@casys/mcp-erpnext 2.4.1 → 2.5.0

package/mcp-erpnext.mjs

@@ -3775,6 +3775,7 @@ var require_fast_uri = __commonJS({
       return uriTokens.join("");
     }
     var URI_PARSE = /^(?:([^#/:?]+):)?(?:\/\/((?:([^#/?@]*)@)?(\[[^#/?\]]+\]|[^#/:?]*)(?::(\d*))?))?([^#?]*)(?:\?([^#]*))?(?:#((?:.|[\n\r])*))?/u;
+    var AUTHORITY_PREFIX = /^(?:[^#/:?]+:)?\/\/([^/?#]*)/;
     function getParseError(parsed, matches) {
       if (matches[2] !== void 0 && parsed.path && parsed.path[0] !== "/") {
         return 'URI path must start with "/" when authority is present.';
@@ -3804,6 +3805,11 @@ var require_fast_uri = __commonJS({
           uri = "//" + uri;
         }
       }
+      const authorityMatch = uri.match(AUTHORITY_PREFIX);
+      if (authorityMatch !== null && authorityMatch[1].indexOf("\\") !== -1) {
+        parsed.error = "URI authority must not contain a literal backslash.";
+        malformedAuthorityOrPort = true;
+      }
       const matches = uri.match(URI_PARSE);
       if (matches) {
         parsed.scheme = matches[1];
@@ -29680,6 +29686,12 @@ var parseBody = async (request, options = /* @__PURE__ */ Object.create(null)) =
   return {};
 };
 async function parseFormData(request, options) {
+  if (!isRawRequest(request) && request.bodyCache.formData) {
+    return convertFormDataToBodyData(
+      await request.bodyCache.formData,
+      options
+    );
+  }
   const headers = isRawRequest(request) ? request.headers : request.raw.headers;
   const arrayBuffer = await request.arrayBuffer();
   const formDataPromise = bufferToFormData(arrayBuffer, headers.get("Content-Type") || "");
@@ -37377,6 +37389,516 @@ var KANBAN_META = viewer("kanban-viewer");
 var KPI_META = viewer("kpi-viewer");
 var FUNNEL_META = viewer("funnel-viewer");
 
+// src/runtime.ts
+var isDeno2 = typeof globalThis.Deno?.version?.deno === "string";
+var impl2 = isDeno2 ? await Promise.resolve().then(() => (init_runtime_deno2(), runtime_deno_exports2)) : await Promise.resolve().then(() => (init_runtime_node2(), runtime_node_exports2));
+var env6 = impl2.env;
+var readTextFile6 = impl2.readTextFile;
+var statSync3 = impl2.statSync;
+var readDirSync3 = impl2.readDirSync;
+var getArgs3 = impl2.getArgs;
+var exit3 = impl2.exit;
+var onSignal3 = impl2.onSignal;
+
+// src/cache/memory.ts
+var MemoryCache = class {
+  store = /* @__PURE__ */ new Map();
+  get(key) {
+    const entry = this.store.get(key);
+    if (!entry) return void 0;
+    if (Date.now() >= entry.expiresAt) {
+      this.store.delete(key);
+      return void 0;
+    }
+    return structuredClone(entry.value);
+  }
+  set(key, value, ttlMs) {
+    this.store.set(key, { value, expiresAt: Date.now() + ttlMs });
+  }
+  delete(key) {
+    this.store.delete(key);
+  }
+  deleteByPrefix(prefix) {
+    for (const key of this.store.keys()) {
+      if (key.startsWith(prefix)) this.store.delete(key);
+    }
+  }
+  clear() {
+    this.store.clear();
+  }
+};
+
+// src/cache/noop.ts
+var NoopCache = class {
+  get(_key) {
+    return void 0;
+  }
+  set(_key, _value, _ttlMs) {
+  }
+  delete(_key) {
+  }
+  deleteByPrefix(_prefix) {
+  }
+  clear() {
+  }
+};
+
+// src/cache/cache.ts
+var DEFAULT_CACHE_TTL_MS = 15e3;
+var _cache = null;
+function getCacheTtlMs() {
+  const raw2 = env6("MCP_CACHE_TTL_MS");
+  if (raw2 === void 0) return DEFAULT_CACHE_TTL_MS;
+  const parsed = Number(raw2);
+  if (!Number.isFinite(parsed) || parsed < 0) {
+    console.error(
+      `[mcp-erpnext] Invalid MCP_CACHE_TTL_MS=${JSON.stringify(raw2)} \u2014 must be a non-negative number. Falling back to default (${DEFAULT_CACHE_TTL_MS}ms).`
+    );
+    return DEFAULT_CACHE_TTL_MS;
+  }
+  return parsed;
+}
+function getCache() {
+  if (_cache) return _cache;
+  const enabled = env6("MCP_CACHE_ENABLED") !== "false";
+  _cache = enabled ? new MemoryCache() : new NoopCache();
+  return _cache;
+}
+
+// src/api/frappe-client.ts
+function stableStringify(value) {
+  if (Array.isArray(value)) {
+    return `[${value.map(stableStringify).join(",")}]`;
+  }
+  if (value !== null && typeof value === "object") {
+    const keys = Object.keys(value).sort();
+    return `{${keys.map(
+      (k) => `${JSON.stringify(k)}:${stableStringify(value[k])}`
+    ).join(",")}}`;
+  }
+  return JSON.stringify(value);
+}
+var DEFAULT_RETRY_STATUSES = [408, 429, 502, 503, 504];
+var DEFAULT_RETRY_METHODS = ["GET"];
+var FrappeAPIError = class extends Error {
+  /**
+   * @param message - Human-readable error description
+   * @param status - HTTP status code (0 for network errors, 408 for timeouts)
+   * @param body - Raw response body (parsed JSON object or plain text string)
+   * @param retryAfterMs - When the server sent a `Retry-After` header on a
+   *                      retryable status (typically 429), the parsed delay
+   *                      in ms. Used by the retry loop; absent otherwise.
+   */
+  constructor(message2, status, body, retryAfterMs) {
+    super(`[FrappeClient] ${message2} (HTTP ${status})`);
+    this.status = status;
+    this.body = body;
+    this.retryAfterMs = retryAfterMs;
+    this.name = "FrappeAPIError";
+  }
+};
+function parseRetryAfter(raw2) {
+  if (!raw2) return void 0;
+  const trimmed = raw2.trim();
+  const seconds = Number(trimmed);
+  if (Number.isFinite(seconds) && seconds >= 0) {
+    return Math.round(seconds * 1e3);
+  }
+  const date3 = Date.parse(trimmed);
+  if (Number.isFinite(date3)) {
+    return Math.max(0, date3 - Date.now());
+  }
+  return void 0;
+}
+function extractServerMessages(raw2) {
+  if (!raw2 || typeof raw2 !== "string") return void 0;
+  try {
+    const outer = JSON.parse(raw2);
+    if (!Array.isArray(outer)) return void 0;
+    const msgs = [];
+    for (const item of outer) {
+      try {
+        const inner = JSON.parse(item);
+        if (typeof inner === "object" && inner?.message) {
+          msgs.push(inner.message);
+        } else if (typeof inner === "string") {
+          msgs.push(inner);
+        }
+      } catch {
+        if (typeof item === "string") msgs.push(item);
+      }
+    }
+    return msgs.length > 0 ? msgs.join("; ") : void 0;
+  } catch {
+    return void 0;
+  }
+}
+var FrappeClient = class {
+  baseUrl;
+  authHeader;
+  timeoutMs;
+  retries;
+  retryStatuses;
+  retryBackoffMs;
+  retryMethods;
+  cache;
+  constructor(config2) {
+    this.baseUrl = config2.baseUrl.replace(/\/$/, "");
+    this.authHeader = `token ${config2.apiKey}:${config2.apiSecret}`;
+    this.timeoutMs = config2.timeoutMs ?? 3e4;
+    this.retries = config2.retries ?? 3;
+    this.retryStatuses = config2.retryStatuses ?? DEFAULT_RETRY_STATUSES;
+    this.retryBackoffMs = config2.retryBackoffMs ?? 200;
+    this.retryMethods = config2.retryMethods ?? DEFAULT_RETRY_METHODS;
+    this.cache = config2.cache ?? new MemoryCache();
+  }
+  // ── Private HTTP helpers ────────────────────────────────────────────────────
+  buildHeaders() {
+    return {
+      "Authorization": this.authHeader,
+      "Accept": "application/json",
+      "Content-Type": "application/json"
+    };
+  }
+  /**
+   * Decide whether an error is worth retrying.
+   * Network errors (status 0) and timeouts (status 408) are always retryable;
+   * other statuses are checked against `retryStatuses`.
+   */
+  isRetryable(err, method) {
+    if (!this.retryMethods.includes(method)) return false;
+    if (!(err instanceof FrappeAPIError)) return false;
+    if (err.status === 0) return true;
+    return this.retryStatuses.includes(err.status);
+  }
+  /** Compute the backoff delay for a given attempt (0-indexed). */
+  computeBackoff(attempt, err) {
+    if (err instanceof FrappeAPIError && err.retryAfterMs !== void 0) {
+      return err.retryAfterMs;
+    }
+    return this.retryBackoffMs * 2 ** attempt;
+  }
+  async request(method, path, body) {
+    let lastError;
+    for (let attempt = 0; attempt <= this.retries; attempt++) {
+      try {
+        return await this.requestOnce(method, path, body);
+      } catch (err) {
+        lastError = err;
+        if (attempt === this.retries || !this.isRetryable(err, method)) {
+          throw err;
+        }
+        const delay = this.computeBackoff(attempt, err);
+        if (delay > 0) {
+          await new Promise((resolve) => setTimeout(resolve, delay));
+        }
+      }
+    }
+    throw lastError;
+  }
+  async requestOnce(method, path, body) {
+    const url = `${this.baseUrl}${path}`;
+    const controller = new AbortController();
+    const timer = setTimeout(() => controller.abort(), this.timeoutMs);
+    let response;
+    try {
+      response = await fetch(url, {
+        method,
+        headers: this.buildHeaders(),
+        body: body !== void 0 ? JSON.stringify(body) : void 0,
+        signal: controller.signal
+      });
+    } catch (err) {
+      clearTimeout(timer);
+      if (err instanceof Error && err.name === "AbortError") {
+        throw new FrappeAPIError(
+          `Request timed out after ${this.timeoutMs}ms: ${method} ${path}`,
+          408,
+          null
+        );
+      }
+      throw new FrappeAPIError(
+        `Network error on ${method} ${path}: ${err.message}`,
+        0,
+        null
+      );
+    }
+    clearTimeout(timer);
+    const rawText = await response.text();
+    const contentType = response.headers.get("content-type") ?? "";
+    let responseBody = rawText;
+    if (contentType.includes("application/json") && rawText.length > 0) {
+      try {
+        responseBody = JSON.parse(rawText);
+      } catch {
+        responseBody = rawText;
+      }
+    }
+    if (!response.ok) {
+      let msg = response.statusText;
+      if (typeof responseBody === "object" && responseBody !== null) {
+        const rb = responseBody;
+        const excType = rb.exc_type;
+        const baseMsg = rb.message ?? excType ?? response.statusText;
+        const serverDetails = extractServerMessages(rb._server_messages);
+        msg = serverDetails ? `${baseMsg}: ${serverDetails}` : baseMsg;
+      } else if (typeof responseBody === "string" && responseBody.length > 0) {
+        msg = responseBody.slice(0, 200);
+      }
+      const retryAfterMs = parseRetryAfter(
+        response.headers.get("retry-after")
+      );
+      throw new FrappeAPIError(
+        `${method} ${path} failed: ${msg}`,
+        response.status,
+        responseBody,
+        retryAfterMs
+      );
+    }
+    return responseBody;
+  }
+  // ── Resource CRUD ───────────────────────────────────────────────────────────
+  /**
+   * List documents of a DocType.
+   * Frappe list API: GET /api/resource/{doctype}?fields=...&filters=...
+   *
+   * Pass `{ skipCache: true }` to force a fresh read — e.g. for aggregate/KPI
+   * tools that read across doctypes other than the one a preceding mutation
+   * invalidated (see `invalidate()` below for why that gap exists). The fresh
+   * result still refreshes the cache for subsequent normal reads.
+   */
+  async list(doctype, options = {}, opts = {}) {
+    const cacheKey = `list:${doctype}:${stableStringify(options)}`;
+    if (!opts.skipCache) {
+      const cached2 = this.cache.get(cacheKey);
+      if (cached2 !== void 0) return cached2;
+    }
+    const params = new URLSearchParams();
+    if (options.fields && options.fields.length > 0) {
+      params.set("fields", JSON.stringify(options.fields));
+    }
+    if (options.filters && options.filters.length > 0) {
+      params.set("filters", JSON.stringify(options.filters));
+    }
+    if (options.order_by) {
+      params.set("order_by", options.order_by);
+    }
+    if (options.limit !== void 0) {
+      params.set("limit", String(options.limit));
+    }
+    if (options.limit_start !== void 0) {
+      params.set("limit_start", String(options.limit_start));
+    }
+    params.set("as_dict", "1");
+    const query = params.toString() ? `?${params.toString()}` : "";
+    const res = await this.request(
+      "GET",
+      `/api/resource/${encodeURIComponent(doctype)}${query}`
+    );
+    const docs = res.data ?? [];
+    this.cache.set(cacheKey, docs, getCacheTtlMs());
+    return docs;
+  }
+  /**
+   * Get a single document by name.
+   * GET /api/resource/{doctype}/{name}
+   *
+   * Pass `{ skipCache: true }` to force a fresh read — required before any
+   * operation relying on the doc's `modified` timestamp for optimistic
+   * locking (see erpnext_doc_submit/erpnext_doc_cancel in operations.ts).
+   * The fresh result still refreshes the cache for subsequent normal reads.
+   */
+  async get(doctype, name, opts = {}) {
+    const cacheKey = `get:${doctype}:${name}`;
+    if (!opts.skipCache) {
+      const cached2 = this.cache.get(cacheKey);
+      if (cached2 !== void 0) return cached2;
+    }
+    const res = await this.request(
+      "GET",
+      `/api/resource/${encodeURIComponent(doctype)}/${encodeURIComponent(name)}`
+    );
+    this.cache.set(cacheKey, res.data, getCacheTtlMs());
+    return res.data;
+  }
+  /**
+   * Clear cached entries for a doctype (list results, resolveLink's
+   * negative-match cache) and, if `name` is given, the cached single-document
+   * read too. Called automatically after create/update/delete; call explicitly
+   * after any mutation that bypasses those methods (e.g.
+   * frappe.client.submit/cancel via callMethod).
+   *
+   * Known limitation: this only clears the mutated doctype. Frappe mutations
+   * commonly cascade — submitting a Sales Order also writes Bin/GL
+   * Entry/Sales Invoice rows — and those doctypes' cached `list()` results
+   * aren't invalidated here. Aggregate/KPI tools that read across doctypes
+   * can therefore serve up-to-TTL-stale numbers right after a mutation; pass
+   * `{ skipCache: true }` to `list()` in those tools if that staleness isn't
+   * acceptable for a given call site.
+   */
+  invalidate(doctype, name) {
+    this.cache.deleteByPrefix(`list:${doctype}:`);
+    this.cache.deleteByPrefix(`resolve:miss:${doctype}:`);
+    if (name) this.cache.delete(`get:${doctype}:${name}`);
+  }
+  /**
+   * Create a new document.
+   * POST /api/resource/{doctype}
+   */
+  async create(doctype, data) {
+    const res = await this.request(
+      "POST",
+      `/api/resource/${encodeURIComponent(doctype)}`,
+      { data: { ...data, doctype } }
+    );
+    this.invalidate(doctype, res.data.name);
+    return res.data;
+  }
+  /**
+   * Update an existing document (partial update).
+   * PUT /api/resource/{doctype}/{name}
+   */
+  async update(doctype, name, data) {
+    const res = await this.request(
+      "PUT",
+      `/api/resource/${encodeURIComponent(doctype)}/${encodeURIComponent(name)}`,
+      { data }
+    );
+    this.invalidate(doctype, name);
+    return res.data;
+  }
+  /**
+   * Delete a document.
+   * DELETE /api/resource/{doctype}/{name}
+   */
+  async delete(doctype, name) {
+    await this.request(
+      "DELETE",
+      `/api/resource/${encodeURIComponent(doctype)}/${encodeURIComponent(name)}`
+    );
+    this.invalidate(doctype, name);
+  }
+  /**
+   * Call a whitelisted Frappe method.
+   * POST /api/method/{method}
+   */
+  async callMethod(method, args = {}) {
+    const res = await this.request(
+      "POST",
+      `/api/method/${method}`,
+      args
+    );
+    return res.message;
+  }
+};
+var _client = null;
+function getFrappeClient() {
+  if (_client) return _client;
+  const url = env6("ERPNEXT_URL");
+  const apiKey = env6("ERPNEXT_API_KEY");
+  const apiSecret = env6("ERPNEXT_API_SECRET");
+  if (!url) {
+    throw new Error(
+      "[lib/erpnext] ERPNEXT_URL is required. Set it to your ERPNext instance URL, e.g. http://localhost:8000"
+    );
+  }
+  if (!apiKey || !apiSecret) {
+    throw new Error(
+      "[lib/erpnext] ERPNEXT_API_KEY and ERPNEXT_API_SECRET are required. Generate them in ERPNext: User Settings \u2192 API Access."
+    );
+  }
+  _client = new FrappeClient({
+    baseUrl: url,
+    apiKey,
+    apiSecret,
+    cache: getCache()
+  });
+  return _client;
+}
+
+// src/api/resolve.ts
+var NEGATIVE_CACHE_TTL_MS = 15e3;
+var EXACT_MATCH_PROBE_LIMIT = 2;
+var PARTIAL_MATCH_PROBE_LIMIT = 5;
+async function resolveUnique(client, doctype, identifier, searchField, op, value, probeLimit, ambiguityHint) {
+  const rows = await client.list(doctype, {
+    filters: [[searchField, op, value]],
+    fields: ["name", searchField],
+    limit: probeLimit
+  });
+  if (rows.length === 0) return void 0;
+  if (rows.length === 1) return rows[0].name;
+  const candidates = rows.map((r) => `${r.name} (${r[searchField]})`).join(
+    ", "
+  );
+  const suffix = rows.length === probeLimit ? ", and possibly more" : "";
+  throw new Error(
+    `[resolveLink] Ambiguous ${doctype} identifier "${identifier}": did you mean ${candidates}${suffix}? ${ambiguityHint}`
+  );
+}
+async function resolveLink(client, doctype, identifier, searchField, options = {}) {
+  const { allowPartialMatch = true } = options;
+  const cache2 = getCache();
+  const missKey = `resolve:miss:${doctype}:${identifier}`;
+  if (cache2.get(missKey) === void 0) {
+    try {
+      await client.get(doctype, identifier);
+      return identifier;
+    } catch (e) {
+      if (!(e instanceof FrappeAPIError) || e.status !== 404) throw e;
+      cache2.set(missKey, true, NEGATIVE_CACHE_TTL_MS);
+    }
+  }
+  const exact = await resolveUnique(
+    client,
+    doctype,
+    identifier,
+    searchField,
+    "=",
+    identifier,
+    EXACT_MATCH_PROBE_LIMIT,
+    "Please pass the record's ID directly."
+  );
+  if (exact !== void 0) return exact;
+  if (allowPartialMatch) {
+    const partial2 = await resolveUnique(
+      client,
+      doctype,
+      identifier,
+      searchField,
+      "like",
+      `%${identifier}%`,
+      PARTIAL_MATCH_PROBE_LIMIT,
+      "Please pass an exact value."
+    );
+    if (partial2 !== void 0) return partial2;
+  }
+  throw new Error(`[resolveLink] No ${doctype} found matching "${identifier}"`);
+}
+function resolveEmployee(client, identifier) {
+  return resolveLink(client, "Employee", identifier, "employee_name");
+}
+function resolveCustomer(client, identifier) {
+  return resolveLink(client, "Customer", identifier, "customer_name");
+}
+function resolveSupplier(client, identifier) {
+  return resolveLink(client, "Supplier", identifier, "supplier_name");
+}
+function resolveItem(client, identifier) {
+  return resolveLink(client, "Item", identifier, "item_name");
+}
+var DYNAMIC_LINK_SEARCH_FIELDS = {
+  Customer: "customer_name",
+  Supplier: "supplier_name",
+  Employee: "employee_name",
+  Lead: "lead_name"
+};
+async function resolveDynamicLink(client, targetDoctype, identifier, options = {}) {
+  const searchField = DYNAMIC_LINK_SEARCH_FIELDS[targetDoctype];
+  if (!searchField) return identifier;
+  return resolveLink(client, targetDoctype, identifier, searchField, options);
+}
+
 // src/tools/sales.ts
 function mapLineItems(items, options) {
   if (!Array.isArray(items) || items.length === 0) {
@@ -37580,7 +38102,10 @@ var salesTools = [
       type: "object",
       properties: {
         limit: { type: "number", description: "Max results (default 20)" },
-        customer: { type: "string", description: "Filter by customer" },
+        customer: {
+          type: "string",
+          description: "Filter by customer ID or name (e.g. 'CUST-00001' or 'Acme Corp')"
+        },
         status: {
           type: "string",
           description: "Filter by status (Draft, To Deliver and Bill, Completed, Cancelled, etc.)"
@@ -37596,7 +38121,11 @@ var salesTools = [
       const limit = input.limit ?? 20;
       const filters = [];
       if (input.customer) {
-        filters.push(["customer", "=", input.customer]);
+        filters.push([
+          "customer",
+          "=",
+          await resolveCustomer(ctx.client, input.customer)
+        ]);
       }
       if (input.status) {
         filters.push(["status", "=", input.status]);
@@ -37860,7 +38389,10 @@ var salesTools = [
       type: "object",
       properties: {
         limit: { type: "number", description: "Max results (default 20)" },
-        customer: { type: "string", description: "Filter by customer" },
+        customer: {
+          type: "string",
+          description: "Filter by customer ID or name (e.g. 'CUST-00001' or 'Acme Corp')"
+        },
         status: {
           type: "string",
           description: "Filter by status (Draft, Unpaid, Paid, Overdue, Cancelled, etc.)"
@@ -37876,7 +38408,11 @@ var salesTools = [
       const limit = input.limit ?? 20;
       const filters = [];
       if (input.customer) {
-        filters.push(["customer", "=", input.customer]);
+        filters.push([
+          "customer",
+          "=",
+          await resolveCustomer(ctx.client, input.customer)
+        ]);
       }
       if (input.status) {
         filters.push(["status", "=", input.status]);
@@ -38064,22 +38600,54 @@ var salesTools = [
       type: "object",
       properties: {
         limit: { type: "number", description: "Max results (default 20)" },
-        party_name: { type: "string", description: "Filter by party name" },
+        quotation_to: {
+          type: "string",
+          description: "Party type: Customer or Lead. Required when 'party_name' is set, so the party name/ID can be resolved against the right doctype.",
+          enum: ["Customer", "Lead"]
+        },
+        party_name: {
+          type: "string",
+          description: "Filter by party \u2014 ID or name (e.g. customer/lead name). Requires 'quotation_to'."
+        },
         status: {
           type: "string",
           description: "Filter by status (Draft, Open, Replied, Ordered, Lost, Cancelled)"
-        }
+        },
+        date_from: {
+          type: "string",
+          description: "Start date filter YYYY-MM-DD"
+        },
+        date_to: { type: "string", description: "End date filter YYYY-MM-DD" }
       }
     },
     handler: async (input, ctx) => {
       const limit = input.limit ?? 20;
       const filters = [];
       if (input.party_name) {
-        filters.push(["party_name", "=", input.party_name]);
+        if (!input.quotation_to) {
+          throw new Error(
+            "[erpnext_quotation_list] 'quotation_to' is required when filtering by 'party_name'"
+          );
+        }
+        filters.push([
+          "party_name",
+          "=",
+          await resolveDynamicLink(
+            ctx.client,
+            input.quotation_to,
+            input.party_name
+          )
+        ]);
       }
       if (input.status) {
         filters.push(["status", "=", input.status]);
       }
+      if (input.date_from) {
+        filters.push(["transaction_date", ">=", input.date_from]);
+      }
+      if (input.date_to) {
+        filters.push(["transaction_date", "<=", input.date_to]);
+      }
       const docs = await ctx.client.list("Quotation", {
         fields: [
           "name",
@@ -38139,7 +38707,7 @@ var salesTools = [
         },
         party_name: {
           type: "string",
-          description: "Customer or Lead name"
+          description: "Customer or Lead \u2014 ID or name"
         },
         items: {
           type: "array",
@@ -38192,7 +38760,12 @@ var salesTools = [
       });
       const data = {
         quotation_to: input.quotation_to,
-        party_name: input.party_name,
+        party_name: await resolveDynamicLink(
+          ctx.client,
+          input.quotation_to,
+          input.party_name,
+          { allowPartialMatch: false }
+        ),
         items
       };
       if (input.transaction_date) {
@@ -38406,7 +38979,10 @@ var inventoryTools = [
       type: "object",
       properties: {
         limit: { type: "number", description: "Max results (default 50)" },
-        item_code: { type: "string", description: "Filter by item code" },
+        item_code: {
+          type: "string",
+          description: "Filter by item code or name (e.g. 'ITEM-001' or 'Widget A')"
+        },
         warehouse: { type: "string", description: "Filter by warehouse" }
       }
     },
@@ -38414,7 +38990,11 @@ var inventoryTools = [
       const limit = input.limit ?? 50;
       const filters = [];
       if (input.item_code) {
-        filters.push(["item_code", "=", input.item_code]);
+        filters.push([
+          "item_code",
+          "=",
+          await resolveItem(ctx.client, input.item_code)
+        ]);
       }
       if (input.warehouse) {
         filters.push(["warehouse", "=", input.warehouse]);
@@ -38795,9 +39375,13 @@ var accountingTools = [
         },
         party_type: {
           type: "string",
-          description: "Filter by party type (Customer, Supplier, Employee)"
+          description: "Filter by party type (Customer, Supplier, Employee). Required when 'party' is set, so the party name/ID can be resolved against the right doctype.",
+          enum: ["Customer", "Supplier", "Employee"]
+        },
+        party: {
+          type: "string",
+          description: "Filter by party \u2014 ID or name (e.g. 'CUST-00001' or 'Acme Corp'). Requires 'party_type'."
         },
-        party: { type: "string", description: "Filter by party name" },
         date_from: {
           type: "string",
           description: "Start date filter YYYY-MM-DD"
@@ -38814,7 +39398,20 @@ var accountingTools = [
         filters.push(["party_type", "=", input.party_type]);
       }
       if (input.party) {
-        filters.push(["party", "=", input.party]);
+        if (!input.party_type) {
+          throw new Error(
+            "[erpnext_payment_entry_list] 'party_type' is required when filtering by 'party'"
+          );
+        }
+        filters.push([
+          "party",
+          "=",
+          await resolveDynamicLink(
+            ctx.client,
+            input.party_type,
+            input.party
+          )
+        ]);
       }
       if (input.date_from) {
         filters.push(["posting_date", ">=", input.date_from]);
@@ -39018,7 +39615,10 @@ var hrTools = [
       type: "object",
       properties: {
         limit: { type: "number", description: "Max results (default 20)" },
-        employee: { type: "string", description: "Filter by employee ID" },
+        employee: {
+          type: "string",
+          description: "Filter by employee ID or name (e.g. 'HR-EMP-00001' or 'John Doe')"
+        },
         status: {
           type: "string",
           description: "Filter by status (Present, Absent, Half Day, On Leave)",
@@ -39035,7 +39635,11 @@ var hrTools = [
       const limit = input.limit ?? 20;
       const filters = [];
       if (input.employee) {
-        filters.push(["employee", "=", input.employee]);
+        filters.push([
+          "employee",
+          "=",
+          await resolveEmployee(ctx.client, input.employee)
+        ]);
       }
       if (input.status) {
         filters.push(["status", "=", input.status]);
@@ -39077,7 +39681,10 @@ var hrTools = [
       type: "object",
       properties: {
         limit: { type: "number", description: "Max results (default 20)" },
-        employee: { type: "string", description: "Filter by employee ID" },
+        employee: {
+          type: "string",
+          description: "Filter by employee ID or name (e.g. 'HR-EMP-00001' or 'John Doe')"
+        },
         status: {
           type: "string",
           description: "Filter by status (Open, Approved, Rejected, Cancelled)",
@@ -39086,14 +39693,23 @@ var hrTools = [
         leave_type: {
           type: "string",
           description: "Filter by leave type (e.g. Sick Leave)"
-        }
+        },
+        date_from: {
+          type: "string",
+          description: "Start date filter YYYY-MM-DD"
+        },
+        date_to: { type: "string", description: "End date filter YYYY-MM-DD" }
       }
     },
     handler: async (input, ctx) => {
       const limit = input.limit ?? 20;
       const filters = [];
       if (input.employee) {
-        filters.push(["employee", "=", input.employee]);
+        filters.push([
+          "employee",
+          "=",
+          await resolveEmployee(ctx.client, input.employee)
+        ]);
       }
       if (input.status) {
         filters.push(["status", "=", input.status]);
@@ -39101,6 +39717,12 @@ var hrTools = [
       if (input.leave_type) {
         filters.push(["leave_type", "=", input.leave_type]);
       }
+      if (input.date_from) {
+        filters.push(["from_date", ">=", input.date_from]);
+      }
+      if (input.date_to) {
+        filters.push(["to_date", "<=", input.date_to]);
+      }
       const docs = await ctx.client.list("Leave Application", {
         fields: [
           "name",
@@ -39215,7 +39837,10 @@ var hrTools = [
       type: "object",
       properties: {
         limit: { type: "number", description: "Max results (default 20)" },
-        employee: { type: "string", description: "Filter by employee ID" },
+        employee: {
+          type: "string",
+          description: "Filter by employee ID or name (e.g. 'HR-EMP-00001' or 'John Doe')"
+        },
         status: {
           type: "string",
           description: "Filter by status (Draft, Submitted, Cancelled)",
@@ -39235,7 +39860,11 @@ var hrTools = [
       const limit = input.limit ?? 20;
       const filters = [];
       if (input.employee) {
-        filters.push(["employee", "=", input.employee]);
+        filters.push([
+          "employee",
+          "=",
+          await resolveEmployee(ctx.client, input.employee)
+        ]);
       }
       if (input.status) {
         filters.push(["status", "=", input.status]);
@@ -39309,7 +39938,12 @@ var hrTools = [
           type: "string",
           description: "Filter by status (Draft, Submitted, Cancelled)",
           enum: ["Draft", "Submitted", "Cancelled"]
-        }
+        },
+        date_from: {
+          type: "string",
+          description: "Start date filter YYYY-MM-DD"
+        },
+        date_to: { type: "string", description: "End date filter YYYY-MM-DD" }
       }
     },
     handler: async (input, ctx) => {
@@ -39321,6 +39955,12 @@ var hrTools = [
       if (input.status) {
         filters.push(["status", "=", input.status]);
       }
+      if (input.date_from) {
+        filters.push(["posting_date", ">=", input.date_from]);
+      }
+      if (input.date_to) {
+        filters.push(["posting_date", "<=", input.date_to]);
+      }
       const docs = await ctx.client.list("Payroll Entry", {
         fields: [
           "name",
@@ -39352,7 +39992,10 @@ var hrTools = [
       type: "object",
       properties: {
         limit: { type: "number", description: "Max results (default 20)" },
-        employee: { type: "string", description: "Filter by employee ID" },
+        employee: {
+          type: "string",
+          description: "Filter by employee ID or name (e.g. 'HR-EMP-00001' or 'John Doe')"
+        },
         status: {
           type: "string",
           description: "Filter by status (Draft, Submitted, Cancelled)",
@@ -39362,14 +40005,23 @@ var hrTools = [
           type: "string",
           description: "Filter by approval status (Pending, Approved, Rejected)",
           enum: ["Pending", "Approved", "Rejected"]
-        }
+        },
+        date_from: {
+          type: "string",
+          description: "Start date filter YYYY-MM-DD"
+        },
+        date_to: { type: "string", description: "End date filter YYYY-MM-DD" }
       }
     },
     handler: async (input, ctx) => {
       const limit = input.limit ?? 20;
       const filters = [];
       if (input.employee) {
-        filters.push(["employee", "=", input.employee]);
+        filters.push([
+          "employee",
+          "=",
+          await resolveEmployee(ctx.client, input.employee)
+        ]);
       }
       if (input.status) {
         filters.push(["status", "=", input.status]);
@@ -39377,6 +40029,12 @@ var hrTools = [
       if (input.approval_status) {
         filters.push(["approval_status", "=", input.approval_status]);
       }
+      if (input.date_from) {
+        filters.push(["posting_date", ">=", input.date_from]);
+      }
+      if (input.date_to) {
+        filters.push(["posting_date", "<=", input.date_to]);
+      }
       const docs = await ctx.client.list("Expense Claim", {
         fields: [
           "name",
@@ -39478,7 +40136,7 @@ var hrTools = [
       properties: {
         employee: {
           type: "string",
-          description: "Employee ID (e.g. HR-EMP-00001)"
+          description: "Employee ID or name (e.g. 'HR-EMP-00001' or 'John Doe')"
         }
       },
       required: ["employee"]
@@ -39488,7 +40146,11 @@ var hrTools = [
         throw new Error("[erpnext_leave_balance] 'employee' is required");
       }
       const filters = [
-        ["employee", "=", input.employee],
+        [
+          "employee",
+          "=",
+          await resolveEmployee(ctx.client, input.employee)
+        ],
         ["docstatus", "=", 1]
       ];
       const docs = await ctx.client.list("Leave Allocation", {
@@ -39689,7 +40351,12 @@ var projectTools = [
           description: "Filter by status (Open, Completed, Cancelled)",
           enum: ["Open", "Completed", "Cancelled"]
         },
-        company: { type: "string", description: "Filter by company" }
+        company: { type: "string", description: "Filter by company" },
+        date_from: {
+          type: "string",
+          description: "Start date filter YYYY-MM-DD"
+        },
+        date_to: { type: "string", description: "End date filter YYYY-MM-DD" }
       }
     },
     handler: async (input, ctx) => {
@@ -39701,6 +40368,12 @@ var projectTools = [
       if (input.company) {
         filters.push(["company", "=", input.company]);
       }
+      if (input.date_from) {
+        filters.push(["expected_start_date", ">=", input.date_from]);
+      }
+      if (input.date_to) {
+        filters.push(["expected_end_date", "<=", input.date_to]);
+      }
       const docs = await ctx.client.list("Project", {
         fields: [
           "name",
@@ -39763,7 +40436,12 @@ var projectTools = [
           type: "string",
           description: "Filter by priority (Low, Medium, High, Urgent)",
           enum: ["Low", "Medium", "High", "Urgent"]
-        }
+        },
+        date_from: {
+          type: "string",
+          description: "Start date filter YYYY-MM-DD"
+        },
+        date_to: { type: "string", description: "End date filter YYYY-MM-DD" }
       }
     },
     handler: async (input, ctx) => {
@@ -39778,6 +40456,12 @@ var projectTools = [
       if (input.priority) {
         filters.push(["priority", "=", input.priority]);
       }
+      if (input.date_from) {
+        filters.push(["exp_start_date", ">=", input.date_from]);
+      }
+      if (input.date_to) {
+        filters.push(["exp_end_date", "<=", input.date_to]);
+      }
       const docs = await ctx.client.list("Task", {
         fields: [
           "name",
@@ -40020,19 +40704,31 @@ var projectTools = [
       type: "object",
       properties: {
         limit: { type: "number", description: "Max results (default 20)" },
-        employee: { type: "string", description: "Filter by employee ID" },
+        employee: {
+          type: "string",
+          description: "Filter by employee ID or name (e.g. 'HR-EMP-00001' or 'John Doe')"
+        },
         project: { type: "string", description: "Filter by project name" },
         status: {
           type: "string",
           description: "Filter by status (Draft, Submitted, Cancelled)"
-        }
+        },
+        date_from: {
+          type: "string",
+          description: "Start date filter YYYY-MM-DD"
+        },
+        date_to: { type: "string", description: "End date filter YYYY-MM-DD" }
       }
     },
     handler: async (input, ctx) => {
       const limit = input.limit ?? 20;
       const filters = [];
       if (input.employee) {
-        filters.push(["employee", "=", input.employee]);
+        filters.push([
+          "employee",
+          "=",
+          await resolveEmployee(ctx.client, input.employee)
+        ]);
       }
       if (input.project) {
         filters.push(["project", "=", input.project]);
@@ -40040,6 +40736,12 @@ var projectTools = [
       if (input.status) {
         filters.push(["status", "=", input.status]);
       }
+      if (input.date_from) {
+        filters.push(["start_date", ">=", input.date_from]);
+      }
+      if (input.date_to) {
+        filters.push(["end_date", "<=", input.date_to]);
+      }
       const docs = await ctx.client.list("Timesheet", {
         fields: [
           "name",
@@ -40282,7 +40984,10 @@ var purchasingTools = [
       type: "object",
       properties: {
         limit: { type: "number", description: "Max results (default 20)" },
-        supplier: { type: "string", description: "Filter by supplier" },
+        supplier: {
+          type: "string",
+          description: "Filter by supplier ID or name (e.g. 'SUPP-00001' or 'Acme Supplies')"
+        },
         status: {
           type: "string",
           description: "Filter by status (Draft, To Receive and Bill, To Bill, Completed, Cancelled, etc.)"
@@ -40298,7 +41003,11 @@ var purchasingTools = [
       const limit = input.limit ?? 20;
       const filters = [];
       if (input.supplier) {
-        filters.push(["supplier", "=", input.supplier]);
+        filters.push([
+          "supplier",
+          "=",
+          await resolveSupplier(ctx.client, input.supplier)
+        ]);
       }
       if (input.status) {
         filters.push(["status", "=", input.status]);
@@ -40430,7 +41139,10 @@ var purchasingTools = [
       type: "object",
       properties: {
         limit: { type: "number", description: "Max results (default 20)" },
-        supplier: { type: "string", description: "Filter by supplier" },
+        supplier: {
+          type: "string",
+          description: "Filter by supplier ID or name (e.g. 'SUPP-00001' or 'Acme Supplies')"
+        },
         status: {
           type: "string",
           description: "Filter by status (Draft, Unpaid, Paid, Overdue, Cancelled, etc.)"
@@ -40446,7 +41158,11 @@ var purchasingTools = [
       const limit = input.limit ?? 20;
       const filters = [];
       if (input.supplier) {
-        filters.push(["supplier", "=", input.supplier]);
+        filters.push([
+          "supplier",
+          "=",
+          await resolveSupplier(ctx.client, input.supplier)
+        ]);
       }
       if (input.status) {
         filters.push(["status", "=", input.status]);
@@ -40516,7 +41232,10 @@ var purchasingTools = [
       type: "object",
       properties: {
         limit: { type: "number", description: "Max results (default 20)" },
-        supplier: { type: "string", description: "Filter by supplier" },
+        supplier: {
+          type: "string",
+          description: "Filter by supplier ID or name (e.g. 'SUPP-00001' or 'Acme Supplies')"
+        },
         status: {
           type: "string",
           description: "Filter by status (Draft, To Bill, Completed, Cancelled, etc.)"
@@ -40532,7 +41251,11 @@ var purchasingTools = [
       const limit = input.limit ?? 20;
       const filters = [];
       if (input.supplier) {
-        filters.push(["supplier", "=", input.supplier]);
+        filters.push([
+          "supplier",
+          "=",
+          await resolveSupplier(ctx.client, input.supplier)
+        ]);
       }
       if (input.status) {
         filters.push(["status", "=", input.status]);
@@ -40601,22 +41324,40 @@ var purchasingTools = [
       type: "object",
       properties: {
         limit: { type: "number", description: "Max results (default 20)" },
-        supplier: { type: "string", description: "Filter by supplier" },
+        supplier: {
+          type: "string",
+          description: "Filter by supplier ID or name (e.g. 'SUPP-00001' or 'Acme Supplies')"
+        },
         status: {
           type: "string",
           description: "Filter by status (Draft, Submitted, Ordered, Lost, Cancelled)"
-        }
+        },
+        date_from: {
+          type: "string",
+          description: "Start date filter YYYY-MM-DD"
+        },
+        date_to: { type: "string", description: "End date filter YYYY-MM-DD" }
       }
     },
     handler: async (input, ctx) => {
       const limit = input.limit ?? 20;
       const filters = [];
       if (input.supplier) {
-        filters.push(["supplier", "=", input.supplier]);
+        filters.push([
+          "supplier",
+          "=",
+          await resolveSupplier(ctx.client, input.supplier)
+        ]);
       }
       if (input.status) {
         filters.push(["status", "=", input.status]);
       }
+      if (input.date_from) {
+        filters.push(["transaction_date", ">=", input.date_from]);
+      }
+      if (input.date_to) {
+        filters.push(["transaction_date", "<=", input.date_to]);
+      }
       const docs = await ctx.client.list("Supplier Quotation", {
         fields: [
           "name",
@@ -40652,7 +41393,10 @@ var deliveryTools = [
       type: "object",
       properties: {
         limit: { type: "number", description: "Max results (default 20)" },
-        customer: { type: "string", description: "Filter by customer" },
+        customer: {
+          type: "string",
+          description: "Filter by customer ID or name (e.g. 'CUST-00001' or 'Acme Corp')"
+        },
         status: {
           type: "string",
           description: "Filter by status (Draft, To Bill, Completed, Cancelled, etc.)"
@@ -40668,7 +41412,11 @@ var deliveryTools = [
       const limit = input.limit ?? 20;
       const filters = [];
       if (input.customer) {
-        filters.push(["customer", "=", input.customer]);
+        filters.push([
+          "customer",
+          "=",
+          await resolveCustomer(ctx.client, input.customer)
+        ]);
       }
       if (input.status) {
         filters.push(["status", "=", input.status]);
@@ -40887,7 +41635,7 @@ var manufacturingTools = [
         limit: { type: "number", description: "Max results (default 20)" },
         item: {
           type: "string",
-          description: "Filter by finished goods item code"
+          description: "Filter by finished goods item code or name (e.g. 'ITEM-001' or 'Widget A')"
         },
         is_active: {
           type: "boolean",
@@ -40903,7 +41651,11 @@ var manufacturingTools = [
       const limit = input.limit ?? 20;
       const filters = [];
       if (input.item) {
-        filters.push(["item", "=", input.item]);
+        filters.push([
+          "item",
+          "=",
+          await resolveItem(ctx.client, input.item)
+        ]);
       }
       if (input.is_active !== void 0) {
         filters.push(["is_active", "=", input.is_active ? 1 : 0]);
@@ -40971,7 +41723,7 @@ var manufacturingTools = [
         limit: { type: "number", description: "Max results (default 20)" },
         production_item: {
           type: "string",
-          description: "Filter by item being produced"
+          description: "Filter by item being produced \u2014 item code or name (e.g. 'ITEM-001' or 'Widget A')"
         },
         status: {
           type: "string",
@@ -40991,7 +41743,11 @@ var manufacturingTools = [
       const limit = input.limit ?? 20;
       const filters = [];
       if (input.production_item) {
-        filters.push(["production_item", "=", input.production_item]);
+        filters.push([
+          "production_item",
+          "=",
+          await resolveItem(ctx.client, input.production_item)
+        ]);
       }
       if (input.status) {
         filters.push(["status", "=", input.status]);
@@ -41315,9 +42071,14 @@ var crmTools = [
           type: "string",
           description: "Filter by assigned sales rep (user)"
         },
+        opportunity_from: {
+          type: "string",
+          description: "Party type: Customer or Lead. Required when 'party_name' is set, so the party name/ID can be resolved against the right doctype.",
+          enum: ["Customer", "Lead"]
+        },
         party_name: {
           type: "string",
-          description: "Filter by customer or lead name"
+          description: "Filter by party \u2014 ID or name (e.g. customer/lead name). Requires 'opportunity_from'."
         }
       }
     },
@@ -41335,7 +42096,20 @@ var crmTools = [
         ]);
       }
       if (input.party_name) {
-        filters.push(["party_name", "=", input.party_name]);
+        if (!input.opportunity_from) {
+          throw new Error(
+            "[erpnext_opportunity_list] 'opportunity_from' is required when filtering by 'party_name'"
+          );
+        }
+        filters.push([
+          "party_name",
+          "=",
+          await resolveDynamicLink(
+            ctx.client,
+            input.opportunity_from,
+            input.party_name
+          )
+        ]);
       }
       const docs = await ctx.client.list("Opportunity", {
         fields: [
@@ -41463,7 +42237,12 @@ var crmTools = [
         campaign_type: {
           type: "string",
           description: "Filter by campaign type"
-        }
+        },
+        date_from: {
+          type: "string",
+          description: "Start date filter YYYY-MM-DD"
+        },
+        date_to: { type: "string", description: "End date filter YYYY-MM-DD" }
       }
     },
     handler: async (input, ctx) => {
@@ -41472,6 +42251,12 @@ var crmTools = [
       if (input.campaign_type) {
         filters.push(["campaign_type", "=", input.campaign_type]);
       }
+      if (input.date_from) {
+        filters.push(["start_date", ">=", input.date_from]);
+      }
+      if (input.date_to) {
+        filters.push(["end_date", "<=", input.date_to]);
+      }
       const docs = await ctx.client.list("Campaign", {
         fields: [
           "name",
@@ -41519,7 +42304,15 @@ var assetsTools = [
         location: { type: "string", description: "Filter by location" },
         custodian: {
           type: "string",
-          description: "Filter by custodian (employee)"
+          description: "Filter by custodian \u2014 employee ID or name (e.g. 'HR-EMP-00001' or 'John Doe')"
+        },
+        date_from: {
+          type: "string",
+          description: "Purchase date start filter YYYY-MM-DD"
+        },
+        date_to: {
+          type: "string",
+          description: "Purchase date end filter YYYY-MM-DD"
         }
       }
     },
@@ -41536,7 +42329,17 @@ var assetsTools = [
         filters.push(["location", "=", input.location]);
       }
       if (input.custodian) {
-        filters.push(["custodian", "=", input.custodian]);
+        filters.push([
+          "custodian",
+          "=",
+          await resolveEmployee(ctx.client, input.custodian)
+        ]);
+      }
+      if (input.date_from) {
+        filters.push(["purchase_date", ">=", input.date_from]);
+      }
+      if (input.date_to) {
+        filters.push(["purchase_date", "<=", input.date_to]);
       }
       const docs = await ctx.client.list("Asset", {
         fields: [
@@ -41990,11 +42793,13 @@ var operationsTools = [
       }
       const doc = await ctx.client.get(
         input.doctype,
-        input.name
+        input.name,
+        { skipCache: true }
       );
       const result = await ctx.client.callMethod("frappe.client.submit", {
         doc: { ...doc, doctype: input.doctype }
       });
+      ctx.client.invalidate(input.doctype, input.name);
       return {
         data: result,
         message: `${input.doctype} ${input.name} submitted successfully`,
@@ -42034,6 +42839,7 @@ var operationsTools = [
         doctype: input.doctype,
         name: input.name
       });
+      ctx.client.invalidate(input.doctype, input.name);
       return {
         data: result,
         message: `${input.doctype} ${input.name} cancelled successfully`,
@@ -44728,302 +45534,8 @@ var allTools = [
 function getToolsByCategory(category) {
   return toolsByCategory[category] ?? [];
 }
-
-// src/runtime.ts
-var isDeno2 = typeof globalThis.Deno?.version?.deno === "string";
-var impl2 = isDeno2 ? await Promise.resolve().then(() => (init_runtime_deno2(), runtime_deno_exports2)) : await Promise.resolve().then(() => (init_runtime_node2(), runtime_node_exports2));
-var env6 = impl2.env;
-var readTextFile6 = impl2.readTextFile;
-var statSync3 = impl2.statSync;
-var readDirSync3 = impl2.readDirSync;
-var getArgs3 = impl2.getArgs;
-var exit3 = impl2.exit;
-var onSignal3 = impl2.onSignal;
-
-// src/api/frappe-client.ts
-var DEFAULT_RETRY_STATUSES = [408, 429, 502, 503, 504];
-var DEFAULT_RETRY_METHODS = ["GET"];
-var FrappeAPIError = class extends Error {
-  /**
-   * @param message - Human-readable error description
-   * @param status - HTTP status code (0 for network errors, 408 for timeouts)
-   * @param body - Raw response body (parsed JSON object or plain text string)
-   * @param retryAfterMs - When the server sent a `Retry-After` header on a
-   *                      retryable status (typically 429), the parsed delay
-   *                      in ms. Used by the retry loop; absent otherwise.
-   */
-  constructor(message2, status, body, retryAfterMs) {
-    super(`[FrappeClient] ${message2} (HTTP ${status})`);
-    this.status = status;
-    this.body = body;
-    this.retryAfterMs = retryAfterMs;
-    this.name = "FrappeAPIError";
-  }
-};
-function parseRetryAfter(raw2) {
-  if (!raw2) return void 0;
-  const trimmed = raw2.trim();
-  const seconds = Number(trimmed);
-  if (Number.isFinite(seconds) && seconds >= 0) {
-    return Math.round(seconds * 1e3);
-  }
-  const date3 = Date.parse(trimmed);
-  if (Number.isFinite(date3)) {
-    return Math.max(0, date3 - Date.now());
-  }
-  return void 0;
-}
-function extractServerMessages(raw2) {
-  if (!raw2 || typeof raw2 !== "string") return void 0;
-  try {
-    const outer = JSON.parse(raw2);
-    if (!Array.isArray(outer)) return void 0;
-    const msgs = [];
-    for (const item of outer) {
-      try {
-        const inner = JSON.parse(item);
-        if (typeof inner === "object" && inner?.message) {
-          msgs.push(inner.message);
-        } else if (typeof inner === "string") {
-          msgs.push(inner);
-        }
-      } catch {
-        if (typeof item === "string") msgs.push(item);
-      }
-    }
-    return msgs.length > 0 ? msgs.join("; ") : void 0;
-  } catch {
-    return void 0;
-  }
-}
-var FrappeClient = class {
-  baseUrl;
-  authHeader;
-  timeoutMs;
-  retries;
-  retryStatuses;
-  retryBackoffMs;
-  retryMethods;
-  constructor(config2) {
-    this.baseUrl = config2.baseUrl.replace(/\/$/, "");
-    this.authHeader = `token ${config2.apiKey}:${config2.apiSecret}`;
-    this.timeoutMs = config2.timeoutMs ?? 3e4;
-    this.retries = config2.retries ?? 3;
-    this.retryStatuses = config2.retryStatuses ?? DEFAULT_RETRY_STATUSES;
-    this.retryBackoffMs = config2.retryBackoffMs ?? 200;
-    this.retryMethods = config2.retryMethods ?? DEFAULT_RETRY_METHODS;
-  }
-  // ── Private HTTP helpers ────────────────────────────────────────────────────
-  buildHeaders() {
-    return {
-      "Authorization": this.authHeader,
-      "Accept": "application/json",
-      "Content-Type": "application/json"
-    };
-  }
-  /**
-   * Decide whether an error is worth retrying.
-   * Network errors (status 0) and timeouts (status 408) are always retryable;
-   * other statuses are checked against `retryStatuses`.
-   */
-  isRetryable(err, method) {
-    if (!this.retryMethods.includes(method)) return false;
-    if (!(err instanceof FrappeAPIError)) return false;
-    if (err.status === 0) return true;
-    return this.retryStatuses.includes(err.status);
-  }
-  /** Compute the backoff delay for a given attempt (0-indexed). */
-  computeBackoff(attempt, err) {
-    if (err instanceof FrappeAPIError && err.retryAfterMs !== void 0) {
-      return err.retryAfterMs;
-    }
-    return this.retryBackoffMs * 2 ** attempt;
-  }
-  async request(method, path, body) {
-    let lastError;
-    for (let attempt = 0; attempt <= this.retries; attempt++) {
-      try {
-        return await this.requestOnce(method, path, body);
-      } catch (err) {
-        lastError = err;
-        if (attempt === this.retries || !this.isRetryable(err, method)) {
-          throw err;
-        }
-        const delay = this.computeBackoff(attempt, err);
-        if (delay > 0) {
-          await new Promise((resolve) => setTimeout(resolve, delay));
-        }
-      }
-    }
-    throw lastError;
-  }
-  async requestOnce(method, path, body) {
-    const url = `${this.baseUrl}${path}`;
-    const controller = new AbortController();
-    const timer = setTimeout(() => controller.abort(), this.timeoutMs);
-    let response;
-    try {
-      response = await fetch(url, {
-        method,
-        headers: this.buildHeaders(),
-        body: body !== void 0 ? JSON.stringify(body) : void 0,
-        signal: controller.signal
-      });
-    } catch (err) {
-      clearTimeout(timer);
-      if (err instanceof Error && err.name === "AbortError") {
-        throw new FrappeAPIError(
-          `Request timed out after ${this.timeoutMs}ms: ${method} ${path}`,
-          408,
-          null
-        );
-      }
-      throw new FrappeAPIError(
-        `Network error on ${method} ${path}: ${err.message}`,
-        0,
-        null
-      );
-    }
-    clearTimeout(timer);
-    const rawText = await response.text();
-    const contentType = response.headers.get("content-type") ?? "";
-    let responseBody = rawText;
-    if (contentType.includes("application/json") && rawText.length > 0) {
-      try {
-        responseBody = JSON.parse(rawText);
-      } catch {
-        responseBody = rawText;
-      }
-    }
-    if (!response.ok) {
-      let msg = response.statusText;
-      if (typeof responseBody === "object" && responseBody !== null) {
-        const rb = responseBody;
-        const excType = rb.exc_type;
-        const baseMsg = rb.message ?? excType ?? response.statusText;
-        const serverDetails = extractServerMessages(rb._server_messages);
-        msg = serverDetails ? `${baseMsg}: ${serverDetails}` : baseMsg;
-      } else if (typeof responseBody === "string" && responseBody.length > 0) {
-        msg = responseBody.slice(0, 200);
-      }
-      const retryAfterMs = parseRetryAfter(
-        response.headers.get("retry-after")
-      );
-      throw new FrappeAPIError(
-        `${method} ${path} failed: ${msg}`,
-        response.status,
-        responseBody,
-        retryAfterMs
-      );
-    }
-    return responseBody;
-  }
-  // ── Resource CRUD ───────────────────────────────────────────────────────────
-  /**
-   * List documents of a DocType.
-   * Frappe list API: GET /api/resource/{doctype}?fields=...&filters=...
-   */
-  async list(doctype, options = {}) {
-    const params = new URLSearchParams();
-    if (options.fields && options.fields.length > 0) {
-      params.set("fields", JSON.stringify(options.fields));
-    }
-    if (options.filters && options.filters.length > 0) {
-      params.set("filters", JSON.stringify(options.filters));
-    }
-    if (options.order_by) {
-      params.set("order_by", options.order_by);
-    }
-    if (options.limit !== void 0) {
-      params.set("limit", String(options.limit));
-    }
-    if (options.limit_start !== void 0) {
-      params.set("limit_start", String(options.limit_start));
-    }
-    params.set("as_dict", "1");
-    const query = params.toString() ? `?${params.toString()}` : "";
-    const res = await this.request(
-      "GET",
-      `/api/resource/${encodeURIComponent(doctype)}${query}`
-    );
-    return res.data ?? [];
-  }
-  /**
-   * Get a single document by name.
-   * GET /api/resource/{doctype}/{name}
-   */
-  async get(doctype, name) {
-    const res = await this.request(
-      "GET",
-      `/api/resource/${encodeURIComponent(doctype)}/${encodeURIComponent(name)}`
-    );
-    return res.data;
-  }
-  /**
-   * Create a new document.
-   * POST /api/resource/{doctype}
-   */
-  async create(doctype, data) {
-    const res = await this.request(
-      "POST",
-      `/api/resource/${encodeURIComponent(doctype)}`,
-      { data: { ...data, doctype } }
-    );
-    return res.data;
-  }
-  /**
-   * Update an existing document (partial update).
-   * PUT /api/resource/{doctype}/{name}
-   */
-  async update(doctype, name, data) {
-    const res = await this.request(
-      "PUT",
-      `/api/resource/${encodeURIComponent(doctype)}/${encodeURIComponent(name)}`,
-      { data }
-    );
-    return res.data;
-  }
-  /**
-   * Delete a document.
-   * DELETE /api/resource/{doctype}/{name}
-   */
-  async delete(doctype, name) {
-    await this.request(
-      "DELETE",
-      `/api/resource/${encodeURIComponent(doctype)}/${encodeURIComponent(name)}`
-    );
-  }
-  /**
-   * Call a whitelisted Frappe method.
-   * POST /api/method/{method}
-   */
-  async callMethod(method, args = {}) {
-    const res = await this.request(
-      "POST",
-      `/api/method/${method}`,
-      args
-    );
-    return res.message;
-  }
-};
-var _client = null;
-function getFrappeClient() {
-  if (_client) return _client;
-  const url = env6("ERPNEXT_URL");
-  const apiKey = env6("ERPNEXT_API_KEY");
-  const apiSecret = env6("ERPNEXT_API_SECRET");
-  if (!url) {
-    throw new Error(
-      "[lib/erpnext] ERPNEXT_URL is required. Set it to your ERPNext instance URL, e.g. http://localhost:8000"
-    );
-  }
-  if (!apiKey || !apiSecret) {
-    throw new Error(
-      "[lib/erpnext] ERPNEXT_API_KEY and ERPNEXT_API_SECRET are required. Generate them in ERPNext: User Settings \u2192 API Access."
-    );
-  }
-  _client = new FrappeClient({ baseUrl: url, apiKey, apiSecret });
-  return _client;
+function getToolByName(name) {
+  return allTools.find((t) => t.name === name);
 }
 
 // src/tools/ui-refresh.ts
@@ -45320,6 +45832,37 @@ function resolveViewerDistPath2(moduleUrl, viewerName, exists) {
   return null;
 }
 
+// src/cache/warm.ts
+async function warmCache() {
+  const configured = env6("MCP_CACHE_WARM_TOOLS");
+  if (!configured?.trim()) return;
+  const client = getFrappeClient();
+  const names = configured.split(",").map((s) => s.trim()).filter(Boolean);
+  for (const name of names) {
+    const tool = getToolByName(name);
+    if (!tool) {
+      console.error(
+        `[mcp-erpnext] Cache warm: unknown tool "${name}", skipping`
+      );
+      continue;
+    }
+    if (!tool.annotations?.readOnlyHint) {
+      console.error(
+        `[mcp-erpnext] Cache warm: "${name}" is not read-only, refusing to call it, skipping`
+      );
+      continue;
+    }
+    try {
+      await tool.handler({}, { client });
+    } catch (err) {
+      console.error(
+        `[mcp-erpnext] Cache warm: "${name}" failed (non-fatal):`,
+        err
+      );
+    }
+  }
+}
+
 // server.ts
 var DEFAULT_HTTP_PORT = 3012;
 async function main() {
@@ -45338,13 +45881,13 @@ async function main() {
   const portArg = args.find((arg) => arg.startsWith("--port="));
   const httpPort = portArg ? parseInt(portArg.split("=")[1], 10) : DEFAULT_HTTP_PORT;
   const hostnameArg = args.find((arg) => arg.startsWith("--hostname="));
-  const hostname = hostnameArg ? hostnameArg.split("=")[1] : "0.0.0.0";
+  const hostname = hostnameArg ? hostnameArg.split("=")[1] : "127.0.0.1";
   const toolsClient = new ErpNextToolsClient(
     categories ? { categories } : void 0
   );
   const server = new McpApp({
     name: "mcp-erpnext",
-    version: "2.4.1",
+    version: "2.5.0",
     maxConcurrent: 10,
     backpressureStrategy: "queue",
     validateSchema: true,
@@ -45389,7 +45932,16 @@ async function main() {
   console.error(
     `[mcp-erpnext] Initialized \u2014 ${toolsClient.count} tools${categories ? ` (categories: ${categories.join(", ")})` : ""}`
   );
+  warmCache().catch((err) => {
+    console.error("[mcp-erpnext] Cache warm failed (non-fatal):", err);
+  });
   if (httpFlag) {
+    const isLoopback = hostname === "127.0.0.1" || hostname === "::1" || hostname === "localhost";
+    if (!isLoopback) {
+      console.error(
+        `[mcp-erpnext] WARNING: binding to ${hostname} exposes the HTTP server to the network. Every tool acts with the server's ERPNext API key, so restrict access (firewall, private network, or an authenticating reverse proxy).`
+      );
+    }
     await server.startHttp({
       port: httpPort,
       hostname,