@qontoctl/core 0.0.0 → 0.1.0

package/dist/config/validate.js

@@ -0,0 +1,99 @@
+// SPDX-License-Identifier: AGPL-3.0-only
+// Copyright (C) 2026 Oleksii PELYKH
+/**
+ * Check whether a profile name is safe to use as a filename.
+ *
+ * Rejects names containing path separators (`/`, `\`) or parent-directory
+ * references (`..`) to prevent path-traversal attacks.
+ */
+export function isValidProfileName(name) {
+    return !/[/\\]/.test(name) && !name.includes("..");
+}
+const KNOWN_TOP_LEVEL_KEYS = new Set(["api-key", "endpoint", "sandbox"]);
+const KNOWN_API_KEY_KEYS = new Set(["organization-slug", "secret-key"]);
+/**
+ * Validates a parsed YAML document against the expected config schema.
+ *
+ * - Known keys with wrong types produce errors.
+ * - Unknown keys produce warnings (forward compatibility).
+ * - Returns a partially-populated config for valid fields.
+ */
+export function validateConfig(raw) {
+    const warnings = [];
+    const errors = [];
+    const config = {};
+    if (raw === null || raw === undefined) {
+        return { config, warnings, errors };
+    }
+    if (typeof raw !== "object" || Array.isArray(raw)) {
+        errors.push("Configuration must be a YAML mapping");
+        return { config, warnings, errors };
+    }
+    const doc = raw;
+    for (const key of Object.keys(doc)) {
+        if (!KNOWN_TOP_LEVEL_KEYS.has(key)) {
+            warnings.push(`Unknown configuration key: "${key}"`);
+        }
+    }
+    if ("api-key" in doc) {
+        const apiKeySection = doc["api-key"];
+        if (apiKeySection === null || apiKeySection === undefined) {
+            // api-key section present but empty — not an error, just no credentials from file
+        }
+        else if (typeof apiKeySection !== "object" || Array.isArray(apiKeySection)) {
+            errors.push('"api-key" must be a mapping');
+        }
+        else {
+            const apiKey = apiKeySection;
+            for (const key of Object.keys(apiKey)) {
+                if (!KNOWN_API_KEY_KEYS.has(key)) {
+                    warnings.push(`Unknown key in "api-key": "${key}"`);
+                }
+            }
+            const orgSlug = apiKey["organization-slug"];
+            const secretKey = apiKey["secret-key"];
+            if (orgSlug !== undefined && typeof orgSlug !== "string") {
+                errors.push('"api-key.organization-slug" must be a string');
+            }
+            if (secretKey !== undefined && typeof secretKey !== "string") {
+                errors.push('"api-key.secret-key" must be a string');
+            }
+            if (typeof orgSlug === "string" || typeof secretKey === "string") {
+                config.apiKey = {
+                    organizationSlug: typeof orgSlug === "string" ? orgSlug : "",
+                    secretKey: typeof secretKey === "string" ? secretKey : "",
+                };
+            }
+        }
+    }
+    if ("endpoint" in doc) {
+        const endpoint = doc["endpoint"];
+        if (endpoint !== null && endpoint !== undefined) {
+            if (typeof endpoint !== "string") {
+                errors.push('"endpoint" must be a string');
+            }
+            else {
+                try {
+                    new URL(endpoint);
+                    config.endpoint = endpoint;
+                }
+                catch {
+                    errors.push('"endpoint" must be a valid URL');
+                }
+            }
+        }
+    }
+    if ("sandbox" in doc) {
+        const sandbox = doc["sandbox"];
+        if (sandbox !== null && sandbox !== undefined) {
+            if (typeof sandbox !== "boolean") {
+                errors.push('"sandbox" must be a boolean');
+            }
+            else {
+                config.sandbox = sandbox;
+            }
+        }
+    }
+    return { config, warnings, errors };
+}
+//# sourceMappingURL=validate.js.map

package/dist/config/validate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate.js","sourceRoot":"","sources":["../../src/config/validate.ts"],"names":[],"mappings":"AAAA,yCAAyC;AACzC,oCAAoC;AAIpC;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AACrD,CAAC;AAED,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC,CAAC;AACzE,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC,CAAC,mBAAmB,EAAE,YAAY,CAAC,CAAC,CAAC;AAQxE;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAAC,GAAY;IACzC,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,MAAM,GAAmB,EAAE,CAAC;IAElC,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACtC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;IACtC,CAAC;IAED,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAClD,MAAM,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAC;QACpD,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;IACtC,CAAC;IAED,MAAM,GAAG,GAAG,GAA8B,CAAC;IAE3C,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACnC,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACnC,QAAQ,CAAC,IAAI,CAAC,+BAA+B,GAAG,GAAG,CAAC,CAAC;QACvD,CAAC;IACH,CAAC;IAED,IAAI,SAAS,IAAI,GAAG,EAAE,CAAC;QACrB,MAAM,aAAa,GAAG,GAAG,CAAC,SAAS,CAAC,CAAC;QAErC,IAAI,aAAa,KAAK,IAAI,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;YAC1D,kFAAkF;QACpF,CAAC;aAAM,IAAI,OAAO,aAAa,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC;YAC7E,MAAM,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;QAC7C,CAAC;aAAM,CAAC;YACN,MAAM,MAAM,GAAG,aAAwC,CAAC;YAExD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;gBACtC,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;oBACjC,QAAQ,CAAC,IAAI,CAAC,8BAA8B,GAAG,GAAG,CAAC,CAAC;gBACtD,CAAC;YACH,CAAC;YAED,MAAM,OAAO,GAAG,MAAM,CAAC,mBAAmB,CAAC,CAAC;YAC5C,MAAM,SAAS,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC;YAEvC,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;gBACzD,MAAM,CAAC,IAAI,CAAC,8CAA8C,CAAC,CAAC;YAC9D,CAAC;YAED,IAAI,SAAS,KAAK,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;gBAC7D,MAAM,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAC;YACvD,CAAC;YAED,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;gBACjE,MAAM,CAAC,MAAM,GAAG;oBACd,gBAAgB,EAAE,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE;oBAC5D,SAAS,EAAE,OAAO,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE;iBAC1D,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,UAAU,IAAI,GAAG,EAAE,CAAC;QACtB,MAAM,QAAQ,GAAG,GAAG,CAAC,UAAU,CAAC,CAAC;QACjC,IAAI,QAAQ,KAAK,IAAI,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAChD,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;gBACjC,MAAM,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;YAC7C,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC;oBACH,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC;oBAClB,MAAM,CAAC,QAAQ,GAAG,QAAQ,CAAC;gBAC7B,CAAC;gBAAC,MAAM,CAAC;oBACP,MAAM,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;gBAChD,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,SAAS,IAAI,GAAG,EAAE,CAAC;QACrB,MAAM,OAAO,GAAG,GAAG,CAAC,SAAS,CAAC,CAAC;QAC/B,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC9C,IAAI,OAAO,OAAO,KAAK,SAAS,EAAE,CAAC;gBACjC,MAAM,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;YAC7C,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,OAAO,GAAG,OAAO,CAAC;YAC3B,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;AACtC,CAAC"}

package/dist/constants.d.ts

@@ -0,0 +1,7 @@
+/** Production API base URL. */
+export declare const API_BASE_URL = "https://thirdparty.qonto.com";
+/** Sandbox API base URL. */
+export declare const SANDBOX_BASE_URL = "https://thirdparty-sandbox.staging.qonto.co";
+/** Configuration directory name under the user's home directory. */
+export declare const CONFIG_DIR = ".qontoctl";
+//# sourceMappingURL=constants.d.ts.map

package/dist/constants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../src/constants.ts"],"names":[],"mappings":"AAGA,+BAA+B;AAC/B,eAAO,MAAM,YAAY,iCAAiC,CAAC;AAE3D,4BAA4B;AAC5B,eAAO,MAAM,gBAAgB,gDAAgD,CAAC;AAE9E,oEAAoE;AACpE,eAAO,MAAM,UAAU,cAAc,CAAC"}

package/dist/constants.js

@@ -0,0 +1,9 @@
+// SPDX-License-Identifier: AGPL-3.0-only
+// Copyright (C) 2026 Oleksii PELYKH
+/** Production API base URL. */
+export const API_BASE_URL = "https://thirdparty.qonto.com";
+/** Sandbox API base URL. */
+export const SANDBOX_BASE_URL = "https://thirdparty-sandbox.staging.qonto.co";
+/** Configuration directory name under the user's home directory. */
+export const CONFIG_DIR = ".qontoctl";
+//# sourceMappingURL=constants.js.map

package/dist/constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../src/constants.ts"],"names":[],"mappings":"AAAA,yCAAyC;AACzC,oCAAoC;AAEpC,+BAA+B;AAC/B,MAAM,CAAC,MAAM,YAAY,GAAG,8BAA8B,CAAC;AAE3D,4BAA4B;AAC5B,MAAM,CAAC,MAAM,gBAAgB,GAAG,6CAA6C,CAAC;AAE9E,oEAAoE;AACpE,MAAM,CAAC,MAAM,UAAU,GAAG,WAAW,CAAC"}

package/dist/http-client.d.ts

@@ -0,0 +1,100 @@
+/**
+ * Logger interface for HTTP client wire logging.
+ */
+export interface HttpClientLogger {
+    verbose(message: string): void;
+    debug(message: string): void;
+}
+/**
+ * A single error entry from the Qonto API (JSON:API format).
+ */
+export interface QontoApiErrorEntry {
+    readonly code: string;
+    readonly detail: string;
+    readonly source?: {
+        readonly pointer?: string;
+        readonly parameter?: string;
+    };
+}
+/**
+ * Structured error for Qonto API error responses (4xx/5xx).
+ */
+export declare class QontoApiError extends Error {
+    readonly status: number;
+    readonly errors: readonly QontoApiErrorEntry[];
+    constructor(status: number, errors: readonly QontoApiErrorEntry[]);
+}
+/**
+ * Error thrown when all retry attempts are exhausted on 429 responses.
+ */
+export declare class QontoRateLimitError extends Error {
+    readonly retryAfter: number | undefined;
+    constructor(retryAfter: number | undefined);
+}
+export interface HttpClientOptions {
+    /** Base URL for API requests. */
+    readonly baseUrl: string;
+    /** Value for the Authorization header. */
+    readonly authorization: string;
+    /** Logger for verbose/debug output. */
+    readonly logger?: HttpClientLogger | undefined;
+    /** Maximum number of retries on 429 responses. Defaults to 5. */
+    readonly maxRetries?: number | undefined;
+}
+/**
+ * Query parameter value: a single string or an array of strings for
+ * repeated-key parameters (e.g., `status[]=pending&status[]=completed`).
+ */
+export type QueryParamValue = string | readonly string[];
+/**
+ * Query parameters for an HTTP request.
+ */
+export type QueryParams = Readonly<Record<string, QueryParamValue>>;
+/**
+ * Core HTTP client for the Qonto API.
+ *
+ * Features:
+ * - Configurable base URL (production/sandbox)
+ * - User-Agent header on all requests
+ * - Exponential backoff on 429 responses
+ * - Structured error handling for 4xx/5xx
+ * - Wire logging (verbose/debug) via injected logger
+ */
+export declare class HttpClient {
+    private readonly baseUrl;
+    private readonly authorization;
+    private readonly logger;
+    private readonly maxRetries;
+    private readonly userAgent;
+    constructor(options: HttpClientOptions);
+    /**
+     * Sends an HTTP request and parses the response as JSON.
+     *
+     * **Trust boundary**: The parsed JSON is cast to `T` without runtime validation.
+     * Callers trust the Qonto API contract for response shapes.
+     */
+    request<T>(method: string, path: string, options?: {
+        readonly body?: unknown;
+        readonly params?: QueryParams;
+    }): Promise<T>;
+    /**
+     * Sends an HTTP request expecting no response body (e.g. 204 No Content).
+     */
+    requestVoid(method: string, path: string, options?: {
+        readonly body?: unknown;
+        readonly params?: QueryParams;
+    }): Promise<void>;
+    get<T>(path: string, params?: QueryParams): Promise<T>;
+    post<T>(path: string, body?: unknown): Promise<T>;
+    delete(path: string): Promise<void>;
+    private fetchWithRetry;
+    private buildUrl;
+    private buildHeaders;
+    private parseRetryAfter;
+    private extractErrors;
+    private safeReadJson;
+    private logVerbose;
+    private logDebug;
+    protected sleep(ms: number): Promise<void>;
+}
+//# sourceMappingURL=http-client.d.ts.map

package/dist/http-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-client.d.ts","sourceRoot":"","sources":["../src/http-client.ts"],"names":[],"mappings":"AAQA;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,OAAO,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,KAAK,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,CAAC,EAAE;QAChB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAC1B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;KAC7B,CAAC;CACH;AAED;;GAEG;AACH,qBAAa,aAAc,SAAQ,KAAK;aAEpB,MAAM,EAAE,MAAM;aACd,MAAM,EAAE,SAAS,kBAAkB,EAAE;gBADrC,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,SAAS,kBAAkB,EAAE;CAMxD;AAED;;GAEG;AACH,qBAAa,mBAAoB,SAAQ,KAAK;aAChB,UAAU,EAAE,MAAM,GAAG,SAAS;gBAA9B,UAAU,EAAE,MAAM,GAAG,SAAS;CAI3D;AAED,MAAM,WAAW,iBAAiB;IAChC,iCAAiC;IACjC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAEzB,0CAA0C;IAC1C,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAE/B,uCAAuC;IACvC,QAAQ,CAAC,MAAM,CAAC,EAAE,gBAAgB,GAAG,SAAS,CAAC;IAE/C,iEAAiE;IACjE,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC1C;AAsCD;;;GAGG;AACH,MAAM,MAAM,eAAe,GAAG,MAAM,GAAG,SAAS,MAAM,EAAE,CAAC;AAEzD;;GAEG;AACH,MAAM,MAAM,WAAW,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC,CAAC;AAEpE;;;;;;;;;GASG;AACH,qBAAa,UAAU;IACrB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAS;IACvC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA+B;IACtD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;gBAEvB,OAAO,EAAE,iBAAiB;IAQtC;;;;;OAKG;IACG,OAAO,CAAC,CAAC,EACb,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,OAAO,CAAC,EAAE;QACR,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC;QACxB,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;KAC/B,GACA,OAAO,CAAC,CAAC,CAAC;IAOb;;OAEG;IACG,WAAW,CACf,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,OAAO,CAAC,EAAE;QACR,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC;QACxB,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;KAC/B,GACA,OAAO,CAAC,IAAI,CAAC;IAIV,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,CAAC,CAAC;IAItD,IAAI,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC;IAIjD,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;YAI3B,cAAc;IAmD5B,OAAO,CAAC,QAAQ;IAgBhB,OAAO,CAAC,YAAY;IAgBpB,OAAO,CAAC,eAAe;IASvB,OAAO,CAAC,aAAa;YAYP,YAAY;IAQ1B,OAAO,CAAC,UAAU;IAIlB,OAAO,CAAC,QAAQ;IAIhB,SAAS,CAAC,KAAK,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAG3C"}

package/dist/http-client.js

@@ -0,0 +1,210 @@
+// SPDX-License-Identifier: AGPL-3.0-only
+// Copyright (C) 2026 Oleksii PELYKH
+import { createRequire } from "node:module";
+const require = createRequire(import.meta.url);
+const packageJson = require("../package.json");
+/**
+ * Structured error for Qonto API error responses (4xx/5xx).
+ */
+export class QontoApiError extends Error {
+    status;
+    errors;
+    constructor(status, errors) {
+        const summary = errors.map((e) => `${e.code}: ${e.detail}`).join("; ");
+        super(`Qonto API error ${status}: ${summary}`);
+        this.status = status;
+        this.errors = errors;
+        this.name = "QontoApiError";
+    }
+}
+/**
+ * Error thrown when all retry attempts are exhausted on 429 responses.
+ */
+export class QontoRateLimitError extends Error {
+    retryAfter;
+    constructor(retryAfter) {
+        super(`Rate limit exceeded${retryAfter !== undefined ? ` (retry after ${retryAfter}s)` : ""}`);
+        this.retryAfter = retryAfter;
+        this.name = "QontoRateLimitError";
+    }
+}
+const DEFAULT_MAX_RETRIES = 5;
+const BASE_BACKOFF_MS = 1000;
+/**
+ * Field names redacted from debug log output to avoid leaking financial data.
+ */
+const SENSITIVE_FIELDS = new Set([
+    "iban",
+    "bic",
+    "balance",
+    "balance_cents",
+    "authorized_balance",
+    "authorized_balance_cents",
+]);
+function redactSensitiveFields(value) {
+    if (value === null || value === undefined) {
+        return value;
+    }
+    if (Array.isArray(value)) {
+        return value.map((item) => redactSensitiveFields(item));
+    }
+    if (typeof value === "object") {
+        const result = {};
+        for (const [key, val] of Object.entries(value)) {
+            result[key] = SENSITIVE_FIELDS.has(key) ? "[REDACTED]" : redactSensitiveFields(val);
+        }
+        return result;
+    }
+    return value;
+}
+function buildUserAgent() {
+    return `QontoCtl/${packageJson.version} (Node.js/${process.versions.node}; ${process.platform})`;
+}
+/**
+ * Core HTTP client for the Qonto API.
+ *
+ * Features:
+ * - Configurable base URL (production/sandbox)
+ * - User-Agent header on all requests
+ * - Exponential backoff on 429 responses
+ * - Structured error handling for 4xx/5xx
+ * - Wire logging (verbose/debug) via injected logger
+ */
+export class HttpClient {
+    baseUrl;
+    authorization;
+    logger;
+    maxRetries;
+    userAgent;
+    constructor(options) {
+        this.baseUrl = options.baseUrl.replace(/\/+$/, "");
+        this.authorization = options.authorization;
+        this.logger = options.logger;
+        this.maxRetries = options.maxRetries ?? DEFAULT_MAX_RETRIES;
+        this.userAgent = buildUserAgent();
+    }
+    /**
+     * Sends an HTTP request and parses the response as JSON.
+     *
+     * **Trust boundary**: The parsed JSON is cast to `T` without runtime validation.
+     * Callers trust the Qonto API contract for response shapes.
+     */
+    async request(method, path, options) {
+        const response = await this.fetchWithRetry(method, path, options);
+        const responseBody = await response.json();
+        this.logDebug(`Response body: ${JSON.stringify(redactSensitiveFields(responseBody))}`);
+        return responseBody;
+    }
+    /**
+     * Sends an HTTP request expecting no response body (e.g. 204 No Content).
+     */
+    async requestVoid(method, path, options) {
+        await this.fetchWithRetry(method, path, options);
+    }
+    async get(path, params) {
+        return this.request("GET", path, params !== undefined ? { params } : undefined);
+    }
+    async post(path, body) {
+        return this.request("POST", path, body !== undefined ? { body } : undefined);
+    }
+    async delete(path) {
+        return this.requestVoid("DELETE", path);
+    }
+    async fetchWithRetry(method, path, options) {
+        const url = this.buildUrl(path, options?.params);
+        const headers = this.buildHeaders(options?.body !== undefined);
+        const body = options?.body !== undefined ? JSON.stringify(options.body) : undefined;
+        for (let attempt = 0; attempt <= this.maxRetries; attempt++) {
+            this.logVerbose(`${method} ${url.toString()}${attempt > 0 ? ` (retry ${attempt})` : ""}`);
+            if (body !== undefined) {
+                this.logDebug(`Request body: ${body}`);
+            }
+            const startTime = performance.now();
+            const response = await fetch(url, body !== undefined ? { method, headers, body } : { method, headers });
+            const elapsed = performance.now() - startTime;
+            this.logVerbose(`${response.status} ${response.statusText} (${elapsed.toFixed(0)}ms)`);
+            this.logDebug(`Response headers: ${JSON.stringify(Object.fromEntries(response.headers.entries()))}`);
+            if (response.status === 429) {
+                const retryAfter = this.parseRetryAfter(response);
+                if (attempt === this.maxRetries) {
+                    throw new QontoRateLimitError(retryAfter);
+                }
+                const delay = retryAfter !== undefined ? retryAfter * 1000 : BASE_BACKOFF_MS * Math.pow(2, attempt);
+                this.logVerbose(`Rate limited, waiting ${delay}ms before retry ${attempt + 1}`);
+                await this.sleep(delay);
+                continue;
+            }
+            if (!response.ok) {
+                const errorBody = await this.safeReadJson(response);
+                const errors = this.extractErrors(errorBody);
+                throw new QontoApiError(response.status, errors);
+            }
+            return response;
+        }
+        // Unreachable in practice: the loop always returns or throws
+        throw new QontoRateLimitError(undefined);
+    }
+    buildUrl(path, params) {
+        const url = new URL(`${this.baseUrl}${path}`);
+        if (params) {
+            for (const [key, value] of Object.entries(params)) {
+                if (typeof value === "string") {
+                    url.searchParams.set(key, value);
+                }
+                else {
+                    for (const v of value) {
+                        url.searchParams.append(key, v);
+                    }
+                }
+            }
+        }
+        return url;
+    }
+    buildHeaders(hasBody) {
+        const headers = {
+            Authorization: this.authorization,
+            "User-Agent": this.userAgent,
+            Accept: "application/json",
+        };
+        if (hasBody) {
+            headers["Content-Type"] = "application/json";
+        }
+        this.logDebug(`Request headers: ${JSON.stringify({ ...headers, Authorization: "[REDACTED]" })}`);
+        return headers;
+    }
+    parseRetryAfter(response) {
+        const header = response.headers.get("Retry-After");
+        if (header === null) {
+            return undefined;
+        }
+        const seconds = Number(header);
+        return Number.isFinite(seconds) && seconds > 0 ? seconds : undefined;
+    }
+    extractErrors(body) {
+        if (typeof body === "object" &&
+            body !== null &&
+            "errors" in body &&
+            Array.isArray(body.errors)) {
+            return body.errors;
+        }
+        return [{ code: "unknown", detail: "Unknown error" }];
+    }
+    async safeReadJson(response) {
+        try {
+            return await response.json();
+        }
+        catch {
+            return undefined;
+        }
+    }
+    logVerbose(message) {
+        this.logger?.verbose(message);
+    }
+    logDebug(message) {
+        this.logger?.debug(message);
+    }
+    sleep(ms) {
+        return new Promise((resolve) => setTimeout(resolve, ms));
+    }
+}
+//# sourceMappingURL=http-client.js.map

package/dist/http-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-client.js","sourceRoot":"","sources":["../src/http-client.ts"],"names":[],"mappings":"AAAA,yCAAyC;AACzC,oCAAoC;AAEpC,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAE5C,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC/C,MAAM,WAAW,GAAG,OAAO,CAAC,iBAAiB,CAAwB,CAAC;AAsBtE;;GAEG;AACH,MAAM,OAAO,aAAc,SAAQ,KAAK;IAEpB;IACA;IAFlB,YACkB,MAAc,EACd,MAAqC;QAErD,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvE,KAAK,CAAC,mBAAmB,MAAM,KAAK,OAAO,EAAE,CAAC,CAAC;QAJ/B,WAAM,GAAN,MAAM,CAAQ;QACd,WAAM,GAAN,MAAM,CAA+B;QAIrD,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;IAC9B,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IAChB;IAA5B,YAA4B,UAA8B;QACxD,KAAK,CAAC,sBAAsB,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,iBAAiB,UAAU,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QADrE,eAAU,GAAV,UAAU,CAAoB;QAExD,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;IACpC,CAAC;CACF;AAgBD,MAAM,mBAAmB,GAAG,CAAC,CAAC;AAC9B,MAAM,eAAe,GAAG,IAAI,CAAC;AAE7B;;GAEG;AACH,MAAM,gBAAgB,GAAwB,IAAI,GAAG,CAAC;IACpD,MAAM;IACN,KAAK;IACL,SAAS;IACT,eAAe;IACf,oBAAoB;IACpB,0BAA0B;CAC3B,CAAC,CAAC;AAEH,SAAS,qBAAqB,CAAC,KAAc;IAC3C,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QAC1C,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAa,EAAE,EAAE,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC;IACnE,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,MAAM,GAA4B,EAAE,CAAC;QAC3C,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,EAAE,CAAC;YAC1E,MAAM,CAAC,GAAG,CAAC,GAAG,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,qBAAqB,CAAC,GAAG,CAAC,CAAC;QACtF,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,cAAc;IACrB,OAAO,YAAY,WAAW,CAAC,OAAO,aAAa,OAAO,CAAC,QAAQ,CAAC,IAAI,KAAK,OAAO,CAAC,QAAQ,GAAG,CAAC;AACnG,CAAC;AAaD;;;;;;;;;GASG;AACH,MAAM,OAAO,UAAU;IACJ,OAAO,CAAS;IAChB,aAAa,CAAS;IACtB,MAAM,CAA+B;IACrC,UAAU,CAAS;IACnB,SAAS,CAAS;IAEnC,YAAY,OAA0B;QACpC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACnD,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC;QAC3C,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC7B,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,mBAAmB,CAAC;QAC5D,IAAI,CAAC,SAAS,GAAG,cAAc,EAAE,CAAC;IACpC,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,OAAO,CACX,MAAc,EACd,IAAY,EACZ,OAGC;QAED,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;QAClE,MAAM,YAAY,GAAY,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACpD,IAAI,CAAC,QAAQ,CAAC,kBAAkB,IAAI,CAAC,SAAS,CAAC,qBAAqB,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC,CAAC;QACvF,OAAO,YAAiB,CAAC;IAC3B,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,WAAW,CACf,MAAc,EACd,IAAY,EACZ,OAGC;QAED,MAAM,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IACnD,CAAC;IAED,KAAK,CAAC,GAAG,CAAI,IAAY,EAAE,MAAoB;QAC7C,OAAO,IAAI,CAAC,OAAO,CAAI,KAAK,EAAE,IAAI,EAAE,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACrF,CAAC;IAED,KAAK,CAAC,IAAI,CAAI,IAAY,EAAE,IAAc;QACxC,OAAO,IAAI,CAAC,OAAO,CAAI,MAAM,EAAE,IAAI,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAClF,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,IAAY;QACvB,OAAO,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC1C,CAAC;IAEO,KAAK,CAAC,cAAc,CAC1B,MAAc,EACd,IAAY,EACZ,OAGC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QACjD,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC;QAC/D,MAAM,IAAI,GAAG,OAAO,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAEpF,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,IAAI,CAAC,UAAU,EAAE,OAAO,EAAE,EAAE,CAAC;YAC5D,IAAI,CAAC,UAAU,CAAC,GAAG,MAAM,IAAI,GAAG,CAAC,QAAQ,EAAE,GAAG,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,OAAO,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC1F,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;gBACvB,IAAI,CAAC,QAAQ,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC;YACzC,CAAC;YAED,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;YACpC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;YACxG,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;YAE9C,IAAI,CAAC,UAAU,CAAC,GAAG,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;YACvF,IAAI,CAAC,QAAQ,CAAC,qBAAqB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;YAErG,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBAC5B,MAAM,UAAU,GAAG,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;gBAElD,IAAI,OAAO,KAAK,IAAI,CAAC,UAAU,EAAE,CAAC;oBAChC,MAAM,IAAI,mBAAmB,CAAC,UAAU,CAAC,CAAC;gBAC5C,CAAC;gBAED,MAAM,KAAK,GAAG,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC,CAAC,eAAe,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;gBACpG,IAAI,CAAC,UAAU,CAAC,yBAAyB,KAAK,mBAAmB,OAAO,GAAG,CAAC,EAAE,CAAC,CAAC;gBAChF,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBACxB,SAAS;YACX,CAAC;YAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;gBACpD,MAAM,MAAM,GAAkC,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;gBAC5E,MAAM,IAAI,aAAa,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YACnD,CAAC;YAED,OAAO,QAAQ,CAAC;QAClB,CAAC;QAED,6DAA6D;QAC7D,MAAM,IAAI,mBAAmB,CAAC,SAAS,CAAC,CAAC;IAC3C,CAAC;IAEO,QAAQ,CAAC,IAAY,EAAE,MAAoB;QACjD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,IAAI,CAAC,OAAO,GAAG,IAAI,EAAE,CAAC,CAAC;QAC9C,IAAI,MAAM,EAAE,CAAC;YACX,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;gBAClD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;oBAC9B,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;gBACnC,CAAC;qBAAM,CAAC;oBACN,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;wBACtB,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;oBAClC,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAEO,YAAY,CAAC,OAAgB;QACnC,MAAM,OAAO,GAA2B;YACtC,aAAa,EAAE,IAAI,CAAC,aAAa;YACjC,YAAY,EAAE,IAAI,CAAC,SAAS;YAC5B,MAAM,EAAE,kBAAkB;SAC3B,CAAC;QAEF,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;QAC/C,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,oBAAoB,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,CAAC,EAAE,CAAC,CAAC;QAEjG,OAAO,OAAO,CAAC;IACjB,CAAC;IAEO,eAAe,CAAC,QAAkB;QACxC,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QACnD,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YACpB,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;QAC/B,OAAO,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IACvE,CAAC;IAEO,aAAa,CAAC,IAAa;QACjC,IACE,OAAO,IAAI,KAAK,QAAQ;YACxB,IAAI,KAAK,IAAI;YACb,QAAQ,IAAI,IAAI;YAChB,KAAK,CAAC,OAAO,CAAE,IAA4B,CAAC,MAAM,CAAC,EACnD,CAAC;YACD,OAAQ,IAAyC,CAAC,MAAM,CAAC;QAC3D,CAAC;QACD,OAAO,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC,CAAC;IACxD,CAAC;IAEO,KAAK,CAAC,YAAY,CAAC,QAAkB;QAC3C,IAAI,CAAC;YACH,OAAO,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;IAEO,UAAU,CAAC,OAAe;QAChC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IAChC,CAAC;IAEO,QAAQ,CAAC,OAAe;QAC9B,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IAC9B,CAAC;IAES,KAAK,CAAC,EAAU;QACxB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;IAC3D,CAAC;CACF"}

package/dist/index.d.ts

@@ -1,2 +1,13 @@
-export {};
+export { HttpClient, QontoApiError, QontoRateLimitError, type HttpClientLogger, type HttpClientOptions, type QueryParams, type QueryParamValue, type QontoApiErrorEntry, } from "./http-client.js";
+export { resolveConfig, ConfigError, isValidProfileName, loadConfigFile, validateConfig, applyEnvOverlay, } from "./config/index.js";
+export type { ApiKeyCredentials, QontoctlConfig, ConfigResult, ResolveOptions, LoadResult, ValidationResult, } from "./config/index.js";
+export { AuthError, buildApiKeyAuthorization } from "./auth/index.js";
+export { API_BASE_URL, CONFIG_DIR, SANDBOX_BASE_URL } from "./constants.js";
+export type { Label, Membership } from "./types/index.js";
+export type { Statement, StatementFile } from "./statements/index.js";
+export { buildTransactionQueryParams, getTransaction } from "./transactions/index.js";
+export type { Transaction, TransactionLabel, ListTransactionsParams } from "./transactions/index.js";
+export type { BankAccount, Organization, PaginationMeta } from "./api-types.js";
+export { getOrganization } from "./services/organization.js";
+export { getBankAccount, resolveDefaultBankAccount } from "./services/bank-accounts.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":""}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAGA,OAAO,EACL,UAAU,EACV,aAAa,EACb,mBAAmB,EACnB,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACtB,KAAK,WAAW,EAChB,KAAK,eAAe,EACpB,KAAK,kBAAkB,GACxB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EACL,aAAa,EACb,WAAW,EACX,kBAAkB,EAClB,cAAc,EACd,cAAc,EACd,eAAe,GAChB,MAAM,mBAAmB,CAAC;AAE3B,YAAY,EACV,iBAAiB,EACjB,cAAc,EACd,YAAY,EACZ,cAAc,EACd,UAAU,EACV,gBAAgB,GACjB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAAE,SAAS,EAAE,wBAAwB,EAAE,MAAM,iBAAiB,CAAC;AAEtE,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAE5E,YAAY,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAE1D,YAAY,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAEtE,OAAO,EAAE,2BAA2B,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAEtF,YAAY,EAAE,WAAW,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AAErG,YAAY,EAAE,WAAW,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAEhF,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAC7D,OAAO,EAAE,cAAc,EAAE,yBAAyB,EAAE,MAAM,6BAA6B,CAAC"}

package/dist/index.js

@@ -1,4 +1,10 @@
-export {};
 // SPDX-License-Identifier: AGPL-3.0-only
 // Copyright (C) 2026 Oleksii PELYKH
+export { HttpClient, QontoApiError, QontoRateLimitError, } from "./http-client.js";
+export { resolveConfig, ConfigError, isValidProfileName, loadConfigFile, validateConfig, applyEnvOverlay, } from "./config/index.js";
+export { AuthError, buildApiKeyAuthorization } from "./auth/index.js";
+export { API_BASE_URL, CONFIG_DIR, SANDBOX_BASE_URL } from "./constants.js";
+export { buildTransactionQueryParams, getTransaction } from "./transactions/index.js";
+export { getOrganization } from "./services/organization.js";
+export { getBankAccount, resolveDefaultBankAccount } from "./services/bank-accounts.js";
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAAA,yCAAyC;AACzC,oCAAoC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,yCAAyC;AACzC,oCAAoC;AAEpC,OAAO,EACL,UAAU,EACV,aAAa,EACb,mBAAmB,GAMpB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EACL,aAAa,EACb,WAAW,EACX,kBAAkB,EAClB,cAAc,EACd,cAAc,EACd,eAAe,GAChB,MAAM,mBAAmB,CAAC;AAW3B,OAAO,EAAE,SAAS,EAAE,wBAAwB,EAAE,MAAM,iBAAiB,CAAC;AAEtE,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAM5E,OAAO,EAAE,2BAA2B,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAMtF,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAC7D,OAAO,EAAE,cAAc,EAAE,yBAAyB,EAAE,MAAM,6BAA6B,CAAC"}

package/dist/services/bank-accounts.d.ts

@@ -0,0 +1,18 @@
+import type { BankAccount, Organization } from "../api-types.js";
+import type { HttpClient } from "../http-client.js";
+/**
+ * Fetch a single bank account by ID.
+ *
+ * @param client - The HTTP client to use for the request.
+ * @param id - The bank account UUID.
+ * @returns The bank account details.
+ */
+export declare function getBankAccount(client: HttpClient, id: string): Promise<BankAccount>;
+/**
+ * Resolve the default bank account from an organization.
+ *
+ * Returns the account marked as `main`, or falls back to the first account.
+ * Returns `undefined` if the organization has no bank accounts.
+ */
+export declare function resolveDefaultBankAccount(org: Organization): BankAccount | undefined;
+//# sourceMappingURL=bank-accounts.d.ts.map

package/dist/services/bank-accounts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bank-accounts.d.ts","sourceRoot":"","sources":["../../src/services/bank-accounts.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AACjE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAMpD;;;;;;GAMG;AACH,wBAAsB,cAAc,CAAC,MAAM,EAAE,UAAU,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CAGzF;AAED;;;;;GAKG;AACH,wBAAgB,yBAAyB,CAAC,GAAG,EAAE,YAAY,GAAG,WAAW,GAAG,SAAS,CAEpF"}

package/dist/services/bank-accounts.js

@@ -0,0 +1,23 @@
+// SPDX-License-Identifier: AGPL-3.0-only
+// Copyright (C) 2026 Oleksii PELYKH
+/**
+ * Fetch a single bank account by ID.
+ *
+ * @param client - The HTTP client to use for the request.
+ * @param id - The bank account UUID.
+ * @returns The bank account details.
+ */
+export async function getBankAccount(client, id) {
+    const response = await client.get(`/v2/bank_accounts/${encodeURIComponent(id)}`);
+    return response.bank_account;
+}
+/**
+ * Resolve the default bank account from an organization.
+ *
+ * Returns the account marked as `main`, or falls back to the first account.
+ * Returns `undefined` if the organization has no bank accounts.
+ */
+export function resolveDefaultBankAccount(org) {
+    return org.bank_accounts.find((a) => a.main) ?? org.bank_accounts[0];
+}
+//# sourceMappingURL=bank-accounts.js.map

package/dist/services/bank-accounts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bank-accounts.js","sourceRoot":"","sources":["../../src/services/bank-accounts.ts"],"names":[],"mappings":"AAAA,yCAAyC;AACzC,oCAAoC;AASpC;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,MAAkB,EAAE,EAAU;IACjE,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,GAAG,CAAsB,qBAAqB,kBAAkB,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IACtG,OAAO,QAAQ,CAAC,YAAY,CAAC;AAC/B,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,yBAAyB,CAAC,GAAiB;IACzD,OAAO,GAAG,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;AACvE,CAAC"}

package/dist/services/index.d.ts

@@ -0,0 +1,3 @@
+export { getOrganization } from "./organization.js";
+export { getBankAccount } from "./bank-accounts.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/services/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/services/index.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC"}

package/dist/services/index.js

@@ -0,0 +1,5 @@
+// SPDX-License-Identifier: AGPL-3.0-only
+// Copyright (C) 2026 Oleksii PELYKH
+export { getOrganization } from "./organization.js";
+export { getBankAccount } from "./bank-accounts.js";
+//# sourceMappingURL=index.js.map

package/dist/services/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/services/index.ts"],"names":[],"mappings":"AAAA,yCAAyC;AACzC,oCAAoC;AAEpC,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC"}

package/dist/services/organization.d.ts

@@ -0,0 +1,10 @@
+import type { Organization } from "../api-types.js";
+import type { HttpClient } from "../http-client.js";
+/**
+ * Fetch the authenticated organization details, including its bank accounts.
+ *
+ * @param client - The HTTP client to use for the request.
+ * @returns The organization object with nested bank accounts.
+ */
+export declare function getOrganization(client: HttpClient): Promise<Organization>;
+//# sourceMappingURL=organization.d.ts.map

package/dist/services/organization.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"organization.d.ts","sourceRoot":"","sources":["../../src/services/organization.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAMpD;;;;;GAKG;AACH,wBAAsB,eAAe,CAAC,MAAM,EAAE,UAAU,GAAG,OAAO,CAAC,YAAY,CAAC,CAG/E"}

package/dist/services/organization.js

@@ -0,0 +1,13 @@
+// SPDX-License-Identifier: AGPL-3.0-only
+// Copyright (C) 2026 Oleksii PELYKH
+/**
+ * Fetch the authenticated organization details, including its bank accounts.
+ *
+ * @param client - The HTTP client to use for the request.
+ * @returns The organization object with nested bank accounts.
+ */
+export async function getOrganization(client) {
+    const response = await client.get("/v2/organization");
+    return response.organization;
+}
+//# sourceMappingURL=organization.js.map

package/dist/services/organization.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"organization.js","sourceRoot":"","sources":["../../src/services/organization.ts"],"names":[],"mappings":"AAAA,yCAAyC;AACzC,oCAAoC;AASpC;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,MAAkB;IACtD,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,GAAG,CAAuB,kBAAkB,CAAC,CAAC;IAC5E,OAAO,QAAQ,CAAC,YAAY,CAAC;AAC/B,CAAC"}

package/dist/statements/index.d.ts

@@ -0,0 +1,2 @@
+export type { Statement, StatementFile } from "./types.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/statements/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/statements/index.ts"],"names":[],"mappings":"AAGA,YAAY,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC"}

package/dist/statements/index.js

@@ -0,0 +1,4 @@
+// SPDX-License-Identifier: AGPL-3.0-only
+// Copyright (C) 2026 Oleksii PELYKH
+export {};
+//# sourceMappingURL=index.js.map

package/dist/statements/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/statements/index.ts"],"names":[],"mappings":"AAAA,yCAAyC;AACzC,oCAAoC"}

package/dist/statements/types.d.ts

@@ -0,0 +1,19 @@
+/**
+ * File metadata for a bank statement.
+ */
+export interface StatementFile {
+    readonly file_name: string;
+    readonly file_content_type: string;
+    readonly file_size: string;
+    readonly file_url: string;
+}
+/**
+ * A bank statement from the Qonto API.
+ */
+export interface Statement {
+    readonly id: string;
+    readonly bank_account_id: string;
+    readonly period: string;
+    readonly file: StatementFile;
+}
+//# sourceMappingURL=types.d.ts.map