@casys/mcp-erpnext 3.1.0-beta.10 → 3.1.0-beta.11

package/README.md

@@ -84,10 +84,11 @@ the current version's highlights.
 
 > **3.1 beta preview:** the beta keeps the 3.0 tool surface and adds a generic
 > document viewer, child tables, document attachments, in-view navigation, and
-> active context. **3.1.0-beta.10** hardens the read-only Buy capture and
-> immutable recorded-session viewer introduced in beta.9. Features remain
-> capability-gated by the MCP host. In particular, downloads require both
-> proxied server tools and the MCP Apps `downloadFile` capability. Buy evidence
+> active context. **3.1.0-beta.11** adds reversible context selection, compact
+> Kanban details with distinct Timesheet counts, exact selected-document
+> navigation, five more host languages, and correct generic Company columns. It
+> also retains bounded metadata for unpriced Buy lines and adds offline demo
+> import plans. Features remain capability-gated by the MCP host; Buy evidence
 > does not purchase or qualify a live ERP.
 
 ## Documentation
@@ -265,7 +266,7 @@ live ERPNext instance.
   caller cannot pass `sourceInstance`, URL, credentials, `capturedAt`, or a
   digest. Digital Thread stores those bytes in its own CAS; this server does not
   keep a second CAS.
-- App: `io.casys.mcp-erpnext.buy-evidence` `3.1.0-beta.10`, resource
+- App: `io.casys.mcp-erpnext.buy-evidence` `3.1.0-beta.11`, resource
   `ui://mcp-erpnext/buy-evidence-viewer` (`text/html;profile=mcp-app`), manifest
   `ui://mcp-erpnext/buy-evidence-manifest` (`application/json`),
   `acceptedActions` = `viewer.session.apply` only. Complete, partial,
@@ -274,8 +275,12 @@ live ERPNext instance.
   Digital Thread artefact (`provenance.bundleRef`), not a hash of the displayed
   projection.
 - Schemas: `io.casys.mcp-erpnext.buy-source-capture/1.0`,
-  `io.casys.mcp-erpnext.buy-recorded-result/1.0`,
+  `io.casys.mcp-erpnext.buy-recorded-result/1.0` and `/2.0`,
   `io.casys.mcp-erpnext.buy-recorded-session/1.0`.
+- Result `/2.0` carries bounded `excludedLines` metadata for selected lines
+  absent from priced `lines`: exact line ID, quantity, unit, and stated reason.
+  It carries no amount, currency, or price source; covered subtotals remain
+  sealed values and unresolved lines remain visible.
 - The viewer is built with the other MCP Apps
   (`cd src/ui && npm ci && node
   build-all.mjs`). Published JSR/npm artifacts
@@ -370,6 +375,11 @@ started, and [AGENTS.md](AGENTS.md) for the full architecture and conventions.
 
 MIT
 
-Buy result fields use the host locale (EN/FR/ZH). App-level waiting and
-rejection screens retain English labels in this beta; host-context support for
-those shared surface screens remains an upstream MCP View follow-up.
+Viewers and Buy result fields use the host locale: English, French, Simplified
+Chinese, Traditional Chinese, Hindi, Bengali, Tamil and Urdu. Chinese script
+tags take precedence over region tags; `zh-TW`, `zh-HK` and `zh-MO` select
+Traditional Chinese when no script is specified. Urdu uses right-to-left
+document direction, and a later host locale change updates the language and
+direction without reloading the viewer. App-level waiting and rejection screens
+retain English labels in this beta; host-context support for those shared
+surface screens remains an upstream MCP View follow-up.

package/mcp-erpnext.mjs

@@ -4154,13 +4154,14 @@ var require_fast_uri2 = __commonJS({
         if (!malformedIPLiteral) {
           malformedHost = canonicalizeHost(parsed, options, schemeHandler, isIP);
         }
-        if (!schemeHandler || schemeHandler && !schemeHandler.skipNormalize) {
-          if (uri.indexOf("%") !== -1) {
-            if (parsed.host !== void 0 && !malformedIPLiteral) {
-              const host = isIP ? parsed.host : normalizePercentEncoding(parsed.host, true);
-              parsed.host = reescapeHostDelimiters(host, isIP);
-            }
+        if (uri.indexOf("%") !== -1 && parsed.host !== void 0 && !malformedIPLiteral) {
+          let host = isIP ? parsed.host : normalizePercentEncoding(parsed.host, true);
+          if (!isIP) {
+            host = normalizePercentEncoding(host.toLowerCase());
           }
+          parsed.host = reescapeHostDelimiters(host, isIP);
+        }
+        if (!schemeHandler || schemeHandler && !schemeHandler.skipNormalize) {
           if (parsed.path) {
             parsed.path = normalizePathEncoding(parsed.path);
           }
@@ -16000,9 +16001,6 @@ function members(proto, table2) {
     else
       defineBound(proto, key, desc.value);
   }
-  for (const sym of Object.getOwnPropertySymbols(table2)) {
-    defineBound(proto, sym, table2[sym]);
-  }
 }
 function own(inst, key, value, enumerable = true) {
   Object.defineProperty(inst, key, { configurable: true, writable: true, enumerable, value });
@@ -16155,8 +16153,7 @@ function $constructor(name, initializer3, proto, params) {
       } finally {
         _zodDesc.value = void 0;
       }
-    }
-    if (inst._zod.traits.has(name)) {
+    } else if (inst._zod.traits.has(name)) {
       return;
     }
     inst._zod.traits.add(name);
@@ -16919,7 +16916,7 @@ ${content.join("\n")}
 var version = {
   major: 4,
   minor: 6,
-  patch: 2
+  patch: 5
 };
 
 // node_modules/zod/v4/core/schemas.js
@@ -17107,11 +17104,32 @@ var $ZodEmail = /* @__PURE__ */ $constructor("$ZodEmail", (inst, def) => {
 });
 var URL_BAD_FORMAT = 1;
 var URL_UNPARSEABLE = 2;
+function canParseURL(input) {
+  try {
+    if (typeof URL !== "undefined" && typeof URL.canParse === "function")
+      return URL.canParse(input);
+    new URL(input);
+    return true;
+  } catch {
+    return false;
+  }
+}
+function validateURL(trimmed, def) {
+  if (!("normalize" in def) && !("hostname" in def) && !("protocol" in def)) {
+    return canParseURL(trimmed) || URL_UNPARSEABLE;
+  }
+  return parseURLObject(trimmed, def);
+}
 function parseURLObject(trimmed, def) {
   if (!def.normalize && def.protocol?.source === httpProtocol.source && !/^https?:\/\//i.test(trimmed)) {
     return URL_BAD_FORMAT;
   }
   try {
+    if (typeof URL !== "undefined") {
+      const URLStatic = URL;
+      if (typeof URLStatic.parse === "function")
+        return URLStatic.parse(trimmed) ?? URL_UNPARSEABLE;
+    }
     return new URL(trimmed);
   } catch {
     return URL_UNPARSEABLE;
@@ -17134,7 +17152,7 @@ var $ZodURL = /* @__PURE__ */ $constructor("$ZodURL", (inst, def) => {
   inst._zod.check = (payload) => {
     try {
       const trimmed = payload.value.trim();
-      const url2 = parseURLObject(trimmed, def);
+      const url2 = validateURL(trimmed, def);
       if (url2 === URL_BAD_FORMAT) {
         payload.issues.push({
           code: "invalid_format",
@@ -17156,6 +17174,10 @@ var $ZodURL = /* @__PURE__ */ $constructor("$ZodURL", (inst, def) => {
         });
         return;
       }
+      if (url2 === true) {
+        payload.value = stripTabAndNewline(trimmed);
+        return;
+      }
       if (def.hostname && !urlHostnameOk(url2, def.hostname)) {
         payload.issues.push({
           code: "invalid_format",
@@ -17245,12 +17267,7 @@ var ipv6Alphabet = /^[0-9a-fA-F:.]+$/;
 function isValidIPv6(value) {
   if (!ipv6Alphabet.test(value))
     return false;
-  try {
-    new URL(`http://[${value}]`);
-    return true;
-  } catch {
-    return false;
-  }
+  return canParseURL(`http://[${value}]`);
 }
 var $ZodIPv6 = /* @__PURE__ */ $constructor("$ZodIPv6", (inst, def) => {
   def.pattern ?? (def.pattern = ipv6);
@@ -18620,7 +18637,7 @@ var $ZodCyclicError = class extends Error {
 var STATE = "~memo";
 var NO_ISSUES = [];
 function isRef(value) {
-  return value !== null && (typeof value === "object" || typeof value === "function");
+  return value !== null && typeof value === "object";
 }
 function cloneIssues(issues) {
   return issues.map((iss) => iss.path ? { ...iss, path: iss.path.slice() } : { ...iss });
@@ -18669,9 +18686,6 @@ function isRecursive(inst, stack, resolve) {
       check(def.catchall);
       break;
     }
-    case "properties":
-      merge2(shape(def.shape, false));
-      break;
     case "array":
       check(def.element);
       break;
@@ -18927,6 +18941,7 @@ var error = () => {
     base64url: "base64url-encoded string",
     json_string: "JSON string",
     e164: "E.164 number",
+    currency_code: "currency code",
     credit_card: "credit card number",
     iban: "IBAN",
     jwt: "JWT",
@@ -19060,20 +19075,18 @@ function registry() {
 var globalRegistry = globalThis.__zod_globalRegistry;
 
 // node_modules/zod/v4/core/api.js
+function snapshotChecks(def) {
+  if (def.checks)
+    def.checks = [...def.checks];
+  return def;
+}
 // @__NO_SIDE_EFFECTS__
 function _string(Class2, params) {
-  return new Class2({
-    type: "string",
-    ...normalizeParams(params)
-  });
+  return new Class2(snapshotChecks({ type: "string", ...normalizeParams(params) }));
 }
 // @__NO_SIDE_EFFECTS__
 function _coercedString(Class2, params) {
-  return new Class2({
-    type: "string",
-    coerce: true,
-    ...normalizeParams(params)
-  });
+  return new Class2(snapshotChecks({ type: "string", coerce: true, ...normalizeParams(params) }));
 }
 // @__NO_SIDE_EFFECTS__
 function _email(Class2, params) {
@@ -19340,20 +19353,11 @@ function _isoDuration(Class2, params) {
 }
 // @__NO_SIDE_EFFECTS__
 function _number(Class2, params) {
-  return new Class2({
-    type: "number",
-    checks: [],
-    ...normalizeParams(params)
-  });
+  return new Class2(snapshotChecks({ type: "number", checks: [], ...normalizeParams(params) }));
 }
 // @__NO_SIDE_EFFECTS__
 function _coercedNumber(Class2, params) {
-  return new Class2({
-    type: "number",
-    coerce: true,
-    checks: [],
-    ...normalizeParams(params)
-  });
+  return new Class2(snapshotChecks({ type: "number", coerce: true, checks: [], ...normalizeParams(params) }));
 }
 // @__NO_SIDE_EFFECTS__
 function _int(Class2, params) {
@@ -20516,17 +20520,15 @@ var objectProcessor = (schema, ctx, _json, params) => {
       path: [...params.path, "properties", key]
     }));
   }
-  const allKeys = new Set(Object.keys(shape));
-  const requiredKeys = new Set([...allKeys].filter((key) => {
+  const requiredKeys = [];
+  for (const key of Object.keys(shape)) {
     const field = def.shape[key];
-    if (ctx.io === "input") {
-      return inputOptin(field) === void 0;
-    } else {
-      return field._zod.optout === void 0;
+    if (ctx.io === "input" ? inputOptin(field) === void 0 : field._zod.optout === void 0) {
+      requiredKeys.push(key);
     }
-  }));
-  if (requiredKeys.size > 0) {
-    json.required = Array.from(requiredKeys);
+  }
+  if (requiredKeys.length > 0) {
+    json.required = requiredKeys;
   }
   if (def.catchall?._zod.def.type === "never") {
     json.additionalProperties = false;
@@ -20540,31 +20542,6 @@ var objectProcessor = (schema, ctx, _json, params) => {
     });
   }
 };
-var propertiesProcessor = (schema, ctx, _json, params) => {
-  const json = _json;
-  const def = schema._zod.def;
-  if (Object.getOwnPropertySymbols(def.shape).length && handleUnrepresentable(schema, ctx, json, params, "Symbol keys cannot be represented in JSON Schema")) {
-    return;
-  }
-  if (ctx.io === "output") {
-    for (const key in def.shape) {
-      if (isTransforming(def.shape[key]) && handleUnrepresentable(schema, ctx, json, params, `z.properties() returns its input, so the output of a transforming schema at key "${key}" cannot be represented in JSON Schema`)) {
-        return;
-      }
-    }
-  }
-  json.type = "object";
-  json.properties = {};
-  for (const key in def.shape) {
-    assignProp(json.properties, key, processSchema(def.shape[key], ctx, {
-      ...params,
-      path: [...params.path, "properties", key]
-    }));
-  }
-  const required2 = Object.keys(def.shape).filter((key) => inputOptin(def.shape[key]) === void 0);
-  if (required2.length > 0)
-    json.required = required2;
-};
 var unionProcessor = (schema, ctx, json, params) => {
   const def = schema._zod.def;
   const isExclusive = def.inclusive === false;
@@ -20884,7 +20861,6 @@ var allProcessors = {
   file: fileProcessor,
   success: successProcessor,
   custom: customProcessor,
-  properties: propertiesProcessor,
   function: functionProcessor,
   transform: transformProcessor,
   map: mapProcessor,
@@ -38626,7 +38602,10 @@ var HonoRequest = class {
         if (anyCachedKey === "json") {
           body = JSON.stringify(body);
         }
-        return new Response(body)[key]();
+        const contentType = anyCachedKey === "formData" ? void 0 : raw2.headers.get("content-type");
+        return new Response(body, {
+          headers: contentType ? { "Content-Type": contentType } : void 0
+        })[key]();
       });
     }
     return bodyCache[key] = raw2[key]();
@@ -39259,7 +39238,7 @@ var Context = class {
     const locationString = String(location);
     this.header(
       "Location",
-      // Multibyes should be encoded
+      // Multibytes should be encoded
       // eslint-disable-next-line no-control-regex
       !/[^\x00-\xFF]/.test(locationString) ? locationString : encodeURI(locationString)
     );
@@ -54168,6 +54147,8 @@ function isEmptyPartyAccountCurrencyNone(text) {
 }
 
 // src/tools/operations.ts
+var DOC_LIST_MAX_LIMIT = 5e3;
+var DOC_LIST_MAX_OFFSET = 1e5;
 function bytesToBase64(bytes) {
   const chunkSize = 32 * 1024;
   let binary = "";
@@ -54675,7 +54656,7 @@ var operationsTools = [
     name: "erpnext_doc_list",
     annotations: { readOnlyHint: true },
     _meta: DOCLIST_META,
-    description: "List any ERPNext documents by DocType. Useful for DocTypes not covered by dedicated tools. Supports field selection, filters (as JSON array), and limit.",
+    description: "List any ERPNext documents by DocType. Useful for DocTypes not covered by dedicated tools. Supports field selection, filters (as JSON array), bounded pagination, and an optional fresh read.",
     category: "operations",
     inputSchema: {
       type: "object",
@@ -54739,7 +54720,22 @@ var operationsTools = [
             ]
           }
         },
-        limit: { type: "number", description: "Max results (default 20)" },
+        limit: {
+          type: "integer",
+          minimum: 1,
+          maximum: DOC_LIST_MAX_LIMIT,
+          description: "Max results (default 20, maximum 5000)"
+        },
+        offset: {
+          type: "integer",
+          minimum: 0,
+          maximum: DOC_LIST_MAX_OFFSET,
+          description: "Pagination offset (default 0, maximum 100000)"
+        },
+        skip_cache: {
+          type: "boolean",
+          description: "Force a fresh ERPNext read instead of using the short-lived list cache"
+        },
         order_by: {
           type: "string",
           description: "Order by clause (e.g. 'modified desc', 'name asc')"
@@ -54751,16 +54747,34 @@ var operationsTools = [
       if (!input.doctype) {
         throw new Error("[erpnext_doc_list] 'doctype' is required");
       }
+      if (input.limit !== void 0 && (typeof input.limit !== "number" || !Number.isInteger(input.limit) || input.limit < 1 || input.limit > DOC_LIST_MAX_LIMIT)) {
+        throw new Error(
+          `[erpnext_doc_list] 'limit' must be an integer between 1 and ${DOC_LIST_MAX_LIMIT}`
+        );
+      }
+      if (input.offset !== void 0 && (typeof input.offset !== "number" || !Number.isInteger(input.offset) || input.offset < 0 || input.offset > DOC_LIST_MAX_OFFSET)) {
+        throw new Error(
+          `[erpnext_doc_list] 'offset' must be an integer between 0 and ${DOC_LIST_MAX_OFFSET}`
+        );
+      }
+      if (input.skip_cache !== void 0 && typeof input.skip_cache !== "boolean") {
+        throw new Error("[erpnext_doc_list] 'skip_cache' must be a boolean");
+      }
       const limit = input.limit ?? 20;
       const fields = input.fields ?? ["name", "modified"];
       const filters = input.filters ?? [];
       const order_by = input.order_by ?? "modified desc";
-      const docs = await ctx.client.list(input.doctype, {
+      const offset = input.offset;
+      const listOptions = {
         fields,
         filters,
         limit,
+        ...offset !== void 0 ? { limit_start: offset } : {},
         order_by
-      });
+      };
+      const docs = input.skip_cache === true ? await ctx.client.list(input.doctype, listOptions, {
+        skipCache: true
+      }) : await ctx.client.list(input.doctype, listOptions);
       return {
         doctype: input.doctype,
         count: docs.length,
@@ -57470,12 +57484,13 @@ var kanbanTools = [
 // src/buy/identities.ts
 var BUY_SOURCE_CAPTURE_SCHEMA = "io.casys.mcp-erpnext.buy-source-capture/1.0";
 var BUY_RECORDED_RESULT_SCHEMA = "io.casys.mcp-erpnext.buy-recorded-result/1.0";
+var BUY_RECORDED_RESULT_SCHEMA_V2 = "io.casys.mcp-erpnext.buy-recorded-result/2.0";
 var BUY_RECORDED_SESSION_SCHEMA = "io.casys.mcp-erpnext.buy-recorded-session/1.0";
 var BUY_EVIDENCE_VIEWER_URI = "ui://mcp-erpnext/buy-evidence-viewer";
 var BUY_VIEW_APP_MANIFEST_URI = "ui://mcp-erpnext/buy-evidence-manifest";
 var BUY_VIEW_APP_ID = "io.casys.mcp-erpnext.buy-evidence";
 var BUY_VIEW_APP_TITLE = "ERPNext Buy Evidence";
-var BUY_VIEW_APP_VERSION = "3.1.0-beta.10";
+var BUY_VIEW_APP_VERSION = "3.1.0-beta.11";
 var BUY_SOURCE_INSTANCE_KIND = "erpnext-site";
 var BUY_CAPTURE_DOCTYPE = [
   "Item",
@@ -60249,7 +60264,7 @@ var BUY_VIEW_APP_MANIFEST = {
   resources: [{
     uri: BUY_EVIDENCE_VIEWER_URI,
     ownership: "whole-view",
-    resultSchemas: [BUY_RECORDED_RESULT_SCHEMA],
+    resultSchemas: [BUY_RECORDED_RESULT_SCHEMA, BUY_RECORDED_RESULT_SCHEMA_V2],
     acceptedActions: [VIEWER_SESSION_APPLY_ACTION],
     sessionSchemas: [BUY_RECORDED_SESSION_SCHEMA]
   }]
@@ -60313,9 +60328,9 @@ function parseBuyViewAppManifest(value) {
     resource.resultSchemas,
     "Buy View App manifest.resources[0].resultSchemas"
   );
-  if (resultSchemas.length !== 1 || resultSchemas[0] !== BUY_RECORDED_RESULT_SCHEMA) {
+  if (resultSchemas.length !== 2 || resultSchemas[0] !== BUY_RECORDED_RESULT_SCHEMA || resultSchemas[1] !== BUY_RECORDED_RESULT_SCHEMA_V2) {
     throw new TypeError(
-      "Buy View App manifest result schemas must be io.casys.mcp-erpnext.buy-recorded-result/1.0 exactly."
+      "Buy View App manifest result schemas must list buy-recorded-result/1.0 then /2.0 exactly."
     );
   }
   const acceptedActions = denseArray(
@@ -60622,7 +60637,7 @@ async function main() {
   );
   const server = new McpApp({
     name: "mcp-erpnext",
-    version: "3.1.0-beta.10",
+    version: "3.1.0-beta.11",
     transport: "stateless",
     cache: {
       ttlMs: 36e5,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@casys/mcp-erpnext",
-  "version": "3.1.0-beta.10",
+  "version": "3.1.0-beta.11",
   "description": "MCP server for ERPNext with interactive UI viewers",
   "type": "module",
   "bin": {