paisa-mcp 0.3.0 → 0.3.1

package/dist/index.js

@@ -53145,6 +53145,90 @@ class PaisaApiClient {
   }
 }
 
+// ../../node_modules/.bun/@nimit9+signet-lib@0.1.15+d40099021b198cb0/node_modules/@nimit9/signet-lib/dist/crypto/index.js
+var isObj = (v) => typeof v === "object" && v !== null && !Array.isArray(v);
+async function decryptFields(input2, paths, { decrypt, isCiphertext }) {
+  const undecrypted = [];
+  const pending = [];
+  const looksEncrypted = (value, path) => {
+    if (!isCiphertext)
+      return true;
+    try {
+      return isCiphertext(value, path) !== false;
+    } catch {
+      return true;
+    }
+  };
+  const decryptInto = (target, key, value, path) => {
+    pending.push((async () => {
+      try {
+        const plain = await decrypt(value, path);
+        if (typeof plain !== "string")
+          throw new TypeError("decrypt returned a non-string");
+        target[key] = plain;
+      } catch {
+        target[key] = null;
+        undecrypted.push(path);
+      }
+    })());
+  };
+  const copies = new Map;
+  const mine = new WeakSet;
+  const copyOf = (v) => {
+    if (mine.has(v))
+      return v;
+    let c = copies.get(v);
+    if (!c) {
+      c = Array.isArray(v) ? [...v] : { ...v };
+      copies.set(v, c);
+      mine.add(c);
+    }
+    return c;
+  };
+  const walk = (node2, keys, at, set2) => {
+    if (Array.isArray(node2)) {
+      const arr = copyOf(node2);
+      set2(arr);
+      arr.forEach((item, i) => {
+        walk(item, keys, at ? `${at}.${i}` : String(i), (v) => {
+          arr[i] = v;
+        });
+      });
+      return;
+    }
+    if (!isObj(node2) || keys.length === 0)
+      return;
+    const [key, ...rest] = keys;
+    if (!Object.hasOwn(node2, key))
+      return;
+    const obj = copyOf(node2);
+    set2(obj);
+    const path = at ? `${at}.${key}` : key;
+    const value = obj[key];
+    if (rest.length > 0) {
+      walk(value, rest, path, (v) => {
+        obj[key] = v;
+      });
+      return;
+    }
+    if (typeof value === "string" && value !== "" && looksEncrypted(value, path)) {
+      decryptInto(obj, key, value, path);
+    }
+  };
+  let data = input2;
+  for (const p of paths) {
+    const keys = p.split(".").filter(Boolean);
+    if (keys.length === 0)
+      continue;
+    walk(data, keys, "", (v) => {
+      data = v;
+    });
+  }
+  await Promise.all(pending);
+  undecrypted.sort();
+  return { data, undecrypted };
+}
+
 // src/crypto.ts
 var import_hash_wasm = __toESM(require_index_umd(), 1);
 var ENCRYPTED_TXN_FIELDS = ["description", "referenceNumber", "notes"];
@@ -53207,16 +53291,6 @@ async function decryptField(encrypted, key) {
   const plaintext = await crypto.subtle.decrypt({ name: "AES-GCM", iv }, key, ciphertext);
   return new TextDecoder().decode(plaintext);
 }
-async function decryptObjectFields(obj, fields, key) {
-  for (const field of fields) {
-    const val = obj[field];
-    if (typeof val !== "string" || !val)
-      continue;
-    try {
-      obj[field] = await decryptField(val, key);
-    } catch {}
-  }
-}
 async function encryptObjectFields(obj, fields, key) {
   for (const field of fields) {
     const val = obj[field];
@@ -53225,25 +53299,55 @@ async function encryptObjectFields(obj, fields, key) {
     obj[field] = await encryptField(val, key);
   }
 }
+var CIPHERTEXT_CHARSET_RE = /^[A-Za-z0-9+/]+={0,2}$/;
+var MIN_CIPHERTEXT_B64_LEN = 40;
+function looksLikeCiphertext(value) {
+  return value.length >= MIN_CIPHERTEXT_B64_LEN && CIPHERTEXT_CHARSET_RE.test(value);
+}
+async function decryptFieldsFailClosed(input2, paths, key) {
+  return decryptFields(input2, paths, {
+    decrypt: (ciphertext) => decryptField(ciphertext, key),
+    isCiphertext: (value) => looksLikeCiphertext(value)
+  });
+}
+var TXN_DECRYPT_PATHS = [
+  ...ENCRYPTED_TXN_FIELDS,
+  ...ENCRYPTED_MERCHANT_FIELDS.map((f) => `merchant.${f}`)
+];
 async function decryptTransactionFields(items, key) {
-  for (const item of items) {
-    await decryptObjectFields(item, ENCRYPTED_TXN_FIELDS, key);
-    const merchant = item.merchant;
-    if (merchant && typeof merchant === "object") {
-      await decryptObjectFields(merchant, ENCRYPTED_MERCHANT_FIELDS, key);
-    }
-  }
+  return decryptFieldsFailClosed(items, TXN_DECRYPT_PATHS, key);
 }
 async function decryptMerchantFields(items, key) {
-  for (const item of items) {
-    await decryptObjectFields(item, ENCRYPTED_MERCHANT_FIELDS, key);
-  }
+  return decryptFieldsFailClosed(items, ENCRYPTED_MERCHANT_FIELDS, key);
 }
 async function encryptTransactionFields(items, key) {
   for (const item of items) {
     await encryptObjectFields(item, ENCRYPTED_TXN_FIELDS, key);
   }
 }
+async function decryptPersonCiphers(input2, key) {
+  const { data, undecrypted } = await decryptFields(input2, ["cipher"], {
+    decrypt: async (ciphertext) => {
+      const json2 = await decryptField(ciphertext, key);
+      JSON.parse(json2);
+      return json2;
+    }
+  });
+  const merge3 = (row) => {
+    if (!row || typeof row !== "object")
+      return;
+    const r = row;
+    if (typeof r.cipher !== "string")
+      return;
+    const fields = JSON.parse(r.cipher);
+    Object.assign(r, fields, { cipher: null });
+  };
+  if (Array.isArray(data))
+    data.forEach(merge3);
+  else
+    merge3(data);
+  return { data, undecrypted };
+}
 var VERIFIER_PLAINTEXT = "paisa-verify-v1";
 async function checkVerifier(key, encryptedVerifier) {
   try {
@@ -53862,7 +53966,8 @@ var dashboardOutputSchema = exports_external.object({
   recentTransactions: exports_external.array(exports_external.record(exports_external.string(), exports_external.unknown())),
   netWorth: exports_external.record(exports_external.string(), exports_external.unknown()).nullable(),
   debtSummary: exports_external.object({ totalOutstanding: exports_external.number(), totalEmi: exports_external.number(), count: exports_external.number() }).nullable(),
-  budgetVsActual: exports_external.array(budgetVsActualEntrySchema)
+  budgetVsActual: exports_external.array(budgetVsActualEntrySchema),
+  undecrypted: exports_external.array(exports_external.string()).optional()
 });
 var spendingTrendsSchema = exports_external.object({
   success: exports_external.literal(true),
@@ -53897,7 +54002,8 @@ var spendingTrendsSchema = exports_external.object({
     total: exports_external.number(),
     count: exports_external.number()
   })),
-  budgetVsActual: exports_external.array(budgetVsActualEntrySchema)
+  budgetVsActual: exports_external.array(budgetVsActualEntrySchema),
+  undecrypted: exports_external.array(exports_external.string()).optional()
 });
 var categoryAnalyticsSchema = exports_external.object({
   success: exports_external.literal(true),
@@ -53912,7 +54018,7 @@ var categoryAnalyticsSchema = exports_external.object({
   recentTransactions: exports_external.array(exports_external.object({
     id: exports_external.string(),
     date: exports_external.string(),
-    description: exports_external.string(),
+    description: exports_external.string().nullable(),
     amount: exports_external.number(),
     type: exports_external.string(),
     owner: exports_external.string(),
@@ -53926,7 +54032,8 @@ var categoryAnalyticsSchema = exports_external.object({
     total: exports_external.number(),
     count: exports_external.number()
   })),
-  stats: exports_external.object({ total: exports_external.number(), avgMonthly: exports_external.number(), count: exports_external.number() })
+  stats: exports_external.object({ total: exports_external.number(), avgMonthly: exports_external.number(), count: exports_external.number() }),
+  undecrypted: exports_external.array(exports_external.string()).optional()
 });
 var merchantAnalyticsSchema = exports_external.object({
   success: exports_external.literal(true),
@@ -53941,7 +54048,7 @@ var merchantAnalyticsSchema = exports_external.object({
   recentTransactions: exports_external.array(exports_external.object({
     id: exports_external.string(),
     date: exports_external.string(),
-    description: exports_external.string(),
+    description: exports_external.string().nullable(),
     amount: exports_external.number(),
     type: exports_external.string(),
     owner: exports_external.string(),
@@ -53956,7 +54063,8 @@ var merchantAnalyticsSchema = exports_external.object({
     total: exports_external.number(),
     count: exports_external.number()
   })),
-  stats: exports_external.object({ total: exports_external.number(), avgMonthly: exports_external.number(), count: exports_external.number() })
+  stats: exports_external.object({ total: exports_external.number(), avgMonthly: exports_external.number(), count: exports_external.number() }),
+  undecrypted: exports_external.array(exports_external.string()).optional()
 });
 var analyticsOutputSchema = exports_external.union([
   spendingTrendsSchema,
@@ -53965,37 +54073,17 @@ var analyticsOutputSchema = exports_external.union([
 ]);
 
 // src/tools/analytics.ts
-async function dec(value, key) {
-  if (typeof value !== "string" || !value)
-    return value;
-  try {
-    return await decryptField(value, key);
-  } catch {
-    return value;
-  }
-}
 async function decryptAnalytics(data, key) {
   if (!data || typeof data !== "object")
-    return;
-  const d = data;
-  const topMerchants = d.topMerchants;
-  if (Array.isArray(topMerchants)) {
-    for (const m of topMerchants)
-      m.name = await dec(m.name, key);
-  }
-  const recent = d.recentTransactions;
-  if (Array.isArray(recent)) {
-    for (const t of recent) {
-      t.description = await dec(t.description, key);
-      if ("merchantName" in t)
-        t.merchantName = await dec(t.merchantName, key);
-    }
-  }
-  const merchant = d.merchant;
-  if (merchant && typeof merchant === "object") {
-    merchant.cleanName = await dec(merchant.cleanName, key);
-    merchant.rawId = await dec(merchant.rawId, key);
-  }
+    return data;
+  const { data: decrypted, undecrypted } = await decryptFieldsFailClosed(data, [
+    "topMerchants.name",
+    "recentTransactions.description",
+    "recentTransactions.merchantName",
+    "merchant.cleanName",
+    "merchant.rawId"
+  ], key);
+  return undecrypted.length ? { ...decrypted, undecrypted } : decrypted;
 }
 function analyticsTools(client, crypto3) {
   return [
@@ -54023,7 +54111,7 @@ function analyticsTools(client, crypto3) {
             break;
         }
         if (crypto3)
-          await decryptAnalytics(data, crypto3.key);
+          data = await decryptAnalytics(data, crypto3.key);
         return data;
       }
     })
@@ -54091,7 +54179,10 @@ function dashboardTools(client, crypto3) {
       handler: async (params) => {
         const data = await client.get("/api/dashboard", params.months ? { months: params.months } : undefined);
         if (crypto3 && Array.isArray(data?.recentTransactions)) {
-          await decryptTransactionFields(data.recentTransactions, crypto3.key);
+          const { data: decrypted, undecrypted } = await decryptTransactionFields(data.recentTransactions, crypto3.key);
+          data.recentTransactions = decrypted;
+          if (undecrypted.length)
+            return { ...data, undecrypted };
         }
         return data;
       }
@@ -54643,13 +54734,17 @@ function merchantVariants(client, crypto3) {
   return {
     list: variant(exports_external.object({ rawId: exports_external.string().optional().describe("merchants: find one by UPI ID or name") }), async ({ rawId }) => {
       const data = await client.get("/api/merchants");
-      if (crypto3 && data.data)
-        await decryptMerchantFields(data.data, crypto3.key);
+      let undecrypted = [];
+      if (crypto3 && data.data) {
+        const dec = await decryptMerchantFields(data.data, crypto3.key);
+        data.data = dec.data;
+        undecrypted = dec.undecrypted;
+      }
       if (!rawId)
-        return data;
+        return undecrypted.length ? { ...data, undecrypted } : data;
       const needle = rawId.toLowerCase();
       const merchants = (data.data ?? []).filter((m) => String(m.rawId ?? "").toLowerCase() === needle || String(m.cleanName ?? "").toLowerCase().includes(needle));
-      return { ...data, data: merchants };
+      return { ...data, data: merchants, ...undecrypted.length ? { undecrypted } : {} };
     }),
     upsert: variant(exports_external.object({
       id: exports_external.string().optional().describe("Merchant UUID — pass to update, omit to create"),
@@ -54758,22 +54853,19 @@ function personVariants(client, crypto3) {
       if (id) {
         const data2 = await client.get(`/api/persons/${id}`);
         if (crypto3 && data2.data.cipher) {
-          const fields = await decryptPersonCipher(data2.data.cipher, crypto3.key);
-          Object.assign(data2.data, fields, { cipher: null });
+          const { data: decrypted, undecrypted } = await decryptPersonCiphers(data2.data, crypto3.key);
+          data2.data = decrypted;
+          if (undecrypted.length)
+            return { ...data2, undecrypted };
         }
         return data2;
       }
       const data = await client.get("/api/persons");
       if (crypto3 && data.data) {
-        for (const person of data.data) {
-          const cipher = person.cipher;
-          if (cipher) {
-            try {
-              const fields = await decryptPersonCipher(cipher, crypto3.key);
-              Object.assign(person, fields, { cipher: null });
-            } catch {}
-          }
-        }
+        const { data: decrypted, undecrypted } = await decryptPersonCiphers(data.data, crypto3.key);
+        data.data = decrypted;
+        if (undecrypted.length)
+          return { ...data, undecrypted };
       }
       return data;
     }),
@@ -58567,9 +58659,8 @@ async function fetchAllRowsPaged(client, crypto3, params = {}, maxPages = 100) {
     if (cursor)
       q2.cursor = cursor;
     const res = await client.get("/api/transactions", q2);
-    const batch = res.data ?? [];
-    if (crypto3)
-      await decryptTransactionFields(batch, crypto3.key);
+    const batch0 = res.data ?? [];
+    const batch = crypto3 ? (await decryptTransactionFields(batch0, crypto3.key)).data : batch0;
     out.push(...batch.map(toTxnRow));
     if (!res.hasMore || !res.nextCursor || batch.length === 0 || res.nextCursor === cursor)
       break;
@@ -59034,9 +59125,8 @@ async function runRescan(client, crypto3) {
     bag = (await loadBag(client)).bag;
   } catch {}
   const merchantsRes = await client.get("/api/merchants");
-  const allMerchants = merchantsRes.data ?? [];
-  if (crypto3)
-    await decryptMerchantFields(allMerchants, crypto3.key);
+  const allMerchants0 = merchantsRes.data ?? [];
+  const allMerchants = crypto3 ? (await decryptMerchantFields(allMerchants0, crypto3.key)).data : allMerchants0;
   const globalMerchants = allMerchants.filter((m2) => !m2.householdId && m2.cleanName).map((m2) => ({ id: m2.id, name: m2.cleanName }));
   const localMerchants = allMerchants.filter((m2) => m2.householdId && m2.cleanName).map((m2) => ({ id: m2.id, name: m2.cleanName }));
   const merchantCategoryById = new Map(allMerchants.filter((m2) => m2.categoryId).map((m2) => [m2.id, m2.categoryId]));
@@ -59133,9 +59223,13 @@ function transactionTools(client, crypto3) {
         if (!full)
           apiParams.view = "lean";
         const data = await client.get("/api/transactions", Object.fromEntries(Object.entries(apiParams).filter(([, v2]) => v2 !== undefined).map(([k2, v2]) => [k2, String(v2)])));
-        const rows = data.data ?? [];
-        if (crypto3)
-          await decryptTransactionFields(rows, crypto3.key);
+        let rows = data.data ?? [];
+        let undecrypted = [];
+        if (crypto3) {
+          const dec = await decryptTransactionFields(rows, crypto3.key);
+          rows = dec.data;
+          undecrypted = dec.undecrypted;
+        }
         const personNames = new Map;
         if (rows.some((r2) => r2.personId)) {
           for (const p2 of await loadDecryptedPersons(client, crypto3))
@@ -59147,12 +59241,14 @@ function transactionTools(client, crypto3) {
             if (person && personNames.has(person.id))
               person.name = personNames.get(person.id) ?? "";
           }
-          return data;
+          data.data = rows;
+          return undecrypted.length ? { ...data, undecrypted } : data;
         }
         const out = {
           rows: rows.map((r2) => toLeanRow(r2, personNames)),
           ...data.hasMore ? { more: true, cursor: data.nextCursor } : {},
-          ...data.summary ? { spent: data.summary.spent, income: data.summary.income } : {}
+          ...data.summary ? { spent: data.summary.spent, income: data.summary.income } : {},
+          ...undecrypted.length ? { undecrypted } : {}
         };
         return out;
       }
@@ -59278,8 +59374,11 @@ function transactionTools(client, crypto3) {
         }
         if (action === "list") {
           const data2 = await client.get("/api/transactions/duplicates");
-          if (crypto3 && data2.data)
-            await decryptTransactionFields(data2.data, crypto3.key);
+          if (crypto3 && data2.data) {
+            const { data: decrypted, undecrypted } = await decryptTransactionFields(data2.data, crypto3.key);
+            data2.data = decrypted;
+            return withTruncationWarning(undecrypted.length ? { ...data2, undecrypted } : data2);
+          }
           return withTruncationWarning(data2);
         }
         const data = await client.post("/api/transactions/duplicates/resolve", {
@@ -59299,8 +59398,11 @@ function transactionTools(client, crypto3) {
       }),
       handler: async ({ accountId, startDate, endDate }) => {
         const data = await client.get("/api/transactions/reconciliation-context", { accountId, startDate, endDate });
-        if (crypto3 && data.data)
-          await decryptTransactionFields(data.data, crypto3.key);
+        if (crypto3 && data.data) {
+          const { data: decrypted, undecrypted } = await decryptTransactionFields(data.data, crypto3.key);
+          data.data = decrypted;
+          return withTruncationWarning(undecrypted.length ? { ...data, undecrypted } : data);
+        }
         return withTruncationWarning(data);
       }
     }),
@@ -59392,8 +59494,11 @@ function transactionTools(client, crypto3) {
       input: exports_external.object({ ccAccountId: exports_external.string().uuid() }),
       handler: async ({ ccAccountId }) => {
         const data = await client.get("/api/transactions/settlement-candidates", { ccAccountId });
-        if (crypto3 && data.data)
-          await decryptTransactionFields(data.data, crypto3.key);
+        if (crypto3 && data.data) {
+          const { data: decrypted, undecrypted } = await decryptTransactionFields(data.data, crypto3.key);
+          data.data = decrypted;
+          return withTruncationWarning(undecrypted.length ? { ...data, undecrypted } : data);
+        }
         return withTruncationWarning(data);
       }
     }),
@@ -59403,11 +59508,15 @@ function transactionTools(client, crypto3) {
       input: exports_external.object({ id: exports_external.string().uuid() }),
       handler: async ({ id }) => {
         const res = await client.get(`/api/transactions/${id}`);
-        const row = res.data;
+        let row = res.data;
         if (!row)
           return res;
-        if (crypto3)
-          await decryptTransactionFields([row], crypto3.key);
+        let undecrypted = [];
+        if (crypto3) {
+          const dec = await decryptTransactionFields([row], crypto3.key);
+          row = dec.data[0];
+          undecrypted = dec.undecrypted;
+        }
         const lean = Object.fromEntries([
           "id",
           "date",
@@ -59423,7 +59532,7 @@ function transactionTools(client, crypto3) {
           "isDuplicate",
           "source"
         ].filter((k2) => row[k2] !== undefined).map((k2) => [k2, row[k2]]));
-        return lean;
+        return undecrypted.length ? { ...lean, undecrypted } : lean;
       }
     })
   ];
@@ -59448,7 +59557,9 @@ function exportTools(client, crypto3) {
           format: "json"
         });
         if (crypto3 && Array.isArray(data?.transactions)) {
-          await decryptTransactionFields(data.transactions, crypto3.key);
+          const { data: decrypted, undecrypted } = await decryptTransactionFields(data.transactions, crypto3.key);
+          data.transactions = decrypted;
+          return withTruncationWarning(undecrypted.length ? { ...data, undecrypted } : data);
         }
         return withTruncationWarning(data);
       }
@@ -59456,7 +59567,7 @@ function exportTools(client, crypto3) {
   ];
 }
 
-// ../../node_modules/.bun/@nimit9+signet-ai@0.1.11+a8a356da5edd5fb9/node_modules/@nimit9/signet-ai/dist/jev.js
+// ../../node_modules/.bun/@nimit9+signet-ai@0.1.11+53d0ad1559459462/node_modules/@nimit9/signet-ai/dist/jev.js
 var JEV_DEFAULT_MODEL = "jev-1.13.0";
 var JEV_DEFAULT_MIN_CONFIDENCE = 0.95;
 var JEV_DEFAULT_TIMEOUT_MS = 8000;
@@ -59942,9 +60053,8 @@ async function runStatementImport(deps, args) {
     throw new Error(`${basename(args.filePath)} parsed to 0 transactions (format ${format}). If it is a statement with real activity, the layout may not be supported.`);
   }
   const dates = txns.map((t2) => t2.date).sort();
-  const existing = await fetchReconciliationContext(client, account.id, dates[0], dates[dates.length - 1]);
-  if (crypto3)
-    await decryptTransactionFields(existing, crypto3.key);
+  const existing0 = await fetchReconciliationContext(client, account.id, dates[0], dates[dates.length - 1]);
+  const existing = crypto3 ? (await decryptTransactionFields(existing0, crypto3.key)).data : existing0;
   const present = existing.map((r2) => ({ ...r2, isDuplicate: false, isIgnored: false }));
   const result = reconcile(present, { ...statement, transactions: txns });
   const fresh = result.unmatched;
@@ -60282,7 +60392,7 @@ function registerResources(server, tools) {
 // package.json
 var package_default = {
   name: "paisa-mcp",
-  version: "0.3.0",
+  version: "0.3.1",
   repository: {
     type: "git",
     url: "git+https://github.com/nimit9/paisa.git",
@@ -60310,7 +60420,7 @@ var package_default = {
     "@modelcontextprotocol/client": "^2.1.0",
     "@modelcontextprotocol/server": "^2.1.0",
     "@nimit9/signet-ai": "^0.1.11",
-    "@nimit9/signet-lib": "^0.1.14",
+    "@nimit9/signet-lib": "^0.1.15",
     "@nimit9/signet-server": "^0.2.2",
     "@paisa/parsers": "workspace:*",
     "@paisa/reconciliation": "workspace:*",
@@ -60374,5 +60484,5 @@ main().catch((err) => {
   process.exit(1);
 });
 
-//# debugId=C64445D8B55EDCFA64756E2164756E21
+//# debugId=E169545C1C52BE7864756E2164756E21
 //# sourceMappingURL=index.js.map