@wealthfolio/addon-sdk 3.5.1 → 3.6.1

package/CHANGELOG.md

@@ -4,6 +4,221 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to
 [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [3.6.1] - 2026-07-06
+
+Follow-up to the v3.6 sandbox release: sidebar icons are now a typed, curated
+set. See the
+[v3.5 → v3.6 migration guide](../../docs/addons/addon-migration-guide-v3.5-to-v3.6.md).
+
+### Breaking
+
+- **`SidebarItemConfig.icon`** is now a typed `AddonIconName` (was `string`).
+  Names outside the curated set fail type-checking; unknown or omitted names
+  render a neutral `caret-right` fallback at runtime.
+
+### Added
+
+- `AddonIconName` type and `ADDON_ICON_NAMES` — the curated set of duotone
+  Phosphor sidebar icon names, exported from the package entry point.
+
+## [3.6.0] - 2026-07-04
+
+Addons now run in an isolated sandbox iframe. This is a **breaking** release for
+addons that register routes. See the
+[v3.5 → v3.6 migration guide](../../docs/addons/addon-migration-guide-v3.5-to-v3.6.md).
+
+### Breaking
+
+- **Route registration**: `RouteConfig.component` (a lazy React component) is
+  replaced by `RouteConfig.render(ctx)`, which mounts into a host-provided
+  `ctx.root: HTMLElement`. New types: `AddonRouteRenderer`,
+  `AddonRouteRenderContext`, `AddonRouteLocation`.
+- **React exports removed**: the SDK no longer re-exports `React` / `ReactDOM`
+  from host globals. Import from `react` / `react-dom/client`; mark them
+  `external` in your build.
+- **`SidebarItemConfig`**: `icon` is now a host-supported icon name (`string`)
+  instead of a `React.ReactNode`, and the `onClick` handler was removed — use
+  `route`.
+- **React** guaranteed version bumped 19.1.1 → 19.2.4.
+
+### Added
+
+- `HOST_DEPENDENCIES` export — the versioned packages the sandbox provides
+  (react, react-dom, @tanstack/react-query, @wealthfolio/ui, date-fns,
+  lucide-react, recharts).
+- Brokered networking: `ctx.api.network.request()` with manifest-declared
+  `network.allowedHosts` and bearer auth resolved from scoped secret storage
+  (`NetworkAPI`, `NetworkRequest`, `NetworkResponse`, `NetworkAuth`).
+- Manifest fields: `minWealthfolioVersion`, `hostDependencies`, `network`,
+  `sha256`. `AddonHostDependencies` type.
+- Addon SDK tax fields on activity/data types (#1188).
+
+## [3.5.1] - 2026-06-09
+
+Also includes the unpublished 3.4.0 and 3.5.0.
+
+### Added
+
+- `PerformanceResult` — a comprehensive performance model replacing
+  `PerformanceMetrics`, with supporting types `PerformanceScopeDescriptor`,
+  `PerformancePeriod`, `ReturnMethod`, `PerformanceReturns`,
+  `PerformanceAttribution`, `PerformanceRisk`, `PerformanceDataQuality`.
+- Goal enrichment: `GoalType`, `GoalLifecycle`, `GoalHealth` types; `Goal` gains
+  `goalType`, `statusHealth`, `priority`, `coverImageKey`, `currency`, dates,
+  valuation summaries, and timestamps. `GoalProgress` gains `goalId`,
+  `statusHealth`, `targetDate`.
+- Asset resolution: `AssetResolutionInput` (`quoteCcy`, `instrumentType`,
+  `providerId`, `providerSymbol`); an `asset` field on `ActivityCreate` /
+  `ActivityUpdate`; `assetId` on `ActivityImport`.
+- Provider-aware market data: `providerId` / `providerSymbol` plus canonical
+  `canonicalSymbol` / `canonicalExchangeMic` on `SymbolSearchResult`;
+  `DividendEvent` type and `FetchDividendsOptions`.
+- `AccountType` gains `CREDIT_CARD`; `Settings.defaultReturnMetric`
+  (`'twr' | 'irr' | 'valueReturn'`).
+- Base-currency fields on `AccountValuation` (`totalValueBase`, `costBasisBase`,
+  `netContributionBase`, …) and provider/quote fields on `SnapshotHoldingInput`
+  / `SnapshotPositionInput`.
+
+### Changed
+
+- Performance API now returns the new `Result` types: `calculateHistory()` (with
+  `startDate` / `endDate` now optional) and `calculateSummary()` return
+  `PerformanceResult`; `calculateAccountsSimple()`, `AccountSummaryView`, and
+  `AccountGroup` use `SimplePerformanceResult`.
+- `fetchDividends()` accepts an optional `FetchDividendsOptions` and returns
+  `DividendEvent[]` (was `YahooDividend[]`).
+- `backupDatabase()` returns `{ filename: string }` (dropped the
+  `data: Uint8Array` payload).
+
+### Deprecated
+
+- `PerformanceMetrics` / `SimplePerformanceMetrics` (aliases for their `Result`
+  counterparts), `SymbolInput` (use `AssetResolutionInput`), and the `symbol`
+  field on `ActivityCreate` / `ActivityUpdate` (use `asset`).
+
+### Removed
+
+- `YahooDividend` (replaced by `DividendEvent`); `dayGainLossAmount` and
+  `dayReturnPercentModDietz` from `SimplePerformanceResult`.
+
+## [3.3.0] - 2026-05-01
+
+### Added
+
+- `GoalsAPI.getFunding(goalId)` and `saveFunding(goalId, rules)`, with matching
+  `getFunding` / `saveFunding` functions under the renamed `financial-planning`
+  permission.
+- `GoalAllocation.taxBucket`.
+
+### Changed
+
+- `Goal.isAchieved` replaced by `Goal.statusLifecycle`
+  (`'active' | 'achieved' | 'archived'`).
+- `GoalAllocation.percentAllocation` renamed to `sharePercent`.
+- `goals` permission category renamed to `financial-planning`.
+
+### Deprecated
+
+- `GoalsAPI.updateAllocations()` (use `saveFunding`) and `getAllocations()` (use
+  `getAll()` + `getFunding(goalId)`).
+
+## [3.2.0] - 2026-04-02
+
+### Changed
+
+- `ActivitiesAPI.checkImport()` dropped its `accountId` parameter — now
+  `checkImport(activities)`, a read-only preview.
+- `ActivitiesAPI.getImportMapping()` accepts an optional `contextKind` (default
+  `'ACTIVITY'`).
+- `ImportMappingData.fieldMappings` widened to
+  `Record<string, string | string[]>`.
+- `PerformanceMetrics.periodReturn` is now nullable (`number | null`).
+
+## [3.1.1] - 2026-03-14
+
+A large release that overhauls the asset and activity data models (also includes
+the unpublished 3.0.1–3.1.0). **Breaking** for addons that read or write assets,
+activities, or quotes.
+
+### Breaking
+
+- **Asset model** is now keyed by an opaque UUID instead of a symbol. `Asset` is
+  redesigned with `kind` (`AssetKind`), `displayCode`, `quoteMode`, `quoteCcy`,
+  `instrumentType`, `instrumentSymbol`, `instrumentKey`, `providerConfig`, …;
+  removed `symbol`, `isin`, `assetClass`, `countries`, `sectors`, `dataSource`,
+  and more.
+- **Activity model** redesigned: `type` → `activityType`, `date` →
+  `activityDate`, `assetId` now optional, monetary/quantity fields are decimal
+  strings; new lifecycle fields (`subtype`, `status`, `settlementDate`,
+  `idempotencyKey`, `importRunId`, `metadata`, …). `ActivityType` is now a
+  closed set of 14 (removed `ADD_HOLDING` / `REMOVE_HOLDING`; added `SPLIT`,
+  `CREDIT`, `ADJUSTMENT`, `UNKNOWN`).
+- **Quotes / assets APIs** now take `assetId` instead of `symbol`:
+  `QuotesAPI.update()` / `getHistory()`, `Quote` / `QuoteUpdate`,
+  `MarketDataAPI.sync(assetIds)`. `AssetsAPI.updateDataSource()` →
+  `updateQuoteMode(assetId, quoteMode)`. `searchTicker()` returns
+  `SymbolSearchResult` (renamed from `QuoteSummary`).
+- `ActivitiesAPI.import()` returns `ImportActivitiesResult` (was
+  `ActivityImport[]`); `SettingsAPI.update()` takes `Partial<Settings>`;
+  `IncomeSummary.bySymbol` → `byAsset`.
+
+### Added
+
+- New APIs: `SnapshotsAPI` (holdings snapshots) and `ToastAPI` (`success` /
+  `error` / `warning` / `info`), each with a matching permission category;
+  `MarketDataAPI.fetchDividends(symbol)`.
+- Activity taxonomy: `ActivityStatus`, `ACTIVITY_SUBTYPES` / `ActivitySubtype`,
+  `AssetKind`, `QuoteMode` constants; helpers `getEffectiveType()` and
+  `hasUserOverride()`.
+- `calculateGoalProgress()` helper (new `goal-progress` module).
+- Import/sync types (`ImportRun*`, `BrokerSyncState`, `SyncStatus`), snapshot
+  types (`Snapshot*`), classification types (`AssetClassifications`,
+  `TaxonomyCategory`, `CategoryWithWeight`), and `QueryKeys.SNAPSHOTS`.
+- React peer dependency bumped to `^19.2.4`.
+
+### Removed
+
+- `AssetProfile`, `MarketData`, `Sector`, `Country`, `SettingsContextType`;
+  `ActivityType` values `ADD_HOLDING` / `REMOVE_HOLDING`.
+
+## [3.0.0] - 2026-02-24
+
+### Breaking
+
+- React peer dependency updated to 19 (`ReactVersion` `18.3.1` → `19.1.1`).
+- `ActivitiesAPI.search()` now takes typed `ActivitySearchFilters` and
+  `ActivitySort` (was `unknown`).
+- `ActivitiesAPI.saveMany()` takes `ActivityBulkMutationRequest` and returns
+  `ActivityBulkMutationResult` (was `ActivityUpdate[]` → `Activity[]`).
+
+### Added
+
+- Bulk-mutation types: `ActivityBulkMutationRequest`,
+  `ActivityBulkMutationResult`, `ActivityBulkMutationError`,
+  `ActivityBulkIdentifierMapping`; exported `ActivitySearchFilters` and
+  `ActivitySort`.
+- `Activity.assetDataSource`, `ActivityCreate.id` / `assetDataSource`,
+  `UpdateAssetProfile.symbolMapping`.
+
+### Changed
+
+- Build now emits `.js` / `.d.ts` (was `.mjs` / `.d.mts`); the types entry moved
+  to `dist/src/index.d.ts`.
+
+## [2.0.0] - 2025-11-22
+
+### Breaking
+
+- Package now ships as an ES module (`"type": "module"`).
+
+### Changed
+
+- Tightened types: loose `any` parameters/returns replaced with `unknown` across
+  `AccountsAPI.create()`, `ActivitiesAPI.search()`, `GoalsAPI.create()`,
+  `FilesAPI.openSaveDialog()`, `QueryAPI.getClient()`, `isAddonManifest()`, and
+  `RouteConfig.component`.
+- `DateRange` and `TrackedItem` changed from type aliases to interfaces.
+
 ## [1.0.0] - 2024-12-19
 
 ### Added

package/README.md

@@ -70,9 +70,13 @@ mkdir src && touch src/index.ts
 
 ```typescript
 // src/index.ts
+import { createRoot, type Root } from 'react-dom/client';
 import { getAddonContext, type AddonContext } from '@wealthfolio/addon-sdk';
+import { MyComponent } from './MyComponent';
 
 export default function enable(context: AddonContext) {
+  let root: Root | null = null;
+
   // Add navigation item
   const navItem = context.sidebar.addItem({
     id: 'my-addon',
@@ -84,7 +88,10 @@ export default function enable(context: AddonContext) {
   // Register route
   context.router.add({
     path: '/addons/my-addon',
-    component: () => import('./MyComponent'),
+    render: ({ root: routeRoot }) => {
+      root ??= createRoot(routeRoot);
+      root.render(<MyComponent ctx={context} />);
+    },
   });
 
   // Log activation
@@ -92,6 +99,8 @@ export default function enable(context: AddonContext) {
 
   // Cleanup on disable
   context.onDisable(() => {
+    root?.unmount();
+    root = null;
     navItem.remove();
     context.api.logger.info('My addon deactivated');
   });
@@ -235,10 +244,9 @@ example:
 
 ```typescript
 // src/addon.tsx
-import React from 'react';
+import { createRoot, type Root } from 'react-dom/client';
 import { QueryClientProvider } from '@tanstack/react-query';
 import type { AddonContext, AddonEnableFunction } from '@wealthfolio/addon-sdk';
-import { Icons } from '@wealthfolio/ui';
 import FeesPage from './pages/fees-page';
 
 // Main addon component
@@ -256,13 +264,14 @@ const enable: AddonEnableFunction = (context) => {
 
   // Store references to items for cleanup
   const addedItems: Array<{ remove: () => void }> = [];
+  let root: Root | null = null;
 
   try {
-    // Add sidebar navigation item with icon from UI library
+    // Add sidebar navigation item with a host-supported icon token
     const sidebarItem = context.sidebar.addItem({
       id: 'investment-fees-tracker',
       label: 'Fee Tracker',
-      icon: <Icons.Invoice className="h-5 w-5" />,
+      icon: 'receipt',
       route: '/addons/investment-fees-tracker',
       order: 200
     });
@@ -280,12 +289,13 @@ const enable: AddonEnableFunction = (context) => {
       );
     };
 
-    // Register route with lazy loading
+    // Register route
     context.router.add({
       path: '/addons/investment-fees-tracker',
-      component: React.lazy(() => Promise.resolve({
-        default: InvestmentFeesTrackerWrapper
-      }))
+      render: ({ root: routeRoot }) => {
+        root ??= createRoot(routeRoot);
+        root.render(<InvestmentFeesTrackerWrapper />);
+      },
     });
 
     context.api.logger.debug('Route registered successfully');
@@ -300,6 +310,10 @@ const enable: AddonEnableFunction = (context) => {
   context.onDisable(() => {
     context.api.logger.info('🛑 Investment Fees Tracker addon is being disabled');
 
+    // Unmount the addon's React root
+    root?.unmount();
+    root = null;
+
     // Remove all sidebar items
     addedItems.forEach(item => {
       try {
@@ -325,7 +339,8 @@ export default enable;
 3. **Error Handling**: Comprehensive error handling with logging
 4. **Resource Management**: Proper cleanup of sidebar items and event listeners
 5. **TypeScript**: Full type safety with proper imports
-6. **Lazy Loading**: Efficient component loading with React.lazy
+6. **Sandbox Rendering**: Mounts into the route root with `createRoot` and
+   unmounts on disable
 
 ````
 
@@ -608,13 +623,18 @@ export default defineConfig({
       formats: ['es'],
     },
     rollupOptions: {
-      external: ['react', 'react-dom'],
-      output: {
-        globals: {
-          react: 'React',
-          'react-dom': 'ReactDOM',
-        },
-      },
+      external: [
+        '@tanstack/react-query',
+        '@wealthfolio/addon-sdk',
+        '@wealthfolio/ui',
+        'date-fns',
+        'lucide-react',
+        'react',
+        'react-dom',
+        'react-dom/client',
+        'react/jsx-runtime',
+        'recharts',
+      ],
     },
     outDir: 'dist',
     minify: 'terser',
@@ -726,7 +746,8 @@ Add an item to the application sidebar.
 
 - `config.id` (string): Unique identifier
 - `config.label` (string): Display text
-- `config.icon` (string | ReactNode): Icon name or component
+- `config.icon` (string): Host-supported icon token, such as `receipt`,
+  `chart-bar`, or `calendar-dots`
 - `config.route` (string): Navigation route
 - `config.order` (number): Display order (optional)
 - `config.onClick` (function): Click handler (optional)
@@ -740,7 +761,8 @@ Register a new route in the application.
 **Parameters:**
 
 - `route.path` (string): Route path pattern
-- `route.component` (LazyExoticComponent): Lazy-loaded component
+- `route.render` (function): `({ root, location }) => void` — mount your React
+  root into the provided `root` element
 
 #### `onDisable(callback)`
 
@@ -993,13 +1015,18 @@ export default defineConfig({
       formats: ['es'],
     },
     rollupOptions: {
-      external: ['react', 'react-dom'],
-      output: {
-        globals: {
-          react: 'React',
-          'react-dom': 'ReactDOM',
-        },
-      },
+      external: [
+        '@tanstack/react-query',
+        '@wealthfolio/addon-sdk',
+        '@wealthfolio/ui',
+        'date-fns',
+        'lucide-react',
+        'react',
+        'react-dom',
+        'react-dom/client',
+        'react/jsx-runtime',
+        'recharts',
+      ],
     },
     outDir: 'dist',
     minify: 'terser',

package/dist/chunk-465MB7HT.js

@@ -0,0 +1,61 @@
+// src/goal-progress.ts
+function isParticipatingGoal(goal) {
+  if (goal.statusLifecycle) {
+    return goal.statusLifecycle === "active";
+  }
+  return true;
+}
+function getFiniteAmount(value) {
+  if (value === null || value === void 0 || value === "") {
+    return void 0;
+  }
+  const amount = typeof value === "number" ? value : Number(value);
+  return Number.isFinite(amount) ? amount : void 0;
+}
+function toFiniteAmount(value) {
+  return getFiniteAmount(value) ?? 0;
+}
+function calculateGoalProgress(accountsValuations, goals, allocations) {
+  if (!goals) {
+    return [];
+  }
+  const baseCurrency = accountsValuations?.[0]?.baseCurrency ?? "USD";
+  const accountValueMap = /* @__PURE__ */ new Map();
+  accountsValuations?.forEach((account) => {
+    const valueInBaseCurrency = account.totalValueBase ?? 0;
+    accountValueMap.set(account.accountId, valueInBaseCurrency);
+  });
+  const allocationsByGoal = /* @__PURE__ */ new Map();
+  allocations?.forEach((alloc) => {
+    const existing = allocationsByGoal.get(alloc.goalId) ?? [];
+    allocationsByGoal.set(alloc.goalId, [...existing, alloc]);
+  });
+  const sortedGoals = [...goals].filter(isParticipatingGoal).sort(
+    (a, b) => toFiniteAmount(a.summaryTargetAmount ?? a.targetAmount) - toFiniteAmount(b.summaryTargetAmount ?? b.targetAmount)
+  );
+  return sortedGoals.map((goal) => {
+    const goalAllocations = allocationsByGoal.get(goal.id) ?? [];
+    const targetAmount = toFiniteAmount(goal.summaryTargetAmount ?? goal.targetAmount);
+    const totalAllocatedValue = goalAllocations.reduce((total, allocation) => {
+      const accountValueInBase = accountValueMap.get(allocation.accountId) ?? 0;
+      return total + accountValueInBase * allocation.sharePercent / 100;
+    }, 0);
+    const currentValue = getFiniteAmount(goal.summaryCurrentValue) ?? totalAllocatedValue;
+    const progress = getFiniteAmount(goal.summaryProgress) ?? (targetAmount > 0 ? currentValue / targetAmount : 0);
+    return {
+      goalId: goal.id,
+      name: goal.title,
+      targetValue: targetAmount,
+      currentValue,
+      progress,
+      currency: goal.currency ?? baseCurrency,
+      statusHealth: goal.statusHealth,
+      targetDate: goal.targetDate
+    };
+  });
+}
+
+export {
+  calculateGoalProgress
+};
+//# sourceMappingURL=chunk-465MB7HT.js.map

package/dist/chunk-465MB7HT.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/goal-progress.ts"],"sourcesContent":["import type { Goal, GoalAllocation, AccountValuation, GoalProgress } from './data-types';\n\nfunction isParticipatingGoal(goal: Goal): boolean {\n  if (goal.statusLifecycle) {\n    return goal.statusLifecycle === 'active';\n  }\n\n  return true;\n}\n\nfunction getFiniteAmount(value: unknown): number | undefined {\n  if (value === null || value === undefined || value === '') {\n    return undefined;\n  }\n\n  const amount = typeof value === 'number' ? value : Number(value);\n  return Number.isFinite(amount) ? amount : undefined;\n}\n\nfunction toFiniteAmount(value: unknown): number {\n  return getFiniteAmount(value) ?? 0;\n}\n\n/**\n * Calculate goal progress from goal summaries, falling back to allocations.\n */\nexport function calculateGoalProgress(\n  accountsValuations: AccountValuation[],\n  goals: Goal[],\n  allocations: GoalAllocation[],\n): GoalProgress[] {\n  if (!goals) {\n    return [];\n  }\n\n  const baseCurrency = accountsValuations?.[0]?.baseCurrency ?? 'USD';\n\n  // accountId -> totalValue in base currency\n  const accountValueMap = new Map<string, number>();\n  accountsValuations?.forEach((account) => {\n    const valueInBaseCurrency = account.totalValueBase ?? 0;\n    accountValueMap.set(account.accountId, valueInBaseCurrency);\n  });\n\n  // goalId -> allocations\n  const allocationsByGoal = new Map<string, GoalAllocation[]>();\n  allocations?.forEach((alloc) => {\n    const existing = allocationsByGoal.get(alloc.goalId) ?? [];\n    allocationsByGoal.set(alloc.goalId, [...existing, alloc]);\n  });\n\n  const sortedGoals = [...goals]\n    .filter(isParticipatingGoal)\n    .sort(\n      (a, b) =>\n        toFiniteAmount(a.summaryTargetAmount ?? a.targetAmount) -\n        toFiniteAmount(b.summaryTargetAmount ?? b.targetAmount),\n    );\n\n  return sortedGoals.map((goal) => {\n    const goalAllocations = allocationsByGoal.get(goal.id) ?? [];\n    const targetAmount = toFiniteAmount(goal.summaryTargetAmount ?? goal.targetAmount);\n\n    const totalAllocatedValue = goalAllocations.reduce((total, allocation) => {\n      const accountValueInBase = accountValueMap.get(allocation.accountId) ?? 0;\n      return total + (accountValueInBase * allocation.sharePercent) / 100;\n    }, 0);\n\n    const currentValue = getFiniteAmount(goal.summaryCurrentValue) ?? totalAllocatedValue;\n    const progress =\n      getFiniteAmount(goal.summaryProgress) ??\n      (targetAmount > 0 ? currentValue / targetAmount : 0);\n\n    return {\n      goalId: goal.id,\n      name: goal.title,\n      targetValue: targetAmount,\n      currentValue,\n      progress,\n      currency: goal.currency ?? baseCurrency,\n      statusHealth: goal.statusHealth,\n      targetDate: goal.targetDate,\n    };\n  });\n}\n"],"mappings":";AAEA,SAAS,oBAAoB,MAAqB;AAChD,MAAI,KAAK,iBAAiB;AACxB,WAAO,KAAK,oBAAoB;AAAA,EAClC;AAEA,SAAO;AACT;AAEA,SAAS,gBAAgB,OAAoC;AAC3D,MAAI,UAAU,QAAQ,UAAU,UAAa,UAAU,IAAI;AACzD,WAAO;AAAA,EACT;AAEA,QAAM,SAAS,OAAO,UAAU,WAAW,QAAQ,OAAO,KAAK;AAC/D,SAAO,OAAO,SAAS,MAAM,IAAI,SAAS;AAC5C;AAEA,SAAS,eAAe,OAAwB;AAC9C,SAAO,gBAAgB,KAAK,KAAK;AACnC;AAKO,SAAS,sBACd,oBACA,OACA,aACgB;AAChB,MAAI,CAAC,OAAO;AACV,WAAO,CAAC;AAAA,EACV;AAEA,QAAM,eAAe,qBAAqB,CAAC,GAAG,gBAAgB;AAG9D,QAAM,kBAAkB,oBAAI,IAAoB;AAChD,sBAAoB,QAAQ,CAAC,YAAY;AACvC,UAAM,sBAAsB,QAAQ,kBAAkB;AACtD,oBAAgB,IAAI,QAAQ,WAAW,mBAAmB;AAAA,EAC5D,CAAC;AAGD,QAAM,oBAAoB,oBAAI,IAA8B;AAC5D,eAAa,QAAQ,CAAC,UAAU;AAC9B,UAAM,WAAW,kBAAkB,IAAI,MAAM,MAAM,KAAK,CAAC;AACzD,sBAAkB,IAAI,MAAM,QAAQ,CAAC,GAAG,UAAU,KAAK,CAAC;AAAA,EAC1D,CAAC;AAED,QAAM,cAAc,CAAC,GAAG,KAAK,EAC1B,OAAO,mBAAmB,EAC1B;AAAA,IACC,CAAC,GAAG,MACF,eAAe,EAAE,uBAAuB,EAAE,YAAY,IACtD,eAAe,EAAE,uBAAuB,EAAE,YAAY;AAAA,EAC1D;AAEF,SAAO,YAAY,IAAI,CAAC,SAAS;AAC/B,UAAM,kBAAkB,kBAAkB,IAAI,KAAK,EAAE,KAAK,CAAC;AAC3D,UAAM,eAAe,eAAe,KAAK,uBAAuB,KAAK,YAAY;AAEjF,UAAM,sBAAsB,gBAAgB,OAAO,CAAC,OAAO,eAAe;AACxE,YAAM,qBAAqB,gBAAgB,IAAI,WAAW,SAAS,KAAK;AACxE,aAAO,QAAS,qBAAqB,WAAW,eAAgB;AAAA,IAClE,GAAG,CAAC;AAEJ,UAAM,eAAe,gBAAgB,KAAK,mBAAmB,KAAK;AAClE,UAAM,WACJ,gBAAgB,KAAK,eAAe,MACnC,eAAe,IAAI,eAAe,eAAe;AAEpD,WAAO;AAAA,MACL,QAAQ,KAAK;AAAA,MACb,MAAM,KAAK;AAAA,MACX,aAAa;AAAA,MACb;AAAA,MACA;AAAA,MACA,UAAU,KAAK,YAAY;AAAA,MAC3B,cAAc,KAAK;AAAA,MACnB,YAAY,KAAK;AAAA,IACnB;AAAA,EACF,CAAC;AACH;","names":[]}

package/dist/chunk-AAIYUZY5.js

@@ -0,0 +1,16 @@
+// src/host-dependencies.ts
+var HOST_DEPENDENCIES = {
+  "@tanstack/react-query": "^5.90.0",
+  "@wealthfolio/addon-sdk": "^3.6.0",
+  "@wealthfolio/ui": "^3.6.0",
+  "date-fns": "^4.1.0",
+  "lucide-react": "^0.561.0",
+  react: "^19.2.0",
+  "react-dom": "^19.2.0",
+  recharts: "^3.7.0"
+};
+
+export {
+  HOST_DEPENDENCIES
+};
+//# sourceMappingURL=chunk-AAIYUZY5.js.map

package/dist/chunk-AAIYUZY5.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/host-dependencies.ts"],"sourcesContent":["export const HOST_DEPENDENCIES = {\n  '@tanstack/react-query': '^5.90.0',\n  '@wealthfolio/addon-sdk': '^3.6.0',\n  '@wealthfolio/ui': '^3.6.0',\n  'date-fns': '^4.1.0',\n  'lucide-react': '^0.561.0',\n  react: '^19.2.0',\n  'react-dom': '^19.2.0',\n  recharts: '^3.7.0',\n} as const;\n"],"mappings":";AAAO,IAAM,oBAAoB;AAAA,EAC/B,yBAAyB;AAAA,EACzB,0BAA0B;AAAA,EAC1B,mBAAmB;AAAA,EACnB,YAAY;AAAA,EACZ,gBAAgB;AAAA,EAChB,OAAO;AAAA,EACP,aAAa;AAAA,EACb,UAAU;AACZ;","names":[]}

package/dist/chunk-O566EAIL.js

@@ -0,0 +1,9 @@
+// src/manifest.ts
+function isInstalledManifest(manifest) {
+  return !!(manifest.installedAt && manifest.main !== void 0 && manifest.enabled !== void 0);
+}
+
+export {
+  isInstalledManifest
+};
+//# sourceMappingURL=chunk-O566EAIL.js.map

package/dist/chunk-O566EAIL.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/manifest.ts"],"sourcesContent":["/**\n * Addon manifest and metadata types\n */\n\nimport type { Permission } from './permissions';\n\nexport interface AddonNetworkAccess {\n  allowedHosts: string[];\n  approvedHosts?: string[];\n}\n\nexport type AddonHostDependencies = Record<string, string>;\n\n/**\n * Unified addon manifest structure that handles both development and runtime scenarios\n * This represents both what developers write in their manifest.json and installed addon metadata\n */\nexport interface AddonManifest {\n  // Core manifest fields (always present)\n  /** Unique addon identifier (lowercase, no spaces, hyphens allowed) */\n  id: string;\n  /** Human-readable addon name */\n  name: string;\n  /** Semantic version (e.g., \"1.0.0\") */\n  version: string;\n  /** Brief description of the addon's functionality */\n  description?: string;\n  /** Author name or organization */\n  author?: string;\n  /** Compatible SDK version */\n  sdkVersion?: string;\n  /** Main entry point file (relative to addon root) */\n  main?: string;\n  /** Whether the addon is enabled by default */\n  enabled?: boolean;\n  /** Permission declarations for security review */\n  permissions?: Permission[];\n  /** Addon homepage or documentation URL */\n  homepage?: string;\n  /** Support or issues URL */\n  repository?: string;\n  /** License identifier (e.g., \"MIT\", \"Apache-2.0\") */\n  license?: string;\n  /** Minimum Wealthfolio version required */\n  minWealthfolioVersion?: string;\n  /** Keywords for discoverability */\n  keywords?: string[];\n  /** Addon icon (base64 or relative path) */\n  icon?: string;\n  /** Network hosts this addon may reach through the host broker */\n  network?: AddonNetworkAccess;\n  /** Host-provided packages this addon imports instead of bundling */\n  hostDependencies?: AddonHostDependencies;\n\n  // Runtime fields (only present after installation)\n  /** Installation timestamp in ISO format */\n  installedAt?: string;\n  /** Last update timestamp */\n  updatedAt?: string;\n  /** Installation source */\n  source?: 'local' | 'store' | 'sideload';\n  /** File size in bytes */\n  size?: number;\n}\n\n/**\n * Type guard to check if a manifest has been installed (has runtime fields)\n */\nexport function isInstalledManifest(\n  manifest: AddonManifest,\n): manifest is Required<Pick<AddonManifest, 'main' | 'enabled' | 'installedAt'>> &\n  AddonManifest {\n  return !!(\n    manifest.installedAt &&\n    manifest.main !== undefined &&\n    manifest.enabled !== undefined\n  );\n}\n\n/**\n * Helper type for development manifests (without runtime fields)\n */\nexport type DevelopmentManifest = Omit<\n  AddonManifest,\n  'installedAt' | 'updatedAt' | 'source' | 'size'\n>;\n\n/**\n * Helper type for installed manifests (with runtime fields)\n */\nexport type InstalledManifest = Required<\n  Pick<AddonManifest, 'main' | 'enabled' | 'installedAt'>\n> &\n  AddonManifest;\n\n/**\n * Addon file information\n */\nexport interface AddonFile {\n  /** File name */\n  name: string;\n  /** File content */\n  content: string;\n  /** Whether this is the main entry point */\n  is_main: boolean;\n  /** File size in bytes */\n  size?: number;\n}\n\n/**\n * Extracted addon package\n */\nexport interface ExtractedAddon {\n  /** Addon metadata from manifest */\n  metadata: AddonManifest;\n  /** List of files in the addon package */\n  files: AddonFile[];\n}\n\n/**\n * Installed addon information\n */\nexport interface InstalledAddon {\n  /** Addon metadata */\n  metadata: AddonManifest;\n  /** Installation path */\n  path?: string;\n  /** Whether the addon is currently active */\n  active?: boolean;\n}\n\n/**\n * Addon installation result\n */\nexport interface AddonInstallResult {\n  /** Whether installation was successful */\n  success: boolean;\n  /** Error message if installation failed */\n  error?: string;\n  /** Installed addon metadata */\n  addon?: AddonManifest;\n}\n\n/**\n * Addon validation result\n */\nexport interface AddonValidationResult {\n  /** Whether the addon is valid */\n  valid: boolean;\n  /** List of validation errors */\n  errors: string[];\n  /** List of validation warnings */\n  warnings: string[];\n}\n\n/**\n * Addon update information\n */\nexport interface AddonUpdateInfo {\n  /** Current installed version */\n  currentVersion: string;\n  /** Latest available version */\n  latestVersion: string;\n  /** Whether an update is available */\n  updateAvailable: boolean;\n  /** Download URL for the update */\n  downloadUrl?: string;\n  /** Optional SHA-256 digest for the update package bytes */\n  sha256?: string;\n  /** Release notes for the latest version */\n  releaseNotes?: string;\n  /** Release date of the latest version */\n  releaseDate?: string;\n  /** Changelog URL */\n  changelogUrl?: string;\n  /** Whether this is a critical security update */\n  isCritical?: boolean;\n  /** Breaking changes in this update */\n  hasBreakingChanges?: boolean;\n  /** Minimum Wealthfolio version required for this update */\n  minWealthfolioVersion?: string;\n}\n\n/**\n * Addon update check result\n */\nexport interface AddonUpdateCheckResult {\n  /** Addon ID */\n  addonId: string;\n  /** Update information */\n  updateInfo: AddonUpdateInfo;\n  /** Any errors during update check */\n  error?: string;\n}\n\n/**\n * Addon store listing\n */\nexport interface AddonStoreListing {\n  /** Addon metadata */\n  metadata: AddonManifest;\n  /** Download URL */\n  downloadUrl: string;\n  /** Optional SHA-256 digest for the package bytes */\n  sha256?: string;\n  /** Number of downloads */\n  downloads?: number;\n  /** Average rating */\n  rating?: number;\n  /** Number of reviews */\n  reviewCount?: number;\n  /** Whether it's verified by Wealthfolio team */\n  verified?: boolean;\n  /** Last update date */\n  lastUpdated?: string;\n  /** Screenshots or images */\n  images?: string[];\n  /** Release notes for the latest version */\n  releaseNotes?: string;\n  /** Changelog URL */\n  changelogUrl?: string;\n}\n"],"mappings":";AAoEO,SAAS,oBACd,UAEc;AACd,SAAO,CAAC,EACN,SAAS,eACT,SAAS,SAAS,UAClB,SAAS,YAAY;AAEzB;","names":[]}

package/dist/chunk-PYPEFQCY.js

@@ -0,0 +1,61 @@
+// src/query-keys.ts
+var QueryKeys = {
+  // Account related keys
+  ACCOUNTS: "accounts",
+  ACCOUNTS_SUMMARY: "accounts_summary",
+  // Activity related keys
+  ACTIVITY_DATA: "activity-data",
+  ACTIVITIES: "activities",
+  // Portfolio related keys
+  HOLDINGS: "holdings",
+  HOLDING: "holding",
+  INCOME_SUMMARY: "incomeSummary",
+  PORTFOLIO_SUMMARY: "portfolioSummary",
+  QUOTE_HISTORY: "quoteHistory",
+  // Goals related keys
+  GOALS: "goals",
+  GOALS_ALLOCATIONS: "goals_allocations",
+  // Settings related keys
+  SETTINGS: "settings",
+  EXCHANGE_RATES: "exchangeRates",
+  // New keys for exchange rates
+  EXCHANGE_RATE_SYMBOLS: "exchange_rate_symbols",
+  QUOTE: "quote",
+  CONTRIBUTION_LIMITS: "contributionLimits",
+  CONTRIBUTION_LIMIT_PROGRESS: "contributionLimitProgress",
+  ASSET_DATA: "asset_data",
+  IMPORT_MAPPING: "import_mapping",
+  PERFORMANCE_SUMMARY: "performanceSummary",
+  PERFORMANCE_HISTORY: "performanceHistory",
+  HISTORY_VALUATION: "historyValuation",
+  // Helper function to create account-specific keys
+  valuationHistory: (id) => [QueryKeys.HISTORY_VALUATION, id],
+  // Account simple performance
+  ACCOUNTS_SIMPLE_PERFORMANCE: "accountsSimplePerformance",
+  accountsSimplePerformance: (accountIds) => [
+    QueryKeys.ACCOUNTS_SIMPLE_PERFORMANCE,
+    [...accountIds].sort().join(",") || "none"
+  ],
+  // Market Data Providers
+  MARKET_DATA_PROVIDERS: "marketDataProviders",
+  MARKET_DATA_PROVIDER_SETTINGS: "marketDataProviderSettings",
+  transactions: "transactions",
+  latestValuations: "latest-valuations",
+  // Market Data
+  symbolSearch: "symbol-search",
+  ASSET_HISTORY: "asset-history",
+  // Addons
+  INSTALLED_ADDONS: "installedAddons",
+  ADDON_STORE_LISTINGS: "addonStoreListings",
+  ADDON_AUTO_UPDATE_CHECK: "addonAutoUpdateCheck",
+  SNAPSHOTS: "snapshots",
+  snapshots: (accountId) => [QueryKeys.SNAPSHOTS, accountId],
+  secrets: {
+    apiKey: (providerId) => ["secrets", "apiKey", providerId]
+  }
+};
+
+export {
+  QueryKeys
+};
+//# sourceMappingURL=chunk-PYPEFQCY.js.map

package/dist/chunk-PYPEFQCY.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/query-keys.ts"],"sourcesContent":["/**\n * Shared Query Keys for React Query\n * These keys should match the main application's query keys to ensure cache consistency\n */\nexport const QueryKeys = {\n  // Account related keys\n  ACCOUNTS: 'accounts',\n  ACCOUNTS_SUMMARY: 'accounts_summary',\n\n  // Activity related keys\n  ACTIVITY_DATA: 'activity-data',\n  ACTIVITIES: 'activities',\n\n  // Portfolio related keys\n  HOLDINGS: 'holdings',\n  HOLDING: 'holding',\n  INCOME_SUMMARY: 'incomeSummary',\n  PORTFOLIO_SUMMARY: 'portfolioSummary',\n  QUOTE_HISTORY: 'quoteHistory',\n\n  // Goals related keys\n  GOALS: 'goals',\n  GOALS_ALLOCATIONS: 'goals_allocations',\n\n  // Settings related keys\n  SETTINGS: 'settings',\n  EXCHANGE_RATES: 'exchangeRates',\n\n  // New keys for exchange rates\n  EXCHANGE_RATE_SYMBOLS: 'exchange_rate_symbols',\n  QUOTE: 'quote',\n\n  CONTRIBUTION_LIMITS: 'contributionLimits',\n  CONTRIBUTION_LIMIT_PROGRESS: 'contributionLimitProgress',\n\n  ASSET_DATA: 'asset_data',\n  IMPORT_MAPPING: 'import_mapping',\n\n  PERFORMANCE_SUMMARY: 'performanceSummary',\n  PERFORMANCE_HISTORY: 'performanceHistory',\n\n  HISTORY_VALUATION: 'historyValuation',\n  // Helper function to create account-specific keys\n  valuationHistory: (id: string) => [QueryKeys.HISTORY_VALUATION, id],\n\n  // Account simple performance\n  ACCOUNTS_SIMPLE_PERFORMANCE: 'accountsSimplePerformance',\n  accountsSimplePerformance: (accountIds: string[]) => [\n    QueryKeys.ACCOUNTS_SIMPLE_PERFORMANCE,\n    [...accountIds].sort().join(',') || 'none',\n  ],\n\n  // Market Data Providers\n  MARKET_DATA_PROVIDERS: 'marketDataProviders',\n  MARKET_DATA_PROVIDER_SETTINGS: 'marketDataProviderSettings',\n\n  transactions: 'transactions',\n  latestValuations: 'latest-valuations',\n\n  // Market Data\n  symbolSearch: 'symbol-search',\n\n  ASSET_HISTORY: 'asset-history',\n\n  // Addons\n  INSTALLED_ADDONS: 'installedAddons',\n  ADDON_STORE_LISTINGS: 'addonStoreListings',\n  ADDON_AUTO_UPDATE_CHECK: 'addonAutoUpdateCheck',\n\n  SNAPSHOTS: 'snapshots',\n  snapshots: (accountId: string) => [QueryKeys.SNAPSHOTS, accountId],\n\n  secrets: {\n    apiKey: (providerId: string) => ['secrets', 'apiKey', providerId],\n  },\n} as const;\n\nexport type QueryKeys = typeof QueryKeys;\n"],"mappings":";AAIO,IAAM,YAAY;AAAA;AAAA,EAEvB,UAAU;AAAA,EACV,kBAAkB;AAAA;AAAA,EAGlB,eAAe;AAAA,EACf,YAAY;AAAA;AAAA,EAGZ,UAAU;AAAA,EACV,SAAS;AAAA,EACT,gBAAgB;AAAA,EAChB,mBAAmB;AAAA,EACnB,eAAe;AAAA;AAAA,EAGf,OAAO;AAAA,EACP,mBAAmB;AAAA;AAAA,EAGnB,UAAU;AAAA,EACV,gBAAgB;AAAA;AAAA,EAGhB,uBAAuB;AAAA,EACvB,OAAO;AAAA,EAEP,qBAAqB;AAAA,EACrB,6BAA6B;AAAA,EAE7B,YAAY;AAAA,EACZ,gBAAgB;AAAA,EAEhB,qBAAqB;AAAA,EACrB,qBAAqB;AAAA,EAErB,mBAAmB;AAAA;AAAA,EAEnB,kBAAkB,CAAC,OAAe,CAAC,UAAU,mBAAmB,EAAE;AAAA;AAAA,EAGlE,6BAA6B;AAAA,EAC7B,2BAA2B,CAAC,eAAyB;AAAA,IACnD,UAAU;AAAA,IACV,CAAC,GAAG,UAAU,EAAE,KAAK,EAAE,KAAK,GAAG,KAAK;AAAA,EACtC;AAAA;AAAA,EAGA,uBAAuB;AAAA,EACvB,+BAA+B;AAAA,EAE/B,cAAc;AAAA,EACd,kBAAkB;AAAA;AAAA,EAGlB,cAAc;AAAA,EAEd,eAAe;AAAA;AAAA,EAGf,kBAAkB;AAAA,EAClB,sBAAsB;AAAA,EACtB,yBAAyB;AAAA,EAEzB,WAAW;AAAA,EACX,WAAW,CAAC,cAAsB,CAAC,UAAU,WAAW,SAAS;AAAA,EAEjE,SAAS;AAAA,IACP,QAAQ,CAAC,eAAuB,CAAC,WAAW,UAAU,UAAU;AAAA,EAClE;AACF;","names":[]}

package/dist/{chunk-ISD4MMHY.js → chunk-SEHD46ND.js}

@@ -114,7 +114,7 @@ var PERMISSION_CATEGORIES = [
     id: "secrets",
     name: "Secrets Management",
     description: "Access to secure storage for addon secrets",
-    functions: ["set", "get", "delete"],
+    functions: ["set", "get", "use", "delete"],
     riskLevel: "high"
   },
   {
@@ -147,11 +147,25 @@ var PERMISSION_CATEGORIES = [
     ],
     riskLevel: "low"
   },
+  {
+    id: "query",
+    name: "Query Cache",
+    description: "Access to refresh host application data",
+    functions: ["invalidateQueries", "refetchQueries"],
+    riskLevel: "low"
+  },
+  {
+    id: "network",
+    name: "Network Access",
+    description: "Access to declared external HTTPS hosts through the host network broker",
+    functions: ["request"],
+    riskLevel: "high"
+  },
   {
     id: "ui",
     name: "User Interface",
     description: "Access to modify navigation and add UI components",
-    functions: ["sidebar.addItem", "router.add"],
+    functions: ["sidebar.addItem", "router.add", "navigation.navigate", "onDisable"],
     riskLevel: "low"
   }
 ];
@@ -227,4 +241,4 @@ export {
   addDetectedFunction,
   markFunctionAsDeclared
 };
-//# sourceMappingURL=chunk-ISD4MMHY.js.map
+//# sourceMappingURL=chunk-SEHD46ND.js.map