@kasufinance/kasu-sdk 2.14.0 → 2.15.0

package/dist/bundle.cjs.js

@@ -27878,19 +27878,30 @@ function buildLoanAgreementSignMessage(p) {
     ].join('\n');
 }
 /**
- * The legacy `/contract/generate` and `/contract/resolve` message.
+ * The legacy `/contract/generate` message.
  *
  * ⚠️ BYTE-EXACT PROTOCOL STRING. kasu-backend rebuilds it as
  * `` `I request contract content for ${address} at ${timestamp}.` `` from the
  * `address` and `timestamp` fields of the request body — so the string signed
  * and the body sent must agree exactly, INCLUDING the address casing. This
  * builder lowercases, and the request body must carry the same lowercased
- * address; that is what both apps signing this format do today.
+ * address.
  *
  * The backend takes this path whenever the four human-readable display fields
- * are absent, and documents it as permanent until the legacy app is
- * decommissioned. `/contract/resolve` has no other format — every consumer
- * signs this one to retrieve an existing agreement.
+ * are absent. Only the retired kasu-fe-next app (retired 2026-11-05) and
+ * kasu-mobile builds from before 2026-09-06 signed it; every current consumer
+ * signs `buildLoanAgreementSignMessage`. The backend keeps accepting it until
+ * no such mobile build is left in use.
+ *
+ * It is NOT the `/contract/resolve` message. Resolve has a message of its own
+ * (`Requesting contract content for {address}/{id} at {timestamp}.`), which
+ * kasu-backend rebuilds and verifies, so it does not depend on this format.
+ *
+ * @deprecated Sign the human-readable loan-agreement message
+ *   (`buildLoanAgreementSignMessage`, `contractMessage.format:
+ *   'loan-agreement'`) instead. Only the retired kasu-fe-next app and
+ *   pre-2026-09-06 kasu-mobile builds used this format; it will be removed in
+ *   the next major version.
  *
  * @param timestampMs ms-epoch, and the same value sent as the body's
  *   `timestamp`.
@@ -29309,6 +29320,381 @@ function maxNetRateCeiling(pools, feePercent) {
     return rate;
 }
 
+/**
+ * The CMS-authored figures and text a strategy's Details screen shows, read
+ * the way kasu-ui's Details tab reads them, so every app shows the same
+ * thing.
+ *
+ * Lifted from kasu-ui (`lib/details-fields.ts`, `lib/directus-text.ts` and
+ * the parsers inside `deposit-dialog/details-tab.tsx`). The rules are facts
+ * about how the CMS is authored, not presentation:
+ *
+ *   - EMPTY IS UNAUTHORED. The CMS stores an emptied field as `''`, and its
+ *     "numeric" fields arrive as a number, a numeric string, `''` or `null`.
+ *     Anything that is not real data reads as `undefined` — never a `0`, a
+ *     placeholder or a sentence of the SDK's own. A field the caller cannot
+ *     read is a row the caller omits.
+ *   - A START DATE MUST DATE. A value that is not an ISO date, or a real
+ *     calendar date, or is before 2000 or in the future, is refused: rendered
+ *     as elapsed time it would claim a history nobody authored.
+ *   - SOME FIELDS CARRY TWO LINES IN ONE STRING. Business Types and Facility
+ *     Type are a primary value and a qualifying clause; risk-item
+ *     descriptions can be numbered enumerations. Splitting them is the same
+ *     everywhere, so it lives here.
+ *
+ * Like `pickShortDescription`, this authors no string of its own: it selects,
+ * splits and trims text the CMS already holds. None of it is sanitised —
+ * render every string as text, never as HTML or markdown.
+ *
+ * Pure. No clock: the date reader takes `now` from its caller.
+ */
+// ---------------------------------------------------------------------------
+// Start dates
+// ---------------------------------------------------------------------------
+/**
+ * `YYYY-MM-DD`, optionally followed by a time part — the two shapes a CMS
+ * date column serialises to. Checked BEFORE any parse: `new Date('Jun 2024')`
+ * is a valid date in V8, so an editorial string would otherwise become a
+ * confident duration.
+ */
+const ISO_DATE = /^(\d{4})-(\d{2})-(\d{2})(?:[T ].*)?$/;
+/** Nothing on Kasu has a lending history from before this year. */
+const EARLIEST_YEAR = 2000;
+/**
+ * A CMS start date as its `YYYY-MM-DD` date head, or `undefined`.
+ *
+ * Accepts an ISO date, optionally with a time part (only the date head is
+ * kept — a time changes nothing at year/month granularity, and converting it
+ * through a timezone could move it a day). Refused, as `undefined`:
+ *
+ *   - anything that is not a string (or, with `unixSeconds`, a number);
+ *   - an empty or blank string (unauthored);
+ *   - a string that is not ISO-shaped (`'Jun 2024'`);
+ *   - a date that does not exist (`'2024-02-30'`, `'2024-13-01'`) — never
+ *     rolled over into the next month;
+ *   - a year before 2000;
+ *   - a date after `now` (a typo such as 2062 for 2026 — no history has
+ *     begun in the future).
+ *
+ * `now` is the caller's clock; the facade passes the current time.
+ */
+function readCmsStartDate(value, now, options = {}) {
+    let head;
+    if (typeof value === 'number' && options.unixSeconds) {
+        // `0` is formatDuration's "unset" sentinel; negatives are pre-1970.
+        if (!Number.isFinite(value) || value <= 0)
+            return undefined;
+        const date = new Date(value * 1000);
+        if (Number.isNaN(date.getTime()))
+            return undefined;
+        head = date.toISOString().slice(0, 10);
+    }
+    else if (typeof value === 'string') {
+        const trimmed = value.trim();
+        if (!ISO_DATE.test(trimmed))
+            return undefined;
+        head = trimmed.slice(0, 10);
+    }
+    else {
+        return undefined;
+    }
+    const match = ISO_DATE.exec(head);
+    if (!match)
+        return undefined;
+    const year = Number(match[1]);
+    const month = Number(match[2]);
+    const day = Number(match[3]);
+    // Round-trip through UTC: a day or month out of range comes back as a
+    // different date, which is how a non-existent date is caught.
+    const utc = new Date(Date.UTC(year, month - 1, day));
+    if (utc.getUTCFullYear() !== year ||
+        utc.getUTCMonth() !== month - 1 ||
+        utc.getUTCDate() !== day) {
+        return undefined;
+    }
+    if (year < EARLIEST_YEAR)
+        return undefined;
+    if (utc.getTime() > now.getTime())
+        return undefined;
+    return head;
+}
+/**
+ * Business Types (the CMS `industryExposure`), split into the value and its
+ * supporting clause on the FIRST newline, else the FIRST parenthesised
+ * segment (a trailing `)` dropped):
+ *
+ *   `'SMEs & Large Businesses (diversified industries – exclusions apply)'`
+ *   → `{ primary: 'SMEs & Large Businesses', detail: 'diversified industries – exclusions apply' }`
+ *
+ * A value with neither delimiter is `{ primary }` alone. `undefined` for a
+ * missing, non-string, empty or blank value.
+ *
+ * REFINED over kasu-ui: a value that OPENS with `(` would split to an empty
+ * primary there; here the whole value is the primary instead, so `primary`
+ * is never empty. No live record has that shape.
+ */
+function splitBusinessTypes(raw) {
+    const value = typeof raw === 'string' ? raw.trim() : '';
+    if (!value)
+        return undefined;
+    let primary = value;
+    let detail = '';
+    const newlineAt = value.indexOf('\n');
+    if (newlineAt !== -1) {
+        primary = value.slice(0, newlineAt).trim();
+        detail = value.slice(newlineAt + 1).trim();
+    }
+    else {
+        const parenAt = value.indexOf('(');
+        if (parenAt !== -1) {
+            primary = value.slice(0, parenAt).trim();
+            detail = value.slice(parenAt + 1).trim();
+            if (detail.endsWith(')'))
+                detail = detail.slice(0, -1).trim();
+        }
+    }
+    if (!primary)
+        return { primary: value };
+    return detail ? { primary, detail } : { primary };
+}
+/**
+ * The start of the label, or a character that is neither a word character
+ * nor a hyphen, before `revolv` — not `\b`, which treats a hyphen as a
+ * boundary, so "Non-Revolving" would match. kasu-ui writes the same rule as
+ * the lookbehind `(?<![\w-])`; this form needs no lookbehind support from the
+ * JavaScript engine.
+ */
+const REVOLVING_FACILITY = /(?:^|[^\w-])revolv\w*\b/i;
+/**
+ * Facility Type (the CMS `loanStructure`): the label on the FIRST line, and
+ * everything after the first newline as its clause, so a clause with line
+ * breaks of its own stays whole.
+ *
+ *   `'Revolving Instalment Facility\n12-24 months instalment loan, subject to annual review'`
+ *   → `{ label: 'Revolving Instalment Facility', detail: '12-24 months …', revolving: true }`
+ *
+ * `undefined` for a missing, non-string, empty or blank value. The value is
+ * trimmed first, so a leading blank line still yields a label.
+ */
+function parseFacility(raw) {
+    const value = typeof raw === 'string' ? raw.trim() : '';
+    if (!value)
+        return undefined;
+    const breakAt = value.indexOf('\n');
+    const label = (breakAt === -1 ? value : value.slice(0, breakAt)).trim();
+    const detail = breakAt === -1 ? '' : value.slice(breakAt + 1).trim();
+    const revolving = REVOLVING_FACILITY.test(label);
+    return detail ? { label, detail, revolving } : { label, revolving };
+}
+// ---------------------------------------------------------------------------
+// Risk Management
+// ---------------------------------------------------------------------------
+/**
+ * The order the Risk Management groups read in, by group name (compared
+ * trimmed, case-insensitively). The CMS returns items in authoring order,
+ * which is not this. A group not listed still appears — after these, in CMS
+ * order.
+ */
+const RISK_GROUP_ORDER = Object.freeze([
+    'Security & Recourse',
+    'Structural Controls',
+    'Financial Covenants',
+    'Reporting Covenants',
+    'Key Eligibility Criteria',
+]);
+/** Zero-width paste artifacts, which `\s` does not match. */
+const ZERO_WIDTH = /[​-‍]/g;
+/** An `N)` marker at the start, or after a `;` / `; and,` separator. */
+const HAS_ENUMERATION = /(?:^\d+\)|;\s*(?:and,?\s*)?\d+\))/;
+const ENUMERATION_SPLIT = /(?:^|\s*;\s*(?:and,?\s*)?)\d+\)\s*/;
+/** kasu-ui's stub for an unauthored description; never a clause. */
+const EMPTY_DESCRIPTION = '—';
+/**
+ * A risk-item description as the lines beneath the item's name.
+ *
+ * A numbered enumeration (`'1) Foo; and, 2) Bar'`, or one that omits its
+ * leading `1)`: `'Foo; 2) Bar'`) is one line per clause; anything else is
+ * one line. Zero-width characters are stripped first. An unauthored
+ * description is NO lines (`[]`), never a dash.
+ */
+function splitNumberedClauses(description) {
+    const raw = cleanDescription(description);
+    if (!raw)
+        return [];
+    const clauses = HAS_ENUMERATION.test(raw)
+        ? raw
+            .split(ENUMERATION_SPLIT)
+            .map((part) => part.trim())
+            .filter((part) => part.length > 0)
+        : [raw];
+    const lines = clauses.length > 0 ? clauses : [raw];
+    return lines.filter((line) => line !== EMPTY_DESCRIPTION);
+}
+/** A description with zero-width characters stripped, trimmed; `''` when not a string. */
+function cleanDescription(description) {
+    return typeof description === 'string'
+        ? description.replace(ZERO_WIDTH, '').trim()
+        : '';
+}
+/**
+ * Risk-management items grouped by their group, the groups in
+ * `RISK_GROUP_ORDER` and, within a group, the items in CMS order.
+ *
+ * An item with no name, or no group, is left out: there is nothing to head
+ * its lines with, or no group to place it in. (The CMS joins items to groups
+ * by name, so neither occurs in live data.) No group is ever empty, so an
+ * item list with nothing usable gives `[]`.
+ */
+function groupRiskManagementItems(items) {
+    const groups = new Map();
+    for (const source of items) {
+        const name = trimmedOrUndefined(source.name);
+        const group = trimmedOrUndefined(source.group);
+        if (!name || !group)
+            continue;
+        const clauses = splitNumberedClauses(source.description);
+        // The same cleaned text the clauses come from, and only when they
+        // say something: a description of "—" or of zero-width characters
+        // alone is unauthored, so it is absent here too, never a stray dash.
+        const description = clauses.length > 0 ? cleanDescription(source.description) : '';
+        const tooltip = trimmedOrUndefined(source.tooltip);
+        const item = Object.assign(Object.assign(Object.assign({ name }, (description ? { description } : {})), { clauses }), (tooltip ? { tooltip } : {}));
+        const existing = groups.get(group);
+        if (existing)
+            existing.items.push(item);
+        else
+            groups.set(group, { group, items: [item] });
+    }
+    // Array.prototype.sort is stable, so unlisted groups keep CMS order.
+    return [...groups.values()].sort((a, b) => riskGroupRank(a.group) - riskGroupRank(b.group));
+}
+const RISK_GROUP_RANK = new Map(RISK_GROUP_ORDER.map((group, index) => [group.toLowerCase(), index]));
+function riskGroupRank(group) {
+    var _a;
+    return ((_a = RISK_GROUP_RANK.get(group.trim().toLowerCase())) !== null && _a !== void 0 ? _a : RISK_GROUP_ORDER.length);
+}
+/**
+ * The pool's security tags (the CMS `security` list), trimmed, blanks
+ * dropped. `undefined` when none remain.
+ *
+ * kasu-ui shows these under "Security Structure over End Borrowers" ONLY
+ * when the pool has no risk-management items.
+ */
+function securityStructureOf(raw) {
+    if (!Array.isArray(raw))
+        return undefined;
+    const tags = raw
+        .map((tag) => trimmedOrUndefined(tag))
+        .filter((tag) => tag !== undefined);
+    return tags.length > 0 ? tags : undefined;
+}
+// ---------------------------------------------------------------------------
+// Numbers
+// ---------------------------------------------------------------------------
+/**
+ * A CMS or subgraph "numeric" value as a finite number, or `undefined`. An
+ * empty or blank string is UNAUTHORED, not zero; a genuine `0` survives.
+ */
+function finiteOrUndefined(value) {
+    if (typeof value === 'number') {
+        return Number.isFinite(value) ? value : undefined;
+    }
+    if (typeof value === 'string') {
+        if (value.trim() === '')
+            return undefined;
+        const numeric = Number(value);
+        return Number.isFinite(numeric) ? numeric : undefined;
+    }
+    return undefined;
+}
+/**
+ * A leg `strategyTotalsUsd` cannot place: two legs for one deployment
+ * (`duplicate-leg`, which would double-count it), or a leg for a deployment
+ * not in `expectedDeployments` (`unexpected-leg`, a pool of some other
+ * strategy). Thrown, because both are caller bugs, not data states.
+ */
+class StrategyTotalsInputError extends Error {
+    constructor(code, deployment) {
+        super(code === 'duplicate-leg'
+            ? `strategyTotalsUsd: two legs for deployment "${deployment}"`
+            : `strategyTotalsUsd: leg for deployment "${deployment}" is not in expectedDeployments`);
+        this.code = code;
+        this.deployment = deployment;
+        this.name = 'StrategyTotalsInputError';
+    }
+}
+/**
+ * Total Active Lending and Lender Interest Earned for a strategy across the
+ * deployments it lends on, in USD: each leg's native amount times that leg's
+ * own `usdRate`, summed. Tax Pay lends on Base (USDC) and XDC (AUDD);
+ * 2,567,901 AUDD is not US$2,567,901.
+ *
+ * `expectedDeployments` is every deployment the strategy has a pool on —
+ * `strategyDeployments(poolId, chain).map((d) => d.chain)` — and `legs` the
+ * ones whose pool the caller actually loaded. What is guaranteed:
+ *
+ *   - **`null` — WITHHELD** when there are no legs, or ANY leg's rate is
+ *     missing or unusable (not a finite number above 0). The total is never
+ *     built on a guessed rate, and never silently drops a loaded leg; the
+ *     caller shows the held pool's own figure, or nothing.
+ *   - **Otherwise the sum over `legs`**, with `isPartial` /
+ *     `missingDeployments` stating exactly which expected deployments it
+ *     does NOT cover. `isPartial: false` is the only case in which the
+ *     figures are the whole strategy.
+ *   - An amount that is absent or malformed contributes nothing (a real `0`
+ *     is still `0`).
+ *   - Throws `StrategyTotalsInputError` for a duplicated leg or one not in
+ *     `expectedDeployments`, before summing anything.
+ *
+ * Only these two figures are summed. The CMS-authored ones — every
+ * originator figure, `operatingSince`, the loss rates — are shared by a
+ * strategy's pools and already strategy-wide: summing them double-counts.
+ *
+ * Mirrors the money half of kasu-ui's `aggregateStrategyPools` and its
+ * withhold gate.
+ */
+function strategyTotalsUsd(legs, expectedDeployments) {
+    var _a, _b;
+    const expected = new Set(expectedDeployments);
+    const seen = new Set();
+    for (const leg of legs) {
+        if (seen.has(leg.deployment)) {
+            throw new StrategyTotalsInputError('duplicate-leg', leg.deployment);
+        }
+        if (!expected.has(leg.deployment)) {
+            throw new StrategyTotalsInputError('unexpected-leg', leg.deployment);
+        }
+        seen.add(leg.deployment);
+    }
+    if (legs.length === 0)
+        return null;
+    let totalActiveLendingUsd = 0;
+    let lenderInterestEarnedUsd = 0;
+    for (const leg of legs) {
+        const rate = leg.usdRate;
+        if (typeof rate !== 'number' || !Number.isFinite(rate) || rate <= 0) {
+            return null;
+        }
+        totalActiveLendingUsd +=
+            ((_a = finiteOrUndefined(leg.totalActiveLending)) !== null && _a !== void 0 ? _a : 0) * rate;
+        lenderInterestEarnedUsd +=
+            ((_b = finiteOrUndefined(leg.lenderInterestEarned)) !== null && _b !== void 0 ? _b : 0) * rate;
+    }
+    const missingDeployments = [...expected].filter((d) => !seen.has(d));
+    return {
+        totalActiveLendingUsd,
+        lenderInterestEarnedUsd,
+        isPartial: missingDeployments.length > 0,
+        missingDeployments,
+    };
+}
+function trimmedOrUndefined(value) {
+    if (typeof value !== 'string')
+        return undefined;
+    const trimmed = value.trim();
+    return trimmed.length > 0 ? trimmed : undefined;
+}
+
 /**
  * A strategy's SHORT blurb, as plain text: the CMS `liteDescription` first,
  * else the first paragraph of the long `description`, else nothing.
@@ -29396,10 +29782,55 @@ class StrategiesFacade {
      * Chain pool id → the pool id its CMS record is keyed by (XDC pools
      * share their Base counterpart's editorial record). Lowercase keys.
      */
-    _poolMetadataMapping = {}) {
+    _poolMetadataMapping = {}, 
+    /**
+     * The clock the CMS start dates are checked against (a date after it
+     * is refused). Injected for tests; the current time otherwise.
+     */
+    _now = () => new Date(), 
+    /**
+     * Milliseconds on a clock that only moves forward, for the shared
+     * CMS reads' 30-second lifetime — separate from `_now`, so a pinned
+     * date clock cannot keep a read alive for ever. Injected for tests;
+     * `Date.now` otherwise.
+     */
+    _memoClockMs = () => Date.now()) {
         this._dataService = _dataService;
         this._userLending = _userLending;
         this._poolMetadataMapping = _poolMetadataMapping;
+        this._now = _now;
+        this._memoClockMs = _memoClockMs;
+        /**
+         * Short-lived, per-instance memo of the two CMS-wide reads the pool
+         * getters share, so a Details screen asking for the loss rate, the risk
+         * groups and the originator together reads each collection once. Keyed
+         * by read; holds the in-flight promise, so concurrent callers share it.
+         * A REJECTED read is dropped at once, never served again — the next call
+         * retries.
+         */
+        this._cmsReads = new Map();
+    }
+    _memoCmsRead(key, read) {
+        const nowMs = this._memoClockMs();
+        const cached = this._cmsReads.get(key);
+        if (cached && cached.expiresAt > nowMs) {
+            return cached.promise;
+        }
+        const promise = read();
+        const entry = { promise, expiresAt: nowMs + CMS_READ_TTL_MS };
+        this._cmsReads.set(key, entry);
+        promise.catch(() => {
+            // Only our own entry: a newer read may have replaced it.
+            if (this._cmsReads.get(key) === entry)
+                this._cmsReads.delete(key);
+        });
+        return promise;
+    }
+    _riskManagementRecords() {
+        return this._memoCmsRead('riskManagement', () => this._dataService.getRiskManagement());
+    }
+    _originatorProfiles() {
+        return this._memoCmsRead('originatorProfiles', () => this._dataService.getPoolDelegateProfileAndHistory());
     }
     /**
      * The pool's loss rate and first-loss capital, from its CMS
@@ -29412,12 +29843,14 @@ class StrategiesFacade {
      * 0..1 fraction.
      *
      * Requires `directusUrl`; without it the call rejects with
-     * `NO_DIRECTUS_URL_MESSAGE`, like every CMS-only read.
+     * `NO_DIRECTUS_URL_MESSAGE`, like every CMS-only read. Shares its CMS
+     * read with `getRiskManagementGroups` for 30 seconds per instance; a
+     * failed read is never reused.
      */
     getRiskPerformance(poolId) {
         return __awaiter(this, void 0, void 0, function* () {
             const metadataId = this._metadataIdOf(poolId);
-            const records = yield this._dataService.getRiskManagement();
+            const records = yield this._riskManagementRecords();
             const record = records.find((r) => String(r.poolIdFK).toLowerCase() === metadataId);
             if (!record)
                 return null;
@@ -29441,16 +29874,95 @@ class StrategiesFacade {
      * deployment every profile lists no pools and this resolves `null` —
      * the same answer kasu-ui's own lookup gives there today. The metadata
      * candidate becomes live once the service resolves the mapping.
+     *
+     * Shares its reads with `getOriginatorHistory` for 30 seconds per
+     * instance; a failed read is never reused. Each call returns its own
+     * copy of the profile, so mutating it changes nothing shared.
      */
     getOriginator(poolId) {
         return __awaiter(this, void 0, void 0, function* () {
-            var _a;
             const candidates = new Set([
                 poolId.toLowerCase(),
                 this._metadataIdOf(poolId),
             ]);
-            const profiles = yield this._dataService.getPoolDelegateProfileAndHistory();
-            return ((_a = profiles.find((profile) => profile.otherKASUPools.some((pool) => candidates.has(String(pool.id).toLowerCase())))) !== null && _a !== void 0 ? _a : null);
+            const profiles = yield this._originatorProfiles();
+            const profile = profiles.find((candidate) => candidate.otherKASUPools.some((pool) => candidates.has(String(pool.id).toLowerCase())));
+            // A copy: the profiles are shared between calls (see
+            // `_memoCmsRead`), so a caller sorting or editing its result must
+            // not change what the next call returns.
+            return profile
+                ? Object.assign(Object.assign({}, profile), { otherKASUPools: profile.otherKASUPools.map((pool) => (Object.assign({}, pool))) }) : null;
+        });
+    }
+    /**
+     * The credit originator's ENTIRE lending history for a pool — since when,
+     * total originated, loans outstanding, loss rate — read from the profile
+     * `getOriginator` finds, each figure validated. `null` when no profile
+     * lists the pool, or the profile authors none of the four.
+     *
+     * kasu-ui's Details tab shows these as its Credit Originator strip, and
+     * hides the strip when there is no profile. The money figures are
+     * editorial USD on every deployment: never FX-convert them. An XDC pool
+     * resolves `null` today, as it does in kasu-ui (see `getOriginator`).
+     *
+     * Requires `directusUrl`, like every CMS-only read; rejects when the
+     * read fails. Shares its reads with `getOriginator` for 30 seconds per
+     * instance; a failed read is never reused.
+     */
+    getOriginatorHistory(poolId) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const profile = yield this.getOriginator(poolId);
+            if (!profile)
+                return null;
+            const history = {};
+            const since = readCmsStartDate(profile.delegateLendingHistory, this._now(), { unixSeconds: true });
+            if (since !== undefined)
+                history.since = since;
+            const totalOriginated = finiteOrUndefined(profile.totalLoanFundsOriginated);
+            if (totalOriginated !== undefined) {
+                history.totalOriginated = totalOriginated;
+            }
+            const loansOutstanding = finiteOrUndefined(profile.loansUnderManagement);
+            if (loansOutstanding !== undefined) {
+                history.loansOutstanding = loansOutstanding;
+            }
+            const lossRate = finiteOrUndefined(profile.historicLossRate);
+            if (lossRate !== undefined)
+                history.lossRate = lossRate;
+            return Object.keys(history).length > 0 ? history : null;
+        });
+    }
+    /**
+     * The pool's Risk Management groups, from its CMS risk-management record:
+     * each group with its items (name, the pool's description of it split
+     * into lines, the shared tooltip), the groups in `RISK_GROUP_ORDER`
+     * (Security & Recourse, Structural Controls, Financial Covenants,
+     * Reporting Covenants, Key Eligibility Criteria, then any other in CMS
+     * order). See `groupRiskManagementItems`.
+     *
+     * `null` when the pool has no record, or the record has no usable item —
+     * then kasu-ui falls back to `Strategy.securityStructure`. XDC pools
+     * resolve through the metadata mapping to their Base record, like
+     * `getRiskPerformance`.
+     *
+     * REJECTS when the CMS read fails (an outage, or no `directusUrl` —
+     * `NO_DIRECTUS_URL_MESSAGE`), so a failure stays visible rather than
+     * reading as "no items". For what to SHOW, treat a rejection like `null`:
+     * fall back to `Strategy.securityStructure`, which arrives with the
+     * strategy and needs no second read.
+     *
+     * Shares its CMS read with `getRiskPerformance` for 30 seconds per
+     * instance; a failed read is never reused.
+     */
+    getRiskManagementGroups(poolId) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const metadataId = this._metadataIdOf(poolId);
+            const records = yield this._riskManagementRecords();
+            const record = records.find((r) => String(r.poolIdFK).toLowerCase() === metadataId);
+            if (!record || !Array.isArray(record.items))
+                return null;
+            const groups = groupRiskManagementItems(record.items);
+            return groups.length > 0 ? groups : null;
         });
     }
     _metadataIdOf(poolId) {
@@ -29624,10 +30136,39 @@ class StrategiesFacade {
             apyStructure: pool.poolApyStructure,
             thumbnailUrl: pool.thumbnailImageUrl,
             bannerUrl: pool.bannerImageUrl,
+            strategyHistory: strategyHistoryOf(pool, this._now()),
+            endBorrowers: endBorrowersOf(pool),
+            securityStructure: securityStructureOf(pool.security),
             _raw: pool,
         };
     }
 }
+/**
+ * How long a CMS-wide read is shared between the pool getters. Long enough
+ * for one screen's worth of calls, short enough that a CMS edit shows on the
+ * next visit; apps cache further on their own terms.
+ */
+const CMS_READ_TTL_MS = 30000;
+/** `Strategy.strategyHistory`: an absent figure is an absent key. */
+function strategyHistoryOf(pool, now) {
+    const history = {};
+    const since = readCmsStartDate(pool.operatingSince, now);
+    if (since !== undefined)
+        history.since = since;
+    const lenderInterestEarned = finiteOrUndefined(pool.yieldEarned);
+    if (lenderInterestEarned !== undefined) {
+        history.lenderInterestEarned = lenderInterestEarned;
+    }
+    return history;
+}
+/** Business Types and Facility Type, or `undefined` when neither is authored. */
+function endBorrowersOf(pool) {
+    const businessTypes = splitBusinessTypes(pool.industryExposure);
+    const facility = parseFacility(pool.loanStructure);
+    if (!businessTypes && !facility)
+        return undefined;
+    return Object.assign(Object.assign({}, (businessTypes ? { businessTypes } : {})), (facility ? { facility } : {}));
+}
 /**
  * A CMS text field as a string, or `undefined` when it is absent, not a
  * string, or empty (blank included) — the CMS stores an emptied field as `''`, and an empty
@@ -31167,6 +31708,7 @@ exports.PoolTvlHistoryAbortedError = PoolTvlHistoryAbortedError;
 exports.PoolTvlHistoryTimeoutError = PoolTvlHistoryTimeoutError;
 exports.PortfolioFacade = PortfolioFacade;
 exports.READ_ONLY_MESSAGE = READ_ONLY_MESSAGE;
+exports.RISK_GROUP_ORDER = RISK_GROUP_ORDER;
 exports.RIXON_CAPITAL = RIXON_CAPITAL;
 exports.SECONDS_PER_WEEK = SECONDS_PER_WEEK;
 exports.SPONSORED_CALL_KINDS = SPONSORED_CALL_KINDS;
@@ -31175,6 +31717,7 @@ exports.SdkConfig = SdkConfig;
 exports.SponsoredCallInputError = SponsoredCallInputError;
 exports.StrategiesFacade = StrategiesFacade;
 exports.StrategyDeploymentInputError = StrategyDeploymentInputError;
+exports.StrategyTotalsInputError = StrategyTotalsInputError;
 exports.TvlHistoryInputError = TvlHistoryInputError;
 exports.UPPER_MEZZANINE = UPPER_MEZZANINE;
 exports.WithdrawFlow = WithdrawFlow;
@@ -31223,6 +31766,7 @@ exports.getCreditOriginator = getCreditOriginator;
 exports.getInstitutionalLender = getInstitutionalLender;
 exports.getStrategyRegion = getStrategyRegion;
 exports.getTrancheDisplayName = getTrancheDisplayName;
+exports.groupRiskManagementItems = groupRiskManagementItems;
 exports.isAuMinimumExempt = isAuMinimumExempt;
 exports.isAustralianKyc = isAustralianKyc;
 exports.isBelowMinimumCapacity = isBelowMinimumCapacity;
@@ -31238,6 +31782,7 @@ exports.maxNetRateCeiling = maxNetRateCeiling;
 exports.netEffectiveApy = netEffectiveApy;
 exports.netTrancheApyBounds = netTrancheApyBounds;
 exports.nextCycleBoundary = nextCycleBoundary;
+exports.parseFacility = parseFacility;
 exports.parseFormattedMessage = parseFormattedMessage;
 exports.parseMinorUnits = parseMinorUnits;
 exports.parseTrancheBound = parseTrancheBound;
@@ -31250,10 +31795,15 @@ exports.poolTvl = poolTvl;
 exports.projectedAnnualEarnings = projectedAnnualEarnings;
 exports.proveDepositInReceipt = proveDepositInReceipt;
 exports.proveUserOperationInReceipt = proveUserOperationInReceipt;
+exports.readCmsStartDate = readCmsStartDate;
 exports.resolveBoundShortcuts = resolveBoundShortcuts;
 exports.resolveDepositBounds = resolveDepositBounds;
+exports.securityStructureOf = securityStructureOf;
 exports.selectVisiblePools = selectVisiblePools;
+exports.splitBusinessTypes = splitBusinessTypes;
+exports.splitNumberedClauses = splitNumberedClauses;
 exports.strategyDeployments = strategyDeployments;
+exports.strategyTotalsUsd = strategyTotalsUsd;
 exports.submissionEvents = submissionEvents;
 exports.submitBatch = submitBatch;
 exports.submitSponsoredCall = submitSponsoredCall;