@cursor/july 0.1.102 → 0.1.103

package/dist/channels/bitbucket/binding.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"binding.d.ts","sourceRoot":"","sources":["../../../src/channels/bitbucket/binding.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EACL,KAAK,YAAY,EACjB,KAAK,yBAAyB,EAE9B,KAAK,uBAAuB,EAC5B,KAAK,qBAAqB,EAC1B,KAAK,sBAAsB,EAI5B,MAAM,UAAU,CAAC;AAClB,OAAO,EACL,KAAK,cAAc,EACnB,KAAK,yBAAyB,EAE/B,MAAM,aAAa,CAAC;AACrB,OAAO,KAAK,EACV,gBAAgB,EAChB,2BAA2B,EAC3B,yBAAyB,EACzB,aAAa,EACb,sBAAsB,EACtB,aAAa,EACd,MAAM,YAAY,CAAC;AAEpB,kFAAkF;AAClF,MAAM,WAAW,eAAe;IAC9B,UAAU,EAAE,sBAAsB,CAAC;IACnC,8EAA8E;IAC9E,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC;IAC3B,iFAAiF;IACjF,OAAO,CAAC,CAAC,GAAG,OAAO,EAAE,KAAK,EAAE,qBAAqB,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IAC/D,6CAA6C;IAC7C,cAAc,CAAC,KAAK,EAAE,yBAAyB,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACnE,8DAA8D;IAC9D,WAAW,CACT,KAAK,EAAE,IAAI,CAAC,yBAAyB,EAAE,WAAW,CAAC,GAClD,OAAO,CAAC,cAAc,CAAC,CAAC;CAC5B;AAED;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE;IAC3C,UAAU,EAAE,sBAAsB,CAAC;IACnC,KAAK,CAAC,EAAE,uBAAuB,CAAC;IAChC,KAAK,CAAC,EAAE,MAAM,GAAG,sBAAsB,CAAC;IACxC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;CACtB,GAAG,eAAe,CAgClB;AAED,wBAAgB,QAAQ,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAI5E;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAInE;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAQhE;AAoBD,0DAA0D;AAC1D,wBAAgB,0BAA0B,CACxC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC/B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAErC;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC/B,gBAAgB,CASlB;AA0CD;;;GAGG;AACH,wBAAgB,8BAA8B,CAC5C,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC/B,sBAAsB,GAAG,SAAS,CASpC;AAED,8EAA8E;AAC9E,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,aAAa,GAAG,SAAS,CAyBvE;AAED,wBAAgB,uBAAuB,CACrC,UAAU,EAAE,sBAAsB,EAClC,EAAE,EAAE,MAAM,EACV,QAAQ,CAAC,EAAE,MAAM,GAChB,MAAM,CAUR;AAED;;;GAGG;AACH,wBAAgB,+BAA+B,CAC7C,UAAU,EAAE,sBAAsB,EAClC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAChC,MAAM,EAAE,MAAM,GACb,yBAAyB,GAAG,SAAS,CA4CvC;AAED,uDAAuD;AACvD,wBAAgB,2BAA2B,CACzC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC/B,2BAA2B,GAAG,SAAS,CAoCzC;AAED,4FAA4F;AAC5F,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC/B,aAAa,GAAG,SAAS,CAgD3B"}

package/dist/channels/bitbucket/binding.js

@@ -0,0 +1,269 @@
+/**
+ * Repository / pull-request binding parsed from a Bitbucket webhook payload,
+ * normalized across the two dialects.
+ *
+ * Cloud: top-level `repository` (`full_name`, `uuid`, `links.html.href`),
+ * `pullrequest` (`source.branch.name`, `source.commit.hash`, `links.html`),
+ * `comment.content.raw`, `push.changes[].new.target.hash`.
+ *
+ * Data Center: `pullRequest` (`fromRef.displayId`, `fromRef.latestCommit`,
+ * repo under `toRef.repository` as `project.key` + `slug`), `comment.text`,
+ * top-level `changes[].toHash` on `repo:refs_changed`, and `previousFromHash`
+ * on `pr:from_ref_updated`.
+ */
+import { bitbucketApiBaseUrl, createBitbucketApi, createBitbucketClient, } from "./api.js";
+import { createBitbucketCheck, } from "./checks.js";
+/**
+ * Build `ctx.bitbucket` for one delivery. Lazy: no credential is resolved
+ * until the first call, so channels without outbound Bitbucket access still
+ * dispatch. Proxy mode (`cursorAccount` + `--cursor-scm-proxy`) wins when
+ * the host bound a transport; otherwise direct access with `token` /
+ * `BITBUCKET_TOKEN` against the dialect's API base.
+ */
+export function buildBitbucketBinding(input) {
+    let client;
+    let api;
+    const getClient = () => {
+        var _a;
+        client !== null && client !== void 0 ? client : (client = createBitbucketClient({
+            proxy: input.proxy,
+            token: input.token,
+            // Never derive the credentialed host from the delivery's repository
+            // link: a signed-but-forged payload must not choose where the token
+            // goes. Data Center deploys set BITBUCKET_API_BASE_URL / apiBaseUrl.
+            apiBaseUrl: (_a = input.apiBaseUrl) !== null && _a !== void 0 ? _a : bitbucketApiBaseUrl({ dialect: input.repository.dialect }),
+            repo: input.repository.fullName,
+            fetch: input.fetch,
+        }));
+        return client;
+    };
+    const getApi = () => {
+        api !== null && api !== void 0 ? api : (api = createBitbucketApi(getClient(), input.repository));
+        return api;
+    };
+    return {
+        repository: input.repository,
+        get api() {
+            return getApi();
+        },
+        request: (request) => getClient().request(request),
+        setBuildStatus: (status) => getApi().setBuildStatus(status),
+        createCheck: (check) => createBitbucketCheck(Object.assign(Object.assign({}, check), { bitbucket: getApi() })),
+    };
+}
+export function asRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value)
+        ? value
+        : undefined;
+}
+export function asNonEmptyString(value) {
+    return typeof value === "string" && value.trim() !== ""
+        ? value.trim()
+        : undefined;
+}
+export function asPositiveInt(value) {
+    if (typeof value === "number" && Number.isInteger(value) && value > 0) {
+        return value;
+    }
+    if (typeof value === "string" && /^[1-9]\d*$/.test(value)) {
+        return Number(value);
+    }
+    return undefined;
+}
+function asBoolean(value) {
+    return typeof value === "boolean" ? value : undefined;
+}
+/** Data Center `links.self[0].href`; Cloud `links.html.href`. */
+function linkHref(links) {
+    var _a, _b, _c;
+    const record = asRecord(links);
+    const html = asNonEmptyString((_a = asRecord(record === null || record === void 0 ? void 0 : record.html)) === null || _a === void 0 ? void 0 : _a.href);
+    if (html !== undefined) {
+        return html;
+    }
+    const self = record === null || record === void 0 ? void 0 : record.self;
+    if (Array.isArray(self)) {
+        return asNonEmptyString((_b = asRecord(self[0])) === null || _b === void 0 ? void 0 : _b.href);
+    }
+    return asNonEmptyString((_c = asRecord(self)) === null || _c === void 0 ? void 0 : _c.href);
+}
+/** The pull-request record under either dialect's key. */
+export function bitbucketPullRequestRecord(payload) {
+    var _a;
+    return (_a = asRecord(payload.pullrequest)) !== null && _a !== void 0 ? _a : asRecord(payload.pullRequest);
+}
+/**
+ * Cloud bodies carry `pullrequest` / `repository.full_name`; Data Center
+ * bodies carry `pullRequest` / `repository.project.key`. Unknown shapes
+ * default to Cloud, the dialect the hosted ingress normalizes toward.
+ */
+export function bitbucketDialectOf(payload) {
+    var _a;
+    if (asRecord(payload.pullRequest) !== undefined ||
+        asNonEmptyString(payload.eventKey) !== undefined ||
+        asRecord((_a = asRecord(payload.repository)) === null || _a === void 0 ? void 0 : _a.project) !== undefined) {
+        return "data-center";
+    }
+    return "cloud";
+}
+function repositoryFromRecord(dialect, repository) {
+    var _a;
+    if (repository === undefined) {
+        return undefined;
+    }
+    const htmlUrl = linkHref(repository.links);
+    const fullName = asNonEmptyString(repository.full_name);
+    if (fullName !== undefined) {
+        const [owner, ...rest] = fullName.split("/");
+        if (owner === undefined || rest.length === 0) {
+            return undefined;
+        }
+        const uuid = asNonEmptyString(repository.uuid);
+        return Object.assign(Object.assign({ dialect,
+            fullName,
+            owner, slug: rest.join("/") }, (uuid === undefined ? {} : { uuid })), (htmlUrl === undefined ? {} : { htmlUrl }));
+    }
+    const projectKey = asNonEmptyString((_a = asRecord(repository.project)) === null || _a === void 0 ? void 0 : _a.key);
+    const slug = asNonEmptyString(repository.slug);
+    if (projectKey === undefined || slug === undefined) {
+        return undefined;
+    }
+    const id = asPositiveInt(repository.id);
+    return Object.assign(Object.assign({ dialect, fullName: `${projectKey}/${slug}`, owner: projectKey, slug }, (id === undefined ? {} : { id })), (htmlUrl === undefined ? {} : { htmlUrl }));
+}
+/**
+ * Repository the delivery is about. Top-level `repository` (Cloud always;
+ * DC on `repo:*`), else the DC pull request's `toRef.repository`.
+ */
+export function bitbucketRepositoryFromPayload(payload) {
+    var _a, _b;
+    var _c;
+    const dialect = bitbucketDialectOf(payload);
+    return ((_c = repositoryFromRecord(dialect, asRecord(payload.repository))) !== null && _c !== void 0 ? _c : repositoryFromRecord(dialect, asRecord((_b = asRecord((_a = bitbucketPullRequestRecord(payload)) === null || _a === void 0 ? void 0 : _a.toRef)) === null || _b === void 0 ? void 0 : _b.repository)));
+}
+/** Cloud `{uuid, display_name, nickname}` or DC `{id, name, displayName}`. */
+export function bitbucketUser(value) {
+    var _a, _b, _c, _d, _e;
+    const record = asRecord(value);
+    if (record === undefined) {
+        return undefined;
+    }
+    // DC wraps PR authors as `{ user: {...}, role, approved }`.
+    const user = (_a = asRecord(record.user)) !== null && _a !== void 0 ? _a : record;
+    const id = (_c = (_b = asNonEmptyString(user.uuid)) !== null && _b !== void 0 ? _b : asNonEmptyString(user.account_id)) !== null && _c !== void 0 ? _c : (asPositiveInt(user.id) === undefined
+        ? undefined
+        : String(asPositiveInt(user.id)));
+    if (id === undefined) {
+        return undefined;
+    }
+    const displayName = (_d = asNonEmptyString(user.display_name)) !== null && _d !== void 0 ? _d : asNonEmptyString(user.displayName);
+    const username = (_e = asNonEmptyString(user.nickname)) !== null && _e !== void 0 ? _e : asNonEmptyString(user.name);
+    return Object.assign(Object.assign({ id }, (displayName === undefined ? {} : { displayName })), (username === undefined ? {} : { username }));
+}
+export function bitbucketPullRequestUrl(repository, id, explicit) {
+    var _a;
+    if (explicit !== undefined) {
+        return explicit;
+    }
+    if (repository.dialect === "cloud") {
+        return `${(_a = repository.htmlUrl) !== null && _a !== void 0 ? _a : `https://bitbucket.org/${repository.fullName}`}/pull-requests/${id}`;
+    }
+    return repository.htmlUrl === undefined
+        ? `projects/${repository.owner}/repos/${repository.slug}/pull-requests/${id}`
+        : `${repository.htmlUrl.replace(/\/browse\/?$/, "")}/pull-requests/${id}`;
+}
+/**
+ * Normalize the pull request from either dialect. `action` is the suffix of
+ * the Cloud-normalized event key (`pullrequest:created` → `created`).
+ */
+export function bitbucketPullRequestFromPayload(repository, payload, action) {
+    var _a, _b, _c;
+    var _d, _e, _f;
+    const record = bitbucketPullRequestRecord(payload);
+    const id = asPositiveInt(record === null || record === void 0 ? void 0 : record.id);
+    if (record === undefined || id === undefined) {
+        return undefined;
+    }
+    const description = record.description === null
+        ? null
+        : typeof record.description === "string"
+            ? record.description
+            : undefined;
+    const source = asRecord(record.source);
+    const destination = asRecord(record.destination);
+    const fromRef = asRecord(record.fromRef);
+    const toRef = asRecord(record.toRef);
+    const sourceBranch = (_d = asNonEmptyString((_a = asRecord(source === null || source === void 0 ? void 0 : source.branch)) === null || _a === void 0 ? void 0 : _a.name)) !== null && _d !== void 0 ? _d : asNonEmptyString(fromRef === null || fromRef === void 0 ? void 0 : fromRef.displayId);
+    const targetBranch = (_e = asNonEmptyString((_b = asRecord(destination === null || destination === void 0 ? void 0 : destination.branch)) === null || _b === void 0 ? void 0 : _b.name)) !== null && _e !== void 0 ? _e : asNonEmptyString(toRef === null || toRef === void 0 ? void 0 : toRef.displayId);
+    const headSha = (_f = asNonEmptyString((_c = asRecord(source === null || source === void 0 ? void 0 : source.commit)) === null || _c === void 0 ? void 0 : _c.hash)) !== null && _f !== void 0 ? _f : asNonEmptyString(fromRef === null || fromRef === void 0 ? void 0 : fromRef.latestCommit);
+    const previousHeadSha = asNonEmptyString(payload.previousFromHash);
+    const author = bitbucketUser(record.author);
+    const title = asNonEmptyString(record.title);
+    const state = asNonEmptyString(record.state);
+    const draft = asBoolean(record.draft);
+    return Object.assign(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign({ action,
+        id }, (title === undefined ? {} : { title })), (description === undefined ? {} : { description })), (state === undefined ? {} : { state })), (draft === undefined ? {} : { draft })), (sourceBranch === undefined ? {} : { sourceBranch })), (targetBranch === undefined ? {} : { targetBranch })), (headSha === undefined ? {} : { headSha })), (previousHeadSha === undefined ? {} : { previousHeadSha })), (author === undefined ? {} : { author })), { htmlUrl: bitbucketPullRequestUrl(repository, id, linkHref(record.links)) });
+}
+/** Cloud `comment.content.raw` / DC `comment.text`. */
+export function bitbucketCommentFromPayload(payload) {
+    var _a, _b;
+    var _c;
+    const comment = asRecord(payload.comment);
+    const id = asPositiveInt(comment === null || comment === void 0 ? void 0 : comment.id);
+    const body = typeof ((_a = asRecord(comment === null || comment === void 0 ? void 0 : comment.content)) === null || _a === void 0 ? void 0 : _a.raw) === "string"
+        ? (_b = asRecord(comment === null || comment === void 0 ? void 0 : comment.content)) === null || _b === void 0 ? void 0 : _b.raw
+        : typeof (comment === null || comment === void 0 ? void 0 : comment.text) === "string"
+            ? comment.text
+            : undefined;
+    if (comment === undefined || id === undefined || body === undefined) {
+        return undefined;
+    }
+    const author = bitbucketUser((_c = comment.user) !== null && _c !== void 0 ? _c : comment.author);
+    const htmlUrl = linkHref(comment.links);
+    const inlineRecord = asRecord(comment.inline);
+    const inline = inlineRecord === undefined
+        ? undefined
+        : Object.assign(Object.assign(Object.assign({}, (asNonEmptyString(inlineRecord.path) === undefined
+            ? {}
+            : { path: asNonEmptyString(inlineRecord.path) })), (typeof inlineRecord.to === "number"
+            ? { to: inlineRecord.to }
+            : {})), (typeof inlineRecord.from === "number"
+            ? { from: inlineRecord.from }
+            : {}));
+    return Object.assign(Object.assign(Object.assign({ id,
+        body }, (author === undefined ? {} : { author })), (htmlUrl === undefined ? {} : { htmlUrl })), (inline === undefined ? {} : { inline }));
+}
+/** Cloud `push.changes[]` (`new`/`old` targets) or DC `changes[]` (`toHash`/`fromHash`). */
+export function bitbucketPushFromPayload(payload) {
+    var _a;
+    const cloudChanges = (_a = asRecord(payload.push)) === null || _a === void 0 ? void 0 : _a.changes;
+    const changes = Array.isArray(cloudChanges)
+        ? cloudChanges
+        : Array.isArray(payload.changes)
+            ? payload.changes
+            : undefined;
+    if (changes === undefined) {
+        return undefined;
+    }
+    return {
+        changes: changes.flatMap((entry) => {
+            var _a, _b, _c;
+            var _d, _e, _f, _g, _h, _j, _k, _l;
+            const change = asRecord(entry);
+            if (change === undefined) {
+                return [];
+            }
+            const next = asRecord(change.new);
+            const previous = asRecord(change.old);
+            const ref = asRecord(change.ref);
+            const name = (_e = (_d = asNonEmptyString(next === null || next === void 0 ? void 0 : next.name)) !== null && _d !== void 0 ? _d : asNonEmptyString(previous === null || previous === void 0 ? void 0 : previous.name)) !== null && _e !== void 0 ? _e : asNonEmptyString(ref === null || ref === void 0 ? void 0 : ref.displayId);
+            const refId = (_g = (_f = asNonEmptyString(change.refId)) !== null && _f !== void 0 ? _f : asNonEmptyString(ref === null || ref === void 0 ? void 0 : ref.id)) !== null && _g !== void 0 ? _g : (name === undefined ? undefined : `refs/heads/${name}`);
+            const type = (_j = (_h = asNonEmptyString(next === null || next === void 0 ? void 0 : next.type)) !== null && _h !== void 0 ? _h : asNonEmptyString(previous === null || previous === void 0 ? void 0 : previous.type)) !== null && _j !== void 0 ? _j : (_a = asNonEmptyString(ref === null || ref === void 0 ? void 0 : ref.type)) === null || _a === void 0 ? void 0 : _a.toLowerCase();
+            const before = (_k = asNonEmptyString((_b = asRecord(previous === null || previous === void 0 ? void 0 : previous.target)) === null || _b === void 0 ? void 0 : _b.hash)) !== null && _k !== void 0 ? _k : asNonEmptyString(change.fromHash);
+            const after = (_l = asNonEmptyString((_c = asRecord(next === null || next === void 0 ? void 0 : next.target)) === null || _c === void 0 ? void 0 : _c.hash)) !== null && _l !== void 0 ? _l : asNonEmptyString(change.toHash);
+            return [
+                Object.assign(Object.assign(Object.assign(Object.assign(Object.assign({}, (refId === undefined ? {} : { ref: refId })), (name === undefined ? {} : { name })), (before === undefined ? {} : { before })), (after === undefined ? {} : { after })), (type === undefined ? {} : { type })),
+            ];
+        }),
+    };
+}

package/dist/channels/bitbucket/bitbucket-channel.d.ts

@@ -0,0 +1,33 @@
+import type { ChannelDefinition } from "../../types.js";
+import { type BitbucketChannelState } from "./state.js";
+import type { BitbucketChannelOptions } from "./types.js";
+export declare function getBitbucketChannelOptions(definition: object): BitbucketChannelOptions | undefined;
+export declare function bitbucketChannel(options?: BitbucketChannelOptions): ChannelDefinition<BitbucketChannelState>;
+/** Minimal mount shape shared by `serve` / the `bitbucket` CLI. */
+export interface BitbucketAgentMountLike {
+    slug: string;
+    project: {
+        channels: Array<{
+            id: string;
+            definition: {
+                meta?: {
+                    kind?: string;
+                    bitbucketWebhookEvents?: readonly string[];
+                };
+                routes?: ReadonlyArray<{
+                    method: string;
+                    path: string;
+                }>;
+            };
+        }>;
+    };
+}
+export interface BitbucketChannelTarget {
+    slug: string;
+    channelId: string;
+    /** Route path under the channel (default `/`). */
+    routePath: string;
+    events: string[];
+}
+export declare function findBitbucketChannelTargets(mounts: ReadonlyArray<BitbucketAgentMountLike>): BitbucketChannelTarget[];
+//# sourceMappingURL=bitbucket-channel.d.ts.map

package/dist/channels/bitbucket/bitbucket-channel.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bitbucket-channel.d.ts","sourceRoot":"","sources":["../../../src/channels/bitbucket/bitbucket-channel.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAgBxD,OAAO,EACL,KAAK,qBAAqB,EAE3B,MAAM,YAAY,CAAC;AACpB,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,YAAY,CAAC;AAO1D,wBAAgB,0BAA0B,CACxC,UAAU,EAAE,MAAM,GACjB,uBAAuB,GAAG,SAAS,CAErC;AAED,wBAAgB,gBAAgB,CAC9B,OAAO,GAAE,uBAA4B,GACpC,iBAAiB,CAAC,qBAAqB,CAAC,CAwF1C;AAED,mEAAmE;AACnE,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE;QACP,QAAQ,EAAE,KAAK,CAAC;YACd,EAAE,EAAE,MAAM,CAAC;YACX,UAAU,EAAE;gBACV,IAAI,CAAC,EAAE;oBAAE,IAAI,CAAC,EAAE,MAAM,CAAC;oBAAC,sBAAsB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;iBAAE,CAAC;gBACrE,MAAM,CAAC,EAAE,aAAa,CAAC;oBAAE,MAAM,EAAE,MAAM,CAAC;oBAAC,IAAI,EAAE,MAAM,CAAA;iBAAE,CAAC,CAAC;aAC1D,CAAC;SACH,CAAC,CAAC;KACJ,CAAC;CACH;AAED,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,kDAAkD;IAClD,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAED,wBAAgB,2BAA2B,CACzC,MAAM,EAAE,aAAa,CAAC,uBAAuB,CAAC,GAC7C,sBAAsB,EAAE,CAoB1B"}

package/dist/channels/bitbucket/bitbucket-channel.js

@@ -0,0 +1,120 @@
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+import { z } from "zod";
+import { allowAll, defineChannel, localDevStrict, loopbackOnly, POST, } from "../../channels.js";
+import { withPropagatingBackgroundErrors } from "../../internal/channel-dispatch.js";
+import { normalizeIdentity } from "../../internal/continuation-identity.js";
+import { isDevMode } from "../../internal/dev-mode.js";
+import { attachHostedAdmissionAdapter } from "../../internal/hosted-admission-adapter.js";
+import { dispatchBitbucketWebhook, handleBitbucketWebhookRequest, parseBitbucketWebhookPayload, resolveBitbucketWebhookSecret, } from "./bitbucket-webhook.js";
+import { createPendingCursorBitbucketCredentials, parseCursorBitbucketRepoScope, registerBitbucketCursorAccountRuntime, } from "./cursor-account.js";
+import { BITBUCKET_CHANNEL_KIND, deriveBitbucketWebhookEvents, } from "./events.js";
+import { emptyBitbucketChannelState, } from "./state.js";
+const bitbucketChannelOptionsByDefinition = new WeakMap();
+export function getBitbucketChannelOptions(definition) {
+    return bitbucketChannelOptionsByDefinition.get(definition);
+}
+export function bitbucketChannel(options = {}) {
+    var _a, _b, _c;
+    const routePath = (_a = options.path) !== null && _a !== void 0 ? _a : "/";
+    // With a hook secret the `X-Hub-Signature` HMAC is the request auth
+    // (allowAll), matching GitHub HMAC + webhookSecret. Without one, prod stays
+    // loopback-strict; `--dev` admits loopback only. `isDevMode()` and the
+    // secret are read per request: channel modules construct at import time.
+    const auth = (_b = options.auth) !== null && _b !== void 0 ? _b : [
+        (request, info) => (resolveBitbucketWebhookSecret(options) !== undefined
+            ? allowAll()
+            : isDevMode()
+                ? loopbackOnly()
+                : localDevStrict())(request, info),
+    ];
+    const channelOptions = Object.assign({}, options);
+    if (channelOptions.continuation !== undefined) {
+        channelOptions.continuation = normalizeIdentity(channelOptions.continuation, BITBUCKET_CHANNEL_KIND);
+    }
+    // `cursorAccount` routes `ctx.bitbucket` through the SCM proxy once the
+    // serve host binds the Cursor API key + transport (`--cursor-scm-proxy`).
+    const cursorAccount = options.cursorAccount === undefined || options.cursorAccount === false
+        ? undefined
+        : {
+            credentials: createPendingCursorBitbucketCredentials(),
+            scope: typeof options.cursorAccount === "object"
+                ? parseCursorBitbucketRepoScope(options.cursorAccount.repos)
+                : undefined,
+        };
+    const proxy = () => cursorAccount === null || cursorAccount === void 0 ? void 0 : cursorAccount.credentials.getProxyTransport();
+    const definition = defineChannel({
+        auth,
+        state: emptyBitbucketChannelState(),
+        events: (_c = options.events) !== null && _c !== void 0 ? _c : {},
+        onStart: options.onStart,
+        onStop: options.onStop,
+        meta: {
+            kind: BITBUCKET_CHANNEL_KIND,
+            bitbucketWebhookEvents: deriveBitbucketWebhookEvents(channelOptions),
+        },
+        routes: [
+            POST(routePath, {
+                bodySchema: z.unknown(),
+                description: "Bitbucket webhook ingress",
+                handler: (request, args) => __awaiter(this, void 0, void 0, function* () {
+                    return handleBitbucketWebhookRequest({
+                        options: channelOptions,
+                        request,
+                        args,
+                        proxy,
+                    });
+                }),
+            }),
+        ],
+    });
+    bitbucketChannelOptionsByDefinition.set(definition, channelOptions);
+    if (cursorAccount !== undefined) {
+        registerBitbucketCursorAccountRuntime(definition, Object.assign({ options: channelOptions }, cursorAccount));
+    }
+    attachHostedAdmissionAdapter(definition, {
+        kind: BITBUCKET_CHANNEL_KIND,
+        prepareArgs: withPropagatingBackgroundErrors,
+        dispatch: (_a) => __awaiter(this, [_a], void 0, function* ({ eventType, payload, deliveryId, args }) {
+            const delivery = parseBitbucketWebhookPayload(payload, eventType);
+            if (delivery === null) {
+                return Response.json({ ok: false, error: "invalid_bitbucket_payload" }, { status: 400 });
+            }
+            delivery.deliveryId = deliveryId;
+            return dispatchBitbucketWebhook({
+                options: channelOptions,
+                delivery,
+                args,
+                proxy,
+            });
+        }),
+    });
+    return definition;
+}
+export function findBitbucketChannelTargets(mounts) {
+    var _a, _b, _c;
+    const targets = [];
+    for (const { slug, project } of mounts) {
+        for (const channel of project.channels) {
+            const meta = channel.definition.meta;
+            if ((meta === null || meta === void 0 ? void 0 : meta.kind) !== BITBUCKET_CHANNEL_KIND) {
+                continue;
+            }
+            const postRoute = ((_a = channel.definition.routes) !== null && _a !== void 0 ? _a : []).find((route) => route.method === "POST");
+            targets.push({
+                slug,
+                channelId: channel.id,
+                routePath: (_b = postRoute === null || postRoute === void 0 ? void 0 : postRoute.path) !== null && _b !== void 0 ? _b : "/",
+                events: [...((_c = meta.bitbucketWebhookEvents) !== null && _c !== void 0 ? _c : [])],
+            });
+        }
+    }
+    return targets;
+}

package/dist/channels/bitbucket/bitbucket-webhook.d.ts

@@ -0,0 +1,61 @@
+import type { ChannelHandlerArgs } from "../../types.js";
+import type { BitbucketProxyTransport } from "./api.js";
+import type { BitbucketChannelOptions, BitbucketEventContext, BitbucketWebhookDelivery } from "./types.js";
+/** `BITBUCKET_WEBHOOK_SECRET` fallback for {@link BitbucketChannelOptions.webhookSecret}. */
+export declare function envBitbucketWebhookSecret(): string | undefined;
+export declare function resolveBitbucketWebhookSecret(options: Pick<BitbucketChannelOptions, "webhookSecret">): string | undefined;
+/** The `X-Hub-Signature` value Bitbucket sends for a raw body. */
+export declare function signBitbucketWebhookBody(rawBody: string | Buffer, secret: string): string;
+/**
+ * Both dialects sign the raw body with HMAC-SHA256 in `X-Hub-Signature`
+ * (`sha256=<hex>`, GitHub-shaped). Constant-time compare; a missing or
+ * malformed header is a plain `false`.
+ */
+export declare function verifyBitbucketWebhookSignature(rawBody: string | Buffer, signatureHeader: string | null | undefined, secret: string): boolean;
+/**
+ * Accept a raw Bitbucket payload plus the event key. The key comes from
+ * `X-Event-Key` (HTTP) or the hosted envelope; Data Center bodies also carry
+ * it as `eventKey`. Data Center keys are normalized to the Cloud vocabulary.
+ *
+ * The body's `eventKey` is authoritative when present: `X-Hub-Signature`
+ * covers the body but not the header, so a captured signed Data Center
+ * delivery must not be re-dispatched as a different event by rewriting the
+ * header. A header that disagrees with the signed body rejects the delivery.
+ *
+ * Cloud bodies carry no `eventKey`, but each event family has a signed
+ * discriminator object (`comment`, `approval`, `changes_request`, `push`).
+ * A header naming a family the body does not match — e.g. a signed
+ * `pullrequest:comment_created` body replayed as `pullrequest:created` —
+ * is rejected the same way. `created` vs `updated` bodies are shape-identical
+ * and cannot be told apart without the key.
+ */
+export declare function parseBitbucketWebhookPayload(payload: unknown, eventKey?: string | null): BitbucketWebhookDelivery | null;
+export declare function parseBitbucketEventContext(delivery: BitbucketWebhookDelivery): Omit<BitbucketEventContext, "host" | "artifacts" | "bitbucket" | "send"> | null;
+/**
+ * Run the authored hooks for one Bitbucket delivery and `send()` the turn.
+ * Callers own delivery auth: the HTTP route verifies `X-Hub-Signature`;
+ * hosted admission arrives verified. The v2 mailbox is stamped upstream
+ * (local CP or hosted ingress), never here.
+ */
+export declare function dispatchBitbucketWebhook(input: {
+    options: BitbucketChannelOptions;
+    delivery: BitbucketWebhookDelivery;
+    args: ChannelHandlerArgs;
+    /** Host-bound SCM-proxy transport (`cursorAccount` + `--cursor-scm-proxy`). */
+    proxy?: () => BitbucketProxyTransport | undefined;
+}): Promise<Response>;
+/**
+ * HTTP entry for a single agent's Bitbucket channel: `X-Hub-Signature` HMAC
+ * when a secret is configured, then {@link dispatchBitbucketWebhook}.
+ * Without a secret the route auth owns admission (`serve --dev` admits
+ * loopback only; production stays loopback-strict).
+ */
+export declare function handleBitbucketWebhookRequest(input: {
+    options: BitbucketChannelOptions;
+    request: Request;
+    args: ChannelHandlerArgs;
+    /** When true, skip the HMAC check even if a secret is configured. */
+    skipSignatureVerification?: boolean;
+    proxy?: () => BitbucketProxyTransport | undefined;
+}): Promise<Response>;
+//# sourceMappingURL=bitbucket-webhook.d.ts.map

package/dist/channels/bitbucket/bitbucket-webhook.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bitbucket-webhook.d.ts","sourceRoot":"","sources":["../../../src/channels/bitbucket/bitbucket-webhook.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAEV,kBAAkB,EAEnB,MAAM,gBAAgB,CAAC;AACxB,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,UAAU,CAAC;AA4BxD,OAAO,KAAK,EACV,uBAAuB,EAEvB,qBAAqB,EAGrB,wBAAwB,EACzB,MAAM,YAAY,CAAC;AAEpB,6FAA6F;AAC7F,wBAAgB,yBAAyB,IAAI,MAAM,GAAG,SAAS,CAG9D;AAED,wBAAgB,6BAA6B,CAC3C,OAAO,EAAE,IAAI,CAAC,uBAAuB,EAAE,eAAe,CAAC,GACtD,MAAM,GAAG,SAAS,CASpB;AAID,kEAAkE;AAClE,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,MAAM,GAAG,MAAM,EACxB,MAAM,EAAE,MAAM,GACb,MAAM,CAER;AAED;;;;GAIG;AACH,wBAAgB,+BAA+B,CAC7C,OAAO,EAAE,MAAM,GAAG,MAAM,EACxB,eAAe,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EAC1C,MAAM,EAAE,MAAM,GACb,OAAO,CAgBT;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,4BAA4B,CAC1C,OAAO,EAAE,OAAO,EAChB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,GACvB,wBAAwB,GAAG,IAAI,CA+BjC;AA+ED,wBAAgB,0BAA0B,CACxC,QAAQ,EAAE,wBAAwB,GACjC,IAAI,CACL,qBAAqB,EACrB,MAAM,GAAG,WAAW,GAAG,WAAW,GAAG,MAAM,CAC5C,GAAG,IAAI,CA2BP;AA8GD;;;;;GAKG;AACH,wBAAsB,wBAAwB,CAAC,KAAK,EAAE;IACpD,OAAO,EAAE,uBAAuB,CAAC;IACjC,QAAQ,EAAE,wBAAwB,CAAC;IACnC,IAAI,EAAE,kBAAkB,CAAC;IACzB,+EAA+E;IAC/E,KAAK,CAAC,EAAE,MAAM,uBAAuB,GAAG,SAAS,CAAC;CACnD,GAAG,OAAO,CAAC,QAAQ,CAAC,CA2HpB;AAED;;;;;GAKG;AACH,wBAAsB,6BAA6B,CAAC,KAAK,EAAE;IACzD,OAAO,EAAE,uBAAuB,CAAC;IACjC,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,EAAE,kBAAkB,CAAC;IACzB,qEAAqE;IACrE,yBAAyB,CAAC,EAAE,OAAO,CAAC;IACpC,KAAK,CAAC,EAAE,MAAM,uBAAuB,GAAG,SAAS,CAAC;CACnD,GAAG,OAAO,CAAC,QAAQ,CAAC,CA8CpB"}