noxctl 0.1.0 → 0.3.0

package/dist/credentials-store.js

@@ -3,11 +3,60 @@ import fsSync from 'node:fs';
 import os from 'node:os';
 import path from 'node:path';
 import { execFileSync, spawnSync } from 'node:child_process';
-const CREDENTIALS_DIR = path.join(process.env.HOME || process.env.USERPROFILE || '~', '.fortnox-mcp');
-const LEGACY_CREDENTIALS_FILE = path.join(CREDENTIALS_DIR, 'credentials.json');
-const WINDOWS_CREDENTIALS_FILE = path.join(CREDENTIALS_DIR, 'credentials.dpapi');
+import { DEFAULT_PROFILE, LEGACY_KEYCHAIN_ACCOUNT, keychainAccount, sanitizeForFilename, validateProfileName, } from './profile-name.js';
+import { configDir } from './config-paths.js';
+import { activeKeychainPath, readDedicatedSecret } from './keychain-target.js';
+function legacyCredentialsFile() {
+    return path.join(configDir(), 'credentials.json');
+}
+function legacyWindowsCredentialsFile() {
+    return path.join(configDir(), 'credentials.dpapi');
+}
 const SERVICE_NAME = 'fortnox-mcp';
-const ACCOUNT_NAME = 'default';
+function normalizeProfile(profile) {
+    const validated = validateProfileName(profile).toLowerCase();
+    return { normalized: validated, isDefault: validated === DEFAULT_PROFILE };
+}
+function windowsCredentialsFile(profile) {
+    return path.join(configDir(), `credentials.${sanitizeForFilename(profile)}.dpapi`);
+}
+// Dual-write to the legacy slot during the 0.2.x compatibility window so an
+// older 0.1 binary can still read credentials written by this one. Flip to
+// `false` in 0.3.0 and delete the legacy reader branch below.
+// REMOVE IN 0.3.0
+export const LEGACY_DUAL_WRITE = true;
+function parseBlobMeta(blob) {
+    try {
+        const parsed = JSON.parse(blob);
+        const schema = typeof parsed.schema_version === 'number' ? parsed.schema_version : 1;
+        const epoch = typeof parsed.last_write_epoch === 'number' ? parsed.last_write_epoch : 0;
+        return { schema, epoch };
+    }
+    catch {
+        return null;
+    }
+}
+function pickHigher(newBlob, legacyBlob) {
+    const nMeta = parseBlobMeta(newBlob);
+    const lMeta = parseBlobMeta(legacyBlob);
+    if (nMeta && !lMeta)
+        return { blob: newBlob, picked: 'new' };
+    if (!nMeta && lMeta)
+        return { blob: legacyBlob, picked: 'legacy' };
+    if (!nMeta && !lMeta)
+        return { blob: newBlob, picked: 'new' };
+    const n = nMeta;
+    const l = lMeta;
+    if (n.schema > l.schema)
+        return { blob: newBlob, picked: 'new' };
+    if (l.schema > n.schema)
+        return { blob: legacyBlob, picked: 'legacy' };
+    if (n.epoch > l.epoch)
+        return { blob: newBlob, picked: 'new' };
+    if (l.epoch > n.epoch)
+        return { blob: legacyBlob, picked: 'legacy' };
+    return { blob: newBlob, picked: 'new' };
+}
 function decodeHexIfNeeded(value) {
     // macOS `security -w` returns hex-encoded output when the password
     // contains control characters (e.g. newlines from pretty-printed JSON).
@@ -24,21 +73,33 @@ function decodeHexIfNeeded(value) {
     }
     return value;
 }
-function loadMacSecret() {
+function loadMacSecret(account) {
+    // Dedicated-keychain mode: read prompt-free from the YubiKey-locked keychain.
+    // A locked keychain throws KeychainLockedError (propagated so the caller can
+    // tell the user to run `noxctl keychain unlock`), not a silent null.
+    const dedicated = activeKeychainPath();
+    if (dedicated)
+        return readDedicatedSecret(account, dedicated);
     try {
-        const raw = execFileSync('security', ['find-generic-password', '-a', ACCOUNT_NAME, '-s', SERVICE_NAME, '-w'], { encoding: 'utf-8' }).trim();
+        const raw = execFileSync('security', ['find-generic-password', '-a', account, '-s', SERVICE_NAME, '-w'], { encoding: 'utf-8' }).trim();
         return decodeHexIfNeeded(raw);
     }
     catch {
         return null;
     }
 }
-function saveMacSecret(secret) {
+function saveMacSecret(account, secret) {
     // macOS `security add-generic-password -w` requires the password as a CLI
     // argument, which is briefly visible via `ps`. Instead, use an inline Swift
     // script that reads the secret from stdin and writes to the Keychain via
     // the Security framework — the secret never appears in process arguments.
     const scriptPath = path.join(os.tmpdir(), `noxctl-keychain-${process.pid}.swift`);
+    // In dedicated-keychain mode, target that keychain file; otherwise the
+    // default (login) keychain. The path is passed as argv (not interpolated) so
+    // an odd path can't break or inject into the Swift source.
+    const keychainPath = activeKeychainPath() ?? '';
+    // account is either LEGACY_KEYCHAIN_ACCOUNT ("default") or `profile:<validated>`.
+    // Validation in profile-name.ts restricts the character set so embedding is safe.
     const swiftScript = `
 import Foundation
 import Security
@@ -47,28 +108,38 @@ let data = FileHandle.standardInput.readDataToEndOfFile()
 guard let password = String(data: data, encoding: .utf8) else { exit(1) }
 
 let service = "${SERVICE_NAME}"
-let account = "${ACCOUNT_NAME}"
+let account = "${account}"
+
+let kcPath = CommandLine.arguments.count > 1 ? CommandLine.arguments[1] : ""
+var useKeychain: SecKeychain? = nil
+if !kcPath.isEmpty {
+  var kc: SecKeychain?
+  if SecKeychainOpen(kcPath, &kc) == errSecSuccess { useKeychain = kc }
+  else { exit(1) }
+}
 
-let deleteQuery: [String: Any] = [
+var deleteQuery: [String: Any] = [
   kSecClass as String: kSecClassGenericPassword,
   kSecAttrService as String: service,
   kSecAttrAccount as String: account
 ]
+if let kc = useKeychain { deleteQuery[kSecMatchSearchList as String] = [kc] }
 SecItemDelete(deleteQuery as CFDictionary)
 
 let pwData = password.data(using: String.Encoding.utf8)!
-let addQuery: [String: Any] = [
+var addQuery: [String: Any] = [
   kSecClass as String: kSecClassGenericPassword,
   kSecAttrService as String: service,
   kSecAttrAccount as String: account,
   kSecValueData as String: pwData
 ]
+if let kc = useKeychain { addQuery[kSecUseKeychain as String] = kc }
 let status = SecItemAdd(addQuery as CFDictionary, nil)
 if status != errSecSuccess { exit(1) }
 `;
     try {
         fsSync.writeFileSync(scriptPath, swiftScript, { mode: 0o600 });
-        const result = spawnSync('swift', [scriptPath], {
+        const result = spawnSync('swift', [scriptPath, keychainPath], {
             input: secret,
             encoding: 'utf-8',
         });
@@ -76,18 +147,18 @@ if status != errSecSuccess { exit(1) }
             throw new Error(result.stderr || 'Swift keychain helper failed');
         }
     }
-    catch {
-        // Fallback to security CLI if Swift is unavailable or fails
-        execFileSync('security', [
-            'add-generic-password',
-            '-a',
-            ACCOUNT_NAME,
-            '-s',
-            SERVICE_NAME,
-            '-w',
-            secret,
-            '-U',
-        ]);
+    catch (err) {
+        // Fail closed rather than fall back to `security add-generic-password -w
+        // <secret>`: that CLI only accepts the password via the argv `-w` slot
+        // (briefly visible to other processes via `ps`) or an interactive prompt,
+        // so a fallback would leak the credential into process arguments — exactly
+        // what the stdin-based Swift writer above exists to avoid. `swift` ships
+        // with the Xcode Command Line Tools, so guide the user to install them.
+        const detail = err instanceof Error ? err.message : String(err);
+        throw new Error(`Could not store credentials securely: the Swift Keychain helper failed (${detail}). ` +
+            `The 'swift' toolchain is required to write credentials without exposing them in ` +
+            `process arguments — install the Xcode Command Line Tools with 'xcode-select --install' ` +
+            `and try again.`);
     }
     finally {
         try {
@@ -98,26 +169,28 @@ if status != errSecSuccess { exit(1) }
         }
     }
 }
-function loadLinuxSecret() {
+function loadLinuxSecret(account) {
     try {
-        return execFileSync('secret-tool', ['lookup', 'service', SERVICE_NAME, 'account', ACCOUNT_NAME], { encoding: 'utf-8' }).trim();
+        return execFileSync('secret-tool', ['lookup', 'service', SERVICE_NAME, 'account', account], {
+            encoding: 'utf-8',
+        }).trim();
     }
     catch {
         return null;
     }
 }
-function saveLinuxSecret(secret) {
-    execFileSync('secret-tool', ['store', '--label=Fortnox MCP credentials', 'service', SERVICE_NAME, 'account', ACCOUNT_NAME], { input: secret });
+function saveLinuxSecret(account, secret) {
+    execFileSync('secret-tool', ['store', '--label=Fortnox MCP credentials', 'service', SERVICE_NAME, 'account', account], { input: secret });
 }
-function loadWindowsSecret() {
+function loadWindowsSecret(file) {
     try {
         return execFileSync('powershell', [
             '-NoProfile',
             '-NonInteractive',
             '-Command',
             [
-                `if (-not (Test-Path '${WINDOWS_CREDENTIALS_FILE}')) { exit 0 }`,
-                `$protected = [Convert]::FromBase64String([IO.File]::ReadAllText('${WINDOWS_CREDENTIALS_FILE}'))`,
+                `if (-not (Test-Path '${file}')) { exit 0 }`,
+                `$protected = [Convert]::FromBase64String([IO.File]::ReadAllText('${file}'))`,
                 '$bytes = [System.Security.Cryptography.ProtectedData]::Unprotect($protected, $null, [System.Security.Cryptography.DataProtectionScope]::CurrentUser)',
                 '[Text.Encoding]::UTF8.GetString($bytes)',
             ].join('; '),
@@ -127,7 +200,7 @@ function loadWindowsSecret() {
         return null;
     }
 }
-function saveWindowsSecret(secret) {
+function saveWindowsSecret(file, secret) {
     // Read the secret from stdin instead of embedding it in the PowerShell
     // command string, which would be visible via `ps` / Task Manager.
     const result = spawnSync('powershell', [
@@ -135,89 +208,151 @@ function saveWindowsSecret(secret) {
         '-NonInteractive',
         '-Command',
         [
-            `[IO.Directory]::CreateDirectory('${CREDENTIALS_DIR}') | Out-Null`,
+            `[IO.Directory]::CreateDirectory('${configDir()}') | Out-Null`,
             '$plain = [Console]::In.ReadToEnd()',
             '$bytes = [Text.Encoding]::UTF8.GetBytes($plain)',
             '$protected = [System.Security.Cryptography.ProtectedData]::Protect($bytes, $null, [System.Security.Cryptography.DataProtectionScope]::CurrentUser)',
-            `[IO.File]::WriteAllText('${WINDOWS_CREDENTIALS_FILE}', [Convert]::ToBase64String($protected), [Text.Encoding]::UTF8)`,
+            `[IO.File]::WriteAllText('${file}', [Convert]::ToBase64String($protected), [Text.Encoding]::UTF8)`,
         ].join('; '),
     ], { input: secret, encoding: 'utf-8' });
     if (result.status !== 0) {
         throw new Error(`Failed to save credentials: ${result.stderr || 'unknown error'}`);
     }
 }
-async function loadLegacySecret() {
+async function loadLegacyPlaintextSecret() {
     try {
-        return await fs.readFile(LEGACY_CREDENTIALS_FILE, 'utf-8');
+        return await fs.readFile(legacyCredentialsFile(), 'utf-8');
     }
     catch {
         return null;
     }
 }
-async function removeLegacySecret() {
+async function removeLegacyPlaintextSecret() {
     try {
-        await fs.rm(LEGACY_CREDENTIALS_FILE, { force: true });
+        await fs.rm(legacyCredentialsFile(), { force: true });
     }
     catch {
         // ignore cleanup failures
     }
 }
-export async function loadCredentialBlob() {
+function loadFromBackend(account, windowsFile) {
     if (process.platform === 'darwin')
-        return loadMacSecret() ?? (await loadLegacySecret());
+        return loadMacSecret(account);
     if (process.platform === 'win32')
-        return loadWindowsSecret() ?? (await loadLegacySecret());
-    return loadLinuxSecret() ?? (await loadLegacySecret());
+        return loadWindowsSecret(windowsFile);
+    return loadLinuxSecret(account);
 }
-export async function saveCredentialBlob(secret) {
+export async function loadCredentialBlob(profile = DEFAULT_PROFILE) {
+    const { normalized, isDefault } = normalizeProfile(profile);
+    if (!isDefault) {
+        const blob = loadFromBackend(keychainAccount(normalized), windowsCredentialsFile(normalized));
+        return { blob, source: blob ? 'new' : null, legacyBlob: null };
+    }
+    const newBlob = loadFromBackend(keychainAccount(normalized), windowsCredentialsFile(normalized));
+    const legacyBlob = loadFromBackend(LEGACY_KEYCHAIN_ACCOUNT, legacyWindowsCredentialsFile());
+    if (newBlob && legacyBlob) {
+        const { blob, picked } = pickHigher(newBlob, legacyBlob);
+        return {
+            blob,
+            source: picked === 'new' ? 'both-new-preferred' : 'both-legacy-preferred',
+            legacyBlob,
+        };
+    }
+    if (newBlob)
+        return { blob: newBlob, source: 'new', legacyBlob: null };
+    if (legacyBlob)
+        return { blob: legacyBlob, source: 'legacy', legacyBlob };
+    const plaintext = await loadLegacyPlaintextSecret();
+    if (plaintext)
+        return { blob: plaintext, source: 'legacy-plaintext', legacyBlob: plaintext };
+    return { blob: null, source: null, legacyBlob: null };
+}
+function writeToBackend(account, windowsFile, secret) {
     if (process.platform === 'darwin') {
-        saveMacSecret(secret);
+        saveMacSecret(account, secret);
     }
     else if (process.platform === 'win32') {
-        saveWindowsSecret(secret);
+        saveWindowsSecret(windowsFile, secret);
     }
     else {
-        saveLinuxSecret(secret);
+        saveLinuxSecret(account, secret);
+    }
+}
+export async function saveCredentialBlob(secret, profile = DEFAULT_PROFILE, options = {}) {
+    const { normalized, isDefault } = normalizeProfile(profile);
+    // Primary write: always the new per-profile slot (profile:<name> or
+    // credentials.<name>.dpapi). For default this is `profile:default` /
+    // `credentials.default.dpapi`.
+    writeToBackend(keychainAccount(normalized), windowsCredentialsFile(normalized), secret);
+    // Compatibility dual-write: for the default profile only, and only when the
+    // caller observed a legacy blob during load. This keeps an older 0.1 binary
+    // functional during the 0.2.x window without silently creating a legacy slot
+    // for users who never had one. Best-effort — a failure here must not break
+    // the auth flow, since the authoritative new-slot write already succeeded.
+    // REMOVE IN 0.3.0.
+    if (LEGACY_DUAL_WRITE && isDefault && options.alsoWriteLegacy) {
+        try {
+            writeToBackend(LEGACY_KEYCHAIN_ACCOUNT, legacyWindowsCredentialsFile(), secret);
+        }
+        catch (err) {
+            const msg = err instanceof Error ? err.message : String(err);
+            console.warn(`Warning: could not mirror credentials to legacy slot: ${msg}`);
+        }
+    }
+    if (isDefault) {
+        await removeLegacyPlaintextSecret();
     }
-    await removeLegacySecret();
 }
-function deleteMacSecret() {
+function deleteMacSecret(account) {
+    const keychainPath = activeKeychainPath();
     try {
-        execFileSync('security', ['delete-generic-password', '-a', ACCOUNT_NAME, '-s', SERVICE_NAME]);
+        execFileSync('security', [
+            'delete-generic-password',
+            '-a',
+            account,
+            '-s',
+            SERVICE_NAME,
+            ...(keychainPath ? [keychainPath] : []),
+        ]);
         return true;
     }
     catch {
         return false;
     }
 }
-function deleteLinuxSecret() {
+function deleteLinuxSecret(account) {
     try {
-        execFileSync('secret-tool', ['clear', 'service', SERVICE_NAME, 'account', ACCOUNT_NAME]);
+        execFileSync('secret-tool', ['clear', 'service', SERVICE_NAME, 'account', account]);
         return true;
     }
     catch {
         return false;
     }
 }
-async function deleteWindowsSecret() {
+async function deleteWindowsSecret(file) {
     try {
-        await fs.rm(WINDOWS_CREDENTIALS_FILE, { force: true });
+        await fs.rm(file, { force: true });
         return true;
     }
     catch {
         return false;
     }
 }
-export async function deleteCredentialBlob() {
-    let deleted = false;
+async function deleteAtAccount(account, windowsFile) {
     if (process.platform === 'darwin')
-        deleted = deleteMacSecret();
-    else if (process.platform === 'win32')
-        deleted = await deleteWindowsSecret();
-    else
-        deleted = deleteLinuxSecret();
-    // Also clean up legacy file if it exists
-    await removeLegacySecret();
-    return deleted;
+        return deleteMacSecret(account);
+    if (process.platform === 'win32')
+        return deleteWindowsSecret(windowsFile);
+    return deleteLinuxSecret(account);
+}
+export async function deleteCredentialBlob(profile = DEFAULT_PROFILE) {
+    const { normalized, isDefault } = normalizeProfile(profile);
+    if (isDefault) {
+        const legacyDeleted = await deleteAtAccount(LEGACY_KEYCHAIN_ACCOUNT, legacyWindowsCredentialsFile());
+        const newDeleted = await deleteAtAccount(keychainAccount(normalized), windowsCredentialsFile(normalized));
+        await removeLegacyPlaintextSecret();
+        return legacyDeleted || newDeleted;
+    }
+    return deleteAtAccount(keychainAccount(normalized), windowsCredentialsFile(normalized));
 }
 //# sourceMappingURL=credentials-store.js.map

package/dist/credentials-store.js.map

@@ -1 +1 @@
-{"version":3,"file":"credentials-store.js","sourceRoot":"","sources":["../src/credentials-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,MAAM,MAAM,SAAS,CAAC;AAC7B,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAE7D,MAAM,eAAe,GAAG,IAAI,CAAC,IAAI,CAC/B,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,GAAG,EAClD,cAAc,CACf,CAAC;AACF,MAAM,uBAAuB,GAAG,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,kBAAkB,CAAC,CAAC;AAC/E,MAAM,wBAAwB,GAAG,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,mBAAmB,CAAC,CAAC;AACjF,MAAM,YAAY,GAAG,aAAa,CAAC;AACnC,MAAM,YAAY,GAAG,SAAS,CAAC;AAE/B,SAAS,iBAAiB,CAAC,KAAa;IACtC,mEAAmE;IACnE,wEAAwE;IACxE,sDAAsD;IACtD,IAAI,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3D,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YAC5D,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;gBAAE,OAAO,OAAO,CAAC;QAC9C,CAAC;QAAC,MAAM,CAAC;YACP,+BAA+B;QACjC,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,aAAa;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CACtB,UAAU,EACV,CAAC,uBAAuB,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,CAAC,EACvE,EAAE,QAAQ,EAAE,OAAO,EAAE,CACtB,CAAC,IAAI,EAAE,CAAC;QACT,OAAO,iBAAiB,CAAC,GAAG,CAAC,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,MAAc;IACnC,0EAA0E;IAC1E,4EAA4E;IAC5E,yEAAyE;IACzE,0EAA0E;IAC1E,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,mBAAmB,OAAO,CAAC,GAAG,QAAQ,CAAC,CAAC;IAElF,MAAM,WAAW,GAAG;;;;;;;iBAOL,YAAY;iBACZ,YAAY;;;;;;;;;;;;;;;;;;CAkB5B,CAAC;IAEA,IAAI,CAAC;QACH,MAAM,CAAC,aAAa,CAAC,UAAU,EAAE,WAAW,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAE/D,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,EAAE,CAAC,UAAU,CAAC,EAAE;YAC9C,KAAK,EAAE,MAAM;YACb,QAAQ,EAAE,OAAO;SAClB,CAAC,CAAC;QAEH,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,IAAI,8BAA8B,CAAC,CAAC;QACnE,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,4DAA4D;QAC5D,YAAY,CAAC,UAAU,EAAE;YACvB,sBAAsB;YACtB,IAAI;YACJ,YAAY;YACZ,IAAI;YACJ,YAAY;YACZ,IAAI;YACJ,MAAM;YACN,IAAI;SACL,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,IAAI,CAAC;YACH,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;QAChC,CAAC;QAAC,MAAM,CAAC;YACP,yBAAyB;QAC3B,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,eAAe;IACtB,IAAI,CAAC;QACH,OAAO,YAAY,CACjB,aAAa,EACb,CAAC,QAAQ,EAAE,SAAS,EAAE,YAAY,EAAE,SAAS,EAAE,YAAY,CAAC,EAC5D,EAAE,QAAQ,EAAE,OAAO,EAAE,CACtB,CAAC,IAAI,EAAE,CAAC;IACX,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,MAAc;IACrC,YAAY,CACV,aAAa,EACb,CAAC,OAAO,EAAE,iCAAiC,EAAE,SAAS,EAAE,YAAY,EAAE,SAAS,EAAE,YAAY,CAAC,EAC9F,EAAE,KAAK,EAAE,MAAM,EAAE,CAClB,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB;IACxB,IAAI,CAAC;QACH,OAAO,YAAY,CACjB,YAAY,EACZ;YACE,YAAY;YACZ,iBAAiB;YACjB,UAAU;YACV;gBACE,wBAAwB,wBAAwB,gBAAgB;gBAChE,oEAAoE,wBAAwB,KAAK;gBACjG,sJAAsJ;gBACtJ,yCAAyC;aAC1C,CAAC,IAAI,CAAC,IAAI,CAAC;SACb,EACD,EAAE,QAAQ,EAAE,OAAO,EAAE,CACtB,CAAC,IAAI,EAAE,CAAC;IACX,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,MAAc;IACvC,uEAAuE;IACvE,kEAAkE;IAClE,MAAM,MAAM,GAAG,SAAS,CACtB,YAAY,EACZ;QACE,YAAY;QACZ,iBAAiB;QACjB,UAAU;QACV;YACE,oCAAoC,eAAe,eAAe;YAClE,oCAAoC;YACpC,iDAAiD;YACjD,oJAAoJ;YACpJ,4BAA4B,wBAAwB,kEAAkE;SACvH,CAAC,IAAI,CAAC,IAAI,CAAC;KACb,EACD,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,CACrC,CAAC;IAEF,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,+BAA+B,MAAM,CAAC,MAAM,IAAI,eAAe,EAAE,CAAC,CAAC;IACrF,CAAC;AACH,CAAC;AAED,KAAK,UAAU,gBAAgB;IAC7B,IAAI,CAAC;QACH,OAAO,MAAM,EAAE,CAAC,QAAQ,CAAC,uBAAuB,EAAE,OAAO,CAAC,CAAC;IAC7D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,kBAAkB;IAC/B,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,EAAE,CAAC,uBAAuB,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACxD,CAAC;IAAC,MAAM,CAAC;QACP,0BAA0B;IAC5B,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB;IACtC,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ;QAAE,OAAO,aAAa,EAAE,IAAI,CAAC,MAAM,gBAAgB,EAAE,CAAC,CAAC;IACxF,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO,iBAAiB,EAAE,IAAI,CAAC,MAAM,gBAAgB,EAAE,CAAC,CAAC;IAC3F,OAAO,eAAe,EAAE,IAAI,CAAC,MAAM,gBAAgB,EAAE,CAAC,CAAC;AACzD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,MAAc;IACrD,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAClC,aAAa,CAAC,MAAM,CAAC,CAAC;IACxB,CAAC;SAAM,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACxC,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAC5B,CAAC;SAAM,CAAC;QACN,eAAe,CAAC,MAAM,CAAC,CAAC;IAC1B,CAAC;IAED,MAAM,kBAAkB,EAAE,CAAC;AAC7B,CAAC;AAED,SAAS,eAAe;IACtB,IAAI,CAAC;QACH,YAAY,CAAC,UAAU,EAAE,CAAC,yBAAyB,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,YAAY,CAAC,CAAC,CAAC;QAC9F,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB;IACxB,IAAI,CAAC;QACH,YAAY,CAAC,aAAa,EAAE,CAAC,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC,CAAC;QACzF,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,KAAK,UAAU,mBAAmB;IAChC,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,EAAE,CAAC,wBAAwB,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACvD,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB;IACxC,IAAI,OAAO,GAAG,KAAK,CAAC;IAEpB,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ;QAAE,OAAO,GAAG,eAAe,EAAE,CAAC;SAC1D,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO,GAAG,MAAM,mBAAmB,EAAE,CAAC;;QACxE,OAAO,GAAG,iBAAiB,EAAE,CAAC;IAEnC,yCAAyC;IACzC,MAAM,kBAAkB,EAAE,CAAC;IAE3B,OAAO,OAAO,CAAC;AACjB,CAAC"}
+{"version":3,"file":"credentials-store.js","sourceRoot":"","sources":["../src/credentials-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,MAAM,MAAM,SAAS,CAAC;AAC7B,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC7D,OAAO,EACL,eAAe,EACf,uBAAuB,EACvB,eAAe,EACf,mBAAmB,EACnB,mBAAmB,GACpB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAE/E,SAAS,qBAAqB;IAC5B,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,kBAAkB,CAAC,CAAC;AACpD,CAAC;AACD,SAAS,4BAA4B;IACnC,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,mBAAmB,CAAC,CAAC;AACrD,CAAC;AACD,MAAM,YAAY,GAAG,aAAa,CAAC;AAEnC,SAAS,gBAAgB,CAAC,OAAe;IACvC,MAAM,SAAS,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC;IAC7D,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,KAAK,eAAe,EAAE,CAAC;AAC7E,CAAC;AAED,SAAS,sBAAsB,CAAC,OAAe;IAC7C,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,eAAe,mBAAmB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;AACrF,CAAC;AAED,4EAA4E;AAC5E,2EAA2E;AAC3E,8DAA8D;AAC9D,kBAAkB;AAClB,MAAM,CAAC,MAAM,iBAAiB,GAAG,IAAI,CAAC;AAiCtC,SAAS,aAAa,CAAC,IAAY;IACjC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAG7B,CAAC;QACF,MAAM,MAAM,GAAG,OAAO,MAAM,CAAC,cAAc,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC;QACrF,MAAM,KAAK,GAAG,OAAO,MAAM,CAAC,gBAAgB,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC;QACxF,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CACjB,OAAe,EACf,UAAkB;IAElB,MAAM,KAAK,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;IACrC,MAAM,KAAK,GAAG,aAAa,CAAC,UAAU,CAAC,CAAC;IACxC,IAAI,KAAK,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IAC7D,IAAI,CAAC,KAAK,IAAI,KAAK;QAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IACnE,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IAC9D,MAAM,CAAC,GAAG,KAAM,CAAC;IACjB,MAAM,CAAC,GAAG,KAAM,CAAC;IACjB,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM;QAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IACjE,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM;QAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IACvE,IAAI,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK;QAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IAC/D,IAAI,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK;QAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IACrE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;AAC1C,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAa;IACtC,mEAAmE;IACnE,wEAAwE;IACxE,sDAAsD;IACtD,IAAI,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3D,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YAC5D,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;gBAAE,OAAO,OAAO,CAAC;QAC9C,CAAC;QAAC,MAAM,CAAC;YACP,+BAA+B;QACjC,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,aAAa,CAAC,OAAe;IACpC,8EAA8E;IAC9E,6EAA6E;IAC7E,qEAAqE;IACrE,MAAM,SAAS,GAAG,kBAAkB,EAAE,CAAC;IACvC,IAAI,SAAS;QAAE,OAAO,mBAAmB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IAE9D,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CACtB,UAAU,EACV,CAAC,uBAAuB,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,CAAC,EAClE,EAAE,QAAQ,EAAE,OAAO,EAAE,CACtB,CAAC,IAAI,EAAE,CAAC;QACT,OAAO,iBAAiB,CAAC,GAAG,CAAC,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,OAAe,EAAE,MAAc;IACpD,0EAA0E;IAC1E,4EAA4E;IAC5E,yEAAyE;IACzE,0EAA0E;IAC1E,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,mBAAmB,OAAO,CAAC,GAAG,QAAQ,CAAC,CAAC;IAElF,uEAAuE;IACvE,6EAA6E;IAC7E,2DAA2D;IAC3D,MAAM,YAAY,GAAG,kBAAkB,EAAE,IAAI,EAAE,CAAC;IAEhD,kFAAkF;IAClF,kFAAkF;IAClF,MAAM,WAAW,GAAG;;;;;;;iBAOL,YAAY;iBACZ,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA4BvB,CAAC;IAEA,IAAI,CAAC;QACH,MAAM,CAAC,aAAa,CAAC,UAAU,EAAE,WAAW,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAE/D,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,EAAE,CAAC,UAAU,EAAE,YAAY,CAAC,EAAE;YAC5D,KAAK,EAAE,MAAM;YACb,QAAQ,EAAE,OAAO;SAClB,CAAC,CAAC;QAEH,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,IAAI,8BAA8B,CAAC,CAAC;QACnE,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,yEAAyE;QACzE,uEAAuE;QACvE,0EAA0E;QAC1E,2EAA2E;QAC3E,yEAAyE;QACzE,wEAAwE;QACxE,MAAM,MAAM,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAChE,MAAM,IAAI,KAAK,CACb,2EAA2E,MAAM,KAAK;YACpF,kFAAkF;YAClF,yFAAyF;YACzF,gBAAgB,CACnB,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,IAAI,CAAC;YACH,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;QAChC,CAAC;QAAC,MAAM,CAAC;YACP,yBAAyB;QAC3B,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,OAAe;IACtC,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,aAAa,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,YAAY,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE;YAC1F,QAAQ,EAAE,OAAO;SAClB,CAAC,CAAC,IAAI,EAAE,CAAC;IACZ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,OAAe,EAAE,MAAc;IACtD,YAAY,CACV,aAAa,EACb,CAAC,OAAO,EAAE,iCAAiC,EAAE,SAAS,EAAE,YAAY,EAAE,SAAS,EAAE,OAAO,CAAC,EACzF,EAAE,KAAK,EAAE,MAAM,EAAE,CAClB,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAY;IACrC,IAAI,CAAC;QACH,OAAO,YAAY,CACjB,YAAY,EACZ;YACE,YAAY;YACZ,iBAAiB;YACjB,UAAU;YACV;gBACE,wBAAwB,IAAI,gBAAgB;gBAC5C,oEAAoE,IAAI,KAAK;gBAC7E,sJAAsJ;gBACtJ,yCAAyC;aAC1C,CAAC,IAAI,CAAC,IAAI,CAAC;SACb,EACD,EAAE,QAAQ,EAAE,OAAO,EAAE,CACtB,CAAC,IAAI,EAAE,CAAC;IACX,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAY,EAAE,MAAc;IACrD,uEAAuE;IACvE,kEAAkE;IAClE,MAAM,MAAM,GAAG,SAAS,CACtB,YAAY,EACZ;QACE,YAAY;QACZ,iBAAiB;QACjB,UAAU;QACV;YACE,oCAAoC,SAAS,EAAE,eAAe;YAC9D,oCAAoC;YACpC,iDAAiD;YACjD,oJAAoJ;YACpJ,4BAA4B,IAAI,kEAAkE;SACnG,CAAC,IAAI,CAAC,IAAI,CAAC;KACb,EACD,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,CACrC,CAAC;IAEF,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,+BAA+B,MAAM,CAAC,MAAM,IAAI,eAAe,EAAE,CAAC,CAAC;IACrF,CAAC;AACH,CAAC;AAED,KAAK,UAAU,yBAAyB;IACtC,IAAI,CAAC;QACH,OAAO,MAAM,EAAE,CAAC,QAAQ,CAAC,qBAAqB,EAAE,EAAE,OAAO,CAAC,CAAC;IAC7D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,2BAA2B;IACxC,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,EAAE,CAAC,qBAAqB,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACxD,CAAC;IAAC,MAAM,CAAC;QACP,0BAA0B;IAC5B,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,OAAe,EAAE,WAAmB;IAC3D,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ;QAAE,OAAO,aAAa,CAAC,OAAO,CAAC,CAAC;IACjE,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO,iBAAiB,CAAC,WAAW,CAAC,CAAC;IACxE,OAAO,eAAe,CAAC,OAAO,CAAC,CAAC;AAClC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,UAAkB,eAAe;IAEjC,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAE5D,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,IAAI,GAAG,eAAe,CAAC,eAAe,CAAC,UAAU,CAAC,EAAE,sBAAsB,CAAC,UAAU,CAAC,CAAC,CAAC;QAC9F,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;IACjE,CAAC;IAED,MAAM,OAAO,GAAG,eAAe,CAAC,eAAe,CAAC,UAAU,CAAC,EAAE,sBAAsB,CAAC,UAAU,CAAC,CAAC,CAAC;IACjG,MAAM,UAAU,GAAG,eAAe,CAAC,uBAAuB,EAAE,4BAA4B,EAAE,CAAC,CAAC;IAE5F,IAAI,OAAO,IAAI,UAAU,EAAE,CAAC;QAC1B,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,UAAU,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;QACzD,OAAO;YACL,IAAI;YACJ,MAAM,EAAE,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,uBAAuB;YACzE,UAAU;SACX,CAAC;IACJ,CAAC;IACD,IAAI,OAAO;QAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;IACvE,IAAI,UAAU;QAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC;IAE1E,MAAM,SAAS,GAAG,MAAM,yBAAyB,EAAE,CAAC;IACpD,IAAI,SAAS;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,kBAAkB,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC;IAC7F,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;AACxD,CAAC;AAED,SAAS,cAAc,CAAC,OAAe,EAAE,WAAmB,EAAE,MAAc;IAC1E,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAClC,aAAa,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACjC,CAAC;SAAM,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACxC,iBAAiB,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IACzC,CAAC;SAAM,CAAC;QACN,eAAe,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACnC,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,MAAc,EACd,UAAkB,eAAe,EACjC,UAAiC,EAAE;IAEnC,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAE5D,oEAAoE;IACpE,qEAAqE;IACrE,+BAA+B;IAC/B,cAAc,CAAC,eAAe,CAAC,UAAU,CAAC,EAAE,sBAAsB,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC,CAAC;IAExF,4EAA4E;IAC5E,4EAA4E;IAC5E,6EAA6E;IAC7E,2EAA2E;IAC3E,2EAA2E;IAC3E,mBAAmB;IACnB,IAAI,iBAAiB,IAAI,SAAS,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC;QAC9D,IAAI,CAAC;YACH,cAAc,CAAC,uBAAuB,EAAE,4BAA4B,EAAE,EAAE,MAAM,CAAC,CAAC;QAClF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,OAAO,CAAC,IAAI,CAAC,yDAAyD,GAAG,EAAE,CAAC,CAAC;QAC/E,CAAC;IACH,CAAC;IAED,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,2BAA2B,EAAE,CAAC;IACtC,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,OAAe;IACtC,MAAM,YAAY,GAAG,kBAAkB,EAAE,CAAC;IAC1C,IAAI,CAAC;QACH,YAAY,CAAC,UAAU,EAAE;YACvB,yBAAyB;YACzB,IAAI;YACJ,OAAO;YACP,IAAI;YACJ,YAAY;YACZ,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;SACxC,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,OAAe;IACxC,IAAI,CAAC;QACH,YAAY,CAAC,aAAa,EAAE,CAAC,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC;QACpF,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,KAAK,UAAU,mBAAmB,CAAC,IAAY;IAC7C,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACnC,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,OAAe,EAAE,WAAmB;IACjE,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ;QAAE,OAAO,eAAe,CAAC,OAAO,CAAC,CAAC;IACnE,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO,mBAAmB,CAAC,WAAW,CAAC,CAAC;IAC1E,OAAO,iBAAiB,CAAC,OAAO,CAAC,CAAC;AACpC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,UAAkB,eAAe;IAC1E,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAE5D,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,aAAa,GAAG,MAAM,eAAe,CACzC,uBAAuB,EACvB,4BAA4B,EAAE,CAC/B,CAAC;QACF,MAAM,UAAU,GAAG,MAAM,eAAe,CACtC,eAAe,CAAC,UAAU,CAAC,EAC3B,sBAAsB,CAAC,UAAU,CAAC,CACnC,CAAC;QACF,MAAM,2BAA2B,EAAE,CAAC;QACpC,OAAO,aAAa,IAAI,UAAU,CAAC;IACrC,CAAC;IAED,OAAO,eAAe,CAAC,eAAe,CAAC,UAAU,CAAC,EAAE,sBAAsB,CAAC,UAAU,CAAC,CAAC,CAAC;AAC1F,CAAC"}

package/dist/date-periods.d.ts

@@ -0,0 +1,14 @@
+export interface DateRange {
+    from: string;
+    to: string;
+}
+export declare function resolvePeriod(period: string, today?: Date): DateRange;
+export declare function applyPeriod(opts: {
+    period?: string;
+    from?: string;
+    to?: string;
+}): {
+    from?: string;
+    to?: string;
+};
+//# sourceMappingURL=date-periods.d.ts.map

package/dist/date-periods.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"date-periods.d.ts","sourceRoot":"","sources":["../src/date-periods.ts"],"names":[],"mappings":"AAMA,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;CACZ;AAyDD,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,GAAE,IAAiB,GAAG,SAAS,CA8CjF;AAGD,wBAAgB,WAAW,CAAC,IAAI,EAAE;IAAE,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,EAAE,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG;IAClF,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,EAAE,CAAC,EAAE,MAAM,CAAC;CACb,CAMA"}

package/dist/date-periods.js

@@ -0,0 +1,103 @@
+// Natural date-period parsing for CLI --period arguments.
+//
+// Periods are CALENDAR-year based. Fortnox supports broken fiscal years;
+// a fiscal-year-aware design is tracked separately — until then "Q1" always
+// means January–March of the named (or current) calendar year.
+const EN_MONTHS = [
+    'january',
+    'february',
+    'march',
+    'april',
+    'may',
+    'june',
+    'july',
+    'august',
+    'september',
+    'october',
+    'november',
+    'december',
+];
+const SV_MONTHS = [
+    'januari',
+    'februari',
+    'mars',
+    'april',
+    'maj',
+    'juni',
+    'juli',
+    'augusti',
+    'september',
+    'oktober',
+    'november',
+    'december',
+];
+function iso(year, month, day) {
+    return `${String(year).padStart(4, '0')}-${String(month).padStart(2, '0')}-${String(day).padStart(2, '0')}`;
+}
+function lastDayOfMonth(year, month) {
+    return new Date(year, month, 0).getDate();
+}
+function monthRange(year, month) {
+    return { from: iso(year, month, 1), to: iso(year, month, lastDayOfMonth(year, month)) };
+}
+function quarterRange(year, quarter) {
+    const startMonth = (quarter - 1) * 3 + 1;
+    const endMonth = startMonth + 2;
+    return {
+        from: iso(year, startMonth, 1),
+        to: iso(year, endMonth, lastDayOfMonth(year, endMonth)),
+    };
+}
+function yearRange(year) {
+    return { from: iso(year, 1, 1), to: iso(year, 12, 31) };
+}
+export function resolvePeriod(period, today = new Date()) {
+    const input = period.trim().toLowerCase();
+    const year = today.getFullYear();
+    const month = today.getMonth() + 1; // 1-based
+    const quarter = Math.ceil(month / 3);
+    // Q1..Q4, optionally year-qualified (2025-Q3 or 2025Q3)
+    const quarterMatch = /^(?:(\d{4})-?)?q([1-4])$/.exec(input);
+    if (quarterMatch) {
+        return quarterRange(quarterMatch[1] ? parseInt(quarterMatch[1], 10) : year, parseInt(quarterMatch[2], 10));
+    }
+    // Bare year
+    if (/^\d{4}$/.test(input))
+        return yearRange(parseInt(input, 10));
+    // Month names (English and Swedish), current calendar year
+    const enIdx = EN_MONTHS.indexOf(input);
+    if (enIdx !== -1)
+        return monthRange(year, enIdx + 1);
+    const svIdx = SV_MONTHS.indexOf(input);
+    if (svIdx !== -1)
+        return monthRange(year, svIdx + 1);
+    switch (input) {
+        case 'this-quarter':
+            return quarterRange(year, quarter);
+        case 'last-quarter':
+            return quarter === 1 ? quarterRange(year - 1, 4) : quarterRange(year, quarter - 1);
+        case 'this-month':
+            return monthRange(year, month);
+        case 'last-month':
+            return month === 1 ? monthRange(year - 1, 12) : monthRange(year, month - 1);
+        case 'this-year':
+            return yearRange(year);
+        case 'last-year':
+            return yearRange(year - 1);
+        case 'ytd':
+            return { from: iso(year, 1, 1), to: iso(year, month, today.getDate()) };
+    }
+    throw new Error(`Unrecognized period "${period}". Supported: Q1–Q4, 2025-Q3, month names (march/mars), ` +
+        'this-quarter, last-quarter, this-month, last-month, this-year, last-year, ytd, or a bare year. ' +
+        'Periods are calendar-year based.');
+}
+// Shared by CLI actions: merge --period into from/to, rejecting ambiguous mixes.
+export function applyPeriod(opts) {
+    if (!opts.period)
+        return { from: opts.from, to: opts.to };
+    if (opts.from || opts.to) {
+        throw new Error('--period cannot be combined with --from/--to.');
+    }
+    return resolvePeriod(opts.period);
+}
+//# sourceMappingURL=date-periods.js.map

package/dist/date-periods.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"date-periods.js","sourceRoot":"","sources":["../src/date-periods.ts"],"names":[],"mappings":"AAAA,0DAA0D;AAC1D,EAAE;AACF,yEAAyE;AACzE,4EAA4E;AAC5E,+DAA+D;AAO/D,MAAM,SAAS,GAAG;IAChB,SAAS;IACT,UAAU;IACV,OAAO;IACP,OAAO;IACP,KAAK;IACL,MAAM;IACN,MAAM;IACN,QAAQ;IACR,WAAW;IACX,SAAS;IACT,UAAU;IACV,UAAU;CACX,CAAC;AAEF,MAAM,SAAS,GAAG;IAChB,SAAS;IACT,UAAU;IACV,MAAM;IACN,OAAO;IACP,KAAK;IACL,MAAM;IACN,MAAM;IACN,SAAS;IACT,WAAW;IACX,SAAS;IACT,UAAU;IACV,UAAU;CACX,CAAC;AAEF,SAAS,GAAG,CAAC,IAAY,EAAE,KAAa,EAAE,GAAW;IACnD,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;AAC9G,CAAC;AAED,SAAS,cAAc,CAAC,IAAY,EAAE,KAAa;IACjD,OAAO,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;AAC5C,CAAC;AAED,SAAS,UAAU,CAAC,IAAY,EAAE,KAAa;IAC7C,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,cAAc,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC;AAC1F,CAAC;AAED,SAAS,YAAY,CAAC,IAAY,EAAE,OAAe;IACjD,MAAM,UAAU,GAAG,CAAC,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACzC,MAAM,QAAQ,GAAG,UAAU,GAAG,CAAC,CAAC;IAChC,OAAO;QACL,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;QAC9B,EAAE,EAAE,GAAG,CAAC,IAAI,EAAE,QAAQ,EAAE,cAAc,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;KACxD,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,IAAY;IAC7B,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC;AAC1D,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,MAAc,EAAE,QAAc,IAAI,IAAI,EAAE;IACpE,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC1C,MAAM,IAAI,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC;IACjC,MAAM,KAAK,GAAG,KAAK,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC,UAAU;IAC9C,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;IAErC,wDAAwD;IACxD,MAAM,YAAY,GAAG,0BAA0B,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC5D,IAAI,YAAY,EAAE,CAAC;QACjB,OAAO,YAAY,CACjB,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EACtD,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAC9B,CAAC;IACJ,CAAC;IAED,YAAY;IACZ,IAAI,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC;IAEjE,2DAA2D;IAC3D,MAAM,KAAK,GAAG,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACvC,IAAI,KAAK,KAAK,CAAC,CAAC;QAAE,OAAO,UAAU,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;IACrD,MAAM,KAAK,GAAG,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACvC,IAAI,KAAK,KAAK,CAAC,CAAC;QAAE,OAAO,UAAU,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;IAErD,QAAQ,KAAK,EAAE,CAAC;QACd,KAAK,cAAc;YACjB,OAAO,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACrC,KAAK,cAAc;YACjB,OAAO,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,GAAG,CAAC,CAAC,CAAC;QACrF,KAAK,YAAY;YACf,OAAO,UAAU,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACjC,KAAK,YAAY;YACf,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;QAC9E,KAAK,WAAW;YACd,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC;QACzB,KAAK,WAAW;YACd,OAAO,SAAS,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC;QAC7B,KAAK,KAAK;YACR,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;IAC5E,CAAC;IAED,MAAM,IAAI,KAAK,CACb,wBAAwB,MAAM,0DAA0D;QACtF,iGAAiG;QACjG,kCAAkC,CACrC,CAAC;AACJ,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,WAAW,CAAC,IAAqD;IAI/E,IAAI,CAAC,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC;IAC1D,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACnE,CAAC;IACD,OAAO,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AACpC,CAAC"}

package/dist/formatter.d.ts

@@ -57,6 +57,15 @@ export declare function isJsonMode(programOpts: {
     fd: 1;
 }): boolean;
 export declare function outputList(data: Record<string, unknown>[], columns: Column[], json: boolean, rawData: unknown, meta?: Record<string, unknown>): void;
-export declare function outputDetail(record: Record<string, unknown>, columns: Column[], json: boolean): void;
-export declare function outputConfirmation(message: string, json: boolean, rawData: unknown, columns?: Column[]): void;
+export declare function outputDetail(record: Record<string, unknown>, columns: Column[], json: boolean, jsonEnvelopeKey?: string): void;
+export interface ErrorEnvelope {
+    error: {
+        status?: number;
+        message: string;
+        hint?: string;
+        source: 'fortnox-api' | 'noxctl';
+    };
+}
+export declare function errorEnvelope(err: unknown): ErrorEnvelope;
+export declare function outputConfirmation(message: string, json: boolean, rawData: unknown, columns?: Column[], jsonEnvelopeKey?: string): void;
 //# sourceMappingURL=formatter.d.ts.map

package/dist/formatter.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"formatter.d.ts","sourceRoot":"","sources":["../src/formatter.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,MAAM;IACrB,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;IACzB,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM,CAAC;CACrC;AA+BD,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,MAAM,CAgBtF;AAED,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,MAAM,CAWvF;AAED,wBAAgB,UAAU,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAOjE;AAED,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAkDvE;AAED,wBAAgB,qBAAqB,CAAC,MAAM,EAAE;IAC5C,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE;QACT,KAAK,EAAE,MAAM,CAAC;QACd,KAAK,EAAE;YAAE,OAAO,EAAE,MAAM,CAAC;YAAC,WAAW,EAAE,MAAM,CAAC;YAAC,OAAO,EAAE,MAAM,CAAA;SAAE,EAAE,CAAC;QACnE,KAAK,EAAE,MAAM,CAAC;KACf,EAAE,CAAC;IACJ,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE;QACP,KAAK,EAAE,MAAM,CAAC;QACd,KAAK,EAAE;YAAE,OAAO,EAAE,MAAM,CAAC;YAAC,WAAW,EAAE,MAAM,CAAC;YAAC,OAAO,EAAE,MAAM,CAAA;SAAE,EAAE,CAAC;QACnE,KAAK,EAAE,MAAM,CAAC;KACf,EAAE,CAAC;IACJ,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,oBAAoB,CAAC,EAAE;QACrB,KAAK,EAAE,MAAM,CAAC;QACd,KAAK,EAAE;YAAE,OAAO,EAAE,MAAM,CAAC;YAAC,WAAW,EAAE,MAAM,CAAC;YAAC,OAAO,EAAE,MAAM,CAAA;SAAE,EAAE,CAAC;QACnE,KAAK,EAAE,MAAM,CAAC;KACf,EAAE,CAAC;IACJ,yBAAyB,CAAC,EAAE,MAAM,CAAC;IACnC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,MAAM,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;IACtC,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,GAAG,MAAM,CA6ET;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,OAAO,CAAC;CACf;AAED,wBAAgB,UAAU,CAAC,WAAW,EAAE;IAAE,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,EAAE,MAAM;;CAAiB,GAAG,OAAO,CAK7F;AAED,wBAAgB,UAAU,CACxB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,EAC/B,OAAO,EAAE,MAAM,EAAE,EACjB,IAAI,EAAE,OAAO,EACb,OAAO,EAAE,OAAO,EAChB,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC7B,IAAI,CAQN;AAED,wBAAgB,YAAY,CAC1B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,OAAO,EAAE,MAAM,EAAE,EACjB,IAAI,EAAE,OAAO,GACZ,IAAI,CAMN;AAED,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,OAAO,EACb,OAAO,EAAE,OAAO,EAChB,OAAO,CAAC,EAAE,MAAM,EAAE,GACjB,IAAI,CASN"}
+{"version":3,"file":"formatter.d.ts","sourceRoot":"","sources":["../src/formatter.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,MAAM;IACrB,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;IACzB,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM,CAAC;CACrC;AA+BD,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,MAAM,CAgBtF;AAED,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,MAAM,CAWvF;AAED,wBAAgB,UAAU,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAOjE;AAED,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAkDvE;AAED,wBAAgB,qBAAqB,CAAC,MAAM,EAAE;IAC5C,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE;QACT,KAAK,EAAE,MAAM,CAAC;QACd,KAAK,EAAE;YAAE,OAAO,EAAE,MAAM,CAAC;YAAC,WAAW,EAAE,MAAM,CAAC;YAAC,OAAO,EAAE,MAAM,CAAA;SAAE,EAAE,CAAC;QACnE,KAAK,EAAE,MAAM,CAAC;KACf,EAAE,CAAC;IACJ,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE;QACP,KAAK,EAAE,MAAM,CAAC;QACd,KAAK,EAAE;YAAE,OAAO,EAAE,MAAM,CAAC;YAAC,WAAW,EAAE,MAAM,CAAC;YAAC,OAAO,EAAE,MAAM,CAAA;SAAE,EAAE,CAAC;QACnE,KAAK,EAAE,MAAM,CAAC;KACf,EAAE,CAAC;IACJ,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,oBAAoB,CAAC,EAAE;QACrB,KAAK,EAAE,MAAM,CAAC;QACd,KAAK,EAAE;YAAE,OAAO,EAAE,MAAM,CAAC;YAAC,WAAW,EAAE,MAAM,CAAC;YAAC,OAAO,EAAE,MAAM,CAAA;SAAE,EAAE,CAAC;QACnE,KAAK,EAAE,MAAM,CAAC;KACf,EAAE,CAAC;IACJ,yBAAyB,CAAC,EAAE,MAAM,CAAC;IACnC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,MAAM,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;IACtC,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,GAAG,MAAM,CA6ET;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,OAAO,CAAC;CACf;AAED,wBAAgB,UAAU,CAAC,WAAW,EAAE;IAAE,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,EAAE,MAAM;;CAAiB,GAAG,OAAO,CAK7F;AAED,wBAAgB,UAAU,CACxB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,EAC/B,OAAO,EAAE,MAAM,EAAE,EACjB,IAAI,EAAE,OAAO,EACb,OAAO,EAAE,OAAO,EAChB,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC7B,IAAI,CAQN;AAED,wBAAgB,YAAY,CAC1B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,OAAO,EAAE,MAAM,EAAE,EACjB,IAAI,EAAE,OAAO,EACb,eAAe,CAAC,EAAE,MAAM,GACvB,IAAI,CAON;AAED,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE;QACL,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,OAAO,EAAE,MAAM,CAAC;QAChB,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,MAAM,EAAE,aAAa,GAAG,QAAQ,CAAC;KAClC,CAAC;CACH;AAID,wBAAgB,aAAa,CAAC,GAAG,EAAE,OAAO,GAAG,aAAa,CAoBzD;AAED,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,OAAO,EACb,OAAO,EAAE,OAAO,EAChB,OAAO,CAAC,EAAE,MAAM,EAAE,EAClB,eAAe,CAAC,EAAE,MAAM,GACvB,IAAI,CAUN"}

package/dist/formatter.js

@@ -180,16 +180,39 @@ export function outputList(data, columns, json, rawData, meta) {
     if (metaLine)
         console.log(metaLine);
 }
-export function outputDetail(record, columns, json) {
+export function outputDetail(record, columns, json, jsonEnvelopeKey) {
     if (json) {
-        console.log(JSON.stringify(record, null, 2));
+        const payload = jsonEnvelopeKey ? { [jsonEnvelopeKey]: record } : record;
+        console.log(JSON.stringify(payload, null, 2));
         return;
     }
     console.log(formatDetail(record, columns));
 }
-export function outputConfirmation(message, json, rawData, columns) {
+// Duck-typed rather than instanceof so the formatter stays decoupled from
+// fortnox-client (and survives errors crossing module-instance boundaries).
+export function errorEnvelope(err) {
+    if (err instanceof Error &&
+        err.name === 'FortnoxApiError' &&
+        'statusCode' in err &&
+        'fortnoxMessage' in err) {
+        const apiErr = err;
+        return {
+            error: {
+                status: apiErr.statusCode,
+                message: apiErr.fortnoxMessage,
+                ...(apiErr.hint ? { hint: apiErr.hint } : {}),
+                source: 'fortnox-api',
+            },
+        };
+    }
+    return {
+        error: { message: err instanceof Error ? err.message : String(err), source: 'noxctl' },
+    };
+}
+export function outputConfirmation(message, json, rawData, columns, jsonEnvelopeKey) {
     if (json) {
-        console.log(JSON.stringify(rawData, null, 2));
+        const payload = jsonEnvelopeKey ? { [jsonEnvelopeKey]: rawData } : rawData;
+        console.log(JSON.stringify(payload, null, 2));
         return;
     }
     console.log(message);