@integrity-labs/agt-cli 0.28.1021 → 0.28.1023

package/dist/mcp/direct-chat-channel.js

@@ -32966,13 +32966,18 @@ var OAUTH_PROVIDERS = {
       // existing Xero install must RECONNECT for its token to carry this — the
       // broker posts journals with the agent's own OAuth access_token.
       "accounting.manualjournals",
-      // accounting.reports.read → granular read-only replacements
+      // accounting.reports.read → granular read-only replacements, ONE PER REPORT
+      // TOOL THE SERVER REGISTERS (ENG-10961 follow-on). Bank summary, budget
+      // summary and executive summary were requested here with no tool reading
+      // them: #6463 removed the phantom `report-bank-summary` /
+      // `report-budget-summary` names, and nothing ever called the executive
+      // summary. Asking a customer to consent to read access nothing uses is the
+      // least-privilege failure the granular list exists to avoid. Removing a
+      // default can never raise a reconnect prompt - `computeMissingScopes` only
+      // reports defaults the grant LACKS.
       "accounting.reports.balancesheet.read",
       "accounting.reports.profitandloss.read",
       "accounting.reports.trialbalance.read",
-      "accounting.reports.budgetsummary.read",
-      "accounting.reports.banksummary.read",
-      "accounting.reports.executivesummary.read",
       "accounting.reports.aged.read"
     ],
     // Read-only variant (ENG-6170): the `.read` granular scope for every
@@ -32995,9 +33000,6 @@ var OAUTH_PROVIDERS = {
       "accounting.reports.balancesheet.read",
       "accounting.reports.profitandloss.read",
       "accounting.reports.trialbalance.read",
-      "accounting.reports.budgetsummary.read",
-      "accounting.reports.banksummary.read",
-      "accounting.reports.executivesummary.read",
       "accounting.reports.aged.read"
     ],
     supportsRefresh: true,
@@ -39287,10 +39289,55 @@ function decideBusyAck(i) {
   const paneFreshThreshold = i.paneFreshThresholdMs ?? ACK_PANE_FRESH_THRESHOLD_MS;
   return i.paneLogFreshAgeMs != null && i.paneLogFreshAgeMs <= paneFreshThreshold;
 }
-function busyAckNoticeText() {
+function busyAckNoticeText(usageLimit) {
+  if (usageLimit) return giveUpNoticeText("usage_limit", usageLimit.resetsHint);
   return "\u{1F6E0}\uFE0F I'm in the middle of something right now \u2014 I'll follow up on this as soon as I'm free.";
 }
+var GIVE_UP_SIGNAL_FILENAME = "watchdog-give-up.json";
 var GIVE_UP_SIGNAL_MAX_AGE_MS = 30 * 60 * 1e3;
+function readGiveUpSignal(path, now = Date.now()) {
+  if (!path) return null;
+  try {
+    const raw = JSON.parse(readFileSync7(path, "utf8"));
+    if (typeof raw.gave_up_at !== "string") return null;
+    const t = Date.parse(raw.gave_up_at);
+    if (!Number.isFinite(t) || t > now) return null;
+    const reason = raw.reason === "transient_overload" ? "transient_overload" : raw.reason === "usage_limit" ? "usage_limit" : null;
+    const hint = typeof raw.resets_hint === "string" && raw.resets_hint.trim().length > 0 ? raw.resets_hint.trim().slice(0, 40) : null;
+    return { atMs: t, reason, resetsHint: hint };
+  } catch {
+    return null;
+  }
+}
+var USAGE_LIMIT_LIVE_WINDOW_MS = 3 * 6e4;
+function readUsageLimitForBusyAck(agentDir, now = Date.now()) {
+  if (!agentDir) return null;
+  const path = join7(agentDir, GIVE_UP_SIGNAL_FILENAME);
+  const sig = readGiveUpSignal(path, now);
+  if (sig?.reason !== "usage_limit") return null;
+  let lastSeenMs = null;
+  try {
+    const raw = JSON.parse(readFileSync7(path, "utf8"));
+    if (typeof raw.usage_limit_last_seen_at === "string") {
+      const t = Date.parse(raw.usage_limit_last_seen_at);
+      if (Number.isFinite(t) && t <= now) lastSeenMs = t;
+    }
+  } catch {
+    return null;
+  }
+  if (lastSeenMs === null) return null;
+  if (now - lastSeenMs > USAGE_LIMIT_LIVE_WINDOW_MS) return null;
+  return { resetsHint: sig.resetsHint };
+}
+function giveUpNoticeText(reason = null, resetsHint = null) {
+  if (reason === "usage_limit") {
+    return resetsHint ? `\u23F3 I've reached my usage limit for now, so I can't reply until ${resetsHint}. Your message is queued \u2014 I'll pick it up then, no need to resend.` : "\u23F3 I've reached my usage limit for now, so I can't reply just yet. Your message is queued \u2014 I'll pick it up as soon as it lifts, no need to resend.";
+  }
+  if (reason === "transient_overload") {
+    return "\u26A0\uFE0F I hit a brief overload and couldn\u2019t finish your last message \u2014 please resend it in a moment.";
+  }
+  return "\u26A0\uFE0F I couldn't read your last message \u2014 please resend it.";
+}
 function turnFailedNoticeText(failureClass) {
   const cause = failureClass === "overloaded" ? "the service I run on is overloaded right now \u2014 nothing to do with you or what you asked for" : failureClass === "server_error" ? "something upstream of me is failing right now \u2014 nothing to do with you or what you asked for" : null;
   if (cause === null) {
@@ -39693,7 +39740,8 @@ function probeTmuxSession(tmuxSession) {
     return "alive";
   } catch (err) {
     const e = err;
-    if (e?.code === "ENOENT") return "unknown";
+    const timedOut = e?.code === "ETIMEDOUT" || e?.error?.code === "ETIMEDOUT";
+    if (e?.code === "ENOENT" || e?.error?.code === "ENOENT" || timedOut) return "unknown";
     return "dead";
   }
 }
@@ -41263,7 +41311,10 @@ function postDirectChatBusyAckNotice(sessionId) {
   }
   lastBusyAckNoticeAt.set(sessionId, now);
   void (async () => {
-    const ok = await postDirectChatNoticeMessage(sessionId, busyAckNoticeText());
+    const ok = await postDirectChatNoticeMessage(
+      sessionId,
+      busyAckNoticeText(readUsageLimitForBusyAck(DIRECT_CHAT_CODE_NAME_AGENT_DIR))
+    );
     if (!ok) {
       lastBusyAckNoticeAt.delete(sessionId);
       process.stderr.write(

package/dist/mcp/index.js

@@ -25548,13 +25548,18 @@ var OAUTH_PROVIDERS = {
       // existing Xero install must RECONNECT for its token to carry this — the
       // broker posts journals with the agent's own OAuth access_token.
       "accounting.manualjournals",
-      // accounting.reports.read → granular read-only replacements
+      // accounting.reports.read → granular read-only replacements, ONE PER REPORT
+      // TOOL THE SERVER REGISTERS (ENG-10961 follow-on). Bank summary, budget
+      // summary and executive summary were requested here with no tool reading
+      // them: #6463 removed the phantom `report-bank-summary` /
+      // `report-budget-summary` names, and nothing ever called the executive
+      // summary. Asking a customer to consent to read access nothing uses is the
+      // least-privilege failure the granular list exists to avoid. Removing a
+      // default can never raise a reconnect prompt - `computeMissingScopes` only
+      // reports defaults the grant LACKS.
       "accounting.reports.balancesheet.read",
       "accounting.reports.profitandloss.read",
       "accounting.reports.trialbalance.read",
-      "accounting.reports.budgetsummary.read",
-      "accounting.reports.banksummary.read",
-      "accounting.reports.executivesummary.read",
       "accounting.reports.aged.read"
     ],
     // Read-only variant (ENG-6170): the `.read` granular scope for every
@@ -25577,9 +25582,6 @@ var OAUTH_PROVIDERS = {
       "accounting.reports.balancesheet.read",
       "accounting.reports.profitandloss.read",
       "accounting.reports.trialbalance.read",
-      "accounting.reports.budgetsummary.read",
-      "accounting.reports.banksummary.read",
-      "accounting.reports.executivesummary.read",
       "accounting.reports.aged.read"
     ],
     supportsRefresh: true,

package/dist/mcp/origami.js

@@ -39699,13 +39699,18 @@ var OAUTH_PROVIDERS = {
       // existing Xero install must RECONNECT for its token to carry this — the
       // broker posts journals with the agent's own OAuth access_token.
       "accounting.manualjournals",
-      // accounting.reports.read → granular read-only replacements
+      // accounting.reports.read → granular read-only replacements, ONE PER REPORT
+      // TOOL THE SERVER REGISTERS (ENG-10961 follow-on). Bank summary, budget
+      // summary and executive summary were requested here with no tool reading
+      // them: #6463 removed the phantom `report-bank-summary` /
+      // `report-budget-summary` names, and nothing ever called the executive
+      // summary. Asking a customer to consent to read access nothing uses is the
+      // least-privilege failure the granular list exists to avoid. Removing a
+      // default can never raise a reconnect prompt - `computeMissingScopes` only
+      // reports defaults the grant LACKS.
       "accounting.reports.balancesheet.read",
       "accounting.reports.profitandloss.read",
       "accounting.reports.trialbalance.read",
-      "accounting.reports.budgetsummary.read",
-      "accounting.reports.banksummary.read",
-      "accounting.reports.executivesummary.read",
       "accounting.reports.aged.read"
     ],
     // Read-only variant (ENG-6170): the `.read` granular scope for every
@@ -39728,9 +39733,6 @@ var OAUTH_PROVIDERS = {
       "accounting.reports.balancesheet.read",
       "accounting.reports.profitandloss.read",
       "accounting.reports.trialbalance.read",
-      "accounting.reports.budgetsummary.read",
-      "accounting.reports.banksummary.read",
-      "accounting.reports.executivesummary.read",
       "accounting.reports.aged.read"
     ],
     supportsRefresh: true,

package/dist/mcp/slack-channel.js

@@ -33916,13 +33916,18 @@ var OAUTH_PROVIDERS = {
       // existing Xero install must RECONNECT for its token to carry this — the
       // broker posts journals with the agent's own OAuth access_token.
       "accounting.manualjournals",
-      // accounting.reports.read → granular read-only replacements
+      // accounting.reports.read → granular read-only replacements, ONE PER REPORT
+      // TOOL THE SERVER REGISTERS (ENG-10961 follow-on). Bank summary, budget
+      // summary and executive summary were requested here with no tool reading
+      // them: #6463 removed the phantom `report-bank-summary` /
+      // `report-budget-summary` names, and nothing ever called the executive
+      // summary. Asking a customer to consent to read access nothing uses is the
+      // least-privilege failure the granular list exists to avoid. Removing a
+      // default can never raise a reconnect prompt - `computeMissingScopes` only
+      // reports defaults the grant LACKS.
       "accounting.reports.balancesheet.read",
       "accounting.reports.profitandloss.read",
       "accounting.reports.trialbalance.read",
-      "accounting.reports.budgetsummary.read",
-      "accounting.reports.banksummary.read",
-      "accounting.reports.executivesummary.read",
       "accounting.reports.aged.read"
     ],
     // Read-only variant (ENG-6170): the `.read` granular scope for every
@@ -33945,9 +33950,6 @@ var OAUTH_PROVIDERS = {
       "accounting.reports.balancesheet.read",
       "accounting.reports.profitandloss.read",
       "accounting.reports.trialbalance.read",
-      "accounting.reports.budgetsummary.read",
-      "accounting.reports.banksummary.read",
-      "accounting.reports.executivesummary.read",
       "accounting.reports.aged.read"
     ],
     supportsRefresh: true,
@@ -39967,7 +39969,8 @@ function decideBusyAck(i) {
   const paneFreshThreshold = i.paneFreshThresholdMs ?? ACK_PANE_FRESH_THRESHOLD_MS;
   return i.paneLogFreshAgeMs != null && i.paneLogFreshAgeMs <= paneFreshThreshold;
 }
-function busyAckNoticeText() {
+function busyAckNoticeText(usageLimit) {
+  if (usageLimit) return giveUpNoticeText("usage_limit", usageLimit.resetsHint);
   return "\u{1F6E0}\uFE0F I'm in the middle of something right now \u2014 I'll follow up on this as soon as I'm free.";
 }
 var GIVE_UP_SIGNAL_FILENAME = "watchdog-give-up.json";
@@ -39986,6 +39989,26 @@ function readGiveUpSignal(path, now = Date.now()) {
     return null;
   }
 }
+var USAGE_LIMIT_LIVE_WINDOW_MS = 3 * 6e4;
+function readUsageLimitForBusyAck(agentDir, now = Date.now()) {
+  if (!agentDir) return null;
+  const path = join3(agentDir, GIVE_UP_SIGNAL_FILENAME);
+  const sig = readGiveUpSignal(path, now);
+  if (sig?.reason !== "usage_limit") return null;
+  let lastSeenMs = null;
+  try {
+    const raw = JSON.parse(readFileSync3(path, "utf8"));
+    if (typeof raw.usage_limit_last_seen_at === "string") {
+      const t = Date.parse(raw.usage_limit_last_seen_at);
+      if (Number.isFinite(t) && t <= now) lastSeenMs = t;
+    }
+  } catch {
+    return null;
+  }
+  if (lastSeenMs === null) return null;
+  if (now - lastSeenMs > USAGE_LIMIT_LIVE_WINDOW_MS) return null;
+  return { resetsHint: sig.resetsHint };
+}
 function decideGiveUpNotice(input) {
   const maxAge = input.maxAgeMs ?? GIVE_UP_SIGNAL_MAX_AGE_MS;
   if (input.signalAtMs == null) return false;
@@ -40171,7 +40194,8 @@ function probeTmuxSession(tmuxSession) {
     return "alive";
   } catch (err) {
     const e = err;
-    if (e?.code === "ENOENT") return "unknown";
+    const timedOut = e?.code === "ETIMEDOUT" || e?.error?.code === "ETIMEDOUT";
+    if (e?.code === "ENOENT" || e?.error?.code === "ENOENT" || timedOut) return "unknown";
     return "dead";
   }
 }
@@ -45435,7 +45459,8 @@ function postBusyAckNotice(channel, threadTs, isThreadReply) {
     },
     body: JSON.stringify({
       channel,
-      text: busyAckNoticeText(),
+      // ENG-10972: say RATE-LIMITED rather than "busy" when that is the truth.
+      text: busyAckNoticeText(readUsageLimitForBusyAck(SLACK_AGENT_DIR)),
       ...threadTs ? { thread_ts: threadTs } : {}
     }),
     // Bound the request so a hung Slack call can't dangle to the platform

package/dist/mcp/telegram-channel.js

@@ -34025,13 +34025,18 @@ var OAUTH_PROVIDERS = {
       // existing Xero install must RECONNECT for its token to carry this — the
       // broker posts journals with the agent's own OAuth access_token.
       "accounting.manualjournals",
-      // accounting.reports.read → granular read-only replacements
+      // accounting.reports.read → granular read-only replacements, ONE PER REPORT
+      // TOOL THE SERVER REGISTERS (ENG-10961 follow-on). Bank summary, budget
+      // summary and executive summary were requested here with no tool reading
+      // them: #6463 removed the phantom `report-bank-summary` /
+      // `report-budget-summary` names, and nothing ever called the executive
+      // summary. Asking a customer to consent to read access nothing uses is the
+      // least-privilege failure the granular list exists to avoid. Removing a
+      // default can never raise a reconnect prompt - `computeMissingScopes` only
+      // reports defaults the grant LACKS.
       "accounting.reports.balancesheet.read",
       "accounting.reports.profitandloss.read",
       "accounting.reports.trialbalance.read",
-      "accounting.reports.budgetsummary.read",
-      "accounting.reports.banksummary.read",
-      "accounting.reports.executivesummary.read",
       "accounting.reports.aged.read"
     ],
     // Read-only variant (ENG-6170): the `.read` granular scope for every
@@ -34054,9 +34059,6 @@ var OAUTH_PROVIDERS = {
       "accounting.reports.balancesheet.read",
       "accounting.reports.profitandloss.read",
       "accounting.reports.trialbalance.read",
-      "accounting.reports.budgetsummary.read",
-      "accounting.reports.banksummary.read",
-      "accounting.reports.executivesummary.read",
       "accounting.reports.aged.read"
     ],
     supportsRefresh: true,
@@ -40696,7 +40698,8 @@ function probeTmuxSession(tmuxSession) {
     return "alive";
   } catch (err) {
     const e = err;
-    if (e?.code === "ENOENT") return "unknown";
+    const timedOut = e?.code === "ETIMEDOUT" || e?.error?.code === "ETIMEDOUT";
+    if (e?.code === "ENOENT" || e?.error?.code === "ENOENT" || timedOut) return "unknown";
     return "dead";
   }
 }
@@ -42689,7 +42692,8 @@ function decideBusyAck(i) {
   const paneFreshThreshold = i.paneFreshThresholdMs ?? ACK_PANE_FRESH_THRESHOLD_MS;
   return i.paneLogFreshAgeMs != null && i.paneLogFreshAgeMs <= paneFreshThreshold;
 }
-function busyAckNoticeText() {
+function busyAckNoticeText(usageLimit) {
+  if (usageLimit) return giveUpNoticeText("usage_limit", usageLimit.resetsHint);
   return "\u{1F6E0}\uFE0F I'm in the middle of something right now \u2014 I'll follow up on this as soon as I'm free.";
 }
 var GIVE_UP_SIGNAL_FILENAME = "watchdog-give-up.json";
@@ -42708,6 +42712,26 @@ function readGiveUpSignal(path, now = Date.now()) {
     return null;
   }
 }
+var USAGE_LIMIT_LIVE_WINDOW_MS = 3 * 6e4;
+function readUsageLimitForBusyAck(agentDir, now = Date.now()) {
+  if (!agentDir) return null;
+  const path = join15(agentDir, GIVE_UP_SIGNAL_FILENAME);
+  const sig = readGiveUpSignal(path, now);
+  if (sig?.reason !== "usage_limit") return null;
+  let lastSeenMs = null;
+  try {
+    const raw = JSON.parse(readFileSync13(path, "utf8"));
+    if (typeof raw.usage_limit_last_seen_at === "string") {
+      const t = Date.parse(raw.usage_limit_last_seen_at);
+      if (Number.isFinite(t) && t <= now) lastSeenMs = t;
+    }
+  } catch {
+    return null;
+  }
+  if (lastSeenMs === null) return null;
+  if (now - lastSeenMs > USAGE_LIMIT_LIVE_WINDOW_MS) return null;
+  return { resetsHint: sig.resetsHint };
+}
 function decideGiveUpNotice(input) {
   const maxAge = input.maxAgeMs ?? GIVE_UP_SIGNAL_MAX_AGE_MS;
   if (input.signalAtMs == null) return false;
@@ -43541,7 +43565,8 @@ function postBusyAckNotice(chatId, messageId) {
         "sendMessage",
         {
           chat_id: chatId,
-          text: busyAckNoticeText(),
+          // ENG-10972: say RATE-LIMITED rather than "busy" when that is the truth.
+          text: busyAckNoticeText(readUsageLimitForBusyAck(TELEGRAM_AGENT_DIR)),
           reply_to_message_id: Number(messageId),
           allow_sending_without_reply: true
         },

package/dist/{persistent-session-UZBB7EOS.js → persistent-session-3NQHNU6H.js}

@@ -65,8 +65,8 @@ import {
   writeDirectChatSessionState,
   writeEgressAllowlist,
   writePersistentClaudeWrapper
-} from "./chunk-CVQDMHOP.js";
-import "./chunk-X7SX25N6.js";
+} from "./chunk-RDQILPRF.js";
+import "./chunk-BHKFVSIX.js";
 import "./chunk-DHWNVVX4.js";
 import "./chunk-XWVM4KPK.js";
 import "./chunk-EL5MWGGH.js";
@@ -139,4 +139,4 @@ export {
   writeEgressAllowlist,
   writePersistentClaudeWrapper
 };
-//# sourceMappingURL=persistent-session-UZBB7EOS.js.map
+//# sourceMappingURL=persistent-session-3NQHNU6H.js.map

package/dist/{responsiveness-probe-KLOUFBM5.js → responsiveness-probe-ZOXVXDPT.js}

@@ -1,7 +1,7 @@
 import {
   paneLogPath
-} from "./chunk-CVQDMHOP.js";
-import "./chunk-X7SX25N6.js";
+} from "./chunk-RDQILPRF.js";
+import "./chunk-BHKFVSIX.js";
 import "./chunk-DHWNVVX4.js";
 import "./chunk-XWVM4KPK.js";
 import "./chunk-EL5MWGGH.js";
@@ -802,4 +802,4 @@ export {
   readAndResetSlackReplyBindingClassifications,
   readAndResetSlackReplyTargetClassifications
 };
-//# sourceMappingURL=responsiveness-probe-KLOUFBM5.js.map
+//# sourceMappingURL=responsiveness-probe-ZOXVXDPT.js.map

package/dist/{session-auth-dead-JJUKS75B.js → session-auth-dead-ZKC2HH6T.js}

@@ -1,6 +1,6 @@
 import {
   sessionTranscriptDir
-} from "./chunk-X7SX25N6.js";
+} from "./chunk-BHKFVSIX.js";
 import "./chunk-DGUM43GV.js";
 
 // src/lib/session-auth-dead.ts
@@ -204,4 +204,4 @@ export {
   decideSessionAuthState,
   probeSessionAuth
 };
-//# sourceMappingURL=session-auth-dead-JJUKS75B.js.map
+//# sourceMappingURL=session-auth-dead-ZKC2HH6T.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@integrity-labs/agt-cli",
-  "version": "0.28.1021",
+  "version": "0.28.1023",
   "description": "Augmented Team CLI — agent provisioning and management",
   "type": "module",
   "engines": {