ffc-pay-schemes 1.0.1

package/.github/workflows/secret-scanner.yml

@@ -0,0 +1,16 @@
+name: Secret Scanner
+on:
+  workflow_call:
+  push:
+    branches:
+      - main
+  pull_request:
+    branches:
+      - main
+    types:
+      - opened        # PR created
+      - synchronize   # new commits pushed to an existing PR
+      - reopened      # PR reopened after being closed
+jobs:
+  secret-scan:
+    uses: DEFRA/ffc-shared-actions/.github/workflows/secret-scanner.yml@main

package/.gitleaks-shared/.gitleaks.toml

@@ -0,0 +1,139 @@
+# Gitleaks configuration — shared by the GitHub Actions workflow and the
+# local pre-commit hook so both environments enforce identical rules.
+#
+# Docs: https://github.com/zricethezav/gitleaks/blob/master/config/gitleaks.toml
+
+title = "ffc secret scanner action"
+
+# ---------------------------------------------------------------------------
+# Extend the default ruleset shipped with gitleaks so we inherit all the
+# built-in detectors (AWS keys, GitHub tokens, generic high-entropy strings,
+# etc.) and only need to declare project-specific additions below.
+# ---------------------------------------------------------------------------
+[extend]
+useDefault = true
+
+# ---------------------------------------------------------------------------
+# Project-specific rules
+# Add deny rules here for patterns specific to this service that the default
+# ruleset would not already catch.
+# ---------------------------------------------------------------------------
+
+# Example: Azure client secrets (adjust the prefix/pattern to match your
+# actual format once you know it).
+[[rules]]
+id          = "azure-client-secret"
+description = "Azure client secret"
+regex       = '''(?i)azure[_\-]?client[_\-]?secret[\s\S]{0,20}[=:]\s*["']?([a-zA-Z0-9+/~._-]{32,})'''
+tags        = ["azure", "secret"]
+
+# Example: catch raw connection strings that include a password component.
+[[rules]]
+id          = "db-connection-string"
+description = "Database connection string with embedded password"
+regex       = '''(?i)(postgres|postgresql|mssql|mysql):\/\/[^:]+:[^@]{8,}@'''
+tags        = ["database", "secret"]
+
+[[rules]]
+id          = "notify-api-key"
+description = "GOV.UK Notify API key"
+regex       = '''(?i)notify[_\-]?api[_\-]?key[a-zA-Z]*[\s\S]{0,20}[=:]\s*["']?([a-z0-9_\-]{72,})'''
+tags        = ["notify", "secret"]
+
+[[rules]]
+id          = "plaintext-email-address"
+description = "Plain text email address (potential PII leak)"
+regex       = '''[a-zA-Z0-9._%+\-]+@[a-zA-Z0-9.\-]+\.[a-zA-Z]{2,}'''
+tags        = ["email", "pii"]
+
+  [rules.allowlist]
+  description = "Email addresses are expected in npm package metadata files and as example values in code"
+  paths = [
+    '''(^|/)package\.json$''',
+    '''(^|/)package-lock\.json$''',
+    '''(?i)(^|/)changelog(/|$)''',
+    '''(?i)(^|/)test(/|$)''',
+    '''(^|/)asyncapi\.ya?ml$''',
+  ]
+  regexes = [
+    # Emails using universally-recognised placeholder domains — not real credentials
+    '''[a-zA-Z0-9._%+\-]+@(example\.(com|org|net)|domain\.com|test\.com|localhost)''',
+  ]
+
+[[rules]]
+id          = "appconfig-literal-secret"
+description = "Literal secret value found in appconfig file - use KeyVault reference instead"
+regex = '''(?i)(?:password|secret|key|token|credential|connectionstring)[a-zA-Z_\-]*:\s*["']?[a-zA-Z0-9+/=._\-]{20,}'''
+path        = '''appconfig/(prod|pre|pr|dev|test|snd2)\.yaml'''
+tags        = ["appconfig", "keyvault", "secret"]
+
+  [rules.allowlist]
+  description = "Allow KeyVault structural keywords and Kubernetes secret mapping fields"
+  regexes = [
+    '''objectName:''',
+    '''objectType:''',
+    '''secretName:''',
+    '''keyvaultName:''',
+    # Kubernetes 'key:' fields in secret store mappings hold env var names
+    # (ALL_CAPS convention), never literal credential values
+    '''key:\s*[A-Z][A-Z0-9_]+''',
+  ]
+
+
+# ---------------------------------------------------------------------------
+# Allow-list — entries here are NEVER flagged, regardless of matching rules.
+#
+# Guidelines:
+#  - Add an entry only for well-understood test/mock values.
+#  - Include a comment explaining WHY the value is safe to allow.
+#  - Prefer allowing by file path rather than by regex where possible so the
+#    noise surface is as small as possible.
+# ---------------------------------------------------------------------------
+
+[allowlist]
+description = "Known-safe test values and intentional mock data"
+
+# Specific commits that contain only test/fixture data (replace with real SHA).
+# commits = ["<commit-sha>"]
+
+# Files that are allowed to contain secret-like patterns (e.g. unit test
+# fixtures, mock objects).  Add only what is genuinely safe.
+paths = [
+  # Jest snapshot or mock-object files are populated with fake tokens.
+  '''(^|/)package\.json$''',
+  '''(^|/)package-lock\.json$''',
+  '''(^|/)CHANGELOG''',
+  '''(^|/)CONTRIBUTORS''',
+  '''(^|/)LICENSE''',
+  '''(^|/)\.secrets\.baseline$''',
+  '''\.github/.*''',
+  '''test/mock-objects/.*''',
+  '''test/mock-modules/.*''',
+  '''test/mocks/.*''',
+]
+
+# Individual regex patterns that should never be flagged, regardless of file.
+# Each entry should be as specific as possible — prefer an exact literal over
+# a broad pattern.
+#
+regexTarget = "line"
+regexes = [
+  # Well-known Azurite (Azure Storage Emulator) development AccountKey.
+  # The AccountKey is hardcoded and publicly documented by Microsoft — it is
+  # identical across every Azurite instance and is never a live secret.
+  # Matching on AccountName+AccountKey alone makes this universal: the env var
+  # name and BlobEndpoint hostname are irrelevant and vary per service.
+  # Ref: https://learn.microsoft.com/azure/storage/common/storage-use-azurite#well-known-storage-account-and-key
+  '''AccountName=devstoreaccount1;AccountKey=Eby8vdM02xNOcqFlqUwJPLlmEtlCDXJ1OUzFT50uSRZ6IFsuFq2UVErCz4I6tq/K1SZFPTOtr/KBHBeksoGMGw==''',
+  '''Eby8vdM02xNOcqFlqUwJPLlmEtlCDXJ1OUzFT50uSRZ6IFsuFq2UVErCz4I6tq/K1SZFPTOtr/KBHBeksoGMGw''',
+  # rpa email found in many ffc-doc statement templates
+  '''ruralpayments@defra.gov.uk''',
+  #Notify simulation addresses
+  '''perm-fail@simulator.notify''',
+  '''temp-fail@simulator.notify''',
+  #dev-account-Emails
+  '''defra-ad2-fcp@atos.net''',
+  '''payment-document-services@defra.gov.uk''',
+  # Historic commit containing log in doc-publisher
+  '''eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6Ii1LSTNROW5OUjdiUm9meG1lWm9YcWJIWkdldyIsImtpZCI6Ii1LSTNROW5OUjdiUm9meG1lWm9YcWJIWkdldyJ9.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.ow6tLyOvyqUp9nkyUoB9pMJBiA9-0I4U9B8z4De3p9ypOhLUpR34v-WgtKISe7G97hxBvUqvlBZUSgSEREblURLMdUFONx1vFVoDTAgFP-Rq9ttR-X8f6m11rJdgGzWanCUk-btbF1-tOHcYdqU4Szipl_7sJpvvnBd3Vn5SFmBItT0F2AZLQEXJFQFdVXklzYOVxVZBJjoEwFzFR01n2xOnbAQa0T0w5JefESkcAb8z4HGCapSe2y4j8SY8oF-PuOk7EUYuhRVY8K-xV1SaMIhJt-_dJegrYpmtkb9GHRU341CJZhVDfnoPTgLM-FuePItk5IvF20YRu0cw-XLa7g'''
+]

package/.gitleaks.toml

@@ -0,0 +1,15 @@
+# ffc-pay-schemes/.gitleaks.toml
+title = "ffc-pay-schemes"
+[extend]
+path = ".gitleaks-shared/.gitleaks.toml"
+# Service-specific additions only below this line, use [[ ]] for multiple allowlist instances
+[allowlist]
+description = "Service-specific exclusions"
+paths = [
+  '''test/mock-objects/.*''',
+  '''test/mock-modules/.*''',
+  '''test/unit/.*'''
+]
+#enter regex here wrapped in triple ''' to exclude specific keys
+#regexes = [
+#]

package/.husky/pre-commit

@@ -0,0 +1,30 @@
+#!/bin/sh
+
+GITLEAKS_VERSION="8.30.0"
+GITLEAKS_BIN="$HOME/.local/bin/gitleaks"
+GITLEAKS_URL="https://github.com/gitleaks/gitleaks/releases/download/v${GITLEAKS_VERSION}/gitleaks_${GITLEAKS_VERSION}_linux_x64.tar.gz"
+
+# get installed version (if any)
+INSTALLED_VERSION=""
+if [ -x "$GITLEAKS_BIN" ]; then
+  INSTALLED_VERSION=$("$GITLEAKS_BIN" --version 2>/dev/null | grep -oE '[0-9]+\.[0-9]+\.[0-9]+' || true)
+fi
+
+if [ "$INSTALLED_VERSION" != "$GITLEAKS_VERSION" ]; then
+  echo "⚠️  Installing/updating gitleaks v${GITLEAKS_VERSION} (was: ${INSTALLED_VERSION:-none})..."
+  mkdir -p "$HOME/.local/bin"
+  curl -sSfL "$GITLEAKS_URL" | tar -xz -C "$HOME/.local/bin" gitleaks
+  chmod +x "$GITLEAKS_BIN"
+fi
+
+# Always fetch latest shared gitleaks config
+echo "Fetching shared gitleaks config..."
+mkdir -p .gitleaks-shared
+if ! curl -sSfL https://raw.githubusercontent.com/DEFRA/ffc-shared-actions/main/.gitleaks.toml \
+  -o .gitleaks-shared/.gitleaks.toml; then
+  echo "❌ Failed to fetch shared gitleaks config from ffc-shared-actions." >&2
+  exit 1
+fi
+
+echo "🔍 Running gitleaks scan..."
+"$GITLEAKS_BIN" protect --staged --config .gitleaks.toml --verbose --exit-code=2

package/LICENCE

@@ -0,0 +1,8 @@
+The Open Government Licence (OGL) Version 3
+
+Copyright (c) 2020 Defra
+
+This source code is licensed under the Open Government Licence v3.0. To view this
+licence, visit www.nationalarchives.gov.uk/doc/open-government-licence/version/3
+or write to the Information Policy Team, The National Archives, Kew, Richmond,
+Surrey, TW9 4DU.

package/README.md

@@ -0,0 +1,34 @@
+# ffc-pay-schemes
+
+Module for defining and providing details for the payment schemes supported by the Payment Hub.
+
+## Usage
+
+### Installation
+
+```
+npm install --save ffc-pay-schemes
+```
+
+## Licence
+
+THIS INFORMATION IS LICENSED UNDER THE CONDITIONS OF THE OPEN GOVERNMENT
+LICENCE found at:
+
+<http://www.nationalarchives.gov.uk/doc/open-government-licence/version/3>
+
+The following attribution statement MUST be cited in your products and
+applications when using this information.
+
+> Contains public sector information licensed under the Open Government license
+> v3
+
+### About the licence
+
+The Open Government Licence (OGL) was developed by the Controller of Her
+Majesty's Stationery Office (HMSO) to enable information providers in the
+public sector to license the use and re-use of their information under a common
+open licence.
+
+It is designed to encourage use and re-use of information freely and flexibly,
+with only a few conditions.

package/app/constants/account-codes/ap.js

@@ -0,0 +1,48 @@
+module.exports = {
+  SOS210: 'SOS210',
+  SOS216: 'SOS216',
+  SOS228: 'SOS228',
+  SOS229: 'SOS229',
+  SOS231: 'SOS231',
+  SOS232: 'SOS232',
+  SOS233: 'SOS233',
+  SOS234: 'SOS234',
+  SOS236: 'SOS236',
+  SOS237: 'SOS237',
+  SOS238: 'SOS238',
+  SOS239: 'SOS239',
+  SOS260: 'SOS260',
+  SOS266: 'SOS266',
+  SOS350: 'SOS350',
+  SOS351: 'SOS351',
+  SOS361: 'SOS361',
+  SOS362: 'SOS362',
+  SOS363: 'SOS363',
+  SOS364: 'SOS364',
+  SOS367: 'SOS367',
+  SOS368: 'SOS368',
+  SOS369: 'SOS369',
+  SOS400: 'SOS400',
+  SOS402: 'SOS402',
+  SOS404: 'SOS404',
+  SOS410: 'SOS410',
+  SOS415: 'SOS415',
+  SOS416: 'SOS416',
+  SOS417: 'SOS417',
+  SOS420: 'SOS420',
+  SOS471: 'SOS471',
+  SOS472: 'SOS472',
+  SOS473: 'SOS473',
+  SOS474: 'SOS474',
+  SOS710: 'SOS710',
+  SOS920: 'SOS920',
+  SOS921: 'SOS921',
+  SOS922: 'SOS922',
+  SOS923: 'SOS923',
+  SOS924: 'SOS924',
+  SOS925: 'SOS925',
+  SOS926: 'SOS926',
+  SOS927: 'SOS927',
+  SOS928: 'SOS928',
+  SOS929: 'SOS929'
+}

package/app/constants/account-codes/ar-admin.js

@@ -0,0 +1,48 @@
+module.exports = {
+  SOS217: 'SOS217',
+  SOS267: 'SOS267',
+  SOS330: 'SOS330',
+  SOS336: 'SOS336',
+  SOS352: 'SOS352',
+  SOS466: 'SOS466',
+  SOS450: 'SOS450',
+  SOS451: 'SOS451',
+  SOS452: 'SOS452',
+  SOS453: 'SOS453',
+  SOS454: 'SOS454',
+  SOS455: 'SOS455',
+  SOS456: 'SOS456',
+  SOS457: 'SOS457',
+  SOS458: 'SOS458',
+  SOS459: 'SOS459',
+  SOS460: 'SOS460',
+  SOS461: 'SOS461',
+  SOS462: 'SOS462',
+  SOS463: 'SOS463',
+  SOS464: 'SOS464',
+  SOS465: 'SOS465',
+  SOS471: 'SOS471',
+  SOS472: 'SOS472',
+  SOS473: 'SOS473',
+  SOS474: 'SOS474',
+  SOS553: 'SOS553',
+  SOS554: 'SOS554',
+  SOS555: 'SOS555',
+  SOS556: 'SOS556',
+  SOS557: 'SOS557',
+  SOS558: 'SOS558',
+  SOS559: 'SOS559',
+  SOS560: 'SOS560',
+  SOS746: 'SOS746',
+  SOS750: 'SOS750',
+  SOS940: 'SOS940',
+  SOS941: 'SOS941',
+  SOS942: 'SOS942',
+  SOS943: 'SOS943',
+  SOS944: 'SOS944',
+  SOS945: 'SOS945',
+  SOS946: 'SOS946',
+  SOS947: 'SOS947',
+  SOS948: 'SOS948',
+  SOS949: 'SOS949'
+}

package/app/constants/account-codes/ar-irregular.js

@@ -0,0 +1,47 @@
+module.exports = {
+  SOS218: 'SOS218',
+  SOS268: 'SOS268',
+  SOS310: 'SOS310',
+  SOS316: 'SOS316',
+  SOS352: 'SOS352',
+  SOS430: 'SOS430',
+  SOS431: 'SOS431',
+  SOS432: 'SOS432',
+  SOS433: 'SOS433',
+  SOS434: 'SOS434',
+  SOS435: 'SOS435',
+  SOS436: 'SOS436',
+  SOS437: 'SOS437',
+  SOS438: 'SOS438',
+  SOS439: 'SOS439',
+  SOS445: 'SOS445',
+  SOS446: 'SOS446',
+  SOS440: 'SOS440',
+  SOS441: 'SOS441',
+  SOS442: 'SOS442',
+  SOS443: 'SOS443',
+  SOS444: 'SOS444',
+  SOS471: 'SOS471',
+  SOS472: 'SOS472',
+  SOS473: 'SOS473',
+  SOS474: 'SOS474',
+  SOS553: 'SOS553',
+  SOS554: 'SOS554',
+  SOS555: 'SOS555',
+  SOS556: 'SOS556',
+  SOS557: 'SOS557',
+  SOS558: 'SOS558',
+  SOS559: 'SOS559',
+  SOS560: 'SOS560',
+  SOS770: 'SOS770',
+  SOS960: 'SOS960',
+  SOS961: 'SOS961',
+  SOS962: 'SOS962',
+  SOS963: 'SOS963',
+  SOS964: 'SOS964',
+  SOS965: 'SOS965',
+  SOS966: 'SOS966',
+  SOS967: 'SOS967',
+  SOS968: 'SOS968',
+  SOS969: 'SOS969'
+}

package/app/constants/delivery-bodies.js

@@ -0,0 +1,6 @@
+module.exports = {
+  RP00: 'RP00',
+  RP10: 'RP10',
+  NE00: 'NE00',
+  FC00: 'FC00'
+}

package/app/constants/description-codes.js

@@ -0,0 +1,34 @@
+module.exports = {
+  G00: 'G00',
+  G01: 'G01',
+  P01: 'P01',
+  P02: 'P02',
+  P03: 'P03',
+  P04: 'P04',
+  P05: 'P05',
+  P06: 'P06',
+  P07: 'P07',
+  P08: 'P08',
+  P09: 'P09',
+  P10: 'P10',
+  P11: 'P11',
+  P12: 'P12',
+  P13: 'P13',
+  P14: 'P14',
+  P15: 'P15',
+  P16: 'P16',
+  P17: 'P17',
+  P18: 'P18',
+  P19: 'P19',
+  P20: 'P20',
+  P21: 'P21',
+  P22: 'P22',
+  P23: 'P23',
+  P24: 'P24',
+  P25: 'P25',
+  R00: 'R00',
+  X01: 'X01',
+  X02: 'X02',
+  X03: 'X03',
+  X04: 'X04'
+}

package/app/constants/fund-codes.js

@@ -0,0 +1,8 @@
+module.exports = {
+  DOM00: 'DOM00',
+  DOM10: 'DOM10',
+  DRD10: 'DRD10',
+  ERD14: 'ERD14',
+  EGF00: 'EGF00',
+  EXQ00: 'EXQ00'
+}

package/app/constants/pillars.js

@@ -0,0 +1,18 @@
+module.exports = {
+  SFI: 'SFI',
+  SFI_PILOT: 'SFIP',
+  LUMP_SUMS: 'LSES',
+  VET_VISITS: 'AHWR',
+  CS: 'CS',
+  BPS: 'BPS',
+  ES: 'ES',
+  FC: 'FC',
+  IMPS: 'IMPS',
+  SFI23: 'SFI23',
+  DELINKED: 'DP',
+  SFI_EXPANDED: 'ESFIO',
+  COHT_REVENUE: 'COHTR',
+  COHT_CAPITAL: 'COHTC',
+  FPTT: 'FPTT',
+  WMP: 'WMP'
+}

package/app/constants/scheme-batch-properties.js

@@ -0,0 +1,106 @@
+const schemeIds = require('./scheme-ids')
+
+module.exports = Object.freeze([
+  {
+    schemeId: schemeIds.SFI,
+    prefix: 'FFCSFI',
+    suffix: ' (SITI_SFI)',
+    source: 'SITI_SFI'
+  },
+  {
+    schemeId: schemeIds.SFI_PILOT,
+    prefix: 'FFCSFIP',
+    suffix: ' (SITISFI)',
+    source: 'SITISFI'
+  },
+  {
+    schemeId: schemeIds.LUMP_SUMS,
+    prefix: 'FFCLS',
+    suffix: ' (LUMP)',
+    source: 'SitiLUMP'
+  },
+  {
+    schemeId: schemeIds.VET_VISITS,
+    prefix: 'FFCVV',
+    suffix: ' (Vet Visits)',
+    source: 'AHWR'
+  },
+  {
+    schemeId: schemeIds.CS,
+    prefix: 'FFCCS',
+    suffix: ' (SITICS)',
+    source: 'SITICS'
+  },
+  {
+    schemeId: schemeIds.BPS,
+    prefix: 'FFCBPS',
+    suffix: ' (SITI)',
+    source: 'SITIAgri'
+  },
+  {
+    schemeId: schemeIds.MANUAL,
+    prefix: 'FFCManual',
+    suffix: ' (Manual)',
+    source: 'M_TEMPLATE'
+  },
+  {
+    schemeId: schemeIds.ES,
+    prefix: 'FFCES',
+    suffix: ' (Genesis)',
+    source: 'Genesis'
+  },
+  {
+    schemeId: schemeIds.FC,
+    prefix: 'FFCFC',
+    suffix: ' (GLOS)',
+    source: 'GLOS'
+  },
+  {
+    schemeId: schemeIds.IMPS,
+    prefix: 'FFCIMPS',
+    suffix: ' (IMPS)',
+    source: '04'
+  },
+  {
+    schemeId: schemeIds.SFI23,
+    prefix: 'FFCSFIA',
+    suffix: ' (SFI_SFIA)',
+    source: 'SITI_SFIA'
+  },
+  {
+    schemeId: schemeIds.DELINKED,
+    prefix: 'FFCDP',
+    suffix: ' (SITIDP)',
+    source: 'SITIDP'
+  },
+  {
+    schemeId: schemeIds.SFI_EXPANDED,
+    prefix: 'FFCESFIO',
+    suffix: ' (SITI_ESFIO)',
+    source: 'SITI_ESFIO'
+  },
+  {
+    schemeId: schemeIds.COHT_REVENUE,
+    prefix: 'FFCSITICOHTR',
+    suffix: ' (SITICOHTR)',
+    source: 'SITICOHTR'
+  },
+  {
+    schemeId: schemeIds.COHT_CAPITAL,
+    prefix: 'FFCSITICOHTC',
+    suffix: ' (SITICOHTC)',
+    source: 'SITICOHTC'
+  },
+  {
+    schemeId: schemeIds.FPTT,
+    prefix: 'FFCFALS_FPTT',
+    suffix: ' (FALS_FPTT)',
+    source: 'FALS_FPTT'
+  },
+  {
+    schemeId: schemeIds.WMP,
+    prefix: 'FFCFALS_WMP',
+    suffix: ' (FALS_WMP)',
+    source: 'FALS_WMP'
+  }
+])

package/app/constants/scheme-ids.js

@@ -0,0 +1,19 @@
+module.exports = {
+  SFI: 1,
+  SFI_PILOT: 2,
+  LUMP_SUMS: 3,
+  VET_VISITS: 4,
+  CS: 5,
+  BPS: 6,
+  MANUAL: 8,
+  ES: 9,
+  FC: 10,
+  IMPS: 11,
+  SFI23: 12,
+  DELINKED: 13,
+  SFI_EXPANDED: 14,
+  COHT_REVENUE: 15,
+  COHT_CAPITAL: 16,
+  FPTT: 17,
+  WMP: 18
+}

package/app/constants/scheme-names.js

@@ -0,0 +1,19 @@
+module.exports = {
+  SFI: 'Sustainable Farming Incentive 22',
+  SFI_PILOT: 'Sustainable Farming Incentive Pilot',
+  LUMP_SUMS: 'Lump Sums',
+  VET_VISITS: 'Annual Health and Welfare Review',
+  CS: 'Countryside Stewardship',
+  BPS: 'Basic Payment Scheme',
+  MANUAL: 'Manual Injection',
+  ES: 'Environmental Stewardship',
+  FC: 'Forestry Commission',
+  IMPS: 'Internal Market Payment Scheme',
+  SFI23: 'Sustainable Farming Incentive 23',
+  DELINKED: 'Delinked Payments',
+  SFI_EXPANDED: 'Sustainable Farming Incentive Expanded Offer',
+  COHT_REVENUE: 'Combined Offer Higher Tier (Revenue)',
+  COHT_CAPITAL: 'Combined Offer Higher Tier (Capital)',
+  FPTT: 'Farm Payments Technical Test',
+  WMP: 'Woodland Management Plan'
+}

package/app/constants/schemes-not-requiring-ppas.js

@@ -0,0 +1,3 @@
+const { MANUAL, ES, IMPS, FC, FPTT, WMP } = require('./scheme-ids')
+
+module.exports = [MANUAL, ES, IMPS, FC, FPTT, WMP]

package/app/constants/schemes-providing-account-values.js

@@ -0,0 +1,3 @@
+const { FPTT, WMP } = require('./scheme-ids')
+
+module.exports = [FPTT, WMP]