feat: kagenti integration PoC

- Replace Docker/registry-based providers with network-only providers
- Add kagenti agent sync cron and provider health check refresh
- Expose otel-collector via HTTPRoute for local agent telemetry
- Upgrade Phoenix image to 12.31.2 for GraphQL API compatibility
- Fix server traces reaching otel-collector (port 4318→8335)
- Set default OTEL endpoint in Python SDK for local deployments
- Simplify provider model: ProviderState (online/offline) replaces
  ProviderType/ProviderStatus/ProviderUnmanagedStatus
- Remove Docker image labels, GitHub version resolving, provider builds
- Fix checkbox selection UX in agent remove command

Signed-off-by: Radek Ježek <radek.jezek@ibm.com>

Author: jezekra1

apps/agentstack-cli/src/agentstack_cli/__init__.py

@@ -39,13 +39,10 @@
 ╰────────────────────────────────────────────────────────────────────────────╯
 
 ╭─ Agent Management [Admin only] ────────────────────────────────────────────╮
-│ add                               Install an agent (Docker, GitHub)        │
+│ add                               Install an agent                         │
 │ remove                            Uninstall an agent                       │
 │ update                            Update an agent                          │
-│ logs                              Stream agent execution logs              │
-│ env                               Manage agent environment variables       │
-│ build                             Build an agent remotely                  │
-│ client-side-build                 Build an agent container image locally   │
+│ build                             Build an agent image locally              │
 ╰────────────────────────────────────────────────────────────────────────────╯
 
 ╭─ Platform & Configuration ─────────────────────────────────────────────────╮
@@ -105,7 +102,6 @@ def main(
     no_args_is_help=True,
     help="Manage Agent Stack platform. [Local only]",
 )
-app.add_typer(agentstack_cli.commands.build.app, name="", no_args_is_help=True, help="Build agent images.")
 app.add_typer(
     agentstack_cli.commands.server.app,
     name="server",
@@ -128,6 +124,8 @@ def main(
 # )
 
 
+app.add_typer(agentstack_cli.commands.build.app, name="", no_args_is_help=True, help="Build agent images.")
+
 agent_alias = deepcopy(agentstack_cli.commands.agent.app)
 for cmd in agent_alias.registered_commands:
     cmd.rich_help_panel = "Agent commands"
@@ -158,12 +156,14 @@ async def ui():
     active_server = config.auth_manager.active_server
 
     if active_server:
-        if re.search(r"(localhost|127\.0\.0\.1):8333", active_server):
+        if "agentstack-api.localtest.me" in active_server:
+            ui_url = active_server.replace("agentstack-api.localtest.me", "agentstack.localtest.me")
+        elif re.search(r"(localhost|127\.0\.0\.1):8333", active_server):
             ui_url = re.sub(r":8333", ":8334", active_server)
         else:
             ui_url = active_server
     else:
-        ui_url = "http://localhost:8334"
+        ui_url = "http://agentstack.localtest.me:8080"
 
     webbrowser.open(ui_url)
 

apps/agentstack-cli/src/agentstack_cli/api.py

@@ -155,8 +155,10 @@ async def a2a_client(agent_card: AgentCard, context_token: ContextToken) -> Asyn
 @asynccontextmanager
 async def openai_client() -> AsyncIterator[openai.AsyncOpenAI]:
     async with Configuration().use_platform_client() as platform_client:
+        headers = platform_client.headers.copy()
+        headers.pop("Authorization", None)
         yield openai.AsyncOpenAI(
             api_key=platform_client.headers.get("Authorization", "").removeprefix("Bearer ") or "dummy",
             base_url=urllib.parse.urljoin(str(platform_client.base_url), urllib.parse.urljoin(API_BASE_URL, "openai")),
-            default_headers=platform_client.headers,
+            default_headers=headers,
         )

apps/agentstack-cli/src/agentstack_cli/auth_manager.py

@@ -155,6 +155,51 @@ def save_auth_info(
             self._auth.servers[server]  # touch
         self._save()
 
+    async def login_with_password(
+        self,
+        server: str,
+        username: str,
+        password: str,
+        client_id: str = "agentstack-cli",
+    ) -> AuthToken:
+        """Authenticate using resource owner password grant (direct access)."""
+        oauth_metadata = await self.fetch_oauth_protected_resource_metadata(server)
+        auth_servers = oauth_metadata.get("authorization_servers", [])
+        if not auth_servers:
+            raise RuntimeError(f"No authorization servers found for {server}")
+
+        auth_server_url = auth_servers[0]
+        oidc = await self.get_oidc_metadata(auth_server_url)
+        token_endpoint = oidc["token_endpoint"]
+
+        async with httpx.AsyncClient() as client:
+            resp = await client.post(
+                token_endpoint,
+                data={
+                    "grant_type": "password",
+                    "client_id": client_id,
+                    "username": username,
+                    "password": password,
+                    "scope": " ".join(oauth_metadata.get("scopes_supported", ["openid", "email", "profile"])),
+                },
+            )
+            resp.raise_for_status()
+            token_data = resp.json()
+
+        auth_token = AuthToken(**token_data)
+
+        self.save_auth_info(
+            server=server,
+            auth_server=auth_server_url,
+            client_id=client_id,
+            token=token_data,
+        )
+        self._auth.active_server = server
+        self._auth.active_auth_server = auth_server_url
+        self._save()
+
+        return auth_token
+
     async def _exchange_refresh_token(self, auth_server: str, token: AuthToken) -> AuthToken:
         if not self._auth.active_server:
             raise ValueError("No active server configured")