@juspay/yama 2.4.2 → 2.6.0

package/dist/v2/types/mcp.types.d.ts

@@ -1,212 +1,124 @@
 /**
- * MCP Tool Response Type Definitions
- * Types for Bitbucket and Jira MCP tool responses
+ * MCP (Model Context Protocol) response type definitions.
+ *
+ * These describe the shapes Yama reads back from VCS MCP tool calls
+ * (Bitbucket / GitHub pull requests, diffs, code search, Jira issues).
+ *
+ * The fictional `NeuroLinkAPI`/`callTool` interface and the unused
+ * server-management helper types were removed when the dead VCSProvider
+ * classes were deleted — only these still-used response shapes (re-exported
+ * from src/index.ts) remain.
+ */
+/**
+ * Bitbucket/GitHub Pull Request response from a PR-read tool call
  */
-export interface MCPStatus {
-    totalServers: number;
-    totalTools: number;
-    servers: MCPServerStatus[];
-}
-export interface MCPServerStatus {
-    id: string;
-    connected: boolean;
-    tools: string[];
-    lastHealthCheck?: Date;
-    error?: string;
-}
 export interface GetPullRequestResponse {
-    id: number;
-    title: string;
-    description: string;
-    author: {
-        name: string;
-        displayName: string;
-        emailAddress?: string;
-    };
-    state: "OPEN" | "MERGED" | "DECLINED";
-    source: {
-        branch: {
-            name: string;
+    id?: number | string;
+    number?: number;
+    title?: string;
+    description?: string;
+    state?: string;
+    source?: {
+        branch?: {
+            name?: string;
         };
-        commit: {
-            id: string;
+        repository?: {
+            full_slug?: string;
         };
     };
-    destination: {
-        branch: {
-            name: string;
+    destination?: {
+        branch?: {
+            name?: string;
         };
-        commit: {
-            id: string;
+        repository?: {
+            full_slug?: string;
         };
     };
-    createdDate: string;
-    updatedDate: string;
-    reviewers: Reviewer[];
-    active_comments?: Comment[];
-    file_changes?: FileChange[];
-}
-export interface Reviewer {
-    user: {
-        name: string;
-        displayName: string;
-        emailAddress?: string;
-    };
-    approved: boolean;
-    status: "APPROVED" | "UNAPPROVED" | "NEEDS_WORK";
-}
-export interface Comment {
-    id: number;
-    text: string;
-    author: {
-        name: string;
-        displayName: string;
-    };
-    createdDate: string;
-    updatedDate: string;
-    anchor?: CommentAnchor;
-}
-export interface CommentAnchor {
-    filePath: string;
-    lineFrom: number;
-    lineTo: number;
-    lineType: "ADDED" | "REMOVED" | "CONTEXT";
-}
-export interface FileChange {
-    path: string;
-    file?: string;
-    type: "ADD" | "MODIFY" | "DELETE" | "RENAME";
-}
-export interface DiffLine {
-    source_line: number | null;
-    destination_line: number | null;
-    type: "ADDED" | "REMOVED" | "CONTEXT";
-    content: string;
-}
-export interface DiffHunk {
-    source_start: number;
-    source_length: number;
-    destination_start: number;
-    destination_length: number;
-    lines: DiffLine[];
-}
-export interface DiffFile {
-    file_path: string;
-    old_path?: string;
-    status: "added" | "modified" | "deleted" | "renamed";
-    hunks: DiffHunk[];
-}
-export interface GetPullRequestDiffResponse {
-    files: DiffFile[];
-    stats?: {
-        additions: number;
-        deletions: number;
-        files_changed: number;
-    };
-}
-export interface AddCommentRequest {
-    workspace: string;
-    repository: string;
-    pull_request_id: number;
-    comment_text: string;
-    file_path: string;
-    line_number: number;
-    line_type: "ADDED" | "REMOVED" | "CONTEXT";
-    suggestion?: string;
-    parent_comment_id?: number;
-}
-export interface AddCommentResponse {
-    id: number;
-    text: string;
-    author: string;
-    createdDate: string;
-    anchor?: CommentAnchor;
-}
-export interface UpdatePullRequestRequest {
-    workspace: string;
-    repository: string;
-    pull_request_id: number;
-    title?: string;
-    description?: string;
-    reviewers?: string[];
-}
-export interface GetFileContentResponse {
-    content: string;
-    path: string;
-    size: number;
-    encoding?: string;
-}
-export interface ListDirectoryContentResponse {
-    path: string;
-    items: DirectoryItem[];
-}
-export interface DirectoryItem {
-    type: "file" | "directory";
-    path: string;
-    name: string;
-    size?: number;
-}
-export interface SearchCodeResponse {
-    results: SearchResult[];
-    totalCount: number;
-}
-export interface SearchResult {
-    file: string;
-    line: number;
-    content: string;
-    matches: string[];
-}
-export interface GetIssueResponse {
-    key: string;
-    id: string;
-    summary: string;
-    description: string;
-    status: {
-        name: string;
-        category: string;
+    head?: {
+        ref?: string;
     };
-    issueType: {
-        name: string;
-        description: string;
+    base?: {
+        ref?: string;
     };
-    priority: {
-        name: string;
+    user?: {
+        login?: string;
     };
-    assignee?: {
-        displayName: string;
-        emailAddress: string;
+    author?: {
+        username?: string;
     };
-    reporter: {
-        displayName: string;
-        emailAddress: string;
+    created_on?: string;
+    createdAt?: string;
+    updated_on?: string;
+    updatedAt?: string;
+    links?: {
+        html?: {
+            href?: string;
+        };
     };
-    created: string;
-    updated: string;
-    customFields?: Record<string, any>;
-}
-export interface SearchIssuesRequest {
-    jql: string;
-    maxResults?: number;
-    startAt?: number;
-}
-export interface SearchIssuesResponse {
-    issues: GetIssueResponse[];
-    total: number;
-    startAt: number;
-    maxResults: number;
+    html_url?: string;
+    [key: string]: unknown;
 }
-export interface GetIssueCommentsResponse {
-    comments: JiraComment[];
-    total: number;
+/**
+ * Pull request diff response from a diff-read tool call
+ */
+export interface GetPullRequestDiffResponse {
+    diffs?: Array<{
+        source?: {
+            path?: string;
+        };
+        destination?: {
+            path?: string;
+        };
+        lines?: Array<{
+            type?: string;
+            content?: string;
+            line_number?: number;
+            old_line_number?: number;
+        }>;
+    }>;
+    files?: Array<{
+        filename?: string;
+        patch?: string;
+        changes?: number;
+        additions?: number;
+        deletions?: number;
+    }>;
+    [key: string]: unknown;
 }
-export interface JiraComment {
-    id: string;
-    author: {
-        displayName: string;
-        emailAddress: string;
+/**
+ * Jira issue response from an issue-read tool call
+ */
+export interface GetIssueResponse {
+    key?: string;
+    id?: string;
+    fields?: {
+        summary?: string;
+        description?: string;
+        status?: {
+            name?: string;
+        };
+        issuetype?: {
+            name?: string;
+        };
+        [key: string]: unknown;
     };
-    body: string;
-    created: string;
-    updated: string;
+    [key: string]: unknown;
+}
+/**
+ * Code search response from a code-search tool call
+ */
+export interface SearchCodeResponse {
+    results?: Array<{
+        file?: {
+            path?: string;
+        };
+        path?: string;
+        lines?: Array<{
+            content?: string;
+            line_number?: number;
+        }>;
+        content?: string;
+    }>;
+    [key: string]: unknown;
 }
 //# sourceMappingURL=mcp.types.d.ts.map

package/dist/v2/types/mcp.types.js

@@ -1,6 +1,13 @@
 /**
- * MCP Tool Response Type Definitions
- * Types for Bitbucket and Jira MCP tool responses
+ * MCP (Model Context Protocol) response type definitions.
+ *
+ * These describe the shapes Yama reads back from VCS MCP tool calls
+ * (Bitbucket / GitHub pull requests, diffs, code search, Jira issues).
+ *
+ * The fictional `NeuroLinkAPI`/`callTool` interface and the unused
+ * server-management helper types were removed when the dead VCSProvider
+ * classes were deleted — only these still-used response shapes (re-exported
+ * from src/index.ts) remain.
  */
 export {};
 //# sourceMappingURL=mcp.types.js.map

package/dist/v2/types/v2.types.d.ts

@@ -4,10 +4,15 @@
  */
 export interface ReviewRequest {
     mode: "pr";
-    workspace: string;
-    repository: string;
+    provider?: "github" | "bitbucket";
+    workspace?: string;
+    repository?: string;
+    owner?: string;
+    repo?: string;
+    prNumber?: number;
     pullRequestId?: number;
     branch?: string;
+    cloneUrl?: string;
     dryRun?: boolean;
     verbose?: boolean;
     configPath?: string;

package/dist/v2/utils/ProviderDetector.d.ts

@@ -0,0 +1,57 @@
+/**
+ * Provider Detection Utility
+ * Automatically detects GitHub vs Bitbucket from environment, CLI params, or URLs
+ */
+import type { ReviewRequest } from "../types/v2.types.js";
+export type VCSProvider = "github" | "bitbucket";
+export declare class ProviderDetector {
+    /**
+     * Detect VCS provider with intelligent fallback chain
+     * Priority: GitHub env → Request params → Clone URL → Config default → Bitbucket
+     */
+    static detect(request: ReviewRequest, env?: NodeJS.ProcessEnv, configDefault?: VCSProvider): VCSProvider;
+    /**
+     * Extract the hostname from a clone/remote URL.
+     * Supports SCP/SSH form (git@host:owner/repo, no scheme) and standard URLs.
+     * Returns a lowercased hostname, or '' if it cannot be determined.
+     */
+    private static extractHostname;
+    /**
+     * Detect provider from a clone/remote URL.
+     *
+     * Classification is based on the parsed HOSTNAME (not substring matching) to
+     * avoid spoofing via crafted paths or hosts such as
+     * "https://github.com.evil.com/...".
+     */
+    static detectFromUrl(url: string): VCSProvider;
+    /**
+     * Returns true when the host's first DNS label equals `label` AND the host
+     * is not a spoof where a public domain (e.g. "github.com") is embedded as a
+     * sub-label (e.g. "github.com.evil.com"). The latter is detected by a second
+     * label that is a common public TLD.
+     */
+    private static firstLabelIs;
+    /**
+     * Extract owner from GitHub URL or context
+     * github.com:owner/repo.git → owner
+     * https://github.com/owner/repo → owner
+     */
+    static extractGitHubOwner(url: string): string | null;
+    /**
+     * Extract repo name from GitHub URL
+     * github.com:owner/repo.git → repo
+     * https://github.com/owner/repo → repo
+     */
+    static extractGitHubRepo(url: string): string | null;
+    /**
+     * Extract workspace from Bitbucket URL
+     * bitbucket.com:workspace/repo.git → workspace
+     */
+    static extractBitbucketWorkspace(url: string): string | null;
+}
+/**
+ * Helper to detect provider from ReviewRequest
+ * Usage: const provider = detectProvider(request);
+ */
+export declare function detectProvider(request: ReviewRequest, configDefault?: VCSProvider): VCSProvider;
+//# sourceMappingURL=ProviderDetector.d.ts.map

package/dist/v2/utils/ProviderDetector.js

@@ -0,0 +1,187 @@
+/**
+ * Provider Detection Utility
+ * Automatically detects GitHub vs Bitbucket from environment, CLI params, or URLs
+ */
+export class ProviderDetector {
+    /**
+     * Detect VCS provider with intelligent fallback chain
+     * Priority: GitHub env → Request params → Clone URL → Config default → Bitbucket
+     */
+    static detect(request, env = process.env, configDefault) {
+        // 1. Explicit provider in request
+        if (request.provider) {
+            return request.provider;
+        }
+        // 2. GitHub Actions environment
+        if (env.GITHUB_SERVER_URL ||
+            env.GITHUB_REPOSITORY ||
+            env.GITHUB_ACTION ||
+            env.GITHUB_ACTIONS === "true") {
+            return "github";
+        }
+        // 3. GitHub CLI parameters
+        if (request.owner || request.prNumber !== undefined) {
+            // If owner is provided, it's GitHub
+            if (request.owner) {
+                return "github";
+            }
+        }
+        // 4. Bitbucket CLI parameters
+        if (request.workspace) {
+            return "bitbucket";
+        }
+        // 5. Clone URL detection
+        if (request.cloneUrl) {
+            return ProviderDetector.detectFromUrl(request.cloneUrl);
+        }
+        // 6. Config-level default
+        if (configDefault) {
+            return configDefault;
+        }
+        // 7. Fallback to Bitbucket (backward compatibility)
+        return "bitbucket";
+    }
+    /**
+     * Extract the hostname from a clone/remote URL.
+     * Supports SCP/SSH form (git@host:owner/repo, no scheme) and standard URLs.
+     * Returns a lowercased hostname, or '' if it cannot be determined.
+     */
+    static extractHostname(url) {
+        try {
+            // SCP/SSH form has no scheme: [user@]host:path (path is not //...)
+            if (!url.includes("://")) {
+                const scpMatch = url.match(/^(?:[^@/]+@)?([^/:]+):(?!\/)/);
+                if (scpMatch) {
+                    return scpMatch[1].toLowerCase();
+                }
+            }
+            // Standard URL form. Prepend a scheme if missing so URL() can parse it.
+            const withScheme = url.includes("://") ? url : `https://${url}`;
+            return new URL(withScheme).hostname.toLowerCase();
+        }
+        catch {
+            return "";
+        }
+    }
+    /**
+     * Detect provider from a clone/remote URL.
+     *
+     * Classification is based on the parsed HOSTNAME (not substring matching) to
+     * avoid spoofing via crafted paths or hosts such as
+     * "https://github.com.evil.com/...".
+     */
+    static detectFromUrl(url) {
+        const host = ProviderDetector.extractHostname(url);
+        // GitHub.com and GitHub Enterprise (e.g. github.enterprise.com).
+        // The first-label check covers Enterprise hosts whose first label is
+        // literally "github" (github.enterprise.com), while rejecting spoofs
+        // like "github.com.evil.com" where "github.com" is used as a sub-label.
+        if (host === "github.com" ||
+            host.endsWith(".github.com") ||
+            ProviderDetector.firstLabelIs(host, "github")) {
+            return "github";
+        }
+        // Bitbucket.org and Bitbucket Server/Data Center variants
+        if (host === "bitbucket.org" ||
+            host.endsWith(".bitbucket.org") ||
+            ProviderDetector.firstLabelIs(host, "bitbucket")) {
+            return "bitbucket";
+        }
+        // Default to Bitbucket if unclear (backward compatibility)
+        return "bitbucket";
+    }
+    /**
+     * Returns true when the host's first DNS label equals `label` AND the host
+     * is not a spoof where a public domain (e.g. "github.com") is embedded as a
+     * sub-label (e.g. "github.com.evil.com"). The latter is detected by a second
+     * label that is a common public TLD.
+     */
+    static firstLabelIs(host, label) {
+        const labels = host.split(".");
+        if (labels[0] !== label) {
+            return false;
+        }
+        // Reject "<label>.<tld>.<...>" spoofs (e.g. github.com.evil.com).
+        const tlds = new Set(["com", "org", "net", "io", "co", "dev"]);
+        if (labels.length > 2 && tlds.has(labels[1])) {
+            return false;
+        }
+        return true;
+    }
+    /**
+     * Extract owner from GitHub URL or context
+     * github.com:owner/repo.git → owner
+     * https://github.com/owner/repo → owner
+     */
+    static extractGitHubOwner(url) {
+        try {
+            // SSH format: git@github.com:owner/repo.git
+            const sshMatch = url.match(/git@github\.com:([^/]+)\//);
+            if (sshMatch) {
+                return sshMatch[1];
+            }
+            // HTTPS format: https://github.com/owner/repo
+            const httpsMatch = url.match(/github\.com\/([^/]+)\//);
+            if (httpsMatch) {
+                return httpsMatch[1];
+            }
+            return null;
+        }
+        catch {
+            return null;
+        }
+    }
+    /**
+     * Extract repo name from GitHub URL
+     * github.com:owner/repo.git → repo
+     * https://github.com/owner/repo → repo
+     */
+    static extractGitHubRepo(url) {
+        try {
+            // SSH format: git@github.com:owner/repo.git
+            const sshMatch = url.match(/\/([^/]+?)(?:\.git)?$/);
+            if (sshMatch) {
+                return sshMatch[1];
+            }
+            // HTTPS format: https://github.com/owner/repo
+            const httpsMatch = url.match(/\/([^/]+?)(?:\.git)?$/);
+            if (httpsMatch) {
+                return httpsMatch[1];
+            }
+            return null;
+        }
+        catch {
+            return null;
+        }
+    }
+    /**
+     * Extract workspace from Bitbucket URL
+     * bitbucket.com:workspace/repo.git → workspace
+     */
+    static extractBitbucketWorkspace(url) {
+        try {
+            // SSH format: git@bitbucket.org:workspace/repo.git
+            const match = url.match(/bitbucket[^:]*:([^/]+)\//);
+            if (match) {
+                return match[1];
+            }
+            // HTTPS format: https://bitbucket.org/workspace/repo
+            const httpsMatch = url.match(/bitbucket\.org\/([^/]+)\//);
+            if (httpsMatch) {
+                return httpsMatch[1];
+            }
+            return null;
+        }
+        catch {
+            return null;
+        }
+    }
+}
+/**
+ * Helper to detect provider from ReviewRequest
+ * Usage: const provider = detectProvider(request);
+ */
+export function detectProvider(request, configDefault) {
+    return ProviderDetector.detect(request, process.env, configDefault);
+}
+//# sourceMappingURL=ProviderDetector.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@juspay/yama",
-  "version": "2.4.2",
+  "version": "2.6.0",
   "description": "Enterprise-grade Pull Request automation toolkit with AI-powered code review and description enhancement",
   "keywords": [
     "pr",
@@ -54,6 +54,7 @@
   ],
   "scripts": {
     "build": "rimraf dist && tsc && tsc-alias",
+    "build:action": "npm run build",
     "dev": "tsx watch src/cli/cli.ts",
     "dev:run": "tsx src/cli/cli.ts",
     "mcp:git:server": "uvx mcp-server-git || npx -y @modelcontextprotocol/server-git",
@@ -159,7 +160,7 @@
     ],
     "overrides": {
       "@semantic-release/npm": "^13.1.2",
-      "undici": "^5.28.5"
+      "undici": "~7.22.0"
     }
   },
   "lint-staged": {