actual-mcp-server 0.14.1 → 0.16.0

package/README.md

@@ -774,7 +774,7 @@ The software is provided **as-is**, without warranty of any kind. The author acc
 
 ---
 
-**Version:** 0.14.1 | **Tool Count:** 74 (verified LibreChat-compatible)
+**Version:** 0.16.0 | **Tool Count:** 74 (verified LibreChat-compatible)
 
 ## Sponsor
 

package/dist/src/lib/ActualMCPConnection.js

@@ -4,6 +4,7 @@ import * as actual from '@actual-app/api';
 import actualToolsManager from '../actualToolsManager.js';
 import adapter from './actual-adapter.js';
 import { z } from 'zod';
+import { buildToolListEntries } from './tool-list-entry.js';
 /**
  * MCPConnection implementation for Actual Finance bridge.
  */
@@ -30,7 +31,16 @@ export class ActualMCPConnection extends EventEmitter {
             // ignore if adapter doesn't expose notifications yet
         }
     }
-    /** Called by the MCP client to fetch current capabilities */
+    /**
+     * Called by the MCP client to fetch current capabilities.
+     *
+     * NOTE (#379): this has NO call sites in src, tests, scripts or bin. It is not the
+     * `tools/list` handler (those live in `httpServer.ts` and `stdioServer.ts` and all go
+     * through `buildToolListEntries`), and nothing this returns reaches a client today. It is
+     * routed through the same builder anyway so it cannot drift into a fifth, differently
+     * shaped tool list. Whether to delete it outright is tracked separately: it is a public
+     * method on an exported class, so removal is a breaking change for any external importer.
+     */
     async fetchCapabilities() {
         // If actualToolsManager is not ready, return demo tools
         let tools;
@@ -43,10 +53,11 @@ export class ActualMCPConnection extends EventEmitter {
                 }
                 // Add examples if present on the tool
                 return {
-                    name: tool.name,
+                    ...buildToolListEntries([tool.name], () => ({
+                        description: tool.description,
+                        schema: tool.inputSchema ? z.toJSONSchema(tool.inputSchema) : undefined,
+                    }))[0],
                     title: tool.name,
-                    description: tool.description,
-                    inputSchema: tool.inputSchema ? z.toJSONSchema(tool.inputSchema) : { type: 'object' },
                 };
             });
         }

package/dist/src/lib/schemas/common.js

@@ -66,6 +66,18 @@ export const tagIdSchema = z
     .string()
     .regex(UUID_PATTERN, 'Invalid tag ID format (expected UUID)')
     .describe('Tag UUID');
+/**
+ * Schedule UUID validation
+ * Used for: schedule management operations (update, delete)
+ *
+ * #380: added because `schedules_update` and `schedules_delete` were inlining
+ * `UUID_PATTERN` directly, which is the same rule expressed twice and is how a fifth way
+ * of describing an id appears.
+ */
+export const scheduleIdSchema = z
+    .string()
+    .regex(UUID_PATTERN, 'Invalid schedule ID format (expected UUID)')
+    .describe('Schedule UUID');
 // ============================================================================
 // DATE SCHEMAS
 // ============================================================================
@@ -214,6 +226,7 @@ export const CommonSchemas = {
     payeeId: payeeIdSchema,
     ruleId: ruleIdSchema,
     tagId: tagIdSchema,
+    scheduleId: scheduleIdSchema,
     // Dates
     date: dateSchema,
     monthYear: monthYearSchema,

package/dist/src/lib/tool-annotations.js

@@ -0,0 +1,278 @@
+/**
+ * MCP tool annotations for the 74-tool surface (#379).
+ *
+ * The Model Context Protocol lets a server describe each tool's NATURE to clients, so a
+ * model or a UI can know which tools mutate a budget BEFORE calling one. This file is the
+ * single source of that classification, and `ActualMCPConnection` attaches it to every
+ * `tools/list` entry.
+ *
+ * THE SPEC'S DEFAULTS ARE ALREADY CONSERVATIVE, which shapes what is worth declaring.
+ * From `schema/2025-06-18/schema.ts`:
+ *
+ *   readOnlyHint     default false   "the tool does not modify its environment"
+ *   destructiveHint  default TRUE    "may perform destructive updates"; only meaningful when readOnlyHint is false
+ *   idempotentHint   default false   "calling repeatedly with the same arguments has no additional effect"
+ *   openWorldHint    default TRUE    "may interact with an open world of external entities"
+ *
+ * So a tool that declares nothing is already treated as write-capable, destructive and
+ * open-world. The value here is therefore NOT warning about the dangerous tools; it is
+ * telling clients which tools are SAFE, and correcting `openWorldHint`, whose default is
+ * wrong for 73 of our 74 tools: this server's domain is one Actual Budget instance, a
+ * CLOSED world. Only `actual_bank_sync` reaches outside it, to GoCardless or SimpleFIN.
+ *
+ * THESE ARE HINTS, NEVER A GUARD. The spec is explicit: "all properties in ToolAnnotations
+ * are hints. They are not guaranteed to provide a faithful description of tool behavior",
+ * and "Clients should never make tool use decisions based on ToolAnnotations received from
+ * untrusted servers." Nothing in `src/` may branch on an annotation. Authorisation stays in
+ * `budget-acl.ts`, and refusal stays in the adapter guards.
+ *
+ * WHY A CENTRAL TABLE rather than a field on each tool. `types/tool.d.ts` is in CLAUDE.md's
+ * do-not-modify tier, and most tools use the legacy `ToolDefinition` shape, so a per-tool
+ * `annotations` field needs that permission first. A table also puts the whole
+ * classification on one screen next to the reasoning, which is what makes it auditable
+ * against `docs/audit/write-effect-audit.md`, and `tests/unit/tool_annotations.test.js`
+ * makes omission impossible. Moving to per-tool declarations later is mechanical.
+ */
+/**
+ * The ONLY tool that reaches outside this Actual instance. Bank sync calls a third-party
+ * aggregator (GoCardless / SimpleFIN), which is the textbook "open world".
+ */
+const OPEN_WORLD = new Set(['actual_bank_sync']);
+/**
+ * Tools that provably change NOTHING. Verified mechanically by
+ * `tests/unit/tool_annotations.test.js`, which resolves each tool's `adapter.*` calls and
+ * fails if one of these reaches `queueWriteOperation`.
+ *
+ * Claimed only where it is certain. Three read-path tools are deliberately absent because
+ * "does not modify its environment" is false for them, and a wrong `true` here is worse
+ * than no annotation at all:
+ *
+ *   actual_bank_sync       runs through `withActualApi` (the read path) but IMPORTS
+ *                          transactions, so the call graph says read and reality says
+ *                          write. Reality wins.
+ *   actual_budgets_export  writes a zip into the server's data directory.
+ *   actual_budgets_switch  changes the session's active budget and persists a preference.
+ *   actual_session_close   closes a pooled connection: server state, not budget data.
+ */
+const READ_ONLY = new Set([
+    'actual_accounts_get_balance',
+    'actual_accounts_list',
+    'actual_budgets_get_all',
+    'actual_budgets_getMonth',
+    'actual_budgets_getMonths',
+    'actual_budgets_list_available',
+    'actual_categories_get',
+    'actual_category_groups_get',
+    'actual_entities_search',
+    'actual_get_id_by_name',
+    'actual_notes_get',
+    'actual_payee_rules_get',
+    'actual_payees_common_list',
+    'actual_payees_get',
+    'actual_preferences_get',
+    'actual_query_run',
+    'actual_rules_get',
+    'actual_schedules_get',
+    'actual_server_get_version',
+    'actual_server_info',
+    'actual_session_list',
+    'actual_tags_list',
+    'actual_transactions_filter',
+    'actual_transactions_get',
+    'actual_transactions_search_by_amount',
+    'actual_transactions_search_by_category',
+    'actual_transactions_search_by_month',
+    'actual_transactions_search_by_payee',
+    'actual_transactions_summary_by_category',
+    'actual_transactions_summary_by_payee',
+    'actual_transactions_uncategorized',
+]);
+/**
+ * Write tools that REMOVE data or make an irreversible change. Everything else that writes
+ * is additive or an in-place field update, which the spec calls not-destructive.
+ *
+ * `accounts_close` is in this list and it is the interesting one: Actual REMOVES an account
+ * that has no transactions rather than closing it (documented in the tool's own description
+ * and in #357), so a close can be a delete.
+ */
+const DESTRUCTIVE = new Set([
+    'actual_accounts_close',
+    'actual_accounts_delete',
+    // Upstream `reconcileTransactions` overwrites fields on transactions that ALREADY exist
+    // (imported_id, imported_payee, cleared, raw_synced_data) and propagates cleared and date
+    // onto split children.
+    //
+    // NOTE that `actual_transactions_import` calls the same upstream function and is NOT
+    // marked destructive, which needs a reason rather than an accident. The difference is the
+    // `date` rewrite: bank sync honours the per-account `sync-update-dates-<id>` preference,
+    // so a user who enabled it gets EXISTING transaction dates rewritten by a tool they did
+    // not point at those rows. An explicit import only touches what the caller handed it.
+    // Under the policy above (a field overwrite is additive) that is the line, and it is a
+    // judgement call rather than a derivation.
+    'actual_bank_sync',
+    'actual_budgets_export',
+    'actual_budgets_import',
+    'actual_categories_delete',
+    'actual_category_groups_delete',
+    'actual_payees_delete',
+    'actual_payees_merge',
+    'actual_rules_delete',
+    'actual_schedules_delete',
+    'actual_tags_delete',
+    'actual_transactions_delete',
+    // THE NON-OBVIOUS ONE. `fields.subtransactions` (CommonSchemas, `.strict()`) has no `id`,
+    // so upstream's `makeChild` mints a fresh UUID for every child and `diffItems` tombstones
+    // every existing one. Editing one amount on a six-way split DELETES all six rows and
+    // creates six new ones with new ids, breaking any external reference to them. That also
+    // makes it non-idempotent, which is why it is absent from IDEMPOTENT below.
+    'actual_transactions_update',
+    // Removes a live pooled connection. With no `sessionId` it closes the OLDEST IDLE
+    // session, so a client that auto-approves non-destructive tools could let a model loop it
+    // and drain the pool, reproducing the per-operation re-login burst #134 exists to prevent.
+    'actual_session_close',
+]);
+/**
+ * Write tools that only ADD or set a field in place: not destructive.
+ *
+ * This set exists to make the classification TOTAL. Without it, a tool nobody classified
+ * fell through every set and `annotationsFor` published `destructiveHint: false` and
+ * `openWorldHint: false`, which INVERTS the spec's conservative defaults (both default to
+ * true) into positive safety claims about a tool nobody had looked at. Silence has to be
+ * impossible here, not merely discouraged, and `tests/unit/tool_annotations.test.js`
+ * asserts every registered tool appears in exactly one of READ_ONLY, DESTRUCTIVE or
+ * ADDITIVE.
+ *
+ * THE POLICY, stated so the boundary is a decision rather than an omission: overwriting a
+ * FIELD on an existing row is additive; removing or replacing a ROW is destructive. So
+ * `budgets_setAmount` and `accounts_update` are additive, while `transactions_update` is
+ * not, because on the split path it deletes and recreates child rows.
+ */
+const ADDITIVE = new Set([
+    'actual_accounts_create',
+    'actual_accounts_reopen',
+    'actual_accounts_update',
+    'actual_budgets_switch',
+    'actual_budgets_holdForNextMonth',
+    'actual_budgets_resetHold',
+    'actual_budgets_setAmount',
+    'actual_budgets_setCarryover',
+    'actual_budgets_transfer',
+    'actual_budget_updates_batch',
+    'actual_categories_create',
+    'actual_categories_update',
+    'actual_category_groups_create',
+    'actual_category_groups_update',
+    'actual_payees_create',
+    'actual_payees_update',
+    'actual_rules_create',
+    'actual_rules_create_or_update',
+    'actual_rules_update',
+    'actual_schedules_create',
+    'actual_schedules_update',
+    'actual_transactions_create',
+    'actual_transactions_import',
+    'actual_transactions_update_batch',
+    'actual_transfers_create',
+    'actual_tags_create',
+    'actual_tags_update',
+    'actual_notes_update',
+]);
+/**
+ * Write tools where repeating the SAME call leaves the same STATE.
+ *
+ * THE STANDARD USED, because it is the judgement call in this file. The spec says
+ * idempotent means "calling the tool repeatedly with the same arguments will have no
+ * additional effect on the its environment". That is about STATE, not about the response,
+ * so a tool that refuses the second call while changing nothing still qualifies. This
+ * matters most for the delete family: since #376/#377 they THROW a NotFoundRefusal for an
+ * absent id rather than reporting success, but the second call writes nothing, so the state
+ * after one delete and after five is identical. A client deciding whether a timed-out write
+ * is safe to retry cares about the state, which is exactly what this flag answers.
+ *
+ * Values are taken from `docs/audit/write-effect-audit.md` rather than guessed, so each one
+ * has a history behind it.
+ *
+ * The exclusions are the point:
+ *   most `*_create`             each call makes ANOTHER entity, so the state differs
+ *   budgets_holdForNextMonth    upstream ADDS to the buffer, so a retry holds twice (#355)
+ *   budgets_transfer            moves money again on each call
+ *   payees_merge                the sources are gone after the first
+ *   bank_sync                   imports whatever is new upstream
+ *   transactions_import         adds rows; de-dup is a bank-sync property, not a promise here
+ *
+ * `actual_tags_create` is the create that IS idempotent, and it is easy to miss: it upserts
+ * on the tag word, so a repeat updates the existing tag and returns the same id. Its own
+ * description says so and `docker-all-tools.e2e.spec.ts` asserts it. `categories_create` is
+ * deliberately NOT here: it REJECTS a duplicate rather than upserting, and whether upstream
+ * truly refuses every duplicate is not something this file should assume.
+ */
+const IDEMPOTENT = new Set([
+    // NOT the same question as #165's "safe to re-issue". `tests/unit/adapter_nonidempotent_no_retry.test.js`
+    // pins several of these as non-idempotent for RETRY purposes, and both are right: the MCP
+    // spec asks whether repeating leaves the same STATE (a second delete writes nothing),
+    // while #165 asks whether re-issuing an in-flight write can corrupt or mislead. A client
+    // reading this flag to decide "auto-retry after a timeout?" should still respect #165, so
+    // the two lists disagreeing on paper is expected and is recorded here rather than left to
+    // be re-litigated.
+    //
+    // `actual_session_close` is deliberately ABSENT: called with no sessionId it closes the
+    // OLDEST IDLE session, so repeating it closes a DIFFERENT session each time until the
+    // pool is empty. That is the literal negation of the flag.
+    'actual_accounts_close',
+    'actual_accounts_delete',
+    'actual_accounts_reopen',
+    'actual_accounts_update',
+    'actual_budget_updates_batch',
+    'actual_budgets_resetHold',
+    'actual_budgets_setAmount',
+    'actual_budgets_setCarryover',
+    'actual_budgets_switch',
+    'actual_categories_delete',
+    'actual_categories_update',
+    'actual_category_groups_delete',
+    'actual_category_groups_update',
+    'actual_notes_update',
+    'actual_payees_delete',
+    'actual_payees_update',
+    'actual_rules_create_or_update',
+    'actual_rules_delete',
+    'actual_rules_update',
+    'actual_schedules_delete',
+    'actual_schedules_update',
+    'actual_tags_create',
+    'actual_tags_delete',
+    'actual_tags_update',
+    'actual_transactions_delete',
+    'actual_transactions_update_batch',
+]);
+/** The sets, exported so the guard can check them without re-deriving the rules. */
+export const _ANNOTATION_SETS = { OPEN_WORLD, READ_ONLY, DESTRUCTIVE, ADDITIVE, IDEMPOTENT };
+/**
+ * Annotations for one tool.
+ *
+ * Every field is declared explicitly, including where the value equals the spec default.
+ * Silence and "declared false" are indistinguishable to a client, but they are very
+ * different to the guard: it must be able to tell "this tool was classified as a write"
+ * from "somebody forgot to classify it".
+ */
+export function annotationsFor(toolName) {
+    const readOnly = READ_ONLY.has(toolName);
+    const classified = readOnly || DESTRUCTIVE.has(toolName) || ADDITIVE.has(toolName);
+    if (!classified) {
+        // A tool nobody classified. OMIT `destructiveHint` and `openWorldHint` so the spec's
+        // own defaults apply, which are `true` for both: unknown reads as destructive and
+        // open-world, the conservative answer. Returning `false` here would have published a
+        // positive SAFETY claim about code nobody had looked at, which is strictly worse than
+        // saying nothing. The guard fails the build on this case; the shape here is what
+        // protects clients in the window before someone notices.
+        return { readOnlyHint: false, idempotentHint: false };
+    }
+    return {
+        readOnlyHint: readOnly,
+        // Meaningful only when readOnlyHint is false; declared either way so the table round
+        // trips, and a read-only tool is trivially non-destructive.
+        destructiveHint: readOnly ? false : DESTRUCTIVE.has(toolName),
+        idempotentHint: readOnly ? true : IDEMPOTENT.has(toolName),
+        openWorldHint: OPEN_WORLD.has(toolName),
+    };
+}

package/dist/src/lib/tool-list-entry.js

@@ -0,0 +1,39 @@
+/**
+ * The single builder for a `tools/list` entry (#379).
+ *
+ * WHY THIS EXISTS. The `tools/list` payload was assembled in THREE near-identical places:
+ * the SDK request handler in `httpServer.ts`, the no-session LobeChat compatibility path a
+ * hundred lines below it, and the stdio handler in `stdioServer.ts`. Each resolved the
+ * schema the same way and built the same object shape, independently.
+ *
+ * That went unnoticed until annotations were added: patching one site would have shipped
+ * annotations to HTTP clients and silently left stdio users (Claude Desktop) without them,
+ * which is the transport half this project has been bitten by before (#280). Anything that
+ * belongs in the published tool surface has to be added HERE, once, or it reaches some
+ * clients and not others.
+ */
+import { annotationsFor } from './tool-annotations.js';
+/** An empty-but-valid JSON Schema, for a tool whose schema cannot be resolved. */
+const EMPTY_SCHEMA = { type: 'object', properties: {}, additionalProperties: false };
+/**
+ * Build the published entries for a list of tool names.
+ *
+ * @param toolNames    the registered tool names, in registry order
+ * @param resolve      resolves a tool's description and JSON Schema (call sites differ in
+ *                     where those come from, so it is injected rather than imported, which
+ *                     also keeps this module free of a cycle back through the tool registry)
+ */
+export function buildToolListEntries(toolNames, resolve) {
+    return toolNames.map((name) => {
+        const { description, schema } = resolve(name);
+        const inputSchema = schema && typeof schema === 'object' && Object.keys(schema).length > 0 ? schema : EMPTY_SCHEMA;
+        return {
+            name,
+            description: description || `Tool ${name}`,
+            inputSchema,
+            // Advisory metadata for clients, never a guard: the MCP spec says clients must treat
+            // annotations as untrusted, and nothing in src/ may branch on one.
+            annotations: annotationsFor(name),
+        };
+    });
+}

package/dist/src/server/httpServer.js

@@ -24,6 +24,7 @@ import * as fs from 'node:fs';
 // Re-exported here for backward compatibility with any callers that imported
 // `requestContext` from this module.
 import { requestContext } from '../lib/requestContext.js';
+import { buildToolListEntries } from '../lib/tool-list-entry.js';
 export { requestContext };
 // Resolve the authenticated principal for the per-principal budget preference
 // (#189). OIDC: the verified JWT subject. Static-bearer: a single shared
@@ -176,6 +177,15 @@ advertisedUrl) {
     const sessionInitPromises = new Map(); // Track session init completion
     // safe fallback if index didn't provide implementedTools
     const toolsList = Array.isArray(implementedTools) ? implementedTools : [];
+    // #379: one resolver, one builder, for all THREE tools/list paths below: the SDK handler,
+    // the no-session LobeChat compatibility path, and the expired-session LobeChat discovery
+    // shim. They each assembled the payload independently, so anything added to the published
+    // surface had to be added three times, and the shim was in fact missed on the first pass.
+    const resolveToolMeta = (name) => ({
+        description: actualToolsManager.getTool(name)?.description,
+        schema: (toolSchemas && toolSchemas[name]) ||
+            actualToolsManager?.getToolSchema?.(name),
+    });
     // Session liveness and idle timing are owned solely by the connection pool
     // (#167). httpServer no longer runs its own idle timer or activity map; it
     // owns only the transport objects. When the pool removes a session (idle
@@ -269,23 +279,7 @@ advertisedUrl) {
         server.setRequestHandler(ListToolsRequestSchema, async () => {
             logger.debug('[TOOLS LIST] Listing available tools');
             logger.debug(`[TOOLS LIST] toolsList length: ${toolsList.length}`);
-            const tools = toolsList.map((name) => {
-                const schemaFromParam = toolSchemas && toolSchemas[name];
-                const schemaFromManager = actualToolsManager?.getToolSchema?.(name);
-                const schema = schemaFromParam || schemaFromManager;
-                // Ensure inputSchema is a valid JSON Schema object with required properties
-                const inputSchema = schema && typeof schema === 'object' && Object.keys(schema).length > 0
-                    ? schema
-                    : { type: 'object', properties: {}, additionalProperties: false };
-                // Get the actual tool description from the tool definition
-                const tool = actualToolsManager.getTool(name);
-                const description = tool?.description || `Tool ${name}`;
-                return {
-                    name,
-                    description,
-                    inputSchema,
-                };
-            });
+            const tools = buildToolListEntries(toolsList, resolveToolMeta);
             logger.debug(`[TOOLS LIST] Returning ${tools.length} tools`);
             return { tools };
         });
@@ -355,23 +349,7 @@ advertisedUrl) {
         // Handle this case directly without going through the transport
         if (!sessionId && method === 'tools/list') {
             logger.debug('[LOBECHAT COMPAT] Handling tools/list without session directly');
-            const tools = toolsList.map((name) => {
-                const schemaFromParam = toolSchemas && toolSchemas[name];
-                const schemaFromManager = actualToolsManager?.getToolSchema?.(name);
-                const schema = schemaFromParam || schemaFromManager;
-                // Ensure inputSchema is a valid JSON Schema object with required properties
-                const inputSchema = schema && typeof schema === 'object' && Object.keys(schema).length > 0
-                    ? schema
-                    : { type: 'object', properties: {}, additionalProperties: false };
-                // Get the actual tool description from the tool definition
-                const tool = actualToolsManager.getTool(name);
-                const description = tool?.description || `Tool ${name}`;
-                return {
-                    name,
-                    description,
-                    inputSchema,
-                };
-            });
+            const tools = buildToolListEntries(toolsList, resolveToolMeta);
             res.json({
                 jsonrpc: '2.0',
                 id: payload?.id ?? null,
@@ -516,21 +494,7 @@ advertisedUrl) {
                     // This allows LobeChat's backend to discover available tools even with expired sessions
                     if (method === 'tools/list') {
                         logger.debug('[LOBECHAT COMPAT] Handling tools/list with expired/invalid session - returning tools for discovery');
-                        const tools = toolsList.map((name) => {
-                            const schemaFromParam = toolSchemas && toolSchemas[name];
-                            const schemaFromManager = actualToolsManager?.getToolSchema?.(name);
-                            const schema = schemaFromParam || schemaFromManager;
-                            const inputSchema = schema && typeof schema === 'object' && Object.keys(schema).length > 0
-                                ? schema
-                                : { type: 'object', properties: {}, additionalProperties: false };
-                            const tool = actualToolsManager.getTool(name);
-                            const description = tool?.description || `Tool ${name}`;
-                            return {
-                                name,
-                                description,
-                                inputSchema,
-                            };
-                        });
+                        const tools = buildToolListEntries(toolsList, resolveToolMeta);
                         res.json({
                             jsonrpc: '2.0',
                             id: payload?.id ?? null,

package/dist/src/server/stdioServer.js

@@ -6,6 +6,7 @@ import { randomUUID } from 'node:crypto';
 import logger from '../logger.js';
 import actualToolsManager from '../actualToolsManager.js';
 import { requestContext } from '../lib/requestContext.js';
+import { buildToolListEntries } from '../lib/tool-list-entry.js';
 export async function startStdioServer(mcp, capabilities, implementedTools, serverDescription, serverInstructions, toolSchemas, version) {
     const toolsList = Array.isArray(implementedTools) ? implementedTools : [];
     // #348: a synthetic session identity for this stdio process.
@@ -32,17 +33,14 @@ export async function startStdioServer(mcp, capabilities, implementedTools, serv
     const server = new Server({ name: serverDescription || 'actual-mcp-server', version: version || '0.1.0' }, { capabilities, instructions: serverInstructions });
     // List tools handler — mirrors createServerInstance() in httpServer.ts
     server.setRequestHandler(ListToolsRequestSchema, async () => {
-        const tools = toolsList.map((name) => {
-            const schemaFromParam = toolSchemas && toolSchemas[name];
-            const schemaFromManager = actualToolsManager?.getToolSchema?.(name);
-            const schema = schemaFromParam || schemaFromManager;
-            const inputSchema = schema && typeof schema === 'object' && Object.keys(schema).length > 0
-                ? schema
-                : { type: 'object', properties: {}, additionalProperties: false };
-            const tool = actualToolsManager.getTool(name);
-            const description = tool?.description || `Tool ${name}`;
-            return { name, description, inputSchema };
-        });
+        // #379: the SAME builder the HTTP paths use. stdio is the transport Claude Desktop
+        // runs, and it previously assembled this payload independently, so an addition to the
+        // published surface could reach HTTP clients and silently miss stdio ones.
+        const tools = buildToolListEntries(toolsList, (name) => ({
+            description: actualToolsManager.getTool(name)?.description,
+            schema: (toolSchemas && toolSchemas[name]) ||
+                actualToolsManager?.getToolSchema?.(name),
+        }));
         logger.debug(`[STDIO] tools/list → ${tools.length} tools`);
         return { tools };
     });

package/dist/src/tools/accounts_close.js

@@ -1,21 +1,19 @@
 import { z } from 'zod';
 import adapter from '../lib/actual-adapter.js';
+import { CommonSchemas } from '../lib/schemas/common.js';
 const InputSchema = z
     .object({
-    id: z.string().min(1).max(64).describe('Account ID to close'),
+    id: CommonSchemas.accountId.describe('Account ID to close'),
     // #357: documented by the Actual API reference as required when the account's
     // balance is non-zero, and previously not exposed at all, which made such an
     // account impossible to close through this server.
-    transferAccountId: z
-        .string()
-        .min(1)
-        .max(64)
+    // #380: the same entity type as `id` at the top of this object, so it gets the same schema. It was
+    // left on a bounded string because the drift guard could not SEE it: its detector
+    // required `z.` on the field's own line, and this declaration breaks after `z`.
+    transferAccountId: CommonSchemas.accountId
         .optional()
         .describe('Account ID to move the remaining balance to. REQUIRED when the account has a non-zero balance.'),
-    transferCategoryId: z
-        .string()
-        .min(1)
-        .max(64)
+    transferCategoryId: CommonSchemas.categoryId
         .optional()
         .describe('Category to assign the balancing transaction to. Optional, used with transferAccountId.'),
 })

package/dist/src/tools/accounts_create.js

@@ -6,12 +6,19 @@ export default createTool({
     name: 'actual_accounts_create',
     description: 'Create a new account in Actual Budget',
     schema: z.object({
-        id: z.string().optional(),
+        // #380: the `id` field was REMOVED rather than tightened. Upstream ignores it:
+        // `handlers['api/account-create']` destructures only name, offbudget, closed and the
+        // balance, so `insertWithUUID` always mints a fresh UUID (verified against the
+        // @actual-app/api source shipped in dist/index.js.map). A caller who supplied an id got
+        // `{ success: true }` and an account with a DIFFERENT id, then a not-found from
+        // actual_accounts_get_balance. That is the same success-lie family as #350, so
+        // publishing the field at all was the defect; typing it would only have made an
+        // unusable field look deliberate.
         name: CommonSchemas.name,
         balance: CommonSchemas.optionalAmountCents
     }),
     handler: async (input) => {
-        const accountPayload = { id: input.id, name: input.name, balance: input.balance };
+        const accountPayload = { name: input.name, balance: input.balance };
         return await adapter.createAccount(accountPayload, input.balance);
     },
     examples: [

package/dist/src/tools/accounts_delete.js

@@ -1,7 +1,8 @@
 import { z } from 'zod';
 import adapter from '../lib/actual-adapter.js';
+import { CommonSchemas } from '../lib/schemas/common.js';
 const InputSchema = z.object({
-    id: z.string().describe('Account ID to delete'),
+    id: CommonSchemas.accountId.describe('Account ID to delete'),
 });
 /**
  * #347: this tool used to return `{success: true}` unconditionally, which was a

package/dist/src/tools/accounts_get_balance.js

@@ -1,8 +1,9 @@
 import { z } from 'zod';
 import adapter from '../lib/actual-adapter.js';
+import { CommonSchemas } from '../lib/schemas/common.js';
 import { notFoundMsg } from '../lib/errors.js';
 const InputSchema = z.object({
-    id: z.string().min(1, 'Account ID is required').describe('The UUID of the account'),
+    id: CommonSchemas.accountId.describe('The UUID of the account'),
     cutoff: z.string().optional().describe('Optional cutoff date (YYYY-MM-DD format)')
 }).strict();
 const tool = {

package/dist/src/tools/accounts_reopen.js

@@ -1,10 +1,13 @@
 import { z } from 'zod';
 import adapter from '../lib/actual-adapter.js';
+import { CommonSchemas } from '../lib/schemas/common.js';
 const InputSchema = z.object({
-    // Bounded, because the id is echoed into the error message and into the structured
-    // logs. Not tightened to CommonSchemas.accountId (a UUID) here: several fixtures use
-    // short non-UUID ids, and that sweep is tracked separately alongside #365.
-    id: z.string().min(1).max(64).describe('Account ID to reopen'),
+    // #380: tightened to the shared account schema. This comment previously said the
+    // opposite ("not tightened here: several fixtures use short non-UUID ids"), which was
+    // true until that sweep happened and would have read as an invitation to revert. The
+    // echo-into-logs concern it raised is still real and is now served by the UUID pattern,
+    // which is strictly tighter than the length bound it replaced.
+    id: CommonSchemas.accountId.describe('Account ID to reopen'),
 });
 /**
  * #358. The guard lives in `adapter.reopenAccount`, which reads, writes and re-reads inside

package/dist/src/tools/budget_updates_batch.js

@@ -1,11 +1,12 @@
 import { z } from 'zod';
 import adapter from '../lib/actual-adapter.js';
+import { CommonSchemas } from '../lib/schemas/common.js';
 import api from '@actual-app/api';
 // eslint-disable-next-line @typescript-eslint/no-explicit-any
 const { setBudgetAmount: rawSetBudgetAmount, setBudgetCarryover: rawSetBudgetCarryover } = api;
 const BudgetOperationSchema = z.object({
     month: z.string().regex(/^\d{4}-(0[1-9]|1[0-2])$/, 'month must be in YYYY-MM format (e.g. 2025-01)').describe('Budget month in YYYY-MM format'),
-    categoryId: z.string().describe('Category ID'),
+    categoryId: CommonSchemas.categoryId.describe('Category ID'),
     amount: z.number().optional().describe('Budget amount in cents (if setting amount)'),
     carryover: z.boolean().optional().describe('Carryover flag (if setting carryover)'),
 });

package/dist/src/tools/budgets_setAmount.js

@@ -1,12 +1,13 @@
 import { z } from 'zod';
 import adapter from '../lib/actual-adapter.js';
+import { CommonSchemas } from '../lib/schemas/common.js';
 import { isPreflightRefusal } from '../lib/errors.js';
 const InputSchema = z.object({
     // #361: this was a bare z.string().min(1), so 'banana' parsed and reached the API. The
     // regex matches actual_budgets_holdForNextMonth and the other month-taking tools; the
     // adapter additionally checks the month is one this budget actually has.
     month: z.string().regex(/^\d{4}-(0[1-9]|1[0-2])$/, 'month must be in YYYY-MM format'),
-    categoryId: z.string().min(1).max(64),
+    categoryId: CommonSchemas.categoryId,
     amount: z.number().int('amount must be an integer (cents)'),
 });
 const tool = {

package/dist/src/tools/budgets_setCarryover.js

@@ -1,8 +1,9 @@
 import { z } from 'zod';
 import adapter from '../lib/actual-adapter.js';
+import { CommonSchemas } from '../lib/schemas/common.js';
 const InputSchema = z.object({
     month: z.string().describe('Budget month in YYYY-MM format'),
-    categoryId: z.string().describe('Category ID'),
+    categoryId: CommonSchemas.categoryId.describe('Category ID'),
     flag: z.boolean().describe('Whether to carry over unused budget to next month (true) or not (false)'),
 });
 const tool = {

package/dist/src/tools/budgets_transfer.js

@@ -1,14 +1,13 @@
 import { z } from 'zod';
 import adapter from '../lib/actual-adapter.js';
+import { CommonSchemas } from '../lib/schemas/common.js';
 const InputSchema = z.object({
     month: z.string()
         .regex(/^\d{4}-\d{2}$/, 'month must be YYYY-MM')
         .describe('Month in YYYY-MM format'),
-    fromCategoryId: z.string()
-        .min(1, 'fromCategoryId is required')
+    fromCategoryId: CommonSchemas.categoryId
         .describe('Source category ID to transfer from'),
-    toCategoryId: z.string()
-        .min(1, 'toCategoryId is required')
+    toCategoryId: CommonSchemas.categoryId
         .describe('Target category ID to transfer to'),
     amount: z.number()
         .int('amount must be an integer (cents)')

package/dist/src/tools/categories_delete.js

@@ -1,7 +1,8 @@
 import { z } from 'zod';
 import adapter from '../lib/actual-adapter.js';
+import { CommonSchemas } from '../lib/schemas/common.js';
 const InputSchema = z.object({
-    id: z.string().describe('Category ID to delete'),
+    id: CommonSchemas.categoryId.describe('Category ID to delete'),
 });
 const tool = {
     name: 'actual_categories_delete',

package/dist/src/tools/categories_update.js

@@ -1,10 +1,11 @@
 import { z } from 'zod';
 import adapter from '../lib/actual-adapter.js';
+import { CommonSchemas } from '../lib/schemas/common.js';
 const InputSchema = z.object({
-    id: z.string().describe('Category ID to update'),
+    id: CommonSchemas.categoryId.describe('Category ID to update'),
     fields: z.object({
         name: z.string().optional().describe('New category name'),
-        group_id: z.string().optional().describe('Category group ID to move this category to'),
+        group_id: CommonSchemas.categoryGroupId.optional().describe('Category group ID to move this category to'),
         is_income: z.boolean().optional().describe('Whether this is an income category'),
         hidden: z.boolean().optional().describe('Whether this category is hidden'),
     }).describe('Fields to update'),

package/dist/src/tools/category_groups_delete.js

@@ -1,7 +1,8 @@
 import { z } from 'zod';
 import adapter from '../lib/actual-adapter.js';
+import { CommonSchemas } from '../lib/schemas/common.js';
 const InputSchema = z.object({
-    id: z.string().describe('Category group ID to delete'),
+    id: CommonSchemas.categoryGroupId.describe('Category group ID to delete'),
 });
 /**
  * #376: the existence guard lives in `adapter.deleteCategoryGroup`, which reads and writes

package/dist/src/tools/category_groups_update.js

@@ -1,7 +1,8 @@
 import { z } from 'zod';
 import adapter from '../lib/actual-adapter.js';
+import { CommonSchemas } from '../lib/schemas/common.js';
 const InputSchema = z.object({
-    id: z.string().describe('Category group ID to update'),
+    id: CommonSchemas.categoryGroupId.describe('Category group ID to update'),
     fields: z.object({
         name: z.string().optional().describe('New group name'),
         is_income: z.boolean().optional().describe('Whether this is an income category group'),

package/dist/src/tools/payee_rules_get.js

@@ -1,8 +1,9 @@
 import { z } from 'zod';
 import adapter from '../lib/actual-adapter.js';
+import { CommonSchemas } from '../lib/schemas/common.js';
 import { notFoundMsg } from '../lib/errors.js';
 const InputSchema = z.object({
-    payeeId: z.string().describe('ID of the payee to get rules for'),
+    payeeId: CommonSchemas.payeeId.describe('ID of the payee to get rules for'),
 });
 const tool = {
     name: 'actual_payee_rules_get',

package/dist/src/tools/rules_delete.js

@@ -1,9 +1,12 @@
 import { z } from 'zod';
 import adapter from '../lib/actual-adapter.js';
+import { CommonSchemas } from '../lib/schemas/common.js';
 const InputSchema = z.object({
-    // Bounded for the same reason as the payee ids in #356: this value is echoed into the
-    // not-found message, into the schedule-owned refusal, and into logger.error.
-    id: z.string().min(1).max(64).describe('Rule ID to delete'),
+    // #380: the shared rule schema. The reason from #356 still holds and is why it is not
+    // simply a bare string: this value is echoed into the not-found message, into the
+    // schedule-owned refusal, and into logger.error, so it must be bounded. The UUID pattern
+    // bounds it more tightly than the .max(64) it replaced.
+    id: CommonSchemas.ruleId.describe('Rule ID to delete'),
 });
 /**
  * #355 fixed two defects here (a silent no-op on an unknown id, and success reported for a

package/dist/src/tools/rules_update.js

@@ -1,5 +1,6 @@
 import { z } from 'zod';
 import adapter from '../lib/actual-adapter.js';
+import { CommonSchemas } from '../lib/schemas/common.js';
 // Define the schema for rule conditions and actions (same as create)
 const ConditionSchema = z.object({
     field: z.string().describe('Field to match (e.g., "payee", "notes", "amount", "category")'),
@@ -26,7 +27,7 @@ const FIELD_OPERATORS = {
     'date': { type: 'date', operators: ['is', 'gte', 'lte', 'gt', 'lt'] },
 };
 const InputSchema = z.object({
-    id: z.string().describe('Rule ID to update'),
+    id: CommonSchemas.ruleId.describe('Rule ID to update'),
     fields: z.object({
         // #342: null is Actual's DEFAULT stage; the literal "default" is rejected by
         // its validator. Deliberately NO .default() here: this is a partial update, so

package/dist/src/tools/schedules_create.js

@@ -1,13 +1,13 @@
 import { z } from 'zod';
 import adapter from '../lib/actual-adapter.js';
-import { UUID_PATTERN } from '../lib/constants.js';
+import { CommonSchemas } from '../lib/schemas/common.js';
 import { RecurConfigSchema } from '../lib/schemas/recur.js';
 const InputSchema = z.object({
     name: z.string().optional()
         .describe('Unique display name for the schedule'),
-    payee: z.string().regex(UUID_PATTERN, 'Invalid UUID format').optional()
+    payee: CommonSchemas.payeeId.optional()
         .describe('Payee UUID (from actual_payees_get)'),
-    account: z.string().regex(UUID_PATTERN, 'Invalid UUID format').optional()
+    account: CommonSchemas.accountId.optional()
         .describe('Account UUID (from actual_accounts_list). If omitted the schedule is not tied to an account'),
     amount: z.number().int().optional()
         .describe('Amount in cents. Negative = expense (e.g. -5000 = -$50.00), positive = income'),

package/dist/src/tools/schedules_delete.js

@@ -1,9 +1,8 @@
 import { z } from 'zod';
 import adapter from '../lib/actual-adapter.js';
-import { UUID_PATTERN } from '../lib/constants.js';
+import { CommonSchemas } from '../lib/schemas/common.js';
 const InputSchema = z.object({
-    id: z.string().regex(UUID_PATTERN, 'Invalid UUID format')
-        .describe('UUID of the schedule to delete (from actual_schedules_get)'),
+    id: CommonSchemas.scheduleId.describe('UUID of the schedule to delete (from actual_schedules_get)'),
 });
 /**
  * #376: the existence guard and the SQLite constraint-error translation live in

package/dist/src/tools/schedules_update.js

@@ -1,15 +1,14 @@
 import { z } from 'zod';
 import adapter from '../lib/actual-adapter.js';
-import { UUID_PATTERN } from '../lib/constants.js';
+import { CommonSchemas } from '../lib/schemas/common.js';
 import { RecurConfigSchema } from '../lib/schemas/recur.js';
 const InputSchema = z.object({
-    id: z.string().regex(UUID_PATTERN, 'Invalid UUID format')
-        .describe('UUID of the schedule to update (from actual_schedules_get)'),
+    id: CommonSchemas.scheduleId.describe('UUID of the schedule to update (from actual_schedules_get)'),
     name: z.string().optional()
         .describe('New display name for the schedule'),
-    payee: z.string().regex(UUID_PATTERN, 'Invalid UUID format').nullable().optional()
+    payee: CommonSchemas.payeeId.nullable().optional()
         .describe('New payee UUID, or null to clear'),
-    account: z.string().regex(UUID_PATTERN, 'Invalid UUID format').nullable().optional()
+    account: CommonSchemas.accountId.nullable().optional()
         .describe('New account UUID, or null to clear'),
     amount: z.number().int().optional()
         .describe('New amount in cents. Negative = expense, positive = income'),

package/dist/src/tools/transactions_delete.js

@@ -1,7 +1,8 @@
 import { z } from 'zod';
 import adapter from '../lib/actual-adapter.js';
+import { CommonSchemas } from '../lib/schemas/common.js';
 const InputSchema = z.object({
-    id: z.string().describe('Transaction ID to delete'),
+    id: CommonSchemas.transactionId.describe('Transaction ID to delete'),
 });
 const tool = {
     name: 'actual_transactions_delete',

package/dist/src/tools/transactions_update.js

@@ -2,7 +2,15 @@ import { z } from 'zod';
 import adapter from '../lib/actual-adapter.js';
 import { CommonSchemas } from '../lib/schemas/common.js';
 const InputSchema = z.object({
-    id: z.string().optional().describe('Transaction ID to update (optional for smoke tests, required for actual usage)'),
+    // #380: REQUIRED, and typed. It was `.optional()` with the describe "optional for smoke
+    // tests, required for actual usage": a published contract weakened to suit a test. The
+    // handler then returned `{ success: true }` for a call with no id, writing nothing, which
+    // is the #350 failure this project has spent three releases removing. A model that omitted
+    // the id was told its edit had succeeded.
+    //
+    // The smoke test does supply an id (generated_tools.smoke.test.js), so the escape hatch
+    // was not even load bearing when it was removed.
+    id: CommonSchemas.transactionId.describe('Transaction ID to update'),
     fields: z.object({
         account: z.string().nullable().optional().describe('Account ID'),
         date: z.string().nullable().optional().describe('Transaction date (YYYY-MM-DD)'),
@@ -32,10 +40,6 @@ const tool = {
     inputSchema: InputSchema,
     call: async (args, _meta) => {
         const input = InputSchema.parse(args || {});
-        // For smoke tests, return early if no id provided
-        if (!input.id) {
-            return { success: true };
-        }
         await adapter.updateTransaction(input.id, input.fields);
         return { success: true };
     },

package/dist/src/tools/transactions_update_batch.js

@@ -13,6 +13,7 @@
  */
 import { z } from 'zod';
 import adapter from '../lib/actual-adapter.js';
+import { CommonSchemas } from '../lib/schemas/common.js';
 const FieldsSchema = z.object({
     account: z.string().nullable().optional().describe('Account ID'),
     date: z.string().nullable().optional().describe('Transaction date (YYYY-MM-DD)'),
@@ -25,7 +26,7 @@ const FieldsSchema = z.object({
     cleared: z.boolean().nullable().optional().describe('Whether transaction is cleared'),
 });
 const UpdateItemSchema = z.object({
-    id: z.string().describe('Transaction ID to update'),
+    id: CommonSchemas.transactionId.describe('Transaction ID to update'),
     fields: FieldsSchema.describe('Fields to update for this transaction'),
 });
 const InputSchema = z.object({

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "actual-mcp-server",
   "displayName": "Actual MCP Server",
-  "version": "0.14.1",
+  "version": "0.16.0",
   "engines": {
     "node": ">=22.0.0",
     "npm": ">=10.0.0"
@@ -30,7 +30,7 @@
     "verify-tools": "npm run build && node scripts/verify-tools.js",
     "check:coverage": "node scripts/list-actual-api-methods.mjs",
     "direct-sync": "node scripts/direct-sync/bank-sync-direct.mjs",
-    "test:unit-js": "node tests/unit/transactions_create.test.js && node tests/unit/generated_tools.smoke.test.js && node tests/unit/schema_validation.test.js && node tests/unit/schema_json_openai_compat.test.js && node tests/unit/config_https_validation.test.js && node tests/unit/config_data_dir.test.js && node tests/unit/config_drift.test.js && node tests/unit/port_alignment.test.js && node tests/unit/dockerfile_data_dir_alignment.test.js && node tests/unit/unraid_template_alignment.test.js && node tests/unit/entrypoint_invariants.test.js && node tests/unit/e2e_spec_collection.test.js && node tests/unit/compose_profile_sync.test.js && node tests/unit/advertised_tools_sync.test.js && node tests/unit/knip_config.test.js && node tests/unit/readme_stats_sync.test.js && node tests/unit/config_insecure_upstream.test.js && node tests/unit/workflow_release_guards.test.js && node tests/unit/report_train_failure.test.js && node tests/unit/unit_chain_membership.test.js && node tests/unit/api_surface_drift.test.js && node tests/unit/write_effect_audit_staleness.test.js && node tests/unit/write_effect_audit_membership.test.js && node tests/unit/api_coverage_baseline.test.js && node tests/unit/train_preflight.test.js && node tests/unit/verify_published_artifacts.test.js && node tests/unit/report_train_stale.test.js && node tests/unit/stdio_framing_check.test.js && node tests/unit/server_info.test.js && node tests/unit/transfers_create.test.js && node tests/unit/bot_target_branch.test.js && node tests/unit/auth_posture.test.js && node tests/unit/auth_posture_wiring.test.js && node tests/unit/auth-acl.test.js && node tests/unit/bug76.test.js && node tests/unit/budgets_setAmount.test.js && node tests/unit/budgets_hold_for_next_month.test.js && node tests/unit/budgets_transfer.test.js && node tests/unit/transactions_uncategorized.test.js && node tests/unit/httpServer_session_init.test.js && node tests/unit/httpServer_session_not_found.test.js && node tests/unit/manual_mcp_client_retry.test.js && node tests/unit/manual_mcp_client_session.test.js && node tests/unit/manual_mcp_client_circuit.test.js && node tests/unit/manual_runner_killswitch.test.js && node tests/unit/adapter_auth_rate_limit.test.js && node tests/unit/adapter_session_reuse.test.js && node tests/unit/retry_classifier.test.js && node tests/unit/adapter_module_surface.test.js && node tests/unit/adapter_nonidempotent_no_retry.test.js && node tests/unit/pool_liveness.test.js && node tests/unit/pool_shutdown_all.test.js && node tests/unit/query_where_operators.test.js && node tests/unit/query_run_validation.test.js && node tests/unit/adapter_with_write_session.test.js && node tests/unit/category_groups_delete.test.js && node tests/unit/rules_delete.test.js && node tests/unit/schedules_delete.test.js && node tests/unit/accounts_delete.test.js && node tests/unit/update_tools_not_found.test.js && node tests/unit/accounts_close.test.js && node tests/unit/accounts_reopen.test.js && node tests/unit/payees_delete.test.js && node tests/unit/payees_merge.test.js && node tests/unit/rules_create_or_update.test.js && node tests/unit/unhandled-rejection.test.js && node tests/unit/rejection-allowlist-purity.test.js && node tests/unit/httpServer_bearer_auth.test.js && node tests/unit/httpServer_oidc_audience.test.js && node tests/unit/httpServer_oidc_auth_verification.test.js && node tests/unit/httpServer_oidc_jwks_discovery.test.js && node tests/unit/httpServer_body_limit.test.js && node tests/unit/httpServer_bind_host.test.js && node tests/unit/adapter_write_pool_cooperation.test.js && node tests/unit/budget_acl_enforcement.test.js && node tests/unit/budget_preference_store.test.js && node tests/unit/budget_preference_restore.test.js && node tests/unit/tags_list.test.js && node tests/unit/tags_create.test.js && node tests/unit/tags_update.test.js && node tests/unit/tags_delete.test.js && node tests/unit/notes_get.test.js && node tests/unit/notes_update.test.js && node tests/unit/payees_common_list.test.js && node tests/unit/transactions_update_guard.test.js && node tests/unit/transactions_update_splits.test.js && node tests/unit/entities_search.test.js && node tests/unit/transactions_import_schema.test.js && node tests/unit/tool_schema_shape.test.js && node tests/unit/zod_error_format.test.js && node tests/unit/tool_count_sync.test.js && node tests/unit/stdio_transport.test.js && node tests/unit/stdio_budget_switch.test.js && node tests/unit/logger_structured.test.js && node tests/unit/logger_redaction.test.js && node tests/unit/logger_correlation.test.js && node tests/unit/check_coverage.test.js && node tests/unit/adapter_op_timeout.test.js && node tests/unit/adapter_write_queue_wakeup.test.js && node tests/unit/ci_workflow_guards.test.js && node tests/unit/node_version_guard.test.js && node tests/unit/node_version_drift.test.js && node tests/unit/observability_smoke.test.js && node tests/unit/residue_pattern.test.js && node tests/unit/dual_transport_gate.test.js && node tests/unit/manual_assertions_use_helper.test.js && node tests/unit/server_version_guard.test.js && node tests/unit/payee_rules_reference_filter.test.js && node tests/unit/oidc_metadata_discovery.test.js && node tests/unit/httpServer_oauth_metadata_route.test.js && node tests/unit/httpServer_mcp_info_route.test.js && node tests/unit/residue_sweep_balance_account.test.js && node tests/unit/tool_factory.test.js && node tests/unit/budget_registry_parse.test.js && node tests/unit/preferences_get.test.js && node tests/unit/budgets_export.test.js && node tests/unit/budgets_import.test.js && node tests/unit/budgets_import_syncid.test.js && node tests/unit/budget_acl_dynamic.test.js && node tests/unit/budget_acl_identity_map.test.js && node tests/unit/budget_acl_userinfo.test.js && node tests/unit/acl_e2e_fixture_contract.test.js && node tests/unit/budget_acl_middleware.test.js && node tests/unit/rules_stage.test.js",
+    "test:unit-js": "node tests/unit/transactions_create.test.js && node tests/unit/generated_tools.smoke.test.js && node tests/unit/schema_validation.test.js && node tests/unit/schema_json_openai_compat.test.js && node tests/unit/config_https_validation.test.js && node tests/unit/config_data_dir.test.js && node tests/unit/config_drift.test.js && node tests/unit/port_alignment.test.js && node tests/unit/dockerfile_data_dir_alignment.test.js && node tests/unit/unraid_template_alignment.test.js && node tests/unit/entrypoint_invariants.test.js && node tests/unit/e2e_spec_collection.test.js && node tests/unit/compose_profile_sync.test.js && node tests/unit/advertised_tools_sync.test.js && node tests/unit/knip_config.test.js && node tests/unit/readme_stats_sync.test.js && node tests/unit/config_insecure_upstream.test.js && node tests/unit/workflow_release_guards.test.js && node tests/unit/report_train_failure.test.js && node tests/unit/unit_chain_membership.test.js && node tests/unit/api_surface_drift.test.js && node tests/unit/write_effect_audit_staleness.test.js && node tests/unit/write_effect_audit_membership.test.js && node tests/unit/tool_annotations.test.js && node tests/unit/tool_id_schema_drift.test.js && node tests/unit/api_coverage_baseline.test.js && node tests/unit/train_preflight.test.js && node tests/unit/verify_published_artifacts.test.js && node tests/unit/report_train_stale.test.js && node tests/unit/stdio_framing_check.test.js && node tests/unit/server_info.test.js && node tests/unit/transfers_create.test.js && node tests/unit/bot_target_branch.test.js && node tests/unit/auth_posture.test.js && node tests/unit/auth_posture_wiring.test.js && node tests/unit/auth-acl.test.js && node tests/unit/bug76.test.js && node tests/unit/budgets_setAmount.test.js && node tests/unit/budgets_hold_for_next_month.test.js && node tests/unit/budgets_transfer.test.js && node tests/unit/transactions_uncategorized.test.js && node tests/unit/httpServer_session_init.test.js && node tests/unit/httpServer_session_not_found.test.js && node tests/unit/manual_mcp_client_retry.test.js && node tests/unit/manual_mcp_client_session.test.js && node tests/unit/manual_mcp_client_circuit.test.js && node tests/unit/manual_runner_killswitch.test.js && node tests/unit/adapter_auth_rate_limit.test.js && node tests/unit/adapter_session_reuse.test.js && node tests/unit/retry_classifier.test.js && node tests/unit/adapter_module_surface.test.js && node tests/unit/adapter_nonidempotent_no_retry.test.js && node tests/unit/pool_liveness.test.js && node tests/unit/pool_shutdown_all.test.js && node tests/unit/query_where_operators.test.js && node tests/unit/query_run_validation.test.js && node tests/unit/adapter_with_write_session.test.js && node tests/unit/category_groups_delete.test.js && node tests/unit/rules_delete.test.js && node tests/unit/schedules_delete.test.js && node tests/unit/accounts_delete.test.js && node tests/unit/update_tools_not_found.test.js && node tests/unit/accounts_close.test.js && node tests/unit/accounts_reopen.test.js && node tests/unit/payees_delete.test.js && node tests/unit/payees_merge.test.js && node tests/unit/rules_create_or_update.test.js && node tests/unit/unhandled-rejection.test.js && node tests/unit/rejection-allowlist-purity.test.js && node tests/unit/httpServer_bearer_auth.test.js && node tests/unit/httpServer_oidc_audience.test.js && node tests/unit/httpServer_oidc_auth_verification.test.js && node tests/unit/httpServer_oidc_jwks_discovery.test.js && node tests/unit/httpServer_body_limit.test.js && node tests/unit/httpServer_bind_host.test.js && node tests/unit/adapter_write_pool_cooperation.test.js && node tests/unit/budget_acl_enforcement.test.js && node tests/unit/budget_preference_store.test.js && node tests/unit/budget_preference_restore.test.js && node tests/unit/tags_list.test.js && node tests/unit/tags_create.test.js && node tests/unit/tags_update.test.js && node tests/unit/tags_delete.test.js && node tests/unit/notes_get.test.js && node tests/unit/notes_update.test.js && node tests/unit/payees_common_list.test.js && node tests/unit/transactions_update_guard.test.js && node tests/unit/transactions_update_splits.test.js && node tests/unit/entities_search.test.js && node tests/unit/transactions_import_schema.test.js && node tests/unit/tool_schema_shape.test.js && node tests/unit/zod_error_format.test.js && node tests/unit/tool_count_sync.test.js && node tests/unit/stdio_transport.test.js && node tests/unit/stdio_budget_switch.test.js && node tests/unit/logger_structured.test.js && node tests/unit/logger_redaction.test.js && node tests/unit/logger_correlation.test.js && node tests/unit/check_coverage.test.js && node tests/unit/adapter_op_timeout.test.js && node tests/unit/adapter_write_queue_wakeup.test.js && node tests/unit/ci_workflow_guards.test.js && node tests/unit/node_version_guard.test.js && node tests/unit/node_version_drift.test.js && node tests/unit/observability_smoke.test.js && node tests/unit/residue_pattern.test.js && node tests/unit/dual_transport_gate.test.js && node tests/unit/manual_assertions_use_helper.test.js && node tests/unit/server_version_guard.test.js && node tests/unit/payee_rules_reference_filter.test.js && node tests/unit/oidc_metadata_discovery.test.js && node tests/unit/httpServer_oauth_metadata_route.test.js && node tests/unit/httpServer_mcp_info_route.test.js && node tests/unit/residue_sweep_balance_account.test.js && node tests/unit/tool_factory.test.js && node tests/unit/budget_registry_parse.test.js && node tests/unit/preferences_get.test.js && node tests/unit/budgets_export.test.js && node tests/unit/budgets_import.test.js && node tests/unit/budgets_import_syncid.test.js && node tests/unit/budget_acl_dynamic.test.js && node tests/unit/budget_acl_identity_map.test.js && node tests/unit/budget_acl_userinfo.test.js && node tests/unit/acl_e2e_fixture_contract.test.js && node tests/unit/budget_acl_middleware.test.js && node tests/unit/rules_stage.test.js",
     "test:adapter": "npm run build && node dist/src/tests_adapter_runner.js",
     "test:e2e": "npx playwright test",
     "test:e2e:docker": "./tests/e2e/run-docker-e2e.sh",