accounted/extensions/general/arcim-migration/lib/arcim-client.ts

/**
 * HTTP client for the Arcim Sync gateway API.
 *
 * Targets the consent-based resource API (/api/v1/consents/...) which
 * provides typed, normalized access to any Swedish accounting provider.
 */

import type {
  ArcimProvider,
  ConsentRecord,
  OtcResponse,
  PaginatedResponse,
  CompanyInformationDto,
  CustomerDto,
  SupplierDto,
  SalesInvoiceDto,
  SupplierInvoiceDto,
} from '../types'

function getBaseUrl(): string {
  const url = process.env.ARCIM_SYNC_GATEWAY_URL
  if (!url) throw new Error('ARCIM_SYNC_GATEWAY_URL is not configured')
  return url.replace(/\/$/, '')
}

function getApiKey(): string {
  const key = process.env.ARCIM_SYNC_API_KEY
  if (!key) throw new Error('ARCIM_SYNC_API_KEY is not configured')
  return key
}

async function request<T>(
  path: string,
  options: RequestInit = {}
): Promise<T> {
  const url = `${getBaseUrl()}${path}`
  const response = await fetch(url, {
    ...options,
    headers: {
      'Authorization': `Bearer ${getApiKey()}`,
      'Content-Type': 'application/json',
      ...options.headers,
    },
  })

  if (!response.ok) {
    const body = await response.text().catch(() => '')
    throw new Error(`Arcim API ${response.status}: ${body || response.statusText}`)
  }

  return response.json()
}

// ── Consent lifecycle ───────────────────────────────────────────────

export async function createConsent(
  provider: ArcimProvider,
  name: string,
  orgNumber?: string,
  companyName?: string
): Promise<ConsentRecord> {
  return request<ConsentRecord>('/api/v1/consents', {
    method: 'POST',
    body: JSON.stringify({ name, provider, orgNumber, companyName }),
  })
}

export async function getConsent(consentId: string): Promise<ConsentRecord> {
  return request<ConsentRecord>(`/api/v1/consents/${consentId}`)
}

export async function generateOtc(
  consentId: string,
  expiresInMinutes: number = 60
): Promise<OtcResponse> {
  return request<OtcResponse>(`/api/v1/consents/${consentId}/otc`, {
    method: 'POST',
    body: JSON.stringify({ expiresInMinutes }),
  })
}

export async function deleteConsent(consentId: string): Promise<void> {
  await request(`/api/v1/consents/${consentId}`, { method: 'DELETE' })
}

// ── OAuth helpers ───────────────────────────────────────────────────

export async function getAuthUrl(
  provider: ArcimProvider,
  state?: string
): Promise<{ url: string }> {
  const params = new URLSearchParams()
  if (state) params.set('state', state)
  const qs = params.toString()
  return request<{ url: string }>(`/api/v1/auth/${provider}/url${qs ? `?${qs}` : ''}`)
}

export async function exchangeAuthToken(
  consentId: string,
  provider: ArcimProvider,
  otcCode: string,
  oauthCode: string
): Promise<{ success: boolean; consentId: string }> {
  return request(`/api/v1/auth/${provider}/callback`, {
    method: 'POST',
    body: JSON.stringify({
      code: oauthCode,
      consentId,
      otcCode,
    }),
  })
}

// ── Token-based auth (Bokio, Björn Lundén, Briox) ──────────────────

export async function submitProviderToken(
  consentId: string,
  provider: ArcimProvider,
  apiToken: string,
  companyId?: string
): Promise<{ success: boolean; consentId: string }> {
  return request(`/api/v1/auth/${provider}/callback`, {
    method: 'POST',
    body: JSON.stringify({
      code: apiToken,
      consentId,
      ...(companyId ? { companyId } : {}),
    }),
  })
}

// ── Resource fetching (paginated) ───────────────────────────────────

async function fetchAllPages<T>(
  consentId: string,
  resource: string,
  params?: Record<string, string>,
  pageSize: number = 100,
  maxPages: number = 500
): Promise<T[]> {
  const all: T[] = []
  let page = 1

  while (page <= maxPages) {
    const query = new URLSearchParams({
      page: String(page),
      pageSize: String(pageSize),
      ...params,
    })
    const result = await request<PaginatedResponse<T>>(
      `/api/v1/consents/${consentId}/${resource}?${query}`
    )
    all.push(...result.data)

    if (!result.hasMore || result.data.length === 0) break
    page++
  }

  return all
}

// ── Typed resource accessors ────────────────────────────────────────

export async function fetchCompanyInfo(
  consentId: string
): Promise<CompanyInformationDto | null> {
  // CompanyInformation is a singleton resource — gateway returns { data: object }
  const result = await request<{ data: CompanyInformationDto }>(
    `/api/v1/consents/${consentId}/companyinformation`
  )
  return result.data ?? null
}

export async function fetchCustomers(consentId: string): Promise<CustomerDto[]> {
  return fetchAllPages<CustomerDto>(consentId, 'customers')
}

export async function fetchSuppliers(consentId: string): Promise<SupplierDto[]> {
  return fetchAllPages<SupplierDto>(consentId, 'suppliers')
}

export async function fetchSalesInvoices(
  consentId: string,
  params?: Record<string, string>
): Promise<SalesInvoiceDto[]> {
  return fetchAllPages<SalesInvoiceDto>(consentId, 'salesinvoices', params)
}

export async function fetchSupplierInvoices(
  consentId: string,
  params?: Record<string, string>
): Promise<SupplierInvoiceDto[]> {
  return fetchAllPages<SupplierInvoiceDto>(consentId, 'supplierinvoices', params)
}

// ── SIE export ────────────────────────────────────────────────────

export interface SIEExportFile {
  fiscalYear: number
  sieType: number
  rawContent: string
  accountCount: number
  transactionCount: number
}

export async function fetchSIEExport(
  consentId: string,
  sieType?: number
): Promise<{ files: SIEExportFile[] }> {
  const params = new URLSearchParams()
  if (sieType) params.set('sieType', String(sieType))
  const qs = params.toString()
  return request<{ files: SIEExportFile[] }>(
    `/api/v1/consents/${consentId}/sie/export${qs ? `?${qs}` : ''}`
  )
}