@integrity-labs/agt-cli 0.28.512 → 0.28.513

package/dist/bin/agt.js

@@ -40,7 +40,7 @@ import {
   success,
   table,
   warn
-} from "../chunk-Z7DMKSCU.js";
+} from "../chunk-PZ3RIMNA.js";
 import {
   AnchorSessionClient,
   CHANNEL_REGISTRY,
@@ -71,7 +71,7 @@ import {
   requiredMcpWildcard,
   resolveChannels,
   serializeManifestForSlackCli
-} from "../chunk-M3ICTPSG.js";
+} from "../chunk-MDEA3PIS.js";
 import "../chunk-XWVM4KPK.js";
 
 // src/bin/agt.ts
@@ -4830,7 +4830,7 @@ import { execFileSync, execSync } from "child_process";
 import { existsSync as existsSync10, realpathSync as realpathSync2 } from "fs";
 import chalk18 from "chalk";
 import ora16 from "ora";
-var cliVersion = true ? "0.28.512" : "dev";
+var cliVersion = true ? "0.28.513" : "dev";
 async function fetchLatestVersion() {
   const host2 = getHost();
   if (!host2) return null;
@@ -6002,7 +6002,7 @@ function handleError(err) {
 }
 
 // src/bin/agt.ts
-var cliVersion2 = true ? "0.28.512" : "dev";
+var cliVersion2 = true ? "0.28.513" : "dev";
 var program = new Command();
 program.name("agt").description("Augmented CLI \u2014 agent provisioning and management").version(cliVersion2).option("--json", "Emit machine-readable JSON output (suppress spinners and colors)").option("--skip-update-check", "Skip the automatic update check on startup");
 program.hook("preAction", async (thisCommand, actionCommand) => {

package/dist/{chunk-M3ICTPSG.js → chunk-MDEA3PIS.js}

@@ -826,6 +826,11 @@ var integration_metadata_v1_default = {
       pattern: "^https://",
       description: "Absolute HTTPS URL the broker uses as the vendor API root. Required when any tool descriptor relies on http_templater (i.e. whenever `tools[]` is non-empty)."
     },
+    auth_scheme: {
+      type: "string",
+      pattern: "^[A-Za-z0-9!#$%&'*+.^_`|~-]+$",
+      description: "Authorization scheme word placed before the credential, e.g. `Key` for Higgsfield's `Authorization: Key KEY_ID:KEY_SECRET` (ENG-8440). Omit for the `Bearer` default. Constrained to a single RFC 7230 token because it is concatenated straight into a header value."
+    },
     runtime_scopes: {
       type: "object",
       description: "Per-runtime-scope support map. Each slot is either null (the integration does not support installs at this scope) or an object describing how token resolution and auth work for that scope.",
@@ -6718,16 +6723,43 @@ var INTEGRATION_REGISTRY = [
     id: "higgsfield",
     name: "Higgsfield",
     category: "media",
-    description: "Generative media \u2014 image (Soul, Nano Banana) and video (Kling, Veo, Seedance) generation, character training (Soul ID), and generation history. Remote streamable-HTTP MCP at https://mcp.higgsfield.ai/mcp.",
-    // Same OAuth pattern as Granola: Claude Code brokers the browser
-    // sign-in at runtime; nothing for the manager API to provision.
-    supported_auth_types: ["none"],
+    description: "Generative media \u2014 Soul text-to-image with style presets and trained-character consistency, DoP image-to-video with motion presets, and lip-synced talking video. Uses Higgsfield's REST API with your own API key.",
+    // ENG-8440: api_key, NOT the host-brokered MCP this used to be.
+    //
+    // Higgsfield MCP (`https://mcp.higgsfield.ai/mcp`) cannot be completed from
+    // the console, and that is a vendor constraint rather than a gap in our
+    // plumbing. Its `oauth-protected-resource` metadata offers two flows and
+    // names the clients each is for: the redirect flow lists
+    // ["anthropic","claude","claude-ai","claude-code"] and the device-code flow
+    // lists ["openclaw","hermes","memoclaw"]. Our console appears in neither,
+    // and the device authorization server
+    // (`fnf-device-auth.higgsfield.ai/.well-known/oauth-authorization-server`)
+    // still returns 404, so there is no discovery document to probe either.
+    // The only client Higgsfield permits is Claude Code on the agent's own
+    // host, driven by an operator in tmux — no console work removes that step.
+    //
+    // The REST API (`platform.higgsfield.ai`) has none of those constraints: a
+    // static key pair the customer creates in their own Higgsfield account,
+    // sent as `Authorization: Key KEY_ID:KEY_SECRET`. That makes this an
+    // ordinary paste-a-key integration, and it means WE hold the credential —
+    // storable, rotatable, revocable and auditable, none of which was true
+    // under the MCP.
+    //
+    // Bring-your-own-key: generations bill to the customer's own Higgsfield
+    // account, so an install is never metered by Augmented Team.
+    //
+    // NOTE: this entry carries no `remoteMcp`, so it contributes nothing to
+    // `registryRemoteMcpKeys` and cannot prune the `higgsfield` key an older
+    // host already wrote to `.mcp.json`. That pruning is why `'higgsfield'` is
+    // a literal in `integrationDerivedKeys` in the claudecode adapter — do not
+    // drop it while any host may still be carrying the retired MCP entry.
+    supported_auth_types: ["api_key"],
     capabilities: [
-      { id: "higgsfield:generate-image", name: "Generate Image", description: "Create images via Soul, Nano Banana, and other image models \u2014 up to 4K. Includes Soul ID character consistency.", access: "write" },
-      { id: "higgsfield:generate-video", name: "Generate Video", description: "Create videos via Kling, Veo, Seedance \u2014 up to 15s. Includes UGC, product review, TV spot presets.", access: "write" },
-      { id: "higgsfield:read-history", name: "Read History", description: "Browse generation history for iterative workflows; reuse prior outputs as references.", access: "read" }
+      { id: "higgsfield:generate-image", name: "Generate Image", description: "Create stills with Soul \u2014 style presets, plus trained-character consistency for a repeated face or product.", access: "write" },
+      { id: "higgsfield:generate-video", name: "Generate Video", description: "Animate a still into a short clip with DoP motion presets, or lip-sync a talking video from an image plus audio.", access: "write" },
+      { id: "higgsfield:read-jobs", name: "Poll Jobs & Presets", description: "Poll asynchronous generations to completion, and list the style and motion presets the generate tools accept.", access: "read" }
     ],
-    docs_url: "https://higgsfield.ai/mcp",
+    docs_url: "https://docs.higgsfield.ai/",
     beta: true
   },
   {
@@ -11124,9 +11156,6 @@ function buildRemoteMcpEntry(definitionId, dbSpec, connectionKey) {
     }
   };
 }
-function buildHostBrokeredRemoteMcpEntry(url) {
-  return { type: "http", url };
-}
 function extractHeaderVarName(value) {
   const m = /^\$\{([A-Za-z_][A-Za-z0-9_]*)\}$/.exec(value.trim());
   return m ? m[1] : null;
@@ -14821,7 +14850,6 @@ export {
   remoteMcpEnvPrefix,
   remoteMcpConnectionScopedEnvVar,
   buildRemoteMcpEntry,
-  buildHostBrokeredRemoteMcpEntry,
   buildLiveHeaderRemoteMcpProxyEntry,
   buildOAuthRemoteMcpProxyEntry,
   buildNativeMcpEntry,
@@ -14980,4 +15008,4 @@ export {
   stopAllSessionsAndWait,
   getProjectDir
 };
-//# sourceMappingURL=chunk-M3ICTPSG.js.map
+//# sourceMappingURL=chunk-MDEA3PIS.js.map