@codeam/shared 2.61.50 → 2.61.52

package/dist/index.mjs

@@ -355,13 +355,12 @@ var AGENT_REGISTRY = {
     displayName: "opencode",
     binaryName: "opencode",
     enabled: true,
-    // opencode auth = `opencode auth login` (multi-provider; API keys AND
-    // provider OAuth), which writes a login-state file at
-    // ~/.local/share/opencode/auth.json. The CLI captures that blob (like
-    // claude/codex capture their local login), so the vaulted credential is
-    // the auth.json — an `oauth_token`-kind login blob, not a bare api_key.
-    supportedAuthKinds: ["oauth_token"],
-    preferredAuthKind: "oauth_token",
+    // opencode is model-AGNOSTIC and AUTO-DETECTS provider API keys from env
+    // vars (ANTHROPIC_API_KEY / OPENAI_API_KEY / GEMINI_API_KEY / …) — same
+    // model as aider. So the credential is the user's OWN provider key; we set
+    // the matching env var (detected by prefix) at deploy. api_key only.
+    supportedAuthKinds: ["api_key"],
+    preferredAuthKind: "api_key",
     // Not listed by `headroom init --global` (claude/codex/copilot only) — native.
     headroomWrappable: false,
     // Native ACP server: `opencode acp` (stdio JSON-RPC).
@@ -1106,6 +1105,37 @@ var INTEGRATION_REGISTRY = {
         httpHeaders: { "X-Goog-Api-Key": "{accessToken}" }
       }
     }
+  },
+  vercel: {
+    id: "vercel",
+    name: "Vercel",
+    icon: "vercel",
+    category: "deployment",
+    // DARK — OAuth (PKCE public client). The user authorizes our registered
+    // Vercel OAuth app; the access token calls Vercel's OFFICIAL hosted remote
+    // MCP (mcp.vercel.com, Streamable HTTP) as a Bearer header — the SAME shim
+    // HTTP transport as PostHog/Datadog. Vercel MCP is approved-clients + per-
+    // connection OAuth consent, but that consent is the ONE-TIME authorize (not
+    // per MCP request), so a backend-brokered access token works headless.
+    // Endpoints (from mcp.vercel.com/.well-known/oauth-protected-resource →
+    // vercel.com/.well-known/oauth-authorization-server): authorize
+    // https://vercel.com/oauth/authorize, token
+    // https://vercel.com/api/login/oauth/token, PKCE S256, token-endpoint auth
+    // 'none' (public). enabled:false until Step-8 live-verify of the Bearer.
+    enabled: false,
+    auth: {
+      kind: "oauth_redirect",
+      scopes: ["openid", "offline_access"]
+    },
+    delivery: {
+      mcp: {
+        command: "",
+        args: [],
+        envMapping: {},
+        httpUrl: "https://mcp.vercel.com",
+        httpHeaders: { Authorization: "Bearer {accessToken}" }
+      }
+    }
   }
 };
 function getEnabledIntegrations() {