fix(providers): guard refresh credential modes

Author: johntmyers

crates/openshell-cli/src/main.rs

@@ -655,8 +655,6 @@ enum OutputFormat {
 
 #[derive(Clone, Debug, ValueEnum)]
 enum CliProviderRefreshStrategy {
-    Static,
-    External,
     Oauth2RefreshToken,
     Oauth2ClientCredentials,
     GoogleServiceAccountJwt,
@@ -665,8 +663,6 @@ enum CliProviderRefreshStrategy {
 impl CliProviderRefreshStrategy {
     fn as_str(&self) -> &'static str {
         match self {
-            Self::Static => "static",
-            Self::External => "external",
             Self::Oauth2RefreshToken => "oauth2_refresh_token",
             Self::Oauth2ClientCredentials => "oauth2_client_credentials",
             Self::GoogleServiceAccountJwt => "google_service_account_jwt",

crates/openshell-cli/src/run.rs

@@ -4506,8 +4506,6 @@ pub async fn provider_refresh_delete(
 
 fn provider_refresh_strategy(strategy: &str) -> Result<ProviderCredentialRefreshStrategy> {
     match strategy {
-        "static" => Ok(ProviderCredentialRefreshStrategy::Static),
-        "external" => Ok(ProviderCredentialRefreshStrategy::External),
         "oauth2_refresh_token" => Ok(ProviderCredentialRefreshStrategy::Oauth2RefreshToken),
         "oauth2_client_credentials" => {
             Ok(ProviderCredentialRefreshStrategy::Oauth2ClientCredentials)

crates/openshell-server/src/grpc/mod.rs

@@ -4,7 +4,7 @@
 //! gRPC service implementation.
 
 pub mod policy;
-mod provider;
+pub mod provider;
 mod sandbox;
 mod service;
 mod validation;