actual-mcp-server 0.25.1 → 0.26.0

package/README.md

@@ -15,7 +15,7 @@ A [Model Context Protocol](https://modelcontextprotocol.io/) server that lets an
 
 **What you can ask it:** "How much did I spend on groceries last month, by payee?", "Add a $47.50 grocery transaction at Whole Foods to my checking account.", "Move $200 from Dining Out to Emergency Fund for this month."
 
-**84 tools** across accounts, transactions, budgets, rules, schedules and more, over stdio or HTTP, with Bearer token or OIDC auth, per-user budget access, up to 15 concurrent sessions, and automatic retry of transient Actual errors (3 attempts, exponential backoff; deletes and merges are never retried).
+**85 tools** across accounts, transactions, budgets, rules, schedules and more, over stdio or HTTP, with Bearer token or OIDC auth, per-user budget access, up to 15 concurrent sessions, and automatic retry of transient Actual errors (3 attempts, exponential backoff; deletes and merges are never retried).
 
 ## Pick your path
 
@@ -98,7 +98,7 @@ Every tool, with its description and caveats, is in the [tools reference](docs/r
 
 ### Reducing the tool surface
 
-All 84 tools are published by default. Chat clients with a small tool budget (Gemini, LibreChat) do better with fewer. A tool that is not published is also refused if a client calls it by name.
+All 85 tools are published by default. Chat clients with a small tool budget (Gemini, LibreChat) do better with fewer. A tool that is not published is also refused if a client calls it by name.
 
 <!-- BEGIN GENERATED: tools-summary -->
 <!-- Generated from dist/src/lib/toolsets.js by `npm run docs:gen`. Do not edit. -->
@@ -109,14 +109,14 @@ All 84 tools are published by default. Chat clients with a small tool budget (Ge
 | `analysis` | 7 | Summaries, aggregates and balances |
 | `budget` | 10 | Budget months, amounts, carryover, holds, transfers, batch updates and notes |
 | `rules` | 7 | Rules and payee rules, including `actual_rules_create_batch` |
-| `schedules` | 4 | Scheduled transactions |
+| `schedules` | 5 | Scheduled transactions |
 | `structure` | 21 | Accounts, account groups, categories, category groups, payees and tags |
 | `query` | 1 | `actual_query_run` (SELECT only) |
 | `admin` | 6 | Budget switching, import, export, bank sync and session management |
 
 The `chat` preset publishes 12 tools: `actual_get_context`, `actual_query_run`, `actual_transactions_update_batch`, `actual_budget_updates_batch`, `actual_rules_create_batch`, `actual_transactions_create`, `actual_transactions_update`, `actual_transactions_delete`, `actual_rules_create`, `actual_budgets_transfer`, `actual_budgets_setAmount` and `actual_budgets_getMonth`.
 
-`MCP_READ_ONLY=true` hides and refuses 48 write-capable tools and leaves 36 published.
+`MCP_READ_ONLY=true` hides and refuses 48 write-capable tools and leaves 37 published.
 <!-- END GENERATED: tools-summary -->
 
 Example: a chat assistant with two extra tools.
@@ -169,4 +169,4 @@ MIT, see [LICENSE](LICENSE). Built on [Actual Budget](https://actualbudget.org/)
 
 ---
 
-**Version:** 0.25.1 | **Tool Count:** 84 (verified LibreChat-compatible)
+**Version:** 0.26.0 | **Tool Count:** 85 (verified LibreChat-compatible)

package/dist/src/actualToolsManager.js

@@ -57,6 +57,7 @@ const IMPLEMENTED_TOOLS = [
     'actual_rules_get',
     'actual_rules_update',
     'actual_schedules_create',
+    'actual_schedules_dates',
     'actual_schedules_delete',
     'actual_schedules_get',
     'actual_schedules_update',

package/dist/src/lib/actual-adapter.js

@@ -5,7 +5,7 @@ import api from '@actual-app/api';
 // cannot expose its named exports via static import syntax. At runtime the default import
 // IS module.exports, so all methods are accessible as properties.
 // eslint-disable-next-line @typescript-eslint/no-explicit-any
-const { addTransactions: rawAddTransactions, getAccounts: rawGetAccounts, importTransactions: rawImportTransactions, getTransactions: rawGetTransactions, getCategories: rawGetCategories, createCategory: rawCreateCategory, getPayees: rawGetPayees, getCommonPayees: rawGetCommonPayees, createPayee: rawCreatePayee, getBudgetMonths: rawGetBudgetMonths, getBudgetMonth: rawGetBudgetMonth, setBudgetAmount: rawSetBudgetAmount, createAccount: rawCreateAccount, updateAccount: rawUpdateAccount, getAccountBalance: rawGetAccountBalance, updateTransaction: rawUpdateTransaction, deleteTransaction: rawDeleteTransaction, updateCategory: rawUpdateCategory, deleteCategory: rawDeleteCategory, updatePayee: rawUpdatePayee, deletePayee: rawDeletePayee, deleteAccount: rawDeleteAccount, getRules: rawGetRules, createRule: rawCreateRule, updateRule: rawUpdateRule, deleteRule: rawDeleteRule, setBudgetCarryover: rawSetBudgetCarryover, closeAccount: rawCloseAccount, reopenAccount: rawReopenAccount, getCategoryGroups: rawGetCategoryGroups, createCategoryGroup: rawCreateCategoryGroup, updateCategoryGroup: rawUpdateCategoryGroup, deleteCategoryGroup: rawDeleteCategoryGroup, mergePayees: rawMergePayees, mergeTransactions: rawMergeTransactions, getPayeeRules: rawGetPayeeRules, holdBudgetForNextMonth: rawHoldBudgetForNextMonth, resetBudgetHold: rawResetBudgetHold, runQuery: rawRunQuery, runBankSync: rawRunBankSync, getBudgets: rawGetBudgets, getIDByName: rawGetIDByName, getServerVersion: rawGetServerVersion, getSchedules: rawGetSchedules, createSchedule: rawCreateSchedule, updateSchedule: rawUpdateSchedule, deleteSchedule: rawDeleteSchedule, getTags: rawGetTags, createTag: rawCreateTag, updateTag: rawUpdateTag, deleteTag: rawDeleteTag, getNote: rawGetNote, updateNote: rawUpdateNote, exportBudget: rawExportBudget, importBudget: rawImportBudget, getPreferences: rawGetPreferences, getAccountGroups: rawGetAccountGroups, createAccountGroup: rawCreateAccountGroup, updateAccountGroup: rawUpdateAccountGroup, deleteAccountGroup: rawDeleteAccountGroup,
+const { addTransactions: rawAddTransactions, getAccounts: rawGetAccounts, importTransactions: rawImportTransactions, getTransactions: rawGetTransactions, getCategories: rawGetCategories, createCategory: rawCreateCategory, getPayees: rawGetPayees, getCommonPayees: rawGetCommonPayees, createPayee: rawCreatePayee, getBudgetMonths: rawGetBudgetMonths, getBudgetMonth: rawGetBudgetMonth, setBudgetAmount: rawSetBudgetAmount, createAccount: rawCreateAccount, updateAccount: rawUpdateAccount, getAccountBalance: rawGetAccountBalance, updateTransaction: rawUpdateTransaction, deleteTransaction: rawDeleteTransaction, updateCategory: rawUpdateCategory, deleteCategory: rawDeleteCategory, updatePayee: rawUpdatePayee, deletePayee: rawDeletePayee, deleteAccount: rawDeleteAccount, getRules: rawGetRules, createRule: rawCreateRule, updateRule: rawUpdateRule, deleteRule: rawDeleteRule, setBudgetCarryover: rawSetBudgetCarryover, closeAccount: rawCloseAccount, reopenAccount: rawReopenAccount, getCategoryGroups: rawGetCategoryGroups, createCategoryGroup: rawCreateCategoryGroup, updateCategoryGroup: rawUpdateCategoryGroup, deleteCategoryGroup: rawDeleteCategoryGroup, mergePayees: rawMergePayees, mergeTransactions: rawMergeTransactions, getPayeeRules: rawGetPayeeRules, holdBudgetForNextMonth: rawHoldBudgetForNextMonth, resetBudgetHold: rawResetBudgetHold, runQuery: rawRunQuery, runBankSync: rawRunBankSync, getBudgets: rawGetBudgets, getIDByName: rawGetIDByName, getServerVersion: rawGetServerVersion, getSchedules: rawGetSchedules, getScheduleDates: rawGetScheduleDates, createSchedule: rawCreateSchedule, updateSchedule: rawUpdateSchedule, deleteSchedule: rawDeleteSchedule, getTags: rawGetTags, createTag: rawCreateTag, updateTag: rawUpdateTag, deleteTag: rawDeleteTag, getNote: rawGetNote, updateNote: rawUpdateNote, exportBudget: rawExportBudget, importBudget: rawImportBudget, getPreferences: rawGetPreferences, getAccountGroups: rawGetAccountGroups, createAccountGroup: rawCreateAccountGroup, updateAccountGroup: rawUpdateAccountGroup, deleteAccountGroup: rawDeleteAccountGroup,
 // eslint-disable-next-line @typescript-eslint/no-explicit-any
  } = api;
 import { EventEmitter } from 'events';
@@ -13,7 +13,7 @@ import observability from '../observability.js';
 import { retry, isRetryableError, isRateLimitError } from './retry.js';
 import { withOpTimeout } from './opTimeout.js';
 import { markInitFailure } from './init-failure.js';
-import { NotFoundRefusal, OutOfRangeRefusal, constraintErrorMsg, errorLogFields } from './errors.js';
+import { NotFoundRefusal, OutOfRangeRefusal, constraintErrorMsg, errorLogFields, isPreflightRefusal } from './errors.js';
 import { amountOpMismatch } from './schemas/schedule-amount.js';
 import { findMatchingRule } from './rule-matching.js';
 import logger from '../logger.js';
@@ -925,7 +925,7 @@ async function shutdownActualApi(opts) {
         setApiInitialized(false);
     }
 }
-import { BANK_SYNC_SETTLE_MS, SPLIT_VERIFY_INTERVAL_MS, SPLIT_VERIFY_TIMEOUT_MS, WRITE_SESSION_DELAY_MS } from './constants.js';
+import { SCHEDULE_DATES_CAP, SPLIT_VERIFY_INTERVAL_MS, SPLIT_VERIFY_TIMEOUT_MS, WRITE_SESSION_DELAY_MS } from './constants.js';
 // Concurrency limiter extracted to ./actual-adapter/concurrency.ts (#166).
 // Imported for internal use (every method wraps its raw call in withConcurrency)
 // and setMaxConcurrency is re-exported.
@@ -2958,6 +2958,56 @@ export async function getSchedules() {
         return Array.isArray(raw) ? raw : [];
     });
 }
+/**
+ * #479: the dates a schedule falls on, expanded by Actual itself (`api.getScheduleDates`, new in
+ * 26.11.0), so month ends, patterns, intervals and the weekend move match the Actual UI.
+ *
+ * One session: the schedule listing and the expansion run inside the same withActualApi, never
+ * through adapter.getSchedules (the api lock is not reentrant). Upstream takes the schedule row's
+ * `date` field (`scheduleModel.toExternal` maps it from `_date`), a single date or a RecurConfig.
+ * A count is ALWAYS sent, one above what is returned, so an open-ended recurrence returns its next
+ * dates instead of upstream's "needs an end or a count" error, and the extra date is how
+ * `truncated` knows that more dates exist after the last one returned. With both `end` and
+ * `count`, upstream stops at whichever comes first.
+ *
+ * The two refusals a caller can fix are typed and checked BEFORE the upstream call, never chosen
+ * by matching upstream message text: an `end` before `start` (only when both are given; with
+ * `start` omitted upstream uses its own today and its error passes through), and a stored
+ * `skipWeekend` without `weekendSolveMode`. Any other upstream error passes through unchanged.
+ */
+export async function getScheduleDates(scheduleId, opts = {}) {
+    if (opts.start !== undefined && opts.end !== undefined && opts.end < opts.start) {
+        throw new OutOfRangeRefusal(`end (${opts.end}) is before start (${opts.start}); end must be on or after start.`, opts.end);
+    }
+    return withActualApi(async () => {
+        observability.incrementToolCall('actual.schedules.dates').catch(() => { });
+        const schedules = await withConcurrency(() => retry(() => rawGetSchedules(), { retries: 2, backoffMs: 200 }));
+        const schedule = Array.isArray(schedules) ? schedules.find((s) => s?.id === scheduleId) : undefined;
+        if (!schedule) {
+            throw new NotFoundRefusal('Schedule', scheduleId, 'actual_schedules_get');
+        }
+        const recur = schedule.date;
+        if (recur && typeof recur === 'object' && recur.skipWeekend && !recur.weekendSolveMode) {
+            throw new OutOfRangeRefusal(`Schedule ${scheduleId} has skipWeekend set without weekendSolveMode, so its dates cannot be ` +
+                "computed. Set weekendSolveMode to 'before' or 'after' with actual_schedules_update.", 'weekendSolveMode');
+        }
+        const limit = Math.min(opts.count ?? SCHEDULE_DATES_CAP, SCHEDULE_DATES_CAP);
+        const raw = await withConcurrency(() => rawGetScheduleDates(schedule.date, {
+            ...(opts.start !== undefined ? { start: opts.start } : {}),
+            ...(opts.end !== undefined ? { end: opts.end } : {}),
+            count: limit + 1,
+        }));
+        const all = Array.isArray(raw) ? raw : [];
+        const dates = all.slice(0, limit);
+        return {
+            schedule_id: scheduleId,
+            name: typeof schedule.name === 'string' ? schedule.name : null,
+            dates,
+            count: dates.length,
+            truncated: all.length > limit,
+        };
+    });
+}
 /**
  * #547: upstream builds a schedule's rule with one `is` condition per field and STRINGIFIES the
  * value on create (`scheduleModel.fromExternal` in loot-core/src/server/api-models.ts), so an
@@ -3863,75 +3913,73 @@ export async function getFinancialAnalysisSnapshot(params) {
 // Imported for internal use by runQuery and re-exported (unit-tested directly).
 import { parseWhereClause, nameConditionLookups, nameConditionHintLines } from './actual-adapter/query.js';
 export { parseWhereClause };
+function normaliseBankSyncReport(raw) {
+    const r = (raw && typeof raw === 'object' ? raw : {});
+    const list = (v) => (Array.isArray(v) ? v.map(String) : []);
+    return {
+        newTransactions: list(r.newTransactions),
+        matchedTransactions: list(r.matchedTransactions),
+        updatedAccounts: list(r.updatedAccounts),
+    };
+}
+const BANK_SYNC_SETUP_HINT = 'To use bank sync, link your account(s) with a supported provider (GoCardless or SimpleFIN) in the Actual Budget UI. ' +
+    'See https://actualbudget.org/docs/advanced/bank-sync for setup instructions.';
 export async function runBankSync(accountId) {
     try {
-        return await withActualApi(async () => {
+        // #548: a write, so the import and the bank_sync_status row reach the server. In pooled
+        // mode withActualApiWrite pushes once after a RESOLVED sync and never in a rejection path;
+        // on the fallback (init/op/shutdown) path, shutdown still syncs whatever a partial
+        // all-accounts run imported before it failed. Not queueWriteOperation: bank sync is one
+        // upstream call, and the queue's per-call bound has no env knob, which #619 owns.
+        return await withActualApiWrite(async () => {
             observability.incrementToolCall('actual.bank.sync').catch(() => { });
-            // Bank sync must NOT be retried — retrying could import duplicate transactions.
+            // Bank sync must NOT be retried: retrying could import duplicate transactions.
             // Pass { accountId } for a specific account, or {} to sync all linked accounts.
             const args = accountId != null ? { accountId } : {};
-            // Pre-check: verify bank-linked accounts exist before calling rawRunBankSync.
-            // The SDK silently resolves void for local accounts (account_sync_source: null),
-            // which would otherwise be misreported as success and cause an unnecessary 30s wait.
+            // Pre-check: upstream resolves silently for a local account and skips a closed one,
+            // which would read as an empty but successful sync. Refusals are typed (#377).
             if (accountId != null) {
-                // Per-account check: verify the specified account is bank-linked.
                 const { data: acctRows } = await rawRunQuery(api.q('accounts')
-                    .select(['account_sync_source', 'name'])
+                    .select(['account_sync_source', 'account_id', 'name', 'closed'])
                     .filter({ id: accountId, tombstone: false }));
                 const acct = acctRows?.[0];
                 if (!acct) {
-                    throw new Error(`Bank sync failed: Account not found (id: ${accountId})`);
+                    // Only reachable on a race: the tool resolves the id with verifyExists first (#388).
+                    throw new NotFoundRefusal('Account', accountId, 'actual_accounts_list');
                 }
                 if (!acct.account_sync_source) {
-                    throw new Error(`Bank sync failed: Account "${acct.name}" is a local account — not configured for bank sync. ` +
-                        `To use bank sync, link your account with a supported provider (GoCardless or SimpleFIN) in the Actual Budget UI. ` +
-                        `See https://actualbudget.org/docs/advanced/bank-sync for setup instructions.`);
+                    throw new OutOfRangeRefusal(`Bank sync failed: Account "${acct.name}" is a local account, not configured for bank sync. ${BANK_SYNC_SETUP_HINT}`, accountId);
+                }
+                if (acct.closed) {
+                    throw new OutOfRangeRefusal(`Bank sync failed: Account "${acct.name}" is closed; Actual skips closed accounts in bank sync. Reopen it in Actual to sync it.`, accountId);
+                }
+                // Upstream also skips an account without a provider account id (and one without a bank
+                // row, which AQL does not expose, so that rarer half-link still reads as an empty sync).
+                if (!acct.account_id) {
+                    throw new OutOfRangeRefusal(`Bank sync failed: Account "${acct.name}" has a ${acct.account_sync_source} link with no provider account; Actual skips it in bank sync. Re-link it in the Actual Budget UI.`, accountId);
                 }
             }
             else {
-                // Global check: verify at least one bank-linked account exists across the budget.
                 const { data: allAccounts } = await rawRunQuery(api.q('accounts')
-                    .select(['account_sync_source'])
+                    .select(['account_sync_source', 'account_id', 'closed'])
                     .filter({ tombstone: false }));
-                const linkedCount = allAccounts?.filter(a => a.account_sync_source).length ?? 0;
-                if (linkedCount === 0) {
-                    throw new Error(`Bank sync failed: No accounts are configured for bank sync. ` +
-                        `To use bank sync, link your account(s) with a supported provider (GoCardless or SimpleFIN) in the Actual Budget UI. ` +
-                        `See https://actualbudget.org/docs/advanced/bank-sync for setup instructions.`);
-                }
-            }
-            // rawRunBankSync returns void immediately; the actual provider call runs on
-            // a background promise inside the SDK and surfaces errors as unhandledRejection.
-            // We install a temporary listener to capture any BankSyncError and re-throw.
-            let capturedRejection = null;
-            const rejectionHandler = (reason) => {
-                const msg = reason?.message || String(reason);
-                if (reason?.type === 'BankSyncError' ||
-                    msg.includes('BankSyncError') ||
-                    msg.includes('NORDIGEN_ERROR') ||
-                    msg.includes('Rate limit exceeded') ||
-                    msg.includes('Failed syncing account') ||
-                    msg.includes('GoCardless') ||
-                    msg.includes('SimpleFIN')) {
-                    capturedRejection = reason;
+                const linked = (allAccounts ?? []).filter(a => a.account_sync_source && a.account_id);
+                if (!linked.some(a => !a.closed)) {
+                    throw new OutOfRangeRefusal(linked.length > 0
+                        ? 'Bank sync failed: Every bank-linked account is closed; Actual skips closed accounts in bank sync. Reopen one in Actual to sync it.'
+                        : `Bank sync failed: No accounts are configured for bank sync. ${BANK_SYNC_SETUP_HINT}`, 'all');
                 }
-            };
-            process.on('unhandledRejection', rejectionHandler);
-            try {
-                await rawRunBankSync(args);
-                // Wait for the SDK's background promise to resolve/reject.
-                // Provider errors (rate limits, auth failures) arrive in < 3s in practice;
-                // BANK_SYNC_SETTLE_MS gives a comfortable margin to catch them.
-                await new Promise(resolve => setTimeout(resolve, BANK_SYNC_SETTLE_MS));
-                if (capturedRejection !== null)
-                    throw capturedRejection;
-            }
-            finally {
-                process.off('unhandledRejection', rejectionHandler);
             }
+            // Since 26.11 upstream awaits the provider and rejects this call itself, so the old
+            // settle sleep and the process-wide unhandledRejection listener are gone (#548).
+            return normaliseBankSyncReport(await rawRunBankSync(args));
         });
     }
     catch (error) {
+        // A typed refusal is already the caller-facing answer; the text mapping below would
+        // rewrite "not configured" into a generic message and lose the brand.
+        if (isPreflightRefusal(error))
+            throw error;
         const errorMsg = error?.message || String(error);
         // Network / connectivity errors (includes "fetch failed" from Node.js native fetch)
         if (errorMsg.includes('fetch failed') ||
@@ -3952,22 +4000,16 @@ export async function runBankSync(accountId) {
                 `To use bank sync, you must first link your account(s) with a supported provider (GoCardless or SimpleFIN) in the Actual Budget UI. ` +
                 `See https://actualbudget.org/docs/advanced/bank-sync for setup instructions.`);
         }
-        // GoCardless / SimpleFIN provider-level errors
-        // BankSyncError objects (from @actual-app/api) may have { type, category, code, message }
-        const bankSyncCategory = error?.category || '';
-        if (errorMsg.includes('Rate limit exceeded') ||
-            errorMsg.includes('RATE_LIMIT_EXCEEDED') ||
-            bankSyncCategory === 'RATE_LIMIT_EXCEEDED') {
-            const reset = error?.details?.rateLimitHeaders?.http_x_ratelimit_account_success_reset;
-            const retryIn = reset ? ` Retry in ~${Math.ceil(Number(reset) / 60)} minute(s).` : '';
-            throw new Error(`Bank sync failed: GoCardless rate limit exceeded for this account.${retryIn} ` +
+        // Provider errors. Since 26.11 the rejection is a plain Error with `.code` only (no
+        // category, type or details), so the upstream message is the one rate-limit signal.
+        if (errorMsg.includes('Rate limit exceeded')) {
+            throw new Error(`Bank sync failed: GoCardless rate limit exceeded for this account. ` +
                 `(NORDIGEN RATE_LIMIT_EXCEEDED: account success quota exhausted)`);
         }
-        if (error?.type === 'BankSyncError' ||
-            errorMsg.includes('BankSyncError') ||
-            errorMsg.includes('NORDIGEN_ERROR') ||
-            errorMsg.includes('Failed syncing account')) {
-            throw new Error(`Bank sync failed: Provider error: ${errorMsg}`, { cause: error });
+        if (errorMsg.includes('Failed syncing account')) {
+            // The message names only the account; `.code` is the one hint at why (re-link or retry).
+            const code = typeof error?.code === 'string' && error.code ? ` (code ${error.code})` : '';
+            throw new Error(`Bank sync failed: Provider error: ${errorMsg}${code}`, { cause: error });
         }
         throw new Error(`Bank sync failed: ${errorMsg}`, { cause: error }); // #452: keep the brand
     }
@@ -4573,6 +4615,7 @@ export default {
     getIDByName,
     getServerVersion,
     getSchedules,
+    getScheduleDates,
     createSchedule,
     updateSchedule,
     deleteSchedule,

package/dist/src/lib/constants.js

@@ -31,15 +31,11 @@ export const DEFAULT_CONCURRENCY_LIMIT = 5;
 // TIMEOUTS
 // ============================================================================
 /**
- * How long (ms) to wait after calling rawRunBankSync for the SDK's background
- * promise to surface a BankSyncError as an unhandledRejection.
- *
- * Bank provider errors (GoCardless RATE_LIMIT_EXCEEDED, auth failures, etc.)
- * arrive as HTTP responses. Fast banks respond within 1-3 seconds; slower
- * institutions can take considerably longer. 30 seconds gives a comfortable
- * margin while keeping the tool's wall-clock time acceptable for MCP clients.
+ * How many ids each list of an `actual_bank_sync` report carries (#548). The counts are
+ * always the full lengths; only the id lists are cut, so a first sync of a large account
+ * cannot flood the client's context. The tool sets `truncated` when any list was cut.
  */
-export const BANK_SYNC_SETTLE_MS = 30_000;
+export const BANK_SYNC_IDS_CAP = 100;
 /**
  * How long (ms) to wait for additional queued writes before closing the
  * shared budget session. Increasing this value batches more writes per
@@ -80,6 +76,10 @@ export const DEFAULT_HTTP_PORT = 3600;
 // ============================================================================
 // VALIDATION & LIMITS
 // ============================================================================
+/**
+ * #479: the most dates actual_schedules_dates returns, so a daily schedule cannot flood the context.
+ */
+export const SCHEDULE_DATES_CAP = 366;
 /**
  * Maximum length for name fields (accounts, categories, payees)
  */

package/dist/src/lib/schemas/common.js

@@ -3,7 +3,7 @@
  *
  * Common validation schemas used across MCP tools for Actual Budget.
  * These schemas provide consistent validation, better error messages,
- * and reduce duplication across the 84 tool definitions.
+ * and reduce duplication across the 85 tool definitions.
  */
 import { z } from 'zod';
 import { MAX_NAME_LENGTH, MAX_NOTES_LENGTH, DATE_PATTERN, MONTH_PATTERN, UUID_PATTERN } from '../constants.js';

package/dist/src/lib/tool-annotations.js

@@ -44,13 +44,13 @@ const OPEN_WORLD = new Set(['actual_bank_sync']);
  * `tests/unit/tool_annotations.test.js`, which resolves each tool's `adapter.*` calls and
  * fails if one of these reaches `queueWriteOperation`.
  *
- * Claimed only where it is certain. Three read-path tools are deliberately absent because
+ * Claimed only where it is certain. Three tools are deliberately absent because
  * "does not modify its environment" is false for them, and a wrong `true` here is worse
  * than no annotation at all:
  *
- *   actual_bank_sync       runs through `withActualApi` (the read path) but IMPORTS
- *                          transactions, so the call graph says read and reality says
- *                          write. Reality wins.
+ *   actual_bank_sync       IMPORTS transactions through `withActualApiWrite` (one
+ *                          upstream call, not the write queue, #548), so a queue-based
+ *                          reading of the call graph misses it.
  *   actual_budgets_export  writes a zip into the server's data directory.
  *   actual_budgets_switch  changes the session's active budget and persists a preference.
  *   actual_session_close   closes a pooled connection: server state, not budget data.
@@ -77,6 +77,7 @@ const READ_ONLY = new Set([
     'actual_preferences_get',
     'actual_query_run',
     'actual_rules_get',
+    'actual_schedules_dates',
     'actual_schedules_get',
     'actual_server_get_version',
     'actual_server_info',

package/dist/src/lib/toolsets.js

@@ -94,6 +94,7 @@ export const TOOLSETS = {
     ],
     schedules: [
         'actual_schedules_get',
+        'actual_schedules_dates',
         'actual_schedules_create',
         'actual_schedules_update',
         'actual_schedules_delete',
@@ -170,7 +171,7 @@ export const PRESET_NAMES = Object.keys(PRESETS);
  *
  * Derived by hand from the adapter call graph: the 43 tools whose adapter path reaches
  * queueWriteOperation, plus the four that mutate WITHOUT the write queue (bank_sync imports
- * transactions through the read path, budgets_export writes a zip to ACTUAL_EXPORT_DIR,
+ * transactions through withActualApiWrite, budgets_export writes a zip to ACTUAL_EXPORT_DIR,
  * budgets_switch changes the active budget, session_close closes a pooled connection).
  * Never derive this from tool annotations.
  *

package/dist/src/tools/bank_sync.js

@@ -1,11 +1,17 @@
 import { z } from 'zod';
 import adapter from '../lib/actual-adapter.js';
+import { BANK_SYNC_IDS_CAP } from '../lib/constants.js';
 const InputSchema = z.object({
     accountId: z.string().nullable().optional().describe('Optional account ID to sync a specific account. If omitted, syncs all linked accounts.'),
 });
 const tool = {
     name: 'actual_bank_sync',
-    description: 'Trigger 3rd party bank sync (GoCardless, SimpleFIN) for linked bank accounts. Returns immediately with an error if no bank-linked accounts are found. When bank-linked accounts exist, waits up to 30 seconds for the provider to confirm the operation and surfaces errors such as rate limits or auth failures that occur within that window. Successful syncs may take a few additional moments for transactions to appear in Actual Budget.',
+    description: 'Run 3rd party bank sync (GoCardless, SimpleFIN) for one linked account, or for every linked open account when accountId is omitted. ' +
+        'Refuses at once for a local, closed, half-linked or unknown account, or when no open account is linked. ' +
+        'Reports what Actual reconciled: newTransactions (imported), matchedTransactions (existing ones updated) and updatedAccounts (accounts that received new transactions), ' +
+        `each as { count, ids } with up to ${BANK_SYNC_IDS_CAP} ids (count is always the full total; truncated is true when any list was cut). ` +
+        'Never retried. A sync that runs past the server operation timeout reports "timed out" and may still have imported, so re-list transactions before retrying. ' +
+        'An all-accounts sync that fails on one account may still have imported the others; those imports reach the Actual server with the next write in this session or when it closes, so other clients may not see them yet.',
     inputSchema: InputSchema,
     call: async (args, _meta) => {
         const input = InputSchema.parse(args || {});
@@ -17,14 +23,21 @@ const tool = {
         if (input.accountId) {
             await adapter.resolveFilterId('account', input.accountId, { verifyExists: true });
         }
-        try {
-            await adapter.runBankSync(input.accountId ?? undefined);
-            return { result: 'Bank sync initiated successfully' };
-        }
-        catch (error) {
-            const msg = error instanceof Error ? error.message : String(error);
-            throw new Error(msg);
-        }
+        // #548: rethrow the adapter's error as is, so a typed refusal keeps its brand.
+        const report = await adapter.runBankSync(input.accountId ?? undefined);
+        let truncated = false;
+        const capped = (ids) => {
+            if (ids.length > BANK_SYNC_IDS_CAP)
+                truncated = true;
+            return { count: ids.length, ids: ids.slice(0, BANK_SYNC_IDS_CAP) };
+        };
+        return {
+            result: 'Bank sync completed',
+            newTransactions: capped(report.newTransactions),
+            matchedTransactions: capped(report.matchedTransactions),
+            updatedAccounts: capped(report.updatedAccounts),
+            truncated,
+        };
     },
 };
 export default tool;

package/dist/src/tools/index.js

@@ -52,6 +52,7 @@ export { default as rules_delete } from './rules_delete.js';
 export { default as rules_get } from './rules_get.js';
 export { default as rules_update } from './rules_update.js';
 export { default as schedules_create } from './schedules_create.js';
+export { default as schedules_dates } from './schedules_dates.js';
 export { default as schedules_delete } from './schedules_delete.js';
 export { default as schedules_get } from './schedules_get.js';
 export { default as schedules_update } from './schedules_update.js';

package/dist/src/tools/schedules_dates.js

@@ -0,0 +1,35 @@
+import { z } from 'zod';
+import { createTool } from '../lib/toolFactory.js';
+import { CommonSchemas } from '../lib/schemas/common.js';
+import adapter from '../lib/actual-adapter.js';
+import { SCHEDULE_DATES_CAP } from '../lib/constants.js';
+export default createTool({
+    name: 'actual_schedules_dates',
+    description: 'List the dates one schedule falls on, computed by Actual itself, so month ends, patterns ' +
+        '("last Friday"), intervals and the weekend move match the Actual UI. Use this instead of ' +
+        'expanding a schedule\'s recurrence yourself. Get schedule ids from actual_schedules_get. ' +
+        '`start` defaults to today; pass it whenever you pass `end`. With `end` and `count` both set, the list stops at whichever ' +
+        `comes first. At most ${SCHEDULE_DATES_CAP} dates are returned. \`truncated\` is true when more dates exist ` +
+        'after the last one returned (within `end`, if given): ask again with a later `start` to continue. ' +
+        'Returns { schedule_id, name, dates (ascending YYYY-MM-DD), count, truncated }.',
+    schema: z.object({
+        schedule_id: CommonSchemas.scheduleId,
+        start: CommonSchemas.date.optional().describe('First date to consider (YYYY-MM-DD); defaults to today'),
+        end: CommonSchemas.date.optional().describe('Last date to consider (YYYY-MM-DD), inclusive'),
+        count: z.number().int().min(1).max(SCHEDULE_DATES_CAP).optional()
+            .describe(`How many dates to return, 1 to ${SCHEDULE_DATES_CAP}`),
+    }),
+    handler: async ({ schedule_id, start, end, count }) => {
+        return await adapter.getScheduleDates(schedule_id, { start, end, count });
+    },
+    examples: [
+        {
+            description: 'Next three dates of a schedule',
+            input: { schedule_id: '00000000-0000-0000-0000-000000000001', count: 3 },
+        },
+        {
+            description: 'Every date of a schedule in Q4 2026',
+            input: { schedule_id: '00000000-0000-0000-0000-000000000001', start: '2026-10-01', end: '2026-12-31' },
+        },
+    ],
+});

package/package.json

@@ -1,13 +1,13 @@
 {
   "name": "actual-mcp-server",
   "displayName": "Actual MCP Server",
-  "version": "0.25.1",
+  "version": "0.26.0",
   "mcpName": "io.github.agigante80/actual-mcp-server",
   "engines": {
     "node": ">=22.0.0",
     "npm": ">=10.0.0"
   },
-  "description": "MCP server with 84 tools for AI-driven financial management with Actual Budget. HTTP and stdio transports for LibreChat, Claude Desktop, Cursor, VS Code, Gemini CLI",
+  "description": "MCP server with 85 tools for AI-driven financial management with Actual Budget. HTTP and stdio transports for LibreChat, Claude Desktop, Cursor, VS Code, Gemini CLI",
   "homepage": "https://github.com/agigante80/actual-mcp-server#readme",
   "repository": {
     "type": "git",
@@ -31,7 +31,7 @@
     "verify-tools": "npm run build && node scripts/verify-tools.js",
     "check:coverage": "node scripts/list-actual-api-methods.mjs",
     "direct-sync": "node scripts/direct-sync/bank-sync-direct.mjs",
-    "test:unit-js": "node tests/unit/transactions_create.test.js && node tests/unit/transactions_aggregate.test.js && node tests/unit/account_flow_summary.test.js && node tests/unit/recurring_expenses_summary.test.js && node tests/unit/generated_tools.smoke.test.js &&node tests/unit/schema_validation.test.js && node tests/unit/schema_json_openai_compat.test.js && node tests/unit/config_https_validation.test.js && node tests/unit/config_data_dir.test.js && node tests/unit/config_drift.test.js && node tests/unit/port_alignment.test.js && node tests/unit/dockerfile_data_dir_alignment.test.js && node tests/unit/unraid_template_alignment.test.js && node tests/unit/entrypoint_invariants.test.js && node tests/unit/e2e_spec_collection.test.js && node tests/unit/compose_profile_sync.test.js && node tests/unit/install_snippets.test.js && node tests/unit/advertised_tools_sync.test.js && node tests/unit/new_tool_completeness.test.js && node tests/unit/knip_config.test.js && node tests/unit/readme_stats_sync.test.js && node tests/unit/config_insecure_upstream.test.js && node tests/unit/workflow_release_guards.test.js && node tests/unit/report_train_failure.test.js && node tests/unit/unit_chain_membership.test.js && node tests/unit/api_surface_drift.test.js && node tests/unit/write_effect_audit_staleness.test.js && node tests/unit/write_effect_audit_membership.test.js && node tests/unit/tool_annotations.test.js && node tests/unit/tool_id_schema_drift.test.js && node tests/unit/filter_id_resolution.test.js && node tests/unit/filter_id_tool_wiring.test.js && node tests/unit/api_coverage_baseline.test.js && node tests/unit/train_preflight.test.js && node tests/unit/verify_published_artifacts.test.js && node tests/unit/report_train_stale.test.js && node tests/unit/stdio_framing_check.test.js && node tests/unit/server_info.test.js && node tests/unit/transfers_create.test.js && node tests/unit/bot_target_branch.test.js && node tests/unit/auth_posture.test.js && node tests/unit/auth_posture_wiring.test.js && node tests/unit/auth-acl.test.js && node tests/unit/bug76.test.js && node tests/unit/budgets_setAmount.test.js && node tests/unit/adapter_set_budget_batch.test.js && node tests/unit/budget_updates_batch.test.js && node tests/unit/rules_create.test.js && node tests/unit/adapter_rule_reference_guard.test.js && node tests/unit/rules_create_batch.test.js && node tests/unit/budgets_hold_for_next_month.test.js && node tests/unit/budgets_transfer.test.js && node tests/unit/transactions_uncategorized.test.js && node tests/unit/httpServer_session_init.test.js && node tests/unit/httpServer_session_not_found.test.js && node tests/unit/httpServer_init_failure_report.test.js && node tests/unit/stdio_init_failure_report.test.js && node tests/unit/manual_mcp_client_retry.test.js && node tests/unit/manual_mcp_client_session.test.js && node tests/unit/manual_mcp_client_circuit.test.js && node tests/unit/manual_runner_killswitch.test.js && node tests/unit/adapter_auth_rate_limit.test.js && node tests/unit/adapter_session_reuse.test.js && node tests/unit/retry_classifier.test.js && node tests/unit/adapter_module_surface.test.js && node tests/unit/adapter_nonidempotent_no_retry.test.js && node tests/unit/pool_liveness.test.js && node tests/unit/pool_shutdown_all.test.js && node tests/unit/query_where_operators.test.js && node tests/unit/query_run_validation.test.js && node tests/unit/adapter_with_write_session.test.js && node tests/unit/category_groups_delete.test.js && node tests/unit/rules_delete.test.js && node tests/unit/schedules_delete.test.js && node tests/unit/accounts_delete.test.js && node tests/unit/update_tools_not_found.test.js && node tests/unit/accounts_close.test.js && node tests/unit/accounts_reopen.test.js && node tests/unit/payees_delete.test.js && node tests/unit/payees_merge.test.js && node tests/unit/rules_create_or_update.test.js && node tests/unit/unhandled-rejection.test.js && node tests/unit/rejection-allowlist-purity.test.js && node tests/unit/httpServer_bearer_auth.test.js && node tests/unit/session_ownership.test.js && node tests/unit/httpServer_oidc_audience.test.js && node tests/unit/httpServer_oidc_auth_verification.test.js && node tests/unit/httpServer_oidc_jwks_discovery.test.js && node tests/unit/oidc_resource_identifier.test.js && node tests/unit/httpServer_oidc_resource_metadata.test.js && node tests/unit/oidc_error_cause.test.js && node tests/unit/httpServer_oidc_error_body.test.js && node tests/unit/oidc_token_source.test.js && node tests/unit/config_oidc_assertion_refines.test.js && node tests/unit/httpServer_oidc_assertion_mode.test.js && node tests/unit/httpServer_body_limit.test.js && node tests/unit/httpErrorHandler.test.js && node tests/unit/httpServer_error_handler_wiring.test.js && node tests/unit/httpServer_trust_proxy.test.js && node tests/unit/httpServer_batch_cap.test.js && node tests/unit/dotenv_stdout_quiet.test.js && node tests/unit/httpServer_bind_host.test.js && node tests/unit/adapter_write_pool_cooperation.test.js && node tests/unit/adapter_drain_listing_cache.test.js && node tests/unit/budget_acl_enforcement.test.js && node tests/unit/budget_acl_listing.test.js && node tests/unit/budget_selection_precondition.test.js && node tests/unit/multi_server_budget_selection.test.js && node tests/unit/static_tokens.test.js && node tests/unit/httpServer_static_tokens.test.js && node tests/unit/httpServer_host_validation.test.js && node tests/unit/multi_server_budget_selection_stdio.test.js && node tests/unit/api_login_fetch.test.js && node tests/unit/multi_server_session_open_http.test.js && node tests/unit/budget_load_abandonment.test.js && node tests/unit/budget_loader_postcondition.test.js && node tests/unit/budget_loader_import_allowlist.test.js && node tests/unit/budget_import_tracking.test.js && node tests/unit/pool_shutdown_under_lock.test.js && node tests/unit/api_lock_affinity.test.js && node tests/unit/commit_message_closing_keyword.test.js && node tests/unit/write_queue_stranding.test.js && node tests/unit/write_queue_stranded_bound.test.js && node tests/unit/budget_preference_store.test.js && node tests/unit/budget_preference_restore.test.js && node tests/unit/tags_list.test.js && node tests/unit/tags_create.test.js && node tests/unit/tags_update.test.js && node tests/unit/tags_delete.test.js && node tests/unit/notes_get.test.js && node tests/unit/notes_update.test.js && node tests/unit/payees_common_list.test.js && node tests/unit/transactions_update_guard.test.js && node tests/unit/transactions_update_splits.test.js && node tests/unit/transactions_update_split_convert.test.js && node tests/unit/entities_search.test.js && node tests/unit/transactions_import_schema.test.js && node tests/unit/tool_schema_shape.test.js && node tests/unit/zod_error_format.test.js && node tests/unit/transactions_update_batch.test.js && node tests/unit/tool_count_sync.test.js && node tests/unit/stdio_transport.test.js && node tests/unit/stdio_budget_switch.test.js && node tests/unit/logger_structured.test.js && node tests/unit/logger_redaction.test.js && node tests/unit/tool_content_logging.test.js && node tests/unit/adapter_error_logging.test.js && node tests/unit/logger_correlation.test.js && node tests/unit/check_coverage.test.js && node tests/unit/adapter_op_timeout.test.js && node tests/unit/adapter_write_queue_wakeup.test.js && node tests/unit/ci_workflow_guards.test.js && node tests/unit/node_version_guard.test.js && node tests/unit/node_version_drift.test.js && node tests/unit/playwright_version_drift.test.js && node tests/unit/observability_smoke.test.js && node tests/unit/residue_pattern.test.js && node tests/unit/harness_cleanup.test.js && node tests/unit/harness_stdio_data_dir.test.js && node tests/unit/batch_uncategorized_cleanup.test.js && node tests/unit/rules_stage342_cleanup.test.js && node tests/unit/residue_unreadable.test.js && node tests/unit/dual_transport_gate.test.js && node tests/unit/manual_assertions_use_helper.test.js && node tests/unit/server_version_guard.test.js && node tests/unit/server_version_probe_outside_op_timeout.test.js && node tests/unit/payee_rules_reference_filter.test.js && node tests/unit/oidc_metadata_discovery.test.js && node tests/unit/httpServer_oauth_metadata_route.test.js && node tests/unit/httpServer_mcp_info_route.test.js && node tests/unit/residue_sweep_balance_account.test.js && node tests/unit/tool_factory.test.js && node tests/unit/budget_registry_parse.test.js && node tests/unit/preferences_get.test.js && node tests/unit/budgets_export.test.js && node tests/unit/budgets_import.test.js && node tests/unit/budgets_import_syncid.test.js && node tests/unit/budget_acl_dynamic.test.js && node tests/unit/budget_acl_identity_map.test.js && node tests/unit/budget_acl_userinfo.test.js && node tests/unit/acl_e2e_fixture_contract.test.js && node tests/unit/budget_acl_middleware.test.js && node tests/unit/rules_stage.test.js && node tests/unit/oidc_scope_list.test.js && node tests/unit/get_context.test.js && node tests/unit/contributor_docs.test.js && node tests/unit/toolsets.test.js && node tests/unit/toolsets_entrypoint.test.js && node tests/unit/tools_list_size_budget.test.js && node tests/unit/rules_update_schedules_schema.test.js && node tests/unit/schedules_update_amount_guard.test.js && node tests/unit/source_text_helper.test.js && node tests/unit/transport_onerror.test.js && node tests/unit/adapter_transaction_batch_abort.test.js && node tests/unit/transactions_merge_adapter.test.js && node tests/unit/schedules_dead_conditions.test.js && node tests/unit/session_ownership_express.test.js && node tests/unit/pool_orphan_sweep.test.js && node tests/unit/session_budget_state_cleanup.test.js && node tests/unit/http_session_delete.test.js && node tests/unit/budget_acl_parse.test.js && node tests/unit/server_instructions.test.js && node tests/unit/query_run_empty_hint.test.js && node tests/unit/session_admission_race.test.js && node tests/unit/pool_admission_reservation.test.js && node tests/unit/config_max_sessions_per_principal.test.js && node tests/unit/session_principal_cap.test.js && node tests/unit/schema_published_parity.test.js && node tests/unit/manual_borrowed_category.test.js && node tests/unit/manual_budget_no_borrowed_writes.test.js && node tests/unit/refresh_test_budget_snapshot.test.js && node tests/unit/docs_check.test.js && node tests/unit/docs_markers.test.js && node tests/unit/docs_links_fixture.test.js && node tests/unit/docs_index.test.js && node tests/unit/docs_tools.test.js && node tests/unit/docs_readme_size.test.js && node tests/unit/template_lockstep.test.js && node tests/unit/client_examples.test.js && node tests/unit/mcp_server_json.test.js",
+    "test:unit-js": "node tests/unit/transactions_create.test.js && node tests/unit/transactions_aggregate.test.js && node tests/unit/account_flow_summary.test.js && node tests/unit/recurring_expenses_summary.test.js && node tests/unit/generated_tools.smoke.test.js &&node tests/unit/schema_validation.test.js && node tests/unit/schema_json_openai_compat.test.js && node tests/unit/config_https_validation.test.js && node tests/unit/config_data_dir.test.js && node tests/unit/config_drift.test.js && node tests/unit/port_alignment.test.js && node tests/unit/dockerfile_data_dir_alignment.test.js && node tests/unit/unraid_template_alignment.test.js && node tests/unit/entrypoint_invariants.test.js && node tests/unit/e2e_spec_collection.test.js && node tests/unit/compose_profile_sync.test.js && node tests/unit/install_snippets.test.js && node tests/unit/advertised_tools_sync.test.js && node tests/unit/new_tool_completeness.test.js && node tests/unit/knip_config.test.js && node tests/unit/readme_stats_sync.test.js && node tests/unit/config_insecure_upstream.test.js && node tests/unit/workflow_release_guards.test.js && node tests/unit/report_train_failure.test.js && node tests/unit/unit_chain_membership.test.js && node tests/unit/api_surface_drift.test.js && node tests/unit/write_effect_audit_staleness.test.js && node tests/unit/write_effect_audit_membership.test.js && node tests/unit/tool_annotations.test.js && node tests/unit/tool_id_schema_drift.test.js && node tests/unit/filter_id_resolution.test.js && node tests/unit/filter_id_tool_wiring.test.js && node tests/unit/api_coverage_baseline.test.js && node tests/unit/train_preflight.test.js && node tests/unit/verify_published_artifacts.test.js && node tests/unit/report_train_stale.test.js && node tests/unit/stdio_framing_check.test.js && node tests/unit/server_info.test.js && node tests/unit/transfers_create.test.js && node tests/unit/bot_target_branch.test.js && node tests/unit/auth_posture.test.js && node tests/unit/auth_posture_wiring.test.js && node tests/unit/auth-acl.test.js && node tests/unit/bug76.test.js && node tests/unit/budgets_setAmount.test.js && node tests/unit/adapter_set_budget_batch.test.js && node tests/unit/budget_updates_batch.test.js && node tests/unit/rules_create.test.js && node tests/unit/adapter_rule_reference_guard.test.js && node tests/unit/rules_create_batch.test.js && node tests/unit/budgets_hold_for_next_month.test.js && node tests/unit/budgets_transfer.test.js && node tests/unit/transactions_uncategorized.test.js && node tests/unit/httpServer_session_init.test.js && node tests/unit/httpServer_session_not_found.test.js && node tests/unit/httpServer_init_failure_report.test.js && node tests/unit/stdio_init_failure_report.test.js && node tests/unit/manual_mcp_client_retry.test.js && node tests/unit/manual_mcp_client_session.test.js && node tests/unit/manual_mcp_client_circuit.test.js && node tests/unit/manual_runner_killswitch.test.js && node tests/unit/adapter_auth_rate_limit.test.js && node tests/unit/adapter_session_reuse.test.js && node tests/unit/retry_classifier.test.js && node tests/unit/adapter_module_surface.test.js && node tests/unit/adapter_nonidempotent_no_retry.test.js && node tests/unit/pool_liveness.test.js && node tests/unit/pool_shutdown_all.test.js && node tests/unit/query_where_operators.test.js && node tests/unit/query_run_validation.test.js && node tests/unit/adapter_with_write_session.test.js && node tests/unit/category_groups_delete.test.js && node tests/unit/rules_delete.test.js && node tests/unit/schedules_delete.test.js && node tests/unit/schedules_dates.test.js && node tests/unit/bank_sync.test.js && node tests/unit/accounts_delete.test.js && node tests/unit/update_tools_not_found.test.js && node tests/unit/accounts_close.test.js && node tests/unit/accounts_reopen.test.js && node tests/unit/payees_delete.test.js && node tests/unit/payees_merge.test.js && node tests/unit/rules_create_or_update.test.js && node tests/unit/unhandled-rejection.test.js && node tests/unit/rejection-allowlist-purity.test.js && node tests/unit/httpServer_bearer_auth.test.js && node tests/unit/session_ownership.test.js && node tests/unit/httpServer_oidc_audience.test.js && node tests/unit/httpServer_oidc_auth_verification.test.js && node tests/unit/httpServer_oidc_jwks_discovery.test.js && node tests/unit/oidc_resource_identifier.test.js && node tests/unit/httpServer_oidc_resource_metadata.test.js && node tests/unit/oidc_error_cause.test.js && node tests/unit/httpServer_oidc_error_body.test.js && node tests/unit/oidc_token_source.test.js && node tests/unit/config_oidc_assertion_refines.test.js && node tests/unit/httpServer_oidc_assertion_mode.test.js && node tests/unit/httpServer_body_limit.test.js && node tests/unit/httpErrorHandler.test.js && node tests/unit/httpServer_error_handler_wiring.test.js && node tests/unit/httpServer_trust_proxy.test.js && node tests/unit/httpServer_batch_cap.test.js && node tests/unit/dotenv_stdout_quiet.test.js && node tests/unit/httpServer_bind_host.test.js && node tests/unit/adapter_write_pool_cooperation.test.js && node tests/unit/adapter_drain_listing_cache.test.js && node tests/unit/budget_acl_enforcement.test.js && node tests/unit/budget_acl_listing.test.js && node tests/unit/budget_selection_precondition.test.js && node tests/unit/multi_server_budget_selection.test.js && node tests/unit/static_tokens.test.js && node tests/unit/httpServer_static_tokens.test.js && node tests/unit/httpServer_host_validation.test.js && node tests/unit/multi_server_budget_selection_stdio.test.js && node tests/unit/api_login_fetch.test.js && node tests/unit/multi_server_session_open_http.test.js && node tests/unit/budget_load_abandonment.test.js && node tests/unit/budget_loader_postcondition.test.js && node tests/unit/budget_loader_import_allowlist.test.js && node tests/unit/budget_import_tracking.test.js && node tests/unit/pool_shutdown_under_lock.test.js && node tests/unit/api_lock_affinity.test.js && node tests/unit/commit_message_closing_keyword.test.js && node tests/unit/write_queue_stranding.test.js && node tests/unit/write_queue_stranded_bound.test.js && node tests/unit/budget_preference_store.test.js && node tests/unit/budget_preference_restore.test.js && node tests/unit/tags_list.test.js && node tests/unit/tags_create.test.js && node tests/unit/tags_update.test.js && node tests/unit/tags_delete.test.js && node tests/unit/notes_get.test.js && node tests/unit/notes_update.test.js && node tests/unit/payees_common_list.test.js && node tests/unit/transactions_update_guard.test.js && node tests/unit/transactions_update_splits.test.js && node tests/unit/transactions_update_split_convert.test.js && node tests/unit/entities_search.test.js && node tests/unit/transactions_import_schema.test.js && node tests/unit/tool_schema_shape.test.js && node tests/unit/zod_error_format.test.js && node tests/unit/transactions_update_batch.test.js && node tests/unit/tool_count_sync.test.js && node tests/unit/stdio_transport.test.js && node tests/unit/stdio_budget_switch.test.js && node tests/unit/logger_structured.test.js && node tests/unit/logger_redaction.test.js && node tests/unit/tool_content_logging.test.js && node tests/unit/adapter_error_logging.test.js && node tests/unit/logger_correlation.test.js && node tests/unit/check_coverage.test.js && node tests/unit/adapter_op_timeout.test.js && node tests/unit/adapter_write_queue_wakeup.test.js && node tests/unit/ci_workflow_guards.test.js && node tests/unit/node_version_guard.test.js && node tests/unit/node_version_drift.test.js && node tests/unit/playwright_version_drift.test.js && node tests/unit/observability_smoke.test.js && node tests/unit/residue_pattern.test.js && node tests/unit/harness_cleanup.test.js && node tests/unit/harness_stdio_data_dir.test.js && node tests/unit/batch_uncategorized_cleanup.test.js && node tests/unit/rules_stage342_cleanup.test.js && node tests/unit/residue_unreadable.test.js && node tests/unit/dual_transport_gate.test.js && node tests/unit/manual_assertions_use_helper.test.js && node tests/unit/server_version_guard.test.js && node tests/unit/server_version_probe_outside_op_timeout.test.js && node tests/unit/payee_rules_reference_filter.test.js && node tests/unit/oidc_metadata_discovery.test.js && node tests/unit/httpServer_oauth_metadata_route.test.js && node tests/unit/httpServer_mcp_info_route.test.js && node tests/unit/residue_sweep_balance_account.test.js && node tests/unit/tool_factory.test.js && node tests/unit/budget_registry_parse.test.js && node tests/unit/preferences_get.test.js && node tests/unit/budgets_export.test.js && node tests/unit/budgets_import.test.js && node tests/unit/budgets_import_syncid.test.js && node tests/unit/budget_acl_dynamic.test.js && node tests/unit/budget_acl_identity_map.test.js && node tests/unit/budget_acl_userinfo.test.js && node tests/unit/acl_e2e_fixture_contract.test.js && node tests/unit/budget_acl_middleware.test.js && node tests/unit/rules_stage.test.js && node tests/unit/oidc_scope_list.test.js && node tests/unit/get_context.test.js && node tests/unit/contributor_docs.test.js && node tests/unit/toolsets.test.js && node tests/unit/toolsets_entrypoint.test.js && node tests/unit/tools_list_size_budget.test.js && node tests/unit/rules_update_schedules_schema.test.js && node tests/unit/schedules_update_amount_guard.test.js && node tests/unit/source_text_helper.test.js && node tests/unit/transport_onerror.test.js && node tests/unit/adapter_transaction_batch_abort.test.js && node tests/unit/transactions_merge_adapter.test.js && node tests/unit/schedules_dead_conditions.test.js && node tests/unit/session_ownership_express.test.js && node tests/unit/pool_orphan_sweep.test.js && node tests/unit/session_budget_state_cleanup.test.js && node tests/unit/http_session_delete.test.js && node tests/unit/budget_acl_parse.test.js && node tests/unit/server_instructions.test.js && node tests/unit/query_run_empty_hint.test.js && node tests/unit/session_admission_race.test.js && node tests/unit/pool_admission_reservation.test.js && node tests/unit/config_max_sessions_per_principal.test.js && node tests/unit/session_principal_cap.test.js && node tests/unit/schema_published_parity.test.js && node tests/unit/manual_borrowed_category.test.js && node tests/unit/manual_budget_no_borrowed_writes.test.js && node tests/unit/refresh_test_budget_snapshot.test.js && node tests/unit/docs_check.test.js && node tests/unit/docs_markers.test.js && node tests/unit/docs_links_fixture.test.js && node tests/unit/docs_index.test.js && node tests/unit/docs_tools.test.js && node tests/unit/docs_readme_size.test.js && node tests/unit/template_lockstep.test.js && node tests/unit/client_examples.test.js && node tests/unit/mcp_server_json.test.js",
     "test:adapter": "npm run build && node dist/src/tests_adapter_runner.js",
     "test:e2e": "npx playwright test",
     "test:e2e:docker": "./tests/e2e/run-docker-e2e.sh",
@@ -71,7 +71,7 @@
     "audit:write-effect": "node scripts/check-write-effect-audit.mjs"
   },
   "dependencies": {
-    "@actual-app/api": "^26.10.0",
+    "@actual-app/api": "^26.11.0",
     "@modelcontextprotocol/sdk": "^1.32.2",
     "debug": "^4.4.3",
     "dotenv": "^18.0.9",