[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_157":158,"_159":160},"routes/_app.x.$handle.$name",{"_97":96,"_33":46,"_106":87,"_27":107,"_13":14,"_108":-5,"_11":109,"_110":111,"_112":113,"_114":115,"_116":117,"_20":-5,"_118":-5,"_119":-5,"_120":25,"_121":122,"_123":59,"_124":-5,"_125":-5,"_126":127},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_44":45,"_33":46,"_39":47,"_48":-5,"_49":25,"_50":51,"_52":51,"_53":54,"_55":-5,"_18":56,"_57":32,"_58":59,"_60":-5,"_61":-5,"_62":63,"_64":65,"_66":-5,"_67":-5,"_68":-5,"_69":-5,"_70":71,"_72":71,"_73":74,"_75":74,"_76":74,"_77":71,"_78":71,"_79":80,"_81":82,"_83":84,"_85":25},"version",11,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":30},"file",{"_31":32,"_33":28,"_34":35,"_36":38,"_39":40,"_41":14,"_42":43,"_24":25},"previous",{"_31":32,"_33":28,"_34":35,"_36":37},"deleted",false,"deletedHere","path","new-file-3258.ts","latestPath","Nevflowxero.ts","fileId","ded8b598-a368-11f1-92fa-1607ee4eb77e","name","fileType","http","content","// Nevflow Xero connector — quotes and invoices\n// Runs on Val Town. Reached by Claude from Anthropic's cloud, so it works\n// from any device, phone included.\n//\n// Required environment variables (set these in Val Town, NOT in this file):\n// XERO_CLIENT_ID - from developer.xero.com, My Apps, Nevflow Quote Pusher\n// XERO_CLIENT_SECRET - the new secret generated 29 Aug 2026\n// MCP_KEY - the long random key that guards this endpoint\n\nconst MCP_KEY = Deno.env.get(\"MCP_KEY\") ?? \"\";\nconst CLIENT_ID = Deno.env.get(\"XERO_CLIENT_ID\") ?? \"\";\nconst CLIENT_SECRET = Deno.env.get(\"XERO_CLIENT_SECRET\") ?? \"\";\n\nconst XERO_API = \"https://api.xero.com/api.xro/2.0\";\n\n// ---------------------------------------------------------------------------\n// Xero access token (custom connection / client credentials)\n// Tokens last 30 minutes; cached in memory and refreshed a minute early.\n// ---------------------------------------------------------------------------\nlet cachedToken: { value: string; expires: number } | null = null;\n\nasync function getToken(): Promise {\n if (cachedToken && Date.now() < cachedToken.expires) return cachedToken.value;\n if (!CLIENT_ID || !CLIENT_SECRET) {\n throw new Error(\n \"XERO_CLIENT_ID or XERO_CLIENT_SECRET is not set in the environment variables.\",\n );\n }\n\n const basic = btoa(`${CLIENT_ID}:${CLIENT_SECRET}`);\n const res = await fetch(\"https://identity.xero.com/connect/token\", {\n method: \"POST\",\n headers: {\n Authorization: `Basic ${basic}`,\n \"Content-Type\": \"application/x-www-form-urlencoded\",\n },\n body: \"grant_type=client_credentials\",\n });\n\n if (!res.ok) {\n throw new Error(\n `Xero refused the login (${res.status}). Check the Client ID and Secret, and that the custom connection is still authorised. ${await res\n .text()}`,\n );\n }\n\n const data = await res.json();\n cachedToken = {\n value: data.access_token,\n expires: Date.now() + (data.expires_in - 60) * 1000,\n };\n return cachedToken.value;\n}\n\nasync function xero(path: string, init: RequestInit = {}): Promise {\n const token = await getToken();\n const res = await fetch(`${XERO_API}${path}`, {\n ...init,\n headers: {\n Authorization: `Bearer ${token}`,\n Accept: \"application/json\",\n \"Content-Type\": \"application/json\",\n ...(init.headers ?? {}),\n },\n });\n const text = await res.text();\n if (!res.ok) throw new Error(`Xero said no (${res.status}): ${text}`);\n try {\n return JSON.parse(text);\n } catch {\n return { raw: text };\n }\n}\n\n// ---------------------------------------------------------------------------\n// Dates\n// ---------------------------------------------------------------------------\n\n// This val runs on a server set to UTC, which is up to 13 hours behind\n// Auckland. Ask for the date in Auckland or quotes dated late in the evening\n// come out with yesterday's date on them.\nfunction todayNZ(): string {\n return new Intl.DateTimeFormat(\"en-CA\", {\n timeZone: \"Pacific/Auckland\",\n year: \"numeric\",\n month: \"2-digit\",\n day: \"2-digit\",\n }).format(new Date());\n}\n\n// Nevflow standard: a quote is good for one month from the day it is issued.\n// Rolls the month on and keeps the same day of the month. If that day does not\n// exist in the next month (31 Jan + 1 month) it lands on the last day of it.\nfunction oneMonthOn(dateStr?: string): string | undefined {\n if (!dateStr) return undefined;\n const [y, m, d] = String(dateStr).slice(0, 10).split(\"-\").map(Number);\n if (!y || !m || !d) return undefined;\n const daysInTargetMonth = new Date(Date.UTC(y, m + 1, 0)).getUTCDate();\n const dayOfMonth = Math.min(d, daysInTargetMonth);\n return new Date(Date.UTC(y, m, dayOfMonth)).toISOString().slice(0, 10);\n}\n\n// ---------------------------------------------------------------------------\n// Tool definitions\n// ---------------------------------------------------------------------------\nconst lineItemsSchema = {\n type: \"array\",\n description:\n \"Quote or invoice lines. Keep wording plain text, no formatting.\",\n items: {\n type: \"object\",\n properties: {\n description: { type: \"string\" },\n quantity: { type: \"number\", default: 1 },\n unitAmount: {\n type: \"number\",\n description: \"Leave at 0 unless Jordan has given a figure.\",\n },\n accountCode: { type: \"string\", default: \"200\" },\n taxType: { type: \"string\", default: \"OUTPUT2\" },\n },\n required: [\"description\"],\n },\n};\n\n// Nevflow rule: the reference is the site address and nothing else.\nconst REFERENCE_RULE =\n 'Site address ONLY, e.g. \"16 Mack Road\" or \"22 Manawa Road, Remuera\". Never put the job, the scope or any description of the work in here.';\n\nconst TOOLS = [\n {\n name: \"search_contacts\",\n description:\n \"Search Xero contacts by name. ALWAYS run this before creating a contact. If anything similar comes back, stop and ask Jordan whether it is the same contact rather than creating a duplicate.\",\n inputSchema: {\n type: \"object\",\n properties: {\n name: { type: \"string\", description: \"Full or partial contact name.\" },\n },\n required: [\"name\"],\n },\n },\n {\n name: \"create_contact\",\n description:\n \"Create a new Xero contact. Only after search_contacts has been run and Jordan has confirmed it is not an existing contact.\",\n inputSchema: {\n type: \"object\",\n properties: {\n name: { type: \"string\" },\n emailAddress: { type: \"string\" },\n phone: { type: \"string\" },\n addressLine1: { type: \"string\" },\n city: { type: \"string\" },\n },\n required: [\"name\"],\n },\n },\n {\n name: \"list_items\",\n description:\n \"List the saved line items in Xero, so their exact preset wording can be reused instead of retyped.\",\n inputSchema: { type: \"object\", properties: {} },\n },\n {\n name: \"create_quote\",\n description:\n \"Create a DRAFT quote in Xero for Jordan to price, check and send himself. Dates itself today (Auckland time) and expires one month later unless told otherwise.\",\n inputSchema: {\n type: \"object\",\n properties: {\n contactID: {\n type: \"string\",\n description: \"From search_contacts or create_contact.\",\n },\n reference: { type: \"string\", description: REFERENCE_RULE },\n title: { type: \"string\" },\n summary: { type: \"string\" },\n terms: {\n type: \"string\",\n description: \"Jordan's own terms text. Never write your own.\",\n },\n date: {\n type: \"string\",\n description: \"YYYY-MM-DD. Defaults to today in Auckland.\",\n },\n expiryDate: {\n type: \"string\",\n description:\n \"YYYY-MM-DD. Defaults to one month after the issue date, which is Nevflow standard. Only pass this to override that.\",\n },\n lineItems: lineItemsSchema,\n },\n required: [\"contactID\", \"lineItems\"],\n },\n },\n {\n name: \"update_quote\",\n description:\n \"Update an existing DRAFT quote in place, keeping the same quote number. Only the fields you pass are changed — everything else is carried over from the quote as it stands in Xero. If the quote has no expiry date, one month after its issue date is filled in. Warning: if you pass lineItems it replaces the WHOLE set of lines, so send every line, not just the changed one. Leave lineItems out entirely to keep the existing lines untouched.\",\n inputSchema: {\n type: \"object\",\n properties: {\n quoteID: { type: \"string\" },\n quoteNumber: {\n type: \"string\",\n description:\n \"Only pass this to deliberately set the quote number, e.g. putting a number back after Xero has renumbered one. Leave it out and the existing number is kept.\",\n },\n reference: { type: \"string\", description: REFERENCE_RULE },\n title: { type: \"string\" },\n summary: { type: \"string\" },\n terms: {\n type: \"string\",\n description: \"Jordan's own terms text. Never write your own.\",\n },\n expiryDate: { type: \"string\", description: \"YYYY-MM-DD\" },\n lineItems: lineItemsSchema,\n },\n required: [\"quoteID\"],\n },\n },\n {\n name: \"get_quote\",\n description:\n \"Fetch a quote back out of Xero to check what actually landed.\",\n inputSchema: {\n type: \"object\",\n properties: { quoteID: { type: \"string\" } },\n required: [\"quoteID\"],\n },\n },\n {\n name: \"list_quotes\",\n description:\n \"List recent quotes, newest first. Useful for finding a quote ID.\",\n inputSchema: {\n type: \"object\",\n properties: {\n status: { type: \"string\", description: \"e.g. DRAFT, SENT, ACCEPTED\" },\n },\n },\n },\n {\n name: \"create_invoice\",\n description:\n \"Create a DRAFT sales invoice. Draft only — this server cannot approve, authorise or send an invoice. Jordan does that himself in Xero.\",\n inputSchema: {\n type: \"object\",\n properties: {\n contactID: { type: \"string\" },\n reference: { type: \"string\", description: REFERENCE_RULE },\n date: { type: \"string\", description: \"YYYY-MM-DD\" },\n dueDate: { type: \"string\", description: \"YYYY-MM-DD\" },\n lineItems: lineItemsSchema,\n },\n required: [\"contactID\", \"lineItems\"],\n },\n },\n];\n\n// ---------------------------------------------------------------------------\n// Tool handlers\n// ---------------------------------------------------------------------------\nfunction buildLines(lineItems: any[]) {\n return (lineItems ?? []).map((l) => ({\n Description: l.description,\n Quantity: l.quantity ?? 1,\n UnitAmount: l.unitAmount ?? 0,\n AccountCode: l.accountCode ?? \"200\",\n TaxType: l.taxType ?? \"OUTPUT2\",\n }));\n}\n\n// Xero hands enums back SHOUTING (\"EXCLUSIVE\") but wants them back in title\n// case (\"Exclusive\"). Send the shouted version and it gets shirty.\nfunction tidyLineAmountTypes(v?: string) {\n switch (String(v ?? \"\").toUpperCase()) {\n case \"INCLUSIVE\":\n return \"Inclusive\";\n case \"NOTAX\":\n return \"NoTax\";\n default:\n return \"Exclusive\";\n }\n}\n\nasync function runTool(name: string, args: any): Promise {\n switch (name) {\n case \"search_contacts\": {\n const data = await xero(\n `/Contacts?where=${\n encodeURIComponent(\n `Name.Contains(\"${String(args.name).replace(/\"/g, \"\")}\")`,\n )\n }`,\n );\n const found = (data.Contacts ?? []).map((c: any) => ({\n contactID: c.ContactID,\n name: c.Name,\n email: c.EmailAddress,\n }));\n return {\n matches: found,\n note: found.length\n ? \"Similar contacts found. Ask Jordan whether one of these is the right contact before creating a new one.\"\n : \"No matches. Safe to create a new contact.\",\n };\n }\n\n case \"create_contact\": {\n const contact: any = { Name: args.name };\n if (args.emailAddress) contact.EmailAddress = args.emailAddress;\n if (args.phone) {\n contact.Phones = [{ PhoneType: \"DEFAULT\", PhoneNumber: args.phone }];\n }\n if (args.addressLine1 || args.city) {\n contact.Addresses = [{\n AddressType: \"STREET\",\n AddressLine1: args.addressLine1 ?? \"\",\n City: args.city ?? \"\",\n }];\n }\n const data = await xero(\"/Contacts\", {\n method: \"POST\",\n body: JSON.stringify({ Contacts: [contact] }),\n });\n const c = data.Contacts?.[0];\n return { contactID: c?.ContactID, name: c?.Name };\n }\n\n case \"list_items\": {\n const data = await xero(\"/Items\");\n return (data.Items ?? []).map((i: any) => ({\n code: i.Code,\n name: i.Name,\n description: i.SalesDetails?.Description ?? i.Description,\n unitPrice: i.SalesDetails?.UnitPrice,\n }));\n }\n\n case \"create_quote\": {\n // Always stamp a date and an expiry. Leave the date off and Xero fills in\n // its own idea of today, which leaves nothing to hang the expiry off.\n const issueDate = args.date ?? todayNZ();\n\n const quote: any = {\n Contact: { ContactID: args.contactID },\n Status: \"DRAFT\",\n LineAmountTypes: \"Exclusive\",\n Date: issueDate,\n LineItems: buildLines(args.lineItems),\n };\n const expiryDate = args.expiryDate ?? oneMonthOn(issueDate);\n if (expiryDate) quote.ExpiryDate = expiryDate;\n if (args.reference) quote.Reference = args.reference;\n if (args.title) quote.Title = args.title;\n if (args.summary) quote.Summary = args.summary;\n if (args.terms) quote.Terms = args.terms;\n\n const data = await xero(\"/Quotes\", {\n method: \"POST\",\n body: JSON.stringify({ Quotes: [quote] }),\n });\n const q = data.Quotes?.[0];\n return {\n quoteID: q?.QuoteID,\n quoteNumber: q?.QuoteNumber,\n status: q?.Status,\n total: q?.Total,\n };\n }\n\n case \"update_quote\": {\n // Xero treats a quote update as a full re-post of the quote. Anything\n // left out is not \"left alone\" — it gets wiped. And it rejects the whole\n // thing if the contact or date are missing. So: read the quote as it\n // stands, then change only what was actually asked for.\n const current = await xero(`/Quotes/${args.quoteID}`);\n const existing = current.Quotes?.[0];\n\n if (!existing) {\n throw new Error(\n `No quote found with ID ${args.quoteID}. Run list_quotes to get the right ID.`,\n );\n }\n if (existing.Status !== \"DRAFT\") {\n throw new Error(\n `Quote ${existing.QuoteNumber} is ${existing.Status}, not DRAFT. This server only edits drafts — once a quote has gone to the client, change it in Xero yourself.`,\n );\n }\n\n // Xero hands dates back as \"/Date(1788033033867)/\" with a plain-text\n // twin alongside (DateString). Use the plain one, keep the day part.\n const day = (s?: string) => (s ? String(s).slice(0, 10) : undefined);\n\n // undefined means \"not asked about, carry it over\".\n // An empty string means \"clear it\", and falls through to being dropped.\n const carry = (passed: any, held: any) =>\n passed !== undefined ? passed : held;\n\n // DO NOT ADD \"Status\" TO THIS OBJECT.\n // Known Xero bug: editing a DRAFT quote while sending Status back is\n // rejected with \"Please provide a valid Status Code\". Leaving Status out\n // entirely is the documented workaround — the quote stays DRAFT anyway.\n // The status guard above already refuses anything that isn't a draft.\n //\n // QuoteNumber MUST be sent back. Leave it out and Xero does not keep the\n // existing number, it issues the next one off the rank — QU-0011 quietly\n // becomes QU-0012 on a quote the client may already be holding.\n const issueDate = day(existing.DateString) ?? todayNZ();\n\n const quote: any = {\n QuoteID: existing.QuoteID,\n QuoteNumber: carry(args.quoteNumber, existing.QuoteNumber),\n Contact: { ContactID: existing.Contact?.ContactID },\n Date: issueDate,\n LineAmountTypes: tidyLineAmountTypes(existing.LineAmountTypes),\n // Lines are rebuilt from scratch. No LineItemIDs — Xero re-issues them.\n LineItems: args.lineItems\n ? buildLines(args.lineItems)\n : (existing.LineItems ?? []).map((l: any) => ({\n Description: l.Description,\n Quantity: l.Quantity,\n UnitAmount: l.UnitAmount,\n AccountCode: l.AccountCode,\n TaxType: l.TaxType,\n })),\n };\n\n const reference = carry(args.reference, existing.Reference);\n const title = carry(args.title, existing.Title);\n const summary = carry(args.summary, existing.Summary);\n const terms = carry(args.terms, existing.Terms);\n // Keep an expiry date that is already set — Jordan may have picked it on\n // purpose. Only fill one in when the quote has none.\n const expiryDate = carry(\n args.expiryDate,\n day(existing.ExpiryDateString) ?? oneMonthOn(issueDate),\n );\n\n if (reference) quote.Reference = reference;\n if (title) quote.Title = title;\n if (summary) quote.Summary = summary;\n if (terms) quote.Terms = terms;\n if (expiryDate) quote.ExpiryDate = expiryDate;\n\n // Post to the quote's own address, not the general /Quotes door, so\n // there is no question about which quote is being edited.\n let data: any;\n try {\n data = await xero(`/Quotes/${existing.QuoteID}`, {\n method: \"POST\",\n body: JSON.stringify({ Quotes: [quote] }),\n });\n } catch (err: any) {\n // Show exactly what went out the door, so a failure can be read\n // rather than guessed at.\n throw new Error(\n `${String(err?.message ?? err)}\\n\\n--- payload sent to Xero ---\\n${\n JSON.stringify({ Quotes: [quote] }, null, 2)\n }`,\n );\n }\n\n const q = data.Quotes?.[0];\n const renumbered = q?.QuoteNumber !== existing.QuoteNumber;\n return {\n quoteID: q?.QuoteID,\n quoteNumber: q?.QuoteNumber,\n status: q?.Status,\n total: q?.Total,\n note: renumbered\n ? `WARNING: Xero renumbered this quote from ${existing.QuoteNumber} to ${q?.QuoteNumber}. Tell Jordan before doing anything else.`\n : `Updated in place — still ${q?.QuoteNumber}.`,\n };\n }\n\n case \"get_quote\":\n return await xero(`/Quotes/${args.quoteID}`);\n\n case \"list_quotes\": {\n const qs = args.status\n ? `?Status=${encodeURIComponent(args.status)}`\n : \"\";\n const data = await xero(`/Quotes${qs}`);\n return (data.Quotes ?? []).slice(0, 25).map((q: any) => ({\n quoteID: q.QuoteID,\n quoteNumber: q.QuoteNumber,\n contact: q.Contact?.Name,\n reference: q.Reference,\n status: q.Status,\n total: q.Total,\n }));\n }\n\n case \"create_invoice\": {\n const invoice: any = {\n Type: \"ACCREC\",\n Contact: { ContactID: args.contactID },\n Status: \"DRAFT\", // hard-locked: never AUTHORISED\n LineAmountTypes: \"Exclusive\",\n LineItems: buildLines(args.lineItems),\n };\n if (args.reference) invoice.Reference = args.reference;\n if (args.date) invoice.Date = args.date;\n if (args.dueDate) invoice.DueDate = args.dueDate;\n\n const data = await xero(\"/Invoices\", {\n method: \"POST\",\n body: JSON.stringify({ Invoices: [invoice] }),\n });\n const i = data.Invoices?.[0];\n return {\n invoiceID: i?.InvoiceID,\n invoiceNumber: i?.InvoiceNumber,\n status: i?.Status,\n note: \"Draft only. Approve and send it yourself in Xero.\",\n };\n }\n\n default:\n throw new Error(`Unknown tool: ${name}`);\n }\n}\n\n// ---------------------------------------------------------------------------\n// MCP over HTTP (JSON-RPC)\n// ---------------------------------------------------------------------------\nfunction rpcResult(id: any, result: any) {\n return Response.json({ jsonrpc: \"2.0\", id, result });\n}\n\nfunction rpcError(id: any, code: number, message: string) {\n return Response.json({ jsonrpc: \"2.0\", id, error: { code, message } });\n}\n\nexport default async function (req: Request): Promise {\n const url = new URL(req.url);\n\n // The key on the door. Endpoint is /mcp/\n const parts = url.pathname.split(\"/\").filter(Boolean);\n if (parts[0] !== \"mcp\" || parts[1] !== MCP_KEY || !MCP_KEY) {\n return new Response(\"Not found\", { status: 404 });\n }\n\n if (req.method === \"GET\") {\n return Response.json({\n ok: true,\n server: \"nevflow-xero\",\n version: \"1.6.0\",\n today: todayNZ(),\n tools: TOOLS.length,\n });\n }\n\n if (req.method !== \"POST\") {\n return new Response(\"Method not allowed\", { status: 405 });\n }\n\n let body: any;\n try {\n body = await req.json();\n } catch {\n return rpcError(null, -32700, \"Could not read that request.\");\n }\n\n const { id, method, params } = body ?? {};\n\n // Notifications carry no id and expect no reply.\n if (id === undefined || id === null) {\n return new Response(null, { status: 202 });\n }\n\n try {\n switch (method) {\n case \"initialize\":\n return rpcResult(id, {\n protocolVersion: \"2024-11-05\",\n capabilities: { tools: {} },\n serverInfo: { name: \"nevflow-xero\", version: \"1.6.0\" },\n });\n\n case \"ping\":\n return rpcResult(id, {});\n\n case \"tools/list\":\n return rpcResult(id, { tools: TOOLS });\n\n case \"tools/call\": {\n const out = await runTool(params?.name, params?.arguments ?? {});\n return rpcResult(id, {\n content: [{ type: \"text\", text: JSON.stringify(out, null, 2) }],\n });\n }\n\n default:\n return rpcError(id, -32601, `Unsupported method: ${method}`);\n }\n } catch (err: any) {\n return rpcResult(id, {\n isError: true,\n content: [{ type: \"text\", text: String(err?.message ?? err) }],\n });\n }\n}","// Nevflow Xero connector — quotes, invoices and billing checks\n// Version 2.0.0\n// Runs on Val Town. Reached by Claude from Anthropic's cloud, so it works\n// from any device, phone included.\n//\n// Required environment variables (set these in Val Town, NOT in this file):\n// XERO_CLIENT_ID - from developer.xero.com, Nevflow Quote Pusher Live\n// XERO_CLIENT_SECRET - that app's secret\n// MCP_KEY - the long random key that guards this endpoint\n//\n// What changed in 2.0.0:\n// - list_quotes now searches EVERY quote (all pages), by client, site\n// address, quote number or status. The old version stopped at 25.\n// - get_quote opens a quote by its number (QU-0487) as well as its ID.\n// - NEW find_invoices: every sales invoice for a client and/or site.\n// - NEW remaining_to_bill: quote total minus what has already been invoiced\n// for that site. Read only. Shows its working so Jordan can check it.\n// - Everything else is unchanged from 1.6.0, including every Xero quirk\n// workaround in update_quote. Do not undo those.\n\nconst MCP_KEY = Deno.env.get(\"MCP_KEY\") ?? \"\";\nconst CLIENT_ID = Deno.env.get(\"XERO_CLIENT_ID\") ?? \"\";\nconst CLIENT_SECRET = Deno.env.get(\"XERO_CLIENT_SECRET\") ?? \"\";\n\nconst XERO_API = \"https://api.xero.com/api.xro/2.0\";\nconst VERSION = \"2.0.0\";\n\n// Safety cap when reading page after page. Xero gives 100 per page, so this\n// covers 2,000 quotes or invoices. Stops a runaway loop hammering Xero.\nconst MAX_PAGES = 20;\n\n// ---------------------------------------------------------------------------\n// Xero access token (custom connection / client credentials)\n// Tokens last 30 minutes; cached in memory and refreshed a minute early.\n// ---------------------------------------------------------------------------\nlet cachedToken: { value: string; expires: number } | null = null;\n\nasync function getToken(): Promise {\n if (cachedToken && Date.now() < cachedToken.expires) return cachedToken.value;\n if (!CLIENT_ID || !CLIENT_SECRET) {\n throw new Error(\n \"XERO_CLIENT_ID or XERO_CLIENT_SECRET is not set in the environment variables.\",\n );\n }\n\n const basic = btoa(`${CLIENT_ID}:${CLIENT_SECRET}`);\n const res = await fetch(\"https://identity.xero.com/connect/token\", {\n method: \"POST\",\n headers: {\n Authorization: `Basic ${basic}`,\n \"Content-Type\": \"application/x-www-form-urlencoded\",\n },\n body: \"grant_type=client_credentials\",\n });\n\n if (!res.ok) {\n throw new Error(\n `Xero refused the login (${res.status}). Check the Client ID and Secret, and that the custom connection is still authorised. ${await res\n .text()}`,\n );\n }\n\n const data = await res.json();\n cachedToken = {\n value: data.access_token,\n expires: Date.now() + (data.expires_in - 60) * 1000,\n };\n return cachedToken.value;\n}\n\nasync function xero(path: string, init: RequestInit = {}): Promise {\n const token = await getToken();\n const res = await fetch(`${XERO_API}${path}`, {\n ...init,\n headers: {\n Authorization: `Bearer ${token}`,\n Accept: \"application/json\",\n \"Content-Type\": \"application/json\",\n ...(init.headers ?? {}),\n },\n });\n const text = await res.text();\n if (!res.ok) throw new Error(`Xero said no (${res.status}): ${text}`);\n try {\n return JSON.parse(text);\n } catch {\n return { raw: text };\n }\n}\n\n// Reads every page of a Xero list (Quotes, Invoices) until a short page\n// comes back. `listKey` is the array name in the reply, e.g. \"Quotes\".\nasync function xeroAllPages(\n path: string,\n params: Record,\n listKey: string,\n): Promise<{ rows: any[]; truncated: boolean }> {\n const rows: any[] = [];\n for (let page = 1; page <= MAX_PAGES; page++) {\n const qs = new URLSearchParams({ ...params, page: String(page) });\n const data = await xero(`${path}?${qs.toString()}`);\n const batch = data[listKey] ?? [];\n rows.push(...batch);\n if (batch.length < 100) return { rows, truncated: false };\n }\n return { rows, truncated: true };\n}\n\n// ---------------------------------------------------------------------------\n// Dates\n// ---------------------------------------------------------------------------\n\n// This val runs on a server set to UTC, which is up to 13 hours behind\n// Auckland. Ask for the date in Auckland or quotes dated late in the evening\n// come out with yesterday's date on them.\nfunction todayNZ(): string {\n return new Intl.DateTimeFormat(\"en-CA\", {\n timeZone: \"Pacific/Auckland\",\n year: \"numeric\",\n month: \"2-digit\",\n day: \"2-digit\",\n }).format(new Date());\n}\n\n// Nevflow standard: a quote is good for one month from the day it is issued.\n// Rolls the month on and keeps the same day of the month. If that day does not\n// exist in the next month (31 Jan + 1 month) it lands on the last day of it.\nfunction oneMonthOn(dateStr?: string): string {\n const base = dateStr && /^\\d{4}-\\d{2}-\\d{2}/.test(dateStr)\n ? dateStr.slice(0, 10)\n : todayNZ();\n const [y, m, d] = base.split(\"-\").map(Number);\n let year = y;\n let month = m + 1;\n if (month > 12) {\n month = 1;\n year += 1;\n }\n const lastDay = new Date(Date.UTC(year, month, 0)).getUTCDate();\n const day = Math.min(d, lastDay);\n return `${year}-${String(month).padStart(2, \"0\")}-${\n String(day).padStart(2, \"0\")\n }`;\n}\n\n// Xero hands dates back as \"/Date(1788033033867)/\" with a plain-text twin\n// alongside (DateString). Use the plain one, keep the day part.\nfunction day(s?: string): string | undefined {\n return s ? String(s).slice(0, 10) : undefined;\n}\n\n// ---------------------------------------------------------------------------\n// Site address matching\n// ---------------------------------------------------------------------------\n\n// References are typed by hand, so \"2a Stredwick Drive\" and\n// \"2A stredwick dr, Torbay\" must both match a search for \"2a stredwick\".\n// Rule: every word of the search must appear somewhere in the reference.\nfunction words(s?: string): string[] {\n return String(s ?? \"\")\n .toLowerCase()\n .replace(/[^a-z0-9]+/g, \" \")\n .trim()\n .split(\" \")\n .filter(Boolean);\n}\n\nfunction siteMatches(reference: string | undefined, site: string): boolean {\n const wanted = words(site);\n if (!wanted.length) return false;\n const have = words(reference).join(\" \");\n return wanted.every((w) => have.includes(w));\n}\n\nconst money = (n: number) => Math.round(n * 100) / 100;\n\n// ---------------------------------------------------------------------------\n// Tool definitions\n// ---------------------------------------------------------------------------\nconst lineItemsSchema = {\n type: \"array\",\n description:\n \"Quote or invoice lines. Keep wording plain text, no formatting.\",\n items: {\n type: \"object\",\n properties: {\n description: { type: \"string\" },\n quantity: { type: \"number\", default: 1 },\n unitAmount: {\n type: \"number\",\n description: \"Leave at 0 unless Jordan has given a figure.\",\n },\n accountCode: { type: \"string\", default: \"200\" },\n taxType: { type: \"string\", default: \"OUTPUT2\" },\n },\n required: [\"description\"],\n },\n};\n\nconst referenceSchema = {\n type: \"string\",\n description:\n 'Site address ONLY, e.g. \"16 Mack Road\" or \"22 Manawa Road, Remuera\". Never put the job, the scope or any description of the work in here.',\n};\n\nconst TOOLS = [\n {\n name: \"search_contacts\",\n description:\n \"Search Xero contacts by name. ALWAYS run this before creating a contact. If anything similar comes back, stop and ask Jordan whether it is the same contact rather than creating a duplicate.\",\n inputSchema: {\n type: \"object\",\n properties: {\n name: { type: \"string\", description: \"Full or partial contact name.\" },\n },\n required: [\"name\"],\n },\n },\n {\n name: \"create_contact\",\n description:\n \"Create a new Xero contact. Only after search_contacts has been run and Jordan has confirmed it is not an existing contact.\",\n inputSchema: {\n type: \"object\",\n properties: {\n name: { type: \"string\" },\n emailAddress: { type: \"string\" },\n phone: { type: \"string\" },\n addressLine1: { type: \"string\" },\n city: { type: \"string\" },\n },\n required: [\"name\"],\n },\n },\n {\n name: \"list_items\",\n description:\n \"List the saved line items in Xero, so their exact preset wording can be reused instead of retyped.\",\n inputSchema: { type: \"object\", properties: {} },\n },\n {\n name: \"create_quote\",\n description:\n \"Create a DRAFT quote in Xero for Jordan to price, check and send himself. Dates itself today (Auckland time) and expires one month later unless told otherwise.\",\n inputSchema: {\n type: \"object\",\n properties: {\n contactID: {\n type: \"string\",\n description: \"From search_contacts or create_contact.\",\n },\n reference: referenceSchema,\n title: { type: \"string\" },\n summary: { type: \"string\" },\n terms: {\n type: \"string\",\n description: \"Jordan's own terms text. Never write your own.\",\n },\n date: {\n type: \"string\",\n description: \"YYYY-MM-DD. Defaults to today in Auckland.\",\n },\n expiryDate: {\n type: \"string\",\n description:\n \"YYYY-MM-DD. Defaults to one month after the issue date, which is Nevflow standard. Only pass this to override that.\",\n },\n lineItems: lineItemsSchema,\n },\n required: [\"contactID\", \"lineItems\"],\n },\n },\n {\n name: \"update_quote\",\n description:\n \"Update an existing DRAFT quote in place, keeping the same quote number. Only the fields you pass are changed — everything else is carried over from the quote as it stands in Xero. If the quote has no expiry date, one month after its issue date is filled in. Warning: if you pass lineItems it replaces the WHOLE set of lines, so send every line, not just the changed one. Leave lineItems out entirely to keep the existing lines untouched.\",\n inputSchema: {\n type: \"object\",\n properties: {\n quoteID: { type: \"string\" },\n quoteNumber: {\n type: \"string\",\n description:\n \"Only pass this to deliberately set the quote number, e.g. putting a number back after Xero has renumbered one. Leave it out and the existing number is kept.\",\n },\n reference: referenceSchema,\n title: { type: \"string\" },\n summary: { type: \"string\" },\n terms: {\n type: \"string\",\n description: \"Jordan's own terms text. Never write your own.\",\n },\n expiryDate: { type: \"string\", description: \"YYYY-MM-DD\" },\n lineItems: lineItemsSchema,\n },\n required: [\"quoteID\"],\n },\n },\n {\n name: \"get_quote\",\n description:\n \"Open one quote in full, by its Xero ID or by its quote number (e.g. QU-0487).\",\n inputSchema: {\n type: \"object\",\n properties: {\n quoteID: { type: \"string\" },\n quoteNumber: { type: \"string\", description: \"e.g. QU-0487\" },\n },\n },\n },\n {\n name: \"list_quotes\",\n description:\n 'Search ALL quotes, not just recent ones. Filter by client (contactID from search_contacts), site address words (e.g. \"stredwick\"), quote number and/or status. Deleted quotes are left out unless status DELETED is asked for. Newest first.',\n inputSchema: {\n type: \"object\",\n properties: {\n contactID: { type: \"string\" },\n site: {\n type: \"string\",\n description:\n \"Words from the site address. Every word must appear in the quote reference.\",\n },\n quoteNumber: { type: \"string\", description: \"e.g. QU-0487\" },\n status: {\n type: \"string\",\n description: \"DRAFT, SENT, ACCEPTED, DECLINED, INVOICED or DELETED\",\n },\n },\n },\n },\n {\n name: \"find_invoices\",\n description:\n \"Search ALL sales invoices (every status except voided and deleted) by client and/or site address words. Read only. Newest first.\",\n inputSchema: {\n type: \"object\",\n properties: {\n contactID: { type: \"string\" },\n site: {\n type: \"string\",\n description:\n \"Words from the site address. Every word must appear in the invoice reference.\",\n },\n },\n },\n },\n {\n name: \"remaining_to_bill\",\n description:\n \"Work out what is left to invoice on a quoted job: the quote total (ex GST) minus every approved or paid invoice for the same client and site. Read only, creates nothing. Always show Jordan the matched quote and invoice list and let him confirm before creating any invoice. Draft invoices are listed but NOT counted as billed.\",\n inputSchema: {\n type: \"object\",\n properties: {\n contactID: {\n type: \"string\",\n description: \"From search_contacts.\",\n },\n site: {\n type: \"string\",\n description: 'Words from the site address, e.g. \"2a stredwick\".',\n },\n quoteNumber: {\n type: \"string\",\n description:\n \"Optional. Use when more than one quote matches the site.\",\n },\n },\n required: [\"contactID\", \"site\"],\n },\n },\n {\n name: \"create_invoice\",\n description:\n \"Create a DRAFT sales invoice. Draft only — this server cannot approve, authorise or send an invoice. Jordan does that himself in Xero.\",\n inputSchema: {\n type: \"object\",\n properties: {\n contactID: { type: \"string\" },\n reference: referenceSchema,\n date: { type: \"string\", description: \"YYYY-MM-DD\" },\n dueDate: { type: \"string\", description: \"YYYY-MM-DD\" },\n lineItems: lineItemsSchema,\n },\n required: [\"contactID\", \"lineItems\"],\n },\n },\n];\n\n// ---------------------------------------------------------------------------\n// Tool handlers\n// ---------------------------------------------------------------------------\nfunction buildLines(lineItems: any[]) {\n return (lineItems ?? []).map((l) => ({\n Description: l.description,\n Quantity: l.quantity ?? 1,\n UnitAmount: l.unitAmount ?? 0,\n AccountCode: l.accountCode ?? \"200\",\n TaxType: l.taxType ?? \"OUTPUT2\",\n }));\n}\n\n// Xero hands enums back SHOUTING (\"EXCLUSIVE\") but wants them back in title\n// case (\"Exclusive\"). Send the shouted version and it gets shirty.\nfunction tidyLineAmountTypes(v?: string) {\n switch (String(v ?? \"\").toUpperCase()) {\n case \"INCLUSIVE\":\n return \"Inclusive\";\n case \"NOTAX\":\n return \"NoTax\";\n default:\n return \"Exclusive\";\n }\n}\n\nfunction quoteSummary(q: any) {\n return {\n quoteID: q.QuoteID,\n quoteNumber: q.QuoteNumber,\n contact: q.Contact?.Name,\n reference: q.Reference,\n date: day(q.DateString),\n status: q.Status,\n subTotalExGST: q.SubTotal,\n total: q.Total,\n };\n}\n\nfunction invoiceSummary(i: any) {\n return {\n invoiceID: i.InvoiceID,\n invoiceNumber: i.InvoiceNumber,\n contact: i.Contact?.Name,\n reference: i.Reference,\n date: day(i.DateString),\n status: i.Status,\n subTotalExGST: i.SubTotal,\n total: i.Total,\n amountDue: i.AmountDue,\n lines: (i.LineItems ?? [])\n .map((l: any) => String(l.Description ?? \"\").split(\"\\n\")[0])\n .filter(Boolean),\n };\n}\n\nconst newestFirst = (a: any, b: any) =>\n String(b.DateString ?? \"\").localeCompare(String(a.DateString ?? \"\"));\n\nasync function searchQuotes(args: {\n contactID?: string;\n site?: string;\n quoteNumber?: string;\n status?: string;\n}) {\n const params: Record = {};\n if (args.contactID) params.ContactID = args.contactID;\n if (args.status) params.Status = String(args.status).toUpperCase();\n if (args.quoteNumber) params.QuoteNumber = String(args.quoteNumber).trim();\n\n const { rows, truncated } = await xeroAllPages(\"/Quotes\", params, \"Quotes\");\n const wantDeleted = String(args.status ?? \"\").toUpperCase() === \"DELETED\";\n\n const matched = rows\n .filter((q) => wantDeleted || q.Status !== \"DELETED\")\n .filter((q) => !args.site || siteMatches(q.Reference, args.site))\n .sort(newestFirst);\n\n return { matched, truncated };\n}\n\nasync function searchInvoices(args: { contactID?: string; site?: string }) {\n const params: Record = {\n Statuses: \"DRAFT,SUBMITTED,AUTHORISED,PAID\",\n };\n if (args.contactID) params.ContactIDs = args.contactID;\n\n const { rows, truncated } = await xeroAllPages(\n \"/Invoices\",\n params,\n \"Invoices\",\n );\n\n const matched = rows\n .filter((i) => i.Type === \"ACCREC\") // sales invoices only, never bills\n .filter((i) => i.Status !== \"VOIDED\" && i.Status !== \"DELETED\")\n .filter((i) => !args.site || siteMatches(i.Reference, args.site))\n .sort(newestFirst);\n\n return { matched, truncated };\n}\n\nasync function runTool(name: string, args: any): Promise {\n switch (name) {\n case \"search_contacts\": {\n const data = await xero(\n `/Contacts?where=${\n encodeURIComponent(\n `Name.Contains(\"${String(args.name).replace(/\"/g, \"\")}\")`,\n )\n }`,\n );\n const found = (data.Contacts ?? []).map((c: any) => ({\n contactID: c.ContactID,\n name: c.Name,\n email: c.EmailAddress,\n }));\n return {\n matches: found,\n note: found.length\n ? \"Similar contacts found. Ask Jordan whether one of these is the right contact before creating a new one.\"\n : \"No matches. Safe to create a new contact.\",\n };\n }\n\n case \"create_contact\": {\n const contact: any = { Name: args.name };\n if (args.emailAddress) contact.EmailAddress = args.emailAddress;\n if (args.phone) {\n contact.Phones = [{ PhoneType: \"DEFAULT\", PhoneNumber: args.phone }];\n }\n if (args.addressLine1 || args.city) {\n contact.Addresses = [{\n AddressType: \"STREET\",\n AddressLine1: args.addressLine1 ?? \"\",\n City: args.city ?? \"\",\n }];\n }\n const data = await xero(\"/Contacts\", {\n method: \"POST\",\n body: JSON.stringify({ Contacts: [contact] }),\n });\n const c = data.Contacts?.[0];\n return { contactID: c?.ContactID, name: c?.Name };\n }\n\n case \"list_items\": {\n const data = await xero(\"/Items\");\n return (data.Items ?? []).map((i: any) => ({\n code: i.Code,\n name: i.Name,\n description: i.SalesDetails?.Description ?? i.Description,\n unitPrice: i.SalesDetails?.UnitPrice,\n }));\n }\n\n case \"create_quote\": {\n const date = args.date || todayNZ();\n const quote: any = {\n Contact: { ContactID: args.contactID },\n Status: \"DRAFT\",\n LineAmountTypes: \"Exclusive\",\n LineItems: buildLines(args.lineItems),\n Date: date,\n ExpiryDate: args.expiryDate || oneMonthOn(date),\n };\n if (args.reference) quote.Reference = args.reference;\n if (args.title) quote.Title = args.title;\n if (args.summary) quote.Summary = args.summary;\n if (args.terms) quote.Terms = args.terms;\n\n const data = await xero(\"/Quotes\", {\n method: \"POST\",\n body: JSON.stringify({ Quotes: [quote] }),\n });\n const q = data.Quotes?.[0];\n return {\n quoteID: q?.QuoteID,\n quoteNumber: q?.QuoteNumber,\n status: q?.Status,\n date: day(q?.DateString),\n expiryDate: day(q?.ExpiryDateString),\n total: q?.Total,\n };\n }\n\n case \"update_quote\": {\n // Xero treats a quote update as a full re-post of the quote. Anything\n // left out is not \"left alone\" — it gets wiped. And it rejects the whole\n // thing if the contact or date are missing. So: read the quote as it\n // stands, then change only what was actually asked for.\n const current = await xero(`/Quotes/${args.quoteID}`);\n const existing = current.Quotes?.[0];\n\n if (!existing) {\n throw new Error(\n `No quote found with ID ${args.quoteID}. Run list_quotes to get the right ID.`,\n );\n }\n if (existing.Status !== \"DRAFT\") {\n throw new Error(\n `Quote ${existing.QuoteNumber} is ${existing.Status}, not DRAFT. This server only edits drafts — once a quote has gone to the client, change it in Xero yourself.`,\n );\n }\n\n // undefined means \"not asked about, carry it over\".\n // An empty string means \"clear it\", and falls through to being dropped.\n const carry = (passed: any, held: any) =>\n passed !== undefined ? passed : held;\n\n const issueDate = day(existing.DateString);\n\n // DO NOT ADD \"Status\" TO THIS OBJECT.\n // Known Xero bug: editing a DRAFT quote while sending Status back is\n // rejected with \"Please provide a valid Status Code\". Leaving Status out\n // entirely is the documented workaround — the quote stays DRAFT anyway.\n // The status guard above already refuses anything that isn't a draft.\n //\n // DO NOT REMOVE QuoteNumber.\n // Leave it out and Xero silently issues the next number off the rank\n // (this is how QU-0011 became QU-0012).\n const quote: any = {\n QuoteID: existing.QuoteID,\n QuoteNumber: args.quoteNumber || existing.QuoteNumber,\n Contact: { ContactID: existing.Contact?.ContactID },\n Date: issueDate,\n LineAmountTypes: tidyLineAmountTypes(existing.LineAmountTypes),\n // Lines are rebuilt from scratch. No LineItemIDs — Xero re-issues them.\n LineItems: args.lineItems\n ? buildLines(args.lineItems)\n : (existing.LineItems ?? []).map((l: any) => {\n const line: any = {\n Description: l.Description,\n Quantity: l.Quantity,\n UnitAmount: l.UnitAmount,\n AccountCode: l.AccountCode,\n TaxType: l.TaxType,\n };\n if (l.ItemCode) line.ItemCode = l.ItemCode;\n return line;\n }),\n };\n\n const reference = carry(args.reference, existing.Reference);\n const title = carry(args.title, existing.Title);\n const summary = carry(args.summary, existing.Summary);\n const terms = carry(args.terms, existing.Terms);\n const expiryDate =\n carry(args.expiryDate, day(existing.ExpiryDateString)) ||\n oneMonthOn(issueDate);\n\n if (reference) quote.Reference = reference;\n if (title) quote.Title = title;\n if (summary) quote.Summary = summary;\n if (terms) quote.Terms = terms;\n if (expiryDate) quote.ExpiryDate = expiryDate;\n if (existing.CurrencyCode) quote.CurrencyCode = existing.CurrencyCode;\n if (existing.BrandingThemeID) {\n quote.BrandingThemeID = existing.BrandingThemeID;\n }\n\n // Post to the quote's own address, not the general /Quotes endpoint.\n let data: any;\n try {\n data = await xero(`/Quotes/${existing.QuoteID}`, {\n method: \"POST\",\n body: JSON.stringify({ Quotes: [quote] }),\n });\n } catch (err: any) {\n throw new Error(\n `${err?.message ?? err}\\n\\nPayload sent:\\n${\n JSON.stringify({ Quotes: [quote] }, null, 2)\n }`,\n );\n }\n\n const q = data.Quotes?.[0];\n const moved = q?.QuoteNumber && q.QuoteNumber !== quote.QuoteNumber;\n return {\n quoteID: q?.QuoteID,\n quoteNumber: q?.QuoteNumber,\n status: q?.Status,\n total: q?.Total,\n note: moved\n ? `WARNING: Xero renumbered this quote from ${quote.QuoteNumber} to ${q?.QuoteNumber}. Tell Jordan before doing anything else.`\n : `Updated in place — still ${q?.QuoteNumber}.`,\n };\n }\n\n case \"get_quote\": {\n if (args.quoteID) return await xero(`/Quotes/${args.quoteID}`);\n if (args.quoteNumber) {\n const qs = new URLSearchParams({\n QuoteNumber: String(args.quoteNumber).trim(),\n });\n const data = await xero(`/Quotes?${qs.toString()}`);\n const found = data.Quotes ?? [];\n if (!found.length) {\n throw new Error(`No quote found numbered ${args.quoteNumber}.`);\n }\n return { Quotes: found };\n }\n throw new Error(\"Give either quoteID or quoteNumber.\");\n }\n\n case \"list_quotes\": {\n const { matched, truncated } = await searchQuotes(args);\n return {\n count: matched.length,\n quotes: matched.map(quoteSummary),\n note: truncated\n ? `Stopped after ${MAX_PAGES} pages — narrow the search with a client or status.`\n : undefined,\n };\n }\n\n case \"find_invoices\": {\n if (!args.contactID && !args.site) {\n throw new Error(\"Give a contactID, a site, or both.\");\n }\n const { matched, truncated } = await searchInvoices(args);\n return {\n count: matched.length,\n invoices: matched.map(invoiceSummary),\n note: truncated\n ? `Stopped after ${MAX_PAGES} pages — narrow the search with a client.`\n : undefined,\n };\n }\n\n case \"remaining_to_bill\": {\n const quoteSearch = await searchQuotes({\n contactID: args.contactID,\n site: args.quoteNumber ? undefined : args.site,\n quoteNumber: args.quoteNumber,\n });\n // Declined quotes were never agreed, so they are not the job price.\n const quotes = quoteSearch.matched.filter((q) => q.Status !== \"DECLINED\");\n\n const invoiceSearch = await searchInvoices({\n contactID: args.contactID,\n site: args.site,\n });\n const invoices = invoiceSearch.matched;\n\n // Approved or paid invoices count as billed. Drafts and invoices still\n // awaiting approval are shown but not counted, so Jordan can decide.\n const billed = invoices.filter((i) =>\n i.Status === \"AUTHORISED\" || i.Status === \"PAID\"\n );\n const notYetApproved = invoices.filter((i) =>\n i.Status === \"DRAFT\" || i.Status === \"SUBMITTED\"\n );\n const billedExGST = money(\n billed.reduce((sum, i) => sum + Number(i.SubTotal ?? 0), 0),\n );\n\n const base = {\n site: args.site,\n quotesMatched: quotes.map(quoteSummary),\n invoicesCounted: billed.map(invoiceSummary),\n invoicesNotCounted: notYetApproved.map(invoiceSummary),\n billedExGST,\n checkBeforeInvoicing:\n \"Show Jordan these lists. References are typed by hand, so confirm every invoice here belongs to this quote and none are missing (extras or variations may not be part of the quote). Credit notes are not included. Only create an invoice once he confirms.\",\n };\n\n if (quoteSearch.truncated || invoiceSearch.truncated) {\n return {\n ...base,\n result: \"INCOMPLETE\",\n note:\n \"Hit the page limit, so something may be missing. Do not invoice off this.\",\n };\n }\n if (quotes.length === 0) {\n return {\n ...base,\n result: \"NO_QUOTE_FOUND\",\n note:\n \"No quote matched this client and site. Try fewer site words, or search without the client in case the quote sits under another contact.\",\n };\n }\n if (quotes.length > 1) {\n return {\n ...base,\n result: \"MORE_THAN_ONE_QUOTE\",\n note:\n \"More than one quote matched. Ask Jordan which one, then run again with quoteNumber.\",\n };\n }\n\n const q = quotes[0];\n const quoteExGST = money(Number(q.SubTotal ?? 0));\n const remainingExGST = money(quoteExGST - billedExGST);\n return {\n ...base,\n result: remainingExGST < 0 ? \"OVER_BILLED\" : \"OK\",\n quoteNumber: q.QuoteNumber,\n quoteExGST,\n remainingExGST,\n remainingGST: money(remainingExGST * 0.15),\n remainingInclGST: money(remainingExGST * 1.15),\n };\n }\n\n case \"create_invoice\": {\n const invoice: any = {\n Type: \"ACCREC\",\n Contact: { ContactID: args.contactID },\n Status: \"DRAFT\", // hard-locked: never AUTHORISED\n LineAmountTypes: \"Exclusive\",\n LineItems: buildLines(args.lineItems),\n };\n if (args.reference) invoice.Reference = args.reference;\n if (args.date) invoice.Date = args.date;\n if (args.dueDate) invoice.DueDate = args.dueDate;\n\n const data = await xero(\"/Invoices\", {\n method: \"POST\",\n body: JSON.stringify({ Invoices: [invoice] }),\n });\n const i = data.Invoices?.[0];\n return {\n invoiceID: i?.InvoiceID,\n invoiceNumber: i?.InvoiceNumber,\n status: i?.Status,\n note: \"Draft only. Approve and send it yourself in Xero.\",\n };\n }\n\n default:\n throw new Error(`Unknown tool: ${name}`);\n }\n}\n\n// ---------------------------------------------------------------------------\n// MCP over HTTP (JSON-RPC)\n// ---------------------------------------------------------------------------\nfunction rpcResult(id: any, result: any) {\n return Response.json({ jsonrpc: \"2.0\", id, result });\n}\n\nfunction rpcError(id: any, code: number, message: string) {\n return Response.json({ jsonrpc: \"2.0\", id, error: { code, message } });\n}\n\nexport default async function (req: Request): Promise {\n const url = new URL(req.url);\n\n // The key on the door. Endpoint is /mcp/\n const parts = url.pathname.split(\"/\").filter(Boolean);\n if (parts[0] !== \"mcp\" || parts[1] !== MCP_KEY || !MCP_KEY) {\n return new Response(\"Not found\", { status: 404 });\n }\n\n if (req.method === \"GET\") {\n return Response.json({\n ok: true,\n server: \"nevflow-xero\",\n version: VERSION,\n today: todayNZ(),\n tools: TOOLS.length,\n });\n }\n\n if (req.method !== \"POST\") {\n return new Response(\"Method not allowed\", { status: 405 });\n }\n\n let body: any;\n try {\n body = await req.json();\n } catch {\n return rpcError(null, -32700, \"Could not read that request.\");\n }\n\n const { id, method, params } = body ?? {};\n\n // Notifications carry no id and expect no reply.\n if (id === undefined || id === null) {\n return new Response(null, { status: 202 });\n }\n\n try {\n switch (method) {\n case \"initialize\":\n return rpcResult(id, {\n protocolVersion: \"2024-11-05\",\n capabilities: { tools: {} },\n serverInfo: { name: \"nevflow-xero\", version: VERSION },\n });\n\n case \"ping\":\n return rpcResult(id, {});\n\n case \"tools/list\":\n return rpcResult(id, { tools: TOOLS });\n\n case \"tools/call\": {\n const out = await runTool(params?.name, params?.arguments ?? {});\n return rpcResult(id, {\n content: [{ type: \"text\", text: JSON.stringify(out, null, 2) }],\n });\n }\n\n default:\n return rpcError(id, -32601, `Unsupported method: ${method}`);\n }\n } catch (err: any) {\n return rpcResult(id, {\n isError: true,\n content: [{ type: \"text\", text: String(err?.message ?? err) }],\n });\n }\n}","createdAt",["D",1789464142597],"branchVersion","branchId","1da4a128-3f60-4e71-9555-16cf318c6f7f","id","46b6f95b-579e-49fa-baf3-04e9e73185a4","nevflow-xero",["D",1787973521853],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Xer Quotes and Invoices","imageUrl","d853bbf1-1e7c-42b8-a02b-2eac48063e90","pinnedFileId","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"orgId","01a04b7d-09e3-713c-a3d8-5c22eab6496a","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_97":96,"_105":101},"org",{"_97":96,"_98":99,"_100":101,"_18":56,"_102":103,"_104":25},"branch",{"_13":86,"_33":87,"_44":43,"_88":45,"_89":-5,"_90":-5,"_91":-5,"_92":-5,"_93":-5,"_94":46,"_95":96},"isOwned",14,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","jordanneville","handle","displayName","Jordan Neville","avatar","https://lh3.googleusercontent.com/a/ACg8ocJ-73B1UShJgv2JifYUfLrxPulLa2J-TTg9LhMN-f9o2ak66w=s96-c","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_44":45,"_33":46,"_39":153,"_48":-5,"_49":25,"_50":51,"_52":51,"_53":54,"_55":-5,"_18":56,"_57":32,"_58":59,"_60":-5,"_61":-5,"_62":63,"_64":65,"_66":-5,"_67":-5,"_68":-5,"_69":-5,"_70":71,"_72":71,"_73":74,"_75":74,"_76":74,"_77":71,"_78":71,"_79":154,"_81":155,"_83":156,"_85":25},"tree",[148],"files",[148],"counts",{"_136":63,"_137":138,"_139":63,"_140":141,"_142":143},"contents",[128],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_44":129,"_33":28,"_31":32,"_130":-5,"_42":43,"_41":14,"_131":25,"_39":132,"_13":133,"_34":35,"_36":38,"_24":25,"_134":-5,"_27":135},"f79b56ab-0e1f-4d12-9364-b06bab916b89","parentId","latest",["D",1789464142597],8,"label",[28],"pulls","branches",1,"forks","envVars",{"_144":146,"_147":63},"connections",{"_144":63,"_145":63},"count","unfilledCount",3,"emptyCount",{"_44":129,"_33":28,"_31":32,"_130":-5,"_42":43,"_41":14,"_131":25,"_39":149,"_13":133,"_34":35,"_36":38,"_24":25,"_134":-5,"_150":151,"_27":152},["D",1789464142597],"children",[],[28],["D",1787973521853],{"_97":96,"_105":101},{"_97":96,"_98":99,"_100":101,"_18":56,"_102":103,"_104":25},{"_13":86,"_33":87,"_44":43,"_88":45,"_89":-5,"_90":-5,"_91":-5,"_92":-5,"_93":-5,"_94":46,"_95":96},"ctx",{"_79":-5,"_125":190,"_191":192,"_193":194,"_195":25,"_196":25,"_197":25,"_198":59,"_199":-5,"_200":-7,"_201":-7,"_202":63,"_203":25,"_204":25,"_205":-5,"_206":25,"_207":25,"_208":25,"_209":-5},"ENV",{"_161":162,"_163":164,"_165":87,"_166":167,"_168":169,"_170":171,"_172":173,"_174":175,"_176":177,"_178":179,"_180":181,"_182":183,"_184":185,"_186":187,"_188":189},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","811aa22498c9b0b5a47e8d778de579cdb990f332","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v11