bharosa 0.4.0 → 0.5.1

package/ANALYTICS-CONTRACT-SHA256

@@ -1 +1 @@
-ebab801a241565a3b115993b6ae8470d144f8d69f79cdb8acc274ff8c200cf3e
+1d2d37edf6ea65cdd3bac707119c6815ee73c89770a791d7dfdfadc9630b6f2b

package/CHANGELOG.md

@@ -1,8 +1,20 @@
-# 0.4.0 — unpublished release candidate
+# Changelog
 
-Add account-scoped Growth scheme performance and category return statistics. Change the default origin from published 0.3.2’s app.bharosa.finance to api.bharosa.finance, preserving explicit overrides. The reviewed host-default delta is included directly; no intermediate 0.3.3 publication is required. No investor monetary-performance, fund-AUM or stated-TER methods. API deployment and SDK publication are separate.
+## 0.5.1
 
-# Changelog
+Documentation-only correction: use normal npm installation and released status, describe deployed unified-key/latest-NAV access, and remove stale preview wording. Runtime, public types, contracts and dependencies are unchanged from 0.5.0.
+
+## 0.5.0 — 31 October 2026
+
+Add `new Bharosa({ apiKey })` and `client.markets` for baseline market access. Support latest NAV by omitting the date on baseline and account-scoped NAV methods. Preserve existing auth forms, private authorization, production API origin and monthly limits on explicit historical dates.
+
+## 0.4.0 — 30 October 2026
+
+Add account-scoped Growth scheme performance and category return statistics. Preserve the api.bharosa.finance default introduced in 0.3.3 and explicit overrides. No investor monetary-performance, fund-AUM or stated-TER methods.
+
+## 0.3.3 — 30 October 2026
+
+Change the default API origin to https://api.bharosa.finance. No analytics changes.
 
 ## 0.3.2 — 30 October 2026
 
@@ -23,11 +35,11 @@ Adds server-side BharosaMarket for four authenticated registered-app monthly mar
 - Clarify that monthly market reads require authenticated account-read access without a separate market-data approval.
 - Preserve existing methods, exports, authentication, quantity precision, and analytics implementation. Requires a companion API with portfolio lifecycle support; package preparation does not establish production availability.
 
-The entries below retain historical preparation notes from the published 0.1.0 package. They are not additional changes in 0.2.0.
+The entries below are archived preparation notes retained for provenance, not current installation or release instructions. Their historical “unreleased” and “pending” labels describe preparation at that time.
 
-## 0.1.0 — release candidate
+## 0.1.0 — published
 
-Prepared for the first npm release; publication is pending registry authentication and verification. API deployment and external consent activation are separate.
+Initial npm release. API deployment and external consent activation are separate.
 
 - Typed Node.js client with ESM/CommonJS exports, account-scoped direct/delegated authentication, and 17 public resource operations.
 - Portfolio asset, sector, and issuer mix methods for saved and in-memory targets, with MutualFund conveniences delegated to their underlying Portfolio.

package/CONTRIBUTING.md

@@ -1,6 +1,6 @@
 # Contributing
 
-This is an unpublished SDK under local preparation. Keep changes limited to the client, public contracts, documentation, and synthetic tests. Do not copy API implementation, analytics code, provider data, credentials, or internal operational notes into this repository.
+This repository contains the published Bharosa SDK. Keep changes limited to the client, public contracts, documentation, and synthetic tests. Do not copy API implementation, analytics code, provider data, credentials, or internal operational notes into this repository.
 
 ## Development
 

package/MONTHLY-MARKET-CONTRACT-SHA256

@@ -1 +1 @@
-29463b6a150e368a47ac11e2f8f841e3808d94d3ff9b70221fe3804c93b91004
+ef53094920c324ab9d9fd31d8846b6f37da13b757301c6742461ee33b8fe49c4

package/README.md

@@ -2,19 +2,19 @@
 
 A TypeScript client for Bharosa accounts, investors, portfolios, and mutual funds. Use one resource interface from TypeScript, ESM, or CommonJS, with no runtime dependencies.
 
-**Local release candidate (unpublished):** `bharosa@0.4.0`. Both clients use the production API at `https://api.bharosa.finance` by default. Account access and credentials are still required; installing the SDK does not grant access.
+**Published on npm:** `bharosa`. Both clients use the production API at `https://api.bharosa.finance` by default. Account access and credentials are still required; installing the SDK does not grant access.
 
 ## Start here
 
-Use Node.js 22.12+ in a supported LTS release. Install the reviewed local candidate in your backend application:
+Use Node.js 22.12+ in a supported LTS release. Install the SDK in your backend application:
 
 ```sh
-npm install /absolute/path/to/bharosa-0.4.0.tgz --ignore-scripts
+npm install bharosa
 ```
 
 Source contributors can build and pack a local archive using the commands in CONTRIBUTING.md.
 
-Configure your application's account ID and account key through its secret manager. Then:
+Configure your API key through your backend secret manager. Every active, unexpired API key has baseline market access; private account calls require the optional account permissions. Then:
 
 ```ts
 import { Bharosa } from "bharosa";
@@ -25,10 +25,11 @@ function required(name: string): string {
   return value;
 }
 const bharosa = new Bharosa({
-  account: required("BHAROSA_ACCOUNT_ID"),
-  auth: { type: "account_key", apiKey: required("BHAROSA_SECRET_KEY") },
+  apiKey: required("BHAROSA_SECRET_KEY"),
 });
-const account = await bharosa.accounts.retrieve();
+const latestNav = await bharosa.markets.schemes.nav("45139");
+// Optional own-account permission is required for this call:
+// const account = await bharosa.accounts.retrieve();
 ```
 
 The startup check names missing environment variables without printing their values. See the [complete setup guide](docs/getting-started.md) for explicit checks and delegated authentication. CommonJS uses `const { Bharosa } = require("bharosa")`.
@@ -115,11 +116,11 @@ The optional `bharosa/testing` entrypoint supplies fresh, deterministic syntheti
 
 Unit precision: supplied units accept at most four fractional digits; additional digits are rejected, never truncated. Dated amount conversion rounds once to four places using decimal half-even arithmetic; a positive amount rounding to zero returns `units_below_precision`. Currency and NAV precision are unchanged. Exact historical quantities and provenance remain in stored evidence and read responses; the web marks rounded displays with ≈, shows tiny positive values as <0.0001, and makes a rounded edit draft an explicit correction. Existing zero-unit closure remains supported; initial quantities must be positive. No portfolio reset or data rewrite is required. 
 
-After installing the archive, run `node node_modules/bharosa/examples/offline-smoke.mjs` for a credential-free synthetic read. This checks installed imports and the transport path without contacting Bharosa or creating data. It does not prove live access. Source-checkout verification commands require contributor files that are intentionally excluded from the runtime archive.
+After installing the package, run `node node_modules/bharosa/examples/offline-smoke.mjs` for a credential-free synthetic read. This checks installed imports and the transport path without contacting Bharosa or creating data. It does not prove live access. Source-checkout verification commands require contributor files that are intentionally excluded from the runtime archive.
 
-### Registered-app monthly data
+### Baseline market access
 
-Available in SDK 0.3.0 and activated at `https://api.bharosa.finance`. Server applications can use `new BharosaMarket({apiKey})` with an owner-issued `market_key` scoped only to `market:read`. `client.schemes.nav(id,{asOf:'2026-08-01'})`, `schemes.expenseRatio`, `funds.portfolio` and `funds.holdings` use account-independent monthly snapshot routes. These keys cannot read private accounts or portfolios and require no investor OAuth token. Keep secrets server-side; never bundle them into browser code. Existing account-key and delegated-user clients remain unchanged. The production control-plane environment is `production`. General third-party OAuth provisioning is separate and is not enabled by this feature.
+Use `new Bharosa({ apiKey })` and `client.markets` for account-independent latest NAV and monthly snapshots. Existing `new BharosaMarket({ apiKey })` clients remain compatible. Active, unexpired API keys have baseline market access without an investor OAuth token or a separate market-data approval. Legacy market-only keys still cannot access private accounts. Optional own-account permissions apply only to the key's authorized account; accessing another user's account still requires OAuth consent. Keep all secrets server-side.
 
 ### Optional API origin override
 
@@ -127,4 +128,10 @@ Set `baseUrl` only for another deployment or tests. Omitted or `undefined` uses
 
 ## Growth performance and category returns
 
-Adds `mutualFundSchemes.performance.retrieve` and `fundCategories.statistics.retrieve` for authenticated account access. See [analytics methods, coverage and limitations](docs/analytics.md). These API routes are deployed; this SDK candidate is not yet published. `BharosaMarket` retains its four monthly operations and cannot call account analytics.
+Adds `mutualFundSchemes.performance.retrieve` and `fundCategories.statistics.retrieve` for authenticated account access. See [analytics methods, coverage and limitations](docs/analytics.md). These API routes and SDK methods are published. `BharosaMarket` retains its four monthly operations and cannot call account analytics.
+
+## Unified API keys
+
+SDK 0.5.0 introduced `new Bharosa({ apiKey })` and `client.markets`, using the existing account-independent market routes. Omit the NAV selection for latest NAV, or pass `{ asOf: "2026-10-01" }` for a monthly snapshot. Missing observations return `status: "missing"` and `data: null`. Explicit dates must be month starts. The account-scoped NAV method also accepts omission, while keeping account authorization.
+
+Existing `auth` configurations and `BharosaMarket` remain supported. Baseline calls use only the API key; delegated private calls still require user consent and a valid user token. The production origin remains `https://api.bharosa.finance`. Unified-key support is deployed. Private permissions remain optional and are enforced by the server; installing the SDK grants no additional access.

package/dist/client-types.d.cts

@@ -24,7 +24,7 @@ interface BharosaBaseConfig {
     readonly allowLocalhostHttp?: boolean;
     readonly maxResponseBytes?: number;
 }
-export type BharosaConfig = BharosaBaseConfig & ({
+type LegacyBharosaConfig = BharosaBaseConfig & ({
     readonly auth: Auth;
     readonly fetch?: typeof globalThis.fetch;
     readonly transport?: never;
@@ -33,6 +33,17 @@ export type BharosaConfig = BharosaBaseConfig & ({
     readonly auth?: never;
     readonly fetch?: never;
 });
+/** Simple server-side API-key configuration. Account access remains server-authorized. */
+export type BharosaConfig = LegacyBharosaConfig | {
+    readonly apiKey: string;
+    readonly account?: string;
+    readonly baseUrl?: string;
+    readonly allowLocalhostHttp?: boolean;
+    readonly maxResponseBytes?: number;
+    readonly fetch?: typeof globalThis.fetch;
+    readonly auth?: never;
+    readonly transport?: never;
+};
 export interface RequestOptions {
     idempotencyKey?: string;
     signal?: AbortSignal;

package/dist/client-types.d.ts

@@ -24,7 +24,7 @@ interface BharosaBaseConfig {
     readonly allowLocalhostHttp?: boolean;
     readonly maxResponseBytes?: number;
 }
-export type BharosaConfig = BharosaBaseConfig & ({
+type LegacyBharosaConfig = BharosaBaseConfig & ({
     readonly auth: Auth;
     readonly fetch?: typeof globalThis.fetch;
     readonly transport?: never;
@@ -33,6 +33,17 @@ export type BharosaConfig = BharosaBaseConfig & ({
     readonly auth?: never;
     readonly fetch?: never;
 });
+/** Simple server-side API-key configuration. Account access remains server-authorized. */
+export type BharosaConfig = LegacyBharosaConfig | {
+    readonly apiKey: string;
+    readonly account?: string;
+    readonly baseUrl?: string;
+    readonly allowLocalhostHttp?: boolean;
+    readonly maxResponseBytes?: number;
+    readonly fetch?: typeof globalThis.fetch;
+    readonly auth?: never;
+    readonly transport?: never;
+};
 export interface RequestOptions {
     idempotencyKey?: string;
     signal?: AbortSignal;

package/dist/index.cjs

@@ -45,9 +45,11 @@ class Bharosa {
     fundCategories;
     mutualFunds;
     mutualFundSchemes;
+    markets;
     marketSnapshots;
     marketData;
     constructor(config) {
+        this.markets = baselineMarkets((0, transport_cjs_1.createTransport)(config, true));
         const call = (0, transport_cjs_1.createTransport)(config);
         const analyticsQuery = (q, extra = []) => {
             (0, transport_cjs_1.keys)(q, ["asOf", "periods", ...extra]);
@@ -314,7 +316,10 @@ class Bharosa {
         };
         this.marketSnapshots = {
             schemes: {
-                nav: (id, q, o) => call("monthly_nav", { id, ...monthlyQuery(q) }, undefined, o),
+                nav: (id, q = {}, o) => {
+                    (0, transport_cjs_1.keys)(q, ["asOf"]);
+                    return call("monthly_nav", { id, ...(q.asOf === undefined ? {} : { as_of: q.asOf }) }, undefined, o);
+                },
                 expenseRatio: (id, q, o) => call("monthly_expense", { id, ...monthlyQuery(q) }, undefined, o),
                 valuation: (id, input = {}, o) => {
                     (0, transport_cjs_1.keys)(input, ["units", "asOf", "positionDate", "observedValue"]);
@@ -408,24 +413,33 @@ class BharosaMarket {
         ]);
         const { apiKey, ...rest } = config;
         const call = (0, transport_cjs_1.createTransport)({ ...rest, account: "me", auth: { type: "account_key", apiKey } }, true);
-        const query = (q, paging = false) => {
-            (0, transport_cjs_1.keys)(q, paging ? ["asOf", "limit", "startingAfter"] : ["asOf"]);
-            return {
-                as_of: q.asOf,
-                ...(q.limit === undefined ? {} : { limit: q.limit }),
-                ...(q.startingAfter === undefined
-                    ? {}
-                    : { starting_after: q.startingAfter }),
-            };
-        };
-        this.schemes = {
-            nav: (id, q, o) => call("monthly_nav", { id, ...query(q) }, undefined, o),
-            expenseRatio: (id, q, o) => call("monthly_expense", { id, ...query(q) }, undefined, o),
-        };
-        this.funds = {
-            portfolio: (id, q, o) => call("monthly_portfolio", { id, ...query(q) }, undefined, o),
-            holdings: (id, q, o) => call("monthly_holdings", { id, ...query(q, true) }, undefined, o),
-        };
+        const resources = baselineMarkets(call);
+        this.schemes = resources.schemes;
+        this.funds = resources.funds;
     }
 }
 exports.BharosaMarket = BharosaMarket;
+function baselineMarkets(call) {
+    const query = (q, paging = false) => {
+        (0, transport_cjs_1.keys)(q, paging ? ["asOf", "limit", "startingAfter"] : ["asOf"]);
+        return {
+            as_of: q.asOf,
+            ...(q.limit === undefined ? {} : { limit: q.limit }),
+            ...(q.startingAfter === undefined
+                ? {}
+                : { starting_after: q.startingAfter }),
+        };
+    };
+    const schemes = {
+        nav: (id, q = {}, o) => {
+            (0, transport_cjs_1.keys)(q, ["asOf"]);
+            return call("monthly_nav", { id, ...(q.asOf === undefined ? {} : { as_of: q.asOf }) }, undefined, o);
+        },
+        expenseRatio: (id, q, o) => call("monthly_expense", { id, ...query(q) }, undefined, o),
+    };
+    const funds = {
+        portfolio: (id, q, o) => call("monthly_portfolio", { id, ...query(q) }, undefined, o),
+        holdings: (id, q, o) => call("monthly_holdings", { id, ...query(q, true) }, undefined, o),
+    };
+    return Object.freeze({ schemes: Object.freeze(schemes), funds: Object.freeze(funds) });
+}

package/dist/index.d.cts

@@ -13,6 +13,7 @@ export declare class Bharosa implements T.ClientSurface {
     readonly fundCategories: T.ClientSurface["fundCategories"];
     readonly mutualFunds: T.ClientSurface["mutualFunds"];
     readonly mutualFundSchemes: T.ClientSurface["mutualFundSchemes"];
+    readonly markets: BaselineMarketClient;
     readonly marketSnapshots: MonthlyMarketClient;
     readonly marketData: D.MarketDataClient;
     constructor(config: T.BharosaConfig);
@@ -27,7 +28,16 @@ export interface BharosaMarketConfig {
 }
 /** Server-only registered-app monthly market access. No account or user token. */
 export declare class BharosaMarket {
-    readonly schemes: Pick<MonthlyMarketClient["schemes"], "nav" | "expenseRatio">;
+    readonly schemes: BaselineMarketClient["schemes"];
     readonly funds: MonthlyMarketClient["funds"];
     constructor(config: BharosaMarketConfig);
 }
+export interface BaselineMarketClient {
+    readonly schemes: {
+        nav(id: string, selection?: {
+            asOf?: string;
+        }, options?: T.RequestOptions): ReturnType<MonthlyMarketClient["schemes"]["nav"]>;
+        expenseRatio: MonthlyMarketClient["schemes"]["expenseRatio"];
+    };
+    readonly funds: MonthlyMarketClient["funds"];
+}

package/dist/index.d.ts

@@ -13,6 +13,7 @@ export declare class Bharosa implements T.ClientSurface {
     readonly fundCategories: T.ClientSurface["fundCategories"];
     readonly mutualFunds: T.ClientSurface["mutualFunds"];
     readonly mutualFundSchemes: T.ClientSurface["mutualFundSchemes"];
+    readonly markets: BaselineMarketClient;
     readonly marketSnapshots: MonthlyMarketClient;
     readonly marketData: D.MarketDataClient;
     constructor(config: T.BharosaConfig);
@@ -27,7 +28,16 @@ export interface BharosaMarketConfig {
 }
 /** Server-only registered-app monthly market access. No account or user token. */
 export declare class BharosaMarket {
-    readonly schemes: Pick<MonthlyMarketClient["schemes"], "nav" | "expenseRatio">;
+    readonly schemes: BaselineMarketClient["schemes"];
     readonly funds: MonthlyMarketClient["funds"];
     constructor(config: BharosaMarketConfig);
 }
+export interface BaselineMarketClient {
+    readonly schemes: {
+        nav(id: string, selection?: {
+            asOf?: string;
+        }, options?: T.RequestOptions): ReturnType<MonthlyMarketClient["schemes"]["nav"]>;
+        expenseRatio: MonthlyMarketClient["schemes"]["expenseRatio"];
+    };
+    readonly funds: MonthlyMarketClient["funds"];
+}

package/dist/monthly-market-data.cjs

@@ -29,12 +29,13 @@ module.exports = {
         {
           "name": "as_of",
           "in": "query",
-          "required": true,
+          "required": false,
           "schema": {
             "type": "string",
             "format": "date",
             "pattern": "^[0-9]{4}-[0-9]{2}-01$"
-          }
+          },
+          "description": "Omit for latest NAV on or before today in Asia/Kolkata. When supplied, must be the first of a month and not in the future. Actual observation date is returned separately."
         }
       ],
       "response": {

package/dist/monthly-types.d.cts

@@ -21,7 +21,7 @@ export interface MonthSelection {
 }
 export interface MonthlyMarketClient {
     schemes: {
-        nav(id: string, query: MonthSelection, options?: RequestOptions): Promise<MarketSnapshot<D.NavObservation>>;
+        nav(id: string, query?: Partial<MonthSelection>, options?: RequestOptions): Promise<MarketSnapshot<D.NavObservation>>;
         expenseRatio(id: string, query: MonthSelection, options?: RequestOptions): Promise<MarketSnapshot<D.ExpenseObservation>>;
         valuation(id: string, input?: D.ValuationInput, options?: RequestOptions): Promise<D.LatestNavValuation>;
     };

package/dist/monthly-types.d.ts

@@ -21,7 +21,7 @@ export interface MonthSelection {
 }
 export interface MonthlyMarketClient {
     schemes: {
-        nav(id: string, query: MonthSelection, options?: RequestOptions): Promise<MarketSnapshot<D.NavObservation>>;
+        nav(id: string, query?: Partial<MonthSelection>, options?: RequestOptions): Promise<MarketSnapshot<D.NavObservation>>;
         expenseRatio(id: string, query: MonthSelection, options?: RequestOptions): Promise<MarketSnapshot<D.ExpenseObservation>>;
         valuation(id: string, input?: D.ValuationInput, options?: RequestOptions): Promise<D.LatestNavValuation>;
     };

package/dist/response-checks.cjs

@@ -190,7 +190,7 @@ function responseMatches(id, op, data, params, body, account) {
     }
     if (id.startsWith("monthly_") && id !== "monthly_valuation") {
         const observation = d("observation_date"), requested = d("requested_date"), data = d("data");
-        if (requested !== params.as_of)
+        if (!(id === "monthly_nav" && params.as_of === undefined) && requested !== params.as_of)
             return false;
         if (d("status") === "available") {
             if (typeof observation !== "string" ||

package/dist/transport.cjs

@@ -143,7 +143,17 @@ async function read(response, max, signal) {
         reader.releaseLock();
     }
 }
-function createTransport(config, marketOnly = false) {
+function createTransport(input, marketOnly = false) {
+    let config;
+    if (input != null && typeof input === "object" && Object.hasOwn(input, "apiKey")) {
+        keys(input, ["apiKey", "account", "baseUrl", "allowLocalhostHttp", "maxResponseBytes", "fetch"]);
+        const simple = input;
+        const { apiKey, account, ...rest } = simple;
+        config = { ...rest, account: account === undefined ? "me" : account, auth: { type: "account_key", apiKey } };
+    }
+    else {
+        config = input;
+    }
     const customTransport = config?.transport !== undefined;
     if (!customTransport)
         assertServer();
@@ -177,7 +187,7 @@ function createTransport(config, marketOnly = false) {
             (a.type === "delegated_application" && token(a.userAccessToken)));
         headers = Object.freeze({
             Authorization: "Bearer " + a.apiKey,
-            ...(a.type === "delegated_application"
+            ...(a.type === "delegated_application" && !marketOnly
                 ? { "Bharosa-User-Authorization": "Bearer " + a.userAccessToken }
                 : {}),
             Accept: "application/json",

package/dist/transport.d.cts

@@ -2,4 +2,4 @@ import type { OperationResults } from "./operation-types.cjs";
 import type { BharosaConfig, RequestOptions } from "./client-types.cjs";
 export declare function check(v: unknown): asserts v;
 export declare function keys(v: unknown, allowed: readonly string[]): void;
-export declare function createTransport(config: BharosaConfig, marketOnly?: boolean): <K extends keyof OperationResults>(id: K, params?: Record<string, unknown>, body?: unknown, opts?: RequestOptions) => Promise<OperationResults[K]>;
+export declare function createTransport(input: BharosaConfig, marketOnly?: boolean): <K extends keyof OperationResults>(id: K, params?: Record<string, unknown>, body?: unknown, opts?: RequestOptions) => Promise<OperationResults[K]>;

package/dist/transport.d.ts

@@ -2,4 +2,4 @@ import type { OperationResults } from "./operation-types.js";
 import type { BharosaConfig, RequestOptions } from "./client-types.js";
 export declare function check(v: unknown): asserts v;
 export declare function keys(v: unknown, allowed: readonly string[]): void;
-export declare function createTransport(config: BharosaConfig, marketOnly?: boolean): <K extends keyof OperationResults>(id: K, params?: Record<string, unknown>, body?: unknown, opts?: RequestOptions) => Promise<OperationResults[K]>;
+export declare function createTransport(input: BharosaConfig, marketOnly?: boolean): <K extends keyof OperationResults>(id: K, params?: Record<string, unknown>, body?: unknown, opts?: RequestOptions) => Promise<OperationResults[K]>;

package/docs/analytics.md

@@ -1,6 +1,6 @@
 # Growth scheme performance and category returns
 
-SDK0.4.0 candidate, unpublished. The two API methods are deployed. Default origin is https://api.bharosa.finance, incorporating the reviewed host-default delta directly on published0.3.2; explicit baseUrl overrides remain supported. Account authorization with accounts:read is required. BharosaMarket does not expose these methods.
+The two analytics methods are deployed and published in SDK 0.4.0. SDK 0.5.0 and later preserve them. Default origin is https://api.bharosa.finance; explicit baseUrl overrides remain supported. Account authorization with accounts:read is required. BharosaMarket does not expose these methods.
 
 ```ts
 import { Bharosa } from "bharosa";

package/docs/getting-started.md

@@ -4,12 +4,12 @@
 
 Use Node.js 22.12 or later in a supported LTS release. The SDK supports ESM and CommonJS. Key-based authentication is server-only; keep credentials in your backend or server that handles browser sessions. Browser applications can supply a generic transport whose private host implementation manages sessions, origin restrictions and CSRF. Bun and Deno are unsupported.
 
-Obtain your authorized account ID and account key. Bharosa and BharosaMarket default to the production origin `https://api.bharosa.finance`; no API URL environment variable is required. The SDK neither provisions accounts nor runs an OAuth consent flow.
+Obtain an API key. For private account calls, enable the needed optional own-account permissions; the simple API-key configuration defaults to account selector `me`. Bharosa and BharosaMarket default to the production origin `https://api.bharosa.finance`; no API URL environment variable is required. The SDK neither provisions accounts nor runs an OAuth consent flow.
 
-## Install the unpublished 0.4.0 candidate
+## Install from npm
 
 ```sh
-npm install /absolute/path/to/bharosa-0.4.0.tgz --ignore-scripts
+npm install bharosa
 ```
 
 Source contributors can build and pack a local archive as described in CONTRIBUTING.md.

package/docs/index.md

@@ -1,8 +1,8 @@
 # Bharosa SDK guides
 
-Build a Node.js integration with the Bharosa resource API. This SDK is not yet published on npm; install it from a local archive. Ask your service operator for API access separately.
+Build a Node.js integration with the Bharosa resource API. Install the published SDK with `npm install bharosa`. Use an API key for baseline market data and optional authorized own-account access; other users' accounts require OAuth consent.
 
-1. [Install locally and make your first request](getting-started.md).
+1. [Install and make your first request](getting-started.md).
 2. [Work with portfolios and mixes](portfolios.md).
 3. [Handle errors, cancellation, and retries](reliability.md).
 4. [Use monthly market snapshots](monthly-market-data.md).

package/docs/monthly-market-data.md

@@ -1,6 +1,17 @@
-# Monthly market snapshots
+# Latest NAV and monthly market snapshots
 
-`client.mutualFundSchemes` and `client.mutualFunds.portfolios` provide month-start market history and current NAV valuation. Monthly market data requires no separate application approval. Use authenticated credentials with the required account-read scope; installing the SDK does not authenticate you or grant private account access. Availability still depends on the deployed service and source data.
+Use `new Bharosa({ apiKey })` and `client.markets` for baseline market access with any active, unexpired API key. No account permission, investor token or separate market-data approval is required on these account-independent routes. Existing account-scoped methods retain account authorization; installing the SDK grants no private account access. Availability depends on source observations.
+
+```ts
+import { Bharosa } from "bharosa";
+const client = new Bharosa({ apiKey: process.env.BHAROSA_SECRET_KEY! });
+const latest = await client.markets.schemes.nav("45139");
+const monthly = await client.markets.schemes.nav("45139", { asOf: "2026-10-01" });
+```
+
+Baseline methods are `markets.schemes.nav`, `markets.schemes.expenseRatio`, `markets.funds.portfolio` and `markets.funds.holdings`. Omit the NAV selection for latest NAV; all explicit historical dates must be month starts. The remaining three methods require a monthly selection. `BharosaMarket` exposes the same baseline methods without the `markets` prefix.
+
+The discovery and account-scoped methods below require their existing account permissions. A baseline-only key does not gain access to scheme search or private analytics.
 
 Resolve an investible scheme through `client.mutualFunds.search()` and its returned `scheme_id`. Fund-owner IDs and scheme IDs are distinct: NAV and expense ratios belong to schemes; portfolio snapshots and holdings belong to fund owners. Do not use an AMC ID as a fund-owner ID.
 
@@ -24,7 +35,7 @@ Replace the search term with a fund you intend to inspect and choose among the r
 
 Supported methods:
 
-- `mutualFundSchemes.navs.retrieve(schemeId, { asOf })`
+- `mutualFundSchemes.navs.retrieve(schemeId)` for latest NAV, or pass `{ asOf }` for a monthly snapshot
 - `mutualFundSchemes.expenseRatios.retrieve(schemeId, { asOf })`
 - `mutualFundSchemes.valuation(schemeId, { units })` for current value using the latest eligible NAV. Supply a month-start `asOf` for historical valuation. Actual NAV date and freshness are returned; old NAVs are not labelled today's prices.
 - `mutualFunds.portfolios.retrieve(fundOwnerId, { asOf })`

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "bharosa",
-  "version": "0.4.0",
+  "version": "0.5.1",
   "private": false,
   "description": "Typed Bharosa resource SDK with server credentials or caller-owned transport.",
   "license": "MIT",