@maschinenlesbar.org/bundeshaushalt-cli 0.0.1

package/dist/src/cli/shared.js

@@ -0,0 +1,81 @@
+// Shared helpers used across CLI command groups: option parsers, the global
+// option resolver, and the JSON result renderer.
+import { InvalidArgumentError } from "commander";
+import { HaushaltError } from "../client/errors.js";
+/**
+ * commander value-parser: a non-negative integer in plain decimal notation.
+ *
+ * Deliberately strict: only `/^\d+$/` is accepted. `Number()` would otherwise
+ * coerce empty strings (→0, which silently disables size/retry caps), hex/octal/
+ * binary (`0x10`→16), scientific (`1e9`), a leading `+`, and surrounding
+ * whitespace — none of which a user typing a "non-negative integer" intends.
+ */
+export function parseIntArg(value) {
+    if (!/^\d+$/.test(value)) {
+        throw new InvalidArgumentError("Expected a non-negative integer.");
+    }
+    return Number(value);
+}
+/**
+ * commander value-parser: a non-negative integer with an inclusive upper bound.
+ * Used for options like `--max-retries` where an absurdly large value would turn
+ * a transient-error retry loop into an effective hang (DoS).
+ */
+export function parseBoundedIntArg(max) {
+    return (value) => {
+        const n = parseIntArg(value);
+        if (n > max) {
+            throw new InvalidArgumentError(`Expected a non-negative integer <= ${max}.`);
+        }
+        return n;
+    };
+}
+/**
+ * Validate a positional argument against an allowed set (commander does not
+ * support .choices() on positional args). Throws a HaushaltError so run() prints a
+ * clear message and exits 1.
+ */
+export function assertEnum(value, allowed, argName) {
+    if (!allowed.includes(value)) {
+        throw new HaushaltError(`Invalid ${argName} "${value}". Expected one of: ${allowed.join(", ")}.`);
+    }
+    return value;
+}
+/** Translate resolved global CLI options into client EngineOptions. */
+export function toEngineOptions(global) {
+    const options = {};
+    if (global.baseUrl !== undefined)
+        options.baseUrl = global.baseUrl;
+    if (global.timeout !== undefined)
+        options.timeoutMs = global.timeout;
+    if (global.userAgent !== undefined)
+        options.userAgent = global.userAgent;
+    if (global.maxRetries !== undefined)
+        options.maxRetries = global.maxRetries;
+    if (global.maxResponseBytes !== undefined)
+        options.maxResponseBytes = global.maxResponseBytes;
+    return options;
+}
+/** Render a JSON value to stdout, pretty by default, compact with --compact. */
+export function renderJson(deps, global, value) {
+    const text = global.compact ? JSON.stringify(value) : JSON.stringify(value, null, 2);
+    deps.io.out(text);
+}
+/**
+ * Wrap an async command action with consistent global-option resolution and
+ * client construction. The callback receives a context (client + resolved global
+ * options + this command's options) and the command's positional arguments.
+ *
+ * Commander invokes actions as (arg1, ..., argN, options, command); we slice off
+ * the trailing options object and command instance to recover the positionals.
+ */
+export function action(deps, fn) {
+    return async (...args) => {
+        const command = args[args.length - 1];
+        const positionals = args.slice(0, Math.max(0, args.length - 2));
+        const global = command.optsWithGlobals();
+        const client = deps.createClient(toEngineOptions(global));
+        await fn({ client, global, opts: command.opts() }, positionals);
+    };
+}
+//# sourceMappingURL=shared.js.map

package/dist/src/cli/shared.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shared.js","sourceRoot":"","sources":["../../../src/cli/shared.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,iDAAiD;AAGjD,OAAO,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC;AAEjD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAGpD;;;;;;;GAOG;AACH,MAAM,UAAU,WAAW,CAAC,KAAa;IACvC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,oBAAoB,CAAC,kCAAkC,CAAC,CAAC;IACrE,CAAC;IACD,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;AACvB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,GAAW;IAC5C,OAAO,CAAC,KAAa,EAAU,EAAE;QAC/B,MAAM,CAAC,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;QAC7B,IAAI,CAAC,GAAG,GAAG,EAAE,CAAC;YACZ,MAAM,IAAI,oBAAoB,CAAC,sCAAsC,GAAG,GAAG,CAAC,CAAC;QAC/E,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,UAAU,CACxB,KAAa,EACb,OAAqB,EACrB,OAAe;IAEf,IAAI,CAAE,OAA6B,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,aAAa,CAAC,WAAW,OAAO,KAAK,KAAK,uBAAuB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACpG,CAAC;IACD,OAAO,KAAU,CAAC;AACpB,CAAC;AAWD,uEAAuE;AACvE,MAAM,UAAU,eAAe,CAAC,MAAqB;IACnD,MAAM,OAAO,GAAkB,EAAE,CAAC;IAClC,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS;QAAE,OAAO,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;IACnE,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS;QAAE,OAAO,CAAC,SAAS,GAAG,MAAM,CAAC,OAAO,CAAC;IACrE,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS;QAAE,OAAO,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;IACzE,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS;QAAE,OAAO,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;IAC5E,IAAI,MAAM,CAAC,gBAAgB,KAAK,SAAS;QAAE,OAAO,CAAC,gBAAgB,GAAG,MAAM,CAAC,gBAAgB,CAAC;IAC9F,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,UAAU,CAAC,IAAa,EAAE,MAAqB,EAAE,KAAc;IAC7E,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IACrF,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AACpB,CAAC;AASD;;;;;;;GAOG;AACH,MAAM,UAAU,MAAM,CACpB,IAAa,EACb,EAAgE;IAEhE,OAAO,KAAK,EAAE,GAAG,IAAe,EAAE,EAAE;QAClC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAY,CAAC;QACjD,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAa,CAAC;QAC5E,MAAM,MAAM,GAAG,OAAO,CAAC,eAAe,EAAmB,CAAC;QAC1D,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC;QAC1D,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,EAAE,EAAE,WAAW,CAAC,CAAC;IAClE,CAAC,CAAC;AACJ,CAAC"}

package/dist/src/client/client.d.ts

@@ -0,0 +1,9 @@
+import { type EngineOptions } from "./engine.js";
+import type { BudgetData, BudgetParams } from "./types.js";
+export declare class BundeshaushaltClient {
+    private readonly engine;
+    constructor(options?: EngineOptions);
+    /** Budget data for a year + account, optionally scoped by quota/unit/id. */
+    budgetData(params: BudgetParams): Promise<BudgetData>;
+}
+//# sourceMappingURL=client.d.ts.map

package/dist/src/client/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../../src/client/client.ts"],"names":[],"mappings":"AAMA,OAAO,EAAiB,KAAK,aAAa,EAAE,MAAM,aAAa,CAAC;AAEhE,OAAO,KAAK,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAQ3D,qBAAa,oBAAoB;IAC/B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAgB;gBAE3B,OAAO,GAAE,aAAkB;IAIvC,4EAA4E;IAC5E,UAAU,CAAC,MAAM,EAAE,YAAY,GAAG,OAAO,CAAC,UAAU,CAAC;CAUtD"}

package/dist/src/client/client.js

@@ -0,0 +1,32 @@
+// BundeshaushaltClient — a typed client over the open (no-auth) budget-data
+// endpoint of the German federal budget portal (https://bundeshaushalt.de).
+//
+//   client.budgetData({ year: 2024, account: "expenses" })
+//   client.budgetData({ year: 2024, account: "expenses", id: "G-",  unit: "group" })
+import { RequestEngine } from "./engine.js";
+// NOTE: This is an undocumented, internal endpoint of bundeshaushalt.de (note the
+// "internalapi" path segment). It is not a published, stable public API and may
+// change shape, rate-limit, or disappear without notice. It is the only route that
+// serves this data today; isolate any change here if a public endpoint appears.
+const PATH = "/internalapi/budgetData";
+export class BundeshaushaltClient {
+    engine;
+    constructor(options = {}) {
+        this.engine = new RequestEngine(options);
+    }
+    /** Budget data for a year + account, optionally scoped by quota/unit/id. */
+    budgetData(params) {
+        const query = {
+            year: params.year,
+            account: params.account,
+        };
+        if (params.quota !== undefined)
+            query["quota"] = params.quota;
+        if (params.unit !== undefined)
+            query["unit"] = params.unit;
+        if (params.id !== undefined)
+            query["id"] = params.id;
+        return this.engine.getJson(PATH, query);
+    }
+}
+//# sourceMappingURL=client.js.map

package/dist/src/client/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../../../src/client/client.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,4EAA4E;AAC5E,EAAE;AACF,2DAA2D;AAC3D,qFAAqF;AAErF,OAAO,EAAE,aAAa,EAAsB,MAAM,aAAa,CAAC;AAIhE,kFAAkF;AAClF,gFAAgF;AAChF,mFAAmF;AACnF,gFAAgF;AAChF,MAAM,IAAI,GAAG,yBAAyB,CAAC;AAEvC,MAAM,OAAO,oBAAoB;IACd,MAAM,CAAgB;IAEvC,YAAY,UAAyB,EAAE;QACrC,IAAI,CAAC,MAAM,GAAG,IAAI,aAAa,CAAC,OAAO,CAAC,CAAC;IAC3C,CAAC;IAED,4EAA4E;IAC5E,UAAU,CAAC,MAAoB;QAC7B,MAAM,KAAK,GAAgB;YACzB,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,OAAO,EAAE,MAAM,CAAC,OAAO;SACxB,CAAC;QACF,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS;YAAE,KAAK,CAAC,OAAO,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC;QAC9D,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS;YAAE,KAAK,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC;QAC3D,IAAI,MAAM,CAAC,EAAE,KAAK,SAAS;YAAE,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,EAAE,CAAC;QACrD,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC1C,CAAC;CACF"}

package/dist/src/client/engine.d.ts

@@ -0,0 +1,56 @@
+import { type Transport } from "./http.js";
+import { type QueryParams } from "./query.js";
+export declare const DEFAULT_BASE_URL = "https://bundeshaushalt.de";
+export interface RawResponse {
+    data: Buffer;
+    contentType: string;
+    status: number;
+}
+export interface EngineOptions {
+    /** Base URL of the API. Defaults to https://bundeshaushalt.de */
+    baseUrl?: string;
+    /** Swappable transport. Defaults to the built-in node http/https transport. */
+    transport?: Transport;
+    /** Value of the User-Agent header. */
+    userAgent?: string;
+    /** Per-request timeout in milliseconds (0 disables). */
+    timeoutMs?: number;
+    /** Number of automatic retries for transient (429/503) responses. */
+    maxRetries?: number;
+    /** Base backoff between retries in milliseconds (grows linearly). */
+    retryDelayMs?: number;
+    /** Number of HTTP redirects (301/302/303/307/308) to follow. Defaults to 5. */
+    maxRedirects?: number;
+    /**
+     * Hard cap on response body size in bytes (defends against memory exhaustion
+     * from a hostile/buggy endpoint). Defaults to 100 MiB; set to 0 for no limit.
+     */
+    maxResponseBytes?: number;
+    /** Injectable sleep, primarily for deterministic tests. */
+    sleep?: (ms: number) => Promise<void>;
+}
+/** Drop sensitive headers when a redirect points at a different origin. */
+export declare function stripCrossOriginCredentials(headers: Record<string, string>, fromUrl: string, toUrl: string): Record<string, string>;
+export declare class RequestEngine {
+    private readonly baseUrl;
+    private readonly transport;
+    private readonly userAgent;
+    private readonly timeoutMs;
+    private readonly maxRetries;
+    private readonly retryDelayMs;
+    private readonly maxRedirects;
+    private readonly maxResponseBytes;
+    private readonly sleep;
+    constructor(options?: EngineOptions);
+    /** Build a fully-qualified URL from a path and optional query parameters. */
+    buildUrl(path: string, query?: QueryParams): string;
+    /** Perform a request with Accept negotiation and transient-error retries. */
+    request(method: string, path: string, options?: {
+        query?: QueryParams;
+        accept: string;
+    }): Promise<RawResponse>;
+    /** Perform a GET expecting JSON and parse it into `T`. */
+    getJson<T>(path: string, query?: QueryParams): Promise<T>;
+    private toApiError;
+}
+//# sourceMappingURL=engine.d.ts.map

package/dist/src/client/engine.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine.d.ts","sourceRoot":"","sources":["../../../src/client/engine.ts"],"names":[],"mappings":"AAIA,OAAO,EAAqB,KAAK,SAAS,EAAE,MAAM,WAAW,CAAC;AAC9D,OAAO,EAAoB,KAAK,WAAW,EAAE,MAAM,YAAY,CAAC;AAGhE,eAAO,MAAM,gBAAgB,8BAA8B,CAAC;AAG5D,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,aAAa;IAC5B,iEAAiE;IACjE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,+EAA+E;IAC/E,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB,sCAAsC;IACtC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,wDAAwD;IACxD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,qEAAqE;IACrE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,qEAAqE;IACrE,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,+EAA+E;IAC/E,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;OAGG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,2DAA2D;IAC3D,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACvC;AAWD,2EAA2E;AAC3E,wBAAgB,2BAA2B,CACzC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,MAAM,GACZ,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAOxB;AA6BD,qBAAa,aAAa;IACxB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAY;IACtC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAS;IACtC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAS;IACtC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAS;IAC1C,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAgC;gBAE1C,OAAO,GAAE,aAAkB;IAgBvC,6EAA6E;IAC7E,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,WAAW,GAAG,MAAM;IAMnD,6EAA6E;IACvE,OAAO,CACX,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE;QAAE,KAAK,CAAC,EAAE,WAAW,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAmC,GAChF,OAAO,CAAC,WAAW,CAAC;IAuDvB,0DAA0D;IACpD,OAAO,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,CAAC,CAAC;IAU/D,OAAO,CAAC,UAAU;CAYnB"}

package/dist/src/client/engine.js

@@ -0,0 +1,159 @@
+// The request engine: turns logical (method, path, query) calls into HTTP
+// requests via a Transport, applies retry/backoff for transient statuses
+// (429, 503), and decodes responses.
+import { nodeHttpTransport } from "./http.js";
+import { buildQueryString } from "./query.js";
+import { HaushaltApiError, HaushaltError, HaushaltNetworkError, HaushaltParseError } from "./errors.js";
+export const DEFAULT_BASE_URL = "https://bundeshaushalt.de";
+const DEFAULT_USER_AGENT = "bundeshaushalt-cli";
+const DEFAULT_MAX_RESPONSE_BYTES = 100 * 1024 * 1024;
+/**
+ * Headers that must never be replayed to a different origin on a redirect.
+ * Matched case-insensitively. This mirrors the credential-stripping behaviour of
+ * browsers / curl: a cross-origin `Location` must not leak auth material.
+ */
+const SENSITIVE_HEADERS = new Set(["authorization", "x-api-key", "cookie"]);
+/** Drop sensitive headers when a redirect points at a different origin. */
+export function stripCrossOriginCredentials(headers, fromUrl, toUrl) {
+    if (new URL(fromUrl).origin === new URL(toUrl).origin)
+        return headers;
+    const safe = {};
+    for (const [name, value] of Object.entries(headers)) {
+        if (!SENSITIVE_HEADERS.has(name.toLowerCase()))
+            safe[name] = value;
+    }
+    return safe;
+}
+const realSleep = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
+/**
+ * Normalise a caller-supplied User-Agent into a safe header value.
+ *
+ * - An empty / whitespace-only value falls back to the default rather than
+ *   sending an empty `User-Agent` (which would suppress the default entirely).
+ * - A value containing control characters (CR/LF/NUL etc.) is rejected with a
+ *   typed error here, instead of letting node:http throw a raw TypeError deep in
+ *   the request that surfaces as an ungraceful "Unexpected error".
+ */
+function normalizeUserAgent(value) {
+    if (value === undefined)
+        return DEFAULT_USER_AGENT;
+    const trimmed = value.trim();
+    if (trimmed.length === 0)
+        return DEFAULT_USER_AGENT;
+    for (let i = 0; i < trimmed.length; i += 1) {
+        const code = trimmed.charCodeAt(i);
+        // Reject C0 controls (incl. CR/LF/NUL) and DEL before they reach node:http,
+        // which would otherwise throw an opaque TypeError ("Invalid character...").
+        if (code < 0x20 || code === 0x7f) {
+            throw new HaushaltError("Invalid User-Agent: control characters are not allowed.");
+        }
+    }
+    return trimmed;
+}
+export class RequestEngine {
+    baseUrl;
+    transport;
+    userAgent;
+    timeoutMs;
+    maxRetries;
+    retryDelayMs;
+    maxRedirects;
+    maxResponseBytes;
+    sleep;
+    constructor(options = {}) {
+        // An empty / whitespace-only baseUrl falls back to the default rather than
+        // collapsing (after trailing-slash stripping) to "" and building a relative
+        // URL that `new URL()` rejects with a confusing "Invalid URL".
+        const baseUrl = options.baseUrl?.trim() ? options.baseUrl : DEFAULT_BASE_URL;
+        this.baseUrl = baseUrl.replace(/\/+$/, "");
+        this.transport = options.transport ?? nodeHttpTransport;
+        this.userAgent = normalizeUserAgent(options.userAgent);
+        this.timeoutMs = options.timeoutMs ?? 30_000;
+        this.maxRetries = options.maxRetries ?? 2;
+        this.retryDelayMs = options.retryDelayMs ?? 200;
+        this.maxRedirects = options.maxRedirects ?? 5;
+        this.maxResponseBytes = options.maxResponseBytes ?? DEFAULT_MAX_RESPONSE_BYTES;
+        this.sleep = options.sleep ?? realSleep;
+    }
+    /** Build a fully-qualified URL from a path and optional query parameters. */
+    buildUrl(path, query) {
+        const normalizedPath = path.startsWith("/") ? path : `/${path}`;
+        const qs = query ? buildQueryString(query) : "";
+        return `${this.baseUrl}${normalizedPath}${qs ? `?${qs}` : ""}`;
+    }
+    /** Perform a request with Accept negotiation and transient-error retries. */
+    async request(method, path, options = { accept: "application/json" }) {
+        let url = this.buildUrl(path, options.query);
+        let headers = {
+            Accept: options.accept,
+            "User-Agent": this.userAgent,
+        };
+        let attempt = 0;
+        let redirects = 0;
+        // attempts = initial try + maxRetries (redirects are counted separately)
+        for (;;) {
+            const response = await this.transport({
+                method,
+                url,
+                headers,
+                timeoutMs: this.timeoutMs,
+                ...(this.maxResponseBytes > 0 ? { maxResponseBytes: this.maxResponseBytes } : {}),
+            });
+            const status = response.status;
+            const retryable = status === 429 || status === 503;
+            if (retryable && attempt < this.maxRetries) {
+                attempt += 1;
+                await this.sleep(this.retryDelayMs * attempt);
+                continue;
+            }
+            // Follow redirects, resolving the Location relative to the current URL.
+            if (status >= 300 && status < 400 && redirects < this.maxRedirects) {
+                const location = response.headers["location"];
+                if (typeof location === "string" && location.length > 0) {
+                    const nextUrl = new URL(location, url);
+                    // Refuse a downgrade from https to plaintext http on redirect.
+                    if (new URL(url).protocol === "https:" && nextUrl.protocol === "http:") {
+                        throw new HaushaltNetworkError(`Refusing to follow https->http redirect to ${nextUrl.toString()}`);
+                    }
+                    // Strip credential headers if the redirect crosses origins.
+                    headers = stripCrossOriginCredentials(headers, url, nextUrl.toString());
+                    url = nextUrl.toString();
+                    redirects += 1;
+                    continue;
+                }
+            }
+            const contentType = String(response.headers["content-type"] ?? "");
+            if (status < 200 || status >= 300) {
+                throw this.toApiError(method, url, status, response.body);
+            }
+            return { data: response.body, contentType, status };
+        }
+    }
+    /** Perform a GET expecting JSON and parse it into `T`. */
+    async getJson(path, query) {
+        const res = await this.request("GET", path, { query, accept: "application/json" });
+        const text = res.data.toString("utf8");
+        try {
+            return JSON.parse(text);
+        }
+        catch (cause) {
+            throw new HaushaltParseError(`Failed to parse JSON response from ${path}`, { cause });
+        }
+    }
+    toApiError(method, url, status, body) {
+        const text = body.toString("utf8");
+        let detail;
+        try {
+            const parsed = JSON.parse(text);
+            if (parsed && typeof parsed.detail === "string")
+                detail = parsed.detail;
+            else if (parsed && typeof parsed.message === "string")
+                detail = parsed.message;
+        }
+        catch {
+            // Non-JSON error body; leave detail undefined.
+        }
+        return new HaushaltApiError({ status, url, method, body: text, detail });
+    }
+}
+//# sourceMappingURL=engine.js.map

package/dist/src/client/engine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine.js","sourceRoot":"","sources":["../../../src/client/engine.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,yEAAyE;AACzE,qCAAqC;AAErC,OAAO,EAAE,iBAAiB,EAAkB,MAAM,WAAW,CAAC;AAC9D,OAAO,EAAE,gBAAgB,EAAoB,MAAM,YAAY,CAAC;AAChE,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAExG,MAAM,CAAC,MAAM,gBAAgB,GAAG,2BAA2B,CAAC;AAC5D,MAAM,kBAAkB,GAAG,oBAAoB,CAAC;AAgChD,MAAM,0BAA0B,GAAG,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC;AAErD;;;;GAIG;AACH,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,CAAC,eAAe,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC;AAE5E,2EAA2E;AAC3E,MAAM,UAAU,2BAA2B,CACzC,OAA+B,EAC/B,OAAe,EACf,KAAa;IAEb,IAAI,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,MAAM;QAAE,OAAO,OAAO,CAAC;IACtE,MAAM,IAAI,GAA2B,EAAE,CAAC;IACxC,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACpD,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YAAE,IAAI,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;IACrE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,SAAS,GAAG,CAAC,EAAU,EAAiB,EAAE,CAC9C,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AAEpD;;;;;;;;GAQG;AACH,SAAS,kBAAkB,CAAC,KAAyB;IACnD,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,kBAAkB,CAAC;IACnD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,kBAAkB,CAAC;IACpD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3C,MAAM,IAAI,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QACnC,4EAA4E;QAC5E,4EAA4E;QAC5E,IAAI,IAAI,GAAG,IAAI,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YACjC,MAAM,IAAI,aAAa,CAAC,yDAAyD,CAAC,CAAC;QACrF,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,OAAO,aAAa;IACP,OAAO,CAAS;IAChB,SAAS,CAAY;IACrB,SAAS,CAAS;IAClB,SAAS,CAAS;IAClB,UAAU,CAAS;IACnB,YAAY,CAAS;IACrB,YAAY,CAAS;IACrB,gBAAgB,CAAS;IACzB,KAAK,CAAgC;IAEtD,YAAY,UAAyB,EAAE;QACrC,2EAA2E;QAC3E,4EAA4E;QAC5E,+DAA+D;QAC/D,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,gBAAgB,CAAC;QAC7E,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAC3C,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,iBAAiB,CAAC;QACxD,IAAI,CAAC,SAAS,GAAG,kBAAkB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACvD,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,MAAM,CAAC;QAC7C,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,CAAC,CAAC;QAC1C,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,GAAG,CAAC;QAChD,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,CAAC,CAAC;QAC9C,IAAI,CAAC,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,IAAI,0BAA0B,CAAC;QAC/E,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,SAAS,CAAC;IAC1C,CAAC;IAED,6EAA6E;IAC7E,QAAQ,CAAC,IAAY,EAAE,KAAmB;QACxC,MAAM,cAAc,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC;QAChE,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAChD,OAAO,GAAG,IAAI,CAAC,OAAO,GAAG,cAAc,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IACjE,CAAC;IAED,6EAA6E;IAC7E,KAAK,CAAC,OAAO,CACX,MAAc,EACd,IAAY,EACZ,UAAmD,EAAE,MAAM,EAAE,kBAAkB,EAAE;QAEjF,IAAI,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;QAC7C,IAAI,OAAO,GAA2B;YACpC,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,YAAY,EAAE,IAAI,CAAC,SAAS;SAC7B,CAAC;QAEF,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,IAAI,SAAS,GAAG,CAAC,CAAC;QAClB,yEAAyE;QACzE,SAAS,CAAC;YACR,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC;gBACpC,MAAM;gBACN,GAAG;gBACH,OAAO;gBACP,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,GAAG,CAAC,IAAI,CAAC,gBAAgB,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,IAAI,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAClF,CAAC,CAAC;YAEH,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;YAC/B,MAAM,SAAS,GAAG,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,CAAC;YACnD,IAAI,SAAS,IAAI,OAAO,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;gBAC3C,OAAO,IAAI,CAAC,CAAC;gBACb,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,CAAC;gBAC9C,SAAS;YACX,CAAC;YAED,wEAAwE;YACxE,IAAI,MAAM,IAAI,GAAG,IAAI,MAAM,GAAG,GAAG,IAAI,SAAS,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;gBACnE,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;gBAC9C,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACxD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;oBACvC,+DAA+D;oBAC/D,IAAI,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;wBACvE,MAAM,IAAI,oBAAoB,CAC5B,8CAA8C,OAAO,CAAC,QAAQ,EAAE,EAAE,CACnE,CAAC;oBACJ,CAAC;oBACD,4DAA4D;oBAC5D,OAAO,GAAG,2BAA2B,CAAC,OAAO,EAAE,GAAG,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;oBACxE,GAAG,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC;oBACzB,SAAS,IAAI,CAAC,CAAC;oBACf,SAAS;gBACX,CAAC;YACH,CAAC;YAED,MAAM,WAAW,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC;YACnE,IAAI,MAAM,GAAG,GAAG,IAAI,MAAM,IAAI,GAAG,EAAE,CAAC;gBAClC,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;YAC5D,CAAC;YAED,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC;QACtD,CAAC;IACH,CAAC;IAED,0DAA0D;IAC1D,KAAK,CAAC,OAAO,CAAI,IAAY,EAAE,KAAmB;QAChD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC,CAAC;QACnF,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACvC,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAM,CAAC;QAC/B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,kBAAkB,CAAC,sCAAsC,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QACxF,CAAC;IACH,CAAC;IAEO,UAAU,CAAC,MAAc,EAAE,GAAW,EAAE,MAAc,EAAE,IAAY;QAC1E,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACnC,IAAI,MAA0B,CAAC;QAC/B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAA4C,CAAC;YAC3E,IAAI,MAAM,IAAI,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ;gBAAE,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;iBACnE,IAAI,MAAM,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ;gBAAE,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC;QACjF,CAAC;QAAC,MAAM,CAAC;YACP,+CAA+C;QACjD,CAAC;QACD,OAAO,IAAI,gBAAgB,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IAC3E,CAAC;CACF"}

package/dist/src/client/enums.d.ts

@@ -0,0 +1,17 @@
+/** Which side of the budget to query. */
+export declare const AccountValues: readonly ["expenses", "income"];
+export type Account = (typeof AccountValues)[number];
+/** Planned (`target`) vs. realised (`actual`) figures. */
+export declare const QuotaValues: readonly ["target", "actual"];
+export type Quota = (typeof QuotaValues)[number];
+/**
+ * How budget elements are grouped:
+ *   single   — by individual budget item (Einzelplan/Titel)
+ *   function — by functional area (Funktion)
+ *   group    — by economic group (Gruppe)
+ */
+export declare const UnitValues: readonly ["single", "function", "group"];
+export type Unit = (typeof UnitValues)[number];
+/** Earliest year the API serves. */
+export declare const MIN_YEAR = 2012;
+//# sourceMappingURL=enums.d.ts.map

package/dist/src/client/enums.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"enums.d.ts","sourceRoot":"","sources":["../../../src/client/enums.ts"],"names":[],"mappings":"AAGA,yCAAyC;AACzC,eAAO,MAAM,aAAa,iCAAkC,CAAC;AAC7D,MAAM,MAAM,OAAO,GAAG,CAAC,OAAO,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC;AAErD,0DAA0D;AAC1D,eAAO,MAAM,WAAW,+BAAgC,CAAC;AACzD,MAAM,MAAM,KAAK,GAAG,CAAC,OAAO,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC;AAEjD;;;;;GAKG;AACH,eAAO,MAAM,UAAU,0CAA2C,CAAC;AACnE,MAAM,MAAM,IAAI,GAAG,CAAC,OAAO,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC;AAE/C,oCAAoC;AACpC,eAAO,MAAM,QAAQ,OAAO,CAAC"}

package/dist/src/client/enums.js

@@ -0,0 +1,16 @@
+// Enum-like value sets. These const arrays double as runtime CLI choice
+// validators and as TS union types.
+/** Which side of the budget to query. */
+export const AccountValues = ["expenses", "income"];
+/** Planned (`target`) vs. realised (`actual`) figures. */
+export const QuotaValues = ["target", "actual"];
+/**
+ * How budget elements are grouped:
+ *   single   — by individual budget item (Einzelplan/Titel)
+ *   function — by functional area (Funktion)
+ *   group    — by economic group (Gruppe)
+ */
+export const UnitValues = ["single", "function", "group"];
+/** Earliest year the API serves. */
+export const MIN_YEAR = 2012;
+//# sourceMappingURL=enums.js.map

package/dist/src/client/enums.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"enums.js","sourceRoot":"","sources":["../../../src/client/enums.ts"],"names":[],"mappings":"AAAA,wEAAwE;AACxE,oCAAoC;AAEpC,yCAAyC;AACzC,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,UAAU,EAAE,QAAQ,CAAU,CAAC;AAG7D,0DAA0D;AAC1D,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAU,CAAC;AAGzD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,QAAQ,EAAE,UAAU,EAAE,OAAO,CAAU,CAAC;AAGnE,oCAAoC;AACpC,MAAM,CAAC,MAAM,QAAQ,GAAG,IAAI,CAAC"}

package/dist/src/client/errors.d.ts

@@ -0,0 +1,33 @@
+/** Base class for every error originating from this client. */
+export declare class HaushaltError extends Error {
+    constructor(message: string, options?: {
+        cause?: unknown;
+    });
+}
+/**
+ * The API responded with a non-2xx status code. `detail` holds a human-readable
+ * message extracted from the response body when one is present.
+ */
+export declare class HaushaltApiError extends HaushaltError {
+    readonly status: number;
+    readonly detail: string | undefined;
+    readonly url: string;
+    readonly method: string;
+    readonly body: string;
+    constructor(args: {
+        status: number;
+        url: string;
+        method: string;
+        body: string;
+        detail?: string;
+    });
+    /** True for statuses the API documents as transient and retry-able. */
+    get isRetryable(): boolean;
+}
+/** A transport-level failure (DNS, connection reset, timeout, ...). */
+export declare class HaushaltNetworkError extends HaushaltError {
+}
+/** The response body could not be parsed as the expected JSON shape. */
+export declare class HaushaltParseError extends HaushaltError {
+}
+//# sourceMappingURL=errors.d.ts.map

package/dist/src/client/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../../src/client/errors.ts"],"names":[],"mappings":"AAGA,+DAA+D;AAC/D,qBAAa,aAAc,SAAQ,KAAK;gBAC1B,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE;CAI3D;AAED;;;GAGG;AACH,qBAAa,gBAAiB,SAAQ,aAAa;IACjD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;gBAEV,IAAI,EAAE;QAChB,MAAM,EAAE,MAAM,CAAC;QACf,GAAG,EAAE,MAAM,CAAC;QACZ,MAAM,EAAE,MAAM,CAAC;QACf,IAAI,EAAE,MAAM,CAAC;QACb,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB;IAUD,uEAAuE;IACvE,IAAI,WAAW,IAAI,OAAO,CAEzB;CACF;AAED,uEAAuE;AACvE,qBAAa,oBAAqB,SAAQ,aAAa;CAAG;AAE1D,wEAAwE;AACxE,qBAAa,kBAAmB,SAAQ,aAAa;CAAG"}

package/dist/src/client/errors.js

@@ -0,0 +1,40 @@
+// Error types raised by the client. Kept free of any I/O so they are trivial to
+// construct in tests and to `instanceof`-check by consumers.
+/** Base class for every error originating from this client. */
+export class HaushaltError extends Error {
+    constructor(message, options) {
+        super(message, options);
+        this.name = new.target.name;
+    }
+}
+/**
+ * The API responded with a non-2xx status code. `detail` holds a human-readable
+ * message extracted from the response body when one is present.
+ */
+export class HaushaltApiError extends HaushaltError {
+    status;
+    detail;
+    url;
+    method;
+    body;
+    constructor(args) {
+        const detailPart = args.detail ? `: ${args.detail}` : "";
+        super(`HTTP ${args.status} for ${args.method} ${args.url}${detailPart}`);
+        this.status = args.status;
+        this.url = args.url;
+        this.method = args.method;
+        this.body = args.body;
+        this.detail = args.detail;
+    }
+    /** True for statuses the API documents as transient and retry-able. */
+    get isRetryable() {
+        return this.status === 429 || this.status === 503;
+    }
+}
+/** A transport-level failure (DNS, connection reset, timeout, ...). */
+export class HaushaltNetworkError extends HaushaltError {
+}
+/** The response body could not be parsed as the expected JSON shape. */
+export class HaushaltParseError extends HaushaltError {
+}
+//# sourceMappingURL=errors.js.map

package/dist/src/client/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../../src/client/errors.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,6DAA6D;AAE7D,+DAA+D;AAC/D,MAAM,OAAO,aAAc,SAAQ,KAAK;IACtC,YAAY,OAAe,EAAE,OAA6B;QACxD,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACxB,IAAI,CAAC,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC;IAC9B,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,OAAO,gBAAiB,SAAQ,aAAa;IACxC,MAAM,CAAS;IACf,MAAM,CAAqB;IAC3B,GAAG,CAAS;IACZ,MAAM,CAAS;IACf,IAAI,CAAS;IAEtB,YAAY,IAMX;QACC,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzD,KAAK,CAAC,QAAQ,IAAI,CAAC,MAAM,QAAQ,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,GAAG,GAAG,UAAU,EAAE,CAAC,CAAC;QACzE,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC1B,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;QACpB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC1B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACtB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;IAC5B,CAAC;IAED,uEAAuE;IACvE,IAAI,WAAW;QACb,OAAO,IAAI,CAAC,MAAM,KAAK,GAAG,IAAI,IAAI,CAAC,MAAM,KAAK,GAAG,CAAC;IACpD,CAAC;CACF;AAED,uEAAuE;AACvE,MAAM,OAAO,oBAAqB,SAAQ,aAAa;CAAG;AAE1D,wEAAwE;AACxE,MAAM,OAAO,kBAAmB,SAAQ,aAAa;CAAG"}

package/dist/src/client/http.d.ts

@@ -0,0 +1,26 @@
+import http from "node:http";
+export interface HttpRequest {
+    method: string;
+    /** Fully-qualified absolute URL. */
+    url: string;
+    headers?: Record<string, string>;
+    /** Optional request body (already serialised). */
+    body?: string | Buffer;
+    /** Per-request timeout in milliseconds. */
+    timeoutMs?: number;
+    /** Hard cap on the response body size in bytes; the request aborts if exceeded. */
+    maxResponseBytes?: number;
+}
+export interface HttpResponse {
+    status: number;
+    headers: http.IncomingHttpHeaders;
+    body: Buffer;
+}
+export type Transport = (request: HttpRequest) => Promise<HttpResponse>;
+/**
+ * Default transport. Resolves with the raw response (including non-2xx) — status
+ * interpretation is the client's job. Rejects only on transport-level failures
+ * (connection errors, timeouts, malformed URLs).
+ */
+export declare const nodeHttpTransport: Transport;
+//# sourceMappingURL=http.d.ts.map

package/dist/src/client/http.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.d.ts","sourceRoot":"","sources":["../../../src/client/http.ts"],"names":[],"mappings":"AAQA,OAAO,IAAI,MAAM,WAAW,CAAC;AAI7B,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,oCAAoC;IACpC,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,kDAAkD;IAClD,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IACvB,2CAA2C;IAC3C,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,mFAAmF;IACnF,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,IAAI,CAAC,mBAAmB,CAAC;IAClC,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,MAAM,SAAS,GAAG,CAAC,OAAO,EAAE,WAAW,KAAK,OAAO,CAAC,YAAY,CAAC,CAAC;AAExE;;;;GAIG;AACH,eAAO,MAAM,iBAAiB,EAAE,SAiF5B,CAAC"}

package/dist/src/client/http.js

@@ -0,0 +1,89 @@
+// HTTP transport built on Node's built-in `http`/`https` modules — no axios,
+// no fetch polyfill, no third-party HTTP client.
+//
+// The transport is a plain function so it can be trivially swapped out in tests
+// (inject a `mock.fn()` returning a canned HttpResponse) without touching the
+// network. The default implementation below is exercised against a real local
+// `http.createServer` in the test-suite.
+import http from "node:http";
+import https from "node:https";
+import { HaushaltNetworkError } from "./errors.js";
+/**
+ * Default transport. Resolves with the raw response (including non-2xx) — status
+ * interpretation is the client's job. Rejects only on transport-level failures
+ * (connection errors, timeouts, malformed URLs).
+ */
+export const nodeHttpTransport = (request) => new Promise((resolve, reject) => {
+    let url;
+    try {
+        url = new URL(request.url);
+    }
+    catch {
+        reject(new HaushaltNetworkError(`Invalid URL: ${request.url}`));
+        return;
+    }
+    // Only http/https are supported. Reject anything else up front with a clear,
+    // typed error instead of letting Node throw an opaque ERR_INVALID_PROTOCOL
+    // (and so this never reaches the file:/ftp:/etc. drivers).
+    if (url.protocol !== "http:" && url.protocol !== "https:") {
+        reject(new HaushaltNetworkError(`Unsupported protocol "${url.protocol}" in URL: ${request.url}`));
+        return;
+    }
+    const isHttps = url.protocol === "https:";
+    const driver = isHttps ? https : http;
+    const maxBytes = request.maxResponseBytes;
+    const req = driver.request(url, {
+        method: request.method,
+        headers: request.headers,
+    }, (res) => {
+        const chunks = [];
+        let received = 0;
+        let aborted = false;
+        res.on("data", (chunk) => {
+            if (aborted)
+                return;
+            received += chunk.length;
+            if (maxBytes !== undefined && received > maxBytes) {
+                aborted = true;
+                res.destroy();
+                reject(new HaushaltNetworkError(`Response exceeded maxResponseBytes (${maxBytes})`));
+                return;
+            }
+            chunks.push(chunk);
+        });
+        res.on("end", () => {
+            if (aborted)
+                return;
+            resolve({
+                status: res.statusCode ?? 0,
+                headers: res.headers,
+                body: Buffer.concat(chunks),
+            });
+        });
+        res.on("error", (err) => {
+            if (aborted)
+                return; // we already rejected with the size-cap error
+            reject(new HaushaltNetworkError(`Response stream error: ${err.message}`, { cause: err }));
+        });
+    });
+    if (request.timeoutMs && request.timeoutMs > 0) {
+        req.setTimeout(request.timeoutMs, () => {
+            req.destroy(new HaushaltNetworkError(`Request timed out after ${request.timeoutMs}ms`));
+        });
+    }
+    req.on("error", (err) => {
+        // A timeout destroy already passes an HaushaltNetworkError; don't double-wrap.
+        // Otherwise prepend the request method + URL so the failure is traceable
+        // (the raw Node message — e.g. "connect ECONNREFUSED 127.0.0.1:1" — has no
+        // indication of which request it belongs to).
+        reject(err instanceof HaushaltNetworkError
+            ? err
+            : new HaushaltNetworkError(`${request.method} ${request.url} failed: ${err.message}`, {
+                cause: err,
+            }));
+    });
+    if (request.body !== undefined)
+        req.write(request.body);
+    req.end();
+});
+//# sourceMappingURL=http.js.map

package/dist/src/client/http.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.js","sourceRoot":"","sources":["../../../src/client/http.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,iDAAiD;AACjD,EAAE;AACF,gFAAgF;AAChF,8EAA8E;AAC9E,8EAA8E;AAC9E,yCAAyC;AAEzC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,KAAK,MAAM,YAAY,CAAC;AAC/B,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAuBnD;;;;GAIG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAc,CAAC,OAAO,EAAE,EAAE,CACtD,IAAI,OAAO,CAAe,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;IAC5C,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,CAAC,IAAI,oBAAoB,CAAC,gBAAgB,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QAChE,OAAO;IACT,CAAC;IAED,6EAA6E;IAC7E,2EAA2E;IAC3E,2DAA2D;IAC3D,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC1D,MAAM,CAAC,IAAI,oBAAoB,CAAC,yBAAyB,GAAG,CAAC,QAAQ,aAAa,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QAClG,OAAO;IACT,CAAC;IAED,MAAM,OAAO,GAAG,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC;IAC1C,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IACtC,MAAM,QAAQ,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAE1C,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CACxB,GAAG,EACH;QACE,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,OAAO,EAAE,OAAO,CAAC,OAAO;KACzB,EACD,CAAC,GAAG,EAAE,EAAE;QACN,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,IAAI,QAAQ,GAAG,CAAC,CAAC;QACjB,IAAI,OAAO,GAAG,KAAK,CAAC;QAEpB,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YAC/B,IAAI,OAAO;gBAAE,OAAO;YACpB,QAAQ,IAAI,KAAK,CAAC,MAAM,CAAC;YACzB,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,GAAG,QAAQ,EAAE,CAAC;gBAClD,OAAO,GAAG,IAAI,CAAC;gBACf,GAAG,CAAC,OAAO,EAAE,CAAC;gBACd,MAAM,CAAC,IAAI,oBAAoB,CAAC,uCAAuC,QAAQ,GAAG,CAAC,CAAC,CAAC;gBACrF,OAAO;YACT,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;YACjB,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,CAAC;gBACN,MAAM,EAAE,GAAG,CAAC,UAAU,IAAI,CAAC;gBAC3B,OAAO,EAAE,GAAG,CAAC,OAAO;gBACpB,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;aAC5B,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACtB,IAAI,OAAO;gBAAE,OAAO,CAAC,8CAA8C;YACnE,MAAM,CAAC,IAAI,oBAAoB,CAAC,0BAA0B,GAAG,CAAC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;QAC5F,CAAC,CAAC,CAAC;IACL,CAAC,CACF,CAAC;IAEF,IAAI,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,SAAS,GAAG,CAAC,EAAE,CAAC;QAC/C,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,EAAE;YACrC,GAAG,CAAC,OAAO,CAAC,IAAI,oBAAoB,CAAC,2BAA2B,OAAO,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC;QAC1F,CAAC,CAAC,CAAC;IACL,CAAC;IAED,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;QACtB,+EAA+E;QAC/E,yEAAyE;QACzE,2EAA2E;QAC3E,8CAA8C;QAC9C,MAAM,CACJ,GAAG,YAAY,oBAAoB;YACjC,CAAC,CAAC,GAAG;YACL,CAAC,CAAC,IAAI,oBAAoB,CAAC,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,YAAY,GAAG,CAAC,OAAO,EAAE,EAAE;gBAClF,KAAK,EAAE,GAAG;aACX,CAAC,CACP,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS;QAAE,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACxD,GAAG,CAAC,GAAG,EAAE,CAAC;AACZ,CAAC,CAAC,CAAC"}

package/dist/src/client/index.d.ts

@@ -0,0 +1,11 @@
+export { BundeshaushaltClient } from "./client.js";
+export { RequestEngine, DEFAULT_BASE_URL } from "./engine.js";
+export type { EngineOptions, RawResponse } from "./engine.js";
+export { nodeHttpTransport } from "./http.js";
+export type { Transport, HttpRequest, HttpResponse } from "./http.js";
+export { buildQueryString } from "./query.js";
+export type { QueryParams, QueryValue } from "./query.js";
+export { HaushaltError, HaushaltApiError, HaushaltNetworkError, HaushaltParseError, } from "./errors.js";
+export * from "./enums.js";
+export * from "./types.js";
+//# sourceMappingURL=index.d.ts.map