romania-mcp-server 0.1.0__tar.gz

romania_mcp_server-0.1.0/.github/workflows/publish.yml

@@ -0,0 +1,67 @@
+name: publish
+
+on:
+  push:
+    tags: ["v*"]
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v7
+      - uses: actions/setup-python@v7
+        with:
+          python-version: "3.12"
+
+      - name: check tag matches version
+        run: |
+          tag="${GITHUB_REF_NAME#v}"
+          py=$(python -c "import tomllib; print(tomllib.load(open('pyproject.toml','rb'))['project']['version'])")
+          js=$(python -c "import json; print(json.load(open('server.json'))['version'])")
+          echo "tag=$tag pyproject=$py server.json=$js"
+          [ "$tag" = "$py" ] && [ "$tag" = "$js" ]
+
+      - run: pip install -e . pytest build
+      - run: pytest
+      - run: python -m build
+      - uses: actions/upload-artifact@v7
+        with:
+          name: dist
+          path: dist/
+
+  pypi:
+    needs: build
+    runs-on: ubuntu-latest
+    environment: pypi
+    permissions:
+      id-token: write
+    steps:
+      - uses: actions/download-artifact@v8
+        with:
+          name: dist
+          path: dist/
+      - uses: pypa/gh-action-pypi-publish@release/v1
+
+  mcp-registry:
+    needs: pypi
+    runs-on: ubuntu-latest
+    permissions:
+      id-token: write
+      contents: read
+    steps:
+      - uses: actions/checkout@v7
+
+      - name: install mcp-publisher
+        run: |
+          curl -L "https://github.com/modelcontextprotocol/registry/releases/latest/download/mcp-publisher_$(uname -s | tr '[:upper:]' '[:lower:]')_$(uname -m | sed 's/x86_64/amd64/;s/aarch64/arm64/').tar.gz" | tar xz mcp-publisher
+
+      - run: ./mcp-publisher login github-oidc
+
+      # pypi can take a moment before the new version shows up in its api
+      - name: publish
+        run: |
+          for i in 1 2 3 4 5; do
+            ./mcp-publisher publish && exit 0
+            sleep 20
+          done
+          exit 1

romania_mcp_server-0.1.0/.github/workflows/tests.yml

@@ -0,0 +1,21 @@
+name: tests
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+
+jobs:
+  test:
+    runs-on: ubuntu-latest
+    strategy:
+      fail-fast: false
+      matrix:
+        python: ["3.10", "3.12", "3.14"]
+    steps:
+      - uses: actions/checkout@v7
+      - uses: actions/setup-python@v7
+        with:
+          python-version: ${{ matrix.python }}
+      - run: pip install -e . pytest
+      - run: pytest -v

romania_mcp_server-0.1.0/.gitignore

@@ -0,0 +1,9 @@
+__pycache__/
+*.pyc
+.venv/
+venv/
+dist/
+build/
+*.egg-info/
+.pytest_cache/
+.env

romania_mcp_server-0.1.0/CHANGELOG.md

@@ -0,0 +1,5 @@
+# Changelog
+
+## 0.1.0
+
+First release: `shop_check`, `company_lookup`, `company_financials`, `court_cases`, `exchange_rate`, `iban_check`.

romania_mcp_server-0.1.0/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Robert Vind-Gardoș
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

romania_mcp_server-0.1.0/PKG-INFO

@@ -0,0 +1,137 @@
+Metadata-Version: 2.5
+Name: romania-mcp-server
+Version: 0.1.0
+Summary: MCP server for Romanian public data: ANAF company status, financial statements, court cases, BNR exchange rates, online shop checks
+Project-URL: Repository, https://github.com/robyroro/romania-mcp
+Project-URL: Author, https://stratagency.ro/en/robert-vind-gardos
+Author: Robert Vind-Gardoș
+License-Expression: MIT
+License-File: LICENSE
+Keywords: anaf,bnr,claude,cui,e-factura,mcp,portal-just,romania
+Classifier: Natural Language :: Romanian
+Classifier: Programming Language :: Python :: 3
+Classifier: Topic :: Office/Business :: Financial :: Accounting
+Requires-Python: >=3.10
+Requires-Dist: httpx>=0.27
+Requires-Dist: mcp>=2.0
+Description-Content-Type: text/markdown
+
+# romania-mcp
+
+[![tests](https://github.com/robyroro/romania-mcp/actions/workflows/tests.yml/badge.svg)](https://github.com/robyroro/romania-mcp/actions/workflows/tests.yml)
+[![PyPI](https://img.shields.io/pypi/v/romania-mcp-server)](https://pypi.org/project/romania-mcp-server/)
+
+MCP server for Romanian public data. Lets Claude (or any MCP client) check a company at ANAF, read its financial statements, find its court cases, get BNR exchange rates, validate IBANs, and put all of it together to tell you if an online shop looks like a scam. No API keys, everything comes from official public sources.
+
+> **Pe scurt:** verifici o firmă după CUI (activă, radiată, inactivă fiscal, plătitoare de TVA), îi vezi bilanțurile, dosarele din instanță și cursul BNR, direct din Claude. Și îl poți întreba „e țeapă magazinul ăsta?”.
+
+## Tools
+
+| tool | what it does | source |
+|---|---|---|
+| `shop_check` | is this online shop legit? reads the CUI off the site, checks the company, its financials, insolvency cases and how old the site is, returns red flags / warnings / good signs | everything below + Wayback Machine |
+| `company_lookup` | status of up to 500 companies by CUI: name, address, Reg. Com. number, CAEN, deregistered, VAT registered, VAT on collection, split VAT, fiscally inactive, e-Factura registry. optionally as of a past date | ANAF |
+| `company_financials` | filed balance sheets year by year: revenue, profit/loss, employees, debts, equity, cash | ANAF |
+| `court_cases` | cases in every Romanian court by party name or case number: stage, parties and roles, latest outcome, next hearing, insolvency as debtor | Portal Just |
+| `exchange_rate` | BNR reference rate for any day since 2005, with conversion | BNR |
+| `iban_check` | is an IBAN well formed, which Romanian bank issued it, is it a Treasury account | offline |
+
+## Install
+
+Needs Python 3.10+.
+
+```
+pip install romania-mcp-server
+```
+
+or if you use uv you don't need to install anything, just point the client at `uvx` (see below).
+
+### Claude Desktop
+
+Add this to `claude_desktop_config.json`:
+
+```json
+{
+  "mcpServers": {
+    "romania": {
+      "command": "uvx",
+      "args": ["romania-mcp-server"]
+    }
+  }
+}
+```
+
+If you installed with pip, `"command": "romania-mcp-server"` with no args works too.
+
+### Claude Code
+
+```
+claude mcp add romania -- uvx romania-mcp-server
+```
+
+Cursor, Windsurf etc. take the same JSON as Claude Desktop.
+
+## Example prompts
+
+- "e țeapă magazinul ăsta? https://..."
+- "here are my 40 suppliers' CUIs, which ones are fiscally inactive or deregistered?"
+- "was RO18547290 VAT registered on 15.03.2016?"
+- "how did 14399840 do in the last 5 years? revenue, profit, employees"
+- "does Foo Trade SRL have any insolvency cases? when's the next hearing?"
+- "cât fac 2.450 EUR în lei la cursul BNR din 14 martie 2025?"
+- "is this IBAN right? RO49 AAAA 1B31 0075 9384 0000"
+
+## How `shop_check` decides
+
+It's a list of signals, not a verdict from above:
+
+- **red flags** (risk = high): no CUI anywhere on the site, CUI unknown to ANAF, company deregistered or fiscally inactive, company is the debtor in an insolvency case
+- **warnings** (two or more = medium): company or site younger than a few months, never archived by the Wayback Machine, no financial statements, zero revenue or employees, negative equity, no ANPC link, the company name ANAF returns never appears on the site (scam shops sometimes copy a real company's CUI)
+- **good signs**: company and site have been around for years, real revenue and employees, ANPC links present
+
+It can't see reviews, delivery times or whether the products exist, so a "low" doesn't mean the shop is good, just that the company behind it checks out.
+
+## Caching
+
+Responses are cached in sqlite at `~/.cache/romania-mcp/cache.sqlite3` so ANAF and friends don't get asked the same thing twice: company status 6h, financials 24h, court cases 3h, current exchange rates 1h, past years' rates 30 days.
+
+```
+ROMANIA_MCP_CACHE=off           # disable
+ROMANIA_MCP_CACHE_PATH=/tmp/x.db
+```
+
+## Notes
+
+- ANAF only searches by CUI, not by company name. Name search would need the ONRC dataset, maybe later.
+- ANAF asks for at most one request per second. The server spaces requests out, so 500 CUIs take about 5 seconds and 5 years of financials about 5.
+- Financial statements for a year are filed by mid next year, and some companies only have data from around 2020 on.
+- Portal Just's API only answers over plain http (their https is broken), and caps a search at 1000 cases.
+- `.ro` domains have no public RDAP and ROTLD's whois terms forbid automated queries, so for `.ro` shops the site age comes from the Wayback Machine only.
+- `iban_check` knows the main Romanian banks. A valid IBAN doesn't prove who owns the account.
+
+## Development
+
+```
+git clone https://github.com/robyroro/romania-mcp
+cd romania-mcp
+pip install -e . pytest
+pytest
+```
+
+Tests don't hit the network, HTTP calls are mocked.
+
+To poke at it with the MCP inspector:
+
+```
+npx @modelcontextprotocol/inspector romania-mcp
+```
+
+## Be reasonable
+
+All of this is public data, but court records name real people. Use it to vet companies you do business with, not to dig into individuals.
+
+## License
+
+MIT © [Robert Vind-Gardoș](https://stratagency.ro/en/robert-vind-gardos) ([@robyroro](https://github.com/robyroro))
+
+<!-- mcp-name: io.github.robyroro/romania-mcp -->

romania_mcp_server-0.1.0/README.md

@@ -0,0 +1,119 @@
+# romania-mcp
+
+[![tests](https://github.com/robyroro/romania-mcp/actions/workflows/tests.yml/badge.svg)](https://github.com/robyroro/romania-mcp/actions/workflows/tests.yml)
+[![PyPI](https://img.shields.io/pypi/v/romania-mcp-server)](https://pypi.org/project/romania-mcp-server/)
+
+MCP server for Romanian public data. Lets Claude (or any MCP client) check a company at ANAF, read its financial statements, find its court cases, get BNR exchange rates, validate IBANs, and put all of it together to tell you if an online shop looks like a scam. No API keys, everything comes from official public sources.
+
+> **Pe scurt:** verifici o firmă după CUI (activă, radiată, inactivă fiscal, plătitoare de TVA), îi vezi bilanțurile, dosarele din instanță și cursul BNR, direct din Claude. Și îl poți întreba „e țeapă magazinul ăsta?”.
+
+## Tools
+
+| tool | what it does | source |
+|---|---|---|
+| `shop_check` | is this online shop legit? reads the CUI off the site, checks the company, its financials, insolvency cases and how old the site is, returns red flags / warnings / good signs | everything below + Wayback Machine |
+| `company_lookup` | status of up to 500 companies by CUI: name, address, Reg. Com. number, CAEN, deregistered, VAT registered, VAT on collection, split VAT, fiscally inactive, e-Factura registry. optionally as of a past date | ANAF |
+| `company_financials` | filed balance sheets year by year: revenue, profit/loss, employees, debts, equity, cash | ANAF |
+| `court_cases` | cases in every Romanian court by party name or case number: stage, parties and roles, latest outcome, next hearing, insolvency as debtor | Portal Just |
+| `exchange_rate` | BNR reference rate for any day since 2005, with conversion | BNR |
+| `iban_check` | is an IBAN well formed, which Romanian bank issued it, is it a Treasury account | offline |
+
+## Install
+
+Needs Python 3.10+.
+
+```
+pip install romania-mcp-server
+```
+
+or if you use uv you don't need to install anything, just point the client at `uvx` (see below).
+
+### Claude Desktop
+
+Add this to `claude_desktop_config.json`:
+
+```json
+{
+  "mcpServers": {
+    "romania": {
+      "command": "uvx",
+      "args": ["romania-mcp-server"]
+    }
+  }
+}
+```
+
+If you installed with pip, `"command": "romania-mcp-server"` with no args works too.
+
+### Claude Code
+
+```
+claude mcp add romania -- uvx romania-mcp-server
+```
+
+Cursor, Windsurf etc. take the same JSON as Claude Desktop.
+
+## Example prompts
+
+- "e țeapă magazinul ăsta? https://..."
+- "here are my 40 suppliers' CUIs, which ones are fiscally inactive or deregistered?"
+- "was RO18547290 VAT registered on 15.03.2016?"
+- "how did 14399840 do in the last 5 years? revenue, profit, employees"
+- "does Foo Trade SRL have any insolvency cases? when's the next hearing?"
+- "cât fac 2.450 EUR în lei la cursul BNR din 14 martie 2025?"
+- "is this IBAN right? RO49 AAAA 1B31 0075 9384 0000"
+
+## How `shop_check` decides
+
+It's a list of signals, not a verdict from above:
+
+- **red flags** (risk = high): no CUI anywhere on the site, CUI unknown to ANAF, company deregistered or fiscally inactive, company is the debtor in an insolvency case
+- **warnings** (two or more = medium): company or site younger than a few months, never archived by the Wayback Machine, no financial statements, zero revenue or employees, negative equity, no ANPC link, the company name ANAF returns never appears on the site (scam shops sometimes copy a real company's CUI)
+- **good signs**: company and site have been around for years, real revenue and employees, ANPC links present
+
+It can't see reviews, delivery times or whether the products exist, so a "low" doesn't mean the shop is good, just that the company behind it checks out.
+
+## Caching
+
+Responses are cached in sqlite at `~/.cache/romania-mcp/cache.sqlite3` so ANAF and friends don't get asked the same thing twice: company status 6h, financials 24h, court cases 3h, current exchange rates 1h, past years' rates 30 days.
+
+```
+ROMANIA_MCP_CACHE=off           # disable
+ROMANIA_MCP_CACHE_PATH=/tmp/x.db
+```
+
+## Notes
+
+- ANAF only searches by CUI, not by company name. Name search would need the ONRC dataset, maybe later.
+- ANAF asks for at most one request per second. The server spaces requests out, so 500 CUIs take about 5 seconds and 5 years of financials about 5.
+- Financial statements for a year are filed by mid next year, and some companies only have data from around 2020 on.
+- Portal Just's API only answers over plain http (their https is broken), and caps a search at 1000 cases.
+- `.ro` domains have no public RDAP and ROTLD's whois terms forbid automated queries, so for `.ro` shops the site age comes from the Wayback Machine only.
+- `iban_check` knows the main Romanian banks. A valid IBAN doesn't prove who owns the account.
+
+## Development
+
+```
+git clone https://github.com/robyroro/romania-mcp
+cd romania-mcp
+pip install -e . pytest
+pytest
+```
+
+Tests don't hit the network, HTTP calls are mocked.
+
+To poke at it with the MCP inspector:
+
+```
+npx @modelcontextprotocol/inspector romania-mcp
+```
+
+## Be reasonable
+
+All of this is public data, but court records name real people. Use it to vet companies you do business with, not to dig into individuals.
+
+## License
+
+MIT © [Robert Vind-Gardoș](https://stratagency.ro/en/robert-vind-gardos) ([@robyroro](https://github.com/robyroro))
+
+<!-- mcp-name: io.github.robyroro/romania-mcp -->

romania_mcp_server-0.1.0/glama.json

@@ -0,0 +1,4 @@
+{
+  "$schema": "https://glama.ai/mcp/schemas/server.json",
+  "maintainers": ["robyroro"]
+}

romania_mcp_server-0.1.0/pyproject.toml

@@ -0,0 +1,40 @@
+[project]
+name = "romania-mcp-server"
+version = "0.1.0"
+description = "MCP server for Romanian public data: ANAF company status, financial statements, court cases, BNR exchange rates, online shop checks"
+readme = "README.md"
+license = "MIT"
+authors = [{ name = "Robert Vind-Gardoș" }]
+requires-python = ">=3.10"
+keywords = ["mcp", "romania", "anaf", "cui", "bnr", "portal-just", "e-factura", "claude"]
+classifiers = [
+    "Programming Language :: Python :: 3",
+    "Natural Language :: Romanian",
+    "Topic :: Office/Business :: Financial :: Accounting",
+]
+dependencies = [
+    "mcp>=2.0",
+    "httpx>=0.27",
+]
+
+[project.urls]
+Repository = "https://github.com/robyroro/romania-mcp"
+Author = "https://stratagency.ro/en/robert-vind-gardos"
+
+[project.scripts]
+romania-mcp = "romania_mcp.server:main"
+# so `uvx romania-mcp-server` works without --from
+romania-mcp-server = "romania_mcp.server:main"
+
+[tool.hatch.build.targets.wheel]
+packages = ["src/romania_mcp"]
+
+[dependency-groups]
+dev = ["pytest>=8"]
+
+[build-system]
+requires = ["hatchling"]
+build-backend = "hatchling.build"
+
+[tool.pytest.ini_options]
+testpaths = ["tests"]

romania_mcp_server-0.1.0/server.json

@@ -0,0 +1,22 @@
+{
+  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
+  "name": "io.github.robyroro/romania-mcp",
+  "title": "Romania",
+  "description": "Romanian public data: ANAF company status, financials, court cases, BNR rates, shop checks",
+  "repository": {
+    "url": "https://github.com/robyroro/romania-mcp",
+    "source": "github"
+  },
+  "version": "0.1.0",
+  "packages": [
+    {
+      "registryType": "pypi",
+      "identifier": "romania-mcp-server",
+      "version": "0.1.0",
+      "runtimeHint": "uvx",
+      "transport": {
+        "type": "stdio"
+      }
+    }
+  ]
+}

romania_mcp_server-0.1.0/src/romania_mcp/__init__.py

@@ -0,0 +1 @@
+__version__ = "0.1.0"

romania_mcp_server-0.1.0/src/romania_mcp/__main__.py

@@ -0,0 +1,3 @@
+from .server import main
+
+main()

romania_mcp_server-0.1.0/src/romania_mcp/anaf.py

@@ -0,0 +1,219 @@
+"""ANAF public web services: the VAT payer registry (company status) and filed balance sheets."""
+
+import asyncio
+import time
+from datetime import date
+
+from .cache import cached, get_cache
+from .common import fold
+
+TVA_URL = "https://webservicesp.anaf.ro/api/PlatitorTvaRest/v9/tva"
+BILANT_URL = "https://webservicesp.anaf.ro/bilant"
+MAX_BATCH = 100  # ANAF's limit per request
+
+# ANAF asks for at most one request per second
+MIN_INTERVAL = 1.0
+_next_slot = 0.0
+
+
+async def _throttle():
+    global _next_slot
+    now = time.monotonic()
+    wait = _next_slot - now
+    _next_slot = max(now, _next_slot) + MIN_INTERVAL
+    if wait > 0:
+        await asyncio.sleep(wait)
+
+
+# --- CUI ---
+
+CUI_KEY = "753217532"
+
+
+def cui_checksum_ok(digits):
+    body, control = digits[:-1], int(digits[-1])
+    total = sum(int(d) * int(k) for d, k in zip(body, CUI_KEY[-len(body):]))
+    return total * 10 % 11 % 10 == control
+
+
+def clean_cui(value):
+    """'RO 14399840', 'ro14399840', 14399840 -> 14399840. ValueError if the control digit is off."""
+    s = str(value).strip().upper().replace(" ", "").removeprefix("RO")
+    if not s.isdigit() or not 2 <= len(s) <= 10:
+        raise ValueError(f"not a CUI: {value!r}")
+    if not cui_checksum_ok(s):
+        raise ValueError(f"{value!r} isn't a valid CUI, the control digit doesn't match")
+    return int(s)
+
+
+# --- company status (VAT registry) ---
+
+def _date(value):
+    return value or None
+
+
+def parse_company(item):
+    g = item.get("date_generale", {})
+    vat = item.get("inregistrare_scop_Tva", {})
+    vat_cash = item.get("inregistrare_RTVAI", {})
+    inactive = item.get("stare_inactiv", {})
+    split = item.get("inregistrare_SplitTVA", {})
+    status = g.get("stare_inregistrare") or ""
+
+    out = {
+        "cui": g.get("cui"),
+        "name": g.get("denumire"),
+        "registration_number": g.get("nrRegCom") or None,
+        "registered_on": _date(g.get("data_inregistrare")),
+        "status": status,
+        "deregistered": status.upper().startswith("RADIERE"),
+        "address": g.get("adresa"),
+        "county": item.get("adresa_sediu_social", {}).get("sdenumire_Judet") or None,
+        "caen": g.get("cod_CAEN") or None,
+        "legal_form": g.get("forma_juridica") or None,
+        "phone": g.get("telefon") or None,
+        "tax_office": g.get("organFiscalCompetent") or None,
+        "vat_registered": bool(vat.get("scpTVA")),
+        "vat_periods": [
+            {
+                "from": _date(p.get("data_inceput_ScpTVA")),
+                "to": _date(p.get("data_sfarsit_ScpTVA")),
+                "note": p.get("mesaj_ScpTVA") or None,
+            }
+            for p in vat.get("perioade_TVA") or []
+            if p.get("data_inceput_ScpTVA")
+        ],
+        "vat_on_collection": bool(vat_cash.get("statusTvaIncasare")),
+        "split_vat": bool(split.get("statusSplitTVA")),
+        "fiscally_inactive": bool(inactive.get("statusInactivi")),
+        "inactive_since": _date(inactive.get("dataInactivare")),
+        "reactivated_on": _date(inactive.get("dataReactivare")),
+        "e_factura_registry": bool(g.get("statusRO_e_Factura")),
+        "as_of": g.get("data"),
+    }
+    out["warnings"] = company_warnings(out)
+    return out
+
+
+def company_warnings(c):
+    out = []
+    if c["deregistered"]:
+        out.append(f"company is deregistered ({c['status']})")
+    if c["fiscally_inactive"]:
+        out.append(
+            f"declared fiscally inactive since {c['inactive_since']}: buyers generally can't "
+            "deduct expenses or VAT on its invoices (Cod fiscal art. 11)"
+        )
+    if "SUSPENDARE" in c["status"].upper():
+        out.append(f"activity is suspended ({c['status']})")
+    return out
+
+
+async def lookup(client, cuis, on=None):
+    """Status of any number of CUIs (batched by 100). Returns (found, not_found)."""
+    on = on or date.today().isoformat()
+    cache = get_cache()
+    found = {}
+    todo = []
+    for cui in dict.fromkeys(cuis):
+        hit = cache.get(f"anaf:{cui}:{on}")
+        if hit is not None:
+            found[cui] = hit
+        else:
+            todo.append(cui)
+
+    not_found = []
+    for i in range(0, len(todo), MAX_BATCH):
+        batch = todo[i:i + MAX_BATCH]
+        await _throttle()
+        r = await client.post(TVA_URL, json=[{"cui": c, "data": on} for c in batch])
+        r.raise_for_status()
+        body = r.json()
+        for item in body.get("found") or []:
+            company = parse_company(item)
+            found[company["cui"]] = company
+            cache.set(f"anaf:{company['cui']}:{on}", company, 6 * 3600)
+        not_found += body.get("notFound") or []
+
+    return [found[c] for c in dict.fromkeys(cuis) if c in found], not_found
+
+
+# --- balance sheets ---
+
+# what the summary calls each line, matched on the folded ANAF label
+LABELS = {
+    "cifra de afaceri neta": "revenue",
+    "venituri totale": "total_income",
+    "cheltuieli totale": "total_expenses",
+    "profit brut": "gross_profit",
+    "pierdere bruta": "gross_loss",
+    "profit net": "net_profit",
+    "pierdere neta": "net_loss",
+    "numar mediu de salariati": "employees",
+    "active imobilizate": "fixed_assets",
+    "active circulante": "current_assets",
+    "stocuri": "inventory",
+    "creante": "receivables",
+    "casa si conturi la banci": "cash",
+    "cheltuieli in avans": "prepaid_expenses",
+    "datorii": "debts",
+    "venituri in avans": "deferred_income",
+    "provizioane": "provisions",
+    "capitaluri": "equity",
+    "capital subscris varsat": "share_capital",
+    "patrimoniul regiei": "public_patrimony",
+}
+
+
+def _label_key(label):
+    s = fold(label).strip()
+    s = s.removesuffix(", din care:").strip()
+    s = s.removesuffix("- total").strip()
+    return s
+
+
+def parse_bilant(data):
+    """One year of filed financials, None if nothing was filed (or the CUI is unknown)."""
+    items = data.get("i") or []
+    if not items:
+        return None
+    out = {"year": data.get("an")}
+    other = {}
+    for i in sorted(items, key=lambda i: int(i["indicator"].lstrip("I") or 0)):
+        key = LABELS.get(_label_key(i["val_den_indicator"]))
+        if key:
+            out[key] = i["val_indicator"]
+        else:
+            other[i["val_den_indicator"].strip()] = i["val_indicator"]
+    if "net_profit" in out or "net_loss" in out:
+        out["net_result"] = out.get("net_profit", 0) - out.get("net_loss", 0)
+    if other:
+        # banks, insurers and NGOs file a different layout, pass it through as is
+        out["other"] = other
+    return out
+
+
+async def bilant(client, cui, year):
+    async def fetch():
+        await _throttle()
+        r = await client.get(BILANT_URL, params={"an": year, "cui": cui})
+        r.raise_for_status()
+        data = r.json()
+        parsed = parse_bilant(data)
+        meta = {"name": data.get("deni") or None, "caen": data.get("caen") or None,
+                "caen_description": data.get("den_caen") or None}
+        return {"meta": meta, "year": parsed or {"year": year, "filed": False}}
+
+    # filed statements barely change, a day is plenty
+    return await cached(f"bilant:{cui}:{year}", 24 * 3600, fetch)
+
+
+async def financials(client, cui, years):
+    meta = {}
+    out = []
+    for year in years:
+        res = await bilant(client, cui, year)
+        if res["meta"]["name"] and not meta:
+            meta = res["meta"]
+        out.append(res["year"])
+    return {"cui": cui, **meta, "currency": "RON", "years": out}