@integrity-labs/agt-cli 0.28.1084 → 0.28.1086

package/dist/mcp/xero.js

@@ -114339,9 +114339,17 @@ function ensureError(value) {
 }
 
 // src/helpers/pick-tenant-id.ts
-function pickTenantId(tenants, desired) {
+var UNEXPANDED_PLACEHOLDER = /^\$\{[^}]*\}$/;
+function normaliseDesiredTenant(raw) {
+  if (typeof raw !== "string") return void 0;
+  const trimmed = raw.trim();
+  if (trimmed === "" || UNEXPANDED_PLACEHOLDER.test(trimmed)) return void 0;
+  return trimmed;
+}
+function pickTenantId(tenants, rawDesired) {
+  const desired = normaliseDesiredTenant(rawDesired);
   if (!desired) {
-    return tenants[0]?.tenantId ?? "";
+    return tenants.length === 1 ? tenants[0].tenantId : "";
   }
   const match = tenants.find((t) => t.tenantId === desired);
   if (!match) {
@@ -114363,6 +114371,49 @@ function currentCallTenant() {
   return store.getStore()?.tenantId;
 }
 
+// src/helpers/resolve-call-tenant.ts
+function describe(allowed) {
+  return allowed.map((t) => t.tenantName ? `${t.tenantName} (${t.tenantId})` : t.tenantId).join(", ");
+}
+function resolveCallTenant(allowed, requested) {
+  const wanted = typeof requested === "string" ? requested.trim() : "";
+  if (allowed !== null && allowed.length === 0) {
+    return {
+      ok: false,
+      message: "This agent has no Xero organisations selected, so no Xero call can run. Ask an admin to choose the organisations for this integration."
+    };
+  }
+  if (allowed === null) {
+    if (wanted) {
+      return {
+        ok: false,
+        message: `tenant_id ${wanted} cannot be used: this Xero connection has no organisation list to check it against.`
+      };
+    }
+    return { ok: true, tenantId: void 0 };
+  }
+  if (wanted) {
+    if (allowed.some((t) => t.tenantId === wanted)) return { ok: true, tenantId: wanted };
+    return {
+      ok: false,
+      message: `tenant_id ${wanted} is not one of the Xero organisations this agent may use: ${describe(allowed)}.`
+    };
+  }
+  if (allowed.length === 1) return { ok: true, tenantId: allowed[0].tenantId };
+  return {
+    ok: false,
+    message: `This agent can use more than one Xero organisation, so pass tenant_id. Allowed: ${describe(allowed)}. Call list-organisations to see them.`
+  };
+}
+function fallbackAllowedTenants(pinnedTenantId, tokenTenants) {
+  const fromToken = tokenTenants.filter((t) => typeof t?.tenantId === "string" && t.tenantId !== "").map((t) => ({ tenantId: t.tenantId, tenantName: typeof t.tenantName === "string" ? t.tenantName : null }));
+  if (pinnedTenantId) {
+    const match = fromToken.find((t) => t.tenantId === pinnedTenantId);
+    return [{ tenantId: pinnedTenantId, tenantName: match?.tenantName ?? null }];
+  }
+  return fromToken;
+}
+
 // src/clients/broker-credential-client.ts
 function makeError(status, message, needsReauth = false) {
   const err = new Error(message);
@@ -114541,6 +114592,15 @@ var MCPXeroClient = class extends import_xero_node.XeroClient {
    *          despite the operator allowing nothing.
    */
   allowedTenants = null;
+  /**
+   * CS-1944 (Obi Wan on #6802): the organisations this token carries, for
+   * clients that learn them WITHOUT going through xero-node's updateTenants()
+   * (whose `tenants` is a read-only getter here). Custom Connections read
+   * /connections directly, so without this the unpinned multi-organisation
+   * fallback saw an empty list and refused every call, explicit tenant_id
+   * included.
+   */
+  tokenTenants = null;
   constructor(config2) {
     super(config2);
   }
@@ -114561,9 +114621,7 @@ var MCPXeroClient = class extends import_xero_node.XeroClient {
   async getAllowedTenants() {
     await this.authenticate();
     if (this.allowedTenants !== null) return this.allowedTenants;
-    if (!this.pinnedTenantId) return [];
-    const match = (this.tenants ?? []).find((t) => t?.tenantId === this.pinnedTenantId);
-    return [{ tenantId: this.pinnedTenantId, tenantName: match?.tenantName ?? null }];
+    return fallbackAllowedTenants(this.pinnedTenantId, this.tokenTenants ?? this.tenants ?? []);
   }
   // eslint-disable-next-line @typescript-eslint/no-explicit-any
   async updateTenants(fullOrgDetails) {
@@ -114687,12 +114745,9 @@ var CustomConnectionsXeroClient = class extends MCPXeroClient {
         }
       }
     );
-    if (connectionsResponse.data && connectionsResponse.data.length > 0) {
-      this.tenantId = pickTenantId(
-        connectionsResponse.data,
-        process.env.XERO_TENANT_ID
-      );
-    }
+    const connections = Array.isArray(connectionsResponse.data) ? connectionsResponse.data : [];
+    this.tokenTenants = connections;
+    this.tenantId = pickTenantId(connections, process.env.XERO_TENANT_ID);
     return response.data;
   }
   async authenticate() {
@@ -120917,12 +120972,14 @@ var ListOrganisationsTool = CreateXeroTool(
           isError: true
         };
       }
+      const single = allowed.length === 1;
       const lines = allowed.map(
-        (t, i) => `${i + 1}. ${t.tenantName ?? "(name unknown)"} - tenant_id: ${t.tenantId}${i === 0 ? " (default)" : ""}`
+        (t, i) => `${i + 1}. ${t.tenantName ?? "(name unknown)"} - tenant_id: ${t.tenantId}${single ? " (default)" : ""}`
       );
+      const footer = single ? "" : "\nThere is no default: pass tenant_id on every Xero call to choose one of these.";
       return {
         content: [{ type: "text", text: `Xero organisations this agent may use:
-${lines.join("\n")}` }]
+${lines.join("\n")}${footer}` }]
       };
     } catch (error2) {
       return {
@@ -120934,41 +120991,6 @@ ${lines.join("\n")}` }]
 );
 var list_organisations_tool_default = ListOrganisationsTool;
 
-// src/helpers/resolve-call-tenant.ts
-function describe(allowed) {
-  return allowed.map((t) => t.tenantName ? `${t.tenantName} (${t.tenantId})` : t.tenantId).join(", ");
-}
-function resolveCallTenant(allowed, requested) {
-  const wanted = typeof requested === "string" ? requested.trim() : "";
-  if (allowed !== null && allowed.length === 0) {
-    return {
-      ok: false,
-      message: "This agent has no Xero organisations selected, so no Xero call can run. Ask an admin to choose the organisations for this integration."
-    };
-  }
-  if (allowed === null) {
-    if (wanted) {
-      return {
-        ok: false,
-        message: `tenant_id ${wanted} cannot be used: this Xero connection has no organisation list to check it against.`
-      };
-    }
-    return { ok: true, tenantId: void 0 };
-  }
-  if (wanted) {
-    if (allowed.some((t) => t.tenantId === wanted)) return { ok: true, tenantId: wanted };
-    return {
-      ok: false,
-      message: `tenant_id ${wanted} is not one of the Xero organisations this agent may use: ${describe(allowed)}.`
-    };
-  }
-  if (allowed.length === 1) return { ok: true, tenantId: allowed[0].tenantId };
-  return {
-    ok: false,
-    message: `This agent can use more than one Xero organisation, so pass tenant_id. Allowed: ${describe(allowed)}. Call list-organisations to see them.`
-  };
-}
-
 // src/tools/tenant-scope.ts
 var TENANT_ID_ARG_DESCRIPTION = "Optional. The Xero organisation id (tenant) to use. Needed only when this agent can use more than one Xero organisation; call list-organisations to see them. Defaults to the only allowed organisation.";
 function errorResult(text) {

package/dist/{persistent-session-35BXCGHB.js → persistent-session-V2TJ6HPL.js}

@@ -68,8 +68,8 @@ import {
   writeDirectChatSessionState,
   writeEgressAllowlist,
   writePersistentClaudeWrapper
-} from "./chunk-XJ4JK4C7.js";
-import "./chunk-NEGFSB2W.js";
+} from "./chunk-672WJ7K3.js";
+import "./chunk-36PNRFZD.js";
 import "./chunk-OCMJ5E6J.js";
 import "./chunk-XWVM4KPK.js";
 import "./chunk-EL5MWGGH.js";
@@ -145,4 +145,4 @@ export {
   writeEgressAllowlist,
   writePersistentClaudeWrapper
 };
-//# sourceMappingURL=persistent-session-35BXCGHB.js.map
+//# sourceMappingURL=persistent-session-V2TJ6HPL.js.map

package/dist/{responsiveness-probe-VDL3QULE.js → responsiveness-probe-2JSH5Y3H.js}

@@ -1,7 +1,7 @@
 import {
   paneLogPath
-} from "./chunk-XJ4JK4C7.js";
-import "./chunk-NEGFSB2W.js";
+} from "./chunk-672WJ7K3.js";
+import "./chunk-36PNRFZD.js";
 import "./chunk-OCMJ5E6J.js";
 import "./chunk-XWVM4KPK.js";
 import "./chunk-EL5MWGGH.js";
@@ -802,4 +802,4 @@ export {
   readAndResetSlackReplyBindingClassifications,
   readAndResetSlackReplyTargetClassifications
 };
-//# sourceMappingURL=responsiveness-probe-VDL3QULE.js.map
+//# sourceMappingURL=responsiveness-probe-2JSH5Y3H.js.map

package/dist/{session-auth-dead-L7ZD5ZZO.js → session-auth-dead-WUMWF4GK.js}

@@ -1,6 +1,6 @@
 import {
   sessionTranscriptDir
-} from "./chunk-NEGFSB2W.js";
+} from "./chunk-36PNRFZD.js";
 import "./chunk-DGUM43GV.js";
 
 // src/lib/session-auth-dead.ts
@@ -204,4 +204,4 @@ export {
   decideSessionAuthState,
   probeSessionAuth
 };
-//# sourceMappingURL=session-auth-dead-L7ZD5ZZO.js.map
+//# sourceMappingURL=session-auth-dead-WUMWF4GK.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@integrity-labs/agt-cli",
-  "version": "0.28.1084",
+  "version": "0.28.1086",
   "description": "Augmented Team CLI — agent provisioning and management",
   "type": "module",
   "engines": {