actual-mcp-server 0.22.40 → 0.22.42

package/README.md

@@ -836,7 +836,7 @@ The software is provided **as-is**, without warranty of any kind. The author acc
 
 ---
 
-**Version:** 0.22.40 | **Tool Count:** 84 (verified LibreChat-compatible)
+**Version:** 0.22.42 | **Tool Count:** 84 (verified LibreChat-compatible)
 
 ## Sponsor
 

package/dist/src/lib/actual-adapter.js

@@ -52,11 +52,35 @@ logger.info(`[ADAPTER] Budget registry: ${budgetRegistry.size} budget(s) — ` +
  * stdio mode, startup health checks) fall back to the env-default budget
  * (first entry in budgetRegistry).
  *
- * Lifecycle: entries are removed on session close via session_close.ts and
- * implicitly when connectionPool.shutdownConnection runs (switchBudget calls
- * it to drop the stale pool entry bound to the previous syncId).
+ * Lifecycle (#564): entries are released on EVERY session end. The HTTP
+ * transport's teardownSession (idle eviction, the #530 orphan sweep, a client
+ * DELETE) calls clearSessionBudgetState, and actual_session_close does too (it
+ * also covers stdio). connectionPool.shutdownConnection does NOT release them:
+ * switchBudget calls it to drop the stale pool entry and must keep the selection.
+ *
+ * Every write goes through setSessionBudget, which skips a session the transport
+ * layer no longer holds, so a switch or a #189 restore that was in flight across
+ * the teardown cannot re-create the entry after it was released.
  */
 const sessionBudgetState = new Map();
+/**
+ * #564: is this session still held by its transport? The HTTP server registers
+ * `transports.has`; the default (stdio, unit tests, scripts) treats every session
+ * as live, which is the behaviour before #564.
+ */
+let isSessionLive = () => true;
+/** #563: why a queued write whose session ended before it ran was refused. */
+const SESSION_ENDED_BEFORE_WRITE = 'The session ended before this write ran, so it was not applied. Start a new session and retry.';
+export function setSessionLivenessCheck(check) {
+    isSessionLive = check;
+}
+function setSessionBudget(sessionId, key) {
+    if (!isSessionLive(sessionId)) {
+        logger.debug(`[ADAPTER] Session ${sessionId} ended before its budget selection was committed; not recording it`);
+        return;
+    }
+    sessionBudgetState.set(sessionId, key);
+}
 function getActiveBudgetConfig() {
     // _resolveSessionId is declared below; function declarations hoist so this
     // call works at runtime. If we're not in any requestContext.run scope (stdio,
@@ -78,7 +102,7 @@ function getActiveBudgetConfig() {
         // Memoize into the session slot so subsequent calls take the fast path above.
         const restored = pickAllowedPreferredBudget(getPreferredBudgetSyncId(store?.principal), store?.allowedBudgets, [...budgetRegistry.values()]);
         if (restored) {
-            sessionBudgetState.set(sessionId, restored.name.toLowerCase());
+            setSessionBudget(sessionId, restored.name.toLowerCase());
             return restored;
         }
     }
@@ -1136,6 +1160,17 @@ async function processWriteQueue() {
                                 'so it was failed immediately rather than waiting for the same bound. Retry it.', { cause: stuckLoadError }));
                             continue;
                         }
+                        // #563: the session ended (a client DELETE, an eviction) after this write was queued.
+                        // Teardown released its budget selection (#564), so its store would now resolve to the
+                        // default budget, one the session never chose and its principal may not be allowed.
+                        // Refuse instead. Outside the try on purpose, like the fail-fast above: the write never
+                        // ran, so it must not reach the pool-drop classification. A plain Error, not a typed
+                        // refusal: those mean the caller's input was wrong, and this one is not (gate round 2,
+                        // tool-author lens). The check is repeated just before the operation runs, below.
+                        if (entry.sessionId && !isSessionLive(entry.sessionId)) {
+                            reject(new Error(SESSION_ENDED_BEFORE_WRITE));
+                            continue;
+                        }
                         try {
                             // #390 round 2: run each op in the context it was ENQUEUED in.
                             //
@@ -1181,6 +1216,17 @@ async function processWriteQueue() {
                                     throw waitErr;
                                 }
                                 await ensureLoadedBudgetMatchesSession();
+                                // #563 round 3: the check above ran before the awaits in this block. Holding the
+                                // api lock does not hold teardown off: with the pool disabled nothing in teardown
+                                // takes the lock, so the session can end (and its budget selection be released)
+                                // while this op waits on an abandoned load, and the precondition would then have
+                                // loaded the default budget. Re-check last, immediately before the write, with nothing
+                                // awaited in between. Accepted: a session that ended during the wait may cost one
+                                // wasted default-budget load, which is harmless because the write is still refused.
+                                // The error matches no pool-drop pattern, so the catch below only logs and rejects it.
+                                if (entry.sessionId && !isSessionLive(entry.sessionId)) {
+                                    throw new Error(SESSION_ENDED_BEFORE_WRITE);
+                                }
                                 // #407: an operation may carry its OWN bound. Only a budget import does today, and
                                 // it needs one: the import is legitimately long, and bounding it at the general
                                 // operation timeout abandons it while every other session is already waiting on it
@@ -3859,7 +3905,7 @@ export async function switchBudget(name) {
         (currentEntry.encryptionPassword ?? '') === (found.encryptionPassword ?? '');
     if (sameAuth && currentEntry.syncId === found.syncId) {
         // No-op: already on this exact budget. Keep session map consistent and return.
-        sessionBudgetState.set(sessionId, key);
+        setSessionBudget(sessionId, key);
         setPreferredBudgetSyncId(store?.principal, found.syncId); // #189: persist at commit
         logger.info(`[ADAPTER] switchBudget no-op for session ${sessionId}: already on "${found.name}" (${found.syncId})`);
         return { name: found.name, syncId: found.syncId, serverUrl: found.serverUrl };
@@ -3879,7 +3925,7 @@ export async function switchBudget(name) {
             });
         }
         connectionPool.updateLoadedSyncId(sessionId, found.syncId);
-        sessionBudgetState.set(sessionId, key);
+        setSessionBudget(sessionId, key);
         setPreferredBudgetSyncId(store?.principal, found.syncId); // #189: persist at commit
         logger.info(`[ADAPTER] Active budget switched for session ${sessionId} to: "${found.name}" (${found.syncId}) on ${found.serverUrl}`);
         return { name: found.name, syncId: found.syncId, serverUrl: found.serverUrl };
@@ -3895,7 +3941,7 @@ export async function switchBudget(name) {
     }
     // Update the per-session active-budget slot. Subsequent getActiveBudgetConfig
     // calls for this session now return the new budget.
-    sessionBudgetState.set(sessionId, key);
+    setSessionBudget(sessionId, key);
     setPreferredBudgetSyncId(store?.principal, found.syncId); // #189: persist at commit
     // Materialise a fresh pool entry bound to the new budget. Without this, the
     // next withActualApi call would find no pool entry and fall back to the
@@ -3938,9 +3984,10 @@ export async function switchBudget(name) {
     return { name: found.name, syncId: found.syncId, serverUrl: found.serverUrl };
 }
 /**
- * Clear the per-session budget state for a session. Called from
- * session_close so the per-session map does not accumulate stale entries
- * after a session ends. See #156.
+ * Clear the per-session budget state for a session, so the map does not
+ * accumulate entries for ended sessions (#156). Called from the HTTP
+ * transport's teardownSession on every session end (#564) and from
+ * session_close, which also covers stdio.
  */
 export function clearSessionBudgetState(sessionId) {
     sessionBudgetState.delete(sessionId);

package/dist/src/server/httpServer.js

@@ -9,6 +9,8 @@ import { getLocalIp } from '../utils.js';
 import actualToolsManager from '../actualToolsManager.js';
 import { getConnectionState, connectToActualForSession, shutdownActualForSession, shutdownActual, canAcceptNewSession, isConnectionPoolEnabled } from '../actualConnection.js';
 import { connectionPool } from '../lib/ActualConnectionPool.js';
+import { clearSessionBudgetState, setSessionLivenessCheck } from '../lib/actual-adapter.js';
+import { errorLogFields } from '../lib/errors.js';
 import observability from '../observability.js';
 import config from '../config.js';
 import { createRemoteJWKSet, jwtVerify } from 'jose';
@@ -299,6 +301,9 @@ advertisedUrl) {
     // window without a served request, with reason `orphaned`; same teardown. The
     // body is synchronous on purpose: the pool walks its registrations in one pass.
     connectionPool.onSessionEvicted(teardownSession);
+    // #564: a session's selected budget lives as long as its transport. A selection
+    // committed after teardown (a switch in flight across it) is dropped by the adapter.
+    setSessionLivenessCheck((id) => transports.has(id));
     function teardownSession(sessionId, reason) {
         const transport = transports.get(sessionId);
         if (transport) {
@@ -312,6 +317,7 @@ advertisedUrl) {
         transports.delete(sessionId);
         sessionInitPromises.delete(sessionId);
         forgetSessionOwner(sessionId);
+        clearSessionBudgetState(sessionId);
         connectionPool.forgetSession(sessionId);
         logger.info(`[SESSION] Transport torn down for ${reason} session: ${sessionId}`);
     }
@@ -521,6 +527,14 @@ advertisedUrl) {
                 const transport = new StreamableHTTPServerTransport({
                     sessionIdGenerator: () => randomUUID(),
                     enableJsonResponse: true,
+                    // #563: the SDK awaits this on a valid DELETE, BEFORE it answers 200, so the pool
+                    // slot is free by the time the client hears the session ended. It waits for the api
+                    // mutex (#392), so another session's call in flight finishes first. Without evict:
+                    // the DELETE route tears the session down itself after the 200.
+                    onsessionclosed: async (sid) => {
+                        if (isConnectionPoolEnabled())
+                            await connectionPool.shutdownConnection(sid);
+                    },
                     onsessioninitialized: async (sid) => {
                         logger.debug(`Session initialized: ${sid}`);
                         // Store the promise before starting initialization
@@ -826,6 +840,69 @@ advertisedUrl) {
         connectionPool.touch(sessionId); // Refresh the pool's idle clock (#167)
         await transport.handleRequest(req, res);
     });
+    // #563: DELETE ends the session (MCP spec 2025-11-25, Session Management rule 5).
+    // Same gate, missing-id answer and ownership rule as POST; the SDK then validates
+    // MCP-Protocol-Version, runs onsessionclosed (which frees the pool slot, see the
+    // transport options), answers 200 and closes its transport. Only after a 200 do we
+    // tear the session down ourselves: a 400 for an unsupported version leaves the
+    // session open, as the SDK does. teardownSession is called directly rather than
+    // through the pool's eviction listener because the listener never fires with the
+    // pool disabled or with the entry already dropped (#530), which would leave the
+    // transport, owner and budget selection behind. The pool entry is shut down
+    // WITHOUT evict so the teardown runs once, logged as `closed`.
+    const sessionNotFound = { jsonrpc: '2.0', id: null, error: { code: -32001, message: 'Session not found. Please re-initialize by calling initialize without mcp-session-id header.' } };
+    app.delete(httpPath, async (req, res) => {
+        if (!authenticateRequest(req, res)) {
+            return;
+        }
+        const sessionId = req.headers['mcp-session-id'];
+        if (!sessionId) {
+            res.status(400).json({ jsonrpc: '2.0', id: null, error: { code: -32000, message: 'Bad Request: Mcp-Session-Id header is required' } });
+            return;
+        }
+        try {
+            let transport = transports.get(sessionId);
+            const initPromise = transport ? undefined : sessionInitPromises.get(sessionId);
+            if (initPromise) {
+                // A failed init is answered like an unknown id; its #438 record is peek-only and stays.
+                await initPromise.catch(() => undefined);
+                transport = transports.get(sessionId);
+            }
+            // A non-owner gets the unknown-id answer byte for byte (#529), so the reply never
+            // confirms that the id exists.
+            if (!transport || !sessionOwnerMatches(sessionId, resolvePrincipal(req))) {
+                if (transport)
+                    logger.warn(`[SESSION] Refused a DELETE for session ${sessionId} from a principal that does not own it`);
+                res.status(404).json(sessionNotFound);
+                return;
+            }
+            const allowedBudgets = req.allowedBudgets;
+            const requestId = resolveRequestId(req.get('x-correlation-id'));
+            await requestContext.run({ sessionId, requestId, allowedBudgets, principal: resolvePrincipal(req) }, async () => {
+                await transport.handleRequest(req, res);
+            });
+            if (res.statusCode !== 200)
+                return;
+            teardownSession(sessionId, 'closed');
+        }
+        catch (err) {
+            logger.error(`[SESSION] DELETE for session ${sessionId} failed`, errorLogFields(err));
+            if (!res.headersSent) {
+                res.status(500).json({ jsonrpc: '2.0', id: null, error: { code: -32603, message: 'Internal error. The server logged the cause.' } });
+            }
+        }
+    });
+    // #563: every other method on the MCP path gets a JSON-RPC 405 with the Allow header
+    // RFC 9110 15.5.6 requires, instead of Express's HTML 404. HEAD is served by the GET
+    // route; OPTIONS answers 204 with the same Allow list.
+    app.all(httpPath, (req, res) => {
+        res.setHeader('Allow', 'GET, POST, DELETE');
+        if (req.method === 'OPTIONS') {
+            res.status(204).end();
+            return;
+        }
+        res.status(405).json({ jsonrpc: '2.0', id: null, error: { code: -32000, message: 'Method not allowed.' } });
+    });
     // Quick GET server-info probe used by our test harness (testMcpClient.ts, the
     // Playwright E2E) to check the server is up and advertises tools before the full
     // JSON-RPC handshake. #286: this used to live on /.well-known/oauth-protected-resource

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "actual-mcp-server",
   "displayName": "Actual MCP Server",
-  "version": "0.22.40",
+  "version": "0.22.42",
   "engines": {
     "node": ">=22.0.0",
     "npm": ">=10.0.0"
@@ -30,7 +30,7 @@
     "verify-tools": "npm run build && node scripts/verify-tools.js",
     "check:coverage": "node scripts/list-actual-api-methods.mjs",
     "direct-sync": "node scripts/direct-sync/bank-sync-direct.mjs",
-    "test:unit-js": "node tests/unit/transactions_create.test.js && node tests/unit/transactions_aggregate.test.js && node tests/unit/account_flow_summary.test.js && node tests/unit/recurring_expenses_summary.test.js && node tests/unit/generated_tools.smoke.test.js &&node tests/unit/schema_validation.test.js && node tests/unit/schema_json_openai_compat.test.js && node tests/unit/config_https_validation.test.js && node tests/unit/config_data_dir.test.js && node tests/unit/config_drift.test.js && node tests/unit/port_alignment.test.js && node tests/unit/dockerfile_data_dir_alignment.test.js && node tests/unit/unraid_template_alignment.test.js && node tests/unit/entrypoint_invariants.test.js && node tests/unit/e2e_spec_collection.test.js && node tests/unit/compose_profile_sync.test.js && node tests/unit/advertised_tools_sync.test.js && node tests/unit/new_tool_completeness.test.js && node tests/unit/knip_config.test.js && node tests/unit/readme_stats_sync.test.js && node tests/unit/config_insecure_upstream.test.js && node tests/unit/workflow_release_guards.test.js && node tests/unit/report_train_failure.test.js && node tests/unit/unit_chain_membership.test.js && node tests/unit/api_surface_drift.test.js && node tests/unit/write_effect_audit_staleness.test.js && node tests/unit/write_effect_audit_membership.test.js && node tests/unit/tool_annotations.test.js && node tests/unit/tool_id_schema_drift.test.js && node tests/unit/filter_id_resolution.test.js && node tests/unit/filter_id_tool_wiring.test.js && node tests/unit/api_coverage_baseline.test.js && node tests/unit/train_preflight.test.js && node tests/unit/verify_published_artifacts.test.js && node tests/unit/report_train_stale.test.js && node tests/unit/stdio_framing_check.test.js && node tests/unit/server_info.test.js && node tests/unit/transfers_create.test.js && node tests/unit/bot_target_branch.test.js && node tests/unit/auth_posture.test.js && node tests/unit/auth_posture_wiring.test.js && node tests/unit/auth-acl.test.js && node tests/unit/bug76.test.js && node tests/unit/budgets_setAmount.test.js && node tests/unit/adapter_set_budget_batch.test.js && node tests/unit/budget_updates_batch.test.js && node tests/unit/rules_create.test.js && node tests/unit/adapter_rule_reference_guard.test.js && node tests/unit/rules_create_batch.test.js && node tests/unit/budgets_hold_for_next_month.test.js && node tests/unit/budgets_transfer.test.js && node tests/unit/transactions_uncategorized.test.js && node tests/unit/httpServer_session_init.test.js && node tests/unit/httpServer_session_not_found.test.js && node tests/unit/httpServer_init_failure_report.test.js && node tests/unit/stdio_init_failure_report.test.js && node tests/unit/manual_mcp_client_retry.test.js && node tests/unit/manual_mcp_client_session.test.js && node tests/unit/manual_mcp_client_circuit.test.js && node tests/unit/manual_runner_killswitch.test.js && node tests/unit/adapter_auth_rate_limit.test.js && node tests/unit/adapter_session_reuse.test.js && node tests/unit/retry_classifier.test.js && node tests/unit/adapter_module_surface.test.js && node tests/unit/adapter_nonidempotent_no_retry.test.js && node tests/unit/pool_liveness.test.js && node tests/unit/pool_shutdown_all.test.js && node tests/unit/query_where_operators.test.js && node tests/unit/query_run_validation.test.js && node tests/unit/adapter_with_write_session.test.js && node tests/unit/category_groups_delete.test.js && node tests/unit/rules_delete.test.js && node tests/unit/schedules_delete.test.js && node tests/unit/accounts_delete.test.js && node tests/unit/update_tools_not_found.test.js && node tests/unit/accounts_close.test.js && node tests/unit/accounts_reopen.test.js && node tests/unit/payees_delete.test.js && node tests/unit/payees_merge.test.js && node tests/unit/rules_create_or_update.test.js && node tests/unit/unhandled-rejection.test.js && node tests/unit/rejection-allowlist-purity.test.js && node tests/unit/httpServer_bearer_auth.test.js && node tests/unit/session_ownership.test.js && node tests/unit/httpServer_oidc_audience.test.js && node tests/unit/httpServer_oidc_auth_verification.test.js && node tests/unit/httpServer_oidc_jwks_discovery.test.js && node tests/unit/oidc_resource_identifier.test.js && node tests/unit/httpServer_oidc_resource_metadata.test.js && node tests/unit/oidc_error_cause.test.js && node tests/unit/httpServer_oidc_error_body.test.js && node tests/unit/oidc_token_source.test.js && node tests/unit/config_oidc_assertion_refines.test.js && node tests/unit/httpServer_oidc_assertion_mode.test.js && node tests/unit/httpServer_body_limit.test.js && node tests/unit/httpErrorHandler.test.js && node tests/unit/httpServer_error_handler_wiring.test.js && node tests/unit/httpServer_trust_proxy.test.js && node tests/unit/httpServer_batch_cap.test.js && node tests/unit/dotenv_stdout_quiet.test.js && node tests/unit/httpServer_bind_host.test.js && node tests/unit/adapter_write_pool_cooperation.test.js && node tests/unit/adapter_drain_listing_cache.test.js && node tests/unit/budget_acl_enforcement.test.js && node tests/unit/budget_selection_precondition.test.js && node tests/unit/budget_load_abandonment.test.js && node tests/unit/budget_loader_postcondition.test.js && node tests/unit/budget_loader_import_allowlist.test.js && node tests/unit/budget_import_tracking.test.js && node tests/unit/pool_shutdown_under_lock.test.js && node tests/unit/api_lock_affinity.test.js && node tests/unit/commit_message_closing_keyword.test.js && node tests/unit/write_queue_stranding.test.js && node tests/unit/write_queue_stranded_bound.test.js && node tests/unit/budget_preference_store.test.js && node tests/unit/budget_preference_restore.test.js && node tests/unit/tags_list.test.js && node tests/unit/tags_create.test.js && node tests/unit/tags_update.test.js && node tests/unit/tags_delete.test.js && node tests/unit/notes_get.test.js && node tests/unit/notes_update.test.js && node tests/unit/payees_common_list.test.js && node tests/unit/transactions_update_guard.test.js && node tests/unit/transactions_update_splits.test.js && node tests/unit/transactions_update_split_convert.test.js && node tests/unit/entities_search.test.js && node tests/unit/transactions_import_schema.test.js && node tests/unit/tool_schema_shape.test.js && node tests/unit/zod_error_format.test.js && node tests/unit/transactions_update_batch.test.js && node tests/unit/tool_count_sync.test.js && node tests/unit/stdio_transport.test.js && node tests/unit/stdio_budget_switch.test.js && node tests/unit/logger_structured.test.js && node tests/unit/logger_redaction.test.js && node tests/unit/tool_content_logging.test.js && node tests/unit/adapter_error_logging.test.js && node tests/unit/logger_correlation.test.js && node tests/unit/check_coverage.test.js && node tests/unit/adapter_op_timeout.test.js && node tests/unit/adapter_write_queue_wakeup.test.js && node tests/unit/ci_workflow_guards.test.js && node tests/unit/node_version_guard.test.js && node tests/unit/node_version_drift.test.js && node tests/unit/playwright_version_drift.test.js && node tests/unit/observability_smoke.test.js && node tests/unit/residue_pattern.test.js && node tests/unit/batch_uncategorized_cleanup.test.js && node tests/unit/dual_transport_gate.test.js && node tests/unit/manual_assertions_use_helper.test.js && node tests/unit/server_version_guard.test.js && node tests/unit/server_version_probe_outside_op_timeout.test.js && node tests/unit/payee_rules_reference_filter.test.js && node tests/unit/oidc_metadata_discovery.test.js && node tests/unit/httpServer_oauth_metadata_route.test.js && node tests/unit/httpServer_mcp_info_route.test.js && node tests/unit/residue_sweep_balance_account.test.js && node tests/unit/tool_factory.test.js && node tests/unit/budget_registry_parse.test.js && node tests/unit/preferences_get.test.js && node tests/unit/budgets_export.test.js && node tests/unit/budgets_import.test.js && node tests/unit/budgets_import_syncid.test.js && node tests/unit/budget_acl_dynamic.test.js && node tests/unit/budget_acl_identity_map.test.js && node tests/unit/budget_acl_userinfo.test.js && node tests/unit/acl_e2e_fixture_contract.test.js && node tests/unit/budget_acl_middleware.test.js && node tests/unit/rules_stage.test.js && node tests/unit/oidc_scope_list.test.js && node tests/unit/get_context.test.js && node tests/unit/contributor_docs.test.js && node tests/unit/toolsets.test.js && node tests/unit/toolsets_entrypoint.test.js && node tests/unit/tools_list_size_budget.test.js && node tests/unit/rules_update_schedules_schema.test.js && node tests/unit/schedules_update_amount_guard.test.js && node tests/unit/source_text_helper.test.js && node tests/unit/transport_onerror.test.js && node tests/unit/adapter_transaction_batch_abort.test.js && node tests/unit/transactions_merge_adapter.test.js && node tests/unit/schedules_dead_conditions.test.js && node tests/unit/session_ownership_express.test.js && node tests/unit/pool_orphan_sweep.test.js && node tests/unit/budget_acl_parse.test.js",
+    "test:unit-js": "node tests/unit/transactions_create.test.js && node tests/unit/transactions_aggregate.test.js && node tests/unit/account_flow_summary.test.js && node tests/unit/recurring_expenses_summary.test.js && node tests/unit/generated_tools.smoke.test.js &&node tests/unit/schema_validation.test.js && node tests/unit/schema_json_openai_compat.test.js && node tests/unit/config_https_validation.test.js && node tests/unit/config_data_dir.test.js && node tests/unit/config_drift.test.js && node tests/unit/port_alignment.test.js && node tests/unit/dockerfile_data_dir_alignment.test.js && node tests/unit/unraid_template_alignment.test.js && node tests/unit/entrypoint_invariants.test.js && node tests/unit/e2e_spec_collection.test.js && node tests/unit/compose_profile_sync.test.js && node tests/unit/advertised_tools_sync.test.js && node tests/unit/new_tool_completeness.test.js && node tests/unit/knip_config.test.js && node tests/unit/readme_stats_sync.test.js && node tests/unit/config_insecure_upstream.test.js && node tests/unit/workflow_release_guards.test.js && node tests/unit/report_train_failure.test.js && node tests/unit/unit_chain_membership.test.js && node tests/unit/api_surface_drift.test.js && node tests/unit/write_effect_audit_staleness.test.js && node tests/unit/write_effect_audit_membership.test.js && node tests/unit/tool_annotations.test.js && node tests/unit/tool_id_schema_drift.test.js && node tests/unit/filter_id_resolution.test.js && node tests/unit/filter_id_tool_wiring.test.js && node tests/unit/api_coverage_baseline.test.js && node tests/unit/train_preflight.test.js && node tests/unit/verify_published_artifacts.test.js && node tests/unit/report_train_stale.test.js && node tests/unit/stdio_framing_check.test.js && node tests/unit/server_info.test.js && node tests/unit/transfers_create.test.js && node tests/unit/bot_target_branch.test.js && node tests/unit/auth_posture.test.js && node tests/unit/auth_posture_wiring.test.js && node tests/unit/auth-acl.test.js && node tests/unit/bug76.test.js && node tests/unit/budgets_setAmount.test.js && node tests/unit/adapter_set_budget_batch.test.js && node tests/unit/budget_updates_batch.test.js && node tests/unit/rules_create.test.js && node tests/unit/adapter_rule_reference_guard.test.js && node tests/unit/rules_create_batch.test.js && node tests/unit/budgets_hold_for_next_month.test.js && node tests/unit/budgets_transfer.test.js && node tests/unit/transactions_uncategorized.test.js && node tests/unit/httpServer_session_init.test.js && node tests/unit/httpServer_session_not_found.test.js && node tests/unit/httpServer_init_failure_report.test.js && node tests/unit/stdio_init_failure_report.test.js && node tests/unit/manual_mcp_client_retry.test.js && node tests/unit/manual_mcp_client_session.test.js && node tests/unit/manual_mcp_client_circuit.test.js && node tests/unit/manual_runner_killswitch.test.js && node tests/unit/adapter_auth_rate_limit.test.js && node tests/unit/adapter_session_reuse.test.js && node tests/unit/retry_classifier.test.js && node tests/unit/adapter_module_surface.test.js && node tests/unit/adapter_nonidempotent_no_retry.test.js && node tests/unit/pool_liveness.test.js && node tests/unit/pool_shutdown_all.test.js && node tests/unit/query_where_operators.test.js && node tests/unit/query_run_validation.test.js && node tests/unit/adapter_with_write_session.test.js && node tests/unit/category_groups_delete.test.js && node tests/unit/rules_delete.test.js && node tests/unit/schedules_delete.test.js && node tests/unit/accounts_delete.test.js && node tests/unit/update_tools_not_found.test.js && node tests/unit/accounts_close.test.js && node tests/unit/accounts_reopen.test.js && node tests/unit/payees_delete.test.js && node tests/unit/payees_merge.test.js && node tests/unit/rules_create_or_update.test.js && node tests/unit/unhandled-rejection.test.js && node tests/unit/rejection-allowlist-purity.test.js && node tests/unit/httpServer_bearer_auth.test.js && node tests/unit/session_ownership.test.js && node tests/unit/httpServer_oidc_audience.test.js && node tests/unit/httpServer_oidc_auth_verification.test.js && node tests/unit/httpServer_oidc_jwks_discovery.test.js && node tests/unit/oidc_resource_identifier.test.js && node tests/unit/httpServer_oidc_resource_metadata.test.js && node tests/unit/oidc_error_cause.test.js && node tests/unit/httpServer_oidc_error_body.test.js && node tests/unit/oidc_token_source.test.js && node tests/unit/config_oidc_assertion_refines.test.js && node tests/unit/httpServer_oidc_assertion_mode.test.js && node tests/unit/httpServer_body_limit.test.js && node tests/unit/httpErrorHandler.test.js && node tests/unit/httpServer_error_handler_wiring.test.js && node tests/unit/httpServer_trust_proxy.test.js && node tests/unit/httpServer_batch_cap.test.js && node tests/unit/dotenv_stdout_quiet.test.js && node tests/unit/httpServer_bind_host.test.js && node tests/unit/adapter_write_pool_cooperation.test.js && node tests/unit/adapter_drain_listing_cache.test.js && node tests/unit/budget_acl_enforcement.test.js && node tests/unit/budget_selection_precondition.test.js && node tests/unit/budget_load_abandonment.test.js && node tests/unit/budget_loader_postcondition.test.js && node tests/unit/budget_loader_import_allowlist.test.js && node tests/unit/budget_import_tracking.test.js && node tests/unit/pool_shutdown_under_lock.test.js && node tests/unit/api_lock_affinity.test.js && node tests/unit/commit_message_closing_keyword.test.js && node tests/unit/write_queue_stranding.test.js && node tests/unit/write_queue_stranded_bound.test.js && node tests/unit/budget_preference_store.test.js && node tests/unit/budget_preference_restore.test.js && node tests/unit/tags_list.test.js && node tests/unit/tags_create.test.js && node tests/unit/tags_update.test.js && node tests/unit/tags_delete.test.js && node tests/unit/notes_get.test.js && node tests/unit/notes_update.test.js && node tests/unit/payees_common_list.test.js && node tests/unit/transactions_update_guard.test.js && node tests/unit/transactions_update_splits.test.js && node tests/unit/transactions_update_split_convert.test.js && node tests/unit/entities_search.test.js && node tests/unit/transactions_import_schema.test.js && node tests/unit/tool_schema_shape.test.js && node tests/unit/zod_error_format.test.js && node tests/unit/transactions_update_batch.test.js && node tests/unit/tool_count_sync.test.js && node tests/unit/stdio_transport.test.js && node tests/unit/stdio_budget_switch.test.js && node tests/unit/logger_structured.test.js && node tests/unit/logger_redaction.test.js && node tests/unit/tool_content_logging.test.js && node tests/unit/adapter_error_logging.test.js && node tests/unit/logger_correlation.test.js && node tests/unit/check_coverage.test.js && node tests/unit/adapter_op_timeout.test.js && node tests/unit/adapter_write_queue_wakeup.test.js && node tests/unit/ci_workflow_guards.test.js && node tests/unit/node_version_guard.test.js && node tests/unit/node_version_drift.test.js && node tests/unit/playwright_version_drift.test.js && node tests/unit/observability_smoke.test.js && node tests/unit/residue_pattern.test.js && node tests/unit/batch_uncategorized_cleanup.test.js && node tests/unit/dual_transport_gate.test.js && node tests/unit/manual_assertions_use_helper.test.js && node tests/unit/server_version_guard.test.js && node tests/unit/server_version_probe_outside_op_timeout.test.js && node tests/unit/payee_rules_reference_filter.test.js && node tests/unit/oidc_metadata_discovery.test.js && node tests/unit/httpServer_oauth_metadata_route.test.js && node tests/unit/httpServer_mcp_info_route.test.js && node tests/unit/residue_sweep_balance_account.test.js && node tests/unit/tool_factory.test.js && node tests/unit/budget_registry_parse.test.js && node tests/unit/preferences_get.test.js && node tests/unit/budgets_export.test.js && node tests/unit/budgets_import.test.js && node tests/unit/budgets_import_syncid.test.js && node tests/unit/budget_acl_dynamic.test.js && node tests/unit/budget_acl_identity_map.test.js && node tests/unit/budget_acl_userinfo.test.js && node tests/unit/acl_e2e_fixture_contract.test.js && node tests/unit/budget_acl_middleware.test.js && node tests/unit/rules_stage.test.js && node tests/unit/oidc_scope_list.test.js && node tests/unit/get_context.test.js && node tests/unit/contributor_docs.test.js && node tests/unit/toolsets.test.js && node tests/unit/toolsets_entrypoint.test.js && node tests/unit/tools_list_size_budget.test.js && node tests/unit/rules_update_schedules_schema.test.js && node tests/unit/schedules_update_amount_guard.test.js && node tests/unit/source_text_helper.test.js && node tests/unit/transport_onerror.test.js && node tests/unit/adapter_transaction_batch_abort.test.js && node tests/unit/transactions_merge_adapter.test.js && node tests/unit/schedules_dead_conditions.test.js && node tests/unit/session_ownership_express.test.js && node tests/unit/pool_orphan_sweep.test.js && node tests/unit/session_budget_state_cleanup.test.js && node tests/unit/http_session_delete.test.js && node tests/unit/budget_acl_parse.test.js",
     "test:adapter": "npm run build && node dist/src/tests_adapter_runner.js",
     "test:e2e": "npx playwright test",
     "test:e2e:docker": "./tests/e2e/run-docker-e2e.sh",