@rubytech/create-maxy-code 0.1.312 → 0.1.313

package/payload/platform/plugins/quickbooks/mcp/dist/index.js

@@ -0,0 +1,218 @@
+import { initStderrTee } from "../../../../lib/mcp-stderr-tee/dist/index.js";
+initStderrTee("quickbooks");
+import { randomBytes } from "node:crypto";
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+import { z } from "zod";
+import { readStore, setCredentials, removeConnection, writePending, } from "./lib/secrets.js";
+import { buildAuthorizeUrl } from "./lib/oauth.js";
+import { qboQuery, qboCreate, qboUpdate, qboReport, auditConnection } from "./lib/qbo-client.js";
+// Plugin-system boot tolerance — see Task 202. Module-init must never throw;
+// the plugin-system enumerates tools/list with no env, so per-account context
+// is resolved per call and a missing account refuses, never crashes.
+const ACCOUNT_ID = process.env.ACCOUNT_ID ?? null;
+const PLATFORM_ROOT = process.env.PLATFORM_ROOT ?? null;
+process.stderr.write(`[quickbooks] boot accountId=${ACCOUNT_ID ?? "null"} platformRoot=${PLATFORM_ROOT ?? "null"}\n`);
+const CONSENT_TTL_MS = 15 * 60 * 1000;
+function refuseNoAccount(toolName) {
+    process.stderr.write(`[quickbooks] tool=${toolName} refuse reason=no-account-context\n`);
+    return {
+        content: [
+            {
+                type: "text",
+                text: `${toolName} cannot execute: this MCP instance was launched without ACCOUNT_ID/PLATFORM_ROOT (plugin-system metadata-only mode). Per-account access requires both at spawn.`,
+            },
+        ],
+        isError: true,
+    };
+}
+function ok(data) {
+    return {
+        content: [
+            { type: "text", text: typeof data === "string" ? data : JSON.stringify(data, null, 2) },
+        ],
+    };
+}
+function fail(message) {
+    return { content: [{ type: "text", text: message }], isError: true };
+}
+const server = new McpServer({ name: "quickbooks", version: "0.1.0" });
+// Arbitrary QBO resource body (the caller assembles it per Intuit's entity
+// schema; the connector does not model every field).
+const resourceBody = z.record(z.unknown());
+// ---------------------------------------------------------------------------
+// Connection management
+// ---------------------------------------------------------------------------
+server.tool("quickbooks-credentials-set", "Store the operator's own Intuit app credentials (client ID + secret) for this account. Get these by registering an app at developer.intuit.com — Maxy is never the OAuth app owner. environment is 'sandbox' for an Intuit sandbox company or 'production' for real books.", {
+    clientId: z.string().describe("Intuit app client ID"),
+    clientSecret: z.string().describe("Intuit app client secret"),
+    environment: z.enum(["sandbox", "production"]).describe("Which QBO environment these credentials target"),
+}, async ({ clientId, clientSecret, environment }) => {
+    if (!ACCOUNT_ID || !PLATFORM_ROOT)
+        return refuseNoAccount("quickbooks-credentials-set");
+    try {
+        setCredentials(PLATFORM_ROOT, ACCOUNT_ID, { clientId, clientSecret, environment });
+        return ok(`Stored Intuit ${environment} credentials. Next: run quickbooks-authorize-url and have a human authorize each company.`);
+    }
+    catch (err) {
+        return fail(`quickbooks-credentials-set failed: ${err.message}`);
+    }
+});
+server.tool("quickbooks-authorize-url", "Generate the Intuit consent URL for a human to click. Returns a URL — hand it to a person; they sign in and authorize one company. Intuit then redirects to the callback, which stores the refresh token. redirectUri MUST exactly match the redirect URI registered in the Intuit app (the brand's public host + /api/quickbooks/callback).", {
+    redirectUri: z.string().describe("The exact redirect URI registered in the Intuit app, e.g. https://<public-host>/api/quickbooks/callback"),
+    realmHint: z.string().optional().describe("Optional human label for which company is being connected (recorded for correlation only)"),
+}, async ({ redirectUri, realmHint }) => {
+    if (!ACCOUNT_ID || !PLATFORM_ROOT)
+        return refuseNoAccount("quickbooks-authorize-url");
+    try {
+        const store = readStore(PLATFORM_ROOT, ACCOUNT_ID);
+        if (!store)
+            return fail("No credentials set. Run quickbooks-credentials-set first.");
+        const state = randomBytes(24).toString("base64url");
+        const now = Date.now();
+        writePending(PLATFORM_ROOT, ACCOUNT_ID, {
+            state,
+            redirectUri,
+            realmHint,
+            createdAt: now,
+            expiresAt: now + CONSENT_TTL_MS,
+        });
+        const url = buildAuthorizeUrl({ clientId: store.clientId, redirectUri, state });
+        process.stderr.write(`[quickbooks] op=authorize-url state=${state} realmHint=${realmHint ?? ""}\n`);
+        return ok(`Hand this URL to a person to authorize the company (valid 15 minutes):\n\n${url}`);
+    }
+    catch (err) {
+        return fail(`quickbooks-authorize-url failed: ${err.message}`);
+    }
+});
+server.tool("quickbooks-connections", "List the QuickBooks companies (realmIds) this account is connected to, with the age of each stored refresh token.", {}, async () => {
+    if (!ACCOUNT_ID || !PLATFORM_ROOT)
+        return refuseNoAccount("quickbooks-connections");
+    const store = readStore(PLATFORM_ROOT, ACCOUNT_ID);
+    if (!store)
+        return ok("No credentials set.");
+    const now = Date.now();
+    const connections = Object.entries(store.connections).map(([realmId, c]) => ({
+        realmId,
+        lastRefresh: c.lastRefresh,
+        ageDays: c.lastRefresh > 0 ? Math.floor((now - c.lastRefresh) / 86_400_000) : null,
+        refreshTokenExpiry: c.refreshTokenExpiry,
+    }));
+    return ok({ environment: store.environment, connections });
+});
+server.tool("quickbooks-token-audit", "Probe every connected company's refresh token and report which are still alive. Run periodically: a refresh token dies silently after ~100 days of inactivity or operator revocation. alive=false means that company needs operator re-consent before any customer-facing call.", {
+    realmId: z.string().optional().describe("Audit just this company; omit to audit all"),
+}, async ({ realmId }) => {
+    if (!ACCOUNT_ID || !PLATFORM_ROOT)
+        return refuseNoAccount("quickbooks-token-audit");
+    const store = readStore(PLATFORM_ROOT, ACCOUNT_ID);
+    if (!store)
+        return ok("No credentials set.");
+    const realms = realmId ? [realmId] : Object.keys(store.connections);
+    const results = [];
+    for (const r of realms) {
+        results.push({ realmId: r, ...(await auditConnection(PLATFORM_ROOT, ACCOUNT_ID, r)) });
+    }
+    return ok({ audited: results });
+});
+server.tool("quickbooks-disconnect", "Remove the stored refresh token for one company. The operator can re-authorize later with quickbooks-authorize-url.", { realmId: z.string().describe("The company realmId to disconnect") }, async ({ realmId }) => {
+    if (!ACCOUNT_ID || !PLATFORM_ROOT)
+        return refuseNoAccount("quickbooks-disconnect");
+    removeConnection(PLATFORM_ROOT, ACCOUNT_ID, realmId);
+    return ok(`Disconnected realmId=${realmId}.`);
+});
+// ---------------------------------------------------------------------------
+// Read
+// ---------------------------------------------------------------------------
+server.tool("quickbooks-query", "Run a QuickBooks query (the QBO SQL-like language) against a company. Covers every readable entity: e.g. SELECT * FROM Invoice WHERE TxnDate > '2026-01-01', SELECT * FROM Customer, SELECT * FROM Bill.", {
+    realmId: z.string().describe("The company realmId"),
+    query: z.string().describe("A QBO query, e.g. \"SELECT * FROM Invoice MAXRESULTS 20\""),
+}, async ({ realmId, query }) => {
+    if (!ACCOUNT_ID || !PLATFORM_ROOT)
+        return refuseNoAccount("quickbooks-query");
+    try {
+        return ok(await qboQuery({ platformRoot: PLATFORM_ROOT, accountId: ACCOUNT_ID, realmId, query }));
+    }
+    catch (err) {
+        return fail(`quickbooks-query failed: ${err.message}`);
+    }
+});
+server.tool("quickbooks-report", "Fetch a named QuickBooks report for a company, e.g. ProfitAndLoss, BalanceSheet, CustomerBalance, AgedReceivables. Params are report-specific (start_date, end_date, etc).", {
+    realmId: z.string().describe("The company realmId"),
+    report: z.string().describe("Report name, e.g. ProfitAndLoss"),
+    params: z.record(z.string()).optional().describe("Report parameters, e.g. { start_date: '2026-01-01', end_date: '2026-03-31' }"),
+}, async ({ realmId, report, params }) => {
+    if (!ACCOUNT_ID || !PLATFORM_ROOT)
+        return refuseNoAccount("quickbooks-report");
+    try {
+        return ok(await qboReport({ platformRoot: PLATFORM_ROOT, accountId: ACCOUNT_ID, realmId, report, params }));
+    }
+    catch (err) {
+        return fail(`quickbooks-report failed: ${err.message}`);
+    }
+});
+// ---------------------------------------------------------------------------
+// Write — entity-specific convenience tools + a generic fallback.
+// All updates require Id + SyncToken in the body (QBO's optimistic-lock token).
+// ---------------------------------------------------------------------------
+function createTool(toolName, entity, description) {
+    server.tool(toolName, description, { realmId: z.string().describe("The company realmId"), body: resourceBody.describe(`${entity} resource body`) }, async ({ realmId, body }) => {
+        if (!ACCOUNT_ID || !PLATFORM_ROOT)
+            return refuseNoAccount(toolName);
+        try {
+            return ok(await qboCreate({ platformRoot: PLATFORM_ROOT, accountId: ACCOUNT_ID, realmId, entity, body }));
+        }
+        catch (err) {
+            return fail(`${toolName} failed: ${err.message}`);
+        }
+    });
+}
+function updateTool(toolName, entity, description) {
+    server.tool(toolName, description, { realmId: z.string().describe("The company realmId"), body: resourceBody.describe(`${entity} resource body — MUST include Id and SyncToken`) }, async ({ realmId, body }) => {
+        if (!ACCOUNT_ID || !PLATFORM_ROOT)
+            return refuseNoAccount(toolName);
+        try {
+            return ok(await qboUpdate({ platformRoot: PLATFORM_ROOT, accountId: ACCOUNT_ID, realmId, entity, body }));
+        }
+        catch (err) {
+            return fail(`${toolName} failed: ${err.message}`);
+        }
+    });
+}
+createTool("quickbooks-invoice-create", "Invoice", "Create an invoice in a QuickBooks company.");
+updateTool("quickbooks-invoice-update", "Invoice", "Update an invoice (sparse or full) in a QuickBooks company.");
+createTool("quickbooks-customer-create", "Customer", "Create a customer in a QuickBooks company.");
+updateTool("quickbooks-customer-update", "Customer", "Update a customer in a QuickBooks company.");
+createTool("quickbooks-bill-create", "Bill", "Create a bill (vendor payable) in a QuickBooks company.");
+createTool("quickbooks-payment-create", "Payment", "Record a customer payment in a QuickBooks company.");
+server.tool("quickbooks-entity-create", "Create any QuickBooks entity not covered by a dedicated tool (Vendor, Item, Estimate, CreditMemo, etc). entity is the QBO resource name.", {
+    realmId: z.string().describe("The company realmId"),
+    entity: z.string().describe("QBO entity name, e.g. Vendor, Item, Estimate"),
+    body: resourceBody.describe("The resource body"),
+}, async ({ realmId, entity, body }) => {
+    if (!ACCOUNT_ID || !PLATFORM_ROOT)
+        return refuseNoAccount("quickbooks-entity-create");
+    try {
+        return ok(await qboCreate({ platformRoot: PLATFORM_ROOT, accountId: ACCOUNT_ID, realmId, entity, body }));
+    }
+    catch (err) {
+        return fail(`quickbooks-entity-create failed: ${err.message}`);
+    }
+});
+server.tool("quickbooks-entity-update", "Update any QuickBooks entity not covered by a dedicated tool. body MUST include Id and SyncToken.", {
+    realmId: z.string().describe("The company realmId"),
+    entity: z.string().describe("QBO entity name, e.g. Vendor, Item, Estimate"),
+    body: resourceBody.describe("The resource body — MUST include Id and SyncToken"),
+}, async ({ realmId, entity, body }) => {
+    if (!ACCOUNT_ID || !PLATFORM_ROOT)
+        return refuseNoAccount("quickbooks-entity-update");
+    try {
+        return ok(await qboUpdate({ platformRoot: PLATFORM_ROOT, accountId: ACCOUNT_ID, realmId, entity, body }));
+    }
+    catch (err) {
+        return fail(`quickbooks-entity-update failed: ${err.message}`);
+    }
+});
+const transport = new StdioServerTransport();
+await server.connect(transport);
+//# sourceMappingURL=index.js.map

package/payload/platform/plugins/quickbooks/mcp/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,8CAA8C,CAAC;AAC7E,aAAa,CAAC,YAAY,CAAC,CAAC;AAE5B,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,SAAS,EACT,cAAc,EACd,gBAAgB,EAChB,YAAY,GACb,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACnD,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAEjG,6EAA6E;AAC7E,8EAA8E;AAC9E,qEAAqE;AACrE,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,IAAI,CAAC;AAClD,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,IAAI,CAAC;AACxD,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,+BAA+B,UAAU,IAAI,MAAM,iBAAiB,aAAa,IAAI,MAAM,IAAI,CAChG,CAAC;AAEF,MAAM,cAAc,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAEtC,SAAS,eAAe,CAAC,QAAgB;IACvC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,qBAAqB,QAAQ,qCAAqC,CAAC,CAAC;IACzF,OAAO;QACL,OAAO,EAAE;YACP;gBACE,IAAI,EAAE,MAAe;gBACrB,IAAI,EAAE,GAAG,QAAQ,iKAAiK;aACnL;SACF;QACD,OAAO,EAAE,IAAa;KACvB,CAAC;AACJ,CAAC;AAED,SAAS,EAAE,CAAC,IAAa;IACvB,OAAO;QACL,OAAO,EAAE;YACP,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE;SACjG;KACF,CAAC;AACJ,CAAC;AAED,SAAS,IAAI,CAAC,OAAe;IAC3B,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,IAAa,EAAE,CAAC;AACzF,CAAC;AAED,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;AAEvE,2EAA2E;AAC3E,qDAAqD;AACrD,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;AAE3C,8EAA8E;AAC9E,wBAAwB;AACxB,8EAA8E;AAE9E,MAAM,CAAC,IAAI,CACT,4BAA4B,EAC5B,4QAA4Q,EAC5Q;IACE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,sBAAsB,CAAC;IACrD,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,0BAA0B,CAAC;IAC7D,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,gDAAgD,CAAC;CAC1G,EACD,KAAK,EAAE,EAAE,QAAQ,EAAE,YAAY,EAAE,WAAW,EAAE,EAAE,EAAE;IAChD,IAAI,CAAC,UAAU,IAAI,CAAC,aAAa;QAAE,OAAO,eAAe,CAAC,4BAA4B,CAAC,CAAC;IACxF,IAAI,CAAC;QACH,cAAc,CAAC,aAAa,EAAE,UAAU,EAAE,EAAE,QAAQ,EAAE,YAAY,EAAE,WAAW,EAAE,CAAC,CAAC;QACnF,OAAO,EAAE,CAAC,iBAAiB,WAAW,2FAA2F,CAAC,CAAC;IACrI,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,IAAI,CAAC,sCAAuC,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;IAC9E,CAAC;AACH,CAAC,CACF,CAAC;AAEF,MAAM,CAAC,IAAI,CACT,0BAA0B,EAC1B,8UAA8U,EAC9U;IACE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,yGAAyG,CAAC;IAC3I,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,2FAA2F,CAAC;CACvI,EACD,KAAK,EAAE,EAAE,WAAW,EAAE,SAAS,EAAE,EAAE,EAAE;IACnC,IAAI,CAAC,UAAU,IAAI,CAAC,aAAa;QAAE,OAAO,eAAe,CAAC,0BAA0B,CAAC,CAAC;IACtF,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,SAAS,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC;QACnD,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC,2DAA2D,CAAC,CAAC;QACrF,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QACpD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,YAAY,CAAC,aAAa,EAAE,UAAU,EAAE;YACtC,KAAK;YACL,WAAW;YACX,SAAS;YACT,SAAS,EAAE,GAAG;YACd,SAAS,EAAE,GAAG,GAAG,cAAc;SAChC,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,iBAAiB,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC;QAChF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,uCAAuC,KAAK,cAAc,SAAS,IAAI,EAAE,IAAI,CAAC,CAAC;QACpG,OAAO,EAAE,CAAC,6EAA6E,GAAG,EAAE,CAAC,CAAC;IAChG,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,IAAI,CAAC,oCAAqC,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;IAC5E,CAAC;AACH,CAAC,CACF,CAAC;AAEF,MAAM,CAAC,IAAI,CACT,wBAAwB,EACxB,mHAAmH,EACnH,EAAE,EACF,KAAK,IAAI,EAAE;IACT,IAAI,CAAC,UAAU,IAAI,CAAC,aAAa;QAAE,OAAO,eAAe,CAAC,wBAAwB,CAAC,CAAC;IACpF,MAAM,KAAK,GAAG,SAAS,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC;IACnD,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,CAAC,qBAAqB,CAAC,CAAC;IAC7C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC3E,OAAO;QACP,WAAW,EAAE,CAAC,CAAC,WAAW;QAC1B,OAAO,EAAE,CAAC,CAAC,WAAW,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,WAAW,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI;QAClF,kBAAkB,EAAE,CAAC,CAAC,kBAAkB;KACzC,CAAC,CAAC,CAAC;IACJ,OAAO,EAAE,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,WAAW,EAAE,CAAC,CAAC;AAC7D,CAAC,CACF,CAAC;AAEF,MAAM,CAAC,IAAI,CACT,wBAAwB,EACxB,iRAAiR,EACjR;IACE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,4CAA4C,CAAC;CACtF,EACD,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE;IACpB,IAAI,CAAC,UAAU,IAAI,CAAC,aAAa;QAAE,OAAO,eAAe,CAAC,wBAAwB,CAAC,CAAC;IACpF,MAAM,KAAK,GAAG,SAAS,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC;IACnD,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,CAAC,qBAAqB,CAAC,CAAC;IAC7C,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IACpE,MAAM,OAAO,GAAG,EAAE,CAAC;IACnB,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,OAAO,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,GAAG,CAAC,MAAM,eAAe,CAAC,aAAa,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACzF,CAAC;IACD,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;AAClC,CAAC,CACF,CAAC;AAEF,MAAM,CAAC,IAAI,CACT,uBAAuB,EACvB,qHAAqH,EACrH,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,mCAAmC,CAAC,EAAE,EACrE,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE;IACpB,IAAI,CAAC,UAAU,IAAI,CAAC,aAAa;QAAE,OAAO,eAAe,CAAC,uBAAuB,CAAC,CAAC;IACnF,gBAAgB,CAAC,aAAa,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;IACrD,OAAO,EAAE,CAAC,wBAAwB,OAAO,GAAG,CAAC,CAAC;AAChD,CAAC,CACF,CAAC;AAEF,8EAA8E;AAC9E,OAAO;AACP,8EAA8E;AAE9E,MAAM,CAAC,IAAI,CACT,kBAAkB,EAClB,0MAA0M,EAC1M;IACE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,qBAAqB,CAAC;IACnD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,2DAA2D,CAAC;CACxF,EACD,KAAK,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE;IAC3B,IAAI,CAAC,UAAU,IAAI,CAAC,aAAa;QAAE,OAAO,eAAe,CAAC,kBAAkB,CAAC,CAAC;IAC9E,IAAI,CAAC;QACH,OAAO,EAAE,CAAC,MAAM,QAAQ,CAAC,EAAE,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;IACpG,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,IAAI,CAAC,4BAA6B,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;IACpE,CAAC;AACH,CAAC,CACF,CAAC;AAEF,MAAM,CAAC,IAAI,CACT,mBAAmB,EACnB,4KAA4K,EAC5K;IACE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,qBAAqB,CAAC;IACnD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,iCAAiC,CAAC;IAC9D,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,8EAA8E,CAAC;CACjI,EACD,KAAK,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE;IACpC,IAAI,CAAC,UAAU,IAAI,CAAC,aAAa;QAAE,OAAO,eAAe,CAAC,mBAAmB,CAAC,CAAC;IAC/E,IAAI,CAAC;QACH,OAAO,EAAE,CAAC,MAAM,SAAS,CAAC,EAAE,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;IAC9G,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,IAAI,CAAC,6BAA8B,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;IACrE,CAAC;AACH,CAAC,CACF,CAAC;AAEF,8EAA8E;AAC9E,kEAAkE;AAClE,gFAAgF;AAChF,8EAA8E;AAE9E,SAAS,UAAU,CAAC,QAAgB,EAAE,MAAc,EAAE,WAAmB;IACvE,MAAM,CAAC,IAAI,CACT,QAAQ,EACR,WAAW,EACX,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,qBAAqB,CAAC,EAAE,IAAI,EAAE,YAAY,CAAC,QAAQ,CAAC,GAAG,MAAM,gBAAgB,CAAC,EAAE,EAC/G,KAAK,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE;QAC1B,IAAI,CAAC,UAAU,IAAI,CAAC,aAAa;YAAE,OAAO,eAAe,CAAC,QAAQ,CAAC,CAAC;QACpE,IAAI,CAAC;YACH,OAAO,EAAE,CAAC,MAAM,SAAS,CAAC,EAAE,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QAC5G,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,IAAI,CAAC,GAAG,QAAQ,YAAa,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QAC/D,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,QAAgB,EAAE,MAAc,EAAE,WAAmB;IACvE,MAAM,CAAC,IAAI,CACT,QAAQ,EACR,WAAW,EACX,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,qBAAqB,CAAC,EAAE,IAAI,EAAE,YAAY,CAAC,QAAQ,CAAC,GAAG,MAAM,gDAAgD,CAAC,EAAE,EAC/I,KAAK,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE;QAC1B,IAAI,CAAC,UAAU,IAAI,CAAC,aAAa;YAAE,OAAO,eAAe,CAAC,QAAQ,CAAC,CAAC;QACpE,IAAI,CAAC;YACH,OAAO,EAAE,CAAC,MAAM,SAAS,CAAC,EAAE,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QAC5G,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,IAAI,CAAC,GAAG,QAAQ,YAAa,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QAC/D,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC;AAED,UAAU,CAAC,2BAA2B,EAAE,SAAS,EAAE,4CAA4C,CAAC,CAAC;AACjG,UAAU,CAAC,2BAA2B,EAAE,SAAS,EAAE,6DAA6D,CAAC,CAAC;AAClH,UAAU,CAAC,4BAA4B,EAAE,UAAU,EAAE,4CAA4C,CAAC,CAAC;AACnG,UAAU,CAAC,4BAA4B,EAAE,UAAU,EAAE,4CAA4C,CAAC,CAAC;AACnG,UAAU,CAAC,wBAAwB,EAAE,MAAM,EAAE,yDAAyD,CAAC,CAAC;AACxG,UAAU,CAAC,2BAA2B,EAAE,SAAS,EAAE,oDAAoD,CAAC,CAAC;AAEzG,MAAM,CAAC,IAAI,CACT,0BAA0B,EAC1B,0IAA0I,EAC1I;IACE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,qBAAqB,CAAC;IACnD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,8CAA8C,CAAC;IAC3E,IAAI,EAAE,YAAY,CAAC,QAAQ,CAAC,mBAAmB,CAAC;CACjD,EACD,KAAK,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE;IAClC,IAAI,CAAC,UAAU,IAAI,CAAC,aAAa;QAAE,OAAO,eAAe,CAAC,0BAA0B,CAAC,CAAC;IACtF,IAAI,CAAC;QACH,OAAO,EAAE,CAAC,MAAM,SAAS,CAAC,EAAE,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAC5G,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,IAAI,CAAC,oCAAqC,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;IAC5E,CAAC;AACH,CAAC,CACF,CAAC;AAEF,MAAM,CAAC,IAAI,CACT,0BAA0B,EAC1B,mGAAmG,EACnG;IACE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,qBAAqB,CAAC;IACnD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,8CAA8C,CAAC;IAC3E,IAAI,EAAE,YAAY,CAAC,QAAQ,CAAC,mDAAmD,CAAC;CACjF,EACD,KAAK,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE;IAClC,IAAI,CAAC,UAAU,IAAI,CAAC,aAAa;QAAE,OAAO,eAAe,CAAC,0BAA0B,CAAC,CAAC;IACtF,IAAI,CAAC;QACH,OAAO,EAAE,CAAC,MAAM,SAAS,CAAC,EAAE,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAC5G,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,IAAI,CAAC,oCAAqC,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;IAC5E,CAAC;AACH,CAAC,CACF,CAAC;AAEF,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;AAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC"}

package/payload/platform/plugins/quickbooks/mcp/dist/lib/oauth.d.ts

@@ -0,0 +1,37 @@
+/** OAuth consent screen. The operator's browser lands here; Intuit redirects
+ *  back to redirect_uri with code+state+realmId. */
+export declare const INTUIT_AUTHORIZE_URL = "https://appcenter.intuit.com/connect/oauth2";
+/** Token endpoint — same host for sandbox and production (the QBO API base
+ *  differs by environment, the token endpoint does not). */
+export declare const INTUIT_TOKEN_URL = "https://oauth.platform.intuit.com/oauth2/v1/tokens/bearer";
+/** Accounting scope. openid/profile/email are intentionally omitted — the
+ *  connector needs company data, not an Intuit identity. */
+export declare const QBO_SCOPE = "com.intuit.quickbooks.accounting";
+export interface TokenResponse {
+    accessToken: string;
+    refreshToken: string;
+    /** seconds until the access token expires (Intuit returns ~3600). */
+    expiresIn: number;
+    /** seconds until the refresh token expires (Intuit returns ~8640000 ≈ 100d). */
+    refreshTokenExpiresIn: number;
+}
+export declare function buildAuthorizeUrl(opts: {
+    clientId: string;
+    redirectUri: string;
+    state: string;
+    scope?: string;
+}): string;
+export declare function exchangeCode(opts: {
+    clientId: string;
+    clientSecret: string;
+    code: string;
+    redirectUri: string;
+    tokenUrl?: string;
+}): Promise<TokenResponse>;
+export declare function refreshAccess(opts: {
+    clientId: string;
+    clientSecret: string;
+    refreshToken: string;
+    tokenUrl?: string;
+}): Promise<TokenResponse>;
+//# sourceMappingURL=oauth.d.ts.map

package/payload/platform/plugins/quickbooks/mcp/dist/lib/oauth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth.d.ts","sourceRoot":"","sources":["../../src/lib/oauth.ts"],"names":[],"mappings":"AAOA;oDACoD;AACpD,eAAO,MAAM,oBAAoB,gDAAgD,CAAC;AAElF;4DAC4D;AAC5D,eAAO,MAAM,gBAAgB,8DACgC,CAAC;AAE9D;4DAC4D;AAC5D,eAAO,MAAM,SAAS,qCAAqC,CAAC;AAE5D,MAAM,WAAW,aAAa;IAC5B,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,qEAAqE;IACrE,SAAS,EAAE,MAAM,CAAC;IAClB,gFAAgF;IAChF,qBAAqB,EAAE,MAAM,CAAC;CAC/B;AAED,wBAAgB,iBAAiB,CAAC,IAAI,EAAE;IACtC,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,GAAG,MAAM,CAST;AAiDD,wBAAgB,YAAY,CAAC,IAAI,EAAE;IACjC,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,GAAG,OAAO,CAAC,aAAa,CAAC,CAOzB;AAED,wBAAgB,aAAa,CAAC,IAAI,EAAE;IAClC,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,GAAG,OAAO,CAAC,aAAa,CAAC,CAMzB"}

package/payload/platform/plugins/quickbooks/mcp/dist/lib/oauth.js

@@ -0,0 +1,75 @@
+// Intuit OAuth 2.0 — authorization-code grant + refresh. Pure HTTP, no state.
+//
+// Two irreducibly human steps live OUTSIDE this module (relayed, never
+// automated): the operator registers their own Intuit app, and a human clicks
+// the authorize URL to consent per company. Everything here — the URL string,
+// the code->token exchange, the refresh — is deterministic.
+/** OAuth consent screen. The operator's browser lands here; Intuit redirects
+ *  back to redirect_uri with code+state+realmId. */
+export const INTUIT_AUTHORIZE_URL = "https://appcenter.intuit.com/connect/oauth2";
+/** Token endpoint — same host for sandbox and production (the QBO API base
+ *  differs by environment, the token endpoint does not). */
+export const INTUIT_TOKEN_URL = "https://oauth.platform.intuit.com/oauth2/v1/tokens/bearer";
+/** Accounting scope. openid/profile/email are intentionally omitted — the
+ *  connector needs company data, not an Intuit identity. */
+export const QBO_SCOPE = "com.intuit.quickbooks.accounting";
+export function buildAuthorizeUrl(opts) {
+    const params = new URLSearchParams({
+        client_id: opts.clientId,
+        redirect_uri: opts.redirectUri,
+        response_type: "code",
+        scope: opts.scope ?? QBO_SCOPE,
+        state: opts.state,
+    });
+    return `${INTUIT_AUTHORIZE_URL}?${params.toString()}`;
+}
+function basicAuth(clientId, clientSecret) {
+    return "Basic " + Buffer.from(`${clientId}:${clientSecret}`).toString("base64");
+}
+async function postToken(tokenUrl, clientId, clientSecret, form) {
+    const res = await fetch(tokenUrl, {
+        method: "POST",
+        headers: {
+            Authorization: basicAuth(clientId, clientSecret),
+            "Content-Type": "application/x-www-form-urlencoded",
+            Accept: "application/json",
+        },
+        body: form.toString(),
+    });
+    const text = await res.text();
+    if (!res.ok) {
+        throw new Error(`token endpoint ${res.status}: ${text}`);
+    }
+    let body;
+    try {
+        body = JSON.parse(text);
+    }
+    catch {
+        throw new Error(`token endpoint returned non-JSON: ${text}`);
+    }
+    if (!body.access_token || !body.refresh_token) {
+        throw new Error(`token endpoint response missing tokens: ${text}`);
+    }
+    return {
+        accessToken: body.access_token,
+        refreshToken: body.refresh_token,
+        expiresIn: body.expires_in ?? 3600,
+        refreshTokenExpiresIn: body.x_refresh_token_expires_in ?? 8_640_000,
+    };
+}
+export function exchangeCode(opts) {
+    const form = new URLSearchParams({
+        grant_type: "authorization_code",
+        code: opts.code,
+        redirect_uri: opts.redirectUri,
+    });
+    return postToken(opts.tokenUrl ?? INTUIT_TOKEN_URL, opts.clientId, opts.clientSecret, form);
+}
+export function refreshAccess(opts) {
+    const form = new URLSearchParams({
+        grant_type: "refresh_token",
+        refresh_token: opts.refreshToken,
+    });
+    return postToken(opts.tokenUrl ?? INTUIT_TOKEN_URL, opts.clientId, opts.clientSecret, form);
+}
+//# sourceMappingURL=oauth.js.map

package/payload/platform/plugins/quickbooks/mcp/dist/lib/oauth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth.js","sourceRoot":"","sources":["../../src/lib/oauth.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,EAAE;AACF,uEAAuE;AACvE,8EAA8E;AAC9E,8EAA8E;AAC9E,4DAA4D;AAE5D;oDACoD;AACpD,MAAM,CAAC,MAAM,oBAAoB,GAAG,6CAA6C,CAAC;AAElF;4DAC4D;AAC5D,MAAM,CAAC,MAAM,gBAAgB,GAC3B,2DAA2D,CAAC;AAE9D;4DAC4D;AAC5D,MAAM,CAAC,MAAM,SAAS,GAAG,kCAAkC,CAAC;AAW5D,MAAM,UAAU,iBAAiB,CAAC,IAKjC;IACC,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;QACjC,SAAS,EAAE,IAAI,CAAC,QAAQ;QACxB,YAAY,EAAE,IAAI,CAAC,WAAW;QAC9B,aAAa,EAAE,MAAM;QACrB,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,SAAS;QAC9B,KAAK,EAAE,IAAI,CAAC,KAAK;KAClB,CAAC,CAAC;IACH,OAAO,GAAG,oBAAoB,IAAI,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC;AACxD,CAAC;AASD,SAAS,SAAS,CAAC,QAAgB,EAAE,YAAoB;IACvD,OAAO,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,QAAQ,IAAI,YAAY,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AAClF,CAAC;AAED,KAAK,UAAU,SAAS,CACtB,QAAgB,EAChB,QAAgB,EAChB,YAAoB,EACpB,IAAqB;IAErB,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,QAAQ,EAAE;QAChC,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,aAAa,EAAE,SAAS,CAAC,QAAQ,EAAE,YAAY,CAAC;YAChD,cAAc,EAAE,mCAAmC;YACnD,MAAM,EAAE,kBAAkB;SAC3B;QACD,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE;KACtB,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;IAC9B,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,kBAAkB,GAAG,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC,CAAC;IAC3D,CAAC;IACD,IAAI,IAAkB,CAAC;IACvB,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAiB,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,qCAAqC,IAAI,EAAE,CAAC,CAAC;IAC/D,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,YAAY,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,2CAA2C,IAAI,EAAE,CAAC,CAAC;IACrE,CAAC;IACD,OAAO;QACL,WAAW,EAAE,IAAI,CAAC,YAAY;QAC9B,YAAY,EAAE,IAAI,CAAC,aAAa;QAChC,SAAS,EAAE,IAAI,CAAC,UAAU,IAAI,IAAI;QAClC,qBAAqB,EAAE,IAAI,CAAC,0BAA0B,IAAI,SAAS;KACpE,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,IAM5B;IACC,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC;QAC/B,UAAU,EAAE,oBAAoB;QAChC,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,YAAY,EAAE,IAAI,CAAC,WAAW;KAC/B,CAAC,CAAC;IACH,OAAO,SAAS,CAAC,IAAI,CAAC,QAAQ,IAAI,gBAAgB,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;AAC9F,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,IAK7B;IACC,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC;QAC/B,UAAU,EAAE,eAAe;QAC3B,aAAa,EAAE,IAAI,CAAC,YAAY;KACjC,CAAC,CAAC;IACH,OAAO,SAAS,CAAC,IAAI,CAAC,QAAQ,IAAI,gBAAgB,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;AAC9F,CAAC"}

package/payload/platform/plugins/quickbooks/mcp/dist/lib/qbo-client.d.ts

@@ -0,0 +1,39 @@
+export interface QboClientConfig {
+    /** Override Intuit's token endpoint (tests). */
+    tokenUrl?: string;
+    /** Override the QBO API base (tests); defaults from store.environment. */
+    apiBase?: string;
+}
+export declare function qboQuery(args: {
+    platformRoot: string;
+    accountId: string;
+    realmId: string;
+    query: string;
+}, cfg?: QboClientConfig): Promise<unknown>;
+export declare function qboCreate(args: {
+    platformRoot: string;
+    accountId: string;
+    realmId: string;
+    entity: string;
+    body: unknown;
+}, cfg?: QboClientConfig): Promise<unknown>;
+export declare function qboUpdate(args: {
+    platformRoot: string;
+    accountId: string;
+    realmId: string;
+    entity: string;
+    body: unknown;
+}, cfg?: QboClientConfig): Promise<unknown>;
+export declare function auditConnection(platformRoot: string, accountId: string, realmId: string, cfg?: QboClientConfig): Promise<{
+    alive: boolean;
+    ageDays: number;
+    outcome: string;
+}>;
+export declare function qboReport(args: {
+    platformRoot: string;
+    accountId: string;
+    realmId: string;
+    report: string;
+    params?: Record<string, string>;
+}, cfg?: QboClientConfig): Promise<unknown>;
+//# sourceMappingURL=qbo-client.d.ts.map

package/payload/platform/plugins/quickbooks/mcp/dist/lib/qbo-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"qbo-client.d.ts","sourceRoot":"","sources":["../../src/lib/qbo-client.ts"],"names":[],"mappings":"AAgBA,MAAM,WAAW,eAAe;IAC9B,gDAAgD;IAChD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,0EAA0E;IAC1E,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAgID,wBAAgB,QAAQ,CACtB,IAAI,EAAE;IAAE,YAAY,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,EACjF,GAAG,GAAE,eAAoB,GACxB,OAAO,CAAC,OAAO,CAAC,CAalB;AAED,wBAAgB,SAAS,CACvB,IAAI,EAAE;IACJ,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,OAAO,CAAC;CACf,EACD,GAAG,GAAE,eAAoB,GACxB,OAAO,CAAC,OAAO,CAAC,CAalB;AAID,wBAAgB,SAAS,CACvB,IAAI,EAAE;IACJ,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,OAAO,CAAC;CACf,EACD,GAAG,GAAE,eAAoB,GACxB,OAAO,CAAC,OAAO,CAAC,CAElB;AAOD,wBAAsB,eAAe,CACnC,YAAY,EAAE,MAAM,EACpB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,EACf,GAAG,GAAE,eAAoB,GACxB,OAAO,CAAC;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC,CAiC/D;AAED,wBAAgB,SAAS,CACvB,IAAI,EAAE;IACJ,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACjC,EACD,GAAG,GAAE,eAAoB,GACxB,OAAO,CAAC,OAAO,CAAC,CAalB"}

package/payload/platform/plugins/quickbooks/mcp/dist/lib/qbo-client.js

@@ -0,0 +1,178 @@
+// QuickBooks Online REST client.
+//
+// Owns the deterministic half of the OAuth lifecycle: it keeps a short-lived
+// access token fresh by refreshing from the stored refresh token, and persists
+// the rotated refresh token Intuit returns on every refresh. No human is in
+// this path. Emits the op=refresh and op=call observability lines.
+import { readStore, upsertConnection } from "./secrets.js";
+import { refreshAccess } from "./oauth.js";
+const SANDBOX_API_BASE = "https://sandbox-quickbooks.api.intuit.com";
+const PRODUCTION_API_BASE = "https://quickbooks.api.intuit.com";
+/** Refresh when the cached access token is within this window of expiry. */
+const ACCESS_REFRESH_THRESHOLD_MS = 60_000;
+// Per (account, realm) access-token cache. The MCP server is one long-lived
+// process per account, so caching here avoids a refresh on every call.
+const accessCache = new Map();
+function cacheKey(accountId, realmId) {
+    return `${accountId}:${realmId}`;
+}
+function classifyRefreshError(message) {
+    if (message.includes("invalid_grant"))
+        return "invalid_grant";
+    if (message.includes("token endpoint 401"))
+        return "401";
+    return "error";
+}
+async function ensureAccessToken(platformRoot, accountId, realmId, cfg) {
+    const store = readStore(platformRoot, accountId);
+    if (!store)
+        throw new Error("no QuickBooks credentials configured for this account");
+    const conn = store.connections[realmId];
+    if (!conn)
+        throw new Error(`no QuickBooks connection for realmId=${realmId}`);
+    const apiBase = cfg.apiBase ?? (store.environment === "production" ? PRODUCTION_API_BASE : SANDBOX_API_BASE);
+    const key = cacheKey(accountId, realmId);
+    const cached = accessCache.get(key);
+    if (cached && cached.expiresAt - ACCESS_REFRESH_THRESHOLD_MS > Date.now()) {
+        return { accessToken: cached.accessToken, apiBase };
+    }
+    const started = Date.now();
+    try {
+        const tok = await refreshAccess({
+            clientId: store.clientId,
+            clientSecret: store.clientSecret,
+            refreshToken: conn.refreshToken,
+            tokenUrl: cfg.tokenUrl,
+        });
+        const now = Date.now();
+        // Intuit rotates the refresh token on every refresh — persist the new one
+        // or the next refresh fails with invalid_grant.
+        upsertConnection(platformRoot, accountId, realmId, {
+            refreshToken: tok.refreshToken,
+            refreshTokenExpiry: now + tok.refreshTokenExpiresIn * 1000,
+            lastRefresh: now,
+        });
+        accessCache.set(key, { accessToken: tok.accessToken, expiresAt: now + tok.expiresIn * 1000 });
+        process.stderr.write(`[quickbooks] op=refresh realmId=${realmId} outcome=ok ms=${now - started}\n`);
+        return { accessToken: tok.accessToken, apiBase };
+    }
+    catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        const outcome = classifyRefreshError(message);
+        process.stderr.write(`[quickbooks] op=refresh realmId=${realmId} outcome=${outcome} ms=${Date.now() - started}\n`);
+        throw err;
+    }
+}
+async function qboRequest(args, cfg = {}) {
+    const { accessToken, apiBase } = await ensureAccessToken(args.platformRoot, args.accountId, args.realmId, cfg);
+    // Encode with encodeURIComponent (→ %20 for spaces) rather than
+    // URLSearchParams (→ + for spaces): the QBO query endpoint expects %20 and a
+    // + would be read as a literal plus inside a SQL-ish WHERE clause.
+    const query = { minorversion: "73", ...(args.search ?? {}) };
+    const search = Object.entries(query)
+        .map(([k, v]) => `${encodeURIComponent(k)}=${encodeURIComponent(v)}`)
+        .join("&");
+    const url = `${apiBase}/v3/company/${args.realmId}/${args.urlPath}?${search}`;
+    const headers = {
+        Authorization: `Bearer ${accessToken}`,
+        Accept: "application/json",
+    };
+    if (args.body !== undefined)
+        headers["Content-Type"] = "application/json";
+    const started = Date.now();
+    const res = await fetch(url, {
+        method: args.method,
+        headers,
+        body: args.body !== undefined ? JSON.stringify(args.body) : undefined,
+    });
+    const text = await res.text();
+    process.stderr.write(`[quickbooks] op=call realmId=${args.realmId} entity=${args.entity} method=${args.method} status=${res.status} ms=${Date.now() - started}\n`);
+    if (!res.ok) {
+        throw new Error(`QBO ${args.method} ${args.urlPath} ${res.status}: ${text}`);
+    }
+    try {
+        return JSON.parse(text);
+    }
+    catch {
+        throw new Error(`QBO ${args.urlPath} returned non-JSON: ${text}`);
+    }
+}
+export function qboQuery(args, cfg = {}) {
+    return qboRequest({
+        platformRoot: args.platformRoot,
+        accountId: args.accountId,
+        realmId: args.realmId,
+        method: "GET",
+        urlPath: "query",
+        search: { query: args.query },
+        entity: "query",
+    }, cfg);
+}
+export function qboCreate(args, cfg = {}) {
+    return qboRequest({
+        platformRoot: args.platformRoot,
+        accountId: args.accountId,
+        realmId: args.realmId,
+        method: "POST",
+        urlPath: args.entity.toLowerCase(),
+        entity: args.entity,
+        body: args.body,
+    }, cfg);
+}
+// Update is the same endpoint as create — a full or sparse POST carrying Id +
+// SyncToken. The caller assembles the body; the connector does not guess it.
+export function qboUpdate(args, cfg = {}) {
+    return qboCreate(args, cfg);
+}
+// Standing no-event-failure check. A refresh token dies silently after ~100
+// days of inactivity or operator revocation — nothing is emitted until the next
+// call returns invalid_grant. auditConnection forces a refresh probe so a dead
+// connection is surfaced BEFORE a customer-facing call hits it. A successful
+// probe also keeps the token alive (refresh resets the 100-day clock).
+export async function auditConnection(platformRoot, accountId, realmId, cfg = {}) {
+    const store = readStore(platformRoot, accountId);
+    const conn = store?.connections[realmId];
+    if (!store || !conn) {
+        process.stderr.write(`[quickbooks] op=token-audit realmId=${realmId} alive=false ageDays=-1\n`);
+        return { alive: false, ageDays: -1, outcome: "no-connection" };
+    }
+    const ageDays = conn.lastRefresh > 0 ? Math.floor((Date.now() - conn.lastRefresh) / 86_400_000) : -1;
+    try {
+        const tok = await refreshAccess({
+            clientId: store.clientId,
+            clientSecret: store.clientSecret,
+            refreshToken: conn.refreshToken,
+            tokenUrl: cfg.tokenUrl,
+        });
+        const now = Date.now();
+        upsertConnection(platformRoot, accountId, realmId, {
+            refreshToken: tok.refreshToken,
+            refreshTokenExpiry: now + tok.refreshTokenExpiresIn * 1000,
+            lastRefresh: now,
+        });
+        accessCache.set(cacheKey(accountId, realmId), {
+            accessToken: tok.accessToken,
+            expiresAt: now + tok.expiresIn * 1000,
+        });
+        process.stderr.write(`[quickbooks] op=token-audit realmId=${realmId} alive=true ageDays=${ageDays}\n`);
+        return { alive: true, ageDays, outcome: "ok" };
+    }
+    catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        const outcome = classifyRefreshError(message);
+        process.stderr.write(`[quickbooks] op=token-audit realmId=${realmId} alive=false ageDays=${ageDays}\n`);
+        return { alive: false, ageDays, outcome };
+    }
+}
+export function qboReport(args, cfg = {}) {
+    return qboRequest({
+        platformRoot: args.platformRoot,
+        accountId: args.accountId,
+        realmId: args.realmId,
+        method: "GET",
+        urlPath: `reports/${args.report}`,
+        search: args.params ?? {},
+        entity: `report:${args.report}`,
+    }, cfg);
+}
+//# sourceMappingURL=qbo-client.js.map

package/payload/platform/plugins/quickbooks/mcp/dist/lib/qbo-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"qbo-client.js","sourceRoot":"","sources":["../../src/lib/qbo-client.ts"],"names":[],"mappings":"AAAA,iCAAiC;AACjC,EAAE;AACF,6EAA6E;AAC7E,+EAA+E;AAC/E,4EAA4E;AAC5E,mEAAmE;AAEnE,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAC3D,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAE3C,MAAM,gBAAgB,GAAG,2CAA2C,CAAC;AACrE,MAAM,mBAAmB,GAAG,mCAAmC,CAAC;AAEhE,4EAA4E;AAC5E,MAAM,2BAA2B,GAAG,MAAM,CAAC;AAc3C,4EAA4E;AAC5E,uEAAuE;AACvE,MAAM,WAAW,GAAG,IAAI,GAAG,EAAwB,CAAC;AAEpD,SAAS,QAAQ,CAAC,SAAiB,EAAE,OAAe;IAClD,OAAO,GAAG,SAAS,IAAI,OAAO,EAAE,CAAC;AACnC,CAAC;AAED,SAAS,oBAAoB,CAAC,OAAe;IAC3C,IAAI,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC;QAAE,OAAO,eAAe,CAAC;IAC9D,IAAI,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAC;QAAE,OAAO,KAAK,CAAC;IACzD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,KAAK,UAAU,iBAAiB,CAC9B,YAAoB,EACpB,SAAiB,EACjB,OAAe,EACf,GAAoB;IAEpB,MAAM,KAAK,GAAG,SAAS,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;IACjD,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IACrF,MAAM,IAAI,GAAG,KAAK,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;IACxC,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,OAAO,EAAE,CAAC,CAAC;IAC9E,MAAM,OAAO,GACX,GAAG,CAAC,OAAO,IAAI,CAAC,KAAK,CAAC,WAAW,KAAK,YAAY,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC;IAE/F,MAAM,GAAG,GAAG,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IACzC,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACpC,IAAI,MAAM,IAAI,MAAM,CAAC,SAAS,GAAG,2BAA2B,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;QAC1E,OAAO,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,OAAO,EAAE,CAAC;IACtD,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC3B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,aAAa,CAAC;YAC9B,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,QAAQ,EAAE,GAAG,CAAC,QAAQ;SACvB,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,0EAA0E;QAC1E,gDAAgD;QAChD,gBAAgB,CAAC,YAAY,EAAE,SAAS,EAAE,OAAO,EAAE;YACjD,YAAY,EAAE,GAAG,CAAC,YAAY;YAC9B,kBAAkB,EAAE,GAAG,GAAG,GAAG,CAAC,qBAAqB,GAAG,IAAI;YAC1D,WAAW,EAAE,GAAG;SACjB,CAAC,CAAC;QACH,WAAW,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,SAAS,EAAE,GAAG,GAAG,GAAG,CAAC,SAAS,GAAG,IAAI,EAAE,CAAC,CAAC;QAC9F,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,mCAAmC,OAAO,kBAAkB,GAAG,GAAG,OAAO,IAAI,CAC9E,CAAC;QACF,OAAO,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,OAAO,EAAE,CAAC;IACnD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,MAAM,OAAO,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC;QAC9C,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,mCAAmC,OAAO,YAAY,OAAO,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,IAAI,CAC7F,CAAC;QACF,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,UAAU,CACvB,IAYC,EACD,MAAuB,EAAE;IAEzB,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,GAAG,MAAM,iBAAiB,CACtD,IAAI,CAAC,YAAY,EACjB,IAAI,CAAC,SAAS,EACd,IAAI,CAAC,OAAO,EACZ,GAAG,CACJ,CAAC;IACF,gEAAgE;IAChE,6EAA6E;IAC7E,mEAAmE;IACnE,MAAM,KAAK,GAA2B,EAAE,YAAY,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,CAAC;IACrF,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;SACjC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,kBAAkB,CAAC,CAAC,CAAC,IAAI,kBAAkB,CAAC,CAAC,CAAC,EAAE,CAAC;SACpE,IAAI,CAAC,GAAG,CAAC,CAAC;IACb,MAAM,GAAG,GAAG,GAAG,OAAO,eAAe,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,IAAI,MAAM,EAAE,CAAC;IAE9E,MAAM,OAAO,GAA2B;QACtC,aAAa,EAAE,UAAU,WAAW,EAAE;QACtC,MAAM,EAAE,kBAAkB;KAC3B,CAAC;IACF,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;IAE1E,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC3B,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;QAC3B,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,OAAO;QACP,IAAI,EAAE,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;KACtE,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;IAC9B,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,gCAAgC,IAAI,CAAC,OAAO,WAAW,IAAI,CAAC,MAAM,WAAW,IAAI,CAAC,MAAM,WAAW,GAAG,CAAC,MAAM,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,IAAI,CAC7I,CAAC;IACF,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,OAAO,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,OAAO,IAAI,GAAG,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC,CAAC;IAC/E,CAAC;IACD,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,OAAO,IAAI,CAAC,OAAO,uBAAuB,IAAI,EAAE,CAAC,CAAC;IACpE,CAAC;AACH,CAAC;AAED,MAAM,UAAU,QAAQ,CACtB,IAAiF,EACjF,MAAuB,EAAE;IAEzB,OAAO,UAAU,CACf;QACE,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,MAAM,EAAE,KAAK;QACb,OAAO,EAAE,OAAO;QAChB,MAAM,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE;QAC7B,MAAM,EAAE,OAAO;KAChB,EACD,GAAG,CACJ,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,SAAS,CACvB,IAMC,EACD,MAAuB,EAAE;IAEzB,OAAO,UAAU,CACf;QACE,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE;QAClC,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,IAAI,EAAE,IAAI,CAAC,IAAI;KAChB,EACD,GAAG,CACJ,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,6EAA6E;AAC7E,MAAM,UAAU,SAAS,CACvB,IAMC,EACD,MAAuB,EAAE;IAEzB,OAAO,SAAS,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;AAC9B,CAAC;AAED,4EAA4E;AAC5E,gFAAgF;AAChF,+EAA+E;AAC/E,6EAA6E;AAC7E,uEAAuE;AACvE,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,YAAoB,EACpB,SAAiB,EACjB,OAAe,EACf,MAAuB,EAAE;IAEzB,MAAM,KAAK,GAAG,SAAS,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;IACjD,MAAM,IAAI,GAAG,KAAK,EAAE,WAAW,CAAC,OAAO,CAAC,CAAC;IACzC,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC;QACpB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,uCAAuC,OAAO,2BAA2B,CAAC,CAAC;QAChG,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC;IACjE,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACrG,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,aAAa,CAAC;YAC9B,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,QAAQ,EAAE,GAAG,CAAC,QAAQ;SACvB,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,gBAAgB,CAAC,YAAY,EAAE,SAAS,EAAE,OAAO,EAAE;YACjD,YAAY,EAAE,GAAG,CAAC,YAAY;YAC9B,kBAAkB,EAAE,GAAG,GAAG,GAAG,CAAC,qBAAqB,GAAG,IAAI;YAC1D,WAAW,EAAE,GAAG;SACjB,CAAC,CAAC;QACH,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE;YAC5C,WAAW,EAAE,GAAG,CAAC,WAAW;YAC5B,SAAS,EAAE,GAAG,GAAG,GAAG,CAAC,SAAS,GAAG,IAAI;SACtC,CAAC,CAAC;QACH,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,uCAAuC,OAAO,uBAAuB,OAAO,IAAI,CAAC,CAAC;QACvG,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACjD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,MAAM,OAAO,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC;QAC9C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,uCAAuC,OAAO,wBAAwB,OAAO,IAAI,CAAC,CAAC;QACxG,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;IAC5C,CAAC;AACH,CAAC;AAED,MAAM,UAAU,SAAS,CACvB,IAMC,EACD,MAAuB,EAAE;IAEzB,OAAO,UAAU,CACf;QACE,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,MAAM,EAAE,KAAK;QACb,OAAO,EAAE,WAAW,IAAI,CAAC,MAAM,EAAE;QACjC,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,EAAE;QACzB,MAAM,EAAE,UAAU,IAAI,CAAC,MAAM,EAAE;KAChC,EACD,GAAG,CACJ,CAAC;AACJ,CAAC"}

package/payload/platform/plugins/quickbooks/mcp/dist/lib/secrets.d.ts

@@ -0,0 +1,36 @@
+export interface QbConnection {
+    refreshToken: string;
+    /** epoch ms when the refresh token itself expires (~100 days of inactivity). */
+    refreshTokenExpiry: number;
+    /** epoch ms of the last successful token exchange or refresh. */
+    lastRefresh: number;
+}
+export interface QbStore {
+    clientId: string;
+    clientSecret: string;
+    environment: "sandbox" | "production";
+    /** keyed by Intuit realmId (one company per realm). */
+    connections: Record<string, QbConnection>;
+}
+export interface QbPending {
+    state: string;
+    /** The exact redirect_uri used in the authorize request — the token exchange
+     *  must echo it verbatim or Intuit rejects the code. */
+    redirectUri: string;
+    realmHint?: string;
+    createdAt: number;
+    expiresAt: number;
+}
+export declare function accountSecretsDir(platformRoot: string, accountId: string): string;
+export declare function readStore(platformRoot: string, accountId: string): QbStore | null;
+export declare function setCredentials(platformRoot: string, accountId: string, creds: {
+    clientId: string;
+    clientSecret: string;
+    environment: "sandbox" | "production";
+}): void;
+export declare function upsertConnection(platformRoot: string, accountId: string, realmId: string, conn: QbConnection): void;
+export declare function removeConnection(platformRoot: string, accountId: string, realmId: string): void;
+export declare function writePending(platformRoot: string, accountId: string, pending: QbPending): void;
+export declare function readPending(platformRoot: string, accountId: string, state: string): QbPending | null;
+export declare function deletePending(platformRoot: string, accountId: string, state: string): void;
+//# sourceMappingURL=secrets.d.ts.map

package/payload/platform/plugins/quickbooks/mcp/dist/lib/secrets.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets.d.ts","sourceRoot":"","sources":["../../src/lib/secrets.ts"],"names":[],"mappings":"AAmBA,MAAM,WAAW,YAAY;IAC3B,YAAY,EAAE,MAAM,CAAC;IACrB,gFAAgF;IAChF,kBAAkB,EAAE,MAAM,CAAC;IAC3B,iEAAiE;IACjE,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,OAAO;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,SAAS,GAAG,YAAY,CAAC;IACtC,uDAAuD;IACvD,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;CAC3C;AAED,MAAM,WAAW,SAAS;IACxB,KAAK,EAAE,MAAM,CAAC;IACd;4DACwD;IACxD,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AASD,wBAAgB,iBAAiB,CAAC,YAAY,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAEjF;AAiBD,wBAAgB,SAAS,CAAC,YAAY,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,GAAG,IAAI,CAQjF;AAUD,wBAAgB,cAAc,CAC5B,YAAY,EAAE,MAAM,EACpB,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,SAAS,GAAG,YAAY,CAAA;CAAE,GACvF,IAAI,CAQN;AAED,wBAAgB,gBAAgB,CAC9B,YAAY,EAAE,MAAM,EACpB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,YAAY,GACjB,IAAI,CAON;AAED,wBAAgB,gBAAgB,CAC9B,YAAY,EAAE,MAAM,EACpB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,GACd,IAAI,CAKN;AAED,wBAAgB,YAAY,CAC1B,YAAY,EAAE,MAAM,EACpB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,SAAS,GACjB,IAAI,CAIN;AAED,wBAAgB,WAAW,CACzB,YAAY,EAAE,MAAM,EACpB,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,GACZ,SAAS,GAAG,IAAI,CAalB;AAED,wBAAgB,aAAa,CAC3B,YAAY,EAAE,MAAM,EACpB,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,GACZ,IAAI,CAQN"}