@generacy-ai/generacy-plugin-jira 0.0.0-preview-20260304013206

package/dist/webhooks/parser.js

@@ -0,0 +1,155 @@
+/**
+ * Parse a raw webhook payload into a typed event
+ */
+export function parseWebhookPayload(payload) {
+    if (!payload || typeof payload !== 'object') {
+        throw new Error('Invalid webhook payload: expected object');
+    }
+    const data = payload;
+    if (!data.webhookEvent || typeof data.webhookEvent !== 'string') {
+        throw new Error('Invalid webhook payload: missing webhookEvent');
+    }
+    // The payload structure varies by event type, but we can cast safely
+    // since Jira sends consistent payloads per event type
+    return data;
+}
+/**
+ * Extract changes from a changelog
+ */
+export function extractChanges(changelog) {
+    return changelog?.items ?? [];
+}
+/**
+ * Check if a specific field was changed
+ */
+export function hasFieldChange(changelog, fieldName) {
+    return extractChanges(changelog).some((item) => item.field.toLowerCase() === fieldName.toLowerCase());
+}
+/**
+ * Get the change for a specific field
+ */
+export function getFieldChange(changelog, fieldName) {
+    return extractChanges(changelog).find((item) => item.field.toLowerCase() === fieldName.toLowerCase());
+}
+/**
+ * Determine the action type from an issue event
+ */
+function determineIssueActionType(event) {
+    if (event.webhookEvent === 'jira:issue_created') {
+        return 'issue_created';
+    }
+    if (event.webhookEvent === 'jira:issue_deleted') {
+        return 'issue_deleted';
+    }
+    // For updates, check what changed
+    if (hasFieldChange(event.changelog, 'status')) {
+        return 'issue_transitioned';
+    }
+    if (hasFieldChange(event.changelog, 'assignee')) {
+        const assigneeChange = getFieldChange(event.changelog, 'assignee');
+        if (assigneeChange?.to === null || assigneeChange?.toString === null) {
+            return 'issue_unassigned';
+        }
+        return 'issue_assigned';
+    }
+    if (hasFieldChange(event.changelog, 'priority')) {
+        return 'priority_changed';
+    }
+    if (hasFieldChange(event.changelog, 'labels')) {
+        return 'labels_changed';
+    }
+    return 'issue_updated';
+}
+/**
+ * Determine the action type from a comment event
+ */
+function determineCommentActionType(event) {
+    switch (event.webhookEvent) {
+        case 'comment_created':
+            return 'comment_added';
+        case 'comment_updated':
+            return 'comment_updated';
+        case 'comment_deleted':
+            return 'comment_deleted';
+    }
+}
+/**
+ * Parse webhook event into a normalized action
+ */
+export function parseWebhookAction(event) {
+    const base = {
+        type: 'unknown',
+        timestamp: new Date(event.timestamp),
+        userId: event.user?.accountId,
+        userDisplayName: event.user?.displayName,
+    };
+    // Handle issue events
+    if (event.webhookEvent.startsWith('jira:issue_')) {
+        const issueEvent = event;
+        const action = {
+            ...base,
+            type: determineIssueActionType(issueEvent),
+            issueKey: issueEvent.issue?.key,
+            issueId: issueEvent.issue?.id,
+            changes: extractChanges(issueEvent.changelog),
+        };
+        // Add status transition details
+        if (action.type === 'issue_transitioned') {
+            const statusChange = getFieldChange(issueEvent.changelog, 'status');
+            action.previousStatus = statusChange?.fromString ?? undefined;
+            action.newStatus = statusChange?.toString ?? undefined;
+        }
+        // Add assignee details
+        if (action.type === 'issue_assigned' || action.type === 'issue_unassigned') {
+            const assigneeChange = getFieldChange(issueEvent.changelog, 'assignee');
+            action.previousAssignee = assigneeChange?.fromString ?? undefined;
+            action.newAssignee = assigneeChange?.toString ?? undefined;
+        }
+        return action;
+    }
+    // Handle comment events
+    if (event.webhookEvent.startsWith('comment_')) {
+        const commentEvent = event;
+        return {
+            ...base,
+            type: determineCommentActionType(commentEvent),
+            issueKey: commentEvent.issue?.key,
+            issueId: commentEvent.issue?.id,
+        };
+    }
+    // Handle sprint events
+    if (event.webhookEvent.startsWith('sprint_')) {
+        switch (event.webhookEvent) {
+            case 'sprint_started':
+                return { ...base, type: 'sprint_started' };
+            case 'sprint_closed':
+                return { ...base, type: 'sprint_closed' };
+        }
+    }
+    return base;
+}
+/**
+ * Check if an event is for a specific issue
+ */
+export function isEventForIssue(event, issueKey) {
+    if ('issue' in event && event.issue) {
+        return event.issue.key === issueKey;
+    }
+    return false;
+}
+/**
+ * Check if an event involves a specific user
+ */
+export function isEventByUser(event, accountId) {
+    return event.user?.accountId === accountId;
+}
+/**
+ * Get the issue key from any webhook event
+ */
+export function getIssueKeyFromEvent(event) {
+    if ('issue' in event && event.issue) {
+        return event.issue.key;
+    }
+    return null;
+}
+//# sourceMappingURL=parser.js.map

package/dist/webhooks/parser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"parser.js","sourceRoot":"","sources":["../../src/webhooks/parser.ts"],"names":[],"mappings":"AAUA;;GAEG;AACH,MAAM,UAAU,mBAAmB,CAAC,OAAgB;IAClD,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,CAAC;IAED,MAAM,IAAI,GAAG,OAAkC,CAAC;IAEhD,IAAI,CAAC,IAAI,CAAC,YAAY,IAAI,OAAO,IAAI,CAAC,YAAY,KAAK,QAAQ,EAAE,CAAC;QAChE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACnE,CAAC;IAED,qEAAqE;IACrE,sDAAsD;IACtD,OAAO,IAAmC,CAAC;AAC7C,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,SAAqB;IAClD,OAAO,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC;AAChC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc,CAC5B,SAAgC,EAChC,SAAiB;IAEjB,OAAO,cAAc,CAAC,SAAS,CAAC,CAAC,IAAI,CACnC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,SAAS,CAAC,WAAW,EAAE,CAC/D,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc,CAC5B,SAAgC,EAChC,SAAiB;IAEjB,OAAO,cAAc,CAAC,SAAS,CAAC,CAAC,IAAI,CACnC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,SAAS,CAAC,WAAW,EAAE,CAC/D,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAS,wBAAwB,CAAC,KAAqB;IACrD,IAAI,KAAK,CAAC,YAAY,KAAK,oBAAoB,EAAE,CAAC;QAChD,OAAO,eAAe,CAAC;IACzB,CAAC;IAED,IAAI,KAAK,CAAC,YAAY,KAAK,oBAAoB,EAAE,CAAC;QAChD,OAAO,eAAe,CAAC;IACzB,CAAC;IAED,kCAAkC;IAClC,IAAI,cAAc,CAAC,KAAK,CAAC,SAAS,EAAE,QAAQ,CAAC,EAAE,CAAC;QAC9C,OAAO,oBAAoB,CAAC;IAC9B,CAAC;IAED,IAAI,cAAc,CAAC,KAAK,CAAC,SAAS,EAAE,UAAU,CAAC,EAAE,CAAC;QAChD,MAAM,cAAc,GAAG,cAAc,CAAC,KAAK,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;QACnE,IAAI,cAAc,EAAE,EAAE,KAAK,IAAI,IAAI,cAAc,EAAE,QAAQ,KAAK,IAAI,EAAE,CAAC;YACrE,OAAO,kBAAkB,CAAC;QAC5B,CAAC;QACD,OAAO,gBAAgB,CAAC;IAC1B,CAAC;IAED,IAAI,cAAc,CAAC,KAAK,CAAC,SAAS,EAAE,UAAU,CAAC,EAAE,CAAC;QAChD,OAAO,kBAAkB,CAAC;IAC5B,CAAC;IAED,IAAI,cAAc,CAAC,KAAK,CAAC,SAAS,EAAE,QAAQ,CAAC,EAAE,CAAC;QAC9C,OAAO,gBAAgB,CAAC;IAC1B,CAAC;IAED,OAAO,eAAe,CAAC;AACzB,CAAC;AAED;;GAEG;AACH,SAAS,0BAA0B,CAAC,KAAuB;IACzD,QAAQ,KAAK,CAAC,YAAY,EAAE,CAAC;QAC3B,KAAK,iBAAiB;YACpB,OAAO,eAAe,CAAC;QACzB,KAAK,iBAAiB;YACpB,OAAO,iBAAiB,CAAC;QAC3B,KAAK,iBAAiB;YACpB,OAAO,iBAAiB,CAAC;IAC7B,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAAuB;IACxD,MAAM,IAAI,GAAkB;QAC1B,IAAI,EAAE,SAAS;QACf,SAAS,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC;QACpC,MAAM,EAAE,KAAK,CAAC,IAAI,EAAE,SAAS;QAC7B,eAAe,EAAE,KAAK,CAAC,IAAI,EAAE,WAAW;KACzC,CAAC;IAEF,sBAAsB;IACtB,IAAI,KAAK,CAAC,YAAY,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;QACjD,MAAM,UAAU,GAAG,KAAuB,CAAC;QAC3C,MAAM,MAAM,GAAkB;YAC5B,GAAG,IAAI;YACP,IAAI,EAAE,wBAAwB,CAAC,UAAU,CAAC;YAC1C,QAAQ,EAAE,UAAU,CAAC,KAAK,EAAE,GAAG;YAC/B,OAAO,EAAE,UAAU,CAAC,KAAK,EAAE,EAAE;YAC7B,OAAO,EAAE,cAAc,CAAC,UAAU,CAAC,SAAS,CAAC;SAC9C,CAAC;QAEF,gCAAgC;QAChC,IAAI,MAAM,CAAC,IAAI,KAAK,oBAAoB,EAAE,CAAC;YACzC,MAAM,YAAY,GAAG,cAAc,CAAC,UAAU,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;YACpE,MAAM,CAAC,cAAc,GAAG,YAAY,EAAE,UAAU,IAAI,SAAS,CAAC;YAC9D,MAAM,CAAC,SAAS,GAAG,YAAY,EAAE,QAAQ,IAAI,SAAS,CAAC;QACzD,CAAC;QAED,uBAAuB;QACvB,IAAI,MAAM,CAAC,IAAI,KAAK,gBAAgB,IAAI,MAAM,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;YAC3E,MAAM,cAAc,GAAG,cAAc,CAAC,UAAU,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;YACxE,MAAM,CAAC,gBAAgB,GAAG,cAAc,EAAE,UAAU,IAAI,SAAS,CAAC;YAClE,MAAM,CAAC,WAAW,GAAG,cAAc,EAAE,QAAQ,IAAI,SAAS,CAAC;QAC7D,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,wBAAwB;IACxB,IAAI,KAAK,CAAC,YAAY,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC9C,MAAM,YAAY,GAAG,KAAyB,CAAC;QAC/C,OAAO;YACL,GAAG,IAAI;YACP,IAAI,EAAE,0BAA0B,CAAC,YAAY,CAAC;YAC9C,QAAQ,EAAE,YAAY,CAAC,KAAK,EAAE,GAAG;YACjC,OAAO,EAAE,YAAY,CAAC,KAAK,EAAE,EAAE;SAChC,CAAC;IACJ,CAAC;IAED,uBAAuB;IACvB,IAAI,KAAK,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC7C,QAAQ,KAAK,CAAC,YAAY,EAAE,CAAC;YAC3B,KAAK,gBAAgB;gBACnB,OAAO,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC;YAC7C,KAAK,eAAe;gBAClB,OAAO,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC;QAC9C,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAC7B,KAAuB,EACvB,QAAgB;IAEhB,IAAI,OAAO,IAAI,KAAK,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;QACpC,OAAO,KAAK,CAAC,KAAK,CAAC,GAAG,KAAK,QAAQ,CAAC;IACtC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa,CAC3B,KAAuB,EACvB,SAAiB;IAEjB,OAAO,KAAK,CAAC,IAAI,EAAE,SAAS,KAAK,SAAS,CAAC;AAC7C,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAAC,KAAuB;IAC1D,IAAI,OAAO,IAAI,KAAK,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;QACpC,OAAO,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC;IACzB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/webhooks/types.d.ts

@@ -0,0 +1,94 @@
+import type { JiraUser, JiraIssue } from '../types/issues.js';
+import type { JiraComment } from '../types/events.js';
+import type { Sprint } from '../types/sprints.js';
+/**
+ * Jira webhook event types
+ */
+export type JiraEventType = 'jira:issue_created' | 'jira:issue_updated' | 'jira:issue_deleted' | 'comment_created' | 'comment_updated' | 'comment_deleted' | 'sprint_created' | 'sprint_updated' | 'sprint_started' | 'sprint_closed' | 'issuelink_created' | 'issuelink_deleted' | 'worklog_created' | 'worklog_updated' | 'worklog_deleted';
+/**
+ * Changelog item for tracking field changes
+ */
+export interface ChangelogItem {
+    field: string;
+    fieldtype: string;
+    fieldId: string;
+    from: string | null;
+    fromString: string | null;
+    to: string | null;
+    toString: string | null;
+}
+/**
+ * Changelog for issue updates
+ */
+export interface Changelog {
+    id: string;
+    items: ChangelogItem[];
+}
+/**
+ * Base webhook event structure
+ */
+export interface JiraWebhookEventBase {
+    webhookEvent: JiraEventType;
+    timestamp: number;
+    user: JiraUser;
+}
+/**
+ * Issue-related webhook events
+ */
+export interface JiraIssueEvent extends JiraWebhookEventBase {
+    webhookEvent: 'jira:issue_created' | 'jira:issue_updated' | 'jira:issue_deleted';
+    issue: JiraIssue;
+    changelog?: Changelog;
+}
+/**
+ * Comment-related webhook events
+ */
+export interface JiraCommentEvent extends JiraWebhookEventBase {
+    webhookEvent: 'comment_created' | 'comment_updated' | 'comment_deleted';
+    issue: JiraIssue;
+    comment: JiraComment;
+}
+/**
+ * Sprint-related webhook events
+ */
+export interface JiraSprintEvent extends JiraWebhookEventBase {
+    webhookEvent: 'sprint_created' | 'sprint_updated' | 'sprint_started' | 'sprint_closed';
+    sprint: Sprint;
+}
+/**
+ * Union type for all webhook events
+ */
+export type JiraWebhookEvent = JiraIssueEvent | JiraCommentEvent | JiraSprintEvent;
+/**
+ * Parsed webhook action types
+ */
+export type WebhookActionType = 'issue_created' | 'issue_updated' | 'issue_deleted' | 'issue_assigned' | 'issue_unassigned' | 'issue_transitioned' | 'comment_added' | 'comment_updated' | 'comment_deleted' | 'sprint_started' | 'sprint_closed' | 'priority_changed' | 'labels_changed' | 'unknown';
+/**
+ * Parsed webhook action with details
+ */
+export interface WebhookAction {
+    type: WebhookActionType;
+    issueKey?: string;
+    issueId?: string;
+    userId?: string;
+    userDisplayName?: string;
+    timestamp: Date;
+    changes?: ChangelogItem[];
+    previousStatus?: string;
+    newStatus?: string;
+    previousAssignee?: string;
+    newAssignee?: string;
+}
+/**
+ * Webhook handler callback signature
+ */
+export type WebhookHandler = (event: JiraWebhookEvent, action: WebhookAction) => Promise<void> | void;
+/**
+ * Webhook handler registration
+ */
+export interface WebhookHandlerRegistration {
+    eventTypes: JiraEventType[];
+    actionTypes?: WebhookActionType[];
+    handler: WebhookHandler;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/webhooks/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/webhooks/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAElD;;GAEG;AACH,MAAM,MAAM,aAAa,GACrB,oBAAoB,GACpB,oBAAoB,GACpB,oBAAoB,GACpB,iBAAiB,GACjB,iBAAiB,GACjB,iBAAiB,GACjB,gBAAgB,GAChB,gBAAgB,GAChB,gBAAgB,GAChB,eAAe,GACf,mBAAmB,GACnB,mBAAmB,GACnB,iBAAiB,GACjB,iBAAiB,GACjB,iBAAiB,CAAC;AAEtB;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,EAAE,EAAE,MAAM,GAAG,IAAI,CAAC;IAClB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB;AAED;;GAEG;AACH,MAAM,WAAW,SAAS;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,aAAa,EAAE,CAAC;CACxB;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,YAAY,EAAE,aAAa,CAAC;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,QAAQ,CAAC;CAChB;AAED;;GAEG;AACH,MAAM,WAAW,cAAe,SAAQ,oBAAoB;IAC1D,YAAY,EAAE,oBAAoB,GAAG,oBAAoB,GAAG,oBAAoB,CAAC;IACjF,KAAK,EAAE,SAAS,CAAC;IACjB,SAAS,CAAC,EAAE,SAAS,CAAC;CACvB;AAED;;GAEG;AACH,MAAM,WAAW,gBAAiB,SAAQ,oBAAoB;IAC5D,YAAY,EAAE,iBAAiB,GAAG,iBAAiB,GAAG,iBAAiB,CAAC;IACxE,KAAK,EAAE,SAAS,CAAC;IACjB,OAAO,EAAE,WAAW,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,eAAgB,SAAQ,oBAAoB;IAC3D,YAAY,EAAE,gBAAgB,GAAG,gBAAgB,GAAG,gBAAgB,GAAG,eAAe,CAAC;IACvF,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;GAEG;AACH,MAAM,MAAM,gBAAgB,GACxB,cAAc,GACd,gBAAgB,GAChB,eAAe,CAAC;AAEpB;;GAEG;AACH,MAAM,MAAM,iBAAiB,GACzB,eAAe,GACf,eAAe,GACf,eAAe,GACf,gBAAgB,GAChB,kBAAkB,GAClB,oBAAoB,GACpB,eAAe,GACf,iBAAiB,GACjB,iBAAiB,GACjB,gBAAgB,GAChB,eAAe,GACf,kBAAkB,GAClB,gBAAgB,GAChB,SAAS,CAAC;AAEd;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,iBAAiB,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,SAAS,EAAE,IAAI,CAAC;IAChB,OAAO,CAAC,EAAE,aAAa,EAAE,CAAC;IAC1B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,MAAM,cAAc,GAAG,CAC3B,KAAK,EAAE,gBAAgB,EACvB,MAAM,EAAE,aAAa,KAClB,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;AAE1B;;GAEG;AACH,MAAM,WAAW,0BAA0B;IACzC,UAAU,EAAE,aAAa,EAAE,CAAC;IAC5B,WAAW,CAAC,EAAE,iBAAiB,EAAE,CAAC;IAClC,OAAO,EAAE,cAAc,CAAC;CACzB"}

package/dist/webhooks/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/webhooks/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/webhooks/types.ts"],"names":[],"mappings":""}

package/dist/webhooks/verify.d.ts

@@ -0,0 +1,53 @@
+/**
+ * Verification result
+ */
+export interface VerificationResult {
+    valid: boolean;
+    reason?: string;
+}
+/**
+ * Options for webhook verification
+ */
+export interface VerifyOptions {
+    /** The webhook secret configured in Jira */
+    secret: string;
+    /** The raw request body as a string */
+    body: string;
+    /** The signature from the X-Hub-Signature header (if using HMAC) */
+    signature?: string;
+    /** List of allowed IP addresses or CIDR ranges (Atlassian IPs) */
+    allowedIps?: string[];
+    /** The IP address of the request origin */
+    sourceIp?: string;
+}
+/**
+ * Atlassian Cloud outbound IP ranges
+ * These should be periodically updated from:
+ * https://support.atlassian.com/organization-administration/docs/ip-addresses-and-domains-for-atlassian-cloud-products/
+ */
+export declare const ATLASSIAN_IP_RANGES: string[];
+/**
+ * Verify webhook signature using HMAC-SHA256
+ */
+export declare function verifySignature(body: string, signature: string, secret: string): VerificationResult;
+/**
+ * Verify that the source IP is from Atlassian
+ */
+export declare function verifySourceIp(ip: string, allowedRanges?: string[]): VerificationResult;
+/**
+ * Comprehensive webhook verification
+ */
+export declare function verifyWebhook(options: VerifyOptions): VerificationResult;
+/**
+ * Create a verification middleware for Express-like frameworks
+ */
+export declare function createVerificationMiddleware(secret: string): (req: {
+    body: string;
+    headers: Record<string, string>;
+    ip?: string;
+}, res: {
+    status: (code: number) => {
+        send: (msg: string) => void;
+    };
+}, next: () => void) => void;
+//# sourceMappingURL=verify.d.ts.map

package/dist/webhooks/verify.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify.d.ts","sourceRoot":"","sources":["../../src/webhooks/verify.ts"],"names":[],"mappings":"AAEA;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,4CAA4C;IAC5C,MAAM,EAAE,MAAM,CAAC;IACf,uCAAuC;IACvC,IAAI,EAAE,MAAM,CAAC;IACb,oEAAoE;IACpE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,kEAAkE;IAClE,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,2CAA2C;IAC3C,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;;;GAIG;AACH,eAAO,MAAM,mBAAmB,UAU/B,CAAC;AAEF;;GAEG;AACH,wBAAgB,eAAe,CAC7B,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,GACb,kBAAkB,CAuCpB;AAkCD;;GAEG;AACH,wBAAgB,cAAc,CAC5B,EAAE,EAAE,MAAM,EACV,aAAa,GAAE,MAAM,EAAwB,GAC5C,kBAAkB,CAgBpB;AAED;;GAEG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAAE,aAAa,GAAG,kBAAkB,CAqBxE;AAED;;GAEG;AACH,wBAAgB,4BAA4B,CAAC,MAAM,EAAE,MAAM,IAEvD,KAAK;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAAC,EAAE,CAAC,EAAE,MAAM,CAAA;CAAE,EACnE,KAAK;IAAE,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK;QAAE,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAA;KAAE,CAAA;CAAE,EAClE,MAAM,MAAM,IAAI,KACf,IAAI,CAiBR"}

package/dist/webhooks/verify.js

@@ -0,0 +1,140 @@
+import { createHmac, timingSafeEqual } from 'crypto';
+/**
+ * Atlassian Cloud outbound IP ranges
+ * These should be periodically updated from:
+ * https://support.atlassian.com/organization-administration/docs/ip-addresses-and-domains-for-atlassian-cloud-products/
+ */
+export const ATLASSIAN_IP_RANGES = [
+    '13.52.5.96/28',
+    '13.236.8.224/28',
+    '18.136.214.96/28',
+    '18.184.99.224/28',
+    '18.234.32.224/28',
+    '18.246.31.224/28',
+    '52.215.192.224/28',
+    '104.192.136.0/21',
+    '185.166.140.0/22',
+];
+/**
+ * Verify webhook signature using HMAC-SHA256
+ */
+export function verifySignature(body, signature, secret) {
+    if (!signature) {
+        return { valid: false, reason: 'Missing signature header' };
+    }
+    if (!secret) {
+        return { valid: false, reason: 'Missing webhook secret' };
+    }
+    try {
+        // Jira uses sha256= prefix similar to GitHub
+        const expectedPrefix = 'sha256=';
+        if (!signature.startsWith(expectedPrefix)) {
+            return { valid: false, reason: 'Invalid signature format' };
+        }
+        const providedHash = signature.slice(expectedPrefix.length);
+        const hmac = createHmac('sha256', secret);
+        hmac.update(body);
+        const expectedHash = hmac.digest('hex');
+        // Use timing-safe comparison
+        const providedBuffer = Buffer.from(providedHash, 'hex');
+        const expectedBuffer = Buffer.from(expectedHash, 'hex');
+        if (providedBuffer.length !== expectedBuffer.length) {
+            return { valid: false, reason: 'Signature mismatch' };
+        }
+        const valid = timingSafeEqual(providedBuffer, expectedBuffer);
+        return valid
+            ? { valid: true }
+            : { valid: false, reason: 'Signature mismatch' };
+    }
+    catch (error) {
+        return {
+            valid: false,
+            reason: `Verification error: ${error instanceof Error ? error.message : String(error)}`,
+        };
+    }
+}
+/**
+ * Check if an IP address is within a CIDR range
+ */
+function isIpInRange(ip, cidr) {
+    const [rangeIp, prefixLength] = cidr.split('/');
+    if (!rangeIp || !prefixLength) {
+        return false;
+    }
+    const prefix = parseInt(prefixLength, 10);
+    const ipParts = ip.split('.').map(Number);
+    const rangeParts = rangeIp.split('.').map(Number);
+    if (ipParts.length !== 4 || rangeParts.length !== 4) {
+        return false;
+    }
+    // Convert to 32-bit integers
+    const ipInt = (ipParts[0] << 24) | (ipParts[1] << 16) | (ipParts[2] << 8) | ipParts[3];
+    const rangeInt = (rangeParts[0] << 24) |
+        (rangeParts[1] << 16) |
+        (rangeParts[2] << 8) |
+        rangeParts[3];
+    // Create mask
+    const mask = prefix === 0 ? 0 : -1 << (32 - prefix);
+    return (ipInt & mask) === (rangeInt & mask);
+}
+/**
+ * Verify that the source IP is from Atlassian
+ */
+export function verifySourceIp(ip, allowedRanges = ATLASSIAN_IP_RANGES) {
+    if (!ip) {
+        return { valid: false, reason: 'Missing source IP' };
+    }
+    const isAllowed = allowedRanges.some((range) => {
+        // Handle both single IPs and CIDR ranges
+        if (range.includes('/')) {
+            return isIpInRange(ip, range);
+        }
+        return ip === range;
+    });
+    return isAllowed
+        ? { valid: true }
+        : { valid: false, reason: `IP ${ip} not in allowed ranges` };
+}
+/**
+ * Comprehensive webhook verification
+ */
+export function verifyWebhook(options) {
+    const { secret, body, signature, allowedIps, sourceIp } = options;
+    // Verify signature if provided
+    if (signature && secret) {
+        const signatureResult = verifySignature(body, signature, secret);
+        if (!signatureResult.valid) {
+            return signatureResult;
+        }
+    }
+    // Verify source IP if checking is requested
+    if (allowedIps && sourceIp) {
+        const ipResult = verifySourceIp(sourceIp, allowedIps);
+        if (!ipResult.valid) {
+            return ipResult;
+        }
+    }
+    // If no verification was requested or all passed
+    return { valid: true };
+}
+/**
+ * Create a verification middleware for Express-like frameworks
+ */
+export function createVerificationMiddleware(secret) {
+    return (req, res, next) => {
+        const signature = req.headers['x-hub-signature-256'] ?? req.headers['x-hub-signature'];
+        const result = verifyWebhook({
+            secret,
+            body: req.body,
+            signature,
+            sourceIp: req.ip,
+            allowedIps: ATLASSIAN_IP_RANGES,
+        });
+        if (!result.valid) {
+            res.status(401).send(`Webhook verification failed: ${result.reason}`);
+            return;
+        }
+        next();
+    };
+}
+//# sourceMappingURL=verify.js.map

package/dist/webhooks/verify.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify.js","sourceRoot":"","sources":["../../src/webhooks/verify.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,QAAQ,CAAC;AA0BrD;;;;GAIG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,eAAe;IACf,iBAAiB;IACjB,kBAAkB;IAClB,kBAAkB;IAClB,kBAAkB;IAClB,kBAAkB;IAClB,mBAAmB;IACnB,kBAAkB;IAClB,kBAAkB;CACnB,CAAC;AAEF;;GAEG;AACH,MAAM,UAAU,eAAe,CAC7B,IAAY,EACZ,SAAiB,EACjB,MAAc;IAEd,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,0BAA0B,EAAE,CAAC;IAC9D,CAAC;IAED,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,wBAAwB,EAAE,CAAC;IAC5D,CAAC;IAED,IAAI,CAAC;QACH,6CAA6C;QAC7C,MAAM,cAAc,GAAG,SAAS,CAAC;QACjC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;YAC1C,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,0BAA0B,EAAE,CAAC;QAC9D,CAAC;QAED,MAAM,YAAY,GAAG,SAAS,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;QAC5D,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC1C,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAClB,MAAM,YAAY,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAExC,6BAA6B;QAC7B,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;QACxD,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;QAExD,IAAI,cAAc,CAAC,MAAM,KAAK,cAAc,CAAC,MAAM,EAAE,CAAC;YACpD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC;QACxD,CAAC;QAED,MAAM,KAAK,GAAG,eAAe,CAAC,cAAc,EAAE,cAAc,CAAC,CAAC;QAC9D,OAAO,KAAK;YACV,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE;YACjB,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC;IACrD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,MAAM,EAAE,uBAAuB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;SACxF,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,WAAW,CAAC,EAAU,EAAE,IAAY;IAC3C,MAAM,CAAC,OAAO,EAAE,YAAY,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAChD,IAAI,CAAC,OAAO,IAAI,CAAC,YAAY,EAAE,CAAC;QAC9B,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,MAAM,GAAG,QAAQ,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;IAC1C,MAAM,OAAO,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC1C,MAAM,UAAU,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAElD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,6BAA6B;IAC7B,MAAM,KAAK,GACT,CAAC,OAAO,CAAC,CAAC,CAAE,IAAI,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAE,IAAI,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAE,IAAI,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAE,CAAC;IAC/E,MAAM,QAAQ,GACZ,CAAC,UAAU,CAAC,CAAC,CAAE,IAAI,EAAE,CAAC;QACtB,CAAC,UAAU,CAAC,CAAC,CAAE,IAAI,EAAE,CAAC;QACtB,CAAC,UAAU,CAAC,CAAC,CAAE,IAAI,CAAC,CAAC;QACrB,UAAU,CAAC,CAAC,CAAE,CAAC;IAEjB,cAAc;IACd,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,GAAG,MAAM,CAAC,CAAC;IAEpD,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,GAAG,IAAI,CAAC,CAAC;AAC9C,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc,CAC5B,EAAU,EACV,gBAA0B,mBAAmB;IAE7C,IAAI,CAAC,EAAE,EAAE,CAAC;QACR,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;IACvD,CAAC;IAED,MAAM,SAAS,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE;QAC7C,yCAAyC;QACzC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACxB,OAAO,WAAW,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QAChC,CAAC;QACD,OAAO,EAAE,KAAK,KAAK,CAAC;IACtB,CAAC,CAAC,CAAC;IAEH,OAAO,SAAS;QACd,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE;QACjB,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,wBAAwB,EAAE,CAAC;AACjE,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa,CAAC,OAAsB;IAClD,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC;IAElE,+BAA+B;IAC/B,IAAI,SAAS,IAAI,MAAM,EAAE,CAAC;QACxB,MAAM,eAAe,GAAG,eAAe,CAAC,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;QACjE,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,CAAC;YAC3B,OAAO,eAAe,CAAC;QACzB,CAAC;IACH,CAAC;IAED,4CAA4C;IAC5C,IAAI,UAAU,IAAI,QAAQ,EAAE,CAAC;QAC3B,MAAM,QAAQ,GAAG,cAAc,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QACtD,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;YACpB,OAAO,QAAQ,CAAC;QAClB,CAAC;IACH,CAAC;IAED,iDAAiD;IACjD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AACzB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,4BAA4B,CAAC,MAAc;IACzD,OAAO,CACL,GAAmE,EACnE,GAAkE,EAClE,IAAgB,EACV,EAAE;QACR,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,qBAAqB,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;QACvF,MAAM,MAAM,GAAG,aAAa,CAAC;YAC3B,MAAM;YACN,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,SAAS;YACT,QAAQ,EAAE,GAAG,CAAC,EAAE;YAChB,UAAU,EAAE,mBAAmB;SAChC,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YAClB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,gCAAgC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;YACtE,OAAO;QACT,CAAC;QAED,IAAI,EAAE,CAAC;IACT,CAAC,CAAC;AACJ,CAAC"}

package/package.json

@@ -0,0 +1,58 @@
+{
+  "name": "@generacy-ai/generacy-plugin-jira",
+  "version": "0.0.0-preview-20260304013206",
+  "description": "Atlassian Jira integration plugin for Generacy",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist"
+  ],
+  "keywords": [
+    "generacy",
+    "jira",
+    "atlassian",
+    "plugin",
+    "issues",
+    "automation"
+  ],
+  "author": "Generacy AI",
+  "license": "Apache-2.0",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/generacy-ai/generacy.git",
+    "directory": "packages/jira"
+  },
+  "engines": {
+    "node": ">=20.0.0"
+  },
+  "dependencies": {
+    "@generacy-ai/latency": "^0.1.0",
+    "@generacy-ai/latency-plugin-issue-tracker": "^0.1.0",
+    "jira.js": "^4.0.1",
+    "zod": "^3.23.8"
+  },
+  "devDependencies": {
+    "@types/node": "^22.10.2",
+    "typescript": "^5.7.2",
+    "vitest": "^3.2.4"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "scripts": {
+    "build": "tsc",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "test:coverage": "vitest run --coverage",
+    "lint": "eslint src",
+    "typecheck": "tsc --noEmit",
+    "clean": "rm -rf dist"
+  }
+}