@yawlabs/lemonsqueezy-mcp 0.7.0 → 0.8.1

package/README.md

@@ -8,6 +8,37 @@ MCP server for the [LemonSqueezy](https://lemonsqueezy.com) API. Manage your sto
 npx @yawlabs/lemonsqueezy-mcp
 ```
 
+Or one-click install via Smithery:
+
+```bash
+npx -y @smithery/cli install @yawlabs/lemonsqueezy-mcp --client claude
+```
+
+Smithery prompts for your env vars (API key, optional guardrails) and writes the config into your client for you.
+
+## What it looks like
+
+Once configured, you can ask your AI assistant store-management questions in plain English and it routes them through the MCP tools:
+
+```
+You:  How much did we make from the "Pro Annual" plan last month?
+Claude: [calls ls_list_subscriptions, ls_get_variant, ls_list_subscription_invoices]
+        Pro Annual brought in $14,280 across 84 active subscriptions in April.
+        Three of those were upgrades from monthly; none churned.
+
+You:  Refund order #LS-1234 in full.
+Claude: [calls ls_get_order to fetch the total, then ls_refund_order with amount = total]
+        Refunded $99.00 against order LS-1234. The customer's card will see the
+        credit in 5-10 business days.
+
+You:  Disable license key abc-123 for the customer who reported abuse.
+Claude: [calls ls_list_license_keys to find the ID, then ls_update_license_key with disabled: true]
+        License key disabled. Their existing activations will fail validation
+        on the next check.
+```
+
+Guardrails (refund cap, rate limit, store allowlist) catch the obvious mistakes before they reach LemonSqueezy. See [Configuration](#configuration) for the env vars that turn them on.
+
 ## Setup
 
 Set your LemonSqueezy API key as an environment variable:
@@ -18,6 +49,17 @@ export LEMONSQUEEZY_API_KEY="your-api-key"
 
 Get your API key from your [LemonSqueezy dashboard](https://app.lemonsqueezy.com/settings/api).
 
+### Docker
+
+A multi-stage `Dockerfile` is included at the repo root. The runtime image is a single bundled file on `node:20-alpine` running as the non-root `node` user, with no port exposed (stdio transport).
+
+```bash
+docker build -t yawlabs/lemonsqueezy-mcp .
+docker run --rm -i -e LEMONSQUEEZY_API_KEY="your-api-key" yawlabs/lemonsqueezy-mcp
+```
+
+A byte-identical `Containerfile` is also provided for Podman users.
+
 ### Claude Code
 
 Add to your MCP config:
@@ -174,6 +216,7 @@ All configuration is via environment variables. Only `LEMONSQUEEZY_API_KEY` (or
 | --- | --- |
 | `LEMONSQUEEZY_API_KEY` | LemonSqueezy API token. |
 | `LEMONSQUEEZY_API_KEY_COMMAND` | Command whose stdout produces the API key. Overrides `LEMONSQUEEZY_API_KEY`. Output is cached for 1 hour. Use this to pull short-lived credentials from a vault (`op read`, `gcloud secrets versions access`, etc.) without writing them to env vars. The cache is keyed by the command string, so changing it mid-process refreshes on the next request; it is also invalidated automatically on a 401/403 from the API, so a key rotated upstream takes effect on the next call without waiting for the TTL. |
+| `LEMONSQUEEZY_TEST_API_KEY` | Optional test-mode key. When set and non-empty, it takes precedence over `LEMONSQUEEZY_API_KEY` (but not over `LEMONSQUEEZY_API_KEY_COMMAND`). On first activation per process, the server prints a one-line JSON `test_mode` notice to stderr so you can confirm test mode is engaged. Use this to point the server at a sandbox/test store without unsetting your production key. |
 | `LEMONSQUEEZY_ALLOWED_STORE_IDS` | Comma-separated allowlist of store IDs. When set: (1) any tool whose input includes a `storeId` rejects calls to a non-allowed store; (2) tools that *accept* a `storeId` filter (e.g. `ls_list_orders`, `ls_list_subscriptions`) require it — calls without one are blocked so a missing filter cannot return data from every store the API key can see. Tools with no `storeId` field at all (e.g. `ls_refund_order`, `ls_cancel_subscription`, `ls_archive_customer`, `ls_delete_webhook`, `ls_delete_discount`, `ls_update_license_key`, `ls_list_stores`) route by their own resource ID and are **not** gated by this allowlist. For those, the only authoritative store boundary is the API key itself — pair this setting with a LemonSqueezy API key scoped to the same store(s), and pair with `LEMONSQUEEZY_MAX_REFUND_AMOUNT_CENTS` / `LEMONSQUEEZY_DESTRUCTIVE_RATE_LIMIT` for additional defense in depth. |
 | `LEMONSQUEEZY_MAX_REFUND_AMOUNT_CENTS` | Rejects `ls_refund_order` and `ls_refund_subscription_invoice` calls above this amount. |
 | `LEMONSQUEEZY_DESTRUCTIVE_RATE_LIMIT` | Max destructive tool calls per 60-second rolling window. In-process limit — per MCP server instance, not global; each `npx` cold start resets the window. Counts include `ls_update_license_key` calls that set `disabled: true`, and `ls_update_subscription` calls that pause or switch plan. |
@@ -187,6 +230,14 @@ Each line: `{ts, event, tool?, method?, path?, status, latency_ms, request_id?,
 
 HTTP errors include the upstream `X-Request-Id` when present, so support tickets to LemonSqueezy can reference the exact call.
 
+## Resources
+
+The server exposes one MCP Resource for clients that prefer structural retrieval over parsing stderr:
+
+| URI | MIME type | Contents |
+| --- | --- | --- |
+| `lemonsqueezy://audit-log` | `application/x-ndjson` | The most recent destructive tool calls and outcomes (rate-limit blocks, refund-cap blocks, exceptions, successes). Bounded ring buffer of the last 1000 entries, most-recent-first, resets on server restart. Secret-shaped input fields are redacted before they reach the buffer. |
+
 ## Operating the server unattended
 
 For unattended/agentic use against a live store, we recommend:
@@ -216,15 +267,36 @@ npm run test:integration  # requires LEMONSQUEEZY_TEST_API_KEY + LEMONSQUEEZY_TE
 
 ## Releasing
 
-Releases are cut locally — there is no CI pipeline. From a clean checkout of `main`:
+Two paths from a clean checkout of `main`. Both produce the same artifact (npm publish with provenance + GitHub release).
+
+### 1. Tag-and-let-CI (preferred)
 
 ```bash
-./release.sh 0.6.0
+# 1. Bump version
+npm version X.Y.Z --no-git-tag-version
+
+# 2. Commit
+git add package.json && git commit -m "vX.Y.Z"
+
+# 3. Annotated tag (lightweight tags are silently skipped by --follow-tags)
+git tag -a vX.Y.Z -m "vX.Y.Z"
+
+# 4. Push commit + tag
+git push origin main --follow-tags
+
+# 5. Confirm the Release workflow fired (not just CI on the bump commit)
+gh run list --limit 2
 ```
 
-The script lints, tests, builds, bumps the version, commits and tags, pushes to `origin`, publishes to npm, and creates a GitHub release. Each step is idempotent — re-running with the same version after a partial failure resumes from where it stopped.
+The tag push triggers `.github/workflows/release.yml`, which runs `release.sh` in CI mode: lint, test, build, npm publish (with `--provenance`) using the org-level `NPM_TOKEN` secret, then GitHub release creation, then a smoke test against the published tarball. No local `npm login` needed.
+
+### 2. Local end-to-end
+
+```bash
+./release.sh X.Y.Z
+```
 
-One-time setup on the release machine:
+Does the same steps 1–7 on the workstation: lint, test, build, bump, commit, annotated tag, push, npm publish, GitHub release, verify. Idempotent — safe to re-run with the same version after a partial failure. Requires one-time setup:
 
 ```bash
 npm login --auth-type=web   # publisher of @yawlabs/lemonsqueezy-mcp

package/dist/index.js

@@ -3105,6 +3105,9 @@ var require_utils = __commonJS({
     "use strict";
     var isUUID = RegExp.prototype.test.bind(/^[\da-f]{8}-[\da-f]{4}-[\da-f]{4}-[\da-f]{4}-[\da-f]{12}$/iu);
     var isIPv4 = RegExp.prototype.test.bind(/^(?:(?:25[0-5]|2[0-4]\d|1\d{2}|[1-9]\d|\d)\.){3}(?:25[0-5]|2[0-4]\d|1\d{2}|[1-9]\d|\d)$/u);
+    var isHexPair = RegExp.prototype.test.bind(/^[\da-f]{2}$/iu);
+    var isUnreserved = RegExp.prototype.test.bind(/^[\da-z\-._~]$/iu);
+    var isPathCharacter = RegExp.prototype.test.bind(/^[\da-z\-._~!$&'()*+,;=:@/]$/iu);
     function stringArrayToHexStripped(input) {
       let acc = "";
       let code = 0;
@@ -3130,20 +3133,20 @@ var require_utils = __commonJS({
       return acc;
     }
     var nonSimpleDomain = RegExp.prototype.test.bind(/[^!"$&'()*+,\-.;=_`a-z{}~]/u);
-    function consumeIsZone(buffer) {
-      buffer.length = 0;
+    function consumeIsZone(buffer2) {
+      buffer2.length = 0;
       return true;
     }
-    function consumeHextets(buffer, address, output) {
-      if (buffer.length) {
-        const hex3 = stringArrayToHexStripped(buffer);
+    function consumeHextets(buffer2, address, output) {
+      if (buffer2.length) {
+        const hex3 = stringArrayToHexStripped(buffer2);
         if (hex3 !== "") {
           address.push(hex3);
         } else {
           output.error = true;
           return false;
         }
-        buffer.length = 0;
+        buffer2.length = 0;
       }
       return true;
     }
@@ -3151,7 +3154,7 @@ var require_utils = __commonJS({
       let tokenCount = 0;
       const output = { error: false, address: "", zone: "" };
       const address = [];
-      const buffer = [];
+      const buffer2 = [];
       let endipv6Encountered = false;
       let endIpv6 = false;
       let consume = consumeHextets;
@@ -3164,7 +3167,7 @@ var require_utils = __commonJS({
           if (endipv6Encountered === true) {
             endIpv6 = true;
           }
-          if (!consume(buffer, address, output)) {
+          if (!consume(buffer2, address, output)) {
             break;
           }
           if (++tokenCount > 7) {
@@ -3177,22 +3180,22 @@ var require_utils = __commonJS({
           address.push(":");
           continue;
         } else if (cursor === "%") {
-          if (!consume(buffer, address, output)) {
+          if (!consume(buffer2, address, output)) {
             break;
           }
           consume = consumeIsZone;
         } else {
-          buffer.push(cursor);
+          buffer2.push(cursor);
           continue;
         }
       }
-      if (buffer.length) {
+      if (buffer2.length) {
         if (consume === consumeIsZone) {
-          output.zone = buffer.join("");
+          output.zone = buffer2.join("");
         } else if (endIpv6) {
-          address.push(buffer.join(""));
+          address.push(buffer2.join(""));
         } else {
-          address.push(stringArrayToHexStripped(buffer));
+          address.push(stringArrayToHexStripped(buffer2));
         }
       }
       output.address = address.join("");
@@ -3297,27 +3300,77 @@ var require_utils = __commonJS({
       }
       return output.join("");
     }
-    function normalizeComponentEncoding(component, esc2) {
-      const func = esc2 !== true ? escape : unescape;
-      if (component.scheme !== void 0) {
-        component.scheme = func(component.scheme);
-      }
-      if (component.userinfo !== void 0) {
-        component.userinfo = func(component.userinfo);
-      }
-      if (component.host !== void 0) {
-        component.host = func(component.host);
+    var HOST_DELIMS = { "@": "%40", "/": "%2F", "?": "%3F", "#": "%23", ":": "%3A" };
+    var HOST_DELIM_RE = /[@/?#:]/g;
+    var HOST_DELIM_NO_COLON_RE = /[@/?#]/g;
+    function reescapeHostDelimiters(host, isIP) {
+      const re = isIP ? HOST_DELIM_NO_COLON_RE : HOST_DELIM_RE;
+      re.lastIndex = 0;
+      return host.replace(re, (ch) => HOST_DELIMS[ch]);
+    }
+    function normalizePercentEncoding(input, decodeUnreserved = false) {
+      if (input.indexOf("%") === -1) {
+        return input;
       }
-      if (component.path !== void 0) {
-        component.path = func(component.path);
+      let output = "";
+      for (let i = 0; i < input.length; i++) {
+        if (input[i] === "%" && i + 2 < input.length) {
+          const hex3 = input.slice(i + 1, i + 3);
+          if (isHexPair(hex3)) {
+            const normalizedHex = hex3.toUpperCase();
+            const decoded = String.fromCharCode(parseInt(normalizedHex, 16));
+            if (decodeUnreserved && isUnreserved(decoded)) {
+              output += decoded;
+            } else {
+              output += "%" + normalizedHex;
+            }
+            i += 2;
+            continue;
+          }
+        }
+        output += input[i];
       }
-      if (component.query !== void 0) {
-        component.query = func(component.query);
+      return output;
+    }
+    function normalizePathEncoding(input) {
+      let output = "";
+      for (let i = 0; i < input.length; i++) {
+        if (input[i] === "%" && i + 2 < input.length) {
+          const hex3 = input.slice(i + 1, i + 3);
+          if (isHexPair(hex3)) {
+            const normalizedHex = hex3.toUpperCase();
+            const decoded = String.fromCharCode(parseInt(normalizedHex, 16));
+            if (decoded !== "." && isUnreserved(decoded)) {
+              output += decoded;
+            } else {
+              output += "%" + normalizedHex;
+            }
+            i += 2;
+            continue;
+          }
+        }
+        if (isPathCharacter(input[i])) {
+          output += input[i];
+        } else {
+          output += escape(input[i]);
+        }
       }
-      if (component.fragment !== void 0) {
-        component.fragment = func(component.fragment);
+      return output;
+    }
+    function escapePreservingEscapes(input) {
+      let output = "";
+      for (let i = 0; i < input.length; i++) {
+        if (input[i] === "%" && i + 2 < input.length) {
+          const hex3 = input.slice(i + 1, i + 3);
+          if (isHexPair(hex3)) {
+            output += "%" + hex3.toUpperCase();
+            i += 2;
+            continue;
+          }
+        }
+        output += escape(input[i]);
       }
-      return component;
+      return output;
     }
     function recomposeAuthority(component) {
       const uriTokens = [];
@@ -3332,7 +3385,7 @@ var require_utils = __commonJS({
           if (ipV6res.isIPV6 === true) {
             host = `[${ipV6res.escapedHost}]`;
           } else {
-            host = component.host;
+            host = reescapeHostDelimiters(host, false);
           }
         }
         uriTokens.push(host);
@@ -3346,7 +3399,10 @@ var require_utils = __commonJS({
     module.exports = {
       nonSimpleDomain,
       recomposeAuthority,
-      normalizeComponentEncoding,
+      reescapeHostDelimiters,
+      normalizePercentEncoding,
+      normalizePathEncoding,
+      escapePreservingEscapes,
       removeDotSegments,
       isIPv4,
       isUUID,
@@ -3570,12 +3626,12 @@ var require_schemes = __commonJS({
 var require_fast_uri = __commonJS({
   "node_modules/fast-uri/index.js"(exports, module) {
     "use strict";
-    var { normalizeIPv6, removeDotSegments, recomposeAuthority, normalizeComponentEncoding, isIPv4, nonSimpleDomain } = require_utils();
+    var { normalizeIPv6, removeDotSegments, recomposeAuthority, normalizePercentEncoding, normalizePathEncoding, escapePreservingEscapes, reescapeHostDelimiters, isIPv4, nonSimpleDomain } = require_utils();
     var { SCHEMES, getSchemeHandler } = require_schemes();
     function normalize(uri, options) {
       if (typeof uri === "string") {
         uri = /** @type {T} */
-        serialize(parse3(uri, options), options);
+        normalizeString(uri, options);
       } else if (typeof uri === "object") {
         uri = /** @type {T} */
         parse3(serialize(uri, options), options);
@@ -3642,19 +3698,9 @@ var require_fast_uri = __commonJS({
       return target;
     }
     function equal(uriA, uriB, options) {
-      if (typeof uriA === "string") {
-        uriA = unescape(uriA);
-        uriA = serialize(normalizeComponentEncoding(parse3(uriA, options), true), { ...options, skipEscape: true });
-      } else if (typeof uriA === "object") {
-        uriA = serialize(normalizeComponentEncoding(uriA, true), { ...options, skipEscape: true });
-      }
-      if (typeof uriB === "string") {
-        uriB = unescape(uriB);
-        uriB = serialize(normalizeComponentEncoding(parse3(uriB, options), true), { ...options, skipEscape: true });
-      } else if (typeof uriB === "object") {
-        uriB = serialize(normalizeComponentEncoding(uriB, true), { ...options, skipEscape: true });
-      }
-      return uriA.toLowerCase() === uriB.toLowerCase();
+      const normalizedA = normalizeComparableURI(uriA, options);
+      const normalizedB = normalizeComparableURI(uriB, options);
+      return normalizedA !== void 0 && normalizedB !== void 0 && normalizedA.toLowerCase() === normalizedB.toLowerCase();
     }
     function serialize(cmpts, opts) {
       const component = {
@@ -3679,12 +3725,12 @@ var require_fast_uri = __commonJS({
       if (schemeHandler && schemeHandler.serialize) schemeHandler.serialize(component, options);
       if (component.path !== void 0) {
         if (!options.skipEscape) {
-          component.path = escape(component.path);
+          component.path = escapePreservingEscapes(component.path);
           if (component.scheme !== void 0) {
             component.path = component.path.split("%3A").join(":");
           }
         } else {
-          component.path = unescape(component.path);
+          component.path = normalizePercentEncoding(component.path);
         }
       }
       if (options.reference !== "suffix" && component.scheme) {
@@ -3719,7 +3765,16 @@ var require_fast_uri = __commonJS({
       return uriTokens.join("");
     }
     var URI_PARSE = /^(?:([^#/:?]+):)?(?:\/\/((?:([^#/?@]*)@)?(\[[^#/?\]]+\]|[^#/:?]*)(?::(\d*))?))?([^#?]*)(?:\?([^#]*))?(?:#((?:.|[\n\r])*))?/u;
-    function parse3(uri, opts) {
+    function getParseError(parsed, matches) {
+      if (matches[2] !== void 0 && parsed.path && parsed.path[0] !== "/") {
+        return 'URI path must start with "/" when authority is present.';
+      }
+      if (typeof parsed.port === "number" && (parsed.port < 0 || parsed.port > 65535)) {
+        return "URI port is malformed.";
+      }
+      return void 0;
+    }
+    function parseWithStatus(uri, opts) {
       const options = Object.assign({}, opts);
       const parsed = {
         scheme: void 0,
@@ -3730,6 +3785,7 @@ var require_fast_uri = __commonJS({
         query: void 0,
         fragment: void 0
       };
+      let malformedAuthorityOrPort = false;
       let isIP = false;
       if (options.reference === "suffix") {
         if (options.scheme) {
@@ -3750,6 +3806,11 @@ var require_fast_uri = __commonJS({
         if (isNaN(parsed.port)) {
           parsed.port = matches[5];
         }
+        const parseError = getParseError(parsed, matches);
+        if (parseError !== void 0) {
+          parsed.error = parsed.error || parseError;
+          malformedAuthorityOrPort = true;
+        }
         if (parsed.host) {
           const ipv4result = isIPv4(parsed.host);
           if (ipv4result === false) {
@@ -3788,14 +3849,18 @@ var require_fast_uri = __commonJS({
               parsed.scheme = unescape(parsed.scheme);
             }
             if (parsed.host !== void 0) {
-              parsed.host = unescape(parsed.host);
+              parsed.host = reescapeHostDelimiters(unescape(parsed.host), isIP);
             }
           }
           if (parsed.path) {
-            parsed.path = escape(unescape(parsed.path));
+            parsed.path = normalizePathEncoding(parsed.path);
           }
           if (parsed.fragment) {
-            parsed.fragment = encodeURI(decodeURIComponent(parsed.fragment));
+            try {
+              parsed.fragment = encodeURI(decodeURIComponent(parsed.fragment));
+            } catch {
+              parsed.error = parsed.error || "URI malformed";
+            }
           }
         }
         if (schemeHandler && schemeHandler.parse) {
@@ -3804,7 +3869,29 @@ var require_fast_uri = __commonJS({
       } else {
         parsed.error = parsed.error || "URI can not be parsed.";
       }
-      return parsed;
+      return { parsed, malformedAuthorityOrPort };
+    }
+    function parse3(uri, opts) {
+      return parseWithStatus(uri, opts).parsed;
+    }
+    function normalizeString(uri, opts) {
+      return normalizeStringWithStatus(uri, opts).normalized;
+    }
+    function normalizeStringWithStatus(uri, opts) {
+      const { parsed, malformedAuthorityOrPort } = parseWithStatus(uri, opts);
+      return {
+        normalized: malformedAuthorityOrPort ? uri : serialize(parsed, opts),
+        malformedAuthorityOrPort
+      };
+    }
+    function normalizeComparableURI(uri, opts) {
+      if (typeof uri === "string") {
+        const { normalized, malformedAuthorityOrPort } = normalizeStringWithStatus(uri, opts);
+        return malformedAuthorityOrPort ? void 0 : normalized;
+      }
+      if (typeof uri === "object") {
+        return serialize(uri, opts);
+      }
     }
     var fastUri = {
       SCHEMES,
@@ -30113,6 +30200,23 @@ var StdioServerTransport = class {
   }
 };
 
+// src/audit-buffer.ts
+var DEFAULT_CAP = 1e3;
+var buffer = [];
+var cap = DEFAULT_CAP;
+function pushAuditEntry(entry) {
+  buffer.push(entry);
+  if (buffer.length > cap) {
+    buffer.splice(0, buffer.length - cap);
+  }
+}
+function readAuditEntries(limit) {
+  const reversed = buffer.slice().reverse();
+  if (limit === void 0 || limit >= reversed.length) return reversed;
+  if (limit <= 0) return [];
+  return reversed.slice(0, limit);
+}
+
 // src/guardrails.ts
 var GuardrailError = class extends Error {
   constructor(message) {
@@ -30179,15 +30283,29 @@ function checkDestructiveRateLimit(now = Date.now()) {
 function isStoreAllowlistActive() {
   return loadOptions().allowedStoreIds !== null;
 }
-function checkStoreScopedToolInput(toolAcceptsStoreId, input) {
-  if (!toolAcceptsStoreId) return;
-  const raw = input.storeId;
-  if (raw !== void 0 && raw !== null && raw !== "") {
-    checkStoreAllowed(String(raw));
-    return;
-  }
-  if (isStoreAllowlistActive()) {
-    throw new GuardrailError("storeId is required when LEMONSQUEEZY_ALLOWED_STORE_IDS is set");
+function isPresent(value) {
+  if (value === void 0 || value === null) return false;
+  if (typeof value === "string" && value === "") return false;
+  if (Array.isArray(value) && value.length === 0) return false;
+  return true;
+}
+function checkStoreScopedToolInput(tool, input) {
+  const toolAcceptsStoreId = "storeId" in tool.inputSchema.shape;
+  if (toolAcceptsStoreId) {
+    const raw = input.storeId;
+    if (raw !== void 0 && raw !== null && raw !== "") {
+      checkStoreAllowed(String(raw));
+    } else if (isStoreAllowlistActive()) {
+      throw new GuardrailError("storeId is required when LEMONSQUEEZY_ALLOWED_STORE_IDS is set");
+    }
+  }
+  if (tool.requiredFilters && tool.requiredFilters.length > 0 && isStoreAllowlistActive()) {
+    const anyPresent = tool.requiredFilters.some((key) => isPresent(input[key]));
+    if (!anyPresent) {
+      throw new GuardrailError(
+        `At least one of [${tool.requiredFilters.join(", ")}] is required when LEMONSQUEEZY_ALLOWED_STORE_IDS is set`
+      );
+    }
   }
 }
 function isDestructiveCall(tool, input) {
@@ -30252,10 +30370,46 @@ function logEvent(entry) {
   }
 }
 
+// src/redact.ts
+var SECRET_KEY_RE = /^(secret|password|token|api[_-]?key|bearer|authorization|signing[_-]?secret)$/i;
+var REDACTED = "[REDACTED]";
+var CIRCULAR = "[CIRCULAR]";
+var MAX_DEPTH = 32;
+function isPlainObject3(value) {
+  if (value === null || typeof value !== "object") return false;
+  const proto = Object.getPrototypeOf(value);
+  return proto === Object.prototype || proto === null;
+}
+function redactInner(value, visited, depth) {
+  if (depth > MAX_DEPTH) return CIRCULAR;
+  if (value === null || typeof value !== "object") return value;
+  if (Array.isArray(value)) {
+    if (visited.has(value)) return CIRCULAR;
+    visited.add(value);
+    return value.map((item) => redactInner(item, visited, depth + 1));
+  }
+  if (!isPlainObject3(value)) return value;
+  if (visited.has(value)) return CIRCULAR;
+  visited.add(value);
+  const out = {};
+  for (const [key, val] of Object.entries(value)) {
+    if (SECRET_KEY_RE.test(key)) {
+      out[key] = REDACTED;
+    } else {
+      out[key] = redactInner(val, visited, depth + 1);
+    }
+  }
+  return out;
+}
+function redactSecrets(input) {
+  return redactInner(input, /* @__PURE__ */ new WeakSet(), 0);
+}
+
 // src/retry.ts
 var REQUEST_TIMEOUT_MS = 3e4;
 var DEFAULT_RETRY_WAIT_MS = 1e3;
 var MAX_RETRY_WAIT_MS = 3e4;
+var OVERALL_DEADLINE_MS = 9e4;
 var DEFAULT_MAX_ATTEMPTS = 4;
 var BASE_BACKOFF_MS = 250;
 var JITTER_FRACTION = 0.25;
@@ -30275,6 +30429,19 @@ function isAbortTimeoutError(err) {
   const e = err;
   return e.name === "TimeoutError" || e.name === "AbortError" || e.code === "ABORT_ERR";
 }
+function isRetryTimeoutError(err) {
+  if (!err || typeof err !== "object") return false;
+  const e = err;
+  return e.name === "TimeoutError" && typeof e.elapsedMs === "number" && typeof e.attempts === "number";
+}
+function makeRetryTimeoutError(elapsedMs, attempts, cause) {
+  const err = new Error("Request timed out");
+  err.name = "TimeoutError";
+  err.elapsedMs = elapsedMs;
+  err.attempts = attempts;
+  if (cause !== void 0) err.cause = cause;
+  return err;
+}
 function backoffDelay(attempt, rand = Math.random) {
   const base = BASE_BACKOFF_MS * 2 ** (attempt - 1);
   const jitter = rand() * base * JITTER_FRACTION;
@@ -30286,31 +30453,54 @@ async function fetchWithRetry(url2, init, opts) {
   const sleep = opts.sleep ?? defaultSleep;
   const fetchImpl = opts.fetchImpl ?? fetch;
   const rand = opts.rand ?? Math.random;
+  const deadlineMs = opts.deadlineMs ?? OVERALL_DEADLINE_MS;
+  const now = opts.now ?? Date.now;
+  const startedAt = now();
+  const deadlineAt = startedAt + deadlineMs;
+  let attempts = 0;
   let lastError;
+  let lastResponse;
   for (let attempt = 1; attempt <= maxAttempts; attempt++) {
+    if (attempt > 1 && now() >= deadlineAt) {
+      if (lastResponse) return lastResponse;
+      throw makeRetryTimeoutError(now() - startedAt, attempts, lastError);
+    }
+    attempts = attempt;
     try {
       const res = await fetchImpl(url2, { ...init, signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS) });
+      lastResponse = res;
       if (res.status === 429) {
         if (attempt === maxAttempts) return res;
         const waitMs = parseRetryAfterMs(res.headers.get("retry-after"));
         if (waitMs > MAX_RETRY_WAIT_MS) return res;
+        if (now() + waitMs >= deadlineAt) return res;
         await sleep(waitMs);
         continue;
       }
       if (res.status >= 500 && res.status < 600 && opts.idempotent && attempt < maxAttempts) {
-        await sleep(backoffDelay(attempt, rand));
+        const waitMs = backoffDelay(attempt, rand);
+        if (now() + waitMs >= deadlineAt) return res;
+        await sleep(waitMs);
         continue;
       }
       return res;
     } catch (err) {
       lastError = err;
       if (isAbortTimeoutError(err)) {
-        if (!opts.idempotent || attempt === maxAttempts) throw err;
-        await sleep(backoffDelay(attempt, rand));
+        if (!opts.idempotent || attempt === maxAttempts) {
+          throw makeRetryTimeoutError(now() - startedAt, attempts, err);
+        }
+        const waitMs = backoffDelay(attempt, rand);
+        if (now() + waitMs >= deadlineAt) {
+          throw makeRetryTimeoutError(now() - startedAt, attempts, err);
+        }
+        await sleep(waitMs);
         continue;
       }
       if (err instanceof TypeError && opts.idempotent && attempt < maxAttempts) {
-        await sleep(backoffDelay(attempt, rand));
+        const waitMs = backoffDelay(attempt, rand);
+        if (now() + waitMs >= deadlineAt) throw err;
+        await sleep(waitMs);
         continue;
       }
       throw err;
@@ -30327,6 +30517,18 @@ var CACHE_TTL_MS = 60 * 60 * 1e3;
 var COMMAND_TIMEOUT_MS = 1e4;
 var COMMAND_MAX_BUFFER = 64 * 1024;
 var cached2 = null;
+var testModeAnnounced = false;
+function announceTestModeOnce() {
+  if (testModeAnnounced) return;
+  testModeAnnounced = true;
+  const line = `${JSON.stringify({
+    ts: (/* @__PURE__ */ new Date()).toISOString(),
+    event: "test_mode",
+    message: "Using LEMONSQUEEZY_TEST_API_KEY (test mode)"
+  })}
+`;
+  process.stderr.write(line);
+}
 function parseCommand(cmd) {
   const parts = [];
   let current = "";
@@ -30386,6 +30588,18 @@ async function loadApiKey() {
     intoCache(fingerprint2, key);
     return key;
   }
+  const testRaw = process.env.LEMONSQUEEZY_TEST_API_KEY;
+  if (testRaw && testRaw.trim() !== "") {
+    const fingerprint2 = `test:${testRaw}`;
+    const hit2 = fromCache(fingerprint2);
+    if (hit2 !== null) {
+      announceTestModeOnce();
+      return hit2;
+    }
+    announceTestModeOnce();
+    intoCache(fingerprint2, testRaw);
+    return testRaw;
+  }
   const raw = process.env.LEMONSQUEEZY_API_KEY;
   if (!raw) {
     throw new Error("LEMONSQUEEZY_API_KEY or LEMONSQUEEZY_API_KEY_COMMAND environment variable is required.");
@@ -30433,6 +30647,14 @@ function buildQuery(params) {
 function decorateError(error48, requestId) {
   return requestId ? `${error48} (request_id: ${requestId})` : error48;
 }
+function formatTimeoutMessage(err, fallbackElapsedMs) {
+  if (isRetryTimeoutError(err)) {
+    const seconds2 = Math.max(1, Math.round(err.elapsedMs / 1e3));
+    return `Request timed out after ${seconds2}s (${err.attempts} attempts)`;
+  }
+  const seconds = Math.max(1, Math.round(fallbackElapsedMs / 1e3));
+  return `Request timed out after ${seconds}s (1 attempts)`;
+}
 async function apiRequest(method, path, body) {
   const start = Date.now();
   const apiKey = await loadApiKey();
@@ -30453,7 +30675,7 @@ async function apiRequest(method, path, body) {
   } catch (err) {
     const latency_ms2 = Date.now() - start;
     if (isAbortTimeoutError(err)) {
-      const error48 = `Request timed out after ${REQUEST_TIMEOUT_MS / 1e3}s`;
+      const error48 = formatTimeoutMessage(err, latency_ms2);
       logEvent({ event: "http_call", method, path, status: "timeout", latency_ms: latency_ms2, error: error48 });
       return { ok: false, status: 0, error: error48 };
     }
@@ -30540,7 +30762,7 @@ async function licenseRequest(path, body) {
   } catch (err) {
     const latency_ms2 = Date.now() - start;
     if (isAbortTimeoutError(err)) {
-      const error48 = `Request timed out after ${REQUEST_TIMEOUT_MS / 1e3}s`;
+      const error48 = formatTimeoutMessage(err, latency_ms2);
       logEvent({ event: "http_call", method: "POST", path, status: "timeout", latency_ms: latency_ms2, error: error48 });
       return { ok: false, status: 0, error: error48 };
     }
@@ -30663,7 +30885,7 @@ var affiliateTools = [
   },
   {
     name: "ls_list_affiliates",
-    description: "List all affiliates for the authenticated user's stores, optionally filtered by user email. Results are paginated \u2014 check meta.page in the response for currentPage, lastPage, and total.",
+    description: "List all affiliates for the authenticated user's stores, optionally filtered by user email. Results are paginated \u2014 check meta.page in the response for currentPage, lastPage, and total. Cross-store note: when LEMONSQUEEZY_ALLOWED_STORE_IDS is set, this tool can still return affiliates tied to non-allowed stores -- the endpoint has no parent ID filter to scope by. Pair with a scoped LemonSqueezy API key for true cross-store enforcement -- the API key's visibility is the true boundary.",
     annotations: {
       title: "List affiliates",
       readOnlyHint: true,
@@ -30733,7 +30955,7 @@ var checkoutTools = [
       variantId: lsIdSchema.describe("The variant ID for the product being purchased"),
       customPrice: external_exports3.number().int().min(0).optional().describe("Custom price in cents (overrides the variant price)"),
       enabledVariants: external_exports3.array(lsIdSchema).optional().describe("Array of variant IDs to show on the checkout (for products with multiple variants)"),
-      email: external_exports3.string().max(1e4).optional().describe("Prefill customer email"),
+      email: external_exports3.string().email().max(320).optional().describe("Prefill customer email"),
       name: external_exports3.string().max(1e4).optional().describe("Prefill customer name"),
       billingAddressCountry: external_exports3.string().max(1e4).optional().describe("Prefill billing country (ISO 3166-1 alpha-2)"),
       billingAddressZip: external_exports3.string().max(1e4).optional().describe("Prefill billing ZIP/postal code"),
@@ -30940,7 +31162,7 @@ var discountRedemptionTools = [
   },
   {
     name: "ls_list_discount_redemptions",
-    description: "List all discount redemptions, optionally filtered by discount or order. Results are paginated \u2014 check meta.page in the response for currentPage, lastPage, and total.",
+    description: "List all discount redemptions, optionally filtered by discount or order. Results are paginated \u2014 check meta.page in the response for currentPage, lastPage, and total. Cross-store note: when LEMONSQUEEZY_ALLOWED_STORE_IDS is set, this tool requires at least one of: discountId, orderId. Even with that set, pair with a scoped LemonSqueezy API key for true cross-store enforcement -- the API key's visibility is the true boundary.",
     annotations: {
       title: "List discount redemptions",
       readOnlyHint: true,
@@ -30955,6 +31177,7 @@ var discountRedemptionTools = [
       pageNumber: external_exports3.number().int().min(1).optional().describe("Page number (1-indexed)"),
       pageSize: external_exports3.number().int().min(1).max(100).optional().describe("Results per page (1-100)")
     }),
+    requiredFilters: ["discountId", "orderId"],
     handler: listHandler("/discount-redemptions", { discountId: "discount_id", orderId: "order_id" })
   }
 ];
@@ -31092,7 +31315,7 @@ var fileTools = [
   },
   {
     name: "ls_list_files",
-    description: "List all files, optionally filtered by variant. Results are paginated \u2014 check meta.page in the response for currentPage, lastPage, and total.",
+    description: "List all files, optionally filtered by variant. Results are paginated \u2014 check meta.page in the response for currentPage, lastPage, and total. Cross-store note: when LEMONSQUEEZY_ALLOWED_STORE_IDS is set, this tool requires at least one of: variantId. Even with that set, pair with a scoped LemonSqueezy API key for true cross-store enforcement -- the API key's visibility is the true boundary.",
     annotations: {
       title: "List files",
       readOnlyHint: true,
@@ -31106,6 +31329,7 @@ var fileTools = [
       pageNumber: external_exports3.number().int().min(1).optional().describe("Page number (1-indexed)"),
       pageSize: external_exports3.number().int().min(1).max(100).optional().describe("Results per page (1-100)")
     }),
+    requiredFilters: ["variantId"],
     handler: listHandler("/files", { variantId: "variant_id" })
   }
 ];
@@ -31130,7 +31354,7 @@ var licenseKeyInstanceTools = [
   },
   {
     name: "ls_list_license_key_instances",
-    description: "List all license key instances (activations), optionally filtered by license key. Results are paginated \u2014 check meta.page in the response for currentPage, lastPage, and total.",
+    description: "List all license key instances (activations), optionally filtered by license key. Results are paginated \u2014 check meta.page in the response for currentPage, lastPage, and total. Cross-store note: when LEMONSQUEEZY_ALLOWED_STORE_IDS is set, this tool requires at least one of: licenseKeyId. Even with that set, pair with a scoped LemonSqueezy API key for true cross-store enforcement -- the API key's visibility is the true boundary.",
     annotations: {
       title: "List license key instances",
       readOnlyHint: true,
@@ -31144,6 +31368,7 @@ var licenseKeyInstanceTools = [
       pageNumber: external_exports3.number().int().min(1).optional().describe("Page number (1-indexed)"),
       pageSize: external_exports3.number().int().min(1).max(100).optional().describe("Results per page (1-100)")
     }),
+    requiredFilters: ["licenseKeyId"],
     handler: listHandler("/license-key-instances", { licenseKeyId: "license_key_id" })
   }
 ];
@@ -31206,11 +31431,14 @@ var licenseKeyTools = [
       idempotentHint: true,
       openWorldHint: true
     },
-    // Disabling a license key revokes a customer's access. Tag the call as
-    // destructive only when `disabled: true` so the rate limiter and audit log
-    // engage on revocation, while benign edits (expiry, activation limit) stay
-    // on the regular path.
-    isDestructive: (input) => input.disabled === true,
+    // Disabling a license key revokes a customer's access outright. Changing
+    // the activation limit can also revoke access -- setting it to 0, or to
+    // any value below the customer's current activation count, kicks
+    // already-activated instances offline. We can't tell from the input alone
+    // whether a given limit change shrinks or grows, so treat ANY
+    // `activationLimit` change as destructive alongside `disabled: true`.
+    // Benign edits (expiry) stay on the regular path.
+    isDestructive: (input) => input.disabled === true || input.activationLimit !== void 0,
     inputSchema: external_exports3.object({
       licenseKeyId: lsIdSchema.describe("The license key ID to update"),
       activationLimit: external_exports3.number().int().min(0).optional().describe("Maximum number of activations allowed (0 = unlimited)"),
@@ -31319,7 +31547,7 @@ var orderItemTools = [
   },
   {
     name: "ls_list_order_items",
-    description: "List all order items, optionally filtered by order or product. Results are paginated \u2014 check meta.page in the response for currentPage, lastPage, and total.",
+    description: "List all order items, optionally filtered by order or product. Results are paginated \u2014 check meta.page in the response for currentPage, lastPage, and total. Cross-store note: when LEMONSQUEEZY_ALLOWED_STORE_IDS is set, this tool requires at least one of: orderId, productId, variantId. Even with that set, pair with a scoped LemonSqueezy API key for true cross-store enforcement -- the API key's visibility is the true boundary.",
     annotations: {
       title: "List order items",
       readOnlyHint: true,
@@ -31335,6 +31563,7 @@ var orderItemTools = [
       pageNumber: external_exports3.number().int().min(1).optional().describe("Page number (1-indexed)"),
       pageSize: external_exports3.number().int().min(1).max(100).optional().describe("Results per page (1-100)")
     }),
+    requiredFilters: ["orderId", "productId", "variantId"],
     handler: listHandler("/order-items", { orderId: "order_id", productId: "product_id", variantId: "variant_id" })
   }
 ];
@@ -31458,7 +31687,7 @@ var priceTools = [
   },
   {
     name: "ls_list_prices",
-    description: "List all prices, optionally filtered by variant. Results are paginated \u2014 check meta.page in the response for currentPage, lastPage, and total.",
+    description: "List all prices, optionally filtered by variant. Results are paginated \u2014 check meta.page in the response for currentPage, lastPage, and total. Cross-store note: when LEMONSQUEEZY_ALLOWED_STORE_IDS is set, this tool requires at least one of: variantId. Even with that set, pair with a scoped LemonSqueezy API key for true cross-store enforcement -- the API key's visibility is the true boundary.",
     annotations: {
       title: "List prices",
       readOnlyHint: true,
@@ -31472,6 +31701,7 @@ var priceTools = [
       pageNumber: external_exports3.number().int().min(1).optional().describe("Page number (1-indexed)"),
       pageSize: external_exports3.number().int().min(1).max(100).optional().describe("Results per page (1-100)")
     }),
+    requiredFilters: ["variantId"],
     handler: listHandler("/prices", { variantId: "variant_id" })
   }
 ];
@@ -31683,7 +31913,7 @@ var subscriptionItemTools = [
   },
   {
     name: "ls_list_subscription_items",
-    description: "List all subscription items, optionally filtered by subscription or price. Results are paginated \u2014 check meta.page in the response for currentPage, lastPage, and total.",
+    description: "List all subscription items, optionally filtered by subscription or price. Results are paginated \u2014 check meta.page in the response for currentPage, lastPage, and total. Cross-store note: when LEMONSQUEEZY_ALLOWED_STORE_IDS is set, this tool requires at least one of: subscriptionId, priceId. Even with that set, pair with a scoped LemonSqueezy API key for true cross-store enforcement -- the API key's visibility is the true boundary.",
     annotations: {
       title: "List subscription items",
       readOnlyHint: true,
@@ -31698,6 +31928,7 @@ var subscriptionItemTools = [
       pageNumber: external_exports3.number().int().min(1).optional().describe("Page number (1-indexed)"),
       pageSize: external_exports3.number().int().min(1).max(100).optional().describe("Results per page (1-100)")
     }),
+    requiredFilters: ["subscriptionId", "priceId"],
     handler: listHandler("/subscription-items", { subscriptionId: "subscription_id", priceId: "price_id" })
   },
   {
@@ -31887,7 +32118,7 @@ var usageRecordTools = [
   },
   {
     name: "ls_list_usage_records",
-    description: "List all usage records, optionally filtered by subscription item. Results are paginated \u2014 check meta.page in the response for currentPage, lastPage, and total.",
+    description: "List all usage records, optionally filtered by subscription item. Results are paginated \u2014 check meta.page in the response for currentPage, lastPage, and total. Cross-store note: when LEMONSQUEEZY_ALLOWED_STORE_IDS is set, this tool requires at least one of: subscriptionItemId. Even with that set, pair with a scoped LemonSqueezy API key for true cross-store enforcement -- the API key's visibility is the true boundary.",
     annotations: {
       title: "List usage records",
       readOnlyHint: true,
@@ -31901,6 +32132,7 @@ var usageRecordTools = [
       pageNumber: external_exports3.number().int().min(1).optional().describe("Page number (1-indexed)"),
       pageSize: external_exports3.number().int().min(1).max(100).optional().describe("Results per page (1-100)")
     }),
+    requiredFilters: ["subscriptionItemId"],
     handler: listHandler("/usage-records", { subscriptionItemId: "subscription_item_id" })
   },
   {
@@ -31980,7 +32212,7 @@ var variantTools = [
   },
   {
     name: "ls_list_variants",
-    description: "List all variants, optionally filtered by product. Results are paginated \u2014 check meta.page in the response for currentPage, lastPage, and total.",
+    description: "List all variants, optionally filtered by product. Results are paginated \u2014 check meta.page in the response for currentPage, lastPage, and total. Cross-store note: when LEMONSQUEEZY_ALLOWED_STORE_IDS is set, this tool requires at least one of: productId. Even with that set, pair with a scoped LemonSqueezy API key for true cross-store enforcement -- the API key's visibility is the true boundary.",
     annotations: {
       title: "List variants",
       readOnlyHint: true,
@@ -31994,6 +32226,7 @@ var variantTools = [
       pageNumber: external_exports3.number().int().min(1).optional().describe("Page number (1-indexed)"),
       pageSize: external_exports3.number().int().min(1).max(100).optional().describe("Results per page (1-100)")
     }),
+    requiredFilters: ["productId"],
     handler: listHandler("/variants", { productId: "product_id" })
   }
 ];
@@ -32118,7 +32351,7 @@ var webhookTools = [
 ];
 
 // src/index.ts
-var version2 = true ? "0.7.0" : (await null).createRequire(import.meta.url)("../package.json").version;
+var version2 = true ? "0.8.1" : (await null).createRequire(import.meta.url)("../package.json").version;
 var subcommand = process.argv[2];
 if (subcommand === "version" || subcommand === "--version") {
   console.log(version2);
@@ -32152,7 +32385,6 @@ var server = new McpServer({
   version: version2
 });
 for (const tool of allTools) {
-  const toolAcceptsStoreId = "storeId" in tool.inputSchema.shape;
   server.tool(
     tool.name,
     tool.description,
@@ -32163,11 +32395,11 @@ for (const tool of allTools) {
       const start = Date.now();
       try {
         if (isDestructive) checkDestructiveRateLimit();
-        checkStoreScopedToolInput(toolAcceptsStoreId, input);
+        checkStoreScopedToolInput(tool, input);
         const result = await tool.handler(input);
         const response = result;
         const latency_ms = Date.now() - start;
-        logEvent({
+        const successEntry = {
           event: "tool_call",
           tool: tool.name,
           status: response.ok ? "ok" : "error",
@@ -32175,8 +32407,12 @@ for (const tool of allTools) {
           request_id: response.requestId,
           error: response.ok ? void 0 : response.error,
           audit: isDestructive ? true : void 0,
-          inputs: isDestructive ? input : void 0
-        });
+          inputs: isDestructive ? redactSecrets(input) : void 0
+        };
+        logEvent(successEntry);
+        if (isDestructive) {
+          pushAuditEntry({ ts: (/* @__PURE__ */ new Date()).toISOString(), ...successEntry });
+        }
         if (!response.ok) {
           return {
             content: [
@@ -32195,15 +32431,19 @@ for (const tool of allTools) {
       } catch (err) {
         const message = err instanceof Error ? err.message : String(err);
         const latency_ms = Date.now() - start;
-        logEvent({
+        const errorEntry = {
           event: "tool_call",
           tool: tool.name,
           status: err instanceof GuardrailError ? "guardrail_block" : "exception",
           latency_ms,
           error: message,
           audit: isDestructive ? true : void 0,
-          inputs: isDestructive ? input : void 0
-        });
+          inputs: isDestructive ? redactSecrets(input) : void 0
+        };
+        logEvent(errorEntry);
+        if (isDestructive) {
+          pushAuditEntry({ ts: (/* @__PURE__ */ new Date()).toISOString(), ...errorEntry });
+        }
         return {
           content: [{ type: "text", text: `Error: ${message}` }],
           isError: true
@@ -32212,6 +32452,27 @@ for (const tool of allTools) {
     }
   );
 }
+server.resource(
+  "Recent destructive-call audit log",
+  "lemonsqueezy://audit-log",
+  {
+    description: "The most recent destructive tool calls and their outcomes (rate limit, refund cap, etc.). Bounded ring buffer; resets on server restart.",
+    mimeType: "application/x-ndjson"
+  },
+  async (uri) => {
+    const entries = readAuditEntries();
+    const text = entries.map((e) => JSON.stringify(e)).join("\n");
+    return {
+      contents: [
+        {
+          uri: uri.href,
+          mimeType: "application/x-ndjson",
+          text
+        }
+      ]
+    };
+  }
+);
 var transport = new StdioServerTransport();
 await server.connect(transport);
 //# sourceMappingURL=index.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@yawlabs/lemonsqueezy-mcp",
-  "version": "0.7.0",
+  "version": "0.8.1",
   "description": "LemonSqueezy MCP server for managing your store from AI assistants",
   "license": "MIT",
   "author": "YawLabs <contact@yaw.sh>",