@yadsh/dsh-web-fetch-authenticated 0.2.0 → 0.3.1

package/lib/types/adapters/jira.d.ts

@@ -0,0 +1,55 @@
+/**
+ * Jira content adapter (SPEC §15.2): recognize `/browse/<ISSUE-KEY>` style
+ * URLs, fetch the issue through the Jira REST API with the SAME authenticated
+ * transport (so network policy, credentials, and limits apply unchanged), and
+ * normalize the response into compact Markdown text — one dense block of the
+ * fields the model actually needs instead of a page of application chrome.
+ * Server/Data Center issues carry wiki-markup descriptions; Cloud issues
+ * carry Atlassian Document Format bodies; both convert to Markdown here.
+ * @module adapters/jira
+ */
+import type { ResolvedAdapter, ResolvedRule } from '../types.js';
+import type { ResolvedAuthSecrets } from '../auth/index.js';
+import type { TransportGlobals } from '../transport/fetch.js';
+/** REST JSON payload the adapter consumes. */
+export type FetchJson = (url: URL) => Promise<{
+    statusCode: number;
+    data: unknown;
+}>;
+/** Everything an adapter needs beyond the URL; mirrors the transport options. */
+export interface AdapterRequestContext {
+    readonly rule: ResolvedRule;
+    readonly globals: TransportGlobals;
+    readonly resolveSecrets: (rule: ResolvedRule) => Promise<ResolvedAuthSecrets>;
+    readonly signal?: AbortSignal;
+}
+/**
+ * Extract an issue key from a URL path. Recognizes `/browse/KEY` at any depth
+ * (deployments under `/jira/browse/…`) and `/issues/KEY`. Returns `undefined`
+ * for URLs the adapter cannot map, so the caller falls back to raw HTML.
+ */
+export declare function extractIssueKey(pathname: string): string | undefined;
+/** Build the REST issue URL for the configured flavor. */
+export declare function issueApiUrl(origin: string, key: string, adapter: ResolvedAdapter, includeQuery?: boolean): URL;
+/** REST paging path of the issue's comments, used by the tester's diagnostics. */
+export declare function commentApiPath(key: string, adapter: ResolvedAdapter): string;
+/** Fetch a Jira issue and normalize it into Markdown text (SPEC §15.2). */
+export declare function fetchIssueMarkdown(requestUrl: URL, adapter: ResolvedAdapter, fetchJson: FetchJson): Promise<{
+    statusCode: number;
+    markdown: string;
+}>;
+/** Convert a description body (wiki markup or ADF) into Markdown. */
+export declare function renderDescription(body: unknown): string;
+/**
+ * Convert Jira wiki markup to Markdown. Handles the heading, list, table,
+ * block, and code constructs that occur in issue descriptions; inline markup
+ * converts conservatively and unknown macros pass through as text.
+ */
+export declare function wikiMarkupToMarkdown(source: string): string;
+/**
+ * Convert an ADF document to Markdown. Recognizes the standard text block
+ * structure (paragraphs, headings, lists, code, quotes, tables); unknown node
+ * types render their descendant text so content is never silently dropped.
+ */
+export declare function adfToMarkdown(document: unknown): string;
+//# sourceMappingURL=jira.d.ts.map

package/lib/types/adapters/markup.d.ts

@@ -0,0 +1,31 @@
+/**
+ * A tiny well-formed XML/XHTML reader for content adapters (SPEC §15.2).
+ * Confluence storage bodies are well-formed XHTML, so a strict recursive
+ * descent parser without external dependencies is enough; anything malformed
+ * surfaces as a thrown `Error` the adapter maps to a structured failure.
+ * Pure text in, node tree out — no Node or DOM dependencies.
+ * @module adapters/markup
+ */
+/** A parsed markup node: an element, a text run, or a comment. */
+export type MarkupNode = MarkupElement | MarkupText;
+export interface MarkupElement {
+    readonly kind: 'element';
+    readonly name: string;
+    readonly attrs: Readonly<Record<string, string>>;
+    readonly children: MarkupNode[];
+}
+export interface MarkupText {
+    readonly kind: 'text';
+    readonly value: string;
+}
+export declare function isElement(node: MarkupNode | undefined): node is MarkupElement;
+export declare function isText(node: MarkupNode | undefined): node is MarkupText;
+/** Decode the XML built-in entities plus numeric references; unknown ones pass through. */
+export declare function decodeEntities(text: string): string;
+/** Parse a well-formed XML/XHTML document fragment into a node tree. */
+export declare function parseMarkup(source: string): MarkupNode[];
+/** Concatenated descendant text of a subtree, with block-ish whitespace collapsed. */
+export declare function textContent(nodes: readonly MarkupNode[]): string;
+/** First descendant element with the given (lower-case) name, depth-first. */
+export declare function findElement(nodes: readonly MarkupNode[], name: string): MarkupElement | undefined;
+//# sourceMappingURL=markup.d.ts.map

package/lib/types/client/sections.d.ts

@@ -5,17 +5,23 @@
  * asks the credentials domain only for configured/writable facts.
  * @module client/sections
  */
-import type { IApiClient } from '@deepseek-ai/dsh-client-connection/client';
-import type { SettingsScope } from '@deepseek-ai/dsh-client-runtime/client';
+import type { CredentialInfo } from '@deepseek-ai/dsh-credentials/types';
+import type { SettingsScope } from '@deepseek-ai/dsh-client-ui-settings/client';
 import type { RemoteResult } from '@deepseek-ai/dsh-typert-protocol';
 import type { DiagnoseReport, ProviderStatusReport, RuleTestReport, WebFetchAuthConfig, AuthenticatedFetchRule } from '../types.js';
+/** Client face of the Host `credentials` Remote namespace (values never ride it). */
+export interface CredentialsRemote {
+    describe(refs: string[]): Promise<RemoteResult<Record<string, CredentialInfo>>>;
+    set(ref: string, value: string): Promise<RemoteResult<void>>;
+    unset(ref: string): Promise<RemoteResult<void>>;
+}
 /** Client face injected into the card. */
 export interface CardFace {
     scope: SettingsScope<WebFetchAuthConfig>;
     status: () => Promise<RemoteResult<ProviderStatusReport>>;
     testRule: (ruleId: string, url?: string) => Promise<RemoteResult<RuleTestReport>>;
     diagnose: (url: string) => Promise<RemoteResult<DiagnoseReport>>;
-    credentials: IApiClient['credentials'];
+    credentials: CredentialsRemote;
 }
 /** Provider overview: status, selection, counts, config errors (SPEC §6.1). */
 export declare function StatusSection({ status: report, warnings }: {

package/lib/types/errors.d.ts

@@ -22,6 +22,7 @@ export declare const AUTH_FETCH_ERROR_CODES: {
     readonly timeout: 'AUTH_FETCH_TIMEOUT';
     readonly invalidUrl: 'AUTH_FETCH_INVALID_URL';
     readonly providerError: 'AUTH_FETCH_PROVIDER_ERROR';
+    readonly adapterFailed: 'AUTH_FETCH_ADAPTER_FAILED';
 };
 /** Scrub free text before it enters an error message. */
 export declare function sanitizedDetail(error: unknown, maxLength?: number): string;
@@ -40,4 +41,6 @@ export declare function unsupportedCharset(charset: string): WebError;
 export declare function timeout(): WebError;
 export declare function aborted(cause?: unknown): WebError;
 export declare function providerError(detail: string, cause?: unknown): WebError;
+/** A content adapter could not produce its normalized text (SPEC §15.2). */
+export declare function adapterFailed(detail: string, cause?: unknown): WebError;
 //# sourceMappingURL=errors.d.ts.map

package/lib/types/index.d.ts

@@ -26,7 +26,7 @@ declare module '@deepseek-ai/cordis' {
 /** Cordis plugin ID. */
 export declare const name = "web-fetch-authenticated";
 export declare const inject: string[];
-export declare const WEB_FETCH_AUTH_SETTINGS_NAMESPACE: import("@deepseek-ai/dsh-settings").SettingsNamespace;
+export declare const WEB_FETCH_AUTH_SETTINGS_NAMESPACE = "web-fetch-authenticated";
 export type Config = WebFetchAuthConfig;
 export declare const Config: import("@deepseek-ai/schemastery").default<WebFetchAuthConfig>;
 /** The host-side Remote face the browser card calls. */

package/lib/types/types.d.ts

@@ -70,6 +70,32 @@ export type AuthConfig = {
     readonly credential: string;
     readonly prefix?: string;
 };
+/**
+ * Per-rule content adapter (SPEC §15.2): `none` returns the raw response to
+ * `dsh-tool-web` (HTML → Markdown conversion upstream); `jira` and
+ * `confluence` rewrite a recognized URL to the product's REST API, fetch it
+ * through the same authenticated transport, and normalize the response into
+ * compact Markdown text.
+ */
+export type AdapterType = 'none' | 'jira' | 'confluence';
+/** Which Jira REST dialect to speak (SPEC §15.2: Server/DC/Cloud differ). */
+export type JiraFlavor = 'server' | 'cloud';
+export interface AdapterConfig {
+    readonly type: AdapterType;
+    /** Jira only: REST API flavor. Default `server` (REST v2, wiki-markup bodies). */
+    readonly jiraFlavor?: JiraFlavor;
+    /** Jira only: include issue comments in the normalized text. Default `false`. */
+    readonly includeComments?: boolean;
+    /** Jira only: include issue links (blocks/duplicates/…) in the text. Default `false`. */
+    readonly includeLinks?: boolean;
+}
+/** Fully resolved adapter settings of a rule (defaults applied). */
+export interface ResolvedAdapter {
+    readonly type: AdapterType;
+    readonly jiraFlavor: JiraFlavor;
+    readonly includeComments: boolean;
+    readonly includeLinks: boolean;
+}
 /** Match section of a rule (SPEC §7/§9): exact hosts, glob paths. */
 export interface RuleMatch {
     /** Default `['https']`. */
@@ -97,6 +123,8 @@ export interface AuthenticatedFetchRule {
     networkPolicy?: NetworkPolicy;
     redirects?: RedirectPolicy;
     limits?: FetchLimits;
+    /** Optional content adapter (SPEC §15.2). Omitted = raw HTTP/HTML passthrough. */
+    adapter?: AdapterConfig;
 }
 /** What happens when no rule matches (SPEC §17). v1 supports `block` only. */
 export type UnmatchedPolicy = 'block';
@@ -143,6 +171,7 @@ export interface ResolvedRule {
     readonly networkPolicy: ResolvedNetworkPolicy;
     readonly redirects: ResolvedRedirectPolicy;
     readonly limits: ResolvedLimits;
+    readonly adapter: ResolvedAdapter;
 }
 export interface ResolvedConfig {
     readonly configVersion: number;
@@ -199,6 +228,8 @@ export interface RuleTestReport {
     readonly detail?: string;
     /** Short secret-scrubbed response preview. */
     readonly preview?: string;
+    /** Adapter applied for the request (`jira`/`confluence`) when the rule selects one. */
+    readonly adapter?: string;
     readonly truncated: boolean;
 }
 /** Sanitized match/policy diagnosis without performing the HTTP request (SPEC §6.4). */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@yadsh/dsh-web-fetch-authenticated",
-  "version": "0.2.0",
+  "version": "0.3.1",
   "description": "Authenticated, policy-gated WebFetchProvider for the DeepSeek Harness web capability seam (ctx.web)",
   "repository": {
     "type": "git",
@@ -48,7 +48,6 @@
       "inject": [
         "@deepseek-ai/dsh-api-gateway",
         "@deepseek-ai/dsh-client-connection",
-        "@deepseek-ai/dsh-client-runtime",
         "@deepseek-ai/dsh-client-ui-settings",
         "@deepseek-ai/dsh-client-ui-settings-plugins"
       ],
@@ -66,45 +65,49 @@
     "LICENSE"
   ],
   "keywords": [
+    "deepseek",
     "deepseek-harness",
     "dsh",
+    "dsh-plugin",
+    "cordis",
     "web-fetch",
     "ssrf",
     "credentials",
-    "cordis"
+    "security",
+    "fetch"
   ],
   "license": "MIT",
   "peerDependencies": {
-    "@deepseek-ai/cordis": "^4.0.1",
-    "@deepseek-ai/dsh-client-connection": ">=0.1.1-rc.2 <0.2.0",
-    "@deepseek-ai/dsh-client-runtime": ">=0.1.1-rc.2 <0.2.0",
-    "@deepseek-ai/dsh-client-ui-settings": ">=0.1.1-rc.2 <0.2.0",
-    "@deepseek-ai/dsh-client-ui-settings-plugins": ">=0.1.1-rc.2 <0.2.0",
-    "@deepseek-ai/dsh-client-ui-slots": ">=0.1.1-rc.2 <0.2.0",
-    "@deepseek-ai/dsh-credentials": ">=0.1.1-rc.2 <0.2.0",
-    "@deepseek-ai/dsh-settings": ">=0.1.1-rc.2 <0.2.0",
-    "@deepseek-ai/dsh-typert-protocol": ">=0.1.1-rc.2 <0.2.0",
-    "@deepseek-ai/dsh-web": ">=0.1.1-rc.2 <0.2.0",
-    "@deepseek-ai/schemastery": "^3.18.1",
+    "@deepseek-ai/cordis": "^4.0.2",
+    "@deepseek-ai/dsh-client-connection": ">=0.1.5-rc.2 <0.2.0",
+    "@deepseek-ai/dsh-client-ui-renderer": ">=0.1.5-rc.2 <0.2.0",
+    "@deepseek-ai/dsh-client-ui-settings": ">=0.1.5-rc.2 <0.2.0",
+    "@deepseek-ai/dsh-client-ui-settings-plugins": ">=0.1.5-rc.2 <0.2.0",
+    "@deepseek-ai/dsh-client-ui-slots": ">=0.1.5-rc.2 <0.2.0",
+    "@deepseek-ai/dsh-credentials": ">=0.1.5-rc.2 <0.2.0",
+    "@deepseek-ai/dsh-settings": ">=0.1.5-rc.2 <0.2.0",
+    "@deepseek-ai/dsh-typert-protocol": ">=0.1.5-rc.2 <0.2.0",
+    "@deepseek-ai/dsh-web": ">=0.1.5-rc.2 <0.2.0",
+    "@deepseek-ai/schemastery": "^3.18.2",
     "react": "^18.2.0"
   },
   "dependencies": {
     "zod": "^4.4.3",
-    "@yadsh/dsh-plugin-log": "^0.2.1"
+    "@yadsh/dsh-plugin-log": "^0.3.0"
   },
   "devDependencies": {
-    "@deepseek-ai/cordis": "4.0.1",
-    "@deepseek-ai/dsh-client-connection": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-client-runtime": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-client-ui-settings": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-client-ui-settings-plugins": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-client-ui-slots": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-credentials": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-settings": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-typert-generator": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-typert-protocol": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-web": "0.1.1-rc.2",
-    "@deepseek-ai/schemastery": "3.18.1",
+    "@deepseek-ai/cordis": "4.0.2",
+    "@deepseek-ai/dsh-client-connection": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-client-ui-renderer": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-client-ui-settings": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-client-ui-settings-plugins": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-client-ui-slots": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-credentials": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-settings": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-typert-generator": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-typert-protocol": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-web": "0.1.5-rc.2",
+    "@deepseek-ai/schemastery": "3.18.2",
     "@types/node": "^26.4.0",
     "@types/react": "18.3.28",
     "eslint": "10.9.1",