actual-mcp-server 0.6.45 → 0.6.48

package/README.md

@@ -751,4 +751,4 @@ The software is provided **as-is**, without warranty of any kind. The author acc
 
 ---
 
-**Version:** 0.6.45 | **Tool Count:** 71 (verified LibreChat-compatible)
+**Version:** 0.6.48 | **Tool Count:** 71 (verified LibreChat-compatible)

package/dist/package.json

@@ -1,7 +1,7 @@
 {
     "name": "actual-mcp-server",
     "displayName": "Actual MCP Server",
-    "version": "0.6.45",
+    "version": "0.6.48",
     "engines": {
         "node": ">=20.0.0",
         "npm": ">=10.0.0"
@@ -30,7 +30,7 @@
         "verify-tools": "npm run build && node scripts/verify-tools.js",
         "check:coverage": "node scripts/list-actual-api-methods.mjs",
         "direct-sync": "node scripts/direct-sync/bank-sync-direct.mjs",
-        "test:unit-js": "node tests/unit/transactions_create.test.js && node tests/unit/generated_tools.smoke.test.js && node tests/unit/schema_validation.test.js && node tests/unit/config_https_validation.test.js && node tests/unit/config_insecure_upstream.test.js && node tests/unit/auth-acl.test.js && node tests/unit/bug76.test.js && node tests/unit/budgets_setAmount.test.js && node tests/unit/budgets_transfer.test.js && node tests/unit/transactions_uncategorized.test.js && node tests/unit/httpServer_session_init.test.js && node tests/unit/httpServer_session_not_found.test.js && node tests/unit/manual_mcp_client_retry.test.js && node tests/unit/manual_mcp_client_session.test.js && node tests/unit/manual_mcp_client_circuit.test.js && node tests/unit/manual_runner_killswitch.test.js && node tests/unit/adapter_auth_rate_limit.test.js && node tests/unit/adapter_session_reuse.test.js && node tests/unit/retry_classifier.test.js && node tests/unit/adapter_module_surface.test.js && node tests/unit/adapter_nonidempotent_no_retry.test.js && node tests/unit/pool_liveness.test.js && node tests/unit/pool_shutdown_all.test.js && node tests/unit/query_where_operators.test.js && node tests/unit/query_run_validation.test.js && node tests/unit/adapter_with_write_session.test.js && node tests/unit/category_groups_delete.test.js && node tests/unit/rules_delete.test.js && node tests/unit/schedules_delete.test.js && node tests/unit/payees_delete.test.js && node tests/unit/rules_create_or_update.test.js && node tests/unit/unhandled-rejection.test.js && node tests/unit/rejection-allowlist-purity.test.js && node tests/unit/httpServer_bearer_auth.test.js && node tests/unit/httpServer_oidc_audience.test.js && node tests/unit/httpServer_oidc_auth_verification.test.js && node tests/unit/httpServer_body_limit.test.js && node tests/unit/adapter_write_pool_cooperation.test.js && node tests/unit/budget_acl_enforcement.test.js && node tests/unit/budget_preference_store.test.js && node tests/unit/budget_preference_restore.test.js && node tests/unit/tags_list.test.js && node tests/unit/tags_create.test.js && node tests/unit/tags_update.test.js && node tests/unit/tags_delete.test.js && node tests/unit/notes_get.test.js && node tests/unit/notes_update.test.js && node tests/unit/payees_common_list.test.js && node tests/unit/transactions_update_guard.test.js && node tests/unit/entities_search.test.js && node tests/unit/zod_error_format.test.js && node tests/unit/tool_count_sync.test.js && node tests/unit/check_coverage.test.js",
+        "test:unit-js": "node tests/unit/transactions_create.test.js && node tests/unit/generated_tools.smoke.test.js && node tests/unit/schema_validation.test.js && node tests/unit/config_https_validation.test.js && node tests/unit/config_insecure_upstream.test.js && node tests/unit/auth-acl.test.js && node tests/unit/bug76.test.js && node tests/unit/budgets_setAmount.test.js && node tests/unit/budgets_transfer.test.js && node tests/unit/transactions_uncategorized.test.js && node tests/unit/httpServer_session_init.test.js && node tests/unit/httpServer_session_not_found.test.js && node tests/unit/manual_mcp_client_retry.test.js && node tests/unit/manual_mcp_client_session.test.js && node tests/unit/manual_mcp_client_circuit.test.js && node tests/unit/manual_runner_killswitch.test.js && node tests/unit/adapter_auth_rate_limit.test.js && node tests/unit/adapter_session_reuse.test.js && node tests/unit/retry_classifier.test.js && node tests/unit/adapter_module_surface.test.js && node tests/unit/adapter_nonidempotent_no_retry.test.js && node tests/unit/pool_liveness.test.js && node tests/unit/pool_shutdown_all.test.js && node tests/unit/query_where_operators.test.js && node tests/unit/query_run_validation.test.js && node tests/unit/adapter_with_write_session.test.js && node tests/unit/category_groups_delete.test.js && node tests/unit/rules_delete.test.js && node tests/unit/schedules_delete.test.js && node tests/unit/payees_delete.test.js && node tests/unit/rules_create_or_update.test.js && node tests/unit/unhandled-rejection.test.js && node tests/unit/rejection-allowlist-purity.test.js && node tests/unit/httpServer_bearer_auth.test.js && node tests/unit/httpServer_oidc_audience.test.js && node tests/unit/httpServer_oidc_auth_verification.test.js && node tests/unit/httpServer_body_limit.test.js && node tests/unit/adapter_write_pool_cooperation.test.js && node tests/unit/budget_acl_enforcement.test.js && node tests/unit/budget_preference_store.test.js && node tests/unit/budget_preference_restore.test.js && node tests/unit/tags_list.test.js && node tests/unit/tags_create.test.js && node tests/unit/tags_update.test.js && node tests/unit/tags_delete.test.js && node tests/unit/notes_get.test.js && node tests/unit/notes_update.test.js && node tests/unit/payees_common_list.test.js && node tests/unit/transactions_update_guard.test.js && node tests/unit/entities_search.test.js && node tests/unit/zod_error_format.test.js && node tests/unit/tool_count_sync.test.js && node tests/unit/stdio_transport.test.js && node tests/unit/logger_structured.test.js && node tests/unit/logger_redaction.test.js && node tests/unit/logger_correlation.test.js && node tests/unit/check_coverage.test.js",
         "test:adapter": "npm run build && node dist/src/tests_adapter_runner.js",
         "test:e2e": "npx playwright test",
         "test:e2e:docker": "./tests/e2e/run-docker-e2e.sh",

package/dist/src/lib/loggerFactory.js

@@ -26,15 +26,19 @@ import logger from '../logger.js';
  */
 export function createModuleLogger(moduleName) {
     const prefix = `[${moduleName}]`;
+    // `module` is attached as a structured field (promoted to a top-level field by the
+    // logger format, #219) while the `[MODULE]` prefix is kept in the message for the
+    // pretty/dev output. `module` is spread LAST so it stays authoritative and a caller's
+    // metadata cannot accidentally overwrite it.
     return {
         info: (message, meta) => {
-            logger.info(`${prefix} ${message}`, meta);
+            logger.info(`${prefix} ${message}`, { ...meta, module: moduleName });
         },
         debug: (message, meta) => {
-            logger.debug(`${prefix} ${message}`, meta);
+            logger.debug(`${prefix} ${message}`, { ...meta, module: moduleName });
         },
         warn: (message, meta) => {
-            logger.warn(`${prefix} ${message}`, meta);
+            logger.warn(`${prefix} ${message}`, { ...meta, module: moduleName });
         },
         error: (message, error, meta) => {
             if (error) {
@@ -42,10 +46,11 @@ export function createModuleLogger(moduleName) {
                     error: error.message,
                     stack: error.stack,
                     ...meta,
+                    module: moduleName,
                 });
             }
             else {
-                logger.error(`${prefix} ${message}`, meta);
+                logger.error(`${prefix} ${message}`, { ...meta, module: moduleName });
             }
         },
     };

package/dist/src/logger.js

@@ -2,6 +2,10 @@ import winston from 'winston';
 import DailyRotateFile from 'winston-daily-rotate-file';
 import path from 'path';
 import { fileURLToPath } from 'url';
+import { randomUUID } from 'crypto';
+// requestContext only imports async_hooks, so this is safe to import from the early-loaded
+// logger module (no circular import).
+import { requestContext } from './lib/requestContext.js';
 const __filename = fileURLToPath(import.meta.url);
 const __dirname = path.dirname(__filename);
 // env-configurable
@@ -14,7 +18,6 @@ const LOG_DIR = process.env.MCP_BRIDGE_LOG_DIR
 const DATE_PATTERN = process.env.MCP_BRIDGE_ROTATE_DATEPATTERN || 'YYYY-MM-DD';
 const MAX_SIZE = process.env.MCP_BRIDGE_MAX_LOG_SIZE || '20m';
 const MAX_FILES = process.env.MCP_BRIDGE_MAX_FILES || '14d';
-const DEFAULT_LEVEL = process.env.MCP_BRIDGE_LOG_LEVEL || 'debug';
 function safeStringify(obj, maxLen = 2000) {
     try {
         const seen = new WeakSet();
@@ -39,6 +42,228 @@ function safeStringify(obj, maxLen = 2000) {
         }
     }
 }
+/**
+ * Resolve the output format, level, and service name from the environment.
+ *
+ * Format precedence is deterministic: an explicit `LOG_FORMAT` ("json" | "pretty")
+ * wins; otherwise `NODE_ENV==='production'` selects JSON; otherwise pretty. The
+ * non-production default is therefore the human-readable text format, so existing
+ * log-text-scraping tests keep passing and JSON is an explicit opt-in or prod-only.
+ */
+export function resolveLogConfig(env = process.env) {
+    const fmt = String(env.LOG_FORMAT || '').toLowerCase();
+    const isProd = env.NODE_ENV === 'production';
+    const useJson = fmt === 'json' ? true : fmt === 'pretty' ? false : isProd;
+    const level = env.MCP_BRIDGE_LOG_LEVEL || (isProd ? 'info' : 'debug');
+    const service = env.MCP_SERVICE_NAME || 'actual-mcp-server';
+    return { useJson, level, service };
+}
+const { useJson: USE_JSON, level: DEFAULT_LEVEL, service: SERVICE } = resolveLogConfig(process.env);
+// Fields that stay at the top level of a record; everything else is user metadata.
+// `sessionId`/`requestId` are reserved correlation fields (#221), so they render top-level
+// rather than nested under `context`.
+const STANDARD_KEYS = new Set([
+    'level', 'message', 'timestamp', 'service', 'module', 'stack', 'ms', 'sessionId', 'requestId',
+]);
+// Promote a `service` field onto every record.
+const addService = winston.format((info) => {
+    info.service = SERVICE;
+    return info;
+});
+/**
+ * Resolve a request correlation id: reuse a non-empty inbound `X-Correlation-ID`, else
+ * generate one. Exported so the HTTP layer and tests share the exact decision (#221).
+ *
+ * The inbound value is CLIENT-CONTROLLED and is stamped on every log line for the request,
+ * so it is sanitised first: control characters are stripped (prevents log-line forging in
+ * non-JSON consumers) and the length is capped (prevents per-line bloat from a hostile
+ * header). If nothing usable remains, a UUID is generated.
+ */
+const MAX_REQUEST_ID_LEN = 128;
+export function resolveRequestId(inbound) {
+    let id = typeof inbound === 'string' ? inbound.trim() : '';
+    if (id) {
+        // eslint-disable-next-line no-control-regex
+        id = id.replace(/[\u0000-\u001f\u007f]/g, '').slice(0, MAX_REQUEST_ID_LEN);
+    }
+    return id.length > 0 ? id : randomUUID();
+}
+// Stamp the active request's correlation ids onto every record (#221). Reads the
+// AsyncLocalStorage store; the context-derived id is authoritative, so it OVERWRITES any
+// caller-supplied `sessionId` metadata. When there is no active store (startup, CLI, stdio
+// without a request wrapper) it is a no-op and never throws. Must run after splat() (which
+// reverts top-level field additions made before it), so it is placed alongside addService.
+const addCorrelation = winston.format((info) => {
+    const store = requestContext.getStore();
+    if (store?.sessionId)
+        info.sessionId = store.sessionId;
+    if (store?.requestId)
+        info.requestId = store.requestId;
+    return info;
+});
+// Collect non-standard fields into a single `context` object so JSON records have a
+// stable shape ({ timestamp, level, service, module, message, stack?, context? }).
+// winston hands the SAME info object to every transport's format, so this must be
+// idempotent: a record passing through more than one transport (e.g. STORE_LOGS=true
+// gives two file transports plus the console) must not re-nest `context` into
+// `context.context`. Excluding the `context` key from the move makes a second pass a
+// no-op, and any already-present context is merged rather than wrapped.
+const nestContext = winston.format((info) => {
+    const ctx = {};
+    for (const key of Object.keys(info)) {
+        if (!STANDARD_KEYS.has(key) && key !== 'context') {
+            ctx[key] = info[key];
+            delete info[key];
+        }
+    }
+    if (Object.keys(ctx).length > 0) {
+        const existing = info.context;
+        info.context =
+            existing && typeof existing === 'object' ? { ...existing, ...ctx } : ctx;
+    }
+    return info;
+});
+// ---------------------------------------------------------------------------
+// Secret / PII redaction (#220)
+//
+// Runs inside buildLogFormat (per-transport), specifically AFTER winston.format.splat():
+// splat() rebuilds the record from the original args and reverts top-level field mutations
+// made before it (nested objects survive only because they are shared refs), so redaction
+// placed before splat would silently fail to mask a top-level secret like `note`. Running
+// it per-transport in the SAME pipeline that serializes (before nestContext, which moves
+// fields under `context`) is the placement that actually reaches the output. It is
+// idempotent (masking and value-scrub both go to a constant), so the STORE_LOGS
+// multi-transport fan-out is safe. The live `note`/header tests pin this ordering: moving
+// redactSecrets before splat makes them fail.
+//
+// Two mechanisms: a key-name denylist for structured fields at any depth, and a finite
+// scrub of the actual configured secret VALUES (which catches a secret carried as a value
+// under a benign key, or inside a stringified message).
+// ---------------------------------------------------------------------------
+const REDACTED = '[REDACTED]';
+const SENSITIVE_KEYS = new Set([
+    'authorization', 'proxy-authorization', 'token', 'password', 'encryptionpassword',
+    'cookie', 'set-cookie', 'secret', 'apikey', 'api_key', 'x-api-key',
+    'access_token', 'refresh_token', 'client_secret',
+]);
+/** A metadata key is sensitive if its lowercased name is denylisted or ends in a secret suffix. */
+export function isSensitiveKey(key) {
+    const low = key.toLowerCase();
+    if (SENSITIVE_KEYS.has(low))
+        return true;
+    return (low.endsWith('password') ||
+        low.endsWith('secret') ||
+        low.endsWith('token') ||
+        low.includes('authorization') ||
+        low.includes('cookie'));
+}
+/** The actual configured secret values, so a secret echoed as a VALUE is also masked. */
+export function collectSecretValues(env = process.env) {
+    const out = [];
+    for (const [k, v] of Object.entries(env)) {
+        // length guard avoids masking short/common values that could collide with benign log
+        // text (a short secret is still masked by KEY name when under a sensitive field; only
+        // the free-text VALUE scrub is skipped for it).
+        if (typeof v === 'string' && v.length >= 8 && /(PASSWORD|SECRET|AUTHORIZATION|_TOKEN)$/.test(k)) {
+            out.push(v);
+        }
+    }
+    return out;
+}
+function scrubSecretValues(s, secrets) {
+    let out = s;
+    for (const sec of secrets) {
+        if (sec && out.includes(sec))
+            out = out.split(sec).join(REDACTED);
+    }
+    return out;
+}
+const MAX_REDACT_DEPTH = 8;
+const MAX_REDACT_NODES = 2000;
+/**
+ * Return a redacted version of a value. NESTED objects/arrays are COPIED (copy-on-write),
+ * never mutated, so redacting a log record cannot corrupt a live caller object (e.g.
+ * `req.headers` passed by reference). Depth/node caps and a cycle guard bound pathological
+ * or cyclic structures.
+ */
+function redactValue(val, secrets, depth, seen, counter) {
+    if (val && typeof val === 'object') {
+        if (depth > MAX_REDACT_DEPTH || counter.n > MAX_REDACT_NODES)
+            return '[Truncated]';
+        if (seen.has(val))
+            return '[Circular]';
+        seen.add(val);
+        if (Array.isArray(val))
+            return val.map((v) => redactValue(v, secrets, depth + 1, seen, counter));
+        const copy = {};
+        for (const key of Object.keys(val)) {
+            counter.n++;
+            copy[key] = isSensitiveKey(key)
+                ? REDACTED
+                : redactValue(val[key], secrets, depth + 1, seen, counter);
+        }
+        return copy;
+    }
+    if (typeof val === 'string' && secrets.length > 0)
+        return scrubSecretValues(val, secrets);
+    return val;
+}
+/**
+ * Mask sensitive keys and scrub known-secret values. The TOP-LEVEL record is mutated in
+ * place (winston hands the transport its own copy, and the winston Symbol keys must be
+ * preserved), but every NESTED object is replaced with a redacted copy so a shared live
+ * object (a request's headers) is never altered. Masking to a constant is idempotent.
+ */
+export function redactRecord(record, secrets = []) {
+    if (!record || typeof record !== 'object')
+        return record;
+    const seen = new WeakSet();
+    const counter = { n: 0 };
+    const rec = record;
+    for (const key of Object.keys(rec)) {
+        rec[key] = isSensitiveKey(key) ? REDACTED : redactValue(rec[key], secrets, 1, seen, counter);
+    }
+    return record;
+}
+const SECRET_VALUES = collectSecretValues(process.env);
+const redactSecrets = winston.format((info) => redactRecord(info, SECRET_VALUES));
+/**
+ * Build the winston format. Reuses winston's own building blocks
+ * (`format.errors` + `format.splat` + `format.json`) rather than a hand-rolled
+ * serializer, so the metadata that loggerFactory already attaches flows through.
+ * The previous printf referenced only `{ timestamp, level, message }`, which is
+ * why metadata (including error stacks) was silently dropped.
+ */
+export function buildLogFormat(useJson, colorize = !!process.stdout.isTTY) {
+    if (useJson) {
+        return winston.format.combine(winston.format.timestamp(), // ISO 8601 UTC
+        winston.format.errors({ stack: true }), winston.format.splat(), 
+        // #220: redact AFTER splat. splat() rebuilds the record from the original args and
+        // reverts top-level field mutations made before it (nested objects survive as shared
+        // refs), so redaction must run after splat to actually mask top-level secrets.
+        redactSecrets(), addCorrelation(), // #221: stamp sessionId/requestId (after splat, like addService)
+        addService(), nestContext(), winston.format.json());
+    }
+    // Colorize only for an interactive terminal, so piped output and log files do not get
+    // ANSI escape codes (also keeps the format deterministic and unit-testable).
+    return winston.format.combine(winston.format.timestamp({ format: 'YYYY-MM-DD HH:mm:ss.SSS' }), winston.format.errors({ stack: true }), winston.format.splat(), redactSecrets(), // #220: after splat (see note in the json branch)
+    addCorrelation(), // #221: stamp sessionId/requestId
+    ...(colorize ? [winston.format.colorize()] : []), winston.format.printf((info) => {
+        const rec = info;
+        let line = `${rec.timestamp} ${rec.level}: ${rec.message}`;
+        if (rec.stack)
+            line += `\n${rec.stack}`;
+        // Append any remaining metadata for dev readability (it is no longer dropped).
+        const extra = {};
+        for (const key of Object.keys(rec)) {
+            if (!STANDARD_KEYS.has(key))
+                extra[key] = rec[key];
+        }
+        if (Object.keys(extra).length > 0)
+            line += ` ${safeStringify(extra, 1000)}`;
+        return line;
+    }));
+}
 const transports = [];
 // file transports when enabled (capture debug+)
 if (STORE_LOGS) {
@@ -50,22 +275,23 @@ if (STORE_LOGS) {
         zippedArchive: true,
         maxSize: MAX_SIZE,
         maxFiles: MAX_FILES,
-        format: winston.format.combine(winston.format.timestamp(), winston.format.printf(({ timestamp, level, message }) => `${timestamp} ${level}: ${message}`)),
+        // Files must never get ANSI colour, regardless of whether stdout is a TTY.
+        format: buildLogFormat(USE_JSON, false),
     });
     // debug transport collects debug+ messages into debug-%DATE%.log
     transports.push(createDailyRotateTransport('debug'));
     // errors into error-%DATE%.log
     transports.push(createDailyRotateTransport('error'));
 }
-// single console transport for terminal output (use same level)
-// In stdio mode all output must go to stderr — writing to stdout corrupts JSON-RPC framing.
+// single console transport for terminal output (use same level).
+// In stdio mode all output must go to stderr. Writing to stdout corrupts JSON-RPC framing.
 // MCP_STDIO_MODE is set by src/index.ts before this module is first imported.
 transports.push(new winston.transports.Console({
     level: DEFAULT_LEVEL,
     ...(process.env.MCP_STDIO_MODE === 'true'
         ? { stderrLevels: ['error', 'warn', 'info', 'verbose', 'debug', 'silly', 'http'] }
         : {}),
-    format: winston.format.combine(winston.format.timestamp({ format: 'YYYY-MM-DD HH:mm:ss.SSS' }), winston.format.colorize(), winston.format.printf(({ timestamp, level, message }) => `${timestamp} ${level}: ${message}`)),
+    format: buildLogFormat(USE_JSON),
 }));
 const logger = winston.createLogger({
     level: DEFAULT_LEVEL,
@@ -73,15 +299,17 @@ const logger = winston.createLogger({
     exitOnError: false,
 });
 export function logTransportWithDirection(direction, clientIp, req, data) {
-    const meta = {
+    // Log STRUCTURED meta (not a pre-stringified blob) so the redaction format (#220) can
+    // mask sensitive header keys (Authorization, Cookie) and known-secret values in the
+    // payload before anything is written.
+    logger.debug('transport message', {
         direction,
         clientIp,
         method: req.method,
         url: req.originalUrl,
         headers: req.headers,
         payload: safeStringify(data, 2000),
-    };
-    logger.debug(safeStringify(meta, 4000));
+    });
 }
 // --- Wire debug module into winston and route console.* to winston only ---
 // NOTE: avoid writing to both original console and winston to prevent duplicates.
@@ -121,7 +349,7 @@ export function logTransportWithDirection(direction, clientIp, req, data) {
         }
     }
     catch {
-        // debug module not available or failed to patch — ignore
+        // debug module not available or failed to patch, ignore
     }
 })();
 export default logger;

package/dist/src/server/httpServer.js

@@ -3,7 +3,7 @@ import { randomUUID, timingSafeEqual } from 'node:crypto';
 import { Server } from '@modelcontextprotocol/sdk/server/index.js';
 import { StreamableHTTPServerTransport } from '@modelcontextprotocol/sdk/server/streamableHttp.js';
 import { ListToolsRequestSchema, CallToolRequestSchema, } from '@modelcontextprotocol/sdk/types.js';
-import logger from '../logger.js';
+import logger, { resolveRequestId } from '../logger.js';
 import { getLocalIp } from '../utils.js';
 import actualToolsManager from '../actualToolsManager.js';
 import { getConnectionState, connectToActualForSession, shutdownActualForSession, shutdownActual, canAcceptNewSession } from '../actualConnection.js';
@@ -389,7 +389,8 @@ bindHost = 'localhost', advertisedUrl) {
                     // Run in AsyncLocalStorage context so tools can access sessionId
                     // and the adapter can enforce per-request budget ACL (#156).
                     const allowedBudgetsInit = req.allowedBudgets;
-                    await requestContext.run({ sessionId: undefined, allowedBudgets: allowedBudgetsInit, principal: resolvePrincipal(req) }, async () => {
+                    const requestId = resolveRequestId(req.get('x-correlation-id'));
+                    await requestContext.run({ sessionId: undefined, requestId, allowedBudgets: allowedBudgetsInit, principal: resolvePrincipal(req) }, async () => {
                         await transport.handleRequest(req, res, req.body);
                     });
                 }
@@ -483,7 +484,8 @@ bindHost = 'localhost', advertisedUrl) {
             // Run in AsyncLocalStorage context so tools and the adapter can access
             // sessionId (pool branch, #134) and allowedBudgets (ACL enforcement, #156).
             const allowedBudgets = req.allowedBudgets;
-            await requestContext.run({ sessionId, allowedBudgets, principal: resolvePrincipal(req) }, async () => {
+            const requestId = resolveRequestId(req.get('x-correlation-id'));
+            await requestContext.run({ sessionId, requestId, allowedBudgets, principal: resolvePrincipal(req) }, async () => {
                 await transport.handleRequest(req, res, req.body);
             });
         }

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "actual-mcp-server",
   "displayName": "Actual MCP Server",
-  "version": "0.6.45",
+  "version": "0.6.48",
   "engines": {
     "node": ">=20.0.0",
     "npm": ">=10.0.0"
@@ -30,7 +30,7 @@
     "verify-tools": "npm run build && node scripts/verify-tools.js",
     "check:coverage": "node scripts/list-actual-api-methods.mjs",
     "direct-sync": "node scripts/direct-sync/bank-sync-direct.mjs",
-    "test:unit-js": "node tests/unit/transactions_create.test.js && node tests/unit/generated_tools.smoke.test.js && node tests/unit/schema_validation.test.js && node tests/unit/config_https_validation.test.js && node tests/unit/config_insecure_upstream.test.js && node tests/unit/auth-acl.test.js && node tests/unit/bug76.test.js && node tests/unit/budgets_setAmount.test.js && node tests/unit/budgets_transfer.test.js && node tests/unit/transactions_uncategorized.test.js && node tests/unit/httpServer_session_init.test.js && node tests/unit/httpServer_session_not_found.test.js && node tests/unit/manual_mcp_client_retry.test.js && node tests/unit/manual_mcp_client_session.test.js && node tests/unit/manual_mcp_client_circuit.test.js && node tests/unit/manual_runner_killswitch.test.js && node tests/unit/adapter_auth_rate_limit.test.js && node tests/unit/adapter_session_reuse.test.js && node tests/unit/retry_classifier.test.js && node tests/unit/adapter_module_surface.test.js && node tests/unit/adapter_nonidempotent_no_retry.test.js && node tests/unit/pool_liveness.test.js && node tests/unit/pool_shutdown_all.test.js && node tests/unit/query_where_operators.test.js && node tests/unit/query_run_validation.test.js && node tests/unit/adapter_with_write_session.test.js && node tests/unit/category_groups_delete.test.js && node tests/unit/rules_delete.test.js && node tests/unit/schedules_delete.test.js && node tests/unit/payees_delete.test.js && node tests/unit/rules_create_or_update.test.js && node tests/unit/unhandled-rejection.test.js && node tests/unit/rejection-allowlist-purity.test.js && node tests/unit/httpServer_bearer_auth.test.js && node tests/unit/httpServer_oidc_audience.test.js && node tests/unit/httpServer_oidc_auth_verification.test.js && node tests/unit/httpServer_body_limit.test.js && node tests/unit/adapter_write_pool_cooperation.test.js && node tests/unit/budget_acl_enforcement.test.js && node tests/unit/budget_preference_store.test.js && node tests/unit/budget_preference_restore.test.js && node tests/unit/tags_list.test.js && node tests/unit/tags_create.test.js && node tests/unit/tags_update.test.js && node tests/unit/tags_delete.test.js && node tests/unit/notes_get.test.js && node tests/unit/notes_update.test.js && node tests/unit/payees_common_list.test.js && node tests/unit/transactions_update_guard.test.js && node tests/unit/entities_search.test.js && node tests/unit/zod_error_format.test.js && node tests/unit/tool_count_sync.test.js && node tests/unit/check_coverage.test.js",
+    "test:unit-js": "node tests/unit/transactions_create.test.js && node tests/unit/generated_tools.smoke.test.js && node tests/unit/schema_validation.test.js && node tests/unit/config_https_validation.test.js && node tests/unit/config_insecure_upstream.test.js && node tests/unit/auth-acl.test.js && node tests/unit/bug76.test.js && node tests/unit/budgets_setAmount.test.js && node tests/unit/budgets_transfer.test.js && node tests/unit/transactions_uncategorized.test.js && node tests/unit/httpServer_session_init.test.js && node tests/unit/httpServer_session_not_found.test.js && node tests/unit/manual_mcp_client_retry.test.js && node tests/unit/manual_mcp_client_session.test.js && node tests/unit/manual_mcp_client_circuit.test.js && node tests/unit/manual_runner_killswitch.test.js && node tests/unit/adapter_auth_rate_limit.test.js && node tests/unit/adapter_session_reuse.test.js && node tests/unit/retry_classifier.test.js && node tests/unit/adapter_module_surface.test.js && node tests/unit/adapter_nonidempotent_no_retry.test.js && node tests/unit/pool_liveness.test.js && node tests/unit/pool_shutdown_all.test.js && node tests/unit/query_where_operators.test.js && node tests/unit/query_run_validation.test.js && node tests/unit/adapter_with_write_session.test.js && node tests/unit/category_groups_delete.test.js && node tests/unit/rules_delete.test.js && node tests/unit/schedules_delete.test.js && node tests/unit/payees_delete.test.js && node tests/unit/rules_create_or_update.test.js && node tests/unit/unhandled-rejection.test.js && node tests/unit/rejection-allowlist-purity.test.js && node tests/unit/httpServer_bearer_auth.test.js && node tests/unit/httpServer_oidc_audience.test.js && node tests/unit/httpServer_oidc_auth_verification.test.js && node tests/unit/httpServer_body_limit.test.js && node tests/unit/adapter_write_pool_cooperation.test.js && node tests/unit/budget_acl_enforcement.test.js && node tests/unit/budget_preference_store.test.js && node tests/unit/budget_preference_restore.test.js && node tests/unit/tags_list.test.js && node tests/unit/tags_create.test.js && node tests/unit/tags_update.test.js && node tests/unit/tags_delete.test.js && node tests/unit/notes_get.test.js && node tests/unit/notes_update.test.js && node tests/unit/payees_common_list.test.js && node tests/unit/transactions_update_guard.test.js && node tests/unit/entities_search.test.js && node tests/unit/zod_error_format.test.js && node tests/unit/tool_count_sync.test.js && node tests/unit/stdio_transport.test.js && node tests/unit/logger_structured.test.js && node tests/unit/logger_redaction.test.js && node tests/unit/logger_correlation.test.js && node tests/unit/check_coverage.test.js",
     "test:adapter": "npm run build && node dist/src/tests_adapter_runner.js",
     "test:e2e": "npx playwright test",
     "test:e2e:docker": "./tests/e2e/run-docker-e2e.sh",