codeam-cli 2.61.44 → 2.61.46

package/CHANGELOG.md

@@ -4,6 +4,18 @@ All notable changes to `codeam-cli` are documented here.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [2.61.45] — 2026-07-26
+
+### Added
+
+- **shared,cli:** PostHog integration + mcp-shim HTTP transport
+
+## [2.61.44] — 2026-07-25
+
+### Added
+
+- **shared:** Resend integration — api_key (send-only comms), excluded from From-Conversation
+
 ## [2.61.43] — 2026-07-25
 
 ### Added

package/dist/index.js

@@ -6,6 +6,9 @@ var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
 var __getOwnPropNames = Object.getOwnPropertyNames;
 var __getProtoOf = Object.getPrototypeOf;
 var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __esm = (fn, res) => function __init() {
+  return fn && (res = (0, fn[__getOwnPropNames(fn)[0]])(fn = 0)), res;
+};
 var __commonJS = (cb, mod) => function __require() {
   return mod || (0, cb[__getOwnPropNames(cb)[0]])((mod = { exports: {} }).exports, mod), mod.exports;
 };
@@ -86,6 +89,72 @@ var require_src = __commonJS({
   }
 });
 
+// src/integrations/http-relay.ts
+var http_relay_exports = {};
+__export(http_relay_exports, {
+  buildHttpHeaders: () => buildHttpHeaders,
+  fillTemplate: () => fillTemplate,
+  runHttpRelay: () => runHttpRelay
+});
+function fillTemplate(template, token) {
+  return template.replace(/\{(\w+)\}/g, (_m, field) => {
+    const v = token[field];
+    return typeof v === "string" ? v : "";
+  });
+}
+function buildHttpHeaders(httpHeaders, token) {
+  const headers = {};
+  for (const [name, template] of Object.entries(httpHeaders ?? {})) {
+    headers[name] = fillTemplate(template, token);
+  }
+  return headers;
+}
+async function runHttpRelay(delivery, client3, id) {
+  if (!delivery.httpUrl) throw new Error("runHttpRelay called without delivery.httpUrl");
+  const { StdioServerTransport } = await import("@modelcontextprotocol/sdk/server/stdio.js");
+  const { StreamableHTTPClientTransport } = await import("@modelcontextprotocol/sdk/client/streamableHttp.js");
+  const token = await client3.getToken(id);
+  const url2 = new URL(fillTemplate(delivery.httpUrl, token));
+  const httpTransport = new StreamableHTTPClientTransport(url2, {
+    requestInit: { headers: buildHttpHeaders(delivery.httpHeaders, token) }
+  });
+  const stdioTransport = new StdioServerTransport();
+  await new Promise((resolve8, reject) => {
+    let done = false;
+    const finish = (err) => {
+      if (done) return;
+      done = true;
+      void httpTransport.close().catch(() => void 0);
+      void stdioTransport.close().catch(() => void 0);
+      if (err) reject(err);
+      else resolve8();
+    };
+    stdioTransport.onmessage = (msg) => {
+      void httpTransport.send(msg).catch((e) => {
+        process.stderr.write(`[mcp-run http] send\u2192remote failed: ${String(e)}
+`);
+      });
+    };
+    httpTransport.onmessage = (msg) => {
+      void stdioTransport.send(msg).catch(() => void 0);
+    };
+    stdioTransport.onclose = () => finish();
+    httpTransport.onclose = () => finish();
+    stdioTransport.onerror = (e) => process.stderr.write(`[mcp-run http] stdio: ${String(e)}
+`);
+    httpTransport.onerror = (e) => process.stderr.write(`[mcp-run http] http: ${String(e)}
+`);
+    Promise.all([httpTransport.start(), stdioTransport.start()]).catch(
+      (e) => finish(e instanceof Error ? e : new Error(String(e)))
+    );
+  });
+}
+var init_http_relay = __esm({
+  "src/integrations/http-relay.ts"() {
+    "use strict";
+  }
+});
+
 // src/commands/start.ts
 var import_picocolors4 = __toESM(require("picocolors"));
 
@@ -854,6 +923,98 @@ var INTEGRATION_REGISTRY = {
       }
     }
   },
+  posthog: {
+    id: "posthog",
+    name: "PostHog",
+    icon: "posthog",
+    category: "observability",
+    // LIVE — api_key: the user pastes a PostHog Personal API Key (phx_…, created
+    // with the "MCP Server" preset). PostHog's MCP is HOSTED-ONLY
+    // (mcp.posthog.com) over HTTP, and its stdio bridge (mcp-remote) forces its
+    // own browser OAuth — incompatible with our headless broker. So delivery
+    // uses the shim's HTTP transport: it relays to the hosted MCP with the key
+    // as a Bearer header (exactly Cursor's {url, headers} config). No OAuth, no
+    // GSM secret; a backend VALIDATOR proves the key + vaults it.
+    enabled: true,
+    auth: {
+      kind: "api_key",
+      fields: [
+        {
+          key: "accessToken",
+          label: "Personal API Key",
+          placeholder: "phx_xxxxxxxxxxxxxxxx",
+          secret: true,
+          help: 'PostHog \u2192 Settings \u2192 Personal API keys \u2192 create with the "MCP Server" preset (scopes it to a project).'
+        }
+      ]
+    },
+    delivery: {
+      mcp: {
+        // HTTP transport (not a spawned stdio server) — the shim relays to
+        // PostHog's hosted MCP with the key as a Bearer header. The key stays
+        // server-side of the shim, never on argv.
+        command: "",
+        args: [],
+        envMapping: {},
+        httpUrl: "https://mcp.posthog.com/mcp",
+        httpHeaders: { Authorization: "Bearer {accessToken}" }
+      }
+    }
+  },
+  datadog: {
+    id: "datadog",
+    name: "Datadog",
+    icon: "datadog",
+    category: "observability",
+    // LIVE — api_key: the user pastes a Datadog API key (org-scoped) + an
+    // Application key (user-scoped, grants the read scopes) + their regional
+    // site. Datadog's OFFICIAL hosted MCP (mcp.<site>) accepts these as headers
+    // headless (verified) — no OAuth, no GSM secret. Delivery uses the shim's
+    // HTTP transport with the site templated into the URL and both keys sent as
+    // DD-API-KEY / DD-APPLICATION-KEY headers.
+    enabled: true,
+    auth: {
+      kind: "api_key",
+      fields: [
+        {
+          key: "accessToken",
+          label: "API Key",
+          placeholder: "Datadog API key",
+          secret: true,
+          help: "Organization API key \u2014 Datadog \u2192 Organization Settings \u2192 API Keys."
+        },
+        {
+          key: "appKey",
+          label: "Application Key",
+          placeholder: "Datadog application key",
+          secret: true,
+          help: "User Application key (grants the read scopes) \u2014 Datadog \u2192 Organization Settings \u2192 Application Keys."
+        },
+        {
+          key: "host",
+          label: "Site",
+          placeholder: "datadoghq.com",
+          secret: false,
+          help: "Your Datadog site \u2014 US1: datadoghq.com \xB7 EU: datadoghq.eu \xB7 US3: us3.datadoghq.com \xB7 US5: us5.datadoghq.com \xB7 AP1: ap1.datadoghq.com."
+        }
+      ]
+    },
+    delivery: {
+      mcp: {
+        // HTTP transport — the shim relays to Datadog's hosted MCP for the
+        // user's site, with both keys as headers. Keys stay server-side of the
+        // shim, never on argv.
+        command: "",
+        args: [],
+        envMapping: {},
+        httpUrl: "https://mcp.{host}/api/unstable/mcp-server/mcp",
+        httpHeaders: {
+          "DD-API-KEY": "{accessToken}",
+          "DD-APPLICATION-KEY": "{appKey}"
+        }
+      }
+    }
+  },
   notion: {
     id: "notion",
     name: "Notion",
@@ -6422,7 +6583,7 @@ function readAnonId() {
 }
 function superProperties() {
   return {
-    cliVersion: true ? "2.61.44" : "0.0.0-dev",
+    cliVersion: true ? "2.61.46" : "0.0.0-dev",
     nodeVersion: process.version,
     platform: process.platform,
     arch: process.arch,
@@ -6603,7 +6764,7 @@ var os4 = __toESM(require("os"));
 // package.json
 var package_default = {
   name: "codeam-cli",
-  version: "2.61.44",
+  version: "2.61.46",
   description: "Workflow-continuity bridge for AI coding agents. Wrap Claude Code or Codex in a PTY and supervise, approve, and redirect the session from any device \u2014 async. The terminal companion for CodeAgent Mobile.",
   type: "commonjs",
   main: "dist/index.js",
@@ -6679,6 +6840,7 @@ var package_default = {
     "@agentclientprotocol/codex-acp": "1.1.4",
     "@agentclientprotocol/sdk": "1.2.1",
     "@clack/prompts": "^1.2.0",
+    "@modelcontextprotocol/sdk": "1.29.0",
     chokidar: "^3.6.0",
     ignore: "^7.0.6",
     picocolors: "^1.1.0",
@@ -7774,7 +7936,7 @@ var CommandRelayService = class _CommandRelayService {
       // fresh + clear the "CLI update available" banner after a self-update
       // (a codespace that reinstalls @latest reconnects via heartbeat, not
       // pair/reconnect). Older backends ignore the extra field.
-      ..."2.61.44" ? { ideVersion: "2.61.44" } : {}
+      ..."2.61.46" ? { ideVersion: "2.61.46" } : {}
     }).then(() => log.trace("relay", `heartbeat ok online=${online}`)).catch((err) => log.trace("relay", `heartbeat failed online=${online}`, err));
   }
   /**
@@ -18759,7 +18921,7 @@ async function autoUpgradeBeforeCriticalCommand() {
   if (process.env.NODE_ENV === "test") return;
   if (process.env.CODEAM_DISABLE_UPDATE_CHECK === "1") return;
   if (process.env.CI) return;
-  const current = true ? "2.61.44" : null;
+  const current = true ? "2.61.46" : null;
   if (!current) return;
   const cache = readCache();
   const fresh = cache && Date.now() - cache.fetchedAt < TTL_MS;
@@ -18776,7 +18938,7 @@ function checkForUpdates() {
   if (process.env.CODEAM_DISABLE_UPDATE_CHECK === "1") return;
   if (process.env.CI) return;
   if (!process.stdout.isTTY) return;
-  const current = true ? "2.61.44" : null;
+  const current = true ? "2.61.46" : null;
   if (!current) return;
   const cache = readCache();
   const fresh = cache && Date.now() - cache.fetchedAt < TTL_MS;
@@ -18796,7 +18958,7 @@ var SELF_UPDATE_INTERVAL_MS = 60 * 60 * 1e3;
 var SELF_UPDATE_VIEW_TIMEOUT_MS = 3e4;
 var SELF_UPDATE_INSTALL_TIMEOUT_MS = 18e4;
 function currentCliVersion() {
-  return true ? "2.61.44" : null;
+  return true ? "2.61.46" : null;
 }
 function runCmd(cmd, args2, timeoutMs) {
   return new Promise((resolve8) => {
@@ -38922,7 +39084,7 @@ function checkChokidar() {
 }
 async function doctor(args2 = []) {
   const json = args2.includes("--json");
-  const cliVersion = true ? "2.61.44" : "0.0.0-dev";
+  const cliVersion = true ? "2.61.46" : "0.0.0-dev";
   const apiBase2 = resolveApiBaseUrl();
   const diagnosticId = (0, import_node_crypto13.randomUUID)();
   log.info("doctor", `run id=${diagnosticId} cli=${cliVersion}`);
@@ -39406,6 +39568,17 @@ async function mcpRun(args2) {
 `);
     process.exit(1);
   }
+  if (delivery.httpUrl) {
+    const httpClient = new IntegrationTokenClient({
+      sessionId,
+      pluginId,
+      pluginAuthToken,
+      pollSecret: process.env.CODEAM_MCP_POLL_SECRET
+    });
+    const { runHttpRelay: runHttpRelay2 } = await Promise.resolve().then(() => (init_http_relay(), http_relay_exports));
+    await runHttpRelay2(delivery, httpClient, id);
+    return;
+  }
   ensureCommand(delivery.command);
   const launcher = resolveLauncherPath(delivery.command);
   const client3 = new IntegrationTokenClient({
@@ -39433,7 +39606,7 @@ async function mcpRun(args2) {
 // src/commands/version.ts
 var import_picocolors15 = __toESM(require("picocolors"));
 function version2() {
-  const v = true ? "2.61.44" : "unknown";
+  const v = true ? "2.61.46" : "unknown";
   console.log(`${import_picocolors15.default.bold("codeam-cli")} ${import_picocolors15.default.cyan(v)}`);
 }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "codeam-cli",
-  "version": "2.61.44",
+  "version": "2.61.46",
   "description": "Workflow-continuity bridge for AI coding agents. Wrap Claude Code or Codex in a PTY and supervise, approve, and redirect the session from any device — async. The terminal companion for CodeAgent Mobile.",
   "type": "commonjs",
   "main": "dist/index.js",
@@ -76,6 +76,7 @@
     "@agentclientprotocol/codex-acp": "1.1.4",
     "@agentclientprotocol/sdk": "1.2.1",
     "@clack/prompts": "^1.2.0",
+    "@modelcontextprotocol/sdk": "1.29.0",
     "chokidar": "^3.6.0",
     "ignore": "^7.0.6",
     "picocolors": "^1.1.0",