@codeam/shared 2.61.56 → 2.61.58

package/dist/index.mjs

@@ -1140,6 +1140,78 @@ var INTEGRATION_REGISTRY = {
         httpHeaders: { Authorization: "Bearer {accessToken}" }
       }
     }
+  },
+  trello: {
+    id: "trello",
+    name: "Trello",
+    icon: "trello",
+    category: "tracker",
+    // LIVE — api_key rail (like Azure DevOps). Trello's auth is a developer API
+    // key + a user token, NOT an OAuth2 code exchange: its token returns via a
+    // URL fragment / OAuth 1.0a, incompatible with our server-side broker. The
+    // user pastes both; the backend validates against the Trello REST API and
+    // vaults them. No OAuth app, no GSM secrets, no config-gated 503.
+    enabled: true,
+    auth: {
+      kind: "api_key",
+      fields: [
+        {
+          key: "apiKey",
+          label: "API Key",
+          placeholder: "Your Trello API key",
+          secret: false,
+          help: "Create a Power-Up at https://trello.com/power-ups/admin and copy its API key."
+        },
+        {
+          key: "accessToken",
+          label: "Token",
+          placeholder: "Your Trello token",
+          secret: true,
+          help: 'On the API-key page, click the "Token" link to authorize + generate a token (scope read,write, never-expiring).'
+        }
+      ]
+    },
+    delivery: {
+      mcp: {
+        // mcp-server-trello (Node): TRELLO_API_KEY + TRELLO_TOKEN via env only,
+        // never argv. Version PINNED; bump only after re-verifying headless.
+        command: "npx",
+        args: ["-y", "mcp-server-trello@1.0.4"],
+        envMapping: {
+          TRELLO_API_KEY: "apiKey",
+          TRELLO_TOKEN: "accessToken"
+        }
+      }
+    }
+  },
+  clickup: {
+    id: "clickup",
+    name: "ClickUp",
+    icon: "clickup",
+    category: "tracker",
+    // DARK — OAuth 2.0 (authorization code). ClickUp's token DOES NOT expire and
+    // has NO refresh token, and its OAuth has NO granular scopes (the app gets
+    // the workspaces the user authorizes). enabled:false until the OAuth app is
+    // registered (client_id/secret) + secrets land + Step-8 live-verify.
+    enabled: false,
+    auth: {
+      kind: "oauth_redirect",
+      scopes: []
+    },
+    delivery: {
+      mcp: {
+        // @taazkareem/clickup-mcp-server (Node): CLICKUP_API_KEY (the OAuth
+        // access token — ClickUp accepts it in the Authorization header) +
+        // CLICKUP_TEAM_ID (the workspace id, captured at exchange) via env only.
+        // Version PINNED; bump only after re-verifying headless.
+        command: "npx",
+        args: ["-y", "@taazkareem/clickup-mcp-server@0.14.4"],
+        envMapping: {
+          CLICKUP_API_KEY: "accessToken",
+          CLICKUP_TEAM_ID: "teamId"
+        }
+      }
+    }
   }
 };
 function getEnabledIntegrations() {
@@ -1433,7 +1505,6 @@ var UPCOMING_INTEGRATION_IDS = [
   "gmail",
   "clickup",
   "figma",
-  "trello",
   "supabase",
   "asana",
   "postman",