@integrity-labs/agt-cli 0.27.120 → 0.27.122

package/dist/bin/agt.js

@@ -28,7 +28,7 @@ import {
   success,
   table,
   warn
-} from "../chunk-I2K6JKWP.js";
+} from "../chunk-EGFIMYNT.js";
 import {
   CHANNEL_REGISTRY,
   DEPLOYMENT_TEMPLATES,
@@ -4934,7 +4934,7 @@ import { execFileSync, execSync } from "child_process";
 import { existsSync as existsSync10, realpathSync as realpathSync2 } from "fs";
 import chalk18 from "chalk";
 import ora16 from "ora";
-var cliVersion = true ? "0.27.120" : "dev";
+var cliVersion = true ? "0.27.122" : "dev";
 async function fetchLatestVersion() {
   const host2 = getHost();
   if (!host2) return null;
@@ -5857,7 +5857,7 @@ function handleError(err) {
 }
 
 // src/bin/agt.ts
-var cliVersion2 = true ? "0.27.120" : "dev";
+var cliVersion2 = true ? "0.27.122" : "dev";
 var program = new Command();
 program.name("agt").description("Augmented CLI \u2014 agent provisioning and management").version(cliVersion2).option("--json", "Emit machine-readable JSON output (suppress spinners and colors)").option("--skip-update-check", "Skip the automatic update check on startup");
 program.hook("preAction", async (thisCommand, actionCommand) => {

package/dist/{chunk-I2K6JKWP.js → chunk-EGFIMYNT.js}

@@ -5039,6 +5039,7 @@ function buildMcpJson(input) {
       integration
     });
   }
+  const hasXeroBroker = input.integrations?.some((i) => i.definition_id === "xero-broker") ?? false;
   const xeroIntegration = input.integrations?.find((i) => i.definition_id === "xero");
   if (xeroIntegration) {
     const brokerMode = Boolean(xeroIntegration.id);
@@ -5053,6 +5054,8 @@ function buildMcpJson(input) {
         AGT_API_KEY: "${AGT_API_KEY}",
         AGT_AGENT_ID: input.agent.agent_id,
         ...brokerMode ? { AGT_INTEGRATION_ID: xeroIntegration.id } : {},
+        // ENG-4922: writes go through xero-broker → read-only vendor server.
+        ...hasXeroBroker ? { XERO_WRITES_VIA_BROKER: "true" } : {},
         PATH: process.env["PATH"] ?? "",
         HOME: process.env["HOME"] ?? ""
       }
@@ -5091,6 +5094,20 @@ function buildMcpJson(input) {
       }
     };
   }
+  if (hasXeroBroker) {
+    mcpServers["xero-broker"] = {
+      command: "npx",
+      args: ["-y", "@integrity-labs/xero-broker@latest"],
+      env: {
+        AGT_HOST: "${AGT_HOST}",
+        AGT_AGENT_ID: input.agent.agent_id,
+        AGT_RUN_ID: "${AGT_RUN_ID}",
+        AGT_API_KEY: "${AGT_API_KEY}",
+        PATH: process.env["PATH"] ?? "",
+        HOME: process.env["HOME"] ?? ""
+      }
+    };
+  }
   return { mcpServers };
 }
 function parseIntervalMinutes(scheduleEvery) {
@@ -5981,12 +5998,15 @@ ${sections}`
         integration
       }));
     }
+    const hasXeroBroker = integrations.some((i) => i.definition_id === "xero-broker");
     const xeroIntegration = integrations.find((i) => i.definition_id === "xero");
     if (xeroIntegration) {
       const brokerMode = Boolean(agentId && xeroIntegration.id);
       const xeroEnv = {
         ...brokerMode ? {} : { XERO_CLIENT_BEARER_TOKEN: "${XERO_ACCESS_TOKEN}" },
         XERO_TENANT_ID: "${XERO_TENANT_ID}",
+        // ENG-4922: writes go through xero-broker → read-only vendor server.
+        ...hasXeroBroker ? { XERO_WRITES_VIA_BROKER: "true" } : {},
         PATH: process.env["PATH"] ?? "",
         HOME: process.env["HOME"] ?? ""
       };
@@ -6037,12 +6057,33 @@ ${sections}`
         });
       }
     }
+    if (hasXeroBroker) {
+      const brokerAgentId = resolveBrokerAgentId(codeName);
+      if (!brokerAgentId) {
+        process.stderr.write(`[manager-worker] [xero-broker] skipping write for '${codeName}': no real AGT_AGENT_ID available. The full-provision artifact pipeline will recreate this on the next cycle.
+`);
+      } else {
+        this.writeMcpServer(codeName, "xero-broker", {
+          command: "npx",
+          args: ["-y", "@integrity-labs/xero-broker@latest"],
+          env: {
+            AGT_HOST: "${AGT_HOST}",
+            AGT_API_KEY: "${AGT_API_KEY}",
+            AGT_AGENT_ID: brokerAgentId,
+            AGT_RUN_ID: "${AGT_RUN_ID}",
+            PATH: process.env["PATH"] ?? "",
+            HOME: process.env["HOME"] ?? ""
+          }
+        });
+      }
+    }
     if (this.removeMcpServer) {
       const nativeMcpKeys = INTEGRATION_REGISTRY.filter((d) => d.nativeMcp !== void 0).map((d) => d.nativeMcp.key ?? d.id);
       const integrationDerivedKeys = /* @__PURE__ */ new Set([
         "xero",
         "postiz",
         "cloud-broker",
+        "xero-broker",
         ...nativeMcpKeys,
         ...Object.entries(OAUTH_PROVIDERS).filter(([, provider]) => Boolean(provider.mcpUrl)).map(([id]) => id)
       ]);
@@ -6053,6 +6094,8 @@ ${sections}`
         expectedKeys.add("postiz");
       if (hasCloudBroker)
         expectedKeys.add("cloud-broker");
+      if (hasXeroBroker)
+        expectedKeys.add("xero-broker");
       for (const integration of integrations) {
         const def = INTEGRATION_REGISTRY.find((d) => d.id === integration.definition_id);
         if (def?.nativeMcp) {
@@ -7603,4 +7646,4 @@ export {
   managerInstallSystemUnitCommand,
   managerUninstallSystemUnitCommand
 };
-//# sourceMappingURL=chunk-I2K6JKWP.js.map
+//# sourceMappingURL=chunk-EGFIMYNT.js.map