@kirjapro/mcp-server 0.5.10 → 0.6.0

package/dist/database.types.js

@@ -0,0 +1,20 @@
+export const Constants = {
+    public: {
+        Enums: {
+            account_type: ["asset", "liability", "equity", "revenue", "expense"],
+            company_role: ["owner", "admin", "accountant", "viewer"],
+            company_size: ["micro", "small", "large"],
+            platform_role: ["admin", "superadmin"],
+            subscription_tier: ["free", "entrepreneur", "growth", "company", "custom"],
+            vat_category: [
+                "standard",
+                "zero_rate_export",
+                "zero_rate_eu",
+                "reverse_charge",
+                "exempt",
+                "margin_scheme",
+            ],
+            vat_period: ["monthly", "quarterly", "yearly"],
+        },
+    },
+};

package/dist/index.d.ts

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+export {};

package/dist/index.js

@@ -30869,18 +30869,27 @@ var companyId = null;
 var refreshTimer = null;
 async function authenticateWithApiKey(apiKey) {
   const url2 = `${SUPABASE_PROJECT_URL}/functions/v1/mcp-auth`;
-  const response = await fetch(url2, {
-    method: "POST",
-    headers: { "Content-Type": "application/json" },
-    body: JSON.stringify({ api_key: apiKey })
-  });
-  if (!response.ok) {
-    const body = await response.json().catch(() => ({ error: "Unknown error" }));
-    throw new Error(
-      `API key authentication failed (${response.status}): ${body.error || "Unknown error"}`
-    );
+  try {
+    const response = await fetch(url2, {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify({ api_key: apiKey }),
+      signal: AbortSignal.timeout(1e4)
+    });
+    if (!response.ok) {
+      const body = await response.json().catch(() => ({ error: "Unknown error" }));
+      throw new Error(
+        `API key authentication failed (${response.status}): ${body.error || "Unknown error"}`
+      );
+    }
+    return await response.json();
+  } catch (err) {
+    if (err instanceof Error && err.message.startsWith("API key authentication failed")) {
+      throw err;
+    }
+    const reason = err?.name === "TimeoutError" ? "timed out after 10s" : `failed: ${err?.message ?? "network error"}`;
+    throw new Error(`API key authentication request to mcp-auth ${reason}`);
   }
-  return response.json();
 }
 function createClientFromAuth(auth) {
   return createClient(auth.supabase_url, auth.anon_key, {
@@ -30984,10 +30993,10 @@ async function initLegacyAuth() {
   }
   const { data: subscription } = await supabase.from("subscriptions").select("tier").eq("user_id", userData.user.id).single();
   const tier = subscription?.tier || "free";
-  const apiTiers = ["entrepreneur", "company", "custom"];
+  const apiTiers = ["entrepreneur", "growth", "company", "custom"];
   if (!apiTiers.includes(tier)) {
     throw new Error(
-      `API access requires Entrepreneur, Company, or Custom subscription tier. Current tier: ${tier}. Upgrade at https://kirjapro.fi/settings/billing`
+      `API access requires a Yritt\xE4j\xE4, Kasvu, Tilitoimisto, or R\xE4\xE4t\xE4l\xF6ity subscription. Current tier: ${tier}. Upgrade at https://kirjapro.fi/settings/billing`
     );
   }
   companyId = kirjaproCompanyId;
@@ -32029,8 +32038,8 @@ function registerTransactionTools(server2) {
 
 // src/types.ts
 var VALID_OFFER_TRANSITIONS = {
-  draft: ["sent", "expired"],
-  sent: ["viewed", "accepted", "rejected", "expired", "draft"],
+  draft: ["expired"],
+  sent: ["accepted", "rejected", "expired", "draft"],
   viewed: ["accepted", "rejected", "expired", "draft"],
   accepted: [],
   rejected: ["draft"],
@@ -33235,7 +33244,7 @@ function registerReportTools(server2) {
       if (error51) {
         return toErrorContent(sanitizeDbError("Failed to generate income statement", error51));
       }
-      const { data: lineTypes, error: lineTypesError } = await supabase2.from("income_statement_line_types").select("*").eq("template_id", templateId).order("display_order", { ascending: true });
+      const { data: lineTypes, error: lineTypesError } = await supabase2.from("income_statement_line_types").select("line_code, line_name_fi, line_type, indent_level, is_calculated, sign_convention, display_order").eq("template_id", templateId).order("display_order", { ascending: true });
       if (lineTypesError || !lineTypes) {
         return toErrorContent(
           sanitizeDbError("Failed to load income statement template lines", lineTypesError)
@@ -35144,10 +35153,10 @@ function registerOfferTools(server2) {
   server2.registerTool(
     "kirjapro_update_offer_status",
     {
-      description: "Update offer status with state machine validation. Valid transitions: draft\u2192sent/expired, sent\u2192viewed/accepted/rejected/expired/draft, viewed\u2192accepted/rejected/expired/draft, rejected/expired\u2192draft. Accepted is terminal (convert to invoice instead).",
+      description: "Update offer status (sender-side). Valid transitions: draft\u2192expired, sent\u2192accepted/rejected/expired/draft, viewed\u2192accepted/rejected/expired/draft, rejected/expired\u2192draft. draft\u2192sent is NOT here \u2014 use the send-offer-email path (recipient gets the public link). Accepted is terminal (convert to invoice instead).",
       inputSchema: {
         offerId: external_exports.string().uuid().describe("Offer UUID"),
-        status: external_exports.enum(["draft", "sent", "viewed", "accepted", "rejected", "expired"]).describe("New status"),
+        status: external_exports.enum(["draft", "accepted", "rejected", "expired"]).describe("New status"),
         idempotencyKey: IDEMPOTENCY_KEY_SCHEMA,
         dryRun: DRY_RUN_SCHEMA
       },
@@ -35195,43 +35204,32 @@ function registerOfferTools(server2) {
         params.idempotencyKey,
         params,
         async () => {
-          const updateFields = { status: newStatus };
-          const nowIso = (/* @__PURE__ */ new Date()).toISOString();
-          switch (newStatus) {
-            case "sent":
-              updateFields.sent_at = nowIso;
-              break;
-            case "viewed":
-              updateFields.viewed_at = nowIso;
-              break;
-            case "accepted":
-              updateFields.accepted_at = nowIso;
-              break;
-            case "rejected":
-              updateFields.rejected_at = nowIso;
-              break;
-          }
-          const { data: updated, error: updateError } = await supabase2.from("offers").update(updateFields).eq("id", params.offerId).eq("company_id", companyId2).eq("status", currentStatus).select("id");
-          if (updateError) {
-            return toErrorContent(sanitizeDbError("Failed to update offer status", updateError));
-          }
-          if (!updated || updated.length === 0) {
-            return toErrorContent(
-              `Offer ${offer.offer_number} status changed concurrently. Please retry.`
-            );
+          const { data: rpcData, error: rpcError } = await supabase2.rpc(
+            "record_offer_status_change",
+            {
+              p_offer_id: params.offerId,
+              p_company_id: companyId2,
+              p_to_status: newStatus
+            }
+          );
+          if (rpcError) {
+            return toErrorContent(sanitizeDbError("Failed to update offer status", rpcError));
           }
-          const { error: eventError } = await supabase2.from("offer_events").insert({
-            offer_id: params.offerId,
-            event_type: `status_${newStatus}`
-          });
-          if (eventError) {
-            console.error("Failed to log offer event:", eventError);
+          const result = rpcData;
+          if (!result?.success) {
+            if (result?.error === "not_claimable") {
+              return toErrorContent(
+                `Offer ${offer.offer_number} status changed concurrently (current: ${result.current_status ?? "unknown"}). Please re-check and retry.`
+              );
+            }
+            return toErrorContent(result?.error ?? "Failed to update offer status");
           }
           return toResult({
             message: `Offer ${offer.offer_number} status changed from "${currentStatus}" to "${newStatus}"`,
             offer_number: offer.offer_number,
             previous_status: currentStatus,
-            new_status: newStatus
+            new_status: newStatus,
+            stamp: result.stamp
           });
         }
       );
@@ -36637,7 +36635,7 @@ function registerResources(server2) {
 }
 
 // src/version.ts
-var VERSION = "0.5.10";
+var VERSION = "0.6.0";
 
 // src/index.ts
 var INSTRUCTIONS_COMMON = `
@@ -36801,8 +36799,9 @@ var server = new McpServer(
 var TIER_LABELS = {
   free: "Ilmainen",
   entrepreneur: "Yritt\xE4j\xE4 (19 \u20AC/kk)",
+  growth: "Kasvu (39 \u20AC/kk)",
   company: "Tilitoimisto (97 \u20AC/kk)",
-  custom: "Custom"
+  custom: "R\xE4\xE4t\xE4l\xF6ity"
 };
 function getRegisteredToolCount(mcpServer) {
   return Object.keys(
@@ -36822,7 +36821,14 @@ function registerPrompts(mcpServer) {
       const [companyResult, fyResult, subResult] = await Promise.all([
         supabase2.from("companies").select("name, business_id, industry, address, postal_code, city").eq("id", companyId2).single(),
         supabase2.from("fiscal_years").select("start_date, end_date, is_closed").eq("company_id", companyId2).order("start_date", { ascending: false }),
-        supabase2.from("subscriptions").select("tier").eq("company_id", companyId2).maybeSingle()
+        // Tier is keyed by the subscription OWNER (user_id), not company_id.
+        // `subscriptions.company_id` is nullable and never populated by billing
+        // (stripe-webhook keys every write by user_id), so `.eq('company_id', …)`
+        // matched 0 rows and silently showed every paying customer "Ilmainen".
+        // The `subscriptions_select` RLS policy (user_id = auth.uid()) already
+        // scopes this to the caller's own row — no explicit user filter needed.
+        // Newest row wins if more than one exists.
+        supabase2.from("subscriptions").select("tier").order("created_at", { ascending: false }).limit(1).maybeSingle()
       ]);
       const company = companyResult.data;
       let companyBlock;

package/dist/lib/incomeStatementSynthesis.d.ts

@@ -0,0 +1,47 @@
+/**
+ * Income statement synthesis — calculated subtotals from leaf-line amounts.
+ *
+ * DUPLICATED BY INTENT from `src/hooks/useIncomeStatementCalculation.ts`
+ * (`synthesizeIncomeStatementLines`). The mcp-server is published as a
+ * separate npm package and cannot import from `src/`. The contract is:
+ *
+ *   Any change to the web hook's synthesis switch (line_code cases,
+ *   addends, sign conventions) MUST be mirrored here, and vice versa.
+ *
+ * Both paths consume the same `get_income_statement` RPC, which returns
+ * ONLY leaf rows (range-based line_codes). Calculated subtotals
+ * (LIIKEVOITTO, RAHOITUS_TOTAL, TILIKAUDEN_TULOS, ...) are synthesized
+ * client-side.
+ */
+import type { Database } from "../database.types.js";
+type IncomeStatementLineType = Database["public"]["Tables"]["income_statement_line_types"]["Row"];
+export interface CalculatedIncomeStatementLine {
+    lineCode: string;
+    lineName: string;
+    lineType: string | null;
+    indentLevel: number;
+    currentAmount: number;
+    previousAmount: number;
+    variance: number;
+    variancePercentage: number | null;
+    isCalculated: boolean;
+    signConvention: string | null;
+}
+export interface CalculationTotals {
+    liikevaihto: number;
+    liikevoitto: number;
+    voittoEnnenVeroja: number;
+    tilikausiTulos: number;
+}
+export interface SynthesisResult {
+    lines: CalculatedIncomeStatementLine[];
+    totals: CalculationTotals;
+}
+/**
+ * Synthesize calculated subtotals (LIIKEVOITTO, MATERIAALIT_TOTAL, ...)
+ * from pre-computed leaf-line amounts. Calculated subtotals are processed
+ * in lineTypes order (display_order); each subtotal MUST appear after its
+ * dependencies in the template.
+ */
+export declare function synthesizeIncomeStatementLines(lineTypes: IncomeStatementLineType[], currentByLine: Map<string, number>, previousByLine: Map<string, number>): SynthesisResult;
+export {};

package/dist/lib/incomeStatementSynthesis.js

@@ -0,0 +1,140 @@
+/**
+ * Synthesize calculated subtotals (LIIKEVOITTO, MATERIAALIT_TOTAL, ...)
+ * from pre-computed leaf-line amounts. Calculated subtotals are processed
+ * in lineTypes order (display_order); each subtotal MUST appear after its
+ * dependencies in the template.
+ */
+export function synthesizeIncomeStatementLines(lineTypes, currentByLine, previousByLine) {
+    // Defensive copy — we mutate during the calculated-subtotal pass below.
+    const lineAmounts = new Map(currentByLine);
+    const prevLineAmounts = new Map(previousByLine);
+    lineTypes.forEach((lineType) => {
+        if (!lineType.is_calculated)
+            return;
+        let currentAmount = 0;
+        let previousAmount = 0;
+        const get = (code) => lineAmounts.get(code) || 0;
+        const getPrev = (code) => prevLineAmounts.get(code) || 0;
+        switch (lineType.line_code) {
+            case "MATERIAALIT_TOTAL":
+                currentAmount =
+                    get("OSTOT_TILIKAUDEN") +
+                        get("VARASTOJEN_MUUTOS_OSTOT") +
+                        get("ULKOPUOLISET_PALVELUT");
+                previousAmount =
+                    getPrev("OSTOT_TILIKAUDEN") +
+                        getPrev("VARASTOJEN_MUUTOS_OSTOT") +
+                        getPrev("ULKOPUOLISET_PALVELUT");
+                break;
+            case "HENKILOSTO_TOTAL":
+                currentAmount =
+                    get("PALKAT_PALKKIOT") + get("ELAKEKULUT") + get("MUUT_HENKILOSIVUKULUT");
+                previousAmount =
+                    getPrev("PALKAT_PALKKIOT") +
+                        getPrev("ELAKEKULUT") +
+                        getPrev("MUUT_HENKILOSIVUKULUT");
+                break;
+            case "POISTOT_TOTAL":
+                currentAmount =
+                    get("SUUNNITELMAN_POISTOT") +
+                        get("ARVONALENT_PYSYVAT") +
+                        get("ARVONALENT_VAIHTUVAT");
+                previousAmount =
+                    getPrev("SUUNNITELMAN_POISTOT") +
+                        getPrev("ARVONALENT_PYSYVAT") +
+                        getPrev("ARVONALENT_VAIHTUVAT");
+                break;
+            case "LIIKEVOITTO":
+                currentAmount =
+                    get("LIIKEVAIHTO") +
+                        get("VARASTOJEN_MUUTOS") +
+                        get("VALMISTUS_OMAAN") +
+                        get("MUUT_TUOTOT") +
+                        get("MATERIAALIT_TOTAL") +
+                        get("HENKILOSTO_TOTAL") +
+                        get("POISTOT_TOTAL") +
+                        get("MUUT_KULUT");
+                previousAmount =
+                    getPrev("LIIKEVAIHTO") +
+                        getPrev("VARASTOJEN_MUUTOS") +
+                        getPrev("VALMISTUS_OMAAN") +
+                        getPrev("MUUT_TUOTOT") +
+                        getPrev("MATERIAALIT_TOTAL") +
+                        getPrev("HENKILOSTO_TOTAL") +
+                        getPrev("POISTOT_TOTAL") +
+                        getPrev("MUUT_KULUT");
+                break;
+            case "RAHOITUS_TOTAL":
+                currentAmount =
+                    get("TUOTOT_KONSERNI") +
+                        get("TUOTOT_OMISTUSYHTEYS") +
+                        get("TUOTOT_SIJOITUKSET") +
+                        get("MUUT_KORKOTUOTOT") +
+                        get("ARVONALENT_SIJOITUKSET") +
+                        get("ARVONALENT_RAHOITUS") +
+                        get("KORKOKULUT");
+                previousAmount =
+                    getPrev("TUOTOT_KONSERNI") +
+                        getPrev("TUOTOT_OMISTUSYHTEYS") +
+                        getPrev("TUOTOT_SIJOITUKSET") +
+                        getPrev("MUUT_KORKOTUOTOT") +
+                        getPrev("ARVONALENT_SIJOITUKSET") +
+                        getPrev("ARVONALENT_RAHOITUS") +
+                        getPrev("KORKOKULUT");
+                break;
+            case "VOITTO_ENNEN_SIIRTOJA":
+                currentAmount = get("LIIKEVOITTO") + get("RAHOITUS_TOTAL");
+                previousAmount = getPrev("LIIKEVOITTO") + getPrev("RAHOITUS_TOTAL");
+                break;
+            case "SIIRROT_TOTAL":
+                currentAmount =
+                    get("POISTOERON_MUUTOS") + get("VARAUSTEN_MUUTOS") + get("KONSERNIAVUSTUS");
+                previousAmount =
+                    getPrev("POISTOERON_MUUTOS") +
+                        getPrev("VARAUSTEN_MUUTOS") +
+                        getPrev("KONSERNIAVUSTUS");
+                break;
+            case "TILIKAUDEN_TULOS":
+                currentAmount =
+                    get("VOITTO_ENNEN_SIIRTOJA") +
+                        get("SIIRROT_TOTAL") +
+                        get("TULOVEROT") +
+                        get("MUUT_VEROT");
+                previousAmount =
+                    getPrev("VOITTO_ENNEN_SIIRTOJA") +
+                        getPrev("SIIRROT_TOTAL") +
+                        getPrev("TULOVEROT") +
+                        getPrev("MUUT_VEROT");
+                break;
+        }
+        lineAmounts.set(lineType.line_code, currentAmount);
+        prevLineAmounts.set(lineType.line_code, previousAmount);
+    });
+    const calculatedLines = lineTypes.map((lineType) => {
+        const currentAmount = lineAmounts.get(lineType.line_code) || 0;
+        const previousAmount = prevLineAmounts.get(lineType.line_code) || 0;
+        const variance = currentAmount - previousAmount;
+        const variancePercentage = previousAmount !== 0 ? (variance / Math.abs(previousAmount)) * 100 : null;
+        return {
+            lineCode: lineType.line_code,
+            lineName: lineType.line_name_fi,
+            lineType: lineType.line_type,
+            indentLevel: lineType.indent_level ?? 0,
+            currentAmount,
+            previousAmount,
+            variance,
+            variancePercentage,
+            isCalculated: lineType.is_calculated ?? false,
+            signConvention: lineType.sign_convention,
+        };
+    });
+    // `??` not `||` so a legitimate break-even 0 is preserved.
+    // Skill: fallback-chain-zero-respect.
+    const totals = {
+        liikevaihto: lineAmounts.get("LIIKEVAIHTO") ?? 0,
+        liikevoitto: lineAmounts.get("LIIKEVOITTO") ?? 0,
+        voittoEnnenVeroja: lineAmounts.get("VOITTO_ENNEN_SIIRTOJA") ?? 0,
+        tilikausiTulos: lineAmounts.get("TILIKAUDEN_TULOS") ?? 0,
+    };
+    return { lines: calculatedLines, totals };
+}

package/dist/resources/company.d.ts

@@ -0,0 +1,2 @@
+import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+export declare function registerCompanyResources(server: McpServer): void;

package/dist/resources/company.js

@@ -0,0 +1,75 @@
+import { getSupabase, getCompanyId } from '../auth.js';
+import { helsinkiDateString, sanitizeDbError } from '../utils.js';
+export function registerCompanyResources(server) {
+    server.registerResource('company-info', 'kirjapro://company/info', {
+        description: 'Current company details: name, business ID (Y-tunnus), address, and settings.',
+        mimeType: 'application/json',
+    }, async (uri) => {
+        const supabase = getSupabase();
+        const companyId = getCompanyId();
+        const { data: company, error } = await supabase
+            .from('companies')
+            .select('id, name, business_id, address, postal_code, city, country, created_at')
+            .eq('id', companyId)
+            .single();
+        // Don't swallow the error. An empty company object is indistinguishable
+        // from auth expiry, RLS denial, or PostgREST failure — and the agent
+        // would build decisions on a blank Y-tunnus. Surface the sanitized
+        // error so the agent can tell the user to re-auth or retry.
+        if (error || !company) {
+            return {
+                contents: [{
+                        uri: uri.href,
+                        mimeType: 'application/json',
+                        text: JSON.stringify({
+                            error: error
+                                ? sanitizeDbError('Failed to read company', error)
+                                : 'Company not found for current context.',
+                        }),
+                    }],
+            };
+        }
+        return {
+            contents: [{
+                    uri: uri.href,
+                    mimeType: 'application/json',
+                    text: JSON.stringify(company),
+                }],
+        };
+    });
+    server.registerResource('fiscal-years', 'kirjapro://fiscal-years', {
+        description: 'List of fiscal years (tilikaudet) for the company. Shows which are open/closed and their date ranges.',
+        mimeType: 'application/json',
+    }, async (uri) => {
+        const supabase = getSupabase();
+        const companyId = getCompanyId();
+        const { data: fiscalYears, error } = await supabase
+            .from('fiscal_years')
+            .select('id, start_date, end_date, is_closed, created_at')
+            .eq('company_id', companyId)
+            .order('start_date', { ascending: false });
+        if (error) {
+            return {
+                contents: [{
+                        uri: uri.href,
+                        mimeType: 'application/json',
+                        text: JSON.stringify({
+                            error: sanitizeDbError('Failed to read fiscal years', error),
+                        }),
+                    }],
+            };
+        }
+        const today = helsinkiDateString();
+        const enriched = (fiscalYears || []).map((fy) => ({
+            ...fy,
+            is_current: !fy.is_closed && fy.start_date <= today && fy.end_date >= today,
+        }));
+        return {
+            contents: [{
+                    uri: uri.href,
+                    mimeType: 'application/json',
+                    text: JSON.stringify(enriched),
+                }],
+        };
+    });
+}

package/dist/resources/compliance.d.ts

@@ -0,0 +1,2 @@
+import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+export declare function registerComplianceResources(server: McpServer): void;