@integrity-labs/agt-cli 0.25.1 → 0.25.2

package/dist/bin/agt.js

@@ -26,7 +26,7 @@ import {
   success,
   table,
   warn
-} from "../chunk-AAK2IU2Z.js";
+} from "../chunk-U4DAVDAZ.js";
 import {
   CHANNEL_REGISTRY,
   DEPLOYMENT_TEMPLATES,
@@ -52,7 +52,7 @@ import {
   renderTemplate,
   resolveChannels,
   serializeManifestForSlackCli
-} from "../chunk-4K3ERUGE.js";
+} from "../chunk-VWOXS4YP.js";
 
 // src/bin/agt.ts
 import { join as join10 } from "path";
@@ -3736,7 +3736,7 @@ import { execFileSync, execSync } from "child_process";
 import { existsSync as existsSync5, realpathSync } from "fs";
 import chalk17 from "chalk";
 import ora15 from "ora";
-var cliVersion = true ? "0.25.1" : "dev";
+var cliVersion = true ? "0.25.2" : "dev";
 async function fetchLatestVersion() {
   const host2 = getHost();
   if (!host2) return null;
@@ -4268,7 +4268,7 @@ function handleError(err) {
 }
 
 // src/bin/agt.ts
-var cliVersion2 = true ? "0.25.1" : "dev";
+var cliVersion2 = true ? "0.25.2" : "dev";
 var program = new Command();
 program.name("agt").description("Augmented CLI \u2014 agent provisioning and management").version(cliVersion2).option("--json", "Emit machine-readable JSON output (suppress spinners and colors)").option("--skip-update-check", "Skip the automatic update check on startup");
 program.hook("preAction", (thisCommand) => {

package/dist/{chunk-4FSQVXWB.js → chunk-M2RBM3M5.js}

@@ -1,7 +1,7 @@
 import {
   KANBAN_LOOP_COMMAND,
   claudeModelAlias
-} from "./chunk-4K3ERUGE.js";
+} from "./chunk-VWOXS4YP.js";
 
 // src/lib/persistent-session.ts
 import { spawn, execSync, execFileSync as execFileSync2 } from "child_process";
@@ -1174,4 +1174,4 @@ export {
   stopAllSessionsAndWait,
   getProjectDir
 };
-//# sourceMappingURL=chunk-4FSQVXWB.js.map
+//# sourceMappingURL=chunk-M2RBM3M5.js.map

package/dist/{chunk-AAK2IU2Z.js → chunk-U4DAVDAZ.js}

@@ -1,6 +1,7 @@
 import {
   CHANNEL_REGISTRY,
   DEFAULT_MODELS,
+  OAUTH_PROVIDERS,
   formatForOpenClawCli,
   getChannel,
   getFramework,
@@ -8,7 +9,7 @@ import {
   parseDeliveryTarget,
   registerFramework,
   wrapScheduledTaskPrompt
-} from "./chunk-4K3ERUGE.js";
+} from "./chunk-VWOXS4YP.js";
 
 // ../../packages/core/dist/integrations/registry.js
 var INTEGRATION_REGISTRY = [
@@ -3393,129 +3394,6 @@ function safeWriteMcpJson(path, config) {
   return { written: true, errors: [] };
 }
 
-// ../../packages/core/dist/integrations/oauth-providers.js
-var OAUTH_PROVIDERS = {
-  "google-workspace": {
-    definitionId: "google-workspace",
-    authorizeUrl: "https://accounts.google.com/o/oauth2/v2/auth",
-    tokenUrl: "https://oauth2.googleapis.com/token",
-    revokeUrl: "https://oauth2.googleapis.com/revoke",
-    defaultScopes: [
-      "https://www.googleapis.com/auth/gmail.modify",
-      "https://www.googleapis.com/auth/calendar",
-      "https://www.googleapis.com/auth/drive",
-      "https://www.googleapis.com/auth/spreadsheets",
-      "https://www.googleapis.com/auth/documents",
-      "https://www.googleapis.com/auth/chat.messages",
-      "https://www.googleapis.com/auth/chat.spaces.readonly"
-    ],
-    supportsRefresh: true,
-    extraAuthorizeParams: {
-      access_type: "offline",
-      prompt: "consent"
-    },
-    clientAuthMethod: "body",
-    userInfoUrl: "https://www.googleapis.com/oauth2/v2/userinfo"
-  },
-  "github": {
-    definitionId: "github",
-    authorizeUrl: "https://github.com/login/oauth/authorize",
-    tokenUrl: "https://github.com/login/oauth/access_token",
-    defaultScopes: ["repo", "read:org", "gist", "workflow"],
-    supportsRefresh: true,
-    extraAuthorizeParams: {},
-    clientAuthMethod: "body",
-    userInfoUrl: "https://api.github.com/user"
-  },
-  "granola": {
-    // Granola MCP — remote streamable-HTTP at https://mcp.granola.ai/mcp.
-    // The AS is at mcp-auth.granola.ai and exposes RFC 8414 metadata at
-    // /.well-known/oauth-authorization-server. Auth is OAuth 2.0 with
-    // mandatory PKCE (S256) and a public client (no client_secret) issued
-    // via Dynamic Client Registration (RFC 7591). The bootstrap script
-    // (`packages/api/scripts/dcr-register.ts`) registers a client once at
-    // deploy time; OAUTH_GRANOLA_CLIENT_ID is set from its output.
-    definitionId: "granola",
-    authorizeUrl: "https://mcp-auth.granola.ai/oauth2/authorize",
-    tokenUrl: "https://mcp-auth.granola.ai/oauth2/token",
-    // Minimal scope set: `offline_access` earns the refresh_token so the
-    // refresh cron can rotate the bearer without operator action; `openid`
-    // is required for the OIDC code flow even when we don't request an
-    // id_token. Profile/email are intentionally omitted — we have no
-    // userInfoUrl wired up here, so requesting them would over-ask consent
-    // for fields the callback can't read.
-    defaultScopes: ["openid", "offline_access"],
-    supportsRefresh: true,
-    extraAuthorizeParams: {},
-    clientAuthMethod: "body",
-    pkce: "S256",
-    publicClient: true,
-    mcpUrl: "https://mcp.granola.ai/mcp"
-  },
-  "notion-cli": {
-    // Notion's public OAuth app. Tokens are workspace-scoped and long-lived —
-    // Notion does not issue refresh_tokens, so `supportsRefresh: false` and
-    // the refresh cron skips this provider entirely. Scopes are not part of
-    // Notion's authorize URL contract; consent is governed by what the user
-    // grants in the OAuth screen, so `defaultScopes` stays empty.
-    // `owner=user` forces the user-OAuth variant (vs internal integration).
-    // Requires OAUTH_NOTION_CLI_CLIENT_ID and OAUTH_NOTION_CLI_CLIENT_SECRET.
-    definitionId: "notion-cli",
-    authorizeUrl: "https://api.notion.com/v1/oauth/authorize",
-    tokenUrl: "https://api.notion.com/v1/oauth/token",
-    defaultScopes: [],
-    supportsRefresh: false,
-    extraAuthorizeParams: {
-      owner: "user"
-    },
-    clientAuthMethod: "basic"
-  },
-  "xero": {
-    definitionId: "xero",
-    authorizeUrl: "https://login.xero.com/identity/connect/authorize",
-    tokenUrl: "https://identity.xero.com/connect/token",
-    revokeUrl: "https://identity.xero.com/connect/revocation",
-    defaultScopes: [
-      "openid",
-      "profile",
-      "email",
-      "offline_access",
-      // Granular scopes (required for apps created after March 2, 2026 —
-      // do NOT revert to the broad `accounting.transactions` /
-      // `accounting.contacts` scopes, Xero rejects the manifest).
-      // The variant *without* `.read` is the read+write granular scope.
-      "accounting.settings.read",
-      // contacts: write enables agent-driven supplier/customer creation
-      // (required for bill creation since a bill must reference a contact).
-      "accounting.contacts",
-      // invoices: write enables bill creation (Type=ACCPAY invoices) and
-      // updates to sales invoices alongside the existing read access.
-      "accounting.invoices",
-      // attachments: write enables agents to attach the source PDF to a
-      // bill at creation time. Read-only would force a follow-up manual
-      // upload in Xero; write closes the loop.
-      "accounting.attachments",
-      // accounting.transactions.read → granular read-only replacements
-      // for the surfaces we don't yet need write access on.
-      "accounting.payments.read",
-      "accounting.banktransactions.read",
-      "accounting.manualjournals.read",
-      // accounting.reports.read → granular read-only replacements
-      "accounting.reports.balancesheet.read",
-      "accounting.reports.profitandloss.read",
-      "accounting.reports.trialbalance.read",
-      "accounting.reports.budgetsummary.read",
-      "accounting.reports.banksummary.read",
-      "accounting.reports.executivesummary.read",
-      "accounting.reports.aged.read"
-    ],
-    supportsRefresh: true,
-    extraAuthorizeParams: {},
-    clientAuthMethod: "basic",
-    userInfoUrl: "https://api.xero.com/connections"
-  }
-};
-
 // ../../packages/core/dist/provisioning/remote-mcp.js
 function envVarForToken(definitionId) {
   return `${definitionId.replace(/-/g, "_").toUpperCase()}_ACCESS_TOKEN`;
@@ -6710,4 +6588,4 @@ export {
   managerInstallSystemUnitCommand,
   managerUninstallSystemUnitCommand
 };
-//# sourceMappingURL=chunk-AAK2IU2Z.js.map
+//# sourceMappingURL=chunk-U4DAVDAZ.js.map