@actual-app/sync-server 26.10.0 → 26.11.0-nightly.20261004

package/build/app.js

@@ -1,7 +1,7 @@
 import { t as run } from "./chunks/migrations-7U65Wxd5.js";
 //#region app.ts
 run().then(() => {
-	import("./chunks/app-BgMEdvse.js").then((app) => app.run());
+	import("./chunks/app-C9cIy7Ri.js").then((app) => app.run());
 }).catch((err) => {
 	console.log("Error starting app:", err);
 	process.exit(1);

package/build/bin/actual-server.js

@@ -41,7 +41,7 @@ if (values.help) {
 	process.exit();
 }
 if (values.version) {
-	console.log("v26.10.0");
+	console.log("v26.11.0-nightly.20261004");
 	process.exit();
 }
 var setupDataDir = (dataDir) => {

package/build/bin/actual-server.js.map

@@ -1 +1 @@
-{"version":3,"file":"actual-server.js","names":[],"sources":["../../bin/actual-server.js"],"sourcesContent":["#!/usr/bin/env node\nimport { existsSync, readFileSync } from 'node:fs';\nimport { resolve } from 'node:path';\nimport { parseArgs } from 'node:util';\n\nconst args = process.argv;\n\nconst options = {\n  help: {\n    type: 'boolean',\n    short: 'h',\n  },\n  version: {\n    type: 'boolean',\n    short: 'v',\n  },\n  'reset-password': {\n    type: 'boolean',\n  },\n  config: {\n    type: 'string',\n  },\n};\n\nconst { values } = parseArgs({\n  args,\n  options,\n  allowPositionals: true,\n});\n\nif (values.help) {\n  console.log(\n    [\n      'usage: actual-server [options]',\n      '',\n      'options:',\n      '  --config           Path to config file',\n      '',\n      '  -h --help          Print this list and exit.',\n      '  -v --version       Print the version and exit.',\n      '',\n      'Examples:',\n      '',\n      'Runs actual-server with default configuration',\n      '  actual-server',\n      '',\n      'Runs actual-server with custom configuration',\n      '  actual-server --config ./config.json',\n    ].join('\\n'),\n  );\n\n  process.exit();\n}\n\nif (values.version) {\n  console.log('v' + __APP_VERSION__);\n  process.exit();\n}\n\nconst setupDataDir = dataDir => {\n  if (process.env.ACTUAL_DATA_DIR) {\n    return; // Env variables must not be overwritten\n  }\n\n  if (dataDir) {\n    process.env.ACTUAL_DATA_DIR = dataDir; // Use the dir specified\n  } else {\n    // Setup defaults\n    if (existsSync('./data')) {\n      // The default data directory exists - use it\n      console.info('Found existing data directory');\n      process.env.ACTUAL_DATA_DIR = resolve('./data');\n    } else {\n      console.info(\n        'Using default data directory. You can specify a custom config with --config',\n      );\n      process.env.ACTUAL_DATA_DIR = resolve('./');\n    }\n\n    console.info(`Data directory: ${process.env.ACTUAL_DATA_DIR}`);\n  }\n};\n\nif (values.config) {\n  const configExists = existsSync(values.config);\n\n  if (!configExists) {\n    console.log(\n      `Please specify a valid config path. The path ${String(values.config)} does not exist.`,\n    );\n\n    process.exit();\n  } else {\n    console.log(`Loading config from ${String(values.config)}`);\n    const configJson = JSON.parse(readFileSync(values.config, 'utf-8'));\n    process.env.ACTUAL_CONFIG_PATH = values.config;\n    setupDataDir(configJson.dataDir);\n  }\n} else {\n  // If no config is specified, check for a default config in the current directory\n  const defaultConfigJsonFile = './config.json';\n  const configExists = existsSync(defaultConfigJsonFile);\n\n  if (configExists) {\n    console.info('Found config.json in the current directory');\n    const configJson = JSON.parse(readFileSync(defaultConfigJsonFile, 'utf-8'));\n    process.env.ACTUAL_CONFIG_PATH = defaultConfigJsonFile;\n    setupDataDir(configJson.dataDir);\n  } else {\n    setupDataDir(); // No default config exists - setup data dir with defaults\n  }\n}\n\nif (values['reset-password']) {\n  console.info('Running reset password script...');\n  await import('../src/scripts/reset-password.js');\n  process.exit();\n}\n\n// start the sync server\nvoid import('../app.js');\n"],"mappings":";;;;;AAKA,IAAM,OAAO,QAAQ;AAmBrB,IAAM,EAAE,WAAW,UAAU;CAC3B;CACA,SAAA;EAlBA,MAAM;GACJ,MAAM;GACN,OAAO;EACT;EACA,SAAS;GACP,MAAM;GACN,OAAO;EACT;EACA,kBAAkB,EAChB,MAAM,UACR;EACA,QAAQ,EACN,MAAM,SACR;CAKM;CACN,kBAAkB;AACpB,CAAC;AAED,IAAI,OAAO,MAAM;CACf,QAAQ,IACN;EACE;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;CACF,CAAC,CAAC,KAAK,IAAI,CACb;CAEA,QAAQ,KAAK;AACf;AAEA,IAAI,OAAO,SAAS;CAClB,QAAQ,IAAI,UAAqB;CACjC,QAAQ,KAAK;AACf;AAEA,IAAM,gBAAe,YAAW;CAC9B,IAAI,QAAQ,IAAI,iBACd;CAGF,IAAI,SACF,QAAQ,IAAI,kBAAkB;MACzB;EAEL,IAAI,WAAW,QAAQ,GAAG;GAExB,QAAQ,KAAK,+BAA+B;GAC5C,QAAQ,IAAI,kBAAkB,QAAQ,QAAQ;EAChD,OAAO;GACL,QAAQ,KACN,6EACF;GACA,QAAQ,IAAI,kBAAkB,QAAQ,IAAI;EAC5C;EAEA,QAAQ,KAAK,mBAAmB,QAAQ,IAAI,iBAAiB;CAC/D;AACF;AAEA,IAAI,OAAO,QAGT,IAAI,CAFiB,WAAW,OAAO,MAEvB,GAAG;CACjB,QAAQ,IACN,gDAAgD,OAAO,OAAO,MAAM,EAAE,iBACxE;CAEA,QAAQ,KAAK;AACf,OAAO;CACL,QAAQ,IAAI,uBAAuB,OAAO,OAAO,MAAM,GAAG;CAC1D,MAAM,aAAa,KAAK,MAAM,aAAa,OAAO,QAAQ,OAAO,CAAC;CAClE,QAAQ,IAAI,qBAAqB,OAAO;CACxC,aAAa,WAAW,OAAO;AACjC;KACK;CAEL,MAAM,wBAAwB;CAG9B,IAFqB,WAAW,qBAEjB,GAAG;EAChB,QAAQ,KAAK,4CAA4C;EACzD,MAAM,aAAa,KAAK,MAAM,aAAa,uBAAuB,OAAO,CAAC;EAC1E,QAAQ,IAAI,qBAAqB;EACjC,aAAa,WAAW,OAAO;CACjC,OACE,aAAa;AAEjB;AAEA,IAAI,OAAO,mBAAmB;CAC5B,QAAQ,KAAK,kCAAkC;CAC/C,MAAM,OAAO;CACb,QAAQ,KAAK;AACf;AAGK,OAAO"}
+{"version":3,"file":"actual-server.js","names":[],"sources":["../../bin/actual-server.js"],"sourcesContent":["#!/usr/bin/env node\nimport { existsSync, readFileSync } from 'node:fs';\nimport { resolve } from 'node:path';\nimport { parseArgs } from 'node:util';\n\nconst args = process.argv;\n\nconst options = {\n  help: {\n    type: 'boolean',\n    short: 'h',\n  },\n  version: {\n    type: 'boolean',\n    short: 'v',\n  },\n  'reset-password': {\n    type: 'boolean',\n  },\n  config: {\n    type: 'string',\n  },\n};\n\nconst { values } = parseArgs({\n  args,\n  options,\n  allowPositionals: true,\n});\n\nif (values.help) {\n  console.log(\n    [\n      'usage: actual-server [options]',\n      '',\n      'options:',\n      '  --config           Path to config file',\n      '',\n      '  -h --help          Print this list and exit.',\n      '  -v --version       Print the version and exit.',\n      '',\n      'Examples:',\n      '',\n      'Runs actual-server with default configuration',\n      '  actual-server',\n      '',\n      'Runs actual-server with custom configuration',\n      '  actual-server --config ./config.json',\n    ].join('\\n'),\n  );\n\n  process.exit();\n}\n\nif (values.version) {\n  console.log('v' + __APP_VERSION__);\n  process.exit();\n}\n\nconst setupDataDir = dataDir => {\n  if (process.env.ACTUAL_DATA_DIR) {\n    return; // Env variables must not be overwritten\n  }\n\n  if (dataDir) {\n    process.env.ACTUAL_DATA_DIR = dataDir; // Use the dir specified\n  } else {\n    // Setup defaults\n    if (existsSync('./data')) {\n      // The default data directory exists - use it\n      console.info('Found existing data directory');\n      process.env.ACTUAL_DATA_DIR = resolve('./data');\n    } else {\n      console.info(\n        'Using default data directory. You can specify a custom config with --config',\n      );\n      process.env.ACTUAL_DATA_DIR = resolve('./');\n    }\n\n    console.info(`Data directory: ${process.env.ACTUAL_DATA_DIR}`);\n  }\n};\n\nif (values.config) {\n  const configExists = existsSync(values.config);\n\n  if (!configExists) {\n    console.log(\n      `Please specify a valid config path. The path ${String(values.config)} does not exist.`,\n    );\n\n    process.exit();\n  } else {\n    console.log(`Loading config from ${String(values.config)}`);\n    const configJson = JSON.parse(readFileSync(values.config, 'utf-8'));\n    process.env.ACTUAL_CONFIG_PATH = values.config;\n    setupDataDir(configJson.dataDir);\n  }\n} else {\n  // If no config is specified, check for a default config in the current directory\n  const defaultConfigJsonFile = './config.json';\n  const configExists = existsSync(defaultConfigJsonFile);\n\n  if (configExists) {\n    console.info('Found config.json in the current directory');\n    const configJson = JSON.parse(readFileSync(defaultConfigJsonFile, 'utf-8'));\n    process.env.ACTUAL_CONFIG_PATH = defaultConfigJsonFile;\n    setupDataDir(configJson.dataDir);\n  } else {\n    setupDataDir(); // No default config exists - setup data dir with defaults\n  }\n}\n\nif (values['reset-password']) {\n  console.info('Running reset password script...');\n  await import('../src/scripts/reset-password.js');\n  process.exit();\n}\n\n// start the sync server\nvoid import('../app.js');\n"],"mappings":";;;;;AAKA,IAAM,OAAO,QAAQ;AAmBrB,IAAM,EAAE,WAAW,UAAU;CAC3B;CACA,SAAA;EAlBA,MAAM;GACJ,MAAM;GACN,OAAO;EACT;EACA,SAAS;GACP,MAAM;GACN,OAAO;EACT;EACA,kBAAkB,EAChB,MAAM,UACR;EACA,QAAQ,EACN,MAAM,SACR;CAKM;CACN,kBAAkB;AACpB,CAAC;AAED,IAAI,OAAO,MAAM;CACf,QAAQ,IACN;EACE;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;CACF,CAAC,CAAC,KAAK,IAAI,CACb;CAEA,QAAQ,KAAK;AACf;AAEA,IAAI,OAAO,SAAS;CAClB,QAAQ,IAAI,2BAAqB;CACjC,QAAQ,KAAK;AACf;AAEA,IAAM,gBAAe,YAAW;CAC9B,IAAI,QAAQ,IAAI,iBACd;CAGF,IAAI,SACF,QAAQ,IAAI,kBAAkB;MACzB;EAEL,IAAI,WAAW,QAAQ,GAAG;GAExB,QAAQ,KAAK,+BAA+B;GAC5C,QAAQ,IAAI,kBAAkB,QAAQ,QAAQ;EAChD,OAAO;GACL,QAAQ,KACN,6EACF;GACA,QAAQ,IAAI,kBAAkB,QAAQ,IAAI;EAC5C;EAEA,QAAQ,KAAK,mBAAmB,QAAQ,IAAI,iBAAiB;CAC/D;AACF;AAEA,IAAI,OAAO,QAGT,IAAI,CAFiB,WAAW,OAAO,MAEvB,GAAG;CACjB,QAAQ,IACN,gDAAgD,OAAO,OAAO,MAAM,EAAE,iBACxE;CAEA,QAAQ,KAAK;AACf,OAAO;CACL,QAAQ,IAAI,uBAAuB,OAAO,OAAO,MAAM,GAAG;CAC1D,MAAM,aAAa,KAAK,MAAM,aAAa,OAAO,QAAQ,OAAO,CAAC;CAClE,QAAQ,IAAI,qBAAqB,OAAO;CACxC,aAAa,WAAW,OAAO;AACjC;KACK;CAEL,MAAM,wBAAwB;CAG9B,IAFqB,WAAW,qBAEjB,GAAG;EAChB,QAAQ,KAAK,4CAA4C;EACzD,MAAM,aAAa,KAAK,MAAM,aAAa,uBAAuB,OAAO,CAAC;EAC1E,QAAQ,IAAI,qBAAqB;EACjC,aAAa,WAAW,OAAO;CACjC,OACE,aAAa;AAEjB;AAEA,IAAI,OAAO,mBAAmB;CAC5B,QAAQ,KAAK,kCAAkC;CAC/C,MAAM,OAAO;CACb,QAAQ,KAAK;AACf;AAGK,OAAO"}

package/build/chunks/{app-BgMEdvse.js → app-C9cIy7Ri.js}

@@ -1280,7 +1280,7 @@ var enableBankingService = {
 	async getAspsps(country) {
 		return request("GET", `/aspsps${country ? `?country=${encodeURIComponent(country)}` : ""}`);
 	},
-	async startAuth(aspsp, redirectUrl, state, maxConsentValidity, psuType = "personal") {
+	async startAuth(aspsp, redirectUrl, state, maxConsentValidity, psuType = "personal", psuHeaders) {
 		const defaultMs = 2160 * 60 * 60 * 1e3;
 		const consentMs = maxConsentValidity != null && maxConsentValidity > 0 ? Math.min(maxConsentValidity * 1e3, defaultMs) : defaultMs;
 		const validUntil = new Date(Date.now() + consentMs);
@@ -1291,9 +1291,13 @@ var enableBankingService = {
 			},
 			redirect_url: redirectUrl,
 			state,
-			access: { valid_until: validUntil.toISOString() },
+			access: {
+				valid_until: validUntil.toISOString(),
+				balances: true,
+				transactions: true
+			},
 			psu_type: psuType
-		});
+		}, void 0, psuHeaders);
 	},
 	async createSession(code) {
 		return request("POST", "/sessions", { code });
@@ -1316,8 +1320,8 @@ var enableBankingService = {
 		let iteration = 0;
 		do {
 			const result = await enableBankingService.getTransactions(accountUid, dateFrom, dateTo, continuationKey, psuHeaders);
-			allTransactions.push(...result.transactions);
 			if (result.continuation_key && result.continuation_key === continuationKey) break;
+			allTransactions.push(...result.transactions);
 			continuationKey = result.continuation_key;
 			iteration++;
 		} while (continuationKey && iteration < maxIterations);
@@ -1342,12 +1346,18 @@ function extractPsuHeaders(req) {
 	debug("Using PSU headers for public PSU IP");
 	return headers;
 }
+var ASPSPS_WITHOUT_DATA_ACCESS_PSU_HEADERS = /* @__PURE__ */ new Set(["HypoVereinsbank"]);
+function dataAccessPsuHeaders(aspspName, psuHeaders) {
+	if (aspspName && ASPSPS_WITHOUT_DATA_ACCESS_PSU_HEADERS.has(aspspName)) return;
+	return psuHeaders;
+}
 async function buildSessionResult(session, psuHeaders) {
+	const accessHeaders = dataAccessPsuHeaders(session.aspsp?.name, psuHeaders);
 	const accountsWithBalances = await Promise.all(session.accounts.map(async (account) => {
 		const normalized = normalizeAccount(account, session.aspsp);
 		let balances = [];
 		try {
-			balances = (await enableBankingService.getBalances(account.uid, psuHeaders)).balances.map(normalizeBalance);
+			balances = (await enableBankingService.getBalances(account.uid, accessHeaders)).balances.map(normalizeBalance);
 		} catch (err) {
 			debug("Failed to fetch balances for account %s: %s", account.uid, err);
 		}
@@ -1481,7 +1491,7 @@ app$7.post("/start-auth", handleError(async (req, res) => {
 	}
 	const state = v4();
 	try {
-		const authResponse = await enableBankingService.startAuth(aspsp, redirectUrl, state, typeof maxConsentValidity === "number" ? maxConsentValidity : void 0, psuType === "business" ? "business" : "personal");
+		const authResponse = await enableBankingService.startAuth(aspsp, redirectUrl, state, typeof maxConsentValidity === "number" ? maxConsentValidity : void 0, psuType === "business" ? "business" : "personal", extractPsuHeaders(req));
 		res.send({
 			status: "ok",
 			data: {
@@ -1616,7 +1626,7 @@ app$7.post("/poll-auth", handleError(async (req, res) => {
 	}
 }));
 app$7.post("/transactions", handleError(async (req, res) => {
-	const { accountId, startDate } = req.body || {};
+	const { accountId, startDate, aspspName } = req.body || {};
 	if (!accountId || !startDate) {
 		res.send({
 			status: "ok",
@@ -1627,10 +1637,10 @@ app$7.post("/transactions", handleError(async (req, res) => {
 		});
 		return;
 	}
-	const psuHeaders = extractPsuHeaders(req);
 	try {
 		const dateTo = (/* @__PURE__ */ new Date()).toISOString().split("T")[0];
 		const dateFrom = typeof startDate === "string" ? startDate : new Date(startDate).toISOString().split("T")[0];
+		const psuHeaders = dataAccessPsuHeaders(aspspName, extractPsuHeaders(req));
 		const balances = (await enableBankingService.getBalances(accountId, psuHeaders)).balances.map(normalizeBalance);
 		let startingBalance = 0;
 		if (balances.length > 0) startingBalance = (balances.find((b) => b.balanceType === "CLAV") ?? balances[0]).balanceAmount.amount;
@@ -4996,14 +5006,16 @@ var SyncRequestSchema = messageDesc(file_sync, 3);
 */
 var SyncResponseSchema = messageDesc(file_sync, 4);
 //#endregion
-//#region src/app-sync/errors.js
+//#region src/app-sync/errors.ts
 var FileNotFound = class extends Error {
+	details;
 	constructor(params = {}) {
 		super("File does not exist or you don't have access to it");
 		this.details = params;
 	}
 };
 var GenericFileError = class extends Error {
+	details;
 	constructor(message, params = {}) {
 		super(message);
 		this.details = params;
@@ -5178,10 +5190,10 @@ var FilesService = class {
 	}
 };
 //#endregion
-//#region src/app-sync/validation.js
+//#region src/app-sync/validation.ts
 var SYNC_FORMAT_VERSION = 2;
 var validateSyncedFile = (groupId, keyId, currentFile) => {
-	if (currentFile.syncVersion == null || currentFile.syncVersion < SYNC_FORMAT_VERSION) return "file-old-version";
+	if (currentFile.syncVersion == null || Number(currentFile.syncVersion) < SYNC_FORMAT_VERSION) return "file-old-version";
 	if (currentFile.groupId == null) return "file-needs-upload";
 	if ((currentFile.encryptMeta ? JSON.parse(currentFile.encryptMeta).keyId : null) !== currentFile.encryptKeyId) return "file-key-mismatch";
 	if (groupId !== currentFile.groupId) return "file-has-reset";
@@ -5426,14 +5438,18 @@ app$1.post("/upload-user-file", async (req, res) => {
 		res.status(400).send("invalid fileId");
 		return;
 	}
-	let groupId = req.headers["x-actual-group-id"] || null;
+	const groupIdHeader = req.headers["x-actual-group-id"];
 	const encryptMeta = extractSingleHeader(req, res, "x-actual-encrypt-meta");
 	if (res.headersSent) return;
 	const syncFormatVersion = extractSingleHeader(req, res, "x-actual-format");
 	if (res.headersSent) return;
-	if (!!groupId && (typeof groupId !== "string" || !isValidGroupId(groupId))) {
-		res.status(400).send("invalid groupId");
-		return;
+	let groupId = null;
+	if (groupIdHeader !== void 0) {
+		if (typeof groupIdHeader !== "string" || !isValidGroupId(groupIdHeader)) {
+			res.status(400).send("invalid groupId");
+			return;
+		}
+		groupId = groupIdHeader;
 	}
 	const keyId = encryptMeta && typeof encryptMeta === "string" ? JSON.parse(encryptMeta).keyId : null;
 	const filesService = new FilesService(getAccountDb());
@@ -5750,4 +5766,4 @@ async function run() {
 //#endregion
 export { run };
 
-//# sourceMappingURL=app-BgMEdvse.js.map
+//# sourceMappingURL=app-C9cIy7Ri.js.map