@accounter/server
Version:
Accounter GraphQL server
319 lines • 14.8 kB
JavaScript
import { __decorate, __metadata } from "tslib";
import DataLoader from 'dataloader';
import { Injectable, Scope } from 'graphql-modules';
import { sql } from '@pgtyped/runtime';
import { TenantAwareDBClient } from '../../app-providers/tenant-db-client.js';
import { FinancialAccountsProvider } from '../../financial-accounts/providers/financial-accounts.provider.js';
import { FinancialBankAccountsProvider } from '../../financial-accounts/providers/financial-bank-accounts.provider.js';
import { TransactionsProvider } from '../../transactions/providers/transactions.provider.js';
import { matchExecutionsToTransactions, matchSecurityExecutions, } from '../helpers/match-security-executions.helper.js';
import { extractSecurityKeys } from '../helpers/security-key.helper.js';
import { SecurityBusinessesProvider } from './security-businesses.provider.js';
/**
* No owner_id predicate: accounter_schema.poalim_securities is FORCE RLS with a
* tenant_isolation policy, so going through TenantAwareDBClient scopes this to the
* acting tenant. The dedup key includes branch/account, so one tenant can hold the
* same security in several accounts — DISTINCT ON keeps the freshest scrape.
*/
const getSecuritiesByKeys = sql `
SELECT DISTINCT ON (security_key)
id, security_key, eng_name, heb_name, symbol, eng_symbol, heb_symbol,
item_type, stock_type, exchange, currency_code, is_etf, is_foreign, as_of_date
FROM accounter_schema.poalim_securities
WHERE security_key = ANY($securityKeys!)
ORDER BY security_key, as_of_date DESC;`;
/**
* A prefilter, not the match itself: the ANY(...) predicates form a cross-product over the
* charge's keys, accounts and settlement days. `matchSecurityExecutions` does the per-row
* pairing in memory, where the account tuple, currency and direction are checked together.
*
* Tenant scoping is RLS again (FORCE ROW LEVEL SECURITY + tenant_isolation), hence no
* owner_id predicate.
*/
const getSecurityExecutions = sql `
SELECT
id,
security,
bank_number,
branch_number,
account_number,
trade_date,
value_date,
settlement_date,
payment_date,
trade_type,
transaction_type,
nv,
trade_price,
trade_gross_value_trade_currency,
net_value_trade_currency,
net_value_settlement_currency,
net_value_nis,
trade_currency,
settlement_currency,
trade_commission_value_trade_currency,
management_fees_value_trade_currency,
israe_tax_value,
nominal_profit_loss_nis,
real_profit_loss_nis,
payment_type,
symbol,
isin
FROM accounter_schema.poalim_securities_transactions
WHERE security = ANY($securities!)
AND bank_number = ANY($bankNumbers!)
AND branch_number = ANY($branchNumbers!)
AND account_number = ANY($accountNumbers!)
AND value_date = ANY($valueDates!);`;
/**
* Every ingested execution of the given securities, unbounded by charge or date — the whole
* life of an instrument, which is what its business page shows. RLS scopes it to the tenant.
*/
const getSecurityExecutionsByKeys = sql `
SELECT
id,
security,
bank_number,
branch_number,
account_number,
trade_date,
value_date,
settlement_date,
payment_date,
trade_type,
transaction_type,
nv,
trade_price,
trade_gross_value_trade_currency,
net_value_trade_currency,
net_value_settlement_currency,
net_value_nis,
trade_currency,
settlement_currency,
trade_commission_value_trade_currency,
management_fees_value_trade_currency,
israe_tax_value,
nominal_profit_loss_nis,
real_profit_loss_nis,
payment_type,
symbol,
isin
FROM accounter_schema.poalim_securities_transactions
WHERE security = ANY($securities!)
ORDER BY trade_date, id;`;
let ForeignSecuritiesProvider = class ForeignSecuritiesProvider {
db;
transactionsProvider;
financialAccountsProvider;
financialBankAccountsProvider;
securityBusinessesProvider;
constructor(db, transactionsProvider, financialAccountsProvider, financialBankAccountsProvider, securityBusinessesProvider) {
this.db = db;
this.transactionsProvider = transactionsProvider;
this.financialAccountsProvider = financialAccountsProvider;
this.financialBankAccountsProvider = financialBankAccountsProvider;
this.securityBusinessesProvider = securityBusinessesProvider;
}
async batchSecuritiesByKeys(securityKeys) {
const securities = await getSecuritiesByKeys.run({ securityKeys: [...securityKeys] }, this.db);
// DISTINCT ON in the query guarantees one row per key, so a plain Map is enough.
const securityByKey = new Map(securities.map(security => [security.security_key, security]));
return securityKeys.map(key => securityByKey.get(key) ?? null);
}
securityByKeyLoader = new DataLoader((keys) => this.batchSecuritiesByKeys(keys));
/**
* The Poalim identity (bank/branch/account) of each account the given transactions touch.
* `financial_accounts.account_number` is text while the poalim_* tables store it as an
* integer, so non-numeric account numbers (and non-bank accounts, which have no
* financial_bank_accounts row) simply drop out — they can never match an execution.
*/
async getAccountTuples(accountIds) {
const tuples = new Map();
await Promise.all(accountIds.map(async (accountId) => {
const [account, bankAccount] = await Promise.all([
this.financialAccountsProvider.getFinancialAccountByAccountIDLoader.load(accountId),
this.financialBankAccountsProvider.getFinancialBankAccountByIdLoader.load(accountId),
]);
if (!account || !bankAccount) {
return;
}
const accountNumber = Number(account.account_number);
if (!Number.isInteger(accountNumber)) {
return;
}
tuples.set(accountId, {
bankNumber: bankAccount.bank_number,
branchNumber: bankAccount.branch_number,
accountNumber,
});
}));
return tuples;
}
/**
* Ingested portfolio executions matched to the charge's transactions, grouped by security
* key. Returns an empty map when the charge touches no resolvable Poalim account, so a
* charge whose accounts predate the bank-account backfill degrades to "no activity" rather
* than erroring.
*/
async getMatchedExecutions(transactions, securityKeys) {
const accountTuples = await this.getAccountTuples([
...new Set(transactions.map(transaction => transaction.account_id)),
]);
if (accountTuples.size === 0) {
return new Map();
}
// An execution settles on the day its cash leg is debited, so those are the only days
// worth fetching. A transaction with no debit date can never pair up.
const valueDates = transactions
.map(transaction => transaction.debit_date_override ?? transaction.debit_date)
.filter((date) => date != null);
if (valueDates.length === 0) {
return new Map();
}
const tuples = [...accountTuples.values()];
const candidates = await getSecurityExecutions.run({
securities: [...securityKeys],
bankNumbers: [...new Set(tuples.map(tuple => tuple.bankNumber))],
branchNumbers: [...new Set(tuples.map(tuple => tuple.branchNumber))],
accountNumbers: [...new Set(tuples.map(tuple => tuple.accountNumber))],
valueDates,
}, this.db);
return matchSecurityExecutions(transactions, candidates, accountTuples);
}
/**
* The whole ingested life of one security business: every execution of every Poalim key it
* is known by, each carrying the cash movement (and so the charge) behind it.
*
* The candidate transactions are the security business's own — which is what the counterparty
* now is for a resolved trade — so this reads the same pairing the charge view shows, from
* the other end.
*/
async getSecurityBusinessHistory(businessId, ownerId) {
const identifiers = await this.securityBusinessesProvider.getIdentifiersByBusinessIdLoader.load(businessId);
const securityKeys = identifiers
.filter(identifier => identifier.identifier_type === 'POALIM_SECURITY_KEY')
.map(identifier => identifier.identifier_value);
if (securityKeys.length === 0) {
return { executions: [], transactionByExecutionId: new Map() };
}
const [executions, transactions] = await Promise.all([
getSecurityExecutionsByKeys.run({ securities: securityKeys }, this.db),
this.transactionsProvider.getTransactionsByFilters({
businessIDs: [businessId],
ownerIDs: [ownerId],
}),
]);
const accountTuples = await this.getAccountTuples([
...new Set(transactions.map(transaction => transaction.account_id).filter(Boolean)),
]);
const transactionByExecutionId = matchExecutionsToTransactions(transactions, executions, accountTuples);
return { executions, transactionByExecutionId };
}
/**
* Every ingested execution of every security business the tenant has, grouped by the business
* it belongs to. Each business gets an entry, so "nothing ingested" is distinguishable from
* "not a security".
*
* One query for the whole portfolio: `getSecurityExecutionsByKeys` already filters on
* `security = ANY(...)` and returns the key on every row, so the union of every business's
* Poalim keys can be asked for at once and split back up in memory.
*
* Unlike `getSecurityBusinessHistory` this never looks at transactions or accounts — those
* exist only to pair an execution with the cash movement behind it, which a position does not
* need, and they cost a transactions query plus an account lookup per security.
*/
async getExecutionsBySecurityBusiness() {
const securityBusinesses = await this.securityBusinessesProvider.getAllSecurityBusinesses();
const executionsByBusinessId = new Map(securityBusinesses.map(securityBusiness => [securityBusiness.id, []]));
if (securityBusinesses.length === 0) {
return executionsByBusinessId;
}
// One batched query behind the loader, not one per business.
const identifierLists = await this.securityBusinessesProvider.getIdentifiersByBusinessIdLoader.loadMany(securityBusinesses.map(securityBusiness => securityBusiness.id));
// The executions table is keyed by Poalim's security key, and one business can carry several
// of them — that is what the identifiers bridge is for — so invert into key -> business. The
// unique index on (owner_id, identifier_type, identifier_value) is what makes one key resolve
// to exactly one business, so a plain Map is enough.
const businessIdByKey = new Map();
for (const identifiers of identifierLists) {
// loadMany reports a rejected key as an Error rather than throwing; one bad business must
// not blank the whole list.
if (identifiers instanceof Error) {
continue;
}
for (const identifier of identifiers) {
if (identifier.identifier_type === 'POALIM_SECURITY_KEY') {
businessIdByKey.set(identifier.identifier_value, identifier.business_id);
}
}
}
if (businessIdByKey.size === 0) {
return executionsByBusinessId;
}
// ORDER BY trade_date, id is global to the result, so each key's slice stays chronological —
// which is what `calculateSecurityPosition` reads its currency off.
const executions = await getSecurityExecutionsByKeys.run({ securities: [...businessIdByKey.keys()] }, this.db);
for (const execution of executions) {
const businessId = businessIdByKey.get(execution.security);
if (!businessId) {
continue;
}
// An identifier can outlive the business it pointed at; skip rather than invent a bucket.
executionsByBusinessId.get(businessId)?.push(execution);
}
return executionsByBusinessId;
}
/**
* The securities a charge's transactions reference, keyed off the security key each
* description carries. Keys with no ingested row are still returned, with a null
* `details`, so a stale or missing scrape is visible instead of silently dropping data.
*/
async getChargeSecurities(chargeId) {
const transactions = await this.transactionsProvider.transactionsByChargeIDLoader.load(chargeId);
const transactionIdsByKey = new Map();
for (const transaction of transactions) {
for (const key of extractSecurityKeys(transaction.source_description)) {
const transactionIds = transactionIdsByKey.get(key);
if (transactionIds) {
transactionIds.push(transaction.id);
}
else {
transactionIdsByKey.set(key, [transaction.id]);
}
}
}
if (transactionIdsByKey.size === 0) {
return [];
}
const keys = [...transactionIdsByKey.keys()].sort();
const [details, executionsByKey] = await Promise.all([
this.securityByKeyLoader.loadMany(keys),
this.getMatchedExecutions(transactions, keys),
]);
return keys.map((key, index) => {
const detail = details[index];
return {
id: `${chargeId}-${key}`,
securityKey: key,
// loadMany surfaces a rejected key as an Error rather than throwing; treat it
// the same as "not ingested" so one bad key can't blank the whole section.
details: detail instanceof Error ? null : detail,
transactionIds: transactionIdsByKey.get(key) ?? [],
executions: executionsByKey.get(key) ?? [],
};
});
}
};
ForeignSecuritiesProvider = __decorate([
Injectable({
scope: Scope.Operation,
global: true,
}),
__metadata("design:paramtypes", [TenantAwareDBClient,
TransactionsProvider,
FinancialAccountsProvider,
FinancialBankAccountsProvider,
SecurityBusinessesProvider])
], ForeignSecuritiesProvider);
export { ForeignSecuritiesProvider };
//# sourceMappingURL=foreign-securities.provider.js.map