actual-mcp-server 0.22.25 → 0.22.31

package/README.md

@@ -24,13 +24,13 @@ Actual MCP Server is a [Model Context Protocol](https://modelcontextprotocol.io/
 ┌─────────────┐   MCP/HTTP    ┌──────────────────┐   Actual API   ┌──────────────┐
 │  LibreChat  │ ◄───────────► │  Actual MCP      │ ◄───────────► │   Actual     │
 │  LobeChat   │               │  Server          │               │   Budget     │
-│  (remote)   │               │  (83 tools)      │               │   Server     │
+│  (remote)   │               │  (84 tools)      │               │   Server     │
 └─────────────┘               └──────────────────┘               └──────────────┘
 
 ┌─────────────┐   MCP/stdio   ┌──────────────────┐   Actual API   ┌──────────────┐
 │  Claude     │ ◄───────────► │  Actual MCP      │ ◄───────────► │   Actual     │
 │  Desktop    │               │  Server          │               │   Budget     │
-│  (local)    │               │  (83 tools)      │               │   Server     │
+│  (local)    │               │  (84 tools)      │               │   Server     │
 └─────────────┘               └──────────────────┘               └──────────────┘
 ```
 
@@ -38,14 +38,14 @@ Actual MCP Server is a [Model Context Protocol](https://modelcontextprotocol.io/
 
 Most Actual Budget MCP implementations are simple stdio bridges designed for single-user, local use with Claude Desktop. This project goes further:
 
-- **83 tools, the most comprehensive coverage available.** Accounts, transactions, categories, payees, tags, notes, rules, budgets, batch operations, bank sync, and more. Covers the reachable Actual Budget API with no genuine gaps.
+- **84 tools, the most comprehensive coverage available.** Accounts, transactions, categories, payees, tags, notes, rules, budgets, batch operations, bank sync, and more. Covers the reachable Actual Budget API with no genuine gaps.
 - **HTTP and stdio transport.** Runs as a real remote server for LibreChat/LobeChat (`--http`), or as a direct local process for Claude Desktop (`--stdio`). No Docker or HTTP server is needed for local use.
 - **6 exclusive ActualQL-powered tools.** Search and summarise transactions by month, amount, category, or payee using Actual Budget's native query engine. Aggregated results, no raw data dumped into the AI context window.
 - **Multi-budget switching at runtime.** Configure multiple budget files and let the AI switch between them mid-conversation with `actual_budgets_switch`. Works on both transports: HTTP keys the active budget to the MCP session, and stdio (Claude Desktop, Claude Code, Cursor) gets a synthetic per-process session so a switch is scoped to that process rather than shared globally (#348).
 - **Multi-user ready with OIDC.** Secure every session with JWKS-validated JWTs and per-user budget ACLs. No shared tokens required.
 - **Production-grade reliability on both transports.** HTTP connection pooling (up to 15 concurrent sessions), and a long-lived stdio process that logs in ONCE and reuses that connection for every tool call instead of re-authenticating per call, so Claude Desktop and Claude Code stay fast and a burst of calls no longer risks a per-call login storm against the upstream limiter. Automatic retry with exponential backoff, and a full test suite (unit + E2E + integration).
 
-> **Verified working** with [LibreChat](https://www.librechat.ai/), [LobeChat](https://lobehub.com/home), and [Claude Desktop](https://claude.ai/download). All 83 tools tested end-to-end. Any MCP-compatible client should work.
+> **Verified working** with [LibreChat](https://www.librechat.ai/), [LobeChat](https://lobehub.com/home), and [Claude Desktop](https://claude.ai/download). All 84 tools tested end-to-end. Any MCP-compatible client should work.
 
 ---
 
@@ -182,7 +182,7 @@ Add to `claude_desktop_config.json` (see [docs/guides/MCP_CLIENTS_SETUP.md](docs
 }
 ```
 
-> **No token needed.** stdio runs as a local process owned by your user. The transport itself is the security boundary. All 83 tools are available.
+> **No token needed.** stdio runs as a local process owned by your user. The transport itself is the security boundary. All 84 tools are available.
 >
 > **`MCP_BRIDGE_DATA_DIR` should be an absolute path.** Without one, the data directory resolves relative to wherever the client spawns the process, which can be unpredictable. The directory is created automatically on first run.
 
@@ -308,7 +308,7 @@ For Claude Desktop (stdio), restart Claude after upgrading.
 
 ## Available Tools
 
-**83 tools** across all categories. All tools use the `actual_<category>_<action>` naming convention.
+**84 tools** across all categories. All tools use the `actual_<category>_<action>` naming convention.
 
 ### Accounts (12)
 
@@ -327,9 +327,9 @@ For Claude Desktop (stdio), restart Claude after upgrading.
 | `actual_account_groups_update` | Rename an account group or change its sidebar position. A group that does not exist is refused, writing nothing |
 | `actual_account_groups_delete` | Delete an account group. Its accounts are NOT deleted, they become ungrouped |
 
-### Transactions (16)
+### Transactions (17)
 
-**Standard (6)**
+**Standard (7)**
 
 | Tool | Description |
 |------|-------------|
@@ -339,6 +339,7 @@ For Claude Desktop (stdio), restart Claude after upgrading.
 | `actual_transactions_import` | Import and reconcile transactions |
 | `actual_transactions_update` | Update a transaction, split a plain one in place, or edit the children of an existing split via `subtransactions` |
 | `actual_transactions_delete` | Delete a transaction |
+| `actual_transactions_merge` | Merge two same-account, same-amount transactions (e.g. a bank-imported duplicate and a manual entry). Upstream keeps one (the imported one first) and DELETES the other, filling only the kept row's empty payee, category, notes and schedule and its false cleared and reconciled flags; irreversible |
 
 > **Split transactions:** pass a `subtransactions` array (each child needs an `amount` in integer cents; `category` and `notes` are optional). The child amounts must sum to the parent `amount` (the server does not enforce this, so the tool does). A split parent carries no category of its own: put categories on the children. `actual_transactions_update` with `subtransactions` edits the children of a transaction that is already a split, or splits a plain transaction IN PLACE: it keeps its id, `imported_id` and cleared state, so a bank-synced transaction can be split without breaking import matching. Its own category is cleared, and a child that names no category inherits it. A split child cannot itself be split. Note: `actual_transactions_import` forwards a `subtransactions` array to the API but does NOT apply the sum check, so use `actual_transactions_create` for guaranteed-balanced splits.
 
@@ -454,7 +455,7 @@ For Claude Desktop (stdio), restart Claude after upgrading.
 
 Four tools take many items in one call, for clients that allow only a few tool calls per turn. They share ONE contract: each item is applied independently and **not atomically**. There is no rollback, so items applied before a failure stay applied; a bad item is reported by its index and the rest continue; an infrastructure failure (lost connection, timeout) fails the whole call, and then you must read the data back before retrying anything. A bulk path never retries a create on its own.
 
-- `actual_transactions_update_batch` (counted under Transactions): update up to 50 transactions, `{id, fields}` each. Result: `{ succeeded: [{id}], failed: [{id, error}], total, successCount, failureCount }`.
+- `actual_transactions_update_batch` (counted under Transactions): update up to 50 transactions, `{id, fields}` each. Result: `{ succeeded: [{id}], failed: [{id, error}], total, successCount, failureCount }`. Items marked "not attempted" were never sent. Re-read with `actual_transactions_get` before retrying any item.
 - `actual_transactions_import` (counted under Transactions): bulk create with import semantics (deduplication and reconciliation against existing transactions, rules optionally applied). Use it to add many transactions at once.
 - `actual_budget_updates_batch`: set budget amounts and/or carryover flags for 1 to 100 month/category pairs, and the way to rebalance categories: read the month with `actual_budgets_getMonth`, then send one batch of absolute amounts. Each operation needs at least one of `amount` (integer cents) or `carryover`. Result: `{ succeeded: [{index, month, categoryId}], failed: [{index, month, categoryId, error}], total, successCount, failureCount }`. An unknown category, an out-of-range month or a carryover on an income category fails only that item. After a timeout, read the months back with `actual_budgets_getMonth` before retrying.
 - `actual_rules_create_batch` (counted under Rules): create 1 to 50 rules, each exactly the input of `actual_rules_create`. Result: `{ succeeded: [{index, id}], failed: [{index, error}], total, successCount, failureCount }`. Items marked "not attempted" were never sent. Re-read with `actual_rules_get` before retrying any item.
@@ -556,7 +557,7 @@ All configuration is via environment variables. Copy `.env.example` to `.env` to
 
 ### Reducing the tool surface
 
-All 83 tools are published by default. Chat clients with a small tool budget (Gemini, LibreChat) do better with fewer, so the surface can be narrowed at startup. A tool that is not published is also refused if a client calls it by name, and the refusal names the setting responsible.
+All 84 tools are published by default. Chat clients with a small tool budget (Gemini, LibreChat) do better with fewer, so the surface can be narrowed at startup. A tool that is not published is also refused if a client calls it by name, and the refusal names the setting responsible.
 
 | Toolset | Tools | Contents |
 |---------|-------|----------|
@@ -570,7 +571,7 @@ All 83 tools are published by default. Chat clients with a small tool budget (Ge
 | `query` | 1 | `actual_query_run` (SELECT only) |
 | `admin` | 6 | Budget switching, import, export, bank sync and session management |
 
-Each tool is in exactly one group. The `chat` preset cuts across them and publishes 12 tools: `actual_get_context`, `actual_query_run`, `actual_transactions_create`, `actual_transactions_update`, `actual_transactions_delete`, `actual_transactions_update_batch`, `actual_rules_create`, `actual_rules_create_batch`, `actual_budget_updates_batch`, `actual_budgets_transfer`, `actual_budgets_setAmount` and `actual_budgets_getMonth`. Measured on the `tools/list` payload, all 83 tools are 108,164 bytes and the `chat` preset is 25,949 bytes (about 6.5k tokens saved, a 76% cut).
+Each tool is in exactly one group. The `chat` preset cuts across them and publishes 12 tools: `actual_get_context`, `actual_query_run`, `actual_transactions_create`, `actual_transactions_update`, `actual_transactions_delete`, `actual_transactions_update_batch`, `actual_rules_create`, `actual_rules_create_batch`, `actual_budget_updates_batch`, `actual_budgets_transfer`, `actual_budgets_setAmount` and `actual_budgets_getMonth`. Measured on the `tools/list` payload, all 84 tools are 108,164 bytes and the `chat` preset is 25,949 bytes (about 6.5k tokens saved, a 76% cut).
 
 `MCP_READ_ONLY=true` additionally hides and refuses every write-capable tool (47 of the 83, including `actual_bank_sync`, `actual_budgets_export`, `actual_budgets_switch` and `actual_session_close`), leaving 36. `actual_session_list` stays available under read-only. See [Security and Privacy](docs/SECURITY_AND_PRIVACY.md#tool-surface-mcp_toolsets-and-mcp_read_only).
 
@@ -648,7 +649,7 @@ stdio is the simplest way to connect Claude Desktop directly to Actual Budget. T
 - No auth token. Process ownership is the security boundary.
 - All logs go to stderr so they never corrupt the JSON-RPC framing on stdout
 - The process exits when stdin closes (Claude Desktop shutting down)
-- All 83 tools are available, identical to HTTP mode
+- All 84 tools are available, identical to HTTP mode
 
 **Start manually to verify:**
 
@@ -751,7 +752,7 @@ See [AI Client Setup, OIDC](docs/guides/AI_CLIENT_SETUP.md#oidc-authentication-m
 | Command | What It Tests | Requires Live Server |
 |---------|---------------|---------------------|
 | `npm run build` | TypeScript compilation | No |
-| `npm run test:unit-js` | 83-tool smoke, schema validation, auth ACL | No |
+| `npm run test:unit-js` | 84-tool smoke, schema validation, auth ACL | No |
 | `npm run test:adapter` | Adapter, retry logic, concurrency | No |
 | `npm run test:e2e` | MCP protocol compliance (Playwright) | No |
 | `npm run test:e2e:docker:full` | Full stack integration | Yes (Docker) |
@@ -835,7 +836,7 @@ The software is provided **as-is**, without warranty of any kind. The author acc
 
 ---
 
-**Version:** 0.22.25 | **Tool Count:** 83 (verified LibreChat-compatible)
+**Version:** 0.22.31 | **Tool Count:** 84 (verified LibreChat-compatible)
 
 ## Sponsor
 

package/dist/src/actualToolsManager.js

@@ -62,6 +62,7 @@ const IMPLEMENTED_TOOLS = [
     'actual_transactions_aggregate',
     'actual_transactions_create',
     'actual_transactions_delete',
+    'actual_transactions_merge',
     'actual_transactions_filter',
     'actual_transactions_get',
     'actual_transactions_import',
@@ -105,6 +106,7 @@ const API_TOOL_MAP = {
     importTransactions: 'actual_transactions_import',
     updateTransaction: 'actual_transactions_update',
     deleteTransaction: 'actual_transactions_delete',
+    mergeTransactions: 'actual_transactions_merge',
     getBudgetMonths: 'actual_budgets_getMonths',
     getBudgetMonth: 'actual_budgets_getMonth',
     setBudgetAmount: 'actual_budgets_setAmount',

package/dist/src/lib/actual-adapter.js

@@ -5,7 +5,7 @@ import api from '@actual-app/api';
 // cannot expose its named exports via static import syntax. At runtime the default import
 // IS module.exports, so all methods are accessible as properties.
 // eslint-disable-next-line @typescript-eslint/no-explicit-any
-const { addTransactions: rawAddTransactions, getAccounts: rawGetAccounts, importTransactions: rawImportTransactions, getTransactions: rawGetTransactions, getCategories: rawGetCategories, createCategory: rawCreateCategory, getPayees: rawGetPayees, getCommonPayees: rawGetCommonPayees, createPayee: rawCreatePayee, getBudgetMonths: rawGetBudgetMonths, getBudgetMonth: rawGetBudgetMonth, setBudgetAmount: rawSetBudgetAmount, createAccount: rawCreateAccount, updateAccount: rawUpdateAccount, getAccountBalance: rawGetAccountBalance, updateTransaction: rawUpdateTransaction, deleteTransaction: rawDeleteTransaction, updateCategory: rawUpdateCategory, deleteCategory: rawDeleteCategory, updatePayee: rawUpdatePayee, deletePayee: rawDeletePayee, deleteAccount: rawDeleteAccount, getRules: rawGetRules, createRule: rawCreateRule, updateRule: rawUpdateRule, deleteRule: rawDeleteRule, setBudgetCarryover: rawSetBudgetCarryover, closeAccount: rawCloseAccount, reopenAccount: rawReopenAccount, getCategoryGroups: rawGetCategoryGroups, createCategoryGroup: rawCreateCategoryGroup, updateCategoryGroup: rawUpdateCategoryGroup, deleteCategoryGroup: rawDeleteCategoryGroup, mergePayees: rawMergePayees, getPayeeRules: rawGetPayeeRules, holdBudgetForNextMonth: rawHoldBudgetForNextMonth, resetBudgetHold: rawResetBudgetHold, runQuery: rawRunQuery, runBankSync: rawRunBankSync, getBudgets: rawGetBudgets, getIDByName: rawGetIDByName, getServerVersion: rawGetServerVersion, getSchedules: rawGetSchedules, createSchedule: rawCreateSchedule, updateSchedule: rawUpdateSchedule, deleteSchedule: rawDeleteSchedule, getTags: rawGetTags, createTag: rawCreateTag, updateTag: rawUpdateTag, deleteTag: rawDeleteTag, getNote: rawGetNote, updateNote: rawUpdateNote, exportBudget: rawExportBudget, importBudget: rawImportBudget, getPreferences: rawGetPreferences, getAccountGroups: rawGetAccountGroups, createAccountGroup: rawCreateAccountGroup, updateAccountGroup: rawUpdateAccountGroup, deleteAccountGroup: rawDeleteAccountGroup,
+const { addTransactions: rawAddTransactions, getAccounts: rawGetAccounts, importTransactions: rawImportTransactions, getTransactions: rawGetTransactions, getCategories: rawGetCategories, createCategory: rawCreateCategory, getPayees: rawGetPayees, getCommonPayees: rawGetCommonPayees, createPayee: rawCreatePayee, getBudgetMonths: rawGetBudgetMonths, getBudgetMonth: rawGetBudgetMonth, setBudgetAmount: rawSetBudgetAmount, createAccount: rawCreateAccount, updateAccount: rawUpdateAccount, getAccountBalance: rawGetAccountBalance, updateTransaction: rawUpdateTransaction, deleteTransaction: rawDeleteTransaction, updateCategory: rawUpdateCategory, deleteCategory: rawDeleteCategory, updatePayee: rawUpdatePayee, deletePayee: rawDeletePayee, deleteAccount: rawDeleteAccount, getRules: rawGetRules, createRule: rawCreateRule, updateRule: rawUpdateRule, deleteRule: rawDeleteRule, setBudgetCarryover: rawSetBudgetCarryover, closeAccount: rawCloseAccount, reopenAccount: rawReopenAccount, getCategoryGroups: rawGetCategoryGroups, createCategoryGroup: rawCreateCategoryGroup, updateCategoryGroup: rawUpdateCategoryGroup, deleteCategoryGroup: rawDeleteCategoryGroup, mergePayees: rawMergePayees, mergeTransactions: rawMergeTransactions, getPayeeRules: rawGetPayeeRules, holdBudgetForNextMonth: rawHoldBudgetForNextMonth, resetBudgetHold: rawResetBudgetHold, runQuery: rawRunQuery, runBankSync: rawRunBankSync, getBudgets: rawGetBudgets, getIDByName: rawGetIDByName, getServerVersion: rawGetServerVersion, getSchedules: rawGetSchedules, createSchedule: rawCreateSchedule, updateSchedule: rawUpdateSchedule, deleteSchedule: rawDeleteSchedule, getTags: rawGetTags, createTag: rawCreateTag, updateTag: rawUpdateTag, deleteTag: rawDeleteTag, getNote: rawGetNote, updateNote: rawUpdateNote, exportBudget: rawExportBudget, importBudget: rawImportBudget, getPreferences: rawGetPreferences, getAccountGroups: rawGetAccountGroups, createAccountGroup: rawCreateAccountGroup, updateAccountGroup: rawUpdateAccountGroup, deleteAccountGroup: rawDeleteAccountGroup,
 // eslint-disable-next-line @typescript-eslint/no-explicit-any
  } = api;
 import { EventEmitter } from 'events';
@@ -14,6 +14,7 @@ import { retry, isRetryableError, isRateLimitError } from './retry.js';
 import { withOpTimeout } from './opTimeout.js';
 import { markInitFailure } from './init-failure.js';
 import { NotFoundRefusal, OutOfRangeRefusal, constraintErrorMsg } from './errors.js';
+import { amountOpMismatch } from './schemas/schedule-amount.js';
 import { findMatchingRule } from './rule-matching.js';
 import logger from '../logger.js';
 import { checkServerVersionOnce } from './server-version-guard.js';
@@ -1946,9 +1947,11 @@ export async function transferBudgetAmount(month, fromCategoryId, toCategoryId,
         }
         catch (error) {
             const msg = error instanceof Error ? error.message : String(error);
-            // An infrastructure error says nothing about whether the write landed, so only a
-            // deterministic (domain) rejection may claim the target is unchanged.
-            const target = _shouldDropPoolOnError(error)
+            // A transient error (infrastructure or a rate limit) says nothing about whether the write
+            // landed, so only a deterministic (domain) rejection may claim the target is unchanged.
+            // #544: this is isRetryableError, not _shouldDropPoolOnError: a rate limit keeps the pool
+            // but its outcome is just as unknown. The pool-drop decision itself is untouched.
+            const target = isRetryableError(error)
                 ? `its outcome is unknown (it was ${prevTo})`
                 : `it is unchanged at ${prevTo}`;
             // The original text stays INSIDE the message: isRetryableError classifies by message only
@@ -2030,6 +2033,9 @@ export async function updateTransaction(id, fields) {
     observability.incrementToolCall('actual.transactions.update').catch(() => { });
     // Use write queue to batch concurrent updates in a single budget session
     return queueWriteOperation(async () => {
+        // #494: the drain's op timeout starts when this callback starts, so the split poll's cap
+        // below is measured from here, not from the end of the write (same origin as #538's startedAt).
+        const opStartedAt = Date.now();
         // Pre-flight existence check (#212): the raw API silently no-ops on a missing id,
         // so an update that changed nothing would otherwise be reported as success. A
         // targeted ActualQL query by id keeps this cheap (indexed lookup). #305 extends
@@ -2100,8 +2106,16 @@ export async function updateTransaction(id, fields) {
         // with every requested child. Polling here, inside the drain, also guarantees the change is
         // local before the drain's api.sync(). A retry after a timeout is safe: the row is then a
         // split, so a second call EDITS its children rather than creating anything new.
+        // #494: the poll must end before the op timeout does, or the caller sees "timed out" (which
+        // invites a retry) while this callback keeps reading in the background. Cap it at HALF the op
+        // timeout, counted from op start; 0 disables the op timeout, so the poll keeps its own bound.
+        // Do not cap at opStartedAt + boundMs: that term would also shorten the poll at the default.
         const expected = subs.length;
-        const deadline = Date.now() + SPLIT_VERIFY_TIMEOUT_MS;
+        const T = config.ACTUAL_OP_TIMEOUT_MS;
+        const deadline = T > 0
+            ? Math.min(Date.now() + SPLIT_VERIFY_TIMEOUT_MS, opStartedAt + Math.floor(T / 2))
+            : Date.now() + SPLIT_VERIFY_TIMEOUT_MS;
+        const boundMs = T > 0 ? Math.min(SPLIT_VERIFY_TIMEOUT_MS, Math.floor(T / 2)) : SPLIT_VERIFY_TIMEOUT_MS;
         for (;;) {
             const res = (await rawRunQuery(q('transactions').options({ splits: 'all' })
                 .filter({ $or: [{ id }, { parent_id: id }] })
@@ -2113,7 +2127,7 @@ export async function updateTransaction(id, fields) {
                 return { split: { parent: id, children } };
             }
             if (Date.now() >= deadline) {
-                throw new Error(`Transaction "${id}" was sent to be split into ${expected} parts, but the split was not visible after ${SPLIT_VERIFY_TIMEOUT_MS}ms (found ${children.length} children), so the outcome is unknown. ` +
+                throw new Error(`Transaction "${id}" was sent to be split into ${expected} parts, but the split was not visible after ${boundMs}ms (found ${children.length} children), so the outcome is unknown. ` +
                     'Read it back with actual_transactions_get before retrying: if it is already a split, a retry edits its children rather than duplicating them.');
             }
             await new Promise((resolve) => setTimeout(resolve, SPLIT_VERIFY_INTERVAL_MS));
@@ -2221,6 +2235,51 @@ export async function deleteTransaction(id) {
         await withConcurrency(() => retry(() => rawDeleteTransaction(id), { retries: 0, backoffMs: 200 }));
     });
 }
+/**
+ * #514: merge two transactions via upstream `mergeTransactions`. The PUBLIC api takes the plain
+ * string tuple and returns the id of the KEPT transaction; the `{ id }[]` form belongs to the
+ * internal handler and throws "Invalid field type [object Object]" here. Upstream picks which one
+ * survives (imported_id, then imported_payee, then earlier date, then the SECOND id) and deletes
+ * the other, so the dropped id is derived from the returned kept id.
+ *
+ * The guards below cover what upstream would refuse with a less useful message, or (a split child)
+ * only incidentally. Transfers to different accounts are left to upstream, whose message passes
+ * through unchanged. Everything runs in one queueWriteOperation, so a read-then-write guard stays
+ * in the adapter (never in the tool).
+ */
+export async function mergeTransactions(ids) {
+    observability.incrementToolCall('actual.transactions.merge').catch(() => { });
+    return queueWriteOperation(async () => {
+        // eslint-disable-next-line @typescript-eslint/no-explicit-any
+        const { q } = (await import('@actual-app/api'));
+        const rows = await withConcurrency(() => retry(async () => {
+            // `splits: 'all'` is REQUIRED (#305): the default query excludes split PARENT rows.
+            const res = (await rawRunQuery(q('transactions').options({ splits: 'all' }).filter({ id: { $oneof: ids } }).select(['id', 'account', 'amount', 'parent_id', 'is_child'])));
+            return Array.isArray(res?.data) ? res.data : [];
+        }, { retries: 2, backoffMs: 200 }));
+        const byId = new Map(rows.map((r) => [r.id, r]));
+        for (const id of ids) {
+            if (!byId.has(id))
+                throw new NotFoundRefusal('Transaction', id, 'actual_transactions_get');
+        }
+        const [first, second] = [byId.get(ids[0]), byId.get(ids[1])];
+        for (const t of [first, second]) {
+            if (t.is_child || (t.parent_id !== null && t.parent_id !== undefined)) {
+                throw new OutOfRangeRefusal(`Cannot merge a split child transaction (${t.id}); merge the parent transactions instead. Use actual_transactions_get to find the parent.`, t.id);
+            }
+        }
+        if (first.account !== second.account) {
+            throw new OutOfRangeRefusal(`Cannot merge transactions from different accounts: ${ids[0]} is in account ${first.account}, ${ids[1]} is in account ${second.account}. Nothing was changed.`, String(second.account));
+        }
+        if (first.amount !== second.amount) {
+            throw new OutOfRangeRefusal(`Cannot merge transactions with different amounts: ${ids[0]} is ${first.amount} cents, ${ids[1]} is ${second.amount} cents. Nothing was changed.`, String(second.amount));
+        }
+        // Non-idempotent: do not retry (#165, #514). After a lost response the dropped id is gone, so
+        // a retry would be refused or act on the wrong pair.
+        const keptId = (await withConcurrency(() => retry(() => rawMergeTransactions(ids), { retries: 0, backoffMs: 200 })));
+        return { keptId, deletedId: keptId === ids[0] ? ids[1] : ids[0] };
+    });
+}
 export async function updateCategory(id, fields) {
     observability.incrementToolCall('actual.categories.update').catch(() => { });
     return queueWriteOperation(async () => {
@@ -2748,7 +2807,28 @@ export async function createSchedule(schedule) {
 export async function updateSchedule(id, fields, resetNextDate) {
     observability.incrementToolCall('actual.schedules.update').catch(() => { });
     return queueWriteOperation(async () => {
-        await withConcurrency(() => retry(() => rawUpdateSchedule(id, fields, resetNextDate), { retries: 0, backoffMs: 200, isRetryable: isRetryableError }));
+        // #527: upstream MERGES a partial update, so `amountOp` alone keeps the stored amount and
+        // `amount` alone keeps the stored op. Whether the pair fits ('isbetween' takes a
+        // { num1, num2 } range, every other op a number) therefore depends on the stored row when
+        // only one of the two is supplied. The tool's own refinement covers both-supplied. Decided
+        // and thrown BEFORE the non-retried write, so a refusal is never retried or swallowed. A
+        // schedule that is not found falls through to upstream's own not-found error, unchanged.
+        const patch = (fields ?? {});
+        const hasAmount = patch.amount !== undefined;
+        const hasOp = patch.amountOp !== undefined;
+        if (hasAmount !== hasOp) {
+            const schedules = await withConcurrency(() => retry(() => rawGetSchedules(), { retries: 2, backoffMs: 200 }));
+            const stored = Array.isArray(schedules) ? schedules.find((sch) => sch?.id === id) : undefined;
+            if (stored) {
+                const op = hasOp ? patch.amountOp : stored.amountOp;
+                const amount = hasAmount ? patch.amount : stored.amount;
+                const message = amountOpMismatch(op, amount);
+                if (message) {
+                    throw new OutOfRangeRefusal(`Schedule "${id}" was not updated: ${message} (stored amountOp ${JSON.stringify(stored.amountOp ?? null)}, stored amount ${JSON.stringify(stored.amount ?? null)}).`, JSON.stringify({ amountOp: op ?? null, amount: amount ?? null }));
+                }
+            }
+        }
+        await withConcurrency(() => retry(() => rawUpdateSchedule(id, patch, resetNextDate), { retries: 0, backoffMs: 200, isRetryable: isRetryableError }));
     }, { preservesListings: PRESERVES_ALL_ENTITY_LISTINGS });
 }
 /**
@@ -4092,6 +4172,7 @@ export default {
     deleteAccount,
     updateTransaction,
     deleteTransaction,
+    mergeTransactions,
     updateCategory,
     deleteCategory,
     updatePayee,

package/dist/src/lib/constants.js

@@ -55,6 +55,13 @@ export const WRITE_SESSION_DELAY_MS = 100;
  * therefore reads the split back, polling every SPLIT_VERIFY_INTERVAL_MS, and refuses to report
  * success if it has not appeared within this bound. A local SQLite write, so milliseconds in
  * practice; the bound only decides how long a genuinely lost write takes to be reported.
+ *
+ * #494: the poll runs inside the drain under ACTUAL_OP_TIMEOUT_MS, which races the callback rather
+ * than cancelling it. So the effective bound is min(this, ACTUAL_OP_TIMEOUT_MS / 2), counted from
+ * the start of the operation; an op timeout of 0 (disabled) leaves this bound alone. The cap is
+ * cooperative: one read already in flight at the deadline can still outlive the op timeout if that
+ * single read takes longer than the remaining half. Separately, the pre-flight read's retry backoff
+ * (200ms then 400ms) can by itself exceed an op timeout under 600ms; that is outside the poll.
  */
 export const SPLIT_VERIFY_TIMEOUT_MS = 2000;
 export const SPLIT_VERIFY_INTERVAL_MS = 25;

package/dist/src/lib/schemas/common.js

@@ -3,7 +3,7 @@
  *
  * Common validation schemas used across MCP tools for Actual Budget.
  * These schemas provide consistent validation, better error messages,
- * and reduce duplication across the 83 tool definitions.
+ * and reduce duplication across the 84 tool definitions.
  */
 import { z } from 'zod';
 import { MAX_NAME_LENGTH, MAX_NOTES_LENGTH, DATE_PATTERN, MONTH_PATTERN, UUID_PATTERN } from '../constants.js';

package/dist/src/lib/schemas/recur.js

@@ -4,21 +4,54 @@ import { z } from 'zod';
 // `date` branch in tools/list (#225). This mirrors the config Actual's `@actual-app/api`
 // accepts for a recurring schedule; it is a closed object so a malformed config gets an
 // actionable validation error rather than being forwarded unshaped.
+// #478: Actual's monthly patterns (the UI's "the 1st and 15th", "last day", "second Monday").
+// `day` maps to a day of the month, a weekday to the nth weekday; upstream honours them only
+// for frequency 'monthly'.
+const RecurPatternSchema = z.object({
+    type: z.enum(['day', 'SU', 'MO', 'TU', 'WE', 'TH', 'FR', 'SA']),
+    value: z.number().int(),
+}).strict();
+export const PATTERNS_NEED_MONTHLY = "patterns apply only to frequency 'monthly'; omit patterns or send patterns: []";
+export const DAY_PATTERN_RANGE = "a 'day' pattern value must be 1 to 31, or -1 for the last day";
+export const WEEKDAY_PATTERN_RANGE = 'a weekday pattern value must be 1 to 5 (nth), or -1 (last)';
+// The object is strict: a plain z.object STRIPS unknown keys, which is how a `patterns` field
+// used to vanish while the create reported success (#478). Every key upstream's RecurConfig
+// defines is listed, so strictness refuses only keys Actual would ignore anyway.
 export const RecurConfigSchema = z.object({
     frequency: z.enum(['daily', 'weekly', 'monthly', 'yearly'])
         .describe('How often it repeats'),
     start: z.string().regex(/^\d{4}-\d{2}-\d{2}$/)
         .describe('Start date, YYYY-MM-DD'),
-    endMode: z.enum(['never', 'after_n_occurrences', 'on_date'])
-        .describe('When it stops'),
+    // Optional because upstream reads a schedule back without endMode when none was set and
+    // treats a missing one as never; passed through as given, no default injected.
+    endMode: z.enum(['never', 'after_n_occurrences', 'on_date']).optional()
+        .describe('When it stops. Omitted means never'),
     interval: z.number().int().positive().optional()
         .describe('Every N periods. Default 1'),
+    patterns: z.array(RecurPatternSchema).optional()
+        .describe('Monthly only. day: 1 to 31, -1 last day. SU to SA: 1 to 5 nth, -1 last'),
     skipWeekend: z.boolean().optional()
-        .describe('Move an occurrence that falls on a weekend'),
+        .describe('Move weekend occurrences'),
     weekendSolveMode: z.enum(['before', 'after']).optional()
         .describe('Friday before or Monday after. Requires skipWeekend'),
     endOccurrences: z.number().int().positive().optional()
         .describe('Required when endMode is after_n_occurrences'),
     endDate: z.string().regex(/^\d{4}-\d{2}-\d{2}$/).optional()
         .describe('YYYY-MM-DD. Required when endMode is on_date'),
+}).strict().superRefine((cfg, ctx) => {
+    const patterns = cfg.patterns ?? [];
+    // An empty list is accepted on any frequency: upstream reads every schedule back with
+    // patterns: [], and a client echoing it must not be refused.
+    if (patterns.length > 0 && cfg.frequency !== 'monthly') {
+        ctx.addIssue({ code: 'custom', path: ['patterns'], message: PATTERNS_NEED_MONTHLY });
+    }
+    // The index in the path and the pattern in the message tell a caller which entry to fix
+    // when several are sent.
+    patterns.forEach((p, i) => {
+        const ok = p.value === -1 || (p.type === 'day' ? p.value >= 1 && p.value <= 31 : p.value >= 1 && p.value <= 5);
+        if (!ok) {
+            const range = p.type === 'day' ? DAY_PATTERN_RANGE : WEEKDAY_PATTERN_RANGE;
+            ctx.addIssue({ code: 'custom', path: ['patterns', i], message: `${p.type} ${p.value}: ${range}` });
+        }
+    });
 });

package/dist/src/lib/schemas/schedule-amount.js

@@ -0,0 +1,41 @@
+import { z } from 'zod';
+// #527: a schedule's amount is a plain number for amountOp 'is' and 'isapprox', and a
+// { num1, num2 } range for 'isbetween'. That is upstream's own rule (`number.parse` in
+// @actual-app/api 26.10.0): its matcher reads value.num1 and value.num2, so a scalar
+// 'isbetween' is stored but can never match a transaction. createSchedule and
+// updateSchedule do no validation of their own, so every refusal here is ours.
+//
+// The create refinement, the update refinement and the adapter's read-then-write guard all
+// call amountOpMismatch, so the three cannot drift apart in what they refuse or how they say it.
+export const AmountRangeSchema = z.object({
+    num1: z.number().int(),
+    num2: z.number().int(),
+}).strict();
+// A bare union failure reads "Invalid input", which tells a caller nothing; the custom
+// error names both accepted shapes, and the central formatter passes it through with its path.
+export const AMOUNT_SHAPE = "amount must be integer cents (for example -5000), or { num1, num2 } as two integers with amountOp 'isbetween'";
+export const ScheduleAmountSchema = z.union([z.number().int(), AmountRangeSchema], { error: AMOUNT_SHAPE });
+export const ISBETWEEN_NEEDS_RANGE = "amountOp 'isbetween' needs amount as { num1, num2 } in cents, for example { num1: -10000, num2: -5000 }. " +
+    "To match a single amount, send amountOp 'is' or 'isapprox' with a number instead.";
+export const RANGE_NEEDS_ISBETWEEN = "an amount given as { num1, num2 } needs amountOp: 'isbetween'. For a single amount, send a number.";
+function isRange(amount) {
+    if (typeof amount !== 'object' || amount === null)
+        return false;
+    const { num1, num2 } = amount;
+    return typeof num1 === 'number' && typeof num2 === 'number';
+}
+/**
+ * Returns the refusal message when the op and the amount do not fit together, else null.
+ * A missing op counts as 'is' (create defaults it, and upstream keeps a stored null op on a
+ * partial update). An amount that is neither a number nor a range (absent, or a stored value
+ * of an unexpected shape) is not judged here: returning null keeps the guard from refusing
+ * an update it cannot decode.
+ */
+export function amountOpMismatch(op, amount) {
+    const effectiveOp = op ?? 'is';
+    if (typeof amount === 'number')
+        return effectiveOp === 'isbetween' ? ISBETWEEN_NEEDS_RANGE : null;
+    if (isRange(amount))
+        return effectiveOp === 'isbetween' ? null : RANGE_NEEDS_ISBETWEEN;
+    return null;
+}

package/dist/src/lib/tool-annotations.js

@@ -127,6 +127,8 @@ const DESTRUCTIVE = new Set([
     'actual_schedules_delete',
     'actual_tags_delete',
     'actual_transactions_delete',
+    // #514: deletes the transaction upstream drops (and a transfer counterpart). Not idempotent: a repeat is refused.
+    'actual_transactions_merge',
     // THE NON-OBVIOUS ONE. `fields.subtransactions` (CommonSchemas, `.strict()`) has no `id`,
     // so upstream's `makeChild` mints a fresh UUID for every child and `diffItems` tombstones
     // every existing one. Editing one amount on a six-way split DELETES all six rows and

package/dist/src/lib/toolsets.js

@@ -59,6 +59,7 @@ export const TOOLSETS = {
         'actual_transactions_update_batch',
         'actual_transactions_delete',
         'actual_transactions_import',
+        'actual_transactions_merge',
         'actual_transfers_create',
     ],
     analysis: [
@@ -221,6 +222,7 @@ export const WRITE_CAPABLE = new Set([
     'actual_transactions_create',
     'actual_transactions_delete',
     'actual_transactions_import',
+    'actual_transactions_merge',
     'actual_transactions_update',
     'actual_transactions_update_batch',
     'actual_transfers_create',

package/dist/src/tools/index.js

@@ -62,6 +62,7 @@ export { default as transactions_delete } from './transactions_delete.js';
 export { default as transactions_filter } from './transactions_filter.js';
 export { default as transactions_get } from './transactions_get.js';
 export { default as transactions_import } from './transactions_import.js';
+export { default as transactions_merge } from './transactions_merge.js';
 export { default as transactions_search_by_amount } from './transactions_search_by_amount.js';
 export { default as transactions_search_by_category } from './transactions_search_by_category.js';
 export { default as transactions_search_by_month } from './transactions_search_by_month.js';

package/dist/src/tools/schedules_create.js

@@ -2,6 +2,7 @@ import { z } from 'zod';
 import adapter from '../lib/actual-adapter.js';
 import { CommonSchemas } from '../lib/schemas/common.js';
 import { RecurConfigSchema } from '../lib/schemas/recur.js';
+import { ScheduleAmountSchema, amountOpMismatch, ISBETWEEN_NEEDS_RANGE } from '../lib/schemas/schedule-amount.js';
 const InputSchema = z.object({
     name: z.string().optional()
         .describe('Unique display name'),
@@ -9,8 +10,8 @@ const InputSchema = z.object({
         .describe('Payee UUID'),
     account: CommonSchemas.accountId.optional()
         .describe('Account UUID. If omitted the schedule is not tied to an account'),
-    amount: z.number().int().optional()
-        .describe('Amount in cents, negative = expense'),
+    amount: ScheduleAmountSchema.optional()
+        .describe('Amount in cents, negative = expense. A number, or { num1, num2 } only with amountOp isbetween (order does not matter)'),
     amountOp: z.enum(['is', 'isapprox', 'isbetween']).optional().default('is')
         .describe('How to match the amount'),
     date: z.union([
@@ -21,10 +22,17 @@ const InputSchema = z.object({
     ]).describe('YYYY-MM-DD for one-off, RecurConfig object for recurring. Required.'),
     posts_transaction: z.boolean().optional().default(false)
         .describe('Auto-post a transaction on each occurrence'),
+}).superRefine((input, ctx) => {
+    // #527: refused here, before any upstream call; see src/lib/schemas/schedule-amount.ts.
+    const message = input.amount === undefined
+        ? (input.amountOp === 'isbetween' ? ISBETWEEN_NEEDS_RANGE : null)
+        : amountOpMismatch(input.amountOp, input.amount);
+    if (message)
+        ctx.addIssue({ code: 'custom', path: ['amount'], message });
 });
 const tool = {
     name: 'actual_schedules_create',
-    description: `Create a schedule, one-off (YYYY-MM-DD date) or recurring (RecurConfig object with frequency, start, endMode). Amounts are in cents, negative for expenses.`,
+    description: `Create a schedule, one-off (YYYY-MM-DD date) or recurring (RecurConfig object: frequency and start, optional endMode, monthly patterns such as the last day or the second Monday). Amounts are in cents, negative for expenses.`,
     inputSchema: InputSchema,
     call: async (args, _meta) => {
         const input = InputSchema.parse(args || {});

package/dist/src/tools/schedules_update.js

@@ -2,6 +2,7 @@ import { z } from 'zod';
 import adapter from '../lib/actual-adapter.js';
 import { CommonSchemas } from '../lib/schemas/common.js';
 import { RecurConfigSchema } from '../lib/schemas/recur.js';
+import { ScheduleAmountSchema, amountOpMismatch } from '../lib/schemas/schedule-amount.js';
 const InputSchema = z.object({
     id: CommonSchemas.scheduleId.describe('Schedule UUID'),
     name: z.string().optional()
@@ -10,8 +11,8 @@ const InputSchema = z.object({
         .describe('New payee UUID, null to clear'),
     account: CommonSchemas.accountId.nullable().optional()
         .describe('New account UUID, null to clear'),
-    amount: z.number().int().optional()
-        .describe('New amount in cents, negative = expense'),
+    amount: ScheduleAmountSchema.optional()
+        .describe('New amount in cents, negative = expense. A number, or { num1, num2 } only with amountOp isbetween'),
     amountOp: z.enum(['is', 'isapprox', 'isbetween']).optional()
         .describe('How to match the amount'),
     date: z.union([
@@ -26,11 +27,19 @@ const InputSchema = z.object({
     completed: z.boolean().optional()
         .describe('true marks it completed, false reactivates it'),
     resetNextDate: z.boolean().optional().default(false)
-        .describe('Recalculate next_date; set it when changing the date'),
+        .describe('Recalculate next_date'),
+}).superRefine((input, ctx) => {
+    // #527: with both fields supplied the input alone decides. With only one, the answer
+    // depends on the stored schedule, so adapter.updateSchedule checks it inside the write queue.
+    if (input.amount === undefined || input.amountOp === undefined)
+        return;
+    const message = amountOpMismatch(input.amountOp, input.amount);
+    if (message)
+        ctx.addIssue({ code: 'custom', path: ['amount'], message });
 });
 const tool = {
     name: 'actual_schedules_update',
-    description: `Update a schedule; supply only the fields to change. Set resetNextDate: true when changing the date or recurrence.`,
+    description: `Update a schedule; supply only the fields to change. A new date replaces the stored recurrence, patterns included. Set resetNextDate: true when changing the date or recurrence.`,
     inputSchema: InputSchema,
     call: async (args, _meta) => {
         const input = InputSchema.parse(args || {});

package/dist/src/tools/transactions_merge.js

@@ -0,0 +1,26 @@
+import { z } from 'zod';
+import { createTool } from '../lib/toolFactory.js';
+import { CommonSchemas } from '../lib/schemas/common.js';
+import adapter from '../lib/actual-adapter.js';
+const InputSchema = z.object({
+    ids: z.array(CommonSchemas.transactionId).length(2)
+        .refine((ids) => ids[0] !== ids[1], { message: 'ids must be two DIFFERENT transaction ids' })
+        .describe('Exactly two transaction ids to merge'),
+});
+export default createTool({
+    name: 'actual_transactions_merge',
+    description: 'Merge two transactions (e.g. a bank-imported duplicate and a manual entry). Same account and same amount required; split children cannot be merged. ' +
+        'Upstream keeps the one with imported_id, else imported_payee, else the earlier date, else the SECOND id, and DELETES the other (cannot be undone). ' +
+        'The kept row keeps its own values: only its EMPTY payee, category, notes and schedule, and false cleared and reconciled flags, are filled from the deleted row, so a deleted row value is lost where the kept row has one. ' +
+        'Returns keptId and deletedId. If only one is a transfer, the kept row takes the transfer payee; if both are transfers, their counterparts are merged and one more row is deleted there. ' +
+        'Merging a split in, or a transfer to an on-budget account, clears the category. Read both with actual_transactions_get first.',
+    schema: InputSchema,
+    handler: async (input) => {
+        const ids = [input.ids[0], input.ids[1]];
+        const { keptId, deletedId } = await adapter.mergeTransactions(ids);
+        return { success: true, keptId, deletedId };
+    },
+    examples: [
+        { description: 'Merge a manual transaction with its imported duplicate', input: { ids: ['00000000-0000-4000-8000-000000000001', '00000000-0000-4000-8000-000000000002'] } },
+    ],
+});

package/package.json

@@ -1,12 +1,12 @@
 {
   "name": "actual-mcp-server",
   "displayName": "Actual MCP Server",
-  "version": "0.22.25",
+  "version": "0.22.31",
   "engines": {
     "node": ">=22.0.0",
     "npm": ">=10.0.0"
   },
-  "description": "MCP server with 83 tools for AI-driven financial management with Actual Budget. HTTP and stdio transports for LibreChat, Claude Desktop, Cursor, VS Code, Gemini CLI",
+  "description": "MCP server with 84 tools for AI-driven financial management with Actual Budget. HTTP and stdio transports for LibreChat, Claude Desktop, Cursor, VS Code, Gemini CLI",
   "homepage": "https://github.com/agigante80/actual-mcp-server#readme",
   "repository": {
     "type": "git",
@@ -30,7 +30,7 @@
     "verify-tools": "npm run build && node scripts/verify-tools.js",
     "check:coverage": "node scripts/list-actual-api-methods.mjs",
     "direct-sync": "node scripts/direct-sync/bank-sync-direct.mjs",
-    "test:unit-js": "node tests/unit/transactions_create.test.js && node tests/unit/transactions_aggregate.test.js && node tests/unit/account_flow_summary.test.js && node tests/unit/recurring_expenses_summary.test.js && node tests/unit/generated_tools.smoke.test.js &&node tests/unit/schema_validation.test.js && node tests/unit/schema_json_openai_compat.test.js && node tests/unit/config_https_validation.test.js && node tests/unit/config_data_dir.test.js && node tests/unit/config_drift.test.js && node tests/unit/port_alignment.test.js && node tests/unit/dockerfile_data_dir_alignment.test.js && node tests/unit/unraid_template_alignment.test.js && node tests/unit/entrypoint_invariants.test.js && node tests/unit/e2e_spec_collection.test.js && node tests/unit/compose_profile_sync.test.js && node tests/unit/advertised_tools_sync.test.js && node tests/unit/new_tool_completeness.test.js && node tests/unit/knip_config.test.js && node tests/unit/readme_stats_sync.test.js && node tests/unit/config_insecure_upstream.test.js && node tests/unit/workflow_release_guards.test.js && node tests/unit/report_train_failure.test.js && node tests/unit/unit_chain_membership.test.js && node tests/unit/api_surface_drift.test.js && node tests/unit/write_effect_audit_staleness.test.js && node tests/unit/write_effect_audit_membership.test.js && node tests/unit/tool_annotations.test.js && node tests/unit/tool_id_schema_drift.test.js && node tests/unit/filter_id_resolution.test.js && node tests/unit/filter_id_tool_wiring.test.js && node tests/unit/api_coverage_baseline.test.js && node tests/unit/train_preflight.test.js && node tests/unit/verify_published_artifacts.test.js && node tests/unit/report_train_stale.test.js && node tests/unit/stdio_framing_check.test.js && node tests/unit/server_info.test.js && node tests/unit/transfers_create.test.js && node tests/unit/bot_target_branch.test.js && node tests/unit/auth_posture.test.js && node tests/unit/auth_posture_wiring.test.js && node tests/unit/auth-acl.test.js && node tests/unit/bug76.test.js && node tests/unit/budgets_setAmount.test.js && node tests/unit/adapter_set_budget_batch.test.js && node tests/unit/budget_updates_batch.test.js && node tests/unit/rules_create.test.js && node tests/unit/adapter_rule_reference_guard.test.js && node tests/unit/rules_create_batch.test.js && node tests/unit/budgets_hold_for_next_month.test.js && node tests/unit/budgets_transfer.test.js && node tests/unit/transactions_uncategorized.test.js && node tests/unit/httpServer_session_init.test.js && node tests/unit/httpServer_session_not_found.test.js && node tests/unit/httpServer_init_failure_report.test.js && node tests/unit/stdio_init_failure_report.test.js && node tests/unit/manual_mcp_client_retry.test.js && node tests/unit/manual_mcp_client_session.test.js && node tests/unit/manual_mcp_client_circuit.test.js && node tests/unit/manual_runner_killswitch.test.js && node tests/unit/adapter_auth_rate_limit.test.js && node tests/unit/adapter_session_reuse.test.js && node tests/unit/retry_classifier.test.js && node tests/unit/adapter_module_surface.test.js && node tests/unit/adapter_nonidempotent_no_retry.test.js && node tests/unit/pool_liveness.test.js && node tests/unit/pool_shutdown_all.test.js && node tests/unit/query_where_operators.test.js && node tests/unit/query_run_validation.test.js && node tests/unit/adapter_with_write_session.test.js && node tests/unit/category_groups_delete.test.js && node tests/unit/rules_delete.test.js && node tests/unit/schedules_delete.test.js && node tests/unit/accounts_delete.test.js && node tests/unit/update_tools_not_found.test.js && node tests/unit/accounts_close.test.js && node tests/unit/accounts_reopen.test.js && node tests/unit/payees_delete.test.js && node tests/unit/payees_merge.test.js && node tests/unit/rules_create_or_update.test.js && node tests/unit/unhandled-rejection.test.js && node tests/unit/rejection-allowlist-purity.test.js && node tests/unit/httpServer_bearer_auth.test.js && node tests/unit/session_ownership.test.js && node tests/unit/httpServer_oidc_audience.test.js && node tests/unit/httpServer_oidc_auth_verification.test.js && node tests/unit/httpServer_oidc_jwks_discovery.test.js && node tests/unit/oidc_resource_identifier.test.js && node tests/unit/httpServer_oidc_resource_metadata.test.js && node tests/unit/oidc_error_cause.test.js && node tests/unit/httpServer_oidc_error_body.test.js && node tests/unit/oidc_token_source.test.js && node tests/unit/config_oidc_assertion_refines.test.js && node tests/unit/httpServer_oidc_assertion_mode.test.js && node tests/unit/httpServer_body_limit.test.js && node tests/unit/httpErrorHandler.test.js && node tests/unit/httpServer_error_handler_wiring.test.js && node tests/unit/httpServer_trust_proxy.test.js && node tests/unit/httpServer_batch_cap.test.js && node tests/unit/dotenv_stdout_quiet.test.js && node tests/unit/httpServer_bind_host.test.js && node tests/unit/adapter_write_pool_cooperation.test.js && node tests/unit/adapter_drain_listing_cache.test.js && node tests/unit/budget_acl_enforcement.test.js && node tests/unit/budget_selection_precondition.test.js && node tests/unit/budget_load_abandonment.test.js && node tests/unit/budget_loader_postcondition.test.js && node tests/unit/budget_loader_import_allowlist.test.js && node tests/unit/budget_import_tracking.test.js && node tests/unit/pool_shutdown_under_lock.test.js && node tests/unit/api_lock_affinity.test.js && node tests/unit/commit_message_closing_keyword.test.js && node tests/unit/write_queue_stranding.test.js && node tests/unit/write_queue_stranded_bound.test.js && node tests/unit/budget_preference_store.test.js && node tests/unit/budget_preference_restore.test.js && node tests/unit/tags_list.test.js && node tests/unit/tags_create.test.js && node tests/unit/tags_update.test.js && node tests/unit/tags_delete.test.js && node tests/unit/notes_get.test.js && node tests/unit/notes_update.test.js && node tests/unit/payees_common_list.test.js && node tests/unit/transactions_update_guard.test.js && node tests/unit/transactions_update_splits.test.js && node tests/unit/transactions_update_split_convert.test.js && node tests/unit/entities_search.test.js && node tests/unit/transactions_import_schema.test.js && node tests/unit/tool_schema_shape.test.js && node tests/unit/zod_error_format.test.js && node tests/unit/transactions_update_batch.test.js && node tests/unit/tool_count_sync.test.js && node tests/unit/stdio_transport.test.js && node tests/unit/stdio_budget_switch.test.js && node tests/unit/logger_structured.test.js && node tests/unit/logger_redaction.test.js && node tests/unit/logger_correlation.test.js && node tests/unit/check_coverage.test.js && node tests/unit/adapter_op_timeout.test.js && node tests/unit/adapter_write_queue_wakeup.test.js && node tests/unit/ci_workflow_guards.test.js && node tests/unit/node_version_guard.test.js && node tests/unit/node_version_drift.test.js && node tests/unit/playwright_version_drift.test.js && node tests/unit/observability_smoke.test.js && node tests/unit/residue_pattern.test.js && node tests/unit/batch_uncategorized_cleanup.test.js && node tests/unit/dual_transport_gate.test.js && node tests/unit/manual_assertions_use_helper.test.js && node tests/unit/server_version_guard.test.js && node tests/unit/server_version_probe_outside_op_timeout.test.js && node tests/unit/payee_rules_reference_filter.test.js && node tests/unit/oidc_metadata_discovery.test.js && node tests/unit/httpServer_oauth_metadata_route.test.js && node tests/unit/httpServer_mcp_info_route.test.js && node tests/unit/residue_sweep_balance_account.test.js && node tests/unit/tool_factory.test.js && node tests/unit/budget_registry_parse.test.js && node tests/unit/preferences_get.test.js && node tests/unit/budgets_export.test.js && node tests/unit/budgets_import.test.js && node tests/unit/budgets_import_syncid.test.js && node tests/unit/budget_acl_dynamic.test.js && node tests/unit/budget_acl_identity_map.test.js && node tests/unit/budget_acl_userinfo.test.js && node tests/unit/acl_e2e_fixture_contract.test.js && node tests/unit/budget_acl_middleware.test.js && node tests/unit/rules_stage.test.js && node tests/unit/oidc_scope_list.test.js && node tests/unit/get_context.test.js && node tests/unit/contributor_docs.test.js && node tests/unit/toolsets.test.js && node tests/unit/toolsets_entrypoint.test.js && node tests/unit/tools_list_size_budget.test.js && node tests/unit/rules_update_schedules_schema.test.js && node tests/unit/source_text_helper.test.js && node tests/unit/transport_onerror.test.js && node tests/unit/adapter_transaction_batch_abort.test.js",
+    "test:unit-js": "node tests/unit/transactions_create.test.js && node tests/unit/transactions_aggregate.test.js && node tests/unit/account_flow_summary.test.js && node tests/unit/recurring_expenses_summary.test.js && node tests/unit/generated_tools.smoke.test.js &&node tests/unit/schema_validation.test.js && node tests/unit/schema_json_openai_compat.test.js && node tests/unit/config_https_validation.test.js && node tests/unit/config_data_dir.test.js && node tests/unit/config_drift.test.js && node tests/unit/port_alignment.test.js && node tests/unit/dockerfile_data_dir_alignment.test.js && node tests/unit/unraid_template_alignment.test.js && node tests/unit/entrypoint_invariants.test.js && node tests/unit/e2e_spec_collection.test.js && node tests/unit/compose_profile_sync.test.js && node tests/unit/advertised_tools_sync.test.js && node tests/unit/new_tool_completeness.test.js && node tests/unit/knip_config.test.js && node tests/unit/readme_stats_sync.test.js && node tests/unit/config_insecure_upstream.test.js && node tests/unit/workflow_release_guards.test.js && node tests/unit/report_train_failure.test.js && node tests/unit/unit_chain_membership.test.js && node tests/unit/api_surface_drift.test.js && node tests/unit/write_effect_audit_staleness.test.js && node tests/unit/write_effect_audit_membership.test.js && node tests/unit/tool_annotations.test.js && node tests/unit/tool_id_schema_drift.test.js && node tests/unit/filter_id_resolution.test.js && node tests/unit/filter_id_tool_wiring.test.js && node tests/unit/api_coverage_baseline.test.js && node tests/unit/train_preflight.test.js && node tests/unit/verify_published_artifacts.test.js && node tests/unit/report_train_stale.test.js && node tests/unit/stdio_framing_check.test.js && node tests/unit/server_info.test.js && node tests/unit/transfers_create.test.js && node tests/unit/bot_target_branch.test.js && node tests/unit/auth_posture.test.js && node tests/unit/auth_posture_wiring.test.js && node tests/unit/auth-acl.test.js && node tests/unit/bug76.test.js && node tests/unit/budgets_setAmount.test.js && node tests/unit/adapter_set_budget_batch.test.js && node tests/unit/budget_updates_batch.test.js && node tests/unit/rules_create.test.js && node tests/unit/adapter_rule_reference_guard.test.js && node tests/unit/rules_create_batch.test.js && node tests/unit/budgets_hold_for_next_month.test.js && node tests/unit/budgets_transfer.test.js && node tests/unit/transactions_uncategorized.test.js && node tests/unit/httpServer_session_init.test.js && node tests/unit/httpServer_session_not_found.test.js && node tests/unit/httpServer_init_failure_report.test.js && node tests/unit/stdio_init_failure_report.test.js && node tests/unit/manual_mcp_client_retry.test.js && node tests/unit/manual_mcp_client_session.test.js && node tests/unit/manual_mcp_client_circuit.test.js && node tests/unit/manual_runner_killswitch.test.js && node tests/unit/adapter_auth_rate_limit.test.js && node tests/unit/adapter_session_reuse.test.js && node tests/unit/retry_classifier.test.js && node tests/unit/adapter_module_surface.test.js && node tests/unit/adapter_nonidempotent_no_retry.test.js && node tests/unit/pool_liveness.test.js && node tests/unit/pool_shutdown_all.test.js && node tests/unit/query_where_operators.test.js && node tests/unit/query_run_validation.test.js && node tests/unit/adapter_with_write_session.test.js && node tests/unit/category_groups_delete.test.js && node tests/unit/rules_delete.test.js && node tests/unit/schedules_delete.test.js && node tests/unit/accounts_delete.test.js && node tests/unit/update_tools_not_found.test.js && node tests/unit/accounts_close.test.js && node tests/unit/accounts_reopen.test.js && node tests/unit/payees_delete.test.js && node tests/unit/payees_merge.test.js && node tests/unit/rules_create_or_update.test.js && node tests/unit/unhandled-rejection.test.js && node tests/unit/rejection-allowlist-purity.test.js && node tests/unit/httpServer_bearer_auth.test.js && node tests/unit/session_ownership.test.js && node tests/unit/httpServer_oidc_audience.test.js && node tests/unit/httpServer_oidc_auth_verification.test.js && node tests/unit/httpServer_oidc_jwks_discovery.test.js && node tests/unit/oidc_resource_identifier.test.js && node tests/unit/httpServer_oidc_resource_metadata.test.js && node tests/unit/oidc_error_cause.test.js && node tests/unit/httpServer_oidc_error_body.test.js && node tests/unit/oidc_token_source.test.js && node tests/unit/config_oidc_assertion_refines.test.js && node tests/unit/httpServer_oidc_assertion_mode.test.js && node tests/unit/httpServer_body_limit.test.js && node tests/unit/httpErrorHandler.test.js && node tests/unit/httpServer_error_handler_wiring.test.js && node tests/unit/httpServer_trust_proxy.test.js && node tests/unit/httpServer_batch_cap.test.js && node tests/unit/dotenv_stdout_quiet.test.js && node tests/unit/httpServer_bind_host.test.js && node tests/unit/adapter_write_pool_cooperation.test.js && node tests/unit/adapter_drain_listing_cache.test.js && node tests/unit/budget_acl_enforcement.test.js && node tests/unit/budget_selection_precondition.test.js && node tests/unit/budget_load_abandonment.test.js && node tests/unit/budget_loader_postcondition.test.js && node tests/unit/budget_loader_import_allowlist.test.js && node tests/unit/budget_import_tracking.test.js && node tests/unit/pool_shutdown_under_lock.test.js && node tests/unit/api_lock_affinity.test.js && node tests/unit/commit_message_closing_keyword.test.js && node tests/unit/write_queue_stranding.test.js && node tests/unit/write_queue_stranded_bound.test.js && node tests/unit/budget_preference_store.test.js && node tests/unit/budget_preference_restore.test.js && node tests/unit/tags_list.test.js && node tests/unit/tags_create.test.js && node tests/unit/tags_update.test.js && node tests/unit/tags_delete.test.js && node tests/unit/notes_get.test.js && node tests/unit/notes_update.test.js && node tests/unit/payees_common_list.test.js && node tests/unit/transactions_update_guard.test.js && node tests/unit/transactions_update_splits.test.js && node tests/unit/transactions_update_split_convert.test.js && node tests/unit/entities_search.test.js && node tests/unit/transactions_import_schema.test.js && node tests/unit/tool_schema_shape.test.js && node tests/unit/zod_error_format.test.js && node tests/unit/transactions_update_batch.test.js && node tests/unit/tool_count_sync.test.js && node tests/unit/stdio_transport.test.js && node tests/unit/stdio_budget_switch.test.js && node tests/unit/logger_structured.test.js && node tests/unit/logger_redaction.test.js && node tests/unit/logger_correlation.test.js && node tests/unit/check_coverage.test.js && node tests/unit/adapter_op_timeout.test.js && node tests/unit/adapter_write_queue_wakeup.test.js && node tests/unit/ci_workflow_guards.test.js && node tests/unit/node_version_guard.test.js && node tests/unit/node_version_drift.test.js && node tests/unit/playwright_version_drift.test.js && node tests/unit/observability_smoke.test.js && node tests/unit/residue_pattern.test.js && node tests/unit/batch_uncategorized_cleanup.test.js && node tests/unit/dual_transport_gate.test.js && node tests/unit/manual_assertions_use_helper.test.js && node tests/unit/server_version_guard.test.js && node tests/unit/server_version_probe_outside_op_timeout.test.js && node tests/unit/payee_rules_reference_filter.test.js && node tests/unit/oidc_metadata_discovery.test.js && node tests/unit/httpServer_oauth_metadata_route.test.js && node tests/unit/httpServer_mcp_info_route.test.js && node tests/unit/residue_sweep_balance_account.test.js && node tests/unit/tool_factory.test.js && node tests/unit/budget_registry_parse.test.js && node tests/unit/preferences_get.test.js && node tests/unit/budgets_export.test.js && node tests/unit/budgets_import.test.js && node tests/unit/budgets_import_syncid.test.js && node tests/unit/budget_acl_dynamic.test.js && node tests/unit/budget_acl_identity_map.test.js && node tests/unit/budget_acl_userinfo.test.js && node tests/unit/acl_e2e_fixture_contract.test.js && node tests/unit/budget_acl_middleware.test.js && node tests/unit/rules_stage.test.js && node tests/unit/oidc_scope_list.test.js && node tests/unit/get_context.test.js && node tests/unit/contributor_docs.test.js && node tests/unit/toolsets.test.js && node tests/unit/toolsets_entrypoint.test.js && node tests/unit/tools_list_size_budget.test.js && node tests/unit/rules_update_schedules_schema.test.js && node tests/unit/schedules_update_amount_guard.test.js && node tests/unit/source_text_helper.test.js && node tests/unit/transport_onerror.test.js && node tests/unit/adapter_transaction_batch_abort.test.js && node tests/unit/transactions_merge_adapter.test.js",
     "test:adapter": "npm run build && node dist/src/tests_adapter_runner.js",
     "test:e2e": "npx playwright test",
     "test:e2e:docker": "./tests/e2e/run-docker-e2e.sh",