@integrity-labs/agt-cli 0.18.0 → 0.19.0

package/dist/bin/agt.js

@@ -48,7 +48,7 @@ import {
   success,
   table,
   warn
-} from "../chunk-W6ADLCZD.js";
+} from "../chunk-HMFRBNWL.js";
 
 // src/bin/agt.ts
 import { join as join10 } from "path";
@@ -3732,7 +3732,7 @@ import { execFileSync, execSync } from "child_process";
 import { existsSync as existsSync5, realpathSync } from "fs";
 import chalk17 from "chalk";
 import ora15 from "ora";
-var cliVersion = true ? "0.18.0" : "dev";
+var cliVersion = true ? "0.19.0" : "dev";
 async function fetchLatestVersion() {
   const host2 = getHost();
   if (!host2) return null;
@@ -4190,7 +4190,7 @@ function handleError(err) {
 }
 
 // src/bin/agt.ts
-var cliVersion2 = true ? "0.18.0" : "dev";
+var cliVersion2 = true ? "0.19.0" : "dev";
 var program = new Command();
 program.name("agt").description("Augmented CLI \u2014 agent provisioning and management").version(cliVersion2).option("--json", "Emit machine-readable JSON output (suppress spinners and colors)").option("--skip-update-check", "Skip the automatic update check on startup");
 program.hook("preAction", (thisCommand) => {

package/dist/{chunk-W6ADLCZD.js → chunk-HMFRBNWL.js}

@@ -3122,10 +3122,13 @@ var OAUTH_PROVIDERS = {
     definitionId: "granola",
     authorizeUrl: "https://mcp-auth.granola.ai/oauth2/authorize",
     tokenUrl: "https://mcp-auth.granola.ai/oauth2/token",
-    // openid+profile+email give us the user identity for status_message;
-    // offline_access is the one that earns us a refresh_token so the
-    // refresh cron can rotate the bearer without operator action.
-    defaultScopes: ["openid", "profile", "email", "offline_access"],
+    // Minimal scope set: `offline_access` earns the refresh_token so the
+    // refresh cron can rotate the bearer without operator action; `openid`
+    // is required for the OIDC code flow even when we don't request an
+    // id_token. Profile/email are intentionally omitted — we have no
+    // userInfoUrl wired up here, so requesting them would over-ask consent
+    // for fields the callback can't read.
+    defaultScopes: ["openid", "offline_access"],
     supportsRefresh: true,
     extraAuthorizeParams: {},
     clientAuthMethod: "body",
@@ -3877,6 +3880,21 @@ function buildMcpJson(input) {
       mcpServers[integration.definition_id] = entry;
     }
   }
+  const hasAws = input.integrations?.some((i) => i.definition_id === "aws");
+  if (hasAws) {
+    mcpServers["cloud-broker"] = {
+      command: "npx",
+      args: ["-y", "@integrity-labs/cloud-broker@latest"],
+      env: {
+        AGT_HOST: "${AGT_HOST}",
+        AGT_TEAM_SLUG: "${AGT_TEAM_SLUG}",
+        AGT_TOKEN: "${AGT_TOKEN}",
+        AGT_API_KEY: "${AGT_API_KEY}",
+        PATH: process.env["PATH"] ?? "",
+        HOME: process.env["HOME"] ?? ""
+      }
+    };
+  }
   return { mcpServers };
 }
 function parseIntervalMinutes(scheduleEvery) {
@@ -4380,6 +4398,21 @@ ${sections}`
         this.writeMcpServer(codeName, integration.definition_id, entry);
       }
     }
+    const hasAws = integrations.some((i) => i.definition_id === "aws");
+    if (hasAws) {
+      this.writeMcpServer(codeName, "cloud-broker", {
+        command: "npx",
+        args: ["-y", "@integrity-labs/cloud-broker@latest"],
+        env: {
+          AGT_HOST: "${AGT_HOST}",
+          AGT_TEAM_SLUG: "${AGT_TEAM_SLUG}",
+          AGT_TOKEN: "${AGT_TOKEN}",
+          AGT_API_KEY: "${AGT_API_KEY}",
+          PATH: process.env["PATH"] ?? "",
+          HOME: process.env["HOME"] ?? ""
+        }
+      });
+    }
     const projectDir = getProjectDir(codeName);
     const claudeMdPath = join4(projectDir, "CLAUDE.md");
     try {
@@ -7967,4 +8000,4 @@ export {
   managerInstallCommand,
   managerUninstallCommand
 };
-//# sourceMappingURL=chunk-W6ADLCZD.js.map
+//# sourceMappingURL=chunk-HMFRBNWL.js.map