@kirjapro/mcp-server 0.14.0 → 0.14.1

package/CHANGELOG.md

@@ -2,15 +2,27 @@
 
 ## [Unreleased]
 
+## [0.14.1] - 2026-10-05
+
+Uses the database migration `20261005210000` (AI-työtila 2.0 round 4, batch 7).
+Against a database without it the refusal keeps the 0.14.0 text. 0.14.0 keeps
+working against the new database and reports such a key as "Permission denied."
+Tool definitions are unchanged.
+
+- A revoked or expired API key, or one whose creator has since left (or been removed
+  from and re-invited to) the company, now fails with `CREDENTIAL_INVALID: the API
+  key is no longer valid ...` instead of "MFA step-up required"; `kirjapro_create_invoice`
+  returns the code `CREDENTIAL_INVALID` instead of `MFA_REQUIRED`. Needs the
+  `20261005210000` migration; against an older database the old text stays.
+
 ## [0.14.0] - 2026-10-05
 
-Prepared, not yet published. Publish only after (1) `db:deploy` of the round-3
-migrations `20261005170000`–`20261005200000` (AI-työtila 2.0 batches 10–13;
-`kirjapro_send_invoice` needs `20261005180100`, the delivery intents), (2)
-`npm run functions:deploy -- dispatch-invoice` from the same main, which resumes a
-delivery under its intent, and (3) a commit of `src/database.types.ts` regenerated
-from production with `--schema public`, so `check:types-drift` passes. Until then
-0.13.0 keeps working unchanged against the current database.
+Published after (1) `db:deploy` of the round-3 migrations
+`20261005170000`–`20261005200000` (AI-työtila 2.0 batches 10–13;
+`kirjapro_send_invoice` needs `20261005180100`, the delivery intents), (2) the
+`dispatch-invoice` deploy from the same main, which resumes a delivery under its
+intent, and (3) the production-generated `src/database.types.ts`. 0.13.0 keeps
+working unchanged against the same database.
 
 - `kirjapro_get_ar_aging` shares its result shaping with Kirjapro; an unexpected
   report payload now returns a sanitized error instead of an internal exception.

package/dist/index.js

@@ -35679,7 +35679,7 @@ var StdioServerTransport = class {
 import { createClient } from "@supabase/supabase-js";
 
 // src/version.ts
-var VERSION = "0.14.0";
+var VERSION = "0.14.1";
 
 // src/auth.ts
 var SUPABASE_PROJECT_URL = "https://tifewzsimmyoiepblhld.supabase.co";
@@ -36325,6 +36325,9 @@ function sanitizeDbError(context, error61) {
     details: error61.details,
     hint: error61.hint
   });
+  if (error61.message?.startsWith("CREDENTIAL_INVALID")) {
+    return `${context}: CREDENTIAL_INVALID: the API key is no longer valid (revoked, expired or its creator left the company). Create a new key in Kirjapro.`;
+  }
   if (error61.message?.startsWith("AAL2_REQUIRED")) {
     return `${context}: MFA step-up required. Verify your 2FA code in Kirjapro and retry.`;
   }
@@ -37345,6 +37348,7 @@ var ERROR_MESSAGES = {
   INVOICE_NUMBER_CONFLICT: () => "Laskunumero on jo k\xE4yt\xF6ss\xE4 (samanaikainen luonti). Yrit\xE4 uudelleen.",
   INVALID_LINE: () => "Laskurivi ei kelpaa. Tarkista m\xE4\xE4r\xE4, hinta ja ALV-k\xE4sittely.",
   PERMISSION_DENIED: () => "Ei oikeutta luoda laskua t\xE4lle yritykselle.",
+  CREDENTIAL_INVALID: () => "Tunniste ei en\xE4\xE4 kelpaa: API-avain on peruttu tai vanhentunut. Luo uusi avain Kirjaprossa.",
   MFA_REQUIRED: () => "Vahvista kaksivaiheinen tunnistautuminen Kirjaprossa ja yrit\xE4 sitten uudelleen.",
   WRITE_REJECTED: () => "Laskun luonti hyl\xE4ttiin. Mit\xE4\xE4n ei tallennettu.",
   OUTCOME_UNKNOWN: () => "Laskun luonnin lopputulosta ei voitu varmistaa. Tarkista laskulista ennen uutta yrityst\xE4."
@@ -37609,6 +37613,8 @@ function invoiceDraftWriteOutcome(response) {
     const code = error61.code ?? "";
     if (!CONFIRMED_ERROR_CODE.test(code))
       return { ok: false, error: invoiceDraftError("OUTCOME_UNKNOWN") };
+    if ((error61.message ?? "").startsWith("CREDENTIAL_INVALID"))
+      return { ok: false, error: invoiceDraftError("CREDENTIAL_INVALID") };
     if ((error61.message ?? "").startsWith("AAL2_REQUIRED"))
       return { ok: false, error: invoiceDraftError("MFA_REQUIRED") };
     const mapped = {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kirjapro/mcp-server",
-  "version": "0.14.0",
+  "version": "0.14.1",
   "description": "MCP server for Finnish accounting — exposes Kirjapro bookkeeping, invoicing, and reporting tools to Claude, ChatGPT, Mistral, and other MCP clients.",
   "type": "module",
   "bin": {

package/server.json

@@ -2,7 +2,7 @@
   "name": "@kirjapro/mcp-server",
   "displayName": "Kirjapro - Finnish Accounting",
   "description": "Finnish double-entry bookkeeping, invoicing, and financial reporting for growing businesses. Create transactions, generate invoices with VAT calculation, produce income statements and balance sheets, and validate Finnish business identifiers.",
-  "version": "0.14.0",
+  "version": "0.14.1",
   "homepage": "https://kirjapro.fi",
   "repository": "https://github.com/Jaollo/kirja-pro",
   "license": "MIT",