@integrity-labs/agt-cli 0.28.989 → 0.28.991

package/dist/{chunk-DP443ICC.js → chunk-RQ3I7GMD.js}

@@ -1,6 +1,7 @@
 import {
   LATE_BOUND_VARS,
   agentTmpDirFor,
+  buildApiKeyRemoteMcpProxyEntry,
   buildLiveHeaderRemoteMcpProxyEntry,
   buildNativeMcpEntry,
   buildOAuthRemoteMcpProxyEntry,
@@ -14,7 +15,7 @@ import {
   parseEnvFileEntries,
   parseEnvIntegrations,
   shellQuote
-} from "./chunk-6KYXH6ZZ.js";
+} from "./chunk-DN3KNGP4.js";
 import {
   BIND_FAILURE_QUARANTINE_THRESHOLD,
   INTEGRATIONS_SECTION_END,
@@ -74,7 +75,7 @@ import {
   sessionTranscriptDir,
   worseConnectivityOutcome,
   wrapScheduledTaskPrompt
-} from "./chunk-TGCA3LTI.js";
+} from "./chunk-C72SNMP6.js";
 import {
   classifyUnanswerablePane,
   summarizeUnanswerablePane
@@ -4961,16 +4962,21 @@ function buildMcpJson(input) {
   for (const integration of input.integrations ?? []) {
     const connectionKey = integration.connection_key;
     const serverKey = remoteMcpServerKey(integration.definition_id, connectionKey);
-    const liveEntry = buildLiveHeaderRemoteMcpProxyEntry(integration.definition_id, integration.remoteMcp, remoteOAuthProxyPaths, connectionKey);
+    const liveEntry = buildLiveHeaderRemoteMcpProxyEntry(integration.definition_id, integration.remoteMcp, remoteOAuthProxyPaths, connectionKey, integration.toolTiers);
     if (liveEntry) {
       mcpServers[serverKey] = liveEntry;
       continue;
     }
-    const proxyEntry = buildOAuthRemoteMcpProxyEntry(integration.definition_id, remoteOAuthProxyPaths, connectionKey);
+    const proxyEntry = buildOAuthRemoteMcpProxyEntry(integration.definition_id, remoteOAuthProxyPaths, connectionKey, integration.toolTiers);
     if (proxyEntry) {
       mcpServers[serverKey] = proxyEntry;
       continue;
     }
+    const tierGatedEntry = buildApiKeyRemoteMcpProxyEntry(integration.definition_id, integration.remoteMcp, remoteOAuthProxyPaths, connectionKey, integration.toolTiers);
+    if (tierGatedEntry) {
+      mcpServers[serverKey] = tierGatedEntry;
+      continue;
+    }
     const entry = buildRemoteMcpEntry(integration.definition_id, integration.remoteMcp, connectionKey);
     if (entry) {
       mcpServers[serverKey] = entry;
@@ -6249,16 +6255,21 @@ ${sections}`
     for (const integration of integrations) {
       const connectionKey = integration.connection_key;
       const serverKey = remoteMcpServerKey(integration.definition_id, connectionKey);
-      const liveEntry = buildLiveHeaderRemoteMcpProxyEntry(integration.definition_id, integration.remoteMcp, remoteOAuthProxyPaths, connectionKey);
+      const liveEntry = buildLiveHeaderRemoteMcpProxyEntry(integration.definition_id, integration.remoteMcp, remoteOAuthProxyPaths, connectionKey, integration.toolTiers);
       if (liveEntry) {
         this.writeMcpServer(codeName, serverKey, liveEntry);
         continue;
       }
-      const proxyEntry = buildOAuthRemoteMcpProxyEntry(integration.definition_id, remoteOAuthProxyPaths, connectionKey);
+      const proxyEntry = buildOAuthRemoteMcpProxyEntry(integration.definition_id, remoteOAuthProxyPaths, connectionKey, integration.toolTiers);
       if (proxyEntry) {
         this.writeMcpServer(codeName, serverKey, proxyEntry);
         continue;
       }
+      const tierGatedEntry = buildApiKeyRemoteMcpProxyEntry(integration.definition_id, integration.remoteMcp, remoteOAuthProxyPaths, connectionKey, integration.toolTiers);
+      if (tierGatedEntry) {
+        this.writeMcpServer(codeName, serverKey, tierGatedEntry);
+        continue;
+      }
       const entry = buildRemoteMcpEntry(integration.definition_id, integration.remoteMcp, connectionKey);
       if (entry) {
         this.writeMcpServer(codeName, serverKey, entry);
@@ -6963,7 +6974,7 @@ function exchangeFailureKind(err) {
 }
 
 // src/lib/api-client.ts
-var agtCliVersion = true ? "0.28.989" : "dev";
+var agtCliVersion = true ? "0.28.991" : "dev";
 var lastConfigHash = null;
 function setConfigHash(hash) {
   lastConfigHash = hash && hash.length > 0 ? hash : null;
@@ -9609,12 +9620,13 @@ function computeSessionToolBindStatus(input) {
     httpReachable,
     sessionLoadedServerKeys,
     coldStartActive = false,
+    anyStdioServerLive = true,
     transportDownKeys
   } = input;
   if (stdioServerKeys.length === 0 && httpServerKeys.length === 0 && proxyServerKeys.length === 0)
     return "unknown";
   if (stdioServerKeys.some((k) => missingStdioKeys.has(k)) || proxyServerKeys.some((k) => missingStdioKeys.has(k))) {
-    return coldStartActive ? "unknown" : "missing";
+    return coldStartActive || !anyStdioServerLive ? "unknown" : "missing";
   }
   if (transportDownKeys && transportDownKeys.size > 0) {
     if (stdioServerKeys.some((k) => transportDownKeys.has(k)) || httpServerKeys.some((k) => transportDownKeys.has(k)) || proxyServerKeys.some((k) => transportDownKeys.has(k))) {
@@ -9743,11 +9755,16 @@ async function runSessionToolBindProbes(integrations, options) {
       httpReachable,
       sessionLoadedServerKeys: options.sessionLoadedServerKeys ?? /* @__PURE__ */ new Set(),
       coldStartActive,
+      ...options.anyStdioServerLive !== void 0 ? { anyStdioServerLive: options.anyStdioServerLive } : {},
       ...transportDown ? { transportDownKeys: transportDown } : {}
     });
     if (status === "unknown") {
       skipped += 1;
-      skippedDetail.push({ definition_id: integ.definition_id, reason: "inconclusive" });
+      const missingOwnChild = stdio.some((k) => options.missingStdioKeys.has(k)) || proxy.some((k) => options.missingStdioKeys.has(k));
+      skippedDetail.push({
+        definition_id: integ.definition_id,
+        reason: !coldStartActive && options.anyStdioServerLive === false && missingOwnChild ? "session-not-live" : "inconclusive"
+      });
       continue;
     }
     reports.push({ integration_id: integ.id, scope: integ.scope, status });
@@ -10368,6 +10385,8 @@ async function gatherSessionToolBindProbe(agent, integrations, projectDir, opts)
       if (hasDeclaredStdio) return null;
     }
   }
+  const declaredCommandKeys = Object.entries(mcpJson.mcpServers).filter(([, entry]) => typeof entry?.command === "string").map(([key]) => key);
+  const anyStdioServerLive = declaredCommandKeys.length === 0 || declaredCommandKeys.some((key) => !missingStdioKeys.has(key));
   const probeEnv = buildProbeEnv(projectDir, agent.agent_id);
   const probeDeps = buildConnectivityProbeDeps(projectDir, probeEnv);
   const probeHttp = async (serverKey) => {
@@ -10406,6 +10425,7 @@ async function gatherSessionToolBindProbe(agent, integrations, projectDir, opts)
     {
       mcpJson,
       missingStdioKeys,
+      anyStdioServerLive,
       transportDownKeys: () => readSlackTransportDownKeys(projectDir),
       probeHttp,
       sessionLoadedServerKeys: opts.sessionLoadedServerKeys,
@@ -11705,4 +11725,4 @@ export {
   managerInstallSystemUnitCommand,
   managerUninstallSystemUnitCommand
 };
-//# sourceMappingURL=chunk-DP443ICC.js.map
+//# sourceMappingURL=chunk-RQ3I7GMD.js.map