beangulp-wise 0.1.0__tar.gz

beangulp_wise-0.1.0/.gitignore

@@ -0,0 +1,11 @@
+__pycache__/
+*.py[cod]
+.venv/
+dist/
+build/
+*.egg-info/
+.pytest_cache/
+.ruff_cache/
+.env
+.DS_Store
+.claude/settings.local.json

beangulp_wise-0.1.0/LICENSE

@@ -0,0 +1,339 @@
+                    GNU GENERAL PUBLIC LICENSE
+                       Version 2, June 1991
+
+ Copyright (C) 1989, 1991 Free Software Foundation, Inc.,
+ 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA
+ Everyone is permitted to copy and distribute verbatim copies
+ of this license document, but changing it is not allowed.
+
+                            Preamble
+
+  The licenses for most software are designed to take away your
+freedom to share and change it.  By contrast, the GNU General Public
+License is intended to guarantee your freedom to share and change free
+software--to make sure the software is free for all its users.  This
+General Public License applies to most of the Free Software
+Foundation's software and to any other program whose authors commit to
+using it.  (Some other Free Software Foundation software is covered by
+the GNU Lesser General Public License instead.)  You can apply it to
+your programs, too.
+
+  When we speak of free software, we are referring to freedom, not
+price.  Our General Public Licenses are designed to make sure that you
+have the freedom to distribute copies of free software (and charge for
+this service if you wish), that you receive source code or can get it
+if you want it, that you can change the software or use pieces of it
+in new free programs; and that you know you can do these things.
+
+  To protect your rights, we need to make restrictions that forbid
+anyone to deny you these rights or to ask you to surrender the rights.
+These restrictions translate to certain responsibilities for you if you
+distribute copies of the software, or if you modify it.
+
+  For example, if you distribute copies of such a program, whether
+gratis or for a fee, you must give the recipients all the rights that
+you have.  You must make sure that they, too, receive or can get the
+source code.  And you must show them these terms so they know their
+rights.
+
+  We protect your rights with two steps: (1) copyright the software, and
+(2) offer you this license which gives you legal permission to copy,
+distribute and/or modify the software.
+
+  Also, for each author's protection and ours, we want to make certain
+that everyone understands that there is no warranty for this free
+software.  If the software is modified by someone else and passed on, we
+want its recipients to know that what they have is not the original, so
+that any problems introduced by others will not reflect on the original
+authors' reputations.
+
+  Finally, any free program is threatened constantly by software
+patents.  We wish to avoid the danger that redistributors of a free
+program will individually obtain patent licenses, in effect making the
+program proprietary.  To prevent this, we have made it clear that any
+patent must be licensed for everyone's free use or not licensed at all.
+
+  The precise terms and conditions for copying, distribution and
+modification follow.
+
+                    GNU GENERAL PUBLIC LICENSE
+   TERMS AND CONDITIONS FOR COPYING, DISTRIBUTION AND MODIFICATION
+
+  0. This License applies to any program or other work which contains
+a notice placed by the copyright holder saying it may be distributed
+under the terms of this General Public License.  The "Program", below,
+refers to any such program or work, and a "work based on the Program"
+means either the Program or any derivative work under copyright law:
+that is to say, a work containing the Program or a portion of it,
+either verbatim or with modifications and/or translated into another
+language.  (Hereinafter, translation is included without limitation in
+the term "modification".)  Each licensee is addressed as "you".
+
+Activities other than copying, distribution and modification are not
+covered by this License; they are outside its scope.  The act of
+running the Program is not restricted, and the output from the Program
+is covered only if its contents constitute a work based on the
+Program (independent of having been made by running the Program).
+Whether that is true depends on what the Program does.
+
+  1. You may copy and distribute verbatim copies of the Program's
+source code as you receive it, in any medium, provided that you
+conspicuously and appropriately publish on each copy an appropriate
+copyright notice and disclaimer of warranty; keep intact all the
+notices that refer to this License and to the absence of any warranty;
+and give any other recipients of the Program a copy of this License
+along with the Program.
+
+You may charge a fee for the physical act of transferring a copy, and
+you may at your option offer warranty protection in exchange for a fee.
+
+  2. You may modify your copy or copies of the Program or any portion
+of it, thus forming a work based on the Program, and copy and
+distribute such modifications or work under the terms of Section 1
+above, provided that you also meet all of these conditions:
+
+    a) You must cause the modified files to carry prominent notices
+    stating that you changed the files and the date of any change.
+
+    b) You must cause any work that you distribute or publish, that in
+    whole or in part contains or is derived from the Program or any
+    part thereof, to be licensed as a whole at no charge to all third
+    parties under the terms of this License.
+
+    c) If the modified program normally reads commands interactively
+    when run, you must cause it, when started running for such
+    interactive use in the most ordinary way, to print or display an
+    announcement including an appropriate copyright notice and a
+    notice that there is no warranty (or else, saying that you provide
+    a warranty) and that users may redistribute the program under
+    these conditions, and telling the user how to view a copy of this
+    License.  (Exception: if the Program itself is interactive but
+    does not normally print such an announcement, your work based on
+    the Program is not required to print an announcement.)
+
+These requirements apply to the modified work as a whole.  If
+identifiable sections of that work are not derived from the Program,
+and can be reasonably considered independent and separate works in
+themselves, then this License, and its terms, do not apply to those
+sections when you distribute them as separate works.  But when you
+distribute the same sections as part of a whole which is a work based
+on the Program, the distribution of the whole must be on the terms of
+this License, whose permissions for other licensees extend to the
+entire whole, and thus to each and every part regardless of who wrote it.
+
+Thus, it is not the intent of this section to claim rights or contest
+your rights to work written entirely by you; rather, the intent is to
+exercise the right to control the distribution of derivative or
+collective works based on the Program.
+
+In addition, mere aggregation of another work not based on the Program
+with the Program (or with a work based on the Program) on a volume of
+a storage or distribution medium does not bring the other work under
+the scope of this License.
+
+  3. You may copy and distribute the Program (or a work based on it,
+under Section 2) in object code or executable form under the terms of
+Sections 1 and 2 above provided that you also do one of the following:
+
+    a) Accompany it with the complete corresponding machine-readable
+    source code, which must be distributed under the terms of Sections
+    1 and 2 above on a medium customarily used for software interchange; or,
+
+    b) Accompany it with a written offer, valid for at least three
+    years, to give any third party, for a charge no more than your
+    cost of physically performing source distribution, a complete
+    machine-readable copy of the corresponding source code, to be
+    distributed under the terms of Sections 1 and 2 above on a medium
+    customarily used for software interchange; or,
+
+    c) Accompany it with the information you received as to the offer
+    to distribute corresponding source code.  (This alternative is
+    allowed only for noncommercial distribution and only if you
+    received the program in object code or executable form with such
+    an offer, in accord with Subsection b above.)
+
+The source code for a work means the preferred form of the work for
+making modifications to it.  For an executable work, complete source
+code means all the source code for all modules it contains, plus any
+associated interface definition files, plus the scripts used to
+control compilation and installation of the executable.  However, as a
+special exception, the source code distributed need not include
+anything that is normally distributed (in either source or binary
+form) with the major components (compiler, kernel, and so on) of the
+operating system on which the executable runs, unless that component
+itself accompanies the executable.
+
+If distribution of executable or object code is made by offering
+access to copy from a designated place, then offering equivalent
+access to copy the source code from the same place counts as
+distribution of the source code, even though third parties are not
+compelled to copy the source along with the object code.
+
+  4. You may not copy, modify, sublicense, or distribute the Program
+except as expressly provided under this License.  Any attempt
+otherwise to copy, modify, sublicense or distribute the Program is
+void, and will automatically terminate your rights under this License.
+However, parties who have received copies, or rights, from you under
+this License will not have their licenses terminated so long as such
+parties remain in full compliance.
+
+  5. You are not required to accept this License, since you have not
+signed it.  However, nothing else grants you permission to modify or
+distribute the Program or its derivative works.  These actions are
+prohibited by law if you do not accept this License.  Therefore, by
+modifying or distributing the Program (or any work based on the
+Program), you indicate your acceptance of this License to do so, and
+all its terms and conditions for copying, distributing or modifying
+the Program or works based on it.
+
+  6. Each time you redistribute the Program (or any work based on the
+Program), the recipient automatically receives a license from the
+original licensor to copy, distribute or modify the Program subject to
+these terms and conditions.  You may not impose any further
+restrictions on the recipients' exercise of the rights granted herein.
+You are not responsible for enforcing compliance by third parties to
+this License.
+
+  7. If, as a consequence of a court judgment or allegation of patent
+infringement or for any other reason (not limited to patent issues),
+conditions are imposed on you (whether by court order, agreement or
+otherwise) that contradict the conditions of this License, they do not
+excuse you from the conditions of this License.  If you cannot
+distribute so as to satisfy simultaneously your obligations under this
+License and any other pertinent obligations, then as a consequence you
+may not distribute the Program at all.  For example, if a patent
+license would not permit royalty-free redistribution of the Program by
+all those who receive copies directly or indirectly through you, then
+the only way you could satisfy both it and this License would be to
+refrain entirely from distribution of the Program.
+
+If any portion of this section is held invalid or unenforceable under
+any particular circumstance, the balance of the section is intended to
+apply and the section as a whole is intended to apply in other
+circumstances.
+
+It is not the purpose of this section to induce you to infringe any
+patents or other property right claims or to contest validity of any
+such claims; this section has the sole purpose of protecting the
+integrity of the free software distribution system, which is
+implemented by public license practices.  Many people have made
+generous contributions to the wide range of software distributed
+through that system in reliance on consistent application of that
+system; it is up to the author/donor to decide if he or she is willing
+to distribute software through any other system and a licensee cannot
+impose that choice.
+
+This section is intended to make thoroughly clear what is believed to
+be a consequence of the rest of this License.
+
+  8. If the distribution and/or use of the Program is restricted in
+certain countries either by patents or by copyrighted interfaces, the
+original copyright holder who places the Program under this License
+may add an explicit geographical distribution limitation excluding
+those countries, so that distribution is permitted only in or among
+countries not thus excluded.  In such case, this License incorporates
+the limitation as if written in the body of this License.
+
+  9. The Free Software Foundation may publish revised and/or new versions
+of the General Public License from time to time.  Such new versions will
+be similar in spirit to the present version, but may differ in detail to
+address new problems or concerns.
+
+Each version is given a distinguishing version number.  If the Program
+specifies a version number of this License which applies to it and "any
+later version", you have the option of following the terms and conditions
+either of that version or of any later version published by the Free
+Software Foundation.  If the Program does not specify a version number of
+this License, you may choose any version ever published by the Free Software
+Foundation.
+
+  10. If you wish to incorporate parts of the Program into other free
+programs whose distribution conditions are different, write to the author
+to ask for permission.  For software which is copyrighted by the Free
+Software Foundation, write to the Free Software Foundation; we sometimes
+make exceptions for this.  Our decision will be guided by the two goals
+of preserving the free status of all derivatives of our free software and
+of promoting the sharing and reuse of software generally.
+
+                            NO WARRANTY
+
+  11. BECAUSE THE PROGRAM IS LICENSED FREE OF CHARGE, THERE IS NO WARRANTY
+FOR THE PROGRAM, TO THE EXTENT PERMITTED BY APPLICABLE LAW.  EXCEPT WHEN
+OTHERWISE STATED IN WRITING THE COPYRIGHT HOLDERS AND/OR OTHER PARTIES
+PROVIDE THE PROGRAM "AS IS" WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESSED
+OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
+MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE.  THE ENTIRE RISK AS
+TO THE QUALITY AND PERFORMANCE OF THE PROGRAM IS WITH YOU.  SHOULD THE
+PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF ALL NECESSARY SERVICING,
+REPAIR OR CORRECTION.
+
+  12. IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING
+WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MAY MODIFY AND/OR
+REDISTRIBUTE THE PROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES,
+INCLUDING ANY GENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING
+OUT OF THE USE OR INABILITY TO USE THE PROGRAM (INCLUDING BUT NOT LIMITED
+TO LOSS OF DATA OR DATA BEING RENDERED INACCURATE OR LOSSES SUSTAINED BY
+YOU OR THIRD PARTIES OR A FAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER
+PROGRAMS), EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE
+POSSIBILITY OF SUCH DAMAGES.
+
+                     END OF TERMS AND CONDITIONS
+
+            How to Apply These Terms to Your New Programs
+
+  If you develop a new program, and you want it to be of the greatest
+possible use to the public, the best way to achieve this is to make it
+free software which everyone can redistribute and change under these terms.
+
+  To do so, attach the following notices to the program.  It is safest
+to attach them to the start of each source file to most effectively
+convey the exclusion of warranty; and each file should have at least
+the "copyright" line and a pointer to where the full notice is found.
+
+    <one line to give the program's name and a brief idea of what it does.>
+    Copyright (C) <year>  <name of author>
+
+    This program is free software; you can redistribute it and/or modify
+    it under the terms of the GNU General Public License as published by
+    the Free Software Foundation; either version 2 of the License, or
+    (at your option) any later version.
+
+    This program is distributed in the hope that it will be useful,
+    but WITHOUT ANY WARRANTY; without even the implied warranty of
+    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+    GNU General Public License for more details.
+
+    You should have received a copy of the GNU General Public License along
+    with this program; if not, write to the Free Software Foundation, Inc.,
+    51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
+
+Also add information on how to contact you by electronic and paper mail.
+
+If the program is interactive, make it output a short notice like this
+when it starts in an interactive mode:
+
+    Gnomovision version 69, Copyright (C) year name of author
+    Gnomovision comes with ABSOLUTELY NO WARRANTY; for details type `show w'.
+    This is free software, and you are welcome to redistribute it
+    under certain conditions; type `show c' for details.
+
+The hypothetical commands `show w' and `show c' should show the appropriate
+parts of the General Public License.  Of course, the commands you use may
+be called something other than `show w' and `show c'; they could even be
+mouse-clicks or menu items--whatever suits your program.
+
+You should also get your employer (if you work as a programmer) or your
+school, if any, to sign a "copyright disclaimer" for the program, if
+necessary.  Here is a sample; alter the names:
+
+  Yoyodyne, Inc., hereby disclaims all copyright interest in the program
+  `Gnomovision' (which makes passes at compilers) written by James Hacker.
+
+  <signature of Ty Coon>, 1 April 1989
+  Ty Coon, President of Vice
+
+This General Public License does not permit incorporating your program into
+proprietary programs.  If your program is a subroutine library, you may
+consider it more useful to permit linking proprietary applications with the
+library.  If this is what you want to do, use the GNU Lesser General
+Public License instead of this License.

beangulp_wise-0.1.0/PKG-INFO

@@ -0,0 +1,85 @@
+Metadata-Version: 2.4
+Name: beangulp-wise
+Version: 0.1.0
+Summary: beangulp importer for Wise balance statements (statement.json), with a thin SCA-capable API client: idempotent drafts via referenceNumber, conversion-leg merging, fee splitting, closing-balance assertions
+License: GPL-2.0-only
+License-File: LICENSE
+Keywords: bank-statement,beancount,beangulp,importer,multicurrency,transferwise,wise
+Requires-Python: >=3.10
+Requires-Dist: beancount>=3.0
+Requires-Dist: beangulp>=0.2
+Requires-Dist: requests>=2.28
+Provides-Extra: sca
+Requires-Dist: cryptography>=42; extra == 'sca'
+Description-Content-Type: text/markdown
+
+# beangulp-wise
+
+[beangulp](https://github.com/beancount/beangulp) importer for **Wise**
+(formerly TransferWise) balance statements, plus a thin, SCA-capable API
+client to fetch them.
+
+Wise has no official Python SDK, and the community clients are either
+experimental or AGPL-licensed; the import workflow needs exactly three GET
+endpoints, so this package owns a ~100-line client instead
+(`beangulp_wise.client.WiseClient`).
+
+## Design
+
+The importer consumes **`statement.json` files** (one per currency balance),
+not the API directly — fetching writes files to disk first, so every import
+is auditable, replayable, and testable offline.
+
+- `referenceNumber` (`CARD-…`, `TRANSFER-…`, `CONVERSION-…`) is stored as
+  `wise_id:` metadata and is the idempotency key: `extract()` skips references
+  already anywhere in the existing ledger. **Re-imports are always safe.**
+- Payee by detail type: merchant name for card payments, recipient/sender for
+  transfers, description otherwise.
+- `totalFees` becomes an explicit posting to `fees_account` — fees stay
+  visible instead of dissolving into the counter leg.
+- `payee_rules` (`(regex, account, flag)`) draft the counter leg; unmatched
+  entries keep the `!` review flag and the cash leg only.
+- `endOfStatementBalance` → a `balance` assertion the day after the interval.
+- **Conversions**: each leg appears in a different currency's statement,
+  sharing one `referenceNumber`. `merge_conversions(entries)` joins them into
+  a single two-currency transaction — the incoming leg priced `@@` what left
+  the other balance net of fees, so it balances exactly.
+
+## Usage
+
+```python
+from beangulp_wise import Importer, merge_conversions
+
+importer = Importer(
+    {"EUR": "Assets:Wise:EUR", "USD": "Assets:Wise:USD"},
+    fees_account="Expenses:BankFees:Wise",
+    holder="My GmbH",                       # a token may see several profiles
+    payee_rules=((r"cloudflare", "Expenses:IT:Hosting", "!"),),
+)
+entries = merge_conversions(
+    importer.extract("statement-eur.json", existing=ledger_entries)
+    + importer.extract("statement-usd.json", existing=ledger_entries)
+)
+```
+
+## Fetching statements (SCA)
+
+Statement endpoints are protected by Strong Customer Authentication: Wise
+answers 403 with a one-time token in the `x-2fa-approval` header, which must
+be signed (RSA-SHA256, PKCS#1 v1.5) with a private key whose **public half is
+registered on the Wise account** (Settings → API tokens → Manage public keys).
+
+```python
+from beangulp_wise import WiseClient
+
+client = WiseClient(token, private_key_pem=open("private.pem", "rb").read())
+pid = client.profile_id("My GmbH")
+for balance in client.balances(pid):
+    statement = client.balance_statement(
+        pid, balance["id"], balance["currency"],
+        "2026-07-01T00:00:00.000Z", "2026-07-31T23:59:59.999Z",
+    )
+```
+
+`cryptography` is an optional dependency (`beangulp-wise[sca]`) — importing
+statement files works without it.

beangulp_wise-0.1.0/README.md

@@ -0,0 +1,70 @@
+# beangulp-wise
+
+[beangulp](https://github.com/beancount/beangulp) importer for **Wise**
+(formerly TransferWise) balance statements, plus a thin, SCA-capable API
+client to fetch them.
+
+Wise has no official Python SDK, and the community clients are either
+experimental or AGPL-licensed; the import workflow needs exactly three GET
+endpoints, so this package owns a ~100-line client instead
+(`beangulp_wise.client.WiseClient`).
+
+## Design
+
+The importer consumes **`statement.json` files** (one per currency balance),
+not the API directly — fetching writes files to disk first, so every import
+is auditable, replayable, and testable offline.
+
+- `referenceNumber` (`CARD-…`, `TRANSFER-…`, `CONVERSION-…`) is stored as
+  `wise_id:` metadata and is the idempotency key: `extract()` skips references
+  already anywhere in the existing ledger. **Re-imports are always safe.**
+- Payee by detail type: merchant name for card payments, recipient/sender for
+  transfers, description otherwise.
+- `totalFees` becomes an explicit posting to `fees_account` — fees stay
+  visible instead of dissolving into the counter leg.
+- `payee_rules` (`(regex, account, flag)`) draft the counter leg; unmatched
+  entries keep the `!` review flag and the cash leg only.
+- `endOfStatementBalance` → a `balance` assertion the day after the interval.
+- **Conversions**: each leg appears in a different currency's statement,
+  sharing one `referenceNumber`. `merge_conversions(entries)` joins them into
+  a single two-currency transaction — the incoming leg priced `@@` what left
+  the other balance net of fees, so it balances exactly.
+
+## Usage
+
+```python
+from beangulp_wise import Importer, merge_conversions
+
+importer = Importer(
+    {"EUR": "Assets:Wise:EUR", "USD": "Assets:Wise:USD"},
+    fees_account="Expenses:BankFees:Wise",
+    holder="My GmbH",                       # a token may see several profiles
+    payee_rules=((r"cloudflare", "Expenses:IT:Hosting", "!"),),
+)
+entries = merge_conversions(
+    importer.extract("statement-eur.json", existing=ledger_entries)
+    + importer.extract("statement-usd.json", existing=ledger_entries)
+)
+```
+
+## Fetching statements (SCA)
+
+Statement endpoints are protected by Strong Customer Authentication: Wise
+answers 403 with a one-time token in the `x-2fa-approval` header, which must
+be signed (RSA-SHA256, PKCS#1 v1.5) with a private key whose **public half is
+registered on the Wise account** (Settings → API tokens → Manage public keys).
+
+```python
+from beangulp_wise import WiseClient
+
+client = WiseClient(token, private_key_pem=open("private.pem", "rb").read())
+pid = client.profile_id("My GmbH")
+for balance in client.balances(pid):
+    statement = client.balance_statement(
+        pid, balance["id"], balance["currency"],
+        "2026-07-01T00:00:00.000Z", "2026-07-31T23:59:59.999Z",
+    )
+```
+
+`cryptography` is an optional dependency (`beangulp-wise[sca]`) — importing
+statement files works without it.

beangulp_wise-0.1.0/pyproject.toml

@@ -0,0 +1,28 @@
+[project]
+name = "beangulp-wise"
+version = "0.1.0"
+description = "beangulp importer for Wise balance statements (statement.json), with a thin SCA-capable API client: idempotent drafts via referenceNumber, conversion-leg merging, fee splitting, closing-balance assertions"
+readme = "README.md"
+requires-python = ">=3.10"
+license = { text = "GPL-2.0-only" }
+keywords = ["beancount", "beangulp", "importer", "wise", "transferwise", "bank-statement", "multicurrency"]
+dependencies = [
+    "beancount>=3.0",
+    "beangulp>=0.2",
+    "requests>=2.28",
+]
+
+[project.optional-dependencies]
+# Only needed to sign Wise's SCA (x-2fa-approval) challenge when fetching
+# statements from the API; importing statement.json files works without it.
+sca = ["cryptography>=42"]
+
+[dependency-groups]
+dev = ["pytest>=8", "cryptography>=42"]
+
+[build-system]
+requires = ["hatchling"]
+build-backend = "hatchling.build"
+
+[tool.hatch.build.targets.wheel]
+packages = ["src/beangulp_wise"]

beangulp_wise-0.1.0/src/beangulp_wise/__init__.py

@@ -0,0 +1,285 @@
+"""beangulp importer for Wise balance statements (``statement.json``).
+
+One statement file covers **one currency balance**; the importer drafts one
+beancount transaction per statement entry:
+
+- ``referenceNumber`` (``CARD-…``, ``TRANSFER-…``, …) becomes metadata
+  (``wise_id:`` by default) and is the idempotency key — ``extract()`` skips
+  references already present anywhere in the existing ledger.
+- Payee comes from the entry's ``details`` by type: merchant name for card
+  payments, recipient/sender for transfers, the description otherwise.
+- ``totalFees`` > 0 becomes an explicit posting to ``fees_account`` — Wise
+  fees stay visible instead of disappearing into the counter leg.
+- ``payee_rules`` (``(regex, account, flag)``) draft the counter leg; anything
+  unmatched keeps the ``!`` review flag and the cash leg only.
+- ``endOfStatementBalance`` becomes a ``balance`` assertion dated the day
+  after the statement interval ends.
+
+**Conversions** appear once per balance — two statement files, two entries,
+one shared ``referenceNumber``. :func:`merge_conversions` joins them into a
+single two-currency transaction (``@@`` price on the incoming leg, fee kept
+explicit), which is where realized FX differences become visible.
+
+The API client (SCA-capable) lives in :mod:`beangulp_wise.client`; the
+importer itself only reads files, so fetching stays auditable and replayable.
+"""
+
+from __future__ import annotations
+
+import datetime as dt
+import json
+import re
+from collections.abc import Sequence
+from decimal import Decimal
+
+import beangulp
+from beancount.core import data, flags
+from beancount.core.amount import Amount
+
+from .client import ScaChallenge, WiseClient, WiseError, sign_sca_token  # re-export
+
+__all__ = [
+    "Importer",
+    "ScaChallenge",
+    "WiseClient",
+    "WiseError",
+    "merge_conversions",
+    "sign_sca_token",
+]
+
+
+def _decimal(value) -> Decimal:
+    return Decimal(str(value))
+
+
+def _payee(details: dict) -> str:
+    kind = details.get("type", "")
+    if kind == "CARD":
+        merchant = details.get("merchant") or {}
+        if merchant.get("name"):
+            return merchant["name"]
+    if kind == "TRANSFER":
+        recipient = details.get("recipient") or {}
+        name = recipient.get("name") or details.get("senderName")
+        if name:
+            return name
+    if kind in ("DEPOSIT", "MONEY_ADDED") and details.get("senderName"):
+        return details["senderName"]
+    if kind == "CONVERSION":
+        return "Wise"
+    return (details.get("description") or "").strip()
+
+
+class Importer(beangulp.Importer):
+    """Importer for Wise balance-statement JSON files."""
+
+    def __init__(
+        self,
+        account_map: dict[str, str],
+        *,
+        fees_account: str | None = None,
+        holder: str | None = None,
+        meta_key: str = "wise_id",
+        payee_rules: Sequence[tuple[str, str, str]] = (),
+        review_flag: str = flags.FLAG_WARNING,
+    ):
+        self._accounts = dict(account_map)
+        self._fees_account = fees_account
+        self._holder = holder
+        self._meta_key = meta_key
+        self._rules = [
+            (re.compile(pattern, re.IGNORECASE), account, flag)
+            for pattern, account, flag in payee_rules
+        ]
+        self._review_flag = review_flag
+
+    # ── beangulp interface ───────────────────────────────────────────────────
+
+    def _load(self, filepath: str) -> dict | None:
+        try:
+            with open(filepath, encoding="utf-8") as f:
+                statement = json.load(f)
+        except (OSError, ValueError):
+            return None
+        if not isinstance(statement, dict) or "transactions" not in statement:
+            return None
+        if (statement.get("query") or {}).get("currency") not in self._accounts:
+            return None
+        if self._holder:
+            holder = statement.get("accountHolder") or {}
+            name = holder.get("businessName") or holder.get("fullName")
+            if name != self._holder:
+                return None
+        return statement
+
+    def identify(self, filepath: str) -> bool:
+        return self._load(filepath) is not None
+
+    def account(self, filepath: str) -> str:
+        statement = self._load(filepath)
+        return self._accounts[statement["query"]["currency"]] if statement else ""
+
+    def date(self, filepath: str):
+        statement = self._load(filepath)
+        if statement and (statement.get("query") or {}).get("intervalEnd"):
+            return dt.datetime.fromisoformat(
+                statement["query"]["intervalEnd"].replace("Z", "+00:00")
+            ).date()
+        return None
+
+    def filename(self, filepath: str) -> str:
+        return "statement.json"
+
+    def extract(self, filepath: str, existing: data.Entries) -> data.Entries:
+        statement = self._load(filepath)
+        if statement is None:
+            return []
+        currency = statement["query"]["currency"]
+        cash_account = self._accounts[currency]
+        seen = _existing_references(existing, self._meta_key)
+
+        entries: data.Entries = []
+        for index, txn in enumerate(statement["transactions"]):
+            number = _decimal(txn["amount"]["value"])
+            if not number:
+                continue
+            ref = txn.get("referenceNumber") or ""
+            if ref and ref in seen:
+                continue
+
+            details = txn.get("details") or {}
+            meta = data.new_metadata(filepath, index)
+            if ref:
+                meta[self._meta_key] = ref
+            if details.get("type") == "CONVERSION":
+                meta["conversion"] = "true"  # consumed by merge_conversions
+
+            postings = [
+                data.Posting(cash_account, Amount(number, currency), None, None, None, None)
+            ]
+            fee = _decimal((txn.get("totalFees") or {}).get("value") or 0)
+            if fee and self._fees_account:
+                fee_ccy = (txn.get("totalFees") or {}).get("currency") or currency
+                postings.append(
+                    data.Posting(self._fees_account, Amount(fee, fee_ccy), None, None, None, None)
+                )
+
+            payee = _payee(details)
+            narration = (details.get("description") or "").strip()
+            flag = self._review_flag
+            if details.get("type") != "CONVERSION":
+                haystack = f"{payee}\n{narration}\n{details.get('paymentReference') or ''}"
+                for pattern, counter, rule_flag in self._rules:
+                    if pattern.search(haystack):
+                        postings.append(
+                            data.Posting(
+                                counter, Amount(-number - fee, currency), None, None, None, None
+                            )
+                        )
+                        flag = rule_flag
+                        break
+
+            date = dt.datetime.fromisoformat(txn["date"].replace("Z", "+00:00")).date()
+            entries.append(
+                data.Transaction(
+                    meta,
+                    date,
+                    flag,
+                    payee,
+                    narration,
+                    data.EMPTY_SET,
+                    data.EMPTY_SET,
+                    postings,
+                )
+            )
+
+        entries.sort(key=lambda e: e.date)
+        closing = statement.get("endOfStatementBalance")
+        end = (statement.get("query") or {}).get("intervalEnd")
+        if closing and end:
+            end_date = dt.datetime.fromisoformat(end.replace("Z", "+00:00")).date()
+            entries.append(
+                data.Balance(
+                    data.new_metadata(filepath, len(entries)),
+                    end_date + dt.timedelta(days=1),
+                    cash_account,
+                    Amount(_decimal(closing["value"]), closing["currency"]),
+                    None,
+                    None,
+                )
+            )
+        return entries
+
+
+def merge_conversions(entries: data.Entries, meta_key: str = "wise_id") -> data.Entries:
+    """Join the two single-currency legs of each Wise conversion.
+
+    Legs share a ``referenceNumber`` across two statement files. The merged
+    transaction keeps both cash postings and any fee postings; the **incoming**
+    leg gets an ``@@`` total price of what actually left the other balance net
+    of fees, so the transaction balances exactly and the effective rate is the
+    booked one.
+    """
+    by_ref: dict[str, list[int]] = {}
+    for i, entry in enumerate(entries):
+        if isinstance(entry, data.Transaction) and entry.meta.get("conversion"):
+            ref = entry.meta.get(meta_key)
+            if ref:
+                by_ref.setdefault(ref, []).append(i)
+
+    merged: data.Entries = []
+    drop: set[int] = set()
+    for indexes in by_ref.values():
+        if len(indexes) != 2:
+            continue  # counterpart not in this batch; leave the leg for review
+        a, b = (entries[i] for i in indexes)
+        out_leg, in_leg = (a, b) if a.postings[0].units.number < 0 else (b, a)
+        out_cash = out_leg.postings[0]
+        fees = list(out_leg.postings[1:] + in_leg.postings[1:])
+        fee_total = sum(
+            (p.units.number for p in fees if p.units.currency == out_cash.units.currency),
+            Decimal("0"),
+        )
+        in_cash = in_leg.postings[0]
+        priced_in = data.Posting(
+            in_cash.account,
+            in_cash.units,
+            None,
+            Amount(-out_cash.units.number - fee_total, out_cash.units.currency),
+            None,
+            None,
+        )
+        meta = dict(out_leg.meta)
+        meta.pop("conversion", None)
+        merged.append(
+            data.Transaction(
+                meta,
+                out_leg.date,
+                "*",
+                "Wise",
+                out_leg.narration or in_leg.narration,
+                data.EMPTY_SET,
+                data.EMPTY_SET,
+                [out_cash, priced_in, *fees],
+            )
+        )
+        drop.update(indexes)
+
+    result = [e for i, e in enumerate(entries) if i not in drop]
+    result.extend(merged)
+    result.sort(key=lambda e: (e.date, isinstance(e, data.Balance)))
+    return result
+
+
+def _existing_references(existing: data.Entries, meta_key: str) -> set[str]:
+    refs: set[str] = set()
+    for entry in existing or []:
+        meta = getattr(entry, "meta", None) or {}
+        value = meta.get(meta_key)
+        if isinstance(value, str):
+            refs.add(value)
+        for posting in getattr(entry, "postings", ()) or ():
+            value = (posting.meta or {}).get(meta_key)
+            if isinstance(value, str):
+                refs.add(value)
+    return refs

beangulp_wise-0.1.0/src/beangulp_wise/client.py

@@ -0,0 +1,130 @@
+"""Thin Wise API client — just what statement imports need.
+
+Wise has no official Python SDK; the community clients either carry heavy
+dependencies or AGPL licensing. The import workflow needs exactly three GET
+endpoints, so this stays deliberately small:
+
+- ``profiles()``                          — GET /v2/profiles
+- ``balances(profile_id)``                — GET /v4/profiles/{id}/balances?types=STANDARD
+- ``balance_statement(...)``    — GET /v1/profiles/{id}/balance-statements/{bid}/statement.json
+
+Statement endpoints are protected by Strong Customer Authentication: the API
+answers 403 with a one-time token in the ``x-2fa-approval`` header, which must
+be signed with an RSA private key whose public half is registered on the Wise
+account (Settings → API tokens → Manage public keys). The client signs and
+retries transparently when constructed with ``private_key_pem``; without a
+key it raises :class:`ScaChallenge` so callers can explain the fix.
+"""
+
+from __future__ import annotations
+
+import base64
+from typing import Any
+
+import requests
+
+PROD_HOST = "https://api.transferwise.com"
+SANDBOX_HOST = "https://api.sandbox.transferwise.tech"
+
+
+class WiseError(RuntimeError):
+    """Unexpected Wise API response."""
+
+
+class ScaChallenge(WiseError):
+    """The endpoint requires SCA and no private key is configured.
+
+    Fix: generate an RSA keypair, upload the public key in Wise
+    (Settings → API tokens → Manage public keys), and construct the client
+    with the private key PEM.
+    """
+
+
+def sign_sca_token(one_time_token: str, private_key_pem: bytes) -> str:
+    """RSA-SHA256 (PKCS#1 v1.5) signature of the SCA one-time token, base64."""
+    from cryptography.hazmat.primitives import hashes, serialization
+    from cryptography.hazmat.primitives.asymmetric import padding
+
+    key = serialization.load_pem_private_key(private_key_pem, password=None)
+    signature = key.sign(one_time_token.encode("ascii"), padding.PKCS1v15(), hashes.SHA256())
+    return base64.b64encode(signature).decode("ascii")
+
+
+class WiseClient:
+    def __init__(
+        self,
+        token: str,
+        *,
+        private_key_pem: bytes | None = None,
+        host: str = PROD_HOST,
+        session: requests.Session | None = None,
+    ):
+        self._host = host
+        self._key = private_key_pem
+        self._session = session or requests.Session()
+        self._session.headers.update(
+            {"Authorization": f"Bearer {token}", "User-Agent": "beangulp-wise"}
+        )
+
+    def _get(self, path: str, params: dict | None = None) -> Any:
+        response = self._session.get(self._host + path, params=params, timeout=30)
+        ott = response.headers.get("x-2fa-approval")
+        if response.status_code == 403 and ott:
+            if not self._key:
+                raise ScaChallenge(
+                    f"GET {path} requires SCA signing and no private key is configured"
+                )
+            response = self._session.get(
+                self._host + path,
+                params=params,
+                headers={"x-2fa-approval": ott, "X-Signature": sign_sca_token(ott, self._key)},
+                timeout=30,
+            )
+            if response.status_code == 403:
+                raise ScaChallenge(
+                    f"GET {path}: SCA signature rejected "
+                    f"({response.headers.get('x-2fa-approval-result', 'no result header')}) — "
+                    "is this private key's PUBLIC half uploaded in Wise "
+                    "(Settings → API tokens → Manage public keys)?"
+                )
+        if response.status_code != 200:
+            raise WiseError(f"GET {path} → {response.status_code}: {response.text[:200]}")
+        return response.json()
+
+    def profiles(self) -> list[dict]:
+        return self._get("/v2/profiles")
+
+    def profile_id(self, business_name: str) -> int:
+        """Profile id by business name (a token may see several entities)."""
+        for profile in self.profiles():
+            if profile.get("businessName") == business_name:
+                return profile["id"]
+        raise WiseError(f"no profile named {business_name!r} visible to this token")
+
+    def balances(self, profile_id: int) -> list[dict]:
+        return self._get(f"/v4/profiles/{profile_id}/balances", {"types": "STANDARD"})
+
+    def balance_statement(
+        self,
+        profile_id: int,
+        balance_id: int,
+        currency: str,
+        interval_start: str,
+        interval_end: str,
+        statement_type: str = "COMPACT",
+    ) -> dict:
+        """Balance statement JSON for one currency balance.
+
+        ``interval_start``/``interval_end`` are ISO instants
+        (``2026-07-01T00:00:00.000Z``); COMPACT folds fees into ``totalFees``
+        per transaction, which is what the importer expects.
+        """
+        return self._get(
+            f"/v1/profiles/{profile_id}/balance-statements/{balance_id}/statement.json",
+            {
+                "currency": currency,
+                "intervalStart": interval_start,
+                "intervalEnd": interval_end,
+                "type": statement_type,
+            },
+        )

beangulp_wise-0.1.0/tests/fixture-eur.json

@@ -0,0 +1,69 @@
+{
+  "accountHolder": {"type": "BUSINESS", "businessName": "Test GmbH"},
+  "issuer": {"name": "Wise Europe SA"},
+  "transactions": [
+    {
+      "type": "DEBIT",
+      "date": "2026-07-03T09:12:41.000Z",
+      "amount": {"value": -1.76, "currency": "EUR", "zero": false},
+      "totalFees": {"value": 0.00, "currency": "EUR", "zero": true},
+      "details": {
+        "type": "CARD",
+        "description": "Card transaction of 2.00 USD issued by Cloudflare",
+        "amount": {"value": 2.00, "currency": "USD"},
+        "merchant": {"name": "Cloudflare", "country": "US", "category": "Computer Network Services"}
+      },
+      "exchangeDetails": {"forAmount": {"value": 2.00, "currency": "USD"}},
+      "runningBalance": {"value": 6494.98, "currency": "EUR"},
+      "referenceNumber": "CARD-1000001"
+    },
+    {
+      "type": "CREDIT",
+      "date": "2026-07-06T14:02:11.000Z",
+      "amount": {"value": 878.48, "currency": "EUR", "zero": false},
+      "totalFees": {"value": 0.00, "currency": "EUR", "zero": true},
+      "details": {
+        "type": "TRANSFER",
+        "description": "Received money from Acme OU with reference ACM202606",
+        "senderName": "Acme OU",
+        "paymentReference": "ACM202606"
+      },
+      "exchangeDetails": null,
+      "runningBalance": {"value": 7373.46, "currency": "EUR"},
+      "referenceNumber": "TRANSFER-2000002"
+    },
+    {
+      "type": "DEBIT",
+      "date": "2026-07-08T08:30:00.000Z",
+      "amount": {"value": -100.00, "currency": "EUR", "zero": false},
+      "totalFees": {"value": 0.47, "currency": "EUR", "zero": false},
+      "details": {
+        "type": "CONVERSION",
+        "description": "Converted 100.00 EUR to 107.20 USD",
+        "sourceAmount": {"value": 100.00, "currency": "EUR"},
+        "targetAmount": {"value": 107.20, "currency": "USD"},
+        "rate": 1.0771
+      },
+      "exchangeDetails": null,
+      "runningBalance": {"value": 7273.46, "currency": "EUR"},
+      "referenceNumber": "CONVERSION-3000003"
+    },
+    {
+      "type": "DEBIT",
+      "date": "2026-07-09T00:00:00.000Z",
+      "amount": {"value": 0.00, "currency": "EUR", "zero": true},
+      "totalFees": {"value": 0.00, "currency": "EUR", "zero": true},
+      "details": {"type": "UNKNOWN", "description": "Zero-value adjustment"},
+      "exchangeDetails": null,
+      "runningBalance": {"value": 7273.46, "currency": "EUR"},
+      "referenceNumber": "ADJUSTMENT-4000004"
+    }
+  ],
+  "endOfStatementBalance": {"value": 7273.46, "currency": "EUR"},
+  "query": {
+    "intervalStart": "2026-07-01T00:00:00.000Z",
+    "intervalEnd": "2026-07-10T23:59:59.999Z",
+    "currency": "EUR",
+    "accountId": 10000001
+  }
+}

beangulp_wise-0.1.0/tests/fixture-usd.json

@@ -0,0 +1,29 @@
+{
+  "accountHolder": {"type": "BUSINESS", "businessName": "Test GmbH"},
+  "issuer": {"name": "Wise Europe SA"},
+  "transactions": [
+    {
+      "type": "CREDIT",
+      "date": "2026-07-08T08:30:00.000Z",
+      "amount": {"value": 107.20, "currency": "USD", "zero": false},
+      "totalFees": {"value": 0.00, "currency": "USD", "zero": true},
+      "details": {
+        "type": "CONVERSION",
+        "description": "Converted 100.00 EUR to 107.20 USD",
+        "sourceAmount": {"value": 100.00, "currency": "EUR"},
+        "targetAmount": {"value": 107.20, "currency": "USD"},
+        "rate": 1.0771
+      },
+      "exchangeDetails": null,
+      "runningBalance": {"value": 107.20, "currency": "USD"},
+      "referenceNumber": "CONVERSION-3000003"
+    }
+  ],
+  "endOfStatementBalance": {"value": 107.20, "currency": "USD"},
+  "query": {
+    "intervalStart": "2026-07-01T00:00:00.000Z",
+    "intervalEnd": "2026-07-10T23:59:59.999Z",
+    "currency": "USD",
+    "accountId": 10000002
+  }
+}

beangulp_wise-0.1.0/tests/test_wise_client.py

@@ -0,0 +1,73 @@
+"""Tests for the thin Wise API client (no network)."""
+
+import pytest
+
+from beangulp_wise.client import ScaChallenge, WiseClient, sign_sca_token
+
+
+def _keypair():
+    from cryptography.hazmat.primitives import serialization
+    from cryptography.hazmat.primitives.asymmetric import rsa
+
+    key = rsa.generate_private_key(public_exponent=65537, key_size=2048)
+    pem = key.private_bytes(
+        serialization.Encoding.PEM,
+        serialization.PrivateFormat.TraditionalOpenSSL,
+        serialization.NoEncryption(),
+    )
+    return key, pem
+
+
+def test_sign_sca_token_produces_verifiable_signature():
+    import base64
+
+    from cryptography.hazmat.primitives import hashes
+    from cryptography.hazmat.primitives.asymmetric import padding
+
+    key, pem = _keypair()
+    token = "cca278c6-c24b-4b08-8560-39937b59ae43"
+    signature = base64.b64decode(sign_sca_token(token, pem))
+    key.public_key().verify(  # raises on mismatch
+        signature, token.encode("ascii"), padding.PKCS1v15(), hashes.SHA256()
+    )
+
+
+class _Response:
+    def __init__(self, status_code, headers=None, payload=None):
+        self.status_code = status_code
+        self.headers = headers or {}
+        self.text = ""
+        self._payload = payload
+
+    def json(self):
+        return self._payload
+
+
+class _Session:
+    """Fake requests.Session: first GET returns the SCA 403, then 200."""
+
+    def __init__(self):
+        self.headers = {}
+        self.calls = []
+
+    def get(self, url, params=None, headers=None, timeout=None):
+        self.calls.append(headers or {})
+        if len(self.calls) == 1:
+            return _Response(403, headers={"x-2fa-approval": "OTT-123"})
+        return _Response(200, payload={"ok": True})
+
+
+def test_client_signs_and_retries_sca_challenge():
+    _, pem = _keypair()
+    session = _Session()
+    client = WiseClient("token", private_key_pem=pem, session=session)
+    assert client.profiles() == {"ok": True}
+    retry_headers = session.calls[1]
+    assert retry_headers["x-2fa-approval"] == "OTT-123"
+    assert retry_headers["X-Signature"]
+
+
+def test_client_raises_actionable_error_without_key():
+    client = WiseClient("token", session=_Session())
+    with pytest.raises(ScaChallenge):
+        client.profiles()

beangulp_wise-0.1.0/tests/test_wise_importer.py

@@ -0,0 +1,124 @@
+"""Tests for the Wise balance-statement importer."""
+
+from datetime import date as Date
+from decimal import Decimal
+from pathlib import Path
+
+from beancount.core import data
+
+from beangulp_wise import Importer, merge_conversions
+
+HERE = Path(__file__).parent
+EUR = str(HERE / "fixture-eur.json")
+USD = str(HERE / "fixture-usd.json")
+
+ACCOUNTS = {"EUR": "Assets:Wise:EUR", "USD": "Assets:Wise:USD"}
+RULES = (
+    (r"cloudflare", "Expenses:IT:Hosting", "!"),
+    (r"acme", "Assets:Receivable", "*"),
+)
+
+
+def _importer(**kwargs):
+    kwargs.setdefault("fees_account", "Expenses:Fees")
+    kwargs.setdefault("payee_rules", RULES)
+    return Importer(ACCOUNTS, **kwargs)
+
+
+def test_identify_by_schema_currency_and_holder(tmp_path):
+    assert _importer().identify(EUR)
+    assert _importer(holder="Test GmbH").identify(EUR)
+    assert not _importer(holder="Other AG").identify(EUR)
+    assert not Importer({"CHF": "Assets:Wise:CHF"}).identify(EUR)
+    other = tmp_path / "other.json"
+    other.write_text('{"not": "a statement"}')
+    assert not _importer().identify(str(other))
+
+
+def test_extract_card_transfer_conversion_and_balance():
+    entries = _importer().extract(EUR, existing=[])
+    txns = [e for e in entries if isinstance(e, data.Transaction)]
+    balances = [e for e in entries if isinstance(e, data.Balance)]
+    assert len(txns) == 3  # zero-value adjustment skipped
+    assert len(balances) == 1
+
+    card, transfer, conversion = txns
+    assert card.date == Date(2026, 7, 3)
+    assert card.payee == "Cloudflare"
+    assert card.flag == "!"
+    assert card.meta["wise_id"] == "CARD-1000001"
+    assert [p.account for p in card.postings] == ["Assets:Wise:EUR", "Expenses:IT:Hosting"]
+    assert card.postings[1].units.number == Decimal("1.76")
+
+    assert transfer.payee == "Acme OU"
+    assert transfer.flag == "*"
+    assert transfer.postings[1].account == "Assets:Receivable"
+    assert transfer.postings[1].units.number == Decimal("-878.48")
+
+    assert conversion.meta["conversion"] == "true"
+    assert conversion.payee == "Wise"
+    assert conversion.flag == "!"  # single leg: incomplete until merged
+    assert [p.account for p in conversion.postings] == ["Assets:Wise:EUR", "Expenses:Fees"]
+    assert conversion.postings[1].units.number == Decimal("0.47")
+
+    assert balances[0].date == Date(2026, 7, 11)
+    assert balances[0].amount.number == Decimal("7273.46")
+
+
+def test_merge_conversions_joins_legs_with_priced_incoming_leg():
+    importer = _importer()
+    entries = importer.extract(EUR, existing=[]) + importer.extract(USD, existing=[])
+    merged = merge_conversions(entries)
+
+    conversions = [
+        e
+        for e in merged
+        if isinstance(e, data.Transaction) and e.meta.get("wise_id") == "CONVERSION-3000003"
+    ]
+    assert len(conversions) == 1
+    txn = conversions[0]
+    assert txn.flag == "*"
+    accounts = [p.account for p in txn.postings]
+    assert accounts == ["Assets:Wise:EUR", "Assets:Wise:USD", "Expenses:Fees"]
+    out_leg, in_leg, fee = txn.postings
+    assert out_leg.units.number == Decimal("-100.00")
+    assert in_leg.units.number == Decimal("107.20")
+    # @@ 99.53 EUR: what left the EUR balance net of the 0.47 fee
+    assert in_leg.price.number == Decimal("99.53")
+    assert in_leg.price.currency == "EUR"
+    # weights: -100.00 + 99.53 + 0.47 == 0 — the merged txn balances exactly
+    assert out_leg.units.number + in_leg.price.number + fee.units.number == 0
+
+    # both balance assertions survive the merge
+    assert sum(isinstance(e, data.Balance) for e in merged) == 2
+
+
+def test_merge_leaves_unpaired_leg_for_review():
+    entries = _importer().extract(EUR, existing=[])
+    merged = merge_conversions(entries)
+    unpaired = [
+        e
+        for e in merged
+        if isinstance(e, data.Transaction) and e.meta.get("wise_id") == "CONVERSION-3000003"
+    ]
+    assert len(unpaired) == 1
+    assert unpaired[0].flag == "!"
+
+
+def test_extract_skips_references_already_in_ledger():
+    meta = data.new_metadata("ledger.bean", 1)
+    meta["wise_id"] = "CARD-1000001"
+    booked = data.Transaction(
+        meta,
+        Date(2026, 7, 3),
+        "*",
+        "Cloudflare",
+        "already booked",
+        data.EMPTY_SET,
+        data.EMPTY_SET,
+        [],
+    )
+    entries = _importer().extract(EUR, existing=[booked])
+    refs = [e.meta.get("wise_id") for e in entries if isinstance(e, data.Transaction)]
+    assert "CARD-1000001" not in refs
+    assert len(refs) == 2