@integrity-labs/agt-cli 0.27.167 → 0.27.169

package/dist/{chunk-5TBIEU36.js → chunk-4ULNASXC.js}

@@ -1,7 +1,7 @@
 import {
   claudeModelAlias,
   isClaudeFastMode
-} from "./chunk-3A2H4ZLD.js";
+} from "./chunk-L2UTBXZS.js";
 import {
   reapOrphanChannelMcps
 } from "./chunk-XWVM4KPK.js";
@@ -1641,4 +1641,4 @@ export {
   stopAllSessionsAndWait,
   getProjectDir
 };
-//# sourceMappingURL=chunk-5TBIEU36.js.map
+//# sourceMappingURL=chunk-4ULNASXC.js.map

package/dist/{chunk-3A2H4ZLD.js → chunk-L2UTBXZS.js}

@@ -1490,6 +1490,24 @@ var ACCOUNT_RESOLUTION_ERROR_PATTERNS = [
   "auth config",
   "no connection found"
 ];
+var UPSTREAM_AUTH_ERROR_PATTERNS = [
+  "authentication required",
+  "not authenticated",
+  "unauthorized",
+  "authentication_error",
+  "authentication error",
+  "invalid authentication",
+  "invalid credentials",
+  "invalid api key",
+  "invalid access token",
+  "token expired",
+  "token has expired",
+  "expired access token",
+  "expired credentials",
+  "permission denied",
+  "access denied",
+  "forbidden"
+];
 function isReadonlyToolDescriptor(t) {
   if (!t?.name)
     return false;
@@ -1525,6 +1543,24 @@ function isAccountResolutionError(message) {
   const m = message.toLowerCase();
   return ACCOUNT_RESOLUTION_ERROR_PATTERNS.some((p) => m.includes(p));
 }
+function isUpstreamAuthError(message) {
+  const m = message.toLowerCase();
+  if (UPSTREAM_AUTH_ERROR_PATTERNS.some((p) => m.includes(p)))
+    return true;
+  if (/\b(401|403)\s+client error/.test(m))
+    return true;
+  return /(status(?:_?code)?|http_?status(?:_code)?|mercury_last_http_status_code)["'\\\s]*[:=]["'\\\s]*(401|403)\b/.test(m);
+}
+function isComposioFailureEnvelope(text) {
+  return /["'\\]*(successful|successfull)["'\\\s]*:\s*false\b/i.test(text);
+}
+function classifyToolCallFailure(text) {
+  if (isAccountResolutionError(text))
+    return "account";
+  if (isUpstreamAuthError(text))
+    return "auth";
+  return "benign";
+}
 async function parseRpc(res, expectedId) {
   const ct = res.headers.get("content-type") ?? "";
   if (ct.includes("text/event-stream")) {
@@ -1629,28 +1665,29 @@ async function probeComposioMcpToolCall(config, fetchImpl = fetch) {
       if (raw)
         baseDetails.response = raw.length > 2e3 ? `${raw.slice(0, 2e3)}\u2026` : raw;
     }
-    if (callRpc && "error" in callRpc) {
-      const errMsg = callRpc["error"]?.message ?? "";
-      if (isAccountResolutionError(errMsg)) {
+    const rpcErrMsg = callRpc && "error" in callRpc ? callRpc["error"]?.message ?? "" : "";
+    const result = callRpc?.["result"];
+    const contentText = (result?.content ?? []).map((c) => c.text ?? "").join(" ").trim();
+    const failed = Boolean(rpcErrMsg) || Boolean(result?.isError) || isComposioFailureEnvelope(contentText);
+    if (failed) {
+      const failureText = [rpcErrMsg, contentText].filter(Boolean).join(" ");
+      const snippet = failureText.length > 200 ? `${failureText.slice(0, 200)}\u2026` : failureText;
+      const kind = classifyToolCallFailure(failureText);
+      if (kind === "account") {
         return {
           status: "down",
-          message: `Live tool call '${toolName}' failed to resolve the connected account: ${errMsg}`,
+          message: `Live tool call '${toolName}' failed to resolve the connected account: ${snippet}`,
           details: baseDetails
         };
       }
-      return { status: "ok", message: `Live tool call '${toolName}' resolved the account (tool error: ${errMsg})`, details: baseDetails };
-    }
-    const result = callRpc?.["result"];
-    if (result?.isError) {
-      const text = (result.content ?? []).map((c) => c.text ?? "").join(" ");
-      if (isAccountResolutionError(text)) {
+      if (kind === "auth") {
         return {
           status: "down",
-          message: `Live tool call '${toolName}' failed to resolve the connected account: ${text}`,
-          details: baseDetails
+          message: `Live tool call '${toolName}' was rejected by the provider \u2014 the connection's credential is no longer valid (reconnect required): ${snippet}`,
+          details: { ...baseDetails, reason: "upstream_auth_rejected" }
         };
       }
-      return { status: "ok", message: `Live tool call '${toolName}' resolved the account (tool error)`, details: baseDetails };
+      return { status: "ok", message: `Live tool call '${toolName}' resolved the account (tool error: ${snippet})`, details: baseDetails };
     }
     return { status: "ok", message: `Live tool call '${toolName}' resolved the connected account`, details: baseDetails };
   } catch (err) {
@@ -5076,4 +5113,4 @@ export {
   coerceEnvValue,
   FLAGS_SCHEMA_VERSION
 };
-//# sourceMappingURL=chunk-3A2H4ZLD.js.map
+//# sourceMappingURL=chunk-L2UTBXZS.js.map