financy 0.1.2 → 0.2.0

package/dist/remote/start.js

@@ -0,0 +1,179 @@
+#!/usr/bin/env node
+import {
+  TOOLS,
+  callTool
+} from "../chunk-74AQOXZZ.js";
+import {
+  VERSION,
+  bearerConfig
+} from "../chunk-QYWDNIM2.js";
+
+// src/remote/server.ts
+import {
+  createServer
+} from "http";
+import { Server } from "@modelcontextprotocol/sdk/server/index.js";
+import { StreamableHTTPServerTransport } from "@modelcontextprotocol/sdk/server/streamableHttp.js";
+import {
+  ListToolsRequestSchema,
+  CallToolRequestSchema
+} from "@modelcontextprotocol/sdk/types.js";
+
+// src/remote/auth.ts
+import { createRemoteJWKSet, jwtVerify } from "jose";
+var RemoteAuthError = class extends Error {
+};
+function remoteAuthFromEnv(env, getKey) {
+  const domain = env.FINANCY_MCP_AUTH0_DOMAIN;
+  if (!domain) {
+    throw new Error("FINANCY_MCP_AUTH0_DOMAIN is required to run the remote MCP server");
+  }
+  const issuer = `https://${domain}/`;
+  return {
+    issuer,
+    audience: env.FINANCY_MCP_AUDIENCE ?? "https://mcp.open-finance.ai/",
+    getKey: getKey ?? createRemoteJWKSet(new URL(`${issuer}.well-known/jwks.json`))
+  };
+}
+async function verifyBearer(auth, header) {
+  const token = header?.startsWith("Bearer ") ? header.slice("Bearer ".length) : void 0;
+  if (!token) throw new RemoteAuthError("missing bearer token");
+  let scope;
+  try {
+    const { payload } = await jwtVerify(token, auth.getKey, {
+      issuer: auth.issuer,
+      audience: auth.audience,
+      requiredClaims: ["exp"]
+    });
+    scope = payload.scope;
+  } catch {
+    throw new RemoteAuthError("invalid or expired token");
+  }
+  const scopes = typeof scope === "string" ? scope.split(" ") : [];
+  if (!scopes.includes("mcp:read")) {
+    throw new RemoteAuthError("token is missing the mcp:read scope \u2014 reconnect the Financy connector");
+  }
+  return token;
+}
+
+// src/remote/server.ts
+var METADATA_PATH = "/.well-known/oauth-protected-resource";
+var MCP_PATH = "/mcp";
+var REMOTE_TOOLS = TOOLS.filter((tool) => tool.name !== "refresh_connections");
+var REMOTE_TOOL_NAMES = new Set(REMOTE_TOOLS.map((tool) => tool.name));
+var sendJson = (res, status, body, headers = {}) => {
+  res.writeHead(status, { "content-type": "application/json", ...headers });
+  res.end(JSON.stringify(body));
+};
+var MAX_BODY_BYTES = 256 * 1024;
+async function readBoundedJson(req, res) {
+  const chunks = [];
+  let size = 0;
+  for await (const chunk of req) {
+    size += chunk.length;
+    if (size > MAX_BODY_BYTES) {
+      sendJson(res, 413, { error: "payload_too_large" });
+      req.destroy();
+      return { ok: false };
+    }
+    chunks.push(chunk);
+  }
+  let body;
+  try {
+    body = chunks.length ? JSON.parse(Buffer.concat(chunks).toString("utf8")) : void 0;
+  } catch {
+    sendJson(res, 400, { error: "invalid_json" });
+    return { ok: false };
+  }
+  if (Array.isArray(body)) {
+    sendJson(res, 400, { error: "batch_not_supported" });
+    return { ok: false };
+  }
+  return { ok: true, body };
+}
+function createRemoteHandler(env, options = {}) {
+  const auth = remoteAuthFromEnv(env, options.getKey);
+  return async (req, res) => {
+    const pathname = new URL(req.url ?? "/", "http://placeholder").pathname;
+    if (req.method === "GET" && pathname === METADATA_PATH) {
+      sendJson(res, 200, {
+        resource: auth.audience,
+        authorization_servers: [auth.issuer],
+        scopes_supported: ["mcp:read"],
+        bearer_methods_supported: ["header"]
+      });
+      return;
+    }
+    if (pathname !== MCP_PATH) {
+      sendJson(res, 404, { error: "not_found" });
+      return;
+    }
+    if (req.method !== "POST") {
+      sendJson(res, 405, { error: "method_not_allowed" }, { allow: "POST" });
+      return;
+    }
+    let token;
+    try {
+      token = await verifyBearer(auth, req.headers.authorization);
+    } catch (error) {
+      const proto = req.headers["x-forwarded-proto"] ?? "http";
+      const host = req.headers["x-forwarded-host"] ?? req.headers.host;
+      const message = error instanceof RemoteAuthError ? error.message : "unauthorized";
+      sendJson(res, 401, { error: "unauthorized", message }, {
+        "www-authenticate": `Bearer resource_metadata="${proto}://${host}${METADATA_PATH}"`
+      });
+      return;
+    }
+    const parsed = await readBoundedJson(req, res);
+    if (!parsed.ok) return;
+    const server = new Server(
+      { name: "financy", version: VERSION },
+      { capabilities: { tools: {} } }
+    );
+    server.setRequestHandler(ListToolsRequestSchema, () => ({
+      tools: REMOTE_TOOLS.map((tool) => ({
+        name: tool.name,
+        description: tool.description,
+        inputSchema: tool.inputSchema
+      }))
+    }));
+    server.setRequestHandler(CallToolRequestSchema, async (request, extra) => {
+      const name = request.params.name;
+      const result = REMOTE_TOOL_NAMES.has(name) ? await callTool(name, request.params.arguments ?? {}, {
+        env,
+        config: bearerConfig(env, token, extra.signal)
+      }) : { error: { code: "UNKNOWN_TOOL", message: `no tool named '${name}'` } };
+      return { content: [{ type: "text", text: JSON.stringify(result) }] };
+    });
+    const transport = new StreamableHTTPServerTransport({
+      sessionIdGenerator: void 0,
+      enableJsonResponse: true
+    });
+    res.on("close", () => {
+      void transport.close();
+      void server.close();
+    });
+    await server.connect(transport);
+    await transport.handleRequest(req, res, parsed.body);
+  };
+}
+function startRemoteServer(env, port2, options = {}) {
+  const handler = createRemoteHandler(env, options);
+  const httpServer = createServer((req, res) => {
+    void handler(req, res).catch(() => {
+      if (!res.headersSent) sendJson(res, 500, { error: "internal_error" });
+      else res.end();
+    });
+  });
+  return new Promise((resolve) => {
+    httpServer.listen(port2, () => resolve(httpServer));
+  });
+}
+
+// src/remote/start.ts
+var port = Number(process.env.PORT ?? 8790);
+startRemoteServer(process.env, port).then((server) => {
+  const address = server.address();
+  const shown = typeof address === "object" && address ? address.port : port;
+  console.error(`financy remote MCP server listening on :${shown}`);
+});

package/dist/server-N5ZPO432.js

@@ -0,0 +1,37 @@
+#!/usr/bin/env node
+import {
+  TOOLS,
+  callTool
+} from "./chunk-74AQOXZZ.js";
+import {
+  VERSION
+} from "./chunk-QYWDNIM2.js";
+
+// src/mcp/server.ts
+import { Server } from "@modelcontextprotocol/sdk/server/index.js";
+import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+import {
+  ListToolsRequestSchema,
+  CallToolRequestSchema
+} from "@modelcontextprotocol/sdk/types.js";
+async function startMcpServer(env) {
+  const server = new Server(
+    { name: "financy", version: VERSION },
+    { capabilities: { tools: {} } }
+  );
+  server.setRequestHandler(ListToolsRequestSchema, () => ({
+    tools: TOOLS.map((t) => ({
+      name: t.name,
+      description: t.description,
+      inputSchema: t.inputSchema
+    }))
+  }));
+  server.setRequestHandler(CallToolRequestSchema, async (request) => {
+    const result = await callTool(request.params.name, request.params.arguments ?? {}, { env });
+    return { content: [{ type: "text", text: JSON.stringify(result) }] };
+  });
+  await server.connect(new StdioServerTransport());
+}
+export {
+  startMcpServer
+};

package/package.json

@@ -1,11 +1,19 @@
 {
   "name": "financy",
-  "version": "0.1.2",
+  "version": "0.2.0",
   "description": "Your Open-Finance accounts, balances and transactions in the terminal — with an embedded MCP server and agent skills",
   "type": "module",
   "bin": {
     "financy": "dist/bin.js"
   },
+  "types": "./dist/lib.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/lib.d.ts",
+      "import": "./dist/lib.js"
+    },
+    "./package.json": "./package.json"
+  },
   "license": "Apache-2.0",
   "author": "Open Finance AI <hello@open-finance.ai>",
   "homepage": "https://github.com/open-finance-ai/financy#readme",
@@ -39,7 +47,9 @@
     "node": ">=20"
   },
   "scripts": {
+    "prebuild": "node -e \"require('node:fs').rmSync('dist',{recursive:true,force:true})\"",
     "build": "tsup",
+    "build:lambda": "tsup --config tsup.lambda.config.ts",
     "test": "vitest run",
     "test:watch": "vitest",
     "typecheck": "tsc --noEmit",
@@ -49,7 +59,8 @@
   },
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.29.0",
-    "commander": "^12.1.0"
+    "commander": "^12.1.0",
+    "jose": "^6.2.9"
   },
   "devDependencies": {
     "@eslint/js": "^10.0.1",

package/skills/financy-setup/SKILL.md

@@ -30,6 +30,9 @@ These are not optional and they apply to every step below.
   pastes it anyway, do not repeat it, do not use it in a command, and tell them
   to rotate it in Financy → Settings → API. Never print it, read it back for
   confirmation, or include it in a summary, and never `cat` the config file.
+  If `setup` warns that the input is **not masked** (a terminal where Node cannot
+  hide input, e.g. Git Bash / mintty, where stdin is a pipe), tell the user to run
+  it in PowerShell or Windows Terminal instead of typing the secret in the clear.
 - **Confirm before spending credits.** `financy refresh` costs 20 credits per
   run. Never run it without the user explicitly agreeing to that cost in this
   conversation.
@@ -95,7 +98,18 @@ where to find the three values: the Financy app → **Settings → API**.
 
 `setup` validates the credentials against the live API before saving, so a wrong
 value fails immediately rather than on their first real command. On success it
-writes `~/.config/financy/config.json` with permissions `600` and prints the path.
+writes `~/.config/financy/config.json` and prints the path — permissions `600` on
+macOS/Linux; on Windows the path is
+`%USERPROFILE%\.config\financy\config.json` and file modes are not enforced.
+
+A **failed** `setup` writes nothing at all. If the user believes they entered the
+credentials but `financy config` shows them unset, setup did not get past
+validation — do not go looking for a file-reading problem.
+
+On Windows the secret prompt prints one `*` per character. If the user says they
+pasted and saw no `*`s, their console did not paste: the legacy Windows console
+ignores **Ctrl+V** at a prompt. Tell them to use **right-click** or
+**Ctrl+Shift+V**, or to type the value.
 
 Ask the user to tell you the exit code or what it printed — that is all you need.
 Do not ask them to paste any of the three values.
@@ -103,8 +117,12 @@ Do not ask them to paste any of the three values.
 Exit codes from `setup`:
 
 - `0` — saved and verified.
-- `3` — the credentials were rejected. Ask them to run `financy setup` again and
-  re-copy the values; a partial paste or a stray space is the usual cause.
+- `3` — the credentials were rejected, and nothing was saved. Ask them to run
+  `financy setup` again and re-copy the values; a partial paste is the usual
+  cause (surrounding whitespace and wrapping quotes are stripped automatically).
+  Have them check that `Client ID` and `User ID` did not go into each other's
+  prompt — `financy config` shows the `userId` in the clear, so a swap is visible
+  there.
 - `4` — the credentials are valid but the plan is not eligible. The CLI still
   saves them so a later upgrade works immediately. Go to *Handling exit 4*.
 - `7` — the API could not be reached. This is a network or endpoint problem, not
@@ -160,8 +178,11 @@ the secret:
 financy config
 ```
 
-It prints the resolved endpoints and marks each credential as coming from the
-environment or the config file, with the secret masked.
+It prints the resolved endpoints, the state of the config file (`ok`, `missing`,
+`malformed`, `unreadable`), and marks each credential as coming from the
+environment or the config file. The secret is never printed — only its length,
+which is enough to spot a truncated paste. This is the first command to run when a
+user reports a `401`.
 
 ## MCP alternative