replicas-cli 0.3.148 → 0.3.150

package/dist/index.cjs

@@ -22971,6 +22971,12 @@ var agentQuotaExhaustedPayloadSchema = external_exports.object({
   forkTo: fallbackHarnessStepSchema.optional()
 });
 
+// ../shared/src/credential-refresh.ts
+var engineCredentialRefreshFailureSchema = external_exports.object({
+  code: external_exports.string(),
+  credential: workspaceCredentialSelectionSchema.optional()
+});
+
 // ../shared/src/credential-pool.ts
 var MAX_CREDENTIAL_POOL_ACCOUNTS = 10;
 var reorderCredentialPoolSchema = external_exports.object({
@@ -29043,7 +29049,7 @@ var headlessAgentRequestSchema = external_exports.object({
 });
 
 // ../shared/src/cli-version.ts
-var CLI_VERSION = "0.3.148";
+var CLI_VERSION = "0.3.150";
 
 // ../shared/src/version.ts
 function compareVersions(v1, v2) {
@@ -29513,10 +29519,37 @@ var HOSTED_COMPOSIO_PLUGINS = HOSTED_COMPOSIO_PLUGIN_DEFINITIONS.map(
     description: `Use ${name} tools from workspace agents.`
   })
 );
+var READ_ONLY_SCOPES = {
+  gmail: ["https://www.googleapis.com/auth/userinfo.email", "https://www.googleapis.com/auth/userinfo.profile", "https://www.googleapis.com/auth/contacts.readonly", "https://www.googleapis.com/auth/contacts.other.readonly", "https://www.googleapis.com/auth/gmail.readonly"],
+  googledocs: ["https://www.googleapis.com/auth/userinfo.email", "https://www.googleapis.com/auth/drive.readonly", "https://www.googleapis.com/auth/documents.readonly"],
+  googledrive: ["https://www.googleapis.com/auth/userinfo.email", "https://www.googleapis.com/auth/drive.readonly"],
+  googlesheets: ["https://www.googleapis.com/auth/userinfo.email", "https://www.googleapis.com/auth/drive.readonly", "https://www.googleapis.com/auth/spreadsheets.readonly"],
+  googleslides: ["https://www.googleapis.com/auth/userinfo.email", "https://www.googleapis.com/auth/drive.readonly", "https://www.googleapis.com/auth/presentations.readonly"],
+  googlecalendar: ["https://www.googleapis.com/auth/calendar.readonly"],
+  googletasks: ["https://www.googleapis.com/auth/tasks.readonly"],
+  googlesearch: ["https://www.googleapis.com/auth/userinfo.email", "https://www.googleapis.com/auth/userinfo.profile", "https://www.googleapis.com/auth/webmasters.readonly"],
+  googleanalytics: ["https://www.googleapis.com/auth/userinfo.profile", "https://www.googleapis.com/auth/analytics.readonly"],
+  youtube: ["https://www.googleapis.com/auth/youtube.readonly"],
+  outlook: ["User.Read", "Mail.Read", "MailboxSettings.Read", "Calendars.Read", "Contacts.Read", "offline_access"],
+  onedrive: ["Files.Read.All", "Sites.Read.All", "offline_access"],
+  microsoftteams: ["User.Read", "Team.ReadBasic.All", "Channel.ReadBasic.All", "ChannelMessage.Read.All", "Chat.Read", "Chat.ReadBasic", "ChatMessage.Read", "People.Read.All", "TeamsActivity.Read", "offline_access"],
+  jira: ["read:jira-work", "read:jira-user", "read:servicedesk-request", "read:servicemanagement-insight-objects", "read:sprint:jira-software", "read:board-scope:jira-software", "read:project:jira", "read:issue-type-scheme:jira", "offline_access"],
+  confluence: ["read:space-details:confluence", "read:audit-log:confluence", "read:page:confluence", "read:blogpost:confluence", "read:whiteboard:confluence", "read:comment:confluence", "read:content.restriction:confluence", "read:content.metadata:confluence", "read:inlinetask:confluence", "read:task:confluence", "offline_access"],
+  pagerduty: ["read"],
+  zendesk: ["read"],
+  gong: ["api:calls:read:basic", "api:calls:read:extensive", "api:calls:read:transcript", "api:calls:read:media-url", "api:users:read", "api:stats:interaction", "api:stats:scorecards", "api:stats:user-actions", "api:stats:user-actions:detailed", "api:settings:scorecards:read", "api:settings:trackers:read", "api:library:read", "api:tasks:read", "api:flows:read", "api:workspaces:read", "api:crm:get-objects", "api:crm:schema", "api:crm:integrations:read", "api:call-outcomes:read", "api:permission-profile:read", "api:logs:read"],
+  figma: ["current_user:read", "file_content:read", "file_comments:read", "file_metadata:read", "file_versions:read", "projects:read", "library_assets:read", "library_content:read", "team_library_content:read", "webhooks:read"],
+  airtable: ["data.records:read", "data.recordComments:read", "schema.bases:read", "user.email:read"],
+  todoist: ["data:read"],
+  dropbox: ["openid", "email", "profile", "account_info.read", "files.metadata.read", "files.content.read", "file_requests.read", "sharing.read", "contacts.read"],
+  canva: ["profile:read", "asset:read", "brandtemplate:content:read", "brandtemplate:meta:read", "comment:read", "design:content:read", "design:meta:read", "folder:read"],
+  facebook: ["public_profile", "email", "pages_show_list", "pages_read_engagement", "pages_read_user_content", "read_insights"],
+  instagram: ["instagram_business_basic", "instagram_business_manage_insights"]
+};
 var PLUGIN_CATALOG = [
   ...EXPLICIT_PLUGIN_CATALOG,
   ...HOSTED_COMPOSIO_PLUGINS
-];
+].map((plugin) => ({ ...plugin, readOnlyScopes: READ_ONLY_SCOPES[plugin.id] }));
 
 // ../shared/src/routes/user.ts
 var PROFILE_AVATAR_MAX_SIZE_BYTES = 5 * 1024 * 1024;
@@ -33200,7 +33233,7 @@ async function pluginsListCommand(options) {
     for (const plugin of plugins2) {
       const connections = environment2.filter((connection) => connection.pluginId === plugin.id);
       if (!options.all && connections.length === 0) continue;
-      const status = connections.map((connection) => `${connection.status}${connection.accountLabel ? ` (${connection.accountLabel})` : ""}`).join(", ");
+      const status = connections.map((connection) => `${connection.status}${connection.readOnly ? " read-only" : ""}${connection.accountLabel ? ` (${connection.accountLabel})` : ""}`).join(", ");
       console.log(`${plugin.id}	${plugin.authType}	${status || "-"}	${plugin.name}`);
     }
   });
@@ -33208,7 +33241,7 @@ async function pluginsListCommand(options) {
 async function pluginsOAuthCommand(pluginId, options) {
   const response = await orgAuthenticatedFetch(
     await pluginsPath(options, `/${pluginId}/oauth/start`),
-    { method: "POST" }
+    { method: "POST", body: { readOnly: options.readOnly === true } }
   );
   output(response, ({ authorizationUrl }) => console.log(authorizationUrl));
 }
@@ -35587,7 +35620,7 @@ repos.command("branches <name-or-id>").description("List branches of a repositor
 repos.action(run(repositoriesListCommand));
 var plugins = program.command("plugins").description("Connect plugins (organization-wide, or to one environment with --env)");
 plugins.command("list").description("List connected plugins").option("-e, --env <env>", "Environment name or ID").option("-a, --all", "Include plugins that are not connected").action(run(pluginsListCommand));
-plugins.command("oauth <pluginId>").description("Start an OAuth connection and print the URL to open").option("-e, --env <env>", "Environment name or ID").action(run(pluginsOAuthCommand));
+plugins.command("oauth <pluginId>").description("Start an OAuth connection and print the URL to open").option("-e, --env <env>", "Environment name or ID").option("--read-only", "Request read-only access, for plugins that support it").action(run(pluginsOAuthCommand));
 plugins.command("connect <pluginId>").description("Connect a plugin with credentials: replicas plugins connect posthog -s apiKey=... -s region=us").option("-e, --env <env>", "Environment name or ID").option("-s, --set <key=value>", "Credential field (repeatable)", collect, []).action(run(pluginsConnectCommand));
 plugins.command("disconnect <pluginId>").description("Disconnect a plugin").option("-e, --env <env>", "Environment name or ID").option("-c, --connection <connectionId>", "Disconnect only this connection").action(run(pluginsDisconnectCommand));
 var skills = program.command("skills").description("Organization skills learned from users");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "replicas-cli",
-  "version": "0.3.148",
+  "version": "0.3.150",
   "description": "CLI for managing Replicas workspaces - SSH into cloud dev environments with automatic port forwarding",
   "main": "dist/index.cjs",
   "bin": {