@taodigital/connectors 0.0.0-stage → 1.2.0

package/dist/azuredevops.d.ts

@@ -0,0 +1,35 @@
+/**
+ * Azure DevOps connector — credentials passed in, never read from env.
+ * Uses a Personal Access Token (PAT) stored encrypted in Connector.config.
+ *
+ * API reference: https://learn.microsoft.com/en-us/rest/api/azure/devops/
+ */
+export interface AzureDevOpsCredentials {
+    organization: string;
+    project: string;
+    pat: string;
+    areaPath?: string;
+}
+export declare function testConnection(creds: AzureDevOpsCredentials): Promise<{
+    ok: boolean;
+    login?: string;
+    error?: string;
+}>;
+export declare function listRecentWorkItems(creds: AzureDevOpsCredentials, types?: string[], limit?: number): Promise<Array<{
+    id: number;
+    title: string;
+    type: string;
+    state: string;
+    url: string;
+}>>;
+export declare function createBug(creds: AzureDevOpsCredentials, title: string, description: string, priority?: 1 | 2 | 3 | 4): Promise<{
+    id: number;
+    url: string;
+    title: string;
+}>;
+export declare function listPipelines(creds: AzureDevOpsCredentials, limit?: number): Promise<Array<{
+    id: number;
+    name: string;
+    status: string;
+    url: string;
+}>>;

package/dist/azuredevops.js

@@ -0,0 +1,116 @@
+"use strict";
+/**
+ * Azure DevOps connector — credentials passed in, never read from env.
+ * Uses a Personal Access Token (PAT) stored encrypted in Connector.config.
+ *
+ * API reference: https://learn.microsoft.com/en-us/rest/api/azure/devops/
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.testConnection = testConnection;
+exports.listRecentWorkItems = listRecentWorkItems;
+exports.createBug = createBug;
+exports.listPipelines = listPipelines;
+const core_1 = require("@taodigital/core");
+const API_VERSION = '7.1';
+function apiBase(creds) {
+    return `https://dev.azure.com/${encodeURIComponent(creds.organization)}/${encodeURIComponent(creds.project)}/_apis`;
+}
+function authHeaders(pat) {
+    const encoded = Buffer.from(`:${pat}`).toString('base64');
+    return {
+        Authorization: `Basic ${encoded}`,
+        'Content-Type': 'application/json',
+    };
+}
+async function testConnection(creds) {
+    try {
+        await (0, core_1.assertResolvesToPublicAddress)('https://dev.azure.com');
+        const base = apiBase(creds);
+        const res = await fetch(`${base}/wit/wiql?api-version=${API_VERSION}`, {
+            method: 'POST',
+            headers: authHeaders(creds.pat),
+            body: JSON.stringify({ query: "SELECT [System.Id] FROM WorkItems WHERE [System.TeamProject] = @project ORDER BY [System.ChangedDate] DESC" }),
+            signal: AbortSignal.timeout(10_000),
+        });
+        if (res.status === 401)
+            return { ok: false, error: 'Invalid PAT or insufficient permissions.' };
+        if (res.status === 404)
+            return { ok: false, error: `Organization "${creds.organization}" or project "${creds.project}" not found.` };
+        if (!res.ok)
+            return { ok: false, error: `Azure DevOps returned ${res.status}.` };
+        return { ok: true, login: `${creds.organization}/${creds.project}` };
+    }
+    catch (err) {
+        return { ok: false, error: err?.message ?? 'Could not reach Azure DevOps.' };
+    }
+}
+async function listRecentWorkItems(creds, types = ['Bug', 'User Story', 'Task'], limit = 20) {
+    await (0, core_1.assertResolvesToPublicAddress)('https://dev.azure.com');
+    const base = apiBase(creds);
+    const typeFilter = types.map((t) => `'${t}'`).join(', ');
+    const wiqlRes = await fetch(`${base}/wit/wiql?api-version=${API_VERSION}`, {
+        method: 'POST',
+        headers: authHeaders(creds.pat),
+        body: JSON.stringify({
+            query: `SELECT [System.Id],[System.Title],[System.WorkItemType],[System.State] FROM WorkItems WHERE [System.TeamProject] = @project AND [System.WorkItemType] IN (${typeFilter}) ORDER BY [System.ChangedDate] DESC`,
+        }),
+        signal: AbortSignal.timeout(15_000),
+    });
+    if (!wiqlRes.ok)
+        throw new Error(`Azure DevOps WIQL error: ${wiqlRes.status}`);
+    const wiql = (await wiqlRes.json());
+    const ids = (wiql.workItems ?? []).slice(0, limit).map((w) => w.id);
+    if (ids.length === 0)
+        return [];
+    const itemsRes = await fetch(`${base}/wit/workitems?ids=${ids.join(',')}&fields=System.Id,System.Title,System.WorkItemType,System.State&api-version=${API_VERSION}`, { headers: authHeaders(creds.pat), signal: AbortSignal.timeout(15_000) });
+    if (!itemsRes.ok)
+        throw new Error(`Azure DevOps work items fetch error: ${itemsRes.status}`);
+    const items = (await itemsRes.json());
+    return (items.value ?? []).map((w) => ({
+        id: w.id,
+        title: w.fields?.['System.Title'] ?? '',
+        type: w.fields?.['System.WorkItemType'] ?? '',
+        state: w.fields?.['System.State'] ?? '',
+        url: `https://dev.azure.com/${creds.organization}/${creds.project}/_workitems/edit/${w.id}`,
+    }));
+}
+async function createBug(creds, title, description, priority = 2) {
+    await (0, core_1.assertResolvesToPublicAddress)('https://dev.azure.com');
+    const base = apiBase(creds);
+    const patchOps = [
+        { op: 'add', path: '/fields/System.Title', value: title },
+        { op: 'add', path: '/fields/Microsoft.VSTS.TCM.ReproSteps', value: description },
+        { op: 'add', path: '/fields/Microsoft.VSTS.Common.Priority', value: priority },
+    ];
+    if (creds.areaPath) {
+        patchOps.push({ op: 'add', path: '/fields/System.AreaPath', value: creds.areaPath });
+    }
+    const res = await fetch(`${base}/wit/workitems/$Bug?api-version=${API_VERSION}`, {
+        method: 'POST',
+        headers: { ...authHeaders(creds.pat), 'Content-Type': 'application/json-patch+json' },
+        body: JSON.stringify(patchOps),
+        signal: AbortSignal.timeout(15_000),
+    });
+    if (!res.ok)
+        throw new Error(`Azure DevOps create bug error: ${res.status}`);
+    const item = (await res.json());
+    return {
+        id: item.id,
+        title: item.fields?.['System.Title'] ?? title,
+        url: `https://dev.azure.com/${creds.organization}/${creds.project}/_workitems/edit/${item.id}`,
+    };
+}
+async function listPipelines(creds, limit = 10) {
+    await (0, core_1.assertResolvesToPublicAddress)('https://dev.azure.com');
+    const base = apiBase(creds);
+    const res = await fetch(`${base}/pipelines?api-version=${API_VERSION}&$top=${limit}`, { headers: authHeaders(creds.pat), signal: AbortSignal.timeout(15_000) });
+    if (!res.ok)
+        throw new Error(`Azure DevOps pipelines error: ${res.status}`);
+    const data = (await res.json());
+    return (data.value ?? []).map((p) => ({
+        id: p.id,
+        name: p.name,
+        status: p._links?.web ? 'active' : 'unknown',
+        url: p._links?.web?.href ?? `https://dev.azure.com/${creds.organization}/${creds.project}/_build?definitionId=${p.id}`,
+    }));
+}

package/dist/confluence.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Confluence connector — reads pages for requirements-to-test generation.
+ * Same credential shape as JIRA (Atlassian unified auth).
+ */
+export interface ConfluenceCredentials {
+    baseUrl: string;
+    email: string;
+    apiToken: string;
+    password?: string;
+    spaceKey?: string;
+    bearerToken?: string;
+    proxyUrl?: string;
+}
+export declare function testConnection(creds: ConfluenceCredentials): Promise<{
+    ok: boolean;
+    error?: string;
+}>;
+export declare function listSpaces(creds: ConfluenceCredentials): Promise<any>;
+export declare function listPages(creds: ConfluenceCredentials, spaceKey?: string, limit?: number): Promise<any>;
+export declare function getPageContent(creds: ConfluenceCredentials, pageId: string): Promise<string>;
+/** Full-text search across Confluence — finds pages that mention a screen URL or name. */
+export declare function searchPages(creds: ConfluenceCredentials, text: string, limit?: number): Promise<any>;

package/dist/confluence.js

@@ -0,0 +1,114 @@
+"use strict";
+/**
+ * Confluence connector — reads pages for requirements-to-test generation.
+ * Same credential shape as JIRA (Atlassian unified auth).
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.testConnection = testConnection;
+exports.listSpaces = listSpaces;
+exports.listPages = listPages;
+exports.getPageContent = getPageContent;
+exports.searchPages = searchPages;
+const core_1 = require("@taodigital/core");
+function validateProxyUrl(proxyUrl) {
+    let parsed;
+    try {
+        parsed = new URL(proxyUrl);
+    }
+    catch {
+        throw new Error(`Invalid proxy URL: ${proxyUrl}`);
+    }
+    const h = parsed.hostname.toLowerCase();
+    if (h === 'localhost' || h === '127.0.0.1' || h === '::1' || h === '169.254.169.254') {
+        throw new Error('Proxy URL must not target localhost or metadata addresses');
+    }
+}
+async function makeFetch(creds) {
+    if (creds.proxyUrl) {
+        validateProxyUrl(creds.proxyUrl);
+        const { ProxyAgent } = await import('undici');
+        const dispatcher = new ProxyAgent(creds.proxyUrl);
+        return (url, init) => fetch(url, { ...(init ?? {}), dispatcher });
+    }
+    return fetch;
+}
+function authHeader(creds) {
+    if (creds.bearerToken)
+        return `Bearer ${creds.bearerToken}`;
+    const secret = creds.password || creds.apiToken;
+    return 'Basic ' + Buffer.from(`${creds.email}:${secret}`).toString('base64');
+}
+async function testConnection(creds) {
+    try {
+        const doFetch = await makeFetch(creds);
+        if (!creds.proxyUrl)
+            await (0, core_1.assertResolvesToPublicAddress)(creds.baseUrl);
+        const res = await doFetch(`${creds.baseUrl}/wiki/rest/api/user/current`, {
+            headers: { Authorization: authHeader(creds), Accept: 'application/json' },
+        });
+        if (!res.ok)
+            return { ok: false, error: `Confluence returned ${res.status}` };
+        return { ok: true };
+    }
+    catch (err) {
+        return { ok: false, error: String(err) };
+    }
+}
+async function listSpaces(creds) {
+    await (0, core_1.assertResolvesToPublicAddress)(creds.baseUrl);
+    const { getSystemConfig } = await import('@taodigital/core');
+    const cfg = await getSystemConfig('connectors_confluence');
+    const spacesLimit = parseInt(String(cfg?.spacesLimit ?? '50'), 10);
+    const res = await fetch(`${creds.baseUrl}/wiki/rest/api/space?limit=${spacesLimit}`, {
+        headers: { Authorization: authHeader(creds), Accept: 'application/json' },
+    });
+    if (!res.ok)
+        throw new Error(`Confluence error: ${res.status}`);
+    const data = (await res.json());
+    return (data.results ?? []).map((s) => ({ key: s.key, name: s.name }));
+}
+async function listPages(creds, spaceKey, limit) {
+    await (0, core_1.assertResolvesToPublicAddress)(creds.baseUrl);
+    const { getSystemConfig } = await import('@taodigital/core');
+    const cfg = await getSystemConfig('connectors_confluence');
+    const resolvedLimit = limit ?? parseInt(String(cfg?.pagesLimit ?? '25'), 10);
+    const space = spaceKey ?? creds.spaceKey;
+    const url = space
+        ? `${creds.baseUrl}/wiki/rest/api/content?spaceKey=${space}&limit=${resolvedLimit}&type=page`
+        : `${creds.baseUrl}/wiki/rest/api/content?limit=${resolvedLimit}&type=page`;
+    const res = await fetch(url, {
+        headers: { Authorization: authHeader(creds), Accept: 'application/json' },
+    });
+    if (!res.ok)
+        throw new Error(`Confluence error: ${res.status}`);
+    const data = (await res.json());
+    return (data.results ?? []).map((p) => ({ id: p.id, title: p.title }));
+}
+async function getPageContent(creds, pageId) {
+    await (0, core_1.assertResolvesToPublicAddress)(creds.baseUrl);
+    const res = await fetch(`${creds.baseUrl}/wiki/rest/api/content/${pageId}?expand=body.storage`, { headers: { Authorization: authHeader(creds), Accept: 'application/json' } });
+    if (!res.ok)
+        throw new Error(`Confluence error: ${res.status}`);
+    const page = (await res.json());
+    // Strip HTML tags for plain text consumption by the AI.
+    return (page.body?.storage?.value ?? '').replace(/<[^>]+>/g, ' ').replace(/\s+/g, ' ').trim();
+}
+/** Full-text search across Confluence — finds pages that mention a screen URL or name. */
+async function searchPages(creds, text, limit) {
+    await (0, core_1.assertResolvesToPublicAddress)(creds.baseUrl);
+    const { getSystemConfig } = await import('@taodigital/core');
+    const cfg = await getSystemConfig('connectors_confluence');
+    const resolvedLimit = limit ?? parseInt(String(cfg?.searchLimit ?? '5'), 10);
+    const safeText = text.replace(/["\\]/g, ' ').trim();
+    const spaceClause = creds.spaceKey ? ` AND space = "${creds.spaceKey}"` : '';
+    const cql = `type = page AND text ~ "${safeText}"${spaceClause} ORDER BY lastModified DESC`;
+    const res = await fetch(`${creds.baseUrl}/wiki/rest/api/content/search?cql=${encodeURIComponent(cql)}&limit=${resolvedLimit}`, { headers: { Authorization: authHeader(creds), Accept: 'application/json' } });
+    if (!res.ok)
+        return [];
+    const data = (await res.json());
+    return (data.results ?? []).map((p) => ({
+        id: p.id,
+        title: p.title,
+        url: `${creds.baseUrl}/wiki${p._links?.webui ?? ''}`,
+    }));
+}

package/dist/connectors.test.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Security-focused tests for all connectors.
+ * Tests SSRF guard, missing credentials, and happy-path API call shape.
+ * No real network calls are made — fetch is mocked globally.
+ *
+ * Requires DATABASE_URL and MIGRATION_DATABASE_URL env vars to satisfy Prisma's
+ * constructor validation (triggered transitively via @taodigital/core → @taodigital/database).
+ * The test script in package.json sets mock values for these.
+ */
+export {};