@integrity-labs/agt-cli 0.28.1032 → 0.28.1034

package/dist/mcp/direct-chat-channel.js

@@ -32945,7 +32945,17 @@ var OAUTH_PROVIDERS = {
       // do NOT revert to the broad `accounting.transactions` /
       // `accounting.contacts` scopes, Xero rejects the manifest).
       // The variant *without* `.read` is the read+write granular scope.
-      "accounting.settings.read",
+      // settings: write (CS-1829) enables the xero-broker to create and edit
+      // inventory ITEMS on approval. Xero files the Items endpoint under
+      // accounting.settings (per Xero's own OpenAPI spec, XeroAPI/Xero-OpenAPI
+      // xero_accounting.yaml: PUT/POST /Items require `accounting.settings`,
+      // GET accepts `.read`), and there is no narrower items scope. The same
+      // scope also covers accounts, tax rates and tracking categories; the
+      // vendor server's write tools for those stay stripped in broker mode
+      // (XERO_WRITES_VIA_BROKER), so the broker remains the only write path.
+      // An existing install must RECONNECT for its token to carry this, same as
+      // CS-1439's manualjournals.
+      "accounting.settings",
       // contacts: write enables agent-driven supplier/customer creation
       // (required for bill creation since a bill must reference a contact).
       "accounting.contacts",

package/dist/mcp/index.js

@@ -25527,7 +25527,17 @@ var OAUTH_PROVIDERS = {
       // do NOT revert to the broad `accounting.transactions` /
       // `accounting.contacts` scopes, Xero rejects the manifest).
       // The variant *without* `.read` is the read+write granular scope.
-      "accounting.settings.read",
+      // settings: write (CS-1829) enables the xero-broker to create and edit
+      // inventory ITEMS on approval. Xero files the Items endpoint under
+      // accounting.settings (per Xero's own OpenAPI spec, XeroAPI/Xero-OpenAPI
+      // xero_accounting.yaml: PUT/POST /Items require `accounting.settings`,
+      // GET accepts `.read`), and there is no narrower items scope. The same
+      // scope also covers accounts, tax rates and tracking categories; the
+      // vendor server's write tools for those stay stripped in broker mode
+      // (XERO_WRITES_VIA_BROKER), so the broker remains the only write path.
+      // An existing install must RECONNECT for its token to carry this, same as
+      // CS-1439's manualjournals.
+      "accounting.settings",
       // contacts: write enables agent-driven supplier/customer creation
       // (required for bill creation since a bill must reference a contact).
       "accounting.contacts",

package/dist/mcp/origami.js

@@ -39678,7 +39678,17 @@ var OAUTH_PROVIDERS = {
       // do NOT revert to the broad `accounting.transactions` /
       // `accounting.contacts` scopes, Xero rejects the manifest).
       // The variant *without* `.read` is the read+write granular scope.
-      "accounting.settings.read",
+      // settings: write (CS-1829) enables the xero-broker to create and edit
+      // inventory ITEMS on approval. Xero files the Items endpoint under
+      // accounting.settings (per Xero's own OpenAPI spec, XeroAPI/Xero-OpenAPI
+      // xero_accounting.yaml: PUT/POST /Items require `accounting.settings`,
+      // GET accepts `.read`), and there is no narrower items scope. The same
+      // scope also covers accounts, tax rates and tracking categories; the
+      // vendor server's write tools for those stay stripped in broker mode
+      // (XERO_WRITES_VIA_BROKER), so the broker remains the only write path.
+      // An existing install must RECONNECT for its token to carry this, same as
+      // CS-1439's manualjournals.
+      "accounting.settings",
       // contacts: write enables agent-driven supplier/customer creation
       // (required for bill creation since a bill must reference a contact).
       "accounting.contacts",

package/dist/mcp/slack-channel.js

@@ -33895,7 +33895,17 @@ var OAUTH_PROVIDERS = {
       // do NOT revert to the broad `accounting.transactions` /
       // `accounting.contacts` scopes, Xero rejects the manifest).
       // The variant *without* `.read` is the read+write granular scope.
-      "accounting.settings.read",
+      // settings: write (CS-1829) enables the xero-broker to create and edit
+      // inventory ITEMS on approval. Xero files the Items endpoint under
+      // accounting.settings (per Xero's own OpenAPI spec, XeroAPI/Xero-OpenAPI
+      // xero_accounting.yaml: PUT/POST /Items require `accounting.settings`,
+      // GET accepts `.read`), and there is no narrower items scope. The same
+      // scope also covers accounts, tax rates and tracking categories; the
+      // vendor server's write tools for those stay stripped in broker mode
+      // (XERO_WRITES_VIA_BROKER), so the broker remains the only write path.
+      // An existing install must RECONNECT for its token to carry this, same as
+      // CS-1439's manualjournals.
+      "accounting.settings",
       // contacts: write enables agent-driven supplier/customer creation
       // (required for bill creation since a bill must reference a contact).
       "accounting.contacts",

package/dist/mcp/telegram-channel.js

@@ -34007,7 +34007,17 @@ var OAUTH_PROVIDERS = {
       // do NOT revert to the broad `accounting.transactions` /
       // `accounting.contacts` scopes, Xero rejects the manifest).
       // The variant *without* `.read` is the read+write granular scope.
-      "accounting.settings.read",
+      // settings: write (CS-1829) enables the xero-broker to create and edit
+      // inventory ITEMS on approval. Xero files the Items endpoint under
+      // accounting.settings (per Xero's own OpenAPI spec, XeroAPI/Xero-OpenAPI
+      // xero_accounting.yaml: PUT/POST /Items require `accounting.settings`,
+      // GET accepts `.read`), and there is no narrower items scope. The same
+      // scope also covers accounts, tax rates and tracking categories; the
+      // vendor server's write tools for those stay stripped in broker mode
+      // (XERO_WRITES_VIA_BROKER), so the broker remains the only write path.
+      // An existing install must RECONNECT for its token to carry this, same as
+      // CS-1439's manualjournals.
+      "accounting.settings",
       // contacts: write enables agent-driven supplier/customer creation
       // (required for bill creation since a bill must reference a contact).
       "accounting.contacts",

package/dist/mcp/xero.js

@@ -117492,7 +117492,8 @@ var ListInvoicesTool = CreateXeroTool(
 var list_invoices_tool_default = ListInvoicesTool;
 
 // src/handlers/list-xero-items.handler.ts
-async function getItems(page) {
+var UNIT_DECIMAL_PLACES = 4;
+async function getItems() {
   await xeroClient.authenticate();
   const items = await xeroClient.accountingApi.getItems(
     xeroClient.tenantId,
@@ -117502,15 +117503,15 @@ async function getItems(page) {
     // where
     void 0,
     // order
-    page,
-    // page
+    UNIT_DECIMAL_PLACES,
+    // unitdp - NOT a page number; this endpoint does not paginate
     getClientHeaders()
   );
   return items.body.items ?? [];
 }
-async function listXeroItems(page = 1) {
+async function listXeroItems() {
   try {
-    const items = await getItems(page);
+    const items = await getItems();
     return {
       result: items,
       isError: false,
@@ -117528,12 +117529,14 @@ async function listXeroItems(page = 1) {
 // src/tools/list/list-items.tool.ts
 var ListItemsTool = CreateXeroTool(
   "list-items",
-  "Lists all items in Xero. Use this tool to get the item codes and descriptions to be used when creating invoices in Xero",
+  "Lists every item in the Xero catalogue in ONE call (Xero does not paginate items, so there is no page to request). Use it to get the item codes, descriptions and prices to use on invoice and bill lines. For items tracked as inventory it also returns Quantity On Hand and Total Cost Pool, so check Quantity On Hand before invoicing a tracked item. Note: Xero's API does not expose whether an item is archived, so an archived item can still appear here.",
   {
-    page: external_exports.number()
+    // Kept, and optional, so an agent that still sends `page` is not refused by
+    // the schema. It is IGNORED: Xero returns the whole catalogue regardless.
+    page: external_exports.number().optional().describe("Ignored. Xero returns the whole item catalogue in one response; there are no pages.")
   },
-  async ({ page }) => {
-    const response = await listXeroItems(page);
+  async () => {
+    const response = await listXeroItems();
     if (response.isError) {
       return {
         content: [
@@ -117564,6 +117567,14 @@ var ListItemsTool = CreateXeroTool(
             item.salesDetails?.accountCode ? `Sales Account: ${item.salesDetails.accountCode}` : null,
             item.purchaseDetails?.accountCode ? `Purchase Account: ${item.purchaseDetails.accountCode}` : null,
             item.isTrackedAsInventory !== void 0 ? `Tracked as Inventory: ${item.isTrackedAsInventory ? "Yes" : "No"}` : null,
+            // CS-1829: stock is only meaningful on a tracked item. Xero reports
+            // 0 rather than omitting the field on an untracked one, and
+            // "Quantity On Hand: 0" beside a service item reads as "out of
+            // stock", which is a different and wrong claim.
+            item.isTrackedAsInventory && item.quantityOnHand !== void 0 ? `Quantity On Hand: ${item.quantityOnHand}` : null,
+            item.isTrackedAsInventory && item.totalCostPool !== void 0 ? `Total Cost Pool: ${item.totalCostPool}` : null,
+            item.isTrackedAsInventory && item.inventoryAssetAccountCode ? `Inventory Asset Account: ${item.inventoryAssetAccountCode}` : null,
+            item.purchaseDetails?.cOGSAccountCode ? `COGS Account: ${item.purchaseDetails.cOGSAccountCode}` : null,
             item.isSold !== void 0 ? `Is Sold: ${item.isSold ? "Yes" : "No"}` : null,
             item.isPurchased !== void 0 ? `Is Purchased: ${item.isPurchased ? "Yes" : "No"}` : null,
             item.updatedDateUTC ? `Last Updated: ${item.updatedDateUTC}` : null,

package/dist/{persistent-session-TOIMQIAU.js → persistent-session-MUY7PVLJ.js}

@@ -65,8 +65,8 @@ import {
   writeDirectChatSessionState,
   writeEgressAllowlist,
   writePersistentClaudeWrapper
-} from "./chunk-GLOCISGD.js";
-import "./chunk-NCIGLRCL.js";
+} from "./chunk-V74YKGXU.js";
+import "./chunk-H54FYWAK.js";
 import "./chunk-TQDIIS3X.js";
 import "./chunk-XWVM4KPK.js";
 import "./chunk-EL5MWGGH.js";
@@ -139,4 +139,4 @@ export {
   writeEgressAllowlist,
   writePersistentClaudeWrapper
 };
-//# sourceMappingURL=persistent-session-TOIMQIAU.js.map
+//# sourceMappingURL=persistent-session-MUY7PVLJ.js.map

package/dist/{responsiveness-probe-VJOXOK66.js → responsiveness-probe-MPL5PM33.js}

@@ -1,7 +1,7 @@
 import {
   paneLogPath
-} from "./chunk-GLOCISGD.js";
-import "./chunk-NCIGLRCL.js";
+} from "./chunk-V74YKGXU.js";
+import "./chunk-H54FYWAK.js";
 import "./chunk-TQDIIS3X.js";
 import "./chunk-XWVM4KPK.js";
 import "./chunk-EL5MWGGH.js";
@@ -802,4 +802,4 @@ export {
   readAndResetSlackReplyBindingClassifications,
   readAndResetSlackReplyTargetClassifications
 };
-//# sourceMappingURL=responsiveness-probe-VJOXOK66.js.map
+//# sourceMappingURL=responsiveness-probe-MPL5PM33.js.map

package/dist/{session-auth-dead-T5EZNDRO.js → session-auth-dead-5ECPRU2V.js}

@@ -1,6 +1,6 @@
 import {
   sessionTranscriptDir
-} from "./chunk-NCIGLRCL.js";
+} from "./chunk-H54FYWAK.js";
 import "./chunk-DGUM43GV.js";
 
 // src/lib/session-auth-dead.ts
@@ -204,4 +204,4 @@ export {
   decideSessionAuthState,
   probeSessionAuth
 };
-//# sourceMappingURL=session-auth-dead-T5EZNDRO.js.map
+//# sourceMappingURL=session-auth-dead-5ECPRU2V.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@integrity-labs/agt-cli",
-  "version": "0.28.1032",
+  "version": "0.28.1034",
   "description": "Augmented Team CLI — agent provisioning and management",
   "type": "module",
   "engines": {