@codeam/shared 2.61.45 → 2.61.46

package/dist/index.d.mts

@@ -351,7 +351,7 @@ declare function isHeadroomWrappable(agentId: string): boolean;
  * ubiquitous CLI for the tool → `cliEnv`; otherwise → `mcp`. A tool may
  * declare both.
  */
-type IntegrationId = 'jira' | 'sentry' | 'linear' | 'slack' | 'notion' | 'azure_devops' | 'figma' | 'microsoft_teams' | 'google_chat' | 'discord' | 'resend' | 'posthog' | 'github_issues' | 'github' | 'gitlab';
+type IntegrationId = 'jira' | 'sentry' | 'linear' | 'slack' | 'notion' | 'azure_devops' | 'figma' | 'microsoft_teams' | 'google_chat' | 'discord' | 'resend' | 'posthog' | 'datadog' | 'github_issues' | 'github' | 'gitlab';
 /**
  * `derived` = no link flow of its own: the credential is BORROWED live from a
  * connection the user already made elsewhere (see `derivedFrom`). The backend
@@ -388,8 +388,9 @@ type IntegrationCategory = 'version_control' | 'tracker' | 'design' | 'comms' |
  * field the delivery `envMapping` references.
  */
 interface IntegrationApiKeyField {
-    /** Maps to a BrokeredIntegrationToken field (`accessToken`, `orgUrl`, …). */
-    key: 'accessToken' | 'orgUrl';
+    /** Maps to a BrokeredIntegrationToken field (`accessToken`, `orgUrl`,
+     *  `appKey`, `host`, …). */
+    key: 'accessToken' | 'orgUrl' | 'appKey' | 'host';
     /** Form label. */
     label: string;
     /** Example / placeholder. */
@@ -419,12 +420,15 @@ interface IntegrationMcpDelivery {
      *  Merged into the child env BENEATH the credential envMapping. Never secrets. STDIO transport. */
     staticEnv?: Record<string, string>;
     /** HTTP transport — a REMOTE MCP URL (Streamable HTTP). When set, the shim
-     *  relays to it instead of spawning `command`. */
+     *  relays to it instead of spawning `command`. May carry `{field}` placeholders
+     *  filled from the BrokeredIntegrationToken (e.g. a per-user regional host:
+     *  `https://mcp.{host}/…`). */
     httpUrl?: string;
     /** HTTP transport — header name → value TEMPLATE with `{field}` placeholders
      *  filled from the BrokeredIntegrationToken at spawn (e.g.
-     *  `{ Authorization: 'Bearer {accessToken}' }`). The token stays server-side of
-     *  the shim — never on argv. */
+     *  `{ Authorization: 'Bearer {accessToken}' }` or Datadog's
+     *  `{ 'DD-API-KEY': '{accessToken}', 'DD-APPLICATION-KEY': '{appKey}' }`). The
+     *  token stays server-side of the shim — never on argv. */
     httpHeaders?: Record<string, string>;
 }
 interface IntegrationDelivery {
@@ -501,6 +505,10 @@ interface BrokeredIntegrationToken {
      *  single BOT token, injected by the broker from config — the per-user
      *  credential IS the guildId. Absent for non-Discord integrations. */
     guildId?: string;
+    /** Datadog Application key (user-scoped) — sent alongside the API key
+     *  (`accessToken`) as the `DD-APPLICATION-KEY` header; `host` carries the
+     *  regional site. Absent for non-Datadog integrations. */
+    appKey?: string;
 }
 
 /**
@@ -548,7 +556,7 @@ interface IntegrationBranding {
     logoSvg: string;
 }
 declare const INTEGRATION_BRANDING: Record<string, IntegrationBranding>;
-declare const UPCOMING_INTEGRATION_IDS: readonly ["gmail", "clickup", "figma", "trello", "vercel", "supabase", "asana", "postman", "n8n", "stripe", "mixpanel", "pendo", "pagerduty", "amplitude", "datadog"];
+declare const UPCOMING_INTEGRATION_IDS: readonly ["gmail", "clickup", "figma", "trello", "vercel", "supabase", "asana", "postman", "n8n", "stripe", "mixpanel", "pendo", "pagerduty", "amplitude"];
 declare function getIntegrationBranding(id: string): IntegrationBranding | null;
 
 /**

package/dist/index.d.ts

@@ -351,7 +351,7 @@ declare function isHeadroomWrappable(agentId: string): boolean;
  * ubiquitous CLI for the tool → `cliEnv`; otherwise → `mcp`. A tool may
  * declare both.
  */
-type IntegrationId = 'jira' | 'sentry' | 'linear' | 'slack' | 'notion' | 'azure_devops' | 'figma' | 'microsoft_teams' | 'google_chat' | 'discord' | 'resend' | 'posthog' | 'github_issues' | 'github' | 'gitlab';
+type IntegrationId = 'jira' | 'sentry' | 'linear' | 'slack' | 'notion' | 'azure_devops' | 'figma' | 'microsoft_teams' | 'google_chat' | 'discord' | 'resend' | 'posthog' | 'datadog' | 'github_issues' | 'github' | 'gitlab';
 /**
  * `derived` = no link flow of its own: the credential is BORROWED live from a
  * connection the user already made elsewhere (see `derivedFrom`). The backend
@@ -388,8 +388,9 @@ type IntegrationCategory = 'version_control' | 'tracker' | 'design' | 'comms' |
  * field the delivery `envMapping` references.
  */
 interface IntegrationApiKeyField {
-    /** Maps to a BrokeredIntegrationToken field (`accessToken`, `orgUrl`, …). */
-    key: 'accessToken' | 'orgUrl';
+    /** Maps to a BrokeredIntegrationToken field (`accessToken`, `orgUrl`,
+     *  `appKey`, `host`, …). */
+    key: 'accessToken' | 'orgUrl' | 'appKey' | 'host';
     /** Form label. */
     label: string;
     /** Example / placeholder. */
@@ -419,12 +420,15 @@ interface IntegrationMcpDelivery {
      *  Merged into the child env BENEATH the credential envMapping. Never secrets. STDIO transport. */
     staticEnv?: Record<string, string>;
     /** HTTP transport — a REMOTE MCP URL (Streamable HTTP). When set, the shim
-     *  relays to it instead of spawning `command`. */
+     *  relays to it instead of spawning `command`. May carry `{field}` placeholders
+     *  filled from the BrokeredIntegrationToken (e.g. a per-user regional host:
+     *  `https://mcp.{host}/…`). */
     httpUrl?: string;
     /** HTTP transport — header name → value TEMPLATE with `{field}` placeholders
      *  filled from the BrokeredIntegrationToken at spawn (e.g.
-     *  `{ Authorization: 'Bearer {accessToken}' }`). The token stays server-side of
-     *  the shim — never on argv. */
+     *  `{ Authorization: 'Bearer {accessToken}' }` or Datadog's
+     *  `{ 'DD-API-KEY': '{accessToken}', 'DD-APPLICATION-KEY': '{appKey}' }`). The
+     *  token stays server-side of the shim — never on argv. */
     httpHeaders?: Record<string, string>;
 }
 interface IntegrationDelivery {
@@ -501,6 +505,10 @@ interface BrokeredIntegrationToken {
      *  single BOT token, injected by the broker from config — the per-user
      *  credential IS the guildId. Absent for non-Discord integrations. */
     guildId?: string;
+    /** Datadog Application key (user-scoped) — sent alongside the API key
+     *  (`accessToken`) as the `DD-APPLICATION-KEY` header; `host` carries the
+     *  regional site. Absent for non-Datadog integrations. */
+    appKey?: string;
 }
 
 /**
@@ -548,7 +556,7 @@ interface IntegrationBranding {
     logoSvg: string;
 }
 declare const INTEGRATION_BRANDING: Record<string, IntegrationBranding>;
-declare const UPCOMING_INTEGRATION_IDS: readonly ["gmail", "clickup", "figma", "trello", "vercel", "supabase", "asana", "postman", "n8n", "stripe", "mixpanel", "pendo", "pagerduty", "amplitude", "datadog"];
+declare const UPCOMING_INTEGRATION_IDS: readonly ["gmail", "clickup", "figma", "trello", "vercel", "supabase", "asana", "postman", "n8n", "stripe", "mixpanel", "pendo", "pagerduty", "amplitude"];
 declare function getIntegrationBranding(id: string): IntegrationBranding | null;
 
 /**

package/dist/index.js

@@ -947,6 +947,60 @@ var INTEGRATION_REGISTRY = {
       }
     }
   },
+  datadog: {
+    id: "datadog",
+    name: "Datadog",
+    icon: "datadog",
+    category: "observability",
+    // LIVE — api_key: the user pastes a Datadog API key (org-scoped) + an
+    // Application key (user-scoped, grants the read scopes) + their regional
+    // site. Datadog's OFFICIAL hosted MCP (mcp.<site>) accepts these as headers
+    // headless (verified) — no OAuth, no GSM secret. Delivery uses the shim's
+    // HTTP transport with the site templated into the URL and both keys sent as
+    // DD-API-KEY / DD-APPLICATION-KEY headers.
+    enabled: true,
+    auth: {
+      kind: "api_key",
+      fields: [
+        {
+          key: "accessToken",
+          label: "API Key",
+          placeholder: "Datadog API key",
+          secret: true,
+          help: "Organization API key \u2014 Datadog \u2192 Organization Settings \u2192 API Keys."
+        },
+        {
+          key: "appKey",
+          label: "Application Key",
+          placeholder: "Datadog application key",
+          secret: true,
+          help: "User Application key (grants the read scopes) \u2014 Datadog \u2192 Organization Settings \u2192 Application Keys."
+        },
+        {
+          key: "host",
+          label: "Site",
+          placeholder: "datadoghq.com",
+          secret: false,
+          help: "Your Datadog site \u2014 US1: datadoghq.com \xB7 EU: datadoghq.eu \xB7 US3: us3.datadoghq.com \xB7 US5: us5.datadoghq.com \xB7 AP1: ap1.datadoghq.com."
+        }
+      ]
+    },
+    delivery: {
+      mcp: {
+        // HTTP transport — the shim relays to Datadog's hosted MCP for the
+        // user's site, with both keys as headers. Keys stay server-side of the
+        // shim, never on argv.
+        command: "",
+        args: [],
+        envMapping: {},
+        httpUrl: "https://mcp.{host}/api/unstable/mcp-server/mcp",
+        httpHeaders: {
+          "DD-API-KEY": "{accessToken}",
+          "DD-APPLICATION-KEY": "{appKey}"
+        }
+      }
+    }
+  },
   notion: {
     id: "notion",
     name: "Notion",
@@ -1363,8 +1417,7 @@ var UPCOMING_INTEGRATION_IDS = [
   "mixpanel",
   "pendo",
   "pagerduty",
-  "amplitude",
-  "datadog"
+  "amplitude"
 ];
 function getIntegrationBranding(id) {
   return INTEGRATION_BRANDING[id] ?? null;