@frihet/mcp-server 1.17.0 → 2.0.0

package/dist/tools/search.js

@@ -0,0 +1,84 @@
+/**
+ * Cross-resource global search tool — Phase 10 second-wave safe parity.
+ *
+ * Wraps `GET /v1/search/global?q=&types=&limit=&offset=` (publicApi.ts:4476).
+ * Read-only fan-out across invoices / expenses / vendors / clients / products
+ * with workspace scoping preserved by Firestore subcollection paths on the
+ * server. No mutating counterpart; no auth boundary different from any other
+ * list tool.
+ *
+ * Why this lives alone (not in clients.ts): it is not a clients/* endpoint,
+ * has its own canonical envelope (`{data, total, ..., query, types,
+ * truncated?}` instead of the standard paginated one), and is the only
+ * server-side fan-out tool — coupling it with one resource would mislead the
+ * tool listing.
+ */
+import { z } from "zod/v4";
+import { withToolLogging, listContent, READ_ONLY_ANNOTATIONS, formatPaginatedResponse, } from "./shared.js";
+const GLOBAL_SEARCH_TYPES = ["invoices", "expenses", "vendors", "clients", "products"];
+const globalSearchOutputSchema = z.object({
+    data: z.array(z.record(z.string(), z.unknown())),
+    total: z.number().int().nonnegative(),
+    limit: z.number().int().positive(),
+    offset: z.number().int().nonnegative(),
+    hasMore: z.boolean(),
+    query: z.string(),
+    types: z.array(z.enum(GLOBAL_SEARCH_TYPES)),
+    truncated: z.boolean().optional(),
+});
+export function registerSearchTools(server, client) {
+    server.registerTool("global_search", {
+        title: "Global Search",
+        description: "Search across invoices, expenses, vendors, clients, and products in one call. " +
+            "Use this to resolve an entity name/email/number when you do not yet know the resource type. " +
+            "Returns per-hit {type, id, name, ...} so the caller can dispatch to the right list/get tool. " +
+            "Read-only and workspace-scoped. " +
+            "Example: q='acme', types=['clients','invoices'], limit=10 " +
+            "/ Busca en facturas, gastos, proveedores, clientes y productos en una sola llamada. " +
+            "Util para resolver un nombre/correo/numero cuando no se sabe aun el tipo de recurso.",
+        annotations: READ_ONLY_ANNOTATIONS,
+        inputSchema: {
+            q: z
+                .string()
+                .trim()
+                .min(1)
+                .max(200)
+                .describe("Free-text query (1-200 chars) / Texto a buscar"),
+            types: z
+                .array(z.enum(GLOBAL_SEARCH_TYPES))
+                .optional()
+                .describe("Restrict to these resource types. Defaults to all 5. / Tipos a incluir (por defecto todos)"),
+            limit: z
+                .number()
+                .int()
+                .min(1)
+                .max(50)
+                .optional()
+                .describe("Max results across all types (1-50, default 25) / Resultados maximos"),
+            offset: z
+                .number()
+                .int()
+                .min(0)
+                .max(1000)
+                .optional()
+                .describe("Offset / Desplazamiento"),
+        },
+        outputSchema: globalSearchOutputSchema,
+    }, async ({ q, types, limit, offset }) => withToolLogging("global_search", async () => {
+        // Trim defensively: the JSON Schema serialization of `z.string().trim()`
+        // drops the trim hint, so leading/trailing whitespace survives MCP's
+        // input validation and would reach the ERP's q-length check as junk.
+        const cleanQ = q.trim();
+        const result = await client.globalSearch({
+            q: cleanQ,
+            types: types,
+            limit,
+            offset,
+        });
+        return {
+            content: [listContent(formatPaginatedResponse("search", result))],
+            structuredContent: result,
+        };
+    }));
+}
+//# sourceMappingURL=search.js.map

package/dist/tools/shared.d.ts

@@ -4,7 +4,8 @@
  * This module is used by both the local (stdio) and remote (Cloudflare Workers)
  * MCP servers. It must NOT import concrete classes from either client — error
  * detection uses duck-typing (checking for `statusCode`/`errorCode` properties)
- * so it works regardless of which FrihetApiError class threw the error.
+ * so it works regardless of which FrihetApiError class threw the error. The
+ * client-owned predicate separately verifies local validation provenance.
  */
 import type { ToolAnnotations, Annotations } from "@modelcontextprotocol/sdk/types.js";
 import { z } from "zod/v4";
@@ -13,9 +14,9 @@ export declare const READ_ONLY_ANNOTATIONS: ToolAnnotations;
 export declare const CREATE_ANNOTATIONS: ToolAnnotations;
 export declare const UPDATE_ANNOTATIONS: ToolAnnotations;
 export declare const DELETE_ANNOTATIONS: ToolAnnotations;
-/** List operations: useful to both user and assistant for navigation, medium priority. */
+/** List operations: useful to both user and assistant for navigation. */
 export declare const LIST_CONTENT_ANNOTATIONS: Annotations;
-/** Get/read operations: useful to both, higher priority as specifically requested data. */
+/** Get/read operations: useful to both user and assistant. */
 export declare const GET_CONTENT_ANNOTATIONS: Annotations;
 /** Mutating operations (create/update/delete): primarily for the user, highest priority. */
 export declare const MUTATE_CONTENT_ANNOTATIONS: Annotations;
@@ -33,6 +34,7 @@ export declare function truncateResponse(text: string, truncatedNotice?: string)
  */
 export declare function handleToolError(error: unknown, toolName?: string): {
     content: AnnotatedTextContent[];
+    structuredContent?: Record<string, unknown>;
     isError: true;
     _meta?: Record<string, unknown>;
 };
@@ -445,9 +447,9 @@ export declare const posTerminalItemOutput: z.ZodObject<{
     deviceType: z.ZodOptional<z.ZodString>;
     locationId: z.ZodOptional<z.ZodString>;
     status: z.ZodOptional<z.ZodEnum<{
-        unknown: "unknown";
-        online: "online";
-        offline: "offline";
+        active: "active";
+        paused: "paused";
+        retired: "retired";
     }>>;
     stripeReaderId: z.ZodOptional<z.ZodString>;
     createdAt: z.ZodOptional<z.ZodString>;
@@ -717,16 +719,18 @@ export declare const teamMemberItemOutput: z.ZodObject<{
     id: z.ZodString;
     name: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     email: z.ZodOptional<z.ZodNullable<z.ZodString>>;
-    role: z.ZodOptional<z.ZodEnum<{
+    role: z.ZodOptional<z.ZodNullable<z.ZodEnum<{
         owner: "owner";
         admin: "admin";
         editor: "editor";
         accountant: "accountant";
         viewer: "viewer";
-    }>>;
+    }>>>;
     status: z.ZodOptional<z.ZodEnum<{
         active: "active";
         pending: "pending";
+        expired: "expired";
+        invalid: "invalid";
     }>>;
     invitedAt: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     joinedAt: z.ZodOptional<z.ZodNullable<z.ZodString>>;
@@ -1017,32 +1021,6 @@ export declare const payrollChecklistOutput: z.ZodObject<{
     missingEmployees: z.ZodOptional<z.ZodNever>;
     generatedAt: z.ZodOptional<z.ZodNever>;
 }, z.core.$loose>;
-/** Onboarding workspace state — backend `/v1/onboarding/status`. */
-export declare const onboardingStatusOutput: z.ZodObject<{
-    workspaceId: z.ZodOptional<z.ZodString>;
-    persona: z.ZodOptional<z.ZodEnum<{
-        autonomo: "autonomo";
-        empresa: "empresa";
-        agencia: "agencia";
-        gestoria: "gestoria";
-    }>>;
-    completedSteps: z.ZodOptional<z.ZodArray<z.ZodString>>;
-    pendingSteps: z.ZodOptional<z.ZodArray<z.ZodString>>;
-    percentComplete: z.ZodOptional<z.ZodNumber>;
-    startedAt: z.ZodOptional<z.ZodString>;
-    completedAt: z.ZodOptional<z.ZodString>;
-}, z.core.$loose>;
-/** Onboarding persona update result. */
-export declare const onboardingPersonaResultOutput: z.ZodObject<{
-    workspaceId: z.ZodOptional<z.ZodString>;
-    persona: z.ZodEnum<{
-        autonomo: "autonomo";
-        empresa: "empresa";
-        agencia: "agencia";
-        gestoria: "gestoria";
-    }>;
-    updatedAt: z.ZodOptional<z.ZodString>;
-}, z.core.$loose>;
 /**
  * Documented RBAC-model snapshot — backend `/v1/permissions/matrix`.
  * This is not an exhaustive report of runtime authorization or Firestore rules.
@@ -1058,13 +1036,13 @@ export declare const permissionsMatrixOutput: z.ZodObject<{
         employee: "employee";
     }>>;
     resources: z.ZodArray<z.ZodEnum<{
+        invoices: "invoices";
         expenses: "expenses";
+        clients: "clients";
+        products: "products";
         banking: "banking";
-        invoices: "invoices";
         quotes: "quotes";
-        clients: "clients";
         payroll: "payroll";
-        products: "products";
         workspace: "workspace";
         accounting: "accounting";
         people: "people";
@@ -2225,6 +2203,8 @@ interface ToolResult {
     structuredContent?: Record<string, unknown>;
     isError?: boolean;
 }
+/** Mark a local confirmation refusal without parsing or exposing provider text. */
+export declare function confirmationRequiredError(message: string): ToolResult;
 /**
  * Wraps a tool handler to automatically log execution time, success/failure,
  * and record metrics. Catches errors and routes them through handleToolError.

package/dist/tools/shared.js

@@ -4,12 +4,14 @@
  * This module is used by both the local (stdio) and remote (Cloudflare Workers)
  * MCP servers. It must NOT import concrete classes from either client — error
  * detection uses duck-typing (checking for `statusCode`/`errorCode` properties)
- * so it works regardless of which FrihetApiError class threw the error.
+ * so it works regardless of which FrihetApiError class threw the error. The
+ * client-owned predicate separately verifies local validation provenance.
  */
 import { z } from "zod/v4";
 import { log, logToolCall } from "../logger.js";
 import { recordToolCall } from "../metrics.js";
 import { sanitizeServerRemediation } from "../redaction.js";
+import { isLocalInputValidationError } from "../client.js";
 /* ------------------------------------------------------------------ */
 /*  Safety annotations for MCP tool registrations                      */
 /* ------------------------------------------------------------------ */
@@ -20,15 +22,16 @@ export const DELETE_ANNOTATIONS = { readOnlyHint: false, destructiveHint: true,
 /* ------------------------------------------------------------------ */
 /*  Content annotations for tool responses                             */
 /* ------------------------------------------------------------------ */
-/** List operations: useful to both user and assistant for navigation, medium priority. */
+// MCP permits fractional priorities, but some clients (including Codex CLI
+// 0.153.4) fail to decode them. Omit this optional hint on read responses while
+// retaining their audience. See https://github.com/openai/codex/issues/38979.
+/** List operations: useful to both user and assistant for navigation. */
 export const LIST_CONTENT_ANNOTATIONS = {
     audience: ["user", "assistant"],
-    priority: 0.5,
 };
-/** Get/read operations: useful to both, higher priority as specifically requested data. */
+/** Get/read operations: useful to both user and assistant. */
 export const GET_CONTENT_ANNOTATIONS = {
     audience: ["user", "assistant"],
-    priority: 0.7,
 };
 /** Mutating operations (create/update/delete): primarily for the user, highest priority. */
 export const MUTATE_CONTENT_ANNOTATIONS = {
@@ -58,12 +61,25 @@ function isFrihetApiError(error) {
         typeof error.errorCode === "string" &&
         typeof error.message === "string");
 }
+/** Error class names safe to echo from the unexpected-error path. */
+const UNEXPECTED_ERROR_CLASSES = new Set([
+    "FrihetApiError",
+    "TypeError",
+    "SyntaxError",
+    "RangeError",
+    "AbortError",
+    "ZodError",
+]);
 const FORBIDDEN_FRIENDLY_MESSAGE = "Access denied. Reconnect Frihet or use configured credentials with permission for this action. / Acceso denegado. Vuelve a conectar Frihet o usa credenciales con permiso para esta accion.";
 /**
  * Maps an error to a user-friendly MCP tool response with error annotations.
  * Emits structured log entries for all errors.
  */
 export function handleToolError(error, toolName) {
+    // NOTE: FrihetApiError carries the backend `requestId`, but it is NOT echoed
+    // here: `requestId` is in SENSITIVE_FIELD_NAMES (src/redaction.ts), whose
+    // values must not leave the process. Surfacing it needs an explicit policy
+    // change, not a side effect of error formatting.
     if (isFrihetApiError(error)) {
         const loggedMessage = error.statusCode === 403 ? "Forbidden" : error.message;
         const loggedCode = error.statusCode === 403 ? "forbidden" : error.errorCode;
@@ -96,8 +112,22 @@ export function handleToolError(error, toolName) {
             || (error.statusCode >= 500 && error.statusCode <= 599)
             || (error.statusCode === 409
                 && error.errorCode.toUpperCase() === "IDEMPOTENCY_REQUEST_IN_PROGRESS");
+        // Fixed booleans only: private output profiles must preserve definitive
+        // API denial semantics without forwarding provider text, codes or IDs.
+        const definitiveDenial = !operationOutcomeUnknown
+            && (error.statusCode === 404 || error.statusCode === 403);
+        const localValidationRejected = !operationOutcomeUnknown && error.statusCode === 400
+            && isLocalInputValidationError(error);
+        const requestRejected = !operationOutcomeUnknown && error.statusCode === 400
+            && !localValidationRejected;
         let friendlyMessage;
-        if (error.statusCode === 413 && error.errorCode === "payload_too_large") {
+        if (operationOutcomeUnknown) {
+            friendlyMessage = "Frihet could not confirm whether this request completed. Read the current record before deciding whether to retry. / Frihet no pudo confirmar si la solicitud se completó. Consulta el estado actual antes de decidir si reintentar.";
+        }
+        else if (localValidationRejected) {
+            friendlyMessage = "Input validation failed before sending the request. No action was performed. Correct the ID and input parameters before retrying. / La validación falló antes de enviar la solicitud. No se realizó ninguna acción. Corrige el ID y los parámetros antes de reintentar.";
+        }
+        else if (error.statusCode === 413 && error.errorCode === "payload_too_large") {
             friendlyMessage = `Document response too large: ${error.message} / Respuesta de documento demasiado grande.`;
         }
         else if (error.statusCode === 403) {
@@ -120,10 +150,24 @@ export function handleToolError(error, toolName) {
                 },
             ],
             isError: true,
-            ...(operationOutcomeUnknown
+            ...(error.statusCode === 401 || operationOutcomeUnknown || definitiveDenial || localValidationRejected || requestRejected
                 ? {
                     _meta: {
-                        "io.frihet/operationOutcomeUnknown": true,
+                        ...(definitiveDenial
+                            ? { [error.statusCode === 404 ? "io.frihet/resourceNotFound" : "io.frihet/accessDenied"]: true }
+                            : {}),
+                        ...(error.statusCode === 401
+                            ? { "io.frihet/authenticationRequired": true }
+                            : {}),
+                        ...(localValidationRejected
+                            ? { "io.frihet/localValidationRejected": true }
+                            : {}),
+                        ...(requestRejected
+                            ? { "io.frihet/requestRejected": true }
+                            : {}),
+                        ...(operationOutcomeUnknown
+                            ? { "io.frihet/operationOutcomeUnknown": true }
+                            : {}),
                         ...(transportOutcomeUnknown
                             ? { "io.frihet/transportOutcomeUnknown": true }
                             : {}),
@@ -143,8 +187,19 @@ export function handleToolError(error, toolName) {
             code: error instanceof Error ? error.name : "unknown",
         },
     });
+    // Class name only, from a fixed allowlist — never the message, stack, or an
+    // arbitrary `name` (a thrown object can set `name` to any identifier-shaped
+    // value, including a secret).
+    const errorClass = error instanceof Error && UNEXPECTED_ERROR_CLASSES.has(error.name)
+        ? error.name
+        : "UnknownError";
     return {
-        content: [{ type: "text", text: "Error: An unexpected error occurred. Contact support if this persists.", annotations: ERROR_CONTENT_ANNOTATIONS }],
+        content: [{
+                type: "text",
+                text: `Error: An unexpected error occurred (${errorClass}). Contact support if this persists.`,
+                annotations: ERROR_CONTENT_ANNOTATIONS,
+            }],
+        structuredContent: { error: "unexpected_error", errorClass },
         isError: true,
     };
 }
@@ -160,13 +215,21 @@ export function formatPaginatedResponse(resourceName, response) {
         lines.push(JSON.stringify(item, null, 2));
         lines.push("---");
     }
-    if (response.total > response.offset + response.data.length) {
+    const hasMoreByTotal = response.total > response.offset + response.data.length;
+    const isTruncatedScanWindow = Boolean(response.nextCursor && response.data.length < response.limit);
+    if (isTruncatedScanWindow && response.nextCursor) {
+        lines.push(`More results available beyond the current scan window. Continue with after='${response.nextCursor}' to fetch the next page.`);
+    }
+    else if (hasMoreByTotal) {
         const nextOffset = response.offset + response.data.length;
         lines.push(`More results available. Use offset=${nextOffset} to see the next page.`);
         if (response.nextCursor) {
             lines.push(`Cursor pagination: use after='${response.nextCursor}' for efficient cursor-based pagination.`);
         }
     }
+    else if (response.nextCursor) {
+        lines.push(`Cursor pagination: use after='${response.nextCursor}' for efficient cursor-based pagination.`);
+    }
     return truncateResponse(lines.join("\n"));
 }
 /** Format an exhaustive list whose backend exposes no pagination controls. */
@@ -645,7 +708,9 @@ export const posTerminalItemOutput = z.object({
     label: z.string().optional(),
     deviceType: z.string().optional(),
     locationId: z.string().optional(),
-    status: z.enum(["online", "offline", "unknown"]).optional(),
+    // Raw stored value: Frihet-ERP apps/erp/modules/pos/schema/collections.ts
+    // (posTerminals.status), returned verbatim by publicApi/families/pos.ts.
+    status: z.enum(["active", "paused", "retired"]).optional(),
     stripeReaderId: z.string().optional(),
     createdAt: z.string().optional(),
     updatedAt: z.string().optional(),
@@ -921,8 +986,11 @@ export const teamMemberItemOutput = z.object({
     id: z.string(),
     name: z.string().nullable().optional(),
     email: z.string().nullable().optional(),
-    role: z.enum(["owner", "admin", "editor", "accountant", "viewer"]).optional(),
-    status: z.enum(["active", "pending"]).optional(),
+    // Frihet-ERP functions/src/publicApi.ts team listing: invitation rows whose
+    // stored role is not assignable are rendered with `role: null` and
+    // `status: 'invalid'`; past-expiry invitations surface as `expired`.
+    role: z.enum(["owner", "admin", "editor", "accountant", "viewer"]).nullable().optional(),
+    status: z.enum(["active", "pending", "expired", "invalid"]).optional(),
     invitedAt: z.string().nullable().optional(),
     joinedAt: z.string().nullable().optional(),
     createdAt: z.string().nullable().optional(),
@@ -1019,7 +1087,13 @@ export const gestoriaAgingConsolidatedOutput = z.object({
     }).passthrough()),
     generatedAt: z.string().optional(),
 }).passthrough();
-/* --- D4-B: HR / Webhook test / Payroll / Onboarding / Permissions / Period close --- */
+/* --- D4-B: HR / Webhook test / Payroll / Permissions / Period close ---
+ * Onboarding (onboarding_status, onboarding_persona_set) was withdrawn via
+ * issue #124 because Frihet-ERP has no /v1/onboarding/* family. The schemas
+ * lived here previously; the registration in register-all.ts and the file
+ * src/tools/onboarding.ts are also gone. If a future Frihet-ERP release
+ * ships the family, restore src/tools/onboarding.ts, re-add the export
+ * symbols here, and re-import them in register-all.ts. */
 /** Leave/PTO request — backend `/v1/leaves`. */
 export const leaveRequestItemOutput = z.object({
     id: z.string(),
@@ -1162,22 +1236,6 @@ export const payrollChecklistOutput = z.object({
     missingEmployees: z.never().optional(),
     generatedAt: z.never().optional(),
 }).passthrough();
-/** Onboarding workspace state — backend `/v1/onboarding/status`. */
-export const onboardingStatusOutput = z.object({
-    workspaceId: z.string().optional(),
-    persona: z.enum(["autonomo", "empresa", "agencia", "gestoria"]).optional(),
-    completedSteps: z.array(z.string()).optional(),
-    pendingSteps: z.array(z.string()).optional(),
-    percentComplete: z.number().min(0).max(100).optional(),
-    startedAt: z.string().optional(),
-    completedAt: z.string().optional(),
-}).passthrough();
-/** Onboarding persona update result. */
-export const onboardingPersonaResultOutput = z.object({
-    workspaceId: z.string().optional(),
-    persona: z.enum(["autonomo", "empresa", "agencia", "gestoria"]),
-    updatedAt: z.string().optional(),
-}).passthrough();
 const rbacRoleOutput = z.enum(["owner", "admin", "manager", "sales", "accountant", "employee", "viewer"]);
 const rbacResourceOutput = z.enum([
     "workspace", "invoices", "quotes", "expenses", "clients", "products", "accounting",
@@ -1296,6 +1354,14 @@ export const currentPeriodOutput = z.object({
     reopenReason: z.never().optional(),
     generatedAt: z.never().optional(),
 }).passthrough();
+/** Mark a local confirmation refusal without parsing or exposing provider text. */
+export function confirmationRequiredError(message) {
+    return {
+        content: [{ type: "text", text: message, annotations: ERROR_CONTENT_ANNOTATIONS }],
+        isError: true,
+        _meta: { "io.frihet/confirmationRequired": true },
+    };
+}
 /**
  * Wraps a tool handler to automatically log execution time, success/failure,
  * and record metrics. Catches errors and routes them through handleToolError.

package/dist/tools/team.js

@@ -12,16 +12,16 @@
  * Backend: /v1/team/* endpoints live as of Wave 4-A (Frihet-ERP functions/src/publicApi.ts).
  */
 import { z } from "zod/v4";
-import { withToolLogging, formatPaginatedResponse, formatRecord, listContent, mutateContent, READ_ONLY_ANNOTATIONS, CREATE_ANNOTATIONS, UPDATE_ANNOTATIONS, DELETE_ANNOTATIONS, paginatedOutput, actionResultOutput, teamMemberItemOutput, } from "./shared.js";
+import { withToolLogging, confirmationRequiredError, formatPaginatedResponse, formatRecord, listContent, mutateContent, READ_ONLY_ANNOTATIONS, CREATE_ANNOTATIONS, UPDATE_ANNOTATIONS, DELETE_ANNOTATIONS, paginatedOutput, actionResultOutput, teamMemberItemOutput, } from "./shared.js";
 export function registerTeamTools(server, client) {
     // -- list_team_members --
     server.registerTool("list_team_members", {
         title: "List Team Members",
         description: "List active workspace team members and pending invitations. The workspace owner is NOT a member row and is excluded. " +
-            "Each row carries member ID, name, email, role, and invite status (pending/active). " +
+            "Each row carries member ID, name, email, role, and status (active/pending/expired/invalid; role is null on invalid invitations). " +
             "Useful for reviewing team access and outstanding invitations. " +
             "/ Lista miembros activos del equipo e invitaciones pendientes. El propietario del espacio NO aparece como miembro y queda excluido. " +
-            "Cada fila lleva ID, nombre, email, rol y estado de invitacion (pendiente/activo). " +
+            "Cada fila lleva ID, nombre, email, rol y estado (active/pending/expired/invalid; rol null en invitaciones invalidas). " +
             "Util para revisar el acceso del equipo y las invitaciones pendientes.",
         annotations: READ_ONLY_ANNOTATIONS,
         inputSchema: {
@@ -30,9 +30,9 @@ export function registerTeamTools(server, client) {
                 .optional()
                 .describe("Filter by role / Filtrar por rol"),
             status: z
-                .enum(["active", "pending"])
+                .enum(["active", "pending", "expired", "invalid"])
                 .optional()
-                .describe("Filter by invite status / Filtrar por estado de invitacion"),
+                .describe("Filter by status / Filtrar por estado"),
             limit: z.number().int().min(1).max(100).optional().describe("Max results (1-100) / Resultados maximos"),
             offset: z.number().int().min(0).optional().describe("Offset / Desplazamiento"),
         },
@@ -123,17 +123,9 @@ export function registerTeamTools(server, client) {
         outputSchema: actionResultOutput,
     }, async ({ memberId, confirm }) => withToolLogging("remove_team_member", async () => {
         if (!confirm) {
-            return {
-                content: [
-                    {
-                        type: "text",
-                        text: "Error: confirm=true is required to remove a team member. " +
-                            "The member will immediately lose access to the workspace. Set confirm=true to proceed. / " +
-                            "Se requiere confirm=true para eliminar un miembro del equipo.",
-                    },
-                ],
-                isError: true,
-            };
+            return confirmationRequiredError("Error: confirm=true is required to remove a team member. " +
+                "The member will immediately lose access to the workspace. Set confirm=true to proceed. / " +
+                "Se requiere confirm=true para eliminar un miembro del equipo.");
         }
         await client.removeTeamMember(memberId);
         return {

package/dist/tools/time.js

@@ -14,7 +14,7 @@
  * Backend: /v1/time/* endpoints live as of Wave 4-A (Frihet-ERP functions/src/publicApi.ts).
  */
 import { z } from "zod/v4";
-import { withToolLogging, formatPaginatedResponse, formatRecord, listContent, getContent, mutateContent, READ_ONLY_ANNOTATIONS, CREATE_ANNOTATIONS, UPDATE_ANNOTATIONS, paginatedOutput, deleteResultOutput, timeEntryItemOutput, timeSummaryOutput, } from "./shared.js";
+import { withToolLogging, confirmationRequiredError, formatPaginatedResponse, formatRecord, listContent, getContent, mutateContent, READ_ONLY_ANNOTATIONS, CREATE_ANNOTATIONS, UPDATE_ANNOTATIONS, paginatedOutput, deleteResultOutput, timeEntryItemOutput, timeSummaryOutput, } from "./shared.js";
 export function registerTimeTools(server, client) {
     // -- list_time_entries --
     server.registerTool("list_time_entries", {
@@ -132,17 +132,9 @@ export function registerTimeTools(server, client) {
         outputSchema: deleteResultOutput,
     }, async ({ id, confirm }) => withToolLogging("delete_time_entry", async () => {
         if (!confirm) {
-            return {
-                content: [
-                    {
-                        type: "text",
-                        text: "Error: confirm=true is required to delete a time entry. " +
-                            "Deleted entries affect billing reports. Set confirm=true to proceed. / " +
-                            "Se requiere confirm=true para eliminar una entrada de tiempo.",
-                    },
-                ],
-                isError: true,
-            };
+            return confirmationRequiredError("Error: confirm=true is required to delete a time entry. " +
+                "Deleted entries affect billing reports. Set confirm=true to proceed. / " +
+                "Se requiere confirm=true para eliminar una entrada de tiempo.");
         }
         await client.deleteTimeEntry(id);
         return {