@digitalpresence/cliclaw-auth 0.1.1 → 0.3.0

package/dist/instance-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"instance-store.js","sourceRoot":"","sources":["../src/instance-store.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,UAAU,EACV,SAAS,EACT,YAAY,EACZ,aAAa,EACb,MAAM,EACN,WAAW,EACX,QAAQ,GACT,MAAM,IAAI,CAAC;AACZ,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,OAAO,EAAE,yBAAyB,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AACxF,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAEhD,MAAM,OAAO,aAAa;IAEd;IACA;IAFV,YACU,YAAoB,EACpB,UAAsB;QADtB,iBAAY,GAAZ,YAAY,CAAQ;QACpB,eAAU,GAAV,UAAU,CAAY;IAC7B,CAAC;IAEI,SAAS,CAAC,IAAY;QAC5B,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACtB,SAAS,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;IAEO,eAAe,CAAC,IAAY;QAClC,IAAI,CAAC;YACH,OAAO,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACrC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAED,wCAAwC;IACxC,eAAe,CAAC,SAAiB,EAAE,MAAc;QAC/C,OAAO,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;IACpD,CAAC;IAED,+DAA+D;IAC/D,gBAAgB,CAAC,SAAiB,EAAE,MAAc;QAChD,OAAO,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,WAAW,CAAC,CAAC;IACpE,CAAC;IAED,gFAAgF;IAChF,cAAc,CAAC,SAAiB,EAAE,MAAc;QAC9C,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC9C,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,UAAU,SAAS,aAAa,CAAC,CAAC;QAE/D,MAAM,YAAY,GAAG,IAAI,CAAC,eAAe,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAC7D,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;QAC7B,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC,CAAC;QAChD,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC,CAAC;QAC7C,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC;QAE3C,4BAA4B;QAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;QAC1D,MAAM,IAAI,GAAG,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC;QAC7D,MAAM,IAAI,GAAG,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC;QAE7D,8BAA8B;QAC9B,MAAM,WAAW,GAAG,IAAI,WAAW,CAAC,IAAI,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC,CAAC;QAClE,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,EAAE,CAAC;QACpC,MAAM,OAAO,GAAG,iBAAiB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAEpD,4DAA4D;QAC5D,aAAa,CACX,IAAI,CAAC,YAAY,EAAE,WAAW,CAAC,EAC/B,yBAAyB,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAClD,OAAO,CACR,CAAC;QAEF,OAAO,YAAY,CAAC;IACtB,CAAC;IAED,kFAAkF;IAClF,YAAY,CAAC,SAAiB,EAAE,MAAc;QAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC9C,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,UAAU,SAAS,aAAa,CAAC,CAAC;QAE/D,MAAM,YAAY,GAAG,IAAI,CAAC,eAAe,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAC7D,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YAC9B,IAAI,CAAC,cAAc,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;YACvC,OAAO;QACT,CAAC;QAED,4BAA4B;QAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;QAC1D,MAAM,IAAI,GAAG,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC;QAC7D,MAAM,IAAI,GAAG,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC;QAE7D,8DAA8D;QAC9D,MAAM,WAAW,GAAG,IAAI,WAAW,CAAC,IAAI,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC,CAAC;QAClE,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,EAAE,CAAC;QACpC,MAAM,OAAO,GAAG,iBAAiB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QACpD,aAAa,CACX,IAAI,CAAC,YAAY,EAAE,WAAW,CAAC,EAC/B,yBAAyB,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAClD,OAAO,CACR,CAAC;IACJ,CAAC;IAED,yBAAyB;IACzB,cAAc,CAAC,SAAiB,EAAE,MAAc;QAC9C,MAAM,YAAY,GAAG,IAAI,CAAC,eAAe,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAC7D,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC;YAAE,OAAO,KAAK,CAAC;QAC5C,MAAM,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1C,OAAO,IAAI,CAAC;IACd,CAAC;IAED,4DAA4D;IAC5D,aAAa,CAAC,SAAkB;QAC9B,MAAM,OAAO,GAA+D,EAAE,CAAC;QAE/E,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC;YAAE,OAAO,OAAO,CAAC;QAEnD,MAAM,SAAS,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;YAC1F,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;YACjD,OAAO,QAAQ,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,CAAC;QAC3C,CAAC,CAAC,CAAC;QAEH,KAAK,MAAM,KAAK,IAAI,SAAS,EAAE,CAAC;YAC9B,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;YACjD,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;gBAAE,SAAS;YAErC,KAAK,MAAM,MAAM,IAAI,WAAW,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC5C,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;gBACzC,IAAI,QAAQ,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;oBACrC,OAAO,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;gBAC7D,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;CACF"}

package/dist/integration-registry.d.ts

@@ -1,7 +1,18 @@
 export interface IntegrationDef {
     id: string;
     displayName: string;
+    provider: string;
     scopes: string[];
 }
+export interface ProviderConfig {
+    authUrl: string;
+    tokenUrl: string;
+    userInfoUrl: string;
+    clientIdEnv: string;
+    clientSecretEnv: string;
+    extraScopes: string[];
+    extraAuthParams: Record<string, string>;
+}
+export declare const PROVIDERS: Record<string, ProviderConfig>;
 export declare const INTEGRATIONS: Record<string, IntegrationDef>;
 //# sourceMappingURL=integration-registry.d.ts.map

package/dist/integration-registry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"integration-registry.d.ts","sourceRoot":"","sources":["../src/integration-registry.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAED,eAAO,MAAM,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAyCvD,CAAC"}
+{"version":3,"file":"integration-registry.d.ts","sourceRoot":"","sources":["../src/integration-registry.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IACxB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACzC;AAED,eAAO,MAAM,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAmBpD,CAAC;AAEF,eAAO,MAAM,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAqDvD,CAAC"}

package/dist/integration-registry.js

@@ -1,17 +1,40 @@
+export const PROVIDERS = {
+    google: {
+        authUrl: "https://accounts.google.com/o/oauth2/v2/auth",
+        tokenUrl: "https://oauth2.googleapis.com/token",
+        userInfoUrl: "https://www.googleapis.com/oauth2/v2/userinfo",
+        clientIdEnv: "GOOGLE_CLIENT_ID",
+        clientSecretEnv: "GOOGLE_CLIENT_SECRET",
+        extraScopes: ["openid", "email", "profile"],
+        extraAuthParams: { access_type: "offline", prompt: "consent" },
+    },
+    github: {
+        authUrl: "https://github.com/login/oauth/authorize",
+        tokenUrl: "https://github.com/login/oauth/access_token",
+        userInfoUrl: "https://api.github.com/user",
+        clientIdEnv: "GITHUB_CLIENT_ID",
+        clientSecretEnv: "GITHUB_CLIENT_SECRET",
+        extraScopes: [],
+        extraAuthParams: {},
+    },
+};
 export const INTEGRATIONS = {
     gmail: {
         id: "gmail",
         displayName: "Gmail",
+        provider: "google",
         scopes: ["https://www.googleapis.com/auth/gmail.modify"],
     },
     gdrive: {
         id: "gdrive",
         displayName: "Google Drive",
+        provider: "google",
         scopes: ["https://www.googleapis.com/auth/drive"],
     },
     gsheets: {
         id: "gsheets",
         displayName: "Google Sheets",
+        provider: "google",
         scopes: [
             "https://www.googleapis.com/auth/spreadsheets",
             "https://www.googleapis.com/auth/drive",
@@ -20,6 +43,7 @@ export const INTEGRATIONS = {
     gslides: {
         id: "gslides",
         displayName: "Google Slides",
+        provider: "google",
         scopes: [
             "https://www.googleapis.com/auth/presentations",
             "https://www.googleapis.com/auth/drive.file",
@@ -28,16 +52,24 @@ export const INTEGRATIONS = {
     calendar: {
         id: "calendar",
         displayName: "Google Calendar",
+        provider: "google",
         scopes: ["https://www.googleapis.com/auth/calendar"],
     },
     forms: {
         id: "forms",
         displayName: "Google Forms",
+        provider: "google",
         scopes: [
             "https://www.googleapis.com/auth/forms.body",
             "https://www.googleapis.com/auth/forms.responses.readonly",
             "https://www.googleapis.com/auth/drive.metadata.readonly",
         ],
     },
+    github: {
+        id: "github",
+        displayName: "GitHub",
+        provider: "github",
+        scopes: ["repo", "read:user", "user:email"],
+    },
 };
 //# sourceMappingURL=integration-registry.js.map

package/dist/integration-registry.js.map

@@ -1 +1 @@
-{"version":3,"file":"integration-registry.js","sourceRoot":"","sources":["../src/integration-registry.ts"],"names":[],"mappings":"AAMA,MAAM,CAAC,MAAM,YAAY,GAAmC;IAC1D,KAAK,EAAE;QACL,EAAE,EAAE,OAAO;QACX,WAAW,EAAE,OAAO;QACpB,MAAM,EAAE,CAAC,8CAA8C,CAAC;KACzD;IACD,MAAM,EAAE;QACN,EAAE,EAAE,QAAQ;QACZ,WAAW,EAAE,cAAc;QAC3B,MAAM,EAAE,CAAC,uCAAuC,CAAC;KAClD;IACD,OAAO,EAAE;QACP,EAAE,EAAE,SAAS;QACb,WAAW,EAAE,eAAe;QAC5B,MAAM,EAAE;YACN,8CAA8C;YAC9C,uCAAuC;SACxC;KACF;IACD,OAAO,EAAE;QACP,EAAE,EAAE,SAAS;QACb,WAAW,EAAE,eAAe;QAC5B,MAAM,EAAE;YACN,+CAA+C;YAC/C,4CAA4C;SAC7C;KACF;IACD,QAAQ,EAAE;QACR,EAAE,EAAE,UAAU;QACd,WAAW,EAAE,iBAAiB;QAC9B,MAAM,EAAE,CAAC,0CAA0C,CAAC;KACrD;IACD,KAAK,EAAE;QACL,EAAE,EAAE,OAAO;QACX,WAAW,EAAE,cAAc;QAC3B,MAAM,EAAE;YACN,4CAA4C;YAC5C,0DAA0D;YAC1D,yDAAyD;SAC1D;KACF;CACF,CAAC"}
+{"version":3,"file":"integration-registry.js","sourceRoot":"","sources":["../src/integration-registry.ts"],"names":[],"mappings":"AAiBA,MAAM,CAAC,MAAM,SAAS,GAAmC;IACvD,MAAM,EAAE;QACN,OAAO,EAAE,8CAA8C;QACvD,QAAQ,EAAE,qCAAqC;QAC/C,WAAW,EAAE,+CAA+C;QAC5D,WAAW,EAAE,kBAAkB;QAC/B,eAAe,EAAE,sBAAsB;QACvC,WAAW,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,SAAS,CAAC;QAC3C,eAAe,EAAE,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE;KAC/D;IACD,MAAM,EAAE;QACN,OAAO,EAAE,0CAA0C;QACnD,QAAQ,EAAE,6CAA6C;QACvD,WAAW,EAAE,6BAA6B;QAC1C,WAAW,EAAE,kBAAkB;QAC/B,eAAe,EAAE,sBAAsB;QACvC,WAAW,EAAE,EAAE;QACf,eAAe,EAAE,EAAE;KACpB;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,YAAY,GAAmC;IAC1D,KAAK,EAAE;QACL,EAAE,EAAE,OAAO;QACX,WAAW,EAAE,OAAO;QACpB,QAAQ,EAAE,QAAQ;QAClB,MAAM,EAAE,CAAC,8CAA8C,CAAC;KACzD;IACD,MAAM,EAAE;QACN,EAAE,EAAE,QAAQ;QACZ,WAAW,EAAE,cAAc;QAC3B,QAAQ,EAAE,QAAQ;QAClB,MAAM,EAAE,CAAC,uCAAuC,CAAC;KAClD;IACD,OAAO,EAAE;QACP,EAAE,EAAE,SAAS;QACb,WAAW,EAAE,eAAe;QAC5B,QAAQ,EAAE,QAAQ;QAClB,MAAM,EAAE;YACN,8CAA8C;YAC9C,uCAAuC;SACxC;KACF;IACD,OAAO,EAAE;QACP,EAAE,EAAE,SAAS;QACb,WAAW,EAAE,eAAe;QAC5B,QAAQ,EAAE,QAAQ;QAClB,MAAM,EAAE;YACN,+CAA+C;YAC/C,4CAA4C;SAC7C;KACF;IACD,QAAQ,EAAE;QACR,EAAE,EAAE,UAAU;QACd,WAAW,EAAE,iBAAiB;QAC9B,QAAQ,EAAE,QAAQ;QAClB,MAAM,EAAE,CAAC,0CAA0C,CAAC;KACrD;IACD,KAAK,EAAE;QACL,EAAE,EAAE,OAAO;QACX,WAAW,EAAE,cAAc;QAC3B,QAAQ,EAAE,QAAQ;QAClB,MAAM,EAAE;YACN,4CAA4C;YAC5C,0DAA0D;YAC1D,yDAAyD;SAC1D;KACF;IACD,MAAM,EAAE;QACN,EAAE,EAAE,QAAQ;QACZ,WAAW,EAAE,QAAQ;QACrB,QAAQ,EAAE,QAAQ;QAClB,MAAM,EAAE,CAAC,MAAM,EAAE,WAAW,EAAE,YAAY,CAAC;KAC5C;CACF,CAAC"}

package/dist/scoped-client-manager.d.ts

@@ -1,15 +1,14 @@
 import { google } from "googleapis";
 import { OAuthClientManager } from "./oauth-client-manager.js";
 import { TokenStore } from "./token-store.js";
-import type { AgentPermission } from "./agent-store.js";
 type OAuth2Client = InstanceType<typeof google.auth.OAuth2>;
 export declare class PermissionDeniedError extends Error {
     constructor(integration: string, account: string);
 }
 export declare class ScopedClientManager {
     private inner;
-    private permissions;
-    constructor(inner: OAuthClientManager, permissions: AgentPermission[]);
+    private integrations;
+    constructor(inner: OAuthClientManager, integrations: string[]);
     private hasPermission;
     getClient(accountKey: string): OAuth2Client;
     listAccounts(): string[];

package/dist/scoped-client-manager.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"scoped-client-manager.d.ts","sourceRoot":"","sources":["../src/scoped-client-manager.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AACpC,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAC/D,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAExD,KAAK,YAAY,GAAG,YAAY,CAAC,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AAE5D,qBAAa,qBAAsB,SAAQ,KAAK;gBAClC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM;CAIjD;AAUD,qBAAa,mBAAmB;IAE5B,OAAO,CAAC,KAAK;IACb,OAAO,CAAC,WAAW;gBADX,KAAK,EAAE,kBAAkB,EACzB,WAAW,EAAE,eAAe,EAAE;IAGxC,OAAO,CAAC,aAAa;IAMrB,SAAS,CAAC,UAAU,EAAE,MAAM,GAAG,YAAY;IAQ3C,YAAY,IAAI,MAAM,EAAE;IAOxB,aAAa,IAAI,UAAU;IAI3B,YAAY,IAAI,YAAY;IAI5B,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,CAAC,YAAY,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,YAAY;CAOrG"}
+{"version":3,"file":"scoped-client-manager.d.ts","sourceRoot":"","sources":["../src/scoped-client-manager.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AACpC,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAC/D,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAE9C,KAAK,YAAY,GAAG,YAAY,CAAC,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AAE5D,qBAAa,qBAAsB,SAAQ,KAAK;gBAClC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM;CAIjD;AAUD,qBAAa,mBAAmB;IAE5B,OAAO,CAAC,KAAK;IACb,OAAO,CAAC,YAAY;gBADZ,KAAK,EAAE,kBAAkB,EACzB,YAAY,EAAE,MAAM,EAAE;IAGhC,OAAO,CAAC,aAAa;IAIrB,SAAS,CAAC,UAAU,EAAE,MAAM,GAAG,YAAY;IAQ3C,YAAY,IAAI,MAAM,EAAE;IAOxB,aAAa,IAAI,UAAU;IAI3B,YAAY,IAAI,YAAY;IAI5B,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,CAAC,YAAY,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,YAAY;CAOrG"}

package/dist/scoped-client-manager.js

@@ -13,25 +13,25 @@ function parseAccountKey(key) {
 }
 export class ScopedClientManager {
     inner;
-    permissions;
-    constructor(inner, permissions) {
+    integrations;
+    constructor(inner, integrations) {
         this.inner = inner;
-        this.permissions = permissions;
+        this.integrations = integrations;
     }
-    hasPermission(integration, _account) {
-        return this.permissions.some((p) => p.integration === integration);
+    hasPermission(integration) {
+        return this.integrations.includes(integration);
     }
     getClient(accountKey) {
         const { integration, account } = parseAccountKey(accountKey);
-        if (!this.hasPermission(integration, account)) {
+        if (!this.hasPermission(integration)) {
             throw new PermissionDeniedError(integration, account);
         }
         return this.inner.getClient(accountKey);
     }
     listAccounts() {
         return this.inner.listAccounts().filter((key) => {
-            const { integration, account } = parseAccountKey(key);
-            return this.hasPermission(integration, account);
+            const { integration } = parseAccountKey(key);
+            return this.hasPermission(integration);
         });
     }
     getTokenStore() {
@@ -42,7 +42,7 @@ export class ScopedClientManager {
     }
     setCredentials(account, tokens) {
         const { integration, account: acct } = parseAccountKey(account);
-        if (!this.hasPermission(integration, acct)) {
+        if (!this.hasPermission(integration)) {
             throw new PermissionDeniedError(integration, acct);
         }
         return this.inner.setCredentials(account, tokens);

package/dist/scoped-client-manager.js.map

@@ -1 +1 @@
-{"version":3,"file":"scoped-client-manager.js","sourceRoot":"","sources":["../src/scoped-client-manager.ts"],"names":[],"mappings":"AAOA,MAAM,OAAO,qBAAsB,SAAQ,KAAK;IAC9C,YAAY,WAAmB,EAAE,OAAe;QAC9C,KAAK,CAAC,sCAAsC,WAAW,IAAI,OAAO,EAAE,CAAC,CAAC;QACtE,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;IACtC,CAAC;CACF;AAED,SAAS,eAAe,CAAC,GAAW;IAClC,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAClC,IAAI,QAAQ,KAAK,CAAC,CAAC,EAAE,CAAC;QACpB,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;IAChD,CAAC;IACD,OAAO,EAAE,WAAW,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC,EAAE,CAAC;AACnF,CAAC;AAED,MAAM,OAAO,mBAAmB;IAEpB;IACA;IAFV,YACU,KAAyB,EACzB,WAA8B;QAD9B,UAAK,GAAL,KAAK,CAAoB;QACzB,gBAAW,GAAX,WAAW,CAAmB;IACrC,CAAC;IAEI,aAAa,CAAC,WAAmB,EAAE,QAAgB;QACzD,OAAO,IAAI,CAAC,WAAW,CAAC,IAAI,CAC1B,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,KAAK,WAAW,CACrC,CAAC;IACJ,CAAC;IAED,SAAS,CAAC,UAAkB;QAC1B,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,GAAG,eAAe,CAAC,UAAU,CAAC,CAAC;QAC7D,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,WAAW,EAAE,OAAO,CAAC,EAAE,CAAC;YAC9C,MAAM,IAAI,qBAAqB,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QACxD,CAAC;QACD,OAAO,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IAC1C,CAAC;IAED,YAAY;QACV,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE;YAC9C,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;YACtD,OAAO,IAAI,CAAC,aAAa,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QAClD,CAAC,CAAC,CAAC;IACL,CAAC;IAED,aAAa;QACX,OAAO,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,CAAC;IACpC,CAAC;IAED,YAAY;QACV,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC;IACnC,CAAC;IAED,cAAc,CAAC,OAAe,EAAE,MAAqD;QACnF,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;QAChE,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,WAAW,EAAE,IAAI,CAAC,EAAE,CAAC;YAC3C,MAAM,IAAI,qBAAqB,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;QACrD,CAAC;QACD,OAAO,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACpD,CAAC;CACF"}
+{"version":3,"file":"scoped-client-manager.js","sourceRoot":"","sources":["../src/scoped-client-manager.ts"],"names":[],"mappings":"AAMA,MAAM,OAAO,qBAAsB,SAAQ,KAAK;IAC9C,YAAY,WAAmB,EAAE,OAAe;QAC9C,KAAK,CAAC,sCAAsC,WAAW,IAAI,OAAO,EAAE,CAAC,CAAC;QACtE,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;IACtC,CAAC;CACF;AAED,SAAS,eAAe,CAAC,GAAW;IAClC,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAClC,IAAI,QAAQ,KAAK,CAAC,CAAC,EAAE,CAAC;QACpB,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;IAChD,CAAC;IACD,OAAO,EAAE,WAAW,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC,EAAE,CAAC;AACnF,CAAC;AAED,MAAM,OAAO,mBAAmB;IAEpB;IACA;IAFV,YACU,KAAyB,EACzB,YAAsB;QADtB,UAAK,GAAL,KAAK,CAAoB;QACzB,iBAAY,GAAZ,YAAY,CAAU;IAC7B,CAAC;IAEI,aAAa,CAAC,WAAmB;QACvC,OAAO,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACjD,CAAC;IAED,SAAS,CAAC,UAAkB;QAC1B,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,GAAG,eAAe,CAAC,UAAU,CAAC,CAAC;QAC7D,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC,EAAE,CAAC;YACrC,MAAM,IAAI,qBAAqB,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QACxD,CAAC;QACD,OAAO,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IAC1C,CAAC;IAED,YAAY;QACV,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE;YAC9C,MAAM,EAAE,WAAW,EAAE,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;YAC7C,OAAO,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC,CAAC;QACzC,CAAC,CAAC,CAAC;IACL,CAAC;IAED,aAAa;QACX,OAAO,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,CAAC;IACpC,CAAC;IAED,YAAY;QACV,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC;IACnC,CAAC;IAED,cAAc,CAAC,OAAe,EAAE,MAAqD;QACnF,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;QAChE,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC,EAAE,CAAC;YACrC,MAAM,IAAI,qBAAqB,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;QACrD,CAAC;QACD,OAAO,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACpD,CAAC;CACF"}

package/dist/token-store.d.ts

@@ -1,13 +1,14 @@
-import type { Credentials } from "google-auth-library";
+type OAuthCredentials = Record<string, any>;
 export declare class TokenStore {
     private tokensPath;
     constructor(tokensPath: string);
     private load;
     private save;
-    get(account: string): Credentials | null;
-    set(account: string, tokens: Credentials): void;
+    get(account: string): OAuthCredentials | null;
+    set(account: string, tokens: OAuthCredentials): void;
     has(account: string): boolean;
     delete(account: string): boolean;
     list(): string[];
 }
+export {};
 //# sourceMappingURL=token-store.d.ts.map

package/dist/token-store.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"token-store.d.ts","sourceRoot":"","sources":["../src/token-store.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAMvD,qBAAa,UAAU;IACT,OAAO,CAAC,UAAU;gBAAV,UAAU,EAAE,MAAM;IAEtC,OAAO,CAAC,IAAI;IAWZ,OAAO,CAAC,IAAI;IAQZ,GAAG,CAAC,OAAO,EAAE,MAAM,GAAG,WAAW,GAAG,IAAI;IAaxC,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,GAAG,IAAI;IAM/C,GAAG,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO;IAI7B,MAAM,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO;IAmBhC,IAAI,IAAI,MAAM,EAAE;CAGjB"}
+{"version":3,"file":"token-store.d.ts","sourceRoot":"","sources":["../src/token-store.ts"],"names":[],"mappings":"AAGA,KAAK,gBAAgB,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;AAM5C,qBAAa,UAAU;IACT,OAAO,CAAC,UAAU;gBAAV,UAAU,EAAE,MAAM;IAEtC,OAAO,CAAC,IAAI;IAWZ,OAAO,CAAC,IAAI;IAQZ,GAAG,CAAC,OAAO,EAAE,MAAM,GAAG,gBAAgB,GAAG,IAAI;IAa7C,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,gBAAgB,GAAG,IAAI;IAMpD,GAAG,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO;IAI7B,MAAM,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO;IAmBhC,IAAI,IAAI,MAAM,EAAE;CAGjB"}

package/dist/token-store.js.map

@@ -1 +1 @@
-{"version":3,"file":"token-store.js","sourceRoot":"","sources":["../src/token-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,IAAI,CAAC;AACxE,OAAO,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAO/B,MAAM,OAAO,UAAU;IACD;IAApB,YAAoB,UAAkB;QAAlB,eAAU,GAAV,UAAU,CAAQ;IAAG,CAAC;IAElC,IAAI;QACV,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YACjC,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,CAAc,CAAC;QACzE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAEO,IAAI,CAAC,IAAe;QAC1B,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACrC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACrB,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACtC,CAAC;QACD,aAAa,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IACzE,CAAC;IAED,GAAG,CAAC,OAAe;QACjB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QACzB,IAAI,IAAI,CAAC,OAAO,CAAC;YAAE,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC;QACxC,uEAAuE;QACvE,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACpC,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAClC,IAAI,QAAQ,KAAK,CAAC,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC,KAAK,OAAO,EAAE,CAAC;gBAC3D,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC;YACnB,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,GAAG,CAAC,OAAe,EAAE,MAAmB;QACtC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QACzB,IAAI,CAAC,OAAO,CAAC,GAAG,MAAM,CAAC;QACvB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClB,CAAC;IAED,GAAG,CAAC,OAAe;QACjB,OAAO,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC;IACpC,CAAC;IAED,MAAM,CAAC,OAAe;QACpB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QACzB,IAAI,OAAO,IAAI,IAAI,EAAE,CAAC;YACpB,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC;YACrB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAChB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,qCAAqC;QACrC,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACpC,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAClC,IAAI,QAAQ,KAAK,CAAC,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC,KAAK,OAAO,EAAE,CAAC;gBAC3D,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC;gBACjB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAChB,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI;QACF,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IAClC,CAAC;CACF"}
+{"version":3,"file":"token-store.js","sourceRoot":"","sources":["../src/token-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,IAAI,CAAC;AACxE,OAAO,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAQ/B,MAAM,OAAO,UAAU;IACD;IAApB,YAAoB,UAAkB;QAAlB,eAAU,GAAV,UAAU,CAAQ;IAAG,CAAC;IAElC,IAAI;QACV,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YACjC,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,CAAc,CAAC;QACzE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAEO,IAAI,CAAC,IAAe;QAC1B,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACrC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACrB,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACtC,CAAC;QACD,aAAa,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IACzE,CAAC;IAED,GAAG,CAAC,OAAe;QACjB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QACzB,IAAI,IAAI,CAAC,OAAO,CAAC;YAAE,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC;QACxC,uEAAuE;QACvE,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACpC,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAClC,IAAI,QAAQ,KAAK,CAAC,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC,KAAK,OAAO,EAAE,CAAC;gBAC3D,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC;YACnB,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,GAAG,CAAC,OAAe,EAAE,MAAwB;QAC3C,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QACzB,IAAI,CAAC,OAAO,CAAC,GAAG,MAAM,CAAC;QACvB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClB,CAAC;IAED,GAAG,CAAC,OAAe;QACjB,OAAO,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC;IACpC,CAAC;IAED,MAAM,CAAC,OAAe;QACpB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QACzB,IAAI,OAAO,IAAI,IAAI,EAAE,CAAC;YACpB,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC;YACrB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAChB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,qCAAqC;QACrC,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACpC,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAClC,IAAI,QAAQ,KAAK,CAAC,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC,KAAK,OAAO,EAAE,CAAC;gBAC3D,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC;gBACjB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAChB,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI;QACF,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IAClC,CAAC;CACF"}

package/package.json

@@ -1,11 +1,15 @@
 {
   "name": "@digitalpresence/cliclaw-auth",
-  "version": "0.1.1",
+  "version": "0.3.0",
   "type": "module",
-  "main": "dist/index.js",
-  "types": "dist/index.d.ts",
+  "main": "src/index.ts",
+  "types": "src/index.ts",
   "exports": {
     ".": {
+      "import": "./src/index.ts",
+      "types": "./src/index.ts"
+    },
+    "./dist": {
       "import": "./dist/index.js",
       "types": "./dist/index.d.ts"
     }

package/src/agent-store.ts

@@ -7,14 +7,12 @@ import {
   readdirSync,
   renameSync,
   statSync,
-  unlinkSync,
-  symlinkSync,
-  lstatSync,
 } from "fs";
 import { join } from "path";
-import { generateClaudeMd } from "./claude-md-generator.js";
+import { generateContextMd } from "./claude-md-generator.js";
 import { MemoryStore } from "./memory-store.js";
 
+/** @deprecated Use `integrations: string[]` on AgentConfig instead */
 export interface AgentPermission {
   integration: string;
   account: string;
@@ -23,9 +21,8 @@ export interface AgentPermission {
 export interface CronJobConfig {
   id: string;
   schedule: string;
-  task: string;
+  taskFile: string;           // relative path to markdown task description
   maxIterations: number;
-  completionPromise: string;
   enabled: boolean;
   createdAt: string;
 }
@@ -34,8 +31,7 @@ export interface AgentConfig {
   name: string;
   displayName: string;
   role: string;
-  permissions: AgentPermission[];
-  memory: string[];
+  integrations: string[];     // integration IDs (e.g. ["gmail", "gdrive"])
   cronJobs: CronJobConfig[];
   createdAt: string;
   updatedAt: string;
@@ -83,33 +79,25 @@ export class AgentStore {
     return join(this.agentsDir, name);
   }
 
-  /** Get or create a per-client workspace, symlinking shared agent files */
-  clientWorkspacePath(agentName: string, userId: string): string {
-    const clientDir = join(this.agentsDir, agentName, "clients", userId);
-    if (!existsSync(clientDir)) {
-      mkdirSync(clientDir, { recursive: true });
-    }
-
-    // Symlink shared agent files into the client workspace
-    const agentDir = this.workspacePath(agentName);
-    for (const file of ["CLAUDE.md", "SOUL.md", "ROLE.md"]) {
-      const target = join(agentDir, file);
-      const link = join(clientDir, file);
-      if (existsSync(target) && !existsSync(link)) {
-        symlinkSync(target, link);
-      }
-    }
-
-    return clientDir;
-  }
-
   get(name: string): AgentConfig | null {
     const path = this.filePath(name);
     if (!existsSync(path)) return null;
     try {
-      const config = JSON.parse(readFileSync(path, "utf-8")) as AgentConfig;
-      if (!config.cronJobs) config.cronJobs = [];
-      return config;
+      const raw = JSON.parse(readFileSync(path, "utf-8"));
+      // Migrate legacy formats
+      if (!raw.cronJobs) raw.cronJobs = [];
+      if (!raw.integrations) {
+        // Migrate from permissions[] → integrations[]
+        if (raw.permissions && Array.isArray(raw.permissions)) {
+          raw.integrations = [...new Set(raw.permissions.map((p: AgentPermission) => p.integration))];
+        } else {
+          raw.integrations = [];
+        }
+      }
+      // Drop legacy fields
+      delete raw.permissions;
+      delete raw.memory;
+      return raw as AgentConfig;
     } catch {
       return null;
     }
@@ -170,35 +158,25 @@ export class AgentStore {
     this.writeWorkspaceFiles(config, dir);
   }
 
-  /** Get or create a MemoryStore for an agent, auto-migrating legacy memory */
+  /** Get or create a MemoryStore for an agent */
   getMemoryStore(name: string): MemoryStore {
     let store = this.memoryStores.get(name);
     if (store) return store;
 
     const memoryDir = join(this.workspacePath(name), "memory");
     store = new MemoryStore(memoryDir);
-
-    // Lazy migration: move config.memory[] → JSONL
-    const config = this.get(name);
-    if (config && config.memory.length > 0) {
-      store.migrate(config.memory);
-      config.memory = [];
-      config.updatedAt = new Date().toISOString();
-      this.save(config);
-    }
-
     this.memoryStores.set(name, store);
     return store;
   }
 
-  /** Regenerate CLAUDE.md from current config */
-  regenerateClaudeMd(name: string): void {
+  /** Regenerate CONTEXT.md from current config */
+  regenerateContextMd(name: string): void {
     const config = this.get(name);
     if (!config) return;
     const dir = this.workspacePath(name);
     const memoryStore = this.getMemoryStore(name);
     const memories = memoryStore.list();
-    writeFileSync(join(dir, "CLAUDE.md"), generateClaudeMd(config, memories), "utf-8");
+    writeFileSync(join(dir, "CONTEXT.md"), generateContextMd(config, memories), "utf-8");
   }
 
   addCronJob(agentName: string, job: CronJobConfig): void {
@@ -207,7 +185,7 @@ export class AgentStore {
     config.cronJobs.push(job);
     config.updatedAt = new Date().toISOString();
     this.save(config);
-    this.regenerateClaudeMd(agentName);
+    this.regenerateContextMd(agentName);
   }
 
   removeCronJob(agentName: string, jobId: string): void {
@@ -218,7 +196,7 @@ export class AgentStore {
     config.cronJobs.splice(idx, 1);
     config.updatedAt = new Date().toISOString();
     this.save(config);
-    this.regenerateClaudeMd(agentName);
+    this.regenerateContextMd(agentName);
   }
 
   listCronJobs(agentName: string): CronJobConfig[] {
@@ -240,7 +218,7 @@ export class AgentStore {
   private writeWorkspaceFiles(config: AgentConfig, dir: string): void {
     const memoryStore = this.getMemoryStore(config.name);
     const memories = memoryStore.list();
-    writeFileSync(join(dir, "CLAUDE.md"), generateClaudeMd(config, memories), "utf-8");
+    writeFileSync(join(dir, "CONTEXT.md"), generateContextMd(config, memories), "utf-8");
 
     const soulPath = join(dir, "SOUL.md");
     if (!existsSync(soulPath)) {

package/src/claude-md-generator.ts

@@ -1,43 +1,92 @@
 import type { AgentConfig } from "./agent-store.js";
 import type { MemoryEntry } from "./memory-store.js";
 
-export function generateClaudeMd(config: AgentConfig, memories: MemoryEntry[] = []): string {
-  const { displayName, permissions } = config;
+/**
+ * Generates the universal ~/.cliclaw/CLAUDE.md shared by all agents.
+ * Contains safety rules, CLI usage patterns, memory instructions, and behavioral guidelines.
+ * When soul/role/context are provided, they are inlined so the agent doesn't waste turns reading files.
+ */
+export function generateUniversalClaudeMd(sections?: {
+  soul?: string;
+  role?: string;
+  context?: string;
+}): string {
+  const lines: string[] = [];
 
-  const hasPermissions = permissions.length > 0;
+  lines.push("# Agent Instructions");
+  lines.push("");
 
-  // Deduplicate integrations for the summary
-  const integrations = [...new Set(permissions.map((p) => p.integration))];
+  if (sections?.soul || sections?.role || sections?.context) {
+    if (sections.soul) {
+      lines.push(sections.soul.trim());
+      lines.push("");
+    }
+    if (sections.role) {
+      lines.push(sections.role.trim());
+      lines.push("");
+    }
+    if (sections.context) {
+      lines.push(sections.context.trim());
+      lines.push("");
+    }
+  }
 
-  const lines: string[] = [];
 
-  lines.push(`# ${displayName}`);
-  lines.push("");
-  lines.push("Read SOUL.md for your identity and personality.");
-  lines.push("Read ROLE.md for your capabilities and instructions.");
+  lines.push("## Safety Rules");
+  lines.push("- Never access files outside your workspace directory");
+  lines.push("- Never modify or read system files, environment files, or credentials outside your workspace");
+  lines.push("- Never attempt to escalate permissions or bypass security boundaries");
+  lines.push("- Never share credentials, tokens, or sensitive data in your responses");
+  lines.push("- If a task requires access you don't have, say so — don't try to work around it");
   lines.push("");
+
   lines.push("## CLI Usage");
   lines.push("All integrations are accessed via the `cliclaw` CLI. Always pass `--account <account>` to specify which account to use.");
   lines.push("");
   lines.push("For detailed usage of any command, run:");
   lines.push("  `cliclaw <command> --help` or `cliclaw <command> <subcommand> --help`");
   lines.push("");
-  lines.push("## Permitted Integrations");
 
-  if (!hasPermissions) {
-    lines.push("No permissions granted yet.");
+  lines.push("## Memory");
+  lines.push("Save, search, and remove memories with `cliclaw agent memory --help`.");
+  lines.push("Your agent name is in CONTEXT.md — use it for all memory commands.");
+  lines.push("");
+  lines.push("### Memory Guidelines");
+  lines.push("- Save important facts, preferences, and context that will be useful across conversations");
+  lines.push("- Use descriptive tags to categorize memories for easy retrieval");
+  lines.push("- Search existing memories before adding duplicates");
+  lines.push("- Use importance levels: 1 (low), 2 (normal), 3 (critical)");
+  lines.push("");
+
+  lines.push("## General Guidelines");
+  lines.push("- Be concise and direct in responses");
+  lines.push("- When running CLI commands, check `--help` first if unsure about options");
+  lines.push("- When in a client workspace, read CLIENT_INTEGRATIONS.md for available account names");
+  lines.push("- If no CLIENT_INTEGRATIONS.md exists, use `--account default`");
+
+  return lines.join("\n");
+}
+
+/**
+ * Generates per-instance CONTEXT.md with agent-specific context:
+ * name, integrations, cron schedules, and current memories.
+ */
+export function generateContextMd(config: AgentConfig, memories: MemoryEntry[] = []): string {
+  const lines: string[] = [];
+
+  lines.push(`# ${config.displayName} — Context`);
+  lines.push("");
+  lines.push(`Agent name: \`${config.name}\``);
+  lines.push("");
+
+  lines.push("## Permitted Integrations");
+  if (config.integrations.length === 0) {
+    lines.push("No integrations configured.");
   } else {
-    for (const integration of integrations) {
+    for (const integration of config.integrations) {
       lines.push(`- \`cliclaw ${integration}\``);
     }
-    lines.push("");
-    lines.push("When running in a client workspace, read CLIENT_INTEGRATIONS.md for available account names.");
-    lines.push("If no CLIENT_INTEGRATIONS.md exists, use `--account default`.");
   }
-
-  lines.push("");
-  lines.push("## Memory");
-  lines.push(`Save, search, and remove memories with \`cliclaw agent memory --help\`. Your agent name is \`${config.name}\`.`);
   lines.push("");
 
   if (config.cronJobs && config.cronJobs.length > 0) {
@@ -46,17 +95,17 @@ export function generateClaudeMd(config: AgentConfig, memories: MemoryEntry[] =
     for (const job of config.cronJobs) {
       const status = job.enabled ? "enabled" : "disabled";
       lines.push(`- **${job.id}** (${status}): \`${job.schedule}\``);
-      lines.push(`  Task: ${job.task}`);
-      lines.push(`  Completion word: ${job.completionPromise} | Max iterations: ${job.maxIterations}`);
+      lines.push(`  Task file: ${job.taskFile}`);
+      lines.push(`  Max iterations: ${job.maxIterations}`);
     }
     lines.push("");
   }
 
   if (memories.length === 0) {
-    lines.push("### Current Memories");
+    lines.push("## Current Memories");
     lines.push("No memories yet.");
   } else {
-    lines.push("### Current Memories");
+    lines.push("## Current Memories");
 
     let displayMemories: MemoryEntry[];
     let truncated = false;
@@ -64,7 +113,6 @@ export function generateClaudeMd(config: AgentConfig, memories: MemoryEntry[] =
     if (memories.length > 50) {
       const critical = memories.filter((m) => m.importance === 3);
       const recent = memories.slice(-30);
-      // Merge critical + recent, deduplicate by id
       const seen = new Set<string>();
       displayMemories = [];
       for (const m of [...critical, ...recent]) {

package/src/config.ts

@@ -22,6 +22,10 @@ export function getAgentsDir(): string {
   return join(CONFIG_DIR, "agents");
 }
 
+export function getInstancesDir(): string {
+  return join(CONFIG_DIR, "instances");
+}
+
 export function loadConfig(): CliclawConfig {
   if (!existsSync(CONFIG_DIR)) {
     mkdirSync(CONFIG_DIR, { recursive: true });

package/src/index.ts

@@ -2,6 +2,7 @@ export { TokenStore } from "./token-store.js";
 export { OAuthClientManager } from "./oauth-client-manager.js";
 export { AgentStore } from "./agent-store.js";
 export type { AgentConfig, AgentPermission, CronJobConfig } from "./agent-store.js";
+export { getInstancesDir } from "./config.js";
 export { ScopedClientManager, PermissionDeniedError } from "./scoped-client-manager.js";
 export { createOAuthClient, getAuthUrl } from "./gmail-auth.js";
 export { createGDriveOAuthClient, getGDriveAuthUrl } from "./gdrive-auth.js";
@@ -11,9 +12,10 @@ export { createCalendarOAuthClient, getCalendarAuthUrl } from "./calendar-auth.j
 export { createFormsOAuthClient, getFormsAuthUrl } from "./forms-auth.js";
 export { waitForOAuthCallback } from "./oauth-server.js";
 export { loadConfig, getConfigDir, getTokensPath, getAgentsDir } from "./config.js";
-export { INTEGRATIONS } from "./integration-registry.js";
-export type { IntegrationDef } from "./integration-registry.js";
+export { INTEGRATIONS, PROVIDERS } from "./integration-registry.js";
+export type { IntegrationDef, ProviderConfig } from "./integration-registry.js";
 export type { CliclawConfig } from "./config.js";
-export { generateClaudeMd } from "./claude-md-generator.js";
+export { generateUniversalClaudeMd, generateContextMd } from "./claude-md-generator.js";
+export { InstanceStore } from "./instance-store.js";
 export { MemoryStore } from "./memory-store.js";
 export type { MemoryEntry } from "./memory-store.js";