@integrity-labs/agt-cli 0.28.1022 → 0.28.1023

package/dist/bin/agt.js

@@ -40,12 +40,12 @@ import {
   success,
   table,
   warn
-} from "../chunk-5MUSHNVX.js";
+} from "../chunk-NQB4AF4Q.js";
 import {
   getProjectDir,
   isSessionResumeDisabled,
   readDirectChatSessionState
-} from "../chunk-QXJWRE64.js";
+} from "../chunk-RDQILPRF.js";
 import {
   AnchorSessionClient,
   CHANNEL_REGISTRY,
@@ -79,7 +79,7 @@ import {
   serializeManifestForSlackCli,
   sessionFileExists,
   sessionTranscriptDir
-} from "../chunk-X7SX25N6.js";
+} from "../chunk-BHKFVSIX.js";
 import "../chunk-DHWNVVX4.js";
 import "../chunk-XWVM4KPK.js";
 import "../chunk-EL5MWGGH.js";
@@ -5474,7 +5474,7 @@ import { execFileSync, execSync } from "child_process";
 import { existsSync as existsSync11, realpathSync as realpathSync2 } from "fs";
 import chalk18 from "chalk";
 import ora16 from "ora";
-var cliVersion = true ? "0.28.1022" : "dev";
+var cliVersion = true ? "0.28.1023" : "dev";
 async function fetchLatestVersion() {
   const host2 = getHost();
   if (!host2) return null;
@@ -6734,7 +6734,7 @@ function handleError(err) {
 }
 
 // src/bin/agt.ts
-var cliVersion2 = true ? "0.28.1022" : "dev";
+var cliVersion2 = true ? "0.28.1023" : "dev";
 var program = new Command();
 program.name("agt").description("Augmented CLI \u2014 agent provisioning and management").version(cliVersion2).option("--json", "Emit machine-readable JSON output (suppress spinners and colors)").option("--skip-update-check", "Skip the automatic update check on startup");
 program.hook("preAction", async (thisCommand, actionCommand) => {

package/dist/{chunk-X7SX25N6.js → chunk-BHKFVSIX.js}

@@ -11129,13 +11129,18 @@ var OAUTH_PROVIDERS = {
       // existing Xero install must RECONNECT for its token to carry this — the
       // broker posts journals with the agent's own OAuth access_token.
       "accounting.manualjournals",
-      // accounting.reports.read → granular read-only replacements
+      // accounting.reports.read → granular read-only replacements, ONE PER REPORT
+      // TOOL THE SERVER REGISTERS (ENG-10961 follow-on). Bank summary, budget
+      // summary and executive summary were requested here with no tool reading
+      // them: #6463 removed the phantom `report-bank-summary` /
+      // `report-budget-summary` names, and nothing ever called the executive
+      // summary. Asking a customer to consent to read access nothing uses is the
+      // least-privilege failure the granular list exists to avoid. Removing a
+      // default can never raise a reconnect prompt - `computeMissingScopes` only
+      // reports defaults the grant LACKS.
       "accounting.reports.balancesheet.read",
       "accounting.reports.profitandloss.read",
       "accounting.reports.trialbalance.read",
-      "accounting.reports.budgetsummary.read",
-      "accounting.reports.banksummary.read",
-      "accounting.reports.executivesummary.read",
       "accounting.reports.aged.read"
     ],
     // Read-only variant (ENG-6170): the `.read` granular scope for every
@@ -11158,9 +11163,6 @@ var OAUTH_PROVIDERS = {
       "accounting.reports.balancesheet.read",
       "accounting.reports.profitandloss.read",
       "accounting.reports.trialbalance.read",
-      "accounting.reports.budgetsummary.read",
-      "accounting.reports.banksummary.read",
-      "accounting.reports.executivesummary.read",
       "accounting.reports.aged.read"
     ],
     supportsRefresh: true,
@@ -15479,4 +15481,4 @@ export {
   peekCurrentSession,
   readDailySessionPin
 };
-//# sourceMappingURL=chunk-X7SX25N6.js.map
+//# sourceMappingURL=chunk-BHKFVSIX.js.map