[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_154":155,"_156":157},"routes/_app.x.$handle.$name",{"_11":12,"_13":14,"_15":16,"_18":19,"_17":-7,"_116":-5,"_20":117,"_22":118,"_119":120,"_121":122,"_26":123,"_24":124,"_125":-5,"_126":-5,"_127":52,"_128":129,"_130":43,"_131":-5,"_132":-5,"_133":134},"routes/_app.x.$handle.$name.branch.$branch.code.$",{"_11":12,"_13":14,"_15":16,"_17":-7,"_18":19,"_20":21,"_22":23,"_24":25,"_26":27,"_28":-5,"_29":-5,"_30":-5,"_31":-5,"_32":-5},"handle","jordanneville","name","nevflow-xero","branchName","main","version","path","Nevflowxero.ts","project",{"_33":60,"_13":14,"_44":61,"_62":-5,"_63":52,"_64":65,"_66":65,"_67":68,"_69":-5,"_70":71,"_72":36,"_73":43,"_74":-5,"_75":-5,"_76":77,"_78":79,"_80":-5,"_81":-5,"_82":-5,"_83":-5,"_84":85,"_86":85,"_87":88,"_89":88,"_90":88,"_91":85,"_92":85,"_93":94,"_95":96,"_97":98,"_99":52},"tree",[55],"file",{"_33":34,"_13":19,"_35":36,"_37":-5,"_38":39,"_40":41,"_42":43,"_44":45,"_17":46,"_47":48,"_49":50,"_51":52,"_53":-5,"_18":54},"contents",[],"upstream","pull","ahead","behind","envVars","id","70efdd6c-f317-452e-aa24-a0e7be180896","fileId","ded8b598-a368-11f1-92fa-1607ee4eb77e","parentId","branchId","1da4a128-3f60-4e71-9555-16cf318c6f7f","branchVersion",14,"latest",true,"createdAt",["D",1789469314067],11,"fileType","http","content","// Nevflow Xero connector — quotes, invoices and billing checks\n// Version 2.1.0\n// Runs on Val Town. Reached by Claude from Anthropic's cloud, so it works\n// from any device, phone included.\n//\n// Required environment variables (set these in Val Town, NOT in this file):\n// XERO_CLIENT_ID - from developer.xero.com, Nevflow Quote Pusher Live\n// XERO_CLIENT_SECRET - that app's secret\n// MCP_KEY - the long random key that guards this endpoint\n//\n// What changed in 2.0.0:\n// - list_quotes now searches EVERY quote (all pages), by client, site\n// address, quote number or status. The old version stopped at 25.\n// - get_quote opens a quote by its number (QU-0487) as well as its ID.\n// - NEW find_invoices: every sales invoice for a client and/or site.\n// - NEW remaining_to_bill: quote total minus what has already been invoiced\n// for that site. Read only. Shows its working so Jordan can check it.\n//\n// What changed in 2.1.0:\n// - NEW get_invoice: open one invoice (drafts included) by number or ID,\n// so a new draft can be checked straight after it is created.\n// - NEW update_invoice: edit a DRAFT invoice in place. Refuses anything\n// already approved, paid or voided.\n//\n// What changed in 2.2.0:\n// - FIXED find_invoices, which could not see anything recent. Xero's\n// /Invoices list hands back supplier BILLS as well as customer invoices,\n// and serves them oldest first. The bills ate the 2,000-record page\n// budget, so a search without a client name never reached this year.\n// Now Xero is asked for sales invoices only (where Type==\"ACCREC\") and\n// newest first (order=Date DESC), so the page cap trims old jobs rather\n// than new ones. The client-side ACCREC filter below is kept as a backstop.\n//\n// What changed in 2.3.0:\n// - remaining_to_bill now lists the QUOTED LINES alongside the total, so\n// anything quoted but never supplied is visible instead of buried in one\n// figure. Real case that prompted this: QU-0508 at 2A Stredwick included\n// $2,500 for a cylinder that was never installed, and a $450 downpipe\n// invoice that was a variation, not quoted work. The headline said $3,470\n// remaining; the true figure was $1,420. The tool cannot know either of\n// those things — only Jordan can — so now it shows him what to check.\n//\n// - Everything else is unchanged from 1.6.0, including every Xero quirk\n// workaround in update_quote. Do not undo those.\n\nconst MCP_KEY = Deno.env.get(\"MCP_KEY\") ?? \"\";\nconst CLIENT_ID = Deno.env.get(\"XERO_CLIENT_ID\") ?? \"\";\nconst CLIENT_SECRET = Deno.env.get(\"XERO_CLIENT_SECRET\") ?? \"\";\n\nconst XERO_API = \"https://api.xero.com/api.xro/2.0\";\nconst VERSION = \"2.3.0\";\n\n// Safety cap when reading page after page. Xero gives 100 per page, so this\n// covers 2,000 quotes or invoices. Stops a runaway loop hammering Xero.\nconst MAX_PAGES = 20;\n\n// ---------------------------------------------------------------------------\n// Xero access token (custom connection / client credentials)\n// Tokens last 30 minutes; cached in memory and refreshed a minute early.\n// ---------------------------------------------------------------------------\nlet cachedToken: { value: string; expires: number } | null = null;\n\nasync function getToken(): Promise {\n if (cachedToken && Date.now() < cachedToken.expires) return cachedToken.value;\n if (!CLIENT_ID || !CLIENT_SECRET) {\n throw new Error(\n \"XERO_CLIENT_ID or XERO_CLIENT_SECRET is not set in the environment variables.\",\n );\n }\n\n const basic = btoa(`${CLIENT_ID}:${CLIENT_SECRET}`);\n const res = await fetch(\"https://identity.xero.com/connect/token\", {\n method: \"POST\",\n headers: {\n Authorization: `Basic ${basic}`,\n \"Content-Type\": \"application/x-www-form-urlencoded\",\n },\n body: \"grant_type=client_credentials\",\n });\n\n if (!res.ok) {\n throw new Error(\n `Xero refused the login (${res.status}). Check the Client ID and Secret, and that the custom connection is still authorised. ${await res\n .text()}`,\n );\n }\n\n const data = await res.json();\n cachedToken = {\n value: data.access_token,\n expires: Date.now() + (data.expires_in - 60) * 1000,\n };\n return cachedToken.value;\n}\n\nasync function xero(path: string, init: RequestInit = {}): Promise {\n const token = await getToken();\n const res = await fetch(`${XERO_API}${path}`, {\n ...init,\n headers: {\n Authorization: `Bearer ${token}`,\n Accept: \"application/json\",\n \"Content-Type\": \"application/json\",\n ...(init.headers ?? {}),\n },\n });\n const text = await res.text();\n if (!res.ok) throw new Error(`Xero said no (${res.status}): ${text}`);\n try {\n return JSON.parse(text);\n } catch {\n return { raw: text };\n }\n}\n\n// Reads every page of a Xero list (Quotes, Invoices) until a short page\n// comes back. `listKey` is the array name in the reply, e.g. \"Quotes\".\nasync function xeroAllPages(\n path: string,\n params: Record,\n listKey: string,\n): Promise<{ rows: any[]; truncated: boolean }> {\n const rows: any[] = [];\n for (let page = 1; page <= MAX_PAGES; page++) {\n const qs = new URLSearchParams({ ...params, page: String(page) });\n const data = await xero(`${path}?${qs.toString()}`);\n const batch = data[listKey] ?? [];\n rows.push(...batch);\n if (batch.length < 100) return { rows, truncated: false };\n }\n return { rows, truncated: true };\n}\n\n// ---------------------------------------------------------------------------\n// Dates\n// ---------------------------------------------------------------------------\n\n// This val runs on a server set to UTC, which is up to 13 hours behind\n// Auckland. Ask for the date in Auckland or quotes dated late in the evening\n// come out with yesterday's date on them.\nfunction todayNZ(): string {\n return new Intl.DateTimeFormat(\"en-CA\", {\n timeZone: \"Pacific/Auckland\",\n year: \"numeric\",\n month: \"2-digit\",\n day: \"2-digit\",\n }).format(new Date());\n}\n\n// Nevflow standard: a quote is good for one month from the day it is issued.\n// Rolls the month on and keeps the same day of the month. If that day does not\n// exist in the next month (31 Jan + 1 month) it lands on the last day of it.\nfunction oneMonthOn(dateStr?: string): string {\n const base = dateStr && /^\\d{4}-\\d{2}-\\d{2}/.test(dateStr)\n ? dateStr.slice(0, 10)\n : todayNZ();\n const [y, m, d] = base.split(\"-\").map(Number);\n let year = y;\n let month = m + 1;\n if (month > 12) {\n month = 1;\n year += 1;\n }\n const lastDay = new Date(Date.UTC(year, month, 0)).getUTCDate();\n const day = Math.min(d, lastDay);\n return `${year}-${String(month).padStart(2, \"0\")}-${\n String(day).padStart(2, \"0\")\n }`;\n}\n\n// Xero hands dates back as \"/Date(1788033033867)/\" with a plain-text twin\n// alongside (DateString). Use the plain one, keep the day part.\nfunction day(s?: string): string | undefined {\n return s ? String(s).slice(0, 10) : undefined;\n}\n\n// ---------------------------------------------------------------------------\n// Site address matching\n// ---------------------------------------------------------------------------\n\n// References are typed by hand, so \"2a Stredwick Drive\" and\n// \"2A stredwick dr, Torbay\" must both match a search for \"2a stredwick\".\n// Rule: every word of the search must appear somewhere in the reference.\nfunction words(s?: string): string[] {\n return String(s ?? \"\")\n .toLowerCase()\n .replace(/[^a-z0-9]+/g, \" \")\n .trim()\n .split(\" \")\n .filter(Boolean);\n}\n\nfunction siteMatches(reference: string | undefined, site: string): boolean {\n const wanted = words(site);\n if (!wanted.length) return false;\n const have = words(reference).join(\" \");\n return wanted.every((w) => have.includes(w));\n}\n\nconst money = (n: number) => Math.round(n * 100) / 100;\n\n// ---------------------------------------------------------------------------\n// Tool definitions\n// ---------------------------------------------------------------------------\nconst lineItemsSchema = {\n type: \"array\",\n description:\n \"Quote or invoice lines. Keep wording plain text, no formatting.\",\n items: {\n type: \"object\",\n properties: {\n description: { type: \"string\" },\n quantity: { type: \"number\", default: 1 },\n unitAmount: {\n type: \"number\",\n description: \"Leave at 0 unless Jordan has given a figure.\",\n },\n accountCode: { type: \"string\", default: \"200\" },\n taxType: { type: \"string\", default: \"OUTPUT2\" },\n },\n required: [\"description\"],\n },\n};\n\nconst referenceSchema = {\n type: \"string\",\n description:\n 'Site address ONLY, e.g. \"16 Mack Road\" or \"22 Manawa Road, Remuera\". Never put the job, the scope or any description of the work in here.',\n};\n\nconst TOOLS = [\n {\n name: \"search_contacts\",\n description:\n \"Search Xero contacts by name. ALWAYS run this before creating a contact. If anything similar comes back, stop and ask Jordan whether it is the same contact rather than creating a duplicate.\",\n inputSchema: {\n type: \"object\",\n properties: {\n name: { type: \"string\", description: \"Full or partial contact name.\" },\n },\n required: [\"name\"],\n },\n },\n {\n name: \"create_contact\",\n description:\n \"Create a new Xero contact. Only after search_contacts has been run and Jordan has confirmed it is not an existing contact.\",\n inputSchema: {\n type: \"object\",\n properties: {\n name: { type: \"string\" },\n emailAddress: { type: \"string\" },\n phone: { type: \"string\" },\n addressLine1: { type: \"string\" },\n city: { type: \"string\" },\n },\n required: [\"name\"],\n },\n },\n {\n name: \"list_items\",\n description:\n \"List the saved line items in Xero, so their exact preset wording can be reused instead of retyped.\",\n inputSchema: { type: \"object\", properties: {} },\n },\n {\n name: \"create_quote\",\n description:\n \"Create a DRAFT quote in Xero for Jordan to price, check and send himself. Dates itself today (Auckland time) and expires one month later unless told otherwise.\",\n inputSchema: {\n type: \"object\",\n properties: {\n contactID: {\n type: \"string\",\n description: \"From search_contacts or create_contact.\",\n },\n reference: referenceSchema,\n title: { type: \"string\" },\n summary: { type: \"string\" },\n terms: {\n type: \"string\",\n description: \"Jordan's own terms text. Never write your own.\",\n },\n date: {\n type: \"string\",\n description: \"YYYY-MM-DD. Defaults to today in Auckland.\",\n },\n expiryDate: {\n type: \"string\",\n description:\n \"YYYY-MM-DD. Defaults to one month after the issue date, which is Nevflow standard. Only pass this to override that.\",\n },\n lineItems: lineItemsSchema,\n },\n required: [\"contactID\", \"lineItems\"],\n },\n },\n {\n name: \"update_quote\",\n description:\n \"Update an existing DRAFT quote in place, keeping the same quote number. Only the fields you pass are changed — everything else is carried over from the quote as it stands in Xero. If the quote has no expiry date, one month after its issue date is filled in. Warning: if you pass lineItems it replaces the WHOLE set of lines, so send every line, not just the changed one. Leave lineItems out entirely to keep the existing lines untouched.\",\n inputSchema: {\n type: \"object\",\n properties: {\n quoteID: { type: \"string\" },\n quoteNumber: {\n type: \"string\",\n description:\n \"Only pass this to deliberately set the quote number, e.g. putting a number back after Xero has renumbered one. Leave it out and the existing number is kept.\",\n },\n reference: referenceSchema,\n title: { type: \"string\" },\n summary: { type: \"string\" },\n terms: {\n type: \"string\",\n description: \"Jordan's own terms text. Never write your own.\",\n },\n expiryDate: { type: \"string\", description: \"YYYY-MM-DD\" },\n lineItems: lineItemsSchema,\n },\n required: [\"quoteID\"],\n },\n },\n {\n name: \"get_quote\",\n description:\n \"Open one quote in full, by its Xero ID or by its quote number (e.g. QU-0487).\",\n inputSchema: {\n type: \"object\",\n properties: {\n quoteID: { type: \"string\" },\n quoteNumber: { type: \"string\", description: \"e.g. QU-0487\" },\n },\n },\n },\n {\n name: \"list_quotes\",\n description:\n 'Search ALL quotes, not just recent ones. Filter by client (contactID from search_contacts), site address words (e.g. \"stredwick\"), quote number and/or status. Deleted quotes are left out unless status DELETED is asked for. Newest first.',\n inputSchema: {\n type: \"object\",\n properties: {\n contactID: { type: \"string\" },\n site: {\n type: \"string\",\n description:\n \"Words from the site address. Every word must appear in the quote reference.\",\n },\n quoteNumber: { type: \"string\", description: \"e.g. QU-0487\" },\n status: {\n type: \"string\",\n description: \"DRAFT, SENT, ACCEPTED, DECLINED, INVOICED or DELETED\",\n },\n },\n },\n },\n {\n name: \"find_invoices\",\n description:\n \"Search ALL sales invoices (every status except voided and deleted) by client and/or site address words. Read only. Newest first.\",\n inputSchema: {\n type: \"object\",\n properties: {\n contactID: { type: \"string\" },\n site: {\n type: \"string\",\n description:\n \"Words from the site address. Every word must appear in the invoice reference.\",\n },\n },\n },\n },\n {\n name: \"remaining_to_bill\",\n description:\n \"Work out what is left to invoice on a quoted job: the quote total (ex GST) minus every approved or paid invoice for the same client and site. Read only, creates nothing. Always show Jordan the matched quote and invoice list and let him confirm before creating any invoice. Draft invoices are listed but NOT counted as billed.\",\n inputSchema: {\n type: \"object\",\n properties: {\n contactID: {\n type: \"string\",\n description: \"From search_contacts.\",\n },\n site: {\n type: \"string\",\n description: 'Words from the site address, e.g. \"2a stredwick\".',\n },\n quoteNumber: {\n type: \"string\",\n description:\n \"Optional. Use when more than one quote matches the site.\",\n },\n },\n required: [\"contactID\", \"site\"],\n },\n },\n {\n name: \"get_invoice\",\n description:\n \"Open one sales invoice in full, drafts included, by its invoice number (e.g. INV-1310) or Xero ID. Use it to check what actually landed after creating or updating an invoice.\",\n inputSchema: {\n type: \"object\",\n properties: {\n invoiceID: { type: \"string\" },\n invoiceNumber: { type: \"string\", description: \"e.g. INV-1310\" },\n },\n },\n },\n {\n name: \"update_invoice\",\n description:\n \"Edit an existing DRAFT sales invoice in place, keeping the same invoice number. Only the fields you pass are changed; everything else is carried over. Warning: if you pass lineItems it replaces the WHOLE set of lines, so send every line, not just the changed one. Leave lineItems out to keep the existing lines. Refuses invoices that are already approved, paid or voided — Jordan changes those himself in Xero.\",\n inputSchema: {\n type: \"object\",\n properties: {\n invoiceID: {\n type: \"string\",\n description: \"From get_invoice or find_invoices.\",\n },\n reference: referenceSchema,\n date: { type: \"string\", description: \"YYYY-MM-DD\" },\n dueDate: { type: \"string\", description: \"YYYY-MM-DD\" },\n lineItems: lineItemsSchema,\n },\n required: [\"invoiceID\"],\n },\n },\n {\n name: \"create_invoice\",\n description:\n \"Create a DRAFT sales invoice. Draft only — this server cannot approve, authorise or send an invoice. Jordan does that himself in Xero.\",\n inputSchema: {\n type: \"object\",\n properties: {\n contactID: { type: \"string\" },\n reference: referenceSchema,\n date: { type: \"string\", description: \"YYYY-MM-DD\" },\n dueDate: { type: \"string\", description: \"YYYY-MM-DD\" },\n lineItems: lineItemsSchema,\n },\n required: [\"contactID\", \"lineItems\"],\n },\n },\n];\n\n// ---------------------------------------------------------------------------\n// Tool handlers\n// ---------------------------------------------------------------------------\nfunction buildLines(lineItems: any[]) {\n return (lineItems ?? []).map((l) => ({\n Description: l.description,\n Quantity: l.quantity ?? 1,\n UnitAmount: l.unitAmount ?? 0,\n AccountCode: l.accountCode ?? \"200\",\n TaxType: l.taxType ?? \"OUTPUT2\",\n }));\n}\n\n// Xero hands enums back SHOUTING (\"EXCLUSIVE\") but wants them back in title\n// case (\"Exclusive\"). Send the shouted version and it gets shirty.\nfunction tidyLineAmountTypes(v?: string) {\n switch (String(v ?? \"\").toUpperCase()) {\n case \"INCLUSIVE\":\n return \"Inclusive\";\n case \"NOTAX\":\n return \"NoTax\";\n default:\n return \"Exclusive\";\n }\n}\n\nfunction quoteSummary(q: any) {\n return {\n quoteID: q.QuoteID,\n quoteNumber: q.QuoteNumber,\n contact: q.Contact?.Name,\n reference: q.Reference,\n date: day(q.DateString),\n status: q.Status,\n subTotalExGST: q.SubTotal,\n total: q.Total,\n };\n}\n\nfunction invoiceSummary(i: any) {\n return {\n invoiceID: i.InvoiceID,\n invoiceNumber: i.InvoiceNumber,\n contact: i.Contact?.Name,\n reference: i.Reference,\n date: day(i.DateString),\n status: i.Status,\n subTotalExGST: i.SubTotal,\n total: i.Total,\n amountDue: i.AmountDue,\n lines: (i.LineItems ?? [])\n .map((l: any) => String(l.Description ?? \"\").split(\"\\n\")[0])\n .filter(Boolean),\n };\n}\n\nconst newestFirst = (a: any, b: any) =>\n String(b.DateString ?? \"\").localeCompare(String(a.DateString ?? \"\"));\n\nasync function searchQuotes(args: {\n contactID?: string;\n site?: string;\n quoteNumber?: string;\n status?: string;\n}) {\n const params: Record = {};\n if (args.contactID) params.ContactID = args.contactID;\n if (args.status) params.Status = String(args.status).toUpperCase();\n if (args.quoteNumber) params.QuoteNumber = String(args.quoteNumber).trim();\n\n const { rows, truncated } = await xeroAllPages(\"/Quotes\", params, \"Quotes\");\n const wantDeleted = String(args.status ?? \"\").toUpperCase() === \"DELETED\";\n\n const matched = rows\n .filter((q) => wantDeleted || q.Status !== \"DELETED\")\n .filter((q) => !args.site || siteMatches(q.Reference, args.site))\n .sort(newestFirst);\n\n return { matched, truncated };\n}\n\nasync function searchInvoices(args: { contactID?: string; site?: string }) {\n const params: Record = {\n Statuses: \"DRAFT,SUBMITTED,AUTHORISED,PAID\",\n // Sales invoices only. Without this Xero also returns supplier bills,\n // which eat the page budget before the search reaches recent jobs.\n where: 'Type==\"ACCREC\"',\n // Newest first, so if the page cap is ever hit it drops old jobs, not new.\n order: \"Date DESC\",\n };\n if (args.contactID) params.ContactIDs = args.contactID;\n\n const { rows, truncated } = await xeroAllPages(\n \"/Invoices\",\n params,\n \"Invoices\",\n );\n\n const matched = rows\n .filter((i) => i.Type === \"ACCREC\") // sales invoices only, never bills\n .filter((i) => i.Status !== \"VOIDED\" && i.Status !== \"DELETED\")\n .filter((i) => !args.site || siteMatches(i.Reference, args.site))\n .sort(newestFirst);\n\n return { matched, truncated };\n}\n\nasync function runTool(name: string, args: any): Promise {\n switch (name) {\n case \"search_contacts\": {\n const data = await xero(\n `/Contacts?where=${\n encodeURIComponent(\n `Name.Contains(\"${String(args.name).replace(/\"/g, \"\")}\")`,\n )\n }`,\n );\n const found = (data.Contacts ?? []).map((c: any) => ({\n contactID: c.ContactID,\n name: c.Name,\n email: c.EmailAddress,\n }));\n return {\n matches: found,\n note: found.length\n ? \"Similar contacts found. Ask Jordan whether one of these is the right contact before creating a new one.\"\n : \"No matches. Safe to create a new contact.\",\n };\n }\n\n case \"create_contact\": {\n const contact: any = { Name: args.name };\n if (args.emailAddress) contact.EmailAddress = args.emailAddress;\n if (args.phone) {\n contact.Phones = [{ PhoneType: \"DEFAULT\", PhoneNumber: args.phone }];\n }\n if (args.addressLine1 || args.city) {\n contact.Addresses = [{\n AddressType: \"STREET\",\n AddressLine1: args.addressLine1 ?? \"\",\n City: args.city ?? \"\",\n }];\n }\n const data = await xero(\"/Contacts\", {\n method: \"POST\",\n body: JSON.stringify({ Contacts: [contact] }),\n });\n const c = data.Contacts?.[0];\n return { contactID: c?.ContactID, name: c?.Name };\n }\n\n case \"list_items\": {\n const data = await xero(\"/Items\");\n return (data.Items ?? []).map((i: any) => ({\n code: i.Code,\n name: i.Name,\n description: i.SalesDetails?.Description ?? i.Description,\n unitPrice: i.SalesDetails?.UnitPrice,\n }));\n }\n\n case \"create_quote\": {\n const date = args.date || todayNZ();\n const quote: any = {\n Contact: { ContactID: args.contactID },\n Status: \"DRAFT\",\n LineAmountTypes: \"Exclusive\",\n LineItems: buildLines(args.lineItems),\n Date: date,\n ExpiryDate: args.expiryDate || oneMonthOn(date),\n };\n if (args.reference) quote.Reference = args.reference;\n if (args.title) quote.Title = args.title;\n if (args.summary) quote.Summary = args.summary;\n if (args.terms) quote.Terms = args.terms;\n\n const data = await xero(\"/Quotes\", {\n method: \"POST\",\n body: JSON.stringify({ Quotes: [quote] }),\n });\n const q = data.Quotes?.[0];\n return {\n quoteID: q?.QuoteID,\n quoteNumber: q?.QuoteNumber,\n status: q?.Status,\n date: day(q?.DateString),\n expiryDate: day(q?.ExpiryDateString),\n total: q?.Total,\n };\n }\n\n case \"update_quote\": {\n // Xero treats a quote update as a full re-post of the quote. Anything\n // left out is not \"left alone\" — it gets wiped. And it rejects the whole\n // thing if the contact or date are missing. So: read the quote as it\n // stands, then change only what was actually asked for.\n const current = await xero(`/Quotes/${args.quoteID}`);\n const existing = current.Quotes?.[0];\n\n if (!existing) {\n throw new Error(\n `No quote found with ID ${args.quoteID}. Run list_quotes to get the right ID.`,\n );\n }\n if (existing.Status !== \"DRAFT\") {\n throw new Error(\n `Quote ${existing.QuoteNumber} is ${existing.Status}, not DRAFT. This server only edits drafts — once a quote has gone to the client, change it in Xero yourself.`,\n );\n }\n\n // undefined means \"not asked about, carry it over\".\n // An empty string means \"clear it\", and falls through to being dropped.\n const carry = (passed: any, held: any) =>\n passed !== undefined ? passed : held;\n\n const issueDate = day(existing.DateString);\n\n // DO NOT ADD \"Status\" TO THIS OBJECT.\n // Known Xero bug: editing a DRAFT quote while sending Status back is\n // rejected with \"Please provide a valid Status Code\". Leaving Status out\n // entirely is the documented workaround — the quote stays DRAFT anyway.\n // The status guard above already refuses anything that isn't a draft.\n //\n // DO NOT REMOVE QuoteNumber.\n // Leave it out and Xero silently issues the next number off the rank\n // (this is how QU-0011 became QU-0012).\n const quote: any = {\n QuoteID: existing.QuoteID,\n QuoteNumber: args.quoteNumber || existing.QuoteNumber,\n Contact: { ContactID: existing.Contact?.ContactID },\n Date: issueDate,\n LineAmountTypes: tidyLineAmountTypes(existing.LineAmountTypes),\n // Lines are rebuilt from scratch. No LineItemIDs — Xero re-issues them.\n LineItems: args.lineItems\n ? buildLines(args.lineItems)\n : (existing.LineItems ?? []).map((l: any) => {\n const line: any = {\n Description: l.Description,\n Quantity: l.Quantity,\n UnitAmount: l.UnitAmount,\n AccountCode: l.AccountCode,\n TaxType: l.TaxType,\n };\n if (l.ItemCode) line.ItemCode = l.ItemCode;\n return line;\n }),\n };\n\n const reference = carry(args.reference, existing.Reference);\n const title = carry(args.title, existing.Title);\n const summary = carry(args.summary, existing.Summary);\n const terms = carry(args.terms, existing.Terms);\n const expiryDate =\n carry(args.expiryDate, day(existing.ExpiryDateString)) ||\n oneMonthOn(issueDate);\n\n if (reference) quote.Reference = reference;\n if (title) quote.Title = title;\n if (summary) quote.Summary = summary;\n if (terms) quote.Terms = terms;\n if (expiryDate) quote.ExpiryDate = expiryDate;\n if (existing.CurrencyCode) quote.CurrencyCode = existing.CurrencyCode;\n if (existing.BrandingThemeID) {\n quote.BrandingThemeID = existing.BrandingThemeID;\n }\n\n // Post to the quote's own address, not the general /Quotes endpoint.\n let data: any;\n try {\n data = await xero(`/Quotes/${existing.QuoteID}`, {\n method: \"POST\",\n body: JSON.stringify({ Quotes: [quote] }),\n });\n } catch (err: any) {\n throw new Error(\n `${err?.message ?? err}\\n\\nPayload sent:\\n${\n JSON.stringify({ Quotes: [quote] }, null, 2)\n }`,\n );\n }\n\n const q = data.Quotes?.[0];\n const moved = q?.QuoteNumber && q.QuoteNumber !== quote.QuoteNumber;\n return {\n quoteID: q?.QuoteID,\n quoteNumber: q?.QuoteNumber,\n status: q?.Status,\n total: q?.Total,\n note: moved\n ? `WARNING: Xero renumbered this quote from ${quote.QuoteNumber} to ${q?.QuoteNumber}. Tell Jordan before doing anything else.`\n : `Updated in place — still ${q?.QuoteNumber}.`,\n };\n }\n\n case \"get_quote\": {\n if (args.quoteID) return await xero(`/Quotes/${args.quoteID}`);\n if (args.quoteNumber) {\n const qs = new URLSearchParams({\n QuoteNumber: String(args.quoteNumber).trim(),\n });\n const data = await xero(`/Quotes?${qs.toString()}`);\n const found = data.Quotes ?? [];\n if (!found.length) {\n throw new Error(`No quote found numbered ${args.quoteNumber}.`);\n }\n return { Quotes: found };\n }\n throw new Error(\"Give either quoteID or quoteNumber.\");\n }\n\n case \"list_quotes\": {\n const { matched, truncated } = await searchQuotes(args);\n return {\n count: matched.length,\n quotes: matched.map(quoteSummary),\n note: truncated\n ? `Stopped after ${MAX_PAGES} pages — narrow the search with a client or status.`\n : undefined,\n };\n }\n\n case \"find_invoices\": {\n if (!args.contactID && !args.site) {\n throw new Error(\"Give a contactID, a site, or both.\");\n }\n const { matched, truncated } = await searchInvoices(args);\n return {\n count: matched.length,\n invoices: matched.map(invoiceSummary),\n note: truncated\n ? `Stopped after ${MAX_PAGES} pages — narrow the search with a client.`\n : undefined,\n };\n }\n\n case \"remaining_to_bill\": {\n const quoteSearch = await searchQuotes({\n contactID: args.contactID,\n site: args.quoteNumber ? undefined : args.site,\n quoteNumber: args.quoteNumber,\n });\n // Declined quotes were never agreed, so they are not the job price.\n const quotes = quoteSearch.matched.filter((q) => q.Status !== \"DECLINED\");\n\n const invoiceSearch = await searchInvoices({\n contactID: args.contactID,\n site: args.site,\n });\n const invoices = invoiceSearch.matched;\n\n // Approved or paid invoices count as billed. Drafts and invoices still\n // awaiting approval are shown but not counted, so Jordan can decide.\n const billed = invoices.filter((i) =>\n i.Status === \"AUTHORISED\" || i.Status === \"PAID\"\n );\n const notYetApproved = invoices.filter((i) =>\n i.Status === \"DRAFT\" || i.Status === \"SUBMITTED\"\n );\n const billedExGST = money(\n billed.reduce((sum, i) => sum + Number(i.SubTotal ?? 0), 0),\n );\n\n const base = {\n site: args.site,\n quotesMatched: quotes.map(quoteSummary),\n invoicesCounted: billed.map(invoiceSummary),\n invoicesNotCounted: notYetApproved.map(invoiceSummary),\n billedExGST,\n checkBeforeInvoicing:\n \"Show Jordan these lists. References are typed by hand, so confirm every invoice here belongs to this quote and none are missing (extras or variations may not be part of the quote). Credit notes are not included. Only create an invoice once he confirms.\",\n };\n\n if (quoteSearch.truncated || invoiceSearch.truncated) {\n return {\n ...base,\n result: \"INCOMPLETE\",\n note:\n \"Hit the page limit, so something may be missing. Do not invoice off this.\",\n };\n }\n if (quotes.length === 0) {\n return {\n ...base,\n result: \"NO_QUOTE_FOUND\",\n note:\n \"No quote matched this client and site. Try fewer site words, or search without the client in case the quote sits under another contact.\",\n };\n }\n if (quotes.length > 1) {\n return {\n ...base,\n result: \"MORE_THAN_ONE_QUOTE\",\n note:\n \"More than one quote matched. Ask Jordan which one, then run again with quoteNumber.\",\n };\n }\n\n const q = quotes[0];\n\n // Pull the quote in full so its lines are guaranteed to be there — the\n // list endpoint cannot be relied on to include them. Showing what was\n // quoted, line by line, is the whole point: anything quoted but never\n // supplied (a cylinder that was not installed, say) has to come off the\n // total before invoicing, and it cannot be spotted inside one figure.\n const lineOf = (l: any) => ({\n description: String(l?.Description ?? \"\").split(\"\\n\")[0],\n lineAmountExGST: l?.LineAmount,\n });\n let quotedLines: any[] = (q.LineItems ?? []).map(lineOf);\n try {\n const full = await xero(`/Quotes/${q.QuoteID}`);\n const fullLines = full.Quotes?.[0]?.LineItems;\n if (fullLines?.length) quotedLines = fullLines.map(lineOf);\n } catch {\n // Fall back to whatever the list gave us rather than failing the check.\n }\n\n const quoteExGST = money(Number(q.SubTotal ?? 0));\n const remainingExGST = money(quoteExGST - billedExGST);\n return {\n ...base,\n result: remainingExGST < 0 ? \"OVER_BILLED\" : \"OK\",\n quoteNumber: q.QuoteNumber,\n quotedLines,\n checkQuotedLines:\n \"Go through the quoted lines above with Jordan and confirm every one was actually supplied. Anything quoted but not done must be taken off the quote total before invoicing, or remainingExGST reads too high. The same goes the other way: work billed at this site that was never part of the quote (a variation) should not be netted off it.\",\n quoteExGST,\n remainingExGST,\n remainingGST: money(remainingExGST * 0.15),\n remainingInclGST: money(remainingExGST * 1.15),\n };\n }\n\n case \"get_invoice\": {\n let data: any;\n if (args.invoiceID) {\n data = await xero(`/Invoices/${args.invoiceID}`);\n } else if (args.invoiceNumber) {\n const qs = new URLSearchParams({\n InvoiceNumbers: String(args.invoiceNumber).trim(),\n });\n data = await xero(`/Invoices?${qs.toString()}`);\n } else {\n throw new Error(\"Give either invoiceID or invoiceNumber.\");\n }\n const i = data.Invoices?.[0];\n if (!i) throw new Error(\"No invoice found.\");\n return {\n invoiceID: i.InvoiceID,\n invoiceNumber: i.InvoiceNumber,\n type: i.Type,\n contact: i.Contact?.Name,\n reference: i.Reference,\n date: day(i.DateString),\n dueDate: day(i.DueDateString),\n status: i.Status,\n lineAmountTypes: i.LineAmountTypes,\n lines: (i.LineItems ?? []).map((l: any) => ({\n description: l.Description,\n quantity: l.Quantity,\n unitAmount: l.UnitAmount,\n lineAmountExGST: l.LineAmount,\n accountCode: l.AccountCode,\n taxType: l.TaxType,\n })),\n subTotalExGST: i.SubTotal,\n gst: i.TotalTax,\n total: i.Total,\n amountDue: i.AmountDue,\n };\n }\n\n case \"update_invoice\": {\n // Same approach as update_quote: read it as it stands, change only what\n // was asked for, send the rest back untouched.\n const current = await xero(`/Invoices/${args.invoiceID}`);\n const existing = current.Invoices?.[0];\n\n if (!existing) {\n throw new Error(\n `No invoice found with ID ${args.invoiceID}. Run get_invoice or find_invoices to get the right ID.`,\n );\n }\n if (existing.Type !== \"ACCREC\") {\n throw new Error(\n \"That is a bill, not a sales invoice. Not touching it.\",\n );\n }\n if (existing.Status !== \"DRAFT\") {\n throw new Error(\n `Invoice ${existing.InvoiceNumber} is ${existing.Status}, not DRAFT. This server only edits drafts — once an invoice is approved, change it in Xero yourself.`,\n );\n }\n\n const carry = (passed: any, held: any) =>\n passed !== undefined ? passed : held;\n\n // No Status sent: the invoice stays a draft, and nothing here can\n // approve it. InvoiceNumber is resent so the number cannot move.\n const invoice: any = {\n InvoiceID: existing.InvoiceID,\n InvoiceNumber: existing.InvoiceNumber,\n Type: \"ACCREC\",\n Contact: { ContactID: existing.Contact?.ContactID },\n LineAmountTypes: tidyLineAmountTypes(existing.LineAmountTypes),\n LineItems: args.lineItems\n ? buildLines(args.lineItems)\n : (existing.LineItems ?? []).map((l: any) => {\n const line: any = {\n Description: l.Description,\n Quantity: l.Quantity,\n UnitAmount: l.UnitAmount,\n AccountCode: l.AccountCode,\n TaxType: l.TaxType,\n };\n if (l.ItemCode) line.ItemCode = l.ItemCode;\n return line;\n }),\n };\n\n const reference = carry(args.reference, existing.Reference);\n const date = carry(args.date, day(existing.DateString));\n const dueDate = carry(args.dueDate, day(existing.DueDateString));\n if (reference) invoice.Reference = reference;\n if (date) invoice.Date = date;\n if (dueDate) invoice.DueDate = dueDate;\n if (existing.CurrencyCode) invoice.CurrencyCode = existing.CurrencyCode;\n if (existing.BrandingThemeID) {\n invoice.BrandingThemeID = existing.BrandingThemeID;\n }\n\n let data: any;\n try {\n data = await xero(`/Invoices/${existing.InvoiceID}`, {\n method: \"POST\",\n body: JSON.stringify({ Invoices: [invoice] }),\n });\n } catch (err: any) {\n throw new Error(\n `${err?.message ?? err}\\n\\nPayload sent:\\n${\n JSON.stringify({ Invoices: [invoice] }, null, 2)\n }`,\n );\n }\n\n const i = data.Invoices?.[0];\n return {\n invoiceID: i?.InvoiceID,\n invoiceNumber: i?.InvoiceNumber,\n status: i?.Status,\n subTotalExGST: i?.SubTotal,\n total: i?.Total,\n note: i?.InvoiceNumber !== existing.InvoiceNumber\n ? `WARNING: invoice number changed from ${existing.InvoiceNumber} to ${i?.InvoiceNumber}. Tell Jordan.`\n : `Updated in place — still ${i?.InvoiceNumber}, still a draft. Run get_invoice to check it.`,\n };\n }\n\n case \"create_invoice\": {\n const invoice: any = {\n Type: \"ACCREC\",\n Contact: { ContactID: args.contactID },\n Status: \"DRAFT\", // hard-locked: never AUTHORISED\n LineAmountTypes: \"Exclusive\",\n LineItems: buildLines(args.lineItems),\n };\n if (args.reference) invoice.Reference = args.reference;\n if (args.date) invoice.Date = args.date;\n if (args.dueDate) invoice.DueDate = args.dueDate;\n\n const data = await xero(\"/Invoices\", {\n method: \"POST\",\n body: JSON.stringify({ Invoices: [invoice] }),\n });\n const i = data.Invoices?.[0];\n return {\n invoiceID: i?.InvoiceID,\n invoiceNumber: i?.InvoiceNumber,\n status: i?.Status,\n note: \"Draft only. Approve and send it yourself in Xero.\",\n };\n }\n\n default:\n throw new Error(`Unknown tool: ${name}`);\n }\n}\n\n// ---------------------------------------------------------------------------\n// MCP over HTTP (JSON-RPC)\n// ---------------------------------------------------------------------------\nfunction rpcResult(id: any, result: any) {\n return Response.json({ jsonrpc: \"2.0\", id, result });\n}\n\nfunction rpcError(id: any, code: number, message: string) {\n return Response.json({ jsonrpc: \"2.0\", id, error: { code, message } });\n}\n\nexport default async function (req: Request): Promise {\n const url = new URL(req.url);\n\n // The key on the door. Endpoint is /mcp/\n const parts = url.pathname.split(\"/\").filter(Boolean);\n if (parts[0] !== \"mcp\" || parts[1] !== MCP_KEY || !MCP_KEY) {\n return new Response(\"Not found\", { status: 404 });\n }\n\n if (req.method === \"GET\") {\n return Response.json({\n ok: true,\n server: \"nevflow-xero\",\n version: VERSION,\n today: todayNZ(),\n tools: TOOLS.length,\n });\n }\n\n if (req.method !== \"POST\") {\n return new Response(\"Method not allowed\", { status: 405 });\n }\n\n let body: any;\n try {\n body = await req.json();\n } catch {\n return rpcError(null, -32700, \"Could not read that request.\");\n }\n\n const { id, method, params } = body ?? {};\n\n // Notifications carry no id and expect no reply.\n if (id === undefined || id === null) {\n return new Response(null, { status: 202 });\n }\n\n try {\n switch (method) {\n case \"initialize\":\n return rpcResult(id, {\n protocolVersion: \"2024-11-05\",\n capabilities: { tools: {} },\n serverInfo: { name: \"nevflow-xero\", version: VERSION },\n });\n\n case \"ping\":\n return rpcResult(id, {});\n\n case \"tools/list\":\n return rpcResult(id, { tools: TOOLS });\n\n case \"tools/call\": {\n const out = await runTool(params?.name, params?.arguments ?? {});\n return rpcResult(id, {\n content: [{ type: \"text\", text: JSON.stringify(out, null, 2) }],\n });\n }\n\n default:\n return rpcError(id, -32601, `Unsupported method: ${method}`);\n }\n } catch (err: any) {\n return rpcResult(id, {\n isError: true,\n content: [{ type: \"text\", text: String(err?.message ?? err) }],\n });\n }\n}","deleted",false,"label",[19],{"_33":34,"_13":19,"_35":36,"_37":-5,"_38":39,"_40":41,"_42":43,"_44":56,"_17":46,"_47":48,"_49":50,"_51":52,"_53":-5,"_57":58,"_18":59},["D",1789469314067],"children",[],[19],"46b6f95b-579e-49fa-baf3-04e9e73185a4",["D",1787973521853],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Xer Quotes and Invoices","imageUrl","userId","d853bbf1-1e7c-42b8-a02b-2eac48063e90","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","01a04b7d-09e3-713c-a3d8-5c22eab6496a","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_11":12,"_115":111},"org",{"_11":12,"_108":109,"_110":111,"_70":71,"_112":113,"_114":52},"branch",{"_17":41,"_13":16,"_33":39,"_100":60,"_101":-5,"_102":-5,"_103":-5,"_104":-5,"_105":-5,"_106":14,"_107":12},"isOwned","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","Jordan Neville","avatar","https://lh3.googleusercontent.com/a/ACg8ocJ-73B1UShJgv2JifYUfLrxPulLa2J-TTg9LhMN-f9o2ak66w=s96-c","tier","free","canRestrictVals","profileImageUrl","adoptOrgId",{"_33":60,"_13":14,"_44":150,"_62":-5,"_63":52,"_64":65,"_66":65,"_67":68,"_69":-5,"_70":71,"_72":36,"_73":43,"_74":-5,"_75":-5,"_76":77,"_78":79,"_80":-5,"_81":-5,"_82":-5,"_83":-5,"_84":85,"_86":85,"_87":88,"_89":88,"_90":88,"_91":85,"_92":85,"_93":151,"_95":152,"_97":153,"_99":52},[147],"files",[147],"counts",{"_136":77,"_137":138,"_139":77,"_32":140,"_141":142},[],{"_33":34,"_13":19,"_35":36,"_37":-5,"_38":39,"_40":41,"_42":43,"_44":45,"_17":46,"_47":48,"_49":50,"_51":52,"_53":-5,"_18":135},"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},[19],"pulls","branches",1,"forks",{"_143":145,"_146":77},"connections",{"_143":77,"_144":77},"count","unfilledCount",3,"emptyCount",{"_33":34,"_13":19,"_35":36,"_37":-5,"_38":39,"_40":41,"_42":43,"_44":56,"_17":46,"_47":48,"_49":50,"_51":52,"_53":-5,"_57":148,"_18":149},[],[19],["D",1787973521853],{"_11":12,"_115":111},{"_11":12,"_108":109,"_110":111,"_70":71,"_112":113,"_114":52},{"_17":41,"_13":16,"_33":39,"_100":60,"_101":-5,"_102":-5,"_103":-5,"_104":-5,"_105":-5,"_106":14,"_107":12},"ctx",{"_93":-5,"_132":187,"_188":189,"_190":191,"_192":52,"_193":52,"_194":52,"_195":43,"_196":-5,"_197":-7,"_198":-7,"_199":77,"_200":52,"_201":52,"_202":-5,"_203":52,"_204":52,"_205":52,"_206":-5},"ENV",{"_158":159,"_160":161,"_162":16,"_163":164,"_165":166,"_167":168,"_169":170,"_171":172,"_173":174,"_175":176,"_177":178,"_179":180,"_181":182,"_183":184,"_185":186},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]