fin-infra 0.1.55__py3-none-any.whl → 0.1.57__py3-none-any.whl

fin_infra/banking/history.py

@@ -4,6 +4,9 @@ This module provides functionality to record and retrieve historical account bal
 snapshots over time. This enables balance trend analysis, sparklines, and time-series
 visualizations in fintech dashboards.
 
+⚠️ WARNING: This module uses IN-MEMORY storage by default. All data is LOST on restart.
+For production use, integrate with svc-infra SQL database or set FIN_INFRA_STORAGE_BACKEND.
+
 Features:
 - Record daily balance snapshots for accounts
 - Store snapshots in time-series optimized format
@@ -36,6 +39,8 @@ Integration with svc-infra:
 
 from __future__ import annotations
 
+import logging
+import os
 from datetime import date, datetime, timedelta
 from typing import List, Optional
 from pydantic import BaseModel, Field, ConfigDict
@@ -50,8 +55,31 @@ __all__ = [
 ]
 
 
+_logger = logging.getLogger(__name__)
+
 # In-memory storage for testing (will be replaced with SQL database in production)
+# ⚠️ WARNING: All data is LOST on restart when using in-memory storage!
 _balance_snapshots: List[BalanceSnapshot] = []
+_production_warning_logged = False
+
+
+def _check_in_memory_warning() -> None:
+    """Log a warning if using in-memory storage in production."""
+    global _production_warning_logged
+    if _production_warning_logged:
+        return
+    
+    env = os.getenv("ENV", "development").lower()
+    storage_backend = os.getenv("FIN_INFRA_STORAGE_BACKEND", "memory").lower()
+    
+    if env in ("production", "staging") and storage_backend == "memory":
+        _logger.warning(
+            "⚠️ CRITICAL: Balance history using IN-MEMORY storage in %s environment! "
+            "All balance snapshots will be LOST on restart. "
+            "Set FIN_INFRA_STORAGE_BACKEND=sql for production persistence.",
+            env,
+        )
+        _production_warning_logged = True
 
 
 class BalanceSnapshot(BaseModel):
@@ -87,6 +115,8 @@ def record_balance_snapshot(
     This function stores a point-in-time balance record for trend analysis.
     In production, this would write to a SQL database via svc-infra.
 
+    ⚠️ WARNING: Uses in-memory storage by default. Data is LOST on restart!
+
     Args:
         account_id: Account identifier
         balance: Account balance at the snapshot time
@@ -103,6 +133,9 @@ def record_balance_snapshot(
         - In production, use unique constraint on (account_id, date) in SQL
         - Consider using svc-infra jobs for automatic daily snapshots
     """
+    # Check if in-memory storage is being used in production
+    _check_in_memory_warning()
+    
     snapshot = BalanceSnapshot(
         account_id=account_id,
         balance=balance,

fin_infra/investments/providers/snaptrade.py

@@ -20,7 +20,6 @@ from ..models import (
     InvestmentAccount,
     InvestmentTransaction,
     Security,
-    SecurityType,
     TransactionType,
 )
 from .base import InvestmentProvider
@@ -96,6 +95,25 @@ class SnapTradeInvestmentProvider(InvestmentProvider):
             timeout=30.0,
         )
 
+    def _auth_headers(self, user_id: str, user_secret: str) -> Dict[str, str]:
+        """Build authentication headers for SnapTrade API requests.
+        
+        SECURITY: User secrets are passed in headers, NOT URL params.
+        URL params are logged in access logs, browser history, and proxy logs.
+        Headers are not logged by default in most web servers.
+        
+        Args:
+            user_id: SnapTrade user ID
+            user_secret: SnapTrade user secret (sensitive!)
+            
+        Returns:
+            Dict with authentication headers
+        """
+        return {
+            "userId": user_id,
+            "userSecret": user_secret,
+        }
+
     async def get_holdings(
         self,
         access_token: str,
@@ -123,12 +141,12 @@ class SnapTradeInvestmentProvider(InvestmentProvider):
             ...     print(f"{holding.security.ticker_symbol}: P&L ${pnl}")
         """
         user_id, user_secret = self._parse_access_token(access_token)
+        auth_headers = self._auth_headers(user_id, user_secret)
 
         try:
             # Get all accounts
             accounts_url = f"{self.base_url}/accounts"
-            params = {"userId": user_id, "userSecret": user_secret}
-            response = await self.client.get(accounts_url, params=params)
+            response = await self.client.get(accounts_url, headers=auth_headers)
             response.raise_for_status()
             accounts = await response.json()
 
@@ -143,8 +161,7 @@ class SnapTradeInvestmentProvider(InvestmentProvider):
                 positions_url = (
                     f"{self.base_url}/accounts/{account_id}/positions"
                 )
-                pos_params = {"userId": user_id, "userSecret": user_secret}
-                pos_response = await self.client.get(positions_url, params=pos_params)
+                pos_response = await self.client.get(positions_url, headers=auth_headers)
                 pos_response.raise_for_status()
                 positions = await pos_response.json()
 
@@ -192,12 +209,12 @@ class SnapTradeInvestmentProvider(InvestmentProvider):
             raise ValueError("start_date must be before end_date")
 
         user_id, user_secret = self._parse_access_token(access_token)
+        auth_headers = self._auth_headers(user_id, user_secret)
 
         try:
             # Get all accounts
             accounts_url = f"{self.base_url}/accounts"
-            params = {"userId": user_id, "userSecret": user_secret}
-            response = await self.client.get(accounts_url, params=params)
+            response = await self.client.get(accounts_url, headers=auth_headers)
             response.raise_for_status()
             accounts = await response.json()
 
@@ -212,13 +229,12 @@ class SnapTradeInvestmentProvider(InvestmentProvider):
                 transactions_url = (
                     f"{self.base_url}/accounts/{account_id}/transactions"
                 )
+                # Date params are non-sensitive, only auth goes in headers
                 tx_params = {
-                    "userId": user_id,
-                    "userSecret": user_secret,
                     "startDate": start_date.isoformat(),
                     "endDate": end_date.isoformat(),
                 }
-                tx_response = await self.client.get(transactions_url, params=tx_params)
+                tx_response = await self.client.get(transactions_url, params=tx_params, headers=auth_headers)
                 tx_response.raise_for_status()
                 transactions = await tx_response.json()
 
@@ -297,12 +313,12 @@ class SnapTradeInvestmentProvider(InvestmentProvider):
             ...     print(f"  P&L: {account.total_unrealized_gain_loss_percent:.2f}%")
         """
         user_id, user_secret = self._parse_access_token(access_token)
+        auth_headers = self._auth_headers(user_id, user_secret)
 
         try:
             # Get all accounts
             accounts_url = f"{self.base_url}/accounts"
-            params = {"userId": user_id, "userSecret": user_secret}
-            response = await self.client.get(accounts_url, params=params)
+            response = await self.client.get(accounts_url, headers=auth_headers)
             response.raise_for_status()
             accounts = await response.json()
 
@@ -315,8 +331,7 @@ class SnapTradeInvestmentProvider(InvestmentProvider):
                 positions_url = (
                     f"{self.base_url}/accounts/{account_id}/positions"
                 )
-                pos_params = {"userId": user_id, "userSecret": user_secret}
-                pos_response = await self.client.get(positions_url, params=pos_params)
+                pos_response = await self.client.get(positions_url, headers=auth_headers)
                 pos_response.raise_for_status()
                 positions = await pos_response.json()
 
@@ -328,8 +343,7 @@ class SnapTradeInvestmentProvider(InvestmentProvider):
 
                 # Get account balances
                 balances_url = f"{self.base_url}/accounts/{account_id}/balances"
-                bal_params = {"userId": user_id, "userSecret": user_secret}
-                bal_response = await self.client.get(balances_url, params=bal_params)
+                bal_response = await self.client.get(balances_url, headers=auth_headers)
                 bal_response.raise_for_status()
                 balances = await bal_response.json()
 
@@ -373,11 +387,11 @@ class SnapTradeInvestmentProvider(InvestmentProvider):
             ...     print(f"Connected: {conn['brokerage_name']}")
         """
         user_id, user_secret = self._parse_access_token(access_token)
+        auth_headers = self._auth_headers(user_id, user_secret)
 
         try:
             url = f"{self.base_url}/connections"
-            params = {"userId": user_id, "userSecret": user_secret}
-            response = await self.client.get(url, params=params)
+            response = await self.client.get(url, headers=auth_headers)
             response.raise_for_status()
             return await response.json()
 

fin_infra/models/accounts.py

@@ -1,9 +1,10 @@
 from __future__ import annotations
 
+from decimal import Decimal
 from enum import Enum
 from typing import Optional
 
-from pydantic import BaseModel
+from pydantic import BaseModel, field_validator
 
 
 class AccountType(str, Enum):
@@ -16,11 +17,26 @@ class AccountType(str, Enum):
 
 
 class Account(BaseModel):
+    """Financial account model.
+    
+    Uses Decimal for balance fields to prevent floating-point precision errors
+    in financial calculations (e.g., $0.01 + $0.02 != $0.03 with float).
+    """
     id: str
     name: str
     type: AccountType
     mask: Optional[str] = None
     currency: str = "USD"
     institution: Optional[str] = None
-    balance_available: Optional[float] = None
-    balance_current: Optional[float] = None
+    balance_available: Optional[Decimal] = None
+    balance_current: Optional[Decimal] = None
+
+    @field_validator("balance_available", "balance_current", mode="before")
+    @classmethod
+    def _coerce_balance_to_decimal(cls, v):
+        """Coerce float/int to Decimal for backwards compatibility."""
+        if v is None:
+            return v
+        if isinstance(v, (int, float)):
+            return Decimal(str(v))
+        return v

fin_infra/models/transactions.py

@@ -1,16 +1,30 @@
 from __future__ import annotations
 
 from datetime import date
+from decimal import Decimal
 from typing import Optional
 
-from pydantic import BaseModel
+from pydantic import BaseModel, field_validator
 
 
 class Transaction(BaseModel):
+    """Financial transaction model.
+    
+    Uses Decimal for amount to prevent floating-point precision errors
+    in financial calculations (e.g., $0.01 + $0.02 != $0.03 with float).
+    """
     id: str
     account_id: str
     date: date
-    amount: float
+    amount: Decimal
     currency: str = "USD"
     description: Optional[str] = None
     category: Optional[str] = None
+
+    @field_validator("amount", mode="before")
+    @classmethod
+    def _coerce_amount_to_decimal(cls, v):
+        """Coerce float/int to Decimal for backwards compatibility."""
+        if isinstance(v, (int, float)):
+            return Decimal(str(v))
+        return v

fin_infra/providers/brokerage/alpaca.py

@@ -105,6 +105,9 @@ class AlpacaBrokerage(BrokerageProvider):
     ) -> dict:
         """Submit an order to Alpaca.
 
+        IMPORTANT: client_order_id is auto-generated if not provided to ensure
+        idempotency. Network retries without idempotency can cause DOUBLE ORDERS.
+
         Args:
             symbol: Trading symbol (e.g., "AAPL")
             qty: Order quantity
@@ -113,14 +116,20 @@ class AlpacaBrokerage(BrokerageProvider):
             time_in_force: "day", "gtc", "ioc", or "fok" (default: "day")
             limit_price: Limit price (required for limit/stop_limit orders)
             stop_price: Stop price (required for stop/stop_limit orders)
-            client_order_id: Optional client order ID
+            client_order_id: Client order ID for idempotency. Auto-generated if not provided.
 
         Returns:
-            Order dict with id, status, filled_qty, etc.
+            Order dict with id, status, filled_qty, client_order_id, etc.
 
         Raises:
             Exception: If order submission fails
         """
+        # CRITICAL: Auto-generate client_order_id for idempotency if not provided.
+        # Without this, network retries can cause duplicate order execution = MONEY LOSS.
+        if client_order_id is None:
+            import uuid
+            client_order_id = str(uuid.uuid4())
+
         order = self.client.submit_order(
             symbol=symbol,
             qty=qty,

{fin_infra-0.1.55.dist-info → fin_infra-0.1.57.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.3
 Name: fin-infra
-Version: 0.1.55
+Version: 0.1.57
 Summary: Financial infrastructure toolkit: banking connections, market data, credit, cashflows, and brokerage integrations
 License: MIT
 Keywords: finance,banking,plaid,brokerage,markets,credit,tax,cashflow,fintech,infra
@@ -176,7 +176,7 @@ print(f"Monthly payment: ${monthly:,.2f}")
 
 ## FastAPI Integration
 
-Use with [svc-infra](https://github.com/nfraxio/svc-infra) for a complete backend:
+Use with [svc-infra](https://github.com/nfraxlab/svc-infra) for a complete backend:
 
 ```python
 from fastapi import FastAPI
@@ -306,7 +306,7 @@ This separation keeps financial logic clean and portable.
 ## Running Examples
 
 ```bash
-git clone https://github.com/nfraxio/fin-infra.git
+git clone https://github.com/nfraxlab/fin-infra.git
 cd fin-infra
 poetry install
 
@@ -327,9 +327,9 @@ fin-infra is part of the **nfrax** infrastructure suite:
 
 | Package | Purpose |
 |---------|---------|
-| **[fin-infra](https://github.com/nfraxio/fin-infra)** | Financial infrastructure (banking, portfolio, insights) |
-| **[svc-infra](https://github.com/nfraxio/svc-infra)** | Backend infrastructure (auth, billing, jobs, webhooks) |
-| **[ai-infra](https://github.com/nfraxio/ai-infra)** | AI/LLM infrastructure (agents, tools, RAG, MCP) |
+| **[fin-infra](https://github.com/nfraxlab/fin-infra)** | Financial infrastructure (banking, portfolio, insights) |
+| **[svc-infra](https://github.com/nfraxlab/svc-infra)** | Backend infrastructure (auth, billing, jobs, webhooks) |
+| **[ai-infra](https://github.com/nfraxlab/ai-infra)** | AI/LLM infrastructure (agents, tools, RAG, MCP) |
 
 ## License
 
@@ -339,9 +339,9 @@ MIT License - use it for anything.
 
 <div align="center">
 
-**Built by [nfraxio](https://github.com/nfraxio)**
+**Built by [nfraxlab](https://github.com/nfraxlab)**
 
-[Star us on GitHub](https://github.com/nfraxio/fin-infra) | [View on PyPI](https://pypi.org/project/fin-infra/)
+[Star us on GitHub](https://github.com/nfraxlab/fin-infra) | [View on PyPI](https://pypi.org/project/fin-infra/)
 
 </div>
 

{fin_infra-0.1.55.dist-info → fin_infra-0.1.57.dist-info}/RECORD

@@ -12,7 +12,7 @@ fin_infra/analytics/savings.py,sha256=tavIRZtu9FjCm-DeWg5f060GcsdgD-cl-vgKOnieOU
 fin_infra/analytics/scenarios.py,sha256=LE_dZVkbxxAx5sxitGhiOhZfWTlYtVbIvS9pEXkijLc,12246
 fin_infra/analytics/spending.py,sha256=ypgL52JOsneTsFa2_aFB9fVuu9QWQsImQYChtECeA4Y,25833
 fin_infra/banking/__init__.py,sha256=wva1SEyrH2po79YycQ_00ZyC2tVeuO3uYcyvudOW484,22267
-fin_infra/banking/history.py,sha256=NvPwcP_phNbyA3bFejasocm1UjoX5pSbgdpEbbhni4g,9360
+fin_infra/banking/history.py,sha256=1ufAwkTnXr-QJetFzJl4xA2e3dqd1-TkT8pf46MNfho,10630
 fin_infra/banking/utils.py,sha256=B2ebnTeUz-56l8XMBWnf2txFOr0bXIo3cKPio7_bhc4,15711
 fin_infra/brokerage/__init__.py,sha256=RB0wbVlxM9PCbWUezzjrOf19JucVDpCvNlT62LoMzho,17023
 fin_infra/budgets/__init__.py,sha256=3VTYU_OdqblYiP5fjHHiw3m-FSj5trPz7XVTb3f3rBc,4106
@@ -85,7 +85,7 @@ fin_infra/investments/models.py,sha256=NHnkvtMa1QYp_TpuuqT4u3cWEJi3OhW-1e-orMuR4
 fin_infra/investments/providers/__init__.py,sha256=V1eIzz6EnGJ-pq-9L3S2-evmcExF-YdZfd5P6JMyDtc,383
 fin_infra/investments/providers/base.py,sha256=cONlsu_z4eSpgzv5ky0-kjWarrC-KYd4tgaghSnarYg,9826
 fin_infra/investments/providers/plaid.py,sha256=OKzLNPAcBiZlqBRCOeaBogB5fvHdvlRpPuGHKvRGS2E,18069
-fin_infra/investments/providers/snaptrade.py,sha256=No7KgJ31r831Z1QoHLuKwRcfiGEiN9mkQsWvkMfqkZo,23047
+fin_infra/investments/providers/snaptrade.py,sha256=IUgXoI7UCBXOAxn2J62cOiQSW02sujqEk47nb638264,23508
 fin_infra/investments/scaffold_templates/README.md,sha256=PhgxfMLrro2Jz83b7XEnBi7lexiWKqlMrd2UU2Rbs8A,12149
 fin_infra/investments/scaffold_templates/__init__.py,sha256=iR0oiAzXFYXHBnVJjaEnAzk6omncYOLg0TKMJ7xomBc,82
 fin_infra/investments/scaffold_templates/models.py.tmpl,sha256=5inP5-jw-qEfPYxSN71tn4AojZ9PesOIeuHTw181N-c,5849
@@ -93,14 +93,14 @@ fin_infra/investments/scaffold_templates/repository.py.tmpl,sha256=XwOEpQZfuXut1
 fin_infra/investments/scaffold_templates/schemas.py.tmpl,sha256=knWmn-Kyr7AdgPD4ZPMb6T49ZuPXeuOMqmjYNyA0CA0,5451
 fin_infra/markets/__init__.py,sha256=mStcYiA4dq2yHEyStZyOLd-KkW-Jf657l8NSLLa_MU8,9512
 fin_infra/models/__init__.py,sha256=q3SkGzDGFkoAMxwqJw8i4cHWt5NGU5ypjOgntxDGVKo,860
-fin_infra/models/accounts.py,sha256=M5lgX3r1_PbN-UVNY78P6UhPtxp8Hd3uO2rr9EO7v1Q,551
+fin_infra/models/accounts.py,sha256=PeobjGg6WM70OvOTe0JIo0zo7tBM0PDAcyClQT-Jo4o,1141
 fin_infra/models/brokerage.py,sha256=z6Zyf0N5zmmXtrN2y_4fNmtIP5wNq40H8lrHLBwY7rc,8311
 fin_infra/models/candle.py,sha256=7vrDxR1JFZodMUG8OGB0ft1_oaGW16gZtawjZ_2OwhA,535
 fin_infra/models/credit.py,sha256=rSdSURsMe9_i2gxmwPTDwNQWOuM2zutL-OhvHsnbtmw,12144
 fin_infra/models/money.py,sha256=5BX8IQZkrNtjjnGIQAK2tyKnVim0R-yc1F_EBxUhcr0,400
 fin_infra/models/quotes.py,sha256=_2cDJS8_RLo4tLpJlqWd32J8uFNP0bbf1V_0u3NuLwo,543
 fin_infra/models/tax.py,sha256=lhNVIW650CdtpfgmSyMMJdojV7QnpHOUFQKiwMLTT4A,15656
-fin_infra/models/transactions.py,sha256=uBwxdlZh7tyIkqfQZggPZuMDpDRLhI8SeXwKZZgg4LU,318
+fin_infra/models/transactions.py,sha256=zlu7Ath91ZmqQWKn8Bd_iV_XreWTDXFWJyfTTZ3J-ss,828
 fin_infra/net_worth/__init__.py,sha256=EjEuHNg8gEfFwbfko1-o5j-gSUZ2FcO9h7l05C-zAJM,3101
 fin_infra/net_worth/add.py,sha256=5xYy2L5hEEPiQNF79i-ArWVztLXk2XM97DoZYNWGAz8,23100
 fin_infra/net_worth/aggregator.py,sha256=grif-N8qk77L_JQ4IlcOJaKKP1qpxel0lIV_ll3HgjI,12646
@@ -128,7 +128,7 @@ fin_infra/providers/banking/base.py,sha256=KeNU4ur3zLKHVsBF1LQifcs2AKX06IEE-Rx_S
 fin_infra/providers/banking/plaid_client.py,sha256=q0JuU5ULYc2V-RoZGiJQSAprymcsSlJMGmildH0aHDg,6302
 fin_infra/providers/banking/teller_client.py,sha256=r4apwTNt8FJ2Rn2bC97orzaVYFkE0yMXXl--H5rtph0,9800
 fin_infra/providers/base.py,sha256=icMIQ6kmIvN15bkpDCR6C4DC2GaO-oMiFsaUsoWsRag,3303
-fin_infra/providers/brokerage/alpaca.py,sha256=f3mnsNxJ_daxuaHVmIhv8PZNnehf_LTulw1qoS4OEnc,9361
+fin_infra/providers/brokerage/alpaca.py,sha256=eOzdRp45_VeD1r_2k0IudxFn0IRhGogn-htF5IJVKnk,9862
 fin_infra/providers/brokerage/base.py,sha256=JJFH0Cqca4Rg4rmxfiwcQt-peRoBf4JpG3g6jx8DVks,106
 fin_infra/providers/credit/experian.py,sha256=hNEVqmCaPT72NHV3Nw3sKOYPX0kIsl819ucqUc-7z2k,341
 fin_infra/providers/identity/stripe_identity.py,sha256=JQGJRuQdWP5dWDcROgtz1RrmpkytRv95H6Fn-x1kifU,501
@@ -173,8 +173,8 @@ fin_infra/utils/http.py,sha256=wgXo5amXyzAX49v_lRUvp4Xxq8nodX32CMJyWl6u89I,568
 fin_infra/utils/retry.py,sha256=VxT4ssP4r8Krl3KThvI-opPMhGCpZUCH4rUyit1LEUk,967
 fin_infra/utils.py,sha256=VxT4ssP4r8Krl3KThvI-opPMhGCpZUCH4rUyit1LEUk,967
 fin_infra/version.py,sha256=4t_crzhrLum--oyowUMxtjBTzUtWp7oRTF22ewEvJG4,49
-fin_infra-0.1.55.dist-info/LICENSE,sha256=wK-Ya7Ylxa38dSIZRhvNj1ZVLIrHC-BAI8v38PNADiA,1061
-fin_infra-0.1.55.dist-info/METADATA,sha256=DlpY7YlmpzWyadfFXqLxilIk2UNQTmTpKRCcZDAiOyI,10174
-fin_infra-0.1.55.dist-info/WHEEL,sha256=IYZQI976HJqqOpQU6PHkJ8fb3tMNBFjg-Cn-pwAbaFM,88
-fin_infra-0.1.55.dist-info/entry_points.txt,sha256=Sr1uikvALZMeKm-DIkeKG4L9c4SNqysXGO_IRF8_9eU,53
-fin_infra-0.1.55.dist-info/RECORD,,
+fin_infra-0.1.57.dist-info/LICENSE,sha256=wK-Ya7Ylxa38dSIZRhvNj1ZVLIrHC-BAI8v38PNADiA,1061
+fin_infra-0.1.57.dist-info/METADATA,sha256=QJ0u6cERtWUuLhAOPspw1HfUdW_bhPw4_wbawiYIaRs,10182
+fin_infra-0.1.57.dist-info/WHEEL,sha256=IYZQI976HJqqOpQU6PHkJ8fb3tMNBFjg-Cn-pwAbaFM,88
+fin_infra-0.1.57.dist-info/entry_points.txt,sha256=Sr1uikvALZMeKm-DIkeKG4L9c4SNqysXGO_IRF8_9eU,53
+fin_infra-0.1.57.dist-info/RECORD,,