bharosa 0.3.3 → 0.5.0

package/dist/transport.cjs

@@ -3,6 +3,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.check = check;
 exports.keys = keys;
 exports.createTransport = createTransport;
+const analytics_contract_cjs_1 = require("./analytics-contract.cjs");
 const monthly_market_data_cjs_1 = require("./monthly-market-data.cjs");
 const contract_cjs_1 = require("./contract.cjs");
 const market_data_cjs_1 = require("./market-data.cjs");
@@ -13,6 +14,7 @@ const operations = {
     ...contract_cjs_1.operations,
     ...market_data_cjs_1.operations,
     ...monthly_market_data_cjs_1.operations,
+    ...analytics_contract_cjs_1.operations,
 };
 function assertServer() {
     if (typeof window !== "undefined" ||
@@ -141,7 +143,17 @@ async function read(response, max, signal) {
         reader.releaseLock();
     }
 }
-function createTransport(config, marketOnly = false) {
+function createTransport(input, marketOnly = false) {
+    let config;
+    if (input != null && typeof input === "object" && Object.hasOwn(input, "apiKey")) {
+        keys(input, ["apiKey", "account", "baseUrl", "allowLocalhostHttp", "maxResponseBytes", "fetch"]);
+        const simple = input;
+        const { apiKey, account, ...rest } = simple;
+        config = { ...rest, account: account === undefined ? "me" : account, auth: { type: "account_key", apiKey } };
+    }
+    else {
+        config = input;
+    }
     const customTransport = config?.transport !== undefined;
     if (!customTransport)
         assertServer();
@@ -175,7 +187,7 @@ function createTransport(config, marketOnly = false) {
             (a.type === "delegated_application" && token(a.userAccessToken)));
         headers = Object.freeze({
             Authorization: "Bearer " + a.apiKey,
-            ...(a.type === "delegated_application"
+            ...(a.type === "delegated_application" && !marketOnly
                 ? { "Bharosa-User-Authorization": "Bearer " + a.userAccessToken }
                 : {}),
             Accept: "application/json",
@@ -196,13 +208,10 @@ function createTransport(config, marketOnly = false) {
     check(Number.isInteger(max) && max >= 1 && max <= 16777216);
     const call = async (id, params = {}, body, opts = {}) => {
         const op = operations[id];
-        if (marketOnly)
-            check([
-                "monthly_nav",
-                "monthly_expense",
-                "monthly_portfolio",
-                "monthly_holdings",
-            ].includes(id));
+        if (marketOnly &&
+            !["monthly_nav", "monthly_expense", "monthly_portfolio", "monthly_holdings"].includes(id)) {
+            throw Object.assign(new errors_cjs_1.ValidationError(), { code: "market_only_operation" });
+        }
         let o, serialized, url;
         try {
             o = options(opts);

package/dist/transport.d.cts

@@ -2,4 +2,4 @@ import type { OperationResults } from "./operation-types.cjs";
 import type { BharosaConfig, RequestOptions } from "./client-types.cjs";
 export declare function check(v: unknown): asserts v;
 export declare function keys(v: unknown, allowed: readonly string[]): void;
-export declare function createTransport(config: BharosaConfig, marketOnly?: boolean): <K extends keyof OperationResults>(id: K, params?: Record<string, unknown>, body?: unknown, opts?: RequestOptions) => Promise<OperationResults[K]>;
+export declare function createTransport(input: BharosaConfig, marketOnly?: boolean): <K extends keyof OperationResults>(id: K, params?: Record<string, unknown>, body?: unknown, opts?: RequestOptions) => Promise<OperationResults[K]>;

package/dist/transport.d.ts

@@ -2,4 +2,4 @@ import type { OperationResults } from "./operation-types.js";
 import type { BharosaConfig, RequestOptions } from "./client-types.js";
 export declare function check(v: unknown): asserts v;
 export declare function keys(v: unknown, allowed: readonly string[]): void;
-export declare function createTransport(config: BharosaConfig, marketOnly?: boolean): <K extends keyof OperationResults>(id: K, params?: Record<string, unknown>, body?: unknown, opts?: RequestOptions) => Promise<OperationResults[K]>;
+export declare function createTransport(input: BharosaConfig, marketOnly?: boolean): <K extends keyof OperationResults>(id: K, params?: Record<string, unknown>, body?: unknown, opts?: RequestOptions) => Promise<OperationResults[K]>;

package/dist/validate.cjs

@@ -62,7 +62,9 @@ function valid(s, v, depth = 0) {
                 (s.required ?? []).every((k) => Object.hasOwn(v, k)) &&
                 keys.every((k) => Object.hasOwn(s.properties ?? {}, k)
                     ? valid(s.properties?.[k], v[k], depth + 1)
-                    : s.additionalProperties !== false));
+                    : typeof s.additionalProperties === "object"
+                        ? valid(s.additionalProperties, v[k], depth + 1)
+                        : s.additionalProperties !== false));
         }
         default:
             return true;

package/docs/analytics.md

@@ -0,0 +1,26 @@
+# Growth scheme performance and category returns
+
+The two analytics methods are deployed and published in SDK 0.4.0. This local unified-key successor preserves them. Default origin is https://api.bharosa.finance; explicit baseUrl overrides remain supported. Account authorization with accounts:read is required. BharosaMarket does not expose these methods.
+
+```ts
+import { Bharosa } from "bharosa";
+const client = new Bharosa({
+  account: "me",
+  auth: { type: "account_key", apiKey: process.env.BHAROSA_SECRET_KEY! },
+});
+const scheme = await client.mutualFundSchemes.performance.retrieve("45139", {
+  asOf: "2026-10-01", periods: ["1y", "3y"],
+});
+const category = await client.fundCategories.statistics.retrieve("index_fund", {
+  asOf: "2026-10-01", periods: ["1y"], metrics: ["return"],
+  plan: "direct", option: "growth",
+});
+```
+
+Use an exact first-of-month asOf. Discover category identifiers through marketData.categories.list; index_fund is a real category, equity was only a local fixture label. Category metrics accepts only return and defaults to return. Category returns are equal-weight means with fund deduplication, minimum3valid funds and80%coverage; inspect status/reason and eligible/valid/missing/invalid/stale counts. An HTTP200 can correctly contain an unavailable metric. Current classification is applied to historical prices, with survivorship/reclassification bias; this is not an investable index return.
+
+Scheme responses report exact NAV observations and boundary lags, total return, and annualization over observed dates using365.25days. CAGR is unavailable for periods not longer than one year. IDCW and unverified inception remain explicitly unavailable. NAV freshness limits and missing data must be checked before using a value.
+
+There are no investor-performance or fund-AUM methods or public types in this release. Stated-TER comparisons remain deferred; existing expense-ratio methods retain their prior behavior. Future AUM belongs to mutualFunds, not schemes. Shared response freshness metadata includes aum_days/ter_days because the deployed envelope contains those fields; their presence does not expose AUM/TER methods.
+
+Hosted scheme/category verification used the app-origin compatibility path with synthetic account access and real market data. Authenticated verification on the new api hostname remains a final-trial requirement; do not claim that journey has passed. No SDK example should create credentials or mutate a portfolio.

package/docs/getting-started.md

@@ -6,10 +6,10 @@ Use Node.js 22.12 or later in a supported LTS release. The SDK supports ESM and
 
 Obtain your authorized account ID and account key. Bharosa and BharosaMarket default to the production origin `https://api.bharosa.finance`; no API URL environment variable is required. The SDK neither provisions accounts nor runs an OAuth consent flow.
 
-## Install
+## Install the unpublished 0.5.0 candidate
 
 ```sh
-npm install bharosa@0.3.3 --ignore-scripts
+npm install /absolute/path/to/bharosa-0.5.0.tgz --ignore-scripts
 ```
 
 Source contributors can build and pack a local archive as described in CONTRIBUTING.md.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "bharosa",
-  "version": "0.3.3",
+  "version": "0.5.0",
   "private": false,
   "description": "Typed Bharosa resource SDK with server credentials or caller-owned transport.",
   "license": "MIT",
@@ -44,7 +44,8 @@
     "SECURITY.md",
     "CHANGELOG.md",
     "FIRST-PARTY-CONTRACT-SHA256",
-    "MONTHLY-MARKET-CONTRACT-SHA256"
+    "MONTHLY-MARKET-CONTRACT-SHA256",
+    "ANALYTICS-CONTRACT-SHA256"
   ],
   "scripts": {
     "build": "node scripts/build.mjs",
@@ -58,7 +59,9 @@
     "check:first-party": "node scripts/generate-first-party.mjs --check",
     "typecheck": "node tooling/node_modules/typescript/bin/tsc --noEmit && node tooling/node_modules/typescript/bin/tsc -p tsconfig.test.json --noEmit && node tooling/node_modules/typescript/bin/tsc --noEmit --strict --target ES2022 --module NodeNext --moduleResolution NodeNext --typeRoots tooling/node_modules/@types test/api-compatibility.ts",
     "generate:monthly": "node scripts/generate-monthly.mjs",
-    "check:monthly": "node scripts/generate-monthly.mjs --check"
+    "check:monthly": "node scripts/generate-monthly.mjs --check",
+    "generate:analytics": "node scripts/generate-analytics.mjs",
+    "check:analytics": "node scripts/generate-analytics.mjs --check"
   },
   "publishConfig": {
     "access": "public",