fin-infra 0.7.0__py3-none-any.whl → 0.9.0__py3-none-any.whl

fin_infra/banking/__init__.py

@@ -28,6 +28,8 @@ Environment Variables:
     Teller:
         TELLER_CERTIFICATE_PATH: Path to certificate.pem file
         TELLER_PRIVATE_KEY_PATH: Path to private_key.pem file
+        TELLER_CERTIFICATE: Inline certificate PEM content (alternative to path)
+        TELLER_PRIVATE_KEY: Inline private key PEM content (alternative to path)
         TELLER_ENVIRONMENT: "sandbox" or "production" (default: sandbox)
 
     Plaid:
@@ -191,6 +193,8 @@ def easy_banking(provider: str = "teller", **config) -> BankingProvider:
             config = {
                 "cert_path": os.getenv("TELLER_CERTIFICATE_PATH"),
                 "key_path": os.getenv("TELLER_PRIVATE_KEY_PATH"),
+                "cert_content": os.getenv("TELLER_CERTIFICATE"),
+                "key_content": os.getenv("TELLER_PRIVATE_KEY"),
                 "environment": os.getenv("TELLER_ENVIRONMENT", "sandbox"),
             }
         elif provider == "plaid":

fin_infra/providers/banking/plaid_client.py

@@ -52,6 +52,12 @@ class PlaidClient(BankingProvider):
             client_id = client_id or settings.plaid_client_id
             secret = secret or settings.plaid_secret
             environment = environment or settings.plaid_env
+            self._products = settings.plaid_products
+        else:
+            # Use default products when no settings object provided
+            from ...settings import DEFAULT_PLAID_PRODUCTS
+
+            self._products = DEFAULT_PLAID_PRODUCTS
 
         # Map environment string to Plaid Environment enum
         # Note: Plaid only has Sandbox and Production (no Development in SDK)
@@ -105,15 +111,11 @@ class PlaidClient(BankingProvider):
             # Don't include products - Plaid uses existing item's products
             request_params["access_token"] = access_token
         else:
-            # New connection: specify products to enable
-            request_params["products"] = [
-                Products("auth"),  # Account/routing numbers for ACH
-                Products("transactions"),  # Transaction history
-                Products("liabilities"),  # Credit cards, loans, student loans
-                Products("investments"),  # Brokerage, retirement accounts
-                Products("assets"),  # Asset reports for lending/verification
-                Products("identity"),  # Account holder info (name, email, phone)
-            ]
+            # New connection: specify products from settings
+            # Configurable via PLAID_PRODUCTS env var (comma-separated)
+            # Default: auth,transactions,investments (excludes costly unused products)
+            product_list = [Products(p.strip()) for p in self._products.split(",") if p.strip()]
+            request_params["products"] = product_list
 
         request = LinkTokenCreateRequest(**request_params)
         response = self.client.link_token_create(request)

fin_infra/providers/banking/teller_client.py

@@ -52,25 +52,42 @@ class TellerClient(BankingProvider):
         self,
         cert_path: str | None = None,
         key_path: str | None = None,
+        cert_content: str | None = None,
+        key_content: str | None = None,
         environment: str = "sandbox",
         timeout: float = 30.0,
     ) -> None:
         """Initialize TellerClient banking provider.
 
         Args:
-            cert_path: Path to certificate.pem file (required for real usage)
-            key_path: Path to private_key.pem file (required for real usage)
+            cert_path: Path to certificate.pem file
+            key_path: Path to private_key.pem file
+            cert_content: Inline certificate PEM content (alternative to cert_path)
+            key_content: Inline private key PEM content (alternative to key_path)
             environment: "sandbox" or "production" (default: sandbox)
             timeout: HTTP request timeout in seconds (default: 30.0)
 
+        Note:
+            Either (cert_path, key_path) or (cert_content, key_content) must be provided
+            for production. The inline content options are useful for Railway/Vercel
+            where env vars are preferred over mounted files.
+
         Raises:
-            ValueError: If cert/key paths are missing in production environment
+            ValueError: If cert/key are missing in production environment
         """
-        if environment == "production" and (not cert_path or not key_path):
-            raise ValueError("cert_path and key_path are required for production environment")
+        has_file_creds = cert_path and key_path
+        has_inline_creds = cert_content and key_content
+
+        if environment == "production" and not (has_file_creds or has_inline_creds):
+            raise ValueError(
+                "Either (cert_path, key_path) or (cert_content, key_content) "
+                "are required for production environment"
+            )
 
         self.cert_path = cert_path
         self.key_path = key_path
+        self.cert_content = cert_content
+        self.key_content = key_content
         self.environment = environment
         self.timeout = timeout
 
@@ -81,18 +98,36 @@ class TellerClient(BankingProvider):
             self.base_url = "https://api.teller.io"
 
         # Create HTTP client with mTLS certificate authentication
-        client_kwargs = {
+        client_kwargs: dict = {
             "base_url": self.base_url,
             "timeout": timeout,
             "headers": {"User-Agent": "fin-infra/1.0"},
         }
 
         # Add certificate using SSL context (recommended approach, not deprecated)
-        if cert_path and key_path:
-            # Create SSL context with client certificate
+        if has_file_creds:
+            # Use file paths directly (assertions for type narrowing)
+            assert cert_path is not None
+            assert key_path is not None
             ssl_context = ssl.create_default_context()
             ssl_context.load_cert_chain(certfile=cert_path, keyfile=key_path)
             client_kwargs["verify"] = ssl_context
+        elif has_inline_creds:
+            # Write inline content to temp files for SSL context (assertions for type narrowing)
+            assert cert_content is not None
+            assert key_content is not None
+            import tempfile
+
+            self._cert_file = tempfile.NamedTemporaryFile(mode="w", suffix=".pem", delete=False)
+            self._key_file = tempfile.NamedTemporaryFile(mode="w", suffix=".pem", delete=False)
+            self._cert_file.write(cert_content)
+            self._key_file.write(key_content)
+            self._cert_file.close()
+            self._key_file.close()
+
+            ssl_context = ssl.create_default_context()
+            ssl_context.load_cert_chain(certfile=self._cert_file.name, keyfile=self._key_file.name)
+            client_kwargs["verify"] = ssl_context
 
         # Create client with explicit parameters to satisfy type checker
         self.client = httpx.Client(

fin_infra/recurring/insights.py

@@ -331,7 +331,7 @@ class SubscriptionInsightsGenerator:
         cache_key = self._make_cache_key(subscriptions, user_id)
 
         try:
-            await self.cache.set(cache_key, result.model_dump(), ttl=self.cache_ttl)
+            await self.cache.set(cache_key, result.model_dump(), expire=self.cache_ttl)
         except Exception as e:
             logger.warning(f"Cache set failed for insights: {e}")
 

fin_infra/recurring/normalizers.py

@@ -318,7 +318,7 @@ class MerchantNormalizer:
         cache_key = self._make_cache_key(merchant_name)
 
         try:
-            await self.cache.set(cache_key, result.model_dump(), ttl=self.cache_ttl)
+            await self.cache.set(cache_key, result.model_dump(), expire=self.cache_ttl)
         except Exception as e:
             logger.warning(f"Cache set failed for '{merchant_name}': {e}")
 

fin_infra/settings.py

@@ -5,6 +5,13 @@ from functools import lru_cache
 from pydantic import Field
 from pydantic_settings import BaseSettings, SettingsConfigDict
 
+# Default products: only the ones we actually use
+# auth: Account/routing numbers for ACH
+# transactions: Transaction history
+# investments: Brokerage, retirement accounts
+# Excluded: identity, liabilities, assets (not used, cost extra per API call)
+DEFAULT_PLAID_PRODUCTS = "auth,transactions,investments"
+
 
 class Settings(BaseSettings):
     # Cache / infra
@@ -14,6 +21,7 @@ class Settings(BaseSettings):
     plaid_client_id: str | None = Field(default=None, alias="PLAID_CLIENT_ID")
     plaid_secret: str | None = Field(default=None, alias="PLAID_SECRET")
     plaid_env: str = Field(default="sandbox", alias="PLAID_ENVIRONMENT")
+    plaid_products: str = Field(default=DEFAULT_PLAID_PRODUCTS, alias="PLAID_PRODUCTS")
 
     # Alpaca
     alpaca_api_key: str | None = Field(default=None, alias="ALPACA_API_KEY")

{fin_infra-0.7.0.dist-info → fin_infra-0.9.0.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.3
 Name: fin-infra
-Version: 0.7.0
+Version: 0.9.0
 Summary: Financial infrastructure toolkit: banking connections, market data, credit, cashflows, and brokerage integrations
 License: MIT
 Keywords: finance,banking,plaid,brokerage,markets,credit,tax,cashflow,fintech,infra

{fin_infra-0.7.0.dist-info → fin_infra-0.9.0.dist-info}/RECORD

@@ -13,7 +13,7 @@ fin_infra/analytics/rebalancing_llm.py,sha256=gniB_tIahrYNZEodIZ02uXo6VLJQgq_sGz
 fin_infra/analytics/savings.py,sha256=n3rGNFP8TU5mW-uz9kOuqX_mDiVnDyAeDN06Q7Abotw,7570
 fin_infra/analytics/scenarios.py,sha256=LE_dZVkbxxAx5sxitGhiOhZfWTlYtVbIvS9pEXkijLc,12246
 fin_infra/analytics/spending.py,sha256=ogLcfF5ZOLMkBIj02RISnA3hiY_PsLWZ2_AAzA7FenY,26209
-fin_infra/banking/__init__.py,sha256=Lt82vzUZUmekNi_abWz5ySvZlO64FVefd05RAxEd4gU,24537
+fin_infra/banking/__init__.py,sha256=ZkWhm9QsKyYYKZ4VJ6sw0HjFdUkO9-mTYtPpUXsJjuQ,24828
 fin_infra/banking/history.py,sha256=YB-v9A03IZ_qki6A6mA-RO5Y4imlqk1CyP0W482ufdQ,10563
 fin_infra/banking/utils.py,sha256=HhxZbeaA8zqVttgMiJGnShTo_r_0DaD7T3IMq8n8340,15252
 fin_infra/brokerage/__init__.py,sha256=IXm5ko5T607LodexYSbKNZc6I_2CQGaOwQUlb-w9-ks,17137
@@ -128,8 +128,8 @@ fin_infra/obs/__init__.py,sha256=kMMVl0fdwtJtZeKiusTuw0iO61Jo9-HNXsLmn3ffLRE,631
 fin_infra/obs/classifier.py,sha256=S7kSphgHN1O4GiMUdr3IjuXpoXU0XgGq132_U-njXX4,5153
 fin_infra/providers/__init__.py,sha256=jxhQm79T6DVXf7Wpy7luL-p50cE_IMUbjt4o3apzJQU,768
 fin_infra/providers/banking/base.py,sha256=KeNU4ur3zLKHVsBF1LQifcs2AKX06IEE-Rx_SetFeAs,102
-fin_infra/providers/banking/plaid_client.py,sha256=6yaXbPxg4QvebZAXyUFUthBIAN1EuXN59BnmTi69n0U,7374
-fin_infra/providers/banking/teller_client.py,sha256=4chf7fQIybp-sgOWOiW9uJfMq31A9KMPcyMfn0Yi_IY,10752
+fin_infra/providers/banking/plaid_client.py,sha256=7g6G427Czwwl3cN_Mdk_7DwEoVTKO7ShyDr-gle6dNM,7430
+fin_infra/providers/banking/teller_client.py,sha256=c8wT0M0jLHdgxCxeNnJ7X9S8-qITUHEdd3oTWe_6z1U,12371
 fin_infra/providers/base.py,sha256=T8XoHTc3SY30XibfrS4eAMXTujgY8s2mJjBeKzscgDo,9037
 fin_infra/providers/brokerage/alpaca.py,sha256=BObiI_dFQZ3fOpTfmZMkri8sVrsz5uW6i5ZVUb0etCU,9923
 fin_infra/providers/brokerage/base.py,sha256=JJFH0Cqca4Rg4rmxfiwcQt-peRoBf4JpG3g6jx8DVks,106
@@ -151,10 +151,10 @@ fin_infra/recurring/add.py,sha256=l_VsqJNAs-s5VZ7WFA3wfXJtjib2eqBhMJofTYgDR2w,19
 fin_infra/recurring/detector.py,sha256=MCq_48V6o9Ig9lTTHM054KNh2I_udEjWBmV_iF361ac,20131
 fin_infra/recurring/detectors_llm.py,sha256=2EMBQTIHvmxJR6gqvhlg6VNj2-eDTJiJULMxTCZMnJw,11481
 fin_infra/recurring/ease.py,sha256=jaBFMul1LxjY2TAkSsmyaK6Kkflj8EfxwWPbyRGA8mw,11151
-fin_infra/recurring/insights.py,sha256=-nNrXHUMnUXo7yvKktNAoUabK8XuJirL7ntVr7FAgEc,15921
+fin_infra/recurring/insights.py,sha256=y12bCqzjSXNljMmegrrWDUhBBakB_kPsM2JrcjxczlY,15924
 fin_infra/recurring/models.py,sha256=o0N8G-QhVb4zILEyry6M1VZ7liFJIOHwlejvn6p4K8M,8894
 fin_infra/recurring/normalizer.py,sha256=sU4qCJ7_wVDugY0R0Td63Ol8asJNpMOHAPX92J9XJhY,9754
-fin_infra/recurring/normalizers.py,sha256=1k1sbvWlo_wKn1luZgOVxcrDwRRZDul6X8sp_Pz_dkU,15970
+fin_infra/recurring/normalizers.py,sha256=ZCpk0KCaCvoy1jxydAb8WEULBBLFMmZKNZydz0znsks,15973
 fin_infra/recurring/summary.py,sha256=wQshznaswIbGUPIMyayubRcRfUvVNBtyzmYx50-nqs0,14621
 fin_infra/scaffold/__init__.py,sha256=IfL_CHHMpQB1efqY37BlIu07356tLaeVI2Mv3C0qYDs,827
 fin_infra/scaffold/budgets.py,sha256=qLnyPh-a-ZrslstaxRtR__Bpwlz0EncSdVnCM7fDBI4,9481
@@ -167,7 +167,7 @@ fin_infra/security/models.py,sha256=s8dsvpxP-7DThUZl3Fvr3S6KVAfL5r3TKcd4uj_hCTE,
 fin_infra/security/pii_filter.py,sha256=DF95mSMkk8CTGAEYtEnR-CCoOIUwE7D-9voQ-Koa3j4,8297
 fin_infra/security/pii_patterns.py,sha256=SM-o7cL6NdgkOmtBedsN2nJZ5QPbeYehZdYmAujk8Y8,3070
 fin_infra/security/token_store.py,sha256=FsfoAkIMQ2NRfkBuyG1eH30nnfO3w_V5tDPAZwUj9Os,6041
-fin_infra/settings.py,sha256=11JgIhjGwWnwixV-hveEWpoWd_JC0ixLnOQoLWCiwNo,1387
+fin_infra/settings.py,sha256=bSRb8U1gRyHiG36lxnzeETDI8soTDeJZlG-h6mUKJKM,1783
 fin_infra/tax/__init__.py,sha256=U0EUKQwbDqnAYwU8WRx6AD07TaB-ELdKGISOQ-904lw,6103
 fin_infra/tax/add.py,sha256=d17Zuoi-xMjuJNykDHzQXnAUVzd_41BUMHQdqm23jJ8,14547
 fin_infra/tax/tlh.py,sha256=rUglLeq09XxEbC2W7aJ9G0E8kj9g5QdG4ymSL4z8RK0,21477
@@ -176,8 +176,8 @@ fin_infra/utils/deprecation.py,sha256=DTcqv7ECnrWOOwoA07JOnRci4Hqqo9YtKSSmoS-DVP
 fin_infra/utils/http.py,sha256=rDEgYsEBrEe75ml5RA-iSs3xeU5W-3j-czJlT7WbrM4,632
 fin_infra/utils/retry.py,sha256=YiyTgy26eJ1ah7fE2_-ZPa4hv4bIT4OzjYolkNWb5j0,1057
 fin_infra/version.py,sha256=4t_crzhrLum--oyowUMxtjBTzUtWp7oRTF22ewEvJG4,49
-fin_infra-0.7.0.dist-info/LICENSE,sha256=wK-Ya7Ylxa38dSIZRhvNj1ZVLIrHC-BAI8v38PNADiA,1061
-fin_infra-0.7.0.dist-info/METADATA,sha256=v4dpkuG3id_UQEdZV4akwWdE4qTLWrcaK6-l2QaF0XQ,11050
-fin_infra-0.7.0.dist-info/WHEEL,sha256=IYZQI976HJqqOpQU6PHkJ8fb3tMNBFjg-Cn-pwAbaFM,88
-fin_infra-0.7.0.dist-info/entry_points.txt,sha256=Sr1uikvALZMeKm-DIkeKG4L9c4SNqysXGO_IRF8_9eU,53
-fin_infra-0.7.0.dist-info/RECORD,,
+fin_infra-0.9.0.dist-info/LICENSE,sha256=wK-Ya7Ylxa38dSIZRhvNj1ZVLIrHC-BAI8v38PNADiA,1061
+fin_infra-0.9.0.dist-info/METADATA,sha256=Eqq4udbYHk5y0SkRm0wa_AK44_HpAbh2oGaymDV0UY8,11050
+fin_infra-0.9.0.dist-info/WHEEL,sha256=IYZQI976HJqqOpQU6PHkJ8fb3tMNBFjg-Cn-pwAbaFM,88
+fin_infra-0.9.0.dist-info/entry_points.txt,sha256=Sr1uikvALZMeKm-DIkeKG4L9c4SNqysXGO_IRF8_9eU,53
+fin_infra-0.9.0.dist-info/RECORD,,