@qcobro/sdk 1.11.0

package/README.md

@@ -0,0 +1,105 @@
+# @qcobro/sdk
+
+A developer-friendly TypeScript SDK for the [QCobro](https://qcobro.com) API. It wraps the
+server's tRPC interface behind an ergonomic, fully-typed `Client` so you can manage QCobro
+resources without touching transport details.
+
+This release covers **portfolios**, including account synchronization. More resources land in
+follow-up releases.
+
+## Install
+
+```bash
+npm install @qcobro/sdk
+```
+
+Requires a runtime with a global `fetch` (Node ≥18 or a modern browser). For older runtimes,
+pass a `fetch` polyfill via the `fetch` option.
+
+## Quick start
+
+```ts
+import { Client } from "@qcobro/sdk";
+
+const client = new Client({ endpoint: "https://api.qcobro.com" });
+
+// Authenticate and pick the workspace to act in.
+await client.login({ email: "me@acme.com", password: process.env.QCOBRO_PASSWORD! });
+client.useWorkspace("WO6ueex0qan9ojhf820wgiae3qi5luy08y");
+
+// ...or, for unattended/server-to-server integrations, use a workspace API key:
+await client.loginWithApiKey({
+  accessKeyId: "WO6ueex0qan9ojhf820wgiae3qi5luy08y",
+  accessKeySecret: process.env.QCOBRO_API_SECRET!
+});
+
+// Manage portfolios.
+const portfolio = await client.portfolios.create({
+  name: "Q3 delinquencies",
+  clientId: "acme",
+  currency: "USD"
+});
+
+const { items, total } = await client.portfolios.listAccounts({ portfolioId: portfolio.id });
+
+await client.portfolios.syncAccounts({
+  portfolioId: portfolio.id,
+  mode: "APPEND_ONLY",
+  rows: [{ externalId: "A-1", fullName: "Jane Doe", outstandingBalance: 1200.5 }]
+});
+```
+
+## Authentication & tokens
+
+Authenticate one of two ways:
+
+- `login({ email, password })` — interactive credentials login (returns id/access/refresh tokens).
+- `loginWithApiKey({ accessKeyId, accessKeySecret })` — a workspace API key, for unattended
+  server-to-server use where there's no human to type a password.
+
+The `Client` holds tokens **in memory**. Persisting them (so a session survives a restart) is
+your responsibility:
+
+```ts
+// Save after login...
+const tokens = client.getTokens();
+// ...and restore later.
+const client = new Client({ endpoint }).setTokens(tokens);
+
+// Refresh an expired access token.
+await client.refresh();
+```
+
+**Auto-refresh.** By default, if a call returns `UNAUTHORIZED` and a refresh token is held, the
+client refreshes the access token **once** and replays the request transparently — concurrent
+failures share a single refresh. If the refresh itself fails, the original `UNAUTHORIZED` is
+surfaced. Disable it with `new Client({ endpoint, autoRefresh: false })`.
+
+## Validation & errors
+
+Inputs are validated client-side against the shared QCobro schemas **before** a request is
+sent. Invalid input throws a `ValidationError` with field-level details, and no network call is
+made. Server-side authorization failures (e.g. an unauthenticated or wrong-workspace call)
+surface as the server's error.
+
+```ts
+import { ValidationError } from "@qcobro/sdk";
+
+try {
+  await client.portfolios.create({ name: "", clientId: "acme", currency: "USD" });
+} catch (err) {
+  if (err instanceof ValidationError) {
+    console.error(err.fieldErrors); // [{ field: "name", message: "...", code: "..." }]
+  }
+}
+```
+
+## API reference
+
+Generate the markdown API reference with:
+
+```bash
+npm run docs
+```
+
+Output lands in `docs/`.

package/dist/client.d.ts

@@ -0,0 +1,132 @@
+import { type CreateTRPCClient } from "@trpc/client";
+import type { AppRouter } from "@qcobro/apiserver";
+import type { LoginInput, ApiKeyLoginInput } from "@qcobro/common";
+import { PortfoliosResource } from "./resources/portfolios.js";
+/** Tokens issued by the QCobro Identity service. */
+export interface Tokens {
+    /** Short-lived bearer token attached to every authenticated request. */
+    accessToken?: string;
+    /** Long-lived token used to obtain a fresh access token via {@link Client.refresh}. */
+    refreshToken?: string;
+    /** JWT describing the authenticated user (claims), when issued. */
+    idToken?: string;
+}
+/** Options for constructing a {@link Client}. */
+export interface ClientOptions {
+    /**
+     * Base URL of the QCobro API. Defaults to `https://api.qcobro.com`; override
+     * only to target another environment (e.g. `http://localhost:3000`). The SDK
+     * appends the `/trpc` path itself.
+     */
+    endpoint?: string;
+    /**
+     * `fetch` implementation to use. Defaults to the global `fetch` (Node ≥18 and
+     * modern browsers). Provide this to supply a polyfill in older runtimes.
+     */
+    fetch?: typeof globalThis.fetch;
+    /** An access token to start authenticated, instead of calling {@link Client.login}. */
+    accessToken?: string;
+    /** A refresh token, enabling {@link Client.refresh} without re-login. */
+    refreshToken?: string;
+    /** The accessKeyId of the workspace to act in. Also settable via {@link Client.useWorkspace}. */
+    workspace?: string;
+    /**
+     * When `true` (the default), an `UNAUTHORIZED` response triggers a single
+     * token refresh and one replay of the failed request, provided a refresh
+     * token is held. Set to `false` to disable and surface `UNAUTHORIZED` directly.
+     */
+    autoRefresh?: boolean;
+}
+/**
+ * The QCobro API client.
+ *
+ * A single `Client` owns the connection and the authentication lifecycle, and
+ * exposes resources as namespaces with friendly methods (e.g.
+ * {@link Client.portfolios}). It transparently attaches the bearer token and the
+ * active-workspace header to every request.
+ *
+ * Tokens are held **in memory only** — persisting them (if you want sessions to
+ * survive a restart) is the caller's responsibility via {@link Client.getTokens}
+ * and {@link Client.setTokens}.
+ *
+ * @example
+ * ```ts
+ * const client = new Client();
+ * await client.login({ email: "me@acme.com", password: process.env.QCOBRO_PASSWORD! });
+ * client.useWorkspace("WO6ueex0qan9ojhf820wgiae3qi5luy08y");
+ *
+ * await client.portfolios.create({ name: "Q3 delinquencies", clientId: "acme" });
+ * const portfolios = await client.portfolios.list();
+ * ```
+ */
+export declare class Client {
+    #private;
+    /**
+     * The underlying typed tRPC proxy. Exposed as an escape hatch for procedures
+     * the SDK does not yet wrap; prefer the resource namespaces where available.
+     */
+    readonly trpc: CreateTRPCClient<AppRouter>;
+    /** Portfolio operations (list, get, create, update, delete, accounts, sync). */
+    readonly portfolios: PortfoliosResource;
+    constructor(options?: ClientOptions);
+    /**
+     * Run a request, transparently refreshing the access token once on an
+     * `UNAUTHORIZED` error and replaying the request. Used internally by the
+     * resource namespaces.
+     *
+     * Refresh happens at most once per failed request: if the replay also fails,
+     * that error is surfaced (no retry loop). Concurrent failures share a single
+     * in-flight refresh. If auto-refresh is disabled, no refresh token is held, or
+     * the refresh itself fails, the original error is surfaced unchanged.
+     *
+     * @internal
+     */
+    request<T>(fn: () => Promise<T>): Promise<T>;
+    /**
+     * Authenticate with email and password. On success the issued access (and
+     * refresh) token is stored on the client and used for subsequent calls.
+     *
+     * @returns the issued tokens.
+     */
+    login(input: LoginInput): Promise<Tokens>;
+    /**
+     * Authenticate with a workspace API key (accessKeyId + accessKeySecret),
+     * intended for unattended, server-to-server integrations. On success the
+     * issued access (and refresh) token is stored on the client and used for
+     * subsequent calls.
+     *
+     * @returns the issued tokens.
+     *
+     * @example
+     * ```ts
+     * await client.loginWithApiKey({
+     *   accessKeyId: "WO6ueex0qan9ojhf820wgiae3qi5luy08y",
+     *   accessKeySecret: process.env.QCOBRO_API_SECRET!
+     * });
+     * ```
+     */
+    loginWithApiKey(input: ApiKeyLoginInput): Promise<Tokens>;
+    /**
+     * Exchange a refresh token for a fresh access token. Uses the refresh token
+     * held by the client unless one is passed explicitly. The new access token
+     * replaces the current one.
+     *
+     * @returns the issued tokens.
+     */
+    refresh(refreshToken?: string): Promise<Tokens>;
+    /**
+     * Select the active workspace by its accessKeyId. Subsequent workspace-scoped
+     * calls act within this workspace.
+     */
+    useWorkspace(accessKeyId: string): this;
+    /** The accessKeyId of the active workspace, or `undefined` if none is selected. */
+    get workspace(): string | undefined;
+    /** Returns the tokens currently held by the client (in memory). */
+    getTokens(): Tokens;
+    /**
+     * Replace the tokens held by the client. Useful to resume a session from
+     * tokens you persisted yourself.
+     */
+    setTokens(tokens: Tokens): this;
+}
+//# sourceMappingURL=client.d.ts.map

package/dist/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAmC,KAAK,gBAAgB,EAAE,MAAM,cAAc,CAAC;AACtF,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,KAAK,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AACnE,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAQ/D,oDAAoD;AACpD,MAAM,WAAW,MAAM;IACrB,wEAAwE;IACxE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,uFAAuF;IACvF,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,mEAAmE;IACnE,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,iDAAiD;AACjD,MAAM,WAAW,aAAa;IAC5B;;;;OAIG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;OAGG;IACH,KAAK,CAAC,EAAE,OAAO,UAAU,CAAC,KAAK,CAAC;IAChC,uFAAuF;IACvF,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,yEAAyE;IACzE,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,iGAAiG;IACjG,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;OAIG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,qBAAa,MAAM;;IACjB;;;OAGG;IACH,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC,SAAS,CAAC,CAAC;IAE3C,gFAAgF;IAChF,QAAQ,CAAC,UAAU,EAAE,kBAAkB,CAAC;gBAS5B,OAAO,GAAE,aAAkB;IA2BvC;;;;;;;;;;;OAWG;IACG,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;IAgClD;;;;;OAKG;IACG,KAAK,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC;IAO/C;;;;;;;;;;;;;;;OAeG;IACG,eAAe,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,MAAM,CAAC;IAO/D;;;;;;OAMG;IACG,OAAO,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAWrD;;;OAGG;IACH,YAAY,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI;IAKvC,mFAAmF;IACnF,IAAI,SAAS,IAAI,MAAM,GAAG,SAAS,CAElC;IAED,mEAAmE;IACnE,SAAS,IAAI,MAAM;IAInB;;;OAGG;IACH,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI;CAKhC"}

package/dist/client.js

@@ -0,0 +1,192 @@
+import { createTRPCClient, httpBatchLink } from "@trpc/client";
+import { PortfoliosResource } from "./resources/portfolios.js";
+/** Header the apiserver reads to scope a request to a workspace. */
+const WORKSPACE_HEADER = "x-workspace";
+/** Default QCobro API base URL, used when no `endpoint` is provided. */
+const DEFAULT_ENDPOINT = "https://api.qcobro.com";
+/**
+ * The QCobro API client.
+ *
+ * A single `Client` owns the connection and the authentication lifecycle, and
+ * exposes resources as namespaces with friendly methods (e.g.
+ * {@link Client.portfolios}). It transparently attaches the bearer token and the
+ * active-workspace header to every request.
+ *
+ * Tokens are held **in memory only** — persisting them (if you want sessions to
+ * survive a restart) is the caller's responsibility via {@link Client.getTokens}
+ * and {@link Client.setTokens}.
+ *
+ * @example
+ * ```ts
+ * const client = new Client();
+ * await client.login({ email: "me@acme.com", password: process.env.QCOBRO_PASSWORD! });
+ * client.useWorkspace("WO6ueex0qan9ojhf820wgiae3qi5luy08y");
+ *
+ * await client.portfolios.create({ name: "Q3 delinquencies", clientId: "acme" });
+ * const portfolios = await client.portfolios.list();
+ * ```
+ */
+export class Client {
+    /**
+     * The underlying typed tRPC proxy. Exposed as an escape hatch for procedures
+     * the SDK does not yet wrap; prefer the resource namespaces where available.
+     */
+    trpc;
+    /** Portfolio operations (list, get, create, update, delete, accounts, sync). */
+    portfolios;
+    #accessToken;
+    #refreshToken;
+    #workspace;
+    #autoRefresh;
+    // Shared in-flight refresh, so concurrent UNAUTHORIZED calls refresh once.
+    #refreshInFlight = null;
+    constructor(options = {}) {
+        this.#accessToken = options.accessToken;
+        this.#refreshToken = options.refreshToken;
+        this.#workspace = options.workspace;
+        this.#autoRefresh = options.autoRefresh ?? true;
+        const url = `${(options.endpoint ?? DEFAULT_ENDPOINT).replace(/\/+$/, "")}/trpc`;
+        this.trpc = createTRPCClient({
+            links: [
+                httpBatchLink({
+                    url,
+                    fetch: options.fetch,
+                    // Read current auth state on every request so a `login()` or
+                    // `useWorkspace()` after construction applies without rebuilding.
+                    headers: () => {
+                        const headers = {};
+                        if (this.#accessToken)
+                            headers.Authorization = `Bearer ${this.#accessToken}`;
+                        if (this.#workspace)
+                            headers[WORKSPACE_HEADER] = this.#workspace;
+                        return headers;
+                    }
+                })
+            ]
+        });
+        this.portfolios = new PortfoliosResource(this.trpc, (fn) => this.request(fn));
+    }
+    /**
+     * Run a request, transparently refreshing the access token once on an
+     * `UNAUTHORIZED` error and replaying the request. Used internally by the
+     * resource namespaces.
+     *
+     * Refresh happens at most once per failed request: if the replay also fails,
+     * that error is surfaced (no retry loop). Concurrent failures share a single
+     * in-flight refresh. If auto-refresh is disabled, no refresh token is held, or
+     * the refresh itself fails, the original error is surfaced unchanged.
+     *
+     * @internal
+     */
+    async request(fn) {
+        try {
+            return await fn();
+        }
+        catch (err) {
+            if (!this.#shouldRefresh(err))
+                throw err;
+            try {
+                await this.#refreshOnce();
+            }
+            catch {
+                // Refresh failed (e.g. expired refresh token) — surface the original
+                // auth error rather than the refresh failure.
+                throw err;
+            }
+            return fn();
+        }
+    }
+    #shouldRefresh(err) {
+        if (!this.#autoRefresh || !this.#refreshToken)
+            return false;
+        return err?.data?.code === "UNAUTHORIZED";
+    }
+    #refreshOnce() {
+        if (!this.#refreshInFlight) {
+            this.#refreshInFlight = this.refresh()
+                .then(() => undefined)
+                .finally(() => {
+                this.#refreshInFlight = null;
+            });
+        }
+        return this.#refreshInFlight;
+    }
+    /**
+     * Authenticate with email and password. On success the issued access (and
+     * refresh) token is stored on the client and used for subsequent calls.
+     *
+     * @returns the issued tokens.
+     */
+    async login(input) {
+        const tokens = await this.trpc.auth.login.mutate(input);
+        this.#accessToken = tokens.accessToken;
+        this.#refreshToken = tokens.refreshToken;
+        return tokens;
+    }
+    /**
+     * Authenticate with a workspace API key (accessKeyId + accessKeySecret),
+     * intended for unattended, server-to-server integrations. On success the
+     * issued access (and refresh) token is stored on the client and used for
+     * subsequent calls.
+     *
+     * @returns the issued tokens.
+     *
+     * @example
+     * ```ts
+     * await client.loginWithApiKey({
+     *   accessKeyId: "WO6ueex0qan9ojhf820wgiae3qi5luy08y",
+     *   accessKeySecret: process.env.QCOBRO_API_SECRET!
+     * });
+     * ```
+     */
+    async loginWithApiKey(input) {
+        const tokens = await this.trpc.auth.exchangeApiKey.mutate(input);
+        this.#accessToken = tokens.accessToken;
+        this.#refreshToken = tokens.refreshToken;
+        return tokens;
+    }
+    /**
+     * Exchange a refresh token for a fresh access token. Uses the refresh token
+     * held by the client unless one is passed explicitly. The new access token
+     * replaces the current one.
+     *
+     * @returns the issued tokens.
+     */
+    async refresh(refreshToken) {
+        const token = refreshToken ?? this.#refreshToken;
+        if (!token) {
+            throw new Error("No refresh token available; pass one or call login() first.");
+        }
+        const tokens = await this.trpc.auth.refresh.mutate({ refreshToken: token });
+        this.#accessToken = tokens.accessToken;
+        if (tokens.refreshToken)
+            this.#refreshToken = tokens.refreshToken;
+        return tokens;
+    }
+    /**
+     * Select the active workspace by its accessKeyId. Subsequent workspace-scoped
+     * calls act within this workspace.
+     */
+    useWorkspace(accessKeyId) {
+        this.#workspace = accessKeyId;
+        return this;
+    }
+    /** The accessKeyId of the active workspace, or `undefined` if none is selected. */
+    get workspace() {
+        return this.#workspace;
+    }
+    /** Returns the tokens currently held by the client (in memory). */
+    getTokens() {
+        return { accessToken: this.#accessToken, refreshToken: this.#refreshToken };
+    }
+    /**
+     * Replace the tokens held by the client. Useful to resume a session from
+     * tokens you persisted yourself.
+     */
+    setTokens(tokens) {
+        this.#accessToken = tokens.accessToken;
+        this.#refreshToken = tokens.refreshToken;
+        return this;
+    }
+}
+//# sourceMappingURL=client.js.map

package/dist/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAyB,MAAM,cAAc,CAAC;AAGtF,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAE/D,oEAAoE;AACpE,MAAM,gBAAgB,GAAG,aAAa,CAAC;AAEvC,wEAAwE;AACxE,MAAM,gBAAgB,GAAG,wBAAwB,CAAC;AAuClD;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,OAAO,MAAM;IACjB;;;OAGG;IACM,IAAI,CAA8B;IAE3C,gFAAgF;IACvE,UAAU,CAAqB;IAExC,YAAY,CAAU;IACtB,aAAa,CAAU;IACvB,UAAU,CAAU;IACpB,YAAY,CAAU;IACtB,2EAA2E;IAC3E,gBAAgB,GAAyB,IAAI,CAAC;IAE9C,YAAY,UAAyB,EAAE;QACrC,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,WAAW,CAAC;QACxC,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC,YAAY,CAAC;QAC1C,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC;QACpC,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,WAAW,IAAI,IAAI,CAAC;QAEhD,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,QAAQ,IAAI,gBAAgB,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC;QACjF,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAY;YACtC,KAAK,EAAE;gBACL,aAAa,CAAC;oBACZ,GAAG;oBACH,KAAK,EAAE,OAAO,CAAC,KAAK;oBACpB,6DAA6D;oBAC7D,kEAAkE;oBAClE,OAAO,EAAE,GAAG,EAAE;wBACZ,MAAM,OAAO,GAA2B,EAAE,CAAC;wBAC3C,IAAI,IAAI,CAAC,YAAY;4BAAE,OAAO,CAAC,aAAa,GAAG,UAAU,IAAI,CAAC,YAAY,EAAE,CAAC;wBAC7E,IAAI,IAAI,CAAC,UAAU;4BAAE,OAAO,CAAC,gBAAgB,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC;wBACjE,OAAO,OAAO,CAAC;oBACjB,CAAC;iBACF,CAAC;aACH;SACF,CAAC,CAAC;QAEH,IAAI,CAAC,UAAU,GAAG,IAAI,kBAAkB,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;IAChF,CAAC;IAED;;;;;;;;;;;OAWG;IACH,KAAK,CAAC,OAAO,CAAI,EAAoB;QACnC,IAAI,CAAC;YACH,OAAO,MAAM,EAAE,EAAE,CAAC;QACpB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC;gBAAE,MAAM,GAAG,CAAC;YACzC,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;YAC5B,CAAC;YAAC,MAAM,CAAC;gBACP,qEAAqE;gBACrE,8CAA8C;gBAC9C,MAAM,GAAG,CAAC;YACZ,CAAC;YACD,OAAO,EAAE,EAAE,CAAC;QACd,CAAC;IACH,CAAC;IAED,cAAc,CAAC,GAAY;QACzB,IAAI,CAAC,IAAI,CAAC,YAAY,IAAI,CAAC,IAAI,CAAC,aAAa;YAAE,OAAO,KAAK,CAAC;QAC5D,OAAQ,GAA2C,EAAE,IAAI,EAAE,IAAI,KAAK,cAAc,CAAC;IACrF,CAAC;IAED,YAAY;QACV,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC3B,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC,OAAO,EAAE;iBACnC,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC;iBACrB,OAAO,CAAC,GAAG,EAAE;gBACZ,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC;YAC/B,CAAC,CAAC,CAAC;QACP,CAAC;QACD,OAAO,IAAI,CAAC,gBAAgB,CAAC;IAC/B,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,KAAK,CAAC,KAAiB;QAC3B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACxD,IAAI,CAAC,YAAY,GAAG,MAAM,CAAC,WAAW,CAAC;QACvC,IAAI,CAAC,aAAa,GAAG,MAAM,CAAC,YAAY,CAAC;QACzC,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;;;;;;;;;;;;;OAeG;IACH,KAAK,CAAC,eAAe,CAAC,KAAuB;QAC3C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACjE,IAAI,CAAC,YAAY,GAAG,MAAM,CAAC,WAAW,CAAC;QACvC,IAAI,CAAC,aAAa,GAAG,MAAM,CAAC,YAAY,CAAC;QACzC,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,OAAO,CAAC,YAAqB;QACjC,MAAM,KAAK,GAAG,YAAY,IAAI,IAAI,CAAC,aAAa,CAAC;QACjD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;QACjF,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC;QAC5E,IAAI,CAAC,YAAY,GAAG,MAAM,CAAC,WAAW,CAAC;QACvC,IAAI,MAAM,CAAC,YAAY;YAAE,IAAI,CAAC,aAAa,GAAG,MAAM,CAAC,YAAY,CAAC;QAClE,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;OAGG;IACH,YAAY,CAAC,WAAmB;QAC9B,IAAI,CAAC,UAAU,GAAG,WAAW,CAAC;QAC9B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,mFAAmF;IACnF,IAAI,SAAS;QACX,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;IAED,mEAAmE;IACnE,SAAS;QACP,OAAO,EAAE,WAAW,EAAE,IAAI,CAAC,YAAY,EAAE,YAAY,EAAE,IAAI,CAAC,aAAa,EAAE,CAAC;IAC9E,CAAC;IAED;;;OAGG;IACH,SAAS,CAAC,MAAc;QACtB,IAAI,CAAC,YAAY,GAAG,MAAM,CAAC,WAAW,CAAC;QACvC,IAAI,CAAC,aAAa,GAAG,MAAM,CAAC,YAAY,CAAC;QACzC,OAAO,IAAI,CAAC;IACd,CAAC;CACF"}

package/dist/index.d.ts

@@ -0,0 +1,13 @@
+/**
+ * `@qcobro/sdk` — a developer-friendly TypeScript SDK for the QCobro API.
+ *
+ * Construct a {@link Client}, authenticate, select a workspace, and call typed
+ * resource methods (e.g. {@link Client.portfolios}).
+ *
+ * @packageDocumentation
+ */
+export { Client } from "./client.js";
+export type { ClientOptions, Tokens } from "./client.js";
+export { PortfoliosResource } from "./resources/portfolios.js";
+export { ValidationError, type FieldError } from "@qcobro/common";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,YAAY,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACzD,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAI/D,OAAO,EAAE,eAAe,EAAE,KAAK,UAAU,EAAE,MAAM,gBAAgB,CAAC"}

package/dist/index.js

@@ -0,0 +1,14 @@
+/**
+ * `@qcobro/sdk` — a developer-friendly TypeScript SDK for the QCobro API.
+ *
+ * Construct a {@link Client}, authenticate, select a workspace, and call typed
+ * resource methods (e.g. {@link Client.portfolios}).
+ *
+ * @packageDocumentation
+ */
+export { Client } from "./client.js";
+export { PortfoliosResource } from "./resources/portfolios.js";
+// Re-export the shared structured error so callers can detect client-side
+// validation failures without depending on `@qcobro/common` directly.
+export { ValidationError } from "@qcobro/common";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAErC,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAE/D,0EAA0E;AAC1E,sEAAsE;AACtE,OAAO,EAAE,eAAe,EAAmB,MAAM,gBAAgB,CAAC"}

package/dist/resources/portfolios.d.ts

@@ -0,0 +1,140 @@
+import type { CreateTRPCClient } from "@trpc/client";
+import type { AppRouter } from "@qcobro/apiserver";
+type RouterClient = CreateTRPCClient<AppRouter>;
+type Portfolios = RouterClient["portfolios"];
+/** Input accepted by each portfolios method, derived from the server router. */
+type ListInput = Parameters<Portfolios["list"]["query"]>[0];
+type GetInput = Parameters<Portfolios["get"]["query"]>[0];
+type CreateInput = Parameters<Portfolios["create"]["mutate"]>[0];
+type UpdateInput = Parameters<Portfolios["update"]["mutate"]>[0];
+type DeleteInput = Parameters<Portfolios["delete"]["mutate"]>[0];
+type ListAccountsInput = Parameters<Portfolios["listAccounts"]["query"]>[0];
+type SyncAccountsInput = Parameters<Portfolios["syncAccounts"]["mutate"]>[0];
+/**
+ * Portfolio operations.
+ *
+ * All methods are workspace-scoped: the {@link Client} must be authenticated and
+ * have an active workspace selected. Inputs are validated client-side against the
+ * shared `@qcobro/common` schemas before any request is sent — invalid input
+ * throws a {@link ValidationError} and never reaches the network.
+ *
+ * Obtain an instance via `client.portfolios`; do not construct it directly.
+ */
+/** Runs a request, transparently refreshing + replaying once on `UNAUTHORIZED`. */
+type RequestRunner = <T>(fn: () => Promise<T>) => Promise<T>;
+export declare class PortfoliosResource {
+    #private;
+    /** @internal */
+    constructor(trpc: RouterClient, request: RequestRunner);
+    /** List the active workspace's portfolios. Pass `includeArchived` to include archived ones. */
+    list(input?: ListInput): Promise<{
+        id: string;
+        name: string;
+        workspaceRef: string;
+        archivedAt: string | null;
+        createdAt: string;
+        updatedAt: string;
+        accountCount: number;
+        recoveredAmount: number;
+        clientId: string;
+        totalOutstandingBalance: number;
+    }[]>;
+    /** Get a single portfolio by id within the active workspace. */
+    get(input: GetInput): Promise<{
+        id: string;
+        name: string;
+        workspaceRef: string;
+        archivedAt: string | null;
+        createdAt: string;
+        updatedAt: string;
+        accountCount: number;
+        recoveredAmount: number;
+        clientId: string;
+        totalOutstandingBalance: number;
+    }>;
+    /** Create a portfolio in the active workspace. */
+    create(input: CreateInput): Promise<{
+        id: string;
+        name: string;
+        workspaceRef: string;
+        archivedAt: string | null;
+        createdAt: string;
+        updatedAt: string;
+        accountCount: number;
+        recoveredAmount: number;
+        clientId: string;
+        totalOutstandingBalance: number;
+    }>;
+    /** Update a portfolio. Set `archived: true` to archive it, `false` to restore it. */
+    update(input: UpdateInput): Promise<{
+        id: string;
+        name: string;
+        workspaceRef: string;
+        archivedAt: string | null;
+        createdAt: string;
+        updatedAt: string;
+        accountCount: number;
+        recoveredAmount: number;
+        clientId: string;
+        totalOutstandingBalance: number;
+    }>;
+    /** Delete a portfolio in the active workspace. */
+    delete(input: DeleteInput): Promise<{
+        id: string;
+        name: string;
+        workspaceRef: string;
+        archivedAt: string | null;
+        createdAt: string;
+        updatedAt: string;
+        accountCount: number;
+        recoveredAmount: number;
+        clientId: string;
+        totalOutstandingBalance: number;
+    }>;
+    /** List a page of a portfolio's accounts, with the total count. */
+    listAccounts(input: ListAccountsInput): Promise<{
+        items: {
+            id: string;
+            portfolioId: string;
+            archivedAt: string | null;
+            createdAt: string;
+            updatedAt: string;
+            outstandingBalance: number;
+            email: string | null;
+            phone: string | null;
+            externalId: string;
+            fullName: string;
+            preferredLanguage: string | null;
+            bestTimeToCall: string | null;
+            customerSegment: string | null;
+            principalAmount: number;
+            termsAmount: number;
+            termsFrequency: string | null;
+            termsLength: number;
+            daysPastDue: number;
+            missedInstallments: number;
+            lastPaymentDate: string | null;
+            lastPaymentAmount: number | null;
+            negotiationOptions: string | null;
+            lastContactedAt: string | null;
+            suppressUntil: string | null;
+            intentStatus: import("@prisma/client").$Enums.IntentStatus | null;
+            totalAttempts: number;
+        }[];
+        total: number;
+    }>;
+    /**
+     * Synchronize a batch of account rows into a portfolio.
+     *
+     * `mode` controls the merge strategy: `APPEND_ONLY` adds new rows,
+     * `UPDATE_EXISTING` updates rows that already exist, `REPLACE` replaces the set.
+     */
+    syncAccounts(input: SyncAccountsInput): Promise<{
+        created: number;
+        updated: number;
+        archived: number;
+        total: number;
+    }>;
+}
+export {};
+//# sourceMappingURL=portfolios.d.ts.map

package/dist/resources/portfolios.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"portfolios.d.ts","sourceRoot":"","sources":["../../src/resources/portfolios.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AACrD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAWnD,KAAK,YAAY,GAAG,gBAAgB,CAAC,SAAS,CAAC,CAAC;AAChD,KAAK,UAAU,GAAG,YAAY,CAAC,YAAY,CAAC,CAAC;AAE7C,gFAAgF;AAChF,KAAK,SAAS,GAAG,UAAU,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC5D,KAAK,QAAQ,GAAG,UAAU,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC1D,KAAK,WAAW,GAAG,UAAU,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACjE,KAAK,WAAW,GAAG,UAAU,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACjE,KAAK,WAAW,GAAG,UAAU,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACjE,KAAK,iBAAiB,GAAG,UAAU,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC5E,KAAK,iBAAiB,GAAG,UAAU,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAS7E;;;;;;;;;GASG;AACH,mFAAmF;AACnF,KAAK,aAAa,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC;AAE7D,qBAAa,kBAAkB;;IAI7B,gBAAgB;gBACJ,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,aAAa;IAKtD,+FAA+F;IACzF,IAAI,CAAC,KAAK,CAAC,EAAE,SAAS;;;;;;;;;;;;IAK5B,gEAAgE;IAC1D,GAAG,CAAC,KAAK,EAAE,QAAQ;;;;;;;;;;;;IAKzB,kDAAkD;IAC5C,MAAM,CAAC,KAAK,EAAE,WAAW;;;;;;;;;;;;IAK/B,qFAAqF;IAC/E,MAAM,CAAC,KAAK,EAAE,WAAW;;;;;;;;;;;;IAK/B,kDAAkD;IAC5C,MAAM,CAAC,KAAK,EAAE,WAAW;;;;;;;;;;;;IAK/B,mEAAmE;IAC7D,YAAY,CAAC,KAAK,EAAE,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAK3C;;;;;OAKG;IACG,YAAY,CAAC,KAAK,EAAE,iBAAiB;;;;;;CAI5C"}

package/dist/resources/portfolios.js

@@ -0,0 +1,59 @@
+import { createPortfolioSchema, updatePortfolioSchema, deletePortfolioSchema, syncAccountsInputSchema, ValidationError } from "@qcobro/common";
+import { listPortfoliosSchema, getPortfolioSchema, listAccountsSchema } from "../schemas.js";
+/** Validate `input` against `schema`, throwing a structured {@link ValidationError} on failure. */
+function parse(schema, input) {
+    const result = schema.safeParse(input);
+    if (!result.success)
+        throw new ValidationError(result.error);
+    return result.data;
+}
+export class PortfoliosResource {
+    #trpc;
+    #request;
+    /** @internal */
+    constructor(trpc, request) {
+        this.#trpc = trpc;
+        this.#request = request;
+    }
+    /** List the active workspace's portfolios. Pass `includeArchived` to include archived ones. */
+    async list(input) {
+        const parsed = parse(listPortfoliosSchema, input);
+        return this.#request(() => this.#trpc.portfolios.list.query(parsed));
+    }
+    /** Get a single portfolio by id within the active workspace. */
+    async get(input) {
+        const parsed = parse(getPortfolioSchema, input);
+        return this.#request(() => this.#trpc.portfolios.get.query(parsed));
+    }
+    /** Create a portfolio in the active workspace. */
+    async create(input) {
+        const parsed = parse(createPortfolioSchema, input);
+        return this.#request(() => this.#trpc.portfolios.create.mutate(parsed));
+    }
+    /** Update a portfolio. Set `archived: true` to archive it, `false` to restore it. */
+    async update(input) {
+        const parsed = parse(updatePortfolioSchema, input);
+        return this.#request(() => this.#trpc.portfolios.update.mutate(parsed));
+    }
+    /** Delete a portfolio in the active workspace. */
+    async delete(input) {
+        const parsed = parse(deletePortfolioSchema, input);
+        return this.#request(() => this.#trpc.portfolios.delete.mutate(parsed));
+    }
+    /** List a page of a portfolio's accounts, with the total count. */
+    async listAccounts(input) {
+        const parsed = parse(listAccountsSchema, input);
+        return this.#request(() => this.#trpc.portfolios.listAccounts.query(parsed));
+    }
+    /**
+     * Synchronize a batch of account rows into a portfolio.
+     *
+     * `mode` controls the merge strategy: `APPEND_ONLY` adds new rows,
+     * `UPDATE_EXISTING` updates rows that already exist, `REPLACE` replaces the set.
+     */
+    async syncAccounts(input) {
+        const parsed = parse(syncAccountsInputSchema, input);
+        return this.#request(() => this.#trpc.portfolios.syncAccounts.mutate(parsed));
+    }
+}
+//# sourceMappingURL=portfolios.js.map

package/dist/resources/portfolios.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"portfolios.js","sourceRoot":"","sources":["../../src/resources/portfolios.ts"],"names":[],"mappings":"AAGA,OAAO,EACL,qBAAqB,EACrB,qBAAqB,EACrB,qBAAqB,EACrB,uBAAuB,EACvB,eAAe,EAChB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAc7F,mGAAmG;AACnG,SAAS,KAAK,CAA4B,MAAe,EAAE,KAAc;IACvE,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACvC,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,MAAM,IAAI,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7D,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC;AAeD,MAAM,OAAO,kBAAkB;IACpB,KAAK,CAAe;IACpB,QAAQ,CAAgB;IAEjC,gBAAgB;IAChB,YAAY,IAAkB,EAAE,OAAsB;QACpD,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAClB,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC;IAC1B,CAAC;IAED,+FAA+F;IAC/F,KAAK,CAAC,IAAI,CAAC,KAAiB;QAC1B,MAAM,MAAM,GAAG,KAAK,CAAC,oBAAoB,EAAE,KAAK,CAAc,CAAC;QAC/D,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;IACvE,CAAC;IAED,gEAAgE;IAChE,KAAK,CAAC,GAAG,CAAC,KAAe;QACvB,MAAM,MAAM,GAAG,KAAK,CAAC,kBAAkB,EAAE,KAAK,CAAa,CAAC;QAC5D,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;IACtE,CAAC;IAED,kDAAkD;IAClD,KAAK,CAAC,MAAM,CAAC,KAAkB;QAC7B,MAAM,MAAM,GAAG,KAAK,CAAC,qBAAqB,EAAE,KAAK,CAAgB,CAAC;QAClE,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IAC1E,CAAC;IAED,qFAAqF;IACrF,KAAK,CAAC,MAAM,CAAC,KAAkB;QAC7B,MAAM,MAAM,GAAG,KAAK,CAAC,qBAAqB,EAAE,KAAK,CAAgB,CAAC;QAClE,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IAC1E,CAAC;IAED,kDAAkD;IAClD,KAAK,CAAC,MAAM,CAAC,KAAkB;QAC7B,MAAM,MAAM,GAAG,KAAK,CAAC,qBAAqB,EAAE,KAAK,CAAgB,CAAC;QAClE,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IAC1E,CAAC;IAED,mEAAmE;IACnE,KAAK,CAAC,YAAY,CAAC,KAAwB;QACzC,MAAM,MAAM,GAAG,KAAK,CAAC,kBAAkB,EAAE,KAAK,CAAsB,CAAC;QACrE,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;IAC/E,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,YAAY,CAAC,KAAwB;QACzC,MAAM,MAAM,GAAG,KAAK,CAAC,uBAAuB,EAAE,KAAK,CAAsB,CAAC;QAC1E,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IAChF,CAAC;CACF"}

package/dist/schemas.d.ts

@@ -0,0 +1,26 @@
+import { z } from "zod";
+/**
+ * Local schemas for portfolio operations whose inputs the apiserver defines
+ * inline (rather than in `@qcobro/common`). Kept minimal and matched to the
+ * server's inline `z.object(...)` shapes so the SDK can validate client-side
+ * before a request is sent. Contract-bearing inputs (create/update/delete/
+ * syncAccounts) reuse the shared `@qcobro/common` schemas directly.
+ */
+/** Input for `portfolios.list`. */
+export declare const listPortfoliosSchema: z.ZodOptional<z.ZodObject<{
+    includeArchived: z.ZodOptional<z.ZodBoolean>;
+}, z.core.$strip>>;
+export type ListPortfoliosInput = z.infer<typeof listPortfoliosSchema>;
+/** Input for `portfolios.get`. */
+export declare const getPortfolioSchema: z.ZodObject<{
+    id: z.ZodString;
+}, z.core.$strip>;
+export type GetPortfolioInput = z.infer<typeof getPortfolioSchema>;
+/** Input for `portfolios.listAccounts`. */
+export declare const listAccountsSchema: z.ZodObject<{
+    portfolioId: z.ZodString;
+    limit: z.ZodOptional<z.ZodNumber>;
+    offset: z.ZodOptional<z.ZodNumber>;
+}, z.core.$strip>;
+export type ListAccountsInput = z.infer<typeof listAccountsSchema>;
+//# sourceMappingURL=schemas.d.ts.map

package/dist/schemas.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schemas.d.ts","sourceRoot":"","sources":["../src/schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;;;GAMG;AAEH,mCAAmC;AACnC,eAAO,MAAM,oBAAoB;;kBAIpB,CAAC;AACd,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAEvE,kCAAkC;AAClC,eAAO,MAAM,kBAAkB;;iBAE7B,CAAC;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAEnE,2CAA2C;AAC3C,eAAO,MAAM,kBAAkB;;;;iBAI7B,CAAC;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC"}

package/dist/schemas.js

@@ -0,0 +1,25 @@
+import { z } from "zod";
+/**
+ * Local schemas for portfolio operations whose inputs the apiserver defines
+ * inline (rather than in `@qcobro/common`). Kept minimal and matched to the
+ * server's inline `z.object(...)` shapes so the SDK can validate client-side
+ * before a request is sent. Contract-bearing inputs (create/update/delete/
+ * syncAccounts) reuse the shared `@qcobro/common` schemas directly.
+ */
+/** Input for `portfolios.list`. */
+export const listPortfoliosSchema = z
+    .object({
+    includeArchived: z.boolean().optional()
+})
+    .optional();
+/** Input for `portfolios.get`. */
+export const getPortfolioSchema = z.object({
+    id: z.string().min(1)
+});
+/** Input for `portfolios.listAccounts`. */
+export const listAccountsSchema = z.object({
+    portfolioId: z.string().min(1),
+    limit: z.number().int().min(1).max(200).optional(),
+    offset: z.number().int().min(0).optional()
+});
+//# sourceMappingURL=schemas.js.map

package/dist/schemas.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schemas.js","sourceRoot":"","sources":["../src/schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;;;GAMG;AAEH,mCAAmC;AACnC,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC;KAClC,MAAM,CAAC;IACN,eAAe,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CACxC,CAAC;KACD,QAAQ,EAAE,CAAC;AAGd,kCAAkC;AAClC,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CACtB,CAAC,CAAC;AAGH,2CAA2C;AAC3C,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAClD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CAC3C,CAAC,CAAC"}

package/package.json

@@ -0,0 +1,37 @@
+{
+  "name": "@qcobro/sdk",
+  "version": "1.11.0",
+  "description": "Developer-friendly TypeScript SDK for the QCobro API.",
+  "type": "module",
+  "exports": {
+    ".": "./dist/index.js"
+  },
+  "files": [
+    "dist"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "scripts": {
+    "build": "tsc -b --force",
+    "clean": "rm -rf dist docs *.tsbuildinfo",
+    "typecheck": "tsc --noEmit",
+    "test": "node --import tsx --test \"src/**/*.test.ts\"",
+    "docs": "typedoc"
+  },
+  "dependencies": {
+    "@qcobro/common": "^1.11.0",
+    "@trpc/client": "^11.0.0",
+    "zod": "^4.0.0"
+  },
+  "devDependencies": {
+    "@qcobro/apiserver": "^1.11.0",
+    "@trpc/server": "^11.0.0",
+    "@types/express": "^5.0.0",
+    "express": "^5.0.0",
+    "tsx": "^4.0.0",
+    "typedoc": "^0.28.0",
+    "typedoc-plugin-markdown": "^4.0.0",
+    "typescript": "^5.9.0"
+  }
+}