@integrity-labs/agt-cli 0.28.21 → 0.28.22

package/dist/{chunk-3HZSMDEW.js → chunk-SN2G4B2Z.js}

@@ -1306,45 +1306,442 @@ var HOURLY_BY_REGION = {
 };
 var KNOWN_PRICING_REGIONS = Object.keys(HOURLY_BY_REGION);
 
-// ../../packages/core/dist/integrations/composio-linkage.js
-function assessAuthConfigLinkage(input) {
-  const { accountAuthConfigId, serverAuthConfigIds, serverId } = input;
-  const serverLabel = serverId ? ` (${serverId})` : "";
-  if (serverAuthConfigIds == null || !accountAuthConfigId) {
+// ../../packages/core/dist/integrations/oauth-providers.js
+var OAUTH_PROVIDERS = {
+  "google-workspace": {
+    definitionId: "google-workspace",
+    authorizeUrl: "https://accounts.google.com/o/oauth2/v2/auth",
+    tokenUrl: "https://oauth2.googleapis.com/token",
+    revokeUrl: "https://oauth2.googleapis.com/revoke",
+    defaultScopes: [
+      "https://www.googleapis.com/auth/gmail.modify",
+      "https://www.googleapis.com/auth/calendar",
+      "https://www.googleapis.com/auth/drive",
+      "https://www.googleapis.com/auth/spreadsheets",
+      "https://www.googleapis.com/auth/documents",
+      "https://www.googleapis.com/auth/chat.messages",
+      "https://www.googleapis.com/auth/chat.spaces.readonly"
+    ],
+    supportsRefresh: true,
+    extraAuthorizeParams: {
+      access_type: "offline",
+      prompt: "consent"
+    },
+    clientAuthMethod: "body",
+    userInfoUrl: "https://www.googleapis.com/oauth2/v2/userinfo"
+  },
+  "github": {
+    definitionId: "github",
+    authorizeUrl: "https://github.com/login/oauth/authorize",
+    tokenUrl: "https://github.com/login/oauth/access_token",
+    // ENG-6187: revoke the existing grant on reconnect so GitHub re-prompts and
+    // the four scopes below are actually granted. Without this, a stale narrow
+    // grant (e.g. an old read:user-only authorization) is silently re-issued and
+    // the missing-scopes banner loops forever.
+    grantRevokeUrl: "https://api.github.com/applications/{client_id}/grant",
+    defaultScopes: ["repo", "read:org", "gist", "workflow"],
+    supportsRefresh: true,
+    extraAuthorizeParams: {},
+    clientAuthMethod: "body",
+    userInfoUrl: "https://api.github.com/user"
+  },
+  "granola": {
+    // Granola MCP — remote streamable-HTTP at https://mcp.granola.ai/mcp.
+    // The AS is at mcp-auth.granola.ai and exposes RFC 8414 metadata at
+    // /.well-known/oauth-authorization-server. Auth is OAuth 2.0 with
+    // mandatory PKCE (S256) and a public client (no client_secret) issued
+    // via Dynamic Client Registration (RFC 7591). The bootstrap script
+    // (`packages/api/scripts/dcr-register.ts`) registers a client once at
+    // deploy time; OAUTH_GRANOLA_CLIENT_ID is set from its output.
+    definitionId: "granola",
+    authorizeUrl: "https://mcp-auth.granola.ai/oauth2/authorize",
+    tokenUrl: "https://mcp-auth.granola.ai/oauth2/token",
+    // Minimal scope set: `offline_access` earns the refresh_token so the
+    // refresh cron can rotate the bearer without operator action; `openid`
+    // is required for the OIDC code flow even when we don't request an
+    // id_token. Profile/email are intentionally omitted — we have no
+    // userInfoUrl wired up here, so requesting them would over-ask consent
+    // for fields the callback can't read.
+    defaultScopes: ["openid", "offline_access"],
+    supportsRefresh: true,
+    extraAuthorizeParams: {},
+    clientAuthMethod: "body",
+    pkce: "S256",
+    publicClient: true,
+    mcpUrl: "https://mcp.granola.ai/mcp"
+  },
+  "notion-cli": {
+    // Notion's public OAuth app. Tokens are workspace-scoped and long-lived —
+    // Notion does not issue refresh_tokens, so `supportsRefresh: false` and
+    // the refresh cron skips this provider entirely. Scopes are not part of
+    // Notion's authorize URL contract; consent is governed by what the user
+    // grants in the OAuth screen, so `defaultScopes` stays empty.
+    // `owner=user` forces the user-OAuth variant (vs internal integration).
+    // Requires OAUTH_NOTION_CLI_CLIENT_ID and OAUTH_NOTION_CLI_CLIENT_SECRET.
+    definitionId: "notion-cli",
+    authorizeUrl: "https://api.notion.com/v1/oauth/authorize",
+    tokenUrl: "https://api.notion.com/v1/oauth/token",
+    defaultScopes: [],
+    supportsRefresh: false,
+    extraAuthorizeParams: {
+      owner: "user"
+    },
+    clientAuthMethod: "basic"
+  },
+  "xero": {
+    definitionId: "xero",
+    authorizeUrl: "https://login.xero.com/identity/connect/authorize",
+    tokenUrl: "https://identity.xero.com/connect/token",
+    revokeUrl: "https://identity.xero.com/connect/revocation",
+    defaultScopes: [
+      "openid",
+      "profile",
+      "email",
+      "offline_access",
+      // Granular scopes (required for apps created after March 2, 2026 —
+      // do NOT revert to the broad `accounting.transactions` /
+      // `accounting.contacts` scopes, Xero rejects the manifest).
+      // The variant *without* `.read` is the read+write granular scope.
+      "accounting.settings.read",
+      // contacts: write enables agent-driven supplier/customer creation
+      // (required for bill creation since a bill must reference a contact).
+      "accounting.contacts",
+      // invoices: write enables bill creation (Type=ACCPAY invoices) and
+      // updates to sales invoices alongside the existing read access.
+      "accounting.invoices",
+      // attachments: write enables agents to attach the source PDF to a
+      // bill at creation time. Read-only would force a follow-up manual
+      // upload in Xero; write closes the loop.
+      "accounting.attachments",
+      // accounting.transactions.read → granular read-only replacements
+      // for the surfaces we don't yet need write access on.
+      "accounting.payments.read",
+      "accounting.banktransactions.read",
+      "accounting.manualjournals.read",
+      // accounting.reports.read → granular read-only replacements
+      "accounting.reports.balancesheet.read",
+      "accounting.reports.profitandloss.read",
+      "accounting.reports.trialbalance.read",
+      "accounting.reports.budgetsummary.read",
+      "accounting.reports.banksummary.read",
+      "accounting.reports.executivesummary.read",
+      "accounting.reports.aged.read"
+    ],
+    // Read-only variant (ENG-6170): the `.read` granular scope for every
+    // surface, so a token granted under it cannot create bills/invoices or
+    // mutate contacts/attachments. Used when an install is (re)connected with
+    // `read_only: true` — e.g. to lock a production-books integration to reads
+    // until per-vendor broker mediation (ENG-4922) gates its writes.
+    readOnlyScopes: [
+      "openid",
+      "profile",
+      "email",
+      "offline_access",
+      "accounting.settings.read",
+      "accounting.contacts.read",
+      "accounting.invoices.read",
+      "accounting.attachments.read",
+      "accounting.payments.read",
+      "accounting.banktransactions.read",
+      "accounting.manualjournals.read",
+      "accounting.reports.balancesheet.read",
+      "accounting.reports.profitandloss.read",
+      "accounting.reports.trialbalance.read",
+      "accounting.reports.budgetsummary.read",
+      "accounting.reports.banksummary.read",
+      "accounting.reports.executivesummary.read",
+      "accounting.reports.aged.read"
+    ],
+    supportsRefresh: true,
+    extraAuthorizeParams: {},
+    clientAuthMethod: "basic",
+    userInfoUrl: "https://api.xero.com/connections"
+  }
+};
+function getOAuthProvider(definitionId) {
+  return OAUTH_PROVIDERS[definitionId];
+}
+
+// ../../packages/core/dist/integrations/connectivity-probe.js
+var CONNECTIVITY_SEVERITY = {
+  ok: 0,
+  transient_error: 1,
+  degraded: 2,
+  down: 3
+};
+function worseConnectivityOutcome(a, b) {
+  return CONNECTIVITY_SEVERITY[b.status] > CONNECTIVITY_SEVERITY[a.status] ? b : a;
+}
+var HTTP_PROBE_PROVIDERS = /* @__PURE__ */ new Set([
+  "linear",
+  "google-workspace",
+  "xero",
+  "v0"
+  // ENG-6100: GitHub is deliberately NOT here. This set drives the ASYNC
+  // connectivity monitor's routing, where github (source_type='native')
+  // stays host-side (cli_command — `gh`, the credential the agent actually
+  // executes with) rather than a central stored-token probe. The
+  // synchronous Test button DOES probe the centrally-stored token via
+  // `probeHttpProvider` (PROBE_DEFINITIONS in connectivity-http-probes.ts
+  // includes 'github') — a narrower, honest "the token we stored is valid"
+  // check. Unifying the monitor onto the central probe is sub-issue C's call.
+]);
+var CLI_PROBE_ARGS = {
+  gcloud: ["version"],
+  // ENG-6206: `gh --version` only proves the binary exists, not that it's
+  // authenticated — so a missing/mis-named token read green (the false-green
+  // that hid the broken fleet). `gh auth status` exits non-zero when not
+  // logged in, the honest signal. Read-only. Requires the runner to pass the
+  // agent's GH_TOKEN/GITHUB_TOKEN env (see manager-worker runCli wiring).
+  github: ["auth", "status"]
+  // most CLIs respond to --version; override here only when they don't.
+};
+function cliArgsFor(definitionId, ct) {
+  if (Array.isArray(ct?.args) && ct.args.length > 0 && ct.args.every((a) => typeof a === "string")) {
+    return ct.args;
+  }
+  return CLI_PROBE_ARGS[definitionId] ?? ["--version"];
+}
+function mcpOverrideFrom(ct) {
+  const tool = typeof ct?.tool === "string" && ct.tool.trim().length > 0 ? ct.tool.trim() : void 0;
+  if (!tool)
+    return {};
+  const args = ct?.args && typeof ct.args === "object" && !Array.isArray(ct.args) ? ct.args : void 0;
+  return { probeTool: tool, ...args ? { probeArgs: args } : {} };
+}
+function resolveConnectivityProbe(input) {
+  const { definitionId, sourceType, authType } = input;
+  if (authType === "managed" || sourceType === "managed") {
     return {
-      linked: null,
-      message: "auth_config linkage not verified \u2014 " + (serverAuthConfigIds == null ? "couldn't read the wired MCP server's auth config binding" : "Composio returned no auth_config for the connected account"),
-      details: {
-        accountAuthConfigId: accountAuthConfigId ?? null,
-        serverAuthConfigIds: serverAuthConfigIds ?? null,
-        serverId: serverId ?? null
-      }
+      kind: "managed_composite",
+      sourceType: "managed",
+      readOnly: true,
+      label: `${definitionId}: MCP tools/list + account binding (managed)`,
+      centralReachable: false,
+      // ENG-6212: carry the operator-stored override tool (if any) so both the
+      // host executor and the central Test path call the same specific tool.
+      ...mcpOverrideFrom(input.connectivityTest)
     };
   }
-  if (serverAuthConfigIds.length === 0) {
+  if (HTTP_PROBE_PROVIDERS.has(definitionId)) {
     return {
-      linked: false,
-      message: `The agent's wired MCP server${serverLabel} has no auth config bound, so it cannot resolve the connected account (bound to auth_config ${accountAuthConfigId}) \u2014 reconnect/rebind required.`,
-      details: { accountAuthConfigId, serverAuthConfigIds, serverId: serverId ?? null }
+      kind: "http_provider",
+      sourceType: sourceType ?? "mcp_server",
+      readOnly: true,
+      label: `${definitionId}: read-only API check`,
+      centralReachable: true,
+      httpProvider: definitionId
     };
   }
-  if (serverAuthConfigIds.includes(accountAuthConfigId)) {
+  if (getOAuthProvider(definitionId)?.mcpUrl) {
     return {
-      linked: true,
-      message: `Connected account's auth_config (${accountAuthConfigId}) matches the wired MCP server binding.`,
-      details: { accountAuthConfigId, serverAuthConfigIds, serverId: serverId ?? null }
+      kind: "mcp_tools_list",
+      sourceType: sourceType ?? "mcp_server",
+      readOnly: true,
+      label: `${definitionId}: MCP tools/list`,
+      centralReachable: true
     };
   }
-  return {
-    linked: false,
-    message: `The connected account is bound to auth_config ${accountAuthConfigId}, but the agent's wired MCP server${serverLabel} resolves auth_config(s) [${serverAuthConfigIds.join(", ")}] \u2014 tool calls will fail with "No connected account found". Reconnect/rebind required.`,
-    details: { accountAuthConfigId, serverAuthConfigIds, serverId: serverId ?? null }
-  };
-}
-
-// ../../packages/core/dist/integrations/composio-account-probe.js
-var PROBE_TIMEOUT_MS = 1e4;
-var COMPOSIO_API_BASE = "https://backend.composio.dev";
+  switch (sourceType) {
+    case "mcp_server":
+      return {
+        kind: "unsupported",
+        sourceType: "mcp_server",
+        readOnly: true,
+        label: `${definitionId}: local-stdio MCP \u2014 no host probe available`,
+        centralReachable: false
+      };
+    case "cli_tool":
+      return {
+        kind: "cli_command",
+        sourceType: "cli_tool",
+        readOnly: true,
+        label: `${definitionId}: CLI reachability`,
+        centralReachable: false,
+        cliArgs: cliArgsFor(definitionId, input.connectivityTest)
+      };
+    case "native":
+      return {
+        kind: "builtin",
+        sourceType: "native",
+        readOnly: true,
+        label: `${definitionId}: built-in check`,
+        centralReachable: false
+      };
+    default:
+      return {
+        kind: "unsupported",
+        sourceType: sourceType ?? "native",
+        readOnly: true,
+        label: `${definitionId}: no connectivity probe available`,
+        centralReachable: false
+      };
+  }
+}
+
+// ../../packages/core/dist/integrations/mcp-http-probe.js
+var MCP_ACCEPT = "application/json, text/event-stream";
+var DEFAULT_TIMEOUT_MS = 1e4;
+function isRpcEnvelopeFor(msg, expectedId) {
+  return typeof msg === "object" && msg !== null && ("result" in msg || "error" in msg) && msg["id"] === expectedId;
+}
+async function parseRpc(res, expectedId) {
+  const ct = res.headers.get("content-type") ?? "";
+  if (ct.includes("text/event-stream")) {
+    const text = await res.text();
+    let dataLines = [];
+    const tryFrame = () => {
+      if (dataLines.length === 0)
+        return null;
+      try {
+        const msg2 = JSON.parse(dataLines.join("\n"));
+        if (isRpcEnvelopeFor(msg2, expectedId))
+          return msg2;
+      } catch {
+      }
+      return null;
+    };
+    for (const rawLine of text.split(/\r?\n/)) {
+      if (rawLine.startsWith("data:")) {
+        dataLines.push(rawLine.slice(5).trimStart());
+        continue;
+      }
+      if (rawLine === "") {
+        const frame = tryFrame();
+        if (frame)
+          return frame;
+        dataLines = [];
+      }
+    }
+    return tryFrame();
+  }
+  const msg = await res.json().catch(() => null);
+  return isRpcEnvelopeFor(msg, expectedId) ? msg : null;
+}
+function httpStatusOutcome(status, step) {
+  if (status === 401 || status === 403) {
+    return { status: "down", message: `MCP ${step} unauthorized (${status}) \u2014 reconnect required` };
+  }
+  if (status >= 500) {
+    return { status: "transient_error", message: `MCP ${step} returned ${status}` };
+  }
+  return { status: "down", message: `MCP ${step} returned ${status}` };
+}
+async function probeMcpHttp(config, fetchImpl = fetch) {
+  const timeoutMs = config.timeoutMs ?? DEFAULT_TIMEOUT_MS;
+  const baseHeaders = {
+    ...config.headers ?? {},
+    "Content-Type": "application/json",
+    Accept: MCP_ACCEPT
+  };
+  try {
+    const initRes = await fetchImpl(config.url, {
+      method: "POST",
+      headers: baseHeaders,
+      body: JSON.stringify({
+        jsonrpc: "2.0",
+        id: 1,
+        method: "initialize",
+        params: {
+          protocolVersion: "2025-03-26",
+          capabilities: {},
+          clientInfo: { name: "augmented-connectivity-probe", version: "1.0.0" }
+        }
+      }),
+      signal: AbortSignal.timeout(timeoutMs)
+    });
+    if (!initRes.ok)
+      return httpStatusOutcome(initRes.status, "initialize");
+    const sessionId = initRes.headers.get("mcp-session-id");
+    const initRpc = await parseRpc(initRes, 1);
+    if (!initRpc) {
+      return { status: "down", message: "MCP initialize returned a non-JSON-RPC response \u2014 not an MCP server" };
+    }
+    if ("error" in initRpc) {
+      const err = initRpc["error"];
+      return { status: "down", message: `MCP initialize error: ${err?.message ?? "unknown"}` };
+    }
+    const sessionHeaders = { ...baseHeaders, ...sessionId ? { "Mcp-Session-Id": sessionId } : {} };
+    const initializedRes = await fetchImpl(config.url, {
+      method: "POST",
+      headers: sessionHeaders,
+      body: JSON.stringify({ jsonrpc: "2.0", method: "notifications/initialized" }),
+      signal: AbortSignal.timeout(5e3)
+    });
+    if (!initializedRes.ok)
+      return httpStatusOutcome(initializedRes.status, "initialized");
+    await initializedRes.text().catch(() => "");
+    const listRes = await fetchImpl(config.url, {
+      method: "POST",
+      headers: sessionHeaders,
+      body: JSON.stringify({ jsonrpc: "2.0", id: 2, method: "tools/list" }),
+      signal: AbortSignal.timeout(timeoutMs)
+    });
+    if (!listRes.ok)
+      return httpStatusOutcome(listRes.status, "tools/list");
+    const rpc = await parseRpc(listRes, 2);
+    if (!rpc) {
+      return { status: "down", message: "MCP tools/list returned a non-JSON-RPC response \u2014 not an MCP server" };
+    }
+    if ("error" in rpc) {
+      const err = rpc["error"];
+      return { status: "down", message: `MCP tools/list error: ${err?.message ?? "unknown"}` };
+    }
+    const result = rpc["result"];
+    const toolCount = Array.isArray(result?.tools) ? result.tools.length : void 0;
+    return {
+      status: "ok",
+      message: toolCount !== void 0 ? `${toolCount} tools` : "reachable",
+      ...toolCount !== void 0 ? { details: { toolCount } } : {}
+    };
+  } catch (err) {
+    const isAbort = err?.name === "TimeoutError" || err?.name === "AbortError";
+    return {
+      status: "transient_error",
+      message: isAbort ? `MCP handshake timed out after ${timeoutMs / 1e3}s` : `MCP handshake failed: ${err.message}`
+    };
+  }
+}
+
+// ../../packages/core/dist/integrations/composio-linkage.js
+function assessAuthConfigLinkage(input) {
+  const { accountAuthConfigId, serverAuthConfigIds, serverId } = input;
+  const serverLabel = serverId ? ` (${serverId})` : "";
+  if (serverAuthConfigIds == null || !accountAuthConfigId) {
+    return {
+      linked: null,
+      message: "auth_config linkage not verified \u2014 " + (serverAuthConfigIds == null ? "couldn't read the wired MCP server's auth config binding" : "Composio returned no auth_config for the connected account"),
+      details: {
+        accountAuthConfigId: accountAuthConfigId ?? null,
+        serverAuthConfigIds: serverAuthConfigIds ?? null,
+        serverId: serverId ?? null
+      }
+    };
+  }
+  if (serverAuthConfigIds.length === 0) {
+    return {
+      linked: false,
+      message: `The agent's wired MCP server${serverLabel} has no auth config bound, so it cannot resolve the connected account (bound to auth_config ${accountAuthConfigId}) \u2014 reconnect/rebind required.`,
+      details: { accountAuthConfigId, serverAuthConfigIds, serverId: serverId ?? null }
+    };
+  }
+  if (serverAuthConfigIds.includes(accountAuthConfigId)) {
+    return {
+      linked: true,
+      message: `Connected account's auth_config (${accountAuthConfigId}) matches the wired MCP server binding.`,
+      details: { accountAuthConfigId, serverAuthConfigIds, serverId: serverId ?? null }
+    };
+  }
+  return {
+    linked: false,
+    message: `The connected account is bound to auth_config ${accountAuthConfigId}, but the agent's wired MCP server${serverLabel} resolves auth_config(s) [${serverAuthConfigIds.join(", ")}] \u2014 tool calls will fail with "No connected account found". Reconnect/rebind required.`,
+    details: { accountAuthConfigId, serverAuthConfigIds, serverId: serverId ?? null }
+  };
+}
+
+// ../../packages/core/dist/integrations/composio-account-probe.js
+var PROBE_TIMEOUT_MS = 1e4;
+var COMPOSIO_API_BASE = "https://backend.composio.dev";
 async function timedFetch(fetchImpl, url, init) {
   const controller = new AbortController();
   const timer = setTimeout(() => controller.abort(), PROBE_TIMEOUT_MS);
@@ -1470,8 +1867,8 @@ async function fetchServerAuthConfigIds(fetchImpl, base, serverId, apiKey) {
 }
 
 // ../../packages/core/dist/integrations/composio-tool-call-probe.js
-var MCP_ACCEPT = "application/json, text/event-stream";
-var DEFAULT_TIMEOUT_MS = 1e4;
+var MCP_ACCEPT2 = "application/json, text/event-stream";
+var DEFAULT_TIMEOUT_MS2 = 1e4;
 var READONLY_VERB_TOKENS = [
   "LIST",
   "GET",
@@ -1561,7 +1958,7 @@ function classifyToolCallFailure(text) {
     return "auth";
   return "benign";
 }
-async function parseRpc(res, expectedId) {
+async function parseRpc2(res, expectedId) {
   const ct = res.headers.get("content-type") ?? "";
   if (ct.includes("text/event-stream")) {
     const text = await res.text();
@@ -1589,11 +1986,11 @@ async function parseRpc(res, expectedId) {
   return null;
 }
 async function probeComposioMcpToolCall(config, fetchImpl = fetch) {
-  const timeoutMs = config.timeoutMs ?? DEFAULT_TIMEOUT_MS;
+  const timeoutMs = config.timeoutMs ?? DEFAULT_TIMEOUT_MS2;
   const baseHeaders = {
     ...config.headers ?? {},
     "Content-Type": "application/json",
-    Accept: MCP_ACCEPT
+    Accept: MCP_ACCEPT2
   };
   try {
     const initRes = await fetchImpl(config.url, {
@@ -1615,7 +2012,7 @@ async function probeComposioMcpToolCall(config, fetchImpl = fetch) {
       return initRes.status >= 500 ? { status: "transient_error", message: `MCP initialize returned ${initRes.status}` } : null;
     }
     const sessionId = initRes.headers.get("mcp-session-id");
-    await parseRpc(initRes, 1);
+    await parseRpc2(initRes, 1);
     const sessionHeaders = { ...baseHeaders, ...sessionId ? { "Mcp-Session-Id": sessionId } : {} };
     const initializedRes = await fetchImpl(config.url, {
       method: "POST",
@@ -1633,7 +2030,7 @@ async function probeComposioMcpToolCall(config, fetchImpl = fetch) {
     if (!listRes.ok) {
       return listRes.status >= 500 ? { status: "transient_error", message: `MCP tools/list returned ${listRes.status}` } : null;
     }
-    const listRpc = await parseRpc(listRes, 2);
+    const listRpc = await parseRpc2(listRes, 2);
     const tools = listRpc?.["result"]?.tools ?? [];
     const resolved = resolveProbeTool(tools, { tool: config.toolName, args: config.toolArgs });
     const toolName = resolved.toolName;
@@ -1657,7 +2054,7 @@ async function probeComposioMcpToolCall(config, fetchImpl = fetch) {
     if (!callRes.ok) {
       return callRes.status >= 500 ? { status: "transient_error", message: `MCP tools/call returned ${callRes.status}` } : null;
     }
-    const callRpc = await parseRpc(callRes, 3);
+    const callRpc = await parseRpc2(callRes, 3);
     {
       const errText = callRpc?.["error"]?.message;
       const resContent = callRpc?.["result"]?.content;
@@ -1793,436 +2190,163 @@ var context_meta_schema_default = {
       }
     },
     stringMapField: {
-      type: "object",
-      required: ["type", "additionalProperties"],
-      additionalProperties: false,
-      properties: {
-        type: { const: "object" },
-        additionalProperties: {
-          type: "object",
-          required: ["type"],
-          additionalProperties: false,
-          properties: {
-            type: { const: "string" }
-          }
-        },
-        title: { type: "string" },
-        description: { type: "string" },
-        default: {
-          type: "object",
-          additionalProperties: { type: "string" }
-        }
-      }
-    }
-  }
-};
-
-// ../../packages/core/dist/integrations/context-validator.js
-var ajv = new Ajv2020({ allErrors: true, strict: false });
-addFormats(ajv);
-var compiledMetaSchema = ajv.compile(context_meta_schema_default);
-
-// ../../packages/core/dist/integrations/augmented-live/codec.js
-var CODEC_VERSION = 1;
-var DEFAULT_KEYFRAME_INTERVAL = 10;
-var DEFAULT_KEYFRAME_INTERVAL_MS = 5e3;
-var DEFAULT_CHUNK_BUDGET_BYTES = 180 * 1024;
-var textEncoder = new TextEncoder();
-function byteLength(value) {
-  return textEncoder.encode(value).length;
-}
-function frameByteLength(frame) {
-  return byteLength(JSON.stringify(frame));
-}
-function diffStrings(base, next) {
-  const baseLen = base.length;
-  const nextLen = next.length;
-  let prefix = 0;
-  const maxPrefix = Math.min(baseLen, nextLen);
-  while (prefix < maxPrefix && base.charCodeAt(prefix) === next.charCodeAt(prefix)) {
-    prefix++;
-  }
-  let suffix = 0;
-  const maxSuffix = Math.min(baseLen, nextLen) - prefix;
-  while (suffix < maxSuffix && base.charCodeAt(baseLen - 1 - suffix) === next.charCodeAt(nextLen - 1 - suffix)) {
-    suffix++;
-  }
-  const deleteCount = baseLen - prefix - suffix;
-  const inserted = next.slice(prefix, nextLen - suffix);
-  const ops = [];
-  if (prefix > 0)
-    ops.push({ retain: prefix });
-  if (deleteCount > 0)
-    ops.push({ delete: deleteCount });
-  if (inserted.length > 0)
-    ops.push({ insert: inserted });
-  if (suffix > 0)
-    ops.push({ retain: suffix });
-  if (ops.length === 0)
-    ops.push({ retain: baseLen });
-  return ops;
-}
-function splitByBytes(payload, budgetBytes) {
-  const parts = [];
-  let current = "";
-  let currentBytes = 0;
-  for (const cp of payload) {
-    const cpBytes = byteLength(cp);
-    if (currentBytes + cpBytes > budgetBytes && current.length > 0) {
-      parts.push(current);
-      current = "";
-      currentBytes = 0;
-    }
-    current += cp;
-    currentBytes += cpBytes;
-  }
-  if (current.length > 0 || parts.length === 0)
-    parts.push(current);
-  return parts;
-}
-function chunkFrame(frame, budgetBytes = DEFAULT_CHUNK_BUDGET_BYTES) {
-  if (frameByteLength(frame) <= budgetBytes)
-    return [frame];
-  const payload = frame.type === "key" ? frame.content : JSON.stringify(frame.ops);
-  const dataBudget = Math.max(1, budgetBytes - 512);
-  const pieces = splitByBytes(payload, dataBudget);
-  return pieces.map((data, index) => {
-    const chunk = {
-      v: CODEC_VERSION,
-      type: "chunk",
-      seq: frame.seq,
-      kind: frame.type,
-      part: index,
-      parts: pieces.length,
-      data
-    };
-    if (frame.type === "patch")
-      chunk.baseSeq = frame.baseSeq;
-    return chunk;
-  });
-}
-var StreamEncoder = class {
-  keyframeInterval;
-  keyframeIntervalMs;
-  chunkBudgetBytes;
-  now;
-  seq = 0;
-  prevContent = null;
-  prevSeq = 0;
-  framesSinceKey = 0;
-  lastKeyAt = 0;
-  constructor(options = {}) {
-    this.keyframeInterval = options.keyframeInterval ?? DEFAULT_KEYFRAME_INTERVAL;
-    this.keyframeIntervalMs = options.keyframeIntervalMs ?? DEFAULT_KEYFRAME_INTERVAL_MS;
-    this.chunkBudgetBytes = options.chunkBudgetBytes ?? DEFAULT_CHUNK_BUDGET_BYTES;
-    this.now = options.now ?? (() => Date.now());
-  }
-  /** Encode one snapshot of the artifact into wire frames. */
-  encode(content) {
-    const seq = ++this.seq;
-    const now = this.now();
-    const mustKeyframe = this.prevContent === null || this.framesSinceKey >= this.keyframeInterval || now - this.lastKeyAt >= this.keyframeIntervalMs;
-    let frame;
-    if (mustKeyframe) {
-      frame = { v: CODEC_VERSION, type: "key", seq, content };
-      this.framesSinceKey = 0;
-      this.lastKeyAt = now;
-    } else {
-      frame = {
-        v: CODEC_VERSION,
-        type: "patch",
-        seq,
-        baseSeq: this.prevSeq,
-        ops: diffStrings(this.prevContent, content)
-      };
-      this.framesSinceKey++;
-    }
-    this.prevContent = content;
-    this.prevSeq = seq;
-    return chunkFrame(frame, this.chunkBudgetBytes);
-  }
-  /** Reset to the initial state (e.g. a new draft on the same encoder). */
-  reset() {
-    this.seq = 0;
-    this.prevContent = null;
-    this.prevSeq = 0;
-    this.framesSinceKey = 0;
-    this.lastKeyAt = 0;
-  }
-};
-
-// ../../packages/core/dist/integrations/oauth-providers.js
-var OAUTH_PROVIDERS = {
-  "google-workspace": {
-    definitionId: "google-workspace",
-    authorizeUrl: "https://accounts.google.com/o/oauth2/v2/auth",
-    tokenUrl: "https://oauth2.googleapis.com/token",
-    revokeUrl: "https://oauth2.googleapis.com/revoke",
-    defaultScopes: [
-      "https://www.googleapis.com/auth/gmail.modify",
-      "https://www.googleapis.com/auth/calendar",
-      "https://www.googleapis.com/auth/drive",
-      "https://www.googleapis.com/auth/spreadsheets",
-      "https://www.googleapis.com/auth/documents",
-      "https://www.googleapis.com/auth/chat.messages",
-      "https://www.googleapis.com/auth/chat.spaces.readonly"
-    ],
-    supportsRefresh: true,
-    extraAuthorizeParams: {
-      access_type: "offline",
-      prompt: "consent"
-    },
-    clientAuthMethod: "body",
-    userInfoUrl: "https://www.googleapis.com/oauth2/v2/userinfo"
-  },
-  "github": {
-    definitionId: "github",
-    authorizeUrl: "https://github.com/login/oauth/authorize",
-    tokenUrl: "https://github.com/login/oauth/access_token",
-    // ENG-6187: revoke the existing grant on reconnect so GitHub re-prompts and
-    // the four scopes below are actually granted. Without this, a stale narrow
-    // grant (e.g. an old read:user-only authorization) is silently re-issued and
-    // the missing-scopes banner loops forever.
-    grantRevokeUrl: "https://api.github.com/applications/{client_id}/grant",
-    defaultScopes: ["repo", "read:org", "gist", "workflow"],
-    supportsRefresh: true,
-    extraAuthorizeParams: {},
-    clientAuthMethod: "body",
-    userInfoUrl: "https://api.github.com/user"
-  },
-  "granola": {
-    // Granola MCP — remote streamable-HTTP at https://mcp.granola.ai/mcp.
-    // The AS is at mcp-auth.granola.ai and exposes RFC 8414 metadata at
-    // /.well-known/oauth-authorization-server. Auth is OAuth 2.0 with
-    // mandatory PKCE (S256) and a public client (no client_secret) issued
-    // via Dynamic Client Registration (RFC 7591). The bootstrap script
-    // (`packages/api/scripts/dcr-register.ts`) registers a client once at
-    // deploy time; OAUTH_GRANOLA_CLIENT_ID is set from its output.
-    definitionId: "granola",
-    authorizeUrl: "https://mcp-auth.granola.ai/oauth2/authorize",
-    tokenUrl: "https://mcp-auth.granola.ai/oauth2/token",
-    // Minimal scope set: `offline_access` earns the refresh_token so the
-    // refresh cron can rotate the bearer without operator action; `openid`
-    // is required for the OIDC code flow even when we don't request an
-    // id_token. Profile/email are intentionally omitted — we have no
-    // userInfoUrl wired up here, so requesting them would over-ask consent
-    // for fields the callback can't read.
-    defaultScopes: ["openid", "offline_access"],
-    supportsRefresh: true,
-    extraAuthorizeParams: {},
-    clientAuthMethod: "body",
-    pkce: "S256",
-    publicClient: true,
-    mcpUrl: "https://mcp.granola.ai/mcp"
-  },
-  "notion-cli": {
-    // Notion's public OAuth app. Tokens are workspace-scoped and long-lived —
-    // Notion does not issue refresh_tokens, so `supportsRefresh: false` and
-    // the refresh cron skips this provider entirely. Scopes are not part of
-    // Notion's authorize URL contract; consent is governed by what the user
-    // grants in the OAuth screen, so `defaultScopes` stays empty.
-    // `owner=user` forces the user-OAuth variant (vs internal integration).
-    // Requires OAUTH_NOTION_CLI_CLIENT_ID and OAUTH_NOTION_CLI_CLIENT_SECRET.
-    definitionId: "notion-cli",
-    authorizeUrl: "https://api.notion.com/v1/oauth/authorize",
-    tokenUrl: "https://api.notion.com/v1/oauth/token",
-    defaultScopes: [],
-    supportsRefresh: false,
-    extraAuthorizeParams: {
-      owner: "user"
-    },
-    clientAuthMethod: "basic"
-  },
-  "xero": {
-    definitionId: "xero",
-    authorizeUrl: "https://login.xero.com/identity/connect/authorize",
-    tokenUrl: "https://identity.xero.com/connect/token",
-    revokeUrl: "https://identity.xero.com/connect/revocation",
-    defaultScopes: [
-      "openid",
-      "profile",
-      "email",
-      "offline_access",
-      // Granular scopes (required for apps created after March 2, 2026 —
-      // do NOT revert to the broad `accounting.transactions` /
-      // `accounting.contacts` scopes, Xero rejects the manifest).
-      // The variant *without* `.read` is the read+write granular scope.
-      "accounting.settings.read",
-      // contacts: write enables agent-driven supplier/customer creation
-      // (required for bill creation since a bill must reference a contact).
-      "accounting.contacts",
-      // invoices: write enables bill creation (Type=ACCPAY invoices) and
-      // updates to sales invoices alongside the existing read access.
-      "accounting.invoices",
-      // attachments: write enables agents to attach the source PDF to a
-      // bill at creation time. Read-only would force a follow-up manual
-      // upload in Xero; write closes the loop.
-      "accounting.attachments",
-      // accounting.transactions.read → granular read-only replacements
-      // for the surfaces we don't yet need write access on.
-      "accounting.payments.read",
-      "accounting.banktransactions.read",
-      "accounting.manualjournals.read",
-      // accounting.reports.read → granular read-only replacements
-      "accounting.reports.balancesheet.read",
-      "accounting.reports.profitandloss.read",
-      "accounting.reports.trialbalance.read",
-      "accounting.reports.budgetsummary.read",
-      "accounting.reports.banksummary.read",
-      "accounting.reports.executivesummary.read",
-      "accounting.reports.aged.read"
-    ],
-    // Read-only variant (ENG-6170): the `.read` granular scope for every
-    // surface, so a token granted under it cannot create bills/invoices or
-    // mutate contacts/attachments. Used when an install is (re)connected with
-    // `read_only: true` — e.g. to lock a production-books integration to reads
-    // until per-vendor broker mediation (ENG-4922) gates its writes.
-    readOnlyScopes: [
-      "openid",
-      "profile",
-      "email",
-      "offline_access",
-      "accounting.settings.read",
-      "accounting.contacts.read",
-      "accounting.invoices.read",
-      "accounting.attachments.read",
-      "accounting.payments.read",
-      "accounting.banktransactions.read",
-      "accounting.manualjournals.read",
-      "accounting.reports.balancesheet.read",
-      "accounting.reports.profitandloss.read",
-      "accounting.reports.trialbalance.read",
-      "accounting.reports.budgetsummary.read",
-      "accounting.reports.banksummary.read",
-      "accounting.reports.executivesummary.read",
-      "accounting.reports.aged.read"
-    ],
-    supportsRefresh: true,
-    extraAuthorizeParams: {},
-    clientAuthMethod: "basic",
-    userInfoUrl: "https://api.xero.com/connections"
+      type: "object",
+      required: ["type", "additionalProperties"],
+      additionalProperties: false,
+      properties: {
+        type: { const: "object" },
+        additionalProperties: {
+          type: "object",
+          required: ["type"],
+          additionalProperties: false,
+          properties: {
+            type: { const: "string" }
+          }
+        },
+        title: { type: "string" },
+        description: { type: "string" },
+        default: {
+          type: "object",
+          additionalProperties: { type: "string" }
+        }
+      }
+    }
   }
 };
-function getOAuthProvider(definitionId) {
-  return OAUTH_PROVIDERS[definitionId];
-}
 
-// ../../packages/core/dist/integrations/connectivity-probe.js
-var CONNECTIVITY_SEVERITY = {
-  ok: 0,
-  transient_error: 1,
-  degraded: 2,
-  down: 3
-};
-function worseConnectivityOutcome(a, b) {
-  return CONNECTIVITY_SEVERITY[b.status] > CONNECTIVITY_SEVERITY[a.status] ? b : a;
-}
-var HTTP_PROBE_PROVIDERS = /* @__PURE__ */ new Set([
-  "linear",
-  "google-workspace",
-  "xero",
-  "v0"
-  // ENG-6100: GitHub is deliberately NOT here. This set drives the ASYNC
-  // connectivity monitor's routing, where github (source_type='native')
-  // stays host-side (cli_command — `gh`, the credential the agent actually
-  // executes with) rather than a central stored-token probe. The
-  // synchronous Test button DOES probe the centrally-stored token via
-  // `probeHttpProvider` (PROBE_DEFINITIONS in connectivity-http-probes.ts
-  // includes 'github') — a narrower, honest "the token we stored is valid"
-  // check. Unifying the monitor onto the central probe is sub-issue C's call.
-]);
-var CLI_PROBE_ARGS = {
-  gcloud: ["version"],
-  // ENG-6206: `gh --version` only proves the binary exists, not that it's
-  // authenticated — so a missing/mis-named token read green (the false-green
-  // that hid the broken fleet). `gh auth status` exits non-zero when not
-  // logged in, the honest signal. Read-only. Requires the runner to pass the
-  // agent's GH_TOKEN/GITHUB_TOKEN env (see manager-worker runCli wiring).
-  github: ["auth", "status"]
-  // most CLIs respond to --version; override here only when they don't.
-};
-function cliArgsFor(definitionId, ct) {
-  if (Array.isArray(ct?.args) && ct.args.length > 0 && ct.args.every((a) => typeof a === "string")) {
-    return ct.args;
-  }
-  return CLI_PROBE_ARGS[definitionId] ?? ["--version"];
+// ../../packages/core/dist/integrations/context-validator.js
+var ajv = new Ajv2020({ allErrors: true, strict: false });
+addFormats(ajv);
+var compiledMetaSchema = ajv.compile(context_meta_schema_default);
+
+// ../../packages/core/dist/integrations/augmented-live/codec.js
+var CODEC_VERSION = 1;
+var DEFAULT_KEYFRAME_INTERVAL = 10;
+var DEFAULT_KEYFRAME_INTERVAL_MS = 5e3;
+var DEFAULT_CHUNK_BUDGET_BYTES = 180 * 1024;
+var textEncoder = new TextEncoder();
+function byteLength(value) {
+  return textEncoder.encode(value).length;
 }
-function mcpOverrideFrom(ct) {
-  const tool = typeof ct?.tool === "string" && ct.tool.trim().length > 0 ? ct.tool.trim() : void 0;
-  if (!tool)
-    return {};
-  const args = ct?.args && typeof ct.args === "object" && !Array.isArray(ct.args) ? ct.args : void 0;
-  return { probeTool: tool, ...args ? { probeArgs: args } : {} };
+function frameByteLength(frame) {
+  return byteLength(JSON.stringify(frame));
 }
-function resolveConnectivityProbe(input) {
-  const { definitionId, sourceType, authType } = input;
-  if (authType === "managed" || sourceType === "managed") {
-    return {
-      kind: "managed_composite",
-      sourceType: "managed",
-      readOnly: true,
-      label: `${definitionId}: MCP tools/list + account binding (managed)`,
-      centralReachable: false,
-      // ENG-6212: carry the operator-stored override tool (if any) so both the
-      // host executor and the central Test path call the same specific tool.
-      ...mcpOverrideFrom(input.connectivityTest)
-    };
+function diffStrings(base, next) {
+  const baseLen = base.length;
+  const nextLen = next.length;
+  let prefix = 0;
+  const maxPrefix = Math.min(baseLen, nextLen);
+  while (prefix < maxPrefix && base.charCodeAt(prefix) === next.charCodeAt(prefix)) {
+    prefix++;
   }
-  if (HTTP_PROBE_PROVIDERS.has(definitionId)) {
-    return {
-      kind: "http_provider",
-      sourceType: sourceType ?? "mcp_server",
-      readOnly: true,
-      label: `${definitionId}: read-only API check`,
-      centralReachable: true,
-      httpProvider: definitionId
-    };
+  let suffix = 0;
+  const maxSuffix = Math.min(baseLen, nextLen) - prefix;
+  while (suffix < maxSuffix && base.charCodeAt(baseLen - 1 - suffix) === next.charCodeAt(nextLen - 1 - suffix)) {
+    suffix++;
   }
-  if (getOAuthProvider(definitionId)?.mcpUrl) {
-    return {
-      kind: "mcp_tools_list",
-      sourceType: sourceType ?? "mcp_server",
-      readOnly: true,
-      label: `${definitionId}: MCP tools/list`,
-      centralReachable: false
+  const deleteCount = baseLen - prefix - suffix;
+  const inserted = next.slice(prefix, nextLen - suffix);
+  const ops = [];
+  if (prefix > 0)
+    ops.push({ retain: prefix });
+  if (deleteCount > 0)
+    ops.push({ delete: deleteCount });
+  if (inserted.length > 0)
+    ops.push({ insert: inserted });
+  if (suffix > 0)
+    ops.push({ retain: suffix });
+  if (ops.length === 0)
+    ops.push({ retain: baseLen });
+  return ops;
+}
+function splitByBytes(payload, budgetBytes) {
+  const parts = [];
+  let current = "";
+  let currentBytes = 0;
+  for (const cp of payload) {
+    const cpBytes = byteLength(cp);
+    if (currentBytes + cpBytes > budgetBytes && current.length > 0) {
+      parts.push(current);
+      current = "";
+      currentBytes = 0;
+    }
+    current += cp;
+    currentBytes += cpBytes;
+  }
+  if (current.length > 0 || parts.length === 0)
+    parts.push(current);
+  return parts;
+}
+function chunkFrame(frame, budgetBytes = DEFAULT_CHUNK_BUDGET_BYTES) {
+  if (frameByteLength(frame) <= budgetBytes)
+    return [frame];
+  const payload = frame.type === "key" ? frame.content : JSON.stringify(frame.ops);
+  const dataBudget = Math.max(1, budgetBytes - 512);
+  const pieces = splitByBytes(payload, dataBudget);
+  return pieces.map((data, index) => {
+    const chunk = {
+      v: CODEC_VERSION,
+      type: "chunk",
+      seq: frame.seq,
+      kind: frame.type,
+      part: index,
+      parts: pieces.length,
+      data
     };
+    if (frame.type === "patch")
+      chunk.baseSeq = frame.baseSeq;
+    return chunk;
+  });
+}
+var StreamEncoder = class {
+  keyframeInterval;
+  keyframeIntervalMs;
+  chunkBudgetBytes;
+  now;
+  seq = 0;
+  prevContent = null;
+  prevSeq = 0;
+  framesSinceKey = 0;
+  lastKeyAt = 0;
+  constructor(options = {}) {
+    this.keyframeInterval = options.keyframeInterval ?? DEFAULT_KEYFRAME_INTERVAL;
+    this.keyframeIntervalMs = options.keyframeIntervalMs ?? DEFAULT_KEYFRAME_INTERVAL_MS;
+    this.chunkBudgetBytes = options.chunkBudgetBytes ?? DEFAULT_CHUNK_BUDGET_BYTES;
+    this.now = options.now ?? (() => Date.now());
   }
-  switch (sourceType) {
-    case "mcp_server":
-      return {
-        kind: "unsupported",
-        sourceType: "mcp_server",
-        readOnly: true,
-        label: `${definitionId}: local-stdio MCP \u2014 no host probe available`,
-        centralReachable: false
-      };
-    case "cli_tool":
-      return {
-        kind: "cli_command",
-        sourceType: "cli_tool",
-        readOnly: true,
-        label: `${definitionId}: CLI reachability`,
-        centralReachable: false,
-        cliArgs: cliArgsFor(definitionId, input.connectivityTest)
-      };
-    case "native":
-      return {
-        kind: "builtin",
-        sourceType: "native",
-        readOnly: true,
-        label: `${definitionId}: built-in check`,
-        centralReachable: false
-      };
-    default:
-      return {
-        kind: "unsupported",
-        sourceType: sourceType ?? "native",
-        readOnly: true,
-        label: `${definitionId}: no connectivity probe available`,
-        centralReachable: false
+  /** Encode one snapshot of the artifact into wire frames. */
+  encode(content) {
+    const seq = ++this.seq;
+    const now = this.now();
+    const mustKeyframe = this.prevContent === null || this.framesSinceKey >= this.keyframeInterval || now - this.lastKeyAt >= this.keyframeIntervalMs;
+    let frame;
+    if (mustKeyframe) {
+      frame = { v: CODEC_VERSION, type: "key", seq, content };
+      this.framesSinceKey = 0;
+      this.lastKeyAt = now;
+    } else {
+      frame = {
+        v: CODEC_VERSION,
+        type: "patch",
+        seq,
+        baseSeq: this.prevSeq,
+        ops: diffStrings(this.prevContent, content)
       };
+      this.framesSinceKey++;
+    }
+    this.prevContent = content;
+    this.prevSeq = seq;
+    return chunkFrame(frame, this.chunkBudgetBytes);
   }
-}
+  /** Reset to the initial state (e.g. a new draft on the same encoder). */
+  reset() {
+    this.seq = 0;
+    this.prevContent = null;
+    this.prevSeq = 0;
+    this.framesSinceKey = 0;
+    this.lastKeyAt = 0;
+  }
+};
 
 // ../../packages/core/dist/integrations/connectivity-http-probes.js
 var PROBE_TIMEOUT_MS2 = 1e4;
@@ -4632,9 +4756,10 @@ function parseResetDateTime(humanDate, now) {
     const isPm = timeMatch[3].toLowerCase() === "pm";
     hour = rawHour % 12 + (isPm ? 12 : 0);
   }
+  const SIX_DAYS_MS = 6 * 24 * 60 * 60 * 1e3;
   const year = now.getUTCFullYear();
   const candidate = new Date(Date.UTC(year, month, day, hour, minute));
-  if (candidate.getTime() < now.getTime() - 24 * 60 * 60 * 1e3) {
+  if (candidate.getTime() < now.getTime() - SIX_DAYS_MS) {
     return new Date(Date.UTC(year + 1, month, day, hour, minute));
   }
   return candidate;
@@ -5160,6 +5285,7 @@ export {
   StreamEncoder,
   worseConnectivityOutcome,
   resolveConnectivityProbe,
+  probeMcpHttp,
   probeComposioAccount,
   probeComposioMcpToolCall,
   probeHttpProvider,
@@ -5179,4 +5305,4 @@ export {
   coerceEnvValue,
   FLAGS_SCHEMA_VERSION
 };
-//# sourceMappingURL=chunk-3HZSMDEW.js.map
+//# sourceMappingURL=chunk-SN2G4B2Z.js.map