@shipfox/api-integration-jira 4.0.0

package/.turbo/turbo-build.log

@@ -0,0 +1,2 @@
+$ shipfox-swc
+Successfully compiled: 9 files with swc (49.37ms)

package/.turbo/turbo-type$colon$emit.log

@@ -0,0 +1 @@
+$ shipfox-tsc-emit

package/.turbo/turbo-type.log

@@ -0,0 +1 @@
+$ shipfox-tsc-check

package/CHANGELOG.md

@@ -0,0 +1,11 @@
+# @shipfox/api-integration-jira
+
+## 4.0.0
+
+### Patch Changes
+
+- Updated dependencies [15c5f84]
+- Updated dependencies [bbba3b7]
+  - @shipfox/api-integration-jira-dto@4.0.0
+  - @shipfox/node-drizzle@0.3.0
+  - @shipfox/api-secrets@4.0.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Shipfox
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,5 @@
+# Jira integration
+
+This package owns Jira provider persistence and token storage. The provider is non-functional until ENG-1001 adds the OAuth install flow.
+
+Connect Jira with a dedicated Shipfox service account. Jira 3LO actions are authored by the authorizing account, so events from that account are dropped to prevent agent actions from triggering themselves.

package/dist/config.d.ts

@@ -0,0 +1,10 @@
+export declare const config: Readonly<{
+    JIRA_OAUTH_CLIENT_ID: string;
+    JIRA_OAUTH_CLIENT_SECRET: string;
+    JIRA_OAUTH_REDIRECT_URL: string;
+    JIRA_WEBHOOK_SIGNING_SECRET: string;
+    JIRA_WEBHOOK_BASE_URL: string;
+    JIRA_API_BASE_URL: string;
+    JIRA_AUTH_BASE_URL: string;
+} & import("@shipfox/config").CleanedEnvAccessors>;
+//# sourceMappingURL=config.d.ts.map

package/dist/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,MAAM;;;;;;;;kDAwBjB,CAAC"}

package/dist/config.js

@@ -0,0 +1,28 @@
+import { createConfig, str, url } from '@shipfox/config';
+export const config = createConfig({
+    JIRA_OAUTH_CLIENT_ID: str({
+        desc: 'OAuth client ID of the Jira app, used to start and complete the Jira connect flow. Required.'
+    }),
+    JIRA_OAUTH_CLIENT_SECRET: str({
+        desc: 'OAuth client secret of the Jira app, used to exchange authorization codes for access and refresh tokens. Required.'
+    }),
+    JIRA_OAUTH_REDIRECT_URL: url({
+        desc: 'Public client callback URL Jira redirects to after OAuth authorization, such as https://shipfox.example.com/integrations/jira/callback. Required.'
+    }),
+    JIRA_WEBHOOK_SIGNING_SECRET: str({
+        desc: 'Secret used to verify incoming Jira webhooks. It must match the webhook signing secret configured for the Jira app. Required.'
+    }),
+    JIRA_WEBHOOK_BASE_URL: url({
+        desc: 'Public base URL Jira sends webhooks to. Its origin must be added to the Jira app webhook allowlist. Required.'
+    }),
+    JIRA_API_BASE_URL: url({
+        desc: 'Jira API base URL. Override this only when routing Jira API requests through a proxy or test server.',
+        default: 'https://api.atlassian.com'
+    }),
+    JIRA_AUTH_BASE_URL: url({
+        desc: 'Jira OAuth base URL. Override this only when routing OAuth requests through a proxy or test server.',
+        default: 'https://auth.atlassian.com'
+    })
+});
+
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/config.ts"],"sourcesContent":["import {createConfig, str, url} from '@shipfox/config';\n\nexport const config = createConfig({\n  JIRA_OAUTH_CLIENT_ID: str({\n    desc: 'OAuth client ID of the Jira app, used to start and complete the Jira connect flow. Required.',\n  }),\n  JIRA_OAUTH_CLIENT_SECRET: str({\n    desc: 'OAuth client secret of the Jira app, used to exchange authorization codes for access and refresh tokens. Required.',\n  }),\n  JIRA_OAUTH_REDIRECT_URL: url({\n    desc: 'Public client callback URL Jira redirects to after OAuth authorization, such as https://shipfox.example.com/integrations/jira/callback. Required.',\n  }),\n  JIRA_WEBHOOK_SIGNING_SECRET: str({\n    desc: 'Secret used to verify incoming Jira webhooks. It must match the webhook signing secret configured for the Jira app. Required.',\n  }),\n  JIRA_WEBHOOK_BASE_URL: url({\n    desc: 'Public base URL Jira sends webhooks to. Its origin must be added to the Jira app webhook allowlist. Required.',\n  }),\n  JIRA_API_BASE_URL: url({\n    desc: 'Jira API base URL. Override this only when routing Jira API requests through a proxy or test server.',\n    default: 'https://api.atlassian.com',\n  }),\n  JIRA_AUTH_BASE_URL: url({\n    desc: 'Jira OAuth base URL. Override this only when routing OAuth requests through a proxy or test server.',\n    default: 'https://auth.atlassian.com',\n  }),\n});\n"],"names":["createConfig","str","url","config","JIRA_OAUTH_CLIENT_ID","desc","JIRA_OAUTH_CLIENT_SECRET","JIRA_OAUTH_REDIRECT_URL","JIRA_WEBHOOK_SIGNING_SECRET","JIRA_WEBHOOK_BASE_URL","JIRA_API_BASE_URL","default","JIRA_AUTH_BASE_URL"],"mappings":"AAAA,SAAQA,YAAY,EAAEC,GAAG,EAAEC,GAAG,QAAO,kBAAkB;AAEvD,OAAO,MAAMC,SAASH,aAAa;IACjCI,sBAAsBH,IAAI;QACxBI,MAAM;IACR;IACAC,0BAA0BL,IAAI;QAC5BI,MAAM;IACR;IACAE,yBAAyBL,IAAI;QAC3BG,MAAM;IACR;IACAG,6BAA6BP,IAAI;QAC/BI,MAAM;IACR;IACAI,uBAAuBP,IAAI;QACzBG,MAAM;IACR;IACAK,mBAAmBR,IAAI;QACrBG,MAAM;QACNM,SAAS;IACX;IACAC,oBAAoBV,IAAI;QACtBG,MAAM;QACNM,SAAS;IACX;AACF,GAAG"}

package/dist/core/errors.d.ts

@@ -0,0 +1,10 @@
+export declare class JiraConnectionNotFoundError extends Error {
+    constructor(connectionId: string);
+}
+export declare class JiraAccessTokenMissingError extends Error {
+    constructor(connectionId: string);
+}
+export declare class JiraInstallationSiteMismatchError extends Error {
+    constructor(connectionId: string, cloudId: string);
+}
+//# sourceMappingURL=errors.d.ts.map

package/dist/core/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/core/errors.ts"],"names":[],"mappings":"AAAA,qBAAa,2BAA4B,SAAQ,KAAK;gBACxC,YAAY,EAAE,MAAM;CAIjC;AAED,qBAAa,2BAA4B,SAAQ,KAAK;gBACxC,YAAY,EAAE,MAAM;CAIjC;AAED,qBAAa,iCAAkC,SAAQ,KAAK;gBAC9C,YAAY,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM;CAMlD"}

package/dist/core/errors.js

@@ -0,0 +1,20 @@
+export class JiraConnectionNotFoundError extends Error {
+    constructor(connectionId){
+        super(`Jira integration connection was not found: ${connectionId}`);
+        this.name = 'JiraConnectionNotFoundError';
+    }
+}
+export class JiraAccessTokenMissingError extends Error {
+    constructor(connectionId){
+        super(`Jira access token is missing for connection: ${connectionId}`);
+        this.name = 'JiraAccessTokenMissingError';
+    }
+}
+export class JiraInstallationSiteMismatchError extends Error {
+    constructor(connectionId, cloudId){
+        super(`Jira connection is already linked to a different site: ${connectionId} (attempted ${cloudId})`);
+        this.name = 'JiraInstallationSiteMismatchError';
+    }
+}
+
+//# sourceMappingURL=errors.js.map

package/dist/core/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/core/errors.ts"],"sourcesContent":["export class JiraConnectionNotFoundError extends Error {\n  constructor(connectionId: string) {\n    super(`Jira integration connection was not found: ${connectionId}`);\n    this.name = 'JiraConnectionNotFoundError';\n  }\n}\n\nexport class JiraAccessTokenMissingError extends Error {\n  constructor(connectionId: string) {\n    super(`Jira access token is missing for connection: ${connectionId}`);\n    this.name = 'JiraAccessTokenMissingError';\n  }\n}\n\nexport class JiraInstallationSiteMismatchError extends Error {\n  constructor(connectionId: string, cloudId: string) {\n    super(\n      `Jira connection is already linked to a different site: ${connectionId} (attempted ${cloudId})`,\n    );\n    this.name = 'JiraInstallationSiteMismatchError';\n  }\n}\n"],"names":["JiraConnectionNotFoundError","Error","connectionId","name","JiraAccessTokenMissingError","JiraInstallationSiteMismatchError","cloudId"],"mappings":"AAAA,OAAO,MAAMA,oCAAoCC;IAC/C,YAAYC,YAAoB,CAAE;QAChC,KAAK,CAAC,CAAC,2CAA2C,EAAEA,cAAc;QAClE,IAAI,CAACC,IAAI,GAAG;IACd;AACF;AAEA,OAAO,MAAMC,oCAAoCH;IAC/C,YAAYC,YAAoB,CAAE;QAChC,KAAK,CAAC,CAAC,6CAA6C,EAAEA,cAAc;QACpE,IAAI,CAACC,IAAI,GAAG;IACd;AACF;AAEA,OAAO,MAAME,0CAA0CJ;IACrD,YAAYC,YAAoB,EAAEI,OAAe,CAAE;QACjD,KAAK,CACH,CAAC,uDAAuD,EAAEJ,aAAa,YAAY,EAAEI,QAAQ,CAAC,CAAC;QAEjG,IAAI,CAACH,IAAI,GAAG;IACd;AACF"}

package/dist/core/tokens.d.ts

@@ -0,0 +1,36 @@
+export interface JiraConnectionResolverResult {
+    workspaceId: string;
+}
+export interface JiraSecretsStore {
+    getSecret(params: {
+        workspaceId: string;
+        namespace: string;
+        key: string;
+    }): Promise<string | null>;
+    setSecrets(params: {
+        workspaceId: string;
+        namespace: string;
+        values: Record<string, string>;
+        editedBy?: string | null | undefined;
+    }): Promise<void>;
+}
+export interface CreateJiraTokenStoreParams {
+    resolveConnection(connectionId: string): Promise<JiraConnectionResolverResult | undefined>;
+    secrets: JiraSecretsStore;
+}
+export interface StoreJiraTokensParams {
+    connectionId: string;
+    accessToken: string;
+    refreshToken?: string | undefined;
+    editedBy?: string | null | undefined;
+}
+export interface GetJiraAccessTokenParams {
+    connectionId: string;
+}
+export interface JiraTokenStore {
+    storeTokens(params: StoreJiraTokensParams): Promise<void>;
+    getAccessToken(params: GetJiraAccessTokenParams): Promise<string>;
+}
+export declare function jiraSecretsNamespace(connectionId: string): string;
+export declare function createJiraTokenStore(params: CreateJiraTokenStoreParams): JiraTokenStore;
+//# sourceMappingURL=tokens.d.ts.map

package/dist/core/tokens.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tokens.d.ts","sourceRoot":"","sources":["../../src/core/tokens.ts"],"names":[],"mappings":"AAKA,MAAM,WAAW,4BAA4B;IAC3C,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,gBAAgB;IAC/B,SAAS,CAAC,MAAM,EAAE;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAC,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IACjG,UAAU,CAAC,MAAM,EAAE;QACjB,WAAW,EAAE,MAAM,CAAC;QACpB,SAAS,EAAE,MAAM,CAAC;QAClB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC/B,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;KACtC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACnB;AAED,MAAM,WAAW,0BAA0B;IACzC,iBAAiB,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,4BAA4B,GAAG,SAAS,CAAC,CAAC;IAC3F,OAAO,EAAE,gBAAgB,CAAC;CAC3B;AAED,MAAM,WAAW,qBAAqB;IACpC,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;CACtC;AAED,MAAM,WAAW,wBAAwB;IACvC,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,cAAc;IAC7B,WAAW,CAAC,MAAM,EAAE,qBAAqB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1D,cAAc,CAAC,MAAM,EAAE,wBAAwB,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CACnE;AAED,wBAAgB,oBAAoB,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,CAEjE;AAED,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,0BAA0B,GAAG,cAAc,CAgCvF"}

package/dist/core/tokens.js

@@ -0,0 +1,40 @@
+import { JiraAccessTokenMissingError, JiraConnectionNotFoundError } from '#core/errors.js';
+const ACCESS_TOKEN_KEY = 'ACCESS_TOKEN';
+const REFRESH_TOKEN_KEY = 'REFRESH_TOKEN';
+export function jiraSecretsNamespace(connectionId) {
+    return `system/integrations/jira/${connectionId}`;
+}
+export function createJiraTokenStore(params) {
+    async function resolveWorkspaceId(connectionId) {
+        const connection = await params.resolveConnection(connectionId);
+        if (!connection) throw new JiraConnectionNotFoundError(connectionId);
+        return connection.workspaceId;
+    }
+    return {
+        async storeTokens (input) {
+            const workspaceId = await resolveWorkspaceId(input.connectionId);
+            const values = {
+                [ACCESS_TOKEN_KEY]: input.accessToken
+            };
+            if (input.refreshToken) values[REFRESH_TOKEN_KEY] = input.refreshToken;
+            await params.secrets.setSecrets({
+                workspaceId,
+                namespace: jiraSecretsNamespace(input.connectionId),
+                values,
+                editedBy: input.editedBy
+            });
+        },
+        async getAccessToken (input) {
+            const workspaceId = await resolveWorkspaceId(input.connectionId);
+            const token = await params.secrets.getSecret({
+                workspaceId,
+                namespace: jiraSecretsNamespace(input.connectionId),
+                key: ACCESS_TOKEN_KEY
+            });
+            if (!token) throw new JiraAccessTokenMissingError(input.connectionId);
+            return token;
+        }
+    };
+}
+
+//# sourceMappingURL=tokens.js.map

package/dist/core/tokens.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/core/tokens.ts"],"sourcesContent":["import {JiraAccessTokenMissingError, JiraConnectionNotFoundError} from '#core/errors.js';\n\nconst ACCESS_TOKEN_KEY = 'ACCESS_TOKEN';\nconst REFRESH_TOKEN_KEY = 'REFRESH_TOKEN';\n\nexport interface JiraConnectionResolverResult {\n  workspaceId: string;\n}\n\nexport interface JiraSecretsStore {\n  getSecret(params: {workspaceId: string; namespace: string; key: string}): Promise<string | null>;\n  setSecrets(params: {\n    workspaceId: string;\n    namespace: string;\n    values: Record<string, string>;\n    editedBy?: string | null | undefined;\n  }): Promise<void>;\n}\n\nexport interface CreateJiraTokenStoreParams {\n  resolveConnection(connectionId: string): Promise<JiraConnectionResolverResult | undefined>;\n  secrets: JiraSecretsStore;\n}\n\nexport interface StoreJiraTokensParams {\n  connectionId: string;\n  accessToken: string;\n  refreshToken?: string | undefined;\n  editedBy?: string | null | undefined;\n}\n\nexport interface GetJiraAccessTokenParams {\n  connectionId: string;\n}\n\nexport interface JiraTokenStore {\n  storeTokens(params: StoreJiraTokensParams): Promise<void>;\n  getAccessToken(params: GetJiraAccessTokenParams): Promise<string>;\n}\n\nexport function jiraSecretsNamespace(connectionId: string): string {\n  return `system/integrations/jira/${connectionId}`;\n}\n\nexport function createJiraTokenStore(params: CreateJiraTokenStoreParams): JiraTokenStore {\n  async function resolveWorkspaceId(connectionId: string): Promise<string> {\n    const connection = await params.resolveConnection(connectionId);\n    if (!connection) throw new JiraConnectionNotFoundError(connectionId);\n    return connection.workspaceId;\n  }\n\n  return {\n    async storeTokens(input) {\n      const workspaceId = await resolveWorkspaceId(input.connectionId);\n      const values: Record<string, string> = {[ACCESS_TOKEN_KEY]: input.accessToken};\n      if (input.refreshToken) values[REFRESH_TOKEN_KEY] = input.refreshToken;\n\n      await params.secrets.setSecrets({\n        workspaceId,\n        namespace: jiraSecretsNamespace(input.connectionId),\n        values,\n        editedBy: input.editedBy,\n      });\n    },\n\n    async getAccessToken(input) {\n      const workspaceId = await resolveWorkspaceId(input.connectionId);\n      const token = await params.secrets.getSecret({\n        workspaceId,\n        namespace: jiraSecretsNamespace(input.connectionId),\n        key: ACCESS_TOKEN_KEY,\n      });\n      if (!token) throw new JiraAccessTokenMissingError(input.connectionId);\n      return token;\n    },\n  };\n}\n"],"names":["JiraAccessTokenMissingError","JiraConnectionNotFoundError","ACCESS_TOKEN_KEY","REFRESH_TOKEN_KEY","jiraSecretsNamespace","connectionId","createJiraTokenStore","params","resolveWorkspaceId","connection","resolveConnection","workspaceId","storeTokens","input","values","accessToken","refreshToken","secrets","setSecrets","namespace","editedBy","getAccessToken","token","getSecret","key"],"mappings":"AAAA,SAAQA,2BAA2B,EAAEC,2BAA2B,QAAO,kBAAkB;AAEzF,MAAMC,mBAAmB;AACzB,MAAMC,oBAAoB;AAqC1B,OAAO,SAASC,qBAAqBC,YAAoB;IACvD,OAAO,CAAC,yBAAyB,EAAEA,cAAc;AACnD;AAEA,OAAO,SAASC,qBAAqBC,MAAkC;IACrE,eAAeC,mBAAmBH,YAAoB;QACpD,MAAMI,aAAa,MAAMF,OAAOG,iBAAiB,CAACL;QAClD,IAAI,CAACI,YAAY,MAAM,IAAIR,4BAA4BI;QACvD,OAAOI,WAAWE,WAAW;IAC/B;IAEA,OAAO;QACL,MAAMC,aAAYC,KAAK;YACrB,MAAMF,cAAc,MAAMH,mBAAmBK,MAAMR,YAAY;YAC/D,MAAMS,SAAiC;gBAAC,CAACZ,iBAAiB,EAAEW,MAAME,WAAW;YAAA;YAC7E,IAAIF,MAAMG,YAAY,EAAEF,MAAM,CAACX,kBAAkB,GAAGU,MAAMG,YAAY;YAEtE,MAAMT,OAAOU,OAAO,CAACC,UAAU,CAAC;gBAC9BP;gBACAQ,WAAWf,qBAAqBS,MAAMR,YAAY;gBAClDS;gBACAM,UAAUP,MAAMO,QAAQ;YAC1B;QACF;QAEA,MAAMC,gBAAeR,KAAK;YACxB,MAAMF,cAAc,MAAMH,mBAAmBK,MAAMR,YAAY;YAC/D,MAAMiB,QAAQ,MAAMf,OAAOU,OAAO,CAACM,SAAS,CAAC;gBAC3CZ;gBACAQ,WAAWf,qBAAqBS,MAAMR,YAAY;gBAClDmB,KAAKtB;YACP;YACA,IAAI,CAACoB,OAAO,MAAM,IAAItB,4BAA4Ba,MAAMR,YAAY;YACpE,OAAOiB;QACT;IACF;AACF"}