codeam-cli 2.61.61 → 2.61.63

package/CHANGELOG.md

@@ -4,6 +4,18 @@ All notable changes to `codeam-cli` are documented here.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [2.61.62] — 2026-07-28
+
+### Added
+
+- **shared:** Postman + Mixpanel integrations (api_key)
+
+## [2.61.61] — 2026-07-27
+
+### Added
+
+- **shared:** N8n integration (automation, api_key + n8n MCP)
+
 ## [2.61.59] — 2026-07-27
 
 ### Added

package/dist/index.js

@@ -1351,6 +1351,121 @@ var INTEGRATION_REGISTRY = {
         staticEnv: { MCP_MODE: "stdio" }
       }
     }
+  },
+  postman: {
+    id: "postman",
+    name: "Postman",
+    icon: "postman",
+    category: "api_tools",
+    // LIVE — api_key rail. Postman auth is a personal API key (Settings → API
+    // keys). The user pastes it; the backend validates via GET /me + vaults it.
+    // No OAuth (Postman's API has no user OAuth), no secrets, no config-503.
+    enabled: true,
+    auth: {
+      kind: "api_key",
+      fields: [
+        {
+          key: "accessToken",
+          label: "API Key",
+          placeholder: "PMAK-\u2026",
+          secret: true,
+          help: "Postman \u2192 Settings \u2192 API keys \u2192 Generate API Key."
+        }
+      ]
+    },
+    delivery: {
+      mcp: {
+        // Postman's OFFICIAL stdio MCP server (Node). BYO key via POSTMAN_API_KEY
+        // (env only). Version PINNED; bump only after re-verifying headless.
+        command: "npx",
+        args: ["-y", "@postman/postman-mcp-server@2.11.2"],
+        envMapping: {
+          POSTMAN_API_KEY: "accessToken"
+        }
+      }
+    }
+  },
+  mixpanel: {
+    id: "mixpanel",
+    name: "Mixpanel",
+    icon: "mixpanel",
+    category: "analytics",
+    // LIVE — api_key rail. Mixpanel query/export auth is a SERVICE ACCOUNT
+    // (username + password, Basic auth) scoped to a project (project id). The
+    // user pastes all three; the backend validates + vaults them. No OAuth
+    // redirect (service accounts are machine-to-machine), no GSM secrets.
+    enabled: true,
+    auth: {
+      kind: "api_key",
+      fields: [
+        {
+          key: "accessToken",
+          label: "Service Account Username",
+          placeholder: "your-sa.mp-service-account",
+          secret: false,
+          help: "Mixpanel \u2192 Organization Settings \u2192 Service Accounts \u2192 create one with project access."
+        },
+        {
+          key: "secretKey",
+          label: "Service Account Secret",
+          placeholder: "the service account secret",
+          secret: true,
+          help: "Shown once when you create the service account \u2014 copy it then."
+        },
+        {
+          key: "projectId",
+          label: "Project ID",
+          placeholder: "1234567",
+          secret: false,
+          help: "Mixpanel \u2192 Project Settings \u2192 Project ID."
+        }
+      ]
+    },
+    delivery: {
+      mcp: {
+        // @mendeel/mcp-mixpanel (Node): the service account + project id via env
+        // only (MIXPANEL_SERVICE_ACCOUNT_USERNAME/PASSWORD + MIXPANEL_PROJECT_ID).
+        // Version PINNED; bump only after re-verifying headless. Default region US.
+        command: "npx",
+        args: ["-y", "@mendeel/mcp-mixpanel@1.0.4"],
+        envMapping: {
+          MIXPANEL_SERVICE_ACCOUNT_USERNAME: "accessToken",
+          MIXPANEL_SERVICE_ACCOUNT_PASSWORD: "secretKey",
+          MIXPANEL_PROJECT_ID: "projectId"
+        }
+      }
+    }
+  },
+  supabase: {
+    id: "supabase",
+    name: "Supabase",
+    icon: "supabase",
+    category: "database",
+    // LIVE — OAuth 2.0 (authorization code, Confidential). authorize
+    // api.supabase.com/v1/oauth/authorize; token /v1/oauth/token
+    // (form-urlencoded, client creds via HTTP Basic); rotating refresh tokens.
+    // The OAuth app (Organization → OAuth Apps) is registered and
+    // SUPABASE_OAUTH_CLIENT_ID/SECRET/REDIRECT_URI are in Secret Manager
+    // (prod+dev); the config-gated 503 keeps this safe mid-rollout.
+    enabled: true,
+    auth: {
+      kind: "oauth_redirect",
+      // ⚠️ Supabase scopes are configured ON THE OAUTH APP, NOT sent in the
+      // authorize URL — this list is informational (what the app was granted).
+      scopes: ["all"]
+    },
+    delivery: {
+      mcp: {
+        // Supabase's OFFICIAL MCP server (Node). The OAuth access token IS a
+        // Management API token → fed via SUPABASE_ACCESS_TOKEN (env only, never
+        // argv). Version PINNED; bump only after re-verifying headless.
+        command: "npx",
+        args: ["-y", "@supabase/mcp-server-supabase@0.9.0"],
+        envMapping: {
+          SUPABASE_ACCESS_TOKEN: "accessToken"
+        }
+      }
+    }
   }
 };
 function getIntegration(id) {
@@ -6796,7 +6911,7 @@ function readAnonId() {
 }
 function superProperties() {
   return {
-    cliVersion: true ? "2.61.61" : "0.0.0-dev",
+    cliVersion: true ? "2.61.63" : "0.0.0-dev",
     nodeVersion: process.version,
     platform: process.platform,
     arch: process.arch,
@@ -6977,7 +7092,7 @@ var os4 = __toESM(require("os"));
 // package.json
 var package_default = {
   name: "codeam-cli",
-  version: "2.61.61",
+  version: "2.61.63",
   description: "Workflow-continuity bridge for AI coding agents. Wrap Claude Code or Codex in a PTY and supervise, approve, and redirect the session from any device \u2014 async. The terminal companion for CodeAgent Mobile.",
   type: "commonjs",
   main: "dist/index.js",
@@ -8149,7 +8264,7 @@ var CommandRelayService = class _CommandRelayService {
       // fresh + clear the "CLI update available" banner after a self-update
       // (a codespace that reinstalls @latest reconnects via heartbeat, not
       // pair/reconnect). Older backends ignore the extra field.
-      ..."2.61.61" ? { ideVersion: "2.61.61" } : {}
+      ..."2.61.63" ? { ideVersion: "2.61.63" } : {}
     }).then(() => log.trace("relay", `heartbeat ok online=${online}`)).catch((err) => log.trace("relay", `heartbeat failed online=${online}`, err));
   }
   /**
@@ -19258,7 +19373,7 @@ async function autoUpgradeBeforeCriticalCommand() {
   if (process.env.NODE_ENV === "test") return;
   if (process.env.CODEAM_DISABLE_UPDATE_CHECK === "1") return;
   if (process.env.CI) return;
-  const current = true ? "2.61.61" : null;
+  const current = true ? "2.61.63" : null;
   if (!current) return;
   const cache = readCache();
   const fresh = cache && Date.now() - cache.fetchedAt < TTL_MS;
@@ -19275,7 +19390,7 @@ function checkForUpdates() {
   if (process.env.CODEAM_DISABLE_UPDATE_CHECK === "1") return;
   if (process.env.CI) return;
   if (!process.stdout.isTTY) return;
-  const current = true ? "2.61.61" : null;
+  const current = true ? "2.61.63" : null;
   if (!current) return;
   const cache = readCache();
   const fresh = cache && Date.now() - cache.fetchedAt < TTL_MS;
@@ -19295,7 +19410,7 @@ var SELF_UPDATE_INTERVAL_MS = 60 * 60 * 1e3;
 var SELF_UPDATE_VIEW_TIMEOUT_MS = 3e4;
 var SELF_UPDATE_INSTALL_TIMEOUT_MS = 18e4;
 function currentCliVersion() {
-  return true ? "2.61.61" : null;
+  return true ? "2.61.63" : null;
 }
 function runCmd(cmd, args2, timeoutMs) {
   return new Promise((resolve8) => {
@@ -39534,7 +39649,7 @@ function checkChokidar() {
 }
 async function doctor(args2 = []) {
   const json = args2.includes("--json");
-  const cliVersion = true ? "2.61.61" : "0.0.0-dev";
+  const cliVersion = true ? "2.61.63" : "0.0.0-dev";
   const apiBase2 = resolveApiBaseUrl();
   const diagnosticId = (0, import_node_crypto13.randomUUID)();
   log.info("doctor", `run id=${diagnosticId} cli=${cliVersion}`);
@@ -40056,7 +40171,7 @@ async function mcpRun(args2) {
 // src/commands/version.ts
 var import_picocolors15 = __toESM(require("picocolors"));
 function version2() {
-  const v = true ? "2.61.61" : "unknown";
+  const v = true ? "2.61.63" : "unknown";
   console.log(`${import_picocolors15.default.bold("codeam-cli")} ${import_picocolors15.default.cyan(v)}`);
 }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "codeam-cli",
-  "version": "2.61.61",
+  "version": "2.61.63",
   "description": "Workflow-continuity bridge for AI coding agents. Wrap Claude Code or Codex in a PTY and supervise, approve, and redirect the session from any device — async. The terminal companion for CodeAgent Mobile.",
   "type": "commonjs",
   "main": "dist/index.js",