@integrity-labs/agt-cli 0.28.1085 → 0.28.1086

package/dist/bin/agt.js

@@ -40,7 +40,7 @@ import {
   success,
   table,
   warn
-} from "../chunk-QJHOJMYV.js";
+} from "../chunk-IGW25UXZ.js";
 import {
   getProjectDir,
   isSessionResumeDisabled,
@@ -5474,7 +5474,7 @@ import { execFileSync, execSync } from "child_process";
 import { existsSync as existsSync11, realpathSync as realpathSync2 } from "fs";
 import chalk18 from "chalk";
 import ora16 from "ora";
-var cliVersion = true ? "0.28.1085" : "dev";
+var cliVersion = true ? "0.28.1086" : "dev";
 async function fetchLatestVersion() {
   const host2 = getHost();
   if (!host2) return null;
@@ -6734,7 +6734,7 @@ function handleError(err) {
 }
 
 // src/bin/agt.ts
-var cliVersion2 = true ? "0.28.1085" : "dev";
+var cliVersion2 = true ? "0.28.1086" : "dev";
 var program = new Command();
 program.name("agt").description("Augmented CLI \u2014 agent provisioning and management").version(cliVersion2).option("--json", "Emit machine-readable JSON output (suppress spinners and colors)").option("--skip-update-check", "Skip the automatic update check on startup");
 program.hook("preAction", async (thisCommand, actionCommand) => {

package/dist/{chunk-QJHOJMYV.js → chunk-IGW25UXZ.js}

@@ -7122,7 +7122,7 @@ function exchangeFailureKind(err) {
 }
 
 // src/lib/api-client.ts
-var agtCliVersion = true ? "0.28.1085" : "dev";
+var agtCliVersion = true ? "0.28.1086" : "dev";
 var lastConfigHash = null;
 function setConfigHash(hash) {
   lastConfigHash = hash && hash.length > 0 ? hash : null;
@@ -12095,4 +12095,4 @@ export {
   managerInstallSystemUnitCommand,
   managerUninstallSystemUnitCommand
 };
-//# sourceMappingURL=chunk-QJHOJMYV.js.map
+//# sourceMappingURL=chunk-IGW25UXZ.js.map

package/dist/lib/manager-worker.js

@@ -67,7 +67,7 @@ import {
   safeWriteJsonAtomic,
   setConfigHash,
   tripClass
-} from "../chunk-QJHOJMYV.js";
+} from "../chunk-IGW25UXZ.js";
 import {
   getProjectDir as getProjectDir2,
   getReadyTasks,
@@ -14900,7 +14900,7 @@ var agentRestartTimezoneInputs = /* @__PURE__ */ new Map();
 var lastVersionCheckAt = 0;
 var VERSION_CHECK_INTERVAL_MS = 5 * 60 * 1e3;
 var lastResponsivenessProbeAt = 0;
-var agtCliVersion = true ? "0.28.1085" : "dev";
+var agtCliVersion = true ? "0.28.1086" : "dev";
 function resolveBrewPath(execFileSync3) {
   try {
     const out = execFileSync3("which", ["brew"], { timeout: 5e3 }).toString().trim();

package/dist/mcp/xero.js

@@ -114339,9 +114339,17 @@ function ensureError(value) {
 }
 
 // src/helpers/pick-tenant-id.ts
-function pickTenantId(tenants, desired) {
+var UNEXPANDED_PLACEHOLDER = /^\$\{[^}]*\}$/;
+function normaliseDesiredTenant(raw) {
+  if (typeof raw !== "string") return void 0;
+  const trimmed = raw.trim();
+  if (trimmed === "" || UNEXPANDED_PLACEHOLDER.test(trimmed)) return void 0;
+  return trimmed;
+}
+function pickTenantId(tenants, rawDesired) {
+  const desired = normaliseDesiredTenant(rawDesired);
   if (!desired) {
-    return tenants[0]?.tenantId ?? "";
+    return tenants.length === 1 ? tenants[0].tenantId : "";
   }
   const match = tenants.find((t) => t.tenantId === desired);
   if (!match) {
@@ -114363,6 +114371,49 @@ function currentCallTenant() {
   return store.getStore()?.tenantId;
 }
 
+// src/helpers/resolve-call-tenant.ts
+function describe(allowed) {
+  return allowed.map((t) => t.tenantName ? `${t.tenantName} (${t.tenantId})` : t.tenantId).join(", ");
+}
+function resolveCallTenant(allowed, requested) {
+  const wanted = typeof requested === "string" ? requested.trim() : "";
+  if (allowed !== null && allowed.length === 0) {
+    return {
+      ok: false,
+      message: "This agent has no Xero organisations selected, so no Xero call can run. Ask an admin to choose the organisations for this integration."
+    };
+  }
+  if (allowed === null) {
+    if (wanted) {
+      return {
+        ok: false,
+        message: `tenant_id ${wanted} cannot be used: this Xero connection has no organisation list to check it against.`
+      };
+    }
+    return { ok: true, tenantId: void 0 };
+  }
+  if (wanted) {
+    if (allowed.some((t) => t.tenantId === wanted)) return { ok: true, tenantId: wanted };
+    return {
+      ok: false,
+      message: `tenant_id ${wanted} is not one of the Xero organisations this agent may use: ${describe(allowed)}.`
+    };
+  }
+  if (allowed.length === 1) return { ok: true, tenantId: allowed[0].tenantId };
+  return {
+    ok: false,
+    message: `This agent can use more than one Xero organisation, so pass tenant_id. Allowed: ${describe(allowed)}. Call list-organisations to see them.`
+  };
+}
+function fallbackAllowedTenants(pinnedTenantId, tokenTenants) {
+  const fromToken = tokenTenants.filter((t) => typeof t?.tenantId === "string" && t.tenantId !== "").map((t) => ({ tenantId: t.tenantId, tenantName: typeof t.tenantName === "string" ? t.tenantName : null }));
+  if (pinnedTenantId) {
+    const match = fromToken.find((t) => t.tenantId === pinnedTenantId);
+    return [{ tenantId: pinnedTenantId, tenantName: match?.tenantName ?? null }];
+  }
+  return fromToken;
+}
+
 // src/clients/broker-credential-client.ts
 function makeError(status, message, needsReauth = false) {
   const err = new Error(message);
@@ -114541,6 +114592,15 @@ var MCPXeroClient = class extends import_xero_node.XeroClient {
    *          despite the operator allowing nothing.
    */
   allowedTenants = null;
+  /**
+   * CS-1944 (Obi Wan on #6802): the organisations this token carries, for
+   * clients that learn them WITHOUT going through xero-node's updateTenants()
+   * (whose `tenants` is a read-only getter here). Custom Connections read
+   * /connections directly, so without this the unpinned multi-organisation
+   * fallback saw an empty list and refused every call, explicit tenant_id
+   * included.
+   */
+  tokenTenants = null;
   constructor(config2) {
     super(config2);
   }
@@ -114561,9 +114621,7 @@ var MCPXeroClient = class extends import_xero_node.XeroClient {
   async getAllowedTenants() {
     await this.authenticate();
     if (this.allowedTenants !== null) return this.allowedTenants;
-    if (!this.pinnedTenantId) return [];
-    const match = (this.tenants ?? []).find((t) => t?.tenantId === this.pinnedTenantId);
-    return [{ tenantId: this.pinnedTenantId, tenantName: match?.tenantName ?? null }];
+    return fallbackAllowedTenants(this.pinnedTenantId, this.tokenTenants ?? this.tenants ?? []);
   }
   // eslint-disable-next-line @typescript-eslint/no-explicit-any
   async updateTenants(fullOrgDetails) {
@@ -114687,12 +114745,9 @@ var CustomConnectionsXeroClient = class extends MCPXeroClient {
         }
       }
     );
-    if (connectionsResponse.data && connectionsResponse.data.length > 0) {
-      this.tenantId = pickTenantId(
-        connectionsResponse.data,
-        process.env.XERO_TENANT_ID
-      );
-    }
+    const connections = Array.isArray(connectionsResponse.data) ? connectionsResponse.data : [];
+    this.tokenTenants = connections;
+    this.tenantId = pickTenantId(connections, process.env.XERO_TENANT_ID);
     return response.data;
   }
   async authenticate() {
@@ -120917,12 +120972,14 @@ var ListOrganisationsTool = CreateXeroTool(
           isError: true
         };
       }
+      const single = allowed.length === 1;
       const lines = allowed.map(
-        (t, i) => `${i + 1}. ${t.tenantName ?? "(name unknown)"} - tenant_id: ${t.tenantId}${i === 0 ? " (default)" : ""}`
+        (t, i) => `${i + 1}. ${t.tenantName ?? "(name unknown)"} - tenant_id: ${t.tenantId}${single ? " (default)" : ""}`
       );
+      const footer = single ? "" : "\nThere is no default: pass tenant_id on every Xero call to choose one of these.";
       return {
         content: [{ type: "text", text: `Xero organisations this agent may use:
-${lines.join("\n")}` }]
+${lines.join("\n")}${footer}` }]
       };
     } catch (error2) {
       return {
@@ -120934,41 +120991,6 @@ ${lines.join("\n")}` }]
 );
 var list_organisations_tool_default = ListOrganisationsTool;
 
-// src/helpers/resolve-call-tenant.ts
-function describe(allowed) {
-  return allowed.map((t) => t.tenantName ? `${t.tenantName} (${t.tenantId})` : t.tenantId).join(", ");
-}
-function resolveCallTenant(allowed, requested) {
-  const wanted = typeof requested === "string" ? requested.trim() : "";
-  if (allowed !== null && allowed.length === 0) {
-    return {
-      ok: false,
-      message: "This agent has no Xero organisations selected, so no Xero call can run. Ask an admin to choose the organisations for this integration."
-    };
-  }
-  if (allowed === null) {
-    if (wanted) {
-      return {
-        ok: false,
-        message: `tenant_id ${wanted} cannot be used: this Xero connection has no organisation list to check it against.`
-      };
-    }
-    return { ok: true, tenantId: void 0 };
-  }
-  if (wanted) {
-    if (allowed.some((t) => t.tenantId === wanted)) return { ok: true, tenantId: wanted };
-    return {
-      ok: false,
-      message: `tenant_id ${wanted} is not one of the Xero organisations this agent may use: ${describe(allowed)}.`
-    };
-  }
-  if (allowed.length === 1) return { ok: true, tenantId: allowed[0].tenantId };
-  return {
-    ok: false,
-    message: `This agent can use more than one Xero organisation, so pass tenant_id. Allowed: ${describe(allowed)}. Call list-organisations to see them.`
-  };
-}
-
 // src/tools/tenant-scope.ts
 var TENANT_ID_ARG_DESCRIPTION = "Optional. The Xero organisation id (tenant) to use. Needed only when this agent can use more than one Xero organisation; call list-organisations to see them. Defaults to the only allowed organisation.";
 function errorResult(text) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@integrity-labs/agt-cli",
-  "version": "0.28.1085",
+  "version": "0.28.1086",
   "description": "Augmented Team CLI — agent provisioning and management",
   "type": "module",
   "engines": {