@nimbus-dev/connectors 0.2.1 → 0.2.3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (220) hide show
  1. package/README.md +19 -7
  2. package/connectors/airflow/src/search-filter.ts +2 -15
  3. package/connectors/airflow/src/server.ts +2 -87
  4. package/connectors/airflow/src/tools.ts +74 -0
  5. package/connectors/apple/src/adapters.ts +326 -0
  6. package/connectors/apple/src/apple-mail-core.ts +4 -8
  7. package/connectors/apple/src/calendar-tools.ts +28 -8
  8. package/connectors/apple/src/server.ts +23 -512
  9. package/connectors/apple/src/tools.ts +18 -44
  10. package/connectors/argocd/src/server.ts +25 -38
  11. package/connectors/athena/src/tools.ts +26 -43
  12. package/connectors/aws/src/server.ts +2 -183
  13. package/connectors/aws/src/tools.ts +199 -0
  14. package/connectors/azure/src/server.ts +2 -131
  15. package/connectors/azure/src/tools.ts +134 -0
  16. package/connectors/bigeye/src/search-filter.ts +4 -15
  17. package/connectors/bigeye/src/server.ts +38 -38
  18. package/connectors/bigquery/src/tools.ts +1 -26
  19. package/connectors/bitbucket/src/server.ts +2 -244
  20. package/connectors/bitbucket/src/tools.ts +241 -0
  21. package/connectors/bitrise/src/server.ts +2 -79
  22. package/connectors/bitrise/src/tools.ts +76 -0
  23. package/connectors/canva/src/search-filter.ts +2 -11
  24. package/connectors/canva/src/server.ts +2 -73
  25. package/connectors/canva/src/tools.ts +66 -0
  26. package/connectors/circleci/src/server.ts +2 -176
  27. package/connectors/circleci/src/tools.ts +193 -0
  28. package/connectors/cloud-logging/src/tools.ts +19 -35
  29. package/connectors/cloudwatch/src/tools.ts +20 -38
  30. package/connectors/codemagic/src/server.ts +2 -70
  31. package/connectors/codemagic/src/tools.ts +71 -0
  32. package/connectors/confluence/src/server.ts +2 -301
  33. package/connectors/confluence/src/tools.ts +320 -0
  34. package/connectors/dagster/src/server.ts +2 -214
  35. package/connectors/dagster/src/tools.ts +187 -0
  36. package/connectors/databricks/src/search-filter.ts +7 -7
  37. package/connectors/databricks/src/server.ts +2 -77
  38. package/connectors/databricks/src/tools.ts +66 -0
  39. package/connectors/datadog/src/server.ts +2 -48
  40. package/connectors/datadog/src/tools.ts +48 -0
  41. package/connectors/dataprofile/src/profile.ts +16 -46
  42. package/connectors/dbt/src/server.ts +2 -92
  43. package/connectors/dbt/src/tools.ts +80 -0
  44. package/connectors/dependencytrack/src/server.ts +2 -76
  45. package/connectors/dependencytrack/src/tools.ts +65 -0
  46. package/connectors/discord/src/server.ts +2 -85
  47. package/connectors/discord/src/tools.ts +82 -0
  48. package/connectors/elasticsearch/src/tools.ts +7 -37
  49. package/connectors/fastmail/src/jmap-client.ts +202 -0
  50. package/connectors/fastmail/src/jmap-core.ts +8 -21
  51. package/connectors/fastmail/src/server.ts +2 -187
  52. package/connectors/fastmail/src/tools.ts +4 -23
  53. package/connectors/figma/src/search-filter.ts +2 -11
  54. package/connectors/figma/src/server.ts +2 -113
  55. package/connectors/figma/src/tools.ts +99 -0
  56. package/connectors/firebase/src/server.ts +2 -90
  57. package/connectors/firebase/src/token.ts +2 -5
  58. package/connectors/firebase/src/tools.ts +106 -0
  59. package/connectors/flagsmith/src/server.ts +2 -98
  60. package/connectors/flagsmith/src/tools.ts +95 -0
  61. package/connectors/flux/src/server.ts +52 -53
  62. package/connectors/gcp/src/server.ts +2 -132
  63. package/connectors/gcp/src/tools.ts +123 -0
  64. package/connectors/github/src/server.ts +2 -328
  65. package/connectors/github/src/tools.ts +311 -0
  66. package/connectors/github-actions/src/server.ts +2 -205
  67. package/connectors/github-actions/src/tools.ts +209 -0
  68. package/connectors/gitlab/src/server.ts +2 -384
  69. package/connectors/gitlab/src/tools.ts +392 -0
  70. package/connectors/gmail/src/server.ts +2 -270
  71. package/connectors/gmail/src/tools.ts +209 -0
  72. package/connectors/google-drive/src/server.ts +2 -524
  73. package/connectors/google-drive/src/tools.ts +529 -0
  74. package/connectors/google-meet/src/server.ts +2 -82
  75. package/connectors/google-meet/src/tools.ts +87 -0
  76. package/connectors/google-photos/src/server.ts +2 -132
  77. package/connectors/google-photos/src/tools.ts +138 -0
  78. package/connectors/grafana/src/server.ts +2 -53
  79. package/connectors/grafana/src/tools.ts +53 -0
  80. package/connectors/great-expectations/src/gx-parse.ts +14 -45
  81. package/connectors/greenhouse/src/server.ts +2 -63
  82. package/connectors/greenhouse/src/tools.ts +68 -0
  83. package/connectors/hubspot/src/server.ts +2 -77
  84. package/connectors/hubspot/src/tools.ts +70 -0
  85. package/connectors/iac/src/server.ts +2 -137
  86. package/connectors/iac/src/tools.ts +153 -0
  87. package/connectors/imap/src/imap-core.ts +29 -82
  88. package/connectors/imap/src/server.ts +33 -220
  89. package/connectors/intercom/src/server.ts +2 -61
  90. package/connectors/intercom/src/tools.ts +58 -0
  91. package/connectors/jenkins/src/jenkins-api.ts +2 -6
  92. package/connectors/jenkins/src/server.ts +2 -215
  93. package/connectors/jenkins/src/tools.ts +240 -0
  94. package/connectors/jira/src/server.ts +2 -301
  95. package/connectors/jira/src/tools.ts +325 -0
  96. package/connectors/kubernetes/src/server.ts +2 -155
  97. package/connectors/kubernetes/src/tools.ts +160 -0
  98. package/connectors/launchdarkly/src/server.ts +2 -75
  99. package/connectors/launchdarkly/src/tools.ts +72 -0
  100. package/connectors/lever/src/search-filter.ts +4 -12
  101. package/connectors/lever/src/server.ts +2 -60
  102. package/connectors/lever/src/tools.ts +61 -0
  103. package/connectors/linear/src/server.ts +2 -459
  104. package/connectors/linear/src/tools.ts +482 -0
  105. package/connectors/localdb/src/sql-scan.ts +13 -41
  106. package/connectors/localdb/src/tools.ts +1 -1
  107. package/connectors/looker/src/search-filter.ts +2 -15
  108. package/connectors/looker/src/server.ts +35 -70
  109. package/connectors/mendeley/src/server.ts +2 -55
  110. package/connectors/mendeley/src/tools.ts +54 -0
  111. package/connectors/mercury/src/server.ts +2 -57
  112. package/connectors/mercury/src/tools.ts +50 -0
  113. package/connectors/metabase/src/search-filter.ts +4 -15
  114. package/connectors/metabase/src/server.ts +2 -79
  115. package/connectors/metabase/src/tools.ts +64 -0
  116. package/connectors/miro/src/server.ts +2 -72
  117. package/connectors/miro/src/tools.ts +65 -0
  118. package/connectors/mlflow/src/search-filter.ts +3 -7
  119. package/connectors/mlflow/src/server.ts +20 -40
  120. package/connectors/monte-carlo/src/server.ts +50 -57
  121. package/connectors/netlify/src/search-filter.ts +6 -14
  122. package/connectors/netlify/src/server.ts +2 -60
  123. package/connectors/netlify/src/tools.ts +53 -0
  124. package/connectors/newrelic/src/server.ts +2 -40
  125. package/connectors/newrelic/src/tools.ts +37 -0
  126. package/connectors/notion/src/server.ts +2 -335
  127. package/connectors/notion/src/tools.ts +344 -0
  128. package/connectors/obsidian/src/server.ts +2 -425
  129. package/connectors/obsidian/src/tools.ts +466 -0
  130. package/connectors/onedrive/src/server.ts +2 -249
  131. package/connectors/onedrive/src/tools.ts +253 -0
  132. package/connectors/outlook/src/server.ts +2 -351
  133. package/connectors/outlook/src/tools.ts +357 -0
  134. package/connectors/pagerduty/src/server.ts +2 -132
  135. package/connectors/pagerduty/src/tools.ts +126 -0
  136. package/connectors/pipedrive/src/server.ts +2 -58
  137. package/connectors/pipedrive/src/tools.ts +63 -0
  138. package/connectors/powerbi/src/search-filter.ts +2 -15
  139. package/connectors/powerbi/src/server.ts +43 -68
  140. package/connectors/prefect/src/search-filter.ts +3 -16
  141. package/connectors/prefect/src/server.ts +2 -90
  142. package/connectors/prefect/src/tools.ts +83 -0
  143. package/connectors/protonmail/src/mail-core.ts +16 -75
  144. package/connectors/protonmail/src/server.ts +34 -214
  145. package/connectors/raindrop/src/server.ts +2 -103
  146. package/connectors/raindrop/src/tools.ts +103 -0
  147. package/connectors/ramp/src/server.ts +2 -105
  148. package/connectors/ramp/src/tools.ts +98 -0
  149. package/connectors/readwise/src/server.ts +2 -88
  150. package/connectors/readwise/src/tools.ts +81 -0
  151. package/connectors/sagemaker/src/tools.ts +21 -40
  152. package/connectors/salesforce/src/search-filter.ts +4 -11
  153. package/connectors/salesforce/src/server.ts +2 -90
  154. package/connectors/salesforce/src/tools.ts +75 -0
  155. package/connectors/semgrep/src/search-filter.ts +3 -10
  156. package/connectors/semgrep/src/server.ts +2 -104
  157. package/connectors/semgrep/src/tools.ts +92 -0
  158. package/connectors/sentry/src/server.ts +2 -58
  159. package/connectors/sentry/src/tools.ts +53 -0
  160. package/connectors/slack/src/server.ts +2 -352
  161. package/connectors/slack/src/tools.ts +376 -0
  162. package/connectors/snowflake/src/search-filter.ts +4 -19
  163. package/connectors/snowflake/src/server.ts +6 -25
  164. package/connectors/snyk/src/server.ts +2 -140
  165. package/connectors/snyk/src/tools.ts +136 -0
  166. package/connectors/sonarqube/src/server.ts +2 -111
  167. package/connectors/sonarqube/src/tools.ts +98 -0
  168. package/connectors/stackoverflow/src/server.ts +2 -77
  169. package/connectors/stackoverflow/src/tools.ts +66 -0
  170. package/connectors/storybook/src/storybook-parse.ts +3 -6
  171. package/connectors/stripe/src/server.ts +2 -61
  172. package/connectors/stripe/src/tools.ts +54 -0
  173. package/connectors/superset/src/search-filter.ts +4 -15
  174. package/connectors/superset/src/server.ts +2 -115
  175. package/connectors/superset/src/tools.ts +98 -0
  176. package/connectors/tableau/src/search-filter.ts +2 -15
  177. package/connectors/tableau/src/server.ts +13 -65
  178. package/connectors/teams/src/server.ts +2 -249
  179. package/connectors/teams/src/tools.ts +283 -0
  180. package/connectors/testflight/src/server.ts +2 -70
  181. package/connectors/testflight/src/tools.ts +79 -0
  182. package/connectors/vercel/src/search-filter.ts +2 -10
  183. package/connectors/vercel/src/server.ts +2 -75
  184. package/connectors/vercel/src/tools.ts +73 -0
  185. package/connectors/vertex-ai/src/tools.ts +23 -33
  186. package/connectors/wiz/src/search-filter.ts +6 -30
  187. package/connectors/wiz/src/server.ts +2 -188
  188. package/connectors/wiz/src/tools.ts +168 -0
  189. package/connectors/zendesk/src/server.ts +2 -73
  190. package/connectors/zendesk/src/tools.ts +60 -0
  191. package/connectors/zoom/src/search-filter.ts +1 -7
  192. package/connectors/zoom/src/server.ts +2 -94
  193. package/connectors/zoom/src/tools.ts +93 -0
  194. package/connectors/zotero/src/server.ts +2 -78
  195. package/connectors/zotero/src/tools.ts +67 -0
  196. package/package.json +14 -12
  197. package/shared/access-token-cache.ts +123 -0
  198. package/shared/atlassian-json-fetch.ts +6 -16
  199. package/shared/audit-chain.ts +601 -34
  200. package/shared/cli-json-kit.ts +191 -0
  201. package/shared/collection-tool-kit.ts +143 -0
  202. package/shared/connector-mode.ts +3 -2
  203. package/shared/consent-kit.ts +81 -26
  204. package/shared/cursor-list-tool.ts +29 -0
  205. package/shared/env-json-api.ts +209 -0
  206. package/shared/fetch-json-text.ts +27 -0
  207. package/shared/github-rest.ts +62 -0
  208. package/shared/graphql-json.ts +60 -0
  209. package/shared/imap-mail-core.ts +91 -0
  210. package/shared/imap-tool-kit.ts +57 -23
  211. package/shared/imapflow-adapter.ts +417 -0
  212. package/shared/nimbus-spawn.ts +84 -27
  213. package/shared/rest-tool-kit.ts +77 -7
  214. package/shared/run-cli-json.ts +38 -16
  215. package/shared/safe-cli-arg.ts +139 -17
  216. package/shared/search-filter.ts +58 -18
  217. package/shared/walk-files.ts +118 -0
  218. package/shared/windows-batch-args.ts +273 -0
  219. package/shared/write-budget.ts +100 -0
  220. package/standalone/src/launcher.ts +19 -7
@@ -1,252 +1,10 @@
1
1
  import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
2
2
  import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
3
- import { z } from "zod";
4
- import { createWriteToolRegistrar } from "../../../shared/consent-kit.ts";
5
- import { joinApiPath } from "../../../shared/join-api-path.ts";
6
- import {
7
- createRegisterSimpleTool,
8
- createZodToolRegistrar,
9
- mcpJsonResultIfOk,
10
- } from "../../../shared/mcp-tool-kit.ts";
11
-
12
- const BB_API = "https://api.bitbucket.org/2.0";
13
-
14
- function requireUsername(): string {
15
- const t = process.env["BITBUCKET_USERNAME"];
16
- if (t === undefined || t === "") {
17
- throw new Error("BITBUCKET_USERNAME is not set");
18
- }
19
- return t;
20
- }
21
-
22
- function requireAppPassword(): string {
23
- const t = process.env["BITBUCKET_APP_PASSWORD"];
24
- if (t === undefined || t === "") {
25
- throw new Error("BITBUCKET_APP_PASSWORD is not set");
26
- }
27
- return t;
28
- }
29
-
30
- function basicAuthHeader(): string {
31
- const user = requireUsername();
32
- const pass = requireAppPassword();
33
- const b = Buffer.from(`${user}:${pass}`, "utf8").toString("base64");
34
- return `Basic ${b}`;
35
- }
36
-
37
- function splitRepoFull(full: string): { workspace: string; repoSlug: string } {
38
- const i = full.indexOf("/");
39
- if (i <= 0 || i === full.length - 1) {
40
- throw new Error("repoFull must be workspace/repo_slug");
41
- }
42
- return { workspace: full.slice(0, i), repoSlug: full.slice(i + 1) };
43
- }
44
-
45
- async function bbFetch(
46
- path: string,
47
- init?: RequestInit,
48
- ): Promise<{ ok: boolean; status: number; json: unknown; text: string }> {
49
- const url = joinApiPath(BB_API, path);
50
- const baseHeaders: Record<string, string> = {
51
- Authorization: basicAuthHeader(),
52
- Accept: "application/json",
53
- };
54
- const extra = init?.headers as Record<string, string> | undefined;
55
- const headers = extra === undefined ? baseHeaders : { ...baseHeaders, ...extra };
56
- const res = await fetch(url, {
57
- ...init,
58
- headers,
59
- });
60
- const text = await res.text();
61
- let json: unknown;
62
- try {
63
- json = JSON.parse(text) as unknown;
64
- } catch {
65
- json = null;
66
- }
67
- return { ok: res.ok, status: res.status, json, text };
68
- }
3
+ import { registerBitbucketTools } from "./tools.ts";
69
4
 
70
5
  const server = new McpServer({ name: "nimbus-bitbucket", version: "0.1.0" });
71
6
 
72
- const registerSimpleTool = createRegisterSimpleTool(server);
73
- const reg = createZodToolRegistrar(registerSimpleTool);
74
-
75
- /**
76
- * Every MUTATING bitbucket tool goes through here. Outside the gateway this adds the
77
- * consent gate, the write-scope allow-list, the mutation budget and the audit record; inside
78
- * the gateway it is a pass-through, because executor.ts (I2) is the gate there.
79
- */
80
- const registerWriteTool = createWriteToolRegistrar(server, {
81
- connector: "bitbucket",
82
- scopeEnv: "NIMBUS_MCP_BITBUCKET_WRITE_SCOPE",
83
- scopeKinds: ["repo"],
84
- });
85
-
86
- const repoFullArg = z.object({
87
- repoFull: z
88
- .string()
89
- .min(3)
90
- .describe("Repository full name: workspace/repo_slug (e.g. myteam/my-service)"),
91
- });
92
-
93
- const bitbucketRepoListSchema = z.object({
94
- pagelen: z.number().int().min(1).max(100).optional(),
95
- page: z.string().max(2000).optional().describe("Opaque page URL or token from a prior next link"),
96
- });
97
-
98
- reg(
99
- "bitbucket_repo_list",
100
- "List repositories where the authenticated user is a member.",
101
- bitbucketRepoListSchema,
102
- async (parsed) => {
103
- if (parsed.page?.startsWith("http")) {
104
- const res = await bbFetch(parsed.page);
105
- return mcpJsonResultIfOk("Bitbucket", res);
106
- }
107
- const qs = new URLSearchParams();
108
- qs.set("role", "member");
109
- qs.set("pagelen", String(parsed.pagelen ?? 30));
110
- const res = await bbFetch(`/repositories?${qs.toString()}`);
111
- return mcpJsonResultIfOk("Bitbucket", res);
112
- },
113
- );
114
-
115
- const bitbucketPrListSchema = repoFullArg.extend({
116
- state: z.enum(["OPEN", "MERGED", "DECLINED", "SUPERSEDED"]).optional(),
117
- pagelen: z.number().int().min(1).max(100).optional(),
118
- page: z.string().max(2000).optional().describe("Opaque next URL from a prior response"),
119
- });
120
-
121
- reg(
122
- "bitbucket_pr_list",
123
- "List pull requests for a repository.",
124
- bitbucketPrListSchema,
125
- async (parsed) => {
126
- if (parsed.page?.startsWith("http")) {
127
- const res = await bbFetch(parsed.page);
128
- return mcpJsonResultIfOk("Bitbucket", res);
129
- }
130
- const { workspace, repoSlug } = splitRepoFull(parsed.repoFull);
131
- const base = `/repositories/${encodeURIComponent(workspace)}/${encodeURIComponent(repoSlug)}/pullrequests`;
132
- const qs = new URLSearchParams();
133
- qs.set("pagelen", String(parsed.pagelen ?? 30));
134
- qs.set("sort", "-updated_on");
135
- if (parsed.state !== undefined) {
136
- qs.set("q", `state="${parsed.state}"`);
137
- }
138
- const res = await bbFetch(`${base}?${qs.toString()}`);
139
- return mcpJsonResultIfOk("Bitbucket", res);
140
- },
141
- );
142
-
143
- const bitbucketPrGetSchema = repoFullArg.extend({
144
- pullRequestId: z.number().int().min(1),
145
- });
146
-
147
- reg(
148
- "bitbucket_pr_get",
149
- "Get a single pull request by numeric id.",
150
- bitbucketPrGetSchema,
151
- async (parsed) => {
152
- const { workspace, repoSlug } = splitRepoFull(parsed.repoFull);
153
- const path = `/repositories/${encodeURIComponent(workspace)}/${encodeURIComponent(repoSlug)}/pullrequests/${String(parsed.pullRequestId)}`;
154
- const res = await bbFetch(path);
155
- return mcpJsonResultIfOk("Bitbucket", res);
156
- },
157
- );
158
-
159
- const bitbucketPrMergeSchema = repoFullArg.extend({
160
- pullRequestId: z.number().int().min(1),
161
- mergeStrategy: z.enum(["merge_commit", "squash", "fast_forward"]).optional(),
162
- message: z.string().max(32_768).optional(),
163
- });
164
-
165
- registerWriteTool(
166
- "bitbucket_pr_merge",
167
- {
168
- mutates: "bitbucket.pr.merge",
169
- recoverable: true,
170
- scopeTargetOf: (p) => ({ kind: "repo", value: p.repoFull }),
171
- },
172
- "Merge a pull request.",
173
- bitbucketPrMergeSchema,
174
- async (parsed) => {
175
- const { workspace, repoSlug } = splitRepoFull(parsed.repoFull);
176
- const path = `/repositories/${encodeURIComponent(workspace)}/${encodeURIComponent(repoSlug)}/pullrequests/${String(parsed.pullRequestId)}/merge`;
177
- const body: Record<string, unknown> = { type: "pullrequest" };
178
- if (parsed.mergeStrategy !== undefined) {
179
- body["merge_strategy"] = parsed.mergeStrategy;
180
- }
181
- if (parsed.message !== undefined) {
182
- body["message"] = parsed.message;
183
- }
184
- const res = await bbFetch(path, {
185
- method: "POST",
186
- headers: { "Content-Type": "application/json" },
187
- body: JSON.stringify(body),
188
- });
189
- return mcpJsonResultIfOk("Bitbucket", res);
190
- },
191
- );
192
-
193
- const bitbucketRepoPagedSchema = repoFullArg.extend({
194
- pagelen: z.number().int().min(1).max(100).optional(),
195
- page: z.string().max(2000).optional(),
196
- });
197
-
198
- reg(
199
- "bitbucket_pipeline_list",
200
- "List Pipelines runs for a repository.",
201
- bitbucketRepoPagedSchema,
202
- async (parsed) => {
203
- if (parsed.page?.startsWith("http")) {
204
- const res = await bbFetch(parsed.page);
205
- return mcpJsonResultIfOk("Bitbucket", res);
206
- }
207
- const { workspace, repoSlug } = splitRepoFull(parsed.repoFull);
208
- const base = `/repositories/${encodeURIComponent(workspace)}/${encodeURIComponent(repoSlug)}/pipelines/`;
209
- const qs = new URLSearchParams();
210
- qs.set("pagelen", String(parsed.pagelen ?? 30));
211
- const res = await bbFetch(`${base}?${qs.toString()}`);
212
- return mcpJsonResultIfOk("Bitbucket", res);
213
- },
214
- );
215
-
216
- const bitbucketPipelineGetSchema = repoFullArg.extend({
217
- pipelineUuid: z.string().min(8).max(128),
218
- });
219
-
220
- reg(
221
- "bitbucket_pipeline_get",
222
- "Get a single pipeline run by UUID.",
223
- bitbucketPipelineGetSchema,
224
- async (parsed) => {
225
- const { workspace, repoSlug } = splitRepoFull(parsed.repoFull);
226
- const encUuid = encodeURIComponent(parsed.pipelineUuid);
227
- const path = `/repositories/${encodeURIComponent(workspace)}/${encodeURIComponent(repoSlug)}/pipelines/${encUuid}`;
228
- const res = await bbFetch(path);
229
- return mcpJsonResultIfOk("Bitbucket", res);
230
- },
231
- );
232
-
233
- reg(
234
- "bitbucket_issue_list",
235
- "List issues for a repository (issue tracker must be enabled).",
236
- bitbucketRepoPagedSchema,
237
- async (parsed) => {
238
- if (parsed.page?.startsWith("http")) {
239
- const res = await bbFetch(parsed.page);
240
- return mcpJsonResultIfOk("Bitbucket", res);
241
- }
242
- const { workspace, repoSlug } = splitRepoFull(parsed.repoFull);
243
- const base = `/repositories/${encodeURIComponent(workspace)}/${encodeURIComponent(repoSlug)}/issues`;
244
- const qs = new URLSearchParams();
245
- qs.set("pagelen", String(parsed.pagelen ?? 30));
246
- const res = await bbFetch(`${base}?${qs.toString()}`);
247
- return mcpJsonResultIfOk("Bitbucket", res);
248
- },
249
- );
7
+ registerBitbucketTools(server);
250
8
 
251
9
  const transport = new StdioServerTransport();
252
10
  await server.connect(transport);
@@ -0,0 +1,241 @@
1
+ import { z } from "zod";
2
+ import type { ConsentServer } from "../../../shared/consent-kit.ts";
3
+ import { createWriteToolRegistrar } from "../../../shared/consent-kit.ts";
4
+ import { resolveUrlWithBase } from "../../../shared/fetch-bearer-json.ts";
5
+ import {
6
+ createRegisterSimpleTool,
7
+ createZodToolRegistrar,
8
+ encodeBasicAuthHeader,
9
+ type McpListResult,
10
+ mcpJsonResultIfOk,
11
+ requireProcessEnv,
12
+ } from "../../../shared/mcp-tool-kit.ts";
13
+ import { type RestFetchResult, toRestFetchResult } from "../../../shared/rest-tool-kit.ts";
14
+
15
+ const BB_API = "https://api.bitbucket.org/2.0";
16
+
17
+ function basicAuthHeader(): string {
18
+ const user = requireProcessEnv("BITBUCKET_USERNAME");
19
+ const pass = requireProcessEnv("BITBUCKET_APP_PASSWORD");
20
+ return encodeBasicAuthHeader(user, pass);
21
+ }
22
+
23
+ function splitRepoFull(full: string): { workspace: string; repoSlug: string } {
24
+ const i = full.indexOf("/");
25
+ if (i <= 0 || i === full.length - 1) {
26
+ throw new Error("repoFull must be workspace/repo_slug");
27
+ }
28
+ return { workspace: full.slice(0, i), repoSlug: full.slice(i + 1) };
29
+ }
30
+
31
+ /** `/repositories/<workspace>/<repo_slug>` for a `workspace/repo_slug` full name, both encoded. */
32
+ function repoPath(repoFull: string): string {
33
+ const { workspace, repoSlug } = splitRepoFull(repoFull);
34
+ return `/repositories/${encodeURIComponent(workspace)}/${encodeURIComponent(repoSlug)}`;
35
+ }
36
+
37
+ /**
38
+ * One credentialed Bitbucket request. `path` is relative to {@link BB_API}, or an absolute URL —
39
+ * the `next` link of an earlier page, which a paged tool takes back as its `page` ARGUMENT, so the
40
+ * model chooses it. `resolveUrlWithBase` refuses an absolute URL on any other origin before
41
+ * anything is sent: fetched as given, it would hand that host the username and app password.
42
+ */
43
+ async function bbFetch(path: string, init?: RequestInit): Promise<RestFetchResult> {
44
+ const url = resolveUrlWithBase(BB_API, path);
45
+ const baseHeaders: Record<string, string> = {
46
+ Authorization: basicAuthHeader(),
47
+ Accept: "application/json",
48
+ };
49
+ const extra = init?.headers as Record<string, string> | undefined;
50
+ const headers = extra === undefined ? baseHeaders : { ...baseHeaders, ...extra };
51
+ const res = await fetch(url, {
52
+ ...init,
53
+ headers,
54
+ });
55
+ return toRestFetchResult(res);
56
+ }
57
+
58
+ /** A Bitbucket request answered as the tool result; Bitbucket's status and body on failure. */
59
+ async function bbResult(path: string, init?: RequestInit): Promise<McpListResult> {
60
+ const res = await bbFetch(path, init);
61
+ return mcpJsonResultIfOk("Bitbucket", res);
62
+ }
63
+
64
+ /**
65
+ * One page of a paged list: the `next` URL from an earlier response when the caller passes one
66
+ * back, otherwise the first page — which `firstPage` builds only in that case.
67
+ */
68
+ async function bbPage(page: string | undefined, firstPage: () => string): Promise<McpListResult> {
69
+ return bbResult(page?.startsWith("http") ? page : firstPage());
70
+ }
71
+
72
+ /** Tool names exposed by this connector — for contract/introspection tests. */
73
+ export const BITBUCKET_TOOL_NAMES = [
74
+ "bitbucket_repo_list",
75
+ "bitbucket_pr_list",
76
+ "bitbucket_pr_get",
77
+ "bitbucket_pr_merge",
78
+ "bitbucket_pipeline_list",
79
+ "bitbucket_pipeline_get",
80
+ "bitbucket_issue_list",
81
+ ] as const;
82
+
83
+ export function registerBitbucketTools(
84
+ server: ConsentServer & { tool: (...args: never) => unknown },
85
+ ): void {
86
+ const registerSimpleTool = createRegisterSimpleTool(server);
87
+ const reg = createZodToolRegistrar(registerSimpleTool);
88
+
89
+ /**
90
+ * Every MUTATING bitbucket tool goes through here. Outside the gateway this adds the
91
+ * consent gate, the write-scope allow-list, the mutation budget and the audit record; inside
92
+ * the gateway it is a pass-through, because executor.ts (I2) is the gate there.
93
+ */
94
+ const registerWriteTool = createWriteToolRegistrar(server, {
95
+ connector: "bitbucket",
96
+ scopeEnv: "NIMBUS_MCP_BITBUCKET_WRITE_SCOPE",
97
+ scopeKinds: ["repo"],
98
+ });
99
+
100
+ const repoFullArg = z.object({
101
+ repoFull: z
102
+ .string()
103
+ .min(3)
104
+ .describe("Repository full name: workspace/repo_slug (e.g. myteam/my-service)"),
105
+ });
106
+
107
+ const bitbucketRepoListSchema = z.object({
108
+ pagelen: z.number().int().min(1).max(100).optional(),
109
+ page: z
110
+ .string()
111
+ .max(2000)
112
+ .optional()
113
+ .describe("Opaque page URL or token from a prior next link"),
114
+ });
115
+
116
+ reg(
117
+ "bitbucket_repo_list",
118
+ "List repositories where the authenticated user is a member.",
119
+ bitbucketRepoListSchema,
120
+ async (parsed) =>
121
+ bbPage(parsed.page, () => {
122
+ const qs = new URLSearchParams();
123
+ qs.set("role", "member");
124
+ qs.set("pagelen", String(parsed.pagelen ?? 30));
125
+ return `/repositories?${qs.toString()}`;
126
+ }),
127
+ );
128
+
129
+ const bitbucketPrListSchema = repoFullArg.extend({
130
+ state: z.enum(["OPEN", "MERGED", "DECLINED", "SUPERSEDED"]).optional(),
131
+ pagelen: z.number().int().min(1).max(100).optional(),
132
+ page: z.string().max(2000).optional().describe("Opaque next URL from a prior response"),
133
+ });
134
+
135
+ reg(
136
+ "bitbucket_pr_list",
137
+ "List pull requests for a repository.",
138
+ bitbucketPrListSchema,
139
+ async (parsed) =>
140
+ bbPage(parsed.page, () => {
141
+ const base = `${repoPath(parsed.repoFull)}/pullrequests`;
142
+ const qs = new URLSearchParams();
143
+ qs.set("pagelen", String(parsed.pagelen ?? 30));
144
+ qs.set("sort", "-updated_on");
145
+ if (parsed.state !== undefined) {
146
+ qs.set("q", `state="${parsed.state}"`);
147
+ }
148
+ return `${base}?${qs.toString()}`;
149
+ }),
150
+ );
151
+
152
+ const bitbucketPrGetSchema = repoFullArg.extend({
153
+ pullRequestId: z.number().int().min(1),
154
+ });
155
+
156
+ reg(
157
+ "bitbucket_pr_get",
158
+ "Get a single pull request by numeric id.",
159
+ bitbucketPrGetSchema,
160
+ async (parsed) =>
161
+ bbResult(`${repoPath(parsed.repoFull)}/pullrequests/${String(parsed.pullRequestId)}`),
162
+ );
163
+
164
+ const bitbucketPrMergeSchema = repoFullArg.extend({
165
+ pullRequestId: z.number().int().min(1),
166
+ mergeStrategy: z.enum(["merge_commit", "squash", "fast_forward"]).optional(),
167
+ message: z.string().max(32_768).optional(),
168
+ });
169
+
170
+ registerWriteTool(
171
+ "bitbucket_pr_merge",
172
+ {
173
+ mutates: "bitbucket.pr.merge",
174
+ recoverable: true,
175
+ scopeTargetOf: (p) => ({ kind: "repo", value: p.repoFull }),
176
+ },
177
+ "Merge a pull request.",
178
+ bitbucketPrMergeSchema,
179
+ async (parsed) => {
180
+ const path = `${repoPath(parsed.repoFull)}/pullrequests/${String(parsed.pullRequestId)}/merge`;
181
+ const body: Record<string, unknown> = { type: "pullrequest" };
182
+ if (parsed.mergeStrategy !== undefined) {
183
+ body["merge_strategy"] = parsed.mergeStrategy;
184
+ }
185
+ if (parsed.message !== undefined) {
186
+ body["message"] = parsed.message;
187
+ }
188
+ return bbResult(path, {
189
+ method: "POST",
190
+ headers: { "Content-Type": "application/json" },
191
+ body: JSON.stringify(body),
192
+ });
193
+ },
194
+ );
195
+
196
+ const bitbucketRepoPagedSchema = repoFullArg.extend({
197
+ pagelen: z.number().int().min(1).max(100).optional(),
198
+ page: z.string().max(2000).optional(),
199
+ });
200
+
201
+ reg(
202
+ "bitbucket_pipeline_list",
203
+ "List Pipelines runs for a repository.",
204
+ bitbucketRepoPagedSchema,
205
+ async (parsed) =>
206
+ bbPage(parsed.page, () => {
207
+ const base = `${repoPath(parsed.repoFull)}/pipelines/`;
208
+ const qs = new URLSearchParams();
209
+ qs.set("pagelen", String(parsed.pagelen ?? 30));
210
+ return `${base}?${qs.toString()}`;
211
+ }),
212
+ );
213
+
214
+ const bitbucketPipelineGetSchema = repoFullArg.extend({
215
+ pipelineUuid: z.string().min(8).max(128),
216
+ });
217
+
218
+ reg(
219
+ "bitbucket_pipeline_get",
220
+ "Get a single pipeline run by UUID.",
221
+ bitbucketPipelineGetSchema,
222
+ async (parsed) => {
223
+ const base = repoPath(parsed.repoFull);
224
+ const encUuid = encodeURIComponent(parsed.pipelineUuid);
225
+ return bbResult(`${base}/pipelines/${encUuid}`);
226
+ },
227
+ );
228
+
229
+ reg(
230
+ "bitbucket_issue_list",
231
+ "List issues for a repository (issue tracker must be enabled).",
232
+ bitbucketRepoPagedSchema,
233
+ async (parsed) =>
234
+ bbPage(parsed.page, () => {
235
+ const base = `${repoPath(parsed.repoFull)}/issues`;
236
+ const qs = new URLSearchParams();
237
+ qs.set("pagelen", String(parsed.pagelen ?? 30));
238
+ return `${base}?${qs.toString()}`;
239
+ }),
240
+ );
241
+ }
@@ -1,83 +1,6 @@
1
- import { z } from "zod";
2
- import { matchesResult } from "../../../shared/mcp-search-tool.ts";
3
- import { mcpJsonResult as jsonResult } from "../../../shared/mcp-tool-kit.ts";
4
1
  import { runReadOnlyMcpConnector } from "../../../shared/run-read-only-mcp-connector.ts";
5
- import { filterBitriseBuilds } from "./search-filter.ts";
6
-
7
- const BITRISE_API = "https://api.bitrise.io";
8
-
9
- function authHeader(): Record<string, string> {
10
- const t = process.env["BITRISE_TOKEN"]?.trim();
11
- if (t === undefined || t === "") {
12
- throw new Error("BITRISE_TOKEN is not set");
13
- }
14
- return { Authorization: t, Accept: "application/json" };
15
- }
16
-
17
- async function bitriseGet(path: string): Promise<unknown> {
18
- const res = await fetch(`${BITRISE_API}${path}`, { headers: authHeader() });
19
- const text = await res.text();
20
- if (!res.ok) {
21
- throw new Error(`Bitrise ${String(res.status)}: ${text.slice(0, 400)}`);
22
- }
23
- return JSON.parse(text) as unknown;
24
- }
2
+ import { registerBitriseTools } from "./tools.ts";
25
3
 
26
4
  await runReadOnlyMcpConnector("nimbus-bitrise", (reg) => {
27
- reg(
28
- "bitrise_list",
29
- "List Bitrise resources. When `appSlug` is omitted, returns the user's accessible apps via `/v0.1/me/apps`. When `appSlug` is provided, returns the app's recent builds via `/v0.1/apps/<slug>/builds` (status filter and limit optional).",
30
- z.object({
31
- appSlug: z.string().min(1).optional(),
32
- status: z.enum(["not-finished", "successful", "failed", "aborted"]).optional(),
33
- limit: z.number().int().min(1).max(50).optional(),
34
- }),
35
- async (p) => {
36
- if (p.appSlug === undefined) {
37
- const limit = p.limit ?? 50;
38
- return jsonResult(await bitriseGet(`/v0.1/me/apps?limit=${String(limit)}`));
39
- }
40
- const params: string[] = [];
41
- params.push(`limit=${String(p.limit ?? 50)}`);
42
- if (p.status !== undefined) {
43
- const map = { "not-finished": 0, successful: 1, failed: 2, aborted: 3 } as const;
44
- params.push(`status=${String(map[p.status])}`);
45
- }
46
- const qs = `?${params.join("&")}`;
47
- return jsonResult(
48
- await bitriseGet(`/v0.1/apps/${encodeURIComponent(p.appSlug)}/builds${qs}`),
49
- );
50
- },
51
- );
52
-
53
- reg(
54
- "bitrise_get",
55
- "Fetch a single Bitrise resource. When `buildSlug` is provided, returns the build via `/v0.1/apps/<appSlug>/builds/<buildSlug>`. When omitted, returns the app via `/v0.1/apps/<appSlug>`.",
56
- z.object({
57
- appSlug: z.string().min(1),
58
- buildSlug: z.string().min(1).optional(),
59
- }),
60
- async (p) => {
61
- if (p.buildSlug === undefined) {
62
- return jsonResult(await bitriseGet(`/v0.1/apps/${encodeURIComponent(p.appSlug)}`));
63
- }
64
- const path = `/v0.1/apps/${encodeURIComponent(p.appSlug)}/builds/${encodeURIComponent(p.buildSlug)}`;
65
- return jsonResult(await bitriseGet(path));
66
- },
67
- );
68
-
69
- reg(
70
- "bitrise_search",
71
- "Substring search across a Bitrise app's recent builds. Matches the query against `branch`, `commit_message`, `triggered_workflow`, and `status_text` (case-insensitive). Returns a `{ matches: [...] }` envelope.",
72
- z.object({
73
- appSlug: z.string().min(1),
74
- query: z.string().min(1),
75
- limit: z.number().int().min(1).max(200).optional(),
76
- }),
77
- async (p) => {
78
- const root = await bitriseGet(`/v0.1/apps/${encodeURIComponent(p.appSlug)}/builds?limit=50`);
79
- const data = (root as { data?: unknown[] } | null)?.data;
80
- return matchesResult(data, filterBitriseBuilds, p);
81
- },
82
- );
5
+ registerBitriseTools(reg);
83
6
  });
@@ -0,0 +1,76 @@
1
+ import { z } from "zod";
2
+ import { createJsonGetter, envAuthHeaders } from "../../../shared/env-json-api.ts";
3
+ import { matchesResult } from "../../../shared/mcp-search-tool.ts";
4
+ import { mcpJsonResult as jsonResult } from "../../../shared/mcp-tool-kit.ts";
5
+ import type { ZodToolRegistrar } from "../../../shared/run-read-only-mcp-connector.ts";
6
+ import { filterBitriseBuilds } from "./search-filter.ts";
7
+
8
+ const BITRISE_API = "https://api.bitrise.io";
9
+
10
+ const bitriseGet = createJsonGetter({
11
+ base: BITRISE_API,
12
+ label: "Bitrise",
13
+ headers: envAuthHeaders({ env: "BITRISE_TOKEN", scheme: "" }),
14
+ });
15
+
16
+ /** Tool names exposed by this connector — for contract/introspection tests. */
17
+ export const BITRISE_TOOL_NAMES = ["bitrise_get", "bitrise_list", "bitrise_search"] as const;
18
+
19
+ export function registerBitriseTools(reg: ZodToolRegistrar): void {
20
+ reg(
21
+ "bitrise_list",
22
+ "List Bitrise resources. When `appSlug` is omitted, returns the user's accessible apps via `/v0.1/me/apps`. When `appSlug` is provided, returns the app's recent builds via `/v0.1/apps/<slug>/builds` (status filter and limit optional).",
23
+ z.object({
24
+ appSlug: z.string().min(1).optional(),
25
+ status: z.enum(["not-finished", "successful", "failed", "aborted"]).optional(),
26
+ limit: z.number().int().min(1).max(50).optional(),
27
+ }),
28
+ async (p) => {
29
+ if (p.appSlug === undefined) {
30
+ const limit = p.limit ?? 50;
31
+ return jsonResult(await bitriseGet(`/v0.1/me/apps?limit=${String(limit)}`));
32
+ }
33
+ const params: string[] = [];
34
+ params.push(`limit=${String(p.limit ?? 50)}`);
35
+ if (p.status !== undefined) {
36
+ const map = { "not-finished": 0, successful: 1, failed: 2, aborted: 3 } as const;
37
+ params.push(`status=${String(map[p.status])}`);
38
+ }
39
+ const qs = `?${params.join("&")}`;
40
+ return jsonResult(
41
+ await bitriseGet(`/v0.1/apps/${encodeURIComponent(p.appSlug)}/builds${qs}`),
42
+ );
43
+ },
44
+ );
45
+
46
+ reg(
47
+ "bitrise_get",
48
+ "Fetch a single Bitrise resource. When `buildSlug` is provided, returns the build via `/v0.1/apps/<appSlug>/builds/<buildSlug>`. When omitted, returns the app via `/v0.1/apps/<appSlug>`.",
49
+ z.object({
50
+ appSlug: z.string().min(1),
51
+ buildSlug: z.string().min(1).optional(),
52
+ }),
53
+ async (p) => {
54
+ if (p.buildSlug === undefined) {
55
+ return jsonResult(await bitriseGet(`/v0.1/apps/${encodeURIComponent(p.appSlug)}`));
56
+ }
57
+ const path = `/v0.1/apps/${encodeURIComponent(p.appSlug)}/builds/${encodeURIComponent(p.buildSlug)}`;
58
+ return jsonResult(await bitriseGet(path));
59
+ },
60
+ );
61
+
62
+ reg(
63
+ "bitrise_search",
64
+ "Substring search across a Bitrise app's recent builds. Matches the query against `branch`, `commit_message`, `triggered_workflow`, and `status_text` (case-insensitive). Returns a `{ matches: [...] }` envelope.",
65
+ z.object({
66
+ appSlug: z.string().min(1),
67
+ query: z.string().min(1),
68
+ limit: z.number().int().min(1).max(200).optional(),
69
+ }),
70
+ async (p) => {
71
+ const root = await bitriseGet(`/v0.1/apps/${encodeURIComponent(p.appSlug)}/builds?limit=50`);
72
+ const data = (root as { data?: unknown[] } | null)?.data;
73
+ return matchesResult(data, filterBitriseBuilds, p);
74
+ },
75
+ );
76
+ }
@@ -1,8 +1,7 @@
1
1
  import {
2
- asObjectish,
2
+ fieldsFromKeys,
3
3
  makeQueryFilter,
4
4
  type SearchMatchOptions,
5
- stringField,
6
5
  } from "../../../shared/search-filter.ts";
7
6
 
8
7
  export type CanvaSearchMatchOptions = SearchMatchOptions;
@@ -12,12 +11,4 @@ export type CanvaSearchMatchOptions = SearchMatchOptions;
12
11
  * thumbnail: { url, ... }, ... }`. Designs carry no description or owner field,
13
12
  * so match against the design title (case-insensitive substring).
14
13
  */
15
- function fieldsOf(item: unknown): readonly string[] | null {
16
- const row = asObjectish(item);
17
- if (row === undefined) {
18
- return null;
19
- }
20
- return [stringField(row, "title")];
21
- }
22
-
23
- export const filterCanvaDesigns = makeQueryFilter(fieldsOf);
14
+ export const filterCanvaDesigns = makeQueryFilter(fieldsFromKeys(["title"]));