ledgit-cli 0.2.1 → 0.2.2

package/dist/index.js

@@ -24666,21 +24666,29 @@ When you run \`create-entry\` on main branch, a new git branch is automatically
 
 ## Bookkeeping New Entries
 
-**Important:** Always ask the user for clarification if anything is unclear about the transaction before creating an entry.
-
 To create a journal entry from an inbox document:
 
-1. **Read the document** - Use \`npx ledgit-cli parse-pdf\` for PDFs to understand the content
-2. **Update documents.yaml** - After parsing, populate missing metadata in \`documents.yaml\`:
+1. **Read the document** - You can read PDFs directly, or use \`npx ledgit-cli parse-pdf\` to extract text
+2. **Update documents.yaml** - Populate missing metadata in \`documents.yaml\`:
    - \`documentDate\`: Invoice/receipt date (YYYY-MM-DD)
    - \`description\`: Vendor or document name
    - \`totalAmount\`: With \`amount\` (string) and \`currency\` (e.g., EUR, SEK)
 3. **Look for similar entries** - Search \`journal-entries/\` for entries from the same vendor or similar transaction types to learn which accounts and tax codes were used previously
 4. **Check accounts** - Review \`accounts.yaml\` for appropriate expense/revenue accounts
-5. **Determine tax code** - Based on vendor location and transaction type (see Tax Codes below). Explain your reasoning and describe the tax code meaning to the user
-6. **Ask for confirmation** - Before creating, confirm with the user: vendor, amount, accounts (with names), and tax code (with description)
-7. **Create entry** - Run \`npx ledgit-cli create-entry\` with the appropriate parameters
-8. **Review and sync** - The entry is created in \`journal-entries/\`. Review with \`git diff\`, commit, and run \`npx ledgit-cli sync-journal\` to post to {{PROVIDER}}
+5. **Determine tax code** - Based on vendor location and transaction type (see Tax Codes below)
+6. **Create entry** - Run \`npx ledgit-cli create-entry\` with the appropriate parameters
+7. **Review and sync** - The entry is created in \`journal-entries/\`. Review with \`git diff\`, commit, and run \`npx ledgit-cli sync-journal\` to post to {{PROVIDER}}
+
+### GitHub Actions / CI Mode
+
+When running in GitHub Actions (automated bookkeeping):
+- **Always proceed** with creating entries using your best judgment
+- **Always end** by creating or updating a PR
+- If anything is unclear, include your questions in the PR description
+- The user will respond via PR comments, which triggers another workflow run
+- Group related entries (same vendor, same week) in one PR when sensible
+
+**Never stop and wait for confirmation in CI mode** - the user can't respond until you create a PR.
 
 To discard unwanted inbox items:
 \`\`\`bash
@@ -24788,12 +24796,12 @@ function renderAgentsTemplate(options) {
 }
 // ../bookkeeping/dist/utils/paths.js
 import * as path2 from "node:path";
-var KVITTON_DIR = ".kvitton";
+var LEDGIT_DIR = ".ledgit";
 function getTokensDir(cwd) {
-  return path2.join(cwd, KVITTON_DIR, "tokens");
+  return path2.join(cwd, LEDGIT_DIR, "tokens");
 }
 function getCacheDir(cwd) {
-  return path2.join(cwd, KVITTON_DIR, "cache");
+  return path2.join(cwd, LEDGIT_DIR, "cache");
 }
 // ../bookkeeping/dist/services/journal.service.js
 class JournalService {
@@ -26931,7 +26939,7 @@ async function loginFortnox(options) {
     onStatus("Exchanging authorization code for token...");
     const tokenResponse = await exchangeCodeForToken(config2, callbackResult.code);
     const storedToken = saveFortnoxToken(cwd, tokenResponse);
-    onStatus("Token saved to .kvitton/tokens/fortnox.json");
+    onStatus("Token saved to .ledgit/tokens/fortnox.json");
     return storedToken;
   } finally {
     stop();
@@ -27792,6 +27800,22 @@ async function syncFortnoxJournal(cwd, options) {
 import ora2 from "ora";
 import * as fs12 from "node:fs/promises";
 import * as path8 from "node:path";
+var MANIFEST_PATH = ".ledgit/synced-inbox.json";
+async function loadManifest(cwd) {
+  const manifestPath = path8.join(cwd, MANIFEST_PATH);
+  try {
+    const content = await fs12.readFile(manifestPath, "utf-8");
+    const ids = JSON.parse(content);
+    return new Set(ids);
+  } catch {
+    return new Set;
+  }
+}
+async function saveManifest(cwd, syncedIds) {
+  const manifestPath = path8.join(cwd, MANIFEST_PATH);
+  await fs12.mkdir(path8.dirname(manifestPath), { recursive: true });
+  await fs12.writeFile(manifestPath, JSON.stringify([...syncedIds], null, 2));
+}
 function slugify4(text, maxLength = 30) {
   return text.toLowerCase().slice(0, maxLength).replace(/[^a-z0-9\s-]/g, "").replace(/\s+/g, "-").replace(/-+/g, "-").replace(/^-|-$/g, "");
 }
@@ -27815,6 +27839,7 @@ async function syncInboxCommand() {
 async function syncBokioInbox(cwd) {
   const config3 = loadConfig(cwd);
   const client2 = createBokioClient(config3);
+  const syncedIds = await loadManifest(cwd);
   const validateSpinner = ora2("Connecting to Bokio...").start();
   try {
     const companyInfo = await client2.getCompanyInformation();
@@ -27867,8 +27892,13 @@ async function syncBokioInbox(cwd) {
   for (const upload of unprocessedUploads) {
     const slug = upload.description ? slugify4(upload.description) : upload.id.slice(0, 8);
     let dirName = `${today}-${slug}`;
+    if (syncedIds.has(upload.id)) {
+      existingCount++;
+      continue;
+    }
     const alreadyDownloaded = await isAlreadyDownloaded2(cwd, upload.id);
     if (alreadyDownloaded) {
+      syncedIds.add(upload.id);
       existingCount++;
       continue;
     }
@@ -27896,6 +27926,7 @@ async function syncBokioInbox(cwd) {
       ];
       const documentsPath = path8.join(uploadDir, "documents.yaml");
       await fs12.writeFile(documentsPath, toYaml2(documents));
+      syncedIds.add(upload.id);
       newCount++;
     } catch (error) {
       console.error(`
@@ -27906,6 +27937,7 @@ async function syncBokioInbox(cwd) {
       }
     }
   }
+  await saveManifest(cwd, syncedIds);
   console.log(`
 
   Sync complete!
@@ -28925,6 +28957,8 @@ async function updateEnvFile(cwd) {
 // src/commands/update.ts
 import * as fs17 from "node:fs/promises";
 import * as path13 from "node:path";
+import { exec as exec6 } from "node:child_process";
+import { promisify as promisify6 } from "node:util";
 import ora6 from "ora";
 
 // ../../node_modules/ansi-regex/index.js
@@ -34005,83 +34039,6 @@ var dist_default8 = createPrompt4((config3, done) => {
 `).trimEnd();
   return `${lines}${cursorHide4}`;
 });
-// src/commands/update.ts
-async function updateCommand(options = {}) {
-  const cwd = process.cwd();
-  const agentsPath = path13.join(cwd, "AGENTS.md");
-  let companyName;
-  let provider;
-  try {
-    const content = await fs17.readFile(agentsPath, "utf-8");
-    const match = content.match(/repository for (.+?) \(Swedish company\).+?integrates with (Fortnox|Bokio)/s);
-    if (!match || !match[1] || !match[2]) {
-      console.error("Could not parse company info from AGENTS.md");
-      process.exit(1);
-    }
-    companyName = match[1];
-    provider = match[2];
-    console.log(`  Company: ${companyName}`);
-    console.log(`  Provider: ${provider}`);
-  } catch {
-    console.error("AGENTS.md not found. Run this command in a ledgit repository.");
-    process.exit(1);
-  }
-  const newContent = renderAgentsTemplate({
-    companyName,
-    provider
-  });
-  if (!options.force) {
-    const currentContent = await fs17.readFile(agentsPath, "utf-8");
-    const hasCustomChanges = currentContent !== newContent;
-    if (hasCustomChanges) {
-      const proceed = await dist_default2({
-        message: "AGENTS.md has been modified. Overwrite with latest template?",
-        default: true
-      });
-      if (!proceed) {
-        console.log("  Update cancelled.");
-        return;
-      }
-    }
-  }
-  const updateSpinner = ora6("Updating AGENTS.md...").start();
-  try {
-    await fs17.writeFile(agentsPath, newContent, "utf-8");
-    const claudePath = path13.join(cwd, "CLAUDE.md");
-    try {
-      const stat2 = await fs17.lstat(claudePath);
-      if (!stat2.isSymbolicLink()) {
-        await fs17.unlink(claudePath);
-        await fs17.symlink("AGENTS.md", claudePath);
-      }
-    } catch {
-      await fs17.symlink("AGENTS.md", claudePath);
-    }
-    updateSpinner.succeed("Updated AGENTS.md");
-  } catch (error) {
-    updateSpinner.fail("Failed to update AGENTS.md");
-    console.error(error instanceof Error ? error.message : "Unknown error");
-    process.exit(1);
-  }
-  const commitMessage = "Update AGENTS.md to latest version";
-  const committed = await commitAll(cwd, commitMessage);
-  if (committed) {
-    console.log(`
-  Committed: "${commitMessage}"
-`);
-  } else {
-    console.log(`
-  No changes to commit.
-`);
-  }
-}
-
-// src/commands/setup-github.ts
-import * as fs18 from "node:fs/promises";
-import * as path14 from "node:path";
-import { exec as exec6 } from "node:child_process";
-import { promisify as promisify6 } from "node:util";
-
 // src/templates/workflows.ts
 var SYNC_INBOX_WORKFLOW = `name: Sync Inbox
 on:
@@ -34096,7 +34053,6 @@ jobs:
       contents: write
       pull-requests: write
       issues: write
-      id-token: write
     steps:
       - uses: actions/checkout@v5
 
@@ -34113,6 +34069,14 @@ jobs:
           BOKIO_TOKEN: \${{ secrets.BOKIO_TOKEN }}
           BOKIO_COMPANY_ID: \${{ secrets.BOKIO_COMPANY_ID }}
 
+      - name: Commit sync manifest
+        run: |
+          if [ -f .ledgit/synced-inbox.json ]; then
+            git add .ledgit/synced-inbox.json
+            git diff --cached --quiet || git commit -m "chore: update synced inbox manifest"
+            git push
+          fi
+
       - name: Check for new items
         id: check
         run: |
@@ -34122,32 +34086,89 @@ jobs:
             echo "has_new=false" >> $GITHUB_OUTPUT
           fi
 
+      - name: Install Claude Code
+        if: steps.check.outputs.has_new == 'true'
+        run: |
+          curl -fsSL https://claude.ai/install.sh | bash
+          echo "$HOME/.local/bin" >> $GITHUB_PATH
+
       - name: Bookkeep with Claude
         if: steps.check.outputs.has_new == 'true'
-        uses: anthropics/claude-code-action@v1
+        env:
+          CLAUDE_CODE_OAUTH_TOKEN: \${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}
+          GH_TOKEN: \${{ github.token }}
+        run: |
+          claude -p "New documents synced to inbox/ (unstaged).
+
+          YOU handle all git operations.
+
+          FIRST: Check for existing open bookkeeping PRs with gh pr list.
+          - If there's an active PR, checkout that branch and add to it
+          - Otherwise, create a new branch: book/{date}-{description}
+          - Group related entries (same vendor, same week) in one PR when sensible
+
+          THEN:
+          1. Check each new item in inbox/ 
+          2. Find similar entries in journal-entries/ for reference
+          3. Create entries with npx ledgit-cli create-entry
+          4. Stage and commit all changes (inbox files + entries)
+          5. Push and create/update PR
+
+          PR FORMAT:
+          ## Summary
+          Brief description (e.g., 'Book 2 invoices from Anthropic and AWS')
+
+          ## Entries
+          | Entry | Vendor | Amount | Date |
+          |-------|--------|--------|------|
+          | V-XXX | Vendor | Amount SEK | YYYY-MM-DD |
+
+          ### V-XXX: Description
+          - **Account**: XXXX (Name) - why this account
+          - **Tax**: Tax treatment - why (e.g., 'Reverse charge - US vendor')
+          - **Exchange rate**: X.XX SEK/USD from Riksbank (date) - if foreign currency
+          - **Reference**: Similar to V-YYY - if found similar entry
+
+          ## Questions
+          (Only if something needs clarification - otherwise omit this section)" \\
+            --allowedTools "Read,Write,Edit,Bash(npx ledgit-cli:*),Bash(git:*),Bash(gh pr:*),Bash(ls:*),Bash(find:*),Bash(grep:*),Bash(cat:*)" \\
+            --verbose \\
+            --output-format stream-json \\
+            2>&1 | tee /tmp/claude-output.json
+
+      - name: Write job summary
+        if: always() && steps.check.outputs.has_new == 'true'
+        run: |
+          echo "## \uD83E\uDD16 Claude Bookkeeping Report" >> $GITHUB_STEP_SUMMARY
+          echo "" >> $GITHUB_STEP_SUMMARY
+
+          # Show model from init
+          jq -r 'select(.type == "system" and .subtype == "init") | "**Model:** \\(.model // "claude")"' /tmp/claude-output.json >> $GITHUB_STEP_SUMMARY 2>/dev/null || true
+          echo "" >> $GITHUB_STEP_SUMMARY
+
+          # Count tool uses
+          TOOL_COUNT=$(jq -s '[.[] | select(.type == "tool_use")] | length' /tmp/claude-output.json 2>/dev/null || echo "0")
+          echo "**Tool calls:** $TOOL_COUNT" >> $GITHUB_STEP_SUMMARY
+          echo "" >> $GITHUB_STEP_SUMMARY
+
+          # List unique tools used
+          echo "### Tools Used" >> $GITHUB_STEP_SUMMARY
+          jq -r 'select(.type == "tool_use") | .name' /tmp/claude-output.json 2>/dev/null | sort | uniq -c | while read count name; do
+            echo "- $name ($count calls)" >> $GITHUB_STEP_SUMMARY
+          done
+          echo "" >> $GITHUB_STEP_SUMMARY
+
+          # Final result
+          echo "### Result" >> $GITHUB_STEP_SUMMARY
+          jq -r 'select(.type == "result") | "**Status:** \\(.subtype // "completed")\\n**Duration:** \\((.duration_ms // 0) / 1000 | floor)s\\n**Turns:** \\(.num_turns // "N/A")\\n**Cost:** $\\(.total_cost_usd // 0 | tostring | .[0:6])"' /tmp/claude-output.json >> $GITHUB_STEP_SUMMARY 2>/dev/null || true
+
+      - name: Upload Claude execution log
+        if: always() && steps.check.outputs.has_new == 'true'
+        uses: actions/upload-artifact@v4
         with:
-          anthropic_api_key: \${{ secrets.ANTHROPIC_API_KEY }}
-          prompt: |
-            New documents synced to inbox/ (unstaged). Read AGENTS.md for instructions.
-
-            YOU handle all git operations. The inbox files are NOT committed yet.
-
-            FIRST: Check for existing open bookkeeping PRs with \\\`gh pr list\\\`.
-            - If there's an active PR, checkout that branch and add to it
-            - Otherwise, create a new branch: book/{date}-{description}
-            - Group related entries (same vendor, same week) in one PR when sensible
-
-            THEN:
-            1. Check each new item in inbox/ (you can read PDFs directly)
-            2. Find similar entries in journal-entries/ for reference
-            3. Create entries with \\\`npx ledgit-cli create-entry\\\`
-            4. Stage and commit all changes (inbox files + entries)
-            5. Push and create/update PR
-
-            If anything is unclear, commit the inbox files anyway and ask questions in the PR description.
-          claude_args: |
-            --allowedTools "Read,Write,Edit,Bash(npx ledgit-cli:*),Bash(git:*),Bash(gh pr:*),Bash(ls:*),Bash(find:*),Bash(grep:*),Bash(cat:*)"
-          track_progress: true
+          name: claude-execution-log
+          path: /tmp/claude-output.json
+          retention-days: 7
 `;
 var CLAUDE_BOOKKEEPING_WORKFLOW = `name: Claude Bookkeeping
 on:
@@ -34164,25 +34185,118 @@ jobs:
       contents: write
       pull-requests: write
       issues: write
-      id-token: write
     steps:
+      - name: Get PR branch
+        id: pr
+        env:
+          GH_TOKEN: \${{ github.token }}
+        run: |
+          PR_NUMBER=\${{ github.event.issue.number }}
+          BRANCH=$(gh pr view $PR_NUMBER --repo \${{ github.repository }} --json headRefName --jq '.headRefName')
+          echo "branch=$BRANCH" >> $GITHUB_OUTPUT
+
       - uses: actions/checkout@v5
         with:
-          ref: \${{ github.head_ref }}
+          ref: \${{ steps.pr.outputs.branch }}
 
       - uses: oven-sh/setup-bun@v2
 
-      - uses: anthropics/claude-code-action@v1
+      - name: Configure git
+        run: |
+          git config user.name "ledgit[bot]"
+          git config user.email "bot@ledgit.se"
+
+      - name: Get PR context
+        id: context
+        env:
+          GH_TOKEN: \${{ github.token }}
+        run: |
+          PR_NUMBER=\${{ github.event.issue.number }}
+
+          # Fetch PR details and format as context
+          {
+            echo "## PR Details"
+            gh pr view $PR_NUMBER --json title,body --jq '"### \\(.title)\\n\\n\\(.body)"'
+            echo ""
+            echo "## Comments"
+            gh pr view $PR_NUMBER --json comments --jq '.comments[] | "[\\(.author.login) at \\(.createdAt)]: \\(.body)"'
+            echo ""
+            echo "## Files changed"
+            gh pr view $PR_NUMBER --json files --jq '.files[].path'
+            echo ""
+            echo "---"
+            echo "## Latest comment from \${{ github.event.comment.user.login }}:"
+            echo "\${{ github.event.comment.body }}"
+          } > /tmp/pr_context.md
+
+      - name: Install Claude Code
+        run: |
+          curl -fsSL https://claude.ai/install.sh | bash
+          echo "$HOME/.local/bin" >> $GITHUB_PATH
+
+      - name: Save PR context as artifact
+        uses: actions/upload-artifact@v4
         with:
-          anthropic_api_key: \${{ secrets.ANTHROPIC_API_KEY }}
-          prompt: |
-            This is an ongoing bookkeeping conversation. You can see the full PR context including all previous comments.
+          name: pr-context-\${{ github.event.issue.number }}
+          path: /tmp/pr_context.md
+          retention-days: 7
+
+      - name: Respond with Claude
+        env:
+          CLAUDE_CODE_OAUTH_TOKEN: \${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}
+          GH_TOKEN: \${{ github.token }}
+        run: |
+          PR_CONTEXT=$(cat /tmp/pr_context.md)
+
+          claude -p "This is an ongoing bookkeeping conversation on a GitHub PR.
+
+          $PR_CONTEXT
+
+          ---
+
+          Respond to the user's latest comment. If they answered your questions, continue creating the journal entries.
+
+          Read AGENTS.md for bookkeeping instructions.
 
-            Respond to the user's latest comment. If they answered your questions, continue creating the journal entries.
+          When done, post your response as a PR comment using: gh pr comment \${{ github.event.issue.number }} --body 'your response'" \\
+            --allowedTools "Read,Write,Edit,Bash(npx ledgit-cli:*),Bash(git:*),Bash(gh pr:*),Bash(ls:*),Bash(find:*),Bash(grep:*),Bash(cat:*)" \\
+            --verbose \\
+            --output-format stream-json \\
+            2>&1 | tee /tmp/claude-output.json
 
-            Read AGENTS.md for bookkeeping instructions.
-          claude_args: |
-            --allowedTools "Read,Write,Edit,Bash(npx ledgit-cli:*),Bash(git:*),Bash(ls:*),Bash(find:*),Bash(grep:*),Bash(cat:*)"
+      - name: Write job summary
+        if: always()
+        run: |
+          echo "## \uD83E\uDD16 Claude Response Report" >> $GITHUB_STEP_SUMMARY
+          echo "" >> $GITHUB_STEP_SUMMARY
+
+          # Show model from init
+          jq -r 'select(.type == "system" and .subtype == "init") | "**Model:** \\(.model // "claude")"' /tmp/claude-output.json >> $GITHUB_STEP_SUMMARY 2>/dev/null || true
+          echo "" >> $GITHUB_STEP_SUMMARY
+
+          # Count tool uses
+          TOOL_COUNT=$(jq -s '[.[] | select(.type == "tool_use")] | length' /tmp/claude-output.json 2>/dev/null || echo "0")
+          echo "**Tool calls:** $TOOL_COUNT" >> $GITHUB_STEP_SUMMARY
+          echo "" >> $GITHUB_STEP_SUMMARY
+
+          # List unique tools used
+          echo "### Tools Used" >> $GITHUB_STEP_SUMMARY
+          jq -r 'select(.type == "tool_use") | .name' /tmp/claude-output.json 2>/dev/null | sort | uniq -c | while read count name; do
+            echo "- $name ($count calls)" >> $GITHUB_STEP_SUMMARY
+          done
+          echo "" >> $GITHUB_STEP_SUMMARY
+
+          # Final result
+          echo "### Result" >> $GITHUB_STEP_SUMMARY
+          jq -r 'select(.type == "result") | "**Status:** \\(.subtype // "completed")\\n**Duration:** \\((.duration_ms // 0) / 1000 | floor)s\\n**Turns:** \\(.num_turns // "N/A")\\n**Cost:** $\\(.total_cost_usd // 0 | tostring | .[0:6])"' /tmp/claude-output.json >> $GITHUB_STEP_SUMMARY 2>/dev/null || true
+
+      - name: Upload Claude execution log
+        if: always()
+        uses: actions/upload-artifact@v4
+        with:
+          name: claude-execution-log-pr-\${{ github.event.issue.number }}
+          path: /tmp/claude-output.json
+          retention-days: 7
 `;
 var SYNC_JOURNAL_WORKFLOW = `name: Sync Journal
 on:
@@ -34212,11 +34326,211 @@ jobs:
           BOKIO_COMPANY_ID: \${{ secrets.BOKIO_COMPANY_ID }}
 `;
 
-// src/commands/setup-github.ts
+// src/commands/update.ts
 var execAsync2 = promisify6(exec6);
+var AGENTS_COMMIT_MSG = "Update AGENTS.md to latest version";
+var WORKFLOWS_COMMIT_MSG = "Update GitHub Actions workflows to latest version";
+async function hasCustomChanges(cwd, filePath, expectedMessage) {
+  try {
+    const result = await execAsync2(`git log -1 --format="%s" -- "${filePath}"`, { cwd });
+    const lastMessage = result.stdout.trim();
+    if (lastMessage === "" || lastMessage === expectedMessage) {
+      return false;
+    }
+    return true;
+  } catch {
+    return false;
+  }
+}
+async function getDiff(cwd, path14) {
+  try {
+    const result = await execAsync2(`git diff "${path14}"`, { cwd });
+    return result.stdout;
+  } catch {
+    return "";
+  }
+}
+async function revertChanges(cwd, path14) {
+  try {
+    await execAsync2(`git checkout "${path14}"`, { cwd });
+  } catch {
+  }
+}
+async function commitFiles(cwd, files, message) {
+  try {
+    await execAsync2(`git add ${files.map((f2) => `"${f2}"`).join(" ")}`, { cwd });
+    try {
+      await execAsync2("git diff --cached --quiet", { cwd });
+      return false;
+    } catch {
+    }
+    await execAsync2(`git commit -m "${message}"`, { cwd });
+    return true;
+  } catch {
+    return false;
+  }
+}
+async function updateCommand(options = {}) {
+  const cwd = process.cwd();
+  const agentsPath = path13.join(cwd, "AGENTS.md");
+  let companyName;
+  let provider;
+  try {
+    const content = await fs17.readFile(agentsPath, "utf-8");
+    const match = content.match(/repository for (.+?) \(Swedish company\).+?integrates with (Fortnox|Bokio)/s);
+    if (!match || !match[1] || !match[2]) {
+      console.error("Could not parse company info from AGENTS.md");
+      process.exit(1);
+    }
+    companyName = match[1];
+    provider = match[2];
+    console.log(`  Company: ${companyName}`);
+    console.log(`  Provider: ${provider}`);
+  } catch {
+    console.error("AGENTS.md not found. Run this command in a ledgit repository.");
+    process.exit(1);
+  }
+  const agentsHasCustom = await hasCustomChanges(cwd, "AGENTS.md", AGENTS_COMMIT_MSG);
+  const currentAgentsContent = await fs17.readFile(agentsPath, "utf-8");
+  const newContent = renderAgentsTemplate({
+    companyName,
+    provider
+  });
+  const agentsNeedsUpdate = currentAgentsContent !== newContent;
+  if (agentsNeedsUpdate) {
+    const updateSpinner = ora6("Updating AGENTS.md...").start();
+    try {
+      await fs17.writeFile(agentsPath, newContent, "utf-8");
+      const claudePath = path13.join(cwd, "CLAUDE.md");
+      try {
+        const stat2 = await fs17.lstat(claudePath);
+        if (!stat2.isSymbolicLink()) {
+          await fs17.unlink(claudePath);
+          await fs17.symlink("AGENTS.md", claudePath);
+        }
+      } catch {
+        await fs17.symlink("AGENTS.md", claudePath);
+      }
+      updateSpinner.succeed("Updated AGENTS.md");
+    } catch (error) {
+      updateSpinner.fail("Failed to update AGENTS.md");
+      console.error(error instanceof Error ? error.message : "Unknown error");
+      process.exit(1);
+    }
+  } else {
+    console.log("  AGENTS.md is already up to date");
+  }
+  if (agentsNeedsUpdate) {
+    if (agentsHasCustom && !options.force) {
+      const diff = await getDiff(cwd, "AGENTS.md");
+      if (diff) {
+        console.log(`
+  AGENTS.md has custom changes. Diff:
+`);
+        console.log(diff);
+        const proceed = await dist_default2({
+          message: "Overwrite custom changes to AGENTS.md?",
+          default: false
+        });
+        if (!proceed) {
+          await revertChanges(cwd, "AGENTS.md");
+          console.log("  Reverted AGENTS.md");
+        } else {
+          const committed = await commitFiles(cwd, ["AGENTS.md", "CLAUDE.md"], AGENTS_COMMIT_MSG);
+          if (committed) {
+            console.log(`  Committed: "${AGENTS_COMMIT_MSG}"`);
+          }
+        }
+      }
+    } else {
+      const committed = await commitFiles(cwd, ["AGENTS.md", "CLAUDE.md"], AGENTS_COMMIT_MSG);
+      if (committed) {
+        console.log(`  Committed: "${AGENTS_COMMIT_MSG}"`);
+      }
+    }
+  }
+  const workflowsDir = path13.join(cwd, ".github", "workflows");
+  const workflowFiles = [
+    { name: "sync-inbox.yml", template: SYNC_INBOX_WORKFLOW },
+    { name: "claude-bookkeeping.yml", template: CLAUDE_BOOKKEEPING_WORKFLOW },
+    { name: "sync-journal.yml", template: SYNC_JOURNAL_WORKFLOW }
+  ];
+  const workflowsToUpdate = [];
+  for (const wf of workflowFiles) {
+    const wfPath = path13.join(workflowsDir, wf.name);
+    try {
+      const currentContent = await fs17.readFile(wfPath, "utf-8");
+      if (currentContent !== wf.template) {
+        workflowsToUpdate.push(wf);
+      }
+    } catch {
+    }
+  }
+  if (workflowsToUpdate.length === 0) {
+    console.log("  Workflows are already up to date");
+    console.log("");
+    return;
+  }
+  let workflowsHaveCustom = false;
+  for (const wf of workflowsToUpdate) {
+    const wfPath = `.github/workflows/${wf.name}`;
+    if (await hasCustomChanges(cwd, wfPath, WORKFLOWS_COMMIT_MSG)) {
+      workflowsHaveCustom = true;
+      break;
+    }
+  }
+  const workflowSpinner = ora6("Updating workflows...").start();
+  try {
+    for (const wf of workflowsToUpdate) {
+      const wfPath = path13.join(workflowsDir, wf.name);
+      await fs17.writeFile(wfPath, wf.template, "utf-8");
+    }
+    workflowSpinner.succeed(`Updated ${workflowsToUpdate.length} workflow(s)`);
+  } catch (error) {
+    workflowSpinner.fail("Failed to update workflows");
+    console.error(error instanceof Error ? error.message : "Unknown error");
+    return;
+  }
+  const workflowPaths = workflowsToUpdate.map((wf) => `.github/workflows/${wf.name}`);
+  if (workflowsHaveCustom && !options.force) {
+    const diff = await getDiff(cwd, ".github/workflows/");
+    if (diff) {
+      console.log(`
+  Workflows have custom changes. Diff:
+`);
+      console.log(diff);
+      const proceed = await dist_default2({
+        message: "Overwrite custom changes to workflows?",
+        default: false
+      });
+      if (!proceed) {
+        await revertChanges(cwd, ".github/workflows/");
+        console.log("  Reverted workflows");
+      } else {
+        const committed = await commitFiles(cwd, workflowPaths, WORKFLOWS_COMMIT_MSG);
+        if (committed) {
+          console.log(`  Committed: "${WORKFLOWS_COMMIT_MSG}"`);
+        }
+      }
+    }
+  } else {
+    const committed = await commitFiles(cwd, workflowPaths, WORKFLOWS_COMMIT_MSG);
+    if (committed) {
+      console.log(`  Committed: "${WORKFLOWS_COMMIT_MSG}"`);
+    }
+  }
+  console.log("");
+}
+
+// src/commands/setup-github.ts
+import * as fs18 from "node:fs/promises";
+import * as path14 from "node:path";
+import { exec as exec7 } from "node:child_process";
+import { promisify as promisify7 } from "node:util";
+var execAsync3 = promisify7(exec7);
 async function hasGitRemote() {
   try {
-    const { stdout } = await execAsync2("git remote -v");
+    const { stdout } = await execAsync3("git remote -v");
     return stdout.trim().length > 0;
   } catch {
     return false;
@@ -34226,25 +34540,25 @@ async function getRepoName(cwd) {
   return path14.basename(cwd);
 }
 async function getGitHubUsername() {
-  const { stdout } = await execAsync2("gh api user -q .login");
+  const { stdout } = await execAsync3("gh api user -q .login");
   return stdout.trim();
 }
 async function createGitHubRepo(repoName) {
   const username = await getGitHubUsername();
   const fullRepoName = `${username}/${repoName}`;
-  await execAsync2(`gh repo create "${fullRepoName}" --private`);
+  await execAsync3(`gh repo create "${fullRepoName}" --private`);
   const sshUrl = `git@github.com:${fullRepoName}.git`;
   try {
-    await execAsync2("git remote remove origin");
+    await execAsync3("git remote remove origin");
   } catch {
   }
-  await execAsync2(`git remote add origin "${sshUrl}"`);
-  await execAsync2(`gh repo view "${fullRepoName}" --json url`);
+  await execAsync3(`git remote add origin "${sshUrl}"`);
+  await execAsync3(`gh repo view "${fullRepoName}" --json url`);
   return `https://github.com/${fullRepoName}`;
 }
 async function checkGhInstalled() {
   try {
-    await execAsync2("which gh");
+    await execAsync3("which gh");
     return true;
   } catch {
     return false;
@@ -34252,7 +34566,7 @@ async function checkGhInstalled() {
 }
 async function checkGhWorkflowScope() {
   try {
-    const { stdout, stderr } = await execAsync2("gh auth status 2>&1");
+    const { stdout, stderr } = await execAsync3("gh auth status 2>&1");
     const output = stdout + stderr;
     return output.includes("workflow");
   } catch {
@@ -34261,14 +34575,14 @@ async function checkGhWorkflowScope() {
 }
 async function checkGhAuthenticated() {
   try {
-    await execAsync2("gh auth status");
+    await execAsync3("gh auth status");
     return true;
   } catch {
     return false;
   }
 }
 async function setGhSecret(name, value) {
-  await execAsync2(`echo "${value}" | gh secret set ${name}`);
+  await execAsync3(`echo "${value}" | gh secret set ${name}`);
 }
 async function setupGithubCommand() {
   const cwd = process.cwd();
@@ -34419,22 +34733,24 @@ Make sure this repository has a GitHub remote configured.`);
 Creating workflow files...`);
   const workflowsDir = path14.join(cwd, ".github", "workflows");
   await fs18.mkdir(workflowsDir, { recursive: true });
-  await fs18.writeFile(path14.join(workflowsDir, "sync-inbox.yml"), SYNC_INBOX_WORKFLOW);
+  const claudeAuthLine = authMethod === "api_key" ? "anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}" : "claude_code_oauth_token: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}";
+  const replaceAuth = (template) => template.replace(/\{\{CLAUDE_AUTH\}\}/g, claudeAuthLine);
+  await fs18.writeFile(path14.join(workflowsDir, "sync-inbox.yml"), replaceAuth(SYNC_INBOX_WORKFLOW));
   console.log("✓ Created .github/workflows/sync-inbox.yml");
-  await fs18.writeFile(path14.join(workflowsDir, "claude-bookkeeping.yml"), CLAUDE_BOOKKEEPING_WORKFLOW);
+  await fs18.writeFile(path14.join(workflowsDir, "claude-bookkeeping.yml"), replaceAuth(CLAUDE_BOOKKEEPING_WORKFLOW));
   console.log("✓ Created .github/workflows/claude-bookkeeping.yml");
   await fs18.writeFile(path14.join(workflowsDir, "sync-journal.yml"), SYNC_JOURNAL_WORKFLOW);
   console.log("✓ Created .github/workflows/sync-journal.yml");
   try {
-    await execAsync2("git add .github/workflows");
-    const { stdout: status } = await execAsync2("git status --porcelain .github/workflows");
+    await execAsync3("git add .github/workflows");
+    const { stdout: status } = await execAsync3("git status --porcelain .github/workflows");
     if (status.trim()) {
       const shouldCommit = await dist_default2({
         message: "Commit workflow files?",
         default: true
       });
       if (shouldCommit) {
-        await execAsync2('git commit -m "Add GitHub Actions for automated bookkeeping"');
+        await execAsync3('git commit -m "Add GitHub Actions for automated bookkeeping"');
         console.log(`
 ✓ Committed workflow files`);
       }
@@ -34455,9 +34771,9 @@ Warning: Could not commit files:`);
     try {
       console.log(`
 Pushing to GitHub...`);
-      const { stdout: currentBranch } = await execAsync2("git rev-parse --abbrev-ref HEAD");
+      const { stdout: currentBranch } = await execAsync3("git rev-parse --abbrev-ref HEAD");
       const branch = currentBranch.trim();
-      await execAsync2(`git push -u origin ${branch}`);
+      await execAsync3(`git push -u origin ${branch}`);
       console.log("✓ Pushed to GitHub");
     } catch (error) {
       console.error(`

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "ledgit-cli",
-	"version": "0.2.1",
+	"version": "0.2.2",
 	"description": "CLI for ledgit bookkeeping repositories",
 	"repository": {
 		"type": "git",