noxctl 0.9.0 → 0.10.0

package/README.md

@@ -31,6 +31,20 @@ no shared credential and no backend operated by this project.
   Secret Service, or a DPAPI-protected Windows store.
 - **Multiple companies:** named profiles keep Fortnox tenants separate.
 
+### API coverage boundary
+
+noxctl tracks the complete published Fortnox operation inventory in an opaque,
+privacy-safe implementation manifest. Every family is classified as complete,
+partial, excluded, or blocked, and implemented families are verified against actual
+operation exports, discovered MCP tools, and CLI commands.
+
+The open-source core deliberately excludes separate product domains such as warehouse
+management, partner onboarding/KYC, integration-marketplace administration, and the
+standalone time-reporting API. Shared reference/configuration resources are read-first:
+their reads are supported, while writes are explicitly excluded from the v1 core.
+Remote URL attachment connections are also excluded because they introduce a separate
+remote-fetch trust boundary. These are product-boundary decisions, not hidden gaps.
+
 ## Quick start
 
 You need Node.js 22.12+, a Fortnox account with API access, and your own Fortnox
@@ -165,6 +179,8 @@ Token management is automatic after setup — no environment variables needed go
 
 ### 3. Register as MCP server (optional — for Claude Desktop/Web)
 
+Running `noxctl` without arguments prints help and exits. Use `noxctl serve` to start the MCP server.
+
 If you use Claude Desktop or claude.ai, register the MCP server so those environments can access Fortnox. Claude Code can use the CLI directly, so this step is optional there.
 
 ```bash
@@ -377,6 +393,8 @@ Every operation is available both as a CLI command and as an MCP tool. The CLI i
 | `noxctl supplier-invoices get <givenNumber>` | `fortnox_get_supplier_invoice` | Get a single supplier invoice |
 | `noxctl supplier-invoices create --supplier <n> --input <file>` | `fortnox_create_supplier_invoice` | Create a supplier invoice (mutation) |
 | `noxctl supplier-invoices bookkeep <givenNumber>` | `fortnox_bookkeep_supplier_invoice` | Bookkeep a supplier invoice (mutation) |
+| `noxctl supplier-invoices attachments <givenNumber>` | `fortnox_list_supplier_invoice_attachments` | List files (e.g. the scanned/received invoice) attached to a supplier invoice — works for unbooked/authorizepending invoices too, read-only, default scopes only |
+| `noxctl supplier-invoices file <fileId> [-f <path>]` | `fortnox_get_supplier_invoice_file` | Download a file attached to a supplier invoice (get `fileId` from `supplier-invoices attachments`) — read-only, default scopes only |
 
 ### Supplier invoice payments (utbetalningar)
 
@@ -422,6 +440,7 @@ Every operation is available both as a CLI command and as an MCP tool. The CLI i
 | `noxctl vouchers attach <series> <number> <file...> [--year]` | `fortnox_attach_voucher_files` | Upload receipt/underlag files and link them to a voucher (mutation; needs the Fortnox archive scope) |
 | `noxctl vouchers attachments <series> <number> [--year]` | `fortnox_list_voucher_attachments` | List files (receipts/underlag) already attached to a voucher — read-only, default scopes only |
 | `noxctl vouchers file <fileId> [-f <path>]` | `fortnox_get_voucher_file` | Download a file attached to a voucher (get `fileId` from `vouchers attachments`) — read-only, default scopes only |
+| `noxctl general-ledger list --from <date> --to <date> [--year] [--account] [--series]` / alias `ledger list` | `fortnox_general_ledger` | Bookkeeping transactions with amounts for a date range, one row per posting — reads Fortnox's SIE export instead of walking vouchers one by one, so it stays fast for a full year. Read-only, default scopes only |
 | `noxctl accounts list [--search <term>]` | `fortnox_list_accounts` | View chart of accounts, search by name or number |
 
 ### Financial reports
@@ -496,6 +515,44 @@ Every operation is available both as a CLI command and as an MCP tool. The CLI i
 | `noxctl financial-years get <id>` | `fortnox_get_financialyear` | Get a single financial year |
 | `noxctl financial-years locked-period` | `fortnox_get_lockedperiod` | Show through which date bookkeeping is locked |
 
+### Reference and setup data (read-only)
+
+The following command groups expose `list` and, where Fortnox provides it, `get` in
+both CLI and MCP: `currencies`, `units`, `modes-of-payments`,
+`terms-of-deliveries`, `terms-of-payments`, `ways-of-delivery`, `voucher-series`,
+`predefined-voucher-series`, `account-charts`, `predefined-accounts`, and
+`customer-references`.
+
+```bash
+noxctl currencies list
+noxctl terms-of-payments get 30
+noxctl account-charts list
+```
+
+### Accruals (periodiseringar)
+
+| CLI group | MCP tool prefix | Operations |
+|---|---|---|
+| `noxctl invoice-accruals` | `fortnox_*_invoice_accrual` | list, get, create, update, delete |
+| `noxctl supplier-invoice-accruals` | `fortnox_*_supplier_invoice_accrual` | list, get, create, update, delete |
+| `noxctl contract-accruals` | `fortnox_*_contract_accrual` | list, get, create, update, delete |
+
+Every mutation supports confirmation and dry-run preview. Nested accrual rows are
+strict and validated before any request is sent.
+
+### Archive, inbox, and cross-document attachments
+
+| CLI group | MCP surface | Purpose |
+|---|---|---|
+| `noxctl archive` | `fortnox_*_archive*` | List/download, multipart upload, delete path/entry |
+| `noxctl inbox` | `fortnox_*_inbox*` | List, multipart upload, safe download, delete |
+| `noxctl attachments` | `fortnox_*_document_attachment*` | Attach/list/count/validate/update/detach for invoices, offers, orders, and contracts |
+
+Voucher and supplier-invoice file connections additionally expose get/connect/detach
+commands under their existing CLI groups. Binary downloads default to a private
+temporary directory, use mode `0600`, refuse symlink targets and accidental overwrite,
+and only replace an existing regular file when `--overwrite` is explicit.
+
 ### Payroll (Lön)
 
 > **Requires the `salary` scope**, which is **opt-in**. Enable the **Lön** permission on your Fortnox app, then run `noxctl init --with-salary` (or set `FORTNOX_WITH_SALARY=1` in non-interactive setups). Without it, these endpoints return `403 Forbidden`. See [Setup](#1-create-a-fortnox-app).
@@ -671,7 +728,8 @@ npm run test:watch   # watch mode
 npm run lint         # ESLint with typescript-eslint
 npm run format       # format
 npm run check:api    # refresh the git-ignored OpenAPI cache and detect API drift
-npm run audit:schemas # compare selected MCP write schemas with the local cache
+npm run audit:schemas # inventory and recursively audit every mutating MCP input
+npm run audit:api-coverage # verify the full operation inventory and implementation evidence
 ```
 
 ## Architecture

package/dist/api-coverage.d.ts

@@ -0,0 +1,48 @@
+export type ApiCoverageClassification = 'complete' | 'partial' | 'excluded' | 'blocked';
+export interface ApiCoverageMapping {
+    id: string;
+    classification: ApiCoverageClassification;
+    publicOperationCount: number;
+    implementedOperationIdentities: readonly string[];
+    missingOperationIdentities: readonly string[];
+    excludedOperationIdentities?: readonly string[];
+    evidence?: {
+        operationExports: readonly string[];
+        mcpTools: readonly string[];
+        cliCommands: readonly (readonly string[])[];
+    };
+    rationale?: string;
+}
+export interface ApiCoverageResult extends ApiCoverageMapping {
+    implementedOperationIdentities: string[];
+    missingOperationIdentities: string[];
+    excludedOperationIdentities: string[];
+    implementedCount: number;
+    missingCount: number;
+    excludedCount: number;
+    stateHash: string;
+}
+export interface ApiCoverageBaselineRecord {
+    id: string;
+    classification: ApiCoverageClassification;
+    publicOperationCount: number;
+    implementedCount: number;
+    missingCount: number;
+    excludedCount: number;
+    stateHash: string;
+    rationale?: string;
+}
+export interface ApiCoverageBaseline {
+    formatVersion: 1;
+    records: ApiCoverageBaselineRecord[];
+}
+export interface ApiCoverageComparison {
+    matches: boolean;
+    changedMappingIds: string[];
+}
+export declare function calculateApiCoverage(mappings: readonly ApiCoverageMapping[]): ApiCoverageResult[];
+export declare function toApiCoverageBaseline(results: readonly ApiCoverageResult[]): ApiCoverageBaseline;
+export declare function compareApiCoverageBaselines(expected: ApiCoverageBaseline, current: ApiCoverageBaseline): ApiCoverageComparison;
+export declare function formatApiCoverageSummary(results: readonly ApiCoverageResult[], comparison?: ApiCoverageComparison): string;
+export declare function formatApiCoverageDetails(results: readonly ApiCoverageResult[]): string;
+//# sourceMappingURL=api-coverage.d.ts.map

package/dist/api-coverage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-coverage.d.ts","sourceRoot":"","sources":["../src/api-coverage.ts"],"names":[],"mappings":"AAIA,MAAM,MAAM,yBAAyB,GAAG,UAAU,GAAG,SAAS,GAAG,UAAU,GAAG,SAAS,CAAC;AAExF,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,cAAc,EAAE,yBAAyB,CAAC;IAC1C,oBAAoB,EAAE,MAAM,CAAC;IAC7B,8BAA8B,EAAE,SAAS,MAAM,EAAE,CAAC;IAClD,0BAA0B,EAAE,SAAS,MAAM,EAAE,CAAC;IAC9C,2BAA2B,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAChD,QAAQ,CAAC,EAAE;QACT,gBAAgB,EAAE,SAAS,MAAM,EAAE,CAAC;QACpC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;QAC5B,WAAW,EAAE,SAAS,CAAC,SAAS,MAAM,EAAE,CAAC,EAAE,CAAC;KAC7C,CAAC;IACF,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,iBAAkB,SAAQ,kBAAkB;IAC3D,8BAA8B,EAAE,MAAM,EAAE,CAAC;IACzC,0BAA0B,EAAE,MAAM,EAAE,CAAC;IACrC,2BAA2B,EAAE,MAAM,EAAE,CAAC;IACtC,gBAAgB,EAAE,MAAM,CAAC;IACzB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,yBAAyB;IACxC,EAAE,EAAE,MAAM,CAAC;IACX,cAAc,EAAE,yBAAyB,CAAC;IAC1C,oBAAoB,EAAE,MAAM,CAAC;IAC7B,gBAAgB,EAAE,MAAM,CAAC;IACzB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,mBAAmB;IAClC,aAAa,EAAE,CAAC,CAAC;IACjB,OAAO,EAAE,yBAAyB,EAAE,CAAC;CACtC;AAED,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,OAAO,CAAC;IACjB,iBAAiB,EAAE,MAAM,EAAE,CAAC;CAC7B;AA4GD,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,SAAS,kBAAkB,EAAE,GAAG,iBAAiB,EAAE,CAuBjG;AAED,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,SAAS,iBAAiB,EAAE,GAAG,mBAAmB,CA2BhG;AAED,wBAAgB,2BAA2B,CACzC,QAAQ,EAAE,mBAAmB,EAC7B,OAAO,EAAE,mBAAmB,GAC3B,qBAAqB,CAWvB;AAED,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,SAAS,iBAAiB,EAAE,EACrC,UAAU,CAAC,EAAE,qBAAqB,GACjC,MAAM,CA6BR;AAED,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,SAAS,iBAAiB,EAAE,GAAG,MAAM,CAYtF"}

package/dist/api-coverage.js

@@ -0,0 +1,175 @@
+import { createHash } from 'node:crypto';
+const HASH_DOMAIN = 'noxctl-api-coverage/v1';
+const compareText = (left, right) => left.localeCompare(right, 'en');
+function assertUnique(values, label, id) {
+    if (new Set(values).size !== values.length) {
+        throw new Error(`Duplicate ${label} identities for mapping ${id}`);
+    }
+}
+function validateMapping(mapping) {
+    if (!['complete', 'partial', 'excluded', 'blocked'].includes(mapping.classification)) {
+        throw new Error(`Invalid classification for mapping ${mapping.id}`);
+    }
+    if (!Number.isInteger(mapping.publicOperationCount) || mapping.publicOperationCount < 0) {
+        throw new Error(`Invalid publicOperationCount for mapping ${mapping.id}`);
+    }
+    assertUnique(mapping.implementedOperationIdentities, 'implemented', mapping.id);
+    assertUnique(mapping.missingOperationIdentities, 'missing', mapping.id);
+    assertUnique(mapping.excludedOperationIdentities ?? [], 'excluded', mapping.id);
+    if (mapping.evidence) {
+        assertUnique(mapping.evidence.operationExports, 'operation-export evidence', mapping.id);
+        assertUnique(mapping.evidence.mcpTools, 'MCP-tool evidence', mapping.id);
+        assertUnique(mapping.evidence.cliCommands.map((command) => JSON.stringify(command)), 'CLI-command evidence', mapping.id);
+    }
+    const implemented = new Set(mapping.implementedOperationIdentities);
+    if (mapping.missingOperationIdentities.some((identity) => implemented.has(identity))) {
+        throw new Error(`Operation appears as both implemented and missing for mapping ${mapping.id}`);
+    }
+    const missing = new Set(mapping.missingOperationIdentities);
+    const excluded = mapping.excludedOperationIdentities ?? [];
+    if (excluded.some((identity) => implemented.has(identity) || missing.has(identity))) {
+        throw new Error(`Operation has more than one coverage state for mapping ${mapping.id}`);
+    }
+    const accountedCount = mapping.implementedOperationIdentities.length +
+        mapping.missingOperationIdentities.length +
+        excluded.length;
+    if (accountedCount !== mapping.publicOperationCount) {
+        throw new Error(`Mapping ${mapping.id} accounts for ${accountedCount} of ${mapping.publicOperationCount} public operations`);
+    }
+    if (mapping.classification === 'complete' && mapping.missingOperationIdentities.length > 0) {
+        throw new Error(`Complete mapping ${mapping.id} has missing operations`);
+    }
+    if (mapping.classification === 'partial' && mapping.missingOperationIdentities.length === 0) {
+        throw new Error(`Partial mapping ${mapping.id} must have a missing operation`);
+    }
+    if (mapping.implementedOperationIdentities.length > 0 &&
+        (!mapping.evidence?.operationExports.length ||
+            !mapping.evidence.mcpTools.length ||
+            !mapping.evidence.cliCommands.length)) {
+        throw new Error(`Implemented mapping ${mapping.id} requires export, MCP, and CLI evidence`);
+    }
+    if ((mapping.classification === 'excluded' ||
+        mapping.classification === 'blocked' ||
+        excluded.length > 0) &&
+        !mapping.rationale?.trim()) {
+        throw new Error(`${mapping.classification} mapping ${mapping.id} requires a rationale`);
+    }
+    if ((mapping.classification === 'excluded' || mapping.classification === 'blocked') &&
+        (mapping.implementedOperationIdentities.length > 0 ||
+            (mapping.evidence &&
+                (mapping.evidence.operationExports.length > 0 ||
+                    mapping.evidence.mcpTools.length > 0 ||
+                    mapping.evidence.cliCommands.length > 0)))) {
+        throw new Error(`${mapping.classification} mapping ${mapping.id} cannot have implemented operations or exposure evidence`);
+    }
+}
+function calculateStateHash(mapping) {
+    const canonical = JSON.stringify({
+        domain: HASH_DOMAIN,
+        id: mapping.id,
+        classification: mapping.classification,
+        publicOperationCount: mapping.publicOperationCount,
+        implemented: [...mapping.implementedOperationIdentities].sort(compareText),
+        missing: [...mapping.missingOperationIdentities].sort(compareText),
+        excluded: [...(mapping.excludedOperationIdentities ?? [])].sort(compareText),
+        evidence: mapping.evidence
+            ? {
+                operationExports: [...mapping.evidence.operationExports].sort(compareText),
+                mcpTools: [...mapping.evidence.mcpTools].sort(compareText),
+                cliCommands: mapping.evidence.cliCommands
+                    .map((command) => [...command])
+                    .sort((left, right) => compareText(JSON.stringify(left), JSON.stringify(right))),
+            }
+            : undefined,
+        rationale: mapping.rationale,
+    });
+    return createHash('sha256').update(canonical).digest('hex');
+}
+export function calculateApiCoverage(mappings) {
+    const ids = new Set();
+    return mappings
+        .map((mapping) => {
+        if (ids.has(mapping.id))
+            throw new Error(`Duplicate API coverage mapping id: ${mapping.id}`);
+        ids.add(mapping.id);
+        validateMapping(mapping);
+        return {
+            ...mapping,
+            implementedOperationIdentities: [...mapping.implementedOperationIdentities].sort(compareText),
+            missingOperationIdentities: [...mapping.missingOperationIdentities].sort(compareText),
+            excludedOperationIdentities: [...(mapping.excludedOperationIdentities ?? [])].sort(compareText),
+            implementedCount: mapping.implementedOperationIdentities.length,
+            missingCount: mapping.missingOperationIdentities.length,
+            excludedCount: mapping.excludedOperationIdentities?.length ?? 0,
+            stateHash: calculateStateHash(mapping),
+        };
+    })
+        .sort((left, right) => compareText(left.id, right.id));
+}
+export function toApiCoverageBaseline(results) {
+    return {
+        formatVersion: 1,
+        records: [...results]
+            .sort((left, right) => compareText(left.id, right.id))
+            .map(({ id, classification, publicOperationCount, implementedCount, missingCount, excludedCount, stateHash, rationale, }) => ({
+            id,
+            classification,
+            publicOperationCount,
+            implementedCount,
+            missingCount,
+            excludedCount,
+            stateHash,
+            ...(rationale ? { rationale } : {}),
+        })),
+    };
+}
+export function compareApiCoverageBaselines(expected, current) {
+    const expectedRecords = new Map(expected.records.map((record) => [record.id, record]));
+    const currentRecords = new Map(current.records.map((record) => [record.id, record]));
+    const ids = new Set([...expectedRecords.keys(), ...currentRecords.keys()]);
+    const changedMappingIds = [...ids]
+        .filter((id) => JSON.stringify(expectedRecords.get(id)) !== JSON.stringify(currentRecords.get(id)))
+        .sort(compareText);
+    if (expected.formatVersion !== current.formatVersion)
+        changedMappingIds.unshift('$format');
+    return { matches: changedMappingIds.length === 0, changedMappingIds };
+}
+export function formatApiCoverageSummary(results, comparison) {
+    const status = comparison ? (comparison.matches ? 'ok' : 'drift') : 'generated';
+    const totals = results.reduce((value, result) => ({
+        ...value,
+        [result.classification]: value[result.classification] + 1,
+        public: value.public + result.publicOperationCount,
+        implemented: value.implemented + result.implementedCount,
+        excludedOperations: value.excludedOperations + result.excludedCount,
+        missing: value.missing + result.missingCount,
+    }), {
+        complete: 0,
+        partial: 0,
+        excluded: 0,
+        blocked: 0,
+        public: 0,
+        implemented: 0,
+        excludedOperations: 0,
+        missing: 0,
+    });
+    const lines = [
+        `API coverage: ${status} families=${results.length} complete=${totals.complete} partial=${totals.partial} excluded=${totals.excluded} blocked=${totals.blocked} public=${totals.public} implemented=${totals.implemented} excluded-operations=${totals.excludedOperations} missing=${totals.missing}`,
+    ];
+    if (comparison && !comparison.matches) {
+        lines.push(`Changed mappings: ${comparison.changedMappingIds.join(', ')}`);
+    }
+    return `${lines.join('\n')}\n`;
+}
+export function formatApiCoverageDetails(results) {
+    const lines = [];
+    for (const result of results) {
+        lines.push(`${result.id}:`);
+        const identities = [...result.missingOperationIdentities].sort(compareText);
+        lines.push(...(identities.length
+            ? identities.map((identity) => `  - ${JSON.stringify(identity)}`)
+            : ['  (none)']));
+    }
+    return `${lines.join('\n')}\n`;
+}
+//# sourceMappingURL=api-coverage.js.map

package/dist/api-coverage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-coverage.js","sourceRoot":"","sources":["../src/api-coverage.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,MAAM,WAAW,GAAG,wBAAwB,CAAC;AAkD7C,MAAM,WAAW,GAAG,CAAC,IAAY,EAAE,KAAa,EAAU,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;AAE7F,SAAS,YAAY,CAAC,MAAyB,EAAE,KAAa,EAAE,EAAU;IACxE,IAAI,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC;QAC3C,MAAM,IAAI,KAAK,CAAC,aAAa,KAAK,2BAA2B,EAAE,EAAE,CAAC,CAAC;IACrE,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,OAA2B;IAClD,IAAI,CAAC,CAAC,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC;QACrF,MAAM,IAAI,KAAK,CAAC,sCAAsC,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;IACtE,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,oBAAoB,CAAC,IAAI,OAAO,CAAC,oBAAoB,GAAG,CAAC,EAAE,CAAC;QACxF,MAAM,IAAI,KAAK,CAAC,4CAA4C,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;IAC5E,CAAC;IAED,YAAY,CAAC,OAAO,CAAC,8BAA8B,EAAE,aAAa,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;IAChF,YAAY,CAAC,OAAO,CAAC,0BAA0B,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;IACxE,YAAY,CAAC,OAAO,CAAC,2BAA2B,IAAI,EAAE,EAAE,UAAU,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;IAChF,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;QACrB,YAAY,CAAC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,EAAE,2BAA2B,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;QACzF,YAAY,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,EAAE,mBAAmB,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;QACzE,YAAY,CACV,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,EACtE,sBAAsB,EACtB,OAAO,CAAC,EAAE,CACX,CAAC;IACJ,CAAC;IACD,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,8BAA8B,CAAC,CAAC;IACpE,IAAI,OAAO,CAAC,0BAA0B,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;QACrF,MAAM,IAAI,KAAK,CAAC,iEAAiE,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;IACjG,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC;IAC5D,MAAM,QAAQ,GAAG,OAAO,CAAC,2BAA2B,IAAI,EAAE,CAAC;IAC3D,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;QACpF,MAAM,IAAI,KAAK,CAAC,0DAA0D,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;IAC1F,CAAC;IAED,MAAM,cAAc,GAClB,OAAO,CAAC,8BAA8B,CAAC,MAAM;QAC7C,OAAO,CAAC,0BAA0B,CAAC,MAAM;QACzC,QAAQ,CAAC,MAAM,CAAC;IAClB,IAAI,cAAc,KAAK,OAAO,CAAC,oBAAoB,EAAE,CAAC;QACpD,MAAM,IAAI,KAAK,CACb,WAAW,OAAO,CAAC,EAAE,iBAAiB,cAAc,OAAO,OAAO,CAAC,oBAAoB,oBAAoB,CAC5G,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,cAAc,KAAK,UAAU,IAAI,OAAO,CAAC,0BAA0B,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3F,MAAM,IAAI,KAAK,CAAC,oBAAoB,OAAO,CAAC,EAAE,yBAAyB,CAAC,CAAC;IAC3E,CAAC;IACD,IAAI,OAAO,CAAC,cAAc,KAAK,SAAS,IAAI,OAAO,CAAC,0BAA0B,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5F,MAAM,IAAI,KAAK,CAAC,mBAAmB,OAAO,CAAC,EAAE,gCAAgC,CAAC,CAAC;IACjF,CAAC;IACD,IACE,OAAO,CAAC,8BAA8B,CAAC,MAAM,GAAG,CAAC;QACjD,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,gBAAgB,CAAC,MAAM;YACzC,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM;YACjC,CAAC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,MAAM,CAAC,EACvC,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,uBAAuB,OAAO,CAAC,EAAE,yCAAyC,CAAC,CAAC;IAC9F,CAAC;IACD,IACE,CAAC,OAAO,CAAC,cAAc,KAAK,UAAU;QACpC,OAAO,CAAC,cAAc,KAAK,SAAS;QACpC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;QACtB,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,EAAE,EAC1B,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,GAAG,OAAO,CAAC,cAAc,YAAY,OAAO,CAAC,EAAE,uBAAuB,CAAC,CAAC;IAC1F,CAAC;IACD,IACE,CAAC,OAAO,CAAC,cAAc,KAAK,UAAU,IAAI,OAAO,CAAC,cAAc,KAAK,SAAS,CAAC;QAC/E,CAAC,OAAO,CAAC,8BAA8B,CAAC,MAAM,GAAG,CAAC;YAChD,CAAC,OAAO,CAAC,QAAQ;gBACf,CAAC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC,MAAM,GAAG,CAAC;oBAC3C,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC;oBACpC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAChD,CAAC;QACD,MAAM,IAAI,KAAK,CACb,GAAG,OAAO,CAAC,cAAc,YAAY,OAAO,CAAC,EAAE,0DAA0D,CAC1G,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CAAC,OAA2B;IACrD,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;QAC/B,MAAM,EAAE,WAAW;QACnB,EAAE,EAAE,OAAO,CAAC,EAAE;QACd,cAAc,EAAE,OAAO,CAAC,cAAc;QACtC,oBAAoB,EAAE,OAAO,CAAC,oBAAoB;QAClD,WAAW,EAAE,CAAC,GAAG,OAAO,CAAC,8BAA8B,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC;QAC1E,OAAO,EAAE,CAAC,GAAG,OAAO,CAAC,0BAA0B,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC;QAClE,QAAQ,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,2BAA2B,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC;QAC5E,QAAQ,EAAE,OAAO,CAAC,QAAQ;YACxB,CAAC,CAAC;gBACE,gBAAgB,EAAE,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC;gBAC1E,QAAQ,EAAE,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC;gBAC1D,WAAW,EAAE,OAAO,CAAC,QAAQ,CAAC,WAAW;qBACtC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC;qBAC9B,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;aACnF;YACH,CAAC,CAAC,SAAS;QACb,SAAS,EAAE,OAAO,CAAC,SAAS;KAC7B,CAAC,CAAC;IACH,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC9D,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,QAAuC;IAC1E,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,OAAO,QAAQ;SACZ,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE;QACf,IAAI,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;QAC7F,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACpB,eAAe,CAAC,OAAO,CAAC,CAAC;QACzB,OAAO;YACL,GAAG,OAAO;YACV,8BAA8B,EAAE,CAAC,GAAG,OAAO,CAAC,8BAA8B,CAAC,CAAC,IAAI,CAC9E,WAAW,CACZ;YACD,0BAA0B,EAAE,CAAC,GAAG,OAAO,CAAC,0BAA0B,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC;YACrF,2BAA2B,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,2BAA2B,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAChF,WAAW,CACZ;YACD,gBAAgB,EAAE,OAAO,CAAC,8BAA8B,CAAC,MAAM;YAC/D,YAAY,EAAE,OAAO,CAAC,0BAA0B,CAAC,MAAM;YACvD,aAAa,EAAE,OAAO,CAAC,2BAA2B,EAAE,MAAM,IAAI,CAAC;YAC/D,SAAS,EAAE,kBAAkB,CAAC,OAAO,CAAC;SACvC,CAAC;IACJ,CAAC,CAAC;SACD,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,OAAqC;IACzE,OAAO;QACL,aAAa,EAAE,CAAC;QAChB,OAAO,EAAE,CAAC,GAAG,OAAO,CAAC;aAClB,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;aACrD,GAAG,CACF,CAAC,EACC,EAAE,EACF,cAAc,EACd,oBAAoB,EACpB,gBAAgB,EAChB,YAAY,EACZ,aAAa,EACb,SAAS,EACT,SAAS,GACV,EAAE,EAAE,CAAC,CAAC;YACL,EAAE;YACF,cAAc;YACd,oBAAoB;YACpB,gBAAgB;YAChB,YAAY;YACZ,aAAa;YACb,SAAS;YACT,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACpC,CAAC,CACH;KACJ,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,2BAA2B,CACzC,QAA6B,EAC7B,OAA4B;IAE5B,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IACvF,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IACrF,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,eAAe,CAAC,IAAI,EAAE,EAAE,GAAG,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAC3E,MAAM,iBAAiB,GAAG,CAAC,GAAG,GAAG,CAAC;SAC/B,MAAM,CACL,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAC3F;SACA,IAAI,CAAC,WAAW,CAAC,CAAC;IACrB,IAAI,QAAQ,CAAC,aAAa,KAAK,OAAO,CAAC,aAAa;QAAE,iBAAiB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAC3F,OAAO,EAAE,OAAO,EAAE,iBAAiB,CAAC,MAAM,KAAK,CAAC,EAAE,iBAAiB,EAAE,CAAC;AACxE,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,OAAqC,EACrC,UAAkC;IAElC,MAAM,MAAM,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC;IAChF,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAC3B,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;QAClB,GAAG,KAAK;QACR,CAAC,MAAM,CAAC,cAAc,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,cAAc,CAAC,GAAG,CAAC;QACzD,MAAM,EAAE,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,oBAAoB;QAClD,WAAW,EAAE,KAAK,CAAC,WAAW,GAAG,MAAM,CAAC,gBAAgB;QACxD,kBAAkB,EAAE,KAAK,CAAC,kBAAkB,GAAG,MAAM,CAAC,aAAa;QACnE,OAAO,EAAE,KAAK,CAAC,OAAO,GAAG,MAAM,CAAC,YAAY;KAC7C,CAAC,EACF;QACE,QAAQ,EAAE,CAAC;QACX,OAAO,EAAE,CAAC;QACV,QAAQ,EAAE,CAAC;QACX,OAAO,EAAE,CAAC;QACV,MAAM,EAAE,CAAC;QACT,WAAW,EAAE,CAAC;QACd,kBAAkB,EAAE,CAAC;QACrB,OAAO,EAAE,CAAC;KACX,CACF,CAAC;IACF,MAAM,KAAK,GAAG;QACZ,iBAAiB,MAAM,aAAa,OAAO,CAAC,MAAM,aAAa,MAAM,CAAC,QAAQ,YAAY,MAAM,CAAC,OAAO,aAAa,MAAM,CAAC,QAAQ,YAAY,MAAM,CAAC,OAAO,WAAW,MAAM,CAAC,MAAM,gBAAgB,MAAM,CAAC,WAAW,wBAAwB,MAAM,CAAC,kBAAkB,YAAY,MAAM,CAAC,OAAO,EAAE;KACtS,CAAC;IACF,IAAI,UAAU,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;QACtC,KAAK,CAAC,IAAI,CAAC,qBAAqB,UAAU,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC7E,CAAC;IACD,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,OAAqC;IAC5E,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,EAAE,GAAG,CAAC,CAAC;QAC5B,MAAM,UAAU,GAAG,CAAC,GAAG,MAAM,CAAC,0BAA0B,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC5E,KAAK,CAAC,IAAI,CACR,GAAG,CAAC,UAAU,CAAC,MAAM;YACnB,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,OAAO,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC;YACjE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAClB,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;AACjC,CAAC"}

package/dist/cli-validators.d.ts

@@ -0,0 +1,3 @@
+/** Commander passes the previous option value as its second parser argument. */
+export declare function parsePositiveInteger(value: string): number;
+//# sourceMappingURL=cli-validators.d.ts.map

package/dist/cli-validators.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli-validators.d.ts","sourceRoot":"","sources":["../src/cli-validators.ts"],"names":[],"mappings":"AAEA,gFAAgF;AAChF,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAM1D"}

package/dist/cli-validators.js

@@ -0,0 +1,10 @@
+import { InvalidArgumentError } from 'commander';
+/** Commander passes the previous option value as its second parser argument. */
+export function parsePositiveInteger(value) {
+    const parsed = Number(value);
+    if (!/^\d+$/.test(value) || !Number.isSafeInteger(parsed) || parsed <= 0) {
+        throw new InvalidArgumentError('Expected a positive safe integer.');
+    }
+    return parsed;
+}
+//# sourceMappingURL=cli-validators.js.map

package/dist/cli-validators.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli-validators.js","sourceRoot":"","sources":["../src/cli-validators.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC;AAEjD,gFAAgF;AAChF,MAAM,UAAU,oBAAoB,CAAC,KAAa;IAChD,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7B,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,MAAM,IAAI,CAAC,EAAE,CAAC;QACzE,MAAM,IAAI,oBAAoB,CAAC,mCAAmC,CAAC,CAAC;IACtE,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/cli.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AAcA,OAAO,EAOL,KAAK,eAAe,EACrB,MAAM,eAAe,CAAC;AA0IvB,wBAAgB,sBAAsB,IAAI,eAAe,CAExD"}
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AAeA,OAAO,EAOL,KAAK,eAAe,EACrB,MAAM,eAAe,CAAC;AA+IvB,wBAAgB,sBAAsB,IAAI,eAAe,CAExD"}