@codeam/shared 2.61.76 → 2.61.78

package/dist/index.mjs

@@ -1423,6 +1423,41 @@ var INTEGRATION_REGISTRY = {
       }
     }
   },
+  convex: {
+    id: "convex",
+    name: "Convex",
+    icon: "convex",
+    category: "database",
+    // LIVE — OAuth 2.0 (authorization code, Confidential). authorize
+    // dashboard.convex.dev/oauth/authorize/team (the scope is the URL PATH —
+    // `team` for team-wide access — NOT a query param); token
+    // api.convex.dev/oauth/token (form-urlencoded, client creds in the BODY).
+    // ⚠️ Convex issues NO refresh token and the team-scoped application token
+    // does not expire, so there is nothing to rotate (refresh() is a re-link
+    // surface). The OAuth app (Team Settings → OAuth Applications) is registered
+    // and CONVEX_OAUTH_CLIENT_ID/SECRET/REDIRECT_URI are in Secret Manager
+    // (prod+dev); the config-gated 503 keeps this safe mid-rollout.
+    enabled: true,
+    auth: {
+      kind: "oauth_redirect",
+      // ⚠️ Convex's scope is the authorize URL path (`/team`), NOT sent in the
+      // authorize URL as a query param — this list is informational.
+      scopes: []
+    },
+    delivery: {
+      mcp: {
+        // Convex's OFFICIAL MCP server ships inside the `convex` npm package
+        // (`convex mcp start`). The team-scoped OAuth application token doubles
+        // as the CLI/MCP deploy key → fed via CONVEX_DEPLOY_KEY (env only, never
+        // argv). Version PINNED; bump only after re-verifying headless.
+        command: "npx",
+        args: ["-y", "convex@1.42.3", "mcp", "start"],
+        envMapping: {
+          CONVEX_DEPLOY_KEY: "accessToken"
+        }
+      }
+    }
+  },
   confluence: {
     id: "confluence",
     name: "Confluence",
@@ -1760,6 +1795,14 @@ var INTEGRATION_BRANDING = {
     brandColor: "#3FCF8E",
     logoSvg: '<svg role="img" viewBox="0 0 24 24" xmlns="http://www.w3.org/2000/svg"><title>Supabase</title><path fill="#FFFFFF" d="M11.9 1.036c-.015-.986-1.26-1.41-1.874-.637L.764 12.05C-.33 13.427.65 15.455 2.409 15.455h9.579l.113 7.51c.014.985 1.259 1.408 1.873.636l9.262-11.653c1.093-1.375.113-3.403-1.645-3.403h-9.642z"/></svg>'
   },
+  convex: {
+    id: "convex",
+    name: "Convex",
+    vendor: "Convex",
+    tagline: "Reactive database & backend",
+    brandColor: "#EE342F",
+    logoSvg: '<svg role="img" viewBox="0 0 24 24" xmlns="http://www.w3.org/2000/svg"><title>Convex</title><path fill="#FFFFFF" d="M15.09 18.916c3.488-.387 6.776-2.246 8.586-5.348-.857 7.673-9.247 12.522-16.095 9.545a3.47 3.47 0 0 1-1.547-1.314c-1.539-2.417-2.044-5.492-1.318-8.282 2.077 3.584 6.3 5.78 10.374 5.399m-10.501-7.65c-1.414 3.266-1.475 7.092.258 10.24-6.1-4.59-6.033-14.41-.074-18.953a3.44 3.44 0 0 1 1.893-.707c2.825-.15 5.695.942 7.708 2.977-4.09.04-8.073 2.66-9.785 6.442m11.757-5.437C14.283 2.951 11.053.992 7.515.933c6.84-3.105 15.253 1.929 16.17 9.37a3.6 3.6 0 0 1-.334 2.02c-1.278 2.594-3.647 4.607-6.416 5.352 2.029-3.763 1.778-8.36-.589-11.847"/></svg>'
+  },
   cloudflare: {
     id: "cloudflare",
     name: "Cloudflare",
@@ -1853,6 +1896,145 @@ function getIntegrationBranding(id) {
   return INTEGRATION_BRANDING[id] ?? null;
 }
 
+// src/integrations/stack-detect.ts
+var DEP_TO_INTEGRATION = {
+  // errors / observability
+  "@sentry/node": "sentry",
+  "@sentry/react": "sentry",
+  "@sentry/nextjs": "sentry",
+  "@sentry/browser": "sentry",
+  "sentry-sdk": "sentry",
+  "dd-trace": "datadog",
+  "datadog-api-client": "datadog",
+  "datadog-metrics": "datadog",
+  // analytics
+  "posthog-js": "posthog",
+  "posthog-node": "posthog",
+  posthog: "posthog",
+  mixpanel: "mixpanel",
+  "mixpanel-browser": "mixpanel",
+  // database / backend platforms
+  convex: "convex",
+  "@supabase/supabase-js": "supabase",
+  "supabase": "supabase",
+  // infra / deploy
+  vercel: "vercel",
+  "@vercel/node": "vercel",
+  wrangler: "cloudflare",
+  // comms
+  "@slack/web-api": "slack",
+  "@slack/bolt": "slack",
+  "discord.js": "discord",
+  "discord-py": "discord",
+  "discord": "discord",
+  // trackers / docs / design
+  "@linear/sdk": "linear",
+  "@notionhq/client": "notion",
+  "jira.js": "jira",
+  jira: "jira",
+  newman: "postman",
+  "figma-api": "figma",
+  "figma-js": "figma",
+  // email / automation
+  resend: "resend",
+  n8n: "n8n"
+};
+var DEP_PREFIX_TO_INTEGRATION = [
+  ["@sentry/", "sentry"],
+  ["@vercel/", "vercel"],
+  ["@cloudflare/", "cloudflare"],
+  ["@supabase/", "supabase"],
+  ["@slack/", "slack"],
+  ["@datadog/", "datadog"],
+  ["@linear/", "linear"],
+  ["@notionhq/", "notion"]
+];
+var FRONTEND_MARKERS = [
+  "react",
+  "react-dom",
+  "next",
+  "vue",
+  "nuxt",
+  "@angular/core",
+  "svelte",
+  "@sveltejs/kit",
+  "solid-js",
+  "astro",
+  "gatsby",
+  "remix",
+  "@remix-run/react"
+];
+var MOBILE_MARKERS = ["react-native", "expo", "@react-native/core", "@ionic/core", "flutter"];
+var BACKEND_MARKERS = [
+  "express",
+  "fastify",
+  "@nestjs/core",
+  "koa",
+  "@hapi/hapi",
+  "django",
+  "flask",
+  "fastapi",
+  "rails",
+  "sinatra",
+  "gin-gonic",
+  "laravel/framework",
+  "actix-web",
+  "spring-boot"
+];
+function hasAny(deps, markers) {
+  for (const m of markers) if (deps.has(m)) return true;
+  return false;
+}
+function classifyStack(depNames) {
+  const deps = new Set(depNames);
+  const mobile = hasAny(deps, MOBILE_MARKERS);
+  if (mobile) return "mobile";
+  const frontend = hasAny(deps, FRONTEND_MARKERS);
+  const backend = hasAny(deps, BACKEND_MARKERS);
+  if (frontend && backend) return "fullstack";
+  if (frontend) return "frontend";
+  if (backend) return "backend";
+  return "unknown";
+}
+function detectedIntegrationsFromDeps(depNames) {
+  const out = [];
+  const seen = /* @__PURE__ */ new Set();
+  const push = (id) => {
+    if (!seen.has(id)) {
+      seen.add(id);
+      out.push(id);
+    }
+  };
+  for (const name of depNames) {
+    const exact = DEP_TO_INTEGRATION[name];
+    if (exact) {
+      push(exact);
+      continue;
+    }
+    for (const [prefix, id] of DEP_PREFIX_TO_INTEGRATION) {
+      if (name.startsWith(prefix)) {
+        push(id);
+        break;
+      }
+    }
+  }
+  return out;
+}
+var STACK_TO_RECOMMENDED = {
+  frontend: ["figma", "sentry", "posthog", "vercel"],
+  backend: ["sentry", "datadog", "supabase", "convex", "cloudflare"],
+  fullstack: ["sentry", "posthog", "vercel", "supabase", "convex"],
+  mobile: ["sentry", "posthog"],
+  unknown: []
+};
+function recommendForDeps(depNames) {
+  const stack = classifyStack(depNames);
+  const detected = detectedIntegrationsFromDeps(depNames);
+  const detectedSet = new Set(detected);
+  const recommended = STACK_TO_RECOMMENDED[stack].filter((id) => !detectedSet.has(id));
+  return { stack, detected, recommended, source: "scan" };
+}
+
 // src/skills/code-review.ts
 var CODE_REVIEW_BODY = `Use this skill when reviewing a pull request. It defines what a high-signal
 review looks like so your inline comments are worth the author's time.
@@ -2287,6 +2469,14 @@ var USER_EVENTS = {
   INTEGRATION_LINKED: "integration_linked",
   INTEGRATION_UNLINKED: "integration_unlinked",
   INTEGRATION_CREDENTIAL_INVALID: "integration_credential_invalid",
+  // Session Tools — add/remove Agent Toolkit integrations on an ALREADY-ACTIVE
+  // session. The backend publishes SESSION_INTEGRATIONS_CHANGED after it persists
+  // the new attached set + relays `integrations_sync` to the box (the CLI rewrites
+  // the manifest + reprovisions the live agent, answered synchronously via the
+  // command result). Drives live UI on the sending device AND any other paired
+  // device on the same session. Mirrored in repo A. (`integrations_detect` is a
+  // pure request/response over the relay — no event.)
+  SESSION_INTEGRATIONS_CHANGED: "session_integrations_changed",
   // CodeRabbit reviewer — the CLI posts these to /api/coderabbit/events; the
   // backend re-publishes them on the per-user SSE bus (mirrored in repo A).
   CODERABBIT_PROGRESS: "coderabbit_progress",
@@ -2352,6 +2542,7 @@ OUTPUT JSON ONLY. NO MARKDOWN. NO COMMENTARY.
 export {
   AGENT_REGISTRY,
   DEFAULT_API_BASE_URL,
+  DEP_TO_INTEGRATION,
   DEV_API_BASE_URL,
   HEADROOM_BACKEND_ENV,
   HEADROOM_EXTRAS_BY_SURFACE,
@@ -2376,10 +2567,13 @@ export {
   PUBLIC_TO_INTERNAL,
   SKILL_REGISTRY,
   SSE_SOCKET_TIMEOUT_MS,
+  STACK_TO_RECOMMENDED,
   TERMINAL_AGENT_PREFIX,
   UNKNOWN_MODEL_PRICING,
   UPCOMING_INTEGRATION_IDS,
   USER_EVENTS,
+  classifyStack,
+  detectedIntegrationsFromDeps,
   getAgent,
   getContextWindow,
   getEnabledAgents,
@@ -2402,6 +2596,7 @@ export {
   isSkillId,
   normalizeAgentId,
   publicToInternal,
+  recommendForDeps,
   renderToLines,
   resolveApiBaseUrl,
   skillHasRail,