@integrity-labs/agt-cli 0.28.299 → 0.28.301

package/dist/mcp/index.js

@@ -23754,7 +23754,7 @@ async function getPublishedArtefactSourceChunkText(artefactId, offset, limit) {
 }
 var artefactListSchema = {
   publisher: external_exports.string().optional().describe('Filter by publisher (e.g. "agt-live")'),
-  kind: external_exports.enum(["mockup", "deck", "site", "app", "video", "other"]).optional().describe("Filter by artefact kind"),
+  kind: external_exports.enum(["mockup", "deck", "carousel", "site", "app", "video", "other"]).optional().describe("Filter by artefact kind"),
   limit: external_exports.number().int().min(1).max(100).optional().describe("Maximum artefacts to return (default 50, max 100)")
 };
 server.tool(

package/dist/mcp/origami.js

@@ -1187,7 +1187,7 @@ var require_util = __commonJS({
     }
     exports.evaluatedPropsToName = evaluatedPropsToName;
     function setEvaluated(gen, props, ps) {
-      Object.keys(ps).forEach((p) => gen.assign((0, codegen_1._)`${props}${(0, codegen_1.getProperty)(p)}`, true));
+      Object.keys(ps).forEach((p2) => gen.assign((0, codegen_1._)`${props}${(0, codegen_1.getProperty)(p2)}`, true));
     }
     exports.setEvaluated = setEvaluated;
     var snippets = {};
@@ -1760,11 +1760,11 @@ var require_code2 = __commonJS({
     }
     exports.noPropertyInData = noPropertyInData;
     function allSchemaProperties(schemaMap) {
-      return schemaMap ? Object.keys(schemaMap).filter((p) => p !== "__proto__") : [];
+      return schemaMap ? Object.keys(schemaMap).filter((p2) => p2 !== "__proto__") : [];
     }
     exports.allSchemaProperties = allSchemaProperties;
     function schemaProperties(it, schemaMap) {
-      return allSchemaProperties(schemaMap).filter((p) => !(0, util_1.alwaysValidSchema)(it, schemaMap[p]));
+      return allSchemaProperties(schemaMap).filter((p2) => !(0, util_1.alwaysValidSchema)(it, schemaMap[p2]));
     }
     exports.schemaProperties = schemaProperties;
     function callValidateCode({ schemaCode, data, it: { gen, topSchemaRef, schemaPath, errorPath }, it }, func, context, passSchema) {
@@ -2242,12 +2242,12 @@ var require_resolve = __commonJS({
     function getFullPath(resolver, id = "", normalize) {
       if (normalize !== false)
         id = normalizeId(id);
-      const p = resolver.parse(id);
-      return _getFullPath(resolver, p);
+      const p2 = resolver.parse(id);
+      return _getFullPath(resolver, p2);
     }
     exports.getFullPath = getFullPath;
-    function _getFullPath(resolver, p) {
-      const serialized = resolver.serialize(p);
+    function _getFullPath(resolver, p2) {
+      const serialized = resolver.serialize(p2);
       return serialized.split("#")[0] + "#";
     }
     exports._getFullPath = _getFullPath;
@@ -3022,11 +3022,11 @@ var require_compile = __commonJS({
       return sch || this.schemas[ref] || resolveSchema.call(this, root, ref);
     }
     function resolveSchema(root, ref) {
-      const p = this.opts.uriResolver.parse(ref);
-      const refPath = (0, resolve_1._getFullPath)(this.opts.uriResolver, p);
+      const p2 = this.opts.uriResolver.parse(ref);
+      const refPath = (0, resolve_1._getFullPath)(this.opts.uriResolver, p2);
       let baseId = (0, resolve_1.getFullPath)(this.opts.uriResolver, root.baseId, void 0);
       if (Object.keys(root.schema).length > 0 && refPath === baseId) {
-        return getJsonPointer.call(this, p, root);
+        return getJsonPointer.call(this, p2, root);
       }
       const id = (0, resolve_1.normalizeId)(refPath);
       const schOrRef = this.refs[id] || this.schemas[id];
@@ -3034,7 +3034,7 @@ var require_compile = __commonJS({
         const sch = resolveSchema.call(this, root, schOrRef);
         if (typeof (sch === null || sch === void 0 ? void 0 : sch.schema) !== "object")
           return;
-        return getJsonPointer.call(this, p, sch);
+        return getJsonPointer.call(this, p2, sch);
       }
       if (typeof (schOrRef === null || schOrRef === void 0 ? void 0 : schOrRef.schema) !== "object")
         return;
@@ -3048,7 +3048,7 @@ var require_compile = __commonJS({
           baseId = (0, resolve_1.resolveUrl)(this.opts.uriResolver, baseId, schId);
         return new SchemaEnv({ schema, schemaId, root, baseId });
       }
-      return getJsonPointer.call(this, p, schOrRef);
+      return getJsonPointer.call(this, p2, schOrRef);
     }
     exports.resolveSchema = resolveSchema;
     var PREVENT_SCOPE_CHANGE = /* @__PURE__ */ new Set([
@@ -4053,9 +4053,9 @@ var require_core = __commonJS({
             this.addSchema(_schema, ref, meta3);
         }
         async function _loadSchema(ref) {
-          const p = this._loading[ref];
-          if (p)
-            return p;
+          const p2 = this._loading[ref];
+          if (p2)
+            return p2;
           try {
             return await (this._loading[ref] = loadSchema(ref));
           } finally {
@@ -5537,12 +5537,12 @@ var require_additionalProperties = __commonJS({
             const propsSchema = (0, util_1.schemaRefOrVal)(it, parentSchema.properties, "properties");
             definedProp = (0, code_1.isOwnProperty)(gen, propsSchema, key);
           } else if (props.length) {
-            definedProp = (0, codegen_1.or)(...props.map((p) => (0, codegen_1._)`${key} === ${p}`));
+            definedProp = (0, codegen_1.or)(...props.map((p2) => (0, codegen_1._)`${key} === ${p2}`));
           } else {
             definedProp = codegen_1.nil;
           }
           if (patProps.length) {
-            definedProp = (0, codegen_1.or)(definedProp, ...patProps.map((p) => (0, codegen_1._)`${(0, code_1.usePattern)(cxt, p)}.test(${key})`));
+            definedProp = (0, codegen_1.or)(definedProp, ...patProps.map((p2) => (0, codegen_1._)`${(0, code_1.usePattern)(cxt, p2)}.test(${key})`));
           }
           return (0, codegen_1.not)(definedProp);
         }
@@ -5622,7 +5622,7 @@ var require_properties = __commonJS({
         if (it.opts.unevaluated && allProps.length && it.props !== true) {
           it.props = util_1.mergeEvaluated.props(gen, (0, util_1.toHash)(allProps), it.props);
         }
-        const properties = allProps.filter((p) => !(0, util_1.alwaysValidSchema)(it, schema[p]));
+        const properties = allProps.filter((p2) => !(0, util_1.alwaysValidSchema)(it, schema[p2]));
         if (properties.length === 0)
           return;
         const valid = gen.name("valid");
@@ -5672,7 +5672,7 @@ var require_patternProperties = __commonJS({
         const { gen, schema, data, parentSchema, it } = cxt;
         const { opts } = it;
         const patterns = (0, code_1.allSchemaProperties)(schema);
-        const alwaysValidPatterns = patterns.filter((p) => (0, util_1.alwaysValidSchema)(it, schema[p]));
+        const alwaysValidPatterns = patterns.filter((p2) => (0, util_1.alwaysValidSchema)(it, schema[p2]));
         if (patterns.length === 0 || alwaysValidPatterns.length === patterns.length && (!it.opts.unevaluated || it.props === true)) {
           return;
         }
@@ -7057,9 +7057,9 @@ var require_unevaluatedProperties = __commonJS({
         }
         function unevaluatedStatic(evaluatedProps, key) {
           const ps = [];
-          for (const p in evaluatedProps) {
-            if (evaluatedProps[p] === true)
-              ps.push((0, codegen_1._)`${key} !== ${p}`);
+          for (const p2 in evaluatedProps) {
+            if (evaluatedProps[p2] === true)
+              ps.push((0, codegen_1._)`${key} !== ${p2}`);
           }
           return (0, codegen_1.and)(...ps);
         }
@@ -10659,7 +10659,7 @@ var require_timestamp = __commonJS({
       const sign = str[0];
       const parts = sign === "-" || sign === "+" ? str.substring(1) : str;
       const num = (n) => asBigInt ? BigInt(n) : Number(n);
-      const res = parts.replace(/_/g, "").split(":").reduce((res2, p) => res2 * num(60) + num(p), num(0));
+      const res = parts.replace(/_/g, "").split(":").reduce((res2, p2) => res2 * num(60) + num(p2), num(0));
       return sign === "-" ? num(-1) * res : res;
     }
     function stringifySexagesimal(node) {
@@ -15881,12 +15881,12 @@ var require_object = __commonJS({
       subClass.prototype.constructor = subClass;
       _setPrototypeOf(subClass, superClass);
     }
-    function _setPrototypeOf(o, p) {
-      _setPrototypeOf = Object.setPrototypeOf ? Object.setPrototypeOf.bind() : function _setPrototypeOf2(o2, p2) {
-        o2.__proto__ = p2;
+    function _setPrototypeOf(o, p2) {
+      _setPrototypeOf = Object.setPrototypeOf ? Object.setPrototypeOf.bind() : function _setPrototypeOf2(o2, p3) {
+        o2.__proto__ = p3;
         return o2;
       };
-      return _setPrototypeOf(o, p);
+      return _setPrototypeOf(o, p2);
     }
     var EventEmitter = __require("events");
     var lib = require_lib();
@@ -16017,12 +16017,12 @@ var require_nodes = __commonJS({
       subClass.prototype.constructor = subClass;
       _setPrototypeOf(subClass, superClass);
     }
-    function _setPrototypeOf(o, p) {
-      _setPrototypeOf = Object.setPrototypeOf ? Object.setPrototypeOf.bind() : function _setPrototypeOf2(o2, p2) {
-        o2.__proto__ = p2;
+    function _setPrototypeOf(o, p2) {
+      _setPrototypeOf = Object.setPrototypeOf ? Object.setPrototypeOf.bind() : function _setPrototypeOf2(o2, p3) {
+        o2.__proto__ = p3;
         return o2;
       };
-      return _setPrototypeOf(o, p);
+      return _setPrototypeOf(o, p2);
     }
     var _require = require_object();
     var Obj = _require.Obj;
@@ -16368,12 +16368,12 @@ var require_parser2 = __commonJS({
       subClass.prototype.constructor = subClass;
       _setPrototypeOf(subClass, superClass);
     }
-    function _setPrototypeOf(o, p) {
-      _setPrototypeOf = Object.setPrototypeOf ? Object.setPrototypeOf.bind() : function _setPrototypeOf2(o2, p2) {
-        o2.__proto__ = p2;
+    function _setPrototypeOf(o, p2) {
+      _setPrototypeOf = Object.setPrototypeOf ? Object.setPrototypeOf.bind() : function _setPrototypeOf2(o2, p3) {
+        o2.__proto__ = p3;
         return o2;
       };
-      return _setPrototypeOf(o, p);
+      return _setPrototypeOf(o, p2);
     }
     var lexer = require_lexer2();
     var nodes = require_nodes();
@@ -17286,11 +17286,11 @@ var require_parser2 = __commonJS({
     })(Obj);
     module.exports = {
       parse: function parse3(src, extensions, opts) {
-        var p = new Parser(lexer.lex(src, opts));
+        var p2 = new Parser(lexer.lex(src, opts));
         if (extensions !== void 0) {
-          p.extensions = extensions;
+          p2.extensions = extensions;
         }
-        return p.parseAsRoot();
+        return p2.parseAsRoot();
       },
       Parser
     };
@@ -17500,20 +17500,20 @@ var require_runtime = __commonJS({
         return null;
       };
       _proto.lookup = function lookup(name) {
-        var p = this.parent;
+        var p2 = this.parent;
         var val = this.variables[name];
         if (val !== void 0) {
           return val;
         }
-        return p && p.lookup(name);
+        return p2 && p2.lookup(name);
       };
       _proto.resolve = function resolve(name, forWrite) {
-        var p = forWrite && this.isolateWrites ? void 0 : this.parent;
+        var p2 = forWrite && this.isolateWrites ? void 0 : this.parent;
         var val = this.variables[name];
         if (val !== void 0) {
           return this;
         }
-        return p && p.resolve(name);
+        return p2 && p2.resolve(name);
       };
       _proto.push = function push(isolateWrites) {
         return new Frame2(this, isolateWrites);
@@ -17786,12 +17786,12 @@ var require_compiler = __commonJS({
       subClass.prototype.constructor = subClass;
       _setPrototypeOf(subClass, superClass);
     }
-    function _setPrototypeOf(o, p) {
-      _setPrototypeOf = Object.setPrototypeOf ? Object.setPrototypeOf.bind() : function _setPrototypeOf2(o2, p2) {
-        o2.__proto__ = p2;
+    function _setPrototypeOf(o, p2) {
+      _setPrototypeOf = Object.setPrototypeOf ? Object.setPrototypeOf.bind() : function _setPrototypeOf2(o2, p3) {
+        o2.__proto__ = p3;
         return o2;
       };
-      return _setPrototypeOf(o, p);
+      return _setPrototypeOf(o, p2);
     }
     var parser = require_parser2();
     var transformer = require_transformer();
@@ -19221,12 +19221,12 @@ var require_loader = __commonJS({
       subClass.prototype.constructor = subClass;
       _setPrototypeOf(subClass, superClass);
     }
-    function _setPrototypeOf(o, p) {
-      _setPrototypeOf = Object.setPrototypeOf ? Object.setPrototypeOf.bind() : function _setPrototypeOf2(o2, p2) {
-        o2.__proto__ = p2;
+    function _setPrototypeOf(o, p2) {
+      _setPrototypeOf = Object.setPrototypeOf ? Object.setPrototypeOf.bind() : function _setPrototypeOf2(o2, p3) {
+        o2.__proto__ = p3;
         return o2;
       };
-      return _setPrototypeOf(o, p);
+      return _setPrototypeOf(o, p2);
     }
     var path = __require("path");
     var _require = require_object();
@@ -19257,12 +19257,12 @@ var require_precompiled_loader = __commonJS({
       subClass.prototype.constructor = subClass;
       _setPrototypeOf(subClass, superClass);
     }
-    function _setPrototypeOf(o, p) {
-      _setPrototypeOf = Object.setPrototypeOf ? Object.setPrototypeOf.bind() : function _setPrototypeOf2(o2, p2) {
-        o2.__proto__ = p2;
+    function _setPrototypeOf(o, p2) {
+      _setPrototypeOf = Object.setPrototypeOf ? Object.setPrototypeOf.bind() : function _setPrototypeOf2(o2, p3) {
+        o2.__proto__ = p3;
         return o2;
       };
-      return _setPrototypeOf(o, p);
+      return _setPrototypeOf(o, p2);
     }
     var Loader = require_loader();
     var PrecompiledLoader = /* @__PURE__ */ (function(_Loader) {
@@ -20386,7 +20386,7 @@ var require_chokidar = __commonJS({
     }
     var unifyPaths = (paths_) => {
       const paths = arrify(paths_).flat();
-      if (!paths.every((p) => typeof p === STRING_TYPE)) {
+      if (!paths.every((p2) => typeof p2 === STRING_TYPE)) {
         throw new TypeError(`Non-string provided as watch path: ${paths}`);
       }
       return paths.map(normalizePathToUnix);
@@ -21032,12 +21032,12 @@ var require_node_loaders = __commonJS({
       subClass.prototype.constructor = subClass;
       _setPrototypeOf(subClass, superClass);
     }
-    function _setPrototypeOf(o, p) {
-      _setPrototypeOf = Object.setPrototypeOf ? Object.setPrototypeOf.bind() : function _setPrototypeOf2(o2, p2) {
-        o2.__proto__ = p2;
+    function _setPrototypeOf(o, p2) {
+      _setPrototypeOf = Object.setPrototypeOf ? Object.setPrototypeOf.bind() : function _setPrototypeOf2(o2, p3) {
+        o2.__proto__ = p3;
         return o2;
       };
-      return _setPrototypeOf(o, p);
+      return _setPrototypeOf(o, p2);
     }
     var fs = __require("fs");
     var path = __require("path");
@@ -21088,9 +21088,9 @@ var require_node_loaders = __commonJS({
         var paths = this.searchPaths;
         for (var i = 0; i < paths.length; i++) {
           var basePath = path.resolve(paths[i]);
-          var p = path.resolve(paths[i], name);
-          if (p.indexOf(basePath) === 0 && fs.existsSync(p)) {
-            fullpath = p;
+          var p2 = path.resolve(paths[i], name);
+          if (p2.indexOf(basePath) === 0 && fs.existsSync(p2)) {
+            fullpath = p2;
             break;
           }
         }
@@ -21387,12 +21387,12 @@ var require_environment = __commonJS({
       subClass.prototype.constructor = subClass;
       _setPrototypeOf(subClass, superClass);
     }
-    function _setPrototypeOf(o, p) {
-      _setPrototypeOf = Object.setPrototypeOf ? Object.setPrototypeOf.bind() : function _setPrototypeOf2(o2, p2) {
-        o2.__proto__ = p2;
+    function _setPrototypeOf(o, p2) {
+      _setPrototypeOf = Object.setPrototypeOf ? Object.setPrototypeOf.bind() : function _setPrototypeOf2(o2, p3) {
+        o2.__proto__ = p3;
         return o2;
       };
-      return _setPrototypeOf(o, p);
+      return _setPrototypeOf(o, p2);
     }
     var asap = require_asap();
     var _waterfall = require_a_sync_waterfall();
@@ -24919,7 +24919,7 @@ var $ZodUnion = /* @__PURE__ */ $constructor("$ZodUnion", (inst, def) => {
   defineLazy(inst._zod, "pattern", () => {
     if (def.options.every((o) => o._zod.pattern)) {
       const patterns = def.options.map((o) => o._zod.pattern);
-      return new RegExp(`^(${patterns.map((p) => cleanRegex(p.source)).join("|")})$`);
+      return new RegExp(`^(${patterns.map((p2) => cleanRegex(p2.source)).join("|")})$`);
     }
     return void 0;
   });
@@ -26126,9 +26126,9 @@ var $ZodRegistry = class {
     return this;
   }
   get(schema) {
-    const p = schema._zod.parent;
-    if (p) {
-      const pm = { ...this.get(p) ?? {} };
+    const p2 = schema._zod.parent;
+    if (p2) {
+      const pm = { ...this.get(p2) ?? {} };
       delete pm.id;
       const f = { ...pm, ...this._map.get(schema) };
       return Object.keys(f).length ? f : void 0;
@@ -37336,8 +37336,8 @@ function expandBodyTemplate(template, args) {
 }
 function joinUrl(base, path) {
   const b = base.endsWith("/") ? base.slice(0, -1) : base;
-  const p = path.startsWith("/") ? path : `/${path}`;
-  return `${b}${p}`;
+  const p2 = path.startsWith("/") ? path : `/${path}`;
+  return `${b}${p2}`;
 }
 function isScalar(v) {
   return typeof v === "string" || typeof v === "number" || typeof v === "boolean";
@@ -38112,6 +38112,167 @@ var ajv2 = new import__2.default({ allErrors: true, strict: false });
 (0, import_ajv_formats3.default)(ajv2);
 var compiledMetaSchema = ajv2.compile(context_meta_schema_default);
 
+// ../core/dist/integrations/tool-tier-heuristic.js
+var READ_VERBS = "GET|LIST|FIND|FETCH|RETRIEVE|SEARCH|QUERY|DESCRIBE|INSPECT|SCAN|SHOW|VIEW|READ|EXPORT|DOWNLOAD";
+var NO_READ_VERB_ACTION = `(?!(?:^|.*[_-])(${READ_VERBS})[_-])`;
+var NO_READ_VERB_INCL_SUFFIX = `(?!(?:^|.*[_-])(${READ_VERBS})(?:[_-]|$))`;
+function p(re) {
+  return { re, label: re.source };
+}
+function highRisk(core) {
+  return { re: new RegExp(`^${NO_READ_VERB_ACTION}.*${core.source}`, "i"), label: core.source };
+}
+var TIER_PATTERNS = [
+  {
+    tier: "admin",
+    patterns: [
+      p(/_PERMISSION/i),
+      p(/_GRANT[_S]?(_|$)/i),
+      p(/_AUTHORI[SZ]E/i),
+      // Reading OAuth grants / a webhook's config can expose secrets or the
+      // full authorization surface, so — unlike _SETTINGS/_CONFIG — these
+      // stay admin even with a read verb (deliberate; see the
+      // tool-tier-heuristic test for HUBSPOT_LIST_GRANTED_OAUTH_SCOPES /
+      // ATTIO_GET_WEBHOOK).
+      p(/_OAUTH/i),
+      p(/_WEBHOOK/i),
+      // SETTINGS / CONFIG are admin only when MUTATED. A read verb anywhere —
+      // prefix (GET_..._SETTINGS), infix (..._GET_..._SETTINGS), or suffix
+      // (..._SETTINGS_GET / ..._SETTINGS_LIST) — means it's a settings
+      // *lookup*, so it falls through to `read` and auto-executes instead of
+      // routing to approval and hanging (e.g. GOOGLEANALYTICS_GET_DATA_RETENTION_SETTINGS,
+      // GOOGLECALENDAR_LIST_SETTINGS, GOOGLECALENDAR_SETTINGS_GET). The suffix
+      // form is safe HERE because the object noun (SETTINGS/CONFIG) is
+      // unambiguous; the generic high-risk guard stays suffix-blind on purpose
+      // (a trailing _LIST/_VIEW can be a noun — ENG-7684). Unlike
+      // _OAUTH/_WEBHOOK/_CREDENTIAL/_VAULT/_PERMISSION above, reading app
+      // settings/config is benign, so only the mutating form stays admin.
+      p(new RegExp(`^${NO_READ_VERB_INCL_SUFFIX}.*_SETTINGS?(_|$)`, "i")),
+      p(new RegExp(`^${NO_READ_VERB_INCL_SUFFIX}.*_CONFIG`, "i")),
+      p(/_VAULT/i),
+      p(/_CREDENTIAL/i),
+      p(/_ENROL/i),
+      p(/_REGISTER/i)
+    ]
+  },
+  {
+    tier: "write_destructive",
+    patterns: [
+      p(/_BATCH_DELETE/i),
+      p(/_DELETE(_|$)/i),
+      p(/_REVOKE/i),
+      p(/_REMOVE(_|$)/i),
+      p(/_TRASH/i),
+      p(/_DROP(_|$)/i),
+      p(/_CLEAR(_|$)/i),
+      p(/_HIDE(_|$)/i),
+      // Kebab-case verbs used by native MCP servers (e.g. xero's `void-invoice`).
+      p(/^void-/i)
+    ]
+  },
+  {
+    // Every pattern here is read-verb-guarded (ENG-7684): a high-risk NOUN
+    // (_EMAIL, _IMPORT, _FORWARD, _POST, _PUBLISH) inside a read-verb name
+    // (…_GET_…, …_FETCH_…) is a read, not a high-risk action, and must
+    // auto-execute instead of routing to approval.
+    tier: "write_high_risk",
+    patterns: [
+      highRisk(/_BATCH_MODIFY/i),
+      highRisk(/_SEND(_|$)/i),
+      highRisk(/_POST(_|$)/i),
+      highRisk(/_PUBLISH/i),
+      highRisk(/_REPLY/i),
+      // Message/email forwarding is high-risk. The negative lookbehind
+      // exempts browser *navigation* forward (e.g. Anchor's
+      // `anchor_navigate_forward`), which is benign and classifies as read;
+      // the read-verb guard additionally exempts GMAIL_GET_AUTO_FORWARDING.
+      highRisk(/(?<!navigate)_FORWARD/i),
+      highRisk(/_EMAIL/i),
+      highRisk(/_INVITE/i),
+      highRisk(/_NOTIFY/i),
+      highRisk(/_IMPORT/i),
+      // Sharing-preference MUTATIONS grant external access to content —
+      // exfiltration-shaped, so they must not fall through to the generic
+      // `_ADD`/`_UPDATE` write patterns (ENG-6027 council finding: e.g.
+      // GOOGLEDRIVE_ADD_FILE_SHARING_PREFERENCE). Anchored to a mutating
+      // verb so read-shaped names (METAADS_LIST_*_SHARING_REQUESTS,
+      // GOOGLEANALYTICS_GET_DATA_SHARING_SETTINGS) keep their read/admin
+      // classification.
+      highRisk(/_(ADD|UPDATE|SET|CREATE|MODIFY|CHANGE|ENABLE)_[A-Z0-9_]*SHAR(E|ING)/i)
+    ]
+  },
+  {
+    tier: "write",
+    patterns: [
+      p(/_ASSERT/i),
+      p(/_UPSERT/i),
+      p(/_PATCH/i),
+      // The negative lookbehind prevents `MONDAY_GET_UPDATES` (and similar
+      // "fetch the comment thread" reads) from being mis-tagged as a write
+      // just because the noun happens to be "update".
+      p(/(?<!_GET)_UPDATE/i),
+      p(/_INSERT/i),
+      p(/_CREATE/i),
+      p(/_ADD(_|$)/i),
+      p(/_MOVE(_|$)/i),
+      p(/_COPY(_|$)/i),
+      // Kebab-case verbs used by native MCP servers (e.g. xero).
+      p(/^create-/i),
+      p(/^update-/i),
+      p(/^attach-/i)
+    ]
+  },
+  {
+    tier: "read",
+    patterns: [
+      p(/_GET/i),
+      p(/_FIND/i),
+      p(/_LIST/i),
+      p(/_SEARCH/i),
+      p(/_FETCH/i),
+      p(/_RETRIEVE/i),
+      p(/_EXPORT/i),
+      p(/_DOWNLOAD/i),
+      p(/_READ(_|$)/i),
+      p(/_VIEW(_|$)/i),
+      // Cloud-style verbs (used by aws_*, gcloud, kubectl etc.) and other
+      // common read-shaped names that don't follow Composio's GET prefix.
+      p(/_DESCRIBE/i),
+      p(/_CHECK/i),
+      p(/_INSPECT/i),
+      p(/_QUERY/i),
+      p(/_SCAN/i),
+      p(/_SHOW(_|$)/i),
+      // Native MCP servers use bare leading verbs in snake_case (Kajabi:
+      // `get_landing_page`, `list_people`) or kebab-case (xero: `list-invoices`,
+      // `get-invoice`; github: `search-code`; granola: `read-transcript`). The
+      // uppercase/infix `_GET`/`_LIST` patterns miss both, so they fell through
+      // to the `write` fallback. One delimiter-agnostic pattern covers every
+      // read verb in either convention. Read is the lowest-precedence tier, so
+      // a leading-verb MUTATION still matches earlier: `get_or_create_x` hits
+      // `write` (_CREATE), `list_credentials` hits `admin` (_CREDENTIAL).
+      // ENG-7684.
+      p(new RegExp(`^(${READ_VERBS})[_-]`, "i")),
+      // `report-*` (xero's `report-profit-and-loss`) — not a read verb but a
+      // read-shaped native prefix. Anchored so it can't match report-* writers.
+      p(/^report-/i),
+      // ENG-5855: Anchor Browser observation tools (hosted MCP, `anchor_*`
+      // names). Anchored to `^anchor_` so they only ever classify Anchor's
+      // own tools and can't reclassify another toolkit's keys when the seed
+      // is regenerated. The other read-shaped Anchor tools already match
+      // generic patterns (`anchor_get_body_html` → _GET, `anchor_tab_list`
+      // → _LIST). `anchor_network_requests` is deliberately NOT here — it
+      // dumps auth headers/tokens, so it's raised to write_high_risk as a
+      // manual escalation in the seed.
+      p(/^anchor_navigate/i),
+      p(/^anchor_snapshot/i),
+      p(/^anchor_take_screenshot/i),
+      p(/^anchor_wait_for/i),
+      p(/^anchor_console_messages/i)
+    ]
+  }
+];
+
 // ../core/dist/integrations/augmented-live/markup.js
 var MARKUP_MARKER = "__augmentedLiveMarkup";
 var MARKUP_CONTROL_MARKER = "__augmentedLiveMarkupControl";
@@ -38814,7 +38975,7 @@ var INTEGRATION_REGISTRY = [
     id: "video-gen",
     name: "Video Generation",
     category: "media",
-    description: "AI video generation from a text prompt. An agent passes a prompt to generate_video and gets back a short generated video with audio, which it can deliver to a chat channel. Augmented Team manages the model access for you - there is no key to enter. Generation runs direct against xAI (Grok Imagine Video 1.5 today). It is a PREMIUM, usage-billed capability: gated on a per-org opt-in and a monthly USD budget, and metered per second of generated video.",
+    description: "AI video generation from a text prompt or an input image. An agent passes a prompt (plus optionally image_url) to generate_video and gets back a short generated video with audio, which it can deliver to a chat channel. Augmented Team manages the model access for you - there is no key to enter. Generation runs direct against xAI Grok Imagine: text-to-video on the base grok-imagine-video model, image-to-video on grok-imagine-video-1.5. It is a PREMIUM, usage-billed capability: gated on a per-org opt-in and a monthly USD budget, and metered per second of generated video.",
     // Platform-key model (mirrors Grok Voice / ADR-0031): Augmented holds one xAI
     // account key (XAI_API_KEY) and every customer render bills back to it, so
     // auth is `none` - customers never enter a key.
@@ -38841,6 +39002,10 @@ var INTEGRATION_REGISTRY = [
       pricing: "usage",
       note: "Billed per second of generated video; the rate depends on the resolution.",
       meters: [
+        // 1.0 (grok-imagine-video) is the text-to-video model (ENG-7696: xAI's
+        // 1.5 is image-to-video ONLY, so t2v runs on the base model).
+        { event_type: "grok_imagine_video_1_0_480p", unit: "second" },
+        { event_type: "grok_imagine_video_1_0_720p", unit: "second" },
         { event_type: "grok_imagine_video_1_5_480p", unit: "second" },
         { event_type: "grok_imagine_video_1_5_720p", unit: "second" },
         // 1080p is image-to-video only (xAI restriction); metered when the
@@ -40166,6 +40331,20 @@ var FLAG_REGISTRY = [
     // explicit confirm (ADR-0022 §4).
     sensitive: true
   },
+  {
+    key: "notify-dispatch",
+    description: "Membership-based channel-notify dispatch (ENG-7682 / notify Slice 1). off = today's behaviour: a non-@mention top-level channel message is dropped by the mention_only engagement gate (SLACK_CHANNEL_RESPONSE_MODE). membership = the agent's Slack MCP ADMITS non-@mention channel messages in channels its bot is a member of (the Socket Mode websocket already receives them), waking the agent in-thread via the SAME existing wake path used for @mentions/DMs. Only the mention_only engagement gate is relaxed - the echo/dedup, bot_id/self, and peer-classifier safety leaves still apply, so this never opens a bot-to-bot wake loop. The channel server can't evaluate flags, so the manager materializes the resolved value into the AGT_NOTIFY_DISPATCH spawn env (operator/canary override, ADR-0022). Enum leaves room for a later Slice 2 'filter' value (per-channel filters). Ships dark (default off).",
+    flagType: "enum",
+    allowedValues: ["off", "membership"],
+    // Declared safe value is `off`: the mention_only gate stays in force, byte-
+    // identical to today. membership is the deliberate, per-agent flip that
+    // widens what wakes the agent.
+    defaultValue: "off",
+    envVar: "AGT_NOTIFY_DISPATCH",
+    // membership widens agent-wake ingress (more inbound wakes = more cost /
+    // surface), so flipping it on is worth an explicit confirm (ADR-0022 §4).
+    sensitive: true
+  },
   {
     key: "workflows-down-sync",
     description: "Down-sync active dynamic workflows to agents via /host/refresh (ADR-0012, ENG-6352). When on, the API populates the per-agent workflow set (team default \u222A agent override) and the claude-code adapter writes each as .claude/workflows/<name>.js. Boolean gate; ships dark.",