codeam-cli 2.61.63 → 2.61.65

package/CHANGELOG.md

@@ -4,6 +4,18 @@ All notable changes to `codeam-cli` are documented here.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [2.61.64] — 2026-07-28
+
+### Added
+
+- **shared:** Confluence catalog entry (docs) — alias of Atlassian/Jira
+
+## [2.61.63] — 2026-07-28
+
+### Added
+
+- **shared:** Supabase integration (database, OAuth)
+
 ## [2.61.62] — 2026-07-28
 
 ### Added

package/dist/index.js

@@ -851,13 +851,43 @@ var INTEGRATION_REGISTRY = {
     name: "Microsoft Teams",
     icon: "microsoft_teams",
     category: "comms",
-    // COMING SOON — placeholder catalog entry (no OAuth provider / MCP yet). The
-    // agent will post review pings + read threads AS THE USER over Microsoft Graph
-    // once the provider lands. `enabled:false` renders it as a dimmed "coming
-    // soon" tile inside the (live) comms category.
-    enabled: false,
-    auth: { kind: "oauth_redirect" },
-    delivery: {}
+    // LIVE — Microsoft identity platform v2.0 OAuth (multi-tenant, Confidential).
+    // The agent reads chats/channels + posts AS THE USER over Microsoft Graph.
+    // MS_TEAMS_OAUTH_CLIENT_ID/SECRET/REDIRECT_URI are in Secret Manager (prod+dev);
+    // the backend TeamsOAuthProvider is config-gated (503 if env unset).
+    // ⚠️ Chat.* + ChannelMessage.Read.All (`.All`) require TENANT-ADMIN consent
+    // (MC1163922, Oct-2025) — the connecting user must be an org admin, or their
+    // IT admin approves the app for the tenant. Not a self-serve funnel like Slack.
+    enabled: true,
+    auth: {
+      kind: "oauth_redirect",
+      // Delegated Microsoft Graph scopes. `offline_access` → rotating refresh
+      // (Teams access tokens are ~1h). ⚠️ Changing these requires the user to
+      // RE-LINK — the token carries only the scopes granted at link time.
+      scopes: [
+        "User.Read",
+        "User.ReadBasic.All",
+        "Team.ReadBasic.All",
+        "Channel.ReadBasic.All",
+        "ChannelMessage.Read.All",
+        "ChannelMessage.Send",
+        "Chat.Read",
+        "Chat.ReadWrite",
+        "offline_access"
+      ]
+    },
+    delivery: {
+      mcp: {
+        // @floriscornel/teams-mcp (Node): BYO Graph access token via AUTH_TOKEN
+        // (env only, never argv). Headless. Version PINNED; bump only after
+        // re-verifying headless. Tools: get/send channel + chat messages, replies.
+        command: "npx",
+        args: ["-y", "@floriscornel/teams-mcp@0.9.0"],
+        envMapping: {
+          AUTH_TOKEN: "accessToken"
+        }
+      }
+    }
   },
   google_chat: {
     id: "google_chat",
@@ -1466,6 +1496,34 @@ var INTEGRATION_REGISTRY = {
         }
       }
     }
+  },
+  confluence: {
+    id: "confluence",
+    name: "Confluence",
+    icon: "confluence",
+    category: "docs",
+    // Confluence is served by the SAME Atlassian OAuth + the SAME `mcp-atlassian`
+    // server as Jira (the `jira` entry already requests Confluence scopes). This
+    // entry is a DISPLAY ALIAS so Confluence is explicit in the Knowledge tab: it
+    // BORROWS jira's vaulted credential (`aliasOf: 'jira'`) and has no link flow of
+    // its own — connecting Atlassian (the Jira/Atlassian card) lights it up, and
+    // the backend resolves its token by delegating to `jira`.
+    enabled: true,
+    auth: { kind: "derived", aliasOf: "jira" },
+    delivery: {
+      mcp: {
+        // Same mcp-atlassian server + BYO-token env as Jira — it exposes the
+        // Confluence tools when the deploy selects Confluence without Jira. If
+        // BOTH are selected the deploy manifest dedupes identical MCP specs.
+        command: "uvx",
+        args: ["mcp-atlassian==0.22.1"],
+        envMapping: {
+          ATLASSIAN_OAUTH_ACCESS_TOKEN: "accessToken",
+          ATLASSIAN_OAUTH_CLOUD_ID: "cloudId"
+        },
+        staticEnv: { ATLASSIAN_OAUTH_ENABLE: "true" }
+      }
+    }
   }
 };
 function getIntegration(id) {
@@ -6911,7 +6969,7 @@ function readAnonId() {
 }
 function superProperties() {
   return {
-    cliVersion: true ? "2.61.63" : "0.0.0-dev",
+    cliVersion: true ? "2.61.65" : "0.0.0-dev",
     nodeVersion: process.version,
     platform: process.platform,
     arch: process.arch,
@@ -7092,7 +7150,7 @@ var os4 = __toESM(require("os"));
 // package.json
 var package_default = {
   name: "codeam-cli",
-  version: "2.61.63",
+  version: "2.61.65",
   description: "Workflow-continuity bridge for AI coding agents. Wrap Claude Code or Codex in a PTY and supervise, approve, and redirect the session from any device \u2014 async. The terminal companion for CodeAgent Mobile.",
   type: "commonjs",
   main: "dist/index.js",
@@ -8264,7 +8322,7 @@ var CommandRelayService = class _CommandRelayService {
       // fresh + clear the "CLI update available" banner after a self-update
       // (a codespace that reinstalls @latest reconnects via heartbeat, not
       // pair/reconnect). Older backends ignore the extra field.
-      ..."2.61.63" ? { ideVersion: "2.61.63" } : {}
+      ..."2.61.65" ? { ideVersion: "2.61.65" } : {}
     }).then(() => log.trace("relay", `heartbeat ok online=${online}`)).catch((err) => log.trace("relay", `heartbeat failed online=${online}`, err));
   }
   /**
@@ -19373,7 +19431,7 @@ async function autoUpgradeBeforeCriticalCommand() {
   if (process.env.NODE_ENV === "test") return;
   if (process.env.CODEAM_DISABLE_UPDATE_CHECK === "1") return;
   if (process.env.CI) return;
-  const current = true ? "2.61.63" : null;
+  const current = true ? "2.61.65" : null;
   if (!current) return;
   const cache = readCache();
   const fresh = cache && Date.now() - cache.fetchedAt < TTL_MS;
@@ -19390,7 +19448,7 @@ function checkForUpdates() {
   if (process.env.CODEAM_DISABLE_UPDATE_CHECK === "1") return;
   if (process.env.CI) return;
   if (!process.stdout.isTTY) return;
-  const current = true ? "2.61.63" : null;
+  const current = true ? "2.61.65" : null;
   if (!current) return;
   const cache = readCache();
   const fresh = cache && Date.now() - cache.fetchedAt < TTL_MS;
@@ -19410,7 +19468,7 @@ var SELF_UPDATE_INTERVAL_MS = 60 * 60 * 1e3;
 var SELF_UPDATE_VIEW_TIMEOUT_MS = 3e4;
 var SELF_UPDATE_INSTALL_TIMEOUT_MS = 18e4;
 function currentCliVersion() {
-  return true ? "2.61.63" : null;
+  return true ? "2.61.65" : null;
 }
 function runCmd(cmd, args2, timeoutMs) {
   return new Promise((resolve8) => {
@@ -39649,7 +39707,7 @@ function checkChokidar() {
 }
 async function doctor(args2 = []) {
   const json = args2.includes("--json");
-  const cliVersion = true ? "2.61.63" : "0.0.0-dev";
+  const cliVersion = true ? "2.61.65" : "0.0.0-dev";
   const apiBase2 = resolveApiBaseUrl();
   const diagnosticId = (0, import_node_crypto13.randomUUID)();
   log.info("doctor", `run id=${diagnosticId} cli=${cliVersion}`);
@@ -40171,7 +40229,7 @@ async function mcpRun(args2) {
 // src/commands/version.ts
 var import_picocolors15 = __toESM(require("picocolors"));
 function version2() {
-  const v = true ? "2.61.63" : "unknown";
+  const v = true ? "2.61.65" : "unknown";
   console.log(`${import_picocolors15.default.bold("codeam-cli")} ${import_picocolors15.default.cyan(v)}`);
 }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "codeam-cli",
-  "version": "2.61.63",
+  "version": "2.61.65",
   "description": "Workflow-continuity bridge for AI coding agents. Wrap Claude Code or Codex in a PTY and supervise, approve, and redirect the session from any device — async. The terminal companion for CodeAgent Mobile.",
   "type": "commonjs",
   "main": "dist/index.js",