@michael-joseph-miller/ant-bot 0.4.4 → 0.4.6

package/CHANGELOG.md

@@ -4,6 +4,33 @@ All notable changes to ant-bot are recorded here. The format follows
 [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and versions follow
 [semantic versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.4.6] — 2026-08-24
+
+### Fixed
+
+- **`check` prints why a sign-in is needed.** 0.4.5 worked out that a token predated the scopes
+  now being asked for, then printed the bare headline `needs sign-in` — sending you to look for a
+  sign-in you had already done. The CLI and the Connectors screen now show the reason.
+
+## [0.4.5] — 2026-08-24
+
+### Changed
+
+- **The built-in Gmail connector asks for the whole mailbox.** It requested `gmail.modify`; it now
+  requests `https://mail.google.com/` plus `gmail.settings.basic` and `gmail.settings.sharing` —
+  read, compose, send, permanent deletion, filters, forwarding and vacation settings. What keeps a
+  Bot in check is not the size of the token: `send_message` and `create_draft` carry seeded
+  `require` rules, so a human is asked every time regardless. Existing sign-ins keep the narrower
+  token until you sign in again.
+
+### Fixed
+
+- **A sign-in older than the scopes now asked for says so.** Widening what a connector requests
+  does nothing until the human re-consents, and until then everything reads as healthy while any
+  call needing the new permission is refused. `check` now compares the stored token's scopes
+  against what the connector asks for and reports `needs sign-in — signed in, but without N newer
+  permission(s)`.
+
 ## [0.4.4] — 2026-08-24
 
 ### Changed

package/README.md

@@ -281,10 +281,10 @@ Current totals, as run against this checkout:
 | Package | Test files | Tests |
 |---|---|---|
 | `@antbot/contract` | 1 | 34 |
-| `@antbot/daemon` | 29 | 619 |
-| `@antbot/ui` | 10 | 114 |
-| `@antbot/cli` | 8 | 142 |
-| **Total** | **48** | **909** |
+| `@antbot/daemon` | 29 | 624 |
+| `@antbot/ui` | 10 | 115 |
+| `@antbot/cli` | 8 | 143 |
+| **Total** | **48** | **916** |
 
 ## Status / not built
 

package/dist/index.js

@@ -1260,9 +1260,11 @@ function describeVerdict(name, check) {
   switch (check.status) {
     case "ready":
       return green(`\u2713 ${name}: ready, ${n} tool${n === 1 ? "" : "s"}`);
-    case "needs-sign-in":
+    case "needs-sign-in": {
       if (check.alternative) return red(`\u2717 ${name}: ${check.detail ?? `use the built-in instead: antbot mcp add ${check.alternative}`}`);
-      return yellow(`! ${name}: needs sign-in${check.provider ? ` (${check.provider})` : ""}${n ? `, ${n} tools` : ""}`);
+      const why = check.detail ?? `needs sign-in${check.provider ? ` (${check.provider})` : ""}`;
+      return yellow(`! ${name}: ${why}${n ? `, ${n} tools` : ""}`);
+    }
     case "needs-credential":
       return yellow(`! ${name}: ${check.detail ?? "needs a credential"}`);
     case "unreachable":