@aderis-erp/cli 1.0.0 → 1.0.2

package/README.md

@@ -14,7 +14,7 @@ Command-line interface for Aderis Finance ERP. Manage your Aderis account, execu
 ## Installation
 
 ```bash
-npm install -g aderis-cli
+npm install -g @aderis-erp/cli
 aderis --help
 ```
 

package/dist/commands/{access-groups.js → access-groups 2.js }

@@ -3,24 +3,26 @@ import { apiRequest, ApiError } from '../lib/api-client.js';
 import { getCurrentContext, getContext, getBaseUrls } from '../lib/config.js';
 // Add 'import' action if both create and update exist
 const HAS_IMPORT = true;
-const HAS_EXPORT = false;
+const HAS_EXPORT = true;
 const HAS_CAMT053 = false;
 const NESTED_IMPORTS = [];
-const SUBCOMMANDS = [...["get", "create", "get-all", "update", "delete"], ...(HAS_IMPORT ? ['import'] : []), ...(HAS_EXPORT ? ['export'] : []), ...NESTED_IMPORTS.map(n => `import-${n}`)];
+const SUBCOMMANDS = [...["list", "create", "get", "update", "delete"], ...(HAS_IMPORT ? ['import'] : []), ...(HAS_EXPORT ? ['export'] : []), ...NESTED_IMPORTS.map(n => `import-${n}`)];
 const ENDPOINTS = {
-    'get': { method: 'GET', path: '/v1/access-groups', summary: 'List access groups (paginated)', pathParams: [], hasBody: false, isMultipart: false },
+    'list': { method: 'GET', path: '/v1/access-groups', summary: 'List access groups (paginated)', pathParams: [], hasBody: false, isMultipart: false },
     'create': { method: 'POST', path: '/v1/access-groups', summary: 'Create a new access group', pathParams: [], hasBody: true, isMultipart: false },
-    'get-all': { method: 'GET', path: '/v1/access-groups/{id}', summary: 'Get a single access group by ID', pathParams: ['id'], hasBody: false, isMultipart: false },
+    'get': { method: 'GET', path: '/v1/access-groups/{id}', summary: 'Get a single access group by ID', pathParams: ['id'], hasBody: false, isMultipart: false },
     'update': { method: 'PATCH', path: '/v1/access-groups/{id}', summary: 'Update an existing access group', pathParams: ['id'], hasBody: true, isMultipart: false },
     'delete': { method: 'DELETE', path: '/v1/access-groups/{id}', summary: 'Delete an access group', pathParams: ['id'], hasBody: false, isMultipart: false },
 };
 export default class AccessGroups extends Command {
     static description = 'Manage access groups';
     static examples = [
+        '<%= config.bin %> access-groups list',
         '<%= config.bin %> access-groups get <id>',
         '<%= config.bin %> access-groups create --data \'{...}\'',
         '<%= config.bin %> access-groups update <id> --set field=value',
         '<%= config.bin %> access-groups import --file data.json',
+        '<%= config.bin %> access-groups export --csv > access-groups.csv',
     ];
     static args = {
         action: Args.string({ description: 'Action: ' + SUBCOMMANDS.join(', '), required: true }),

package/dist/commands/bank-integrations.d.ts

@@ -14,6 +14,8 @@ export default class BankIntegrations extends Command {
         data: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
         file: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
         set: import("@oclif/core/interfaces").OptionFlag<string[] | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        'import-run-id': import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        'statement-id': import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
         page: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
         limit: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
         include: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;

package/dist/commands/bank-integrations.js

@@ -6,7 +6,7 @@ const HAS_IMPORT = true;
 const HAS_EXPORT = true;
 const HAS_CAMT053 = false;
 const NESTED_IMPORTS = [];
-const SUBCOMMANDS = [...["initiate", "providers-supported", "providers-consent-status", "delete-providers-consent", "list", "create", "get", "update", "delete", "log"], ...(HAS_IMPORT ? ['import'] : []), ...(HAS_EXPORT ? ['export'] : []), ...NESTED_IMPORTS.map(n => `import-${n}`)];
+const SUBCOMMANDS = [...["initiate", "providers-supported", "providers-consent-status", "delete-providers-consent", "list", "create", "get", "update", "delete", "log", "list-account-statement-runs", "trigger-account-statement-runs", "get-account-statement-runs", "account-statement-runs-files", "trigger-account-statement-runs-reimport", "list-statements", "statements", "download-statements-xml"], ...(HAS_IMPORT ? ['import'] : []), ...(HAS_EXPORT ? ['export'] : []), ...NESTED_IMPORTS.map(n => `import-${n}`)];
 const ENDPOINTS = {
     'initiate': { method: 'POST', path: '/v1/bank-integrations/initiate', summary: 'Initiate the OAuth/auth flow for a bank integration', pathParams: [], hasBody: true, isMultipart: false },
     'providers-supported': { method: 'GET', path: '/v1/bank-integrations/providers/supported', summary: 'List supported bLink providers', pathParams: [], hasBody: false, isMultipart: false },
@@ -18,6 +18,14 @@ const ENDPOINTS = {
     'update': { method: 'PATCH', path: '/v1/bank-integrations/{id}', summary: 'Update the display name of a BankIntegration', pathParams: ['id'], hasBody: true, isMultipart: false },
     'delete': { method: 'DELETE', path: '/v1/bank-integrations/{id}', summary: 'Delete a BankIntegration', pathParams: ['id'], hasBody: false, isMultipart: false },
     'log': { method: 'GET', path: '/v1/bank-integrations/{id}/log', summary: 'Get activity log for a bank integration', pathParams: ['id'], hasBody: false, isMultipart: false },
+    'list-account-statement-runs': { method: 'GET', path: '/v1/bank-integrations/{bankIntegrationId}/account-statement-runs', summary: 'List bank statement import runs', pathParams: ['bankIntegrationId'], hasBody: false, isMultipart: false },
+    'trigger-account-statement-runs': { method: 'POST', path: '/v1/bank-integrations/{bankIntegrationId}/account-statement-runs', summary: 'Trigger a bank statement import', pathParams: ['bankIntegrationId'], hasBody: true, isMultipart: false },
+    'get-account-statement-runs': { method: 'GET', path: '/v1/bank-integrations/{bankIntegrationId}/account-statement-runs/{importRunId}', summary: 'Get import run details', pathParams: ['bankIntegrationId', 'importRunId'], hasBody: false, isMultipart: false },
+    'account-statement-runs-files': { method: 'GET', path: '/v1/bank-integrations/{bankIntegrationId}/account-statement-runs/{importRunId}/files', summary: 'Get files for an import run', pathParams: ['bankIntegrationId', 'importRunId'], hasBody: false, isMultipart: false },
+    'trigger-account-statement-runs-reimport': { method: 'POST', path: '/v1/bank-integrations/{bankIntegrationId}/account-statement-runs/{importRunId}/reimport', summary: 'Trigger reimport of an existing account statement import run', pathParams: ['bankIntegrationId', 'importRunId'], hasBody: true, isMultipart: false },
+    'list-statements': { method: 'GET', path: '/v1/bank-integrations/{bankIntegrationId}/statements', summary: 'List CAMT.053 statements for a bank integration', pathParams: ['bankIntegrationId'], hasBody: false, isMultipart: false },
+    'statements': { method: 'GET', path: '/v1/bank-integrations/{bankIntegrationId}/statements/{statementId}', summary: 'Get CAMT.053 statement detail', pathParams: ['bankIntegrationId', 'statementId'], hasBody: false, isMultipart: false },
+    'download-statements-xml': { method: 'GET', path: '/v1/bank-integrations/{bankIntegrationId}/statements/{statementId}/xml', summary: 'Get raw CAMT.053 XML for a statement', pathParams: ['bankIntegrationId', 'statementId'], hasBody: false, isMultipart: false },
 };
 export default class BankIntegrations extends Command {
     static description = 'Manage bank integrations';
@@ -41,6 +49,8 @@ export default class BankIntegrations extends Command {
         data: Flags.string({ char: 'd', description: 'JSON data for request body' }),
         file: Flags.string({ char: 'f', description: 'Read request body from file' }),
         set: Flags.string({ char: 's', description: 'Set individual field (e.g. --set firstName=John)', multiple: true }),
+        'import-run-id': Flags.string({ description: 'Path param: importRunId' }),
+        'statement-id': Flags.string({ description: 'Path param: statementId' }),
         page: Flags.string({ description: 'Page number' }),
         limit: Flags.string({ description: 'Items per page' }),
         include: Flags.string({ description: 'Relations to include' }),

package/dist/commands/documents.js

@@ -3,14 +3,14 @@ import { apiRequest, ApiError } from '../lib/api-client.js';
 import { getCurrentContext, getContext, getBaseUrls } from '../lib/config.js';
 // Add 'import' action if both create and update exist
 const HAS_IMPORT = true;
-const HAS_EXPORT = false;
+const HAS_EXPORT = true;
 const HAS_CAMT053 = false;
 const NESTED_IMPORTS = [];
-const SUBCOMMANDS = [...["get", "create", "get-all", "update", "delete", "reclassify"], ...(HAS_IMPORT ? ['import'] : []), ...(HAS_EXPORT ? ['export'] : []), ...NESTED_IMPORTS.map(n => `import-${n}`)];
+const SUBCOMMANDS = [...["list", "create", "get", "update", "delete", "reclassify"], ...(HAS_IMPORT ? ['import'] : []), ...(HAS_EXPORT ? ['export'] : []), ...NESTED_IMPORTS.map(n => `import-${n}`)];
 const ENDPOINTS = {
-    'get': { method: 'GET', path: '/v1/documents', summary: 'List documents (paginated)', pathParams: [], hasBody: false, isMultipart: false },
+    'list': { method: 'GET', path: '/v1/documents', summary: 'List documents (paginated)', pathParams: [], hasBody: false, isMultipart: false },
     'create': { method: 'POST', path: '/v1/documents', summary: 'Create a new document (letterbox)', pathParams: [], hasBody: true, isMultipart: false },
-    'get-all': { method: 'GET', path: '/v1/documents/{id}', summary: 'Get document detail with files, audit log, and notes placeholder', pathParams: ['id'], hasBody: false, isMultipart: false },
+    'get': { method: 'GET', path: '/v1/documents/{id}', summary: 'Get document detail with files, audit log, and notes placeholder', pathParams: ['id'], hasBody: false, isMultipart: false },
     'update': { method: 'PATCH', path: '/v1/documents/{id}', summary: 'Patch an existing document', pathParams: ['id'], hasBody: true, isMultipart: false },
     'delete': { method: 'DELETE', path: '/v1/documents/{id}', summary: 'Soft-delete (discard) a document', pathParams: ['id'], hasBody: true, isMultipart: false },
     'reclassify': { method: 'POST', path: '/v1/documents/{id}/reclassify', summary: 'Reclassify a document to a new type', pathParams: ['id'], hasBody: true, isMultipart: false },
@@ -18,10 +18,12 @@ const ENDPOINTS = {
 export default class Documents extends Command {
     static description = 'Manage documents';
     static examples = [
+        '<%= config.bin %> documents list',
         '<%= config.bin %> documents get <id>',
         '<%= config.bin %> documents create --data \'{...}\'',
         '<%= config.bin %> documents update <id> --set field=value',
         '<%= config.bin %> documents import --file data.json',
+        '<%= config.bin %> documents export --csv > documents.csv',
     ];
     static args = {
         action: Args.string({ description: 'Action: ' + SUBCOMMANDS.join(', '), required: true }),

package/dist/commands/inbox.js

@@ -8,7 +8,7 @@ const HAS_CAMT053 = false;
 const NESTED_IMPORTS = [];
 const SUBCOMMANDS = [...["upload", "email-webhook", "document-types"], ...(HAS_IMPORT ? ['import'] : []), ...(HAS_EXPORT ? ['export'] : []), ...NESTED_IMPORTS.map(n => `import-${n}`)];
 const ENDPOINTS = {
-    'upload': { method: 'POST', path: '/v1/inbox/upload', summary: 'Upload document(s) to inbox for processing', pathParams: [], hasBody: false, isMultipart: false },
+    'upload': { method: 'POST', path: '/v1/inbox/upload', summary: 'Upload document(s) to inbox for processing', pathParams: [], hasBody: false, isMultipart: true },
     'email-webhook': { method: 'POST', path: '/v1/inbox/email-webhook/{secret}', summary: 'Email webhook for document ingestion (SendGrid inbound-parse)', pathParams: ['secret'], hasBody: false, isMultipart: false },
     'document-types': { method: 'GET', path: '/v1/inbox/document-types', summary: 'Get available document types and per-parent allowed types', pathParams: [], hasBody: false, isMultipart: false },
 };

package/dist/commands/processing-logs.js

@@ -6,9 +6,10 @@ const HAS_IMPORT = false;
 const HAS_EXPORT = false;
 const HAS_CAMT053 = false;
 const NESTED_IMPORTS = [];
-const SUBCOMMANDS = [...["get"], ...(HAS_IMPORT ? ['import'] : []), ...(HAS_EXPORT ? ['export'] : []), ...NESTED_IMPORTS.map(n => `import-${n}`)];
+const SUBCOMMANDS = [...["get", "get-processingId"], ...(HAS_IMPORT ? ['import'] : []), ...(HAS_EXPORT ? ['export'] : []), ...NESTED_IMPORTS.map(n => `import-${n}`)];
 const ENDPOINTS = {
-    'get': { method: 'GET', path: '/v1/processing-logs/{processingId}', summary: 'Get a processing run by its processing identifier', pathParams: ['processingId'], hasBody: false, isMultipart: false },
+    'get': { method: 'GET', path: '/v1/processing-logs', summary: 'List recent inbox processing logs (newest first)', pathParams: [], hasBody: false, isMultipart: false },
+    'get-processingId': { method: 'GET', path: '/v1/processing-logs/{processingId}', summary: 'Get a processing run by its processing identifier', pathParams: ['processingId'], hasBody: false, isMultipart: false },
 };
 export default class ProcessingLogs extends Command {
     static description = 'Manage processing logs';

package/dist/commands/{audit-log.d.ts → pubsub.d.ts}

@@ -1,7 +1,7 @@
 import { Command } from '@oclif/core';
-export default class AuditLog extends Command {
+export default class Pubsub extends Command {
     static description: string;
-    static examples: string[];
+    static examples: never[];
     static args: {
         action: import("@oclif/core/interfaces").Arg<string, Record<string, unknown>>;
         id: import("@oclif/core/interfaces").Arg<string | undefined, Record<string, unknown>>;

package/dist/commands/{audit-log.js → pubsub.js}

@@ -3,21 +3,17 @@ import { apiRequest, ApiError } from '../lib/api-client.js';
 import { getCurrentContext, getContext, getBaseUrls } from '../lib/config.js';
 // Add 'import' action if both create and update exist
 const HAS_IMPORT = false;
-const HAS_EXPORT = true;
+const HAS_EXPORT = false;
 const HAS_CAMT053 = false;
 const NESTED_IMPORTS = [];
-const SUBCOMMANDS = [...["list", "find-entity", "find-workflow"], ...(HAS_IMPORT ? ['import'] : []), ...(HAS_EXPORT ? ['export'] : []), ...NESTED_IMPORTS.map(n => `import-${n}`)];
+const SUBCOMMANDS = [...["webhook-events", "processor-jobs"], ...(HAS_IMPORT ? ['import'] : []), ...(HAS_EXPORT ? ['export'] : []), ...NESTED_IMPORTS.map(n => `import-${n}`)];
 const ENDPOINTS = {
-    'list': { method: 'GET', path: '/v1/audit-log', summary: 'Get audit log entries', pathParams: [], hasBody: false, isMultipart: false },
-    'find-entity': { method: 'GET', path: '/v1/audit-log/entity/{entityId}', summary: 'Get audit history for a specific entity', pathParams: ['entityId'], hasBody: false, isMultipart: false },
-    'find-workflow': { method: 'GET', path: '/v1/audit-log/workflow/{workflowId}', summary: 'Get audit log entries for a specific workflow', pathParams: ['workflowId'], hasBody: false, isMultipart: false },
+    'webhook-events': { method: 'POST', path: '/v1/pubsub/webhook-events', summary: 'GCP Pub/Sub push endpoint for webhook event delivery', pathParams: [], hasBody: false, isMultipart: false },
+    'processor-jobs': { method: 'POST', path: '/v1/pubsub/processor-jobs', summary: 'GCP Pub/Sub push endpoint for processor-job.v1 envelopes (PDF rendering)', pathParams: [], hasBody: false, isMultipart: false },
 };
-export default class AuditLog extends Command {
-    static description = 'Manage audit log';
-    static examples = [
-        '<%= config.bin %> audit-log list',
-        '<%= config.bin %> audit-log export --csv > audit-log.csv',
-    ];
+export default class Pubsub extends Command {
+    static description = 'Manage pubsub';
+    static examples = [];
     static args = {
         action: Args.string({ description: 'Action: ' + SUBCOMMANDS.join(', '), required: true }),
         id: Args.string({ description: 'Resource ID (for get, update, delete operations)', required: false }),
@@ -42,7 +38,7 @@ export default class AuditLog extends Command {
         'show-http-request': Flags.boolean({ description: 'Show HTTP request details (method, URL, body)' }),
     };
     async run() {
-        const { args, flags } = await this.parse(AuditLog);
+        const { args, flags } = await this.parse(Pubsub);
         // Handle import action specially
         if (args.action === 'import') {
             if (!HAS_IMPORT)
@@ -88,7 +84,7 @@ export default class AuditLog extends Command {
                 // First path param always comes from positional argument
                 value = args.id;
                 if (!value)
-                    this.error('Missing required argument: id. Usage: aderis audit-log <action> <id>');
+                    this.error('Missing required argument: id. Usage: aderis pubsub <action> <id>');
             }
             else {
                 const flagName = param.replace(/\./g, '-').replace(/([A-Z])/g, '-$1').toLowerCase().replace(/^-/, '');
@@ -651,7 +647,7 @@ export default class AuditLog extends Command {
     }
     async runNestedImport(suffix, parentId, flags) {
         if (!parentId) {
-            this.error(`Missing required argument: id. Usage: aderis audit-log import-${suffix} <parent-id> --file data.json`);
+            this.error(`Missing required argument: id. Usage: aderis pubsub import-${suffix} <parent-id> --file data.json`);
         }
         const context = flags.context ? getContext(flags.context) : getCurrentContext();
         if (!context)

package/dist/commands/sales-invoices.js

@@ -6,7 +6,7 @@ const HAS_IMPORT = true;
 const HAS_EXPORT = true;
 const HAS_CAMT053 = false;
 const NESTED_IMPORTS = ["line-items", "notes", "files"];
-const SUBCOMMANDS = [...["list", "create", "create-migrated-invoice", "pdf", "get", "update", "delete", "approve", "validate", "request-approval", "send", "send-resend", "cancel", "copy", "replace", "create-line-items", "update-line-items", "delete-line-items", "list-notes", "create-notes", "get-notes", "update-notes", "delete-notes", "list-files", "create-files", "get-files", "update-files", "delete-files", "files-download"], ...(HAS_IMPORT ? ['import'] : []), ...(HAS_EXPORT ? ['export'] : []), ...NESTED_IMPORTS.map(n => `import-${n}`)];
+const SUBCOMMANDS = [...["list", "create", "create-migrated-invoice", "pdf", "get", "update", "delete", "approve", "validate", "request-approval", "send", "send-resend", "cancel", "copy", "replace", "create-line-items", "update-line-items-reorder", "update-line-items", "delete-line-items", "list-notes", "create-notes", "get-notes", "update-notes", "delete-notes", "list-files", "create-files", "get-files", "update-files", "delete-files", "files-download"], ...(HAS_IMPORT ? ['import'] : []), ...(HAS_EXPORT ? ['export'] : []), ...NESTED_IMPORTS.map(n => `import-${n}`)];
 const ENDPOINTS = {
     'list': { method: 'GET', path: '/v1/sales-invoices', summary: 'Get all sales invoices with pagination', pathParams: [], hasBody: false, isMultipart: false },
     'create': { method: 'POST', path: '/v1/sales-invoices', summary: 'Create a new sales invoice', pathParams: [], hasBody: true, isMultipart: false },
@@ -24,6 +24,7 @@ const ENDPOINTS = {
     'copy': { method: 'POST', path: '/v1/sales-invoices/{id}/copy', summary: 'Create a copy of a cancelled invoice', pathParams: ['id'], hasBody: false, isMultipart: false },
     'replace': { method: 'POST', path: '/v1/sales-invoices/{id}/replace', summary: 'Replace invoice with corrected version (creates new CORRECTED_INVOICE)', pathParams: ['id'], hasBody: false, isMultipart: false },
     'create-line-items': { method: 'POST', path: '/v1/sales-invoices/{invoiceId}/line-items', summary: 'Add a line item to a sales invoice', pathParams: ['invoiceId'], hasBody: true, isMultipart: false },
+    'update-line-items-reorder': { method: 'PATCH', path: '/v1/sales-invoices/{invoiceId}/line-items/reorder', summary: 'Bulk reorder line items (drag-and-drop)', pathParams: ['invoiceId'], hasBody: true, isMultipart: false },
     'update-line-items': { method: 'PATCH', path: '/v1/sales-invoices/{invoiceId}/line-items/{lineItemId}', summary: 'Update a line item on a sales invoice', pathParams: ['invoiceId', 'lineItemId'], hasBody: true, isMultipart: false },
     'delete-line-items': { method: 'DELETE', path: '/v1/sales-invoices/{invoiceId}/line-items/{lineItemId}', summary: 'Remove a line item from a sales invoice', pathParams: ['invoiceId', 'lineItemId'], hasBody: false, isMultipart: false },
     'list-notes': { method: 'GET', path: '/v1/sales-invoices/{salesInvoiceId}/notes', summary: 'Get all notes for a sales invoice', pathParams: ['salesInvoiceId'], hasBody: false, isMultipart: false },

package/dist/commands/sales-orders.js

@@ -6,7 +6,7 @@ const HAS_IMPORT = true;
 const HAS_EXPORT = true;
 const HAS_CAMT053 = false;
 const NESTED_IMPORTS = ["line-items", "notes", "files"];
-const SUBCOMMANDS = [...["list", "create", "get", "update", "delete", "submit", "approve", "accept", "terminate", "cancel", "replace", "create-invoice", "create-line-items", "update-line-items", "delete-line-items", "list-notes", "create-notes", "get-notes", "update-notes", "delete-notes", "list-files", "create-files", "get-files", "update-files", "delete-files", "files-download"], ...(HAS_IMPORT ? ['import'] : []), ...(HAS_EXPORT ? ['export'] : []), ...NESTED_IMPORTS.map(n => `import-${n}`)];
+const SUBCOMMANDS = [...["list", "create", "get", "update", "delete", "submit", "approve", "accept", "terminate", "cancel", "replace", "create-invoice", "create-line-items", "update-line-items-reorder", "update-line-items", "delete-line-items", "list-notes", "create-notes", "get-notes", "update-notes", "delete-notes", "list-files", "create-files", "get-files", "update-files", "delete-files", "files-download"], ...(HAS_IMPORT ? ['import'] : []), ...(HAS_EXPORT ? ['export'] : []), ...NESTED_IMPORTS.map(n => `import-${n}`)];
 const ENDPOINTS = {
     'list': { method: 'GET', path: '/v1/sales-orders', summary: 'Get all sales orders with pagination', pathParams: [], hasBody: false, isMultipart: false },
     'create': { method: 'POST', path: '/v1/sales-orders', summary: 'Create a new sales order', pathParams: [], hasBody: true, isMultipart: false },
@@ -21,6 +21,7 @@ const ENDPOINTS = {
     'replace': { method: 'POST', path: '/v1/sales-orders/{id}/replace', summary: 'Replace order with corrected version (APPROVED → creates new DRAFT)', pathParams: ['id'], hasBody: false, isMultipart: false },
     'create-invoice': { method: 'POST', path: '/v1/sales-orders/{id}/create-invoice', summary: 'Create invoice from sales order (ACCEPTED → creates DRAFT invoice)', pathParams: ['id'], hasBody: false, isMultipart: false },
     'create-line-items': { method: 'POST', path: '/v1/sales-orders/{orderId}/line-items', summary: 'Add a line item to a sales order', pathParams: ['orderId'], hasBody: true, isMultipart: false },
+    'update-line-items-reorder': { method: 'PATCH', path: '/v1/sales-orders/{orderId}/line-items/reorder', summary: 'Bulk reorder line items (drag-and-drop)', pathParams: ['orderId'], hasBody: true, isMultipart: false },
     'update-line-items': { method: 'PATCH', path: '/v1/sales-orders/{orderId}/line-items/{lineItemId}', summary: 'Update a line item on a sales order', pathParams: ['orderId', 'lineItemId'], hasBody: true, isMultipart: false },
     'delete-line-items': { method: 'DELETE', path: '/v1/sales-orders/{orderId}/line-items/{lineItemId}', summary: 'Remove a line item from a sales order', pathParams: ['orderId', 'lineItemId'], hasBody: false, isMultipart: false },
     'list-notes': { method: 'GET', path: '/v1/sales-orders/{salesOrderId}/notes', summary: 'Get all notes for a sales order', pathParams: ['salesOrderId'], hasBody: false, isMultipart: false },

package/dist/lib/auth.js

@@ -5,7 +5,7 @@ import * as http from 'node:http';
 import { URL, URLSearchParams } from 'node:url';
 import open from 'open';
 import { getBaseUrls, getContext, saveTokens } from './config.js';
-function buildValidatedUrl(baseUrl) {
+function buildValidatedUrl(baseUrl, path) {
     try {
         // Minimal path validation
         if (baseUrl.includes('/../') || /\/%2e%2e\//i.test(baseUrl)) {
@@ -24,6 +24,15 @@ function buildValidatedUrl(baseUrl) {
         if (!['http:', 'https:'].includes(url.protocol)) {
             throw new Error('Invalid protocol');
         }
+        // Add path if provided
+        if (path) {
+            if (path.includes('/../') || /\/%2e%2e\//i.test(path)) {
+                throw new Error('Invalid path');
+            }
+            // Ensure path starts with / and append to pathname
+            const cleanPath = path.startsWith('/') ? path : '/' + path;
+            url.pathname = url.pathname.replace(/\/$/, '') + cleanPath;
+        }
         return url.href;
     }
     catch {
@@ -234,7 +243,7 @@ async function exchangeCodeForTokens(context, code, codeVerifier) {
     if (context.client_secret) {
         params.set('client_secret', context.client_secret);
     }
-    const response = await axios.post(buildValidatedUrl(`${authUrl}/oauth/token`), params.toString(), {
+    const response = await axios.post(buildValidatedUrl(authUrl, '/oauth/token'), params.toString(), {
         headers: {
             Accept: 'application/json',
             'Content-Type': 'application/x-www-form-urlencoded',
@@ -267,7 +276,7 @@ export async function refreshTokens(contextName) {
     }
     let response;
     try {
-        response = await axios.post(buildValidatedUrl(`${authUrl}/oauth/token`), params.toString(), {
+        response = await axios.post(buildValidatedUrl(authUrl, '/oauth/token'), params.toString(), {
             headers: {
                 Accept: 'application/json',
                 'Content-Type': 'application/x-www-form-urlencoded',
@@ -316,7 +325,7 @@ export async function testAuth(contextName) {
     }
     const token = await getValidToken(contextName);
     const { api: apiUrl } = getBaseUrls(context.environment);
-    const response = await axios.get(buildValidatedUrl(`${apiUrl}/v1/auth/me`), {
+    const response = await axios.get(buildValidatedUrl(apiUrl, '/v1/auth/me'), {
         headers: {
             Accept: 'application/json',
             Authorization: `Bearer ${token}`,
@@ -334,7 +343,7 @@ export async function listTenants(contextName) {
     let response;
     try {
         // Frontegg endpoint to list user's tenants
-        response = await axios.get(buildValidatedUrl(`${authUrl}/identity/resources/users/v2/me/tenants`), {
+        response = await axios.get(buildValidatedUrl(authUrl, '/identity/resources/users/v2/me/tenants'), {
             headers: {
                 Accept: 'application/json',
                 Authorization: `Bearer ${token}`,
@@ -393,7 +402,7 @@ export async function switchTenant(contextName, tenantId) {
     const token = await getValidToken(contextName);
     try {
         // Step 1: PUT to switch the user's active tenant
-        await axios.put(buildValidatedUrl(`${authUrl}/identity/resources/users/v1/tenant`), { tenantId }, {
+        await axios.put(buildValidatedUrl(authUrl, '/identity/resources/users/v1/tenant'), { tenantId }, {
             headers: {
                 Accept: 'application/json',
                 Authorization: `Bearer ${token}`,
@@ -401,7 +410,7 @@ export async function switchTenant(contextName, tenantId) {
             },
         });
         // Step 2: Refresh tokens to get new tokens for the switched tenant
-        const response = await axios.post(buildValidatedUrl(`${authUrl}/oauth/token`), new URLSearchParams({
+        const response = await axios.post(buildValidatedUrl(authUrl, '/oauth/token'), new URLSearchParams({
             client_id: context.client_id,
             grant_type: 'refresh_token',
             refresh_token: context.tokens.refresh_token,