@codeam/shared 2.61.59 → 2.61.61

package/dist/index.d.mts

@@ -351,7 +351,7 @@ declare function isHeadroomWrappable(agentId: string): boolean;
  * ubiquitous CLI for the tool → `cliEnv`; otherwise → `mcp`. A tool may
  * declare both.
  */
-type IntegrationId = 'jira' | 'sentry' | 'linear' | 'slack' | 'notion' | 'azure_devops' | 'figma' | 'microsoft_teams' | 'google_chat' | 'discord' | 'resend' | 'posthog' | 'datadog' | 'stitch' | 'github_issues' | 'github' | 'gitlab' | 'vercel' | 'trello' | 'clickup';
+type IntegrationId = 'jira' | 'sentry' | 'linear' | 'slack' | 'notion' | 'azure_devops' | 'figma' | 'microsoft_teams' | 'google_chat' | 'discord' | 'resend' | 'posthog' | 'datadog' | 'stitch' | 'github_issues' | 'github' | 'gitlab' | 'vercel' | 'trello' | 'clickup' | 'n8n';
 /**
  * `derived` = no link flow of its own: the credential is BORROWED live from a
  * connection the user already made elsewhere (see `derivedFrom`). The backend
@@ -380,7 +380,7 @@ type DerivedCredentialSource = 'github';
 /** Grouping used by category-driven surfaces (Start-from-Work-Item picker,
  *  catalog sections). A future tracker integration joins those features with
  *  ZERO feature code — they resolve sources from the registry by category. */
-type IntegrationCategory = 'version_control' | 'tracker' | 'design' | 'comms' | 'docs' | 'observability' | 'deployment';
+type IntegrationCategory = 'version_control' | 'tracker' | 'design' | 'comms' | 'docs' | 'observability' | 'deployment' | 'automation';
 /**
  * One user-entered field for an `api_key` integration (no browser OAuth — the
  * user pastes credentials directly, e.g. a PAT + an org URL). The mobile form
@@ -390,7 +390,7 @@ type IntegrationCategory = 'version_control' | 'tracker' | 'design' | 'comms' |
 interface IntegrationApiKeyField {
     /** Maps to a BrokeredIntegrationToken field (`accessToken`, `orgUrl`,
      *  `appKey`, `host`, …). */
-    key: 'accessToken' | 'orgUrl' | 'appKey' | 'host' | 'apiKey';
+    key: 'accessToken' | 'orgUrl' | 'appKey' | 'host' | 'apiKey' | 'instanceUrl';
     /** Form label. */
     label: string;
     /** Example / placeholder. */
@@ -513,6 +513,9 @@ interface BrokeredIntegrationToken {
      *  alongside the user token (`TRELLO_API_KEY` + `TRELLO_TOKEN`=`accessToken`).
      *  Absent for non-Trello integrations. */
     apiKey?: string;
+    /** n8n instance base URL (self-hosted or n8n.cloud) — the MCP server needs it
+     *  alongside the API key (N8N_API_URL + N8N_API_KEY). Absent for non-n8n. */
+    instanceUrl?: string;
 }
 
 /**
@@ -560,7 +563,7 @@ interface IntegrationBranding {
     logoSvg: string;
 }
 declare const INTEGRATION_BRANDING: Record<string, IntegrationBranding>;
-declare const UPCOMING_INTEGRATION_IDS: readonly ["gmail", "figma", "supabase", "asana", "postman", "n8n", "stripe", "mixpanel", "pendo", "pagerduty", "amplitude"];
+declare const UPCOMING_INTEGRATION_IDS: readonly ["gmail", "figma", "supabase", "asana", "postman", "stripe", "mixpanel", "pendo", "pagerduty", "amplitude"];
 declare function getIntegrationBranding(id: string): IntegrationBranding | null;
 
 /**

package/dist/index.d.ts

@@ -351,7 +351,7 @@ declare function isHeadroomWrappable(agentId: string): boolean;
  * ubiquitous CLI for the tool → `cliEnv`; otherwise → `mcp`. A tool may
  * declare both.
  */
-type IntegrationId = 'jira' | 'sentry' | 'linear' | 'slack' | 'notion' | 'azure_devops' | 'figma' | 'microsoft_teams' | 'google_chat' | 'discord' | 'resend' | 'posthog' | 'datadog' | 'stitch' | 'github_issues' | 'github' | 'gitlab' | 'vercel' | 'trello' | 'clickup';
+type IntegrationId = 'jira' | 'sentry' | 'linear' | 'slack' | 'notion' | 'azure_devops' | 'figma' | 'microsoft_teams' | 'google_chat' | 'discord' | 'resend' | 'posthog' | 'datadog' | 'stitch' | 'github_issues' | 'github' | 'gitlab' | 'vercel' | 'trello' | 'clickup' | 'n8n';
 /**
  * `derived` = no link flow of its own: the credential is BORROWED live from a
  * connection the user already made elsewhere (see `derivedFrom`). The backend
@@ -380,7 +380,7 @@ type DerivedCredentialSource = 'github';
 /** Grouping used by category-driven surfaces (Start-from-Work-Item picker,
  *  catalog sections). A future tracker integration joins those features with
  *  ZERO feature code — they resolve sources from the registry by category. */
-type IntegrationCategory = 'version_control' | 'tracker' | 'design' | 'comms' | 'docs' | 'observability' | 'deployment';
+type IntegrationCategory = 'version_control' | 'tracker' | 'design' | 'comms' | 'docs' | 'observability' | 'deployment' | 'automation';
 /**
  * One user-entered field for an `api_key` integration (no browser OAuth — the
  * user pastes credentials directly, e.g. a PAT + an org URL). The mobile form
@@ -390,7 +390,7 @@ type IntegrationCategory = 'version_control' | 'tracker' | 'design' | 'comms' |
 interface IntegrationApiKeyField {
     /** Maps to a BrokeredIntegrationToken field (`accessToken`, `orgUrl`,
      *  `appKey`, `host`, …). */
-    key: 'accessToken' | 'orgUrl' | 'appKey' | 'host' | 'apiKey';
+    key: 'accessToken' | 'orgUrl' | 'appKey' | 'host' | 'apiKey' | 'instanceUrl';
     /** Form label. */
     label: string;
     /** Example / placeholder. */
@@ -513,6 +513,9 @@ interface BrokeredIntegrationToken {
      *  alongside the user token (`TRELLO_API_KEY` + `TRELLO_TOKEN`=`accessToken`).
      *  Absent for non-Trello integrations. */
     apiKey?: string;
+    /** n8n instance base URL (self-hosted or n8n.cloud) — the MCP server needs it
+     *  alongside the API key (N8N_API_URL + N8N_API_KEY). Absent for non-n8n. */
+    instanceUrl?: string;
 }
 
 /**
@@ -560,7 +563,7 @@ interface IntegrationBranding {
     logoSvg: string;
 }
 declare const INTEGRATION_BRANDING: Record<string, IntegrationBranding>;
-declare const UPCOMING_INTEGRATION_IDS: readonly ["gmail", "figma", "supabase", "asana", "postman", "n8n", "stripe", "mixpanel", "pendo", "pagerduty", "amplitude"];
+declare const UPCOMING_INTEGRATION_IDS: readonly ["gmail", "figma", "supabase", "asana", "postman", "stripe", "mixpanel", "pendo", "pagerduty", "amplitude"];
 declare function getIntegrationBranding(id: string): IntegrationBranding | null;
 
 /**

package/dist/index.js

@@ -1294,6 +1294,52 @@ var INTEGRATION_REGISTRY = {
         }
       }
     }
+  },
+  n8n: {
+    id: "n8n",
+    name: "n8n",
+    icon: "n8n",
+    category: "automation",
+    // LIVE — api_key rail (like Trello / Azure DevOps). n8n auth is an API key
+    // (Settings → n8n API) + the instance URL (n8n.cloud or self-hosted). The
+    // user pastes both; the backend validates against the n8n REST API + vaults
+    // them. No OAuth app, no GSM secrets, no config-gated 503.
+    // ⚠️ The instance MUST be PUBLICLY reachable (n8n.cloud or a public self-host)
+    // — a localhost/private n8n can't be reached from the deploy box.
+    enabled: true,
+    auth: {
+      kind: "api_key",
+      fields: [
+        {
+          key: "instanceUrl",
+          label: "Instance URL",
+          placeholder: "https://your-workspace.app.n8n.cloud",
+          secret: false,
+          help: "Your n8n base URL \u2014 n8n.cloud or your public self-hosted instance."
+        },
+        {
+          key: "accessToken",
+          label: "API Key",
+          placeholder: "n8n_api_\u2026",
+          secret: true,
+          help: "Create in n8n \u2192 Settings \u2192 n8n API \u2192 Create an API key."
+        }
+      ]
+    },
+    delivery: {
+      mcp: {
+        // n8n-mcp (Node): N8N_API_URL + N8N_API_KEY via env only, never argv.
+        // Version PINNED; bump only after re-verifying headless.
+        command: "npx",
+        args: ["-y", "n8n-mcp@2.66.2"],
+        envMapping: {
+          N8N_API_URL: "instanceUrl",
+          N8N_API_KEY: "accessToken"
+        },
+        // stdio transport (the CLI mcp-shim spawns it over stdio, not HTTP).
+        staticEnv: { MCP_MODE: "stdio" }
+      }
+    }
   }
 };
 function getEnabledIntegrations() {
@@ -1589,7 +1635,6 @@ var UPCOMING_INTEGRATION_IDS = [
   "supabase",
   "asana",
   "postman",
-  "n8n",
   "stripe",
   "mixpanel",
   "pendo",