@integrity-labs/agt-cli 0.28.1022 → 0.28.1023

package/dist/mcp/direct-chat-channel.js

@@ -32966,13 +32966,18 @@ var OAUTH_PROVIDERS = {
       // existing Xero install must RECONNECT for its token to carry this — the
       // broker posts journals with the agent's own OAuth access_token.
       "accounting.manualjournals",
-      // accounting.reports.read → granular read-only replacements
+      // accounting.reports.read → granular read-only replacements, ONE PER REPORT
+      // TOOL THE SERVER REGISTERS (ENG-10961 follow-on). Bank summary, budget
+      // summary and executive summary were requested here with no tool reading
+      // them: #6463 removed the phantom `report-bank-summary` /
+      // `report-budget-summary` names, and nothing ever called the executive
+      // summary. Asking a customer to consent to read access nothing uses is the
+      // least-privilege failure the granular list exists to avoid. Removing a
+      // default can never raise a reconnect prompt - `computeMissingScopes` only
+      // reports defaults the grant LACKS.
       "accounting.reports.balancesheet.read",
       "accounting.reports.profitandloss.read",
       "accounting.reports.trialbalance.read",
-      "accounting.reports.budgetsummary.read",
-      "accounting.reports.banksummary.read",
-      "accounting.reports.executivesummary.read",
       "accounting.reports.aged.read"
     ],
     // Read-only variant (ENG-6170): the `.read` granular scope for every
@@ -32995,9 +33000,6 @@ var OAUTH_PROVIDERS = {
       "accounting.reports.balancesheet.read",
       "accounting.reports.profitandloss.read",
       "accounting.reports.trialbalance.read",
-      "accounting.reports.budgetsummary.read",
-      "accounting.reports.banksummary.read",
-      "accounting.reports.executivesummary.read",
       "accounting.reports.aged.read"
     ],
     supportsRefresh: true,
@@ -39738,7 +39740,8 @@ function probeTmuxSession(tmuxSession) {
     return "alive";
   } catch (err) {
     const e = err;
-    if (e?.code === "ENOENT") return "unknown";
+    const timedOut = e?.code === "ETIMEDOUT" || e?.error?.code === "ETIMEDOUT";
+    if (e?.code === "ENOENT" || e?.error?.code === "ENOENT" || timedOut) return "unknown";
     return "dead";
   }
 }

package/dist/mcp/index.js

@@ -25548,13 +25548,18 @@ var OAUTH_PROVIDERS = {
       // existing Xero install must RECONNECT for its token to carry this — the
       // broker posts journals with the agent's own OAuth access_token.
       "accounting.manualjournals",
-      // accounting.reports.read → granular read-only replacements
+      // accounting.reports.read → granular read-only replacements, ONE PER REPORT
+      // TOOL THE SERVER REGISTERS (ENG-10961 follow-on). Bank summary, budget
+      // summary and executive summary were requested here with no tool reading
+      // them: #6463 removed the phantom `report-bank-summary` /
+      // `report-budget-summary` names, and nothing ever called the executive
+      // summary. Asking a customer to consent to read access nothing uses is the
+      // least-privilege failure the granular list exists to avoid. Removing a
+      // default can never raise a reconnect prompt - `computeMissingScopes` only
+      // reports defaults the grant LACKS.
       "accounting.reports.balancesheet.read",
       "accounting.reports.profitandloss.read",
       "accounting.reports.trialbalance.read",
-      "accounting.reports.budgetsummary.read",
-      "accounting.reports.banksummary.read",
-      "accounting.reports.executivesummary.read",
       "accounting.reports.aged.read"
     ],
     // Read-only variant (ENG-6170): the `.read` granular scope for every
@@ -25577,9 +25582,6 @@ var OAUTH_PROVIDERS = {
       "accounting.reports.balancesheet.read",
       "accounting.reports.profitandloss.read",
       "accounting.reports.trialbalance.read",
-      "accounting.reports.budgetsummary.read",
-      "accounting.reports.banksummary.read",
-      "accounting.reports.executivesummary.read",
       "accounting.reports.aged.read"
     ],
     supportsRefresh: true,

package/dist/mcp/origami.js

@@ -39699,13 +39699,18 @@ var OAUTH_PROVIDERS = {
       // existing Xero install must RECONNECT for its token to carry this — the
       // broker posts journals with the agent's own OAuth access_token.
       "accounting.manualjournals",
-      // accounting.reports.read → granular read-only replacements
+      // accounting.reports.read → granular read-only replacements, ONE PER REPORT
+      // TOOL THE SERVER REGISTERS (ENG-10961 follow-on). Bank summary, budget
+      // summary and executive summary were requested here with no tool reading
+      // them: #6463 removed the phantom `report-bank-summary` /
+      // `report-budget-summary` names, and nothing ever called the executive
+      // summary. Asking a customer to consent to read access nothing uses is the
+      // least-privilege failure the granular list exists to avoid. Removing a
+      // default can never raise a reconnect prompt - `computeMissingScopes` only
+      // reports defaults the grant LACKS.
       "accounting.reports.balancesheet.read",
       "accounting.reports.profitandloss.read",
       "accounting.reports.trialbalance.read",
-      "accounting.reports.budgetsummary.read",
-      "accounting.reports.banksummary.read",
-      "accounting.reports.executivesummary.read",
       "accounting.reports.aged.read"
     ],
     // Read-only variant (ENG-6170): the `.read` granular scope for every
@@ -39728,9 +39733,6 @@ var OAUTH_PROVIDERS = {
       "accounting.reports.balancesheet.read",
       "accounting.reports.profitandloss.read",
       "accounting.reports.trialbalance.read",
-      "accounting.reports.budgetsummary.read",
-      "accounting.reports.banksummary.read",
-      "accounting.reports.executivesummary.read",
       "accounting.reports.aged.read"
     ],
     supportsRefresh: true,

package/dist/mcp/slack-channel.js

@@ -33916,13 +33916,18 @@ var OAUTH_PROVIDERS = {
       // existing Xero install must RECONNECT for its token to carry this — the
       // broker posts journals with the agent's own OAuth access_token.
       "accounting.manualjournals",
-      // accounting.reports.read → granular read-only replacements
+      // accounting.reports.read → granular read-only replacements, ONE PER REPORT
+      // TOOL THE SERVER REGISTERS (ENG-10961 follow-on). Bank summary, budget
+      // summary and executive summary were requested here with no tool reading
+      // them: #6463 removed the phantom `report-bank-summary` /
+      // `report-budget-summary` names, and nothing ever called the executive
+      // summary. Asking a customer to consent to read access nothing uses is the
+      // least-privilege failure the granular list exists to avoid. Removing a
+      // default can never raise a reconnect prompt - `computeMissingScopes` only
+      // reports defaults the grant LACKS.
       "accounting.reports.balancesheet.read",
       "accounting.reports.profitandloss.read",
       "accounting.reports.trialbalance.read",
-      "accounting.reports.budgetsummary.read",
-      "accounting.reports.banksummary.read",
-      "accounting.reports.executivesummary.read",
       "accounting.reports.aged.read"
     ],
     // Read-only variant (ENG-6170): the `.read` granular scope for every
@@ -33945,9 +33950,6 @@ var OAUTH_PROVIDERS = {
       "accounting.reports.balancesheet.read",
       "accounting.reports.profitandloss.read",
       "accounting.reports.trialbalance.read",
-      "accounting.reports.budgetsummary.read",
-      "accounting.reports.banksummary.read",
-      "accounting.reports.executivesummary.read",
       "accounting.reports.aged.read"
     ],
     supportsRefresh: true,
@@ -40192,7 +40194,8 @@ function probeTmuxSession(tmuxSession) {
     return "alive";
   } catch (err) {
     const e = err;
-    if (e?.code === "ENOENT") return "unknown";
+    const timedOut = e?.code === "ETIMEDOUT" || e?.error?.code === "ETIMEDOUT";
+    if (e?.code === "ENOENT" || e?.error?.code === "ENOENT" || timedOut) return "unknown";
     return "dead";
   }
 }

package/dist/mcp/telegram-channel.js

@@ -34025,13 +34025,18 @@ var OAUTH_PROVIDERS = {
       // existing Xero install must RECONNECT for its token to carry this — the
       // broker posts journals with the agent's own OAuth access_token.
       "accounting.manualjournals",
-      // accounting.reports.read → granular read-only replacements
+      // accounting.reports.read → granular read-only replacements, ONE PER REPORT
+      // TOOL THE SERVER REGISTERS (ENG-10961 follow-on). Bank summary, budget
+      // summary and executive summary were requested here with no tool reading
+      // them: #6463 removed the phantom `report-bank-summary` /
+      // `report-budget-summary` names, and nothing ever called the executive
+      // summary. Asking a customer to consent to read access nothing uses is the
+      // least-privilege failure the granular list exists to avoid. Removing a
+      // default can never raise a reconnect prompt - `computeMissingScopes` only
+      // reports defaults the grant LACKS.
       "accounting.reports.balancesheet.read",
       "accounting.reports.profitandloss.read",
       "accounting.reports.trialbalance.read",
-      "accounting.reports.budgetsummary.read",
-      "accounting.reports.banksummary.read",
-      "accounting.reports.executivesummary.read",
       "accounting.reports.aged.read"
     ],
     // Read-only variant (ENG-6170): the `.read` granular scope for every
@@ -34054,9 +34059,6 @@ var OAUTH_PROVIDERS = {
       "accounting.reports.balancesheet.read",
       "accounting.reports.profitandloss.read",
       "accounting.reports.trialbalance.read",
-      "accounting.reports.budgetsummary.read",
-      "accounting.reports.banksummary.read",
-      "accounting.reports.executivesummary.read",
       "accounting.reports.aged.read"
     ],
     supportsRefresh: true,
@@ -40696,7 +40698,8 @@ function probeTmuxSession(tmuxSession) {
     return "alive";
   } catch (err) {
     const e = err;
-    if (e?.code === "ENOENT") return "unknown";
+    const timedOut = e?.code === "ETIMEDOUT" || e?.error?.code === "ETIMEDOUT";
+    if (e?.code === "ENOENT" || e?.error?.code === "ENOENT" || timedOut) return "unknown";
     return "dead";
   }
 }

package/dist/{persistent-session-ZQDNCKQH.js → persistent-session-3NQHNU6H.js}

@@ -65,8 +65,8 @@ import {
   writeDirectChatSessionState,
   writeEgressAllowlist,
   writePersistentClaudeWrapper
-} from "./chunk-QXJWRE64.js";
-import "./chunk-X7SX25N6.js";
+} from "./chunk-RDQILPRF.js";
+import "./chunk-BHKFVSIX.js";
 import "./chunk-DHWNVVX4.js";
 import "./chunk-XWVM4KPK.js";
 import "./chunk-EL5MWGGH.js";
@@ -139,4 +139,4 @@ export {
   writeEgressAllowlist,
   writePersistentClaudeWrapper
 };
-//# sourceMappingURL=persistent-session-ZQDNCKQH.js.map
+//# sourceMappingURL=persistent-session-3NQHNU6H.js.map

package/dist/{responsiveness-probe-Q27WU2MW.js → responsiveness-probe-ZOXVXDPT.js}

@@ -1,7 +1,7 @@
 import {
   paneLogPath
-} from "./chunk-QXJWRE64.js";
-import "./chunk-X7SX25N6.js";
+} from "./chunk-RDQILPRF.js";
+import "./chunk-BHKFVSIX.js";
 import "./chunk-DHWNVVX4.js";
 import "./chunk-XWVM4KPK.js";
 import "./chunk-EL5MWGGH.js";
@@ -802,4 +802,4 @@ export {
   readAndResetSlackReplyBindingClassifications,
   readAndResetSlackReplyTargetClassifications
 };
-//# sourceMappingURL=responsiveness-probe-Q27WU2MW.js.map
+//# sourceMappingURL=responsiveness-probe-ZOXVXDPT.js.map

package/dist/{session-auth-dead-JJUKS75B.js → session-auth-dead-ZKC2HH6T.js}

@@ -1,6 +1,6 @@
 import {
   sessionTranscriptDir
-} from "./chunk-X7SX25N6.js";
+} from "./chunk-BHKFVSIX.js";
 import "./chunk-DGUM43GV.js";
 
 // src/lib/session-auth-dead.ts
@@ -204,4 +204,4 @@ export {
   decideSessionAuthState,
   probeSessionAuth
 };
-//# sourceMappingURL=session-auth-dead-JJUKS75B.js.map
+//# sourceMappingURL=session-auth-dead-ZKC2HH6T.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@integrity-labs/agt-cli",
-  "version": "0.28.1022",
+  "version": "0.28.1023",
   "description": "Augmented Team CLI — agent provisioning and management",
   "type": "module",
   "engines": {