actual-mcp-server 0.24.15 → 0.25.1

package/README.md

@@ -21,6 +21,7 @@ A [Model Context Protocol](https://modelcontextprotocol.io/) server that lets an
 
 - **Claude Desktop, Claude Code, Cursor, VS Code or another local client:** run it over stdio with `npx`, no server to keep running. Follow your client's page in [docs/guides/clients/](docs/guides/clients/README.md), for example [Claude Desktop](docs/guides/clients/claude-desktop.md) or [Claude Code](docs/guides/clients/claude-code.md).
 - **A chat UI such as LibreChat or LobeChat, or several users:** run it over HTTP in Docker with the quick start below, then follow [LibreChat](docs/guides/clients/librechat.md) or [LobeChat](docs/guides/clients/lobechat.md).
+- **A client that installs from the official [MCP Registry](https://registry.modelcontextprotocol.io/):** it is listed as `io.github.agigante80/actual-mcp-server`, with the npm package (stdio) and the Docker image (HTTP); the client asks for the same settings as the pages above.
 - **Unraid:** install it from [Community Applications](https://ca.unraid.net/apps/actual-mcp-server-0bghkvs0c7c8bg); see [Unraid](docs/guides/deployment.md#unraid-and-puidpgid-227).
 
 ## Quick start (Docker, HTTP)
@@ -168,4 +169,4 @@ MIT, see [LICENSE](LICENSE). Built on [Actual Budget](https://actualbudget.org/)
 
 ---
 
-**Version:** 0.24.15 | **Tool Count:** 84 (verified LibreChat-compatible)
+**Version:** 0.25.1 | **Tool Count:** 84 (verified LibreChat-compatible)

package/dist/src/config.js

@@ -2,6 +2,10 @@ import { z } from 'zod';
 import { parseIdentityMap } from './auth/identity-map.js';
 import { parseBudgetAcl } from './auth/budget-acl-parse.js';
 import { parseStaticTokensConfig, staticTokensConfigured } from './auth/static-tokens.js';
+/** #612: MCP_ALLOWED_HOSTS as a list: comma-separated, trimmed, lowercased, empties dropped. */
+export function parseAllowedHostsList(value) {
+    return (value ?? '').split(',').map((h) => h.trim().toLowerCase()).filter(Boolean);
+}
 // #466: the byte count body-parser will ACTUALLY enforce for MCP_HTTP_BODY_LIMIT, or
 // null when the value must be refused. Mirrors `bytes.parse` (what body-parser uses)
 // without importing that transitive package: floor(number * unit), units b and kb
@@ -126,6 +130,31 @@ export const configSchema = z.object({
     // so a typo like 'yes'/'1' cannot silently leave the server open.
     MCP_ALLOW_UNAUTHENTICATED: z.string().optional().transform(val => val === 'true'),
     MCP_ENABLE_HTTPS: z.string().optional().transform(val => val === 'true'),
+    // #612: extra hostnames the HTTP server accepts as Host (and as Origin in open
+    // mode), comma-separated, additive to localhost, 127.0.0.1 and [::1]. Each entry
+    // must already be in the form new URL() normalises a hostname to: no port, path,
+    // scheme or wildcard, IPv6 bracketed, IPv4 dotted. Parsed to a lowercased array.
+    MCP_ALLOWED_HOSTS: z
+        .string()
+        .optional()
+        .superRefine((v, ctx) => {
+        for (const entry of parseAllowedHostsList(v)) {
+            let normalised = null;
+            try {
+                normalised = new URL(`http://${entry}`).hostname;
+            }
+            catch {
+                // reported below
+            }
+            if (entry.includes('*') || normalised !== entry) {
+                ctx.addIssue({
+                    code: 'custom',
+                    message: `MCP_ALLOWED_HOSTS entry "${entry}" is not a bare hostname (no port, path, scheme or wildcard; IPv6 in brackets)`,
+                });
+            }
+        }
+    })
+        .transform(parseAllowedHostsList),
     MCP_HTTPS_CERT: z.string().optional(),
     MCP_HTTPS_KEY: z.string().optional(),
     // Explicit cap on incoming JSON request bodies (#168). Passed to

package/dist/src/index.js

@@ -191,7 +191,7 @@ Docs & source: https://github.com/agigante80/actual-mcp-server`);
         import('./actualConnection.js'),
         import('./lib/ActualMCPConnection.js'),
     ]);
-    const [{ startHttpServer }, { startStdioServer }, { enforceHttpAuthPosture }, loggerModule, utilsModule, actualToolsManagerModule,] = await Promise.all([
+    const [{ startHttpServer }, { startStdioServer }, { enforceHttpAuthPosture, findWeakTokenVars }, loggerModule, utilsModule, actualToolsManagerModule,] = await Promise.all([
         import('./server/httpServer.js'),
         import('./server/stdioServer.js'),
         import('./lib/authPosture.js'),
@@ -301,13 +301,16 @@ Docs & source: https://github.com/agigante80/actual-mcp-server`);
         // explicit opt-out this refuses startup (exit 1) rather than silently serving
         // financial data open on the LAN. stdio mode never reaches this check.
         if (useHttp || useTestMcpClient) {
+            const oidcEnabled = process.env.AUTH_PROVIDER === 'oidc';
             const decision = enforceHttpAuthPosture({
                 bindHost,
                 // #572: MCP_STATIC_TOKENS is authentication too. A set-but-unresolvable value
                 // still counts here: startHttpServer refuses it before binding.
                 hasStaticToken: !!process.env.MCP_SSE_AUTHORIZATION || !!process.env.MCP_STATIC_TOKENS?.trim(),
-                oidcEnabled: process.env.AUTH_PROVIDER === 'oidc',
+                oidcEnabled,
                 allowUnauthenticated: process.env.MCP_ALLOW_UNAUTHENTICATED === 'true',
+                // #611: a short or placeholder token refuses a non-loopback bind.
+                weakTokenVars: findWeakTokenVars(process.env, { oidcEnabled }),
             });
             // enforceHttpAuthPosture already called process.exit(1) on 'refuse'. This
             // explicit return makes the open-start path structurally unreachable even

package/dist/src/lib/authPosture.js

@@ -1,4 +1,5 @@
 import { createModuleLogger } from './loggerFactory.js';
+import { MIN_TOKEN_LENGTH, parseStaticTokensConfig } from '../auth/static-tokens.js';
 /**
  * Auth posture gate (#242): make HTTP authentication required-by-default.
  *
@@ -40,14 +41,124 @@ export function isLoopbackHost(host) {
         return true;
     return false;
 }
+/**
+ * #611: example values shipped in our docs and .env.example. A token equal to one
+ * of these (trimmed, case-insensitive) is weak whatever its length:
+ * `replace-with-openssl-rand-hex-32` is exactly 32 characters.
+ */
+const PLACEHOLDER_TOKENS = new Set(['your-secure-token-here', 'replace-with-openssl-rand-hex-32', 'changeme']);
+function isPlaceholder(value) {
+    return PLACEHOLDER_TOKENS.has(value.trim().toLowerCase());
+}
+/**
+ * #611: the names (never the values) of the configured bearer-token variables that
+ * are weak. Pure: reads only the `env` it is given.
+ *
+ * - Under OIDC nothing is checked: httpServer.ts builds no bearer entries there, so
+ *   a stale MCP_SSE_AUTHORIZATION is not a credential.
+ * - MCP_SSE_AUTHORIZATION: weak when set, non-empty and shorter than
+ *   MIN_TOKEN_LENGTH after trimming (whitespace-only included), or a placeholder.
+ *   EMPTY stays the no-auth path (tests/e2e/compose.yaml runs open on it).
+ * - MCP_TOKEN_*: resolveStaticTokens already refuses a short value on any bind, so
+ *   only placeholders are added here. An unparsable MCP_STATIC_TOKENS is left to
+ *   resolveStaticTokens, which refuses it with its own message.
+ */
+export function findWeakTokenVars(env, { oidcEnabled }) {
+    if (oidcEnabled)
+        return [];
+    const weak = [];
+    const legacy = env.MCP_SSE_AUTHORIZATION;
+    if (legacy && (legacy.trim().length < MIN_TOKEN_LENGTH || isPlaceholder(legacy))) {
+        weak.push('MCP_SSE_AUTHORIZATION');
+    }
+    let principals = {};
+    try {
+        principals = parseStaticTokensConfig(env.MCP_STATIC_TOKENS);
+    }
+    catch {
+        // Refused later by resolveStaticTokens, before bind.
+    }
+    for (const { tokenEnv } of Object.values(principals)) {
+        const value = env[tokenEnv];
+        if (value && isPlaceholder(value) && !weak.includes(tokenEnv))
+            weak.push(tokenEnv);
+    }
+    return weak;
+}
+/** #612: the hostnames every open-mode server accepts, in the SDK's bracketed form. */
+const LOOPBACK_HOSTNAMES = ['localhost', '127.0.0.1', '[::1]'];
+/**
+ * The hostname the SDK compares for `host` (a bind address or advertised name):
+ * lowercased, IPv6 bracketed and canonical. `undefined` for an empty or wildcard
+ * value, which names no single host.
+ */
+function canonicalHostname(host) {
+    const h = host?.trim().toLowerCase();
+    if (!h || h === '0.0.0.0' || h === '::' || h === '[::]')
+        return undefined;
+    const bracketed = h.includes(':') && !h.startsWith('[') ? `[${h}]` : h;
+    // The SDK compares the URL-parsed Host, which is the canonical form
+    // ([2001:db8:0:0::5] arrives as [2001:db8::5]), so store the same form.
+    try {
+        return new URL(`http://${bracketed}`).hostname;
+    }
+    catch {
+        return bracketed;
+    }
+}
+/**
+ * #612: the Host (and, in open mode, Origin) hostnames the HTTP server accepts, or
+ * `null` to skip the check. DNS rebinding protection: a hostile page can rebind its
+ * own name to 127.0.0.1, but cannot make the browser send a Host it does not own.
+ *
+ * - Open mode (no bearer token, no OIDC): the loopback names, `allowedHosts`, the
+ *   bind address itself when it is a concrete, non-wildcard address (an IP-literal
+ *   Host cannot come out of rebinding), and (#615) the advertised host, the address
+ *   the server prints as its own URL (MCP_BRIDGE_PUBLIC_HOST or the detected LAN
+ *   IP): an operator-controlled name or an IP literal, never one a hostile page can
+ *   make the browser send. Not on a loopback bind, which the LAN cannot reach.
+ *   IPv6 values are added bracketed and canonical.
+ * - Authenticated: `null` when `allowedHosts` is empty (unchanged behaviour), else
+ *   `allowedHosts` plus the loopback names. The bind and advertised hosts are not
+ *   added: an operator list stays exact.
+ *
+ * Pure: `allowedHosts` is the already-validated MCP_ALLOWED_HOSTS list.
+ */
+export function resolveAllowedHosts({ openMode, allowedHosts, bindHost, advertisedHost, }) {
+    if (!openMode && allowedHosts.length === 0)
+        return null;
+    const hosts = new Set([...LOOPBACK_HOSTNAMES, ...allowedHosts]);
+    if (openMode) {
+        // A loopback bind is unreachable from the LAN, so the advertised (LAN) host is
+        // left out there: adding it would only widen which Origins may call localhost.
+        const advertised = isLoopbackHost(bindHost) ? undefined : advertisedHost;
+        for (const h of [canonicalHostname(bindHost), canonicalHostname(advertised)]) {
+            if (h)
+                hosts.add(h);
+        }
+    }
+    return [...hosts];
+}
 /**
  * Pure decision function (no side effects) so it is exhaustively unit-testable
- * without booting a server. Precedence: configured auth serves; otherwise a
- * loopback bind serves; otherwise the explicit opt-out serves (with a warning);
- * otherwise refuse.
+ * without booting a server. Precedence: a weak token refuses a non-loopback bind
+ * (#611, before and regardless of the opt-out, which cannot make a weak token
+ * safe) and serves with a warning on loopback; then configured auth serves;
+ * otherwise a loopback bind serves; otherwise the explicit opt-out serves (with a
+ * warning); otherwise refuse.
  */
 export function evaluateHttpAuthPosture(input) {
-    const { bindHost, hasStaticToken, oidcEnabled, allowUnauthenticated } = input;
+    const { bindHost, hasStaticToken, oidcEnabled, allowUnauthenticated, weakTokenVars = [] } = input;
+    if (weakTokenVars.length > 0) {
+        if (isLoopbackHost(bindHost)) {
+            return { decision: 'serve', reason: `loopback bind (${bindHost}) with a weak token`, weakTokenVars };
+        }
+        return {
+            decision: 'refuse',
+            reason: `weak token on a non-loopback bind (${bindHost ?? '0.0.0.0'})`,
+            weakTokenVars,
+        };
+    }
     if (hasStaticToken || oidcEnabled) {
         return { decision: 'serve', reason: 'authentication is configured' };
     }
@@ -73,7 +184,24 @@ export function evaluateHttpAuthPosture(input) {
  * caller (or test that stubs exit to not throw) can observe it.
  */
 export function enforceHttpAuthPosture(input, log = logger, exit = process.exit) {
-    const { decision, reason } = evaluateHttpAuthPosture(input);
+    const { decision, reason, weakTokenVars } = evaluateHttpAuthPosture(input);
+    if (weakTokenVars) {
+        // #611: names only, never values. A separate message from the no-auth refusal:
+        // MCP_ALLOW_UNAUTHENTICATED cannot rescue a weak token, so it is not offered.
+        if (decision === 'refuse') {
+            log.error(`Refusing to start: ${reason}. ${weakTokenVars.join(', ')} is shorter than ${MIN_TOKEN_LENGTH} ` +
+                'characters or an example placeholder. Generate a token with openssl rand -hex 32.');
+            exit(1);
+        }
+        else {
+            for (const name of weakTokenVars) {
+                log.warn(`${name} is shorter than ${MIN_TOKEN_LENGTH} characters or an example placeholder. ` +
+                    'Allowed only on a loopback bind; a non-loopback bind refuses to start. ' +
+                    'Generate a token with openssl rand -hex 32.');
+            }
+        }
+        return decision;
+    }
     if (decision === 'refuse') {
         log.error(`Refusing to start: ${reason}. HTTP auth is required-by-default. ` +
             'Set MCP_SSE_AUTHORIZATION to a strong token (openssl rand -hex 32), or set ' +

package/dist/src/server/httpServer.js

@@ -25,6 +25,8 @@ import { parseScopeList } from '../lib/oidc-scopes.js';
 import { budgetAclMiddleware } from '../auth/budget-acl.js';
 import { resolveStaticTokens, matchBearerToken, LEGACY_STATIC_PRINCIPAL } from '../auth/static-tokens.js';
 import { runAclPreflight } from '../auth/budget-acl-dynamic.js';
+import { hostHeaderValidation } from '@modelcontextprotocol/sdk/server/middleware/hostHeaderValidation.js';
+import { resolveAllowedHosts } from '../lib/authPosture.js';
 import * as https from 'node:https';
 import { finished } from 'node:stream';
 import * as fs from 'node:fs';
@@ -85,7 +87,78 @@ advertisedUrl) {
         ? []
         : resolveStaticTokens(config.MCP_STATIC_TOKENS, process.env, getBudgetRegistry(), config.MCP_SSE_AUTHORIZATION);
     const staticPrincipals = bearerEntries.filter((e) => e.allowedBudgets);
+    // #612: the ONE open-mode predicate, shared by the Host/Origin guard below and
+    // checkAuth's no-token branch, so the two can never disagree.
+    const openMode = config.AUTH_PROVIDER !== 'oidc' && bearerEntries.length === 0;
     const app = express();
+    // #612: DNS rebinding protection, mounted first so it covers every route (/health,
+    // /metrics, /.well-known/* and OPTIONS included). It reads req.headers.host only,
+    // never X-Forwarded-Host or req.hostname, so a proxy header cannot bypass it.
+    // #615: the host this server prints as its own URL is accepted too (open mode only).
+    let advertisedHost;
+    try {
+        advertisedHost = advertisedUrl ? new URL(advertisedUrl).hostname : undefined;
+    }
+    catch {
+        logger.warn(`[HTTP] Advertised URL ${advertisedUrl} does not parse; its host is not accepted. Check MCP_BRIDGE_PUBLIC_HOST (a bare host or IP, no scheme or port).`);
+    }
+    // MCP_BRIDGE_PUBLIC_HOST=https://nas.lan parses to the hostname "https": say so rather than
+    // accept it silently. A scheme or path always carries a "/"; a port already fails the parse.
+    const publicHost = process.env.MCP_BRIDGE_PUBLIC_HOST?.trim().toLowerCase();
+    if (advertisedHost && publicHost?.includes('/')) {
+        logger.warn(`[HTTP] MCP_BRIDGE_PUBLIC_HOST (${publicHost}) did not parse to a host name (got ${advertisedHost}). Set a bare host or IP, no scheme or port.`);
+    }
+    const allowedHosts = resolveAllowedHosts({ openMode, allowedHosts: config.MCP_ALLOWED_HOSTS, bindHost, advertisedHost });
+    if (allowedHosts) {
+        const rejectHost = (req, reason, value) => logger.warn('[HTTP] Rejected request: hostname not allowed (DNS rebinding protection, #612)', {
+            header: reason, hostname: value.slice(0, 253), path: req.path,
+        });
+        const sdkHostCheck = hostHeaderValidation(allowedHosts);
+        app.use((req, res, next) => {
+            let passed = false;
+            sdkHostCheck(req, res, () => { passed = true; });
+            if (passed) {
+                next();
+                return;
+            }
+            // The SDK middleware is synchronous: it already answered 403.
+            let hostname = String(req.headers.host ?? '');
+            try {
+                hostname = new URL(`http://${hostname}`).hostname;
+            }
+            catch { /* log the raw value */ }
+            rejectHost(req, 'host', hostname);
+        });
+        if (openMode) {
+            // The SDK checks Host only. In open mode a browser Origin must also be an allowed
+            // hostname; an absent Origin (non-browser clients) passes. Comparing Origin to Host
+            // would not help: under rebinding both carry the attacker's name. /.well-known/* is
+            // exempt because mcp-auth serves it with cors() for public cross-origin reads.
+            app.use((req, res, next) => {
+                const origin = req.headers.origin;
+                if (origin === undefined || req.path.startsWith('/.well-known/')) {
+                    next();
+                    return;
+                }
+                let hostname = null;
+                try {
+                    hostname = origin === 'null' ? null : new URL(origin).hostname;
+                }
+                catch {
+                    hostname = null;
+                }
+                if (hostname !== null && allowedHosts.includes(hostname)) {
+                    next();
+                    return;
+                }
+                rejectHost(req, 'origin', hostname ?? 'null');
+                res.status(403).json({ jsonrpc: '2.0', error: { code: -32000, message: `Invalid Origin: ${hostname ?? 'null'}` }, id: null });
+            });
+        }
+        if (openMode && config.MCP_ALLOWED_HOSTS.length === 0 && (bindHost === '0.0.0.0' || bindHost === '::')) {
+            logger.info(`[HTTP] Accepting Host ${allowedHosts.join(', ')} only (DNS rebinding protection, #612). Reach this server by another name? Add it to MCP_ALLOWED_HOSTS.`);
+        }
+    }
     // Explicit body-size cap (#168). An oversized payload is rejected with HTTP 413
     // rather than buffered unbounded. Tunable via MCP_HTTP_BODY_LIMIT (default 512kb).
     app.use(express.json({ limit: config.MCP_HTTP_BODY_LIMIT }));
@@ -366,7 +439,7 @@ advertisedUrl) {
         // (#572). Only when NEITHER is configured is every request allowed. Static tokens are
         // authentication, so MCP_ALLOW_UNAUTHENTICATED (a posture opt-out for the no-auth
         // case) does not relax this.
-        if (bearerEntries.length === 0) {
+        if (openMode) {
             return true;
         }
         const authHeader = req.headers.authorization;

package/package.json

@@ -1,7 +1,8 @@
 {
   "name": "actual-mcp-server",
   "displayName": "Actual MCP Server",
-  "version": "0.24.15",
+  "version": "0.25.1",
+  "mcpName": "io.github.agigante80/actual-mcp-server",
   "engines": {
     "node": ">=22.0.0",
     "npm": ">=10.0.0"
@@ -30,7 +31,7 @@
     "verify-tools": "npm run build && node scripts/verify-tools.js",
     "check:coverage": "node scripts/list-actual-api-methods.mjs",
     "direct-sync": "node scripts/direct-sync/bank-sync-direct.mjs",
-    "test:unit-js": "node tests/unit/transactions_create.test.js && node tests/unit/transactions_aggregate.test.js && node tests/unit/account_flow_summary.test.js && node tests/unit/recurring_expenses_summary.test.js && node tests/unit/generated_tools.smoke.test.js &&node tests/unit/schema_validation.test.js && node tests/unit/schema_json_openai_compat.test.js && node tests/unit/config_https_validation.test.js && node tests/unit/config_data_dir.test.js && node tests/unit/config_drift.test.js && node tests/unit/port_alignment.test.js && node tests/unit/dockerfile_data_dir_alignment.test.js && node tests/unit/unraid_template_alignment.test.js && node tests/unit/entrypoint_invariants.test.js && node tests/unit/e2e_spec_collection.test.js && node tests/unit/compose_profile_sync.test.js && node tests/unit/install_snippets.test.js && node tests/unit/advertised_tools_sync.test.js && node tests/unit/new_tool_completeness.test.js && node tests/unit/knip_config.test.js && node tests/unit/readme_stats_sync.test.js && node tests/unit/config_insecure_upstream.test.js && node tests/unit/workflow_release_guards.test.js && node tests/unit/report_train_failure.test.js && node tests/unit/unit_chain_membership.test.js && node tests/unit/api_surface_drift.test.js && node tests/unit/write_effect_audit_staleness.test.js && node tests/unit/write_effect_audit_membership.test.js && node tests/unit/tool_annotations.test.js && node tests/unit/tool_id_schema_drift.test.js && node tests/unit/filter_id_resolution.test.js && node tests/unit/filter_id_tool_wiring.test.js && node tests/unit/api_coverage_baseline.test.js && node tests/unit/train_preflight.test.js && node tests/unit/verify_published_artifacts.test.js && node tests/unit/report_train_stale.test.js && node tests/unit/stdio_framing_check.test.js && node tests/unit/server_info.test.js && node tests/unit/transfers_create.test.js && node tests/unit/bot_target_branch.test.js && node tests/unit/auth_posture.test.js && node tests/unit/auth_posture_wiring.test.js && node tests/unit/auth-acl.test.js && node tests/unit/bug76.test.js && node tests/unit/budgets_setAmount.test.js && node tests/unit/adapter_set_budget_batch.test.js && node tests/unit/budget_updates_batch.test.js && node tests/unit/rules_create.test.js && node tests/unit/adapter_rule_reference_guard.test.js && node tests/unit/rules_create_batch.test.js && node tests/unit/budgets_hold_for_next_month.test.js && node tests/unit/budgets_transfer.test.js && node tests/unit/transactions_uncategorized.test.js && node tests/unit/httpServer_session_init.test.js && node tests/unit/httpServer_session_not_found.test.js && node tests/unit/httpServer_init_failure_report.test.js && node tests/unit/stdio_init_failure_report.test.js && node tests/unit/manual_mcp_client_retry.test.js && node tests/unit/manual_mcp_client_session.test.js && node tests/unit/manual_mcp_client_circuit.test.js && node tests/unit/manual_runner_killswitch.test.js && node tests/unit/adapter_auth_rate_limit.test.js && node tests/unit/adapter_session_reuse.test.js && node tests/unit/retry_classifier.test.js && node tests/unit/adapter_module_surface.test.js && node tests/unit/adapter_nonidempotent_no_retry.test.js && node tests/unit/pool_liveness.test.js && node tests/unit/pool_shutdown_all.test.js && node tests/unit/query_where_operators.test.js && node tests/unit/query_run_validation.test.js && node tests/unit/adapter_with_write_session.test.js && node tests/unit/category_groups_delete.test.js && node tests/unit/rules_delete.test.js && node tests/unit/schedules_delete.test.js && node tests/unit/accounts_delete.test.js && node tests/unit/update_tools_not_found.test.js && node tests/unit/accounts_close.test.js && node tests/unit/accounts_reopen.test.js && node tests/unit/payees_delete.test.js && node tests/unit/payees_merge.test.js && node tests/unit/rules_create_or_update.test.js && node tests/unit/unhandled-rejection.test.js && node tests/unit/rejection-allowlist-purity.test.js && node tests/unit/httpServer_bearer_auth.test.js && node tests/unit/session_ownership.test.js && node tests/unit/httpServer_oidc_audience.test.js && node tests/unit/httpServer_oidc_auth_verification.test.js && node tests/unit/httpServer_oidc_jwks_discovery.test.js && node tests/unit/oidc_resource_identifier.test.js && node tests/unit/httpServer_oidc_resource_metadata.test.js && node tests/unit/oidc_error_cause.test.js && node tests/unit/httpServer_oidc_error_body.test.js && node tests/unit/oidc_token_source.test.js && node tests/unit/config_oidc_assertion_refines.test.js && node tests/unit/httpServer_oidc_assertion_mode.test.js && node tests/unit/httpServer_body_limit.test.js && node tests/unit/httpErrorHandler.test.js && node tests/unit/httpServer_error_handler_wiring.test.js && node tests/unit/httpServer_trust_proxy.test.js && node tests/unit/httpServer_batch_cap.test.js && node tests/unit/dotenv_stdout_quiet.test.js && node tests/unit/httpServer_bind_host.test.js && node tests/unit/adapter_write_pool_cooperation.test.js && node tests/unit/adapter_drain_listing_cache.test.js && node tests/unit/budget_acl_enforcement.test.js && node tests/unit/budget_acl_listing.test.js && node tests/unit/budget_selection_precondition.test.js && node tests/unit/multi_server_budget_selection.test.js && node tests/unit/static_tokens.test.js && node tests/unit/httpServer_static_tokens.test.js && node tests/unit/multi_server_budget_selection_stdio.test.js && node tests/unit/api_login_fetch.test.js && node tests/unit/multi_server_session_open_http.test.js && node tests/unit/budget_load_abandonment.test.js && node tests/unit/budget_loader_postcondition.test.js && node tests/unit/budget_loader_import_allowlist.test.js && node tests/unit/budget_import_tracking.test.js && node tests/unit/pool_shutdown_under_lock.test.js && node tests/unit/api_lock_affinity.test.js && node tests/unit/commit_message_closing_keyword.test.js && node tests/unit/write_queue_stranding.test.js && node tests/unit/write_queue_stranded_bound.test.js && node tests/unit/budget_preference_store.test.js && node tests/unit/budget_preference_restore.test.js && node tests/unit/tags_list.test.js && node tests/unit/tags_create.test.js && node tests/unit/tags_update.test.js && node tests/unit/tags_delete.test.js && node tests/unit/notes_get.test.js && node tests/unit/notes_update.test.js && node tests/unit/payees_common_list.test.js && node tests/unit/transactions_update_guard.test.js && node tests/unit/transactions_update_splits.test.js && node tests/unit/transactions_update_split_convert.test.js && node tests/unit/entities_search.test.js && node tests/unit/transactions_import_schema.test.js && node tests/unit/tool_schema_shape.test.js && node tests/unit/zod_error_format.test.js && node tests/unit/transactions_update_batch.test.js && node tests/unit/tool_count_sync.test.js && node tests/unit/stdio_transport.test.js && node tests/unit/stdio_budget_switch.test.js && node tests/unit/logger_structured.test.js && node tests/unit/logger_redaction.test.js && node tests/unit/tool_content_logging.test.js && node tests/unit/adapter_error_logging.test.js && node tests/unit/logger_correlation.test.js && node tests/unit/check_coverage.test.js && node tests/unit/adapter_op_timeout.test.js && node tests/unit/adapter_write_queue_wakeup.test.js && node tests/unit/ci_workflow_guards.test.js && node tests/unit/node_version_guard.test.js && node tests/unit/node_version_drift.test.js && node tests/unit/playwright_version_drift.test.js && node tests/unit/observability_smoke.test.js && node tests/unit/residue_pattern.test.js && node tests/unit/harness_cleanup.test.js && node tests/unit/harness_stdio_data_dir.test.js && node tests/unit/batch_uncategorized_cleanup.test.js && node tests/unit/rules_stage342_cleanup.test.js && node tests/unit/residue_unreadable.test.js && node tests/unit/dual_transport_gate.test.js && node tests/unit/manual_assertions_use_helper.test.js && node tests/unit/server_version_guard.test.js && node tests/unit/server_version_probe_outside_op_timeout.test.js && node tests/unit/payee_rules_reference_filter.test.js && node tests/unit/oidc_metadata_discovery.test.js && node tests/unit/httpServer_oauth_metadata_route.test.js && node tests/unit/httpServer_mcp_info_route.test.js && node tests/unit/residue_sweep_balance_account.test.js && node tests/unit/tool_factory.test.js && node tests/unit/budget_registry_parse.test.js && node tests/unit/preferences_get.test.js && node tests/unit/budgets_export.test.js && node tests/unit/budgets_import.test.js && node tests/unit/budgets_import_syncid.test.js && node tests/unit/budget_acl_dynamic.test.js && node tests/unit/budget_acl_identity_map.test.js && node tests/unit/budget_acl_userinfo.test.js && node tests/unit/acl_e2e_fixture_contract.test.js && node tests/unit/budget_acl_middleware.test.js && node tests/unit/rules_stage.test.js && node tests/unit/oidc_scope_list.test.js && node tests/unit/get_context.test.js && node tests/unit/contributor_docs.test.js && node tests/unit/toolsets.test.js && node tests/unit/toolsets_entrypoint.test.js && node tests/unit/tools_list_size_budget.test.js && node tests/unit/rules_update_schedules_schema.test.js && node tests/unit/schedules_update_amount_guard.test.js && node tests/unit/source_text_helper.test.js && node tests/unit/transport_onerror.test.js && node tests/unit/adapter_transaction_batch_abort.test.js && node tests/unit/transactions_merge_adapter.test.js && node tests/unit/schedules_dead_conditions.test.js && node tests/unit/session_ownership_express.test.js && node tests/unit/pool_orphan_sweep.test.js && node tests/unit/session_budget_state_cleanup.test.js && node tests/unit/http_session_delete.test.js && node tests/unit/budget_acl_parse.test.js && node tests/unit/server_instructions.test.js && node tests/unit/query_run_empty_hint.test.js && node tests/unit/session_admission_race.test.js && node tests/unit/pool_admission_reservation.test.js && node tests/unit/config_max_sessions_per_principal.test.js && node tests/unit/session_principal_cap.test.js && node tests/unit/schema_published_parity.test.js && node tests/unit/manual_borrowed_category.test.js && node tests/unit/manual_budget_no_borrowed_writes.test.js && node tests/unit/refresh_test_budget_snapshot.test.js && node tests/unit/docs_check.test.js && node tests/unit/docs_markers.test.js && node tests/unit/docs_links_fixture.test.js && node tests/unit/docs_index.test.js && node tests/unit/docs_tools.test.js && node tests/unit/docs_readme_size.test.js && node tests/unit/template_lockstep.test.js && node tests/unit/client_examples.test.js",
+    "test:unit-js": "node tests/unit/transactions_create.test.js && node tests/unit/transactions_aggregate.test.js && node tests/unit/account_flow_summary.test.js && node tests/unit/recurring_expenses_summary.test.js && node tests/unit/generated_tools.smoke.test.js &&node tests/unit/schema_validation.test.js && node tests/unit/schema_json_openai_compat.test.js && node tests/unit/config_https_validation.test.js && node tests/unit/config_data_dir.test.js && node tests/unit/config_drift.test.js && node tests/unit/port_alignment.test.js && node tests/unit/dockerfile_data_dir_alignment.test.js && node tests/unit/unraid_template_alignment.test.js && node tests/unit/entrypoint_invariants.test.js && node tests/unit/e2e_spec_collection.test.js && node tests/unit/compose_profile_sync.test.js && node tests/unit/install_snippets.test.js && node tests/unit/advertised_tools_sync.test.js && node tests/unit/new_tool_completeness.test.js && node tests/unit/knip_config.test.js && node tests/unit/readme_stats_sync.test.js && node tests/unit/config_insecure_upstream.test.js && node tests/unit/workflow_release_guards.test.js && node tests/unit/report_train_failure.test.js && node tests/unit/unit_chain_membership.test.js && node tests/unit/api_surface_drift.test.js && node tests/unit/write_effect_audit_staleness.test.js && node tests/unit/write_effect_audit_membership.test.js && node tests/unit/tool_annotations.test.js && node tests/unit/tool_id_schema_drift.test.js && node tests/unit/filter_id_resolution.test.js && node tests/unit/filter_id_tool_wiring.test.js && node tests/unit/api_coverage_baseline.test.js && node tests/unit/train_preflight.test.js && node tests/unit/verify_published_artifacts.test.js && node tests/unit/report_train_stale.test.js && node tests/unit/stdio_framing_check.test.js && node tests/unit/server_info.test.js && node tests/unit/transfers_create.test.js && node tests/unit/bot_target_branch.test.js && node tests/unit/auth_posture.test.js && node tests/unit/auth_posture_wiring.test.js && node tests/unit/auth-acl.test.js && node tests/unit/bug76.test.js && node tests/unit/budgets_setAmount.test.js && node tests/unit/adapter_set_budget_batch.test.js && node tests/unit/budget_updates_batch.test.js && node tests/unit/rules_create.test.js && node tests/unit/adapter_rule_reference_guard.test.js && node tests/unit/rules_create_batch.test.js && node tests/unit/budgets_hold_for_next_month.test.js && node tests/unit/budgets_transfer.test.js && node tests/unit/transactions_uncategorized.test.js && node tests/unit/httpServer_session_init.test.js && node tests/unit/httpServer_session_not_found.test.js && node tests/unit/httpServer_init_failure_report.test.js && node tests/unit/stdio_init_failure_report.test.js && node tests/unit/manual_mcp_client_retry.test.js && node tests/unit/manual_mcp_client_session.test.js && node tests/unit/manual_mcp_client_circuit.test.js && node tests/unit/manual_runner_killswitch.test.js && node tests/unit/adapter_auth_rate_limit.test.js && node tests/unit/adapter_session_reuse.test.js && node tests/unit/retry_classifier.test.js && node tests/unit/adapter_module_surface.test.js && node tests/unit/adapter_nonidempotent_no_retry.test.js && node tests/unit/pool_liveness.test.js && node tests/unit/pool_shutdown_all.test.js && node tests/unit/query_where_operators.test.js && node tests/unit/query_run_validation.test.js && node tests/unit/adapter_with_write_session.test.js && node tests/unit/category_groups_delete.test.js && node tests/unit/rules_delete.test.js && node tests/unit/schedules_delete.test.js && node tests/unit/accounts_delete.test.js && node tests/unit/update_tools_not_found.test.js && node tests/unit/accounts_close.test.js && node tests/unit/accounts_reopen.test.js && node tests/unit/payees_delete.test.js && node tests/unit/payees_merge.test.js && node tests/unit/rules_create_or_update.test.js && node tests/unit/unhandled-rejection.test.js && node tests/unit/rejection-allowlist-purity.test.js && node tests/unit/httpServer_bearer_auth.test.js && node tests/unit/session_ownership.test.js && node tests/unit/httpServer_oidc_audience.test.js && node tests/unit/httpServer_oidc_auth_verification.test.js && node tests/unit/httpServer_oidc_jwks_discovery.test.js && node tests/unit/oidc_resource_identifier.test.js && node tests/unit/httpServer_oidc_resource_metadata.test.js && node tests/unit/oidc_error_cause.test.js && node tests/unit/httpServer_oidc_error_body.test.js && node tests/unit/oidc_token_source.test.js && node tests/unit/config_oidc_assertion_refines.test.js && node tests/unit/httpServer_oidc_assertion_mode.test.js && node tests/unit/httpServer_body_limit.test.js && node tests/unit/httpErrorHandler.test.js && node tests/unit/httpServer_error_handler_wiring.test.js && node tests/unit/httpServer_trust_proxy.test.js && node tests/unit/httpServer_batch_cap.test.js && node tests/unit/dotenv_stdout_quiet.test.js && node tests/unit/httpServer_bind_host.test.js && node tests/unit/adapter_write_pool_cooperation.test.js && node tests/unit/adapter_drain_listing_cache.test.js && node tests/unit/budget_acl_enforcement.test.js && node tests/unit/budget_acl_listing.test.js && node tests/unit/budget_selection_precondition.test.js && node tests/unit/multi_server_budget_selection.test.js && node tests/unit/static_tokens.test.js && node tests/unit/httpServer_static_tokens.test.js && node tests/unit/httpServer_host_validation.test.js && node tests/unit/multi_server_budget_selection_stdio.test.js && node tests/unit/api_login_fetch.test.js && node tests/unit/multi_server_session_open_http.test.js && node tests/unit/budget_load_abandonment.test.js && node tests/unit/budget_loader_postcondition.test.js && node tests/unit/budget_loader_import_allowlist.test.js && node tests/unit/budget_import_tracking.test.js && node tests/unit/pool_shutdown_under_lock.test.js && node tests/unit/api_lock_affinity.test.js && node tests/unit/commit_message_closing_keyword.test.js && node tests/unit/write_queue_stranding.test.js && node tests/unit/write_queue_stranded_bound.test.js && node tests/unit/budget_preference_store.test.js && node tests/unit/budget_preference_restore.test.js && node tests/unit/tags_list.test.js && node tests/unit/tags_create.test.js && node tests/unit/tags_update.test.js && node tests/unit/tags_delete.test.js && node tests/unit/notes_get.test.js && node tests/unit/notes_update.test.js && node tests/unit/payees_common_list.test.js && node tests/unit/transactions_update_guard.test.js && node tests/unit/transactions_update_splits.test.js && node tests/unit/transactions_update_split_convert.test.js && node tests/unit/entities_search.test.js && node tests/unit/transactions_import_schema.test.js && node tests/unit/tool_schema_shape.test.js && node tests/unit/zod_error_format.test.js && node tests/unit/transactions_update_batch.test.js && node tests/unit/tool_count_sync.test.js && node tests/unit/stdio_transport.test.js && node tests/unit/stdio_budget_switch.test.js && node tests/unit/logger_structured.test.js && node tests/unit/logger_redaction.test.js && node tests/unit/tool_content_logging.test.js && node tests/unit/adapter_error_logging.test.js && node tests/unit/logger_correlation.test.js && node tests/unit/check_coverage.test.js && node tests/unit/adapter_op_timeout.test.js && node tests/unit/adapter_write_queue_wakeup.test.js && node tests/unit/ci_workflow_guards.test.js && node tests/unit/node_version_guard.test.js && node tests/unit/node_version_drift.test.js && node tests/unit/playwright_version_drift.test.js && node tests/unit/observability_smoke.test.js && node tests/unit/residue_pattern.test.js && node tests/unit/harness_cleanup.test.js && node tests/unit/harness_stdio_data_dir.test.js && node tests/unit/batch_uncategorized_cleanup.test.js && node tests/unit/rules_stage342_cleanup.test.js && node tests/unit/residue_unreadable.test.js && node tests/unit/dual_transport_gate.test.js && node tests/unit/manual_assertions_use_helper.test.js && node tests/unit/server_version_guard.test.js && node tests/unit/server_version_probe_outside_op_timeout.test.js && node tests/unit/payee_rules_reference_filter.test.js && node tests/unit/oidc_metadata_discovery.test.js && node tests/unit/httpServer_oauth_metadata_route.test.js && node tests/unit/httpServer_mcp_info_route.test.js && node tests/unit/residue_sweep_balance_account.test.js && node tests/unit/tool_factory.test.js && node tests/unit/budget_registry_parse.test.js && node tests/unit/preferences_get.test.js && node tests/unit/budgets_export.test.js && node tests/unit/budgets_import.test.js && node tests/unit/budgets_import_syncid.test.js && node tests/unit/budget_acl_dynamic.test.js && node tests/unit/budget_acl_identity_map.test.js && node tests/unit/budget_acl_userinfo.test.js && node tests/unit/acl_e2e_fixture_contract.test.js && node tests/unit/budget_acl_middleware.test.js && node tests/unit/rules_stage.test.js && node tests/unit/oidc_scope_list.test.js && node tests/unit/get_context.test.js && node tests/unit/contributor_docs.test.js && node tests/unit/toolsets.test.js && node tests/unit/toolsets_entrypoint.test.js && node tests/unit/tools_list_size_budget.test.js && node tests/unit/rules_update_schedules_schema.test.js && node tests/unit/schedules_update_amount_guard.test.js && node tests/unit/source_text_helper.test.js && node tests/unit/transport_onerror.test.js && node tests/unit/adapter_transaction_batch_abort.test.js && node tests/unit/transactions_merge_adapter.test.js && node tests/unit/schedules_dead_conditions.test.js && node tests/unit/session_ownership_express.test.js && node tests/unit/pool_orphan_sweep.test.js && node tests/unit/session_budget_state_cleanup.test.js && node tests/unit/http_session_delete.test.js && node tests/unit/budget_acl_parse.test.js && node tests/unit/server_instructions.test.js && node tests/unit/query_run_empty_hint.test.js && node tests/unit/session_admission_race.test.js && node tests/unit/pool_admission_reservation.test.js && node tests/unit/config_max_sessions_per_principal.test.js && node tests/unit/session_principal_cap.test.js && node tests/unit/schema_published_parity.test.js && node tests/unit/manual_borrowed_category.test.js && node tests/unit/manual_budget_no_borrowed_writes.test.js && node tests/unit/refresh_test_budget_snapshot.test.js && node tests/unit/docs_check.test.js && node tests/unit/docs_markers.test.js && node tests/unit/docs_links_fixture.test.js && node tests/unit/docs_index.test.js && node tests/unit/docs_tools.test.js && node tests/unit/docs_readme_size.test.js && node tests/unit/template_lockstep.test.js && node tests/unit/client_examples.test.js && node tests/unit/mcp_server_json.test.js",
     "test:adapter": "npm run build && node dist/src/tests_adapter_runner.js",
     "test:e2e": "npx playwright test",
     "test:e2e:docker": "./tests/e2e/run-docker-e2e.sh",
@@ -89,7 +90,7 @@
     "@playwright/test": "^1.64.1",
     "@types/express": "^5.0.3",
     "@types/node": "^26.6.5",
-    "knip": "^6.42.1",
+    "knip": "^6.44.0",
     "node-fetch": "^3.3.2",
     "tsconfig-paths": "^4.2.0",
     "typescript": "^7.0.2",