@mgsoftwarebv/mcp-server-bridge 3.5.12 → 3.5.14

package/README.md

@@ -130,6 +130,8 @@ Optional PDF compilation: pass `compilePdf: true` to trigger the `compile-docume
 - **log-hours** — log work hours as a draft agenda event (see the `/hours` Cursor command)
 - **create-time-entries** — create one or more individual dated hour lines (one timesheet event per date), single or bulk via `entries[]`. Top-level `projectId`/`ticketId`/`userId`/`description`/`billable`/`status` are shared defaults each entry can override. Skips duplicates (same user/team/date/project/description) unless `allowDuplicate`, and reports created/skipped/errored lines plus `totalHours`. Use this instead of `log-hours` when you have separate dated lines (e.g. "8h on 19/6, 8h on 16/6").
 - **get-time-entries** — read and total tracked time entries (urenregistratie), filterable by period, user, project, customer, ticket, status and type; returns accurate aggregate totals (total/billable/non-billable/invoiced hours) plus an optional grouped breakdown (day/project/customer/user/ticket). Answers questions like "how many hours did I work this month for customer X?"
+- **delete-time-entries** — soft-delete one or more existing hour lines by `id`/`ids[]` (e.g. to drop a wrongly-logged lump entry before re-creating dated lines). Only draft, non-invoiced entries are removed unless `allowInvoicedOverride`; confirmed/invoiced ones are skipped. Reports deleted/skipped/errored ids plus `deletedHours`.
+- **update-time-entry** — correct a single hour line by `id`: change `date`/`hours` (re-times the line), `description`, `projectId`, `ticketId`, `status` or `billable`. On confirmed/invoiced entries the financial/time fields are locked unless `allowInvoicedOverride`; description and project/ticket links stay editable.
 
 ### GitHub Code Exploration
 - **get-github-file** — read one file from the GitHub repo linked to a project

package/dist/index.js

@@ -106586,6 +106586,24 @@ var TOOLS = [
       required: ["id"]
     }
   },
+  {
+    name: "get-document-link",
+    description: "Get a safe, usable link for a document (use after create-document to share it). Never leaks an auth/session URL. Choose `linkType`:\n- dashboard (default): internal editor deep link for logged-in Refront users, plus the current PDF status and a public link when the document is already shared publicly.\n- pdf_signed (alias: pdf): a temporary signed PDF download URL when a compiled PDF exists; if it is still compiling it returns pdfStatus 'pending' with pdfUrl null and triggers a (re)compile instead of failing.\n- public_share: enables a public customer share (token + visibility=public, recompiling only when no fresh PDF exists) and returns the /p/<token> link. Only use when the document may be shared publicly. Revoke later from the dashboard.\nReturns a JSON object: { documentId, title, status, dashboardUrl, pdfStatus (ready|stale|pending|unavailable), pdfUrl, publicShareUrl, expiresAt }. Respects team/provider access; draft/private documents never expose a public share URL unless they are actually shared.",
+    inputSchema: {
+      type: "object",
+      properties: {
+        teamId: teamIdProp,
+        documentId: { type: "string", description: "Document ID (UUID)" },
+        linkType: {
+          type: "string",
+          enum: ["dashboard", "pdf_signed", "pdf", "public_share"],
+          default: "dashboard",
+          description: "dashboard (default) = editor URL + PDF status; pdf_signed (alias pdf) = temporary signed PDF download URL; public_share = enable + return the public /p/<token> link."
+        }
+      },
+      required: ["documentId"]
+    }
+  },
   {
     name: "create-document",
     description: 'Create a document (proposal, report, deliverables/opleverdocument, ...) from an array of content blocks. Use type \'deliverables\' for a document describing what was delivered for a customer; optionally pass `invoiceId` to link it to an invoice so it can be sent along as a PDF attachment. Each block is `{ id?, type, data }` (ids are auto-generated when omitted). Supported block types and their `data` shapes:\n- cover: { title, subtitle?, showLogo: bool, showDate: bool, clientName?, clientCompany?, date? }\n- toc: { title, maxDepth: 1-6 }\n- heading: { text, level: 1|2|3, numbered: bool }\n- text: { content: TipTapDoc | plain string (auto-converted; supports paragraphs and "- " bullet lists) }\n- callout: { variant: "info"|"warning"|"tip"|"important", title?, content: TipTapDoc | string }\n- table: { title?, headers: string[], rows: string[][] }\n- chart: { title?, chartType: "bar"|"line"|"pie", points: [{label, value}], seriesName?, series?: [{name, color?, points: [{label, value}]}], unit? ("\u20AC"|"%"|...), showValues: bool, color? }. Multi-series (bar/line only): extra series values are matched to the primary points by index; a legend is rendered automatically.\n- pricing: { title?, items: [{description, quantity?, unit?, price}], currency: "EUR", showTotal: bool, vatRate?, includeVat: bool }\n- timeline: { title?, phases: [{name, description?, duration, deliverables?: string[]}] }\n- two_column: { left: TipTapDoc|string, right: TipTapDoc|string, ratio?: "50_50"|"60_40"|"40_60"|"70_30"|"30_70" }\n- divider: { style: "page_break"|"line"|"space" }\n- signature: { title?, description?, signers: [{id, label, name?, company?, role?}] }\nAll text content runs through a humanizer that strips AI-sounding patterns (em-dashes, clich\xE9s, filler phrases); control it with `humanize`. The result includes ready-to-use links (internal dashboard editor URL + PDF status). Use get-document-link afterwards for a PDF download link or to publish a public customer share link.',
@@ -107382,6 +107400,80 @@ var TOOLS = [
       required: ["entries"]
     }
   },
+  {
+    name: "delete-time-entries",
+    description: "Delete one or more existing tracked time entries (urenregels / timesheet events) by id \u2014 e.g. to remove a wrongly-logged lump entry before re-creating it as separate dated lines with create-time-entries. Soft-deletes so the lines disappear from the agenda / urenoverzicht. Pass a single `id` or a list of `ids` (max 100). Safety: only draft, non-invoiced entries are deleted by default; confirmed or invoiced entries are skipped unless `allowInvoicedOverride` is true. Processing is per-id: the result reports deleted ids, skipped ids (reason: confirmed / invoiced / already_deleted) and per-id errors (not found / no access), plus deletedHours. Use get-time-entries to find ids first.",
+    inputSchema: {
+      type: "object",
+      properties: {
+        teamId: teamIdProp,
+        id: {
+          type: "string",
+          description: "A single timesheet event id (UUID) to delete."
+        },
+        ids: {
+          type: "array",
+          items: { type: "string" },
+          description: "Multiple timesheet event ids (UUIDs) to delete in one call (max 100). Combined with `id` if both are given."
+        },
+        allowInvoicedOverride: {
+          type: "boolean",
+          default: false,
+          description: "When true, also delete confirmed and/or invoiced entries. Default false skips them (safer)."
+        }
+      },
+      required: []
+    }
+  },
+  {
+    name: "update-time-entry",
+    description: "Update a single existing tracked time entry (urenregel / timesheet event) by id: correct its date, hours, description, project link, ticket link, status or billable flag. Changing date and/or hours re-times the line (date moves it to 09:00 Europe/Amsterdam, hours sets its duration). Safety: on a confirmed or invoiced entry the financial/time fields (date, hours, status, billable) are locked unless `allowInvoicedOverride` is true; description and project/ticket links stay editable. Use get-time-entries to find the id and get-projects / get-tickets to resolve links. To remove a line use delete-time-entries; to create new lines use create-time-entries.",
+    inputSchema: {
+      type: "object",
+      properties: {
+        teamId: teamIdProp,
+        id: {
+          type: "string",
+          description: "Timesheet event id (UUID) to update."
+        },
+        date: {
+          type: "string",
+          description: "New calendar date (YYYY-MM-DD, Europe/Amsterdam). Moves the line to 09:00 on this day."
+        },
+        hours: {
+          type: "number",
+          description: "New worked hours for the line (> 0, <= 24)."
+        },
+        description: {
+          type: "string",
+          description: "New line description (updates both the line title and description)."
+        },
+        projectId: {
+          type: ["string", "null"],
+          description: "New project UUID, or null to clear the project link."
+        },
+        ticketId: {
+          type: ["string", "null"],
+          description: "Replace the linked ticket (UUID), or null to unlink all tickets."
+        },
+        status: {
+          type: "string",
+          enum: ["draft", "confirmed", "submitted"],
+          description: "New status. 'submitted' is treated as 'confirmed'."
+        },
+        billable: {
+          type: "boolean",
+          description: "New billable flag. true -> to_bill, false -> unbillable."
+        },
+        allowInvoicedOverride: {
+          type: "boolean",
+          default: false,
+          description: "Allow editing locked fields (date/hours/status/billable) on a confirmed/invoiced entry."
+        }
+      },
+      required: ["id"]
+    }
+  },
   {
     name: "get-trips",
     description: "List trips / kilometer registration entries (rides) scoped to your provider team(s), with optional filters by period (dateFrom/dateTo), user, project, customer, trip type (business/private), billing type, and invoiced status. Returns each trip's id, date, start/end location, distance (km), odometer readings, trip type, billing type, rate/amount, linked user/project/customer/invoice/vehicle, plus aggregate business/private/total km and total amount.",
@@ -109730,6 +109822,59 @@ function ensureTipTapFormat(text3) {
   if (isTipTapJson(text3)) return text3;
   return JSON.stringify(plainTextToTipTap(text3));
 }
+
+// src/tools/document-links.ts
+function derivePdfStatus(doc) {
+  const currentHash = computeDocumentContentHash({
+    blocks: doc.blocks,
+    branding: doc.branding,
+    pageSize: doc.pageSize,
+    locale: doc.locale,
+    title: doc.title
+  });
+  if (doc.filePath) {
+    if (doc.compiledHash && doc.compiledHash === currentHash) {
+      return { status: "ready", currentHash };
+    }
+    return { status: "stale", currentHash };
+  }
+  if (doc.compiledHash) return { status: "pending", currentHash };
+  return { status: "unavailable", currentHash };
+}
+function getDashboardBaseUrl() {
+  return (process.env.DASHBOARD_URL || "https://app.refront.nl").replace(
+    /\/+$/,
+    ""
+  );
+}
+function buildDashboardUrl(documentId) {
+  return `${getDashboardBaseUrl()}/quotations/documents?editDocument=true&documentId=${encodeURIComponent(
+    documentId
+  )}`;
+}
+function buildPublicShareUrl(token) {
+  return `${getDashboardBaseUrl()}/p/${encodeURIComponent(token)}`;
+}
+function isPubliclyShared(doc) {
+  return !!doc.token && doc.shareVisibility === "public";
+}
+function formatDocumentLinksSummary(doc) {
+  const { status: pdfStatus } = derivePdfStatus(doc);
+  const lines = [
+    "\u{1F517} Links:",
+    `- Dashboard: ${buildDashboardUrl(doc.id)}`,
+    `- PDF status: ${pdfStatus}`
+  ];
+  if (isPubliclyShared(doc) && doc.token) {
+    lines.push(`- Public share: ${buildPublicShareUrl(doc.token)}`);
+  }
+  lines.push(
+    "- Use get-document-link (linkType pdf_signed for a temporary PDF download URL, public_share to publish a public link)."
+  );
+  return lines.join("\n");
+}
+
+// src/tools/documents.ts
 var DOCUMENT_TYPES = [
   "proposal",
   "plan_of_action",
@@ -109771,7 +109916,6 @@ var PDF_STATUS_LABEL = {
 };
 function buildLinksSection(doc, opts) {
   let status = computePdfStatus(doc);
-  if (opts?.compileTriggered && status !== "ready") status = "pending";
   const lines = [
     "Links:",
     `- Dashboard (internal, login required): ${documentDashboardUrl(doc.id)}`,
@@ -109872,7 +110016,10 @@ var TRIGGER_API_URL = process.env.TRIGGER_API_URL || "https://trigger-dev.mgsoft
 async function maybeTriggerPdfCompile(documentId, teamId) {
   const secret = process.env.TRIGGER_SECRET_KEY;
   if (!secret) {
-    return "PDF: niet gecompileerd (TRIGGER_SECRET_KEY ontbreekt); de dashboard-editor compileert bij openen/delen.";
+    return {
+      triggered: false,
+      message: "PDF: niet gecompileerd (TRIGGER_SECRET_KEY ontbreekt); de dashboard-editor compileert bij openen/delen."
+    };
   }
   try {
     const response = await fetch(
@@ -109888,12 +110035,21 @@ async function maybeTriggerPdfCompile(documentId, teamId) {
     );
     if (!response.ok) {
       const body = await response.text();
-      return `PDF: compile-trigger mislukt (HTTP ${response.status}): ${body.slice(0, 200)}`;
+      return {
+        triggered: false,
+        message: `PDF: compile-trigger mislukt (HTTP ${response.status}): ${body.slice(0, 200)}`
+      };
     }
     const json5 = await response.json();
-    return `PDF: compile-document-pdf getriggerd (run ${json5.id ?? "?"}).`;
+    return {
+      triggered: true,
+      message: `PDF: compile-document-pdf getriggerd (run ${json5.id ?? "?"}).`
+    };
   } catch (error49) {
-    return `PDF: compile-trigger mislukt: ${error49 instanceof Error ? error49.message : String(error49)}`;
+    return {
+      triggered: false,
+      message: `PDF: compile-trigger mislukt: ${error49 instanceof Error ? error49.message : String(error49)}`
+    };
   }
 }
 async function applyBlockOps(existing, ops, humanize) {
@@ -110078,7 +110234,7 @@ Type: ${doc.type} | Status: ${doc.status} | Locale: ${doc.locale}
 Team: ${doc.teamId}${doc.customerId ? ` | Customer: ${doc.customerId}` : ""}${doc.invoiceId ? ` | Invoice: ${doc.invoiceId}` : ""}
 Blocks (${blocks.length}): ${blockTypeSummary(blocks) || "none"}
 
-${buildLinksSection(doc)}
+${formatDocumentLinksSummary(doc)}
 
 Blocks JSON:
 \`\`\`json
@@ -110265,22 +110421,19 @@ async function handleCreateDocument(input) {
       content: [{ type: "text", text: "Error: document insert failed." }]
     };
   }
-  const pdfLine = compilePdf ? await maybeTriggerPdfCompile(created.id, resolved.teamId) : null;
-  const linksSection = buildLinksSection(
-    {
-      id: created.id,
-      title: title.trim(),
-      blocks: humanized.blocks,
-      branding: {},
-      pageSize: "a4",
-      locale,
-      filePath: null,
-      compiledHash: null,
-      token: null,
-      shareVisibility: "private"
-    },
-    { compileTriggered: compilePdf && Boolean(process.env.TRIGGER_SECRET_KEY) }
-  );
+  const pdfResult = compilePdf ? await maybeTriggerPdfCompile(created.id, resolved.teamId) : null;
+  const linksSummary = formatDocumentLinksSummary({
+    id: created.id,
+    title: title.trim(),
+    blocks: humanized.blocks,
+    branding: {},
+    pageSize: "a4",
+    locale,
+    filePath: null,
+    compiledHash: null,
+    token: null,
+    shareVisibility: "private"
+  });
   return {
     content: [
       {
@@ -110294,10 +110447,10 @@ Team: ${resolved.teamId}${customerId ? ` | Customer: ${customerId}` : ""}
 ${invoiceLine ? `${invoiceLine}
 ` : ""}Blocks (${humanized.blocks.length}): ${blockTypeSummary(humanized.blocks)}
 
-${humanized.summary}${pdfLine ? `
-${pdfLine}` : ""}
+${humanized.summary}${pdfResult ? `
+${pdfResult.message}` : ""}
 
-` + linksSection
+${linksSummary}`
       }
     ]
   };
@@ -110459,23 +110612,20 @@ async function handleUpdateDocument(input) {
     };
   }
   await db.update(schema_exports.documents).set(patch).where(eq(schema_exports.documents.id, doc.id));
-  const pdfLine = compilePdf ? await maybeTriggerPdfCompile(doc.id, doc.teamId) : null;
-  const linksSection = buildLinksSection(
-    {
-      id: doc.id,
-      title: patch.title ?? doc.title,
-      status: patch.status ?? doc.status,
-      blocks: patch.blocks ?? doc.blocks,
-      branding: doc.branding,
-      pageSize: doc.pageSize,
-      locale: doc.locale,
-      filePath: doc.filePath,
-      compiledHash: doc.compiledHash,
-      token: doc.token,
-      shareVisibility: doc.shareVisibility
-    },
-    { compileTriggered: compilePdf && Boolean(process.env.TRIGGER_SECRET_KEY) }
-  );
+  const pdfResult = compilePdf ? await maybeTriggerPdfCompile(doc.id, doc.teamId) : null;
+  const linksSummary = formatDocumentLinksSummary({
+    id: doc.id,
+    title: patch.title ?? doc.title,
+    status: patch.status ?? doc.status,
+    blocks: "blocks" in patch ? patch.blocks : doc.blocks,
+    branding: doc.branding,
+    pageSize: doc.pageSize,
+    locale: doc.locale,
+    filePath: doc.filePath,
+    compiledHash: doc.compiledHash,
+    token: doc.token,
+    shareVisibility: doc.shareVisibility
+  });
   return {
     content: [
       {
@@ -110485,10 +110635,10 @@ async function handleUpdateDocument(input) {
 ID: ${doc.id}
 ${changeLines.map((l4) => `- ${l4}`).join("\n")}${humanizeSummary ? `
 
-${humanizeSummary}` : ""}${pdfLine ? `
-${pdfLine}` : ""}
+${humanizeSummary}` : ""}${pdfResult ? `
+${pdfResult.message}` : ""}
 
-` + linksSection
+${linksSummary}`
       }
     ]
   };
@@ -115011,6 +115161,271 @@ async function handleCreateTimeEntries(input) {
     }
   });
 }
+var MAX_DELETE_ENTRIES = 100;
+function rowDurationSeconds(row) {
+  if (row.startTime && row.endTime) {
+    const seconds = (new Date(row.endTime).getTime() - new Date(row.startTime).getTime()) / 1e3;
+    return Math.max(0, Math.round(seconds));
+  }
+  return Math.max(0, Math.round(toNumber(row.trackedDuration)));
+}
+function rowDurationHours(row) {
+  return Math.round(rowDurationSeconds(row) / 3600 * 100) / 100;
+}
+function isInvoicedRow(row) {
+  return row.invoiceId != null || row.billingStatus === "billed" || row.billingStatus === "draft_billed";
+}
+async function handleDeleteTimeEntries(input) {
+  const te = schema_exports.timesheetEvents;
+  const ids = [
+    ...new Set(
+      [input.id, ...Array.isArray(input.ids) ? input.ids : []].filter(
+        (value) => typeof value === "string" && value.trim().length > 0
+      ).map((value) => value.trim())
+    )
+  ];
+  if (ids.length === 0) {
+    return textResponse3(
+      "Error: provide `id` or a non-empty `ids` array of timesheet event ids. Use get-time-entries to find ids."
+    );
+  }
+  if (ids.length > MAX_DELETE_ENTRIES) {
+    return textResponse3(
+      `Error: too many ids (${ids.length}). Max ${MAX_DELETE_ENTRIES} per call.`
+    );
+  }
+  const scope = await resolveTeamScope(input.teamId);
+  if (!scope.ok) return scope.response;
+  if (scope.teamIds.length === 0) {
+    return textResponse3("No accessible teams found.");
+  }
+  const deleted = [];
+  const skipped = [];
+  const errors = [];
+  for (const id of ids) {
+    try {
+      const [row] = await db.select({
+        id: te.id,
+        title: te.title,
+        status: te.status,
+        invoiceId: te.invoiceId,
+        billingStatus: te.billingStatus,
+        isDeleted: te.isDeleted,
+        startTime: te.startTime,
+        endTime: te.endTime,
+        trackedDuration: te.trackedDuration,
+        date: sql`${localDateTextExpr()}`
+      }).from(te).where(and(eq(te.id, id), inArray(te.teamId, scope.teamIds))).limit(1);
+      if (!row) {
+        errors.push({
+          id,
+          message: "Not found or no access. Call get-time-entries to find a valid id."
+        });
+        continue;
+      }
+      const status = row.status === "confirmed" ? "confirmed" : "draft";
+      const invoiced = isInvoicedRow(row);
+      if (row.isDeleted) {
+        skipped.push({ id, reason: "already_deleted", status, invoiced });
+        continue;
+      }
+      const confirmed = status === "confirmed";
+      if ((invoiced || confirmed) && !input.allowInvoicedOverride) {
+        skipped.push({
+          id,
+          reason: invoiced ? "invoiced" : "confirmed",
+          status,
+          invoiced
+        });
+        continue;
+      }
+      await db.update(te).set({ isDeleted: true, deletedAt: sql`NOW()`, updatedAt: sql`NOW()` }).where(and(eq(te.id, id), inArray(te.teamId, scope.teamIds)));
+      deleted.push({
+        id,
+        date: row.date ?? null,
+        hours: rowDurationHours(row),
+        title: row.title
+      });
+    } catch (error49) {
+      errors.push({
+        id,
+        message: error49 instanceof Error ? error49.message : String(error49)
+      });
+    }
+  }
+  return jsonResponse({
+    teamScope: scope.teamIds,
+    deleted,
+    skipped,
+    errors,
+    totals: {
+      deletedCount: deleted.length,
+      skippedCount: skipped.length,
+      errorCount: errors.length,
+      deletedHours: Math.round(deleted.reduce((sum, d6) => sum + d6.hours, 0) * 100) / 100
+    }
+  });
+}
+async function handleUpdateTimeEntry(input) {
+  const te = schema_exports.timesheetEvents;
+  const id = typeof input.id === "string" ? input.id.trim() : "";
+  if (!id) return textResponse3("Error: `id` is required.");
+  let mappedStatus;
+  if (input.status !== void 0) {
+    const resolvedStatus = mapCreateStatus(input.status);
+    if (resolvedStatus === null) {
+      return textResponse3(
+        `Error: invalid status "${input.status}". Allowed: draft, confirmed (submitted is treated as confirmed).`
+      );
+    }
+    mappedStatus = resolvedStatus;
+  }
+  const newDate = input.date !== void 0 ? String(input.date).trim() : void 0;
+  if (newDate !== void 0 && !isValidIsoDate(newDate)) {
+    return textResponse3("Error: invalid `date`; expected YYYY-MM-DD.");
+  }
+  if (input.hours !== void 0) {
+    const hours = toNumber(input.hours);
+    if (!(hours > 0)) {
+      return textResponse3("Error: `hours` must be a number greater than 0.");
+    }
+    if (hours > 24) {
+      return textResponse3("Error: `hours` must not exceed 24 for a single day.");
+    }
+  }
+  const scope = await resolveTeamScope(input.teamId);
+  if (!scope.ok) return scope.response;
+  if (scope.teamIds.length === 0) {
+    return textResponse3("No accessible teams found.");
+  }
+  const [existing] = await db.select({
+    id: te.id,
+    status: te.status,
+    invoiceId: te.invoiceId,
+    billingStatus: te.billingStatus,
+    isDeleted: te.isDeleted,
+    startTime: te.startTime,
+    endTime: te.endTime,
+    trackedDuration: te.trackedDuration
+  }).from(te).where(and(eq(te.id, id), inArray(te.teamId, scope.teamIds))).limit(1);
+  if (!existing || existing.isDeleted) {
+    return textResponse3(
+      `Time entry ${id} not found or no access. Call get-time-entries to find a valid id.`
+    );
+  }
+  const invoiced = isInvoicedRow(existing);
+  const confirmed = existing.status === "confirmed";
+  if ((invoiced || confirmed) && !input.allowInvoicedOverride) {
+    const attempted = [];
+    if (input.date !== void 0) attempted.push("date");
+    if (input.hours !== void 0) attempted.push("hours");
+    if (input.billable !== void 0) attempted.push("billable");
+    if (input.status !== void 0) attempted.push("status");
+    if (attempted.length > 0) {
+      return textResponse3(
+        `Error: time entry ${id} is ${invoiced ? "invoiced" : "confirmed"}. Locked fields: ${attempted.join(", ")}. Re-call with allowInvoicedOverride: true to change them anyway, or only update description / project / ticket links.`
+      );
+    }
+  }
+  if (input.projectId) {
+    if (!scope.projectIds.includes(input.projectId)) {
+      return textResponse3(
+        `Project not found or no access: ${input.projectId}. Call get-projects first.`
+      );
+    }
+  }
+  if (input.ticketId) {
+    const [ticket] = await db.select({
+      id: schema_exports.tickets.id,
+      teamId: schema_exports.tickets.teamId,
+      projectId: schema_exports.tickets.projectId,
+      customerId: schema_exports.tickets.customerId
+    }).from(schema_exports.tickets).where(eq(schema_exports.tickets.id, input.ticketId)).limit(1);
+    if (!ticket) {
+      return textResponse3(
+        `Ticket not found: ${input.ticketId}. Call get-tickets first.`
+      );
+    }
+    let hasAccess = scope.teamIds.includes(ticket.teamId);
+    if (!hasAccess && ticket.projectId) {
+      hasAccess = scope.projectIds.includes(ticket.projectId);
+    }
+    if (!hasAccess && ticket.customerId) {
+      hasAccess = scope.customerIds.includes(ticket.customerId);
+    }
+    if (!hasAccess) {
+      return textResponse3(
+        `No access to ticket: ${input.ticketId}. Call get-tickets first.`
+      );
+    }
+  }
+  const updates = { updatedAt: sql`NOW()` };
+  if (input.description !== void 0) {
+    const description = String(input.description).trim();
+    if (!description) {
+      return textResponse3("Error: `description` cannot be empty.");
+    }
+    updates.title = description;
+    updates.description = description;
+  }
+  if (input.projectId !== void 0) updates.projectId = input.projectId;
+  if (input.billable !== void 0) {
+    updates.billingStatus = input.billable ? "to_bill" : "unbillable";
+  }
+  if (mappedStatus !== void 0) updates.status = mappedStatus;
+  if (newDate !== void 0 || input.hours !== void 0) {
+    const durationSeconds = input.hours !== void 0 ? Math.round(toNumber(input.hours) * 3600) : rowDurationSeconds(existing);
+    const startExpr = newDate !== void 0 ? sql`(${`${newDate} ${DEFAULT_START_HOUR}`}::timestamp AT TIME ZONE ${sql.raw(`'${TIMEZONE}'`)})` : sql`${existing.startTime}::timestamptz`;
+    const endExpr = sql`(${startExpr} + ${`${durationSeconds} seconds`}::interval)`;
+    updates.startTime = startExpr;
+    updates.endTime = endExpr;
+    updates.trackedDuration = durationSeconds;
+    updates.isTracked = true;
+  }
+  const hasFieldUpdate = Object.keys(updates).length > 1;
+  if (!hasFieldUpdate && input.ticketId === void 0) {
+    return textResponse3(
+      "No fields to update. Provide at least one of date, hours, description, projectId, ticketId, status, billable."
+    );
+  }
+  if (hasFieldUpdate) {
+    await db.update(te).set(updates).where(and(eq(te.id, id), inArray(te.teamId, scope.teamIds)));
+  }
+  if (input.ticketId !== void 0) {
+    await db.delete(schema_exports.timesheetEventTickets).where(eq(schema_exports.timesheetEventTickets.timesheetEventId, id));
+    if (input.ticketId) {
+      await db.insert(schema_exports.timesheetEventTickets).values({ timesheetEventId: id, ticketId: input.ticketId }).onConflictDoNothing();
+    }
+  }
+  const [row] = await db.select({
+    id: te.id,
+    title: te.title,
+    description: te.description,
+    status: te.status,
+    invoiceId: te.invoiceId,
+    billingStatus: te.billingStatus,
+    startTime: te.startTime,
+    endTime: te.endTime,
+    trackedDuration: te.trackedDuration,
+    projectId: te.projectId,
+    date: sql`${localDateTextExpr()}`
+  }).from(te).where(eq(te.id, id)).limit(1);
+  const links = await db.select({ ticketId: schema_exports.timesheetEventTickets.ticketId }).from(schema_exports.timesheetEventTickets).where(eq(schema_exports.timesheetEventTickets.timesheetEventId, id));
+  return jsonResponse({
+    updated: {
+      id,
+      date: row?.date ?? null,
+      hours: row ? rowDurationHours(row) : 0,
+      title: row?.title ?? null,
+      description: row?.description ?? null,
+      status: row?.status === "confirmed" ? "confirmed" : "draft",
+      invoiced: row ? isInvoicedRow(row) : false,
+      billingStatus: row?.billingStatus ?? null,
+      projectId: row?.projectId ?? null,
+      ticketIds: links.map((link) => link.ticketId)
+    }
+  });
+}
 
 // ../invoice/src/utils/included-items.ts
 function parseIncludedItems(value) {
@@ -126489,6 +126904,14 @@ function createMcpServer() {
           return await handleCreateTimeEntries(
             asToolArgs(toolArgs)
           );
+        case "delete-time-entries":
+          return await handleDeleteTimeEntries(
+            asToolArgs(toolArgs)
+          );
+        case "update-time-entry":
+          return await handleUpdateTimeEntry(
+            asToolArgs(toolArgs)
+          );
         case "get-github-file":
           return await handleGetGithubFile(asToolArgs(toolArgs));
         case "list-github-directory":