@vm0/cli 9.180.8 → 9.180.10

package/{chunk-HK2N7XD4.js → chunk-WWEZ5FQ6.js}

@@ -74083,7 +74083,7 @@ if (DSN) {
   init2({
     dsn: DSN,
     environment: process.env.SENTRY_ENVIRONMENT ?? "production",
-    release: "9.180.8",
+    release: "9.180.10",
     sendDefaultPii: false,
     tracesSampleRate: 0,
     shutdownTimeout: 500,
@@ -74102,7 +74102,7 @@ if (DSN) {
     }
   });
   setContext("cli", {
-    version: "9.180.8",
+    version: "9.180.10",
     command: process.argv.slice(2).join(" ")
   });
   setContext("runtime", {
@@ -94356,6 +94356,9 @@ var storedExecutionContextSchema = external_exports.object({
   // Feature flags evaluated at job creation time (all switch states for user/org)
   featureFlags: external_exports.record(external_exports.string(), external_exports.boolean()).optional(),
   billableFirewalls: external_exports.array(external_exports.string()).optional(),
+  // Canonical model id the proxy reports for model token usage. The API uses
+  // this model id for built-in billing rows and model usage observations;
+  // billing eligibility is decided from API-owned run context.
   modelUsageProvider: external_exports.string().optional()
 });
 var executionContextSchema = external_exports.object({
@@ -94409,6 +94412,9 @@ var executionContextSchema = external_exports.object({
   // Feature flags evaluated at job creation time (all switch states for user/org)
   featureFlags: external_exports.record(external_exports.string(), external_exports.boolean()).optional(),
   billableFirewalls: external_exports.array(external_exports.string()).optional(),
+  // Canonical model id the proxy reports for model token usage. The API uses
+  // this model id for built-in billing rows and model usage observations;
+  // billing eligibility is decided from API-owned run context.
   modelUsageProvider: external_exports.string().optional()
 });
 var runnersJobClaimContract = c.router({
@@ -97407,14 +97413,14 @@ var github = {
         },
         storage: {
           secrets: ["GITHUB_ACCESS_TOKEN"],
-          variables: [],
-          secretRoles: {
-            accessToken: "GITHUB_ACCESS_TOKEN"
-          }
+          variables: []
         },
         grant: {
           kind: "auth-code",
-          scopes: ["repo", "project", "workflow"]
+          scopes: ["repo", "project", "workflow"],
+          outputs: {
+            accessToken: "$secrets.GITHUB_ACCESS_TOKEN"
+          }
         },
         access: {
           kind: "static",
@@ -97423,7 +97429,12 @@ var github = {
             GITHUB_TOKEN: "$secrets.GITHUB_ACCESS_TOKEN"
           }
         },
-        revoke: { kind: "token-revoke" }
+        revoke: {
+          kind: "token-revoke",
+          inputs: {
+            accessToken: "$secrets.GITHUB_ACCESS_TOKEN"
+          }
+        }
       }
     },
     defaultAuthMethod: "oauth"
@@ -97450,18 +97461,26 @@ var gmail = {
         },
         storage: {
           secrets: ["GMAIL_ACCESS_TOKEN", "GMAIL_REFRESH_TOKEN"],
-          variables: [],
-          secretRoles: {
-            accessToken: "GMAIL_ACCESS_TOKEN",
-            refreshToken: "GMAIL_REFRESH_TOKEN"
-          }
+          variables: []
         },
         grant: {
           kind: "auth-code",
-          scopes: ["https://www.googleapis.com/auth/gmail.modify"]
+          scopes: ["https://www.googleapis.com/auth/gmail.modify"],
+          outputs: {
+            accessToken: "$secrets.GMAIL_ACCESS_TOKEN",
+            refreshToken: "$secrets.GMAIL_REFRESH_TOKEN"
+          }
         },
         access: {
           kind: "refresh-token",
+          inputs: {
+            refreshToken: "$secrets.GMAIL_REFRESH_TOKEN"
+          },
+          outputs: {
+            accessToken: "$secrets.GMAIL_ACCESS_TOKEN",
+            refreshToken: "$secrets.GMAIL_REFRESH_TOKEN"
+          },
+          refreshableSecrets: ["GMAIL_ACCESS_TOKEN"],
           envBindings: {
             GMAIL_TOKEN: "$secrets.GMAIL_ACCESS_TOKEN"
           }
@@ -97493,18 +97512,26 @@ var notion = {
         },
         storage: {
           secrets: ["NOTION_ACCESS_TOKEN", "NOTION_REFRESH_TOKEN"],
-          variables: [],
-          secretRoles: {
-            accessToken: "NOTION_ACCESS_TOKEN",
-            refreshToken: "NOTION_REFRESH_TOKEN"
-          }
+          variables: []
         },
         grant: {
           kind: "auth-code",
-          scopes: []
+          scopes: [],
+          outputs: {
+            accessToken: "$secrets.NOTION_ACCESS_TOKEN",
+            refreshToken: "$secrets.NOTION_REFRESH_TOKEN"
+          }
         },
         access: {
           kind: "refresh-token",
+          inputs: {
+            refreshToken: "$secrets.NOTION_REFRESH_TOKEN"
+          },
+          outputs: {
+            accessToken: "$secrets.NOTION_ACCESS_TOKEN",
+            refreshToken: "$secrets.NOTION_REFRESH_TOKEN"
+          },
+          refreshableSecrets: ["NOTION_ACCESS_TOKEN"],
           envBindings: {
             NOTION_TOKEN: "$secrets.NOTION_ACCESS_TOKEN"
           }
@@ -97535,11 +97562,7 @@ var x = {
         },
         storage: {
           secrets: ["X_ACCESS_TOKEN", "X_REFRESH_TOKEN"],
-          variables: [],
-          secretRoles: {
-            accessToken: "X_ACCESS_TOKEN",
-            refreshToken: "X_REFRESH_TOKEN"
-          }
+          variables: []
         },
         grant: {
           kind: "auth-code",
@@ -97588,10 +97611,22 @@ var x = {
             // Send and manage Direct Messages for you.
             "media.write"
             // Upload media.
-          ]
+          ],
+          outputs: {
+            accessToken: "$secrets.X_ACCESS_TOKEN",
+            refreshToken: "$secrets.X_REFRESH_TOKEN"
+          }
         },
         access: {
           kind: "refresh-token",
+          inputs: {
+            refreshToken: "$secrets.X_REFRESH_TOKEN"
+          },
+          outputs: {
+            accessToken: "$secrets.X_ACCESS_TOKEN",
+            refreshToken: "$secrets.X_REFRESH_TOKEN"
+          },
+          refreshableSecrets: ["X_ACCESS_TOKEN"],
           envBindings: {
             X_TOKEN: "$secrets.X_ACCESS_TOKEN"
           }
@@ -97622,21 +97657,29 @@ var googleDrive = {
         },
         storage: {
           secrets: ["GOOGLE_DRIVE_ACCESS_TOKEN", "GOOGLE_DRIVE_REFRESH_TOKEN"],
-          variables: [],
-          secretRoles: {
-            accessToken: "GOOGLE_DRIVE_ACCESS_TOKEN",
-            refreshToken: "GOOGLE_DRIVE_REFRESH_TOKEN"
-          }
+          variables: []
         },
         grant: {
           kind: "auth-code",
           scopes: [
             "https://www.googleapis.com/auth/drive",
             "https://www.googleapis.com/auth/userinfo.email"
-          ]
+          ],
+          outputs: {
+            accessToken: "$secrets.GOOGLE_DRIVE_ACCESS_TOKEN",
+            refreshToken: "$secrets.GOOGLE_DRIVE_REFRESH_TOKEN"
+          }
         },
         access: {
           kind: "refresh-token",
+          inputs: {
+            refreshToken: "$secrets.GOOGLE_DRIVE_REFRESH_TOKEN"
+          },
+          outputs: {
+            accessToken: "$secrets.GOOGLE_DRIVE_ACCESS_TOKEN",
+            refreshToken: "$secrets.GOOGLE_DRIVE_REFRESH_TOKEN"
+          },
+          refreshableSecrets: ["GOOGLE_DRIVE_ACCESS_TOKEN"],
           envBindings: {
             GOOGLE_DRIVE_TOKEN: "$secrets.GOOGLE_DRIVE_ACCESS_TOKEN"
           }
@@ -97668,10 +97711,7 @@ var slack = {
         },
         storage: {
           secrets: ["SLACK_ACCESS_TOKEN"],
-          variables: [],
-          secretRoles: {
-            accessToken: "SLACK_ACCESS_TOKEN"
-          }
+          variables: []
         },
         grant: {
           kind: "auth-code",
@@ -97709,7 +97749,10 @@ var slack = {
             "team:read",
             // Custom emoji (low priority)
             "emoji:read"
-          ]
+          ],
+          outputs: {
+            accessToken: "$secrets.SLACK_ACCESS_TOKEN"
+          }
         },
         access: {
           kind: "static",
@@ -97717,7 +97760,12 @@ var slack = {
             SLACK_TOKEN: "$secrets.SLACK_ACCESS_TOKEN"
           }
         },
-        revoke: { kind: "token-revoke" }
+        revoke: {
+          kind: "token-revoke",
+          inputs: {
+            accessToken: "$secrets.SLACK_ACCESS_TOKEN"
+          }
+        }
       }
     },
     defaultAuthMethod: "oauth"
@@ -97745,18 +97793,26 @@ var slock = {
             "SLOCK_SERVER_ID",
             "SLOCK_REFRESH_TOKEN"
           ],
-          variables: [],
-          secretRoles: {
-            accessToken: "SLOCK_ACCESS_TOKEN",
-            refreshToken: "SLOCK_REFRESH_TOKEN"
-          }
+          variables: []
         },
         grant: {
           kind: "device-auth",
-          scopes: []
+          scopes: [],
+          outputs: {
+            accessToken: "$secrets.SLOCK_ACCESS_TOKEN",
+            refreshToken: "$secrets.SLOCK_REFRESH_TOKEN"
+          }
         },
         access: {
           kind: "refresh-token",
+          inputs: {
+            refreshToken: "$secrets.SLOCK_REFRESH_TOKEN"
+          },
+          outputs: {
+            accessToken: "$secrets.SLOCK_ACCESS_TOKEN",
+            refreshToken: "$secrets.SLOCK_REFRESH_TOKEN"
+          },
+          refreshableSecrets: ["SLOCK_ACCESS_TOKEN"],
           envBindings: {
             SLOCK_TOKEN: "$secrets.SLOCK_ACCESS_TOKEN",
             SLOCK_SERVER_ID: "$secrets.SLOCK_SERVER_ID"
@@ -97791,21 +97847,29 @@ var googleSheets = {
             "GOOGLE_SHEETS_ACCESS_TOKEN",
             "GOOGLE_SHEETS_REFRESH_TOKEN"
           ],
-          variables: [],
-          secretRoles: {
-            accessToken: "GOOGLE_SHEETS_ACCESS_TOKEN",
-            refreshToken: "GOOGLE_SHEETS_REFRESH_TOKEN"
-          }
+          variables: []
         },
         grant: {
           kind: "auth-code",
           scopes: [
             "https://www.googleapis.com/auth/spreadsheets",
             "https://www.googleapis.com/auth/userinfo.email"
-          ]
+          ],
+          outputs: {
+            accessToken: "$secrets.GOOGLE_SHEETS_ACCESS_TOKEN",
+            refreshToken: "$secrets.GOOGLE_SHEETS_REFRESH_TOKEN"
+          }
         },
         access: {
           kind: "refresh-token",
+          inputs: {
+            refreshToken: "$secrets.GOOGLE_SHEETS_REFRESH_TOKEN"
+          },
+          outputs: {
+            accessToken: "$secrets.GOOGLE_SHEETS_ACCESS_TOKEN",
+            refreshToken: "$secrets.GOOGLE_SHEETS_REFRESH_TOKEN"
+          },
+          refreshableSecrets: ["GOOGLE_SHEETS_ACCESS_TOKEN"],
           envBindings: {
             GOOGLE_SHEETS_TOKEN: "$secrets.GOOGLE_SHEETS_ACCESS_TOKEN"
           }
@@ -97840,21 +97904,29 @@ var googleCalendar = {
             "GOOGLE_CALENDAR_ACCESS_TOKEN",
             "GOOGLE_CALENDAR_REFRESH_TOKEN"
           ],
-          variables: [],
-          secretRoles: {
-            accessToken: "GOOGLE_CALENDAR_ACCESS_TOKEN",
-            refreshToken: "GOOGLE_CALENDAR_REFRESH_TOKEN"
-          }
+          variables: []
         },
         grant: {
           kind: "auth-code",
           scopes: [
             "https://www.googleapis.com/auth/calendar",
             "https://www.googleapis.com/auth/userinfo.email"
-          ]
+          ],
+          outputs: {
+            accessToken: "$secrets.GOOGLE_CALENDAR_ACCESS_TOKEN",
+            refreshToken: "$secrets.GOOGLE_CALENDAR_REFRESH_TOKEN"
+          }
         },
         access: {
           kind: "refresh-token",
+          inputs: {
+            refreshToken: "$secrets.GOOGLE_CALENDAR_REFRESH_TOKEN"
+          },
+          outputs: {
+            accessToken: "$secrets.GOOGLE_CALENDAR_ACCESS_TOKEN",
+            refreshToken: "$secrets.GOOGLE_CALENDAR_REFRESH_TOKEN"
+          },
+          refreshableSecrets: ["GOOGLE_CALENDAR_ACCESS_TOKEN"],
           envBindings: {
             GOOGLE_CALENDAR_TOKEN: "$secrets.GOOGLE_CALENDAR_ACCESS_TOKEN"
           }
@@ -97885,21 +97957,29 @@ var googleDocs = {
         },
         storage: {
           secrets: ["GOOGLE_DOCS_ACCESS_TOKEN", "GOOGLE_DOCS_REFRESH_TOKEN"],
-          variables: [],
-          secretRoles: {
-            accessToken: "GOOGLE_DOCS_ACCESS_TOKEN",
-            refreshToken: "GOOGLE_DOCS_REFRESH_TOKEN"
-          }
+          variables: []
         },
         grant: {
           kind: "auth-code",
           scopes: [
             "https://www.googleapis.com/auth/documents",
             "https://www.googleapis.com/auth/userinfo.email"
-          ]
+          ],
+          outputs: {
+            accessToken: "$secrets.GOOGLE_DOCS_ACCESS_TOKEN",
+            refreshToken: "$secrets.GOOGLE_DOCS_REFRESH_TOKEN"
+          }
         },
         access: {
           kind: "refresh-token",
+          inputs: {
+            refreshToken: "$secrets.GOOGLE_DOCS_REFRESH_TOKEN"
+          },
+          outputs: {
+            accessToken: "$secrets.GOOGLE_DOCS_ACCESS_TOKEN",
+            refreshToken: "$secrets.GOOGLE_DOCS_REFRESH_TOKEN"
+          },
+          refreshableSecrets: ["GOOGLE_DOCS_ACCESS_TOKEN"],
           envBindings: {
             GOOGLE_DOCS_TOKEN: "$secrets.GOOGLE_DOCS_ACCESS_TOKEN"
           }
@@ -97931,11 +98011,7 @@ var linear = {
         },
         storage: {
           secrets: ["LINEAR_ACCESS_TOKEN", "LINEAR_REFRESH_TOKEN"],
-          variables: [],
-          secretRoles: {
-            accessToken: "LINEAR_ACCESS_TOKEN",
-            refreshToken: "LINEAR_REFRESH_TOKEN"
-          }
+          variables: []
         },
         grant: {
           kind: "auth-code",
@@ -97945,15 +98021,32 @@ var linear = {
             "issues:create",
             "comments:create",
             "timeSchedule:write"
-          ]
+          ],
+          outputs: {
+            accessToken: "$secrets.LINEAR_ACCESS_TOKEN",
+            refreshToken: "$secrets.LINEAR_REFRESH_TOKEN"
+          }
         },
         access: {
           kind: "refresh-token",
+          inputs: {
+            refreshToken: "$secrets.LINEAR_REFRESH_TOKEN"
+          },
+          outputs: {
+            accessToken: "$secrets.LINEAR_ACCESS_TOKEN",
+            refreshToken: "$secrets.LINEAR_REFRESH_TOKEN"
+          },
+          refreshableSecrets: ["LINEAR_ACCESS_TOKEN"],
           envBindings: {
             LINEAR_TOKEN: "$secrets.LINEAR_ACCESS_TOKEN"
           }
         },
-        revoke: { kind: "token-revoke" }
+        revoke: {
+          kind: "token-revoke",
+          inputs: {
+            accessToken: "$secrets.LINEAR_ACCESS_TOKEN"
+          }
+        }
       }
     },
     defaultAuthMethod: "oauth"
@@ -97979,14 +98072,14 @@ var intervalsIcu = {
         },
         storage: {
           secrets: ["INTERVALS_ICU_ACCESS_TOKEN"],
-          variables: [],
-          secretRoles: {
-            accessToken: "INTERVALS_ICU_ACCESS_TOKEN"
-          }
+          variables: []
         },
         grant: {
           kind: "auth-code",
-          scopes: ["ACTIVITY", "WELLNESS", "CALENDAR", "SETTINGS", "LIBRARY"]
+          scopes: ["ACTIVITY", "WELLNESS", "CALENDAR", "SETTINGS", "LIBRARY"],
+          outputs: {
+            accessToken: "$secrets.INTERVALS_ICU_ACCESS_TOKEN"
+          }
         },
         access: {
           kind: "static",
@@ -98020,14 +98113,14 @@ var vercel = {
         },
         storage: {
           secrets: ["VERCEL_ACCESS_TOKEN"],
-          variables: [],
-          secretRoles: {
-            accessToken: "VERCEL_ACCESS_TOKEN"
-          }
+          variables: []
         },
         grant: {
           kind: "auth-code",
-          scopes: []
+          scopes: [],
+          outputs: {
+            accessToken: "$secrets.VERCEL_ACCESS_TOKEN"
+          }
         },
         access: {
           kind: "static",
@@ -98061,11 +98154,7 @@ var strava = {
         },
         storage: {
           secrets: ["STRAVA_ACCESS_TOKEN", "STRAVA_REFRESH_TOKEN"],
-          variables: [],
-          secretRoles: {
-            accessToken: "STRAVA_ACCESS_TOKEN",
-            refreshToken: "STRAVA_REFRESH_TOKEN"
-          }
+          variables: []
         },
         grant: {
           kind: "auth-code",
@@ -98074,10 +98163,22 @@ var strava = {
             "profile:read_all",
             "activity:read_all",
             "activity:write"
-          ]
+          ],
+          outputs: {
+            accessToken: "$secrets.STRAVA_ACCESS_TOKEN",
+            refreshToken: "$secrets.STRAVA_REFRESH_TOKEN"
+          }
         },
         access: {
           kind: "refresh-token",
+          inputs: {
+            refreshToken: "$secrets.STRAVA_REFRESH_TOKEN"
+          },
+          outputs: {
+            accessToken: "$secrets.STRAVA_ACCESS_TOKEN",
+            refreshToken: "$secrets.STRAVA_REFRESH_TOKEN"
+          },
+          refreshableSecrets: ["STRAVA_ACCESS_TOKEN"],
           envBindings: {
             STRAVA_TOKEN: "$secrets.STRAVA_ACCESS_TOKEN"
           }
@@ -98108,11 +98209,7 @@ var googleMeet = {
         },
         storage: {
           secrets: ["GOOGLE_MEET_ACCESS_TOKEN", "GOOGLE_MEET_REFRESH_TOKEN"],
-          variables: [],
-          secretRoles: {
-            accessToken: "GOOGLE_MEET_ACCESS_TOKEN",
-            refreshToken: "GOOGLE_MEET_REFRESH_TOKEN"
-          }
+          variables: []
         },
         grant: {
           kind: "auth-code",
@@ -98124,10 +98221,22 @@ var googleMeet = {
             // OAuth scope in the Google Meet REST API v2 discovery document.
             "https://www.googleapis.com/auth/meetings.space.readonly",
             "https://www.googleapis.com/auth/userinfo.email"
-          ]
+          ],
+          outputs: {
+            accessToken: "$secrets.GOOGLE_MEET_ACCESS_TOKEN",
+            refreshToken: "$secrets.GOOGLE_MEET_REFRESH_TOKEN"
+          }
         },
         access: {
           kind: "refresh-token",
+          inputs: {
+            refreshToken: "$secrets.GOOGLE_MEET_REFRESH_TOKEN"
+          },
+          outputs: {
+            accessToken: "$secrets.GOOGLE_MEET_ACCESS_TOKEN",
+            refreshToken: "$secrets.GOOGLE_MEET_REFRESH_TOKEN"
+          },
+          refreshableSecrets: ["GOOGLE_MEET_ACCESS_TOKEN"],
           envBindings: {
             GOOGLE_MEET_TOKEN: "$secrets.GOOGLE_MEET_ACCESS_TOKEN"
           }
@@ -98158,11 +98267,7 @@ var hubspot = {
         },
         storage: {
           secrets: ["HUBSPOT_ACCESS_TOKEN", "HUBSPOT_REFRESH_TOKEN"],
-          variables: [],
-          secretRoles: {
-            accessToken: "HUBSPOT_ACCESS_TOKEN",
-            refreshToken: "HUBSPOT_REFRESH_TOKEN"
-          }
+          variables: []
         },
         grant: {
           kind: "auth-code",
@@ -98179,10 +98284,22 @@ var hubspot = {
             "crm.lists.read",
             "crm.schemas.contacts.read",
             "settings.users.read"
-          ]
+          ],
+          outputs: {
+            accessToken: "$secrets.HUBSPOT_ACCESS_TOKEN",
+            refreshToken: "$secrets.HUBSPOT_REFRESH_TOKEN"
+          }
         },
         access: {
           kind: "refresh-token",
+          inputs: {
+            refreshToken: "$secrets.HUBSPOT_REFRESH_TOKEN"
+          },
+          outputs: {
+            accessToken: "$secrets.HUBSPOT_ACCESS_TOKEN",
+            refreshToken: "$secrets.HUBSPOT_REFRESH_TOKEN"
+          },
+          refreshableSecrets: ["HUBSPOT_ACCESS_TOKEN"],
           envBindings: {
             HUBSPOT_TOKEN: "$secrets.HUBSPOT_ACCESS_TOKEN"
           }
@@ -98213,11 +98330,7 @@ var sentry = {
         },
         storage: {
           secrets: ["SENTRY_ACCESS_TOKEN", "SENTRY_REFRESH_TOKEN"],
-          variables: [],
-          secretRoles: {
-            accessToken: "SENTRY_ACCESS_TOKEN",
-            refreshToken: "SENTRY_REFRESH_TOKEN"
-          }
+          variables: []
         },
         grant: {
           kind: "auth-code",
@@ -98228,10 +98341,22 @@ var sentry = {
             "member:read",
             "event:read",
             "event:write"
-          ]
+          ],
+          outputs: {
+            accessToken: "$secrets.SENTRY_ACCESS_TOKEN",
+            refreshToken: "$secrets.SENTRY_REFRESH_TOKEN"
+          }
         },
         access: {
           kind: "refresh-token",
+          inputs: {
+            refreshToken: "$secrets.SENTRY_REFRESH_TOKEN"
+          },
+          outputs: {
+            accessToken: "$secrets.SENTRY_ACCESS_TOKEN",
+            refreshToken: "$secrets.SENTRY_REFRESH_TOKEN"
+          },
+          refreshableSecrets: ["SENTRY_ACCESS_TOKEN"],
           envBindings: {
             SENTRY_TOKEN: "$secrets.SENTRY_ACCESS_TOKEN"
           }
@@ -98262,14 +98387,14 @@ var todoist = {
         },
         storage: {
           secrets: ["TODOIST_ACCESS_TOKEN"],
-          variables: [],
-          secretRoles: {
-            accessToken: "TODOIST_ACCESS_TOKEN"
-          }
+          variables: []
         },
         grant: {
           kind: "auth-code",
-          scopes: ["data:read_write", "data:delete", "project:delete"]
+          scopes: ["data:read_write", "data:delete", "project:delete"],
+          outputs: {
+            accessToken: "$secrets.TODOIST_ACCESS_TOKEN"
+          }
         },
         access: {
           kind: "static",
@@ -98303,11 +98428,7 @@ var xero = {
         },
         storage: {
           secrets: ["XERO_ACCESS_TOKEN", "XERO_REFRESH_TOKEN"],
-          variables: [],
-          secretRoles: {
-            accessToken: "XERO_ACCESS_TOKEN",
-            refreshToken: "XERO_REFRESH_TOKEN"
-          }
+          variables: []
         },
         grant: {
           kind: "auth-code",
@@ -98334,10 +98455,22 @@ var xero = {
             "files",
             "assets",
             "projects"
-          ]
+          ],
+          outputs: {
+            accessToken: "$secrets.XERO_ACCESS_TOKEN",
+            refreshToken: "$secrets.XERO_REFRESH_TOKEN"
+          }
         },
         access: {
           kind: "refresh-token",
+          inputs: {
+            refreshToken: "$secrets.XERO_REFRESH_TOKEN"
+          },
+          outputs: {
+            accessToken: "$secrets.XERO_ACCESS_TOKEN",
+            refreshToken: "$secrets.XERO_REFRESH_TOKEN"
+          },
+          refreshableSecrets: ["XERO_ACCESS_TOKEN"],
           envBindings: {
             XERO_TOKEN: "$secrets.XERO_ACCESS_TOKEN"
           }
@@ -98368,11 +98501,7 @@ var airtable = {
         },
         storage: {
           secrets: ["AIRTABLE_ACCESS_TOKEN", "AIRTABLE_REFRESH_TOKEN"],
-          variables: [],
-          secretRoles: {
-            accessToken: "AIRTABLE_ACCESS_TOKEN",
-            refreshToken: "AIRTABLE_REFRESH_TOKEN"
-          }
+          variables: []
         },
         grant: {
           kind: "auth-code",
@@ -98384,10 +98513,22 @@ var airtable = {
             "schema.bases:read",
             "schema.bases:write",
             "user.email:read"
-          ]
+          ],
+          outputs: {
+            accessToken: "$secrets.AIRTABLE_ACCESS_TOKEN",
+            refreshToken: "$secrets.AIRTABLE_REFRESH_TOKEN"
+          }
         },
         access: {
           kind: "refresh-token",
+          inputs: {
+            refreshToken: "$secrets.AIRTABLE_REFRESH_TOKEN"
+          },
+          outputs: {
+            accessToken: "$secrets.AIRTABLE_ACCESS_TOKEN",
+            refreshToken: "$secrets.AIRTABLE_REFRESH_TOKEN"
+          },
+          refreshableSecrets: ["AIRTABLE_ACCESS_TOKEN"],
           envBindings: {
             AIRTABLE_TOKEN: "$secrets.AIRTABLE_ACCESS_TOKEN"
           }
@@ -98424,18 +98565,26 @@ var docusign = {
         },
         storage: {
           secrets: ["DOCUSIGN_ACCESS_TOKEN", "DOCUSIGN_REFRESH_TOKEN"],
-          variables: [],
-          secretRoles: {
-            accessToken: "DOCUSIGN_ACCESS_TOKEN",
-            refreshToken: "DOCUSIGN_REFRESH_TOKEN"
-          }
+          variables: []
         },
         grant: {
           kind: "auth-code",
-          scopes: ["signature", "extended", "openid"]
+          scopes: ["signature", "extended", "openid"],
+          outputs: {
+            accessToken: "$secrets.DOCUSIGN_ACCESS_TOKEN",
+            refreshToken: "$secrets.DOCUSIGN_REFRESH_TOKEN"
+          }
         },
         access: {
           kind: "refresh-token",
+          inputs: {
+            refreshToken: "$secrets.DOCUSIGN_REFRESH_TOKEN"
+          },
+          outputs: {
+            accessToken: "$secrets.DOCUSIGN_ACCESS_TOKEN",
+            refreshToken: "$secrets.DOCUSIGN_REFRESH_TOKEN"
+          },
+          refreshableSecrets: ["DOCUSIGN_ACCESS_TOKEN"],
           envBindings: {
             DOCUSIGN_TOKEN: "$secrets.DOCUSIGN_ACCESS_TOKEN"
           }
@@ -98468,21 +98617,29 @@ var googleAds = {
         },
         storage: {
           secrets: ["GOOGLE_ADS_ACCESS_TOKEN", "GOOGLE_ADS_REFRESH_TOKEN"],
-          variables: [],
-          secretRoles: {
-            accessToken: "GOOGLE_ADS_ACCESS_TOKEN",
-            refreshToken: "GOOGLE_ADS_REFRESH_TOKEN"
-          }
+          variables: []
         },
         grant: {
           kind: "auth-code",
           scopes: [
             "https://www.googleapis.com/auth/adwords",
             "https://www.googleapis.com/auth/userinfo.email"
-          ]
+          ],
+          outputs: {
+            accessToken: "$secrets.GOOGLE_ADS_ACCESS_TOKEN",
+            refreshToken: "$secrets.GOOGLE_ADS_REFRESH_TOKEN"
+          }
         },
         access: {
           kind: "refresh-token",
+          inputs: {
+            refreshToken: "$secrets.GOOGLE_ADS_REFRESH_TOKEN"
+          },
+          outputs: {
+            accessToken: "$secrets.GOOGLE_ADS_ACCESS_TOKEN",
+            refreshToken: "$secrets.GOOGLE_ADS_REFRESH_TOKEN"
+          },
+          refreshableSecrets: ["GOOGLE_ADS_ACCESS_TOKEN"],
           platformSecrets: ["GOOGLE_ADS_DEVELOPER_TOKEN"],
           envBindings: {
             GOOGLE_ADS_TOKEN: "$secrets.GOOGLE_ADS_ACCESS_TOKEN",
@@ -98554,11 +98711,7 @@ var gumroad = {
         },
         storage: {
           secrets: ["GUMROAD_ACCESS_TOKEN", "GUMROAD_REFRESH_TOKEN"],
-          variables: [],
-          secretRoles: {
-            accessToken: "GUMROAD_ACCESS_TOKEN",
-            refreshToken: "GUMROAD_REFRESH_TOKEN"
-          }
+          variables: []
         },
         grant: {
           kind: "auth-code",
@@ -98568,10 +98721,22 @@ var gumroad = {
             "view_sales",
             "mark_sales_as_shipped",
             "edit_sales"
-          ]
+          ],
+          outputs: {
+            accessToken: "$secrets.GUMROAD_ACCESS_TOKEN",
+            refreshToken: "$secrets.GUMROAD_REFRESH_TOKEN"
+          }
         },
         access: {
           kind: "refresh-token",
+          inputs: {
+            refreshToken: "$secrets.GUMROAD_REFRESH_TOKEN"
+          },
+          outputs: {
+            accessToken: "$secrets.GUMROAD_ACCESS_TOKEN",
+            refreshToken: "$secrets.GUMROAD_REFRESH_TOKEN"
+          },
+          refreshableSecrets: ["GUMROAD_ACCESS_TOKEN"],
           envBindings: {
             GUMROAD_TOKEN: "$secrets.GUMROAD_ACCESS_TOKEN"
           }
@@ -98628,11 +98793,7 @@ var spotify = {
         },
         storage: {
           secrets: ["SPOTIFY_ACCESS_TOKEN", "SPOTIFY_REFRESH_TOKEN"],
-          variables: [],
-          secretRoles: {
-            accessToken: "SPOTIFY_ACCESS_TOKEN",
-            refreshToken: "SPOTIFY_REFRESH_TOKEN"
-          }
+          variables: []
         },
         grant: {
           kind: "auth-code",
@@ -98656,10 +98817,22 @@ var spotify = {
             "user-library-read",
             "user-read-email",
             "user-read-private"
-          ]
+          ],
+          outputs: {
+            accessToken: "$secrets.SPOTIFY_ACCESS_TOKEN",
+            refreshToken: "$secrets.SPOTIFY_REFRESH_TOKEN"
+          }
         },
         access: {
           kind: "refresh-token",
+          inputs: {
+            refreshToken: "$secrets.SPOTIFY_REFRESH_TOKEN"
+          },
+          outputs: {
+            accessToken: "$secrets.SPOTIFY_ACCESS_TOKEN",
+            refreshToken: "$secrets.SPOTIFY_REFRESH_TOKEN"
+          },
+          refreshableSecrets: ["SPOTIFY_ACCESS_TOKEN"],
           envBindings: {
             SPOTIFY_TOKEN: "$secrets.SPOTIFY_ACCESS_TOKEN"
           }
@@ -98791,18 +98964,26 @@ var ahrefs = {
         },
         storage: {
           secrets: ["AHREFS_ACCESS_TOKEN", "AHREFS_REFRESH_TOKEN"],
-          variables: [],
-          secretRoles: {
-            accessToken: "AHREFS_ACCESS_TOKEN",
-            refreshToken: "AHREFS_REFRESH_TOKEN"
-          }
+          variables: []
         },
         grant: {
           kind: "auth-code",
-          scopes: ["api"]
+          scopes: ["api"],
+          outputs: {
+            accessToken: "$secrets.AHREFS_ACCESS_TOKEN",
+            refreshToken: "$secrets.AHREFS_REFRESH_TOKEN"
+          }
         },
         access: {
           kind: "refresh-token",
+          inputs: {
+            refreshToken: "$secrets.AHREFS_REFRESH_TOKEN"
+          },
+          outputs: {
+            accessToken: "$secrets.AHREFS_ACCESS_TOKEN",
+            refreshToken: "$secrets.AHREFS_REFRESH_TOKEN"
+          },
+          refreshableSecrets: ["AHREFS_ACCESS_TOKEN"],
           envBindings: {
             AHREFS_TOKEN: "$secrets.AHREFS_ACCESS_TOKEN"
           }
@@ -99188,18 +99369,26 @@ var asana = {
         },
         storage: {
           secrets: ["ASANA_ACCESS_TOKEN", "ASANA_REFRESH_TOKEN"],
-          variables: [],
-          secretRoles: {
-            accessToken: "ASANA_ACCESS_TOKEN",
-            refreshToken: "ASANA_REFRESH_TOKEN"
-          }
+          variables: []
         },
         grant: {
           kind: "auth-code",
-          scopes: []
+          scopes: [],
+          outputs: {
+            accessToken: "$secrets.ASANA_ACCESS_TOKEN",
+            refreshToken: "$secrets.ASANA_REFRESH_TOKEN"
+          }
         },
         access: {
           kind: "refresh-token",
+          inputs: {
+            refreshToken: "$secrets.ASANA_REFRESH_TOKEN"
+          },
+          outputs: {
+            accessToken: "$secrets.ASANA_ACCESS_TOKEN",
+            refreshToken: "$secrets.ASANA_REFRESH_TOKEN"
+          },
+          refreshableSecrets: ["ASANA_ACCESS_TOKEN"],
           envBindings: {
             ASANA_TOKEN: "$secrets.ASANA_ACCESS_TOKEN"
           }
@@ -99434,18 +99623,26 @@ var base44 = {
         },
         storage: {
           secrets: ["BASE44_ACCESS_TOKEN", "BASE44_REFRESH_TOKEN"],
-          variables: [],
-          secretRoles: {
-            accessToken: "BASE44_ACCESS_TOKEN",
-            refreshToken: "BASE44_REFRESH_TOKEN"
-          }
+          variables: []
         },
         grant: {
           kind: "device-auth",
-          scopes: ["apps:read", "apps:write", "offline"]
+          scopes: ["apps:read", "apps:write", "offline"],
+          outputs: {
+            accessToken: "$secrets.BASE44_ACCESS_TOKEN",
+            refreshToken: "$secrets.BASE44_REFRESH_TOKEN"
+          }
         },
         access: {
           kind: "refresh-token",
+          inputs: {
+            refreshToken: "$secrets.BASE44_REFRESH_TOKEN"
+          },
+          outputs: {
+            accessToken: "$secrets.BASE44_ACCESS_TOKEN",
+            refreshToken: "$secrets.BASE44_REFRESH_TOKEN"
+          },
+          refreshableSecrets: ["BASE44_ACCESS_TOKEN"],
           envBindings: {
             BASE44_TOKEN: "$secrets.BASE44_ACCESS_TOKEN"
           }
@@ -100185,11 +100382,7 @@ var canva = {
         },
         storage: {
           secrets: ["CANVA_ACCESS_TOKEN", "CANVA_REFRESH_TOKEN"],
-          variables: [],
-          secretRoles: {
-            accessToken: "CANVA_ACCESS_TOKEN",
-            refreshToken: "CANVA_REFRESH_TOKEN"
-          }
+          variables: []
         },
         grant: {
           kind: "auth-code",
@@ -100206,10 +100399,22 @@ var canva = {
             "folder:read",
             "folder:write",
             "profile:read"
-          ]
+          ],
+          outputs: {
+            accessToken: "$secrets.CANVA_ACCESS_TOKEN",
+            refreshToken: "$secrets.CANVA_REFRESH_TOKEN"
+          }
         },
         access: {
           kind: "refresh-token",
+          inputs: {
+            refreshToken: "$secrets.CANVA_REFRESH_TOKEN"
+          },
+          outputs: {
+            accessToken: "$secrets.CANVA_ACCESS_TOKEN",
+            refreshToken: "$secrets.CANVA_REFRESH_TOKEN"
+          },
+          refreshableSecrets: ["CANVA_ACCESS_TOKEN"],
           envBindings: {
             CANVA_TOKEN: "$secrets.CANVA_ACCESS_TOKEN"
           }
@@ -100475,18 +100680,26 @@ var close2 = {
         },
         storage: {
           secrets: ["CLOSE_ACCESS_TOKEN", "CLOSE_REFRESH_TOKEN"],
-          variables: [],
-          secretRoles: {
-            accessToken: "CLOSE_ACCESS_TOKEN",
-            refreshToken: "CLOSE_REFRESH_TOKEN"
-          }
+          variables: []
         },
         grant: {
           kind: "auth-code",
-          scopes: ["all.full_access", "offline_access"]
+          scopes: ["all.full_access", "offline_access"],
+          outputs: {
+            accessToken: "$secrets.CLOSE_ACCESS_TOKEN",
+            refreshToken: "$secrets.CLOSE_REFRESH_TOKEN"
+          }
         },
         access: {
           kind: "refresh-token",
+          inputs: {
+            refreshToken: "$secrets.CLOSE_REFRESH_TOKEN"
+          },
+          outputs: {
+            accessToken: "$secrets.CLOSE_ACCESS_TOKEN",
+            refreshToken: "$secrets.CLOSE_REFRESH_TOKEN"
+          },
+          refreshableSecrets: ["CLOSE_ACCESS_TOKEN"],
           envBindings: {
             CLOSE_TOKEN: "$secrets.CLOSE_ACCESS_TOKEN"
           }
@@ -100873,11 +101086,7 @@ var deel = {
         },
         storage: {
           secrets: ["DEEL_ACCESS_TOKEN", "DEEL_REFRESH_TOKEN"],
-          variables: [],
-          secretRoles: {
-            accessToken: "DEEL_ACCESS_TOKEN",
-            refreshToken: "DEEL_REFRESH_TOKEN"
-          }
+          variables: []
         },
         grant: {
           kind: "auth-code",
@@ -100890,10 +101099,22 @@ var deel = {
             "time-off:write",
             "invoice-adjustments:read",
             "invoice-adjustments:write"
-          ]
+          ],
+          outputs: {
+            accessToken: "$secrets.DEEL_ACCESS_TOKEN",
+            refreshToken: "$secrets.DEEL_REFRESH_TOKEN"
+          }
         },
         access: {
           kind: "refresh-token",
+          inputs: {
+            refreshToken: "$secrets.DEEL_REFRESH_TOKEN"
+          },
+          outputs: {
+            accessToken: "$secrets.DEEL_ACCESS_TOKEN",
+            refreshToken: "$secrets.DEEL_REFRESH_TOKEN"
+          },
+          refreshableSecrets: ["DEEL_ACCESS_TOKEN"],
           envBindings: {
             DEEL_TOKEN: "$secrets.DEEL_ACCESS_TOKEN"
           }
@@ -101332,11 +101553,7 @@ var dropbox = {
         },
         storage: {
           secrets: ["DROPBOX_ACCESS_TOKEN", "DROPBOX_REFRESH_TOKEN"],
-          variables: [],
-          secretRoles: {
-            accessToken: "DROPBOX_ACCESS_TOKEN",
-            refreshToken: "DROPBOX_REFRESH_TOKEN"
-          }
+          variables: []
         },
         grant: {
           kind: "auth-code",
@@ -101344,10 +101561,22 @@ var dropbox = {
             "account_info.read",
             "files.metadata.read",
             "files.content.read"
-          ]
+          ],
+          outputs: {
+            accessToken: "$secrets.DROPBOX_ACCESS_TOKEN",
+            refreshToken: "$secrets.DROPBOX_REFRESH_TOKEN"
+          }
         },
         access: {
           kind: "refresh-token",
+          inputs: {
+            refreshToken: "$secrets.DROPBOX_REFRESH_TOKEN"
+          },
+          outputs: {
+            accessToken: "$secrets.DROPBOX_ACCESS_TOKEN",
+            refreshToken: "$secrets.DROPBOX_REFRESH_TOKEN"
+          },
+          refreshableSecrets: ["DROPBOX_ACCESS_TOKEN"],
           envBindings: {
             DROPBOX_TOKEN: "$secrets.DROPBOX_ACCESS_TOKEN"
           }
@@ -101794,11 +102023,7 @@ var figma = {
         },
         storage: {
           secrets: ["FIGMA_ACCESS_TOKEN", "FIGMA_REFRESH_TOKEN"],
-          variables: [],
-          secretRoles: {
-            accessToken: "FIGMA_ACCESS_TOKEN",
-            refreshToken: "FIGMA_REFRESH_TOKEN"
-          }
+          variables: []
         },
         grant: {
           kind: "auth-code",
@@ -101812,10 +102037,22 @@ var figma = {
             "file_comments:write",
             "library_assets:read",
             "library_content:read"
-          ]
+          ],
+          outputs: {
+            accessToken: "$secrets.FIGMA_ACCESS_TOKEN",
+            refreshToken: "$secrets.FIGMA_REFRESH_TOKEN"
+          }
         },
         access: {
           kind: "refresh-token",
+          inputs: {
+            refreshToken: "$secrets.FIGMA_REFRESH_TOKEN"
+          },
+          outputs: {
+            accessToken: "$secrets.FIGMA_ACCESS_TOKEN",
+            refreshToken: "$secrets.FIGMA_REFRESH_TOKEN"
+          },
+          refreshableSecrets: ["FIGMA_ACCESS_TOKEN"],
           envBindings: {
             FIGMA_TOKEN: "$secrets.FIGMA_ACCESS_TOKEN"
           }
@@ -102071,18 +102308,26 @@ var garminConnect = {
             "GARMIN_CONNECT_ACCESS_TOKEN",
             "GARMIN_CONNECT_REFRESH_TOKEN"
           ],
-          variables: [],
-          secretRoles: {
-            accessToken: "GARMIN_CONNECT_ACCESS_TOKEN",
-            refreshToken: "GARMIN_CONNECT_REFRESH_TOKEN"
-          }
+          variables: []
         },
         grant: {
           kind: "auth-code",
-          scopes: []
+          scopes: [],
+          outputs: {
+            accessToken: "$secrets.GARMIN_CONNECT_ACCESS_TOKEN",
+            refreshToken: "$secrets.GARMIN_CONNECT_REFRESH_TOKEN"
+          }
         },
         access: {
           kind: "refresh-token",
+          inputs: {
+            refreshToken: "$secrets.GARMIN_CONNECT_REFRESH_TOKEN"
+          },
+          outputs: {
+            accessToken: "$secrets.GARMIN_CONNECT_ACCESS_TOKEN",
+            refreshToken: "$secrets.GARMIN_CONNECT_REFRESH_TOKEN"
+          },
+          refreshableSecrets: ["GARMIN_CONNECT_ACCESS_TOKEN"],
           envBindings: {
             GARMIN_CONNECT_TOKEN: "$secrets.GARMIN_CONNECT_ACCESS_TOKEN"
           }
@@ -103413,14 +103658,14 @@ var mailchimp = {
         },
         storage: {
           secrets: ["MAILCHIMP_ACCESS_TOKEN"],
-          variables: [],
-          secretRoles: {
-            accessToken: "MAILCHIMP_ACCESS_TOKEN"
-          }
+          variables: []
         },
         grant: {
           kind: "auth-code",
-          scopes: []
+          scopes: [],
+          outputs: {
+            accessToken: "$secrets.MAILCHIMP_ACCESS_TOKEN"
+          }
         },
         access: {
           kind: "static",
@@ -103712,18 +103957,26 @@ var mercury = {
         },
         storage: {
           secrets: ["MERCURY_ACCESS_TOKEN", "MERCURY_REFRESH_TOKEN"],
-          variables: [],
-          secretRoles: {
-            accessToken: "MERCURY_ACCESS_TOKEN",
-            refreshToken: "MERCURY_REFRESH_TOKEN"
-          }
+          variables: []
         },
         grant: {
           kind: "auth-code",
-          scopes: ["offline_access"]
+          scopes: ["offline_access"],
+          outputs: {
+            accessToken: "$secrets.MERCURY_ACCESS_TOKEN",
+            refreshToken: "$secrets.MERCURY_REFRESH_TOKEN"
+          }
         },
         access: {
           kind: "refresh-token",
+          inputs: {
+            refreshToken: "$secrets.MERCURY_REFRESH_TOKEN"
+          },
+          outputs: {
+            accessToken: "$secrets.MERCURY_ACCESS_TOKEN",
+            refreshToken: "$secrets.MERCURY_REFRESH_TOKEN"
+          },
+          refreshableSecrets: ["MERCURY_ACCESS_TOKEN"],
           envBindings: {
             MERCURY_TOKEN: "$secrets.MERCURY_ACCESS_TOKEN"
           }
@@ -103819,14 +104072,14 @@ var metaAds = {
         },
         storage: {
           secrets: ["META_ADS_ACCESS_TOKEN"],
-          variables: [],
-          secretRoles: {
-            accessToken: "META_ADS_ACCESS_TOKEN"
-          }
+          variables: []
         },
         grant: {
           kind: "auth-code",
-          scopes: ["ads_management", "ads_read", "business_management"]
+          scopes: ["ads_management", "ads_read", "business_management"],
+          outputs: {
+            accessToken: "$secrets.META_ADS_ACCESS_TOKEN"
+          }
         },
         access: {
           kind: "static",
@@ -104086,11 +104339,7 @@ var monday = {
         },
         storage: {
           secrets: ["MONDAY_ACCESS_TOKEN", "MONDAY_REFRESH_TOKEN"],
-          variables: [],
-          secretRoles: {
-            accessToken: "MONDAY_ACCESS_TOKEN",
-            refreshToken: "MONDAY_REFRESH_TOKEN"
-          }
+          variables: []
         },
         grant: {
           kind: "auth-code",
@@ -104109,10 +104358,22 @@ var monday = {
             "assets:read",
             "tags:read",
             "teams:read"
-          ]
+          ],
+          outputs: {
+            accessToken: "$secrets.MONDAY_ACCESS_TOKEN",
+            refreshToken: "$secrets.MONDAY_REFRESH_TOKEN"
+          }
         },
         access: {
           kind: "refresh-token",
+          inputs: {
+            refreshToken: "$secrets.MONDAY_REFRESH_TOKEN"
+          },
+          outputs: {
+            accessToken: "$secrets.MONDAY_ACCESS_TOKEN",
+            refreshToken: "$secrets.MONDAY_REFRESH_TOKEN"
+          },
+          refreshableSecrets: ["MONDAY_ACCESS_TOKEN"],
           envBindings: {
             MONDAY_TOKEN: "$secrets.MONDAY_ACCESS_TOKEN"
           }
@@ -104272,11 +104533,7 @@ var neon = {
         },
         storage: {
           secrets: ["NEON_ACCESS_TOKEN", "NEON_REFRESH_TOKEN"],
-          variables: [],
-          secretRoles: {
-            accessToken: "NEON_ACCESS_TOKEN",
-            refreshToken: "NEON_REFRESH_TOKEN"
-          }
+          variables: []
         },
         grant: {
           kind: "auth-code",
@@ -104287,10 +104544,22 @@ var neon = {
             "urn:neoncloud:projects:create",
             "urn:neoncloud:projects:update",
             "urn:neoncloud:projects:delete"
-          ]
+          ],
+          outputs: {
+            accessToken: "$secrets.NEON_ACCESS_TOKEN",
+            refreshToken: "$secrets.NEON_REFRESH_TOKEN"
+          }
         },
         access: {
           kind: "refresh-token",
+          inputs: {
+            refreshToken: "$secrets.NEON_REFRESH_TOKEN"
+          },
+          outputs: {
+            accessToken: "$secrets.NEON_ACCESS_TOKEN",
+            refreshToken: "$secrets.NEON_REFRESH_TOKEN"
+          },
+          refreshableSecrets: ["NEON_ACCESS_TOKEN"],
           envBindings: {
             NEON_TOKEN: "$secrets.NEON_ACCESS_TOKEN"
           }
@@ -104585,18 +104854,26 @@ var outlookCalendar = {
             "OUTLOOK_CALENDAR_ACCESS_TOKEN",
             "OUTLOOK_CALENDAR_REFRESH_TOKEN"
           ],
-          variables: [],
-          secretRoles: {
-            accessToken: "OUTLOOK_CALENDAR_ACCESS_TOKEN",
-            refreshToken: "OUTLOOK_CALENDAR_REFRESH_TOKEN"
-          }
+          variables: []
         },
         grant: {
           kind: "auth-code",
-          scopes: ["Calendars.ReadWrite", "User.Read", "offline_access"]
+          scopes: ["Calendars.ReadWrite", "User.Read", "offline_access"],
+          outputs: {
+            accessToken: "$secrets.OUTLOOK_CALENDAR_ACCESS_TOKEN",
+            refreshToken: "$secrets.OUTLOOK_CALENDAR_REFRESH_TOKEN"
+          }
         },
         access: {
           kind: "refresh-token",
+          inputs: {
+            refreshToken: "$secrets.OUTLOOK_CALENDAR_REFRESH_TOKEN"
+          },
+          outputs: {
+            accessToken: "$secrets.OUTLOOK_CALENDAR_ACCESS_TOKEN",
+            refreshToken: "$secrets.OUTLOOK_CALENDAR_REFRESH_TOKEN"
+          },
+          refreshableSecrets: ["OUTLOOK_CALENDAR_ACCESS_TOKEN"],
           envBindings: {
             OUTLOOK_CALENDAR_TOKEN: "$secrets.OUTLOOK_CALENDAR_ACCESS_TOKEN"
           }
@@ -104628,11 +104905,7 @@ var outlookMail = {
         },
         storage: {
           secrets: ["OUTLOOK_MAIL_ACCESS_TOKEN", "OUTLOOK_MAIL_REFRESH_TOKEN"],
-          variables: [],
-          secretRoles: {
-            accessToken: "OUTLOOK_MAIL_ACCESS_TOKEN",
-            refreshToken: "OUTLOOK_MAIL_REFRESH_TOKEN"
-          }
+          variables: []
         },
         grant: {
           kind: "auth-code",
@@ -104641,10 +104914,22 @@ var outlookMail = {
             "Mail.Send",
             "User.Read",
             "offline_access"
-          ]
+          ],
+          outputs: {
+            accessToken: "$secrets.OUTLOOK_MAIL_ACCESS_TOKEN",
+            refreshToken: "$secrets.OUTLOOK_MAIL_REFRESH_TOKEN"
+          }
         },
         access: {
           kind: "refresh-token",
+          inputs: {
+            refreshToken: "$secrets.OUTLOOK_MAIL_REFRESH_TOKEN"
+          },
+          outputs: {
+            accessToken: "$secrets.OUTLOOK_MAIL_ACCESS_TOKEN",
+            refreshToken: "$secrets.OUTLOOK_MAIL_REFRESH_TOKEN"
+          },
+          refreshableSecrets: ["OUTLOOK_MAIL_ACCESS_TOKEN"],
           envBindings: {
             OUTLOOK_MAIL_TOKEN: "$secrets.OUTLOOK_MAIL_ACCESS_TOKEN"
           }
@@ -105211,11 +105496,7 @@ var posthog = {
         },
         storage: {
           secrets: ["POSTHOG_ACCESS_TOKEN", "POSTHOG_REFRESH_TOKEN"],
-          variables: [],
-          secretRoles: {
-            accessToken: "POSTHOG_ACCESS_TOKEN",
-            refreshToken: "POSTHOG_REFRESH_TOKEN"
-          }
+          variables: []
         },
         grant: {
           kind: "auth-code",
@@ -105244,10 +105525,22 @@ var posthog = {
             "survey:read",
             "survey:write",
             "error_tracking:read"
-          ]
+          ],
+          outputs: {
+            accessToken: "$secrets.POSTHOG_ACCESS_TOKEN",
+            refreshToken: "$secrets.POSTHOG_REFRESH_TOKEN"
+          }
         },
         access: {
           kind: "refresh-token",
+          inputs: {
+            refreshToken: "$secrets.POSTHOG_REFRESH_TOKEN"
+          },
+          outputs: {
+            accessToken: "$secrets.POSTHOG_ACCESS_TOKEN",
+            refreshToken: "$secrets.POSTHOG_REFRESH_TOKEN"
+          },
+          refreshableSecrets: ["POSTHOG_ACCESS_TOKEN"],
           envBindings: {
             POSTHOG_TOKEN: "$secrets.POSTHOG_ACCESS_TOKEN"
           }
@@ -105710,18 +106003,26 @@ var reddit = {
         },
         storage: {
           secrets: ["REDDIT_ACCESS_TOKEN", "REDDIT_REFRESH_TOKEN"],
-          variables: [],
-          secretRoles: {
-            accessToken: "REDDIT_ACCESS_TOKEN",
-            refreshToken: "REDDIT_REFRESH_TOKEN"
-          }
+          variables: []
         },
         grant: {
           kind: "auth-code",
-          scopes: ["identity", "read"]
+          scopes: ["identity", "read"],
+          outputs: {
+            accessToken: "$secrets.REDDIT_ACCESS_TOKEN",
+            refreshToken: "$secrets.REDDIT_REFRESH_TOKEN"
+          }
         },
         access: {
           kind: "refresh-token",
+          inputs: {
+            refreshToken: "$secrets.REDDIT_REFRESH_TOKEN"
+          },
+          outputs: {
+            accessToken: "$secrets.REDDIT_ACCESS_TOKEN",
+            refreshToken: "$secrets.REDDIT_REFRESH_TOKEN"
+          },
+          refreshableSecrets: ["REDDIT_ACCESS_TOKEN"],
           envBindings: {
             REDDIT_TOKEN: "$secrets.REDDIT_ACCESS_TOKEN"
           }
@@ -106801,18 +107102,26 @@ var stripe = {
         },
         storage: {
           secrets: ["STRIPE_ACCESS_TOKEN", "STRIPE_REFRESH_TOKEN"],
-          variables: [],
-          secretRoles: {
-            accessToken: "STRIPE_ACCESS_TOKEN",
-            refreshToken: "STRIPE_REFRESH_TOKEN"
-          }
+          variables: []
         },
         grant: {
           kind: "auth-code",
-          scopes: ["read_write"]
+          scopes: ["read_write"],
+          outputs: {
+            accessToken: "$secrets.STRIPE_ACCESS_TOKEN",
+            refreshToken: "$secrets.STRIPE_REFRESH_TOKEN"
+          }
         },
         access: {
           kind: "refresh-token",
+          inputs: {
+            refreshToken: "$secrets.STRIPE_REFRESH_TOKEN"
+          },
+          outputs: {
+            accessToken: "$secrets.STRIPE_ACCESS_TOKEN",
+            refreshToken: "$secrets.STRIPE_REFRESH_TOKEN"
+          },
+          refreshableSecrets: ["STRIPE_ACCESS_TOKEN"],
           envBindings: {
             STRIPE_TOKEN: "$secrets.STRIPE_ACCESS_TOKEN"
           }
@@ -106869,11 +107178,7 @@ var supabase = {
         },
         storage: {
           secrets: ["SUPABASE_ACCESS_TOKEN", "SUPABASE_REFRESH_TOKEN"],
-          variables: [],
-          secretRoles: {
-            accessToken: "SUPABASE_ACCESS_TOKEN",
-            refreshToken: "SUPABASE_REFRESH_TOKEN"
-          }
+          variables: []
         },
         grant: {
           kind: "auth-code",
@@ -106890,10 +107195,22 @@ var supabase = {
             "analytics:read",
             "environment:read",
             "domains:read"
-          ]
+          ],
+          outputs: {
+            accessToken: "$secrets.SUPABASE_ACCESS_TOKEN",
+            refreshToken: "$secrets.SUPABASE_REFRESH_TOKEN"
+          }
         },
         access: {
           kind: "refresh-token",
+          inputs: {
+            refreshToken: "$secrets.SUPABASE_REFRESH_TOKEN"
+          },
+          outputs: {
+            accessToken: "$secrets.SUPABASE_ACCESS_TOKEN",
+            refreshToken: "$secrets.SUPABASE_REFRESH_TOKEN"
+          },
+          refreshableSecrets: ["SUPABASE_ACCESS_TOKEN"],
           envBindings: {
             SUPABASE_TOKEN: "$secrets.SUPABASE_ACCESS_TOKEN"
           }
@@ -107054,7 +107371,19 @@ var TEST_OAUTH_CLIENT = {
 };
 var TEST_OAUTH_AUTH_CODE_GRANT = {
   kind: "auth-code",
-  scopes: ["read"]
+  scopes: ["read"],
+  outputs: {
+    accessToken: "$secrets.TEST_OAUTH_ACCESS_TOKEN",
+    refreshToken: "$secrets.TEST_OAUTH_REFRESH_TOKEN"
+  }
+};
+var TEST_OAUTH_API_AUTH_CODE_GRANT = {
+  kind: "auth-code",
+  scopes: ["read"],
+  outputs: {
+    initialAccessToken: "$secrets.TEST_OAUTH_API_ACCESS_TOKEN",
+    initialRefreshToken: "$secrets.TEST_OAUTH_API_REFRESH_TOKEN"
+  }
 };
 var TEST_OAUTH_REVOKE = { kind: "none" };
 var testOauth = {
@@ -107070,15 +107399,19 @@ var testOauth = {
         client: TEST_OAUTH_CLIENT,
         storage: {
           secrets: ["TEST_OAUTH_ACCESS_TOKEN", "TEST_OAUTH_REFRESH_TOKEN"],
-          variables: [],
-          secretRoles: {
-            accessToken: "TEST_OAUTH_ACCESS_TOKEN",
-            refreshToken: "TEST_OAUTH_REFRESH_TOKEN"
-          }
+          variables: []
         },
         grant: TEST_OAUTH_AUTH_CODE_GRANT,
         access: {
           kind: "refresh-token",
+          inputs: {
+            refreshToken: "$secrets.TEST_OAUTH_REFRESH_TOKEN"
+          },
+          outputs: {
+            accessToken: "$secrets.TEST_OAUTH_ACCESS_TOKEN",
+            refreshToken: "$secrets.TEST_OAUTH_REFRESH_TOKEN"
+          },
+          refreshableSecrets: ["TEST_OAUTH_ACCESS_TOKEN"],
           envBindings: {
             TEST_OAUTH_TOKEN: "$secrets.TEST_OAUTH_ACCESS_TOKEN"
           }
@@ -107093,17 +107426,24 @@ var testOauth = {
         storage: {
           secrets: [
             "TEST_OAUTH_API_ACCESS_TOKEN",
-            "TEST_OAUTH_API_REFRESH_TOKEN"
+            "TEST_OAUTH_API_REFRESH_TOKEN",
+            "TEST_OAUTH_API_SECONDARY_TOKEN"
           ],
-          variables: [],
-          secretRoles: {
-            accessToken: "TEST_OAUTH_API_ACCESS_TOKEN",
-            refreshToken: "TEST_OAUTH_API_REFRESH_TOKEN"
-          }
+          variables: ["TEST_OAUTH_API_TENANT_ID"]
         },
-        grant: TEST_OAUTH_AUTH_CODE_GRANT,
+        grant: TEST_OAUTH_API_AUTH_CODE_GRANT,
         access: {
           kind: "refresh-token",
+          inputs: {
+            apiRefreshToken: "$secrets.TEST_OAUTH_API_REFRESH_TOKEN",
+            tenantId: "$vars.TEST_OAUTH_API_TENANT_ID"
+          },
+          outputs: {
+            refreshedAccessToken: "$secrets.TEST_OAUTH_API_ACCESS_TOKEN",
+            refreshedRefreshToken: "$secrets.TEST_OAUTH_API_REFRESH_TOKEN",
+            secondaryToken: "$secrets.TEST_OAUTH_API_SECONDARY_TOKEN"
+          },
+          refreshableSecrets: ["TEST_OAUTH_API_ACCESS_TOKEN"],
           envBindings: {
             TEST_OAUTH_TOKEN: "$secrets.TEST_OAUTH_API_ACCESS_TOKEN"
           }
@@ -107134,14 +107474,14 @@ var testOauthDevice = {
         },
         storage: {
           secrets: ["TEST_OAUTH_DEVICE_ACCESS_TOKEN"],
-          variables: [],
-          secretRoles: {
-            accessToken: "TEST_OAUTH_DEVICE_ACCESS_TOKEN"
-          }
+          variables: []
         },
         grant: {
           kind: "device-auth",
-          scopes: ["read"]
+          scopes: ["read"],
+          outputs: {
+            accessToken: "$secrets.TEST_OAUTH_DEVICE_ACCESS_TOKEN"
+          }
         },
         access: {
           kind: "static",
@@ -107162,14 +107502,14 @@ var testOauthDevice = {
         },
         storage: {
           secrets: ["TEST_OAUTH_DEVICE_API_ACCESS_TOKEN"],
-          variables: [],
-          secretRoles: {
-            accessToken: "TEST_OAUTH_DEVICE_API_ACCESS_TOKEN"
-          }
+          variables: []
         },
         grant: {
           kind: "device-auth",
-          scopes: ["read"]
+          scopes: ["read"],
+          outputs: {
+            accessToken: "$secrets.TEST_OAUTH_DEVICE_API_ACCESS_TOKEN"
+          }
         },
         access: {
           kind: "static",
@@ -107608,10 +107948,7 @@ var webflow = {
         },
         storage: {
           secrets: ["WEBFLOW_ACCESS_TOKEN"],
-          variables: [],
-          secretRoles: {
-            accessToken: "WEBFLOW_ACCESS_TOKEN"
-          }
+          variables: []
         },
         grant: {
           kind: "auth-code",
@@ -107632,7 +107969,10 @@ var webflow = {
             "workspace:read",
             "custom_code:read",
             "custom_code:write"
-          ]
+          ],
+          outputs: {
+            accessToken: "$secrets.WEBFLOW_ACCESS_TOKEN"
+          }
         },
         access: {
           kind: "static",
@@ -108132,11 +108472,7 @@ var zoom = {
         },
         storage: {
           secrets: ["ZOOM_ACCESS_TOKEN", "ZOOM_REFRESH_TOKEN"],
-          variables: [],
-          secretRoles: {
-            accessToken: "ZOOM_ACCESS_TOKEN",
-            refreshToken: "ZOOM_REFRESH_TOKEN"
-          }
+          variables: []
         },
         grant: {
           kind: "auth-code",
@@ -108155,10 +108491,22 @@ var zoom = {
             "cloud_recording:read:recording",
             "webinar:read:list_webinars",
             "webinar:read:webinar"
-          ]
+          ],
+          outputs: {
+            accessToken: "$secrets.ZOOM_ACCESS_TOKEN",
+            refreshToken: "$secrets.ZOOM_REFRESH_TOKEN"
+          }
         },
         access: {
           kind: "refresh-token",
+          inputs: {
+            refreshToken: "$secrets.ZOOM_REFRESH_TOKEN"
+          },
+          outputs: {
+            accessToken: "$secrets.ZOOM_ACCESS_TOKEN",
+            refreshToken: "$secrets.ZOOM_REFRESH_TOKEN"
+          },
+          refreshableSecrets: ["ZOOM_ACCESS_TOKEN"],
           envBindings: {
             ZOOM_TOKEN: "$secrets.ZOOM_ACCESS_TOKEN"
           }
@@ -110160,7 +110508,40 @@ var webhookUsageEventContract = c20.router({
       404: apiErrorSchema,
       500: apiErrorSchema
     },
-    summary: "Receive usage event data from sandbox"
+    summary: "Receive billing usage event data from sandbox"
+  }
+});
+var modelUsageObservationCategorySchema = external_exports.enum([
+  "tokens.input",
+  "tokens.output",
+  "tokens.cache_read",
+  "tokens.cache_creation"
+]);
+var webhookModelUsageObservationItemSchema = external_exports.object({
+  idempotencyKey: external_exports.uuid(),
+  model: external_exports.string().min(1).max(255),
+  category: modelUsageObservationCategorySchema,
+  quantity: external_exports.number().int().min(1)
+}).strict();
+var webhookModelUsageObservationContract = c20.router({
+  send: {
+    method: "POST",
+    path: "/api/webhooks/agent/model-usage-observation",
+    headers: authHeadersSchema,
+    body: external_exports.object({
+      runId: external_exports.string().min(1, "runId is required"),
+      events: external_exports.array(webhookModelUsageObservationItemSchema).min(1).max(100)
+    }).strict(),
+    responses: {
+      200: external_exports.object({
+        success: external_exports.boolean()
+      }),
+      400: apiErrorSchema,
+      401: apiErrorSchema,
+      404: apiErrorSchema,
+      500: apiErrorSchema
+    },
+    summary: "Receive model usage observation data from sandbox"
   }
 });
 
@@ -135702,4 +136083,4 @@ undici/lib/web/fetch/body.js:
 undici/lib/web/websocket/frame.js:
   (*! ws. MIT License. Einar Otto Stangvik <einaros@gmail.com> *)
 */
-//# sourceMappingURL=chunk-HK2N7XD4.js.map
+//# sourceMappingURL=chunk-WWEZ5FQ6.js.map