[autofix.ci] apply automated fixes

* Added Global Synced Prefs

* [autofix.ci] apply automated fixes

* Add release notes for PR #6234

* typecheck

* lint fix

* Refactor global synced preferences to server preferences

- Removed global synced preferences implementation and related files.
- Introduced server preferences with a new slice and hooks for managing user settings.
- Updated components and hooks to utilize server preferences instead of global synced preferences.
- Adjusted Redux store and mock configurations to reflect the changes.
- Enhanced user settings consistency across devices with the new server preferences structure.

* Implement server preferences for feature flags and enhance admin permissions

- Updated the Experimental component to conditionally display based on user permissions and login method.
- Refactored feature flag handling to use 'flags.plugins' instead of 'plugins'.
- Introduced server-side checks to restrict access to server preferences for admin users only.
- Added comprehensive tests for server preferences management, ensuring proper handling of user roles and preferences.

* Enhance error handling in saveServerPrefs thunk

- Updated the saveServerPrefs async thunk to handle potential errors from the server response.
- Added a check for the presence of an error in the result and return it accordingly.
- Ensured that preferences are still dispatched to the store upon successful save.

* Feedback: strict "flags.plugins" typing

* Feedback: move state slice

* Feedback: localstorage pref

* Feedback: move serverPrefsSlide into prefsSlice

* Refactor: Remove duplicate import of PostError in app.ts

* Rename serverPrefs state slice property to server (#6596)

---------

Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
Co-authored-by: Matiss Janis Aboltins <matiss@mja.lv>
Co-authored-by: Copilot <198982749+Copilot@users.noreply.github.com>

.coderabbit.yaml

@@ -0,0 +1,35 @@
+issue_enrichment:
+  auto_enrich:
+    enabled: false
+reviews:
+  request_changes_workflow: true
+  review_status: true
+  high_level_summary: false
+  finishing_touches:
+    docstrings:
+      enabled: false
+  pre_merge_checks:
+    docstrings:
+      enabled: false
+    custom_checks:
+      - mode: error
+        name: 'settings'
+        instructions: 'Every addition of a new setting toggle must be thoroughly evaluated against the core design principles of Actual. The settings screen is reserved for essential and foundational options only — do not introduce settings for minor UI adjustments such as sizes, paddings, colors, or margins. Prioritize preserving a simple and uncluttered user experience. Users proposing new settings must confirm in a reply to the Coderabbit comment that they have reviewed and ensured alignment with these principles. Excessive or granular UI options increase code complexity and risk confusing users, and are generally not permitted.'
+      - mode: error
+        name: 'linting'
+        instructions: 'Do not allow any oxlint-disable lines.'
+      - mode: error
+        name: 'typecheck'
+        instructions: 'Do not allow creating new components or utilities with the @ts-strict-ignore comment.'
+  labeling_instructions:
+    - label: 'suspect ai generated'
+      instructions: 'This issue or PR is suspected to be generated by AI.'
+    - label: 'API'
+      instructions: 'This issue or PR updates the API in `packages/api`.'
+    - label: 'documentation'
+      instructions: 'This issue updates the documentation in `packages/docs`.'
+    - label: 'contains DB migrations'
+      instructions: 'This issue or PR contains DB migrations in `packages/loot-core/migrations`.'
+    - label: 'size small'
+      instructions: 'This issue or PR is a small change (less than 50 lines of code) that is expected to have a small impact on the codebase.'
+  auto_apply_labels: true

.cursor/worktrees.json

@@ -0,0 +1,3 @@
+{
+  "setup-worktree": ["yarn"]
+}

.devcontainer/devcontainer.json

@@ -1,14 +1,11 @@
 // For format details, see https://aka.ms/devcontainer.json. For config options, see the
 // README at: https://github.com/devcontainers/templates/tree/main/src/docker-existing-docker-compose
 {
-	"name": "Actual development",
-	"dockerComposeFile": [
-		"../docker-compose.yml",
-		"docker-compose.yml"
-	],
-	// Alternatively:
-	// "image": "mcr.microsoft.com/devcontainers/typescript-node:0-16",
-	"service": "actual-development",
-	"workspaceFolder": "/workspaces/${localWorkspaceFolderBasename}",
-	"postCreateCommand": "yarn install"
+  "name": "Actual development",
+  "dockerComposeFile": ["../docker-compose.yml", "docker-compose.yml"],
+  // Alternatively:
+  // "image": "mcr.microsoft.com/devcontainers/typescript-node:0-16",
+  "service": "actual-development",
+  "workspaceFolder": "/workspaces/${localWorkspaceFolderBasename}",
+  "postCreateCommand": "yarn install"
 }

.gitattributes

@@ -12,6 +12,8 @@
 *.sh text eol=lf
 *.tsx text eol=lf
 
+**/bin/* text eol=lf
+
 yarn.lock text eol=lf
 
 # Denote all files that are truly binary and should not be modified.

.github/ISSUE_TEMPLATE/bug-report.yml

@@ -1,15 +1,14 @@
 name: Bug Report
 description: File a bug report also known as an issue or problem.
 title: '[Bug]: '
-labels: ['bug']
+labels: ['needs triage', 'bug']
+type: Bug
 body:
   - type: markdown
-    id: intro-md
     attributes:
       value: |
         Thanks for taking the time to fill out this bug report! Please ensure you provide as much information as possible to better assist in confirming and identifying a fix for the bug.
   - type: markdown
-    id: intro-md
     attributes:
       value: |
         **IMPORTANT:** we use GitHub Issues only for BUG REPORTS and FEATURE REQUESTS. If you are looking for help/support - please reach out to the [community on Discord](https://discord.gg/pRYNYr4W5A). All non-bug and non-feature-request issues will be closed.
@@ -23,13 +22,11 @@ body:
       options:
         - label: 'I have searched and found no existing issue'
           required: true
-    validations:
-      required: true
   - type: textarea
     id: what-happened
     attributes:
       label: What happened?
-      description: Also tell us, what did you expect to happen? If you’re reporting an issue with imports, please attach a (redacted) version of the file you’re having trouble importing. You may need to zip it before uploading.
+      description: Also tell us, what did you expect to happen? If you're reporting an issue with imports, please attach a (redacted) version of the file you're having trouble importing. You may need to zip it before uploading.
       placeholder: Tell us what you see!
       value: 'A bug happened!'
     validations:
@@ -43,7 +40,6 @@ body:
     validations:
       required: true
   - type: markdown
-    id: env-info
     attributes:
       value: '## Environment Details'
   - type: dropdown

.github/ISSUE_TEMPLATE/documentation.yml

@@ -0,0 +1,69 @@
+name: 'Documentation'
+description: Report documentation issues, request new documentation, or suggest improvements to existing docs.
+title: '[Docs] - <title>'
+labels: ['documentation']
+body:
+  - type: dropdown
+    id: issue-type
+    attributes:
+      label: 'Issue Type'
+      description: What type of documentation issue is this?
+      options:
+        - New Documentation Request
+        - Documentation Improvement
+        - Documentation Bug/Error
+        - Documentation Change Request
+    validations:
+      required: true
+  - type: textarea
+    id: description
+    attributes:
+      label: 'Description'
+      description: Please describe the documentation issue, request, or improvement
+      placeholder: Provide a clear and detailed description...
+    validations:
+      required: true
+  - type: input
+    id: doc-url
+    attributes:
+      label: 'Documentation URL'
+      description: If this relates to existing documentation, please provide the URL
+      placeholder: ex. https://actualbudget.org/docs/budgeting/categories or https://github.com/actualbudget/actual/blob/master/packages/docs/...
+    validations:
+      required: false
+  - type: dropdown
+    id: category
+    attributes:
+      label: 'Documentation Category'
+      description: What category does this relate to?
+      multiple: true
+      options:
+        - Accounts
+        - Backup & Restore
+        - Budgeting
+        - Development
+        - Installation & Configuration
+        - Overview
+        - Reports
+        - Troubleshooting
+        - Other
+    validations:
+      required: false
+  - type: textarea
+    id: expected-behavior
+    attributes:
+      label: 'Expected/Desired Content'
+      description: If applicable, describe what you expect to see or what should be documented
+      placeholder: What should the documentation say or include?
+    validations:
+      required: false
+  - type: textarea
+    id: screenshot
+    attributes:
+      label: 'Screenshots or Examples'
+      description: If applicable, add screenshots or examples to help explain your request
+      value: |
+        ![DESCRIPTION](LINK.png)
+      render: bash
+    validations:
+      required: false

.github/ISSUE_TEMPLATE/feature-request.yml

@@ -2,26 +2,24 @@ name: Feature request
 description: Request a missing feature
 title: '[Feature] '
 labels: ['feature']
+type: Feature
 body:
   - type: markdown
-    id: intro-md
     attributes:
       value: |
-        Thanks for taking the time to fill out this feature request! Please ensure you provide as much information as possible so we can better understand what you’re proposing so we can come up with the best solution for everyone.
+        Thanks for taking the time to fill out this feature request! Please ensure you provide as much information as possible so we can better understand what you're proposing so we can come up with the best solution for everyone.
   - type: checkboxes
     id: existing-issue
     attributes:
       label: 'Verified feature request does not already exist?'
-      description: 'Please search to see if an issue or PR already exists for the feature you’re requesting.'
+      description: "Please search to see if an issue or PR already exists for the feature you're requesting."
       options:
         - label: 'I have searched and found no existing issue'
           required: true
-    validations:
-      required: true
   - type: checkboxes
     attributes:
       label: '💻'
-      description: (Optional) Please check this box if you’re willing to open a PR to implement this feature. We’ll help you get started and answer any questions you have along the way :)
+      description: (Optional) Please check this box if you're willing to open a PR to implement this feature. We'll help you get started and answer any questions you have along the way :)
       options:
         - label: Would you like to implement this feature?
   - type: textarea
@@ -35,7 +33,7 @@ body:
     id: solution
     attributes:
       label: Describe your ideal solution to this problem
-      description: Feel free to give multiple different ideas for how the problem could be solved — we’d love to have a discussion to find the best way to solve your problem and related problems others may face! (Or leave this blank if you don’t have a solution in mind yet.)
+      description: Feel free to give multiple different ideas for how the problem could be solved — we'd love to have a discussion to find the best way to solve your problem and related problems others may face! (Or leave this blank if you don't have a solution in mind yet.)
     validations:
       required: false
   - type: textarea

.github/PULL_REQUEST_TEMPLATE.md

@@ -1 +1 @@
-<!-- Thank you for submitting a pull request! Make sure to follow the instructions to write release notes for your PR — it should only take a minute or two: https://github.com/actualbudget/docs#writing-good-release-notes -->
+<!-- Thank you for submitting a pull request! Make sure to follow the instructions to write release notes for your PR — it should only take a minute or two: https://github.com/actualbudget/docs#writing-good-release-notes. Try running yarn generate:release-notes *before* pushing your PR for an interactive experience. -->

.github/actions/ai-generated-release-notes/check-first-comment.js

@@ -0,0 +1,76 @@
+#!/usr/bin/env node
+
+import fs from 'fs';
+
+import { Octokit } from '@octokit/rest';
+
+const token = process.env.GITHUB_TOKEN;
+const repo = process.env.GITHUB_REPOSITORY;
+const issueNumber = process.env.GITHUB_EVENT_ISSUE_NUMBER;
+const commentId = String(process.env.GITHUB_EVENT_COMMENT_ID);
+
+if (!token || !repo || !issueNumber || !commentId) {
+  console.log('Missing required environment variables');
+  process.exit(1);
+}
+
+const [owner, repoName] = repo.split('/');
+const octokit = new Octokit({ auth: token });
+
+function setOutput(name, value) {
+  fs.appendFileSync(process.env.GITHUB_OUTPUT, `${name}=${value}\n`);
+}
+
+async function checkFirstComment() {
+  try {
+    console.log('Fetching comments with Octokit...');
+
+    // Get all comments with automatic pagination
+    const comments = await octokit.paginate(octokit.rest.issues.listComments, {
+      owner,
+      repo: repoName,
+      issue_number: issueNumber,
+    });
+
+    console.log(`Total comments found: ${comments.length}`);
+
+    // Filter for CodeRabbit summary comments (containing the specific marker)
+    const coderabbitSummaryComments = comments.filter(comment => {
+      const isCodeRabbit = comment.user.login === 'coderabbitai[bot]';
+      const hasSummaryMarker = comment.body.includes(
+        '<!-- This is an auto-generated comment: summarize by coderabbit.ai -->',
+      );
+
+      if (isCodeRabbit) {
+        console.log(
+          `CodeRabbit comment found (ID: ${comment.id}), has summary marker: ${hasSummaryMarker}`,
+        );
+      }
+
+      return isCodeRabbit && hasSummaryMarker;
+    });
+
+    const isFirstSummaryComment =
+      coderabbitSummaryComments.length === 1 &&
+      String(coderabbitSummaryComments[0].id) === commentId;
+
+    console.log(
+      `CodeRabbit summary comments found: ${coderabbitSummaryComments.length}`,
+    );
+    console.log(`Current comment ID: ${commentId}`);
+    console.log(`Is first summary comment: ${isFirstSummaryComment}`);
+    setOutput('result', isFirstSummaryComment);
+  } catch (error) {
+    console.log('Error checking CodeRabbit comment:', error.message);
+    console.log('Stack:', error.stack);
+    setOutput('result', 'false');
+    process.exit(1);
+  }
+}
+
+checkFirstComment().catch(error => {
+  console.log('Unhandled error:', error.message);
+  console.log('Stack:', error.stack);
+  setOutput('result', 'false');
+  process.exit(1);
+});

.github/actions/ai-generated-release-notes/check-release-notes-exists.js

@@ -0,0 +1,77 @@
+#!/usr/bin/env node
+
+import fs from 'fs';
+
+import { Octokit } from '@octokit/rest';
+
+const token = process.env.GITHUB_TOKEN;
+const repo = process.env.GITHUB_REPOSITORY;
+const issueNumber = process.env.GITHUB_EVENT_ISSUE_NUMBER;
+const prDetailsJson = process.env.PR_DETAILS;
+
+if (!token || !repo || !issueNumber || !prDetailsJson) {
+  console.log('Missing required environment variables');
+  process.exit(1);
+}
+
+const [owner, repoName] = repo.split('/');
+const octokit = new Octokit({ auth: token });
+
+function setOutput(name, value) {
+  fs.appendFileSync(process.env.GITHUB_OUTPUT, `${name}=${value}\n`);
+}
+
+async function checkReleaseNotesExists() {
+  try {
+    const prDetails = JSON.parse(prDetailsJson);
+    if (!prDetails) {
+      console.log('No PR details available, skipping file check');
+      setOutput('result', 'false');
+      return;
+    }
+
+    const fileName = `upcoming-release-notes/${prDetails.number}.md`;
+
+    // Get PR info to get head SHA
+    const { data: pr } = await octokit.rest.pulls.get({
+      owner,
+      repo: repoName,
+      pull_number: issueNumber,
+    });
+
+    const prHeadSha = pr.head.sha;
+    console.log(
+      `Checking for file on PR branch: ${pr.head.ref} (${prHeadSha})`,
+    );
+
+    // Check if file exists
+    try {
+      await octokit.rest.repos.getContent({
+        owner,
+        repo: repoName,
+        path: fileName,
+        ref: prHeadSha,
+      });
+
+      console.log(
+        `Release notes file already exists on PR branch: ${fileName}`,
+      );
+      setOutput('result', 'true');
+    } catch (error) {
+      if (error.status === 404) {
+        console.log(
+          `No existing release notes file found on PR branch: ${fileName}`,
+        );
+        setOutput('result', 'false');
+      } else {
+        console.log('Error checking file existence:', error.message);
+        setOutput('result', 'false');
+      }
+    }
+  } catch (error) {
+    console.log('Error in file existence check:', error.message);
+    setOutput('result', 'false');
+  }
+}
+
+checkReleaseNotesExists();

.github/actions/ai-generated-release-notes/comment-on-pr.js

@@ -0,0 +1,77 @@
+#!/usr/bin/env node
+
+import { Octokit } from '@octokit/rest';
+
+const token = process.env.GITHUB_TOKEN;
+const repo = process.env.GITHUB_REPOSITORY;
+const issueNumber = process.env.GITHUB_EVENT_ISSUE_NUMBER;
+const summaryDataJson = process.env.SUMMARY_DATA;
+const category = process.env.CATEGORY;
+
+if (!token || !repo || !issueNumber || !summaryDataJson || !category) {
+  console.log('Missing required environment variables');
+  process.exit(1);
+}
+
+const [owner, repoName] = repo.split('/');
+const octokit = new Octokit({ auth: token });
+
+async function commentOnPR() {
+  try {
+    const summaryData = JSON.parse(summaryDataJson);
+
+    if (!summaryData) {
+      console.log('No summary data available, skipping comment');
+      return;
+    }
+
+    if (!category || category === 'null') {
+      console.log('No valid category available, skipping comment');
+      return;
+    }
+
+    // Clean category for display
+    const cleanCategory =
+      typeof category === 'string'
+        ? category.replace(/^["']|["']$/g, '')
+        : category;
+
+    // Get PR info for the file URL
+    const { data: pr } = await octokit.rest.pulls.get({
+      owner,
+      repo: repoName,
+      pull_number: issueNumber,
+    });
+
+    const prBranch = pr.head.ref;
+    const headOwner = pr.head.repo.owner.login;
+    const headRepo = pr.head.repo.name;
+    const fileUrl = `https://github.com/${headOwner}/${headRepo}/blob/${prBranch}/upcoming-release-notes/${summaryData.prNumber}.md`;
+
+    const commentBody = [
+      '🤖 **Auto-generated Release Notes**',
+      '',
+      `Hey @${summaryData.author}! I've automatically created a release notes file based on CodeRabbit's analysis:`,
+      '',
+      `**Category:** ${cleanCategory}`,
+      `**Summary:** ${summaryData.summary}`,
+      `**File:** [upcoming-release-notes/${summaryData.prNumber}.md](${fileUrl})`,
+      '',
+      //      'The release notes file has been committed to the repository. You can edit it if needed before merging.',
+      "If you're happy with this release note, you can add it to your pull request. If not, you'll need to add your own before a maintainer can review your change.",
+    ].join('\n');
+
+    await octokit.rest.issues.createComment({
+      owner,
+      repo: repoName,
+      issue_number: issueNumber,
+      body: commentBody,
+    });
+
+    console.log('✅ Successfully commented on PR');
+  } catch (error) {
+    console.log('Error commenting on PR:', error.message);
+  }
+}
+
+commentOnPR();

.github/actions/ai-generated-release-notes/create-release-notes-file.js

@@ -0,0 +1,97 @@
+#!/usr/bin/env node
+
+import { Octokit } from '@octokit/rest';
+
+const token = process.env.GITHUB_TOKEN;
+const repo = process.env.GITHUB_REPOSITORY;
+const issueNumber = process.env.GITHUB_EVENT_ISSUE_NUMBER;
+const summaryDataJson = process.env.SUMMARY_DATA;
+const category = process.env.CATEGORY;
+
+if (!token || !repo || !issueNumber || !summaryDataJson || !category) {
+  console.log('Missing required environment variables');
+  process.exit(1);
+}
+
+const [owner, repoName] = repo.split('/');
+const octokit = new Octokit({ auth: token });
+
+async function createReleaseNotesFile() {
+  try {
+    const summaryData = JSON.parse(summaryDataJson);
+
+    console.log('Debug - Category value:', category);
+    console.log('Debug - Category type:', typeof category);
+    console.log('Debug - Category JSON stringified:', JSON.stringify(category));
+
+    if (!summaryData) {
+      console.log('No summary data available, cannot create file');
+      return;
+    }
+
+    if (!category || category === 'null') {
+      console.log('No valid category available, cannot create file');
+      return;
+    }
+
+    // Create file content - ensure category is not quoted
+    const cleanCategory =
+      typeof category === 'string'
+        ? category.replace(/^["']|["']$/g, '')
+        : category;
+    console.log('Debug - Clean category:', cleanCategory);
+
+    const fileContent = `---
+category: ${cleanCategory}
+authors: [${summaryData.author}]
+---
+
+${summaryData.summary}
+`;
+
+    const fileName = `upcoming-release-notes/${summaryData.prNumber}.md`;
+
+    console.log(`Creating release notes file: ${fileName}`);
+    console.log('File content:');
+    console.log(fileContent);
+
+    // Get PR info
+    const { data: pr } = await octokit.rest.pulls.get({
+      owner,
+      repo: repoName,
+      pull_number: issueNumber,
+    });
+
+    const prBranch = pr.head.ref;
+    const headOwner = pr.head.repo.owner.login;
+    const headRepo = pr.head.repo.name;
+
+    console.log(
+      `Committing to PR branch: ${headOwner}/${headRepo}:${prBranch}`,
+    );
+
+    // Create the file via GitHub API on the PR branch
+    await octokit.rest.repos.createOrUpdateFileContents({
+      owner: headOwner,
+      repo: headRepo,
+      path: fileName,
+      message: `Add release notes for PR #${summaryData.prNumber}`,
+      content: Buffer.from(fileContent).toString('base64'),
+      branch: prBranch,
+      committer: {
+        name: 'github-actions[bot]',
+        email: 'github-actions[bot]@users.noreply.github.com',
+      },
+      author: {
+        name: 'github-actions[bot]',
+        email: 'github-actions[bot]@users.noreply.github.com',
+      },
+    });
+
+    console.log(`✅ Successfully created release notes file: ${fileName}`);
+  } catch (error) {
+    console.log('Error creating release notes file:', error.message);
+  }
+}
+
+createReleaseNotesFile();

.github/actions/ai-generated-release-notes/determine-category.js

@@ -0,0 +1,118 @@
+#!/usr/bin/env node
+
+const fs = require('fs');
+const https = require('https');
+
+const commentBody = process.env.GITHUB_EVENT_COMMENT_BODY;
+const prDetailsJson = process.env.PR_DETAILS;
+const summaryDataJson = process.env.SUMMARY_DATA;
+const openaiApiKey = process.env.OPENAI_API_KEY;
+
+if (!commentBody || !prDetailsJson || !summaryDataJson || !openaiApiKey) {
+  console.log('Missing required environment variables');
+  process.exit(1);
+}
+
+function setOutput(name, value) {
+  fs.appendFileSync(process.env.GITHUB_OUTPUT, `${name}=${value}\n`);
+}
+
+try {
+  const prDetails = JSON.parse(prDetailsJson);
+  const summaryData = JSON.parse(summaryDataJson);
+
+  if (!summaryData || !prDetails) {
+    console.log('Missing data for categorization');
+    setOutput('result', 'null');
+    process.exit(0);
+  }
+
+  const data = JSON.stringify({
+    model: 'gpt-4o-mini',
+    messages: [
+      {
+        role: 'system',
+        content:
+          'You are categorizing pull requests for release notes. You must respond with exactly one of these categories: "Features", "Enhancements", "Bugfix", or "Maintenance". No other text or explanation.',
+      },
+      {
+        role: 'user',
+        content: `PR Title: ${prDetails.title}\n\nGenerated Summary: ${summaryData.summary}\n\nCodeRabbit Analysis:\n${commentBody}\n\nCategories:\n- Features: New functionality or capabilities\n- Bugfix: Fixes for broken or incorrect behavior\n- Enhancements: Improvements to existing functionality\n- Maintenance: Code cleanup, refactoring, dependencies, etc.\n\nWhat category does this PR belong to?`,
+      },
+    ],
+    max_tokens: 10,
+    temperature: 0.1,
+  });
+
+  const options = {
+    hostname: 'api.openai.com',
+    path: '/v1/chat/completions',
+    method: 'POST',
+    headers: {
+      Authorization: `Bearer ${openaiApiKey}`,
+      'Content-Type': 'application/json',
+    },
+  };
+
+  const req = https.request(options, res => {
+    let responseData = '';
+    res.on('data', chunk => (responseData += chunk));
+    res.on('end', () => {
+      if (res.statusCode !== 200) {
+        console.log('OpenAI API error for categorization');
+        setOutput('result', 'null');
+        return;
+      }
+
+      try {
+        const response = JSON.parse(responseData);
+        console.log('OpenAI raw response:', JSON.stringify(response, null, 2));
+
+        const rawContent = response.choices[0].message.content.trim();
+        console.log('Raw content from OpenAI:', rawContent);
+
+        let category;
+        try {
+          category = JSON.parse(rawContent);
+          console.log('Parsed category:', category);
+        } catch (parseError) {
+          console.log(
+            'JSON parse error, using raw content:',
+            parseError.message,
+          );
+          category = rawContent;
+        }
+
+        // Validate the category response
+        const validCategories = [
+          'Features',
+          'Bugfix',
+          'Enhancements',
+          'Maintenance',
+        ];
+        if (validCategories.includes(category)) {
+          console.log('OpenAI categorized as:', category);
+          setOutput('result', category);
+        } else {
+          console.log('Invalid category from OpenAI:', category);
+          console.log('Valid categories are:', validCategories);
+          setOutput('result', 'null');
+        }
+      } catch (error) {
+        console.log('Error parsing OpenAI response:', error.message);
+        setOutput('result', 'null');
+      }
+    });
+  });
+
+  req.on('error', error => {
+    console.log('Error in categorization:', error.message);
+    setOutput('result', 'null');
+  });
+
+  req.write(data);
+  req.end();
+} catch (error) {
+  console.log('Error in categorization:', error.message);
+  setOutput('result', 'null');
+}

.github/actions/ai-generated-release-notes/generate-summary.js

@@ -0,0 +1,97 @@
+#!/usr/bin/env node
+
+const fs = require('fs');
+const https = require('https');
+
+const commentBody = process.env.GITHUB_EVENT_COMMENT_BODY;
+const prDetailsJson = process.env.PR_DETAILS;
+const openaiApiKey = process.env.OPENAI_API_KEY;
+
+if (!commentBody || !prDetailsJson || !openaiApiKey) {
+  console.log('Missing required environment variables');
+  process.exit(1);
+}
+
+function setOutput(name, value) {
+  fs.appendFileSync(process.env.GITHUB_OUTPUT, `${name}=${value}\n`);
+}
+
+try {
+  const prDetails = JSON.parse(prDetailsJson);
+
+  if (!prDetails) {
+    console.log('No PR details available, cannot generate summary');
+    setOutput('result', 'null');
+    process.exit(0);
+  }
+
+  console.log('CodeRabbit comment body:', commentBody);
+
+  const data = JSON.stringify({
+    model: 'gpt-4o-mini',
+    messages: [
+      {
+        role: 'system',
+        content:
+          'You are a technical writer helping to create concise release notes. Generate a maximum 15-word summary that describes what this PR does. Focus on the user-facing changes or bug fixes. Do not include "This PR" or similar phrases - just describe the change directly. Start with a base form verb (e.g., "Add" not "Adds", "Fix" not "Fixes", "Introduce" not "Introduces").',
+      },
+      {
+        role: 'user',
+        content: `PR Title: ${prDetails.title}\n\nCodeRabbit Analysis:\n${commentBody}\n\nPlease provide a concise summary (max 15 words) of what this PR accomplishes.`,
+      },
+    ],
+    max_tokens: 50,
+    temperature: 0.3,
+  });
+
+  const options = {
+    hostname: 'api.openai.com',
+    path: '/v1/chat/completions',
+    method: 'POST',
+    headers: {
+      Authorization: `Bearer ${openaiApiKey}`,
+      'Content-Type': 'application/json',
+    },
+  };
+
+  const req = https.request(options, res => {
+    let responseData = '';
+    res.on('data', chunk => (responseData += chunk));
+    res.on('end', () => {
+      if (res.statusCode !== 200) {
+        console.log(`OpenAI API error: ${res.statusCode} ${res.statusMessage}`);
+        setOutput('result', 'null');
+        return;
+      }
+
+      try {
+        const response = JSON.parse(responseData);
+        const summary = response.choices[0].message.content.trim();
+
+        console.log('Generated summary:', summary);
+
+        const result = {
+          summary,
+          prNumber: prDetails.number,
+          author: prDetails.author,
+        };
+
+        setOutput('result', JSON.stringify(result));
+      } catch (error) {
+        console.log('Error parsing OpenAI response:', error.message);
+        setOutput('result', 'null');
+      }
+    });
+  });
+
+  req.on('error', error => {
+    console.log('Error generating summary:', error.message);
+    setOutput('result', 'null');
+  });
+
+  req.write(data);
+  req.end();
+} catch (error) {
+  console.log('Error generating summary:', error.message);
+  setOutput('result', 'null');
+}

.github/actions/ai-generated-release-notes/pr-details.js

@@ -0,0 +1,60 @@
+#!/usr/bin/env node
+
+import fs from 'fs';
+
+import { Octokit } from '@octokit/rest';
+
+const token = process.env.GITHUB_TOKEN;
+const repo = process.env.GITHUB_REPOSITORY;
+const issueNumber = process.env.GITHUB_EVENT_ISSUE_NUMBER;
+
+if (!token || !repo || !issueNumber) {
+  console.log('Missing required environment variables');
+  process.exit(1);
+}
+
+const [owner, repoName] = repo.split('/');
+const octokit = new Octokit({ auth: token });
+
+function setOutput(name, value) {
+  fs.appendFileSync(process.env.GITHUB_OUTPUT, `${name}=${value}\n`);
+}
+
+async function getPRDetails() {
+  try {
+    console.log(
+      `Fetching PR details for ${owner}/${repoName}#${issueNumber}...`,
+    );
+
+    const { data: pr } = await octokit.rest.pulls.get({
+      owner,
+      repo: repoName,
+      pull_number: issueNumber,
+    });
+
+    console.log('PR details fetched successfully');
+    console.log('- PR Number:', pr.number);
+    console.log('- PR Author:', pr.user.login);
+    console.log('- PR Title:', pr.title);
+
+    const result = {
+      number: pr.number,
+      author: pr.user.login,
+      title: pr.title,
+    };
+
+    setOutput('result', JSON.stringify(result));
+  } catch (error) {
+    console.log('Error getting PR details:', error.message);
+    console.log('Stack:', error.stack);
+    setOutput('result', 'null');
+    process.exit(1);
+  }
+}
+
+getPRDetails().catch(error => {
+  console.log('Unhandled error:', error.message);
+  console.log('Stack:', error.stack);
+  setOutput('result', 'null');
+  process.exit(1);
+});

.github/actions/bump-package-versions

@@ -1,30 +0,0 @@
-#!/bin/bash
-set -euo pipefail
-
-if [ "$#" -gt 0 ]; then
-    version="${1#v}"
-else
-    version=""
-fi
-
-files_to_bump=(
-    packages/api/package.json
-    packages/desktop-client/package.json
-    packages/desktop-electron/package.json
-)
-
-for file in "${files_to_bump[@]}"; do
-    if [ -z "$version" ]; then
-        # version format: YY.MM.patch
-        # logic: if before the 25th, bump patch, else set minor/major to next month
-        version="$(jq -r .version "$file" | perl -e '($y,$m,$p)=split/\./,<>;$d=(localtime)[3];$d>25?($p=0,++$m,$m>12&&($m=1,++$y)):$p++;print"$y.$m.$p\n"')"
-        if [ -z "$version" ]; then
-            echo "Error: Failed to calculate new version" >&2
-            exit 1
-        fi
-    fi
-
-    echo "Bumping $file to version $version"
-    jq '.version = "'"$version"'"' "$file" > "$file.tmp"
-    mv "$file.tmp" "$file"
-done

.github/actions/check-migrations.js

@@ -4,9 +4,8 @@
 // 1. Identify the migrations in packages/loot-core/migrations/* on `master` and HEAD
 // 2. Make sure that any new migrations on HEAD are dated after the latest migration on `master`.
 
-const fs = require('fs');
-const path = require('path');
 const { spawnSync } = require('child_process');
+const path = require('path');
 
 const migrationsDir = path.join(
   __dirname,
@@ -36,14 +35,15 @@ function readMigrations(ref) {
 }
 
 spawnSync('git', ['fetch', 'origin', 'master']);
-let masterMigrations = readMigrations('origin/master');
-let headMigrations = readMigrations('HEAD');
+const masterMigrations = readMigrations('origin/master');
+const headMigrations = readMigrations('HEAD');
 
-let latestMasterMigration = masterMigrations[masterMigrations.length - 1].date;
-let newMigrations = headMigrations.filter(
+const latestMasterMigration =
+  masterMigrations[masterMigrations.length - 1].date;
+const newMigrations = headMigrations.filter(
   migration => !masterMigrations.find(m => m.name === migration.name),
 );
-let badMigrations = newMigrations.filter(
+const badMigrations = newMigrations.filter(
   migration => migration.date <= latestMasterMigration,
 );
 

.github/actions/docs-spelling/README.md

@@ -0,0 +1,17 @@
+# check-spelling/check-spelling configuration
+
+| File                                               | Purpose                                                                          | Format                                                                                            | Info                                                                                                 |
+| -------------------------------------------------- | -------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------- | ---------------------------------------------------------------------------------------------------- |
+| [dictionary.txt](dictionary.txt)                   | Replacement dictionary (creating this file will override the default dictionary) | one word per line                                                                                 | [dictionary](https://github.com/check-spelling/check-spelling/wiki/Configuration#dictionary)         |
+| [allow.txt](allow.txt)                             | Add words to the dictionary                                                      | one word per line (only letters and `'`s allowed)                                                 | [allow](https://github.com/check-spelling/check-spelling/wiki/Configuration#allow)                   |
+| [reject.txt](reject.txt)                           | Remove words from the dictionary (after allow)                                   | grep pattern matching whole dictionary words                                                      | [reject](https://github.com/check-spelling/check-spelling/wiki/Configuration-Examples%3A-reject)     |
+| [excludes.txt](excludes.txt)                       | Files to ignore entirely                                                         | perl regular expression                                                                           | [excludes](https://github.com/check-spelling/check-spelling/wiki/Configuration-Examples%3A-excludes) |
+| [only.txt](only.txt)                               | Only check matching files (applied after excludes)                               | perl regular expression                                                                           | [only](https://github.com/check-spelling/check-spelling/wiki/Configuration-Examples%3A-only)         |
+| [patterns.txt](patterns.txt)                       | Patterns to ignore from checked lines                                            | perl regular expression (order matters, first match wins)                                         | [patterns](https://github.com/check-spelling/check-spelling/wiki/Configuration-Examples%3A-patterns) |
+| [candidate.patterns](candidate.patterns)           | Patterns that might be worth adding to [patterns.txt](patterns.txt)              | perl regular expression with optional comment block introductions (all matches will be suggested) | [candidates](https://github.com/check-spelling/check-spelling/wiki/Feature:-Suggest-patterns)        |
+| [line_forbidden.patterns](line_forbidden.patterns) | Patterns to flag in checked lines                                                | perl regular expression (order matters, first match wins)                                         | [patterns](https://github.com/check-spelling/check-spelling/wiki/Configuration-Examples%3A-patterns) |
+| [expect.txt](expect.txt)                           | Expected words that aren't in the dictionary                                     | one word per line (sorted, alphabetically)                                                        | [expect](https://github.com/check-spelling/check-spelling/wiki/Configuration#expect)                 |
+| [advice.md](advice.md)                             | Supplement for GitHub comment when unrecognized words are found                  | GitHub Markdown                                                                                   | [advice](https://github.com/check-spelling/check-spelling/wiki/Configuration-Examples%3A-advice)     |
+
+Note: you can replace any of these files with a directory by the same name (minus the suffix)
+and then include multiple files inside that directory (with that suffix) to merge multiple files together.

.github/actions/docs-spelling/advice.md

@@ -0,0 +1,24 @@
+<!-- See https://github.com/check-spelling/check-spelling/wiki/Configuration-Examples%3A-advice --> <!-- markdownlint-disable MD033 MD041 -->
+<details>
+<summary>If the flagged items are :exploding_head: false positives</summary>
+
+If items relate to a ...
+
+- binary file (or some other file you wouldn't want to check at all).
+
+  Please add a file path to the `excludes.txt` file matching the containing file.
+
+  File paths are Perl 5 Regular Expressions - you can [test](https://www.regexplanet.com/advanced/perl/) yours before committing to verify it will match your files.
+
+  `^` refers to the file's path from the root of the repository, so `^README\.md$` would exclude [README.md](../tree/HEAD/README.md) (on whichever branch you're using).
+
+- well-formed pattern.
+
+  If you can write a [pattern](https://github.com/check-spelling/check-spelling/wiki/Configuration-Examples:-patterns) that would match it,
+  try adding it to the `patterns.txt` file.
+
+  Patterns are Perl 5 Regular Expressions - you can [test](https://www.regexplanet.com/advanced/perl/) yours before committing to verify it will match your lines.
+
+  Note that patterns can't match multiline strings.
+
+</details>

.github/actions/docs-spelling/allow/contributers.txt

@@ -0,0 +1,8 @@
+trevdor
+Farlow
+Matiss
+Aboltins
+jlongster
+howell
+evequefou
+Fiddaman

.github/actions/docs-spelling/allow/keywords.txt

@@ -0,0 +1,152 @@
+ABANCA
+actualbudget
+addtransactions
+Akahu
+AMZN
+Andelskassen
+AQL
+Authelia
+autocompletes
+Belarusian
+Blix
+bnp
+BSCHESMM
+BTC
+CAGLESMM
+Caju
+caniuse
+Cardless
+CAROOT
+categorygroup
+Cembra
+Certbot
+CLI
+clickable
+clsx
+codemirror
+Coinbase
+commandlet
+Coverflex
+Crd
+crdt
+creditcards
+crowdsourced
+debian
+dedupes
+deleteaccount
+DKB
+DKK
+dmg
+easybank
+Edenred
+Coverfelx
+emojis
+emoji
+escodegen
+EUR
+expando
+Firefox
+flyctl
+Formik
+Fortuneo
+gebabebb
+GEBABEBB
+Greenshot
+GTQ
+HSA
+htpasswd
+IBANs
+IDR
+iex
+importtransactions
+ING
+invokable
+iwr
+jointaccounts
+jwl
+KBC
+kcab
+keyout
+KREDBEBB
+Kroger
+kubectl
+kubernetes
+ldaplogin
+letsencrypt
+libofx
+linting
+Linuxes
+linuxsvg
+lleskassen
+lte
+mac
+macsvg
+Mariushosting
+minimalistic
+monkeypatch
+Monobank
+Morrisons
+MYR
+NAIAGB
+NDEADKKK
+Netflix
+netlify
+Nordea
+NORDEA
+nordigen
+notlike
+NRNBGB
+nynab
+offbudget
+ofx
+OFX
+oneof
+oxfmt
+oxlint
+payeerule
+pikaday
+pikapods
+playsinline
+portalization
+Postgresql
+protobuf
+publix
+QFX
+QIF
+Quicken
+returnsandreimbursements
+responsitivity
+Rezip
+roadmap
+RUpdate
+sankey
+SANTANDER
+screenshots
+SEB
+subfolders
+subreaper
+subtransaction
+subtransactions
+Suisse
+Sztup
+tini
+traefik
+Trafico
+Trumf
+Upstash
+useb
+usernames
+valign
+Venmo
+Weblate
+winsvg
+WSL
+Xxxxx
+ynab
+Ynab
+YNAB
+ZKB
+Zsolt
+IDBy
+isapprox
+isbetween

.github/actions/docs-spelling/excludes.txt

@@ -0,0 +1,77 @@
+# See https://github.com/check-spelling/check-spelling/wiki/Configuration-Examples:-excludes
+(?:^|/)(?i)COPYRIGHT
+(?:^|/)(?i)LICEN[CS]E
+(?:^|/)3rdparty/
+(?:^|/)go\.sum$
+(?:^|/)package(?:-lock|)\.json$
+(?:^|/)pyproject.toml
+(?:^|/)requirements(?:-dev|-doc|-test|)\.txt$
+(?:^|/)vendor/
+ignore$
+\.a$
+\.ai$
+\.avi$
+\.bmp$
+\.bz2$
+\.class$
+\.coveragerc$
+\.crt$
+\.css$
+\.dll$
+\.docx?$
+\.drawio$
+\.DS_Store$
+\.eot$
+\.exe$
+\.gif$
+\.git-blame-ignore-revs$
+\.gitattributes$
+\.graffle$
+\.gz$
+\.icns$
+\.ico$
+\.jar$
+\.jks$
+\.jpe?g$
+\.key$
+\.lib$
+\.lock$
+\.map$
+\.min\..
+\.mod$
+\.mp[34]$
+\.o$
+\.ocf$
+\.otf$
+\.pdf$
+\.pem$
+\.png$
+\.psd$
+\.pyc$
+\.pylintrc$
+\.s$
+\.svgz?$
+\.tar$
+\.tiff?$
+\.ttf$
+\.wav$
+\.webm$
+\.webp$
+\.woff2?$
+\.xlsx?$
+\.zip$
+^\.github/actions/spelling/
+^\.github/ISSUE_TEMPLATE/
+^\Q.github/workflows/spelling.yml\E$
+^\.yarn/
+^\Qnode_modules/\E$
+^\Qsrc/\E$
+^\Qstatic/\E$
+^\Q.github/\E$
+(?:^|/)package(?:-lock|)\.json$
+(?:^|/)yarn\.lock$
+(?:^|/)(?i)docusaurus.config.js
+(?:^|/)(?i)README.md
+(?:^|/)(?i).nojekyll
+^\static/
+\.tsx$

.github/actions/docs-spelling/expect.txt

@@ -0,0 +1,186 @@
+Abanca
+ABNAMRO
+ABNANL
+Activo
+AESUDEF
+ALZEY
+Anglais
+aql
+AUR
+Authentik
+AVERAGEA
+BANKA
+BANKINTER
+BAWAATWW
+Belfius
+Biedenkopf
+BIGBPLPW
+Bizum
+BKBKESMM
+BOFIIE
+Bourso
+Boursobank
+Boursorama
+BPER
+BPMOIT
+brexplpw
+BYLADEM
+Caddyfile
+CAGLPTPL
+Caixa
+CAMT
+cashflow
+Cetelem
+cimode
+Citi
+Citibank
+Cloudflare
+CMCIFRPAXXX
+COBADEFF
+CODEOWNERS
+COEP
+commerzbank
+COOP
+Copiar
+COUNTA
+COUNTBLANK
+countif
+CREGBEBB
+crt
+Danske
+datadir
+DATEDIF
+Depositos
+deselection
+DIREKT
+Dockerfiles
+Dominguez
+DUSSDEDDXXX
+DUSSELDORF
+EDATE
+ENTERCARD
+Entra
+EOMONTH
+EUA
+Eurocard
+fidd
+Fineco
+Finicity
+Fintro
+Finverse
+flathub
+Flathub
+FORTUNEO
+FTNOFRP
+Gemeinschaftsbank
+Geral
+gernes
+Globecard
+GLS
+gocardless
+Grafana
+HABAL
+Hampel
+HELADEF
+HLOOKUP
+IFERROR
+IFNA
+INDUSTRIEL
+INGBPLPW
+Ingo
+INR
+Intesa
+INVSTMTMSGSRS
+IRR
+ISERROR
+ISEVEN
+ISLOGICAL
+ISNA
+ISODD
+ISOWEEKNUM
+ISTEXT
+ISYBANK
+ITBBITMM
+jfdoming
+JMD
+jws
+KBCBE
+Keycloak
+Khurozov
+KORT
+Kreditbank
+lage
+LHV
+LHVBEE
+LKR
+MAXA
+mbank
+mdc
+modals
+Moldovan
+murmurhash
+NETWORKDAYS
+nginx
+OIDC
+overbudgeted
+overbudgeting
+oxc
+Paribas
+passwordless
+pluggyai
+Poste
+PPABPLPK
+prefs
+Primoco
+Priotecs
+proactively
+pwa
+Qatari
+QNTOFRP
+QONTO
+Raiffeisen
+REGEXREPLACE
+revolut
+RIED
+RSchedule
+RSD
+SEK
+simplefin
+SKHSFI
+Sparkasse
+SPK
+sseldorf
+SSK
+Stadtsparkasse
+statestore
+STDEVP
+SUBASKBX
+sumif
+SUMPRODUCT
+SUMSQ
+SVGR
+swc
+SWEDBANK
+SWEDNOKK
+Synology
+systemctl
+tada
+taskbar
+templating
+THB
+touchscreen
+triaging
+UAH
+ubuntu
+userinfo
+Userscripts
+UZS
+VLOOKUP
+vrt
+VUB
+Wallos
+websecure
+WEEKNUM
+Widiba
+WOR
+youngcw

.github/actions/docs-spelling/line_forbidden.patterns

@@ -0,0 +1,62 @@
+# reject `m_data` as there's a certain OS which has evil defines that break things if it's used elsewhere
+# \bm_data\b
+
+# If you have a framework that uses `it()` for testing and `fit()` for debugging a specific test,
+# you might not want to check in code where you were debugging w/ `fit()`, in which case, you might want
+# to use this:
+#\bfit\(
+
+# s.b. GitHub
+#\bGithub\b
+
+# s.b. GitLab
+\bGitlab\b
+
+# s.b. JavaScript
+\bJavascript\b
+
+# s.b. Microsoft
+\bMicroSoft\b
+
+# s.b. another
+\ban[- ]other\b
+
+# s.b. greater than
+\bgreater then\b
+
+# s.b. into
+#\sin to\s
+
+# s.b. opt-in
+\sopt in\s
+
+# s.b. less than
+\bless then\b
+
+# s.b. otherwise
+\bother[- ]wise\b
+
+# s.b. nonexistent
+\bnon existing\b
+\b[Nn]o[nt][- ]existent\b
+
+# s.b. preexisting
+[Pp]re[- ]existing
+
+# s.b. preempt
+[Pp]re[- ]empt\b
+
+# s.b. preemptively
+[Pp]re[- ]emptively
+
+# s.b. reentrancy
+[Rr]e[- ]entrancy
+
+# s.b. reentrant
+[Rr]e[- ]entrant
+
+# s.b. workaround(s)
+\bwork[- ]arounds?\b
+
+# Reject duplicate words
+\s([A-Z]{3,}|[A-Z][a-z]{2,}|[a-z]{3,})\s\g{-1}\s

.github/actions/docs-spelling/only.txt

@@ -0,0 +1,3 @@
+# Only check files in the packages/docs directory
+^packages/docs/
+

.github/actions/docs-spelling/patterns.txt

@@ -0,0 +1,81 @@
+# See https://github.com/check-spelling/check-spelling/wiki/Configuration-Examples:-patterns
+
+# Questionably acceptable forms of `in to`
+# Personally, I prefer `log into`, but people object
+# https://www.tprteaching.com/log-into-log-in-to-login/
+\b[Ll]og in to\b
+
+# acceptable duplicates
+# ls directory listings
+[-bcdlpsw](?:[-r][-w][-Ssx]){3}\s+\d+\s+\S+\s+\S+\s+\d+\s+
+# C types and repeated CSS values
+\s(center|div|inherit|long|LONG|none|normal|solid|thin|transparent|very)(?: \g{-1})+\s
+# go templates
+\s(\w+)\s+\g{-1}\s+\`(?:graphql|json|yaml):
+# javadoc / .net
+(?:[\\@](?:groupname|param)|(?:public|private)(?:\s+static|\s+readonly)*)\s+(\w+)\s+\g{-1}\s
+
+# Commit message -- Signed-off-by and friends
+^\s*(?:(?:Based-on-patch|Co-authored|Helped|Mentored|Reported|Reviewed|Signed-off)-by|Thanks-to): (?:[^<]*<[^>]*>|[^<]*)\s*$
+
+# Autogenerated revert commit message
+^This reverts commit [0-9a-f]{40}\.$
+
+# ignore long runs of a single character:
+\b([A-Za-z])\g{-1}{3,}\b
+
+# Automatically suggested patterns
+# hit-count: 1255 file-count: 51
+# https/http/file urls
+(?:\b(?:https?|ftp|file)://)[-A-Za-z0-9+&@#/%?=~_|!:,.;]+[-A-Za-z0-9+&@#/%=~_|]
+
+# hit-count: 1174 file-count: 33
+# GitHub SHAs (markdown)
+(?:\[`?[0-9a-f]+`?\]\(https:/|)/(?:www\.|)github\.com(?:/[^/\s"]+){2,}(?:/[^/\s")]+)(?:[0-9a-f]+(?:[-0-9a-zA-Z/#.]*|)\b|)
+
+# hit-count: 6 file-count: 4
+# version suffix <word>v#
+(?:(?<=[A-Z]{2})V|(?<=[a-z]{2}|[A-Z]{2})v)\d+(?:\b|(?=[a-zA-Z_]))
+
+# hit-count: 6 file-count: 2
+# URL escaped characters
+\%[0-9A-F][A-F]
+
+# hit-count: 5 file-count: 4
+# hex runs
+\b[0-9a-fA-F]{16,}\b
+
+# hit-count: 4 file-count: 2
+# uuid:
+\b[0-9a-fA-F]{8}-(?:[0-9a-fA-F]{4}-){3}[0-9a-fA-F]{12}\b
+
+# hit-count: 3 file-count: 2
+# discord
+/discord(?:app\.com|\.gg)/(?:invite/)?[a-zA-Z0-9]{7,}
+
+# hit-count: 2 file-count: 2
+# Contributor
+\[[^\]]+\]\(https://github\.com/[^/\s"]+\)
+@[^$\W]*-?\w+
+
+# hit-count: 1 file-count: 1
+# While you could try to match `http://` and `https://` by using `s?` in `https?://`, sometimes there
+# YouTube url
+\b(?:(?:www\.|)youtube\.com|youtu.be)/(?:channel/|embed/|user/|playlist\?list=|watch\?v=|v/|)[-a-zA-Z0-9?&=_%]*
+
+# hit-count: 1 file-count: 1
+# Google Fonts
+\bfonts\.(?:googleapis|gstatic)\.com/[-/?=:;+&0-9a-zA-Z]*
+
+# hit-count: 1 file-count: 1
+# hex digits including css/html color classes:
+(?:[\\0][xX]|\\u|[uU]\+|#x?|\%23)[0-9_a-fA-FgGrR]*?[a-fA-FgGrR]{2,}[0-9_a-fA-FgGrR]*(?:[uUlL]{0,3}|u\d+)\b
+
+# docusaurus image paths, URLs
+[-a-zA-Z0-9@:%_\+.~#?&//=]{2,256}\.[a-z]{2,4}\b(\/[-a-zA-Z0-9@:%_\+.~#?&//=]*)?
+
+# eliminate words like [`nvm`] or [`asdf`] or [heidiSQL] without backquotes
+\[.+?]
+
+# allowlist specific non-English words with non-ASCII characters
+\b(Länsförsäkringar|München|Złoty)\b

.github/actions/docs-spelling/reject.txt

@@ -0,0 +1,10 @@
+^attache$
+benefitting
+occurences?
+^dependan.*
+^oer$
+Sorce
+^[Ss]pae.*
+^untill$
+^untilling$
+^wether.*

.github/actions/netlify-wait-for-build

@@ -1,40 +0,0 @@
-#!/bin/bash
-
-current_commit=$(git rev-parse HEAD)
-
-echo "Running on commit $COMMIT_SHA"
-
-function get_status() {
-  echo "::group::API Response"
-  curl --header "Authorization: Bearer $GITHUB_TOKEN" "https://api.github.com/repos/actualbudget/actual/commits/$COMMIT_SHA/statuses" > /tmp/status.json
-  cat /tmp/status.json
-  echo "::endgroup::"
-  netlify=$(yarn jq '[.[] | select(.context == "netlify/actualbudget/deploy-preview")][0]' /tmp/status.json)
-  state=$(yarn jq -r '.state' <<< "$netlify")
-  echo "::group::Netlify Status"
-  echo "$netlify"
-  echo "::endgroup::"
-}
-
-get_status
-
-while [ "$netlify" == "null" ]; do
-  echo "Waiting for Netlify to start building..."
-  sleep 10
-  get_status
-done
-
-while [ "$state" == "pending" ]; do
-  echo "Waiting for Netlify to finish building..."
-  sleep 10
-  get_status
-done
-
-if [ "$state" == "success" ]; then
-  echo -e "\033[0;32mNetlify build succeeded!\033[0m"
-  yarn jq -r '"url=" + .target_url' <<< "$netlify" > $GITHUB_OUTPUT
-  exit 0
-else
-  echo -e "\033[0;31mNetlify build failed. Cancelling end-to-end tests.\033[0m"
-  exit 1
-fi

.github/actions/setup/action.yml

@@ -1,4 +1,5 @@
 name: Setup
+description: Setup the environment for the project
 
 inputs:
   working-directory:
@@ -14,26 +15,40 @@ runs:
   using: composite
   steps:
     - name: Install node
-      uses: actions/setup-node@v4
+      uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6.0.0
       with:
-        node-version: 18.16.0
+        node-version: 22
     - name: Install yarn
       run: npm install -g yarn
       shell: bash
       if: ${{ env.ACT }}
+    - name: Get Node version
+      id: get-node
+      run: echo "version=$(node -v)" >> "$GITHUB_OUTPUT"
+      shell: bash
     - name: Cache
-      uses: actions/cache@v4
+      uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
       id: cache
       with:
         path: ${{ format('{0}/**/node_modules', inputs.working-directory) }}
-        key: yarn-v1-${{ runner.os }}-${{ hashFiles(format('{0}/.nvmrc', inputs.working-directory)) }}-${{ hashFiles(format('{0}/**/yarn.lock', inputs.working-directory)) }}
+        key: yarn-v1-${{ runner.os }}-${{ steps.get-node.outputs.version }}-${{ hashFiles(format('{0}/**/yarn.lock', inputs.working-directory)) }}
+    - name: Ensure Lage cache directory exists
+      run: mkdir -p ${{ format('{0}/.lage', inputs.working-directory) }}
+      shell: bash
+    - name: Cache Lage
+      uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
+      with:
+        path: ${{ format('{0}/.lage', inputs.working-directory) }}
+        key: lage-${{ runner.os }}-${{ github.sha }}
+        restore-keys: |
+          lage-${{ runner.os }}-
     - name: Install
       working-directory: ${{ inputs.working-directory }}
       run: yarn --immutable
       shell: bash
       if: steps.cache.outputs.cache-hit != 'true'
     - name: Download translations
-      uses: actions/checkout@v4
+      uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
       with:
         repository: actualbudget/translations
         path: ${{ inputs.working-directory }}/packages/desktop-client/locale

.github/scripts/count-points.mjs

@@ -0,0 +1,357 @@
+import { Octokit } from '@octokit/rest';
+import { minimatch } from 'minimatch';
+import pLimit from 'p-limit';
+
+const limit = pLimit(50);
+
+const CONFIG = {
+  POINTS_PER_ISSUE_TRIAGE_ACTION: 1,
+  POINTS_PER_ISSUE_CLOSING_ACTION: 1,
+  POINTS_PER_RELEASE_PR: 4, // Awarded to whoever merges the release PR
+  // Point tiers for code changes (non-docs)
+  CODE_PR_REVIEW_POINT_TIERS: [
+    { minChanges: 500, points: 8 },
+    { minChanges: 100, points: 6 },
+    { minChanges: 10, points: 2 },
+    { minChanges: 0, points: 1 },
+  ],
+  // Point tiers for docs changes (packages/docs/**)
+  DOCS_PR_REVIEW_POINT_TIERS: [
+    { minChanges: 2000, points: 6 },
+    { minChanges: 200, points: 4 },
+    { minChanges: 0, points: 2 },
+  ],
+  EXCLUDED_FILES: [
+    'yarn.lock',
+    '.yarn/**/*',
+    'packages/component-library/src/icons/**/*',
+    'release-notes/**/*',
+    'upcoming-release-notes/**/*',
+  ],
+  DOCS_FILES_PATTERN: 'packages/docs/**/*',
+};
+
+/**
+ * Get the start and end dates for the last month.
+ * @returns {Object} An object containing the start and end dates.
+ */
+function getLastMonthDates() {
+  // Get data relating to the last month
+  const now = new Date();
+  // Always use UTC for calculations
+  const firstDayOfLastMonth = new Date(
+    Date.UTC(now.getUTCFullYear(), now.getUTCMonth() - 1, 1, 0, 0, 0, 0),
+  );
+  const since = process.env.START_DATE
+    ? new Date(Date.parse(process.env.START_DATE))
+    : firstDayOfLastMonth;
+
+  // Calculate the end of the month for the since date in UTC
+  const until = new Date(
+    Date.UTC(
+      since.getUTCFullYear(),
+      since.getUTCMonth() + 1,
+      0,
+      23,
+      59,
+      59,
+      999,
+    ),
+  );
+
+  return { since, until };
+}
+
+/**
+ * Used for calculating the monthly points each core contributor has earned.
+ * These are used for payouts depending.
+ * @returns {Map} A map of contributor logins to their total points earned
+ */
+async function countContributorPoints() {
+  const octokit = new Octokit({
+    auth: process.env.GITHUB_TOKEN,
+  });
+  const owner = 'actualbudget';
+  const repo = 'actual';
+
+  const { since, until } = getLastMonthDates();
+
+  // Get organization members
+  const { data: orgMembers } = await octokit.orgs.listMembers({
+    org: owner,
+  });
+  const orgMemberLogins = new Set(orgMembers.map(member => member.login));
+
+  // Initialize stats map with all org members
+  const stats = new Map(
+    Array.from(orgMemberLogins).map(login => [
+      login,
+      {
+        codeReviews: [], // Will store objects with PR number and points for main repo changes
+        docsReviews: [], // Will store objects with PR number and points for docs changes
+        labelRemovals: [],
+        issueClosings: [],
+        points: 0,
+      },
+    ]),
+  );
+
+  // Helper function to print statistics
+  const printStats = (title, getValue, formatLine) => {
+    console.log(`\n${title}:`);
+    console.log('='.repeat(title.length + 1));
+
+    const entries = Array.from(stats.entries())
+      .map(([user, userStats]) => [user, getValue(userStats)])
+      .filter(([, count]) => count > 0)
+      .sort((a, b) => b[1] - a[1]);
+
+    if (entries.length === 0) {
+      console.log(`No ${title.toLowerCase()} found in the last month.`);
+    } else {
+      entries.forEach(([user, count]) => {
+        console.log(formatLine(user, count));
+      });
+    }
+  };
+
+  // Get all PRs using search
+  const searchQuery = `repo:${owner}/${repo} is:pr is:merged merged:${since.toISOString()}..${until.toISOString()}`;
+  const recentPRs = await octokit.paginate(
+    'GET /search/issues',
+    {
+      q: searchQuery,
+      per_page: 100,
+      advanced_search: true,
+    },
+    response => response.data.filter(pr => pr.number),
+  );
+
+  // Get reviews and PR details for each PR
+  await Promise.all(
+    recentPRs.map(pr =>
+      limit(async () => {
+        const [reviews, modifiedFiles] = await Promise.all([
+          octokit.pulls.listReviews({ owner, repo, pull_number: pr.number }),
+          octokit.paginate(
+            octokit.pulls.listFiles,
+            {
+              owner,
+              repo,
+              pull_number: pr.number,
+              per_page: 100,
+            },
+            res => res.data,
+          ),
+        ]);
+
+        const filteredFiles = modifiedFiles.filter(
+          file =>
+            !CONFIG.EXCLUDED_FILES.some(pattern =>
+              minimatch(file.filename, pattern, { dot: true }),
+            ),
+        );
+
+        const docsFiles = filteredFiles.filter(file =>
+          minimatch(file.filename, CONFIG.DOCS_FILES_PATTERN, { dot: true }),
+        );
+        const codeFiles = filteredFiles.filter(
+          file =>
+            !minimatch(file.filename, CONFIG.DOCS_FILES_PATTERN, { dot: true }),
+        );
+
+        const docsChanges = docsFiles.reduce(
+          (sum, file) => sum + file.additions + file.deletions,
+          0,
+        );
+        const codeChanges = codeFiles.reduce(
+          (sum, file) => sum + file.additions + file.deletions,
+          0,
+        );
+
+        const docsPoints =
+          docsChanges > 0
+            ? (CONFIG.DOCS_PR_REVIEW_POINT_TIERS.find(
+                t => docsChanges >= t.minChanges,
+              )?.points ?? 0)
+            : 0;
+        const codePoints =
+          codeChanges > 0 || docsChanges === 0
+            ? (CONFIG.CODE_PR_REVIEW_POINT_TIERS.find(
+                t => codeChanges >= t.minChanges,
+              )?.points ?? 0)
+            : 0;
+
+        const isReleasePR = pr.title.match(/🔖.*\d+\.\d+\.\d+/);
+
+        if (isReleasePR) {
+          // release PRs are created by the github-actions bot so we attribute points to the merger
+          const { data: prDetails } = await octokit.pulls.get({
+            owner,
+            repo,
+            pull_number: pr.number,
+          });
+
+          if (prDetails.merged_by && stats.has(prDetails.merged_by.login)) {
+            const mergerStats = stats.get(prDetails.merged_by.login);
+            mergerStats.codeReviews.push({
+              pr: pr.number.toString(),
+              points: CONFIG.POINTS_PER_RELEASE_PR,
+              isReleaseMerger: true,
+            });
+            mergerStats.points += CONFIG.POINTS_PER_RELEASE_PR;
+          }
+        } else {
+          const uniqueReviewers = new Set();
+          reviews.data.forEach(review => {
+            if (
+              review.state === 'APPROVED' &&
+              stats.has(review.user?.login) &&
+              !uniqueReviewers.has(review.user?.login)
+            ) {
+              const reviewer = review.user.login;
+              uniqueReviewers.add(reviewer);
+              const userStats = stats.get(reviewer);
+
+              if (docsPoints > 0) {
+                userStats.docsReviews.push({
+                  pr: pr.number.toString(),
+                  points: docsPoints,
+                });
+                userStats.points += docsPoints;
+              }
+
+              if (codePoints > 0) {
+                userStats.codeReviews.push({
+                  pr: pr.number.toString(),
+                  points: codePoints,
+                });
+                userStats.points += codePoints;
+              }
+            }
+          });
+        }
+      }),
+    ),
+  );
+
+  // Get all issues with label events in the last month
+  const issues = await octokit.paginate(octokit.issues.listForRepo, {
+    owner,
+    repo,
+    state: 'all',
+    sort: 'updated',
+    direction: 'desc',
+    per_page: 100,
+    since: since.toISOString(),
+  });
+
+  // Get label events for each issue
+  await Promise.all(
+    issues.map(issue =>
+      limit(async () => {
+        const { data: events } = await octokit.issues.listEventsForTimeline({
+          owner,
+          repo,
+          issue_number: issue.number,
+        });
+
+        events
+          .filter(event => {
+            const createdAt = new Date(event.created_at);
+            return (
+              createdAt.getTime() > since.getTime() &&
+              createdAt.getTime() <= until.getTime() &&
+              stats.has(event.actor?.login)
+            );
+          })
+          .forEach(event => {
+            if (
+              event.event === 'unlabeled' &&
+              event.label?.name.toLowerCase() === 'needs triage'
+            ) {
+              const remover = event.actor.login;
+              const userStats = stats.get(remover);
+              userStats.labelRemovals.push(issue.number.toString());
+              userStats.points += CONFIG.POINTS_PER_ISSUE_TRIAGE_ACTION;
+            }
+
+            if (
+              event.event === 'closed' &&
+              event.state_reason === 'not_planned'
+            ) {
+              const closer = event.actor.login;
+              const userStats = stats.get(closer);
+              userStats.issueClosings.push(issue.number.toString());
+              userStats.points += CONFIG.POINTS_PER_ISSUE_CLOSING_ACTION;
+            }
+          });
+      }),
+    ),
+  );
+
+  // Print all statistics
+  printStats(
+    'Code Review Statistics',
+    stats => stats.codeReviews.length,
+    (user, count) =>
+      `${user}: ${count} (PRs: ${stats
+        .get(user)
+        .codeReviews.map(r => {
+          if (r.isReleaseMerger) {
+            return `#${r.pr} (${r.points}pts - Release Merger)`;
+          }
+          return `#${r.pr} (${r.points}pts)`;
+        })
+        .join(', ')})`,
+  );
+
+  printStats(
+    'Docs Review Statistics',
+    stats => stats.docsReviews.length,
+    (user, count) =>
+      `${user}: ${count} (PRs: ${stats
+        .get(user)
+        .docsReviews.map(r => `#${r.pr} (${r.points}pts)`)
+        .join(', ')})`,
+  );
+
+  printStats(
+    '"Needs Triage" Label Removal Statistics',
+    stats => stats.labelRemovals.length,
+    (user, count) =>
+      `${user}: ${count} (Issues: ${stats.get(user).labelRemovals.join(', ')})`,
+  );
+
+  printStats(
+    'Issue Closing Statistics',
+    stats => stats.issueClosings.length,
+    (user, count) =>
+      `${user}: ${count} (Issues: ${stats.get(user).issueClosings.join(', ')})`,
+  );
+
+  // Print points summary
+  printStats(
+    'Points Summary',
+    stats => stats.points,
+    (user, userPoints) => `${user}: ${userPoints}`,
+  );
+
+  // Calculate and print total points
+  const totalPoints = Array.from(stats.values()).reduce(
+    (sum, userStats) => sum + userStats.points,
+    0,
+  );
+  console.log(`\nTotal points earned: ${totalPoints}`);
+
+  // Return the points
+  return new Map(
+    Array.from(stats.entries()).map(([login, userStats]) => [
+      login,
+      userStats.points,
+    ]),
+  );
+}
+
+// Run the calculations
+countContributorPoints().catch(console.error);

.github/workflows/ai-generated-release-notes.yml

@@ -0,0 +1,91 @@
+name: Generate Release Notes from CodeRabbit summary
+
+on:
+  issue_comment:
+    types: [created]
+
+jobs:
+  generate-release-notes:
+    # Only run on PR comments from CodeRabbit bot
+    if: github.event.issue.pull_request && github.event.comment.user.login == 'coderabbitai[bot]'
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+    permissions:
+      contents: write
+      pull-requests: write
+      issues: write
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+      - name: Set up environment
+        uses: ./.github/actions/setup
+        with:
+          download-translations: 'false'
+
+      - name: Check if this is CodeRabbit's first comment
+        id: check-first-comment
+        run: node .github/actions/ai-generated-release-notes/check-first-comment.js
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GITHUB_REPOSITORY: ${{ github.repository }}
+          GITHUB_EVENT_ISSUE_NUMBER: ${{ github.event.issue.number }}
+          GITHUB_EVENT_COMMENT_ID: ${{ github.event.comment.id }}
+
+      - name: Get PR details
+        if: steps.check-first-comment.outputs.result == 'true'
+        id: pr-details
+        run: node .github/actions/ai-generated-release-notes/pr-details.js
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GITHUB_REPOSITORY: ${{ github.repository }}
+          GITHUB_EVENT_ISSUE_NUMBER: ${{ github.event.issue.number }}
+
+      - name: Check if release notes file already exists
+        if: steps.check-first-comment.outputs.result == 'true' && steps.pr-details.outputs.result != 'null'
+        id: check-release-notes-exists
+        run: node .github/actions/ai-generated-release-notes/check-release-notes-exists.js
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GITHUB_REPOSITORY: ${{ github.repository }}
+          GITHUB_EVENT_ISSUE_NUMBER: ${{ github.event.issue.number }}
+          PR_DETAILS: ${{ steps.pr-details.outputs.result }}
+
+      - name: Generate summary with OpenAI
+        if: steps.check-first-comment.outputs.result == 'true' && steps.check-release-notes-exists.outputs.result == 'false'
+        id: generate-summary
+        run: node .github/actions/ai-generated-release-notes/generate-summary.js
+        env:
+          OPENAI_API_KEY: ${{ secrets.OPENAI_API_KEY }}
+          GITHUB_EVENT_COMMENT_BODY: ${{ github.event.comment.body }}
+          PR_DETAILS: ${{ steps.pr-details.outputs.result }}
+
+      - name: Determine category with OpenAI
+        if: steps.check-first-comment.outputs.result == 'true' && steps.check-release-notes-exists.outputs.result == 'false' && steps.generate-summary.outputs.result != 'null'
+        id: determine-category
+        run: node .github/actions/ai-generated-release-notes/determine-category.js
+        env:
+          OPENAI_API_KEY: ${{ secrets.OPENAI_API_KEY }}
+          GITHUB_EVENT_COMMENT_BODY: ${{ github.event.comment.body }}
+          PR_DETAILS: ${{ steps.pr-details.outputs.result }}
+          SUMMARY_DATA: ${{ steps.generate-summary.outputs.result }}
+
+      - name: Create and commit release notes file via GitHub API
+        if: steps.check-first-comment.outputs.result == 'true' && steps.check-release-notes-exists.outputs.result == 'false' && steps.generate-summary.outputs.result != 'null' && steps.determine-category.outputs.result != 'null' && steps.determine-category.outputs.result != ''
+        run: node .github/actions/ai-generated-release-notes/create-release-notes-file.js
+        env:
+          GITHUB_TOKEN: ${{ secrets.ACTIONS_UPDATE_TOKEN }}
+          GITHUB_REPOSITORY: ${{ github.repository }}
+          GITHUB_EVENT_ISSUE_NUMBER: ${{ github.event.issue.number }}
+          SUMMARY_DATA: ${{ steps.generate-summary.outputs.result }}
+          CATEGORY: ${{ steps.determine-category.outputs.result }}
+
+      - name: Comment on PR
+        if: steps.check-first-comment.outputs.result == 'true' && steps.check-release-notes-exists.outputs.result == 'false' && steps.generate-summary.outputs.result != 'null' && steps.determine-category.outputs.result != 'null' && steps.determine-category.outputs.result != ''
+        run: node .github/actions/ai-generated-release-notes/comment-on-pr.js
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GITHUB_REPOSITORY: ${{ github.repository }}
+          GITHUB_EVENT_ISSUE_NUMBER: ${{ github.event.issue.number }}
+          SUMMARY_DATA: ${{ steps.generate-summary.outputs.result }}
+          CATEGORY: ${{ steps.determine-category.outputs.result }}

.github/workflows/autofix.yml

@@ -0,0 +1,25 @@
+name: autofix.ci
+
+defaults:
+  run:
+    shell: bash
+
+on:
+  pull_request:
+    types: [opened, synchronize, reopened, ready_for_review]
+
+permissions:
+  contents: read
+
+jobs:
+  autofix:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+      - name: Set up environment
+        uses: ./.github/actions/setup
+        with:
+          download-translations: 'false'
+      - name: Format code
+        run: yarn lint:fix
+      - uses: autofix-ci/action@635ffb0c9798bd160680f18fd73371e355b85f27

.github/workflows/build.yml

@@ -12,6 +12,7 @@ on:
     branches:
       - master
   pull_request:
+  merge_group:
 
 concurrency:
   group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
@@ -21,31 +22,42 @@ jobs:
   api:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
       - name: Set up environment
         uses: ./.github/actions/setup
+        with:
+          download-translations: 'false'
       - name: Build API
         run: cd packages/api && yarn build
       - name: Create package tgz
         run: cd packages/api && yarn pack && mv package.tgz actual-api.tgz
+      - name: Prepare bundle stats artifact
+        run: cp packages/api/app/stats.json api-stats.json
       - name: Upload Build
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0
         with:
           name: actual-api
           path: packages/api/actual-api.tgz
+      - name: Upload API bundle stats
+        uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0
+        with:
+          name: api-build-stats
+          path: api-stats.json
 
   crdt:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
       - name: Set up environment
         uses: ./.github/actions/setup
+        with:
+          download-translations: 'false'
       - name: Build CRDT
         run: cd packages/crdt && yarn build
       - name: Create package tgz
         run: cd packages/crdt && yarn pack && mv package.tgz actual-crdt.tgz
       - name: Upload Build
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0
         with:
           name: actual-crdt
           path: packages/crdt/actual-crdt.tgz
@@ -53,18 +65,18 @@ jobs:
   web:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
       - name: Set up environment
         uses: ./.github/actions/setup
       - name: Build Web
-        run: ./bin/package-browser
+        run: yarn build:browser
       - name: Upload Build
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0
         with:
           name: actual-web
           path: packages/desktop-client/build
       - name: Upload Build Stats
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0
         with:
           name: build-stats
           path: packages/desktop-client/build-stats
@@ -72,13 +84,15 @@ jobs:
   server:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
       - name: Set up environment
         uses: ./.github/actions/setup
+        with:
+          download-translations: 'false'
       - name: Build Server
-        run: cd packages/sync-server && yarn build
+        run: yarn workspace @actual-app/sync-server build
       - name: Upload Build
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0
         with:
           name: sync-server
           path: packages/sync-server/build

.github/workflows/check.yml

@@ -5,6 +5,7 @@ on:
     branches:
       - master
   pull_request:
+  merge_group:
 
 concurrency:
   group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
@@ -14,25 +15,43 @@ jobs:
   lint:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
       - name: Set up environment
         uses: ./.github/actions/setup
+        with:
+          download-translations: 'false'
       - name: Lint
         run: yarn lint
   typecheck:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
       - name: Set up environment
         uses: ./.github/actions/setup
+        with:
+          download-translations: 'false'
       - name: Typecheck
         run: yarn typecheck
+  validate-cli:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+      - name: Set up environment
+        uses: ./.github/actions/setup
+        with:
+          download-translations: 'false'
+      - name: Build Web
+        run: yarn build:server
+      - name: Check that the built CLI works
+        run: node packages/sync-server/build/bin/actual-server.js --version
   test:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
       - name: Set up environment
         uses: ./.github/actions/setup
+        with:
+          download-translations: 'false'
       - name: Test
         run: yarn test
 
@@ -40,9 +59,9 @@ jobs:
     if: github.event_name == 'pull_request'
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-node@v4
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+      - uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6.0.0
         with:
-          node-version: '19'
+          node-version: 22
       - name: Check migrations
         run: node ./.github/actions/check-migrations.js

.github/workflows/codeql.yml

@@ -22,7 +22,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
 
       - name: Initialize CodeQL
         uses: github/codeql-action/init@v3

.github/workflows/count-points.yml

@@ -0,0 +1,28 @@
+name: Count points
+
+on:
+  schedule:
+    # Run at 00:00 on the first day of every month
+    - cron: '0 0 1 * *'
+  workflow_dispatch:
+    inputs:
+      startDate:
+        description: 'Start date for point counter (YYYY-MM-DD)'
+        required: true
+        type: string
+
+jobs:
+  count-points:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+      - name: Set up environment
+        uses: ./.github/actions/setup
+        with:
+          download-translations: 'false'
+      - name: Count points
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          START_DATE: ${{ inputs.startDate }}
+        run: node .github/scripts/count-points.mjs

.github/workflows/docker-edge.yml

@@ -1,30 +1,25 @@
 name: Build Edge Docker Image
 
-# Edge Docker images are built for every commit, and daily
+# Edge Docker images are built for every push to master
 on:
   push:
     branches:
       - master
-    paths:
-      - 'packages/sync-server/**'
-  pull_request:
-    branches:
-      - master
-    paths:
-      - 'packages/sync-server/**'
-  schedule:
-    - cron: '0 0 * * *'
   workflow_dispatch:
 
+concurrency:
+  group: docker-edge-build
+  cancel-in-progress: true
+
 permissions:
   contents: read
   packages: write
 
 env:
   IMAGES: |
-    actualbudget/actual-server
-    ghcr.io/actualbudget/actual-server
-    ghcr.io/actualbudget/actual
+    ${{ !github.event.repository.fork && 'actualbudget/actual-server' || '' }}
+    ghcr.io/${{ github.repository_owner }}/actual-server
+    ghcr.io/${{ github.repository_owner }}/actual
 
   # Creates the following tags:
   # - actual-server:edge
@@ -34,24 +29,24 @@ env:
 
 jobs:
   build:
-    if: ${{ github.event.repository.fork == false }}
+    if: github.event_name == 'workflow_dispatch' || !github.event.repository.fork
     name: Build Docker image
     runs-on: ubuntu-latest
     strategy:
       matrix:
         os: [ubuntu, alpine]
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
 
       - name: Set up QEMU
-        uses: docker/setup-qemu-action@v3
+        uses: docker/setup-qemu-action@c7c53464625b32c7a7e944ae62b3e17d2b600130 # v3.7.0
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@e468171a9de216ec08956ac3ada2f0791b6bd435 # v3.11.1
 
       - name: Docker meta
         id: meta
-        uses: docker/metadata-action@v5
+        uses: docker/metadata-action@318604b99e75e41977312d83839a89be02ca4893 # v5.9.0
         with:
           # Push to both Docker Hub and Github Container Registry
           images: ${{ env.IMAGES }}
@@ -59,31 +54,50 @@ jobs:
           tags: ${{ env.TAGS }}
 
       - name: Login to Docker Hub
-        uses: docker/login-action@v3
-        if: github.event_name != 'pull_request'
+        uses: docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef # v3.6.0
+        if: github.event_name != 'pull_request' && !github.event.repository.fork
         with:
           username: ${{ secrets.DOCKERHUB_USERNAME }}
           password: ${{ secrets.DOCKERHUB_TOKEN }}
 
       - name: Login to GitHub Container Registry
-        uses: docker/login-action@v3
+        uses: docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef # v3.6.0
         if: github.event_name != 'pull_request'
         with:
           registry: ghcr.io
           username: ${{ github.repository_owner }}
           password: ${{ secrets.GITHUB_TOKEN }}
 
-      - name: Download artifacts
-        run: ./packages/sync-server/docker/download-artifacts.sh
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+      # Building outside of the docker image allows us to build once and push to multiple platforms
+      # This is faster and avoids yarn memory issues
+      - name: Set up environment
+        uses: ./.github/actions/setup
+      - name: Build Web
+        run: yarn build:server
 
-      - name: Build and push image
-        uses: docker/build-push-action@v5
+      - name: Build image for testing
+        uses: docker/build-push-action@263435318d21b8e681c14492fe198d362a7d2c83 # v6.18.0
+        with:
+          context: .
+          push: false
+          load: true
+          file: packages/sync-server/docker/${{ matrix.os }}.Dockerfile
+          tags: actualbudget/actual-server-testing
+
+      - name: Test that the docker image boots
+        run: |
+          docker run --detach --network=host actualbudget/actual-server-testing
+          sleep 5
+          curl --fail -sS -LI -w '%{http_code}\n' --retry 10 --retry-delay 1 --retry-connrefused localhost:5006
+
+      # This will use the cache from the earlier build step and not rebuild the image
+      # https://docs.docker.com/build/ci/github-actions/test-before-push/
+      - name: Build and push images
+        uses: docker/build-push-action@263435318d21b8e681c14492fe198d362a7d2c83 # v6.18.0
         with:
           context: .
           push: ${{ github.event_name != 'pull_request' }}
-          file: packages/sync-server/docker/edge-${{ matrix.os }}.Dockerfile
+          file: packages/sync-server/docker/${{ matrix.os }}.Dockerfile
           platforms: linux/amd64,linux/arm64,linux/arm/v7${{ matrix.os == 'alpine' && ',linux/arm/v6' || '' }}
           tags: ${{ steps.meta.outputs.tags }}
           build-args: |

.github/workflows/docker-release.yml

@@ -28,17 +28,17 @@ jobs:
     name: Build Docker image
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
 
       - name: Set up QEMU
-        uses: docker/setup-qemu-action@v3
+        uses: docker/setup-qemu-action@c7c53464625b32c7a7e944ae62b3e17d2b600130 # v3.7.0
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@e468171a9de216ec08956ac3ada2f0791b6bd435 # v3.11.1
 
       - name: Docker meta
         id: meta
-        uses: docker/metadata-action@v5
+        uses: docker/metadata-action@318604b99e75e41977312d83839a89be02ca4893 # v5.9.0
         with:
           # Push to both Docker Hub and Github Container Registry
           images: ${{ env.IMAGES }}
@@ -48,7 +48,7 @@ jobs:
 
       - name: Docker meta for Alpine image
         id: alpine-meta
-        uses: docker/metadata-action@v5
+        uses: docker/metadata-action@318604b99e75e41977312d83839a89be02ca4893 # v5.9.0
         with:
           images: ${{ env.IMAGES }}
           # Automatically update :latest
@@ -58,32 +58,39 @@ jobs:
           tags: ${{ env.TAGS }}
 
       - name: Login to Docker Hub
-        uses: docker/login-action@v3
+        uses: docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef # v3.6.0
         with:
           username: ${{ secrets.DOCKERHUB_USERNAME }}
           password: ${{ secrets.DOCKERHUB_TOKEN }}
 
       - name: Login to GitHub Container Registry
-        uses: docker/login-action@v3
+        uses: docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef # v3.6.0
         with:
           registry: ghcr.io
           username: ${{ github.repository_owner }}
           password: ${{ secrets.GITHUB_TOKEN }}
 
+      # Building outside of the docker image allows us to build once and push to multiple platforms
+      # This is faster and avoids yarn memory issues
+      - name: Set up environment
+        uses: ./.github/actions/setup
+      - name: Build Web
+        run: yarn build:server
+
       - name: Build and push ubuntu image
-        uses: docker/build-push-action@v5
+        uses: docker/build-push-action@263435318d21b8e681c14492fe198d362a7d2c83 # v6.18.0
         with:
           context: .
           push: true
-          file: packages/sync-server/docker/stable-ubuntu.Dockerfile
+          file: packages/sync-server/docker/ubuntu.Dockerfile
           platforms: linux/amd64,linux/arm64,linux/arm/v7
           tags: ${{ steps.meta.outputs.tags }}
 
       - name: Build and push alpine image
-        uses: docker/build-push-action@v5
+        uses: docker/build-push-action@263435318d21b8e681c14492fe198d362a7d2c83 # v6.18.0
         with:
           context: .
           push: true
-          file: packages/sync-server/docker/stable-alpine.Dockerfile
+          file: packages/sync-server/docker/alpine.Dockerfile
           platforms: linux/amd64,linux/arm64,linux/arm/v7,linux/arm/v6
           tags: ${{ steps.alpine-meta.outputs.tags }}

.github/workflows/docs-release.yml

@@ -0,0 +1,33 @@
+name: Release Docs to Github Pages
+
+# Release docs on every push to master
+on:
+  push:
+    branches:
+      - master
+    paths:
+      - 'packages/docs/**'
+      - '.github/workflows/docs-spelling.yml'
+      - '.github/actions/docs-spelling/**'
+  workflow_dispatch:
+
+jobs:
+  deploy:
+    runs-on: ubuntu-latest
+    name: Deploy Docs
+    if: github.event.repository.fork == false
+    steps:
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+
+      - name: Set up environment
+        uses: ./.github/actions/setup
+        with:
+          download-translations: 'false'
+
+      - name: Docusaurus Deploy
+        run: |
+          GIT_USER=MikesGlitch \
+          GIT_PASS=${{ secrets.DOCS_GITHUB_PAGES_DEPLOY }} \
+          GIT_USER_NAME=github-actions[bot] \
+          GIT_USER_EMAIL=github-actions[bot]@users.noreply.github.com \
+          yarn deploy:docs

.github/workflows/docs-spelling.yml

@@ -0,0 +1,164 @@
+name: Check Spelling (Docs)
+
+# Comment management is handled through a secondary job, for details see:
+# https://github.com/check-spelling/check-spelling/wiki/Feature%3A-Restricted-Permissions
+#
+# `jobs.comment-push` runs when a push is made to a repository and the `jobs.spelling` job needs to make a comment
+#   (in odd cases, it might actually run just to collapse a comment, but that's fairly rare)
+#   it needs `contents: write` in order to add a comment.
+#
+# `jobs.comment-pr` runs when a pull_request is made to a repository and the `jobs.spelling` job needs to make a comment
+#   or collapse a comment (in the case where it had previously made a comment and now no longer needs to show a comment)
+#   it needs `pull-requests: write` in order to manipulate those comments.
+
+# Updating pull request branches is managed via comment handling.
+# For details, see: https://github.com/check-spelling/check-spelling/wiki/Feature:-Update-expect-list
+#
+# These elements work together to make it happen:
+#
+# `on.issue_comment`
+#   This event listens to comments by users asking to update the metadata.
+#
+# `jobs.update`
+#   This job runs in response to an issue_comment and will push a new commit
+#   to update the spelling metadata.
+#
+# `with.experimental_apply_changes_via_bot`
+#   Tells the action to support and generate messages that enable it
+#   to make a commit to update the spelling metadata.
+#
+# `with.ssh_key`
+#   In order to trigger workflows when the commit is made, you can provide a
+#   secret (typically, a write-enabled github deploy key).
+#
+#   For background, see: https://github.com/check-spelling/check-spelling/wiki/Feature:-Update-with-deploy-key
+
+on:
+  push:
+    branches:
+      - '**'
+    tags-ignore:
+      - '**'
+    paths:
+      - 'packages/docs/**'
+      - '.github/workflows/docs-spelling.yml'
+      - '.github/actions/docs-spelling/**'
+  pull_request_target:
+    branches:
+      - '**'
+    tags-ignore:
+      - '**'
+    paths:
+      - 'packages/docs/**'
+      - '.github/workflows/docs-spelling.yml'
+      - '.github/actions/docs-spelling/**'
+    types:
+      - 'opened'
+      - 'reopened'
+      - 'synchronize'
+  issue_comment:
+    types:
+      - 'created'
+
+jobs:
+  spelling:
+    name: Check Spelling
+    permissions:
+      contents: read
+      pull-requests: read
+      actions: read
+      security-events: write
+    outputs:
+      followup: ${{ steps.spelling.outputs.followup }}
+    runs-on: ubuntu-latest
+    if: "contains(github.event_name, 'pull_request') || github.event_name == 'push'"
+    concurrency:
+      group: spelling-${{ github.event.pull_request.number || github.ref }}
+      # note: If you use only_check_changed_files, you do not want cancel-in-progress
+      cancel-in-progress: true
+    steps:
+      - name: check-spelling
+        id: spelling
+        uses: check-spelling/check-spelling@main
+        with:
+          suppress_push_for_open_pull_request: 1
+          checkout: true
+          check_file_names: 1
+          spell_check_this: check-spelling/spell-check-this@prerelease
+          post_comment: 0
+          use_magic_file: 1
+          experimental_apply_changes_via_bot: 1
+          use_sarif: 1
+          extra_dictionary_limit: 12
+          check_extra_dictionaries: ''
+          extra_dictionaries: cspell:cpp/src/cpp.txt
+            cspell:software-terms/src/software-terms.txt
+            cspell:python/src/python/python-lib.txt
+            cspell:node/node.txt
+            cspell:filetypes/filetypes.txt
+            cspell:aws/aws.txt
+            cspell:typescript/dict/typescript.txt
+            cspell:npm/dict/npm.txt
+            cspell:fullstack/dict/fullstack.txt
+            cspell:html/dict/html.txt
+            cspell:css/dict/css.txt
+          config: .github/actions/docs-spelling
+
+  comment-push:
+    name: Report (Push)
+    # If your workflow isn't running on push, you can remove this job
+    runs-on: ubuntu-latest
+    needs: spelling
+    permissions:
+      contents: write
+    if: (success() || failure()) && needs.spelling.outputs.followup && github.event_name == 'push'
+    steps:
+      - name: comment
+        uses: check-spelling/check-spelling@main
+        with:
+          checkout: true
+          spell_check_this: check-spelling/spell-check-this@prerelease
+          task: ${{ needs.spelling.outputs.followup }}
+          config: .github/actions/docs-spelling
+
+  comment-pr:
+    name: Report (PR)
+    # If you workflow isn't running on pull_request*, you can remove this job
+    runs-on: ubuntu-latest
+    needs: spelling
+    permissions:
+      pull-requests: write
+    if: (success() || failure()) && needs.spelling.outputs.followup && contains(github.event_name, 'pull_request')
+    steps:
+      - name: comment
+        uses: check-spelling/check-spelling@main
+        with:
+          checkout: true
+          spell_check_this: check-spelling/spell-check-this@prerelease
+          task: ${{ needs.spelling.outputs.followup }}
+          experimental_apply_changes_via_bot: 1
+          config: .github/actions/docs-spelling
+
+  update:
+    name: Update PR
+    permissions:
+      contents: write
+      pull-requests: write
+      actions: read
+    runs-on: ubuntu-latest
+    if: ${{
+      github.event_name == 'issue_comment' &&
+      github.event.issue.pull_request &&
+      contains(github.event.comment.body, '@check-spelling-bot apply')
+      }}
+    concurrency:
+      group: spelling-update-${{ github.event.issue.number }}
+      cancel-in-progress: false
+    steps:
+      - name: apply spelling updates
+        uses: check-spelling/check-spelling@main
+        with:
+          experimental_apply_changes_via_bot: 1
+          checkout: true
+          ssh_key: '${{ secrets.CHECK_SPELLING }}'
+          config: .github/actions/docs-spelling

.github/workflows/e2e-test.yml

@@ -2,6 +2,17 @@ name: E2E Tests
 
 on:
   pull_request:
+    paths:
+      - 'packages/**'
+      - 'package.json'
+      - 'yarn.lock'
+      - '.github/workflows/e2e-test.yml'
+      - '!packages/sync-server/**' # Sync server changes don't affect E2E tests
+      - '!packages/api/**' # API changes don't affect E2E tests
+      - '!packages/ci-actions/**' # CI actions changes don't affect E2E tests
+      - '!packages/docs/**' # Docs changes don't affect E2E tests
+      - '!packages/eslint-plugin-actual/**' # Eslint plugin changes don't affect E2E tests
+  merge_group:
 
 env:
   GITHUB_PR_NUMBER: ${{github.event.pull_request.number}}
@@ -11,61 +22,120 @@ concurrency:
   cancel-in-progress: true
 
 jobs:
-  netlify:
-    name: Wait for Netlify build to finish
-    runs-on: ubuntu-latest
-    outputs:
-      netlify_url: ${{ steps.netlify.outputs.url }}
-    steps:
-      - uses: actions/checkout@v4
-      - name: Set up environment
-        uses: ./.github/actions/setup
-      - name: Wait for Netlify build to finish
-        id: netlify
-        env:
-          COMMIT_SHA: ${{ github.event.pull_request.head.sha }}
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-        run: ./.github/actions/netlify-wait-for-build
-
   functional:
-    name: Functional
-    needs: netlify
+    name: Functional (shard ${{ matrix.shard }}/5)
     runs-on: ubuntu-latest
+    strategy:
+      fail-fast: false
+      matrix:
+        shard: [1, 2, 3, 4, 5]
     container:
-      image: mcr.microsoft.com/playwright:v1.41.1-jammy
+      image: mcr.microsoft.com/playwright:v1.56.0-jammy
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
       - name: Set up environment
         uses: ./.github/actions/setup
-      - name: Run E2E Tests on Netlify URL
-        run: yarn e2e
-        env:
-          E2E_START_URL: ${{ needs.netlify.outputs.netlify_url }}
-      - uses: actions/upload-artifact@v4
+        with:
+          download-translations: 'false'
+      - name: Trust the repository directory
+        run: git config --global --add safe.directory "$GITHUB_WORKSPACE"
+      - name: Run E2E Tests
+        run: yarn e2e --shard=${{ matrix.shard }}/5
+      - uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0
         if: always()
         with:
-          name: desktop-client-test-results
+          name: desktop-client-test-results-shard-${{ matrix.shard }}
           path: packages/desktop-client/test-results/
           retention-days: 30
           overwrite: true
+
+  functional-desktop-app:
+    name: Functional Desktop App
+    runs-on: ubuntu-latest
+    container:
+      image: mcr.microsoft.com/playwright:v1.56.0-jammy
+    steps:
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+      - name: Set up environment
+        uses: ./.github/actions/setup
+        with:
+          download-translations: 'false'
+      - name: Trust the repository directory
+        run: git config --global --add safe.directory "$GITHUB_WORKSPACE"
+      - name: Run Desktop app E2E Tests
+        run: |
+          xvfb-run --auto-servernum --server-args="-screen 0 1920x1080x24" -- yarn e2e:desktop
+      - uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0
+        if: always()
+        with:
+          name: desktop-app-test-results
+          path: packages/desktop-electron/e2e/test-results/
+          retention-days: 30
+          overwrite: true
+
   vrt:
-    name: Visual regression
-    needs: netlify
+    name: Visual regression (shard ${{ matrix.shard }}/5)
     runs-on: ubuntu-latest
+    strategy:
+      fail-fast: false
+      matrix:
+        shard: [1, 2, 3, 4, 5]
     container:
-      image: mcr.microsoft.com/playwright:v1.41.1-jammy
+      image: mcr.microsoft.com/playwright:v1.56.0-jammy
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
       - name: Set up environment
         uses: ./.github/actions/setup
-      - name: Run VRT Tests on Netlify URL
-        run: yarn vrt
-        env:
-          E2E_START_URL: ${{ needs.netlify.outputs.netlify_url }}
-      - uses: actions/upload-artifact@v4
+        with:
+          download-translations: 'false'
+      - name: Run VRT Tests
+        run: yarn vrt --shard=${{ matrix.shard }}/5
+      - uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0
         if: always()
         with:
-          name: desktop-client-test-results
-          path: packages/desktop-client/test-results/
+          name: vrt-blob-report-${{ matrix.shard }}
+          path: packages/desktop-client/blob-report/
+          retention-days: 1
+          overwrite: true
+
+  merge-vrt:
+    name: Merge VRT Reports
+    needs: vrt
+    runs-on: ubuntu-latest
+    if: ${{ !cancelled() }}
+    container:
+      image: mcr.microsoft.com/playwright:v1.56.0-jammy
+    steps:
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+      - name: Set up environment
+        uses: ./.github/actions/setup
+      - name: Download all blob reports
+        uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
+        with:
+          path: packages/desktop-client/all-blob-reports
+          pattern: vrt-blob-report-*
+          merge-multiple: true
+      - name: Merge reports
+        id: merge-reports
+        run: yarn workspace @actual-app/web run playwright merge-reports --reporter html ./all-blob-reports
+      - uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0
+        id: playwright-report-vrt
+        with:
+          name: html-report--attempt-${{ github.run_attempt }}
+          path: packages/desktop-client/playwright-report
           retention-days: 30
           overwrite: true
+      - name: Save VRT metadata for comment workflow
+        if: github.event_name == 'pull_request'
+        run: |
+          mkdir -p vrt-metadata
+          echo "${{ github.event.pull_request.number }}" > vrt-metadata/pr-number.txt
+          echo "${{ needs.vrt.result }}" > vrt-metadata/vrt-result.txt
+          echo "${{ steps.playwright-report-vrt.outputs.artifact-url }}" > vrt-metadata/artifact-url.txt
+      - name: Upload VRT metadata
+        if: github.event_name == 'pull_request'
+        uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0
+        with:
+          name: vrt-comment-metadata
+          path: vrt-metadata/
+          retention-days: 1

.github/workflows/e2e-vrt-comment.yml

@@ -0,0 +1,66 @@
+name: VRT Comment
+# This workflow posts VRT failure comments on PRs, including fork PRs.
+# It runs with elevated permissions via workflow_run trigger.
+on:
+  workflow_run:
+    workflows: ['E2E Tests']
+    types:
+      - completed
+
+permissions:
+  actions: read
+  pull-requests: write
+
+jobs:
+  comment:
+    name: Post VRT Comment
+    runs-on: ubuntu-latest
+    if: github.event.workflow_run.event == 'pull_request'
+    steps:
+      - name: Download VRT metadata
+        uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
+        with:
+          github-token: ${{ secrets.GITHUB_TOKEN }}
+          run-id: ${{ github.event.workflow_run.id }}
+          name: vrt-comment-metadata
+          path: /tmp/vrt-metadata
+        continue-on-error: true
+
+      - name: Extract metadata
+        id: metadata
+        run: |
+          if [ ! -f "/tmp/vrt-metadata/pr-number.txt" ]; then
+            echo "No metadata found, skipping..."
+            echo "should_comment=false" >> "$GITHUB_OUTPUT"
+            exit 0
+          fi
+
+          PR_NUMBER=$(cat "/tmp/vrt-metadata/pr-number.txt")
+          VRT_RESULT=$(cat "/tmp/vrt-metadata/vrt-result.txt")
+          ARTIFACT_URL=$(cat "/tmp/vrt-metadata/artifact-url.txt")
+
+          echo "pr_number=$PR_NUMBER" >> "$GITHUB_OUTPUT"
+          echo "vrt_result=$VRT_RESULT" >> "$GITHUB_OUTPUT"
+          echo "artifact_url=$ARTIFACT_URL" >> "$GITHUB_OUTPUT"
+
+          if [ "$VRT_RESULT" = "failure" ]; then
+            echo "should_comment=true" >> "$GITHUB_OUTPUT"
+            echo "VRT tests failed for PR #$PR_NUMBER"
+          else
+            echo "should_comment=false" >> "$GITHUB_OUTPUT"
+            echo "VRT tests passed or skipped for PR #$PR_NUMBER"
+          fi
+
+      - name: Comment on PR with VRT report link
+        if: steps.metadata.outputs.should_comment == 'true'
+        uses: marocchino/sticky-pull-request-comment@773744901bac0e8cbb5a0dc842800d45e9b2b405 # v2.9.4
+        with:
+          number: ${{ steps.metadata.outputs.pr_number }}
+          header: vrt-comment
+          hide_and_recreate: true
+          hide_classify: OUTDATED
+          message: |
+            <!-- vrt-comment -->
+            VRT tests ❌ failed. [View the test report](${{ steps.metadata.outputs.artifact_url }}).
+
+            To update the VRT screenshots, comment `/update-vrt` on this PR. The VRT update operation takes about 50 minutes.

.github/workflows/electron-master.yml

@@ -24,12 +24,12 @@ jobs:
     strategy:
       matrix:
         os:
-          - ubuntu-latest
+          - ubuntu-22.04
           - windows-latest
           - macos-latest
     runs-on: ${{ matrix.os }}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
       - if: ${{ startsWith(matrix.os, 'windows') }}
         run: pip.exe install setuptools
       - if: ${{ ! startsWith(matrix.os, 'windows') }}
@@ -38,15 +38,27 @@ jobs:
           python3 -m venv .venv
           source .venv/bin/activate
           python3 -m pip install setuptools
+      - name: Process release version
+        id: process_version
+        run: |
+          echo "version=${GITHUB_REF_NAME#v}" >> "$GITHUB_OUTPUT"
       - if: ${{ startsWith(matrix.os, 'ubuntu') }}
+        name: Setup Flatpak dependencies
         run: |
           sudo apt-get update
           sudo apt-get install flatpak -y
           sudo apt-get install flatpak-builder -y
           sudo flatpak remote-add --if-not-exists flathub https://flathub.org/repo/flathub.flatpakrepo
-          sudo flatpak install org.freedesktop.Sdk/x86_64/23.08 -y
-          sudo flatpak install org.freedesktop.Platform/x86_64/23.08 -y
-          sudo flatpak install org.electronjs.Electron2.BaseApp/x86_64/23.08 -y
+          sudo flatpak install org.freedesktop.Sdk//24.08 -y
+          sudo flatpak install org.freedesktop.Platform//24.08 -y
+          sudo flatpak install org.electronjs.Electron2.BaseApp//24.08 -y
+          sudo flatpak install org.flatpak.Builder -y
+
+          METAINFO_FILE="packages/desktop-electron/extra-resources/linux/com.actualbudget.actual.metainfo.xml"
+          TODAY=$(date +%Y-%m-%d)
+          VERSION=${{ steps.process_version.outputs.version }}
+          sed -i "s/%RELEASE_VERSION%/$VERSION/g; s/%RELEASE_DATE%/$TODAY/g" "$METAINFO_FILE"
+          flatpak run --command=flatpak-builder-lint org.flatpak.Builder appstream "$METAINFO_FILE"
       - name: Set up environment
         uses: ./.github/actions/setup
       - name: Build Electron for Mac
@@ -57,11 +69,12 @@ jobs:
           CSC_LINK: ${{ secrets.CSC_LINK }}
           APPLE_ID: ${{ secrets.APPLE_ID }}
           APPLE_APP_SPECIFIC_PASSWORD: ${{ secrets.APPLE_APP_SPECIFIC_PASSWORD }}
+          APPLE_TEAM_ID: ${{ secrets.APPLE_TEAM_ID }}
       - name: Build Electron
         if: ${{ ! startsWith(matrix.os, 'macos') }}
         run: ./bin/package-electron
       - name: Upload Build
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0
         with:
           name: actual-electron-${{ matrix.os }}
           path: |
@@ -72,18 +85,123 @@ jobs:
             packages/desktop-electron/dist/*.flatpak
       - name: Upload Windows Store Build
         if: ${{ startsWith(matrix.os, 'windows') }}
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0
         with:
           name: actual-electron-${{ matrix.os }}-appx
           path: |
             packages/desktop-electron/dist/*.appx
-      - name: Add to Release
-        uses: softprops/action-gh-release@v2
+      - name: Add to new release
+        uses: softprops/action-gh-release@5be0e66d93ac7ed76da52eca8bb058f665c3a5fe # v2.4.2
         with:
           draft: true
+          body: |
+            :link: [View release notes](https://actualbudget.org/blog/release-${{ steps.process_version.outputs.version }})
+
+            ## Desktop releases
+            Please note: Microsoft store updates can sometimes lag behind the main release by a couple of days while they verify the new version.
+
+            <p>
+              <a href="https://apps.microsoft.com/detail/9p2hmlhsdbrm?cid=Github+Releases&mode=direct"><img src="https://get.microsoft.com/images/en-us%20dark.svg" width="200" /></a>
+              <img src="data:image/gif;base64,R0lGODlhAQABAAAAACw=" width="12" height="1" alt="" />
+              <a href="https://flathub.org/apps/com.actualbudget.actual"><img width="165" style="margin-left:12px;" alt="Get it on Flathub" src="https://flathub.org/api/badge?locale=en" /></a>
+            </p>
           files: |
             packages/desktop-electron/dist/*.dmg
             packages/desktop-electron/dist/*.exe
             !packages/desktop-electron/dist/Actual-windows.exe
             packages/desktop-electron/dist/*.AppImage
             packages/desktop-electron/dist/*.flatpak
+
+    outputs:
+      version: ${{ steps.process_version.outputs.version }}
+
+  publish-microsoft-store:
+    needs: build
+    runs-on: windows-latest
+    if: ${{ github.event_name == 'push' && startsWith(github.ref, 'refs/tags/v') }}
+    steps:
+      - name: Install StoreBroker
+        shell: powershell
+        run: |
+          Install-Module -Name StoreBroker -AcceptLicense -Force -Scope CurrentUser -Verbose
+
+      - name: Download Microsoft Store artifacts
+        uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
+        with:
+          name: actual-electron-windows-latest-appx
+
+      - name: Submit to Microsoft Store
+        shell: powershell
+        run: |
+          # Disable telemetry
+          $global:SBDisableTelemetry = $true
+
+          # Authenticate against the store
+          $pass = ConvertTo-SecureString -String '${{ secrets.MICROSOFT_STORE_CLIENT_SECRET }}' -AsPlainText -Force
+          $cred = New-Object -TypeName System.Management.Automation.PSCredential -ArgumentList ${{ secrets.MICROSOFT_STORE_CLIENT_ID }},$pass
+          Set-StoreBrokerAuthentication -TenantId '${{ secrets.MICROSOFT_STORE_TENANT_ID }}' -Credential $cred
+
+          # Zip and create metadata files
+          $artifacts = Get-ChildItem -Path . -Filter *.appx | Select-Object -ExpandProperty FullName
+          New-StoreBrokerConfigFile -Path "$PWD/config.json" -AppId ${{ secrets.MICROSOFT_STORE_PRODUCT_ID }}
+          New-SubmissionPackage -ConfigPath "$PWD/config.json" -DisableAutoPackageNameFormatting -AppxPath $artifacts -OutPath "$PWD" -OutName submission
+
+          # Submit the app
+          # See https://github.com/microsoft/StoreBroker/blob/master/Documentation/USAGE.md#the-easy-way
+          Update-ApplicationSubmission `
+            -AppId ${{ secrets.MICROSOFT_STORE_PRODUCT_ID }} `
+            -SubmissionDataPath "submission.json" `
+            -PackagePath "submission.zip" `
+            -ReplacePackages `
+            -NoStatus `
+            -AutoCommit `
+            -Force
+
+  publish-flathub:
+    needs: build
+    runs-on: ubuntu-22.04
+    if: ${{ github.event_name == 'push' && startsWith(github.ref, 'refs/tags/v') }}
+    steps:
+      - name: Download Linux artifacts
+        uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
+        with:
+          name: actual-electron-ubuntu-22.04
+
+      - name: Calculate AppImage SHA256
+        id: appimage_sha256
+        run: |
+          APPIMAGE_X64_SHA256=$(sha256sum Actual-linux-x86_64.AppImage | awk '{ print $1 }')
+          APPIMAGE_ARM64_SHA256=$(sha256sum Actual-linux-arm64.AppImage | awk '{ print $1 }')
+          echo "APPIMAGE_X64_SHA256=$APPIMAGE_X64_SHA256" >> "$GITHUB_ENV"
+          echo "APPIMAGE_ARM64_SHA256=$APPIMAGE_ARM64_SHA256" >> "$GITHUB_ENV"
+
+      - name: Checkout Flathub repo
+        uses: actions/checkout@v6
+        with:
+          repository: flathub/com.actualbudget.actual
+          token: ${{ secrets.FLATHUB_GITHUB_TOKEN }}
+
+      - name: Update manifest with new SHA256
+        run: |
+          # Replace x86_64 entry
+          sed -i "/x86_64.AppImage/{n;s|sha256:.*|sha256: ${{ env.APPIMAGE_X64_SHA256 }}|}" com.actualbudget.actual.yml
+          sed -i "/x86_64.AppImage/s|url:.*|url: https://github.com/actualbudget/actual/releases/download/v${{ needs.build.outputs.version }}/Actual-linux-x86_64.AppImage|" com.actualbudget.actual.yml
+
+          # Replace arm64 entry
+          sed -i "/arm64.AppImage/{n;s|sha256:.*|sha256: ${{ env.APPIMAGE_ARM64_SHA256 }}|}" com.actualbudget.actual.yml
+          sed -i "/arm64.AppImage/s|url:.*|url: https://github.com/actualbudget/actual/releases/download/v${{ needs.build.outputs.version }}/Actual-linux-arm64.AppImage|" com.actualbudget.actual.yml
+
+          cat com.actualbudget.actual.yml
+
+      - name: Create PR in Flathub repo
+        uses: peter-evans/create-pull-request@v7
+        with:
+          token: ${{ secrets.FLATHUB_GITHUB_TOKEN }}
+          commit-message: 'Update Actual flatpak to version ${{ needs.build.outputs.version }}'
+          branch: 'release/${{ needs.build.outputs.version }}'
+          title: 'Update Actual flatpak to version ${{ needs.build.outputs.version }}'
+          body: |
+            This PR updates the Actual desktop flatpak to version ${{ needs.build.outputs.version }}.
+
+            :link: [View release notes](https://actualbudget.org/blog/release-${{ needs.build.outputs.version }})
+          reviewers: 'jfdoming,MatissJanis,youngcw' # The core team that have accepted the collaborator access to the Flathub repo

.github/workflows/electron-pr.yml

@@ -9,6 +9,15 @@ env:
 
 on:
   pull_request:
+    paths:
+      - 'packages/**'
+      - 'package.json'
+      - 'yarn.lock'
+      - '.github/workflows/electron-pr.yml'
+      - '!packages/api/**' # API changes don't affect Electron
+      - '!packages/ci-actions/**' # CI actions changes don't affect Electron
+      - '!packages/docs/**' # Docs changes don't affect Electron
+      - '!packages/eslint-plugin-actual/**' # Eslint plugin changes don't affect Electron
 
 concurrency:
   group: ${{ github.workflow }}-${{ github.event.pull_request.number }}
@@ -19,12 +28,12 @@ jobs:
     strategy:
       matrix:
         os:
-          - ubuntu-latest
+          - ubuntu-22.04
           - windows-latest
           - macos-latest
     runs-on: ${{ matrix.os }}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
       - if: ${{ startsWith(matrix.os, 'windows') }}
         run: pip.exe install setuptools
       - if: ${{ ! startsWith(matrix.os, 'windows') }}
@@ -34,31 +43,86 @@ jobs:
           source .venv/bin/activate
           python3 -m pip install setuptools
       - if: ${{ startsWith(matrix.os, 'ubuntu') }}
+        name: Setup Flatpak dependencies
         run: |
           sudo apt-get update
           sudo apt-get install flatpak -y
           sudo apt-get install flatpak-builder -y
           sudo flatpak remote-add --if-not-exists flathub https://flathub.org/repo/flathub.flatpakrepo
-          sudo flatpak install org.freedesktop.Sdk/x86_64/23.08 -y
-          sudo flatpak install org.freedesktop.Platform/x86_64/23.08 -y
-          sudo flatpak install org.electronjs.Electron2.BaseApp/x86_64/23.08 -y
+          sudo flatpak install org.freedesktop.Sdk//24.08 -y
+          sudo flatpak install org.freedesktop.Platform//24.08 -y
+          sudo flatpak install org.electronjs.Electron2.BaseApp//24.08 -y
+          sudo flatpak install org.flatpak.Builder -y
+
+          METAINFO_FILE="packages/desktop-electron/extra-resources/linux/com.actualbudget.actual.metainfo.xml"
+          TODAY=$(date +%Y-%m-%d)
+          VERSION=$(node ./packages/ci-actions/bin/get-next-package-version.js --package-json ./packages/desktop-electron/package.json --type nightly)
+          sed -i "s/%RELEASE_VERSION%/$VERSION/g; s/%RELEASE_DATE%/$TODAY/g" "$METAINFO_FILE"
+          flatpak run --command=flatpak-builder-lint org.flatpak.Builder appstream "$METAINFO_FILE"
       - name: Set up environment
         uses: ./.github/actions/setup
       - name: Build Electron
         run: ./bin/package-electron
-      - name: Upload Build
-        uses: actions/upload-artifact@v4
+
+      - name: Upload Linux x64 AppImage
+        uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0
         with:
-          name: actual-electron-${{ matrix.os }}
-          path: |
-            packages/desktop-electron/dist/*.dmg
-            packages/desktop-electron/dist/*.exe
-            !packages/desktop-electron/dist/Actual-windows.exe
-            packages/desktop-electron/dist/*.AppImage
-            packages/desktop-electron/dist/*.flatpak
+          name: Actual-linux-x86_64.AppImage
+          if-no-files-found: ignore
+          path: packages/desktop-electron/dist/Actual-linux-x86_64.AppImage
+
+      - name: Upload Linux arm64 AppImage
+        uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0
+        with:
+          name: Actual-linux-arm64.AppImage
+          if-no-files-found: ignore
+          path: packages/desktop-electron/dist/Actual-linux-arm64.AppImage
+
+      - name: Upload Linux x64 flatpak
+        uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0
+        with:
+          name: Actual-linux-x86_64.flatpak
+          if-no-files-found: ignore
+          path: packages/desktop-electron/dist/Actual-linux-x86_64.flatpak
+
+      - name: Upload Windows x32 exe
+        uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0
+        with:
+          name: Actual-windows-ia32.exe
+          if-no-files-found: ignore
+          path: packages/desktop-electron/dist/Actual-windows-ia32.exe
+
+      - name: Upload Windows x64 exe
+        uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0
+        with:
+          name: Actual-windows-x64.exe
+          if-no-files-found: ignore
+          path: packages/desktop-electron/dist/Actual-windows-x64.exe
+
+      - name: Upload Windows arm64 exe
+        uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0
+        with:
+          name: Actual-windows-arm64.exe
+          if-no-files-found: ignore
+          path: packages/desktop-electron/dist/Actual-windows-arm64.exe
+
+      - name: Upload Mac x64 dmg
+        uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0
+        with:
+          name: Actual-mac-x64.dmg
+          if-no-files-found: ignore
+          path: packages/desktop-electron/dist/Actual-mac-x64.dmg
+
+      - name: Upload Mac arm64 dmg
+        uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0
+        with:
+          name: Actual-mac-arm64.dmg
+          if-no-files-found: ignore
+          path: packages/desktop-electron/dist/Actual-mac-arm64.dmg
+
       - name: Upload Windows Store Build
         if: ${{ startsWith(matrix.os, 'windows') }}
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0
         with:
           name: actual-electron-${{ matrix.os }}-appx
           path: |

.github/workflows/generate-release-pr.yml

@@ -17,17 +17,38 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
         with:
           ref: ${{ github.event.inputs.ref }}
       - name: Bump package versions
         id: bump_package_versions
         shell: bash
         run: |
-          .github/actions/bump-package-versions ${{ github.event.inputs.version }}
-          echo "version=$(jq -r .version packages/desktop-client/package.json)" > $GITHUB_OUTPUT
+          declare -A packages=(
+            [web]="desktop-client"
+            [electron]="desktop-electron"
+            [sync]="sync-server"
+            [api]="api"
+          )
+
+          for key in "${!packages[@]}"; do
+            pkg="${packages[$key]}"
+
+            if [[ -n "${{ github.event.inputs.version }}" ]]; then
+              version="${{ github.event.inputs.version }}"
+            else
+              version=$(node ./packages/ci-actions/bin/get-next-package-version.js \
+                --package-json "./packages/$pkg/package.json" \
+                --type auto \
+                --update)
+            fi
+
+            eval "NEW_${key^^}_VERSION=\"$version\""
+          done
+
+          echo "version=$NEW_WEB_VERSION" >> "$GITHUB_OUTPUT"
       - name: Create PR
-        uses: peter-evans/create-pull-request@v7
+        uses: peter-evans/create-pull-request@271a8d0340265f705b14b6d32b9829c1cb33d45e # v7.0.8
         with:
           commit-message: '🔖 (${{ steps.bump_package_versions.outputs.version }})'
           title: '🔖 (${{ steps.bump_package_versions.outputs.version }})'

.github/workflows/i18n-string-extract-master.yml

@@ -3,7 +3,7 @@ name: Extract and upload i18n strings
 on:
   schedule:
     # 4am UTC
-    - cron: "0 4 * * *"
+    - cron: '0 4 * * *'
   workflow_dispatch:
 
 jobs:
@@ -12,14 +12,14 @@ jobs:
     if: github.repository == 'actualbudget/actual'
     steps:
       - name: Check out main repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
         with:
           path: actual
       - name: Set up environment
         uses: ./actual/.github/actions/setup
         with:
           working-directory: actual
-          download-translations: false  # As we'll manually clone instead
+          download-translations: false # As we'll manually clone instead
       - name: Configure Git config
         run: |
           git config --global user.name "github-actions[bot]"
@@ -44,7 +44,7 @@ jobs:
             push \
             actualbudget/actual
       - name: Check out updated translations
-        uses: actions/checkout@v4
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
         with:
           ssh-key: ${{ secrets.STRING_IMPORT_DEPLOY_KEY }}
           repository: actualbudget/translations
@@ -78,7 +78,7 @@ jobs:
             actualbudget/actual
 
       - name: Unlock translations
-        if: always()  # Clean up even on failure
+        if: always() # Clean up even on failure
         run: |
           wlc \
             --url https://hosted.weblate.org/api/ \

.github/workflows/issues-close-feature-requests.yml

@@ -9,26 +9,27 @@ jobs:
     if: ${{ github.event.label.name == 'feature' }}
     runs-on: ubuntu-latest
     steps:
-      - uses: actions-ecosystem/action-add-labels@v1
+      - uses: actions-ecosystem/action-add-labels@bd52874380e3909a1ac983768df6976535ece7f8 # v1.1.0
         with:
           labels: needs votes
+          github_token: ${{ secrets.GITHUB_TOKEN }}
       - name: Add reactions
-        uses: aidan-mundy/react-to-issue@v1.1.1
+        uses: aidan-mundy/react-to-issue@109392cac5159c2df6c47c8ab3b5d6b708852fe5 # v1.1.2
         with:
           issue-number: ${{ github.event.issue.number }}
           reactions: '+1'
       - name: Create comment
-        uses: peter-evans/create-or-update-comment@v3
+        uses: peter-evans/create-or-update-comment@e8674b075228eee787fea43ef493e45ece1004c9 # v5.0.0
         with:
           issue-number: ${{ github.event.issue.number }}
           body: |
             :sparkles: Thanks for sharing your idea! :sparkles:
 
-            This repository uses lodash style issue management for enhancements. That means enhancement issues are automatically closed. This doesn’t mean we don’t accept feature requests, though! We will consider implementing ones that receive many upvotes, and we welcome contributions for any feature requests marked as needing votes (just post a comment first so we can help you make a successful contribution).
+            This repository uses a voting-based system for feature requests. While enhancement issues are automatically closed, we still welcome feature requests! The voting system helps us gauge community interest in potential features. We also encourage community contributions for any feature requests marked as needing votes (just post a comment first so we can help guide you toward a successful contribution).
 
             The enhancement backlog can be found here: https://github.com/actualbudget/actual/issues?q=label%3A%22needs+votes%22+sort%3Areactions-%2B1-desc+
 
-            Don’t forget to upvote the top comment with 👍!
+            Don't forget to upvote the top comment with 👍!
 
             <!-- feature-auto-close-comment -->
       - name: Close Issue

.github/workflows/issues-feature-implemented.yml

@@ -24,10 +24,10 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       # This is not a security concern because we have approved & merged the PR
-      - uses: actions/checkout@v4
-      - uses: actions/setup-node@v4
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+      - uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6.0.0
         with:
-          node-version: '19'
+          node-version: 22
       - name: Handle feature requests
         run: node .github/actions/handle-feature-requests.js
         env:

.github/workflows/issues-remove-help-wanted.yml

@@ -9,6 +9,6 @@ jobs:
     if: ${{ !contains(github.event.issue.labels.*.name, 'feature') && contains(github.event.issue.labels.*.name, 'help wanted') }}
     runs-on: ubuntu-latest
     steps:
-      - uses: actions-ecosystem/action-remove-labels@v1
+      - uses: actions-ecosystem/action-remove-labels@2ce5d41b4b6aa8503e285553f75ed56e0a40bae0 # v1.3.0
         with:
           labels: help wanted

.github/workflows/netlify-release.yml

@@ -21,16 +21,16 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Repository Checkout
-        uses: actions/checkout@v4
-    
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+
       - name: Set up environment
         uses: ./.github/actions/setup
-    
+
       - name: Install Netlify
         run: npm install netlify-cli@17.10.1 -g
-    
+
       - name: Build Actual
-        run: ./bin/package-browser
+        run: yarn build:browser
 
       - name: Deploy to Netlify
         id: netlify_deploy
@@ -40,4 +40,4 @@ jobs:
             --site ${{ secrets.NETLIFY_SITE_ID }} \
             --auth ${{ secrets.NETLIFY_API_TOKEN }} \
             --filter @actual-app/web \
-            --prod
+            --prod

.github/workflows/publish-nightly-electron.yml

@@ -0,0 +1,139 @@
+name: Publish nightly desktop app
+
+# Publish nightly version of desktop app - Runs every day at midnight
+on:
+  schedule:
+    - cron: '0 0 * * *'
+  workflow_dispatch:
+
+defaults:
+  run:
+    shell: bash
+
+env:
+  CI: true
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: false
+
+jobs:
+  build:
+    strategy:
+      matrix:
+        os:
+          - ubuntu-22.04
+          - windows-latest
+          - macos-latest
+    runs-on: ${{ matrix.os }}
+    if: github.event.repository.fork == false
+    steps:
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+      - if: ${{ startsWith(matrix.os, 'windows') }}
+        run: pip.exe install setuptools
+
+      - if: ${{ ! startsWith(matrix.os, 'windows') }}
+        run: |
+          mkdir .venv
+          python3 -m venv .venv
+          source .venv/bin/activate
+          python3 -m pip install setuptools
+
+      - if: ${{ startsWith(matrix.os, 'ubuntu') }}
+        name: Setup Flatpak dependencies
+        run: |
+          sudo apt-get update
+          sudo apt-get install flatpak -y
+          sudo apt-get install flatpak-builder -y
+          sudo flatpak remote-add --if-not-exists flathub https://flathub.org/repo/flathub.flatpakrepo
+          sudo flatpak install org.freedesktop.Sdk//24.08 -y
+          sudo flatpak install org.freedesktop.Platform//24.08 -y
+          sudo flatpak install org.electronjs.Electron2.BaseApp//24.08 -y
+          sudo flatpak install org.flatpak.Builder -y
+
+          METAINFO_FILE="packages/desktop-electron/extra-resources/linux/com.actualbudget.actual.metainfo.xml"
+          TODAY=$(date +%Y-%m-%d)
+          VERSION=$(node ./packages/ci-actions/bin/get-next-package-version.js --package-json ./packages/desktop-electron/package.json --type nightly)
+          sed -i "s/%RELEASE_VERSION%/$VERSION/g; s/%RELEASE_DATE%/$TODAY/g" "$METAINFO_FILE"
+          flatpak run --command=flatpak-builder-lint org.flatpak.Builder appstream "$METAINFO_FILE"
+      - name: Set up environment
+        uses: ./.github/actions/setup
+
+      - name: Update package versions
+        run: |
+          # Get new nightly version
+          NEW_DESKTOP_APP_VERSION=$(node ./packages/ci-actions/bin/get-next-package-version.js --package-json ./packages/desktop-electron/package.json --type nightly)
+
+          # Set package version
+          npm version $NEW_DESKTOP_APP_VERSION --no-git-tag-version --workspace=desktop-electron --no-workspaces-update
+
+      - name: Build Electron for Mac
+        if: ${{ startsWith(matrix.os, 'macos') }}
+        run: ./bin/package-electron
+        env:
+          CSC_KEY_PASSWORD: ${{ secrets.CSC_KEY_PASSWORD }}
+          CSC_LINK: ${{ secrets.CSC_LINK }}
+          APPLE_ID: ${{ secrets.APPLE_ID }}
+          APPLE_APP_SPECIFIC_PASSWORD: ${{ secrets.APPLE_APP_SPECIFIC_PASSWORD }}
+          APPLE_TEAM_ID: ${{ secrets.APPLE_TEAM_ID }}
+
+      - name: Build Electron
+        if: ${{ ! startsWith(matrix.os, 'macos') }}
+        run: ./bin/package-electron
+
+      - name: Upload Linux x64 AppImage
+        uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0
+        with:
+          name: Actual-linux-x86_64.AppImage
+          if-no-files-found: ignore
+          path: packages/desktop-electron/dist/Actual-linux-x86_64.AppImage
+
+      - name: Upload Linux arm64 AppImage
+        uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0
+        with:
+          name: Actual-linux-arm64.AppImage
+          if-no-files-found: ignore
+          path: packages/desktop-electron/dist/Actual-linux-arm64.AppImage
+
+      - name: Upload Windows x32 exe
+        uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0
+        with:
+          name: Actual-windows-ia32.exe
+          if-no-files-found: ignore
+          path: packages/desktop-electron/dist/Actual-windows-ia32.exe
+
+      - name: Upload Windows x64 exe
+        uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0
+        with:
+          name: Actual-windows-x64.exe
+          if-no-files-found: ignore
+          path: packages/desktop-electron/dist/Actual-windows-x64.exe
+
+      - name: Upload Windows arm64 exe
+        uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0
+        with:
+          name: Actual-windows-arm64.exe
+          if-no-files-found: ignore
+          path: packages/desktop-electron/dist/Actual-windows-arm64.exe
+
+      - name: Upload Mac x64 dmg
+        uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0
+        with:
+          name: Actual-mac-x64.dmg
+          if-no-files-found: ignore
+          path: packages/desktop-electron/dist/Actual-mac-x64.dmg
+
+      - name: Upload Mac arm64 dmg
+        uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0
+        with:
+          name: Actual-mac-arm64.dmg
+          if-no-files-found: ignore
+          path: packages/desktop-electron/dist/Actual-mac-arm64.dmg
+
+      - name: Upload Windows Store Build
+        if: ${{ startsWith(matrix.os, 'windows') }}
+        uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0
+        with:
+          name: actual-electron-${{ matrix.os }}-appx
+          path: |
+            packages/desktop-electron/dist/*.appx

.github/workflows/publish-nightly-npm-packages.yml

@@ -0,0 +1,95 @@
+name: Publish nightly npm packages
+
+# Nightly npm packages are built daily
+on:
+  schedule:
+    - cron: '0 0 * * *'
+  workflow_dispatch:
+
+jobs:
+  build-and-pack:
+    runs-on: ubuntu-latest
+    name: Build and pack npm packages
+    if: github.event.repository.fork == false
+    steps:
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+
+      - name: Set up environment
+        uses: ./.github/actions/setup
+
+      - name: Update package versions
+        run: |
+          # Get new nightly versions
+          NEW_WEB_VERSION=$(node ./packages/ci-actions/bin/get-next-package-version.js --package-json ./packages/desktop-client/package.json --type nightly)
+          NEW_SYNC_VERSION=$(node ./packages/ci-actions/bin/get-next-package-version.js --package-json ./packages/sync-server/package.json --type nightly)
+          NEW_API_VERSION=$(node ./packages/ci-actions/bin/get-next-package-version.js --package-json ./packages/api/package.json --type nightly)
+
+          # Set package versions
+          npm version $NEW_WEB_VERSION --no-git-tag-version --workspace=@actual-app/web --no-workspaces-update
+          npm version $NEW_SYNC_VERSION --no-git-tag-version --workspace=@actual-app/sync-server --no-workspaces-update
+          npm version $NEW_API_VERSION --no-git-tag-version --workspace=@actual-app/api --no-workspaces-update
+
+      - name: Yarn install
+        run: |
+          yarn install
+
+      - name: Build Server & Web
+        run: yarn build:server
+
+      - name: Pack the web and server packages
+        run: |
+          yarn workspace @actual-app/web pack --filename @actual-app/web.tgz
+          yarn workspace @actual-app/sync-server pack --filename @actual-app/sync-server.tgz
+
+      - name: Build API
+        run: yarn build:api
+
+      - name: Pack the api package
+        run: |
+          yarn workspace @actual-app/api pack --filename @actual-app/api.tgz
+
+      - name: Upload package artifacts
+        uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0
+        with:
+          name: npm-packages
+          path: |
+            packages/desktop-client/@actual-app/web.tgz
+            packages/sync-server/@actual-app/sync-server.tgz
+            packages/api/@actual-app/api.tgz
+
+  publish:
+    runs-on: ubuntu-latest
+    name: Publish Nightly npm packages
+    needs: build-and-pack
+    permissions:
+      contents: read
+      packages: write
+    steps:
+      - name: Download the artifacts
+        uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
+        with:
+          name: npm-packages
+
+      - name: Setup node and npm registry
+        uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6.0.0
+        with:
+          node-version: 22
+          registry-url: 'https://registry.npmjs.org'
+
+      - name: Publish Web
+        run: |
+          npm publish desktop-client/@actual-app/web.tgz --access public --tag nightly
+        env:
+          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+
+      - name: Publish Sync-Server
+        run: |
+          npm publish sync-server/@actual-app/sync-server.tgz --access public --tag nightly
+        env:
+          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+
+      - name: Publish API
+        run: |
+          npm publish api/@actual-app/api.tgz --access public --tag nightly
+        env:
+          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}

.github/workflows/publish-npm-packages.yml

@@ -0,0 +1,78 @@
+name: Publish npm packages
+
+# # Npm packages are published for every new tag
+on:
+  push:
+    tags:
+      - 'v*.*.*'
+
+jobs:
+  build-and-pack:
+    runs-on: ubuntu-latest
+    name: Build and pack npm packages
+    steps:
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+
+      - name: Set up environment
+        uses: ./.github/actions/setup
+
+      - name: Build Web
+        run: yarn build:server
+
+      - name: Pack the web and server packages
+        run: |
+          yarn workspace @actual-app/web pack --filename @actual-app/web.tgz
+          yarn workspace @actual-app/sync-server pack --filename @actual-app/sync-server.tgz
+
+      - name: Build API
+        run: yarn build:api
+
+      - name: Pack the api package
+        run: |
+          yarn workspace @actual-app/api pack --filename @actual-app/api.tgz
+
+      - name: Upload package artifacts
+        uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0
+        with:
+          name: npm-packages
+          path: |
+            packages/desktop-client/@actual-app/web.tgz
+            packages/sync-server/@actual-app/sync-server.tgz
+            packages/api/@actual-app/api.tgz
+
+  publish:
+    runs-on: ubuntu-latest
+    name: Publish npm packages
+    needs: build-and-pack
+    permissions:
+      contents: read
+      packages: write
+    steps:
+      - name: Download the artifacts
+        uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
+        with:
+          name: npm-packages
+
+      - name: Setup node and npm registry
+        uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6.0.0
+        with:
+          node-version: 22
+          registry-url: 'https://registry.npmjs.org'
+
+      - name: Publish Web
+        run: |
+          npm publish desktop-client/@actual-app/web.tgz --access public
+        env:
+          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+
+      - name: Publish Sync-Server
+        run: |
+          npm publish sync-server/@actual-app/sync-server.tgz --access public
+        env:
+          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+
+      - name: Publish API
+        run: |
+          npm publish api/@actual-app/api.tgz --access public
+        env:
+          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}

.github/workflows/release-notes.yml

@@ -12,9 +12,24 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+        with:
+          fetch-depth: 0
+      - name: Get changed files
+        id: changed-files
+        run: |
+          git fetch origin ${{ github.base_ref }}
+          CHANGED_FILES=$(git diff --name-only origin/${{ github.base_ref }}...HEAD)
+          NON_DOCS_FILES=$(echo "$CHANGED_FILES" | grep -v -e "^packages/docs/" -e "^\.github/actions/docs-spelling/" || true)
+
+          if [ -z "$NON_DOCS_FILES" ] && [ -n "$CHANGED_FILES" ]; then
+            echo "only_docs=true" >> $GITHUB_OUTPUT
+            echo "only documentation files changed, skipping release notes check"
+          else
+            echo "only_docs=false" >> $GITHUB_OUTPUT
+          fi
       - name: Check release notes
-        if: startsWith(github.head_ref, 'release/') == false
+        if: startsWith(github.head_ref, 'release/') == false && steps.changed-files.outputs.only_docs != 'true'
         uses: actualbudget/actions/release-notes/check@main
       - name: Generate release notes
         if: startsWith(github.head_ref, 'release/') == true

.github/workflows/size-compare.yml

@@ -15,7 +15,13 @@ on:
   pull_request_target:
     paths:
       - 'packages/**'
-      - '!packages/sync-server/**'
+      - 'package.json'
+      - 'yarn.lock'
+      - '.github/workflows/size-compare.yml'
+      - '!packages/sync-server/**' # Sync server changes don't affect the size of the web/api
+      - '!packages/ci-actions/**' # CI actions changes don't affect the size of the web/api
+      - '!packages/docs/**' # Docs changes don't affect the size of the web/api
+      - '!packages/eslint-plugin-actual/**' # Eslint plugin changes don't affect the size of the web/api
 
 concurrency:
   group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
@@ -26,64 +32,120 @@ jobs:
     runs-on: ubuntu-latest
     permissions:
       pull-requests: write
+      contents: read
     steps:
-      - name: Wait for ${{github.base_ref}} build to succeed
-        uses: fountainhead/action-wait-for-check@v1.2.0
-        id: master-build
+      - name: Checkout base branch
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+        with:
+          ref: ${{ github.base_ref }}
+      - name: Set up environment
+        uses: ./.github/actions/setup
+        with:
+          download-translations: 'false'
+
+      - name: Wait for ${{github.base_ref}} web build to succeed
+        uses: fountainhead/action-wait-for-check@5a908a24814494009c4bb27c242ea38c93c593be # v1.2.0
+        id: master-web-build
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
           checkName: web
           ref: ${{github.base_ref}}
+      - name: Wait for ${{github.base_ref}} API build to succeed
+        uses: fountainhead/action-wait-for-check@5a908a24814494009c4bb27c242ea38c93c593be # v1.2.0
+        id: master-api-build
+        with:
+          token: ${{ secrets.GITHUB_TOKEN }}
+          checkName: api
+          ref: ${{github.base_ref}}
 
       - name: Wait for PR build to succeed
-        uses: fountainhead/action-wait-for-check@v1.2.0
-        id: wait-for-build
+        uses: fountainhead/action-wait-for-check@5a908a24814494009c4bb27c242ea38c93c593be # v1.2.0
+        id: wait-for-web-build
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
           checkName: web
           ref: ${{github.event.pull_request.head.sha}}
+      - name: Wait for API PR build to succeed
+        uses: fountainhead/action-wait-for-check@5a908a24814494009c4bb27c242ea38c93c593be # v1.2.0
+        id: wait-for-api-build
+        with:
+          token: ${{ secrets.GITHUB_TOKEN }}
+          checkName: api
+          ref: ${{github.event.pull_request.head.sha}}
 
       - name: Report build failure
-        if: steps.wait-for-build.outputs.conclusion == 'failure'
+        if: steps.wait-for-web-build.outputs.conclusion == 'failure' || steps.wait-for-api-build.outputs.conclusion == 'failure'
         run: |
           echo "Build failed on PR branch or ${{github.base_ref}}"
           exit 1
-      - name: Download build artifact from ${{github.base_ref}}
-        uses: dawidd6/action-download-artifact@v6
-        id: pr-build
+
+      - name: Download web build artifact from ${{github.base_ref}}
+        uses: dawidd6/action-download-artifact@ac66b43f0e6a346234dd65d4d0c8fbb31cb316e5 # v11
+        id: pr-web-build
         with:
           branch: ${{github.base_ref}}
           workflow: build.yml
+          workflow_conclusion: '' # ignore the conclusion of the workflow, since we already checked it
           name: build-stats
           path: base
-
-      - name: Download build artifact from PR
-        uses: dawidd6/action-download-artifact@v6
+      - name: Download API build artifact from ${{github.base_ref}}
+        uses: dawidd6/action-download-artifact@ac66b43f0e6a346234dd65d4d0c8fbb31cb316e5 # v11
+        id: pr-api-build
+        with:
+          branch: ${{github.base_ref}}
+          workflow: build.yml
+          workflow_conclusion: '' # ignore the conclusion of the workflow, since we already checked it
+          name: api-build-stats
+          path: base
+      - name: Download build stats from PR
+        uses: dawidd6/action-download-artifact@ac66b43f0e6a346234dd65d4d0c8fbb31cb316e5 # v11
         with:
           pr: ${{github.event.pull_request.number}}
           workflow: build.yml
+          workflow_conclusion: '' # ignore the conclusion of the workflow, since we already checked it
           name: build-stats
           path: head
           allow_forks: true
-
+      - name: Download API stats from PR
+        uses: dawidd6/action-download-artifact@ac66b43f0e6a346234dd65d4d0c8fbb31cb316e5 # v11
+        with:
+          pr: ${{github.event.pull_request.number}}
+          workflow: build.yml
+          workflow_conclusion: '' # ignore the conclusion of the workflow, since we already checked it
+          name: api-build-stats
+          path: head
+          allow_forks: true
       - name: Strip content hashes from stats files
         run: |
-          sed -i -E 's/index\.[0-9a-zA-Z_-]{8,}\./index./g' ./head/web-stats.json
-          sed -i -E 's/\.[0-9a-zA-Z_-]{8,}\.chunk\././g' ./head/web-stats.json
-          sed -i -E 's/\.[0-9a-f]{8,}\././g' ./head/*.json
-          sed -i -E 's/index\.[0-9a-zA-Z_-]{8,}\./index./g' ./base/web-stats.json
-          sed -i -E 's/\.[0-9a-zA-Z_-]{8,}\.chunk\././g' ./base/web-stats.json
-          sed -i -E 's/\.[0-9a-f]{8,}\././g' ./base/*.json
-      - uses: twk3/rollup-size-compare-action@v1.1.1
-        with:
-          github-token: ${{ secrets.GITHUB_TOKEN }}
-          current-stats-json-path: ./head/web-stats.json
-          base-stats-json-path: ./base/web-stats.json
-          title: desktop-client
-
-      - uses: github/webpack-bundlesize-compare-action@v2.1.0
-        with:
-          github-token: ${{ secrets.GITHUB_TOKEN }}
-          current-stats-json-path: ./head/loot-core-stats.json
-          base-stats-json-path: ./base/loot-core-stats.json
-          title: loot-core
+          if [ -f ./head/web-stats.json ]; then
+            sed -i -E 's/index\.[0-9a-zA-Z_-]{8,}\./index./g' ./head/web-stats.json
+            sed -i -E 's/\.[0-9a-zA-Z_-]{8,}\.chunk\././g' ./head/web-stats.json
+          fi
+          if [ -f ./base/web-stats.json ]; then
+            sed -i -E 's/index\.[0-9a-zA-Z_-]{8,}\./index./g' ./base/web-stats.json
+            sed -i -E 's/\.[0-9a-zA-Z_-]{8,}\.chunk\././g' ./base/web-stats.json
+          fi
+          for file in ./head/*.json ./base/*.json; do
+            if [ -f "$file" ]; then
+              sed -i -E 's/\.[0-9a-f]{8,}\././g' "$file"
+            fi
+          done
+      - name: Generate combined bundle stats comment
+        run: |
+          node packages/ci-actions/bin/bundle-stats-comment.mjs \
+            --base desktop-client=./base/web-stats.json \
+            --base loot-core=./base/loot-core-stats.json \
+            --base api=./base/api-stats.json \
+            --head desktop-client=./head/web-stats.json \
+            --head loot-core=./head/loot-core-stats.json \
+            --head api=./head/api-stats.json \
+            --identifier combined > bundle-stats-comment.md
+      - name: Post combined bundle stats comment
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GITHUB_REPOSITORY: ${{ github.repository }}
+          PR_NUMBER: ${{ github.event.pull_request.number }}
+        run: |
+          node packages/ci-actions/bin/update-bundle-stats-comment.mjs \
+            --comment-file bundle-stats-comment.md \
+            --identifier '<!--- bundlestats-action-comment key:combined --->'

.github/workflows/stale.yml

@@ -2,12 +2,13 @@ name: 'Close stale PRs'
 on:
   schedule:
     - cron: '30 1 * * *'
+  workflow_dispatch: # Allow manual triggering
 
 jobs:
   stale:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/stale@v9
+      - uses: actions/stale@5f858e3efba33a5ca4407a664cc011ad407f2008 # v10.1.0
         with:
           stale-pr-message: 'This PR is stale because it has been open 30 days with no activity. Remove stale label or comment or this will be closed in 5 days.'
           close-pr-message: 'This PR was closed because it has been stalled for 5 days with no activity.'
@@ -17,10 +18,25 @@ jobs:
   stale-wip:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/stale@v9
+      - uses: actions/stale@5f858e3efba33a5ca4407a664cc011ad407f2008 # v10.1.0
         with:
           stale-pr-message: ':wave: Hi! It looks like this PR has not had any changes for a week now. Would you like someone to review this PR? If so - please remove the "[WIP]" prefix from the PR title. That will let the community know that this PR is open for a review.'
           days-before-stale: 7
           any-of-labels: ':construction: WIP'
           days-before-close: -1
           days-before-issue-stale: -1
+
+  stale-needs-info:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/stale@5f858e3efba33a5ca4407a664cc011ad407f2008 # v10.1.0
+        with:
+          stale-issue-label: 'needs info'
+          days-before-stale: -1
+          days-before-close: 7
+          close-issue-message: 'This issue has been automatically closed because there have been no comments for 7 days after the "needs info" label was added. If you still need help, please feel free to reopen the issue with the requested information.'
+          remove-stale-when-updated: false
+          stale-pr-message: '' # Disable PR processing
+          close-pr-message: '' # Disable PR processing
+          days-before-pr-stale: -1 # Disable PR processing
+          days-before-pr-close: -1 # Disable PR processing

.github/workflows/update-vrt.yml

@@ -1,115 +0,0 @@
-name: /update-vrt
-on:
-  issue_comment:
-    types: [ created ]
-
-permissions:
-  pull-requests: read
-  contents: read
-
-concurrency:
-  group: ${{ github.workflow }}-${{ github.event.issue.number }}-${{ contains(github.event.comment.body, '/update-vrt') }}
-  cancel-in-progress: true
-
-jobs:
-  update-vrt:
-    name: Update VRT
-    runs-on: ubuntu-latest
-    if: |
-      github.event.issue.pull_request &&
-      contains(github.event.comment.body, '/update-vrt')
-    container:
-      image: mcr.microsoft.com/playwright:v1.41.1-jammy
-    steps:
-      - name: Get PR branch
-#        Until https://github.com/xt0rted/pull-request-comment-branch/issues/322 is resolved we use the forked version
-        uses: gotson/pull-request-comment-branch@head-repo-owner-dist
-        id: comment-branch
-      - uses: actions/checkout@v4
-        with:
-          repository: ${{ steps.comment-branch.outputs.head_owner }}/${{ steps.comment-branch.outputs.head_repo }}
-          ref: ${{ steps.comment-branch.outputs.head_ref }}
-      - name: Set up environment
-        uses: ./.github/actions/setup
-      - name: Wait for Netlify build to finish
-        id: netlify
-        env:
-          COMMIT_SHA: ${{ steps.comment-branch.outputs.head_sha }}
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-        run: ./.github/actions/netlify-wait-for-build
-      - name: Run VRT Tests on Netlify URL
-        run: yarn vrt --update-snapshots
-        env:
-          E2E_START_URL: ${{ steps.netlify.outputs.url }}
-      - name: Create patch
-        run: |
-          git config --system --add safe.directory "*"
-          git config --global user.name "github-actions[bot]"
-          git config --global user.email "github-actions[bot]@users.noreply.github.com"
-          git reset
-          git add "**/*.png"
-          if git diff --staged --quiet; then
-            echo "No changes to commit"
-            exit 0
-          fi
-          git commit -m "Update VRT"
-          git format-patch -1 HEAD --stdout > Update-VRT.patch
-      - uses: actions/upload-artifact@v4
-        with:
-          name: patch
-          path: Update-VRT.patch
-
-  push-patch:
-    runs-on: ubuntu-latest
-    needs: update-vrt
-    permissions:
-      contents: write
-      pull-requests: write
-    steps:
-      - name: Get PR branch
-        #        Until https://github.com/xt0rted/pull-request-comment-branch/issues/322 is resolved we use the forked version
-        uses: gotson/pull-request-comment-branch@head-repo-owner-dist
-        id: comment-branch
-      - uses: actions/checkout@v4
-        with:
-          repository: ${{ steps.comment-branch.outputs.head_owner }}/${{ steps.comment-branch.outputs.head_repo }}
-          ref: ${{ steps.comment-branch.outputs.head_ref }}
-      - uses: actions/download-artifact@v4
-        continue-on-error: true
-        with:
-          name: patch
-      - name: Apply patch and push
-        env:
-          BRANCH_NAME: ${{ steps.comment-branch.outputs.head_ref }}
-        run: |
-          git config --global user.name "github-actions[bot]"
-          git config --global user.email "github-actions[bot]@users.noreply.github.com"
-          git apply Update-VRT.patch
-          git add "**/*.png"
-          if git diff --staged --quiet; then
-            echo "No changes to commit"
-            exit 0
-          fi
-          git commit -m "Update VRT"
-          git push origin HEAD:${BRANCH_NAME}
-      - name: Add finished reaction
-        uses: dkershner6/reaction-action@v2
-        with:
-          token: ${{ secrets.GITHUB_TOKEN }}
-          commentId: ${{ github.event.comment.id }}
-          reaction: "rocket"
-
-  add-starting-reaction:
-    runs-on: ubuntu-latest
-    if: |
-      github.event.issue.pull_request &&
-      contains(github.event.comment.body, '/update-vrt')
-    permissions:
-      pull-requests: write
-    steps:
-      - name: React to comment
-        uses: dkershner6/reaction-action@v2
-        with:
-          token: ${{ secrets.GITHUB_TOKEN }}
-          commentId: ${{ github.event.comment.id }}
-          reaction: "+1"

.github/workflows/vrt-update-apply.yml

@@ -0,0 +1,145 @@
+name: VRT Update - Apply
+# SECURITY: This workflow runs in trusted base repo context.
+# It treats the patch artifact as untrusted data, validates it contains only PNGs,
+# and safely applies it to the contributor's fork branch.
+on:
+  workflow_run:
+    workflows: ['VRT Update - Generate']
+    types:
+      - completed
+
+permissions:
+  contents: write
+  pull-requests: write
+
+jobs:
+  apply-vrt-updates:
+    name: Apply VRT Updates
+    runs-on: ubuntu-latest
+    if: ${{ github.event.workflow_run.conclusion == 'success' }}
+    steps:
+      - name: Download patch artifact
+        uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
+        with:
+          github-token: ${{ secrets.GITHUB_TOKEN }}
+          run-id: ${{ github.event.workflow_run.id }}
+          pattern: vrt-patch-*
+          path: /tmp/artifacts
+
+      - name: Download metadata artifact
+        uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
+        with:
+          github-token: ${{ secrets.GITHUB_TOKEN }}
+          run-id: ${{ github.event.workflow_run.id }}
+          pattern: vrt-metadata-*
+          path: /tmp/metadata
+
+      - name: Extract metadata
+        id: metadata
+        run: |
+          if [ ! -f "/tmp/metadata/pr-number.txt" ]; then
+            echo "No metadata found, skipping..."
+            exit 0
+          fi
+
+          PR_NUMBER=$(cat "/tmp/metadata/pr-number.txt")
+          HEAD_REF=$(cat "/tmp/metadata/head-ref.txt")
+          HEAD_REPO=$(cat "/tmp/metadata/head-repo.txt")
+
+          echo "pr_number=$PR_NUMBER" >> "$GITHUB_OUTPUT"
+          echo "head_ref=$HEAD_REF" >> "$GITHUB_OUTPUT"
+          echo "head_repo=$HEAD_REPO" >> "$GITHUB_OUTPUT"
+
+          echo "Found PR #$PR_NUMBER: $HEAD_REPO @ $HEAD_REF"
+
+      - name: Checkout fork branch
+        if: steps.metadata.outputs.pr_number != ''
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+        with:
+          repository: ${{ steps.metadata.outputs.head_repo }}
+          ref: ${{ steps.metadata.outputs.head_ref }}
+          token: ${{ secrets.ACTIONS_UPDATE_TOKEN }}
+          persist-credentials: false
+          fetch-depth: 0
+
+      - name: Validate and apply patch
+        if: steps.metadata.outputs.pr_number != ''
+        id: apply
+        run: |
+          PATCH_FILE="/tmp/artifacts/vrt-update.patch"
+
+          if [ ! -f "$PATCH_FILE" ]; then
+            echo "No patch file found"
+            exit 0
+          fi
+
+          echo "Found patch file: $PATCH_FILE"
+
+          # Validate patch only contains PNG files
+          echo "Validating patch contains only PNG files..."
+          if grep -E '^(\+\+\+|---) [ab]/' "$PATCH_FILE" | grep -v '\.png$'; then
+            echo "ERROR: Patch contains non-PNG files! Rejecting for security."
+            echo "applied=false" >> "$GITHUB_OUTPUT"
+            echo "error=Patch validation failed: contains non-PNG files" >> "$GITHUB_OUTPUT"
+            exit 1
+          fi
+
+          # Extract file list for verification
+          FILES_CHANGED=$(grep -E '^\+\+\+ b/' "$PATCH_FILE" | sed 's/^+++ b\///' | wc -l)
+          echo "Patch modifies $FILES_CHANGED PNG file(s)"
+
+          # Configure git
+          git config --global user.name "github-actions[bot]"
+          git config --global user.email "github-actions[bot]@users.noreply.github.com"
+
+          # Apply patch
+          echo "Applying patch..."
+          if git apply --check "$PATCH_FILE" 2>&1; then
+            git apply "$PATCH_FILE"
+
+            # Stage only PNG files (extra safety)
+            git add "**/*.png"
+
+            if git diff --staged --quiet; then
+              echo "No changes after applying patch"
+              echo "applied=false" >> "$GITHUB_OUTPUT"
+              exit 0
+            fi
+
+            # Commit
+            git commit -m "Update VRT screenshots" -m "Auto-generated by VRT workflow" -m "PR: #${{ steps.metadata.outputs.pr_number }}"
+
+            echo "applied=true" >> "$GITHUB_OUTPUT"
+          else
+            echo "Patch could not be applied cleanly"
+            echo "applied=false" >> "$GITHUB_OUTPUT"
+            echo "error=Patch conflicts with current branch state" >> "$GITHUB_OUTPUT"
+            exit 1
+          fi
+
+      - name: Push changes
+        if: steps.apply.outputs.applied == 'true'
+        env:
+          HEAD_REF: ${{ steps.metadata.outputs.head_ref }}
+          HEAD_REPO: ${{ steps.metadata.outputs.head_repo }}
+          GITHUB_TOKEN: ${{ secrets.ACTIONS_UPDATE_TOKEN }}
+        run: |
+          # Use PAT in URL to ensure push triggers CI workflows
+          # Note: GitHub Actions automatically masks secrets in logs
+          git remote set-url origin "https://x-access-token:${GITHUB_TOKEN}@github.com/${HEAD_REPO}.git"
+
+          git push origin "HEAD:refs/heads/$HEAD_REF"
+          echo "Successfully pushed VRT updates to $HEAD_REPO@$HEAD_REF"
+
+      - name: Comment on PR - Failure
+        if: failure() && steps.metadata.outputs.pr_number != ''
+        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+        with:
+          script: |
+            const error = `${{ steps.apply.outputs.error }}` || 'Unknown error occurred';
+            await github.rest.issues.createComment({
+              issue_number: ${{ steps.metadata.outputs.pr_number }},
+              owner: context.repo.owner,
+              repo: context.repo.repo,
+              body: `❌ Failed to apply VRT updates: ${error}\n\nPlease check the workflow logs for details.`
+            });

.github/workflows/vrt-update-generate.yml

@@ -0,0 +1,136 @@
+name: VRT Update - Generate
+# SECURITY: This workflow runs in untrusted fork context with no write permissions.
+# It only generates VRT patch artifacts that are later applied by vrt-update-apply.yml
+# Triggered by commenting "/update-vrt" on a pull request.
+on:
+  issue_comment:
+    types: [created]
+
+permissions:
+  contents: read
+  pull-requests: read
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.event.issue.number }}
+  cancel-in-progress: false
+
+jobs:
+  add-reaction:
+    name: Add 👀 Reaction
+    runs-on: ubuntu-latest
+    # Only run on PR comments containing /update-vrt
+    if: >
+      github.event.issue.pull_request &&
+      startsWith(github.event.comment.body, '/update-vrt')
+    permissions:
+      pull-requests: write
+    steps:
+      - name: Add 👀 reaction to comment
+        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+        with:
+          script: |
+            await github.rest.reactions.createForIssueComment({
+              owner: context.repo.owner,
+              repo: context.repo.repo,
+              comment_id: context.payload.comment.id,
+              content: 'eyes'
+            });
+
+  generate-vrt-updates:
+    name: Generate VRT Updates
+    runs-on: ubuntu-latest
+    # Only run on PR comments containing /update-vrt
+    if: >
+      github.event.issue.pull_request &&
+      startsWith(github.event.comment.body, '/update-vrt')
+    container:
+      image: mcr.microsoft.com/playwright:v1.56.0-jammy
+    steps:
+      - name: Get PR details
+        id: pr
+        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+        with:
+          script: |
+            const { data: pr } = await github.rest.pulls.get({
+              owner: context.repo.owner,
+              repo: context.repo.repo,
+              pull_number: context.issue.number
+            });
+            core.setOutput('head_sha', pr.head.sha);
+            core.setOutput('head_ref', pr.head.ref);
+            core.setOutput('head_repo', pr.head.repo.full_name);
+
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+        with:
+          ref: ${{ steps.pr.outputs.head_sha }}
+
+      - name: Set up environment
+        uses: ./.github/actions/setup
+        with:
+          download-translations: 'false'
+
+      - name: Run VRT Tests on Desktop app
+        continue-on-error: true
+        run: |
+          xvfb-run --auto-servernum --server-args="-screen 0 1920x1080x24" -- yarn e2e:desktop --update-snapshots
+
+      - name: Run VRT Tests
+        continue-on-error: true
+        run: yarn vrt --update-snapshots
+
+      - name: Create patch with PNG changes only
+        id: create-patch
+        run: |
+          # Trust the repository directory (required for container environments)
+          git config --global --add safe.directory "$GITHUB_WORKSPACE"
+
+          git config --global user.name "github-actions[bot]"
+          git config --global user.email "github-actions[bot]@users.noreply.github.com"
+
+          # Stage only PNG files
+          git add "**/*.png"
+
+          # Check if there are any changes
+          if git diff --staged --quiet; then
+            echo "has_changes=false" >> "$GITHUB_OUTPUT"
+            echo "No VRT changes to commit"
+            exit 0
+          fi
+
+          echo "has_changes=true" >> "$GITHUB_OUTPUT"
+
+          # Create commit and patch
+          git commit -m "Update VRT screenshots"
+          git format-patch -1 HEAD --stdout > vrt-update.patch
+
+          # Validate patch only contains PNG files
+          if grep -E '^(\+\+\+|---) [ab]/' vrt-update.patch | grep -v '\.png$'; then
+            echo "ERROR: Patch contains non-PNG files!"
+            exit 1
+          fi
+
+          echo "Patch created successfully with PNG changes only"
+
+      - name: Upload patch artifact
+        if: steps.create-patch.outputs.has_changes == 'true'
+        uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0
+        with:
+          name: vrt-patch-${{ github.event.issue.number }}
+          path: vrt-update.patch
+          retention-days: 5
+
+      - name: Save PR metadata
+        if: steps.create-patch.outputs.has_changes == 'true'
+        run: |
+          mkdir -p pr-metadata
+          echo "${{ github.event.issue.number }}" > pr-metadata/pr-number.txt
+          echo "${{ steps.pr.outputs.head_ref }}" > pr-metadata/head-ref.txt
+          echo "${{ steps.pr.outputs.head_repo }}" > pr-metadata/head-repo.txt
+
+      - name: Upload PR metadata
+        if: steps.create-patch.outputs.has_changes == 'true'
+        uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0
+        with:
+          name: vrt-metadata-${{ github.event.issue.number }}
+          path: pr-metadata/
+          retention-days: 5

.gitignore

@@ -3,12 +3,10 @@
 !data/.gitkeep
 /data2
 Actual-*
+!actual-server.js
 **/xcuserdata/*
 export-2020-01-10.csv
 
-# Secrets
-.secret-tokens
-
 # MacOS
 .DS_Store
 
@@ -17,14 +15,26 @@ export-2020-01-10.csv
 
 # JavaScript
 node_modules
+packages/api/app/bundle.api.js
+packages/api/app/stats.json
 packages/api/dist
 packages/api/@types
 packages/crdt/dist
+packages/desktop-client/build-stats
+packages/desktop-client/dev-dist
+packages/desktop-client/public/kcab
+packages/desktop-client/locale
+packages/desktop-client/playwright-report
+packages/desktop-client/test-results
 packages/desktop-electron/client-build
 packages/desktop-electron/build
 packages/desktop-electron/.electron-symbols
 packages/desktop-electron/dist
 packages/desktop-electron/loot-core
+packages/desktop-client/service-worker
+packages/plugins-service/dist
+packages/loot-core/lib-dist
+packages/sync-server/coverage
 bundle.desktop.js
 bundle.desktop.js.map
 bundle.mobile.js
@@ -40,7 +50,8 @@ bundle.mobile.js.map
 !.yarn/versions
 
 # VSCode
-.vscode
+.vscode/*
+!.vscode/settings.default.json
 
 # IntelliJ IDEA
 .idea
@@ -53,3 +64,15 @@ bundle.mobile.js.map
 
 # build output
 package.tgz
+
+# Fly.io configuration
+fly.toml
+
+# TypeScript cache
+build/
+
+# .d.ts files aren't type-checked with skipLibCheck set to true
+*.d.ts
+
+# Lage cache
+.lage/

.nvmrc

@@ -1 +1 @@
-v18.16.0
+v22/*

.oxfmtrc.json

@@ -0,0 +1,10 @@
+{
+  "$schema": "./node_modules/oxfmt/configuration_schema.json",
+  "singleQuote": true,
+  "trailingComma": "all",
+  "arrowParens": "avoid",
+  "printWidth": 80,
+  "ignorePatterns": [
+    "packages/docs/*" // TOOD: fixme; temporary
+  ]
+}

.oxlintrc.json

@@ -0,0 +1,490 @@
+{
+  "$schema": "./node_modules/oxlint/configuration_schema.json",
+  "plugins": ["react", "typescript", "import", "jsx-a11y"],
+  "jsPlugins": [
+    "./packages/eslint-plugin-actual/lib/index.js",
+    "eslint-plugin-typescript-paths",
+    "eslint-plugin-perfectionist"
+  ],
+  "env": {
+    "browser": true,
+    "node": true,
+    "vitest": true
+  },
+  "globals": {
+    "vi": "readonly",
+    "backend": "readonly",
+    "importScripts": "readonly",
+    "FS": "readonly" // TODO: remove this
+  },
+  "rules": {
+    // TODO fix all these and re-enable
+    "jsx-a11y/click-events-have-key-events": "off",
+    "jsx-a11y/prefer-tag-over-role": "off",
+    "jsx-a11y/tabindex-no-positive": "off",
+
+    // Import sorting
+    // TODO replace once oxfmt supports this: https://github.com/oxc-project/oxc/issues/17076
+    "perfectionist/sort-imports": [
+      "warn",
+      {
+        "groups": [
+          "react",
+          "builtin",
+          "external",
+          "loot-core",
+          "parent",
+          "sibling",
+          "index",
+          "desktop-client"
+        ],
+        "customGroups": [
+          {
+            "groupName": "react",
+            "elementNamePattern": "^react(-.*)?$"
+          },
+          {
+            "groupName": "loot-core",
+            "elementNamePattern": "^loot-core"
+          },
+          {
+            "groupName": "desktop-client",
+            "elementNamePattern": "^@desktop-client"
+          }
+        ],
+        "newlinesBetween": "always"
+      }
+    ],
+
+    // Actual rules
+    "actual/typography": "warn",
+    "actual/no-untranslated-strings": "error",
+    "actual/prefer-trans-over-t": "error",
+    "actual/prefer-if-statement": "warn",
+    "actual/prefer-logger-over-console": "error",
+    "actual/object-shorthand-properties": "warn",
+    "actual/prefer-const": "warn",
+    "actual/no-anchor-tag": "warn",
+    "actual/no-react-default-import": "warn",
+
+    // JSX A11y rules
+    "jsx-a11y/no-autofocus": [
+      "warn",
+      {
+        "ignoreNonDOM": true
+      }
+    ],
+    "jsx-a11y/alt-text": "warn",
+    "jsx-a11y/anchor-has-content": "warn",
+    "jsx-a11y/anchor-is-valid": [
+      "warn",
+      {
+        "aspects": ["noHref", "invalidHref"]
+      }
+    ],
+    "jsx-a11y/aria-activedescendant-has-tabindex": "warn",
+    "jsx-a11y/aria-props": "warn",
+    "jsx-a11y/aria-proptypes": "warn",
+    "jsx-a11y/aria-role": [
+      "warn",
+      {
+        "ignoreNonDOM": true
+      }
+    ],
+    "jsx-a11y/aria-unsupported-elements": "warn",
+    "jsx-a11y/heading-has-content": "warn",
+    "jsx-a11y/iframe-has-title": "warn",
+    "jsx-a11y/img-redundant-alt": "warn",
+    "jsx-a11y/no-access-key": "warn",
+    "jsx-a11y/no-distracting-elements": "warn",
+    "jsx-a11y/no-redundant-roles": "warn",
+    "jsx-a11y/role-has-required-aria-props": "warn",
+    "jsx-a11y/role-supports-aria-props": "warn",
+    "jsx-a11y/scope": "warn",
+
+    // Typescript rules
+    "typescript/ban-ts-comment": [
+      "warn",
+      {
+        // TODO: remove this
+        "ts-ignore": "allow-with-description"
+      }
+    ],
+    "typescript/consistent-type-definitions": ["warn", "type"],
+    "typescript/consistent-type-imports": [
+      "warn",
+      {
+        "prefer": "type-imports",
+        "fixStyle": "inline-type-imports"
+      }
+    ],
+    "typescript/no-implied-eval": "warn",
+    "typescript/no-explicit-any": "warn",
+    "typescript/no-restricted-types": [
+      "warn",
+      {
+        "types": {
+          // forbid FC as superfluous
+          "FunctionComponent": {
+            "message": "Type the props argument and let TS infer or use ComponentType for a component prop"
+          },
+          "FC": {
+            "message": "Type the props argument and let TS infer or use ComponentType for a component prop"
+          }
+        }
+      }
+    ],
+    "typescript/no-var-requires": "warn",
+
+    // Import rules
+    "import/first": "error",
+    "import/no-amd": "error",
+    "import/no-default-export": "warn",
+    "import/no-webpack-loader-syntax": "error",
+    "import/no-useless-path-segments": "warn",
+    "import/no-unresolved": "warn",
+    "import/no-unused-modules": "warn",
+    "import/no-duplicates": [
+      "warn",
+      {
+        "prefer-inline": true
+      }
+    ],
+
+    // React rules
+    "react/exhaustive-deps": [
+      "warn",
+      {
+        "additionalHooks": "(useQuery|useEffectAfterMount)"
+      }
+    ],
+    "react/jsx-curly-brace-presence": "warn",
+    "react/jsx-filename-extension": [
+      "warn",
+      {
+        "extensions": [".jsx", ".tsx"],
+        "allow": "as-needed"
+      }
+    ],
+    "react/jsx-no-comment-textnodes": "warn",
+    "react/jsx-no-duplicate-props": "warn",
+    "react/jsx-no-target-blank": "warn",
+    "react/jsx-no-undef": "error",
+    "react/jsx-no-useless-fragment": "warn",
+    "react/jsx-pascal-case": [
+      "warn",
+      {
+        "allowAllCaps": true,
+        "ignore": []
+      }
+    ],
+    "react/no-danger-with-children": "warn",
+    "react/no-direct-mutation-state": "warn",
+    "react/no-is-mounted": "warn",
+    "react/no-unstable-nested-components": "warn",
+    "react/require-render-return": "error",
+    "react/rules-of-hooks": "error",
+    "react/self-closing-comp": "warn",
+    "react/style-prop-object": "warn",
+    "react/jsx-boolean-value": "warn",
+
+    // ESLint rules
+    "eslint/array-callback-return": "warn",
+    // "eslint/curly": ["warn", "multi-line", "consistent"], // TODO: re-enable? this rule is really slow
+    "eslint/default-case": [
+      "warn",
+      {
+        "commentPattern": "^no default$"
+      }
+    ],
+    "eslint/eqeqeq": ["warn", "smart"],
+    "eslint/no-array-constructor": "warn",
+    "eslint/no-caller": "warn",
+    "eslint/no-cond-assign": ["warn", "except-parens"],
+    "eslint/no-const-assign": "warn",
+    "eslint/no-control-regex": "warn",
+    "eslint/no-delete-var": "warn",
+    "eslint/no-dupe-class-members": "warn",
+    "eslint/no-dupe-keys": "warn",
+    "eslint/no-duplicate-case": "warn",
+    "eslint/no-empty-character-class": "warn",
+    "eslint/no-empty-function": "warn",
+    "eslint/no-empty-pattern": "warn",
+    "eslint/no-eval": "warn",
+    "eslint/no-ex-assign": "warn",
+    "eslint/no-extend-native": "warn",
+    "eslint/no-extra-bind": "warn",
+    "eslint/no-extra-label": "warn",
+    "eslint/no-fallthrough": "warn",
+    "eslint/no-func-assign": "warn",
+    "eslint/no-invalid-regexp": "warn",
+    "eslint/no-iterator": "warn",
+    "eslint/no-label-var": "warn",
+    "eslint/no-var": "warn",
+    "eslint/no-labels": [
+      "warn",
+      {
+        "allowLoop": true,
+        "allowSwitch": false
+      }
+    ],
+    "eslint/no-new-func": "warn",
+    "eslint/no-script-url": "warn",
+    "eslint/no-self-assign": "warn",
+    "eslint/no-self-compare": "warn",
+    "eslint/no-sequences": "warn",
+    "eslint/no-shadow-restricted-names": "warn",
+    "eslint/no-sparse-arrays": "warn",
+    "eslint/no-template-curly-in-string": "warn",
+    "eslint/no-this-before-super": "warn",
+    "eslint/no-throw-literal": "warn",
+    "eslint/no-unreachable": "warn",
+    "eslint/no-obj-calls": "warn",
+    "eslint/no-new-wrappers": "warn",
+    "eslint/no-unsafe-negation": "warn",
+    "eslint/no-multi-str": "warn",
+    "eslint/no-global-assign": "warn",
+    "eslint/no-lone-blocks": "warn",
+    "eslint/no-unused-labels": "warn",
+    "eslint/no-object-constructor": "warn",
+    "eslint/no-new-native-nonconstructor": "warn",
+    "eslint/no-redeclare": "warn",
+    "eslint/no-useless-computed-key": "warn",
+    "eslint/no-useless-concat": "warn",
+    "eslint/no-useless-escape": "warn",
+    "eslint/require-yield": "warn",
+    "eslint/getter-return": "warn",
+    "eslint/unicode-bom": ["warn", "never"],
+    "eslint/no-use-isnan": "warn",
+    "eslint/valid-typeof": "warn",
+    "eslint/no-useless-rename": [
+      "warn",
+      {
+        "ignoreDestructuring": false,
+        "ignoreImport": false,
+        "ignoreExport": false
+      }
+    ],
+    "eslint/no-with": "warn",
+    "eslint/no-regex-spaces": "warn",
+    "eslint/no-restricted-globals": [
+      "warn",
+
+      // https://github.com/facebook/create-react-app/tree/main/packages/confusing-browser-globals
+      "addEventListener",
+      "blur",
+      "close",
+      "closed",
+      "confirm",
+      "defaultStatus",
+      "defaultstatus",
+      "event",
+      "external",
+      "find",
+      "focus",
+      "frameElement",
+      "frames",
+      "history",
+      "innerHeight",
+      "innerWidth",
+      "length",
+      "location",
+      "locationbar",
+      "menubar",
+      "moveBy",
+      "moveTo",
+      "name",
+      "onblur",
+      "onerror",
+      "onfocus",
+      "onload",
+      "onresize",
+      "onunload",
+      "open",
+      "opener",
+      "opera",
+      "outerHeight",
+      "outerWidth",
+      "pageXOffset",
+      "pageYOffset",
+      "parent",
+      "print",
+      "removeEventListener",
+      "resizeBy",
+      "resizeTo",
+      "screen",
+      "screenLeft",
+      "screenTop",
+      "screenX",
+      "screenY",
+      "scroll",
+      "scrollbars",
+      "scrollBy",
+      "scrollTo",
+      "scrollX",
+      "scrollY",
+      "status",
+      "statusbar",
+      "stop",
+      "toolbar",
+      "top"
+    ],
+    "eslint/no-restricted-imports": [
+      "warn",
+      {
+        "paths": [
+          {
+            "name": "react-router",
+            "importNames": ["useNavigate"],
+            "message": "Please import Actual's useNavigate() hook from `src/hooks` instead."
+          },
+          {
+            "name": "react-redux",
+            "importNames": ["useDispatch"],
+            "message": "Please import Actual's useDispatch() hook from `src/redux` instead."
+          },
+          {
+            "name": "react-redux",
+            "importNames": ["useSelector"],
+            "message": "Please import Actual's useSelector() hook from `src/redux` instead."
+          },
+          {
+            "name": "react-redux",
+            "importNames": ["useStore"],
+            "message": "Please import Actual's useStore() hook from `src/redux` instead."
+          }
+        ],
+        "patterns": [
+          {
+            "group": ["**/*.api", "**/*.web", "**/*.electron"],
+            "message": "Don't directly reference imports from other platforms"
+          },
+          {
+            "group": ["uuid"],
+            "importNames": ["*"],
+            "message": "Use `import { v4 as uuidv4 } from 'uuid'` instead"
+          },
+          {
+            "group": ["**/style", "**/colors"],
+            "importNames": ["colors"],
+            "message": "Please use themes instead of colors"
+          },
+          {
+            "group": ["@actual-app/web/**/*"],
+            "message": "Please do not import `@actual-app/web` in `loot-core`"
+          }
+        ]
+      }
+    ],
+    "eslint/no-useless-constructor": "warn",
+    "eslint/no-undef": "warn",
+    "eslint/no-unused-expressions": "warn"
+  },
+  "overrides": [
+    {
+      // TODO: fix the issues in these files
+      "files": [
+        "packages/component-library/src/Menu.tsx",
+        "packages/desktop-client/src/components/accounts/Account.jsx",
+        "packages/desktop-client/src/components/accounts/MobileAccount.jsx",
+        "packages/desktop-client/src/components/accounts/MobileAccounts.jsx",
+        "packages/desktop-client/src/components/budget/BudgetCategories.jsx",
+        "packages/desktop-client/src/components/budget/BudgetSummaries.tsx",
+        "packages/desktop-client/src/components/budget/DynamicBudgetTable.tsx",
+        "packages/desktop-client/src/components/budget/envelope/HoldMenu.tsx",
+        "packages/desktop-client/src/components/budget/envelope/TransferMenu.tsx",
+        "packages/desktop-client/src/components/budget/index.tsx",
+        "packages/desktop-client/src/components/budget/MobileBudget.tsx",
+        "packages/desktop-client/src/components/FinancesApp.tsx",
+        "packages/desktop-client/src/components/GlobalKeys.ts",
+        "packages/desktop-client/src/components/LoggedInUser.tsx",
+        "packages/desktop-client/src/components/manager/ManagementApp.jsx",
+        "packages/desktop-client/src/components/manager/subscribe/common.tsx",
+        "packages/desktop-client/src/components/ManageRules.tsx",
+        "packages/desktop-client/src/components/mobile/MobileAmountInput.jsx",
+        "packages/desktop-client/src/components/mobile/MobileNavTabs.tsx",
+        "packages/desktop-client/src/components/Modals.tsx",
+        "packages/desktop-client/src/components/modals/EditRule.jsx",
+        "packages/desktop-client/src/components/modals/ImportTransactions.jsx",
+        "packages/desktop-client/src/components/modals/ImportTransactionsModal/ImportTransactionsModal.tsx",
+        "packages/desktop-client/src/components/modals/MergeUnusedPayees.jsx",
+        "packages/desktop-client/src/components/Notifications.tsx",
+        "packages/desktop-client/src/components/payees/ManagePayees.jsx",
+        "packages/desktop-client/src/components/payees/ManagePayeesWithData.jsx",
+        "packages/desktop-client/src/components/payees/PayeeTable.tsx",
+        "packages/desktop-client/src/components/reports/graphs/tableGraph/ReportTable.tsx",
+        "packages/desktop-client/src/components/reports/graphs/tableGraph/ReportTableTotals.tsx",
+        "packages/desktop-client/src/components/reports/reports/CashFlowCard.jsx",
+        "packages/desktop-client/src/components/reports/reports/CustomReport.jsx",
+        "packages/desktop-client/src/components/reports/reports/CustomReport.tsx",
+        "packages/desktop-client/src/components/reports/reports/NetWorthCard.jsx",
+        "packages/desktop-client/src/components/reports/SaveReportName.tsx",
+        "packages/desktop-client/src/components/reports/useReport.ts",
+        "packages/desktop-client/src/components/schedules/ScheduleDetails.jsx",
+        "packages/desktop-client/src/components/schedules/ScheduleEditModal.tsx",
+        "packages/desktop-client/src/components/schedules/SchedulesTable.tsx",
+        "packages/desktop-client/src/components/select/DateSelect.tsx",
+        "packages/desktop-client/src/components/sidebar/Tools.tsx",
+        "packages/desktop-client/src/components/sort.tsx",
+        "packages/desktop-client/src/hooks/useEffectAfterMount.ts",
+        "packages/desktop-client/src/hooks/useQuery.ts"
+      ],
+      "rules": {
+        "react/exhaustive-deps": "off"
+      }
+    },
+    {
+      "files": ["**/*.test.{js,ts,jsx,tsx}", "packages/docs/**/*"],
+      "rules": {
+        "actual/no-untranslated-strings": "off",
+        "actual/prefer-logger-over-console": "off"
+      }
+    },
+    {
+      "files": [
+        "packages/api/migrations/*",
+        "packages/loot-core/migrations/*",
+        "packages/sync-server/src/app-gocardless/banks/*.js",
+        "*.config.{ts,mts,mjs}"
+      ],
+      "rules": {
+        "import/no-default-export": "off"
+      }
+    },
+    {
+      "files": ["packages/docs/**/*"],
+      "rules": {
+        "actual/no-anchor-tag": "off"
+      }
+    },
+    {
+      "files": ["packages/desktop-client/**/*.{js,ts,jsx,tsx}"],
+      "rules": {
+        "typescript-paths/absolute-parent-import": [
+          "error",
+          { "preferPathOverBaseUrl": true }
+        ],
+        "typescript-paths/absolute-import": ["error", { "enableAlias": false }]
+      }
+    },
+    // TODO: enable these
+    {
+      "files": [
+        "packages/desktop-client/src/components/admin/UserAccess/UserAccess.tsx",
+        "packages/desktop-client/src/components/admin/UserDirectory/UserDirectory.tsx",
+        "packages/desktop-client/src/components/budget/BudgetCategories.tsx",
+        "packages/desktop-client/src/components/budget/envelope/BalanceMovementMenu.tsx",
+        "packages/desktop-client/src/components/ManageRules.tsx",
+        "packages/desktop-client/src/components/mobile/budget/ExpenseGroupList.tsx",
+        "packages/desktop-client/src/components/modals/EditFieldModal.tsx",
+        "packages/desktop-client/src/components/reports/reports/Calendar.tsx",
+        "packages/desktop-client/src/components/schedules/ScheduleLink.tsx",
+        "packages/desktop-client/src/components/ServerContext.tsx",
+        "packages/desktop-client/src/components/table.tsx"
+      ],
+      "rules": {
+        "eslint/no-empty-function": "off"
+      }
+    }
+  ]
+}

.prettierignore

@@ -1 +0,0 @@
-sync_pb.*

.prettierrc.json

@@ -1,5 +0,0 @@
-{
-  "singleQuote": true,
-  "trailingComma": "all",
-  "arrowParens": "avoid"
-}

.secret-tokens.example

@@ -1,2 +0,0 @@
-export APPLE_ID=example@email.com
-export APPLE_APP_SPECIFIC_PASSWORD=password

.vscode/settings.default.json

@@ -0,0 +1,7 @@
+{
+  "typescript.tsdk": "node_modules/typescript/lib",
+  "editor.defaultFormatter": "oxc.oxc-vscode",
+  "vitest.nodeEnv": {
+    "NODE_OPTIONS": "--experimental-vm-modules --import ./packages/sync-server/register-loader.mjs --trace-warnings"
+  }
+}

.yarn/patches/adm-zip-npm-0.5.16-4556fea098.patch

@@ -0,0 +1,10 @@
+diff --git a/methods/inflater.js b/methods/inflater.js
+index 8769e66e82b25541aba80b1ac6429199c9a8179f..1d4402402f0e1aaf64062c1f004c3d6e6fe93e76 100644
+--- a/methods/inflater.js
++++ b/methods/inflater.js
+@@ -1,4 +1,4 @@
+-const version = +(process.versions ? process.versions.node : "").split(".")[0] || 0;
++const version = +(process?.versions?.node ?? "").split(".")[0] || 0;
+ 
+ module.exports = function (/*Buffer*/ inbuf, /*number*/ expectedLength) {
+     var zlib = require("zlib");

.yarnrc.yml

@@ -6,4 +6,4 @@ enableTransparentWorkspaces: false
 
 nodeLinker: node-modules
 
-yarnPath: .yarn/releases/yarn-4.3.1.cjs
+yarnPath: .yarn/releases/yarn-4.10.3.cjs

AGENTS.md

@@ -0,0 +1,595 @@
+# AGENTS.md - Guide for AI Agents Working with Actual Budget
+
+This guide provides comprehensive information for AI agents (like Cursor) working with the Actual Budget codebase.
+
+## Project Overview
+
+**Actual Budget** is a local-first personal finance tool written in TypeScript/JavaScript. It's 100% free and open-source with synchronization capabilities across devices.
+
+- **Repository**: https://github.com/actualbudget/actual
+- **Community Docs**: Documentation is part of the monorepo at `packages/docs/`. Published at https://actualbudget.org/docs
+- **License**: MIT
+- **Primary Language**: TypeScript (with React)
+- **Build System**: Yarn 4 workspaces (monorepo)
+
+## Quick Start Commands
+
+### Essential Commands (Run from Root)
+
+```bash
+# Type checking (ALWAYS run before committing)
+yarn typecheck
+
+# Linting and formatting (with auto-fix)
+yarn lint:fix
+
+# Run all tests
+yarn test
+
+# Start development server (browser)
+yarn start
+
+# Start with sync server
+yarn start:server-dev
+
+# Start desktop app development
+yarn start:desktop
+```
+
+### Important Rules
+
+- **ALWAYS run yarn commands from the root directory** - never run them in child workspaces
+- Use `yarn workspace <workspace-name> run <command>` for workspace-specific tasks
+- Tests run once and exit by default (using `vitest --run`)
+
+### Task Orchestration with Lage
+
+The project uses **[lage](https://microsoft.github.io/lage/)** (a task runner for JavaScript monorepos) to efficiently run tests and other tasks across multiple workspaces:
+
+- **Parallel execution**: Runs tests in parallel across workspaces for faster feedback
+- **Smart caching**: Caches test results to skip unchanged packages (cached in `.lage/` directory)
+- **Dependency awareness**: Understands workspace dependencies and execution order
+- **Continues on error**: Uses `--continue` flag to run all packages even if one fails
+
+**Lage Commands:**
+
+```bash
+# Run all tests across all packages
+yarn test                    # Equivalent to: lage test --continue
+
+# Run tests without cache (for debugging/CI)
+yarn test:debug              # Equivalent to: lage test --no-cache --continue
+```
+
+Configuration is in `lage.config.js` at the project root.
+
+## Architecture & Package Structure
+
+### Core Packages
+
+#### 1. **loot-core** (`packages/loot-core/`)
+
+The core application logic that runs on any platform.
+
+- Business logic, database operations, and calculations
+- Platform-agnostic code
+- Exports for both browser and node environments
+- Test commands:
+
+  ```bash
+  # Run all loot-core tests
+  yarn workspace loot-core run test
+
+  # Or run tests across all packages using lage
+  yarn test
+  ```
+
+#### 2. **desktop-client** (`packages/desktop-client/` - aliased as `@actual-app/web`)
+
+The React-based UI for web and desktop.
+
+- React components using functional programming patterns
+- E2E tests using Playwright
+- Vite for bundling
+- Commands:
+
+  ```bash
+  # Development
+  yarn workspace @actual-app/web start:browser
+
+  # Build
+  yarn workspace @actual-app/web build
+
+  # E2E tests
+  yarn workspace @actual-app/web e2e
+
+  # Visual regression tests
+  yarn workspace @actual-app/web vrt
+  ```
+
+#### 3. **desktop-electron** (`packages/desktop-electron/`)
+
+Electron wrapper for the desktop application.
+
+- Window management and native OS integration
+- E2E tests for Electron-specific features
+
+#### 4. **api** (`packages/api/` - aliased as `@actual-app/api`)
+
+Public API for programmatic access to Actual.
+
+- Node.js API
+- Designed for integrations and automation
+- Commands:
+
+  ```bash
+  # Build
+  yarn workspace @actual-app/api build
+
+  # Run tests
+  yarn workspace @actual-app/api test
+
+  # Or use lage to run all tests
+  yarn test
+  ```
+
+#### 5. **sync-server** (`packages/sync-server/` - aliased as `@actual-app/sync-server`)
+
+Synchronization server for multi-device support.
+
+- Express-based server
+- Currently transitioning to TypeScript (mostly JavaScript)
+- Commands:
+  ```bash
+  yarn workspace @actual-app/sync-server start
+  ```
+
+#### 6. **component-library** (`packages/component-library/` - aliased as `@actual-app/components`)
+
+Reusable React UI components.
+
+- Shared components like Button, Input, Menu, etc.
+- Theme system and design tokens
+- Icons (375+ icons in SVG/TSX format)
+
+#### 7. **crdt** (`packages/crdt/` - aliased as `@actual-app/crdt`)
+
+CRDT (Conflict-free Replicated Data Type) implementation for data synchronization.
+
+- Protocol buffers for serialization
+- Core sync logic
+
+#### 8. **plugins-service** (`packages/plugins-service/`)
+
+Service for handling plugins/extensions.
+
+#### 9. **eslint-plugin-actual** (`packages/eslint-plugin-actual/`)
+
+Custom ESLint rules specific to Actual.
+
+- `no-untranslated-strings`: Enforces i18n usage
+- `prefer-trans-over-t`: Prefers Trans component over t() function
+- `prefer-logger-over-console`: Enforces using logger instead of console
+- `typography`: Typography rules
+- `prefer-if-statement`: Prefers explicit if statements
+
+#### 10. **docs** (`packages/docs/`)
+
+Documentation website built with Docusaurus.
+
+- Documentation is part of the monorepo
+- Built with Docusaurus 3
+- Commands:
+  ```bash
+  yarn workspace docs start
+  yarn workspace docs build
+  yarn start:docs  # From root
+  ```
+
+## Development Workflow
+
+### 1. Making Changes
+
+When implementing changes:
+
+1. Read relevant files to understand current implementation
+2. Make focused, incremental changes
+3. Run type checking: `yarn typecheck`
+4. Run linting: `yarn lint:fix`
+5. Run relevant tests
+6. Fix any linter errors that are introduced
+
+### 2. Testing Strategy
+
+**Unit Tests (Vitest)**
+
+The project uses **lage** for running tests across all workspaces efficiently.
+
+```bash
+# Run all tests across all packages (using lage)
+yarn test
+
+# Run tests without cache (for debugging)
+yarn test:debug
+
+# Run tests for a specific package
+yarn workspace loot-core run test
+```
+
+**E2E Tests (Playwright)**
+
+```bash
+# Run E2E tests for web
+yarn e2e
+
+# Desktop Electron E2E (includes full build)
+yarn e2e:desktop
+
+# Visual regression tests
+yarn vrt
+
+# Visual regression in Docker (consistent environment)
+yarn vrt:docker
+
+# Run E2E tests for a specific package
+yarn workspace @actual-app/web e2e
+```
+
+**Testing Best Practices:**
+
+- Minimize mocked dependencies - prefer real implementations
+- Use descriptive test names
+- Vitest globals are available: `describe`, `it`, `expect`, `beforeEach`, etc.
+- For sync-server tests, globals are explicitly defined in config
+
+### 3. Type Checking
+
+TypeScript configuration uses:
+
+- Incremental compilation
+- Strict type checking with `typescript-strict-plugin`
+- Platform-specific exports in `loot-core` (node vs browser)
+
+Always run `yarn typecheck` before committing.
+
+### 4. Internationalization (i18n)
+
+- Use `Trans` component instead of `t()` function when possible
+- All user-facing strings must be translated
+- Generate i18n files: `yarn generate:i18n`
+- Custom ESLint rules enforce translation usage
+
+## Code Style & Conventions
+
+### TypeScript Guidelines
+
+**Type Usage:**
+
+- Use TypeScript for all code
+- Prefer `type` over `interface`
+- Avoid `enum` - use objects or maps
+- Avoid `any` or `unknown` unless absolutely necessary
+- Look for existing type definitions in the codebase
+- Avoid type assertions (`as`, `!`) - prefer `satisfies`
+- Use inline type imports: `import { type MyType } from '...'`
+
+**Naming:**
+
+- Use descriptive variable names with auxiliary verbs (e.g., `isLoaded`, `hasError`)
+- Named exports for components and utilities (avoid default exports except in specific cases)
+
+**Code Structure:**
+
+- Functional and declarative programming patterns - avoid classes
+- Use the `function` keyword for pure functions
+- Prefer iteration and modularization over code duplication
+- Structure files: exported component/page, helpers, static content, types
+- Create new components in their own files
+
+**React Patterns:**
+
+- Don't use `React.FunctionComponent` or `React.FC` - type props directly
+- Don't use `React.*` patterns - use named imports instead
+- Use `<Link>` instead of `<a>` tags
+- Use custom hooks from `src/hooks` (not react-router directly):
+  - `useNavigate()` from `src/hooks` (not react-router)
+  - `useDispatch()`, `useSelector()`, `useStore()` from `src/redux` (not react-redux)
+- Avoid unstable nested components
+- Use `satisfies` for type narrowing
+
+**JSX Style:**
+
+- Declarative JSX, minimal and readable
+- Avoid unnecessary curly braces in conditionals
+- Use concise syntax for simple statements
+- Prefer explicit expressions (`condition && <Component />`)
+
+### Import Organization
+
+Imports are automatically organized by ESLint with the following order:
+
+1. React imports (first)
+2. Built-in Node.js modules
+3. External packages
+4. Actual packages (`loot-core`, `@actual-app/components` - legacy pattern `loot-design` may appear in old code)
+5. Parent imports
+6. Sibling imports
+7. Index imports
+
+Always maintain newlines between import groups.
+
+### Platform-Specific Code
+
+- Don't directly reference platform-specific imports (`.api`, `.web`, `.electron`)
+- Use conditional exports in `loot-core` for platform-specific code
+- Platform resolution happens at build time via package.json exports
+
+### Restricted Patterns
+
+**Never:**
+
+- Use `console.*` (use logger instead - enforced by ESLint)
+- Import from `uuid` without destructuring: use `import { v4 as uuidv4 } from 'uuid'`
+- Import colors directly - use theme instead
+- Import `@actual-app/web/*` in `loot-core`
+
+**Git Commands:**
+
+- Never update git config
+- Never run destructive git operations (force push, hard reset) unless explicitly requested
+- Never skip hooks (--no-verify, --no-gpg-sign)
+- Never force push to main/master
+- Never commit unless explicitly asked
+
+## File Structure Patterns
+
+### Typical Component File
+
+```typescript
+import { type ComponentType } from 'react';
+// ... other imports
+
+type MyComponentProps = {
+  // Props definition
+};
+
+export function MyComponent({ prop1, prop2 }: MyComponentProps) {
+  // Component logic
+  return (
+    // JSX
+  );
+}
+```
+
+### Test File
+
+```typescript
+import { describe, it, expect, beforeEach } from 'vitest';
+// ... imports
+
+describe('ComponentName', () => {
+  it('should behave as expected', () => {
+    // Test logic
+    expect(result).toBe(expected);
+  });
+});
+```
+
+## Important Directories & Files
+
+### Configuration Files
+
+- `/package.json` - Root workspace configuration, scripts
+- `/lage.config.js` - Lage task runner configuration
+- `/eslint.config.mjs` - ESLint configuration (flat config format)
+- `/tsconfig.json` - Root TypeScript configuration
+- `/.cursorignore`, `/.gitignore` - Ignored files
+- `/yarn.lock` - Dependency lockfile (Yarn 4)
+
+### Documentation
+
+- `/README.md` - Project overview
+- `/CONTRIBUTING.md` - Points to community docs
+- `/upcoming-release-notes/` - Release notes for next version
+- `/CODEOWNERS` - Code ownership definitions
+- `/packages/docs/` - Documentation website (Docusaurus)
+
+### Build Artifacts (Don't Edit)
+
+- `packages/*/lib-dist/` - Built output
+- `packages/*/dist/` - Built output
+- `packages/*/build/` - Built output
+- `packages/desktop-client/playwright-report/` - Test reports
+- `packages/desktop-client/test-results/` - Test results
+- `.lage/` - Lage task runner cache (improves test performance)
+
+### Key Source Directories
+
+- `packages/loot-core/src/client/` - Client-side core logic
+- `packages/loot-core/src/server/` - Server-side core logic
+- `packages/loot-core/src/shared/` - Shared utilities
+- `packages/loot-core/src/types/` - Type definitions
+- `packages/desktop-client/src/components/` - React components
+- `packages/desktop-client/src/hooks/` - Custom React hooks
+- `packages/desktop-client/e2e/` - End-to-end tests
+- `packages/component-library/src/` - Reusable components
+- `packages/component-library/src/icons/` - Icon components (auto-generated, don't edit)
+- `packages/docs/docs/` - Documentation source files (Markdown)
+- `packages/docs/docs/contributing/` - Developer documentation
+
+## Common Development Tasks
+
+### Running Specific Tests
+
+```bash
+# Run all tests across all packages (recommended)
+yarn test
+
+# E2E test for a specific file
+yarn workspace @actual-app/web run playwright test accounts.test.ts --browser=chromium
+```
+
+### Building for Production
+
+```bash
+# Browser build
+yarn build:browser
+
+# Desktop build
+yarn build:desktop
+
+# API build
+yarn build:api
+
+# Sync server build
+yarn build:server
+```
+
+### Type Checking Specific Packages
+
+TypeScript uses project references. Run `yarn typecheck` from root to check all packages.
+
+### Debugging Tests
+
+```bash
+# Run tests in debug mode (without parallelization)
+yarn test:debug
+
+# Run specific E2E test with headed browser
+yarn workspace @actual-app/web run playwright test --headed --debug accounts.test.ts
+```
+
+### Working with Icons
+
+Icons in `packages/component-library/src/icons/` are auto-generated. Don't manually edit them.
+
+## Troubleshooting
+
+### Type Errors
+
+1. Run `yarn typecheck` to see all type errors
+2. Check if types are imported correctly
+3. Look for existing type definitions in `packages/loot-core/src/types/`
+4. Use `satisfies` instead of `as` for type narrowing
+
+### Linter Errors
+
+1. Run `yarn lint:fix` to auto-fix many issues
+2. Check ESLint output for specific rule violations
+3. Custom rules:
+   - `actual/no-untranslated-strings` - Add i18n
+   - `actual/prefer-trans-over-t` - Use Trans component
+   - `actual/prefer-logger-over-console` - Use logger
+   - Check `eslint.config.mjs` for complete rules
+
+### Test Failures
+
+1. Check if test is running in correct environment (node vs web)
+2. For Vitest: check `vitest.config.ts` or `vitest.web.config.ts`
+3. For Playwright: check `playwright.config.ts`
+4. Ensure mock minimization - prefer real implementations
+5. **Lage cache issues**: Clear cache with `rm -rf .lage` if tests behave unexpectedly
+6. **Tests continue on error**: With `--continue` flag, all packages run even if one fails
+
+### Import Resolution Issues
+
+1. Check `tsconfig.json` for path mappings
+2. Check package.json `exports` field (especially for loot-core)
+3. Verify platform-specific imports (`.web`, `.electron`, `.api`)
+4. Use absolute imports in `desktop-client` (enforced by ESLint)
+
+### Build Failures
+
+1. Clean build artifacts: `rm -rf packages/*/dist packages/*/lib-dist packages/*/build`
+2. Reinstall dependencies: `yarn install`
+3. Check Node.js version (requires >=20)
+4. Check Yarn version (requires ^4.9.1)
+
+## Testing Patterns
+
+### Unit Tests
+
+- Located alongside source files or in `__tests__` directories
+- Use `.test.ts`, `.test.tsx`, `.spec.js` extensions
+- Vitest is the test runner
+- Minimize mocking - prefer real implementations
+
+### E2E Tests
+
+- Located in `packages/desktop-client/e2e/`
+- Use Playwright test runner
+- Visual regression snapshots in `*-snapshots/` directories
+- Page models in `e2e/page-models/` for reusable page interactions
+- Mobile tests have `.mobile.test.ts` suffix
+
+### Visual Regression Tests (VRT)
+
+- Snapshots stored per test file in `*-snapshots/` directories
+- Use Docker for consistent environment: `yarn vrt:docker`
+
+## Additional Resources
+
+- **Community Documentation**: https://actualbudget.org/docs/contributing/
+- **Discord Community**: https://discord.gg/pRYNYr4W5A
+- **GitHub Issues**: https://github.com/actualbudget/actual/issues
+- **Feature Requests**: Label "needs votes" sorted by reactions
+
+## Code Quality Checklist
+
+Before committing changes, ensure:
+
+- [ ] `yarn typecheck` passes
+- [ ] `yarn lint:fix` has been run
+- [ ] Relevant tests pass
+- [ ] No new console.\* usage (use logger)
+- [ ] User-facing strings are translated
+- [ ] Prefer `type` over `interface`
+- [ ] Named exports used (not default exports)
+- [ ] Imports are properly ordered
+- [ ] Platform-specific code uses proper exports
+- [ ] No unnecessary type assertions
+
+## Pull Request Guidelines
+
+When creating pull requests:
+
+- **AI-Generated PRs**: If you create a PR using AI assistance, add the **"AI generated"** label to the pull request. This helps maintainers understand the nature of the contribution.
+
+## Performance Considerations
+
+- **Bundle Size**: Check with rollup-plugin-visualizer
+- **Type Checking**: Uses incremental compilation
+- **Testing**: Tests run in parallel by default
+- **Linting**: ESLint caches results for faster subsequent runs
+
+## Workspace Commands Reference
+
+```bash
+# List all workspaces
+yarn workspaces list
+
+# Run command in specific workspace
+yarn workspace <workspace-name> run <command>
+
+# Run command in all workspaces
+yarn workspaces foreach --all run <command>
+
+# Install production dependencies only (for server deployment)
+yarn install:server
+```
+
+## Environment Requirements
+
+- **Node.js**: >=20
+- **Yarn**: ^4.9.1 (managed by packageManager field)
+- **Browser Targets**: Electron >= 35.0, modern browsers (see browserslist)
+
+## Migration Notes
+
+The codebase is actively being migrated:
+
+- **JavaScript → TypeScript**: sync-server is in progress
+- **Classes → Functions**: Prefer functional patterns
+- **React.\* → Named Imports**: Legacy React.\* patterns being removed
+
+When working with older code, follow the newer patterns described in this guide.

CODEOWNERS

@@ -0,0 +1,10 @@
+# CODEOWNERS file for Actual Budget
+# Please add your name to code-paths that you feel especially 
+# passionate about. You will be notified for any PRs there.
+
+/packages/api/                                    @MatissJanis
+/packages/component-library/                      @MatissJanis
+/packages/desktop-client/src/components/mobile    @joel-jeremy 
+/packages/desktop-electron/                       @MikesGlitch
+/packages/loot-core/src/server/budget             @youngcw
+/packages/sync-server/                            @matt-fidd

Dockerfile

@@ -5,7 +5,7 @@
 # you are doing.
 ###################################################
 
-FROM node:18-bullseye as dev
+FROM node:22-bookworm as dev
 RUN apt-get update -y && apt-get upgrade -y && apt-get install -y openssl
 WORKDIR /app
 CMD ["sh", "./bin/docker-start"]

README.md

@@ -66,7 +66,11 @@ To add new feature requests, open a new Issue of the "Feature Request" type.
 
 ### Translation
 
-Make Actual Budget accessible to more people by helping with the [Internationalization](https://actualbudget.org/docs/contributing/i18n/) of Actual. We are using a crowd sourcing tool to manage the translations, see our [Weblate Project](https://hosted.weblate.org/projects/actualbudget/). Weblate proudly supports open-source software projects through their [Libre plan](https://weblate.org/en/hosting/#libre). 
+Make Actual Budget accessible to more people by helping with the [Internationalization](https://actualbudget.org/docs/contributing/i18n/) of Actual. We are using a crowd sourcing tool to manage the translations, see our [Weblate Project](https://hosted.weblate.org/projects/actualbudget/). Weblate proudly supports open-source software projects through their [Libre plan](https://weblate.org/en/hosting/#libre).
+
+<a href="https://hosted.weblate.org/engage/actualbudget/">
+<img src="https://hosted.weblate.org/widget/actualbudget/actual/287x66-grey.png" alt="Translation status" />
+</a>
 
 ## Repo Activity
 

bin/package-browser

@@ -9,10 +9,14 @@ if ! [ -d packages/desktop-client/locale ]; then
     git clone https://github.com/actualbudget/translations packages/desktop-client/locale
 fi
 pushd packages/desktop-client/locale > /dev/null
+git checkout .
 git pull
 popd > /dev/null
 packages/desktop-client/bin/remove-untranslated-languages
 
+export NODE_OPTIONS="--max-old-space-size=4096"
+
+yarn workspace plugins-service build
 yarn workspace loot-core build:browser
 yarn workspace @actual-app/web build:browser
 

bin/package-electron

@@ -6,8 +6,9 @@ RELEASE=""
 CI=${CI:-false}
 
 cd "$ROOT/.."
-
 POSITIONAL=()
+SKIP_EXE_BUILD=false
+SKIP_TRANSLATIONS=false
 while [[ $# -gt 0 ]]; do
   key="$1"
 
@@ -16,52 +17,65 @@ while [[ $# -gt 0 ]]; do
       RELEASE="production"
       shift
       ;;
+      --skip-exe-build)
+      SKIP_EXE_BUILD=true
+      shift
+      ;;
+      --skip-translations)
+      SKIP_TRANSLATIONS=true
+      shift
+      ;;
       *)
       POSITIONAL+=("$1")
       shift
       ;;
   esac
 done
+
 set -- "${POSITIONAL[@]}"
 
-if [ "$OSTYPE" == "msys" ]; then
-    if [ $CI != true ]; then
-        read -s -p "Windows certificate password: " -r CSC_KEY_PASSWORD
-        export CSC_KEY_PASSWORD
-    elif [ -n "$CIRCLE_TAG" ]; then
-        # We only want to run this on CircleCI as Github doesn't have the CSC_KEY_PASSWORD secret set.
-        certutil -f -p ${CSC_KEY_PASSWORD} -importPfx ~/windows-shift-reset-llc.p12
-    fi
+if [ $SKIP_TRANSLATIONS == false ]; then
+  # Get translations
+  echo "Updating translations..."
+  if ! [ -d packages/desktop-client/locale ]; then
+      git clone https://github.com/actualbudget/translations packages/desktop-client/locale
+  fi
+
+  pushd packages/desktop-client/locale > /dev/null
+
+  git pull
+  popd > /dev/null
+  packages/desktop-client/bin/remove-untranslated-languages
 fi
 
+export NODE_OPTIONS="--max-old-space-size=4096"
+
+yarn workspace plugins-service build
 yarn workspace loot-core build:node
-
-# Get translations
-echo "Updating translations..."
-if ! [ -d packages/desktop-client/locale ]; then
-    git clone https://github.com/actualbudget/translations packages/desktop-client/locale
-fi
-pushd packages/desktop-client/locale > /dev/null
-git pull
-popd > /dev/null
-packages/desktop-client/bin/remove-untranslated-languages
-
 yarn workspace @actual-app/web build --mode=desktop # electron specific build
 
+# required for running the sync-server server
+yarn workspace loot-core build:browser
+yarn workspace @actual-app/web build:browser
+yarn workspace @actual-app/sync-server build
+
 yarn workspace desktop-electron update-client
 
 (
     cd packages/desktop-electron;
     yarn clean;
 
-    if [ "$RELEASE" == "production" ]; then
-        if [ -f ../../.secret-tokens ]; then
-            source ../../.secret-tokens
-        fi
-        yarn build
-
-        echo "\nCreated release"
+    if [ $SKIP_EXE_BUILD == true ]; then
+        echo "Building the dist"
+        yarn build:dist
+        echo "Skipping exe build"
     else
-        SKIP_NOTARIZATION=true yarn build
+      if [ "$RELEASE" == "production" ]; then
+          yarn build
+
+          echo "Created release"
+      else
+          yarn build
+      fi
     fi
 )

bin/release-note-generator.ts

@@ -0,0 +1,180 @@
+import { exec } from 'node:child_process';
+import { existsSync, writeFile } from 'node:fs';
+import { exit } from 'node:process';
+
+import prompts from 'prompts';
+
+async function run() {
+  const username = await execAsync(
+    "gh api user --jq '.login'",
+    'To avoid having to enter your username, consider installing the official GitHub CLI (https://github.com/cli/cli) and logging in with `gh auth login`.',
+  );
+  const activePr = await getActivePr(username);
+  if (activePr) {
+    console.log(
+      `Found potentially matching PR ${activePr.number}: ${activePr.title}`,
+    );
+  }
+  const initialPrNumber = activePr?.number ?? (await getNextPrNumber());
+
+  const result = await prompts([
+    {
+      name: 'githubUsername',
+      message: 'Comma-separated GitHub username(s)',
+      type: 'text',
+      initial: username,
+    },
+    {
+      name: 'pullRequestNumber',
+      message: 'PR Number',
+      type: 'number',
+      initial: initialPrNumber,
+    },
+    {
+      name: 'releaseNoteType',
+      message: 'Release Note Type',
+      type: 'select',
+      choices: [
+        { title: '✨ Features', value: 'Features' },
+        { title: '👍 Enhancements', value: 'Enhancements' },
+        { title: '🐛 Bugfix', value: 'Bugfix' },
+        { title: '⚙️  Maintenance', value: 'Maintenance' },
+      ],
+    },
+    {
+      name: 'oneLineSummary',
+      message: 'Brief Summary',
+      type: 'text',
+      initial: activePr?.title,
+    },
+  ]);
+
+  if (
+    !result.githubUsername ||
+    !result.oneLineSummary ||
+    !result.releaseNoteType ||
+    !result.pullRequestNumber
+  ) {
+    console.log('All questions must be answered. Exiting');
+    exit(1);
+  }
+
+  const fileContents = getFileContents(
+    result.releaseNoteType,
+    result.githubUsername,
+    result.oneLineSummary,
+  );
+  const prNumber = result.pullRequestNumber;
+
+  const filepath = `./upcoming-release-notes/${prNumber}.md`;
+  if (existsSync(filepath)) {
+    const { confirm } = await prompts({
+      name: 'confirm',
+      type: 'confirm',
+      message: `This will overwrite the existing release note ${filepath} Are you sure?`,
+    });
+    if (!confirm) {
+      console.log('Exiting');
+      exit(1);
+    }
+  }
+
+  writeFile(filepath, fileContents, err => {
+    if (err) {
+      console.error('Failed to write release note file:', err);
+      exit(1);
+    } else {
+      console.log(`Release note generated successfully: ${filepath}`);
+    }
+  });
+}
+
+// makes an attempt to find an existing open PR from <username>:<branch>
+async function getActivePr(
+  username: string,
+): Promise<{ number: number; title: string } | undefined> {
+  if (!username) {
+    return undefined;
+  }
+  const branchName = await execAsync('git rev-parse --abbrev-ref HEAD');
+  if (!branchName) {
+    return undefined;
+  }
+  const forkHead = `${username}:${branchName}`;
+  return getPrNumberFromHead(forkHead);
+}
+
+async function getPrNumberFromHead(
+  head: string,
+): Promise<{ number: number; title: string } | undefined> {
+  try {
+    // head is a weird query parameter in this API call. If nothing matches, it
+    // will return as if the head query parameter doesn't exist. To get around
+    // this, we make the page size 2 and only return the number if the length.
+    const resp = await fetch(
+      'https://api.github.com/repos/actualbudget/actual/pulls?state=open&per_page=2&head=' +
+        head,
+    );
+    if (!resp.ok) {
+      console.warn('error fetching from github pulls api:', resp.status);
+      return undefined;
+    }
+    const ghResponse = await resp.json();
+    if (ghResponse?.length === 1) {
+      return ghResponse[0];
+    } else {
+      return undefined;
+    }
+  } catch (e) {
+    console.warn('error fetching from github pulls api:', e);
+  }
+}
+
+async function getNextPrNumber(): Promise<number> {
+  try {
+    const resp = await fetch(
+      'https://api.github.com/repos/actualbudget/actual/issues?state=all&per_page=1',
+    );
+    if (!resp.ok) {
+      throw new Error(`API responded with status: ${resp.status}`);
+    }
+    const ghResponse = await resp.json();
+    const latestPrNumber = ghResponse?.[0]?.number;
+    if (!latestPrNumber) {
+      console.error(
+        'Could not find latest issue number in GitHub API response',
+        ghResponse,
+      );
+      exit(1);
+    }
+    return latestPrNumber + 1;
+  } catch (error) {
+    console.error('Failed to fetch next PR number:', error);
+    exit(1);
+  }
+}
+
+function getFileContents(type: string, username: string, summary: string) {
+  return `---
+category: ${type}
+authors: [${username}]
+---
+
+${summary}`;
+}
+
+// simple exec that fails silently and returns an empty string on failure
+async function execAsync(cmd: string, errorLog?: string): Promise<string> {
+  return new Promise<string>(res => {
+    exec(cmd, (error, stdout) => {
+      if (error) {
+        console.log(errorLog);
+        res('');
+      } else {
+        res(stdout.trim());
+      }
+    });
+  });
+}
+
+run();

bin/run-vrt

@@ -28,5 +28,5 @@ echo "Running VRT tests with the following parameters:"
 echo "E2E_START_URL: $E2E_START_URL"
 echo "VRT_ARGS: $VRT_ARGS"
 
-MSYS_NO_PATHCONV=1 docker run --rm --network host -v "$(pwd)":/work/ -w /work/ -it mcr.microsoft.com/playwright:v1.41.1-jammy /bin/bash \
+MSYS_NO_PATHCONV=1 docker run --rm --network host -v "$(pwd)":/work/ -w /work/ -it mcr.microsoft.com/playwright:v1.56.0-jammy /bin/bash \
   -c "E2E_START_URL=$E2E_START_URL yarn vrt $VRT_ARGS"

docker-compose.yml

@@ -15,4 +15,3 @@ services:
     volumes:
       - '.:/app'
     restart: 'no'
-

eslint.config.mjs

@@ -1,841 +0,0 @@
-import path from 'node:path';
-import { fileURLToPath } from 'node:url';
-
-import globals from 'globals';
-
-import pluginImport from 'eslint-plugin-import';
-import pluginJSXA11y from 'eslint-plugin-jsx-a11y';
-import pluginPrettier from 'eslint-plugin-prettier/recommended';
-import pluginReact from 'eslint-plugin-react';
-import pluginReactHooks from 'eslint-plugin-react-hooks';
-import pluginRulesDir from 'eslint-plugin-rulesdir';
-import pluginTypescript from 'typescript-eslint';
-
-import tsParser from '@typescript-eslint/parser';
-
-const __filename = fileURLToPath(import.meta.url);
-const __dirname = path.dirname(__filename);
-
-pluginRulesDir.RULES_DIR = path.join(
-  __dirname,
-  'packages',
-  'eslint-plugin-actual',
-  'lib',
-  'rules',
-);
-
-const confusingBrowserGlobals = [
-  // https://github.com/facebook/create-react-app/tree/main/packages/confusing-browser-globals
-  'addEventListener',
-  'blur',
-  'close',
-  'closed',
-  'confirm',
-  'defaultStatus',
-  'defaultstatus',
-  'event',
-  'external',
-  'find',
-  'focus',
-  'frameElement',
-  'frames',
-  'history',
-  'innerHeight',
-  'innerWidth',
-  'length',
-  'location',
-  'locationbar',
-  'menubar',
-  'moveBy',
-  'moveTo',
-  'name',
-  'onblur',
-  'onerror',
-  'onfocus',
-  'onload',
-  'onresize',
-  'onunload',
-  'open',
-  'opener',
-  'opera',
-  'outerHeight',
-  'outerWidth',
-  'pageXOffset',
-  'pageYOffset',
-  'parent',
-  'print',
-  'removeEventListener',
-  'resizeBy',
-  'resizeTo',
-  'screen',
-  'screenLeft',
-  'screenTop',
-  'screenX',
-  'screenY',
-  'scroll',
-  'scrollbars',
-  'scrollBy',
-  'scrollTo',
-  'scrollX',
-  'scrollY',
-  'status',
-  'statusbar',
-  'stop',
-  'toolbar',
-  'top',
-];
-
-/** @type {import('eslint').Linter.Config[]} */
-export default [
-  {
-    ignores: [
-      'packages/api/app/bundle.api.js',
-      'packages/api/dist',
-      'packages/api/@types',
-      'packages/api/migrations',
-      'packages/crdt/dist',
-      'packages/desktop-client/bundle.browser.js',
-      'packages/desktop-client/build/',
-      'packages/desktop-client/build-electron/',
-      'packages/desktop-client/build-stats/',
-      'packages/desktop-client/public/kcab/',
-      'packages/desktop-client/public/data/',
-      'packages/desktop-client/**/node_modules/*',
-      'packages/desktop-client/node_modules/',
-      'packages/desktop-client/src/icons/**/*',
-      'packages/desktop-client/test-results/',
-      'packages/desktop-client/playwright-report/',
-      'packages/desktop-electron/client-build/',
-      'packages/desktop-electron/build/',
-      'packages/desktop-electron/dist/',
-      'packages/import-ynab4/**/node_modules/*',
-      'packages/import-ynab5/**/node_modules/*',
-      'packages/loot-core/**/node_modules/*',
-      'packages/loot-core/**/lib-dist/*',
-      'packages/loot-core/**/proto/*',
-      '.yarn/*',
-      '.github/*',
-    ],
-  },
-  {
-    linterOptions: {
-      reportUnusedDisableDirectives: true,
-    },
-    languageOptions: {
-      globals: {
-        ...globals.browser,
-        ...globals.commonjs,
-        ...globals.jest,
-        ...globals.node,
-        globalThis: false,
-        vi: true,
-      },
-    },
-    settings: {
-      react: {
-        version: 'detect',
-      },
-
-      'import/resolver': {
-        typescript: {
-          alwaysTryTypes: true,
-        },
-      },
-    },
-  },
-  pluginReact.configs.flat.recommended,
-  pluginReact.configs.flat['jsx-runtime'],
-  pluginPrettier,
-  ...pluginTypescript.configs.recommended,
-  pluginImport.flatConfigs.recommended,
-  {
-    plugins: {
-      'react-hooks': pluginReactHooks,
-      'jsx-a11y': pluginJSXA11y,
-      rulesdir: pluginRulesDir,
-    },
-  },
-  {
-    files: ['**/*.{js,ts,jsx,tsx}'],
-    rules: {
-      // http://eslint.org/docs/rules/
-      'array-callback-return': 'warn',
-
-      'default-case': [
-        'warn',
-        {
-          commentPattern: '^no default$',
-        },
-      ],
-
-      curly: ['warn', 'multi-line', 'consistent'],
-      'dot-location': ['warn', 'property'],
-      eqeqeq: ['warn', 'smart'],
-      'new-parens': 'warn',
-      'no-array-constructor': 'warn',
-      'no-caller': 'warn',
-      'no-cond-assign': ['warn', 'except-parens'],
-      'no-const-assign': 'warn',
-      'no-control-regex': 'warn',
-      'no-delete-var': 'warn',
-      'no-dupe-args': 'warn',
-      'no-dupe-class-members': 'warn',
-      'no-dupe-keys': 'warn',
-      'no-duplicate-case': 'warn',
-      'no-empty-character-class': 'warn',
-      'no-empty-pattern': 'warn',
-      'no-eval': 'warn',
-      'no-ex-assign': 'warn',
-      'no-extend-native': 'warn',
-      'no-extra-bind': 'warn',
-      'no-extra-label': 'warn',
-      'no-fallthrough': 'warn',
-      'no-func-assign': 'warn',
-      'no-implied-eval': 'warn',
-      'no-invalid-regexp': 'warn',
-      'no-iterator': 'warn',
-      'no-label-var': 'warn',
-
-      'no-labels': [
-        'warn',
-        {
-          allowLoop: true,
-          allowSwitch: false,
-        },
-      ],
-
-      'no-lone-blocks': 'warn',
-
-      'no-mixed-operators': [
-        'warn',
-        {
-          groups: [
-            ['&', '|', '^', '~', '<<', '>>', '>>>'],
-            ['==', '!=', '===', '!==', '>', '>=', '<', '<='],
-            ['&&', '||'],
-            ['in', 'instanceof'],
-          ],
-
-          allowSamePrecedence: false,
-        },
-      ],
-
-      'no-multi-str': 'warn',
-      'no-global-assign': 'warn',
-      'no-unsafe-negation': 'warn',
-      'no-new-func': 'warn',
-      'no-new-object': 'warn',
-      'no-new-symbol': 'warn',
-      'no-new-wrappers': 'warn',
-      'no-obj-calls': 'warn',
-      'no-octal': 'warn',
-      'no-octal-escape': 'warn',
-      'no-redeclare': 'warn',
-      'no-regex-spaces': 'warn',
-      'no-script-url': 'warn',
-      'no-self-assign': 'warn',
-      'no-self-compare': 'warn',
-      'no-sequences': 'warn',
-      'no-shadow-restricted-names': 'warn',
-      'no-sparse-arrays': 'warn',
-      'no-template-curly-in-string': 'warn',
-      'no-this-before-super': 'warn',
-      'no-throw-literal': 'warn',
-      'no-undef': 'error',
-      'no-unreachable': 'warn',
-
-      'no-unused-expressions': [
-        'error',
-        {
-          allowShortCircuit: true,
-          allowTernary: true,
-          allowTaggedTemplates: true,
-        },
-      ],
-
-      'no-unused-labels': 'warn',
-
-      'no-use-before-define': [
-        'warn',
-        {
-          functions: false,
-          classes: false,
-          variables: false,
-        },
-      ],
-
-      'no-useless-computed-key': 'warn',
-      'no-useless-concat': 'warn',
-      'no-useless-constructor': 'warn',
-      'no-useless-escape': 'warn',
-
-      'no-useless-rename': [
-        'warn',
-        {
-          ignoreDestructuring: false,
-          ignoreImport: false,
-          ignoreExport: false,
-        },
-      ],
-
-      'no-with': 'warn',
-      'no-whitespace-before-property': 'warn',
-
-      'require-yield': 'warn',
-      'rest-spread-spacing': ['warn', 'never'],
-      strict: ['warn', 'never'],
-      'unicode-bom': ['warn', 'never'],
-      'use-isnan': 'warn',
-      'valid-typeof': 'warn',
-
-      'no-restricted-properties': [
-        'error',
-        {
-          object: 'require',
-          property: 'ensure',
-          message:
-            'Please use import() instead. More info: https://facebook.github.io/create-react-app/docs/code-splitting',
-        },
-        {
-          object: 'System',
-          property: 'import',
-          message:
-            'Please use import() instead. More info: https://facebook.github.io/create-react-app/docs/code-splitting',
-        },
-      ],
-
-      'getter-return': 'warn',
-
-      // https://github.com/benmosher/eslint-plugin-import/tree/master/docs/rules
-      'import/first': 'error',
-      'import/no-amd': 'error',
-      'import/no-anonymous-default-export': 'warn',
-      'import/no-webpack-loader-syntax': 'error',
-      'import/extensions': [
-        'warn',
-        'never',
-        {
-          json: 'always',
-        },
-      ],
-      'import/no-useless-path-segments': 'warn',
-      'import/no-duplicates': [
-        'warn',
-        {
-          'prefer-inline': true,
-        },
-      ],
-      'import/order': [
-        'warn',
-        {
-          alphabetize: {
-            caseInsensitive: true,
-            order: 'asc',
-          },
-
-          groups: ['builtin', 'external', 'parent', 'sibling', 'index'],
-          'newlines-between': 'always',
-
-          pathGroups: [
-            {
-              // Enforce that React (and react-related packages) is the first import
-              group: 'builtin',
-              pattern: 'react?(-*)',
-              position: 'before',
-            },
-            {
-              // Separate imports from Actual from "real" external imports
-              group: 'external',
-              pattern: 'loot-{core,design}/**/*',
-              position: 'after',
-            },
-          ],
-
-          pathGroupsExcludedImportTypes: ['react'],
-        },
-      ],
-
-      // https://github.com/yannickcr/eslint-plugin-react/tree/master/docs/rules
-      'react/forbid-foreign-prop-types': [
-        'warn',
-        {
-          allowInPropTypes: true,
-        },
-      ],
-      'react/jsx-no-comment-textnodes': 'warn',
-      'react/jsx-no-duplicate-props': 'warn',
-      'react/jsx-no-target-blank': 'warn',
-      'react/jsx-no-undef': 'error',
-      'react/jsx-pascal-case': [
-        'warn',
-        {
-          allowAllCaps: true,
-          ignore: [],
-        },
-      ],
-      'react/no-danger-with-children': 'warn',
-      // Disabled because of undesirable warnings
-      // See https://github.com/facebook/create-react-app/issues/5204 for
-      // blockers until its re-enabled
-      // 'react/no-deprecated': 'warn',
-      'react/no-direct-mutation-state': 'warn',
-      'react/no-is-mounted': 'warn',
-      'react/no-typos': 'error',
-      'react/require-render-return': 'error',
-      'react/style-prop-object': 'warn',
-      'react/jsx-no-useless-fragment': 'warn',
-      'react/self-closing-comp': 'warn',
-      'react/jsx-filename-extension': [
-        'warn',
-        {
-          extensions: ['.jsx', '.tsx'],
-          allow: 'as-needed',
-        },
-      ],
-      'react/no-unstable-nested-components': [
-        'warn',
-        {
-          allowAsProps: true,
-          customValidators: ['formatter'],
-        },
-      ],
-      // Don't need this as we're using TypeScript
-      'react/prop-types': 'off',
-
-      // https://github.com/evcohen/eslint-plugin-jsx-a11y/tree/master/docs/rules
-      'jsx-a11y/alt-text': 'warn',
-      'jsx-a11y/anchor-has-content': 'warn',
-      'jsx-a11y/anchor-is-valid': [
-        'warn',
-        {
-          aspects: ['noHref', 'invalidHref'],
-        },
-      ],
-      'jsx-a11y/aria-activedescendant-has-tabindex': 'warn',
-      'jsx-a11y/aria-props': 'warn',
-      'jsx-a11y/aria-proptypes': 'warn',
-      'jsx-a11y/aria-role': [
-        'warn',
-        {
-          ignoreNonDOM: true,
-        },
-      ],
-      'jsx-a11y/aria-unsupported-elements': 'warn',
-      'jsx-a11y/heading-has-content': 'warn',
-      'jsx-a11y/iframe-has-title': 'warn',
-      'jsx-a11y/img-redundant-alt': 'warn',
-      'jsx-a11y/no-access-key': 'warn',
-      'jsx-a11y/no-distracting-elements': 'warn',
-      'jsx-a11y/no-redundant-roles': 'warn',
-      'jsx-a11y/role-has-required-aria-props': 'warn',
-      'jsx-a11y/role-supports-aria-props': 'warn',
-      'jsx-a11y/scope': 'warn',
-
-      // https://github.com/facebook/react/tree/main/packages/eslint-plugin-react-hooks
-      'react-hooks/rules-of-hooks': 'error',
-      'react-hooks/exhaustive-deps': [
-        'warn',
-        {
-          additionalHooks: '(useQuery)',
-        },
-      ],
-
-      'rulesdir/typography': 'warn',
-      'rulesdir/prefer-if-statement': 'warn',
-
-      // Note: base rule explicitly disabled in favor of the TS one
-      'no-unused-vars': 'off',
-      '@typescript-eslint/no-unused-vars': [
-        'warn',
-        {
-          varsIgnorePattern: '^(_|React)',
-          ignoreRestSiblings: true,
-          caughtErrors: 'none',
-        },
-      ],
-
-      'no-restricted-globals': ['warn', ...confusingBrowserGlobals],
-
-      // https://github.com/eslint/eslint/issues/16954
-      // https://github.com/eslint/eslint/issues/16953
-      'no-loop-func': 'off',
-
-      // TODO: re-enable these rules
-      'react/react-in-jsx-scope': 'off',
-      'no-var': 'warn',
-      'react/jsx-curly-brace-presence': 'warn',
-      'object-shorthand': ['warn', 'properties'],
-
-      'no-restricted-syntax': [
-        'warn',
-        {
-          // forbid React.* as they are legacy https://twitter.com/dan_abramov/status/1308739731551858689
-          selector:
-            ":matches(MemberExpression[object.name='React'], TSQualifiedName[left.name='React'])",
-          message:
-            'Using default React import is discouraged, please use named exports directly instead.',
-        },
-        {
-          // forbid <a> in favor of <Link>
-          selector: 'JSXOpeningElement[name.name="a"]',
-          message: 'Using <a> is discouraged, please use <Link> instead.',
-        },
-      ],
-
-      'no-restricted-imports': [
-        'warn',
-        {
-          patterns: [
-            {
-              group: ['*.api', '*.web', '*.electron'],
-              message: "Don't directly reference imports from other platforms",
-            },
-            {
-              group: ['uuid'],
-              importNames: ['*'],
-              message: "Use `import { v4 as uuidv4 } from 'uuid'` instead",
-            },
-            {
-              group: ['**/style', '**/colors'],
-              importNames: ['colors'],
-              message: 'Please use themes instead of colors',
-            },
-          ],
-        },
-      ],
-
-      '@typescript-eslint/ban-ts-comment': [
-        'error',
-        {
-          'ts-ignore': 'allow-with-description',
-        },
-      ],
-
-      // Rules disabled during TS migration
-      '@typescript-eslint/no-var-requires': 'off',
-      'prefer-const': 'warn',
-      'prefer-spread': 'off',
-      '@typescript-eslint/no-empty-function': 'off',
-      '@typescript-eslint/no-require-imports': 'off',
-      'import/no-default-export': 'warn',
-    },
-  },
-  {
-    files: ['**/*.ts?(x)'],
-
-    languageOptions: {
-      parser: tsParser,
-      ecmaVersion: 2018,
-      sourceType: 'module',
-
-      parserOptions: {
-        project: [path.join(__dirname, './tsconfig.json')],
-        ecmaFeatures: {
-          jsx: true,
-        },
-
-        // typescript-eslint specific options
-        warnOnUnsupportedTypeScriptVersion: true,
-      },
-    },
-
-    // If adding a typescript-eslint version of an existing ESLint rule,
-    // make sure to disable the ESLint rule here.
-    rules: {
-      // TypeScript's `noFallthroughCasesInSwitch` option is more robust (#6906)
-      'default-case': 'off',
-      // 'tsc' already handles this (https://github.com/typescript-eslint/typescript-eslint/issues/291)
-      'no-dupe-class-members': 'off',
-      // 'tsc' already handles this (https://github.com/typescript-eslint/typescript-eslint/issues/477)
-      'no-undef': 'off',
-
-      // Add TypeScript specific rules (and turn off ESLint equivalents)
-      '@typescript-eslint/consistent-type-assertions': 'warn',
-      'no-array-constructor': 'off',
-      '@typescript-eslint/no-array-constructor': 'warn',
-      'no-redeclare': 'off',
-      '@typescript-eslint/no-redeclare': 'warn',
-      'no-use-before-define': 'off',
-
-      '@typescript-eslint/no-use-before-define': [
-        'warn',
-        {
-          functions: false,
-          classes: false,
-          variables: false,
-          typedefs: false,
-        },
-      ],
-
-      'no-unused-expressions': 'off',
-
-      '@typescript-eslint/no-unused-expressions': [
-        'error',
-        {
-          allowShortCircuit: true,
-          allowTernary: true,
-          allowTaggedTemplates: true,
-        },
-      ],
-
-      'no-useless-constructor': 'off',
-      '@typescript-eslint/no-useless-constructor': 'warn',
-    },
-  },
-  {
-    files: [
-      'packages/desktop-client/**/*.{ts,tsx}',
-      'packages/loot-core/src/client/**/*.{ts,tsx}',
-    ],
-    rules: {
-      // enforce import type
-      '@typescript-eslint/consistent-type-imports': [
-        'warn',
-        {
-          prefer: 'type-imports',
-          fixStyle: 'inline-type-imports',
-        },
-      ],
-
-      '@typescript-eslint/no-restricted-types': [
-        'warn',
-        {
-          types: {
-            // forbid FC as superflous
-            FunctionComponent: {
-              message:
-                'Type the props argument and let TS infer or use ComponentType for a component prop',
-            },
-
-            FC: {
-              message:
-                'Type the props argument and let TS infer or use ComponentType for a component prop',
-            },
-          },
-        },
-      ],
-    },
-  },
-  {
-    files: ['packages/desktop-client/**/*'],
-    ignores: ['packages/desktop-client/src/hooks/useNavigate.{ts,tsx}'],
-
-    rules: {
-      'no-restricted-imports': [
-        'warn',
-        {
-          paths: [
-            {
-              name: 'react-router-dom',
-              importNames: ['useNavigate'],
-              message:
-                "Please import Actual's useNavigate() hook from `src/hooks` instead.",
-            },
-          ],
-        },
-      ],
-    },
-  },
-  {
-    files: ['packages/desktop-client/**/*', 'packages/loot-core/**/*'],
-    ignores: ['packages/desktop-client/src/redux/index.{ts,tsx}'],
-
-    rules: {
-      'no-restricted-imports': [
-        'warn',
-        {
-          paths: [
-            {
-              name: 'react-redux',
-              importNames: ['useDispatch'],
-              message:
-                "Please import Actual's useDispatch() hook from `src/redux` instead.",
-            },
-            {
-              name: 'react-redux',
-              importNames: ['useSelector'],
-              message:
-                "Please import Actual's useSelector() hook from `src/redux` instead.",
-            },
-            {
-              name: 'react-redux',
-              importNames: ['useStore'],
-              message:
-                "Please import Actual's useStore() hook from `src/redux` instead.",
-            },
-          ],
-        },
-      ],
-    },
-  },
-  {
-    files: ['packages/loot-core/src/**/*'],
-    rules: {
-      'no-restricted-imports': [
-        'warn',
-        {
-          patterns: [
-            {
-              group: ['*.api', '*.web', '*.electron'],
-              message: "Don't directly reference imports from other platforms",
-            },
-            {
-              group: ['uuid'],
-              importNames: ['*'],
-              message: "Use `import { v4 as uuidv4 } from 'uuid'` instead",
-            },
-            {
-              group: ['loot-core/**'],
-              message:
-                'Please use relative imports in loot-core instead of importing from `loot-core/*`',
-            },
-            {
-              group: ['@actual-app/web/*'],
-              message: 'Please do not import `@actual-app/web` in `loot-core`',
-            },
-          ],
-        },
-      ],
-    },
-  },
-  {
-    files: [
-      'packages/loot-core/src/types/**/*',
-      'packages/loot-core/src/client/state-types/**/*',
-      '**/icons/**/*',
-      '**/{mocks,__mocks__}/**/*',
-      // can't correctly resolve usages
-      '**/*.{testing,electron,browser,web,api}.ts',
-    ],
-
-    rules: {
-      'import/no-unused-modules': 'off',
-    },
-  },
-  {
-    files: [
-      'packages/desktop-client/src/style/index.*',
-      'packages/desktop-client/src/style/palette.*',
-    ],
-
-    rules: {
-      'no-restricted-imports': [
-        'off',
-        {
-          patterns: [
-            {
-              group: ['**/style', '**/colors'],
-              importNames: ['colors'],
-              message: 'Please use themes instead of colors',
-            },
-          ],
-        },
-      ],
-    },
-  },
-  {
-    files: ['packages/api/migrations/*', 'packages/loot-core/migrations/*'],
-
-    rules: {
-      'import/no-default-export': 'off',
-    },
-  },
-  {
-    files: ['packages/api/index.ts'],
-    rules: {
-      'import/no-unresolved': 'off',
-    },
-  },
-  {},
-  {
-    // TODO: fix the issues in these files
-    files: [
-      'packages/desktop-client/src/components/accounts/Account.jsx',
-      'packages/desktop-client/src/components/accounts/MobileAccount.jsx',
-      'packages/desktop-client/src/components/accounts/MobileAccounts.jsx',
-      'packages/desktop-client/src/components/budget/BudgetCategories.jsx',
-      'packages/desktop-client/src/components/budget/BudgetSummaries.tsx',
-      'packages/desktop-client/src/components/budget/DynamicBudgetTable.tsx',
-      'packages/desktop-client/src/components/budget/index.tsx',
-      'packages/desktop-client/src/components/budget/MobileBudget.tsx',
-      'packages/desktop-client/src/components/budget/envelope/HoldMenu.tsx',
-      'packages/desktop-client/src/components/budget/envelope/TransferMenu.tsx',
-      'packages/component-library/src/Menu.tsx',
-      'packages/desktop-client/src/components/FinancesApp.tsx',
-      'packages/desktop-client/src/components/GlobalKeys.ts',
-      'packages/desktop-client/src/components/LoggedInUser.tsx',
-      'packages/desktop-client/src/components/manager/ManagementApp.jsx',
-      'packages/desktop-client/src/components/manager/subscribe/common.tsx',
-      'packages/desktop-client/src/components/ManageRules.tsx',
-      'packages/desktop-client/src/components/mobile/MobileAmountInput.jsx',
-      'packages/desktop-client/src/components/mobile/MobileNavTabs.tsx',
-      'packages/desktop-client/src/components/Modals.tsx',
-      'packages/desktop-client/src/components/modals/EditRule.jsx',
-      'packages/desktop-client/src/components/modals/ImportTransactions.jsx',
-      'packages/desktop-client/src/components/modals/MergeUnusedPayees.jsx',
-      'packages/desktop-client/src/components/Notifications.tsx',
-      'packages/desktop-client/src/components/payees/ManagePayees.jsx',
-      'packages/desktop-client/src/components/payees/ManagePayeesWithData.jsx',
-      'packages/desktop-client/src/components/payees/PayeeTable.tsx',
-      'packages/desktop-client/src/components/reports/graphs/tableGraph/ReportTable.tsx',
-      'packages/desktop-client/src/components/reports/graphs/tableGraph/ReportTableTotals.tsx',
-      'packages/desktop-client/src/components/reports/reports/CashFlowCard.jsx',
-      'packages/desktop-client/src/components/reports/reports/CustomReport.jsx',
-      'packages/desktop-client/src/components/reports/reports/NetWorthCard.jsx',
-      'packages/desktop-client/src/components/reports/SaveReportName.tsx',
-      'packages/desktop-client/src/components/reports/useReport.ts',
-      'packages/desktop-client/src/components/schedules/ScheduleDetails.jsx',
-      'packages/desktop-client/src/components/schedules/SchedulesTable.tsx',
-      'packages/desktop-client/src/components/select/DateSelect.tsx',
-      'packages/desktop-client/src/components/sidebar/Tools.tsx',
-      'packages/desktop-client/src/components/sort.tsx',
-      'packages/desktop-client/src/components/spreadsheet/useSheetValue.ts',
-    ],
-
-    rules: {
-      'react-hooks/exhaustive-deps': 'off',
-    },
-  },
-  {
-    files: [
-      'eslint.config.mjs',
-      '**/*.test.js',
-      '**/*.test.ts',
-      '**/*.test.jsx',
-      '**/*.test.tsx',
-      '**/*.spec.js',
-    ],
-
-    rules: {
-      'rulesdir/typography': 'off',
-    },
-  },
-  {
-    files: [
-      'packages/desktop-client/**/*.{ts,tsx}',
-      'packages/loot-core/src/client/**/*.{ts,tsx}',
-    ],
-    ignores: ['**/**/globals.d.ts'],
-    rules: {
-      // enforce type over interface
-      '@typescript-eslint/consistent-type-definitions': ['warn', 'type'],
-    },
-  },
-  {
-    files: ['packages/sync-server/**/*'],
-    // TODO: fix the issues in these files
-    rules: {
-      'import/extensions': 'off',
-      'rulesdir/typography': 'off',
-    },
-  },
-  {
-    files: ['packages/sync-server/src/app-gocardless/banks/*.js'],
-    rules: {
-      'import/no-anonymous-default-export': 'off',
-      'import/no-default-export': 'off',
-      // can be re-enabled after https://github.com/actualbudget/actual/pull/4253
-      '@typescript-eslint/no-unused-vars': 'off',
-    },
-  },
-];

lage.config.js

@@ -0,0 +1,30 @@
+/** @type {import('lage').ConfigOptions} */
+module.exports = {
+  pipeline: {
+    test: {
+      type: 'npmScript',
+      options: {
+        outputGlob: [
+          'coverage/**',
+          '**/test-results/**',
+          '**/playwright-report/**',
+        ],
+      },
+    },
+    build: {
+      type: 'npmScript',
+      cache: true,
+      options: {
+        outputGlob: ['lib-dist/**', 'dist/**', 'build/**'],
+      },
+    },
+  },
+  cacheOptions: {
+    cacheStorageConfig: {
+      provider: 'local',
+      outputGlob: ['lib-dist/**', 'dist/**', 'build/**'],
+    },
+  },
+  npmClient: 'yarn',
+  concurrency: 2,
+};

package.json

@@ -7,11 +7,11 @@
   "bugs": {
     "url": "https://github.com/actualbudget/actual/issues/"
   },
+  "license": "MIT",
   "repository": {
     "type": "git",
     "url": "git@github.com:actualbudget/actual.git"
   },
-  "license": "MIT",
   "workspaces": {
     "packages": [
       "packages/*"
@@ -22,67 +22,86 @@
     "start:server": "yarn workspace @actual-app/sync-server start",
     "start:server-monitor": "yarn workspace @actual-app/sync-server start-monitor",
     "start:server-dev": "NODE_ENV=development BROWSER_OPEN=localhost:5006 yarn npm-run-all --parallel 'start:server-monitor' 'start'",
-    "start:desktop": "yarn rebuild-electron && npm-run-all --parallel 'start:desktop-*'",
+    "start:desktop": "yarn desktop-dependencies && npm-run-all --parallel 'start:desktop-*'",
+    "start:docs": "yarn workspace docs start",
+    "desktop-dependencies": "npm-run-all --parallel rebuild-electron build:browser-backend build:plugins-service",
     "start:desktop-node": "yarn workspace loot-core watch:node",
     "start:desktop-client": "yarn workspace @actual-app/web watch",
+    "start:desktop-server-client": "yarn workspace @actual-app/web build:browser",
     "start:desktop-electron": "yarn workspace desktop-electron watch",
-    "start:electron": "yarn start:desktop",
-    "start:browser": "npm-run-all --parallel 'start:browser-*'",
+    "start:browser": "yarn workspace plugins-service build-dev && npm-run-all --parallel 'start:browser-*'",
+    "start:service-plugins": "yarn workspace plugins-service watch",
     "start:browser-backend": "yarn workspace loot-core watch:browser",
     "start:browser-frontend": "yarn workspace @actual-app/web start:browser",
+    "build:browser-backend": "yarn workspace loot-core build:browser",
+    "build:server": "yarn build:browser && yarn workspace @actual-app/sync-server build",
     "build:browser": "./bin/package-browser",
     "build:desktop": "./bin/package-electron",
+    "build:plugins-service": "yarn workspace plugins-service build",
     "build:api": "yarn workspace @actual-app/api build",
+    "build:docs": "yarn workspace docs build",
+    "deploy:docs": "yarn workspace docs deploy",
     "generate:i18n": "yarn workspace @actual-app/web generate:i18n",
-    "test": "yarn workspaces foreach --all --parallel --verbose run test",
-    "test:debug": "yarn workspaces foreach --all --verbose run test",
-    "e2e": "yarn workspaces foreach --all --parallel --verbose run e2e",
-    "vrt": "yarn workspaces foreach --all --parallel --verbose run vrt",
+    "generate:release-notes": "ts-node ./bin/release-note-generator.ts",
+    "test": "lage test --continue",
+    "test:debug": "lage test --no-cache --continue",
+    "e2e": "yarn workspace @actual-app/web run e2e",
+    "e2e:desktop": "yarn build:desktop --skip-exe-build --skip-translations && yarn workspace desktop-electron e2e",
+    "playwright": "yarn workspace @actual-app/web run playwright",
+    "vrt": "yarn workspace @actual-app/web run vrt",
     "vrt:docker": "./bin/run-vrt",
-    "rebuild-electron": "./node_modules/.bin/electron-rebuild -f -m ./packages/loot-core",
+    "rebuild-electron": "./node_modules/.bin/electron-rebuild -m ./packages/loot-core",
     "rebuild-node": "yarn workspace loot-core rebuild",
-    "lint": "eslint . --max-warnings 0",
-    "lint:verbose": "DEBUG=eslint:cli-engine eslint . --max-warnings 0",
+    "lint": "oxfmt --check . && oxlint --deny-warnings",
+    "lint:fix": "oxfmt . && oxlint --deny-warnings --fix",
     "install:server": "yarn workspaces focus @actual-app/sync-server --production",
-    "typecheck": "yarn tsc && tsc-strict",
+    "typecheck": "yarn tsc --incremental && tsc-strict",
     "jq": "./node_modules/node-jq/bin/jq",
     "prepare": "husky"
   },
   "devDependencies": {
-    "@typescript-eslint/parser": "^8.18.1",
-    "cross-env": "^7.0.3",
-    "eslint": "^9.17.0",
-    "eslint-config-prettier": "^9.1.0",
-    "eslint-import-resolver-typescript": "^3.7.0",
-    "eslint-plugin-import": "^2.31.0",
-    "eslint-plugin-jsx-a11y": "^6.10.2",
-    "eslint-plugin-prettier": "5.2.1",
-    "eslint-plugin-react": "^7.37.2",
-    "eslint-plugin-react-hooks": "^5.1.0",
-    "eslint-plugin-rulesdir": "^0.2.2",
-    "globals": "^15.13.0",
-    "husky": "^9.0.11",
-    "lint-staged": "^15.2.9",
-    "node-jq": "^4.0.1",
+    "@octokit/rest": "^22.0.1",
+    "@types/node": "^22.19.1",
+    "@types/prompts": "^2.4.9",
+    "cross-env": "^10.1.0",
+    "eslint": "^9.39.2",
+    "eslint-plugin-perfectionist": "^4.15.1",
+    "eslint-plugin-typescript-paths": "^0.0.33",
+    "html-to-image": "^1.11.13",
+    "husky": "^9.1.7",
+    "lage": "^2.14.15",
+    "lint-staged": "^16.2.7",
+    "minimatch": "^10.1.1",
+    "node-jq": "^6.3.1",
     "npm-run-all": "^4.1.5",
-    "prettier": "^3.4.2",
+    "oxfmt": "^0.22.0",
+    "oxlint": "^1.37.0",
+    "p-limit": "^7.2.0",
+    "prompts": "^2.4.2",
     "source-map-support": "^0.5.21",
-    "typescript": "^5.5.4",
-    "typescript-eslint": "^8.18.1",
+    "ts-node": "^10.9.2",
+    "typescript": "^5.9.3",
     "typescript-strict-plugin": "^2.4.4"
   },
   "resolutions": {
-    "rollup": "4.9.4"
-  },
-  "engines": {
-    "node": ">=18.0.0"
+    "rollup": "4.40.1",
+    "socks": ">=2.8.3"
   },
   "lint-staged": {
-    "*.{js,jsx,ts,tsx,md,json}": "prettier --write"
+    "*.{js,mjs,jsx,ts,tsx,md,json,yml,yaml}": [
+      "oxfmt --no-error-on-unmatched-pattern"
+    ],
+    "*.{js,mjs,jsx,ts,tsx}": [
+      "oxlint --deny-warnings --fix"
+    ]
   },
-  "packageManager": "yarn@4.3.1",
   "browserslist": [
-    "electron 24.0",
+    "electron >= 35.0",
     "defaults"
-  ]
+  ],
+  "engines": {
+    "node": ">=22",
+    "yarn": "^4.9.1"
+  },
+  "packageManager": "yarn@4.10.3"
 }

packages/api/__snapshots__/methods.test.ts.snap

@@ -1,7 +1,7 @@
-// Jest Snapshot v1, https://goo.gl/fbAQLP
+// Vitest Snapshot v1, https://vitest.dev/guide/snapshot.html
 
-exports[`API setup and teardown successfully loads budget 1`] = `
-Array [
+exports[`API setup and teardown > successfully loads budget 1`] = `
+[
   "2016-10",
   "2016-11",
   "2016-12",

packages/api/app/query.js

@@ -97,6 +97,14 @@ class Query {
   serialize() {
     return this.state;
   }
+
+  reset() {
+    return q(this.state.table);
+  }
+
+  serializeAsString() {
+    return JSON.stringify(this.serialize());
+  }
 }
 
 export function q(table) {

packages/api/index.ts

@@ -7,7 +7,6 @@ import type {
 import type { InitConfig } from 'loot-core/server/main';
 
 // @ts-ignore: bundle not available until we build it
-// eslint-disable-next-line import/extensions
 import * as bundle from './app/bundle.api.js';
 import * as injected from './injected';
 import { validateNodeVersion } from './validateNodeVersion';
@@ -42,7 +41,11 @@ export async function init(config: InitConfig = {}) {
 
 export async function shutdown() {
   if (actualApp) {
-    await actualApp.send('sync');
+    try {
+      await actualApp.send('sync');
+    } catch {
+      // most likely that no budget is loaded, so the sync failed
+    }
     await actualApp.send('close-budget');
     actualApp = null;
   }

packages/api/jest.config.js

@@ -1,24 +0,0 @@
-module.exports = {
-  moduleFileExtensions: [
-    'testing.js',
-    'testing.ts',
-    'api.js',
-    'api.ts',
-    'api.tsx',
-    'electron.js',
-    'electron.ts',
-    'mjs',
-    'js',
-    'ts',
-    'tsx',
-    'json',
-  ],
-  testEnvironment: 'node',
-  testPathIgnorePatterns: ['/node_modules/'],
-  watchPathIgnorePatterns: ['<rootDir>/mocks/budgets/'],
-  setupFilesAfterEnv: ['<rootDir>/../loot-core/src/mocks/setup.ts'],
-  transformIgnorePatterns: ['/node_modules/'],
-  transform: {
-    '^.+\\.(t|j)sx?$': '@swc/jest',
-  },
-};

packages/api/methods.test.ts

@@ -1,15 +1,15 @@
-// @ts-strict-ignore
 import * as fs from 'fs/promises';
 import * as path from 'path';
 
+import { type RuleEntity } from 'loot-core/types/models';
+
 import * as api from './index';
 
 const budgetName = 'test-budget';
 
-beforeEach(async () => {
-  // we need real datetime if we are going to mix new timestamps with our mock data
-  global.restoreDateNow();
+global.IS_TESTING = true;
 
+beforeEach(async () => {
   const budgetPath = path.join(__dirname, '/mocks/budgets/', budgetName);
   await fs.rm(budgetPath, { force: true, recursive: true });
 
@@ -283,7 +283,7 @@ describe('API CRUD operations', () => {
     expect(await api.getAccountBalance(accountId2)).toEqual(0);
 
     await api.updateAccount(accountId1, { offbudget: false });
-    await api.closeAccount(accountId1, accountId2, null);
+    await api.closeAccount(accountId1, accountId2);
     await api.deleteAccount(accountId2);
 
     // accounts successfully updated, and one of them deleted
@@ -506,7 +506,7 @@ describe('API CRUD operations', () => {
       ...rule,
       stage: 'post',
       conditionsOp: 'or',
-    };
+    } satisfies RuleEntity;
     expect(await api.updateRule(updatedRule)).toEqual(updatedRule);
 
     expect(await api.getRules()).toEqual(
@@ -569,8 +569,20 @@ describe('API CRUD operations', () => {
     const accountId = await api.createAccount({ name: 'test-account' }, 0);
 
     let newTransaction = [
-      { date: '2023-11-03', imported_id: '11', amount: 100, notes: 'notes' },
-      { date: '2023-11-03', imported_id: '12', amount: 100, notes: '' },
+      {
+        account: accountId,
+        date: '2023-11-03',
+        imported_id: '11',
+        amount: 100,
+        notes: 'notes',
+      },
+      {
+        account: accountId,
+        date: '2023-11-03',
+        imported_id: '12',
+        amount: 100,
+        notes: '',
+      },
     ];
 
     const addResult = await api.addTransactions(accountId, newTransaction, {
@@ -598,9 +610,27 @@ describe('API CRUD operations', () => {
     expect(transactions).toHaveLength(2);
 
     newTransaction = [
-      { date: '2023-12-03', imported_id: '11', amount: 100, notes: 'notes' },
-      { date: '2023-12-03', imported_id: '12', amount: 100, notes: 'notes' },
-      { date: '2023-12-03', imported_id: '22', amount: 200, notes: '' },
+      {
+        account: accountId,
+        date: '2023-12-03',
+        imported_id: '11',
+        amount: 100,
+        notes: 'notes',
+      },
+      {
+        account: accountId,
+        date: '2023-12-03',
+        imported_id: '12',
+        amount: 100,
+        notes: 'notes',
+      },
+      {
+        account: accountId,
+        date: '2023-12-03',
+        imported_id: '22',
+        amount: 200,
+        notes: '',
+      },
     ];
 
     const reconciled = await api.importTransactions(accountId, newTransaction);
@@ -654,4 +684,179 @@ describe('API CRUD operations', () => {
     );
     expect(transactions).toHaveLength(1);
   });
+
+  test('Transactions: import notes are preserved when importing', async () => {
+    const accountId = await api.createAccount({ name: 'test-account' }, 0);
+
+    // Test with notes
+    const transactionsWithNotes = [
+      {
+        date: '2023-11-03',
+        imported_id: '11',
+        amount: 100,
+        notes: 'test note',
+      },
+    ];
+
+    const addResultWithNotes = await api.addTransactions(
+      accountId,
+      transactionsWithNotes,
+      {
+        learnCategories: true,
+        runTransfers: true,
+      },
+    );
+    expect(addResultWithNotes).toBe('ok');
+
+    let transactions = await api.getTransactions(
+      accountId,
+      '2023-11-01',
+      '2023-11-30',
+    );
+    expect(transactions[0].notes).toBe('test note');
+
+    // Clear transactions
+    await api.deleteTransaction(transactions[0].id);
+
+    // Test without notes
+    const transactionsWithoutNotes = [
+      { date: '2023-11-03', imported_id: '11', amount: 100 },
+    ];
+
+    const addResultWithoutNotes = await api.addTransactions(
+      accountId,
+      transactionsWithoutNotes,
+      {
+        learnCategories: true,
+        runTransfers: true,
+      },
+    );
+    expect(addResultWithoutNotes).toBe('ok');
+
+    transactions = await api.getTransactions(
+      accountId,
+      '2023-11-01',
+      '2023-11-30',
+    );
+    expect(transactions[0].notes).toBeNull();
+  });
+});
+
+//apis: createSchedule, getSchedules, updateSchedule, deleteSchedule
+test('Schedules: successfully complete schedules operations', async () => {
+  await api.loadBudget(budgetName);
+  //test a schedule with a recuring configuration
+  const ScheduleId1 = await api.createSchedule({
+    name: 'test-schedule 1',
+    posts_transaction: true,
+    //    amount: -5000,
+    amountOp: 'is',
+    date: {
+      frequency: 'monthly',
+      interval: 1,
+      start: '2025-06-13',
+      patterns: [],
+      skipWeekend: false,
+      weekendSolveMode: 'after',
+      endMode: 'never',
+    },
+  });
+  //test the creation of non recurring schedule
+  const ScheduleId2 = await api.createSchedule({
+    name: 'test-schedule 2',
+    posts_transaction: false,
+    amount: 4000,
+    amountOp: 'is',
+    date: '2025-06-13',
+  });
+  let schedules = await api.getSchedules();
+
+  // Schedules successfully created
+  expect(schedules).toEqual(
+    expect.arrayContaining([
+      expect.objectContaining({
+        name: 'test-schedule 1',
+        posts_transaction: true,
+        //       amount: -5000,
+        amountOp: 'is',
+        date: {
+          frequency: 'monthly',
+          interval: 1,
+          start: '2025-06-13',
+          patterns: [],
+          skipWeekend: false,
+          weekendSolveMode: 'after',
+          endMode: 'never',
+        },
+      }),
+      expect.objectContaining({
+        name: 'test-schedule 2',
+        posts_transaction: false,
+        amount: 4000,
+        amountOp: 'is',
+        date: '2025-06-13',
+      }),
+    ]),
+  );
+  //check getIDByName works on schedules
+  expect(await api.getIDByName('schedules', 'test-schedule 1')).toEqual(
+    ScheduleId1,
+  );
+  expect(await api.getIDByName('schedules', 'test-schedule 2')).toEqual(
+    ScheduleId2,
+  );
+
+  //check getIDByName works on accounts
+  const schedAccountId1 = await api.createAccount(
+    { name: 'sched-test-account1', offbudget: true },
+    1000,
+  );
+
+  expect(await api.getIDByName('accounts', 'sched-test-account1')).toEqual(
+    schedAccountId1,
+  );
+
+  //check getIDByName works on payees
+  const schedPayeeId1 = await api.createPayee({ name: 'sched-test-payee1' });
+
+  expect(await api.getIDByName('payees', 'sched-test-payee1')).toEqual(
+    schedPayeeId1,
+  );
+  await api.updateSchedule(ScheduleId1, {
+    amount: -10000,
+    account: schedAccountId1,
+  });
+  await api.deleteSchedule(ScheduleId2);
+
+  // schedules successfully updated, and one of them deleted
+  await api.updateSchedule(ScheduleId1, {
+    amount: -10000,
+    account: schedAccountId1,
+    payee: schedPayeeId1,
+  });
+  await api.deleteSchedule(ScheduleId2);
+
+  schedules = await api.getSchedules();
+  expect(schedules).toEqual(
+    expect.arrayContaining([
+      expect.objectContaining({
+        id: ScheduleId1,
+        posts_transaction: true,
+        amount: -10000,
+        account: schedAccountId1,
+        payee: schedPayeeId1,
+        amountOp: 'is',
+        date: {
+          frequency: 'monthly',
+          interval: 1,
+          start: '2025-06-13',
+          patterns: [],
+          skipWeekend: false,
+          weekendSolveMode: 'after',
+          endMode: 'never',
+        },
+      }),
+      expect.not.objectContaining({ id: ScheduleId2 }),
+    ]),
+  );
 });

packages/api/methods.ts

@@ -1,5 +1,18 @@
-// @ts-strict-ignore
+import type {
+  APIAccountEntity,
+  APICategoryEntity,
+  APICategoryGroupEntity,
+  APIFileEntity,
+  APIPayeeEntity,
+  APIScheduleEntity,
+} from 'loot-core/server/api-models';
+import type { Query } from 'loot-core/shared/query';
 import type { Handlers } from 'loot-core/types/handlers';
+import type {
+  ImportTransactionEntity,
+  RuleEntity,
+  TransactionEntity,
+} from 'loot-core/types/models';
 
 import * as injected from './injected';
 
@@ -12,8 +25,11 @@ function send<K extends keyof Handlers, T extends Handlers[K]>(
   return injected.send(name, args);
 }
 
-export async function runImport(name, func) {
-  await send('api/start-import', { budgetName: name });
+export async function runImport(
+  budgetName: APIFileEntity['name'],
+  func: () => Promise<void>,
+) {
+  await send('api/start-import', { budgetName });
   try {
     await func();
   } catch (e) {
@@ -23,11 +39,14 @@ export async function runImport(name, func) {
   await send('api/finish-import');
 }
 
-export async function loadBudget(budgetId) {
+export async function loadBudget(budgetId: string) {
   return send('api/load-budget', { id: budgetId });
 }
 
-export async function downloadBudget(syncId, { password }: { password? } = {}) {
+export async function downloadBudget(
+  syncId: string,
+  { password }: { password?: string } = {},
+) {
   return send('api/download-budget', { syncId, password });
 }
 
@@ -39,11 +58,13 @@ export async function sync() {
   return send('api/sync');
 }
 
-export async function runBankSync(args?: { accountId: string }) {
+export async function runBankSync(args?: {
+  accountId: APIAccountEntity['id'];
+}) {
   return send('api/bank-sync', args);
 }
 
-export async function batchBudgetUpdates(func) {
+export async function batchBudgetUpdates(func: () => Promise<void>) {
   await send('api/batch-budget-start');
   try {
     await func();
@@ -52,7 +73,15 @@ export async function batchBudgetUpdates(func) {
   }
 }
 
-export function runQuery(query) {
+/**
+ * @deprecated Please use `aqlQuery` instead.
+ * This function will be removed in a future release.
+ */
+export function runQuery(query: Query) {
+  return send('api/query', { query: query.serialize() });
+}
+
+export function aqlQuery(query: Query) {
   return send('api/query', { query: query.serialize() });
 }
 
@@ -60,22 +89,33 @@ export function getBudgetMonths() {
   return send('api/budget-months');
 }
 
-export function getBudgetMonth(month) {
+export function getBudgetMonth(month: string) {
   return send('api/budget-month', { month });
 }
 
-export function setBudgetAmount(month, categoryId, value) {
+export function setBudgetAmount(
+  month: string,
+  categoryId: APICategoryEntity['id'],
+  value: number,
+) {
   return send('api/budget-set-amount', { month, categoryId, amount: value });
 }
 
-export function setBudgetCarryover(month, categoryId, flag) {
+export function setBudgetCarryover(
+  month: string,
+  categoryId: APICategoryEntity['id'],
+  flag: boolean,
+) {
   return send('api/budget-set-carryover', { month, categoryId, flag });
 }
 
 export function addTransactions(
-  accountId,
-  transactions,
-  { learnCategories = false, runTransfers = false } = {},
+  accountId: APIAccountEntity['id'],
+  transactions: Omit<ImportTransactionEntity, 'account'>[],
+  {
+    learnCategories = false,
+    runTransfers = false,
+  }: { learnCategories?: boolean; runTransfers?: boolean } = {},
 ) {
   return send('api/transactions-add', {
     accountId,
@@ -85,33 +125,43 @@ export function addTransactions(
   });
 }
 
-export interface ImportTransactionsOpts {
+export type ImportTransactionsOpts = {
   defaultCleared?: boolean;
-}
+  dryRun?: boolean;
+};
 
 export function importTransactions(
-  accountId,
-  transactions,
+  accountId: APIAccountEntity['id'],
+  transactions: ImportTransactionEntity[],
   opts: ImportTransactionsOpts = {
     defaultCleared: true,
+    dryRun: false,
   },
 ) {
   return send('api/transactions-import', {
     accountId,
     transactions,
+    isPreview: opts.dryRun,
     opts,
   });
 }
 
-export function getTransactions(accountId, startDate, endDate) {
+export function getTransactions(
+  accountId: APIAccountEntity['id'],
+  startDate: string,
+  endDate: string,
+) {
   return send('api/transactions-get', { accountId, startDate, endDate });
 }
 
-export function updateTransaction(id, fields) {
+export function updateTransaction(
+  id: TransactionEntity['id'],
+  fields: Partial<TransactionEntity>,
+) {
   return send('api/transaction-update', { id, fields });
 }
 
-export function deleteTransaction(id) {
+export function deleteTransaction(id: TransactionEntity['id']) {
   return send('api/transaction-delete', { id });
 }
 
@@ -119,15 +169,25 @@ export function getAccounts() {
   return send('api/accounts-get');
 }
 
-export function createAccount(account, initialBalance?) {
+export function createAccount(
+  account: Omit<APIAccountEntity, 'id'>,
+  initialBalance?: number,
+) {
   return send('api/account-create', { account, initialBalance });
 }
 
-export function updateAccount(id, fields) {
+export function updateAccount(
+  id: APIAccountEntity['id'],
+  fields: Partial<APIAccountEntity>,
+) {
   return send('api/account-update', { id, fields });
 }
 
-export function closeAccount(id, transferAccountId?, transferCategoryId?) {
+export function closeAccount(
+  id: APIAccountEntity['id'],
+  transferAccountId?: APIAccountEntity['id'],
+  transferCategoryId?: APICategoryEntity['id'],
+) {
   return send('api/account-close', {
     id,
     transferAccountId,
@@ -135,15 +195,15 @@ export function closeAccount(id, transferAccountId?, transferCategoryId?) {
   });
 }
 
-export function reopenAccount(id) {
+export function reopenAccount(id: APIAccountEntity['id']) {
   return send('api/account-reopen', { id });
 }
 
-export function deleteAccount(id) {
+export function deleteAccount(id: APIAccountEntity['id']) {
   return send('api/account-delete', { id });
 }
 
-export function getAccountBalance(id, cutoff?) {
+export function getAccountBalance(id: APIAccountEntity['id'], cutoff?: Date) {
   return send('api/account-balance', { id, cutoff });
 }
 
@@ -151,15 +211,21 @@ export function getCategoryGroups() {
   return send('api/category-groups-get');
 }
 
-export function createCategoryGroup(group) {
+export function createCategoryGroup(group: Omit<APICategoryGroupEntity, 'id'>) {
   return send('api/category-group-create', { group });
 }
 
-export function updateCategoryGroup(id, fields) {
+export function updateCategoryGroup(
+  id: APICategoryGroupEntity['id'],
+  fields: Partial<APICategoryGroupEntity>,
+) {
   return send('api/category-group-update', { id, fields });
 }
 
-export function deleteCategoryGroup(id, transferCategoryId?) {
+export function deleteCategoryGroup(
+  id: APICategoryGroupEntity['id'],
+  transferCategoryId?: APICategoryEntity['id'],
+) {
   return send('api/category-group-delete', { id, transferCategoryId });
 }
 
@@ -167,15 +233,21 @@ export function getCategories() {
   return send('api/categories-get', { grouped: false });
 }
 
-export function createCategory(category) {
+export function createCategory(category: Omit<APICategoryEntity, 'id'>) {
   return send('api/category-create', { category });
 }
 
-export function updateCategory(id, fields) {
+export function updateCategory(
+  id: APICategoryEntity['id'],
+  fields: Partial<APICategoryEntity>,
+) {
   return send('api/category-update', { id, fields });
 }
 
-export function deleteCategory(id, transferCategoryId?) {
+export function deleteCategory(
+  id: APICategoryEntity['id'],
+  transferCategoryId?: APICategoryEntity['id'],
+) {
   return send('api/category-delete', { id, transferCategoryId });
 }
 
@@ -187,19 +259,25 @@ export function getPayees() {
   return send('api/payees-get');
 }
 
-export function createPayee(payee) {
+export function createPayee(payee: Omit<APIPayeeEntity, 'id'>) {
   return send('api/payee-create', { payee });
 }
 
-export function updatePayee(id, fields) {
+export function updatePayee(
+  id: APIPayeeEntity['id'],
+  fields: Partial<APIPayeeEntity>,
+) {
   return send('api/payee-update', { id, fields });
 }
 
-export function deletePayee(id) {
+export function deletePayee(id: APIPayeeEntity['id']) {
   return send('api/payee-delete', { id });
 }
 
-export function mergePayees(targetId, mergeIds) {
+export function mergePayees(
+  targetId: APIPayeeEntity['id'],
+  mergeIds: APIPayeeEntity['id'][],
+) {
   return send('api/payees-merge', { targetId, mergeIds });
 }
 
@@ -207,26 +285,61 @@ export function getRules() {
   return send('api/rules-get');
 }
 
-export function getPayeeRules(id) {
+export function getPayeeRules(id: RuleEntity['id']) {
   return send('api/payee-rules-get', { id });
 }
 
-export function createRule(rule) {
+export function createRule(rule: Omit<RuleEntity, 'id'>) {
   return send('api/rule-create', { rule });
 }
 
-export function updateRule(rule) {
+export function updateRule(rule: RuleEntity) {
   return send('api/rule-update', { rule });
 }
 
-export function deleteRule(id: string) {
+export function deleteRule(id: RuleEntity['id']) {
   return send('api/rule-delete', id);
 }
 
-export function holdBudgetForNextMonth(month, amount) {
+export function holdBudgetForNextMonth(month: string, amount: number) {
   return send('api/budget-hold-for-next-month', { month, amount });
 }
 
-export function resetBudgetHold(month) {
+export function resetBudgetHold(month: string) {
   return send('api/budget-reset-hold', { month });
 }
+
+export function createSchedule(schedule: Omit<APIScheduleEntity, 'id'>) {
+  return send('api/schedule-create', schedule);
+}
+
+export function updateSchedule(
+  id: APIScheduleEntity['id'],
+  fields: Partial<APIScheduleEntity>,
+  resetNextDate?: boolean,
+) {
+  return send('api/schedule-update', {
+    id,
+    fields,
+    resetNextDate,
+  });
+}
+
+export function deleteSchedule(scheduleId: APIScheduleEntity['id']) {
+  return send('api/schedule-delete', scheduleId);
+}
+
+export function getSchedules() {
+  return send('api/schedules-get');
+}
+
+export function getIDByName(
+  type: 'accounts' | 'schedules' | 'categories' | 'payees',
+  name: string,
+) {
+  return send('api/get-id-by-name', { type, name });
+}
+
+export function getServerVersion() {
+  return send('api/get-server-version');
+}

packages/api/package.json

@@ -1,40 +1,37 @@
 {
   "name": "@actual-app/api",
-  "version": "25.3.1",
-  "license": "MIT",
+  "version": "26.1.0",
   "description": "An API for Actual",
-  "engines": {
-    "node": ">=18.12.0"
-  },
+  "license": "MIT",
+  "files": [
+    "@types",
+    "dist"
+  ],
   "main": "dist/index.js",
   "types": "@types/index.d.ts",
-  "files": [
-    "dist",
-    "@types"
-  ],
   "scripts": {
     "build:app": "yarn workspace loot-core build:api",
+    "build:crdt": "yarn workspace @actual-app/crdt build",
     "build:node": "tsc --p tsconfig.dist.json && tsc-alias -p tsconfig.dist.json",
     "build:migrations": "cp migrations/*.sql dist/migrations",
     "build:default-db": "cp default-db.sqlite dist/",
     "build": "yarn run clean && yarn run build:app && yarn run build:node && yarn run build:migrations && yarn run build:default-db",
-    "test": "yarn run build:app && jest -c jest.config.js",
+    "test": "yarn run clean && yarn run build:app && yarn run build:crdt && vitest --run",
     "clean": "rm -rf dist @types"
   },
   "dependencies": {
     "@actual-app/crdt": "workspace:^",
-    "better-sqlite3": "^11.7.0",
-    "compare-versions": "^6.1.0",
+    "better-sqlite3": "^12.4.1",
+    "compare-versions": "^6.1.1",
     "node-fetch": "^3.3.2",
-    "uuid": "^9.0.1"
+    "uuid": "^13.0.0"
   },
   "devDependencies": {
-    "@swc/core": "^1.5.3",
-    "@swc/jest": "^0.2.36",
-    "@types/jest": "^27.5.2",
-    "@types/uuid": "^9.0.2",
-    "jest": "^27.5.1",
-    "tsc-alias": "^1.8.8",
-    "typescript": "^5.5.4"
+    "tsc-alias": "^1.8.16",
+    "typescript": "^5.9.3",
+    "vitest": "^4.0.9"
+  },
+  "engines": {
+    "node": ">=20"
   }
 }

packages/api/tsconfig.dist.json

@@ -1,7 +1,7 @@
 {
   "extends": "../../tsconfig.json",
   "compilerOptions": {
-    // Using ES2021 because that’s the newest version where
+    // Using ES2021 because that's the newest version where
     // the latest Node 16.x release supports all of the features
     "target": "ES2021",
     "module": "CommonJS",
@@ -11,9 +11,9 @@
     "outDir": "dist",
     "declarationDir": "@types",
     "paths": {
-      "loot-core/*": ["./@types/loot-core/*"]
+      "loot-core/*": ["./@types/loot-core/src/*"]
     }
   },
   "include": ["."],
-  "exclude": ["**/node_modules/*", "dist", "@types"]
+  "exclude": ["**/node_modules/*", "dist", "@types", "*.test.ts"]
 }

packages/api/utils.js

@@ -1,7 +0,0 @@
-export function amountToInteger(n) {
-  return Math.round(n * 100);
-}
-
-export function integerToAmount(n) {
-  return parseFloat((n / 100).toFixed(2));
-}

packages/api/utils.ts

@@ -0,0 +1,5 @@
+// @ts-ignore: bundle not available until we build it
+import * as bundle from './app/bundle.api.js';
+
+export const amountToInteger = bundle.lib.amountToInteger;
+export const integerToAmount = bundle.lib.integerToAmount;

packages/api/vitest.config.ts

@@ -0,0 +1,10 @@
+export default {
+  test: {
+    globals: true,
+    onConsoleLog(log: string, type: 'stdout' | 'stderr'): boolean | void {
+      // print only console.error
+      return type === 'stderr';
+    },
+    maxWorkers: 2,
+  },
+};

packages/ci-actions/bin/bundle-stats-comment.mjs

@@ -0,0 +1,678 @@
+#!/usr/bin/env node
+
+/**
+ * Generates a combined bundle stats comment for GitHub Actions.
+ * Heavily inspired by https://github.com/twk3/rollup-size-compare-action (MIT).
+ */
+
+import { readFile } from 'node:fs/promises';
+import path from 'node:path';
+import process from 'node:process';
+
+const REQUIRED_ARGS = new Map([
+  ['base', 'Mapping of bundle names to base stats JSON'],
+  ['head', 'Mapping of bundle names to head stats JSON'],
+]);
+
+function parseRawArgs(argv) {
+  const args = new Map();
+
+  for (let index = 2; index < argv.length; index += 1) {
+    const key = argv[index];
+
+    if (!key?.startsWith('--')) {
+      throw new Error(
+        `Unexpected argument "${key ?? ''}". Use --key value pairs.`,
+      );
+    }
+
+    const values = [];
+
+    while (index + 1 < argv.length && !argv[index + 1].startsWith('--')) {
+      values.push(argv[index + 1]);
+      index += 1;
+    }
+
+    if (values.length === 0) {
+      throw new Error(`Missing value for argument "${key}".`);
+    }
+
+    const keyName = key.slice(2);
+    // Accumulate values if the key already exists
+    if (args.has(keyName)) {
+      args.set(keyName, [...args.get(keyName), ...values]);
+    } else {
+      args.set(keyName, values);
+    }
+  }
+
+  return args;
+}
+
+function getSingleValue(args, key) {
+  const values = args.get(key);
+  if (!values) {
+    return undefined;
+  }
+  if (values.length !== 1) {
+    throw new Error(`Argument "--${key}" must have exactly one value.`);
+  }
+  return values[0];
+}
+
+function parseMapping(values, key, description) {
+  if (!values || values.length === 0) {
+    throw new Error(`Missing required argument "--${key}" (${description}).`);
+  }
+
+  if (values.length === 1) {
+    const [rawValue] = values;
+    const trimmed = rawValue.trim();
+
+    if (trimmed.startsWith('{')) {
+      try {
+        const parsed = JSON.parse(trimmed);
+
+        if (!parsed || typeof parsed !== 'object' || Array.isArray(parsed)) {
+          throw new Error('Value must be a JSON object.');
+        }
+
+        return new Map(
+          Object.entries(parsed).map(([name, pathValue]) => {
+            if (typeof pathValue !== 'string') {
+              throw new Error(
+                `Value for "${name}" in "--${key}" must be a string path.`,
+              );
+            }
+            return [name, pathValue];
+          }),
+        );
+      } catch (error) {
+        const message =
+          error instanceof Error ? error.message : 'Unknown parsing error';
+        throw new Error(
+          `Failed to parse "--${key}" value as JSON object: ${message}`,
+        );
+      }
+    }
+  }
+
+  const entries = new Map();
+
+  for (const value of values) {
+    const [rawName, ...rawPathParts] = value.split('=');
+
+    if (!rawName || rawPathParts.length === 0) {
+      throw new Error(
+        `Argument "--${key}" must be provided as name=path pairs or a JSON object.`,
+      );
+    }
+
+    const name = rawName.trim();
+    const pathValue = rawPathParts.join('=').trim();
+
+    if (!name) {
+      throw new Error(`Argument "--${key}" contains an empty bundle name.`);
+    }
+
+    if (!pathValue) {
+      throw new Error(
+        `Argument "--${key}" for bundle "${name}" must include a non-empty path.`,
+      );
+    }
+
+    entries.set(name, pathValue);
+  }
+
+  if (entries.size === 0) {
+    throw new Error(`Argument "--${key}" must define at least one bundle.`);
+  }
+
+  return entries;
+}
+
+function parseArgs(argv) {
+  const args = parseRawArgs(argv);
+
+  const baseMap = parseMapping(
+    args.get('base'),
+    'base',
+    REQUIRED_ARGS.get('base'),
+  );
+  const headMap = parseMapping(
+    args.get('head'),
+    'head',
+    REQUIRED_ARGS.get('head'),
+  );
+
+  const sections = [];
+
+  for (const [name, basePath] of baseMap.entries()) {
+    const headPath = headMap.get(name);
+
+    if (!headPath) {
+      throw new Error(
+        `Bundle "${name}" is missing a corresponding "--head" entry.`,
+      );
+    }
+
+    sections.push({
+      name,
+      basePath,
+      headPath,
+    });
+  }
+
+  for (const name of headMap.keys()) {
+    if (!baseMap.has(name)) {
+      throw new Error(
+        `Bundle "${name}" is missing a corresponding "--base" entry.`,
+      );
+    }
+  }
+
+  return {
+    sections,
+    identifier: getSingleValue(args, 'identifier') ?? 'bundle-stats',
+  };
+}
+
+async function loadStats(filePath) {
+  try {
+    const absolutePath = path.resolve(process.cwd(), filePath);
+    const fileContents = await readFile(absolutePath, 'utf8');
+    const parsed = JSON.parse(fileContents);
+
+    // Validate that we got a meaningful stats object
+    if (!parsed || typeof parsed !== 'object') {
+      throw new Error('Stats file does not contain a valid JSON object');
+    }
+
+    return parsed;
+  } catch (error) {
+    const message =
+      error instanceof Error
+        ? error.message
+        : 'Unknown error while parsing stats file';
+    console.error(`[bundle-stats] Failed to parse "${filePath}": ${message}`);
+    throw new Error(`Failed to load stats file "${filePath}": ${message}`);
+  }
+}
+
+function findAllChildren(node = {}) {
+  if (Array.isArray(node.children)) {
+    return node.children.flatMap(findAllChildren);
+  }
+  return [node];
+}
+
+function trimPath(input) {
+  if (!input) {
+    return '';
+  }
+  return input.replace(/.*node_modules/, '/node_modules');
+}
+
+function assetNameToSizeMap(statAssets = {}) {
+  const children = statAssets?.tree?.children;
+
+  if (!Array.isArray(children) || children.length === 0) {
+    return new Map();
+  }
+
+  return new Map(
+    children.map(asset => {
+      const descendants = findAllChildren(asset);
+      let size = 0;
+      let gzipSize = statAssets?.options?.gzip ? 0 : null;
+
+      for (const mod of descendants) {
+        const nodePart = statAssets?.nodeParts?.[mod.uid];
+
+        if (!nodePart) {
+          continue;
+        }
+
+        size += nodePart.renderedLength ?? 0;
+
+        if (gzipSize !== null) {
+          gzipSize += nodePart.gzipLength ?? 0;
+        }
+      }
+
+      return [trimPath(asset.name), { size, gzipSize }];
+    }),
+  );
+}
+
+function chunkModuleNameToSizeMap(statChunks = {}) {
+  if (!statChunks?.tree) {
+    return new Map();
+  }
+
+  return new Map(
+    findAllChildren(statChunks.tree).map(mod => {
+      const modInfo = statChunks?.nodeParts?.[mod.uid] ?? {};
+      const meta = statChunks?.nodeMetas?.[modInfo.metaUid] ?? {};
+      const id = trimPath(meta.id ?? '');
+
+      return [
+        id,
+        {
+          size: modInfo.renderedLength ?? 0,
+          gzipSize: statChunks?.options?.gzip
+            ? (modInfo.gzipLength ?? 0)
+            : null,
+        },
+      ];
+    }),
+  );
+}
+
+function sortDiffDescending(items) {
+  return items.sort((a, b) => Math.abs(b.diff) - Math.abs(a.diff));
+}
+
+function normaliseGzip(value) {
+  if (value == null || Number.isNaN(value)) {
+    return NaN;
+  }
+  return value;
+}
+
+function getAssetDiff(name, oldSize, newSize) {
+  const diff = newSize.size - oldSize.size;
+
+  const percent =
+    oldSize.size === 0
+      ? newSize.size === 0
+        ? 0
+        : Infinity
+      : +((1 - newSize.size / oldSize.size) * -100).toFixed(5) || 0;
+
+  return {
+    name,
+    new: {
+      size: newSize.size,
+      gzipSize: normaliseGzip(newSize.gzipSize),
+    },
+    old: {
+      size: oldSize.size,
+      gzipSize: normaliseGzip(oldSize.gzipSize),
+    },
+    diff,
+    diffPercentage: percent,
+  };
+}
+
+function webpackStatsDiff(oldAssets, newAssets) {
+  const added = [];
+  const removed = [];
+  const bigger = [];
+  const smaller = [];
+  const unchanged = [];
+
+  let newSizeTotal = 0;
+  let oldSizeTotal = 0;
+  let newGzipSizeTotal = 0;
+  let oldGzipSizeTotal = 0;
+
+  for (const [name, oldAssetSizes] of oldAssets) {
+    oldSizeTotal += oldAssetSizes.size;
+    oldGzipSizeTotal += oldAssetSizes.gzipSize ?? NaN;
+
+    const newAsset = newAssets.get(name);
+
+    if (!newAsset) {
+      removed.push(getAssetDiff(name, oldAssetSizes, { size: 0, gzipSize: 0 }));
+      continue;
+    }
+
+    const diff = getAssetDiff(name, oldAssetSizes, newAsset);
+
+    if (diff.diffPercentage > 0) {
+      bigger.push(diff);
+    } else if (diff.diffPercentage < 0) {
+      smaller.push(diff);
+    } else {
+      unchanged.push(diff);
+    }
+  }
+
+  for (const [name, newAssetSizes] of newAssets) {
+    newSizeTotal += newAssetSizes.size;
+    newGzipSizeTotal += newAssetSizes.gzipSize ?? NaN;
+
+    if (!oldAssets.has(name)) {
+      added.push(getAssetDiff(name, { size: 0, gzipSize: 0 }, newAssetSizes));
+    }
+  }
+
+  const oldFilesCount = oldAssets.size;
+  const newFilesCount = newAssets.size;
+
+  return {
+    added: sortDiffDescending(added),
+    removed: sortDiffDescending(removed),
+    bigger: sortDiffDescending(bigger),
+    smaller: sortDiffDescending(smaller),
+    unchanged,
+    total: getAssetDiff(
+      oldFilesCount === newFilesCount
+        ? `${newFilesCount}`
+        : `${oldFilesCount} → ${newFilesCount}`,
+      { size: oldSizeTotal, gzipSize: oldGzipSizeTotal },
+      { size: newSizeTotal, gzipSize: newGzipSizeTotal },
+    ),
+  };
+}
+
+function getStatsDiff(oldStats, newStats) {
+  return webpackStatsDiff(
+    assetNameToSizeMap(oldStats),
+    assetNameToSizeMap(newStats),
+  );
+}
+
+function getChunkModuleDiff(oldStats, newStats) {
+  const diff = webpackStatsDiff(
+    chunkModuleNameToSizeMap(oldStats),
+    chunkModuleNameToSizeMap(newStats),
+  );
+
+  if (
+    diff.added.length === 0 &&
+    diff.removed.length === 0 &&
+    diff.bigger.length === 0 &&
+    diff.smaller.length === 0
+  ) {
+    return null;
+  }
+
+  return diff;
+}
+
+const BYTES_PER_KILOBYTE = 1024;
+const FILE_SIZE_DENOMINATIONS = [
+  'B',
+  'kB',
+  'MB',
+  'GB',
+  'TB',
+  'PB',
+  'EB',
+  'ZB',
+  'YB',
+  'BB',
+];
+
+function formatFileSizeIEC(bytes, precision = 2) {
+  if (bytes == null || Number.isNaN(bytes)) {
+    return 'N/A';
+  }
+
+  if (bytes === 0) {
+    return `0 ${FILE_SIZE_DENOMINATIONS[0]}`;
+  }
+
+  const absBytes = Math.abs(bytes);
+  const denominationIndex = Math.floor(
+    Math.log(absBytes) / Math.log(BYTES_PER_KILOBYTE),
+  );
+  const value = absBytes / Math.pow(BYTES_PER_KILOBYTE, denominationIndex);
+  const stripped = parseFloat(value.toFixed(precision));
+
+  return `${stripped} ${FILE_SIZE_DENOMINATIONS[denominationIndex]}`;
+}
+
+function conditionalPercentage(number) {
+  if (number === Infinity || number === -Infinity) {
+    return '-';
+  }
+
+  const absValue = Math.abs(number);
+
+  if (absValue === 0 || absValue === 100) {
+    return `${number}%`;
+  }
+
+  const value = Number.isFinite(absValue) ? absValue.toFixed(2) : absValue;
+  return `${signFor(number)}${value}%`;
+}
+
+function capitalize(text) {
+  if (!text) return '';
+  return `${text[0].toUpperCase()}${text.slice(1)}`;
+}
+
+function makeHeader(columns) {
+  const header = columns.join(' | ');
+  const separator = columns
+    .map(column =>
+      Array.from({ length: column.length })
+        .map(() => '-')
+        .join(''),
+    )
+    .join(' | ');
+
+  return `${header}\n${separator}`;
+}
+
+const TOTAL_HEADERS = makeHeader([
+  'Files count',
+  'Total bundle size',
+  '% Changed',
+]);
+const TABLE_HEADERS = makeHeader(['Asset', 'File Size', '% Changed']);
+const CHUNK_TABLE_HEADERS = makeHeader(['File', 'Δ', 'Size']);
+
+function signFor(num) {
+  if (num === 0) return '';
+  return num > 0 ? '+' : '-';
+}
+
+function toFileSizeDiff(oldSize, newSize, diff) {
+  const diffLine = [
+    `${formatFileSizeIEC(oldSize)} → ${formatFileSizeIEC(newSize)}`,
+  ];
+
+  if (typeof diff !== 'undefined') {
+    diffLine.push(`(${signFor(diff)}${formatFileSizeIEC(diff)})`);
+  }
+
+  return diffLine.join(' ');
+}
+
+function toFileSizeDiffCell(asset) {
+  const lines = [];
+
+  if (asset.diff === 0) {
+    lines.push(formatFileSizeIEC(asset.new.size));
+
+    if (asset.new.gzipSize) {
+      lines.push(formatFileSizeIEC(asset.new.gzipSize));
+    }
+  } else {
+    lines.push(toFileSizeDiff(asset.old.size, asset.new.size, asset.diff));
+
+    if (asset.old.gzipSize || asset.new.gzipSize) {
+      lines.push(
+        `${toFileSizeDiff(asset.old.gzipSize, asset.new.gzipSize)} (gzip)`,
+      );
+    }
+  }
+
+  return lines.join('<br />');
+}
+
+function printAssetTableRow(asset) {
+  return [
+    asset.name,
+    toFileSizeDiffCell(asset),
+    conditionalPercentage(asset.diffPercentage),
+  ].join(' | ');
+}
+
+function printAssetTablesByGroup(statsDiff) {
+  const statsFields = ['added', 'removed', 'bigger', 'smaller', 'unchanged'];
+
+  return statsFields
+    .map(field => {
+      const assets = statsDiff[field] ?? [];
+
+      if (assets.length === 0) {
+        return `**${capitalize(field)}**\nNo assets were ${field}`;
+      }
+
+      return `**${capitalize(field)}**\n${TABLE_HEADERS}\n${assets
+        .map(asset => printAssetTableRow(asset))
+        .join('\n')}`;
+    })
+    .join('\n\n');
+}
+
+function getDiffEmoji(diff) {
+  if (diff.diffPercentage === Infinity) return '🆕';
+  if (diff.diffPercentage <= -100) return '🔥';
+  if (diff.diffPercentage > 0) return '📈';
+  if (diff.diffPercentage < 0) return '📉';
+  return ' ';
+}
+
+function getTrimmedChunkName(chunkModule) {
+  const chunkName = chunkModule.name ?? '';
+  if (chunkName.startsWith('./')) {
+    return chunkName.substring(2);
+  }
+  if (chunkName.startsWith('/')) {
+    return chunkName.substring(1);
+  }
+  return chunkName;
+}
+
+function printChunkModuleRow(chunkModule) {
+  const emoji = getDiffEmoji(chunkModule);
+  const chunkName = getTrimmedChunkName(chunkModule);
+  const diffPart = `${chunkModule.diff >= 0 ? '+' : '-'}${formatFileSizeIEC(chunkModule.diff)}`;
+  const percentPart = Number.isFinite(chunkModule.diffPercentage)
+    ? ` (${conditionalPercentage(chunkModule.diffPercentage)})`
+    : '';
+
+  return [
+    `\`${chunkName}\``,
+    `${emoji} ${diffPart}${percentPart}`,
+    `${formatFileSizeIEC(chunkModule.old.size)} → ${formatFileSizeIEC(chunkModule.new.size)}`,
+  ].join(' | ');
+}
+
+function printChunkModulesTable(statsDiff) {
+  if (!statsDiff) {
+    return '';
+  }
+
+  const changedModules = [
+    ...(statsDiff.added ?? []),
+    ...(statsDiff.removed ?? []),
+    ...(statsDiff.bigger ?? []),
+    ...(statsDiff.smaller ?? []),
+  ].sort((a, b) => b.diffPercentage - a.diffPercentage);
+
+  if (changedModules.length === 0) {
+    return `<details>\n<summary>Changeset</summary>\nNo files were changed\n</details>`;
+  }
+
+  const rows = changedModules
+    .slice(0, 100)
+    .map(chunkModule => printChunkModuleRow(chunkModule))
+    .join('\n');
+
+  const summarySuffix =
+    changedModules.length > 100 ? ' (largest 100 files by percent change)' : '';
+
+  return `<details>\n<summary>Changeset${summarySuffix}</summary>\n\n${CHUNK_TABLE_HEADERS}\n${rows}\n</details>`;
+}
+
+function printTotalAssetTable(statsDiff) {
+  return `**Total**\n${TOTAL_HEADERS}\n${printAssetTableRow(statsDiff.total)}`;
+}
+
+function renderSection(title, statsDiff, chunkModuleDiff) {
+  const { total, ...groups } = statsDiff;
+  const parts = [`#### ${title}`, '', printTotalAssetTable({ total })];
+
+  const chunkTable = printChunkModulesTable(chunkModuleDiff);
+  if (chunkTable) {
+    parts.push('', chunkTable);
+  }
+
+  parts.push(
+    '',
+    `<details>\n<summary>View detailed bundle breakdown</summary>\n<div>\n\n${printAssetTablesByGroup(
+      groups,
+    )}\n</div>\n</details>`,
+  );
+
+  return parts.join('\n');
+}
+
+async function main() {
+  const args = parseArgs(process.argv);
+
+  console.error(
+    `[bundle-stats] Found ${args.sections.length} sections to process`,
+  );
+  args.sections.forEach((section, index) => {
+    console.error(
+      `[bundle-stats] Section ${index + 1}: ${section.name} (base: ${section.basePath}, head: ${section.headPath})`,
+    );
+  });
+
+  const sections = [];
+
+  for (const section of args.sections) {
+    console.error(`[bundle-stats] Processing section: ${section.name}`);
+    console.error(
+      `[bundle-stats] Loading base stats from: ${section.basePath}`,
+    );
+    const baseStats = await loadStats(section.basePath);
+    console.error(
+      `[bundle-stats] Loading head stats from: ${section.headPath}`,
+    );
+    const headStats = await loadStats(section.headPath);
+
+    const statsDiff = getStatsDiff(baseStats, headStats);
+    const chunkDiff = getChunkModuleDiff(baseStats, headStats);
+
+    console.error(
+      `[bundle-stats] Section ${section.name}: ${statsDiff.total.name} files, total size ${statsDiff.total.old.size} → ${statsDiff.total.new.size}`,
+    );
+
+    sections.push({
+      name: section.name,
+      statsDiff,
+      chunkDiff,
+    });
+  }
+
+  const identifier = `<!--- bundlestats-action-comment key:${args.identifier} --->`;
+
+  const comment = [
+    '### Bundle Stats',
+    '',
+    sections
+      .map(section =>
+        renderSection(section.name, section.statsDiff, section.chunkDiff),
+      )
+      .join('\n\n---\n\n'),
+    '',
+    identifier,
+    '',
+  ].join('\n');
+
+  process.stdout.write(comment);
+}
+
+main().catch(error => {
+  console.error(error);
+  process.exitCode = 1;
+});

packages/ci-actions/bin/get-next-package-version.js

@@ -0,0 +1,72 @@
+#!/usr/bin/env node
+
+// This script is used in GitHub Actions to get the next version based on the current package.json version.
+// It supports three types of versioning: nightly, hotfix, and monthly.
+
+import fs from 'node:fs';
+import { parseArgs } from 'node:util';
+
+import { getNextVersion } from '../src/versions/get-next-package-version.js';
+
+const args = process.argv;
+
+const options = {
+  'package-json': {
+    type: 'string',
+    short: 'p',
+  },
+  type: {
+    type: 'string', // nightly, hotfix, monthly, auto
+    short: 't',
+  },
+  update: {
+    type: 'boolean',
+    short: 'u',
+    default: false,
+  },
+};
+
+const { values } = parseArgs({
+  args,
+  options,
+  allowPositionals: true,
+});
+
+if (!values['package-json']) {
+  console.error(
+    'Please specify the path to package.json using --package-json or -p option.',
+  );
+  process.exit(1);
+}
+
+try {
+  const packageJsonPath = values['package-json'];
+  const packageJson = JSON.parse(fs.readFileSync(packageJsonPath, 'utf8'));
+  const currentVersion = packageJson.version;
+
+  let newVersion;
+  try {
+    newVersion = getNextVersion({
+      currentVersion,
+      type: values.type,
+      currentDate: new Date(),
+    });
+  } catch (e) {
+    console.error(e.message);
+    process.exit(1);
+  }
+
+  process.stdout.write(newVersion);
+
+  if (values.update) {
+    packageJson.version = newVersion;
+    fs.writeFileSync(
+      packageJsonPath,
+      JSON.stringify(packageJson, null, 2) + '\n',
+      'utf8',
+    );
+  }
+} catch (error) {
+  console.error('Error:', error.message);
+  process.exit(1);
+}

packages/ci-actions/bin/update-bundle-stats-comment.mjs

@@ -0,0 +1,151 @@
+#!/usr/bin/env node
+
+/**
+ * Updates (or creates) a bundle stats comment on a pull request.
+ * Requires the following environment variables to be set:
+ *  - GITHUB_TOKEN
+ *  - GITHUB_REPOSITORY (owner/repo)
+ *  - PR_NUMBER
+ */
+
+import { readFile } from 'node:fs/promises';
+import path from 'node:path';
+import process from 'node:process';
+
+import { Octokit } from '@octokit/rest';
+
+function parseArgs(argv) {
+  const args = {
+    commentFile: null,
+    identifier: null,
+  };
+
+  for (let i = 2; i < argv.length; i += 2) {
+    const key = argv[i];
+    const value = argv[i + 1];
+
+    if (!key?.startsWith('--')) {
+      throw new Error(
+        `Unexpected argument "${key ?? ''}". Use --key value pairs.`,
+      );
+    }
+
+    if (typeof value === 'undefined') {
+      throw new Error(`Missing value for argument "${key}".`);
+    }
+
+    switch (key) {
+      case '--comment-file':
+        args.commentFile = value;
+        break;
+      case '--identifier':
+        args.identifier = value;
+        break;
+      default:
+        throw new Error(`Unknown argument "${key}".`);
+    }
+  }
+
+  if (!args.commentFile) {
+    throw new Error('Missing required argument "--comment-file".');
+  }
+
+  if (!args.identifier) {
+    throw new Error('Missing required argument "--identifier".');
+  }
+
+  return args;
+}
+
+async function loadCommentBody(commentFile) {
+  const absolutePath = path.resolve(process.cwd(), commentFile);
+  return readFile(absolutePath, 'utf8');
+}
+
+function getRepoInfo() {
+  const repository = process.env.GITHUB_REPOSITORY;
+  if (!repository) {
+    throw new Error('GITHUB_REPOSITORY environment variable is required.');
+  }
+
+  const [owner, repo] = repository.split('/');
+  if (!owner || !repo) {
+    throw new Error(`Invalid GITHUB_REPOSITORY value "${repository}".`);
+  }
+
+  return { owner, repo };
+}
+
+function getPullRequestNumber() {
+  const rawNumber = process.env.PR_NUMBER ?? '';
+  const prNumber = Number.parseInt(rawNumber, 10);
+
+  if (!Number.isInteger(prNumber) || prNumber <= 0) {
+    throw new Error(
+      'PR_NUMBER environment variable must be a positive integer.',
+    );
+  }
+
+  return prNumber;
+}
+
+function assertGitHubToken() {
+  const token = process.env.GITHUB_TOKEN;
+  if (!token) {
+    throw new Error('GITHUB_TOKEN environment variable is required.');
+  }
+  return token;
+}
+
+async function listComments(octokit, owner, repo, issueNumber) {
+  return octokit.paginate(octokit.rest.issues.listComments, {
+    owner,
+    repo,
+    issue_number: issueNumber,
+    per_page: 100,
+  });
+}
+
+function isGitHubActionsBot(comment) {
+  return comment.user?.login === 'github-actions[bot]';
+}
+
+async function main() {
+  const { commentFile, identifier } = parseArgs(process.argv);
+  const commentBody = await loadCommentBody(commentFile);
+  const token = assertGitHubToken();
+  const { owner, repo } = getRepoInfo();
+  const issueNumber = getPullRequestNumber();
+
+  const octokit = new Octokit({ auth: token });
+
+  const comments = await listComments(octokit, owner, repo, issueNumber);
+
+  const existingComment = comments.find(
+    comment =>
+      isGitHubActionsBot(comment) && comment.body?.includes(identifier),
+  );
+
+  if (existingComment) {
+    await octokit.rest.issues.updateComment({
+      owner,
+      repo,
+      comment_id: existingComment.id,
+      body: commentBody,
+    });
+    console.log('Updated existing bundle stats comment.');
+  } else {
+    await octokit.rest.issues.createComment({
+      owner,
+      repo,
+      issue_number: issueNumber,
+      body: commentBody,
+    });
+    console.log('Created new bundle stats comment.');
+  }
+}
+
+main().catch(error => {
+  console.error(error);
+  process.exitCode = 1;
+});

packages/ci-actions/package.json

@@ -0,0 +1,11 @@
+{
+  "name": "@actual-app/ci-actions",
+  "private": true,
+  "type": "module",
+  "scripts": {
+    "test": "vitest --run"
+  },
+  "devDependencies": {
+    "vitest": "^4.0.9"
+  }
+}

packages/ci-actions/src/versions/get-next-package-version.js

@@ -0,0 +1,72 @@
+function parseVersion(version) {
+  const [y, m, p] = version.split('.');
+  return {
+    versionYear: parseInt(y, 10),
+    versionMonth: parseInt(m, 10),
+    versionHotfix: parseInt(p, 10),
+  };
+}
+
+function computeNextMonth(versionYear, versionMonth) {
+  // Create date and add 1 month
+  const versionDate = new Date(2000 + versionYear, versionMonth - 1, 1); // month is 0-indexed
+  const nextVersionMonthDate = new Date(
+    versionDate.getFullYear(),
+    versionDate.getMonth() + 1,
+    1,
+  );
+
+  // Format back to YY.M format
+  const fullYear = nextVersionMonthDate.getFullYear();
+  const nextVersionYear = fullYear.toString().slice(fullYear < 2100 ? -2 : -3);
+  const nextVersionMonth = nextVersionMonthDate.getMonth() + 1; // Convert back to 1-indexed
+  return { nextVersionYear, nextVersionMonth };
+}
+
+// Determine logical type from 'auto' based on the current date and version
+function resolveType(type, currentDate, versionYear, versionMonth) {
+  if (type !== 'auto') return type;
+  const inPatchMonth =
+    currentDate.getFullYear() === 2000 + versionYear &&
+    currentDate.getMonth() + 1 === versionMonth;
+  if (inPatchMonth && currentDate.getDate() <= 25) return 'hotfix';
+  return 'monthly';
+}
+
+export function getNextVersion({
+  currentVersion,
+  type,
+  currentDate = new Date(),
+}) {
+  const { versionYear, versionMonth, versionHotfix } =
+    parseVersion(currentVersion);
+  const { nextVersionYear, nextVersionMonth } = computeNextMonth(
+    versionYear,
+    versionMonth,
+  );
+  const resolvedType = resolveType(
+    type,
+    currentDate,
+    versionYear,
+    versionMonth,
+  );
+
+  // Format date stamp once for nightly
+  const currentDateString = currentDate
+    .toISOString()
+    .split('T')[0]
+    .replaceAll('-', '');
+
+  switch (resolvedType) {
+    case 'nightly':
+      return `${nextVersionYear}.${nextVersionMonth}.0-nightly.${currentDateString}`;
+    case 'hotfix':
+      return `${versionYear}.${versionMonth}.${versionHotfix + 1}`;
+    case 'monthly':
+      return `${nextVersionYear}.${nextVersionMonth}.0`;
+    default:
+      throw new Error(
+        'Invalid type specified. Use "auto", "nightly", "hotfix", or "monthly".',
+      );
+  }
+}

packages/ci-actions/src/versions/get-next-package-version.test.js

@@ -0,0 +1,85 @@
+import { describe, it, expect } from 'vitest';
+
+import { getNextVersion } from './get-next-package-version';
+
+describe('getNextVersion (lib)', () => {
+  it('hotfix increments patch', () => {
+    expect(
+      getNextVersion({
+        currentVersion: '25.8.1',
+        type: 'hotfix',
+        currentDate: new Date('2025-08-10'),
+      }),
+    ).toBe('25.8.2');
+  });
+
+  it('monthly advances month same year', () => {
+    expect(
+      getNextVersion({
+        currentVersion: '25.8.3',
+        type: 'monthly',
+        currentDate: new Date('2025-08-15'),
+      }),
+    ).toBe('25.9.0');
+  });
+
+  it('monthly wraps year December -> January', () => {
+    expect(
+      getNextVersion({
+        currentVersion: '25.12.3',
+        type: 'monthly',
+        currentDate: new Date('2025-12-05'),
+      }),
+    ).toBe('26.1.0');
+  });
+
+  it('nightly format with date stamp', () => {
+    expect(
+      getNextVersion({
+        currentVersion: '25.8.1',
+        type: 'nightly',
+        currentDate: new Date('2025-08-22'),
+      }),
+    ).toBe('25.9.0-nightly.20250822');
+  });
+
+  it('auto before 25th -> hotfix', () => {
+    expect(
+      getNextVersion({
+        currentVersion: '25.8.4',
+        type: 'auto',
+        currentDate: new Date('2025-08-20'),
+      }),
+    ).toBe('25.8.5');
+  });
+
+  it('auto after 25th (same month) -> monthly', () => {
+    expect(
+      getNextVersion({
+        currentVersion: '25.8.4',
+        type: 'auto',
+        currentDate: new Date('2025-08-27'),
+      }),
+    ).toBe('25.9.0');
+  });
+
+  it('auto after 25th (next month) -> monthly', () => {
+    expect(
+      getNextVersion({
+        currentVersion: '25.8.4',
+        type: 'auto',
+        currentDate: new Date('2025-09-02'),
+      }),
+    ).toBe('25.9.0');
+  });
+
+  it('invalid type throws', () => {
+    expect(() =>
+      getNextVersion({
+        currentVersion: '25.8.4',
+        type: 'unknown',
+        currentDate: new Date('2025-08-10'),
+      }),
+    ).toThrow(/Invalid type/);
+  });
+});