noxctl 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Magnus Gille
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,326 @@
+# noxctl
+
+Command-line interface (CLI) and Model Context Protocol (MCP) server for Fortnox — manage invoices, customers, bookkeeping, and VAT (Value Added Tax) from the terminal or from AI (Artificial Intelligence) agents like Claude Code.
+
+```
+noxctl init                          # interactive setup wizard
+noxctl company info                  # verify connection
+noxctl customers list                # list customers
+noxctl invoices list --filter unpaid # unpaid invoices
+noxctl -o json invoices list | jq .  # JSON output for scripting/AI
+```
+
+## Status
+
+noxctl is an independent open-source project. It is not affiliated with, endorsed by, or certified by Fortnox AB.
+
+Use it with your own Fortnox account and developer credentials. You are responsible for complying with Fortnox terms, Swedish bookkeeping/tax rules, and your own privacy obligations.
+
+## Prerequisites
+
+- **Node.js** 20+
+- **Fortnox account** with API (Application Programming Interface) access
+- **Your own Fortnox developer app** with the required scopes enabled
+- **Linux only:** `secret-tool` available for secure credential storage
+
+Fortnox product plans, API activation requirements, and integration licensing can change. Verify the current Fortnox requirements before publishing or relying on this setup for business-critical work.
+
+## Setup
+
+### 1. Create a Fortnox app
+
+> **Tip:** Run `npx noxctl init` (npx is a tool included with npm, the Node Package Manager) for an interactive setup wizard that guides you through all of these steps.
+
+1. Go to [developer.fortnox.se](https://developer.fortnox.se/) and click **Integrationer** / **Integrations**
+2. Create a new app (integration)
+3. On the **OAuth (Open Authorization)** tab:
+   - Set **Redirect URI (Uniform Resource Identifier)** to `http://localhost:9876/callback`
+   - Check **"Möjliggör auktorisering som servicekonto"** / **"Enable service account authorization"** (recommended)
+   - Copy your **Client ID** and **Client Secret**
+4. On the **Integration** tab, enable these scopes under **Behörigheter** / **Permissions**:
+
+   | Swedish (SV)         | English (EN)        |
+   |----------------------|---------------------|
+   | Artikel              | Article             |
+   | Bokföring            | Bookkeeping         |
+   | Faktura              | Invoice             |
+   | Företagsinformation  | Company Information |
+   | Inställningar        | Settings            |
+   | Kund                 | Customer            |
+
+5. Save the integration
+
+You are creating and authorizing your own Fortnox app here. noxctl does not ship shared Fortnox credentials and does not bypass Fortnox's authorization model.
+
+### 2. Authenticate
+
+Run the interactive setup wizard:
+
+```bash
+npx noxctl init
+```
+
+If running from a local clone:
+
+```bash
+npm run build
+node dist/cli.js init
+```
+
+The wizard will prompt for your Client ID and Client Secret (masked input), run the OAuth flow, verify the connection, and optionally register the MCP server with Claude Code.
+
+After authorization, credentials are stored in the OS (Operating System) secure store:
+
+- **macOS:** Keychain (`security`)
+- **Linux:** Secret Service via `secret-tool`
+- **Windows:** DPAPI (Data Protection API)-protected user store
+
+Token management is automatic after setup — no environment variables needed going forward.
+
+- **With service account:** Uses client credentials flow with `TenantId` — no refresh tokens to manage. The tenant ID is fetched automatically during setup.
+- **Without service account (default):** Uses standard OAuth2 refresh token flow.
+
+### 3. Register as MCP server (optional — for Claude Desktop/Web)
+
+If you use Claude Desktop or claude.ai, register the MCP server so those environments can access Fortnox. Claude Code can use the CLI directly, so this step is optional there.
+
+```bash
+claude mcp add fortnox -- npx noxctl serve
+```
+
+If you are running from a local clone instead of npm:
+
+```bash
+claude mcp add fortnox -- node /absolute/path/to/noxctl/dist/cli.js serve
+```
+
+### 4. Verify the connection
+
+```bash
+noxctl company info
+```
+
+If running from source:
+
+```bash
+node dist/cli.js company info
+```
+
+You should see your company name, organisation number, and address. If this works, you're all set.
+
+## Tools
+
+Every operation is available both as a CLI command and as an MCP tool. The CLI is the primary interface; the MCP server exposes the same operations to AI agents.
+
+### Customers
+
+| CLI | MCP tool | Description |
+|-----|----------|-------------|
+| `noxctl customers list [--search <term>]` | `fortnox_list_customers` | List/search customers |
+| `noxctl customers get <number>` | `fortnox_get_customer` | Get a single customer by customer number |
+| `noxctl customers create --name <name>` | `fortnox_create_customer` | Create a new customer (mutation) |
+| `noxctl customers update <number> --input <file>` | `fortnox_update_customer` | Update an existing customer (mutation) |
+
+### Invoices
+
+| CLI | MCP tool | Description |
+|-----|----------|-------------|
+| `noxctl invoices list [--filter <status>] [--customer <number>]` | `fortnox_list_invoices` | List/filter invoices. Filters: `cancelled`, `fullypaid`, `unpaid`, `unpaidoverdue`, `unbooked` |
+| `noxctl invoices get <docNumber>` | `fortnox_get_invoice` | Get a single invoice by document number |
+| `noxctl invoices create --customer <number> --input <file>` | `fortnox_create_invoice` | Create an invoice with line items (mutation) |
+| `noxctl invoices update <docNumber> --input <file>` | `fortnox_update_invoice` | Update an invoice that has not been bookkeept (mutation) |
+| `noxctl invoices send <docNumber> [--method email\|print\|einvoice] [--subject <s>] [--body <s>] [--bcc <email>]` | `fortnox_send_invoice` | Send invoice via email (default), print, or e-invoice. Supports email subject, body, and BCC (Blind Carbon Copy) (mutation) |
+| `noxctl invoices bookkeep <docNumber>` | `fortnox_bookkeep_invoice` | Book an invoice (mutation) |
+| `noxctl invoices credit <docNumber>` | `fortnox_credit_invoice` | Credit an invoice (mutation) |
+
+### Bookkeeping
+
+| CLI | MCP tool | Description |
+|-----|----------|-------------|
+| `noxctl vouchers list [--series <s>] [--from <date>] [--to <date>]` | `fortnox_list_vouchers` | List vouchers, optionally filtered by series and date range |
+| `noxctl vouchers create --input <file>` | `fortnox_create_voucher` | Create a voucher with debit/credit rows (mutation) |
+| `noxctl accounts list [--search <term>]` | `fortnox_list_accounts` | View chart of accounts, search by name or number |
+
+### Tax
+
+| CLI | MCP tool | Description |
+|-----|----------|-------------|
+| `noxctl tax report --from <date> --to <date>` | `fortnox_tax_report` | Informational VAT summary for a period. Reconcile against Fortnox before filing. Dates in `YYYY-MM-DD` format |
+
+### Company
+
+| CLI | MCP tool | Description |
+|-----|----------|-------------|
+| `noxctl company info` | `fortnox_company_info` | Company name, org number, address, and settings |
+
+### Utility
+
+| CLI | MCP tool | Description |
+|-----|----------|-------------|
+| `noxctl init` | — | Interactive setup wizard — connects to Fortnox, stores credentials, optionally registers MCP server |
+| `noxctl doctor` | `fortnox_status` | Validate setup: Node version, credentials, token status, API connectivity, and scopes |
+| `noxctl logout` | — | Remove stored credentials from the OS keychain |
+
+## CLI output
+
+By default, `noxctl` uses **table output** on interactive terminals and **JSON** when piped or redirected. Override with `-o`:
+
+```bash
+noxctl invoices list              # table on terminal, JSON when piped
+noxctl -o json invoices list      # force JSON (JavaScript Object Notation)
+noxctl -o table invoices list     # force table
+noxctl invoices list | jq .       # auto-JSON (piped)
+```
+
+When running from a local clone instead of an installed binary, replace `noxctl` with `node dist/cli.js`.
+
+## Mutation safety
+
+Mutating commands require confirmation before executing. On interactive terminals, the CLI prompts with `[y/N]`. In non-interactive contexts (piped input, CI), pass `--yes` explicitly or the command will fail safely.
+
+CLI:
+
+```bash
+noxctl invoices send 1001                              # prompts: "Send invoice 1001 via email. Continue? [y/N]"
+noxctl invoices send 1001 --yes                        # skip prompt (scripting/AI)
+noxctl invoices send 1001 --dry-run                    # preview without sending
+noxctl customers update 42 --input customer.json       # prompts for confirmation
+noxctl vouchers create --input voucher.json --dry-run  # preview payload
+```
+
+MCP tools:
+
+- Mutating tools require `confirm: true`
+- Use `dryRun: true` to preview a request without sending it
+- Raw Fortnox JSON is opt-in via `includeRaw: true`
+- `includeRaw: true` can expose more accounting and personal data to AI transcripts, logs, and terminals than the summarized default output
+
+## Privacy and AI Use
+
+If you use noxctl through Claude, MCP clients, or other AI tooling, customer, supplier, invoice, and bookkeeping data may leave the local Fortnox UI context and enter third-party systems.
+
+- Keep `includeRaw` off unless you truly need the full payload
+- Review your AI provider's retention, logging, and processor terms
+- Make sure your GDPR setup covers this use, including processor agreements and any required third-country transfer assessment
+- Prefer synthetic data when testing prompts, demos, and examples
+
+See [PRIVACY.md](PRIVACY.md) for the project-specific privacy notes.
+
+## Tax and Accounting Limits
+
+noxctl can help you inspect Fortnox data and submit operations you choose to confirm. It does not make legal judgments for you.
+
+- The VAT report is an informational summary, not a filed declaration
+- Swedish bookkeeping responsibility remains with the company owner or board
+- Review invoices, vouchers, and VAT totals before confirming or filing anything
+- Reconcile VAT figures against Fortnox's own momsrapport and your accounting records before submitting to Skatteverket
+
+## Examples
+
+Ask Claude naturally — works in both Swedish and English:
+
+- "Skapa en faktura till kund 42 för 10 konsulttimmar á 1200 kr"
+- "Create an invoice for customer 42: 10 consulting hours at 1200 SEK (Swedish Krona)"
+- "Visa alla obetalda fakturor" / "Show all unpaid invoices"
+- "Vad har vi för utgående moms Q1 2025?" / "What's our outgoing VAT for Q1 2025?"
+- "Bokför kontorsmaterial för 1250 kr inkl moms" / "Book office supplies for 1250 SEK incl VAT"
+- "Skicka faktura 1001 via e-post" / "Send invoice 1001 by email"
+
+## Troubleshooting
+
+**"FORTNOX_CLIENT_ID and FORTNOX_CLIENT_SECRET must be set"**
+
+Environment variables were not passed to the command. Use `export` to set them in your shell first:
+
+```bash
+export FORTNOX_CLIENT_ID=<your-id>
+export FORTNOX_CLIENT_SECRET=<your-secret>
+```
+
+Then run setup again. This avoids issues with long commands wrapping across lines.
+
+**"Not authenticated. Run `noxctl init`"**
+
+Credentials are missing or were not saved. Re-run the setup step. On macOS, check that Keychain Access is not blocking the `security` command. On Linux, ensure `secret-tool` is installed (`sudo apt install libsecret-tools`).
+
+**403 Forbidden from Fortnox API**
+
+Your app is missing required scopes. Go to [developer.fortnox.se](https://developer.fortnox.se/), open your app, and check that these are enabled under **Behörigheter** / **Permissions**:
+
+| Swedish (SV)         | English (EN)        |
+|----------------------|---------------------|
+| Artikel              | Article             |
+| Bokföring            | Bookkeeping         |
+| Faktura              | Invoice             |
+| Företagsinformation  | Company Information |
+| Inställningar        | Settings            |
+| Kund                 | Customer            |
+
+**"Token refresh failed"**
+
+Your refresh token may have expired or been revoked. Re-run setup to re-authenticate.
+
+**Port 9876 already in use**
+
+Another process is using the OAuth callback port. Close it or wait for a previous setup attempt to finish, then try again.
+
+## Development
+
+```bash
+npm install
+npm run build        # compile TypeScript
+npm test             # run tests
+npm run test:watch   # watch mode
+npm run lint         # ESLint with typescript-eslint
+npm run format       # format
+```
+
+## Architecture
+
+See [ARCHITECTURE.md](ARCHITECTURE.md) for details.
+
+## Security
+
+- Credentials stored in the OS secure store, not plaintext repo or home-directory JSON
+- No secrets in environment variables after initial setup
+- OAuth callback is bound to loopback and validated with a per-run OAuth `state`
+- OAuth/client-credentials secrets are never emitted in tool responses
+- Mutating actions require explicit confirmation or `dryRun`
+- MCP responses are summarized by default; raw Fortnox JSON is opt-in
+- Retries are limited to idempotent requests
+
+## Glossary
+
+| Abbreviation | Full term |
+|---|---|
+| AI | Artificial Intelligence |
+| API | Application Programming Interface |
+| BCC | Blind Carbon Copy — an email field that sends a copy to someone without other recipients seeing it |
+| CLI | Command Line Interface — a text-based way to interact with software by typing commands |
+| DPAPI | Data Protection API — a Windows feature for encrypting stored credentials |
+| JSON | JavaScript Object Notation — a widely used format for structured data |
+| MCP | Model Context Protocol — a standard that lets AI assistants use external tools and data sources |
+| MIT | Massachusetts Institute of Technology — refers to a permissive open-source software license |
+| npm | Node Package Manager — a tool for installing and managing JavaScript packages |
+| npx | A tool included with npm for running packages without installing them globally |
+| OAuth | Open Authorization — a standard protocol for granting apps limited access to accounts without sharing passwords |
+| OS | Operating System — the software that runs your computer (e.g. macOS, Windows, Linux) |
+| SEK | Swedish Krona — the currency of Sweden |
+| URI | Uniform Resource Identifier — an address that identifies a resource (similar to a web link) |
+| VAT | Value Added Tax — a consumption tax added at each stage of production |
+
+## Disclaimer
+
+noxctl is an independent open-source project — not affiliated with, endorsed by, or certified by Fortnox AB.
+
+**You are responsible for your own bookkeeping.** Under Swedish law (Bokföringslagen), the company owner or board bears full responsibility for the correctness of all accounting records, regardless of what tools are used. noxctl is an instrument that executes your instructions — review entries before confirming, especially when using `--yes` or `confirm: true`.
+
+**Privacy note:** When using noxctl with AI assistants, customer and supplier data may enter third-party AI systems. Use `includeRaw: false` unless full payloads are necessary, and make sure your use complies with GDPR, processor agreements, and any required transfer assessments.
+
+**Tax note:** The VAT report is an informational summary only. Reconcile it against Fortnox and your accounting records before submitting anything to Skatteverket.
+
+**Fortnox API access** requires your own developer credentials and Fortnox setup. You must comply with the applicable Fortnox terms. noxctl does not redistribute any Fortnox-owned code or data.
+
+## License
+
+MIT

package/dist/auth.d.ts

@@ -0,0 +1,29 @@
+export declare const SCOPES = "article customer invoice supplier supplierinvoice bookkeeping companyinformation settings";
+export interface FortnoxCredentials {
+    client_id: string;
+    client_secret: string;
+    access_token: string;
+    refresh_token: string;
+    expires_at: number;
+    tenant_id?: string;
+}
+export interface FortnoxAppConfig {
+    clientId: string;
+    clientSecret: string;
+    serviceAccount?: boolean;
+}
+export declare function loadCredentials(): Promise<FortnoxCredentials | null>;
+export declare function saveCredentials(creds: FortnoxCredentials): Promise<void>;
+export declare function exchangeCodeForTokens(code: string, redirectUri: string, config: FortnoxAppConfig): Promise<{
+    access_token: string;
+    refresh_token: string;
+    expires_in: number;
+}>;
+export declare function getTokenViaClientCredentials(creds: FortnoxCredentials): Promise<FortnoxCredentials>;
+export declare function refreshAccessToken(creds: FortnoxCredentials): Promise<FortnoxCredentials>;
+export declare function getValidToken(): Promise<string>;
+export declare function fetchTenantId(accessToken: string): Promise<string | undefined>;
+export declare function escapeHtml(value: string): string;
+export declare function buildAuthorizationUrl(config: FortnoxAppConfig, redirectUri: string, state: string): string;
+export declare function runOAuthSetup(config: FortnoxAppConfig): Promise<void>;
+//# sourceMappingURL=auth.d.ts.map

package/dist/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AASA,eAAO,MAAM,MAAM,8FAC0E,CAAC;AAE9F,MAAM,WAAW,kBAAkB;IACjC,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED,wBAAsB,eAAe,IAAI,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAQ1E;AAED,wBAAsB,eAAe,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CAE9E;AAED,wBAAsB,qBAAqB,CACzC,IAAI,EAAE,MAAM,EACZ,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,gBAAgB,GACvB,OAAO,CAAC;IAAE,YAAY,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CAAC,CA2B9E;AAED,wBAAsB,4BAA4B,CAChD,KAAK,EAAE,kBAAkB,GACxB,OAAO,CAAC,kBAAkB,CAAC,CAuC7B;AAED,wBAAsB,kBAAkB,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAoC/F;AAED,wBAAsB,aAAa,IAAI,OAAO,CAAC,MAAM,CAAC,CAwBrD;AAED,wBAAsB,aAAa,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAepF;AAgBD,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAOhD;AAED,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,gBAAgB,EACxB,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,MAAM,GACZ,MAAM,CAeR;AAED,wBAAsB,aAAa,CAAC,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CA6G3E"}

package/dist/auth.js

@@ -0,0 +1,267 @@
+import { createServer } from 'node:http';
+import { randomBytes } from 'node:crypto';
+import { execFileSync } from 'node:child_process';
+import { loadCredentialBlob, saveCredentialBlob } from './credentials-store.js';
+const FORTNOX_AUTH_URL = 'https://apps.fortnox.se/oauth-v1/auth';
+const FORTNOX_TOKEN_URL = 'https://apps.fortnox.se/oauth-v1/token';
+const CALLBACK_HOST = '127.0.0.1';
+export const SCOPES = 'article customer invoice supplier supplierinvoice bookkeeping companyinformation settings';
+export async function loadCredentials() {
+    try {
+        const data = await loadCredentialBlob();
+        if (!data)
+            return null;
+        return JSON.parse(data);
+    }
+    catch {
+        return null;
+    }
+}
+export async function saveCredentials(creds) {
+    await saveCredentialBlob(JSON.stringify(creds));
+}
+export async function exchangeCodeForTokens(code, redirectUri, config) {
+    const body = new URLSearchParams({
+        grant_type: 'authorization_code',
+        code,
+        redirect_uri: redirectUri,
+    });
+    const response = await fetch(FORTNOX_TOKEN_URL, {
+        method: 'POST',
+        headers: {
+            'Content-Type': 'application/x-www-form-urlencoded',
+            Authorization: 'Basic ' + Buffer.from(`${config.clientId}:${config.clientSecret}`).toString('base64'),
+        },
+        body: body.toString(),
+    });
+    if (!response.ok) {
+        const text = await response.text();
+        throw new Error(`Token exchange failed (${response.status}): ${text}`);
+    }
+    return (await response.json());
+}
+export async function getTokenViaClientCredentials(creds) {
+    if (!creds.tenant_id) {
+        throw new Error('No tenant_id available — cannot use client credentials flow');
+    }
+    const body = new URLSearchParams({
+        grant_type: 'client_credentials',
+        scope: SCOPES,
+    });
+    const response = await fetch(FORTNOX_TOKEN_URL, {
+        method: 'POST',
+        headers: {
+            'Content-Type': 'application/x-www-form-urlencoded',
+            Authorization: 'Basic ' + Buffer.from(`${creds.client_id}:${creds.client_secret}`).toString('base64'),
+            TenantId: creds.tenant_id,
+        },
+        body: body.toString(),
+    });
+    if (!response.ok) {
+        const text = await response.text();
+        throw new Error(`Client credentials token request failed (${response.status}): ${text}`);
+    }
+    const data = (await response.json());
+    const updated = {
+        ...creds,
+        access_token: data.access_token,
+        expires_at: Date.now() + data.expires_in * 1000,
+    };
+    await saveCredentials(updated);
+    return updated;
+}
+export async function refreshAccessToken(creds) {
+    const body = new URLSearchParams({
+        grant_type: 'refresh_token',
+        refresh_token: creds.refresh_token,
+    });
+    const response = await fetch(FORTNOX_TOKEN_URL, {
+        method: 'POST',
+        headers: {
+            'Content-Type': 'application/x-www-form-urlencoded',
+            Authorization: 'Basic ' + Buffer.from(`${creds.client_id}:${creds.client_secret}`).toString('base64'),
+        },
+        body: body.toString(),
+    });
+    if (!response.ok) {
+        const text = await response.text();
+        throw new Error(`Token refresh failed (${response.status}): ${text}`);
+    }
+    const data = (await response.json());
+    const updated = {
+        ...creds,
+        access_token: data.access_token,
+        refresh_token: data.refresh_token,
+        expires_at: Date.now() + data.expires_in * 1000,
+    };
+    await saveCredentials(updated);
+    return updated;
+}
+export async function getValidToken() {
+    const creds = await loadCredentials();
+    if (!creds) {
+        throw new Error('Not authenticated. Run `noxctl init` to connect your Fortnox account.');
+    }
+    // Token still valid — use it
+    if (Date.now() <= creds.expires_at - 5 * 60 * 1000) {
+        return creds.access_token;
+    }
+    // Prefer client credentials when tenant_id is available (no refresh token management needed)
+    if (creds.tenant_id) {
+        try {
+            const refreshed = await getTokenViaClientCredentials(creds);
+            return refreshed.access_token;
+        }
+        catch {
+            // Fall through to refresh_token flow
+        }
+    }
+    // Fallback: standard refresh token flow
+    const refreshed = await refreshAccessToken(creds);
+    return refreshed.access_token;
+}
+export async function fetchTenantId(accessToken) {
+    const response = await fetch('https://api.fortnox.se/3/companyinformation', {
+        headers: {
+            Authorization: `Bearer ${accessToken}`,
+            Accept: 'application/json',
+        },
+    });
+    if (!response.ok)
+        return undefined;
+    const data = (await response.json());
+    return data.CompanyInformation?.DatabaseNumber;
+}
+function openBrowser(url) {
+    try {
+        if (process.platform === 'darwin') {
+            execFileSync('open', [url]);
+        }
+        else if (process.platform === 'win32') {
+            execFileSync('cmd', ['/c', 'start', url]);
+        }
+        else {
+            execFileSync('xdg-open', [url]);
+        }
+    }
+    catch {
+        console.log(`\nOpen this URL in your browser:\n${url}\n`);
+    }
+}
+export function escapeHtml(value) {
+    return value
+        .replace(/&/g, '&amp;')
+        .replace(/</g, '&lt;')
+        .replace(/>/g, '&gt;')
+        .replace(/"/g, '&quot;')
+        .replace(/'/g, '&#39;');
+}
+export function buildAuthorizationUrl(config, redirectUri, state) {
+    const params = new URLSearchParams({
+        client_id: config.clientId,
+        redirect_uri: redirectUri,
+        scope: SCOPES,
+        state,
+        response_type: 'code',
+        access_type: 'offline',
+    });
+    if (config.serviceAccount) {
+        params.set('account_type', 'service');
+    }
+    return `${FORTNOX_AUTH_URL}?${params.toString()}`;
+}
+export async function runOAuthSetup(config) {
+    const PORT = 9876;
+    const REDIRECT_URI = `http://localhost:${PORT}/callback`;
+    const oauthState = randomBytes(24).toString('hex');
+    return new Promise((resolve, reject) => {
+        let settled = false;
+        const finish = (err) => {
+            if (settled)
+                return;
+            settled = true;
+            if (err) {
+                reject(err);
+                return;
+            }
+            resolve();
+        };
+        const server = createServer(async (req, res) => {
+            const url = new URL(req.url || '/', `http://localhost:${PORT}`);
+            if (url.pathname === '/callback') {
+                const code = url.searchParams.get('code');
+                const error = url.searchParams.get('error');
+                const state = url.searchParams.get('state');
+                if (error) {
+                    const errorDesc = url.searchParams.get('error_description') || '';
+                    res.writeHead(400, { 'Content-Type': 'text/html; charset=utf-8' });
+                    res.end(`<h1>Autentisering misslyckades</h1><p>${escapeHtml(error)}</p><p>${escapeHtml(errorDesc)}</p>`);
+                    server.close();
+                    finish(new Error(`OAuth error: ${error}${errorDesc ? ` — ${errorDesc}` : ''}`));
+                    return;
+                }
+                if (state !== oauthState) {
+                    res.writeHead(400, { 'Content-Type': 'text/html; charset=utf-8' });
+                    res.end('<h1>Ogiltig OAuth-state</h1><p>Försök igen från noxctl init.</p>');
+                    server.close();
+                    finish(new Error('OAuth state mismatch'));
+                    return;
+                }
+                if (!code) {
+                    res.writeHead(400, { 'Content-Type': 'text/html; charset=utf-8' });
+                    res.end('<h1>Ingen auktoriseringskod mottagen</h1>');
+                    server.close();
+                    finish(new Error('No authorization code received'));
+                    return;
+                }
+                try {
+                    const tokens = await exchangeCodeForTokens(code, REDIRECT_URI, config);
+                    // Fetch tenant_id for client credentials flow
+                    console.log('Fetching tenant ID...');
+                    const tenantId = await fetchTenantId(tokens.access_token);
+                    const creds = {
+                        client_id: config.clientId,
+                        client_secret: config.clientSecret,
+                        access_token: tokens.access_token,
+                        refresh_token: tokens.refresh_token,
+                        expires_at: Date.now() + tokens.expires_in * 1000,
+                        tenant_id: tenantId,
+                    };
+                    await saveCredentials(creds);
+                    const tenantMsg = tenantId
+                        ? ' Client credentials flow enabled.'
+                        : ' (Tenant ID not found — using refresh token flow.)';
+                    res.writeHead(200, { 'Content-Type': 'text/html; charset=utf-8' });
+                    res.end('<h1>Klart!</h1><p>Fortnox MCP är nu kopplat till ditt konto. Du kan stänga den här fliken.</p>');
+                    console.log(`\nSetup complete! Credentials saved.${tenantMsg}\n`);
+                    console.log('Register in Claude Code with:');
+                    console.log('  claude mcp add fortnox -- noxctl serve\n');
+                    finish();
+                }
+                catch (err) {
+                    res.writeHead(500, { 'Content-Type': 'text/html; charset=utf-8' });
+                    const message = err instanceof Error ? err.message : String(err);
+                    res.end(`<h1>Något gick fel</h1><p>${escapeHtml(message)}</p>`);
+                    finish(err instanceof Error ? err : new Error(message));
+                }
+                finally {
+                    server.close();
+                }
+            }
+            else {
+                res.writeHead(404);
+                res.end('Not found');
+            }
+        });
+        server.listen(PORT, CALLBACK_HOST, () => {
+            const authUrl = buildAuthorizationUrl(config, REDIRECT_URI, oauthState);
+            console.log('Opening Fortnox login in your browser...');
+            openBrowser(authUrl);
+            console.log(`\nWaiting for authentication on http://${CALLBACK_HOST}:${PORT}...`);
+        });
+        server.on('error', (err) => {
+            finish(new Error(`Could not start callback server: ${err.message}`));
+        });
+    });
+}
+//# sourceMappingURL=auth.js.map

package/dist/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAA6C,MAAM,WAAW,CAAC;AACpF,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAEhF,MAAM,gBAAgB,GAAG,uCAAuC,CAAC;AACjE,MAAM,iBAAiB,GAAG,wCAAwC,CAAC;AACnE,MAAM,aAAa,GAAG,WAAW,CAAC;AAElC,MAAM,CAAC,MAAM,MAAM,GACjB,2FAA2F,CAAC;AAiB9F,MAAM,CAAC,KAAK,UAAU,eAAe;IACnC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,kBAAkB,EAAE,CAAC;QACxC,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,CAAC;QACvB,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAuB,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,KAAyB;IAC7D,MAAM,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;AAClD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,IAAY,EACZ,WAAmB,EACnB,MAAwB;IAExB,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC;QAC/B,UAAU,EAAE,oBAAoB;QAChC,IAAI;QACJ,YAAY,EAAE,WAAW;KAC1B,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,iBAAiB,EAAE;QAC9C,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,cAAc,EAAE,mCAAmC;YACnD,aAAa,EACX,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;SACzF;QACD,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE;KACtB,CAAC,CAAC;IAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CAAC,0BAA0B,QAAQ,CAAC,MAAM,MAAM,IAAI,EAAE,CAAC,CAAC;IACzE,CAAC;IAED,OAAO,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAI5B,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,KAAyB;IAEzB,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;IACjF,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC;QAC/B,UAAU,EAAE,oBAAoB;QAChC,KAAK,EAAE,MAAM;KACd,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,iBAAiB,EAAE;QAC9C,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,cAAc,EAAE,mCAAmC;YACnD,aAAa,EACX,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,aAAa,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;YACxF,QAAQ,EAAE,KAAK,CAAC,SAAS;SAC1B;QACD,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE;KACtB,CAAC,CAAC;IAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CAAC,4CAA4C,QAAQ,CAAC,MAAM,MAAM,IAAI,EAAE,CAAC,CAAC;IAC3F,CAAC;IAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAGlC,CAAC;IAEF,MAAM,OAAO,GAAuB;QAClC,GAAG,KAAK;QACR,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,UAAU,GAAG,IAAI;KAChD,CAAC;IAEF,MAAM,eAAe,CAAC,OAAO,CAAC,CAAC;IAC/B,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,KAAyB;IAChE,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC;QAC/B,UAAU,EAAE,eAAe;QAC3B,aAAa,EAAE,KAAK,CAAC,aAAa;KACnC,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,iBAAiB,EAAE;QAC9C,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,cAAc,EAAE,mCAAmC;YACnD,aAAa,EACX,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,aAAa,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;SACzF;QACD,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE;KACtB,CAAC,CAAC;IAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CAAC,yBAAyB,QAAQ,CAAC,MAAM,MAAM,IAAI,EAAE,CAAC,CAAC;IACxE,CAAC;IAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAIlC,CAAC;IAEF,MAAM,OAAO,GAAuB;QAClC,GAAG,KAAK;QACR,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,UAAU,GAAG,IAAI;KAChD,CAAC;IAEF,MAAM,eAAe,CAAC,OAAO,CAAC,CAAC;IAC/B,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa;IACjC,MAAM,KAAK,GAAG,MAAM,eAAe,EAAE,CAAC;IACtC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,uEAAuE,CAAC,CAAC;IAC3F,CAAC;IAED,6BAA6B;IAC7B,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,KAAK,CAAC,UAAU,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,EAAE,CAAC;QACnD,OAAO,KAAK,CAAC,YAAY,CAAC;IAC5B,CAAC;IAED,6FAA6F;IAC7F,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,MAAM,4BAA4B,CAAC,KAAK,CAAC,CAAC;YAC5D,OAAO,SAAS,CAAC,YAAY,CAAC;QAChC,CAAC;QAAC,MAAM,CAAC;YACP,qCAAqC;QACvC,CAAC;IACH,CAAC;IAED,wCAAwC;IACxC,MAAM,SAAS,GAAG,MAAM,kBAAkB,CAAC,KAAK,CAAC,CAAC;IAClD,OAAO,SAAS,CAAC,YAAY,CAAC;AAChC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,WAAmB;IACrD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,6CAA6C,EAAE;QAC1E,OAAO,EAAE;YACP,aAAa,EAAE,UAAU,WAAW,EAAE;YACtC,MAAM,EAAE,kBAAkB;SAC3B;KACF,CAAC,CAAC;IAEH,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,OAAO,SAAS,CAAC;IAEnC,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAElC,CAAC;IAEF,OAAO,IAAI,CAAC,kBAAkB,EAAE,cAAc,CAAC;AACjD,CAAC;AAED,SAAS,WAAW,CAAC,GAAW;IAC9B,IAAI,CAAC;QACH,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAClC,YAAY,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAC9B,CAAC;aAAM,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;YACxC,YAAY,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;QAC5C,CAAC;aAAM,CAAC;YACN,YAAY,CAAC,UAAU,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAClC,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,GAAG,CAAC,qCAAqC,GAAG,IAAI,CAAC,CAAC;IAC5D,CAAC;AACH,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,KAAa;IACtC,OAAO,KAAK;SACT,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;SACtB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC;SACvB,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AAC5B,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,MAAwB,EACxB,WAAmB,EACnB,KAAa;IAEb,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;QACjC,SAAS,EAAE,MAAM,CAAC,QAAQ;QAC1B,YAAY,EAAE,WAAW;QACzB,KAAK,EAAE,MAAM;QACb,KAAK;QACL,aAAa,EAAE,MAAM;QACrB,WAAW,EAAE,SAAS;KACvB,CAAC,CAAC;IAEH,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;QAC1B,MAAM,CAAC,GAAG,CAAC,cAAc,EAAE,SAAS,CAAC,CAAC;IACxC,CAAC;IAED,OAAO,GAAG,gBAAgB,IAAI,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC;AACpD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,MAAwB;IAC1D,MAAM,IAAI,GAAG,IAAI,CAAC;IAClB,MAAM,YAAY,GAAG,oBAAoB,IAAI,WAAW,CAAC;IACzD,MAAM,UAAU,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAEnD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,IAAI,OAAO,GAAG,KAAK,CAAC;QAEpB,MAAM,MAAM,GAAG,CAAC,GAAW,EAAE,EAAE;YAC7B,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,IAAI,GAAG,EAAE,CAAC;gBACR,MAAM,CAAC,GAAG,CAAC,CAAC;gBACZ,OAAO;YACT,CAAC;YACD,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC;QAEF,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,EAAE,GAAoB,EAAE,GAAmB,EAAE,EAAE;YAC9E,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,oBAAoB,IAAI,EAAE,CAAC,CAAC;YAEhE,IAAI,GAAG,CAAC,QAAQ,KAAK,WAAW,EAAE,CAAC;gBACjC,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;gBAC1C,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;gBAC5C,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;gBAE5C,IAAI,KAAK,EAAE,CAAC;oBACV,MAAM,SAAS,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAI,EAAE,CAAC;oBAClE,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,0BAA0B,EAAE,CAAC,CAAC;oBACnE,GAAG,CAAC,GAAG,CACL,yCAAyC,UAAU,CAAC,KAAK,CAAC,UAAU,UAAU,CAAC,SAAS,CAAC,MAAM,CAChG,CAAC;oBACF,MAAM,CAAC,KAAK,EAAE,CAAC;oBACf,MAAM,CAAC,IAAI,KAAK,CAAC,gBAAgB,KAAK,GAAG,SAAS,CAAC,CAAC,CAAC,MAAM,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;oBAChF,OAAO;gBACT,CAAC;gBAED,IAAI,KAAK,KAAK,UAAU,EAAE,CAAC;oBACzB,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,0BAA0B,EAAE,CAAC,CAAC;oBACnE,GAAG,CAAC,GAAG,CAAC,kEAAkE,CAAC,CAAC;oBAC5E,MAAM,CAAC,KAAK,EAAE,CAAC;oBACf,MAAM,CAAC,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC,CAAC;oBAC1C,OAAO;gBACT,CAAC;gBAED,IAAI,CAAC,IAAI,EAAE,CAAC;oBACV,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,0BAA0B,EAAE,CAAC,CAAC;oBACnE,GAAG,CAAC,GAAG,CAAC,2CAA2C,CAAC,CAAC;oBACrD,MAAM,CAAC,KAAK,EAAE,CAAC;oBACf,MAAM,CAAC,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC,CAAC;oBACpD,OAAO;gBACT,CAAC;gBAED,IAAI,CAAC;oBACH,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC,IAAI,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC;oBAEvE,8CAA8C;oBAC9C,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;oBACrC,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;oBAE1D,MAAM,KAAK,GAAuB;wBAChC,SAAS,EAAE,MAAM,CAAC,QAAQ;wBAC1B,aAAa,EAAE,MAAM,CAAC,YAAY;wBAClC,YAAY,EAAE,MAAM,CAAC,YAAY;wBACjC,aAAa,EAAE,MAAM,CAAC,aAAa;wBACnC,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,UAAU,GAAG,IAAI;wBACjD,SAAS,EAAE,QAAQ;qBACpB,CAAC;oBAEF,MAAM,eAAe,CAAC,KAAK,CAAC,CAAC;oBAE7B,MAAM,SAAS,GAAG,QAAQ;wBACxB,CAAC,CAAC,mCAAmC;wBACrC,CAAC,CAAC,oDAAoD,CAAC;oBAEzD,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,0BAA0B,EAAE,CAAC,CAAC;oBACnE,GAAG,CAAC,GAAG,CACL,gGAAgG,CACjG,CAAC;oBAEF,OAAO,CAAC,GAAG,CAAC,uCAAuC,SAAS,IAAI,CAAC,CAAC;oBAClE,OAAO,CAAC,GAAG,CAAC,+BAA+B,CAAC,CAAC;oBAC7C,OAAO,CAAC,GAAG,CAAC,4CAA4C,CAAC,CAAC;oBAC1D,MAAM,EAAE,CAAC;gBACX,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,0BAA0B,EAAE,CAAC,CAAC;oBACnE,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;oBACjE,GAAG,CAAC,GAAG,CAAC,6BAA6B,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;oBAChE,MAAM,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;gBAC1D,CAAC;wBAAS,CAAC;oBACT,MAAM,CAAC,KAAK,EAAE,CAAC;gBACjB,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;gBACnB,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YACvB,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,aAAa,EAAE,GAAG,EAAE;YACtC,MAAM,OAAO,GAAG,qBAAqB,CAAC,MAAM,EAAE,YAAY,EAAE,UAAU,CAAC,CAAC;YACxE,OAAO,CAAC,GAAG,CAAC,0CAA0C,CAAC,CAAC;YACxD,WAAW,CAAC,OAAO,CAAC,CAAC;YACrB,OAAO,CAAC,GAAG,CAAC,0CAA0C,aAAa,IAAI,IAAI,KAAK,CAAC,CAAC;QACpF,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACzB,MAAM,CAAC,IAAI,KAAK,CAAC,oCAAoC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QACvE,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/cli.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=cli.d.ts.map