@venlyfinance/settlement-mcp 0.1.0 → 0.2.0

package/dist/types.d.ts

@@ -1,108 +1,37 @@
 /**
- * Domain types + the injectable VenlyClient interface.
+ * Generated API contracts + the injectable VenlyClient interface.
  *
- * These shapes are a minimal projection of the vendored OpenAPI specs at
- * projects/venly-docs-rebuild/api-reference/finance.yaml (servers:
- * https://api.venlyfinance.com/api/v1) and fundflow.yaml (servers:
- * https://api-fundflow.venly.io). Only the fields the tools actually read or
- * echo are modeled. Fields are intentionally loose (optional) because this is a
- * thin wrapper, not a full SDK.
- *
- * TRANSPORT NOTE: the bundled HttpVenlyClient is a deliberately minimal fetch
- * transport (see client/http-client.ts). A future release replaces it with a
- * thin adapter over `@venlyfinance/sdk` with no change to this interface;
- * until then the minimal transport is what ships. When that lands, replace
- * HttpVenlyClient with a thin adapter over it and delete the vendored transport.
+ * Finance and Fundflow resources and requests are aliases to the types exported
+ * by `@venlyfinance/sdk`. Only MCP-owned inputs and compatibility shapes are
+ * declared locally. This prevents the MCP from silently drifting away from the
+ * vendored OpenAPI specifications.
  */
-/** Ramp request status flow, per fundflow.yaml overview. */
-export type RampStatus = "AWAITING_APPROVAL" | "AWAITING_FUNDS" | "PROCESSING" | "SUCCEEDED" | "FAILED" | "BLOCKED" | "DENIED" | "REJECTED" | "CANCELLED";
-export type RampType = "ON_RAMP" | "OFF_RAMP";
-/** Simplified ramp request for list views (fundflow RampRequestListItem). */
-export interface RampRequestListItem {
-    id: string;
-    paymentReference?: string;
-    rampType?: RampType;
-    status?: RampStatus;
-    fiatAmount?: number;
-    fiatCurrency?: string;
-    cryptoAmount?: number;
-    cryptoCurrency?: string;
-    createdAt?: string;
-    createdBy?: string;
-}
-/** Full ramp request detail (fundflow RampRequestDto). `version` drives the
- * four-eyes optimistic-locking approve/reject calls. */
-export interface RampRequestDto {
-    id: string;
-    companyId?: string;
-    companyName?: string;
-    rampType?: RampType;
-    status?: RampStatus;
-    fiatAmount?: number;
-    fiatNetAmount?: number;
-    cryptoAmount?: number;
-    fiatFeeAmount?: number;
-    exchangeRate?: number;
-    feePercentage?: number;
-    paymentReference?: string;
-    paymentReceived?: boolean;
-    blockchainTransactionHash?: string;
-    createdAt?: string;
-    createdBy?: string;
-    version?: number;
-}
-/** Finance Account (finance getAccount). */
-export interface Account {
-    id: string;
-    status?: string;
-    reference?: string;
-    createdAt?: string;
-    updatedAt?: string;
-    [key: string]: unknown;
-}
-/** Finance VirtualBankAccount. `referenceCode` is the reconciliation key. */
-export interface VirtualBankAccount {
-    id: string;
-    accountId?: string;
-    bankAccountType?: string;
-    name?: string;
-    status?: string;
-    currency?: string;
-    targetCryptocurrency?: string;
-    iban?: string;
-    bic?: string;
-    bankName?: string;
-    beneficiaryName?: string;
-    referenceCode?: string;
-    createdAt?: string;
-    updatedAt?: string;
-}
-/** Finance Transfer (finance getTransfer). */
-export interface Transfer {
-    id: string;
-    status?: string;
-    fiatAmount?: string | number;
-    fiatCurrency?: string;
-    cryptocurrency?: string;
-    createdAt?: string;
-    [key: string]: unknown;
-}
-/** Finance Party (finance listParties). */
-export interface Party {
-    id: string;
-    type?: string;
-    status?: string;
-    [key: string]: unknown;
-}
-/** A payment link (finance PaymentLink). */
-export interface PaymentLink {
-    id: string;
-    accountId?: string;
-    paymentUrl?: string;
-    externalRef?: string;
-    status?: string;
-    [key: string]: unknown;
-}
+import type { FinanceComponents, FundflowComponents } from "@venlyfinance/sdk";
+import type { VenlyEnvironment } from "./constants.js";
+type FinanceSchemas = FinanceComponents["schemas"];
+type FundflowSchemas = FundflowComponents["schemas"];
+export type AddressInput = FinanceSchemas["Address"];
+export type Party = FinanceSchemas["Party"];
+export type CreatePartyInput = FinanceSchemas["CreatePartyRequest"];
+export type Account = FinanceSchemas["Account"];
+export type CreateAccountInput = FinanceSchemas["CreateAccountRequest"];
+export type Wallet = FinanceSchemas["Wallet"];
+export type VirtualBankAccount = FinanceSchemas["VirtualBankAccount"];
+export type CreateVirtualBankAccountInput = FinanceSchemas["CreateVirtualBankAccountRequest"];
+export type PaymentSession = FinanceSchemas["PaymentSession"];
+export type CreatePayInSessionRequest = FinanceSchemas["CreatePayInSessionRequest"];
+export type Transfer = FinanceSchemas["Transfer"];
+export type CurrentCreateFiatTransferInput = FinanceSchemas["CreateFiatTransferInput"];
+export type CreateCryptoTransferInput = FinanceSchemas["CreateCryptoTransferInput"];
+export type RampRequestDto = FundflowSchemas["RampRequestDto"];
+export type RampRequestListItem = FundflowSchemas["RampRequestListItem"];
+export type OptimisticLockingBody = FundflowSchemas["UpdateWithOptimisticLockingRequest"];
+export type SupportedChains = FundflowSchemas["SupportedChainsDto"];
+export type FiatCurrency = FundflowSchemas["FiatCurrencyDto"];
+export type CryptoCurrency = FundflowSchemas["CryptoCurrencyDto"];
+export type VenlyFee = FundflowSchemas["FeeDto"];
+export type RampStatus = NonNullable<RampRequestDto["status"]>;
+export type RampType = NonNullable<RampRequestDto["rampType"]>;
 /**
  * An observed incoming bank transaction on a vIBAN. This is operator- or
  * bank-feed-supplied data (there is no list-vIBAN-transactions endpoint in the
@@ -127,51 +56,67 @@ export interface ListRampRequestsParams {
     page?: number;
     size?: number;
 }
-/** Body for the fiat transfer POST (finance CreateFiatTransferInput). */
+/** Legacy stage_transfer body, normalized to the current finance
+ * CreateFiatTransferInput before any call (see normalizeLegacyFiatTransfer). */
 export interface CreateFiatTransferInput {
     receiverAccountId: string;
     receiverExternalId?: string;
     fiatAmount: string;
     fiatCurrency: string;
+    /** Retired: the current contract has no such field. Normalization rejects it
+     * instead of silently dropping it. */
     cryptocurrency?: string;
     description?: string;
     merchantReference?: string;
-}
-/** Body for approve/reject (fundflow UpdateWithOptimisticLockingRequest). */
-export interface OptimisticLockingBody {
-    version: number;
-}
-/** Body for the payment link POST (finance CreatePaymentLinkRequest). */
-export interface CreatePaymentLinkRequest {
-    inAmount: string;
-    inCurrency: string;
-    outCryptocurrency?: string;
-    redirectUrl?: string;
-    externalRef?: string;
-    metadata?: Record<string, string>;
+    /** Preserved across the dry-run preview and the live call when supplied. */
+    idempotencyKey?: string;
 }
 /**
- * The injectable Venly transport. HttpVenlyClient is the real fetch-based
- * implementation; tests inject a mock. The MCP layer depends ONLY on this
- * interface, never on a concrete transport, which is what makes the fail-closed
- * write path testable without a network.
+ * The injectable Venly client contract. SdkVenlyClient is the production
+ * implementation; tests inject a lightweight mock. The MCP layer depends only
+ * on this interface, keeping the fail-closed write path testable without a
+ * network.
  */
 export interface VenlyClient {
+    /** The environment this client actually targets. When present, createServer
+     * refuses to start if it disagrees with the VENLY_ENV the write gate reads –
+     * the mock gate auto-arms writes, so the two must never diverge. */
+    readonly environment?: VenlyEnvironment;
     listRampRequests(params?: ListRampRequestsParams): Promise<RampRequestListItem[]>;
     getRampRequest(id: string): Promise<RampRequestDto>;
+    listAccounts(params?: {
+        page?: number;
+        size?: number;
+    }): Promise<Account[]>;
     getAccount(accountId: string): Promise<Account>;
+    listWallets(accountId: string, params?: {
+        page?: number;
+        size?: number;
+    }): Promise<Wallet[]>;
     listVirtualBankAccounts(accountId: string): Promise<VirtualBankAccount[]>;
+    getVirtualBankAccount(accountId: string, virtualBankAccountId: string): Promise<VirtualBankAccount>;
+    listTransfers(accountId: string, params?: {
+        page?: number;
+        size?: number;
+    }): Promise<Transfer[]>;
     getTransfer(accountId: string, transferId: string): Promise<Transfer>;
     listParties(params?: {
         page?: number;
         size?: number;
     }): Promise<Party[]>;
-    getSupportedChains(): Promise<unknown[]>;
-    getFiatCurrencies(): Promise<unknown[]>;
-    getCryptocurrencies(): Promise<unknown[]>;
-    getCompanyFees(): Promise<unknown>;
+    getParty(partyId: string): Promise<Party>;
+    getSupportedChains(): Promise<SupportedChains[]>;
+    getFiatCurrencies(): Promise<FiatCurrency[]>;
+    getCryptocurrencies(): Promise<CryptoCurrency[]>;
+    getCompanyFees(): Promise<VenlyFee[]>;
+    createParty(body: CreatePartyInput): Promise<Party>;
+    createAccount(body: CreateAccountInput): Promise<Account>;
+    createVirtualBankAccount(accountId: string, body: CreateVirtualBankAccountInput): Promise<VirtualBankAccount>;
     createFiatTransfer(senderAccountId: string, body: CreateFiatTransferInput): Promise<Transfer>;
+    createCurrentFiatTransfer(senderAccountId: string, body: CurrentCreateFiatTransferInput): Promise<Transfer>;
+    createCryptoTransfer(senderAccountId: string, body: CreateCryptoTransferInput): Promise<Transfer>;
     approveRampRequest(id: string, body: OptimisticLockingBody): Promise<RampRequestDto>;
     rejectRampRequest(id: string, body: OptimisticLockingBody): Promise<RampRequestDto>;
-    createPaymentLink(accountId: string, body: CreatePaymentLinkRequest): Promise<PaymentLink>;
+    createPayInSession(accountId: string, body: CreatePayInSessionRequest): Promise<PaymentSession>;
 }
+export {};

package/dist/types.js

@@ -1,17 +1,9 @@
 /**
- * Domain types + the injectable VenlyClient interface.
+ * Generated API contracts + the injectable VenlyClient interface.
  *
- * These shapes are a minimal projection of the vendored OpenAPI specs at
- * projects/venly-docs-rebuild/api-reference/finance.yaml (servers:
- * https://api.venlyfinance.com/api/v1) and fundflow.yaml (servers:
- * https://api-fundflow.venly.io). Only the fields the tools actually read or
- * echo are modeled. Fields are intentionally loose (optional) because this is a
- * thin wrapper, not a full SDK.
- *
- * TRANSPORT NOTE: the bundled HttpVenlyClient is a deliberately minimal fetch
- * transport (see client/http-client.ts). A future release replaces it with a
- * thin adapter over `@venlyfinance/sdk` with no change to this interface;
- * until then the minimal transport is what ships. When that lands, replace
- * HttpVenlyClient with a thin adapter over it and delete the vendored transport.
+ * Finance and Fundflow resources and requests are aliases to the types exported
+ * by `@venlyfinance/sdk`. Only MCP-owned inputs and compatibility shapes are
+ * declared locally. This prevents the MCP from silently drifting away from the
+ * vendored OpenAPI specifications.
  */
 export {};

package/package.json

@@ -1,28 +1,34 @@
 {
   "name": "@venlyfinance/settlement-mcp",
-  "version": "0.1.0",
-  "description": "Venly Settlement MCP server. Human-gated operator surface over the Venly Finance and Fundflow APIs, plus an x402 machine-to-machine quote stub. Read-only by default, write tools fail closed.",
+  "version": "0.2.0",
+  "description": "Venly Finance MCP: SDK-backed tools, resources and prompts for building international money products safely.",
   "type": "module",
   "bin": {
+    "venly-finance-mcp": "dist/index.js",
     "venly-settlement-mcp": "dist/index.js"
   },
   "main": "dist/index.js",
   "files": [
     "dist",
+    "scripts",
     "skills",
-    "README.md"
+    "README.md",
+    "CHANGELOG.md"
   ],
   "scripts": {
-    "build": "tsc -p tsconfig.json",
+    "build": "rm -rf dist && tsc -p tsconfig.json",
     "start": "node dist/index.js",
+    "smoke:staging": "npm run build && node scripts/staging-smoke.mjs",
     "test": "node --import tsx --test test/*.test.ts",
-    "typecheck": "tsc -p tsconfig.json --noEmit"
+    "typecheck": "tsc -p tsconfig.json --noEmit",
+    "typecheck:test": "tsc -p tsconfig.test.json"
   },
   "engines": {
-    "node": ">=18"
+    "node": ">=20"
   },
   "dependencies": {
-    "@modelcontextprotocol/sdk": "^1.29.0",
+    "@venlyfinance/sdk": "^0.1.1",
+    "@modelcontextprotocol/sdk": "^1.30.0",
     "zod": "^3.23.8"
   },
   "devDependencies": {
@@ -33,12 +39,12 @@
   "license": "MIT",
   "repository": {
     "type": "git",
-    "url": "git+https://github.com/timdierckxsens/venly-sdk.git",
+    "url": "git+https://github.com/Venly/venly-settlement-sdk.git",
     "directory": "settlement-mcp"
   },
-  "homepage": "https://github.com/timdierckxsens/venly-sdk/tree/main/settlement-mcp#readme",
+  "homepage": "https://github.com/Venly/venly-settlement-sdk/tree/main/settlement-mcp#readme",
   "bugs": {
-    "url": "https://github.com/timdierckxsens/venly-sdk/issues"
+    "url": "https://github.com/Venly/venly-settlement-sdk/issues"
   },
   "keywords": [
     "mcp",
@@ -46,6 +52,8 @@
     "stablecoin",
     "settlement",
     "payments",
+    "finance-api",
+    "ai-agents",
     "x402",
     "venly",
     "fintech",

package/scripts/staging-smoke.mjs

@@ -0,0 +1,13 @@
+#!/usr/bin/env node
+
+import { sanitizeErrorMessage } from "../dist/results.js";
+import { runStagingSmoke } from "../dist/staging-smoke.js";
+
+try {
+  await runStagingSmoke();
+  console.log("\nSTAGING SMOKE PASSED: discovery and reads succeeded; writes stayed dry-run.");
+} catch (error) {
+  const message = error instanceof Error ? error.message : String(error);
+  console.error(`\nSTAGING SMOKE FAILED: ${sanitizeErrorMessage(message)}`);
+  process.exitCode = 1;
+}

package/skills/build-international-account.md

@@ -0,0 +1,26 @@
+# Build an international account experience
+
+Use this skill when a user asks an AI coding agent to build an international account,
+stablecoin account or neobank-like customer experience with Venly Finance.
+
+## Rules
+
+1. Read `venly://capabilities`, `venly://safety` and
+   `venly://workflows/international-account` when MCP resources are supported.
+2. Start with `VENLY_ENV=mock`; label every simulated state.
+3. Use `@venlyfinance/sdk` only in server-side application code. Never expose Venly
+   credentials or access tokens to the browser.
+4. Assemble atomic capabilities: party, account, auto-provisioned wallet/balances, EUR
+   receiving account, transfer, status and reconciliation.
+5. Creating a party does not complete KYC/KYB. Show returned compliance states.
+6. Venly provides infrastructure through regulated partners. Do not imply a bank
+   charter, deposit insurance or unsupported geographic/currency coverage.
+7. Card issuing is not exposed by the current Finance OpenAPI contract.
+8. Ask for an explicit decision before moving to staging or arming a write. Dry-run
+   live-environment mutations before confirmation.
+
+## Outcome
+
+Produce a credible customer-facing money-product experience and a README documenting
+the mock setup and explicit staging transition. Do not build a generic infrastructure
+dashboard or hide financial mutations inside one autonomous operation.

package/skills/mock-to-staging.md

@@ -0,0 +1,11 @@
+# Move a Venly Finance build from mock to staging
+
+1. Keep the working mock flow and its visible environment label.
+2. Set `VENLY_ENV=staging` and provide client credentials through server-side secret
+   storage.
+3. Confirm enabled custody model, chains, assets and regulated-partner coverage.
+4. Use a documented KYC-verified staging account before provisioning a EUR vIBAN.
+5. Run read-only smoke checks before setting `VENLY_MCP_LIVE=1`.
+6. Dry-run each intended write, review the normalized request, then explicitly confirm.
+7. Never fall back implicitly to mock when staging authentication or capability checks
+   fail.

package/skills/{payment-link-lifecycle.md → payment-session-lifecycle.md}

@@ -1,6 +1,6 @@
-# Skill: Create and track a payment link
+# Skill: Create and track a fiat-to-crypto payment session
 
-Stand up a fiat-to-crypto payment link for an account, hand the URL to a payer,
+Stand up a hosted pay-in session for an account, hand the URL to a payer,
 and follow the payment through to settlement.
 
 ## When to use
@@ -13,7 +13,7 @@ collections, top-ups.
 
 - `get_account` (read)
 - `list_virtual_bank_accounts` (read)
-- `create_payment_link` (write, disarmed by default)
+- `create_payment_session` (write, disarmed by default)
 - `get_transfer` (read)
 
 ## Steps
@@ -21,10 +21,11 @@ collections, top-ups.
 1. `get_account` for the collecting account. Confirm `status: "ACTIVE"` - an
    unverified or suspended account cannot collect.
 2. Optional context: `list_virtual_bank_accounts` shows the account's existing
-   collection surfaces (IBAN + referenceCode); a payment link is the hosted
+   collection surfaces (IBAN + referenceCode); a payment session is the hosted
    alternative for payers who won't do a bank transfer.
-3. `create_payment_link` with the `accountId` and an `externalRef` your own
-   system can reconcile on later.
+3. `create_payment_session` with the `accountId`, a `callbackUrl` your system
+   will receive the completion webhook on, and an `externalRef` you can
+   reconcile on later. An `idempotencyKey` is generated when you don't pass one.
    - By default the tool returns a dry-run object with the exact POST it would
      send. Review it.
    - Live execution needs all three: `confirm: true`, `VENLY_MCP_LIVE=1`, and
@@ -36,7 +37,7 @@ collections, top-ups.
 
 ## Notes
 
-- Payment links expire (`expiresAt`); a link that was never paid ends at
+- Payment sessions expire (`expiresAt`); a session that was never paid ends at
   `EXPIRED`, not `FAILED`.
 - Statuses walk `CREATED → PENDING_PAYMENT → PAYMENT_RECEIVED → CONVERTING →
   MINTING → COMPLETED`, with `FAILED`, `CANCELLED`, `REFUNDING`, `REFUNDED` as

package/dist/client/http-client.d.ts

@@ -1,58 +0,0 @@
-/**
- * HttpVenlyClient: a minimal fetch-based transport implementing VenlyClient.
- *
- * TRANSPORT NOTE
- * --------------
- * Minimal by design: OAuth2 client credentials, lazy token fetch, staging
- * defaults. A future release replaces this with a thin adapter over
- * `@venlyfinance/sdk` (single-flight token refresh, automatic idempotency
- * keys, retry/backoff, richer errors) with no change to the tool interface.
- *
- * Safety invariants honored here:
- *  - credentials are read from env ONLY, never logged, never returned in output.
- *  - no request is issued at construction time; tokens are fetched lazily.
- *  - this class does not know about the write gate. It only issues a live call
- *    when a write method is invoked, and write methods are invoked only after
- *    the gate in safety.ts is armed. Read-only by default is enforced upstream.
- */
-import type { Account, CreateFiatTransferInput, CreatePaymentLinkRequest, ListRampRequestsParams, OptimisticLockingBody, Party, PaymentLink, RampRequestDto, RampRequestListItem, Transfer, VenlyClient, VirtualBankAccount } from "../types.js";
-export interface HttpVenlyClientConfig {
-    financeBaseUrl?: string;
-    fundflowBaseUrl?: string;
-    tokenUrl?: string;
-    clientId?: string;
-    clientSecret?: string;
-    /** Injectable for tests; defaults to global fetch. */
-    fetchImpl?: typeof fetch;
-}
-export declare class HttpVenlyClient implements VenlyClient {
-    private readonly financeBaseUrl;
-    private readonly fundflowBaseUrl;
-    private readonly tokenUrl;
-    private readonly clientId?;
-    private readonly clientSecret?;
-    private readonly fetchImpl;
-    private token;
-    constructor(config?: HttpVenlyClientConfig);
-    /** Build a client from environment variables. Never logs credentials. */
-    static fromEnv(env?: NodeJS.ProcessEnv): HttpVenlyClient;
-    private getAccessToken;
-    private request;
-    getAccount(accountId: string): Promise<Account>;
-    listVirtualBankAccounts(accountId: string): Promise<VirtualBankAccount[]>;
-    getTransfer(accountId: string, transferId: string): Promise<Transfer>;
-    listParties(params?: {
-        page?: number;
-        size?: number;
-    }): Promise<Party[]>;
-    listRampRequests(params?: ListRampRequestsParams): Promise<RampRequestListItem[]>;
-    getRampRequest(id: string): Promise<RampRequestDto>;
-    getSupportedChains(): Promise<unknown[]>;
-    getFiatCurrencies(): Promise<unknown[]>;
-    getCryptocurrencies(): Promise<unknown[]>;
-    getCompanyFees(): Promise<unknown>;
-    createFiatTransfer(senderAccountId: string, body: CreateFiatTransferInput): Promise<Transfer>;
-    approveRampRequest(id: string, body: OptimisticLockingBody): Promise<RampRequestDto>;
-    rejectRampRequest(id: string, body: OptimisticLockingBody): Promise<RampRequestDto>;
-    createPaymentLink(accountId: string, body: CreatePaymentLinkRequest): Promise<PaymentLink>;
-}

package/dist/client/http-client.js

@@ -1,163 +0,0 @@
-/**
- * HttpVenlyClient: a minimal fetch-based transport implementing VenlyClient.
- *
- * TRANSPORT NOTE
- * --------------
- * Minimal by design: OAuth2 client credentials, lazy token fetch, staging
- * defaults. A future release replaces this with a thin adapter over
- * `@venlyfinance/sdk` (single-flight token refresh, automatic idempotency
- * keys, retry/backoff, richer errors) with no change to the tool interface.
- *
- * Safety invariants honored here:
- *  - credentials are read from env ONLY, never logged, never returned in output.
- *  - no request is issued at construction time; tokens are fetched lazily.
- *  - this class does not know about the write gate. It only issues a live call
- *    when a write method is invoked, and write methods are invoked only after
- *    the gate in safety.ts is armed. Read-only by default is enforced upstream.
- */
-import { DEFAULT_FINANCE_BASE_URL, DEFAULT_FUNDFLOW_BASE_URL, DEFAULT_TOKEN_URL, } from "../constants.js";
-/** Unwrap the Venly `{ success, result, pagination }` envelope. */
-function unwrap(payload) {
-    if (payload && typeof payload === "object" && "result" in payload) {
-        return payload.result;
-    }
-    return payload;
-}
-export class HttpVenlyClient {
-    financeBaseUrl;
-    fundflowBaseUrl;
-    tokenUrl;
-    clientId;
-    clientSecret;
-    fetchImpl;
-    token = null;
-    constructor(config = {}) {
-        this.financeBaseUrl = config.financeBaseUrl ?? DEFAULT_FINANCE_BASE_URL;
-        this.fundflowBaseUrl = config.fundflowBaseUrl ?? DEFAULT_FUNDFLOW_BASE_URL;
-        this.tokenUrl = config.tokenUrl ?? DEFAULT_TOKEN_URL;
-        this.clientId = config.clientId;
-        this.clientSecret = config.clientSecret;
-        this.fetchImpl = config.fetchImpl ?? fetch;
-    }
-    /** Build a client from environment variables. Never logs credentials. */
-    static fromEnv(env = process.env) {
-        return new HttpVenlyClient({
-            financeBaseUrl: env.VENLY_FINANCE_BASE_URL,
-            fundflowBaseUrl: env.VENLY_FUNDFLOW_BASE_URL,
-            tokenUrl: env.VENLY_TOKEN_URL,
-            clientId: env.VENLY_CLIENT_ID,
-            clientSecret: env.VENLY_CLIENT_SECRET,
-        });
-    }
-    async getAccessToken() {
-        const now = Date.now();
-        if (this.token && this.token.expiresAt > now + 5_000) {
-            return this.token.accessToken;
-        }
-        if (!this.clientId || !this.clientSecret) {
-            // Do not include any credential material in the error.
-            throw new Error("Missing Venly credentials. Set VENLY_CLIENT_ID and VENLY_CLIENT_SECRET.");
-        }
-        const body = new URLSearchParams({
-            grant_type: "client_credentials",
-            client_id: this.clientId,
-            client_secret: this.clientSecret,
-        });
-        const res = await this.fetchImpl(this.tokenUrl, {
-            method: "POST",
-            headers: { "Content-Type": "application/x-www-form-urlencoded" },
-            body,
-        });
-        if (!res.ok) {
-            // Never echo the request body (contains the secret).
-            throw new Error(`Token request failed with status ${res.status}`);
-        }
-        const json = (await res.json());
-        const expiresInMs = (json.expires_in ?? 300) * 1000;
-        this.token = {
-            accessToken: json.access_token,
-            expiresAt: now + expiresInMs,
-        };
-        return json.access_token;
-    }
-    async request(base, method, path, opts = {}) {
-        const token = await this.getAccessToken();
-        const url = new URL(path.replace(/^\//, ""), base.endsWith("/") ? base : base + "/");
-        if (opts.query) {
-            for (const [k, v] of Object.entries(opts.query)) {
-                if (v !== undefined && v !== null)
-                    url.searchParams.set(k, String(v));
-            }
-        }
-        const headers = {
-            Authorization: `Bearer ${token}`,
-            Accept: "application/json",
-        };
-        if (opts.body !== undefined) {
-            headers["Content-Type"] = "application/json";
-            // Idempotency for writes. Production SDK does this automatically.
-            headers["Idempotency-Key"] = crypto.randomUUID();
-        }
-        const res = await this.fetchImpl(url.toString(), {
-            method,
-            headers,
-            body: opts.body !== undefined ? JSON.stringify(opts.body) : undefined,
-        });
-        if (!res.ok) {
-            throw new Error(`Venly API ${method} ${path} failed with status ${res.status}`);
-        }
-        const json = await res.json();
-        return unwrap(json);
-    }
-    // ----- READ (finance) -----
-    getAccount(accountId) {
-        return this.request(this.financeBaseUrl, "GET", `/accounts/${accountId}`);
-    }
-    listVirtualBankAccounts(accountId) {
-        return this.request(this.financeBaseUrl, "GET", `/accounts/${accountId}/virtual-bank-accounts`);
-    }
-    getTransfer(accountId, transferId) {
-        return this.request(this.financeBaseUrl, "GET", `/accounts/${accountId}/transfers/${transferId}`);
-    }
-    listParties(params = {}) {
-        return this.request(this.financeBaseUrl, "GET", "/parties", { query: params });
-    }
-    // ----- READ (fundflow) -----
-    listRampRequests(params = {}) {
-        return this.request(this.fundflowBaseUrl, "GET", "/v1/ramp-requests", {
-            query: params,
-        });
-    }
-    getRampRequest(id) {
-        return this.request(this.fundflowBaseUrl, "GET", `/v1/ramp-requests/${id}`);
-    }
-    getSupportedChains() {
-        return this.request(this.fundflowBaseUrl, "GET", "/v1/chains");
-    }
-    getFiatCurrencies() {
-        return this.request(this.fundflowBaseUrl, "GET", "/v1/fiat-currencies");
-    }
-    getCryptocurrencies() {
-        return this.request(this.fundflowBaseUrl, "GET", "/v1/crypto-currencies");
-    }
-    getCompanyFees() {
-        return this.request(this.fundflowBaseUrl, "GET", "/v1/fees");
-    }
-    // ----- WRITE -----
-    createFiatTransfer(senderAccountId, body) {
-        return this.request(this.financeBaseUrl, "POST", `/accounts/${senderAccountId}/transfers/fiat`, { body });
-    }
-    approveRampRequest(id, body) {
-        return this.request(this.fundflowBaseUrl, "POST", `/v1/ramp-requests/${id}/approve`, {
-            body,
-        });
-    }
-    rejectRampRequest(id, body) {
-        return this.request(this.fundflowBaseUrl, "POST", `/v1/ramp-requests/${id}/reject`, {
-            body,
-        });
-    }
-    createPaymentLink(accountId, body) {
-        return this.request(this.financeBaseUrl, "POST", `/accounts/${accountId}/fiat-to-crypto/payment-links`, { body });
-    }
-}