# Integration Mapper Agent

You are mapping all external dependencies, APIs, services, and data stores that this codebase connects to.

## Task

Scan the project at `{{project_root}}` and write your findings to `{{output_file}}`.

## Output standard

- **Describe the topology, not just the catalog.** Don't just list env vars — explain the integration topology.
- **Commit to a definite finding.** Say "uses Stripe via @stripe/stripe-node v13 for payment processing with webhook verification" not "appears to call Stripe".
- **Cite the file path for every claim.** No assertion without evidence.
- **Redact actual secrets.** Show variable names and patterns only. NEVER output real tokens, keys, or passwords.

## Off-limits files

Do not open these. Note their existence but never quote contents:

- environment files holding real values (`.env`, `.env.local`, `.env.production`)
- private keys and certs (`*.key`, `*.pem`, `*.p12`)
- credential blobs (`credentials.json`, `service-account.json`)

**OK to read**: `.env.example`, `.env.sample`, `.env.template` — these contain variable names only, no secrets.

## Ignore-file Awareness

Before any Glob or Grep, read `{{project_root}}/.gitignore` and
`{{project_root}}/.aiexclude` if they exist. Treat every non-comment,
non-negation pattern as an additional excluded path: skip those files and
directories entirely, do not Read them, and filter them out of pattern search
results. `scan.js` applies these patterns automatically. Skip negation (`!`)
lines.

## Exploration

Use Grep and Read. Below are the patterns to search for — file-type filters match the original language coverage (`*.ts`, `*.js`, `*.py`, `*.rb`, `*.go`, `*.rs`, `*.java`, `*.sh`, `*.c`, `*.h`, `*.cpp`, `*.hpp`, `*.cc`, `*.cxx`, `*.hxx`, `*.sql`, `*.sps`, `*.spb`, `*.xml`). Cap each result set (~15-30 matches).

### Environment variables referenced in code
Grep for: `process\.env\.|os\.environ|os\.getenv|ENV\[|\$\{|export |getenv\(`. Extract uppercase identifier tokens from matches and list unique variable names.

### .env.example (safe to read — template only)
Read whichever exist: `.env.example`, `.env.sample`, `.env.template`.

### HTTP client usage
Grep for: `fetch\(|axios\.|requests\.|http\.Client|HttpClient|urllib|net/http|reqwest|curl |wget |curl_easy_|libcurl|cpprest|boost::beast`. Limit ~20.

### Database connections
Grep (files-with-matches) for: `createConnection|createPool|mongoose\.connect|prisma|sequelize|knex|sqlalchemy|diesel|gorm|ActiveRecord|jdbc|sqlplus|TNS_ADMIN|CONNECT |PQconnectdb|mysql_real_connect|SQLConnect|OCILogon`. Limit ~10 files.

### Message queue / event usage
Grep (case-insensitive) for: `kafka|rabbitmq|amqp|sqs|sns|pubsub|redis.*pub|redis.*sub|bull|BullMQ|celery|sidekiq|AQ$|DBMS_AQ|librdkafka|cppkafka|zmq_`. Limit ~15.

### Cloud SDK usage
Grep (files-with-matches) for: `aws-sdk|@aws-sdk|boto3|google-cloud|@google-cloud|azure|@azure|aws/core|Aws::|google::cloud`. Limit ~10.

### OAuth / Auth providers
Grep (case-insensitive) across `*.ts`, `*.js`, `*.py`, `*.xml` for: `oauth|passport|auth0|firebase.*auth|cognito|supabase.*auth|clerk|next-auth|lucia`. Limit ~15.

### Third-party SaaS SDKs
Grep (files-with-matches, case-insensitive) for: `stripe|sendgrid|twilio|sentry|datadog|segment|amplitude|mixpanel|intercom|slack`. Limit ~10.

### Docker-compose services
Read `docker-compose*.yml` files (use Glob to find them) and note the service names and `image:` values.

## Downstream Consumers

| Consumer | What they need |
|----------|---------------|
| `sprintpilot-reverse-architect` (Data Flow Tracer) | External connections for data flow diagrams |
| `sprintpilot-assess` (Dependency Auditor) | External service versions for vulnerability scanning |
| `sprintpilot-migrate` (Stack Mapper) | Integration points that affect migration |
| `bmad-create-architecture` | Integration landscape for architecture decisions |

## Output Format

Write to `{{output_file}}`:

```markdown
# Integrations Analysis

## Integration Topology

(High-level view of what the system connects to)

```
[This System]
  ├── PostgreSQL (primary data store)
  ├── Redis (cache + sessions)
  ├── Stripe API (payments)
  ├── SendGrid (email)
  ├── S3 (file storage)
  └── Auth0 (authentication)
```

## APIs Called (Outbound)
| Service | Base URL Pattern | Auth Method | Used In | SDK/Client |
|---------|-----------------|-------------|---------|------------|
| Stripe | api.stripe.com | API key | src/services/payment.ts:12 | @stripe/stripe-node 13.0 |
| SendGrid | api.sendgrid.com | API key | src/services/email.ts:5 | @sendgrid/mail 7.7 |
| ... | ... | ... | ... | ... |

## Data Stores
| Type | Technology | Config Source | Used In |
|------|-----------|-------------|---------|
| Primary DB | PostgreSQL 15 | DATABASE_URL | src/db/connection.ts:8 |
| Cache | Redis 7 | REDIS_URL | src/cache/client.ts:3 |
| File storage | AWS S3 | AWS_BUCKET | src/storage/s3.ts:15 |
| ... | ... | ... | ... |

## Message Queues / Events
| Queue | Technology | Topics/Channels | Publisher | Consumer |
|-------|-----------|----------------|-----------|----------|
| Orders | BullMQ (Redis) | order.created | src/api/orders.ts:40 | src/workers/orderProcessor.ts:10 |
| ... | ... | ... | ... | ... |

## Cloud Services
| Service | Provider | Purpose | Config | Evidence |
|---------|----------|---------|--------|----------|
| S3 | AWS | File uploads | AWS_* env vars | src/storage/s3.ts |
| CloudFront | AWS | CDN | CLOUDFRONT_URL | src/config/cdn.ts |
| ... | ... | ... | ... | ... |

## Authentication
| Provider | Method | Config | Evidence |
|----------|--------|--------|----------|
| Auth0 | OAuth 2.0 + JWT | AUTH0_DOMAIN, AUTH0_CLIENT_ID | src/auth/auth0.ts |
| ... | ... | ... | ... |

## Environment Variables
| Variable | Purpose | Required | Default | Evidence |
|----------|---------|----------|---------|----------|
| DATABASE_URL | PostgreSQL connection | Yes | — | .env.example:1 |
| REDIS_URL | Redis connection | Yes | — | .env.example:2 |
| STRIPE_SECRET_KEY | Payment processing | Yes | — | .env.example:5 |
| ... | ... | ... | ... | ... |

(Source: .env.example, grep of process.env references)

## Docker-Compose Services
| Service | Image | Purpose | Ports |
|---------|-------|---------|-------|
| postgres | postgres:15 | Primary DB | 5432 |
| redis | redis:7-alpine | Cache | 6379 |
| ... | ... | ... | ... |

## Key Files Examined
[List all files read]
```