@codeam/shared 2.61.77 → 2.61.79

package/dist/index.mjs

@@ -1428,28 +1428,34 @@ var INTEGRATION_REGISTRY = {
     name: "Convex",
     icon: "convex",
     category: "database",
-    // LIVE — OAuth 2.0 (authorization code, Confidential). authorize
-    // dashboard.convex.dev/oauth/authorize/team (the scope is the URL PATH —
-    // `team` for team-wide access — NOT a query param); token
-    // api.convex.dev/oauth/token (form-urlencoded, client creds in the BODY).
-    // ⚠️ Convex issues NO refresh token and the team-scoped application token
-    // does not expire, so there is nothing to rotate (refresh() is a re-link
-    // surface). The OAuth app (Team Settings → OAuth Applications) is registered
-    // and CONVEX_OAUTH_CLIENT_ID/SECRET/REDIRECT_URI are in Secret Manager
-    // (prod+dev); the config-gated 503 keeps this safe mid-rollout.
+    // LIVE — api_key rail (the user pastes a Convex DEPLOY KEY).
+    // ⚠️ Convex's OAuth application token was tried first and DOES NOT WORK with
+    // the MCP: it's a narrow Management-API credential — verified live it fails
+    // `convex mcp start` as BOTH CONVEX_DEPLOY_KEY and CONVEX_OVERRIDE_ACCESS_TOKEN,
+    // and can't even enumerate the team's deployments ("requires a Personal
+    // Access Token"). The Convex MCP's DOCUMENTED headless credential is a
+    // DEPLOY KEY (CONVEX_DEPLOY_KEY=dev:…|… / prod:… / project:…), so the user
+    // pastes one (Convex Dashboard → Project Settings → Deploy Keys), exactly
+    // like Azure DevOps / Datadog / Trello. No OAuth app, no GSM secret.
     enabled: true,
     auth: {
-      kind: "oauth_redirect",
-      // ⚠️ Convex's scope is the authorize URL path (`/team`), NOT sent in the
-      // authorize URL as a query param — this list is informational.
-      scopes: []
+      kind: "api_key",
+      fields: [
+        {
+          key: "accessToken",
+          label: "Convex deploy key",
+          placeholder: "prod:happy-animal-123|eyJ2\u2026",
+          secret: true,
+          help: "Convex Dashboard \u2192 Project Settings \u2192 Deploy Keys \u2192 Generate a deploy key."
+        }
+      ]
     },
     delivery: {
       mcp: {
         // Convex's OFFICIAL MCP server ships inside the `convex` npm package
-        // (`convex mcp start`). The team-scoped OAuth application token doubles
-        // as the CLI/MCP deploy key → fed via CONVEX_DEPLOY_KEY (env only, never
-        // argv). Version PINNED; bump only after re-verifying headless.
+        // (`convex mcp start`). The pasted deploy key is fed via CONVEX_DEPLOY_KEY
+        // (env only, never argv) — its documented non-interactive credential.
+        // Version PINNED; bump only after re-verifying headless.
         command: "npx",
         args: ["-y", "convex@1.42.3", "mcp", "start"],
         envMapping: {
@@ -1896,6 +1902,145 @@ function getIntegrationBranding(id) {
   return INTEGRATION_BRANDING[id] ?? null;
 }
 
+// src/integrations/stack-detect.ts
+var DEP_TO_INTEGRATION = {
+  // errors / observability
+  "@sentry/node": "sentry",
+  "@sentry/react": "sentry",
+  "@sentry/nextjs": "sentry",
+  "@sentry/browser": "sentry",
+  "sentry-sdk": "sentry",
+  "dd-trace": "datadog",
+  "datadog-api-client": "datadog",
+  "datadog-metrics": "datadog",
+  // analytics
+  "posthog-js": "posthog",
+  "posthog-node": "posthog",
+  posthog: "posthog",
+  mixpanel: "mixpanel",
+  "mixpanel-browser": "mixpanel",
+  // database / backend platforms
+  convex: "convex",
+  "@supabase/supabase-js": "supabase",
+  "supabase": "supabase",
+  // infra / deploy
+  vercel: "vercel",
+  "@vercel/node": "vercel",
+  wrangler: "cloudflare",
+  // comms
+  "@slack/web-api": "slack",
+  "@slack/bolt": "slack",
+  "discord.js": "discord",
+  "discord-py": "discord",
+  "discord": "discord",
+  // trackers / docs / design
+  "@linear/sdk": "linear",
+  "@notionhq/client": "notion",
+  "jira.js": "jira",
+  jira: "jira",
+  newman: "postman",
+  "figma-api": "figma",
+  "figma-js": "figma",
+  // email / automation
+  resend: "resend",
+  n8n: "n8n"
+};
+var DEP_PREFIX_TO_INTEGRATION = [
+  ["@sentry/", "sentry"],
+  ["@vercel/", "vercel"],
+  ["@cloudflare/", "cloudflare"],
+  ["@supabase/", "supabase"],
+  ["@slack/", "slack"],
+  ["@datadog/", "datadog"],
+  ["@linear/", "linear"],
+  ["@notionhq/", "notion"]
+];
+var FRONTEND_MARKERS = [
+  "react",
+  "react-dom",
+  "next",
+  "vue",
+  "nuxt",
+  "@angular/core",
+  "svelte",
+  "@sveltejs/kit",
+  "solid-js",
+  "astro",
+  "gatsby",
+  "remix",
+  "@remix-run/react"
+];
+var MOBILE_MARKERS = ["react-native", "expo", "@react-native/core", "@ionic/core", "flutter"];
+var BACKEND_MARKERS = [
+  "express",
+  "fastify",
+  "@nestjs/core",
+  "koa",
+  "@hapi/hapi",
+  "django",
+  "flask",
+  "fastapi",
+  "rails",
+  "sinatra",
+  "gin-gonic",
+  "laravel/framework",
+  "actix-web",
+  "spring-boot"
+];
+function hasAny(deps, markers) {
+  for (const m of markers) if (deps.has(m)) return true;
+  return false;
+}
+function classifyStack(depNames) {
+  const deps = new Set(depNames);
+  const mobile = hasAny(deps, MOBILE_MARKERS);
+  if (mobile) return "mobile";
+  const frontend = hasAny(deps, FRONTEND_MARKERS);
+  const backend = hasAny(deps, BACKEND_MARKERS);
+  if (frontend && backend) return "fullstack";
+  if (frontend) return "frontend";
+  if (backend) return "backend";
+  return "unknown";
+}
+function detectedIntegrationsFromDeps(depNames) {
+  const out = [];
+  const seen = /* @__PURE__ */ new Set();
+  const push = (id) => {
+    if (!seen.has(id)) {
+      seen.add(id);
+      out.push(id);
+    }
+  };
+  for (const name of depNames) {
+    const exact = DEP_TO_INTEGRATION[name];
+    if (exact) {
+      push(exact);
+      continue;
+    }
+    for (const [prefix, id] of DEP_PREFIX_TO_INTEGRATION) {
+      if (name.startsWith(prefix)) {
+        push(id);
+        break;
+      }
+    }
+  }
+  return out;
+}
+var STACK_TO_RECOMMENDED = {
+  frontend: ["figma", "sentry", "posthog", "vercel"],
+  backend: ["sentry", "datadog", "supabase", "convex", "cloudflare"],
+  fullstack: ["sentry", "posthog", "vercel", "supabase", "convex"],
+  mobile: ["sentry", "posthog"],
+  unknown: []
+};
+function recommendForDeps(depNames) {
+  const stack = classifyStack(depNames);
+  const detected = detectedIntegrationsFromDeps(depNames);
+  const detectedSet = new Set(detected);
+  const recommended = STACK_TO_RECOMMENDED[stack].filter((id) => !detectedSet.has(id));
+  return { stack, detected, recommended, source: "scan" };
+}
+
 // src/skills/code-review.ts
 var CODE_REVIEW_BODY = `Use this skill when reviewing a pull request. It defines what a high-signal
 review looks like so your inline comments are worth the author's time.
@@ -2330,6 +2475,14 @@ var USER_EVENTS = {
   INTEGRATION_LINKED: "integration_linked",
   INTEGRATION_UNLINKED: "integration_unlinked",
   INTEGRATION_CREDENTIAL_INVALID: "integration_credential_invalid",
+  // Session Tools — add/remove Agent Toolkit integrations on an ALREADY-ACTIVE
+  // session. The backend publishes SESSION_INTEGRATIONS_CHANGED after it persists
+  // the new attached set + relays `integrations_sync` to the box (the CLI rewrites
+  // the manifest + reprovisions the live agent, answered synchronously via the
+  // command result). Drives live UI on the sending device AND any other paired
+  // device on the same session. Mirrored in repo A. (`integrations_detect` is a
+  // pure request/response over the relay — no event.)
+  SESSION_INTEGRATIONS_CHANGED: "session_integrations_changed",
   // CodeRabbit reviewer — the CLI posts these to /api/coderabbit/events; the
   // backend re-publishes them on the per-user SSE bus (mirrored in repo A).
   CODERABBIT_PROGRESS: "coderabbit_progress",
@@ -2395,6 +2548,7 @@ OUTPUT JSON ONLY. NO MARKDOWN. NO COMMENTARY.
 export {
   AGENT_REGISTRY,
   DEFAULT_API_BASE_URL,
+  DEP_TO_INTEGRATION,
   DEV_API_BASE_URL,
   HEADROOM_BACKEND_ENV,
   HEADROOM_EXTRAS_BY_SURFACE,
@@ -2419,10 +2573,13 @@ export {
   PUBLIC_TO_INTERNAL,
   SKILL_REGISTRY,
   SSE_SOCKET_TIMEOUT_MS,
+  STACK_TO_RECOMMENDED,
   TERMINAL_AGENT_PREFIX,
   UNKNOWN_MODEL_PRICING,
   UPCOMING_INTEGRATION_IDS,
   USER_EVENTS,
+  classifyStack,
+  detectedIntegrationsFromDeps,
   getAgent,
   getContextWindow,
   getEnabledAgents,
@@ -2445,6 +2602,7 @@ export {
   isSkillId,
   normalizeAgentId,
   publicToInternal,
+  recommendForDeps,
   renderToLines,
   resolveApiBaseUrl,
   skillHasRail,