@codeam/shared 2.61.45 → 2.61.47

package/dist/index.d.mts

@@ -351,7 +351,7 @@ declare function isHeadroomWrappable(agentId: string): boolean;
  * ubiquitous CLI for the tool → `cliEnv`; otherwise → `mcp`. A tool may
  * declare both.
  */
-type IntegrationId = 'jira' | 'sentry' | 'linear' | 'slack' | 'notion' | 'azure_devops' | 'figma' | 'microsoft_teams' | 'google_chat' | 'discord' | 'resend' | 'posthog' | 'github_issues' | 'github' | 'gitlab';
+type IntegrationId = 'jira' | 'sentry' | 'linear' | 'slack' | 'notion' | 'azure_devops' | 'figma' | 'microsoft_teams' | 'google_chat' | 'discord' | 'resend' | 'posthog' | 'datadog' | 'stitch' | 'github_issues' | 'github' | 'gitlab';
 /**
  * `derived` = no link flow of its own: the credential is BORROWED live from a
  * connection the user already made elsewhere (see `derivedFrom`). The backend
@@ -388,8 +388,9 @@ type IntegrationCategory = 'version_control' | 'tracker' | 'design' | 'comms' |
  * field the delivery `envMapping` references.
  */
 interface IntegrationApiKeyField {
-    /** Maps to a BrokeredIntegrationToken field (`accessToken`, `orgUrl`, …). */
-    key: 'accessToken' | 'orgUrl';
+    /** Maps to a BrokeredIntegrationToken field (`accessToken`, `orgUrl`,
+     *  `appKey`, `host`, …). */
+    key: 'accessToken' | 'orgUrl' | 'appKey' | 'host';
     /** Form label. */
     label: string;
     /** Example / placeholder. */
@@ -419,12 +420,15 @@ interface IntegrationMcpDelivery {
      *  Merged into the child env BENEATH the credential envMapping. Never secrets. STDIO transport. */
     staticEnv?: Record<string, string>;
     /** HTTP transport — a REMOTE MCP URL (Streamable HTTP). When set, the shim
-     *  relays to it instead of spawning `command`. */
+     *  relays to it instead of spawning `command`. May carry `{field}` placeholders
+     *  filled from the BrokeredIntegrationToken (e.g. a per-user regional host:
+     *  `https://mcp.{host}/…`). */
     httpUrl?: string;
     /** HTTP transport — header name → value TEMPLATE with `{field}` placeholders
      *  filled from the BrokeredIntegrationToken at spawn (e.g.
-     *  `{ Authorization: 'Bearer {accessToken}' }`). The token stays server-side of
-     *  the shim — never on argv. */
+     *  `{ Authorization: 'Bearer {accessToken}' }` or Datadog's
+     *  `{ 'DD-API-KEY': '{accessToken}', 'DD-APPLICATION-KEY': '{appKey}' }`). The
+     *  token stays server-side of the shim — never on argv. */
     httpHeaders?: Record<string, string>;
 }
 interface IntegrationDelivery {
@@ -501,6 +505,10 @@ interface BrokeredIntegrationToken {
      *  single BOT token, injected by the broker from config — the per-user
      *  credential IS the guildId. Absent for non-Discord integrations. */
     guildId?: string;
+    /** Datadog Application key (user-scoped) — sent alongside the API key
+     *  (`accessToken`) as the `DD-APPLICATION-KEY` header; `host` carries the
+     *  regional site. Absent for non-Datadog integrations. */
+    appKey?: string;
 }
 
 /**
@@ -548,7 +556,7 @@ interface IntegrationBranding {
     logoSvg: string;
 }
 declare const INTEGRATION_BRANDING: Record<string, IntegrationBranding>;
-declare const UPCOMING_INTEGRATION_IDS: readonly ["gmail", "clickup", "figma", "trello", "vercel", "supabase", "asana", "postman", "n8n", "stripe", "mixpanel", "pendo", "pagerduty", "amplitude", "datadog"];
+declare const UPCOMING_INTEGRATION_IDS: readonly ["gmail", "clickup", "figma", "trello", "vercel", "supabase", "asana", "postman", "n8n", "stripe", "mixpanel", "pendo", "pagerduty", "amplitude"];
 declare function getIntegrationBranding(id: string): IntegrationBranding | null;
 
 /**

package/dist/index.d.ts

@@ -351,7 +351,7 @@ declare function isHeadroomWrappable(agentId: string): boolean;
  * ubiquitous CLI for the tool → `cliEnv`; otherwise → `mcp`. A tool may
  * declare both.
  */
-type IntegrationId = 'jira' | 'sentry' | 'linear' | 'slack' | 'notion' | 'azure_devops' | 'figma' | 'microsoft_teams' | 'google_chat' | 'discord' | 'resend' | 'posthog' | 'github_issues' | 'github' | 'gitlab';
+type IntegrationId = 'jira' | 'sentry' | 'linear' | 'slack' | 'notion' | 'azure_devops' | 'figma' | 'microsoft_teams' | 'google_chat' | 'discord' | 'resend' | 'posthog' | 'datadog' | 'stitch' | 'github_issues' | 'github' | 'gitlab';
 /**
  * `derived` = no link flow of its own: the credential is BORROWED live from a
  * connection the user already made elsewhere (see `derivedFrom`). The backend
@@ -388,8 +388,9 @@ type IntegrationCategory = 'version_control' | 'tracker' | 'design' | 'comms' |
  * field the delivery `envMapping` references.
  */
 interface IntegrationApiKeyField {
-    /** Maps to a BrokeredIntegrationToken field (`accessToken`, `orgUrl`, …). */
-    key: 'accessToken' | 'orgUrl';
+    /** Maps to a BrokeredIntegrationToken field (`accessToken`, `orgUrl`,
+     *  `appKey`, `host`, …). */
+    key: 'accessToken' | 'orgUrl' | 'appKey' | 'host';
     /** Form label. */
     label: string;
     /** Example / placeholder. */
@@ -419,12 +420,15 @@ interface IntegrationMcpDelivery {
      *  Merged into the child env BENEATH the credential envMapping. Never secrets. STDIO transport. */
     staticEnv?: Record<string, string>;
     /** HTTP transport — a REMOTE MCP URL (Streamable HTTP). When set, the shim
-     *  relays to it instead of spawning `command`. */
+     *  relays to it instead of spawning `command`. May carry `{field}` placeholders
+     *  filled from the BrokeredIntegrationToken (e.g. a per-user regional host:
+     *  `https://mcp.{host}/…`). */
     httpUrl?: string;
     /** HTTP transport — header name → value TEMPLATE with `{field}` placeholders
      *  filled from the BrokeredIntegrationToken at spawn (e.g.
-     *  `{ Authorization: 'Bearer {accessToken}' }`). The token stays server-side of
-     *  the shim — never on argv. */
+     *  `{ Authorization: 'Bearer {accessToken}' }` or Datadog's
+     *  `{ 'DD-API-KEY': '{accessToken}', 'DD-APPLICATION-KEY': '{appKey}' }`). The
+     *  token stays server-side of the shim — never on argv. */
     httpHeaders?: Record<string, string>;
 }
 interface IntegrationDelivery {
@@ -501,6 +505,10 @@ interface BrokeredIntegrationToken {
      *  single BOT token, injected by the broker from config — the per-user
      *  credential IS the guildId. Absent for non-Discord integrations. */
     guildId?: string;
+    /** Datadog Application key (user-scoped) — sent alongside the API key
+     *  (`accessToken`) as the `DD-APPLICATION-KEY` header; `host` carries the
+     *  regional site. Absent for non-Datadog integrations. */
+    appKey?: string;
 }
 
 /**
@@ -548,7 +556,7 @@ interface IntegrationBranding {
     logoSvg: string;
 }
 declare const INTEGRATION_BRANDING: Record<string, IntegrationBranding>;
-declare const UPCOMING_INTEGRATION_IDS: readonly ["gmail", "clickup", "figma", "trello", "vercel", "supabase", "asana", "postman", "n8n", "stripe", "mixpanel", "pendo", "pagerduty", "amplitude", "datadog"];
+declare const UPCOMING_INTEGRATION_IDS: readonly ["gmail", "clickup", "figma", "trello", "vercel", "supabase", "asana", "postman", "n8n", "stripe", "mixpanel", "pendo", "pagerduty", "amplitude"];
 declare function getIntegrationBranding(id: string): IntegrationBranding | null;
 
 /**

package/dist/index.js

@@ -947,6 +947,60 @@ var INTEGRATION_REGISTRY = {
       }
     }
   },
+  datadog: {
+    id: "datadog",
+    name: "Datadog",
+    icon: "datadog",
+    category: "observability",
+    // LIVE — api_key: the user pastes a Datadog API key (org-scoped) + an
+    // Application key (user-scoped, grants the read scopes) + their regional
+    // site. Datadog's OFFICIAL hosted MCP (mcp.<site>) accepts these as headers
+    // headless (verified) — no OAuth, no GSM secret. Delivery uses the shim's
+    // HTTP transport with the site templated into the URL and both keys sent as
+    // DD-API-KEY / DD-APPLICATION-KEY headers.
+    enabled: true,
+    auth: {
+      kind: "api_key",
+      fields: [
+        {
+          key: "accessToken",
+          label: "API Key",
+          placeholder: "Datadog API key",
+          secret: true,
+          help: "Organization API key \u2014 Datadog \u2192 Organization Settings \u2192 API Keys."
+        },
+        {
+          key: "appKey",
+          label: "Application Key",
+          placeholder: "Datadog application key",
+          secret: true,
+          help: "User Application key (grants the read scopes) \u2014 Datadog \u2192 Organization Settings \u2192 Application Keys."
+        },
+        {
+          key: "host",
+          label: "Site",
+          placeholder: "datadoghq.com",
+          secret: false,
+          help: "Your Datadog site \u2014 US1: datadoghq.com \xB7 EU: datadoghq.eu \xB7 US3: us3.datadoghq.com \xB7 US5: us5.datadoghq.com \xB7 AP1: ap1.datadoghq.com."
+        }
+      ]
+    },
+    delivery: {
+      mcp: {
+        // HTTP transport — the shim relays to Datadog's hosted MCP for the
+        // user's site, with both keys as headers. Keys stay server-side of the
+        // shim, never on argv.
+        command: "",
+        args: [],
+        envMapping: {},
+        httpUrl: "https://mcp.{host}/api/unstable/mcp-server/mcp",
+        httpHeaders: {
+          "DD-API-KEY": "{accessToken}",
+          "DD-APPLICATION-KEY": "{appKey}"
+        }
+      }
+    }
+  },
   notion: {
     id: "notion",
     name: "Notion",
@@ -1070,6 +1124,42 @@ var INTEGRATION_REGISTRY = {
         }
       }
     }
+  },
+  stitch: {
+    id: "stitch",
+    name: "Stitch",
+    icon: "stitch",
+    category: "design",
+    // LIVE — api_key: the user pastes a Stitch API key (Google Stitch →
+    // Settings → API Key). Stitch's MCP is hosted-only (stitch.googleapis.com)
+    // and accepts the key as the `X-Goog-Api-Key` header headless (verified) —
+    // no OAuth, no GSM secret. Delivery uses the shim's HTTP transport.
+    // (Stitch ALSO supports Google OAuth 2.0, but that's a follow-up — our model
+    // is one auth kind per integration and api_key is the simple, headless path.)
+    enabled: true,
+    auth: {
+      kind: "api_key",
+      fields: [
+        {
+          key: "accessToken",
+          label: "API Key",
+          placeholder: "Stitch API key",
+          secret: true,
+          help: "Google Stitch \u2192 profile menu \u2192 Stitch Settings \u2192 API Key \u2192 Create Key."
+        }
+      ]
+    },
+    delivery: {
+      mcp: {
+        // HTTP transport — the shim relays to Stitch's hosted MCP with the key
+        // as the X-Goog-Api-Key header. Key stays server-side of the shim.
+        command: "",
+        args: [],
+        envMapping: {},
+        httpUrl: "https://stitch.googleapis.com/mcp",
+        httpHeaders: { "X-Goog-Api-Key": "{accessToken}" }
+      }
+    }
   }
 };
 function getEnabledIntegrations() {
@@ -1244,6 +1334,16 @@ var INTEGRATION_BRANDING = {
     brandColor: "#F24E1E",
     logoSvg: '<svg role="img" viewBox="0 0 24 24" xmlns="http://www.w3.org/2000/svg"><title>Figma</title><path fill="#FFFFFF" d="M15.852 8.981h-4.588V0h4.588c2.476 0 4.49 2.014 4.49 4.49s-2.014 4.491-4.49 4.491zM12.735 7.51h3.117c1.665 0 3.019-1.355 3.019-3.019s-1.355-3.019-3.019-3.019h-3.117V7.51zm0 1.471H8.148c-2.476 0-4.49-2.014-4.49-4.49S5.672 0 8.148 0h4.588v8.981zm-4.587-7.51c-1.665 0-3.019 1.355-3.019 3.019s1.354 3.02 3.019 3.02h3.117V1.471H8.148zm4.587 15.019H8.148c-2.476 0-4.49-2.014-4.49-4.49s2.014-4.49 4.49-4.49h4.588v8.98zM8.148 8.981c-1.665 0-3.019 1.355-3.019 3.019s1.355 3.019 3.019 3.019h3.117V8.981H8.148zM8.172 24c-2.489 0-4.515-2.014-4.515-4.49s2.014-4.49 4.49-4.49h4.588v4.441c0 2.503-2.047 4.539-4.563 4.539zm-.024-7.51a3.023 3.023 0 0 0-3.019 3.019c0 1.665 1.365 3.019 3.044 3.019 1.705 0 3.093-1.376 3.093-3.068v-2.97H8.148zm7.704 0h-.098c-2.476 0-4.49-2.014-4.49-4.49s2.014-4.49 4.49-4.49h.098c2.476 0 4.49 2.014 4.49 4.49s-2.014 4.49-4.49 4.49zm-.097-7.509c-1.665 0-3.019 1.355-3.019 3.019s1.355 3.019 3.019 3.019h.098c1.665 0 3.019-1.355 3.019-3.019s-1.355-3.019-3.019-3.019h-.098z"/></svg>'
   },
+  stitch: {
+    id: "stitch",
+    name: "Stitch",
+    vendor: "Google",
+    tagline: "AI UI design \u2192 code",
+    brandColor: "#A855F7",
+    // A simple 4-point design "sparkle" mark (Google Stitch has no simple-icons
+    // entry) — white on dark, re-tintable via brandColor like the other marks.
+    logoSvg: '<svg viewBox="0 0 24 24" xmlns="http://www.w3.org/2000/svg"><path fill="#FFFFFF" d="M12 1.5l1.9 6.3a4 4 0 0 0 2.3 2.3l6.3 1.9-6.3 1.9a4 4 0 0 0-2.3 2.3L12 22.5l-1.9-6.3a4 4 0 0 0-2.3-2.3L1.5 12l6.3-1.9a4 4 0 0 0 2.3-2.3L12 1.5z"/></svg>'
+  },
   trello: {
     id: "trello",
     name: "Trello",
@@ -1363,8 +1463,7 @@ var UPCOMING_INTEGRATION_IDS = [
   "mixpanel",
   "pendo",
   "pagerduty",
-  "amplitude",
-  "datadog"
+  "amplitude"
 ];
 function getIntegrationBranding(id) {
   return INTEGRATION_BRANDING[id] ?? null;