Disable write endpoints; read-only analytics

app/main.py

@@ -51,11 +51,16 @@ async def health_check():
 
 @app.post("/expenses", response_model=dict)
 async def create_expense(expense: Expense):
-    """Create a new expense"""
-    expense_dict = expense.model_dump()
-    expense_dict["created_at"] = datetime.utcnow()
-    result = db.expenses.insert_one(expense_dict)
-    return {"id": str(result.inserted_id), "message": "Expense created successfully"}
+    """
+    Disabled: this service does not create expenses.
+
+    All expenses should be created by the main WalletSync app and stored
+    directly in MongoDB. This API only reads existing data for analytics.
+    """
+    raise HTTPException(
+        status_code=405,
+        detail="Creating expenses is disabled. Use the main WalletSync app to add expenses.",
+    )
 
 @app.get("/expenses", response_model=List[Expense])
 async def get_expenses(user_id: str, limit: int = 100):
@@ -68,11 +73,16 @@ async def get_expenses(user_id: str, limit: int = 100):
 
 @app.post("/budgets", response_model=dict)
 async def create_budget(budget: Budget):
-    """Create a new budget"""
-    budget_dict = budget.model_dump()
-    budget_dict["created_at"] = datetime.utcnow()
-    result = db.budgets.insert_one(budget_dict)
-    return {"id": str(result.inserted_id), "message": "Budget created successfully"}
+    """
+    Disabled: this service does not create budgets.
+
+    All budgets should be created by the main WalletSync app and stored
+    directly in MongoDB. This API only reads existing data for analytics.
+    """
+    raise HTTPException(
+        status_code=405,
+        detail="Creating budgets is disabled. Use the main WalletSync app to add budgets.",
+    )
 
 @app.get("/budgets", response_model=List[Budget])
 async def get_budgets(user_id: str):