@atlassian-dc-mcp/bitbucket 0.34.0 → 0.36.0

package/build/__tests__/merge-gateway.test.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=merge-gateway.test.d.ts.map

package/build/__tests__/merge-gateway.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"merge-gateway.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/merge-gateway.test.ts"],"names":[],"mappings":""}

package/build/__tests__/merge-gateway.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"merge-gateway.test.js","sourceRoot":"","sources":["../../src/__tests__/merge-gateway.test.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,sBAAsB,EACtB,2BAA2B,EAC3B,mBAAmB,GACpB,MAAM,qBAAqB,CAAC;AAE7B,MAAM,UAAU,GAAG,GAAG,EAAE,CAAC,SAAS,CAAC;AAEnC,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;IACnC,EAAE,CAAC,wBAAwB,EAAE,GAAG,EAAE;QAChC,MAAM,OAAO,GAAG,mBAAmB,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;QACnE,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACpC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;QAC5D,MAAM,OAAO,GAAG,mBAAmB,CAAC,EAAE,GAAG,EAAE,EAAE,uBAAuB,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;QACpG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oEAAoE,EAAE,GAAG,EAAE;QAC5E,MAAM,OAAO,GAAG,mBAAmB,CAAC;YAClC,GAAG,EAAE,EAAE,uBAAuB,EAAE,MAAM,EAAE,6BAA6B,EAAE,qBAAqB,EAAE;YAC9F,IAAI,EAAE,UAAU;SACjB,CAAC,CAAC;QACH,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE,GAAG,EAAE;QAC9D,MAAM,OAAO,GAAG,mBAAmB,CAAC;YAClC,GAAG,EAAE;gBACH,uBAAuB,EAAE,KAAK;gBAC9B,6BAA6B,EAAE,+BAA+B;aAC/D;YACD,IAAI,EAAE,UAAU;SACjB,CAAC,CAAC;QACH,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC,CAAC;QACxD,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,GAAG,EAAE;QACpE,MAAM,OAAO,GAAG,mBAAmB,CAAC;YAClC,GAAG,EAAE;gBACH,uBAAuB,EAAE,GAAG;gBAC5B,6BAA6B,EAAE,WAAW;gBAC1C,mCAAmC,EAAE,+BAA+B;aACrE;YACD,IAAI,EAAE,UAAU;SACjB,CAAC,CAAC;QACH,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,CAAC,oBAAoB,EAAE,sBAAsB,CAAC,CAAC,CAAC;IACrF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8EAA8E,EAAE,GAAG,EAAE;QACtF,MAAM,QAAQ,GAAa,EAAE,CAAC;QAC9B,mBAAmB,CAAC;YAClB,GAAG,EAAE,EAAE,uBAAuB,EAAE,MAAM,EAAE,6BAA6B,EAAE,MAAM,EAAE;YAC/E,IAAI,EAAE,OAAO,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC;SACxC,CAAC,CAAC;QACH,MAAM,CAAC,QAAQ,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACjC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QACxC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE;IACtC,MAAM,OAAO,GAAG,mBAAmB,CAAC;QAClC,GAAG,EAAE,EAAE,uBAAuB,EAAE,MAAM,EAAE,6BAA6B,EAAE,oBAAoB,EAAE;QAC7F,IAAI,EAAE,UAAU;KACjB,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;QACrD,MAAM,CAAC,GAAG,EAAE,CAAC,sBAAsB,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;aAChG,OAAO,CAAC,yBAAyB,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wEAAwE,EAAE,GAAG,EAAE;QAChF,MAAM,CAAC,GAAG,EAAE,CAAC,sBAAsB,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;IAC9E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;QACrD,MAAM,CAAC,GAAG,EAAE,CAAC,sBAAsB,CAAC,OAAO,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;IACnF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACvD,MAAM,CAAC,GAAG,EAAE,CAAC,sBAAsB,CAAC,OAAO,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,iCAAiC,CAAC,CAAC;IACjH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kEAAkE,EAAE,GAAG,EAAE;QAC1E,MAAM,CAAC,GAAG,EAAE,CAAC,sBAAsB,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IACzF,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,6BAA6B,EAAE,GAAG,EAAE;IAC3C,MAAM,YAAY,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,WAAW,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;IAC7E,MAAM,UAAU,GAAG;QACjB,OAAO,EAAE,IAAI;QACb,KAAK,EAAE,CAAC,WAAW,CAAC;QACpB,UAAU,EAAE,CAAC,oBAAoB,EAAE,sBAAsB,CAAC;KAC3D,CAAC;IAEF,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;QACrE,MAAM,CAAC,GAAG,EAAE,CAAC,2BAA2B,CAAC,YAAY,EAAE,mBAAmB,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;QAC3F,MAAM,CAAC,GAAG,EAAE,CAAC,2BAA2B,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;IACnF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,MAAM,CAAC,GAAG,EAAE,CAAC,2BAA2B,CAAC,UAAU,EAAE,oBAAoB,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;QAC1F,MAAM,CAAC,GAAG,EAAE,CAAC,2BAA2B,CAAC,UAAU,EAAE,wBAAwB,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;IAChG,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACvD,MAAM,CAAC,GAAG,EAAE,CAAC,2BAA2B,CAAC,UAAU,EAAE,mBAAmB,CAAC,CAAC,CAAC,OAAO,CAAC,oCAAoC,CAAC,CAAC;IAC3H,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+DAA+D,EAAE,GAAG,EAAE;QACvE,MAAM,CAAC,GAAG,EAAE,CAAC,2BAA2B,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,uCAAuC,CAAC,CAAC;IACpH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/build/merge-gateway.d.ts

@@ -1,34 +0,0 @@
-/**
- * Operator-controlled gate for merging pull requests.
- *
- * A merge writes to a shared branch and cannot be undone through the API, so it is
- * disabled by default: `bitbucket_mergePullRequest` is not even registered unless the
- * operator enables it and names the repositories it may merge in. The allowed scope is
- * read from the environment once at startup, so the model can never select or widen it.
- * Read-only mergeability checks are not gated.
- */
-export interface MergeGateway {
-    /** Whether merging is enabled and at least one valid repository pattern resolved. */
-    enabled: boolean;
-    /** Allowed `PROJECT/repository-slug` targets; a `PROJECT/*` entry allows the whole project. */
-    repos: string[];
-    /** Allowed target refs; a trailing `*` matches a prefix. Empty means any ref in an allowed repository. */
-    targetRefs: string[];
-}
-type Env = Record<string, string | undefined>;
-type Warn = (message: string) => void;
-/**
- * Reads the merge gateway configuration from the environment. Merging only activates
- * when the flag is set and at least one repository entry is valid; otherwise a warning
- * is logged and the gateway stays disabled.
- */
-export declare function resolveMergeGateway(options?: {
-    env?: Env;
-    warn?: Warn;
-}): MergeGateway;
-/** Throws unless the gateway allows merging in this repository. No network call. */
-export declare function assertRepoMergeAllowed(gateway: MergeGateway, projectKey: string, repositorySlug: string): void;
-/** Throws unless the gateway allows merging into this target ref. A gateway with no ref restriction allows all. */
-export declare function assertTargetRefMergeAllowed(gateway: MergeGateway, targetRefId: string | undefined): void;
-export {};
-//# sourceMappingURL=merge-gateway.d.ts.map

package/build/merge-gateway.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"merge-gateway.d.ts","sourceRoot":"","sources":["../src/merge-gateway.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,MAAM,WAAW,YAAY;IAC3B,qFAAqF;IACrF,OAAO,EAAE,OAAO,CAAC;IACjB,+FAA+F;IAC/F,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,0GAA0G;IAC1G,UAAU,EAAE,MAAM,EAAE,CAAC;CACtB;AAED,KAAK,GAAG,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;AAC9C,KAAK,IAAI,GAAG,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;AA6CtC;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,CAAC,EAAE;IAAE,GAAG,CAAC,EAAE,GAAG,CAAC;IAAC,IAAI,CAAC,EAAE,IAAI,CAAA;CAAE,GAAG,YAAY,CA2BtF;AAED,oFAAoF;AACpF,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,GAAG,IAAI,CAa9G;AAED,mHAAmH;AACnH,wBAAgB,2BAA2B,CAAC,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,CAgBxG"}

package/build/merge-gateway.js

@@ -1,86 +0,0 @@
-const DISABLED = { enabled: false, repos: [], targetRefs: [] };
-const REPO_ENTRY_RE = /^[^\s/]+\/[^\s/]+$/;
-function readBool(env, name) {
-    const value = env[name]?.trim().toLowerCase();
-    return value === 'true' || value === '1' || value === 'yes';
-}
-function parseList(raw) {
-    return (raw ?? '').split(/[,;\s]+/).map(entry => entry.trim()).filter(Boolean);
-}
-function dedupe(values) {
-    return [...new Set(values)];
-}
-/**
- * Accepts `PROJECT/repository-slug` or `PROJECT/*`. The project key is upper-cased and
- * the slug lower-cased to match the casing the REST API uses, so comparisons are exact.
- */
-function normalizeRepoEntry(entry, warn) {
-    if (!REPO_ENTRY_RE.test(entry)) {
-        warn(`Ignoring merge repository entry that is not "PROJECT/repository-slug" or "PROJECT/*": "${entry}"`);
-        return undefined;
-    }
-    const [projectKey, slug] = entry.split('/');
-    if (projectKey === '*') {
-        warn(`Ignoring merge repository entry that would allow every project: "${entry}"`);
-        return undefined;
-    }
-    return `${projectKey.toUpperCase()}/${slug.toLowerCase()}`;
-}
-/** Bare branch names are expanded so operators can write `develop` instead of `refs/heads/develop`. */
-function normalizeRefEntry(entry) {
-    return entry.startsWith('refs/') ? entry : `refs/heads/${entry}`;
-}
-function matchesPattern(value, pattern) {
-    return pattern.endsWith('*') ? value.startsWith(pattern.slice(0, -1)) : value === pattern;
-}
-/**
- * Reads the merge gateway configuration from the environment. Merging only activates
- * when the flag is set and at least one repository entry is valid; otherwise a warning
- * is logged and the gateway stays disabled.
- */
-export function resolveMergeGateway(options) {
-    const env = options?.env ?? process.env;
-    const warn = options?.warn ?? ((message) => console.error(`[merge-gateway] ${message}`));
-    if (!readBool(env, 'BITBUCKET_MERGE_ENABLED')) {
-        return DISABLED;
-    }
-    const repos = dedupe(parseList(env.BITBUCKET_MERGE_ALLOWED_REPOS)
-        .map(entry => normalizeRepoEntry(entry, warn))
-        .filter((entry) => Boolean(entry)));
-    if (repos.length === 0) {
-        warn('Merging was enabled but no valid repository is configured (set BITBUCKET_MERGE_ALLOWED_REPOS ' +
-            'to a list of "PROJECT/repository-slug" or "PROJECT/*" entries); the merge tool will stay disabled.');
-        return DISABLED;
-    }
-    return {
-        enabled: true,
-        repos,
-        targetRefs: dedupe(parseList(env.BITBUCKET_MERGE_ALLOWED_TARGET_REFS).map(normalizeRefEntry)),
-    };
-}
-/** Throws unless the gateway allows merging in this repository. No network call. */
-export function assertRepoMergeAllowed(gateway, projectKey, repositorySlug) {
-    if (!gateway.enabled) {
-        throw new Error('Merging pull requests is disabled on this server. Enable it with BITBUCKET_MERGE_ENABLED ' +
-            'and list the allowed repositories in BITBUCKET_MERGE_ALLOWED_REPOS.');
-    }
-    const target = `${projectKey.toUpperCase()}/${repositorySlug.toLowerCase()}`;
-    if (!gateway.repos.some(pattern => matchesPattern(target, pattern))) {
-        throw new Error(`Merging is not allowed in ${target} on this server. Allowed: ${gateway.repos.join(', ')}.`);
-    }
-}
-/** Throws unless the gateway allows merging into this target ref. A gateway with no ref restriction allows all. */
-export function assertTargetRefMergeAllowed(gateway, targetRefId) {
-    if (gateway.targetRefs.length === 0) {
-        return;
-    }
-    if (!targetRefId) {
-        throw new Error('Could not determine the target branch of the pull request, and this server restricts which ' +
-            'branches may be merged into (BITBUCKET_MERGE_ALLOWED_TARGET_REFS); refusing to merge.');
-    }
-    if (!gateway.targetRefs.some(pattern => matchesPattern(targetRefId, pattern))) {
-        throw new Error(`Merging into ${targetRefId} is not allowed on this server. ` +
-            `Allowed target refs: ${gateway.targetRefs.join(', ')}.`);
-    }
-}
-//# sourceMappingURL=merge-gateway.js.map

package/build/merge-gateway.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"merge-gateway.js","sourceRoot":"","sources":["../src/merge-gateway.ts"],"names":[],"mappings":"AAqBA,MAAM,QAAQ,GAAiB,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;AAE7E,MAAM,aAAa,GAAG,oBAAoB,CAAC;AAE3C,SAAS,QAAQ,CAAC,GAAQ,EAAE,IAAY;IACtC,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC9C,OAAO,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,KAAK,CAAC;AAC9D,CAAC;AAED,SAAS,SAAS,CAAC,GAAuB;IACxC,OAAO,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;AACjF,CAAC;AAED,SAAS,MAAM,CAAC,MAAgB;IAC9B,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;AAC9B,CAAC;AAED;;;GAGG;AACH,SAAS,kBAAkB,CAAC,KAAa,EAAE,IAAU;IACnD,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/B,IAAI,CAAC,0FAA0F,KAAK,GAAG,CAAC,CAAC;QACzG,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,CAAC,UAAU,EAAE,IAAI,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC5C,IAAI,UAAU,KAAK,GAAG,EAAE,CAAC;QACvB,IAAI,CAAC,oEAAoE,KAAK,GAAG,CAAC,CAAC;QACnF,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,GAAG,UAAU,CAAC,WAAW,EAAE,IAAI,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;AAC7D,CAAC;AAED,uGAAuG;AACvG,SAAS,iBAAiB,CAAC,KAAa;IACtC,OAAO,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,cAAc,KAAK,EAAE,CAAC;AACnE,CAAC;AAED,SAAS,cAAc,CAAC,KAAa,EAAE,OAAe;IACpD,OAAO,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,OAAO,CAAC;AAC5F,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,OAAoC;IACtE,MAAM,GAAG,GAAG,OAAO,EAAE,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACxC,MAAM,IAAI,GAAG,OAAO,EAAE,IAAI,IAAI,CAAC,CAAC,OAAe,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,mBAAmB,OAAO,EAAE,CAAC,CAAC,CAAC;IAEjG,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,yBAAyB,CAAC,EAAE,CAAC;QAC9C,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,CAClB,SAAS,CAAC,GAAG,CAAC,6BAA6B,CAAC;SACzC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,kBAAkB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;SAC7C,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CACtD,CAAC;IAEF,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,IAAI,CACF,+FAA+F;YAC7F,oGAAoG,CACvG,CAAC;QACF,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,OAAO;QACL,OAAO,EAAE,IAAI;QACb,KAAK;QACL,UAAU,EAAE,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,mCAAmC,CAAC,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;KAC9F,CAAC;AACJ,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,sBAAsB,CAAC,OAAqB,EAAE,UAAkB,EAAE,cAAsB;IACtG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CACb,2FAA2F;YACzF,qEAAqE,CACxE,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,GAAG,UAAU,CAAC,WAAW,EAAE,IAAI,cAAc,CAAC,WAAW,EAAE,EAAE,CAAC;IAC7E,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,cAAc,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,EAAE,CAAC;QACpE,MAAM,IAAI,KAAK,CACb,6BAA6B,MAAM,6BAA6B,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAC5F,CAAC;IACJ,CAAC;AACH,CAAC;AAED,mHAAmH;AACnH,MAAM,UAAU,2BAA2B,CAAC,OAAqB,EAAE,WAA+B;IAChG,IAAI,OAAO,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpC,OAAO;IACT,CAAC;IACD,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CACb,6FAA6F;YAC3F,uFAAuF,CAC1F,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,cAAc,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,EAAE,CAAC;QAC9E,MAAM,IAAI,KAAK,CACb,gBAAgB,WAAW,kCAAkC;YAC3D,wBAAwB,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAC3D,CAAC;IACJ,CAAC;AACH,CAAC"}

package/src/merge-gateway.ts

@@ -1,132 +0,0 @@
-/**
- * Operator-controlled gate for merging pull requests.
- *
- * A merge writes to a shared branch and cannot be undone through the API, so it is
- * disabled by default: `bitbucket_mergePullRequest` is not even registered unless the
- * operator enables it and names the repositories it may merge in. The allowed scope is
- * read from the environment once at startup, so the model can never select or widen it.
- * Read-only mergeability checks are not gated.
- */
-export interface MergeGateway {
-  /** Whether merging is enabled and at least one valid repository pattern resolved. */
-  enabled: boolean;
-  /** Allowed `PROJECT/repository-slug` targets; a `PROJECT/*` entry allows the whole project. */
-  repos: string[];
-  /** Allowed target refs; a trailing `*` matches a prefix. Empty means any ref in an allowed repository. */
-  targetRefs: string[];
-}
-
-type Env = Record<string, string | undefined>;
-type Warn = (message: string) => void;
-
-const DISABLED: MergeGateway = { enabled: false, repos: [], targetRefs: [] };
-
-const REPO_ENTRY_RE = /^[^\s/]+\/[^\s/]+$/;
-
-function readBool(env: Env, name: string): boolean {
-  const value = env[name]?.trim().toLowerCase();
-  return value === 'true' || value === '1' || value === 'yes';
-}
-
-function parseList(raw: string | undefined): string[] {
-  return (raw ?? '').split(/[,;\s]+/).map(entry => entry.trim()).filter(Boolean);
-}
-
-function dedupe(values: string[]): string[] {
-  return [...new Set(values)];
-}
-
-/**
- * Accepts `PROJECT/repository-slug` or `PROJECT/*`. The project key is upper-cased and
- * the slug lower-cased to match the casing the REST API uses, so comparisons are exact.
- */
-function normalizeRepoEntry(entry: string, warn: Warn): string | undefined {
-  if (!REPO_ENTRY_RE.test(entry)) {
-    warn(`Ignoring merge repository entry that is not "PROJECT/repository-slug" or "PROJECT/*": "${entry}"`);
-    return undefined;
-  }
-  const [projectKey, slug] = entry.split('/');
-  if (projectKey === '*') {
-    warn(`Ignoring merge repository entry that would allow every project: "${entry}"`);
-    return undefined;
-  }
-  return `${projectKey.toUpperCase()}/${slug.toLowerCase()}`;
-}
-
-/** Bare branch names are expanded so operators can write `develop` instead of `refs/heads/develop`. */
-function normalizeRefEntry(entry: string): string {
-  return entry.startsWith('refs/') ? entry : `refs/heads/${entry}`;
-}
-
-function matchesPattern(value: string, pattern: string): boolean {
-  return pattern.endsWith('*') ? value.startsWith(pattern.slice(0, -1)) : value === pattern;
-}
-
-/**
- * Reads the merge gateway configuration from the environment. Merging only activates
- * when the flag is set and at least one repository entry is valid; otherwise a warning
- * is logged and the gateway stays disabled.
- */
-export function resolveMergeGateway(options?: { env?: Env; warn?: Warn }): MergeGateway {
-  const env = options?.env ?? process.env;
-  const warn = options?.warn ?? ((message: string) => console.error(`[merge-gateway] ${message}`));
-
-  if (!readBool(env, 'BITBUCKET_MERGE_ENABLED')) {
-    return DISABLED;
-  }
-
-  const repos = dedupe(
-    parseList(env.BITBUCKET_MERGE_ALLOWED_REPOS)
-      .map(entry => normalizeRepoEntry(entry, warn))
-      .filter((entry): entry is string => Boolean(entry)),
-  );
-
-  if (repos.length === 0) {
-    warn(
-      'Merging was enabled but no valid repository is configured (set BITBUCKET_MERGE_ALLOWED_REPOS ' +
-        'to a list of "PROJECT/repository-slug" or "PROJECT/*" entries); the merge tool will stay disabled.',
-    );
-    return DISABLED;
-  }
-
-  return {
-    enabled: true,
-    repos,
-    targetRefs: dedupe(parseList(env.BITBUCKET_MERGE_ALLOWED_TARGET_REFS).map(normalizeRefEntry)),
-  };
-}
-
-/** Throws unless the gateway allows merging in this repository. No network call. */
-export function assertRepoMergeAllowed(gateway: MergeGateway, projectKey: string, repositorySlug: string): void {
-  if (!gateway.enabled) {
-    throw new Error(
-      'Merging pull requests is disabled on this server. Enable it with BITBUCKET_MERGE_ENABLED ' +
-        'and list the allowed repositories in BITBUCKET_MERGE_ALLOWED_REPOS.',
-    );
-  }
-  const target = `${projectKey.toUpperCase()}/${repositorySlug.toLowerCase()}`;
-  if (!gateway.repos.some(pattern => matchesPattern(target, pattern))) {
-    throw new Error(
-      `Merging is not allowed in ${target} on this server. Allowed: ${gateway.repos.join(', ')}.`,
-    );
-  }
-}
-
-/** Throws unless the gateway allows merging into this target ref. A gateway with no ref restriction allows all. */
-export function assertTargetRefMergeAllowed(gateway: MergeGateway, targetRefId: string | undefined): void {
-  if (gateway.targetRefs.length === 0) {
-    return;
-  }
-  if (!targetRefId) {
-    throw new Error(
-      'Could not determine the target branch of the pull request, and this server restricts which ' +
-        'branches may be merged into (BITBUCKET_MERGE_ALLOWED_TARGET_REFS); refusing to merge.',
-    );
-  }
-  if (!gateway.targetRefs.some(pattern => matchesPattern(targetRefId, pattern))) {
-    throw new Error(
-      `Merging into ${targetRefId} is not allowed on this server. ` +
-        `Allowed target refs: ${gateway.targetRefs.join(', ')}.`,
-    );
-  }
-}