@fintekkers/ledger-models 0.4.17 → 0.4.19

package/node/wrappers/models/errors.d.ts

@@ -0,0 +1,19 @@
+import { FieldViolationProto } from '../../fintekkers/requests/util/errors/field_violation_pb';
+import { UUID } from './utils/uuid';
+/**
+ * Typed input error: the object handed to ledger-models has one or more bad
+ * or missing fields. JS counterpart of Java's ModelValidationException
+ * (docs/adr/typed-input-errors.md). Services map it to gRPC INVALID_ARGUMENT
+ * and can put `violations` as-is into ErrorProto.violations.
+ */
+export declare class ModelValidationError extends Error {
+    readonly violations: ReadonlyArray<FieldViolationProto>;
+    /** @param violations non-empty list of the field-level problems found */
+    constructor(violations: FieldViolationProto[]);
+    /** Field path of the first violation, e.g. `bond_details.coupon_rate`. */
+    get field(): string;
+    /** UUID string of the object that owns the first bad field, or undefined if unset. */
+    get objectId(): string | undefined;
+}
+/** Builds one violation. `objectId` may be undefined when the input had no UUID. */
+export declare function violation(field: string, objectId: UUID | undefined, message: string): FieldViolationProto;

package/node/wrappers/models/errors.js

@@ -0,0 +1,48 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.violation = exports.ModelValidationError = void 0;
+const field_violation_pb_1 = require("../../fintekkers/requests/util/errors/field_violation_pb");
+const uuid_1 = require("./utils/uuid");
+/**
+ * Typed input error: the object handed to ledger-models has one or more bad
+ * or missing fields. JS counterpart of Java's ModelValidationException
+ * (docs/adr/typed-input-errors.md). Services map it to gRPC INVALID_ARGUMENT
+ * and can put `violations` as-is into ErrorProto.violations.
+ */
+class ModelValidationError extends Error {
+    /** @param violations non-empty list of the field-level problems found */
+    constructor(violations) {
+        if (violations.length === 0) {
+            throw new Error('ModelValidationError needs at least one violation');
+        }
+        super(violations
+            .map(v => { var _a; return `${v.getField()}: ${v.getMessage()} (id ${(_a = objectIdOf(v)) !== null && _a !== void 0 ? _a : 'null'})`; })
+            .join('; '));
+        this.name = 'ModelValidationError';
+        this.violations = Object.freeze([...violations]);
+    }
+    /** Field path of the first violation, e.g. `bond_details.coupon_rate`. */
+    get field() {
+        return this.violations[0].getField();
+    }
+    /** UUID string of the object that owns the first bad field, or undefined if unset. */
+    get objectId() {
+        return objectIdOf(this.violations[0]);
+    }
+}
+exports.ModelValidationError = ModelValidationError;
+/** Builds one violation. `objectId` may be undefined when the input had no UUID. */
+function violation(field, objectId, message) {
+    const v = new field_violation_pb_1.FieldViolationProto();
+    v.setField(field);
+    v.setMessage(message);
+    if (objectId)
+        v.setObjectId(objectId.toUUIDProto());
+    return v;
+}
+exports.violation = violation;
+function objectIdOf(v) {
+    const id = v.getObjectId();
+    return id ? uuid_1.UUID.fromU8Array(id.getRawUuid_asU8()).toString() : undefined;
+}
+//# sourceMappingURL=errors.js.map

package/node/wrappers/models/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["errors.ts"],"names":[],"mappings":";;;AAAA,iGAA+F;AAC/F,uCAAoC;AAEpC;;;;;GAKG;AACH,MAAa,oBAAqB,SAAQ,KAAK;IAG3C,yEAAyE;IACzE,YAAY,UAAiC;QACzC,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE;YACzB,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;SACxE;QACD,KAAK,CAAC,UAAU;aACX,GAAG,CAAC,CAAC,CAAC,EAAE,WAAC,OAAA,GAAG,CAAC,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,UAAU,EAAE,QAAQ,MAAA,UAAU,CAAC,CAAC,CAAC,mCAAI,MAAM,GAAG,CAAA,EAAA,CAAC;aAC9E,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QACjB,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;QACnC,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC;IACrD,CAAC;IAED,0EAA0E;IAC1E,IAAI,KAAK;QACL,OAAO,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IACzC,CAAC;IAED,sFAAsF;IACtF,IAAI,QAAQ;QACR,OAAO,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1C,CAAC;CACJ;AAxBD,oDAwBC;AAED,oFAAoF;AACpF,SAAgB,SAAS,CAAC,KAAa,EAAE,QAA0B,EAAE,OAAe;IAChF,MAAM,CAAC,GAAG,IAAI,wCAAmB,EAAE,CAAC;IACpC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAClB,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;IACtB,IAAI,QAAQ;QAAE,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;IACpD,OAAO,CAAC,CAAC;AACb,CAAC;AAND,8BAMC;AAED,SAAS,UAAU,CAAC,CAAsB;IACtC,MAAM,EAAE,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;IAC3B,OAAO,EAAE,CAAC,CAAC,CAAC,WAAI,CAAC,WAAW,CAAC,EAAE,CAAC,eAAe,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AAC9E,CAAC"}

package/node/wrappers/models/errors.ts

@@ -0,0 +1,48 @@
+import { FieldViolationProto } from '../../fintekkers/requests/util/errors/field_violation_pb';
+import { UUID } from './utils/uuid';
+
+/**
+ * Typed input error: the object handed to ledger-models has one or more bad
+ * or missing fields. JS counterpart of Java's ModelValidationException
+ * (docs/adr/typed-input-errors.md). Services map it to gRPC INVALID_ARGUMENT
+ * and can put `violations` as-is into ErrorProto.violations.
+ */
+export class ModelValidationError extends Error {
+    readonly violations: ReadonlyArray<FieldViolationProto>;
+
+    /** @param violations non-empty list of the field-level problems found */
+    constructor(violations: FieldViolationProto[]) {
+        if (violations.length === 0) {
+            throw new Error('ModelValidationError needs at least one violation');
+        }
+        super(violations
+            .map(v => `${v.getField()}: ${v.getMessage()} (id ${objectIdOf(v) ?? 'null'})`)
+            .join('; '));
+        this.name = 'ModelValidationError';
+        this.violations = Object.freeze([...violations]);
+    }
+
+    /** Field path of the first violation, e.g. `bond_details.coupon_rate`. */
+    get field(): string {
+        return this.violations[0].getField();
+    }
+
+    /** UUID string of the object that owns the first bad field, or undefined if unset. */
+    get objectId(): string | undefined {
+        return objectIdOf(this.violations[0]);
+    }
+}
+
+/** Builds one violation. `objectId` may be undefined when the input had no UUID. */
+export function violation(field: string, objectId: UUID | undefined, message: string): FieldViolationProto {
+    const v = new FieldViolationProto();
+    v.setField(field);
+    v.setMessage(message);
+    if (objectId) v.setObjectId(objectId.toUUIDProto());
+    return v;
+}
+
+function objectIdOf(v: FieldViolationProto): string | undefined {
+    const id = v.getObjectId();
+    return id ? UUID.fromU8Array(id.getRawUuid_asU8()).toString() : undefined;
+}

package/node/wrappers/models/security/security.tbillCoupon.test.d.ts

@@ -0,0 +1 @@
+export {};

package/node/wrappers/models/security/security.tbillCoupon.test.js

@@ -0,0 +1,74 @@
+"use strict";
+// LM-258: a TBILL has no coupon. coupon_rate must be unset or 0 when
+// product_type == TBILL. See docs/adr/tbill_coupon_validation.md.
+Object.defineProperty(exports, "__esModule", { value: true });
+const product_type_pb_1 = require("../../../fintekkers/models/security/product_type_pb");
+const security_pb_1 = require("../../../fintekkers/models/security/security_pb");
+const decimal_value_pb_1 = require("../../../fintekkers/models/util/decimal_value_pb");
+const errors_1 = require("../errors");
+const uuid_1 = require("../utils/uuid");
+const security_rules_1 = require("./security_rules");
+const SECURITY_ID = '1f0e8a4c-58b1-4d0e-9a3c-7d2b6e5f4a10';
+function decimal(value) {
+    return new decimal_value_pb_1.DecimalValueProto().setArbitraryPrecisionValue(value);
+}
+/** A security of `productType`; `coupon` undefined leaves coupon_rate unset. */
+function security(productType, coupon) {
+    const bond = new security_pb_1.BondDetailsProto().setFaceValue(decimal('1000'));
+    if (coupon !== undefined)
+        bond.setCouponRate(decimal(coupon));
+    return new security_pb_1.SecurityProto()
+        .setUuid(new uuid_1.UUID(uuid_1.UUID.fromString(SECURITY_ID)).toUUIDProto())
+        .setProductType(productType)
+        .setBondDetails(bond);
+}
+function expectRejected(coupon) {
+    const proto = security(product_type_pb_1.ProductTypeProto.TBILL, coupon);
+    let err;
+    try {
+        (0, security_rules_1.requireValid)(proto);
+    }
+    catch (e) {
+        err = e;
+    }
+    expect(err).toBeInstanceOf(errors_1.ModelValidationError);
+    const error = err;
+    expect(error.name).toBe('ModelValidationError');
+    expect(error.violations).toHaveLength(1);
+    expect(error.field).toBe(security_rules_1.COUPON_RATE);
+    expect(error.field).toBe('bond_details.coupon_rate');
+    expect(error.objectId).toBe(SECURITY_ID);
+    expect(error.message).toContain(SECURITY_ID);
+    expect(error.message).toContain('coupon_rate');
+}
+describe('TBILL coupon rule', () => {
+    test('rejects a TBILL with coupon 6.0', () => {
+        expectRejected('6.0');
+    });
+    test('rejects a TBILL with coupon -1.0', () => {
+        expectRejected('-1.0');
+    });
+    test('accepts a TBILL with no coupon_rate message', () => {
+        const proto = security(product_type_pb_1.ProductTypeProto.TBILL);
+        expect(proto.getBondDetails().hasCouponRate()).toBe(false);
+        expect((0, security_rules_1.validate)(proto)).toEqual([]);
+        expect(() => (0, security_rules_1.requireValid)(proto)).not.toThrow();
+    });
+    test('accepts a TBILL with an empty coupon_rate value', () => {
+        const proto = security(product_type_pb_1.ProductTypeProto.TBILL, '');
+        expect(proto.getBondDetails().hasCouponRate()).toBe(true);
+        expect((0, security_rules_1.validate)(proto)).toEqual([]);
+        expect(() => (0, security_rules_1.requireValid)(proto)).not.toThrow();
+    });
+    test.each(['0', '0.00'])('accepts a TBILL with coupon %s', (zero) => {
+        const proto = security(product_type_pb_1.ProductTypeProto.TBILL, zero);
+        expect((0, security_rules_1.validate)(proto)).toEqual([]);
+        expect(() => (0, security_rules_1.requireValid)(proto)).not.toThrow();
+    });
+    test('accepts a TREASURY_NOTE with coupon 6.0', () => {
+        const proto = security(product_type_pb_1.ProductTypeProto.TREASURY_NOTE, '6.0');
+        expect((0, security_rules_1.validate)(proto)).toEqual([]);
+        expect(() => (0, security_rules_1.requireValid)(proto)).not.toThrow();
+    });
+});
+//# sourceMappingURL=security.tbillCoupon.test.js.map

package/node/wrappers/models/security/security.tbillCoupon.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.tbillCoupon.test.js","sourceRoot":"","sources":["security.tbillCoupon.test.ts"],"names":[],"mappings":";AAAA,qEAAqE;AACrE,kEAAkE;;AAElE,yFAAuF;AACvF,iFAAkG;AAClG,uFAAqF;AACrF,sCAAiD;AACjD,wCAAqC;AACrC,qDAAuE;AAEvE,MAAM,WAAW,GAAG,sCAAsC,CAAC;AAE3D,SAAS,OAAO,CAAC,KAAa;IAC1B,OAAO,IAAI,oCAAiB,EAAE,CAAC,0BAA0B,CAAC,KAAK,CAAC,CAAC;AACrE,CAAC;AAED,gFAAgF;AAChF,SAAS,QAAQ,CAAC,WAA6B,EAAE,MAAe;IAC5D,MAAM,IAAI,GAAG,IAAI,8BAAgB,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;IAClE,IAAI,MAAM,KAAK,SAAS;QAAE,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;IAC9D,OAAO,IAAI,2BAAa,EAAE;SACrB,OAAO,CAAC,IAAI,WAAI,CAAC,WAAI,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;SAC7D,cAAc,CAAC,WAAW,CAAC;SAC3B,cAAc,CAAC,IAAI,CAAC,CAAC;AAC9B,CAAC;AAED,SAAS,cAAc,CAAC,MAAc;IAClC,MAAM,KAAK,GAAG,QAAQ,CAAC,kCAAgB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACvD,IAAI,GAAY,CAAC;IACjB,IAAI;QACA,IAAA,6BAAY,EAAC,KAAK,CAAC,CAAC;KACvB;IAAC,OAAO,CAAC,EAAE;QACR,GAAG,GAAG,CAAC,CAAC;KACX;IACD,MAAM,CAAC,GAAG,CAAC,CAAC,cAAc,CAAC,6BAAoB,CAAC,CAAC;IACjD,MAAM,KAAK,GAAG,GAA2B,CAAC;IAC1C,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;IAChD,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IACzC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,4BAAW,CAAC,CAAC;IACtC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;IACrD,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACzC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;IAC7C,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;AACnD,CAAC;AAED,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;IAC/B,IAAI,CAAC,iCAAiC,EAAE,GAAG,EAAE;QACzC,cAAc,CAAC,KAAK,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,kCAAkC,EAAE,GAAG,EAAE;QAC1C,cAAc,CAAC,MAAM,CAAC,CAAC;IAC3B,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,6CAA6C,EAAE,GAAG,EAAE;QACrD,MAAM,KAAK,GAAG,QAAQ,CAAC,kCAAgB,CAAC,KAAK,CAAC,CAAC;QAC/C,MAAM,CAAC,KAAK,CAAC,cAAc,EAAG,CAAC,aAAa,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC5D,MAAM,CAAC,IAAA,yBAAQ,EAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACpC,MAAM,CAAC,GAAG,EAAE,CAAC,IAAA,6BAAY,EAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,iDAAiD,EAAE,GAAG,EAAE;QACzD,MAAM,KAAK,GAAG,QAAQ,CAAC,kCAAgB,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACnD,MAAM,CAAC,KAAK,CAAC,cAAc,EAAG,CAAC,aAAa,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3D,MAAM,CAAC,IAAA,yBAAQ,EAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACpC,MAAM,CAAC,GAAG,EAAE,CAAC,IAAA,6BAAY,EAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,gCAAgC,EAAE,CAAC,IAAI,EAAE,EAAE;QAChE,MAAM,KAAK,GAAG,QAAQ,CAAC,kCAAgB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACrD,MAAM,CAAC,IAAA,yBAAQ,EAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACpC,MAAM,CAAC,GAAG,EAAE,CAAC,IAAA,6BAAY,EAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,yCAAyC,EAAE,GAAG,EAAE;QACjD,MAAM,KAAK,GAAG,QAAQ,CAAC,kCAAgB,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;QAC9D,MAAM,CAAC,IAAA,yBAAQ,EAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACpC,MAAM,CAAC,GAAG,EAAE,CAAC,IAAA,6BAAY,EAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;IACpD,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC"}

package/node/wrappers/models/security/security.tbillCoupon.test.ts

@@ -0,0 +1,80 @@
+// LM-258: a TBILL has no coupon. coupon_rate must be unset or 0 when
+// product_type == TBILL. See docs/adr/tbill_coupon_validation.md.
+
+import { ProductTypeProto } from '../../../fintekkers/models/security/product_type_pb';
+import { BondDetailsProto, SecurityProto } from '../../../fintekkers/models/security/security_pb';
+import { DecimalValueProto } from '../../../fintekkers/models/util/decimal_value_pb';
+import { ModelValidationError } from '../errors';
+import { UUID } from '../utils/uuid';
+import { COUPON_RATE, requireValid, validate } from './security_rules';
+
+const SECURITY_ID = '1f0e8a4c-58b1-4d0e-9a3c-7d2b6e5f4a10';
+
+function decimal(value: string): DecimalValueProto {
+    return new DecimalValueProto().setArbitraryPrecisionValue(value);
+}
+
+/** A security of `productType`; `coupon` undefined leaves coupon_rate unset. */
+function security(productType: ProductTypeProto, coupon?: string): SecurityProto {
+    const bond = new BondDetailsProto().setFaceValue(decimal('1000'));
+    if (coupon !== undefined) bond.setCouponRate(decimal(coupon));
+    return new SecurityProto()
+        .setUuid(new UUID(UUID.fromString(SECURITY_ID)).toUUIDProto())
+        .setProductType(productType)
+        .setBondDetails(bond);
+}
+
+function expectRejected(coupon: string): void {
+    const proto = security(ProductTypeProto.TBILL, coupon);
+    let err: unknown;
+    try {
+        requireValid(proto);
+    } catch (e) {
+        err = e;
+    }
+    expect(err).toBeInstanceOf(ModelValidationError);
+    const error = err as ModelValidationError;
+    expect(error.name).toBe('ModelValidationError');
+    expect(error.violations).toHaveLength(1);
+    expect(error.field).toBe(COUPON_RATE);
+    expect(error.field).toBe('bond_details.coupon_rate');
+    expect(error.objectId).toBe(SECURITY_ID);
+    expect(error.message).toContain(SECURITY_ID);
+    expect(error.message).toContain('coupon_rate');
+}
+
+describe('TBILL coupon rule', () => {
+    test('rejects a TBILL with coupon 6.0', () => {
+        expectRejected('6.0');
+    });
+
+    test('rejects a TBILL with coupon -1.0', () => {
+        expectRejected('-1.0');
+    });
+
+    test('accepts a TBILL with no coupon_rate message', () => {
+        const proto = security(ProductTypeProto.TBILL);
+        expect(proto.getBondDetails()!.hasCouponRate()).toBe(false);
+        expect(validate(proto)).toEqual([]);
+        expect(() => requireValid(proto)).not.toThrow();
+    });
+
+    test('accepts a TBILL with an empty coupon_rate value', () => {
+        const proto = security(ProductTypeProto.TBILL, '');
+        expect(proto.getBondDetails()!.hasCouponRate()).toBe(true);
+        expect(validate(proto)).toEqual([]);
+        expect(() => requireValid(proto)).not.toThrow();
+    });
+
+    test.each(['0', '0.00'])('accepts a TBILL with coupon %s', (zero) => {
+        const proto = security(ProductTypeProto.TBILL, zero);
+        expect(validate(proto)).toEqual([]);
+        expect(() => requireValid(proto)).not.toThrow();
+    });
+
+    test('accepts a TREASURY_NOTE with coupon 6.0', () => {
+        const proto = security(ProductTypeProto.TREASURY_NOTE, '6.0');
+        expect(validate(proto)).toEqual([]);
+        expect(() => requireValid(proto)).not.toThrow();
+    });
+});

package/node/wrappers/models/security/security_rules.d.ts

@@ -0,0 +1,19 @@
+import { SecurityProto } from '../../../fintekkers/models/security/security_pb';
+import { FieldViolationProto } from '../../../fintekkers/requests/util/errors/field_violation_pb';
+/**
+ * Security input rules: JS counterpart of Java's SecurityRules
+ * (docs/adr/typed-input-errors.md). Pure: proto in, violations out.
+ *
+ * Holds the TBILL coupon rule (LM-258, docs/adr/tbill_coupon_validation.md);
+ * LM-255c adds the bond rules Java already has. The Security wrapper does not
+ * call these rules, so stored rows that break them still load; writers call
+ * `validate` / `requireValid` before saving.
+ */
+export declare const COUPON_RATE = "bond_details.coupon_rate";
+/**
+ * Returns every field-level violation on this security, or an empty array
+ * when it is valid. A link security returns an empty array: hydrate it first.
+ */
+export declare function validate(proto: SecurityProto): FieldViolationProto[];
+/** Throws ModelValidationError carrying every violation if `validate` finds any. */
+export declare function requireValid(proto: SecurityProto): void;

package/node/wrappers/models/security/security_rules.js

@@ -0,0 +1,72 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.requireValid = exports.validate = exports.COUPON_RATE = void 0;
+const decimal_js_1 = __importDefault(require("decimal.js"));
+const product_type_pb_1 = require("../../../fintekkers/models/security/product_type_pb");
+const errors_1 = require("../errors");
+const uuid_1 = require("../utils/uuid");
+/**
+ * Security input rules: JS counterpart of Java's SecurityRules
+ * (docs/adr/typed-input-errors.md). Pure: proto in, violations out.
+ *
+ * Holds the TBILL coupon rule (LM-258, docs/adr/tbill_coupon_validation.md);
+ * LM-255c adds the bond rules Java already has. The Security wrapper does not
+ * call these rules, so stored rows that break them still load; writers call
+ * `validate` / `requireValid` before saving.
+ */
+exports.COUPON_RATE = 'bond_details.coupon_rate';
+/**
+ * Returns every field-level violation on this security, or an empty array
+ * when it is valid. A link security returns an empty array: hydrate it first.
+ */
+function validate(proto) {
+    if (proto.getIsLink())
+        return [];
+    const out = [];
+    const coupon = tbillCouponViolation(proto, objectIdOf(proto));
+    if (coupon)
+        out.push(coupon);
+    return out;
+}
+exports.validate = validate;
+/** Throws ModelValidationError carrying every violation if `validate` finds any. */
+function requireValid(proto) {
+    const violations = validate(proto);
+    if (violations.length > 0)
+        throw new errors_1.ModelValidationError(violations);
+}
+exports.requireValid = requireValid;
+/**
+ * A TBILL pays no coupon, so coupon_rate must be unset or 0. Uses the
+ * explicit product_type only. Units are not checked. A value that does not
+ * parse is skipped.
+ */
+function tbillCouponViolation(proto, id) {
+    var _a, _b;
+    if (proto.getProductType() !== product_type_pb_1.ProductTypeProto.TBILL)
+        return undefined;
+    const raw = (_b = (_a = proto.getBondDetails()) === null || _a === void 0 ? void 0 : _a.getCouponRate()) === null || _b === void 0 ? void 0 : _b.getArbitraryPrecisionValue();
+    if (!raw)
+        return undefined;
+    let coupon;
+    try {
+        coupon = new decimal_js_1.default(raw);
+    }
+    catch (e) {
+        // decimal.js throws "[DecimalError] Invalid argument" on unparseable input.
+        return undefined;
+    }
+    if (!coupon.isFinite() || coupon.isZero())
+        return undefined;
+    return (0, errors_1.violation)(exports.COUPON_RATE, id, `coupon_rate must be null or 0 for a TBILL: coupon_rate=${raw}`);
+}
+/** The security's UUID, or undefined when it has none or it is not 16 bytes. */
+function objectIdOf(proto) {
+    var _a;
+    const raw = (_a = proto.getUuid()) === null || _a === void 0 ? void 0 : _a.getRawUuid_asU8();
+    return raw && raw.length === 16 ? uuid_1.UUID.fromU8Array(raw) : undefined;
+}
+//# sourceMappingURL=security_rules.js.map

package/node/wrappers/models/security/security_rules.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security_rules.js","sourceRoot":"","sources":["security_rules.ts"],"names":[],"mappings":";;;;;;AAAA,4DAAiC;AACjC,yFAAuF;AAGvF,sCAA4D;AAC5D,wCAAqC;AAErC;;;;;;;;GAQG;AAEU,QAAA,WAAW,GAAG,0BAA0B,CAAC;AAEtD;;;GAGG;AACH,SAAgB,QAAQ,CAAC,KAAoB;IACzC,IAAI,KAAK,CAAC,SAAS,EAAE;QAAE,OAAO,EAAE,CAAC;IACjC,MAAM,GAAG,GAA0B,EAAE,CAAC;IACtC,MAAM,MAAM,GAAG,oBAAoB,CAAC,KAAK,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;IAC9D,IAAI,MAAM;QAAE,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC7B,OAAO,GAAG,CAAC;AACf,CAAC;AAND,4BAMC;AAED,oFAAoF;AACpF,SAAgB,YAAY,CAAC,KAAoB;IAC7C,MAAM,UAAU,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IACnC,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,IAAI,6BAAoB,CAAC,UAAU,CAAC,CAAC;AAC1E,CAAC;AAHD,oCAGC;AAED;;;;GAIG;AACH,SAAS,oBAAoB,CAAC,KAAoB,EAAE,EAAoB;;IACpE,IAAI,KAAK,CAAC,cAAc,EAAE,KAAK,kCAAgB,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IACxE,MAAM,GAAG,GAAG,MAAA,MAAA,KAAK,CAAC,cAAc,EAAE,0CAAE,aAAa,EAAE,0CAAE,0BAA0B,EAAE,CAAC;IAClF,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAC3B,IAAI,MAAe,CAAC;IACpB,IAAI;QACA,MAAM,GAAG,IAAI,oBAAO,CAAC,GAAG,CAAC,CAAC;KAC7B;IAAC,OAAO,CAAC,EAAE;QACR,4EAA4E;QAC5E,OAAO,SAAS,CAAC;KACpB;IACD,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,MAAM,CAAC,MAAM,EAAE;QAAE,OAAO,SAAS,CAAC;IAC5D,OAAO,IAAA,kBAAS,EAAC,mBAAW,EAAE,EAAE,EAAE,0DAA0D,GAAG,EAAE,CAAC,CAAC;AACvG,CAAC;AAED,gFAAgF;AAChF,SAAS,UAAU,CAAC,KAAoB;;IACpC,MAAM,GAAG,GAAG,MAAA,KAAK,CAAC,OAAO,EAAE,0CAAE,eAAe,EAAE,CAAC;IAC/C,OAAO,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,EAAE,CAAC,CAAC,CAAC,WAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACxE,CAAC"}

package/node/wrappers/models/security/security_rules.ts

@@ -0,0 +1,62 @@
+import Decimal from 'decimal.js';
+import { ProductTypeProto } from '../../../fintekkers/models/security/product_type_pb';
+import { SecurityProto } from '../../../fintekkers/models/security/security_pb';
+import { FieldViolationProto } from '../../../fintekkers/requests/util/errors/field_violation_pb';
+import { ModelValidationError, violation } from '../errors';
+import { UUID } from '../utils/uuid';
+
+/**
+ * Security input rules: JS counterpart of Java's SecurityRules
+ * (docs/adr/typed-input-errors.md). Pure: proto in, violations out.
+ *
+ * Holds the TBILL coupon rule (LM-258, docs/adr/tbill_coupon_validation.md);
+ * LM-255c adds the bond rules Java already has. The Security wrapper does not
+ * call these rules, so stored rows that break them still load; writers call
+ * `validate` / `requireValid` before saving.
+ */
+
+export const COUPON_RATE = 'bond_details.coupon_rate';
+
+/**
+ * Returns every field-level violation on this security, or an empty array
+ * when it is valid. A link security returns an empty array: hydrate it first.
+ */
+export function validate(proto: SecurityProto): FieldViolationProto[] {
+    if (proto.getIsLink()) return [];
+    const out: FieldViolationProto[] = [];
+    const coupon = tbillCouponViolation(proto, objectIdOf(proto));
+    if (coupon) out.push(coupon);
+    return out;
+}
+
+/** Throws ModelValidationError carrying every violation if `validate` finds any. */
+export function requireValid(proto: SecurityProto): void {
+    const violations = validate(proto);
+    if (violations.length > 0) throw new ModelValidationError(violations);
+}
+
+/**
+ * A TBILL pays no coupon, so coupon_rate must be unset or 0. Uses the
+ * explicit product_type only. Units are not checked. A value that does not
+ * parse is skipped.
+ */
+function tbillCouponViolation(proto: SecurityProto, id: UUID | undefined): FieldViolationProto | undefined {
+    if (proto.getProductType() !== ProductTypeProto.TBILL) return undefined;
+    const raw = proto.getBondDetails()?.getCouponRate()?.getArbitraryPrecisionValue();
+    if (!raw) return undefined;
+    let coupon: Decimal;
+    try {
+        coupon = new Decimal(raw);
+    } catch (e) {
+        // decimal.js throws "[DecimalError] Invalid argument" on unparseable input.
+        return undefined;
+    }
+    if (!coupon.isFinite() || coupon.isZero()) return undefined;
+    return violation(COUPON_RATE, id, `coupon_rate must be null or 0 for a TBILL: coupon_rate=${raw}`);
+}
+
+/** The security's UUID, or undefined when it has none or it is not 16 bytes. */
+function objectIdOf(proto: SecurityProto): UUID | undefined {
+    const raw = proto.getUuid()?.getRawUuid_asU8();
+    return raw && raw.length === 16 ? UUID.fromU8Array(raw) : undefined;
+}

package/node/wrappers/services/security-service/SecurityService.js

@@ -40,6 +40,7 @@ const util_1 = require("util");
 const security_1 = __importDefault(require("../../models/security/security"));
 const dt = __importStar(require("../../models/utils/datetime"));
 const identifier_1 = require("../../models/security/identifier");
+const security_rules_1 = require("../../models/security/security_rules");
 // Requests & Services
 const security_service_grpc_pb_1 = require("../../../fintekkers/services/security-service/security_service_grpc_pb");
 const query_security_request_pb_1 = require("../../../fintekkers/requests/security/query_security_request_pb");
@@ -65,6 +66,9 @@ class SecurityService {
             // validateCreateRequest reject so the dry-run RPC can't mask a request
             // that the real createOrUpdate would also fail on.
             (0, identifier_1.validateIdentifiersForCreate)(security);
+            // Security input rules (LM-258: a TBILL has no coupon). Throws
+            // ModelValidationError before the gRPC round-trip.
+            (0, security_rules_1.requireValid)(security);
             const createRequest = new create_security_request_pb_1.CreateSecurityRequestProto();
             createRequest.setObjectClass('SecurityRequest');
             createRequest.setVersion('0.0.1');
@@ -78,6 +82,7 @@ class SecurityService {
         return __awaiter(this, void 0, void 0, function* () {
             // Client-side guard (#347): see validateCreateSecurity above.
             (0, identifier_1.validateIdentifiersForCreate)(security);
+            (0, security_rules_1.requireValid)(security);
             const createRequest = new create_security_request_pb_1.CreateSecurityRequestProto();
             createRequest.setObjectClass('SecurityRequest');
             createRequest.setVersion('0.0.1');

package/node/wrappers/services/security-service/SecurityService.js.map

@@ -1 +1 @@
-{"version":3,"file":"SecurityService.js","sourceRoot":"","sources":["SecurityService.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,+BAAiC;AAMjC,8EAAsD;AAItD,gEAAkD;AAClD,iEAAgF;AAEhF,sBAAsB;AACtB,qHAAwG;AACxG,+GAA4G;AAE5G,iHAA8G;AAG9G,uFAA0D;AAC1D,kDAA+C;AAC/C,0DAA4D;AAC5D,uEAAyD;AAEzD,MAAM,eAAe;IAGnB,YAAY,MAAe;QACzB,IAAI,MAAM,EAAE;YACV,MAAM,EAAE,WAAW,EAAE,YAAY,EAAE,GAAG,wBAAS,CAAC,6BAA6B,CAAC,MAAM,CAAC,CAAC;YACtF,IAAI,CAAC,MAAM,GAAG,IAAI,yCAAc,CAAC,wBAAS,CAAC,MAAM,EAAE,WAAW,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC;SACnF;aAAM;YACL,IAAI,CAAC,MAAM,GAAG,IAAI,yCAAc,CAAC,wBAAS,CAAC,MAAM,EAAE,wBAAS,CAAC,cAAc,CAAC,CAAC;SAC9E;IACH,CAAC;IAEK,sBAAsB,CAAC,QAAuB;;YAClD,qEAAqE;YACrE,qEAAqE;YACrE,uEAAuE;YACvE,mDAAmD;YACnD,IAAA,yCAA4B,EAAC,QAAQ,CAAC,CAAC;YAEvC,MAAM,aAAa,GAAG,IAAI,uDAA0B,EAAE,CAAC;YACvD,aAAa,CAAC,cAAc,CAAC,iBAAiB,CAAC,CAAC;YAChD,aAAa,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;YAClC,aAAa,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;YAEzC,MAAM,2BAA2B,GAAG,IAAA,gBAAS,EAAC,IAAI,CAAC,MAAM,CAAC,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;YACpG,MAAM,QAAQ,GAAG,MAAM,2BAA2B,CAAC,aAAa,CAAC,CAAC;YAClE,OAAO,QAAwB,CAAC;QAClC,CAAC;KAAA;IAEK,cAAc,CAAC,QAAuB;;YAC1C,8DAA8D;YAC9D,IAAA,yCAA4B,EAAC,QAAQ,CAAC,CAAC;YAEvC,MAAM,aAAa,GAAG,IAAI,uDAA0B,EAAE,CAAC;YACvD,aAAa,CAAC,cAAc,CAAC,iBAAiB,CAAC,CAAC;YAChD,aAAa,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;YAClC,aAAa,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;YAEzC,MAAM,mBAAmB,GAAG,IAAA,gBAAS,EAAC,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;YACpF,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC,aAAa,CAAgC,CAAC;YACzF,qEAAqE;YACrE,yEAAyE;YACzE,0EAA0E;YAC1E,MAAM,SAAS,GAAG,QAAQ,CAAC,mBAAmB,EAAE,CAAC;YACjD,IAAI,SAAS,EAAE;gBACb,MAAM,SAAS,GAAG,SAAS,CAAC,OAAO,EAAE,CAAC;gBACtC,MAAM,SAAS,GAAG,SAAS,CAAC,OAAO,EAAE,CAAC;gBACtC,IAAI,SAAS,IAAI,SAAS,EAAE;oBAC1B,MAAM,OAAO,GAAG,WAAI,CAAC,WAAW,CAAC,SAAS,CAAC,eAAe,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;oBACzE,eAAe,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,EAAE,SAAS,EAAE,IAAI,wBAAa,CAAC,SAAS,CAAC,CAAC,CAAC;iBAChF;aACF;YACD,OAAO,QAAQ,CAAC;QAClB,CAAC;KAAA;IAEK,qBAAqB,CAAC,cAA8B;;YACxD,MAAM,GAAG,GAAG,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;YAC7C,OAAO,IAAI,CAAC,cAAc,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;QAClD,CAAC;KAAA;IAEK,cAAc,CAAC,IAAyB,EAAE,cAA8B;;YAC5E,MAAM,aAAa,GAAG,IAAI,qDAAyB,EAAE,CAAC;YACtD,aAAa,CAAC,cAAc,CAAC,iBAAiB,CAAC,CAAC;YAChD,aAAa,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;YAClC,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAE5B,aAAa,CAAC,sBAAsB,CAAC,cAAc,CAAC,OAAO,EAAE,CAAC,CAAC;YAE/D,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC;YAE9B,MAAM,cAAc,GAAe,EAAE,CAAC;YAEtC,SAAe,0BAA0B;;oBACvC,MAAM,OAAO,GAAG,SAAS,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;oBAEhD,OAAO,IAAI,OAAO,CAAa,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;wBACjD,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,QAAoC,EAAE,EAAE;4BAC1D,QAAQ,CAAC,uBAAuB,EAAE,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,EAAE;gCACtD,cAAc,CAAC,IAAI,CAAC,kBAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;4BACjD,CAAC,CAAC,CAAC;wBACL,CAAC,CAAC,CAAC;wBAEH,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;4BACrB,OAAO,CAAC,cAAc,CAAC,CAAC;wBAC1B,CAAC,CAAC,CAAC;wBAEH,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;4BAC1B,OAAO,CAAC,KAAK,CAAC,sBAAsB,EAAE,GAAG,CAAC,CAAC;4BAC3C,MAAM,CAAC,GAAG,CAAC,CAAC;wBACd,CAAC,CAAC,CAAC;oBACL,CAAC,CAAC,CAAC;gBACL,CAAC;aAAA;YAED,OAAO,MAAM,0BAA0B,EAAE,CAAC;QAC5C,CAAC;KAAA;CACF;AAEQ,0CAAe"}
+{"version":3,"file":"SecurityService.js","sourceRoot":"","sources":["SecurityService.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,+BAAiC;AAMjC,8EAAsD;AAItD,gEAAkD;AAClD,iEAAgF;AAChF,yEAAoE;AAEpE,sBAAsB;AACtB,qHAAwG;AACxG,+GAA4G;AAE5G,iHAA8G;AAG9G,uFAA0D;AAC1D,kDAA+C;AAC/C,0DAA4D;AAC5D,uEAAyD;AAEzD,MAAM,eAAe;IAGnB,YAAY,MAAe;QACzB,IAAI,MAAM,EAAE;YACV,MAAM,EAAE,WAAW,EAAE,YAAY,EAAE,GAAG,wBAAS,CAAC,6BAA6B,CAAC,MAAM,CAAC,CAAC;YACtF,IAAI,CAAC,MAAM,GAAG,IAAI,yCAAc,CAAC,wBAAS,CAAC,MAAM,EAAE,WAAW,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC;SACnF;aAAM;YACL,IAAI,CAAC,MAAM,GAAG,IAAI,yCAAc,CAAC,wBAAS,CAAC,MAAM,EAAE,wBAAS,CAAC,cAAc,CAAC,CAAC;SAC9E;IACH,CAAC;IAEK,sBAAsB,CAAC,QAAuB;;YAClD,qEAAqE;YACrE,qEAAqE;YACrE,uEAAuE;YACvE,mDAAmD;YACnD,IAAA,yCAA4B,EAAC,QAAQ,CAAC,CAAC;YACvC,+DAA+D;YAC/D,mDAAmD;YACnD,IAAA,6BAAY,EAAC,QAAQ,CAAC,CAAC;YAEvB,MAAM,aAAa,GAAG,IAAI,uDAA0B,EAAE,CAAC;YACvD,aAAa,CAAC,cAAc,CAAC,iBAAiB,CAAC,CAAC;YAChD,aAAa,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;YAClC,aAAa,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;YAEzC,MAAM,2BAA2B,GAAG,IAAA,gBAAS,EAAC,IAAI,CAAC,MAAM,CAAC,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;YACpG,MAAM,QAAQ,GAAG,MAAM,2BAA2B,CAAC,aAAa,CAAC,CAAC;YAClE,OAAO,QAAwB,CAAC;QAClC,CAAC;KAAA;IAEK,cAAc,CAAC,QAAuB;;YAC1C,8DAA8D;YAC9D,IAAA,yCAA4B,EAAC,QAAQ,CAAC,CAAC;YACvC,IAAA,6BAAY,EAAC,QAAQ,CAAC,CAAC;YAEvB,MAAM,aAAa,GAAG,IAAI,uDAA0B,EAAE,CAAC;YACvD,aAAa,CAAC,cAAc,CAAC,iBAAiB,CAAC,CAAC;YAChD,aAAa,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;YAClC,aAAa,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;YAEzC,MAAM,mBAAmB,GAAG,IAAA,gBAAS,EAAC,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;YACpF,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC,aAAa,CAAgC,CAAC;YACzF,qEAAqE;YACrE,yEAAyE;YACzE,0EAA0E;YAC1E,MAAM,SAAS,GAAG,QAAQ,CAAC,mBAAmB,EAAE,CAAC;YACjD,IAAI,SAAS,EAAE;gBACb,MAAM,SAAS,GAAG,SAAS,CAAC,OAAO,EAAE,CAAC;gBACtC,MAAM,SAAS,GAAG,SAAS,CAAC,OAAO,EAAE,CAAC;gBACtC,IAAI,SAAS,IAAI,SAAS,EAAE;oBAC1B,MAAM,OAAO,GAAG,WAAI,CAAC,WAAW,CAAC,SAAS,CAAC,eAAe,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;oBACzE,eAAe,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,EAAE,SAAS,EAAE,IAAI,wBAAa,CAAC,SAAS,CAAC,CAAC,CAAC;iBAChF;aACF;YACD,OAAO,QAAQ,CAAC;QAClB,CAAC;KAAA;IAEK,qBAAqB,CAAC,cAA8B;;YACxD,MAAM,GAAG,GAAG,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;YAC7C,OAAO,IAAI,CAAC,cAAc,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;QAClD,CAAC;KAAA;IAEK,cAAc,CAAC,IAAyB,EAAE,cAA8B;;YAC5E,MAAM,aAAa,GAAG,IAAI,qDAAyB,EAAE,CAAC;YACtD,aAAa,CAAC,cAAc,CAAC,iBAAiB,CAAC,CAAC;YAChD,aAAa,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;YAClC,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAE5B,aAAa,CAAC,sBAAsB,CAAC,cAAc,CAAC,OAAO,EAAE,CAAC,CAAC;YAE/D,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC;YAE9B,MAAM,cAAc,GAAe,EAAE,CAAC;YAEtC,SAAe,0BAA0B;;oBACvC,MAAM,OAAO,GAAG,SAAS,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;oBAEhD,OAAO,IAAI,OAAO,CAAa,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;wBACjD,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,QAAoC,EAAE,EAAE;4BAC1D,QAAQ,CAAC,uBAAuB,EAAE,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,EAAE;gCACtD,cAAc,CAAC,IAAI,CAAC,kBAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;4BACjD,CAAC,CAAC,CAAC;wBACL,CAAC,CAAC,CAAC;wBAEH,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;4BACrB,OAAO,CAAC,cAAc,CAAC,CAAC;wBAC1B,CAAC,CAAC,CAAC;wBAEH,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;4BAC1B,OAAO,CAAC,KAAK,CAAC,sBAAsB,EAAE,GAAG,CAAC,CAAC;4BAC3C,MAAM,CAAC,GAAG,CAAC,CAAC;wBACd,CAAC,CAAC,CAAC;oBACL,CAAC,CAAC,CAAC;gBACL,CAAC;aAAA;YAED,OAAO,MAAM,0BAA0B,EAAE,CAAC;QAC5C,CAAC;KAAA;CACF;AAEQ,0CAAe"}

package/node/wrappers/services/security-service/SecurityService.ts

@@ -10,6 +10,7 @@ import Security from '../../models/security/security';
 import { PositionFilter } from '../../models/position/positionfilter';
 import * as dt from '../../models/utils/datetime';
 import { validateIdentifiersForCreate } from '../../models/security/identifier';
+import { requireValid } from '../../models/security/security_rules';
 
 // Requests & Services
 import { SecurityClient } from '../../../fintekkers/services/security-service/security_service_grpc_pb';
@@ -41,6 +42,9 @@ class SecurityService {
     // validateCreateRequest reject so the dry-run RPC can't mask a request
     // that the real createOrUpdate would also fail on.
     validateIdentifiersForCreate(security);
+    // Security input rules (LM-258: a TBILL has no coupon). Throws
+    // ModelValidationError before the gRPC round-trip.
+    requireValid(security);
 
     const createRequest = new CreateSecurityRequestProto();
     createRequest.setObjectClass('SecurityRequest');
@@ -55,6 +59,7 @@ class SecurityService {
   async createSecurity(security: SecurityProto): Promise<CreateSecurityResponseProto> {
     // Client-side guard (#347): see validateCreateSecurity above.
     validateIdentifiersForCreate(security);
+    requireValid(security);
 
     const createRequest = new CreateSecurityRequestProto();
     createRequest.setObjectClass('SecurityRequest');

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@fintekkers/ledger-models",
   "todo": "Replace the version with build script version number",
-  "version": "0.4.17",
+  "version": "0.4.19",
   "description": "ledger model protos ",
   "authors": [
     "David Doherty",