@kirjapro/mcp-server 0.20.0 → 0.20.1

package/CHANGELOG.md

@@ -1,5 +1,21 @@
 # Changelog
 
+## [0.20.1] - 2026-10-20
+
+The MCP audit review of 20.10.2026 (N2 item 8, before the OAuth write switch). No tool,
+description or fingerprint changes.
+
+- The core-surface instructions no longer suggest composing a VAT settlement (ALV-tilitys)
+  by hand with `kirjapro_create_transaction`: such a voucher does not mark the VAT period
+  settled, so the period could be settled twice. They redirect it to the Kirjapro app
+  (ALV-yhteenveto → Kirjaa ALV-tilitys), which settles through the same function as
+  `kirjapro_book_vat_settlement` and marks a period settled earlier with a voucher. Purchases
+  and sales may still be composed by hand.
+- `kirjapro_book_vat_settlement` refuses a VAT period that has not ended yet in
+  Europe/Helsinki (`Kausi … ei ole vielä päättynyt, joten sitä ei voi vielä tilittää.`), its
+  dry run included, so VAT booked later in that period is not left unsettled. Migration
+  `20261020180000` refuses it in the database too, for every package version.
+
 ## [0.20.0] - 2026-10-20
 
 PR D of the MCP audit of 18.10.2026 (batches 7 to 12 and 14). Against 0.19.0, 3 of the 56

package/dist/index.js

@@ -57787,7 +57787,7 @@ function shouldShowDeprecationWarning() {
 if (shouldShowDeprecationWarning()) console.warn("\u26A0\uFE0F  Node.js 20 and below are deprecated and will no longer be supported in future versions of @supabase/supabase-js. Please upgrade to Node.js 22 or later. For more information, visit: https://github.com/orgs/supabase/discussions/45715");
 
 // src/version.ts
-var VERSION = "0.20.0";
+var VERSION = "0.20.1";
 
 // src/auth.ts
 var SUPABASE_PROJECT_URL = "https://tifewzsimmyoiepblhld.supabase.co";
@@ -65441,6 +65441,11 @@ function registerBookingTools(server2) {
       const period = vatPeriodRange(params.month, companyVat.vatPeriod);
       const dueDate = defaultSettlementDate(params.month, companyVat.vatPeriod);
       const settlementDate = params.settlementDate ?? dueDate;
+      if (period.end >= helsinkiDateString()) {
+        return toErrorContent(
+          `Kausi ${period.label} ei ole viel\xE4 p\xE4\xE4ttynyt, joten sit\xE4 ei voi viel\xE4 tilitt\xE4\xE4.`
+        );
+      }
       let fiscalYearId = params.fiscalYearId;
       if (!fiscalYearId) {
         const { data: years, error: yearsError } = await supabase2.from("fiscal_years").select("id").eq("company_id", companyId2).eq("is_closed", false).lte("start_date", settlementDate).gte("end_date", settlementDate).order("start_date", { ascending: false }).limit(1);
@@ -68117,7 +68122,7 @@ var INSTRUCTIONS_CORE_ADDENDUM = `
 The following workflows are NOT exposed in the current (core) surface. When a user asks for them, redirect to the web UI rather than reaching for the closest available tool:
 
 - **Recurring invoice templates** \u2014 created and managed in the web app; cron generates the issued invoices
-- **Booking shortcuts** (book_purchase / book_sale / book_vat_settlement) \u2014 for these, you CAN compose the journal entries manually via \`kirjapro_create_transaction\` with explicit debit/credit lines if the user prefers; otherwise redirect. Exception: a VAT-registered (ALV) company books sales only as invoices (\`kirjapro_create_invoice\` + \`kirjapro_send_invoice\`) and reverse-charge purchases and purchases with deductible VAT in the web app (a free 2320 line on a voucher has no VAT fact and does not reach field 307); the database refuses its vouchers with a net credit on sales accounts 5000-5499, a sales-account line together with a 4210 or 2320 line, or a net 4210 credit; moving an amount out of a sales account without a VAT line (e.g. a fixed-asset disposal D 5010 / K 1600) is allowed
+- **Booking shortcuts** (book_purchase / book_sale) \u2014 for these, you CAN compose the journal entries manually via \`kirjapro_create_transaction\` with explicit debit/credit lines if the user prefers; otherwise redirect. Never compose a VAT settlement (ALV-tilitys) by hand: a hand-made voucher does not mark the VAT period settled, so the period could be settled twice. Redirect it to the Kirjapro app (ALV-yhteenveto \u2192 Kirjaa ALV-tilitys), which also marks a period settled earlier with a voucher. Exception: a VAT-registered (ALV) company books sales only as invoices (\`kirjapro_create_invoice\` + \`kirjapro_send_invoice\`) and reverse-charge purchases and purchases with deductible VAT in the web app (a free 2320 line on a voucher has no VAT fact and does not reach field 307); the database refuses its vouchers with a net credit on sales accounts 5000-5499, a sales-account line together with a 4210 or 2320 line, or a net 4210 credit; moving an amount out of a sales account without a VAT line (e.g. a fixed-asset disposal D 5010 / K 1600) is allowed
 - **Payroll (palkanlaskenta)** \u2014 Kirjapro does NOT calculate or book payroll. Direct the user to Palkkaus.fi or Palkka.fi for the calculation, then bring the resulting payslip back and book it via \`kirjapro_create_transaction\` with explicit debit/credit lines
 - **Transaction templates** \u2014 manual journal entries via \`kirjapro_create_transaction\`
 - **Manual offer status changes** \u2014 the customer's email-link click sets status server-side; just wait for the user to confirm acceptance

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kirjapro/mcp-server",
-  "version": "0.20.0",
+  "version": "0.20.1",
   "description": "MCP server for Finnish accounting — exposes Kirjapro bookkeeping, invoicing, and reporting tools to Claude, ChatGPT, Mistral, and other MCP clients.",
   "type": "module",
   "bin": {

package/server.json

@@ -2,7 +2,7 @@
   "name": "@kirjapro/mcp-server",
   "displayName": "Kirjapro - Finnish Accounting",
   "description": "Finnish double-entry bookkeeping, invoicing, and financial reporting for growing businesses. Create transactions, generate invoices with VAT calculation, produce income statements and balance sheets, and validate Finnish business identifiers.",
-  "version": "0.20.0",
+  "version": "0.20.1",
   "homepage": "https://kirjapro.fi",
   "repository": "https://github.com/Jaollo/kirja-pro",
   "license": "MIT",