMMAND` | Command whose stdout produces the API key. Overrides `LEMONSQUEEZY_API_KEY`. Output is cached for 1 hour. Use this to pull short-lived credentials from a vault (`op read`, `gcloud secrets versions access`, etc.) without writing them to env vars. The cache is keyed by the command string, so changing it mid-process refreshes on the next request; it is also invalidated automatically on a 401/403 from the API, so a key rotated upstream takes effect on the next call without waiting for the TTL. |
+| `LEMONSQUEEZY_ALLOWED_STORE_IDS` | Comma-separated allowlist of store IDs. When set: (1) any tool whose input includes a `storeId` rejects calls to a non-allowed store; (2) tools that *accept* a `storeId` filter (e.g. `ls_list_orders`, `ls_list_subscriptions`) require it — calls without one are blocked so a missing filter cannot return data from every store the API key can see. Tools with no `storeId` field at all (e.g. `ls_refund_order`, `ls_cancel_subscription`, `ls_archive_customer`, `ls_delete_webhook`, `ls_delete_discount`, `ls_update_license_key`, `ls_list_stores`) route by their own resource ID and are **not** gated by this allowlist. For those, the only authoritative store boundary is the API key itself — pair this setting with a LemonSqueezy API key scoped to the same store(s), and pair with `LEMONSQUEEZY_MAX_REFUND_AMOUNT_CENTS` / `LEMONSQUEEZY_DESTRUCTIVE_RATE_LIMIT` for additional defense in depth. |
 | `LEMONSQUEEZY_MAX_REFUND_AMOUNT_CENTS` | Rejects `ls_refund_order` and `ls_refund_subscription_invoice` calls above this amount. |
-| `LEMONSQUEEZY_DESTRUCTIVE_RATE_LIMIT` | Max destructive tool calls per 60-second rolling window. In-process limit — per MCP server instance, not global; each `npx` cold start resets the window. Counts include `ls_update_license_key` calls that set `disabled: true`. |
-| `LEMONSQUEEZY_LOG=json` | Emit one JSON log line to stderr per tool and HTTP call. Destructive calls are tagged `audit: true` and include their inputs. |
+| `LEMONSQUEEZY_DESTRUCTIVE_RATE_LIMIT` | Max destructive tool calls per 60-second rolling window. In-process limit — per MCP server instance, not global; each `npx` cold start resets the window. Counts include `ls_update_license_key` calls that set `disabled: true`, and `ls_update_subscription` calls that pause or switch plan. |
+| `LEMONSQUEEZY_LOG` | Structured-log verbosity to stderr. Set to `all` (or legacy `json`) to log every tool and HTTP call, `audit` to log only destructive-call audit entries plus errors (recommended for production), `error` to log only failures. Unset: no logs. Destructive calls are tagged `audit: true` and include their inputs. |
 
 ### Logging format
 
@@ -191,11 +191,11 @@ HTTP errors include the upstream `X-Request-Id` when present, so support tickets
 
 For unattended/agentic use against a live store, we recommend:
 
-1. Set `LEMONSQUEEZY_ALLOWED_STORE_IDS` to the specific store(s) the agent may touch.
+1. Use a LemonSqueezy API key scoped to the specific store(s) the agent may touch — this is the only authoritative store boundary for tools that route by their own resource ID (refunds, cancels, archive, delete-webhook, etc.). Set `LEMONSQUEEZY_ALLOWED_STORE_IDS` to the same set as a defense-in-depth gate on the tools that *do* take a `storeId`.
 2. Set `LEMONSQUEEZY_MAX_REFUND_AMOUNT_CENTS` to a per-call cap well below any single-refund expectation.
 3. Set `LEMONSQUEEZY_DESTRUCTIVE_RATE_LIMIT` to a small number (e.g. 5/min) as a runaway-agent circuit breaker.
-4. Set `LEMONSQUEEZY_LOG=json` and ship stderr to your log aggregator. Alert on `status: "guardrail_block"` or elevated error rates per tool.
-5. Run `LEMONSQUEEZY_API_KEY_COMMAND` against a vault-backed secret so credentials can rotate without restarting the server process.
+4. Set `LEMONSQUEEZY_LOG=audit` and ship stderr to your log aggregator. The `audit` level keeps every destructive-call entry plus errors but drops successful reads so log volume stays bounded over weeks of operation. Alert on `status: "guardrail_block"` or elevated error rates per tool. Use `LEMONSQUEEZY_LOG=all` while debugging.
+5. Run `LEMONSQUEEZY_API_KEY_COMMAND` against a vault-backed secret so credentials can rotate without restarting the server process. The API client invalidates its in-process key cache automatically on a 401/403, so a rotated upstream key picks up on the next request rather than waiting on the 1h TTL.
 
 What the server does **not** do and you must own at the caller level:
 

package/dist/index.js

@@ -30179,15 +30179,29 @@ function checkDestructiveRateLimit(now = Date.now()) {
 function isStoreAllowlistActive() {
   return loadOptions().allowedStoreIds !== null;
 }
-function checkStoreScopedToolInput(toolAcceptsStoreId, input) {
-  if (!toolAcceptsStoreId) return;
-  const raw = input.storeId;
-  if (raw !== void 0 && raw !== null && raw !== "") {
-    checkStoreAllowed(String(raw));
-    return;
-  }
-  if (isStoreAllowlistActive()) {
-    throw new GuardrailError("storeId is required when LEMONSQUEEZY_ALLOWED_STORE_IDS is set");
+function isPresent(value) {
+  if (value === void 0 || value === null) return false;
+  if (typeof value === "string" && value === "") return false;
+  if (Array.isArray(value) && value.length === 0) return false;
+  return true;
+}
+function checkStoreScopedToolInput(tool, input) {
+  const toolAcceptsStoreId = "storeId" in tool.inputSchema.shape;
+  if (toolAcceptsStoreId) {
+    const raw = input.storeId;
+    if (raw !== void 0 && raw !== null && raw !== "") {
+      checkStoreAllowed(String(raw));
+    } else if (isStoreAllowlistActive()) {
+      throw new GuardrailError("storeId is required when LEMONSQUEEZY_ALLOWED_STORE_IDS is set");
+    }
+  }
+  if (tool.requiredFilters && tool.requiredFilters.length > 0 && isStoreAllowlistActive()) {
+    const anyPresent = tool.requiredFilters.some((key) => isPresent(input[key]));
+    if (!anyPresent) {
+      throw new GuardrailError(
+        `At least one of [${tool.requiredFilters.join(", ")}] is required when LEMONSQUEEZY_ALLOWED_STORE_IDS is set`
+      );
+    }
   }
 }
 function isDestructiveCall(tool, input) {
@@ -30196,11 +30210,35 @@ function isDestructiveCall(tool, input) {
 }
 
 // src/logger.ts
-function isEnabled() {
-  return process.env.LEMONSQUEEZY_LOG === "json";
+function getLogLevel() {
+  const v = process.env.LEMONSQUEEZY_LOG;
+  if (v === "json" || v === "all") return "all";
+  if (v === "audit") return "audit";
+  if (v === "error") return "error";
+  return "off";
+}
+var ERROR_STATUS_TAGS = /* @__PURE__ */ new Set(["error", "exception", "guardrail_block", "timeout", "network_error"]);
+function isErrorEntry(entry) {
+  if (entry.error !== void 0) return true;
+  if (typeof entry.status === "string") return ERROR_STATUS_TAGS.has(entry.status);
+  if (typeof entry.status === "number") return entry.status >= 400;
+  return false;
+}
+function shouldLog(entry, level) {
+  switch (level) {
+    case "off":
+      return false;
+    case "all":
+      return true;
+    case "audit":
+      return entry.audit === true || isErrorEntry(entry);
+    case "error":
+      return isErrorEntry(entry);
+  }
 }
 function logEvent(entry) {
-  if (!isEnabled()) return;
+  const level = getLogLevel();
+  if (!shouldLog(entry, level)) return;
   try {
     const line = JSON.stringify({ ts: (/* @__PURE__ */ new Date()).toISOString(), ...entry });
     process.stderr.write(`${line}
@@ -30228,10 +30266,46 @@ function logEvent(entry) {
   }
 }
 
+// src/redact.ts
+var SECRET_KEY_RE = /^(secret|password|token|api[_-]?key|bearer|authorization|signing[_-]?secret)$/i;
+var REDACTED = "[REDACTED]";
+var CIRCULAR = "[CIRCULAR]";
+var MAX_DEPTH = 32;
+function isPlainObject3(value) {
+  if (value === null || typeof value !== "object") return false;
+  const proto = Object.getPrototypeOf(value);
+  return proto === Object.prototype || proto === null;
+}
+function redactInner(value, visited, depth) {
+  if (depth > MAX_DEPTH) return CIRCULAR;
+  if (value === null || typeof value !== "object") return value;
+  if (Array.isArray(value)) {
+    if (visited.has(value)) return CIRCULAR;
+    visited.add(value);
+    return value.map((item) => redactInner(item, visited, depth + 1));
+  }
+  if (!isPlainObject3(value)) return value;
+  if (visited.has(value)) return CIRCULAR;
+  visited.add(value);
+  const out = {};
+  for (const [key, val] of Object.entries(value)) {
+    if (SECRET_KEY_RE.test(key)) {
+      out[key] = REDACTED;
+    } else {
+      out[key] = redactInner(val, visited, depth + 1);
+    }
+  }
+  return out;
+}
+function redactSecrets(input) {
+  return redactInner(input, /* @__PURE__ */ new WeakSet(), 0);
+}
+
 // src/retry.ts
 var REQUEST_TIMEOUT_MS = 3e4;
 var DEFAULT_RETRY_WAIT_MS = 1e3;
 var MAX_RETRY_WAIT_MS = 3e4;
+var OVERALL_DEADLINE_MS = 9e4;
 var DEFAULT_MAX_ATTEMPTS = 4;
 var BASE_BACKOFF_MS = 250;
 var JITTER_FRACTION = 0.25;
@@ -30251,6 +30325,19 @@ function isAbortTimeoutError(err) {
   const e = err;
   return e.name === "TimeoutError" || e.name === "AbortError" || e.code === "ABORT_ERR";
 }
+function isRetryTimeoutError(err) {
+  if (!err || typeof err !== "object") return false;
+  const e = err;
+  return e.name === "TimeoutError" && typeof e.elapsedMs === "number" && typeof e.attempts === "number";
+}
+function makeRetryTimeoutError(elapsedMs, attempts, cause) {
+  const err = new Error("Request timed out");
+  err.name = "TimeoutError";
+  err.elapsedMs = elapsedMs;
+  err.attempts = attempts;
+  if (cause !== void 0) err.cause = cause;
+  return err;
+}
 function backoffDelay(attempt, rand = Math.random) {
   const base = BASE_BACKOFF_MS * 2 ** (attempt - 1);
   const jitter = rand() * base * JITTER_FRACTION;
@@ -30262,31 +30349,54 @@ async function fetchWithRetry(url2, init, opts) {
   const sleep = opts.sleep ?? defaultSleep;
   const fetchImpl = opts.fetchImpl ?? fetch;
   const rand = opts.rand ?? Math.random;
+  const deadlineMs = opts.deadlineMs ?? OVERALL_DEADLINE_MS;
+  const now = opts.now ?? Date.now;
+  const startedAt = now();
+  const deadlineAt = startedAt + deadlineMs;
+  let attempts = 0;
   let lastError;
+  let lastResponse;
   for (let attempt = 1; attempt <= maxAttempts; attempt++) {
+    if (attempt > 1 && now() >= deadlineAt) {
+      if (lastResponse) return lastResponse;
+      throw makeRetryTimeoutError(now() - startedAt, attempts, lastError);
+    }
+    attempts = attempt;
     try {
       const res = await fetchImpl(url2, { ...init, signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS) });
+      lastResponse = res;
       if (res.status === 429) {
         if (attempt === maxAttempts) return res;
         const waitMs = parseRetryAfterMs(res.headers.get("retry-after"));
         if (waitMs > MAX_RETRY_WAIT_MS) return res;
+        if (now() + waitMs >= deadlineAt) return res;
         await sleep(waitMs);
         continue;
       }
       if (res.status >= 500 && res.status < 600 && opts.idempotent && attempt < maxAttempts) {
-        await sleep(backoffDelay(attempt, rand));
+        const waitMs = backoffDelay(attempt, rand);
+        if (now() + waitMs >= deadlineAt) return res;
+        await sleep(waitMs);
         continue;
       }
       return res;
     } catch (err) {
       lastError = err;
       if (isAbortTimeoutError(err)) {
-        if (!opts.idempotent || attempt === maxAttempts) throw err;
-        await sleep(backoffDelay(attempt, rand));
+        if (!opts.idempotent || attempt === maxAttempts) {
+          throw makeRetryTimeoutError(now() - startedAt, attempts, err);
+        }
+        const waitMs = backoffDelay(attempt, rand);
+        if (now() + waitMs >= deadlineAt) {
+          throw makeRetryTimeoutError(now() - startedAt, attempts, err);
+        }
+        await sleep(waitMs);
         continue;
       }
       if (err instanceof TypeError && opts.idempotent && attempt < maxAttempts) {
-        await sleep(backoffDelay(attempt, rand));
+        const waitMs = backoffDelay(attempt, rand);
+        if (now() + waitMs >= deadlineAt) throw err;
+        await sleep(waitMs);
         continue;
       }
       throw err;
@@ -30330,10 +30440,21 @@ function parseCommand(cmd) {
   if (parts.length === 0) throw new Error("LEMONSQUEEZY_API_KEY_COMMAND is empty");
   return { command: parts[0], args: parts.slice(1) };
 }
+function fromCache(fingerprint) {
+  if (cached2 && cached2.fingerprint === fingerprint && cached2.expiresAt > Date.now()) {
+    return cached2.key;
+  }
+  return null;
+}
+function intoCache(fingerprint, key) {
+  cached2 = { fingerprint, key, expiresAt: Date.now() + CACHE_TTL_MS };
+}
 async function loadApiKey() {
-  if (cached2 && cached2.expiresAt > Date.now()) return cached2.key;
   const cmdStr = process.env.LEMONSQUEEZY_API_KEY_COMMAND;
   if (cmdStr && cmdStr.trim() !== "") {
+    const fingerprint2 = `cmd:${cmdStr}`;
+    const hit2 = fromCache(fingerprint2);
+    if (hit2 !== null) return hit2;
     const { command, args } = parseCommand(cmdStr);
     let stdout;
     try {
@@ -30346,23 +30467,31 @@ async function loadApiKey() {
       const msg = err instanceof Error ? err.message : String(err);
       throw new Error(`LEMONSQUEEZY_API_KEY_COMMAND failed: ${msg}`);
     }
-    const key2 = stdout.trim();
-    if (!key2) throw new Error("LEMONSQUEEZY_API_KEY_COMMAND produced empty output");
-    cached2 = { key: key2, expiresAt: Date.now() + CACHE_TTL_MS };
-    return key2;
+    const key = stdout.trim();
+    if (!key) throw new Error("LEMONSQUEEZY_API_KEY_COMMAND produced empty output");
+    intoCache(fingerprint2, key);
+    return key;
   }
-  const key = process.env.LEMONSQUEEZY_API_KEY;
-  if (!key) {
+  const raw = process.env.LEMONSQUEEZY_API_KEY;
+  if (!raw) {
     throw new Error("LEMONSQUEEZY_API_KEY or LEMONSQUEEZY_API_KEY_COMMAND environment variable is required.");
   }
-  if (key.trim() === "") {
+  if (raw.trim() === "") {
     throw new Error("LEMONSQUEEZY_API_KEY is set but empty. Provide a valid API key.");
   }
-  return key;
+  const fingerprint = `env:${raw}`;
+  const hit = fromCache(fingerprint);
+  if (hit !== null) return hit;
+  intoCache(fingerprint, raw);
+  return raw;
+}
+function invalidateApiKeyCache() {
+  cached2 = null;
 }
 
 // src/api.ts
 var BASE_URL = "https://api.lemonsqueezy.com/v1";
+var lsIdSchema = external_exports3.string().max(1e4).regex(/^[1-9]\d*$/, "ID must be a positive integer string (e.g. '12345')");
 function encodePath(segment) {
   return encodeURIComponent(String(segment));
 }
@@ -30390,6 +30519,14 @@ function buildQuery(params) {
 function decorateError(error48, requestId) {
   return requestId ? `${error48} (request_id: ${requestId})` : error48;
 }
+function formatTimeoutMessage(err, fallbackElapsedMs) {
+  if (isRetryTimeoutError(err)) {
+    const seconds2 = Math.max(1, Math.round(err.elapsedMs / 1e3));
+    return `Request timed out after ${seconds2}s (${err.attempts} attempts)`;
+  }
+  const seconds = Math.max(1, Math.round(fallbackElapsedMs / 1e3));
+  return `Request timed out after ${seconds}s (1 attempts)`;
+}
 async function apiRequest(method, path, body) {
   const start = Date.now();
   const apiKey = await loadApiKey();
@@ -30410,7 +30547,7 @@ async function apiRequest(method, path, body) {
   } catch (err) {
     const latency_ms2 = Date.now() - start;
     if (isAbortTimeoutError(err)) {
-      const error48 = `Request timed out after ${REQUEST_TIMEOUT_MS / 1e3}s`;
+      const error48 = formatTimeoutMessage(err, latency_ms2);
       logEvent({ event: "http_call", method, path, status: "timeout", latency_ms: latency_ms2, error: error48 });
       return { ok: false, status: 0, error: error48 };
     }
@@ -30421,6 +30558,9 @@ async function apiRequest(method, path, body) {
   const latency_ms = Date.now() - start;
   const requestId = res.headers.get("x-request-id") ?? void 0;
   if (!res.ok) {
+    if (res.status === 401 || res.status === 403) {
+      invalidateApiKeyCache();
+    }
     const errorBody = await res.text();
     try {
       const parsed = JSON.parse(errorBody);
@@ -30494,7 +30634,7 @@ async function licenseRequest(path, body) {
   } catch (err) {
     const latency_ms2 = Date.now() - start;
     if (isAbortTimeoutError(err)) {
-      const error48 = `Request timed out after ${REQUEST_TIMEOUT_MS / 1e3}s`;
+      const error48 = formatTimeoutMessage(err, latency_ms2);
       logEvent({ event: "http_call", method: "POST", path, status: "timeout", latency_ms: latency_ms2, error: error48 });
       return { ok: false, status: 0, error: error48 };
     }
@@ -30610,14 +30750,14 @@ var affiliateTools = [
       openWorldHint: true
     },
     inputSchema: external_exports3.object({
-      affiliateId: external_exports3.string().max(1e4).describe("The affiliate ID"),
+      affiliateId: lsIdSchema.describe("The affiliate ID"),
       include: external_exports3.string().max(1e4).optional().describe("Comma-separated related resources to include (e.g. 'store,user')")
     }),
     handler: getHandler("/affiliates", "affiliateId")
   },
   {
     name: "ls_list_affiliates",
-    description: "List all affiliates for the authenticated user's stores, optionally filtered by user email. Results are paginated \u2014 check meta.page in the response for currentPage, lastPage, and total.",
+    description: "List all affiliates for the authenticated user's stores, optionally filtered by user email. Results are paginated \u2014 check meta.page in the response for currentPage, lastPage, and total. Cross-store note: when LEMONSQUEEZY_ALLOWED_STORE_IDS is set, this tool can still return affiliates tied to non-allowed stores -- the endpoint has no parent ID filter to scope by. Pair with a scoped LemonSqueezy API key for true cross-store enforcement -- the API key's visibility is the true boundary.",
     annotations: {
       title: "List affiliates",
       readOnlyHint: true,
@@ -30648,7 +30788,7 @@ var checkoutTools = [
       openWorldHint: true
     },
     inputSchema: external_exports3.object({
-      checkoutId: external_exports3.string().max(1e4).describe("The checkout ID"),
+      checkoutId: lsIdSchema.describe("The checkout ID"),
       include: external_exports3.string().max(1e4).optional().describe("Comma-separated related resources to include (e.g. 'store,variant')")
     }),
     handler: getHandler("/checkouts", "checkoutId")
@@ -30664,8 +30804,8 @@ var checkoutTools = [
       openWorldHint: true
     },
     inputSchema: external_exports3.object({
-      storeId: external_exports3.string().max(1e4).optional().describe("Filter by store ID"),
-      variantId: external_exports3.string().max(1e4).optional().describe("Filter by variant ID"),
+      storeId: lsIdSchema.optional().describe("Filter by store ID"),
+      variantId: lsIdSchema.optional().describe("Filter by variant ID"),
       include: external_exports3.string().max(1e4).optional().describe("Comma-separated related resources to include (e.g. 'store,variant')"),
       pageNumber: external_exports3.number().int().min(1).optional().describe("Page number (1-indexed)"),
       pageSize: external_exports3.number().int().min(1).max(100).optional().describe("Results per page (1-100)")
@@ -30683,11 +30823,11 @@ var checkoutTools = [
       openWorldHint: true
     },
     inputSchema: external_exports3.object({
-      storeId: external_exports3.string().max(1e4).describe("The store ID"),
-      variantId: external_exports3.string().max(1e4).describe("The variant ID for the product being purchased"),
+      storeId: lsIdSchema.describe("The store ID"),
+      variantId: lsIdSchema.describe("The variant ID for the product being purchased"),
       customPrice: external_exports3.number().int().min(0).optional().describe("Custom price in cents (overrides the variant price)"),
-      enabledVariants: external_exports3.array(external_exports3.string()).optional().describe("Array of variant IDs to show on the checkout (for products with multiple variants)"),
-      email: external_exports3.string().max(1e4).optional().describe("Prefill customer email"),
+      enabledVariants: external_exports3.array(lsIdSchema).optional().describe("Array of variant IDs to show on the checkout (for products with multiple variants)"),
+      email: external_exports3.string().email().max(320).optional().describe("Prefill customer email"),
       name: external_exports3.string().max(1e4).optional().describe("Prefill customer name"),
       billingAddressCountry: external_exports3.string().max(1e4).optional().describe("Prefill billing country (ISO 3166-1 alpha-2)"),
       billingAddressZip: external_exports3.string().max(1e4).optional().describe("Prefill billing ZIP/postal code"),
@@ -30743,7 +30883,7 @@ var customerTools = [
       openWorldHint: true
     },
     inputSchema: external_exports3.object({
-      customerId: external_exports3.string().max(1e4).describe("The customer ID"),
+      customerId: lsIdSchema.describe("The customer ID"),
       include: external_exports3.string().max(1e4).optional().describe("Comma-separated related resources to include (e.g. 'store,orders,subscriptions,license-keys')")
     }),
     handler: getHandler("/customers", "customerId")
@@ -30759,7 +30899,7 @@ var customerTools = [
       openWorldHint: true
     },
     inputSchema: external_exports3.object({
-      storeId: external_exports3.string().max(1e4).optional().describe("Filter by store ID"),
+      storeId: lsIdSchema.optional().describe("Filter by store ID"),
       email: external_exports3.string().email().max(320).optional().describe("Filter by customer email"),
       include: external_exports3.string().max(1e4).optional().describe("Comma-separated related resources to include (e.g. 'store,orders,subscriptions,license-keys')"),
       pageNumber: external_exports3.number().int().min(1).optional().describe("Page number (1-indexed)"),
@@ -30778,7 +30918,7 @@ var customerTools = [
       openWorldHint: true
     },
     inputSchema: external_exports3.object({
-      storeId: external_exports3.string().max(1e4).describe("The store ID to create the customer in"),
+      storeId: lsIdSchema.describe("The store ID to create the customer in"),
       name: external_exports3.string().max(1e4).describe("Customer's full name"),
       email: external_exports3.string().email().max(320).describe("Customer's email address"),
       city: external_exports3.string().max(1e4).optional().describe("Customer's city"),
@@ -30806,7 +30946,7 @@ var customerTools = [
   },
   {
     name: "ls_update_customer",
-    description: "Update an existing customer's name, email, city, region, country, or status.",
+    description: "Update an existing customer's name, email, city, region, country, or status. The only supported status value is 'archived' \u2014 use ls_archive_customer for the dedicated, audit-tagged path.",
     annotations: {
       title: "Update customer",
       readOnlyHint: false,
@@ -30818,16 +30958,19 @@ var customerTools = [
     // ls_archive_customer and must engage the same rate limiter / audit log;
     // otherwise the dedicated archive tool's destructive flag becomes a side
     // channel anyone can route around. Other field edits (name, email,
-    // address) stay on the regular path.
+    // address) stay on the regular path. The schema constrains `status` to
+    // the literal "archived" so a typo ("archive", "Archived") fails at
+    // validation rather than slipping past the predicate as a non-destructive
+    // PATCH that the API would 422 anyway.
     isDestructive: (input) => input.status === "archived",
     inputSchema: external_exports3.object({
-      customerId: external_exports3.string().max(1e4).describe("The customer ID to update"),
+      customerId: lsIdSchema.describe("The customer ID to update"),
       name: external_exports3.string().max(1e4).optional().describe("New name"),
       email: external_exports3.string().email().max(320).optional().describe("New email"),
       city: external_exports3.string().max(1e4).optional().describe("New city"),
       region: external_exports3.string().max(1e4).optional().describe("New region/state"),
       country: external_exports3.string().max(1e4).optional().describe("New country (ISO 3166-1 alpha-2 code)"),
-      status: external_exports3.string().max(1e4).optional().describe("New status ('archived' to archive the customer)")
+      status: external_exports3.literal("archived").optional().describe("Set to 'archived' to archive the customer. Equivalent to calling ls_archive_customer.")
     }),
     handler: async (input) => {
       const attributes = {};
@@ -30857,7 +31000,7 @@ var customerTools = [
       openWorldHint: true
     },
     inputSchema: external_exports3.object({
-      customerId: external_exports3.string().max(1e4).describe("The customer ID to archive")
+      customerId: lsIdSchema.describe("The customer ID to archive")
     }),
     handler: async (input) => {
       return apiPatch(`/customers/${encodePath(input.customerId)}`, {
@@ -30884,14 +31027,14 @@ var discountRedemptionTools = [
       openWorldHint: true
     },
     inputSchema: external_exports3.object({
-      discountRedemptionId: external_exports3.string().max(1e4).describe("The discount redemption ID"),
+      discountRedemptionId: lsIdSchema.describe("The discount redemption ID"),
       include: external_exports3.string().max(1e4).optional().describe("Comma-separated related resources to include (e.g. 'discount,order')")
     }),
     handler: getHandler("/discount-redemptions", "discountRedemptionId")
   },
   {
     name: "ls_list_discount_redemptions",
-    description: "List all discount redemptions, optionally filtered by discount or order. Results are paginated \u2014 check meta.page in the response for currentPage, lastPage, and total.",
+    description: "List all discount redemptions, optionally filtered by discount or order. Results are paginated \u2014 check meta.page in the response for currentPage, lastPage, and total. Cross-store note: when LEMONSQUEEZY_ALLOWED_STORE_IDS is set, this tool requires at least one of: discountId, orderId. Even with that set, pair with a scoped LemonSqueezy API key for true cross-store enforcement -- the API key's visibility is the true boundary.",
     annotations: {
       title: "List discount redemptions",
       readOnlyHint: true,
@@ -30900,12 +31043,13 @@ var discountRedemptionTools = [
       openWorldHint: true
     },
     inputSchema: external_exports3.object({
-      discountId: external_exports3.string().max(1e4).optional().describe("Filter by discount ID"),
-      orderId: external_exports3.string().max(1e4).optional().describe("Filter by order ID"),
+      discountId: lsIdSchema.optional().describe("Filter by discount ID"),
+      orderId: lsIdSchema.optional().describe("Filter by order ID"),
       include: external_exports3.string().max(1e4).optional().describe("Comma-separated related resources to include (e.g. 'discount,order')"),
       pageNumber: external_exports3.number().int().min(1).optional().describe("Page number (1-indexed)"),
       pageSize: external_exports3.number().int().min(1).max(100).optional().describe("Results per page (1-100)")
     }),
+    requiredFilters: ["discountId", "orderId"],
     handler: listHandler("/discount-redemptions", { discountId: "discount_id", orderId: "order_id" })
   }
 ];
@@ -30923,7 +31067,7 @@ var discountTools = [
       openWorldHint: true
     },
     inputSchema: external_exports3.object({
-      discountId: external_exports3.string().max(1e4).describe("The discount ID"),
+      discountId: lsIdSchema.describe("The discount ID"),
       include: external_exports3.string().max(1e4).optional().describe("Comma-separated related resources to include (e.g. 'store,variants,discount-redemptions')")
     }),
     handler: getHandler("/discounts", "discountId")
@@ -30939,7 +31083,7 @@ var discountTools = [
       openWorldHint: true
     },
     inputSchema: external_exports3.object({
-      storeId: external_exports3.string().max(1e4).optional().describe("Filter by store ID"),
+      storeId: lsIdSchema.optional().describe("Filter by store ID"),
       include: external_exports3.string().max(1e4).optional().describe("Comma-separated related resources to include (e.g. 'store,variants,discount-redemptions')"),
       pageNumber: external_exports3.number().int().min(1).optional().describe("Page number (1-indexed)"),
       pageSize: external_exports3.number().int().min(1).max(100).optional().describe("Results per page (1-100)")
@@ -30957,7 +31101,7 @@ var discountTools = [
       openWorldHint: true
     },
     inputSchema: external_exports3.object({
-      storeId: external_exports3.string().max(1e4).describe("The store ID to create the discount in"),
+      storeId: lsIdSchema.describe("The store ID to create the discount in"),
       name: external_exports3.string().max(1e4).describe("Internal name for the discount"),
       code: external_exports3.string().max(1e4).describe("The discount code customers will enter (e.g. 'SAVE20')"),
       amount: external_exports3.number().int().min(1).describe(
@@ -30972,7 +31116,7 @@ var discountTools = [
       startsAt: external_exports3.string().max(1e4).optional().describe("When the discount becomes active (ISO 8601 format)"),
       expiresAt: external_exports3.string().max(1e4).optional().describe("When the discount expires (ISO 8601 format)"),
       isLimitedToProducts: external_exports3.boolean().optional().describe("If true, the discount only applies to specific variants (set via variantIds)"),
-      variantIds: external_exports3.array(external_exports3.string()).optional().describe("Array of variant IDs this discount applies to (requires isLimitedToProducts: true)")
+      variantIds: external_exports3.array(lsIdSchema).optional().describe("Array of variant IDs this discount applies to (requires isLimitedToProducts: true)")
     }),
     handler: async (input) => {
       const attributes = {
@@ -31015,7 +31159,7 @@ var discountTools = [
       openWorldHint: true
     },
     inputSchema: external_exports3.object({
-      discountId: external_exports3.string().max(1e4).describe("The discount ID to delete")
+      discountId: lsIdSchema.describe("The discount ID to delete")
     }),
     handler: async (input) => {
       return apiDelete(`/discounts/${encodePath(input.discountId)}`);
@@ -31036,14 +31180,14 @@ var fileTools = [
       openWorldHint: true
     },
     inputSchema: external_exports3.object({
-      fileId: external_exports3.string().max(1e4).describe("The file ID"),
+      fileId: lsIdSchema.describe("The file ID"),
       include: external_exports3.string().max(1e4).optional().describe("Comma-separated related resources to include (e.g. 'variant')")
     }),
     handler: getHandler("/files", "fileId")
   },
   {
     name: "ls_list_files",
-    description: "List all files, optionally filtered by variant. Results are paginated \u2014 check meta.page in the response for currentPage, lastPage, and total.",
+    description: "List all files, optionally filtered by variant. Results are paginated \u2014 check meta.page in the response for currentPage, lastPage, and total. Cross-store note: when LEMONSQUEEZY_ALLOWED_STORE_IDS is set, this tool requires at least one of: variantId. Even with that set, pair with a scoped LemonSqueezy API key for true cross-store enforcement -- the API key's visibility is the true boundary.",
     annotations: {
       title: "List files",
       readOnlyHint: true,
@@ -31052,11 +31196,12 @@ var fileTools = [
       openWorldHint: true
     },
     inputSchema: external_exports3.object({
-      variantId: external_exports3.string().max(1e4).optional().describe("Filter by variant ID"),
+      variantId: lsIdSchema.optional().describe("Filter by variant ID"),
       include: external_exports3.string().max(1e4).optional().describe("Comma-separated related resources to include (e.g. 'variant')"),
       pageNumber: external_exports3.number().int().min(1).optional().describe("Page number (1-indexed)"),
       pageSize: external_exports3.number().int().min(1).max(100).optional().describe("Results per page (1-100)")
     }),
+    requiredFilters: ["variantId"],
     handler: listHandler("/files", { variantId: "variant_id" })
   }
 ];
@@ -31074,14 +31219,14 @@ var licenseKeyInstanceTools = [
       openWorldHint: true
     },
     inputSchema: external_exports3.object({
-      licenseKeyInstanceId: external_exports3.string().max(1e4).describe("The license key instance ID"),
+      licenseKeyInstanceId: lsIdSchema.describe("The license key instance ID"),
       include: external_exports3.string().max(1e4).optional().describe("Comma-separated related resources to include (e.g. 'license-key')")
     }),
     handler: getHandler("/license-key-instances", "licenseKeyInstanceId")
   },
   {
     name: "ls_list_license_key_instances",
-    description: "List all license key instances (activations), optionally filtered by license key. Results are paginated \u2014 check meta.page in the response for currentPage, lastPage, and total.",
+    description: "List all license key instances (activations), optionally filtered by license key. Results are paginated \u2014 check meta.page in the response for currentPage, lastPage, and total. Cross-store note: when LEMONSQUEEZY_ALLOWED_STORE_IDS is set, this tool requires at least one of: licenseKeyId. Even with that set, pair with a scoped LemonSqueezy API key for true cross-store enforcement -- the API key's visibility is the true boundary.",
     annotations: {
       title: "List license key instances",
       readOnlyHint: true,
@@ -31090,11 +31235,12 @@ var licenseKeyInstanceTools = [
       openWorldHint: true
     },
     inputSchema: external_exports3.object({
-      licenseKeyId: external_exports3.string().max(1e4).optional().describe("Filter by license key ID"),
+      licenseKeyId: lsIdSchema.optional().describe("Filter by license key ID"),
       include: external_exports3.string().max(1e4).optional().describe("Comma-separated related resources to include (e.g. 'license-key')"),
       pageNumber: external_exports3.number().int().min(1).optional().describe("Page number (1-indexed)"),
       pageSize: external_exports3.number().int().min(1).max(100).optional().describe("Results per page (1-100)")
     }),
+    requiredFilters: ["licenseKeyId"],
     handler: listHandler("/license-key-instances", { licenseKeyId: "license_key_id" })
   }
 ];
@@ -31112,7 +31258,7 @@ var licenseKeyTools = [
       openWorldHint: true
     },
     inputSchema: external_exports3.object({
-      licenseKeyId: external_exports3.string().max(1e4).describe("The license key ID"),
+      licenseKeyId: lsIdSchema.describe("The license key ID"),
       include: external_exports3.string().max(1e4).optional().describe(
         "Comma-separated related resources to include (e.g. 'store,customer,order,order-item,product,license-key-instances')"
       )
@@ -31130,10 +31276,10 @@ var licenseKeyTools = [
       openWorldHint: true
     },
     inputSchema: external_exports3.object({
-      storeId: external_exports3.string().max(1e4).optional().describe("Filter by store ID"),
-      orderId: external_exports3.string().max(1e4).optional().describe("Filter by order ID"),
-      orderItemId: external_exports3.string().max(1e4).optional().describe("Filter by order item ID"),
-      productId: external_exports3.string().max(1e4).optional().describe("Filter by product ID"),
+      storeId: lsIdSchema.optional().describe("Filter by store ID"),
+      orderId: lsIdSchema.optional().describe("Filter by order ID"),
+      orderItemId: lsIdSchema.optional().describe("Filter by order item ID"),
+      productId: lsIdSchema.optional().describe("Filter by product ID"),
       include: external_exports3.string().max(1e4).optional().describe(
         "Comma-separated related resources to include (e.g. 'store,customer,order,order-item,product,license-key-instances')"
       ),
@@ -31157,13 +31303,16 @@ var licenseKeyTools = [
       idempotentHint: true,
       openWorldHint: true
     },
-    // Disabling a license key revokes a customer's access. Tag the call as
-    // destructive only when `disabled: true` so the rate limiter and audit log
-    // engage on revocation, while benign edits (expiry, activation limit) stay
-    // on the regular path.
-    isDestructive: (input) => input.disabled === true,
+    // Disabling a license key revokes a customer's access outright. Changing
+    // the activation limit can also revoke access -- setting it to 0, or to
+    // any value below the customer's current activation count, kicks
+    // already-activated instances offline. We can't tell from the input alone
+    // whether a given limit change shrinks or grows, so treat ANY
+    // `activationLimit` change as destructive alongside `disabled: true`.
+    // Benign edits (expiry) stay on the regular path.
+    isDestructive: (input) => input.disabled === true || input.activationLimit !== void 0,
     inputSchema: external_exports3.object({
-      licenseKeyId: external_exports3.string().max(1e4).describe("The license key ID to update"),
+      licenseKeyId: lsIdSchema.describe("The license key ID to update"),
       activationLimit: external_exports3.number().int().min(0).optional().describe("Maximum number of activations allowed (0 = unlimited)"),
       disabled: external_exports3.boolean().optional().describe("Set to true to disable this license key"),
       expiresAt: external_exports3.string().max(1e4).nullable().optional().describe("Expiry date (ISO 8601 format). Set to null to remove expiry.")
@@ -31263,14 +31412,14 @@ var orderItemTools = [
       openWorldHint: true
     },
     inputSchema: external_exports3.object({
-      orderItemId: external_exports3.string().max(1e4).describe("The order item ID"),
+      orderItemId: lsIdSchema.describe("The order item ID"),
       include: external_exports3.string().max(1e4).optional().describe("Comma-separated related resources to include (e.g. 'order,product,variant')")
     }),
     handler: getHandler("/order-items", "orderItemId")
   },
   {
     name: "ls_list_order_items",
-    description: "List all order items, optionally filtered by order or product. Results are paginated \u2014 check meta.page in the response for currentPage, lastPage, and total.",
+    description: "List all order items, optionally filtered by order or product. Results are paginated \u2014 check meta.page in the response for currentPage, lastPage, and total. Cross-store note: when LEMONSQUEEZY_ALLOWED_STORE_IDS is set, this tool requires at least one of: orderId, productId, variantId. Even with that set, pair with a scoped LemonSqueezy API key for true cross-store enforcement -- the API key's visibility is the true boundary.",
     annotations: {
       title: "List order items",
       readOnlyHint: true,
@@ -31279,13 +31428,14 @@ var orderItemTools = [
       openWorldHint: true
     },
     inputSchema: external_exports3.object({
-      orderId: external_exports3.string().max(1e4).optional().describe("Filter by order ID"),
-      productId: external_exports3.string().max(1e4).optional().describe("Filter by product ID"),
-      variantId: external_exports3.string().max(1e4).optional().describe("Filter by variant ID"),
+      orderId: lsIdSchema.optional().describe("Filter by order ID"),
+      productId: lsIdSchema.optional().describe("Filter by product ID"),
+      variantId: lsIdSchema.optional().describe("Filter by variant ID"),
       include: external_exports3.string().max(1e4).optional().describe("Comma-separated related resources to include (e.g. 'order,product,variant')"),
       pageNumber: external_exports3.number().int().min(1).optional().describe("Page number (1-indexed)"),
       pageSize: external_exports3.number().int().min(1).max(100).optional().describe("Results per page (1-100)")
     }),
+    requiredFilters: ["orderId", "productId", "variantId"],
     handler: listHandler("/order-items", { orderId: "order_id", productId: "product_id", variantId: "variant_id" })
   }
 ];
@@ -31303,7 +31453,7 @@ var orderTools = [
       openWorldHint: true
     },
     inputSchema: external_exports3.object({
-      orderId: external_exports3.string().max(1e4).describe("The order ID"),
+      orderId: lsIdSchema.describe("The order ID"),
       include: external_exports3.string().max(1e4).optional().describe(
         "Comma-separated related resources to include (e.g. 'store,customer,order-items,subscriptions,license-keys,discount-redemptions')"
       )
@@ -31321,7 +31471,7 @@ var orderTools = [
       openWorldHint: true
     },
     inputSchema: external_exports3.object({
-      storeId: external_exports3.string().max(1e4).optional().describe("Filter by store ID"),
+      storeId: lsIdSchema.optional().describe("Filter by store ID"),
       userEmail: external_exports3.string().email().max(320).optional().describe("Filter by user email"),
       include: external_exports3.string().max(1e4).optional().describe(
         "Comma-separated related resources to include (e.g. 'store,customer,order-items,subscriptions,license-keys,discount-redemptions')"
@@ -31342,7 +31492,7 @@ var orderTools = [
       openWorldHint: true
     },
     inputSchema: external_exports3.object({
-      orderId: external_exports3.string().max(1e4).describe("The order ID"),
+      orderId: lsIdSchema.describe("The order ID"),
       name: external_exports3.string().max(1e4).optional().describe("Customer name on the invoice"),
       address: external_exports3.string().max(1e4).optional().describe("Customer address on the invoice"),
       city: external_exports3.string().max(1e4).optional().describe("Customer city"),
@@ -31377,7 +31527,7 @@ var orderTools = [
       openWorldHint: true
     },
     inputSchema: external_exports3.object({
-      orderId: external_exports3.string().max(1e4).describe("The order ID to refund"),
+      orderId: lsIdSchema.describe("The order ID to refund"),
       amount: external_exports3.number().int().min(1).describe("Refund amount in cents (e.g. 1000 = $10.00)")
     }),
     handler: async (input) => {
@@ -31402,14 +31552,14 @@ var priceTools = [
       openWorldHint: true
     },
     inputSchema: external_exports3.object({
-      priceId: external_exports3.string().max(1e4).describe("The price ID"),
+      priceId: lsIdSchema.describe("The price ID"),
       include: external_exports3.string().max(1e4).optional().describe("Comma-separated related resources to include (e.g. 'variant')")
     }),
     handler: getHandler("/prices", "priceId")
   },
   {
     name: "ls_list_prices",
-    description: "List all prices, optionally filtered by variant. Results are paginated \u2014 check meta.page in the response for currentPage, lastPage, and total.",
+    description: "List all prices, optionally filtered by variant. Results are paginated \u2014 check meta.page in the response for currentPage, lastPage, and total. Cross-store note: when LEMONSQUEEZY_ALLOWED_STORE_IDS is set, this tool requires at least one of: variantId. Even with that set, pair with a scoped LemonSqueezy API key for true cross-store enforcement -- the API key's visibility is the true boundary.",
     annotations: {
       title: "List prices",
       readOnlyHint: true,
@@ -31418,11 +31568,12 @@ var priceTools = [
       openWorldHint: true
     },
     inputSchema: external_exports3.object({
-      variantId: external_exports3.string().max(1e4).optional().describe("Filter by variant ID"),
+      variantId: lsIdSchema.optional().describe("Filter by variant ID"),
       include: external_exports3.string().max(1e4).optional().describe("Comma-separated related resources to include (e.g. 'variant')"),
       pageNumber: external_exports3.number().int().min(1).optional().describe("Page number (1-indexed)"),
       pageSize: external_exports3.number().int().min(1).max(100).optional().describe("Results per page (1-100)")
     }),
+    requiredFilters: ["variantId"],
     handler: listHandler("/prices", { variantId: "variant_id" })
   }
 ];
@@ -31440,7 +31591,7 @@ var productTools = [
       openWorldHint: true
     },
     inputSchema: external_exports3.object({
-      productId: external_exports3.string().max(1e4).describe("The product ID"),
+      productId: lsIdSchema.describe("The product ID"),
       include: external_exports3.string().max(1e4).optional().describe("Comma-separated related resources to include (e.g. 'store,variants')")
     }),
     handler: getHandler("/products", "productId")
@@ -31456,7 +31607,7 @@ var productTools = [
       openWorldHint: true
     },
     inputSchema: external_exports3.object({
-      storeId: external_exports3.string().max(1e4).optional().describe("Filter by store ID"),
+      storeId: lsIdSchema.optional().describe("Filter by store ID"),
       include: external_exports3.string().max(1e4).optional().describe("Comma-separated related resources to include (e.g. 'store,variants')"),
       pageNumber: external_exports3.number().int().min(1).optional().describe("Page number (1-indexed)"),
       pageSize: external_exports3.number().int().min(1).max(100).optional().describe("Results per page (1-100)")
@@ -31478,7 +31629,7 @@ var storeTools = [
       openWorldHint: true
     },
     inputSchema: external_exports3.object({
-      storeId: external_exports3.string().max(1e4).describe("The store ID"),
+      storeId: lsIdSchema.describe("The store ID"),
       include: external_exports3.string().max(1e4).optional().describe(
         "Comma-separated related resources to include (e.g. 'products,discounts,license-keys,subscriptions,webhooks')"
       )
@@ -31519,7 +31670,7 @@ var subscriptionInvoiceTools = [
       openWorldHint: true
     },
     inputSchema: external_exports3.object({
-      subscriptionInvoiceId: external_exports3.string().max(1e4).describe("The subscription invoice ID"),
+      subscriptionInvoiceId: lsIdSchema.describe("The subscription invoice ID"),
       include: external_exports3.string().max(1e4).optional().describe("Comma-separated related resources to include (e.g. 'store,subscription')")
     }),
     handler: getHandler("/subscription-invoices", "subscriptionInvoiceId")
@@ -31535,8 +31686,8 @@ var subscriptionInvoiceTools = [
       openWorldHint: true
     },
     inputSchema: external_exports3.object({
-      storeId: external_exports3.string().max(1e4).optional().describe("Filter by store ID"),
-      subscriptionId: external_exports3.string().max(1e4).optional().describe("Filter by subscription ID"),
+      storeId: lsIdSchema.optional().describe("Filter by store ID"),
+      subscriptionId: lsIdSchema.optional().describe("Filter by subscription ID"),
       status: external_exports3.enum(["pending", "paid", "void", "refunded"]).optional().describe("Filter by invoice status"),
       refunded: external_exports3.boolean().optional().describe("Filter by refunded status"),
       include: external_exports3.string().max(1e4).optional().describe("Comma-separated related resources to include (e.g. 'store,subscription')"),
@@ -31561,7 +31712,7 @@ var subscriptionInvoiceTools = [
       openWorldHint: true
     },
     inputSchema: external_exports3.object({
-      subscriptionInvoiceId: external_exports3.string().max(1e4).describe("The subscription invoice ID"),
+      subscriptionInvoiceId: lsIdSchema.describe("The subscription invoice ID"),
       name: external_exports3.string().max(1e4).optional().describe("Customer name on the invoice"),
       address: external_exports3.string().max(1e4).optional().describe("Customer address on the invoice"),
       city: external_exports3.string().max(1e4).optional().describe("Customer city"),
@@ -31598,7 +31749,7 @@ var subscriptionInvoiceTools = [
       openWorldHint: true
     },
     inputSchema: external_exports3.object({
-      subscriptionInvoiceId: external_exports3.string().max(1e4).describe("The subscription invoice ID to refund"),
+      subscriptionInvoiceId: lsIdSchema.describe("The subscription invoice ID to refund"),
       amount: external_exports3.number().int().min(1).describe("Refund amount in cents (e.g. 1000 = $10.00)")
     }),
     handler: async (input) => {
@@ -31627,14 +31778,14 @@ var subscriptionItemTools = [
       openWorldHint: true
     },
     inputSchema: external_exports3.object({
-      subscriptionItemId: external_exports3.string().max(1e4).describe("The subscription item ID"),
+      subscriptionItemId: lsIdSchema.describe("The subscription item ID"),
       include: external_exports3.string().max(1e4).optional().describe("Comma-separated related resources to include (e.g. 'subscription,price,usage-records')")
     }),
     handler: getHandler("/subscription-items", "subscriptionItemId")
   },
   {
     name: "ls_list_subscription_items",
-    description: "List all subscription items, optionally filtered by subscription or price. Results are paginated \u2014 check meta.page in the response for currentPage, lastPage, and total.",
+    description: "List all subscription items, optionally filtered by subscription or price. Results are paginated \u2014 check meta.page in the response for currentPage, lastPage, and total. Cross-store note: when LEMONSQUEEZY_ALLOWED_STORE_IDS is set, this tool requires at least one of: subscriptionId, priceId. Even with that set, pair with a scoped LemonSqueezy API key for true cross-store enforcement -- the API key's visibility is the true boundary.",
     annotations: {
       title: "List subscription items",
       readOnlyHint: true,
@@ -31643,12 +31794,13 @@ var subscriptionItemTools = [
       openWorldHint: true
     },
     inputSchema: external_exports3.object({
-      subscriptionId: external_exports3.string().max(1e4).optional().describe("Filter by subscription ID"),
-      priceId: external_exports3.string().max(1e4).optional().describe("Filter by price ID"),
+      subscriptionId: lsIdSchema.optional().describe("Filter by subscription ID"),
+      priceId: lsIdSchema.optional().describe("Filter by price ID"),
       include: external_exports3.string().max(1e4).optional().describe("Comma-separated related resources to include (e.g. 'subscription,price,usage-records')"),
       pageNumber: external_exports3.number().int().min(1).optional().describe("Page number (1-indexed)"),
       pageSize: external_exports3.number().int().min(1).max(100).optional().describe("Results per page (1-100)")
     }),
+    requiredFilters: ["subscriptionId", "priceId"],
     handler: listHandler("/subscription-items", { subscriptionId: "subscription_id", priceId: "price_id" })
   },
   {
@@ -31662,7 +31814,7 @@ var subscriptionItemTools = [
       openWorldHint: true
     },
     inputSchema: external_exports3.object({
-      subscriptionItemId: external_exports3.string().max(1e4).describe("The subscription item ID to update"),
+      subscriptionItemId: lsIdSchema.describe("The subscription item ID to update"),
       quantity: external_exports3.number().int().min(1).describe("New quantity for the subscription item")
     }),
     handler: async (input) => {
@@ -31686,7 +31838,7 @@ var subscriptionItemTools = [
       openWorldHint: true
     },
     inputSchema: external_exports3.object({
-      subscriptionItemId: external_exports3.string().max(1e4).describe("The subscription item ID")
+      subscriptionItemId: lsIdSchema.describe("The subscription item ID")
     }),
     handler: async (input) => {
       return apiGet(`/subscription-items/${encodePath(input.subscriptionItemId)}/current-usage`);
@@ -31707,7 +31859,7 @@ var subscriptionTools = [
       openWorldHint: true
     },
     inputSchema: external_exports3.object({
-      subscriptionId: external_exports3.string().max(1e4).describe("The subscription ID"),
+      subscriptionId: lsIdSchema.describe("The subscription ID"),
       include: external_exports3.string().max(1e4).optional().describe(
         "Comma-separated related resources to include (e.g. 'store,customer,order,order-item,product,variant,subscription-items,subscription-invoices')"
       )
@@ -31725,11 +31877,11 @@ var subscriptionTools = [
       openWorldHint: true
     },
     inputSchema: external_exports3.object({
-      storeId: external_exports3.string().max(1e4).optional().describe("Filter by store ID"),
-      orderId: external_exports3.string().max(1e4).optional().describe("Filter by order ID"),
-      orderItemId: external_exports3.string().max(1e4).optional().describe("Filter by order item ID"),
-      productId: external_exports3.string().max(1e4).optional().describe("Filter by product ID"),
-      variantId: external_exports3.string().max(1e4).optional().describe("Filter by variant ID"),
+      storeId: lsIdSchema.optional().describe("Filter by store ID"),
+      orderId: lsIdSchema.optional().describe("Filter by order ID"),
+      orderItemId: lsIdSchema.optional().describe("Filter by order item ID"),
+      productId: lsIdSchema.optional().describe("Filter by product ID"),
+      variantId: lsIdSchema.optional().describe("Filter by variant ID"),
       userEmail: external_exports3.string().email().max(320).optional().describe("Filter by user email"),
       status: external_exports3.enum(["on_trial", "active", "paused", "past_due", "unpaid", "cancelled", "expired"]).optional().describe("Filter by subscription status"),
       include: external_exports3.string().max(1e4).optional().describe(
@@ -31770,8 +31922,8 @@ var subscriptionTools = [
     //   - disableProrations         toggle on plan-change behavior
     isDestructive: (input) => typeof input.pause === "string" && input.pause !== "resume" || typeof input.variantId === "string",
     inputSchema: external_exports3.object({
-      subscriptionId: external_exports3.string().max(1e4).describe("The subscription ID to update"),
-      variantId: external_exports3.string().max(1e4).regex(/^[1-9]\d*$/, "variantId must be a positive integer string (e.g. '12345')").optional().describe("New variant ID for plan switching"),
+      subscriptionId: lsIdSchema.describe("The subscription ID to update"),
+      variantId: lsIdSchema.optional().describe("New variant ID for plan switching"),
       pause: external_exports3.enum(["void", "free", "resume"]).optional().describe("Pause mode: 'void' (pause, skip billing), 'free' (pause, keep access free), or 'resume' to unpause"),
       cancelled: external_exports3.literal(false).optional().describe(
         "Set to false to un-cancel a subscription before it expires. To cancel, use ls_cancel_subscription instead."
@@ -31810,7 +31962,7 @@ var subscriptionTools = [
       openWorldHint: true
     },
     inputSchema: external_exports3.object({
-      subscriptionId: external_exports3.string().max(1e4).describe("The subscription ID to cancel")
+      subscriptionId: lsIdSchema.describe("The subscription ID to cancel")
     }),
     handler: async (input) => {
       return apiDelete(`/subscriptions/${encodePath(input.subscriptionId)}`);
@@ -31831,14 +31983,14 @@ var usageRecordTools = [
       openWorldHint: true
     },
     inputSchema: external_exports3.object({
-      usageRecordId: external_exports3.string().max(1e4).describe("The usage record ID"),
+      usageRecordId: lsIdSchema.describe("The usage record ID"),
       include: external_exports3.string().max(1e4).optional().describe("Comma-separated related resources to include (e.g. 'subscription-item')")
     }),
     handler: getHandler("/usage-records", "usageRecordId")
   },
   {
     name: "ls_list_usage_records",
-    description: "List all usage records, optionally filtered by subscription item. Results are paginated \u2014 check meta.page in the response for currentPage, lastPage, and total.",
+    description: "List all usage records, optionally filtered by subscription item. Results are paginated \u2014 check meta.page in the response for currentPage, lastPage, and total. Cross-store note: when LEMONSQUEEZY_ALLOWED_STORE_IDS is set, this tool requires at least one of: subscriptionItemId. Even with that set, pair with a scoped LemonSqueezy API key for true cross-store enforcement -- the API key's visibility is the true boundary.",
     annotations: {
       title: "List usage records",
       readOnlyHint: true,
@@ -31847,11 +31999,12 @@ var usageRecordTools = [
       openWorldHint: true
     },
     inputSchema: external_exports3.object({
-      subscriptionItemId: external_exports3.string().max(1e4).optional().describe("Filter by subscription item ID"),
+      subscriptionItemId: lsIdSchema.optional().describe("Filter by subscription item ID"),
       include: external_exports3.string().max(1e4).optional().describe("Comma-separated related resources to include (e.g. 'subscription-item')"),
       pageNumber: external_exports3.number().int().min(1).optional().describe("Page number (1-indexed)"),
       pageSize: external_exports3.number().int().min(1).max(100).optional().describe("Results per page (1-100)")
     }),
+    requiredFilters: ["subscriptionItemId"],
     handler: listHandler("/usage-records", { subscriptionItemId: "subscription_item_id" })
   },
   {
@@ -31868,7 +32021,7 @@ var usageRecordTools = [
       openWorldHint: true
     },
     inputSchema: external_exports3.object({
-      subscriptionItemId: external_exports3.string().max(1e4).describe("The subscription item ID to report usage for"),
+      subscriptionItemId: lsIdSchema.describe("The subscription item ID to report usage for"),
       quantity: external_exports3.number().int().min(0).describe("The usage quantity to report"),
       action: external_exports3.enum(["increment", "set"]).optional().describe("How to apply the quantity: 'increment' (add to current, default) or 'set' (replace current)")
     }),
@@ -31924,14 +32077,14 @@ var variantTools = [
       openWorldHint: true
     },
     inputSchema: external_exports3.object({
-      variantId: external_exports3.string().max(1e4).describe("The variant ID"),
+      variantId: lsIdSchema.describe("The variant ID"),
       include: external_exports3.string().max(1e4).optional().describe("Comma-separated related resources to include (e.g. 'product,files')")
     }),
     handler: getHandler("/variants", "variantId")
   },
   {
     name: "ls_list_variants",
-    description: "List all variants, optionally filtered by product. Results are paginated \u2014 check meta.page in the response for currentPage, lastPage, and total.",
+    description: "List all variants, optionally filtered by product. Results are paginated \u2014 check meta.page in the response for currentPage, lastPage, and total. Cross-store note: when LEMONSQUEEZY_ALLOWED_STORE_IDS is set, this tool requires at least one of: productId. Even with that set, pair with a scoped LemonSqueezy API key for true cross-store enforcement -- the API key's visibility is the true boundary.",
     annotations: {
       title: "List variants",
       readOnlyHint: true,
@@ -31940,11 +32093,12 @@ var variantTools = [
       openWorldHint: true
     },
     inputSchema: external_exports3.object({
-      productId: external_exports3.string().max(1e4).optional().describe("Filter by product ID"),
+      productId: lsIdSchema.optional().describe("Filter by product ID"),
       include: external_exports3.string().max(1e4).optional().describe("Comma-separated related resources to include (e.g. 'product,files')"),
       pageNumber: external_exports3.number().int().min(1).optional().describe("Page number (1-indexed)"),
       pageSize: external_exports3.number().int().min(1).max(100).optional().describe("Results per page (1-100)")
     }),
+    requiredFilters: ["productId"],
     handler: listHandler("/variants", { productId: "product_id" })
   }
 ];
@@ -31962,7 +32116,7 @@ var webhookTools = [
       openWorldHint: true
     },
     inputSchema: external_exports3.object({
-      webhookId: external_exports3.string().max(1e4).describe("The webhook ID"),
+      webhookId: lsIdSchema.describe("The webhook ID"),
       include: external_exports3.string().max(1e4).optional().describe("Comma-separated related resources to include (e.g. 'store')")
     }),
     handler: getHandler("/webhooks", "webhookId")
@@ -31978,7 +32132,7 @@ var webhookTools = [
       openWorldHint: true
     },
     inputSchema: external_exports3.object({
-      storeId: external_exports3.string().max(1e4).optional().describe("Filter by store ID"),
+      storeId: lsIdSchema.optional().describe("Filter by store ID"),
       include: external_exports3.string().max(1e4).optional().describe("Comma-separated related resources to include (e.g. 'store')"),
       pageNumber: external_exports3.number().int().min(1).optional().describe("Page number (1-indexed)"),
       pageSize: external_exports3.number().int().min(1).max(100).optional().describe("Results per page (1-100)")
@@ -31996,7 +32150,7 @@ var webhookTools = [
       openWorldHint: true
     },
     inputSchema: external_exports3.object({
-      storeId: external_exports3.string().max(1e4).describe("The store ID"),
+      storeId: lsIdSchema.describe("The store ID"),
       url: external_exports3.string().max(1e4).describe("The URL to send webhook events to"),
       events: external_exports3.array(external_exports3.string()).describe(
         "Event types to subscribe to (e.g. ['order_created', 'subscription_created', 'subscription_updated', 'subscription_cancelled', 'subscription_payment_success', 'subscription_payment_failed', 'license_key_created'])"
@@ -32030,7 +32184,7 @@ var webhookTools = [
       openWorldHint: true
     },
     inputSchema: external_exports3.object({
-      webhookId: external_exports3.string().max(1e4).describe("The webhook ID to update"),
+      webhookId: lsIdSchema.describe("The webhook ID to update"),
       url: external_exports3.string().max(1e4).optional().describe("New URL to send webhook events to"),
       events: external_exports3.array(external_exports3.string()).optional().describe("Updated list of event types to subscribe to"),
       secret: external_exports3.string().min(6).max(40).optional().describe("New signing secret")
@@ -32060,7 +32214,7 @@ var webhookTools = [
       openWorldHint: true
     },
     inputSchema: external_exports3.object({
-      webhookId: external_exports3.string().max(1e4).describe("The webhook ID to delete")
+      webhookId: lsIdSchema.describe("The webhook ID to delete")
     }),
     handler: async (input) => {
       return apiDelete(`/webhooks/${encodePath(input.webhookId)}`);
@@ -32069,7 +32223,7 @@ var webhookTools = [
 ];
 
 // src/index.ts
-var version2 = true ? "0.6.2" : (await null).createRequire(import.meta.url)("../package.json").version;
+var version2 = true ? "0.7.1" : (await null).createRequire(import.meta.url)("../package.json").version;
 var subcommand = process.argv[2];
 if (subcommand === "version" || subcommand === "--version") {
   console.log(version2);
@@ -32103,7 +32257,6 @@ var server = new McpServer({
   version: version2
 });
 for (const tool of allTools) {
-  const toolAcceptsStoreId = "storeId" in tool.inputSchema.shape;
   server.tool(
     tool.name,
     tool.description,
@@ -32114,7 +32267,7 @@ for (const tool of allTools) {
       const start = Date.now();
       try {
         if (isDestructive) checkDestructiveRateLimit();
-        checkStoreScopedToolInput(toolAcceptsStoreId, input);
+        checkStoreScopedToolInput(tool, input);
         const result = await tool.handler(input);
         const response = result;
         const latency_ms = Date.now() - start;
@@ -32126,7 +32279,7 @@ for (const tool of allTools) {
           request_id: response.requestId,
           error: response.ok ? void 0 : response.error,
           audit: isDestructive ? true : void 0,
-          inputs: isDestructive ? input : void 0
+          inputs: isDestructive ? redactSecrets(input) : void 0
         });
         if (!response.ok) {
           return {
@@ -32153,7 +32306,7 @@ for (const tool of allTools) {
           latency_ms,
           error: message,
           audit: isDestructive ? true : void 0,
-          inputs: isDestructive ? input : void 0
+          inputs: isDestructive ? redactSecrets(input) : void 0
         });
         return {
           content: [{ type: "text", text: `Error: ${message}` }],

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@yawlabs/lemonsqueezy-mcp",
-  "version": "0.6.2",
+  "version": "0.7.1",
   "description": "LemonSqueezy MCP server for managing your store from AI assistants",
   "license": "MIT",
   "author": "YawLabs <contact@yaw.sh>",