actual-mcp-server 0.22.40 → 0.22.44

package/README.md

@@ -836,7 +836,7 @@ The software is provided **as-is**, without warranty of any kind. The author acc
 
 ---
 
-**Version:** 0.22.40 | **Tool Count:** 84 (verified LibreChat-compatible)
+**Version:** 0.22.44 | **Tool Count:** 84 (verified LibreChat-compatible)
 
 ## Sponsor
 

package/dist/src/index.js

@@ -9,6 +9,7 @@ import { getMcpServerVersion } from './lib/mcp-version.js';
 import path from 'node:path';
 import { z } from 'zod';
 import { isKnownBenignRejection } from './lib/rejection-allowlist.js';
+import { buildServerInstructions } from './lib/serverInstructions.js';
 import { format } from 'node:util';
 /*
  * #277 / #541: this module's version comes from `getMcpServerVersion()` (src/lib/mcp-version.ts),
@@ -211,8 +212,6 @@ Docs & source: https://github.com/agigante80/actual-mcp-server`);
     const useTestActualConnection = args.includes('--test-actual-connection');
     const useTestMcpClient = args.includes('--test-mcp-client');
     const SERVER_DESCRIPTION = 'Bridge MCP server exposing Actual finance API to LibreChat.';
-    const SERVER_INSTRUCTIONS = 'Welcome to the Actual MCP server. The tools listed here are only the ones currently confirmed and tested, ' +
-        'but the server can proxy any API call supported by Actual. As we expand coverage, more tools will be officially exposed.';
     async function main() {
         // Mutual exclusion — stdio and http are incompatible transports
         if (useHttp && useStdio) {
@@ -234,6 +233,9 @@ Docs & source: https://github.com/agigante80/actual-mcp-server`);
         // The PUBLISHED tools (#483). This is the one name list every tools/list path receives
         // (HTTP SDK handler, the no-session LobeChat path, the expired-session shim, stdio).
         const implementedTools = actualToolsManager.getPublishedToolNames();
+        // The initialize `instructions` (#560): built once from the published set and the same
+        // resolved policy, before any transport starts, so no transport can send a different text.
+        const serverInstructionsText = buildServerInstructions(implementedTools, actualToolsManager.getToolPolicy().readOnly);
         // Extract schemas map with tool name → JSON schema
         const toolSchemas = {};
         for (const toolName of implementedTools) {
@@ -314,7 +316,7 @@ Docs & source: https://github.com/agigante80/actual-mcp-server`);
             logger.info('⚙️  --test-mcp-client specified, starting HTTP server and running client-side MCP tests...');
             // start server in http mode. Bind all interfaces by default (#239): advertisedUrl
             // uses the LAN IP (getLocalIp), so the self-test client must be able to reach it.
-            await startHttpServer(mcp, PORT, HTTP_PATH, capabilities, implementedTools, SERVER_DESCRIPTION, SERVER_INSTRUCTIONS, toolSchemas, version, bindHost, advertisedUrl);
+            await startHttpServer(mcp, PORT, HTTP_PATH, capabilities, implementedTools, SERVER_DESCRIPTION, serverInstructionsText, toolSchemas, version, bindHost, advertisedUrl);
             // dynamic import to avoid circular at top
             const { testMcpClient } = await import('./tests/testMcpClient.js');
             try {
@@ -343,13 +345,13 @@ Docs & source: https://github.com/agigante80/actual-mcp-server`);
             logger.info(`• OAuth Required:       false`);
             logger.info(`• Capabilities:         ${Object.keys(capabilities).join(', ')}`);
             logger.info(`• Tools:                ${implementedTools.join(', ') || 'none'}`);
-            logger.info(`• Server Instructions:  ${SERVER_INSTRUCTIONS}`);
+            logger.info(`• Server Instructions:  ${serverInstructionsText}`);
             logger.info(`• MCP endpoint (advertised): ${advertisedUrl}`);
             logger.info('---------');
         }
         if (useHttp) {
             logger.info('Mode: HTTP');
-            await startHttpServer(mcp, PORT, HTTP_PATH, capabilities, implementedTools, SERVER_DESCRIPTION, SERVER_INSTRUCTIONS, toolSchemas, version, 
+            await startHttpServer(mcp, PORT, HTTP_PATH, capabilities, implementedTools, SERVER_DESCRIPTION, serverInstructionsText, toolSchemas, version, 
             // bind host (ensure server accepts connections on that interface)
             bindHost, 
             // advertised URL shown to clients
@@ -357,7 +359,7 @@ Docs & source: https://github.com/agigante80/actual-mcp-server`);
         }
         else if (useStdio) {
             logger.debug('Mode: stdio');
-            await startStdioServer(mcp, capabilities, implementedTools, SERVER_DESCRIPTION, SERVER_INSTRUCTIONS, toolSchemas, version);
+            await startStdioServer(mcp, capabilities, implementedTools, SERVER_DESCRIPTION, serverInstructionsText, toolSchemas, version);
         }
         else {
             logger.error('❌ Please specify a transport mode: --http or --stdio');

package/dist/src/lib/ActualMCPConnection.js

@@ -97,7 +97,6 @@ export class ActualMCPConnection extends EventEmitter {
             prompts: false,
             models: false,
             logging: false,
-            serverInstructions: 'This server exposes Actual Finance tools via MCP. You must provide ACTUAL_SERVER_URL, ACTUAL_PASSWORD, and ACTUAL_BUDGET_SYNC_ID as environment variables.'
         };
     }
     /** Executes a tool requested by the client */

package/dist/src/lib/actual-adapter/query.js

@@ -240,3 +240,63 @@ export function parseWhereClause(query, whereClause, tableName) {
     }
     return query;
 }
+// #561: the joined name columns an empty-result hint can check, and the table that lists each.
+const NAME_CONDITION_TABLES = {
+    'category.name': { table: 'categories', noun: 'category' },
+    'payee.name': { table: 'payees', noun: 'payee' },
+    'account.name': { table: 'accounts', noun: 'account' },
+};
+/**
+ * #561: the `=`, `IN` and `LIKE` conditions on category.name, payee.name or account.name in a
+ * query built by parseWhereClause, read back from its serialized filterExpressions. `!=` and
+ * `NOT LIKE` are skipped: an unknown name there cannot make the result empty. Each condition is
+ * ONE lookup, an IN list included (the ticket allows one extra read per name condition), and the
+ * lookup reuses the main query's operator and value, so a `$oneof` element compiles exactly as in
+ * the main query (where upstream inlines the doubled-quote form #433 keeps). A numeric-looking
+ * literal arrives coerced to a number and is kept as is.
+ */
+export function nameConditionLookups(filterExpressions) {
+    const out = [];
+    const isScalar = (v) => typeof v === 'string' || typeof v === 'number';
+    for (const expr of filterExpressions) {
+        if (expr === null || typeof expr !== 'object')
+            continue;
+        for (const [field, cond] of Object.entries(expr)) {
+            const target = NAME_CONDITION_TABLES[field];
+            if (!target)
+                continue;
+            if (isScalar(cond)) {
+                out.push({ ...target, nameFilter: cond, value: String(cond) });
+            }
+            else if (cond !== null && typeof cond === 'object') {
+                const c = cond;
+                if (typeof c.$like === 'string') {
+                    out.push({ ...target, nameFilter: { $like: c.$like }, value: c.$like });
+                }
+                else if (Array.isArray(c.$oneof) && c.$oneof.length > 0 && c.$oneof.every(isScalar)) {
+                    out.push({
+                        ...target,
+                        nameFilter: { $oneof: c.$oneof },
+                        inValues: c.$oneof.map((v) => String(v).replace(/''/g, "'")),
+                    });
+                }
+            }
+        }
+    }
+    return out;
+}
+/**
+ * #561: the hint lines for one condition, given the names its lookup returned. Each value is
+ * echoed at most 100 characters. For an IN list the comparison is exact, because upstream compiles
+ * `$oneof` to a plain SQL IN, which is case-sensitive: 'groceries' does not match 'Groceries' in
+ * the main query, so it must not count as found here either (#561 review round 2).
+ */
+export function nameConditionHintLines(lookup, foundNames) {
+    const line = (v) => `No ${lookup.noun} matches '${v.slice(0, 100)}'. ` +
+        `List the exact names with: SELECT id, name FROM ${lookup.table}`;
+    if (lookup.inValues) {
+        const found = new Set(foundNames);
+        return [...new Set(lookup.inValues)].filter((v) => !found.has(v)).map(line);
+    }
+    return foundNames.length === 0 ? [line(lookup.value ?? '')] : [];
+}

package/dist/src/lib/actual-adapter.js

@@ -52,11 +52,35 @@ logger.info(`[ADAPTER] Budget registry: ${budgetRegistry.size} budget(s) — ` +
  * stdio mode, startup health checks) fall back to the env-default budget
  * (first entry in budgetRegistry).
  *
- * Lifecycle: entries are removed on session close via session_close.ts and
- * implicitly when connectionPool.shutdownConnection runs (switchBudget calls
- * it to drop the stale pool entry bound to the previous syncId).
+ * Lifecycle (#564): entries are released on EVERY session end. The HTTP
+ * transport's teardownSession (idle eviction, the #530 orphan sweep, a client
+ * DELETE) calls clearSessionBudgetState, and actual_session_close does too (it
+ * also covers stdio). connectionPool.shutdownConnection does NOT release them:
+ * switchBudget calls it to drop the stale pool entry and must keep the selection.
+ *
+ * Every write goes through setSessionBudget, which skips a session the transport
+ * layer no longer holds, so a switch or a #189 restore that was in flight across
+ * the teardown cannot re-create the entry after it was released.
  */
 const sessionBudgetState = new Map();
+/**
+ * #564: is this session still held by its transport? The HTTP server registers
+ * `transports.has`; the default (stdio, unit tests, scripts) treats every session
+ * as live, which is the behaviour before #564.
+ */
+let isSessionLive = () => true;
+/** #563: why a queued write whose session ended before it ran was refused. */
+const SESSION_ENDED_BEFORE_WRITE = 'The session ended before this write ran, so it was not applied. Start a new session and retry.';
+export function setSessionLivenessCheck(check) {
+    isSessionLive = check;
+}
+function setSessionBudget(sessionId, key) {
+    if (!isSessionLive(sessionId)) {
+        logger.debug(`[ADAPTER] Session ${sessionId} ended before its budget selection was committed; not recording it`);
+        return;
+    }
+    sessionBudgetState.set(sessionId, key);
+}
 function getActiveBudgetConfig() {
     // _resolveSessionId is declared below; function declarations hoist so this
     // call works at runtime. If we're not in any requestContext.run scope (stdio,
@@ -78,7 +102,7 @@ function getActiveBudgetConfig() {
         // Memoize into the session slot so subsequent calls take the fast path above.
         const restored = pickAllowedPreferredBudget(getPreferredBudgetSyncId(store?.principal), store?.allowedBudgets, [...budgetRegistry.values()]);
         if (restored) {
-            sessionBudgetState.set(sessionId, restored.name.toLowerCase());
+            setSessionBudget(sessionId, restored.name.toLowerCase());
             return restored;
         }
     }
@@ -1136,6 +1160,17 @@ async function processWriteQueue() {
                                 'so it was failed immediately rather than waiting for the same bound. Retry it.', { cause: stuckLoadError }));
                             continue;
                         }
+                        // #563: the session ended (a client DELETE, an eviction) after this write was queued.
+                        // Teardown released its budget selection (#564), so its store would now resolve to the
+                        // default budget, one the session never chose and its principal may not be allowed.
+                        // Refuse instead. Outside the try on purpose, like the fail-fast above: the write never
+                        // ran, so it must not reach the pool-drop classification. A plain Error, not a typed
+                        // refusal: those mean the caller's input was wrong, and this one is not (gate round 2,
+                        // tool-author lens). The check is repeated just before the operation runs, below.
+                        if (entry.sessionId && !isSessionLive(entry.sessionId)) {
+                            reject(new Error(SESSION_ENDED_BEFORE_WRITE));
+                            continue;
+                        }
                         try {
                             // #390 round 2: run each op in the context it was ENQUEUED in.
                             //
@@ -1181,6 +1216,17 @@ async function processWriteQueue() {
                                     throw waitErr;
                                 }
                                 await ensureLoadedBudgetMatchesSession();
+                                // #563 round 3: the check above ran before the awaits in this block. Holding the
+                                // api lock does not hold teardown off: with the pool disabled nothing in teardown
+                                // takes the lock, so the session can end (and its budget selection be released)
+                                // while this op waits on an abandoned load, and the precondition would then have
+                                // loaded the default budget. Re-check last, immediately before the write, with nothing
+                                // awaited in between. Accepted: a session that ended during the wait may cost one
+                                // wasted default-budget load, which is harmless because the write is still refused.
+                                // The error matches no pool-drop pattern, so the catch below only logs and rejects it.
+                                if (entry.sessionId && !isSessionLive(entry.sessionId)) {
+                                    throw new Error(SESSION_ENDED_BEFORE_WRITE);
+                                }
                                 // #407: an operation may carry its OWN bound. Only a budget import does today, and
                                 // it needs one: the import is legitimately long, and bounding it at the general
                                 // operation timeout abandons it while every other session is already waiting on it
@@ -3422,6 +3468,43 @@ export async function resetBudgetHold(month) {
         await withConcurrency(() => retry(() => rawResetBudgetHold(month), { retries: 2, backoffMs: 200 }));
     }, { preservesListings: PRESERVES_ALL_ENTITY_LISTINGS });
 }
+/**
+ * #561: an empty result whose category.name, payee.name or account.name condition names no
+ * existing entity gains a sibling `hint` naming the value and the query that lists the exact
+ * names. Runs INSIDE runQuery's withActualApi session: raw reads only, never `adapter.*` (the api
+ * lock is not reentrant). Each lookup is a `q()` filter object carrying the main query's own
+ * operator and value, so the value never reaches a query string. A non-empty result, or one with
+ * no name condition, is returned untouched with no lookup; a failed lookup drops the hint rather
+ * than failing a query that succeeded.
+ */
+async function withEmptyResultHint(result, query, q) {
+    // Upstream answers `{ data }`; a bare array is tolerated the way getFinancialAnalysisSnapshot does.
+    const rows = (r) => Array.isArray(r) ? r : Array.isArray(r?.data) ? r.data : undefined;
+    const data = rows(result);
+    if (!data || data.length > 0)
+        return result;
+    const lookups = nameConditionLookups(query.serialize?.().filterExpressions ?? []);
+    if (lookups.length === 0)
+        return result;
+    try {
+        const lines = [];
+        for (const lookup of lookups) {
+            const found = await withConcurrency(() => rawRunQuery(lookup.inValues
+                ? q(lookup.table).filter({ name: lookup.nameFilter }).select(['name'])
+                : q(lookup.table).filter({ name: lookup.nameFilter }).select(['name']).limit(1)));
+            const names = (rows(found) ?? []).map((row) => String(row?.name ?? ''));
+            lines.push(...nameConditionHintLines(lookup, names));
+        }
+        if (lines.length === 0)
+            return result;
+        const hint = lines.join('\n');
+        return Array.isArray(result) ? { data: result, hint } : { ...result, hint };
+    }
+    catch (err) {
+        logger.warn('[ADAPTER] Empty-result name lookup failed; returning the result without a hint', errorLogFields(err));
+        return result;
+    }
+}
 export async function runQuery(queryString) {
     try {
         return await withActualApi(async () => {
@@ -3464,6 +3547,7 @@ export async function runQuery(queryString) {
                 }
                 const trimmed = queryString.trim();
                 let query;
+                let hasWhereClause = false; // #561: only a parsed SQL WHERE can carry a name condition
                 // Check for GraphQL-like query syntax: query Name { table(...) { fields } }
                 const graphqlMatch = trimmed.match(/^query\s+\w+\s*\{\s*(\w+)\s*\(([^)]*)\)\s*\{([^}]+)\}\s*\}$/is);
                 if (graphqlMatch) {
@@ -3531,6 +3615,7 @@ export async function runQuery(queryString) {
                         // types and coerce boolean literals to real booleans (#420).
                         if (whereClause) {
                             query = parseWhereClause(query, whereClause, tableName);
+                            hasWhereClause = true;
                         }
                         // Apply ORDER BY
                         if (orderField) {
@@ -3547,7 +3632,7 @@ export async function runQuery(queryString) {
                     }
                 }
                 try {
-                    return await withConcurrency(async () => {
+                    const result = await withConcurrency(async () => {
                         try {
                             return await rawRunQuery(query);
                         }
@@ -3561,6 +3646,7 @@ export async function runQuery(queryString) {
                             throw err;
                         }
                     });
+                    return hasWhereClause ? await withEmptyResultHint(result, query, q) : result;
                 }
                 catch (error) {
                     // Enhance error messages with helpful context
@@ -3661,7 +3747,7 @@ export async function getFinancialAnalysisSnapshot(params) {
 }
 // WHERE-clause translation extracted to ./actual-adapter/query.ts (#166).
 // Imported for internal use by runQuery and re-exported (unit-tested directly).
-import { parseWhereClause } from './actual-adapter/query.js';
+import { parseWhereClause, nameConditionLookups, nameConditionHintLines } from './actual-adapter/query.js';
 export { parseWhereClause };
 export async function runBankSync(accountId) {
     try {
@@ -3859,7 +3945,7 @@ export async function switchBudget(name) {
         (currentEntry.encryptionPassword ?? '') === (found.encryptionPassword ?? '');
     if (sameAuth && currentEntry.syncId === found.syncId) {
         // No-op: already on this exact budget. Keep session map consistent and return.
-        sessionBudgetState.set(sessionId, key);
+        setSessionBudget(sessionId, key);
         setPreferredBudgetSyncId(store?.principal, found.syncId); // #189: persist at commit
         logger.info(`[ADAPTER] switchBudget no-op for session ${sessionId}: already on "${found.name}" (${found.syncId})`);
         return { name: found.name, syncId: found.syncId, serverUrl: found.serverUrl };
@@ -3879,7 +3965,7 @@ export async function switchBudget(name) {
             });
         }
         connectionPool.updateLoadedSyncId(sessionId, found.syncId);
-        sessionBudgetState.set(sessionId, key);
+        setSessionBudget(sessionId, key);
         setPreferredBudgetSyncId(store?.principal, found.syncId); // #189: persist at commit
         logger.info(`[ADAPTER] Active budget switched for session ${sessionId} to: "${found.name}" (${found.syncId}) on ${found.serverUrl}`);
         return { name: found.name, syncId: found.syncId, serverUrl: found.serverUrl };
@@ -3895,7 +3981,7 @@ export async function switchBudget(name) {
     }
     // Update the per-session active-budget slot. Subsequent getActiveBudgetConfig
     // calls for this session now return the new budget.
-    sessionBudgetState.set(sessionId, key);
+    setSessionBudget(sessionId, key);
     setPreferredBudgetSyncId(store?.principal, found.syncId); // #189: persist at commit
     // Materialise a fresh pool entry bound to the new budget. Without this, the
     // next withActualApi call would find no pool entry and fall back to the
@@ -3938,9 +4024,10 @@ export async function switchBudget(name) {
     return { name: found.name, syncId: found.syncId, serverUrl: found.serverUrl };
 }
 /**
- * Clear the per-session budget state for a session. Called from
- * session_close so the per-session map does not accumulate stale entries
- * after a session ends. See #156.
+ * Clear the per-session budget state for a session, so the map does not
+ * accumulate entries for ended sessions (#156). Called from the HTTP
+ * transport's teardownSession on every session end (#564) and from
+ * session_close, which also covers stdio.
  */
 export function clearSessionBudgetState(sessionId) {
     sessionBudgetState.delete(sessionId);

package/dist/src/lib/serverInstructions.js

@@ -0,0 +1,36 @@
+/**
+ * The `instructions` string of the MCP `initialize` result (#560).
+ *
+ * ONE source, built from the tools this process actually publishes (#483), so the text can
+ * never point the model at a tool that MCP_TOOLSETS, MCP_TOOLS or MCP_READ_ONLY hid. Clients
+ * that read the field (LibreChat with `serverInstructions: true`, Claude Desktop, Claude Code,
+ * Gemini's MCP connector) inject it into the system prompt on every turn, so it holds
+ * cross-tool rules only: call order, the data conventions every tool shares, and how to
+ * recover. Facts that belong to one tool (join syntax, LIKE semantics, what an empty query
+ * result means) live in that tool's description and are deliberately not repeated here, where
+ * they would drift. The whole text stays at most 512 characters so it stands on its own in
+ * clients that truncate.
+ *
+ * Ids are promised for accounts and categories only: actual_get_context caps payees at
+ * payeeLimit (default 500) and its own description routes the rest elsewhere.
+ *
+ * Read-only comes from the resolved tool policy, never from tool annotations, which are hints
+ * that nothing in src/ may branch on.
+ */
+export function buildServerInstructions(published, readOnly) {
+    const has = new Set(published);
+    const parts = [
+        'This server exposes an Actual Budget through MCP tools.',
+        'Amounts are integer cents (5000 is 50.00, negative is an outflow) and dates are YYYY-MM-DD strings.',
+    ];
+    if (has.has('actual_get_context')) {
+        parts.push('Call actual_get_context first and use the account and category ids it returns, never guessed names.');
+        if (has.has('actual_query_run')) {
+            parts.push('In actual_query_run, filter on the id columns (account, category, payee) rather than on names; an empty result can mean a name was wrong.');
+        }
+    }
+    if (readOnly) {
+        parts.push('This server is read-only, so do not offer to create, change or delete anything.');
+    }
+    return parts.join(' ');
+}

package/dist/src/server/httpServer.js

@@ -9,6 +9,8 @@ import { getLocalIp } from '../utils.js';
 import actualToolsManager from '../actualToolsManager.js';
 import { getConnectionState, connectToActualForSession, shutdownActualForSession, shutdownActual, canAcceptNewSession, isConnectionPoolEnabled } from '../actualConnection.js';
 import { connectionPool } from '../lib/ActualConnectionPool.js';
+import { clearSessionBudgetState, setSessionLivenessCheck } from '../lib/actual-adapter.js';
+import { errorLogFields } from '../lib/errors.js';
 import observability from '../observability.js';
 import config from '../config.js';
 import { createRemoteJWKSet, jwtVerify } from 'jose';
@@ -52,7 +54,7 @@ function resolvePrincipal(req) {
 export async function startHttpServer(mcp, port, httpPath, capabilities, // was passed by index.ts
 implementedTools, // was passed by index.ts
 serverDescription, // was passed by index.ts
-serverInstructions, // was passed by index.ts
+instructions, // was passed by index.ts (#560: built once there)
 toolSchemas, // was passed by index.ts
 version, // server version from package.json
 bindHost = 'localhost', // #239: interface to bind; forwarded to listen()
@@ -299,6 +301,9 @@ advertisedUrl) {
     // window without a served request, with reason `orphaned`; same teardown. The
     // body is synchronous on purpose: the pool walks its registrations in one pass.
     connectionPool.onSessionEvicted(teardownSession);
+    // #564: a session's selected budget lives as long as its transport. A selection
+    // committed after teardown (a switch in flight across it) is dropped by the adapter.
+    setSessionLivenessCheck((id) => transports.has(id));
     function teardownSession(sessionId, reason) {
         const transport = transports.get(sessionId);
         if (transport) {
@@ -312,6 +317,7 @@ advertisedUrl) {
         transports.delete(sessionId);
         sessionInitPromises.delete(sessionId);
         forgetSessionOwner(sessionId);
+        clearSessionBudgetState(sessionId);
         connectionPool.forgetSession(sessionId);
         logger.info(`[SESSION] Transport torn down for ${reason} session: ${sessionId}`);
     }
@@ -370,14 +376,11 @@ advertisedUrl) {
         const capabilitiesObj = capabilities && Object.keys(capabilities).length
             ? capabilities
             : { tools: toolsList.reduce((acc, n) => { acc[n] = {}; return acc; }, {}) };
+        // Only the two ServerOptions the MCP spec defines (#560). tools/list is served by the
+        // request handler, not by these options; the SDK ignored the extra keys this once passed.
         const serverOptions = {
-            // Provide instructions and capabilities so the SDK initialize response is correct
-            instructions: serverInstructions || "Welcome to the Actual MCP server.",
-            serverInstructions: { instructions: serverInstructions || "Welcome to the Actual MCP server." },
+            instructions,
             capabilities: capabilitiesObj,
-            implementedTools: toolsList,
-            // Include tools array explicitly so initialize result contains tools: string[]
-            tools: toolsList,
         };
         const server = new Server({
             name: serverDescription || "actual-mcp-server",
@@ -521,6 +524,14 @@ advertisedUrl) {
                 const transport = new StreamableHTTPServerTransport({
                     sessionIdGenerator: () => randomUUID(),
                     enableJsonResponse: true,
+                    // #563: the SDK awaits this on a valid DELETE, BEFORE it answers 200, so the pool
+                    // slot is free by the time the client hears the session ended. It waits for the api
+                    // mutex (#392), so another session's call in flight finishes first. Without evict:
+                    // the DELETE route tears the session down itself after the 200.
+                    onsessionclosed: async (sid) => {
+                        if (isConnectionPoolEnabled())
+                            await connectionPool.shutdownConnection(sid);
+                    },
                     onsessioninitialized: async (sid) => {
                         logger.debug(`Session initialized: ${sid}`);
                         // Store the promise before starting initialization
@@ -826,6 +837,69 @@ advertisedUrl) {
         connectionPool.touch(sessionId); // Refresh the pool's idle clock (#167)
         await transport.handleRequest(req, res);
     });
+    // #563: DELETE ends the session (MCP spec 2025-11-25, Session Management rule 5).
+    // Same gate, missing-id answer and ownership rule as POST; the SDK then validates
+    // MCP-Protocol-Version, runs onsessionclosed (which frees the pool slot, see the
+    // transport options), answers 200 and closes its transport. Only after a 200 do we
+    // tear the session down ourselves: a 400 for an unsupported version leaves the
+    // session open, as the SDK does. teardownSession is called directly rather than
+    // through the pool's eviction listener because the listener never fires with the
+    // pool disabled or with the entry already dropped (#530), which would leave the
+    // transport, owner and budget selection behind. The pool entry is shut down
+    // WITHOUT evict so the teardown runs once, logged as `closed`.
+    const sessionNotFound = { jsonrpc: '2.0', id: null, error: { code: -32001, message: 'Session not found. Please re-initialize by calling initialize without mcp-session-id header.' } };
+    app.delete(httpPath, async (req, res) => {
+        if (!authenticateRequest(req, res)) {
+            return;
+        }
+        const sessionId = req.headers['mcp-session-id'];
+        if (!sessionId) {
+            res.status(400).json({ jsonrpc: '2.0', id: null, error: { code: -32000, message: 'Bad Request: Mcp-Session-Id header is required' } });
+            return;
+        }
+        try {
+            let transport = transports.get(sessionId);
+            const initPromise = transport ? undefined : sessionInitPromises.get(sessionId);
+            if (initPromise) {
+                // A failed init is answered like an unknown id; its #438 record is peek-only and stays.
+                await initPromise.catch(() => undefined);
+                transport = transports.get(sessionId);
+            }
+            // A non-owner gets the unknown-id answer byte for byte (#529), so the reply never
+            // confirms that the id exists.
+            if (!transport || !sessionOwnerMatches(sessionId, resolvePrincipal(req))) {
+                if (transport)
+                    logger.warn(`[SESSION] Refused a DELETE for session ${sessionId} from a principal that does not own it`);
+                res.status(404).json(sessionNotFound);
+                return;
+            }
+            const allowedBudgets = req.allowedBudgets;
+            const requestId = resolveRequestId(req.get('x-correlation-id'));
+            await requestContext.run({ sessionId, requestId, allowedBudgets, principal: resolvePrincipal(req) }, async () => {
+                await transport.handleRequest(req, res);
+            });
+            if (res.statusCode !== 200)
+                return;
+            teardownSession(sessionId, 'closed');
+        }
+        catch (err) {
+            logger.error(`[SESSION] DELETE for session ${sessionId} failed`, errorLogFields(err));
+            if (!res.headersSent) {
+                res.status(500).json({ jsonrpc: '2.0', id: null, error: { code: -32603, message: 'Internal error. The server logged the cause.' } });
+            }
+        }
+    });
+    // #563: every other method on the MCP path gets a JSON-RPC 405 with the Allow header
+    // RFC 9110 15.5.6 requires, instead of Express's HTML 404. HEAD is served by the GET
+    // route; OPTIONS answers 204 with the same Allow list.
+    app.all(httpPath, (req, res) => {
+        res.setHeader('Allow', 'GET, POST, DELETE');
+        if (req.method === 'OPTIONS') {
+            res.status(204).end();
+            return;
+        }
+        res.status(405).json({ jsonrpc: '2.0', id: null, error: { code: -32000, message: 'Method not allowed.' } });
+    });
     // Quick GET server-info probe used by our test harness (testMcpClient.ts, the
     // Playwright E2E) to check the server is up and advertises tools before the full
     // JSON-RPC handshake. #286: this used to live on /.well-known/oauth-protected-resource
@@ -838,8 +912,7 @@ advertisedUrl) {
     const serverIp = process.env.MCP_BRIDGE_PUBLIC_HOST || getLocalIp();
     const mcpInfo = () => ({
         description: serverDescription || "Actual MCP server",
-        instructions: serverInstructions || "Welcome to the Actual MCP server.",
-        serverInstructions: { instructions: serverInstructions || "Welcome to the Actual MCP server." },
+        instructions,
         capabilities: capabilities && Object.keys(capabilities).length ? capabilities : { tools: toolsList.reduce((a, n) => ({ ...a, [n]: {} }), {}) },
         tools: toolsList,
         advertisedUrl: advertisedUrl || `${scheme}://${serverIp}:${port}${httpPath}`,

package/dist/src/server/stdioServer.js

@@ -85,7 +85,7 @@ export function createStdioCallToolHandler(mcp, stdioSessionId) {
         }
     };
 }
-export async function startStdioServer(mcp, capabilities, implementedTools, serverDescription, serverInstructions, toolSchemas, version) {
+export async function startStdioServer(mcp, capabilities, implementedTools, serverDescription, instructions, toolSchemas, version) {
     const toolsList = Array.isArray(implementedTools) ? implementedTools : [];
     // #348: a synthetic session identity for this stdio process.
     //
@@ -108,7 +108,7 @@ export async function startStdioServer(mcp, capabilities, implementedTools, serv
     // restarts and can never collide with an HTTP session id.
     const stdioSessionId = `stdio-${randomUUID()}`;
     logger.debug(`[STDIO] session id ${stdioSessionId}`);
-    const server = new Server({ name: serverDescription || 'actual-mcp-server', version: version || '0.1.0' }, { capabilities, instructions: serverInstructions });
+    const server = new Server({ name: serverDescription || 'actual-mcp-server', version: version || '0.1.0' }, { capabilities, instructions });
     attachTransportErrorLogger(server, 'stdio');
     // List tools handler — mirrors createServerInstance() in httpServer.ts
     server.setRequestHandler(ListToolsRequestSchema, async () => {

package/dist/src/tests/testMcpClient.js

@@ -22,11 +22,9 @@ export async function testMcpClient(advertisedUrl, _port, httpPath) {
     const resultObj = resultRaw && typeof resultRaw === 'object' ? resultRaw : undefined;
     if (!resultObj)
         throw new Error('Probe result is not an object');
-    const serverInstructions = resultObj['serverInstructions'];
-    if (serverInstructions && typeof serverInstructions === 'object') {
-        if (typeof serverInstructions['instructions'] !== 'string') {
-            throw new Error('serverInstructions missing or wrong type');
-        }
+    // #560: instructions is the spec's plain string, on /mcp-info as on initialize.
+    if (typeof resultObj['instructions'] !== 'string') {
+        throw new Error('Probe instructions missing or not a string');
     }
     const capabilitiesVal = resultObj['capabilities'];
     if (!capabilitiesVal || typeof capabilitiesVal !== 'object' || !('tools' in capabilitiesVal)) {
@@ -36,7 +34,7 @@ export async function testMcpClient(advertisedUrl, _port, httpPath) {
     if (!Array.isArray(toolsVal)) {
         throw new Error('tools missing or not array');
     }
-    console.info('Probe OK: capabilities/tools/serverInstructions present');
+    console.info('Probe OK: capabilities/tools/instructions present');
     // Now do JSON-RPC initialize + tools/list using the HTTP endpoint
     const rpcUrl = `${base.origin}${httpPath}`;
     const initPayload = {
@@ -77,7 +75,7 @@ export async function testMcpClient(advertisedUrl, _port, httpPath) {
     }
     if (sessionId)
         console.info(`Received session id header: ${sessionId}`);
-    // Validate initialize result fields (capabilities/tools/serverInstructions)
+    // Validate initialize result fields (capabilities/tools/instructions)
     const initResultRaw = initJson['result'];
     const initResult = initResultRaw && typeof initResultRaw === 'object' ? initResultRaw : undefined;
     if (!initResult || typeof initResult['capabilities'] !== 'object') {
@@ -90,21 +88,12 @@ export async function testMcpClient(advertisedUrl, _port, httpPath) {
     if (!hasTools) {
         throw new Error('initialize result.tools missing or not array and capabilities.tools not present');
     }
-    // serverInstructions may be a string, an object { instructions }, or absent.
-    const si = initResult['serverInstructions'];
-    if (!si) {
-        console.warn('Warning: serverInstructions missing from initialize result — continuing tests');
-    }
-    else if (typeof si === 'string') {
-        // ok
-    }
-    else if (typeof si === 'object' && typeof si['instructions'] === 'string') {
-        // ok
-    }
-    else {
-        console.warn('Warning: serverInstructions present but in unexpected shape — continuing tests');
+    // #560: the spec's InitializeResult.instructions, a string. The harness never read the spec
+    // field before (it accepted a non-spec key in any shape), so this is now a hard check.
+    if (typeof initResult['instructions'] !== 'string') {
+        throw new Error('initialize result.instructions missing or not a string');
     }
-    console.info('Initialize OK: capabilities/tools/serverInstructions present');
+    console.info('Initialize OK: capabilities/tools/instructions present');
     // call tools/list (JSON-RPC) to verify RPC path works
     const listPayload = { jsonrpc: '2.0', id: 2, method: 'tools/list', params: {} };
     const listHeaders = { ...commonPostHeaders };

package/dist/src/tools/query_run.js

@@ -15,6 +15,7 @@ Example: "SELECT id, date, amount, payee.name FROM transactions WHERE amount < 0
 WHERE supports: =, !=, >, >=, <, <=; IN (v1, v2); LIKE / NOT LIKE (case and accent-insensitive, % wildcard, e.g. imported_payee LIKE '%amazon%'); IS NULL / IS NOT NULL; boolean columns as true / false (cleared = false, category.hidden = true); conditions joined with AND. OR, REGEXP, NOT IN and parenthesised groups are not supported and return an error (a query is never silently run unfiltered). Transactions come back in split-INLINE mode: "is_parent = true" returns nothing, use "is_parent = false" to exclude split children.
 
 Joins use dot notation: payee.name, category.name, account.name (NOT payee_name). Amounts are in cents: $100.00 = 10000. Dates are quoted YYYY-MM-DD strings: date >= '2025-01-01'.
+An empty result may carry a "hint" naming a category.name, payee.name or account.name value that matches no entity, with the query that lists the exact names.
 
 Tables:
 - transactions: id, date, amount, notes, cleared, account, payee, category

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "actual-mcp-server",
   "displayName": "Actual MCP Server",
-  "version": "0.22.40",
+  "version": "0.22.44",
   "engines": {
     "node": ">=22.0.0",
     "npm": ">=10.0.0"
@@ -30,7 +30,7 @@
     "verify-tools": "npm run build && node scripts/verify-tools.js",
     "check:coverage": "node scripts/list-actual-api-methods.mjs",
     "direct-sync": "node scripts/direct-sync/bank-sync-direct.mjs",
-    "test:unit-js": "node tests/unit/transactions_create.test.js && node tests/unit/transactions_aggregate.test.js && node tests/unit/account_flow_summary.test.js && node tests/unit/recurring_expenses_summary.test.js && node tests/unit/generated_tools.smoke.test.js &&node tests/unit/schema_validation.test.js && node tests/unit/schema_json_openai_compat.test.js && node tests/unit/config_https_validation.test.js && node tests/unit/config_data_dir.test.js && node tests/unit/config_drift.test.js && node tests/unit/port_alignment.test.js && node tests/unit/dockerfile_data_dir_alignment.test.js && node tests/unit/unraid_template_alignment.test.js && node tests/unit/entrypoint_invariants.test.js && node tests/unit/e2e_spec_collection.test.js && node tests/unit/compose_profile_sync.test.js && node tests/unit/advertised_tools_sync.test.js && node tests/unit/new_tool_completeness.test.js && node tests/unit/knip_config.test.js && node tests/unit/readme_stats_sync.test.js && node tests/unit/config_insecure_upstream.test.js && node tests/unit/workflow_release_guards.test.js && node tests/unit/report_train_failure.test.js && node tests/unit/unit_chain_membership.test.js && node tests/unit/api_surface_drift.test.js && node tests/unit/write_effect_audit_staleness.test.js && node tests/unit/write_effect_audit_membership.test.js && node tests/unit/tool_annotations.test.js && node tests/unit/tool_id_schema_drift.test.js && node tests/unit/filter_id_resolution.test.js && node tests/unit/filter_id_tool_wiring.test.js && node tests/unit/api_coverage_baseline.test.js && node tests/unit/train_preflight.test.js && node tests/unit/verify_published_artifacts.test.js && node tests/unit/report_train_stale.test.js && node tests/unit/stdio_framing_check.test.js && node tests/unit/server_info.test.js && node tests/unit/transfers_create.test.js && node tests/unit/bot_target_branch.test.js && node tests/unit/auth_posture.test.js && node tests/unit/auth_posture_wiring.test.js && node tests/unit/auth-acl.test.js && node tests/unit/bug76.test.js && node tests/unit/budgets_setAmount.test.js && node tests/unit/adapter_set_budget_batch.test.js && node tests/unit/budget_updates_batch.test.js && node tests/unit/rules_create.test.js && node tests/unit/adapter_rule_reference_guard.test.js && node tests/unit/rules_create_batch.test.js && node tests/unit/budgets_hold_for_next_month.test.js && node tests/unit/budgets_transfer.test.js && node tests/unit/transactions_uncategorized.test.js && node tests/unit/httpServer_session_init.test.js && node tests/unit/httpServer_session_not_found.test.js && node tests/unit/httpServer_init_failure_report.test.js && node tests/unit/stdio_init_failure_report.test.js && node tests/unit/manual_mcp_client_retry.test.js && node tests/unit/manual_mcp_client_session.test.js && node tests/unit/manual_mcp_client_circuit.test.js && node tests/unit/manual_runner_killswitch.test.js && node tests/unit/adapter_auth_rate_limit.test.js && node tests/unit/adapter_session_reuse.test.js && node tests/unit/retry_classifier.test.js && node tests/unit/adapter_module_surface.test.js && node tests/unit/adapter_nonidempotent_no_retry.test.js && node tests/unit/pool_liveness.test.js && node tests/unit/pool_shutdown_all.test.js && node tests/unit/query_where_operators.test.js && node tests/unit/query_run_validation.test.js && node tests/unit/adapter_with_write_session.test.js && node tests/unit/category_groups_delete.test.js && node tests/unit/rules_delete.test.js && node tests/unit/schedules_delete.test.js && node tests/unit/accounts_delete.test.js && node tests/unit/update_tools_not_found.test.js && node tests/unit/accounts_close.test.js && node tests/unit/accounts_reopen.test.js && node tests/unit/payees_delete.test.js && node tests/unit/payees_merge.test.js && node tests/unit/rules_create_or_update.test.js && node tests/unit/unhandled-rejection.test.js && node tests/unit/rejection-allowlist-purity.test.js && node tests/unit/httpServer_bearer_auth.test.js && node tests/unit/session_ownership.test.js && node tests/unit/httpServer_oidc_audience.test.js && node tests/unit/httpServer_oidc_auth_verification.test.js && node tests/unit/httpServer_oidc_jwks_discovery.test.js && node tests/unit/oidc_resource_identifier.test.js && node tests/unit/httpServer_oidc_resource_metadata.test.js && node tests/unit/oidc_error_cause.test.js && node tests/unit/httpServer_oidc_error_body.test.js && node tests/unit/oidc_token_source.test.js && node tests/unit/config_oidc_assertion_refines.test.js && node tests/unit/httpServer_oidc_assertion_mode.test.js && node tests/unit/httpServer_body_limit.test.js && node tests/unit/httpErrorHandler.test.js && node tests/unit/httpServer_error_handler_wiring.test.js && node tests/unit/httpServer_trust_proxy.test.js && node tests/unit/httpServer_batch_cap.test.js && node tests/unit/dotenv_stdout_quiet.test.js && node tests/unit/httpServer_bind_host.test.js && node tests/unit/adapter_write_pool_cooperation.test.js && node tests/unit/adapter_drain_listing_cache.test.js && node tests/unit/budget_acl_enforcement.test.js && node tests/unit/budget_selection_precondition.test.js && node tests/unit/budget_load_abandonment.test.js && node tests/unit/budget_loader_postcondition.test.js && node tests/unit/budget_loader_import_allowlist.test.js && node tests/unit/budget_import_tracking.test.js && node tests/unit/pool_shutdown_under_lock.test.js && node tests/unit/api_lock_affinity.test.js && node tests/unit/commit_message_closing_keyword.test.js && node tests/unit/write_queue_stranding.test.js && node tests/unit/write_queue_stranded_bound.test.js && node tests/unit/budget_preference_store.test.js && node tests/unit/budget_preference_restore.test.js && node tests/unit/tags_list.test.js && node tests/unit/tags_create.test.js && node tests/unit/tags_update.test.js && node tests/unit/tags_delete.test.js && node tests/unit/notes_get.test.js && node tests/unit/notes_update.test.js && node tests/unit/payees_common_list.test.js && node tests/unit/transactions_update_guard.test.js && node tests/unit/transactions_update_splits.test.js && node tests/unit/transactions_update_split_convert.test.js && node tests/unit/entities_search.test.js && node tests/unit/transactions_import_schema.test.js && node tests/unit/tool_schema_shape.test.js && node tests/unit/zod_error_format.test.js && node tests/unit/transactions_update_batch.test.js && node tests/unit/tool_count_sync.test.js && node tests/unit/stdio_transport.test.js && node tests/unit/stdio_budget_switch.test.js && node tests/unit/logger_structured.test.js && node tests/unit/logger_redaction.test.js && node tests/unit/tool_content_logging.test.js && node tests/unit/adapter_error_logging.test.js && node tests/unit/logger_correlation.test.js && node tests/unit/check_coverage.test.js && node tests/unit/adapter_op_timeout.test.js && node tests/unit/adapter_write_queue_wakeup.test.js && node tests/unit/ci_workflow_guards.test.js && node tests/unit/node_version_guard.test.js && node tests/unit/node_version_drift.test.js && node tests/unit/playwright_version_drift.test.js && node tests/unit/observability_smoke.test.js && node tests/unit/residue_pattern.test.js && node tests/unit/batch_uncategorized_cleanup.test.js && node tests/unit/dual_transport_gate.test.js && node tests/unit/manual_assertions_use_helper.test.js && node tests/unit/server_version_guard.test.js && node tests/unit/server_version_probe_outside_op_timeout.test.js && node tests/unit/payee_rules_reference_filter.test.js && node tests/unit/oidc_metadata_discovery.test.js && node tests/unit/httpServer_oauth_metadata_route.test.js && node tests/unit/httpServer_mcp_info_route.test.js && node tests/unit/residue_sweep_balance_account.test.js && node tests/unit/tool_factory.test.js && node tests/unit/budget_registry_parse.test.js && node tests/unit/preferences_get.test.js && node tests/unit/budgets_export.test.js && node tests/unit/budgets_import.test.js && node tests/unit/budgets_import_syncid.test.js && node tests/unit/budget_acl_dynamic.test.js && node tests/unit/budget_acl_identity_map.test.js && node tests/unit/budget_acl_userinfo.test.js && node tests/unit/acl_e2e_fixture_contract.test.js && node tests/unit/budget_acl_middleware.test.js && node tests/unit/rules_stage.test.js && node tests/unit/oidc_scope_list.test.js && node tests/unit/get_context.test.js && node tests/unit/contributor_docs.test.js && node tests/unit/toolsets.test.js && node tests/unit/toolsets_entrypoint.test.js && node tests/unit/tools_list_size_budget.test.js && node tests/unit/rules_update_schedules_schema.test.js && node tests/unit/schedules_update_amount_guard.test.js && node tests/unit/source_text_helper.test.js && node tests/unit/transport_onerror.test.js && node tests/unit/adapter_transaction_batch_abort.test.js && node tests/unit/transactions_merge_adapter.test.js && node tests/unit/schedules_dead_conditions.test.js && node tests/unit/session_ownership_express.test.js && node tests/unit/pool_orphan_sweep.test.js && node tests/unit/budget_acl_parse.test.js",
+    "test:unit-js": "node tests/unit/transactions_create.test.js && node tests/unit/transactions_aggregate.test.js && node tests/unit/account_flow_summary.test.js && node tests/unit/recurring_expenses_summary.test.js && node tests/unit/generated_tools.smoke.test.js &&node tests/unit/schema_validation.test.js && node tests/unit/schema_json_openai_compat.test.js && node tests/unit/config_https_validation.test.js && node tests/unit/config_data_dir.test.js && node tests/unit/config_drift.test.js && node tests/unit/port_alignment.test.js && node tests/unit/dockerfile_data_dir_alignment.test.js && node tests/unit/unraid_template_alignment.test.js && node tests/unit/entrypoint_invariants.test.js && node tests/unit/e2e_spec_collection.test.js && node tests/unit/compose_profile_sync.test.js && node tests/unit/advertised_tools_sync.test.js && node tests/unit/new_tool_completeness.test.js && node tests/unit/knip_config.test.js && node tests/unit/readme_stats_sync.test.js && node tests/unit/config_insecure_upstream.test.js && node tests/unit/workflow_release_guards.test.js && node tests/unit/report_train_failure.test.js && node tests/unit/unit_chain_membership.test.js && node tests/unit/api_surface_drift.test.js && node tests/unit/write_effect_audit_staleness.test.js && node tests/unit/write_effect_audit_membership.test.js && node tests/unit/tool_annotations.test.js && node tests/unit/tool_id_schema_drift.test.js && node tests/unit/filter_id_resolution.test.js && node tests/unit/filter_id_tool_wiring.test.js && node tests/unit/api_coverage_baseline.test.js && node tests/unit/train_preflight.test.js && node tests/unit/verify_published_artifacts.test.js && node tests/unit/report_train_stale.test.js && node tests/unit/stdio_framing_check.test.js && node tests/unit/server_info.test.js && node tests/unit/transfers_create.test.js && node tests/unit/bot_target_branch.test.js && node tests/unit/auth_posture.test.js && node tests/unit/auth_posture_wiring.test.js && node tests/unit/auth-acl.test.js && node tests/unit/bug76.test.js && node tests/unit/budgets_setAmount.test.js && node tests/unit/adapter_set_budget_batch.test.js && node tests/unit/budget_updates_batch.test.js && node tests/unit/rules_create.test.js && node tests/unit/adapter_rule_reference_guard.test.js && node tests/unit/rules_create_batch.test.js && node tests/unit/budgets_hold_for_next_month.test.js && node tests/unit/budgets_transfer.test.js && node tests/unit/transactions_uncategorized.test.js && node tests/unit/httpServer_session_init.test.js && node tests/unit/httpServer_session_not_found.test.js && node tests/unit/httpServer_init_failure_report.test.js && node tests/unit/stdio_init_failure_report.test.js && node tests/unit/manual_mcp_client_retry.test.js && node tests/unit/manual_mcp_client_session.test.js && node tests/unit/manual_mcp_client_circuit.test.js && node tests/unit/manual_runner_killswitch.test.js && node tests/unit/adapter_auth_rate_limit.test.js && node tests/unit/adapter_session_reuse.test.js && node tests/unit/retry_classifier.test.js && node tests/unit/adapter_module_surface.test.js && node tests/unit/adapter_nonidempotent_no_retry.test.js && node tests/unit/pool_liveness.test.js && node tests/unit/pool_shutdown_all.test.js && node tests/unit/query_where_operators.test.js && node tests/unit/query_run_validation.test.js && node tests/unit/adapter_with_write_session.test.js && node tests/unit/category_groups_delete.test.js && node tests/unit/rules_delete.test.js && node tests/unit/schedules_delete.test.js && node tests/unit/accounts_delete.test.js && node tests/unit/update_tools_not_found.test.js && node tests/unit/accounts_close.test.js && node tests/unit/accounts_reopen.test.js && node tests/unit/payees_delete.test.js && node tests/unit/payees_merge.test.js && node tests/unit/rules_create_or_update.test.js && node tests/unit/unhandled-rejection.test.js && node tests/unit/rejection-allowlist-purity.test.js && node tests/unit/httpServer_bearer_auth.test.js && node tests/unit/session_ownership.test.js && node tests/unit/httpServer_oidc_audience.test.js && node tests/unit/httpServer_oidc_auth_verification.test.js && node tests/unit/httpServer_oidc_jwks_discovery.test.js && node tests/unit/oidc_resource_identifier.test.js && node tests/unit/httpServer_oidc_resource_metadata.test.js && node tests/unit/oidc_error_cause.test.js && node tests/unit/httpServer_oidc_error_body.test.js && node tests/unit/oidc_token_source.test.js && node tests/unit/config_oidc_assertion_refines.test.js && node tests/unit/httpServer_oidc_assertion_mode.test.js && node tests/unit/httpServer_body_limit.test.js && node tests/unit/httpErrorHandler.test.js && node tests/unit/httpServer_error_handler_wiring.test.js && node tests/unit/httpServer_trust_proxy.test.js && node tests/unit/httpServer_batch_cap.test.js && node tests/unit/dotenv_stdout_quiet.test.js && node tests/unit/httpServer_bind_host.test.js && node tests/unit/adapter_write_pool_cooperation.test.js && node tests/unit/adapter_drain_listing_cache.test.js && node tests/unit/budget_acl_enforcement.test.js && node tests/unit/budget_selection_precondition.test.js && node tests/unit/budget_load_abandonment.test.js && node tests/unit/budget_loader_postcondition.test.js && node tests/unit/budget_loader_import_allowlist.test.js && node tests/unit/budget_import_tracking.test.js && node tests/unit/pool_shutdown_under_lock.test.js && node tests/unit/api_lock_affinity.test.js && node tests/unit/commit_message_closing_keyword.test.js && node tests/unit/write_queue_stranding.test.js && node tests/unit/write_queue_stranded_bound.test.js && node tests/unit/budget_preference_store.test.js && node tests/unit/budget_preference_restore.test.js && node tests/unit/tags_list.test.js && node tests/unit/tags_create.test.js && node tests/unit/tags_update.test.js && node tests/unit/tags_delete.test.js && node tests/unit/notes_get.test.js && node tests/unit/notes_update.test.js && node tests/unit/payees_common_list.test.js && node tests/unit/transactions_update_guard.test.js && node tests/unit/transactions_update_splits.test.js && node tests/unit/transactions_update_split_convert.test.js && node tests/unit/entities_search.test.js && node tests/unit/transactions_import_schema.test.js && node tests/unit/tool_schema_shape.test.js && node tests/unit/zod_error_format.test.js && node tests/unit/transactions_update_batch.test.js && node tests/unit/tool_count_sync.test.js && node tests/unit/stdio_transport.test.js && node tests/unit/stdio_budget_switch.test.js && node tests/unit/logger_structured.test.js && node tests/unit/logger_redaction.test.js && node tests/unit/tool_content_logging.test.js && node tests/unit/adapter_error_logging.test.js && node tests/unit/logger_correlation.test.js && node tests/unit/check_coverage.test.js && node tests/unit/adapter_op_timeout.test.js && node tests/unit/adapter_write_queue_wakeup.test.js && node tests/unit/ci_workflow_guards.test.js && node tests/unit/node_version_guard.test.js && node tests/unit/node_version_drift.test.js && node tests/unit/playwright_version_drift.test.js && node tests/unit/observability_smoke.test.js && node tests/unit/residue_pattern.test.js && node tests/unit/batch_uncategorized_cleanup.test.js && node tests/unit/dual_transport_gate.test.js && node tests/unit/manual_assertions_use_helper.test.js && node tests/unit/server_version_guard.test.js && node tests/unit/server_version_probe_outside_op_timeout.test.js && node tests/unit/payee_rules_reference_filter.test.js && node tests/unit/oidc_metadata_discovery.test.js && node tests/unit/httpServer_oauth_metadata_route.test.js && node tests/unit/httpServer_mcp_info_route.test.js && node tests/unit/residue_sweep_balance_account.test.js && node tests/unit/tool_factory.test.js && node tests/unit/budget_registry_parse.test.js && node tests/unit/preferences_get.test.js && node tests/unit/budgets_export.test.js && node tests/unit/budgets_import.test.js && node tests/unit/budgets_import_syncid.test.js && node tests/unit/budget_acl_dynamic.test.js && node tests/unit/budget_acl_identity_map.test.js && node tests/unit/budget_acl_userinfo.test.js && node tests/unit/acl_e2e_fixture_contract.test.js && node tests/unit/budget_acl_middleware.test.js && node tests/unit/rules_stage.test.js && node tests/unit/oidc_scope_list.test.js && node tests/unit/get_context.test.js && node tests/unit/contributor_docs.test.js && node tests/unit/toolsets.test.js && node tests/unit/toolsets_entrypoint.test.js && node tests/unit/tools_list_size_budget.test.js && node tests/unit/rules_update_schedules_schema.test.js && node tests/unit/schedules_update_amount_guard.test.js && node tests/unit/source_text_helper.test.js && node tests/unit/transport_onerror.test.js && node tests/unit/adapter_transaction_batch_abort.test.js && node tests/unit/transactions_merge_adapter.test.js && node tests/unit/schedules_dead_conditions.test.js && node tests/unit/session_ownership_express.test.js && node tests/unit/pool_orphan_sweep.test.js && node tests/unit/session_budget_state_cleanup.test.js && node tests/unit/http_session_delete.test.js && node tests/unit/budget_acl_parse.test.js && node tests/unit/server_instructions.test.js && node tests/unit/query_run_empty_hint.test.js",
     "test:adapter": "npm run build && node dist/src/tests_adapter_runner.js",
     "test:e2e": "npx playwright test",
     "test:e2e:docker": "./tests/e2e/run-docker-e2e.sh",