implementation of loan product creation

Adds validation so Transfer-to-Savings can only target a real savings account,
with a proper user-facing message instead of the generic validation error.
Fixes three duplicate journal-entry bugs uncovered while testing FD/RD
maturity: the dormant-accounts job re-posting already-closed accounts
(escheat/setSubStatusInactive/setSubStatusDormant), and the maturity-closure
flow itself re-deriving accounting for a withdrawal that the account-transfer
service had already posted.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

.asf.yaml

@@ -0,0 +1,17 @@
+github:
+  description: "Apache Fineract"
+  homepage: https://fineract.apache.org
+  labels:
+    - apache
+    - banking
+    - finance
+    - fintech
+    - group-lending
+    - group-savings
+    - java
+    - lending
+    - loans
+    - microfinance
+    - savings
+    - social-impact
+    - tech4good

.atr-rat-excludes-bin.txt

@@ -0,0 +1,27 @@
+# Licensed to the Apache Software Foundation (ASF) under one
+# or more contributor license agreements. See the NOTICE file
+# distributed with this work for additional information
+# regarding copyright ownership. The ASF licenses this file
+# to you under the Apache License, Version 2.0 (the
+# "License"); you may not use this file except in compliance
+# with the License. You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing,
+# software distributed under the License is distributed on an
+# "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+# KIND, either express or implied. See the License for the
+# specific language governing permissions and limitations
+# under the License.
+
+# See comment below license in .atr-rat-excludes-src.txt for an explanation of
+# what this is.
+
+# if you make changes here, sort this list before committing asciibetically
+# with en_US.UTF-8 lang/locale
+.rat-excludes
+README.md
+fineract-documentation.pdf
+
+# vim:ft=conf

.atr-rat-excludes-src.txt

@@ -0,0 +1,54 @@
+# Licensed to the Apache Software Foundation (ASF) under one
+# or more contributor license agreements. See the NOTICE file
+# distributed with this work for additional information
+# regarding copyright ownership. The ASF licenses this file
+# to you under the Apache License, Version 2.0 (the
+# "License"); you may not use this file except in compliance
+# with the License. You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing,
+# software distributed under the License is distributed on an
+# "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+# KIND, either express or implied. See the License for the
+# specific language governing permissions and limitations
+# under the License.
+
+# Path patterns to exclude from RAT checks run by ATR.
+#
+# RAT = Release Audit Tool (https://creadur.apache.org/rat/)
+# ATR = ASF Trusted Releases (https://release-test.apache.org , https://github.com/apache/tooling-trusted-releases/)
+#
+# This duplicates exclusions in build.gradle.
+# This is probably only necessary until both RAT and org.nosphere.apache.rat plugin are using 0.17.
+# See https://github.com/eskatos/creadur-rat-gradle/issues/28 .
+# Once both are on 0.17, we should be able to move the RAT excludes used during
+# the build from build.gradle into a .rat-excludes file shared by both our
+# build and ATR.
+# Right now ATR does something custom, see
+# https://github.com/apache/tooling-trusted-releases/issues/312 .
+# If we get tired of waiting for the RAT gradle plugin or the ATR to upgrade to
+# 0.17, we could write our own exclusion lists generator.
+
+# if you make changes here, sort this list before committing asciibetically
+# with en_US.UTF-8 lang/locale
+**/META-INF/fineract-test.config
+**/legacy-docs/
+*.adoc
+*.avsc
+*.feature
+*.html
+*.md
+*.mustache
+*.puml
+*.txt
+.openapi-generator-ignore
+/.asf.yaml
+/.rat-excludes
+/config/fineractdev-eclipse-preferences.epf
+/fineract-provider/src/test/resources/results/xbrl.xml
+/gradle/wrapper/gradle-wrapper.properties
+org.springframework.boot.autoconfigure.AutoConfiguration.imports
+
+# vim:ft=conf

.claude/hooks/post-tool-call.py

@@ -0,0 +1,93 @@
+import hashlib
+import json
+import os
+import sys
+import tempfile
+from datetime import datetime, timezone
+from http.client import HTTPConnection, HTTPException
+from pathlib import Path
+import traceback
+from contextlib import closing
+from typing import Optional
+
+WEBSERVER_HOST = "localhost"
+WEBSERVER_ENDPOINT = "/api/provenance/call"
+PORT_FILE_SUFFIX = "-provenance-port.txt"
+
+class ProvenanceHookError(RuntimeError):
+    pass
+
+def http_request(method, host, port, location, *, body: Optional[bytes] = None, headers={}, timeout=None) -> bytes:
+    with closing(HTTPConnection(host, port, timeout=timeout)) as connection:
+        connection.request(method, location, body=body, headers=headers)
+
+def get_server_port():
+    claude_root = os.getenv("CLAUDE_PROJECT_DIR")
+    path_hash = hashlib.md5(claude_root.encode('utf-8')).hexdigest()
+    port_file = Path(tempfile.gettempdir()) / (path_hash + PORT_FILE_SUFFIX)
+
+    return int(port_file.read_text("utf-8").strip())
+
+
+def send_diff_to_webserver(file_path, timestamp_ms):
+    try:
+        port = get_server_port()
+    except FileNotFoundError as e:
+        raise ProvenanceHookError(
+            f"Could not determine API port: {e.filename} does not exist") from e
+    except Exception as e:
+        raise ProvenanceHookError("Could not determine API port") from e
+
+    url = f"http://{WEBSERVER_HOST}:{port}{WEBSERVER_ENDPOINT}"
+
+    try:
+        payload = {"file_path": file_path, "timestamp": timestamp_ms}
+        return http_request(
+            "POST",
+            WEBSERVER_HOST,
+            port=port,
+            location=WEBSERVER_ENDPOINT,
+            body=json.dumps(payload, ensure_ascii=False).encode("utf-8"),
+            headers={'Content-Type': 'application/json'},
+            timeout=0.5
+        )
+
+    except (HTTPException, OSError, ConnectionError) as e:
+        raise ProvenanceHookError(
+            f"Network error while sending diff to {url}") from e
+    except Exception as e:
+        raise ProvenanceHookError(
+            f"Unknown error while sending diff to {url}") from e
+
+
+def extract_file_path(tool_name, tool_input):
+    if tool_name in ["Write", "Edit", "MultiEdit"]:
+        return tool_input.get('file_path', 'unknown')
+    if tool_name == "NotebookEdit":
+        return tool_input.get('notebook_path', 'unknown')
+    return 'unknown'
+
+
+def excepthook(type, value, traceback_):
+    traceback.print_exception(type, value, traceback_, file=sys.stderr)
+    sys.exit(1)
+
+
+def main():
+    data = json.load(sys.stdin)
+    tool_name = data.get('tool_name', 'unknown')
+
+    modification_tools = [
+        "Write", "Edit", "MultiEdit", "NotebookEdit"
+    ]
+
+    if tool_name in modification_tools:
+        tool_input = data.get('tool_input', {})
+        file_path = extract_file_path(tool_name, tool_input)
+        if file_path:
+            timestamp_ms = int(datetime.now(timezone.utc).timestamp() * 1000)
+            send_diff_to_webserver(file_path, timestamp_ms)
+
+if __name__ == "__main__":
+    sys.excepthook = excepthook
+    sys.exit(main())

.claude/scheduled_tasks.lock

@@ -0,0 +1 @@
+{"sessionId":"b5222d29-c337-4c5d-afde-70cde98cdf46","pid":426448,"acquiredAt":1780052566378}

.claude/settings.json

@@ -0,0 +1,30 @@
+{
+  "permissions": {
+    "allow": [
+      "Bash(git remote add self-hosted https://git.zeptic.in/CBSNexora/JAVA-Backend-CBS-MAIN.git)",
+      "Bash(git push self-hosted develop:main)",
+      "WebFetch(domain:rbi.org.in)",
+      "Bash(xargs grep -l \"@Scheduled\")",
+      "Bash(./gradlew compileJava -x spotlessCheck)",
+      "Bash(./gradlew bootJar -x test -x spotlessCheck)",
+      "Bash(./gradlew :fineract-provider:compileJava -x spotlessCheck)",
+      "Bash(./gradlew :fineract-core:compileJava :fineract-provider:compileJava)",
+      "Bash(curl -sk -o /dev/null -w \"%{http_code}\" https://localhost:8443/fineract-provider/api/v1/rbi-feeds)",
+      "Bash(./gradlew bootRun -x test)",
+      "Bash(ls *.gradle)",
+      "Bash(curl -sk -o /dev/null -w \"%{http_code}\" https://localhost:8443/fineract-provider/api)",
+      "Bash(ls c:/Users/adity/Music/CBS/fineract/fineract-provider/src/main/resources/db/changelog/tenant/parts/0232*)",
+      "Bash(taskkill //F //PID 36040)",
+      "Bash(findstr :8443)",
+      "Bash(findstr LISTENING)",
+      "Bash(taskkill //F //PID 14668)",
+      "Bash(./gradlew --stop)"
+    ],
+    "additionalDirectories": [
+      "C:\\Users\\adity\\Music\\CBS\\UI\\web-app\\src\\app\\rbi-circulars",
+      "C:\\Users\\adity\\Music\\CBS\\UI\\web-app\\src\\app\\clients\\create-client",
+      "C:\\Users\\adity\\Music\\CBS\\UI\\web-app\\src\\app\\clients\\client-stepper\\client-general-step",
+      "C:\\Users\\adity\\Music\\CBS\\UI\\web-app\\src\\app"
+    ]
+  }
+}

.claude/settings.local.json

@@ -0,0 +1,101 @@
+{
+  "permissions": {
+    "allow": [
+      "Bash(taskkill //PID 24168 //F)",
+      "Bash(PGPASSWORD=postgres psql -h localhost -U postgres -d fineract_default -c \"SELECT id, display_name, date_of_birth FROM m_client ORDER BY id DESC LIMIT 5;\")",
+      "Bash(taskkill //PID 10112 //F)",
+      "Bash(taskkill //PID 39420 //F)",
+      "Bash(curl -sk -u \"mifos:password\" -H \"fineract-platform-tenantid: default\" \"https://localhost:8443/fineract-provider/api/v1/rbi-feeds\")",
+      "Bash(sort -t: -k2 -n)",
+      "Bash(curl -sk -u \"mifos:password\" -H \"fineract-platform-tenantid: default\" \"https://localhost:8443/fineract-provider/api/v1/rbi-feeds/144\")",
+      "Bash(curl -sk -u \"mifos:password\" -H \"fineract-platform-tenantid: default\" \"https://localhost:8443/fineract-provider/api/v1/openproject/work-packages?pageSize=10&offset=1\")",
+      "Bash(curl -sk -u \"mifos:password\" -H \"fineract-platform-tenantid: default\" -H \"Content-Type: application/json\" -X POST \"https://localhost:8443/fineract-provider/api/v1/rbi-feeds/sync-openproject\" -d '{}')",
+      "Bash(taskkill //PID 36832 //F)",
+      "Bash(mvn clean:*)",
+      "Bash(where mvn.cmd)",
+      "Bash(where mvn:*)",
+      "Read(//c/Program Files/**)",
+      "Read(//c/Users/adity/**)",
+      "Bash(echo \"$MAVEN_HOME\")",
+      "Bash(xargs basename:*)",
+      "Bash(./gradlew :fineract-tax:compileJava)",
+      "Bash(grep -n \"INSERT INTO \\\\`m_role\\\\`\\\\|INSERT INTO m_role\\\\|INSERT INTO \\\\`m_permission\\\\`\\\\|INSERT INTO m_permission\" /c/Users/adity/Music/CBS/fineract/fineract-provider/src/main/resources/sql/migrations/sample_data/load_sample_data.sql)",
+      "Bash(npm start:*)",
+      "Bash(grep -oP \"^\\\\\\\\\\(''''\\([^'''']+\\)''''\" \"c:\\\\Users\\\\adity\\\\Music\\\\CBS\\\\fineract\\\\fineract-db\\\\old-schema-files\\\\0003-mifosx-permissions-and-authorisation-utf8.sql\")",
+      "Bash(tasklist)",
+      "Bash(wmic process:*)",
+      "Bash(powershell -Command \"Get-CimInstance Win32_Process -Filter \"\"Name=''java.exe''\"\" | Select-Object ProcessId, @{N=''Cmd'';E={$_.CommandLine.Substring\\(0, [Math]::Min\\(200, $_.CommandLine.Length\\)\\)}} | Format-Table -AutoSize\")",
+      "Bash(psql -U postgres -d fineract_default -c \"UPDATE databasechangelog SET md5sum = NULL WHERE id = ''0231-1'' AND filename = ''db/changelog/tenant/parts/0231_add_menu_permissions.xml'';\" -c \"UPDATE m_permission SET grouping = ''menu'' WHERE code LIKE ''MENU_%'' AND entity_name = ''MENU'';\")",
+      "Bash(PGPASSWORD=root psql -U postgres -d fineract_default -c \"UPDATE databasechangelog SET md5sum = NULL WHERE id = ''0231-1'' AND filename = ''db/changelog/tenant/parts/0231_add_menu_permissions.xml'';\" -c \"UPDATE m_permission SET grouping = ''menu'' WHERE code LIKE ''MENU_%'' AND entity_name = ''MENU'';\")",
+      "Bash(PGPASSWORD=root psql -U postgres -d fineract_default -c \"UPDATE databasechangelog SET md5sum = NULL WHERE id = ''0231-1'' AND filename = ''db/changelog/tenant/parts/0231_add_menu_permissions.xml'';\" -c \"UPDATE m_permission SET grouping = ''heading_menu'' WHERE code LIKE ''MENU_%'' AND entity_name = ''MENU'';\")",
+      "Bash(grep -l \"pan_full_name\\\\|pan_category\\\\|pan_status\\\\|pan_aadhaar\" \"c:\\\\Users\\\\adity\\\\Music\\\\CBS\\\\fineract\\\\fineract-provider\\\\src\\\\main\\\\resources\\\\db\\\\changelog\\\\tenant\\\\parts\"/*.xml)",
+      "Bash(grep -l \"m_client_kyc\" \"c:\\\\Users\\\\adity\\\\Music\\\\CBS\\\\fineract\\\\fineract-provider\\\\src\\\\main\\\\resources\\\\db\\\\changelog\\\\tenant\\\\parts\"/*.xml)",
+      "Bash(./gradlew devRun -x test -x spotlessCheck)",
+      "Bash(taskkill //F //FI \"IMAGENAME eq java.exe\")",
+      "Bash(./gradlew bootRun)",
+      "Bash(curl -sk -X POST \"https://localhost:8443/fineract-provider/api/v1/authentication?username=mifos&password=password\" -H 'Fineract-Platform-TenantId: default' -H 'Content-Type: application/json')",
+      "Bash(curl -sk \"https://localhost:8443/fineract-provider/api/v1/clients?limit=5\" -H \"Fineract-Platform-TenantId: default\" -u \"mifos:password\")",
+      "Bash(curl -sk -X POST \"https://localhost:8443/fineract-provider/api/v1/authentication\" -H \"Fineract-Platform-TenantId: default\" -H \"Content-Type: application/json\" -d '{\"\"username\"\":\"\"mifos\"\",\"\"password\"\":\"\"password\"\"}')",
+      "Bash(curl -sk \"https://localhost:8443/fineract-provider/api/v1/clients?limit=5\" -H \"Fineract-Platform-TenantId: default\" -H \"Authorization: Basic bWlmb3M6cGFzc3dvcmQ=\")",
+      "Bash(./gradlew :fineract-provider:devRun --console=plain)",
+      "Bash(curl -k -o /tmp/test-helper.jar -w \"HTTP %{http_code}  size=%{size_download} bytes\\\\n\" https://localhost:8443/fineract-provider/api/v1/dsc/helper.jar)",
+      "Bash(powershell -Command \"Get-Process java -ErrorAction SilentlyContinue | Select-Object Id, StartTime | Format-List\")",
+      "Bash(./gradlew :fineract-provider:compileJava --console=plain)",
+      "Bash(./gradlew :fineract-provider:compileJava :fineract-security:compileJava -q)",
+      "Bash(./gradlew :fineract-provider:compileJava -q)",
+      "PowerShell(Get-NetTCPConnection -LocalPort 8443 -State Listen -ErrorAction SilentlyContinue | Select-Object LocalPort, OwningProcess, @{Name='ProcessName';Expression={\\(Get-Process -Id $_.OwningProcess -ErrorAction SilentlyContinue\\).ProcessName}}, @{Name='StartTime';Expression={\\(Get-Process -Id $_.OwningProcess -ErrorAction SilentlyContinue\\).StartTime}})",
+      "PowerShell(Get-NetTCPConnection -LocalPort 8443 -ErrorAction SilentlyContinue | Format-Table LocalPort, State, OwningProcess, @{Name='ProcessName';Expression={\\(Get-Process -Id $_.OwningProcess -ErrorAction SilentlyContinue\\).ProcessName}} -AutoSize; netstat -ano | Select-String \":8443\")",
+      "PowerShell(Get-Process -Id 9340 -ErrorAction SilentlyContinue | Select-Object Id, ProcessName, StartTime, @{Name='MemMB';Expression={[math]::Round\\($_.WorkingSet64/1MB,0\\)}}, Path | Format-List)",
+      "Bash(git -c core.editor=true rebase --continue)",
+      "Bash(git rebase *)",
+      "Bash(rm -rf .git/rebase-merge; git status -sb | head -3)",
+      "Bash(git -c commit.gpgsign=false commit -m ' *)",
+      "Bash(git pull *)",
+      "Bash(./gradlew :fineract-security:compileJava :fineract-provider:compileJava -q)",
+      "Bash(git ls-remote *)",
+      "Bash(PGPASSWORD=root psql -h localhost -p 5432 -U postgres -d fineract_default -c \"SELECT cv.id, cv.code_value FROM m_code_value cv JOIN m_code c ON cv.code_id=c.id WHERE c.code_name='Constitution' ORDER BY cv.id;\")",
+      "Bash(curl -s -w '\\\\n--- HTTP %{http_code} | content-type: %{content_type} | %{size_download} bytes | %{time_total}s ---\\\\n' -X POST https://ekyc.lincpay.in/EKYC/ekyc/validate-pan -H 'Content-Type: application/json' -d '{\"apikey\":\"api_7c9e3a1f6d4b2a8c5e1f3d7b9a2c6e4f\",\"panNumber\":\"AQRPV8345E\",\"name\":\"Aditya Vyas\",\"dob\":\"19/12/1988\",\"secrete\":\"secret_4e8a2d7c1f9b3a6e5d2c8f1a7b4e9c3d\"}')",
+      "Bash(curl -s -w '\\\\n--- HTTP %{http_code} | content-type: %{content_type} | %{size_download} bytes | %{time_total}s ---\\\\n' -X POST https://ekyc.lincpay.in/EKYC/ekyc/validate-pan -H 'Content-Type: application/json' -d '{\"apikey\":\"api_7c9e3a1f6d4b2a8c5e1f3d7b9a2c6e4f\",\"panNumber\":\"AAMCG5406B\",\"name\":\"GIZMOGLADE PRIVATE LIMITED\",\"dob\":\"01/12/2025\",\"secrete\":\"secret_4e8a2d7c1f9b3a6e5d2c8f1a7b4e9c3d\"}')",
+      "Bash(curl -s -w '\\\\n--- HTTP %{http_code} | content-type: %{content_type} | %{size_download} bytes ---\\\\n' -X POST https://ekyc.lincpay.in/EKYC/ekyc/validate-pan -H 'Content-Type: application/json' -d '{\"apikey\":\"api_7c9e3a1f6d4b2a8c5e1f3d7b9a2c6e4f\",\"panNumber\":\"AAMCG5406B\",\"name\":\"\",\"dob\":\"\",\"secrete\":\"secret_4e8a2d7c1f9b3a6e5d2c8f1a7b4e9c3d\"}')",
+      "Bash(curl -s -w '\\\\n--- HTTP %{http_code} | content-type: %{content_type} | %{size_download} bytes ---\\\\n' -X POST https://ekyc.lincpay.in/EKYC/ekyc/validate-gstn -H 'Content-Type: application/json' -d '{\"apikey\":\"api_7c9e3a1f6d4b2a8c5e1f3d7b9a2c6e4f\",\"gstNumber\":\"21AAMCG5406BIZ6\",\"secrete\":\"secret_4e8a2d7c1f9b3a6e5d2c8f1a7b4e9c3d\"}')",
+      "Bash(curl -s -w '\\\\n--- HTTP %{http_code} | content-type: %{content_type} | %{size_download} bytes | %{time_total}s ---\\\\n' -X POST https://ekyc.lincpay.in/EKYC/ekyc/validate-gstn -H 'Content-Type: application/json' -d '{\"apikey\":\"api_7c9e3a1f6d4b2a8c5e1f3d7b9a2c6e4f\",\"gstNumber\":\"23AADCL9984A1ZH\",\"secrete\":\"secret_4e8a2d7c1f9b3a6e5d2c8f1a7b4e9c3d\"}')",
+      "PowerShell(Get-Process | Where-Object { $_.ProcessName -match '^\\(java|gradle\\)' } | Select-Object Id, ProcessName, StartTime, @{n='CPU\\(s\\)';e={[math]::Round\\($_.CPU,1\\)}}, @{n='WS\\(MB\\)';e={[math]::Round\\($_.WorkingSet64/1MB,0\\)}} | Format-Table -AutoSize)",
+      "PowerShell(Get-NetTCPConnection -LocalPort 8443 -ErrorAction SilentlyContinue)",
+      "PowerShell(Stop-Process -Id 3468,3864,39964 -Force)",
+      "PowerShell(Get-Process -Id 3468,3864,39964 -ErrorAction SilentlyContinue)",
+      "PowerShell(foreach \\($id in 3468,3864,39964\\) { try { Stop-Process -Id $id -Force -ErrorAction Stop; \"killed $id\" } catch { \"skip $id - $\\($_.Exception.Message\\)\" } })",
+      "PowerShell(Get-Process java -ErrorAction SilentlyContinue)",
+      "PowerShell(if \\(-not \\(Test-Path .\\\\fineract-provider\\\\logs\\)\\) { New-Item -ItemType Directory -Force .\\\\fineract-provider\\\\logs | Out-Null }; Remove-Item .\\\\fineract-provider\\\\logs\\\\devrun.out -ErrorAction SilentlyContinue; \"ready\")",
+      "PowerShell($j = Get-Process java -ErrorAction SilentlyContinue | Select-Object Id, @{n='CPU\\(s\\)';e={[math]::Round\\($_.CPU,1\\)}}, @{n='WS\\(MB\\)';e={[math]::Round\\($_.WorkingSet64/1MB,0\\)}}, StartTime; $j | Format-Table -AutoSize; \"---\"; Get-NetTCPConnection -LocalPort 8443 -State Listen -ErrorAction SilentlyContinue | Select-Object LocalAddress, OwningProcess)",
+      "PowerShell(if \\(Test-Path .\\\\fineract-provider\\\\logs\\\\devrun.out\\) { $f = Get-Item .\\\\fineract-provider\\\\logs\\\\devrun.out; \"size=$\\($f.Length\\) bytes  mtime=$\\($f.LastWriteTime\\)\" } else { \"devrun.out missing\" })",
+      "PowerShell(netstat -ano)",
+      "PowerShell(Get-Process java -ErrorAction SilentlyContinue | Stop-Process -Force; Start-Sleep -Milliseconds 800; $left = Get-Process java -ErrorAction SilentlyContinue; if \\($left\\) { $left | Select-Object Id, ProcessName } else { \"no java processes\" }; Get-NetTCPConnection -LocalPort 8443 -State Listen -ErrorAction SilentlyContinue | Measure-Object | ForEach-Object { \"8443 listeners: $\\($_.Count\\)\" })",
+      "Bash(curl -sk -o /tmp/resp.txt -w \"STATUS=%{http_code}\\\\nCONTENT_TYPE=%{content_type}\\\\n\" -X POST 'https://localhost:8443/fineract-provider/api/v1/authentication' -H 'Content-Type: application/json' -H 'Fineract-Platform-TenantId: default' -d '{\"username\":\"mifos\",\"password\":\"password\"}')",
+      "Bash(curl -sk -o /tmp/r1.txt -w \"STATUS=%{http_code}\\\\n\" -X POST 'https://localhost:8443/fineract-provider/api/v1/authentication' -H 'Content-Type: application/json' -d '{\"username\":\"mifos\",\"password\":\"password\"}')",
+      "Bash(curl -s -o /tmp/r2.txt -w \"STATUS=%{http_code}\\\\n\" -X POST 'http://localhost:4200/fineract-provider/api/v1/authentication' -H 'Content-Type: application/json' -d '{\"username\":\"mifos\",\"password\":\"password\"}')",
+      "Bash(curl -s -o /tmp/r3.txt -w \"STATUS=%{http_code}\\\\n\" -X POST 'http://localhost:4200/fineract-provider/api/v1/authentication' -H 'Content-Type: application/json' -H 'Origin: http://localhost:4200' -H 'Fineract-Platform-TenantId: default' -d '{\"username\":\"mifos\",\"password\":\"password\"}')",
+      "Bash(curl -s -o /tmp/r4.txt -w \"STATUS=%{http_code}\\\\n\" -X OPTIONS 'http://localhost:4200/fineract-provider/api/v1/authentication' -H 'Origin: http://localhost:4200' -H 'Access-Control-Request-Method: POST' -H 'Access-Control-Request-Headers: content-type,fineract-platform-tenantid' -i)",
+      "Bash(git cherry-pick *)",
+      "PowerShell($parent = 'C:\\\\Users\\\\adity\\\\Music\\\\CBS'; if \\(Test-Path $parent\\) { \"parent exists: $parent\"; Get-ChildItem $parent -Directory | Select-Object -ExpandProperty Name } else { \"MISSING parent: $parent\" }; \"---\"; $target = Join-Path $parent 'LincpayEKYC'; if \\(Test-Path $target\\) { \"TARGET ALREADY EXISTS: $target\" } else { \"target free: $target\" })",
+      "Bash(git clone *)"
+    ],
+    "additionalDirectories": [
+      "c:\\Users\\adity\\Music\\CBS\\cfcfrms-bank-api",
+      "C:\\Users\\adity\\Music\\CBS\\UI\\web-app\\src\\assets\\translations",
+      "C:\\Users\\adity\\Music\\CBS\\fineract\\.git\\rebase-merge"
+    ]
+  },
+  "hooks": {
+    "PostToolUse": [
+      {
+        "matcher": "Write|Edit|MultiEdit|NotebookEdit",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "python3 \"$CLAUDE_PROJECT_DIR/.claude/hooks/post-tool-call.py\""
+          }
+        ]
+      }
+    ]
+  }
+}

.dockerignore

@@ -1,22 +1,7 @@
-# Licensed to the Apache Software Foundation (ASF) under one
-# or more contributor license agreements. See the NOTICE file
-# distributed with this work for additional information
-# regarding copyright ownership. The ASF licenses this file
-# to you under the Apache License, Version 2.0 (the
-# "License"); you may not use this file except in compliance
-# with the License. You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing,
-# software distributed under the License is distributed on an
-# "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
-# KIND, either express or implied. See the License for the
-# specific language governing permissions and limitations
-# under the License.
-#
-build/*
-.gradle/*
+# NB No ASF ASL header here due to FINERACT-1195
+**/build/*
+**/.gradle/*
+**/bin/*
 
 *.jar
 *.war

.github/PULL_REQUEST_TEMPLATE.MD

@@ -1,19 +0,0 @@
-## Description
-Describe the changes made and why they were made. Ignore if these details are present on the associated Jira ticket
-
-## Checklist
-Please make sure these boxes are checked before submitting your pull request - thanks!
-
-- [ ] Commit message starts with the issue number from https://issues.apache.org/jira/projects/FINERACT/. Ex: FINERACT-646 Pockets API.
-
-- [ ] Coding conventions at https://cwiki.apache.org/confluence/display/FINERACT/Coding+Conventions have been followed.
-
-- [ ] API documentation at fineract-provider/src/main/resources/static/api-docs/apiLive.htm has been updated with details of any API changes.
-
-- [ ] Integration tests have been created/updated for verifying the changes made.
-
-- [ ] All Integrations tests are passing with the new commits.
-
-- [ ] Submission is not a "code dump".  (Large changes can be made "in repository" via a branch.  Ask on the list.)
-
-Our guidelines for code reviews is at https://cwiki.apache.org/confluence/display/FINERACT/Code+Review+Guide

.github/dependabot.yml

@@ -0,0 +1,13 @@
+# https://issues.apache.org/jira/browse/FINERACT-1453
+# https://docs.github.com/en/code-security/supply-chain-security/keeping-your-dependencies-updated-automatically/configuration-options-for-dependency-updates
+
+version: 2
+updates:
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "daily"
+  - package-ecosystem: "docker"
+    directory: "/"
+    schedule:
+      interval: "daily"

.github/pull_request_template.md

@@ -0,0 +1,16 @@
+## Description
+
+Describe the changes made and why they were made. (Ignore if these details are present on the associated Apache Fineract JIRA ticket.)
+
+## Checklist
+
+Please make sure these boxes are checked before submitting your pull request - thanks!
+
+- [ ] Write the commit message as per [our guidelines](https://github.com/apache/fineract/blob/develop/CONTRIBUTING.md#pull-requests)
+- [ ] Acknowledge that we will not review PRs that are not passing the build _("green")_ - it is your responsibility to get a proposed PR to pass the build, not primarily the project's maintainers.
+- [ ] Create/update [unit or integration tests](https://fineract.apache.org/docs/current/#_testing) for verifying the changes made.
+- [ ] Follow our [coding conventions](https://cwiki.apache.org/confluence/display/FINERACT/Coding+Conventions).
+- [ ] Add required Swagger annotation and update API documentation at fineract-provider/src/main/resources/static/legacy-docs/apiLive.htm with details of any API changes
+- [ ] [This PR must not be a "code dump"](https://cwiki.apache.org/confluence/display/FINERACT/Pull+Request+Size+Limit). Large changes can be made in a branch, with assistance. Ask for help on the [developer mailing list](https://fineract.apache.org/#contribute).
+
+Your assigned reviewer(s) will follow our [guidelines for code reviews](https://cwiki.apache.org/confluence/display/FINERACT/Code+Review+Guide).

.github/workflows/build-cucumber.yml

@@ -0,0 +1,114 @@
+name: Fineract Build & Cucumber tests (without E2E tests)
+
+on: [push, pull_request]
+
+permissions:
+  contents: read
+
+jobs:
+  verify:
+    runs-on: ubuntu-24.04
+    timeout-minutes: 60
+
+    strategy:
+      fail-fast: false
+      matrix:
+        include:
+          - task: build-core
+            job_type: main
+          - task: cucumber
+            job_type: main
+          - task: build-progressive-loan
+            job_type: progressive-loan
+
+    env:
+      TZ: Asia/Kolkata
+      DEVELOCITY_ACCESS_KEY: ${{ secrets.DEVELOCITY_ACCESS_KEY }}
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5
+        with:
+          fetch-depth: 0
+          fetch-tags: true
+
+      - name: Set up JDK 21
+        uses: actions/setup-java@f2beeb24e141e01a676f977032f5a29d81c9e27e # v5
+        with:
+          java-version: '21'
+          distribution: 'zulu'
+
+      - name: Cache Gradle dependencies
+        uses: actions/cache@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v4
+        with:
+          path: |
+            ~/.gradle/caches
+            ~/.gradle/wrapper
+          key: gradle-${{ runner.os }}-${{ hashFiles('**/*.gradle*', '**/gradle-wrapper.properties') }}
+
+      - name: Setup Gradle and Validate Wrapper
+        uses: gradle/actions/setup-gradle@f29f5a9d7b09a7c6b29859002d29d24e1674c884 # v5.0.1
+        with:
+          validate-wrappers: true
+
+      - name: Run Gradle Task
+        if: matrix.job_type == 'main'
+        run: |
+          set -e  # Fail the script if any command fails
+
+          case "${{ matrix.task }}" in
+            build-core)
+              ./gradlew --no-daemon build -x test -x cucumber -x doc
+              ;;
+            cucumber)
+              ./gradlew --no-daemon cucumber -x :fineract-e2e-tests-runner:cucumber -x checkstyleJmh -x checkstyleMain -x checkstyleTest -x spotlessCheck -x spotlessApply -x spotbugsMain -x spotbugsTest -x javadoc -x javadocJar -x modernizer
+              ;;
+          esac
+
+      - name: Build and Test Progressive Loan
+        if: matrix.job_type == 'progressive-loan'
+        run: |
+          # Build the JAR
+          ./gradlew --no-daemon --console=plain :fineract-progressive-loan-embeddable-schedule-generator:shadowJar
+
+          # Store the JAR filename in an environment variable
+          EMBEDDABLE_JAR_FILE=$(ls fineract-progressive-loan-embeddable-schedule-generator/build/libs/*-all.jar | head -n 1)
+          echo "EMBEDDABLE_JAR_FILE=$EMBEDDABLE_JAR_FILE" >> $GITHUB_ENV
+          echo "JAR file: $EMBEDDABLE_JAR_FILE"
+
+          # Run unit tests
+          ./gradlew --no-daemon --console=plain :fineract-progressive-loan-embeddable-schedule-generator:test
+
+          # Build and run sample application
+          mkdir -p sample-app
+          javac -cp "$EMBEDDABLE_JAR_FILE" -d sample-app fineract-progressive-loan-embeddable-schedule-generator/misc/Main.java
+          java -cp "$EMBEDDABLE_JAR_FILE:sample-app" Main
+          java -cp "$EMBEDDABLE_JAR_FILE:sample-app" Main 25
+
+      - name: Archive test results
+        if: always()
+        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v4
+        with:
+          name: test-results-${{ matrix.task }}
+          path: |
+            **/build/reports/
+            **/fineract-progressive-loan-embeddable-schedule-generator/build/reports/
+          if-no-files-found: ignore
+          retention-days: 5
+
+      - name: Archive Progressive Loan JAR
+        if: matrix.job_type == 'progressive-loan' && always()
+        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v4
+        with:
+          name: progressive-loan-jar
+          path: ${{ env.EMBEDDABLE_JAR_FILE }}
+          retention-days: 5
+          if-no-files-found: ignore
+
+      - name: Archive server logs
+        if: always()
+        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v4
+        with:
+          name: server-logs-${{ matrix.task }}
+          path: '**/build/cargo/'
+          retention-days: 5

.github/workflows/build-docker.yml

@@ -0,0 +1,55 @@
+name: Fineract Docker Builds
+
+on: [push, pull_request]
+
+permissions:
+  contents: read
+
+jobs:
+  build:
+    runs-on: ubuntu-24.04
+    timeout-minutes: 60
+    strategy:
+      fail-fast: false
+      matrix:
+        db_type: [mariadb, postgresql]
+        include:
+          - db_type: mariadb
+            compose_file: docker-compose.yml
+            check_worker_health: true
+          - db_type: postgresql
+            compose_file: docker-compose-postgresql.yml
+            check_worker_health: false
+
+    env:
+      DEVELOCITY_ACCESS_KEY: ${{ secrets.DEVELOCITY_ACCESS_KEY }}
+      IMAGE_NAME: fineract
+
+    steps:
+      - uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5
+        with:
+          fetch-depth: 0
+
+      - name: Set up JDK 21
+        uses: actions/setup-java@f2beeb24e141e01a676f977032f5a29d81c9e27e # v5
+        with:
+          java-version: '21'
+          distribution: 'zulu'
+
+      - name: Setup Gradle
+        uses: gradle/actions/setup-gradle@f29f5a9d7b09a7c6b29859002d29d24e1674c884 # v5.0.1
+
+      - name: Build the image
+        run: ./gradlew --no-daemon --console=plain :fineract-provider:jibDockerBuild -Djib.to.image=$IMAGE_NAME -x test -x cucumber
+
+      - name: Start the ${{ matrix.db_type }} stack
+        run: docker compose -f ${{ matrix.compose_file }} up -d
+
+      - name: Check the stack
+        run: docker ps
+
+      - name: Check health Manager
+        run: curl -f -k --retry 60 --retry-all-errors --connect-timeout 30 --retry-delay 30 https://localhost:8443/fineract-provider/actuator/health
+
+      - name: Check info Manager
+        run: (( $(curl -f -k --retry 5 --retry-all-errors --connect-timeout 30 --retry-delay 30 https://localhost:8443/fineract-provider/actuator/info | wc --chars) > 100 ))

.github/workflows/build-documentation.yml

@@ -0,0 +1,35 @@
+name: Fineract Documentation build
+on: [push, pull_request]
+permissions:
+  contents: read
+jobs:
+  build:
+    runs-on: ubuntu-24.04
+    timeout-minutes: 60
+    env:
+      DEVELOCITY_ACCESS_KEY: ${{ secrets.DEVELOCITY_ACCESS_KEY }}
+    steps:
+      - name: Checkout
+        uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5
+        with:
+          fetch-depth: 0
+      - name: Set up JDK 21
+        uses: actions/setup-java@f2beeb24e141e01a676f977032f5a29d81c9e27e # v5
+        with:
+          java-version: '21'
+          distribution: 'zulu'
+      - name: Setup Gradle
+        uses: gradle/actions/setup-gradle@f29f5a9d7b09a7c6b29859002d29d24e1674c884 # v5.0.1
+      - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
+        with:
+          node-version: 22
+      - name: Congfigure vega-cli
+        run: npm i -g vega-cli --unsafe
+      - name: Validate Gradle wrapper
+        uses: gradle/actions/wrapper-validation@v5.0.1
+      - name: Install additional software
+        run: |
+            sudo apt-get update
+            sudo apt-get install ghostscript graphviz -y
+      - name: Documentation build
+        run: ./gradlew --no-daemon --console=plain doc

.github/workflows/build-e2e-tests.yml

@@ -0,0 +1,183 @@
+name: Fineract E2E Tests
+
+on: [push, pull_request]
+
+permissions:
+  contents: read
+
+jobs:
+  test:
+    name: E2E Tests (Shard ${{ matrix.shard_index }} of ${{ matrix.total_shards }})
+    runs-on: ubuntu-24.04
+    timeout-minutes: 60
+
+    strategy:
+      fail-fast: false
+      matrix:
+        # Define the number of shards (1-based indexing)
+        shard_index: [1, 2, 3, 4, 5, 6, 7, 8, 9, 10]
+        total_shards: [10]
+
+    env:
+      DEVELOCITY_ACCESS_KEY: ${{ secrets.DEVELOCITY_ACCESS_KEY }}
+      IMAGE_NAME: fineract
+      BASE_URL: https://localhost:8443
+      TEST_USERNAME: mifos
+      TEST_PASSWORD: password
+      TEST_STRONG_PASSWORD: A1b2c3d4e5f$
+      TEST_TENANT_ID: default
+      INITIALIZATION_ENABLED: true
+      EVENT_VERIFICATION_ENABLED: true
+      ACTIVEMQ_BROKER_URL: tcp://localhost:61616
+      ACTIVEMQ_TOPIC_NAME: events
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5
+        with:
+          fetch-depth: 0
+
+      - name: Set up JDK 21
+        uses: actions/setup-java@f2beeb24e141e01a676f977032f5a29d81c9e27e # v5
+        with:
+          java-version: '21'
+          distribution: 'zulu'
+
+      - name: Setup Gradle
+        uses: gradle/actions/setup-gradle@f29f5a9d7b09a7c6b29859002d29d24e1674c884 # v5.0.1
+
+      - name: Make scripts executable
+        run: chmod +x scripts/split-features.sh
+
+      - name: Split feature files into shards
+        id: split-features
+        run: |
+          ./scripts/split-features.sh ${{ matrix.total_shards }} ${{ matrix.shard_index }}
+          echo "Shard ${{ matrix.shard_index }} feature files:"
+          cat feature_shard_${{ matrix.shard_index }}.txt
+
+      - name: Build the image
+        run: ./gradlew --no-daemon --console=plain :fineract-provider:jibDockerBuild -Djib.to.image=$IMAGE_NAME -x test -x cucumber
+
+      - name: Start the Fineract stack
+        run: docker compose -f docker-compose-postgresql-test-activemq.yml up -d
+
+      - name: Check the stack
+        run: docker ps
+
+      - name: Wait for Manager to be ready
+        run: |
+          # Wait for the container to be running
+          echo "Waiting for Manager container to be ready..."
+          timeout 300 bash -c 'until docker ps --filter "health=healthy" --filter "name=fineract" --format "{{.Status}}" | grep -q "healthy"; do
+            if docker ps --filter "name=fineract" --format "{{.Status}}" | grep -q "unhealthy"; then
+              echo "Container is unhealthy. Stopping..."
+              docker ps -a
+              docker logs $(docker ps -q --filter name=fineract) || true
+              exit 1
+            fi
+            echo "Waiting for Manager to be ready..."
+            sleep 5
+          done'
+
+          # Check the health endpoint
+          echo "Checking Manager health endpoint..."
+          curl -f -k --retry 30 --retry-all-errors --connect-timeout 10 --retry-delay 10 \
+            https://localhost:8443/fineract-provider/actuator/health
+
+      - name: Execute tests for shard ${{ matrix.shard_index }}
+        id: tests
+        run: |
+          # Initialize failure flag
+          FAILED=0
+
+          # Create necessary directories
+          mkdir -p "allure-results-shard-${{ matrix.shard_index }}"
+          mkdir -p "allure-results-merged"
+
+          # Read feature files from the shard file
+          if [ ! -s "feature_shard_${{ matrix.shard_index }}.txt" ]; then
+            echo "No features to test in this shard. Skipping..."
+            exit 0
+          fi
+
+          # Read each feature file path and run tests one by one
+          while IFS= read -r feature_file || [ -n "$feature_file" ]; do
+            # Skip empty lines
+            [ -z "$feature_file" ] && continue
+
+            # Create a safe filename for the results
+            safe_name=$(echo "$feature_file" | tr '/' '-' | tr ' ' '_')
+
+            echo "::group::Testing feature: $feature_file"
+
+            # Run tests with individual allure results directory
+            if ! ./gradlew --no-daemon --console=plain \
+              :fineract-e2e-tests-runner:cucumber \
+              -Pcucumber.features="$feature_file" \
+              -Dallure.results.directory="allure-results-shard-${{ matrix.shard_index }}/$safe_name" \
+              allureReport; then
+
+              echo "::error::Test failed for $feature_file"
+              FAILED=1
+            fi
+
+            echo "::endgroup::"
+
+            # Copy the results to a merged directory
+            if [ -d "allure-results-shard-${{ matrix.shard_index }}/$safe_name" ]; then
+              cp -r "allure-results-shard-${{ matrix.shard_index }}/$safe_name/." "allure-results-merged/" || true
+            fi
+          done < "feature_shard_${{ matrix.shard_index }}.txt"
+
+          # Generate individual report for this shard
+          if [ -d "allure-results-merged" ] && [ "$(ls -A allure-results-merged)" ]; then
+            echo "Generating Allure report..."
+            mkdir -p "allure-report-shard-${{ matrix.shard_index }}"
+            ./fineract-e2e-tests-runner/build/allure/commandline/bin/allure generate "allure-results-merged" --clean -o "allure-report-shard-${{ matrix.shard_index }}" || \
+              echo "::warning::Failed to generate Allure report for shard ${{ matrix.shard_index }}"
+          fi
+
+          # Exit with failure status if any test failed
+          if [ "$FAILED" -eq 1 ]; then
+            echo "::error::Some tests failed in this shard"
+            exit 1
+          fi
+
+      - name: Upload test results
+        if: always()
+        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v4
+        with:
+          name: allure-results-shard-${{ matrix.shard_index }}
+          path: |
+            allure-results-shard-${{ matrix.shard_index }}
+            allure-results-merged
+            **/build/allure-results
+            **/build/reports/tests/test
+            **/build/test-results/test
+          retention-days: 5
+
+      - name: Upload Allure Report
+        if: always()
+        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v4
+        with:
+          name: allure-report-shard-${{ matrix.shard_index }}
+          path: allure-report-shard-${{ matrix.shard_index }}
+          retention-days: 5
+
+      - name: Upload logs
+        if: always()
+        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v4
+        with:
+          name: logs-shard-${{ matrix.shard_index }}
+          path: |
+            **/build/reports/tests/
+            **/logs/
+            **/out/
+          retention-days: 5
+
+      - name: Clean up
+        if: always()
+        run: |
+          docker compose -f docker-compose-postgresql-test-activemq.yml down -v
+          docker system prune -f

.github/workflows/build-mariadb.yml

@@ -0,0 +1,150 @@
+name: Fineract Cargo & Unit- & Integration tests - MariaDB
+
+on: [push, pull_request]
+
+permissions:
+  contents: read
+
+jobs:
+  test:
+    runs-on: ubuntu-24.04
+    timeout-minutes: 60
+
+    strategy:
+      fail-fast: false
+      matrix:
+        task: [test-core-1, test-core-2, test-core-3, test-core-4, test-core-5]
+
+    services:
+      mariadb:
+        image: mariadb:11.5.2
+        ports:
+          - 3306:3306
+        env:
+          MARIADB_ROOT_PASSWORD: mysql
+        options: --health-cmd="healthcheck.sh --su-mysql --connect --innodb_initialized" --health-interval=5s --health-timeout=2s --health-retries=3
+
+      mock-oauth2-server:
+        image: ghcr.io/navikt/mock-oauth2-server:3.0.1
+        ports:
+          - 9000:9000
+        env:
+          SERVER_PORT: 9000
+          JSON_CONFIG: '{ "interactiveLogin": true, "httpServer": "NettyWrapper", "tokenCallbacks": [ { "issuerId": "auth/realms/fineract", "tokenExpiry": 120, "requestMappings": [{ "requestParam": "scope", "match": "fineract", "claims": { "sub": "mifos", "scope": [ "test" ] } } ] } ] }'
+
+    env:
+      TZ: Asia/Kolkata
+      DEVELOCITY_ACCESS_KEY: ${{ secrets.DEVELOCITY_ACCESS_KEY }}
+      AWS_ENDPOINT_URL: http://localhost:4566
+      AWS_ACCESS_KEY_ID: localstack
+      AWS_SECRET_ACCESS_KEY: localstack
+      AWS_REGION: us-east-1
+      FINERACT_REPORT_EXPORT_S3_ENABLED: true
+      FINERACT_REPORT_EXPORT_S3_BUCKET_NAME: fineract-reports
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5
+        with:
+          fetch-depth: 0
+          fetch-tags: true
+
+      - name: Set up JDK 21
+        uses: actions/setup-java@f2beeb24e141e01a676f977032f5a29d81c9e27e # v5
+        with:
+          java-version: '21'
+          distribution: 'zulu'
+
+      - name: Cache Gradle dependencies
+        uses: actions/cache@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v4
+        with:
+          path: |
+            ~/.gradle/caches
+            ~/.gradle/wrapper
+          key: gradle-${{ runner.os }}-${{ hashFiles('**/*.gradle*', '**/gradle-wrapper.properties') }}
+
+      - name: Setup Gradle and Validate Wrapper
+        uses: gradle/actions/setup-gradle@f29f5a9d7b09a7c6b29859002d29d24e1674c884 # v5.0.1
+        with:
+          validate-wrappers: true
+
+      - name: Verify MariaDB connection
+        run: |
+          while ! mysqladmin ping -h"127.0.0.1" -P3306 ; do
+            sleep 1
+          done
+
+      - name: Initialise databases
+        run: |
+          ./gradlew --no-daemon -q createDB -PdbName=fineract_tenants
+          ./gradlew --no-daemon -q createDB -PdbName=fineract_default
+
+      - name: Start LocalStack
+        run: |
+          docker run -d --name localstack -p 4566:4566 -p 4510-4559:4510-4559 localstack/localstack:2.1
+          sleep 10
+          docker exec localstack awslocal s3api create-bucket --bucket fineract-reports
+
+      - name: Generate test class list (only for test-core-X)
+        if: startsWith(matrix.task, 'test-core-')
+        run: |
+          chmod +x scripts/split-tests.sh
+          SHARD_INDEX=$(echo "${{ matrix.task }}" | awk -F'-' '{print $3}')
+          ./scripts/split-tests.sh 5 $SHARD_INDEX
+          cat "shard-tests_${SHARD_INDEX}.txt"
+
+      - name: Run Gradle Task
+        run: |
+          set -e  # Fail the script if any command fails
+          SHARD_INDEX=$(echo "${{ matrix.task }}" | awk -F'-' '{print $3}')
+          FAILED=0
+
+          case "${{ matrix.task }}" in
+            test-core-*)
+              echo "Grouping test classes by module..."
+              declare -A module_tests
+
+              while IFS=, read -r module class; do
+                module_tests["$module"]+="$class "
+              done < "shard-tests_${SHARD_INDEX}.txt"
+
+              for module in "${!module_tests[@]}"; do
+                echo "::group::Running tests in $module"
+                for class in ${module_tests[$module]}; do
+                  echo "  - $class"
+                done
+
+                # Build test args
+                test_args=$(for class in ${module_tests[$module]}; do echo --tests "$class"; done | xargs)
+
+                # Run test task for this module
+                if ! ./gradlew "$module:test" $test_args -x checkstyleJmh -x checkstyleMain -x checkstyleTest -x spotlessCheck -x spotlessApply -x spotbugsMain -x spotbugsTest -x javadoc -x javadocJar -x modernizer; then
+                  echo "::error::Tests failed in module $module"
+                  FAILED=1
+                fi
+                echo "::endgroup::"
+              done
+              ;;
+          esac
+
+          # Exit with failure status if any test failed
+          if [ "$FAILED" -eq 1 ]; then
+            echo "::error::Some tests failed in this job"
+            exit 1
+          fi
+
+      - name: Archive test results
+        if: always()
+        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v4
+        with:
+          name: test-results-${{ matrix.task }}
+          path: '**/build/reports/'
+          retention-days: 5
+
+      - name: Archive server logs
+        if: always()
+        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v4
+        with:
+          name: server-logs-${{ matrix.task }}
+          path: '**/build/cargo/'
+          retention-days: 5

.github/workflows/build-mysql.yml

@@ -0,0 +1,150 @@
+name: Fineract Cargo & Unit- & Integration tests - MySQL
+
+on: [push, pull_request]
+
+permissions:
+  contents: read
+
+jobs:
+  test:
+    runs-on: ubuntu-24.04
+    timeout-minutes: 60
+
+    strategy:
+      fail-fast: false
+      matrix:
+        task: [test-core-1, test-core-2, test-core-3, test-core-4, test-core-5]
+
+    services:
+      mysql:
+        image: mysql:9.1
+        ports:
+          - 3306:3306
+        env:
+          MYSQL_ROOT_PASSWORD: mysql
+        options: --health-cmd="mysqladmin ping" --health-interval=5s --health-timeout=2s --health-retries=3
+
+      mock-oauth2-server:
+        image: ghcr.io/navikt/mock-oauth2-server:3.0.1
+        ports:
+          - 9000:9000
+        env:
+          SERVER_PORT: 9000
+          JSON_CONFIG: '{ "interactiveLogin": true, "httpServer": "NettyWrapper", "tokenCallbacks": [ { "issuerId": "auth/realms/fineract", "tokenExpiry": 120, "requestMappings": [{ "requestParam": "scope", "match": "fineract", "claims": { "sub": "mifos", "scope": [ "test" ] } } ] } ] }'
+
+    env:
+      TZ: Asia/Kolkata
+      DEVELOCITY_ACCESS_KEY: ${{ secrets.DEVELOCITY_ACCESS_KEY }}
+      AWS_ENDPOINT_URL: http://localhost:4566
+      AWS_ACCESS_KEY_ID: localstack
+      AWS_SECRET_ACCESS_KEY: localstack
+      AWS_REGION: us-east-1
+      FINERACT_REPORT_EXPORT_S3_ENABLED: true
+      FINERACT_REPORT_EXPORT_S3_BUCKET_NAME: fineract-reports
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5
+        with:
+          fetch-depth: 0
+          fetch-tags: true
+
+      - name: Set up JDK 21
+        uses: actions/setup-java@f2beeb24e141e01a676f977032f5a29d81c9e27e # v5
+        with:
+          java-version: '21'
+          distribution: 'zulu'
+
+      - name: Cache Gradle dependencies
+        uses: actions/cache@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v4
+        with:
+          path: |
+            ~/.gradle/caches
+            ~/.gradle/wrapper
+          key: gradle-${{ runner.os }}-${{ hashFiles('**/*.gradle*', '**/gradle-wrapper.properties') }}
+
+      - name: Setup Gradle and Validate Wrapper
+        uses: gradle/actions/setup-gradle@f29f5a9d7b09a7c6b29859002d29d24e1674c884 # v5.0.1
+        with:
+          validate-wrappers: true
+
+      - name: Verify MySQL connection
+        run: |
+          while ! mysqladmin ping -h"127.0.0.1" -P3306 ; do
+            sleep 1
+          done
+
+      - name: Initialise databases
+        run: |
+          ./gradlew --no-daemon -q createMySQLDB -PdbName=fineract_tenants
+          ./gradlew --no-daemon -q createMySQLDB -PdbName=fineract_default
+
+      - name: Start LocalStack
+        run: |
+          docker run -d --name localstack -p 4566:4566 -p 4510-4559:4510-4559 localstack/localstack:2.1
+          sleep 10
+          docker exec localstack awslocal s3api create-bucket --bucket fineract-reports
+
+      - name: Generate test class list (only for test-core-X)
+        if: startsWith(matrix.task, 'test-core-')
+        run: |
+          chmod +x scripts/split-tests.sh
+          SHARD_INDEX=$(echo "${{ matrix.task }}" | awk -F'-' '{print $3}')
+          ./scripts/split-tests.sh 5 $SHARD_INDEX
+          cat "shard-tests_${SHARD_INDEX}.txt"
+
+      - name: Run Gradle Task
+        run: |
+          set -e  # Fail the script if any command fails
+          SHARD_INDEX=$(echo "${{ matrix.task }}" | awk -F'-' '{print $3}')
+          FAILED=0
+
+          case "${{ matrix.task }}" in
+            test-core-*)
+              echo "Grouping test classes by module..."
+              declare -A module_tests
+
+              while IFS=, read -r module class; do
+                module_tests["$module"]+="$class "
+              done < "shard-tests_${SHARD_INDEX}.txt"
+
+              for module in "${!module_tests[@]}"; do
+                echo "::group::Running tests in $module"
+                for class in ${module_tests[$module]}; do
+                  echo "  - $class"
+                done
+
+                # Build test args
+                test_args=$(for class in ${module_tests[$module]}; do echo --tests "$class"; done | xargs)
+
+                # Run test task for this module
+                if ! ./gradlew "$module:test" $test_args -PdbType=mysql -x checkstyleJmh -x checkstyleMain -x checkstyleTest -x spotlessCheck -x spotlessApply -x spotbugsMain -x spotbugsTest -x javadoc -x javadocJar -x modernizer; then
+                  echo "::error::Tests failed in module $module"
+                  FAILED=1
+                fi
+                echo "::endgroup::"
+              done
+              ;;
+          esac
+
+          # Exit with failure status if any test failed
+          if [ "$FAILED" -eq 1 ]; then
+            echo "::error::Some tests failed in this job"
+            exit 1
+          fi
+
+      - name: Archive test results
+        if: always()
+        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v4
+        with:
+          name: test-results-${{ matrix.task }}
+          path: '**/build/reports/'
+          retention-days: 5
+
+      - name: Archive server logs
+        if: always()
+        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v4
+        with:
+          name: server-logs-${{ matrix.task }}
+          path: '**/build/cargo/'
+          retention-days: 5

.github/workflows/build-postgresql.yml

@@ -0,0 +1,151 @@
+name: Fineract Cargo & Unit- & Integration tests - PostgreSQL
+
+on: [push, pull_request]
+
+permissions:
+  contents: read
+
+jobs:
+  test:
+    runs-on: ubuntu-24.04
+    timeout-minutes: 60
+
+    strategy:
+      fail-fast: false
+      matrix:
+        task: [test-core-1, test-core-2, test-core-3, test-core-4, test-core-5]
+
+    services:
+      postgresql:
+        image: postgres:18.2
+        ports:
+          - 5432:5432
+        env:
+          POSTGRES_USER: root
+          POSTGRES_PASSWORD: postgres
+        options: --health-cmd="pg_isready -q -d postgres -U root" --health-interval=5s --health-timeout=2s --health-retries=3
+
+      mock-oauth2-server:
+        image: ghcr.io/navikt/mock-oauth2-server:3.0.1
+        ports:
+          - 9000:9000
+        env:
+          SERVER_PORT: 9000
+          JSON_CONFIG: '{ "interactiveLogin": true, "httpServer": "NettyWrapper", "tokenCallbacks": [ { "issuerId": "auth/realms/fineract", "tokenExpiry": 120, "requestMappings": [{ "requestParam": "scope", "match": "fineract", "claims": { "sub": "mifos", "scope": [ "test" ] } } ] } ] }'
+
+    env:
+      TZ: Asia/Kolkata
+      DEVELOCITY_ACCESS_KEY: ${{ secrets.DEVELOCITY_ACCESS_KEY }}
+      AWS_ENDPOINT_URL: http://localhost:4566
+      AWS_ACCESS_KEY_ID: localstack
+      AWS_SECRET_ACCESS_KEY: localstack
+      AWS_REGION: us-east-1
+      FINERACT_REPORT_EXPORT_S3_ENABLED: true
+      FINERACT_REPORT_EXPORT_S3_BUCKET_NAME: fineract-reports
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5
+        with:
+          fetch-depth: 0
+          fetch-tags: true
+
+      - name: Set up JDK 21
+        uses: actions/setup-java@f2beeb24e141e01a676f977032f5a29d81c9e27e # v5
+        with:
+          java-version: '21'
+          distribution: 'zulu'
+
+      - name: Cache Gradle dependencies
+        uses: actions/cache@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v4
+        with:
+          path: |
+            ~/.gradle/caches
+            ~/.gradle/wrapper
+          key: gradle-${{ runner.os }}-${{ hashFiles('**/*.gradle*', '**/gradle-wrapper.properties') }}
+
+      - name: Setup Gradle and Validate Wrapper
+        uses: gradle/actions/setup-gradle@f29f5a9d7b09a7c6b29859002d29d24e1674c884 # v5.0.1
+        with:
+          validate-wrappers: true
+
+      - name: Verify PostgreSQL connection
+        run: |
+          while ! pg_isready -d postgres -U root -h 127.0.0.1 -p 5432 ; do
+            sleep 1
+          done
+
+      - name: Initialise databases
+        run: |
+          ./gradlew --no-daemon -q createPGDB -PdbName=fineract_tenants
+          ./gradlew --no-daemon -q createPGDB -PdbName=fineract_default
+
+      - name: Start LocalStack
+        run: |
+          docker run -d --name localstack -p 4566:4566 -p 4510-4559:4510-4559 localstack/localstack:2.1
+          sleep 10
+          docker exec localstack awslocal s3api create-bucket --bucket fineract-reports
+
+      - name: Generate test class list (only for test-core-X)
+        if: startsWith(matrix.task, 'test-core-')
+        run: |
+          chmod +x scripts/split-tests.sh
+          SHARD_INDEX=$(echo "${{ matrix.task }}" | awk -F'-' '{print $3}')
+          ./scripts/split-tests.sh 5 $SHARD_INDEX
+          cat "shard-tests_${SHARD_INDEX}.txt"
+
+      - name: Run Gradle Task
+        run: |
+          set -e  # Fail the script if any command fails
+          SHARD_INDEX=$(echo "${{ matrix.task }}" | awk -F'-' '{print $3}')
+          FAILED=0
+
+          case "${{ matrix.task }}" in
+            test-core-*)
+              echo "Grouping test classes by module..."
+              declare -A module_tests
+
+              while IFS=, read -r module class; do
+                module_tests["$module"]+="$class "
+              done < "shard-tests_${SHARD_INDEX}.txt"
+
+              for module in "${!module_tests[@]}"; do
+                echo "::group::Running tests in $module"
+                for class in ${module_tests[$module]}; do
+                  echo "  - $class"
+                done
+
+                # Build test args
+                test_args=$(for class in ${module_tests[$module]}; do echo --tests "$class"; done | xargs)
+
+                # Run test task for this module
+                if ! ./gradlew "$module:test" $test_args -PdbType=postgresql -x checkstyleJmh -x checkstyleMain -x checkstyleTest -x spotlessCheck -x spotlessApply -x spotbugsMain -x spotbugsTest -x javadoc -x javadocJar -x modernizer; then
+                  echo "::error::Tests failed in module $module"
+                  FAILED=1
+                fi
+                echo "::endgroup::"
+              done
+              ;;
+          esac
+
+          # Exit with failure status if any test failed
+          if [ "$FAILED" -eq 1 ]; then
+            echo "::error::Some tests failed in this job"
+            exit 1
+          fi
+
+      - name: Archive test results
+        if: always()
+        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v4
+        with:
+          name: test-results-${{ matrix.task }}
+          path: '**/build/reports/'
+          retention-days: 5
+
+      - name: Archive server logs
+        if: always()
+        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v4
+        with:
+          name: server-logs-${{ matrix.task }}
+          path: '**/build/cargo/'
+          retention-days: 5

.github/workflows/fineract.dev.yaml

@@ -1,36 +0,0 @@
-# This is the GitHub Action which
-# automatically updates https://www.fineract.dev
-#
-# see https://jira.apache.org/jira/browse/FINERACT-970
-# https://github.com/marketplace/actions/setup-gcloud-environment
-# and http://blog2.vorburger.ch/2020/05/fineractdev-cicd-from-github-to-google.html
-#
-# Created by Michael Vorburger.ch for Fineract in May 2020.
-#
-
-name: Deploy to https://www.fineract.dev
-
-on:
-  push:
-    branches:
-      - develop
-
-jobs:
-  setup-build-deploy:
-    name: Deploy on Fineract.dev
-    if: github.repository == 'apache/fineract'
-    runs-on: ubuntu-latest
-
-    steps:
-      - uses: GoogleCloudPlatform/github-actions/setup-gcloud@master
-        with:
-          project_id: ${{ secrets.GOOGLE_PROJECT_ID }}
-          service_account_key: ${{ secrets.GOOGLE_APPLICATION_CREDENTIALS}}
-
-      - uses: actions/checkout@v2
-
-      - run: gcloud components install beta
-
-      - run: JOBS=$(gcloud beta builds list --ongoing --format="value[terminator=' '](id)") && [ ! -z "$JOBS" ] && echo "Cancelling $JOBS..." && gcloud builds cancel $JOBS --no-user-output-enabled || true
-
-      - run: gcloud beta builds triggers run deploy-demo --branch master --format=none

.github/workflows/gradle-wrapper-validation.yml

@@ -1,10 +0,0 @@
-name: "Validate Gradle Wrapper"
-on: [push, pull_request]
-
-jobs:
-  validation:
-    name: "Validation"
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v2
-      - uses: gradle/wrapper-validation-action@v1

.github/workflows/liquibase-only-postgresql.yml

@@ -0,0 +1,81 @@
+name: Fineract Liquibase Only mode - PostgreSQL
+
+on: [push, pull_request]
+
+permissions:
+  contents: read
+
+jobs:
+  test:
+    runs-on: ubuntu-22.04
+    timeout-minutes: 60
+
+    services:
+      postgresql:
+        image: postgres:18.2
+        ports:
+          - 5432:5432
+        env:
+          POSTGRES_USER: root
+          POSTGRES_PASSWORD: postgres
+        options: --health-cmd="pg_isready -q -d postgres -U root" --health-interval=5s --health-timeout=2s --health-retries=3
+
+    env:
+      TZ: Asia/Kolkata
+      DEVELOCITY_ACCESS_KEY: ${{ secrets.DEVELOCITY_ACCESS_KEY }}
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5
+        with:
+          fetch-depth: 0
+          fetch-tags: true
+
+      - name: Set up JDK 21
+        uses: actions/setup-java@f2beeb24e141e01a676f977032f5a29d81c9e27e # v5
+        with:
+          java-version: '21'
+          distribution: 'zulu'
+
+      - name: Cache Gradle dependencies
+        uses: actions/cache@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v4
+        with:
+          path: |
+            ~/.gradle/caches
+            ~/.gradle/wrapper
+          key: gradle-${{ runner.os }}-${{ hashFiles('**/*.gradle*', '**/gradle-wrapper.properties') }}
+
+      - name: Setup Gradle and Validate Wrapper
+        uses: gradle/actions/setup-gradle@f29f5a9d7b09a7c6b29859002d29d24e1674c884 # v5.0.1
+        with:
+          validate-wrappers: true
+
+      - name: Verify PostgreSQL connection
+        run: |
+          while ! pg_isready -d postgres -U root -h 127.0.0.1 -p 5432 ; do
+            sleep 1
+          done
+
+      - name: Initialise databases
+        run: |
+          ./gradlew --no-daemon -q createPGDB -PdbName=fineract_tenants
+          ./gradlew --no-daemon -q createPGDB -PdbName=fineract_default
+
+      - name: Run Fineract in Liquibase only mode
+        env:
+          FINERACT_DEFAULT_TENANTDB_CONN_PARAMS: ""
+          FINERACT_DEFAULT_TENANTDB_DESCRIPTION: "Default Demo Tenant"
+          FINERACT_DEFAULT_TENANTDB_HOSTNAME: "localhost"
+          FINERACT_DEFAULT_TENANTDB_IDENTIFIER: "default"
+          FINERACT_DEFAULT_TENANTDB_NAME: "fineract_default"
+          FINERACT_DEFAULT_TENANTDB_PORT: "5432"
+          FINERACT_DEFAULT_TENANTDB_PWD: "postgres"
+          FINERACT_DEFAULT_TENANTDB_TIMEZONE: "Asia/Kolkata"
+          FINERACT_DEFAULT_TENANTDB_UID: "root"
+          FINERACT_HIKARI_DRIVER_SOURCE_CLASS_NAME: "org.postgresql.Driver"
+          FINERACT_HIKARI_JDBC_URL: "jdbc:postgresql://localhost:5432/fineract_tenants"
+          FINERACT_HIKARI_PASSWORD: "postgres"
+          FINERACT_HIKARI_USERNAME: "root"
+          SPRING_PROFILES_ACTIVE: "liquibase-only"
+        run:
+          ./gradlew fineract-provider:bootRun

.github/workflows/mifos-fineract-client-publish.yml

@@ -0,0 +1,36 @@
+name: Publish Fineract client to Mifos Artifactory
+
+on:
+  push:
+    branches:
+      - develop-mifos
+
+permissions:
+  contents: write
+
+jobs:
+  build:
+    runs-on: ubuntu-24.04
+    timeout-minutes: 60
+    env:
+      ARTIFACTORY_USERNAME: ${{ secrets.ARTIFACTORY_USERNAME }}
+      ARTIFACTORY_PASSWORD: ${{ secrets.ARTIFACTORY_PASSWORD }}
+
+    steps:
+      - name: Checkout Source Code
+        uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5
+        with:
+          fetch-depth: 0
+      - name: Generate build number
+        uses: onyxmueller/build-tag-number@v1
+        with:
+          token: ${{ secrets.GITHUB_TOKEN }}
+      - name: Set up JDK 21
+        uses: actions/setup-java@f2beeb24e141e01a676f977032f5a29d81c9e27e # v5
+        with:
+          java-version: '21'
+          distribution: 'zulu'
+      - name: Setup Gradle
+        uses: gradle/actions/setup-gradle@f29f5a9d7b09a7c6b29859002d29d24e1674c884 # v5.0.1
+      - name: Build the image
+        run: ./gradlew publish -Pfineract.config.username=$ARTIFACTORY_USERNAME -Pfineract.config.password=$ARTIFACTORY_PASSWORD -Pfineract.release.version=${BUILD_NUMBER}

.github/workflows/pr-title-check.yml

@@ -0,0 +1,26 @@
+name: Fineract PR Compliance
+
+on:
+  pull_request:
+    types: [opened, edited, reopened, synchronize]
+
+permissions:
+  pull-requests: read
+
+jobs:
+  verify-title:
+    name: Validate Jira Ticket ID
+    runs-on: ubuntu-latest
+    timeout-minutes: 1
+    steps:
+      - name: Verify Title Format
+        run: |
+          title="${{ github.event.pull_request.title }}"
+          regex="^FINERACT-[0-9]+: "
+
+          if [[ ! "$title" =~ $regex ]]; then
+            echo "::error::PR title '$title' is invalid."
+            echo "::error::It must start with a Jira Ticket ID (e.g., 'FINERACT-123: Description...')."
+            exit 1
+          fi
+          echo "Success: PR title matches the required format."

.github/workflows/publish-dockerhub.yml

@@ -0,0 +1,48 @@
+name: Fineract Publish to DockerHub
+on:
+  push:
+    branches:
+      - develop
+    tags:
+      - 1.*
+permissions:
+  contents: read
+jobs:
+  build:
+    runs-on: ubuntu-24.04
+    timeout-minutes: 60
+    env:
+      DEVELOCITY_ACCESS_KEY: ${{ secrets.DEVELOCITY_ACCESS_KEY }}
+    steps:
+      - name: Checkout Source Code
+        uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5
+        with:
+          fetch-depth: 0
+
+      - name: Set up JDK 21
+        uses: actions/setup-java@f2beeb24e141e01a676f977032f5a29d81c9e27e # v5
+        with:
+          java-version: '21'
+          distribution: 'zulu'
+
+      - name: Setup Gradle
+        uses: gradle/actions/setup-gradle@f29f5a9d7b09a7c6b29859002d29d24e1674c884 # v5.0.1
+
+      - name: Get Git Hashes
+        run: |
+          echo "short_hash=$(git rev-parse --short HEAD)" >> $GITHUB_OUTPUT
+          echo "long_hash=$(git rev-parse HEAD)" >> $GITHUB_OUTPUT
+        id: git_hashes
+
+      - name: Build the Apache Fineract image
+        run:  |
+          TAGS=${{ github.ref_name }}
+          if [ "${{ github.ref_name }}" == "develop" ]; then
+            TAGS="$TAGS,${{ steps.git_hashes.outputs.short_hash }},${{ steps.git_hashes.outputs.long_hash }}"
+          fi
+          ./gradlew --no-daemon --console=plain :fineract-provider:jib -x test -x cucumber \
+            -Djib.to.auth.username=${{secrets.DOCKERHUB_USER}} \
+            -Djib.to.auth.password=${{secrets.DOCKERHUB_TOKEN}} \
+            -Djib.from.platforms=linux/amd64,linux/arm64 \
+            -Djib.to.image=apache/fineract \
+            -Djib.to.tags=$TAGS

.github/workflows/rebase.yml

@@ -1,18 +0,0 @@
-# https://github.com/marketplace/actions/automatic-rebase  (https://github.com/cirrus-actions/rebase)
-on:
-  issue_comment:
-    types: [created]
-name: Automatic Rebase
-jobs:
-  rebase:
-    name: Rebase
-    if: github.event.issue.pull_request != '' && contains(github.event.comment.body, '/rebase')
-    runs-on: ubuntu-latest
-    steps:
-    - uses: actions/checkout@master
-      with:
-        fetch-depth: 0
-    - name: Automatic Rebase
-      uses: cirrus-actions/rebase@1.3
-      env:
-        GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/run-integration-test-sequentially-postgresql.yml

@@ -0,0 +1,105 @@
+name: Fineract Cargo & Unit- & Integration tests - Sequential Execution - PostgreSQL
+
+on:
+  workflow_dispatch:
+  push:
+    branches:
+      - develop
+permissions:
+  contents: read
+jobs:
+  build:
+    runs-on: ubuntu-24.04
+    timeout-minutes: 180
+
+    services:
+      postgresql:
+        image: postgres:18.2
+        ports:
+          - 5432:5432
+        env:
+          POSTGRES_USER: root
+          POSTGRES_PASSWORD: postgres
+        options: --health-cmd="pg_isready -q -d postgres -U root" --health-interval=5s --health-timeout=2s --health-retries=3
+      mock-oauth2-server:
+        image: ghcr.io/navikt/mock-oauth2-server:3.0.1
+        ports:
+          - 9000:9000
+        env:
+          SERVER_PORT: 9000
+          JSON_CONFIG: '{ "interactiveLogin": true, "httpServer": "NettyWrapper", "tokenCallbacks": [ { "issuerId": "auth/realms/fineract", "tokenExpiry": 120, "requestMappings": [{ "requestParam": "scope", "match": "fineract", "claims": { "sub": "mifos", "scope": [ "test" ] } } ] } ] }'
+    env:
+      TZ: Asia/Kolkata
+      DEVELOCITY_ACCESS_KEY: ${{ secrets.DEVELOCITY_ACCESS_KEY }}
+    steps:
+      - name: Checkout
+        uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5
+        with:
+          fetch-depth: 0
+          fetch-tags: true
+
+      - name: Set up JDK 21
+        uses: actions/setup-java@f2beeb24e141e01a676f977032f5a29d81c9e27e # v5
+        with:
+          java-version: '21'
+          distribution: 'zulu'
+      - name: Setup Gradle and Validate Wrapper
+        uses: gradle/actions/setup-gradle@f29f5a9d7b09a7c6b29859002d29d24e1674c884 # v5.0.1
+        with:
+          validate-wrappers: true
+      - name: Verify PostgreSQL connection
+        run: |
+          while ! pg_isready -d postgres -U root -h 127.0.0.1 -p 5432 ; do
+              sleep 1
+          done
+      - name: Initialise databases
+        run: |
+          ./gradlew --no-daemon -q createPGDB -PdbName=fineract_tenants
+          ./gradlew --no-daemon -q createPGDB -PdbName=fineract_default
+
+      - name: Start LocalStack
+        env:
+          AWS_ENDPOINT_URL: http://localhost:4566
+          AWS_ACCESS_KEY_ID: localstack
+          AWS_SECRET_ACCESS_KEY: localstack
+          AWS_REGION: us-east-1
+        run: |
+          docker run -d --name localstack -p 4566:4566 -p 4510-4559:4510-4559 localstack/localstack:2.1
+          sleep 10
+          docker exec localstack awslocal s3api create-bucket --bucket fineract-reports
+          echo "LocalStack initialization complete"
+      - name: Build & Test
+        env:
+          AWS_ENDPOINT_URL: http://localhost:4566
+          AWS_ACCESS_KEY_ID: localstack
+          AWS_SECRET_ACCESS_KEY: localstack
+          AWS_REGION: us-east-1
+          FINERACT_REPORT_EXPORT_S3_ENABLED: true
+          FINERACT_REPORT_EXPORT_S3_BUCKET_NAME: fineract-reports
+        run: |
+          ./gradlew --no-daemon --console=plain build -x cucumber -x test -x doc
+          ./gradlew --no-daemon --console=plain cucumber -x :fineract-e2e-tests-runner:cucumber
+          ./gradlew --no-daemon --console=plain test -x :twofactor-tests:test -x :oauth2-test:test -x :fineract-e2e-tests-runner:test -PdbType=postgresql
+          ./gradlew --no-daemon --console=plain :twofactor-tests:test -PdbType=postgresql
+          ./gradlew --no-daemon --console=plain :oauth2-tests:test -PdbType=postgresql
+      - name: Archive test results
+        if: always()
+        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v4
+        with:
+          name: test-results
+          retention-days: 5
+          path: |
+            build/reports/
+            integration-tests/build/reports/
+            twofactor-tests/build/reports/
+            oauth2-tests/build/reports/
+      - name: Archive server logs
+        if: always()
+        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v4
+        with:
+          name: server-logs
+          retention-days: 5
+          path: |
+            integration-tests/build/cargo/
+            twofactor-tests/build/cargo/
+            oauth2-tests/build/cargo/

.github/workflows/smoke-messaging.yml

@@ -0,0 +1,62 @@
+name: Fineract Messaging Smoke Tests
+
+on: [push, pull_request]
+
+permissions:
+  contents: read
+
+jobs:
+  smoke-test:
+    name: Smoke Test with ${{ matrix.messaging }}
+    runs-on: ubuntu-24.04
+    timeout-minutes: 60
+    strategy:
+      fail-fast: false
+      matrix:
+        include:
+          - messaging: ActiveMQ
+            compose_file: docker-compose-postgresql-activemq.yml
+          - messaging: Kafka
+            compose_file: docker-compose-postgresql-kafka.yml
+
+    env:
+      DEVELOCITY_ACCESS_KEY: ${{ secrets.DEVELOCITY_ACCESS_KEY }}
+      IMAGE_NAME: fineract
+
+    steps:
+      - uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5
+        with:
+          fetch-depth: 0
+
+      - name: Set up JDK 21
+        uses: actions/setup-java@f2beeb24e141e01a676f977032f5a29d81c9e27e # v5
+        with:
+          java-version: '21'
+          distribution: 'zulu'
+
+      - name: Setup Gradle
+        uses: gradle/actions/setup-gradle@f29f5a9d7b09a7c6b29859002d29d24e1674c884 # v5.0.1
+
+      - name: Build the image
+        run: ./gradlew --no-daemon --console=plain :fineract-provider:jibDockerBuild -Djib.to.image=$IMAGE_NAME -x test -x cucumber
+
+      - name: Start the ${{ matrix.messaging }} Stack
+        run: docker compose -f ${{ matrix.compose_file }} up --scale fineract-worker=1 -d
+
+      - name: Check the stack
+        run: docker ps
+
+      - name: Check health Manager
+        run: curl -f -k --retry 60 --retry-all-errors --connect-timeout 30 --retry-delay 30 https://localhost:8443/fineract-provider/actuator/health
+
+      - name: Check health Worker1
+        run: curl -f -k --retry 60 --retry-all-errors --connect-timeout 30 --retry-delay 30 https://localhost:8444/fineract-provider/actuator/health
+
+      - name: Check info Manager
+        run: (( $(curl -f -k --retry 5 --retry-all-errors --connect-timeout 30 --retry-delay 30 https://localhost:8443/fineract-provider/actuator/info | wc --chars) > 100 ))
+
+      - name: Check info Worker1
+        run: (( $(curl -f -k --retry 5 --retry-all-errors --connect-timeout 30 --retry-delay 30 https://localhost:8444/fineract-provider/actuator/info | wc --chars) > 100 ))
+
+      - name: Run Smoke Test with Remote COB
+        run: ./gradlew --no-daemon --console=plain :integration-tests:cleanTest :integration-tests:test --tests "org.apache.fineract.integrationtests.investor.externalassetowner.InitiateExternalAssetOwnerTransferTest.saleActiveLoanToExternalAssetOwnerAndBuybackADayLater" -PcargoDisabled

.github/workflows/sonarqube.yml

@@ -0,0 +1,38 @@
+name: Fineract Sonarqube
+on:
+  push:
+    branches:
+      - develop
+permissions:
+  contents: read
+jobs:
+  build:
+    runs-on: ubuntu-24.04
+    timeout-minutes: 60
+    env:
+        TZ: Asia/Kolkata
+        SONAR_ORGANIZATION: ${{ secrets.SONAR_ORGANIZATION }}
+        SONAR_PROJECT_KEY: ${{ secrets.SONAR_PROJECT_KEY }}
+        SONAR_HOST_URL: ${{ secrets.SONAR_HOST_URL }}
+        GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        SONAR_TOKEN: ${{ secrets.SONARCLOUD_TOKEN }}
+        DEVELOCITY_ACCESS_KEY: ${{ secrets.DEVELOCITY_ACCESS_KEY }}
+        JAVA_BINARIES: .
+    steps:
+      - name: Checkout
+        uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5
+        with:
+          fetch-depth: 0
+      - name: Set up JDK 21
+        uses: actions/setup-java@f2beeb24e141e01a676f977032f5a29d81c9e27e # v5
+        with:
+          java-version: '21'
+          distribution: 'zulu'
+      - name: Setup Gradle and Validate Wrapper
+        uses: gradle/actions/setup-gradle@f29f5a9d7b09a7c6b29859002d29d24e1674c884 # v5.0.1
+        with:
+          validate-wrappers: true
+      - name: Build
+        run: ./gradlew --no-daemon --console=plain :fineract-provider:build -x test -x cucumber
+      - name: Sonar
+        run: ./gradlew --no-daemon --console=plain -Dsonar.verbose=true -Dsonar.token=$SONAR_TOKEN -Dsonar.host.url=$SONAR_HOST_URL -Dsonar.organization=$SONAR_ORGANIZATION -Dsonar.projectKey=$SONAR_PROJECT_KEY -Dsonar.java.binaries=$JAVA_BINARIES --info --stacktrace sonar

.github/workflows/stale.yml

@@ -5,11 +5,17 @@ name: Mark stale issues and pull requests
 on:
   schedule:
   - cron: "0 0 * * *"
+permissions:
+  contents: read
 jobs:
   stale:
+    permissions:
+      issues: write  # for actions/stale to close stale issues
+      pull-requests: write  # for actions/stale to close stale PRs
     runs-on: ubuntu-latest
+    timeout-minutes: 60
     steps:
-    - uses: actions/stale@v1
+    - uses: actions/stale@b5d41d4e1d5dceea10e7104786b73624c18a190f # v10
       with:
         repo-token: ${{ secrets.GITHUB_TOKEN }}
         # stale-issue-message: 'Stale issue message'

.github/workflows/verify-api-backward-compatibility.yml

@@ -0,0 +1,225 @@
+name: Verify API Backward Compatibility
+
+on: [pull_request]
+
+permissions:
+  contents: read
+  pull-requests: write
+
+jobs:
+  api-compatibility-check:
+    runs-on: ubuntu-24.04
+    timeout-minutes: 15
+
+    env:
+      TZ: Asia/Kolkata
+
+    steps:
+      - name: Checkout base branch
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v5
+        with:
+          repository: ${{ github.event.pull_request.base.repo.full_name }}
+          ref: ${{ github.event.pull_request.base.ref }}
+          fetch-depth: 0
+          path: baseline
+
+      - name: Set up JDK 21
+        uses: actions/setup-java@v5
+        with:
+          distribution: 'zulu'
+          java-version: '21'
+
+      - name: Generate baseline spec
+        working-directory: baseline
+        run: ./gradlew :fineract-provider:resolve --no-daemon
+
+      - name: Checkout PR branch
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v5
+        with:
+          repository: ${{ github.event.pull_request.head.repo.full_name }}
+          ref: ${{ github.event.pull_request.head.sha }}
+          fetch-depth: 0
+          path: current
+
+      - name: Generate PR spec
+        working-directory: current
+        run: ./gradlew :fineract-provider:resolve --no-daemon
+
+      - name: Sanitize specs
+        run: |
+          python3 -c "
+          import json, sys
+
+          def sanitize(path):
+              with open(path) as f:
+                  spec = json.load(f)
+              fixed = 0
+              for path_item in spec.get('paths', {}).values():
+                  for op in path_item.values():
+                      if not isinstance(op, dict) or 'requestBody' not in op:
+                          continue
+                      for media in op['requestBody'].get('content', {}).values():
+                          if 'schema' not in media:
+                              media['schema'] = {'type': 'object'}
+                              fixed += 1
+              if fixed:
+                  with open(path, 'w') as f:
+                      json.dump(spec, f)
+              print(f'{path}: fixed {fixed} entries')
+
+          sanitize('${GITHUB_WORKSPACE}/baseline/fineract-provider/build/resources/main/static/fineract.json')
+          sanitize('${GITHUB_WORKSPACE}/current/fineract-provider/build/resources/main/static/fineract.json')
+          "
+
+      - name: Check breaking changes
+        id: breaking-check
+        continue-on-error: true
+        working-directory: current
+        run: |
+          set -o pipefail
+          ./gradlew :fineract-provider:checkBreakingChanges \
+            -PapiBaseline="${GITHUB_WORKSPACE}/baseline/fineract-provider/build/resources/main/static/fineract.json" \
+            --no-daemon --quiet 2>&1 | tail -50
+
+      - name: Build report
+        if: steps.breaking-check.outcome == 'failure'
+        id: report
+        run: |
+          REPORT_DIR="current/fineract-provider/build/swagger-brake"
+
+          python3 -c "
+          import json, glob, os
+          from collections import defaultdict
+
+          RULE_DESC = {
+              'R001': 'Standard API changed to beta',
+              'R002': 'Path deleted',
+              'R003': 'Request media type deleted',
+              'R004': 'Request parameter deleted',
+              'R005': 'Request parameter enum value deleted',
+              'R006': 'Request parameter location changed',
+              'R007': 'Request parameter made required',
+              'R008': 'Request parameter type changed',
+              'R009': 'Request attribute removed',
+              'R010': 'Request type changed',
+              'R011': 'Request enum value deleted',
+              'R012': 'Response code deleted',
+              'R013': 'Response media type deleted',
+              'R014': 'Response attribute removed',
+              'R015': 'Response type changed',
+              'R016': 'Response enum value deleted',
+              'R017': 'Request parameter constraint changed',
+          }
+
+          report_dir = '${REPORT_DIR}'
+          files = sorted(glob.glob(os.path.join(report_dir, '*.json')))
+          if not files:
+              body = 'Breaking change detected but no report file found.'
+          else:
+              with open(files[0]) as f:
+                  data = json.load(f)
+
+              all_changes = []
+              for items in data.get('breakingChanges', {}).values():
+                  all_changes.extend(items)
+
+              if not all_changes:
+                  body = 'Breaking change detected but no details available in report.'
+              else:
+                  def detail(c):
+                      for key in ('attributeName', 'attribute', 'name', 'mediaType', 'enumValue', 'code'):
+                          v = c.get(key)
+                          if v:
+                              val = v.rsplit('.', 1)[-1]
+                              if key in ('attributeName', 'attribute', 'name'):
+                                  return val
+                              return f'{key}={val}'
+                      return '-'
+
+                  groups = defaultdict(list)
+                  for c in all_changes:
+                      groups[(c.get('ruleCode', '?'), detail(c))].append(c)
+
+                  lines = []
+                  lines.append('| Rule | Description | Detail | Affected endpoints | Count |')
+                  lines.append('|------|-------------|--------|--------------------|-------|')
+                  for (rule, det), items in sorted(groups.items()):
+                      desc = RULE_DESC.get(rule, '')
+                      eps = sorted(set(
+                          f'{c.get(\"method\",\"\")} {c.get(\"path\",\"\")}'
+                          for c in items if c.get('path')
+                      ))
+                      ep_str = ', '.join(f'\`{e}\`' for e in eps[:5])
+                      if len(eps) > 5:
+                          ep_str += f' +{len(eps)-5} more'
+                      lines.append(f'| {rule} | {desc} | \`{det}\` | {ep_str} | {len(items)} |')
+
+                  lines.append('')
+                  lines.append(f'**Total: {len(all_changes)} violations across {len(groups)} unique changes**')
+                  body = '\n'.join(lines)
+
+          with open(os.environ['GITHUB_OUTPUT'], 'a') as f:
+              f.write('has_report=true\n')
+
+          report_file = '${GITHUB_WORKSPACE}/breaking-changes-report.md'
+          with open(report_file, 'w') as f:
+              f.write('## Breaking API Changes Detected\n\n')
+              f.write(body)
+              f.write('\n\n> **Note:** This check is informational only and does not block the PR.\n')
+
+          # Also write to step summary
+          with open(os.environ['GITHUB_STEP_SUMMARY'], 'a') as f:
+              f.write('## Breaking API Changes Detected\n\n')
+              f.write(body)
+              f.write('\n\n> **Note:** This check is informational only and does not block the PR.\n')
+          "
+
+      - name: Comment on PR
+        if: always()
+        continue-on-error: true
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          PR_NUMBER: ${{ github.event.pull_request.number }}
+        run: |
+          MARKER="<!-- swagger-brake-report -->"
+
+          # Find existing comment by marker
+          COMMENT_ID=$(gh api "repos/${{ github.repository }}/issues/${PR_NUMBER}/comments" \
+            --jq ".[] | select(.body | contains(\"${MARKER}\")) | .id" | head -1)
+
+          if [ "${{ steps.breaking-check.outcome }}" == "failure" ] && [ -f "${GITHUB_WORKSPACE}/breaking-changes-report.md" ]; then
+            # Prepend marker to the report
+            BODY="${MARKER}
+          $(cat ${GITHUB_WORKSPACE}/breaking-changes-report.md)"
+
+            if [ -n "$COMMENT_ID" ]; then
+              gh api "repos/${{ github.repository }}/issues/comments/${COMMENT_ID}" \
+                -X PATCH -f body="${BODY}"
+            else
+              gh pr comment "${PR_NUMBER}" --repo ${{ github.repository }} --body "${BODY}"
+            fi
+          elif [ -n "$COMMENT_ID" ]; then
+            # No breaking changes anymore, delete the old comment
+            gh api "repos/${{ github.repository }}/issues/comments/${COMMENT_ID}" -X DELETE
+          fi
+
+      - name: Report no breaking changes
+        if: steps.breaking-check.outcome == 'success'
+        run: |
+          echo "## No Breaking API Changes Detected" >> $GITHUB_STEP_SUMMARY
+          echo "" >> $GITHUB_STEP_SUMMARY
+          echo "The API contract is backward compatible." >> $GITHUB_STEP_SUMMARY
+
+      - name: Archive breaking change report
+        if: always()
+        uses: actions/upload-artifact@v4
+        with:
+          name: api-compatibility-report
+          path: current/fineract-provider/build/swagger-brake/
+          retention-days: 30
+
+      - name: Fail if breaking changes detected
+        if: steps.breaking-check.outcome == 'failure'
+        run: |
+          echo "::error::Breaking API changes detected. See the report above for details."
+          exit 1

.github/workflows/verify-commits.yml

@@ -0,0 +1,47 @@
+# Licensed to the Apache Software Foundation (ASF) under one
+# or more contributor license agreements. See the NOTICE file
+# distributed with this work for additional information
+# regarding copyright ownership. The ASF licenses this file
+# to you under the Apache License, Version 2.0 (the
+# "License"); you may not use this file except in compliance
+# with the License. You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing,
+# software distributed under the License is distributed on an
+# "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+# KIND, either express or implied. See the License for the
+# specific language governing permissions and limitations
+# under the License.
+
+name: Fineract Signed Commits Check
+
+on:
+  pull_request:
+    types: [opened, synchronize, reopened]
+
+permissions:
+  contents: read
+
+jobs:
+  verify-signatures:
+    name: Verify Commit Signatures
+    runs-on: ubuntu-latest
+    timeout-minutes: 1
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v6
+        with:
+          fetch-depth: 0
+
+      - name: Fetch base branch
+        run: git fetch origin ${{ github.base_ref }}
+
+      - name: Verify signatures
+        run: |
+          chmod +x scripts/verify-signed-commits.sh
+          ./scripts/verify-signed-commits.sh \
+            --base-ref origin/${{ github.base_ref }} \
+            --head-ref ${{ github.event.pull_request.head.sha }} \
+            --strict

.github/workflows/verify-liquibase-backward-compatibility.yml

@@ -0,0 +1,163 @@
+name: Verify Liquibase Backward Compatibility
+
+on: [pull_request]
+
+permissions:
+  contents: read
+
+jobs:
+  liquibase-backward-compatibility-check:
+    runs-on: ubuntu-24.04
+    timeout-minutes: 30
+
+    services:
+      postgresql:
+        image: postgres:18.2
+        ports:
+          - 5432:5432
+        env:
+          POSTGRES_USER: root
+          POSTGRES_PASSWORD: postgres
+        options: >-
+          --health-cmd="pg_isready -q -d postgres -U root"
+          --health-interval=5s
+          --health-timeout=2s
+          --health-retries=5
+
+    env:
+      DB_USER: root
+      DB_PASSWORD: postgres
+      DB_NAME: fineract_default
+      TZ: Asia/Kolkata
+
+    steps:
+      - name: Checkout the base branch (`develop`)
+        uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5
+        with:
+          repository: ${{ github.event.pull_request.base.repo.full_name }}
+          ref: ${{ github.event.pull_request.base.ref }}
+          fetch-depth: 0
+
+      - name: Set up JDK 21
+        uses: actions/setup-java@v5
+        with:
+          distribution: 'zulu'
+          java-version: '21'
+
+      - name: Wait for PostgreSQL
+        run: |
+          until pg_isready -h localhost -U $DB_USER; do
+            echo "Waiting for postgres..."
+            sleep 2
+          done
+
+      - name: Init base schema
+        run: |
+          ./gradlew --no-daemon createPGDB -PdbName=fineract_tenants
+          ./gradlew --no-daemon createPGDB -PdbName=$DB_NAME
+
+      - name: Start backend on base branch
+        run: |
+          ./gradlew :fineract-provider:devRun --args="\
+          --spring.datasource.hikari.driverClassName=org.postgresql.Driver \
+          --spring.datasource.hikari.jdbcUrl=jdbc:postgresql://localhost:5432/fineract_tenants \
+          --spring.datasource.hikari.username=root \
+          --spring.datasource.hikari.password=postgres \
+          --fineract.tenant.host=localhost \
+          --fineract.tenant.port=5432 \
+          --fineract.tenant.username=root \
+          --fineract.tenant.password=postgres" &
+          BACKEND_PID=$!
+          echo $BACKEND_PID > backend.pid
+
+          # Wait for Actuator to come up (adjust host/port/path if needed)
+          ACTUATOR_URL="https://localhost:8443/fineract-provider/actuator/health"
+          TIMEOUT_SECONDS=600
+          INTERVAL_SECONDS=2
+
+          echo "Waiting for backend Actuator: $ACTUATOR_URL (timeout ${TIMEOUT_SECONDS}s)..."
+
+          start_ts=$(date +%s)
+          while true; do
+            # If the process died, fail fast
+            if ! kill -0 "$BACKEND_PID" 2>/dev/null; then
+              echo "Backend process exited before Actuator became available."
+              exit 1
+            fi
+
+            # Check endpoint
+            if curl -kfsS "$ACTUATOR_URL" >/dev/null 2>&1; then
+              echo "Actuator is up."
+              break
+            fi
+
+            # Timeout
+            now_ts=$(date +%s)
+            if [ $((now_ts - start_ts)) -ge "$TIMEOUT_SECONDS" ]; then
+              echo "Timed out waiting for Actuator."
+              exit 1
+            fi
+
+            sleep "$INTERVAL_SECONDS"
+          done
+
+      - name: Stop backend
+        run: |
+          kill $(cat backend.pid)
+          sleep 10
+
+      - name: Checkout the PR branch
+        uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5
+        with:
+          repository: ${{ github.event.pull_request.head.repo.full_name }}
+          ref: ${{ github.event.pull_request.head.sha }}
+          fetch-depth: 0
+
+      - name: Start backend on PR branch
+        run: |
+          ./gradlew :fineract-provider:devRun --args="\
+          --spring.datasource.hikari.driverClassName=org.postgresql.Driver \
+          --spring.datasource.hikari.jdbcUrl=jdbc:postgresql://localhost:5432/fineract_tenants \
+          --spring.datasource.hikari.username=root \
+          --spring.datasource.hikari.password=postgres \
+          --fineract.tenant.host=localhost \
+          --fineract.tenant.port=5432 \
+          --fineract.tenant.username=root \
+          --fineract.tenant.password=postgres" &
+          BACKEND_PID=$!
+          echo $BACKEND_PID > backend.pid
+
+          # Wait for Actuator to come up (adjust host/port/path if needed)
+          ACTUATOR_URL="https://localhost:8443/fineract-provider/actuator/health"
+          TIMEOUT_SECONDS=600
+          INTERVAL_SECONDS=2
+
+          echo "Waiting for backend Actuator: $ACTUATOR_URL (timeout ${TIMEOUT_SECONDS}s)..."
+
+          start_ts=$(date +%s)
+          while true; do
+            # If the process died, fail fast
+            if ! kill -0 "$BACKEND_PID" 2>/dev/null; then
+              echo "Backend process exited before Actuator became available."
+              exit 1
+            fi
+
+            # Check endpoint
+            if curl -kfsS "$ACTUATOR_URL" >/dev/null 2>&1; then
+              echo "Actuator is up."
+              break
+            fi
+
+            # Timeout
+            now_ts=$(date +%s)
+            if [ $((now_ts - start_ts)) -ge "$TIMEOUT_SECONDS" ]; then
+              echo "Timed out waiting for Actuator."
+              exit 1
+            fi
+
+            sleep "$INTERVAL_SECONDS"
+          done
+      - name: Stop backend
+        run: |
+          kill $(cat backend.pid)
+          sleep 10

.gitignore

@@ -10,11 +10,40 @@ build
 *.iml
 *.ipr
 *.iws
+*.swp
 *.DS_Store
 .idea
+.vscode
 catalina.base_IS_UNDEFINED/
 keystore.jks
 bin/
-fineract-provider/src/main/resources/application.properties
 .lock
 fineract-provider/out/
+fineract-provider/config/swagger/config.json
+fineract-provider/config/swagger/fineract-input.yaml
+licenses
+**/.asciidoctor/images/*
+**/.asciidoctor/diagram/*
+**/images/diag-*.svg
+
+fineract-provider/src/main/generated/
+
+**/out/
+gradleExp/
+
+.run/
+.java-version
+
+.windsurf/
+
+# Application logs
+fineract-provider/logs/
+logs/
+
+# Output of a local `gradlew devRun`
+devrun.log
+
+# JVM crash dumps. The dev setup runs Fineract, the Angular dev server and Gradle on one
+# machine, so an out-of-memory kill drops these in the repo root.
+hs_err_pid*.log
+replay_pid*.log

.gitpod.yml

@@ -1,42 +0,0 @@
-# Licensed to the Apache Software Foundation (ASF) under one
-# or more contributor license agreements. See the NOTICE file
-# distributed with this work for additional information
-# regarding copyright ownership. The ASF licenses this file
-# to you under the Apache License, Version 2.0 (the
-# "License"); you may not use this file except in compliance
-# with the License. You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing,
-# software distributed under the License is distributed on an
-# "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
-# KIND, either express or implied. See the License for the
-# specific language governing permissions and limitations
-# under the License.
-#
-
-# https://www.gitpod.io
-# https://www.gitpod.io/docs/41_Config_Gitpod_File/
-# https://github.com/gitpod-io/workspace-images/tree/master/mysql
-
-image: gitpod/workspace-mysql
-ports:
-- port: 3306
-  onOpen: ignore
-- port: 8005
-  onOpen: ignore
-- port: 8009
-  onOpen: ignore
-- port: 8080
-- port: 8081
-  onOpen: ignore
-- port: 8443
-tasks:
-- command: |
-      # NB MySQL on GitPod.io is currently quite slow.
-      # similar to .travis.yml, but using authentication_string= instead of password= due to mysql major version difference
-      mysql -e "USE mysql;\nUPDATE user SET authentication_string=PASSWORD('mysql') WHERE user='root';\nFLUSH PRIVILEGES;\n"
-      ./gradlew createDB -PdbName=fineract_tenants
-      ./gradlew createDB -PdbName=fineract_default
-      ./gradlew build -x test

.mailmap

@@ -0,0 +1,39 @@
+# Licensed to the Apache Software Foundation (ASF) under one
+# or more contributor license agreements. See the NOTICE file
+# distributed with this work for additional information
+# regarding copyright ownership. The ASF licenses this file
+# to you under the Apache License, Version 2.0 (the
+# "License"); you may not use this file except in compliance
+# with the License. You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing,
+# software distributed under the License is distributed on an
+# "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+# KIND, either express or implied. See the License for the
+# specific language governing permissions and limitations
+# under the License.
+
+# .mailmap unifies differences in commit names and emails, and shortens committers' names.
+# .mailmap format is a bit weird, e.g. https://github.com/sympy/sympy/wiki/Using-.mailmap explains it.
+# .mailmap official doc is on https://git-scm.com/docs/git-shortlog#_mapping_authors
+#
+# Running `git log --format='%an <%ae>' | sort -u` -VS- `git log --format='%aN <%aE>' | sort -u` best illustrates what this does.
+# It's useful e.g. in `git log` or `git shortlog --numbered --email --no-merges 1.4.0..HEAD` et al.
+
+Michael <mike@vorburger.ch>
+Michael <mike@vorburger.ch> Michael Vorburger ⛑️  <vorburger@apache.org>
+Petri <petri@tuomola.org>
+Petri <petri@tuomola.org> Petri Tuomola <ptuomola@users.noreply.github.com>
+Renovate <bot@renovateapp.com>
+Aleks <aleks@apache.org>
+Aleks <aleks@apache.org> Aleksandar Vidakovic <vidakovic@users.noreply.github.com>
+Aleks <aleks@apache.org> Aleksandar Vidakovic <cheetah@monkeysintown.com>
+Manthan <manthan.surkar@gmail.com>
+Manthan <manthan.surkar@gmail.com> Manthan Surkar <42006277+thesmallstar@users.noreply.github.com>
+Chinmay <chinmaykulkarni8@gmail.com>
+Chinmay <chinmaykulkarni8@gmail.com> Grandolf49 <chinmaykulkarni8@gmail.com>
+Chinmay <chinmaykulkarni8@gmail.com> Chinmay Kulkarni <30969403+Grandolf49@users.noreply.github.com>
+Vincent Fuchs <vincent.fuchs@gefa.de>
+Vincent Fuchs <vincent.fuchs@gefa.de> Vincent Fuchs <vincent.fuchs@gmail.com>

.profileconfig.json

@@ -0,0 +1,64 @@
+{
+    "jfrConfig": {
+        "settings": "profile"
+    },
+    "asyncProfilerConfig": {
+        "jfrsync": true,
+        "alloc": true,
+        "event": "wall",
+        "misc": ""
+    },
+    "file": "$PROJECT_DIR/profile.jfr",
+    "conversionConfig": {
+        "nonProjectPackagePrefixes": [
+            "java.",
+            "javax.",
+            "kotlin.",
+            "jdk.",
+            "com.google.",
+            "org.apache.",
+            "org.spring.",
+            "sun.",
+            "scala."
+        ],
+        "enableMarkers": true,
+        "initialVisibleThreads": 10,
+        "initialSelectedThreads": 10,
+        "includeGCThreads": false,
+        "includeInitialSystemProperty": false,
+        "includeInitialEnvironmentVariables": false,
+        "includeSystemProcesses": false,
+        "ignoredEvents": [
+            "jdk.ActiveSetting",
+            "jdk.ActiveRecording",
+            "jdk.BooleanFlag",
+            "jdk.IntFlag",
+            "jdk.DoubleFlag",
+            "jdk.LongFlag",
+            "jdk.NativeLibrary",
+            "jdk.StringFlag",
+            "jdk.UnsignedIntFlag",
+            "jdk.UnsignedLongFlag",
+            "jdk.InitialSystemProperty",
+            "jdk.InitialEnvironmentVariable",
+            "jdk.SystemProcess",
+            "jdk.ModuleExport",
+            "jdk.ModuleRequire"
+        ],
+        "minRequiredItemsPerThread": 3
+    },
+    "additionalGradleTargets": [
+        {
+            "targetPrefix": "quarkus",
+            "optionForVmArgs": "-Djvm.args",
+            "description": "Example quarkus config, adding profiling arguments via -Djvm.args option to the Gradle task run"
+        }
+    ],
+    "additionalMavenTargets": [
+        {
+            "targetPrefix": "quarkus:",
+            "optionForVmArgs": "-Djvm.args",
+            "description": "Example quarkus config, adding profiling arguments via -Djvm.args option to the Maven goal run"
+        }
+    ]
+}

.qwen/settings.json

@@ -0,0 +1,33 @@
+{
+  "permissions": {
+    "allow": [
+      "Bash(type *)",
+      "mcp__idea__get_symbol_info",
+      "Bash(gradlew *)",
+      "Bash(select-string *)",
+      "Bash(select-object *)",
+      "Bash(dir *)",
+      "Bash(findstr *)",
+      "Bash(./gradlew *)",
+      "Bash(gradlew.bat *)",
+      "Bash(taskkill *)",
+      "Bash(timeout *)",
+      "Bash(.\\gradlew.bat *)",
+      "Bash(get-content *)",
+      "Bash(tasklist)",
+      "Bash(curl *)",
+      "Bash(netstat *)",
+      "Bash(curl.exe *)",
+      "Bash(rmdir *)",
+      "mcp__idea__build_project",
+      "Bash(.\\gradlew *)",
+      "Bash(.\\clean_build.bat)",
+      "mcp__idea__find_files_by_name_keyword",
+      "mcp__idea__search_in_files_by_text",
+      "mcp__idea__get_file_text_by_path",
+      "mcp__idea__search_in_files_by_regex",
+      "Bash(powershell *)"
+    ]
+  },
+  "$version": 3
+}

.qwen/settings.json.orig

@@ -0,0 +1,7 @@
+{
+  "permissions": {
+    "allow": [
+      "Bash(type *)"
+    ]
+  }
+}

.theia/settings.json

@@ -5,4 +5,4 @@
       "**/.settings": true,
       "**/.factorypath": true
    }
-}
+}

.travis.yml

@@ -1,78 +0,0 @@
-# Licensed to the Apache Software Foundation (ASF) under one
-# or more contributor license agreements. See the NOTICE file
-# distributed with this work for additional information
-# regarding copyright ownership. The ASF licenses this file
-# to you under the Apache License, Version 2.0 (the
-# "License"); you may not use this file except in compliance
-# with the License. You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing,
-# software distributed under the License is distributed on an
-# "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
-# KIND, either express or implied. See the License for the
-# specific language governing permissions and limitations
-# under the License.
-#
-
-# https://docs.travis-ci.com/user/reference/linux/
-# Must use a fixed distribution (and remember to occassionally upgrade..)
-# to avoid surprise changes such as https://issues.apache.org/jira/browse/FINERACT-763
-dist: bionic
-
-language: generic
-
-services:
-  - mysql
-  - docker
-
-addons:
-  apt:
-    packages:
-    # https://httpie.org is used by the docker-compose test below
-    - httpie
-
-# See https://issues.apache.org/jira/browse/FINERACT-937 for background re. what below is all about..
-# We basically remove the outdated OpenJDK 11.0.2 which Travis image grabbed from java.net in
-# https://github.com/travis-ci/travis-cookbooks/blob/master/cookbooks/travis_jdk/files/install-jdk.sh#L200
-# (which has 11.0.2 hard-coded!), and instead replace it with the latest openjdk-11-jdk-headless Ubuntu package.
-# NB /usr/local/lib/jvm/openjdk11/bin is also on the PATH, but there's no need to change it (because we rm -rf anyway)
-before_install:
-  - echo $JAVA_HOME
-  - which java
-  - sudo rm -rf /usr/local/lib/jvm/
-  - sudo apt-get install -y openjdk-11-jdk-headless
-  - export JAVA_HOME=/usr/lib/jvm/java-11-openjdk-amd64/
-  - which java
-  - java -version
-  - $JAVA_HOME/bin/java -version
-  - echo "USE mysql;\nALTER USER 'root'@'localhost' IDENTIFIED BY 'mysql';\n" | mysql -u root
-  - mysql -u root -pmysql -e 'CREATE DATABASE IF NOT EXISTS `fineract_tenants`;'
-  - mysql -u root -pmysql -e 'CREATE DATABASE IF NOT EXISTS `fineract_default`;'
-# Hardcoding the time zone is a temporary fix for https://issues.apache.org/jira/browse/FINERACT-723
-  - export TZ=Asia/Kolkata
-
-# https://docs.travis-ci.com/user/languages/java/#caching
-before_cache:
-  - rm -f  $HOME/.gradle/caches/modules-2/modules-2.lock
-  - rm -fr $HOME/.gradle/caches/*/plugin-resolution/
-cache:
-  directories:
-    - $HOME/.gradle/caches/
-    - $HOME/.gradle/wrapper/
-    - $HOME/.m2
-
-# NOTE: We used to run with --info, which is quite a bit more verbose, but is VERY useful to understand failures on Travis,
-# where you do not have access to any files like build/reports/tests/index.html, only the Console.
-# @see http://mrhaki.blogspot.ch/2013/05/gradle-goodness-show-more-information.html
-# @see http://forums.gradle.org/gradle/topics/whats_new_in_gradle_1_1_test_logging for alternative
-# https://jira.apache.org/jira/browse/FINERACT-732 removed that again, because it made Travis CI fail.
-script:
-  - date
-# using "&&" instead of several "-" means that integrationTest does not run if test fails,
-# and Docker test does not run if integration test fails, which makes PR failure easier to understand.
-# @see https://docs.travis-ci.com/user/job-lifecycle/#customizing-the-build-phase
-  - ./gradlew --console=plain licenseMain licenseTest licenseIntegrationTest check  &&  ./gradlew --console=plain integrationTest --fail-fast  &&  sudo service mysql stop  &&  docker-compose build  &&  docker-compose up -d  &&  sleep 30s  &&  http --verify=no --timeout 240 --check-status get https://localhost:8443/fineract-provider/actuator/health  &&  (( $(http --verify=no --timeout 30 --check-status --body get https://localhost:8443/fineract-provider/actuator/info | wc --chars) > 100 ))
-# We stop the mysql system service when running the Docker test to avoid port 3306 conflicts (unless we run the mysql in docker-compose on another port; req. FINERACT-773)
-# The fany /actuator/info test makes sure that has more than 100 characters of JSON to test that the git.properties worked (see FINERACT-983)

APACHE_LICENSETEXT.md

@@ -13,4 +13,4 @@ software distributed under the License is distributed on an
 "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
 KIND, either express or implied. See the License for the
 specific language governing permissions and limitations
-under the License.
+under the License.

CBS_CIN_DIN_Verification.postman_collection.json

@@ -0,0 +1,365 @@
+{
+  "info": {
+    "name": "CBS — CIN & DIN Verification (LincPay eKYC)",
+    "description": "Postman collection for CIN (Company Identification Number) and DIN (Director Identification Number) verification via the CBS Fineract KYC module.\n\nFlow:\n1. Create/update a KYC record with cinNumber and/or dinNumber\n2. Trigger verify-cin or verify-din command\n3. The backend calls LincPay eKYC API (validate-company / validate-director)\n4. On success, cinVerified/dinVerified flags are set on the KYC record",
+    "schema": "https://schema.getpostman.com/json/collection/v2.1.0/collection.json"
+  },
+  "variable": [
+    {
+      "key": "base_url",
+      "value": "https://localhost:8443/fineract-provider/api/v1",
+      "description": "Fineract API base URL"
+    },
+    {
+      "key": "tenant_id",
+      "value": "default",
+      "description": "Tenant identifier"
+    },
+    {
+      "key": "username",
+      "value": "mifos",
+      "description": "API username"
+    },
+    {
+      "key": "password",
+      "value": "password",
+      "description": "API password"
+    },
+    {
+      "key": "client_id",
+      "value": "1",
+      "description": "Client ID for KYC operations"
+    },
+    {
+      "key": "kyc_id",
+      "value": "1",
+      "description": "KYC record ID"
+    },
+    {
+      "key": "cin_number",
+      "value": "U12345MH2020PTC123456",
+      "description": "21-character CIN for company verification"
+    },
+    {
+      "key": "din_number",
+      "value": "12345678",
+      "description": "8-digit DIN for director verification"
+    }
+  ],
+  "auth": {
+    "type": "basic",
+    "basic": [
+      { "key": "username", "value": "{{username}}", "type": "string" },
+      { "key": "password", "value": "{{password}}", "type": "string" }
+    ]
+  },
+  "item": [
+    {
+      "name": "1. Initiate KYC with CIN & DIN",
+      "item": [
+        {
+          "name": "Initiate KYC (Non-Individual with CIN & DIN)",
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "exec": [
+                  "pm.test('Status code is 200', function () {",
+                  "    pm.response.to.have.status(200);",
+                  "});",
+                  "",
+                  "pm.test('KYC record created', function () {",
+                  "    var json = pm.response.json();",
+                  "    pm.expect(json).to.have.property('resourceId');",
+                  "    pm.collectionVariables.set('kyc_id', json.resourceId);",
+                  "});"
+                ],
+                "type": "text/javascript"
+              }
+            }
+          ],
+          "request": {
+            "method": "POST",
+            "header": [
+              { "key": "Content-Type", "value": "application/json" },
+              { "key": "Fineract-Platform-TenantId", "value": "{{tenant_id}}" }
+            ],
+            "body": {
+              "mode": "raw",
+              "raw": "{\n  \"kycType\": 2,\n  \"riskCategory\": 2,\n  \"panNumber\": \"ABCDE1234F\",\n  \"gstinNumber\": \"27ABCDE1234F1Z5\",\n  \"cinNumber\": \"{{cin_number}}\",\n  \"dinNumber\": \"{{din_number}}\",\n  \"remarks\": \"Non-individual KYC with CIN and DIN\"\n}"
+            },
+            "url": {
+              "raw": "{{base_url}}/clients/{{client_id}}/kyc",
+              "host": ["{{base_url}}"],
+              "path": ["clients", "{{client_id}}", "kyc"]
+            },
+            "description": "Initiate a KYC record for a non-individual client with CIN and DIN numbers.\n\n- kycType: 2 = NON_INDIVIDUAL\n- riskCategory: 1=LOW, 2=MEDIUM, 3=HIGH\n- cinNumber: 21-character Corporate Identification Number\n- dinNumber: 8-digit Director Identification Number"
+          },
+          "response": []
+        },
+        {
+          "name": "Update KYC — Add CIN & DIN",
+          "request": {
+            "method": "PUT",
+            "header": [
+              { "key": "Content-Type", "value": "application/json" },
+              { "key": "Fineract-Platform-TenantId", "value": "{{tenant_id}}" }
+            ],
+            "body": {
+              "mode": "raw",
+              "raw": "{\n  \"cinNumber\": \"{{cin_number}}\",\n  \"dinNumber\": \"{{din_number}}\"\n}"
+            },
+            "url": {
+              "raw": "{{base_url}}/clients/{{client_id}}/kyc/{{kyc_id}}",
+              "host": ["{{base_url}}"],
+              "path": ["clients", "{{client_id}}", "kyc", "{{kyc_id}}"]
+            },
+            "description": "Update an existing KYC record to add CIN and/or DIN numbers before triggering verification."
+          },
+          "response": []
+        }
+      ],
+      "description": "Create or update a KYC record with CIN and DIN numbers before triggering verification."
+    },
+    {
+      "name": "2. CIN Verification (Company)",
+      "item": [
+        {
+          "name": "Verify CIN — Trigger LincPay validate-company",
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "exec": [
+                  "pm.test('Status code is 200', function () {",
+                  "    pm.response.to.have.status(200);",
+                  "});",
+                  "",
+                  "pm.test('CIN verified successfully', function () {",
+                  "    var json = pm.response.json();",
+                  "    pm.expect(json.changes).to.have.property('cinVerified');",
+                  "    pm.expect(json.changes.cinVerified).to.be.true;",
+                  "});",
+                  "",
+                  "pm.test('cinVerifiedOn date is set', function () {",
+                  "    var json = pm.response.json();",
+                  "    pm.expect(json.changes).to.have.property('cinVerifiedOn');",
+                  "});"
+                ],
+                "type": "text/javascript"
+              }
+            }
+          ],
+          "request": {
+            "method": "POST",
+            "header": [
+              { "key": "Content-Type", "value": "application/json" },
+              { "key": "Fineract-Platform-TenantId", "value": "{{tenant_id}}" }
+            ],
+            "body": {
+              "mode": "raw",
+              "raw": "{}"
+            },
+            "url": {
+              "raw": "{{base_url}}/clients/{{client_id}}/kyc/{{kyc_id}}?command=verify-cin",
+              "host": ["{{base_url}}"],
+              "path": ["clients", "{{client_id}}", "kyc", "{{kyc_id}}"],
+              "query": [
+                { "key": "command", "value": "verify-cin" }
+              ]
+            },
+            "description": "Trigger CIN verification via LincPay MCA API.\n\n**Backend flow:**\n1. Reads cinNumber from the KYC record\n2. Calls LincPay: POST https://ekyc.lincpay.in/EKYC/ekyc/validate-company\n   Body: { \"apiKey\": \"...\", \"cin\": \"U12345MH2020PTC123456\", \"secretKey\": \"...\" }\n3. On success: marks cinVerified=true, cinVerifiedOn=today\n4. On failure: returns error with vendor message\n\n**Prerequisites:**\n- KYC record must exist with a cinNumber set\n- KYC must not be in REJECTED status"
+          },
+          "response": [
+            {
+              "name": "200 — CIN Verified Successfully",
+              "originalRequest": {
+                "method": "POST",
+                "header": [],
+                "body": { "mode": "raw", "raw": "{}" },
+                "url": { "raw": "{{base_url}}/clients/1/kyc/1?command=verify-cin" }
+              },
+              "status": "OK",
+              "code": 200,
+              "_postman_previewlanguage": "json",
+              "body": "{\n  \"officeId\": 1,\n  \"clientId\": 1,\n  \"resourceId\": 1,\n  \"changes\": {\n    \"cinVerified\": true,\n    \"cinVerifiedOn\": [2026, 4, 3],\n    \"kycStatus\": 200\n  }\n}"
+            },
+            {
+              "name": "400 — CIN Not Set",
+              "status": "Bad Request",
+              "code": 400,
+              "_postman_previewlanguage": "json",
+              "body": "{\n  \"developerMessage\": \"CIN number is not set on this KYC record. Update the KYC record first.\",\n  \"httpStatusCode\": \"503\",\n  \"defaultUserMessage\": \"CIN number is not set on this KYC record. Update the KYC record first.\",\n  \"userMessageGlobalisationCode\": \"error.msg.client.kyc.cin.not.found\"\n}"
+            }
+          ]
+        },
+        {
+          "name": "Direct LincPay CIN API (for testing)",
+          "request": {
+            "method": "POST",
+            "header": [
+              { "key": "Content-Type", "value": "application/json" },
+              { "key": "accept", "value": "*/*" }
+            ],
+            "body": {
+              "mode": "raw",
+              "raw": "{\n  \"apiKey\": \"YOUR_API_KEY\",\n  \"cin\": \"{{cin_number}}\",\n  \"secretKey\": \"YOUR_SECRET_KEY\"\n}"
+            },
+            "url": {
+              "raw": "https://ekyc.lincpay.in/EKYC/ekyc/validate-company",
+              "protocol": "https",
+              "host": ["ekyc", "lincpay", "in"],
+              "path": ["EKYC", "ekyc", "validate-company"]
+            },
+            "description": "Direct call to LincPay validate-company API for testing.\nReplace apiKey and secretKey with actual credentials."
+          },
+          "response": []
+        }
+      ],
+      "description": "CIN (Corporate Identification Number) verification flow. CIN is a 21-character alphanumeric code allotted by MCA to companies registered under the Companies Act."
+    },
+    {
+      "name": "3. DIN Verification (Director)",
+      "item": [
+        {
+          "name": "Verify DIN — Trigger LincPay validate-director",
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "exec": [
+                  "pm.test('Status code is 200', function () {",
+                  "    pm.response.to.have.status(200);",
+                  "});",
+                  "",
+                  "pm.test('DIN verified successfully', function () {",
+                  "    var json = pm.response.json();",
+                  "    pm.expect(json.changes).to.have.property('dinVerified');",
+                  "    pm.expect(json.changes.dinVerified).to.be.true;",
+                  "});",
+                  "",
+                  "pm.test('dinVerifiedOn date is set', function () {",
+                  "    var json = pm.response.json();",
+                  "    pm.expect(json.changes).to.have.property('dinVerifiedOn');",
+                  "});"
+                ],
+                "type": "text/javascript"
+              }
+            }
+          ],
+          "request": {
+            "method": "POST",
+            "header": [
+              { "key": "Content-Type", "value": "application/json" },
+              { "key": "Fineract-Platform-TenantId", "value": "{{tenant_id}}" }
+            ],
+            "body": {
+              "mode": "raw",
+              "raw": "{}"
+            },
+            "url": {
+              "raw": "{{base_url}}/clients/{{client_id}}/kyc/{{kyc_id}}?command=verify-din",
+              "host": ["{{base_url}}"],
+              "path": ["clients", "{{client_id}}", "kyc", "{{kyc_id}}"],
+              "query": [
+                { "key": "command", "value": "verify-din" }
+              ]
+            },
+            "description": "Trigger DIN verification via LincPay MCA API.\n\n**Backend flow:**\n1. Reads dinNumber from the KYC record\n2. Calls LincPay: POST https://ekyc.lincpay.in/EKYC/ekyc/validate-director\n   Body: { \"apiKey\": \"...\", \"din\": \"12345678\", \"secretKey\": \"...\" }\n3. On success: marks dinVerified=true, dinVerifiedOn=today\n4. On failure: returns error with vendor message\n\n**Prerequisites:**\n- KYC record must exist with a dinNumber set\n- KYC must not be in REJECTED status"
+          },
+          "response": [
+            {
+              "name": "200 — DIN Verified Successfully",
+              "originalRequest": {
+                "method": "POST",
+                "header": [],
+                "body": { "mode": "raw", "raw": "{}" },
+                "url": { "raw": "{{base_url}}/clients/1/kyc/1?command=verify-din" }
+              },
+              "status": "OK",
+              "code": 200,
+              "_postman_previewlanguage": "json",
+              "body": "{\n  \"officeId\": 1,\n  \"clientId\": 1,\n  \"resourceId\": 1,\n  \"changes\": {\n    \"dinVerified\": true,\n    \"dinVerifiedOn\": [2026, 4, 3],\n    \"kycStatus\": 200\n  }\n}"
+            },
+            {
+              "name": "400 — DIN Not Set",
+              "status": "Bad Request",
+              "code": 400,
+              "_postman_previewlanguage": "json",
+              "body": "{\n  \"developerMessage\": \"DIN number is not set on this KYC record. Update the KYC record first.\",\n  \"httpStatusCode\": \"503\",\n  \"defaultUserMessage\": \"DIN number is not set on this KYC record. Update the KYC record first.\",\n  \"userMessageGlobalisationCode\": \"error.msg.client.kyc.din.not.found\"\n}"
+            }
+          ]
+        },
+        {
+          "name": "Direct LincPay DIN API (for testing)",
+          "request": {
+            "method": "POST",
+            "header": [
+              { "key": "Content-Type", "value": "application/json" },
+              { "key": "accept", "value": "*/*" }
+            ],
+            "body": {
+              "mode": "raw",
+              "raw": "{\n  \"apiKey\": \"YOUR_API_KEY\",\n  \"din\": \"{{din_number}}\",\n  \"secretKey\": \"YOUR_SECRET_KEY\"\n}"
+            },
+            "url": {
+              "raw": "https://ekyc.lincpay.in/EKYC/ekyc/validate-director",
+              "protocol": "https",
+              "host": ["ekyc", "lincpay", "in"],
+              "path": ["EKYC", "ekyc", "validate-director"]
+            },
+            "description": "Direct call to LincPay validate-director API for testing.\nReplace apiKey and secretKey with actual credentials."
+          },
+          "response": []
+        }
+      ],
+      "description": "DIN (Director Identification Number) verification flow. DIN is an 8-digit unique number allotted by MCA to company directors."
+    },
+    {
+      "name": "4. Get KYC Record",
+      "item": [
+        {
+          "name": "Get KYC Record (check CIN/DIN verification status)",
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "exec": [
+                  "pm.test('Status code is 200', function () {",
+                  "    pm.response.to.have.status(200);",
+                  "});",
+                  "",
+                  "pm.test('CIN fields present', function () {",
+                  "    var json = pm.response.json();",
+                  "    pm.expect(json).to.have.property('cinNumber');",
+                  "    pm.expect(json).to.have.property('cinVerified');",
+                  "});",
+                  "",
+                  "pm.test('DIN fields present', function () {",
+                  "    var json = pm.response.json();",
+                  "    pm.expect(json).to.have.property('dinNumber');",
+                  "    pm.expect(json).to.have.property('dinVerified');",
+                  "});"
+                ],
+                "type": "text/javascript"
+              }
+            }
+          ],
+          "request": {
+            "method": "GET",
+            "header": [
+              { "key": "Fineract-Platform-TenantId", "value": "{{tenant_id}}" }
+            ],
+            "url": {
+              "raw": "{{base_url}}/clients/{{client_id}}/kyc/{{kyc_id}}",
+              "host": ["{{base_url}}"],
+              "path": ["clients", "{{client_id}}", "kyc", "{{kyc_id}}"]
+            },
+            "description": "Retrieve the KYC record to verify CIN/DIN verification status after running the verify commands."
+          },
+          "response": []
+        }
+      ]
+    }
+  ]
+}

CODE_OF_CONDUCT.md

@@ -0,0 +1,5 @@
+This project follows
+[the Apache Software Foundation (ASF) Code of Conduct](https://www.apache.org/foundation/policies/conduct.html).
+
+Violations of the code of conduct may be reported directly the to ASF or
+the Apache Fineract's Project Management Committee at private@fineract.apache.org.

CONTRIBUTING.md

@@ -0,0 +1,296 @@
+# Contributing
+
+Hello there!
+
+First of all, **Thank You** for contributing to Apache Fineract! We are grateful for your interest in this project.
+
+Please join the [developer mailing list](https://fineract.apache.org/#contribute), if you have not already done so, as this is where discussions about this project take place - say _Hi_ there! Please also have a quick look at the [Code of Conduct](CODE_OF_CONDUCT.md).
+
+The [JIRA Dashboard](https://issues.apache.org/jira/secure/Dashboard.jspa?selectPageId=12335824) shows what's going on. Create a login - it can take a day or two. If you face difficulties, ask on the mailing list.
+
+You don't need to be a committer to provide pull requests, but [Becoming a Committer](https://cwiki.apache.org/confluence/display/FINERACT/Becoming+a+Committer) explains the process of becoming one - just in case...
+
+
+## Developer How To's
+
+### How to run tests
+
+#### Unit tests
+
+Here's how to run the set of relatively fast and independent Fineract tests:
+
+```bash
+./gradlew test -x :twofactor-tests:test -x :oauth2-tests:test -x :integration-tests:test
+```
+
+This runs nearly 1,000 tests and completes in a few minutes on decent hardware.
+They shouldn't need any special servers/services running.
+
+#### Integration tests
+
+Running tests with external dependencies is a multi-step process with many moving parts.
+Sometimes there are arbitrary failures and the prerequisite setup can be daunting.
+A full local integration test run (on a developer workstation) covering every possible test using every external service and every supported relational database engine could take an entire day - and that's assuming everything is properly configured and runs as expected.
+
+Right now we depend on GitHub to know if "the build" is passing (it's actually multiple builds).
+The authoritative source of truth for what commands/services/tests to run, how, and when are the files in `.github/workflows/`.
+Output from runs based on those configuration files appears at <https://github.com/apache/fineract/actions>.
+
+Incorrect default Java-related executables may cause test failures.
+To fix this on Debian and Ubuntu systems, run the following:
+
+```bash
+export JAVA_HOME=/usr/lib/jvm/zulu21
+sudo update-alternatives --set java $JAVA_HOME/bin/java
+sudo update-alternatives --set javac $JAVA_HOME/bin/javac
+sudo update-alternatives --set javadoc $JAVA_HOME/bin/javadoc
+```
+
+This would correct, for example, a [class file version error](https://en.wikipedia.org/wiki/Java_class_file#General_layout).
+You might see something like this if a Java 11 executable (class file format version 56) was the system default, but the integration tests were using Java 21 (class file format version 65):
+
+> UnsupportedClassVersionError: com.example.package/ClassName has been compiled by a more recent version of the Java Runtime (class file version 65.0), this version of the Java Runtime only recognizes class file versions up to 55.0
+
+The GitHub builds are run in [short-lived virtual machines](https://docs.github.com/en/actions/using-github-hosted-runners/using-github-hosted-runners), so locally reproducing the same may require additional effort, such as these extra clean-up procedures:
+
+```bash
+# Might fix `error: cannot find symbol` or other intermittent failures.
+# `doc` here is a placeholder for any task(s) you are trying to run.
+# 💚 This is generally very safe to run between builds.
+./gradlew --refresh-dependencies doc
+
+# Destroy anything untracked by git.
+# ⚠️ This may delete something important, e.g. a finely-tuned IDE configuration.
+git clean --force -dx
+
+# Destroy various caches and configs.
+# ⚠️ This may delete gibibytes of cached data, making the next build very slow.
+rm -rf ~/.gradle ~/.m2 /tmp/cargo*
+
+# Destroy any Java containers left running.
+# 💚 This is generally very safe to run between builds.
+ps auxwww | grep [c]argo | awk '{ print $2 }' | xargs -r kill
+```
+
+Integration test runs such as
+```bash
+./gradlew --no-daemon --console=plain test -x :twofactor-tests:test \
+  -x :oauth2-tests:test :fineract-e2e-tests-runner:test -PdbType=postgresql
+```
+in `.github/workflows/build-postgresql.yml` often take an hour or longer to complete.
+If you notice the `:integration-tests:test` task taking significantly less time, say, one minute, gradle may be skipping it.
+Look for something like this in the test output:
+
+> Task :integration-tests:test UP-TO-DATE 👀
+Custom actions are attached to task ':integration-tests:test'.
+Build cache key for task ':integration-tests:test' is 6aeeec3f58bf9703d4c100fbaa657f5c
+Skipping task ':integration-tests:test' as it is up-to-date.
+Resolve mutations for :integration-tests:cargoStopLocal (Thread[Execution worker Thread 11,5,main]) started.
+:integration-tests:cargoStopLocal (Thread[Execution worker Thread 11,5,main]) started.
+
+
+(This is with the `--info` gradle argument with eyeballs added for emphasis.)
+The `--rerun-tasks` gradle argument may help, or you can try destroying `~/.gradle` and other clean-up procedures as indicated above, then re-running tests.
+This is useful for repeated test runs (say, for timing) when gradle would otherwise assume a task is "up-to-date" and not re-run it.
+
+See the next section for testing in Eclipse and [here](https://fineract-academy.com) for testing in IntelliJ.
+
+## Recommended IDEs
+
+Apache Fineract can be developed using multiple IDEs. The most commonly used and supported IDEs are:
+
+- **Eclipse IDE** – Fully supported and commonly used within the community.
+- **IntelliJ IDEA (Community or Ultimate)** – Recommended for most developers due to excellent Gradle support and debugging experience.
+
+The sections below provide setup guidance for each IDE.
+
+### How to run and debug in Eclipse IDE
+
+It is possible to run Fineract in Eclipse IDE and also to debug Fineract using Eclipse's debugging facilities.
+To do this, you need to create the Eclipse project files and import the project into an Eclipse workspace:
+
+1. Create Eclipse project files into the Fineract project by running `./gradlew cleanEclipse eclipse`
+2. Import the fineract-provider project into your Eclipse workspace (File->Import->General->Existing Projects into Workspace, choose root directory fineract/fineract-provider)
+3. Do a clean build of the project in Eclipse (Project->Clean...)
+3. Run / debug Fineract by right clicking on org.apache.fineract.ServerApplication class and choosing Run As / Debug As -> Java Application. All normal Eclipse debugging features (breakpoints, watchpoints etc) should work as expected.
+
+If you change the project settings (dependencies etc) in Gradle, you should redo step 1 and refresh the project in Eclipse.
+
+You can also use Eclipse JUnit support to run tests in Eclipse (Run As->JUnit Test)
+
+Finally, modifying source code in Eclipse automatically triggers hot code replace to a running instance, allowing you to immediately test your changes
+
+## How to run and debug in IntelliJ IDEA
+
+IntelliJ IDEA provides strong Gradle integration and is recommended for most new contributors.
+
+### Prerequisites
+- IntelliJ IDEA (Community Edition is sufficient)
+- Java 21 (as required by Fineract)
+- Gradle (wrapper included in the repository)
+
+### Steps
+
+1. Open IntelliJ IDEA and select **Open**
+2. Choose the root `fineract` directory
+3. When prompted, import the project as a **Gradle project**
+4. Use the Gradle wrapper (`gradlew`) when asked
+5. Ensure the correct JDK is selected (**Java 21**)
+6. After import completes, run:
+   - `org.apache.fineract.ServerApplication` as a **Java Application**
+
+### Notes
+- IntelliJ may take several minutes to index the project on first open
+- If you encounter build issues, try running `./gradlew clean build` from the terminal
+
+How to download Gradle wrapper
+---
+The file gradle/wrapper/gradle-wrapper.jar binary is checked into this projects Git source repository,
+but won't exist in your copy of the Fineract codebase if you downloaded a released source archive from apache.org.
+In that case, you need to download it using the commands below:
+```bash
+wget -P gradle/wrapper https://github.com/apache/fineract/raw/develop/gradle/wrapper/gradle-wrapper.jar
+```
+or
+```bash
+curl -L https://github.com/apache/fineract/raw/develop/gradle/wrapper/gradle-wrapper.jar > \
+    gradle/wrapper/gradle-wrapper.jar
+```
+
+### How to run Apache RAT (Release Audit Tool)
+
+1. Extract the archive file to your local directory.
+2. Run `./gradlew rat`. A report will be generated under build/reports/rat/rat-report.txt
+
+
+### How to build documentation
+
+Run the following command:
+
+```bash
+./gradlew doc
+```
+
+Some dependencies are required (e.g. Ghostscript, Graphviz), see [.github/workflows/build-documentation.yml](https://github.com/apache/fineract/tree/develop/.github/workflows/build-documentation.yml) for hints.
+
+IDEs such as IntelliJ are useful for editing the AsciiDoc source files while providing a live rendered preview.
+
+HTML rendered from the AsciiDoc source files is also available online at [https://fineract.apache.org/docs/current/](https://fineract.apache.org/docs/current/).
+
+
+## How We Code
+
+### Checkstyle and Spotless
+
+This project enforces its code conventions using [checkstyle.xml](config/checkstyle/checkstyle.xml) through Checkstyle and [fineractdev-formatter.xml](config/fineractdev-formatter.xml) through Spotless. They are configured to run automatically during the normal Gradle build, and fail if there are any violations detected. You can run the following command to automatically fix spotless violations:
+```bash
+./gradlew spotlessApply
+```
+Since some checks are present in both Checkstyle and Spotless, the same command can help you fix some of the Checkstyle violations too.
+
+You can also check solely for Spotless violations, but normally don't have to, because regular builds already include this:
+```bash
+./gradlew spotlessCheck
+```
+
+We recommend that you configure your favourite Java IDE to match those conventions. For Eclipse, you can go to
+Window > Java > Code Style and import the aforementioned [config/fineractdev-formatter.xml](config/fineractdev-formatter.xml) under formatter section and [config/fineractdev-cleanup.xml](config/fineractdev-cleanup.xml) under cleanup section.
+
+You could also use Checkstyle directly in your IDE, but you don't have to: it may just be more convenient for you.  For Eclipse, use https://checkstyle.org/eclipse-cs/ and load our checkstyle.xml into it. For IntelliJ you can use [CheckStyle-IDEA](https://plugins.jetbrains.com/plugin/1065-checkstyle-idea).
+
+
+### Code Coverage
+
+Changed or added code should ideally have test coverage.
+
+The project uses Jacoco to measure unit tests code coverage. To generate a report run the following command:
+```bash
+./gradlew clean build jacocoTestReport
+```
+Generated reports can be found in the build/code-coverage directory.
+
+
+### Lombok
+
+The project uses [Lombok](https://projectlombok.org/) to reduce boilerplate code. Configuration is in [lombok.config](lombok.config).
+
+* Use `@Getter` / `@Setter` / `@NoArgsConstructor` on JPA entities. Never use `@Data` on entities (causes JPA lazy loading issues).
+* Use `@RequiredArgsConstructor` on service classes for constructor-based dependency injection.
+* Use `@Slf4j` for logging instead of manually declaring loggers.
+* Use `@Data` for simple DTOs (includes getters, setters, toString, equals, hashCode).
+* Use `@Builder` with `@Builder.Default` for configuration classes and complex object construction.
+* Never use `@SneakyThrows` - handle exceptions explicitly.
+
+
+### Error Handling
+
+* When catching exceptions, either rethrow them, or log them.  Either way, include the root cause by using `catch (SomeException e)` and then either `throw AnotherException("..details..", e)` or `LOG.error("...context...", e)`.
+* Completely empty catch blocks are VERY suspicious.  Are you sure that you want to just "swallow" an exception?  Really, 100% totally absolutely sure?? ;-) Such "normal exceptions which just happen sometimes but are actually not really errors" are almost always a bad idea, can be a performance issue, and typically are an indication of another problem - e.g. the use of a wrong API which throws an Exception for an expected condition, when really you would want to use another API that instead returns something empty or optional.
+* In tests, you'll typically never catch exceptions, but just propagate them, with `@Test void testXYZ() throws SomeException, AnotherException`..., so that the test fails if the exception happens.  Unless you actually really want to test for the occurrence of a problem - in that case, use [JUnit's Assert.assertThrows()](https://github.com/junit-team/junit4/wiki/Exception-testing) (but not `@Test(expected = SomeException.class)`).
+* Never catch `NullPointerException` & Co.
+
+### Logging
+
+* We use [SLF4J](http://www.slf4j.org) as our logging API.
+* Never, ever, use `System.out` and `System.err` or `printStackTrace()` anywhere, but always `LOG.info()` or `LOG.error()` instead.
+* Use placeholder (`LOG.error("Could not... details: {}", something, exception)`) and never String concatenation (`LOG.error("Could not... details: " + something, exception)`)
+* Which Log Level is appropriate?
+    * `LOG.error()` should be used to inform an "operator" running Fineract who supervises error logs of an unexpected condition.  This includes technical problems with an external "environment" (e.g. can't reach a database), and situations which are likely bugs which need to be fixed in the code.  They do NOT include e.g. validation errors for incoming API requests - that is signaled through the API response - and does (should) not be logged as an error.  (Note that there is no _FATAL_ level in SLF4J; a "FATAL" event should just be logged as an _ERROR_.)
+    * `LOG.warn()` should be using sparingly.  Make up your mind if it's an error (above) - or not!
+    * `LOG.info()` can be used notably for one-time actions taken during start-up.  It should typically NOT be used to print out "regular" application usage information.  The default logging configuration always outputs the application INFO logs, and in production under load, there's really no point to constantly spew out lots of information from frequently traversed paths in the code about what's going on.  (Metrics are a better way.)  `LOG.info()` *can* be used freely in tests though.
+    * `LOG.debug()` can be used anywhere in the code to log things that may be useful during investigations of specific problems.  They are not shown in the default logging configuration, but can be enabled for troubleshooting.  Developers should typically "turn down" most `LOG.info()` which they used while writing a new feature to "follow along what happens during local testing" to `LOG.debug()` for production before we merge their PRs.
+    * `LOG.trace()` is not used in Fineract.
+
+## Change Process
+
+### Dependency Upgrades
+
+This project uses a number of 3rd-party libraries. We have set up [Renovate's bot](https://github.com/renovatebot/github-action) to automatically raise Pull Requests for our review when new dependencies are available.
+
+Our `ClasspathHellDuplicatesCheckRuleTest` detects classes that appear in more than 1 JAR.  If a version bump in [build.gradle](https://github.com/apache/fineract/blob/develop/build.gradle) causes changes in transitives dependencies, then you may have to add related `exclude` to our [dependencies.gradle](https://github.com/apache/fineract/search?q=dependencies.gradle).  Running `./gradlew dependencies` helps to understand what is required.
+
+### Pull Requests
+
+We request that your commit message includes a FINERACT JIRA issue and a one-liner that describes the changes.
+Start with an upper case imperative verb (not past form), and a short but concise clear description. (E.g. "FINERACT-821: Add enforced HideUtilityClassConstructor checkstyle").
+
+If your PR is failing to pass our CI build due to a test failure, then:
+
+1. Understand if the failure is due to your PR or an unrelated unstable test.
+1. If you suspect it is because of a "flaky" test, and not due to a change in your PR, then please do not simply wait for an active maintainer to come and help you, but instead be a proactive contributor to the project - see next steps.  Do understand that we may not review PRs that are not green - it is the contributor's (that's you!) responsibility to get a proposed PR to pass the build, not primarily the maintainers.
+1. Search for the name of the failed test on https://issues.apache.org/jira/, e.g. for `AccountingScenarioIntegrationTest` you would find [FINERACT-899](https://issues.apache.org/jira/browse/FINERACT-899).
+1. If you happen to read in such bug reports that tests were just recently fixed, or ignored, then rebase your PR to pick up that change.
+1. If you find previous comments "proving" that the same test has arbitrarily failed in at least 3 past PRs, then please do yourself raise a small separate new PR proposing to add an `@Disabled // TODO FINERACT-123` to the respective unstable test (e.g. [#774](https://github.com/apache/fineract/pull/774)) with the commit message mentioning said JIRA, as always.  (Please do NOT just `@Disabled` any existing tests mixed in as part of your larger PR.)
+1. If there is no existing JIRA for the test, then first please evaluate whether the failure couldn't be a (perhaps strange) impact of the change you are proposing after all.  If it's not, then please raise a new JIRA to document the suspected Flaky Test, and link it to [FINERACT-850](https://issues.apache.org/jira/browse/FINERACT-850).  This will allow the next person coming along hitting the same test failure to easily find it, and eventually propose to ignore the unstable test.
+1. Then (only) Close and Reopen your PR, which will cause a new build, to see if it passes.
+1. Of course, we very much appreciate you then jumping onto any such bugs and helping us figure out how to fix all ignored tests!
+
+[Pull Request Size Limit](https://cwiki.apache.org/confluence/display/FINERACT/Pull+Request+Size+Limit)
+documents that we cannot accept huge "code dump" Pull Requests, with some related suggestions.
+
+Guideline for new Feature commits involving Refactoring: If you are submitting a PR for a new feature,
+and it involves refactoring, try to differentiate "new feature code" from "refactored" by placing
+them in different commits. This helps to review your code faster.
+
+We have an automated bot which marks pull requests as "stale" after a while, and ultimately automatically closes them.
+
+
+### Merge Strategy
+
+This project's committers typically prefer to bring your pull requests in through _Rebase and Merge_ instead of _Create a Merge Commit_. (If you are unfamiliar with GitHub's UI regarding this, note the somewhat hidden little triangle drop-down at the bottom of the PR, visible only to committers, not contributors.)  This avoids the "merge commits" which we consider to be somewhat "polluting" the project's commit log history view.  We understand this doesn't give an easy automatic reference to the original PR (which GitHub automatically adds to the merge commit message it generates), but we consider this an only very minor inconvenience; it's typically relatively easy to find the original PR even just from the commit message, and JIRA.
+
+We expect most proposed PRs to typically consist of a single commit. Committers may use _Squash and merge_ to combine your commits at merge time, and if they do so, will rewrite your commit message as they see fit.
+
+Neither of these two are hard absolute rules, but mere conventions. Multiple commits in single PRs make sense in certain cases (e.g. branch backports).
+
+### Signing Your Commits
+
+We encourage contributors to sign commits with GPG keys. Signed commits show a "Verified" badge on GitHub.
+
+For GPG setup instructions, see the [Fineract GPG Guide](https://fineract.apache.org/docs/current/#_gpg_2).
+
+To verify your commits locally before pushing:
+
+```bash
+./scripts/verify-signed-commits.sh
+```

CUSTOM_FIELDS_IMPLEMENTATION_SUMMARY.md

@@ -0,0 +1,168 @@
+# SavingsProduct Custom Fields - Implementation Summary
+
+## ✅ Completed Changes
+
+### 1. **Validator Updates**
+**File:** `fineract-savings/src/main/java/org/apache/fineract/portfolio/savings/data/SavingsProductDataValidator.java`
+
+**Changes:**
+- Added `balanceFrequency` to `SAVINGS_PRODUCT_REQUEST_DATA_PARAMETERS` whitelist
+- Added `accountClosedZeroBalanceInDayClosing` to `SAVINGS_PRODUCT_REQUEST_DATA_PARAMETERS` whitelist
+
+### 2. **API Constants**
+**File:** `fineract-core/src/main/java/org/apache/fineract/portfolio/savings/SavingsApiConstants.java`
+
+**Changes:**
+```java
+public static final String balanceFrequencyParamName = "balanceFrequency";
+public static final String accountClosedZeroBalanceInDayClosingParamName = "accountClosedZeroBalanceInDayClosing";
+```
+
+### 3. **Entity (Domain Model)**
+**File:** `fineract-savings/src/main/java/org/apache/fineract/portfolio/savings/domain/SavingsProduct.java`
+
+**Changes:**
+- Added field: `@Column(name = "balance_frequency", length = 50) private String balanceFrequency;`
+- Added field: `@Column(name = "account_closed_zero_balance_in_day_closing") private Boolean accountClosedZeroBalanceInDayClosing = false;`
+- Added getters: `getBalanceFrequency()`, `getAccountClosedZeroBalanceInDayClosing()`
+- Added setters: `setBalanceFrequency()`, `setAccountClosedZeroBalanceInDayClosing()`
+- Added update logic in `update()` method to handle changes to these fields
+
+### 4. **Assembler**
+**File:** `fineract-savings/src/main/java/org/apache/fineract/portfolio/savings/domain/SavingsProductAssembler.java`
+
+**Changes:**
+```java
+if (command.parameterExists("balanceFrequency")) {
+    product.setBalanceFrequency(command.stringValueOfParameterNamed("balanceFrequency"));
+}
+if (command.parameterExists("accountClosedZeroBalanceInDayClosing")) {
+    product.setAccountClosedZeroBalanceInDayClosing(command.booleanObjectValueOfParameterNamed("accountClosedZeroBalanceInDayClosing"));
+}
+```
+
+### 5. **DTO (Data Transfer Object)**
+**File:** `fineract-core/src/main/java/org/apache/fineract/portfolio/savings/data/SavingsProductData.java`
+
+**Changes:**
+```java
+@Getter @Setter private String balanceFrequency;
+@Getter @Setter private Boolean accountClosedZeroBalanceInDayClosing;
+```
+
+### 6. **Read Platform Service**
+**File:** `fineract-provider/src/main/java/org/apache/fineract/portfolio/savings/service/SavingsProductReadPlatformServiceImpl.java`
+
+**Changes:**
+- SQL Query: Added `sp.balance_frequency as balanceFrequency`
+- SQL Query: Added `sp.account_closed_zero_balance_in_day_closing as accountClosedZeroBalanceInDayClosing`
+- ResultSet mapping: Added extraction of both fields
+
+### 7. **Database Migration**
+**File:** `database_migration_add_custom_fields.sql`
+
+```sql
+ALTER TABLE m_savings_product 
+ADD COLUMN balance_frequency VARCHAR(50) DEFAULT NULL,
+ADD COLUMN account_closed_zero_balance_in_day_closing BOOLEAN DEFAULT FALSE;
+```
+
+---
+
+## 📋 What These Fields Do
+
+### **balanceFrequency** (String)
+- **Purpose:** Defines how often balance is calculated/checked
+- **Example Values:** "Daily", "Monthly", "Quarterly", "Yearly"
+- **Database Column:** `m_savings_product.balance_frequency`
+- **Type:** VARCHAR(50)
+
+### **accountClosedZeroBalanceInDayClosing** (Boolean)
+- **Purpose:** Flag to automatically close accounts when balance reaches zero at day end
+- **Example Values:** `true` or `false`
+- **Default:** `false`
+- **Database Column:** `m_savings_product.account_closed_zero_balance_in_day_closing`
+- **Type:** BOOLEAN
+
+---
+
+## 🎯 API Usage
+
+### **POST /v1/savingsproducts** (Create)
+```json
+{
+  "name": "Saving Product",
+  "shortName": "SD22",
+  // ... other fields ...
+  "balanceFrequency": "Monthly",
+  "accountClosedZeroBalanceInDayClosing": true,
+  // ... rest of fields ...
+}
+```
+
+### **GET /v1/savingsproducts/{productId}** (Read)
+Response will include:
+```json
+{
+  "id": 1,
+  "name": "Saving Product",
+  // ... other fields ...
+  "balanceFrequency": "Monthly",
+  "accountClosedZeroBalanceInDayClosing": true,
+  // ... rest of fields ...
+}
+```
+
+### **PUT /v1/savingsproducts/{productId}** (Update)
+```json
+{
+  "balanceFrequency": "Quarterly",
+  "accountClosedZeroBalanceInDayClosing": false
+}
+```
+
+---
+
+## 🗄️ Database Migration Steps
+
+Run this SQL script to add the columns:
+
+```bash
+mysql -u root -p your_database < database_migration_add_custom_fields.sql
+```
+
+Or manually execute:
+```sql
+ALTER TABLE m_savings_product 
+ADD COLUMN balance_frequency VARCHAR(50) DEFAULT NULL,
+ADD COLUMN account_closed_zero_balance_in_day_closing BOOLEAN DEFAULT FALSE;
+```
+
+---
+
+## ✅ Validation
+
+The fields are now:
+- ✅ **Accepted** in CREATE request (POST)
+- ✅ **Saved** to database
+- ✅ **Returned** in GET response
+- ✅ **Updatable** via PUT request
+- ✅ **Validated** (no longer rejected as unsupported)
+
+---
+
+## 🚀 Next Steps
+
+1. **Run Database Migration:** Execute the SQL script
+2. **Rebuild Application:** `./gradlew clean build`
+3. **Restart Server:** Apply the changes
+4. **Test API:** Use your payload to create a savings product
+
+---
+
+## 📝 Notes
+
+- Both fields are **optional** (nullable)
+- `balanceFrequency` accepts any string value (you can add validation later if needed)
+- `accountClosedZeroBalanceInDayClosing` defaults to `false` if not provided
+- Both fields support **partial updates** (you can update just one of them)

Dockerfile

@@ -1,46 +0,0 @@
-# Licensed to the Apache Software Foundation (ASF) under one
-# or more contributor license agreements. See the NOTICE file
-# distributed with this work for additional information
-# regarding copyright ownership. The ASF licenses this file
-# to you under the Apache License, Version 2.0 (the
-# "License"); you may not use this file except in compliance
-# with the License. You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing,
-# software distributed under the License is distributed on an
-# "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
-# KIND, either express or implied. See the License for the
-# specific language governing permissions and limitations
-# under the License.
-#
-FROM openjdk:11 AS builder
-
-RUN apt-get update -qq && apt-get install -y wget
-
-COPY . fineract
-WORKDIR /fineract
-
-RUN ./gradlew --no-daemon -x rat -x test bootJar
-
-WORKDIR /fineract/target
-RUN jar -xf /fineract/build/libs/fineract-provider.jar
-
-# https://issues.apache.org/jira/browse/LEGAL-462
-# https://issues.apache.org/jira/browse/FINERACT-762
-# We include an alternative JDBC driver (which is faster, but not allowed to be default in Apache distribution)
-# allowing implementations to switch the driver used by changing start-up parameters (for both tenants and each tenant DB)
-# The commented out lines in the docker-compose.yml illustrate how to do this.
-WORKDIR /fineract/target/BOOT-INF/lib
-RUN wget https://repo1.maven.org/maven2/mysql/mysql-connector-java/8.0.20/mysql-connector-java-8.0.20.jar 
-
-# =========================================
-
-FROM gcr.io/distroless/java:11 as fineract
-
-COPY --from=builder /fineract/target/BOOT-INF/lib /app/lib
-COPY --from=builder /fineract/target/META-INF /app/META-INF
-COPY --from=builder /fineract/target/BOOT-INF/classes /app
-
-ENTRYPOINT ["java", "-cp", "app:app/lib/*", "org.apache.fineract.ServerApplication"]

Entity_Classification_Postman_Collection.json

@@ -0,0 +1,277 @@
+i {
+  "info": {
+    "name": "Entity Classification - CBS Fineract",
+    "description": "Entity Classification module for non-individual client onboarding with 7 regulatory categories:\n1. Startup India (DPIIT)\n2. Mudra Borrower (PMMY)\n3. Export Oriented Unit (EOU)\n4. Import/Export (IEC/DGFT)\n5. Priority Sector Lending (PSL)\n6. Non-Priority Sector (NPS)\n7. MSME (Udyam Registration)",
+    "schema": "https://schema.getpostman.com/json/collection/v2.1.0/collection.json"
+  },
+  "auth": {
+    "type": "basic",
+    "basic": [
+      {
+        "key": "username",
+        "value": "bankadmin",
+        "type": "string"
+      },
+      {
+        "key": "password",
+        "value": "LincPay@2026",
+        "type": "string"
+      }
+    ]
+  },
+  "variable": [
+    {
+      "key": "baseUrl",
+      "value": "https://localhost:8443/fineract-provider/api/v1"
+    },
+    {
+      "key": "clientId",
+      "value": "49"
+    },
+    {
+      "key": "tenantId",
+      "value": "default"
+    }
+  ],
+  "item": [
+    {
+      "name": "GET - Retrieve All Entity Classifications",
+      "request": {
+        "method": "GET",
+        "header": [
+          {
+            "key": "Fineract-Platform-TenantId",
+            "value": "{{tenantId}}"
+          },
+          {
+            "key": "Content-Type",
+            "value": "application/json"
+          }
+        ],
+        "url": {
+          "raw": "{{baseUrl}}/clients/{{clientId}}/entityclassification",
+          "host": ["{{baseUrl}}"],
+          "path": ["clients", "{{clientId}}", "entityclassification"]
+        },
+        "description": "Retrieves all 6 entity classification categories for the given client. Returns null for categories that have not been submitted yet."
+      }
+    },
+    {
+      "name": "POST - Save Startup India (DPIIT)",
+      "request": {
+        "method": "POST",
+        "header": [
+          {
+            "key": "Fineract-Platform-TenantId",
+            "value": "{{tenantId}}"
+          },
+          {
+            "key": "Content-Type",
+            "value": "application/json"
+          }
+        ],
+        "url": {
+          "raw": "{{baseUrl}}/clients/{{clientId}}/entityclassification/startup",
+          "host": ["{{baseUrl}}"],
+          "path": ["clients", "{{clientId}}", "entityclassification", "startup"]
+        },
+        "body": {
+          "mode": "raw",
+          "raw": "{\n  \"enabled\": true,\n  \"dpiitRecognitionNumber\": \"DIPP12345\",\n  \"recognitionDate\": \"15 January 2024\",\n  \"certificateExpiryDate\": \"14 January 2034\",\n  \"entityStage\": \"GROWTH\",\n  \"sectorAsDpiit\": \"Information Technology\",\n  \"nicIndustryCode\": \"62011\",\n  \"taxExemption80iac\": true,\n  \"sidbiFund\": false,\n  \"selfCertification\": true,\n  \"fastTrackPatent\": true,\n  \"govtTenderExemption\": true,\n  \"creditGuaranteeCgss\": false,\n  \"pslLoanLimit\": 5000000.00,\n  \"pslSubCategory\": \"StartupIndia-IT\",\n  \"locale\": \"en\",\n  \"dateFormat\": \"dd MMMM yyyy\"\n}",
+          "options": {
+            "raw": {
+              "language": "json"
+            }
+          }
+        },
+        "description": "Creates or updates Startup India (DPIIT) entity classification. Captures DPIIT recognition number, tax exemptions under Section 80IAC, SIDBI fund eligibility, and PSL limits."
+      }
+    },
+    {
+      "name": "POST - Save Mudra Borrower (PMMY)",
+      "request": {
+        "method": "POST",
+        "header": [
+          {
+            "key": "Fineract-Platform-TenantId",
+            "value": "{{tenantId}}"
+          },
+          {
+            "key": "Content-Type",
+            "value": "application/json"
+          }
+        ],
+        "url": {
+          "raw": "{{baseUrl}}/clients/{{clientId}}/entityclassification/mudra",
+          "host": ["{{baseUrl}}"],
+          "path": ["clients", "{{clientId}}", "entityclassification", "mudra"]
+        },
+        "body": {
+          "mode": "raw",
+          "raw": "{\n  \"enabled\": true,\n  \"mudraCategory\": \"KISHORE\",\n  \"mudraLoanAccountNo\": \"MUDRA2024MH00567\",\n  \"lendingInstitutionName\": \"State Bank of India\",\n  \"sanctionedAmount\": 350000.00,\n  \"disbursementDate\": \"01 March 2024\",\n  \"loanPurpose\": \"Working Capital\",\n  \"mudraCardNumber\": \"MC20240567\",\n  \"currentOutstanding\": 280000.00,\n  \"repaymentStatus\": \"REGULAR\",\n  \"npaFlag\": false,\n  \"locale\": \"en\",\n  \"dateFormat\": \"dd MMMM yyyy\"\n}",
+          "options": {
+            "raw": {
+              "language": "json"
+            }
+          }
+        },
+        "description": "Creates or updates Mudra Borrower (PMMY) entity classification. Supports SHISHU (up to Rs 50K), KISHORE (50K-5L), and TARUN (5L-10L) categories under Pradhan Mantri Mudra Yojana."
+      }
+    },
+    {
+      "name": "POST - Save Export Oriented Unit (EOU)",
+      "request": {
+        "method": "POST",
+        "header": [
+          {
+            "key": "Fineract-Platform-TenantId",
+            "value": "{{tenantId}}"
+          },
+          {
+            "key": "Content-Type",
+            "value": "application/json"
+          }
+        ],
+        "url": {
+          "raw": "{{baseUrl}}/clients/{{clientId}}/entityclassification/eou",
+          "host": ["{{baseUrl}}"],
+          "path": ["clients", "{{clientId}}", "entityclassification", "eou"]
+        },
+        "body": {
+          "mode": "raw",
+          "raw": "{\n  \"enabled\": true,\n  \"eouRegistrationNumber\": \"EOU/MH/2023/00456\",\n  \"registeredDcZone\": \"SEEPZ-SEZ Mumbai\",\n  \"bondLutNumber\": \"LUT/2024/MH/0089\",\n  \"validityFrom\": \"01 April 2023\",\n  \"validityTo\": \"31 March 2028\",\n  \"gstinEou\": \"27AABCU9603R1ZM\",\n  \"annualExportObligation\": 25000000.00,\n  \"nfeTarget\": 5000000.00,\n  \"softexFilingStatus\": \"FILED\",\n  \"brcSubmissionStatus\": \"SUBMITTED\",\n  \"adCategoryBankCode\": \"AD-I\",\n  \"femaDeclarationDate\": \"15 April 2023\",\n  \"locale\": \"en\",\n  \"dateFormat\": \"dd MMMM yyyy\"\n}",
+          "options": {
+            "raw": {
+              "language": "json"
+            }
+          }
+        },
+        "description": "Creates or updates Export Oriented Unit (EOU) entity classification. Captures EOU registration, Bond/LUT details, GSTIN, export obligations, NFE targets, and FEMA compliance."
+      }
+    },
+    {
+      "name": "POST - Save Import/Export (IEC/DGFT)",
+      "request": {
+        "method": "POST",
+        "header": [
+          {
+            "key": "Fineract-Platform-TenantId",
+            "value": "{{tenantId}}"
+          },
+          {
+            "key": "Content-Type",
+            "value": "application/json"
+          }
+        ],
+        "url": {
+          "raw": "{{baseUrl}}/clients/{{clientId}}/entityclassification/importexport",
+          "host": ["{{baseUrl}}"],
+          "path": ["clients", "{{clientId}}", "entityclassification", "importexport"]
+        },
+        "body": {
+          "mode": "raw",
+          "raw": "{\n  \"enabled\": true,\n  \"iecCode\": \"0305012345\",\n  \"iecIssueDate\": \"10 June 2020\",\n  \"iecStatus\": \"ACTIVE\",\n  \"tradeType\": \"BOTH\",\n  \"primaryHsCode\": \"8471\",\n  \"keyTradingCountries\": \"USA, UAE, Singapore, Germany\",\n  \"adCategoryBankCode\": \"AD-I\",\n  \"ecgcPolicyNumber\": \"ECGC/WTP/2024/00123\",\n  \"ecgcPolicyExpiry\": \"31 March 2025\",\n  \"eefcAccountRequired\": true,\n  \"pcfcFacilityRequired\": false,\n  \"femaDeclarationObtained\": true,\n  \"locale\": \"en\",\n  \"dateFormat\": \"dd MMMM yyyy\"\n}",
+          "options": {
+            "raw": {
+              "language": "json"
+            }
+          }
+        },
+        "description": "Creates or updates Import/Export (IEC/DGFT) entity classification. Captures Importer Exporter Code, HS codes, ECGC insurance, EEFC/PCFC requirements, and FEMA compliance."
+      }
+    },
+    {
+      "name": "POST - Save Priority Sector Lending (PSL)",
+      "request": {
+        "method": "POST",
+        "header": [
+          {
+            "key": "Fineract-Platform-TenantId",
+            "value": "{{tenantId}}"
+          },
+          {
+            "key": "Content-Type",
+            "value": "application/json"
+          }
+        ],
+        "url": {
+          "raw": "{{baseUrl}}/clients/{{clientId}}/entityclassification/psl",
+          "host": ["{{baseUrl}}"],
+          "path": ["clients", "{{clientId}}", "entityclassification", "psl"]
+        },
+        "body": {
+          "mode": "raw",
+          "raw": "{\n  \"enabled\": true,\n  \"pslCategory\": \"MICRO_ENTERPRISE\",\n  \"pslSubCategory\": \"Manufacturing\",\n  \"pslLoanPurposeCode\": \"ME01\",\n  \"pslEligibilityBasis\": \"Udyam Registration - Micro Enterprise with investment up to Rs 1 Cr\",\n  \"fiddReportingCode\": \"FIDD-ME-MFG\",\n  \"pslSanctionedLimit\": 10000000.00,\n  \"msmeClassification\": \"MICRO\",\n  \"udyamRegistrationNumber\": \"UDYAM-MH-01-0012345\",\n  \"udyamRegistrationDate\": \"20 July 2023\",\n  \"annualTurnover\": 45000000.00,\n  \"investmentPlantMachinery\": 8500000.00,\n  \"weakerSectionFlag\": true,\n  \"scStBorrowerFlag\": false,\n  \"womenEntrepreneurFlag\": true,\n  \"minorityCommunityFlag\": false,\n  \"locale\": \"en\",\n  \"dateFormat\": \"dd MMMM yyyy\"\n}",
+          "options": {
+            "raw": {
+              "language": "json"
+            }
+          }
+        },
+        "description": "Creates or updates Priority Sector Lending (PSL) entity classification as per RBI Master Direction. Captures PSL category, MSME classification, Udyam registration, FIDD reporting codes, and weaker section flags."
+      }
+    },
+    {
+      "name": "POST - Save Non-Priority Sector (NPS)",
+      "request": {
+        "method": "POST",
+        "header": [
+          {
+            "key": "Fineract-Platform-TenantId",
+            "value": "{{tenantId}}"
+          },
+          {
+            "key": "Content-Type",
+            "value": "application/json"
+          }
+        ],
+        "url": {
+          "raw": "{{baseUrl}}/clients/{{clientId}}/entityclassification/nps",
+          "host": ["{{baseUrl}}"],
+          "path": ["clients", "{{clientId}}", "entityclassification", "nps"]
+        },
+        "body": {
+          "mode": "raw",
+          "raw": "{\n  \"enabled\": true,\n  \"industrySector\": \"Real Estate\",\n  \"nicCode\": \"68100\",\n  \"industryDescription\": \"Real estate activities with owned or leased property - Commercial\",\n  \"annualRevenueBand\": \"50CR_TO_100CR\",\n  \"riskCategory\": \"MEDIUM\",\n  \"customerRiskScore\": 55,\n  \"amlRiskClassification\": \"Medium Risk - Enhanced Due Diligence Required\",\n  \"pepFlag\": false,\n  \"amlWatchlistMatch\": false,\n  \"adverseMediaFlag\": false\n}",
+          "options": {
+            "raw": {
+              "language": "json"
+            }
+          }
+        },
+        "description": "Creates or updates Non-Priority Sector (NPS) entity classification. Captures industry details, NIC code, risk categorization, AML risk classification, PEP status, and adverse media flags."
+      }
+    },
+    {
+      "name": "POST - Save MSME (Udyam Registration)",
+      "request": {
+        "method": "POST",
+        "header": [
+          {
+            "key": "Fineract-Platform-TenantId",
+            "value": "{{tenantId}}"
+          },
+          {
+            "key": "Content-Type",
+            "value": "application/json"
+          }
+        ],
+        "url": {
+          "raw": "{{baseUrl}}/clients/{{clientId}}/entityclassification/msme",
+          "host": ["{{baseUrl}}"],
+          "path": ["clients", "{{clientId}}", "entityclassification", "msme"]
+        },
+        "body": {
+          "mode": "raw",
+          "raw": "{\n  \"enabled\": true,\n  \"udyamRegistrationNumber\": \"UDYAM-MP-23-0012345\",\n  \"registrationDate\": \"15 March 2023\",\n  \"registrationStatus\": \"ACTIVE\",\n  \"msmeClassification\": \"SMALL\",\n  \"enterpriseType\": \"MANUFACTURING\",\n  \"nicActivityCode\": \"13111\",\n  \"annualTurnover\": 12.50,\n  \"investmentPlantMachinery\": 3.75,\n  \"financialYearAssessment\": \"2024-25\",\n  \"socialCategoryOwner\": \"GENERAL\",\n  \"genderPrimaryOwner\": \"MALE\",\n  \"noOfEmployees\": 45,\n  \"womenLedEnterprise\": false,\n  \"divyangPwdOwned\": false,\n  \"dateFormat\": \"dd MMMM yyyy\",\n  \"locale\": \"en\"\n}",
+          "options": {
+            "raw": {
+              "language": "json"
+            }
+          }
+        },
+        "description": "Creates or updates MSME (Udyam Registration) entity classification. Captures Udyam number, MSME classification (Micro/Small/Medium), enterprise type, financial thresholds, owner/promoter details, and special flags (women-led, PWD owned)."
+      }
+    }
+  ]
+}

Fineract_User_Management.postman_collection.json

@@ -0,0 +1,607 @@
+{
+	"info": {
+		"_postman_id": "user-mgmt-collection",
+		"name": "Fineract - User Management",
+		"description": "Fineract User Management APIs - Login, Create, Update, Change Password, Delete Users",
+		"schema": "https://schema.getpostman.com/json/collection/v2.1.0/collection.json"
+	},
+	"auth": {
+		"type": "basic",
+		"basic": [
+			{
+				"key": "username",
+				"value": "{{username}}",
+				"type": "string"
+			},
+			{
+				"key": "password",
+				"value": "{{password}}",
+				"type": "string"
+			}
+		]
+	},
+	"variable": [
+		{
+			"key": "baseUrl",
+			"value": "https://localhost:8443/fineract-provider/api"
+		},
+		{
+			"key": "username",
+			"value": "mifos"
+		},
+		{
+			"key": "password",
+			"value": "password"
+		},
+		{
+			"key": "tenantId",
+			"value": "default"
+		},
+		{
+			"key": "userId",
+			"value": "1"
+		}
+	],
+	"item": [
+		{
+			"name": "Authentication",
+			"item": [
+				{
+					"name": "Login (Self-Service)",
+					"request": {
+						"method": "POST",
+						"header": [
+							{
+								"key": "Content-Type",
+								"value": "application/json"
+							},
+							{
+								"key": "fineract-platform-tenantid",
+								"value": "{{tenantId}}"
+							}
+						],
+						"body": {
+							"mode": "raw",
+							"raw": "{\n    \"username\": \"mifos\",\n    \"password\": \"password\"\n}"
+						},
+						"url": {
+							"raw": "{{baseUrl}}/v1/self/authentication?returnClientList=true",
+							"host": ["{{baseUrl}}"],
+							"path": ["v1", "self", "authentication"],
+							"query": [
+								{
+									"key": "returnClientList",
+									"value": "true"
+								}
+							]
+						},
+						"description": "Authenticates a user and returns auth token. Use this for self-service users."
+					}
+				},
+				{
+					"name": "Login (Basic Auth Test)",
+					"request": {
+						"method": "GET",
+						"header": [
+							{
+								"key": "fineract-platform-tenantid",
+								"value": "{{tenantId}}"
+							}
+						],
+						"url": {
+							"raw": "{{baseUrl}}/v1/users/1",
+							"host": ["{{baseUrl}}"],
+							"path": ["v1", "users", "1"]
+						},
+						"description": "Test basic auth by fetching user details. If credentials are correct, you'll get a 200 response."
+					}
+				}
+			]
+		},
+		{
+			"name": "Users",
+			"item": [
+				{
+					"name": "Get All Users",
+					"request": {
+						"method": "GET",
+						"header": [
+							{
+								"key": "fineract-platform-tenantid",
+								"value": "{{tenantId}}"
+							}
+						],
+						"url": {
+							"raw": "{{baseUrl}}/v1/users",
+							"host": ["{{baseUrl}}"],
+							"path": ["v1", "users"]
+						}
+					}
+				},
+				{
+					"name": "Get User by ID",
+					"request": {
+						"method": "GET",
+						"header": [
+							{
+								"key": "fineract-platform-tenantid",
+								"value": "{{tenantId}}"
+							}
+						],
+						"url": {
+							"raw": "{{baseUrl}}/v1/users/{{userId}}",
+							"host": ["{{baseUrl}}"],
+							"path": ["v1", "users", "{{userId}}"]
+						}
+					}
+				},
+				{
+					"name": "Get User Template",
+					"request": {
+						"method": "GET",
+						"header": [
+							{
+								"key": "fineract-platform-tenantid",
+								"value": "{{tenantId}}"
+							}
+						],
+						"url": {
+							"raw": "{{baseUrl}}/v1/users/template",
+							"host": ["{{baseUrl}}"],
+							"path": ["v1", "users", "template"]
+						},
+						"description": "Returns template data (available offices, roles) needed to create a new user."
+					}
+				},
+				{
+					"name": "Create User",
+					"request": {
+						"method": "POST",
+						"header": [
+							{
+								"key": "Content-Type",
+								"value": "application/json"
+							},
+							{
+								"key": "fineract-platform-tenantid",
+								"value": "{{tenantId}}"
+							}
+						],
+						"body": {
+							"mode": "raw",
+							"raw": "{\n    \"username\": \"newuser\",\n    \"firstname\": \"New\",\n    \"lastname\": \"User\",\n    \"email\": \"newuser@example.com\",\n    \"officeId\": 1,\n    \"roles\": [1],\n    \"sendPasswordToEmail\": false,\n    \"password\": \"Password@123\",\n    \"repeatPassword\": \"Password@123\",\n    \"isSelfServiceUser\": false,\n    \"passwordNeverExpires\": true\n}"
+						},
+						"url": {
+							"raw": "{{baseUrl}}/v1/users",
+							"host": ["{{baseUrl}}"],
+							"path": ["v1", "users"]
+						}
+					}
+				},
+				{
+					"name": "Update User (Change Username)",
+					"request": {
+						"method": "PUT",
+						"header": [
+							{
+								"key": "Content-Type",
+								"value": "application/json"
+							},
+							{
+								"key": "fineract-platform-tenantid",
+								"value": "{{tenantId}}"
+							}
+						],
+						"body": {
+							"mode": "raw",
+							"raw": "{\n    \"username\": \"updatedUsername\"\n}"
+						},
+						"url": {
+							"raw": "{{baseUrl}}/v1/users/{{userId}}",
+							"host": ["{{baseUrl}}"],
+							"path": ["v1", "users", "{{userId}}"]
+						}
+					}
+				},
+				{
+					"name": "Update User (Change Password via PUT)",
+					"request": {
+						"method": "PUT",
+						"header": [
+							{
+								"key": "Content-Type",
+								"value": "application/json"
+							},
+							{
+								"key": "fineract-platform-tenantid",
+								"value": "{{tenantId}}"
+							}
+						],
+						"body": {
+							"mode": "raw",
+							"raw": "{\n    \"password\": \"NewPassword@123\",\n    \"repeatPassword\": \"NewPassword@123\"\n}"
+						},
+						"url": {
+							"raw": "{{baseUrl}}/v1/users/{{userId}}",
+							"host": ["{{baseUrl}}"],
+							"path": ["v1", "users", "{{userId}}"]
+						}
+					}
+				},
+				{
+					"name": "Change Password (Dedicated Endpoint)",
+					"request": {
+						"method": "POST",
+						"header": [
+							{
+								"key": "Content-Type",
+								"value": "application/json"
+							},
+							{
+								"key": "fineract-platform-tenantid",
+								"value": "{{tenantId}}"
+							}
+						],
+						"body": {
+							"mode": "raw",
+							"raw": "{\n    \"password\": \"NewPassword@123\",\n    \"repeatPassword\": \"NewPassword@123\"\n}"
+						},
+						"url": {
+							"raw": "{{baseUrl}}/v1/users/{{userId}}/pwd",
+							"host": ["{{baseUrl}}"],
+							"path": ["v1", "users", "{{userId}}", "pwd"]
+						},
+						"description": "Dedicated password change endpoint. Must provide both password and repeatPassword."
+					}
+				},
+				{
+					"name": "Update User (Full Update)",
+					"request": {
+						"method": "PUT",
+						"header": [
+							{
+								"key": "Content-Type",
+								"value": "application/json"
+							},
+							{
+								"key": "fineract-platform-tenantid",
+								"value": "{{tenantId}}"
+							}
+						],
+						"body": {
+							"mode": "raw",
+							"raw": "{\n    \"username\": \"updatedUser\",\n    \"firstname\": \"Updated\",\n    \"lastname\": \"User\",\n    \"email\": \"updated@example.com\",\n    \"officeId\": 1,\n    \"roles\": [1],\n    \"password\": \"NewPassword@123\",\n    \"repeatPassword\": \"NewPassword@123\",\n    \"passwordNeverExpires\": true\n}"
+						},
+						"url": {
+							"raw": "{{baseUrl}}/v1/users/{{userId}}",
+							"host": ["{{baseUrl}}"],
+							"path": ["v1", "users", "{{userId}}"]
+						}
+					}
+				},
+				{
+					"name": "Delete User",
+					"request": {
+						"method": "DELETE",
+						"header": [
+							{
+								"key": "fineract-platform-tenantid",
+								"value": "{{tenantId}}"
+							}
+						],
+						"url": {
+							"raw": "{{baseUrl}}/v1/users/{{userId}}",
+							"host": ["{{baseUrl}}"],
+							"path": ["v1", "users", "{{userId}}"]
+						}
+					}
+				}
+			]
+		},
+		{
+			"name": "Roles",
+			"item": [
+				{
+					"name": "Get All Roles",
+					"request": {
+						"method": "GET",
+						"header": [
+							{
+								"key": "fineract-platform-tenantid",
+								"value": "{{tenantId}}"
+							}
+						],
+						"url": {
+							"raw": "{{baseUrl}}/v1/roles",
+							"host": ["{{baseUrl}}"],
+							"path": ["v1", "roles"]
+						}
+					}
+				},
+				{
+					"name": "Get Role by ID",
+					"request": {
+						"method": "GET",
+						"header": [
+							{
+								"key": "fineract-platform-tenantid",
+								"value": "{{tenantId}}"
+							}
+						],
+						"url": {
+							"raw": "{{baseUrl}}/v1/roles/1",
+							"host": ["{{baseUrl}}"],
+							"path": ["v1", "roles", "1"]
+						}
+					}
+				},
+				{
+					"name": "Get Role Permissions",
+					"request": {
+						"method": "GET",
+						"header": [
+							{
+								"key": "fineract-platform-tenantid",
+								"value": "{{tenantId}}"
+							}
+						],
+						"url": {
+							"raw": "{{baseUrl}}/v1/roles/1/permissions",
+							"host": ["{{baseUrl}}"],
+							"path": ["v1", "roles", "1", "permissions"]
+						}
+					}
+				},
+				{
+					"name": "Create Role",
+					"request": {
+						"method": "POST",
+						"header": [
+							{
+								"key": "Content-Type",
+								"value": "application/json"
+							},
+							{
+								"key": "fineract-platform-tenantid",
+								"value": "{{tenantId}}"
+							}
+						],
+						"body": {
+							"mode": "raw",
+							"raw": "{\n    \"name\": \"New Role\",\n    \"description\": \"A new custom role\"\n}"
+						},
+						"url": {
+							"raw": "{{baseUrl}}/v1/roles",
+							"host": ["{{baseUrl}}"],
+							"path": ["v1", "roles"]
+						}
+					}
+				},
+				{
+					"name": "Update Role",
+					"request": {
+						"method": "PUT",
+						"header": [
+							{
+								"key": "Content-Type",
+								"value": "application/json"
+							},
+							{
+								"key": "fineract-platform-tenantid",
+								"value": "{{tenantId}}"
+							}
+						],
+						"body": {
+							"mode": "raw",
+							"raw": "{\n    \"name\": \"Updated Role\",\n    \"description\": \"Updated description\"\n}"
+						},
+						"url": {
+							"raw": "{{baseUrl}}/v1/roles/1",
+							"host": ["{{baseUrl}}"],
+							"path": ["v1", "roles", "1"]
+						}
+					}
+				},
+				{
+					"name": "Update Role Permissions",
+					"request": {
+						"method": "PUT",
+						"header": [
+							{
+								"key": "Content-Type",
+								"value": "application/json"
+							},
+							{
+								"key": "fineract-platform-tenantid",
+								"value": "{{tenantId}}"
+							}
+						],
+						"body": {
+							"mode": "raw",
+							"raw": "{\n    \"permissions\": {\n        \"READ_USER\": true,\n        \"CREATE_USER\": true,\n        \"UPDATE_USER\": true\n    }\n}"
+						},
+						"url": {
+							"raw": "{{baseUrl}}/v1/roles/1/permissions",
+							"host": ["{{baseUrl}}"],
+							"path": ["v1", "roles", "1", "permissions"]
+						}
+					}
+				},
+				{
+					"name": "Enable Role",
+					"request": {
+						"method": "POST",
+						"header": [
+							{
+								"key": "fineract-platform-tenantid",
+								"value": "{{tenantId}}"
+							}
+						],
+						"url": {
+							"raw": "{{baseUrl}}/v1/roles/1?command=enable",
+							"host": ["{{baseUrl}}"],
+							"path": ["v1", "roles", "1"],
+							"query": [
+								{
+									"key": "command",
+									"value": "enable"
+								}
+							]
+						}
+					}
+				},
+				{
+					"name": "Disable Role",
+					"request": {
+						"method": "POST",
+						"header": [
+							{
+								"key": "fineract-platform-tenantid",
+								"value": "{{tenantId}}"
+							}
+						],
+						"url": {
+							"raw": "{{baseUrl}}/v1/roles/1?command=disable",
+							"host": ["{{baseUrl}}"],
+							"path": ["v1", "roles", "1"],
+							"query": [
+								{
+									"key": "command",
+									"value": "disable"
+								}
+							]
+						}
+					}
+				},
+				{
+					"name": "Delete Role",
+					"request": {
+						"method": "DELETE",
+						"header": [
+							{
+								"key": "fineract-platform-tenantid",
+								"value": "{{tenantId}}"
+							}
+						],
+						"url": {
+							"raw": "{{baseUrl}}/v1/roles/1",
+							"host": ["{{baseUrl}}"],
+							"path": ["v1", "roles", "1"]
+						}
+					}
+				}
+			]
+		},
+		{
+			"name": "Password Preferences",
+			"item": [
+				{
+					"name": "Get Password Preferences",
+					"request": {
+						"method": "GET",
+						"header": [
+							{
+								"key": "fineract-platform-tenantid",
+								"value": "{{tenantId}}"
+							}
+						],
+						"url": {
+							"raw": "{{baseUrl}}/v1/passwordpreferences",
+							"host": ["{{baseUrl}}"],
+							"path": ["v1", "passwordpreferences"]
+						}
+					}
+				},
+				{
+					"name": "Get Password Preferences Template",
+					"request": {
+						"method": "GET",
+						"header": [
+							{
+								"key": "fineract-platform-tenantid",
+								"value": "{{tenantId}}"
+							}
+						],
+						"url": {
+							"raw": "{{baseUrl}}/v1/passwordpreferences/template",
+							"host": ["{{baseUrl}}"],
+							"path": ["v1", "passwordpreferences", "template"]
+						}
+					}
+				},
+				{
+					"name": "Update Password Preferences",
+					"request": {
+						"method": "PUT",
+						"header": [
+							{
+								"key": "Content-Type",
+								"value": "application/json"
+							},
+							{
+								"key": "fineract-platform-tenantid",
+								"value": "{{tenantId}}"
+							}
+						],
+						"body": {
+							"mode": "raw",
+							"raw": "{\n    \"validationPolicyId\": 2\n}"
+						},
+						"url": {
+							"raw": "{{baseUrl}}/v1/passwordpreferences",
+							"host": ["{{baseUrl}}"],
+							"path": ["v1", "passwordpreferences"]
+						}
+					}
+				}
+			]
+		},
+		{
+			"name": "Permissions",
+			"item": [
+				{
+					"name": "Get All Permissions",
+					"request": {
+						"method": "GET",
+						"header": [
+							{
+								"key": "fineract-platform-tenantid",
+								"value": "{{tenantId}}"
+							}
+						],
+						"url": {
+							"raw": "{{baseUrl}}/v1/permissions",
+							"host": ["{{baseUrl}}"],
+							"path": ["v1", "permissions"]
+						}
+					}
+				},
+				{
+					"name": "Update Permissions (Maker-Checker)",
+					"request": {
+						"method": "PUT",
+						"header": [
+							{
+								"key": "Content-Type",
+								"value": "application/json"
+							},
+							{
+								"key": "fineract-platform-tenantid",
+								"value": "{{tenantId}}"
+							}
+						],
+						"body": {
+							"mode": "raw",
+							"raw": "{\n    \"permissions\": {\n        \"CREATE_USER_MAKER\": true,\n        \"CREATE_USER_CHECKER\": true\n    }\n}"
+						},
+						"url": {
+							"raw": "{{baseUrl}}/v1/permissions",
+							"host": ["{{baseUrl}}"],
+							"path": ["v1", "permissions"]
+						}
+					}
+				}
+			]
+		}
+	]
+}

IMPLEMENTATION_GUIDE_NEW_PAYLOAD.md

@@ -0,0 +1,668 @@
+# Savings Product Payload Implementation Guide
+
+## Overview
+Your UI has been updated to send a comprehensive new payload with additional fields for the `/savingsproducts` POST endpoint. This document outlines **all changes required** in the backend to support these new fields.
+
+---
+
+## 🔍 New Fields in Your Payload
+
+### **Simple Fields (Direct Columns in m_savings_product table)**
+| Field | Type | Example | Description |
+|-------|------|---------|-------------|
+| accountType | String | "Small Saving Account" | Type of savings account |
+| customerSegment | String | "Individual" | Customer classification |
+| productCode | String | "SB-IND-001" | Product identifier code |
+| effectiveDate | Date | "10 April 2026" | When the product becomes effective |
+| effectiveTo | Date | "10 April 2026" | Validity end date |
+| endDate | Date | "10 April 2026" | Product end date |
+| introducerRequired | Boolean | true | If introducer/referrer is mandatory |
+| shareLinkingEnabled | Boolean | true | If share account linking allowed |
+| nominationFacility | Boolean | true | If nomination facility available |
+| dormancyAlert | Boolean | true | If dormancy alerts enabled |
+| interestCalculateSelector | Integer | 2 | Interest calculation method selector |
+| averagePeriod | String | "Monthly" | Period for averaging balance |
+| autoPost | Boolean | true | Auto-post interest |
+| frequencyFixDay | Integer | 30 | Fixed day for frequency |
+| lastInterestDate | Date | "10 April 2026" | Last interest posting date |
+| enableLockinPeriod | Boolean | true | If lock-in period enforced |
+
+### **Complex Objects (Require Separate Tables)**
+
+#### 1️⃣ **accountFacilityConfig** (Single object with facility booleans)
+```json
+{
+  "atmFacility": true,
+  "atmWithdrawalFacility": true,
+  "upiFacility": true,
+  "posTransactionsFacility": true,
+  "chequeBook": true,
+  "impsFacility": true,
+  "smsAlerts": true,
+  "bbpsFacility": true,
+  "insuranceCover": true,
+  "bepgFacility": true,
+  "neftFacility": true,
+  "rtgsFacility": true,
+  "interBankTotalCapFacility": true,
+  "withdrawalFacility": true,
+  "depositFacilityKyc": true,
+  "virtualDebitCard": true
+}
+```
+→ **Table:** `m_savings_product_facility_config` (One-to-One relationship)
+
+#### 2️⃣ **accountFacilityLimits** (Array of limit objects)
+```json
+[
+  {"limitType": "ATM Withdrawal", "generalLimit": 40000, "minorAccountLimit": 5000, "smallSavingLimit": 10000},
+  {"limitType": "POS Transactions", "generalLimit": 100000, "minorAccountLimit": 2000, "smallSavingLimit": 10000},
+  ...
+]
+```
+→ **Table:** `m_savings_product_facility_limits` (One-to-Many relationship)
+
+#### 3️⃣ **depositLimitKyc** (Nested KYC limit rules)
+```json
+{
+  "general": {"kycType": "Full KYC", "limit": "No Limit"},
+  "minor": {"kycType": "Guardian KYC", "limit": 100000},
+  "smallSaving": {"kycType": "Min KYC", "limit": 50000}
+}
+```
+→ **Table:** `m_savings_product_deposit_limit_kyc` (One-to-One relationship, or JSON column)
+
+---
+
+## 📋 Database Changes Required
+
+### **1. Alter m_savings_product table**
+```sql
+ALTER TABLE m_savings_product ADD COLUMN (
+  account_type VARCHAR(50),
+  customer_segment VARCHAR(50),
+  product_code VARCHAR(20) UNIQUE,
+  effective_date DATE,
+  effective_to DATE,
+  end_date DATE,
+  introducer_required BOOLEAN DEFAULT FALSE,
+  share_linking_enabled BOOLEAN DEFAULT FALSE,
+  nomination_facility BOOLEAN DEFAULT FALSE,
+  dormancy_alert BOOLEAN DEFAULT FALSE,
+  interest_calculate_selector INT,
+  average_period VARCHAR(20),
+  auto_post BOOLEAN DEFAULT FALSE,
+  frequency_fix_day INT,
+  last_interest_date DATE,
+  enable_lockin_period BOOLEAN DEFAULT FALSE
+);
+```
+
+### **2. Create m_savings_product_facility_config table** (One-to-One)
+```sql
+CREATE TABLE m_savings_product_facility_config (
+  id BIGINT PRIMARY KEY AUTO_INCREMENT,
+  savings_product_id BIGINT NOT NULL UNIQUE,
+  atm_facility BOOLEAN DEFAULT FALSE,
+  atm_withdrawal_facility BOOLEAN DEFAULT FALSE,
+  upi_facility BOOLEAN DEFAULT FALSE,
+  pos_transactions_facility BOOLEAN DEFAULT FALSE,
+  cheque_book BOOLEAN DEFAULT FALSE,
+  imps_facility BOOLEAN DEFAULT FALSE,
+  sms_alerts BOOLEAN DEFAULT FALSE,
+  bbps_facility BOOLEAN DEFAULT FALSE,
+  insurance_cover BOOLEAN DEFAULT FALSE,
+  bepg_facility BOOLEAN DEFAULT FALSE,
+  neft_facility BOOLEAN DEFAULT FALSE,
+  rtgs_facility BOOLEAN DEFAULT FALSE,
+  inter_bank_total_cap_facility BOOLEAN DEFAULT FALSE,
+  withdrawal_facility BOOLEAN DEFAULT FALSE,
+  deposit_facility_kyc BOOLEAN DEFAULT FALSE,
+  virtual_debit_card BOOLEAN DEFAULT FALSE,
+  created_date DATETIME DEFAULT CURRENT_TIMESTAMP,
+  FOREIGN KEY (savings_product_id) REFERENCES m_savings_product(id) ON DELETE CASCADE
+);
+```
+
+### **3. Create m_savings_product_facility_limits table** (One-to-Many)
+```sql
+CREATE TABLE m_savings_product_facility_limits (
+  id BIGINT PRIMARY KEY AUTO_INCREMENT,
+  savings_product_id BIGINT NOT NULL,
+  limit_type VARCHAR(100) NOT NULL,
+  general_limit VARCHAR(50),  -- Can be decimal or "N/A", "UNLIMITED"
+  minor_account_limit VARCHAR(50),
+  small_saving_limit VARCHAR(50),
+  created_date DATETIME DEFAULT CURRENT_TIMESTAMP,
+  FOREIGN KEY (savings_product_id) REFERENCES m_savings_product(id) ON DELETE CASCADE,
+  UNIQUE KEY unique_product_limit_type (savings_product_id, limit_type)
+);
+```
+
+### **4. Create m_savings_product_deposit_limit_kyc table** (One-to-One)
+```sql
+CREATE TABLE m_savings_product_deposit_limit_kyc (
+  id BIGINT PRIMARY KEY AUTO_INCREMENT,
+  savings_product_id BIGINT NOT NULL UNIQUE,
+  general_kyc_type VARCHAR(50),
+  general_limit VARCHAR(50),  -- "No Limit" or numeric
+  minor_kyc_type VARCHAR(50),
+  minor_limit BIGINT,
+  small_saving_kyc_type VARCHAR(50),
+  small_saving_limit BIGINT,
+  created_date DATETIME DEFAULT CURRENT_TIMESTAMP,
+  FOREIGN KEY (savings_product_id) REFERENCES m_savings_product(id) ON DELETE CASCADE
+);
+```
+
+---
+
+## 🏗️ Java Entity Classes to Create/Update
+
+### **1. Update SavingsProduct Entity**
+Add these fields to `fineract-savings/src/main/java/org/apache/fineract/portfolio/savings/domain/SavingsProduct.java`:
+
+```java
+@Column(name = "account_type", length = 50)
+private String accountType;
+
+@Column(name = "customer_segment", length = 50)
+private String customerSegment;
+
+@Column(name = "product_code", length = 20, unique = true)
+private String productCode;
+
+@Column(name = "effective_date")
+private LocalDate effectiveDate;
+
+@Column(name = "effective_to")
+private LocalDate effectiveTo;
+
+@Column(name = "end_date")
+private LocalDate endDate;
+
+@Column(name = "introducer_required")
+private boolean introducerRequired;
+
+@Column(name = "share_linking_enabled")
+private boolean shareLinkingEnabled;
+
+@Column(name = "nomination_facility")
+private boolean nominationFacility;
+
+@Column(name = "dormancy_alert")
+private boolean dormancyAlert;
+
+@Column(name = "interest_calculate_selector")
+private Integer interestCalculateSelector;
+
+@Column(name = "average_period", length = 20)
+private String averagePeriod;
+
+@Column(name = "auto_post")
+private boolean autoPost;
+
+@Column(name = "frequency_fix_day")
+private Integer frequencyFixDay;
+
+@Column(name = "last_interest_date")
+private LocalDate lastInterestDate;
+
+@Column(name = "enable_lockin_period")
+private boolean enableLockinPeriod;
+
+// One-to-One relationship
+@OneToOne(cascade = CascadeType.ALL, mappedBy = "savingsProduct", orphanRemoval = true)
+private SavingsProductFacilityConfig facilityConfig;
+
+// One-to-Many relationship
+@OneToMany(cascade = CascadeType.ALL, mappedBy = "savingsProduct", orphanRemoval = true)
+private Set<SavingsProductFacilityLimit> facilityLimits = new HashSet<>();
+
+// One-to-One relationship
+@OneToOne(cascade = CascadeType.ALL, mappedBy = "savingsProduct", orphanRemoval = true)
+private SavingsProductDepositLimitKyc depositLimitKyc;
+```
+
+### **2. Create SavingsProductFacilityConfig Entity**
+`fineract-savings/src/main/java/org/apache/fineract/portfolio/savings/domain/SavingsProductFacilityConfig.java`:
+
+```java
+@Entity
+@Table(name = "m_savings_product_facility_config")
+public class SavingsProductFacilityConfig extends AbstractPersistableCustom<Long> {
+    
+    @OneToOne(fetch = FetchType.LAZY)
+    @JoinColumn(name = "savings_product_id", nullable = false)
+    private SavingsProduct savingsProduct;
+    
+    @Column(name = "atm_facility")
+    private Boolean atmFacility = false;
+    
+    @Column(name = "atm_withdrawal_facility")
+    private Boolean atmWithdrawalFacility = false;
+    
+    @Column(name = "upi_facility")
+    private Boolean upiFacility = false;
+    
+    @Column(name = "pos_transactions_facility")
+    private Boolean posTransactionsFacility = false;
+    
+    @Column(name = "cheque_book")
+    private Boolean chequeBook = false;
+    
+    @Column(name = "imps_facility")
+    private Boolean impsFacility = false;
+    
+    @Column(name = "sms_alerts")
+    private Boolean smsAlerts = false;
+    
+    @Column(name = "bbps_facility")
+    private Boolean bbpsFacility = false;
+    
+    @Column(name = "insurance_cover")
+    private Boolean insuranceCover = false;
+    
+    @Column(name = "bepg_facility")
+    private Boolean bepgFacility = false;
+    
+    @Column(name = "neft_facility")
+    private Boolean neftFacility = false;
+    
+    @Column(name = "rtgs_facility")
+    private Boolean rtgsFacility = false;
+    
+    @Column(name = "inter_bank_total_cap_facility")
+    private Boolean interBankTotalCapFacility = false;
+    
+    @Column(name = "withdrawal_facility")
+    private Boolean withdrawalFacility = false;
+    
+    @Column(name = "deposit_facility_kyc")
+    private Boolean depositFacilityKyc = false;
+    
+    @Column(name = "virtual_debit_card")
+    private Boolean virtualDebitCard = false;
+    
+    // Getters and setters
+}
+```
+
+### **3. Create SavingsProductFacilityLimit Entity**
+`fineract-savings/src/main/java/org/apache/fineract/portfolio/savings/domain/SavingsProductFacilityLimit.java`:
+
+```java
+@Entity
+@Table(name = "m_savings_product_facility_limits")
+public class SavingsProductFacilityLimit extends AbstractPersistableCustom<Long> {
+    
+    @ManyToOne(fetch = FetchType.LAZY)
+    @JoinColumn(name = "savings_product_id", nullable = false)
+    private SavingsProduct savingsProduct;
+    
+    @Column(name = "limit_type", length = 100, nullable = false)
+    private String limitType;
+    
+    @Column(name = "general_limit", length = 50)
+    private String generalLimit;  // Can be "UNLIMITED", "N/A", or numeric value
+    
+    @Column(name = "minor_account_limit", length = 50)
+    private String minorAccountLimit;
+    
+    @Column(name = "small_saving_limit", length = 50)
+    private String smallSavingLimit;
+    
+    // Getters and setters
+    
+    public static SavingsProductFacilityLimit create(
+            SavingsProduct savingsProduct,
+            String limitType,
+            String generalLimit,
+            String minorAccountLimit,
+            String smallSavingLimit) {
+        
+        SavingsProductFacilityLimit limit = new SavingsProductFacilityLimit();
+        limit.savingsProduct = savingsProduct;
+        limit.limitType = limitType;
+        limit.generalLimit = generalLimit;
+        limit.minorAccountLimit = minorAccountLimit;
+        limit.smallSavingLimit = smallSavingLimit;
+        return limit;
+    }
+}
+```
+
+### **4. Create SavingsProductDepositLimitKyc Entity**
+`fineract-savings/src/main/java/org/apache/fineract/portfolio/savings/domain/SavingsProductDepositLimitKyc.java`:
+
+```java
+@Entity
+@Table(name = "m_savings_product_deposit_limit_kyc")
+public class SavingsProductDepositLimitKyc extends AbstractPersistableCustom<Long> {
+    
+    @OneToOne(fetch = FetchType.LAZY)
+    @JoinColumn(name = "savings_product_id", nullable = false)
+    private SavingsProduct savingsProduct;
+    
+    @Column(name = "general_kyc_type", length = 50)
+    private String generalKycType;
+    
+    @Column(name = "general_limit", length = 50)
+    private String generalLimit;  // "No Limit" or numeric
+    
+    @Column(name = "minor_kyc_type", length = 50)
+    private String minorKycType;
+    
+    @Column(name = "minor_limit")
+    private Long minorLimit;
+    
+    @Column(name = "small_saving_kyc_type", length = 50)
+    private String smallSavingKycType;
+    
+    @Column(name = "small_saving_limit")
+    private Long smallSavingLimit;
+    
+    // Getters and setters
+}
+```
+
+---
+
+## 🔑 API Constants to Add
+
+Update `fineract-core/src/main/java/org/apache/fineract/portfolio/savings/SavingsApiConstants.java`:
+
+```java
+// New Savings Product Fields
+public static final String accountTypeParamName = "accountType";
+public static final String customerSegmentParamName = "customerSegment";
+public static final String productCodeParamName = "productCode";
+public static final String effectiveDateParamName = "effectiveDate";
+public static final String effectiveToParamName = "effectiveTo";
+public static final String endDateParamName = "endDate";
+public static final String introducerRequiredParamName = "introducerRequired";
+public static final String shareLinkingEnabledParamName = "shareLinkingEnabled";
+public static final String nominationFacilityParamName = "nominationFacility";
+public static final String dormancyAlertParamName = "dormancyAlert";
+public static final String interestCalculateSelectorParamName = "interestCalculateSelector";
+public static final String averagePeriodParamName = "averagePeriod";
+public static final String autoPostParamName = "autoPost";
+public static final String frequencyFixDayParamName = "frequencyFixDay";
+public static final String lastInterestDateParamName = "lastInterestDate";
+public static final String enableLockinPeriodParamName = "enableLockinPeriod";
+
+// Complex objects
+public static final String accountFacilityConfigParamName = "accountFacilityConfig";
+public static final String accountFacilityLimitsParamName = "accountFacilityLimits";
+public static final String depositLimitKycParamName = "depositLimitKyc";
+
+// Facility config fields
+public static final String atmFacilityParamName = "atmFacility";
+public static final String atmWithdrawalFacilityParamName = "atmWithdrawalFacility";
+public static final String upiFacilityParamName = "upiFacility";
+// ... etc for all facility fields
+
+// Limit fields
+public static final String limitTypeParamName = "limitType";
+public static final String generalLimitParamName = "generalLimit";
+public static final String minorAccountLimitParamName = "minorAccountLimit";
+public static final String smallSavingLimitParamName = "smallSavingLimit";
+```
+
+---
+
+## ✅ Validator Updates
+
+Update `fineract-savings/src/main/java/org/apache/fineract/portfolio/savings/data/SavingsProductDataValidator.java`:
+
+1. **Add to parameter whitelist:**
+```java
+private static final Set<String> SAVINGS_PRODUCT_REQUEST_DATA_PARAMETERS = 
+    new HashSet<>(Arrays.asList(
+        // ... existing parameters ...
+        "accountType",
+        "customerSegment", 
+        "productCode",
+        "effectiveDate",
+        "effectiveTo",
+        "endDate",
+        "introducerRequired",
+        "shareLinkingEnabled",
+        "nominationFacility",
+        "dormancyAlert",
+        "interestCalculateSelector",
+        "averagePeriod",
+        "autoPost",
+        "frequencyFixDay",
+        "lastInterestDate",
+        "enableLockinPeriod",
+        "accountFacilityConfig",
+        "accountFacilityLimits",
+        "depositLimitKyc"
+    ));
+```
+
+2. **Add validation logic in validateForCreate() and validateForUpdate():**
+```java
+if (command.stringValueOfParameterNamedAllowingNull("productCode") != null) {
+    final String productCode = command.stringValueOfParameterNamed("productCode");
+    if (StringUtils.isBlank(productCode)) {
+        baseDataValidator.reset().parameter("productCode").value(productCode).notBlank();
+    }
+}
+
+if (command.hasParameter("effectiveDate")) {
+    final LocalDate effectiveDate = command.localDateValueOfParameterNamed("effectiveDate");
+    baseDataValidator.reset().parameter("effectiveDate").value(effectiveDate).notNull();
+}
+
+// Similar for other date fields
+if (command.hasParameter("effectiveTo") && command.hasParameter("effectiveDate")) {
+    final LocalDate effectiveDate = command.localDateValueOfParameterNamed("effectiveDate");
+    final LocalDate effectiveTo = command.localDateValueOfParameterNamed("effectiveTo");
+    if (effectiveTo.isBefore(effectiveDate)) {
+        baseDataValidator.reset().parameter("effectiveTo").value(effectiveTo)
+            .failWithCode("error.msg.effectiveto.cannot.be.before.effectivedate");
+    }
+}
+```
+
+---
+
+## 🔧 Assembler Updates
+
+Update `fineract-savings/src/main/java/org/apache/fineract/portfolio/savings/domain/SavingsProductAssembler.java`:
+
+Add helper methods to extract and assemble nested objects:
+
+```java
+public SavingsProductFacilityConfig assembleAccountFacilityConfig(final JsonCommand command, final SavingsProduct product) {
+    final JsonObject jsonObject = command.parsedJson();
+    
+    if (!jsonObject.has("accountFacilityConfig")) {
+        return null;
+    }
+    
+    final JsonObject facilityConfigJson = jsonObject.getAsJsonObject("accountFacilityConfig");
+    SavingsProductFacilityConfig config = new SavingsProductFacilityConfig();
+    config.setSavingsProduct(product);
+    config.setAtmFacility(facilityConfigJson.has("atmFacility") ? 
+        facilityConfigJson.getAsJsonPrimitive("atmFacility").getAsBoolean() : false);
+    config.setAtmWithdrawalFacility(facilityConfigJson.has("atmWithdrawalFacility") ?
+        facilityConfigJson.getAsJsonPrimitive("atmWithdrawalFacility").getAsBoolean() : false);
+    // ... set other facilities ...
+    return config;
+}
+
+public Set<SavingsProductFacilityLimit> assembleAccountFacilityLimits(final JsonCommand command, final SavingsProduct product) {
+    final JsonObject jsonObject = command.parsedJson();
+    final Set<SavingsProductFacilityLimit> limits = new HashSet<>();
+    
+    if (!jsonObject.has("accountFacilityLimits")) {
+        return limits;
+    }
+    
+    final JsonArray limitsArray = jsonObject.getAsJsonArray("accountFacilityLimits");
+    for (JsonElement element : limitsArray) {
+        final JsonObject limitJson = element.getAsJsonObject();
+        SavingsProductFacilityLimit limit = SavingsProductFacilityLimit.create(
+            product,
+            limitJson.has("limitType") ? limitJson.getAsJsonPrimitive("limitType").getAsString() : null,
+            limitJson.has("generalLimit") ? limitJson.getAsJsonPrimitive("generalLimit").getAsString() : null,
+            limitJson.has("minorAccountLimit") ? limitJson.getAsJsonPrimitive("minorAccountLimit").getAsString() : null,
+            limitJson.has("smallSavingLimit") ? limitJson.getAsJsonPrimitive("smallSavingLimit").getAsString() : null
+        );
+        limits.add(limit);
+    }
+    return limits;
+}
+
+public SavingsProductDepositLimitKyc assembleDepositLimitKyc(final JsonCommand command, final SavingsProduct product) {
+    final JsonObject jsonObject = command.parsedJson();
+    
+    if (!jsonObject.has("depositLimitKyc")) {
+        return null;
+    }
+    
+    final JsonObject kycJson = jsonObject.getAsJsonObject("depositLimitKyc");
+    SavingsProductDepositLimitKyc kyc = new SavingsProductDepositLimitKyc();
+    kyc.setSavingsProduct(product);
+    
+    if (kycJson.has("general")) {
+        final JsonObject generalJson = kycJson.getAsJsonObject("general");
+        kyc.setGeneralKycType(generalJson.has("kycType") ? 
+            generalJson.getAsJsonPrimitive("kycType").getAsString() : null);
+        kyc.setGeneralLimit(generalJson.has("limit") ? 
+            generalJson.getAsJsonPrimitive("limit").getAsString() : null);
+    }
+    
+    // ... handle minor and smallSaving similarly ...
+    
+    return kyc;
+}
+```
+
+---
+
+## 💾 Repository Classes to Create
+
+### **SavingsProductFacilityConfigRepository.java**
+```java
+@Repository
+public interface SavingsProductFacilityConfigRepository extends 
+        JpaRepository<SavingsProductFacilityConfig, Long> {
+    SavingsProductFacilityConfig findBySavingsProductId(Long savingsProductId);
+}
+```
+
+### **SavingsProductFacilityLimitRepository.java**
+```java
+@Repository
+public interface SavingsProductFacilityLimitRepository extends 
+        JpaRepository<SavingsProductFacilityLimit, Long> {
+    List<SavingsProductFacilityLimit> findBySavingsProductId(Long savingsProductId);
+}
+```
+
+### **SavingsProductDepositLimitKycRepository.java**
+```java
+@Repository
+public interface SavingsProductDepositLimitKycRepository extends 
+        JpaRepository<SavingsProductDepositLimitKyc, Long> {
+    SavingsProductDepositLimitKyc findBySavingsProductId(Long savingsProductId);
+}
+```
+
+---
+
+## 🚀 Service Updates
+
+Update `SavingsProductWritePlatformServiceImpl.create()` method:
+
+```java
+public CommandProcessingResult create(final JsonCommand command) {
+    try {
+        this.savingsProductDataValidator.validateForCreate(command.json());
+        
+        // ... existing code ...
+        
+        // Assemble new objects
+        final SavingsProductFacilityConfig facilityConfig = 
+            this.savingsProductAssembler.assembleAccountFacilityConfig(command, product);
+        final Set<SavingsProductFacilityLimit> facilityLimits = 
+            this.savingsProductAssembler.assembleAccountFacilityLimits(command, product);
+        final SavingsProductDepositLimitKyc depositLimitKyc = 
+            this.savingsProductAssembler.assembleDepositLimitKyc(command, product);
+        
+        if (facilityConfig != null) {
+            product.setFacilityConfig(facilityConfig);
+            facilityConfigRepository.saveAndFlush(facilityConfig);
+        }
+        
+        if (!facilityLimits.isEmpty()) {
+            product.setFacilityLimits(facilityLimits);
+            facilityLimitRepository.saveAll(facilityLimits);
+        }
+        
+        if (depositLimitKyc != null) {
+            product.setDepositLimitKyc(depositLimitKyc);
+            depositLimitKycRepository.saveAndFlush(depositLimitKyc);
+        }
+        
+        // Save main product
+        final SavingsProduct productSaved = this.savingProductRepository.saveAndFlush(product);
+        
+        return new CommandProcessingResultBuilder()
+            .withCommandId(command.commandId())
+            .withEntityId(productSaved.getId())
+            .build();
+            
+    } catch (final DataAccessException e) {
+        // error handling
+    }
+}
+```
+
+---
+
+## 📊 Read Service Updates
+
+Update `SavingsProductReadPlatformService` to include new fields in queries and DTO.
+
+---
+
+## 🎯 Summary of Changes
+
+| Component | Type | Files to Modify/Create |
+|-----------|------|----------------------|
+| Database | Migration | SQL scripts |
+| Entities | Create/Modify | 4 entity classes |
+| Constants | Modify | SavingsApiConstants.java |
+| Validator | Modify | SavingsProductDataValidator.java |
+| Assembler | Modify | SavingsProductAssembler.java |
+| Repositories | Create | 3 repository interfaces |
+| Services | Modify | SavingsProductWrite/ReadPlatformService |
+| DAO | Modify | SQL queries in read service |
+
+---
+
+## 📌 Implementation Priority
+
+1. **Phase 1:** Create database tables
+2. **Phase 2:** Create entity classes
+3. **Phase 3:** Add API constants and validator rules
+4. **Phase 4:** Create repositories and update service layer
+5. **Phase 5:** Update read service and DTOs
+6. **Phase 6:** Test with your POST endpoint
+
+---
+
+## ⚠️ Important Notes
+
+- ✅ Fields like `otherGlMappings`, `isDormancyTrackingActive`, etc. **already exist** in the system
+- ✅ Ensure backward compatibility - make all new fields optional in the validator
+- ✅ Use cascade = CascadeType.ALL and orphanRemoval = true for nested entities
+- ✅ Add unique constraints where needed (e.g., productCode, limit combinations)
+- ✅ Consider adding indexes on frequently queried fields
+- ✅ Update DTO classes to include these new fields in API responses
+

LICENSE_RELEASE

@@ -216,92 +216,9 @@ and resource files are also released under the ASF license above.
 ==================================================
 *The exceptions for binary release are as follows:
 ==================================================
-This product bundles AOP Alliance v1.0, which is available under a 
-Public Domain license. For details, see licenses/binary/Aopa.PL
 
-This product bundles ASM Core v3.1, which is available under a BSD license.
-For details, see licenses/binary/Asm.BSD
+This product bundles third party jars and resource files that are 
+released under other licenses than the ASF license. You can find
+details of all third party licenses in the directory "licenses". 
 
-This product bundles JavaMail API(compat) v1.5.0-b01, 
-which is available under a CDDL v1.0 license.
-For details, see licenses/binary/Javamail.CDDL
-
-This product bundles AspectJ Runtime v1.8.2, Copyright (c) 1999-2001 
-Xerox Corporation, 2002 Palo Alto Research Center, Incorporated (PARC),
-which is available under a EPL v1.0 license. 
-For details, see licenses/binary/Aspectrt.EPL
-
-This product bundles AspectJ Weaver v1.8.2, Copyright (c) 2002 Palo Alto
-Research Center, Incorporated (PARC), which is available under a EPL v1.0
-license. For details, see licenses/binary/Aspectweaver.EPL
-
-This product bundles IText(A Free Java PDF Library) v2.1.7, Copyright 2007
-Bruno Lowagie, which is available under a MPL v1.1 license.
-For details, see licenses/binary/IText.MPL
-
-This product bundles DOM4J, Copyright 2001-2005 (C) MetaStuff, Ltd., 
-which is available under a BSD license.
-For details, see licenses/binary/Dom4J.BSD
-
-This product bundles JDBC driver for MySQL and Drizzle v1.3, Copyright (c)
-2009-2013, Marcus Eriksson which is available under a BSD license.
-For details, see licenses/binary/Drizzle.BSD
-
-This product bundles Ical4J v1.0.4, Copyright (c) 2012, Ben Fortuna,
-which is available under a BSD license.
-For details, see licenses/binary/Ical4J.BSD
-
-This product bundles Jersey Core v1.17, Copyright (c) 2010-2012 Oracle
-and/or its affiliates, which is available under a CDDL 1.1 license.
-For details, see licenses/binary/Jersey.CDDL
-
-This product bundles Jersey Json v1.17, Copyright (c) 2010-2012 Oracle
-and/or its affiliates, which is available under a CDDL 1.1 license.
-For details, see licenses/binary/Jersey.CDDL
-
-This product bundles Jersey Multipart v1.17, Copyright (c) 2010-2011 Oracle
-and/or its affiliates, which is available under a CDDL 1.1 license.
-For details, see licenses/binary/Jersey.CDDL
-
-This product bundles Jersey Server v1.17, Copyright (c) 2010-2011 Oracle
-and/or its affiliates, which is available under a CDDL 1.1 license.
-For details, see licenses/binary/Jersey.CDDL
-
-This product bundles Jersey Servlet v1.17, Copyright (c) 2010-2011 Oracle
-and/or its affiliates, which is available under a CDDL 1.1 license.
-For details, see licenses/binary/Jersey.CDDL
-
-This product bundles Jersey Spring v1.17, Copyright (c) 2010-2011 Oracle
-and/or its affiliates, which is available under a CDDL 1.1 license.
-For details, see licenses/binary/Jersey.CDDL
-
-This product bundles Logback Classic Module v1.1.2, Copyright (C) 1999-2012,
-QOS.ch. All rights reserved, which is available under a EPL v1.0 license.
-For details, see licenses/binary/Logback.EPL
-
-This product bundles Logback Core Module v1.1.2, Copyright (C) 1999-2012,
-QOS.ch. All rights reserved, which is available under a EPL v1.0 license.
-For details, see licenses/binary/Logback.EPL
-
-This product bundles MIME Streaming Extension v1.6, Copyright (c) 1997-2010
-Oracle and/or its affiliates. All rights reserved., which is available under
-a CDDL v1.1 license.
-For details, see licenses/binary/Mimepull.CDDL
-
-This product bundles JUnit v3.8.1 created by Erich Gamma and Kent Beck which
-is available under a CPL v1.0 license. 
-For details, see licenses/binary/Junit.CPL
-
-This product bundles SLF4J API Module v1.7.7 opyright (c) 2004-2013 QOS.ch
-All rights reserved., which is available under a MIT license. 
-For details, see licenses/binary/Slf4j.MIT
-	
-This product bundles Backport Util Concurrent v3.1 written by Dawid Kurzyniec,
-which is avilable under Public Domain license. 
-For details see licenses/binary/Backport.PL
-
-This product bundles JarAnalyzer v1.2 written by Kirk Knoernschild,
-which is available under BSD license.
-For details see licences/binary/JarAnalyzer.BSD
-
-******************************************
+******************************************

LICENSE_SOURCE

@@ -217,70 +217,11 @@ and resource files are also released under the ASF license above.
 *The exceptions for source release are as follows:
 ==================================================
 
-For API & System Architecture Documentation Apache Fineract includes
-following css and js packages.
-
-This product bundles normalize v1.1.1 and v2.1.0, copyright Nicolas
-Gallagher and Jonathan Neal, which is available under a MIT license.
-For details, see licenses/source/normalize.MIT
-
-This product bundles Modernizr v2.6.2, which is available under a MIT license.
-For details, see licenses/source/modernizr.MIT
-
-This product bundles filesaver, copyright Eli Grey, which is available under
-a MIT license.
-For details, see licenses/source/filesaver.MIT
-
-This product bundles Glyphicons Halflings Regular, copyright Jan Kovarik, 
-which is available under a MIT license.
-For details, see licenses/source/glyphicons.MIT
-
-This product bundles jszip, copyright Stuart Knightley, 
-David Duponchel, Franz Buchinger and António Afonso, which is available
-under a MIT license.
-For details, see licenses/source/jszip.MIT
+For API Documentation for Apache Fineract includes
+following css and js packages:
 
 This product bundles jQuery v1.7, v1.7.1, Copyright (c) 2011 John Resig,
 which is available under a MIT license.
-For details, see licenses/source/jQuery1.MIT
+For details, see https://jquery.org/license/
 
-This product bundles jQuery v1.9.1, v1.10.2, copyright jQuery Foundation,
-Inc. which is available under a MIT license.
-For details, see licenses/source/jQuery.MIT
-
-This product bundles Respond v1.1.0, copyright Scott Jehl,
-which is available under a MIT license.
-For details, see licenses/source/respond.MIT
-
-This product bundles matchMedia polyfill, copyright Scott Jehl,
-which is available under a MIT license.
-For details, see licenses/polyfill.MIT
-
-This product bundles HTML5Shiv v3.6.2, copyright Alexander Farkas,
-which is available under a MIT license.
-For details, see licenses/source/html5shiv.MIT
-
-This product bundles UglifyJS copyright Mihai Bazon,
-which available under a BSD license.
-For details, see licenses/source/uglify.BSD
-
-This product bundles sizzle copyright jQuery Foundation and other
-contributors, which is available under a MIT license.
-For details, see licenses/source/sizzle.MIT
-
-This product bundles some parts of es5-shim, copyright Kristopher Michael
-Kowal and contributors, which is available under a MIT license.
-For details, see licenses/source/es5shim.MIT
-
-This product bundles toc v0.1.2, copyright Greg Allen,
-which is available under a MIT license.
-For details, see licenses/source/toc.MIT
-
-This product bundles livejs Version 4, copyright Martin Kool and Q42,
-which is available under a MIT license.
-For details, see licenses/source/livejs.MIT
-
-This product bundles HTML5 Boilerplate, which is under a MIT license.
-For details, see licenses/source/h5bp.MIT.
-
-******************************************
+******************************************

NOTICE_RELEASE

@@ -1,79 +1,9 @@
 Apache Fineract
-Copyright 2008-2016 The Apache Software Foundation
+Copyright 2008-2025 The Apache Software Foundation
 
-This product includes software developed by The Apache Software
-Foundation (http://www.apache.org/).
+This product includes software developed at
+The Apache Software Foundation (http://www.apache.org/).
 
-Apache Fineract - notice for binary distribution
-==========================================
-Apache Fineract includes JavaMail API(compat) v1.5.0-b01.
-Copyright (c) 1997-2013 Oracle and/or its affiliates. All rights reserved.
-Fineract elects to include this software in this distribution under the
-CDDL license. You can obtain a copy of the License at:
-https://glassfish.java.net/public/CDDL+GPL.html
-
-Apache Fineract includes all Jersey libraries (Jersey Core v1.17, 
-Jersey Json v1.17, Jersey Multipart v1.17, Jersey Server v1.17,
-Jersey Servlet v1.17, Jersey Spring v1.17). 
-Copyright (c) 2010-2011 Oracle and/or its affiliates. All rights reserved.
-Fineract elects to include this software in this distribution under the 
-CDDL license.  You can obtain a copy of the License at:
-https://glassfish.java.net/public/CDDL+GPL.html
-
-Apache Fineract includes Logback Classic Module v1.1.2 and Logback Core
-Module v1.1.2, Copyright (C) 1999-2012, QOS.ch. 
-All rights reserved. Fineract elects to include this software in this
-distribution under the EPL license. You can obtain a copy of the License at:
-http://www.eclipse.org/legal/epl-v10.html
-
-Apache Fineract includes MIME Streaming Extension v1.6, 
-Copyright (c) 1997-2010 Oracle and/or its affiliates. 
-All rights reserved. Fineract elects to include this software in this
-distribution under the CDDL license. You can obtain a copy of the License at:
-https://glassfish.java.net/public/CDDL+GPL_1_1.html
-
-Apache Fineract includes JUnit v3.8.1 created by Erich Gamma and Kent Beck. 
-Fineract elects to include this software in this distribution under the
-CPL license. You can obtain a copy of the License at:
-https://opensource.org/licenses/cpl1.0.txt
-
-Apache Fineract includes Log4j Implemented Over SLF4J. Fineract elects to
-include this software in this distribution under the Apache license. 
-You can obtain a copy of the License at:
-http://apache.org/licenses/LICENSE-2.0
-
-Apache Fineract includes Jackson Core v2.3.4, Jackson Annotations v2.3.0,
-Jackson Databind v2.3.4, JAX RS Provider For JSON Content Type v1.9.2, 
-Xml Compatibility Extensions For Jackson v1.9.2 libraries. 
-Fineract elects to include this software in this distribution under the
-Apache license. You can obtain a copy of the License at:
-http://apache.org/licenses/LICENSE-2.0
-
-Apache Fineract includes AspectJ Runtime v1.8.2, Copyright (c) 1999-2001
-Xerox Corporation, 2002 Palo Alto Research Center, Incorporated (PARC) and
-AspectJ Weaver v1.8.2 Copyright (c) 2002 Palo Alto Research Center,
-Incorporated (PARC)., libraries. The library information is available at
-(https://eclipse.org/aspectj/)
-
-Apache Fineract includes IText(A Free Java PDF Library) v2.1.7 library,
-Copyright 2007 Bruno Lowagie. The library information is available at
-(http://developers.itextpdf.com/itext-java)
-
-=====================
-Apache OpenJPA NOTICE
-
-OpenJPA includes software developed by the SERP project
-Copyright (c) 2002-2006, A. Abram White. All rights reserved.
-
-OpenJPA includes the persistence and orm schemas from the JPA specifications.
-Copyright 2005-2014 Sun Microsystems, Inc. All rights reserved.
-
-OpenJPA includes the persistence and orm schemas from the JPA specifications.
-Copyright 2005-2009 Sun Microsystems, Inc. All rights reserved.
-OpenJPA elects to include this software in this distribution under the
-CDDL license.  You can obtain a copy of the License at:
-    https://glassfish.dev.java.net/public/CDDL+GPL.html
-The source code is available at:
-    https://glassfish.dev.java.net/source/browse/glassfish/
-
-OpenJPA includes software written by Miroslav Nachev
+This product includes third party libraries and resource files from
+different providers. The details of the different packages and their
+respective licenses can be found under "licenses"

NOTICE_SOURCE

@@ -1,5 +1,5 @@
 Apache Fineract
-Copyright 2008-2016 The Apache Software Foundation
+Copyright 2008-2025 The Apache Software Foundation
 
-This product includes software developed by The Apache Software
-Foundation (http://www.apache.org/).
+This product includes software developed at
+The Apache Software Foundation (http://www.apache.org/).

OpenProject_Postman_Collection.json

@@ -0,0 +1,273 @@
+{
+	"info": {
+		"_postman_id": "op-fineract-collection",
+		"name": "Fineract - OpenProject Integration",
+		"description": "Postman collection for Fineract OpenProject integration API endpoints.\n\nBase URL: {{baseUrl}}/fineract-provider/api/v1/openproject\n\nAuthentication: Basic Auth (Fineract user credentials)",
+		"schema": "https://schema.getpostman.com/json/collection/v2.1.0/collection.json"
+	},
+	"auth": {
+		"type": "basic",
+		"basic": [
+			{
+				"key": "username",
+				"value": "{{fineractUser}}",
+				"type": "string"
+			},
+			{
+				"key": "password",
+				"value": "{{fineractPassword}}",
+				"type": "string"
+			}
+		]
+	},
+	"variable": [
+		{
+			"key": "baseUrl",
+			"value": "https://localhost:8443",
+			"type": "string"
+		},
+		{
+			"key": "fineractUser",
+			"value": "mifos",
+			"type": "string"
+		},
+		{
+			"key": "fineractPassword",
+			"value": "password",
+			"type": "string"
+		},
+		{
+			"key": "tenantId",
+			"value": "default",
+			"type": "string"
+		}
+	],
+	"item": [
+		{
+			"name": "Get Project Details",
+			"request": {
+				"method": "GET",
+				"header": [
+					{
+						"key": "fineract-platform-tenantid",
+						"value": "{{tenantId}}"
+					},
+					{
+						"key": "Content-Type",
+						"value": "application/json"
+					}
+				],
+				"url": {
+					"raw": "{{baseUrl}}/fineract-provider/api/v1/openproject/project",
+					"host": ["{{baseUrl}}"],
+					"path": ["fineract-provider", "api", "v1", "openproject", "project"]
+				},
+				"description": "Returns the configured OpenProject project details (CBSNexora)."
+			}
+		},
+		{
+			"name": "Get Work Packages (All)",
+			"request": {
+				"method": "GET",
+				"header": [
+					{
+						"key": "fineract-platform-tenantid",
+						"value": "{{tenantId}}"
+					},
+					{
+						"key": "Content-Type",
+						"value": "application/json"
+					}
+				],
+				"url": {
+					"raw": "{{baseUrl}}/fineract-provider/api/v1/openproject/work-packages?pageSize=25&offset=1",
+					"host": ["{{baseUrl}}"],
+					"path": ["fineract-provider", "api", "v1", "openproject", "work-packages"],
+					"query": [
+						{
+							"key": "pageSize",
+							"value": "25"
+						},
+						{
+							"key": "offset",
+							"value": "1"
+						}
+					]
+				},
+				"description": "Returns all work packages from the OpenProject project."
+			}
+		},
+		{
+			"name": "Get Work Packages (Open)",
+			"request": {
+				"method": "GET",
+				"header": [
+					{
+						"key": "fineract-platform-tenantid",
+						"value": "{{tenantId}}"
+					},
+					{
+						"key": "Content-Type",
+						"value": "application/json"
+					}
+				],
+				"url": {
+					"raw": "{{baseUrl}}/fineract-provider/api/v1/openproject/work-packages?status=open&pageSize=25&offset=1",
+					"host": ["{{baseUrl}}"],
+					"path": ["fineract-provider", "api", "v1", "openproject", "work-packages"],
+					"query": [
+						{
+							"key": "status",
+							"value": "open"
+						},
+						{
+							"key": "pageSize",
+							"value": "25"
+						},
+						{
+							"key": "offset",
+							"value": "1"
+						}
+					]
+				},
+				"description": "Returns only open work packages."
+			}
+		},
+		{
+			"name": "Get Work Packages (Closed)",
+			"request": {
+				"method": "GET",
+				"header": [
+					{
+						"key": "fineract-platform-tenantid",
+						"value": "{{tenantId}}"
+					},
+					{
+						"key": "Content-Type",
+						"value": "application/json"
+					}
+				],
+				"url": {
+					"raw": "{{baseUrl}}/fineract-provider/api/v1/openproject/work-packages?status=closed&pageSize=25&offset=1",
+					"host": ["{{baseUrl}}"],
+					"path": ["fineract-provider", "api", "v1", "openproject", "work-packages"],
+					"query": [
+						{
+							"key": "status",
+							"value": "closed"
+						},
+						{
+							"key": "pageSize",
+							"value": "25"
+						},
+						{
+							"key": "offset",
+							"value": "1"
+						}
+					]
+				},
+				"description": "Returns only closed work packages."
+			}
+		},
+		{
+			"name": "Get Status Summary",
+			"request": {
+				"method": "GET",
+				"header": [
+					{
+						"key": "fineract-platform-tenantid",
+						"value": "{{tenantId}}"
+					},
+					{
+						"key": "Content-Type",
+						"value": "application/json"
+					}
+				],
+				"url": {
+					"raw": "{{baseUrl}}/fineract-provider/api/v1/openproject/summary",
+					"host": ["{{baseUrl}}"],
+					"path": ["fineract-provider", "api", "v1", "openproject", "summary"]
+				},
+				"description": "Returns a summary of all work packages grouped by status, type, and priority."
+			}
+		},
+		{
+			"name": "Create Work Package - Feature",
+			"request": {
+				"method": "POST",
+				"header": [
+					{
+						"key": "fineract-platform-tenantid",
+						"value": "{{tenantId}}"
+					},
+					{
+						"key": "Content-Type",
+						"value": "application/json"
+					}
+				],
+				"body": {
+					"mode": "raw",
+					"raw": "{\n  \"subject\": \"Integrate OpenProject with CBS Dashboard\",\n  \"description\": \"Add OpenProject work package tracking to the CBS admin dashboard so project managers can view task progress directly from the banking system.\",\n  \"type\": \"Feature\"\n}"
+				},
+				"url": {
+					"raw": "{{baseUrl}}/fineract-provider/api/v1/openproject/work-packages",
+					"host": ["{{baseUrl}}"],
+					"path": ["fineract-provider", "api", "v1", "openproject", "work-packages"]
+				},
+				"description": "Creates a new Feature work package in OpenProject.\n\nValid types: Task, Milestone, Summary task, Feature, Epic, User story, Bug, Incident, Support Ticket, Problem, Change Request, Enhancement"
+			}
+		},
+		{
+			"name": "Create Work Package - Task",
+			"request": {
+				"method": "POST",
+				"header": [
+					{
+						"key": "fineract-platform-tenantid",
+						"value": "{{tenantId}}"
+					},
+					{
+						"key": "Content-Type",
+						"value": "application/json"
+					}
+				],
+				"body": {
+					"mode": "raw",
+					"raw": "{\n  \"subject\": \"Setup CI/CD pipeline for CBS deployment\",\n  \"description\": \"Configure automated build and deployment pipeline for the Core Banking System.\",\n  \"type\": \"Task\"\n}"
+				},
+				"url": {
+					"raw": "{{baseUrl}}/fineract-provider/api/v1/openproject/work-packages",
+					"host": ["{{baseUrl}}"],
+					"path": ["fineract-provider", "api", "v1", "openproject", "work-packages"]
+				},
+				"description": "Creates a new Task work package in OpenProject."
+			}
+		},
+		{
+			"name": "Create Work Package - Bug",
+			"request": {
+				"method": "POST",
+				"header": [
+					{
+						"key": "fineract-platform-tenantid",
+						"value": "{{tenantId}}"
+					},
+					{
+						"key": "Content-Type",
+						"value": "application/json"
+					}
+				],
+				"body": {
+					"mode": "raw",
+					"raw": "{\n  \"subject\": \"Fix loan repayment calculation rounding error\",\n  \"description\": \"Loan repayment amounts show minor rounding differences when calculated with different interest methods.\",\n  \"type\": \"Bug\"\n}"
+				},
+				"url": {
+					"raw": "{{baseUrl}}/fineract-provider/api/v1/openproject/work-packages",
+					"host": ["{{baseUrl}}"],
+					"path": ["fineract-provider", "api", "v1", "openproject", "work-packages"]
+				},
+				"description": "Creates a new Bug work package in OpenProject."
+			}
+		}
+	]
+}

RBI_Feeds_Postman_Collection.json

@@ -0,0 +1,276 @@
+{
+	"info": {
+		"_postman_id": "rbi-feeds-collection",
+		"name": "RBI Feeds API - Fineract CBS",
+		"description": "RBI RSS Feed endpoints for fetching and retrieving RBI circulars, notifications, press releases etc.",
+		"schema": "https://schema.getpostman.com/json/collection/v2.1.0/collection.json"
+	},
+	"auth": {
+		"type": "basic",
+		"basic": [
+			{
+				"key": "username",
+				"value": "mifos",
+				"type": "string"
+			},
+			{
+				"key": "password",
+				"value": "password",
+				"type": "string"
+			}
+		]
+	},
+	"variable": [
+		{
+			"key": "baseUrl",
+			"value": "https://localhost:8443/fineract-provider/api/v1",
+			"type": "string"
+		},
+		{
+			"key": "tenantId",
+			"value": "default",
+			"type": "string"
+		}
+	],
+	"item": [
+		{
+			"name": "1. Trigger Fetch (Run First)",
+			"request": {
+				"method": "POST",
+				"header": [
+					{
+						"key": "Fineract-Platform-TenantId",
+						"value": "{{tenantId}}",
+						"type": "text"
+					},
+					{
+						"key": "Content-Type",
+						"value": "application/json",
+						"type": "text"
+					}
+				],
+				"body": {
+					"mode": "raw",
+					"raw": "{}",
+					"options": {
+						"raw": {
+							"language": "json"
+						}
+					}
+				},
+				"url": {
+					"raw": "{{baseUrl}}/rbi-feeds/fetch",
+					"host": ["{{baseUrl}}"],
+					"path": ["rbi-feeds", "fetch"]
+				},
+				"description": "Fetches latest RSS feeds from rbi.org.in (5 categories: PRESS_RELEASE, NOTIFICATION, SPEECH, TENDER, PUBLICATION) and stores new items in the database. Run this FIRST to populate data."
+			},
+			"response": []
+		},
+		{
+			"name": "2. Get All Feeds",
+			"request": {
+				"method": "GET",
+				"header": [
+					{
+						"key": "Fineract-Platform-TenantId",
+						"value": "{{tenantId}}",
+						"type": "text"
+					},
+					{
+						"key": "Content-Type",
+						"value": "application/json",
+						"type": "text"
+					}
+				],
+				"url": {
+					"raw": "{{baseUrl}}/rbi-feeds",
+					"host": ["{{baseUrl}}"],
+					"path": ["rbi-feeds"]
+				},
+				"description": "Retrieve all RBI feed items sorted by publication date (newest first)."
+			},
+			"response": []
+		},
+		{
+			"name": "3. Get Feeds by Category - PRESS_RELEASE",
+			"request": {
+				"method": "GET",
+				"header": [
+					{
+						"key": "Fineract-Platform-TenantId",
+						"value": "{{tenantId}}",
+						"type": "text"
+					},
+					{
+						"key": "Content-Type",
+						"value": "application/json",
+						"type": "text"
+					}
+				],
+				"url": {
+					"raw": "{{baseUrl}}/rbi-feeds?category=PRESS_RELEASE",
+					"host": ["{{baseUrl}}"],
+					"path": ["rbi-feeds"],
+					"query": [
+						{
+							"key": "category",
+							"value": "PRESS_RELEASE"
+						}
+					]
+				},
+				"description": "Filter feeds by PRESS_RELEASE category."
+			},
+			"response": []
+		},
+		{
+			"name": "4. Get Feeds by Category - NOTIFICATION",
+			"request": {
+				"method": "GET",
+				"header": [
+					{
+						"key": "Fineract-Platform-TenantId",
+						"value": "{{tenantId}}",
+						"type": "text"
+					},
+					{
+						"key": "Content-Type",
+						"value": "application/json",
+						"type": "text"
+					}
+				],
+				"url": {
+					"raw": "{{baseUrl}}/rbi-feeds?category=NOTIFICATION",
+					"host": ["{{baseUrl}}"],
+					"path": ["rbi-feeds"],
+					"query": [
+						{
+							"key": "category",
+							"value": "NOTIFICATION"
+						}
+					]
+				},
+				"description": "Filter feeds by NOTIFICATION category."
+			},
+			"response": []
+		},
+		{
+			"name": "5. Get Feeds by Category - SPEECH",
+			"request": {
+				"method": "GET",
+				"header": [
+					{
+						"key": "Fineract-Platform-TenantId",
+						"value": "{{tenantId}}",
+						"type": "text"
+					},
+					{
+						"key": "Content-Type",
+						"value": "application/json",
+						"type": "text"
+					}
+				],
+				"url": {
+					"raw": "{{baseUrl}}/rbi-feeds?category=SPEECH",
+					"host": ["{{baseUrl}}"],
+					"path": ["rbi-feeds"],
+					"query": [
+						{
+							"key": "category",
+							"value": "SPEECH"
+						}
+					]
+				},
+				"description": "Filter feeds by SPEECH category."
+			},
+			"response": []
+		},
+		{
+			"name": "6. Get Feeds by Category - TENDER",
+			"request": {
+				"method": "GET",
+				"header": [
+					{
+						"key": "Fineract-Platform-TenantId",
+						"value": "{{tenantId}}",
+						"type": "text"
+					},
+					{
+						"key": "Content-Type",
+						"value": "application/json",
+						"type": "text"
+					}
+				],
+				"url": {
+					"raw": "{{baseUrl}}/rbi-feeds?category=TENDER",
+					"host": ["{{baseUrl}}"],
+					"path": ["rbi-feeds"],
+					"query": [
+						{
+							"key": "category",
+							"value": "TENDER"
+						}
+					]
+				},
+				"description": "Filter feeds by TENDER category."
+			},
+			"response": []
+		},
+		{
+			"name": "7. Get Feeds by Category - PUBLICATION",
+			"request": {
+				"method": "GET",
+				"header": [
+					{
+						"key": "Fineract-Platform-TenantId",
+						"value": "{{tenantId}}",
+						"type": "text"
+					},
+					{
+						"key": "Content-Type",
+						"value": "application/json",
+						"type": "text"
+					}
+				],
+				"url": {
+					"raw": "{{baseUrl}}/rbi-feeds?category=PUBLICATION",
+					"host": ["{{baseUrl}}"],
+					"path": ["rbi-feeds"],
+					"query": [
+						{
+							"key": "category",
+							"value": "PUBLICATION"
+						}
+					]
+				},
+				"description": "Filter feeds by PUBLICATION category."
+			},
+			"response": []
+		},
+		{
+			"name": "8. Get Single Feed by ID",
+			"request": {
+				"method": "GET",
+				"header": [
+					{
+						"key": "Fineract-Platform-TenantId",
+						"value": "{{tenantId}}",
+						"type": "text"
+					},
+					{
+						"key": "Content-Type",
+						"value": "application/json",
+						"type": "text"
+					}
+				],
+				"url": {
+					"raw": "{{baseUrl}}/rbi-feeds/1",
+					"host": ["{{baseUrl}}"],
+					"path": ["rbi-feeds", "1"]
+				},
+				"description": "Retrieve a single RBI feed item by its ID. Change the ID in the URL as needed."
+			},
+			"response": []
+		}
+	]
+}

README.md

@@ -1,135 +1,179 @@
-Apache Fineract: A Platform for Microfinance  [![Build Status](https://travis-ci.org/apache/fineract.svg?branch=develop)](https://travis-ci.org/apache/fineract)  [![Docker Hub](https://img.shields.io/docker/pulls/apache/fineract.svg)](https://hub.docker.com/r/apache/fineract)  [![Docker Build](https://img.shields.io/docker/cloud/build/apache/fineract.svg)](https://hub.docker.com/r/apache/fineract/builds)
-============
+# Apache Fineract
 
-Fineract is a mature platform with open APIs that provides a reliable, robust, and affordable core banking solution for financial institutions offering services to the world’s 2 billion underbanked and unbanked.
+<!-- TODO Reactivate when there is a working CI-CD instance: [![Swagger Validation](https://validator.swagger.io/validator?url=https://sandbox.mifos.community/fineract-provider/swagger-ui/fineract.yaml)](https://validator.swagger.io/validator/debug?url=https://sandbox.mifos.community/fineract-provider/swagger-ui/fineract.yaml) -->
+[![Build](https://github.com/apache/fineract/actions/workflows/build-mariadb.yml/badge.svg?branch=develop)](https://github.com/apache/fineract/actions/workflows/build-mariadb.yml)
+[![Docker Hub](https://img.shields.io/docker/pulls/apache/fineract.svg?logo=Docker)](https://hub.docker.com/r/apache/fineract)
+[![Docker Build](https://github.com/apache/fineract/actions/workflows/publish-dockerhub.yml/badge.svg)](https://github.com/apache/fineract/actions/workflows/publish-dockerhub.yml)
+[![Technical Debt](https://sonarcloud.io/api/project_badges/measure?project=apache_fineract&metric=sqale_index)](https://sonarcloud.io/summary/new_code?id=apache_fineract)
+[![Verified DPG](https://img.shields.io/badge/Verified-DPG-3333AB)](https://www.digitalpublicgoods.net/r/apache-fineract "Apache Fineract is a verified Digital Public Good under the Digital Public Goods Alliance.")
 
-[Have a look at the FAQ on our Wiki at apache.org](https://cwiki.apache.org/confluence/display/FINERACT/FAQ) if this README does not answer what you are looking for.  [Visit our JIRA Dashboard](https://issues.apache.org/jira/secure/Dashboard.jspa?selectPageId=12335824) to find issues to work on, see what others are working on, or open new issues.
+Apache Fineract is an open-source core banking platform providing a
+flexible, extensible foundation for a wide range of financial services. By
+making robust banking technology openly available, it lowers barriers for
+institutions and innovators to reach underserved and unbanked populations.
 
-[![Code Now! (Gitpod)](https://gitpod.io/button/open-in-gitpod.svg)](https://gitpod.io/#https://github.com/apache/fineract)
-to start contributing to this project in the online web-based IDE GitPod.io right away!
-(You may initially have to press F1 to Find Command and run "Java: Start Language Server".)
-It's of course also possible to contribute with a "traditional" local development environment (see below).
+Have a look at the [documentation](https://fineract.apache.org/docs/current), the [wiki](https://cwiki.apache.org/confluence/display/FINERACT) or at the [FAQ](https://cwiki.apache.org/confluence/pages/viewpage.action?pageId=91554327), if this README does not answer what you are looking for.
 
-Community
+
+COMMUNITY
 =========
 
-If you are interested in contributing to this project, but perhaps don't quite know how and where to get started, please [join our developer mailing list](http://fineract.apache.org/#contribute), listen into our conversations, chime into threads, and just send us a "Hello!" introduction email; we're a friendly bunch, and look forward to hearing from you.
+If you are interested in contributing to this project, but perhaps don't quite know how and where to get started, please [join our developer mailing list](http://fineract.apache.org/#contribute), listen into our conversations, chime into threads, or just send us a "Hello!" introduction email; we're a friendly bunch, and look forward to hearing from you. A more informal alternative is the [Fineract Slack channel](https://app.slack.com/client/T0F5GHE8Y/C028634A61L) (thank you, Mifos, for supporting the Slack channel!).
+
+For the developer wiki, see [Contributor's Zone](https://cwiki.apache.org/confluence/display/FINERACT/Contributor%27s+Zone). Maybe [these how-to articles](https://cwiki.apache.org/confluence/display/FINERACT/How-to+articles) help you to get started.
+
+In any case visit [our JIRA Dashboard](https://issues.apache.org/jira/secure/Dashboard.jspa?selectPageId=12335824) to find issues to work on, see what others are doing, or open new issues.
+
+In the moment you get started writing code, please consult our [CONTRIBUTING](CONTRIBUTING.md) guidelines, where you will find more information on subjects like coding style, testing and pull requests.
 
 
-Requirements
+REQUIREMENTS
 ============
-* Java >= 11 (OpenJDK JVM is tested by our CI on Travis)
-* MySQL 5.7
+* min. 16GB RAM and 8 core CPU
+* `MariaDB >= 11.5.2` or `PostgreSQL >= 17.0`
+* `Java >= 21` (Azul Zulu JVM is tested by our CI on GitHub Actions)
 
-You can run the required version of the database server in a container, instead of having to install it, like this:
-
-    docker run --name mysql-5.7 -p 3306:3306 -e MYSQL_ROOT_PASSWORD=mysql -d mysql:5.7
-
-and stop and destroy it like this:
-
-    docker rm -f mysql-5.7
-
-Beware that this database container database keeps its state inside the container and not on the host filesystem.  It is lost when you destroy (rm) this container.  This is typically fine for development.  See [Caveats: Where to Store Data on the database container documentation](https://hub.docker.com/_/mysql) re. how to make it persistent instead of ephemeral.
-
-Tomcat v9 is only required if you wish to deploy the Fineract WAR to a separate external servlet container.  Note that you do not require to install Tomcat to develop Fineract, or to run it in production if you use the self-contained JAR, which transparently embeds a servlet container using Spring Boot.  (Until FINERACT-730, Tomcat 7/8 were also supported, but now Tomcat 9 is required.)
+Tomcat (min. v10) is only required, if you wish to deploy the Fineract WAR to a separate external servlet container.  You do not need to install Tomcat to run Fineract. We recommend the use of the self-contained JAR, which transparently embeds a servlet container using Spring Boot.
 
 
-Instructions how to run for local development
+SECURITY
+============
+For a list of known vulnerabilities, see [Apache Fineract Security Reports](https://fineract.apache.org/security.html).
+
+If you believe you have found a new vulnerability, [let us know privately](https://fineract.apache.org/#contribute).
+
+For details about security during development and deployment, see the documentation [here](https://fineract.apache.org/docs/current/#_security).
+
+
+INSTRUCTIONS
 ============
 
-Run the following commands:
-1. `./gradlew createDB -PdbName=fineract_tenants`
-1. `./gradlew createDB -PdbName=fineract_default`
-1. `./gradlew bootRun`
+The following how-to's assume you have Java installed, you cloned the repository (or downloaded and extracted a [specific version](https://github.com/apache/fineract/releases)) and you have a [database server](#database-and-tables) (MariaDB or PostgreSQL) running.
+
+How to run for local development
+---
+
+Run the following commands in this order:
+```bash
+./gradlew createDB -PdbName=fineract_tenants
+./gradlew createDB -PdbName=fineract_default
+./gradlew devRun
+```
+
+This creates two databases and builds and runs Fineract, which will be listening for API requests on port 8443 (by default) now.
+
+Confirm Fineract is ready with, for example:
+
+```bash
+curl --insecure https://localhost:8443/fineract-provider/actuator/health
+```
+
+To test authenticated endpoints, include credentials in your request:
+
+```bash
+curl --location \
+  https://localhost:8443/fineract-provider/api/v1/clients \
+  --header 'Content-Type: application/json' \
+  --header 'Fineract-Platform-TenantId: default' \
+  --header 'Authorization: Basic bWlmb3M6cGFzc3dvcmQ='
+```
+
+How to run for production
+---
+Running Fineract to try it out is relatively easy. If you intend to use it in a production environment, be aware that a proper deployment can be complex, costly, and time-consuming. Considerations include: Security, privacy, compliance, performance, service availability, backups, and more. The Fineract project does not provide a comprehensive guide for deploying Fineract in production. You might need skills in enterprise Java applications and more. Alternatively, you could pay a vendor for Fineract deployment and maintenance. You will find tips and tricks for deploying and securing Fineract in our official documentation and in the community-maintained wiki.
 
 
-Instructions to build the JAR file
-============
-1. Clone the repository or download and extract the archive file to your local directory.
-2. Run `./gradlew clean bootJar` to build a modern cloud native fully self contained JAR file which will be created at `build/libs` directory.
-3. Start it using `java -jar build/libs/fineract-provider.jar` (does not require external Tomcat)
+How to build the JAR file
+---
+Build a modern, cloud native, fully self contained JAR file:
+```bash
+./gradlew clean bootJar
+```
+The JAR will be created in the `fineract-provider/build/libs` directory.
+As we are not allowed to include a JDBC driver in the built JAR, download a JDBC driver of your choice. For example:
+```bash
+wget https://dlm.mariadb.com/4174416/Connectors/java/connector-java-3.5.2/mariadb-java-client-3.5.2.jar
+```
+Start the JAR and specify the directory containing the JDBC driver using the loader.path option, for example:
+```bash
+java -Dloader.path=. -jar fineract-provider/build/libs/fineract-provider.jar
+```
+This does not require an external Tomcat.
 
+The tenants database connection details are configured [via environment variables (as with Docker container)](#instructions-to-run-using-docker-or-podman), e.g. like this:
+```bash
+export FINERACT_HIKARI_PASSWORD=verysecret
+...
+java -jar fineract-provider.jar
+```
 
-Instructions to build a WAR file
-============
-1. Clone the repository or download and extract the archive file to your local directory.
-2. Run `./gradlew clean bootWar` to build a traditional WAR file which will be created at `build/libs` directory.  
-3. Deploy this WAR to your Tomcat v9 Servlet Container.
+How to build the WAR file
+---
+Build a traditional WAR file:
+```bash
+./gradlew :fineract-war:clean :fineract-war:war
+```
+The WAR will be created in the `fineract-war/build/libs` directory. Afterwards deploy the WAR to your Tomcat Servlet Container.
 
 We recommend using the JAR instead of the WAR file deployment, because it's much easier.
 
 
-Instructions to execute Integration Tests
-============
-> Note that if this is the first time to access MySQL DB, then you may need to reset your password.
-
-Run the following commands, very similarly to how [.travis.yml](.travis.yml) does:
-1. `./gradlew createDB -PdbName=fineract_tenants`
-1. `./gradlew createDB -PdbName=fineract_default`
-1. `./gradlew clean integrationTest`
-
-
-Instructions to run and debug in Eclipse IDE
-============
-
-It is possible to run Fineract in Eclipse IDE and also to debug Fineract using Eclipse's debugging facilities. 
-To do this, you need to create the Eclipse project files and import the project into an Eclipse workspace:
-
-1. Create Eclipse project files into the Fineract project by running `./gradlew cleanEclipse eclipse`
-2. Import the fineract-provider project into your Eclipse workspace (File->Import->General->Existing Projects into Workspace, choose root directory fineract/fineract-provider)
-3. Do a clean build of the project in Eclipse (Project->Clean...)
-3. Run / debug Fineract by right clicking on org.apache.fineract.ServerApplication class and choosing Run As / Debug As -> Java Application. All normal Eclipse debugging features (breakpoints, watchpoints etc) should work as expected. 
-
-If you change the project settings (dependencies etc) in Gradle, you should redo step 1 and refresh the project in Eclipse.
-
-You can also use Eclipse Junit support to run tests in Eclipse (Run As->Junit Test)
-
-Finally, modifying source code in Eclipse automatically triggers hot code replace to a running instance, allowing you to immediately test your changes 
-
-
-Instructions to run using Docker and docker-compose
-===================================================
+How to run using Docker or Podman
+---
 
 It is possible to do a 'one-touch' installation of Fineract using containers (AKA "Docker").
-Fineract now packs the mifos community-app web UI in it's docker deploy.
-You can now run and test fineract with a GUI directly from the combined docker builds.
-This includes the database running in a container.
+This includes the database running in the container.
 
-As Prerequisites, you must have `docker` and `docker-compose` installed on your machine; see
-[Docker Install](https://docs.docker.com/install/) and
-[Docker Compose Install](https://docs.docker.com/compose/install/).
+As prerequisites, you must have `docker` and `docker-compose` installed on your machine; see
+[Docker Install](https://docs.docker.com/install/) and [Docker Compose Install](https://docs.docker.com/compose/install/).
 
 Alternatively, you can also use [Podman](https://github.com/containers/libpod)
 (e.g. via `dnf install podman-docker`), and [Podman Compose](https://github.com/containers/podman-compose/)
 (e.g. via `pip3 install podman-compose`) instead of Docker.
 
-Now to run a new Fineract instance you can simply:
+To run a new Fineract instance on Linux you can simply:
+```bash
+git clone https://github.com/apache/fineract.git
+cd fineract
+./gradlew :fineract-provider:jibDockerBuild -x test
+```
+On Windows, do this instead:
+```cmd
+git clone https://github.com/apache/fineract.git --config core.autocrlf=input
+cd fineract
+gradlew :fineract-provider:jibDockerBuild -x test
+```
+Install the Loki log driver and start:
+```bash
+docker plugin install grafana/loki-docker-driver:latest \
+  --alias loki --grant-all-permissions
+docker compose -f docker-compose-development.yml up -d
+```
+The Fineract (back-end) should be running at https://localhost:8443/fineract-provider/ now.
+Wait for https://localhost:8443/fineract-provider/actuator/health to return `{"status":"UP"}`.
+You must go to https://localhost:8443 and remember to accept the self-signed SSL certificate of the API once in your browser.
 
-1. `git clone https://github.com/apache/fineract.git ; cd fineract`
-1. `docker-compose build`
-1. `docker-compose up -d`
-1. fineract (back-end) is running at https://localhost:8443/fineract-provider/
-1. wait for https://localhost:8443/fineract-provider/actuator/health to return `{"status":"UP"}`
-1. you must go to https://localhost:8443 and remember to accept the self-signed SSL certificate of the API once in your browser, otherwise  you get a message that is rather misleading from the UI.
-1. community-app (UI) is running at http://localhost:9090/?baseApiUrl=https://localhost:8443/fineract-provider&tenantIdentifier=default
-1. login using default _username_ `mifos` and _password_ `password`
-
-The [`docker-compose.yml`](docker-compose.yml) will build the `fineract` container from the source based on the [`Dockerfile`](Dockerfile).  You could change that to use the pre-built container image instead of having to re-build it.
-
-https://hub.docker.com/r/apache/fineract has a pre-built container image of this project, built continuously.
+[Docker Hub](https://hub.docker.com/r/apache/fineract) has a pre-built container image of this project, built continuously.
 
 You must specify the MySQL tenants database JDBC URL by passing it to the `fineract` container via environment
 variables; please consult the [`docker-compose.yml`](docker-compose.yml) for exact details how to specify those.
-_(Note that in previous versions, the `mysqlserver` environment variable used at `docker build` time instead of at
-`docker run` time did something similar; this has changed in [FINERACT-773](https://issues.apache.org/jira/browse/FINERACT-773)),
-and the `mysqlserver` environment variable is now no longer supported.)_
+
+The logfiles and the Java Flight Recorder output are available in `PROJECT_ROOT/build/fineract/logs`. If you use IntelliJ then you can double-click on the `.jfr` file and open it with the IDE. You can also download [Azul Mission Control](https://www.azul.com/products/components/azul-mission-control/) to analyze the Java Flight Recorder file.
+
+NOTE: If you have issues with the file permissions and Docker Compose then you might need to change the variable values for `FINERACT_USER` and `FINERACT_GROUP` in `PROJECT_ROOT/config/docker/env/fineract-common.env`. You can find out what values you need to put there with the following commands:
+
+```bash
+id -u ${USER}
+id -g ${GROUP}
+```
+
+Please make sure that you are not checking in your changed values. The defaults should work for most people.
 
 
-Instructions to run on Kubernetes
-=================================
+How to run on Kubernetes
+---
 
-General Clusters
-----------------
+### General Clusters
 
 You can also run Fineract using containers on a Kubernetes cluster.
 Make sure you set up and connect to your Kubernetes cluster.
@@ -137,219 +181,191 @@ You can follow [this](https://cwiki.apache.org/confluence/display/FINERACT/Insta
 
 Now e.g. from your Google Cloud shell, run the following commands:
 
-1. `git clone https://github.com/apache/fineract.git ; cd fineract/kubernetes`
-1. `./kubectl-startup`
+```bash
+git clone https://github.com/apache/fineract.git
+cd fineract/kubernetes
+./kubectl-startup.sh
+```
 
 To shutdown and reset your Cluster, run:
+```bash
+./kubectl-shutdown.sh
+```
 
-    ./kubectl-shutdown
-
-Using Minikube
---------------
+### Using Minikube
 
 Alternatively, you can run fineract on a local kubernetes cluster using [minikube](https://minikube.sigs.k8s.io/docs/).
-As Prerequisites, you must have `minikube` and `kubectl` installed on your machine; see
+As prerequisite you must have `minikube` and `kubectl` installed on your machine; see
 [Minikube & Kubectl install](https://kubernetes.io/docs/tasks/tools/install-minikube/).
 
-Now to run a new Fineract instance on Minikube you can simply:
+To run a new Fineract instance on Minikube you can simply:
 
-1. `git clone https://github.com/apache/fineract.git ; cd fineract/kubernetes`
-1. `minikube start`
-1. `./kubectl-startup.sh`
-1. `minikube service fineract-server --url --https`
-1. Fineract is now running at the printed URL (note HTTP), which you can check e.g. using:
+```bash
+git clone https://github.com/apache/fineract.git
+cd fineract/kubernetes
+minikube start
+./kubectl-startup.sh
+```
 
-    http --verify=no --timeout 240 --check-status get $(minikube service fineract-server --url --https)/fineract-provider/actuator/health
+Wait for all pods to be ready:
+```bash
+kubectl get pods -w
+```
+
+Once all pods are running, access the Mifos web application:
+```bash
+minikube service mifos-community
+```
+
+This opens the Mifos X web application in your browser. The nginx reverse proxy in the mifos-community pod forwards API requests to the fineract-server backend.
+
+**Default credentials:**
+- Username: `mifos`
+- Password: `password`
+
+You can also access the Fineract API directly:
+```bash
+minikube service fineract-server --url --https
+```
+
+Fineract is now running at the printed URL, which you can check e.g. using:
+```bash
+http --verify=no --timeout 240 --check-status get $(minikube service fineract-server --url --https)/fineract-provider/actuator/health
+```
 
 To check the status of your containers on your local minikube Kubernetes cluster, run:
-
-    minikube dashboard
+```bash
+minikube dashboard
+```
 
 You can check Fineract logs using:
+```bash
+kubectl logs deployment/fineract-server
+```
 
-    kubectl logs deployment/fineract-server
+You can check Mifos web app logs using:
+```bash
+kubectl logs deployment/mifos-community
+```
 
 To shutdown and reset your cluster, run:
-
-    ./kubectl-shutdown
-
-We have [some open issues in JIRA with Kubernetes related enhancement ideas](https://jira.apache.org/jira/browse/FINERACT-783?jql=labels%20%3D%20kubernetes%20AND%20project%20%3D%20%22Apache%20Fineract%22%20) which you are welcome to contribute to.
+```bash
+./kubectl-shutdown.sh
+```
 
 
-Instructions to download Gradle wrapper
-============
-The file fineract-provider/gradle/wrapper/gradle-wrapper.jar binary is checked into this projects Git source repository,
-but won't exist in your copy of the Fineract codebase if you downloaded a released source archive from apache.org.
-In that case, you need to download it using the commands below:
+How to enable External Message Broker (ActiveMQ or Apache Kafka)
+---
 
-    wget --no-check-certificate -P fineract-provider/gradle/wrapper https://github.com/apache/fineract/raw/develop/fineract-provider/gradle/wrapper/gradle-wrapper.jar
+There are two use-cases where external message broker is needed:
+ - External Business Events / Reliable Event Framework
+ - Executing Partitioned Spring Batch Jobs
 
-(or)
+External Events are business events, e.g.: `ClientCreated`, which might be important for third party systems. Apache Fineract supports ActiveMQ (or other JMS compliant brokers) and Apache Kafka endpoints for sending out Business Events. By default, they are not emitted.
 
-    curl --insecure -L https://github.com/apache/fineract/raw/develop/fineract-provider/gradle/wrapper/gradle-wrapper.jar > fineract-provider/gradle/wrapper/gradle-wrapper.jar
+In case of a large deployment with millions of accounts, the Close of Business Day Spring Batch job may run several hours. In order to speed up this task, remote partitioning of the job is supported. The Manager node partitions breaks up the COB job into smaller pieces (sub tasks), which then can be executed on multiple Worker nodes in parallel. The worker nodes are notified either by ActiveMQ or Kafka regarding their new sub tasks.
+
+### ActiveMQ
+
+JMS based messaging is disabled by default. In `docker-compose-postgresql-activemq.yml` an example is shown, where ActiveMQ is enabled. In that configuration one Spring Batch Manager instance and two Spring Batch Worker instances are created.
+Spring based events should be disabled and jms based event handling should be enabled. Furthermore, proper broker JMS URL should be configured.
+
+```
+      FINERACT_REMOTE_JOB_MESSAGE_HANDLER_JMS_ENABLED=true
+      FINERACT_REMOTE_JOB_MESSAGE_HANDLER_SPRING_EVENTS_ENABLED=false
+      FINERACT_REMOTE_JOB_MESSAGE_HANDLER_JMS_BROKER_URL=tcp://activemq:61616
+```
+
+For additional ActiveMQ related configuration please take a look to the `application.properties` where the supported configuration parameters are listed with their default values.
+
+### Kafka
+
+Kafka support is also disabled by default. In `docker-compose-postgresql-kafka.yml` an example is shown, where self-hosted Kafka is enabled for both External Events and Spring Batch Remote Job execution.
+
+During the development Fineract was tested with PLAINTEXT Kafka brokers without authentication and with AWS MSK using IAM authentication. The extra [JAR file](https://github.com/aws/aws-msk-iam-auth/releases) required for IAM authentication is already added to the classpath.
+An example MSK setup can be found in `docker-compose-postgresql-kafka-msk.yml`.
+
+The full list of supported Kafka related properties is documented in the [Fineract Platform documentation](https://fineract.apache.org/docs/current/).
 
 
-Instructions to run Apache RAT (Release Audit Tool)
-============
-1. Extract the archive file to your local directory.
-2. Run `./gradlew rat`. A report will be generated under build/reports/rat/rat-report.txt
+DATABASE AND TABLES
+===================
+
+You can run the required version of the database server in a container, instead of having to install it, like this:
+
+    docker run --name mariadb-11.5 -p 3306:3306 -e MARIADB_ROOT_PASSWORD=mysql -d mariadb:11.5.2
+
+and stop and destroy it like this:
+
+    docker rm -f mariadb-11.5
+
+Beware that this container database keeps its state inside the container and not on the host filesystem.  It is lost when you destroy (rm) this container.  This is typically fine for development.  See [Caveats: Where to Store Data on the database container documentation](https://hub.docker.com/_/mariadb) regarding how to make it persistent instead of ephemeral.
 
 
-Checkstyle and Spotless
+MySQL/MariaDB and UTC timezone
+---
+With release `1.8.0` we introduced improved date time handling in Fineract. Date time is stored in UTC, and UTC timezone enforced even on the JDBC driver, e. g. for MySQL:
+
+```
+serverTimezone=UTC&useLegacyDatetimeCode=false&sessionVariables=time_zone='-00:00'
+```
+
+If you use MySQL as Fineract database, the following configuration is highly recommended:
+
+* Run the application in UTC (the default command line in our Docker image has the necessary parameters already set)
+* Run the MySQL database server in UTC (if you use managed services like AWS RDS, then this should be the default anyway, but it would be good to double-check)
+
+In case Fineract and MySQL do not run in UTC, MySQL might save date time values differently from PostgreSQL
+
+Example scenario: If the Fineract instance runs in timezone: GMT+2, and the local date time is 2022-08-11 17:15 ...
+* ... then PostgreSQL saves the LocalDateTime as is: 2022-08-11 17:15
+* ... and MySQL saves the LocalDateTime in UTC: 2022-08-11 15:15
+* ... but when we read the date time from PostgreSQL or from MySQL, both systems give us the same value: 2022-08-11 17:15 GMT+2
+
+If a previously used Fineract instance didn't run in UTC (backward compatibility), all prior dates will be read wrongly by MySQL. This can cause issues, when you run the database migration scripts.
+
+Recommendation: Shift all dates in your database by the timezone offset that your Fineract instance used.
+
+
+CONNECTION POOL CONFIGURATION
+=======
+
+Please check `application.properties` to see which connection pool settings can be tweaked. The associated environment variables are prefixed with `FINERACT_HIKARI_*`. You can find more information about specific connection pool settings at the [HikariCP Github repository](https://github.com/brettwooldridge/HikariCP?tab=readme-ov-file#gear-configuration-knobs-baby).
+
+NOTE: We keep backwards compatibility until one of the next releases to ensure that things are working as expected. Environment variables prefixed `fineract_tenants_*` can still be used to configure the database connection, but we strongly encourage using `FINERACT_HIKARI_*` with more options.
+
+
+RELEASES
 ============
 
-This project enforces its code conventions using [checkstyle.xml](fineract-provider/config/checkstyle/checkstyle.xml) through Checkstyle and [fineract-formatting-preferences.xml](config/fineract-formatting-preferences.xml) through Spotless. They are configured to run automatically during the normal Gradle build, and fail if there are any violations detected. You can run the following command to automatically fix spotless violations: 
+[Official releases](https://fineract.apache.org/#downloads) are created quarterly, at the end of each quarter. Our [documented release procedure](https://fineract.apache.org/docs/current/#_releases) follows the [ASF release policy](https://www.apache.org/legal/release-policy.html).
 
-    `./gradlew spotlessApply`
+See <https://cwiki.apache.org/confluence/display/FINERACT/Fineract+Releases> for an archive of historical release notes along with JIRA issues relevant to each release.
 
-Since some checks are present in both Checkstyle and Spotless, the same command can help you fix some of the Checkstyle violations (but not all, other Checkstyle violations need to fixed manually).
+See <https://github.com/apache/fineract/releases> for a list of PRs and contributors for each release.
 
-You can also check for Spotless violations (only; but normally don't have to, because the regular build full already includes this anyway):
+EOL/unsupported releases are [archived](https://www.apache.org/legal/release-policy.html#archived).
 
-    `./gradlew spotlessCheck`
-
-We recommend that you configure your favourite Java IDE to match those conventions. For Eclipse, you can go to 
-Window > Java > Code Style and import our [config/fineractdev-formatter.xml](config/fineractdev-formatter.xml) under formatter section and [config/fineractdev-cleanup.xml](config/fineractdev-cleanup.xml) under Clean up section. The same fineractdev-formatter.xml configuration file (that can be used in Eclipse IDE) is also used by Spotless to both check for violations and autoformat code on the CLI. 
-You could also use Checkstyle directly in your IDE (but you don't neccesarily have to, it may just be more convenient for you).  For Eclipse, use https://checkstyle.org/eclipse-cs/ and load our checkstyle.xml into it, for IntelliJ you can use [CheckStyle-IDEA](https://plugins.jetbrains.com/plugin/1065-checkstyle-idea).
+Versioned build products created from the `develop` branch will include `-SNAPSHOT`. See [related settings](https://github.com/qoomon/gradle-git-versioning-plugin) near `version` and `gitVersioning` in `build.gradle` for details.
 
 
-Code Coverage Reports
+LICENSE
 ============
 
-The project uses Jacoco to measure unit tests code coverage, to generate a report run the following command:
+This project is licensed under [Apache License Version 2.0](https://github.com/apache/fineract/blob/develop/APACHE_LICENSETEXT.md).
 
-    `./gradlew clean build jacocoTestReport`
-
-Generated reports can be found in build/code-coverage directory.
-
-
-Versions
-============
-
-The latest stable release can be viewed on the develop branch: [Latest Release on Develop](https://github.com/apache/fineract/tree/develop "Latest Release").
-
-The progress of this project can be viewed here: [View change log](https://github.com/apache/fineract/blob/develop/CHANGELOG.md "Latest release change log")
-
-
-License
-============
-
-This project is licensed under Apache License Version 2.0. See <https://github.com/apache/incubator-fineract/blob/develop/LICENSE.md> for reference.
-
-The Connector/J JDBC Driver client library from MariaDB.org, which is licensed under the LGPL,
-is used in development when running integration tests that use the Flyway library.  That JDBC
-driver is however not included in and distributed with the Fineract product and is not
-required to use the product.
-If you are developer and object to using the LGPL licensed Connector/J JDBC driver,
-simply do not run the integration tests that use the Flyway library.
+The Connector/J JDBC Driver client library from [MariaDB](https://www.mariadb.org) is licensed under the LGPL.
+The library is often used in development when running integration tests that use the Liquibase library. That JDBC
+driver is however not distributed with the Fineract product and is not required to use the product.
+If you are a developer and object to using the LGPL licensed Connector/J JDBC driver,
+simply do not run the integration tests that use the Liquibase library and use another JDBC driver.
 As discussed in [LEGAL-462](https://issues.apache.org/jira/browse/LEGAL-462), this project therefore
 complies with the [Apache Software Foundation third-party license policy](https://www.apache.org/legal/resolved.html).
 
 
-Apache Fineract Platform API
+PLATFORM API
 ============
 
-The API for the Fineract-platform (project named 'Apache Fineract') is documented in the API-docs under <b><i>Full API Matrix</i></b> and can be viewed [here](https://demo.fineract.dev/fineract-provider/api-docs/apiLive.htm "API Documentation").
+Fineract does not provide a UI, but provides an API. Running Fineract locally, the Swagger documentation can be accessed under `https://localhost:8443/fineract-provider/swagger-ui/index.html`. A live version can be accessed via [this Sandbox](https://sandbox.mifos.community/fineract-provider/swagger-ui/index.html) (not hosted by us).
 
-
-API clients (Web UIs, Mobile, etc.)
-============
-
-* https://github.com/openMF/community-app/ is the "traditional" Reference Client App Web UI for the API offered by this project
-* https://github.com/openMF/web-app is the next generation UI rewrite also using this project's API
-* https://github.com/openMF/android-client is an Android Mobile App client for this project's API
-* https://github.com/openMF has more related proejcts
-
-
-Online Demos
-============
-
-* [fineract.dev](https://www.fineract.dev) always runs the latest version of this code
-* [demo.mifos.io](https://demo.mifos.io) A demo account is provided for users to experience the functionality of the Community App.  Users can use "mifos" for USERNAME and "password" for PASSWORD (without quotation marks).
-
-
-Developers
-============
-Please see <https://cwiki.apache.org/confluence/display/FINERACT/Contributor%27s+Zone> for the developers wiki page.
-
-Please refer to <https://cwiki.apache.org/confluence/display/FINERACT/Fineract+101> for the first-time contribution to this project.
-
-Please see <https://cwiki.apache.org/confluence/display/FINERACT/How-to+articles> for technical details to get started.
-
-Please visit [our JIRA Dashboard](https://issues.apache.org/jira/secure/Dashboard.jspa?selectPageId=12335824) to find issues to work on, see what others are working on, or open new issues.
-
-
-Video Demonstration
-============
-
-Apache Fineract / Mifos X Demo (November 2016) - <https://www.youtube.com/watch?v=h61g9TptMBo>
-
-
-Governance and Policies
-=======================
-
-[Becoming a Committer](https://cwiki.apache.org/confluence/display/FINERACT/Becoming+a+Committer)
-documents the process through which you can become a committer in this project.
-
-
-Error Handling Guidelines
-------------------
-* When catching exceptions, either rethrow them, or log them.  Either way, include the root cause by using `catch (SomeException e)` and then either `throw AnotherException("..details..", e)` or `LOG.error("...context...", e)`.
-* Completely empty catch blocks are VERY suspicous!  Are you sure that you want to just "swallow" an exception?  Really, 100% totally absolutely sure?? ;-) Such "normal exceptions which just happen sometimes but are actually not really errors" are almost always a bad idea, can be a performance issue, and typically are an indication of another problem - e.g. the use of a wrong API which throws an Exception for an expected condition, when really you would want to use another API that instead returns something empty or optional.
-* In tests, you'll typically never catch exceptions, but just propagate them, with `@Test void testXYZ() throws SomeException, AnotherException`..., so that the test fails if the exception happens.  Unless you actually really want to test for the occurence of a problem - in that case, use [JUnit's Assert.assertThrows()](https://github.com/junit-team/junit4/wiki/Exception-testing) (but not `@Test(expected = SomeException.class)`).
-* Never catch `NullPointerException` & Co.
-
-Logging Guidelines
-------------------
-* We use [SLF4J](http://www.slf4j.org) as our logging API.
-* Never, ever, use `System.out` and `System.err` or `printStackTrace()` anywhere, but always `LOG.info()` or `LOG.error()` instead.
-* Use placeholder (`LOG.error("Could not... details: {}", something, exception)`) and never String concatenation (`LOG.error("Could not... details: " + something, exception)`)
-* Which Log Level is appropriate?
-  * `LOG.error()` should be used to inform an "operator" running Fineract who supervises error logs of an unexpected condition.  This includes technical problems with an external "environment" (e.g. can't reach a database), and situations which are likely bugs which need to be fixed in the code.  They do NOT include e.g. validation errors for incoming API requests - that is signaled through the API response - and does (should) not be logged as an error.  (Note that there is no _FATAL_ level in SLF4J; a "FATAL" event should just be logged as an _ERROR_.)
-  * `LOG.warn()` should be using sparingly.  Make up your mind if it's an error (above) - or not!
-  * `LOG.info()` can be used notably for one-time actions taken during start-up.  It should typically NOT be used to print out "regular" application usage information.  The default logging configuration always outputs the application INFO logs, and in production under load, there's really no point to constantly spew out lots of information from frequently traversed paths in the code about what's going on.  (Metrics are a better way.)  `LOG.info()` *can* be used freely in tests though.
-  * `LOG.debug()` can be used anywhere in the code to log things that may be useful during investigations of specific problems.  They are not shown in the default logging configuration, but can be enabled for troubleshooting.  Developers should typically "turn down" most `LOG.info()` which they used while writing a new feature to "follow along what happens during local testing" to `LOG.debug()` for production before we merge their PRs.
-  * `LOG.trace()` is not used in Fineract.
-
-Pull Requests
--------------
-
-If your PR is failing to pass our CI build due to a test failure, then:
-
-1. Understand if the failure is due to your PR or an unrelated unstable test.
-1. If you suspect it is because of a "flaky" test, and not due to a change in your PR, then please do not simply wait for an active maintainer to come and help you, but instead be a proactive contributor to the project - see next steps.  Do understand that we may not review PRs that are not green - it is the contributor's (that's you!) responsability to get a proposed PR to pass the build, not primarily the maintainers.
-1. Search for the name of the failed test on https://issues.apache.org/jira/, e.g. for `AccountingScenarioIntegrationTest` you would find [FINERACT-899](https://issues.apache.org/jira/browse/FINERACT-899).
-1. If you happen to read in such bugs that tests were just recently fixed, or ignored, then rebase your PR to pick up that change.
-1. If you find previous comments "proving" that the same test has arbitrarily failed in at least 3 past PRs, then please do yourself raise a small separate new PR proposing to add an `@Disabled // TODO FINERACT-123` to the respective unstable test (e.g. [#774](https://github.com/apache/fineract/pull/774)) with the commit message mentioning said JIRA, as always.  (Please do NOT just `@Disabled` any existing tests mixed in as part of your larger PR.)
-1. If there is no existing JIRA for the test, then first please evaluate whether the failure couldn't be a (perhaps strange) impact of the change you are proposing after all.  If it's not, then please raise a new JIRA to document the suspected Flaky Test, and link it to [FINERACT-850](https://issues.apache.org/jira/browse/FINERACT-850).  This will allow the next person coming along hitting the same test failure to easily find it, and eventually propose to ignore the unstable test.
-1. Then (only) Close and Reopen your PR, which will cause a new build, to see if it passes.
-1. Of course, we very much appreciate you then jumping onto any such bugs and helping us figure out how to fix all ignored tests!
-
-[Pull Request Size Limit](https://cwiki.apache.org/confluence/display/FINERACT/Pull+Request+Size+Limit)
-documents that we cannot accept huge "code dump" Pull Requests, with some related suggestions.
-
-Guideline for new Feature commits involving Refactoring: If you are submitting PR for a new Feature,
-and it involves refactoring, try to differentiate "new Feature code" with "Refactored" by placing
-them in different commits. This helps review to review your code faster.
-
-We have an automated Bot which marks pull requests as "stale" after a while, and ultimately automatically closes them.
-
-Dependency Upgrades
--------------------
-
-This project uses a number of 3rd-party libraries, and this section provides some guidance for their updates. We have set-up [Renovate's bot](https://renovate.whitesourcesoftware.com) to automatically raise Pull Requests for our review when new dependencies are available [FINERACT-962](https://issues.apache.org/jira/browse/FINERACT-962).
-
-Upgrades sometimes require package name changes.  Changed code should ideally have test coverage.
-
-Our `ClasspathHellDuplicatesCheckRuleTest` detects classes that appear in more than 1 JAR.  If a version bump in [`build.gradle`](https://github.com/search?q=repo%3Aapache%2Ffineract+filename%3Abuild.gradle&type=Code&ref=advsearch&l=&l=) causes changes in transitives dependencies, then you may have to add related `exclude` to our [`dependencies.gradle`](https://github.com/apache/fineract/search?q=dependencies.gradle).  Running `./gradlew dependencies` helps to understand what is required.
-
-
-Releasing
----------
-
-[How to Release Apache Fineract](https://cwiki.apache.org/confluence/x/DRwIB) documents the process how we make the source code that is available here in this Git repository into a binary release ZIP available on http://fineract.apache.org.
-
-
-More Information
-============
-More details of the project can be found at <https://cwiki.apache.org/confluence/display/FINERACT>.
+Apache Fineract supports client code generation using [Swagger Codegen](https://github.com/swagger-api/swagger-codegen) based on the [OpenAPI Specification](https://swagger.io/specification/). For more instructions on how to generate client code, check [this section](https://fineract.apache.org/docs/current/#_generate_api_client) of the Fineract documentation. [This video](https://www.youtube.com/watch?v=FlVd-0YAo6c) documents the use of the Swagger-UI.

STATIC_WEAVING.md

@@ -0,0 +1,30 @@
+# Static Weaving Configuration
+
+This document explains the static weaving setup for JPA entities in the Fineract project.
+
+## Overview
+
+Static weaving is a process that enhances JPA entities at build time to improve runtime performance. This is done using the `org.eclipse.persistence.tools.weaving.jpa.StaticWeave` which processes the compiled classes and applies the necessary bytecode transformations.
+
+## Configuration
+
+The static weaving is configured in `static-weaving.gradle` and applied to all Java projects that contain JPA entities.
+
+## How It Works
+
+1. **Compilation**: Java source files are compiled to the standard classes directory (`build/classes/java/main`).
+2. **Weaving**: Weaving happens as last step of **compileJava** task, which outputs them to the standard classes directory (`build/classes/java/main`).
+
+## Adding Static Weaving to a Module
+
+1. Add JPA entities to `src/main/java`
+2. Ensure there's a `persistence.xml` file in `src/main/resources/jpa/static-weaving/module/[module-name]/`
+3. The build will automatically detect and apply static weaving
+
+## Troubleshooting
+
+If you encounter issues with static weaving:
+
+1. Check that the `persistence.xml` file exists in the correct location
+2. Verify that the output directories are being created correctly
+3. Check the build logs for any weaving-related errors

Sanctions_Screening_Postman_Collection.json

@@ -0,0 +1,375 @@
+{
+	"info": {
+		"_postman_id": "sanctions-screening-001",
+		"name": "Sanctions Screening API",
+		"description": "API collection for UN Security Council consolidated sanctions list screening.\n\nEndpoints:\n- Screen client names against sanctions list\n- Load sanctions XML data\n- Check sanctions database status\n\nBase URL: {{baseUrl}}/fineract-provider/api/v1",
+		"schema": "https://schema.getpostman.com/json/collection/v2.1.0/collection.json"
+	},
+	"auth": {
+		"type": "basic",
+		"basic": [
+			{
+				"key": "username",
+				"value": "{{username}}",
+				"type": "string"
+			},
+			{
+				"key": "password",
+				"value": "{{password}}",
+				"type": "string"
+			}
+		]
+	},
+	"variable": [
+		{
+			"key": "baseUrl",
+			"value": "https://localhost:8443"
+		},
+		{
+			"key": "username",
+			"value": "mifos"
+		},
+		{
+			"key": "password",
+			"value": "password"
+		},
+		{
+			"key": "tenantId",
+			"value": "default"
+		}
+	],
+	"item": [
+		{
+			"name": "Sanctions Screening",
+			"description": "Screen client names against the UN Security Council consolidated sanctions list",
+			"item": [
+				{
+					"name": "Screen Name (GET)",
+					"request": {
+						"method": "GET",
+						"header": [
+							{
+								"key": "Fineract-Platform-TenantId",
+								"value": "{{tenantId}}",
+								"type": "text"
+							},
+							{
+								"key": "Content-Type",
+								"value": "application/json",
+								"type": "text"
+							}
+						],
+						"url": {
+							"raw": "{{baseUrl}}/fineract-provider/api/v1/sanctions/screen?name=Mohammad Ali",
+							"host": ["{{baseUrl}}"],
+							"path": ["fineract-provider", "api", "v1", "sanctions", "screen"],
+							"query": [
+								{
+									"key": "name",
+									"value": "Mohammad Ali",
+									"description": "Name to screen against sanctions list"
+								}
+							]
+						},
+						"description": "Screen a client name against the UN Security Council consolidated sanctions list using GET method.\n\n**Response when match found (FLAGGED):**\n```json\n{\n  \"screenedName\": \"Mohammad Ali\",\n  \"matchFound\": true,\n  \"status\": \"FLAGGED\",\n  \"message\": \"Potential match found in UN Security Council consolidated sanctions list. Manual review required before proceeding.\",\n  \"matchCount\": 2,\n  \"matches\": [...]\n}\n```\n\n**Response when no match (CLEAR):**\n```json\n{\n  \"screenedName\": \"John Smith\",\n  \"matchFound\": false,\n  \"status\": \"CLEAR\",\n  \"message\": \"No match found in UN Security Council consolidated sanctions list.\",\n  \"matchCount\": 0,\n  \"matches\": []\n}\n```"
+					}
+				},
+				{
+					"name": "Screen Name (POST)",
+					"request": {
+						"method": "POST",
+						"header": [
+							{
+								"key": "Fineract-Platform-TenantId",
+								"value": "{{tenantId}}",
+								"type": "text"
+							},
+							{
+								"key": "Content-Type",
+								"value": "application/json",
+								"type": "text"
+							}
+						],
+						"body": {
+							"mode": "raw",
+							"raw": "{\n  \"name\": \"AL-QAIDA\"\n}"
+						},
+						"url": {
+							"raw": "{{baseUrl}}/fineract-provider/api/v1/sanctions/screen",
+							"host": ["{{baseUrl}}"],
+							"path": ["fineract-provider", "api", "v1", "sanctions", "screen"]
+						},
+						"description": "Screen a client name against sanctions list using POST method with JSON body."
+					}
+				},
+				{
+					"name": "Screen Name - Individual (FLAGGED example)",
+					"request": {
+						"method": "POST",
+						"header": [
+							{
+								"key": "Fineract-Platform-TenantId",
+								"value": "{{tenantId}}",
+								"type": "text"
+							},
+							{
+								"key": "Content-Type",
+								"value": "application/json",
+								"type": "text"
+							}
+						],
+						"body": {
+							"mode": "raw",
+							"raw": "{\n  \"name\": \"ERIC BADEGE\"\n}"
+						},
+						"url": {
+							"raw": "{{baseUrl}}/fineract-provider/api/v1/sanctions/screen",
+							"host": ["{{baseUrl}}"],
+							"path": ["fineract-provider", "api", "v1", "sanctions", "screen"]
+						},
+						"description": "Example: Screen a known sanctioned individual name. Should return FLAGGED status."
+					}
+				},
+				{
+					"name": "Screen Name - Clear (no match)",
+					"request": {
+						"method": "POST",
+						"header": [
+							{
+								"key": "Fineract-Platform-TenantId",
+								"value": "{{tenantId}}",
+								"type": "text"
+							},
+							{
+								"key": "Content-Type",
+								"value": "application/json",
+								"type": "text"
+							}
+						],
+						"body": {
+							"mode": "raw",
+							"raw": "{\n  \"name\": \"Aditya Kumar\"\n}"
+						},
+						"url": {
+							"raw": "{{baseUrl}}/fineract-provider/api/v1/sanctions/screen",
+							"host": ["{{baseUrl}}"],
+							"path": ["fineract-provider", "api", "v1", "sanctions", "screen"]
+						},
+						"description": "Example: Screen a name that does not exist in sanctions list. Should return CLEAR status."
+					}
+				},
+				{
+					"name": "Screen Name - Entity (FLAGGED example)",
+					"request": {
+						"method": "POST",
+						"header": [
+							{
+								"key": "Fineract-Platform-TenantId",
+								"value": "{{tenantId}}",
+								"type": "text"
+							},
+							{
+								"key": "Content-Type",
+								"value": "application/json",
+								"type": "text"
+							}
+						],
+						"body": {
+							"mode": "raw",
+							"raw": "{\n  \"name\": \"TALIBAN\"\n}"
+						},
+						"url": {
+							"raw": "{{baseUrl}}/fineract-provider/api/v1/sanctions/screen",
+							"host": ["{{baseUrl}}"],
+							"path": ["fineract-provider", "api", "v1", "sanctions", "screen"]
+						},
+						"description": "Example: Screen a known sanctioned entity name. Should return FLAGGED status."
+					}
+				}
+			]
+		},
+		{
+			"name": "Sanctions Management",
+			"description": "Load and manage sanctions data",
+			"item": [
+				{
+					"name": "Get Sanctions Status",
+					"request": {
+						"method": "GET",
+						"header": [
+							{
+								"key": "Fineract-Platform-TenantId",
+								"value": "{{tenantId}}",
+								"type": "text"
+							},
+							{
+								"key": "Content-Type",
+								"value": "application/json",
+								"type": "text"
+							}
+						],
+						"url": {
+							"raw": "{{baseUrl}}/fineract-provider/api/v1/sanctions/status",
+							"host": ["{{baseUrl}}"],
+							"path": ["fineract-provider", "api", "v1", "sanctions", "status"]
+						},
+						"description": "Get the count of active sanctions entries in the database.\n\n**Response:**\n```json\n{\n  \"totalActiveEntries\": 1002,\n  \"status\": \"ACTIVE\"\n}\n```"
+					}
+				},
+				{
+					"name": "Load Sanctions XML",
+					"request": {
+						"method": "POST",
+						"header": [
+							{
+								"key": "Fineract-Platform-TenantId",
+								"value": "{{tenantId}}",
+								"type": "text"
+							},
+							{
+								"key": "Content-Type",
+								"value": "application/xml",
+								"type": "text"
+							}
+						],
+						"body": {
+							"mode": "file",
+							"file": {
+								"src": ""
+							}
+						},
+						"url": {
+							"raw": "{{baseUrl}}/fineract-provider/api/v1/sanctions/load",
+							"host": ["{{baseUrl}}"],
+							"path": ["fineract-provider", "api", "v1", "sanctions", "load"]
+						},
+						"description": "Upload and load the UN consolidated sanctions XML file into the database.\n\nSelect the `consolidatedLegacyByPRN.xml` file in the Body > Binary section.\n\n**Response:**\n```json\n{\n  \"message\": \"Sanctions data loaded successfully\",\n  \"entriesLoaded\": 1002,\n  \"totalActive\": 1002\n}\n```"
+					}
+				}
+			]
+		},
+		{
+			"name": "Screening Activity Logs",
+			"description": "View sanctions screening activity logs — every search is recorded",
+			"item": [
+				{
+					"name": "Get All Screening Logs",
+					"request": {
+						"method": "GET",
+						"header": [
+							{
+								"key": "Fineract-Platform-TenantId",
+								"value": "{{tenantId}}",
+								"type": "text"
+							},
+							{
+								"key": "Content-Type",
+								"value": "application/json",
+								"type": "text"
+							}
+						],
+						"url": {
+							"raw": "{{baseUrl}}/fineract-provider/api/v1/sanctions/logs",
+							"host": ["{{baseUrl}}"],
+							"path": ["fineract-provider", "api", "v1", "sanctions", "logs"]
+						},
+						"description": "Get all sanctions screening activity logs (most recent first).\n\n**Response:**\n```json\n[\n  {\n    \"id\": 1,\n    \"screenedName\": \"ERIC BADEGE\",\n    \"screeningResult\": \"FLAGGED\",\n    \"matchCount\": 1,\n    \"matchedNames\": \"ERIC BADEGE\",\n    \"screeningSource\": \"CLIENT_CREATION\",\n    \"screenedOn\": \"2026-03-16T10:30:00Z\",\n    \"screenedBy\": 1\n  }\n]\n```"
+					}
+				},
+				{
+					"name": "Get FLAGGED Logs Only",
+					"request": {
+						"method": "GET",
+						"header": [
+							{
+								"key": "Fineract-Platform-TenantId",
+								"value": "{{tenantId}}",
+								"type": "text"
+							},
+							{
+								"key": "Content-Type",
+								"value": "application/json",
+								"type": "text"
+							}
+						],
+						"url": {
+							"raw": "{{baseUrl}}/fineract-provider/api/v1/sanctions/logs?result=FLAGGED",
+							"host": ["{{baseUrl}}"],
+							"path": ["fineract-provider", "api", "v1", "sanctions", "logs"],
+							"query": [
+								{
+									"key": "result",
+									"value": "FLAGGED",
+									"description": "Filter by result: FLAGGED or CLEAR"
+								}
+							]
+						},
+						"description": "Get only FLAGGED screening logs — shows all searches that matched a sanctioned entry."
+					}
+				},
+				{
+					"name": "Get CLEAR Logs Only",
+					"request": {
+						"method": "GET",
+						"header": [
+							{
+								"key": "Fineract-Platform-TenantId",
+								"value": "{{tenantId}}",
+								"type": "text"
+							},
+							{
+								"key": "Content-Type",
+								"value": "application/json",
+								"type": "text"
+							}
+						],
+						"url": {
+							"raw": "{{baseUrl}}/fineract-provider/api/v1/sanctions/logs?result=CLEAR",
+							"host": ["{{baseUrl}}"],
+							"path": ["fineract-provider", "api", "v1", "sanctions", "logs"],
+							"query": [
+								{
+									"key": "result",
+									"value": "CLEAR",
+									"description": "Filter by result: FLAGGED or CLEAR"
+								}
+							]
+						},
+						"description": "Get only CLEAR screening logs — shows all searches that did not match any sanctioned entry."
+					}
+				},
+				{
+					"name": "Search Logs by Name",
+					"request": {
+						"method": "GET",
+						"header": [
+							{
+								"key": "Fineract-Platform-TenantId",
+								"value": "{{tenantId}}",
+								"type": "text"
+							},
+							{
+								"key": "Content-Type",
+								"value": "application/json",
+								"type": "text"
+							}
+						],
+						"url": {
+							"raw": "{{baseUrl}}/fineract-provider/api/v1/sanctions/logs?name=ERIC",
+							"host": ["{{baseUrl}}"],
+							"path": ["fineract-provider", "api", "v1", "sanctions", "logs"],
+							"query": [
+								{
+									"key": "name",
+									"value": "ERIC",
+									"description": "Search logs by screened name (partial match)"
+								}
+							]
+						},
+						"description": "Search screening logs by the name that was screened (partial, case-insensitive match)."
+					}
+				}
+			]
+		}
+	]
+}

Savings_Products_Postman_Collection.json

@@ -0,0 +1,235 @@
+{
+  "info": {
+    "_postman_id": "savings-products-collection",
+    "name": "Fineract - Savings Products",
+    "description": "Postman collection for Savings Product APIs.\n\nThis resource exposes 6 endpoints:\n1. POST /v1/savingsproducts\n2. PUT /v1/savingsproducts/{productId}\n3. GET /v1/savingsproducts\n4. GET /v1/savingsproducts/{productId}\n5. GET /v1/savingsproducts/template\n6. DELETE /v1/savingsproducts/{productId}\n\nThe create request below uses the mandatory fields required by the backend validator. If you switch accountingRule to cash-based or accrual-periodic, you must also supply the corresponding accounting mappings.",
+    "schema": "https://schema.getpostman.com/json/collection/v2.1.0/collection.json"
+  },
+  "auth": {
+    "type": "basic",
+    "basic": [
+      {
+        "key": "username",
+        "value": "{{username}}",
+        "type": "string"
+      },
+      {
+        "key": "password",
+        "value": "{{password}}",
+        "type": "string"
+      }
+    ]
+  },
+  "variable": [
+    {
+      "key": "base_url",
+      "value": "https://localhost:8443/fineract-provider/api/v1",
+      "description": "Fineract API base URL"
+    },
+    {
+      "key": "tenant_id",
+      "value": "default",
+      "description": "Tenant identifier"
+    },
+    {
+      "key": "username",
+      "value": "mifos",
+      "description": "API username"
+    },
+    {
+      "key": "password",
+      "value": "password",
+      "description": "API password"
+    },
+    {
+      "key": "product_id",
+      "value": "1",
+      "description": "Savings product id returned by the create request"
+    }
+  ],
+  "item": [
+    {
+      "name": "Savings Products",
+      "item": [
+        {
+          "name": "Create Savings Product",
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "pm.test('Status code is 200', function () {",
+                  "    pm.response.to.have.status(200);",
+                  "});",
+                  "",
+                  "pm.test('Resource id returned', function () {",
+                  "    var json = pm.response.json();",
+                  "    pm.expect(json).to.have.property('resourceId');",
+                  "    pm.collectionVariables.set('product_id', json.resourceId);",
+                  "});"
+                ]
+              }
+            }
+          ],
+          "request": {
+            "method": "POST",
+            "header": [
+              {
+                "key": "Content-Type",
+                "value": "application/json"
+              },
+              {
+                "key": "Fineract-Platform-TenantId",
+                "value": "{{tenant_id}}"
+              }
+            ],
+            "body": {
+              "mode": "raw",
+              "raw": "{\n  \"name\": \"Passbook Savings\",\n  \"shortName\": \"PBSV\",\n  \"description\": \"Daily compounding savings product\",\n  \"currencyCode\": \"USD\",\n  \"digitsAfterDecimal\": 2,\n  \"inMultiplesOf\": 0,\n  \"locale\": \"en\",\n  \"nominalAnnualInterestRate\": 5.0,\n  \"interestCompoundingPeriodType\": 1,\n  \"interestPostingPeriodType\": 4,\n  \"interestCalculationType\": 1,\n  \"interestCalculationDaysInYearType\": 365,\n  \"accountingRule\": 1,\n  \"withdrawalFeeForTransfers\": false,\n  \"enforceMinRequiredBalance\": false,\n  \"allowOverdraft\": false,\n  \"withHoldTax\": false,\n  \"isDormancyTrackingActive\": false,\n  \"charges\": [\n    {\n      \"id\": 1\n    }\n  ]\n}"
+            },
+            "url": {
+              "raw": "{{base_url}}/savingsproducts",
+              "host": [
+                "{{base_url}}"
+              ],
+              "path": [
+                "savingsproducts"
+              ]
+            },
+            "description": "Create a savings product.\n\nRequired by backend validator:\n- name\n- shortName\n- currencyCode\n- digitsAfterDecimal\n- nominalAnnualInterestRate\n- interestCompoundingPeriodType\n- interestPostingPeriodType\n- interestCalculationType\n- interestCalculationDaysInYearType\n- accountingRule\n\nIf accountingRule = 2 or 3, the backend also expects accounting mappings."
+          },
+          "response": []
+        },
+        {
+          "name": "Update Savings Product",
+          "request": {
+            "method": "PUT",
+            "header": [
+              {
+                "key": "Content-Type",
+                "value": "application/json"
+              },
+              {
+                "key": "Fineract-Platform-TenantId",
+                "value": "{{tenant_id}}"
+              }
+            ],
+            "body": {
+              "mode": "raw",
+              "raw": "{\n  \"description\": \"Updated savings product description\",\n  \"locale\": \"en\",\n  \"nominalAnnualInterestRate\": 5.75\n}"
+            },
+            "url": {
+              "raw": "{{base_url}}/savingsproducts/{{product_id}}",
+              "host": [
+                "{{base_url}}"
+              ],
+              "path": [
+                "savingsproducts",
+                "{{product_id}}"
+              ]
+            },
+            "description": "Update an existing savings product by product id."
+          },
+          "response": []
+        },
+        {
+          "name": "List Savings Products",
+          "request": {
+            "method": "GET",
+            "header": [
+              {
+                "key": "Fineract-Platform-TenantId",
+                "value": "{{tenant_id}}"
+              }
+            ],
+            "url": {
+              "raw": "{{base_url}}/savingsproducts",
+              "host": [
+                "{{base_url}}"
+              ],
+              "path": [
+                "savingsproducts"
+              ]
+            },
+            "description": "Lists all savings products."
+          },
+          "response": []
+        },
+        {
+          "name": "Get Savings Product By ID",
+          "request": {
+            "method": "GET",
+            "header": [
+              {
+                "key": "Fineract-Platform-TenantId",
+                "value": "{{tenant_id}}"
+              }
+            ],
+            "url": {
+              "raw": "{{base_url}}/savingsproducts/{{product_id}}",
+              "host": [
+                "{{base_url}}"
+              ],
+              "path": [
+                "savingsproducts",
+                "{{product_id}}"
+              ]
+            },
+            "description": "Retrieves a savings product by id. You can also call the same endpoint with ?template=true."
+          },
+          "response": []
+        },
+        {
+          "name": "Get Savings Product Template",
+          "request": {
+            "method": "GET",
+            "header": [
+              {
+                "key": "Fineract-Platform-TenantId",
+                "value": "{{tenant_id}}"
+              }
+            ],
+            "url": {
+              "raw": "{{base_url}}/savingsproducts/template",
+              "host": [
+                "{{base_url}}"
+              ],
+              "path": [
+                "savingsproducts",
+                "template"
+              ]
+            },
+            "description": "Returns template data with dropdown options and default values for savings product creation."
+          },
+          "response": []
+        },
+        {
+          "name": "Delete Savings Product",
+          "request": {
+            "method": "DELETE",
+            "header": [
+              {
+                "key": "Fineract-Platform-TenantId",
+                "value": "{{tenant_id}}"
+              }
+            ],
+            "url": {
+              "raw": "{{base_url}}/savingsproducts/{{product_id}}",
+              "host": [
+                "{{base_url}}"
+              ],
+              "path": [
+                "savingsproducts",
+                "{{product_id}}"
+              ]
+            },
+            "description": "Deletes a savings product by id."
+          },
+          "response": []
+        }
+      ],
+      "description": "Savings product master APIs."
+    }
+  ]
+}

auth.json

@@ -0,0 +1 @@
+{"username":"mifos", "password":"password"}

build.gradle

@@ -0,0 +1,932 @@
+    /**
+ * Licensed to the Apache Software Foundation (ASF) under one
+ * or more contributor license agreements. See the NOTICE file
+ * distributed with this work for additional information
+ * regarding copyright ownership. The ASF licenses this file
+ * to you under the Apache License, Version 2.0 (the
+ * "License"); you may not use this file except in compliance
+ * with the License. You may obtain a copy of the License at
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing,
+ * software distributed under the License is distributed on an
+ * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+ * KIND, either express or implied. See the License for the
+ * specific language governing permissions and limitations
+ * under the License.
+ */
+// TODO: this is work in progress, please follow FINERACT-1171
+buildscript {
+    ext {
+        jacocoVersion = '0.8.12'
+        retrofitVersion = '2.9.0'
+        okhttpVersion = '4.9.3'
+        fineractCustomProjects = []
+        fineractJavaProjects = subprojects.findAll{
+            [
+                'fineract-core',
+                'fineract-security',
+                'fineract-cob',
+                'fineract-validation',
+                'fineract-command',
+                'fineract-accounting',
+                'fineract-provider',
+                'fineract-branch',
+                'fineract-document',
+                'fineract-investor',
+                'fineract-charge',
+                'fineract-rates',
+                'fineract-tax',
+                'fineract-loan-origination',
+                'fineract-loan',
+                'fineract-savings',
+                'fineract-current-product',
+                'fineract-report',
+                'fineract-mix',
+                'integration-tests',
+                'twofactor-tests',
+                'oauth2-tests',
+                'fineract-client',
+                'fineract-client-feign',
+                'fineract-avro-schemas',
+                'fineract-e2e-tests-core',
+                'fineract-e2e-tests-runner',
+                'fineract-progressive-loan',
+                'fineract-progressive-loan-embeddable-schedule-generator',
+                'fineract-working-capital-loan'
+            ].contains(it.name)
+        }
+        fineractPublishProjects = subprojects.findAll{
+            [
+                'fineract-avro-schemas',
+                'fineract-client',
+                'fineract-client-feign',
+                'fineract-core',
+                'fineract-security',
+                'fineract-cob',
+                'fineract-validation',
+                'fineract-command',
+                'fineract-accounting',
+                'fineract-provider',
+                'fineract-investor',
+                'fineract-charge',
+                'fineract-rates',
+                'fineract-tax',
+                'fineract-loan-origination',
+                'fineract-loan',
+                'fineract-savings',
+                'fineract-report',
+                'fineract-branch',
+                'fineract-document',
+                'fineract-progressive-loan',
+                'fineract-progressive-loan-embeddable-schedule-generator',
+                'fineract-working-capital-loan'
+            ].contains(it.name)
+        }
+        npmRepository = 'https://npm.pkg.github.com'
+    }
+    repositories {
+        maven { url 'https://plugins.gradle.org/m2/' }
+    }
+
+    dependencies {
+        classpath 'com.bmuschko:gradle-cargo-plugin:2.9.0'
+        classpath 'org.eclipse.persistence:eclipselink:4.0.6'
+        classpath 'jakarta.ws.rs:jakarta.ws.rs-api:3.1.0'
+        classpath 'com.google.cloud.tools:jib-layer-filter-extension-gradle:0.3.0'
+        classpath 'org.apache.commons:commons-lang3:3.18.0'
+        classpath 'io.swagger.core.v3:swagger-jaxrs2-jakarta:2.2.22'
+        classpath 'jakarta.servlet:jakarta.servlet-api:6.1.0'
+    }
+}
+
+plugins {
+    id 'me.qoomon.git-versioning' version '6.4.4'
+    id "org.barfuin.gradle.taskinfo" version "2.2.0"
+    id 'com.adarshr.test-logger' version '4.0.0'
+    id 'com.diffplug.spotless' version '6.25.0' apply false
+    id 'org.nosphere.apache.rat' version '0.8.1' apply false
+    id 'com.github.hierynomus.license' version '0.16.1' apply false
+    id 'com.github.jk1.dependency-license-report' version '2.9' apply false
+    id 'org.zeroturnaround.gradle.jrebel' version '1.2.0' apply false
+    id 'org.springframework.boot' version '3.5.6' apply false
+    id 'net.ltgt.errorprone' version '4.1.0' apply false
+    id 'io.swagger.core.v3.swagger-gradle-plugin' version '2.2.23' apply false
+    id 'com.gorylenko.gradle-git-properties' version '2.4.2' apply false
+    id 'org.asciidoctor.jvm.convert' version '4.0.5' apply false
+    id 'org.asciidoctor.jvm.pdf' version '4.0.5' apply false
+    id 'com.google.cloud.tools.jib' version '3.4.5' apply false
+    id 'org.sonarqube' version '6.0.1.5171'
+    id 'com.github.andygoossens.modernizer' version '1.10.0' apply false
+    id 'com.github.spotbugs' version '6.0.26' apply false
+    id 'se.thinkcode.cucumber-runner' version '0.0.11' apply false
+    id "com.github.davidmc24.gradle.plugin.avro-base" version "1.9.1" apply false
+    id 'org.openapi.generator' version '7.8.0' apply false
+    id 'com.gradleup.shadow' version '8.3.5' apply false
+    id 'me.champeau.jmh' version '0.7.1' apply false
+    id 'org.cyclonedx.bom' version '3.1.0' apply false
+    id 'com.docktape.swagger-brake' version '2.7.0' apply false
+}
+
+apply from: "${rootDir}/buildSrc/src/main/groovy/org.apache.fineract.release.gradle"
+
+description = '''\
+Run as:
+gradle clean bootRun'''
+
+version = '0.0.0-SNAPSHOT'
+
+gitVersioning.apply {
+    refs {
+        considerTagsOnBranches = true
+        describeTagPattern = '.*(\\d+\\.\\d+\\.\\d+).*'
+        describeTagFirstParent = false
+
+        branch("release\\/\\d+\\.\\d+\\.\\d+") {
+            version = '${describe.tag.version.major}.${describe.tag.version.minor}.${describe.tag.version.patch}'
+        }
+        branch("maintenance\\/\\d+\\.\\d+") {
+            version = '${describe.tag.version.major}.${describe.tag.version.minor}.${describe.tag.version.patch}'
+        }
+        tag("(\\d+\\.\\d+\\.\\d+)") {
+            version = '${describe.tag.version.major}.${describe.tag.version.minor}.${describe.tag.version.patch}'
+        }
+    }
+    rev {
+        version = '${describe.tag.version.major}.${describe.tag.version.minor.next}.0-SNAPSHOT'
+    }
+}
+
+ext['groovy.version'] = '4.0.17'
+ext['swaggerFile'] = "$rootDir/fineract-provider/build/resources/main/static/fineract.json".toString().replace(" ", "%20")
+
+// Apply static weaving configuration to all subprojects
+subprojects { subproject ->
+    apply from: rootProject.file('static-weaving.gradle')
+}
+
+allprojects  {
+    group = 'org.apache.fineract'
+
+    repositories {
+        mavenCentral()
+    }
+
+    configurations.configureEach {
+        resolutionStrategy {
+            dependencySubstitution {
+                // Substitution is to resolve CVE-2025-12183
+                substitute module('org.lz4:lz4-java') using module('at.yawk.lz4:lz4-java:1.10.1')
+            }
+        }
+    }
+
+    configurations {
+        implementation {
+            exclude group: 'commons-logging', module: 'commons-logging'
+        }
+
+        api {
+            canBeResolved = true
+        }
+    }
+
+    apply plugin: 'com.adarshr.test-logger'
+    apply plugin: 'com.diffplug.spotless'
+    apply plugin: 'com.github.hierynomus.license'
+    apply plugin: 'net.ltgt.errorprone'
+
+    tasks.withType(JavaCompile).configureEach {
+        options.errorprone {
+            disableWarningsInGeneratedCode = true
+            disable(
+                    "CanIgnoreReturnValueSuggester",
+                    "SameNameButDifferent", // Until errorprone recognizes Lombok
+                    "MultiVariableDeclaration", // Until errorprone recognizes Lombok
+                    "UnnecessaryDefaultInEnumSwitch", // FINERACT-1911
+                    "AssertEqualsArgumentOrderChecker",
+                    "RemoveUnusedImports"  // For generated code
+            )
+            error(
+                    "DefaultCharset",
+                    "StringSplitter",
+                    "MutablePublicArray",
+                    "EqualsGetClass",
+                    "FutureReturnValueIgnored"
+            )
+        }
+    }
+
+    apply plugin: 'org.nosphere.apache.rat'
+    apply plugin: 'com.github.jk1.dependency-license-report'
+
+    // Configuration for the sonarqube plugin is now in GitHub Actions
+
+    // Configuration for the spotless plugin
+    // https://github.com/diffplug/spotless/tree/main/plugin-gradle
+    spotless {
+        format 'misc', {
+            target '**/*.md', '**/*.properties', '**/.gitignore', '**/.openapi-generator-ignore', '**/*.yml', '**/*.xml', '**/**.json', '**/*.sql'
+            targetExclude '**/build/**', '**/bin/**', '**/.settings/**', '**/.idea/**', '**/.gradle/**', '**/gradlew.bat', '**/licenses/**', '**/banner.txt', '.vscode/**', '.profileconfig.json'
+            indentWithSpaces(4)
+            endWithNewline()
+            trimTrailingWhitespace()
+        }
+
+        groovyGradle {
+            target '*.gradle', '**/*.gradle'
+            targetExclude '**/build/**', '/**/build.gradle' // TODO: temporary disabled on build.gradle until someone fix this issue: https://github.com/diffplug/spotless/issues/1807
+            greclipse()
+            indentWithSpaces(4)
+            endWithNewline()
+            trimTrailingWhitespace()
+        }
+
+        lineEndings 'UNIX'
+    }
+
+    // Configuration for Gradle license plug-in
+    // https://github.com/hierynomus/license-gradle-plugin
+    license {
+        header rootProject.file("$rootDir/APACHE_LICENSETEXT.md")
+        excludes([
+            "**/gradlew*",
+            "**/git.properties",
+            "**/*.html",
+            "**/templates/**",
+            "**/features/**",
+            "**/results/**",
+            "**/package-info.java",
+            "**/keystore.jks",
+            "**/legacy-docs/**",
+            "**/banner.txt",
+            "**/build.gradle.mustache",
+            "**/pom.mustache",
+            "**/avro/**/*.java",
+            "**/org/apache/fineract/client/**/*.java"
+        ])
+        strictCheck true
+    }
+
+    licenseReport {
+        outputDir = "$projectDir/licenses"
+    }
+
+    // Configuration for Apache Release Audit Tool task
+    // https://github.com/eskatos/creadur-rat-gradle
+    rat {
+        verbose = false
+        reportDir = file("$buildDir/reports/rat")
+        excludes = [
+            '**/src/main/templates/**/*.mustache',
+            '**/.dockerignore',
+            '**/*.launch',
+            '**/licenses/**',
+            '**/*.md',
+            '**/*.adoc',
+            '**/*.puml',
+            '**/*.github/**',
+            '**/MANIFEST.MF',
+            '**/spring.factories',
+            '**/org.springframework.boot.autoconfigure.AutoConfiguration.imports',
+            '**/*.json',
+            '**/*.json.template',
+            '**/*.txt',
+            '**/*.log',
+            '**/fineractdev-eclipse-preferences.epf',
+            '**/features/**',
+            '**/templates/**',
+            '**/results/**',
+            '**/.classpath',
+            '**/.project',
+            '**/.idea/**',
+            '**/*.ipr',
+            '**/*.iws',
+            '**/.settings/**',
+            '**/bin/**',
+            '**/.git/**',
+            '**/.gitignore',
+            '**/.openapi-generator-ignore',
+            '**/.gitkeep',
+            '**/*.iml',
+            '**/config/swagger/templates/**',
+            // Notice files
+            '**/NOTICE_RELEASE',
+            '**/NOTICE_SOURCE',
+            // gradle
+            '**/.gradle/**',
+            '**/gradlew',
+            '**/gradlew.bat',
+            '**/gradle/wrapper/gradle-wrapper.properties',
+            '**/caches/**',
+            '**/daemon/**',
+            '**/native/**',
+            '**/wrapper/**',
+            '**/build/**',
+            // Api Docs
+            '**/legacy-docs/*.*',
+            '**/docs/system-architecture/.htaccess',
+            '**/docs/system-architecture/404.html',
+            '**/docs/system-architecture/index.html',
+            '**/docs/system-architecture/**/*.xml',
+            '**/bootstrap-3.0.0/assets/application.js',
+            '**/system-architecture/js/plugins.js',
+            // Apache License
+            '**/bootstrap-3.0.0/assets/less.js',
+            '**/css/bootstrap-3.0.0/**/*.*',
+            // Public Domain See http://www.JSON.org/js.html
+            '**/bootstrap-3.0.0/assets/json2.js.htm',
+            // MIT License
+            '**/modernizr-2.6.2.min.js',
+            '**/css/normalize.css',
+            '**/assets/filesaver.js',
+            '**/css/fonts/glyphicons-halflings-regular.svg',
+            '**/assets/jszip.js',
+            '**/assets/jquery.js',
+            '**/legacy-docs/jquery-1.7.min.js',
+            '**/css/toc-0.1.2/**/*.*',
+            '**/docs/system-architecture/css/main.css',
+            '**/system-architecture/js/vendor/jquery-1.9.1.min.js',
+            '**/system-architecture/js/vendor/toc-0.1.2/jquery.toc.min.js',
+            '**/assets/respond.min.js',
+            '**/assets/html5shiv.js',
+            // BSD License
+            '**/assets/uglify.js',
+            // Ignore out folder
+            '**/out/**',
+            // Git build info
+            "**/git.properties",
+            ".mailmap",
+            '**/images/diag-*.svg',
+            '**/*.avsc',
+            "**/generated/**/*MapperImpl.java",
+            '**/META-INF/fineract-test.config',
+            // Apache-specific GitHub metadata settings file
+            '/.asf.yaml'
+        ]
+    }
+}
+
+// NOTE: dynamically load all custom modules
+file("${rootDir}/custom").eachDir { companyDir ->
+    if('build' != companyDir.name && 'docker' != companyDir.name) {
+        file("${rootDir}/custom/${companyDir.name}").eachDir { categoryDir ->
+            if('build' != categoryDir.name) {
+                file("${rootDir}/custom/${companyDir.name}/${categoryDir.name}").eachDir { moduleDir ->
+                    if('build' != moduleDir.name) {
+                        project.fineractJavaProjects.add(project(":custom:${companyDir.name}:${categoryDir.name}:${moduleDir.name}"))
+                        project.fineractCustomProjects.add(project(":custom:${companyDir.name}:${categoryDir.name}:${moduleDir.name}"))
+                    }
+                }
+            }
+        }
+    }
+}
+
+configure(project.fineractJavaProjects) {
+    // NOTE: order matters!
+
+    apply plugin: 'java'
+    apply plugin: 'idea'
+
+    java {
+        toolchain {
+            languageVersion = JavaLanguageVersion.of(21)
+        }
+        withSourcesJar()
+        withJavadocJar()
+    }
+
+    // Add performance optimizations
+    configurations.configureEach {
+        resolutionStrategy {
+            cacheChangingModulesFor 0, 'seconds'
+            cacheDynamicVersionsFor 0, 'seconds'
+        }
+    }
+
+    tasks.withType(JavaCompile).configureEach {
+        options.incremental = true
+        options.fork = true
+        outputs.cacheIf { true }
+        options.compilerArgs << '-parameters'
+        options.encoding = 'UTF-8'
+        options.compilerArgs << '-Xlint:unchecked'
+        options.compilerArgs << '-Xlint:deprecation'
+        if (project.hasProperty('warnings') && project.warnings.contains('fail')) {
+            options.compilerArgs << '-Werror'
+        }
+        if (project.hasProperty('warnings') && project.warnings.contains('none')) {
+            options.compilerArgs << '-nowarn'
+        }
+        if (project.plugins.hasPlugin('org.springframework.boot')) {
+            options.generatedSourceOutputDirectory = file("$buildDir/generated/sources/annotationProcessor/java/main")
+        }
+        options.generatedSourceOutputDirectory = file("$buildDir/generated/sources/annotationProcessor/java/main")
+    }
+
+    apply plugin: 'eclipse'
+    apply plugin: 'checkstyle'
+    apply plugin: 'jacoco'
+    apply plugin: 'com.github.spotbugs'
+    apply plugin: 'com.github.andygoossens.modernizer'
+    apply from: "${rootDir}/buildSrc/src/main/groovy/org.apache.fineract.dependencies.gradle"
+
+    group = 'org.apache.fineract'
+
+    configurations.named('spotbugs').configure {
+        resolutionStrategy.eachDependency {
+            if (it.requested.group == 'org.ow2.asm') {
+                it.useVersion '9.5'
+                it.because "Asm 9.5 is required for JDK 21 support"
+            }
+        }
+    }
+
+    configurations {
+        api.setCanBeResolved(true)
+    }
+    tasks.withType(Copy).configureEach {
+        duplicatesStrategy = DuplicatesStrategy.EXCLUDE
+    }
+    tasks.withType(JavaCompile).configureEach {
+        options.compilerArgs += [
+                "-Xlint:cast",
+                "-Xlint:auxiliaryclass",
+                "-Xlint:dep-ann",
+                "-Xlint:divzero",
+                "-Xlint:empty",
+                "-Xlint:exports",
+                "-Xlint:fallthrough",
+                "-Xlint:finally",
+                "-Xlint:module",
+                "-Xlint:opens",
+                "-Xlint:options",
+                "-Xlint:overloads",
+                "-Xlint:overrides",
+                "-Xlint:path",
+                "-Xlint:processing",
+                "-Xlint:removal",
+                "-Xlint:requires-automatic",
+                "-Xlint:requires-transitive-automatic",
+                "-Xlint:try",
+                "-Xlint:varargs",
+                "-Xlint:preview",
+                "-Xlint:static",
+                // -Werror needs to be disabled because EclipseLink's static weaving doesn't generate warning-free code
+                // and during an IntelliJ recompilation, it fails
+                //"-Werror",
+                "-Xmaxwarns",
+                "1500",
+                "-Xmaxerrs",
+                "1500"
+        ]
+        // TODO FINERACT-959 (gradually) enable -Xlint:all (see "javac -help -X")
+
+        options.deprecation = true
+    }
+
+    check {
+        dependsOn(rat, licenseMain, licenseTest)
+    }
+
+    dependencies {
+        spotbugsPlugins 'jp.skypencil.findbugs.slf4j:bug-pattern:1.5.0@jar'
+    }
+
+    // Configuration for the spotless plugin
+    // https://github.com/diffplug/spotless/tree/main/plugin-gradle
+    spotless {
+        java {
+            targetExclude '**/build/**', '**/bin/**', '**/out/**'
+            importOrder() //sort imports alphabetically
+            removeUnusedImports()
+            eclipse().configFile "$rootDir/config/fineractdev-formatter.xml"
+            endWithNewline()
+            trimTrailingWhitespace()
+
+            // Enforce style modifier order
+            custom 'Modifier ordering', {
+                def modifierRanking = [
+                    public      : 1,
+                    protected   : 2,
+                    private     : 3,
+                    abstract    : 4,
+                    default     : 5,
+                    static      : 6,
+                    final       : 7,
+                    transient   : 8,
+                    volatile    : 9,
+                    synchronized: 10,
+                    native      : 11,
+                    strictfp    : 12]
+                // Find any instance of multiple modifiers. Lead with a non-word character to avoid
+                // accidental matching against for instance, "an alternative default value"
+                it.replaceAll(/\W(?:public |protected |private |abstract |default |static |final |transient |volatile |synchronized |native |strictfp ){2,}/, {
+                    // Do not replace the leading non-word character.  Identify the modifiers
+                    it.replaceAll(/(?:public |protected |private |abstract |default |static |final |transient |volatile |synchronized |native |strictfp ){2,}/, {
+                        // Sort the modifiers according to the ranking above
+                        it.split().sort({ modifierRanking[it] }).join(' ') + ' '
+                    }
+                    )
+                }
+                )
+            }
+        }
+
+        lineEndings 'UNIX'
+    }
+
+    // If we are running Gradle within Eclipse to enhance classes,
+    // set the classes directory to point to Eclipse's default build directory
+    if (project.hasProperty('env') && project.getProperty('env') == 'eclipse') {
+        sourceSets.main.java.outputDir = file("$projectDir/bin/main")
+    }
+
+    // Configuration for the Checkstyle plugin
+    // https://docs.gradle.org/current/userguide/checkstyle_plugin.html
+    dependencies {
+        checkstyle 'com.puppycrawl.tools:checkstyle:11.0.0'
+        checkstyle 'com.github.sevntu-checkstyle:sevntu-checks:1.44.1'
+    }
+
+    // Configuration for JaCoCo code coverage task
+    // https://www.eclemma.org/jacoco/
+    jacoco {
+        toolVersion = jacocoVersion
+        reportsDirectory = file("$buildDir/reports/jacoco")
+    }
+
+    jacocoTestReport {
+        reports {
+            html.required = true
+            xml.required = true
+            html.outputLocation = layout.buildDirectory.dir('code-coverage')
+        }
+    }
+
+    // Configuration for the errorprone plugin
+    // https://github.com/tbroyer/gradle-errorprone-plugin
+    dependencies {
+        errorprone "com.google.errorprone:error_prone_core:2.35.1"
+    }
+
+    tasks.withType(JavaCompile).configureEach {
+        options.errorprone {
+            enabled = project.gradle.startParameter.taskNames.contains('build') || project.gradle.startParameter.taskNames.contains('check')
+            if (project.path == ':fineract-client') {
+                excludedPaths = '.*/build/generated/java/src/main/java/.*'
+            }
+            if (project.path == ':fineract-client-feign') {
+                excludedPaths = '.*/build/generated/java/src/main/java/.*'
+            }
+            disable(
+                    // TODO Remove disabled checks from this list, by fixing remaining usages
+                    "UnusedVariable",
+                    "TypeParameterUnusedInFormals",
+                    "EmptyBlockTag",
+                    "MissingSummary",
+                    "InvalidParam",
+                    "ReturnFromVoid",
+                    "AlmostJavadoc",
+                    "InvalidBlockTag",
+                    "JavaUtilDate", // TODO FINERACT-1298
+                    "ReturnValueIgnored",
+                    "DirectInvocationOnMock",
+                    "CanIgnoreReturnValueSuggester",
+                    "SameNameButDifferent", // Until errorprone recognizes Lombok
+                    "MultiVariableDeclaration", // Until errorprone recognizes Lombok
+                    "UnnecessaryDefaultInEnumSwitch" // FINERACT-1911
+                    )
+            error(
+                    "DefaultCharset",
+                    "RemoveUnusedImports",
+                    "WaitNotInLoop",
+                    "ThreeLetterTimeZoneID",
+                    "VariableNameSameAsType",
+                    "UnnecessaryParentheses",
+                    "MultipleTopLevelClasses",
+                    "MixedMutabilityReturnType",
+                    "AssertEqualsArgumentOrderChecker",
+                    "EmptySetMultibindingContributions",
+                    "BigDecimalEquals",
+                    "MixedArrayDimensions",
+                    "PackageLocation",
+                    "UseBinds",
+                    "BadImport",
+                    "IntLongMath",
+                    "FloatCast",
+                    "ReachabilityFenceUsage",
+                    "StreamResourceLeak",
+                    "TruthIncompatibleType",
+                    "ByteBufferBackingArray",
+                    "OrphanedFormatString",
+                    "CatchAndPrintStackTrace",
+                    "ObjectToString",
+                    "StringSplitter",
+                    "AssertThrowsMultipleStatements",
+                    "BoxedPrimitiveConstructor",
+                    "EmptyCatch",
+                    "BoxedPrimitiveEquality",
+                    "SynchronizeOnNonFinalField",
+                    "WildcardImport",
+                    "FutureReturnValueIgnored",
+                    "PrivateConstructorForNoninstantiableModule",
+                    "ClassCanBeStatic",
+                    "ClassNewInstance",
+                    "UnnecessaryStaticImport",
+                    "UnsafeFinalization",
+                    "JavaTimeDefaultTimeZone",
+                    "JodaPlusMinusLong",
+                    "SwitchDefault",
+                    "VarTypeName",
+                    "ArgumentSelectionDefectChecker",
+                    "CompareToZero",
+                    "InjectOnConstructorOfAbstractClass",
+                    "ImmutableEnumChecker",
+                    "NarrowingCompoundAssignment",
+                    "MissingCasesInEnumSwitch",
+                    "ReferenceEquality",
+                    "UndefinedEquals",
+                    "UnescapedEntity",
+                    "ModifyCollectionInEnhancedForLoop",
+                    "NonCanonicalType",
+                    "InvalidInlineTag",
+                    "MutablePublicArray",
+                    "StaticAssignmentInConstructor",
+                    "ProtectedMembersInFinalClass",
+                    "OperatorPrecedence",
+                    "EqualsGetClass",
+                    "EqualsUnsafeCast",
+                    "DoubleBraceInitialization",
+                    "UnusedNestedClass",
+                    "UnusedMethod",
+                    "ModifiedButNotUsed",
+                    "InconsistentCapitalization",
+                    "MissingOverride",
+                    // TODO enable these remaining checks (one by one)
+                    // "InvalidBlockTag",
+                    // "InconsistentOverloads",
+                    // "MethodCanBeStatic",
+                    // "Var",
+                    // "ConstantField",
+                    // "UnnecessaryDefaultInEnumSwitch",
+                    // "FieldCanBeFinal"
+                    )
+        }
+    }
+
+    check {
+        dependsOn(rat, licenseMain, licenseTest)
+    }
+
+    dependencies {
+        implementation (
+                'ch.qos.logback:logback-core',
+                'org.slf4j:slf4j-api',
+                'org.slf4j:log4j-over-slf4j',
+                'org.slf4j:jul-to-slf4j',
+                )
+        implementation ("ch.qos.logback:logback-classic") {
+            exclude(module: "slf4j-api")
+        }
+
+        compileOnly 'org.projectlombok:lombok'
+        annotationProcessor 'org.projectlombok:lombok'
+
+        testImplementation( 'org.mockito:mockito-core',
+                'org.mockito:mockito-junit-jupiter',
+                'org.junit.jupiter:junit-jupiter-api',
+                'org.junit.jupiter:junit-jupiter-engine',
+                'org.junit.jupiter:junit-jupiter-params',
+                'org.junit.platform:junit-platform-suite', // required to be able to run tests directly under Eclipse, see FINERACT-943 & FINERACT-1021
+                'org.bouncycastle:bcpkix-jdk18on',
+                'org.bouncycastle:bcprov-jdk18on',
+                'org.bouncycastle:bcutil-jdk18on',
+                'org.awaitility:awaitility',
+                )
+
+        testCompileOnly 'org.projectlombok:lombok'
+        testAnnotationProcessor 'org.projectlombok:lombok'
+    }
+
+    test {
+        useJUnitPlatform()
+
+        if (project.hasProperty('excludeTests')) {
+            filter {
+                excludeTestsMatching project.property('excludeTests')
+            }
+        }
+    }
+
+    testlogger {
+        logLevel 'quiet'
+    }
+
+    // Configuration for spotbugs plugin
+    // https://github.com/spotbugs/spotbugs-gradle-plugin
+
+    // To generate an HTML report instead of XML
+    spotbugs {
+        // reportLevel = 'high'
+        // reportLevel = com.github.spotbugs.snom.Confidence.DEFAULT
+        showProgress = false
+        excludeFilter = file("$rootDir/config/spotbugs/exclude.xml")
+    }
+    // https://github.com/spotbugs/spotbugs-gradle-plugin/issues/242
+    spotbugsMain {
+        reports {
+            html {
+                enabled = true
+                stylesheet = 'fancy-hist.xsl'
+            }
+        }
+    }
+    spotbugsTest {
+        reports {
+            html {
+                enabled = true
+                stylesheet = 'fancy-hist.xsl'
+            }
+        }
+    }
+
+    // Configuration for https://github.com/andygoossens/gradle-modernizer-plugin
+    modernizer {
+        includeTestClasses = true
+        failOnViolations = true
+        violationLogLevel="error"
+        javaVersion = project.targetCompatibility
+        ignoreGeneratedClasses = true
+        // Rules can be found here: https://github.com/gaul/modernizer-maven-plugin/blob/master/modernizer-maven-plugin/src/main/resources/modernizer.xml
+        exclusions = [
+            'java/util/Optional.get:()Ljava/lang/Object;' // Disable forcing the usage of Optional.orElseThrow(java.util.function.Supplier<? extends X>)
+        ]
+    }
+
+    tasks.withType(Javadoc).tap {
+        configureEach {
+            options.addStringOption('Xdoclint:none', '-quiet')
+            options.encoding = 'UTF-8'
+            // Ignore any errors during javadoc generation
+            failOnError = false
+        }
+    }
+}
+
+configure(project.fineractCustomProjects) {
+    compileJava {
+        dependsOn = []
+    }
+
+    dependencies {
+        implementation (
+                'org.springframework:spring-context',
+                'ch.qos.logback:logback-core',
+                'org.slf4j:slf4j-api',
+                'org.slf4j:log4j-over-slf4j',
+                'org.slf4j:jul-to-slf4j',
+                )
+        implementation ("ch.qos.logback:logback-classic") {
+            exclude(module: "slf4j-api")
+        }
+
+        compileOnly('org.projectlombok:lombok')
+        annotationProcessor('org.projectlombok:lombok')
+        annotationProcessor('org.mapstruct:mapstruct-processor')
+        annotationProcessor('org.springframework.boot:spring-boot-autoconfigure-processor')
+        annotationProcessor('org.springframework.boot:spring-boot-configuration-processor')
+
+        testImplementation ('org.springframework.boot:spring-boot-starter-test') {
+            exclude group: 'com.jayway.jsonpath', module: 'json-path'
+            exclude group: 'org.junit.vintage', module: 'junit-vintage-engine'
+            exclude group: 'jakarta.activation'
+            exclude group: 'javax.activation'
+            exclude group: 'org.skyscreamer'
+        }
+        testImplementation( 'org.mockito:mockito-core',
+                'org.mockito:mockito-inline',
+                'org.mockito:mockito-junit-jupiter',
+                'org.junit.jupiter:junit-jupiter-api',
+                'org.junit.jupiter:junit-jupiter-engine',
+                'org.junit.platform:junit-platform-suite', // required to be able to run tests directly under Eclipse, see FINERACT-943 & FINERACT-1021
+                'org.bouncycastle:bcpkix-jdk18on',
+                'org.bouncycastle:bcprov-jdk18on',
+                'org.bouncycastle:bcutil-jdk18on',
+                'org.awaitility:awaitility',
+                'io.github.classgraph:classgraph',
+                'io.cucumber:cucumber-core',
+                'io.cucumber:cucumber-java:7.20.1',
+                'io.cucumber:cucumber-java8:7.20.1',
+                'io.cucumber:cucumber-junit-platform-engine:7.20.1',
+                'io.cucumber:cucumber-spring:7.20.1',
+                )
+
+        testCompileOnly('org.projectlombok:lombok')
+        testAnnotationProcessor('org.projectlombok:lombok')
+        testAnnotationProcessor('org.mapstruct:mapstruct-processor')
+        testAnnotationProcessor('org.springframework.boot:spring-boot-autoconfigure-processor')
+        testAnnotationProcessor('org.springframework.boot:spring-boot-configuration-processor')
+    }
+}
+
+configure(project.fineractPublishProjects) {
+    apply plugin: 'maven-publish'
+
+    if (!project.hasProperty('noSign')) {
+        apply plugin: 'signing'
+    }
+
+    publishing {
+        publications {
+            mavenJava(MavenPublication) {
+                groupId 'org.apache.fineract'
+                artifactId project.name
+                version "${project.version}-SNAPSHOT"
+
+                from components.java
+
+                versionMapping {
+                    usage('java-api') {
+                        fromResolutionOf('runtimeClasspath')
+                    }
+                    usage('java-runtime') {
+                        fromResolutionResult()
+                    }
+                }
+
+                pom {
+                    name = "Fineract: ${project.name}"
+                    description = 'A secure, multi-tenanted microfinance platform'
+                    url = 'https://fineract.apache.org'
+                    licenses {
+                        license {
+                            name = 'The Apache License, Version 2.0'
+                            url = 'http://www.apache.org/licenses/LICENSE-2.0.html'
+                        }
+                    }
+                    scm {
+                        connection = 'scm:git:https://github.com/apache/fineract.git'
+                        developerConnection = 'scm:git:git://github.com:apache/fineract.git'
+                        url = 'https://fineract.apache.org/'
+                    }
+                }
+            }
+        }
+
+        repositories {
+            def releaseUrl = 'https://repository.apache.org/content/repositories/releases'
+            def stagingUrl = 'https://repository.apache.org/content/repositories/snapshots'
+
+            maven {
+                name 'apache'
+                url hasProperty('fineract.release.version') ? releaseUrl : stagingUrl
+                credentials {
+                    username "${findProperty('fineract.config.username')}"
+                    password "${findProperty('fineract.config.password')}"
+                }
+            }
+        }
+    }
+
+    if (!project.hasProperty('noSign')) {
+        signing {
+            sign publishing.publications.mavenJava
+        }
+    }
+}
+
+// Configuration for CycloneDX SBOM generator
+// https://github.com/CycloneDX/cyclonedx-gradle-plugin
+apply plugin: 'org.cyclonedx.bom'
+
+cyclonedxBom {
+    projectType = "application"
+    includeBomSerialNumber = true
+    includeLicenseText = true
+}
+
+tasks.withType(org.cyclonedx.gradle.CyclonedxDirectTask).configureEach {
+    includeMetadataResolution.set(false)
+}
+
+tasks.register('printSourceSetInformation') {
+    doLast {
+        sourceSets.each { srcSet ->
+            println "[" + srcSet.name + "]"
+            print "-->Source directories: " + srcSet.allJava.srcDirs + "\n"
+            print "-->Output directories: " + srcSet.output.classesDirs.files + "\n"
+            print "-->Compile classpath:\n"
+            srcSet.compileClasspath.files.each {
+                print "  " + it.path + "\n"
+            }
+            println ""
+        }
+    }
+}
+
+tasks.withType(Checkstyle).configureEach {
+    exclude("**/*.avsc")
+}

buildSrc/build.gradle

@@ -0,0 +1,75 @@
+/**
+ * Licensed to the Apache Software Foundation (ASF) under one
+ * or more contributor license agreements. See the NOTICE file
+ * distributed with this work for additional information
+ * regarding copyright ownership. The ASF licenses this file
+ * to you under the Apache License, Version 2.0 (the
+ * "License"); you may not use this file except in compliance
+ * with the License. You may obtain a copy of the License at
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing,
+ * software distributed under the License is distributed on an
+ * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+ * KIND, either express or implied. See the License for the
+ * specific language governing permissions and limitations
+ * under the License.
+ */
+
+import static org.slf4j.LoggerFactory.*
+
+plugins {
+    id 'io.spring.dependency-management' version '1.1.7'
+    id 'groovy'
+    id 'java-gradle-plugin'
+    id 'groovy-gradle-plugin'
+}
+
+//Suppress errors related to invalid org.eclipse.* maven poms versions.
+def loggerFactory = getILoggerFactory()
+def noOpMethod = getILoggerFactory().getClass().getDeclaredMethod("addNoOpLogger", String.class)
+noOpMethod.setAccessible(true)
+noOpMethod.invoke(loggerFactory, "io.spring.gradle.dependencymanagement.internal.maven.EffectiveModelBuilder")
+
+apply from: "${projectDir}/src/main/groovy/org.apache.fineract.dependencies.gradle"
+
+description = 'Fineract Gradle Plugin'
+
+repositories {
+    gradlePluginPortal()
+    mavenCentral()
+}
+
+configurations.all {
+    resolutionStrategy {
+        dependencySubstitution {
+            // Substitution is to resolve CVE-2025-12183
+            substitute module('org.lz4:lz4-java') using module('at.yawk.lz4:lz4-java:1.10.1')
+        }
+    }
+}
+
+dependencies {
+    implementation 'com.sun.activation:jakarta.activation'
+    implementation 'com.sun.mail:jakarta.mail'
+    implementation 'org.freemarker:freemarker'
+    implementation ('com.tmatesoft.svnkit:svnkit') {
+        exclude group: 'net.i2p.crypto', module: 'eddsa'
+    }
+    implementation 'org.bouncycastle:bcprov-jdk18on'
+    implementation 'org.bouncycastle:bcutil-jdk18on'
+    implementation 'org.bouncycastle:bcpg-jdk18on'
+    implementation 'org.eclipse.jgit:org.eclipse.jgit'
+    implementation 'org.eclipse.jgit:org.eclipse.jgit.gpg.bc'
+    implementation 'org.eclipse.jgit:org.eclipse.jgit.ssh.apache'
+    implementation 'com.vdurmont:semver4j'
+    implementation 'org.beryx:text-io'
+    implementation 'commons-io:commons-io'
+    implementation 'com.squareup.okhttp3:okhttp'
+    implementation 'com.squareup.okhttp3:logging-interceptor'
+    implementation 'com.squareup.retrofit2:retrofit'
+    implementation 'com.squareup.retrofit2:converter-jackson'
+    implementation 'com.fasterxml.jackson.core:jackson-databind'
+    implementation 'com.squareup.okhttp3:okhttp'
+}

buildSrc/src/main/groovy/org.apache.fineract.dependencies.gradle

@@ -0,0 +1,310 @@
+/**
+ * Licensed to the Apache Software Foundation (ASF) under one
+ * or more contributor license agreements. See the NOTICE file
+ * distributed with this work for additional information
+ * regarding copyright ownership. The ASF licenses this file
+ * to you under the Apache License, Version 2.0 (the
+ * "License"); you may not use this file except in compliance
+ * with the License. You may obtain a copy of the License at
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing,
+ * software distributed under the License is distributed on an
+ * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+ * KIND, either express or implied. See the License for the
+ * specific language governing permissions and limitations
+ * under the License.
+ */
+apply plugin: 'io.spring.dependency-management'
+
+// Configuration for the dependency management plugin
+// https://github.com/spring-gradle-plugins/dependency-management-plugin
+dependencyManagement {
+    imports {
+        mavenBom 'com.squareup.okhttp3:okhttp-bom:4.12.0'
+        mavenBom 'org.slf4j:slf4j-bom:2.0.17'
+        mavenBom 'io.micrometer:micrometer-bom:1.13.6'
+        mavenBom 'org.springframework.boot:spring-boot-dependencies:3.5.6'
+        mavenBom 'io.awspring.cloud:spring-cloud-aws-dependencies:3.2.1'
+        mavenBom 'io.opentelemetry:opentelemetry-bom:1.44.1'
+        mavenBom 'org.jetbrains.kotlin:kotlin-bom:2.0.21'
+        mavenBom 'org.junit:junit-bom:5.11.3'
+        mavenBom 'com.fasterxml.jackson:jackson-bom:2.19.2'
+        mavenBom 'io.cucumber:cucumber-bom:7.20.1'
+        mavenBom 'org.mockito:mockito-bom:5.14.2'
+        mavenBom 'software.amazon.awssdk:bom:2.29.9'
+        mavenBom 'io.github.resilience4j:resilience4j-bom:2.2.0'
+        mavenBom 'org.testcontainers:testcontainers-bom:1.20.4'
+        mavenBom 'org.glassfish.jersey:jersey-bom:3.1.10'
+    }
+
+    dependencies {
+        // We use fixed versions, instead of inheriting them from the Spring BOM, to be able to be on more recent ones.
+        // We do not use :+ to get the latest available version available on Maven Central, as that could suddenly break things.
+        // We use the Renovate Bot to automatically propose Pull Requests (PRs) when upgrades for all of these versions are available.
+
+        dependency 'ch.qos.logback:logback-core:1.5.19'
+        dependency 'ch.qos.logback:logback-classic:1.5.19'
+        dependency 'ch.qos.logback.contrib:logback-json-classic:0.1.5'
+        dependency 'ch.qos.logback.contrib:logback-jackson:0.1.5'
+        dependency 'org.codehaus.janino:janino:3.1.12'
+
+        dependency 'org.eclipse.persistence:org.eclipse.persistence.jpa:4.0.2'
+        dependency 'com.google.guava:guava:33.1.0-jre'
+        dependency 'com.google.code.gson:gson:2.11.0'
+        dependency 'com.google.googlejavaformat:google-java-format:1.24.0'
+        dependency 'org.apache.commons:commons-collections4:4.4'
+        dependency 'org.apache.commons:commons-compress:1.28.0'
+        dependency ('software.amazon.msk:aws-msk-iam-auth:2.2.0') {
+            exclude 'commons-logging:commons-logging:'
+        }
+        dependency ('org.apache.commons:commons-email:1.6.0') {
+            exclude 'com.sun.mail:javax.mail'
+            exclude 'javax.activation:activation'
+        }
+        dependency 'commons-io:commons-io:2.18.0'
+        dependency 'com.github.librepdf:openpdf:3.0.0'
+        dependency ('org.mnode.ical4j:ical4j:3.2.19') {
+            exclude 'com.sun.mail:javax.mail'
+            exclude 'org.codehaus.groovy:groovy'
+        }
+        dependency 'org.apache.commons:commons-csv:1.12.0'
+        dependency 'org.quartz-scheduler:quartz:2.5.0'
+        dependency 'org.ehcache:ehcache:3.10.8'
+        dependency 'com.github.spullara.mustache.java:compiler:0.9.14'
+        dependency 'com.jayway.jsonpath:json-path:2.9.0'
+        dependency ('org.apache.tika:tika-core:3.2.3') {
+            exclude 'commons-logging:commons-logging'
+        }
+        dependency ('org.apache.tika:tika-core:3.2.3') {
+            exclude 'commons-logging:commons-logging'
+        }
+        dependency ('org.apache.tika:tika-parser-miscoffice-module:3.2.3') {
+            exclude 'org.bouncycastle:bcprov-jdk15on'
+            exclude 'org.bouncycastle:bcjmail-jdk15on'
+            exclude 'org.bouncycastle:bcprov-jdk18on'
+            exclude 'org.bouncycastle:bcjmail-jdk18on'
+            exclude 'commons-logging:commons-logging'
+            exclude 'org.apache.logging.log4j:log4j-api'
+            exclude 'org.slf4j:slf4j-api'
+            exclude 'commons-io:commons-io'
+            exclude 'commons-codec:commons-codec'
+            exclude 'org.apache.commons:commons-lang3'
+            exclude 'org.apache.poi:poi'
+            exclude 'org.apache.poi:poi-scratchpad'
+            exclude 'org.glassfish.jaxb:jaxb-runtime'
+            exclude 'org.apache.commons:commons-compress'
+            exclude 'xml-apis:xml-apis'
+        }
+        dependency ('org.apache.tika:tika-parser-microsoft-module:3.2.3') {
+            exclude 'org.bouncycastle:bcprov-jdk15on'
+            exclude 'org.bouncycastle:bcjmail-jdk15on'
+            exclude 'org.bouncycastle:bcprov-jdk18on'
+            exclude 'org.bouncycastle:bcjmail-jdk18on'
+            exclude 'commons-logging:commons-logging'
+            exclude 'org.apache.logging.log4j:log4j-api'
+            exclude 'org.slf4j:slf4j-api'
+            exclude 'commons-io:commons-io'
+            exclude 'commons-codec:commons-codec'
+            exclude 'org.apache.commons:commons-lang3'
+            exclude 'org.apache.poi:poi'
+            exclude 'org.apache.poi:poi-scratchpad'
+            exclude 'org.glassfish.jaxb:jaxb-runtime'
+            exclude 'org.apache.commons:commons-compress'
+            exclude 'xml-apis:xml-apis'
+        }
+        dependency ('org.apache.tika:tika-parser-image-module:3.2.3') {
+            exclude 'org.bouncycastle:bcprov-jdk15on'
+            exclude 'org.bouncycastle:bcjmail-jdk15on'
+            exclude 'org.bouncycastle:bcprov-jdk18on'
+            exclude 'org.bouncycastle:bcjmail-jdk18on'
+            exclude 'commons-logging:commons-logging'
+            exclude 'org.apache.logging.log4j:log4j-api'
+            exclude 'org.slf4j:slf4j-api'
+            exclude 'commons-io:commons-io'
+            exclude 'commons-codec:commons-codec'
+            exclude 'org.apache.commons:commons-lang3'
+            exclude 'org.apache.poi:poi'
+            exclude 'org.apache.poi:poi-scratchpad'
+            exclude 'org.glassfish.jaxb:jaxb-runtime'
+            exclude 'org.apache.commons:commons-compress'
+            exclude 'xml-apis:xml-apis'
+        }
+        dependency ('org.apache.httpcomponents:httpclient:4.5.14') {
+            exclude 'commons-logging:commons-logging:'
+        }
+        dependency 'jakarta.management.j2ee:jakarta.management.j2ee-api:1.1.4'
+        dependency 'jakarta.jms:jakarta.jms-api:3.1.0'
+        dependency 'jakarta.ws.rs:jakarta.ws.rs-api:3.1.0'
+        dependency 'org.glassfish.jaxb:jaxb-runtime:2.3.6' // Swagger needs exactly this version
+        dependency 'joda-time:joda-time:2.13.1'
+
+        dependency 'io.github.classgraph:classgraph:4.8.179'
+        dependency 'org.awaitility:awaitility:4.2.2'
+        dependency 'com.github.spotbugs:spotbugs-annotations:4.8.6'
+        dependency 'javax.cache:cache-api:1.1.1'
+        dependency 'org.mock-server:mockserver-junit-jupiter:5.15.0'
+        dependency 'org.webjars:webjars-locator-core:0.59'
+        dependency 'com.icegreen:greenmail-junit5:2.0.1'
+
+        // fineract client dependencies
+        dependency "com.squareup.retrofit2:retrofit:2.11.0"
+        dependency "com.squareup.retrofit2:retrofit-mock:2.11.0"
+        dependency "com.squareup.retrofit2:adapter-java8:2.11.0"
+        dependency "com.squareup.retrofit2:adapter-rxjava2:2.11.0"
+        dependency "com.squareup.retrofit2:adapter-rxjava3:2.11.0"
+        dependency "com.squareup.retrofit2:adapter-guava:2.11.0"
+        dependency "com.squareup.retrofit2:converter-wire:2.11.0"
+        dependency "com.squareup.retrofit2:converter-jackson:2.11.0"
+        dependency "com.squareup.retrofit2:converter-simplexml:2.11.0"
+        dependency "com.squareup.retrofit2:converter-jaxb:2.11.0"
+        dependency "com.squareup.retrofit2:converter-java8:2.11.0"
+        dependency "com.squareup.retrofit2:converter-scalars:2.11.0"
+        dependency "com.squareup.retrofit2:converter-gson:2.11.0"
+        dependency "com.squareup.retrofit2:converter-protobuf:2.11.0"
+        dependency 'io.reactivex.rxjava2:rxjava:2.2.21'
+        dependency "io.gsonfire:gson-fire:1.9.0"
+        dependency "com.google.code.findbugs:jsr305:3.0.2"
+        dependency "commons-codec:commons-codec:1.17.1"
+        dependency "org.projectlombok:lombok:1.18.36"
+
+        dependency 'org.bouncycastle:bcpkix-jdk18on:1.81'
+        dependency 'org.bouncycastle:bcprov-jdk18on:1.81'
+        dependency 'org.bouncycastle:bcutil-jdk18on:1.81'
+        dependency 'org.bouncycastle:bcpg-jdk18on:1.81'
+
+        dependency 'org.eclipse.jgit:org.eclipse.jgit:7.2.1.202505142326-r'
+        dependency 'org.eclipse.jgit:org.eclipse.jgit.gpg.bc:7.2.1.202505142326-r'
+        dependency 'org.eclipse.jgit:org.eclipse.jgit.ssh.apache:7.2.1.202505142326-r'
+
+        dependency ('com.tmatesoft.svnkit:svnkit:1.10.12')
+        dependency 'com.vdurmont:semver4j:3.1.0'
+        dependency 'org.beryx:text-io:3.4.1'
+
+        dependency ('org.springdoc:springdoc-openapi-starter-webmvc-ui:2.6.0') {
+            exclude 'io.swagger.core.v3:swagger-core'
+        }
+
+        dependency 'com.google.cloud.sql:mysql-socket-factory-connector-j-8:1.23.1'
+
+        dependency ('org.apache.activemq:activemq-client:6.1.6') {
+            exclude 'javax.annotation:javax.annotation-api'
+        }
+
+        dependency 'io.swagger.core.v3:swagger-annotations-jakarta:2.2.22'
+        dependency ('io.swagger.core.v3:swagger-jaxrs2-jakarta:2.2.22') {
+            exclude 'jakarta.activation:jakarta.activation-api'
+        }
+        dependency ('io.swagger.core.v3:swagger-core-jakarta:2.2.22') {
+            exclude 'jakarta.activation:jakarta.activation-api'
+        }
+
+        dependency 'jakarta.annotation:jakarta.annotation-api:3.0.0'
+        dependency 'jakarta.activation:jakarta.activation-api:2.1.3'
+        dependency ('com.sun.mail:jakarta.mail:2.0.2') {
+            // Spring needs this version
+            exclude 'com.sun.activation:jakarta.activation'
+        }
+        dependency ('jakarta.xml.bind:jakarta.xml.bind-api:4.0.2') {
+            exclude 'jakarta.activation:jakarta.activation-api'
+        }
+        dependency 'jakarta.validation:jakarta.validation-api:3.1.1'
+        dependency 'org.hibernate.validator:hibernate-validator:9.0.1.Final'
+
+        dependency ('org.liquibase:liquibase-core:4.33.0') {
+            exclude 'javax.xml.bind:jaxb-api'
+        }
+        dependency 'org.liquibase.ext:liquibase-postgresql:4.33.0'
+
+        dependency ('org.dom4j:dom4j:2.1.4') {
+            exclude 'relaxngDatatype:relaxngDatatype' // already in com.sun.xml.bind:jaxb-osgi:2.3.0.1
+            // FINERACT-940 && FINERACT-966 https://github.com/spotbugs/spotbugs/issues/1128
+            exclude 'xpp3:xpp3'
+            exclude 'pull-parser:pull-parser'
+        }
+
+        dependency 'org.owasp.esapi:esapi:2.7.0.0'
+        dependency 'org.awaitility:awaitility:4.2.2'
+
+        dependencySet(group: 'org.apache.poi', version: '5.4.1') {
+            entry 'poi'
+            entry 'poi-ooxml'
+            entry 'poi-ooxml-schemas'
+        }
+
+        dependencySet(group: 'io.rest-assured', version: '5.5.1') {
+            entry 'rest-assured'
+            entry 'json-path'
+            entry 'xml-path'
+        }
+        dependency 'org.apache.groovy:groovy-xml:5.0.2'
+        dependency 'org.apache.groovy:groovy-json:5.0.2'
+
+        dependency 'org.mapstruct:mapstruct:1.6.3'
+        dependency 'org.mapstruct:mapstruct-processor:1.6.3'
+
+        dependency "org.apache.avro:avro:1.12.0"
+
+        dependency ('org.mariadb.jdbc:mariadb-java-client:3.5.2') {
+            exclude 'org.slf4j:jcl-over-slf4j'
+            exclude 'org.slf4j:slf4j-api'
+        }
+        dependency 'org.postgresql:postgresql:42.7.8'
+
+        dependency 'com.mysql:mysql-connector-j:9.3.0'
+
+        dependency 'org.assertj:assertj-core:3.27.7'
+
+        dependency 'org.apache.commons:commons-math3:3.6.1'
+        dependency 'commons-beanutils:commons-beanutils:1.11.0'
+
+        dependency 'org.mockito:mockito-inline:5.2.0'
+
+        dependency 'org.wiremock:wiremock-standalone:3.13.0'
+        dependency 'org.apache.sshd:sshd-common:2.15.0'
+        dependency 'org.apache.sshd:sshd-core:2.15.0'
+
+        dependency 'io.cucumber:cucumber-java:7.20.1'
+        dependency 'io.cucumber:cucumber-java8:7.20.1'
+        dependency 'io.cucumber:cucumber-junit-platform-engine:7.20.1'
+        dependency 'io.cucumber:cucumber-spring:7.20.1'
+
+        dependency 'org.reflections:reflections:0.10.2'
+
+        dependency 'org.openjdk.jmh:jmh-core:1.37'
+        dependency 'org.openjdk.jmh:jmh-generator-annprocess:1.37'
+
+        dependency 'org.springframework.restdocs:spring-restdocs-asciidoctor:3.0.3'
+        dependency 'org.springframework.restdocs:spring-restdocs-mockmvc:3.0.3'
+        dependency 'org.springframework.restdocs:spring-restdocs-webtestclient:3.0.3'
+        dependency 'org.springframework.restdocs:spring-restdocs-restassured:3.0.3'
+
+        dependency 'com.lmax:disruptor:3.4.4'
+
+        dependency ('com.github.romankh3:image-comparison:4.4.0') {
+            exclude 'org.junit.jupiter:junit-jupiter-api'
+            exclude 'org.junit.jupiter:junit-jupiter-engine'
+            exclude 'org.mockito:mockito-core'
+        }
+
+        dependency 'com.ibm.icu:icu4j:76.1'
+        dependency 'org.yakworks:spring-icu4j:0.4.2'
+        dependency 'org.apache.commons:commons-lang3:3.18.0'
+        dependency 'com.nimbusds:nimbus-jose-jwt:10.0.2'
+        // Force Spring Framework version: CVE-2025-41249
+        dependency 'org.springframework:spring-core:6.2.11'
+        // Force Spring Framework version: CVE-2025-41248
+        dependency 'org.springframework.security:spring-security-core:6.5.4'
+        // Force netty-codec version: CVE-2025-67735
+        dependency 'io.netty:netty-codec:4.1.129.Final'
+        // Force netty-codec version: CVE-2025-58056
+        dependency 'io.netty:netty-codec-http:4.1.129.Final'
+        // Force lz4-java version: CVE-2025-12183
+        dependency 'at.yawk.lz4:lz4-java:1.10.1'
+        // Force tomcat-embed-core version: CVE-2025-24813
+        dependency 'org.apache.tomcat.embed:tomcat-embed-core:10.1.49'
+        dependency 'org.apache.tomcat.embed:tomcat-embed-el:10.1.49'
+        dependency 'org.apache.tomcat.embed:tomcat-embed-websocket:10.1.49'
+    }
+}

buildSrc/src/main/groovy/org.apache.fineract.release.gradle

@@ -0,0 +1,242 @@
+/**
+ * Licensed to the Apache Software Foundation (ASF) under one
+ * or more contributor license agreements. See the NOTICE file
+ * distributed with this work for additional information
+ * regarding copyright ownership. The ASF licenses this file
+ * to you under the Apache License, Version 2.0 (the
+ * "License"); you may not use this file except in compliance
+ * with the License. You may obtain a copy of the License at
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing,
+ * software distributed under the License is distributed on an
+ * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+ * KIND, either express or implied. See the License for the
+ * specific language governing permissions and limitations
+ * under the License.
+ */
+apply plugin: 'org.apache.fineract.gradle'
+apply from: "${rootDir}/buildSrc/src/main/groovy/org.apache.fineract.dependencies.gradle"
+
+fineract {
+    config {
+        username = "${findProperty('fineract.config.username')}"
+        password = "${findProperty('fineract.config.password')}"
+
+        doc {
+            url = 'git@github.com:apache/fineract-site.git'
+            directory = "${System.getProperty("java.io.tmpdir")}/fineract-site"
+            branch = "asf-site"
+        }
+        git {
+            dir = "${projectDir.absolutePath}/.git"
+            sections = [
+                [
+                    section: "user",
+                    name: "name",
+                    value: "${findProperty('fineract.config.name')}",
+                ],
+                [
+                    section: "user",
+                    name: "email",
+                    value: "${findProperty('fineract.config.email')}",
+                ],
+                [
+                    section: "user",
+                    name: "signingkey",
+                    value: "${findProperty('fineract.config.gnupg.keyName')}",
+                ],
+                [
+                    section: "commit",
+                    name: "gpgsign",
+                    value: "true",
+                ],
+            ]
+        }
+        template {
+            templateDir = "${projectDir}/buildSrc/src/main/resources"
+        }
+        gpg {
+            keyName = "${findProperty('fineract.config.gnupg.keyName')}"
+            publicKeyring = "${findProperty('fineract.config.gnupg.publicKeyring')}"
+            secretKeyring = "${findProperty('fineract.config.gnupg.secretKeyring')}"
+            password = "${findProperty('fineract.config.gnupg.password')}"
+        }
+        smtp {
+            host = 'smtp.gmail.com'
+            username = "${findProperty('fineract.config.smtp.username')}"
+            password = "${findProperty('fineract.config.smtp.password')}"
+            tls = true
+            ssl = true
+        }
+        subversion {
+            username = "${findProperty('fineract.config.username')}"
+            password = "${findProperty('fineract.config.password')}"
+            revision = 'HEAD'
+        }
+        jira {
+            url = 'https://issues.apache.org/jira/rest/api/2/'
+            username = "${findProperty('fineract.config.username')}"
+            password = "${findProperty('fineract.config.password')}"
+        }
+        confluence {
+            url = 'https://cwiki.apache.org/confluence/rest/api/'
+            username = "${findProperty('fineract.config.username')}"
+            password = "${findProperty('fineract.config.password')}"
+        }
+    }
+
+    steps = [
+        test: [
+            order: 0,
+            description: 'Test',
+            email: [
+                from: "${findProperty('fineract.config.email')}",
+                to: "${findProperty('fineract.config.email')}",
+                mime: 'text/plain',
+                subject: "[FINERACT] [TEST] 📣 🏁 🗳️ 🚀 📈 🔀 🌠 Propose new release ${version}",
+                messageTemplate: [
+                    templateFile: "${projectDir}/buildSrc/src/main/resources/email/release.step01.headsup.message.ftl"
+                ]
+            ],
+            subversion: [
+                url: 'https://dist.apache.org/repos/dist/dev/fineract',
+                directory: "${System.getProperty("java.io.tmpdir")}"
+            ],
+            jira: [
+                query: "project in (\'FINERACT\') and fixVersion = ${findProperty('fineract.release.version')} and status in (CLOSED, RESOLVED)"
+            ],
+            template: [
+                templateFile: "${projectDir}/buildSrc/src/main/resources/jira/changelog.txt.ftl"
+            ],
+            gpg: [
+                files: [
+                    "${projectDir}/buildSrc/build/libs/buildSrc.jar"
+                ]
+            ]
+        ],
+        step1: [
+            order: 1,
+            description: 'Send heads-up email to dev mailing list',
+            email: [
+                from: "${findProperty('fineract.config.email')}",
+                name: "${findProperty('fineract.config.name')}",
+                to: "${findProperty('fineract.config.email')}",
+                // to: 'dev@fineract.apache.org',
+                mime: 'text/plain',
+                subjectTemplate: [
+                    templateFile: "${projectDir}/buildSrc/src/main/resources/email/release.step01.headsup.subject.ftl"
+                ],
+                messageTemplate: [
+                    templateFile: "${projectDir}/buildSrc/src/main/resources/email/release.step01.headsup.message.ftl"
+                ]
+            ]
+        ],
+        step2: [
+            order: 2,
+            description: 'Clean up JIRA',
+        ],
+        step3: [
+            order: 3,
+            description: 'Create a release branch',
+            email: [
+                from: "${findProperty('fineract.config.email')}",
+                name: "${findProperty('fineract.config.name')}",
+                to: "${findProperty('fineract.config.email')}",
+                // to: 'dev@fineract.apache.org',
+                mime: 'text/plain',
+                subjectTemplate: [
+                    templateFile: "${projectDir}/buildSrc/src/main/resources/email/release.step03.branch.subject.ftl"
+                ],
+                messageTemplate: [
+                    templateFile: "${projectDir}/buildSrc/src/main/resources/email/release.step03.branch.message.ftl"
+                ]
+            ]
+        ],
+        step4: [
+            order: 4,
+            description: 'Freeze JIRA version',
+        ],
+        step5: [
+            order: 5,
+            description: 'Create release tag',
+            git: [
+                messageTemplate: [
+                    templateFile: "${projectDir}/buildSrc/src/main/resources/git/release.step05.tag.message.ftl"
+                ]
+            ]
+        ],
+        step6: [
+            order: 6,
+            description: 'Create a distribution',
+        ],
+        step7: [
+            order: 7,
+            description: 'Sign the distribution artifacts',
+            gpg: [
+                files: [
+                    "${rootDir}/fineract-war/build/distributions/apache-fineract-src-${project.version}.tar.gz",
+                    "${rootDir}/fineract-war/build/distributions/apache-fineract-bin-${project.version}.tar.gz"
+                ]
+            ]
+        ],
+        step8: [
+            order: 8,
+            description: 'Upload distribution artifacts to staging environment',
+            subversion: [
+                url: 'https://dist.apache.org/repos/dist/dev/fineract',
+                directory: "${System.getProperty("java.io.tmpdir")}/fineract-dist-dev"
+            ],
+        ],
+        step9: [
+            order: 9,
+            description: 'Verify distribution in staging environment',
+        ],
+        step10: [
+            order: 10,
+            description: 'Start voting on the dev mailing list',
+        ],
+        step11: [
+            order: 11,
+            description: 'Conclude the vote and announce results',
+        ],
+        step12: [
+            order: 12,
+            description: 'Upload distribution artifacts to release environment',
+            subversion: [
+                url: 'https://dist.apache.org/repos/dist/release/fineract',
+                directory: "${System.getProperty("java.io.tmpdir")}/fineract-dist-release"
+            ],
+        ],
+        step13: [
+            order: 13,
+            description: 'Close release branch and merge to \'develop\'',
+        ],
+        step14: [
+            order: 14,
+            description: 'Update website (not yet automated)',
+        ],
+        step15: [
+            order: 15,
+            description: 'Send email to announcement mailing list',
+            jira: [
+                projectId: "12319420",
+                query: "project in (\'FINERACT\') and fixVersion = ${findProperty('fineract.release.version')} and status in (CLOSED, RESOLVED, WONTFIX)"
+            ],
+            email: [
+                from: "${findProperty('fineract.config.email')}",
+                name: "${findProperty('fineract.config.name')}",
+                to: "${findProperty('fineract.config.email')}",
+                // to: 'dev@fineract.apache.org',
+                mime: 'text/plain',
+                subjectTemplate: [
+                    templateFile: "${projectDir}/buildSrc/src/main/resources/email/release.step15.announce.subject.ftl"
+                ],
+                messageTemplate: [
+                    templateFile: "${projectDir}/buildSrc/src/main/resources/email/release.step15.announce.message.ftl"
+                ]
+            ]
+        ]
+    ]
+}

buildSrc/src/main/groovy/org/apache/fineract/gradle/FineractPlugin.groovy

@@ -0,0 +1,490 @@
+/**
+ * Licensed to the Apache Software Foundation (ASF) under one
+ * or more contributor license agreements. See the NOTICE file
+ * distributed with this work for additional information
+ * regarding copyright ownership. The ASF licenses this file
+ * to you under the Apache License, Version 2.0 (the
+ * "License"); you may not use this file except in compliance
+ * with the License. You may obtain a copy of the License at
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing,
+ * software distributed under the License is distributed on an
+ * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+ * KIND, either express or implied. See the License for the
+ * specific language governing permissions and limitations
+ * under the License.
+ */
+package org.apache.fineract.gradle
+
+import org.apache.commons.io.FileUtils
+import org.apache.commons.io.filefilter.NotFileFilter
+import org.apache.commons.io.filefilter.PrefixFileFilter
+import org.apache.fineract.gradle.service.*
+import org.beryx.textio.TextIO
+import org.beryx.textio.TextIoFactory
+import org.beryx.textio.TextTerminal
+import org.gradle.api.Plugin
+import org.gradle.api.Project
+import org.slf4j.Logger
+import org.slf4j.LoggerFactory
+
+class FineractPlugin implements Plugin<Project> {
+    private static final Logger log = LoggerFactory.getLogger(FineractPlugin.class)
+
+    private JiraService jiraService
+    private ConfluenceService confluenceService
+    private SubversionService subversionService
+    private EmailService emailService
+    private GpgService gpgService
+    private TemplateService templateService
+    private GitService gitService
+    private Map<String, ?> context;
+
+    static {
+        System.setProperty("org.beryx.textio.TextTerminal", "org.beryx.textio.system.SystemTextTerminal")
+    }
+
+    void apply(Project project) {
+        def extension = project.extensions.create("fineract", FineractPluginExtension, project)
+
+        project.fineract.extensions.create("config", FineractPluginExtension.FineractPluginConfig)
+        project.fineract.config.extensions.create("doc", FineractPluginExtension.FineractPluginConfigDoc)
+        project.fineract.config.extensions.create("template", FineractPluginExtension.FineractPluginConfigTemplate)
+        project.fineract.config.extensions.create("smtp", FineractPluginExtension.FineractPluginConfigSmtp)
+        project.fineract.config.extensions.create("subversion", FineractPluginExtension.FineractPluginConfigSubversion)
+        project.fineract.config.extensions.create("jira", FineractPluginExtension.FineractPluginConfigJira)
+        project.fineract.config.extensions.create("confluence", FineractPluginExtension.FineractPluginConfigConfluence)
+        project.fineract.config.extensions.create("gpg", FineractPluginExtension.FineractPluginConfigGpg)
+        project.fineract.config.extensions.create("git", FineractPluginExtension.FineractPluginConfigGit)
+
+        project.afterEvaluate {
+            this.templateService = new TemplateService(extension.config.template)
+            this.jiraService = new JiraService(extension.config.jira)
+            this.confluenceService = new ConfluenceService(extension.config.confluence)
+            this.subversionService = new SubversionService(extension.config.subversion)
+            this.emailService = new EmailService(extension.config.smtp)
+            this.gitService = new GitService(extension.config.git, extension.config.gpg)
+            this.context = context(project)
+        }
+
+        project.tasks.register("fineractDocPublish") {
+            dependsOn(":fineract-doc:doc")
+
+            doLast {
+                log.warn("Fineract Publish Doc...")
+
+                def url = extension.config.doc.url?:"git@github.com:apache/fineract-site.git";
+                def branch = extension.config.doc.branch?:"asf-site"
+                def directory = extension.config.doc.directory?:System.getProperty("java.io.tmpdir")+"/fineract-site"
+
+                def d = new File(directory)
+
+                if(d.exists()) {
+                    gitService.pull(directory)
+                } else {
+                    gitService.clone(url, branch, directory)
+
+                    gitService.config(directory, extension.config.git.sections)
+                }
+
+                def source = new File("fineract-doc/build/docs/html/en");
+                def target = new File(directory + "/docs/current")
+
+                if(!target.name) {
+                    target.mkdirs()
+                }
+
+                FileUtils.copyDirectory(source, target, new NotFileFilter(new PrefixFileFilter(".asciidoctor")), true)
+
+                gitService.commit(directory)
+            }
+        }
+
+        project.tasks.register("fineractReleaseTest") {
+            doFirst {
+                // emojis:
+                // https://gist.github.com/parmentf/035de27d6ed1dce0b36a
+                // https://emojipedia.org/
+                // https://unicode.org/emoji/charts/full-emoji-list.html
+
+                FineractPluginExtension.FineractPluginStep step = step(extension, "test")
+
+                // TODO:
+                // - jira:
+                //   - move tickets to new version
+
+                // jira query
+                FineractPluginExtension.FineractPluginJiraParams result = jiraService.search(step.jira)
+                log.warn(">>>>>>>>>>>>>>>> ISSUE: ${result.result[0]?.id} - ${result.result[0]?.key} - ${result.result[0]?.fields?['summary']} - ${result.result[0]?.fields?['fixVersions']}")
+
+                /*
+
+                // confluence create
+                def content = new ConfluenceService.ConfluenceContent(title: "1.7.0 - Apache Fineract",
+                        space: new ConfluenceService.ConfluenceSpace(key: "FINERACT"),
+                        ancestors: [new ConfluenceService.ConfluenceParent(id: "75974324")],
+                        body: new ConfluenceService.ConfluenceBody(storage: new ConfluenceService.ConfluenceStorage(value: "<h1>Release Artifacts</h1>")))
+                confluenceService.createContent(content)
+
+                // confluence get
+                ConfluenceService.ConfluenceContent content = confluenceService.getContent("211881930")
+                log.warn(">>>>>>>>>>>>>>>>>>>>> CONFLUENCE: ${content.id} - ${content.title} - ${content.body?.storage?.value}")
+
+                // confluence update
+                content.body?.storage?.value = "<h1>Release Artifacts</h1><p><ac:structured-macro ac:macro-id=\"ac1cb3cb-84d4-45aa-820b-05cc42d39dd9\" ac:name=\"jira\" ac:schema-version=\"1\"><ac:parameter ac:name=\"server\">ASF JIRA</ac:parameter><ac:parameter ac:name=\"columnIds\">issuekey,summary,issuetype,created,updated,duedate,assignee,reporter,customfield_12311032,customfield_12311037,customfield_12311022,customfield_12311027,priority,status,resolution</ac:parameter><ac:parameter ac:name=\"columns\">key,summary,type,created,updated,due,assignee,reporter,Priority,Priority,Priority,Priority,priority,status,resolution</ac:parameter><ac:parameter ac:name=\"maximumIssues\">50</ac:parameter><ac:parameter ac:name=\"jqlQuery\">project = FINERACT AND fixVersion = 1.7.0 AND status not in (Open)</ac:parameter><ac:parameter ac:name=\"serverId\">5aa69414-a9e9-3523-82ec-879b028fb15b</ac:parameter></ac:structured-macro></p><p><br/></p>"
+                content.space = new ConfluenceService.ConfluenceSpace(key: "FINERACT")
+                content.status = null
+                content.version = new ConfluenceService.ConfluenceVersion(number: 3)
+
+                // confluence update
+                content = confluenceService.updateContent(content.id, content)
+                log.warn(">>>>>>>>>>>>>>>>>>>>> CONFLUENCE: ${content.id} - ${content.title} - ${content.body?.storage?.value}")
+
+                // confluence delete
+                ConfluenceService.ConfluenceResponse response = confluenceService.deleteContent("211881930")
+                log.warn(">>>>>>>>>>>>>>>>>>>>> CONFLUENCE: ${response?.statusCode} - ${response?.message}")
+
+                // jira versions
+                def versions = jiraService.getProjectVersions("12319420")
+                versions.findAll {
+                    log.warn(">>>> VERSION: ${it.id} - ${it.name} - ${it.description}")
+                }
+
+                def version = jiraService.getVersion("12351431")
+                log.warn(">>>> !!! VERSION: ${version.id} - ${version.name} - ${version.description} - ${version.archived}")
+
+                version.archived = !version.archived
+
+                jiraService.updateVersion(version)
+                version = jiraService.getVersion("12351431")
+                log.warn(">>>> === VERSION: ${version.id} - ${version.name} - ${version.description} - ${version.archived}")
+
+                // jira projects
+                def projects = jiraService.getProjects()
+
+                projects.findAll {
+                    log.warn(">>>>>>>>>>>> PROJECT: ${it.id} - ${it.key} - ${it.name}")
+                }
+
+                // jira info
+                Map<String, Object> info = jiraService.serverInfo()
+                log.warn(">>>>>>>>>>>>>>>> INFO: ${info}")
+
+                // jira query
+                FineractPluginExtension.FineractPluginJiraParams result = jiraService.search(step.jira)
+                log.warn(">>>>>>>>>>>>>>>> INFO: ${result.result.size()}")
+
+                // format with template
+                def tmp = templateService.render(step.template, [issues: result.result])
+
+                log.warn(tmp.output)
+                */
+            }
+        }
+
+        // TODO: step for creating release Jira ticket missing!
+
+        // step 1
+        project.tasks.register("fineractReleaseStep1") {
+            doFirst {
+                FineractPluginExtension.FineractPluginStep step = step(extension, "step1")
+
+                String version = project.properties?['fineract.release.version']
+                String issue = project.properties?['fineract.release.issue']
+                String date = project.properties?['fineract.releaseBranch.date']
+
+                if(!version || !issue || !date) {
+                    TextIO textIO = TextIoFactory.getTextIO()
+
+                    if(!version) {
+                        version = textIO.newStringInputReader()
+                                .withPattern("\\d+.\\d+.\\d+")
+                                .read("Release Version");
+                    }
+                    if(!issue) {
+                        issue = textIO.newStringInputReader()
+                                .withMaxLength(4)
+                                .withPattern("\\d+")
+                                .read("Jira Issue");
+                    }
+                    if(!date) {
+                        date = textIO.newStringInputReader()
+                                .withMaxLength(10)
+                                .withPattern("\\d\\d\\d\\d-\\d\\d-\\d\\d")
+                                .read("Date");
+                    }
+
+                    TextTerminal terminal = textIO.getTextTerminal()
+                    terminal.printf("\nResult: %s - FINERACT-%s - %s", version, issue, date)
+                }
+
+                // TODO: input validation, see FINERACT-1610
+
+                this.context?.project?['fineract.release.version'] = version
+                this.context?.project?['fineract.release.issue'] = issue
+                this.context?.project?['fineract.releaseBranch.date'] = date
+
+                if(step.email) {
+                    emailService.send( processEmailParams(step.email, this.context) )
+                }
+            }
+        }
+
+        // step 2
+        project.tasks.register("fineractReleaseStep2") {
+            doFirst {
+                FineractPluginExtension.FineractPluginStep step = step(extension, "step2")
+
+                // TODO: implement this, see FINERACT-1611
+
+                printInstructions(project, "step2")
+            }
+        }
+
+        // step 3
+        project.tasks.register("fineractReleaseStep3") {
+            doFirst {
+                FineractPluginExtension.FineractPluginStep step = step(extension, "step3")
+
+                String version = project.properties?['fineract.release.version']
+                String date = project.properties?['fineract.release.date']
+
+                if(!version || !date) {
+                    TextIO textIO = TextIoFactory.getTextIO()
+
+                    if(!version) {
+                        version = textIO.newStringInputReader()
+                                .withPattern("\\d+.\\d+.\\d+")
+                                .read("Release Version");
+                    }
+                    if(!date) {
+                        date = textIO.newStringInputReader()
+                                .withMaxLength(10)
+                                .withPattern("\\d\\d\\d\\d-\\d\\d-\\d\\d")
+                                .read("Date");
+                    }
+
+                    TextTerminal terminal = textIO.getTextTerminal()
+                    terminal.printf("\nResult: %s - %s", version, date)
+                }
+
+                // TODO: input validation, see FINERACT-1610
+
+                // TODO: create release branch, see FINERACT-1611
+
+                this.context?.project?['fineract.release.version'] = version
+                this.context?.project?['fineract.release.date'] = date
+
+                if(step.email) {
+                    emailService.send( processEmailParams(step.email, this.context) )
+                }
+            }
+        }
+
+        // step 4
+        project.tasks.register("fineractReleaseStep4") {
+            doFirst {
+                FineractPluginExtension.FineractPluginStep step = step(extension, "step4")
+                // TODO: implement this, see FINERACT-1611
+
+                printInstructions(project, "step4")
+            }
+        }
+
+        // step 5
+        project.tasks.register("fineractReleaseStep5") {
+            doFirst {
+                FineractPluginExtension.FineractPluginStep step = step(extension, "step5")
+
+                String version = project.properties?['fineract.release.version']
+
+                if(!version) {
+                    TextIO textIO = TextIoFactory.getTextIO()
+
+                    if (!version) {
+                        version = textIO.newStringInputReader()
+                                .withPattern("\\d+.\\d+.\\d+")
+                                .read("Release Version");
+                    }
+                }
+
+                this.context?.project?['fineract.release.version'] = version
+
+                def params = processGitParams(step.git, this.context)
+
+                params.tag = params.tag?:version
+
+                gitService.createTag(params.tag, params.message)
+            }
+        }
+
+        // step 6
+        project.tasks.register("fineractReleaseStep6") {
+            dependsOn(":fineract-war:distTar")
+        }
+
+        // step 7
+        project.tasks.register("fineractReleaseStep7") {
+            doFirst {
+                FineractPluginExtension.FineractPluginStep step = step(extension, "step7")
+                gpgService = new GpgService(extension.config.gpg)
+                gpgService.sign(step.gpg)
+
+                step.gpg.files.findAll {
+                    gpgService.sha512(step.gpg)
+                }
+            }
+        }
+
+        // step 8
+        project.tasks.register("fineractReleaseStep8") {
+            doFirst {
+                FineractPluginExtension.FineractPluginStep step = step(extension, "step8")
+
+                String version = project.properties?['fineract.release.version']
+
+                if(!version) {
+                    TextIO textIO = TextIoFactory.getTextIO()
+
+                    version = textIO.newStringInputReader()
+                            .withPattern("\\d+.\\d+.\\d+")
+                            .read("Release Version");
+                }
+
+                // TODO: input validation, see FINERACT-1610
+
+                subversionService.checkout(step.subversion)
+
+                def directory = step.subversion.directory?:System.getProperty("java.io.tmpdir") + "/fineract-dist-dev"
+
+                def source = new File("fineract-war/build/distributions")
+                def target = new File("${directory}/${version}")
+
+                FileUtils.copyDirectory(source, target, true)
+
+                subversionService.commit(step.subversion)
+            }
+        }
+
+        // step 9
+        project.tasks.register("fineractReleaseStep9") {
+            doFirst {
+                FineractPluginExtension.FineractPluginStep step = step(extension, "step9")
+                // TODO: implement this, see FINERACT-1611
+
+                printInstructions(project, "step9")
+            }
+        }
+
+        // step 10
+        project.tasks.register("fineractReleaseStep10") {
+            doFirst {
+                FineractPluginExtension.FineractPluginStep step = step(extension, "step10")
+
+                printInstructions(project, "step10")
+            }
+        }
+
+        // step 11
+        project.tasks.register("fineractReleaseStep11") {
+            doFirst {
+                FineractPluginExtension.FineractPluginStep step = step(extension, "step11")
+
+                printInstructions(project, "step11")
+            }
+        }
+
+        // step 12
+        project.tasks.register("fineractReleaseStep12") {
+            doFirst {
+                FineractPluginExtension.FineractPluginStep step = step(extension, "step12")
+                // TODO: input validation, see FINERACT-1610
+
+                // TODO: implement this, see FINERACT-1817
+                printInstructions(project, "step12")
+            }
+        }
+
+        // step 13
+        project.tasks.register("fineractReleaseStep13") {
+            doFirst {
+                FineractPluginExtension.FineractPluginStep step = step(extension, "step13")
+                // TODO: implement this, see FINERACT-1611
+
+                printInstructions(project, "step13")
+            }
+        }
+
+        // step 14
+        project.tasks.register("fineractReleaseStep14") {
+            doFirst {
+                FineractPluginExtension.FineractPluginStep step = step(extension, "step14")
+                // TODO: implement this, see FINERACT-1611
+
+                printInstructions(project, "step14")
+            }
+        }
+
+        // step 15
+        project.tasks.register("fineractReleaseStep15") {
+            doFirst {
+                log.warn("Release step 15: send email to announcement mailing list")
+
+                printInstructions(project, "step15")
+            }
+        }
+    }
+
+    private FineractPluginExtension.FineractPluginStep step(FineractPluginExtension extension, String id) {
+        FineractPluginExtension.FineractPluginStep step = extension.steps[id]
+
+        if(step) {
+            log.warn("Fineract release step ${step.order}: ${step.description}.")
+        } else {
+            throw new RuntimeException("Could not find any parameters for step with ID '${id}'")
+        }
+
+        return step
+    }
+
+    private FineractPluginExtension.FineractPluginEmailParams processEmailParams(FineractPluginExtension.FineractPluginEmailParams params, Object data) {
+        if(params.subjectTemplate) {
+            def result = templateService.render(params.subjectTemplate, data)
+
+            params.subject = result.output
+        }
+        if(params.messageTemplate) {
+            def result = templateService.render(params.messageTemplate, data)
+
+            params.message = result.output
+        }
+
+        return params
+    }
+
+    private FineractPluginExtension.FineractPluginGitParams processGitParams(FineractPluginExtension.FineractPluginGitParams params, Object data) {
+        if(params.messageTemplate) {
+            def result = templateService.render(params.messageTemplate, data)
+
+            params.message = result.output
+        }
+
+        return params
+    }
+
+    private Map<String, ?> context(Project project) {
+        return Map.of("project", project.getProperties().findAll { it.key != "password"})
+    }
+
+    private void printInstructions(Project project, String step) {
+        String version = project.properties?['fineract.release.version']?:"0.0.0"
+
+        this.context?.project?['fineract.release.version'] = version
+
+        FineractPluginExtension.FineractPluginTemplateParams result = templateService.render(new FineractPluginExtension.FineractPluginTemplateParams(templateFile: new File("buildSrc/src/main/resources/instructions/${step}.txt.ftl")), this.context)
+
+        log.warn(result.output)
+    }
+}

buildSrc/src/main/groovy/org/apache/fineract/gradle/FineractPluginExtension.groovy

@@ -0,0 +1,164 @@
+/**
+ * Licensed to the Apache Software Foundation (ASF) under one
+ * or more contributor license agreements. See the NOTICE file
+ * distributed with this work for additional information
+ * regarding copyright ownership. The ASF licenses this file
+ * to you under the Apache License, Version 2.0 (the
+ * "License"); you may not use this file except in compliance
+ * with the License. You may obtain a copy of the License at
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing,
+ * software distributed under the License is distributed on an
+ * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+ * KIND, either express or implied. See the License for the
+ * specific language governing permissions and limitations
+ * under the License.
+ */
+package org.apache.fineract.gradle
+
+import org.apache.fineract.gradle.service.JiraService
+import org.gradle.api.Project
+
+class FineractPluginExtension {
+    Project project
+    Map<String, FineractPluginStep> steps = [:]
+
+    FineractPluginExtension(Project project) {
+        this.project = project
+    }
+
+    static class FineractPluginConfig {
+        String username
+        String password
+    }
+
+    static class FineractPluginConfigDoc {
+        String url
+        String directory
+        String branch
+    }
+
+    static class FineractPluginConfigJira {
+        String url
+        String username
+        String password
+        String project
+    }
+
+    static class FineractPluginConfigConfluence {
+        String url
+        String username
+        String password
+        String project
+    }
+
+    static class FineractPluginConfigGpg {
+        String keyName
+        String publicKeyring
+        String secretKeyring
+        String password
+    }
+
+    static class FineractPluginConfigTemplate {
+        String templateDir
+    }
+
+    static class FineractPluginConfigSmtp {
+        String host
+        int port
+        String username
+        String password
+        boolean tls
+        boolean ssl
+    }
+
+    static class FineractPluginConfigGit {
+        String username
+        String password
+        String dir
+        boolean dryRun
+        List<FineractPluginConfigGitSection> sections
+    }
+
+    static class FineractPluginConfigGitSection {
+        String section
+        String subsection
+        String name
+        String value
+    }
+
+    static class FineractPluginConfigSubversion {
+        String username
+        String password
+        String revision
+    }
+
+    static class FineractPluginStep {
+        int order
+        String description
+        FineractPluginEmailParams email
+        FineractPluginJiraParams jira
+        FineractPluginTemplateParams template
+        FineractPluginConfluenceParams confluence
+        FineractPluginGitParams git
+        FineractPluginSubversionParams subversion
+        FineractPluginGpgParams gpg
+    }
+
+    static class FineractPluginEmailParams {
+        String from
+        String name
+        String to
+        String cc
+        String bcc
+        String mime
+        String subject
+        FineractPluginTemplateParams subjectTemplate
+        String message
+        FineractPluginTemplateParams messageTemplate
+    }
+
+    static class FineractPluginJiraParams {
+        String command
+        String projectId
+        String fields = "*all"
+        String query
+        List<JiraService.JiraIssue> result = new ArrayList<>()
+        int pageOffset = 0
+        int pageSize= 50
+        int total = 1000
+        List<String> includes = ["summary", "status", "assignee", "fixVersions"]
+    }
+
+    static class FineractPluginConfluenceParams {
+        String title
+        String content
+        Integer ancestor
+    }
+
+    static class FineractPluginGitParams {
+        String tag
+        String message
+        FineractPluginTemplateParams messageTemplate
+    }
+
+    static class FineractPluginSubversionParams {
+        String url
+        String command
+        String revision = "HEAD"
+        String directory
+    }
+
+    static class FineractPluginTemplateParams {
+        String template
+        String templateFile
+        String output
+        String outputFile
+    }
+
+    static class FineractPluginGpgParams {
+        List<String> files
+    }
+}

buildSrc/src/main/groovy/org/apache/fineract/gradle/service/ConfluenceService.groovy

@@ -0,0 +1,209 @@
+/**
+ * Licensed to the Apache Software Foundation (ASF) under one
+ * or more contributor license agreements. See the NOTICE file
+ * distributed with this work for additional information
+ * regarding copyright ownership. The ASF licenses this file
+ * to you under the Apache License, Version 2.0 (the
+ * "License"); you may not use this file except in compliance
+ * with the License. You may obtain a copy of the License at
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing,
+ * software distributed under the License is distributed on an
+ * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+ * KIND, either express or implied. See the License for the
+ * specific language governing permissions and limitations
+ * under the License.
+ */
+package org.apache.fineract.gradle.service
+
+import com.fasterxml.jackson.databind.DeserializationFeature
+import com.fasterxml.jackson.databind.ObjectMapper
+import okhttp3.ConnectionPool
+import okhttp3.Credentials
+import okhttp3.Interceptor
+import okhttp3.OkHttpClient
+import okhttp3.Response
+import okhttp3.logging.HttpLoggingInterceptor
+import org.apache.fineract.gradle.FineractPluginExtension.FineractPluginConfigConfluence
+import org.jetbrains.annotations.NotNull
+import org.slf4j.Logger
+import org.slf4j.LoggerFactory
+import retrofit2.Call
+import retrofit2.Callback
+import retrofit2.Retrofit
+import retrofit2.converter.jackson.JacksonConverterFactory
+import retrofit2.http.*
+
+import java.util.concurrent.TimeUnit
+
+class ConfluenceService {
+    private static final Logger log = LoggerFactory.getLogger(ConfluenceService.class)
+
+    private ConfluenceApi api
+
+    ConfluenceService(FineractPluginConfigConfluence config) {
+        def credentials = Credentials.basic(config.username, config.password)
+
+        final ConnectionPool connectionPool = new ConnectionPool(5, 60, TimeUnit.SECONDS);
+
+        HttpLoggingInterceptor loggingInterceptor = new HttpLoggingInterceptor(log::debug)
+        loggingInterceptor.setLevel(HttpLoggingInterceptor.Level.BODY)
+
+        OkHttpClient.Builder okClient = new OkHttpClient.Builder()
+                .connectionPool(connectionPool)
+                .addInterceptor(loggingInterceptor)
+                .addInterceptor(new Interceptor() {
+                    @Override
+                    Response intercept(@NotNull Interceptor.Chain chain) throws IOException {
+                        def request = chain.request()
+                        request = request.newBuilder().header("Authorization", credentials).build()
+                        return chain.proceed(request)
+                    }
+                })
+
+        ObjectMapper mapper = new ObjectMapper()
+                .configure(DeserializationFeature.FAIL_ON_UNKNOWN_PROPERTIES, false)
+
+        Retrofit.Builder builder = new Retrofit.Builder()
+                .baseUrl(config.url)
+                .client(okClient.build())
+                .addConverterFactory(JacksonConverterFactory.create(mapper))
+
+        Retrofit retrofit = builder.build()
+
+        this.api = retrofit.create(ConfluenceApi.class)
+    }
+
+    ConfluenceContent getContent(String id) {
+        this.api.getContentById(id).execute().body()
+    }
+
+    ConfluenceContent createContent(ConfluenceContent content) {
+        this.api.postContent(content).execute().body()
+    }
+
+    ConfluenceContent updateContent(String id, ConfluenceContent content) {
+        this.api.putContent(id, content).execute().body()
+    }
+
+    ConfluenceResponse deleteContent(String id) {
+        this.api.deleteContentById(id).execute().body()
+    }
+
+    static class ConfluenceContent {
+        String id
+        String type
+        String title
+        String status
+        String self
+        List<ConfluenceParent> ancestors
+        ConfluenceSpace space
+        ConfluenceBody body
+        ConfluenceVersion version
+        ConfluenceHistory history
+    }
+
+    static class ConfluenceContentResult {
+        List<ConfluenceContent> results
+        private int start
+        private int limit
+        private int size
+    }
+
+    static class ConfluenceParent {
+        String id
+        String type
+    }
+
+    static class ConfluenceVersion {
+        ConfluenceCreatedBy by
+        Date when
+        String message
+        Integer number
+    }
+
+    static class ConfluenceCreatedBy {
+        String username
+        String displayName
+    }
+
+    static class ConfluenceHistory {
+        boolean latest
+        ConfluenceCreatedBy createdBy
+        ConfluenceVersion nextVersion
+        ConfluenceVersion previousVersion
+        ConfluenceVersion lastUpdated
+    }
+
+    static class ConfluenceSpace {
+        String key
+        String name
+    }
+
+    static class ConfluenceSpaceResult {
+        List<ConfluenceSpace> results
+    }
+
+    static class ConfluenceBody {
+        ConfluenceStorage storage
+    }
+
+    static class ConfluenceStorage {
+        String value
+        String representation
+    }
+
+    static class ConfluenceResponse {
+        int statusCode
+        String message
+        Map<String, ?> data
+    }
+
+    static interface ConfluenceApi {
+        @GET("content")
+        Call<ConfluenceContentResult> getContentResults();
+
+        @GET("content")
+        Call<ConfluenceContentResult> getContentBySpaceKeyAndTitle(final @Query("key") String key, final @Query("title") String title);
+
+        @GET("content/{id}/child/{type}")
+        Call<ConfluenceContentResult> getChildren(final @Path("id") String parentId, final @Path("type") String type, final @QueryMap Map<String, String> params);
+
+
+        @GET("content/{id}?expand=body.storage")
+        Call<ConfluenceContent> getContentById(final @Path("id") String id);
+
+        @POST("contentbody/convert/{to}")
+        Call<ConfluenceStorage> postContentConversion(final @Body ConfluenceStorage storage, final @Path("to") String convertToFormat);
+
+        @POST("content")
+        Call<ConfluenceContent> postContent(final @Body ConfluenceContent content);
+
+        @PUT("content/{id}")
+        Call<ConfluenceContent> putContent(final @Path("id") String id, final @Body ConfluenceContent content);
+
+        @POST("content")
+        void postContentWithCallback(final @Body ConfluenceContent content, final Callback<ConfluenceContent> callback);
+
+        @DELETE("content/{id}")
+        Call<ConfluenceResponse> deleteContentById(final @Path("id") String id);
+
+        @GET("space")
+        Call<ConfluenceSpaceResult> getSpaces();
+
+        @POST("space")
+        Call<ConfluenceSpace> createSpace(final @Body ConfluenceSpace space);
+
+        @POST("space/_private")
+        Call<ConfluenceSpace> createPrivateSpace(final @Body ConfluenceSpace space);
+
+        @GET("space/{spaceKey}/content/page")
+        Call<ConfluenceContentResult> getAllSpaceContent(final @Path("spaceKey") String spaceKey, final @QueryMap Map<String, String> params);
+
+        @GET("space/{spaceKey}/content/{type}")
+        Call<ConfluenceContentResult> getRootContentBySpaceKey(final @Path("spaceKey") String spaceKey, final @Path("type") String contentType);
+    }
+}
+// curl -u aleks:xxx -X POST -H 'Content-Type: application/json' -d '{"type":"page","title":"1.7.0 - Apache Fineract","space":{"key":"FINERACT"},"ancestors":[{"id":75974324}],"body":{"storage":{"value":"<p>This is <br/> a new page</p>","representation": "storage"}}}' https://cwiki.apache.org/confluence/content/ | python -mjson.tool

buildSrc/src/main/groovy/org/apache/fineract/gradle/service/EmailService.groovy

@@ -0,0 +1,87 @@
+/**
+ * Licensed to the Apache Software Foundation (ASF) under one
+ * or more contributor license agreements. See the NOTICE file
+ * distributed with this work for additional information
+ * regarding copyright ownership. The ASF licenses this file
+ * to you under the Apache License, Version 2.0 (the
+ * "License"); you may not use this file except in compliance
+ * with the License. You may obtain a copy of the License at
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing,
+ * software distributed under the License is distributed on an
+ * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+ * KIND, either express or implied. See the License for the
+ * specific language governing permissions and limitations
+ * under the License.
+ */
+package org.apache.fineract.gradle.service
+
+import org.apache.fineract.gradle.FineractPluginExtension
+import org.apache.fineract.gradle.FineractPluginExtension.FineractPluginEmailParams
+import org.slf4j.Logger
+import org.slf4j.LoggerFactory
+
+import jakarta.mail.*
+import jakarta.mail.internet.InternetAddress
+import jakarta.mail.internet.MimeMessage
+
+class EmailService {
+    private static final Logger log = LoggerFactory.getLogger(EmailService.class)
+
+    String username
+    String password
+    Properties properties
+
+    EmailService(FineractPluginExtension.FineractPluginConfigSmtp config) {
+        this.username = config.username
+        this.password = config.password
+
+        this.properties = new Properties()
+        this.properties.put("mail.smtp.host", config.host)
+        this.properties.put("mail.smtp.auth", "true")
+        this.properties.put("mail.smtp.starttls.enable", config.tls.toString())
+        if(config.ssl) {
+            this.properties.put("mail.smtp.port", "465")
+            this.properties.put("mail.smtp.socketFactory.port", "465");
+            this.properties.put("mail.smtp.socketFactory.class", "javax.net.ssl.SSLSocketFactory");
+
+        } else {
+            this.properties.put("mail.smtp.port", "587")
+        }
+    }
+
+    void send(FineractPluginEmailParams params) {
+        log.warn("Sending email: ${params.from} -> ${params.to} - ${params.subject}")
+
+        Session session = Session.getInstance(this.properties, new Authenticator() {
+            @Override
+            protected PasswordAuthentication getPasswordAuthentication() {
+                return new PasswordAuthentication(getUsername(), getPassword())
+            }
+        })
+
+        try {
+
+            Message msg = new MimeMessage(session)
+            msg.setFrom(new InternetAddress(params.from, params.name))
+            msg.setRecipients(Message.RecipientType.TO, InternetAddress.parse(params.to))
+            if(params.cc) {
+                msg.setRecipients(Message.RecipientType.CC, InternetAddress.parse(params.cc))
+            }
+            if(params.bcc) {
+                msg.setRecipients(Message.RecipientType.BCC, InternetAddress.parse(params.bcc))
+            }
+            msg.setSubject(params.subject, "UTF-8")
+            msg.setText(params.message, "UTF-8");
+
+            Transport.send(msg);
+
+            log.info("Done")
+
+        } catch (MessagingException e) {
+            log.error(e.toString(), e)
+        }
+    }
+}

buildSrc/src/main/groovy/org/apache/fineract/gradle/service/GitService.groovy

@@ -0,0 +1,138 @@
+/**
+ * Licensed to the Apache Software Foundation (ASF) under one
+ * or more contributor license agreements. See the NOTICE file
+ * distributed with this work for additional information
+ * regarding copyright ownership. The ASF licenses this file
+ * to you under the Apache License, Version 2.0 (the
+ * "License"); you may not use this file except in compliance
+ * with the License. You may obtain a copy of the License at
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing,
+ * software distributed under the License is distributed on an
+ * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+ * KIND, either express or implied. See the License for the
+ * specific language governing permissions and limitations
+ * under the License.
+ */
+package org.apache.fineract.gradle.service
+
+import org.apache.fineract.gradle.FineractPluginExtension
+import org.eclipse.jgit.api.Git
+import org.eclipse.jgit.api.errors.CanceledException
+import org.eclipse.jgit.api.errors.UnsupportedSigningFormatException
+import org.eclipse.jgit.gpg.bc.internal.BouncyCastleGpgSigner
+import org.eclipse.jgit.lib.GpgConfig
+import org.eclipse.jgit.lib.GpgSignature
+import org.eclipse.jgit.lib.PersonIdent
+import org.eclipse.jgit.lib.Repository
+import org.eclipse.jgit.lib.Signers
+import org.eclipse.jgit.lib.StoredConfig
+import org.eclipse.jgit.storage.file.FileRepositoryBuilder
+import org.eclipse.jgit.transport.CredentialsProvider
+import org.eclipse.jgit.transport.RefSpec
+import org.slf4j.Logger
+import org.slf4j.LoggerFactory
+
+class GitService {
+    private static final Logger log = LoggerFactory.getLogger(GitService.class)
+
+    private Git git
+    private boolean dryRun
+
+    GitService(FineractPluginExtension.FineractPluginConfigGit config, FineractPluginExtension.FineractPluginConfigGpg gpgConfig) {
+        Signers.set(GpgConfig.GpgFormat.OPENPGP, new BouncyCastleGpgSigner() {
+
+            @Override
+            GpgSignature sign(Repository repository, GpgConfig internalConfig, byte[] data, PersonIdent committer, String signingKey, CredentialsProvider credentialsProvider) throws CanceledException, IOException, UnsupportedSigningFormatException {
+                log.warn("------------------------ KEY: ${gpgSigningKey} IDENT: ${committer}")
+            }
+
+            @Override
+            boolean canLocateSigningKey(Repository repository, GpgConfig internalConfig, PersonIdent committer, String signingKey, CredentialsProvider credentialsProvider) throws CanceledException {
+                log.warn("------------------------ KEY: ${gpgSigningKey} IDENT: ${committer}")
+                return false
+            }
+        });
+
+        Repository repository = new FileRepositoryBuilder()
+                .readEnvironment()
+                .setGitDir(new File(config.dir))
+                .findGitDir()
+                .build();
+
+        this.git = new Git(repository)
+        this.dryRun = config.dryRun
+    }
+
+    void clone(String url, String branch, String directory) {
+        def ref = "refs/heads/" + branch
+
+        Git.cloneRepository()
+                .setURI(url)
+                .setDirectory(new File(directory))
+                .setBranchesToClone(Arrays.asList(ref))
+                .setBranch(ref)
+                .call();
+    }
+
+    void pull(String directory) {
+        Git git = Git.open(new File(directory));
+
+        git.pull().call()
+    }
+
+    void commit(String directory) {
+        Git git = Git.open(new File(directory));
+
+        def status = git.status().call()
+
+        if(!status.isClean()) {
+            git.add().addFilepattern(".").call()
+
+            git.commit().setSign(true).setMessage("chore: Publish current docs").call()
+        }
+
+        def result = git.push().call()
+    }
+
+    void config(String directory, List<FineractPluginExtension.FineractPluginConfigGitSection> sections) {
+        Git git = Git.open(new File(directory));
+
+        StoredConfig gitConfig = git.getRepository().getConfig();
+
+        sections.forEach(section -> {
+            gitConfig.setString(section.section, section.subsection, section.name, section.value);
+        })
+        // gitConfig.setString("branch", "master", "merge", "refs/heads/master");
+        gitConfig.save();
+    }
+
+    void createTag(String name, String message) {
+        def ref = git.tag()
+                .setName(name)
+                .setMessage(message)
+                .setAnnotated(true)
+                .setForceUpdate(true)
+                .call()
+
+        try {
+            git.push().setPushTags().setForce(true).setDryRun(dryRun).call()
+
+            log.warn("Tag created: ${name} (${ref.name})")
+        } catch(Exception e) {
+            log.error(e.toString(), e)
+        }
+    }
+
+    // TODO: explicitly provide the directory
+    void removeTag(String name) {
+        git.tagDelete().setTags(name).call()
+
+        RefSpec refSpec = new RefSpec(":refs/tags/${name}");
+        git.push().setRefSpecs(refSpec).setRemote("origin").call()
+
+        log.warn("Tag deleted: ${name}")
+    }
+}

buildSrc/src/main/groovy/org/apache/fineract/gradle/service/GpgService.groovy

@@ -0,0 +1,149 @@
+/**
+ * Licensed to the Apache Software Foundation (ASF) under one
+ * or more contributor license agreements. See the NOTICE file
+ * distributed with this work for additional information
+ * regarding copyright ownership. The ASF licenses this file
+ * to you under the Apache License, Version 2.0 (the
+ * "License"); you may not use this file except in compliance
+ * with the License. You may obtain a copy of the License at
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing,
+ * software distributed under the License is distributed on an
+ * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+ * KIND, either express or implied. See the License for the
+ * specific language governing permissions and limitations
+ * under the License.
+ */
+package org.apache.fineract.gradle.service
+
+import org.apache.fineract.gradle.FineractPluginExtension
+import org.apache.fineract.gradle.FineractPluginExtension.FineractPluginConfigGpg
+import org.bouncycastle.bcpg.ArmoredOutputStream
+import org.bouncycastle.bcpg.BCPGOutputStream
+import org.bouncycastle.gpg.keybox.BlobType
+import org.bouncycastle.gpg.keybox.PublicKeyRingBlob
+import org.bouncycastle.gpg.keybox.bc.BcKeyBox
+import org.bouncycastle.jce.provider.BouncyCastleProvider
+import org.bouncycastle.openpgp.*
+import org.bouncycastle.openpgp.operator.bc.BcKeyFingerprintCalculator
+import org.bouncycastle.openpgp.operator.bc.BcPGPContentSignerBuilder
+import org.bouncycastle.openpgp.operator.jcajce.JcePBESecretKeyDecryptorBuilder
+import org.slf4j.Logger
+import org.slf4j.LoggerFactory
+
+import java.security.GeneralSecurityException
+import java.security.MessageDigest
+import java.security.Security
+
+class GpgService {
+    private static final Logger log = LoggerFactory.getLogger(GpgService.class)
+
+    private PGPPrivateKey privateKey;
+    private PGPPublicKey publicKey;
+
+    static {
+        Security.addProvider(new BouncyCastleProvider());
+    }
+
+    GpgService(FineractPluginConfigGpg config) {
+        // TODO: provide implementation for *.gpg key rings
+        def keyBox = config.publicKeyring.endsWith(".kbx") ? new BcKeyBox(new FileInputStream(config.publicKeyring)) : null
+
+        if(keyBox) {
+            for(def keyBlob : keyBox.getKeyBlobs()) {
+                switch (keyBlob.type) {
+                    case BlobType.X509_BLOB:
+                        break
+                    case BlobType.OPEN_PGP_BLOB:
+                        def publicKeyRing = (keyBlob as PublicKeyRingBlob).getPGPPublicKeyRing();
+                        def iterator = publicKeyRing.getPublicKeys();
+
+                        while (publicKey == null && iterator.hasNext()) {
+                            def k = iterator.next();
+
+                            if (k.isEncryptionKey()) {
+                                def keyName = Long.toHexString(k.keyID).toUpperCase()
+
+                                if(config.keyName.substring(config.keyName.length()-keyName.length()) == keyName) {
+                                    publicKey = k;
+                                    log.warn("Found: ${publicKey.getUserIDs().next()}")
+                                    break
+                                } else {
+                                    log.warn("Key mismatch: ${config.keyName} <-> ${keyName}")
+                                }
+                            }
+                        }
+                        break
+                }
+            }
+
+            PGPSecretKeyRingCollection secretRingCollection = new PGPSecretKeyRingCollection(new FileInputStream(config.secretKeyring), new BcKeyFingerprintCalculator())
+
+            def secretKey = secretRingCollection.getSecretKey(publicKey.keyID)
+
+            if(secretKey!=null) {
+                this.privateKey = secretKey.extractPrivateKey(new JcePBESecretKeyDecryptorBuilder().setProvider(BouncyCastleProvider.PROVIDER_NAME).build(config.password.toCharArray()))
+            }
+        } else {
+            log.warn("Could not open the public key ring.")
+        }
+    }
+
+    void sign(FineractPluginExtension.FineractPluginGpgParams params) {
+        params.files.findAll {
+            InputStream is = new FileInputStream(it)
+
+            BCPGOutputStream os = new BCPGOutputStream(new ArmoredOutputStream(new FileOutputStream(it + ".asc")))
+            sign(is).encode(os)
+            os.close();
+        }
+    }
+
+    PGPSignature sign(InputStream is) throws IOException, PGPException, GeneralSecurityException {
+
+        PGPSignatureGenerator generator = new PGPSignatureGenerator(new BcPGPContentSignerBuilder(publicKey.getAlgorithm(), PGPUtil.SHA1));
+        generator.init(PGPSignature.BINARY_DOCUMENT, privateKey);
+
+        byte[] buf = new byte[4096];
+        int len;
+
+        while ((len = is.read(buf)) >= 0) {
+            generator.update(buf, 0, len);
+        }
+
+        return generator.generate();
+    }
+
+    void sha512(FineractPluginExtension.FineractPluginGpgParams params) {
+        params.files.findAll {
+            def result = calc(new FileInputStream(it), MessageDigest.getInstance("SHA-512", BouncyCastleProvider.PROVIDER_NAME))
+            def file = new File("${it}.sha512")
+            file.write result
+        }
+    }
+
+    private static String calc(InputStream is, MessageDigest digest) {
+        String output
+        int read
+        byte[] buffer = new byte[8192]
+
+        try {
+            while ((read = is.read(buffer)) > 0) {
+                digest.update(buffer, 0, read)
+            }
+            byte[] hash = digest.digest()
+            BigInteger bigInt = new BigInteger(1, hash)
+            output = bigInt.toString(16)
+            while ( output.length() < 32 ) {
+                output = "0"+output
+            }
+        } catch (Exception e) {
+            log.error(e.toString(), e)
+            return null
+        }
+
+        return output
+    }
+}

buildSrc/src/main/groovy/org/apache/fineract/gradle/service/JiraService.groovy

@@ -0,0 +1,324 @@
+/**
+ * Licensed to the Apache Software Foundation (ASF) under one
+ * or more contributor license agreements. See the NOTICE file
+ * distributed with this work for additional information
+ * regarding copyright ownership. The ASF licenses this file
+ * to you under the Apache License, Version 2.0 (the
+ * "License"); you may not use this file except in compliance
+ * with the License. You may obtain a copy of the License at
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing,
+ * software distributed under the License is distributed on an
+ * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+ * KIND, either express or implied. See the License for the
+ * specific language governing permissions and limitations
+ * under the License.
+ */
+package org.apache.fineract.gradle.service
+
+import com.fasterxml.jackson.databind.DeserializationFeature
+import com.fasterxml.jackson.databind.ObjectMapper
+import okhttp3.*
+import okhttp3.logging.HttpLoggingInterceptor
+import org.apache.fineract.gradle.FineractPluginExtension
+import org.jetbrains.annotations.NotNull
+import org.slf4j.Logger
+import org.slf4j.LoggerFactory
+import retrofit2.Call
+import retrofit2.Retrofit
+import retrofit2.converter.jackson.JacksonConverterFactory
+import retrofit2.http.*
+
+import java.util.concurrent.TimeUnit
+
+class JiraService {
+    private static final Logger log = LoggerFactory.getLogger(JiraService.class)
+
+    private JiraApi api
+
+    JiraService(FineractPluginExtension.FineractPluginConfigJira config) {
+        def credentials = Credentials.basic(config.username, config.password)
+
+        final ConnectionPool connectionPool = new ConnectionPool(5, 60, TimeUnit.SECONDS);
+
+        HttpLoggingInterceptor loggingInterceptor = new HttpLoggingInterceptor(log::debug)
+        loggingInterceptor.setLevel(HttpLoggingInterceptor.Level.BODY)
+
+        OkHttpClient.Builder okClient = new OkHttpClient.Builder()
+            .connectionPool(connectionPool)
+            .addInterceptor(loggingInterceptor)
+            .addInterceptor(new Interceptor() {
+                @Override
+                Response intercept(@NotNull Interceptor.Chain chain) throws IOException {
+                    def request = chain.request()
+                    request = request.newBuilder().header("Authorization", credentials).build()
+                    return chain.proceed(request)
+                }
+            })
+
+        ObjectMapper mapper = new ObjectMapper()
+                .configure(DeserializationFeature.FAIL_ON_UNKNOWN_PROPERTIES, false)
+
+        Retrofit.Builder builder = new Retrofit.Builder()
+                .baseUrl(config.url)
+                .client(okClient.build())
+                .addConverterFactory(JacksonConverterFactory.create(mapper))
+
+        Retrofit retrofit = builder.build()
+
+        this.api = retrofit.create(JiraApi.class)
+    }
+
+    Map<String, Object> serverInfo() {
+        return this.api.serverInfo.execute().body()
+    }
+
+    FineractPluginExtension.FineractPluginJiraParams search(FineractPluginExtension.FineractPluginJiraParams params) {
+        def query = [:]
+
+        query['jql'] = params.query
+        query['startAt'] = params.pageOffset?:0
+        query['maxResults'] = params.pageSize?:50
+        // query['expand'] = [
+        //     "names",
+        //     "schema",
+        //     "operations"
+        // ]
+        // query['fields'] = params.fields?:"*all"
+        query['fields'] = params.includes?:[
+            "summary",
+            "status",
+            "assignee",
+            "fixVersions"
+        ]
+
+        // params.total = params.total?:1000
+        params.total = 1000
+
+        def result = this.api.searchIssues(query).execute().body()
+
+        params.result.addAll(result?.issues as List)
+
+        if(result?.issues.size()>=params.pageSize && params.result.size() < params.total) {
+            params.pageOffset += params.pageSize
+            search(params);
+        }
+
+        return params
+    }
+
+    List getProjects() {
+        return this.api.getProjects()?.execute()?.body()
+    }
+
+    List getProjectVersions(String projectId) {
+        return this.api.getProjectVersions(projectId)?.execute()?.body()
+    }
+
+    JiraVersion getVersion(String id) {
+        return this.api.getVersion(id)?.execute()?.body()
+    }
+
+    void updateVersion(JiraVersion version) {
+        this.api.updateVersion(version.id, version).execute()
+    }
+
+    static class JiraVersion {
+        String self
+        String id
+        String description
+        String name
+        boolean archived
+        boolean released
+        String releaseDate
+        String userReleaseDate
+        String project
+        Integer projectId
+    }
+
+    static class JiraSearchResult {
+        String expand
+        Integer startAt
+        Integer maxResults
+        Integer total
+        List<JiraIssue> issues
+        List<String> warningMessages
+        Map<String, Object> names
+        Map<String, Object> schema
+    }
+
+    static class JiraIssue {
+        String expand
+        String self
+        String id
+        String key
+        Map<String, Object> renderedFields
+        Map<String, Object> properties
+        Map<String, Object> names
+        Map<String, Object> schema
+        Map<String, Object> fields
+    }
+
+    static class JiraIssueUpdateRequest {
+        Map<String, Map<String, Object>> historyMetadata
+        Map<String, List<Map<String, Object>>> update
+        Map<String, Object> fields
+        Map<String, List<Map<String, Object>>> properties
+    }
+
+    static interface JiraApi {
+        // Server Info
+        @GET("serverInfo")
+        Call<Map<String, Object>> getServerInfo()
+
+        // Components
+        @GET("component/{id}")
+        Call<Object> getComponent(@Path("id") String id)
+
+        @POST("component")
+        Call<Object> createComponent(@Body Object component)
+
+        @PUT("component/{id}")
+        Call<Void> updateComponent(@Path("id") String id, @Body Object component)
+
+        @GET("component/{id}/relatedIssueCounts")
+        Call<Object> getComponentIssueCount(@Path("id") String id)
+
+        // Issue
+        @GET("issue/{issueIdOrKey}")
+        Call<Object> getIssue(@Path("issueIdOrKey") String issueIdOrKey)
+
+        @POST("issue")
+        Call<Object> createIssue(@Body Object issue)
+
+        @PUT("issue/{issueIdOrKey}")
+        Call<Object> updateIssue(@Path("issueIdOrKey") String issueIdOrKey, @Body Object issue, @QueryMap Map<String, String> queryMap)
+
+        @POST("issue/bulk")
+        Call<Object> createIssues(@Body Object issues)
+
+        @PUT("issue/{issueIdOrKey}/assignee")
+        Call<Void> assignIssue(@Path("issueIdOrKey") String issueIdOrKey, @Body Object user)
+
+        @GET("issue/{issueIdOrKey}/comment")
+        Call<Object> getComments(@Path("issueIdOrKey") String issueIdOrKey)
+
+        @POST("issue/{issueIdOrKey}/comment")
+        Call<Object> addComment(@Path("issueIdOrKey") String issueIdOrKey, @Body Object comment)
+
+        @PUT("issue/{issueIdOrKey}/comment/{id}")
+        Call<Object> updateComment(@Path("issueIdOrKey") String issueIdOrKey, @Path("id") String id, @Body Object comment)
+
+        @GET("issue/{issueIdOrKey}/comment/{id}")
+        Call<Object> getComment(@Path("issueIdOrKey") String issueIdOrKey, @Path("id") String id)
+
+        @POST("issue/{issueIdOrKey}/notify")
+        Call<Void> notifyIssue(@Path("issueIdOrKey") String issueIdOrKey, @Body Object notify)
+
+        @GET("issue/{issueIdOrKey}/transitions?expand=transitions.fields")
+        Call<Object> getTransitions(@Path("issueIdOrKey") String issueIdOrKey)
+
+        @POST("issue/{issueIdOrKey}/transitions")
+        Call<Void> transitionIssue(@Path("issueIdOrKey") String issueIdOrKey, @Body Object issue)
+
+        @GET("issue/{issueIdOrKey}/watchers")
+        Call<Object> getIssueWatches(@Path("issueIdOrKey") String issueIdOrKey)
+
+        @POST("issue/{issueIdOrKey}/watchers")
+        Call<Void> addIssueWatcher(@Path("issueIdOrKey") String issueIdOrKey, @Body String user)
+
+        // Remote Issue Links
+        @GET("issue/{issueIdOrKey}/remotelink")
+        Call<Object> getIssueRemoteLinks(@Path("issueIdOrKey") String issueIdOrKey, @Query("globalId") String globalId)
+
+        @GET("issue/{issueIdOrKey}/remotelink/{linkId}")
+        Call<Object> getIssueRemoteLink(@Path("issueIdOrKey") String issueIdOrKey, @Path("linkId") String linkId)
+
+        @POST("issue/{issueIdOrKey}/remotelink")
+        Call<Object> createIssueRemoteLink(@Path("issueIdOrKey") String issueIdOrKey, @Body Object issueLink)
+
+        @POST("issue/{issueIdOrKey}/remotelink/{linkId}")
+        Call<Object> updateIssueRemoteLink(@Path("issueIdOrKey") String issueIdOrKey, @Path("linkId") String linkId, @Body Object issueLink)
+
+        @DELETE("issue/{issueIdOrKey}/remotelink")
+        Call<Object> deleteIssueRemoteLinks(@Path("issueIdOrKey") String issueIdOrKey, @Query("globalId") String globalId)
+
+        @DELETE("issue/{issueIdOrKey}/remotelink/{linkId}")
+        Call<Object> deleteIssueRemoteLink(@Path("issueIdOrKey") String issueIdOrKey, @Path("linkId") String linkId)
+
+        // Issue Links
+        @POST("issueLink")
+        Call<Void> createIssueLink(@Body Object issueLink)
+
+        @GET("issueLink/{linkId}")
+        Call<Object> getIssueLink(@Path("linkId") String linkId)
+
+        @DELETE("issueLink/{linkId}")
+        Call<Object> deleteIssueLink(@Path("linkId") String linkId)
+
+        // Issue Link Types
+        @GET("issueLinkType")
+        Call<Object> getIssueLinkTypes()
+
+        // Project
+        @GET("project?expand=lead,description")
+        Call<List> getProjects()
+
+        @GET("project/{projectIdOrKey}")
+        Call<Object> getProject(@Path("projectIdOrKey") String projectId)
+
+        @GET("project/{projectIdOrKey}/statuses")
+        Call<Object> getProjectStatuses(@Path("projectIdOrKey") String projectId)
+
+        @GET("project/{projectIdOrKey}/components")
+        Call<Object> getProjectComponents(@Path("projectIdOrKey") String projectId)
+
+        @GET("project/{projectIdOrKey}/versions")
+        Call<List<JiraVersion>> getProjectVersions(@Path("projectIdOrKey") String projectId)
+
+        // Search
+        @POST("search")
+        Call<JiraSearchResult> searchIssues(@Body Map<String, Object> search)
+
+        // Version
+        @POST("version")
+        Call<JiraVersion> createVersion(@Body JiraVersion version)
+
+        @GET("version/{id}")
+        Call<JiraVersion> getVersion(@Path("id") String id)
+
+        @PUT("version/{id}")
+        Call<Void> updateVersion(@Path("id") String id, @Body JiraVersion version)
+
+        // Fields
+        @GET("field")
+        Call<Object> getFields()
+
+        @POST("field")
+        Call<Object> createField(@Body Object field)
+
+        // Users
+        @GET("user/search")
+        Call<Object> userSearch(@Query("username") String userName, @Query("startAt") int startAt, @Query("maxResults") int maxResults)
+
+        @GET("user/assignable/search")
+        Call<Object> assignableUserSearch(@Query("username") String userName, @Query("project") String project, @Query("issueKey") String issueKey, @Query("startAt") int startAt, @Query("maxResults") int maxResults)
+
+        @Multipart
+        @retrofit2.http.Headers("X-Atlassian-Token: no-check")
+        @POST("issue/{issueIdOrKey}/attachments")
+        Call<Object> uploadAttachment(@Path("issueIdOrKey") String issueIdOrKey, @Part MultipartBody.Part file)
+
+        @GET("attachment/{attachmentId}")
+        Call<Object> getAttachment(@Path("attachmentId") String attachmentId)
+
+        @DELETE("attachment/{attachmentId}")
+        Call<Object> deleteAttachment(@Path("attachmentId") String attachmentId)
+
+        @Streaming
+        @GET
+        Call<ResponseBody> downloadFileWithDynamicUrl(@Url String fileUrl)
+    }
+}

buildSrc/src/main/groovy/org/apache/fineract/gradle/service/SubversionService.groovy

@@ -0,0 +1,74 @@
+/**
+ * Licensed to the Apache Software Foundation (ASF) under one
+ * or more contributor license agreements. See the NOTICE file
+ * distributed with this work for additional information
+ * regarding copyright ownership. The ASF licenses this file
+ * to you under the Apache License, Version 2.0 (the
+ * "License"); you may not use this file except in compliance
+ * with the License. You may obtain a copy of the License at
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing,
+ * software distributed under the License is distributed on an
+ * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+ * KIND, either express or implied. See the License for the
+ * specific language governing permissions and limitations
+ * under the License.
+ */
+package org.apache.fineract.gradle.service
+
+import org.apache.fineract.gradle.FineractPluginExtension
+import org.gradle.api.GradleException
+import org.slf4j.Logger
+import org.slf4j.LoggerFactory
+import org.tmatesoft.svn.core.SVNCancelException
+import org.tmatesoft.svn.core.SVNDepth
+import org.tmatesoft.svn.core.SVNException
+import org.tmatesoft.svn.core.SVNURL
+import org.tmatesoft.svn.core.wc.*
+
+class SubversionService {
+    private static final Logger log = LoggerFactory.getLogger(SubversionService.class)
+
+    private SVNUpdateClient client;
+    private String revision;
+
+    SubversionService(FineractPluginExtension.FineractPluginConfigSubversion config) {
+        ISVNOptions options = SVNWCUtil.createDefaultOptions(true)
+        SVNClientManager clientManager = SVNClientManager.newInstance(options, SVNWCUtil.createDefaultAuthenticationManager(config.username, config.password))
+
+        this.client = clientManager.updateClient;
+        this.client.ignoreExternals = false
+        this.client.eventHandler = new ISVNEventHandler() {
+            @Override
+            void handleEvent(SVNEvent event, double progress) throws SVNException {
+                println ">>> PROGRESS: ${progress>0?:'-'}"
+            }
+
+            @Override
+            void checkCancelled() throws SVNCancelException {
+
+            }
+        }
+
+        this.revision = config.revision
+    }
+
+    void checkout(FineractPluginExtension.FineractPluginSubversionParams params) {
+        SVNURL svnUrl = SVNURL.parseURIEncoded(params.url)
+
+        SVNRevision svnRevision = this.revision == null ? SVNRevision.HEAD : SVNRevision.parse(this.revision)
+
+        if (svnRevision == SVNRevision.UNDEFINED) {
+            throw new GradleException("Invalid SVN revision: " + this.revision)
+        }
+
+        this.client.doCheckout(svnUrl, new File(params.directory), SVNRevision.HEAD, svnRevision, SVNDepth.INFINITY, false)
+    }
+
+    void commit(FineractPluginExtension.FineractPluginSubversionParams params) {
+        // TODO: implement this
+        SVNURL svnUrl = SVNURL.parseURIEncoded(params.url)
+    }
+}

buildSrc/src/main/groovy/org/apache/fineract/gradle/service/TemplateService.groovy

@@ -0,0 +1,86 @@
+/**
+ * Licensed to the Apache Software Foundation (ASF) under one
+ * or more contributor license agreements. See the NOTICE file
+ * distributed with this work for additional information
+ * regarding copyright ownership. The ASF licenses this file
+ * to you under the Apache License, Version 2.0 (the
+ * "License"); you may not use this file except in compliance
+ * with the License. You may obtain a copy of the License at
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing,
+ * software distributed under the License is distributed on an
+ * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+ * KIND, either express or implied. See the License for the
+ * specific language governing permissions and limitations
+ * under the License.
+ */
+package org.apache.fineract.gradle.service
+
+import freemarker.core.Environment
+import freemarker.template.Configuration
+import freemarker.template.Template
+import freemarker.template.TemplateException
+import freemarker.template.TemplateExceptionHandler
+import org.apache.fineract.gradle.FineractPluginExtension
+import org.slf4j.Logger
+import org.slf4j.LoggerFactory
+
+import java.nio.charset.Charset
+
+class TemplateService {
+    private static final Logger log = LoggerFactory.getLogger(TemplateService.class)
+
+    private Configuration config
+
+    TemplateService(FineractPluginExtension.FineractPluginConfigTemplate config) {
+        def dir = new File(config.templateDir);
+
+        this.config = new Configuration(Configuration.VERSION_2_3_32);
+        this.config.setDirectoryForTemplateLoading(dir)
+        this.config.setDefaultEncoding("UTF-8");
+        this.config.setLogTemplateExceptions(false);
+        this.config.setWrapUncheckedExceptions(true);
+        this.config.setFallbackOnNullLoopVariable(false);
+        this.config.setTemplateExceptionHandler(new TemplateExceptionHandler() {
+            @Override
+            void handleTemplateException(TemplateException te, Environment env, Writer out) throws TemplateException {
+                if (!env.isInAttemptBlock()) {
+                    PrintWriter pw = (out instanceof PrintWriter) ? (PrintWriter) out : new PrintWriter(out);
+                    pw.print("FreeMarker template error\n");
+                    te.printStackTrace(pw, false, true, false);
+                    pw.flush();  // To commit the HTTP response
+                }
+            }}
+        )
+    }
+
+    FineractPluginExtension.FineractPluginTemplateParams render(FineractPluginExtension.FineractPluginTemplateParams params, Object data) {
+        Template template = null;
+
+        if(params.templateFile) {
+            template = new Template("template", new FileReader(new File(params.templateFile), Charset.forName("UTF-8")), this.config)
+        }
+        if(params.template) {
+            template = new Template("template", new StringReader(params.template), this.config)
+        }
+
+        if(template) {
+            if(params.outputFile) {
+                def output = new File(params.outputFile)
+                output.createNewFile()
+
+                template.process(data, new FileWriter(output, Charset.forName("UTF-8"), false))
+            } else {
+                def output = new StringWriter()
+
+                template.process(data, output)
+
+                params.output = output.toString()
+            }
+        }
+
+        return params
+    }
+}

buildSrc/src/main/resources/META-INF/gradle-plugins/org.apache.fineract.gradle.properties

@@ -0,0 +1,20 @@
+#
+# Licensed to the Apache Software Foundation (ASF) under one
+# or more contributor license agreements. See the NOTICE file
+# distributed with this work for additional information
+# regarding copyright ownership. The ASF licenses this file
+# to you under the Apache License, Version 2.0 (the
+# "License"); you may not use this file except in compliance
+# with the License. You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing,
+# software distributed under the License is distributed on an
+# "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+# KIND, either express or implied. See the License for the
+# specific language governing permissions and limitations
+# under the License.
+#
+
+implementation-class=org.apache.fineract.gradle.FineractPlugin

buildSrc/src/main/resources/confluence/release.html.ftl

@@ -0,0 +1,34 @@
+<#--
+
+    Licensed to the Apache Software Foundation (ASF) under one
+    or more contributor license agreements. See the NOTICE file
+    distributed with this work for additional information
+    regarding copyright ownership. The ASF licenses this file
+    to you under the Apache License, Version 2.0 (the
+    "License"); you may not use this file except in compliance
+    with the License. You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+    Unless required by applicable law or agreed to in writing,
+    software distributed under the License is distributed on an
+    "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+    KIND, either express or implied. See the License for the
+    specific language governing permissions and limitations
+    under the License.
+
+-->
+<h1>Release Artifacts</h1>
+<p>
+  <ac:structured-macro ac:macro-id="ac1cb3cb-84d4-45aa-820b-05cc42d39dd9" ac:name="jira" ac:schema-version="1">
+    <ac:parameter ac:name="server">ASF JIRA</ac:parameter>
+    <ac:parameter ac:name="columnIds">issuekey,summary,issuetype,created,updated,duedate,assignee,reporter,customfield_12311032,customfield_12311037,customfield_12311022,customfield_12311027,priority,status,resolution</ac:parameter>
+    <ac:parameter ac:name="columns">key,summary,type,created,updated,due,assignee,reporter,Priority,Priority,Priority,Priority,priority,status,resolution</ac:parameter>
+    <ac:parameter ac:name="maximumIssues">50</ac:parameter>
+    <ac:parameter ac:name="jqlQuery">project = FINERACT AND fixVersion = ${project['fineract.release.version']} AND status not in (Open) </ac:parameter>
+    <ac:parameter ac:name="serverId">5aa69414-a9e9-3523-82ec-879b028fb15b</ac:parameter>
+  </ac:structured-macro>
+</p>
+<p>
+  <br/>
+</p>

buildSrc/src/main/resources/email/release.step01.headsup.message.ftl

@@ -0,0 +1,37 @@
+<#--
+
+    Licensed to the Apache Software Foundation (ASF) under one
+    or more contributor license agreements. See the NOTICE file
+    distributed with this work for additional information
+    regarding copyright ownership. The ASF licenses this file
+    to you under the Apache License, Version 2.0 (the
+    "License"); you may not use this file except in compliance
+    with the License. You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+    Unless required by applicable law or agreed to in writing,
+    software distributed under the License is distributed on an
+    "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+    KIND, either express or implied. See the License for the
+    specific language governing permissions and limitations
+    under the License.
+
+-->
+Hello everyone,
+
+... based on our release process (https://fineract.apache.org/docs/current/#_releases), I will create a release/${project['fineract.release.version']} branch off develop in our git repository at https://github.com/apache/fineract on ${project['fineract.releaseBranch.date']}.
+
+The release tracking umbrella issue for tracking all activity in JIRA is FINERACT-${project['fineract.release.issue']!'0000'} (https://issues.apache.org/jira/browse/FINERACT-${project['fineract.release.issue']!'0000'}).
+
+If you have any work in progress that you would like to see included in this release, please add "blocking" links to the release JIRA issue.
+
+I am the release manager for this release.
+
+Cheers,
+
+${project['fineract.config.name']}
+
+
+
+🎉 Powered by Fineract Release Plugin 🎊

buildSrc/src/main/resources/email/release.step01.headsup.subject.ftl

@@ -0,0 +1,21 @@
+<#--
+
+    Licensed to the Apache Software Foundation (ASF) under one
+    or more contributor license agreements. See the NOTICE file
+    distributed with this work for additional information
+    regarding copyright ownership. The ASF licenses this file
+    to you under the Apache License, Version 2.0 (the
+    "License"); you may not use this file except in compliance
+    with the License. You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+    Unless required by applicable law or agreed to in writing,
+    software distributed under the License is distributed on an
+    "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+    KIND, either express or implied. See the License for the
+    specific language governing permissions and limitations
+    under the License.
+
+-->
+[FINERACT] [PROPOSAL] 📦 New release ${project['fineract.release.version']}

buildSrc/src/main/resources/email/release.step03.branch.message.ftl

@@ -0,0 +1,35 @@
+<#--
+
+    Licensed to the Apache Software Foundation (ASF) under one
+    or more contributor license agreements. See the NOTICE file
+    distributed with this work for additional information
+    regarding copyright ownership. The ASF licenses this file
+    to you under the Apache License, Version 2.0 (the
+    "License"); you may not use this file except in compliance
+    with the License. You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+    Unless required by applicable law or agreed to in writing,
+    software distributed under the License is distributed on an
+    "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+    KIND, either express or implied. See the License for the
+    specific language governing permissions and limitations
+    under the License.
+
+-->
+Hello everyone,
+
+... as previously announced, I've created the branch for our upcoming ${project['fineract.release.version']} release. The branch name is release/${project['fineract.release.version']}.
+
+You can continue working and merging PRs into the develop branch for future releases, as always.
+
+I started the DRAFT release notes at https://cwiki.apache.org/confluence/display/FINERACT/${project['fineract.release.version']}+-+Apache+Fineract . Please help me by filling in "Summary of changes". Does anyone see anything else missing?
+
+Does anyone have any last minute changes for the release branch, or are we good to go and actually cut the release based on this branch as it is?
+
+I'll initiate the final stage of actually creating the release on ${project['fineract.release.date']} if nobody objects.
+
+Cheers,
+
+${project['fineract.config.name']}

buildSrc/src/main/resources/email/release.step03.branch.subject.ftl

@@ -0,0 +1,21 @@
+<#--
+
+    Licensed to the Apache Software Foundation (ASF) under one
+    or more contributor license agreements. See the NOTICE file
+    distributed with this work for additional information
+    regarding copyright ownership. The ASF licenses this file
+    to you under the Apache License, Version 2.0 (the
+    "License"); you may not use this file except in compliance
+    with the License. You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+    Unless required by applicable law or agreed to in writing,
+    software distributed under the License is distributed on an
+    "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+    KIND, either express or implied. See the License for the
+    specific language governing permissions and limitations
+    under the License.
+
+-->
+[FINERACT] [ANNOUNCE] 🔀 ${project['fineract.release.version']} release branch

buildSrc/src/main/resources/git/release.step05.tag.message.ftl

@@ -0,0 +1,21 @@
+<#--
+
+    Licensed to the Apache Software Foundation (ASF) under one
+    or more contributor license agreements. See the NOTICE file
+    distributed with this work for additional information
+    regarding copyright ownership. The ASF licenses this file
+    to you under the Apache License, Version 2.0 (the
+    "License"); you may not use this file except in compliance
+    with the License. You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+    Unless required by applicable law or agreed to in writing,
+    software distributed under the License is distributed on an
+    "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+    KIND, either express or implied. See the License for the
+    specific language governing permissions and limitations
+    under the License.
+
+-->
+Fineract ${project['fineract.release.version']} release

buildSrc/src/main/resources/instructions/step10.txt.ftl

@@ -0,0 +1,29 @@
+<#--
+
+    Licensed to the Apache Software Foundation (ASF) under one
+    or more contributor license agreements. See the NOTICE file
+    distributed with this work for additional information
+    regarding copyright ownership. The ASF licenses this file
+    to you under the Apache License, Version 2.0 (the
+    "License"); you may not use this file except in compliance
+    with the License. You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+    Unless required by applicable law or agreed to in writing,
+    software distributed under the License is distributed on an
+    "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+    KIND, either express or implied. See the License for the
+    specific language governing permissions and limitations
+    under the License.
+
+-->
+
+
+[INSTRUCTIONS:START]
+
+Initiate voting with the ATR (ASF Trusted Releases) tool.
+
+https://release-test.apache.org
+
+[INSTRUCTIONS:END]

buildSrc/src/main/resources/instructions/step11.txt.ftl

@@ -0,0 +1,29 @@
+<#--
+
+    Licensed to the Apache Software Foundation (ASF) under one
+    or more contributor license agreements. See the NOTICE file
+    distributed with this work for additional information
+    regarding copyright ownership. The ASF licenses this file
+    to you under the Apache License, Version 2.0 (the
+    "License"); you may not use this file except in compliance
+    with the License. You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+    Unless required by applicable law or agreed to in writing,
+    software distributed under the License is distributed on an
+    "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+    KIND, either express or implied. See the License for the
+    specific language governing permissions and limitations
+    under the License.
+
+-->
+
+
+[INSTRUCTIONS:START]
+
+Conclude voting with the ATR (ASF Trusted Releases) tool.
+
+https://release-test.apache.org
+
+[INSTRUCTIONS:END]

buildSrc/src/main/resources/instructions/step12.txt.ftl

@@ -0,0 +1,30 @@
+<#--
+
+    Licensed to the Apache Software Foundation (ASF) under one
+    or more contributor license agreements. See the NOTICE file
+    distributed with this work for additional information
+    regarding copyright ownership. The ASF licenses this file
+    to you under the Apache License, Version 2.0 (the
+    "License"); you may not use this file except in compliance
+    with the License. You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+    Unless required by applicable law or agreed to in writing,
+    software distributed under the License is distributed on an
+    "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+    KIND, either express or implied. See the License for the
+    specific language governing permissions and limitations
+    under the License.
+
+-->
+
+
+[INSTRUCTIONS:START]
+
+Move the release candidate from the dev area to the release area using a Subversion server-side copy:
+
+# this is a remote operation
+svn mv -m "Release Fineract 1.14.0 🚢" https://dist.apache.org/repos/dist/dev/fineract/${project['fineract.release.version']} https://dist.apache.org/repos/dist/release/fineract/
+
+[INSTRUCTIONS:END]

buildSrc/src/main/resources/instructions/step13.txt.ftl

@@ -0,0 +1,35 @@
+<#--
+
+    Licensed to the Apache Software Foundation (ASF) under one
+    or more contributor license agreements. See the NOTICE file
+    distributed with this work for additional information
+    regarding copyright ownership. The ASF licenses this file
+    to you under the Apache License, Version 2.0 (the
+    "License"); you may not use this file except in compliance
+    with the License. You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+    Unless required by applicable law or agreed to in writing,
+    software distributed under the License is distributed on an
+    "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+    KIND, either express or implied. See the License for the
+    specific language governing permissions and limitations
+    under the License.
+
+-->
+
+
+[INSTRUCTIONS:START]
+
+As discussed in https://issues.apache.org/jira/browse/FINERACT-1154, now that everything is final, please do the following to remove the release branch (and just keep the tag),
+and make sure that everything on the release tag is merged to develop and that e.g. git describe works:
+
+>> git checkout develop
+>> git merge release/${project['fineract.release.version']}
+>> git push origin develop
+>> git branch -D release/${project['fineract.release.version']}
+>> git push origin :release/${project['fineract.release.version']}
+>> git describe
+
+[INSTRUCTIONS:END]

buildSrc/src/main/resources/instructions/step14.txt.ftl

@@ -0,0 +1,28 @@
+<#--
+
+    Licensed to the Apache Software Foundation (ASF) under one
+    or more contributor license agreements. See the NOTICE file
+    distributed with this work for additional information
+    regarding copyright ownership. The ASF licenses this file
+    to you under the Apache License, Version 2.0 (the
+    "License"); you may not use this file except in compliance
+    with the License. You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+    Unless required by applicable law or agreed to in writing,
+    software distributed under the License is distributed on an
+    "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+    KIND, either express or implied. See the License for the
+    specific language governing permissions and limitations
+    under the License.
+
+-->
+
+
+[INSTRUCTIONS:START]
+
+Finally update the https://fineract.apache.org website with the latest release details.
+The website's HTML source code is available at https://github.com/apache/fineract-site.
+
+[INSTRUCTIONS:END]

buildSrc/src/main/resources/instructions/step15.txt.ftl

@@ -0,0 +1,29 @@
+<#--
+
+    Licensed to the Apache Software Foundation (ASF) under one
+    or more contributor license agreements. See the NOTICE file
+    distributed with this work for additional information
+    regarding copyright ownership. The ASF licenses this file
+    to you under the Apache License, Version 2.0 (the
+    "License"); you may not use this file except in compliance
+    with the License. You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+    Unless required by applicable law or agreed to in writing,
+    software distributed under the License is distributed on an
+    "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+    KIND, either express or implied. See the License for the
+    specific language governing permissions and limitations
+    under the License.
+
+-->
+
+
+[INSTRUCTIONS:START]
+
+Manually draft an email using your Apache ID.
+
+See https://fineract.apache.org/docs/current/#_step_15_announcement_email
+
+[INSTRUCTIONS:END]

buildSrc/src/main/resources/instructions/step2.txt.ftl

@@ -0,0 +1,39 @@
+<#--
+
+    Licensed to the Apache Software Foundation (ASF) under one
+    or more contributor license agreements. See the NOTICE file
+    distributed with this work for additional information
+    regarding copyright ownership. The ASF licenses this file
+    to you under the Apache License, Version 2.0 (the
+    "License"); you may not use this file except in compliance
+    with the License. You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+    Unless required by applicable law or agreed to in writing,
+    software distributed under the License is distributed on an
+    "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+    KIND, either express or implied. See the License for the
+    specific language governing permissions and limitations
+    under the License.
+
+-->
+
+
+[INSTRUCTIONS:START]
+
+Before a release is done, make sure that any issues that are fixed have their fix version setup correctly.
+
+"project = FINERACT and resolution = fixed and fixVersion is empty"
+
+Move all unresolved JIRA issues which have this release as Fix Version to the next release
+
+"project = FINERACT and fixVersion = ${project['fineract.release.version']} and status not in ( Resolved, Done, Accepted, Closed )"
+
+You can also run the following query to make sure that the issues fixed for the to-be-released version look accurate:
+
+"project = FINERACT and fixVersion = ${project['fineract.release.version']}"
+
+Finally, check out the output of the JIRA release note tool to see which tickets are included in the release, in order to do a sanity check.
+
+[INSTRUCTIONS:END]

buildSrc/src/main/resources/instructions/step4.txt.ftl

@@ -0,0 +1,29 @@
+<#--
+
+    Licensed to the Apache Software Foundation (ASF) under one
+    or more contributor license agreements. See the NOTICE file
+    distributed with this work for additional information
+    regarding copyright ownership. The ASF licenses this file
+    to you under the Apache License, Version 2.0 (the
+    "License"); you may not use this file except in compliance
+    with the License. You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+    Unless required by applicable law or agreed to in writing,
+    software distributed under the License is distributed on an
+    "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+    KIND, either express or implied. See the License for the
+    specific language governing permissions and limitations
+    under the License.
+
+-->
+
+
+[INSTRUCTIONS:START]
+
+You first need to close the release in JIRA so that the about to be released version cannot be used as "fixVersion" for new bugs anymore.
+Go to JIRA "Administer project" page and follow "Versions" in left menu. Table with list of all releases should appear, click on additional menu on the right of your release and choose "Release" option.
+Submit release date and you're done.
+
+[INSTRUCTIONS:END]

buildSrc/src/main/resources/instructions/step9.txt.ftl

@@ -0,0 +1,27 @@
+<#--
+
+    Licensed to the Apache Software Foundation (ASF) under one
+    or more contributor license agreements. See the NOTICE file
+    distributed with this work for additional information
+    regarding copyright ownership. The ASF licenses this file
+    to you under the Apache License, Version 2.0 (the
+    "License"); you may not use this file except in compliance
+    with the License. You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+    Unless required by applicable law or agreed to in writing,
+    software distributed under the License is distributed on an
+    "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+    KIND, either express or implied. See the License for the
+    specific language governing permissions and limitations
+    under the License.
+
+-->
+
+
+[INSTRUCTIONS:START]
+
+See https://fineract.apache.org/docs/current/#_step_9_verify_distribution_staging
+
+[INSTRUCTIONS:END]

buildSrc/src/main/resources/jira/changelog.adoc.ftl

@@ -0,0 +1,33 @@
+<#--
+
+    Licensed to the Apache Software Foundation (ASF) under one
+    or more contributor license agreements. See the NOTICE file
+    distributed with this work for additional information
+    regarding copyright ownership. The ASF licenses this file
+    to you under the Apache License, Version 2.0 (the
+    "License"); you may not use this file except in compliance
+    with the License. You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+    Unless required by applicable law or agreed to in writing,
+    software distributed under the License is distributed on an
+    "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+    KIND, either express or implied. See the License for the
+    specific language governing permissions and limitations
+    under the License.
+
+-->
+= Changelog
+
+== Breaking Changes
+
+<#list issues?filter(i -> i.fields.labels?seq_contains("BreakingChange")) as issue>
+* [[${issue.key}]]${issue.key} - ${issue.fields.summary}
+</#list>
+
+== Issues
+
+<#list issues as issue>
+* [[${issue.key}]]${issue.key} - ${issue.fields.summary}
+</#list>

buildSrc/src/main/resources/jira/changelog.txt.ftl

@@ -0,0 +1,26 @@
+<#--
+
+    Licensed to the Apache Software Foundation (ASF) under one
+    or more contributor license agreements. See the NOTICE file
+    distributed with this work for additional information
+    regarding copyright ownership. The ASF licenses this file
+    to you under the Apache License, Version 2.0 (the
+    "License"); you may not use this file except in compliance
+    with the License. You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+    Unless required by applicable law or agreed to in writing,
+    software distributed under the License is distributed on an
+    "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+    KIND, either express or implied. See the License for the
+    specific language governing permissions and limitations
+    under the License.
+
+-->
+Changelog
+=========
+
+<#list issues as issue>
+* ${issue.key} - ${issue.fields.summary}
+</#list>

buildSrc/src/main/resources/vote/result.1.12.1.json

@@ -0,0 +1,48 @@
+{
+  "approve": {
+    "binding": [
+      {
+        "name": "Bharath Gowda",
+        "email": "bgowda@mifos.org"
+      },
+      {
+        "name": "Petri Tuomola",
+        "email": "petri@tuomola.org"
+      },
+      {
+        "name": "Victor Manuel Romero Rodriguez",
+        "email": "victor.romero@fintecheando.mx"
+      },
+      {
+        "name": "Aleksandar Vidakovic",
+        "email": "cheetah@monkeysintown.com"
+      },
+      {
+        "name": "Ádám Sághy",
+        "email": "adamsaghy@gmail.com"
+      }
+    ],
+    "nonBinding": [
+      {
+        "name": "Kigred",
+        "email": "kigred.developer@gmail.com"
+      },
+      {
+        "name": "Adam Monsen",
+        "email": "amonsen@mifos.org"
+      }
+    ]
+  },
+  "disapprove": {
+    "binding": [
+    ],
+    "nonBinding": [
+    ]
+  },
+  "noOpinion": {
+    "binding": [
+    ],
+    "nonBinding": [
+    ]
+  }
+}

buildSrc/src/main/resources/vote/result.1.13.0.json

@@ -0,0 +1,56 @@
+{
+  "approve": {
+    "binding": [
+      {
+        "name": "James Dailey",
+        "email": "jdailey@apache.org"
+      },
+      {
+        "name": "Victor Manuel Romero Rodriguez",
+        "email": "victor.romero@fintecheando.mx"
+      },
+      {
+        "name": "Terence Monteiro",
+        "email": "terence.placker@gmail.com"
+      }
+    ],
+    "nonBinding": [
+      {
+        "name": "Adam Monsen",
+        "email": "amonsen@mifos.org"
+      },
+      {
+        "name": "Bharath Gowda",
+        "email": "bgowda@mifos.org"
+      },
+      {
+        "name": "Aleksandar Vidakovic",
+        "email": "cheetah@monkeysintown.com"
+      },
+      {
+        "name": "Ed Cable",
+        "email": "edcable@mifos.org"
+      },
+      {
+        "name": "Felix van Hove",
+        "email": "fvanhove@gmx.de.invalid"
+      },
+      {
+        "name": "Ahmed adel",
+        "email": "a7med3del1973@gmail.com"
+      }
+    ]
+  },
+  "disapprove": {
+    "binding": [
+    ],
+    "nonBinding": [
+    ]
+  },
+  "noOpinion": {
+    "binding": [
+    ],
+    "nonBinding": [
+    ]
+  }
+}

buildSrc/src/main/resources/vote/result.1.8.0.json

@@ -0,0 +1,96 @@
+{
+  "approve": {
+    "binding": [
+      {
+        "name": "James Daily",
+        "email": "jamespdailey@gmail.com"
+      },
+      {
+        "name": "Arnold Galovics",
+        "email": "arnold@apache.org"
+      },
+      {
+        "name": "Avik Ganguly",
+        "email": "avik@fynarfin.io"
+      },
+      {
+        "name": "Ed Cable",
+        "email": "edcable@mifos.org"
+      },
+      {
+        "name": "Aleksandar Vidakovic",
+        "email": "aleks@apache.org"
+      },
+      {
+        "name": "Terence Monteiro",
+        "email": "terence.placker@gmail.com"
+      },
+      {
+        "name": "Awasum Yannick",
+        "email": "awasum@apache.org"
+      }
+    ],
+    "nonBinding": [
+      {
+        "name": "Victor Manuel Romero Rodriguez",
+        "email": "victor.romero@fintecheando.mx"
+      },
+      {
+        "name": "Bruce Tushabe",
+        "email": "brucetushabe@gmail.com"
+      },
+      {
+        "name": "Kigred",
+        "email": "kigred.developer@gmail.com"
+      },
+      {
+        "name": "Bharath Gowda",
+        "email": "bgowda@mifos.org"
+      },
+      {
+        "name": "Robert Jakech",
+        "email": "robert@fiter.io"
+      },
+      {
+        "name": "Arthur Magezi",
+        "email": "artmagezi@gmail.com"
+      },
+      {
+        "name": "Robert Ippez",
+        "email": "ippezrobert@gmail.com"
+      },
+      {
+        "name": "Sifiso Mtetwa",
+        "email": "sifiso@skyburgsystems.org"
+      },
+      {
+        "name": "Zayad A. Said",
+        "email": "zayyad@intrasofttechnologies.com"
+      },
+      {
+        "name": "Hitech Prajapati",
+        "email": "hitesh.kams.prajapati@gmail.com"
+      },
+      {
+        "name": "Kelvin Ikome",
+        "email": "kelvin@ciniter.com"
+      },
+      {
+        "name": "Nasser Kaze",
+        "email": "kazenasser@gmail.com"
+      }
+    ]
+  },
+  "disapprove": {
+    "binding": [
+    ],
+    "nonBinding": [
+    ]
+  },
+  "noOpinion": {
+    "binding": [
+    ],
+    "nonBinding": [
+    ]
+  }
+}

buildSrc/src/main/resources/vote/result.template.json

@@ -0,0 +1,22 @@
+{
+  "approve": {
+    "binding": [
+      {
+        "name": "Some Body",
+        "email": "bob@apache.org"
+      }
+    ]
+  },
+  "disapprove": {
+    "binding": [
+    ],
+    "nonBinding": [
+    ]
+  },
+  "noOpinion": {
+    "binding": [
+    ],
+    "nonBinding": [
+    ]
+  }
+}

clean_build.bat

@@ -0,0 +1,46 @@
+@echo off
+echo Stopping any running Gradle daemons...
+call gradlew.bat --stop
+echo.
+echo Deleting corrupted build folders...
+if exist fineract-provider\build (
+    echo Deleting fineract-provider\build...
+    rmdir /s /q fineract-provider\build
+)
+if exist fineract-command\build (
+    echo Deleting fineract-command\build...
+    rmdir /s /q fineract-command\build
+)
+if exist fineract-core\build (
+    echo Deleting fineract-core\build...
+    rmdir /s /q fineract-core\build
+)
+if exist fineract-accounting\build (
+    echo Deleting fineract-accounting\build...
+    rmdir /s /q fineract-accounting\build
+)
+if exist fineract-charge\build (
+    echo Deleting fineract-charge\build...
+    rmdir /s /q fineract-charge\build
+)
+if exist fineract-cob\build (
+    echo Deleting fineract-cob\build...
+    rmdir /s /q fineract-cob\build
+)
+if exist fineract-document\build (
+    echo Deleting fineract-document\build...
+    rmdir /s /q fineract-document\build
+)
+if exist fineract-branch\build (
+    echo Deleting fineract-branch\build...
+    rmdir /s /q fineract-branch\build
+)
+if exist fineract-avro-schemas\build (
+    echo Deleting fineract-avro-schemas\build...
+    rmdir /s /q fineract-avro-schemas\build
+)
+echo.
+echo Build folders deleted successfully.
+echo Now you can run: .\gradlew devRun
+echo.
+pause

compile-provider-output.txt

@@ -0,0 +1,116 @@
+> Task :buildSrc:extractPluginRequests UP-TO-DATE
+> Task :buildSrc:generatePluginAdapters UP-TO-DATE
+> Task :buildSrc:compileJava UP-TO-DATE
+> Task :buildSrc:compileGroovy UP-TO-DATE
+> Task :buildSrc:compileGroovyPlugins UP-TO-DATE
+> Task :buildSrc:pluginDescriptors UP-TO-DATE
+> Task :buildSrc:processResources UP-TO-DATE
+> Task :buildSrc:classes UP-TO-DATE
+> Task :buildSrc:jar UP-TO-DATE
+
+> Configure project :
+matching ref: COMMIT - 011239f3995f9ea94a893ed4a60251a3b154564c
+  ref configuration: COMMIT - pattern: null
+    version: ${describe.tag.version.major}.${describe.tag.version.minor.next}.0-SNAPSHOT
+    describeTagPattern: .*(\d+\.\d+\.\d+).*
+    describeTagFirstParent: false
+
+project version: 0.1.0-SNAPSHOT
+
+> Task :fineract-core:processResources UP-TO-DATE
+> Task :fineract-tax:processResources UP-TO-DATE
+> Task :fineract-accounting:processResources UP-TO-DATE
+> Task :spotlessInternalRegisterDependencies UP-TO-DATE
+> Task :fineract-document:processResources NO-SOURCE
+> Task :fineract-avro-schemas:preprocessAvroSchemas UP-TO-DATE
+> Task :fineract-charge:processResources UP-TO-DATE
+> Task :fineract-branch:processResources UP-TO-DATE
+> Task :fineract-cob:processResources UP-TO-DATE
+> Task :fineract-rates:processResources UP-TO-DATE
+> Task :fineract-investor:processResources UP-TO-DATE
+> Task :fineract-mix:processResources NO-SOURCE
+> Task :fineract-loan:processResources UP-TO-DATE
+> Task :fineract-loan-origination:processResources UP-TO-DATE
+> Task :fineract-progressive-loan:processResources UP-TO-DATE
+> Task :fineract-security:processResources NO-SOURCE
+> Task :fineract-report:processResources UP-TO-DATE
+> Task :fineract-savings:processResources UP-TO-DATE
+> Task :fineract-working-capital-loan:processResources UP-TO-DATE
+> Task :fineract-validation:compileJava UP-TO-DATE
+> Task :fineract-command:compileJava UP-TO-DATE
+> Task :fineract-validation:processResources UP-TO-DATE
+> Task :fineract-command:processResources UP-TO-DATE
+> Task :fineract-command:classes UP-TO-DATE
+> Task :fineract-validation:classes UP-TO-DATE
+> Task :fineract-command:jar UP-TO-DATE
+> Task :fineract-validation:jar UP-TO-DATE
+> Task :fineract-avro-schemas:spotlessJson UP-TO-DATE
+> Task :fineract-avro-schemas:spotlessJsonApply UP-TO-DATE
+> Task :fineract-avro-schemas:buildJavaSdk UP-TO-DATE
+> Task :fineract-avro-schemas:compileJava UP-TO-DATE
+> Task :fineract-avro-schemas:processResources UP-TO-DATE
+> Task :fineract-avro-schemas:classes UP-TO-DATE
+> Task :fineract-avro-schemas:jar UP-TO-DATE
+> Task :fineract-working-capital-loan:compileJava UP-TO-DATE
+> Task :fineract-working-capital-loan:classes UP-TO-DATE
+> Task :fineract-working-capital-loan:jar UP-TO-DATE
+> Task :fineract-core:compileJava UP-TO-DATE
+> Task :fineract-core:classes UP-TO-DATE
+> Task :fineract-core:jar UP-TO-DATE
+> Task :fineract-mix:compileJava UP-TO-DATE
+> Task :fineract-mix:classes UP-TO-DATE
+> Task :fineract-mix:jar UP-TO-DATE
+> Task :fineract-cob:compileJava UP-TO-DATE
+> Task :fineract-cob:classes UP-TO-DATE
+> Task :fineract-report:compileJava UP-TO-DATE
+> Task :fineract-tax:compileJava UP-TO-DATE
+> Task :fineract-rates:compileJava UP-TO-DATE
+> Task :fineract-tax:classes UP-TO-DATE
+> Task :fineract-rates:classes UP-TO-DATE
+> Task :fineract-cob:jar UP-TO-DATE
+> Task :fineract-report:classes UP-TO-DATE
+> Task :fineract-tax:jar UP-TO-DATE
+> Task :fineract-rates:jar UP-TO-DATE
+> Task :fineract-report:jar UP-TO-DATE
+> Task :fineract-charge:compileJava UP-TO-DATE
+> Task :fineract-charge:classes UP-TO-DATE
+> Task :fineract-security:compileJava UP-TO-DATE
+> Task :fineract-charge:jar UP-TO-DATE
+> Task :fineract-security:classes UP-TO-DATE
+> Task :fineract-document:compileJava UP-TO-DATE
+> Task :fineract-document:classes UP-TO-DATE
+> Task :fineract-security:jar UP-TO-DATE
+> Task :fineract-document:jar UP-TO-DATE
+> Task :fineract-accounting:compileJava UP-TO-DATE
+> Task :fineract-accounting:classes UP-TO-DATE
+> Task :fineract-accounting:jar UP-TO-DATE
+> Task :fineract-branch:compileJava UP-TO-DATE
+> Task :fineract-branch:classes UP-TO-DATE
+> Task :fineract-branch:jar UP-TO-DATE
+> Task :fineract-savings:compileJava UP-TO-DATE
+> Task :fineract-loan:compileJava UP-TO-DATE
+> Task :fineract-loan:classes UP-TO-DATE
+> Task :fineract-savings:classes UP-TO-DATE
+> Task :fineract-loan:jar UP-TO-DATE
+> Task :fineract-savings:jar UP-TO-DATE
+> Task :fineract-progressive-loan:compileJava UP-TO-DATE
+> Task :fineract-progressive-loan:classes UP-TO-DATE
+> Task :fineract-loan-origination:compileJava UP-TO-DATE
+> Task :fineract-loan-origination:classes UP-TO-DATE
+> Task :fineract-investor:compileJava UP-TO-DATE
+> Task :fineract-investor:classes UP-TO-DATE
+> Task :fineract-loan-origination:jar UP-TO-DATE
+> Task :fineract-investor:jar UP-TO-DATE
+> Task :fineract-progressive-loan:jar UP-TO-DATE
+> Task :fineract-provider:compileJava UP-TO-DATE
+
+[Incubating] Problems report is available at: file:///D:/CompanyProject/GitCBS/JAVA-Backend-CBS-MAIN/build/reports/problems/problems-report.html
+
+Deprecated Gradle features were used in this build, making it incompatible with Gradle 9.0.
+
+You can use '--warning-mode all' to show the individual deprecation warnings and determine if they come from your own scripts or plugins.
+
+For more on this, please refer to https://docs.gradle.org/8.14.3/userguide/command_line_interface.html#sec:command_line_warnings in the Gradle documentation.
+
+BUILD SUCCESSFUL in 23s
+71 actionable tasks: 71 up-to-date

config/checkstyle/checkstyle.xml

@@ -29,8 +29,12 @@
     <!--
         You can learn more about individual checkstyles at: https://checkstyle.sourceforge.io/
         Checks related to LineLength and Indentation are only handled by Spotless
+        Checks included in MissingSwitchDefault are handled by ErrorProne
     -->
 
+    <module name="SuppressionFilter">
+        <property name="file" value="${config_loc}/suppressions.xml"/>
+    </module>
     <module name="FileTabCharacter">
         <property name="eachLine" value="true"/>
     </module>
@@ -46,10 +50,16 @@
 
 
     <module name="TreeWalker">
+    <module name="ParameterName">
+            <property name="format" value="^[a-z][a-z0-9][a-zA-Z0-9]*$|[a-z]"/>
+            <message key="name.invalidPattern"
+             value="Parameter name ''{0}'' must match pattern ''{1}''."/>
+    </module>
     <module name="SeparatorWrap">
             <property name="tokens" value="DOT"/>
             <property name="option" value="nl"/>
     </module>
+    <module name="com.github.sevntu.checkstyle.checks.coding.AvoidHidingCauseExceptionCheck" />
     <module name="SuppressWarningsHolder" />
     <module name="RegexpSinglelineJava">
             <property name="format" value="System\.(out)|(err)\.print(ln)?\("/>
@@ -90,6 +100,14 @@
             <property name="forbiddenImportsRegexp" value="com.google.common.base.Charsets" />
             <property name="forbiddenImportsExcludesRegexp" value="" />
             <message key="forbid.certain.imports" value="Use ''java.nio.charset.StandardCharsets'' instead of ''{0}''" />
+        </module>
+        <!-- Forbid JetBrains annotations in Java sources; prefer Jakarta or Spring annotations -->
+        <module name="com.github.sevntu.checkstyle.checks.coding.ForbidCertainImportsCheck">
+            <property name="packageNameRegexp" value=".*" />
+            <property name="forbiddenImportsRegexp" value="org.jetbrains.annotations(\..*)?" />
+            <property name="forbiddenImportsExcludesRegexp" value="" />
+            <message key="forbid.certain.imports"
+                     value="Use 'jakarta.validation.constraints.NotNull' (API/DTO) or 'org.springframework.lang.NonNull' (services) instead of JetBrains annotations: ''{0}''" />
         </module>
            <module name="OneStatementPerLine"/>
            <module name="EmptyStatement"/>
@@ -115,6 +133,7 @@
             <!-- No PACKAGE_DEF token, as we like our license header to be glue to "package" statement, to save 1 line screen space -->
             <property name="tokens" value="IMPORT, CLASS_DEF, INTERFACE_DEF, ENUM_DEF, STATIC_INIT, INSTANCE_INIT, METHOD_DEF, CTOR_DEF, VARIABLE_DEF"/>
         </module>
+        <module name="MultipleVariableDeclarations"/>
         <module name="PackageName">
             <property name="format" value="^[a-z]+(\.[a-z][a-z0-9_]*)*$"/>
             <message key="name.invalidPattern"
@@ -154,12 +173,19 @@
              <message key="ws.notPreceded"
              value="GenericWhitespace ''{0}'' is not preceded with whitespace."/>
         </module>
+        <module name="HideUtilityClassConstructor"/>
           <module name="OneTopLevelClass"/>
         <module name="MethodName">
             <property name="format" value="^[a-z][a-zA-Z0-9_]*$"/>
             <message key="name.invalidPattern"
              value="Method name ''{0}'' must match pattern ''{1}''."/>
         </module>
+                <module name="ClassTypeParameterName">
+            <property name="format" value="(^[A-Z][0-9]?)$|([A-Z][a-zA-Z0-9]*[T]$)"/>
+            <message key="name.invalidPattern"
+             value="Class type name ''{0}'' must match pattern ''{1}''."/>
+        </module>
+          <module name="MutableException"/>
             <module name="WhitespaceAround">
             <property name="allowEmptyConstructors" value="true"/>
             <property name="allowEmptyMethods" value="true"/>
@@ -170,7 +196,23 @@
              <message key="ws.notPreceded"
              value="WhitespaceAround: ''{0}'' is not preceded with whitespace."/>
         </module>
+        <module name="MemberName">
+            <property name="format" value="^[a-z][a-z0-9][a-zA-Z0-9]*$"/>
+            <message key="name.invalidPattern"
+             value="Member name ''{0}'' must match pattern ''{1}''."/>
+        </module>
+        <module name="RedundantModifier"/>
         <module name="ParenPad" />
+        <module name="ModifierOrder"/>
+                <module name="LocalVariableName">
+            <property name="tokens" value="VARIABLE_DEF"/>
+            <property name="format" value="^[a-z][a-z0-9][a-zA-Z0-9]*$|[a-z]"/>
+            <property name="allowOneCharVarInForLoop" value="true"/>
+            <message key="name.invalidPattern"
+             value="Local variable name ''{0}'' must match pattern ''{1}''."/>
+        </module>
+        <module name="AvoidNoArgumentSuperConstructorCall"/>
+        <module name="AvoidDoubleBraceInitialization"/>
 <!-- TODO Enable many more checks (go about this one by one, step by step, raise separate PRs fixing and then enforcing):
 
         <module name="HiddenField">
@@ -180,13 +222,10 @@
             <property name="setterCanReturnItsClass" value="true" />
         </module>
 
-        <module name="HideUtilityClassConstructor"/>
 
         < ! - - TODO Checks for Exception Handling Anti-Patterns - - >
         <module name="IllegalCatch"/>
 
-        <module name="MutableException"/>
-        <module name="com.github.sevntu.checkstyle.checks.coding.AvoidHidingCauseExceptionCheck" />
 
 
 
@@ -199,36 +238,19 @@
 
 
 
-        <module name="MultipleVariableDeclarations"/>
-
-        <module name="MissingSwitchDefault"/>
 
 
-        <module name="ModifierOrder"/>
-        <module name="RedundantModifier"/>
 
-        <module name="MemberName">
-            <property name="format" value="^[a-z][a-z0-9][a-zA-Z0-9]*$"/>
-            <message key="name.invalidPattern"
-             value="Member name ''{0}'' must match pattern ''{1}''."/>
-        </module>
-        <module name="ParameterName">
-            <property name="format" value="^[a-z][a-z0-9][a-zA-Z0-9]*$"/>
-            <message key="name.invalidPattern"
-             value="Parameter name ''{0}'' must match pattern ''{1}''."/>
-        </module>
-        <module name="LocalVariableName">
-            <property name="tokens" value="VARIABLE_DEF"/>
-            <property name="format" value="^[a-z][a-z0-9][a-zA-Z0-9]*$"/>
-            <property name="allowOneCharVarInForLoop" value="true"/>
-            <message key="name.invalidPattern"
-             value="Local variable name ''{0}'' must match pattern ''{1}''."/>
-        </module>
-        <module name="ClassTypeParameterName">
-            <property name="format" value="(^[A-Z][0-9]?)$|([A-Z][a-zA-Z0-9]*[T]$)"/>
-            <message key="name.invalidPattern"
-             value="Class type name ''{0}'' must match pattern ''{1}''."/>
-        </module>
+
+
+
+
+
+
+
+
+
+
 
         <module name="ConstantName" />
 

config/checkstyle/suppressions.xml

@@ -0,0 +1,36 @@
+<?xml version="1.0"?>
+<!--
+    Licensed to the Apache Software Foundation (ASF) under one
+    or more contributor license agreements. See the NOTICE file
+    distributed with this work for additional information
+    regarding copyright ownership. The ASF licenses this file
+    to you under the Apache License, Version 2.0 (the
+    "License"); you may not use this file except in compliance
+    with the License. You may obtain a copy of the License at
+    http://www.apache.org/licenses/LICENSE-2.0
+    Unless required by applicable law or agreed to in writing,
+    software distributed under the License is distributed on an
+    "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+    KIND, either express or implied. See the License for the
+    specific language governing permissions and limitations
+    under the License.
+-->
+<!DOCTYPE suppressions PUBLIC
+    "-//Checkstyle//DTD SuppressionFilter Configuration 1.2//EN"
+    "https://checkstyle.org/dtds/suppressions_1_2.dtd">
+
+<!--
+    This file contains suppression rules for Checkstyle checks.
+    Ideally only files that cannot be modified (e.g. third-party code)
+    should be added here. All other violations should be fixed.
+-->
+
+<suppressions>
+    <suppress files="[/\\]build[/\\]generated[/\\]" checks=".*"/>
+    <!-- TODO: fix integration test formatting -->
+    <suppress files="[/\\]integration-tests[/\\]src[/\\]test[/\\]main[/\\]" checks=".*"/>
+    <!-- TODO: fix generic type name constraints -->
+    <suppress files="[/\\]fineract-command[/\\]src[/\\]main[/\\]java[/\\]" checks="MethodTypeParameterName"/>
+    <suppress files="[/\\]fineract-command[/\\]src[/\\]main[/\\]java[/\\]" checks="ClassTypeParameterName"/>
+    <suppress files="[/\\]fineract-command[/\\]src[/\\]main[/\\]java[/\\]" checks="HideUtilityClassConstructor"/>
+</suppressions>

config/docker/aws/etc/credentials

@@ -0,0 +1,24 @@
+#
+# Licensed to the Apache Software Foundation (ASF) under one
+# or more contributor license agreements. See the NOTICE file
+# distributed with this work for additional information
+# regarding copyright ownership. The ASF licenses this file
+# to you under the Apache License, Version 2.0 (the
+# "License"); you may not use this file except in compliance
+# with the License. You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing,
+# software distributed under the License is distributed on an
+# "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+# KIND, either express or implied. See the License for the
+# specific language governing permissions and limitations
+# under the License.
+#
+
+[default]
+aws_access_key_id=localstack
+aws_secret_access_key=localstack
+region=us-east-1
+output=json