@nuvlore/extension-access-jira 0.1.1

package/vendor/extension-sso/tools/workday_okta_app_read_access.mjs

@@ -0,0 +1,25 @@
+export const description = "Read-only access status for one Okta UserHome app (GET probe only, never writes).";
+import { getOktaAppReadAccess, listOktaApps, oktaAppReadGet, probeAllOktaApps } from "../src/oktaAppAccess.mjs";
+
+function textResult(text) {
+  return { content: [{ type: "text", text }] };
+}
+
+
+
+export default {
+    name: "workday_okta_app_read_access",
+    description: "Read-only access status for one Okta UserHome app (GET probe only, never writes).",
+    inputSchema: {
+      type: "object",
+      properties: {
+        app: { type: "string", description: "Okta app label, e.g. JIRA2, Bitbucket, Slack" }
+      },
+      required: ["app"]
+    },
+    meta: { permissions: { rule: "allow" } },
+    async handler(args) {
+      const access = await getOktaAppReadAccess(String(args.app));
+      return textResult(JSON.stringify(access, null, 2));
+    }
+  };

package/vendor/extension-sso/tools/workday_okta_auth_header.mjs

@@ -0,0 +1,58 @@
+export const description = "Return Cookie header for the Okta org from the shared browser session (legacy name; not a Bearer token).";
+import { getSsoConfig } from "../src/ssoConfig.mjs";
+import {
+  ensureSsoSession,
+  getOktaCookieHeader,
+  jarSummary,
+  loadCookieJar
+} from "../src/sessionManager.mjs";
+import {
+  getServiceCookieHeader,
+  openOktaAppForAuth,
+  openServiceForAuth
+} from "../src/sessionAuth.mjs";
+import { getOktaApp } from "../src/oktaAppCatalog.mjs";
+import { getWorkdayService, listWorkdayServices } from "../src/serviceRegistry.mjs";
+
+function textResult(text) {
+  return { content: [{ type: "text", text }] };
+}
+
+
+
+export default {
+    name: "workday_okta_auth_header",
+    description:
+      "Return Cookie header for the Okta org from the shared browser session (legacy name; not a Bearer token).",
+    inputSchema: { type: "object", properties: {} },
+    meta: {
+      permissions: { rule: "allow" },
+      secret_provider: "keychain"
+    },
+    async handler() {
+      const config = getSsoConfig();
+      const result = await ensureSsoSession({ config, openBrowserOnMissing: true });
+      const cookie = getOktaCookieHeader(result.jar, config);
+      if (!result.summary.authenticated || !cookie) {
+        return textResult(
+          JSON.stringify({
+            ok: false,
+            message: "No valid Okta browser session. Run workday_okta_login first."
+          }, null, 2)
+        );
+      }
+      return textResult(
+        JSON.stringify(
+          {
+            ok: true,
+            cookie,
+            headerName: "Cookie",
+            validatedAt: result.summary.validatedAt,
+            mode: "browser-session"
+          },
+          null,
+          2
+        )
+      );
+    }
+  };

package/vendor/extension-sso/tools/workday_okta_login.mjs

@@ -0,0 +1,65 @@
+export const description = "Ensure Okta SSO via browser session. Reuses Chrome cookies when already logged in; opens Chrome only when no valid session exists.";
+import { getSsoConfig } from "../src/ssoConfig.mjs";
+import {
+  ensureSsoSession,
+  getOktaCookieHeader,
+  jarSummary,
+  loadCookieJar
+} from "../src/sessionManager.mjs";
+import {
+  getServiceCookieHeader,
+  openOktaAppForAuth,
+  openServiceForAuth
+} from "../src/sessionAuth.mjs";
+import { getOktaApp } from "../src/oktaAppCatalog.mjs";
+import { getWorkdayService, listWorkdayServices } from "../src/serviceRegistry.mjs";
+
+function textResult(text) {
+  return { content: [{ type: "text", text }] };
+}
+
+
+
+export default {
+    name: "workday_okta_login",
+    description:
+      "Ensure Okta SSO via browser session. Reuses Chrome cookies when already logged in; opens Chrome only when no valid session exists.",
+    inputSchema: {
+      type: "object",
+      properties: {
+        forceBrowser: {
+          type: "boolean",
+          description: "Always open the Okta dashboard even if cookies may already exist.",
+          default: false
+        }
+      }
+    },
+    meta: {
+      permissions: { rule: "ask" }
+    },
+    async handler(args = {}) {
+      const config = getSsoConfig();
+      const statuses = [];
+      const result = await ensureSsoSession({
+        config,
+        openBrowserOnMissing: true,
+        forceBrowser: args.forceBrowser === true,
+        onStatus: (status) => statuses.push(status)
+      });
+      return textResult(
+        JSON.stringify(
+          {
+            ok: result.summary.authenticated,
+            message: result.summary.authenticated
+              ? "Okta browser session ready. Cookies saved for Workday service access."
+              : "Okta login incomplete. Complete MFA in Chrome and retry.",
+            openedBrowser: result.openedBrowser,
+            statuses,
+            ...result.summary
+          },
+          null,
+          2
+        )
+      );
+    }
+  };

package/vendor/extension-sso/tools/workday_okta_open_app.mjs

@@ -0,0 +1,63 @@
+export const description = "Open an Okta app page in Chrome so you can sign in when session cookies are missing or stale.";
+import { getSsoConfig } from "../src/ssoConfig.mjs";
+import {
+  ensureSsoSession,
+  getOktaCookieHeader,
+  jarSummary,
+  loadCookieJar
+} from "../src/sessionManager.mjs";
+import {
+  getServiceCookieHeader,
+  openOktaAppForAuth,
+  openServiceForAuth
+} from "../src/sessionAuth.mjs";
+import { getOktaApp } from "../src/oktaAppCatalog.mjs";
+import { getWorkdayService, listWorkdayServices } from "../src/serviceRegistry.mjs";
+
+function textResult(text) {
+  return { content: [{ type: "text", text }] };
+}
+
+
+
+export default {
+    name: "workday_okta_open_app",
+    description:
+      "Open an Okta app page in Chrome so you can sign in when session cookies are missing or stale.",
+    inputSchema: {
+      type: "object",
+      properties: {
+        app: { type: "string", description: "Okta app name from the catalog, e.g. Slack, Sana" }
+      },
+      required: ["app"]
+    },
+    meta: {
+      permissions: { rule: "ask" }
+    },
+    async handler(args = {}) {
+      const appName = String(args.app || "").trim();
+      getOktaApp(appName);
+      const config = getSsoConfig();
+      const statuses = [];
+      const result = await openOktaAppForAuth(appName, {
+        config,
+        onStatus: (status) => statuses.push(status)
+      });
+      return textResult(
+        JSON.stringify(
+          {
+            ok: result.ready,
+            app: appName,
+            authUrl: result.authUrl,
+            openedBrowser: result.openedBrowser,
+            message: result.ready
+              ? `Session cookies ready for ${appName}.`
+              : `Complete login in Chrome at ${result.authUrl}, then retry.`,
+            statuses
+          },
+          null,
+          2
+        )
+      );
+    }
+  };

package/vendor/extension-sso/tools/workday_okta_open_service.mjs

@@ -0,0 +1,63 @@
+export const description = "Open a Workday Okta-protected service in Chrome so you can sign in when session is missing or stale.";
+import { getSsoConfig } from "../src/ssoConfig.mjs";
+import {
+  ensureSsoSession,
+  getOktaCookieHeader,
+  jarSummary,
+  loadCookieJar
+} from "../src/sessionManager.mjs";
+import {
+  getServiceCookieHeader,
+  openOktaAppForAuth,
+  openServiceForAuth
+} from "../src/sessionAuth.mjs";
+import { getOktaApp } from "../src/oktaAppCatalog.mjs";
+import { getWorkdayService, listWorkdayServices } from "../src/serviceRegistry.mjs";
+
+function textResult(text) {
+  return { content: [{ type: "text", text }] };
+}
+
+
+
+export default {
+    name: "workday_okta_open_service",
+    description:
+      "Open a Workday Okta-protected service in Chrome so you can sign in when session is missing or stale.",
+    inputSchema: {
+      type: "object",
+      properties: {
+        service: { type: "string", description: "Service id, e.g. jira, bitbucket, pharos" }
+      },
+      required: ["service"]
+    },
+    meta: {
+      permissions: { rule: "ask" }
+    },
+    async handler(args = {}) {
+      const serviceId = String(args.service).toLowerCase();
+      getWorkdayService(serviceId);
+      const config = getSsoConfig();
+      const statuses = [];
+      const result = await openServiceForAuth(serviceId, {
+        config,
+        onStatus: (status) => statuses.push(status)
+      });
+      return textResult(
+        JSON.stringify(
+          {
+            ok: result.ready,
+            service: serviceId,
+            authUrl: result.authUrl,
+            openedBrowser: result.openedBrowser,
+            message: result.ready
+              ? `Session cookies ready for ${serviceId}.`
+              : `Complete login in Chrome at ${result.authUrl}, then retry.`,
+            statuses
+          },
+          null,
+          2
+        )
+      );
+    }
+  };

package/vendor/extension-sso/tools/workday_okta_status.mjs

@@ -0,0 +1,35 @@
+export const description = "Check whether a valid Okta browser SSO session exists (imports Chrome cookies when needed).";
+import { getSsoConfig } from "../src/ssoConfig.mjs";
+import {
+  ensureSsoSession,
+  getOktaCookieHeader,
+  jarSummary,
+  loadCookieJar
+} from "../src/sessionManager.mjs";
+import {
+  getServiceCookieHeader,
+  openOktaAppForAuth,
+  openServiceForAuth
+} from "../src/sessionAuth.mjs";
+import { getOktaApp } from "../src/oktaAppCatalog.mjs";
+import { getWorkdayService, listWorkdayServices } from "../src/serviceRegistry.mjs";
+
+function textResult(text) {
+  return { content: [{ type: "text", text }] };
+}
+
+
+
+export default {
+    name: "workday_okta_status",
+    description: "Check whether a valid Okta browser SSO session exists (imports Chrome cookies when needed).",
+    inputSchema: { type: "object", properties: {} },
+    meta: {
+      permissions: { rule: "allow" }
+    },
+    async handler() {
+      const config = getSsoConfig();
+      const result = await ensureSsoSession({ config, openBrowserOnMissing: true });
+      return textResult(JSON.stringify(result.summary, null, 2));
+    }
+  };

package/vendor/extension-sso/tools/workday_service_auth.mjs

@@ -0,0 +1,65 @@
+export const description = "Check Okta SSO readiness for a Workday service using stored browser cookies.";
+import { getSsoConfig } from "../src/ssoConfig.mjs";
+import {
+  ensureSsoSession,
+  getOktaCookieHeader,
+  jarSummary,
+  loadCookieJar
+} from "../src/sessionManager.mjs";
+import {
+  getServiceCookieHeader,
+  openOktaAppForAuth,
+  openServiceForAuth
+} from "../src/sessionAuth.mjs";
+import { verifySsoAccess } from "../src/ssoHttpRead.mjs";
+import { getOktaApp } from "../src/oktaAppCatalog.mjs";
+import { getWorkdayService, listWorkdayServices } from "../src/serviceRegistry.mjs";
+
+function textResult(text) {
+  return { content: [{ type: "text", text }] };
+}
+
+
+
+export default {
+    name: "workday_service_auth",
+    description: "Check Okta SSO readiness for a Workday service using stored browser cookies.",
+    inputSchema: {
+      type: "object",
+      properties: {
+        service: { type: "string", description: "Service id, e.g. bamboo, jira, pharos" }
+      },
+      required: ["service"]
+    },
+    meta: { permissions: { rule: "allow" } },
+    async handler(args) {
+      const serviceId = String(args.service).toLowerCase();
+      const service = getWorkdayService(serviceId);
+      const result = await getServiceCookieHeader(serviceId, { openBrowserOnMissing: true });
+      const verification = await verifySsoAccess(serviceId, {
+        openBrowserOnMissing: false,
+        autoAuth: false
+      });
+      const serviceReady = Boolean(result.serviceReady && verification.accessible);
+      return textResult(
+        JSON.stringify(
+          {
+            service,
+            okta: result.summary,
+            host: result.host,
+            hasCookies: Boolean(result.cookie),
+            serviceReady,
+            verification,
+            authUrl: result.authUrl,
+            recommendation: serviceReady
+              ? `Use workday_sso_cookie_header with service=${serviceId} for HTTP calls.`
+              : result.authUrl
+                ? `Open ${result.authUrl} in Chrome via Okta, or run workday_okta_open_service.`
+                : "Run workday_okta_login first."
+          },
+          null,
+          2
+        )
+      );
+    }
+  };

package/vendor/extension-sso/tools/workday_service_operation_read.mjs

@@ -0,0 +1,51 @@
+export const description = "Run a named read-only service operation with structured parameters. Uses GET only and blocks unknown operations.";
+import {
+  extensionReadGet,
+  getExtensionReadAccess,
+  listExtensionReadAccess
+} from "../src/extensionAccess.mjs";
+import { getServiceByExtension } from "../src/serviceRegistry.mjs";
+import { listServiceOperations, readServiceOperation } from "../src/serviceOperations.mjs";
+import {
+  listServiceReadSearchCapabilities,
+  readAnyService,
+  searchAnyService
+} from "../src/serviceReadSearch.mjs";
+
+function textResult(text) {
+  return { content: [{ type: "text", text }] };
+}
+
+
+
+export default {
+    name: "workday_service_operation_read",
+    description:
+      "Run a named read-only service operation with structured parameters. Uses GET only and blocks unknown operations.",
+    inputSchema: {
+      type: "object",
+      properties: {
+        service: { type: "string", description: "Service id, e.g. jira, bitbucket, confluence, bamboo" },
+        operation: { type: "string", description: "Operation id from workday_list_service_operations" },
+        params: {
+          type: "object",
+          description: "Operation parameters, e.g. {\"issueKey\":\"BDS-123\"}",
+          additionalProperties: true
+        }
+      },
+      required: ["service", "operation"]
+    },
+    meta: {
+      permissions: { rule: "ask" },
+      secret_provider: "keychain"
+    },
+    annotations: { readOnlyHint: true, destructiveHint: false, openWorldHint: true },
+    async handler(args) {
+      const result = await readServiceOperation(
+        String(args.service).toLowerCase(),
+        String(args.operation),
+        args.params ?? {}
+      );
+      return textResult(JSON.stringify(result, null, 2));
+    }
+  };

package/vendor/extension-sso/tools/workday_service_read.mjs

@@ -0,0 +1,56 @@
+export const description = "Read any registered Workday service with a GET-only default/provided path. Generated Okta app services route through Okta app read.";
+import {
+  extensionReadGet,
+  getExtensionReadAccess,
+  listExtensionReadAccess
+} from "../src/extensionAccess.mjs";
+import { getServiceByExtension } from "../src/serviceRegistry.mjs";
+import { listServiceOperations, readServiceOperation } from "../src/serviceOperations.mjs";
+import {
+  listServiceReadSearchCapabilities,
+  readAnyService,
+  searchAnyService
+} from "../src/serviceReadSearch.mjs";
+
+function textResult(text) {
+  return { content: [{ type: "text", text }] };
+}
+
+
+
+export default {
+    name: "workday_service_read",
+    description:
+      "Read any registered Workday service with a GET-only default/provided path. Generated Okta app services route through Okta app read.",
+    inputSchema: {
+      type: "object",
+      properties: {
+        service: { type: "string" },
+        scope: { type: "string", description: "Optional provider read scope, e.g. Slack ai-capabilities/bot-history/bot-thread" },
+        restPath: { type: "string" },
+        baseUrl: { type: "string" },
+        limit: { type: "number" },
+        threadTs: { type: "string" },
+        followRedirects: { type: "boolean" },
+        query: { type: "object", additionalProperties: true }
+      },
+      required: ["service"]
+    },
+    meta: {
+      permissions: { rule: "ask" },
+      secret_provider: "keychain"
+    },
+    annotations: { readOnlyHint: true, destructiveHint: false, openWorldHint: true },
+    async handler(args) {
+      const result = await readAnyService(String(args.service).toLowerCase(), {
+        scope: args.scope,
+        restPath: args.restPath,
+        baseUrl: args.baseUrl,
+        limit: args.limit,
+        threadTs: args.threadTs,
+        followRedirects: args.followRedirects,
+        query: args.query
+      });
+      return textResult(JSON.stringify(result, null, 2));
+    }
+  };

package/vendor/extension-sso/tools/workday_service_search.mjs

@@ -0,0 +1,62 @@
+export const description = "Search any registered Workday service. Uses structured provider search when known; otherwise requires a service-specific GET searchPath.";
+import {
+  extensionReadGet,
+  getExtensionReadAccess,
+  listExtensionReadAccess
+} from "../src/extensionAccess.mjs";
+import { getServiceByExtension } from "../src/serviceRegistry.mjs";
+import { listServiceOperations, readServiceOperation } from "../src/serviceOperations.mjs";
+import {
+  listServiceReadSearchCapabilities,
+  readAnyService,
+  searchAnyService
+} from "../src/serviceReadSearch.mjs";
+
+function textResult(text) {
+  return { content: [{ type: "text", text }] };
+}
+
+
+
+export default {
+    name: "workday_service_search",
+    description:
+      "Search any registered Workday service. Uses structured provider search when known; otherwise requires a service-specific GET searchPath.",
+    inputSchema: {
+      type: "object",
+      properties: {
+        service: { type: "string" },
+        query: { type: "string" },
+        scope: { type: "string", description: "Optional provider search scope, e.g. Slack messages/files/all/autocomplete" },
+        searchPath: { type: "string" },
+        params: { type: "object", additionalProperties: true },
+        baseUrl: { type: "string" },
+        count: { type: "number" },
+        sort: { type: "string" },
+        sortDir: { type: "string" },
+        types: { type: "string" },
+        highlight: { type: "boolean" }
+      },
+      required: ["service"]
+    },
+    meta: {
+      permissions: { rule: "ask" },
+      secret_provider: "keychain"
+    },
+    annotations: { readOnlyHint: true, destructiveHint: false, openWorldHint: true },
+    async handler(args) {
+      const result = await searchAnyService(String(args.service).toLowerCase(), {
+        ...(args.params ?? {}),
+        query: args.query,
+        scope: args.scope,
+        searchPath: args.searchPath,
+        baseUrl: args.baseUrl,
+        count: args.count,
+        sort: args.sort,
+        sortDir: args.sortDir,
+        types: args.types,
+        highlight: args.highlight
+      });
+      return textResult(JSON.stringify(result, null, 2));
+    }
+  };

package/vendor/extension-sso/tools/workday_sso_cookie_header.mjs

@@ -0,0 +1,59 @@
+export const description = "Return Cookie header for a Workday Okta-protected service host.";
+import { getSsoConfig } from "../src/ssoConfig.mjs";
+import {
+  ensureSsoSession,
+  getOktaCookieHeader,
+  jarSummary,
+  loadCookieJar
+} from "../src/sessionManager.mjs";
+import {
+  getServiceCookieHeader,
+  openOktaAppForAuth,
+  openServiceForAuth
+} from "../src/sessionAuth.mjs";
+import { getOktaApp } from "../src/oktaAppCatalog.mjs";
+import { getWorkdayService, listWorkdayServices } from "../src/serviceRegistry.mjs";
+
+function textResult(text) {
+  return { content: [{ type: "text", text }] };
+}
+
+
+
+export default {
+    name: "workday_sso_cookie_header",
+    description: "Return Cookie header for a Workday Okta-protected service host.",
+    inputSchema: {
+      type: "object",
+      properties: {
+        service: { type: "string", description: "Service id, e.g. jira, bitbucket, pharos" }
+      },
+      required: ["service"]
+    },
+    meta: {
+      permissions: { rule: "allow" },
+      secret_provider: "keychain"
+    },
+    async handler(args) {
+      const serviceId = String(args.service).toLowerCase();
+      const service = getWorkdayService(serviceId);
+      const result = await getServiceCookieHeader(serviceId);
+      return textResult(
+        JSON.stringify(
+          {
+            service,
+            ok: result.ok,
+            host: result.host,
+            domains: result.domains,
+            cookie: result.cookie,
+            headerName: "Cookie",
+            serviceReady: result.serviceReady,
+            summary: result.summary,
+            message: result.message
+          },
+          null,
+          2
+        )
+      );
+    }
+  };