@codeam/shared 2.61.31 → 2.61.33

package/dist/index.d.mts

@@ -351,7 +351,7 @@ declare function isHeadroomWrappable(agentId: string): boolean;
  * ubiquitous CLI for the tool → `cliEnv`; otherwise → `mcp`. A tool may
  * declare both.
  */
-type IntegrationId = 'jira' | 'sentry' | 'linear' | 'slack' | 'notion' | 'azure_devops' | 'figma' | 'microsoft_teams' | 'google_chat' | 'discord' | 'github_issues' | 'github';
+type IntegrationId = 'jira' | 'sentry' | 'linear' | 'slack' | 'notion' | 'azure_devops' | 'figma' | 'microsoft_teams' | 'google_chat' | 'discord' | 'github_issues' | 'github' | 'gitlab';
 /**
  * `derived` = no link flow of its own: the credential is BORROWED live from a
  * connection the user already made elsewhere (see `derivedFrom`). The backend

package/dist/index.d.ts

@@ -351,7 +351,7 @@ declare function isHeadroomWrappable(agentId: string): boolean;
  * ubiquitous CLI for the tool → `cliEnv`; otherwise → `mcp`. A tool may
  * declare both.
  */
-type IntegrationId = 'jira' | 'sentry' | 'linear' | 'slack' | 'notion' | 'azure_devops' | 'figma' | 'microsoft_teams' | 'google_chat' | 'discord' | 'github_issues' | 'github';
+type IntegrationId = 'jira' | 'sentry' | 'linear' | 'slack' | 'notion' | 'azure_devops' | 'figma' | 'microsoft_teams' | 'google_chat' | 'discord' | 'github_issues' | 'github' | 'gitlab';
 /**
  * `derived` = no link flow of its own: the credential is BORROWED live from a
  * connection the user already made elsewhere (see `derivedFrom`). The backend

package/dist/index.js

@@ -696,6 +696,36 @@ var INTEGRATION_REGISTRY = {
     // No MCP: a deployed box already has an authenticated `gh` on PATH.
     delivery: {}
   },
+  gitlab: {
+    id: "gitlab",
+    name: "GitLab",
+    icon: "gitlab",
+    category: "version_control",
+    // LIVE — a user-owned gitlab.com application (Confidential) with BOTH env
+    // callbacks registered, so dev/prod share the client and differ only in
+    // GITLAB_OAUTH_REDIRECT_URI. The backend GitLabOAuthProvider is
+    // config-gated (503 if env unset), so this is safe mid-rollout.
+    //
+    // ⚠️ Unlike `github`, this is a NORMAL `oauth_redirect` integration: its
+    // credential is vaulted here rather than living in a ProviderToken, because
+    // nothing else in the product owns a GitLab connection (GitHub's lives on
+    // the codespaces rail, which is why it's `kind: 'connection'`).
+    enabled: true,
+    auth: {
+      kind: "oauth_redirect",
+      // GitLab has NO per-resource scopes — `api` is the only one that grants
+      // merge-request WRITE (comment / approve / merge / close), so a
+      // read-only alternative would make the whole MR surface useless.
+      // `write_repository` is the git-over-HTTPS rail for the agent's push;
+      // `api` already covers it for user tokens, but it costs nothing on a
+      // consent screen that already says "complete read/write access" and
+      // changing scopes later forces EVERY user to re-authorize.
+      scopes: ["api", "write_repository"]
+    },
+    // No MCP: the box's `git` is authenticated for push, and the MR surface is
+    // served backend-side by the VCS provider — same shape as `github`.
+    delivery: {}
+  },
   github_issues: {
     id: "github_issues",
     name: "GitHub Issues",
@@ -956,6 +986,18 @@ function getIntegrationsByCategory(category) {
 
 // src/integrations/branding.ts
 var INTEGRATION_BRANDING = {
+  // GitLab — the official multicolour Tanuki (from GitLab's own header markup),
+  // like jira/slack. Kept verbatim: the four paths are the shape + the two
+  // cheeks + the chin, and flattening them to one colour loses the mark.
+  // `aria-hidden`/`role`/`class` were stripped — the renderers own a11y.
+  gitlab: {
+    id: "gitlab",
+    name: "GitLab",
+    vendor: "GitLab",
+    tagline: "Merge requests, reviews & CI",
+    brandColor: "#FC6D26",
+    logoSvg: '<svg width="25" height="24" viewBox="0 0 25 24" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="m24.507 9.5-.034-.09L21.082.562a.896.896 0 0 0-1.694.091l-2.29 7.01H7.825L5.535.653a.898.898 0 0 0-1.694-.09L.451 9.411.416 9.5a6.297 6.297 0 0 0 2.09 7.278l.012.01.03.022 5.16 3.867 2.56 1.935 1.554 1.176a1.051 1.051 0 0 0 1.268 0l1.555-1.176 2.56-1.935 5.197-3.89.014-.01A6.297 6.297 0 0 0 24.507 9.5Z" fill="#E24329"/><path d="m24.507 9.5-.034-.09a11.44 11.44 0 0 0-4.56 2.051l-7.447 5.632 4.742 3.584 5.197-3.89.014-.01A6.297 6.297 0 0 0 24.507 9.5Z" fill="#FC6D26"/><path d="m7.707 20.677 2.56 1.935 1.555 1.176a1.051 1.051 0 0 0 1.268 0l1.555-1.176 2.56-1.935-4.743-3.584-4.755 3.584Z" fill="#FCA326"/><path d="M5.01 11.461a11.43 11.43 0 0 0-4.56-2.05L.416 9.5a6.297 6.297 0 0 0 2.09 7.278l.012.01.03.022 5.16 3.867 4.745-3.584-7.444-5.632Z" fill="#FC6D26"/></svg>'
+  },
   // GitHub — now a REAL `IntegrationId` (`version_control`, `kind: 'connection'`).
   // It started life here as a brand-only entry, back when GitHub was rendered by
   // a hand-written special-case row; the mark is unchanged, it's just also the