@mgsoftwarebv/mcp-server-bridge 3.5.10 → 3.5.12

package/dist/index.js

@@ -3,7 +3,7 @@ import fs, { ReadStream, lstatSync, fstatSync, readFileSync, promises } from 'fs
 import os, { platform, release, homedir } from 'os';
 import { join, basename, dirname, sep as sep$1, normalize } from 'path';
 import * as crypto2 from 'crypto';
-import crypto2__default, { createHash, randomUUID, createSecretKey, KeyObject, constants, createHmac, createPrivateKey, createPublicKey, sign, getRandomValues } from 'crypto';
+import crypto2__default, { createHash, randomUUID, randomBytes, createSecretKey, KeyObject, constants, createHmac, createPrivateKey, createPublicKey, sign, getRandomValues } from 'crypto';
 import fs2, { readFile } from 'fs/promises';
 import Stream, { Readable, Writable, Duplex } from 'stream';
 import { Buffer as Buffer$1 } from 'buffer';
@@ -103467,7 +103467,9 @@ var customerRecurringServices = pgTable(
       mode: "string"
     }),
     // --- Lifecycle ---
-    // "active" | "paused" | "cancelled" | "ended"
+    // "draft" | "active" | "paused" | "cancelled" | "ended"
+    // "draft" = created but not yet activated (e.g. via MCP); excluded from
+    // all billing/due queries until a human activates it in the dashboard.
     status: text().$type().default("active").notNull(),
     startDate: timestamp("start_date", { withTimezone: true, mode: "string" }),
     // Planned end of the agreement (before cancellation/ended).
@@ -106574,7 +106576,7 @@ var TOOLS = [
   },
   {
     name: "get-document",
-    description: "Get a document by its ID, including metadata and the full blocks JSON. Use this before update-document to inspect the current structure.",
+    description: "Get a document by its ID, including metadata and the full blocks JSON. Use this before update-document to inspect the current structure. Also returns ready-to-use links (internal dashboard URL, PDF status, and a public link when the document is shared); use get-document-link for a PDF download or to publish a public customer link.",
     inputSchema: {
       type: "object",
       properties: {
@@ -106586,7 +106588,7 @@ var TOOLS = [
   },
   {
     name: "create-document",
-    description: 'Create a document (proposal, report, deliverables/opleverdocument, ...) from an array of content blocks. Use type \'deliverables\' for a document describing what was delivered for a customer; optionally pass `invoiceId` to link it to an invoice so it can be sent along as a PDF attachment. Each block is `{ id?, type, data }` (ids are auto-generated when omitted). Supported block types and their `data` shapes:\n- cover: { title, subtitle?, showLogo: bool, showDate: bool, clientName?, clientCompany?, date? }\n- toc: { title, maxDepth: 1-6 }\n- heading: { text, level: 1|2|3, numbered: bool }\n- text: { content: TipTapDoc | plain string (auto-converted; supports paragraphs and "- " bullet lists) }\n- callout: { variant: "info"|"warning"|"tip"|"important", title?, content: TipTapDoc | string }\n- table: { title?, headers: string[], rows: string[][] }\n- chart: { title?, chartType: "bar"|"line"|"pie", points: [{label, value}], seriesName?, series?: [{name, color?, points: [{label, value}]}], unit? ("\u20AC"|"%"|...), showValues: bool, color? }. Multi-series (bar/line only): extra series values are matched to the primary points by index; a legend is rendered automatically.\n- pricing: { title?, items: [{description, quantity?, unit?, price}], currency: "EUR", showTotal: bool, vatRate?, includeVat: bool }\n- timeline: { title?, phases: [{name, description?, duration, deliverables?: string[]}] }\n- two_column: { left: TipTapDoc|string, right: TipTapDoc|string, ratio?: "50_50"|"60_40"|"40_60"|"70_30"|"30_70" }\n- divider: { style: "page_break"|"line"|"space" }\n- signature: { title?, description?, signers: [{id, label, name?, company?, role?}] }\nAll text content runs through a humanizer that strips AI-sounding patterns (em-dashes, clich\xE9s, filler phrases); control it with `humanize`.',
+    description: 'Create a document (proposal, report, deliverables/opleverdocument, ...) from an array of content blocks. Use type \'deliverables\' for a document describing what was delivered for a customer; optionally pass `invoiceId` to link it to an invoice so it can be sent along as a PDF attachment. Each block is `{ id?, type, data }` (ids are auto-generated when omitted). Supported block types and their `data` shapes:\n- cover: { title, subtitle?, showLogo: bool, showDate: bool, clientName?, clientCompany?, date? }\n- toc: { title, maxDepth: 1-6 }\n- heading: { text, level: 1|2|3, numbered: bool }\n- text: { content: TipTapDoc | plain string (auto-converted; supports paragraphs and "- " bullet lists) }\n- callout: { variant: "info"|"warning"|"tip"|"important", title?, content: TipTapDoc | string }\n- table: { title?, headers: string[], rows: string[][] }\n- chart: { title?, chartType: "bar"|"line"|"pie", points: [{label, value}], seriesName?, series?: [{name, color?, points: [{label, value}]}], unit? ("\u20AC"|"%"|...), showValues: bool, color? }. Multi-series (bar/line only): extra series values are matched to the primary points by index; a legend is rendered automatically.\n- pricing: { title?, items: [{description, quantity?, unit?, price}], currency: "EUR", showTotal: bool, vatRate?, includeVat: bool }\n- timeline: { title?, phases: [{name, description?, duration, deliverables?: string[]}] }\n- two_column: { left: TipTapDoc|string, right: TipTapDoc|string, ratio?: "50_50"|"60_40"|"40_60"|"70_30"|"30_70" }\n- divider: { style: "page_break"|"line"|"space" }\n- signature: { title?, description?, signers: [{id, label, name?, company?, role?}] }\nAll text content runs through a humanizer that strips AI-sounding patterns (em-dashes, clich\xE9s, filler phrases); control it with `humanize`. The result includes ready-to-use links (internal dashboard editor URL + PDF status). Use get-document-link afterwards for a PDF download link or to publish a public customer share link.',
     inputSchema: {
       type: "object",
       properties: {
@@ -106630,7 +106632,7 @@ var TOOLS = [
   },
   {
     name: "update-document",
-    description: 'Update an existing document: change title/status/customer/invoice link, replace all blocks (`blocks`), append blocks to the end (`appendBlocks`), or apply targeted per-block edits (`blockOps`). Use `blockOps` for surgical edits without resending the whole document: each op targets an existing block id (see get-document for ids) and ops are applied in order. Op shapes: { op: "insert", blockId, position?: "before"|"after" (default "after"), blocks: [...] } | { op: "replace", blockId, blocks: [one block] } | { op: "remove", blockId }. Block shapes are identical to create-document. Provided blocks run through the humanizer (see `humanize`).',
+    description: 'Update an existing document: change title/status/customer/invoice link, replace all blocks (`blocks`), append blocks to the end (`appendBlocks`), or apply targeted per-block edits (`blockOps`). Use `blockOps` for surgical edits without resending the whole document: each op targets an existing block id (see get-document for ids) and ops are applied in order. Op shapes: { op: "insert", blockId, position?: "before"|"after" (default "after"), blocks: [...] } | { op: "replace", blockId, blocks: [one block] } | { op: "remove", blockId }. Block shapes are identical to create-document. Provided blocks run through the humanizer (see `humanize`). The result includes ready-to-use links (internal dashboard URL + PDF status); use get-document-link for a PDF download link or a public customer share link.',
     inputSchema: {
       type: "object",
       properties: {
@@ -106710,6 +106712,24 @@ var TOOLS = [
       required: ["id"]
     }
   },
+  {
+    name: "get-document-link",
+    description: "Get usable links for a document so you can hand them back in chat. `linkType` selects what you get:\n- dashboard (default): the internal, login-required editor link, the PDF status, and an existing public link when one is active. For logged-in Refront users.\n- pdf: a PDF download link (no login; the endpoint streams the file via a short-lived signed URL). Triggers a compile when no fresh PDF exists yet, so the link may need a few seconds before it serves the PDF.\n- public_share: ENABLES a public customer share \u2014 sets a share token + visibility=public and triggers a PDF compile \u2014 then returns the /p/<token> link that is safe to send to a customer (e.g. via Telegram). Reuses an existing token so previously shared links keep working. Use only when the document may be shared publicly.\nNever present the dashboard link as a public/customer link: it requires a Refront login.",
+    inputSchema: {
+      type: "object",
+      properties: {
+        teamId: teamIdProp,
+        id: { type: "string", description: "Document ID" },
+        linkType: {
+          type: "string",
+          enum: ["dashboard", "pdf", "public_share"],
+          default: "dashboard",
+          description: "dashboard = internal editor link (login required); pdf = PDF download link; public_share = enable + return a public customer link."
+        }
+      },
+      required: ["id"]
+    }
+  },
   {
     name: "get-invoices",
     description: "List invoices with optional filtering by customer, status, or a search on invoice number / customer name. Use `get-invoice-by-id` for full detail including line items, product snapshots and linked documents. Use this listing to find a (draft) invoice before linking a deliverables document with `invoiceId` on create-document or link-document-to-invoice.",
@@ -107279,6 +107299,89 @@ var TOOLS = [
       required: []
     }
   },
+  {
+    name: "create-time-entries",
+    description: "Create one or more individual tracked time entries (urenregels), one timesheet event per date, so dated hours land as separate draft lines (reliable for agenda/urenoverzicht/facturatie) instead of one lumped log-hours entry. Top-level projectId/ticketId/userId/description/billable/status act as shared defaults; each entry in `entries` can override them. Each entry is stored at 09:00 Europe/Amsterdam on its date for the given number of hours. Processing is per-entry: the result reports created lines, skipped duplicates (same user/team/date/project/description unless allowDuplicate) and per-entry errors, plus totalHours. Dates must be ISO YYYY-MM-DD (normalise relative/partial dates before calling). Use get-projects / get-tickets to resolve ids first; for reading/totalling existing hours use get-time-entries.",
+    inputSchema: {
+      type: "object",
+      properties: {
+        teamId: teamIdProp,
+        projectId: {
+          type: "string",
+          description: "Shared project UUID applied to every entry (an entry's own projectId overrides it)."
+        },
+        ticketId: {
+          type: "string",
+          description: "Shared ticket UUID linked to every entry (an entry's own ticketId overrides it)."
+        },
+        userId: {
+          type: "string",
+          description: "User the entries are booked for. Defaults to the API key user; pass a user UUID to book for another team member (must be a member of the entry's team)."
+        },
+        description: {
+          type: "string",
+          description: "Shared description used for entries that do not set their own."
+        },
+        billable: {
+          type: "boolean",
+          default: true,
+          description: "Shared billable default. true -> billable (to_bill), false -> unbillable."
+        },
+        status: {
+          type: "string",
+          enum: ["draft", "confirmed", "submitted"],
+          default: "draft",
+          description: "Shared status default. 'submitted' is treated as 'confirmed'."
+        },
+        allowDuplicate: {
+          type: "boolean",
+          default: false,
+          description: "When false (default) an entry matching an existing line (same user/team/date/project/description) is skipped with a warning instead of creating a duplicate."
+        },
+        entries: {
+          type: "array",
+          minItems: 1,
+          description: "The dated hour lines to create (one timesheet event each).",
+          items: {
+            type: "object",
+            properties: {
+              date: {
+                type: "string",
+                description: "Calendar date of the hours (YYYY-MM-DD, Europe/Amsterdam)."
+              },
+              hours: {
+                type: "number",
+                description: "Worked hours for this date (e.g. 8 or 2.5). Must be > 0."
+              },
+              description: {
+                type: "string",
+                description: "Line description. Falls back to the shared top-level description."
+              },
+              projectId: {
+                type: "string",
+                description: "Project override for this line."
+              },
+              ticketId: {
+                type: "string",
+                description: "Ticket link override for this line."
+              },
+              billable: {
+                type: "boolean",
+                description: "Billable override for this line."
+              },
+              status: {
+                type: "string",
+                enum: ["draft", "confirmed", "submitted"],
+                description: "Status override for this line."
+              }
+            },
+            required: ["date", "hours"]
+          }
+        }
+      },
+      required: ["entries"]
+    }
+  },
   {
     name: "get-trips",
     description: "List trips / kilometer registration entries (rides) scoped to your provider team(s), with optional filters by period (dateFrom/dateTo), user, project, customer, trip type (business/private), billing type, and invoiced status. Returns each trip's id, date, start/end location, distance (km), odometer readings, trip type, billing type, rate/amount, linked user/project/customer/invoice/vehicle, plus aggregate business/private/total km and total amount.",
@@ -107490,7 +107593,7 @@ var TOOLS = [
         customerId: { type: "string", description: "Filter by customer UUID" },
         status: {
           type: "string",
-          enum: ["active", "paused", "cancelled", "ended"],
+          enum: ["draft", "active", "paused", "cancelled", "ended"],
           description: "Filter by agreement status"
         }
       }
@@ -107498,7 +107601,7 @@ var TOOLS = [
   },
   {
     name: "create-customer-agreement",
-    description: "Create a customer-specific product agreement between catalog and billing. Snapshots price, discount, clause and invoice line text without mutating the catalog product.",
+    description: "Create a customer-specific product agreement as a DRAFT. Snapshots price, discount, clause and invoice line text without mutating the catalog product. Drafts are never invoiced; a human activates them in the dashboard. A draft can still be edited via update-customer-agreement, but once activated it is locked for MCP writes.",
     inputSchema: {
       type: "object",
       properties: {
@@ -107534,7 +107637,7 @@ var TOOLS = [
   },
   {
     name: "update-customer-agreement",
-    description: "Update an existing customer product agreement by id.",
+    description: "Update a customer product agreement by id. Allowed ONLY while it is a DRAFT; once activated it is locked and this tool returns an error. It cannot change status (activation is a dashboard action) and there is no delete tool by design.",
     inputSchema: {
       type: "object",
       properties: {
@@ -107555,11 +107658,7 @@ var TOOLS = [
         startDate: { type: "string" },
         endDate: { type: "string" },
         contractPeriodEnd: { type: "string" },
-        proRataFirstInvoice: { type: "boolean" },
-        status: {
-          type: "string",
-          enum: ["active", "paused", "cancelled", "ended"]
-        }
+        proRataFirstInvoice: { type: "boolean" }
       },
       required: ["id"]
     }
@@ -107784,7 +107883,8 @@ function parseDueDate(dueDate) {
   const dateOnly = dueDate.split("T")[0];
   return {
     startTime: `${dateOnly}T00:00:00.000Z`,
-    endTime: `${dateOnly}T23:59:59.999Z`
+    endTime: `${dateOnly}T23:59:59.999Z`,
+    allDay: true
   };
 }
 function resolveEventTimes(input) {
@@ -108853,16 +108953,33 @@ async function handleCreateCustomerAgreement(input) {
     endDate: input.endDate ?? null,
     contractPeriodEnd: input.contractPeriodEnd ?? null,
     proRataFirstInvoice: input.proRataFirstInvoice ?? false,
-    status: "active"
+    // MCP-created agreements start as a draft; a human activates them in the
+    // dashboard. Drafts are excluded from every billing/due query.
+    status: "draft"
   }).returning();
-  return textResponse2(`Created customer agreement:
+  return textResponse2(
+    `Created customer agreement as **draft**. It will not be invoiced until a human activates it in the dashboard. You can keep editing it via update-customer-agreement while it stays a draft.
 
-${formatAgreement(row)}`);
+${formatAgreement(row)}`
+  );
 }
 async function handleUpdateCustomerAgreement(input) {
   const scope = await resolveTeamScope(input.teamId);
   if (!scope.ok) return scope.response;
-  const teamId = scope.teamIds[0];
+  const [existing] = await db.select().from(schema_exports.customerRecurringServices).where(
+    and(
+      eq(schema_exports.customerRecurringServices.id, input.id),
+      inArray(schema_exports.customerRecurringServices.teamId, scope.teamIds)
+    )
+  ).limit(1);
+  if (!existing) {
+    return textResponse2("Agreement not found.");
+  }
+  if (existing.status !== "draft") {
+    return textResponse2(
+      `This agreement is '${existing.status}' and is locked: only drafts can be edited via MCP. Activation and any change to a live agreement happen in the dashboard.`
+    );
+  }
   const patch = {
     updatedAt: (/* @__PURE__ */ new Date()).toISOString()
   };
@@ -108886,20 +109003,29 @@ async function handleUpdateCustomerAgreement(input) {
     patch.contractPeriodEnd = input.contractPeriodEnd;
   if (input.proRataFirstInvoice !== void 0)
     patch.proRataFirstInvoice = input.proRataFirstInvoice;
-  if (input.status !== void 0) patch.status = input.status;
   const [row] = await db.update(schema_exports.customerRecurringServices).set(patch).where(
     and(
       eq(schema_exports.customerRecurringServices.id, input.id),
-      eq(schema_exports.customerRecurringServices.teamId, teamId)
+      inArray(schema_exports.customerRecurringServices.teamId, scope.teamIds)
     )
   ).returning();
   if (!row) {
     return textResponse2("Agreement not found.");
   }
-  return textResponse2(`Updated customer agreement:
+  return textResponse2(`Updated draft agreement:
 
 ${formatAgreement(row)}`);
 }
+function computeDocumentContentHash(params) {
+  const payload = JSON.stringify({
+    blocks: params.blocks ?? [],
+    branding: params.branding ?? {},
+    locale: params.locale,
+    pageSize: params.pageSize,
+    title: params.title
+  });
+  return createHash("sha256").update(payload, "utf8").digest("hex");
+}
 
 // ../document/src/humanizer/rules.ts
 var REPLACEMENTS = [
@@ -109604,8 +109730,6 @@ function ensureTipTapFormat(text3) {
   if (isTipTapJson(text3)) return text3;
   return JSON.stringify(plainTextToTipTap(text3));
 }
-
-// src/tools/documents.ts
 var DOCUMENT_TYPES = [
   "proposal",
   "plan_of_action",
@@ -109616,6 +109740,54 @@ var DOCUMENT_TYPES = [
   "other"
 ];
 var DOCUMENT_STATUSES = ["draft", "published", "archived"];
+var DOCUMENT_LINK_TYPES = ["dashboard", "pdf", "public_share"];
+var DASHBOARD_BASE_URL = process.env.DASHBOARD_URL || "https://app.refront.nl";
+function documentDashboardUrl(id) {
+  return `${DASHBOARD_BASE_URL}/quotations/documents?documentId=${id}&editDocument=true`;
+}
+function documentPdfUrl(opts) {
+  return opts.token ? `${DASHBOARD_BASE_URL}/api/download/document?documentToken=${encodeURIComponent(opts.token)}` : `${DASHBOARD_BASE_URL}/api/download/document?id=${opts.id}`;
+}
+function documentPublicShareUrl(token) {
+  return `${DASHBOARD_BASE_URL}/p/${encodeURIComponent(token)}`;
+}
+function computePdfStatus(doc) {
+  const currentHash = computeDocumentContentHash({
+    blocks: doc.blocks,
+    branding: doc.branding,
+    pageSize: doc.pageSize,
+    locale: doc.locale,
+    title: doc.title
+  });
+  const fresh = doc.compiledHash === currentHash;
+  if (doc.filePath) return fresh ? "ready" : "stale";
+  return fresh ? "pending" : "none";
+}
+var PDF_STATUS_LABEL = {
+  ready: "ready",
+  stale: "stale (recompiles on open/download)",
+  pending: "compiling\u2026",
+  none: "not compiled yet"
+};
+function buildLinksSection(doc, opts) {
+  let status = computePdfStatus(doc);
+  if (opts?.compileTriggered && status !== "ready") status = "pending";
+  const lines = [
+    "Links:",
+    `- Dashboard (internal, login required): ${documentDashboardUrl(doc.id)}`,
+    `- PDF: ${PDF_STATUS_LABEL[status]}${status === "ready" ? ` \u2014 ${documentPdfUrl({ id: doc.id, token: doc.token })}` : ""}`
+  ];
+  if (doc.token && doc.shareVisibility === "public") {
+    lines.push(
+      `- Public share (no login, safe to send to a customer): ${documentPublicShareUrl(doc.token)}`
+    );
+  } else {
+    lines.push(
+      "- Public share: not shared \u2014 call get-document-link with linkType=public_share to publish a customer link."
+    );
+  }
+  return lines.join("\n");
+}
 var blockIdCounter = 0;
 function generateBlockId() {
   blockIdCounter++;
@@ -109906,6 +110078,8 @@ Type: ${doc.type} | Status: ${doc.status} | Locale: ${doc.locale}
 Team: ${doc.teamId}${doc.customerId ? ` | Customer: ${doc.customerId}` : ""}${doc.invoiceId ? ` | Invoice: ${doc.invoiceId}` : ""}
 Blocks (${blocks.length}): ${blockTypeSummary(blocks) || "none"}
 
+${buildLinksSection(doc)}
+
 Blocks JSON:
 \`\`\`json
 ${JSON.stringify(blocks, null, 2)}
@@ -109914,6 +110088,104 @@ ${JSON.stringify(blocks, null, 2)}
     ]
   };
 }
+async function handleGetDocumentLink(input) {
+  if (!input.id) {
+    return { content: [{ type: "text", text: "Error: `id` is required." }] };
+  }
+  const linkType = input.linkType ?? "dashboard";
+  if (!DOCUMENT_LINK_TYPES.includes(linkType)) {
+    return {
+      content: [
+        {
+          type: "text",
+          text: `Error: invalid linkType "${linkType}". Allowed: ${DOCUMENT_LINK_TYPES.join(", ")}.`
+        }
+      ]
+    };
+  }
+  const scope = await resolveTeamScope(input.teamId);
+  if (!scope.ok) return scope.response;
+  const doc = await findAccessibleDocument(input.id, scope.teamIds);
+  if (!doc) {
+    return {
+      content: [
+        {
+          type: "text",
+          text: `Document ${input.id} not found or you don't have access to it.`
+        }
+      ]
+    };
+  }
+  const header = `**${doc.title}**
+ID: ${doc.id}
+Status: ${doc.status} | Visibility: ${doc.shareVisibility}
+
+`;
+  const freshHash = computeDocumentContentHash({
+    blocks: doc.blocks,
+    branding: doc.branding,
+    pageSize: doc.pageSize,
+    locale: doc.locale,
+    title: doc.title
+  });
+  if (linkType === "public_share") {
+    const alreadyPublic = Boolean(doc.token) && doc.shareVisibility === "public";
+    const token = doc.token ?? randomBytes(32).toString("base64url");
+    const needsCompile = computePdfStatus(doc) !== "ready";
+    const patch = {
+      token,
+      shareVisibility: "public",
+      updatedAt: (/* @__PURE__ */ new Date()).toISOString()
+    };
+    if (needsCompile) {
+      patch.filePath = null;
+      patch.fileSize = null;
+      patch.compiledHash = freshHash;
+    }
+    await db.update(schema_exports.documents).set(patch).where(eq(schema_exports.documents.id, doc.id));
+    const pdfLine = needsCompile ? `
+${await maybeTriggerPdfCompile(doc.id, doc.teamId)}` : "";
+    return {
+      content: [
+        {
+          type: "text",
+          text: header + `${alreadyPublic ? "Public share already enabled." : "\u2705 Public share enabled (visibility \u2192 public)."}
+Public link (no login, safe to send to a customer): ${documentPublicShareUrl(token)}
+PDF download: ${documentPdfUrl({ id: doc.id, token })}
+PDF status: ${needsCompile ? "compiling\u2026 (ready shortly)" : "ready"}` + pdfLine
+        }
+      ]
+    };
+  }
+  if (linkType === "pdf") {
+    let status = computePdfStatus(doc);
+    let pdfLine = "";
+    if (status === "none" || status === "stale") {
+      await db.update(schema_exports.documents).set({
+        filePath: null,
+        fileSize: null,
+        compiledHash: freshHash,
+        updatedAt: (/* @__PURE__ */ new Date()).toISOString()
+      }).where(eq(schema_exports.documents.id, doc.id));
+      pdfLine = `
+${await maybeTriggerPdfCompile(doc.id, doc.teamId)}`;
+      status = "pending";
+    }
+    return {
+      content: [
+        {
+          type: "text",
+          text: header + `PDF status: ${PDF_STATUS_LABEL[status]}
+PDF download: ${documentPdfUrl({ id: doc.id, token: doc.token })}
+The endpoint streams the PDF via a short-lived signed storage URL and recompiles on demand if needed.` + pdfLine
+        }
+      ]
+    };
+  }
+  return {
+    content: [{ type: "text", text: header + buildLinksSection(doc) }]
+  };
+}
 async function handleCreateDocument(input) {
   const {
     title,
@@ -109994,6 +110266,21 @@ async function handleCreateDocument(input) {
     };
   }
   const pdfLine = compilePdf ? await maybeTriggerPdfCompile(created.id, resolved.teamId) : null;
+  const linksSection = buildLinksSection(
+    {
+      id: created.id,
+      title: title.trim(),
+      blocks: humanized.blocks,
+      branding: {},
+      pageSize: "a4",
+      locale,
+      filePath: null,
+      compiledHash: null,
+      token: null,
+      shareVisibility: "private"
+    },
+    { compileTriggered: compilePdf && Boolean(process.env.TRIGGER_SECRET_KEY) }
+  );
   return {
     content: [
       {
@@ -110008,7 +110295,9 @@ ${invoiceLine ? `${invoiceLine}
 ` : ""}Blocks (${humanized.blocks.length}): ${blockTypeSummary(humanized.blocks)}
 
 ${humanized.summary}${pdfLine ? `
-${pdfLine}` : ""}`
+${pdfLine}` : ""}
+
+` + linksSection
       }
     ]
   };
@@ -110171,6 +110460,22 @@ async function handleUpdateDocument(input) {
   }
   await db.update(schema_exports.documents).set(patch).where(eq(schema_exports.documents.id, doc.id));
   const pdfLine = compilePdf ? await maybeTriggerPdfCompile(doc.id, doc.teamId) : null;
+  const linksSection = buildLinksSection(
+    {
+      id: doc.id,
+      title: patch.title ?? doc.title,
+      status: patch.status ?? doc.status,
+      blocks: patch.blocks ?? doc.blocks,
+      branding: doc.branding,
+      pageSize: doc.pageSize,
+      locale: doc.locale,
+      filePath: doc.filePath,
+      compiledHash: doc.compiledHash,
+      token: doc.token,
+      shareVisibility: doc.shareVisibility
+    },
+    { compileTriggered: compilePdf && Boolean(process.env.TRIGGER_SECRET_KEY) }
+  );
   return {
     content: [
       {
@@ -110181,7 +110486,9 @@ ID: ${doc.id}
 ${changeLines.map((l4) => `- ${l4}`).join("\n")}${humanizeSummary ? `
 
 ${humanizeSummary}` : ""}${pdfLine ? `
-${pdfLine}` : ""}`
+${pdfLine}` : ""}
+
+` + linksSection
       }
     ]
   };
@@ -114432,6 +114739,278 @@ async function handleGetTimeEntries(input) {
     entriesTruncated: entryCount > entries.length
   });
 }
+var MAX_CREATE_ENTRIES = 100;
+var DEFAULT_START_HOUR = "09:00:00";
+function mapCreateStatus(status) {
+  if (status == null) return "draft";
+  if (status === "draft") return "draft";
+  if (status === "confirmed" || status === "submitted") return "confirmed";
+  return null;
+}
+function isValidIsoDate(value) {
+  if (!/^\d{4}-\d{2}-\d{2}$/.test(value)) return false;
+  const parsed = /* @__PURE__ */ new Date(`${value}T00:00:00Z`);
+  if (Number.isNaN(parsed.getTime())) return false;
+  return parsed.toISOString().slice(0, 10) === value;
+}
+async function handleCreateTimeEntries(input) {
+  const ctx = getAuthContext();
+  const te = schema_exports.timesheetEvents;
+  if (!Array.isArray(input.entries) || input.entries.length === 0) {
+    return textResponse3(
+      "Error: `entries` must be a non-empty array of { date, hours, description? } objects."
+    );
+  }
+  if (input.entries.length > MAX_CREATE_ENTRIES) {
+    return textResponse3(
+      `Error: too many entries (${input.entries.length}). Max ${MAX_CREATE_ENTRIES} per call.`
+    );
+  }
+  const sharedStatus = mapCreateStatus(input.status);
+  if (sharedStatus === null) {
+    return textResponse3(
+      `Error: invalid status "${input.status}". Allowed: draft, confirmed (submitted is treated as confirmed).`
+    );
+  }
+  const scope = await resolveTeamScope(input.teamId);
+  if (!scope.ok) return scope.response;
+  if (scope.teamIds.length === 0) {
+    return textResponse3("No accessible teams found.");
+  }
+  const projectIds = /* @__PURE__ */ new Set();
+  const ticketIds = /* @__PURE__ */ new Set();
+  if (input.projectId) projectIds.add(input.projectId);
+  if (input.ticketId) ticketIds.add(input.ticketId);
+  for (const entry of input.entries) {
+    if (entry?.projectId) projectIds.add(entry.projectId);
+    if (entry?.ticketId) ticketIds.add(entry.ticketId);
+  }
+  const projectMap = /* @__PURE__ */ new Map();
+  for (const projectId of projectIds) {
+    if (!scope.projectIds.includes(projectId)) {
+      return textResponse3(
+        `Project not found or no access: ${projectId}. Call get-projects first.`
+      );
+    }
+    const [project] = await db.select({
+      id: schema_exports.projects.id,
+      name: schema_exports.projects.name,
+      teamId: schema_exports.projects.teamId
+    }).from(schema_exports.projects).where(eq(schema_exports.projects.id, projectId)).limit(1);
+    if (!project) return textResponse3(`Project not found: ${projectId}.`);
+    projectMap.set(projectId, project);
+  }
+  const ticketMap = /* @__PURE__ */ new Map();
+  for (const ticketId of ticketIds) {
+    const [ticket] = await db.select({
+      id: schema_exports.tickets.id,
+      title: schema_exports.tickets.title,
+      teamId: schema_exports.tickets.teamId,
+      projectId: schema_exports.tickets.projectId,
+      customerId: schema_exports.tickets.customerId
+    }).from(schema_exports.tickets).where(eq(schema_exports.tickets.id, ticketId)).limit(1);
+    if (!ticket) {
+      return textResponse3(`Ticket not found: ${ticketId}. Call get-tickets first.`);
+    }
+    let hasAccess = scope.teamIds.includes(ticket.teamId);
+    if (!hasAccess && ticket.projectId)
+      hasAccess = scope.projectIds.includes(ticket.projectId);
+    if (!hasAccess && ticket.customerId)
+      hasAccess = scope.customerIds.includes(ticket.customerId);
+    if (!hasAccess) {
+      return textResponse3(`No access to ticket: ${ticketId}. Call get-tickets first.`);
+    }
+    ticketMap.set(ticketId, ticket);
+  }
+  const needsFallbackTeam = input.entries.some((entry) => {
+    const ticketId = entry?.ticketId ?? input.ticketId;
+    const projectId = entry?.projectId ?? input.projectId;
+    const ticket = ticketId ? ticketMap.get(ticketId) : null;
+    const project = projectId ? projectMap.get(projectId) : null;
+    return !(ticket?.teamId ?? project?.teamId);
+  });
+  let fallbackTeamId = null;
+  if (needsFallbackTeam) {
+    const resolved = await resolveTeamId(input.teamId);
+    if (!resolved.ok) return resolved.response;
+    fallbackTeamId = resolved.teamId;
+  }
+  const rawUserId = input.userId?.trim();
+  const targetUserId = !rawUserId || rawUserId === "me" ? ctx.userId : rawUserId;
+  const membershipCache = /* @__PURE__ */ new Map();
+  const isTargetMember = async (teamId) => {
+    if (targetUserId === ctx.userId) return true;
+    const cached3 = membershipCache.get(teamId);
+    if (cached3 !== void 0) return cached3;
+    const member2 = await isUserTeamMember(targetUserId, teamId);
+    membershipCache.set(teamId, member2);
+    return member2;
+  };
+  const created = [];
+  const skipped = [];
+  const errors = [];
+  for (let index2 = 0; index2 < input.entries.length; index2++) {
+    const entry = input.entries[index2];
+    const date10 = typeof entry?.date === "string" ? entry.date.trim() : "";
+    try {
+      if (!entry || typeof entry !== "object") {
+        errors.push({ index: index2, date: null, message: "Entry must be an object." });
+        continue;
+      }
+      if (!isValidIsoDate(date10)) {
+        errors.push({
+          index: index2,
+          date: date10 || null,
+          message: "Invalid or missing `date`; expected YYYY-MM-DD."
+        });
+        continue;
+      }
+      const hours = toNumber(entry.hours);
+      if (!(hours > 0)) {
+        errors.push({
+          index: index2,
+          date: date10,
+          message: "`hours` must be a number greater than 0."
+        });
+        continue;
+      }
+      if (hours > 24) {
+        errors.push({
+          index: index2,
+          date: date10,
+          message: "`hours` must not exceed 24 for a single day."
+        });
+        continue;
+      }
+      const description = (entry.description ?? input.description ?? "").trim();
+      if (!description) {
+        errors.push({
+          index: index2,
+          date: date10,
+          message: "A description is required (set entry.description or a shared description)."
+        });
+        continue;
+      }
+      const status = entry.status === void 0 ? sharedStatus : mapCreateStatus(entry.status);
+      if (status === null) {
+        errors.push({
+          index: index2,
+          date: date10,
+          message: `Invalid status "${entry.status}". Allowed: draft, confirmed.`
+        });
+        continue;
+      }
+      const billable = entry.billable ?? input.billable ?? true;
+      const billingStatus = billable ? "to_bill" : "unbillable";
+      const ticketId = entry.ticketId ?? input.ticketId ?? null;
+      const projectId = entry.projectId ?? input.projectId ?? null;
+      const ticket = ticketId ? ticketMap.get(ticketId) : null;
+      const project = projectId ? projectMap.get(projectId) : null;
+      const insertTeamId = ticket?.teamId ?? project?.teamId ?? fallbackTeamId;
+      if (!insertTeamId) {
+        errors.push({
+          index: index2,
+          date: date10,
+          message: "Could not resolve a team for this entry; pass teamId, projectId or ticketId."
+        });
+        continue;
+      }
+      if (!await isTargetMember(insertTeamId)) {
+        errors.push({
+          index: index2,
+          date: date10,
+          message: `User ${targetUserId} is not a member of team ${insertTeamId}.`
+        });
+        continue;
+      }
+      const effectiveProjectId = project?.id ?? ticket?.projectId ?? null;
+      if (!input.allowDuplicate) {
+        const dupConditions = [
+          eq(te.teamId, insertTeamId),
+          eq(te.userId, targetUserId),
+          eq(te.isDeleted, false),
+          sql`(${te.startTime} AT TIME ZONE ${sql.raw(`'${TIMEZONE}'`)})::date = ${date10}::date`,
+          sql`lower(${te.title}) = lower(${description})`
+        ];
+        dupConditions.push(
+          effectiveProjectId ? eq(te.projectId, effectiveProjectId) : sql`${te.projectId} IS NULL`
+        );
+        const [dup] = await db.select({ id: te.id }).from(te).where(and(...dupConditions)).limit(1);
+        if (dup) {
+          skipped.push({
+            index: index2,
+            date: date10,
+            hours: Math.round(hours * 100) / 100,
+            description,
+            reason: "duplicate",
+            existingId: dup.id
+          });
+          continue;
+        }
+      }
+      const localStart = `${date10} ${DEFAULT_START_HOUR}`;
+      const startExpr = sql`(${localStart}::timestamp AT TIME ZONE ${sql.raw(`'${TIMEZONE}'`)})`;
+      const endExpr = sql`(${startExpr} + ${`${hours} hours`}::interval)`;
+      const [row] = await db.insert(te).values({
+        teamId: insertTeamId,
+        userId: targetUserId,
+        title: description,
+        description,
+        type: "work",
+        status,
+        startTime: startExpr,
+        endTime: endExpr,
+        allDay: false,
+        isTracked: true,
+        trackedDuration: Math.round(hours * 3600),
+        projectId: effectiveProjectId,
+        customerId: ticket?.customerId ?? null,
+        billingStatus
+      }).returning({ id: te.id });
+      if (!row) {
+        errors.push({ index: index2, date: date10, message: "Insert failed." });
+        continue;
+      }
+      if (ticketId) {
+        await db.insert(schema_exports.timesheetEventTickets).values({ timesheetEventId: row.id, ticketId }).onConflictDoNothing();
+      }
+      created.push({
+        id: row.id,
+        date: date10,
+        hours: Math.round(hours * 100) / 100,
+        description,
+        status,
+        billable,
+        project: effectiveProjectId ? {
+          id: effectiveProjectId,
+          name: projectMap.get(effectiveProjectId)?.name ?? null
+        } : null,
+        ticket: ticket ? { id: ticket.id, title: ticket.title } : null
+      });
+    } catch (error49) {
+      errors.push({
+        index: index2,
+        date: date10 || null,
+        message: error49 instanceof Error ? error49.message : String(error49)
+      });
+    }
+  }
+  const totalHours = Math.round(created.reduce((sum, c6) => sum + c6.hours, 0) * 100) / 100;
+  return jsonResponse({
+    teamScope: scope.teamIds,
+    bookedForUserId: targetUserId,
+    timezone: TIMEZONE,
+    created,
+    skipped,
+    errors,
+    totals: {
+      createdCount: created.length,
+      skippedCount: skipped.length,
+      errorCount: errors.length,
+      totalHours
+    }
+  });
+}
 
 // ../invoice/src/utils/included-items.ts
 function parseIncludedItems(value) {
@@ -117266,9 +117845,9 @@ function templateDefaultsFromStored(template, currency) {
 }
 
 // src/tools/quotes.ts
-var DASHBOARD_BASE_URL = "https://app.refront.nl";
+var DASHBOARD_BASE_URL2 = "https://app.refront.nl";
 function quoteDashboardUrl(id) {
-  return `${DASHBOARD_BASE_URL}/quotations?quotationId=${id}&quotationDetails=true`;
+  return `${DASHBOARD_BASE_URL2}/quotations?quotationId=${id}&quotationDetails=true`;
 }
 var QUOTE_STATUSES = [
   "draft",
@@ -125670,7 +126249,7 @@ ${tagErrors.map((e6) => `   \u2022 ${e6}`).join("\n")}
 }
 
 // src/server.ts
-var SERVER_VERSION = "3.5.4";
+var SERVER_VERSION = "3.5.12";
 function createMcpServer() {
   const server = new Server(
     {
@@ -125806,6 +126385,10 @@ function createMcpServer() {
           return await handleListDocuments(asToolArgs(toolArgs));
         case "get-document":
           return await handleGetDocument(asToolArgs(toolArgs));
+        case "get-document-link":
+          return await handleGetDocumentLink(
+            asToolArgs(toolArgs)
+          );
         case "create-document":
           return await handleCreateDocument(
             asToolArgs(toolArgs)
@@ -125902,6 +126485,10 @@ function createMcpServer() {
           return await handleGetTimeEntries(
             asToolArgs(toolArgs)
           );
+        case "create-time-entries":
+          return await handleCreateTimeEntries(
+            asToolArgs(toolArgs)
+          );
         case "get-github-file":
           return await handleGetGithubFile(asToolArgs(toolArgs));
         case "list-github-directory":