@stubbedev/atlassian-mcp 0.1.16 → 0.1.18

package/README.md

@@ -273,10 +273,23 @@ This package is published to npm as `@stubbedev/atlassian-mcp`.
 
 Use semantic versioning for releases. Breaking tool-surface changes should bump the minor version while `<1.0.0` (for example `0.0.x` -> `0.1.0`).
 
-Automatic publish is configured in `.github/workflows/publish.yml`:
+Automatic publish is configured in `.github/workflows/publish.yml` and runs when a new version tag is pushed.
 
-- Push a tag like `v1.0.1` to publish from CI
-- Or run the workflow manually via **Actions → Publish Package**
+Release flow:
+
+```bash
+# choose one: patch | minor | major
+increment=patch
+
+# bumps package.json + package-lock.json,
+# creates a version commit, and creates a git tag (for example v0.1.17)
+npm version "$increment"
+
+# push commit and tag to GitHub
+git push origin HEAD --follow-tags
+```
+
+GitHub Actions will publish the npm release from that pushed tag.
 
 - The workflow is configured for npm Trusted Publisher (OIDC), so no `NPM_TOKEN` secret is required
 
@@ -284,13 +297,6 @@ Required npm setup (one-time):
 
 - In npm package settings, add this GitHub repo/workflow as a Trusted Publisher
 
-Manual publish from local machine:
-
-```bash
-npm run build
-npm publish --access public
-```
-
 ---
 
 ## Creating Personal Access Tokens

package/dist/bitbucket.js

@@ -181,6 +181,7 @@ function validateCommentText(textValue) {
 export class BitbucketClient {
     baseUrl;
     headers;
+    currentUserCache;
     constructor(baseUrl, token) {
         this.baseUrl = baseUrl.replace(/\/$/, '');
         this.headers = {
@@ -237,6 +238,38 @@ export class BitbucketClient {
         }
         return res.text();
     }
+    normalizeIdentity(value) {
+        return (value ?? '').trim().toLowerCase();
+    }
+    async getCurrentUser() {
+        if (this.currentUserCache)
+            return this.currentUserCache;
+        const me = await this.request('GET', '/users/~self');
+        if (!me) {
+            throw new Error('Could not determine current Bitbucket user identity.');
+        }
+        this.currentUserCache = me;
+        return me;
+    }
+    async assertOwnComment(comment) {
+        const me = await this.getCurrentUser();
+        const commentAuthorName = this.normalizeIdentity(comment.author?.name);
+        const commentAuthorDisplayName = this.normalizeIdentity(comment.author?.displayName);
+        const meName = this.normalizeIdentity(me.name);
+        const meSlug = this.normalizeIdentity(me.slug);
+        const meDisplayName = this.normalizeIdentity(me.displayName);
+        const hasStrongCommentIdentity = commentAuthorName.length > 0;
+        const hasStrongUserIdentity = meName.length > 0 || meSlug.length > 0;
+        const matchesByName = commentAuthorName.length > 0 && (commentAuthorName === meName || commentAuthorName === meSlug);
+        const matchesByDisplayNameFallback = !hasStrongCommentIdentity
+            && !hasStrongUserIdentity
+            && commentAuthorDisplayName.length > 0
+            && commentAuthorDisplayName === meDisplayName;
+        if (matchesByName || matchesByDisplayNameFallback) {
+            return;
+        }
+        throw new Error(`You can only edit your own Bitbucket comments. Comment #${comment.id} is authored by ${comment.author?.displayName ?? comment.author?.name ?? 'another user'}.`);
+    }
     // Used internally by context tools — finds the open PR for a given source branch
     async findOpenPrForBranch(projectKey, repoSlug, branch) {
         const targetBranch = branchDisplayId(branch);
@@ -758,6 +791,7 @@ export class BitbucketClient {
         const current = await this.request('GET', `/projects/${projectKey}/repos/${repoSlug}/pull-requests/${args.prId}/comments/${args.commentId}`);
         if (!current)
             throw new Error(`Comment #${args.commentId} not found.`);
+        await this.assertOwnComment(current);
         const targetSeverity = args.severity ?? current.severity ?? 'NORMAL';
         if (args.state && targetSeverity !== 'BLOCKER') {
             throw new Error('state is only supported for BLOCKER comments (tasks). Use threadResolved for normal comment threads.');
@@ -807,7 +841,11 @@ export class BitbucketClient {
         const current = await this.request('GET', `/projects/${projectKey}/repos/${repoSlug}/pull-requests/${args.prId}/comments/${args.commentId}`);
         if (!current)
             throw new Error(`Comment #${args.commentId} not found.`);
-        const path = `/projects/${projectKey}/repos/${repoSlug}/pull-requests/${args.prId}/comments/${args.commentId}?version=${current.version}`;
+        await this.assertOwnComment(current);
+        const commentPath = current.severity === 'BLOCKER'
+            ? `/projects/${projectKey}/repos/${repoSlug}/pull-requests/${args.prId}/blocker-comments/${args.commentId}`
+            : `/projects/${projectKey}/repos/${repoSlug}/pull-requests/${args.prId}/comments/${args.commentId}`;
+        const path = `${commentPath}?version=${current.version}`;
         await this.request('DELETE', path);
         return text(`Comment #${args.commentId} deleted from PR #${args.prId}.`);
     }

package/dist/index.js

@@ -39,6 +39,7 @@ function normalizeJiraMutateArgs(args) {
     }
     return out;
 }
+const JIRA_WIKI_MARKUP_HINT = 'Use Jira wiki markup (Atlassian renderer syntax), not GitHub/CommonMark markdown.';
 server.setRequestHandler(ListToolsRequestSchema, async () => ({
     tools: [
         // ── Context ───────────────────────────────────────────────────────────
@@ -157,7 +158,7 @@ server.setRequestHandler(ListToolsRequestSchema, async () => ({
         },
         {
             name: 'jira_create_issue',
-            description: 'Use when you want to create a new Jira ticket (bug, story, task, etc.). If projectKey/project is omitted, the server auto-picks from branch context or asks you to choose.',
+            description: `Use when you want to create a new Jira ticket (bug, story, task, etc.). If projectKey/project is omitted, the server auto-picks from branch context or asks you to choose. ${JIRA_WIKI_MARKUP_HINT}`,
             inputSchema: {
                 type: 'object',
                 properties: {
@@ -165,7 +166,7 @@ server.setRequestHandler(ListToolsRequestSchema, async () => ({
                     project: { type: 'string', description: 'Alias for projectKey' },
                     issueType: { type: 'string', description: 'Issue type name, for example "Bug", "Story", or "Task"' },
                     summary: { type: 'string', description: 'Issue title' },
-                    description: { type: 'string', description: 'Issue description (optional)' },
+                    description: { type: 'string', description: `Issue description (optional). ${JIRA_WIKI_MARKUP_HINT}` },
                     assignee: { type: 'string', description: 'Username to assign to (optional)' },
                     priority: { type: 'string', description: 'Priority name, e.g. "High" (optional)' },
                     sprintId: { type: 'number', description: 'Sprint ID to immediately add the new issue into (optional)' },
@@ -175,13 +176,13 @@ server.setRequestHandler(ListToolsRequestSchema, async () => ({
         },
         {
             name: 'jira_update_issue',
-            description: 'Use when you want to edit an existing Jira ticket: title, description, assignee, or priority.',
+            description: `Use when you want to edit an existing Jira ticket: title, description, assignee, or priority. ${JIRA_WIKI_MARKUP_HINT}`,
             inputSchema: {
                 type: 'object',
                 properties: {
                     issueKey: { type: 'string', description: 'Jira issue key' },
                     summary: { type: 'string', description: 'New summary (optional)' },
-                    description: { type: 'string', description: 'New description (optional)' },
+                    description: { type: 'string', description: `New description (optional). ${JIRA_WIKI_MARKUP_HINT}` },
                     assignee: { type: 'string', description: 'New assignee username, or empty string to unassign (optional)' },
                     priority: { type: 'string', description: 'New priority name (optional)' },
                     sprintId: { type: 'number', description: 'Sprint ID to add this issue into (optional)' },
@@ -204,7 +205,7 @@ server.setRequestHandler(ListToolsRequestSchema, async () => ({
         },
         {
             name: 'jira_mutate_issue',
-            description: 'Use when you want to bundle Jira mutations in one call: create or target an issue, then optional update, sprint assignment, transition, and comment.',
+            description: `Use when you want to bundle Jira mutations in one call: create or target an issue, then optional update, sprint assignment, transition, and comment. ${JIRA_WIKI_MARKUP_HINT}`,
             inputSchema: {
                 type: 'object',
                 properties: {
@@ -216,7 +217,7 @@ server.setRequestHandler(ListToolsRequestSchema, async () => ({
                             project: { type: 'string', description: 'Alias for projectKey' },
                             issueType: { type: 'string', description: 'Issue type name, e.g. Bug, Story, Task' },
                             summary: { type: 'string', description: 'Issue title' },
-                            description: { type: 'string', description: 'Issue description (optional)' },
+                            description: { type: 'string', description: `Issue description (optional). ${JIRA_WIKI_MARKUP_HINT}` },
                             assignee: { type: 'string', description: 'Username to assign to (optional)' },
                             priority: { type: 'string', description: 'Priority name (optional)' },
                         },
@@ -226,7 +227,7 @@ server.setRequestHandler(ListToolsRequestSchema, async () => ({
                         type: 'object',
                         properties: {
                             summary: { type: 'string', description: 'New summary (optional)' },
-                            description: { type: 'string', description: 'New description (optional)' },
+                            description: { type: 'string', description: `New description (optional). ${JIRA_WIKI_MARKUP_HINT}` },
                             assignee: { type: 'string', description: 'New assignee username, or empty string to unassign (optional)' },
                             priority: { type: 'string', description: 'New priority name (optional)' },
                         },
@@ -234,7 +235,7 @@ server.setRequestHandler(ListToolsRequestSchema, async () => ({
                     sprintId: { type: 'number', description: 'Sprint ID to add the issue into (optional)' },
                     transitionId: { type: 'string', description: 'Transition ID (optional if transitionName is provided)' },
                     transitionName: { type: 'string', description: 'Transition name, e.g. In Progress (optional if transitionId is provided)' },
-                    comment: { type: 'string', description: 'Comment to add after other mutations (optional, no emoji)' },
+                    comment: { type: 'string', description: `Comment to add after other mutations (optional, no emoji). ${JIRA_WIKI_MARKUP_HINT}` },
                 },
             },
         },
@@ -259,7 +260,7 @@ server.setRequestHandler(ListToolsRequestSchema, async () => ({
         },
         {
             name: 'jira_get_comments',
-            description: 'Use when you want the discussion thread on a Jira ticket, with pagination for long threads.',
+            description: 'Use when you want the discussion thread on a Jira ticket, with pagination for long threads. Includes comment IDs for follow-up edits.',
             inputSchema: {
                 type: 'object',
                 properties: {
@@ -272,16 +273,41 @@ server.setRequestHandler(ListToolsRequestSchema, async () => ({
         },
         {
             name: 'jira_add_comment',
-            description: 'Use when you want to leave a comment on a Jira ticket. Keep comments concise, plain text, and free of filler. Never include emojis.',
+            description: `Use when you want to leave a comment on a Jira ticket. Keep comments concise and free of filler. Never include emojis. ${JIRA_WIKI_MARKUP_HINT}`,
             inputSchema: {
                 type: 'object',
                 properties: {
                     issueKey: { type: 'string', description: 'Jira issue key' },
-                    body: { type: 'string', description: 'Concise comment text only. No filler. Do not include emojis.' },
+                    body: { type: 'string', description: `Concise comment text. No filler. Do not include emojis. ${JIRA_WIKI_MARKUP_HINT}` },
                 },
                 required: ['issueKey', 'body'],
             },
         },
+        {
+            name: 'jira_edit_comment',
+            description: `Use when you want to edit one of your own comments on a Jira ticket. Editing comments from other users is rejected. Never include emojis. ${JIRA_WIKI_MARKUP_HINT}`,
+            inputSchema: {
+                type: 'object',
+                properties: {
+                    issueKey: { type: 'string', description: 'Jira issue key' },
+                    commentId: { type: 'string', description: 'Jira comment ID (from jira_get_comments or jira_issue_overview output)' },
+                    body: { type: 'string', description: `Updated concise comment text. No filler. Do not include emojis. ${JIRA_WIKI_MARKUP_HINT}` },
+                },
+                required: ['issueKey', 'commentId', 'body'],
+            },
+        },
+        {
+            name: 'jira_delete_comment',
+            description: 'Use when you want to delete one of your own comments on a Jira ticket by comment ID. Deleting comments from other users is rejected.',
+            inputSchema: {
+                type: 'object',
+                properties: {
+                    issueKey: { type: 'string', description: 'Jira issue key' },
+                    commentId: { type: 'string', description: 'Jira comment ID to delete (from jira_get_comments or jira_issue_overview output)' },
+                },
+                required: ['issueKey', 'commentId'],
+            },
+        },
         {
             name: 'jira_transition_issue',
             description: 'Use when you want to move a Jira ticket to another status. Provide a transition name (for example "In Progress") or a transition ID.',
@@ -604,7 +630,7 @@ Keep comments concise, plain text, and free of filler. Never include emojis. You
         },
         {
             name: 'bitbucket_update_pr_comment',
-            description: 'Use when you want to edit PR comments, resolve/reopen normal discussion threads, or manage task-style BLOCKER comments. Hint: for normal comments, resolve/reopen means threadResolved; for BLOCKER tasks, resolve/reopen uses state. Keep comments concise, plain text, and free of filler. Never include emojis. You can pass projectKey/repoSlug or project/repo.',
+            description: 'Use when you want to edit your own PR comments, resolve/reopen normal discussion threads, or manage task-style BLOCKER comments. Editing comments from other users is rejected. Hint: for normal comments, resolve/reopen means threadResolved; for BLOCKER tasks, resolve/reopen uses state. Keep comments concise, plain text, and free of filler. Never include emojis. You can pass projectKey/repoSlug or project/repo.',
             inputSchema: {
                 type: 'object',
                 properties: {
@@ -624,7 +650,7 @@ Keep comments concise, plain text, and free of filler. Never include emojis. You
         },
         {
             name: 'bitbucket_delete_pr_comment',
-            description: 'Use when you want to delete a PR comment by comment ID. You can pass projectKey/repoSlug or project/repo.',
+            description: 'Use when you want to delete one of your own PR comments by comment ID. Deleting comments from other users is rejected. You can pass projectKey/repoSlug or project/repo.',
             inputSchema: {
                 type: 'object',
                 properties: {
@@ -746,6 +772,10 @@ server.setRequestHandler(CallToolRequestSchema, async (request) => {
                 return await jira.getComments(args);
             case 'jira_add_comment':
                 return await jira.addComment(args);
+            case 'jira_edit_comment':
+                return await jira.editComment(args);
+            case 'jira_delete_comment':
+                return await jira.deleteComment(args);
             case 'jira_transition_issue':
                 return await jira.transitionIssue(args);
             // Bitbucket

package/dist/jira.js

@@ -83,13 +83,14 @@ function validateCommentBody(body) {
         throw new Error('Jira comment body must not be empty.');
     }
     if (EMOJI_RE.test(trimmed)) {
-        throw new Error('Jira comments must not include emoji. Use concise plain text only.');
+        throw new Error('Jira comments must not include emoji. Use concise Jira wiki markup or plain text only.');
     }
     return trimmed;
 }
 export class JiraClient {
     baseUrl;
     headers;
+    currentUserCache;
     constructor(baseUrl, token) {
         this.baseUrl = baseUrl.replace(/\/$/, '');
         this.headers = {
@@ -129,6 +130,40 @@ export class JiraClient {
     async requestAgile(method, path, body) {
         return this.requestWithBase('/rest/agile/1.0', method, path, body);
     }
+    normalizeIdentity(value) {
+        return (value ?? '').trim().toLowerCase();
+    }
+    async getCurrentUser() {
+        if (this.currentUserCache)
+            return this.currentUserCache;
+        const me = await this.request('GET', '/myself');
+        if (!me) {
+            throw new Error('Could not determine current Jira user identity.');
+        }
+        this.currentUserCache = me;
+        return me;
+    }
+    async assertOwnComment(comment) {
+        const me = await this.getCurrentUser();
+        const commentAuthorName = this.normalizeIdentity(comment.author.name);
+        const commentAuthorKey = this.normalizeIdentity(comment.author.key);
+        const commentAuthorDisplayName = this.normalizeIdentity(comment.author.displayName);
+        const meName = this.normalizeIdentity(me.name);
+        const meKey = this.normalizeIdentity(me.key);
+        const meDisplayName = this.normalizeIdentity(me.displayName);
+        const hasStrongCommentIdentity = commentAuthorName.length > 0 || commentAuthorKey.length > 0;
+        const hasStrongUserIdentity = meName.length > 0 || meKey.length > 0;
+        const matchesByNameOrKey = (commentAuthorName.length > 0 && (commentAuthorName === meName || commentAuthorName === meKey))
+            || (commentAuthorKey.length > 0 && (commentAuthorKey === meName || commentAuthorKey === meKey));
+        const matchesByDisplayNameFallback = !hasStrongCommentIdentity
+            && !hasStrongUserIdentity
+            && commentAuthorDisplayName.length > 0
+            && commentAuthorDisplayName === meDisplayName;
+        if (matchesByNameOrKey || matchesByDisplayNameFallback) {
+            return;
+        }
+        throw new Error(`You can only edit your own Jira comments. Comment ${comment.id} is authored by ${comment.author.displayName}.`);
+    }
     async addIssuesToSprintInternal(sprintId, issueKeys) {
         await this.requestAgile('POST', `/sprint/${sprintId}/issue`, { issues: issueKeys });
     }
@@ -365,7 +400,7 @@ export class JiraClient {
             else {
                 for (const c of items) {
                     const date = c.created.slice(0, 10);
-                    lines.push(`--- ${c.author.displayName} (${date}) ---`, c.body, '');
+                    lines.push(`--- #${c.id} ${c.author.displayName} (${date}) ---`, c.body, '');
                 }
             }
         }
@@ -536,7 +571,7 @@ export class JiraClient {
             return text('No comments found.');
         const blocks = data.comments.map((c) => {
             const date = c.created.slice(0, 10);
-            return `--- ${c.author.displayName} (${date}) ---\n${c.body}`;
+            return `--- #${c.id} ${c.author.displayName} (${date}) ---\n${c.body}`;
         });
         const page = pagination(data.total, startAt, data.comments.length);
         return text(`${data.total} comment(s) on ${issueKey}${page}:\n\n${blocks.join('\n\n')}`);
@@ -545,6 +580,32 @@ export class JiraClient {
         await this.request('POST', `/issue/${args.issueKey}/comment`, { body: validateCommentBody(args.body) });
         return text(`Comment added to ${args.issueKey}.`);
     }
+    async editComment(args) {
+        const commentId = String(args.commentId).trim();
+        if (!commentId) {
+            throw new Error('commentId is required.');
+        }
+        const path = `/issue/${args.issueKey}/comment/${commentId}`;
+        const current = await this.request('GET', path);
+        if (!current)
+            throw new Error(`Comment ${commentId} not found on ${args.issueKey}.`);
+        await this.assertOwnComment(current);
+        await this.request('PUT', path, { body: validateCommentBody(args.body) });
+        return text(`Comment ${commentId} updated on ${args.issueKey}.`);
+    }
+    async deleteComment(args) {
+        const commentId = String(args.commentId).trim();
+        if (!commentId) {
+            throw new Error('commentId is required.');
+        }
+        const path = `/issue/${args.issueKey}/comment/${commentId}`;
+        const current = await this.request('GET', path);
+        if (!current)
+            throw new Error(`Comment ${commentId} not found on ${args.issueKey}.`);
+        await this.assertOwnComment(current);
+        await this.request('DELETE', path);
+        return text(`Comment ${commentId} deleted from ${args.issueKey}.`);
+    }
     async transitionIssue(args) {
         const transitionId = await this.resolveTransitionId(args.issueKey, args.transitionId, args.transitionName);
         await this.transitionIssueInternal(args.issueKey, transitionId);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@stubbedev/atlassian-mcp",
-  "version": "0.1.16",
+  "version": "0.1.18",
   "description": "MCP server for self-hosted Jira and Bitbucket",
   "license": "MIT",
   "type": "module",