@frihet/mcp-server 1.16.6 → 2.0.0

package/dist/tools/team.js

@@ -12,27 +12,27 @@
  * Backend: /v1/team/* endpoints live as of Wave 4-A (Frihet-ERP functions/src/publicApi.ts).
  */
 import { z } from "zod/v4";
-import { withToolLogging, formatPaginatedResponse, formatRecord, listContent, mutateContent, READ_ONLY_ANNOTATIONS, CREATE_ANNOTATIONS, UPDATE_ANNOTATIONS, DELETE_ANNOTATIONS, paginatedOutput, actionResultOutput, teamMemberItemOutput, } from "./shared.js";
+import { withToolLogging, confirmationRequiredError, formatPaginatedResponse, formatRecord, listContent, mutateContent, READ_ONLY_ANNOTATIONS, CREATE_ANNOTATIONS, UPDATE_ANNOTATIONS, DELETE_ANNOTATIONS, paginatedOutput, actionResultOutput, teamMemberItemOutput, } from "./shared.js";
 export function registerTeamTools(server, client) {
     // -- list_team_members --
     server.registerTool("list_team_members", {
         title: "List Team Members",
-        description: "List all members in the workspace. " +
-            "Returns member ID, name, email, role, and invite status (pending/active). " +
-            "Useful for access management and auditing who has access to the account. " +
-            "/ Lista todos los miembros del espacio de trabajo. " +
-            "Devuelve ID, nombre, email, rol y estado de invitacion (pendiente/activo). " +
-            "Util para gestion de accesos y auditoria de quien tiene acceso a la cuenta.",
+        description: "List active workspace team members and pending invitations. The workspace owner is NOT a member row and is excluded. " +
+            "Each row carries member ID, name, email, role, and status (active/pending/expired/invalid; role is null on invalid invitations). " +
+            "Useful for reviewing team access and outstanding invitations. " +
+            "/ Lista miembros activos del equipo e invitaciones pendientes. El propietario del espacio NO aparece como miembro y queda excluido. " +
+            "Cada fila lleva ID, nombre, email, rol y estado (active/pending/expired/invalid; rol null en invitaciones invalidas). " +
+            "Util para revisar el acceso del equipo y las invitaciones pendientes.",
         annotations: READ_ONLY_ANNOTATIONS,
         inputSchema: {
             role: z
-                .enum(["owner", "admin", "member", "viewer"])
+                .enum(["owner", "admin", "editor", "accountant", "viewer"])
                 .optional()
                 .describe("Filter by role / Filtrar por rol"),
             status: z
-                .enum(["active", "pending"])
+                .enum(["active", "pending", "expired", "invalid"])
                 .optional()
-                .describe("Filter by invite status / Filtrar por estado de invitacion"),
+                .describe("Filter by status / Filtrar por estado"),
             limit: z.number().int().min(1).max(100).optional().describe("Max results (1-100) / Resultados maximos"),
             offset: z.number().int().min(0).optional().describe("Offset / Desplazamiento"),
         },
@@ -49,16 +49,18 @@ export function registerTeamTools(server, client) {
         title: "Invite Team Member",
         description: "Invite a new member to the workspace by email address. " +
             "An invitation email is sent — the member must accept before gaining access. " +
-            "Roles: owner (full access), admin (manage account, no billing), member (operational access), viewer (read-only). " +
-            "Example: email='ana@example.com', role='member' " +
+            "Assignable roles: admin, editor, accountant, viewer. Exact access follows the workspace's current role policy. " +
+            "Owner is excluded from invitations and must be transferred via a dedicated flow. " +
+            "Example: email='ana@example.com', role='accountant' " +
             "/ Invita a un nuevo miembro al espacio de trabajo por correo electronico. " +
             "Se envia un email de invitacion — el miembro debe aceptar antes de acceder. " +
-            "Roles: owner (acceso total), admin (gestion sin facturacion), member (acceso operativo), viewer (solo lectura).",
+            "Roles asignables: admin, editor, accountant, viewer. El acceso exacto depende de la politica de roles vigente del espacio. " +
+            "Owner queda excluido de las invitaciones y debe transferirse por un flujo dedicado.",
         annotations: CREATE_ANNOTATIONS,
         inputSchema: {
             email: z.string().email().describe("Email address of the invitee / Email del invitado"),
             role: z
-                .enum(["admin", "member", "viewer"])
+                .enum(["admin", "editor", "accountant", "viewer"])
                 .describe("Role to assign (owner cannot be invited, must be transferred) / Rol a asignar (owner no se puede invitar, debe transferirse)"),
             name: z
                 .string()
@@ -79,15 +81,17 @@ export function registerTeamTools(server, client) {
         description: "Change the role of an existing team member. " +
             "Only workspace admins or owners can change roles. " +
             "Cannot change the owner's role — use a dedicated ownership transfer flow. " +
-            "Example: memberId='mbr_abc123', role='admin' " +
+            "Allowed roles: admin, editor, accountant, viewer. " +
+            "Example: memberId='mbr_abc123', role='accountant' " +
             "/ Cambia el rol de un miembro existente del espacio de trabajo. " +
             "Solo administradores o propietarios pueden cambiar roles. " +
-            "No se puede cambiar el rol del propietario — usa el flujo de transferencia de propiedad.",
+            "No se puede cambiar el rol del propietario — usa el flujo de transferencia de propiedad. " +
+            "Roles permitidos: admin, editor, accountant, viewer.",
         annotations: UPDATE_ANNOTATIONS,
         inputSchema: {
             memberId: z.string().describe("Team member ID / ID del miembro del equipo"),
             role: z
-                .enum(["admin", "member", "viewer"])
+                .enum(["admin", "editor", "accountant", "viewer"])
                 .describe("New role to assign / Nuevo rol a asignar"),
         },
         outputSchema: actionResultOutput,
@@ -119,17 +123,9 @@ export function registerTeamTools(server, client) {
         outputSchema: actionResultOutput,
     }, async ({ memberId, confirm }) => withToolLogging("remove_team_member", async () => {
         if (!confirm) {
-            return {
-                content: [
-                    {
-                        type: "text",
-                        text: "Error: confirm=true is required to remove a team member. " +
-                            "The member will immediately lose access to the workspace. Set confirm=true to proceed. / " +
-                            "Se requiere confirm=true para eliminar un miembro del equipo.",
-                    },
-                ],
-                isError: true,
-            };
+            return confirmationRequiredError("Error: confirm=true is required to remove a team member. " +
+                "The member will immediately lose access to the workspace. Set confirm=true to proceed. / " +
+                "Se requiere confirm=true para eliminar un miembro del equipo.");
         }
         await client.removeTeamMember(memberId);
         return {

package/dist/tools/time.js

@@ -14,7 +14,7 @@
  * Backend: /v1/time/* endpoints live as of Wave 4-A (Frihet-ERP functions/src/publicApi.ts).
  */
 import { z } from "zod/v4";
-import { withToolLogging, formatPaginatedResponse, formatRecord, listContent, getContent, mutateContent, READ_ONLY_ANNOTATIONS, CREATE_ANNOTATIONS, UPDATE_ANNOTATIONS, paginatedOutput, deleteResultOutput, timeEntryItemOutput, timeSummaryOutput, } from "./shared.js";
+import { withToolLogging, confirmationRequiredError, formatPaginatedResponse, formatRecord, listContent, getContent, mutateContent, READ_ONLY_ANNOTATIONS, CREATE_ANNOTATIONS, UPDATE_ANNOTATIONS, paginatedOutput, deleteResultOutput, timeEntryItemOutput, timeSummaryOutput, } from "./shared.js";
 export function registerTimeTools(server, client) {
     // -- list_time_entries --
     server.registerTool("list_time_entries", {
@@ -132,17 +132,9 @@ export function registerTimeTools(server, client) {
         outputSchema: deleteResultOutput,
     }, async ({ id, confirm }) => withToolLogging("delete_time_entry", async () => {
         if (!confirm) {
-            return {
-                content: [
-                    {
-                        type: "text",
-                        text: "Error: confirm=true is required to delete a time entry. " +
-                            "Deleted entries affect billing reports. Set confirm=true to proceed. / " +
-                            "Se requiere confirm=true para eliminar una entrada de tiempo.",
-                    },
-                ],
-                isError: true,
-            };
+            return confirmationRequiredError("Error: confirm=true is required to delete a time entry. " +
+                "Deleted entries affect billing reports. Set confirm=true to proceed. / " +
+                "Se requiere confirm=true para eliminar una entrada de tiempo.");
         }
         await client.deleteTimeEntry(id);
         return {

package/dist/tools/vendors.js

@@ -13,6 +13,168 @@ const addressSchema = z
 })
     .optional()
     .describe("Vendor address / Direccion del proveedor");
+/**
+ * Splits a concatenated / camelCase / snake_case / kebab-case search query into
+ * space-separated tokens (e.g. "CanariasBlue" -> "Canarias Blue",
+ * "SLCanarias" -> "SL Canarias", "Canarias_Blue" -> "Canarias Blue").
+ */
+function splitCompoundQuery(q) {
+    return q
+        .replace(/([A-Z]+)([A-Z][a-z])/g, "$1 $2")
+        .replace(/([a-z0-9])([A-Z])/g, "$1 $2")
+        .replace(/[_-]+/g, " ")
+        .replace(/\s+/g, " ")
+        .trim();
+}
+const OPTIONAL_VENDOR_STRING_FIELDS = [
+    "email",
+    "phone",
+    "taxId",
+    "createdAt",
+    "updatedAt",
+];
+/**
+ * Normalizes a vendor record returned by the Frihet API so it always satisfies
+ * `vendorItemOutput` without losing ERP-canonical data:
+ *  - Strips `null` on optional string fields (`email`, `phone`, `taxId`,
+ *    `createdAt`, `updatedAt`) so `z.string().optional()` never rejects legacy docs.
+ *  - Backfills `taxId` from legacy `nif` / `cif` / `vatNumber` / `tax_id` when
+ *    `taxId` is absent or null, preserving all original fields.
+ *  - Converts legacy string `address` into `{ street }`.
+ *  - Omits `null` or empty `address`.
+ *  - Maps ERP canonical address keys (`province` -> `state`, `zip` -> `postalCode`,
+ *    `countryCode` -> `country`).
+ */
+function normalizeVendorRecord(vendorRecord) {
+    if (!vendorRecord || typeof vendorRecord !== "object" || Array.isArray(vendorRecord)) {
+        return vendorRecord;
+    }
+    const out = { ...vendorRecord };
+    for (const field of OPTIONAL_VENDOR_STRING_FIELDS) {
+        if (out[field] === null) {
+            delete out[field];
+        }
+    }
+    if (typeof out.taxId !== "string" || !out.taxId.trim()) {
+        for (const alias of ["nif", "cif", "vatNumber", "tax_id"]) {
+            const candidate = out[alias];
+            if (typeof candidate === "string" && candidate.trim()) {
+                out.taxId = candidate.trim();
+                break;
+            }
+        }
+    }
+    const rawAddress = out.address;
+    const rootStreet = typeof out.street === "string" && out.street.trim() ? out.street.trim() : undefined;
+    const rootCity = typeof out.city === "string" && out.city.trim() ? out.city.trim() : undefined;
+    const rootState = typeof out.state === "string" && out.state.trim()
+        ? out.state.trim()
+        : typeof out.province === "string" && out.province.trim()
+            ? out.province.trim()
+            : undefined;
+    const rootPostalCode = typeof out.postalCode === "string" && out.postalCode.trim()
+        ? out.postalCode.trim()
+        : typeof out.zip === "string" && out.zip.trim()
+            ? out.zip.trim()
+            : undefined;
+    const rootCountry = typeof out.country === "string" && out.country.trim()
+        ? out.country.trim()
+        : typeof out.countryCode === "string" && out.countryCode.trim()
+            ? out.countryCode.trim()
+            : undefined;
+    const buildFlatAddress = (streetOverride) => {
+        const built = {};
+        const st = streetOverride ?? rootStreet;
+        if (st !== undefined)
+            built.street = st;
+        if (rootCity !== undefined)
+            built.city = rootCity;
+        if (rootState !== undefined)
+            built.state = rootState;
+        if (rootPostalCode !== undefined)
+            built.postalCode = rootPostalCode;
+        if (rootCountry !== undefined)
+            built.country = rootCountry;
+        return Object.keys(built).length > 0 ? built : undefined;
+    };
+    if (rawAddress === undefined || rawAddress === null) {
+        if (rawAddress === null) {
+            delete out.address;
+        }
+        const flatAddr = buildFlatAddress();
+        if (flatAddr) {
+            out.address = flatAddr;
+        }
+        return out;
+    }
+    if (typeof rawAddress === "string") {
+        const trimmed = rawAddress.trim();
+        const flatAddr = buildFlatAddress(trimmed || undefined);
+        if (!flatAddr) {
+            delete out.address;
+            return out;
+        }
+        out.address = flatAddr;
+        return out;
+    }
+    if (typeof rawAddress === "object" && !Array.isArray(rawAddress)) {
+        const addrObj = rawAddress;
+        const normalizedAddress = {};
+        for (const [k, v] of Object.entries(addrObj)) {
+            if (v !== null && v !== undefined) {
+                normalizedAddress[k] = v;
+            }
+        }
+        const street = typeof addrObj.street === "string" && addrObj.street.trim()
+            ? addrObj.street.trim()
+            : rootStreet;
+        const city = typeof addrObj.city === "string" && addrObj.city.trim()
+            ? addrObj.city.trim()
+            : rootCity;
+        const state = typeof addrObj.state === "string" && addrObj.state.trim()
+            ? addrObj.state.trim()
+            : typeof addrObj.province === "string" && addrObj.province.trim()
+                ? addrObj.province.trim()
+                : rootState;
+        const postalCode = typeof addrObj.postalCode === "string" && addrObj.postalCode.trim()
+            ? addrObj.postalCode.trim()
+            : typeof addrObj.zip === "string" && addrObj.zip.trim()
+                ? addrObj.zip.trim()
+                : rootPostalCode;
+        const country = typeof addrObj.country === "string" && addrObj.country.trim()
+            ? addrObj.country.trim()
+            : typeof addrObj.countryCode === "string" && addrObj.countryCode.trim()
+                ? addrObj.countryCode.trim()
+                : rootCountry;
+        if (street !== undefined)
+            normalizedAddress.street = street;
+        else
+            delete normalizedAddress.street;
+        if (city !== undefined)
+            normalizedAddress.city = city;
+        else
+            delete normalizedAddress.city;
+        if (state !== undefined)
+            normalizedAddress.state = state;
+        else
+            delete normalizedAddress.state;
+        if (postalCode !== undefined)
+            normalizedAddress.postalCode = postalCode;
+        else
+            delete normalizedAddress.postalCode;
+        if (country !== undefined)
+            normalizedAddress.country = country;
+        else
+            delete normalizedAddress.country;
+        if (Object.keys(normalizedAddress).length === 0) {
+            delete out.address;
+            return out;
+        }
+        out.address = normalizedAddress;
+        return out;
+    }
+    return out;
+}
 export function registerVendorTools(server, client) {
     // -- list_vendors --
     server.registerTool("list_vendors", {
@@ -31,10 +193,82 @@ export function registerVendorTools(server, client) {
         },
         outputSchema: paginatedOutput(vendorItemOutput, { projectable: true }),
     }, async ({ q, limit, offset, after, fields }) => withToolLogging("list_vendors", async () => {
-        const result = await client.listVendors({ q, limit, offset, after, fields });
+        const trimmedQ = q?.trim();
+        const trimmedAfter = after?.trim();
+        // Limitation in Frihet-ERP `listResources` (publicApi.ts L8158-8268):
+        // When `search` (`q`) is provided, the backend slices results by `offset`/`limit`
+        // and returns before evaluating `cursorParam` (`after`). Protected profiles
+        // (Claude `claudeToolResult` and OpenAI `applyOpenAIProfile`) rebuild `content`
+        // from `structuredContent` while `paginatedOutput` is frozen, so fail closed
+        // (`isError: true` without `structuredContent`).
+        if (trimmedQ && trimmedAfter) {
+            return {
+                content: [{
+                        type: "text",
+                        text: "Error: text search ('q') cannot be combined with cursor pagination ('after') because the ERP backend slices search results by 'offset'/'limit' and ignores 'after'. Use 'offset' and 'limit' when searching with 'q', or omit 'q' when paginating with 'after'. / " +
+                            "Error: la busqueda textual ('q') no se puede combinar con el cursor 'after' porque el backend pagina las busquedas mediante 'offset'/'limit' e ignora 'after'. Usa 'offset' y 'limit' con 'q', u omite 'q' al paginar con 'after'.",
+                    }],
+                isError: true,
+            };
+        }
+        let result = await client.listVendors({ q, limit, offset, after, fields });
+        let usedFallback = false;
+        const splitQ = trimmedQ ? splitCompoundQuery(trimmedQ) : undefined;
+        const isSubsequentPage = (offset !== undefined && offset > 0) || Boolean(after);
+        const initialTruncated = result?.truncated === true;
+        const canFallback = splitQ !== undefined && splitQ !== trimmedQ && !after && !initialTruncated;
+        const hasZeroTotalMatches = Array.isArray(result?.data) &&
+            result.data.length === 0 &&
+            (isSubsequentPage ? result.total === 0 : result.total === 0 || result.total === undefined);
+        if (canFallback && hasZeroTotalMatches) {
+            try {
+                const fallbackResult = await client.listVendors({ q: splitQ, limit, offset, after, fields });
+                const fallbackTruncated = fallbackResult?.truncated === true;
+                if (fallbackTruncated ||
+                    (fallbackResult?.data && (fallbackResult.data.length > 0 || (fallbackResult.total !== undefined && fallbackResult.total > 0)))) {
+                    result = fallbackResult;
+                    usedFallback = true;
+                }
+            }
+            catch {
+                // Preserve original response if fallback fails
+            }
+        }
+        const rawEnvelope = (result ?? {});
+        const isTruncated = rawEnvelope.truncated === true;
+        const normalizedData = Array.isArray(result?.data)
+            ? result.data.map((v) => (v && typeof v === "object" ? normalizeVendorRecord(v) : v))
+            : [];
+        // Conservative refusal when the ERP 500-document scan cap was saturated (`truncated: true`).
+        // Because `paginatedOutput` is a frozen schema contract and both Claude (`claudeToolResult`)
+        // and OpenAI (`applyOpenAIProfile`) overwrite `content` whenever `structuredContent` is
+        // present, returning `structuredContent` here would hide the truncation warning and present
+        // an incomplete 500-doc scan as exhaustive.
+        if (isTruncated) {
+            const partialCount = typeof result?.total === "number" ? result.total : normalizedData.length;
+            return {
+                content: [{
+                        type: "text",
+                        text: `Error: vendor search hit the ERP 500-document scan cap (truncated=true; ${partialCount} match(es) within the first 500 scanned records) and cannot be returned as an exhaustive result across protected profiles. Narrow 'q' or paginate without 'q' using 'after'. / ` +
+                            `Error: la busqueda de proveedores alcanzo el limite de escaneo de 500 documentos del ERP (truncated=true; ${partialCount} coincidencia(s) en los primeros 500 registros) y no puede devolverse como resultado exhaustivo. Acota 'q' o pagina sin 'q' usando 'after'.`,
+                    }],
+                isError: true,
+            };
+        }
+        const cleanEnvelope = {
+            data: normalizedData,
+            total: typeof result?.total === "number" ? result.total : normalizedData.length,
+            limit: typeof result?.limit === "number" ? result.limit : (limit ?? 20),
+            offset: typeof result?.offset === "number" ? result.offset : (offset ?? 0),
+            ...(typeof result?.nextCursor === "string" ? { nextCursor: result.nextCursor } : {}),
+        };
+        const notes = [];
+        if (usedFallback) {
+            notes.push(` (criterio aplicado: "${splitQ}")`);
+        }
         return {
-            content: [listContent(formatPaginatedResponse("vendors", result))],
-            structuredContent: result,
+            content: [listContent(formatPaginatedResponse("vendors", cleanEnvelope) + notes.join(""))],
+            structuredContent: cleanEnvelope,
         };
     }));
     // -- get_vendor --
@@ -48,7 +282,7 @@ export function registerVendorTools(server, client) {
         },
         outputSchema: vendorItemOutput,
     }, async ({ id }) => withToolLogging("get_vendor", async () => {
-        const result = await client.getVendor(id);
+        const result = normalizeVendorRecord(await client.getVendor(id));
         return {
             content: [getContent(formatRecord("Vendor", result))],
             structuredContent: result,
@@ -64,19 +298,19 @@ export function registerVendorTools(server, client) {
             "Los proveedores se usan al registrar gastos y pedidos de compra.",
         annotations: CREATE_ANNOTATIONS,
         inputSchema: {
-            name: z.string().describe("Vendor/company name / Nombre del proveedor o empresa"),
-            email: z.string().optional().describe("Email address / Correo electronico"),
-            phone: z.string().optional().describe("Phone number / Telefono"),
+            name: z.string().trim().min(1).max(200).describe("Vendor/company name / Nombre del proveedor o empresa"),
+            email: z.string().trim().email().max(255).optional().describe("Email address / Correo electronico"),
+            phone: z.string().trim().min(1).max(50).optional().describe("Phone number / Telefono"),
             taxId: z.string().optional().describe("Tax ID (NIF/CIF/VAT) / NIF o CIF"),
             address: addressSchema,
         },
         outputSchema: vendorItemOutput,
     }, async (input) => withToolLogging("create_vendor", async () => {
-        const result = await client.createVendor(input);
+        const result = normalizeVendorRecord(await client.createVendor(input));
         const hints = enrichResponse("vendors", "create", result);
         return {
-            content: [mutateContent(formatRecord("Vendor created", result))],
-            structuredContent: { ...result, ...hints },
+            content: [mutateContent(formatRecord("Vendor created", result) + hints)],
+            structuredContent: { ...result },
         };
     }));
     // -- update_vendor --
@@ -87,16 +321,16 @@ export function registerVendorTools(server, client) {
             "/ Actualiza un proveedor existente. Solo se modifican los campos proporcionados.",
         annotations: UPDATE_ANNOTATIONS,
         inputSchema: {
-            id: z.string().describe("Vendor ID / ID del proveedor"),
-            name: z.string().optional().describe("Name / Nombre"),
-            email: z.string().optional().describe("Email / Correo"),
-            phone: z.string().optional().describe("Phone / Telefono"),
+            id: z.string().trim().min(1).max(128).describe("Vendor ID / ID del proveedor"),
+            name: z.string().trim().min(1).max(200).optional().describe("Name / Nombre"),
+            email: z.string().trim().email().max(255).optional().describe("Email / Correo"),
+            phone: z.string().trim().min(1).max(50).optional().describe("Phone / Telefono"),
             taxId: z.string().optional().describe("Tax ID / NIF/CIF"),
             address: addressSchema,
         },
         outputSchema: vendorItemOutput,
     }, async ({ id, ...data }) => withToolLogging("update_vendor", async () => {
-        const result = await client.updateVendor(id, data);
+        const result = normalizeVendorRecord(await client.updateVendor(id, data));
         return {
             content: [mutateContent(formatRecord("Vendor updated", result))],
             structuredContent: result,

package/dist/tools/webhooks.js

@@ -2,7 +2,7 @@
  * Webhook management tools for the Frihet MCP server.
  */
 import { z } from "zod/v4";
-import { withToolLogging, formatPaginatedResponse, formatRecord, listContent, getContent, mutateContent, READ_ONLY_ANNOTATIONS, CREATE_ANNOTATIONS, UPDATE_ANNOTATIONS, DELETE_ANNOTATIONS, paginatedOutput, deleteResultOutput, webhookItemOutput, webhookTestResultOutput } from "./shared.js";
+import { withToolLogging, formatRecord, formatUnpaginatedListResponse, listContent, getContent, mutateContent, READ_ONLY_ANNOTATIONS, CREATE_ANNOTATIONS, UPDATE_ANNOTATIONS, DELETE_ANNOTATIONS, deleteResultOutput, webhookCreateOutput, webhookItemOutput, webhookListOutput, webhookTestResultOutput } from "./shared.js";
 export function registerWebhookTools(server, client) {
     // -- list_webhooks --
     server.registerTool("list_webhooks", {
@@ -10,15 +10,12 @@ export function registerWebhookTools(server, client) {
         description: "List all configured webhooks. Webhooks send HTTP POST notifications when events occur in Frihet. " +
             "/ Lista todos los webhooks configurados. Los webhooks envian notificaciones HTTP POST cuando ocurren eventos en Frihet.",
         annotations: READ_ONLY_ANNOTATIONS,
-        inputSchema: {
-            limit: z.number().int().min(1).max(100).optional().describe("Max results (1-100) / Resultados maximos"),
-            offset: z.number().int().min(0).optional().describe("Offset / Desplazamiento"),
-        },
-        outputSchema: paginatedOutput(webhookItemOutput),
-    }, async ({ limit, offset }) => withToolLogging("list_webhooks", async () => {
-        const result = await client.listWebhooks({ limit, offset });
+        inputSchema: z.object({}).strict(),
+        outputSchema: webhookListOutput,
+    }, async () => withToolLogging("list_webhooks", async () => {
+        const result = await client.listWebhooks();
         return {
-            content: [listContent(formatPaginatedResponse("webhooks", result))],
+            content: [listContent(formatUnpaginatedListResponse("webhooks", result))],
             structuredContent: result,
         };
     }));
@@ -28,9 +25,9 @@ export function registerWebhookTools(server, client) {
         description: "Get a single webhook configuration by its ID. " +
             "/ Obtiene la configuracion de un webhook por su ID.",
         annotations: READ_ONLY_ANNOTATIONS,
-        inputSchema: {
+        inputSchema: z.object({
             id: z.string().describe("Webhook ID / ID del webhook"),
-        },
+        }).strict(),
         outputSchema: webhookItemOutput,
     }, async ({ id }) => withToolLogging("get_webhook", async () => {
         const result = await client.getWebhook(id);
@@ -42,31 +39,37 @@ export function registerWebhookTools(server, client) {
     // -- create_webhook --
     server.registerTool("create_webhook", {
         title: "Create Webhook",
-        description: "Register a new webhook endpoint. You must specify the URL to receive notifications " +
+        description: "Register a named webhook endpoint. You must specify the name, URL, and events to receive notifications " +
             "and which events to subscribe to. " +
-            "Available events: invoice.created, invoice.updated, invoice.paid, invoice.deleted, " +
-            "expense.created, expense.updated, expense.deleted, client.created, client.updated, " +
+            "Available events: invoice.created, invoice.updated, invoice.paid, " +
+            "expense.created, expense.updated, client.created, client.updated, " +
             "quote.created, quote.updated, quote.accepted. " +
-            "Example: url='https://example.com/webhook', events=['invoice.created','invoice.paid'], secret='my-secret' " +
+            "Example: name='Invoice events', url='https://example.com/webhook', events=['invoice.created','invoice.paid'], secret='my-secret' " +
             "/ Registra un nuevo endpoint de webhook. Especifica la URL y los eventos a suscribir.",
         annotations: CREATE_ANNOTATIONS,
-        inputSchema: {
-            url: z.string().url().describe("Webhook endpoint URL / URL del endpoint del webhook"),
+        inputSchema: z.object({
+            name: z.string().max(200).describe("Webhook name / Nombre del webhook"),
+            url: z.string().url().max(2000).describe("Webhook endpoint URL / URL del endpoint del webhook"),
             events: z
-                .array(z.string())
+                .array(z.string().max(100))
                 .min(1)
                 .describe("Events to subscribe to (e.g. ['invoice.created', 'invoice.paid']) " +
                 "/ Eventos a suscribir"),
-            active: z
-                .boolean()
+            status: z
+                .enum(["active", "inactive"])
                 .optional()
-                .describe("Whether the webhook is active (default: true) / Si el webhook esta activo"),
+                .describe("Webhook status (default: active) / Estado del webhook"),
+            metadata: z
+                .record(z.string(), z.unknown())
+                .optional()
+                .describe("Arbitrary webhook metadata / Metadatos del webhook"),
             secret: z
                 .string()
+                .max(500)
                 .optional()
                 .describe("Signing secret for payload verification / Secreto para verificar las notificaciones"),
-        },
-        outputSchema: webhookItemOutput,
+        }).strict(),
+        outputSchema: webhookCreateOutput,
     }, async (input) => withToolLogging("create_webhook", async () => {
         const result = await client.createWebhook(input);
         return {
@@ -78,16 +81,18 @@ export function registerWebhookTools(server, client) {
     server.registerTool("update_webhook", {
         title: "Update Webhook",
         description: "Update an existing webhook configuration using PATCH semantics. Only provided fields change. " +
-            "Example: id='abc123', active=false to disable a webhook. " +
+            "Example: id='abc123', status='paused' to pause a webhook. " +
             "/ Actualiza la configuracion de un webhook. Solo se modifican los campos proporcionados.",
         annotations: UPDATE_ANNOTATIONS,
-        inputSchema: {
+        inputSchema: z.object({
             id: z.string().describe("Webhook ID / ID del webhook"),
-            url: z.string().url().optional().describe("Endpoint URL / URL"),
-            events: z.array(z.string()).min(1).optional().describe("Events / Eventos"),
-            active: z.boolean().optional().describe("Active / Activo"),
-            secret: z.string().optional().describe("Signing secret / Secreto"),
-        },
+            name: z.string().max(200).optional().describe("Webhook name / Nombre del webhook"),
+            url: z.string().url().max(2000).optional().describe("Endpoint URL / URL"),
+            events: z.array(z.string().max(100)).min(1).optional().describe("Events / Eventos"),
+            status: z.enum(["active", "inactive", "paused"]).optional().describe("Status / Estado"),
+            metadata: z.record(z.string(), z.unknown()).optional().describe("Metadata / Metadatos"),
+            secret: z.string().max(500).optional().describe("Signing secret / Secreto"),
+        }).strict(),
         outputSchema: webhookItemOutput,
     }, async ({ id, ...data }) => withToolLogging("update_webhook", async () => {
         const result = await client.updateWebhook(id, data);

package/dist/types.d.ts

@@ -11,6 +11,7 @@ export interface PaginatedResponse<T> {
 export interface ApiError {
     error: string;
     message?: string;
+    detail?: string;
 }
 export interface PaginationParams {
     limit?: number;
@@ -37,11 +38,13 @@ export interface Invoice {
     status?: string;
     notes?: string;
     taxRate?: number;
+    operationType?: "service" | "goods";
+    fiscalTreatment?: "not_subject_location" | "export_exempt";
     total?: number;
     createdAt?: string;
     updatedAt?: string;
 }
-export type CreateInvoiceInput = Pick<Invoice, "clientName" | "items"> & Partial<Pick<Invoice, "issueDate" | "dueDate" | "status" | "notes" | "taxRate">>;
+export type CreateInvoiceInput = Pick<Invoice, "clientName" | "items"> & Partial<Pick<Invoice, "issueDate" | "dueDate" | "status" | "notes" | "taxRate" | "operationType" | "fiscalTreatment">>;
 export type UpdateInvoiceInput = Partial<CreateInvoiceInput>;
 export interface Expense {
     id: string;
@@ -99,13 +102,36 @@ export type CreateQuoteInput = Pick<Quote, "clientName" | "items"> & Partial<Pic
 export type UpdateQuoteInput = Partial<CreateQuoteInput>;
 export interface Webhook {
     id: string;
+    userId?: string;
+    name: string;
     url: string;
     events: string[];
-    active?: boolean;
-    secret?: string;
+    status: "active" | "inactive" | "paused";
+    metadata?: Record<string, unknown>;
+    hasSecret: boolean;
+    pausedReason?: string;
+    lastTriggeredAt?: string;
     createdAt?: string;
     updatedAt?: string;
 }
-export type CreateWebhookInput = Pick<Webhook, "url" | "events"> & Partial<Pick<Webhook, "active" | "secret">>;
-export type UpdateWebhookInput = Partial<CreateWebhookInput>;
+export interface CreateWebhookInput {
+    name: string;
+    url: string;
+    events: string[];
+    status?: "active" | "inactive";
+    metadata?: Record<string, unknown>;
+    secret?: string;
+}
+export interface UpdateWebhookInput {
+    name?: string;
+    url?: string;
+    events?: string[];
+    status?: "active" | "inactive" | "paused";
+    metadata?: Record<string, unknown>;
+    secret?: string;
+}
+/** Create may echo only the caller-supplied signing secret, once. */
+export type CreateWebhookResult = Webhook & {
+    secret?: string;
+};
 //# sourceMappingURL=types.d.ts.map