noxctl 0.2.0 → 0.4.0

package/dist/keychain-target.d.ts

@@ -0,0 +1,32 @@
+export declare const CR_SLOT = "2";
+export declare class KeychainLockedError extends Error {
+    constructor(message?: string);
+}
+export declare class ChallengeResponseError extends Error {
+    constructor(message: string);
+}
+export declare function dedicatedKeychainPath(): string;
+export declare function loginKeychainPath(): string;
+export declare function challengeFilePath(): string;
+export declare function activeKeychainPath(): string | null;
+export declare function isDedicatedModeActive(): boolean;
+export declare function readDedicatedSecret(account: string, keychainPath: string): string | null;
+export declare function generateChallenge(): string;
+export declare function readChallenge(): string | null;
+export declare function writeChallenge(challengeHex: string): void;
+export declare function enrolledSerialFilePath(): string;
+export declare function readEnrolledSerial(): string | null;
+export declare function writeEnrolledSerial(serial: string): void;
+export declare function listYubikeySerials(): string[];
+export declare function diagnoseSerialMismatch(enrolledSerial: string | null, presentSerials: string[]): string | null;
+export declare function ykmanAvailable(): boolean;
+export declare function yubikeyPresent(): boolean;
+export declare function computeChallengeResponse(challengeHex: string): string;
+export declare function createDedicatedKeychain(keychainPath: string, password: string): 'created' | 'exists';
+export declare function unlockDedicatedKeychain(keychainPath: string, password: string): void;
+export type LockState = 'locked' | 'unlocked' | 'missing';
+export declare function keychainLockState(keychainPath: string): LockState;
+export declare function setLockOnSleep(keychainPath: string): void;
+export declare function lockKeychain(keychainPath: string): void;
+export declare function deleteLoginSecret(account: string): boolean;
+//# sourceMappingURL=keychain-target.d.ts.map

package/dist/keychain-target.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"keychain-target.d.ts","sourceRoot":"","sources":["../src/keychain-target.ts"],"names":[],"mappings":"AAYA,eAAO,MAAM,OAAO,MAAM,CAAC;AAK3B,qBAAa,mBAAoB,SAAQ,KAAK;gBAE1C,OAAO,SAAiF;CAK3F;AAID,qBAAa,sBAAuB,SAAQ,KAAK;gBACnC,OAAO,EAAE,MAAM;CAI5B;AAED,wBAAgB,qBAAqB,IAAI,MAAM,CAG9C;AAED,wBAAgB,iBAAiB,IAAI,MAAM,CAG1C;AAED,wBAAgB,iBAAiB,IAAI,MAAM,CAE1C;AAQD,wBAAgB,kBAAkB,IAAI,MAAM,GAAG,IAAI,CAQlD;AAED,wBAAgB,qBAAqB,IAAI,OAAO,CAE/C;AAeD,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CA8CxF;AAKD,wBAAgB,iBAAiB,IAAI,MAAM,CAE1C;AAED,wBAAgB,aAAa,IAAI,MAAM,GAAG,IAAI,CAO7C;AAED,wBAAgB,cAAc,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAGzD;AAED,wBAAgB,sBAAsB,IAAI,MAAM,CAE/C;AAKD,wBAAgB,kBAAkB,IAAI,MAAM,GAAG,IAAI,CAOlD;AAED,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAGxD;AAED,wBAAgB,kBAAkB,IAAI,MAAM,EAAE,CAO7C;AAED,wBAAgB,sBAAsB,CACpC,cAAc,EAAE,MAAM,GAAG,IAAI,EAC7B,cAAc,EAAE,MAAM,EAAE,GACvB,MAAM,GAAG,IAAI,CAYf;AAED,wBAAgB,cAAc,IAAI,OAAO,CAGxC;AAED,wBAAgB,cAAc,IAAI,OAAO,CAGxC;AAMD,wBAAgB,wBAAwB,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,CAgCrE;AAwBD,wBAAgB,uBAAuB,CACrC,YAAY,EAAE,MAAM,EACpB,QAAQ,EAAE,MAAM,GACf,SAAS,GAAG,QAAQ,CAkBtB;AAID,wBAAgB,uBAAuB,CAAC,YAAY,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,CAsBpF;AAED,MAAM,MAAM,SAAS,GAAG,QAAQ,GAAG,UAAU,GAAG,SAAS,CAAC;AAE1D,wBAAgB,iBAAiB,CAAC,YAAY,EAAE,MAAM,GAAG,SAAS,CA0BjE;AAID,wBAAgB,cAAc,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAUzD;AAED,wBAAgB,YAAY,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAQvD;AAOD,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAO1D"}

package/dist/keychain-target.js

@@ -0,0 +1,349 @@
+import os from 'node:os';
+import path from 'node:path';
+import fsSync from 'node:fs';
+import { spawnSync } from 'node:child_process';
+import { randomBytes } from 'node:crypto';
+import { configDir } from './config-paths.js';
+const SERVICE_NAME = 'fortnox-mcp';
+// OTP slot programmed for HMAC-SHA1 challenge-response. Slot 2 is the
+// conventional "long-press / second" slot and is what `noxctl keychain init`
+// expects the user to have programmed with `ykman otp chalresp --generate --touch 2`.
+export const CR_SLOT = '2';
+// Thrown when the dedicated keychain exists but is locked. Distinct from
+// "no credentials" so callers can tell the user to run `noxctl keychain unlock`
+// (tap the YubiKey) rather than `noxctl init`.
+export class KeychainLockedError extends Error {
+    constructor(message = 'Fortnox keychain is locked — run `noxctl keychain unlock` (tap your YubiKey)') {
+        super(message);
+        this.name = 'KeychainLockedError';
+    }
+}
+// Thrown when a challenge-response operation fails — most often a missed touch
+// (ykman reports "Failed to write to the YubiKey" when the tap window lapses).
+export class ChallengeResponseError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'ChallengeResponseError';
+    }
+}
+export function dedicatedKeychainPath() {
+    const home = process.env.HOME || os.homedir() || '~';
+    return path.join(home, 'Library', 'Keychains', 'fortnox-mcp.keychain-db');
+}
+export function loginKeychainPath() {
+    const home = process.env.HOME || os.homedir() || '~';
+    return path.join(home, 'Library', 'Keychains', 'login.keychain-db');
+}
+export function challengeFilePath() {
+    return path.join(configDir(), 'keychain-challenge');
+}
+// Resolve which keychain credential operations should target.
+//   1. NOXCTL_KEYCHAIN_PATH env override (used by tests and power users).
+//   2. darwin only: the dedicated keychain + its challenge file both exist.
+//   3. otherwise null — caller falls back to the login keychain (legacy behavior).
+// The challenge file gates files-exist detection so a half-created keychain
+// (file present, never `init`-ed) doesn't silently divert reads.
+export function activeKeychainPath() {
+    const override = process.env.NOXCTL_KEYCHAIN_PATH;
+    if (override && override.trim())
+        return override;
+    if (process.platform !== 'darwin')
+        return null;
+    if (fsSync.existsSync(dedicatedKeychainPath()) && fsSync.existsSync(challengeFilePath())) {
+        return dedicatedKeychainPath();
+    }
+    return null;
+}
+export function isDedicatedModeActive() {
+    return activeKeychainPath() !== null;
+}
+function decodeBase64(value) {
+    return Buffer.from(value.trim(), 'base64').toString('utf-8');
+}
+// Read a generic-password secret from a specific keychain WITHOUT triggering
+// the macOS GUI unlock dialog. With challenge-response we cannot type the
+// keychain password into that dialog, so on a locked keychain we must fail
+// fast (KeychainLockedError) instead of popping an un-fillable prompt.
+//
+// SecKeychainSetUserInteractionAllowed(false) makes a locked keychain return
+// errSecInteractionNotAllowed rather than prompting. Account and keychain path
+// are passed as argv (not string-interpolated) so an odd path can't break or
+// inject into the Swift source. Returns null when the item is absent.
+export function readDedicatedSecret(account, keychainPath) {
+    const swiftScript = `
+import Foundation
+import Security
+
+let service = "${SERVICE_NAME}"
+let account = CommandLine.arguments[1]
+let kcPath = CommandLine.arguments[2]
+
+var kc: SecKeychain?
+let openStatus = SecKeychainOpen(kcPath, &kc)
+if openStatus != errSecSuccess || kc == nil { exit(3) }
+
+SecKeychainSetUserInteractionAllowed(false)
+
+let query: [String: Any] = [
+  kSecClass as String: kSecClassGenericPassword,
+  kSecAttrService as String: service,
+  kSecAttrAccount as String: account,
+  kSecMatchSearchList as String: [kc!],
+  kSecReturnData as String: true,
+  kSecMatchLimit as String: kSecMatchLimitOne
+]
+var item: CFTypeRef?
+let status = SecItemCopyMatching(query as CFDictionary, &item)
+if status == errSecSuccess, let data = item as? Data {
+  FileHandle.standardOutput.write(data.base64EncodedData())
+  exit(0)
+}
+if status == errSecInteractionNotAllowed || status == errSecAuthFailed { exit(2) }
+exit(3)
+`;
+    const scriptPath = path.join(os.tmpdir(), `noxctl-kcread-${process.pid}.swift`);
+    try {
+        fsSync.writeFileSync(scriptPath, swiftScript, { mode: 0o600 });
+        const result = spawnSync('swift', [scriptPath, account, keychainPath], { encoding: 'utf-8' });
+        if (result.status === 0)
+            return decodeBase64(result.stdout);
+        if (result.status === 2)
+            throw new KeychainLockedError();
+        return null;
+    }
+    finally {
+        try {
+            fsSync.unlinkSync(scriptPath);
+        }
+        catch {
+            // ignore cleanup failure
+        }
+    }
+}
+// The fixed challenge is NOT a secret — the secret lives inside the YubiKey.
+// It's a stable random value so the same key always derives the same keychain
+// password. 32 bytes -> 64 hex chars; `ykman otp calculate` wants hex.
+export function generateChallenge() {
+    return randomBytes(32).toString('hex');
+}
+export function readChallenge() {
+    try {
+        const raw = fsSync.readFileSync(challengeFilePath(), 'utf-8').trim();
+        return raw.length > 0 ? raw : null;
+    }
+    catch {
+        return null;
+    }
+}
+export function writeChallenge(challengeHex) {
+    fsSync.mkdirSync(configDir(), { recursive: true, mode: 0o700 });
+    fsSync.writeFileSync(challengeFilePath(), `${challengeHex}\n`, { mode: 0o600 });
+}
+export function enrolledSerialFilePath() {
+    return path.join(configDir(), 'keychain-serial');
+}
+// Serial of the YubiKey the keychain was enrolled against. Persisted at init
+// so unlock can tell "wrong/unenrolled key present" apart from "missed tap" —
+// the two failure modes produce indistinguishable ykman errors otherwise.
+export function readEnrolledSerial() {
+    try {
+        const raw = fsSync.readFileSync(enrolledSerialFilePath(), 'utf-8').trim();
+        return raw.length > 0 ? raw : null;
+    }
+    catch {
+        return null;
+    }
+}
+export function writeEnrolledSerial(serial) {
+    fsSync.mkdirSync(configDir(), { recursive: true, mode: 0o700 });
+    fsSync.writeFileSync(enrolledSerialFilePath(), `${serial}\n`, { mode: 0o600 });
+}
+export function listYubikeySerials() {
+    const r = spawnSync('ykman', ['list', '--serials'], { encoding: 'utf-8' });
+    if (r.status !== 0)
+        return [];
+    return (r.stdout || '')
+        .split('\n')
+        .map((line) => line.trim())
+        .filter((line) => line.length > 0);
+}
+export function diagnoseSerialMismatch(enrolledSerial, presentSerials) {
+    if (!enrolledSerial)
+        return null;
+    if (presentSerials.includes(enrolledSerial))
+        return null;
+    if (presentSerials.length === 0) {
+        return `No YubiKey detected. The keychain was enrolled against YubiKey serial ${enrolledSerial} — insert that key and re-run.`;
+    }
+    return (`Keychain was enrolled against YubiKey serial ${enrolledSerial}, but serial ` +
+        `${presentSerials.join(', ')} is currently present — this is a different key. ` +
+        `Insert the enrolled key, or re-enroll this one (program slot 2 with ` +
+        '`ykman otp chalresp --generate --touch 2`, then re-run `noxctl keychain init`).');
+}
+export function ykmanAvailable() {
+    const r = spawnSync('ykman', ['--version'], { encoding: 'utf-8' });
+    return r.status === 0;
+}
+export function yubikeyPresent() {
+    const r = spawnSync('ykman', ['list'], { encoding: 'utf-8' });
+    return r.status === 0 && r.stdout.trim().length > 0;
+}
+// Ask the YubiKey (OTP slot CR_SLOT) to HMAC the fixed challenge. Touch is
+// required, so ykman's "Touch your YubiKey..." prompt is inherited to the
+// terminal. A missed tap exits non-zero ("Failed to write to the YubiKey").
+// The 40-hex response is the keychain password — returned, never logged.
+export function computeChallengeResponse(challengeHex) {
+    const r = spawnSync('ykman', ['otp', 'calculate', CR_SLOT, challengeHex], {
+        encoding: 'utf-8',
+        stdio: ['ignore', 'pipe', 'pipe'],
+    });
+    if (r.error && r.error.code === 'ENOENT') {
+        throw new ChallengeResponseError('ykman not found — install it with `brew install ykman`');
+    }
+    if (r.status !== 0) {
+        // ykman's own wording is misleading here: "Failed to write to the
+        // YubiKey... restricted access" is what a touch timeout produces, and
+        // "empty slot" means this key was never enrolled. Translate both.
+        const stderr = (r.stderr || '').toString();
+        if (/empty slot/i.test(stderr)) {
+            throw new ChallengeResponseError(`Slot ${CR_SLOT} is not programmed on this YubiKey — it is not the enrolled key ` +
+                '(or its slot was wiped). Program it with `ykman otp chalresp --generate --touch 2` ' +
+                'or insert the enrolled key.');
+        }
+        throw new ChallengeResponseError('Challenge-response failed. This is usually a missed touch — re-run and tap the key firmly when it blinks.' +
+            (stderr.trim() ? `\n(ykman said: ${stderr.trim()})` : ''));
+    }
+    const response = (r.stdout || '').trim();
+    if (!/^[0-9a-fA-F]{40}$/.test(response)) {
+        throw new ChallengeResponseError(`Unexpected challenge-response output (expected 40 hex chars)`);
+    }
+    return response;
+}
+function runSwift(script, args, input) {
+    const scriptPath = path.join(os.tmpdir(), `noxctl-kc-${process.pid}-${Date.now()}.swift`);
+    try {
+        fsSync.writeFileSync(scriptPath, script, { mode: 0o600 });
+        const r = spawnSync('swift', [scriptPath, ...args], {
+            input,
+            encoding: 'utf-8',
+            stdio: input === undefined ? 'pipe' : ['pipe', 'pipe', 'pipe'],
+        });
+        if (r.error)
+            throw r.error;
+        return r.status ?? 1;
+    }
+    finally {
+        try {
+            fsSync.unlinkSync(scriptPath);
+        }
+        catch {
+            // ignore cleanup failure
+        }
+    }
+}
+// Create a file-based keychain at keychainPath with the given password (fed via
+// stdin, never argv). Returns 'created', or 'exists' if one is already there.
+export function createDedicatedKeychain(keychainPath, password) {
+    const script = `
+import Foundation
+import Security
+
+let data = FileHandle.standardInput.readDataToEndOfFile()
+guard let password = String(data: data, encoding: .utf8) else { exit(1) }
+let kcPath = CommandLine.arguments[1]
+let pwBytes = Array(password.utf8)
+var kc: SecKeychain?
+let status = SecKeychainCreate(kcPath, UInt32(pwBytes.count), pwBytes, false, nil, &kc)
+if status == errSecDuplicateKeychain { exit(4) }
+if status != errSecSuccess { exit(1) }
+`;
+    const code = runSwift(script, [keychainPath], password);
+    if (code === 4)
+        return 'exists';
+    if (code !== 0)
+        throw new Error('Failed to create keychain');
+    return 'created';
+}
+// Unlock the keychain with the given password (fed via stdin). Throws on a
+// wrong password (e.g. a different YubiKey or re-programmed slot).
+export function unlockDedicatedKeychain(keychainPath, password) {
+    const script = `
+import Foundation
+import Security
+
+let data = FileHandle.standardInput.readDataToEndOfFile()
+guard let password = String(data: data, encoding: .utf8) else { exit(1) }
+let kcPath = CommandLine.arguments[1]
+var kc: SecKeychain?
+if SecKeychainOpen(kcPath, &kc) != errSecSuccess || kc == nil { exit(3) }
+let pwBytes = Array(password.utf8)
+let status = SecKeychainUnlock(kc!, UInt32(pwBytes.count), pwBytes, true)
+if status != errSecSuccess { exit(2) }
+`;
+    const code = runSwift(script, [keychainPath], password);
+    if (code === 3)
+        throw new Error(`Keychain not found at ${keychainPath} — run \`noxctl keychain init\``);
+    if (code !== 0) {
+        throw new Error('Unlock failed — wrong response. Is this the YubiKey you set up, with slot 2 intact?');
+    }
+}
+export function keychainLockState(keychainPath) {
+    const script = `
+import Foundation
+import Security
+
+let kcPath = CommandLine.arguments[1]
+var kc: SecKeychain?
+if SecKeychainOpen(kcPath, &kc) != errSecSuccess || kc == nil { print("missing"); exit(0) }
+var st: SecKeychainStatus = 0
+if SecKeychainGetStatus(kc!, &st) != errSecSuccess { print("missing"); exit(0) }
+if (st & SecKeychainStatus(kSecUnlockStateStatus)) != 0 { print("unlocked") } else { print("locked") }
+`;
+    const scriptPath = path.join(os.tmpdir(), `noxctl-kcstat-${process.pid}.swift`);
+    try {
+        fsSync.writeFileSync(scriptPath, script, { mode: 0o600 });
+        const r = spawnSync('swift', [scriptPath, keychainPath], { encoding: 'utf-8' });
+        const out = (r.stdout || '').trim();
+        if (out === 'unlocked' || out === 'locked' || out === 'missing')
+            return out;
+        return 'missing';
+    }
+    finally {
+        try {
+            fsSync.unlinkSync(scriptPath);
+        }
+        catch {
+            // ignore cleanup failure
+        }
+    }
+}
+// Lock when the system sleeps, no idle timeout. This is the per-session secret:
+// one tap on wake, open until next sleep.
+export function setLockOnSleep(keychainPath) {
+    const r = spawnSync('security', ['set-keychain-settings', '-l', keychainPath], {
+        encoding: 'utf-8',
+    });
+    if (r.error)
+        throw r.error;
+    if (r.status !== 0) {
+        throw new Error(`security set-keychain-settings failed: ${(r.stderr || '').trim() || `exit ${r.status}`}`);
+    }
+}
+export function lockKeychain(keychainPath) {
+    const r = spawnSync('security', ['lock-keychain', keychainPath], { encoding: 'utf-8' });
+    if (r.error)
+        throw r.error;
+    if (r.status !== 0) {
+        throw new Error(`security lock-keychain failed: ${(r.stderr || '').trim() || `exit ${r.status}`}`);
+    }
+}
+// Delete a generic-password from the LOGIN keychain specifically. The login
+// keychain path is passed explicitly so this never touches the dedicated
+// keychain even if SecKeychainCreate added it to the session search list.
+// Used by `noxctl keychain seal` to remove the pre-migration login copies.
+// Returns true if an item was deleted (exit 0), false if none matched.
+export function deleteLoginSecret(account) {
+    const r = spawnSync('security', ['delete-generic-password', '-a', account, '-s', SERVICE_NAME, loginKeychainPath()], { encoding: 'utf-8' });
+    return r.status === 0;
+}
+//# sourceMappingURL=keychain-target.js.map

package/dist/keychain-target.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"keychain-target.js","sourceRoot":"","sources":["../src/keychain-target.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,MAAM,MAAM,SAAS,CAAC;AAC7B,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAE9C,MAAM,YAAY,GAAG,aAAa,CAAC;AAEnC,sEAAsE;AACtE,6EAA6E;AAC7E,sFAAsF;AACtF,MAAM,CAAC,MAAM,OAAO,GAAG,GAAG,CAAC;AAE3B,yEAAyE;AACzE,gFAAgF;AAChF,+CAA+C;AAC/C,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IAC5C,YACE,OAAO,GAAG,8EAA8E;QAExF,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;IACpC,CAAC;CACF;AAED,+EAA+E;AAC/E,+EAA+E;AAC/E,MAAM,OAAO,sBAAuB,SAAQ,KAAK;IAC/C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,wBAAwB,CAAC;IACvC,CAAC;CACF;AAED,MAAM,UAAU,qBAAqB;IACnC,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,IAAI,GAAG,CAAC;IACrD,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,yBAAyB,CAAC,CAAC;AAC5E,CAAC;AAED,MAAM,UAAU,iBAAiB;IAC/B,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,IAAI,GAAG,CAAC;IACrD,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,mBAAmB,CAAC,CAAC;AACtE,CAAC;AAED,MAAM,UAAU,iBAAiB;IAC/B,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,oBAAoB,CAAC,CAAC;AACtD,CAAC;AAED,8DAA8D;AAC9D,0EAA0E;AAC1E,4EAA4E;AAC5E,mFAAmF;AACnF,4EAA4E;AAC5E,iEAAiE;AACjE,MAAM,UAAU,kBAAkB;IAChC,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC;IAClD,IAAI,QAAQ,IAAI,QAAQ,CAAC,IAAI,EAAE;QAAE,OAAO,QAAQ,CAAC;IACjD,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC/C,IAAI,MAAM,CAAC,UAAU,CAAC,qBAAqB,EAAE,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,iBAAiB,EAAE,CAAC,EAAE,CAAC;QACzF,OAAO,qBAAqB,EAAE,CAAC;IACjC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,qBAAqB;IACnC,OAAO,kBAAkB,EAAE,KAAK,IAAI,CAAC;AACvC,CAAC;AAED,SAAS,YAAY,CAAC,KAAa;IACjC,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;AAC/D,CAAC;AAED,6EAA6E;AAC7E,0EAA0E;AAC1E,2EAA2E;AAC3E,uEAAuE;AACvE,EAAE;AACF,6EAA6E;AAC7E,+EAA+E;AAC/E,6EAA6E;AAC7E,sEAAsE;AACtE,MAAM,UAAU,mBAAmB,CAAC,OAAe,EAAE,YAAoB;IACvE,MAAM,WAAW,GAAG;;;;iBAIL,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;CA0B5B,CAAC;IACA,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,iBAAiB,OAAO,CAAC,GAAG,QAAQ,CAAC,CAAC;IAChF,IAAI,CAAC;QACH,MAAM,CAAC,aAAa,CAAC,UAAU,EAAE,WAAW,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC/D,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,EAAE,CAAC,UAAU,EAAE,OAAO,EAAE,YAAY,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;QAC9F,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC5D,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,IAAI,mBAAmB,EAAE,CAAC;QACzD,OAAO,IAAI,CAAC;IACd,CAAC;YAAS,CAAC;QACT,IAAI,CAAC;YACH,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;QAChC,CAAC;QAAC,MAAM,CAAC;YACP,yBAAyB;QAC3B,CAAC;IACH,CAAC;AACH,CAAC;AAED,6EAA6E;AAC7E,8EAA8E;AAC9E,uEAAuE;AACvE,MAAM,UAAU,iBAAiB;IAC/B,OAAO,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AACzC,CAAC;AAED,MAAM,UAAU,aAAa;IAC3B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,CAAC,YAAY,CAAC,iBAAiB,EAAE,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;QACrE,OAAO,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,YAAoB;IACjD,MAAM,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAChE,MAAM,CAAC,aAAa,CAAC,iBAAiB,EAAE,EAAE,GAAG,YAAY,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;AAClF,CAAC;AAED,MAAM,UAAU,sBAAsB;IACpC,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,iBAAiB,CAAC,CAAC;AACnD,CAAC;AAED,6EAA6E;AAC7E,8EAA8E;AAC9E,0EAA0E;AAC1E,MAAM,UAAU,kBAAkB;IAChC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,CAAC,YAAY,CAAC,sBAAsB,EAAE,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;QAC1E,OAAO,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,MAAc;IAChD,MAAM,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAChE,MAAM,CAAC,aAAa,CAAC,sBAAsB,EAAE,EAAE,GAAG,MAAM,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;AACjF,CAAC;AAED,MAAM,UAAU,kBAAkB;IAChC,MAAM,CAAC,GAAG,SAAS,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE,WAAW,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;IAC3E,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAC9B,OAAO,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC;SACpB,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;SAC1B,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,cAA6B,EAC7B,cAAwB;IAExB,IAAI,CAAC,cAAc;QAAE,OAAO,IAAI,CAAC;IACjC,IAAI,cAAc,CAAC,QAAQ,CAAC,cAAc,CAAC;QAAE,OAAO,IAAI,CAAC;IACzD,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChC,OAAO,yEAAyE,cAAc,gCAAgC,CAAC;IACjI,CAAC;IACD,OAAO,CACL,gDAAgD,cAAc,eAAe;QAC7E,GAAG,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,mDAAmD;QAC/E,sEAAsE;QACtE,iFAAiF,CAClF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,cAAc;IAC5B,MAAM,CAAC,GAAG,SAAS,CAAC,OAAO,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;IACnE,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC;AACxB,CAAC;AAED,MAAM,UAAU,cAAc;IAC5B,MAAM,CAAC,GAAG,SAAS,CAAC,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;IAC9D,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;AACtD,CAAC;AAED,2EAA2E;AAC3E,0EAA0E;AAC1E,4EAA4E;AAC5E,yEAAyE;AACzE,MAAM,UAAU,wBAAwB,CAAC,YAAoB;IAC3D,MAAM,CAAC,GAAG,SAAS,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,YAAY,CAAC,EAAE;QACxE,QAAQ,EAAE,OAAO;QACjB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;KAClC,CAAC,CAAC;IACH,IAAI,CAAC,CAAC,KAAK,IAAK,CAAC,CAAC,KAA+B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QACpE,MAAM,IAAI,sBAAsB,CAAC,wDAAwD,CAAC,CAAC;IAC7F,CAAC;IACD,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnB,kEAAkE;QAClE,sEAAsE;QACtE,kEAAkE;QAClE,MAAM,MAAM,GAAG,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC3C,IAAI,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YAC/B,MAAM,IAAI,sBAAsB,CAC9B,QAAQ,OAAO,kEAAkE;gBAC/E,qFAAqF;gBACrF,6BAA6B,CAChC,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,sBAAsB,CAC9B,2GAA2G;YACzG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,kBAAkB,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAC5D,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACzC,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QACxC,MAAM,IAAI,sBAAsB,CAC9B,8DAA8D,CAC/D,CAAC;IACJ,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,QAAQ,CAAC,MAAc,EAAE,IAAc,EAAE,KAAc;IAC9D,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,aAAa,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC1F,IAAI,CAAC;QACH,MAAM,CAAC,aAAa,CAAC,UAAU,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC1D,MAAM,CAAC,GAAG,SAAS,CAAC,OAAO,EAAE,CAAC,UAAU,EAAE,GAAG,IAAI,CAAC,EAAE;YAClD,KAAK;YACL,QAAQ,EAAE,OAAO;YACjB,KAAK,EAAE,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;SAC/D,CAAC,CAAC;QACH,IAAI,CAAC,CAAC,KAAK;YAAE,MAAM,CAAC,CAAC,KAAK,CAAC;QAC3B,OAAO,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC;IACvB,CAAC;YAAS,CAAC;QACT,IAAI,CAAC;YACH,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;QAChC,CAAC;QAAC,MAAM,CAAC;YACP,yBAAyB;QAC3B,CAAC;IACH,CAAC;AACH,CAAC;AAED,gFAAgF;AAChF,8EAA8E;AAC9E,MAAM,UAAU,uBAAuB,CACrC,YAAoB,EACpB,QAAgB;IAEhB,MAAM,MAAM,GAAG;;;;;;;;;;;;CAYhB,CAAC;IACA,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,YAAY,CAAC,EAAE,QAAQ,CAAC,CAAC;IACxD,IAAI,IAAI,KAAK,CAAC;QAAE,OAAO,QAAQ,CAAC;IAChC,IAAI,IAAI,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAC7D,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,2EAA2E;AAC3E,mEAAmE;AACnE,MAAM,UAAU,uBAAuB,CAAC,YAAoB,EAAE,QAAgB;IAC5E,MAAM,MAAM,GAAG;;;;;;;;;;;;CAYhB,CAAC;IACA,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,YAAY,CAAC,EAAE,QAAQ,CAAC,CAAC;IACxD,IAAI,IAAI,KAAK,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,yBAAyB,YAAY,iCAAiC,CAAC,CAAC;IAC1F,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CACb,qFAAqF,CACtF,CAAC;IACJ,CAAC;AACH,CAAC;AAID,MAAM,UAAU,iBAAiB,CAAC,YAAoB;IACpD,MAAM,MAAM,GAAG;;;;;;;;;;CAUhB,CAAC;IACA,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,iBAAiB,OAAO,CAAC,GAAG,QAAQ,CAAC,CAAC;IAChF,IAAI,CAAC;QACH,MAAM,CAAC,aAAa,CAAC,UAAU,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC1D,MAAM,CAAC,GAAG,SAAS,CAAC,OAAO,EAAE,CAAC,UAAU,EAAE,YAAY,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;QAChF,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACpC,IAAI,GAAG,KAAK,UAAU,IAAI,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,SAAS;YAAE,OAAO,GAAG,CAAC;QAC5E,OAAO,SAAS,CAAC;IACnB,CAAC;YAAS,CAAC;QACT,IAAI,CAAC;YACH,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;QAChC,CAAC;QAAC,MAAM,CAAC;YACP,yBAAyB;QAC3B,CAAC;IACH,CAAC;AACH,CAAC;AAED,gFAAgF;AAChF,0CAA0C;AAC1C,MAAM,UAAU,cAAc,CAAC,YAAoB;IACjD,MAAM,CAAC,GAAG,SAAS,CAAC,UAAU,EAAE,CAAC,uBAAuB,EAAE,IAAI,EAAE,YAAY,CAAC,EAAE;QAC7E,QAAQ,EAAE,OAAO;KAClB,CAAC,CAAC;IACH,IAAI,CAAC,CAAC,KAAK;QAAE,MAAM,CAAC,CAAC,KAAK,CAAC;IAC3B,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CACb,0CAA0C,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,QAAQ,CAAC,CAAC,MAAM,EAAE,EAAE,CAC1F,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,YAAoB;IAC/C,MAAM,CAAC,GAAG,SAAS,CAAC,UAAU,EAAE,CAAC,eAAe,EAAE,YAAY,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;IACxF,IAAI,CAAC,CAAC,KAAK;QAAE,MAAM,CAAC,CAAC,KAAK,CAAC;IAC3B,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CACb,kCAAkC,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,QAAQ,CAAC,CAAC,MAAM,EAAE,EAAE,CAClF,CAAC;IACJ,CAAC;AACH,CAAC;AAED,4EAA4E;AAC5E,yEAAyE;AACzE,0EAA0E;AAC1E,2EAA2E;AAC3E,uEAAuE;AACvE,MAAM,UAAU,iBAAiB,CAAC,OAAe;IAC/C,MAAM,CAAC,GAAG,SAAS,CACjB,UAAU,EACV,CAAC,yBAAyB,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,iBAAiB,EAAE,CAAC,EACnF,EAAE,QAAQ,EAAE,OAAO,EAAE,CACtB,CAAC;IACF,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC;AACxB,CAAC"}

package/dist/operations/absencetransactions.d.ts

@@ -0,0 +1,21 @@
+interface AbsenceTransactionsResponse {
+    AbsenceTransactions: Record<string, unknown>[];
+    MetaInformation?: {
+        '@TotalResources': number;
+        '@TotalPages': number;
+        '@CurrentPage': number;
+    };
+}
+export interface ListAbsenceTransactionsParams {
+    employeeId?: string;
+    date?: string;
+    page?: number;
+    limit?: number;
+    all?: boolean;
+}
+export declare function listAbsenceTransactions(params?: ListAbsenceTransactionsParams): Promise<AbsenceTransactionsResponse>;
+export declare function getAbsenceTransaction(id: string): Promise<Record<string, unknown>>;
+export declare function createAbsenceTransaction(params: Record<string, unknown>): Promise<Record<string, unknown>>;
+export declare function deleteAbsenceTransaction(id: string): Promise<void>;
+export {};
+//# sourceMappingURL=absencetransactions.d.ts.map

package/dist/operations/absencetransactions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"absencetransactions.d.ts","sourceRoot":"","sources":["../../src/operations/absencetransactions.ts"],"names":[],"mappings":"AAMA,UAAU,2BAA2B;IACnC,mBAAmB,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;IAC/C,eAAe,CAAC,EAAE;QAAE,iBAAiB,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,CAAC;QAAC,cAAc,EAAE,MAAM,CAAA;KAAE,CAAC;CAChG;AAED,MAAM,WAAW,6BAA6B;IAC5C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,GAAG,CAAC,EAAE,OAAO,CAAC;CACf;AAED,wBAAsB,uBAAuB,CAC3C,MAAM,GAAE,6BAAkC,GACzC,OAAO,CAAC,2BAA2B,CAAC,CAsBtC;AAED,wBAAsB,qBAAqB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAKxF;AAED,wBAAsB,wBAAwB,CAC5C,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAMlC;AAED,wBAAsB,wBAAwB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAIxE"}

package/dist/operations/absencetransactions.js

@@ -0,0 +1,36 @@
+import { fortnoxRequest, fetchAllPages } from '../fortnox-client.js';
+export async function listAbsenceTransactions(params = {}) {
+    // Note the lowercase query keys: Fortnox expects "employeeid" and "date".
+    if (params.all) {
+        const { items, totalResources } = await fetchAllPages('absencetransactions', 'AbsenceTransactions', { employeeid: params.employeeId, date: params.date });
+        return {
+            AbsenceTransactions: items,
+            MetaInformation: { '@TotalResources': totalResources, '@TotalPages': 1, '@CurrentPage': 1 },
+        };
+    }
+    return fortnoxRequest('absencetransactions', {
+        params: {
+            employeeid: params.employeeId,
+            date: params.date,
+            page: params.page || 1,
+            limit: params.limit || 100,
+        },
+    });
+}
+export async function getAbsenceTransaction(id) {
+    const data = await fortnoxRequest(`absencetransactions/${encodeURIComponent(id)}`);
+    return data.AbsenceTransaction;
+}
+export async function createAbsenceTransaction(params) {
+    const data = await fortnoxRequest('absencetransactions', {
+        method: 'POST',
+        body: { AbsenceTransaction: params },
+    });
+    return data.AbsenceTransaction;
+}
+export async function deleteAbsenceTransaction(id) {
+    await fortnoxRequest(`absencetransactions/${encodeURIComponent(id)}`, {
+        method: 'DELETE',
+    });
+}
+//# sourceMappingURL=absencetransactions.js.map

package/dist/operations/absencetransactions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"absencetransactions.js","sourceRoot":"","sources":["../../src/operations/absencetransactions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAmBrE,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,SAAwC,EAAE;IAE1C,0EAA0E;IAC1E,IAAI,MAAM,CAAC,GAAG,EAAE,CAAC;QACf,MAAM,EAAE,KAAK,EAAE,cAAc,EAAE,GAAG,MAAM,aAAa,CACnD,qBAAqB,EACrB,qBAAqB,EACrB,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CACrD,CAAC;QACF,OAAO;YACL,mBAAmB,EAAE,KAAK;YAC1B,eAAe,EAAE,EAAE,iBAAiB,EAAE,cAAc,EAAE,aAAa,EAAE,CAAC,EAAE,cAAc,EAAE,CAAC,EAAE;SAC5F,CAAC;IACJ,CAAC;IAED,OAAO,cAAc,CAA8B,qBAAqB,EAAE;QACxE,MAAM,EAAE;YACN,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,CAAC;YACtB,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,GAAG;SAC3B;KACF,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,EAAU;IACpD,MAAM,IAAI,GAAG,MAAM,cAAc,CAC/B,uBAAuB,kBAAkB,CAAC,EAAE,CAAC,EAAE,CAChD,CAAC;IACF,OAAO,IAAI,CAAC,kBAAkB,CAAC;AACjC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,MAA+B;IAE/B,MAAM,IAAI,GAAG,MAAM,cAAc,CAA6B,qBAAqB,EAAE;QACnF,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,EAAE,kBAAkB,EAAE,MAAM,EAAE;KACrC,CAAC,CAAC;IACH,OAAO,IAAI,CAAC,kBAAkB,CAAC;AACjC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,EAAU;IACvD,MAAM,cAAc,CAAC,uBAAuB,kBAAkB,CAAC,EAAE,CAAC,EAAE,EAAE;QACpE,MAAM,EAAE,QAAQ;KACjB,CAAC,CAAC;AACL,CAAC"}

package/dist/operations/analytics.d.ts

@@ -0,0 +1,84 @@
+type InvoiceRow = Record<string, unknown>;
+export interface OverdueSummary {
+    count: number;
+    totalBalance: number;
+    oldestDueDate: string | null;
+    invoices: InvoiceRow[];
+}
+export declare function summarizeOverdue(invoices: InvoiceRow[], today: string): OverdueSummary;
+export interface UnpaidSummary {
+    count: number;
+    totalBalance: number;
+    overdueCount: number;
+    overdueBalance: number;
+}
+export declare function summarizeUnpaid(invoices: InvoiceRow[], today: string): UnpaidSummary;
+export interface CustomerRevenue {
+    CustomerNumber: string;
+    CustomerName: string;
+    total: number;
+    invoiceCount: number;
+}
+export declare function topCustomersFrom(invoices: InvoiceRow[], limit: number): CustomerRevenue[];
+export interface MonthlyRevenue {
+    month: string;
+    total: number;
+    invoiceCount: number;
+}
+export declare function monthlyRevenueFrom(invoices: InvoiceRow[]): MonthlyRevenue[];
+export declare function localIsoDate(d: Date): string;
+export declare function dashboardWindowStart(today: Date, months: number): string;
+export declare function getOverdueSummary(): Promise<OverdueSummary>;
+export declare function getUnpaidTotals(): Promise<UnpaidSummary>;
+export interface TopCustomersParams {
+    fromDate?: string;
+    toDate?: string;
+    limit?: number;
+}
+export declare function getTopCustomers(params?: TopCustomersParams): Promise<{
+    period: {
+        from?: string;
+        to?: string;
+    };
+    customers: CustomerRevenue[];
+}>;
+export interface VatSummaryParams {
+    fromDate: string;
+    toDate: string;
+    financialYear?: number;
+}
+export declare function netVatFromVatAccounts(vatAccounts: Record<number, {
+    debit?: number;
+    credit?: number;
+}> | undefined): number;
+export declare function getVatSummary(params: VatSummaryParams): Promise<{
+    netVat: number;
+    period: {
+        from: string;
+        to: string;
+    };
+    vatAccounts: Record<number, {
+        debit: number;
+        credit: number;
+        description: string;
+    }>;
+    accountBalances: {
+        account: number;
+        description: string;
+        balance: number;
+    }[];
+    summary: {
+        note: string;
+    };
+}>;
+export interface Dashboard {
+    unpaid: UnpaidSummary;
+    overdue: OverdueSummary;
+    recentInvoices: InvoiceRow[];
+    monthlyRevenue: MonthlyRevenue[];
+}
+export declare function getDashboard(options?: {
+    months?: number;
+}): Promise<Dashboard>;
+export {};
+//# sourceMappingURL=analytics.d.ts.map

package/dist/operations/analytics.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"analytics.d.ts","sourceRoot":"","sources":["../../src/operations/analytics.ts"],"names":[],"mappings":"AAUA,KAAK,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAmB1C,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,QAAQ,EAAE,UAAU,EAAE,CAAC;CACxB;AAED,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,UAAU,EAAE,EAAE,KAAK,EAAE,MAAM,GAAG,cAAc,CAUtF;AAED,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,wBAAgB,eAAe,CAAC,QAAQ,EAAE,UAAU,EAAE,EAAE,KAAK,EAAE,MAAM,GAAG,aAAa,CASpF;AAED,MAAM,WAAW,eAAe;IAC9B,cAAc,EAAE,MAAM,CAAC;IACvB,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,UAAU,EAAE,EAAE,KAAK,EAAE,MAAM,GAAG,eAAe,EAAE,CAgBzF;AAED,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,UAAU,EAAE,GAAG,cAAc,EAAE,CAY3E;AAMD,wBAAgB,YAAY,CAAC,CAAC,EAAE,IAAI,GAAG,MAAM,CAK5C;AAYD,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAExE;AAED,wBAAsB,iBAAiB,IAAI,OAAO,CAAC,cAAc,CAAC,CAGjE;AAED,wBAAsB,eAAe,IAAI,OAAO,CAAC,aAAa,CAAC,CAG9D;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,wBAAsB,eAAe,CAAC,MAAM,GAAE,kBAAuB,GAAG,OAAO,CAAC;IAC9E,MAAM,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,EAAE,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACvC,SAAS,EAAE,eAAe,EAAE,CAAC;CAC9B,CAAC,CAMD;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAID,wBAAgB,qBAAqB,CACnC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE;IAAE,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,GAAG,SAAS,GAC3E,MAAM,CAMR;AAID,wBAAsB,aAAa,CAAC,MAAM,EAAE,gBAAgB;;;;;;;;;;;;;;;;;;;GAG3D;AAED,MAAM,WAAW,SAAS;IACxB,MAAM,EAAE,aAAa,CAAC;IACtB,OAAO,EAAE,cAAc,CAAC;IACxB,cAAc,EAAE,UAAU,EAAE,CAAC;IAC7B,cAAc,EAAE,cAAc,EAAE,CAAC;CAClC;AAID,wBAAsB,YAAY,CAAC,OAAO,GAAE;IAAE,MAAM,CAAC,EAAE,MAAM,CAAA;CAAO,GAAG,OAAO,CAAC,SAAS,CAAC,CA2BxF"}