revclamp-mcp 1.20.10 → 1.20.12

package/README.md

@@ -5,18 +5,18 @@
 **`revclamp-mcp`** is a standalone, zero-dependency **Open-Source Model Context Protocol (MCP) Server & CLI** (`index.mjs` + `local_engine.mjs`) implementing **9 deterministic B2B FinOps, Stripe `2025-03-31.basil`, Visa CE 3.0, EU/XI VIES VAT, Shopify Plus B2B Net-15/30/60, and Webhook Security tools** in pure Node.js.
 
 - **100% Local In-Process Execution (Default — Zero Network / Zero API Key Required):** All 9 MCP tools (`initialize`, `tools/list`, and `tools/call`) execute locally in-process inside [`local_engine.mjs`](./local_engine.mjs) using pure Node.js (`node:crypto` HMAC-SHA256 verification, integer-cent double-entry accounting, 72-hour webhook replay state machines, and `18,000` UTF-16 code unit CE 3.0 linting). Zero network calls are ever made unless `REVCLAMP_API_KEY` or `REVCLAMP_MCP_URL` is explicitly configured.
-- **Optional Hosted Cloud Workspace Sync (`REVCLAMP_API_KEY`):** When `REVCLAMP_API_KEY` (`rg_live_...`) is configured, `revclamp-mcp` connects to [**RevClamp Enterprise**](https://revclamp.com) (`https://api.revclamp.com/api/mcp`) to unlock the **90-day SQLite WAL usage & audit ledger**, **24/7 autonomous Stripe dispute & entitlement webhook outbox**, and **real-time EU Commission VIES SOAP gateway consultation numbers**.
+- **Optional Hosted Cloud Workspace Sync (`REVCLAMP_API_KEY`):** When `REVCLAMP_API_KEY` (`rg_live_...`) is configured, `revclamp-mcp` connects to [**RevClamp Enterprise**](https://revclamp.com) (`https://api.revclamp.com/api/mcp`) to unlock the **90-day durable transactional usage & audit ledger**, **24/7 autonomous Stripe dispute & entitlement webhook outbox**, and **real-time EU Commission VIES SOAP gateway consultation numbers**.
 
 ## Local Open-Core (`local_engine.mjs`) vs. Hosted Cloud (`REVCLAMP_API_KEY`)
 
 | Capability | Local Open-Core Default (Zero API Key) | Hosted Cloud (`REVCLAMP_API_KEY`) |
 | :--- | :--- | :--- |
 | **Execution & Network** | 100% in-process (`local_engine.mjs`), zero network calls | HTTPS JSON-RPC to `https://api.revclamp.com/api/mcp` (`redirect: "error"`) |
-| **Usage & Audit Storage** | Stateless evaluation of caller-supplied JSON snapshots | **Persistent 90-day SQLite WAL ledger** + Stripe historical backfill |
+| **Usage & Audit Storage** | Stateless evaluation of caller-supplied JSON snapshots | **Persistent 90-day durable transactional ledger** + Stripe historical backfill |
 | **Dispute & Entitlement Action** | Returns non-destructive `submit: false` draft & `revoke_entitlement` decision | **24/7 autonomous Stripe webhook outbox** (`disputes.update` & signed revoke webhooks) |
 | **EU & `XI` B2B VAT (`VIES`)** | Deterministic syntax & `GR -> EL` normalization (`FORMAT_ONLY` default, `valid: null`) | **Live EU Commission VIES SOAP consultation IDs** + circuit-breaker retry queue (`viesMode: "LIVE"` + `REVCLAMP_API_KEY`) |
 | **Monthly Event Tiers** | Unlimited local in-process evaluations (0 network cost) | **Free Sandbox** (`5,000` events/mo) · **Starter $19/mo** (`100k`) · **Growth $59/mo** (`1M`) · **Scale $199/mo** (`5M`) |
-| **Data Privacy (`INV-SAAS-04`)** | Nothing ever leaves your machine | Only explicit `tools/call` arguments are sent over TLS after local live-secret scrubbing (`scanMcpClientPayloadForSecrets` in `index.mjs` blocks `sk_live_`, non-test `whsec_`, `shpat_` locally) |
+| **Data Minimization & Privacy** | Nothing ever leaves your machine | Only explicit `tools/call` arguments are sent over TLS after local live-secret scrubbing (blocks `sk_live_`, non-test `whsec_`, and `shpat_` locally before any network request) |
 
 ## Open-Source MCP Tools Implemented in `local_engine.mjs` (9)
 
@@ -59,13 +59,13 @@ curl -sS -X POST https://api.revclamp.com/api/mcp \
 
 ```bash
 # Run a <60s local CLI smoke check (verifies all 9 tool schemas & executes a local_engine.mjs sample audit with zero API key)
-npx -y github:lhphong09t2/revclamp-mcp#v1.20.10 --self-test
+npx -y github:lhphong09t2/revclamp-mcp#v1.20.12 --self-test
 
 # Provision a free Cloud Workspace (or reuse REVCLAMP_API_KEY) & send a 6-digit login OTP
-npx -y revclamp-mcp@1.20.10 --init-workspace you@company.com
+npx -y revclamp-mcp@1.20.12 --init-workspace you@company.com
 
 # Verify the 6-digit OTP using REVCLAMP_API_KEY from environment
-REVCLAMP_API_KEY="rg_live_..." npx -y revclamp-mcp@1.20.10 --verify-otp you@company.com 123456
+REVCLAMP_API_KEY="rg_live_..." npx -y revclamp-mcp@1.20.12 --verify-otp you@company.com 123456
 
 # List all 9 MCP tools and JSON schemas (runs locally in-process)
 node index.mjs --list-tools

package/index.mjs

@@ -33,7 +33,7 @@ export {
   executeLocalMcpJsonRpc,
 };
 
-export const PACKAGE_VERSION = "1.20.10";
+export const PACKAGE_VERSION = "1.20.12";
 export const DEFAULT_MCP_ENDPOINT = "https://api.revclamp.com/api/mcp";
 export const ALLOWED_MCP_ORIGINS = Object.freeze(
   new Set([

package/local_engine.mjs

@@ -12,7 +12,7 @@
  *     caller-supplied payloads. Never fabricates live consultation IDs or card-network
  *     dispute evidence unless `demo: true` is explicitly passed (`sample: true`).
  *   - Cloud Workspace Mode (`REVCLAMP_API_KEY` on https://api.revclamp.com/api/mcp):
- *     Unlocks the 90-day SQLite WAL usage ledger, 24/7 autonomous Stripe dispute &
+ *     Unlocks the 90-day durable transactional usage ledger, 24/7 autonomous Stripe dispute &
  *     entitlement webhook outbox, and live European Commission VIES consultation IDs.
  */
 
@@ -58,6 +58,24 @@ const LOCAL_MCP_TOOL_ARG_ALIAS_GROUPS = Object.freeze({
       aliases: Object.freeze(["windowSec", "dedupWindowSec"]),
     }),
   ]),
+  revclamp_validate_eu_vat_vies: Object.freeze([
+    Object.freeze({
+      canonical: "sellerCountry",
+      aliases: Object.freeze(["sellerCountryCode", "seller_country", "seller_country_code"]),
+    }),
+    Object.freeze({
+      canonical: "buyerVatId",
+      aliases: Object.freeze(["vatId", "buyer_vat_id"]),
+    }),
+    Object.freeze({
+      canonical: "viesMode",
+      aliases: Object.freeze(["vies_mode"]),
+    }),
+    Object.freeze({
+      canonical: "supplyType",
+      aliases: Object.freeze(["supply_type"]),
+    }),
+  ]),
 });
 
 export function normalizeMcpToolArgs(toolName, rawArgs) {
@@ -145,7 +163,7 @@ export const LOCAL_MCP_RESOURCES = Object.freeze([
     uri: "revclamp://docs/open-core-capabilities",
     name: "RevClamp Open-Core vs Hosted Cloud Capabilities",
     description:
-      "Reference summary of the 9 local deterministic MCP tools vs. hosted REVCLAMP_API_KEY capabilities (90-day SQLite WAL ledger, 24/7 Stripe webhook outbox, and live EU VIES consultation IDs).",
+      "Reference summary of the 9 local deterministic MCP tools vs. hosted REVCLAMP_API_KEY capabilities (90-day durable transactional ledger, 24/7 Stripe webhook outbox, and live EU VIES consultation IDs).",
     mimeType: "application/json",
   }),
 ]);
@@ -189,7 +207,7 @@ const EU_VIES_FORMAT_RULES = Object.freeze({
   DK: /^DK\d{8}$/,
   EE: /^EE\d{9}$/,
   EL: /^EL\d{9}$/,
-  ES: /^ES[A-Z0-9]\d{7}[A-Z0-9]$/,
+  ES: /^ES(?:[A-Z]\d{7}[A-Z0-9]|[0-9]\d{7}[A-Z])$/,
   FI: /^FI\d{8}$/,
   FR: /^FR[A-HJ-NP-Z0-9]{2}\d{9}$/,
   HR: /^HR\d{11}$/,
@@ -210,6 +228,384 @@ const EU_VIES_FORMAT_RULES = Object.freeze({
   XI: /^XI(?:\d{9}|\d{12}|(?:GD|HA)\d{3})$/,
 });
 
+export const EU_VIES_STATUTORY_TERMINOLOGY_MAP = Object.freeze({
+  AT: Object.freeze({
+    memberState: "AT",
+    countryNameEn: "Austria",
+    nativeCountryName: "Österreich",
+    taxIdAcronym: "UID",
+    nativeTaxIdName: "Umsatzsteuer-Identifikationsnummer",
+    directiveArticle: "Art. 196 & Art. 226(11a) Council Directive 2006/112/EC",
+    directiveGoodsArticle: "Art. 138(1) & Art. 226(11) Council Directive 2006/112/EC",
+    statutoryReverseChargeClause:
+      "Steuerschuldnerschaft des Leistungsempfängers – Art. 196 & Art. 226 Nr. 11a MwStSystRL (Directive 2006/112/EC, § 19 UStG) / Reverse charge (B2B services)",
+    statutoryGoodsExemptionClause:
+      "Steuerfreie innergemeinschaftliche Lieferung – Art. 138 Abs. 1 & Art. 226 Nr. 11 MwStSystRL (Directive 2006/112/EC, Art. 6 Abs. 1 UStG) / Intra-Community exempt supply of goods",
+  }),
+  BE: Object.freeze({
+    memberState: "BE",
+    countryNameEn: "Belgium",
+    nativeCountryName: "België / Belgique",
+    taxIdAcronym: "N° TVA / BTW-nr.",
+    nativeTaxIdName: "Numéro de TVA / Btw-identificatienummer",
+    directiveArticle: "Art. 196 & Art. 226(11a) Council Directive 2006/112/EC",
+    directiveGoodsArticle: "Art. 138(1) & Art. 226(11) Council Directive 2006/112/EC",
+    statutoryReverseChargeClause:
+      "Autoliquidation / Btw verlegd – Art. 196 & Art. 226(11a) Directive 2006/112/EC / Reverse charge (B2B services)",
+    statutoryGoodsExemptionClause:
+      "Livraison intracommunautaire exonérée / Vrijgestelde intracommunautaire levering – Art. 138(1) & Art. 226(11) Directive 2006/112/EC (Art. 39bis CTVA/WBTW) / Intra-Community exempt supply of goods",
+  }),
+  BG: Object.freeze({
+    memberState: "BG",
+    countryNameEn: "Bulgaria",
+    nativeCountryName: "България",
+    taxIdAcronym: "ДДС номер",
+    nativeTaxIdName: "Идентификационен номер по ДДС (ЗДДС)",
+    directiveArticle: "Art. 196 & Art. 226(11a) Council Directive 2006/112/EC",
+    directiveGoodsArticle: "Art. 138(1) & Art. 226(11) Council Directive 2006/112/EC",
+    statutoryReverseChargeClause:
+      "Обратно начисляване – чл. 196 и чл. 226, т. 11а от Директива 2006/112/ЕО (чл. 82, ал. 2 ЗДДС) / Reverse charge (B2B services)",
+    statutoryGoodsExemptionClause:
+      "Освободена вътреобщностна доставка на стоки – чл. 138, пар. 1 и чл. 226, т. 11 от Директива 2006/112/ЕО (чл. 7 и чл. 53 ЗДДС) / Intra-Community exempt supply of goods",
+  }),
+  CY: Object.freeze({
+    memberState: "CY",
+    countryNameEn: "Cyprus",
+    nativeCountryName: "Κύπρος",
+    taxIdAcronym: "ΑΦΜ / ΦΠΑ",
+    nativeTaxIdName: "Αριθμός Εγγραφής ΦΠΑ",
+    directiveArticle: "Art. 196 & Art. 226(11a) Council Directive 2006/112/EC",
+    directiveGoodsArticle: "Art. 138(1) & Art. 226(11) Council Directive 2006/112/EC",
+    statutoryReverseChargeClause:
+      "Αντίστροφη επιβάρυνση – Άρθρα 196 & 226(11α) Οδηγίας 2006/112/ΕΚ / Reverse charge (B2B services)",
+    statutoryGoodsExemptionClause:
+      "Απαλλασσόμενη ενδοκοινοτική παράδοση αγαθών – Άρθρα 138(1) & 226(11) Οδηγίας 2006/112/ΕΚ / Intra-Community exempt supply of goods",
+  }),
+  CZ: Object.freeze({
+    memberState: "CZ",
+    countryNameEn: "Czechia",
+    nativeCountryName: "Česká republika",
+    taxIdAcronym: "DIČ",
+    nativeTaxIdName: "Daňové identifikační číslo",
+    directiveArticle: "Art. 196 & Art. 226(11a) Council Directive 2006/112/EC",
+    directiveGoodsArticle: "Art. 138(1) & Art. 226(11) Council Directive 2006/112/EC",
+    statutoryReverseChargeClause:
+      "Daň odvede zákazník – čl. 196 a čl. 226 bod 11a směrnice 2006/112/ES / Reverse charge (B2B services)",
+    statutoryGoodsExemptionClause:
+      "Osvobozené dodání zboží do jiného členského státu – čl. 138 odst. 1 a čl. 226 bod 11 směrnice 2006/112/ES (§ 64 ZDPH) / Intra-Community exempt supply of goods",
+  }),
+  DE: Object.freeze({
+    memberState: "DE",
+    countryNameEn: "Germany",
+    nativeCountryName: "Deutschland",
+    taxIdAcronym: "USt-IdNr.",
+    nativeTaxIdName: "Umsatzsteuer-Identifikationsnummer",
+    directiveArticle: "Art. 196 & Art. 226(11a) Council Directive 2006/112/EC",
+    directiveGoodsArticle: "Art. 138(1) & Art. 226(11) Council Directive 2006/112/EC",
+    statutoryReverseChargeClause:
+      "Steuerschuldnerschaft des Leistungsempfängers – Art. 196 & Art. 226 Nr. 11a MwStSystRL (Directive 2006/112/EC, § 13b UStG) / Reverse charge (B2B services)",
+    statutoryGoodsExemptionClause:
+      "Steuerfreie innergemeinschaftliche Lieferung – Art. 138 Abs. 1 & Art. 226 Nr. 11 MwStSystRL (Directive 2006/112/EC, § 4 Nr. 1b i.V.m. § 6a UStG) / Intra-Community exempt supply of goods",
+  }),
+  DK: Object.freeze({
+    memberState: "DK",
+    countryNameEn: "Denmark",
+    nativeCountryName: "Danmark",
+    taxIdAcronym: "CVR / SE-nr.",
+    nativeTaxIdName: "Momsregistreringsnummer (CVR/SE)",
+    directiveArticle: "Art. 196 & Art. 226(11a) Council Directive 2006/112/EC",
+    directiveGoodsArticle: "Art. 138(1) & Art. 226(11) Council Directive 2006/112/EC",
+    statutoryReverseChargeClause:
+      "Omvendt betalingspligt – Art. 196 & Art. 226, nr. 11a, i direktiv 2006/112/EF / Reverse charge (B2B services)",
+    statutoryGoodsExemptionClause:
+      "Momsfri EU-vareleverance – Art. 138, stk. 1, og Art. 226, nr. 11, i direktiv 2006/112/EF (ML § 34, stk. 1, nr. 1) / Intra-Community exempt supply of goods",
+  }),
+  EE: Object.freeze({
+    memberState: "EE",
+    countryNameEn: "Estonia",
+    nativeCountryName: "Eesti",
+    taxIdAcronym: "KMKR",
+    nativeTaxIdName: "Käibemaksukohustuslase registreerimisnumber",
+    directiveArticle: "Art. 196 & Art. 226(11a) Council Directive 2006/112/EC",
+    directiveGoodsArticle: "Art. 138(1) & Art. 226(11) Council Directive 2006/112/EC",
+    statutoryReverseChargeClause:
+      "Pöördmaksustamine – direktiivi 2006/112/EÜ art 196 ja art 226 p 11a / Reverse charge (B2B services)",
+    statutoryGoodsExemptionClause:
+      "Ühendusesisene kauba käive (0% KM) – direktiivi 2006/112/EÜ art 138 lg 1 ja art 226 p 11 (KMS § 15 lg 3 p 2) / Intra-Community exempt supply of goods",
+  }),
+  EL: Object.freeze({
+    memberState: "EL",
+    countryNameEn: "Greece",
+    nativeCountryName: "Ελλάδα",
+    taxIdAcronym: "ΑΦΜ",
+    nativeTaxIdName: "Αριθμός Φορολογικού Μητρώου (ΦΠΑ)",
+    directiveArticle: "Art. 196 & Art. 226(11a) Council Directive 2006/112/EC",
+    directiveGoodsArticle: "Art. 138(1) & Art. 226(11) Council Directive 2006/112/EC",
+    statutoryReverseChargeClause:
+      "Αντίστροφη επιβάρυνση – Άρθρα 196 & 226(11α) Οδηγίας 2006/112/ΕΚ / Reverse charge (B2B services)",
+    statutoryGoodsExemptionClause:
+      "Απαλλασσόμενη ενδοκοινοτική παράδοση αγαθών – Άρθρα 138(1) & 226(11) Οδηγίας 2006/112/ΕΚ (Άρθρο 28 Κώδικα ΦΠΑ) / Intra-Community exempt supply of goods",
+  }),
+  ES: Object.freeze({
+    memberState: "ES",
+    countryNameEn: "Spain",
+    nativeCountryName: "España",
+    taxIdAcronym: "NIF-IVA",
+    nativeTaxIdName: "Número de Identificación Fiscal (ROI / NIF-IVA)",
+    directiveArticle: "Art. 196 & Art. 226(11a) Council Directive 2006/112/EC",
+    directiveGoodsArticle: "Art. 138(1) & Art. 226(11) Council Directive 2006/112/EC",
+    statutoryReverseChargeClause:
+      "Inversión del sujeto pasivo – Art. 196 y Art. 226.11 bis Directiva 2006/112/CE (Art. 84 LIVA) / Reverse charge (B2B services)",
+    statutoryGoodsExemptionClause:
+      "Entrega intracomunitaria exenta de bienes – Art. 138.1 y Art. 226.11 Directiva 2006/112/CE (Art. 25 LIVA) / Intra-Community exempt supply of goods",
+  }),
+  FI: Object.freeze({
+    memberState: "FI",
+    countryNameEn: "Finland",
+    nativeCountryName: "Suomi",
+    taxIdAcronym: "ALV-nro",
+    nativeTaxIdName: "Arvonlisäverotunniste (Y-tunnus)",
+    directiveArticle: "Art. 196 & Art. 226(11a) Council Directive 2006/112/EC",
+    directiveGoodsArticle: "Art. 138(1) & Art. 226(11) Council Directive 2006/112/EC",
+    statutoryReverseChargeClause:
+      "Käännetty verovelvollisuus – direktiivin 2006/112/EY 196 art. ja 226 art. 11a kohta / Reverse charge (B2B services)",
+    statutoryGoodsExemptionClause:
+      "Veroton yhteisömyynti – direktiivin 2006/112/EY 138 art. 1 kohta ja 226 art. 11 kohta (AVL 72 a §) / Intra-Community exempt supply of goods",
+  }),
+  FR: Object.freeze({
+    memberState: "FR",
+    countryNameEn: "France",
+    nativeCountryName: "France",
+    taxIdAcronym: "N° TVA",
+    nativeTaxIdName: "Numéro de TVA intracommunautaire",
+    directiveArticle: "Art. 196 & Art. 226(11a) Council Directive 2006/112/EC",
+    directiveGoodsArticle: "Art. 138(1) & Art. 226(11) Council Directive 2006/112/EC",
+    statutoryReverseChargeClause:
+      "Autoliquidation – Art. 196 et Art. 226, point 11 bis, de la Directive 2006/112/CE (CGI art. 283-2) / Reverse charge (B2B services)",
+    statutoryGoodsExemptionClause:
+      "Exonération de TVA – Livraison intracommunautaire de biens – Art. 138, par. 1, et Art. 226, point 11, Directive 2006/112/CE (CGI art. 262 ter I) / Intra-Community exempt supply of goods",
+  }),
+  HR: Object.freeze({
+    memberState: "HR",
+    countryNameEn: "Croatia",
+    nativeCountryName: "Hrvatska",
+    taxIdAcronym: "PDV ID / OIB",
+    nativeTaxIdName: "PDV identifikacijski broj (OIB)",
+    directiveArticle: "Art. 196 & Art. 226(11a) Council Directive 2006/112/EC",
+    directiveGoodsArticle: "Art. 138(1) & Art. 226(11) Council Directive 2006/112/EC",
+    statutoryReverseChargeClause:
+      "Prijenos porezne obveze – čl. 196. i čl. 226. t. 11.a Direktive 2006/112/EZ / Reverse charge (B2B services)",
+    statutoryGoodsExemptionClause:
+      "Oslobođena isporuka dobara unutar EU – čl. 138. st. 1. i čl. 226. t. 11. Direktive 2006/112/EZ (čl. 41. st. 1. Zakona o PDV-u) / Intra-Community exempt supply of goods",
+  }),
+  HU: Object.freeze({
+    memberState: "HU",
+    countryNameEn: "Hungary",
+    nativeCountryName: "Magyarország",
+    taxIdAcronym: "Közösségi adószám",
+    nativeTaxIdName: "Közösségi adószám (EU ÁFA)",
+    directiveArticle: "Art. 196 & Art. 226(11a) Council Directive 2006/112/EC",
+    directiveGoodsArticle: "Art. 138(1) & Art. 226(11) Council Directive 2006/112/EC",
+    statutoryReverseChargeClause:
+      "Fordított adózás – a 2006/112/EK irányelv 196. cikke és 226. cikkének 11a. pontja / Reverse charge (B2B services)",
+    statutoryGoodsExemptionClause:
+      "Adómentes Közösségen belüli termékértékesítés – a 2006/112/EK irányelv 138. cikk (1) bek. és 226. cikk 11. pontja (Áfa tv. 89. §) / Intra-Community exempt supply of goods",
+  }),
+  IE: Object.freeze({
+    memberState: "IE",
+    countryNameEn: "Ireland",
+    nativeCountryName: "Éire / Ireland",
+    taxIdAcronym: "VAT Reg No",
+    nativeTaxIdName: "Value Added Tax Registration Number",
+    directiveArticle: "Art. 196 & Art. 226(11a) Council Directive 2006/112/EC",
+    directiveGoodsArticle: "Art. 138(1) & Art. 226(11) Council Directive 2006/112/EC",
+    statutoryReverseChargeClause:
+      "Reverse charge – Art. 196 & Art. 226(11a) Council Directive 2006/112/EC (B2B services)",
+    statutoryGoodsExemptionClause:
+      "Zero-rated intra-Community supply of goods – Art. 138(1) & Art. 226(11) Council Directive 2006/112/EC",
+  }),
+  IT: Object.freeze({
+    memberState: "IT",
+    countryNameEn: "Italy",
+    nativeCountryName: "Italia",
+    taxIdAcronym: "P.IVA",
+    nativeTaxIdName: "Partita IVA intracomunitaria (VIES)",
+    directiveArticle: "Art. 196 & Art. 226(11a) Council Directive 2006/112/EC",
+    directiveGoodsArticle: "Art. 138(1) & Art. 226(11) Council Directive 2006/112/EC",
+    statutoryReverseChargeClause:
+      "Inversione contabile – Art. 196 e Art. 226, punto 11-bis, Direttiva 2006/112/CE (Art. 17 DPR 633/72) / Reverse charge (B2B services)",
+    statutoryGoodsExemptionClause:
+      "Cessione intracomunitaria non imponibile di beni – Art. 138, par. 1, e Art. 226, punto 11, Direttiva 2006/112/CE (Art. 41 D.L. 331/1993) / Intra-Community exempt supply of goods",
+  }),
+  LT: Object.freeze({
+    memberState: "LT",
+    countryNameEn: "Lithuania",
+    nativeCountryName: "Lietuva",
+    taxIdAcronym: "PVM kodas",
+    nativeTaxIdName: "Pridėtinės vertės mokesčio mokėtojo kodas",
+    directiveArticle: "Art. 196 & Art. 226(11a) Council Directive 2006/112/EC",
+    directiveGoodsArticle: "Art. 138(1) & Art. 226(11) Council Directive 2006/112/EC",
+    statutoryReverseChargeClause:
+      "Atvirkštinis apmokestinimas – Direktyvos 2006/112/EB 196 str. ir 226 str. 11a p. / Reverse charge (B2B services)",
+    statutoryGoodsExemptionClause:
+      "PVM neapmokestinamas prekių tiekimas į kitą ES valstybę narę – Direktyvos 2006/112/EB 138 str. 1 d. ir 226 str. 11 p. (PVMĮ 49 str.) / Intra-Community exempt supply of goods",
+  }),
+  LU: Object.freeze({
+    memberState: "LU",
+    countryNameEn: "Luxembourg",
+    nativeCountryName: "Lëtzebuerg / Luxembourg",
+    taxIdAcronym: "N° TVA",
+    nativeTaxIdName: "Numéro d'identification à la TVA",
+    directiveArticle: "Art. 196 & Art. 226(11a) Council Directive 2006/112/EC",
+    directiveGoodsArticle: "Art. 138(1) & Art. 226(11) Council Directive 2006/112/EC",
+    statutoryReverseChargeClause:
+      "Autoliquidation – Art. 196 et Art. 226, point 11 bis, Directive 2006/112/CE / Reverse charge (B2B services)",
+    statutoryGoodsExemptionClause:
+      "Livraison intracommunautaire de biens exonérée – Art. 138, par. 1, et Art. 226, point 11, Directive 2006/112/CE (Art. 43 LTVA) / Intra-Community exempt supply of goods",
+  }),
+  LV: Object.freeze({
+    memberState: "LV",
+    countryNameEn: "Latvia",
+    nativeCountryName: "Latvija",
+    taxIdAcronym: "PVN Nr.",
+    nativeTaxIdName: "Pievienotās vērtības nodokļa reģistrācijas numurs",
+    directiveArticle: "Art. 196 & Art. 226(11a) Council Directive 2006/112/EC",
+    directiveGoodsArticle: "Art. 138(1) & Art. 226(11) Council Directive 2006/112/EC",
+    statutoryReverseChargeClause:
+      "Nodokļa apgrieztā maksāšana – Direktīvas 2006/112/EK 196. pants un 226. panta 11.a punkts / Reverse charge (B2B services)",
+    statutoryGoodsExemptionClause:
+      "Ar 0% PVN likmi apliekama preču piegāde ES ietvaros – Direktīvas 2006/112/EK 138. panta 1. punkts un 226. panta 11. punkts (PVN likuma 43. pants) / Intra-Community exempt supply of goods",
+  }),
+  MT: Object.freeze({
+    memberState: "MT",
+    countryNameEn: "Malta",
+    nativeCountryName: "Malta",
+    taxIdAcronym: "VAT Reg. No.",
+    nativeTaxIdName: "Value Added Tax Registration Number",
+    directiveArticle: "Art. 196 & Art. 226(11a) Council Directive 2006/112/EC",
+    directiveGoodsArticle: "Art. 138(1) & Art. 226(11) Council Directive 2006/112/EC",
+    statutoryReverseChargeClause:
+      "Reverse charge – Art. 196 & Art. 226(11a) Council Directive 2006/112/EC (B2B services)",
+    statutoryGoodsExemptionClause:
+      "Exempt intra-Community supply of goods – Art. 138(1) & Art. 226(11) Council Directive 2006/112/EC",
+  }),
+  NL: Object.freeze({
+    memberState: "NL",
+    countryNameEn: "Netherlands",
+    nativeCountryName: "Nederland",
+    taxIdAcronym: "Btw-id",
+    nativeTaxIdName: "Btw-identificatienummer",
+    directiveArticle: "Art. 196 & Art. 226(11a) Council Directive 2006/112/EC",
+    directiveGoodsArticle: "Art. 138(1) & Art. 226(11) Council Directive 2006/112/EC",
+    statutoryReverseChargeClause:
+      "Btw verlegd – Art. 196 & Art. 226 lid 11 bis Richtlijn 2006/112/EG / Reverse charge (B2B services)",
+    statutoryGoodsExemptionClause:
+      "Vrijgestelde intracommunautaire levering van goederen (0% btw) – Art. 138 lid 1 & Art. 226 lid 11 Richtlijn 2006/112/EG (Art. 9 lid 2 sub b Wet OB 1968 juncto Tabel II onderdeel a post 6) / Intra-Community exempt supply of goods",
+  }),
+  PL: Object.freeze({
+    memberState: "PL",
+    countryNameEn: "Poland",
+    nativeCountryName: "Polska",
+    taxIdAcronym: "NIP (VAT-UE)",
+    nativeTaxIdName: "Numer Identyfikacji Podatkowej (NIP UE)",
+    directiveArticle: "Art. 196 & Art. 226(11a) Council Directive 2006/112/EC",
+    directiveGoodsArticle: "Art. 138(1) & Art. 226(11) Council Directive 2006/112/EC",
+    statutoryReverseChargeClause:
+      "Odwrotne obciążenie – art. 196 i art. 226 pkt 11a dyrektywy 2006/112/WE / Reverse charge (B2B services)",
+    statutoryGoodsExemptionClause:
+      "Wewnątrzwspólnotowa dostawa towarów (0% VAT) – art. 138 ust. 1 i art. 226 pkt 11 dyrektywy 2006/112/WE (art. 42 ust. 1 ustawy o VAT) / Intra-Community exempt supply of goods",
+  }),
+  PT: Object.freeze({
+    memberState: "PT",
+    countryNameEn: "Portugal",
+    nativeCountryName: "Portugal",
+    taxIdAcronym: "NIF / NIPC",
+    nativeTaxIdName: "Número de Identificação Fiscal (IVA)",
+    directiveArticle: "Art. 196 & Art. 226(11a) Council Directive 2006/112/EC",
+    directiveGoodsArticle: "Art. 138(1) & Art. 226(11) Council Directive 2006/112/EC",
+    statutoryReverseChargeClause:
+      "Autoliquidação – Art. 196.º e Art. 226.º, n.º 11-A, da Diretiva 2006/112/CE / Reverse charge (B2B services)",
+    statutoryGoodsExemptionClause:
+      "Transmissão intracomunitária de bens isenta de IVA – Art. 138.º, n.º 1, e Art. 226.º, n.º 11, da Diretiva 2006/112/CE (Art. 14.º do RITI) / Intra-Community exempt supply of goods",
+  }),
+  RO: Object.freeze({
+    memberState: "RO",
+    countryNameEn: "Romania",
+    nativeCountryName: "România",
+    taxIdAcronym: "CIF / Cod TVA",
+    nativeTaxIdName: "Cod de înregistrare în scopuri de TVA",
+    directiveArticle: "Art. 196 & Art. 226(11a) Council Directive 2006/112/EC",
+    directiveGoodsArticle: "Art. 138(1) & Art. 226(11) Council Directive 2006/112/EC",
+    statutoryReverseChargeClause:
+      "Taxare inversă – Art. 196 și Art. 226 pct. 11a din Directiva 2006/112/CE / Reverse charge (B2B services)",
+    statutoryGoodsExemptionClause:
+      "Livrare intracomunitară de bunuri scutită de TVA – Art. 138 alin. (1) și Art. 226 pct. 11 din Directiva 2006/112/CE (Art. 294 alin. (2) Codul Fiscal) / Intra-Community exempt supply of goods",
+  }),
+  SE: Object.freeze({
+    memberState: "SE",
+    countryNameEn: "Sweden",
+    nativeCountryName: "Sverige",
+    taxIdAcronym: "Momsnr",
+    nativeTaxIdName: "Momsregistreringsnummer (SE-nummer)",
+    directiveArticle: "Art. 196 & Art. 226(11a) Council Directive 2006/112/EC",
+    directiveGoodsArticle: "Art. 138(1) & Art. 226(11) Council Directive 2006/112/EC",
+    statutoryReverseChargeClause:
+      "Omvänd betalningsskyldighet – Art. 196 & Art. 226.11a i direktiv 2006/112/EG / Reverse charge (B2B services)",
+    statutoryGoodsExemptionClause:
+      "Undantagen unionsintern leverans av varor – Art. 138.1 & Art. 226.11 i direktiv 2006/112/EG (10 kap. 42 § ML) / Intra-Community exempt supply of goods",
+  }),
+  SI: Object.freeze({
+    memberState: "SI",
+    countryNameEn: "Slovenia",
+    nativeCountryName: "Slovenija",
+    taxIdAcronym: "ID za DDV",
+    nativeTaxIdName: "Identifikacijska številka za DDV",
+    directiveArticle: "Art. 196 & Art. 226(11a) Council Directive 2006/112/EC",
+    directiveGoodsArticle: "Art. 138(1) & Art. 226(11) Council Directive 2006/112/EC",
+    statutoryReverseChargeClause:
+      "Obrnjena davčna obveznost – člen 196 in člen 226(11a) Direktive 2006/112/ES / Reverse charge (B2B services)",
+    statutoryGoodsExemptionClause:
+      "Oproščena dobava blaga znotraj Unije – člen 138(1) in člen 226(11) Direktive 2006/112/ES (46. člen ZDDV-1) / Intra-Community exempt supply of goods",
+  }),
+  SK: Object.freeze({
+    memberState: "SK",
+    countryNameEn: "Slovakia",
+    nativeCountryName: "Slovensko",
+    taxIdAcronym: "IČ DPH",
+    nativeTaxIdName: "Identifikačné číslo pre daň z pridanej hodnoty",
+    directiveArticle: "Art. 196 & Art. 226(11a) Council Directive 2006/112/EC",
+    directiveGoodsArticle: "Art. 138(1) & Art. 226(11) Council Directive 2006/112/EC",
+    statutoryReverseChargeClause:
+      "Prenesenie daňovej povinnosti – čl. 196 a čl. 226 bod 11a smernice 2006/112/ES / Reverse charge (B2B services)",
+    statutoryGoodsExemptionClause:
+      "Oslobodené dodanie tovaru do iného členského štátu – čl. 138 ods. 1 a čl. 226 bod 11 smernice 2006/112/ES (§ 43 zákona o DPH) / Intra-Community exempt supply of goods",
+  }),
+  XI: Object.freeze({
+    memberState: "XI",
+    countryNameEn: "Northern Ireland (Windsor Framework)",
+    nativeCountryName: "Northern Ireland (Windsor Framework)",
+    taxIdAcronym: "XI VAT No",
+    nativeTaxIdName: "Northern Ireland Protocol / Windsor Framework VAT Number (Goods Only)",
+    goodsOnlyProtocol: true,
+    directiveArticle:
+      "Windsor Framework (Goods Only — Services Not Covered by XI VIES) / Art. 138(1) & Art. 226(11) Council Directive 2006/112/EC",
+    directiveGoodsArticle:
+      "Windsor Framework (Goods Only) / Art. 138(1) & Art. 226(11) Council Directive 2006/112/EC",
+    statutoryReverseChargeClause:
+      "N/A for B2B services under XI VIES (Windsor Framework applies to goods only under Art. 138(1) & Art. 226(11) Directive 2006/112/EC; UK/GB place-of-supply rules govern services)",
+    statutoryGoodsExemptionClause:
+      "Zero-rated intra-community supply of goods under Windsor Framework (Northern Ireland Protocol) – Art. 138(1) & Art. 226(11) Directive 2006/112/EC",
+  }),
+});
+
+export function getEuViesStatutoryTerminology(rawCode) {
+  const code = normalizeCountryCode(rawCode || "");
+  if (!code || !Object.prototype.hasOwnProperty.call(EU_VIES_STATUTORY_TERMINOLOGY_MAP, code)) {
+    return null;
+  }
+  return EU_VIES_STATUTORY_TERMINOLOGY_MAP[code];
+}
+
 const REVCLAMP_START_MARKER = "--- BEGIN REVCLAMP CE3 EVIDENCE ---";
 const REVCLAMP_END_MARKER = "--- END REVCLAMP CE3 EVIDENCE ---";
 const REVCLAMP_BRACKET_START_MARKER = "[RevClamp Verified Product Usage Log]";
@@ -357,6 +753,13 @@ export const LOCAL_MCP_TOOLS = Object.freeze([
       properties: {
         sellerCountry: { type: "string", default: "DE" },
         buyerVatId: { type: "string" },
+        supplyType: {
+          type: "string",
+          enum: ["GOODS", "SERVICES"],
+          default: "GOODS",
+          description:
+            "Cross-border transaction supply category: 'GOODS' (Directive 2006/112/EC Art. 138(1) intra-Community supply, default; permitted for Northern Ireland XI under Windsor Framework) or 'SERVICES' (Directive 2006/112/EC Art. 196 B2B reverse charge; excluded from EU VIES for Northern Ireland XI).",
+        },
         viesMode: {
           type: "string",
           enum: [
@@ -655,14 +1058,20 @@ export function validateArgsAgainstSchema(schema, args) {
 function normalizeCountryCode(raw) {
   const clean = String(raw || "")
     .trim()
-    .toUpperCase();
-  return clean === "GR" ? "EL" : clean;
+    .toUpperCase()
+    .replace(/[\s.\-/:_]+/g, "");
+  if (clean === "GR") return "EL";
+  if (clean === "GBNIR") return "XI";
+  return clean;
 }
 
 function normalizeVatId(rawVat) {
-  const compact = String(rawVat || "")
+  let compact = String(rawVat || "")
     .toUpperCase()
-    .replace(/[\s.\-/:]+/g, "");
+    .replace(/[\s.\-/:_]+/g, "");
+  if (compact.startsWith("GBNIR")) {
+    compact = `XI${compact.slice(5)}`;
+  }
   if (compact.length < 4) {
     return { validFormat: false, memberState: "", vatNumber: "", fullVatId: compact };
   }
@@ -1008,14 +1417,37 @@ function evaluateLocalGhostUsage(subscriptionsEnv, usageEvent, dunningGracePerio
         reason: "UNMATCHED_CUSTOMER_ID",
       };
     }
+    const hasPositiveCustomerIdMatch = Boolean(evCustomerId && subCus && subCus === evCustomerId);
+    const hasPositiveEmailMatch = Boolean(evEmail && subEmail && subEmail === evEmail);
+    if (!hasPositiveCustomerIdMatch && !hasPositiveEmailMatch) {
+      return {
+        ok: true,
+        executionMode: "local_open_source_engine",
+        isGhostUsage: false,
+        decision: "HOLD_CUSTOMER_MISMATCH",
+        reason: subCus ? "UNMATCHED_CUSTOMER_ID" : "UNMATCHED_CUSTOMER_EMAIL",
+      };
+    }
     const st = sub.status.trim();
     if (ENTITLED_SUB_STATUSES.has(st)) {
+      const collectionPaused = Boolean(
+        sub.pause_collection && typeof sub.pause_collection === "object"
+      );
       return {
         ok: true,
         executionMode: "local_open_source_engine",
         isGhostUsage: false,
         decision: "ALLOW_ENTITLED",
         reason: "ACTIVE_SUBSCRIPTION_PRESENT",
+        ...(collectionPaused
+          ? {
+              collectionPaused: true,
+              pauseCollectionBehavior:
+                typeof sub.pause_collection.behavior === "string"
+                  ? sub.pause_collection.behavior
+                  : "void",
+            }
+          : {}),
       };
     }
     if (sub.items?.has_more === true) {
@@ -1152,7 +1584,36 @@ function parseStrictIpv4Octets(str) {
 
 function normalizeIpForCe3Correlation(ip) {
   if (typeof ip !== "string") return null;
-  const clean = ip.trim().replace(/^\[|\]$/g, "").replace(/%[^\s%\]]+$/, "").trim().toLowerCase();
+  let raw = ip.trim().toLowerCase();
+  if (!raw || raw.includes(",")) return null;
+  if (raw.startsWith("ipv4:")) {
+    raw = raw.slice(5).trim();
+  } else if (raw.startsWith("ipv6_64:")) {
+    const v6Match = raw.match(
+      /^ipv6_64:([0-9a-f]{1,4}):([0-9a-f]{1,4}):([0-9a-f]{1,4}):([0-9a-f]{1,4})$/
+    );
+    if (!v6Match) return null;
+    return `ipv6_64:${v6Match
+      .slice(1, 5)
+      .map((w) => Number.parseInt(w, 16).toString(16).padStart(4, "0"))
+      .join(":")}`;
+  }
+  const bracketPortMatch = raw.match(/^\[([^\]]+)\](?::(\d{1,5}))?$/);
+  if (bracketPortMatch) {
+    if (bracketPortMatch[2] !== undefined) {
+      const portNum = Number(bracketPortMatch[2]);
+      if (!Number.isInteger(portNum) || portNum < 1 || portNum > 65535) return null;
+    }
+    raw = bracketPortMatch[1];
+  } else {
+    const v4PortMatch = raw.match(/^(\d{1,3}(?:\.\d{1,3}){3}):(\d{1,5})$/);
+    if (v4PortMatch) {
+      const portNum = Number(v4PortMatch[2]);
+      if (!Number.isInteger(portNum) || portNum < 1 || portNum > 65535) return null;
+      raw = v4PortMatch[1];
+    }
+  }
+  const clean = raw.replace(/^\[|\]$/g, "").replace(/%[^\s%\]]+$/, "").trim();
   if (!clean) return null;
   const directV4 = parseStrictIpv4Octets(clean);
   if (directV4) return `ipv4:${directV4.join(".")}`;
@@ -1283,14 +1744,30 @@ function extractNormalizedCe3Identifiers(tx) {
 
 function extractPaymentCredential(tx) {
   if (!tx || typeof tx !== "object") return "";
-  const raw =
-    tx.card_fingerprint ||
-    tx.payment_method_fingerprint ||
-    tx.payment_method ||
-    tx.payment_method_details?.card?.fingerprint ||
-    tx.card?.fingerprint ||
-    "";
-  return sanitizeLogToken(raw, 96);
+  const fpCandidates = [
+    tx.card_fingerprint,
+    tx.payment_method_fingerprint,
+    tx.payment_method_details?.card?.fingerprint,
+    tx.payment_method && typeof tx.payment_method === "object"
+      ? tx.payment_method.card?.fingerprint
+      : "",
+    tx.card?.fingerprint,
+    tx.source?.card?.fingerprint,
+  ];
+  for (const cand of fpCandidates) {
+    if (typeof cand === "string" && cand.trim()) {
+      return sanitizeLogToken(cand.trim(), 96);
+    }
+  }
+  const pmId =
+    typeof tx.payment_method === "string"
+      ? tx.payment_method
+      : tx.payment_method &&
+          typeof tx.payment_method === "object" &&
+          typeof tx.payment_method.id === "string"
+        ? tx.payment_method.id
+        : "";
+  return sanitizeLogToken(pmId, 96);
 }
 
 function evaluateLocalVisaCe3Qualification(disputeReason, disputedTransaction, priorTransactions) {
@@ -1436,7 +1913,7 @@ export const LOCAL_STATELESS_CLOUD_UPGRADE_HINT = Object.freeze({
   message:
     "Running in stateless local mode. Provision a free or paid Cloud Workspace for 90-day event persistence, automated webhook revocation, and Slack/Email alerts.",
   command: "npx --yes revclamp-mcp --init-workspace <work_email>",
-  cliActivateCommand: "npx -y revclamp-mcp@1.20.10 --init-workspace you@company.com",
+  cliActivateCommand: "npx -y revclamp-mcp@1.20.12 --init-workspace you@company.com",
   upgradeUrl: "https://revclamp.com/pricing?source=mcp_cli",
 });
 
@@ -2447,11 +2924,10 @@ function executeLocalMcpToolCore(toolName, rawArgs = {}) {
     if (
       args.consultationNumber !== undefined &&
       (typeof args.consultationNumber !== "string" ||
-        args.consultationNumber.trim().length === 0 ||
-        args.consultationNumber.trim().length > 64)
+        !/^[A-Za-z0-9_-]{1,64}$/.test(args.consultationNumber.trim()))
     ) {
       const err = new Error(
-        "Invalid params: consultationNumber must be a non-empty string up to 64 chars"
+        "Invalid params: consultationNumber must be 1..64 alphanumeric, underscore, or hyphen characters [A-Za-z0-9_-]"
       );
       err.code = -32602;
       throw err;
@@ -2464,10 +2940,58 @@ function executeLocalMcpToolCore(toolName, rawArgs = {}) {
       err.code = -32602;
       throw err;
     }
+    if (
+      args.supplyType !== undefined &&
+      (typeof args.supplyType !== "string" ||
+        !["GOODS", "SERVICES"].includes(args.supplyType.trim().toUpperCase()))
+    ) {
+      const err = new Error("Invalid params: supplyType must be 'GOODS' or 'SERVICES'");
+      err.code = -32602;
+      throw err;
+    }
+    const supplyType =
+      args.supplyType === undefined ? "GOODS" : args.supplyType.trim().toUpperCase();
     const norm = normalizeVatId(args.buyerVatId || "");
     const viesMode = String(args.viesMode || "FORMAT_ONLY").toUpperCase();
     const isDemo = args.demo === true;
 
+    if (
+      norm.validFormat &&
+      sellerCountry !== norm.memberState &&
+      supplyType === "SERVICES" &&
+      (sellerCountry === "XI" || norm.memberState === "XI")
+    ) {
+      const statutoryTerminology = getEuViesStatutoryTerminology(norm.memberState);
+      const sellerStatutoryTerminology = getEuViesStatutoryTerminology(sellerCountry);
+      return {
+        ok: true,
+        executionMode: "local_open_source_engine",
+        ...(isDemo ? { sample: true, simulatedViesLookup: true } : {}),
+        valid: null,
+        formatValid: true,
+        supplyType,
+        status: "HOLD_XI_SERVICES_OUTSIDE_EU_VIES",
+        action: "APPLY_UK_OR_NON_EU_SERVICES_VAT_RULES",
+        reason: "WINDSOR_FRAMEWORK_XI_B2B_SERVICES_EXCLUDED_FROM_VIES",
+        sellerCountry,
+        sellerStatutoryTerminology,
+        normalizedVatId: norm.fullVatId,
+        memberState: norm.memberState,
+        statutoryTerminology,
+        crossBorderSupply: true,
+        domesticSameMemberState: false,
+        reverseChargeEligible: false,
+        zeroRateAllowed: false,
+        statutoryReverseChargeClause: null,
+        sellerStatutoryReverseChargeClause: null,
+        statutoryGoodsExemptionClause: null,
+        sellerStatutoryGoodsExemptionClause: null,
+        applicableStatutoryClause: null,
+        sellerApplicableStatutoryClause: null,
+        consultationId: null,
+      };
+    }
+
     if (viesMode === "LIVE") {
       const err = new Error(
         "LIVE_VIES_REQUIRES_CLOUD_ENDPOINT: Live European Commission VIES consultation requires cloud mode (https://api.revclamp.com/api/mcp with REVCLAMP_API_KEY)."
@@ -2488,9 +3012,10 @@ function executeLocalMcpToolCore(toolName, rawArgs = {}) {
       return {
         ok: true,
         executionMode: "local_open_source_engine",
-        ...(isDemo ? { sample: true } : {}),
+        ...(isDemo ? { sample: true, simulatedViesLookup: true } : {}),
         valid: false,
         formatValid: false,
+        supplyType,
         status: "HOLD_INVALID_VAT",
         reason: "INVALID_EU_VAT_FORMAT",
         sellerCountry,
@@ -2502,6 +3027,12 @@ function executeLocalMcpToolCore(toolName, rawArgs = {}) {
     }
 
     const crossBorder = sellerCountry !== norm.memberState;
+    const statutoryTerminology = getEuViesStatutoryTerminology(norm.memberState);
+    const sellerStatutoryTerminology = getEuViesStatutoryTerminology(sellerCountry);
+    const callerConsultationId =
+      typeof args.consultationNumber === "string" && args.consultationNumber.trim().length > 0
+        ? args.consultationNumber.trim().slice(0, 64)
+        : null;
 
     if (!isDemo || viesMode === "FORMAT_ONLY") {
       return {
@@ -2509,14 +3040,25 @@ function executeLocalMcpToolCore(toolName, rawArgs = {}) {
         executionMode: "local_open_source_engine",
         valid: null,
         formatValid: true,
+        supplyType,
         status: "FORMAT_VALID_UNVERIFIED",
+        action: crossBorder ? "FORMAT_VALID_UNVERIFIED" : "APPLY_DOMESTIC_STANDARD_VAT",
         reason: "LOCAL_FORMAT_CHECK_ONLY_NO_LIVE_VIES_CONSULTATION",
         sellerCountry,
+        sellerStatutoryTerminology,
         normalizedVatId: norm.fullVatId,
         memberState: norm.memberState,
+        statutoryTerminology,
         crossBorderSupply: crossBorder,
+        domesticSameMemberState: !crossBorder,
         reverseChargeEligible: false,
         zeroRateAllowed: false,
+        statutoryReverseChargeClause: null,
+        sellerStatutoryReverseChargeClause: null,
+        statutoryGoodsExemptionClause: null,
+        sellerStatutoryGoodsExemptionClause: null,
+        applicableStatutoryClause: null,
+        sellerApplicableStatutoryClause: null,
         consultationId: null,
         limitations: ["NO_LIVE_VIES_CONSULTATION_NUMBER"],
         upgrade: {
@@ -2527,56 +3069,157 @@ function executeLocalMcpToolCore(toolName, rawArgs = {}) {
       };
     }
 
-    if (viesMode === "MS_UNAVAILABLE" || viesMode === "GLOBAL_MAX_CONCURRENT_REQ") {
+    const TRANSIENT_SIM_MODES = new Set([
+      "MS_UNAVAILABLE",
+      "GLOBAL_MAX_CONCURRENT_REQ",
+      "MS_MAX_CONCURRENT_REQ",
+      "MS_MAX_CONCURRENT_REQ_TIME",
+      "GLOBAL_MAX_CONCURRENT_REQ_TIME",
+      "SERVICE_UNAVAILABLE",
+      "TIMEOUT",
+      "SERVER_BUSY",
+      "NETWORK_ERROR",
+    ]);
+    if (TRANSIENT_SIM_MODES.has(viesMode)) {
       return {
         ok: true,
         executionMode: "local_open_source_engine",
         sample: true,
+        simulatedViesLookup: true,
         valid: null,
         formatValid: true,
+        supplyType,
         status: "PENDING_ASYNC_RETRY",
         reason: `VIES_SOFT_FAULT_${viesMode}`,
         sellerCountry,
+        sellerStatutoryTerminology,
+        normalizedVatId: norm.fullVatId,
+        memberState: norm.memberState,
+        statutoryTerminology,
+        domesticSameMemberState: !crossBorder,
+        reverseChargeEligible: false,
+        zeroRateAllowed: false,
+        consultationId: null,
+      };
+    }
+
+    if (viesMode === "INVALID_REQUESTER_INFO" || viesMode === "IP_BLOCKED") {
+      return {
+        ok: true,
+        executionMode: "local_open_source_engine",
+        sample: true,
+        simulatedViesLookup: true,
+        valid: null,
+        formatValid: true,
+        supplyType,
+        status: "HOLD_UNVERIFIED_VIES_FAULT",
+        reason: `VIES_GATEWAY_FAULT_${viesMode}`,
+        sellerCountry,
+        sellerStatutoryTerminology,
         normalizedVatId: norm.fullVatId,
         memberState: norm.memberState,
+        statutoryTerminology,
+        domesticSameMemberState: !crossBorder,
         reverseChargeEligible: false,
         zeroRateAllowed: false,
         consultationId: null,
       };
     }
 
-    if (viesMode === "INVALID") {
+    if (viesMode === "INVALID" || viesMode === "VAT_BLOCKED" || viesMode === "INVALID_INPUT") {
       return {
         ok: true,
         executionMode: "local_open_source_engine",
         sample: true,
+        simulatedViesLookup: true,
         valid: false,
         formatValid: true,
+        supplyType,
         status: "HOLD_INVALID_VAT",
-        reason: "VIES_DEFINITE_INVALID",
+        reason: viesMode === "INVALID" ? "VIES_DEFINITE_INVALID" : `VIES_${viesMode}`,
+        sellerCountry,
+        sellerStatutoryTerminology,
+        normalizedVatId: norm.fullVatId,
+        memberState: norm.memberState,
+        statutoryTerminology,
+        domesticSameMemberState: !crossBorder,
+        reverseChargeEligible: false,
+        zeroRateAllowed: false,
+        consultationId: null,
+      };
+    }
+
+    if (viesMode !== "VALID" && viesMode !== "VERIFIED") {
+      return {
+        ok: true,
+        executionMode: "local_open_source_engine",
+        sample: true,
+        simulatedViesLookup: true,
+        valid: null,
+        formatValid: true,
+        supplyType,
+        status: "HOLD_UNVERIFIED_VIES_FAULT",
+        reason: "UNRECOGNIZED_VIES_SIMULATION_MODE",
         sellerCountry,
+        sellerStatutoryTerminology,
         normalizedVatId: norm.fullVatId,
         memberState: norm.memberState,
+        statutoryTerminology,
+        domesticSameMemberState: !crossBorder,
         reverseChargeEligible: false,
         zeroRateAllowed: false,
         consultationId: null,
       };
     }
 
+    const applicableStatutoryClause = crossBorder
+      ? supplyType === "GOODS"
+        ? statutoryTerminology?.statutoryGoodsExemptionClause || null
+        : statutoryTerminology?.statutoryReverseChargeClause || null
+      : null;
+    const sellerApplicableStatutoryClause = crossBorder
+      ? supplyType === "GOODS"
+        ? sellerStatutoryTerminology?.statutoryGoodsExemptionClause || null
+        : sellerStatutoryTerminology?.statutoryReverseChargeClause || null
+      : null;
+
     return {
       ok: true,
       executionMode: "local_open_source_engine",
       sample: true,
+      simulatedViesLookup: true,
       valid: true,
       formatValid: true,
+      supplyType,
       status: crossBorder ? "VERIFIED_ZERO_RATED" : "DOMESTIC_TAXABLE_SUPPLY",
+      action: crossBorder ? "ALLOW_ZERO_RATED_REVERSE_CHARGE" : "APPLY_DOMESTIC_STANDARD_VAT",
       reason: crossBorder ? "VALID_CROSS_BORDER_REVERSE_CHARGE" : "SAME_MEMBER_STATE_DOMESTIC",
       sellerCountry,
+      sellerStatutoryTerminology,
       normalizedVatId: norm.fullVatId,
       memberState: norm.memberState,
+      statutoryTerminology,
+      domesticSameMemberState: !crossBorder,
       reverseChargeEligible: crossBorder,
       zeroRateAllowed: crossBorder,
-      consultationId: "DEMO_SAMPLE_NOT_FOR_TAX_AUDIT",
+      statutoryReverseChargeClause: crossBorder
+        ? statutoryTerminology?.statutoryReverseChargeClause || null
+        : null,
+      sellerStatutoryReverseChargeClause: crossBorder
+        ? sellerStatutoryTerminology?.statutoryReverseChargeClause || null
+        : null,
+      statutoryGoodsExemptionClause: crossBorder
+        ? statutoryTerminology?.statutoryGoodsExemptionClause || null
+        : null,
+      sellerStatutoryGoodsExemptionClause: crossBorder
+        ? sellerStatutoryTerminology?.statutoryGoodsExemptionClause || null
+        : null,
+      applicableStatutoryClause,
+      sellerApplicableStatutoryClause,
+      consultationId: callerConsultationId || "DEMO_SAMPLE_NOT_FOR_TAX_AUDIT",
+      consultationIdSource: callerConsultationId
+        ? "CALLER_SUPPLIED_UNVERIFIED"
+        : "DEMO_SAMPLE_DEFAULT",
     };
   }
 
@@ -2670,20 +3313,21 @@ function executeLocalMcpToolCore(toolName, rawArgs = {}) {
 
     const effectiveTotalCents = Math.max(0, orderTotalCents - creditNotesCents);
     const hasExplicitDepositCents = args.requiredDepositCents !== undefined;
-    const requiredDepositCents = hasExplicitDepositCents
+    const rawRequiredDepositCents = hasExplicitDepositCents
       ? args.requiredDepositCents
       : Math.ceil((effectiveTotalCents * requiredDepositPercent) / 100);
     if (
-      !Number.isSafeInteger(requiredDepositCents) ||
-      requiredDepositCents < 0 ||
-      requiredDepositCents > effectiveTotalCents
+      !Number.isSafeInteger(rawRequiredDepositCents) ||
+      rawRequiredDepositCents < 0 ||
+      rawRequiredDepositCents > orderTotalCents
     ) {
       const err = new Error(
-        "INVALID_REQUIRED_DEPOSIT_CENTS: requiredDepositCents must be an integer between 0 and effectiveTotalCents."
+        "INVALID_REQUIRED_DEPOSIT_CENTS: requiredDepositCents must be an integer between 0 and totalOrderCents."
       );
       err.code = -32602;
       throw err;
     }
+    const requiredDepositCents = Math.min(rawRequiredDepositCents, effectiveTotalCents);
 
     const shortfallRawCents = Math.max(0, effectiveTotalCents - paidAmountCents);
     const overpaidCents = Math.max(0, paidAmountCents - effectiveTotalCents);
@@ -3341,7 +3985,7 @@ function toSafeLocalRpcId(rawId) {
 
 export function executeLocalMcpJsonRpc(
   rpcRequest,
-  packageVersion = "1.20.10",
+  packageVersion = "1.20.12",
   options = {}
 ) {
   if (!rpcRequest || typeof rpcRequest !== "object" || Array.isArray(rpcRequest)) {
@@ -3457,7 +4101,7 @@ export function executeLocalMcpJsonRpc(
               version: packageVersion,
               localExecution: "9 deterministic tools in local_engine.mjs (0 network calls by default)",
               cloudCapabilities: [
-                "90-day SQLite WAL usage & audit ledger",
+                "90-day durable transactional usage & audit ledger",
                 "24/7 autonomous Stripe dispute & entitlement webhook outbox",
                 "Live EU Commission VIES SOAP consultation numbers (viesMode: 'LIVE')",
               ],

package/mcp-config.json

@@ -26,7 +26,7 @@
   },
   "manifest": {
     "name": "revclamp-mcp",
-    "version": "1.20.10",
+    "version": "1.20.12",
     "tools": [
       "revclamp_audit_revenue_leakage",
       "revclamp_evaluate_ghost_usage",

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "revclamp-mcp",
-  "mcpName": "io.github.revclamp/revclamp-mcp",
-  "version": "1.20.10",
+  "mcpName": "com.revclamp/revclamp-mcp",
+  "version": "1.20.12",
   "description": "Model Context Protocol (MCP) server and CLI for Stripe 2025-03-31.basil entitlement checks, Visa CE 3.0 dispute staging (submit: false), EU/XI VIES VAT validation, Shopify Plus B2B Net-15/30/60 reconciliation, webhook HMAC-SHA256 verification, 0% take-rate ROI calculation, 72-hour webhook replay & out-of-order state-machine simulation, and Stripe dispute evidence 18,000 UTF-16 code unit & CE 3.0 completeness linting.",
   "type": "module",
   "main": "./index.mjs",
@@ -46,6 +46,6 @@
     "node": ">=20.0.0"
   },
   "revclamp": {
-    "engineSha256": "c18e79d00a51b23cc4745868a7371968709dca8c6385b7c27cca5e23e67dbb1f"
+    "engineSha256": "c67f214211284a479fbe10857dfef984b45e3c3403c37d5d834dcd5a5b326b60"
   }
 }

package/server.json

@@ -1,19 +1,19 @@
 {
   "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
-  "name": "io.github.revclamp/revclamp-mcp",
+  "name": "com.revclamp/revclamp-mcp",
   "title": "RevClamp MCP Server",
   "description": "Zero-take-rate Stripe 2025-03-31.basil, Visa CE 3.0 & EU/XI VIES VAT guardrails MCP server.",
   "repository": {
     "url": "https://github.com/lhphong09t2/revclamp-mcp",
     "source": "github"
   },
-  "version": "1.20.10",
+  "version": "1.20.12",
   "packages": [
     {
       "registryType": "npm",
       "registryBaseUrl": "https://registry.npmjs.org",
       "identifier": "revclamp-mcp",
-      "version": "1.20.10",
+      "version": "1.20.12",
       "transport": {
         "type": "stdio"
       },