@frihet/mcp-server 1.17.0 → 2.0.1

package/dist/tools/invoices.js

@@ -2,7 +2,7 @@
  * Invoice tools for the Frihet MCP server.
  */
 import { z } from "zod/v4";
-import { withToolLogging, formatPaginatedResponse, formatRecord, listContent, getContent, mutateContent, enrichResponse, READ_ONLY_ANNOTATIONS, CREATE_ANNOTATIONS, UPDATE_ANNOTATIONS, DELETE_ANNOTATIONS, paginatedOutput, documentDeleteResultOutput, invoiceItemOutput, actionResultOutput, creditNoteResultOutput, pdfResultOutput, einvoiceResultOutput } from "./shared.js";
+import { withToolLogging, confirmationRequiredError, formatPaginatedResponse, formatRecord, listContent, getContent, mutateContent, enrichResponse, READ_ONLY_ANNOTATIONS, CREATE_ANNOTATIONS, UPDATE_ANNOTATIONS, DELETE_ANNOTATIONS, paginatedOutput, documentDeleteResultOutput, invoiceItemOutput, actionResultOutput, creditNoteResultOutput, pdfResultOutput, einvoiceResultOutput } from "./shared.js";
 const invoiceItemSchema = z.object({
     description: z.string().trim().min(1).max(500).describe("Description of the line item / Descripcion del concepto"),
     quantity: z.number().finite().min(0.0001).max(1_000_000).describe("Quantity / Cantidad"),
@@ -81,6 +81,10 @@ const invoiceFiscalFields = {
         .enum(["service", "goods"])
         .optional()
         .describe("Operation type (service or goods) / Tipo de operacion"),
+    fiscalTreatment: z
+        .enum(["not_subject_location", "export_exempt"])
+        .optional()
+        .describe("Explicit fiscal treatment declared by the user; never inferred / Tratamiento fiscal declarado expresamente por el usuario; nunca inferido"),
 };
 export function registerInvoiceTools(server, client) {
     // -- list_invoices --
@@ -206,7 +210,12 @@ export function registerInvoiceTools(server, client) {
         },
         outputSchema: invoiceItemOutput,
     }, async (input) => withToolLogging("create_invoice", async () => {
-        const result = await client.createInvoice(input);
+        const status = input.status ?? "draft";
+        const payload = {
+            ...input,
+            status,
+        };
+        const result = await client.createInvoice(payload);
         const hints = enrichResponse("invoices", "create", result);
         return {
             content: [mutateContent(formatRecord("Invoice created", result) + hints)],
@@ -269,19 +278,11 @@ export function registerInvoiceTools(server, client) {
         outputSchema: documentDeleteResultOutput,
     }, async ({ id, confirm }) => withToolLogging("delete_invoice", async () => {
         if (!confirm) {
-            return {
-                content: [
-                    {
-                        type: "text",
-                        text: "Error: confirm=true is required to delete an invoice. " +
-                            "A draft invoice is removed permanently; a sent/paid invoice is CANCELLED " +
-                            "(status=cancelled) instead, because VeriFactu forbids breaking the hash chain. " +
-                            "Either way the invoice stops counting as a live receivable. Set confirm=true to proceed. / " +
-                            "Se requiere confirm=true para eliminar una factura.",
-                    },
-                ],
-                isError: true,
-            };
+            return confirmationRequiredError("Error: confirm=true is required to delete an invoice. " +
+                "A draft invoice is removed permanently; a sent/paid invoice is CANCELLED " +
+                "(status=cancelled) instead, because VeriFactu forbids breaking the hash chain. " +
+                "Either way the invoice stops counting as a live receivable. Set confirm=true to proceed. / " +
+                "Se requiere confirm=true para eliminar una factura.");
         }
         // 204 → undefined (draft row destroyed). 200 → soft-cancel body (document
         // kept, status=cancelled). Reporting both as "deleted" is the GAP-12 lie.
@@ -379,18 +380,10 @@ export function registerInvoiceTools(server, client) {
         outputSchema: actionResultOutput,
     }, async ({ id, to, confirm }) => withToolLogging("send_invoice", async () => {
         if (!confirm) {
-            return {
-                content: [
-                    {
-                        type: "text",
-                        text: "Error: confirm=true is required to send an invoice. " +
-                            "This delivers an email to the client — a third party outside this workspace — " +
-                            "and it cannot be recalled once sent. Set confirm=true to proceed. / " +
-                            "Se requiere confirm=true para enviar una factura por email a un tercero.",
-                    },
-                ],
-                isError: true,
-            };
+            return confirmationRequiredError("Error: confirm=true is required to send an invoice. " +
+                "This delivers an email to the client — a third party outside this workspace — " +
+                "and it cannot be recalled once sent. Set confirm=true to proceed. / " +
+                "Se requiere confirm=true para enviar una factura por email a un tercero.");
         }
         const invoice = await client.getInvoice(id);
         if (invoice["status"] === "cancelled") {
@@ -399,30 +392,99 @@ export function registerInvoiceTools(server, client) {
                 isError: true,
             };
         }
-        let recipientEmail = to;
-        if (!recipientEmail) {
-            const clientId = typeof invoice["clientId"] === "string" ? invoice["clientId"] : undefined;
-            if (!clientId) {
+        const isValidRecipientEmail = (email) => email.length <= 255 && /^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(email);
+        let recipientEmail;
+        if (to !== undefined) {
+            const trimmedTo = to.trim();
+            if (!trimmedTo || !isValidRecipientEmail(trimmedTo)) {
                 return {
-                    content: [{ type: "text", text: "Error: this invoice has no linked client with a saved email address." }],
+                    content: [{ type: "text", text: `Error: invalid recipient email address format: "${trimmedTo}".` }],
                     isError: true,
                 };
             }
-            const linkedClient = await client.getClient(clientId);
-            recipientEmail = typeof linkedClient["email"] === "string" && linkedClient["email"].trim()
-                ? linkedClient["email"].trim()
+            recipientEmail = trimmedTo;
+        }
+        if (!recipientEmail) {
+            const clientId = typeof invoice["clientId"] === "string" && invoice["clientId"].trim()
+                ? invoice["clientId"].trim()
                 : undefined;
+            if (clientId) {
+                let linkedClient;
+                try {
+                    linkedClient = await client.getClient(clientId);
+                }
+                catch (err) {
+                    const isNotFound = typeof err === "object" &&
+                        err !== null &&
+                        "statusCode" in err &&
+                        err.statusCode === 404;
+                    if (!isNotFound) {
+                        throw err;
+                    }
+                }
+                const clientEmail = linkedClient && typeof linkedClient["email"] === "string" && linkedClient["email"].trim()
+                    ? linkedClient["email"].trim()
+                    : undefined;
+                if (clientEmail) {
+                    if (!isValidRecipientEmail(clientEmail)) {
+                        return {
+                            content: [{ type: "text", text: `Error: invalid recipient email address format: "${clientEmail}".` }],
+                            isError: true,
+                        };
+                    }
+                    recipientEmail = clientEmail;
+                }
+            }
             if (!recipientEmail) {
+                const docFallbackEmail = typeof invoice["clientEmail"] === "string" && invoice["clientEmail"].trim()
+                    ? invoice["clientEmail"].trim()
+                    : typeof invoice["email"] === "string" && invoice["email"].trim()
+                        ? invoice["email"].trim()
+                        : undefined;
+                if (docFallbackEmail) {
+                    if (!isValidRecipientEmail(docFallbackEmail)) {
+                        return {
+                            content: [{ type: "text", text: `Error: invalid recipient email address format: "${docFallbackEmail}".` }],
+                            isError: true,
+                        };
+                    }
+                    const fallbackMsg = `Error: the linked client has no current email address; only a document-level fallback email ("${docFallbackEmail}") was found on the invoice, which may be outdated. ` +
+                        `Confirm this specific recipient with the user and re-run with to="${docFallbackEmail}" and confirm=true to send. / ` +
+                        `El cliente vinculado no tiene email actual; la factura conserva el correo documental "${docFallbackEmail}", que podria estar obsoleto. Confirma este destinatario concreto y vuelve a llamar con to="${docFallbackEmail}" y confirm=true.`;
+                    return {
+                        content: [{ type: "text", text: fallbackMsg }],
+                        structuredContent: {
+                            success: false,
+                            id,
+                            message: fallbackMsg,
+                            effectiveRecipient: docFallbackEmail,
+                            recipientSource: "document_fallback",
+                            requiresExplicitRecipientConfirmation: true,
+                        },
+                        isError: true,
+                    };
+                }
                 return {
-                    content: [{ type: "text", text: "Error: the linked client has no saved email address." }],
+                    content: [
+                        {
+                            type: "text",
+                            text: clientId
+                                ? "Error: the linked client has no saved email address."
+                                : "Error: this invoice has no linked client with a saved email address.",
+                        },
+                    ],
                     isError: true,
                 };
             }
         }
         const result = await client.sendInvoice(id, recipientEmail);
+        const enrichedResult = {
+            ...(result && typeof result === "object" ? result : {}),
+            effectiveRecipient: recipientEmail,
+        };
         return {
-            content: [mutateContent(formatRecord("Invoice sent", result))],
-            structuredContent: result,
+            content: [mutateContent(formatRecord("Invoice sent", enrichedResult))],
+            structuredContent: enrichedResult,
         };
     }));
     // -- mark_invoice_paid --
@@ -549,10 +611,15 @@ export function registerInvoiceTools(server, client) {
     // -- apply_late_fee --
     server.registerTool("apply_late_fee", {
         title: "Apply Late Fee",
-        description: "Apply late payment interest to an overdue invoice. Calculates interest based on EU Late Payment Directive (8% default) " +
-            "or auto-calculates from days overdue. Creates a debit note linked to the original invoice. " +
-            "/ Aplica intereses de demora a una factura vencida. Calcula intereses segun la Directiva Europea de Morosidad (8% por defecto) " +
-            "o los calcula automaticamente a partir de los dias de retraso. Crea una nota de debito vinculada a la factura original.",
+        description: "Apply late payment interest flags to an overdue invoice. " +
+            "Calculates interest based on EU Late Payment Directive (8% default) or auto-calculates " +
+            "from days overdue, and flips the `hasLateFee` / `lateFeeAmount` / `lateFeeDaysOverdue` " +
+            "fields on the invoice. The endpoint does NOT create a debit note — if a separate " +
+            "rectifying invoice is required, issue it explicitly with create_invoice or create_credit_note. " +
+            "/ Aplica los indicadores de intereses de demora a una factura vencida. Calcula intereses " +
+            "segun la Directiva Europea de Morosidad (8% por defecto) o a partir de los dias de retraso, " +
+            "y actualiza los flags `hasLateFee` / `lateFeeAmount` / `lateFeeDaysOverdue`. NO crea una " +
+            "nota de debito — si hace falta una factura rectificativa aparte, emitela con create_invoice o create_credit_note.",
         annotations: CREATE_ANNOTATIONS,
         inputSchema: {
             invoiceId: z.string().describe("ID of the overdue invoice / ID de la factura vencida"),

package/dist/tools/kitchen.js

@@ -177,21 +177,32 @@ export function registerKitchenTools(server, client) {
             }
         }
         const agg = new Map();
+        let totalOpenTickets = 0;
         for (const t of ticketsResult.data) {
             const ticket = t;
             const status = typeof ticket["status"] === "string" ? ticket["status"] : "";
-            if (status === "served" || status === "cancelled")
+            if (status === "served" || status === "cancelled" || status === "voided")
                 continue;
-            const stationId = typeof ticket["stationId"] === "string" ? ticket["stationId"] : "__unassigned__";
+            totalOpenTickets += 1;
+            // REST tickets can route to multiple stations; retain legacy single-station input.
+            const stationIds = Array.isArray(ticket["stationIds"])
+                ? [...new Set(ticket["stationIds"].filter((id) => typeof id === "string" && id.length > 0))]
+                : typeof ticket["stationId"] === "string" ? [ticket["stationId"]] : [];
+            if (stationIds.length === 0)
+                stationIds.push("__unassigned__");
             const createdAt = typeof ticket["createdAt"] === "string"
                 ? new Date(ticket["createdAt"]).getTime()
                 : null;
-            const existing = agg.get(stationId) ?? { openTickets: 0, oldestCreatedAt: null };
-            existing.openTickets += 1;
-            if (createdAt !== null && (existing.oldestCreatedAt === null || createdAt < existing.oldestCreatedAt)) {
-                existing.oldestCreatedAt = createdAt;
+            for (const stationId of stationIds) {
+                const existing = agg.get(stationId) ?? { openTickets: 0, oldestCreatedAt: null };
+                existing.openTickets += 1;
+                if (createdAt !== null && (existing.oldestCreatedAt === null || createdAt < existing.oldestCreatedAt)) {
+                    existing.oldestCreatedAt = createdAt;
+                }
+                agg.set(stationId, existing);
+                if (stationId !== "__unassigned__" && !stationMap.has(stationId))
+                    stationMap.set(stationId, stationId);
             }
-            agg.set(stationId, existing);
         }
         // Build station summaries, also include stations with zero open tickets
         let maxLoad = 0;
@@ -240,10 +251,9 @@ export function registerKitchenTools(server, client) {
                 }
             }
         }
-        const totalOpenTickets = summaries.reduce((acc, s) => acc + s.openTickets, 0);
         const result = {
             stations: summaries,
-            bottleneckStationId: maxLoad > 0 ? bottleneckId : undefined,
+            ...(maxLoad > 0 ? { bottleneckStationId: bottleneckId } : {}),
             totalOpenTickets,
             generatedAt: new Date().toISOString(),
         };

package/dist/tools/quotes.js

@@ -2,7 +2,7 @@
  * Quote tools for the Frihet MCP server.
  */
 import { z } from "zod/v4";
-import { withToolLogging, formatPaginatedResponse, formatRecord, listContent, getContent, mutateContent, enrichResponse, READ_ONLY_ANNOTATIONS, CREATE_ANNOTATIONS, UPDATE_ANNOTATIONS, DELETE_ANNOTATIONS, paginatedOutput, documentDeleteResultOutput, quoteItemOutput, actionResultOutput } from "./shared.js";
+import { withToolLogging, confirmationRequiredError, formatPaginatedResponse, formatRecord, listContent, getContent, mutateContent, enrichResponse, READ_ONLY_ANNOTATIONS, CREATE_ANNOTATIONS, UPDATE_ANNOTATIONS, DELETE_ANNOTATIONS, paginatedOutput, documentDeleteResultOutput, quoteItemOutput, actionResultOutput } from "./shared.js";
 const quoteItemSchema = z.object({
     description: z.string().trim().min(1).max(500).describe("Description of the line item / Descripcion del concepto"),
     quantity: z.number().finite().min(0.0001).max(1_000_000).describe("Quantity / Cantidad"),
@@ -205,19 +205,11 @@ export function registerQuoteTools(server, client) {
         outputSchema: documentDeleteResultOutput,
     }, async ({ id, confirm }) => withToolLogging("delete_quote", async () => {
         if (!confirm) {
-            return {
-                content: [
-                    {
-                        type: "text",
-                        text: "Error: confirm=true is required to delete a quote. " +
-                            "A clean draft without delivery, response, attachment, or conversion evidence is removed permanently; a protected draft is refused; a sent/accepted quote is CANCELLED " +
-                            "(status=cancelled) instead and remains in the record. " +
-                            "Set confirm=true to proceed. / " +
-                            "Se requiere confirm=true para eliminar un presupuesto.",
-                    },
-                ],
-                isError: true,
-            };
+            return confirmationRequiredError("Error: confirm=true is required to delete a quote. " +
+                "A clean draft without delivery, response, attachment, or conversion evidence is removed permanently; a protected draft is refused; a sent/accepted quote is CANCELLED " +
+                "(status=cancelled) instead and remains in the record. " +
+                "Set confirm=true to proceed. / " +
+                "Se requiere confirm=true para eliminar un presupuesto.");
         }
         // 204 → undefined (draft row destroyed). 200 → soft-cancel body. See GAP-12.
         const outcome = await client.deleteQuote(id);
@@ -279,30 +271,99 @@ export function registerQuoteTools(server, client) {
                 isError: true,
             };
         }
-        let recipientEmail = to;
-        if (!recipientEmail) {
-            const clientId = typeof quote["clientId"] === "string" ? quote["clientId"] : undefined;
-            if (!clientId) {
+        const isValidRecipientEmail = (email) => email.length <= 255 && /^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(email);
+        let recipientEmail;
+        if (to !== undefined) {
+            const trimmedTo = to.trim();
+            if (!trimmedTo || !isValidRecipientEmail(trimmedTo)) {
                 return {
-                    content: [{ type: "text", text: "Error: this quote has no linked client with a saved email address." }],
+                    content: [{ type: "text", text: `Error: invalid recipient email address format: "${trimmedTo}".` }],
                     isError: true,
                 };
             }
-            const linkedClient = await client.getClient(clientId);
-            recipientEmail = typeof linkedClient["email"] === "string" && linkedClient["email"].trim()
-                ? linkedClient["email"].trim()
+            recipientEmail = trimmedTo;
+        }
+        if (!recipientEmail) {
+            const clientId = typeof quote["clientId"] === "string" && quote["clientId"].trim()
+                ? quote["clientId"].trim()
                 : undefined;
+            if (clientId) {
+                let linkedClient;
+                try {
+                    linkedClient = await client.getClient(clientId);
+                }
+                catch (err) {
+                    const isNotFound = typeof err === "object" &&
+                        err !== null &&
+                        "statusCode" in err &&
+                        err.statusCode === 404;
+                    if (!isNotFound) {
+                        throw err;
+                    }
+                }
+                const clientEmail = linkedClient && typeof linkedClient["email"] === "string" && linkedClient["email"].trim()
+                    ? linkedClient["email"].trim()
+                    : undefined;
+                if (clientEmail) {
+                    if (!isValidRecipientEmail(clientEmail)) {
+                        return {
+                            content: [{ type: "text", text: `Error: invalid recipient email address format: "${clientEmail}".` }],
+                            isError: true,
+                        };
+                    }
+                    recipientEmail = clientEmail;
+                }
+            }
             if (!recipientEmail) {
+                const docFallbackEmail = typeof quote["clientEmail"] === "string" && quote["clientEmail"].trim()
+                    ? quote["clientEmail"].trim()
+                    : typeof quote["email"] === "string" && quote["email"].trim()
+                        ? quote["email"].trim()
+                        : undefined;
+                if (docFallbackEmail) {
+                    if (!isValidRecipientEmail(docFallbackEmail)) {
+                        return {
+                            content: [{ type: "text", text: `Error: invalid recipient email address format: "${docFallbackEmail}".` }],
+                            isError: true,
+                        };
+                    }
+                    const fallbackMsg = `Error: the linked client has no current email address; only a document-level fallback email ("${docFallbackEmail}") was found on the quote, which may be outdated. ` +
+                        `Confirm this specific recipient with the user and re-run with to="${docFallbackEmail}" and confirm=true to send. / ` +
+                        `El cliente vinculado no tiene email actual; el presupuesto conserva el correo documental "${docFallbackEmail}", que podria estar obsoleto. Confirma este destinatario concreto y vuelve a llamar con to="${docFallbackEmail}" y confirm=true.`;
+                    return {
+                        content: [{ type: "text", text: fallbackMsg }],
+                        structuredContent: {
+                            success: false,
+                            id,
+                            message: fallbackMsg,
+                            effectiveRecipient: docFallbackEmail,
+                            recipientSource: "document_fallback",
+                            requiresExplicitRecipientConfirmation: true,
+                        },
+                        isError: true,
+                    };
+                }
                 return {
-                    content: [{ type: "text", text: "Error: the linked client has no saved email address." }],
+                    content: [
+                        {
+                            type: "text",
+                            text: clientId
+                                ? "Error: the linked client has no saved email address."
+                                : "Error: this quote has no linked client with a saved email address.",
+                        },
+                    ],
                     isError: true,
                 };
             }
         }
         const result = await client.sendQuote(id, recipientEmail);
+        const enrichedResult = {
+            ...(result && typeof result === "object" ? result : {}),
+            effectiveRecipient: recipientEmail,
+        };
         return {
-            content: [mutateContent(formatRecord("Quote sent", result))],
-            structuredContent: result,
+            content: [mutateContent(formatRecord("Quote sent", enrichedResult))],
+            structuredContent: enrichedResult,
         };
     }));
 }

package/dist/tools/recurring.js

@@ -16,7 +16,7 @@
  * Backend: /v1/recurring/* endpoints live as of Wave 4-A (Frihet-ERP functions/src/publicApi.ts).
  */
 import { z } from "zod/v4";
-import { withToolLogging, formatPaginatedResponse, formatRecord, listContent, getContent, mutateContent, READ_ONLY_ANNOTATIONS, CREATE_ANNOTATIONS, UPDATE_ANNOTATIONS, DELETE_ANNOTATIONS, paginatedOutput, actionResultOutput, deleteResultOutput, recurringInvoiceItemOutput, } from "./shared.js";
+import { withToolLogging, confirmationRequiredError, formatPaginatedResponse, formatRecord, listContent, getContent, mutateContent, READ_ONLY_ANNOTATIONS, CREATE_ANNOTATIONS, UPDATE_ANNOTATIONS, DELETE_ANNOTATIONS, paginatedOutput, actionResultOutput, deleteResultOutput, recurringInvoiceItemOutput, } from "./shared.js";
 export function registerRecurringTools(server, client) {
     // -- list_recurring_invoices --
     server.registerTool("list_recurring_invoices", {
@@ -191,17 +191,9 @@ export function registerRecurringTools(server, client) {
         outputSchema: deleteResultOutput,
     }, async ({ id, confirm }) => withToolLogging("delete_recurring_invoice", async () => {
         if (!confirm) {
-            return {
-                content: [
-                    {
-                        type: "text",
-                        text: "Error: confirm=true is required to delete a recurring invoice template. " +
-                            "This will stop all future invoice generation from this template. Set confirm=true to proceed. / " +
-                            "Se requiere confirm=true para eliminar la plantilla de factura recurrente.",
-                    },
-                ],
-                isError: true,
-            };
+            return confirmationRequiredError("Error: confirm=true is required to delete a recurring invoice template. " +
+                "This will stop all future invoice generation from this template. Set confirm=true to proceed. / " +
+                "Se requiere confirm=true para eliminar la plantilla de factura recurrente.");
         }
         await client.deleteRecurringInvoice(id);
         return {
@@ -212,23 +204,32 @@ export function registerRecurringTools(server, client) {
     // -- run_recurring_now --
     server.registerTool("run_recurring_now", {
         title: "Run Recurring Invoice Now",
-        description: "Manually trigger immediate generation of the next invoice instance from a recurring template. " +
-            "Useful for billing ahead of schedule or recovering from a missed automated run. " +
-            "The generated invoice is created as a draft; review and send separately. " +
-            "Example: templateId='rec_abc123' " +
-            "/ Genera manualmente la siguiente instancia de una factura recurrente. " +
-            "Util para facturar antes de lo programado o recuperar un ciclo perdido. " +
-            "La factura generada se crea como borrador; revisar y enviar por separado.",
-        annotations: { readOnlyHint: false, destructiveHint: false, idempotentHint: false, openWorldHint: false },
-        inputSchema: {
-            templateId: z.string().describe("Recurring invoice template ID / ID de la plantilla de factura recurrente"),
+        description: "Generate an invoice from a recurring template and update its run count and last-run date. Requires confirm=true. " +
+            "draftOnly defaults to true. With draftOnly=false, the invoice is created with status='sent' and may trigger fiscal numbering and automatic tax submission. " +
+            "Both modes may deliver configured invoice-created webhooks and notify workspace admins/accountants; this endpoint does not email the invoice to the client. " +
+            "Each new call can create another invoice; check the template and invoices after an uncertain result before retrying. " +
+            "Example: templateId='rec_abc123', confirm=true " +
+            "/ Genera una factura recurrente y actualiza el contador y la fecha de ejecución. Requiere confirm=true. " +
+            "Por defecto crea un borrador; con draftOnly=false crea el estado 'sent' y puede activar la numeración y remisión fiscal automática. " +
+            "Ambas opciones pueden activar webhooks y avisos internos; esta operación no envía la factura por correo al cliente. " +
+            "Una nueva llamada puede crear otra factura; comprueba la plantilla y las facturas antes de repetir un resultado incierto.",
+        annotations: { readOnlyHint: false, destructiveHint: true, idempotentHint: false, openWorldHint: true },
+        inputSchema: z.object({
+            templateId: z.string().min(1).describe("Recurring invoice template ID / ID de la plantilla de factura recurrente"),
             draftOnly: z
                 .boolean()
                 .optional()
-                .describe("If true, create as draft only (default true). Set false to create and mark as sent immediately. / Si true, crea como borrador. Set false para crear y marcar como enviada."),
-        },
+                .describe("Default true creates a draft; false creates status='sent' and may trigger automatic fiscal submission. Neither option emails the client. / Por defecto true crea un borrador; false crea el estado 'sent' y puede activar la remisión fiscal automática. Ninguna opción envía correo al cliente."),
+            confirm: z.boolean().describe("Must be true to authorize invoice creation, configured webhooks and possible fiscal issuance / Debe ser true para autorizar la creación, los webhooks configurados y la posible emisión fiscal"),
+        }).strict(),
         outputSchema: actionResultOutput,
-    }, async ({ templateId, draftOnly }) => withToolLogging("run_recurring_now", async () => {
+    }, async ({ templateId, draftOnly, confirm }) => withToolLogging("run_recurring_now", async () => {
+        if (confirm !== true) {
+            return confirmationRequiredError("Error: confirm=true is required to create a recurring invoice and allow configured webhooks. " +
+                "draftOnly=false may also trigger fiscal numbering and automatic tax submission. / " +
+                "Se requiere confirm=true para crear la factura y permitir los webhooks configurados. " +
+                "draftOnly=false también puede activar la numeración y remisión fiscal automática.");
+        }
         const result = await client.runRecurringNow(templateId, { draftOnly: draftOnly ?? true });
         return {
             content: [mutateContent(formatRecord("Recurring invoice triggered", result))],

package/dist/tools/register-all.d.ts

@@ -1,12 +1,12 @@
 /**
- * Barrel module that registers all 157 Frihet ERP tools on an McpServer.
+ * Barrel module that registers every Frihet ERP tool on an McpServer.
  *
  * Used by both the local (stdio) and remote (Cloudflare Workers) servers
  * so tool definitions stay in sync — one source of truth.
  *
  * Langfuse observability is injected by patching server.registerTool once
  * before any tool registration. This wraps every tool callback with
- * traceMCPTool so all 157 tools are instrumented at zero per-tool cost.
+ * traceMCPTool so every registered tool is instrumented at zero per-tool cost.
  */
 import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import type { IFrihetClient } from "../client-interface.js";

package/dist/tools/register-all.js

@@ -1,12 +1,12 @@
 /**
- * Barrel module that registers all 157 Frihet ERP tools on an McpServer.
+ * Barrel module that registers every Frihet ERP tool on an McpServer.
  *
  * Used by both the local (stdio) and remote (Cloudflare Workers) servers
  * so tool definitions stay in sync — one source of truth.
  *
  * Langfuse observability is injected by patching server.registerTool once
  * before any tool registration. This wraps every tool callback with
- * traceMCPTool so all 157 tools are instrumented at zero per-tool cost.
+ * traceMCPTool so every registered tool is instrumented at zero per-tool cost.
  */
 import { traceMCPTool } from "../observability.js";
 import { registerInvoiceTools } from "./invoices.js";
@@ -37,13 +37,13 @@ import { registerImpuestoSociedadesTools } from "./impuesto_sociedades.js";
 import { registerBankRulesTools } from "./bank_rules.js";
 import { registerHrTools } from "./hr.js";
 import { registerPayrollTools } from "./payroll.js";
-import { registerOnboardingTools } from "./onboarding.js";
 import { registerPermissionsTools } from "./permissions.js";
 import { registerAccountingCloseTools } from "./accountingClose.js";
+import { registerSearchTools } from "./search.js";
 /**
  * Patches server.registerTool to wrap every tool callback with Langfuse tracing.
  *
- * The patch is applied once before tool registration so all 157 tools are
+ * The patch is applied once before tool registration so every registered tool is
  * instrumented without per-tool edits. Tool call signatures are unchanged —
  * existing MCP clients continue to work identically.
  *
@@ -57,7 +57,10 @@ import { registerAccountingCloseTools } from "./accountingClose.js";
  *           attendance_clock_in, attendance_clock_out, overtime_report, anomaly_list
  *   Webhook trust (1): test_webhook (added to registerWebhookTools)
  *   Payroll (2): payroll_export, payroll_checklist
- *   Onboarding (2): onboarding_status, onboarding_persona_set
+ *   (Onboarding tools onboarding_status / onboarding_persona_set withdrawn
+ *    via #124 — Frihet-ERP /v1/onboarding/* family absent; tools were deleted,
+ *    not stubbed, to keep the catalogue honest. See src/tools/igic.ts for the
+ *    precedent of an inline NOT_DEPLOYED stub where the tool is retained.)
  *   Permissions (2): permissions_matrix, permissions_me
  *   Period close (3): period_close_status, period_close, period_reopen
  */
@@ -106,8 +109,8 @@ export function registerAllTools(server, client) {
     registerBankRulesTools(server, client);
     registerHrTools(server, client);
     registerPayrollTools(server, client);
-    registerOnboardingTools(server, client);
     registerPermissionsTools(server, client);
     registerAccountingCloseTools(server, client);
+    registerSearchTools(server, client);
 }
 //# sourceMappingURL=register-all.js.map

package/dist/tools/search.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Cross-resource global search tool — Phase 10 second-wave safe parity.
+ *
+ * Wraps `GET /v1/search/global?q=&types=&limit=&offset=` (publicApi.ts:4476).
+ * Read-only fan-out across invoices / expenses / vendors / clients / products
+ * with workspace scoping preserved by Firestore subcollection paths on the
+ * server. No mutating counterpart; no auth boundary different from any other
+ * list tool.
+ *
+ * Why this lives alone (not in clients.ts): it is not a clients/* endpoint,
+ * has its own canonical envelope (`{data, total, ..., query, types,
+ * truncated?}` instead of the standard paginated one), and is the only
+ * server-side fan-out tool — coupling it with one resource would mislead the
+ * tool listing.
+ */
+import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import type { IFrihetClient } from "../client-interface.js";
+export declare function registerSearchTools(server: McpServer, client: IFrihetClient): void;
+//# sourceMappingURL=search.d.ts.map