paisa-mcp 0.3.1 → 0.4.0

package/dist/index.js

@@ -38033,6 +38033,44 @@ var inputRequired = Object.assign(buildInputRequired, {
     return { method: "roots/list" };
   }
 });
+function acceptedContent(responses, key, schema) {
+  const view = inputResponse(responses, key);
+  if (view.kind !== "elicit" || view.action !== "accept" || view.content === undefined)
+    return;
+  if (schema === undefined)
+    return view.content;
+  const outcome = schema["~standard"].validate(view.content);
+  if (outcome instanceof Promise)
+    throw new TypeError("acceptedContent(responses, key, schema) requires a synchronously-validating schema");
+  return outcome.issues === undefined ? outcome.value : undefined;
+}
+function inputResponse(responses, key) {
+  if (responses === undefined || typeof responses !== "object" || responses === null)
+    return { kind: "missing" };
+  const entry = responses[key];
+  if (entry === null || typeof entry !== "object" || Array.isArray(entry))
+    return { kind: "missing" };
+  const candidate = entry;
+  if (candidate["action"] === "accept" || candidate["action"] === "decline" || candidate["action"] === "cancel") {
+    const content = candidate["content"];
+    return {
+      kind: "elicit",
+      action: candidate["action"],
+      ...content !== null && typeof content === "object" && !Array.isArray(content) && { content }
+    };
+  }
+  if (Array.isArray(candidate["roots"]))
+    return {
+      kind: "roots",
+      roots: candidate["roots"]
+    };
+  if (typeof candidate["role"] === "string" && candidate["content"] !== undefined)
+    return {
+      kind: "sampling",
+      result: candidate
+    };
+  return { kind: "missing" };
+}
 var REQUEST_STATE_ONLY_LEG_PACING_MS = 250;
 function inputRequiredRoundsExceededMessage(method, maxRounds) {
   return `Multi-round-trip request '${method}' still required input after ${maxRounds} rounds (inputRequired.maxRounds)`;
@@ -53656,6 +53694,145 @@ function applyAnnotations(tools) {
     return { ...tool, title: meta3.title, annotations: meta3.annotations };
   });
 }
+
+// src/lib/confirm.ts
+import { createHash, createHmac, randomBytes, timingSafeEqual } from "node:crypto";
+var ANSWER_KEY = "confirm";
+function clientCanConfirm(mcp, initializeCapabilities) {
+  const envelope = mcp.mcpReq.envelope;
+  const caps = envelope?.[CLIENT_CAPABILITIES_META_KEY] ?? initializeCapabilities();
+  return Boolean(caps?.elicitation);
+}
+function planFingerprint(plan) {
+  const canonical = (v) => Array.isArray(v) ? v.map(canonical) : v && typeof v === "object" ? Object.fromEntries(Object.entries(v).filter(([, x]) => x !== undefined).sort(([a], [b]) => a.localeCompare(b)).map(([k, x]) => [k, canonical(x)])) : v;
+  return createHash("sha256").update(JSON.stringify(canonical(plan))).digest("hex");
+}
+var STATE_KEY = randomBytes(32);
+function sign(nonce, fingerprint) {
+  return createHmac("sha256", STATE_KEY).update(`${nonce}.${fingerprint}`).digest("hex");
+}
+function mintState(fingerprint) {
+  const nonce = randomBytes(16).toString("hex");
+  return `${nonce}.${sign(nonce, fingerprint)}`;
+}
+function verifyState(state, fingerprint) {
+  if (typeof state !== "string")
+    return false;
+  const [nonce, mac3, ...rest] = state.split(".");
+  if (!nonce || !mac3 || rest.length)
+    return false;
+  const expected = Buffer.from(sign(nonce, fingerprint), "hex");
+  const given = Buffer.from(mac3, "hex");
+  return given.length === expected.length && timingSafeEqual(given, expected);
+}
+function confirmPlan(mcp, message, plan, initializeCapabilities = () => {
+  return;
+}) {
+  if (!clientCanConfirm(mcp, initializeCapabilities))
+    return { kind: "unsupported" };
+  const fingerprint = planFingerprint(plan);
+  const responses = mcp.mcpReq.inputResponses;
+  const answered = responses !== undefined && ANSWER_KEY in responses;
+  const echoed = mcp.mcpReq.requestState?.();
+  if (answered && verifyState(echoed, fingerprint)) {
+    const content = acceptedContent(responses, ANSWER_KEY);
+    if (content?.confirm === true)
+      return { kind: "confirmed" };
+    return {
+      kind: "declined",
+      result: { cancelled: true, message: "Cancelled by the user. Nothing was changed." }
+    };
+  }
+  return {
+    kind: "ask",
+    result: inputRequired({
+      inputRequests: {
+        [ANSWER_KEY]: inputRequired.elicit({
+          message,
+          requestedSchema: {
+            type: "object",
+            properties: {
+              confirm: { type: "boolean", title: "Confirm", description: "This can't be undone." }
+            },
+            required: ["confirm"]
+          }
+        })
+      },
+      requestState: mintState(fingerprint)
+    })
+  };
+}
+function withConfirmation(tool, describe3, initializeCapabilities) {
+  const run = tool.handler;
+  return {
+    ...tool,
+    handler: (args, ctx) => {
+      const message = describe3(args);
+      if (message === null || !ctx?.mcp)
+        return run(args, ctx);
+      const outcome = confirmPlan(ctx.mcp, message, { tool: tool.name, args }, initializeCapabilities);
+      if (outcome.kind === "confirmed" || outcome.kind === "unsupported")
+        return run(args, ctx);
+      return outcome.result;
+    }
+  };
+}
+var safeDate = (v) => typeof v === "string" && /^\d{4}-\d{2}-\d{2}$/.test(v) ? v : v === undefined ? "any" : "a date";
+var safeAmount = (v) => typeof v === "string" && /^\d+(\.\d{1,2})?$/.test(v) || typeof v === "number" ? String(v) : null;
+var plural2 = (n, word) => `${n} ${word}${n === 1 ? "" : "s"}`;
+function describeTransactionFilters(f) {
+  const parts = [];
+  if (f.startDate || f.endDate)
+    parts.push(`dated ${safeDate(f.startDate)} to ${safeDate(f.endDate)}`);
+  if (f.type)
+    parts.push(`${f.type}s only`);
+  if (f.categoryType)
+    parts.push(`category type ${f.categoryType}`);
+  if (f.categoryId)
+    parts.push("in one category");
+  if (f.uncategorized)
+    parts.push("uncategorized");
+  if (f.amountMin !== undefined || f.amountMax !== undefined)
+    parts.push(`amount ₹${f.amountMin ?? 0} to ${f.amountMax === undefined ? "any" : `₹${f.amountMax}`}`);
+  if (f.owner)
+    parts.push("one owner");
+  if (f.search)
+    parts.push("matching a text search");
+  return parts.length ? parts.join(", ") : "with no filters (ALL transactions)";
+}
+var describeDeletes = {
+  transactions: (a) => {
+    if (a.id)
+      return "Permanently delete 1 transaction?";
+    if (Array.isArray(a.ids))
+      return `Permanently delete ${plural2(a.ids.length, "transaction")}?`;
+    return `Permanently delete every transaction ${describeTransactionFilters(a.filters ?? {})}?`;
+  },
+  entity: (a) => {
+    const entity = String(a.entity ?? "item").replace(/_/g, " ");
+    const n = Array.isArray(a.ids) ? a.ids.length : 1;
+    const extra = a.entity === "merchant" ? " Their transactions are kept but unlinked." : a.entity === "debt" ? " Its history is lost; settling keeps it." : "";
+    return `Permanently delete ${plural2(n, entity)}?${extra}`;
+  },
+  mergeMerchants: (a) => {
+    const n = Array.isArray(a.duplicateIds) ? a.duplicateIds.length : 0;
+    return `Merge ${plural2(n, "duplicate merchant")} into the one you're keeping? Their transactions move over and the duplicates are deleted.`;
+  },
+  encryptionMode: (a) => `Switch encryption mode to ${a.encryptionMode === "private" ? "private" : "standard"}?`,
+  settleDebt: (a) => {
+    if (a.action !== "settle")
+      return null;
+    const amount = a.settledAmount === undefined ? "0" : safeAmount(a.settledAmount);
+    return amount === null ? "Settle this debt? It will be closed with the remaining balance you gave." : `Settle this debt? It will be closed with a remaining balance of ₹${amount}.`;
+  }
+};
+var CONFIRMED_TOOLS = {
+  delete_transactions: describeDeletes.transactions,
+  delete_entity: describeDeletes.entity,
+  merge_merchants: describeDeletes.mergeMerchants,
+  set_encryption_mode: describeDeletes.encryptionMode,
+  manage_debt: describeDeletes.settleDebt
+};
 // src/lib/union-tool.ts
 function variant(input2, run) {
   return { input: input2, run };
@@ -60392,7 +60569,7 @@ function registerResources(server, tools) {
 // package.json
 var package_default = {
   name: "paisa-mcp",
-  version: "0.3.1",
+  version: "0.4.0",
   repository: {
     type: "git",
     url: "git+https://github.com/nimit9/paisa.git",
@@ -60448,7 +60625,13 @@ function paisaErrorResult(err) {
   });
 }
 function buildServer(client, crypto3) {
-  const tools = applyAnnotations(REGISTRATIONS.flatMap((group) => group.tools(client, crypto3)));
+  let initializeCapabilities = () => {
+    return;
+  };
+  const tools = applyAnnotations(REGISTRATIONS.flatMap((group) => group.tools(client, crypto3)).map((t2) => {
+    const describe3 = CONFIRMED_TOOLS[t2.name];
+    return describe3 ? withConfirmation(t2, describe3, () => initializeCapabilities()) : t2;
+  }));
   for (const t2 of tools)
     if (t2.input)
       withCompactJsonSchema(t2.input);
@@ -60458,6 +60641,7 @@ function buildServer(client, crypto3) {
     tools,
     errorResult: paisaErrorResult
   });
+  initializeCapabilities = () => server.server.getClientCapabilities();
   registerResources(server, tools);
   registerPrompts(server);
   return server;
@@ -60484,5 +60668,5 @@ main().catch((err) => {
   process.exit(1);
 });
 
-//# debugId=E169545C1C52BE7864756E2164756E21
+//# debugId=F56B7BEACF2C363564756E2164756E21
 //# sourceMappingURL=index.js.map