codeam-cli 2.61.43 → 2.61.45

package/CHANGELOG.md

@@ -4,6 +4,18 @@ All notable changes to `codeam-cli` are documented here.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [2.61.44] — 2026-07-25
+
+### Added
+
+- **shared:** Resend integration — api_key (send-only comms), excluded from From-Conversation
+
+## [2.61.43] — 2026-07-25
+
+### Added
+
+- **shared:** Discord comms integration — OAuth bot-invite, guildId discriminator
+
 ## [2.61.42] — 2026-07-25
 
 ### Added

package/dist/index.js

@@ -6,6 +6,9 @@ var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
 var __getOwnPropNames = Object.getOwnPropertyNames;
 var __getProtoOf = Object.getPrototypeOf;
 var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __esm = (fn, res) => function __init() {
+  return fn && (res = (0, fn[__getOwnPropNames(fn)[0]])(fn = 0)), res;
+};
 var __commonJS = (cb, mod) => function __require() {
   return mod || (0, cb[__getOwnPropNames(cb)[0]])((mod = { exports: {} }).exports, mod), mod.exports;
 };
@@ -86,6 +89,67 @@ var require_src = __commonJS({
   }
 });
 
+// src/integrations/http-relay.ts
+var http_relay_exports = {};
+__export(http_relay_exports, {
+  buildHttpHeaders: () => buildHttpHeaders,
+  runHttpRelay: () => runHttpRelay
+});
+function buildHttpHeaders(httpHeaders, token) {
+  const headers = {};
+  for (const [name, template] of Object.entries(httpHeaders ?? {})) {
+    headers[name] = template.replace(/\{(\w+)\}/g, (_m, field) => {
+      const v = token[field];
+      return typeof v === "string" ? v : "";
+    });
+  }
+  return headers;
+}
+async function runHttpRelay(delivery, client3, id) {
+  if (!delivery.httpUrl) throw new Error("runHttpRelay called without delivery.httpUrl");
+  const { StdioServerTransport } = await import("@modelcontextprotocol/sdk/server/stdio.js");
+  const { StreamableHTTPClientTransport } = await import("@modelcontextprotocol/sdk/client/streamableHttp.js");
+  const token = await client3.getToken(id);
+  const httpTransport = new StreamableHTTPClientTransport(new URL(delivery.httpUrl), {
+    requestInit: { headers: buildHttpHeaders(delivery.httpHeaders, token) }
+  });
+  const stdioTransport = new StdioServerTransport();
+  await new Promise((resolve8, reject) => {
+    let done = false;
+    const finish = (err) => {
+      if (done) return;
+      done = true;
+      void httpTransport.close().catch(() => void 0);
+      void stdioTransport.close().catch(() => void 0);
+      if (err) reject(err);
+      else resolve8();
+    };
+    stdioTransport.onmessage = (msg) => {
+      void httpTransport.send(msg).catch((e) => {
+        process.stderr.write(`[mcp-run http] send\u2192remote failed: ${String(e)}
+`);
+      });
+    };
+    httpTransport.onmessage = (msg) => {
+      void stdioTransport.send(msg).catch(() => void 0);
+    };
+    stdioTransport.onclose = () => finish();
+    httpTransport.onclose = () => finish();
+    stdioTransport.onerror = (e) => process.stderr.write(`[mcp-run http] stdio: ${String(e)}
+`);
+    httpTransport.onerror = (e) => process.stderr.write(`[mcp-run http] http: ${String(e)}
+`);
+    Promise.all([httpTransport.start(), stdioTransport.start()]).catch(
+      (e) => finish(e instanceof Error ? e : new Error(String(e)))
+    );
+  });
+}
+var init_http_relay = __esm({
+  "src/integrations/http-relay.ts"() {
+    "use strict";
+  }
+});
+
 // src/commands/start.ts
 var import_picocolors4 = __toESM(require("picocolors"));
 
@@ -815,6 +879,83 @@ var INTEGRATION_REGISTRY = {
       }
     }
   },
+  resend: {
+    id: "resend",
+    name: "Resend",
+    icon: "resend",
+    category: "comms",
+    // LIVE — api_key (like Azure DevOps): the user pastes a Resend API key
+    // (`re_…`); Resend has NO OAuth, so there's no OAuth app / GSM secret /
+    // config-gated 503 — a backend VALIDATOR proves the key against the Resend
+    // API and vaults it. ⚠️ SEND-ONLY email → `sendOnly: true` keeps it OUT of
+    // From-Conversation (comms conversation sources need readable threads; Resend
+    // has none) while still being a linkable comms tool the agent uses via MCP.
+    enabled: true,
+    sendOnly: true,
+    auth: {
+      kind: "api_key",
+      fields: [
+        {
+          key: "accessToken",
+          label: "API Key",
+          placeholder: "re_xxxxxxxxxxxxxxxx",
+          secret: true,
+          help: 'Create in Resend \u2192 API Keys (https://resend.com/api-keys). "Sending access" is enough.'
+        }
+      ]
+    },
+    delivery: {
+      mcp: {
+        // The OFFICIAL resend-mcp (Node) in BYO-token mode: the API key is fed
+        // via RESEND_API_KEY (env only, never argv). Version PINNED; bump only
+        // after re-verifying headless. Tools: send email + contacts/broadcasts/
+        // domains.
+        command: "npx",
+        args: ["-y", "resend-mcp@2.6.1"],
+        envMapping: {
+          RESEND_API_KEY: "accessToken"
+        }
+      }
+    }
+  },
+  posthog: {
+    id: "posthog",
+    name: "PostHog",
+    icon: "posthog",
+    category: "observability",
+    // LIVE — api_key: the user pastes a PostHog Personal API Key (phx_…, created
+    // with the "MCP Server" preset). PostHog's MCP is HOSTED-ONLY
+    // (mcp.posthog.com) over HTTP, and its stdio bridge (mcp-remote) forces its
+    // own browser OAuth — incompatible with our headless broker. So delivery
+    // uses the shim's HTTP transport: it relays to the hosted MCP with the key
+    // as a Bearer header (exactly Cursor's {url, headers} config). No OAuth, no
+    // GSM secret; a backend VALIDATOR proves the key + vaults it.
+    enabled: true,
+    auth: {
+      kind: "api_key",
+      fields: [
+        {
+          key: "accessToken",
+          label: "Personal API Key",
+          placeholder: "phx_xxxxxxxxxxxxxxxx",
+          secret: true,
+          help: 'PostHog \u2192 Settings \u2192 Personal API keys \u2192 create with the "MCP Server" preset (scopes it to a project).'
+        }
+      ]
+    },
+    delivery: {
+      mcp: {
+        // HTTP transport (not a spawned stdio server) — the shim relays to
+        // PostHog's hosted MCP with the key as a Bearer header. The key stays
+        // server-side of the shim, never on argv.
+        command: "",
+        args: [],
+        envMapping: {},
+        httpUrl: "https://mcp.posthog.com/mcp",
+        httpHeaders: { Authorization: "Bearer {accessToken}" }
+      }
+    }
+  },
   notion: {
     id: "notion",
     name: "Notion",
@@ -6383,7 +6524,7 @@ function readAnonId() {
 }
 function superProperties() {
   return {
-    cliVersion: true ? "2.61.43" : "0.0.0-dev",
+    cliVersion: true ? "2.61.45" : "0.0.0-dev",
     nodeVersion: process.version,
     platform: process.platform,
     arch: process.arch,
@@ -6564,7 +6705,7 @@ var os4 = __toESM(require("os"));
 // package.json
 var package_default = {
   name: "codeam-cli",
-  version: "2.61.43",
+  version: "2.61.45",
   description: "Workflow-continuity bridge for AI coding agents. Wrap Claude Code or Codex in a PTY and supervise, approve, and redirect the session from any device \u2014 async. The terminal companion for CodeAgent Mobile.",
   type: "commonjs",
   main: "dist/index.js",
@@ -6640,6 +6781,7 @@ var package_default = {
     "@agentclientprotocol/codex-acp": "1.1.4",
     "@agentclientprotocol/sdk": "1.2.1",
     "@clack/prompts": "^1.2.0",
+    "@modelcontextprotocol/sdk": "1.29.0",
     chokidar: "^3.6.0",
     ignore: "^7.0.6",
     picocolors: "^1.1.0",
@@ -7735,7 +7877,7 @@ var CommandRelayService = class _CommandRelayService {
       // fresh + clear the "CLI update available" banner after a self-update
       // (a codespace that reinstalls @latest reconnects via heartbeat, not
       // pair/reconnect). Older backends ignore the extra field.
-      ..."2.61.43" ? { ideVersion: "2.61.43" } : {}
+      ..."2.61.45" ? { ideVersion: "2.61.45" } : {}
     }).then(() => log.trace("relay", `heartbeat ok online=${online}`)).catch((err) => log.trace("relay", `heartbeat failed online=${online}`, err));
   }
   /**
@@ -18720,7 +18862,7 @@ async function autoUpgradeBeforeCriticalCommand() {
   if (process.env.NODE_ENV === "test") return;
   if (process.env.CODEAM_DISABLE_UPDATE_CHECK === "1") return;
   if (process.env.CI) return;
-  const current = true ? "2.61.43" : null;
+  const current = true ? "2.61.45" : null;
   if (!current) return;
   const cache = readCache();
   const fresh = cache && Date.now() - cache.fetchedAt < TTL_MS;
@@ -18737,7 +18879,7 @@ function checkForUpdates() {
   if (process.env.CODEAM_DISABLE_UPDATE_CHECK === "1") return;
   if (process.env.CI) return;
   if (!process.stdout.isTTY) return;
-  const current = true ? "2.61.43" : null;
+  const current = true ? "2.61.45" : null;
   if (!current) return;
   const cache = readCache();
   const fresh = cache && Date.now() - cache.fetchedAt < TTL_MS;
@@ -18757,7 +18899,7 @@ var SELF_UPDATE_INTERVAL_MS = 60 * 60 * 1e3;
 var SELF_UPDATE_VIEW_TIMEOUT_MS = 3e4;
 var SELF_UPDATE_INSTALL_TIMEOUT_MS = 18e4;
 function currentCliVersion() {
-  return true ? "2.61.43" : null;
+  return true ? "2.61.45" : null;
 }
 function runCmd(cmd, args2, timeoutMs) {
   return new Promise((resolve8) => {
@@ -38883,7 +39025,7 @@ function checkChokidar() {
 }
 async function doctor(args2 = []) {
   const json = args2.includes("--json");
-  const cliVersion = true ? "2.61.43" : "0.0.0-dev";
+  const cliVersion = true ? "2.61.45" : "0.0.0-dev";
   const apiBase2 = resolveApiBaseUrl();
   const diagnosticId = (0, import_node_crypto13.randomUUID)();
   log.info("doctor", `run id=${diagnosticId} cli=${cliVersion}`);
@@ -39367,6 +39509,17 @@ async function mcpRun(args2) {
 `);
     process.exit(1);
   }
+  if (delivery.httpUrl) {
+    const httpClient = new IntegrationTokenClient({
+      sessionId,
+      pluginId,
+      pluginAuthToken,
+      pollSecret: process.env.CODEAM_MCP_POLL_SECRET
+    });
+    const { runHttpRelay: runHttpRelay2 } = await Promise.resolve().then(() => (init_http_relay(), http_relay_exports));
+    await runHttpRelay2(delivery, httpClient, id);
+    return;
+  }
   ensureCommand(delivery.command);
   const launcher = resolveLauncherPath(delivery.command);
   const client3 = new IntegrationTokenClient({
@@ -39394,7 +39547,7 @@ async function mcpRun(args2) {
 // src/commands/version.ts
 var import_picocolors15 = __toESM(require("picocolors"));
 function version2() {
-  const v = true ? "2.61.43" : "unknown";
+  const v = true ? "2.61.45" : "unknown";
   console.log(`${import_picocolors15.default.bold("codeam-cli")} ${import_picocolors15.default.cyan(v)}`);
 }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "codeam-cli",
-  "version": "2.61.43",
+  "version": "2.61.45",
   "description": "Workflow-continuity bridge for AI coding agents. Wrap Claude Code or Codex in a PTY and supervise, approve, and redirect the session from any device — async. The terminal companion for CodeAgent Mobile.",
   "type": "commonjs",
   "main": "dist/index.js",
@@ -76,6 +76,7 @@
     "@agentclientprotocol/codex-acp": "1.1.4",
     "@agentclientprotocol/sdk": "1.2.1",
     "@clack/prompts": "^1.2.0",
+    "@modelcontextprotocol/sdk": "1.29.0",
     "chokidar": "^3.6.0",
     "ignore": "^7.0.6",
     "picocolors": "^1.1.0",