Radiant Finance

A self-hosted, offline-first personal finance PWA for tracking transactions and managing bank accounts. Built with SvelteKit, Dexie.js, and Supabase, Radiant connects to your bank accounts via Teller.io and syncs transactions in real-time -- all while keeping your financial data under your control. Works offline, syncs across devices, and runs entirely on your own infrastructure.

Try it at: https://finance.prabhas.io/demo

Documentation

Table of Contents

1. Features
2. Setup Guide to Self-Host
3. Mobile Installation
4. Demo Mode
5. Configuration
6. Tech Stack
7. Project Structure
8. Scripts
9. Local Development
10. Contributing
11. Privacy
12. License

Features

Bank Integration

• Real-time transaction sync: Connects to 5,000+ US financial institutions via Teller.io.
• Automatic account balance updates: Supports checking, savings, credit cards, and investment accounts.
• Webhook-driven sync: New transactions arrive automatically without polling.
• Secure mTLS authentication: Bank credentials never touch your server.

Privacy and Security

• Self-hosted: Your financial data lives on your own infrastructure.
• PIN-based security: Single-user auth gate with device verification.
• Row Level Security: Supabase RLS policies enforce data isolation at the database level.
• mTLS bank connections: Certificate-based mutual authentication with Teller.
• HMAC webhook verification: Cryptographic validation of incoming bank data.
• No third-party analytics: Zero tracking, zero telemetry.

Offline-First PWA

• Works without internet: Full read/write access to all data offline.
• Optimistic updates: UI responds instantly, syncs in the background.
• Multi-device sync: Field-level conflict resolution handles concurrent edits.
• Installable: Add to home screen on any device for a native app experience.
• Cache-first assets: Instant loads from service worker cache.

Setup Guide to Self-Host

Prerequisites

• Node.js 20+
• Supabase account (free tier works)
• Teller.io developer account (for bank connections)
• Vercel account (recommended for deployment)

Step 1: Clone and Install

git clone https://github.com/your-username/radiant.git
cd radiant
npm install

Step 2: Configure Environment

cp .env.example .env

Edit .env with your credentials. See the Configuration section below for a full reference.

Step 3: Set Up Supabase

1. Create a new Supabase project at supabase.com
2. Copy your project URL and publishable key into .env
3. Add your DATABASE_URL for auto schema sync
4. The schema auto-migrates on npm run dev and npm run build -- no manual SQL needed

Step 4: Set Up Teller.io

1. Sign up at teller.io and create an application
2. Download your mTLS certificate and private key
3. Configure your Teller application ID and certificate in .env
4. Set your webhook signing secret for secure transaction delivery
5. Test in sandbox mode -- Teller provides a sandbox environment with simulated bank data

Step 5: Run Locally

npm run dev

Visit http://localhost:5173. Types auto-generate and Supabase auto-migrates on first run.

Step 6: Deploy to Vercel

1. Import your repository at vercel.com/new
2. Set environment variables in the Vercel dashboard (see Configuration)
3. Deploy -- Vercel auto-detects SvelteKit and configures adapter-auto
4. Verify by visiting /api/config to confirm server config is loaded

Or use the built-in setup wizard at /setup for guided deployment with validation.

Security note: DATABASE_URL is only used server-side during the build step. It is never bundled into client code. The public Supabase keys are safe to expose -- they are protected by Row Level Security.

Mobile Installation

iOS (Safari)

1. Open the app in Safari
2. Tap the Share button (square with arrow)
3. Scroll down and tap Add to Home Screen
4. Tap Add

Android (Chrome)

1. Open the app in Chrome
2. Tap the three-dot menu (top right)
3. Tap Add to Home screen or Install app
4. Confirm the installation

Desktop (Chrome / Edge)

1. Open the app in your browser
2. Click the install icon in the address bar (or look for an install prompt)
3. Click Install

Once installed, the app runs as a standalone window with full offline support.

Demo Mode

Radiant includes a full demo mode for evaluating the app without any backend configuration.

How it works:

• Navigate to /demo on any running instance and click Start Demo to explore with pre-populated sample data.
• Uses a separate IndexedDB database (${name}_demo), never touches real data.
• All Supabase connections, sync queue, and real-time subscriptions are disabled.
• Mock auth (authMode === 'demo') enables protected routes without real authentication.
• Data is auto-seeded on each page load via seedData(db).

What's included:

• Multiple bank accounts with realistic balances
• Months of transaction history across categories

For developers:

• Edit src/lib/demo/mockData.ts to customize the sample data.
• Edit src/lib/demo/config.ts to customize the mock user profile.
• Toggling demo mode triggers a page reload for complete engine teardown.

Configuration

Core Environment Variables

Teller.io Environment Variables

Optional Variables

Tech Stack

Project Structure

src/
  lib/
    schema.ts              --> Single source of truth (database schema)
    types.ts               --> App types (re-exports + narrowings)
    types.generated.ts     --> Auto-generated entity types (do not edit)
    components/            --> Svelte 5 components
    stores/                --> Reactive stores (collection + detail)
    demo/                  --> Demo mode config and mock data
  routes/
    +layout.ts             --> Root load function (engine init, auth)
    +layout.svelte         --> App shell
    (app)/                 --> Authenticated routes
      +page.svelte         --> Dashboard (greeting)
      transactions/        --> Filterable transaction list
      accounts/            --> Connected accounts + Teller Connect
      profile/             --> Settings, PIN, devices, diagnostics
    login/                 --> PIN auth (setup/unlock/link modes)
    setup/                 --> Configuration wizard
    demo/                  --> Demo mode toggle
    confirm/               --> Email verification
    policy/                --> Privacy policy
    api/                   --> Server endpoints
      config/              --> Server config check
      setup/               --> Credential validation + deployment
      teller/              --> Teller sync proxy + webhooks
  service-worker.ts        --> PWA service worker
static/
  sw.js                    --> Generated service worker
  manifest.json            --> PWA manifest
.env.example               --> Environment variable template

Scripts

Local Development

npm install
npm run dev

Build Commands

Contributing

1. Fork the repository
2. Create a feature branch: git checkout -b feature/my-feature
3. Install dependencies: npm install
4. Make your changes and verify:

   npm run cleanup
   npm run validate
   

5. Commit with a descriptive message
6. Push and open a Pull Request

If your change modifies src/lib/schema.ts, types auto-generate at src/lib/types.generated.ts on save, Supabase schema auto-syncs if DATABASE_URL is set, and IndexedDB auto-upgrades on next page load via hash-based version detection. Never edit types.generated.ts manually.

Privacy

Radiant is self-hosted. Your financial data lives in your own Supabase instance on infrastructure you control. Bank credentials are handled entirely by Teller.io using mutual TLS authentication; your server never sees login credentials. There is no third-party analytics, no tracking, and no telemetry.

License

MIT