@dojocoding/hacienda-mcp 0.4.1 → 0.4.2

package/CHANGELOG.md

@@ -1,5 +1,14 @@
 # @dojocoding/hacienda-mcp
 
+## 0.4.2
+
+### Patch Changes
+
+- b6b25b4: Correct shared fiscal document codes, preserve current official schema provenance, enforce document identity and tax consistency, and use Costa Rica calendar dates in claves. Scope MCP invoice numbering by issuer/environment and invalidate authenticated clients after profile or credential changes. Preserve existing HTTP cancellation and redirect protections, make token deadlines configurable, disable mutation replays by default, and redact diagnostic secrets. Add regression coverage and document actual sandbox reception failures separately from offline test success. Live acceptance of all document families remains a release gate.
+- Updated dependencies [b6b25b4]
+  - @dojocoding/hacienda-sdk@0.4.2
+  - @dojocoding/hacienda-shared@0.4.2
+
 ## 0.4.1
 
 ### Patch Changes

package/README.md

@@ -204,3 +204,11 @@ See the [MCP reference](https://github.com/DojoCodingLabs/hacienda-cr/blob/main/
 ## Migrating to 0.4.0
 
 Read the [migration guide](https://github.com/DojoCodingLabs/hacienda-cr/blob/main/packages/sdk/MIGRATION-v4.4.md) before upgrading.
+
+### Issuer numbering and credential rotation
+
+`create_invoice` accepts `environment` (defaults to `sandbox`) and stores local counters under `issuer-sequences/<environment>/<sha256 identity>/sequences.json` in the configuration directory. The digest covers environment, identification type and identification number. Branch, terminal and document type remain separate counters within that file. This is local-process/file coordination, not a distributed transactional counter.
+
+If an old global `sequences.json` contains positive counters, creating a new unseeded issuer series fails closed. Stop writers, back up the old file, establish the issuer/environment that owns each series, and seed each corresponding scoped file with the last reserved number before resuming. Do not copy a mixed-company global file blindly, delete counters, or restart a production series at one. There is no automatic migration because the old file does not identify its owner.
+
+Authenticated clients are invalidated when the resolved profile, environment, issuer configuration, certificate path, password or PIN changes. Replacing certificate bytes at the same path still requires restarting the process or clearing the cache. Configure one profile per identity/environment.

package/dist/{chunk-Q2UJO3PQ.js → chunk-A5SYNMZP.js}

@@ -2,6 +2,36 @@
 import { readFileSync } from "fs";
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 
+// src/tools/issuer-sequence.ts
+import { createHash } from "crypto";
+import { readFile, access } from "fs/promises";
+import { join } from "path";
+import { getConfigDir, getNextSequence } from "@dojocoding/hacienda-sdk";
+function issuerSequenceDirectory(environment, idType, idNumber, configDir) {
+  const identity = createHash("sha256").update(JSON.stringify([environment, idType, idNumber])).digest("hex");
+  return join(getConfigDir(configDir), "issuer-sequences", environment, identity);
+}
+async function nextIssuerSequence(environment, idType, idNumber, documentType, branch, pos, configDir) {
+  const destination = issuerSequenceDirectory(environment, idType, idNumber, configDir);
+  try {
+    const legacy = JSON.parse(
+      await readFile(join(getConfigDir(configDir), "sequences.json"), "utf8")
+    );
+    if (legacy && typeof legacy === "object" && Object.values(legacy).some((v) => typeof v === "number" && v > 0)) {
+      try {
+        await access(join(destination, "sequences.json"));
+      } catch {
+        throw new Error(
+          "Legacy numbering exists. Migrate and seed the issuer/environment series before creating a document."
+        );
+      }
+    }
+  } catch (error) {
+    if (!(error instanceof Error && "code" in error && error.code === "ENOENT")) throw error;
+  }
+  return getNextSequence(documentType, branch, pos, { configDir: destination });
+}
+
 // src/tools/create-invoice.ts
 import { z } from "zod";
 import {
@@ -13,7 +43,7 @@ import {
   Situation,
   calculateLineItemTotals,
   calculateInvoiceSummary,
-  getNextSequence,
+  sanitizeLogString,
   DEFAULT_BRANCH,
   DEFAULT_POS
 } from "@dojocoding/hacienda-sdk";
@@ -62,6 +92,7 @@ var ReceptorInputSchema = z.object({
   correoElectronico: z.string().optional().describe("Email address")
 });
 var CreateInvoiceInputSchema = z.object({
+  environment: z.enum(["sandbox", "production"]).default("sandbox"),
   emisor: EmisorInputSchema.describe("Invoice issuer (emisor)"),
   receptor: ReceptorInputSchema.describe("Invoice receiver (receptor)"),
   proveedorSistemas: z.string().regex(/^\d{9,12}$/).describe("Actual invoicing-system provider identification number (ProveedorSistemas)"),
@@ -78,6 +109,7 @@ function registerCreateInvoiceTool(server) {
     "create_invoice",
     "Create a Factura Electronica (electronic invoice) for Costa Rica. Accepts emisor, receptor, and line items. Automatically computes taxes, totals, generates the clave numerica, and builds the XML. Returns the unsigned XML string.",
     {
+      environment: CreateInvoiceInputSchema.shape.environment,
       emisor: EmisorInputSchema,
       receptor: ReceptorInputSchema,
       proveedorSistemas: CreateInvoiceInputSchema.shape.proveedorSistemas,
@@ -183,7 +215,14 @@ function registerCreateInvoiceTool(server) {
         let xml = buildFacturaXml(factura);
         const xmlValidation = await validateDocumentXml(xml);
         if (!xmlValidation.valid) throw new Error(xmlValidation.issues.join("; "));
-        const allocatedSequence = await getNextSequence(docTypeCode, branch, pos);
+        const allocatedSequence = await nextIssuerSequence(
+          args.environment,
+          args.emisor.identificacion.tipo,
+          taxpayerId,
+          docTypeCode,
+          branch,
+          pos
+        );
         clave = buildClave({
           date: now,
           taxpayerId,
@@ -214,7 +253,7 @@ function registerCreateInvoiceTool(server) {
           ]
         };
       } catch (error) {
-        const message = error instanceof Error ? error.message : String(error);
+        const message = sanitizeLogString(error instanceof Error ? error.message : String(error));
         return {
           content: [
             {
@@ -230,6 +269,7 @@ function registerCreateInvoiceTool(server) {
 }
 
 // src/tools/document-tools.ts
+import { sanitizeLogString as sanitizeLogString2 } from "@dojocoding/hacienda-sdk";
 import { z as z2 } from "zod";
 import {
   parseClave,
@@ -241,17 +281,33 @@ import {
 import { DOCUMENT_TYPE_NAMES } from "@dojocoding/hacienda-shared";
 
 // src/tools/api-client.ts
-import { bootstrapClient } from "@dojocoding/hacienda-sdk";
+import { createHash as createHash2 } from "crypto";
+import { bootstrapClient, loadConfig } from "@dojocoding/hacienda-sdk";
 var clientCache = /* @__PURE__ */ new Map();
-async function createMcpApiClient(profileName) {
-  const key = profileName ?? "default";
-  const cached = clientCache.get(key);
-  if (cached) {
-    return cached;
-  }
-  const { httpClient } = await bootstrapClient({ profileName: key });
-  clientCache.set(key, httpClient);
-  return httpClient;
+function fingerprint(config) {
+  return createHash2("sha256").update(JSON.stringify([config.profileName, config.profile, config.password, config.p12Pin])).digest("hex");
+}
+async function createMcpApiClient(profileName = "default") {
+  const env = {
+    HACIENDA_USERNAME: process.env.HACIENDA_USERNAME,
+    HACIENDA_PASSWORD: process.env.HACIENDA_PASSWORD,
+    HACIENDA_P12_PIN: process.env.HACIENDA_P12_PIN
+  };
+  const config = await loadConfig(profileName, { env });
+  const identity = fingerprint(config);
+  const cached = clientCache.get(profileName);
+  if (cached?.fingerprint === identity) return cached.promise;
+  const promise = bootstrapClient({ profileName, configOptions: { env } }).then(({ httpClient, config: authenticatedConfig }) => {
+    if (clientCache.get(profileName) === entry)
+      entry.fingerprint = fingerprint(authenticatedConfig);
+    return httpClient;
+  }).catch((error) => {
+    if (clientCache.get(profileName) === entry) clientCache.delete(profileName);
+    throw error;
+  });
+  const entry = { fingerprint: identity, promise };
+  clientCache.set(profileName, entry);
+  return entry.promise;
 }
 
 // src/tools/document-tools.ts
@@ -294,7 +350,7 @@ function registerCheckStatusTool(server) {
           ]
         };
       } catch (error) {
-        const message = error instanceof Error ? error.message : String(error);
+        const message = sanitizeLogString2(error instanceof Error ? error.message : String(error));
         return {
           content: [
             {
@@ -360,7 +416,7 @@ function registerListDocumentsTool(server) {
           ]
         };
       } catch (error) {
-        const message = error instanceof Error ? error.message : String(error);
+        const message = sanitizeLogString2(error instanceof Error ? error.message : String(error));
         return {
           content: [
             {
@@ -426,7 +482,7 @@ ${xmlContent}` : null
           ]
         };
       } catch (error) {
-        const message = error instanceof Error ? error.message : String(error);
+        const message = sanitizeLogString2(error instanceof Error ? error.message : String(error));
         return {
           content: [
             {
@@ -443,7 +499,7 @@ ${xmlContent}` : null
 
 // src/tools/lookup-tools.ts
 import { z as z3 } from "zod";
-import { lookupTaxpayer } from "@dojocoding/hacienda-sdk";
+import { lookupTaxpayer, sanitizeLogString as sanitizeLogString3 } from "@dojocoding/hacienda-sdk";
 import { IDENTIFICATION_TYPE_NAMES } from "@dojocoding/hacienda-shared";
 function registerLookupTaxpayerTool(server) {
   server.tool(
@@ -474,7 +530,7 @@ function registerLookupTaxpayerTool(server) {
           ]
         };
       } catch (error) {
-        const message = error instanceof Error ? error.message : String(error);
+        const message = sanitizeLogString3(error instanceof Error ? error.message : String(error));
         return {
           content: [
             {

package/dist/cli.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   createServer
-} from "./chunk-Q2UJO3PQ.js";
+} from "./chunk-A5SYNMZP.js";
 
 // src/cli.ts
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";

package/dist/index.js

@@ -1,6 +1,6 @@
 import {
   createServer
-} from "./chunk-Q2UJO3PQ.js";
+} from "./chunk-A5SYNMZP.js";
 
 // src/index.ts
 var PACKAGE_NAME = "@dojocoding/hacienda-mcp";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dojocoding/hacienda-mcp",
-  "version": "0.4.1",
+  "version": "0.4.2",
   "description": "MCP Server for Costa Rica electronic invoicing (AI-accessible tools)",
   "type": "module",
   "main": "./dist/index.js",
@@ -28,8 +28,8 @@
     "model-context-protocol"
   ],
   "dependencies": {
-    "@dojocoding/hacienda-sdk": "0.4.1",
-    "@dojocoding/hacienda-shared": "0.4.1",
+    "@dojocoding/hacienda-sdk": "0.4.2",
+    "@dojocoding/hacienda-shared": "0.4.2",
     "@modelcontextprotocol/sdk": "^1.32.0",
     "xmllint-wasm": "^5.3.0",
     "zod": "^4.6.5"