shabaaspay-mcp-server 1.0.6 → 1.0.7

package/dist/api/client.d.ts

@@ -30,11 +30,6 @@ export declare class ShabaasApiClient {
         token: string;
         fetchedAt: string;
     }>;
-    getTodaysEarnings(options?: RequestAuthOptions): Promise<ApiResponse>;
-    listActivePaymentAgreements(params?: {
-        page?: number;
-        status?: string;
-    }, options?: RequestAuthOptions): Promise<ApiResponse>;
     getPaymentAgreement(id: string, options?: RequestAuthOptions): Promise<ApiResponse>;
     createPaymentAgreement(data: {
         name: string;
@@ -83,15 +78,16 @@ export declare class ShabaasApiClient {
         number_of_transactions_permitted: number;
     }, options?: RequestAuthOptions): Promise<ApiResponse>;
     generateInvoice(data: {
+        uuid: string;
         phone_number?: string;
         invoice: {
             amount: string | number;
-            description?: string;
-            bill_to?: string;
-            address?: string;
-            receiver_abn?: string;
-            ref_no?: string;
-            gst_included?: boolean;
+            description: string;
+            bill_to: string;
+            address: string;
+            receiver_abn: string;
+            ref_no: string;
+            gst_included: boolean;
             gst_does_not_apply?: boolean;
             email?: string;
         };

package/dist/api/client.js

@@ -119,26 +119,6 @@ class ShabaasApiClient {
         const token = await this.getTokenForRequest(options?.requestUuid);
         return { token, fetchedAt: new Date().toISOString() };
     }
-    async getTodaysEarnings(options) {
-        return await this.withAuthRetry(async (token) => {
-            const response = await this.client.get('/api/public/todays_earnings', {
-                headers: { Authorization: token },
-            });
-            return response.data;
-        }, options?.requestUuid);
-    }
-    async listActivePaymentAgreements(params = {}, options) {
-        return await this.withAuthRetry(async (token) => {
-            const query = new URLSearchParams();
-            if (params.page != null)
-                query.set('page', String(params.page));
-            if (params.status != null)
-                query.set('status', params.status);
-            const qs = query.toString();
-            const response = await this.client.get(`/api/public/payment_agreements${qs ? `?${qs}` : ''}`, { headers: { Authorization: token } });
-            return response.data;
-        }, options?.requestUuid);
-    }
     async getPaymentAgreement(id, options) {
         return await this.withAuthRetry(async (token) => {
             const response = await this.client.get(`/api/public/payment_agreement?id=${encodeURIComponent(id)}`, { headers: { Authorization: token } });
@@ -271,16 +251,10 @@ class ShabaasApiClient {
         }, options?.requestUuid);
     }
     async generateInvoice(data, options) {
-        const apiKey = (options?.requestUuid ?? '').trim();
-        if (!apiKey) {
-            throw new Error('API key is required for generate_invoice.');
-        }
-        const response = await this.client.post('/api/public/generate_invoice', {
-            api_key: apiKey,
-            phone_number: data.phone_number,
-            invoice: data.invoice,
-        });
-        return response.data;
+        return await this.withAuthRetry(async (token) => {
+            const response = await this.client.post('/api/public/generate_invoice', data, { headers: { Authorization: token } });
+            return response.data;
+        }, options?.requestUuid);
     }
     async getPaymentLink(data, options) {
         return await this.withAuthRetry(async (token) => {

package/dist/mcp-handler/discovery.js

@@ -353,38 +353,28 @@ async function listTools(env) {
             ...sharedExecution,
             openapi_operation: { method: 'post', path: '/api/public/generate_invoice' },
             output_openapi_schema_ref: 'inline: { message, data: { checkout_url } }',
-            required_arguments: ['invoice'],
-            optional_arguments: [
-                'phone_number',
-                'include_raw',
-                'invoice.description',
-                'invoice.bill_to',
-                'invoice.address',
-                'invoice.receiver_abn',
-                'invoice.ref_no',
-                'invoice.gst_included',
-                'invoice.gst_does_not_apply',
-                'invoice.email',
-            ],
+            required_arguments: ['uuid', 'invoice'],
+            optional_arguments: ['phone_number', 'include_raw'],
             argument_hints: {
-                'invoice.amount': 'Invoice amount (AUD); max 1000',
+                uuid: 'Merchant checkout username.',
             },
             example: {
                 tool: 'generate_invoice',
                 arguments: {
-                    invoice: { amount: '50.00', gst_included: true },
+                    uuid: 'merchant_slug_or_secret',
+                    invoice: { amount: '50.00', description: 'Invoice 1001', bill_to: 'Customer', address: 'Address', receiver_abn: 'ABN', ref_no: '1001', gst_included: true },
                 },
             },
             decision_guidance: {
                 when_to_use: 'Use to generate invoice checkout URL for external collection flow.',
-                preconditions: ['invoice payload'],
+                preconditions: ['uuid and invoice payload'],
                 retryable_errors: ['AUTH_MISSING_OR_INVALID'],
                 non_retryable_errors: ['INVALID_REQUEST', 'VALIDATION_OR_BUSINESS_RULE'],
                 next_best_tool_on_failure: null,
             },
             idempotency_notes: 'Creates a new invoice checkout URL/session per call; treat as non-idempotent.',
             error_contract: [
-                { status: 400, code: 'INVALID_REQUEST', when: 'Invalid invoice payload shape' },
+                { status: 400, code: 'INVALID_REQUEST', when: 'Invalid uuid or invoice payload shape' },
                 { status: 401, code: 'AUTH_MISSING_OR_INVALID', when: 'Session/API key missing or invalid' },
                 { status: 422, code: 'VALIDATION_OR_BUSINESS_RULE', when: 'Invoice validation/business rule failure' },
             ],

package/dist/mcp-handler/mcp.js

@@ -47,16 +47,6 @@ async function runWithMcpContextLock(fn) {
  */
 function buildAllowedToolsList(policy, env) {
     const allTools = [
-        {
-            name: 'list_active_payment_agreements',
-            description: 'List the merchant\'s active PayTo payment agreements. Use for requests like "list my active agreements".',
-            inputSchema: httpMcpToolSchema(index_js_2.ListActivePaymentAgreementsInputSchema),
-        },
-        {
-            name: 'get_todays_earnings',
-            description: 'Today\'s settled payment cash summary (AEST) for the merchant and branches. Use for "how much cash came in today?".',
-            inputSchema: httpMcpToolSchema(index_js_2.GetTodaysEarningsInputSchema),
-        },
         {
             name: 'get_payment_agreement',
             description: 'Retrieve payment agreement details with AI insights.',

package/dist/mcp-handler/server-card.js

@@ -30,38 +30,6 @@ function toStrictObjectSchema(schema) {
 }
 function buildServerCard(env) {
     const tools = [
-        {
-            name: 'list_active_payment_agreements',
-            description: 'List the merchant\'s active PayTo payment agreements. Use when the user asks to list or find their active agreements.',
-            inputSchema: toStrictObjectSchema((0, schema_helpers_js_1.stripAuthorizationFieldFromJsonSchema)((0, zod_to_json_schema_1.zodToJsonSchema)(index_js_1.ListActivePaymentAgreementsInputSchema))),
-            metadata: {
-                schemaVersion: '2026-04-15',
-                requiredArguments: [],
-                optionalArguments: ['page', 'status', 'include_raw'],
-                openapiOperation: { method: 'get', path: '/api/public/payment_agreements' },
-                outputSchemaRef: 'inline: { payment_agreements: PaymentAgreement[], count, status_filter }',
-                errorContract: [
-                    { status: 401, code: 'AUTH_MISSING_OR_INVALID', when: 'Session/API key missing or invalid' },
-                ],
-            },
-            annotations: { readOnlyHint: true, idempotentHint: true, openWorldHint: false },
-        },
-        {
-            name: 'get_todays_earnings',
-            description: 'Today\'s settled payment cash summary (AEST) for the authenticated merchant and branches. Use when asked how much cash came in today.',
-            inputSchema: toStrictObjectSchema((0, schema_helpers_js_1.stripAuthorizationFieldFromJsonSchema)((0, zod_to_json_schema_1.zodToJsonSchema)(index_js_1.GetTodaysEarningsInputSchema))),
-            metadata: {
-                schemaVersion: '2026-04-15',
-                requiredArguments: [],
-                optionalArguments: ['include_raw'],
-                openapiOperation: { method: 'get', path: '/api/public/todays_earnings' },
-                outputSchemaRef: 'inline: { date, timezone, currency, count, total_amount }',
-                errorContract: [
-                    { status: 401, code: 'AUTH_MISSING_OR_INVALID', when: 'Session/API key missing or invalid' },
-                ],
-            },
-            annotations: { readOnlyHint: true, idempotentHint: true, openWorldHint: false },
-        },
         {
             name: 'get_payment_agreement',
             description: 'Retrieve payment agreement details with AI insights.',
@@ -168,19 +136,8 @@ function buildServerCard(env) {
             inputSchema: toStrictObjectSchema((0, schema_helpers_js_1.stripAuthorizationFieldFromJsonSchema)((0, zod_to_json_schema_1.zodToJsonSchema)(index_js_1.GenerateInvoiceInputSchema))),
             metadata: {
                 schemaVersion: '2026-04-15',
-                requiredArguments: ['invoice.amount'],
-                optionalArguments: [
-                    'phone_number',
-                    'include_raw',
-                    'invoice.description',
-                    'invoice.bill_to',
-                    'invoice.address',
-                    'invoice.receiver_abn',
-                    'invoice.ref_no',
-                    'invoice.gst_included',
-                    'invoice.gst_does_not_apply',
-                    'invoice.email',
-                ],
+                requiredArguments: ['uuid', 'invoice'],
+                optionalArguments: ['phone_number', 'include_raw'],
                 openapiOperation: { method: 'post', path: '/api/public/generate_invoice' },
                 outputSchemaRef: 'inline: { message, data: { checkout_url } }',
             },
@@ -234,19 +191,6 @@ function buildServerCard(env) {
         tools,
         resources: [],
         prompts: [
-            {
-                name: 'todays_earnings',
-                description: 'Answer how much settled cash came in today (AEST) by calling get_todays_earnings for the merchant and branches.',
-                arguments: [],
-            },
-            {
-                name: 'list_active_agreements',
-                description: 'List the merchant\'s active PayTo agreements, then use get_payment_agreement for details on a specific ID.',
-                arguments: [
-                    { name: 'page', description: 'Optional page number', required: false },
-                    { name: 'status', description: 'Optional status filter (default active; use all for every agreement)', required: false },
-                ],
-            },
             {
                 name: 'create_payto_agreement',
                 description: 'Draft parameters for a new PayTo agreement, then call create_payment_agreement with validated fields.',
@@ -291,16 +235,9 @@ function buildServerCard(env) {
                 name: 'generate_invoice',
                 description: 'Draft invoice payload and call generate_invoice to get an external checkout URL.',
                 arguments: [
-                    { name: 'invoice.amount', description: 'Invoice amount (AUD); max 1000', required: true },
-                    { name: 'invoice.description', description: 'Invoice description', required: false },
-                    { name: 'invoice.bill_to', description: 'Bill to name', required: false },
-                    { name: 'invoice.address', description: 'Billing address', required: false },
-                    { name: 'invoice.receiver_abn', description: 'Receiver ABN', required: false },
-                    { name: 'invoice.ref_no', description: 'Invoice reference number', required: false },
-                    { name: 'invoice.gst_included', description: 'GST included in amount (default false)', required: false },
-                    { name: 'invoice.gst_does_not_apply', description: 'GST does not apply', required: false },
-                    { name: 'invoice.email', description: 'Customer email for invoice', required: false },
-                    { name: 'phone_number', description: 'Customer phone', required: false },
+                    { name: 'uuid', description: 'Merchant checkout username or secret', required: true },
+                    { name: 'invoice', description: 'Invoice object with amount and description', required: true },
+                    { name: 'phone_number', description: 'Optional customer phone', required: false },
                 ],
             },
         ],

package/dist/mcp-handler/tools/implementations.d.ts

@@ -7,10 +7,6 @@
 import type { Env } from '../types.js';
 /** get_auth_token: Fetch bearer token. Sandbox only. */
 export declare function getAuthToken(args: any, baseUrl: string, env: Env): Promise<Response>;
-/** get_todays_earnings: settled cash summary for today (AEST), merchant + branches. */
-export declare function getTodaysEarnings(args: any, baseUrl: string, env: Env, bearer: string): Promise<Response>;
-/** list_active_payment_agreements: GET merchant PayTo agreements (active by default). */
-export declare function listActivePaymentAgreements(args: any, baseUrl: string, env: Env, bearer: string): Promise<Response>;
 /** get_payment_agreement: GET agreement by ID. Enriches with insights and summary when enrich !== false. */
 export declare function getPaymentAgreement(args: any, baseUrl: string, env: Env, bearer: string): Promise<Response>;
 /** create_payment_agreement: POST new agreement to backend */
@@ -21,4 +17,4 @@ export declare function initiatePayment(args: any, baseUrl: string, env: Env, be
 export declare function getPaymentInitiation(args: any, baseUrl: string, env: Env, bearer: string): Promise<Response>;
 export declare function initiateDirectDebit(args: any, baseUrl: string, env: Env, bearer: string, requestId: string): Promise<Response>;
 export declare function updateBilateralAgreement(args: any, baseUrl: string, env: Env, bearer: string): Promise<Response>;
-export declare function generateInvoice(args: any, baseUrl: string, env: Env, apiKey: string): Promise<Response>;
+export declare function generateInvoice(args: any, baseUrl: string, env: Env, bearer: string): Promise<Response>;

package/dist/mcp-handler/tools/implementations.js

@@ -7,8 +7,6 @@
  */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.getAuthToken = getAuthToken;
-exports.getTodaysEarnings = getTodaysEarnings;
-exports.listActivePaymentAgreements = listActivePaymentAgreements;
 exports.getPaymentAgreement = getPaymentAgreement;
 exports.createPaymentAgreement = createPaymentAgreement;
 exports.initiatePayment = initiatePayment;
@@ -64,130 +62,6 @@ async function getAuthToken(args, baseUrl, env) {
         return (0, utils_js_1.jsonResponse)({ error: 'Authorization failed', message: error.message }, 500, env);
     }
 }
-function formatAud(amount) {
-    return amount.toLocaleString('en-AU', {
-        style: 'currency',
-        currency: 'AUD',
-        minimumFractionDigits: 2,
-        maximumFractionDigits: 2,
-    });
-}
-/** get_todays_earnings: settled cash summary for today (AEST), merchant + branches. */
-async function getTodaysEarnings(args, baseUrl, env, bearer) {
-    try {
-        const startTime = Date.now();
-        const includeRaw = args.include_raw === true;
-        const response = await fetch(`${baseUrl}/api/public/todays_earnings`, {
-            headers: { Authorization: bearer, 'Content-Type': 'application/json', 'X-Shabaas-Client': 'mcp' },
-        });
-        const data = (await response.json());
-        if (!response.ok) {
-            return (0, utils_js_1.jsonResponse)({
-                success: false,
-                error: data?.error_code || 'Request failed',
-                message: data?.message || "Unable to retrieve today's earnings summary.",
-                ...(includeRaw ? { raw: data } : {}),
-            }, response.status, env);
-        }
-        const payload = data?.data ?? {};
-        const count = Number(payload.count ?? 0);
-        const totalAmount = Number(payload.total_amount ?? 0);
-        const date = payload.date ?? 'today';
-        const timezone = payload.timezone ?? 'Australia/Sydney';
-        const environment = env.SHABAAS_ENVIRONMENT === 'production' ? 'production' : 'sandbox';
-        return (0, utils_js_1.jsonResponse)({
-            success: true,
-            timestamp: new Date().toISOString(),
-            data: {
-                date,
-                timezone,
-                currency: payload.currency ?? 'AUD',
-                count,
-                total_amount: totalAmount,
-                scope: payload.scope ?? 'settled_payments_today',
-                includes_branches: payload.includes_branches ?? false,
-            },
-            metadata: {
-                requestId: `req_${Date.now()}`,
-                processingTime: Date.now() - startTime,
-                environment,
-            },
-            insights: {
-                status: count > 0 ? 'found' : 'empty',
-                canProceed: true,
-                nextActions: count > 0 ? ['get_payment_initiation'] : ['initiate_payment'],
-                warnings: count === 0
-                    ? ['No settled payments today in the EOD reporting window (AEST).']
-                    : ['Gross settled totals for today; fees and refunds are not deducted here.'],
-            },
-            summary: count > 0
-                ? `Today's settled earnings (${date}, ${timezone}): ${formatAud(totalAmount)} from ${count} payment${count === 1 ? '' : 's'}.`
-                : `No settled payments today (${date}, ${timezone}) for this merchant and branches.`,
-            ...(includeRaw ? { raw: data } : {}),
-        }, 200, env);
-    }
-    catch (error) {
-        return (0, utils_js_1.jsonResponse)({ success: false, error: 'Request failed', message: error.message || 'An error occurred' }, 500, env);
-    }
-}
-/** list_active_payment_agreements: GET merchant PayTo agreements (active by default). */
-async function listActivePaymentAgreements(args, baseUrl, env, bearer) {
-    try {
-        const startTime = Date.now();
-        const includeRaw = args.include_raw === true;
-        const query = new URLSearchParams();
-        if (args.page != null)
-            query.set('page', String(args.page));
-        if (args.status != null)
-            query.set('status', String(args.status));
-        const qs = query.toString();
-        const response = await fetch(`${baseUrl}/api/public/payment_agreements${qs ? `?${qs}` : ''}`, { headers: { Authorization: bearer, 'Content-Type': 'application/json', 'X-Shabaas-Client': 'mcp' } });
-        const data = (await response.json());
-        if (!response.ok) {
-            return (0, utils_js_1.jsonResponse)({
-                success: false,
-                error: data?.error_code || 'Request failed',
-                message: data?.message || 'Unable to list payment agreements.',
-                ...(includeRaw ? { raw: data } : {}),
-            }, response.status, env);
-        }
-        const agreements = data?.data?.payment_agreements ?? [];
-        const count = data?.data?.count ?? agreements.length;
-        const statusFilter = data?.data?.status_filter ?? 'active';
-        const environment = env.SHABAAS_ENVIRONMENT === 'production' ? 'production' : 'sandbox';
-        return (0, utils_js_1.jsonResponse)({
-            success: true,
-            timestamp: new Date().toISOString(),
-            data: {
-                payment_agreements: agreements,
-                count,
-                status_filter: statusFilter,
-            },
-            metadata: {
-                requestId: `req_${Date.now()}`,
-                processingTime: Date.now() - startTime,
-                environment,
-            },
-            insights: {
-                status: count > 0 ? 'found' : 'empty',
-                canProceed: count > 0,
-                nextActions: count > 0
-                    ? ['get_payment_agreement', 'initiate_payment']
-                    : ['create_payment_agreement'],
-                warnings: count === 0
-                    ? ['No active agreements found. Create a new agreement or pass status=all to see other agreements.']
-                    : undefined,
-            },
-            summary: count > 0
-                ? `Found ${count} payment agreement${count === 1 ? '' : 's'} (filter: ${statusFilter}).`
-                : `No payment agreements found (filter: ${statusFilter}).`,
-            ...(includeRaw ? { raw: data } : {}),
-        }, 200, env);
-    }
-    catch (error) {
-        return (0, utils_js_1.jsonResponse)({ success: false, error: 'Request failed', message: error.message || 'An error occurred' }, 500, env);
-    }
-}
 /** get_payment_agreement: GET agreement by ID. Enriches with insights and summary when enrich !== false. */
 async function getPaymentAgreement(args, baseUrl, env, bearer) {
     if (!args.payment_agreement_id) {
@@ -529,15 +403,15 @@ async function updateBilateralAgreement(args, baseUrl, env, bearer) {
         return (0, utils_js_1.jsonResponse)({ error: 'Request failed', message: error.message || 'An error occurred' }, 500, env);
     }
 }
-async function generateInvoice(args, baseUrl, env, apiKey) {
+async function generateInvoice(args, baseUrl, env, bearer) {
     try {
         const startTime = Date.now();
         const includeRaw = args.include_raw === true;
         const response = await fetch(`${baseUrl}/api/public/generate_invoice`, {
             method: 'POST',
-            headers: { 'Content-Type': 'application/json', 'X-Shabaas-Client': 'mcp' },
+            headers: { 'Authorization': bearer, 'Content-Type': 'application/json', 'X-Shabaas-Client': 'mcp' },
             body: JSON.stringify({
-                api_key: apiKey,
+                uuid: args.uuid,
                 phone_number: args.phone_number,
                 invoice: args.invoice,
             }),

package/dist/mcp-handler/tools/index.js

@@ -112,12 +112,6 @@ async function runToolInvocation(toolName, args, env, policy, authToken, request
             }
             resp = await (0, implementations_js_1.getAuthToken)(args, baseUrl, env);
             break;
-        case 'list_active_payment_agreements':
-            resp = await (0, implementations_js_1.listActivePaymentAgreements)(args, baseUrl, env, bearer);
-            break;
-        case 'get_todays_earnings':
-            resp = await (0, implementations_js_1.getTodaysEarnings)(args, baseUrl, env, bearer);
-            break;
         case 'get_payment_agreement':
             resp = await (0, implementations_js_1.getPaymentAgreement)(args, baseUrl, env, bearer);
             break;
@@ -137,7 +131,7 @@ async function runToolInvocation(toolName, args, env, policy, authToken, request
             resp = await (0, implementations_js_1.updateBilateralAgreement)(args, baseUrl, env, bearer);
             break;
         case 'generate_invoice':
-            resp = await (0, implementations_js_1.generateInvoice)(args, baseUrl, env, apiKey);
+            resp = await (0, implementations_js_1.generateInvoice)(args, baseUrl, env, bearer);
             break;
         default:
             return {

package/dist/tools/auth.js

@@ -32,14 +32,7 @@ function createAuthTools(apiClient, config) {
                         insights: {
                             status: 'success',
                             canProceed: true,
-                            nextActions: [
-                                'list_active_payment_agreements',
-                                'get_todays_earnings',
-                                'create_payment_agreement',
-                                'get_payment_agreement',
-                                'initiate_payment',
-                                'get_payment_initiation',
-                            ],
+                            nextActions: ['create_payment_agreement', 'get_payment_agreement', 'initiate_payment', 'get_payment_initiation'],
                             warnings: includeToken
                                 ? ['Token is included in the response. Treat it as a secret.']
                                 : ['Token was fetched and cached inside the MCP server. It is not shown in this response.'],