actual-mcp-server 0.26.1 → 0.27.0

package/README.md

@@ -169,4 +169,4 @@ MIT, see [LICENSE](LICENSE). Built on [Actual Budget](https://actualbudget.org/)
 
 ---
 
-**Version:** 0.26.1 | **Tool Count:** 85 (verified LibreChat-compatible)
+**Version:** 0.27.0 | **Tool Count:** 85 (verified LibreChat-compatible)

package/dist/src/actualToolsManager.js

@@ -195,6 +195,10 @@ class ActualToolsManager {
         const { toolsets, tools, readOnly } = this.requirePolicy().settings;
         return { toolsets: [...toolsets], tools: [...tools], readOnly };
     }
+    /** How many tools exist, published or not, for the sys_startup record (#623). */
+    getRegisteredToolCount() {
+        return this.tools.size;
+    }
     getToolNames() {
         return Array.from(this.tools.keys());
     }

package/dist/src/index.js

@@ -147,7 +147,7 @@ Docs & source: https://github.com/agigante80/actual-mcp-server`);
         import('./actualConnection.js'),
         import('./lib/ActualMCPConnection.js'),
     ]);
-    const [{ startHttpServer }, { startStdioServer }, { enforceHttpAuthPosture, findWeakTokenVars, describeAuthMode }, loggerModule, utilsModule, actualToolsManagerModule,] = await Promise.all([
+    const [{ startHttpServer }, { startStdioServer }, { enforceHttpAuthPosture, findWeakTokenVars }, loggerModule, utilsModule, actualToolsManagerModule,] = await Promise.all([
         import('./server/httpServer.js'),
         import('./server/stdioServer.js'),
         import('./lib/authPosture.js'),
@@ -259,6 +259,8 @@ Docs & source: https://github.com/agigante80/actual-mcp-server`);
         // the configured posture is safe. On a non-loopback bind with no auth and no
         // explicit opt-out this refuses startup (exit 1) rather than silently serving
         // financial data open on the LAN. stdio mode never reaches this check.
+        // #623: kept for the sys_startup record; 'n/a' on stdio, which has no posture.
+        let posture = 'n/a';
         if (useHttp || useTestMcpClient) {
             const oidcEnabled = process.env.AUTH_PROVIDER === 'oidc';
             const decision = enforceHttpAuthPosture({
@@ -276,6 +278,7 @@ Docs & source: https://github.com/agigante80/actual-mcp-server`);
             // if process.exit were ever non-terminal, so we never bind on a refuse.
             if (decision === 'refuse')
                 return;
+            posture = decision;
         }
         // If requested, run the MCP client-side tests now that all variables are ready
         if (useTestMcpClient) {
@@ -313,38 +316,65 @@ Docs & source: https://github.com/agigante80/actual-mcp-server`);
                 process.exit(1);
             }
         }
-        // Startup banner — skip in stdio mode (stdout writes corrupt JSON-RPC framing)
-        if (!useStdio) {
-            logger.info('---------');
-            logger.info('🟡 MCP SERVER INFO');
-            logger.info(`• Server Description:   ${SERVER_DESCRIPTION}`);
-            // #626: the real mode, computed with the same blank-means-off rules as the
-            // posture check. MCP_SSE_AUTHORIZATION stays untrimmed: a whitespace-only
-            // value is still a live credential there.
-            const { staticTokensConfigured } = await import('./auth/static-tokens.js');
-            const authMode = describeAuthMode({
-                oidcEnabled: process.env.AUTH_PROVIDER === 'oidc',
-                hasStaticTokens: staticTokensConfigured(process.env.MCP_STATIC_TOKENS),
-                hasSseAuthorization: !!process.env.MCP_SSE_AUTHORIZATION,
-            });
-            logger.info(`• Auth mode:            ${authMode}`);
-            logger.info(`• Capabilities:         ${Object.keys(capabilities).join(', ')}`);
-            logger.info(`• Tools:                ${implementedTools.join(', ') || 'none'}`);
-            logger.info(`• Server Instructions:  ${serverInstructionsText}`);
-            logger.info(`• MCP endpoint (advertised): ${advertisedUrl}`);
-            logger.info('---------');
-        }
+        // #623: the one structured startup record, logged only once the transport is really up
+        // (never on a posture refusal, a port clash or --test-mcp-client). It replaces the old
+        // banner, which printed every tool name and the instructions text. Failure isolated: a
+        // throw here logs one warn line with the error name and never stops a started server.
+        const emitStartupRecord = async (transport) => {
+            try {
+                const [{ buildStartupRecord }, { resolveLogConfig }, { default: config }, { connectionPool }, { getBudgetRegistrySummary }, { existsSync }] = await Promise.all([
+                    import('./lib/startupRecord.js'),
+                    import('./logger.js'),
+                    import('./config.js'),
+                    import('./lib/ActualConnectionPool.js'),
+                    import('./lib/actual-adapter.js'),
+                    import('node:fs'),
+                ]);
+                const policy = actualToolsManager.getToolPolicy();
+                const record = buildStartupRecord({
+                    env: process.env,
+                    logConfig: resolveLogConfig(process.env),
+                    budgets: getBudgetRegistrySummary(),
+                    tools: {
+                        published: actualToolsManager.getPublishedToolNames().length,
+                        registered: actualToolsManager.getRegisteredToolCount(),
+                        policy: { toolsets: policy.toolsets, readOnly: policy.readOnly },
+                    },
+                    posture,
+                    actualApiVerbose: config.ACTUAL_API_VERBOSE,
+                    // From the pool, not config: an empty config value parses to NaN (#623 gate).
+                    limits: {
+                        opTimeoutMs: config.ACTUAL_OP_TIMEOUT_MS,
+                        maxSessions: connectionPool.getStats().maxConcurrent,
+                        idleTimeoutMs: connectionPool.getIdleTimeoutMinutes() * 60000,
+                    },
+                    runtime: {
+                        container: existsSync('/.dockerenv') || !!process.env.container,
+                        timezone: Intl.DateTimeFormat().resolvedOptions().timeZone,
+                        utcOffsetMinutes: -new Date().getTimezoneOffset(),
+                    },
+                    transport,
+                });
+                logger.info('sys_startup', record);
+            }
+            catch (err) {
+                logger.warn('sys_startup record failed', { error: err instanceof Error ? err.name : 'unknown' });
+            }
+        };
         if (useHttp) {
-            logger.info('Mode: HTTP');
+            // The listen callback is synchronous; the record is fire-and-forget from there.
             await startHttpServer(mcp, PORT, HTTP_PATH, capabilities, implementedTools, SERVER_DESCRIPTION, serverInstructionsText, toolSchemas, version, 
             // bind host (ensure server accepts connections on that interface)
             bindHost, 
             // advertised URL shown to clients
-            advertisedUrl);
+            advertisedUrl, (listener) => {
+                void emitStartupRecord({ kind: 'http', bindHost, path: HTTP_PATH, advertisedUrl, listener });
+            });
         }
         else if (useStdio) {
             logger.debug('Mode: stdio');
             await startStdioServer(mcp, capabilities, implementedTools, SERVER_DESCRIPTION, serverInstructionsText, toolSchemas, version);
+            await emitStartupRecord({ kind: 'stdio' });
         }
         else {
             logger.error('❌ Please specify a transport mode: --http or --stdio');

package/dist/src/lib/actual-adapter.js

@@ -19,7 +19,7 @@ import { findMatchingRule } from './rule-matching.js';
 import logger from '../logger.js';
 import { checkServerVersionOnce } from './server-version-guard.js';
 import config from '../config.js';
-import { formatBudgetRegistrySummary, logSafeOrigin, parseBudgetRegistry } from './budget-registry.js';
+import { formatBudgetRegistrySummary, logSafeOrigin, parseBudgetRegistry, summarizeBudgetRegistry } from './budget-registry.js';
 import { getPreferredBudgetSyncId, setPreferredBudgetSyncId, pickAllowedPreferredBudget } from './budget-preference-store.js';
 import { requestContext } from './requestContext.js';
 import { connectionPool } from './ActualConnectionPool.js';
@@ -40,6 +40,10 @@ const budgetRegistry = parseBudgetRegistry(process.env, {
 setLoginsSpanServers(new Set([...budgetRegistry.values()].map((b) => JSON.stringify([b.serverUrl, b.password || '']))).size > 1);
 // #621: counts and schemes only; budget names and server hosts stay out of the startup log.
 logger.info(`[ADAPTER] ${formatBudgetRegistrySummary(budgetRegistry)}`);
+/** #623: the registry's counts and schemes for the startup record. Reads config only, never Actual. */
+export function getBudgetRegistrySummary() {
+    return summarizeBudgetRegistry(budgetRegistry);
+}
 /**
  * Per-session active budget. Map from sessionId to lowercased budget key
  * (matches the keys in budgetRegistry).

package/dist/src/lib/budget-registry.js

@@ -42,13 +42,13 @@ export function logSafeOrigin(url) {
     }
 }
 /**
- * #621: the startup registry line, counts and schemes only, so no budget name, host or
- * credential reaches the log. Servers are counted by the same [serverUrl, password] key
+ * #621 / #623: counts and schemes only, from PARSED URLs, so no budget name, host or credential
+ * can leave through it. Servers are counted by the same [serverUrl, password] key
  * setLoginsSpanServers uses, so the two can never disagree. Never throws.
  */
-export function formatBudgetRegistrySummary(registry) {
+export function summarizeBudgetRegistry(registry) {
     const budgets = [...registry.values()];
-    const servers = new Set(budgets.map((b) => JSON.stringify([b.serverUrl, b.password || '']))).size;
+    const distinctServers = new Set(budgets.map((b) => JSON.stringify([b.serverUrl, b.password || '']))).size;
     const schemes = new Set();
     for (const b of budgets) {
         let scheme;
@@ -61,7 +61,12 @@ export function formatBudgetRegistrySummary(registry) {
         }
         schemes.add(scheme);
     }
-    return `Budget registry: ${budgets.length} budget(s) across ${servers} server(s) (${[...schemes].sort().join(', ')})`;
+    return { count: budgets.length, distinctServers, schemes: [...schemes].sort() };
+}
+/** #621: the startup registry line, built from summarizeBudgetRegistry. Never throws. */
+export function formatBudgetRegistrySummary(registry) {
+    const { count, distinctServers, schemes } = summarizeBudgetRegistry(registry);
+    return `Budget registry: ${count} budget(s) across ${distinctServers} server(s) (${schemes.join(', ')})`;
 }
 /**
  * Parse the budget registry from environment variables.

package/dist/src/lib/startupRecord.js

@@ -0,0 +1,141 @@
+// #623: the one structured startup record, `sys_startup`, logged at info on both transports
+// after the server has really started. Built by a pure allowlist function: every input is
+// injected, so it reads no env, no config and no Actual, and a field that is not listed in
+// STARTUP_RECORD_KEYS cannot appear. It imports neither src/index.ts, src/server/* nor the tool
+// registry (src/tools/server_info.ts imports this file, so importing the registry would cycle).
+import { INSTALLED_API_VERSION, resolveInstalledVersion } from './installed-api-version.js';
+import { getMcpServerVersion } from './mcp-version.js';
+import { describeAuthMode, isLoopbackHost } from './authPosture.js';
+import { logSafeOrigin } from './budget-registry.js';
+import { parseStaticTokensConfig, staticTokensConfigured } from '../auth/static-tokens.js';
+/** Resolved once at module load: the walk does blocking file reads. The SDK exports no root
+ *  path, so the resolvable subpath is passed explicitly (#445). */
+const MCP_SDK_RESOLVED = resolveInstalledVersion('@modelcontextprotocol/sdk', '@modelcontextprotocol/sdk/server/index.js');
+/** Every key the record may hold, by group. `event` is the one top-level scalar. */
+export const STARTUP_RECORD_KEYS = {
+    event: [],
+    versions: ['server', 'node', 'actualApi', 'mcpSdk'],
+    runtime: ['platform', 'arch', 'container', 'nodeEnv', 'timezone', 'utcOffsetMinutes'],
+    logging: ['level', 'format', 'fileSink'],
+    privacy: ['actualApiVerbose'],
+    paths: ['logDirCustom', 'dataDirCustom'],
+    transport: ['kind', 'bindScope', 'port', 'path', 'scheme', 'advertisedOrigin'],
+    auth: ['mode', 'posture', 'sharedBearerAccepted', 'issuerOrigin', 'staticPrincipals'],
+    tools: ['total', 'registered', 'readOnly', 'toolsets'],
+    budgets: ['count', 'distinctServers', 'schemes'],
+    limits: ['opTimeoutMs', 'maxSessions', 'idleTimeoutMs', 'keepAliveMs'],
+};
+/** Keys present only on the HTTP transport, as `group.key`. */
+export const STARTUP_RECORD_HTTP_ONLY_KEYS = [
+    'transport.bindScope', 'transport.port', 'transport.path', 'transport.scheme',
+    'transport.advertisedOrigin', 'limits.keepAliveMs',
+];
+/** Keys present only under AUTH_PROVIDER=oidc, as `group.key`. */
+export const STARTUP_RECORD_OIDC_ONLY_KEYS = ['auth.issuerOrigin'];
+/** Shared with actual_server_info, so the tool and the record can never report different
+ *  resolved versions or tool counts. */
+export function collectVersionAndToolFacts(counts) {
+    return {
+        versions: {
+            server: getMcpServerVersion(),
+            node: process.version,
+            actualApi: INSTALLED_API_VERSION,
+            mcpSdk: MCP_SDK_RESOLVED,
+        },
+        tools: {
+            total: counts.published,
+            registered: counts.registered,
+            readOnly: counts.policy.readOnly,
+            toolsets: [...counts.policy.toolsets],
+        },
+    };
+}
+function bindScopeOf(host) {
+    if (isLoopbackHost(host))
+        return 'loopback';
+    if (!host || host === '0.0.0.0' || host === '::')
+        return 'all-interfaces';
+    return 'specific';
+}
+/** A count of the configured static principals. config.ts already refused a malformed value at
+ *  startup, so a throw here only means "not countable": 0, never a crash. */
+function countStaticPrincipals(raw) {
+    try {
+        return Object.keys(parseStaticTokensConfig(raw)).length;
+    }
+    catch {
+        return 0;
+    }
+}
+/**
+ * Build the `sys_startup` metadata. Origins go through logSafeOrigin (never throws, drops
+ * userinfo, path and query); budget facts arrive as counts; no hostname, bind address, path,
+ * budget or principal name, tool name or instructions text is ever read into it.
+ */
+export function buildStartupRecord(inputs) {
+    const { env, transport } = inputs;
+    const oidcEnabled = env.AUTH_PROVIDER === 'oidc';
+    const facts = collectVersionAndToolFacts(inputs.tools);
+    const http = transport.kind === 'http' ? transport : undefined;
+    return {
+        event: 'sys_startup',
+        versions: facts.versions,
+        runtime: {
+            platform: process.platform,
+            arch: process.arch,
+            container: inputs.runtime.container,
+            nodeEnv: env.NODE_ENV ?? null,
+            timezone: inputs.runtime.timezone,
+            utcOffsetMinutes: inputs.runtime.utcOffsetMinutes,
+        },
+        logging: {
+            level: inputs.logConfig.level,
+            format: inputs.logConfig.useJson ? 'json' : 'pretty',
+            // The same rule as STORE_LOGS in src/logger.ts.
+            fileSink: env.MCP_BRIDGE_STORE_LOGS === 'true',
+        },
+        privacy: {
+            actualApiVerbose: inputs.actualApiVerbose,
+        },
+        paths: {
+            logDirCustom: !!env.MCP_BRIDGE_LOG_DIR,
+            dataDirCustom: !!env.MCP_BRIDGE_DATA_DIR,
+        },
+        transport: http
+            ? {
+                kind: 'http',
+                bindScope: bindScopeOf(http.bindHost),
+                port: http.listener.port,
+                path: http.path,
+                scheme: http.listener.scheme,
+                advertisedOrigin: logSafeOrigin(http.advertisedUrl),
+            }
+            : { kind: 'stdio' },
+        auth: {
+            // #626: the same blank-means-off rules as the posture check. MCP_SSE_AUTHORIZATION stays
+            // untrimmed: a whitespace-only value is still a live credential there.
+            mode: describeAuthMode({
+                oidcEnabled: env.AUTH_PROVIDER === 'oidc',
+                hasStaticTokens: staticTokensConfigured(env.MCP_STATIC_TOKENS),
+                hasSseAuthorization: !!env.MCP_SSE_AUTHORIZATION,
+            }),
+            posture: inputs.posture,
+            // Under OIDC the bearer entries are never built (httpServer.ts), so the token is not accepted.
+            sharedBearerAccepted: !oidcEnabled && !!env.MCP_SSE_AUTHORIZATION,
+            ...(oidcEnabled ? { issuerOrigin: logSafeOrigin(env.OIDC_ISSUER ?? '') } : {}),
+            staticPrincipals: oidcEnabled ? 0 : countStaticPrincipals(env.MCP_STATIC_TOKENS),
+        },
+        tools: facts.tools,
+        budgets: {
+            count: inputs.budgets.count,
+            distinctServers: inputs.budgets.distinctServers,
+            schemes: [...inputs.budgets.schemes],
+        },
+        limits: {
+            opTimeoutMs: inputs.limits.opTimeoutMs,
+            maxSessions: inputs.limits.maxSessions,
+            idleTimeoutMs: inputs.limits.idleTimeoutMs,
+            ...(http ? { keepAliveMs: http.listener.keepAliveMs } : {}),
+        },
+    };
+}

package/dist/src/server/httpServer.js

@@ -29,6 +29,7 @@ import { resolveStaticTokens, matchBearerToken, LEGACY_STATIC_PRINCIPAL } from '
 import { runAclPreflight } from '../auth/budget-acl-dynamic.js';
 import { hostHeaderValidation } from '@modelcontextprotocol/sdk/server/middleware/hostHeaderValidation.js';
 import { resolveAllowedHosts } from '../lib/authPosture.js';
+import { logSafeOrigin } from '../lib/budget-registry.js';
 import * as https from 'node:https';
 import { finished } from 'node:stream';
 import * as fs from 'node:fs';
@@ -74,6 +75,8 @@ function capPrincipal(req) {
     }
     return req.staticPrincipal;
 }
+/** Idle keep-alive for the HTTP listener, in milliseconds. */
+export const HTTP_KEEP_ALIVE_TIMEOUT_MS = 65000;
 export async function startHttpServer(mcp, port, httpPath, capabilities, // was passed by index.ts
 implementedTools, // was passed by index.ts
 serverDescription, // was passed by index.ts
@@ -81,7 +84,7 @@ instructions, // was passed by index.ts (#560: built once there)
 toolSchemas, // was passed by index.ts
 version, // server version from package.json
 bindHost = 'localhost', // #239: interface to bind; forwarded to listen()
-advertisedUrl) {
+advertisedUrl, onListening) {
     // #572: resolve MCP_STATIC_TOKENS (token variables, budget names) before anything
     // binds, so a bad entry refuses startup like an unreadable TLS key. The registry is
     // read outside any request context, so it is the full, unfiltered list. config.ts
@@ -322,7 +325,7 @@ advertisedUrl) {
                 requiredScopes,
                 showErrorDetails: process.env.NODE_ENV !== 'production',
             }), budgetAclMiddleware);
-            logger.info(`[OIDC] JWT authentication enabled. Issuer: ${config.OIDC_ISSUER}`);
+            logger.info(`[OIDC] JWT authentication enabled. Issuer: ${logSafeOrigin(config.OIDC_ISSUER ?? '')}`);
             // #462 audit line: which header carries the JWT and where the keys come from.
             logger.info('[OIDC] token source and JWKS mode', {
                 tokenSource: config.OIDC_TOKEN_SOURCE,
@@ -1122,7 +1125,14 @@ advertisedUrl) {
                 `MCP_HTTPS_CERT=${config.MCP_HTTPS_CERT}, MCP_HTTPS_KEY=${config.MCP_HTTPS_KEY}. Cause: ${cause}`);
         }
     }
-    const listener = (tlsOptions ? https.createServer(tlsOptions, app) : app).listen(port, bindHost, () => {
+    const listener = (tlsOptions ? https.createServer(tlsOptions, app) : app).listen(port, bindHost, (err) => {
+        // #623: Express 5's app.listen also registers this callback as the server's 'error'
+        // handler, so a taken port (EADDRINUSE) lands HERE with the error. Without this rethrow it
+        // logged "listening", emitted sys_startup, and the process drained out with exit 0. The
+        // rethrow reaches the uncaughtException handler (sys_crash, exit 1), the same path the
+        // https.createServer branch takes, which has no error listener at all.
+        if (err)
+            throw err;
         const advertised = advertisedUrl || `${scheme}://${serverIp}:${port}${httpPath}`;
         // #239: when bound to a specific (non all-interfaces) host the server is NOT on
         // loopback, so point the health hint at the actual bind host instead of localhost.
@@ -1131,7 +1141,7 @@ advertisedUrl) {
         // #625: one structured record through the module logger instead of three console.info lines.
         httpLog.info(`MCP Streamable HTTP Server listening on ${port}; MCP endpoint: ${advertised} (health: ${health})`, { port, endpoint: advertised, health });
         if (config.AUTH_PROVIDER === 'oidc') {
-            logger.info(`🔒 OIDC authentication enabled (JWT Bearer token required; issuer: ${config.OIDC_ISSUER})`);
+            logger.info(`🔒 OIDC authentication enabled (JWT Bearer token required; issuer: ${logSafeOrigin(config.OIDC_ISSUER ?? '')})`);
             // #345: name the userNames the ACL can match, once, at boot. Deliberately
             // fire-and-forget INSIDE the listen callback: the server is already
             // accepting connections, so a slow or unreachable Actual delays nothing,
@@ -1150,11 +1160,22 @@ advertisedUrl) {
         else {
             logger.warn(`⚠️  HTTP authentication disabled (no MCP_SSE_AUTHORIZATION, MCP_STATIC_TOKENS or OIDC configured)`);
         }
+        // #623: keepAliveTimeout is assigned below, synchronously after listen() returns, so it is
+        // already set when this callback fires. A throw from the record must never take down a
+        // server that is already accepting connections.
+        if (onListening) {
+            try {
+                onListening({ port, scheme, keepAliveMs: listener.keepAliveTimeout });
+            }
+            catch (err) {
+                logger.warn('sys_startup record failed', { error: err instanceof Error ? err.name : 'unknown' });
+            }
+        }
     });
     // Configure keep-alive to maintain persistent connections
-    listener.keepAliveTimeout = 65000; // 65 seconds (slightly higher than typical client timeout)
-    listener.headersTimeout = 66000; // 66 seconds (must be higher than keepAliveTimeout)
-    logger.info(`⏱️  HTTP keep-alive enabled (timeout: ${listener.keepAliveTimeout}ms)`);
+    // #623: the value is reported in the sys_startup record (limits.keepAliveMs), not its own line.
+    listener.keepAliveTimeout = HTTP_KEEP_ALIVE_TIMEOUT_MS; // slightly higher than typical client timeout
+    listener.headersTimeout = HTTP_KEEP_ALIVE_TIMEOUT_MS + 1000; // must be higher than keepAliveTimeout
     // Cleanup on server shutdown
     const cleanup = async () => {
         logger.info('[SERVER] Shutting down, cleaning up sessions...');

package/dist/src/tools/server_info.js

@@ -3,12 +3,7 @@ import { readFileSync } from 'fs';
 import { fileURLToPath } from 'url';
 import { dirname, join } from 'path';
 import actualToolsManager from '../actualToolsManager.js';
-import { INSTALLED_API_VERSION, resolveInstalledVersion } from '../lib/installed-api-version.js';
-import { getMcpServerVersion } from '../lib/mcp-version.js';
-/** Resolved once at module load, not per call: the walk does blocking file reads
- *  and this tool can be called in a loop. The SDK exports no root path, so the
- *  resolvable subpath is passed explicitly (#445). */
-const MCP_SDK_RESOLVED = resolveInstalledVersion('@modelcontextprotocol/sdk', '@modelcontextprotocol/sdk/server/index.js');
+import { collectVersionAndToolFacts } from '../lib/startupRecord.js';
 const __filename = fileURLToPath(import.meta.url);
 const __dirname = dirname(__filename);
 // Name, description and declared dependencies come from package.json. The version does
@@ -41,15 +36,22 @@ Use this to check server status, verify version compatibility, or debug issues.`
     call: async (_args, _meta) => {
         const uptime = process.uptime();
         const uptimeFormatted = `${Math.floor(uptime / 3600)}h ${Math.floor((uptime % 3600) / 60)}m ${Math.floor(uptime % 60)}s`;
+        const policy = actualToolsManager.getToolPolicy();
+        // #623: the same resolved versions and counts the sys_startup record logs.
+        const facts = collectVersionAndToolFacts({
+            published: actualToolsManager.getPublishedToolNames().length,
+            registered: actualToolsManager.getToolNames().length,
+            policy,
+        });
         return {
             server: {
                 name: packageInfo.name,
-                version: getMcpServerVersion(),
+                version: facts.versions.server,
                 description: packageInfo.description,
                 transport: process.env.MCP_STDIO_MODE === 'true' ? 'stdio' : 'http',
             },
             runtime: {
-                node: process.version,
+                node: facts.versions.node,
                 platform: process.platform,
                 arch: process.arch,
             },
@@ -66,8 +68,8 @@ Use this to check server status, verify version compatibility, or debug issues.`
             dependencies: {
                 mcpSdk: packageInfo.dependencies?.['@modelcontextprotocol/sdk'] ?? 'unknown',
                 actualApi: packageInfo.dependencies?.['@actual-app/api'] ?? 'unknown',
-                ...(MCP_SDK_RESOLVED ? { mcpSdkResolved: MCP_SDK_RESOLVED } : {}),
-                ...(INSTALLED_API_VERSION ? { actualApiResolved: INSTALLED_API_VERSION } : {}),
+                ...(facts.versions.mcpSdk ? { mcpSdkResolved: facts.versions.mcpSdk } : {}),
+                ...(facts.versions.actualApi ? { actualApiResolved: facts.versions.actualApi } : {}),
             },
             status: {
                 uptime: uptimeFormatted,
@@ -80,9 +82,9 @@ Use this to check server status, verify version compatibility, or debug issues.`
             tools: {
                 // total is what this process PUBLISHES; registered is what exists. They differ
                 // when MCP_TOOLSETS, MCP_TOOLS or MCP_READ_ONLY narrows the surface (#483).
-                total: actualToolsManager.getPublishedToolNames().length,
-                registered: actualToolsManager.getToolNames().length,
-                policy: actualToolsManager.getToolPolicy(),
+                total: facts.tools.total,
+                registered: facts.tools.registered,
+                policy,
             },
         };
     },

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "actual-mcp-server",
   "displayName": "Actual MCP Server",
-  "version": "0.26.1",
+  "version": "0.27.0",
   "mcpName": "io.github.agigante80/actual-mcp-server",
   "engines": {
     "node": ">=22.0.0",
@@ -31,7 +31,7 @@
     "verify-tools": "npm run build && node scripts/verify-tools.js",
     "check:coverage": "node scripts/list-actual-api-methods.mjs",
     "direct-sync": "node scripts/direct-sync/bank-sync-direct.mjs",
-    "test:unit-js": "node tests/unit/transactions_create.test.js && node tests/unit/transactions_aggregate.test.js && node tests/unit/account_flow_summary.test.js && node tests/unit/recurring_expenses_summary.test.js && node tests/unit/generated_tools.smoke.test.js &&node tests/unit/schema_validation.test.js && node tests/unit/schema_json_openai_compat.test.js && node tests/unit/config_https_validation.test.js && node tests/unit/config_data_dir.test.js && node tests/unit/config_drift.test.js && node tests/unit/port_alignment.test.js && node tests/unit/dockerfile_data_dir_alignment.test.js && node tests/unit/unraid_template_alignment.test.js && node tests/unit/entrypoint_invariants.test.js && node tests/unit/e2e_spec_collection.test.js && node tests/unit/compose_profile_sync.test.js && node tests/unit/install_snippets.test.js && node tests/unit/advertised_tools_sync.test.js && node tests/unit/new_tool_completeness.test.js && node tests/unit/knip_config.test.js && node tests/unit/readme_stats_sync.test.js && node tests/unit/config_insecure_upstream.test.js && node tests/unit/workflow_release_guards.test.js && node tests/unit/report_train_failure.test.js && node tests/unit/unit_chain_membership.test.js && node tests/unit/api_surface_drift.test.js && node tests/unit/write_effect_audit_staleness.test.js && node tests/unit/write_effect_audit_membership.test.js && node tests/unit/tool_annotations.test.js && node tests/unit/tool_id_schema_drift.test.js && node tests/unit/filter_id_resolution.test.js && node tests/unit/filter_id_tool_wiring.test.js && node tests/unit/api_coverage_baseline.test.js && node tests/unit/train_preflight.test.js && node tests/unit/verify_published_artifacts.test.js && node tests/unit/report_train_stale.test.js && node tests/unit/stdio_framing_check.test.js && node tests/unit/server_info.test.js && node tests/unit/transfers_create.test.js && node tests/unit/bot_target_branch.test.js && node tests/unit/auth_posture.test.js && node tests/unit/auth_posture_wiring.test.js && node tests/unit/auth-acl.test.js && node tests/unit/bug76.test.js && node tests/unit/budgets_setAmount.test.js && node tests/unit/adapter_set_budget_batch.test.js && node tests/unit/budget_updates_batch.test.js && node tests/unit/rules_create.test.js && node tests/unit/adapter_rule_reference_guard.test.js && node tests/unit/rules_create_batch.test.js && node tests/unit/budgets_hold_for_next_month.test.js && node tests/unit/budgets_transfer.test.js && node tests/unit/transactions_uncategorized.test.js && node tests/unit/httpServer_session_init.test.js && node tests/unit/httpServer_session_not_found.test.js && node tests/unit/httpServer_init_failure_report.test.js && node tests/unit/stdio_init_failure_report.test.js && node tests/unit/manual_mcp_client_retry.test.js && node tests/unit/manual_mcp_client_session.test.js && node tests/unit/manual_mcp_client_circuit.test.js && node tests/unit/manual_runner_killswitch.test.js && node tests/unit/adapter_auth_rate_limit.test.js && node tests/unit/adapter_session_reuse.test.js && node tests/unit/retry_classifier.test.js && node tests/unit/adapter_module_surface.test.js && node tests/unit/adapter_nonidempotent_no_retry.test.js && node tests/unit/pool_liveness.test.js && node tests/unit/pool_shutdown_all.test.js && node tests/unit/query_where_operators.test.js && node tests/unit/query_run_validation.test.js && node tests/unit/adapter_with_write_session.test.js && node tests/unit/category_groups_delete.test.js && node tests/unit/rules_delete.test.js && node tests/unit/schedules_delete.test.js && node tests/unit/schedules_dates.test.js && node tests/unit/bank_sync.test.js && node tests/unit/accounts_delete.test.js && node tests/unit/update_tools_not_found.test.js && node tests/unit/accounts_close.test.js && node tests/unit/accounts_reopen.test.js && node tests/unit/payees_delete.test.js && node tests/unit/payees_merge.test.js && node tests/unit/rules_create_or_update.test.js && node tests/unit/unhandled-rejection.test.js && node tests/unit/rejection-allowlist-purity.test.js && node tests/unit/httpServer_bearer_auth.test.js && node tests/unit/session_ownership.test.js && node tests/unit/httpServer_oidc_audience.test.js && node tests/unit/httpServer_oidc_auth_verification.test.js && node tests/unit/httpServer_oidc_jwks_discovery.test.js && node tests/unit/oidc_resource_identifier.test.js && node tests/unit/httpServer_oidc_resource_metadata.test.js && node tests/unit/oidc_error_cause.test.js && node tests/unit/httpServer_oidc_error_body.test.js && node tests/unit/oidc_token_source.test.js && node tests/unit/config_oidc_assertion_refines.test.js && node tests/unit/httpServer_oidc_assertion_mode.test.js && node tests/unit/httpServer_body_limit.test.js && node tests/unit/httpErrorHandler.test.js && node tests/unit/httpServer_error_handler_wiring.test.js && node tests/unit/httpServer_trust_proxy.test.js && node tests/unit/httpServer_batch_cap.test.js && node tests/unit/dotenv_stdout_quiet.test.js && node tests/unit/httpServer_bind_host.test.js && node tests/unit/adapter_write_pool_cooperation.test.js && node tests/unit/adapter_drain_listing_cache.test.js && node tests/unit/budget_acl_enforcement.test.js && node tests/unit/budget_acl_listing.test.js && node tests/unit/budget_selection_precondition.test.js && node tests/unit/multi_server_budget_selection.test.js && node tests/unit/static_tokens.test.js && node tests/unit/httpServer_static_tokens.test.js && node tests/unit/httpServer_host_validation.test.js && node tests/unit/multi_server_budget_selection_stdio.test.js && node tests/unit/api_login_fetch.test.js && node tests/unit/api_login_verbose_optin.test.js && node tests/unit/config_actual_api_verbose.test.js && node tests/unit/multi_server_session_open_http.test.js && node tests/unit/budget_load_abandonment.test.js && node tests/unit/budget_loader_postcondition.test.js && node tests/unit/budget_loader_import_allowlist.test.js && node tests/unit/budget_import_tracking.test.js && node tests/unit/pool_shutdown_under_lock.test.js && node tests/unit/api_lock_affinity.test.js && node tests/unit/commit_message_closing_keyword.test.js && node tests/unit/write_queue_stranding.test.js && node tests/unit/write_queue_stranded_bound.test.js && node tests/unit/budget_preference_store.test.js && node tests/unit/budget_preference_restore.test.js && node tests/unit/tags_list.test.js && node tests/unit/tags_create.test.js && node tests/unit/tags_update.test.js && node tests/unit/tags_delete.test.js && node tests/unit/notes_get.test.js && node tests/unit/notes_update.test.js && node tests/unit/payees_common_list.test.js && node tests/unit/transactions_update_guard.test.js && node tests/unit/transactions_update_splits.test.js && node tests/unit/transactions_update_split_convert.test.js && node tests/unit/entities_search.test.js && node tests/unit/transactions_import_schema.test.js && node tests/unit/tool_schema_shape.test.js && node tests/unit/zod_error_format.test.js && node tests/unit/transactions_update_batch.test.js && node tests/unit/tool_count_sync.test.js && node tests/unit/stdio_transport.test.js && node tests/unit/stdio_budget_switch.test.js && node tests/unit/logger_structured.test.js && node tests/unit/logger_redaction.test.js && node tests/unit/tool_content_logging.test.js && node tests/unit/adapter_error_logging.test.js && node tests/unit/logger_correlation.test.js && node tests/unit/check_coverage.test.js && node tests/unit/adapter_op_timeout.test.js && node tests/unit/adapter_write_queue_wakeup.test.js && node tests/unit/ci_workflow_guards.test.js && node tests/unit/node_version_guard.test.js && node tests/unit/node_version_drift.test.js && node tests/unit/playwright_version_drift.test.js && node tests/unit/observability_smoke.test.js && node tests/unit/residue_pattern.test.js && node tests/unit/harness_cleanup.test.js && node tests/unit/harness_stdio_data_dir.test.js && node tests/unit/batch_uncategorized_cleanup.test.js && node tests/unit/rules_stage342_cleanup.test.js && node tests/unit/residue_unreadable.test.js && node tests/unit/dual_transport_gate.test.js && node tests/unit/manual_assertions_use_helper.test.js && node tests/unit/server_version_guard.test.js && node tests/unit/server_version_probe_outside_op_timeout.test.js && node tests/unit/payee_rules_reference_filter.test.js && node tests/unit/oidc_metadata_discovery.test.js && node tests/unit/httpServer_oauth_metadata_route.test.js && node tests/unit/httpServer_mcp_info_route.test.js && node tests/unit/residue_sweep_balance_account.test.js && node tests/unit/tool_factory.test.js && node tests/unit/budget_registry_parse.test.js && node tests/unit/server_no_console.test.js && node tests/unit/auth_mode.test.js && node tests/unit/process_handlers.test.js && node tests/unit/process_handlers_child.test.js && node tests/unit/server_identity.test.js && node tests/unit/budgets_serverurl_redaction.test.js && node tests/unit/budgets_serverurl_redaction_default.test.js && node tests/unit/preferences_get.test.js && node tests/unit/budgets_export.test.js && node tests/unit/budgets_import.test.js && node tests/unit/budgets_import_syncid.test.js && node tests/unit/budget_acl_dynamic.test.js && node tests/unit/budget_acl_identity_map.test.js && node tests/unit/budget_acl_userinfo.test.js && node tests/unit/acl_e2e_fixture_contract.test.js && node tests/unit/budget_acl_middleware.test.js && node tests/unit/rules_stage.test.js && node tests/unit/oidc_scope_list.test.js && node tests/unit/get_context.test.js && node tests/unit/contributor_docs.test.js && node tests/unit/toolsets.test.js && node tests/unit/toolsets_entrypoint.test.js && node tests/unit/tools_list_size_budget.test.js && node tests/unit/rules_update_schedules_schema.test.js && node tests/unit/schedules_update_amount_guard.test.js && node tests/unit/source_text_helper.test.js && node tests/unit/transport_onerror.test.js && node tests/unit/adapter_transaction_batch_abort.test.js && node tests/unit/transactions_merge_adapter.test.js && node tests/unit/schedules_dead_conditions.test.js && node tests/unit/session_ownership_express.test.js && node tests/unit/pool_orphan_sweep.test.js && node tests/unit/session_budget_state_cleanup.test.js && node tests/unit/http_session_delete.test.js && node tests/unit/budget_acl_parse.test.js && node tests/unit/server_instructions.test.js && node tests/unit/query_run_empty_hint.test.js && node tests/unit/session_admission_race.test.js && node tests/unit/pool_admission_reservation.test.js && node tests/unit/config_max_sessions_per_principal.test.js && node tests/unit/session_principal_cap.test.js && node tests/unit/schema_published_parity.test.js && node tests/unit/manual_borrowed_category.test.js && node tests/unit/manual_budget_no_borrowed_writes.test.js && node tests/unit/refresh_test_budget_snapshot.test.js && node tests/unit/docs_check.test.js && node tests/unit/docs_markers.test.js && node tests/unit/docs_links_fixture.test.js && node tests/unit/docs_index.test.js && node tests/unit/docs_tools.test.js && node tests/unit/docs_readme_size.test.js && node tests/unit/template_lockstep.test.js && node tests/unit/client_examples.test.js && node tests/unit/mcp_server_json.test.js",
+    "test:unit-js": "node tests/unit/transactions_create.test.js && node tests/unit/transactions_aggregate.test.js && node tests/unit/account_flow_summary.test.js && node tests/unit/recurring_expenses_summary.test.js && node tests/unit/generated_tools.smoke.test.js &&node tests/unit/schema_validation.test.js && node tests/unit/schema_json_openai_compat.test.js && node tests/unit/config_https_validation.test.js && node tests/unit/config_data_dir.test.js && node tests/unit/config_drift.test.js && node tests/unit/port_alignment.test.js && node tests/unit/dockerfile_data_dir_alignment.test.js && node tests/unit/unraid_template_alignment.test.js && node tests/unit/entrypoint_invariants.test.js && node tests/unit/e2e_spec_collection.test.js && node tests/unit/compose_profile_sync.test.js && node tests/unit/install_snippets.test.js && node tests/unit/advertised_tools_sync.test.js && node tests/unit/new_tool_completeness.test.js && node tests/unit/knip_config.test.js && node tests/unit/readme_stats_sync.test.js && node tests/unit/config_insecure_upstream.test.js && node tests/unit/workflow_release_guards.test.js && node tests/unit/report_train_failure.test.js && node tests/unit/unit_chain_membership.test.js && node tests/unit/api_surface_drift.test.js && node tests/unit/write_effect_audit_staleness.test.js && node tests/unit/write_effect_audit_membership.test.js && node tests/unit/tool_annotations.test.js && node tests/unit/tool_id_schema_drift.test.js && node tests/unit/filter_id_resolution.test.js && node tests/unit/filter_id_tool_wiring.test.js && node tests/unit/api_coverage_baseline.test.js && node tests/unit/train_preflight.test.js && node tests/unit/verify_published_artifacts.test.js && node tests/unit/report_train_stale.test.js && node tests/unit/stdio_framing_check.test.js && node tests/unit/server_info.test.js && node tests/unit/transfers_create.test.js && node tests/unit/bot_target_branch.test.js && node tests/unit/auth_posture.test.js && node tests/unit/auth_posture_wiring.test.js && node tests/unit/auth-acl.test.js && node tests/unit/bug76.test.js && node tests/unit/budgets_setAmount.test.js && node tests/unit/adapter_set_budget_batch.test.js && node tests/unit/budget_updates_batch.test.js && node tests/unit/rules_create.test.js && node tests/unit/adapter_rule_reference_guard.test.js && node tests/unit/rules_create_batch.test.js && node tests/unit/budgets_hold_for_next_month.test.js && node tests/unit/budgets_transfer.test.js && node tests/unit/transactions_uncategorized.test.js && node tests/unit/httpServer_session_init.test.js && node tests/unit/httpServer_session_not_found.test.js && node tests/unit/httpServer_init_failure_report.test.js && node tests/unit/stdio_init_failure_report.test.js && node tests/unit/manual_mcp_client_retry.test.js && node tests/unit/manual_mcp_client_session.test.js && node tests/unit/manual_mcp_client_circuit.test.js && node tests/unit/manual_runner_killswitch.test.js && node tests/unit/adapter_auth_rate_limit.test.js && node tests/unit/adapter_session_reuse.test.js && node tests/unit/retry_classifier.test.js && node tests/unit/adapter_module_surface.test.js && node tests/unit/adapter_nonidempotent_no_retry.test.js && node tests/unit/pool_liveness.test.js && node tests/unit/pool_shutdown_all.test.js && node tests/unit/query_where_operators.test.js && node tests/unit/query_run_validation.test.js && node tests/unit/adapter_with_write_session.test.js && node tests/unit/category_groups_delete.test.js && node tests/unit/rules_delete.test.js && node tests/unit/schedules_delete.test.js && node tests/unit/schedules_dates.test.js && node tests/unit/bank_sync.test.js && node tests/unit/accounts_delete.test.js && node tests/unit/update_tools_not_found.test.js && node tests/unit/accounts_close.test.js && node tests/unit/accounts_reopen.test.js && node tests/unit/payees_delete.test.js && node tests/unit/payees_merge.test.js && node tests/unit/rules_create_or_update.test.js && node tests/unit/unhandled-rejection.test.js && node tests/unit/rejection-allowlist-purity.test.js && node tests/unit/httpServer_bearer_auth.test.js && node tests/unit/session_ownership.test.js && node tests/unit/httpServer_oidc_audience.test.js && node tests/unit/httpServer_oidc_auth_verification.test.js && node tests/unit/httpServer_oidc_jwks_discovery.test.js && node tests/unit/oidc_resource_identifier.test.js && node tests/unit/httpServer_oidc_resource_metadata.test.js && node tests/unit/oidc_error_cause.test.js && node tests/unit/httpServer_oidc_error_body.test.js && node tests/unit/oidc_token_source.test.js && node tests/unit/config_oidc_assertion_refines.test.js && node tests/unit/httpServer_oidc_assertion_mode.test.js && node tests/unit/httpServer_body_limit.test.js && node tests/unit/httpErrorHandler.test.js && node tests/unit/httpServer_error_handler_wiring.test.js && node tests/unit/httpServer_trust_proxy.test.js && node tests/unit/httpServer_batch_cap.test.js && node tests/unit/dotenv_stdout_quiet.test.js && node tests/unit/httpServer_bind_host.test.js && node tests/unit/adapter_write_pool_cooperation.test.js && node tests/unit/adapter_drain_listing_cache.test.js && node tests/unit/budget_acl_enforcement.test.js && node tests/unit/budget_acl_listing.test.js && node tests/unit/budget_selection_precondition.test.js && node tests/unit/multi_server_budget_selection.test.js && node tests/unit/static_tokens.test.js && node tests/unit/httpServer_static_tokens.test.js && node tests/unit/httpServer_host_validation.test.js && node tests/unit/multi_server_budget_selection_stdio.test.js && node tests/unit/api_login_fetch.test.js && node tests/unit/api_login_verbose_optin.test.js && node tests/unit/config_actual_api_verbose.test.js && node tests/unit/multi_server_session_open_http.test.js && node tests/unit/budget_load_abandonment.test.js && node tests/unit/budget_loader_postcondition.test.js && node tests/unit/budget_loader_import_allowlist.test.js && node tests/unit/budget_import_tracking.test.js && node tests/unit/pool_shutdown_under_lock.test.js && node tests/unit/api_lock_affinity.test.js && node tests/unit/commit_message_closing_keyword.test.js && node tests/unit/write_queue_stranding.test.js && node tests/unit/write_queue_stranded_bound.test.js && node tests/unit/budget_preference_store.test.js && node tests/unit/budget_preference_restore.test.js && node tests/unit/tags_list.test.js && node tests/unit/tags_create.test.js && node tests/unit/tags_update.test.js && node tests/unit/tags_delete.test.js && node tests/unit/notes_get.test.js && node tests/unit/notes_update.test.js && node tests/unit/payees_common_list.test.js && node tests/unit/transactions_update_guard.test.js && node tests/unit/transactions_update_splits.test.js && node tests/unit/transactions_update_split_convert.test.js && node tests/unit/entities_search.test.js && node tests/unit/transactions_import_schema.test.js && node tests/unit/tool_schema_shape.test.js && node tests/unit/zod_error_format.test.js && node tests/unit/transactions_update_batch.test.js && node tests/unit/tool_count_sync.test.js && node tests/unit/stdio_transport.test.js && node tests/unit/stdio_budget_switch.test.js && node tests/unit/logger_structured.test.js && node tests/unit/logger_redaction.test.js && node tests/unit/tool_content_logging.test.js && node tests/unit/adapter_error_logging.test.js && node tests/unit/logger_correlation.test.js && node tests/unit/check_coverage.test.js && node tests/unit/adapter_op_timeout.test.js && node tests/unit/adapter_write_queue_wakeup.test.js && node tests/unit/ci_workflow_guards.test.js && node tests/unit/node_version_guard.test.js && node tests/unit/node_version_drift.test.js && node tests/unit/playwright_version_drift.test.js && node tests/unit/observability_smoke.test.js && node tests/unit/residue_pattern.test.js && node tests/unit/harness_cleanup.test.js && node tests/unit/harness_stdio_data_dir.test.js && node tests/unit/batch_uncategorized_cleanup.test.js && node tests/unit/rules_stage342_cleanup.test.js && node tests/unit/residue_unreadable.test.js && node tests/unit/dual_transport_gate.test.js && node tests/unit/manual_assertions_use_helper.test.js && node tests/unit/server_version_guard.test.js && node tests/unit/server_version_probe_outside_op_timeout.test.js && node tests/unit/payee_rules_reference_filter.test.js && node tests/unit/oidc_metadata_discovery.test.js && node tests/unit/httpServer_oauth_metadata_route.test.js && node tests/unit/httpServer_mcp_info_route.test.js && node tests/unit/residue_sweep_balance_account.test.js && node tests/unit/tool_factory.test.js && node tests/unit/budget_registry_parse.test.js && node tests/unit/server_no_console.test.js && node tests/unit/auth_mode.test.js && node tests/unit/process_handlers.test.js && node tests/unit/process_handlers_child.test.js && node tests/unit/server_identity.test.js && node tests/unit/budgets_serverurl_redaction.test.js && node tests/unit/budgets_serverurl_redaction_default.test.js && node tests/unit/preferences_get.test.js && node tests/unit/budgets_export.test.js && node tests/unit/budgets_import.test.js && node tests/unit/budgets_import_syncid.test.js && node tests/unit/budget_acl_dynamic.test.js && node tests/unit/budget_acl_identity_map.test.js && node tests/unit/budget_acl_userinfo.test.js && node tests/unit/acl_e2e_fixture_contract.test.js && node tests/unit/budget_acl_middleware.test.js && node tests/unit/rules_stage.test.js && node tests/unit/oidc_scope_list.test.js && node tests/unit/get_context.test.js && node tests/unit/contributor_docs.test.js && node tests/unit/toolsets.test.js && node tests/unit/toolsets_entrypoint.test.js && node tests/unit/startup_record.test.js && node tests/unit/startup_record_child.test.js && node tests/unit/tools_list_size_budget.test.js && node tests/unit/rules_update_schedules_schema.test.js && node tests/unit/schedules_update_amount_guard.test.js && node tests/unit/source_text_helper.test.js && node tests/unit/transport_onerror.test.js && node tests/unit/adapter_transaction_batch_abort.test.js && node tests/unit/transactions_merge_adapter.test.js && node tests/unit/schedules_dead_conditions.test.js && node tests/unit/session_ownership_express.test.js && node tests/unit/pool_orphan_sweep.test.js && node tests/unit/session_budget_state_cleanup.test.js && node tests/unit/http_session_delete.test.js && node tests/unit/budget_acl_parse.test.js && node tests/unit/server_instructions.test.js && node tests/unit/query_run_empty_hint.test.js && node tests/unit/session_admission_race.test.js && node tests/unit/pool_admission_reservation.test.js && node tests/unit/config_max_sessions_per_principal.test.js && node tests/unit/session_principal_cap.test.js && node tests/unit/schema_published_parity.test.js && node tests/unit/manual_borrowed_category.test.js && node tests/unit/manual_budget_no_borrowed_writes.test.js && node tests/unit/refresh_test_budget_snapshot.test.js && node tests/unit/docs_check.test.js && node tests/unit/docs_markers.test.js && node tests/unit/docs_links_fixture.test.js && node tests/unit/docs_index.test.js && node tests/unit/docs_tools.test.js && node tests/unit/docs_readme_size.test.js && node tests/unit/template_lockstep.test.js && node tests/unit/client_examples.test.js && node tests/unit/mcp_server_json.test.js",
     "test:adapter": "npm run build && node dist/src/tests_adapter_runner.js",
     "test:e2e": "npx playwright test",
     "test:e2e:docker": "./tests/e2e/run-docker-e2e.sh",