@integrity-labs/agt-cli 0.28.1022 → 0.28.1024

package/dist/{chunk-X7SX25N6.js → chunk-BHKFVSIX.js}

@@ -11129,13 +11129,18 @@ var OAUTH_PROVIDERS = {
       // existing Xero install must RECONNECT for its token to carry this — the
       // broker posts journals with the agent's own OAuth access_token.
       "accounting.manualjournals",
-      // accounting.reports.read → granular read-only replacements
+      // accounting.reports.read → granular read-only replacements, ONE PER REPORT
+      // TOOL THE SERVER REGISTERS (ENG-10961 follow-on). Bank summary, budget
+      // summary and executive summary were requested here with no tool reading
+      // them: #6463 removed the phantom `report-bank-summary` /
+      // `report-budget-summary` names, and nothing ever called the executive
+      // summary. Asking a customer to consent to read access nothing uses is the
+      // least-privilege failure the granular list exists to avoid. Removing a
+      // default can never raise a reconnect prompt - `computeMissingScopes` only
+      // reports defaults the grant LACKS.
       "accounting.reports.balancesheet.read",
       "accounting.reports.profitandloss.read",
       "accounting.reports.trialbalance.read",
-      "accounting.reports.budgetsummary.read",
-      "accounting.reports.banksummary.read",
-      "accounting.reports.executivesummary.read",
       "accounting.reports.aged.read"
     ],
     // Read-only variant (ENG-6170): the `.read` granular scope for every
@@ -11158,9 +11163,6 @@ var OAUTH_PROVIDERS = {
       "accounting.reports.balancesheet.read",
       "accounting.reports.profitandloss.read",
       "accounting.reports.trialbalance.read",
-      "accounting.reports.budgetsummary.read",
-      "accounting.reports.banksummary.read",
-      "accounting.reports.executivesummary.read",
       "accounting.reports.aged.read"
     ],
     supportsRefresh: true,
@@ -15479,4 +15481,4 @@ export {
   peekCurrentSession,
   readDailySessionPin
 };
-//# sourceMappingURL=chunk-X7SX25N6.js.map
+//# sourceMappingURL=chunk-BHKFVSIX.js.map