@casys/mcp-erpnext 2.4.2 → 2.6.0

package/mcp-erpnext.mjs

@@ -34542,7 +34542,7 @@ function isCloudflareWorkers() {
 var USER_AGENT;
 if (typeof navigator === "undefined" || !navigator.userAgent?.startsWith?.("Mozilla/5.0 ")) {
   const NAME = "jose";
-  const VERSION2 = "v6.2.3";
+  const VERSION2 = "v6.2.4";
   USER_AGENT = `${NAME}/${VERSION2}`;
 }
 var customFetch = Symbol();
@@ -37314,6 +37314,65 @@ function defaultHumanName(name) {
   return name.split("-").map((w) => w.charAt(0).toUpperCase() + w.slice(1)).join(" ");
 }
 
+// node_modules/@casys/mcp-server/src/auth/static-token-provider.ts
+var StaticTokenAuthProvider = class extends AuthProvider {
+  tokens;
+  authInfo;
+  resource;
+  resourceMetadataUrl;
+  scopesSupported;
+  constructor(tokens, options) {
+    super();
+    if (tokens.length === 0) {
+      throw new Error(
+        "[StaticTokenAuthProvider] `tokens` must contain at least one token"
+      );
+    }
+    if (tokens.some((t) => t.trim().length === 0)) {
+      throw new Error(
+        "[StaticTokenAuthProvider] `tokens` must not contain empty entries"
+      );
+    }
+    if (!options.resource?.trim()) {
+      throw new Error("[StaticTokenAuthProvider] `resource` is required");
+    }
+    const resourceUrl = httpsUrl(options.resource);
+    this.tokens = new Set(tokens.map((t) => t.trim()));
+    const scopes = Object.freeze([...options.scopes ?? []]);
+    this.authInfo = Object.freeze({
+      subject: options.subject ?? "static-token-user",
+      scopes
+    });
+    this.resource = options.resource;
+    this.scopesSupported = options.scopesSupported ? Object.freeze([...options.scopesSupported]) : scopes.length > 0 ? scopes : void 0;
+    if (options.resourceMetadataUrl?.trim()) {
+      this.resourceMetadataUrl = httpsUrl(options.resourceMetadataUrl);
+    } else {
+      const parsed = new URL(resourceUrl);
+      const pathPart = parsed.pathname === "/" ? "" : parsed.pathname;
+      this.resourceMetadataUrl = httpsUrl(
+        `${parsed.origin}/.well-known/oauth-protected-resource${pathPart}${parsed.search}`
+      );
+    }
+  }
+  async verifyToken(token) {
+    return this.tokens.has(token.trim()) ? this.authInfo : null;
+  }
+  getResourceMetadata() {
+    return {
+      resource: this.resource,
+      resource_metadata_url: this.resourceMetadataUrl,
+      // No authorization server: static tokens are provisioned out of band.
+      authorization_servers: [],
+      scopes_supported: this.scopesSupported,
+      bearer_methods_supported: ["header"]
+    };
+  }
+};
+function createStaticTokenAuthProvider(tokens, options) {
+  return new StaticTokenAuthProvider(tokens, options);
+}
+
 // node_modules/@casys/mcp-server/src/inspector/launcher.ts
 async function launchInspector(serverCommand, serverArgs, options) {
   const { spawn } = await import("node:child_process");
@@ -37389,97 +37448,714 @@ var KANBAN_META = viewer("kanban-viewer");
 var KPI_META = viewer("kpi-viewer");
 var FUNNEL_META = viewer("funnel-viewer");
 
-// src/tools/sales.ts
-function mapLineItems(items, options) {
-  if (!Array.isArray(items) || items.length === 0) {
+// src/runtime.ts
+var isDeno2 = typeof globalThis.Deno?.version?.deno === "string";
+var impl2 = isDeno2 ? await Promise.resolve().then(() => (init_runtime_deno2(), runtime_deno_exports2)) : await Promise.resolve().then(() => (init_runtime_node2(), runtime_node_exports2));
+var env6 = impl2.env;
+var readTextFile6 = impl2.readTextFile;
+var statSync3 = impl2.statSync;
+var readDirSync3 = impl2.readDirSync;
+var getArgs3 = impl2.getArgs;
+var exit3 = impl2.exit;
+var onSignal3 = impl2.onSignal;
+
+// src/cache/memory.ts
+var MemoryCache = class {
+  store = /* @__PURE__ */ new Map();
+  get(key) {
+    const entry = this.store.get(key);
+    if (!entry) return void 0;
+    if (Date.now() >= entry.expiresAt) {
+      this.store.delete(key);
+      return void 0;
+    }
+    return structuredClone(entry.value);
+  }
+  set(key, value, ttlMs) {
+    this.store.set(key, { value, expiresAt: Date.now() + ttlMs });
+  }
+  delete(key) {
+    this.store.delete(key);
+  }
+  deleteByPrefix(prefix) {
+    for (const key of this.store.keys()) {
+      if (key.startsWith(prefix)) this.store.delete(key);
+    }
+  }
+  clear() {
+    this.store.clear();
+  }
+};
+
+// src/cache/noop.ts
+var NoopCache = class {
+  get(_key) {
+    return void 0;
+  }
+  set(_key, _value, _ttlMs) {
+  }
+  delete(_key) {
+  }
+  deleteByPrefix(_prefix) {
+  }
+  clear() {
+  }
+};
+
+// src/cache/cache.ts
+var DEFAULT_CACHE_TTL_MS = 15e3;
+var _cache = null;
+function getCacheTtlMs() {
+  const raw2 = env6("MCP_CACHE_TTL_MS");
+  if (raw2 === void 0) return DEFAULT_CACHE_TTL_MS;
+  const parsed = Number(raw2);
+  if (!Number.isFinite(parsed) || parsed < 0) {
+    console.error(
+      `[mcp-erpnext] Invalid MCP_CACHE_TTL_MS=${JSON.stringify(raw2)} \u2014 must be a non-negative number. Falling back to default (${DEFAULT_CACHE_TTL_MS}ms).`
+    );
+    return DEFAULT_CACHE_TTL_MS;
+  }
+  return parsed;
+}
+function getCache() {
+  if (_cache) return _cache;
+  const enabled = env6("MCP_CACHE_ENABLED") !== "false";
+  _cache = enabled ? new MemoryCache() : new NoopCache();
+  return _cache;
+}
+
+// src/api/frappe-client.ts
+function stableStringify(value) {
+  if (Array.isArray(value)) {
+    return `[${value.map(stableStringify).join(",")}]`;
+  }
+  if (value !== null && typeof value === "object") {
+    const keys = Object.keys(value).sort();
+    return `{${keys.map(
+      (k) => `${JSON.stringify(k)}:${stableStringify(value[k])}`
+    ).join(",")}}`;
+  }
+  return JSON.stringify(value);
+}
+var DEFAULT_RETRY_STATUSES = [408, 429, 502, 503, 504];
+var DEFAULT_RETRY_METHODS = ["GET"];
+var DEFAULT_MAX_UPLOAD_BYTES = 10 * 1024 * 1024;
+function decodeBase64File(contentBase64, maxBytes) {
+  if (contentBase64.length === 0) {
+    throw new Error("[FrappeClient] File content must not be empty");
+  }
+  const unpadded = contentBase64.replace(/=+$/, "");
+  const padding = contentBase64.slice(unpadded.length);
+  if (!/^[A-Za-z0-9+/]+$/.test(unpadded) || !/^={0,2}$/.test(padding) || unpadded.length % 4 === 1) {
+    throw new Error("[FrappeClient] File content must be valid base64");
+  }
+  const decodedSize = Math.floor(unpadded.length * 6 / 8);
+  if (decodedSize > maxBytes) {
     throw new Error(
-      `[${options.toolName}] 'items' must be a non-empty array`
+      `[FrappeClient] Decoded file size ${decodedSize} bytes exceeds the ${maxBytes}-byte upload limit`
     );
   }
-  return items.map((item) => {
-    if (!item.item_code || item.qty == null || item.rate == null) {
+  const normalized = unpadded + "=".repeat((4 - unpadded.length % 4) % 4);
+  let binary;
+  try {
+    binary = atob(normalized);
+  } catch {
+    throw new Error("[FrappeClient] File content must be valid base64");
+  }
+  if (binary.length === 0) {
+    throw new Error("[FrappeClient] File content must not be empty");
+  }
+  return Uint8Array.from(binary, (character) => character.charCodeAt(0));
+}
+var FrappeAPIError = class extends Error {
+  /**
+   * @param message - Human-readable error description
+   * @param status - HTTP status code (0 for network errors, 408 for timeouts)
+   * @param body - Raw response body (parsed JSON object or plain text string)
+   * @param retryAfterMs - When the server sent a `Retry-After` header on a
+   *                      retryable status (typically 429), the parsed delay
+   *                      in ms. Used by the retry loop; absent otherwise.
+   */
+  constructor(message2, status, body, retryAfterMs) {
+    super(`[FrappeClient] ${message2} (HTTP ${status})`);
+    this.status = status;
+    this.body = body;
+    this.retryAfterMs = retryAfterMs;
+    this.name = "FrappeAPIError";
+  }
+};
+function parseRetryAfter(raw2) {
+  if (!raw2) return void 0;
+  const trimmed = raw2.trim();
+  const seconds = Number(trimmed);
+  if (Number.isFinite(seconds) && seconds >= 0) {
+    return Math.round(seconds * 1e3);
+  }
+  const date3 = Date.parse(trimmed);
+  if (Number.isFinite(date3)) {
+    return Math.max(0, date3 - Date.now());
+  }
+  return void 0;
+}
+function extractServerMessages(raw2) {
+  if (!raw2 || typeof raw2 !== "string") return void 0;
+  try {
+    const outer = JSON.parse(raw2);
+    if (!Array.isArray(outer)) return void 0;
+    const msgs = [];
+    for (const item of outer) {
+      try {
+        const inner = JSON.parse(item);
+        if (typeof inner === "object" && inner?.message) {
+          msgs.push(inner.message);
+        } else if (typeof inner === "string") {
+          msgs.push(inner);
+        }
+      } catch {
+        if (typeof item === "string") msgs.push(item);
+      }
+    }
+    return msgs.length > 0 ? msgs.join("; ") : void 0;
+  } catch {
+    return void 0;
+  }
+}
+var FrappeClient = class {
+  baseUrl;
+  authHeader;
+  timeoutMs;
+  maxUploadBytes;
+  retries;
+  retryStatuses;
+  retryBackoffMs;
+  retryMethods;
+  cache;
+  constructor(config2) {
+    this.baseUrl = config2.baseUrl.replace(/\/$/, "");
+    this.authHeader = `token ${config2.apiKey}:${config2.apiSecret}`;
+    this.timeoutMs = config2.timeoutMs ?? 3e4;
+    this.maxUploadBytes = config2.maxUploadBytes ?? DEFAULT_MAX_UPLOAD_BYTES;
+    if (!Number.isInteger(this.maxUploadBytes) || this.maxUploadBytes <= 0) {
       throw new Error(
-        `[${options.toolName}] Each item must have item_code, qty, and rate`
+        "[FrappeClient] maxUploadBytes must be a positive integer"
       );
     }
-    const mapped = {
-      item_code: item.item_code,
-      qty: item.qty,
-      rate: item.rate
+    this.retries = config2.retries ?? 3;
+    this.retryStatuses = config2.retryStatuses ?? DEFAULT_RETRY_STATUSES;
+    this.retryBackoffMs = config2.retryBackoffMs ?? 200;
+    this.retryMethods = config2.retryMethods ?? DEFAULT_RETRY_METHODS;
+    this.cache = config2.cache ?? new MemoryCache();
+  }
+  // ── Private HTTP helpers ────────────────────────────────────────────────────
+  buildHeaders(includeJsonContentType = true) {
+    const headers = {
+      "Authorization": this.authHeader,
+      "Accept": "application/json"
     };
-    if (options.defaultDeliveryDate !== void 0) {
-      mapped.delivery_date = options.defaultDeliveryDate;
+    if (includeJsonContentType) {
+      headers["Content-Type"] = "application/json";
     }
-    if (options.includeWarehouse !== false && item.warehouse) {
-      mapped.warehouse = item.warehouse;
+    return headers;
+  }
+  /**
+   * Decide whether an error is worth retrying.
+   * Network errors (status 0) and timeouts (status 408) are always retryable;
+   * other statuses are checked against `retryStatuses`.
+   */
+  isRetryable(err, method) {
+    if (!this.retryMethods.includes(method)) return false;
+    if (!(err instanceof FrappeAPIError)) return false;
+    if (err.status === 0) return true;
+    return this.retryStatuses.includes(err.status);
+  }
+  /** Compute the backoff delay for a given attempt (0-indexed). */
+  computeBackoff(attempt, err) {
+    if (err instanceof FrappeAPIError && err.retryAfterMs !== void 0) {
+      return err.retryAfterMs;
     }
-    return mapped;
-  });
-}
-var salesTools = [
-  // ── Customers ─────────────────────────────────────────────────────────────
-  {
-    name: "erpnext_customer_list",
-    annotations: { readOnlyHint: true },
-    _meta: DOCLIST_META,
-    description: "List ERPNext customers. Returns active customers by default. Fields: name, customer_name, customer_group, territory, email_id, disabled.",
-    category: "sales",
-    inputSchema: {
-      type: "object",
-      properties: {
-        limit: { type: "number", description: "Max results (default 20)" },
-        customer_group: {
-          type: "string",
-          description: "Filter by customer group"
-        },
-        territory: { type: "string", description: "Filter by territory" },
-        include_disabled: {
-          type: "boolean",
-          description: "Include disabled customers (default false)"
+    return this.retryBackoffMs * 2 ** attempt;
+  }
+  async request(method, path, body, multipart = false) {
+    let lastError;
+    for (let attempt = 0; attempt <= this.retries; attempt++) {
+      try {
+        return await this.requestOnce(method, path, body, multipart);
+      } catch (err) {
+        lastError = err;
+        if (attempt === this.retries || !this.isRetryable(err, method)) {
+          throw err;
+        }
+        const delay = this.computeBackoff(attempt, err);
+        if (delay > 0) {
+          await new Promise((resolve) => setTimeout(resolve, delay));
         }
       }
-    },
-    handler: async (input, ctx) => {
-      const limit = input.limit ?? 20;
-      const filters = [];
-      if (!input.include_disabled) {
-        filters.push(["disabled", "=", 0]);
-      }
-      if (input.customer_group) {
-        filters.push(["customer_group", "=", input.customer_group]);
-      }
-      if (input.territory) {
-        filters.push(["territory", "=", input.territory]);
-      }
-      const docs = await ctx.client.list("Customer", {
-        fields: [
-          "name",
-          "customer_name",
-          "customer_group",
-          "territory",
-          "email_id",
-          "disabled"
-        ],
-        filters,
-        limit,
-        order_by: "modified desc"
-      });
-      return {
-        doctype: "Customer",
-        count: docs.length,
-        data: docs,
-        _meta: DOCLIST_META
-      };
     }
-  },
-  {
-    name: "erpnext_customer_get",
-    annotations: { readOnlyHint: true },
-    description: "Get a single ERPNext customer by name (ID). Returns all fields including contact details.",
-    category: "sales",
-    inputSchema: {
-      type: "object",
-      properties: {
+    throw lastError;
+  }
+  async requestOnce(method, path, body, multipart = false) {
+    const url = `${this.baseUrl}${path}`;
+    const controller = new AbortController();
+    const timer = setTimeout(() => controller.abort(), this.timeoutMs);
+    let response;
+    try {
+      response = await fetch(url, {
+        method,
+        headers: this.buildHeaders(!multipart),
+        body: body === void 0 ? void 0 : multipart ? body : JSON.stringify(body),
+        signal: controller.signal
+      });
+    } catch (err) {
+      clearTimeout(timer);
+      if (err instanceof Error && err.name === "AbortError") {
+        throw new FrappeAPIError(
+          `Request timed out after ${this.timeoutMs}ms: ${method} ${path}`,
+          408,
+          null
+        );
+      }
+      throw new FrappeAPIError(
+        `Network error on ${method} ${path}: ${err.message}`,
+        0,
+        null
+      );
+    }
+    clearTimeout(timer);
+    const rawText = await response.text();
+    const contentType = response.headers.get("content-type") ?? "";
+    let responseBody = rawText;
+    if (contentType.includes("application/json") && rawText.length > 0) {
+      try {
+        responseBody = JSON.parse(rawText);
+      } catch {
+        responseBody = rawText;
+      }
+    }
+    if (!response.ok) {
+      let msg = response.statusText;
+      if (typeof responseBody === "object" && responseBody !== null) {
+        const rb = responseBody;
+        const excType = rb.exc_type;
+        const baseMsg = rb.message ?? excType ?? response.statusText;
+        const serverDetails = extractServerMessages(rb._server_messages);
+        msg = serverDetails ? `${baseMsg}: ${serverDetails}` : baseMsg;
+      } else if (typeof responseBody === "string" && responseBody.length > 0) {
+        msg = responseBody.slice(0, 200);
+      }
+      const retryAfterMs = parseRetryAfter(
+        response.headers.get("retry-after")
+      );
+      throw new FrappeAPIError(
+        `${method} ${path} failed: ${msg}`,
+        response.status,
+        responseBody,
+        retryAfterMs
+      );
+    }
+    return responseBody;
+  }
+  // ── Resource CRUD ───────────────────────────────────────────────────────────
+  /**
+   * List documents of a DocType.
+   * Frappe list API: GET /api/resource/{doctype}?fields=...&filters=...
+   *
+   * Pass `{ skipCache: true }` to force a fresh read — e.g. for aggregate/KPI
+   * tools that read across doctypes other than the one a preceding mutation
+   * invalidated (see `invalidate()` below for why that gap exists). The fresh
+   * result still refreshes the cache for subsequent normal reads.
+   */
+  async list(doctype, options = {}, opts = {}) {
+    const cacheKey = `list:${doctype}:${stableStringify(options)}`;
+    if (!opts.skipCache) {
+      const cached2 = this.cache.get(cacheKey);
+      if (cached2 !== void 0) return cached2;
+    }
+    const params = new URLSearchParams();
+    if (options.fields && options.fields.length > 0) {
+      params.set("fields", JSON.stringify(options.fields));
+    }
+    if (options.filters && options.filters.length > 0) {
+      params.set("filters", JSON.stringify(options.filters));
+    }
+    if (options.order_by) {
+      params.set("order_by", options.order_by);
+    }
+    if (options.limit !== void 0) {
+      params.set("limit", String(options.limit));
+    }
+    if (options.limit_start !== void 0) {
+      params.set("limit_start", String(options.limit_start));
+    }
+    params.set("as_dict", "1");
+    const query = params.toString() ? `?${params.toString()}` : "";
+    const res = await this.request(
+      "GET",
+      `/api/resource/${encodeURIComponent(doctype)}${query}`
+    );
+    const docs = res.data ?? [];
+    this.cache.set(cacheKey, docs, getCacheTtlMs());
+    return docs;
+  }
+  /**
+   * Get a single document by name.
+   * GET /api/resource/{doctype}/{name}
+   *
+   * Pass `{ skipCache: true }` to force a fresh read — required before any
+   * operation relying on the doc's `modified` timestamp for optimistic
+   * locking (see erpnext_doc_submit/erpnext_doc_cancel in operations.ts).
+   * The fresh result still refreshes the cache for subsequent normal reads.
+   */
+  async get(doctype, name, opts = {}) {
+    const cacheKey = `get:${doctype}:${name}`;
+    if (!opts.skipCache) {
+      const cached2 = this.cache.get(cacheKey);
+      if (cached2 !== void 0) return cached2;
+    }
+    const res = await this.request(
+      "GET",
+      `/api/resource/${encodeURIComponent(doctype)}/${encodeURIComponent(name)}`
+    );
+    this.cache.set(cacheKey, res.data, getCacheTtlMs());
+    return res.data;
+  }
+  /**
+   * Clear cached entries for a doctype (list results, resolveLink's
+   * negative-match cache) and, if `name` is given, the cached single-document
+   * read too. Called automatically after create/update/delete; call explicitly
+   * after any mutation that bypasses those methods (e.g.
+   * frappe.client.submit/cancel via callMethod).
+   *
+   * Known limitation: this only clears the mutated doctype. Frappe mutations
+   * commonly cascade — submitting a Sales Order also writes Bin/GL
+   * Entry/Sales Invoice rows — and those doctypes' cached `list()` results
+   * aren't invalidated here. Aggregate/KPI tools that read across doctypes
+   * can therefore serve up-to-TTL-stale numbers right after a mutation; pass
+   * `{ skipCache: true }` to `list()` in those tools if that staleness isn't
+   * acceptable for a given call site.
+   */
+  invalidate(doctype, name) {
+    this.cache.deleteByPrefix(`list:${doctype}:`);
+    this.cache.deleteByPrefix(`resolve:miss:${doctype}:`);
+    if (name) this.cache.delete(`get:${doctype}:${name}`);
+  }
+  /**
+   * Create a new document.
+   * POST /api/resource/{doctype}
+   */
+  async create(doctype, data) {
+    const res = await this.request(
+      "POST",
+      `/api/resource/${encodeURIComponent(doctype)}`,
+      { data: { ...data, doctype } }
+    );
+    this.invalidate(doctype, res.data.name);
+    return res.data;
+  }
+  /**
+   * Update an existing document (partial update).
+   * PUT /api/resource/{doctype}/{name}
+   */
+  async update(doctype, name, data) {
+    const res = await this.request(
+      "PUT",
+      `/api/resource/${encodeURIComponent(doctype)}/${encodeURIComponent(name)}`,
+      { data }
+    );
+    this.invalidate(doctype, name);
+    return res.data;
+  }
+  /**
+   * Delete a document.
+   * DELETE /api/resource/{doctype}/{name}
+   */
+  async delete(doctype, name) {
+    await this.request(
+      "DELETE",
+      `/api/resource/${encodeURIComponent(doctype)}/${encodeURIComponent(name)}`
+    );
+    this.invalidate(doctype, name);
+  }
+  /**
+   * Upload file bytes and attach the native File document to another document.
+   * POST /api/method/upload_file
+   */
+  async uploadFile(input) {
+    const fileName = input.fileName.trim();
+    const attachedToDoctype = input.attachedToDoctype.trim();
+    const attachedToName = input.attachedToName.trim();
+    const attachedToField = input.attachedToField?.trim();
+    if (!fileName || /[\\/\0]/.test(fileName)) {
+      throw new Error(
+        "[FrappeClient] fileName must be a filename without path separators"
+      );
+    }
+    if (!attachedToDoctype) {
+      throw new Error("[FrappeClient] attachedToDoctype must not be empty");
+    }
+    if (!attachedToName) {
+      throw new Error("[FrappeClient] attachedToName must not be empty");
+    }
+    const bytes = decodeBase64File(
+      input.contentBase64,
+      this.maxUploadBytes
+    );
+    const fileBuffer = new ArrayBuffer(bytes.byteLength);
+    new Uint8Array(fileBuffer).set(bytes);
+    const form = new FormData();
+    form.append("file", new Blob([fileBuffer]), fileName);
+    form.append("doctype", attachedToDoctype);
+    form.append("docname", attachedToName);
+    if (attachedToField) {
+      form.append("fieldname", attachedToField);
+    }
+    form.append("is_private", input.isPrivate === false ? "0" : "1");
+    const res = await this.request(
+      "POST",
+      "/api/method/upload_file",
+      form,
+      true
+    );
+    const file = res.message;
+    this.invalidate("File", file.name);
+    this.invalidate(attachedToDoctype, attachedToName);
+    if (attachedToField) {
+      await this.update(attachedToDoctype, attachedToName, {
+        [attachedToField]: file.file_url
+      });
+    }
+    return file;
+  }
+  /**
+   * Call a whitelisted Frappe method.
+   * POST /api/method/{method}
+   */
+  async callMethod(method, args = {}) {
+    const res = await this.request(
+      "POST",
+      `/api/method/${method}`,
+      args
+    );
+    return res.message;
+  }
+};
+var _client = null;
+function getFrappeClient() {
+  if (_client) return _client;
+  const url = env6("ERPNEXT_URL");
+  const apiKey = env6("ERPNEXT_API_KEY");
+  const apiSecret = env6("ERPNEXT_API_SECRET");
+  const maxUploadBytesRaw = env6("ERPNEXT_MAX_UPLOAD_BYTES");
+  if (!url) {
+    throw new Error(
+      "[lib/erpnext] ERPNEXT_URL is required. Set it to your ERPNext instance URL, e.g. http://localhost:8000"
+    );
+  }
+  if (!apiKey || !apiSecret) {
+    throw new Error(
+      "[lib/erpnext] ERPNEXT_API_KEY and ERPNEXT_API_SECRET are required. Generate them in ERPNext: User Settings \u2192 API Access."
+    );
+  }
+  _client = new FrappeClient({
+    baseUrl: url,
+    apiKey,
+    apiSecret,
+    cache: getCache(),
+    maxUploadBytes: maxUploadBytesRaw?.trim() ? Number(maxUploadBytesRaw) : void 0
+  });
+  return _client;
+}
+
+// src/api/resolve.ts
+var NEGATIVE_CACHE_TTL_MS = 15e3;
+var EXACT_MATCH_PROBE_LIMIT = 2;
+var PARTIAL_MATCH_PROBE_LIMIT = 5;
+async function resolveUnique(client, doctype, identifier, searchField, op, value, probeLimit, ambiguityHint) {
+  const rows = await client.list(doctype, {
+    filters: [[searchField, op, value]],
+    fields: ["name", searchField],
+    limit: probeLimit
+  });
+  if (rows.length === 0) return void 0;
+  if (rows.length === 1) return rows[0].name;
+  const candidates = rows.map((r) => `${r.name} (${r[searchField]})`).join(
+    ", "
+  );
+  const suffix = rows.length === probeLimit ? ", and possibly more" : "";
+  throw new Error(
+    `[resolveLink] Ambiguous ${doctype} identifier "${identifier}": did you mean ${candidates}${suffix}? ${ambiguityHint}`
+  );
+}
+async function resolveLink(client, doctype, identifier, searchField, options = {}) {
+  const { allowPartialMatch = true } = options;
+  const cache2 = getCache();
+  const missKey = `resolve:miss:${doctype}:${identifier}`;
+  if (cache2.get(missKey) === void 0) {
+    try {
+      await client.get(doctype, identifier);
+      return identifier;
+    } catch (e) {
+      if (!(e instanceof FrappeAPIError) || e.status !== 404) throw e;
+      cache2.set(missKey, true, NEGATIVE_CACHE_TTL_MS);
+    }
+  }
+  const exact = await resolveUnique(
+    client,
+    doctype,
+    identifier,
+    searchField,
+    "=",
+    identifier,
+    EXACT_MATCH_PROBE_LIMIT,
+    "Please pass the record's ID directly."
+  );
+  if (exact !== void 0) return exact;
+  if (allowPartialMatch) {
+    const partial2 = await resolveUnique(
+      client,
+      doctype,
+      identifier,
+      searchField,
+      "like",
+      `%${identifier}%`,
+      PARTIAL_MATCH_PROBE_LIMIT,
+      "Please pass an exact value."
+    );
+    if (partial2 !== void 0) return partial2;
+  }
+  throw new Error(`[resolveLink] No ${doctype} found matching "${identifier}"`);
+}
+function resolveEmployee(client, identifier) {
+  return resolveLink(client, "Employee", identifier, "employee_name");
+}
+function resolveCustomer(client, identifier) {
+  return resolveLink(client, "Customer", identifier, "customer_name");
+}
+function resolveSupplier(client, identifier) {
+  return resolveLink(client, "Supplier", identifier, "supplier_name");
+}
+function resolveItem(client, identifier) {
+  return resolveLink(client, "Item", identifier, "item_name");
+}
+var DYNAMIC_LINK_SEARCH_FIELDS = {
+  Customer: "customer_name",
+  Supplier: "supplier_name",
+  Employee: "employee_name",
+  Lead: "lead_name"
+};
+async function resolveDynamicLink(client, targetDoctype, identifier, options = {}) {
+  const searchField = DYNAMIC_LINK_SEARCH_FIELDS[targetDoctype];
+  if (!searchField) return identifier;
+  return resolveLink(client, targetDoctype, identifier, searchField, options);
+}
+
+// src/tools/submit-helpers.ts
+function withRoundedTotalFallback(doc) {
+  const hasNullRoundedTotal = "base_rounded_total" in doc && doc.base_rounded_total == null || "rounded_total" in doc && doc.rounded_total == null;
+  if (!hasNullRoundedTotal || doc.disable_rounded_total) {
+    return doc;
+  }
+  return { ...doc, disable_rounded_total: 1 };
+}
+function roundedTotalFallbackWarning(original, patched) {
+  if (patched.disable_rounded_total === 1 && original.disable_rounded_total !== 1) {
+    return [
+      "disable_rounded_total auto-set \u2014 rounded totals were null (rounding not configured on this instance)"
+    ];
+  }
+  return [];
+}
+
+// src/tools/sales.ts
+function mapLineItems(items, options) {
+  if (!Array.isArray(items) || items.length === 0) {
+    throw new Error(
+      `[${options.toolName}] 'items' must be a non-empty array`
+    );
+  }
+  return items.map((item) => {
+    if (!item.item_code || item.qty == null || item.rate == null) {
+      throw new Error(
+        `[${options.toolName}] Each item must have item_code, qty, and rate`
+      );
+    }
+    const mapped = {
+      item_code: item.item_code,
+      qty: item.qty,
+      rate: item.rate
+    };
+    if (options.defaultDeliveryDate !== void 0) {
+      mapped.delivery_date = options.defaultDeliveryDate;
+    }
+    if (options.includeWarehouse !== false && item.warehouse) {
+      mapped.warehouse = item.warehouse;
+    }
+    return mapped;
+  });
+}
+var salesTools = [
+  // ── Customers ─────────────────────────────────────────────────────────────
+  {
+    name: "erpnext_customer_list",
+    annotations: { readOnlyHint: true },
+    _meta: DOCLIST_META,
+    description: "List ERPNext customers. Returns active customers by default. Fields: name, customer_name, customer_group, territory, email_id, disabled.",
+    category: "sales",
+    inputSchema: {
+      type: "object",
+      properties: {
+        limit: { type: "number", description: "Max results (default 20)" },
+        customer_group: {
+          type: "string",
+          description: "Filter by customer group"
+        },
+        territory: { type: "string", description: "Filter by territory" },
+        include_disabled: {
+          type: "boolean",
+          description: "Include disabled customers (default false)"
+        }
+      }
+    },
+    handler: async (input, ctx) => {
+      const limit = input.limit ?? 20;
+      const filters = [];
+      if (!input.include_disabled) {
+        filters.push(["disabled", "=", 0]);
+      }
+      if (input.customer_group) {
+        filters.push(["customer_group", "=", input.customer_group]);
+      }
+      if (input.territory) {
+        filters.push(["territory", "=", input.territory]);
+      }
+      const docs = await ctx.client.list("Customer", {
+        fields: [
+          "name",
+          "customer_name",
+          "customer_group",
+          "territory",
+          "email_id",
+          "disabled"
+        ],
+        filters,
+        limit,
+        order_by: "modified desc"
+      });
+      return {
+        doctype: "Customer",
+        count: docs.length,
+        data: docs,
+        _meta: DOCLIST_META
+      };
+    }
+  },
+  {
+    name: "erpnext_customer_get",
+    annotations: { readOnlyHint: true },
+    description: "Get a single ERPNext customer by name (ID). Returns all fields including contact details.",
+    category: "sales",
+    inputSchema: {
+      type: "object",
+      properties: {
         name: { type: "string", description: "Customer name (ID)" }
       },
       required: ["name"]
@@ -37592,7 +38268,10 @@ var salesTools = [
       type: "object",
       properties: {
         limit: { type: "number", description: "Max results (default 20)" },
-        customer: { type: "string", description: "Filter by customer" },
+        customer: {
+          type: "string",
+          description: "Filter by customer ID or name (e.g. 'CUST-00001' or 'Acme Corp')"
+        },
         status: {
           type: "string",
           description: "Filter by status (Draft, To Deliver and Bill, Completed, Cancelled, etc.)"
@@ -37608,7 +38287,11 @@ var salesTools = [
       const limit = input.limit ?? 20;
       const filters = [];
       if (input.customer) {
-        filters.push(["customer", "=", input.customer]);
+        filters.push([
+          "customer",
+          "=",
+          await resolveCustomer(ctx.client, input.customer)
+        ]);
       }
       if (input.status) {
         filters.push(["status", "=", input.status]);
@@ -37822,13 +38505,20 @@ var salesTools = [
       if (!input.name) {
         throw new Error("[erpnext_sales_order_submit] 'name' is required");
       }
-      const doc = await ctx.client.get("Sales Order", input.name);
+      const doc = await ctx.client.get("Sales Order", input.name, {
+        skipCache: true
+      });
+      const docWithDoctype = { ...doc, doctype: "Sales Order" };
+      const patchedDoc = withRoundedTotalFallback(docWithDoctype);
       const result = await ctx.client.callMethod("frappe.client.submit", {
-        doc: { ...doc, doctype: "Sales Order" }
+        doc: patchedDoc
       });
+      ctx.client.invalidate("Sales Order", input.name);
+      const warnings = roundedTotalFallbackWarning(docWithDoctype, patchedDoc);
       return {
         data: result,
-        message: `Sales Order ${input.name} submitted successfully`
+        message: `Sales Order ${input.name} submitted successfully`,
+        ...warnings.length > 0 ? { warnings } : {}
       };
     }
   },
@@ -37855,6 +38545,7 @@ var salesTools = [
         doctype: "Sales Order",
         name: input.name
       });
+      ctx.client.invalidate("Sales Order", input.name);
       return {
         data: result,
         message: `Sales Order ${input.name} cancelled successfully`
@@ -37872,7 +38563,10 @@ var salesTools = [
       type: "object",
       properties: {
         limit: { type: "number", description: "Max results (default 20)" },
-        customer: { type: "string", description: "Filter by customer" },
+        customer: {
+          type: "string",
+          description: "Filter by customer ID or name (e.g. 'CUST-00001' or 'Acme Corp')"
+        },
         status: {
           type: "string",
           description: "Filter by status (Draft, Unpaid, Paid, Overdue, Cancelled, etc.)"
@@ -37888,7 +38582,11 @@ var salesTools = [
       const limit = input.limit ?? 20;
       const filters = [];
       if (input.customer) {
-        filters.push(["customer", "=", input.customer]);
+        filters.push([
+          "customer",
+          "=",
+          await resolveCustomer(ctx.client, input.customer)
+        ]);
       }
       if (input.status) {
         filters.push(["status", "=", input.status]);
@@ -38054,14 +38752,21 @@ var salesTools = [
       if (!input.name) {
         throw new Error("[erpnext_sales_invoice_submit] 'name' is required");
       }
-      const doc = await ctx.client.get("Sales Invoice", input.name);
+      const doc = await ctx.client.get("Sales Invoice", input.name, {
+        skipCache: true
+      });
+      const docWithDoctype = { ...doc, doctype: "Sales Invoice" };
+      const patchedDoc = withRoundedTotalFallback(docWithDoctype);
       const result = await ctx.client.callMethod("frappe.client.submit", {
-        doc: { ...doc, doctype: "Sales Invoice" }
+        doc: patchedDoc
       });
+      ctx.client.invalidate("Sales Invoice", input.name);
+      const warnings = roundedTotalFallbackWarning(docWithDoctype, patchedDoc);
       return {
         data: result,
         message: `Sales Invoice ${input.name} submitted successfully`,
-        _meta: INVOICE_META
+        _meta: INVOICE_META,
+        ...warnings.length > 0 ? { warnings } : {}
       };
     }
   },
@@ -38076,22 +38781,54 @@ var salesTools = [
       type: "object",
       properties: {
         limit: { type: "number", description: "Max results (default 20)" },
-        party_name: { type: "string", description: "Filter by party name" },
+        quotation_to: {
+          type: "string",
+          description: "Party type: Customer or Lead. Required when 'party_name' is set, so the party name/ID can be resolved against the right doctype.",
+          enum: ["Customer", "Lead"]
+        },
+        party_name: {
+          type: "string",
+          description: "Filter by party \u2014 ID or name (e.g. customer/lead name). Requires 'quotation_to'."
+        },
         status: {
           type: "string",
           description: "Filter by status (Draft, Open, Replied, Ordered, Lost, Cancelled)"
-        }
+        },
+        date_from: {
+          type: "string",
+          description: "Start date filter YYYY-MM-DD"
+        },
+        date_to: { type: "string", description: "End date filter YYYY-MM-DD" }
       }
     },
     handler: async (input, ctx) => {
       const limit = input.limit ?? 20;
       const filters = [];
       if (input.party_name) {
-        filters.push(["party_name", "=", input.party_name]);
+        if (!input.quotation_to) {
+          throw new Error(
+            "[erpnext_quotation_list] 'quotation_to' is required when filtering by 'party_name'"
+          );
+        }
+        filters.push([
+          "party_name",
+          "=",
+          await resolveDynamicLink(
+            ctx.client,
+            input.quotation_to,
+            input.party_name
+          )
+        ]);
       }
       if (input.status) {
         filters.push(["status", "=", input.status]);
       }
+      if (input.date_from) {
+        filters.push(["transaction_date", ">=", input.date_from]);
+      }
+      if (input.date_to) {
+        filters.push(["transaction_date", "<=", input.date_to]);
+      }
       const docs = await ctx.client.list("Quotation", {
         fields: [
           "name",
@@ -38151,7 +38888,7 @@ var salesTools = [
         },
         party_name: {
           type: "string",
-          description: "Customer or Lead name"
+          description: "Customer or Lead \u2014 ID or name"
         },
         items: {
           type: "array",
@@ -38204,7 +38941,12 @@ var salesTools = [
       });
       const data = {
         quotation_to: input.quotation_to,
-        party_name: input.party_name,
+        party_name: await resolveDynamicLink(
+          ctx.client,
+          input.quotation_to,
+          input.party_name,
+          { allowPartialMatch: false }
+        ),
         items
       };
       if (input.transaction_date) {
@@ -38418,7 +39160,10 @@ var inventoryTools = [
       type: "object",
       properties: {
         limit: { type: "number", description: "Max results (default 50)" },
-        item_code: { type: "string", description: "Filter by item code" },
+        item_code: {
+          type: "string",
+          description: "Filter by item code or name (e.g. 'ITEM-001' or 'Widget A')"
+        },
         warehouse: { type: "string", description: "Filter by warehouse" }
       }
     },
@@ -38426,7 +39171,11 @@ var inventoryTools = [
       const limit = input.limit ?? 50;
       const filters = [];
       if (input.item_code) {
-        filters.push(["item_code", "=", input.item_code]);
+        filters.push([
+          "item_code",
+          "=",
+          await resolveItem(ctx.client, input.item_code)
+        ]);
       }
       if (input.warehouse) {
         filters.push(["warehouse", "=", input.warehouse]);
@@ -38807,9 +39556,13 @@ var accountingTools = [
         },
         party_type: {
           type: "string",
-          description: "Filter by party type (Customer, Supplier, Employee)"
+          description: "Filter by party type (Customer, Supplier, Employee). Required when 'party' is set, so the party name/ID can be resolved against the right doctype.",
+          enum: ["Customer", "Supplier", "Employee"]
+        },
+        party: {
+          type: "string",
+          description: "Filter by party \u2014 ID or name (e.g. 'CUST-00001' or 'Acme Corp'). Requires 'party_type'."
         },
-        party: { type: "string", description: "Filter by party name" },
         date_from: {
           type: "string",
           description: "Start date filter YYYY-MM-DD"
@@ -38826,7 +39579,20 @@ var accountingTools = [
         filters.push(["party_type", "=", input.party_type]);
       }
       if (input.party) {
-        filters.push(["party", "=", input.party]);
+        if (!input.party_type) {
+          throw new Error(
+            "[erpnext_payment_entry_list] 'party_type' is required when filtering by 'party'"
+          );
+        }
+        filters.push([
+          "party",
+          "=",
+          await resolveDynamicLink(
+            ctx.client,
+            input.party_type,
+            input.party
+          )
+        ]);
       }
       if (input.date_from) {
         filters.push(["posting_date", ">=", input.date_from]);
@@ -39030,7 +39796,10 @@ var hrTools = [
       type: "object",
       properties: {
         limit: { type: "number", description: "Max results (default 20)" },
-        employee: { type: "string", description: "Filter by employee ID" },
+        employee: {
+          type: "string",
+          description: "Filter by employee ID or name (e.g. 'HR-EMP-00001' or 'John Doe')"
+        },
         status: {
           type: "string",
           description: "Filter by status (Present, Absent, Half Day, On Leave)",
@@ -39047,7 +39816,11 @@ var hrTools = [
       const limit = input.limit ?? 20;
       const filters = [];
       if (input.employee) {
-        filters.push(["employee", "=", input.employee]);
+        filters.push([
+          "employee",
+          "=",
+          await resolveEmployee(ctx.client, input.employee)
+        ]);
       }
       if (input.status) {
         filters.push(["status", "=", input.status]);
@@ -39089,7 +39862,10 @@ var hrTools = [
       type: "object",
       properties: {
         limit: { type: "number", description: "Max results (default 20)" },
-        employee: { type: "string", description: "Filter by employee ID" },
+        employee: {
+          type: "string",
+          description: "Filter by employee ID or name (e.g. 'HR-EMP-00001' or 'John Doe')"
+        },
         status: {
           type: "string",
           description: "Filter by status (Open, Approved, Rejected, Cancelled)",
@@ -39098,14 +39874,23 @@ var hrTools = [
         leave_type: {
           type: "string",
           description: "Filter by leave type (e.g. Sick Leave)"
-        }
+        },
+        date_from: {
+          type: "string",
+          description: "Start date filter YYYY-MM-DD"
+        },
+        date_to: { type: "string", description: "End date filter YYYY-MM-DD" }
       }
     },
     handler: async (input, ctx) => {
       const limit = input.limit ?? 20;
       const filters = [];
       if (input.employee) {
-        filters.push(["employee", "=", input.employee]);
+        filters.push([
+          "employee",
+          "=",
+          await resolveEmployee(ctx.client, input.employee)
+        ]);
       }
       if (input.status) {
         filters.push(["status", "=", input.status]);
@@ -39113,6 +39898,12 @@ var hrTools = [
       if (input.leave_type) {
         filters.push(["leave_type", "=", input.leave_type]);
       }
+      if (input.date_from) {
+        filters.push(["from_date", ">=", input.date_from]);
+      }
+      if (input.date_to) {
+        filters.push(["to_date", "<=", input.date_to]);
+      }
       const docs = await ctx.client.list("Leave Application", {
         fields: [
           "name",
@@ -39227,7 +40018,10 @@ var hrTools = [
       type: "object",
       properties: {
         limit: { type: "number", description: "Max results (default 20)" },
-        employee: { type: "string", description: "Filter by employee ID" },
+        employee: {
+          type: "string",
+          description: "Filter by employee ID or name (e.g. 'HR-EMP-00001' or 'John Doe')"
+        },
         status: {
           type: "string",
           description: "Filter by status (Draft, Submitted, Cancelled)",
@@ -39247,7 +40041,11 @@ var hrTools = [
       const limit = input.limit ?? 20;
       const filters = [];
       if (input.employee) {
-        filters.push(["employee", "=", input.employee]);
+        filters.push([
+          "employee",
+          "=",
+          await resolveEmployee(ctx.client, input.employee)
+        ]);
       }
       if (input.status) {
         filters.push(["status", "=", input.status]);
@@ -39321,7 +40119,12 @@ var hrTools = [
           type: "string",
           description: "Filter by status (Draft, Submitted, Cancelled)",
           enum: ["Draft", "Submitted", "Cancelled"]
-        }
+        },
+        date_from: {
+          type: "string",
+          description: "Start date filter YYYY-MM-DD"
+        },
+        date_to: { type: "string", description: "End date filter YYYY-MM-DD" }
       }
     },
     handler: async (input, ctx) => {
@@ -39333,6 +40136,12 @@ var hrTools = [
       if (input.status) {
         filters.push(["status", "=", input.status]);
       }
+      if (input.date_from) {
+        filters.push(["posting_date", ">=", input.date_from]);
+      }
+      if (input.date_to) {
+        filters.push(["posting_date", "<=", input.date_to]);
+      }
       const docs = await ctx.client.list("Payroll Entry", {
         fields: [
           "name",
@@ -39364,7 +40173,10 @@ var hrTools = [
       type: "object",
       properties: {
         limit: { type: "number", description: "Max results (default 20)" },
-        employee: { type: "string", description: "Filter by employee ID" },
+        employee: {
+          type: "string",
+          description: "Filter by employee ID or name (e.g. 'HR-EMP-00001' or 'John Doe')"
+        },
         status: {
           type: "string",
           description: "Filter by status (Draft, Submitted, Cancelled)",
@@ -39374,14 +40186,23 @@ var hrTools = [
           type: "string",
           description: "Filter by approval status (Pending, Approved, Rejected)",
           enum: ["Pending", "Approved", "Rejected"]
-        }
+        },
+        date_from: {
+          type: "string",
+          description: "Start date filter YYYY-MM-DD"
+        },
+        date_to: { type: "string", description: "End date filter YYYY-MM-DD" }
       }
     },
     handler: async (input, ctx) => {
       const limit = input.limit ?? 20;
       const filters = [];
       if (input.employee) {
-        filters.push(["employee", "=", input.employee]);
+        filters.push([
+          "employee",
+          "=",
+          await resolveEmployee(ctx.client, input.employee)
+        ]);
       }
       if (input.status) {
         filters.push(["status", "=", input.status]);
@@ -39389,6 +40210,12 @@ var hrTools = [
       if (input.approval_status) {
         filters.push(["approval_status", "=", input.approval_status]);
       }
+      if (input.date_from) {
+        filters.push(["posting_date", ">=", input.date_from]);
+      }
+      if (input.date_to) {
+        filters.push(["posting_date", "<=", input.date_to]);
+      }
       const docs = await ctx.client.list("Expense Claim", {
         fields: [
           "name",
@@ -39490,7 +40317,7 @@ var hrTools = [
       properties: {
         employee: {
           type: "string",
-          description: "Employee ID (e.g. HR-EMP-00001)"
+          description: "Employee ID or name (e.g. 'HR-EMP-00001' or 'John Doe')"
         }
       },
       required: ["employee"]
@@ -39500,7 +40327,11 @@ var hrTools = [
         throw new Error("[erpnext_leave_balance] 'employee' is required");
       }
       const filters = [
-        ["employee", "=", input.employee],
+        [
+          "employee",
+          "=",
+          await resolveEmployee(ctx.client, input.employee)
+        ],
         ["docstatus", "=", 1]
       ];
       const docs = await ctx.client.list("Leave Allocation", {
@@ -39701,7 +40532,12 @@ var projectTools = [
           description: "Filter by status (Open, Completed, Cancelled)",
           enum: ["Open", "Completed", "Cancelled"]
         },
-        company: { type: "string", description: "Filter by company" }
+        company: { type: "string", description: "Filter by company" },
+        date_from: {
+          type: "string",
+          description: "Start date filter YYYY-MM-DD"
+        },
+        date_to: { type: "string", description: "End date filter YYYY-MM-DD" }
       }
     },
     handler: async (input, ctx) => {
@@ -39713,6 +40549,12 @@ var projectTools = [
       if (input.company) {
         filters.push(["company", "=", input.company]);
       }
+      if (input.date_from) {
+        filters.push(["expected_start_date", ">=", input.date_from]);
+      }
+      if (input.date_to) {
+        filters.push(["expected_end_date", "<=", input.date_to]);
+      }
       const docs = await ctx.client.list("Project", {
         fields: [
           "name",
@@ -39775,7 +40617,12 @@ var projectTools = [
           type: "string",
           description: "Filter by priority (Low, Medium, High, Urgent)",
           enum: ["Low", "Medium", "High", "Urgent"]
-        }
+        },
+        date_from: {
+          type: "string",
+          description: "Start date filter YYYY-MM-DD"
+        },
+        date_to: { type: "string", description: "End date filter YYYY-MM-DD" }
       }
     },
     handler: async (input, ctx) => {
@@ -39790,6 +40637,12 @@ var projectTools = [
       if (input.priority) {
         filters.push(["priority", "=", input.priority]);
       }
+      if (input.date_from) {
+        filters.push(["exp_start_date", ">=", input.date_from]);
+      }
+      if (input.date_to) {
+        filters.push(["exp_end_date", "<=", input.date_to]);
+      }
       const docs = await ctx.client.list("Task", {
         fields: [
           "name",
@@ -40032,19 +40885,31 @@ var projectTools = [
       type: "object",
       properties: {
         limit: { type: "number", description: "Max results (default 20)" },
-        employee: { type: "string", description: "Filter by employee ID" },
+        employee: {
+          type: "string",
+          description: "Filter by employee ID or name (e.g. 'HR-EMP-00001' or 'John Doe')"
+        },
         project: { type: "string", description: "Filter by project name" },
         status: {
           type: "string",
           description: "Filter by status (Draft, Submitted, Cancelled)"
-        }
+        },
+        date_from: {
+          type: "string",
+          description: "Start date filter YYYY-MM-DD"
+        },
+        date_to: { type: "string", description: "End date filter YYYY-MM-DD" }
       }
     },
     handler: async (input, ctx) => {
       const limit = input.limit ?? 20;
       const filters = [];
       if (input.employee) {
-        filters.push(["employee", "=", input.employee]);
+        filters.push([
+          "employee",
+          "=",
+          await resolveEmployee(ctx.client, input.employee)
+        ]);
       }
       if (input.project) {
         filters.push(["project", "=", input.project]);
@@ -40052,6 +40917,12 @@ var projectTools = [
       if (input.status) {
         filters.push(["status", "=", input.status]);
       }
+      if (input.date_from) {
+        filters.push(["start_date", ">=", input.date_from]);
+      }
+      if (input.date_to) {
+        filters.push(["end_date", "<=", input.date_to]);
+      }
       const docs = await ctx.client.list("Timesheet", {
         fields: [
           "name",
@@ -40294,7 +41165,10 @@ var purchasingTools = [
       type: "object",
       properties: {
         limit: { type: "number", description: "Max results (default 20)" },
-        supplier: { type: "string", description: "Filter by supplier" },
+        supplier: {
+          type: "string",
+          description: "Filter by supplier ID or name (e.g. 'SUPP-00001' or 'Acme Supplies')"
+        },
         status: {
           type: "string",
           description: "Filter by status (Draft, To Receive and Bill, To Bill, Completed, Cancelled, etc.)"
@@ -40310,7 +41184,11 @@ var purchasingTools = [
       const limit = input.limit ?? 20;
       const filters = [];
       if (input.supplier) {
-        filters.push(["supplier", "=", input.supplier]);
+        filters.push([
+          "supplier",
+          "=",
+          await resolveSupplier(ctx.client, input.supplier)
+        ]);
       }
       if (input.status) {
         filters.push(["status", "=", input.status]);
@@ -40442,7 +41320,10 @@ var purchasingTools = [
       type: "object",
       properties: {
         limit: { type: "number", description: "Max results (default 20)" },
-        supplier: { type: "string", description: "Filter by supplier" },
+        supplier: {
+          type: "string",
+          description: "Filter by supplier ID or name (e.g. 'SUPP-00001' or 'Acme Supplies')"
+        },
         status: {
           type: "string",
           description: "Filter by status (Draft, Unpaid, Paid, Overdue, Cancelled, etc.)"
@@ -40458,7 +41339,11 @@ var purchasingTools = [
       const limit = input.limit ?? 20;
       const filters = [];
       if (input.supplier) {
-        filters.push(["supplier", "=", input.supplier]);
+        filters.push([
+          "supplier",
+          "=",
+          await resolveSupplier(ctx.client, input.supplier)
+        ]);
       }
       if (input.status) {
         filters.push(["status", "=", input.status]);
@@ -40528,7 +41413,10 @@ var purchasingTools = [
       type: "object",
       properties: {
         limit: { type: "number", description: "Max results (default 20)" },
-        supplier: { type: "string", description: "Filter by supplier" },
+        supplier: {
+          type: "string",
+          description: "Filter by supplier ID or name (e.g. 'SUPP-00001' or 'Acme Supplies')"
+        },
         status: {
           type: "string",
           description: "Filter by status (Draft, To Bill, Completed, Cancelled, etc.)"
@@ -40544,7 +41432,11 @@ var purchasingTools = [
       const limit = input.limit ?? 20;
       const filters = [];
       if (input.supplier) {
-        filters.push(["supplier", "=", input.supplier]);
+        filters.push([
+          "supplier",
+          "=",
+          await resolveSupplier(ctx.client, input.supplier)
+        ]);
       }
       if (input.status) {
         filters.push(["status", "=", input.status]);
@@ -40613,22 +41505,40 @@ var purchasingTools = [
       type: "object",
       properties: {
         limit: { type: "number", description: "Max results (default 20)" },
-        supplier: { type: "string", description: "Filter by supplier" },
+        supplier: {
+          type: "string",
+          description: "Filter by supplier ID or name (e.g. 'SUPP-00001' or 'Acme Supplies')"
+        },
         status: {
           type: "string",
           description: "Filter by status (Draft, Submitted, Ordered, Lost, Cancelled)"
-        }
+        },
+        date_from: {
+          type: "string",
+          description: "Start date filter YYYY-MM-DD"
+        },
+        date_to: { type: "string", description: "End date filter YYYY-MM-DD" }
       }
     },
     handler: async (input, ctx) => {
       const limit = input.limit ?? 20;
       const filters = [];
       if (input.supplier) {
-        filters.push(["supplier", "=", input.supplier]);
+        filters.push([
+          "supplier",
+          "=",
+          await resolveSupplier(ctx.client, input.supplier)
+        ]);
       }
       if (input.status) {
         filters.push(["status", "=", input.status]);
       }
+      if (input.date_from) {
+        filters.push(["transaction_date", ">=", input.date_from]);
+      }
+      if (input.date_to) {
+        filters.push(["transaction_date", "<=", input.date_to]);
+      }
       const docs = await ctx.client.list("Supplier Quotation", {
         fields: [
           "name",
@@ -40664,7 +41574,10 @@ var deliveryTools = [
       type: "object",
       properties: {
         limit: { type: "number", description: "Max results (default 20)" },
-        customer: { type: "string", description: "Filter by customer" },
+        customer: {
+          type: "string",
+          description: "Filter by customer ID or name (e.g. 'CUST-00001' or 'Acme Corp')"
+        },
         status: {
           type: "string",
           description: "Filter by status (Draft, To Bill, Completed, Cancelled, etc.)"
@@ -40680,7 +41593,11 @@ var deliveryTools = [
       const limit = input.limit ?? 20;
       const filters = [];
       if (input.customer) {
-        filters.push(["customer", "=", input.customer]);
+        filters.push([
+          "customer",
+          "=",
+          await resolveCustomer(ctx.client, input.customer)
+        ]);
       }
       if (input.status) {
         filters.push(["status", "=", input.status]);
@@ -40899,7 +41816,7 @@ var manufacturingTools = [
         limit: { type: "number", description: "Max results (default 20)" },
         item: {
           type: "string",
-          description: "Filter by finished goods item code"
+          description: "Filter by finished goods item code or name (e.g. 'ITEM-001' or 'Widget A')"
         },
         is_active: {
           type: "boolean",
@@ -40915,7 +41832,11 @@ var manufacturingTools = [
       const limit = input.limit ?? 20;
       const filters = [];
       if (input.item) {
-        filters.push(["item", "=", input.item]);
+        filters.push([
+          "item",
+          "=",
+          await resolveItem(ctx.client, input.item)
+        ]);
       }
       if (input.is_active !== void 0) {
         filters.push(["is_active", "=", input.is_active ? 1 : 0]);
@@ -40983,7 +41904,7 @@ var manufacturingTools = [
         limit: { type: "number", description: "Max results (default 20)" },
         production_item: {
           type: "string",
-          description: "Filter by item being produced"
+          description: "Filter by item being produced \u2014 item code or name (e.g. 'ITEM-001' or 'Widget A')"
         },
         status: {
           type: "string",
@@ -41003,7 +41924,11 @@ var manufacturingTools = [
       const limit = input.limit ?? 20;
       const filters = [];
       if (input.production_item) {
-        filters.push(["production_item", "=", input.production_item]);
+        filters.push([
+          "production_item",
+          "=",
+          await resolveItem(ctx.client, input.production_item)
+        ]);
       }
       if (input.status) {
         filters.push(["status", "=", input.status]);
@@ -41327,9 +42252,14 @@ var crmTools = [
           type: "string",
           description: "Filter by assigned sales rep (user)"
         },
+        opportunity_from: {
+          type: "string",
+          description: "Party type: Customer or Lead. Required when 'party_name' is set, so the party name/ID can be resolved against the right doctype.",
+          enum: ["Customer", "Lead"]
+        },
         party_name: {
           type: "string",
-          description: "Filter by customer or lead name"
+          description: "Filter by party \u2014 ID or name (e.g. customer/lead name). Requires 'opportunity_from'."
         }
       }
     },
@@ -41347,7 +42277,20 @@ var crmTools = [
         ]);
       }
       if (input.party_name) {
-        filters.push(["party_name", "=", input.party_name]);
+        if (!input.opportunity_from) {
+          throw new Error(
+            "[erpnext_opportunity_list] 'opportunity_from' is required when filtering by 'party_name'"
+          );
+        }
+        filters.push([
+          "party_name",
+          "=",
+          await resolveDynamicLink(
+            ctx.client,
+            input.opportunity_from,
+            input.party_name
+          )
+        ]);
       }
       const docs = await ctx.client.list("Opportunity", {
         fields: [
@@ -41475,7 +42418,12 @@ var crmTools = [
         campaign_type: {
           type: "string",
           description: "Filter by campaign type"
-        }
+        },
+        date_from: {
+          type: "string",
+          description: "Start date filter YYYY-MM-DD"
+        },
+        date_to: { type: "string", description: "End date filter YYYY-MM-DD" }
       }
     },
     handler: async (input, ctx) => {
@@ -41484,6 +42432,12 @@ var crmTools = [
       if (input.campaign_type) {
         filters.push(["campaign_type", "=", input.campaign_type]);
       }
+      if (input.date_from) {
+        filters.push(["start_date", ">=", input.date_from]);
+      }
+      if (input.date_to) {
+        filters.push(["end_date", "<=", input.date_to]);
+      }
       const docs = await ctx.client.list("Campaign", {
         fields: [
           "name",
@@ -41531,7 +42485,15 @@ var assetsTools = [
         location: { type: "string", description: "Filter by location" },
         custodian: {
           type: "string",
-          description: "Filter by custodian (employee)"
+          description: "Filter by custodian \u2014 employee ID or name (e.g. 'HR-EMP-00001' or 'John Doe')"
+        },
+        date_from: {
+          type: "string",
+          description: "Purchase date start filter YYYY-MM-DD"
+        },
+        date_to: {
+          type: "string",
+          description: "Purchase date end filter YYYY-MM-DD"
         }
       }
     },
@@ -41548,7 +42510,17 @@ var assetsTools = [
         filters.push(["location", "=", input.location]);
       }
       if (input.custodian) {
-        filters.push(["custodian", "=", input.custodian]);
+        filters.push([
+          "custodian",
+          "=",
+          await resolveEmployee(ctx.client, input.custodian)
+        ]);
+      }
+      if (input.date_from) {
+        filters.push(["purchase_date", ">=", input.date_from]);
+      }
+      if (input.date_to) {
+        filters.push(["purchase_date", "<=", input.date_to]);
       }
       const docs = await ctx.client.list("Asset", {
         fields: [
@@ -41830,27 +42802,115 @@ var assetsTools = [
       properties: {
         limit: { type: "number", description: "Max results (default 20)" }
       }
-    },
-    handler: async (input, ctx) => {
-      const limit = input.limit ?? 20;
-      const docs = await ctx.client.list("Asset Category", {
-        fields: ["name", "asset_category_name"],
-        filters: [],
-        limit,
-        order_by: "modified desc"
+    },
+    handler: async (input, ctx) => {
+      const limit = input.limit ?? 20;
+      const docs = await ctx.client.list("Asset Category", {
+        fields: ["name", "asset_category_name"],
+        filters: [],
+        limit,
+        order_by: "modified desc"
+      });
+      return {
+        doctype: "Asset Category",
+        count: docs.length,
+        data: docs,
+        _meta: DOCLIST_META
+      };
+    }
+  }
+];
+
+// src/tools/operations.ts
+var operationsTools = [
+  // ── File Attachments ───────────────────────────────────────────────────────
+  {
+    name: "erpnext_file_upload",
+    annotations: { destructiveHint: true },
+    description: "Upload base64-encoded file content and attach it to any ERPNext document. Files are private by default.",
+    category: "operations",
+    inputSchema: {
+      type: "object",
+      properties: {
+        file_name: {
+          type: "string",
+          description: "Filename only, without a path.",
+          minLength: 1
+        },
+        content_base64: {
+          type: "string",
+          description: "File content as standard base64 (not a data URL).",
+          minLength: 1
+        },
+        attached_to_doctype: {
+          type: "string",
+          description: "DocType of the document to attach the file to.",
+          minLength: 1
+        },
+        attached_to_name: {
+          type: "string",
+          description: "Name/ID of the document to attach the file to.",
+          minLength: 1
+        },
+        attached_to_field: {
+          type: "string",
+          description: "Optional Attach or Attach Image field to populate with the uploaded file."
+        },
+        is_private: {
+          type: "boolean",
+          description: "Whether the attachment is private. Defaults to true.",
+          default: true
+        }
+      },
+      required: [
+        "file_name",
+        "content_base64",
+        "attached_to_doctype",
+        "attached_to_name"
+      ]
+    },
+    handler: async (input, ctx) => {
+      const requiredStrings = [
+        "file_name",
+        "content_base64",
+        "attached_to_doctype",
+        "attached_to_name"
+      ];
+      for (const field of requiredStrings) {
+        if (typeof input[field] !== "string" || !input[field].trim()) {
+          throw new Error(
+            `[erpnext_file_upload] '${field}' must be a non-empty string`
+          );
+        }
+      }
+      const fileName = input.file_name;
+      if (/[\\/\0]/.test(fileName)) {
+        throw new Error(
+          "[erpnext_file_upload] 'file_name' must be a filename without a path"
+        );
+      }
+      if (input.is_private !== void 0 && typeof input.is_private !== "boolean") {
+        throw new Error("[erpnext_file_upload] 'is_private' must be a boolean");
+      }
+      if (input.attached_to_field !== void 0 && (typeof input.attached_to_field !== "string" || !input.attached_to_field.trim())) {
+        throw new Error(
+          "[erpnext_file_upload] 'attached_to_field' must be a non-empty string"
+        );
+      }
+      const file = await ctx.client.uploadFile({
+        fileName,
+        contentBase64: input.content_base64,
+        attachedToDoctype: input.attached_to_doctype,
+        attachedToName: input.attached_to_name,
+        ...input.attached_to_field !== void 0 ? { attachedToField: input.attached_to_field.trim() } : {},
+        isPrivate: input.is_private === void 0 ? true : input.is_private
       });
       return {
-        doctype: "Asset Category",
-        count: docs.length,
-        data: docs,
-        _meta: DOCLIST_META
+        data: file,
+        message: `${fileName} attached to ${input.attached_to_doctype} ${input.attached_to_name}`
       };
     }
-  }
-];
-
-// src/tools/operations.ts
-var operationsTools = [
+  },
   // ── Generic Create ──────────────────────────────────────────────────────────
   {
     name: "erpnext_doc_create",
@@ -42002,16 +43062,22 @@ var operationsTools = [
       }
       const doc = await ctx.client.get(
         input.doctype,
-        input.name
+        input.name,
+        { skipCache: true }
       );
+      const docWithDoctype = { ...doc, doctype: input.doctype };
+      const patchedDoc = withRoundedTotalFallback(docWithDoctype);
       const result = await ctx.client.callMethod("frappe.client.submit", {
-        doc: { ...doc, doctype: input.doctype }
+        doc: patchedDoc
       });
+      ctx.client.invalidate(input.doctype, input.name);
+      const warnings = roundedTotalFallbackWarning(docWithDoctype, patchedDoc);
       return {
         data: result,
         message: `${input.doctype} ${input.name} submitted successfully`,
         doctype: input.doctype,
-        name: input.name
+        name: input.name,
+        ...warnings.length > 0 ? { warnings } : {}
       };
     }
   },
@@ -42046,6 +43112,7 @@ var operationsTools = [
         doctype: input.doctype,
         name: input.name
       });
+      ctx.client.invalidate(input.doctype, input.name);
       return {
         data: result,
         message: `${input.doctype} ${input.name} cancelled successfully`,
@@ -44542,500 +45609,206 @@ var issueKanbanAdapter = {
       ok: true,
       cardId: move.cardId,
       fromColumn: serverColumn,
-      toColumn: move.toColumn,
-      serverCard: buildIssueCard(serverIssue)
-    };
-  }
-};
-
-// src/tools/kanban.ts
-var ADAPTERS = {
-  task: taskKanbanAdapter,
-  opportunity: opportunityKanbanAdapter,
-  issue: issueKanbanAdapter
-};
-function getAdapter(doctype) {
-  const definition = getKanbanBoardDefinition(doctype);
-  if (!definition) {
-    throw new Error(`[erpnext_kanban] Unsupported kanban doctype: ${doctype}`);
-  }
-  const adapter = ADAPTERS[definition.adapterKey];
-  if (!adapter) {
-    throw new Error(`[erpnext_kanban] No adapter registered for ${doctype}`);
-  }
-  return { definition, adapter };
-}
-function withColumnCounts(columns, cards) {
-  const counts = /* @__PURE__ */ new Map();
-  for (const card of cards) {
-    counts.set(card.columnId, (counts.get(card.columnId) ?? 0) + 1);
-  }
-  return columns.map((column) => ({
-    ...column,
-    count: counts.get(column.id) ?? 0
-  }));
-}
-var kanbanTools = [
-  {
-    name: "erpnext_kanban_get_board",
-    annotations: { readOnlyHint: true },
-    category: "kanban",
-    _meta: KANBAN_META,
-    description: "Get a normalized kanban board for a supported ERPNext DocType. Supports Task, Opportunity, and Issue, with pagination and MCP App metadata.",
-    inputSchema: {
-      type: "object",
-      properties: {
-        doctype: {
-          type: "string",
-          description: "Kanban-enabled ERPNext DocType",
-          enum: ["Task", "Opportunity", "Issue"]
-        },
-        limit: { type: "number", description: "Page size (default 50)" },
-        offset: {
-          type: "number",
-          description: "Pagination offset (default 0)"
-        },
-        project: {
-          type: "string",
-          description: "Optional Task project filter"
-        },
-        priority: {
-          type: "string",
-          description: "Optional Task priority filter",
-          enum: ["Low", "Medium", "High", "Urgent"]
-        },
-        status: {
-          type: "string",
-          description: "Optional Opportunity status filter",
-          enum: ["Open", "Replied", "Quotation", "Converted", "Closed", "Lost"]
-        },
-        opportunity_owner: {
-          type: "string",
-          description: "Optional Opportunity owner filter"
-        },
-        party_name: {
-          type: "string",
-          description: "Optional Opportunity party filter"
-        },
-        customer: {
-          type: "string",
-          description: "Optional Issue customer filter"
-        },
-        raised_by: {
-          type: "string",
-          description: "Optional Issue reporter email filter"
-        }
-      },
-      required: ["doctype"]
-    },
-    handler: async (input, ctx) => {
-      const doctype = String(input.doctype ?? "");
-      const { definition, adapter } = getAdapter(doctype);
-      const limit = Math.max(1, Number(input.limit ?? 50));
-      const offset = Math.max(0, Number(input.offset ?? 0));
-      const rows = await ctx.client.list(doctype, {
-        fields: adapter.getListFields(),
-        filters: adapter.buildListFilters(input),
-        limit: limit + 1,
-        limit_start: offset,
-        order_by: "modified desc"
-      });
-      const hasMore = rows.length > limit;
-      const visibleRows = rows.slice(0, limit);
-      const cards = adapter.buildCards(visibleRows);
-      const board = {
-        boardId: `${doctype.toLowerCase()}-board`,
-        title: definition.title,
-        doctype,
-        generatedAt: (/* @__PURE__ */ new Date()).toISOString(),
-        moveToolName: definition.moveToolName,
-        refreshArguments: { ...input, doctype, limit, offset },
-        columns: withColumnCounts(adapter.getColumns(), cards),
-        cards,
-        allowedTransitions: adapter.getAllowedTransitions(),
-        capabilities: { canMoveCards: true },
-        pagination: {
-          limit,
-          offset,
-          loadedCount: offset + visibleRows.length,
-          hasMore
-        }
-      };
-      return {
-        ...board,
-        _meta: KANBAN_META
-      };
-    }
-  },
-  {
-    name: "erpnext_kanban_move_card",
-    category: "kanban",
-    description: "Move a kanban card for a supported ERPNext DocType. Returns structured success or business error details for MCP App reconciliation.",
-    inputSchema: {
-      type: "object",
-      properties: {
-        doctype: {
-          type: "string",
-          description: "Kanban-enabled ERPNext DocType",
-          enum: ["Task", "Opportunity", "Issue"]
-        },
-        card_id: { type: "string", description: "Card/document identifier" },
-        from_column: {
-          type: "string",
-          description: "Source column identifier"
-        },
-        to_column: {
-          type: "string",
-          description: "Destination column identifier"
-        }
-      },
-      required: ["doctype", "card_id", "from_column", "to_column"]
-    },
-    handler: async (input, ctx) => {
-      const doctype = String(input.doctype ?? "");
-      const { adapter } = getAdapter(doctype);
-      return await adapter.executeMove({
-        doctype,
-        cardId: String(input.card_id ?? ""),
-        fromColumn: String(input.from_column ?? ""),
-        toColumn: String(input.to_column ?? "")
-      }, ctx);
-    }
-  }
-];
-
-// src/tools/mod.ts
-var toolsByCategory = {
-  sales: salesTools,
-  inventory: inventoryTools,
-  accounting: accountingTools,
-  hr: hrTools,
-  project: projectTools,
-  purchasing: purchasingTools,
-  delivery: deliveryTools,
-  manufacturing: manufacturingTools,
-  crm: crmTools,
-  assets: assetsTools,
-  operations: operationsTools,
-  setup: setupTools,
-  analytics: analyticsTools,
-  kanban: kanbanTools
-};
-var allTools = [
-  ...salesTools,
-  ...inventoryTools,
-  ...accountingTools,
-  ...hrTools,
-  ...projectTools,
-  ...purchasingTools,
-  ...deliveryTools,
-  ...manufacturingTools,
-  ...crmTools,
-  ...assetsTools,
-  ...operationsTools,
-  ...setupTools,
-  ...analyticsTools,
-  ...kanbanTools
-];
-function getToolsByCategory(category) {
-  return toolsByCategory[category] ?? [];
-}
-
-// src/runtime.ts
-var isDeno2 = typeof globalThis.Deno?.version?.deno === "string";
-var impl2 = isDeno2 ? await Promise.resolve().then(() => (init_runtime_deno2(), runtime_deno_exports2)) : await Promise.resolve().then(() => (init_runtime_node2(), runtime_node_exports2));
-var env6 = impl2.env;
-var readTextFile6 = impl2.readTextFile;
-var statSync3 = impl2.statSync;
-var readDirSync3 = impl2.readDirSync;
-var getArgs3 = impl2.getArgs;
-var exit3 = impl2.exit;
-var onSignal3 = impl2.onSignal;
-
-// src/api/frappe-client.ts
-var DEFAULT_RETRY_STATUSES = [408, 429, 502, 503, 504];
-var DEFAULT_RETRY_METHODS = ["GET"];
-var FrappeAPIError = class extends Error {
-  /**
-   * @param message - Human-readable error description
-   * @param status - HTTP status code (0 for network errors, 408 for timeouts)
-   * @param body - Raw response body (parsed JSON object or plain text string)
-   * @param retryAfterMs - When the server sent a `Retry-After` header on a
-   *                      retryable status (typically 429), the parsed delay
-   *                      in ms. Used by the retry loop; absent otherwise.
-   */
-  constructor(message2, status, body, retryAfterMs) {
-    super(`[FrappeClient] ${message2} (HTTP ${status})`);
-    this.status = status;
-    this.body = body;
-    this.retryAfterMs = retryAfterMs;
-    this.name = "FrappeAPIError";
+      toColumn: move.toColumn,
+      serverCard: buildIssueCard(serverIssue)
+    };
   }
 };
-function parseRetryAfter(raw2) {
-  if (!raw2) return void 0;
-  const trimmed = raw2.trim();
-  const seconds = Number(trimmed);
-  if (Number.isFinite(seconds) && seconds >= 0) {
-    return Math.round(seconds * 1e3);
+
+// src/tools/kanban.ts
+var ADAPTERS = {
+  task: taskKanbanAdapter,
+  opportunity: opportunityKanbanAdapter,
+  issue: issueKanbanAdapter
+};
+function getAdapter(doctype) {
+  const definition = getKanbanBoardDefinition(doctype);
+  if (!definition) {
+    throw new Error(`[erpnext_kanban] Unsupported kanban doctype: ${doctype}`);
   }
-  const date3 = Date.parse(trimmed);
-  if (Number.isFinite(date3)) {
-    return Math.max(0, date3 - Date.now());
+  const adapter = ADAPTERS[definition.adapterKey];
+  if (!adapter) {
+    throw new Error(`[erpnext_kanban] No adapter registered for ${doctype}`);
   }
-  return void 0;
+  return { definition, adapter };
 }
-function extractServerMessages(raw2) {
-  if (!raw2 || typeof raw2 !== "string") return void 0;
-  try {
-    const outer = JSON.parse(raw2);
-    if (!Array.isArray(outer)) return void 0;
-    const msgs = [];
-    for (const item of outer) {
-      try {
-        const inner = JSON.parse(item);
-        if (typeof inner === "object" && inner?.message) {
-          msgs.push(inner.message);
-        } else if (typeof inner === "string") {
-          msgs.push(inner);
-        }
-      } catch {
-        if (typeof item === "string") msgs.push(item);
-      }
-    }
-    return msgs.length > 0 ? msgs.join("; ") : void 0;
-  } catch {
-    return void 0;
+function withColumnCounts(columns, cards) {
+  const counts = /* @__PURE__ */ new Map();
+  for (const card of cards) {
+    counts.set(card.columnId, (counts.get(card.columnId) ?? 0) + 1);
   }
+  return columns.map((column) => ({
+    ...column,
+    count: counts.get(column.id) ?? 0
+  }));
 }
-var FrappeClient = class {
-  baseUrl;
-  authHeader;
-  timeoutMs;
-  retries;
-  retryStatuses;
-  retryBackoffMs;
-  retryMethods;
-  constructor(config2) {
-    this.baseUrl = config2.baseUrl.replace(/\/$/, "");
-    this.authHeader = `token ${config2.apiKey}:${config2.apiSecret}`;
-    this.timeoutMs = config2.timeoutMs ?? 3e4;
-    this.retries = config2.retries ?? 3;
-    this.retryStatuses = config2.retryStatuses ?? DEFAULT_RETRY_STATUSES;
-    this.retryBackoffMs = config2.retryBackoffMs ?? 200;
-    this.retryMethods = config2.retryMethods ?? DEFAULT_RETRY_METHODS;
-  }
-  // ── Private HTTP helpers ────────────────────────────────────────────────────
-  buildHeaders() {
-    return {
-      "Authorization": this.authHeader,
-      "Accept": "application/json",
-      "Content-Type": "application/json"
-    };
-  }
-  /**
-   * Decide whether an error is worth retrying.
-   * Network errors (status 0) and timeouts (status 408) are always retryable;
-   * other statuses are checked against `retryStatuses`.
-   */
-  isRetryable(err, method) {
-    if (!this.retryMethods.includes(method)) return false;
-    if (!(err instanceof FrappeAPIError)) return false;
-    if (err.status === 0) return true;
-    return this.retryStatuses.includes(err.status);
-  }
-  /** Compute the backoff delay for a given attempt (0-indexed). */
-  computeBackoff(attempt, err) {
-    if (err instanceof FrappeAPIError && err.retryAfterMs !== void 0) {
-      return err.retryAfterMs;
-    }
-    return this.retryBackoffMs * 2 ** attempt;
-  }
-  async request(method, path, body) {
-    let lastError;
-    for (let attempt = 0; attempt <= this.retries; attempt++) {
-      try {
-        return await this.requestOnce(method, path, body);
-      } catch (err) {
-        lastError = err;
-        if (attempt === this.retries || !this.isRetryable(err, method)) {
-          throw err;
-        }
-        const delay = this.computeBackoff(attempt, err);
-        if (delay > 0) {
-          await new Promise((resolve) => setTimeout(resolve, delay));
+var kanbanTools = [
+  {
+    name: "erpnext_kanban_get_board",
+    annotations: { readOnlyHint: true },
+    category: "kanban",
+    _meta: KANBAN_META,
+    description: "Get a normalized kanban board for a supported ERPNext DocType. Supports Task, Opportunity, and Issue, with pagination and MCP App metadata.",
+    inputSchema: {
+      type: "object",
+      properties: {
+        doctype: {
+          type: "string",
+          description: "Kanban-enabled ERPNext DocType",
+          enum: ["Task", "Opportunity", "Issue"]
+        },
+        limit: { type: "number", description: "Page size (default 50)" },
+        offset: {
+          type: "number",
+          description: "Pagination offset (default 0)"
+        },
+        project: {
+          type: "string",
+          description: "Optional Task project filter"
+        },
+        priority: {
+          type: "string",
+          description: "Optional Task priority filter",
+          enum: ["Low", "Medium", "High", "Urgent"]
+        },
+        status: {
+          type: "string",
+          description: "Optional Opportunity status filter",
+          enum: ["Open", "Replied", "Quotation", "Converted", "Closed", "Lost"]
+        },
+        opportunity_owner: {
+          type: "string",
+          description: "Optional Opportunity owner filter"
+        },
+        party_name: {
+          type: "string",
+          description: "Optional Opportunity party filter"
+        },
+        customer: {
+          type: "string",
+          description: "Optional Issue customer filter"
+        },
+        raised_by: {
+          type: "string",
+          description: "Optional Issue reporter email filter"
         }
-      }
-    }
-    throw lastError;
-  }
-  async requestOnce(method, path, body) {
-    const url = `${this.baseUrl}${path}`;
-    const controller = new AbortController();
-    const timer = setTimeout(() => controller.abort(), this.timeoutMs);
-    let response;
-    try {
-      response = await fetch(url, {
-        method,
-        headers: this.buildHeaders(),
-        body: body !== void 0 ? JSON.stringify(body) : void 0,
-        signal: controller.signal
+      },
+      required: ["doctype"]
+    },
+    handler: async (input, ctx) => {
+      const doctype = String(input.doctype ?? "");
+      const { definition, adapter } = getAdapter(doctype);
+      const limit = Math.max(1, Number(input.limit ?? 50));
+      const offset = Math.max(0, Number(input.offset ?? 0));
+      const rows = await ctx.client.list(doctype, {
+        fields: adapter.getListFields(),
+        filters: adapter.buildListFilters(input),
+        limit: limit + 1,
+        limit_start: offset,
+        order_by: "modified desc"
       });
-    } catch (err) {
-      clearTimeout(timer);
-      if (err instanceof Error && err.name === "AbortError") {
-        throw new FrappeAPIError(
-          `Request timed out after ${this.timeoutMs}ms: ${method} ${path}`,
-          408,
-          null
-        );
-      }
-      throw new FrappeAPIError(
-        `Network error on ${method} ${path}: ${err.message}`,
-        0,
-        null
-      );
-    }
-    clearTimeout(timer);
-    const rawText = await response.text();
-    const contentType = response.headers.get("content-type") ?? "";
-    let responseBody = rawText;
-    if (contentType.includes("application/json") && rawText.length > 0) {
-      try {
-        responseBody = JSON.parse(rawText);
-      } catch {
-        responseBody = rawText;
-      }
-    }
-    if (!response.ok) {
-      let msg = response.statusText;
-      if (typeof responseBody === "object" && responseBody !== null) {
-        const rb = responseBody;
-        const excType = rb.exc_type;
-        const baseMsg = rb.message ?? excType ?? response.statusText;
-        const serverDetails = extractServerMessages(rb._server_messages);
-        msg = serverDetails ? `${baseMsg}: ${serverDetails}` : baseMsg;
-      } else if (typeof responseBody === "string" && responseBody.length > 0) {
-        msg = responseBody.slice(0, 200);
-      }
-      const retryAfterMs = parseRetryAfter(
-        response.headers.get("retry-after")
-      );
-      throw new FrappeAPIError(
-        `${method} ${path} failed: ${msg}`,
-        response.status,
-        responseBody,
-        retryAfterMs
-      );
-    }
-    return responseBody;
-  }
-  // ── Resource CRUD ───────────────────────────────────────────────────────────
-  /**
-   * List documents of a DocType.
-   * Frappe list API: GET /api/resource/{doctype}?fields=...&filters=...
-   */
-  async list(doctype, options = {}) {
-    const params = new URLSearchParams();
-    if (options.fields && options.fields.length > 0) {
-      params.set("fields", JSON.stringify(options.fields));
-    }
-    if (options.filters && options.filters.length > 0) {
-      params.set("filters", JSON.stringify(options.filters));
-    }
-    if (options.order_by) {
-      params.set("order_by", options.order_by);
-    }
-    if (options.limit !== void 0) {
-      params.set("limit", String(options.limit));
+      const hasMore = rows.length > limit;
+      const visibleRows = rows.slice(0, limit);
+      const cards = adapter.buildCards(visibleRows);
+      const board = {
+        boardId: `${doctype.toLowerCase()}-board`,
+        title: definition.title,
+        doctype,
+        generatedAt: (/* @__PURE__ */ new Date()).toISOString(),
+        moveToolName: definition.moveToolName,
+        refreshArguments: { ...input, doctype, limit, offset },
+        columns: withColumnCounts(adapter.getColumns(), cards),
+        cards,
+        allowedTransitions: adapter.getAllowedTransitions(),
+        capabilities: { canMoveCards: true },
+        pagination: {
+          limit,
+          offset,
+          loadedCount: offset + visibleRows.length,
+          hasMore
+        }
+      };
+      return {
+        ...board,
+        _meta: KANBAN_META
+      };
     }
-    if (options.limit_start !== void 0) {
-      params.set("limit_start", String(options.limit_start));
+  },
+  {
+    name: "erpnext_kanban_move_card",
+    category: "kanban",
+    description: "Move a kanban card for a supported ERPNext DocType. Returns structured success or business error details for MCP App reconciliation.",
+    inputSchema: {
+      type: "object",
+      properties: {
+        doctype: {
+          type: "string",
+          description: "Kanban-enabled ERPNext DocType",
+          enum: ["Task", "Opportunity", "Issue"]
+        },
+        card_id: { type: "string", description: "Card/document identifier" },
+        from_column: {
+          type: "string",
+          description: "Source column identifier"
+        },
+        to_column: {
+          type: "string",
+          description: "Destination column identifier"
+        }
+      },
+      required: ["doctype", "card_id", "from_column", "to_column"]
+    },
+    handler: async (input, ctx) => {
+      const doctype = String(input.doctype ?? "");
+      const { adapter } = getAdapter(doctype);
+      return await adapter.executeMove({
+        doctype,
+        cardId: String(input.card_id ?? ""),
+        fromColumn: String(input.from_column ?? ""),
+        toColumn: String(input.to_column ?? "")
+      }, ctx);
     }
-    params.set("as_dict", "1");
-    const query = params.toString() ? `?${params.toString()}` : "";
-    const res = await this.request(
-      "GET",
-      `/api/resource/${encodeURIComponent(doctype)}${query}`
-    );
-    return res.data ?? [];
-  }
-  /**
-   * Get a single document by name.
-   * GET /api/resource/{doctype}/{name}
-   */
-  async get(doctype, name) {
-    const res = await this.request(
-      "GET",
-      `/api/resource/${encodeURIComponent(doctype)}/${encodeURIComponent(name)}`
-    );
-    return res.data;
-  }
-  /**
-   * Create a new document.
-   * POST /api/resource/{doctype}
-   */
-  async create(doctype, data) {
-    const res = await this.request(
-      "POST",
-      `/api/resource/${encodeURIComponent(doctype)}`,
-      { data: { ...data, doctype } }
-    );
-    return res.data;
-  }
-  /**
-   * Update an existing document (partial update).
-   * PUT /api/resource/{doctype}/{name}
-   */
-  async update(doctype, name, data) {
-    const res = await this.request(
-      "PUT",
-      `/api/resource/${encodeURIComponent(doctype)}/${encodeURIComponent(name)}`,
-      { data }
-    );
-    return res.data;
-  }
-  /**
-   * Delete a document.
-   * DELETE /api/resource/{doctype}/{name}
-   */
-  async delete(doctype, name) {
-    await this.request(
-      "DELETE",
-      `/api/resource/${encodeURIComponent(doctype)}/${encodeURIComponent(name)}`
-    );
-  }
-  /**
-   * Call a whitelisted Frappe method.
-   * POST /api/method/{method}
-   */
-  async callMethod(method, args = {}) {
-    const res = await this.request(
-      "POST",
-      `/api/method/${method}`,
-      args
-    );
-    return res.message;
   }
+];
+
+// src/tools/mod.ts
+var toolsByCategory = {
+  sales: salesTools,
+  inventory: inventoryTools,
+  accounting: accountingTools,
+  hr: hrTools,
+  project: projectTools,
+  purchasing: purchasingTools,
+  delivery: deliveryTools,
+  manufacturing: manufacturingTools,
+  crm: crmTools,
+  assets: assetsTools,
+  operations: operationsTools,
+  setup: setupTools,
+  analytics: analyticsTools,
+  kanban: kanbanTools
 };
-var _client = null;
-function getFrappeClient() {
-  if (_client) return _client;
-  const url = env6("ERPNEXT_URL");
-  const apiKey = env6("ERPNEXT_API_KEY");
-  const apiSecret = env6("ERPNEXT_API_SECRET");
-  if (!url) {
-    throw new Error(
-      "[lib/erpnext] ERPNEXT_URL is required. Set it to your ERPNext instance URL, e.g. http://localhost:8000"
-    );
-  }
-  if (!apiKey || !apiSecret) {
-    throw new Error(
-      "[lib/erpnext] ERPNEXT_API_KEY and ERPNEXT_API_SECRET are required. Generate them in ERPNext: User Settings \u2192 API Access."
-    );
-  }
-  _client = new FrappeClient({ baseUrl: url, apiKey, apiSecret });
-  return _client;
+var allTools = [
+  ...salesTools,
+  ...inventoryTools,
+  ...accountingTools,
+  ...hrTools,
+  ...projectTools,
+  ...purchasingTools,
+  ...deliveryTools,
+  ...manufacturingTools,
+  ...crmTools,
+  ...assetsTools,
+  ...operationsTools,
+  ...setupTools,
+  ...analyticsTools,
+  ...kanbanTools
+];
+function getToolsByCategory(category) {
+  return toolsByCategory[category] ?? [];
+}
+function getToolByName(name) {
+  return allTools.find((t) => t.name === name);
 }
 
 // src/tools/ui-refresh.ts
@@ -45332,6 +46105,168 @@ function resolveViewerDistPath2(moduleUrl, viewerName, exists) {
   return null;
 }
 
+// src/auth/composite-provider.ts
+var CompositeAuthProvider = class extends AuthProvider {
+  constructor(providers) {
+    super();
+    this.providers = providers;
+    if (providers.length === 0) {
+      throw new Error(
+        "[CompositeAuthProvider] at least one provider is required"
+      );
+    }
+  }
+  async verifyToken(token) {
+    for (const provider of this.providers) {
+      const info = await provider.verifyToken(token);
+      if (info) return info;
+    }
+    return null;
+  }
+  getResourceMetadata() {
+    const metadata = this.providers.map(
+      (provider) => provider.getResourceMetadata()
+    );
+    const primary = metadata[0];
+    const scopesSupported = [
+      ...new Set(metadata.flatMap((item) => item.scopes_supported ?? []))
+    ];
+    return {
+      ...primary,
+      authorization_servers: [
+        ...new Set(metadata.flatMap((item) => item.authorization_servers))
+      ],
+      ...scopesSupported.length > 0 ? { scopes_supported: scopesSupported } : {},
+      bearer_methods_supported: [
+        ...new Set(
+          metadata.flatMap((item) => item.bearer_methods_supported)
+        )
+      ]
+    };
+  }
+};
+
+// src/auth/config.ts
+function unquote(value) {
+  if (value.length >= 2 && (value.startsWith('"') && value.endsWith('"') || value.startsWith("'") && value.endsWith("'"))) {
+    return value.slice(1, -1);
+  }
+  return value;
+}
+function optionalEnvValue(value) {
+  const trimmed = value?.trim();
+  return trimmed ? unquote(trimmed) : void 0;
+}
+function loadAuthConfig2() {
+  const single = optionalEnvValue(env6("MCP_AUTH_TOKEN"));
+  const multi = env6("MCP_AUTH_TOKENS");
+  const jwksUrl = optionalEnvValue(env6("MCP_OAUTH_JWKS_URL"));
+  const tokens = /* @__PURE__ */ new Set();
+  if (single) tokens.add(single);
+  if (multi) {
+    for (const t of multi.split(",")) {
+      const token = optionalEnvValue(t);
+      if (token) tokens.add(token);
+    }
+  }
+  if (tokens.size === 0 && !jwksUrl) return null;
+  return {
+    tokens,
+    resource: optionalEnvValue(env6("MCP_AUTH_RESOURCE")),
+    jwksUrl,
+    audience: optionalEnvValue(env6("MCP_OAUTH_AUDIENCE")),
+    issuer: optionalEnvValue(env6("MCP_OAUTH_ISSUER"))
+  };
+}
+function buildAuthProvider(config2) {
+  const providers = [];
+  if (config2.tokens.size > 0) {
+    if (!config2.resource) {
+      throw new Error(
+        "[mcp-erpnext] MCP_AUTH_RESOURCE is required alongside MCP_AUTH_TOKEN(S) \u2014 set it to this server's public URL, e.g. https://mcp.example.com"
+      );
+    }
+    providers.push(
+      createStaticTokenAuthProvider([...config2.tokens], {
+        resource: config2.resource
+      })
+    );
+  }
+  if (config2.jwksUrl) {
+    if (!config2.issuer) {
+      throw new Error(
+        "[mcp-erpnext] MCP_OAUTH_ISSUER is required alongside MCP_OAUTH_JWKS_URL"
+      );
+    }
+    if (!config2.audience) {
+      throw new Error(
+        "[mcp-erpnext] MCP_OAUTH_AUDIENCE is required alongside MCP_OAUTH_JWKS_URL"
+      );
+    }
+    if (!config2.resource) {
+      throw new Error(
+        "[mcp-erpnext] MCP_AUTH_RESOURCE is required alongside MCP_OAUTH_JWKS_URL"
+      );
+    }
+    providers.push(
+      createOIDCAuthProvider({
+        issuer: config2.issuer,
+        audience: config2.audience,
+        jwksUri: config2.jwksUrl,
+        resource: config2.resource
+      })
+    );
+  }
+  return providers.length === 1 ? providers[0] : new CompositeAuthProvider(providers);
+}
+
+// src/cache/warm.ts
+async function warmCache() {
+  const configured = env6("MCP_CACHE_WARM_TOOLS");
+  if (!configured?.trim()) return;
+  const client = getFrappeClient();
+  const names = configured.split(",").map((s) => s.trim()).filter(Boolean);
+  for (const name of names) {
+    const tool = getToolByName(name);
+    if (!tool) {
+      console.error(
+        `[mcp-erpnext] Cache warm: unknown tool "${name}", skipping`
+      );
+      continue;
+    }
+    if (!tool.annotations?.readOnlyHint) {
+      console.error(
+        `[mcp-erpnext] Cache warm: "${name}" is not read-only, refusing to call it, skipping`
+      );
+      continue;
+    }
+    try {
+      await tool.handler({}, { client });
+    } catch (err) {
+      console.error(
+        `[mcp-erpnext] Cache warm: "${name}" failed (non-fatal):`,
+        err
+      );
+    }
+  }
+}
+
+// src/auth/resource-metadata-route.ts
+var ROOT_METADATA_PATH = "/.well-known/oauth-protected-resource";
+function resourceMetadataRoute(provider) {
+  const metadata = provider.getResourceMetadata();
+  const path = new URL(metadata.resource_metadata_url).pathname;
+  if (path === ROOT_METADATA_PATH) return void 0;
+  return {
+    method: "get",
+    path,
+    handler: () => jsonMetadata(metadata)
+  };
+}
+function jsonMetadata(metadata) {
+  return Response.json(metadata);
+}
+
 // server.ts
 var DEFAULT_HTTP_PORT = 3012;
 async function main() {
@@ -45351,15 +46286,19 @@ async function main() {
   const httpPort = portArg ? parseInt(portArg.split("=")[1], 10) : DEFAULT_HTTP_PORT;
   const hostnameArg = args.find((arg) => arg.startsWith("--hostname="));
   const hostname = hostnameArg ? hostnameArg.split("=")[1] : "127.0.0.1";
+  const authConfig = httpFlag ? loadAuthConfig2() : null;
+  const authProvider = authConfig ? buildAuthProvider(authConfig) : void 0;
+  const authMetadataRoute = authProvider ? resourceMetadataRoute(authProvider) : void 0;
   const toolsClient = new ErpNextToolsClient(
     categories ? { categories } : void 0
   );
   const server = new McpApp({
     name: "mcp-erpnext",
-    version: "2.4.2",
+    version: "2.6.0",
     maxConcurrent: 10,
     backpressureStrategy: "queue",
     validateSchema: true,
+    auth: authProvider ? { provider: authProvider } : void 0,
     logger: (msg) => console.error(`[mcp-erpnext] ${msg}`),
     toolErrorMapper: (error2) => {
       if (error2 instanceof FrappeAPIError) return error2.message;
@@ -45401,27 +46340,46 @@ async function main() {
   console.error(
     `[mcp-erpnext] Initialized \u2014 ${toolsClient.count} tools${categories ? ` (categories: ${categories.join(", ")})` : ""}`
   );
+  warmCache().catch((err) => {
+    console.error("[mcp-erpnext] Cache warm failed (non-fatal):", err);
+  });
   if (httpFlag) {
     const isLoopback = hostname === "127.0.0.1" || hostname === "::1" || hostname === "localhost";
     if (!isLoopback) {
       console.error(
-        `[mcp-erpnext] WARNING: binding to ${hostname} exposes the HTTP server to the network. Every tool acts with the server's ERPNext API key, so restrict access (firewall, private network, or an authenticating reverse proxy).`
+        `[mcp-erpnext] WARNING: binding to ${hostname} exposes the HTTP server to the network. Every tool acts with the server's ERPNext API key, so restrict access (firewall, private network) or configure auth via MCP_AUTH_TOKEN(S)/MCP_OAUTH_JWKS_URL.`
+      );
+    }
+    onSignal3("SIGINT", () => {
+      console.error("[mcp-erpnext] Shutting down...");
+      exit3(0);
+    });
+    if (!authConfig) {
+      console.error(
+        "[mcp-erpnext] WARNING: No auth configured for HTTP mode. Set MCP_AUTH_TOKEN, MCP_AUTH_TOKENS, or MCP_OAUTH_JWKS_URL to restrict access."
       );
     }
     await server.startHttp({
       port: httpPort,
       hostname,
       cors: true,
+      customRoutes: authMetadataRoute ? [authMetadataRoute] : void 0,
       onListen: (info) => {
         console.error(
-          `[mcp-erpnext] HTTP server listening on http://${info.hostname}:${info.port}`
+          `[mcp-erpnext] HTTP server listening${authConfig ? "" : " (unauthenticated)"} on http://${info.hostname}:${info.port}`
         );
+        if (authConfig) {
+          const authMethods = [];
+          if (authConfig.tokens.size > 0) {
+            authMethods.push(`static tokens (${authConfig.tokens.size})`);
+          }
+          if (authConfig.jwksUrl) {
+            authMethods.push(`OAuth JWT JWKS (${authConfig.jwksUrl})`);
+          }
+          console.error(`[mcp-erpnext] Auth: ${authMethods.join(", ")}`);
+        }
       }
     });
-    onSignal3("SIGINT", () => {
-      console.error("[mcp-erpnext] Shutting down...");
-      exit3(0);
-    });
   } else {
     await server.start();
     console.error("[mcp-erpnext] stdio mode ready");