@fintekkers/ledger-models 0.4.3 → 0.4.5

package/jest.config.js

@@ -1,4 +1,14 @@
 module.exports = {
     preset: 'ts-jest',
-    testMatch: ["**/*.test.ts"]
-  };
+    testMatch: ["**/*.test.ts"],
+    // Exclude service-tier tests that connect to gRPC (price-service,
+    // transaction-service, security-service, position-service,
+    // portfolio-service). They pass locally where services are up
+    // and fail in CI with `UNAVAILABLE: No connection established`.
+    // Run via `npm run test:integration` against a separate config.
+    // See processes/test-discipline.md.
+    testPathIgnorePatterns: [
+      "/node_modules/",
+      "node/wrappers/services/[^/]+/.+\\.test\\.ts$",
+    ],
+  };

package/jest.integration.config.js

@@ -0,0 +1,6 @@
+module.exports = {
+    preset: 'ts-jest',
+    // Only the gRPC-touching service-tier tests. Requires real
+    // services running. See processes/test-discipline.md.
+    testMatch: ["**/node/wrappers/services/*/*.test.ts"],
+  };

package/node/fintekkers/models/security/security_pb.d.ts

@@ -54,11 +54,6 @@ export class SecurityProto extends jspb.Message {
     getLegsList(): Array<SecurityProto>;
     setLegsList(value: Array<SecurityProto>): SecurityProto;
     addLegs(value?: SecurityProto, index?: number): SecurityProto;
-
-    hasDeletedAt(): boolean;
-    clearDeletedAt(): void;
-    getDeletedAt(): fintekkers_models_util_local_timestamp_pb.LocalTimestampProto | undefined;
-    setDeletedAt(value?: fintekkers_models_util_local_timestamp_pb.LocalTimestampProto): SecurityProto;
     getAssetClass(): string;
     setAssetClass(value: string): SecurityProto;
     getIssuerName(): string;
@@ -141,7 +136,6 @@ export namespace SecurityProto {
         productType: fintekkers_models_security_product_type_pb.ProductTypeProto,
         instrumentType: fintekkers_models_security_instrument_type_pb.InstrumentTypeProto,
         legsList: Array<SecurityProto.AsObject>,
-        deletedAt?: fintekkers_models_util_local_timestamp_pb.LocalTimestampProto.AsObject,
         assetClass: string,
         issuerName: string,
         settlementCurrency?: SecurityProto.AsObject,

package/node/fintekkers/models/security/security_pb.js

@@ -324,7 +324,6 @@ proto.fintekkers.models.security.SecurityProto.toObject = function(includeInstan
     instrumentType: jspb.Message.getFieldWithDefault(msg, 16, 0),
     legsList: jspb.Message.toObjectList(msg.getLegsList(),
     proto.fintekkers.models.security.SecurityProto.toObject, includeInstance),
-    deletedAt: (f = msg.getDeletedAt()) && fintekkers_models_util_local_timestamp_pb.LocalTimestampProto.toObject(includeInstance, f),
     assetClass: jspb.Message.getFieldWithDefault(msg, 11, ""),
     issuerName: jspb.Message.getFieldWithDefault(msg, 12, ""),
     settlementCurrency: (f = msg.getSettlementCurrency()) && proto.fintekkers.models.security.SecurityProto.toObject(includeInstance, f),
@@ -421,11 +420,6 @@ proto.fintekkers.models.security.SecurityProto.deserializeBinaryFromReader = fun
       reader.readMessage(value,proto.fintekkers.models.security.SecurityProto.deserializeBinaryFromReader);
       msg.addLegs(value);
       break;
-    case 15:
-      var value = new fintekkers_models_util_local_timestamp_pb.LocalTimestampProto;
-      reader.readMessage(value,fintekkers_models_util_local_timestamp_pb.LocalTimestampProto.deserializeBinaryFromReader);
-      msg.setDeletedAt(value);
-      break;
     case 11:
       var value = /** @type {string} */ (reader.readString());
       msg.setAssetClass(value);
@@ -596,14 +590,6 @@ proto.fintekkers.models.security.SecurityProto.serializeBinaryToWriter = functio
       proto.fintekkers.models.security.SecurityProto.serializeBinaryToWriter
     );
   }
-  f = message.getDeletedAt();
-  if (f != null) {
-    writer.writeMessage(
-      15,
-      f,
-      fintekkers_models_util_local_timestamp_pb.LocalTimestampProto.serializeBinaryToWriter
-    );
-  }
   f = message.getAssetClass();
   if (f.length > 0) {
     writer.writeString(
@@ -991,43 +977,6 @@ proto.fintekkers.models.security.SecurityProto.prototype.clearLegsList = functio
 };
 
 
-/**
- * optional fintekkers.models.util.LocalTimestampProto deleted_at = 15;
- * @return {?proto.fintekkers.models.util.LocalTimestampProto}
- */
-proto.fintekkers.models.security.SecurityProto.prototype.getDeletedAt = function() {
-  return /** @type{?proto.fintekkers.models.util.LocalTimestampProto} */ (
-    jspb.Message.getWrapperField(this, fintekkers_models_util_local_timestamp_pb.LocalTimestampProto, 15));
-};
-
-
-/**
- * @param {?proto.fintekkers.models.util.LocalTimestampProto|undefined} value
- * @return {!proto.fintekkers.models.security.SecurityProto} returns this
-*/
-proto.fintekkers.models.security.SecurityProto.prototype.setDeletedAt = function(value) {
-  return jspb.Message.setWrapperField(this, 15, value);
-};
-
-
-/**
- * Clears the message field making it undefined.
- * @return {!proto.fintekkers.models.security.SecurityProto} returns this
- */
-proto.fintekkers.models.security.SecurityProto.prototype.clearDeletedAt = function() {
-  return this.setDeletedAt(undefined);
-};
-
-
-/**
- * Returns whether this field is set.
- * @return {boolean}
- */
-proto.fintekkers.models.security.SecurityProto.prototype.hasDeletedAt = function() {
-  return jspb.Message.getField(this, 15) != null;
-};
-
-
 /**
  * optional string asset_class = 11;
  * @return {string}

package/node/fintekkers/requests/position/query_position_request.packed_enum_v4.test.d.ts

@@ -0,0 +1 @@
+export {};

package/node/fintekkers/requests/position/query_position_request.packed_enum_v4.test.js

@@ -0,0 +1,61 @@
+"use strict";
+// Regression guard for the v4-runtime decode path on packed-enum fields.
+//
+// google-protobuf v4 removed `BinaryReader.prototype.readPackedEnum`. The
+// bundled protoc 3.19.1 generator emits decode code that calls it on every
+// `repeated <enum>` field. compile.sh substitutes the call with the v4
+// `readPackableEnumInto(arr)` equivalent. This test exercises that path
+// end-to-end so a regen-without-patch (or a sed-rule drift) trips CI before
+// shipping.
+//
+// Repro: positions UI hit "reader.readPackedEnum is not a function" on every
+// `/data/positions` request because the QueryPositionRequestProto encode/decode
+// round-trip needed the packed-enum decoder. (second-brain#292)
+Object.defineProperty(exports, "__esModule", { value: true });
+const google_protobuf_1 = require("google-protobuf");
+const query_position_request_pb_1 = require("../../../fintekkers/requests/position/query_position_request_pb");
+const field_pb_1 = require("../../../fintekkers/models/position/field_pb");
+const measure_pb_1 = require("../../../fintekkers/models/position/measure_pb");
+describe("packed-enum decode under google-protobuf v4 (second-brain#292)", () => {
+    test("v4 BinaryReader does NOT expose readPackedEnum (sentinel for the bug)", () => {
+        // If a future google-protobuf release re-adds readPackedEnum, this
+        // assertion flips and the regen can drop the post-process patch.
+        expect(typeof google_protobuf_1.BinaryReader.prototype.readPackedEnum).toBe("undefined");
+    });
+    test("v4 BinaryReader exposes readPackableEnumInto (the replacement target)", () => {
+        expect(typeof google_protobuf_1.BinaryReader.prototype.readPackableEnumInto).toBe("function");
+    });
+    test("QueryPositionRequestProto round-trips packed repeated FieldProto + MeasureProto", () => {
+        const req = new query_position_request_pb_1.QueryPositionRequestProto();
+        req.setFieldsList([
+            field_pb_1.FieldProto.SECURITY,
+            field_pb_1.FieldProto.PORTFOLIO,
+            field_pb_1.FieldProto.AS_OF,
+        ]);
+        req.setMeasuresList([
+            measure_pb_1.MeasureProto.MARKET_VALUE,
+            measure_pb_1.MeasureProto.DIRECTED_QUANTITY,
+        ]);
+        // Encode → bytes → decode. Without the v4-compat substitution this
+        // throws `reader.readPackedEnum is not a function`.
+        const bytes = req.serializeBinary();
+        const decoded = query_position_request_pb_1.QueryPositionRequestProto.deserializeBinary(bytes);
+        expect(decoded.getFieldsList()).toEqual([
+            field_pb_1.FieldProto.SECURITY,
+            field_pb_1.FieldProto.PORTFOLIO,
+            field_pb_1.FieldProto.AS_OF,
+        ]);
+        expect(decoded.getMeasuresList()).toEqual([
+            measure_pb_1.MeasureProto.MARKET_VALUE,
+            measure_pb_1.MeasureProto.DIRECTED_QUANTITY,
+        ]);
+    });
+    test("empty repeated enum lists round-trip cleanly", () => {
+        const req = new query_position_request_pb_1.QueryPositionRequestProto();
+        const bytes = req.serializeBinary();
+        const decoded = query_position_request_pb_1.QueryPositionRequestProto.deserializeBinary(bytes);
+        expect(decoded.getFieldsList()).toEqual([]);
+        expect(decoded.getMeasuresList()).toEqual([]);
+    });
+});
+//# sourceMappingURL=query_position_request.packed_enum_v4.test.js.map

package/node/fintekkers/requests/position/query_position_request.packed_enum_v4.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"query_position_request.packed_enum_v4.test.js","sourceRoot":"","sources":["query_position_request.packed_enum_v4.test.ts"],"names":[],"mappings":";AAAA,yEAAyE;AACzE,EAAE;AACF,0EAA0E;AAC1E,2EAA2E;AAC3E,uEAAuE;AACvE,wEAAwE;AACxE,4EAA4E;AAC5E,YAAY;AACZ,EAAE;AACF,6EAA6E;AAC7E,gFAAgF;AAChF,gEAAgE;;AAEhE,qDAA+C;AAC/C,+GAA4G;AAC5G,2EAA0E;AAC1E,+EAA8E;AAE9E,QAAQ,CAAC,gEAAgE,EAAE,GAAG,EAAE;IAC5E,IAAI,CAAC,uEAAuE,EAAE,GAAG,EAAE;QAC/E,mEAAmE;QACnE,iEAAiE;QACjE,MAAM,CAAC,OAAQ,8BAAY,CAAC,SAAiB,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACpF,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,uEAAuE,EAAE,GAAG,EAAE;QAC/E,MAAM,CAAC,OAAQ,8BAAY,CAAC,SAAiB,CAAC,oBAAoB,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACzF,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,iFAAiF,EAAE,GAAG,EAAE;QACzF,MAAM,GAAG,GAAG,IAAI,qDAAyB,EAAE,CAAC;QAC5C,GAAG,CAAC,aAAa,CAAC;YACd,qBAAU,CAAC,QAAQ;YACnB,qBAAU,CAAC,SAAS;YACpB,qBAAU,CAAC,KAAK;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,eAAe,CAAC;YAChB,yBAAY,CAAC,YAAY;YACzB,yBAAY,CAAC,iBAAiB;SACjC,CAAC,CAAC;QAEH,mEAAmE;QACnE,oDAAoD;QACpD,MAAM,KAAK,GAAG,GAAG,CAAC,eAAe,EAAE,CAAC;QACpC,MAAM,OAAO,GAAG,qDAAyB,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;QAEnE,MAAM,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC;YACpC,qBAAU,CAAC,QAAQ;YACnB,qBAAU,CAAC,SAAS;YACpB,qBAAU,CAAC,KAAK;SACnB,CAAC,CAAC;QACH,MAAM,CAAC,OAAO,CAAC,eAAe,EAAE,CAAC,CAAC,OAAO,CAAC;YACtC,yBAAY,CAAC,YAAY;YACzB,yBAAY,CAAC,iBAAiB;SACjC,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,8CAA8C,EAAE,GAAG,EAAE;QACtD,MAAM,GAAG,GAAG,IAAI,qDAAyB,EAAE,CAAC;QAC5C,MAAM,KAAK,GAAG,GAAG,CAAC,eAAe,EAAE,CAAC;QACpC,MAAM,OAAO,GAAG,qDAAyB,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;QACnE,MAAM,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC5C,MAAM,CAAC,OAAO,CAAC,eAAe,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC"}

package/node/fintekkers/requests/position/query_position_request.packed_enum_v4.test.ts

@@ -0,0 +1,65 @@
+// Regression guard for the v4-runtime decode path on packed-enum fields.
+//
+// google-protobuf v4 removed `BinaryReader.prototype.readPackedEnum`. The
+// bundled protoc 3.19.1 generator emits decode code that calls it on every
+// `repeated <enum>` field. compile.sh substitutes the call with the v4
+// `readPackableEnumInto(arr)` equivalent. This test exercises that path
+// end-to-end so a regen-without-patch (or a sed-rule drift) trips CI before
+// shipping.
+//
+// Repro: positions UI hit "reader.readPackedEnum is not a function" on every
+// `/data/positions` request because the QueryPositionRequestProto encode/decode
+// round-trip needed the packed-enum decoder. (second-brain#292)
+
+import { BinaryReader } from "google-protobuf";
+import { QueryPositionRequestProto } from "../../../fintekkers/requests/position/query_position_request_pb";
+import { FieldProto } from "../../../fintekkers/models/position/field_pb";
+import { MeasureProto } from "../../../fintekkers/models/position/measure_pb";
+
+describe("packed-enum decode under google-protobuf v4 (second-brain#292)", () => {
+    test("v4 BinaryReader does NOT expose readPackedEnum (sentinel for the bug)", () => {
+        // If a future google-protobuf release re-adds readPackedEnum, this
+        // assertion flips and the regen can drop the post-process patch.
+        expect(typeof (BinaryReader.prototype as any).readPackedEnum).toBe("undefined");
+    });
+
+    test("v4 BinaryReader exposes readPackableEnumInto (the replacement target)", () => {
+        expect(typeof (BinaryReader.prototype as any).readPackableEnumInto).toBe("function");
+    });
+
+    test("QueryPositionRequestProto round-trips packed repeated FieldProto + MeasureProto", () => {
+        const req = new QueryPositionRequestProto();
+        req.setFieldsList([
+            FieldProto.SECURITY,
+            FieldProto.PORTFOLIO,
+            FieldProto.AS_OF,
+        ]);
+        req.setMeasuresList([
+            MeasureProto.MARKET_VALUE,
+            MeasureProto.DIRECTED_QUANTITY,
+        ]);
+
+        // Encode → bytes → decode. Without the v4-compat substitution this
+        // throws `reader.readPackedEnum is not a function`.
+        const bytes = req.serializeBinary();
+        const decoded = QueryPositionRequestProto.deserializeBinary(bytes);
+
+        expect(decoded.getFieldsList()).toEqual([
+            FieldProto.SECURITY,
+            FieldProto.PORTFOLIO,
+            FieldProto.AS_OF,
+        ]);
+        expect(decoded.getMeasuresList()).toEqual([
+            MeasureProto.MARKET_VALUE,
+            MeasureProto.DIRECTED_QUANTITY,
+        ]);
+    });
+
+    test("empty repeated enum lists round-trip cleanly", () => {
+        const req = new QueryPositionRequestProto();
+        const bytes = req.serializeBinary();
+        const decoded = QueryPositionRequestProto.deserializeBinary(bytes);
+        expect(decoded.getFieldsList()).toEqual([]);
+        expect(decoded.getMeasuresList()).toEqual([]);
+    });
+});

package/node/fintekkers/requests/position/query_position_request_pb.js

@@ -160,13 +160,13 @@ proto.fintekkers.requests.position.QueryPositionRequestProto.deserializeBinaryFr
       msg.setPositionView(value);
       break;
     case 30:
-      var values = /** @type {!Array<!proto.fintekkers.models.position.FieldProto>} */ (reader.isDelimited() ? reader.readPackedEnum() : [reader.readEnum()]);
+      var values = /** @type {!Array<!proto.fintekkers.models.position.FieldProto>} */ (reader.isDelimited() ? (function(){var arr=[];reader.readPackableEnumInto(arr);return arr;})() : [reader.readEnum()]);
       for (var i = 0; i < values.length; i++) {
         msg.addFields(values[i]);
       }
       break;
     case 31:
-      var values = /** @type {!Array<!proto.fintekkers.models.position.MeasureProto>} */ (reader.isDelimited() ? reader.readPackedEnum() : [reader.readEnum()]);
+      var values = /** @type {!Array<!proto.fintekkers.models.position.MeasureProto>} */ (reader.isDelimited() ? (function(){var arr=[];reader.readPackableEnumInto(arr);return arr;})() : [reader.readEnum()]);
       for (var i = 0; i < values.length; i++) {
         msg.addMeasures(values[i]);
       }

package/node/fintekkers/requests/security/get_fields_response_pb.js

@@ -132,7 +132,7 @@ proto.fintekkers.requests.security.GetFieldsResponseProto.deserializeBinaryFromR
       msg.setVersion(value);
       break;
     case 10:
-      var values = /** @type {!Array<!proto.fintekkers.models.position.FieldProto>} */ (reader.isDelimited() ? reader.readPackedEnum() : [reader.readEnum()]);
+      var values = /** @type {!Array<!proto.fintekkers.models.position.FieldProto>} */ (reader.isDelimited() ? (function(){var arr=[];reader.readPackableEnumInto(arr);return arr;})() : [reader.readEnum()]);
       for (var i = 0; i < values.length; i++) {
         msg.addFields(values[i]);
       }

package/node/fintekkers/requests/valuation/curve_request_pb.js

@@ -477,7 +477,7 @@ proto.fintekkers.requests.valuation.CurveRequestProto.deserializeBinaryFromReade
       msg.setAsofDatetime(value);
       break;
     case 20:
-      var values = /** @type {!Array<!proto.fintekkers.models.position.MeasureProto>} */ (reader.isDelimited() ? reader.readPackedEnum() : [reader.readEnum()]);
+      var values = /** @type {!Array<!proto.fintekkers.models.position.MeasureProto>} */ (reader.isDelimited() ? (function(){var arr=[];reader.readPackableEnumInto(arr);return arr;})() : [reader.readEnum()]);
       for (var i = 0; i < values.length; i++) {
         msg.addCurveTypes(values[i]);
       }

package/node/fintekkers/requests/valuation/valuation_request_pb.js

@@ -156,7 +156,7 @@ proto.fintekkers.requests.valuation.ValuationRequestProto.deserializeBinaryFromR
       msg.setOperationType(value);
       break;
     case 30:
-      var values = /** @type {!Array<!proto.fintekkers.models.position.MeasureProto>} */ (reader.isDelimited() ? reader.readPackedEnum() : [reader.readEnum()]);
+      var values = /** @type {!Array<!proto.fintekkers.models.position.MeasureProto>} */ (reader.isDelimited() ? (function(){var arr=[];reader.readPackableEnumInto(arr);return arr;})() : [reader.readEnum()]);
       for (var i = 0; i < values.length; i++) {
         msg.addMeasures(values[i]);
       }

package/node/wrappers/models/security/security.d.ts

@@ -138,6 +138,19 @@ declare class Security {
      */
     protected getBondLikeDetails(): any | undefined;
     getIssuerName(): string;
+    /**
+     * Time-based soft-delete check. A Security is considered deleted iff it
+     * carries a `valid_to` that has already elapsed at `asOf`. A future-dated
+     * `valid_to` means the row is still live today and becomes deleted
+     * automatically when `asOf` catches up. An unset `valid_to` is always
+     * active.
+     *
+     * Canonical soft-delete check across the platform — the predecessor
+     * `SecurityProto.deleted_at` field has been removed (tag 15 reserved).
+     * See /specs/soft-delete-validto-collapse.md
+     * (FinTekkers/second-brain#316).
+     */
+    isDeleted(asOf?: Date): boolean;
     equals(other: Security): boolean;
 }
 export default Security;

package/node/wrappers/models/security/security.isDeleted.test.d.ts

@@ -0,0 +1 @@
+export {};

package/node/wrappers/models/security/security.isDeleted.test.js

@@ -0,0 +1,89 @@
+"use strict";
+// Time-based soft-delete tests for the Security wrapper.
+//
+// Phase A of /specs/soft-delete-validto-collapse.md
+// (FinTekkers/second-brain#316). The SecurityProto.deleted_at field has been
+// removed (tag 15 reserved). The single canonical soft-delete check is
+// Security.isDeleted(asOf), which honours valid_to with a time-based
+// comparison.
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const security_1 = __importDefault(require("./security"));
+const security_pb_1 = require("../../../fintekkers/models/security/security_pb");
+const local_timestamp_pb_1 = require("../../../fintekkers/models/util/local_timestamp_pb");
+const timestamp_pb_1 = require("google-protobuf/google/protobuf/timestamp_pb");
+function localTimestamp(seconds) {
+    const ts = new timestamp_pb_1.Timestamp();
+    ts.setSeconds(seconds);
+    ts.setNanos(0);
+    const lt = new local_timestamp_pb_1.LocalTimestampProto();
+    lt.setTimestamp(ts);
+    lt.setTimeZone('UTC');
+    return lt;
+}
+function securityWithValidTo(seconds) {
+    const proto = new security_pb_1.SecurityProto();
+    if (seconds !== null) {
+        proto.setValidTo(localTimestamp(seconds));
+    }
+    return new security_1.default(proto);
+}
+describe('Security.isDeleted (Phase A — validTo time-based check)', () => {
+    test('null validTo is never deleted', () => {
+        const sec = securityWithValidTo(null);
+        expect(sec.isDeleted()).toBe(false);
+        expect(sec.isDeleted(new Date('2999-01-01T00:00:00Z'))).toBe(false);
+    });
+    test('past validTo is deleted now', () => {
+        const past = Math.floor(Date.now() / 1000) - 86400; // yesterday
+        const sec = securityWithValidTo(past);
+        expect(sec.isDeleted()).toBe(true);
+    });
+    test('future validTo is not yet deleted but becomes deleted when asOf catches up', () => {
+        const future = Math.floor(Date.now() / 1000) + 86400; // tomorrow
+        const sec = securityWithValidTo(future);
+        expect(sec.isDeleted()).toBe(false);
+        const later = new Date((future + 1) * 1000);
+        expect(sec.isDeleted(later)).toBe(true);
+    });
+    test('asOf parameter switches the answer', () => {
+        // validTo fixed at 2026-01-01 UTC
+        const cutoff = Math.floor(Date.UTC(2026, 0, 1) / 1000);
+        const sec = securityWithValidTo(cutoff);
+        expect(sec.isDeleted(new Date(Date.UTC(2025, 5, 1)))).toBe(false);
+        expect(sec.isDeleted(new Date(Date.UTC(2026, 5, 1)))).toBe(true);
+    });
+    test('proto round-trip with legacy deleted_at bytes is silently dropped', () => {
+        // Build canonical bytes then append a tag-15 LocalTimestampProto.
+        // proto3 must ignore unknown fields; tag 15 is reserved on the new
+        // schema so the value is dropped. See spec §4.2.
+        const base = new security_pb_1.SecurityProto();
+        base.setIssuerName('legacy-issuer');
+        const canonical = base.serializeBinary();
+        // Inner Timestamp: field 1 (seconds), varint, value=1700000000
+        //   key = (1<<3)|0 = 0x08
+        const innerTs = [0x08];
+        let v = 1700000000;
+        while (v >= 0x80) {
+            innerTs.push((v & 0x7F) | 0x80);
+            v >>>= 7;
+        }
+        innerTs.push(v);
+        // LocalTimestampProto: field 1 (timestamp), length-delim
+        const outer = [0x0A, innerTs.length, ...innerTs];
+        // SecurityProto.deleted_at: field 15, length-delim
+        //   key = (15<<3)|2 = 0x7A
+        const legacy = [0x7A, outer.length, ...outer];
+        const combined = new Uint8Array(canonical.length + legacy.length);
+        combined.set(canonical, 0);
+        combined.set(legacy, canonical.length);
+        // Must not throw.
+        const reparsed = security_pb_1.SecurityProto.deserializeBinary(combined);
+        expect(reparsed.getIssuerName()).toBe('legacy-issuer');
+        // The legacy tag must NOT be silently mapped onto valid_to.
+        expect(reparsed.hasValidTo()).toBe(false);
+    });
+});
+//# sourceMappingURL=security.isDeleted.test.js.map

package/node/wrappers/models/security/security.isDeleted.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.isDeleted.test.js","sourceRoot":"","sources":["security.isDeleted.test.ts"],"names":[],"mappings":";AAAA,yDAAyD;AACzD,EAAE;AACF,oDAAoD;AACpD,6EAA6E;AAC7E,uEAAuE;AACvE,qEAAqE;AACrE,cAAc;;;;;AAEd,0DAAkC;AAClC,iFAAgF;AAChF,2FAAyF;AACzF,+EAAyE;AAEzE,SAAS,cAAc,CAAC,OAAe;IACnC,MAAM,EAAE,GAAG,IAAI,wBAAS,EAAE,CAAC;IAC3B,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;IACvB,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IACf,MAAM,EAAE,GAAG,IAAI,wCAAmB,EAAE,CAAC;IACrC,EAAE,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;IACpB,EAAE,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;IACtB,OAAO,EAAE,CAAC;AACd,CAAC;AAED,SAAS,mBAAmB,CAAC,OAAsB;IAC/C,MAAM,KAAK,GAAG,IAAI,2BAAa,EAAE,CAAC;IAClC,IAAI,OAAO,KAAK,IAAI,EAAE;QAClB,KAAK,CAAC,UAAU,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC;KAC7C;IACD,OAAO,IAAI,kBAAQ,CAAC,KAAK,CAAC,CAAC;AAC/B,CAAC;AAED,QAAQ,CAAC,yDAAyD,EAAE,GAAG,EAAE;IACrE,IAAI,CAAC,+BAA+B,EAAE,GAAG,EAAE;QACvC,MAAM,GAAG,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;QACtC,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACpC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACxE,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,6BAA6B,EAAE,GAAG,EAAE;QACrC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,KAAM,CAAC,CAAC,YAAY;QACjE,MAAM,GAAG,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;QACtC,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,4EAA4E,EAAE,GAAG,EAAE;QACpF,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,KAAM,CAAC,CAAC,WAAW;QAClE,MAAM,GAAG,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;QACxC,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACpC,MAAM,KAAK,GAAG,IAAI,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;QAC5C,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC5C,kCAAkC;QAClC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;QACvD,MAAM,GAAG,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;QACxC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClE,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrE,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,mEAAmE,EAAE,GAAG,EAAE;QAC3E,kEAAkE;QAClE,mEAAmE;QACnE,iDAAiD;QACjD,MAAM,IAAI,GAAG,IAAI,2BAAa,EAAE,CAAC;QACjC,IAAI,CAAC,aAAa,CAAC,eAAe,CAAC,CAAC;QACpC,MAAM,SAAS,GAAG,IAAI,CAAC,eAAe,EAAE,CAAC;QAEzC,+DAA+D;QAC/D,0BAA0B;QAC1B,MAAM,OAAO,GAAa,CAAC,IAAI,CAAC,CAAC;QACjC,IAAI,CAAC,GAAG,UAAa,CAAC;QACtB,OAAO,CAAC,IAAI,IAAI,EAAE;YACd,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;YAChC,CAAC,MAAM,CAAC,CAAC;SACZ;QACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAEhB,yDAAyD;QACzD,MAAM,KAAK,GAAa,CAAC,IAAI,EAAE,OAAO,CAAC,MAAM,EAAE,GAAG,OAAO,CAAC,CAAC;QAE3D,mDAAmD;QACnD,2BAA2B;QAC3B,MAAM,MAAM,GAAa,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC;QAExD,MAAM,QAAQ,GAAG,IAAI,UAAU,CAAC,SAAS,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;QAClE,QAAQ,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;QAC3B,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC;QAEvC,kBAAkB;QAClB,MAAM,QAAQ,GAAG,2BAAa,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC;QAC3D,MAAM,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QACvD,4DAA4D;QAC5D,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC"}

package/node/wrappers/models/security/security.isDeleted.test.ts

@@ -0,0 +1,96 @@
+// Time-based soft-delete tests for the Security wrapper.
+//
+// Phase A of /specs/soft-delete-validto-collapse.md
+// (FinTekkers/second-brain#316). The SecurityProto.deleted_at field has been
+// removed (tag 15 reserved). The single canonical soft-delete check is
+// Security.isDeleted(asOf), which honours valid_to with a time-based
+// comparison.
+
+import Security from './security';
+import { SecurityProto } from '../../../fintekkers/models/security/security_pb';
+import { LocalTimestampProto } from '../../../fintekkers/models/util/local_timestamp_pb';
+import { Timestamp } from 'google-protobuf/google/protobuf/timestamp_pb';
+
+function localTimestamp(seconds: number): LocalTimestampProto {
+    const ts = new Timestamp();
+    ts.setSeconds(seconds);
+    ts.setNanos(0);
+    const lt = new LocalTimestampProto();
+    lt.setTimestamp(ts);
+    lt.setTimeZone('UTC');
+    return lt;
+}
+
+function securityWithValidTo(seconds: number | null): Security {
+    const proto = new SecurityProto();
+    if (seconds !== null) {
+        proto.setValidTo(localTimestamp(seconds));
+    }
+    return new Security(proto);
+}
+
+describe('Security.isDeleted (Phase A — validTo time-based check)', () => {
+    test('null validTo is never deleted', () => {
+        const sec = securityWithValidTo(null);
+        expect(sec.isDeleted()).toBe(false);
+        expect(sec.isDeleted(new Date('2999-01-01T00:00:00Z'))).toBe(false);
+    });
+
+    test('past validTo is deleted now', () => {
+        const past = Math.floor(Date.now() / 1000) - 86_400; // yesterday
+        const sec = securityWithValidTo(past);
+        expect(sec.isDeleted()).toBe(true);
+    });
+
+    test('future validTo is not yet deleted but becomes deleted when asOf catches up', () => {
+        const future = Math.floor(Date.now() / 1000) + 86_400; // tomorrow
+        const sec = securityWithValidTo(future);
+        expect(sec.isDeleted()).toBe(false);
+        const later = new Date((future + 1) * 1000);
+        expect(sec.isDeleted(later)).toBe(true);
+    });
+
+    test('asOf parameter switches the answer', () => {
+        // validTo fixed at 2026-01-01 UTC
+        const cutoff = Math.floor(Date.UTC(2026, 0, 1) / 1000);
+        const sec = securityWithValidTo(cutoff);
+        expect(sec.isDeleted(new Date(Date.UTC(2025, 5, 1)))).toBe(false);
+        expect(sec.isDeleted(new Date(Date.UTC(2026, 5, 1)))).toBe(true);
+    });
+
+    test('proto round-trip with legacy deleted_at bytes is silently dropped', () => {
+        // Build canonical bytes then append a tag-15 LocalTimestampProto.
+        // proto3 must ignore unknown fields; tag 15 is reserved on the new
+        // schema so the value is dropped. See spec §4.2.
+        const base = new SecurityProto();
+        base.setIssuerName('legacy-issuer');
+        const canonical = base.serializeBinary();
+
+        // Inner Timestamp: field 1 (seconds), varint, value=1700000000
+        //   key = (1<<3)|0 = 0x08
+        const innerTs: number[] = [0x08];
+        let v = 1_700_000_000;
+        while (v >= 0x80) {
+            innerTs.push((v & 0x7F) | 0x80);
+            v >>>= 7;
+        }
+        innerTs.push(v);
+
+        // LocalTimestampProto: field 1 (timestamp), length-delim
+        const outer: number[] = [0x0A, innerTs.length, ...innerTs];
+
+        // SecurityProto.deleted_at: field 15, length-delim
+        //   key = (15<<3)|2 = 0x7A
+        const legacy: number[] = [0x7A, outer.length, ...outer];
+
+        const combined = new Uint8Array(canonical.length + legacy.length);
+        combined.set(canonical, 0);
+        combined.set(legacy, canonical.length);
+
+        // Must not throw.
+        const reparsed = SecurityProto.deserializeBinary(combined);
+        expect(reparsed.getIssuerName()).toBe('legacy-issuer');
+        // The legacy tag must NOT be silently mapped onto valid_to.
+        expect(reparsed.hasValidTo()).toBe(false);
+    });
+});

package/node/wrappers/models/security/security.js

@@ -318,6 +318,30 @@ class Security {
         this.assertNotLink('issuerName');
         return this.proto.getIssuerName();
     }
+    /**
+     * Time-based soft-delete check. A Security is considered deleted iff it
+     * carries a `valid_to` that has already elapsed at `asOf`. A future-dated
+     * `valid_to` means the row is still live today and becomes deleted
+     * automatically when `asOf` catches up. An unset `valid_to` is always
+     * active.
+     *
+     * Canonical soft-delete check across the platform — the predecessor
+     * `SecurityProto.deleted_at` field has been removed (tag 15 reserved).
+     * See /specs/soft-delete-validto-collapse.md
+     * (FinTekkers/second-brain#316).
+     */
+    isDeleted(asOf = new Date()) {
+        if (!this.proto.hasValidTo())
+            return false;
+        const validToProto = this.proto.getValidTo();
+        if (!validToProto)
+            return false;
+        const ts = validToProto.getTimestamp();
+        if (!ts)
+            return false;
+        const validToMs = ts.getSeconds() * 1000 + Math.floor(ts.getNanos() / 1e6);
+        return validToMs < asOf.getTime();
+    }
     equals(other) {
         if (other instanceof Security) {
             return this.getID().equals(other.getID());

package/node/wrappers/models/security/security.js.map

@@ -1 +1 @@
-{"version":3,"file":"security.js","sourceRoot":"","sources":["security.ts"],"names":[],"mappings":";;AAAA,2EAA0E;AAC1E,iFAAgF;AAGhF,gDAAkD;AAClD,wCAAqC;AACrC,wCAAqD;AACrD,yFAAuF;AAEvF,6CAA0C;AAC1C,2DAAqD;AAErD,MAAM,QAAQ;IAGZ,YAAY,KAAoB;QAC9B,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IACrB,CAAC;IAED;;;;;;;;;;OAUG;IACH,MAAM,CAAC,MAAM,CAAC,IAAU,EAAE,IAAmB;QAC3C,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;QAC1D,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,kFAAkF,CAAC,CAAC;QAC/G,MAAM,KAAK,GAAG,IAAI,2BAAa,EAAE,CAAC;QAClC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACtB,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;QAC3C,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC;QACpD,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;;;OAIG;IACH,MAAM,CAAC,YAAY,CAAC,IAAU;QAC5B,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;QAChE,MAAM,KAAK,GAAG,IAAI,2BAAa,EAAE,CAAC;QAClC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACtB,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;QAC3C,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,MAAM,CAAC,YAAY,CAAC,IAAU;QACpC,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC;IAC5B,CAAC;IAEO,MAAM,CAAC,qBAAqB,CAAC,IAAmB;QACtD,OAAO,IAAI,CAAC,OAAO,EAAE,CAAC;IACxB,CAAC;IAED;;;OAGG;IACK,aAAa,CAAC,QAAgB;QACpC,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE;YAC1B,MAAM,IAAI,KAAK,CACb,eAAe,QAAQ,2CAA2C;kBAChE,8CAA8C;kBAC9C,kCAAkC,CACrC,CAAC;SACH;IACH,CAAC;IAED;;;;;;;;;OASG;IACH,MAAM,CAAC,MAAM,CAAC,KAAoB;QAChC,MAAM,WAAW,GAAG,KAAK,CAAC,cAAc,EAAE,CAAC;QAC3C,MAAM,MAAM,GAAI,MAAM,CAAC,IAAI,CAAC,kCAAgB,CAA0C;aACnF,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,kCAAgB,CAAC,CAAC,CAAC,KAAK,WAAW,CAAC,CAAC;QAElD,8EAA8E;QAC9E,IAAI,WAAW,KAAK,kCAAgB,CAAC,IAAI,EAAE;YACzC,MAAM,QAAQ,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC,OAAO,CAAC;YAC/C,OAAO,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC;SAC5B;QACD,IAAI,WAAW,KAAK,kCAAgB,CAAC,YAAY,EAAE;YACjD,MAAM,gBAAgB,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC,OAAO,CAAC;YAC/D,OAAO,IAAI,gBAAgB,CAAC,KAAK,CAAC,CAAC;SACpC;QACD,IAAI,WAAW,KAAK,kCAAgB,CAAC,eAAe,EAAE;YACpD,MAAM,sBAAsB,GAAG,OAAO,CAAC,0BAA0B,CAAC,CAAC,OAAO,CAAC;YAC3E,OAAO,IAAI,sBAAsB,CAAC,KAAK,CAAC,CAAC;SAC1C;QAED,6DAA6D;QAC7D,IAAI,MAAM,IAAI,IAAA,kCAAc,EAAC,MAAgB,EAAE,MAAM,CAAC,EAAE;YACtD,MAAM,YAAY,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC,OAAO,CAAC;YACvD,OAAO,IAAI,YAAY,CAAC,KAAK,CAAC,CAAC;SAChC;QAED,mDAAmD;QACnD,IAAI,MAAM,IAAI,IAAA,kCAAc,EAAC,MAAgB,EAAE,OAAO,CAAC,EAAE;YACvD,MAAM,aAAa,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC,OAAO,CAAC;YACzD,OAAO,IAAI,aAAa,CAAC,KAAK,CAAC,CAAC;SACjC;QAED,OAAO,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC7B,CAAC;IAED;;;;;;;;;;;OAWG;IACH,MAAM;QACJ,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC;QACtC,MAAM,MAAM,GAAI,MAAM,CAAC,IAAI,CAAC,kCAAgB,CAA0C;aACnF,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,kCAAgB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;QACxC,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAC1B,OAAO,IAAA,kCAAc,EAAC,MAAgB,EAAE,MAAM,CAAC,CAAC;IAClD,CAAC;IAED;;;;OAIG;IACH,KAAK;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,KAAK,kCAAgB,CAAC,eAAe,CAAC;IAC1E,CAAC;IAED;;;OAGG;IACH,OAAO;QACL,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC;QACtC,MAAM,MAAM,GAAI,MAAM,CAAC,IAAI,CAAC,kCAAgB,CAA0C;aACnF,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,kCAAgB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;QACxC,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAC1B,OAAO,IAAA,kCAAc,EAAC,MAAgB,EAAE,OAAO,CAAC,CAAC;IACnD,CAAC;IAED;;;;OAIG;IACH,MAAM;QACJ,OAAO,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,KAAK,kCAAgB,CAAC,QAAQ,CAAC;IACnE,CAAC;IAED;;;;;OAKG;IACH,QAAQ;QACN,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC;QACtC,MAAM,MAAM,GAAI,MAAM,CAAC,IAAI,CAAC,kCAAgB,CAA0C;aACnF,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,kCAAgB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;QACxC,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAC1B,OAAO,IAAA,kCAAc,EAAC,MAAgB,EAAE,OAAO,CAAC,CAAC;IACnD,CAAC;IAED;;;;OAIG;IACH,QAAQ;QACN,OAAO,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,KAAK,kCAAgB,CAAC,OAAO,CAAC;IAClE,CAAC;IAGD,QAAQ;QACN,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,kBAAkB,EAAE,CAAC;QAC1E,MAAM,KAAK,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC;YACjC,CAAC,CAAC,IAAI,uBAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;YACnC,CAAC,CAAC,iBAAiB,CAAC;QACtB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;QACxE,OAAO,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,IAAI,MAAM,GAAG,CAAC;IAC/D,CAAC;IAED,SAAS;QACP,OAAO,CAAC,qBAAU,CAAC,EAAE,EAAE,qBAAU,CAAC,WAAW,EAAE,qBAAU,CAAC,KAAK,EAAE,qBAAU,CAAC,WAAW,EAAE,qBAAU,CAAC,UAAU,CAAC,CAAC;IAClH,CAAC;IAED,QAAQ,CAAC,KAAiB;QACxB,QAAQ,KAAK,EAAE;YACb,KAAK,qBAAU,CAAC,EAAE,CAAC;YACnB,KAAK,qBAAU,CAAC,WAAW;gBACzB,OAAO,IAAI,CAAC,KAAK,EAAE,CAAC;YACtB,KAAK,qBAAU,CAAC,KAAK;gBACnB,OAAO,IAAI,CAAC,OAAO,EAAE,CAAC;YACxB,KAAK,qBAAU,CAAC,WAAW;gBACzB,OAAO,IAAI,CAAC,aAAa,EAAE,CAAC;YAC9B,KAAK,qBAAU,CAAC,aAAa;gBAC3B,OAAO,IAAI,CAAC,eAAe,EAAE,CAAC;YAChC,KAAK,qBAAU,CAAC,YAAY;gBAC1B,OAAO,IAAI,CAAC,cAAc,EAAE,CAAC;YAC/B,KAAK,qBAAU,CAAC,UAAU,CAAC,CAAC;gBAC1B,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,kBAAkB,EAAE,CAAC;gBAC7C,OAAO,IAAI,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,uBAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;aACjE;YACD,KAAK,qBAAU,CAAC,KAAK,CAAC;YACtB,KAAK,qBAAU,CAAC,cAAc;gBAC5B,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;YACzC,KAAK,qBAAU,CAAC,aAAa;gBAC3B,+DAA+D;gBAC/D,uDAAuD;gBACvD,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;YACvD,KAAK,qBAAU,CAAC,UAAU;gBACxB,gEAAgE;gBAChE,OAAO,IAAI,CAAC,YAAY,EAAE,CAAC;YAC7B;gBACE,MAAM,IAAI,KAAK,CAAC,yCAAyC,KAAK,EAAE,CAAC,CAAC;SACrE;IACH,CAAC;IAED,KAAK;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;QAClC,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;QAC/C,OAAO,WAAI,CAAC,WAAW,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC,CAAC;IAClD,CAAC;IAED;;;;OAIG;IACH,MAAM;QACJ,OAAO,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;IAChC,CAAC;IAED,OAAO;QACL,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;QAClC,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;QAC/C,OAAO,IAAI,wBAAa,CAAC,IAAI,CAAC,CAAC;IACjC,CAAC;IAED,aAAa;QACX,IAAI,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC;QACjC,OAAO,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,CAAC;IACpC,CAAC;IAED,eAAe;QACb,IAAI,CAAC,aAAa,CAAC,cAAc,CAAC,CAAC;QACnC,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;IAChF,CAAC;IAED,cAAc;QACZ,IAAI,CAAC,aAAa,CAAC,aAAa,CAAC,CAAC;QAClC,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC;QACjD,MAAM,kBAAkB,GAAI,MAAM,CAAC,IAAI,CAAC,kCAAgB,CAA0C,CAAC,IAAI,CACrG,GAAG,CAAC,EAAE,CAAC,kCAAgB,CAAC,GAAG,CAAC,KAAK,YAAY,CAC9C,CAAC;QAEF,OAAO,kBAAkB,IAAI,uBAAuB,CAAC;IACvD,CAAC;IAED;;;OAGG;IACH,cAAc;QACZ,IAAI,CAAC,aAAa,CAAC,aAAa,CAAC,CAAC;QAClC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,kBAAkB,EAAE,CAAC;QAC7C,IAAI,CAAC,IAAI;YAAE,OAAO,EAAE,CAAC;QACrB,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,uBAAU,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1C,CAAC;IAED;;;OAGG;IACH,mBAAmB,CAAC,IAAyB;QAC3C,IAAI,CAAC,aAAa,CAAC,kBAAkB,CAAC,CAAC;QACvC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,kBAAkB,EAAE,CAAC;QAC7C,IAAI,CAAC,IAAI;YAAE,OAAO,SAAS,CAAC;QAC5B,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,iBAAiB,EAAE,KAAK,IAAI,CAAC,CAAC;QAC7D,OAAO,KAAK,CAAC,CAAC,CAAC,IAAI,uBAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACnD,CAAC;IAED;;;;;;;;;;;;OAYG;IACH,YAAY;QACV,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC,CAAC;QAChC,MAAM,IAAI,GAAG,IAAI,CAAC,kBAAkB,EAAE,CAAC;QACvC,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QACpD,OAAO,IAAA,2BAAoB,EAAC,IAAI,CAAC,CAAC;IACpC,CAAC;IAED;;;;;OAKG;IACH,eAAe;QACb,IAAI,CAAC,aAAa,CAAC,cAAc,CAAC,CAAC;QACnC,MAAM,IAAI,GAAG,IAAI,CAAC,kBAAkB,EAAE,CAAC;QACvC,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QACvD,OAAO,IAAA,2BAAoB,EAAC,IAAI,CAAC,CAAC;IACpC,CAAC;IAED;;;;OAIG;IACO,kBAAkB;;QAC1B,IAAI,OAAO,IAAI,CAAC,KAAK,CAAC,cAAc,KAAK,UAAU;YAAE,OAAO,SAAS,CAAC;QACtE,OAAO,MAAA,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,mCAAI,SAAS,CAAC;IAClD,CAAC;IAED,aAAa;QACX,IAAI,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC;QACjC,OAAO,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,CAAC;IACpC,CAAC;IAED,MAAM,CAAC,KAAe;QACpB,IAAI,KAAK,YAAY,QAAQ,EAAE;YAC7B,OAAO,IAAI,CAAC,KAAK,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;SAC3C;aAAM;YACL,OAAO,KAAK,CAAC;SACd;IACH,CAAC;CACF;AAED,kBAAe,QAAQ,CAAC"}
+{"version":3,"file":"security.js","sourceRoot":"","sources":["security.ts"],"names":[],"mappings":";;AAAA,2EAA0E;AAC1E,iFAAgF;AAGhF,gDAAkD;AAClD,wCAAqC;AACrC,wCAAqD;AACrD,yFAAuF;AAEvF,6CAA0C;AAC1C,2DAAqD;AAErD,MAAM,QAAQ;IAGZ,YAAY,KAAoB;QAC9B,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IACrB,CAAC;IAED;;;;;;;;;;OAUG;IACH,MAAM,CAAC,MAAM,CAAC,IAAU,EAAE,IAAmB;QAC3C,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;QAC1D,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,kFAAkF,CAAC,CAAC;QAC/G,MAAM,KAAK,GAAG,IAAI,2BAAa,EAAE,CAAC;QAClC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACtB,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;QAC3C,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC;QACpD,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;;;OAIG;IACH,MAAM,CAAC,YAAY,CAAC,IAAU;QAC5B,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;QAChE,MAAM,KAAK,GAAG,IAAI,2BAAa,EAAE,CAAC;QAClC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACtB,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;QAC3C,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,MAAM,CAAC,YAAY,CAAC,IAAU;QACpC,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC;IAC5B,CAAC;IAEO,MAAM,CAAC,qBAAqB,CAAC,IAAmB;QACtD,OAAO,IAAI,CAAC,OAAO,EAAE,CAAC;IACxB,CAAC;IAED;;;OAGG;IACK,aAAa,CAAC,QAAgB;QACpC,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE;YAC1B,MAAM,IAAI,KAAK,CACb,eAAe,QAAQ,2CAA2C;kBAChE,8CAA8C;kBAC9C,kCAAkC,CACrC,CAAC;SACH;IACH,CAAC;IAED;;;;;;;;;OASG;IACH,MAAM,CAAC,MAAM,CAAC,KAAoB;QAChC,MAAM,WAAW,GAAG,KAAK,CAAC,cAAc,EAAE,CAAC;QAC3C,MAAM,MAAM,GAAI,MAAM,CAAC,IAAI,CAAC,kCAAgB,CAA0C;aACnF,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,kCAAgB,CAAC,CAAC,CAAC,KAAK,WAAW,CAAC,CAAC;QAElD,8EAA8E;QAC9E,IAAI,WAAW,KAAK,kCAAgB,CAAC,IAAI,EAAE;YACzC,MAAM,QAAQ,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC,OAAO,CAAC;YAC/C,OAAO,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC;SAC5B;QACD,IAAI,WAAW,KAAK,kCAAgB,CAAC,YAAY,EAAE;YACjD,MAAM,gBAAgB,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC,OAAO,CAAC;YAC/D,OAAO,IAAI,gBAAgB,CAAC,KAAK,CAAC,CAAC;SACpC;QACD,IAAI,WAAW,KAAK,kCAAgB,CAAC,eAAe,EAAE;YACpD,MAAM,sBAAsB,GAAG,OAAO,CAAC,0BAA0B,CAAC,CAAC,OAAO,CAAC;YAC3E,OAAO,IAAI,sBAAsB,CAAC,KAAK,CAAC,CAAC;SAC1C;QAED,6DAA6D;QAC7D,IAAI,MAAM,IAAI,IAAA,kCAAc,EAAC,MAAgB,EAAE,MAAM,CAAC,EAAE;YACtD,MAAM,YAAY,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC,OAAO,CAAC;YACvD,OAAO,IAAI,YAAY,CAAC,KAAK,CAAC,CAAC;SAChC;QAED,mDAAmD;QACnD,IAAI,MAAM,IAAI,IAAA,kCAAc,EAAC,MAAgB,EAAE,OAAO,CAAC,EAAE;YACvD,MAAM,aAAa,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC,OAAO,CAAC;YACzD,OAAO,IAAI,aAAa,CAAC,KAAK,CAAC,CAAC;SACjC;QAED,OAAO,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC7B,CAAC;IAED;;;;;;;;;;;OAWG;IACH,MAAM;QACJ,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC;QACtC,MAAM,MAAM,GAAI,MAAM,CAAC,IAAI,CAAC,kCAAgB,CAA0C;aACnF,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,kCAAgB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;QACxC,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAC1B,OAAO,IAAA,kCAAc,EAAC,MAAgB,EAAE,MAAM,CAAC,CAAC;IAClD,CAAC;IAED;;;;OAIG;IACH,KAAK;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,KAAK,kCAAgB,CAAC,eAAe,CAAC;IAC1E,CAAC;IAED;;;OAGG;IACH,OAAO;QACL,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC;QACtC,MAAM,MAAM,GAAI,MAAM,CAAC,IAAI,CAAC,kCAAgB,CAA0C;aACnF,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,kCAAgB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;QACxC,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAC1B,OAAO,IAAA,kCAAc,EAAC,MAAgB,EAAE,OAAO,CAAC,CAAC;IACnD,CAAC;IAED;;;;OAIG;IACH,MAAM;QACJ,OAAO,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,KAAK,kCAAgB,CAAC,QAAQ,CAAC;IACnE,CAAC;IAED;;;;;OAKG;IACH,QAAQ;QACN,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC;QACtC,MAAM,MAAM,GAAI,MAAM,CAAC,IAAI,CAAC,kCAAgB,CAA0C;aACnF,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,kCAAgB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;QACxC,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAC1B,OAAO,IAAA,kCAAc,EAAC,MAAgB,EAAE,OAAO,CAAC,CAAC;IACnD,CAAC;IAED;;;;OAIG;IACH,QAAQ;QACN,OAAO,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,KAAK,kCAAgB,CAAC,OAAO,CAAC;IAClE,CAAC;IAGD,QAAQ;QACN,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,kBAAkB,EAAE,CAAC;QAC1E,MAAM,KAAK,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC;YACjC,CAAC,CAAC,IAAI,uBAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;YACnC,CAAC,CAAC,iBAAiB,CAAC;QACtB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;QACxE,OAAO,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,IAAI,MAAM,GAAG,CAAC;IAC/D,CAAC;IAED,SAAS;QACP,OAAO,CAAC,qBAAU,CAAC,EAAE,EAAE,qBAAU,CAAC,WAAW,EAAE,qBAAU,CAAC,KAAK,EAAE,qBAAU,CAAC,WAAW,EAAE,qBAAU,CAAC,UAAU,CAAC,CAAC;IAClH,CAAC;IAED,QAAQ,CAAC,KAAiB;QACxB,QAAQ,KAAK,EAAE;YACb,KAAK,qBAAU,CAAC,EAAE,CAAC;YACnB,KAAK,qBAAU,CAAC,WAAW;gBACzB,OAAO,IAAI,CAAC,KAAK,EAAE,CAAC;YACtB,KAAK,qBAAU,CAAC,KAAK;gBACnB,OAAO,IAAI,CAAC,OAAO,EAAE,CAAC;YACxB,KAAK,qBAAU,CAAC,WAAW;gBACzB,OAAO,IAAI,CAAC,aAAa,EAAE,CAAC;YAC9B,KAAK,qBAAU,CAAC,aAAa;gBAC3B,OAAO,IAAI,CAAC,eAAe,EAAE,CAAC;YAChC,KAAK,qBAAU,CAAC,YAAY;gBAC1B,OAAO,IAAI,CAAC,cAAc,EAAE,CAAC;YAC/B,KAAK,qBAAU,CAAC,UAAU,CAAC,CAAC;gBAC1B,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,kBAAkB,EAAE,CAAC;gBAC7C,OAAO,IAAI,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,uBAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;aACjE;YACD,KAAK,qBAAU,CAAC,KAAK,CAAC;YACtB,KAAK,qBAAU,CAAC,cAAc;gBAC5B,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;YACzC,KAAK,qBAAU,CAAC,aAAa;gBAC3B,+DAA+D;gBAC/D,uDAAuD;gBACvD,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;YACvD,KAAK,qBAAU,CAAC,UAAU;gBACxB,gEAAgE;gBAChE,OAAO,IAAI,CAAC,YAAY,EAAE,CAAC;YAC7B;gBACE,MAAM,IAAI,KAAK,CAAC,yCAAyC,KAAK,EAAE,CAAC,CAAC;SACrE;IACH,CAAC;IAED,KAAK;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;QAClC,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;QAC/C,OAAO,WAAI,CAAC,WAAW,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC,CAAC;IAClD,CAAC;IAED;;;;OAIG;IACH,MAAM;QACJ,OAAO,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;IAChC,CAAC;IAED,OAAO;QACL,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;QAClC,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;QAC/C,OAAO,IAAI,wBAAa,CAAC,IAAI,CAAC,CAAC;IACjC,CAAC;IAED,aAAa;QACX,IAAI,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC;QACjC,OAAO,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,CAAC;IACpC,CAAC;IAED,eAAe;QACb,IAAI,CAAC,aAAa,CAAC,cAAc,CAAC,CAAC;QACnC,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;IAChF,CAAC;IAED,cAAc;QACZ,IAAI,CAAC,aAAa,CAAC,aAAa,CAAC,CAAC;QAClC,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC;QACjD,MAAM,kBAAkB,GAAI,MAAM,CAAC,IAAI,CAAC,kCAAgB,CAA0C,CAAC,IAAI,CACrG,GAAG,CAAC,EAAE,CAAC,kCAAgB,CAAC,GAAG,CAAC,KAAK,YAAY,CAC9C,CAAC;QAEF,OAAO,kBAAkB,IAAI,uBAAuB,CAAC;IACvD,CAAC;IAED;;;OAGG;IACH,cAAc;QACZ,IAAI,CAAC,aAAa,CAAC,aAAa,CAAC,CAAC;QAClC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,kBAAkB,EAAE,CAAC;QAC7C,IAAI,CAAC,IAAI;YAAE,OAAO,EAAE,CAAC;QACrB,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,uBAAU,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1C,CAAC;IAED;;;OAGG;IACH,mBAAmB,CAAC,IAAyB;QAC3C,IAAI,CAAC,aAAa,CAAC,kBAAkB,CAAC,CAAC;QACvC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,kBAAkB,EAAE,CAAC;QAC7C,IAAI,CAAC,IAAI;YAAE,OAAO,SAAS,CAAC;QAC5B,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,iBAAiB,EAAE,KAAK,IAAI,CAAC,CAAC;QAC7D,OAAO,KAAK,CAAC,CAAC,CAAC,IAAI,uBAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACnD,CAAC;IAED;;;;;;;;;;;;OAYG;IACH,YAAY;QACV,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC,CAAC;QAChC,MAAM,IAAI,GAAG,IAAI,CAAC,kBAAkB,EAAE,CAAC;QACvC,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QACpD,OAAO,IAAA,2BAAoB,EAAC,IAAI,CAAC,CAAC;IACpC,CAAC;IAED;;;;;OAKG;IACH,eAAe;QACb,IAAI,CAAC,aAAa,CAAC,cAAc,CAAC,CAAC;QACnC,MAAM,IAAI,GAAG,IAAI,CAAC,kBAAkB,EAAE,CAAC;QACvC,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QACvD,OAAO,IAAA,2BAAoB,EAAC,IAAI,CAAC,CAAC;IACpC,CAAC;IAED;;;;OAIG;IACO,kBAAkB;;QAC1B,IAAI,OAAO,IAAI,CAAC,KAAK,CAAC,cAAc,KAAK,UAAU;YAAE,OAAO,SAAS,CAAC;QACtE,OAAO,MAAA,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,mCAAI,SAAS,CAAC;IAClD,CAAC;IAED,aAAa;QACX,IAAI,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC;QACjC,OAAO,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,CAAC;IACpC,CAAC;IAED;;;;;;;;;;;OAWG;IACH,SAAS,CAAC,OAAa,IAAI,IAAI,EAAE;QAC/B,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE;YAAE,OAAO,KAAK,CAAC;QAC3C,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC;QAC7C,IAAI,CAAC,YAAY;YAAE,OAAO,KAAK,CAAC;QAChC,MAAM,EAAE,GAAG,YAAY,CAAC,YAAY,EAAE,CAAC;QACvC,IAAI,CAAC,EAAE;YAAE,OAAO,KAAK,CAAC;QACtB,MAAM,SAAS,GAAG,EAAE,CAAC,UAAU,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,GAAG,CAAC,CAAC;QAC3E,OAAO,SAAS,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;IACpC,CAAC;IAED,MAAM,CAAC,KAAe;QACpB,IAAI,KAAK,YAAY,QAAQ,EAAE;YAC7B,OAAO,IAAI,CAAC,KAAK,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;SAC3C;aAAM;YACL,OAAO,KAAK,CAAC;SACd;IACH,CAAC;CACF;AAED,kBAAe,QAAQ,CAAC"}

package/node/wrappers/models/security/security.ts

@@ -348,6 +348,28 @@ class Security {
     return this.proto.getIssuerName();
   }
 
+  /**
+   * Time-based soft-delete check. A Security is considered deleted iff it
+   * carries a `valid_to` that has already elapsed at `asOf`. A future-dated
+   * `valid_to` means the row is still live today and becomes deleted
+   * automatically when `asOf` catches up. An unset `valid_to` is always
+   * active.
+   *
+   * Canonical soft-delete check across the platform — the predecessor
+   * `SecurityProto.deleted_at` field has been removed (tag 15 reserved).
+   * See /specs/soft-delete-validto-collapse.md
+   * (FinTekkers/second-brain#316).
+   */
+  isDeleted(asOf: Date = new Date()): boolean {
+    if (!this.proto.hasValidTo()) return false;
+    const validToProto = this.proto.getValidTo();
+    if (!validToProto) return false;
+    const ts = validToProto.getTimestamp();
+    if (!ts) return false;
+    const validToMs = ts.getSeconds() * 1000 + Math.floor(ts.getNanos() / 1e6);
+    return validToMs < asOf.getTime();
+  }
+
   equals(other: Security): boolean {
     if (other instanceof Security) {
       return this.getID().equals(other.getID());

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@fintekkers/ledger-models",
   "todo": "Replace the version with build script version number",
-  "version": "0.4.3",
+  "version": "0.4.5",
   "description": "ledger model protos ",
   "authors": [
     "David Doherty",
@@ -21,6 +21,7 @@
   "publishConfigNotes": "This package.json does not have a publish config defining the registry because we currently publish to both Github packages & npmjs, so the registry is in the ../.github/workflows/publish.yml files at runtime",
   "scripts": {
     "test": "jest",
+    "test:integration": "jest --config jest.integration.config.js",
     "start": "node index.js"
   },
   "devDependencies": {