actual-mcp-server 0.15.0 → 0.16.0

package/README.md

@@ -774,7 +774,7 @@ The software is provided **as-is**, without warranty of any kind. The author acc
 
 ---
 
-**Version:** 0.15.0 | **Tool Count:** 74 (verified LibreChat-compatible)
+**Version:** 0.16.0 | **Tool Count:** 74 (verified LibreChat-compatible)
 
 ## Sponsor
 

package/dist/src/lib/schemas/common.js

@@ -66,6 +66,18 @@ export const tagIdSchema = z
     .string()
     .regex(UUID_PATTERN, 'Invalid tag ID format (expected UUID)')
     .describe('Tag UUID');
+/**
+ * Schedule UUID validation
+ * Used for: schedule management operations (update, delete)
+ *
+ * #380: added because `schedules_update` and `schedules_delete` were inlining
+ * `UUID_PATTERN` directly, which is the same rule expressed twice and is how a fifth way
+ * of describing an id appears.
+ */
+export const scheduleIdSchema = z
+    .string()
+    .regex(UUID_PATTERN, 'Invalid schedule ID format (expected UUID)')
+    .describe('Schedule UUID');
 // ============================================================================
 // DATE SCHEMAS
 // ============================================================================
@@ -214,6 +226,7 @@ export const CommonSchemas = {
     payeeId: payeeIdSchema,
     ruleId: ruleIdSchema,
     tagId: tagIdSchema,
+    scheduleId: scheduleIdSchema,
     // Dates
     date: dateSchema,
     monthYear: monthYearSchema,

package/dist/src/tools/accounts_close.js

@@ -1,21 +1,19 @@
 import { z } from 'zod';
 import adapter from '../lib/actual-adapter.js';
+import { CommonSchemas } from '../lib/schemas/common.js';
 const InputSchema = z
     .object({
-    id: z.string().min(1).max(64).describe('Account ID to close'),
+    id: CommonSchemas.accountId.describe('Account ID to close'),
     // #357: documented by the Actual API reference as required when the account's
     // balance is non-zero, and previously not exposed at all, which made such an
     // account impossible to close through this server.
-    transferAccountId: z
-        .string()
-        .min(1)
-        .max(64)
+    // #380: the same entity type as `id` at the top of this object, so it gets the same schema. It was
+    // left on a bounded string because the drift guard could not SEE it: its detector
+    // required `z.` on the field's own line, and this declaration breaks after `z`.
+    transferAccountId: CommonSchemas.accountId
         .optional()
         .describe('Account ID to move the remaining balance to. REQUIRED when the account has a non-zero balance.'),
-    transferCategoryId: z
-        .string()
-        .min(1)
-        .max(64)
+    transferCategoryId: CommonSchemas.categoryId
         .optional()
         .describe('Category to assign the balancing transaction to. Optional, used with transferAccountId.'),
 })

package/dist/src/tools/accounts_create.js

@@ -6,12 +6,19 @@ export default createTool({
     name: 'actual_accounts_create',
     description: 'Create a new account in Actual Budget',
     schema: z.object({
-        id: z.string().optional(),
+        // #380: the `id` field was REMOVED rather than tightened. Upstream ignores it:
+        // `handlers['api/account-create']` destructures only name, offbudget, closed and the
+        // balance, so `insertWithUUID` always mints a fresh UUID (verified against the
+        // @actual-app/api source shipped in dist/index.js.map). A caller who supplied an id got
+        // `{ success: true }` and an account with a DIFFERENT id, then a not-found from
+        // actual_accounts_get_balance. That is the same success-lie family as #350, so
+        // publishing the field at all was the defect; typing it would only have made an
+        // unusable field look deliberate.
         name: CommonSchemas.name,
         balance: CommonSchemas.optionalAmountCents
     }),
     handler: async (input) => {
-        const accountPayload = { id: input.id, name: input.name, balance: input.balance };
+        const accountPayload = { name: input.name, balance: input.balance };
         return await adapter.createAccount(accountPayload, input.balance);
     },
     examples: [

package/dist/src/tools/accounts_delete.js

@@ -1,7 +1,8 @@
 import { z } from 'zod';
 import adapter from '../lib/actual-adapter.js';
+import { CommonSchemas } from '../lib/schemas/common.js';
 const InputSchema = z.object({
-    id: z.string().describe('Account ID to delete'),
+    id: CommonSchemas.accountId.describe('Account ID to delete'),
 });
 /**
  * #347: this tool used to return `{success: true}` unconditionally, which was a

package/dist/src/tools/accounts_get_balance.js

@@ -1,8 +1,9 @@
 import { z } from 'zod';
 import adapter from '../lib/actual-adapter.js';
+import { CommonSchemas } from '../lib/schemas/common.js';
 import { notFoundMsg } from '../lib/errors.js';
 const InputSchema = z.object({
-    id: z.string().min(1, 'Account ID is required').describe('The UUID of the account'),
+    id: CommonSchemas.accountId.describe('The UUID of the account'),
     cutoff: z.string().optional().describe('Optional cutoff date (YYYY-MM-DD format)')
 }).strict();
 const tool = {

package/dist/src/tools/accounts_reopen.js

@@ -1,10 +1,13 @@
 import { z } from 'zod';
 import adapter from '../lib/actual-adapter.js';
+import { CommonSchemas } from '../lib/schemas/common.js';
 const InputSchema = z.object({
-    // Bounded, because the id is echoed into the error message and into the structured
-    // logs. Not tightened to CommonSchemas.accountId (a UUID) here: several fixtures use
-    // short non-UUID ids, and that sweep is tracked separately alongside #365.
-    id: z.string().min(1).max(64).describe('Account ID to reopen'),
+    // #380: tightened to the shared account schema. This comment previously said the
+    // opposite ("not tightened here: several fixtures use short non-UUID ids"), which was
+    // true until that sweep happened and would have read as an invitation to revert. The
+    // echo-into-logs concern it raised is still real and is now served by the UUID pattern,
+    // which is strictly tighter than the length bound it replaced.
+    id: CommonSchemas.accountId.describe('Account ID to reopen'),
 });
 /**
  * #358. The guard lives in `adapter.reopenAccount`, which reads, writes and re-reads inside

package/dist/src/tools/budget_updates_batch.js

@@ -1,11 +1,12 @@
 import { z } from 'zod';
 import adapter from '../lib/actual-adapter.js';
+import { CommonSchemas } from '../lib/schemas/common.js';
 import api from '@actual-app/api';
 // eslint-disable-next-line @typescript-eslint/no-explicit-any
 const { setBudgetAmount: rawSetBudgetAmount, setBudgetCarryover: rawSetBudgetCarryover } = api;
 const BudgetOperationSchema = z.object({
     month: z.string().regex(/^\d{4}-(0[1-9]|1[0-2])$/, 'month must be in YYYY-MM format (e.g. 2025-01)').describe('Budget month in YYYY-MM format'),
-    categoryId: z.string().describe('Category ID'),
+    categoryId: CommonSchemas.categoryId.describe('Category ID'),
     amount: z.number().optional().describe('Budget amount in cents (if setting amount)'),
     carryover: z.boolean().optional().describe('Carryover flag (if setting carryover)'),
 });

package/dist/src/tools/budgets_setAmount.js

@@ -1,12 +1,13 @@
 import { z } from 'zod';
 import adapter from '../lib/actual-adapter.js';
+import { CommonSchemas } from '../lib/schemas/common.js';
 import { isPreflightRefusal } from '../lib/errors.js';
 const InputSchema = z.object({
     // #361: this was a bare z.string().min(1), so 'banana' parsed and reached the API. The
     // regex matches actual_budgets_holdForNextMonth and the other month-taking tools; the
     // adapter additionally checks the month is one this budget actually has.
     month: z.string().regex(/^\d{4}-(0[1-9]|1[0-2])$/, 'month must be in YYYY-MM format'),
-    categoryId: z.string().min(1).max(64),
+    categoryId: CommonSchemas.categoryId,
     amount: z.number().int('amount must be an integer (cents)'),
 });
 const tool = {

package/dist/src/tools/budgets_setCarryover.js

@@ -1,8 +1,9 @@
 import { z } from 'zod';
 import adapter from '../lib/actual-adapter.js';
+import { CommonSchemas } from '../lib/schemas/common.js';
 const InputSchema = z.object({
     month: z.string().describe('Budget month in YYYY-MM format'),
-    categoryId: z.string().describe('Category ID'),
+    categoryId: CommonSchemas.categoryId.describe('Category ID'),
     flag: z.boolean().describe('Whether to carry over unused budget to next month (true) or not (false)'),
 });
 const tool = {

package/dist/src/tools/budgets_transfer.js

@@ -1,14 +1,13 @@
 import { z } from 'zod';
 import adapter from '../lib/actual-adapter.js';
+import { CommonSchemas } from '../lib/schemas/common.js';
 const InputSchema = z.object({
     month: z.string()
         .regex(/^\d{4}-\d{2}$/, 'month must be YYYY-MM')
         .describe('Month in YYYY-MM format'),
-    fromCategoryId: z.string()
-        .min(1, 'fromCategoryId is required')
+    fromCategoryId: CommonSchemas.categoryId
         .describe('Source category ID to transfer from'),
-    toCategoryId: z.string()
-        .min(1, 'toCategoryId is required')
+    toCategoryId: CommonSchemas.categoryId
         .describe('Target category ID to transfer to'),
     amount: z.number()
         .int('amount must be an integer (cents)')

package/dist/src/tools/categories_delete.js

@@ -1,7 +1,8 @@
 import { z } from 'zod';
 import adapter from '../lib/actual-adapter.js';
+import { CommonSchemas } from '../lib/schemas/common.js';
 const InputSchema = z.object({
-    id: z.string().describe('Category ID to delete'),
+    id: CommonSchemas.categoryId.describe('Category ID to delete'),
 });
 const tool = {
     name: 'actual_categories_delete',

package/dist/src/tools/categories_update.js

@@ -1,10 +1,11 @@
 import { z } from 'zod';
 import adapter from '../lib/actual-adapter.js';
+import { CommonSchemas } from '../lib/schemas/common.js';
 const InputSchema = z.object({
-    id: z.string().describe('Category ID to update'),
+    id: CommonSchemas.categoryId.describe('Category ID to update'),
     fields: z.object({
         name: z.string().optional().describe('New category name'),
-        group_id: z.string().optional().describe('Category group ID to move this category to'),
+        group_id: CommonSchemas.categoryGroupId.optional().describe('Category group ID to move this category to'),
         is_income: z.boolean().optional().describe('Whether this is an income category'),
         hidden: z.boolean().optional().describe('Whether this category is hidden'),
     }).describe('Fields to update'),

package/dist/src/tools/category_groups_delete.js

@@ -1,7 +1,8 @@
 import { z } from 'zod';
 import adapter from '../lib/actual-adapter.js';
+import { CommonSchemas } from '../lib/schemas/common.js';
 const InputSchema = z.object({
-    id: z.string().describe('Category group ID to delete'),
+    id: CommonSchemas.categoryGroupId.describe('Category group ID to delete'),
 });
 /**
  * #376: the existence guard lives in `adapter.deleteCategoryGroup`, which reads and writes

package/dist/src/tools/category_groups_update.js

@@ -1,7 +1,8 @@
 import { z } from 'zod';
 import adapter from '../lib/actual-adapter.js';
+import { CommonSchemas } from '../lib/schemas/common.js';
 const InputSchema = z.object({
-    id: z.string().describe('Category group ID to update'),
+    id: CommonSchemas.categoryGroupId.describe('Category group ID to update'),
     fields: z.object({
         name: z.string().optional().describe('New group name'),
         is_income: z.boolean().optional().describe('Whether this is an income category group'),

package/dist/src/tools/payee_rules_get.js

@@ -1,8 +1,9 @@
 import { z } from 'zod';
 import adapter from '../lib/actual-adapter.js';
+import { CommonSchemas } from '../lib/schemas/common.js';
 import { notFoundMsg } from '../lib/errors.js';
 const InputSchema = z.object({
-    payeeId: z.string().describe('ID of the payee to get rules for'),
+    payeeId: CommonSchemas.payeeId.describe('ID of the payee to get rules for'),
 });
 const tool = {
     name: 'actual_payee_rules_get',

package/dist/src/tools/rules_delete.js

@@ -1,9 +1,12 @@
 import { z } from 'zod';
 import adapter from '../lib/actual-adapter.js';
+import { CommonSchemas } from '../lib/schemas/common.js';
 const InputSchema = z.object({
-    // Bounded for the same reason as the payee ids in #356: this value is echoed into the
-    // not-found message, into the schedule-owned refusal, and into logger.error.
-    id: z.string().min(1).max(64).describe('Rule ID to delete'),
+    // #380: the shared rule schema. The reason from #356 still holds and is why it is not
+    // simply a bare string: this value is echoed into the not-found message, into the
+    // schedule-owned refusal, and into logger.error, so it must be bounded. The UUID pattern
+    // bounds it more tightly than the .max(64) it replaced.
+    id: CommonSchemas.ruleId.describe('Rule ID to delete'),
 });
 /**
  * #355 fixed two defects here (a silent no-op on an unknown id, and success reported for a

package/dist/src/tools/rules_update.js

@@ -1,5 +1,6 @@
 import { z } from 'zod';
 import adapter from '../lib/actual-adapter.js';
+import { CommonSchemas } from '../lib/schemas/common.js';
 // Define the schema for rule conditions and actions (same as create)
 const ConditionSchema = z.object({
     field: z.string().describe('Field to match (e.g., "payee", "notes", "amount", "category")'),
@@ -26,7 +27,7 @@ const FIELD_OPERATORS = {
     'date': { type: 'date', operators: ['is', 'gte', 'lte', 'gt', 'lt'] },
 };
 const InputSchema = z.object({
-    id: z.string().describe('Rule ID to update'),
+    id: CommonSchemas.ruleId.describe('Rule ID to update'),
     fields: z.object({
         // #342: null is Actual's DEFAULT stage; the literal "default" is rejected by
         // its validator. Deliberately NO .default() here: this is a partial update, so

package/dist/src/tools/schedules_create.js

@@ -1,13 +1,13 @@
 import { z } from 'zod';
 import adapter from '../lib/actual-adapter.js';
-import { UUID_PATTERN } from '../lib/constants.js';
+import { CommonSchemas } from '../lib/schemas/common.js';
 import { RecurConfigSchema } from '../lib/schemas/recur.js';
 const InputSchema = z.object({
     name: z.string().optional()
         .describe('Unique display name for the schedule'),
-    payee: z.string().regex(UUID_PATTERN, 'Invalid UUID format').optional()
+    payee: CommonSchemas.payeeId.optional()
         .describe('Payee UUID (from actual_payees_get)'),
-    account: z.string().regex(UUID_PATTERN, 'Invalid UUID format').optional()
+    account: CommonSchemas.accountId.optional()
         .describe('Account UUID (from actual_accounts_list). If omitted the schedule is not tied to an account'),
     amount: z.number().int().optional()
         .describe('Amount in cents. Negative = expense (e.g. -5000 = -$50.00), positive = income'),

package/dist/src/tools/schedules_delete.js

@@ -1,9 +1,8 @@
 import { z } from 'zod';
 import adapter from '../lib/actual-adapter.js';
-import { UUID_PATTERN } from '../lib/constants.js';
+import { CommonSchemas } from '../lib/schemas/common.js';
 const InputSchema = z.object({
-    id: z.string().regex(UUID_PATTERN, 'Invalid UUID format')
-        .describe('UUID of the schedule to delete (from actual_schedules_get)'),
+    id: CommonSchemas.scheduleId.describe('UUID of the schedule to delete (from actual_schedules_get)'),
 });
 /**
  * #376: the existence guard and the SQLite constraint-error translation live in

package/dist/src/tools/schedules_update.js

@@ -1,15 +1,14 @@
 import { z } from 'zod';
 import adapter from '../lib/actual-adapter.js';
-import { UUID_PATTERN } from '../lib/constants.js';
+import { CommonSchemas } from '../lib/schemas/common.js';
 import { RecurConfigSchema } from '../lib/schemas/recur.js';
 const InputSchema = z.object({
-    id: z.string().regex(UUID_PATTERN, 'Invalid UUID format')
-        .describe('UUID of the schedule to update (from actual_schedules_get)'),
+    id: CommonSchemas.scheduleId.describe('UUID of the schedule to update (from actual_schedules_get)'),
     name: z.string().optional()
         .describe('New display name for the schedule'),
-    payee: z.string().regex(UUID_PATTERN, 'Invalid UUID format').nullable().optional()
+    payee: CommonSchemas.payeeId.nullable().optional()
         .describe('New payee UUID, or null to clear'),
-    account: z.string().regex(UUID_PATTERN, 'Invalid UUID format').nullable().optional()
+    account: CommonSchemas.accountId.nullable().optional()
         .describe('New account UUID, or null to clear'),
     amount: z.number().int().optional()
         .describe('New amount in cents. Negative = expense, positive = income'),

package/dist/src/tools/transactions_delete.js

@@ -1,7 +1,8 @@
 import { z } from 'zod';
 import adapter from '../lib/actual-adapter.js';
+import { CommonSchemas } from '../lib/schemas/common.js';
 const InputSchema = z.object({
-    id: z.string().describe('Transaction ID to delete'),
+    id: CommonSchemas.transactionId.describe('Transaction ID to delete'),
 });
 const tool = {
     name: 'actual_transactions_delete',

package/dist/src/tools/transactions_update.js

@@ -2,7 +2,15 @@ import { z } from 'zod';
 import adapter from '../lib/actual-adapter.js';
 import { CommonSchemas } from '../lib/schemas/common.js';
 const InputSchema = z.object({
-    id: z.string().optional().describe('Transaction ID to update (optional for smoke tests, required for actual usage)'),
+    // #380: REQUIRED, and typed. It was `.optional()` with the describe "optional for smoke
+    // tests, required for actual usage": a published contract weakened to suit a test. The
+    // handler then returned `{ success: true }` for a call with no id, writing nothing, which
+    // is the #350 failure this project has spent three releases removing. A model that omitted
+    // the id was told its edit had succeeded.
+    //
+    // The smoke test does supply an id (generated_tools.smoke.test.js), so the escape hatch
+    // was not even load bearing when it was removed.
+    id: CommonSchemas.transactionId.describe('Transaction ID to update'),
     fields: z.object({
         account: z.string().nullable().optional().describe('Account ID'),
         date: z.string().nullable().optional().describe('Transaction date (YYYY-MM-DD)'),
@@ -32,10 +40,6 @@ const tool = {
     inputSchema: InputSchema,
     call: async (args, _meta) => {
         const input = InputSchema.parse(args || {});
-        // For smoke tests, return early if no id provided
-        if (!input.id) {
-            return { success: true };
-        }
         await adapter.updateTransaction(input.id, input.fields);
         return { success: true };
     },

package/dist/src/tools/transactions_update_batch.js

@@ -13,6 +13,7 @@
  */
 import { z } from 'zod';
 import adapter from '../lib/actual-adapter.js';
+import { CommonSchemas } from '../lib/schemas/common.js';
 const FieldsSchema = z.object({
     account: z.string().nullable().optional().describe('Account ID'),
     date: z.string().nullable().optional().describe('Transaction date (YYYY-MM-DD)'),
@@ -25,7 +26,7 @@ const FieldsSchema = z.object({
     cleared: z.boolean().nullable().optional().describe('Whether transaction is cleared'),
 });
 const UpdateItemSchema = z.object({
-    id: z.string().describe('Transaction ID to update'),
+    id: CommonSchemas.transactionId.describe('Transaction ID to update'),
     fields: FieldsSchema.describe('Fields to update for this transaction'),
 });
 const InputSchema = z.object({

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "actual-mcp-server",
   "displayName": "Actual MCP Server",
-  "version": "0.15.0",
+  "version": "0.16.0",
   "engines": {
     "node": ">=22.0.0",
     "npm": ">=10.0.0"
@@ -30,7 +30,7 @@
     "verify-tools": "npm run build && node scripts/verify-tools.js",
     "check:coverage": "node scripts/list-actual-api-methods.mjs",
     "direct-sync": "node scripts/direct-sync/bank-sync-direct.mjs",
-    "test:unit-js": "node tests/unit/transactions_create.test.js && node tests/unit/generated_tools.smoke.test.js && node tests/unit/schema_validation.test.js && node tests/unit/schema_json_openai_compat.test.js && node tests/unit/config_https_validation.test.js && node tests/unit/config_data_dir.test.js && node tests/unit/config_drift.test.js && node tests/unit/port_alignment.test.js && node tests/unit/dockerfile_data_dir_alignment.test.js && node tests/unit/unraid_template_alignment.test.js && node tests/unit/entrypoint_invariants.test.js && node tests/unit/e2e_spec_collection.test.js && node tests/unit/compose_profile_sync.test.js && node tests/unit/advertised_tools_sync.test.js && node tests/unit/knip_config.test.js && node tests/unit/readme_stats_sync.test.js && node tests/unit/config_insecure_upstream.test.js && node tests/unit/workflow_release_guards.test.js && node tests/unit/report_train_failure.test.js && node tests/unit/unit_chain_membership.test.js && node tests/unit/api_surface_drift.test.js && node tests/unit/write_effect_audit_staleness.test.js && node tests/unit/write_effect_audit_membership.test.js && node tests/unit/tool_annotations.test.js && node tests/unit/api_coverage_baseline.test.js && node tests/unit/train_preflight.test.js && node tests/unit/verify_published_artifacts.test.js && node tests/unit/report_train_stale.test.js && node tests/unit/stdio_framing_check.test.js && node tests/unit/server_info.test.js && node tests/unit/transfers_create.test.js && node tests/unit/bot_target_branch.test.js && node tests/unit/auth_posture.test.js && node tests/unit/auth_posture_wiring.test.js && node tests/unit/auth-acl.test.js && node tests/unit/bug76.test.js && node tests/unit/budgets_setAmount.test.js && node tests/unit/budgets_hold_for_next_month.test.js && node tests/unit/budgets_transfer.test.js && node tests/unit/transactions_uncategorized.test.js && node tests/unit/httpServer_session_init.test.js && node tests/unit/httpServer_session_not_found.test.js && node tests/unit/manual_mcp_client_retry.test.js && node tests/unit/manual_mcp_client_session.test.js && node tests/unit/manual_mcp_client_circuit.test.js && node tests/unit/manual_runner_killswitch.test.js && node tests/unit/adapter_auth_rate_limit.test.js && node tests/unit/adapter_session_reuse.test.js && node tests/unit/retry_classifier.test.js && node tests/unit/adapter_module_surface.test.js && node tests/unit/adapter_nonidempotent_no_retry.test.js && node tests/unit/pool_liveness.test.js && node tests/unit/pool_shutdown_all.test.js && node tests/unit/query_where_operators.test.js && node tests/unit/query_run_validation.test.js && node tests/unit/adapter_with_write_session.test.js && node tests/unit/category_groups_delete.test.js && node tests/unit/rules_delete.test.js && node tests/unit/schedules_delete.test.js && node tests/unit/accounts_delete.test.js && node tests/unit/update_tools_not_found.test.js && node tests/unit/accounts_close.test.js && node tests/unit/accounts_reopen.test.js && node tests/unit/payees_delete.test.js && node tests/unit/payees_merge.test.js && node tests/unit/rules_create_or_update.test.js && node tests/unit/unhandled-rejection.test.js && node tests/unit/rejection-allowlist-purity.test.js && node tests/unit/httpServer_bearer_auth.test.js && node tests/unit/httpServer_oidc_audience.test.js && node tests/unit/httpServer_oidc_auth_verification.test.js && node tests/unit/httpServer_oidc_jwks_discovery.test.js && node tests/unit/httpServer_body_limit.test.js && node tests/unit/httpServer_bind_host.test.js && node tests/unit/adapter_write_pool_cooperation.test.js && node tests/unit/budget_acl_enforcement.test.js && node tests/unit/budget_preference_store.test.js && node tests/unit/budget_preference_restore.test.js && node tests/unit/tags_list.test.js && node tests/unit/tags_create.test.js && node tests/unit/tags_update.test.js && node tests/unit/tags_delete.test.js && node tests/unit/notes_get.test.js && node tests/unit/notes_update.test.js && node tests/unit/payees_common_list.test.js && node tests/unit/transactions_update_guard.test.js && node tests/unit/transactions_update_splits.test.js && node tests/unit/entities_search.test.js && node tests/unit/transactions_import_schema.test.js && node tests/unit/tool_schema_shape.test.js && node tests/unit/zod_error_format.test.js && node tests/unit/tool_count_sync.test.js && node tests/unit/stdio_transport.test.js && node tests/unit/stdio_budget_switch.test.js && node tests/unit/logger_structured.test.js && node tests/unit/logger_redaction.test.js && node tests/unit/logger_correlation.test.js && node tests/unit/check_coverage.test.js && node tests/unit/adapter_op_timeout.test.js && node tests/unit/adapter_write_queue_wakeup.test.js && node tests/unit/ci_workflow_guards.test.js && node tests/unit/node_version_guard.test.js && node tests/unit/node_version_drift.test.js && node tests/unit/observability_smoke.test.js && node tests/unit/residue_pattern.test.js && node tests/unit/dual_transport_gate.test.js && node tests/unit/manual_assertions_use_helper.test.js && node tests/unit/server_version_guard.test.js && node tests/unit/payee_rules_reference_filter.test.js && node tests/unit/oidc_metadata_discovery.test.js && node tests/unit/httpServer_oauth_metadata_route.test.js && node tests/unit/httpServer_mcp_info_route.test.js && node tests/unit/residue_sweep_balance_account.test.js && node tests/unit/tool_factory.test.js && node tests/unit/budget_registry_parse.test.js && node tests/unit/preferences_get.test.js && node tests/unit/budgets_export.test.js && node tests/unit/budgets_import.test.js && node tests/unit/budgets_import_syncid.test.js && node tests/unit/budget_acl_dynamic.test.js && node tests/unit/budget_acl_identity_map.test.js && node tests/unit/budget_acl_userinfo.test.js && node tests/unit/acl_e2e_fixture_contract.test.js && node tests/unit/budget_acl_middleware.test.js && node tests/unit/rules_stage.test.js",
+    "test:unit-js": "node tests/unit/transactions_create.test.js && node tests/unit/generated_tools.smoke.test.js && node tests/unit/schema_validation.test.js && node tests/unit/schema_json_openai_compat.test.js && node tests/unit/config_https_validation.test.js && node tests/unit/config_data_dir.test.js && node tests/unit/config_drift.test.js && node tests/unit/port_alignment.test.js && node tests/unit/dockerfile_data_dir_alignment.test.js && node tests/unit/unraid_template_alignment.test.js && node tests/unit/entrypoint_invariants.test.js && node tests/unit/e2e_spec_collection.test.js && node tests/unit/compose_profile_sync.test.js && node tests/unit/advertised_tools_sync.test.js && node tests/unit/knip_config.test.js && node tests/unit/readme_stats_sync.test.js && node tests/unit/config_insecure_upstream.test.js && node tests/unit/workflow_release_guards.test.js && node tests/unit/report_train_failure.test.js && node tests/unit/unit_chain_membership.test.js && node tests/unit/api_surface_drift.test.js && node tests/unit/write_effect_audit_staleness.test.js && node tests/unit/write_effect_audit_membership.test.js && node tests/unit/tool_annotations.test.js && node tests/unit/tool_id_schema_drift.test.js && node tests/unit/api_coverage_baseline.test.js && node tests/unit/train_preflight.test.js && node tests/unit/verify_published_artifacts.test.js && node tests/unit/report_train_stale.test.js && node tests/unit/stdio_framing_check.test.js && node tests/unit/server_info.test.js && node tests/unit/transfers_create.test.js && node tests/unit/bot_target_branch.test.js && node tests/unit/auth_posture.test.js && node tests/unit/auth_posture_wiring.test.js && node tests/unit/auth-acl.test.js && node tests/unit/bug76.test.js && node tests/unit/budgets_setAmount.test.js && node tests/unit/budgets_hold_for_next_month.test.js && node tests/unit/budgets_transfer.test.js && node tests/unit/transactions_uncategorized.test.js && node tests/unit/httpServer_session_init.test.js && node tests/unit/httpServer_session_not_found.test.js && node tests/unit/manual_mcp_client_retry.test.js && node tests/unit/manual_mcp_client_session.test.js && node tests/unit/manual_mcp_client_circuit.test.js && node tests/unit/manual_runner_killswitch.test.js && node tests/unit/adapter_auth_rate_limit.test.js && node tests/unit/adapter_session_reuse.test.js && node tests/unit/retry_classifier.test.js && node tests/unit/adapter_module_surface.test.js && node tests/unit/adapter_nonidempotent_no_retry.test.js && node tests/unit/pool_liveness.test.js && node tests/unit/pool_shutdown_all.test.js && node tests/unit/query_where_operators.test.js && node tests/unit/query_run_validation.test.js && node tests/unit/adapter_with_write_session.test.js && node tests/unit/category_groups_delete.test.js && node tests/unit/rules_delete.test.js && node tests/unit/schedules_delete.test.js && node tests/unit/accounts_delete.test.js && node tests/unit/update_tools_not_found.test.js && node tests/unit/accounts_close.test.js && node tests/unit/accounts_reopen.test.js && node tests/unit/payees_delete.test.js && node tests/unit/payees_merge.test.js && node tests/unit/rules_create_or_update.test.js && node tests/unit/unhandled-rejection.test.js && node tests/unit/rejection-allowlist-purity.test.js && node tests/unit/httpServer_bearer_auth.test.js && node tests/unit/httpServer_oidc_audience.test.js && node tests/unit/httpServer_oidc_auth_verification.test.js && node tests/unit/httpServer_oidc_jwks_discovery.test.js && node tests/unit/httpServer_body_limit.test.js && node tests/unit/httpServer_bind_host.test.js && node tests/unit/adapter_write_pool_cooperation.test.js && node tests/unit/budget_acl_enforcement.test.js && node tests/unit/budget_preference_store.test.js && node tests/unit/budget_preference_restore.test.js && node tests/unit/tags_list.test.js && node tests/unit/tags_create.test.js && node tests/unit/tags_update.test.js && node tests/unit/tags_delete.test.js && node tests/unit/notes_get.test.js && node tests/unit/notes_update.test.js && node tests/unit/payees_common_list.test.js && node tests/unit/transactions_update_guard.test.js && node tests/unit/transactions_update_splits.test.js && node tests/unit/entities_search.test.js && node tests/unit/transactions_import_schema.test.js && node tests/unit/tool_schema_shape.test.js && node tests/unit/zod_error_format.test.js && node tests/unit/tool_count_sync.test.js && node tests/unit/stdio_transport.test.js && node tests/unit/stdio_budget_switch.test.js && node tests/unit/logger_structured.test.js && node tests/unit/logger_redaction.test.js && node tests/unit/logger_correlation.test.js && node tests/unit/check_coverage.test.js && node tests/unit/adapter_op_timeout.test.js && node tests/unit/adapter_write_queue_wakeup.test.js && node tests/unit/ci_workflow_guards.test.js && node tests/unit/node_version_guard.test.js && node tests/unit/node_version_drift.test.js && node tests/unit/observability_smoke.test.js && node tests/unit/residue_pattern.test.js && node tests/unit/dual_transport_gate.test.js && node tests/unit/manual_assertions_use_helper.test.js && node tests/unit/server_version_guard.test.js && node tests/unit/payee_rules_reference_filter.test.js && node tests/unit/oidc_metadata_discovery.test.js && node tests/unit/httpServer_oauth_metadata_route.test.js && node tests/unit/httpServer_mcp_info_route.test.js && node tests/unit/residue_sweep_balance_account.test.js && node tests/unit/tool_factory.test.js && node tests/unit/budget_registry_parse.test.js && node tests/unit/preferences_get.test.js && node tests/unit/budgets_export.test.js && node tests/unit/budgets_import.test.js && node tests/unit/budgets_import_syncid.test.js && node tests/unit/budget_acl_dynamic.test.js && node tests/unit/budget_acl_identity_map.test.js && node tests/unit/budget_acl_userinfo.test.js && node tests/unit/acl_e2e_fixture_contract.test.js && node tests/unit/budget_acl_middleware.test.js && node tests/unit/rules_stage.test.js",
     "test:adapter": "npm run build && node dist/src/tests_adapter_runner.js",
     "test:e2e": "npx playwright test",
     "test:e2e:docker": "./tests/e2e/run-docker-e2e.sh",