@integrity-labs/agt-cli 0.28.1031 → 0.28.1033

package/dist/bin/agt.js

@@ -40,12 +40,12 @@ import {
   success,
   table,
   warn
-} from "../chunk-HQSQLPHD.js";
+} from "../chunk-OOTJBM4Z.js";
 import {
   getProjectDir,
   isSessionResumeDisabled,
   readDirectChatSessionState
-} from "../chunk-XD5GMJGJ.js";
+} from "../chunk-X2YAGXVQ.js";
 import {
   AnchorSessionClient,
   CHANNEL_REGISTRY,
@@ -79,7 +79,7 @@ import {
   serializeManifestForSlackCli,
   sessionFileExists,
   sessionTranscriptDir
-} from "../chunk-TFFXAGBJ.js";
+} from "../chunk-XP4TNPGF.js";
 import "../chunk-TQDIIS3X.js";
 import "../chunk-XWVM4KPK.js";
 import "../chunk-EL5MWGGH.js";
@@ -5474,7 +5474,7 @@ import { execFileSync, execSync } from "child_process";
 import { existsSync as existsSync11, realpathSync as realpathSync2 } from "fs";
 import chalk18 from "chalk";
 import ora16 from "ora";
-var cliVersion = true ? "0.28.1031" : "dev";
+var cliVersion = true ? "0.28.1033" : "dev";
 async function fetchLatestVersion() {
   const host2 = getHost();
   if (!host2) return null;
@@ -6734,7 +6734,7 @@ function handleError(err) {
 }
 
 // src/bin/agt.ts
-var cliVersion2 = true ? "0.28.1031" : "dev";
+var cliVersion2 = true ? "0.28.1033" : "dev";
 var program = new Command();
 program.name("agt").description("Augmented CLI \u2014 agent provisioning and management").version(cliVersion2).option("--json", "Emit machine-readable JSON output (suppress spinners and colors)").option("--skip-update-check", "Skip the automatic update check on startup");
 program.hook("preAction", async (thisCommand, actionCommand) => {

package/dist/{chunk-HQSQLPHD.js → chunk-OOTJBM4Z.js}

@@ -15,7 +15,7 @@ import {
   parseEnvFileEntries,
   parseEnvIntegrations,
   shellQuote
-} from "./chunk-XD5GMJGJ.js";
+} from "./chunk-X2YAGXVQ.js";
 import {
   BIND_FAILURE_QUARANTINE_THRESHOLD,
   INTEGRATIONS_SECTION_END,
@@ -77,7 +77,7 @@ import {
   sessionTranscriptDir,
   worseConnectivityOutcome,
   wrapScheduledTaskPrompt
-} from "./chunk-TFFXAGBJ.js";
+} from "./chunk-XP4TNPGF.js";
 import {
   classifyUnanswerablePane,
   isConsumerTermsDialogVisible,
@@ -7143,7 +7143,7 @@ function exchangeFailureKind(err) {
 }
 
 // src/lib/api-client.ts
-var agtCliVersion = true ? "0.28.1031" : "dev";
+var agtCliVersion = true ? "0.28.1033" : "dev";
 var lastConfigHash = null;
 function setConfigHash(hash) {
   lastConfigHash = hash && hash.length > 0 ? hash : null;
@@ -12100,4 +12100,4 @@ export {
   managerInstallSystemUnitCommand,
   managerUninstallSystemUnitCommand
 };
-//# sourceMappingURL=chunk-HQSQLPHD.js.map
+//# sourceMappingURL=chunk-OOTJBM4Z.js.map

package/dist/{chunk-XD5GMJGJ.js → chunk-X2YAGXVQ.js}

@@ -23,7 +23,7 @@ import {
   rotateDailySession,
   sessionFileExists,
   todayLocalIso
-} from "./chunk-TFFXAGBJ.js";
+} from "./chunk-XP4TNPGF.js";
 import {
   classifyUnanswerablePane,
   findUsageLimitResetHint,
@@ -5930,4 +5930,4 @@ export {
   stopAllSessionsAndWait,
   getProjectDir
 };
-//# sourceMappingURL=chunk-XD5GMJGJ.js.map
+//# sourceMappingURL=chunk-X2YAGXVQ.js.map

package/dist/{chunk-TFFXAGBJ.js → chunk-XP4TNPGF.js}

@@ -7068,6 +7068,22 @@ var FLAG_REGISTRY = [
     public: true,
     defaultValue: false
   },
+  {
+    key: "ninja-lists",
+    description: 'Ninja Lists (ADR-0120): small tables agents and people fill and review together. Gates the "Lists" nav item, the /lists pages AND the /ninja-sheets API, per org. Unlike its siblings `projects-menu` / `ninjafy-notes-menu`, this is the whole feature\'s gate, not only its menu entry: the surface is unlaunched, so an org with the flag off gets 404 from the API rather than a hidden link to a working one.',
+    flagType: "boolean",
+    // PUBLIC (ADR-0022 §2): the nav shells read it via usePublicBooleanFlag and
+    // the pages via getPublicBooleanFlagServer, so it is serialized to the
+    // client via GET /flags. The API evaluates it through getFlagClient() and
+    // fails CLOSED on a read error. No env override (UI rollout, not an
+    // operator gate). Ships dark (default false).
+    public: true,
+    defaultValue: false,
+    // Until ADR-0120's access control exists, any member of an enabled org
+    // reads every list in it, so an org admin must not be able to switch this
+    // on for their own org. Only a platform admin can (PR #6522 review).
+    platformAdminOnly: true
+  },
   {
     key: "platform-maintenance-mode",
     description: 'Platform-wide maintenance mode (ENG-6506): when on, every agent across every team/org auto-replies to admitted human inbound with a "we are offline for maintenance" notice instead of dispatching to the agent \u2014 for whole-platform downtime such as DB upgrades. Read host-side per inbound from the flags cache (no MCP restart). Boolean gate; ships dark \u2014 when off, channels behave exactly as today. (Proactive "back online" follow-up is the ENG-6508 fast-follow, not this flag.)',
@@ -11177,7 +11193,17 @@ var OAUTH_PROVIDERS = {
       // do NOT revert to the broad `accounting.transactions` /
       // `accounting.contacts` scopes, Xero rejects the manifest).
       // The variant *without* `.read` is the read+write granular scope.
-      "accounting.settings.read",
+      // settings: write (CS-1829) enables the xero-broker to create and edit
+      // inventory ITEMS on approval. Xero files the Items endpoint under
+      // accounting.settings (per Xero's own OpenAPI spec, XeroAPI/Xero-OpenAPI
+      // xero_accounting.yaml: PUT/POST /Items require `accounting.settings`,
+      // GET accepts `.read`), and there is no narrower items scope. The same
+      // scope also covers accounts, tax rates and tracking categories; the
+      // vendor server's write tools for those stay stripped in broker mode
+      // (XERO_WRITES_VIA_BROKER), so the broker remains the only write path.
+      // An existing install must RECONNECT for its token to carry this, same as
+      // CS-1439's manualjournals.
+      "accounting.settings",
       // contacts: write enables agent-driven supplier/customer creation
       // (required for bill creation since a bill must reference a contact).
       "accounting.contacts",
@@ -15550,4 +15576,4 @@ export {
   peekCurrentSession,
   readDailySessionPin
 };
-//# sourceMappingURL=chunk-TFFXAGBJ.js.map
+//# sourceMappingURL=chunk-XP4TNPGF.js.map