@infamousendeavors/lunchmoney-mcp 0.3.0

package/dist/auth-provider.js

@@ -0,0 +1,111 @@
+import { GoogleProvider, GitHubProvider, OAuthProvider } from "fastmcp";
+/**
+ * Create an OAuth auth provider for use with FastMCP HTTP transport.
+ * Supports Google, GitHub, CyberArk Identity, and custom OAuth providers.
+ */
+export function createAuthProvider(options) {
+    const { provider, baseUrl, clientId, clientSecret } = options;
+    switch (provider) {
+        case "google":
+            return new GoogleProvider({
+                clientId,
+                clientSecret,
+                baseUrl,
+                scopes: ["openid", "email"],
+                // consentRequired left at the provider default so Google shows its
+                // consent screen on first-time grants. Disabling it (0.2.x did) raised
+                // silent-grant / phishing risk for a server holding financial data.
+                ...(options.tokenStorage && { tokenStorage: options.tokenStorage }),
+                ...(options.encryptionKey !== undefined && { encryptionKey: options.encryptionKey }),
+            });
+        case "github":
+            return new GitHubProvider({
+                clientId,
+                clientSecret,
+                baseUrl,
+                scopes: ["read:user", "user:email"],
+                ...(options.tokenStorage && { tokenStorage: options.tokenStorage }),
+                ...(options.encryptionKey !== undefined && { encryptionKey: options.encryptionKey }),
+            });
+        case "cyberark": {
+            const tenantUrl = options.cyberarkTenantUrl;
+            if (!tenantUrl) {
+                throw new Error("cyberarkTenantUrl is required for CyberArk Identity OAuth");
+            }
+            return new OAuthProvider({
+                clientId,
+                clientSecret,
+                baseUrl,
+                authorizationEndpoint: `${tenantUrl}/oauth2/authorize`,
+                tokenEndpoint: `${tenantUrl}/oauth2/token`,
+                scopes: ["openid", "email", "profile"],
+                ...(options.tokenStorage && { tokenStorage: options.tokenStorage }),
+                ...(options.encryptionKey !== undefined && { encryptionKey: options.encryptionKey }),
+            });
+        }
+        case "custom": {
+            if (!options.authorizationEndpoint || !options.tokenEndpoint) {
+                throw new Error("authorizationEndpoint and tokenEndpoint are required for custom OAuth");
+            }
+            return new OAuthProvider({
+                clientId,
+                clientSecret,
+                baseUrl,
+                authorizationEndpoint: options.authorizationEndpoint,
+                tokenEndpoint: options.tokenEndpoint,
+                scopes: options.scopes || ["openid", "email"],
+                ...(options.tokenStorage && { tokenStorage: options.tokenStorage }),
+                ...(options.encryptionKey !== undefined && { encryptionKey: options.encryptionKey }),
+            });
+        }
+        default:
+            throw new Error(`Unknown auth provider: ${provider}. Supported: google, github, cyberark, custom`);
+    }
+}
+/**
+ * Read OAuth credentials from environment variables for the given provider.
+ * Throws if required env vars are missing.
+ */
+export function getAuthCredentialsFromEnv(provider) {
+    switch (provider) {
+        case "google": {
+            const clientId = process.env.GOOGLE_CLIENT_ID;
+            const clientSecret = process.env.GOOGLE_CLIENT_SECRET;
+            if (!clientId || !clientSecret) {
+                throw new Error("GOOGLE_CLIENT_ID and GOOGLE_CLIENT_SECRET environment variables are required for Google OAuth");
+            }
+            return { clientId, clientSecret };
+        }
+        case "github": {
+            const clientId = process.env.GITHUB_CLIENT_ID;
+            const clientSecret = process.env.GITHUB_CLIENT_SECRET;
+            if (!clientId || !clientSecret) {
+                throw new Error("GITHUB_CLIENT_ID and GITHUB_CLIENT_SECRET environment variables are required for GitHub OAuth");
+            }
+            return { clientId, clientSecret };
+        }
+        case "cyberark": {
+            const tenantUrl = process.env.CYBERARK_TENANT_URL;
+            const clientId = process.env.CYBERARK_CLIENT_ID || process.env.OAUTH_CLIENT_ID;
+            const clientSecret = process.env.CYBERARK_CLIENT_SECRET || process.env.OAUTH_CLIENT_SECRET;
+            if (!tenantUrl || !clientId || !clientSecret) {
+                throw new Error("CYBERARK_TENANT_URL, CYBERARK_CLIENT_ID (or OAUTH_CLIENT_ID), and CYBERARK_CLIENT_SECRET (or OAUTH_CLIENT_SECRET) are required for CyberArk Identity OAuth");
+            }
+            return { clientId, clientSecret, cyberarkTenantUrl: tenantUrl };
+        }
+        case "custom": {
+            const authorizationEndpoint = process.env.OAUTH_AUTH_URL;
+            const tokenEndpoint = process.env.OAUTH_TOKEN_URL;
+            const clientId = process.env.OAUTH_CLIENT_ID;
+            const clientSecret = process.env.OAUTH_CLIENT_SECRET;
+            const scopes = process.env.OAUTH_SCOPES?.split(",") || undefined;
+            if (!authorizationEndpoint || !tokenEndpoint || !clientId || !clientSecret) {
+                throw new Error("OAUTH_AUTH_URL, OAUTH_TOKEN_URL, OAUTH_CLIENT_ID, and OAUTH_CLIENT_SECRET are required for custom OAuth");
+            }
+            return { clientId, clientSecret, authorizationEndpoint, tokenEndpoint, scopes };
+        }
+        default:
+            throw new Error(`Unknown auth provider: ${provider}. Supported: google, github, cyberark, custom`);
+    }
+}
+//# sourceMappingURL=auth-provider.js.map

package/dist/auth-provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-provider.js","sourceRoot":"","sources":["../src/auth-provider.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAwBxE;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAA4B;IAC7D,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,GAAG,OAAO,CAAC;IAE9D,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,QAAQ;YACX,OAAO,IAAI,cAAc,CAAC;gBACxB,QAAQ;gBACR,YAAY;gBACZ,OAAO;gBACP,MAAM,EAAE,CAAC,QAAQ,EAAE,OAAO,CAAC;gBAC3B,mEAAmE;gBACnE,uEAAuE;gBACvE,oEAAoE;gBACpE,GAAG,CAAC,OAAO,CAAC,YAAY,IAAI,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC;gBACnE,GAAG,CAAC,OAAO,CAAC,aAAa,KAAK,SAAS,IAAI,EAAE,aAAa,EAAE,OAAO,CAAC,aAAa,EAAE,CAAC;aACrF,CAAC,CAAC;QAEL,KAAK,QAAQ;YACX,OAAO,IAAI,cAAc,CAAC;gBACxB,QAAQ;gBACR,YAAY;gBACZ,OAAO;gBACP,MAAM,EAAE,CAAC,WAAW,EAAE,YAAY,CAAC;gBACnC,GAAG,CAAC,OAAO,CAAC,YAAY,IAAI,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC;gBACnE,GAAG,CAAC,OAAO,CAAC,aAAa,KAAK,SAAS,IAAI,EAAE,aAAa,EAAE,OAAO,CAAC,aAAa,EAAE,CAAC;aACrF,CAAC,CAAC;QAEL,KAAK,UAAU,CAAC,CAAC,CAAC;YAChB,MAAM,SAAS,GAAG,OAAO,CAAC,iBAAiB,CAAC;YAC5C,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,MAAM,IAAI,KAAK,CACb,2DAA2D,CAC5D,CAAC;YACJ,CAAC;YACD,OAAO,IAAI,aAAa,CAAC;gBACvB,QAAQ;gBACR,YAAY;gBACZ,OAAO;gBACP,qBAAqB,EAAE,GAAG,SAAS,mBAAmB;gBACtD,aAAa,EAAE,GAAG,SAAS,eAAe;gBAC1C,MAAM,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,SAAS,CAAC;gBACtC,GAAG,CAAC,OAAO,CAAC,YAAY,IAAI,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC;gBACnE,GAAG,CAAC,OAAO,CAAC,aAAa,KAAK,SAAS,IAAI,EAAE,aAAa,EAAE,OAAO,CAAC,aAAa,EAAE,CAAC;aACrF,CAAC,CAAC;QACL,CAAC;QAED,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,IAAI,CAAC,OAAO,CAAC,qBAAqB,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC;gBAC7D,MAAM,IAAI,KAAK,CACb,uEAAuE,CACxE,CAAC;YACJ,CAAC;YACD,OAAO,IAAI,aAAa,CAAC;gBACvB,QAAQ;gBACR,YAAY;gBACZ,OAAO;gBACP,qBAAqB,EAAE,OAAO,CAAC,qBAAqB;gBACpD,aAAa,EAAE,OAAO,CAAC,aAAa;gBACpC,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC;gBAC7C,GAAG,CAAC,OAAO,CAAC,YAAY,IAAI,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC;gBACnE,GAAG,CAAC,OAAO,CAAC,aAAa,KAAK,SAAS,IAAI,EAAE,aAAa,EAAE,OAAO,CAAC,aAAa,EAAE,CAAC;aACrF,CAAC,CAAC;QACL,CAAC;QAED;YACE,MAAM,IAAI,KAAK,CACb,0BAA0B,QAAkB,+CAA+C,CAC5F,CAAC;IACN,CAAC;AACH,CAAC;AAkBD;;;GAGG;AACH,MAAM,UAAU,yBAAyB,CAAC,QAA0B;IAClE,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;YAC9C,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC;YACtD,IAAI,CAAC,QAAQ,IAAI,CAAC,YAAY,EAAE,CAAC;gBAC/B,MAAM,IAAI,KAAK,CACb,+FAA+F,CAChG,CAAC;YACJ,CAAC;YACD,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC;QACpC,CAAC;QAED,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;YAC9C,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC;YACtD,IAAI,CAAC,QAAQ,IAAI,CAAC,YAAY,EAAE,CAAC;gBAC/B,MAAM,IAAI,KAAK,CACb,+FAA+F,CAChG,CAAC;YACJ,CAAC;YACD,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC;QACpC,CAAC;QAED,KAAK,UAAU,CAAC,CAAC,CAAC;YAChB,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;YAClD,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC;YAC/E,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,IAAI,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;YAC3F,IAAI,CAAC,SAAS,IAAI,CAAC,QAAQ,IAAI,CAAC,YAAY,EAAE,CAAC;gBAC7C,MAAM,IAAI,KAAK,CACb,4JAA4J,CAC7J,CAAC;YACJ,CAAC;YACD,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,iBAAiB,EAAE,SAAS,EAAE,CAAC;QAClE,CAAC;QAED,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,MAAM,qBAAqB,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;YACzD,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC;YAClD,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC;YAC7C,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;YACrD,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,KAAK,CAAC,GAAG,CAAC,IAAI,SAAS,CAAC;YACjE,IAAI,CAAC,qBAAqB,IAAI,CAAC,aAAa,IAAI,CAAC,QAAQ,IAAI,CAAC,YAAY,EAAE,CAAC;gBAC3E,MAAM,IAAI,KAAK,CACb,yGAAyG,CAC1G,CAAC;YACJ,CAAC;YACD,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,qBAAqB,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC;QAClF,CAAC;QAED;YACE,MAAM,IAAI,KAAK,CACb,0BAA0B,QAAkB,+CAA+C,CAC5F,CAAC;IACN,CAAC;AACH,CAAC"}

package/dist/cli.d.ts

@@ -0,0 +1,13 @@
+#!/usr/bin/env node
+import { type AuthProviderType } from "./auth-provider.js";
+export interface CLIOptions {
+    mode: "stdio" | "http" | "setup" | "version";
+    port: number;
+}
+export declare function parseArgs(argv: string[]): CLIOptions;
+/**
+ * Resolve the auth provider type from the AUTH_PROVIDER env var.
+ * Defaults to 'google' if not set. Throws if invalid.
+ */
+export declare function resolveAuthProvider(): AuthProviderType;
+//# sourceMappingURL=cli.d.ts.map

package/dist/cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AAIA,OAAO,EAGL,KAAK,gBAAgB,EACtB,MAAM,oBAAoB,CAAC;AAK5B,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,OAAO,GAAG,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC;IAC7C,IAAI,EAAE,MAAM,CAAC;CACd;AAED,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,UAAU,CAsCpD;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,IAAI,gBAAgB,CAStD"}

package/dist/cli.js

@@ -0,0 +1,103 @@
+#!/usr/bin/env node
+import { createServer, startServer } from "./server.js";
+import { runSetupWizard } from "./setup.js";
+import { createAuthProvider, getAuthCredentialsFromEnv, } from "./auth-provider.js";
+import { CredentialStore } from "./credential-store.js";
+import { createSessionStore } from "./session-store.js";
+import { createRequire } from "module";
+export function parseArgs(argv) {
+    const args = argv.slice(2); // skip node and script path
+    // Check for --version
+    if (args.includes("--version") || args.includes("-v")) {
+        return { mode: "version", port: 8080 };
+    }
+    // Check for setup command
+    if (args.includes("setup")) {
+        return { mode: "setup", port: 8080 };
+    }
+    // Check for --http flag
+    const isHttp = args.includes("--http");
+    // Check for --port flag
+    let port = 8080;
+    const portIndex = args.indexOf("--port");
+    if (portIndex !== -1 && portIndex + 1 < args.length) {
+        const parsedPort = parseInt(args[portIndex + 1], 10);
+        if (!isNaN(parsedPort) && parsedPort > 0 && parsedPort <= 65535) {
+            port = parsedPort;
+        }
+    }
+    // Also check PORT env var if --port not specified on CLI
+    if (portIndex === -1 && process.env.PORT) {
+        const envPort = parseInt(process.env.PORT, 10);
+        if (!isNaN(envPort) && envPort > 0 && envPort <= 65535) {
+            port = envPort;
+        }
+    }
+    return {
+        mode: isHttp ? "http" : "stdio",
+        port,
+    };
+}
+/**
+ * Resolve the auth provider type from the AUTH_PROVIDER env var.
+ * Defaults to 'google' if not set. Throws if invalid.
+ */
+export function resolveAuthProvider() {
+    const providerEnv = process.env.AUTH_PROVIDER || "google";
+    const valid = ["google", "github", "cyberark", "custom"];
+    if (!valid.includes(providerEnv)) {
+        throw new Error(`Invalid AUTH_PROVIDER="${providerEnv}". Supported: ${valid.join(", ")}`);
+    }
+    return providerEnv;
+}
+async function main() {
+    const options = parseArgs(process.argv);
+    switch (options.mode) {
+        case "version": {
+            const require = createRequire(import.meta.url);
+            const pkg = require("../package.json");
+            console.log(`lunchmoney-mcp v${pkg.version}`);
+            break;
+        }
+        case "setup": {
+            await runSetupWizard();
+            break;
+        }
+        case "http": {
+            // HTTP mode requires OAuth
+            const providerType = resolveAuthProvider();
+            const envConfig = getAuthCredentialsFromEnv(providerType);
+            const baseUrl = process.env.BASE_URL || `http://localhost:${options.port}`;
+            // Create encrypted session store for persisting OAuth tokens across restarts
+            const credentialStore = new CredentialStore();
+            const tokenStorage = await createSessionStore(credentialStore);
+            const auth = createAuthProvider({
+                provider: providerType,
+                baseUrl,
+                clientId: envConfig.clientId,
+                clientSecret: envConfig.clientSecret,
+                cyberarkTenantUrl: envConfig.cyberarkTenantUrl,
+                authorizationEndpoint: envConfig.authorizationEndpoint,
+                tokenEndpoint: envConfig.tokenEndpoint,
+                scopes: envConfig.scopes,
+                tokenStorage,
+                // Disable FastMCP's built-in encryption since EncryptedTokenStorage already handles it
+                encryptionKey: false,
+            });
+            const server = await createServer({ auth, health: true });
+            await startServer(server, "httpStream", options.port, providerType);
+            break;
+        }
+        case "stdio":
+        default: {
+            const server = await createServer();
+            await startServer(server, "stdio");
+            break;
+        }
+    }
+}
+main().catch((error) => {
+    console.error("Fatal error:", error.message || error);
+    process.exit(1);
+});
+//# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AAEA,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACxD,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAC5C,OAAO,EACL,kBAAkB,EAClB,yBAAyB,GAE1B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,EAAE,aAAa,EAAE,MAAM,QAAQ,CAAC;AAOvC,MAAM,UAAU,SAAS,CAAC,IAAc;IACtC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,4BAA4B;IAExD,sBAAsB;IACtB,IAAI,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACtD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACzC,CAAC;IAED,0BAA0B;IAC1B,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3B,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACvC,CAAC;IAED,wBAAwB;IACxB,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAEvC,wBAAwB;IACxB,IAAI,IAAI,GAAG,IAAI,CAAC;IAChB,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACzC,IAAI,SAAS,KAAK,CAAC,CAAC,IAAI,SAAS,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QACpD,MAAM,UAAU,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACrD,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,UAAU,GAAG,CAAC,IAAI,UAAU,IAAI,KAAK,EAAE,CAAC;YAChE,IAAI,GAAG,UAAU,CAAC;QACpB,CAAC;IACH,CAAC;IAED,yDAAyD;IACzD,IAAI,SAAS,KAAK,CAAC,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QACzC,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAC/C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,OAAO,GAAG,CAAC,IAAI,OAAO,IAAI,KAAK,EAAE,CAAC;YACvD,IAAI,GAAG,OAAO,CAAC;QACjB,CAAC;IACH,CAAC;IAED,OAAO;QACL,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO;QAC/B,IAAI;KACL,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB;IACjC,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,QAAQ,CAAC;IAC1D,MAAM,KAAK,GAAuB,CAAC,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC;IAC7E,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,WAA+B,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,KAAK,CACb,0BAA0B,WAAW,iBAAiB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACzE,CAAC;IACJ,CAAC;IACD,OAAO,WAA+B,CAAC;AACzC,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,MAAM,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAExC,QAAQ,OAAO,CAAC,IAAI,EAAE,CAAC;QACrB,KAAK,SAAS,CAAC,CAAC,CAAC;YACf,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC/C,MAAM,GAAG,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;YACvC,OAAO,CAAC,GAAG,CAAC,mBAAmB,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;YAC9C,MAAM;QACR,CAAC;QAED,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,MAAM,cAAc,EAAE,CAAC;YACvB,MAAM;QACR,CAAC;QAED,KAAK,MAAM,CAAC,CAAC,CAAC;YACZ,2BAA2B;YAC3B,MAAM,YAAY,GAAG,mBAAmB,EAAE,CAAC;YAC3C,MAAM,SAAS,GAAG,yBAAyB,CAAC,YAAY,CAAC,CAAC;YAC1D,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,oBAAoB,OAAO,CAAC,IAAI,EAAE,CAAC;YAE3E,6EAA6E;YAC7E,MAAM,eAAe,GAAG,IAAI,eAAe,EAAE,CAAC;YAC9C,MAAM,YAAY,GAAG,MAAM,kBAAkB,CAAC,eAAe,CAAC,CAAC;YAE/D,MAAM,IAAI,GAAG,kBAAkB,CAAC;gBAC9B,QAAQ,EAAE,YAAY;gBACtB,OAAO;gBACP,QAAQ,EAAE,SAAS,CAAC,QAAQ;gBAC5B,YAAY,EAAE,SAAS,CAAC,YAAY;gBACpC,iBAAiB,EAAE,SAAS,CAAC,iBAAiB;gBAC9C,qBAAqB,EAAE,SAAS,CAAC,qBAAqB;gBACtD,aAAa,EAAE,SAAS,CAAC,aAAa;gBACtC,MAAM,EAAE,SAAS,CAAC,MAAM;gBACxB,YAAY;gBACZ,uFAAuF;gBACvF,aAAa,EAAE,KAAK;aACrB,CAAC,CAAC;YAEH,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;YAC1D,MAAM,WAAW,CAAC,MAAM,EAAE,YAAY,EAAE,OAAO,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;YACpE,MAAM;QACR,CAAC;QAED,KAAK,OAAO,CAAC;QACb,OAAO,CAAC,CAAC,CAAC;YACR,MAAM,MAAM,GAAG,MAAM,YAAY,EAAE,CAAC;YACpC,MAAM,WAAW,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YACnC,MAAM;QACR,CAAC;IACH,CAAC;AACH,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;IACrB,OAAO,CAAC,KAAK,CAAC,cAAc,EAAE,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,CAAC;IACtD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/credential-store.d.ts

@@ -0,0 +1,25 @@
+export declare class CredentialStore {
+    getApiToken(): Promise<string | null>;
+    setApiToken(token: string): Promise<void>;
+    deleteApiToken(): Promise<void>;
+    /**
+     * Resolve the AES-256-GCM encryption key for the session store.
+     *
+     * Resolution order:
+     *  1. OS keychain (generated and persisted on first use).
+     *  2. `ENCRYPTION_KEY` env var, validated as exactly 64 lowercase hex
+     *     characters (32 bytes). An invalid value is a hard error.
+     *  3. Ephemeral random key — only allowed when `requirePersistent` is
+     *     false (stdio mode, which has no persisted sessions). In HTTP/OAuth
+     *     mode we refuse to start rather than silently invalidate every
+     *     stored session on the next restart.
+     *
+     * @param requirePersistent - true in HTTP/OAuth mode, where an ephemeral
+     *   key would silently drop all persisted sessions on restart.
+     */
+    getEncryptionKey({ requirePersistent }?: {
+        requirePersistent?: boolean | undefined;
+    }): Promise<string>;
+    clear(): Promise<void>;
+}
+//# sourceMappingURL=credential-store.d.ts.map

package/dist/credential-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"credential-store.d.ts","sourceRoot":"","sources":["../src/credential-store.ts"],"names":[],"mappings":"AAIA,qBAAa,eAAe;IACpB,WAAW,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAYrC,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAQzC,cAAc,IAAI,OAAO,CAAC,IAAI,CAAC;IAQrC;;;;;;;;;;;;;;OAcG;IACG,gBAAgB,CAAC,EAAE,iBAAyB,EAAE;;KAAK,GAAG,OAAO,CAAC,MAAM,CAAC;IA2CrE,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;CAQ7B"}

package/dist/credential-store.js

@@ -0,0 +1,90 @@
+import keytar from 'keytar';
+const SERVICE_NAME = 'lunchmoney-mcp';
+export class CredentialStore {
+    async getApiToken() {
+        // Try keychain first
+        try {
+            const token = await keytar.getPassword(SERVICE_NAME, 'api-token');
+            if (token)
+                return token;
+        }
+        catch {
+            // Keychain unavailable (Docker, CI, etc.)
+        }
+        // Fall back to ENV var
+        return process.env.LUNCH_MONEY_API_TOKEN || null;
+    }
+    async setApiToken(token) {
+        try {
+            await keytar.setPassword(SERVICE_NAME, 'api-token', token);
+        }
+        catch (error) {
+            throw new Error('Failed to store token in keychain. Use LUNCH_MONEY_API_TOKEN env var instead.');
+        }
+    }
+    async deleteApiToken() {
+        try {
+            await keytar.deletePassword(SERVICE_NAME, 'api-token');
+        }
+        catch {
+            // Ignore if keychain unavailable
+        }
+    }
+    /**
+     * Resolve the AES-256-GCM encryption key for the session store.
+     *
+     * Resolution order:
+     *  1. OS keychain (generated and persisted on first use).
+     *  2. `ENCRYPTION_KEY` env var, validated as exactly 64 lowercase hex
+     *     characters (32 bytes). An invalid value is a hard error.
+     *  3. Ephemeral random key — only allowed when `requirePersistent` is
+     *     false (stdio mode, which has no persisted sessions). In HTTP/OAuth
+     *     mode we refuse to start rather than silently invalidate every
+     *     stored session on the next restart.
+     *
+     * @param requirePersistent - true in HTTP/OAuth mode, where an ephemeral
+     *   key would silently drop all persisted sessions on restart.
+     */
+    async getEncryptionKey({ requirePersistent = false } = {}) {
+        try {
+            let key = await keytar.getPassword(SERVICE_NAME, 'encryption-key');
+            if (!key) {
+                // Generate and store a new key
+                const crypto = await import('crypto');
+                key = crypto.randomBytes(32).toString('hex');
+                await keytar.setPassword(SERVICE_NAME, 'encryption-key', key);
+            }
+            return key;
+        }
+        catch (error) {
+            // Keychain unavailable (Docker, CI, headless). Surface it instead of
+            // swallowing — a silent fall-through here is how sessions vanish.
+            console.error(`[lunchmoney-mcp] OS keychain unavailable for the encryption key (${error.message}). Falling back to the ENCRYPTION_KEY env var.`);
+        }
+        const envKey = process.env.ENCRYPTION_KEY;
+        if (envKey !== undefined) {
+            if (!/^[0-9a-f]{64}$/.test(envKey)) {
+                throw new Error('ENCRYPTION_KEY must be exactly 64 lowercase hex characters (32 bytes). Generate one with: openssl rand -hex 32');
+            }
+            return envKey;
+        }
+        if (requirePersistent) {
+            throw new Error('No encryption key available: the OS keychain is unavailable and ENCRYPTION_KEY is not set. ' +
+                'Refusing to start in HTTP/OAuth mode because an ephemeral key would silently invalidate every ' +
+                'stored session on restart. Set ENCRYPTION_KEY (openssl rand -hex 32).');
+        }
+        // stdio mode: no persisted sessions, so an ephemeral key is acceptable.
+        const crypto = await import('crypto');
+        return crypto.randomBytes(32).toString('hex');
+    }
+    async clear() {
+        try {
+            await keytar.deletePassword(SERVICE_NAME, 'api-token');
+            await keytar.deletePassword(SERVICE_NAME, 'encryption-key');
+        }
+        catch {
+            // Ignore
+        }
+    }
+}
+//# sourceMappingURL=credential-store.js.map

package/dist/credential-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credential-store.js","sourceRoot":"","sources":["../src/credential-store.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,QAAQ,CAAC;AAE5B,MAAM,YAAY,GAAG,gBAAgB,CAAC;AAEtC,MAAM,OAAO,eAAe;IAC1B,KAAK,CAAC,WAAW;QACf,qBAAqB;QACrB,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC;YAClE,IAAI,KAAK;gBAAE,OAAO,KAAK,CAAC;QAC1B,CAAC;QAAC,MAAM,CAAC;YACP,0CAA0C;QAC5C,CAAC;QACD,uBAAuB;QACvB,OAAO,OAAO,CAAC,GAAG,CAAC,qBAAqB,IAAI,IAAI,CAAC;IACnD,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,KAAa;QAC7B,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,WAAW,CAAC,YAAY,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC;QAC7D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,+EAA+E,CAAC,CAAC;QACnG,CAAC;IACH,CAAC;IAED,KAAK,CAAC,cAAc;QAClB,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,cAAc,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC;QACzD,CAAC;QAAC,MAAM,CAAC;YACP,iCAAiC;QACnC,CAAC;IACH,CAAC;IAED;;;;;;;;;;;;;;OAcG;IACH,KAAK,CAAC,gBAAgB,CAAC,EAAE,iBAAiB,GAAG,KAAK,EAAE,GAAG,EAAE;QACvD,IAAI,CAAC;YACH,IAAI,GAAG,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,YAAY,EAAE,gBAAgB,CAAC,CAAC;YACnE,IAAI,CAAC,GAAG,EAAE,CAAC;gBACT,+BAA+B;gBAC/B,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;gBACtC,GAAG,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;gBAC7C,MAAM,MAAM,CAAC,WAAW,CAAC,YAAY,EAAE,gBAAgB,EAAE,GAAG,CAAC,CAAC;YAChE,CAAC;YACD,OAAO,GAAG,CAAC;QACb,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,qEAAqE;YACrE,kEAAkE;YAClE,OAAO,CAAC,KAAK,CACX,oEACG,KAAe,CAAC,OACnB,gDAAgD,CACjD,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;QAC1C,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;gBACnC,MAAM,IAAI,KAAK,CACb,gHAAgH,CACjH,CAAC;YACJ,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,IAAI,iBAAiB,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CACb,6FAA6F;gBAC3F,gGAAgG;gBAChG,uEAAuE,CAC1E,CAAC;QACJ,CAAC;QAED,wEAAwE;QACxE,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;QACtC,OAAO,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAChD,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,cAAc,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC;YACvD,MAAM,MAAM,CAAC,cAAc,CAAC,YAAY,EAAE,gBAAgB,CAAC,CAAC;QAC9D,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;IACH,CAAC;CACF"}

package/dist/index.d.ts

@@ -0,0 +1,11 @@
+export { createServer, startServer } from "./server.js";
+export type { CreateServerOptions, AuthProviderInstance } from "./server.js";
+export { CredentialStore } from "./credential-store.js";
+export { LunchMoneyClient } from "./api/client.js";
+export { runSetupWizard } from "./setup.js";
+export { createAuthProvider, getAuthCredentialsFromEnv } from "./auth-provider.js";
+export type { AuthProviderType, AuthProviderOptions } from "./auth-provider.js";
+export { createSessionStore, getDataDirectory } from "./session-store.js";
+export type { CreateSessionStoreOptions } from "./session-store.js";
+export * from "./types/index.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACxD,YAAY,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAC7E,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAC5C,OAAO,EAAE,kBAAkB,EAAE,yBAAyB,EAAE,MAAM,oBAAoB,CAAC;AACnF,YAAY,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAChF,OAAO,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAC1E,YAAY,EAAE,yBAAyB,EAAE,MAAM,oBAAoB,CAAC;AACpE,cAAc,kBAAkB,CAAC"}

package/dist/index.js

@@ -0,0 +1,8 @@
+export { createServer, startServer } from "./server.js";
+export { CredentialStore } from "./credential-store.js";
+export { LunchMoneyClient } from "./api/client.js";
+export { runSetupWizard } from "./setup.js";
+export { createAuthProvider, getAuthCredentialsFromEnv } from "./auth-provider.js";
+export { createSessionStore, getDataDirectory } from "./session-store.js";
+export * from "./types/index.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAExD,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAC5C,OAAO,EAAE,kBAAkB,EAAE,yBAAyB,EAAE,MAAM,oBAAoB,CAAC;AAEnF,OAAO,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAE1E,cAAc,kBAAkB,CAAC"}

package/dist/schemas/index.d.ts

@@ -0,0 +1,189 @@
+import { z } from "zod";
+export declare const transactionFilterSchema: z.ZodObject<{
+    start_date: z.ZodOptional<z.ZodString>;
+    end_date: z.ZodOptional<z.ZodString>;
+    category_id: z.ZodOptional<z.ZodNumber>;
+    tag_id: z.ZodOptional<z.ZodNumber>;
+    account_id: z.ZodOptional<z.ZodNumber>;
+    debit_as_negative: z.ZodOptional<z.ZodBoolean>;
+    pending: z.ZodOptional<z.ZodBoolean>;
+    status: z.ZodOptional<z.ZodEnum<{
+        cleared: "cleared";
+        uncleared: "uncleared";
+        recurring: "recurring";
+        recurring_suggested: "recurring_suggested";
+    }>>;
+    offset: z.ZodOptional<z.ZodNumber>;
+    limit: z.ZodOptional<z.ZodNumber>;
+}, z.core.$strip>;
+export declare const createCategorySchema: z.ZodObject<{
+    name: z.ZodString;
+    description: z.ZodOptional<z.ZodString>;
+    is_income: z.ZodOptional<z.ZodBoolean>;
+    exclude_budget: z.ZodOptional<z.ZodBoolean>;
+    exclude_from_totals: z.ZodOptional<z.ZodBoolean>;
+    category_group_id: z.ZodOptional<z.ZodNumber>;
+    parent_category_id: z.ZodOptional<z.ZodNumber>;
+}, z.core.$strip>;
+export declare const updateCategorySchema: z.ZodObject<{
+    name: z.ZodOptional<z.ZodString>;
+    description: z.ZodOptional<z.ZodString>;
+    is_income: z.ZodOptional<z.ZodBoolean>;
+    exclude_budget: z.ZodOptional<z.ZodBoolean>;
+    exclude_from_totals: z.ZodOptional<z.ZodBoolean>;
+    archived: z.ZodOptional<z.ZodBoolean>;
+    category_group_id: z.ZodOptional<z.ZodNumber>;
+    parent_category_id: z.ZodOptional<z.ZodNumber>;
+}, z.core.$strip>;
+export declare const createTagSchema: z.ZodObject<{
+    name: z.ZodString;
+}, z.core.$strip>;
+export declare const updateTagSchema: z.ZodObject<{
+    name: z.ZodString;
+}, z.core.$strip>;
+export declare const createTransactionSchema: z.ZodObject<{
+    date: z.ZodString;
+    amount: z.ZodString;
+    payee: z.ZodOptional<z.ZodString>;
+    currency: z.ZodOptional<z.ZodString>;
+    notes: z.ZodOptional<z.ZodString>;
+    category_id: z.ZodOptional<z.ZodNumber>;
+    account_id: z.ZodNumber;
+    tags: z.ZodOptional<z.ZodArray<z.ZodNumber>>;
+    status: z.ZodOptional<z.ZodEnum<{
+        cleared: "cleared";
+        uncleared: "uncleared";
+    }>>;
+    external_id: z.ZodOptional<z.ZodString>;
+    original_name: z.ZodOptional<z.ZodString>;
+    type: z.ZodOptional<z.ZodEnum<{
+        expense: "expense";
+        income: "income";
+        transfer: "transfer";
+    }>>;
+}, z.core.$strip>;
+export declare const updateTransactionSchema: z.ZodObject<{
+    date: z.ZodOptional<z.ZodString>;
+    amount: z.ZodOptional<z.ZodString>;
+    payee: z.ZodOptional<z.ZodString>;
+    currency: z.ZodOptional<z.ZodString>;
+    notes: z.ZodOptional<z.ZodString>;
+    category_id: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+    account_id: z.ZodOptional<z.ZodNumber>;
+    tags: z.ZodOptional<z.ZodArray<z.ZodNumber>>;
+    status: z.ZodOptional<z.ZodEnum<{
+        cleared: "cleared";
+        uncleared: "uncleared";
+    }>>;
+    external_id: z.ZodOptional<z.ZodString>;
+    original_name: z.ZodOptional<z.ZodString>;
+    type: z.ZodOptional<z.ZodEnum<{
+        expense: "expense";
+        income: "income";
+        transfer: "transfer";
+    }>>;
+}, z.core.$strip>;
+export declare const bulkUpdateTransactionsSchema: z.ZodObject<{
+    transaction_ids: z.ZodArray<z.ZodNumber>;
+    category_id: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+    tags: z.ZodOptional<z.ZodArray<z.ZodNumber>>;
+    notes: z.ZodOptional<z.ZodString>;
+    status: z.ZodOptional<z.ZodEnum<{
+        cleared: "cleared";
+        uncleared: "uncleared";
+    }>>;
+}, z.core.$strip>;
+export declare const createRecurringItemSchema: z.ZodObject<{
+    payee: z.ZodOptional<z.ZodString>;
+    amount: z.ZodString;
+    currency: z.ZodOptional<z.ZodString>;
+    category_id: z.ZodOptional<z.ZodNumber>;
+    notes: z.ZodOptional<z.ZodString>;
+    account_id: z.ZodOptional<z.ZodNumber>;
+    tag_id: z.ZodOptional<z.ZodNumber>;
+    frequency: z.ZodOptional<z.ZodString>;
+    flow: z.ZodOptional<z.ZodEnum<{
+        inflow: "inflow";
+        outflow: "outflow";
+    }>>;
+    start_date: z.ZodOptional<z.ZodString>;
+    end_date: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export declare const updateRecurringItemSchema: z.ZodObject<{
+    payee: z.ZodOptional<z.ZodString>;
+    amount: z.ZodOptional<z.ZodString>;
+    currency: z.ZodOptional<z.ZodString>;
+    category_id: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+    notes: z.ZodOptional<z.ZodString>;
+    account_id: z.ZodOptional<z.ZodNumber>;
+    tag_id: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+    frequency: z.ZodOptional<z.ZodString>;
+    flow: z.ZodOptional<z.ZodEnum<{
+        inflow: "inflow";
+        outflow: "outflow";
+    }>>;
+    start_date: z.ZodOptional<z.ZodString>;
+    end_date: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export declare const createBudgetSchema: z.ZodObject<{
+    category_id: z.ZodOptional<z.ZodNumber>;
+    amount: z.ZodString;
+    currency: z.ZodOptional<z.ZodString>;
+    start_date: z.ZodString;
+    end_date: z.ZodString;
+}, z.core.$strip>;
+export declare const updateBudgetSchema: z.ZodObject<{
+    category_id: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+    amount: z.ZodOptional<z.ZodString>;
+    currency: z.ZodOptional<z.ZodString>;
+    start_date: z.ZodOptional<z.ZodString>;
+    end_date: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export declare const createAssetSchema: z.ZodObject<{
+    type_name: z.ZodString;
+    type_name_override: z.ZodOptional<z.ZodString>;
+    name: z.ZodString;
+    balance: z.ZodString;
+    balance_as_of: z.ZodOptional<z.ZodString>;
+    currency: z.ZodOptional<z.ZodString>;
+    institution_name: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export declare const updateAssetSchema: z.ZodObject<{
+    type_name: z.ZodOptional<z.ZodString>;
+    type_name_override: z.ZodOptional<z.ZodString>;
+    name: z.ZodOptional<z.ZodString>;
+    balance: z.ZodOptional<z.ZodString>;
+    balance_as_of: z.ZodOptional<z.ZodString>;
+    currency: z.ZodOptional<z.ZodString>;
+    institution_name: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export declare const createTransactionGroupSchema: z.ZodObject<{
+    date: z.ZodString;
+    payee: z.ZodString;
+    transactions: z.ZodArray<z.ZodNumber>;
+    category_id: z.ZodOptional<z.ZodNumber>;
+    notes: z.ZodOptional<z.ZodString>;
+    tags: z.ZodOptional<z.ZodArray<z.ZodNumber>>;
+}, z.core.$strip>;
+export declare const unsplitTransactionsSchema: z.ZodObject<{
+    parent_ids: z.ZodArray<z.ZodNumber>;
+    remove_parents: z.ZodOptional<z.ZodBoolean>;
+}, z.core.$strip>;
+export declare const createCategoryGroupSchema: z.ZodObject<{
+    name: z.ZodString;
+    description: z.ZodOptional<z.ZodString>;
+    is_income: z.ZodOptional<z.ZodBoolean>;
+    exclude_from_budget: z.ZodOptional<z.ZodBoolean>;
+    exclude_from_totals: z.ZodOptional<z.ZodBoolean>;
+    category_ids: z.ZodOptional<z.ZodArray<z.ZodNumber>>;
+    new_categories: z.ZodOptional<z.ZodArray<z.ZodString>>;
+}, z.core.$strip>;
+export declare const addToGroupSchema: z.ZodObject<{
+    group_id: z.ZodNumber;
+    category_ids: z.ZodOptional<z.ZodArray<z.ZodNumber>>;
+    new_categories: z.ZodOptional<z.ZodArray<z.ZodString>>;
+}, z.core.$strip>;
+export declare const idSchema: z.ZodObject<{
+    id: z.ZodNumber;
+}, z.core.$strip>;
+//# sourceMappingURL=index.d.ts.map

package/dist/schemas/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/schemas/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAWxB,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;iBAWlC,CAAC;AAGH,eAAO,MAAM,oBAAoB;;;;;;;;iBAQ/B,CAAC;AAEH,eAAO,MAAM,oBAAoB;;;;;;;;;iBAS/B,CAAC;AAGH,eAAO,MAAM,eAAe;;iBAE1B,CAAC;AAEH,eAAO,MAAM,eAAe;;iBAE1B,CAAC;AAGH,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;iBAalC,CAAC;AAEH,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;iBAalC,CAAC;AAEH,eAAO,MAAM,4BAA4B;;;;;;;;;iBAMvC,CAAC;AAGH,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;iBAYpC,CAAC;AAEH,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;iBAYpC,CAAC;AAGH,eAAO,MAAM,kBAAkB;;;;;;iBAM7B,CAAC;AAEH,eAAO,MAAM,kBAAkB;;;;;;iBAM7B,CAAC;AAGH,eAAO,MAAM,iBAAiB;;;;;;;;iBAQ5B,CAAC;AAEH,eAAO,MAAM,iBAAiB;;;;;;;;iBAQ5B,CAAC;AAGH,eAAO,MAAM,4BAA4B;;;;;;;iBAOvC,CAAC;AAEH,eAAO,MAAM,yBAAyB;;;iBAGpC,CAAC;AAGH,eAAO,MAAM,yBAAyB;;;;;;;;iBAQpC,CAAC;AAEH,eAAO,MAAM,gBAAgB;;;;iBAI3B,CAAC;AAGH,eAAO,MAAM,QAAQ;;iBAEnB,CAAC"}