@vellumai/assistant 0.11.10-staging.2 → 0.11.10-staging.4

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vellumai/assistant",
-  "version": "0.11.10-staging.2",
+  "version": "0.11.10-staging.4",
   "license": "MIT",
   "type": "module",
   "exports": {

package/src/config/feature-flag-registry.json

@@ -439,6 +439,14 @@
       "description": "Gates the seeded monday.com OAuth provider. When off, the provider is hidden from GET /v1/oauth/providers, its get-by-id route, and the connect/update routes, so it cannot be listed or connected from the CLI, gateway, or web integrations list. The row is still seeded into oauth_providers on startup; only its visibility changes.",
       "defaultEnabled": false
     },
+    {
+      "id": "figma-oauth",
+      "scope": "assistant",
+      "key": "figma-oauth",
+      "label": "Figma Integration",
+      "description": "Gates the seeded Figma OAuth provider. When off, the provider is hidden from GET /v1/oauth/providers, its get-by-id route, and the connect/update routes, so it cannot be listed or connected from the CLI, gateway, or web integrations list. The row is still seeded into oauth_providers on startup, and existing connections keep injecting credentials; only its visibility changes.",
+      "defaultEnabled": false
+    },
     {
       "id": "chatgpt-device-code-login",
       "scope": "client",

package/src/oauth/__tests__/seed-providers-managed.test.ts

@@ -112,6 +112,15 @@ describe("PROVIDER_SEED_DATA managed mode wiring", () => {
     expect(link.identityResponsePaths).toEqual(["email", "phone"]);
   });
 
+  test("figma ships behind the figma-oauth flag", () => {
+    // The provider is hidden from the providers list and the connect routes
+    // until the flag is enabled. Dropping featureFlag here would make Figma
+    // visible to every install with no other test noticing.
+    const figma = PROVIDER_SEED_DATA.figma;
+    expect(figma).toBeDefined();
+    expect(figma.featureFlag).toBe("figma-oauth");
+  });
+
   test("every managedServiceConfigKey resolves to a ServicesSchema key", () => {
     // Cross-repo invariant: a provider with managedServiceConfigKey but no
     // matching ServicesSchema entry silently falls back to BYO mode in

package/src/oauth/seed-providers.ts

@@ -1120,6 +1120,7 @@ export const PROVIDER_SEED_DATA: Record<
     // `id` is the stable account identifier; email is the friendlier label
     // with handle as the fallback.
     identityResponsePaths: ["email", "handle"],
+    featureFlag: "figma-oauth",
   },
 
   outlook: {