@kirjapro/mcp-server 0.8.2 → 0.8.5

package/CHANGELOG.md

@@ -1,6 +1,62 @@
 # Changelog
 
-## [0.8.2] - Unreleased
+## [0.8.5] - 2026-09-29
+
+- `kirjapro_match_bank_transaction` returns the server's Finnish reason when
+  the bank confirmation rejects a match, for example a draft invoice, a
+  foreign-currency line, or a missing or closed fiscal year. Such confirmations
+  are no longer recorded with a skipped-journal warning. Postgres's own CHECK
+  violations keep the generic constraint message. The rejections come from
+  migration `20260928100000`, applied in production on 2026-09-28.
+- `kirjapro_record_payment` and `kirjapro_match_bank_transaction` return
+  `IDEMPOTENCY_OUTCOME_UNKNOWN` when the payment RPC's response is lost in
+  transit (a network failure, or a gateway 5xx without a database error code).
+  The request may have committed, so the idempotency claim stays unresolved
+  instead of caching a failure that invited a retry with a new key and a
+  second payment. The same key never records the payment again; the message
+  names the read tool to check first. Database errors with a code are still
+  cached as the operation's result.
+- Searches in `kirjapro_list_bank_transactions`, `kirjapro_list_customers`,
+  `kirjapro_list_received_invoices` and `kirjapro_list_accounts` find text
+  containing a comma or parentheses, such as "Virtanen, Matti". The search
+  value is now quoted in the PostgREST filter; it was percent-encoded twice
+  and matched nothing.
+- `kirjapro_update_invoice_status` offers only the changes the database
+  accepts without a dedicated command: a draft to `cancelled`, and a sent or
+  partially paid invoice to `overdue`. The `status` input no longer accepts
+  `sent`, `paid`, `partial` or `draft`; the invoice trigger rejected those
+  updates and sent/partial/overdue→cancelled as "Value violates a constraint".
+  Paid and partial statuses come from `kirjapro_record_payment` or
+  `kirjapro_match_bank_transaction`, also for an invoice paid outside Kirjapro.
+  `kirjapro_delete_invoice` and the server instructions now send a sent invoice
+  to a credit note in the web app instead of a cancellation that always failed.
+- `kirjapro_list_bank_transactions` returns each transaction's `currency` and
+  says that only EUR transactions can be matched to invoices. Its description
+  now lists `counterparty_iban` among the wrapped payer fields.
+- Server instructions: the bank-matching workflow looks for the open invoice
+  among `sent`, `overdue` and `partial` invoices and confirms its remaining
+  balance, and says only EUR transactions can be matched. The untrusted-data
+  rule no longer claims IBANs are unwrapped; payer and sender IBANs are
+  wrapped, as `kirjapro://security/data-handling` states.
+- External text can no longer close its `<untrusted-external>` wrapper early.
+  Embedded wrapper tags, including spaced variants, are stripped until none
+  remain, because removing one tag could join its neighbours into another
+  (`</untrusted-ext</untrusted-external>ernal>`). Prompt-injection markers are
+  redacted after the tags are gone, so a tag can no longer split one.
+- Review the fingerprints of `kirjapro_list_bank_transactions`,
+  `kirjapro_update_invoice_status` and `kirjapro_delete_invoice` for their
+  changed descriptions and status input.
+
+## [0.8.4] - 2026-09-25
+
+- Return the latest company-scoped financial-statement preparation snapshot in
+  the separate `preparation` field, including its profile, topic assessments,
+  revision and review status. This is a read-only view of preparation work;
+  a reviewed assessment does not mean a complete or signed financial statement.
+- Clarify the limitations of the existing financial-statement notes worksheet.
+- Synchronize generated database types with the deployed preparation schema.
+
+## [0.8.2] - 2026-09-23
 
 - Subtract finalized same-company credit notes from invoice-detail balances and
   manual/bank payment preflight. Preserve signed detail/manual-payment results,
@@ -19,8 +75,7 @@
   Preserve the company-scoped customer check and return errors for unavailable
   or invalid aggregate metrics instead of a zero summary.
 - Review affected tool fingerprints for the additive output fields and corrected
-  balance/payment descriptions. This work is local, accompanies the pending
-  credit-aware payment migrations, and has not been deployed or published.
+  balance/payment descriptions.
 
 ## [0.8.1] - 2026-09-05