@crypto512/jicon-mcp 1.0.1 → 1.0.3

package/.jicon.json.safewrite

@@ -0,0 +1,17 @@
+{
+  "jira": {
+    "url": "https://jira.example.com",
+    "username": "your-email@example.com",
+    "token": "your-jira-api-token"
+  },
+  "confluence": {
+    "url": "https://confluence.example.com",
+    "username": "your-email@example.com",
+    "token": "your-confluence-api-token"
+  },
+  "permissions": {
+    "mode": "custom",
+    "whitelist": ["jira_read", "confluence_write", "tempo_read"],
+    "confluenceWriteHome": true
+  }
+}

package/README.md

@@ -115,15 +115,17 @@ Add to `opencode.jsonc` in your project root or `~/.config/opencode/opencode.jso
 | `JIRA_URL` | Your Jira instance URL |
 | `JIRA_USERNAME` | Your email (omit for Data Center PAT) |
 | `JIRA_API_TOKEN` | API token or Personal Access Token |
+| `JIRA_AUTH_TYPE` | Optional: `basic` or `bearer` (auto-detected from username) |
 | `CONFLUENCE_URL` | Your Confluence instance URL |
 | `CONFLUENCE_USERNAME` | Your email (omit for Data Center PAT) |
 | `CONFLUENCE_API_TOKEN` | API token or Personal Access Token |
+| `CONFLUENCE_AUTH_TYPE` | Optional: `basic` or `bearer` (auto-detected from username) |
 
 **Note:** Tempo uses the same Jira credentials - no separate configuration needed.
 
 ### Configuration File (Optional)
 
-Create `.jicon.json` in your project root for project-specific settings:
+Create `.jicon.json` in your project root for project-specific settings, or `~/.config/jicon/jicon.json` for user-wide settings:
 
 ```json
 {
@@ -140,33 +142,56 @@ Create `.jicon.json` in your project root for project-specific settings:
 }
 ```
 
+**Priority:** Project config → User config → Environment variables
+
 **Important:** Add `.jicon.json` to your `.gitignore`!
 
 ### Permission Modes
 
-Control what operations are allowed:
+Control what operations are allowed. **By default, Jicon runs in read-only mode** - all read tools across Jira, Confluence, and Tempo are available, but no write operations. Safe for exploration without risk of accidental modifications.
+
+**Read-Only** (default) - all read tools enabled:
+```json
+{ "permissions": { "mode": "readonly" } }
+```
 
-**Full Access** (default):
+**Full Access** - all operations enabled:
 ```json
 { "permissions": { "mode": "full" } }
 ```
 
-**Read-Only** - safe for exploration:
+**Custom** - fine-grained control with whitelist and blacklist:
 ```json
-{ "permissions": { "mode": "readonly" } }
+{
+  "permissions": {
+    "mode": "custom",
+    "whitelist": ["jira_all", "confluence_all", "tempo_all"],
+    "blacklist": ["confluence_delete_page", "tempo_delete_worklog"]
+  }
+}
 ```
 
-**Custom** - fine-grained control:
+**Safe Write** - recommended for controlled write access:
 ```json
 {
   "permissions": {
     "mode": "custom",
-    "whitelist": ["jira_read", "confluence_read", "tempo_all"]
+    "whitelist": ["jira_read", "confluence_write", "tempo_read"],
+    "confluenceWriteHome": true
   }
 }
 ```
 
-Available virtual actions: `jira_read`, `jira_write`, `jira_all`, `confluence_read`, `confluence_write`, `confluence_all`, `tempo_read`, `tempo_write`, `tempo_all`
+This configuration allows:
+- **Jira**: Read-only (search, view issues, sprints, boards)
+- **Confluence**: Write restricted to your personal space only
+- **Tempo**: Read-only (view worklogs, no time logging)
+
+The `confluenceWriteHome: true` setting ensures all Confluence write operations (drafts, comments, attachments) can only target your personal space, preventing accidental modifications to shared team spaces.
+
+**Virtual actions** (for whitelist): `jira_read`, `jira_write`, `jira_all`, `confluence_read`, `confluence_write`, `confluence_all`, `tempo_read`, `tempo_write`, `tempo_all`
+
+**Individual tools** (for blacklist): See [TOOL_LIST.md](TOOL_LIST.md) for all tool names (e.g., `confluence_delete_page`, `tempo_delete_worklog`)
 
 ## Authentication
 
@@ -205,7 +230,13 @@ Plus utility tools for content buffering, time calculations, URL generation, and
 
 ### Safe Confluence Editing
 
-Confluence changes go through a draft workflow - drafts are created for your review before publishing. No accidental overwrites.
+Confluence write operations use a **draft workflow** for safety:
+
+1. **Draft Creation**: When asked to create or edit content, Jicon creates a draft in your personal space
+2. **User Review**: You review the draft content before it goes live
+3. **Manual Publish**: You decide when and where to publish the final content
+
+This means the AI assistant **never directly publishes** to shared team spaces - all changes are staged as drafts that require your explicit approval. Combined with `confluenceWriteHome: true`, this ensures complete control over what gets published.
 
 ### PlantUML Diagrams
 

package/dist/config/types.js

@@ -22,13 +22,13 @@ export const PermissionsConfigSchema = z.object({
     confluenceWriteHome: z.boolean().default(false),
 });
 // Main configuration schema
-// Default: custom mode with jira_read + confluence_read only (Tempo disabled by default)
+// Default: readonly mode for safety (no write operations allowed)
 export const ConfigSchema = z.object({
     jira: ServiceConfigSchema.optional(),
     confluence: ServiceConfigSchema.optional(),
     permissions: PermissionsConfigSchema.default({
-        mode: "custom",
-        whitelist: ["jira_read", "confluence_read"],
+        mode: "readonly",
+        whitelist: [],
         blacklist: [],
     }),
 });

package/dist/config/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/config/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,6BAA6B;AAC7B,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;AAG1D,+BAA+B;AAC/B,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IACrB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,QAAQ,EAAE,cAAc,CAAC,QAAQ,EAAE;CACpC,CAAC,CAAC;AAIH,yBAAyB;AACzB,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAC;AAG3E,mCAAmC;AACnC,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,IAAI,EAAE,oBAAoB,CAAC,OAAO,CAAC,UAAU,CAAC;IAC9C,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC1C,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC1C,iFAAiF;IACjF,mBAAmB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;CAChD,CAAC,CAAC;AAIH,4BAA4B;AAC5B,yFAAyF;AACzF,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,IAAI,EAAE,mBAAmB,CAAC,QAAQ,EAAE;IACpC,UAAU,EAAE,mBAAmB,CAAC,QAAQ,EAAE;IAC1C,WAAW,EAAE,uBAAuB,CAAC,OAAO,CAAC;QAC3C,IAAI,EAAE,QAAQ;QACd,SAAS,EAAE,CAAC,WAAW,EAAE,iBAAiB,CAAC;QAC3C,SAAS,EAAE,EAAE;KACd,CAAC;CACH,CAAC,CAAC"}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/config/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,6BAA6B;AAC7B,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;AAG1D,+BAA+B;AAC/B,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IACrB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,QAAQ,EAAE,cAAc,CAAC,QAAQ,EAAE;CACpC,CAAC,CAAC;AAIH,yBAAyB;AACzB,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAC;AAG3E,mCAAmC;AACnC,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,IAAI,EAAE,oBAAoB,CAAC,OAAO,CAAC,UAAU,CAAC;IAC9C,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC1C,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC1C,iFAAiF;IACjF,mBAAmB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;CAChD,CAAC,CAAC;AAIH,4BAA4B;AAC5B,kEAAkE;AAClE,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,IAAI,EAAE,mBAAmB,CAAC,QAAQ,EAAE;IACpC,UAAU,EAAE,mBAAmB,CAAC,QAAQ,EAAE;IAC1C,WAAW,EAAE,uBAAuB,CAAC,OAAO,CAAC;QAC3C,IAAI,EAAE,UAAU;QAChB,SAAS,EAAE,EAAE;QACb,SAAS,EAAE,EAAE;KACd,CAAC;CACH,CAAC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@crypto512/jicon-mcp",
-  "version": "1.0.1",
+  "version": "1.0.3",
   "description": "Model Context Protocol server for Jira, Confluence, and Tempo integration",
   "main": "dist/index.js",
   "type": "module",