noxctl 0.1.0 → 0.3.0

package/README.md

@@ -39,14 +39,21 @@ Fortnox product plans, API activation requirements, and integration licensing ca
    - Copy your **Client ID** and **Client Secret**
 4. On the **Integration** tab, enable these scopes under **Behörigheter** / **Permissions**:
 
-   | Swedish (SV)         | English (EN)        |
-   |----------------------|---------------------|
-   | Artikel              | Article             |
-   | Bokföring            | Bookkeeping         |
-   | Faktura              | Invoice             |
-   | Företagsinformation  | Company Information |
-   | Inställningar        | Settings            |
-   | Kund                 | Customer            |
+   | Swedish (SV)         | English (EN)        | Needed for                                     |
+   |----------------------|---------------------|------------------------------------------------|
+   | Artikel              | Article             | Articles, prices, price lists                  |
+   | Bokföring            | Bookkeeping         | Vouchers, accounts, financial reports          |
+   | Faktura              | Invoice             | Invoices, invoice payments, offers, orders, tax reductions |
+   | Företagsinformation  | Company Information | Company info                                   |
+   | Inställningar        | Settings            | Financial year, locked period                  |
+   | Kund                 | Customer            | Customers                                      |
+   | Leverantör           | Supplier            | Suppliers                                      |
+   | Leverantörsfaktura   | Supplier Invoice    | Supplier invoices, supplier invoice payments   |
+   | Projekt              | Project             | Projects                                       |
+   | Kostnadsställe       | Cost Center         | Cost centers                                   |
+   | Priser               | Price               | Price lists, prices                            |
+
+   Enable every scope for the resources you intend to use. Missing scopes surface as `403 Forbidden` with a hint pointing at the right one.
 
 5. Save the integration
 
@@ -108,45 +115,283 @@ node dist/cli.js company info
 
 You should see your company name, organisation number, and address. If this works, you're all set.
 
+## Profiles (multi-tenant)
+
+noxctl supports multiple Fortnox tenants from a single installation — useful if you bookkeep for several companies, or want to keep a sandbox tenant separate from production. Each profile has its own OAuth credentials in the OS secure store (macOS Keychain / Linux Secret Service / Windows DPAPI), keyed by profile name.
+
+### Running against a specific profile
+
+Three ways to pick the profile, in precedence order (highest wins):
+
+1. **`--profile <name>` flag** — explicit, per-command
+2. **`NOXCTL_PROFILE` environment variable** — scoped to a shell session
+3. **Active pointer** — `~/.fortnox-mcp/active-profile`, set by `noxctl profile use`
+
+If none of these is set, noxctl uses the `default` profile (what existing users have been using all along — no opt-in required).
+
+```bash
+noxctl init --profile staging              # authorize a second tenant
+noxctl --profile staging invoices list     # one-off against staging
+NOXCTL_PROFILE=staging noxctl company info # shell-scoped
+noxctl profile use staging                 # sticky — persists to the pointer
+noxctl profile current                     # show resolved profile + source
+noxctl profile list                        # list known profiles
+```
+
+### MCP server
+
+When launched by Claude Desktop / claude.ai, the MCP server resolves the profile from `NOXCTL_PROFILE` and the active pointer at startup, and binds for the session. When launched via `noxctl --profile <name> serve`, the CLI forwards the flag.
+
+To run multiple MCP servers (one per tenant) in parallel, register them with distinct names and scoped environments:
+
+```bash
+claude mcp add fortnox-prod     -- npx noxctl serve
+claude mcp add fortnox-staging  -e NOXCTL_PROFILE=staging -- npx noxctl serve
+```
+
+Non-default sessions print a `[profile: <name>]` stderr banner on startup and prefix every Fortnox API error and token-refresh failure with the same tag so mis-bound sessions are diagnosable from a single error line.
+
+### Fail-closed pointer semantics
+
+If the active pointer becomes unreadable or corrupt and no explicit `--profile` flag or `NOXCTL_PROFILE` is set, `noxctl serve` **refuses to start** rather than silently falling back to `default`. This prevents a corrupted pointer from routing production MCP sessions to the wrong tenant. The CLI's `doctor` and `profile use` commands are exempt — they can still run against a broken pointer so you can repair it.
+
+## YubiKey-locked keychain (macOS)
+
+By default, credentials live in your macOS **login keychain**, which unlocks automatically when you log in. That's convenient, but it means an AI agent (or anything running as you) can read the tokens without a per-session gesture from you.
+
+The optional **dedicated keychain** moves credentials into a separate, lock-on-sleep keychain whose password is derived from your YubiKey via HMAC-SHA1 challenge-response. You unlock it once per session with a single tap; it re-locks when your Mac sleeps. The keychain password is never typed or stored — it only exists on the YubiKey.
+
+This is opt-in and macOS-only. It does not change how credentials are stored on Linux or Windows.
+
+### One-time YubiKey setup
+
+Program OTP slot 2 for challenge-response (requires touch). **This writes only the empty OTP slot 2** — FIDO2, PIV, OATH, OpenPGP, and slot 1 are untouched, and it is reversible with `ykman otp delete 2`.
+
+```bash
+brew install ykman                              # if not already installed
+ykman otp chalresp --generate --touch 2         # program slot 2
+```
+
+### Enable it
+
+```bash
+noxctl keychain init      # generate challenge, tap to derive the password,
+                          # create the locked keychain, copy existing creds in
+```
+
+`init` uses **copy-and-keep**: your existing login-keychain credentials are copied into the new keychain but left in place as a rollback. Once you've confirmed the new flow works, remove the originals:
+
+```bash
+noxctl keychain seal      # delete the login-keychain copies (irreversible)
+```
+
+Until you `seal`, the login copies remain readable without a tap — so the per-session protection isn't fully in effect.
+
+### Daily use
+
+```bash
+noxctl keychain unlock    # tap your YubiKey — open until the Mac next sleeps
+noxctl keychain status    # mode, lock state, ykman/YubiKey presence
+noxctl keychain lock      # lock immediately
+```
+
+When the keychain is locked, any command that needs credentials fails fast with a message telling you to run `noxctl keychain unlock` — it never pops a macOS password dialog (the challenge-response password can't be typed into one).
+
+### Recovery if you lose the YubiKey
+
+The keychain password lives only on the key, so a lost or re-programmed key means the dedicated keychain can't be unlocked. As long as you have **not** run `seal`, your credentials are still in the login keychain — delete the dedicated keychain and challenge file to fall back:
+
+```bash
+security delete-keychain ~/Library/Keychains/fortnox-mcp.keychain-db
+rm ~/.fortnox-mcp/keychain-challenge
+```
+
+If you *have* sealed, re-run `noxctl init` to re-authenticate from scratch.
+
 ## Tools
 
-Every operation is available both as a CLI command and as an MCP tool. The CLI is the primary interface; the MCP server exposes the same operations to AI agents.
+Every operation is available both as a CLI command and as an MCP tool. The CLI is the primary interface; the MCP server exposes the same operations to AI agents. All mutations — every row labeled `(mutation)` — prompt for confirmation on a TTY and require `--yes` (CLI) or `confirm: true` (MCP) when piped. See [Mutation safety](#mutation-safety).
 
 ### Customers
 
 | CLI | MCP tool | Description |
 |-----|----------|-------------|
 | `noxctl customers list [--search <term>]` | `fortnox_list_customers` | List/search customers |
-| `noxctl customers get <number>` | `fortnox_get_customer` | Get a single customer by customer number |
-| `noxctl customers create --name <name>` | `fortnox_create_customer` | Create a new customer (mutation) |
-| `noxctl customers update <number> --input <file>` | `fortnox_update_customer` | Update an existing customer (mutation) |
+| `noxctl customers get <number>` | `fortnox_get_customer` | Get a single customer |
+| `noxctl customers create --name <name>` | `fortnox_create_customer` | Create a customer (mutation) |
+| `noxctl customers update <number> --input <file>` | `fortnox_update_customer` | Update a customer (mutation) |
+
+### Suppliers
+
+| CLI | MCP tool | Description |
+|-----|----------|-------------|
+| `noxctl suppliers list [--search <term>]` | `fortnox_list_suppliers` | List/search suppliers |
+| `noxctl suppliers get <number>` | `fortnox_get_supplier` | Get a single supplier |
+| `noxctl suppliers create --name <name>` | `fortnox_create_supplier` | Create a supplier (mutation) |
+| `noxctl suppliers update <number> --input <file>` | `fortnox_update_supplier` | Update a supplier (mutation) |
+
+### Articles
+
+| CLI | MCP tool | Description |
+|-----|----------|-------------|
+| `noxctl articles list [--search <term>]` | `fortnox_list_articles` | List/search articles |
+| `noxctl articles get <number>` | `fortnox_get_article` | Get a single article |
+| `noxctl articles create --description <text>` | `fortnox_create_article` | Create an article (mutation) |
+| `noxctl articles update <number> --input <file>` | `fortnox_update_article` | Update an article (mutation) |
 
 ### Invoices
 
 | CLI | MCP tool | Description |
 |-----|----------|-------------|
 | `noxctl invoices list [--filter <status>] [--customer <number>]` | `fortnox_list_invoices` | List/filter invoices. Filters: `cancelled`, `fullypaid`, `unpaid`, `unpaidoverdue`, `unbooked` |
-| `noxctl invoices get <docNumber>` | `fortnox_get_invoice` | Get a single invoice by document number |
-| `noxctl invoices create --customer <number> --input <file>` | `fortnox_create_invoice` | Create an invoice with line items (mutation) |
+| `noxctl invoices get <docNumber>` | `fortnox_get_invoice` | Get a single invoice |
+| `noxctl invoices create --customer <number> --input <file>` | `fortnox_create_invoice` | Create an invoice (mutation) |
 | `noxctl invoices update <docNumber> --input <file>` | `fortnox_update_invoice` | Update an invoice that has not been bookkeept (mutation) |
-| `noxctl invoices send <docNumber> [--method email\|print\|einvoice] [--subject <s>] [--body <s>] [--bcc <email>]` | `fortnox_send_invoice` | Send invoice via email (default), print, or e-invoice. Supports email subject, body, and BCC (Blind Carbon Copy) (mutation) |
-| `noxctl invoices bookkeep <docNumber>` | `fortnox_bookkeep_invoice` | Book an invoice (mutation) |
+| `noxctl invoices send <docNumber> [--method email\|print\|einvoice] [--subject <s>] [--body <s>] [--bcc <email>]` | `fortnox_send_invoice` | Send via email (default), print, or e-invoice (mutation) |
+| `noxctl invoices bookkeep <docNumber>` | `fortnox_bookkeep_invoice` | Bookkeep an invoice (mutation) |
 | `noxctl invoices credit <docNumber>` | `fortnox_credit_invoice` | Credit an invoice (mutation) |
 
+### Invoice payments (inbetalningar)
+
+| CLI | MCP tool | Description |
+|-----|----------|-------------|
+| `noxctl invoice-payments list [--invoice <number>]` / alias `noxctl ip list` | `fortnox_list_invoice_payments` | List invoice payments |
+| `noxctl invoice-payments get <number>` | `fortnox_get_invoice_payment` | Get a single invoice payment |
+| `noxctl invoice-payments create --invoice <n> --amount <a> --date <date>` | `fortnox_create_invoice_payment` | Register a payment against an invoice (mutation) |
+| `noxctl invoice-payments bookkeep <number>` | — | Bookkeep an invoice payment (mutation) |
+| `noxctl invoice-payments delete <number>` | `fortnox_delete_invoice_payment` | Delete an invoice payment (mutation) |
+
+### Supplier invoices (leverantörsfakturor)
+
+| CLI | MCP tool | Description |
+|-----|----------|-------------|
+| `noxctl supplier-invoices list [--filter <status>] [--supplier <number>]` / alias `si list` | `fortnox_list_supplier_invoices` | List/filter supplier invoices |
+| `noxctl supplier-invoices get <givenNumber>` | `fortnox_get_supplier_invoice` | Get a single supplier invoice |
+| `noxctl supplier-invoices create --supplier <n> --input <file>` | `fortnox_create_supplier_invoice` | Create a supplier invoice (mutation) |
+| `noxctl supplier-invoices bookkeep <givenNumber>` | `fortnox_bookkeep_supplier_invoice` | Bookkeep a supplier invoice (mutation) |
+
+### Supplier invoice payments (utbetalningar)
+
+| CLI | MCP tool | Description |
+|-----|----------|-------------|
+| `noxctl supplier-invoice-payments list [--invoice <number>]` / alias `sip list` | `fortnox_list_supplier_invoice_payments` | List supplier invoice payments |
+| `noxctl supplier-invoice-payments get <number>` | `fortnox_get_supplier_invoice_payment` | Get a single supplier invoice payment |
+| `noxctl supplier-invoice-payments create --invoice <n> --amount <a> --date <date>` | `fortnox_create_supplier_invoice_payment` | Register a payment against a supplier invoice (mutation) |
+| `noxctl supplier-invoice-payments delete <number>` | `fortnox_delete_supplier_invoice_payment` | Delete a supplier invoice payment (mutation) |
+
+### Offers (offerter)
+
+| CLI | MCP tool | Description |
+|-----|----------|-------------|
+| `noxctl offers list [--filter <status>] [--customer <number>]` | `fortnox_list_offers` | List/filter offers. Filters: `cancelled`, `expired`, `ordercreated`, `invoicecreated` |
+| `noxctl offers get <docNumber>` | `fortnox_get_offer` | Get a single offer |
+| `noxctl offers create --customer <number> --input <file>` | `fortnox_create_offer` | Create an offer (mutation) |
+| `noxctl offers update <docNumber> --input <file>` | `fortnox_update_offer` | Update an offer (mutation) |
+| `noxctl offers create-invoice <docNumber>` | `fortnox_create_invoice_from_offer` | Convert offer → invoice (mutation) |
+| `noxctl offers create-order <docNumber>` | `fortnox_create_order_from_offer` | Convert offer → order (mutation) |
+
+### Orders (ordrar)
+
+| CLI | MCP tool | Description |
+|-----|----------|-------------|
+| `noxctl orders list [--filter <status>] [--customer <number>]` | `fortnox_list_orders` | List/filter orders. Filters: `cancelled`, `invoicecreated`, `invoicenotcreated` |
+| `noxctl orders get <docNumber>` | `fortnox_get_order` | Get a single order |
+| `noxctl orders create --customer <number> --input <file>` | `fortnox_create_order` | Create an order (mutation) |
+| `noxctl orders update <docNumber> --input <file>` | `fortnox_update_order` | Update an order (mutation) |
+| `noxctl orders create-invoice <docNumber>` | `fortnox_create_invoice_from_order` | Convert order → invoice (mutation) |
+
 ### Bookkeeping
 
 | CLI | MCP tool | Description |
 |-----|----------|-------------|
 | `noxctl vouchers list [--series <s>] [--from <date>] [--to <date>]` | `fortnox_list_vouchers` | List vouchers, optionally filtered by series and date range |
+| `noxctl vouchers get <series> <number>` | `fortnox_get_voucher` | Get a single voucher with rows |
 | `noxctl vouchers create --input <file>` | `fortnox_create_voucher` | Create a voucher with debit/credit rows (mutation) |
+| `noxctl vouchers attach <series> <number> <file...> [--year]` | `fortnox_attach_voucher_files` | Upload receipt/underlag files and link them to a voucher (mutation; needs the Fortnox archive scope) |
 | `noxctl accounts list [--search <term>]` | `fortnox_list_accounts` | View chart of accounts, search by name or number |
 
+### Financial reports
+
+| CLI | MCP tool | Description |
+|-----|----------|-------------|
+| `noxctl reports income [--year <n>] [--from <date>] [--to <date>]` / alias `reports resultat` | `fortnox_income_statement` | Income statement (resultaträkning) |
+| `noxctl reports balance [--year <n>] [--to <date>]` / alias `reports balans` | `fortnox_balance_sheet` | Balance sheet (balansräkning) |
+
 ### Tax
 
 | CLI | MCP tool | Description |
 |-----|----------|-------------|
 | `noxctl tax report --from <date> --to <date>` | `fortnox_tax_report` | Informational VAT summary for a period. Reconcile against Fortnox before filing. Dates in `YYYY-MM-DD` format |
 
+### Tax reductions (ROT/RUT)
+
+| CLI | MCP tool | Description |
+|-----|----------|-------------|
+| `noxctl tax-reductions list [--filter <type>]` | `fortnox_list_taxreductions` | List tax reductions (ROT/RUT) |
+| `noxctl tax-reductions get <id>` | `fortnox_get_taxreduction` | Get a single tax reduction |
+| `noxctl tax-reductions create --reference <n> --type <rot\|rut> --document-type <type> --customer-name <name> --amount <öre>` | `fortnox_create_taxreduction` | Create a ROT/RUT tax reduction (mutation) |
+
+### Projects
+
+| CLI | MCP tool | Description |
+|-----|----------|-------------|
+| `noxctl projects list` | `fortnox_list_projects` | List projects |
+| `noxctl projects get <number>` | `fortnox_get_project` | Get a single project |
+| `noxctl projects create --description <text>` | `fortnox_create_project` | Create a project (mutation) |
+| `noxctl projects update <number> --input <file>` | `fortnox_update_project` | Update a project (mutation) |
+
+### Cost centers (kostnadsställen)
+
+| CLI | MCP tool | Description |
+|-----|----------|-------------|
+| `noxctl costcenters list` | `fortnox_list_costcenters` | List cost centers |
+| `noxctl costcenters get <code>` | `fortnox_get_costcenter` | Get a single cost center |
+| `noxctl costcenters create --code <code> --description <text>` | `fortnox_create_costcenter` | Create a cost center (mutation) |
+| `noxctl costcenters update <code> --input <file>` | `fortnox_update_costcenter` | Update a cost center (mutation) |
+| `noxctl costcenters delete <code>` | `fortnox_delete_costcenter` | Delete a cost center (mutation) |
+
+### Price lists and prices
+
+| CLI | MCP tool | Description |
+|-----|----------|-------------|
+| `noxctl pricelists list` | `fortnox_list_pricelists` | List price lists |
+| `noxctl pricelists get <code>` | `fortnox_get_pricelist` | Get a single price list |
+| `noxctl pricelists create --code <code> --description <text>` | `fortnox_create_pricelist` | Create a price list (mutation) |
+| `noxctl pricelists update <code> --input <file>` | `fortnox_update_pricelist` | Update a price list (mutation) |
+| `noxctl prices list --pricelist <code> [--article <number>]` | `fortnox_list_prices` | List prices within a price list |
+| `noxctl prices get --pricelist <code> --article <number>` | `fortnox_get_price` | Get a specific price |
+| `noxctl prices update --pricelist <code> --article <number> --input <file>` | `fortnox_update_price` | Update a price (mutation) |
+
+### Contracts (avtal — recurring invoicing)
+
+| CLI | MCP tool | Description |
+|-----|----------|-------------|
+| `noxctl contracts list [--filter active\|inactive\|finished]` | `fortnox_list_contracts` | List/filter contracts |
+| `noxctl contracts get <number>` | `fortnox_get_contract` | Get a single contract |
+| `noxctl contracts create --customer <number> --input <file>` | `fortnox_create_contract` | Create a contract (mutation) |
+| `noxctl contracts update <number> --input <file>` | `fortnox_update_contract` | Update a contract (mutation) |
+| `noxctl contracts finish <number>` | `fortnox_finish_contract` | Finish a contract (mutation) |
+| `noxctl contracts create-invoice <number>` | `fortnox_create_invoice_from_contract` | Create the next invoice now (mutation) |
+| `noxctl contracts increase-invoice-count <number>` | `fortnox_increase_contract_invoice_count` | Extend by one invoice (mutation) |
+
+### Financial years and locked period
+
+| CLI | MCP tool | Description |
+|-----|----------|-------------|
+| `noxctl financial-years list [--date <date>]` | `fortnox_list_financialyears` | List financial years (räkenskapsår) |
+| `noxctl financial-years get <id>` | `fortnox_get_financialyear` | Get a single financial year |
+| `noxctl financial-years locked-period` | `fortnox_get_lockedperiod` | Show through which date bookkeeping is locked |
+
+### Analytics and dashboard
+
+| CLI | MCP tool | Description |
+|-----|----------|-------------|
+| `noxctl analytics overdue` | `fortnox_overdue_invoices` | Overdue invoices summary |
+| `noxctl analytics unpaid` | `fortnox_unpaid_totals` | Outstanding receivables, with overdue split |
+| `noxctl analytics top-customers [--period <period>]` | `fortnox_top_customers` | Top customers by invoiced amount |
+| `noxctl analytics vat --period <period>` | `fortnox_vat_summary` | VAT summary with net VAT position |
+| `noxctl dashboard` | — | At-a-glance: outstanding, overdue, recent invoices, monthly revenue |
+
 ### Company
 
 | CLI | MCP tool | Description |
@@ -160,6 +405,10 @@ Every operation is available both as a CLI command and as an MCP tool. The CLI i
 | `noxctl init` | — | Interactive setup wizard — connects to Fortnox, stores credentials, optionally registers MCP server |
 | `noxctl doctor` | `fortnox_status` | Validate setup: Node version, credentials, token status, API connectivity, and scopes |
 | `noxctl logout` | — | Remove stored credentials from the OS keychain |
+| `noxctl profile use <name>` | — | Set the active profile (writes `~/.fortnox-mcp/active-profile`) |
+| `noxctl profile current` | — | Show the currently resolved profile and where it came from |
+| `noxctl profile list` | — | List known profiles from the index |
+| `noxctl completion <bash\|zsh\|fish>` | — | Generate a shell completion script |
 
 ## CLI output
 
@@ -172,6 +421,14 @@ noxctl -o table invoices list     # force table
 noxctl invoices list | jq .       # auto-JSON (piped)
 ```
 
+JSON output has a stable envelope: list commands wrap under the plural resource key (`{"Invoices": [...], "MetaInformation": {...}}`) and single-resource commands under the singular key (`{"Invoice": {...}}`), so scripted callers can rely on a fixed accessor. Failures in JSON mode are emitted to stderr as a structured envelope:
+
+```json
+{ "error": { "status": 400, "message": "...", "source": "fortnox-api" } }
+```
+
+Natural date periods are accepted wherever `--from`/`--to` work, via `--period`: `Q1`, `2025-Q3`, `march`/`mars`, `this-quarter`, `last-quarter`, `this-month`, `last-month`, `ytd`, `this-year`, `last-year`, or a bare year. Periods are **calendar-year** based (broken fiscal years are not yet considered).
+
 When running from a local clone instead of an installed binary, replace `noxctl` with `node dist/cli.js`.
 
 ## Mutation safety
@@ -228,16 +485,18 @@ Ask Claude naturally — works in both Swedish and English:
 
 ## Troubleshooting
 
-**"FORTNOX_CLIENT_ID and FORTNOX_CLIENT_SECRET must be set"**
+**"stdin is not a TTY. Set FORTNOX_CLIENT_ID and FORTNOX_CLIENT_SECRET env vars to run non-interactively"**
 
-Environment variables were not passed to the command. Use `export` to set them in your shell first:
+`noxctl init` is normally interactive — it prompts for the Client ID and Secret. In CI or other non-TTY contexts it falls back to reading them from environment variables:
 
 ```bash
 export FORTNOX_CLIENT_ID=<your-id>
 export FORTNOX_CLIENT_SECRET=<your-secret>
+export FORTNOX_SERVICE_ACCOUNT=1   # optional, enables service account mode
+noxctl init
 ```
 
-Then run setup again. This avoids issues with long commands wrapping across lines.
+Once authorized, the tokens are stored in the OS keychain. No env vars are needed afterwards — only for re-running `init` non-interactively.
 
 **"Not authenticated. Run `noxctl init`"**
 
@@ -245,16 +504,7 @@ Credentials are missing or were not saved. Re-run the setup step. On macOS, chec
 
 **403 Forbidden from Fortnox API**
 
-Your app is missing required scopes. Go to [developer.fortnox.se](https://developer.fortnox.se/), open your app, and check that these are enabled under **Behörigheter** / **Permissions**:
-
-| Swedish (SV)         | English (EN)        |
-|----------------------|---------------------|
-| Artikel              | Article             |
-| Bokföring            | Bookkeeping         |
-| Faktura              | Invoice             |
-| Företagsinformation  | Company Information |
-| Inställningar        | Settings            |
-| Kund                 | Customer            |
+Your app is missing one or more scopes. The error message names the specific scope needed (e.g. `Missing "supplier" scope`). Go to [developer.fortnox.se](https://developer.fortnox.se/), open your app, and enable the matching permission under **Behörigheter** / **Permissions** — see the full table in [Setup → Create a Fortnox app](#1-create-a-fortnox-app). Then re-run `noxctl init`.
 
 **"Token refresh failed"**
 

package/dist/auth.d.ts

@@ -1,4 +1,5 @@
-export declare const SCOPES = "article customer invoice supplier supplierinvoice bookkeeping companyinformation settings";
+export declare const SCOPES = "article customer invoice payment supplier supplierinvoice bookkeeping companyinformation settings inbox connectfile";
+export declare const CREDENTIAL_SCHEMA_VERSION = 2;
 export interface FortnoxCredentials {
     client_id: string;
     client_secret: string;
@@ -6,24 +7,31 @@ export interface FortnoxCredentials {
     refresh_token: string;
     expires_at: number;
     tenant_id?: string;
+    company_name?: string;
+    schema_version?: number;
+    last_write_epoch?: number;
 }
 export interface FortnoxAppConfig {
     clientId: string;
     clientSecret: string;
     serviceAccount?: boolean;
 }
-export declare function loadCredentials(): Promise<FortnoxCredentials | null>;
-export declare function saveCredentials(creds: FortnoxCredentials): Promise<void>;
+export declare function setResolvedProfile(name: string): void;
+export declare function getResolvedProfile(): string;
+export declare function __resetLegacyObservedForDefault(): void;
+export declare function loadCredentials(profile?: string): Promise<FortnoxCredentials | null>;
+export declare function saveCredentials(creds: FortnoxCredentials, profile?: string): Promise<void>;
 export declare function exchangeCodeForTokens(code: string, redirectUri: string, config: FortnoxAppConfig): Promise<{
     access_token: string;
     refresh_token: string;
     expires_in: number;
 }>;
-export declare function getTokenViaClientCredentials(creds: FortnoxCredentials): Promise<FortnoxCredentials>;
-export declare function refreshAccessToken(creds: FortnoxCredentials): Promise<FortnoxCredentials>;
-export declare function getValidToken(): Promise<string>;
+export declare function getTokenViaClientCredentials(creds: FortnoxCredentials, profile?: string): Promise<FortnoxCredentials>;
+export declare function refreshAccessToken(creds: FortnoxCredentials, profile?: string): Promise<FortnoxCredentials>;
+export declare function getValidToken(profile?: string): Promise<string>;
 export declare function fetchTenantId(accessToken: string): Promise<string | undefined>;
+export declare function fetchCompanyNameSafe(accessToken: string): Promise<string | undefined>;
 export declare function escapeHtml(value: string): string;
 export declare function buildAuthorizationUrl(config: FortnoxAppConfig, redirectUri: string, state: string): string;
-export declare function runOAuthSetup(config: FortnoxAppConfig): Promise<void>;
+export declare function runOAuthSetup(config: FortnoxAppConfig, profile?: string): Promise<void>;
 //# sourceMappingURL=auth.d.ts.map

package/dist/auth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AASA,eAAO,MAAM,MAAM,8FAC0E,CAAC;AAE9F,MAAM,WAAW,kBAAkB;IACjC,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED,wBAAsB,eAAe,IAAI,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAQ1E;AAED,wBAAsB,eAAe,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CAE9E;AAED,wBAAsB,qBAAqB,CACzC,IAAI,EAAE,MAAM,EACZ,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,gBAAgB,GACvB,OAAO,CAAC;IAAE,YAAY,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CAAC,CA2B9E;AAED,wBAAsB,4BAA4B,CAChD,KAAK,EAAE,kBAAkB,GACxB,OAAO,CAAC,kBAAkB,CAAC,CAuC7B;AAED,wBAAsB,kBAAkB,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAoC/F;AAED,wBAAsB,aAAa,IAAI,OAAO,CAAC,MAAM,CAAC,CAwBrD;AAED,wBAAsB,aAAa,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAepF;AAgBD,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAOhD;AAED,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,gBAAgB,EACxB,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,MAAM,GACZ,MAAM,CAeR;AAED,wBAAsB,aAAa,CAAC,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CA6G3E"}
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAYA,eAAO,MAAM,MAAM,wHACoG,CAAC;AAExH,eAAO,MAAM,yBAAyB,IAAI,CAAC;AAE3C,MAAM,WAAW,kBAAkB;IACjC,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAcD,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAErD;AAED,wBAAgB,kBAAkB,IAAI,MAAM,CAE3C;AAGD,wBAAgB,+BAA+B,IAAI,IAAI,CAEtD;AAuBD,wBAAsB,eAAe,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CA2B1F;AAED,wBAAsB,eAAe,CAAC,KAAK,EAAE,kBAAkB,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAUhG;AAED,wBAAsB,qBAAqB,CACzC,IAAI,EAAE,MAAM,EACZ,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,gBAAgB,GACvB,OAAO,CAAC;IAAE,YAAY,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CAAC,CA2B9E;AAED,wBAAsB,4BAA4B,CAChD,KAAK,EAAE,kBAAkB,EACzB,OAAO,CAAC,EAAE,MAAM,GACf,OAAO,CAAC,kBAAkB,CAAC,CAwC7B;AAED,wBAAsB,kBAAkB,CACtC,KAAK,EAAE,kBAAkB,EACzB,OAAO,CAAC,EAAE,MAAM,GACf,OAAO,CAAC,kBAAkB,CAAC,CAqC7B;AAED,wBAAsB,aAAa,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CA8BrE;AAED,wBAAsB,aAAa,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAepF;AAED,wBAAsB,oBAAoB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAgB3F;AAgBD,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAOhD;AAED,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,gBAAgB,EACxB,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,MAAM,GACZ,MAAM,CAeR;AAED,wBAAsB,aAAa,CACjC,MAAM,EAAE,gBAAgB,EACxB,OAAO,GAAE,MAAwB,GAChC,OAAO,CAAC,IAAI,CAAC,CAgIf"}