@hasna/treasury 0.1.2

package/dist/server/list-query.d.ts

@@ -0,0 +1,7 @@
+export interface ListParams {
+    limit: number | null;
+    offset: number;
+}
+export declare function parseListParams(query: Record<string, string>): ListParams;
+export declare function applyList<T>(items: T[], params: ListParams): T[];
+//# sourceMappingURL=list-query.d.ts.map

package/dist/server/list-query.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"list-query.d.ts","sourceRoot":"","sources":["../../src/server/list-query.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,UAAU;IACzB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,UAAU,CAMzE;AAED,wBAAgB,SAAS,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,UAAU,GAAG,CAAC,EAAE,CAGhE"}

package/dist/services/authorization-constants.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Per-app authorization domain NAMES (BUILD-SPEC §6.3 / §10.1). This is the ONLY
+ * file that differs between the 9 apps' security stacks — `authorization.ts` is
+ * byte-identical everywhere and imports the names from here. It exports EXACTLY
+ * four members: the ACTION union, the ROLE union (which MUST include the three
+ * reserved roles "system" | "owner" | "admin"), the `allActions` array, and the
+ * `rolePermissions` role→action map (system/owner/admin get every action; each
+ * domain role gets its narrower set).
+ */
+export type AuthorizationAction = "read" | "write" | "recommend" | "export" | "admin";
+export type AuthorizationRole = "system" | "owner" | "admin" | "treasurer" | "analyst" | "auditor" | "integration";
+export declare const allActions: AuthorizationAction[];
+export declare const rolePermissions: Record<AuthorizationRole, Set<AuthorizationAction>>;
+//# sourceMappingURL=authorization-constants.d.ts.map

package/dist/services/authorization-constants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorization-constants.d.ts","sourceRoot":"","sources":["../../src/services/authorization-constants.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,MAAM,MAAM,mBAAmB,GAAG,MAAM,GAAG,OAAO,GAAG,WAAW,GAAG,QAAQ,GAAG,OAAO,CAAC;AAEtF,MAAM,MAAM,iBAAiB,GACzB,QAAQ,GACR,OAAO,GACP,OAAO,GACP,WAAW,GACX,SAAS,GACT,SAAS,GACT,aAAa,CAAC;AAElB,eAAO,MAAM,UAAU,EAAE,mBAAmB,EAAsD,CAAC;AAEnG,eAAO,MAAM,eAAe,EAAE,MAAM,CAAC,iBAAiB,EAAE,GAAG,CAAC,mBAAmB,CAAC,CAQ/E,CAAC"}

package/dist/services/authorization.d.ts

@@ -0,0 +1,95 @@
+import { allActions, rolePermissions, type AuthorizationAction, type AuthorizationRole } from "./authorization-constants.js";
+/**
+ * COPY-VERBATIM security stack (BUILD-SPEC §6.3 / §10.1). This file is byte-for-byte
+ * IDENTICAL across all 9 apps — the ONLY per-app difference is the import above,
+ * which resolves to that app's `authorization-constants.ts` (domain ACTION/ROLE
+ * *names* only). The MECHANISM — deny-by-default authorize(), role→action map, and
+ * STRICT entity-dimension scoping — is NOT a per-app design choice.
+ *
+ * STRICT deny-by-default entity scoping (§1c): an `entity_id` is an authorized
+ * *reference*, never a bearer capability. Resolving or guessing an id grants
+ * NOTHING. Only a `bypass` principal (the trusted internal SYSTEM context used for
+ * bootstrap/migration/tests) is entity-unrestricted. A non-bypass principal with
+ * NO entity/org set resolves to the EMPTY allowed set and gets NO access — we NEVER
+ * return `true` (or `null`) for an unscoped principal. Admin/owner ROLES widen the
+ * ACTION dimension only; they never grant cross-entity reach without an explicit
+ * entity set. MCP/HTTP callers thread their OWN principal here, never SYSTEM bypass.
+ */
+export type { AuthorizationAction, AuthorizationRole };
+export { allActions, rolePermissions };
+export interface AuthorizationContext {
+    actor_id: string;
+    roles: AuthorizationRole[];
+    /** Single allowed entity id (legacy single-tenant credential). */
+    entity_id?: string;
+    /** The allowed entity id set — the principal's tenant boundary. */
+    entity_ids?: string[];
+    /** Org-style credential aliases, accepted as entity-scope ids for compatibility. */
+    org_id?: string;
+    org_ids?: string[];
+    /**
+     * SYSTEM bypass. Set ONLY by trusted internal callers (bootstrap, migration,
+     * seed, unit tests) — NEVER the dispatch context of an authenticated MCP or HTTP
+     * caller. A bypass principal skips entity scoping and every action gate.
+     */
+    bypass?: boolean;
+}
+export interface AuthorizationResource {
+    /** The single entity the operation touches. */
+    entity_id?: string;
+    /** A group of entities (e.g. a consolidation run) — ALL must be allowed. */
+    entity_ids?: string[];
+    resource?: string;
+}
+/**
+ * SYSTEM bypass context. Trusted internal use ONLY (migrations, seed, tests) — it
+ * is NEVER the context for an authenticated transport caller, which would defeat
+ * tenant isolation (BUILD-SPEC failure class 1).
+ */
+export declare const SYSTEM_AUTHORIZATION_CONTEXT: AuthorizationContext;
+/**
+ * Deny-by-default single-entity check. `bypass` is unrestricted; a resource with
+ * no entity to check is not blocked by scoping; every other case requires the id
+ * to be in the principal's explicit allowlist. An unscoped non-bypass principal
+ * (empty allowlist) can reach NO entity.
+ */
+export declare function hasEntityAccess(context: AuthorizationContext, entityId?: string): boolean;
+/** Group form: the principal must be scoped to EVERY entity in the set. */
+export declare function hasAllEntityAccess(context: AuthorizationContext, entityIds: string[]): boolean;
+export declare function roleAllows(role: AuthorizationRole, action: AuthorizationAction): boolean;
+/**
+ * The principal's allowed entity set, or `null` when UNCONSTRAINED. ONLY the
+ * bypass/SYSTEM context is unconstrained; EVERY authenticated principal is
+ * constrained to its explicit allowlist. An unscoped non-bypass principal
+ * therefore resolves to the EMPTY array (sees nothing) — never wildcard. This is
+ * the single source of truth for entity isolation on list ops.
+ */
+export declare function allowedEntityIds(context?: AuthorizationContext): string[] | null;
+/** Post-filter form: whether a principal may see a specific entity's rows. */
+export declare function principalCanSeeEntity(entityId: string, context?: AuthorizationContext): boolean;
+/**
+ * SQL predicate that constrains a list query to the principal's allowed entity
+ * set, so cross-entity rows are isolated BY CONSTRUCTION — not merely because a
+ * caller supplied an `entity_id` filter. `null` when the principal is unconstrained.
+ * A principal constrained to an empty set yields an always-false predicate so no
+ * rows leak (deny-by-default).
+ */
+export declare function entityScopeFilter(context?: AuthorizationContext, column?: string): {
+    clause: string;
+    params: string[];
+} | null;
+/** In-memory form of entityScopeFilter for already-materialized rows. */
+export declare function scopeToEntities<T extends {
+    entity_id: string;
+}>(rows: T[], context?: AuthorizationContext): T[];
+/**
+ * Deny by default: BOTH the entity scope AND the action scope must pass. Throws
+ * PermissionDeniedError otherwise. The SAME context flows through the /v1 serve
+ * tier AND the MCP tools — MCP tools thread the CALLER principal, never a SYSTEM
+ * bypass (BUILD-SPEC failure class 1).
+ */
+export declare function authorize(action: AuthorizationAction, context?: AuthorizationContext, resource?: AuthorizationResource): void;
+export declare function authorizeAll(actions: AuthorizationAction[], context?: AuthorizationContext, resource?: AuthorizationResource): void;
+/** Union of actions the given roles grant (used to advertise a credential's scope). */
+export declare function scopesForRoles(roles: AuthorizationRole[]): AuthorizationAction[];
+//# sourceMappingURL=authorization.d.ts.map

package/dist/services/authorization.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorization.d.ts","sourceRoot":"","sources":["../../src/services/authorization.ts"],"names":[],"mappings":"AACA,OAAO,EACL,UAAU,EACV,eAAe,EACf,KAAK,mBAAmB,EACxB,KAAK,iBAAiB,EACvB,MAAM,8BAA8B,CAAC;AAEtC;;;;;;;;;;;;;;;GAeG;AAIH,YAAY,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,CAAC;AACvD,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,CAAC;AAEvC,MAAM,WAAW,oBAAoB;IACnC,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,iBAAiB,EAAE,CAAC;IAC3B,kEAAkE;IAClE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,mEAAmE;IACnE,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,oFAAoF;IACpF,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB;;;;OAIG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,qBAAqB;IACpC,+CAA+C;IAC/C,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,4EAA4E;IAC5E,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;;;GAIG;AACH,eAAO,MAAM,4BAA4B,EAAE,oBAI1C,CAAC;AAgBF;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,oBAAoB,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAIzF;AAED,2EAA2E;AAC3E,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,oBAAoB,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,OAAO,CAE9F;AAED,wBAAgB,UAAU,CAAC,IAAI,EAAE,iBAAiB,EAAE,MAAM,EAAE,mBAAmB,GAAG,OAAO,CAExF;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,CAAC,EAAE,oBAAoB,GAAG,MAAM,EAAE,GAAG,IAAI,CAIhF;AAED,8EAA8E;AAC9E,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,oBAAoB,GAAG,OAAO,CAG/F;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAC/B,OAAO,CAAC,EAAE,oBAAoB,EAC9B,MAAM,SAAc,GACnB;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,EAAE,CAAA;CAAE,GAAG,IAAI,CAK7C;AAED,yEAAyE;AACzE,wBAAgB,eAAe,CAAC,CAAC,SAAS;IAAE,SAAS,EAAE,MAAM,CAAA;CAAE,EAC7D,IAAI,EAAE,CAAC,EAAE,EACT,OAAO,CAAC,EAAE,oBAAoB,GAC7B,CAAC,EAAE,CAKL;AAED;;;;;GAKG;AACH,wBAAgB,SAAS,CACvB,MAAM,EAAE,mBAAmB,EAC3B,OAAO,CAAC,EAAE,oBAAoB,EAC9B,QAAQ,GAAE,qBAA0B,GACnC,IAAI,CAYN;AAED,wBAAgB,YAAY,CAC1B,OAAO,EAAE,mBAAmB,EAAE,EAC9B,OAAO,CAAC,EAAE,oBAAoB,EAC9B,QAAQ,GAAE,qBAA0B,GACnC,IAAI,CAEN;AAED,uFAAuF;AACvF,wBAAgB,cAAc,CAAC,KAAK,EAAE,iBAAiB,EAAE,GAAG,mBAAmB,EAAE,CAMhF"}

package/dist/services/balances.d.ts

@@ -0,0 +1,33 @@
+import { type RunContext } from "./context.js";
+import { type BalanceSnapshot, type AccountKind } from "../types/index.js";
+export interface RecordBalanceInput {
+    entity_id: string;
+    account_ref: string;
+    account_kind: AccountKind;
+    currency: string;
+    amount_minor: number;
+    as_of?: string;
+    source?: string;
+}
+/** Cache a balance snapshot (from an upstream adapter or manual entry). */
+export declare function recordBalance(rc: RunContext, input: RecordBalanceInput): Promise<BalanceSnapshot>;
+export interface ListBalancesInput {
+    entity_id?: string;
+}
+export declare function listBalances(rc: RunContext, input: ListBalancesInput): Promise<BalanceSnapshot[]>;
+export interface ConsolidatedInput {
+    base?: string;
+}
+export interface ConsolidatedBalances {
+    base_currency: string;
+    as_of: string;
+    total_in_base_minor: number;
+    by_currency: Array<{
+        currency: string;
+        total_minor: number;
+        in_base_minor: number;
+    }>;
+}
+/** Consolidated balance across visible entities, converted to a single base. */
+export declare function consolidatedBalances(rc: RunContext, input: ConsolidatedInput): Promise<ConsolidatedBalances>;
+//# sourceMappingURL=balances.d.ts.map

package/dist/services/balances.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"balances.d.ts","sourceRoot":"","sources":["../../src/services/balances.ts"],"names":[],"mappings":"AAEA,OAAO,EAAS,KAAK,UAAU,EAAE,MAAM,cAAc,CAAC;AAGtD,OAAO,EAAmB,KAAK,eAAe,EAAE,KAAK,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAE5F,MAAM,WAAW,kBAAkB;IACjC,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,WAAW,CAAC;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,2EAA2E;AAC3E,wBAAsB,aAAa,CAAC,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,eAAe,CAAC,CAwBvG;AAED,MAAM,WAAW,iBAAiB;IAChC,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,wBAAsB,YAAY,CAAC,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,iBAAiB,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC,CAOvG;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,oBAAoB;IACnC,aAAa,EAAE,MAAM,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,mBAAmB,EAAE,MAAM,CAAC;IAC5B,WAAW,EAAE,KAAK,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACtF;AAED,gFAAgF;AAChF,wBAAsB,oBAAoB,CAAC,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,iBAAiB,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAkBlH"}

package/dist/services/context.d.ts

@@ -0,0 +1,24 @@
+import type { QueryClient } from "../db/database.js";
+import type { ApiPrincipal, ApiScope } from "../server/auth.js";
+import { type AuthorizationAction, type AuthorizationContext } from "./authorization.js";
+/** Everything an op needs: the store + the authenticated caller principal. */
+export interface RunContext {
+    db: QueryClient;
+    auth: AuthorizationContext;
+    scopes: ApiScope[];
+}
+/** Build a run context from an authenticated API principal (serve + MCP). */
+export declare function contextFromPrincipal(db: QueryClient, principal: ApiPrincipal): RunContext;
+/**
+ * A local/dev owner context (used by the CLI in local loopback mode when no
+ * scoped credential is supplied). Full scopes + bypass. Scoped credentials
+ * still exercise the real deny-by-default path on every transport.
+ */
+export declare function localOwnerContext(db: QueryClient): RunContext;
+/**
+ * Deny-by-default gate for a single op: the principal must hold the required
+ * scope AND be authorized for the action on the target entity (§1c). Threading
+ * this on EVERY transport (serve + MCP) — not a SYSTEM bypass — is mandatory.
+ */
+export declare function guard(rc: RunContext, scope: ApiScope, action: AuthorizationAction, entity_id?: string): void;
+//# sourceMappingURL=context.d.ts.map

package/dist/services/context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../../src/services/context.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,KAAK,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAChE,OAAO,EAAa,KAAK,mBAAmB,EAAE,KAAK,oBAAoB,EAAgC,MAAM,oBAAoB,CAAC;AAGlI,8EAA8E;AAC9E,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,WAAW,CAAC;IAChB,IAAI,EAAE,oBAAoB,CAAC;IAC3B,MAAM,EAAE,QAAQ,EAAE,CAAC;CACpB;AAED,6EAA6E;AAC7E,wBAAgB,oBAAoB,CAAC,EAAE,EAAE,WAAW,EAAE,SAAS,EAAE,YAAY,GAAG,UAAU,CAWzF;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,EAAE,EAAE,WAAW,GAAG,UAAU,CAM7D;AAED;;;;GAIG;AACH,wBAAgB,KAAK,CAAC,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,mBAAmB,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAK5G"}

package/dist/services/entities.d.ts

@@ -0,0 +1,14 @@
+import { type RunContext } from "./context.js";
+import { type EntityRef } from "../types/index.js";
+export interface CreateEntityInput {
+    name: string;
+    base_currency: string;
+    entity_slug?: string | null;
+}
+export declare function createEntity(rc: RunContext, input: CreateEntityInput): Promise<EntityRef>;
+export declare function listEntities(rc: RunContext): Promise<EntityRef[]>;
+export declare function getEntity(rc: RunContext, input: {
+    entity_id: string;
+}): Promise<EntityRef>;
+export declare function requireEntity(rc: RunContext, entity_id: string): Promise<EntityRef>;
+//# sourceMappingURL=entities.d.ts.map

package/dist/services/entities.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"entities.d.ts","sourceRoot":"","sources":["../../src/services/entities.ts"],"names":[],"mappings":"AAEA,OAAO,EAAS,KAAK,UAAU,EAAE,MAAM,cAAc,CAAC;AACtD,OAAO,EAAwC,KAAK,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAMzF,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7B;AAED,wBAAsB,YAAY,CAAC,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,iBAAiB,GAAG,OAAO,CAAC,SAAS,CAAC,CAmB/F;AAED,wBAAsB,YAAY,CAAC,EAAE,EAAE,UAAU,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC,CASvE;AAED,wBAAsB,SAAS,CAAC,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE;IAAE,SAAS,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,SAAS,CAAC,CAGhG;AAED,wBAAsB,aAAa,CAAC,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAIzF"}

package/dist/services/forecast.d.ts

@@ -0,0 +1,10 @@
+import { type RunContext } from "./context.js";
+import { type CashForecast } from "../types/index.js";
+export interface ForecastInput {
+    entity_id?: string;
+    base?: string;
+    horizon_months?: number;
+}
+/** Short-horizon linear cash projection from current cash minus monthly burn. */
+export declare function cashForecast(rc: RunContext, input: ForecastInput): Promise<CashForecast>;
+//# sourceMappingURL=forecast.d.ts.map

package/dist/services/forecast.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"forecast.d.ts","sourceRoot":"","sources":["../../src/services/forecast.ts"],"names":[],"mappings":"AACA,OAAO,EAAS,KAAK,UAAU,EAAE,MAAM,cAAc,CAAC;AAEtD,OAAO,EAAmB,KAAK,YAAY,EAAsB,MAAM,mBAAmB,CAAC;AAmB3F,MAAM,WAAW,aAAa;IAC5B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,iFAAiF;AACjF,wBAAsB,YAAY,CAAC,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,YAAY,CAAC,CAmB9F"}

package/dist/services/fx.d.ts

@@ -0,0 +1,33 @@
+import { type QueryClient } from "../db/database.js";
+import { type RunContext } from "./context.js";
+import { type FxRate, type FxExposureReport } from "../types/index.js";
+export interface RecordRateInput {
+    base_currency: string;
+    quote_currency: string;
+    rate: number;
+    as_of?: string;
+    source?: string;
+}
+export declare function recordFxRate(rc: RunContext, input: RecordRateInput): Promise<FxRate>;
+export declare function listFxRates(rc: RunContext): Promise<FxRate[]>;
+/**
+ * Convert an integer minor amount from one currency to another using the most
+ * recently captured rate for the pair (either direction). Throws if no rate
+ * path exists so exposure/runway never silently under-count.
+ */
+export declare function convertMinor(db: QueryClient, amountMinor: number, from: string, to: string): Promise<number>;
+export interface ExposureInput {
+    base?: string;
+}
+/** FX exposure across every balance the principal can see, converted to `base`. */
+export declare function fxExposure(rc: RunContext, input: ExposureInput): Promise<FxExposureReport>;
+/** Sum balances by currency, filtered to the principal's visible entities. */
+export declare function visibleBalanceSums(rc: RunContext): Promise<Array<{
+    currency: string;
+    total_minor: number;
+}>>;
+export declare function entityFilter(rc: RunContext, column?: string): {
+    clause: string;
+    params: unknown[];
+};
+//# sourceMappingURL=fx.d.ts.map

package/dist/services/fx.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fx.d.ts","sourceRoot":"","sources":["../../src/services/fx.ts"],"names":[],"mappings":"AAAA,OAAO,EAAa,KAAK,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAEhE,OAAO,EAAS,KAAK,UAAU,EAAE,MAAM,cAAc,CAAC;AACtD,OAAO,EAAmB,KAAK,MAAM,EAAE,KAAK,gBAAgB,EAAyB,MAAM,mBAAmB,CAAC;AAE/G,MAAM,WAAW,eAAe;IAC9B,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,EAAE,MAAM,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,wBAAsB,YAAY,CAAC,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC,MAAM,CAAC,CAsB1F;AAED,wBAAsB,WAAW,CAAC,EAAE,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAGnE;AAED;;;;GAIG;AACH,wBAAsB,YAAY,CAAC,EAAE,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAalH;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,mFAAmF;AACnF,wBAAsB,UAAU,CAAC,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAchG;AAED,8EAA8E;AAC9E,wBAAsB,kBAAkB,CAAC,EAAE,EAAE,UAAU,GAAG,OAAO,CAAC,KAAK,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC,CAMlH;AAED,wBAAgB,YAAY,CAAC,EAAE,EAAE,UAAU,EAAE,MAAM,SAAc,GAAG;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,OAAO,EAAE,CAAA;CAAE,CAMxG"}

package/dist/services/ingest.d.ts

@@ -0,0 +1,19 @@
+import { type RunContext } from "./context.js";
+import type { UpstreamAdapters } from "../adapters/types.js";
+export interface IngestResult {
+    balances_ingested: number;
+    fx_rates_ingested: number;
+    cost_feeds_ingested: number;
+    sources: {
+        balances: string;
+        fx: string;
+        cost: string;
+    };
+}
+/**
+ * Pull balances / FX / cost from read-adapters and cache them with provenance.
+ * v0 uses fixture adapters; v1 swaps in live upstream calls. Deny-by-default:
+ * the caller must hold write scope and be scoped to the entities it ingests.
+ */
+export declare function ingestFromAdapters(rc: RunContext, adapters: UpstreamAdapters): Promise<IngestResult>;
+//# sourceMappingURL=ingest.d.ts.map

package/dist/services/ingest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ingest.d.ts","sourceRoot":"","sources":["../../src/services/ingest.ts"],"names":[],"mappings":"AAAA,OAAO,EAAS,KAAK,UAAU,EAAE,MAAM,cAAc,CAAC;AAKtD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAE7D,MAAM,WAAW,YAAY;IAC3B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,mBAAmB,EAAE,MAAM,CAAC;IAC5B,OAAO,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;CACzD;AAED;;;;GAIG;AACH,wBAAsB,kBAAkB,CAAC,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,gBAAgB,GAAG,OAAO,CAAC,YAAY,CAAC,CAuB1G"}

package/dist/services/registry.d.ts

@@ -0,0 +1,33 @@
+import type { RunContext } from "./context.js";
+import type { ApiScope } from "../server/auth.js";
+import type { AuthorizationAction } from "./authorization.js";
+export type FieldType = "string" | "int" | "number" | "bool";
+export type FieldLocation = "path" | "query" | "body";
+export interface OpField {
+    name: string;
+    type: FieldType;
+    required?: boolean;
+    location: FieldLocation;
+    description?: string;
+}
+export type Profile = "minimal" | "standard" | "full";
+export interface OpDef {
+    name: string;
+    description: string;
+    scope: ApiScope;
+    action: AuthorizationAction;
+    mutating: boolean;
+    http: {
+        method: "GET" | "POST" | "PATCH" | "DELETE";
+        path: string;
+    };
+    operationId: string;
+    cli: string[];
+    fields: OpField[];
+    profiles: Profile[];
+    run(rc: RunContext, input: Record<string, unknown>): Promise<unknown>;
+}
+export declare const OPS: OpDef[];
+export declare function opByName(name: string): OpDef | undefined;
+export declare function coerceField(field: OpField, raw: unknown): unknown;
+//# sourceMappingURL=registry.d.ts.map

package/dist/services/registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../src/services/registry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAClD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAU9D,MAAM,MAAM,SAAS,GAAG,QAAQ,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;AAC7D,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG,OAAO,GAAG,MAAM,CAAC;AAEtD,MAAM,WAAW,OAAO;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,SAAS,CAAC;IAChB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,QAAQ,EAAE,aAAa,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,MAAM,OAAO,GAAG,SAAS,GAAG,UAAU,GAAG,MAAM,CAAC;AAEtD,MAAM,WAAW,KAAK;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,QAAQ,CAAC;IAChB,MAAM,EAAE,mBAAmB,CAAC;IAC5B,QAAQ,EAAE,OAAO,CAAC;IAClB,IAAI,EAAE;QAAE,MAAM,EAAE,KAAK,GAAG,MAAM,GAAG,OAAO,GAAG,QAAQ,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IACpE,WAAW,EAAE,MAAM,CAAC;IACpB,GAAG,EAAE,MAAM,EAAE,CAAC;IACd,MAAM,EAAE,OAAO,EAAE,CAAC;IAClB,QAAQ,EAAE,OAAO,EAAE,CAAC;IACpB,GAAG,CAAC,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACvE;AAMD,eAAO,MAAM,GAAG,EAAE,KAAK,EAiStB,CAAC;AAEF,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,KAAK,GAAG,SAAS,CAExD;AAED,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,GAAG,OAAO,CAgBjE"}

package/dist/services/runway.d.ts

@@ -0,0 +1,28 @@
+import { type RunContext } from "./context.js";
+import { type CostFeed, type RunwayReport } from "../types/index.js";
+export interface RecordCostFeedInput {
+    entity_id: string;
+    currency: string;
+    monthly_burn_minor: number;
+    as_of?: string;
+    source?: string;
+}
+/** Record a monthly net cash burn for an entity (feeds runway + forecast). */
+export declare function recordCostFeed(rc: RunContext, input: RecordCostFeedInput): Promise<CostFeed>;
+export declare function listCostFeeds(rc: RunContext, input: {
+    entity_id?: string;
+}): Promise<CostFeed[]>;
+/** Latest cost feed per (entity, currency), optionally scoped to one entity. */
+declare function latestCostFeeds(rc: RunContext, entity_id?: string): Promise<CostFeed[]>;
+declare function sumBalancesInBase(rc: RunContext, base: string, entity_id?: string): Promise<number>;
+export interface EntityRunwayInput {
+    entity_id: string;
+    base?: string;
+}
+export declare function entityRunway(rc: RunContext, input: EntityRunwayInput): Promise<RunwayReport>;
+export interface GroupRunwayInput {
+    base?: string;
+}
+export declare function groupRunway(rc: RunContext, input: GroupRunwayInput): Promise<RunwayReport>;
+export { latestCostFeeds, sumBalancesInBase };
+//# sourceMappingURL=runway.d.ts.map

package/dist/services/runway.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runway.d.ts","sourceRoot":"","sources":["../../src/services/runway.ts"],"names":[],"mappings":"AAEA,OAAO,EAAS,KAAK,UAAU,EAAE,MAAM,cAAc,CAAC;AAGtD,OAAO,EAAmB,KAAK,QAAQ,EAAE,KAAK,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAEtF,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,8EAA8E;AAC9E,wBAAsB,cAAc,CAAC,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,mBAAmB,GAAG,OAAO,CAAC,QAAQ,CAAC,CAqBlG;AAED,wBAAsB,aAAa,CAAC,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC,CAOtG;AAED,gFAAgF;AAChF,iBAAe,eAAe,CAAC,EAAE,EAAE,UAAU,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC,CAgBtF;AAED,iBAAe,iBAAiB,CAAC,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAgBlG;AAOD,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,wBAAsB,YAAY,CAAC,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,iBAAiB,GAAG,OAAO,CAAC,YAAY,CAAC,CAiBlG;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,wBAAsB,WAAW,CAAC,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,YAAY,CAAC,CAiBhG;AAED,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,CAAC"}

package/dist/services/storage.d.ts

@@ -0,0 +1,35 @@
+import { type RunContext } from "./context.js";
+import { type QueryClient } from "../db/database.js";
+export declare const SYNC_TABLES: Record<string, string[]>;
+export declare const AUDIT_TABLES: string[];
+export interface StorageStatus {
+    mode: "local" | "cloud";
+    dsn_present: boolean;
+    sqlite_path: string;
+    migrations_applied: number;
+    remote_reachable: boolean;
+}
+/**
+ * Redacted storage status (BUILD-SPEC §4.6). Emits NO DSN/secret value and NO
+ * full config object. `remote_reachable` is computed by probing, never hardcoded.
+ */
+export declare function storageStatus(rc: RunContext): Promise<StorageStatus>;
+export interface SyncOptions {
+    tables?: string[];
+    /** Injected counterpart store (tests). When absent, the cloud store is opened. */
+    target?: QueryClient;
+}
+export interface SyncResult {
+    direction: "push" | "pull";
+    tables: Record<string, number>;
+    audit_excluded: string[];
+}
+/** Push local rows to the cloud store. Elevated scope + audit; audit tables excluded. */
+export declare function storagePush(rc: RunContext, opts?: SyncOptions): Promise<SyncResult>;
+/** Pull cloud rows into the local store. Elevated scope + audit; audit tables excluded. */
+export declare function storagePull(rc: RunContext, opts?: SyncOptions): Promise<SyncResult>;
+export declare function storageSync(rc: RunContext, opts?: SyncOptions): Promise<{
+    push: SyncResult;
+    pull: SyncResult;
+}>;
+//# sourceMappingURL=storage.d.ts.map

package/dist/services/storage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage.d.ts","sourceRoot":"","sources":["../../src/services/storage.ts"],"names":[],"mappings":"AAAA,OAAO,EAAS,KAAK,UAAU,EAAE,MAAM,cAAc,CAAC;AAEtD,OAAO,EAAgB,KAAK,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAMnE,eAAO,MAAM,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAMhD,CAAC;AACF,eAAO,MAAM,YAAY,UAAgB,CAAC;AAE1C,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC;IACxB,WAAW,EAAE,OAAO,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,gBAAgB,EAAE,OAAO,CAAC;CAC3B;AAED;;;GAGG;AACH,wBAAsB,aAAa,CAAC,EAAE,EAAE,UAAU,GAAG,OAAO,CAAC,aAAa,CAAC,CAoB1E;AAyBD,MAAM,WAAW,WAAW;IAC1B,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,kFAAkF;IAClF,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED,MAAM,WAAW,UAAU;IACzB,SAAS,EAAE,MAAM,GAAG,MAAM,CAAC;IAC3B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/B,cAAc,EAAE,MAAM,EAAE,CAAC;CAC1B;AAaD,yFAAyF;AACzF,wBAAsB,WAAW,CAAC,EAAE,EAAE,UAAU,EAAE,IAAI,GAAE,WAAgB,GAAG,OAAO,CAAC,UAAU,CAAC,CAQ7F;AAED,2FAA2F;AAC3F,wBAAsB,WAAW,CAAC,EAAE,EAAE,UAAU,EAAE,IAAI,GAAE,WAAgB,GAAG,OAAO,CAAC,UAAU,CAAC,CAQ7F;AAED,wBAAsB,WAAW,CAAC,EAAE,EAAE,UAAU,EAAE,IAAI,GAAE,WAAgB,GAAG,OAAO,CAAC;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,IAAI,EAAE,UAAU,CAAA;CAAE,CAAC,CAKzH"}

package/dist/services/sweeps.d.ts

@@ -0,0 +1,26 @@
+import { type RunContext } from "./context.js";
+import { type SweepRecommendation, type SweepStatus } from "../types/index.js";
+export declare function listSweeps(rc: RunContext, input?: {
+    status?: SweepStatus;
+}): Promise<SweepRecommendation[]>;
+export declare function getSweep(rc: RunContext, input: {
+    id: string;
+}): Promise<SweepRecommendation>;
+export interface GenerateSweepsInput {
+    base?: string;
+    min_runway_months?: number;
+    healthy_runway_months?: number;
+}
+/**
+ * Generate intercompany-funding RECOMMENDATIONS (advisory only — treasury never
+ * moves money; execution must be requested through the controls service). Lifts
+ * short-runway entities toward `min_runway_months` funded by entities holding a
+ * surplus above `healthy_runway_months`.
+ */
+export declare function generateSweeps(rc: RunContext, input: GenerateSweepsInput): Promise<SweepRecommendation[]>;
+export interface UpdateSweepInput {
+    id: string;
+    status: SweepStatus;
+}
+export declare function updateSweepStatus(rc: RunContext, input: UpdateSweepInput): Promise<SweepRecommendation>;
+//# sourceMappingURL=sweeps.d.ts.map

package/dist/services/sweeps.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sweeps.d.ts","sourceRoot":"","sources":["../../src/services/sweeps.ts"],"names":[],"mappings":"AAEA,OAAO,EAAS,KAAK,UAAU,EAAE,MAAM,cAAc,CAAC;AAKtD,OAAO,EAAuC,KAAK,mBAAmB,EAAE,KAAK,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAMpH,wBAAsB,UAAU,CAAC,EAAE,EAAE,UAAU,EAAE,KAAK,GAAE;IAAE,MAAM,CAAC,EAAE,WAAW,CAAA;CAAO,GAAG,OAAO,CAAC,mBAAmB,EAAE,CAAC,CAoBrH;AAED,wBAAsB,QAAQ,CAAC,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE;IAAE,EAAE,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAMlG;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,qBAAqB,CAAC,EAAE,MAAM,CAAC;CAChC;AAED;;;;;GAKG;AACH,wBAAsB,cAAc,CAAC,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,mBAAmB,GAAG,OAAO,CAAC,mBAAmB,EAAE,CAAC,CAsE/G;AAED,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,WAAW,CAAC;CACrB;AAED,wBAAsB,iBAAiB,CAAC,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAY7G"}

package/dist/types/index.d.ts

@@ -0,0 +1,133 @@
+export type Iso4217 = string;
+export interface EntityRef {
+    entity_id: string;
+    entity_slug: string | null;
+    name: string;
+    base_currency: Iso4217;
+    created_at: string;
+    updated_at: string;
+}
+export type AccountKind = "bank" | "wallet";
+export interface BalanceSnapshot {
+    id: string;
+    entity_id: string;
+    account_ref: string;
+    account_kind: AccountKind;
+    currency: Iso4217;
+    amount_minor: number;
+    as_of: string;
+    source: string;
+    captured_at: string;
+}
+export interface FxRate {
+    id: string;
+    base_currency: Iso4217;
+    quote_currency: Iso4217;
+    rate: number;
+    as_of: string;
+    source: string;
+    captured_at: string;
+}
+export interface CostFeed {
+    id: string;
+    entity_id: string;
+    currency: Iso4217;
+    monthly_burn_minor: number;
+    as_of: string;
+    source: string;
+    captured_at: string;
+}
+export interface CurrencyExposure {
+    currency: Iso4217;
+    total_minor: number;
+    in_base_minor: number;
+}
+export interface FxExposureReport {
+    base_currency: Iso4217;
+    as_of: string;
+    total_in_base_minor: number;
+    exposures: CurrencyExposure[];
+}
+export interface RunwayReport {
+    scope: "entity" | "group";
+    entity_id: string | null;
+    base_currency: Iso4217;
+    cash_in_base_minor: number;
+    monthly_burn_in_base_minor: number;
+    runway_months: number | null;
+    as_of: string;
+}
+export interface ForecastPoint {
+    month_index: number;
+    month: string;
+    projected_cash_in_base_minor: number;
+}
+export interface CashForecast {
+    scope: "entity" | "group";
+    entity_id: string | null;
+    base_currency: Iso4217;
+    horizon_months: number;
+    starting_cash_in_base_minor: number;
+    monthly_burn_in_base_minor: number;
+    points: ForecastPoint[];
+    as_of: string;
+}
+export type SweepStatus = "recommended" | "acknowledged" | "dismissed";
+/**
+ * A sweep / intercompany-funding RECOMMENDATION. Treasury is read/advisory and
+ * NEVER moves money itself — executing a recommendation must be requested
+ * through the controls service, which issues the single-use authorization token.
+ */
+export interface SweepRecommendation {
+    id: string;
+    from_entity_id: string;
+    to_entity_id: string;
+    currency: Iso4217;
+    amount_minor: number;
+    rationale: string;
+    status: SweepStatus;
+    requires_controls_authorization: true;
+    created_at: string;
+    updated_at: string;
+}
+export interface AuditEvent {
+    id: number;
+    entity_id: string | null;
+    actor_id: string;
+    action: string;
+    detail: string;
+    prev_hash: string;
+    row_hash: string;
+    created_at: string;
+}
+export declare class TreasuryError extends Error {
+    static suggestion: string;
+    code: string;
+    constructor(message: string);
+}
+export declare class EntityNotFoundError extends TreasuryError {
+    static suggestion: string;
+    code: string;
+    constructor(id: string);
+}
+export declare class SweepNotFoundError extends TreasuryError {
+    static suggestion: string;
+    code: string;
+    constructor(id: string);
+}
+export declare class ValidationError extends TreasuryError {
+    static suggestion: string;
+    code: string;
+    constructor(message: string);
+}
+export declare class PermissionDeniedError extends TreasuryError {
+    static suggestion: string;
+    code: string;
+    constructor(action: string, resource?: string);
+}
+export declare class UnauthorizedError extends TreasuryError {
+    static suggestion: string;
+    code: string;
+    constructor(message?: string);
+}
+//# sourceMappingURL=index.d.ts.map

package/dist/types/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/types/index.ts"],"names":[],"mappings":"AAIA,MAAM,MAAM,OAAO,GAAG,MAAM,CAAC;AAE7B,MAAM,WAAW,SAAS;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,aAAa,EAAE,OAAO,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,MAAM,WAAW,GAAG,MAAM,GAAG,QAAQ,CAAC;AAE5C,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,WAAW,CAAC;IAC1B,QAAQ,EAAE,OAAO,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,MAAM;IACrB,EAAE,EAAE,MAAM,CAAC;IACX,aAAa,EAAE,OAAO,CAAC;IACvB,cAAc,EAAE,OAAO,CAAC;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,QAAQ;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,OAAO,CAAC;IAClB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,OAAO,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,gBAAgB;IAC/B,aAAa,EAAE,OAAO,CAAC;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,mBAAmB,EAAE,MAAM,CAAC;IAC5B,SAAS,EAAE,gBAAgB,EAAE,CAAC;CAC/B;AAED,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,QAAQ,GAAG,OAAO,CAAC;IAC1B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,aAAa,EAAE,OAAO,CAAC;IACvB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,0BAA0B,EAAE,MAAM,CAAC;IACnC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,aAAa;IAC5B,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,4BAA4B,EAAE,MAAM,CAAC;CACtC;AAED,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,QAAQ,GAAG,OAAO,CAAC;IAC1B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,aAAa,EAAE,OAAO,CAAC;IACvB,cAAc,EAAE,MAAM,CAAC;IACvB,2BAA2B,EAAE,MAAM,CAAC;IACpC,0BAA0B,EAAE,MAAM,CAAC;IACnC,MAAM,EAAE,aAAa,EAAE,CAAC;IACxB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,MAAM,WAAW,GAAG,aAAa,GAAG,cAAc,GAAG,WAAW,CAAC;AAEvE;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,cAAc,EAAE,MAAM,CAAC;IACvB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,OAAO,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,WAAW,CAAC;IACpB,+BAA+B,EAAE,IAAI,CAAC;IACtC,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;CACpB;AAID,qBAAa,aAAc,SAAQ,KAAK;IACtC,MAAM,CAAC,UAAU,SAAM;IACvB,IAAI,SAAoB;gBACZ,OAAO,EAAE,MAAM;CAI5B;AAED,qBAAa,mBAAoB,SAAQ,aAAa;IACpD,MAAM,CAAC,UAAU,SAAiE;IAClF,IAAI,SAAsB;gBACd,EAAE,EAAE,MAAM;CAGvB;AAED,qBAAa,kBAAmB,SAAQ,aAAa;IACnD,MAAM,CAAC,UAAU,SAA8D;IAC/E,IAAI,SAAqB;gBACb,EAAE,EAAE,MAAM;CAGvB;AAED,qBAAa,eAAgB,SAAQ,aAAa;IAChD,MAAM,CAAC,UAAU,SAAyC;IAC1D,IAAI,SAAsB;gBACd,OAAO,EAAE,MAAM;CAG5B;AAED,qBAAa,qBAAsB,SAAQ,aAAa;IACtD,MAAM,CAAC,UAAU,SAAgE;IACjF,IAAI,SAAuB;gBACf,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM;CAG9C;AAED,qBAAa,iBAAkB,SAAQ,aAAa;IAClD,MAAM,CAAC,UAAU,SAAwC;IACzD,IAAI,SAAkB;gBACV,OAAO,SAAmC;CAGvD"}

package/dist/version.d.ts

@@ -0,0 +1,3 @@
+/** Single source of truth for the app version (derived from package.json). */
+export declare const APP_VERSION: string;
+//# sourceMappingURL=version.d.ts.map

package/dist/version.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.d.ts","sourceRoot":"","sources":["../src/version.ts"],"names":[],"mappings":"AAEA,8EAA8E;AAC9E,eAAO,MAAM,WAAW,QAAc,CAAC"}