@frihet/mcp-server 1.16.6 → 2.0.0

package/dist/tools/shared.d.ts

@@ -4,7 +4,8 @@
  * This module is used by both the local (stdio) and remote (Cloudflare Workers)
  * MCP servers. It must NOT import concrete classes from either client — error
  * detection uses duck-typing (checking for `statusCode`/`errorCode` properties)
- * so it works regardless of which FrihetApiError class threw the error.
+ * so it works regardless of which FrihetApiError class threw the error. The
+ * client-owned predicate separately verifies local validation provenance.
  */
 import type { ToolAnnotations, Annotations } from "@modelcontextprotocol/sdk/types.js";
 import { z } from "zod/v4";
@@ -13,9 +14,9 @@ export declare const READ_ONLY_ANNOTATIONS: ToolAnnotations;
 export declare const CREATE_ANNOTATIONS: ToolAnnotations;
 export declare const UPDATE_ANNOTATIONS: ToolAnnotations;
 export declare const DELETE_ANNOTATIONS: ToolAnnotations;
-/** List operations: useful to both user and assistant for navigation, medium priority. */
+/** List operations: useful to both user and assistant for navigation. */
 export declare const LIST_CONTENT_ANNOTATIONS: Annotations;
-/** Get/read operations: useful to both, higher priority as specifically requested data. */
+/** Get/read operations: useful to both user and assistant. */
 export declare const GET_CONTENT_ANNOTATIONS: Annotations;
 /** Mutating operations (create/update/delete): primarily for the user, highest priority. */
 export declare const MUTATE_CONTENT_ANNOTATIONS: Annotations;
@@ -26,23 +27,30 @@ export interface AnnotatedTextContent {
     text: string;
     annotations?: Annotations;
 }
-export declare function truncateResponse(text: string): string;
+export declare function truncateResponse(text: string, truncatedNotice?: string): string;
 /**
  * Maps an error to a user-friendly MCP tool response with error annotations.
  * Emits structured log entries for all errors.
  */
 export declare function handleToolError(error: unknown, toolName?: string): {
     content: AnnotatedTextContent[];
+    structuredContent?: Record<string, unknown>;
     isError: true;
+    _meta?: Record<string, unknown>;
 };
 /**
  * Formats a paginated API response into readable text.
  */
 export declare function formatPaginatedResponse(resourceName: string, response: PaginatedResponse<Record<string, unknown>>): string;
+/** Format an exhaustive list whose backend exposes no pagination controls. */
+export declare function formatUnpaginatedListResponse<T extends object>(resourceName: string, response: {
+    data: T[];
+    total: number;
+}): string;
 /**
  * Formats a single record for display.
  */
-export declare function formatRecord(label: string, record: Record<string, unknown>): string;
+export declare function formatRecord(label: string, record: object): string;
 /**
  * Builds an annotated content block for list/search responses.
  */
@@ -56,13 +64,21 @@ export declare function getContent(text: string): AnnotatedTextContent;
  */
 export declare function mutateContent(text: string): AnnotatedTextContent;
 /**
- * Adds contextual suggestions and warnings to tool responses.
- * Helps AI agents know what to do next without guessing.
+ * Returns agent-facing suggestions and warnings for a tool call, formatted
+ * as plain text to be APPENDED to the human-readable `content` block.
+ *
+ * Why text, not structured fields: `structuredContent` is the strict
+ * outputSchema contract. Spreading `{ _suggestions, _warnings }` into
+ * structuredContent would make them undeclared enrichment (Inspector /
+ * conformance failures, drift in the OpenAI reviewed surface's frozen
+ * snapshot). The hints are agent-facing and deterministic from the
+ * emitted data, so they belong in the text the model reads, not in the
+ * JSON the schema validates. Pinned by
+ * src/__tests__/paginated-strict-output.test.ts (ERP #1580): the strict
+ * contract test asserts structuredContent never carries the old
+ * `_suggestions` / `_warnings` keys.
  */
-export declare function enrichResponse(resource: string, operation: string, data: unknown): {
-    _suggestions?: string[];
-    _warnings?: string[];
-};
+export declare function enrichResponse(resource: string, operation: string, data: unknown): string;
 /**
  * Wraps an item schema in a paginated envelope for list/search tools.
  *
@@ -94,6 +110,31 @@ export declare const deleteResultOutput: z.ZodObject<{
     success: z.ZodBoolean;
     id: z.ZodString;
 }, z.core.$strip>;
+/**
+ * Schema for deletes of FISCAL DOCUMENTS (invoices, quotes) — the only two
+ * resources where "delete" is not always a delete.
+ *
+ * The backend refuses to destroy a non-draft invoice/quote (VeriFactu hash
+ * chain) and soft-CANCELS it instead, distinguishing the outcomes on the wire:
+ * 204 = row destroyed, 200 + body = document kept with status=cancelled
+ * (erp-main publicApi.ts `deleteResource`). `outcome` is what lets an agent
+ * tell the user which one actually happened (GAP-12).
+ *
+ * Deliberately NOT folded into {@link deleteResultOutput}: that one is shared by
+ * nine non-fiscal delete tools whose backend has no cancel branch, and widening
+ * it would drift their published output schema for no behavioural reason.
+ */
+export declare const documentDeleteResultOutput: z.ZodObject<{
+    success: z.ZodBoolean;
+    id: z.ZodString;
+    outcome: z.ZodOptional<z.ZodEnum<{
+        cancelled: "cancelled";
+        deleted: "deleted";
+    }>>;
+    status: z.ZodOptional<z.ZodString>;
+    previousStatus: z.ZodOptional<z.ZodString>;
+    cancelledVia: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
 /**
  * Permissive structured-output schema for tools whose API returns an open
  * `Record<string, unknown>` (summaries, single-object actions, VIES/portal
@@ -107,17 +148,22 @@ export declare const deleteResultOutput: z.ZodObject<{
 export declare function openObjectOutput(description: string): z.ZodObject<{}, z.core.$loose>;
 export declare const invoiceItemOutput: z.ZodObject<{
     id: z.ZodString;
+    clientId: z.ZodOptional<z.ZodString>;
     clientName: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     items: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        id: z.ZodOptional<z.ZodString>;
         description: z.ZodString;
         quantity: z.ZodNumber;
         unitPrice: z.ZodNumber;
+        taxRate: z.ZodOptional<z.ZodNumber>;
+        discount: z.ZodOptional<z.ZodNumber>;
     }, z.core.$strip>>>;
     issueDate: z.ZodOptional<z.ZodString>;
     dueDate: z.ZodOptional<z.ZodString>;
     status: z.ZodOptional<z.ZodString>;
     notes: z.ZodOptional<z.ZodString>;
     taxRate: z.ZodOptional<z.ZodNumber>;
+    discountRate: z.ZodOptional<z.ZodNumber>;
     total: z.ZodOptional<z.ZodNumber>;
     createdAt: z.ZodOptional<z.ZodString>;
     updatedAt: z.ZodOptional<z.ZodString>;
@@ -128,8 +174,10 @@ export declare const expenseItemOutput: z.ZodObject<{
     amount: z.ZodNumber;
     category: z.ZodOptional<z.ZodString>;
     date: z.ZodOptional<z.ZodString>;
+    vendorId: z.ZodOptional<z.ZodString>;
     vendor: z.ZodOptional<z.ZodString>;
     taxDeductible: z.ZodOptional<z.ZodBoolean>;
+    paidDate: z.ZodOptional<z.ZodString>;
     createdAt: z.ZodOptional<z.ZodString>;
     updatedAt: z.ZodOptional<z.ZodString>;
 }, z.core.$loose>;
@@ -138,6 +186,7 @@ export declare const clientItemOutput: z.ZodObject<{
     name: z.ZodString;
     email: z.ZodOptional<z.ZodString>;
     phone: z.ZodOptional<z.ZodString>;
+    stage: z.ZodOptional<z.ZodString>;
     taxId: z.ZodOptional<z.ZodString>;
     address: z.ZodOptional<z.ZodObject<{
         street: z.ZodOptional<z.ZodString>;
@@ -155,21 +204,30 @@ export declare const productItemOutput: z.ZodObject<{
     unitPrice: z.ZodNumber;
     description: z.ZodOptional<z.ZodString>;
     taxRate: z.ZodOptional<z.ZodNumber>;
+    isActive: z.ZodOptional<z.ZodBoolean>;
     createdAt: z.ZodOptional<z.ZodString>;
     updatedAt: z.ZodOptional<z.ZodString>;
 }, z.core.$loose>;
 export declare const quoteItemOutput: z.ZodObject<{
     id: z.ZodString;
+    clientId: z.ZodOptional<z.ZodString>;
     clientName: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     items: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        id: z.ZodOptional<z.ZodString>;
         description: z.ZodString;
         quantity: z.ZodNumber;
         unitPrice: z.ZodNumber;
+        taxRate: z.ZodOptional<z.ZodNumber>;
+        discount: z.ZodOptional<z.ZodNumber>;
     }, z.core.$strip>>>;
+    issueDate: z.ZodOptional<z.ZodString>;
+    dueDate: z.ZodOptional<z.ZodString>;
     validUntil: z.ZodOptional<z.ZodString>;
     notes: z.ZodOptional<z.ZodString>;
     status: z.ZodOptional<z.ZodString>;
     total: z.ZodOptional<z.ZodNumber>;
+    taxRate: z.ZodOptional<z.ZodNumber>;
+    discountRate: z.ZodOptional<z.ZodNumber>;
     createdAt: z.ZodOptional<z.ZodString>;
     updatedAt: z.ZodOptional<z.ZodString>;
 }, z.core.$loose>;
@@ -191,13 +249,72 @@ export declare const vendorItemOutput: z.ZodObject<{
 }, z.core.$loose>;
 export declare const webhookItemOutput: z.ZodObject<{
     id: z.ZodString;
+    userId: z.ZodOptional<z.ZodString>;
+    name: z.ZodString;
     url: z.ZodString;
     events: z.ZodArray<z.ZodString>;
-    active: z.ZodOptional<z.ZodBoolean>;
-    secret: z.ZodOptional<z.ZodString>;
+    status: z.ZodEnum<{
+        active: "active";
+        inactive: "inactive";
+        paused: "paused";
+    }>;
+    metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    hasSecret: z.ZodBoolean;
+    pausedReason: z.ZodOptional<z.ZodString>;
+    lastTriggeredAt: z.ZodOptional<z.ZodString>;
     createdAt: z.ZodOptional<z.ZodString>;
     updatedAt: z.ZodOptional<z.ZodString>;
-}, z.core.$loose>;
+    _demo: z.ZodOptional<z.ZodLiteral<true>>;
+    _demoNotice: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+/** Create alone may echo the caller-supplied signing secret once. */
+export declare const webhookCreateOutput: z.ZodObject<{
+    id: z.ZodString;
+    userId: z.ZodOptional<z.ZodString>;
+    name: z.ZodString;
+    url: z.ZodString;
+    events: z.ZodArray<z.ZodString>;
+    status: z.ZodEnum<{
+        active: "active";
+        inactive: "inactive";
+        paused: "paused";
+    }>;
+    metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    hasSecret: z.ZodBoolean;
+    pausedReason: z.ZodOptional<z.ZodString>;
+    lastTriggeredAt: z.ZodOptional<z.ZodString>;
+    createdAt: z.ZodOptional<z.ZodString>;
+    updatedAt: z.ZodOptional<z.ZodString>;
+    _demo: z.ZodOptional<z.ZodLiteral<true>>;
+    _demoNotice: z.ZodOptional<z.ZodString>;
+    secret: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+/** `/webhooks` has no backend pagination contract. */
+export declare const webhookListOutput: z.ZodObject<{
+    data: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        userId: z.ZodOptional<z.ZodString>;
+        name: z.ZodString;
+        url: z.ZodString;
+        events: z.ZodArray<z.ZodString>;
+        status: z.ZodEnum<{
+            active: "active";
+            inactive: "inactive";
+            paused: "paused";
+        }>;
+        metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+        hasSecret: z.ZodBoolean;
+        pausedReason: z.ZodOptional<z.ZodString>;
+        lastTriggeredAt: z.ZodOptional<z.ZodString>;
+        createdAt: z.ZodOptional<z.ZodString>;
+        updatedAt: z.ZodOptional<z.ZodString>;
+        _demo: z.ZodOptional<z.ZodLiteral<true>>;
+        _demoNotice: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>>;
+    total: z.ZodNumber;
+    _demo: z.ZodOptional<z.ZodLiteral<true>>;
+    _demoNotice: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
 export declare const contactItemOutput: z.ZodObject<{
     id: z.ZodString;
     name: z.ZodString;
@@ -213,10 +330,17 @@ export declare const activityItemOutput: z.ZodObject<{
     type: z.ZodString;
     title: z.ZodString;
     description: z.ZodOptional<z.ZodString>;
-    date: z.ZodOptional<z.ZodString>;
+    metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+    timestamp: z.ZodString;
+    createdBy: z.ZodOptional<z.ZodEnum<{
+        user: "user";
+        system: "system";
+    }>>;
     createdAt: z.ZodOptional<z.ZodString>;
     updatedAt: z.ZodOptional<z.ZodString>;
-}, z.core.$loose>;
+    _demo: z.ZodOptional<z.ZodLiteral<true>>;
+    _demoNotice: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
 export declare const noteItemOutput: z.ZodObject<{
     id: z.ZodString;
     content: z.ZodString;
@@ -244,9 +368,9 @@ export declare const reservationItemOutput: z.ZodObject<{
     guestId: z.ZodOptional<z.ZodString>;
     status: z.ZodEnum<{
         cancelled: "cancelled";
-        completed: "completed";
         confirmed: "confirmed";
         pending: "pending";
+        completed: "completed";
         no_show: "no_show";
     }>;
     checkIn: z.ZodString;
@@ -323,9 +447,9 @@ export declare const posTerminalItemOutput: z.ZodObject<{
     deviceType: z.ZodOptional<z.ZodString>;
     locationId: z.ZodOptional<z.ZodString>;
     status: z.ZodOptional<z.ZodEnum<{
-        unknown: "unknown";
-        online: "online";
-        offline: "offline";
+        active: "active";
+        paused: "paused";
+        retired: "retired";
     }>>;
     stripeReaderId: z.ZodOptional<z.ZodString>;
     createdAt: z.ZodOptional<z.ZodString>;
@@ -337,8 +461,8 @@ export declare const posSaleItemOutput: z.ZodObject<{
     status: z.ZodOptional<z.ZodEnum<{
         succeeded: "succeeded";
         cancelled: "cancelled";
-        refunded: "refunded";
         pending: "pending";
+        refunded: "refunded";
         partially_refunded: "partially_refunded";
     }>>;
     amountCents: z.ZodOptional<z.ZodNumber>;
@@ -368,6 +492,7 @@ export declare const actionResultOutput: z.ZodObject<{
     success: z.ZodOptional<z.ZodBoolean>;
     id: z.ZodOptional<z.ZodString>;
     message: z.ZodOptional<z.ZodString>;
+    messageId: z.ZodOptional<z.ZodString>;
     data: z.ZodOptional<z.ZodNever>;
     meta: z.ZodOptional<z.ZodNever>;
 }, z.core.$loose>;
@@ -386,6 +511,9 @@ export declare const creditNoteResultOutput: z.ZodObject<{
         originalInvoiceId: z.ZodOptional<z.ZodString>;
         reason: z.ZodOptional<z.ZodString>;
         fullCredit: z.ZodOptional<z.ZodBoolean>;
+        status: z.ZodOptional<z.ZodString>;
+        rectificationMethod: z.ZodOptional<z.ZodString>;
+        totalCredited: z.ZodOptional<z.ZodNumber>;
     }, z.core.$loose>>;
     data: z.ZodOptional<z.ZodNever>;
     meta: z.ZodOptional<z.ZodNever>;
@@ -409,8 +537,8 @@ export declare const bankTransactionItemOutput: z.ZodObject<{
     postedAt: z.ZodOptional<z.ZodString>;
     category: z.ZodOptional<z.ZodString>;
     status: z.ZodOptional<z.ZodEnum<{
-        posted: "posted";
         pending: "pending";
+        posted: "posted";
         excluded: "excluded";
     }>>;
     matchedDocId: z.ZodOptional<z.ZodString>;
@@ -482,9 +610,9 @@ export declare const verifactuStatusOutput: z.ZodObject<{
     lastSubmissionAt: z.ZodOptional<z.ZodString>;
     hash: z.ZodOptional<z.ZodString>;
     status: z.ZodOptional<z.ZodEnum<{
+        success: "success";
         failed: "failed";
         accepted: "accepted";
-        success: "success";
         pending: "pending";
         not_submitted: "not_submitted";
     }>>;
@@ -502,8 +630,8 @@ export declare const ticketbaiStatusOutput: z.ZodObject<{
     lastSubmissionAt: z.ZodOptional<z.ZodString>;
     hash: z.ZodOptional<z.ZodString>;
     status: z.ZodOptional<z.ZodEnum<{
-        failed: "failed";
         success: "success";
+        failed: "failed";
         pending: "pending";
     }>>;
     aeatResponse: z.ZodOptional<z.ZodString>;
@@ -544,11 +672,32 @@ export declare const recurringInvoiceItemOutput: z.ZodObject<{
     createdAt: z.ZodOptional<z.ZodString>;
     updatedAt: z.ZodOptional<z.ZodString>;
 }, z.core.$loose>;
-/** Schema for PDF results */
+/**
+ * Schema for the MIME-discriminated `get_invoice_einvoice` artifact.
+ *
+ * Stored UBL/Facturae artifacts return strict UTF-8 `xml`; Factur-X artifacts
+ * return PDF bytes as `base64`. Identity, MIME and byte size are always present.
+ */
+export declare const einvoiceResultOutput: z.ZodObject<{
+    id: z.ZodString;
+    contentType: z.ZodString;
+    sizeBytes: z.ZodNumber;
+    xml: z.ZodOptional<z.ZodString>;
+    base64: z.ZodOptional<z.ZodString>;
+    filename: z.ZodOptional<z.ZodString>;
+}, z.core.$loose>;
+/**
+ * Schema for `get_invoice_pdf` results (#1393 — content-type-aware).
+ *
+ * The backend serves raw `application/pdf` bytes. MCP `structuredContent` is
+ * JSON-only, so callers receive bounded base64 plus request identity and size.
+ */
 export declare const pdfResultOutput: z.ZodObject<{
     id: z.ZodString;
-    url: z.ZodOptional<z.ZodString>;
-    contentType: z.ZodOptional<z.ZodString>;
+    contentType: z.ZodString;
+    sizeBytes: z.ZodNumber;
+    base64: z.ZodString;
+    filename: z.ZodOptional<z.ZodString>;
 }, z.core.$loose>;
 export declare const timeSummaryOutput: z.ZodObject<{
     from: z.ZodString;
@@ -568,22 +717,26 @@ export declare const timeSummaryOutput: z.ZodObject<{
 }, z.core.$loose>;
 export declare const teamMemberItemOutput: z.ZodObject<{
     id: z.ZodString;
-    name: z.ZodOptional<z.ZodString>;
-    email: z.ZodString;
-    role: z.ZodOptional<z.ZodEnum<{
+    name: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    email: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    role: z.ZodOptional<z.ZodNullable<z.ZodEnum<{
         owner: "owner";
         admin: "admin";
-        member: "member";
+        editor: "editor";
+        accountant: "accountant";
         viewer: "viewer";
-    }>>;
+    }>>>;
     status: z.ZodOptional<z.ZodEnum<{
         active: "active";
         pending: "pending";
+        expired: "expired";
+        invalid: "invalid";
     }>>;
-    invitedAt: z.ZodOptional<z.ZodString>;
-    joinedAt: z.ZodOptional<z.ZodString>;
-    createdAt: z.ZodOptional<z.ZodString>;
-    updatedAt: z.ZodOptional<z.ZodString>;
+    invitedAt: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    joinedAt: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    createdAt: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    updatedAt: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    expiresAt: z.ZodOptional<z.ZodNullable<z.ZodString>>;
 }, z.core.$loose>;
 /**
  * Gestoria message — single message in a contextual thread attached to a
@@ -718,29 +871,59 @@ export declare const attendanceEntryItemOutput: z.ZodObject<{
     createdAt: z.ZodOptional<z.ZodString>;
     updatedAt: z.ZodOptional<z.ZodString>;
 }, z.core.$loose>;
-/** Overtime aggregated report. */
+/** Exact ERP DTO for `GET /v1/time-entries/overtime`. */
 export declare const overtimeReportOutput: z.ZodObject<{
     period: z.ZodString;
-    totalRegularHours: z.ZodOptional<z.ZodNumber>;
-    totalOvertimeHours: z.ZodOptional<z.ZodNumber>;
-    estimatedCostEur: z.ZodOptional<z.ZodNumber>;
-    byEmployee: z.ZodOptional<z.ZodArray<z.ZodObject<{
-        employeeId: z.ZodString;
-        employeeName: z.ZodOptional<z.ZodString>;
-        regularHours: z.ZodOptional<z.ZodNumber>;
-        overtimeHours: z.ZodOptional<z.ZodNumber>;
-    }, z.core.$loose>>>;
-    generatedAt: z.ZodOptional<z.ZodString>;
+    employeeId: z.ZodNullable<z.ZodString>;
+    recordCount: z.ZodNumber;
+    dailyOvertime: z.ZodArray<z.ZodObject<{
+        date: z.ZodString;
+        minutes: z.ZodNumber;
+        exceedsDaily: z.ZodBoolean;
+    }, z.core.$strip>>;
+    weeklyOvertime: z.ZodArray<z.ZodObject<{
+        weekStart: z.ZodString;
+        totalMinutes: z.ZodNumber;
+        overtimeMinutes: z.ZodNumber;
+    }, z.core.$strip>>;
+    monthlyTotal: z.ZodObject<{
+        workedMinutes: z.ZodNumber;
+        overtimeMinutes: z.ZodNumber;
+        regularMinutes: z.ZodNumber;
+    }, z.core.$strip>;
+    annualOvertimeHours: z.ZodNumber;
+    alerts: z.ZodArray<z.ZodObject<{
+        type: z.ZodEnum<{
+            daily_exceeded: "daily_exceeded";
+            weekly_exceeded: "weekly_exceeded";
+            annual_approaching: "annual_approaching";
+            annual_exceeded: "annual_exceeded";
+            missing_break: "missing_break";
+        }>;
+        severity: z.ZodEnum<{
+            warning: "warning";
+            critical: "critical";
+        }>;
+        message: z.ZodString;
+        date: z.ZodString;
+    }, z.core.$strip>>;
+    data: z.ZodOptional<z.ZodNever>;
+    meta: z.ZodOptional<z.ZodNever>;
+    totalRegularHours: z.ZodOptional<z.ZodNever>;
+    totalOvertimeHours: z.ZodOptional<z.ZodNever>;
+    estimatedCostEur: z.ZodOptional<z.ZodNever>;
+    byEmployee: z.ZodOptional<z.ZodNever>;
+    generatedAt: z.ZodOptional<z.ZodNever>;
 }, z.core.$loose>;
 /** Anomaly detection record — backend `/v1/anomalies`. */
 export declare const anomalyItemOutput: z.ZodObject<{
     id: z.ZodString;
     type: z.ZodOptional<z.ZodString>;
     severity: z.ZodOptional<z.ZodEnum<{
+        critical: "critical";
         low: "low";
         medium: "medium";
         high: "high";
-        critical: "critical";
     }>>;
     subjectId: z.ZodOptional<z.ZodString>;
     description: z.ZodOptional<z.ZodString>;
@@ -765,82 +948,1201 @@ export declare const webhookTestResultOutput: z.ZodObject<{
     attemptedAt: z.ZodOptional<z.ZodString>;
     error: z.ZodOptional<z.ZodString>;
 }, z.core.$loose>;
-/** Payroll export result — backend `/v1/payroll/prep/export`. */
+/** Exact normalized dataset DTO from `GET /v1/payroll/prep/export`. */
 export declare const payrollExportOutput: z.ZodObject<{
+    month: z.ZodString;
     format: z.ZodEnum<{
         a3: "a3";
         contasol: "contasol";
         sage: "sage";
-        holded: "holded";
         siltra: "siltra";
     }>;
-    month: z.ZodString;
-    fileUrl: z.ZodOptional<z.ZodString>;
-    filename: z.ZodOptional<z.ZodString>;
-    rowCount: z.ZodOptional<z.ZodNumber>;
-    generatedAt: z.ZodOptional<z.ZodString>;
+    employees: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        name: z.ZodString;
+        nss: z.ZodString;
+        irpfPct: z.ZodNumber;
+        salaryGrossAnnual: z.ZodNumber;
+        convenioColectivo: z.ZodNullable<z.ZodString>;
+        categoriaProfesional: z.ZodNullable<z.ZodString>;
+        prorrateoPagasExtras: z.ZodNullable<z.ZodBoolean>;
+        formaPago: z.ZodEnum<{
+            transferencia: "transferencia";
+            efectivo: "efectivo";
+            cheque: "cheque";
+        }>;
+        iban: z.ZodNullable<z.ZodString>;
+    }, z.core.$strip>>;
+    summary: z.ZodObject<{
+        exportedCount: z.ZodNumber;
+        skippedNotReady: z.ZodNumber;
+        totalGrossAnnual: z.ZodNumber;
+    }, z.core.$strip>;
+    data: z.ZodOptional<z.ZodNever>;
+    meta: z.ZodOptional<z.ZodNever>;
+    fileUrl: z.ZodOptional<z.ZodNever>;
+    filename: z.ZodOptional<z.ZodNever>;
+    rowCount: z.ZodOptional<z.ZodNever>;
+    generatedAt: z.ZodOptional<z.ZodNever>;
 }, z.core.$loose>;
-/** Payroll checklist — backend `/v1/payroll/prep/employees`. */
+/** Exact readiness DTO from `GET /v1/payroll/prep/employees`. */
 export declare const payrollChecklistOutput: z.ZodObject<{
     month: z.ZodString;
-    totalEmployees: z.ZodOptional<z.ZodNumber>;
-    readyEmployees: z.ZodOptional<z.ZodNumber>;
-    missingEmployees: z.ZodOptional<z.ZodNumber>;
-    employees: z.ZodOptional<z.ZodArray<z.ZodObject<{
-        employeeId: z.ZodString;
-        employeeName: z.ZodOptional<z.ZodString>;
-        status: z.ZodOptional<z.ZodEnum<{
-            ready: "ready";
-            missing_data: "missing_data";
-            blocked: "blocked";
+    employees: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        name: z.ZodString;
+        status: z.ZodEnum<{
+            active: "active";
+            onLeave: "onLeave";
+        }>;
+        hasPayrollProfile: z.ZodBoolean;
+        ready: z.ZodBoolean;
+        missingFields: z.ZodArray<z.ZodEnum<{
+            iban: "iban";
+            nss: "nss";
+            irpfPct: "irpfPct";
+            salaryGrossAnnual: "salaryGrossAnnual";
+            formaPago: "formaPago";
         }>>;
-        missingFields: z.ZodOptional<z.ZodArray<z.ZodString>>;
-    }, z.core.$loose>>>;
-    generatedAt: z.ZodOptional<z.ZodString>;
-}, z.core.$loose>;
-/** Onboarding workspace state — backend `/v1/onboarding/status`. */
-export declare const onboardingStatusOutput: z.ZodObject<{
-    workspaceId: z.ZodOptional<z.ZodString>;
-    persona: z.ZodOptional<z.ZodEnum<{
-        autonomo: "autonomo";
-        empresa: "empresa";
-        agencia: "agencia";
-        gestoria: "gestoria";
-    }>>;
-    completedSteps: z.ZodOptional<z.ZodArray<z.ZodString>>;
-    pendingSteps: z.ZodOptional<z.ZodArray<z.ZodString>>;
-    percentComplete: z.ZodOptional<z.ZodNumber>;
-    startedAt: z.ZodOptional<z.ZodString>;
-    completedAt: z.ZodOptional<z.ZodString>;
-}, z.core.$loose>;
-/** Onboarding persona update result. */
-export declare const onboardingPersonaResultOutput: z.ZodObject<{
-    workspaceId: z.ZodOptional<z.ZodString>;
-    persona: z.ZodEnum<{
-        autonomo: "autonomo";
-        empresa: "empresa";
-        agencia: "agencia";
-        gestoria: "gestoria";
-    }>;
-    updatedAt: z.ZodOptional<z.ZodString>;
+        reviewedForMonth: z.ZodNullable<z.ZodString>;
+        reviewedThisMonth: z.ZodBoolean;
+        reviewedAt: z.ZodNullable<z.ZodString>;
+    }, z.core.$strip>>;
+    summary: z.ZodObject<{
+        total: z.ZodNumber;
+        ready: z.ZodNumber;
+        notReady: z.ZodNumber;
+        reviewedThisMonth: z.ZodNumber;
+    }, z.core.$strip>;
+    data: z.ZodOptional<z.ZodNever>;
+    meta: z.ZodOptional<z.ZodNever>;
+    totalEmployees: z.ZodOptional<z.ZodNever>;
+    readyEmployees: z.ZodOptional<z.ZodNever>;
+    missingEmployees: z.ZodOptional<z.ZodNever>;
+    generatedAt: z.ZodOptional<z.ZodNever>;
 }, z.core.$loose>;
-/** Permissions matrix — backend `/v1/permissions/matrix`. */
+/**
+ * Documented RBAC-model snapshot — backend `/v1/permissions/matrix`.
+ * This is not an exhaustive report of runtime authorization or Firestore rules.
+ */
 export declare const permissionsMatrixOutput: z.ZodObject<{
-    roles: z.ZodOptional<z.ZodArray<z.ZodObject<{
-        role: z.ZodString;
-        permissions: z.ZodArray<z.ZodString>;
-    }, z.core.$loose>>>;
-    resources: z.ZodOptional<z.ZodArray<z.ZodString>>;
-    generatedAt: z.ZodOptional<z.ZodString>;
+    roles: z.ZodArray<z.ZodEnum<{
+        owner: "owner";
+        admin: "admin";
+        accountant: "accountant";
+        viewer: "viewer";
+        manager: "manager";
+        sales: "sales";
+        employee: "employee";
+    }>>;
+    resources: z.ZodArray<z.ZodEnum<{
+        invoices: "invoices";
+        expenses: "expenses";
+        clients: "clients";
+        products: "products";
+        banking: "banking";
+        quotes: "quotes";
+        payroll: "payroll";
+        workspace: "workspace";
+        accounting: "accounting";
+        people: "people";
+        integrations: "integrations";
+        settings: "settings";
+        audit_log: "audit_log";
+        billing: "billing";
+    }>>;
+    actions: z.ZodArray<z.ZodEnum<{
+        create: "create";
+        update: "update";
+        delete: "delete";
+        read: "read";
+        bulk_delete: "bulk_delete";
+        export: "export";
+    }>>;
+    legacyAliases: z.ZodRecord<z.ZodString, z.ZodEnum<{
+        owner: "owner";
+        admin: "admin";
+        accountant: "accountant";
+        viewer: "viewer";
+        manager: "manager";
+        sales: "sales";
+        employee: "employee";
+    }>>;
+    matrix: z.ZodObject<{
+        owner: z.ZodObject<{
+            workspace: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                create: "create";
+                update: "update";
+                delete: "delete";
+                read: "read";
+                bulk_delete: "bulk_delete";
+                export: "export";
+            }>>>;
+            invoices: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                create: "create";
+                update: "update";
+                delete: "delete";
+                read: "read";
+                bulk_delete: "bulk_delete";
+                export: "export";
+            }>>>;
+            quotes: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                create: "create";
+                update: "update";
+                delete: "delete";
+                read: "read";
+                bulk_delete: "bulk_delete";
+                export: "export";
+            }>>>;
+            expenses: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                create: "create";
+                update: "update";
+                delete: "delete";
+                read: "read";
+                bulk_delete: "bulk_delete";
+                export: "export";
+            }>>>;
+            clients: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                create: "create";
+                update: "update";
+                delete: "delete";
+                read: "read";
+                bulk_delete: "bulk_delete";
+                export: "export";
+            }>>>;
+            products: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                create: "create";
+                update: "update";
+                delete: "delete";
+                read: "read";
+                bulk_delete: "bulk_delete";
+                export: "export";
+            }>>>;
+            accounting: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                create: "create";
+                update: "update";
+                delete: "delete";
+                read: "read";
+                bulk_delete: "bulk_delete";
+                export: "export";
+            }>>>;
+            people: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                create: "create";
+                update: "update";
+                delete: "delete";
+                read: "read";
+                bulk_delete: "bulk_delete";
+                export: "export";
+            }>>>;
+            payroll: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                create: "create";
+                update: "update";
+                delete: "delete";
+                read: "read";
+                bulk_delete: "bulk_delete";
+                export: "export";
+            }>>>;
+            integrations: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                create: "create";
+                update: "update";
+                delete: "delete";
+                read: "read";
+                bulk_delete: "bulk_delete";
+                export: "export";
+            }>>>;
+            banking: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                create: "create";
+                update: "update";
+                delete: "delete";
+                read: "read";
+                bulk_delete: "bulk_delete";
+                export: "export";
+            }>>>;
+            settings: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                create: "create";
+                update: "update";
+                delete: "delete";
+                read: "read";
+                bulk_delete: "bulk_delete";
+                export: "export";
+            }>>>;
+            audit_log: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                create: "create";
+                update: "update";
+                delete: "delete";
+                read: "read";
+                bulk_delete: "bulk_delete";
+                export: "export";
+            }>>>;
+            billing: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                create: "create";
+                update: "update";
+                delete: "delete";
+                read: "read";
+                bulk_delete: "bulk_delete";
+                export: "export";
+            }>>>;
+        }, z.core.$strict>;
+        admin: z.ZodObject<{
+            workspace: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                create: "create";
+                update: "update";
+                delete: "delete";
+                read: "read";
+                bulk_delete: "bulk_delete";
+                export: "export";
+            }>>>;
+            invoices: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                create: "create";
+                update: "update";
+                delete: "delete";
+                read: "read";
+                bulk_delete: "bulk_delete";
+                export: "export";
+            }>>>;
+            quotes: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                create: "create";
+                update: "update";
+                delete: "delete";
+                read: "read";
+                bulk_delete: "bulk_delete";
+                export: "export";
+            }>>>;
+            expenses: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                create: "create";
+                update: "update";
+                delete: "delete";
+                read: "read";
+                bulk_delete: "bulk_delete";
+                export: "export";
+            }>>>;
+            clients: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                create: "create";
+                update: "update";
+                delete: "delete";
+                read: "read";
+                bulk_delete: "bulk_delete";
+                export: "export";
+            }>>>;
+            products: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                create: "create";
+                update: "update";
+                delete: "delete";
+                read: "read";
+                bulk_delete: "bulk_delete";
+                export: "export";
+            }>>>;
+            accounting: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                create: "create";
+                update: "update";
+                delete: "delete";
+                read: "read";
+                bulk_delete: "bulk_delete";
+                export: "export";
+            }>>>;
+            people: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                create: "create";
+                update: "update";
+                delete: "delete";
+                read: "read";
+                bulk_delete: "bulk_delete";
+                export: "export";
+            }>>>;
+            payroll: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                create: "create";
+                update: "update";
+                delete: "delete";
+                read: "read";
+                bulk_delete: "bulk_delete";
+                export: "export";
+            }>>>;
+            integrations: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                create: "create";
+                update: "update";
+                delete: "delete";
+                read: "read";
+                bulk_delete: "bulk_delete";
+                export: "export";
+            }>>>;
+            banking: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                create: "create";
+                update: "update";
+                delete: "delete";
+                read: "read";
+                bulk_delete: "bulk_delete";
+                export: "export";
+            }>>>;
+            settings: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                create: "create";
+                update: "update";
+                delete: "delete";
+                read: "read";
+                bulk_delete: "bulk_delete";
+                export: "export";
+            }>>>;
+            audit_log: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                create: "create";
+                update: "update";
+                delete: "delete";
+                read: "read";
+                bulk_delete: "bulk_delete";
+                export: "export";
+            }>>>;
+            billing: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                create: "create";
+                update: "update";
+                delete: "delete";
+                read: "read";
+                bulk_delete: "bulk_delete";
+                export: "export";
+            }>>>;
+        }, z.core.$strict>;
+        manager: z.ZodObject<{
+            workspace: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                create: "create";
+                update: "update";
+                delete: "delete";
+                read: "read";
+                bulk_delete: "bulk_delete";
+                export: "export";
+            }>>>;
+            invoices: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                create: "create";
+                update: "update";
+                delete: "delete";
+                read: "read";
+                bulk_delete: "bulk_delete";
+                export: "export";
+            }>>>;
+            quotes: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                create: "create";
+                update: "update";
+                delete: "delete";
+                read: "read";
+                bulk_delete: "bulk_delete";
+                export: "export";
+            }>>>;
+            expenses: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                create: "create";
+                update: "update";
+                delete: "delete";
+                read: "read";
+                bulk_delete: "bulk_delete";
+                export: "export";
+            }>>>;
+            clients: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                create: "create";
+                update: "update";
+                delete: "delete";
+                read: "read";
+                bulk_delete: "bulk_delete";
+                export: "export";
+            }>>>;
+            products: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                create: "create";
+                update: "update";
+                delete: "delete";
+                read: "read";
+                bulk_delete: "bulk_delete";
+                export: "export";
+            }>>>;
+            accounting: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                create: "create";
+                update: "update";
+                delete: "delete";
+                read: "read";
+                bulk_delete: "bulk_delete";
+                export: "export";
+            }>>>;
+            people: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                create: "create";
+                update: "update";
+                delete: "delete";
+                read: "read";
+                bulk_delete: "bulk_delete";
+                export: "export";
+            }>>>;
+            payroll: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                create: "create";
+                update: "update";
+                delete: "delete";
+                read: "read";
+                bulk_delete: "bulk_delete";
+                export: "export";
+            }>>>;
+            integrations: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                create: "create";
+                update: "update";
+                delete: "delete";
+                read: "read";
+                bulk_delete: "bulk_delete";
+                export: "export";
+            }>>>;
+            banking: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                create: "create";
+                update: "update";
+                delete: "delete";
+                read: "read";
+                bulk_delete: "bulk_delete";
+                export: "export";
+            }>>>;
+            settings: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                create: "create";
+                update: "update";
+                delete: "delete";
+                read: "read";
+                bulk_delete: "bulk_delete";
+                export: "export";
+            }>>>;
+            audit_log: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                create: "create";
+                update: "update";
+                delete: "delete";
+                read: "read";
+                bulk_delete: "bulk_delete";
+                export: "export";
+            }>>>;
+            billing: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                create: "create";
+                update: "update";
+                delete: "delete";
+                read: "read";
+                bulk_delete: "bulk_delete";
+                export: "export";
+            }>>>;
+        }, z.core.$strict>;
+        sales: z.ZodObject<{
+            workspace: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                create: "create";
+                update: "update";
+                delete: "delete";
+                read: "read";
+                bulk_delete: "bulk_delete";
+                export: "export";
+            }>>>;
+            invoices: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                create: "create";
+                update: "update";
+                delete: "delete";
+                read: "read";
+                bulk_delete: "bulk_delete";
+                export: "export";
+            }>>>;
+            quotes: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                create: "create";
+                update: "update";
+                delete: "delete";
+                read: "read";
+                bulk_delete: "bulk_delete";
+                export: "export";
+            }>>>;
+            expenses: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                create: "create";
+                update: "update";
+                delete: "delete";
+                read: "read";
+                bulk_delete: "bulk_delete";
+                export: "export";
+            }>>>;
+            clients: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                create: "create";
+                update: "update";
+                delete: "delete";
+                read: "read";
+                bulk_delete: "bulk_delete";
+                export: "export";
+            }>>>;
+            products: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                create: "create";
+                update: "update";
+                delete: "delete";
+                read: "read";
+                bulk_delete: "bulk_delete";
+                export: "export";
+            }>>>;
+            accounting: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                create: "create";
+                update: "update";
+                delete: "delete";
+                read: "read";
+                bulk_delete: "bulk_delete";
+                export: "export";
+            }>>>;
+            people: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                create: "create";
+                update: "update";
+                delete: "delete";
+                read: "read";
+                bulk_delete: "bulk_delete";
+                export: "export";
+            }>>>;
+            payroll: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                create: "create";
+                update: "update";
+                delete: "delete";
+                read: "read";
+                bulk_delete: "bulk_delete";
+                export: "export";
+            }>>>;
+            integrations: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                create: "create";
+                update: "update";
+                delete: "delete";
+                read: "read";
+                bulk_delete: "bulk_delete";
+                export: "export";
+            }>>>;
+            banking: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                create: "create";
+                update: "update";
+                delete: "delete";
+                read: "read";
+                bulk_delete: "bulk_delete";
+                export: "export";
+            }>>>;
+            settings: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                create: "create";
+                update: "update";
+                delete: "delete";
+                read: "read";
+                bulk_delete: "bulk_delete";
+                export: "export";
+            }>>>;
+            audit_log: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                create: "create";
+                update: "update";
+                delete: "delete";
+                read: "read";
+                bulk_delete: "bulk_delete";
+                export: "export";
+            }>>>;
+            billing: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                create: "create";
+                update: "update";
+                delete: "delete";
+                read: "read";
+                bulk_delete: "bulk_delete";
+                export: "export";
+            }>>>;
+        }, z.core.$strict>;
+        accountant: z.ZodObject<{
+            workspace: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                create: "create";
+                update: "update";
+                delete: "delete";
+                read: "read";
+                bulk_delete: "bulk_delete";
+                export: "export";
+            }>>>;
+            invoices: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                create: "create";
+                update: "update";
+                delete: "delete";
+                read: "read";
+                bulk_delete: "bulk_delete";
+                export: "export";
+            }>>>;
+            quotes: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                create: "create";
+                update: "update";
+                delete: "delete";
+                read: "read";
+                bulk_delete: "bulk_delete";
+                export: "export";
+            }>>>;
+            expenses: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                create: "create";
+                update: "update";
+                delete: "delete";
+                read: "read";
+                bulk_delete: "bulk_delete";
+                export: "export";
+            }>>>;
+            clients: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                create: "create";
+                update: "update";
+                delete: "delete";
+                read: "read";
+                bulk_delete: "bulk_delete";
+                export: "export";
+            }>>>;
+            products: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                create: "create";
+                update: "update";
+                delete: "delete";
+                read: "read";
+                bulk_delete: "bulk_delete";
+                export: "export";
+            }>>>;
+            accounting: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                create: "create";
+                update: "update";
+                delete: "delete";
+                read: "read";
+                bulk_delete: "bulk_delete";
+                export: "export";
+            }>>>;
+            people: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                create: "create";
+                update: "update";
+                delete: "delete";
+                read: "read";
+                bulk_delete: "bulk_delete";
+                export: "export";
+            }>>>;
+            payroll: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                create: "create";
+                update: "update";
+                delete: "delete";
+                read: "read";
+                bulk_delete: "bulk_delete";
+                export: "export";
+            }>>>;
+            integrations: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                create: "create";
+                update: "update";
+                delete: "delete";
+                read: "read";
+                bulk_delete: "bulk_delete";
+                export: "export";
+            }>>>;
+            banking: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                create: "create";
+                update: "update";
+                delete: "delete";
+                read: "read";
+                bulk_delete: "bulk_delete";
+                export: "export";
+            }>>>;
+            settings: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                create: "create";
+                update: "update";
+                delete: "delete";
+                read: "read";
+                bulk_delete: "bulk_delete";
+                export: "export";
+            }>>>;
+            audit_log: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                create: "create";
+                update: "update";
+                delete: "delete";
+                read: "read";
+                bulk_delete: "bulk_delete";
+                export: "export";
+            }>>>;
+            billing: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                create: "create";
+                update: "update";
+                delete: "delete";
+                read: "read";
+                bulk_delete: "bulk_delete";
+                export: "export";
+            }>>>;
+        }, z.core.$strict>;
+        employee: z.ZodObject<{
+            workspace: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                create: "create";
+                update: "update";
+                delete: "delete";
+                read: "read";
+                bulk_delete: "bulk_delete";
+                export: "export";
+            }>>>;
+            invoices: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                create: "create";
+                update: "update";
+                delete: "delete";
+                read: "read";
+                bulk_delete: "bulk_delete";
+                export: "export";
+            }>>>;
+            quotes: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                create: "create";
+                update: "update";
+                delete: "delete";
+                read: "read";
+                bulk_delete: "bulk_delete";
+                export: "export";
+            }>>>;
+            expenses: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                create: "create";
+                update: "update";
+                delete: "delete";
+                read: "read";
+                bulk_delete: "bulk_delete";
+                export: "export";
+            }>>>;
+            clients: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                create: "create";
+                update: "update";
+                delete: "delete";
+                read: "read";
+                bulk_delete: "bulk_delete";
+                export: "export";
+            }>>>;
+            products: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                create: "create";
+                update: "update";
+                delete: "delete";
+                read: "read";
+                bulk_delete: "bulk_delete";
+                export: "export";
+            }>>>;
+            accounting: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                create: "create";
+                update: "update";
+                delete: "delete";
+                read: "read";
+                bulk_delete: "bulk_delete";
+                export: "export";
+            }>>>;
+            people: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                create: "create";
+                update: "update";
+                delete: "delete";
+                read: "read";
+                bulk_delete: "bulk_delete";
+                export: "export";
+            }>>>;
+            payroll: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                create: "create";
+                update: "update";
+                delete: "delete";
+                read: "read";
+                bulk_delete: "bulk_delete";
+                export: "export";
+            }>>>;
+            integrations: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                create: "create";
+                update: "update";
+                delete: "delete";
+                read: "read";
+                bulk_delete: "bulk_delete";
+                export: "export";
+            }>>>;
+            banking: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                create: "create";
+                update: "update";
+                delete: "delete";
+                read: "read";
+                bulk_delete: "bulk_delete";
+                export: "export";
+            }>>>;
+            settings: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                create: "create";
+                update: "update";
+                delete: "delete";
+                read: "read";
+                bulk_delete: "bulk_delete";
+                export: "export";
+            }>>>;
+            audit_log: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                create: "create";
+                update: "update";
+                delete: "delete";
+                read: "read";
+                bulk_delete: "bulk_delete";
+                export: "export";
+            }>>>;
+            billing: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                create: "create";
+                update: "update";
+                delete: "delete";
+                read: "read";
+                bulk_delete: "bulk_delete";
+                export: "export";
+            }>>>;
+        }, z.core.$strict>;
+        viewer: z.ZodObject<{
+            workspace: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                create: "create";
+                update: "update";
+                delete: "delete";
+                read: "read";
+                bulk_delete: "bulk_delete";
+                export: "export";
+            }>>>;
+            invoices: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                create: "create";
+                update: "update";
+                delete: "delete";
+                read: "read";
+                bulk_delete: "bulk_delete";
+                export: "export";
+            }>>>;
+            quotes: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                create: "create";
+                update: "update";
+                delete: "delete";
+                read: "read";
+                bulk_delete: "bulk_delete";
+                export: "export";
+            }>>>;
+            expenses: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                create: "create";
+                update: "update";
+                delete: "delete";
+                read: "read";
+                bulk_delete: "bulk_delete";
+                export: "export";
+            }>>>;
+            clients: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                create: "create";
+                update: "update";
+                delete: "delete";
+                read: "read";
+                bulk_delete: "bulk_delete";
+                export: "export";
+            }>>>;
+            products: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                create: "create";
+                update: "update";
+                delete: "delete";
+                read: "read";
+                bulk_delete: "bulk_delete";
+                export: "export";
+            }>>>;
+            accounting: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                create: "create";
+                update: "update";
+                delete: "delete";
+                read: "read";
+                bulk_delete: "bulk_delete";
+                export: "export";
+            }>>>;
+            people: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                create: "create";
+                update: "update";
+                delete: "delete";
+                read: "read";
+                bulk_delete: "bulk_delete";
+                export: "export";
+            }>>>;
+            payroll: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                create: "create";
+                update: "update";
+                delete: "delete";
+                read: "read";
+                bulk_delete: "bulk_delete";
+                export: "export";
+            }>>>;
+            integrations: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                create: "create";
+                update: "update";
+                delete: "delete";
+                read: "read";
+                bulk_delete: "bulk_delete";
+                export: "export";
+            }>>>;
+            banking: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                create: "create";
+                update: "update";
+                delete: "delete";
+                read: "read";
+                bulk_delete: "bulk_delete";
+                export: "export";
+            }>>>;
+            settings: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                create: "create";
+                update: "update";
+                delete: "delete";
+                read: "read";
+                bulk_delete: "bulk_delete";
+                export: "export";
+            }>>>;
+            audit_log: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                create: "create";
+                update: "update";
+                delete: "delete";
+                read: "read";
+                bulk_delete: "bulk_delete";
+                export: "export";
+            }>>>;
+            billing: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                create: "create";
+                update: "update";
+                delete: "delete";
+                read: "read";
+                bulk_delete: "bulk_delete";
+                export: "export";
+            }>>>;
+        }, z.core.$strict>;
+    }, z.core.$strict>;
+    source: z.ZodString;
 }, z.core.$loose>;
-/** Caller's own permissions — backend `/v1/permissions/me`. */
+/**
+ * Caller's RBAC-model row and API-key scope state — backend `/v1/permissions/me`.
+ * Known denials are intentionally non-exhaustive; a backend 403 is authoritative.
+ */
 export declare const permissionsMeOutput: z.ZodObject<{
-    userId: z.ZodOptional<z.ZodString>;
-    role: z.ZodOptional<z.ZodString>;
-    permissions: z.ZodOptional<z.ZodArray<z.ZodString>>;
-    workspaceId: z.ZodOptional<z.ZodString>;
+    role: z.ZodEnum<{
+        owner: "owner";
+        admin: "admin";
+        accountant: "accountant";
+        viewer: "viewer";
+        manager: "manager";
+        sales: "sales";
+        employee: "employee";
+    }>;
+    isOwner: z.ZodBoolean;
+    resources: z.ZodObject<{
+        workspace: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+            create: "create";
+            update: "update";
+            delete: "delete";
+            read: "read";
+            bulk_delete: "bulk_delete";
+            export: "export";
+        }>>>;
+        invoices: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+            create: "create";
+            update: "update";
+            delete: "delete";
+            read: "read";
+            bulk_delete: "bulk_delete";
+            export: "export";
+        }>>>;
+        quotes: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+            create: "create";
+            update: "update";
+            delete: "delete";
+            read: "read";
+            bulk_delete: "bulk_delete";
+            export: "export";
+        }>>>;
+        expenses: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+            create: "create";
+            update: "update";
+            delete: "delete";
+            read: "read";
+            bulk_delete: "bulk_delete";
+            export: "export";
+        }>>>;
+        clients: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+            create: "create";
+            update: "update";
+            delete: "delete";
+            read: "read";
+            bulk_delete: "bulk_delete";
+            export: "export";
+        }>>>;
+        products: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+            create: "create";
+            update: "update";
+            delete: "delete";
+            read: "read";
+            bulk_delete: "bulk_delete";
+            export: "export";
+        }>>>;
+        accounting: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+            create: "create";
+            update: "update";
+            delete: "delete";
+            read: "read";
+            bulk_delete: "bulk_delete";
+            export: "export";
+        }>>>;
+        people: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+            create: "create";
+            update: "update";
+            delete: "delete";
+            read: "read";
+            bulk_delete: "bulk_delete";
+            export: "export";
+        }>>>;
+        payroll: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+            create: "create";
+            update: "update";
+            delete: "delete";
+            read: "read";
+            bulk_delete: "bulk_delete";
+            export: "export";
+        }>>>;
+        integrations: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+            create: "create";
+            update: "update";
+            delete: "delete";
+            read: "read";
+            bulk_delete: "bulk_delete";
+            export: "export";
+        }>>>;
+        banking: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+            create: "create";
+            update: "update";
+            delete: "delete";
+            read: "read";
+            bulk_delete: "bulk_delete";
+            export: "export";
+        }>>>;
+        settings: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+            create: "create";
+            update: "update";
+            delete: "delete";
+            read: "read";
+            bulk_delete: "bulk_delete";
+            export: "export";
+        }>>>;
+        audit_log: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+            create: "create";
+            update: "update";
+            delete: "delete";
+            read: "read";
+            bulk_delete: "bulk_delete";
+            export: "export";
+        }>>>;
+        billing: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+            create: "create";
+            update: "update";
+            delete: "delete";
+            read: "read";
+            bulk_delete: "bulk_delete";
+            export: "export";
+        }>>>;
+    }, z.core.$strict>;
+    scopes: z.ZodArray<z.ZodString>;
+    legacyFieldSemantics: z.ZodObject<{
+        resources: z.ZodLiteral<"rbacResources">;
+        scopes: z.ZodLiteral<"rbacCapabilities">;
+    }, z.core.$strip>;
+    rbac: z.ZodObject<{
+        role: z.ZodEnum<{
+            owner: "owner";
+            admin: "admin";
+            accountant: "accountant";
+            viewer: "viewer";
+            manager: "manager";
+            sales: "sales";
+            employee: "employee";
+        }>;
+        isOwner: z.ZodBoolean;
+        resources: z.ZodObject<{
+            workspace: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                create: "create";
+                update: "update";
+                delete: "delete";
+                read: "read";
+                bulk_delete: "bulk_delete";
+                export: "export";
+            }>>>;
+            invoices: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                create: "create";
+                update: "update";
+                delete: "delete";
+                read: "read";
+                bulk_delete: "bulk_delete";
+                export: "export";
+            }>>>;
+            quotes: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                create: "create";
+                update: "update";
+                delete: "delete";
+                read: "read";
+                bulk_delete: "bulk_delete";
+                export: "export";
+            }>>>;
+            expenses: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                create: "create";
+                update: "update";
+                delete: "delete";
+                read: "read";
+                bulk_delete: "bulk_delete";
+                export: "export";
+            }>>>;
+            clients: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                create: "create";
+                update: "update";
+                delete: "delete";
+                read: "read";
+                bulk_delete: "bulk_delete";
+                export: "export";
+            }>>>;
+            products: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                create: "create";
+                update: "update";
+                delete: "delete";
+                read: "read";
+                bulk_delete: "bulk_delete";
+                export: "export";
+            }>>>;
+            accounting: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                create: "create";
+                update: "update";
+                delete: "delete";
+                read: "read";
+                bulk_delete: "bulk_delete";
+                export: "export";
+            }>>>;
+            people: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                create: "create";
+                update: "update";
+                delete: "delete";
+                read: "read";
+                bulk_delete: "bulk_delete";
+                export: "export";
+            }>>>;
+            payroll: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                create: "create";
+                update: "update";
+                delete: "delete";
+                read: "read";
+                bulk_delete: "bulk_delete";
+                export: "export";
+            }>>>;
+            integrations: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                create: "create";
+                update: "update";
+                delete: "delete";
+                read: "read";
+                bulk_delete: "bulk_delete";
+                export: "export";
+            }>>>;
+            banking: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                create: "create";
+                update: "update";
+                delete: "delete";
+                read: "read";
+                bulk_delete: "bulk_delete";
+                export: "export";
+            }>>>;
+            settings: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                create: "create";
+                update: "update";
+                delete: "delete";
+                read: "read";
+                bulk_delete: "bulk_delete";
+                export: "export";
+            }>>>;
+            audit_log: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                create: "create";
+                update: "update";
+                delete: "delete";
+                read: "read";
+                bulk_delete: "bulk_delete";
+                export: "export";
+            }>>>;
+            billing: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                create: "create";
+                update: "update";
+                delete: "delete";
+                read: "read";
+                bulk_delete: "bulk_delete";
+                export: "export";
+            }>>>;
+        }, z.core.$strict>;
+        capabilities: z.ZodArray<z.ZodString>;
+    }, z.core.$strip>;
+    apiKeyScopes: z.ZodArray<z.ZodString>;
+    apiKeyUnrestricted: z.ZodBoolean;
+    denied: z.ZodObject<{
+        einvoice: z.ZodBoolean;
+    }, z.core.$strip>;
+    deniedSemantics: z.ZodString;
+    notIncluded: z.ZodArray<z.ZodEnum<{
+        featureFlags: "featureFlags";
+        deployedEndpoints: "deployedEndpoints";
+    }>>;
 }, z.core.$loose>;
-/** Accounting period state — backend `/v1/periods/*`. */
+/** Legacy demo/write result retained for period_close and period_reopen only. */
 export declare const periodStatusOutput: z.ZodObject<{
     id: z.ZodString;
     type: z.ZodOptional<z.ZodEnum<{
@@ -850,8 +2152,8 @@ export declare const periodStatusOutput: z.ZodObject<{
     status: z.ZodOptional<z.ZodEnum<{
         open: "open";
         closed: "closed";
-        reopened: "reopened";
         closing: "closing";
+        reopened: "reopened";
     }>>;
     startDate: z.ZodOptional<z.ZodString>;
     endDate: z.ZodOptional<z.ZodString>;
@@ -862,6 +2164,38 @@ export declare const periodStatusOutput: z.ZodObject<{
     createdAt: z.ZodOptional<z.ZodString>;
     updatedAt: z.ZodOptional<z.ZodString>;
 }, z.core.$loose>;
+/** Exact ERP DTO for `GET /v1/periods/current` and `GET /v1/periods/YYYY`. */
+export declare const currentPeriodOutput: z.ZodObject<{
+    fiscalYear: z.ZodString;
+    fiscalYearStart: z.ZodString;
+    status: z.ZodEnum<{
+        open: "open";
+        closed: "closed";
+    }>;
+    dateRange: z.ZodObject<{
+        from: z.ZodString;
+        to: z.ZodString;
+    }, z.core.$strip>;
+    closing: z.ZodNullable<z.ZodObject<{
+        status: z.ZodString;
+        closedAt: z.ZodNullable<z.ZodString>;
+        netIncome: z.ZodNullable<z.ZodNumber>;
+        totalIncome: z.ZodNullable<z.ZodNumber>;
+        totalExpenses: z.ZodNullable<z.ZodNumber>;
+        journalEntries: z.ZodNullable<z.ZodNumber>;
+    }, z.core.$strip>>;
+    data: z.ZodOptional<z.ZodNever>;
+    meta: z.ZodOptional<z.ZodNever>;
+    id: z.ZodOptional<z.ZodNever>;
+    type: z.ZodOptional<z.ZodNever>;
+    startDate: z.ZodOptional<z.ZodNever>;
+    endDate: z.ZodOptional<z.ZodNever>;
+    closedAt: z.ZodOptional<z.ZodNever>;
+    closedBy: z.ZodOptional<z.ZodNever>;
+    reopenedAt: z.ZodOptional<z.ZodNever>;
+    reopenReason: z.ZodOptional<z.ZodNever>;
+    generatedAt: z.ZodOptional<z.ZodNever>;
+}, z.core.$loose>;
 /** Return type of a tool handler — index signature required by MCP SDK */
 interface ToolResult {
     [x: string]: unknown;
@@ -869,6 +2203,8 @@ interface ToolResult {
     structuredContent?: Record<string, unknown>;
     isError?: boolean;
 }
+/** Mark a local confirmation refusal without parsing or exposing provider text. */
+export declare function confirmationRequiredError(message: string): ToolResult;
 /**
  * Wraps a tool handler to automatically log execution time, success/failure,
  * and record metrics. Catches errors and routes them through handleToolError.