@integrity-labs/agt-cli 0.28.382 → 0.28.384

package/dist/mcp/direct-chat-channel.js

@@ -32566,6 +32566,17 @@ var TIER_PATTERNS = [
       // `write` (_CREATE), `list_credentials` hits `admin` (_CREDENTIAL).
       // ENG-7684.
       p(new RegExp(`^(${READ_VERBS})[_-]`, "i")),
+      // Reach-estimate GENERATION is a read-analytics operation, not a content
+      // mutation: it starts an async unique-listener estimate (nothing is
+      // created or changed) and the result is polled via a separate `get_*`.
+      // The bare `generate` verb isn't in the read set, so without this these
+      // fall through to the `write` fallback and read as mutations (ENG-8009).
+      // Anchored to the `generate_<entity>_reach_estimate` shape so it only ever
+      // matches analytics estimate triggers (Omny: generate_{org,program,clip}_
+      // reach_estimate), never a genuine generator like `generate_video`. Read
+      // is lowest-precedence, so a name that also matches a stricter pattern
+      // (e.g. a hypothetical `delete_..._reach_estimate`) still wins there.
+      p(/^generate_[a-z]+_reach_estimate$/i),
       // `report-*` (xero's `report-profit-and-loss`) — not a read verb but a
       // read-shaped native prefix. Anchored so it can't match report-* writers.
       p(/^report-/i),

package/dist/mcp/origami.js

@@ -38266,6 +38266,17 @@ var TIER_PATTERNS = [
       // `write` (_CREATE), `list_credentials` hits `admin` (_CREDENTIAL).
       // ENG-7684.
       p(new RegExp(`^(${READ_VERBS})[_-]`, "i")),
+      // Reach-estimate GENERATION is a read-analytics operation, not a content
+      // mutation: it starts an async unique-listener estimate (nothing is
+      // created or changed) and the result is polled via a separate `get_*`.
+      // The bare `generate` verb isn't in the read set, so without this these
+      // fall through to the `write` fallback and read as mutations (ENG-8009).
+      // Anchored to the `generate_<entity>_reach_estimate` shape so it only ever
+      // matches analytics estimate triggers (Omny: generate_{org,program,clip}_
+      // reach_estimate), never a genuine generator like `generate_video`. Read
+      // is lowest-precedence, so a name that also matches a stricter pattern
+      // (e.g. a hypothetical `delete_..._reach_estimate`) still wins there.
+      p(/^generate_[a-z]+_reach_estimate$/i),
       // `report-*` (xero's `report-profit-and-loss`) — not a read verb but a
       // read-shaped native prefix. Anchored so it can't match report-* writers.
       p(/^report-/i),

package/dist/mcp/slack-channel.js

@@ -32149,6 +32149,17 @@ var TIER_PATTERNS = [
       // `write` (_CREATE), `list_credentials` hits `admin` (_CREDENTIAL).
       // ENG-7684.
       p(new RegExp(`^(${READ_VERBS})[_-]`, "i")),
+      // Reach-estimate GENERATION is a read-analytics operation, not a content
+      // mutation: it starts an async unique-listener estimate (nothing is
+      // created or changed) and the result is polled via a separate `get_*`.
+      // The bare `generate` verb isn't in the read set, so without this these
+      // fall through to the `write` fallback and read as mutations (ENG-8009).
+      // Anchored to the `generate_<entity>_reach_estimate` shape so it only ever
+      // matches analytics estimate triggers (Omny: generate_{org,program,clip}_
+      // reach_estimate), never a genuine generator like `generate_video`. Read
+      // is lowest-precedence, so a name that also matches a stricter pattern
+      // (e.g. a hypothetical `delete_..._reach_estimate`) still wins there.
+      p(/^generate_[a-z]+_reach_estimate$/i),
       // `report-*` (xero's `report-profit-and-loss`) — not a read verb but a
       // read-shaped native prefix. Anchored so it can't match report-* writers.
       p(/^report-/i),

package/dist/mcp/telegram-channel.js

@@ -32499,6 +32499,17 @@ var TIER_PATTERNS = [
       // `write` (_CREATE), `list_credentials` hits `admin` (_CREDENTIAL).
       // ENG-7684.
       p(new RegExp(`^(${READ_VERBS})[_-]`, "i")),
+      // Reach-estimate GENERATION is a read-analytics operation, not a content
+      // mutation: it starts an async unique-listener estimate (nothing is
+      // created or changed) and the result is polled via a separate `get_*`.
+      // The bare `generate` verb isn't in the read set, so without this these
+      // fall through to the `write` fallback and read as mutations (ENG-8009).
+      // Anchored to the `generate_<entity>_reach_estimate` shape so it only ever
+      // matches analytics estimate triggers (Omny: generate_{org,program,clip}_
+      // reach_estimate), never a genuine generator like `generate_video`. Read
+      // is lowest-precedence, so a name that also matches a stricter pattern
+      // (e.g. a hypothetical `delete_..._reach_estimate`) still wins there.
+      p(/^generate_[a-z]+_reach_estimate$/i),
       // `report-*` (xero's `report-profit-and-loss`) — not a read verb but a
       // read-shaped native prefix. Anchored so it can't match report-* writers.
       p(/^report-/i),

package/dist/{persistent-session-FZF7EPUW.js → persistent-session-MDQVHXKX.js}

@@ -36,7 +36,7 @@ import {
   writeDirectChatSessionState,
   writeEgressAllowlist,
   writePersistentClaudeWrapper
-} from "./chunk-EP6TURK5.js";
+} from "./chunk-MQHDPJZD.js";
 import "./chunk-XWVM4KPK.js";
 export {
   EGRESS_BASELINE_DOMAINS,
@@ -77,4 +77,4 @@ export {
   writeEgressAllowlist,
   writePersistentClaudeWrapper
 };
-//# sourceMappingURL=persistent-session-FZF7EPUW.js.map
+//# sourceMappingURL=persistent-session-MDQVHXKX.js.map

package/dist/{responsiveness-probe-JYF7XPI2.js → responsiveness-probe-CG7XM7GL.js}

@@ -1,6 +1,6 @@
 import {
   paneLogPath
-} from "./chunk-EP6TURK5.js";
+} from "./chunk-MQHDPJZD.js";
 import "./chunk-XWVM4KPK.js";
 
 // src/lib/responsiveness-probe.ts
@@ -437,4 +437,4 @@ export {
   readAndResetSlackReplyBindingClassifications,
   readAndResetSlackReplyTargetClassifications
 };
-//# sourceMappingURL=responsiveness-probe-JYF7XPI2.js.map
+//# sourceMappingURL=responsiveness-probe-CG7XM7GL.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@integrity-labs/agt-cli",
-  "version": "0.28.382",
+  "version": "0.28.384",
   "description": "Augmented Team CLI — agent provisioning and management",
   "type": "module",
   "engines": {