jira-ai 1.5.0 → 1.7.1

package/README.md

@@ -51,12 +51,13 @@ Errors are returned as structured JSON to stdout:
 
 ### Dry-Run / Preview Mode
 
-Preview write operations without executing them. The `--dry-run` flag is available on `issue create`, `issue update`, and `issue transition`. No Jira API write calls are made — output is purely a preview.
+Preview write operations without executing them. The `--dry-run` flag is available on `issue create`, `issue update`, `issue transition`, and `issue worklog add/update/delete`. No Jira API write calls are made — output is purely a preview.
 
 ```bash
 jira-ai issue update PROJ-123 --priority High --dry-run
 jira-ai issue transition PROJ-123 Done --resolution Fixed --dry-run
 jira-ai issue create --project PROJ --type Bug --title "Fix crash" --dry-run
+jira-ai issue worklog add PROJ-123 --time 2h --comment "Debugging" --dry-run
 ```
 
 Dry-run output follows a consistent JSON structure:
@@ -74,7 +75,7 @@ Dry-run output follows a consistent JSON structure:
 }
 ```
 
-The `preview` field contains the same output the real command would produce, so AI agents can process it identically. Phase 1 supports `issue create`, `issue update`, and `issue transition` only.
+The `preview` field contains the same output the real command would produce, so AI agents can process it identically. Phase 1 supports `issue create`, `issue update`, and `issue transition`. Worklog dry-run: `issue worklog add`, `issue worklog update`, `issue worklog delete`.
 
 ### Issue Hierarchy Tree
 
@@ -208,6 +209,74 @@ jira-ai issue comments PROJ-123 --since 2026-01-01T00:00:00Z --reverse --limit 2
 
 **Activity types:** `status_change`, `field_change`, `comment_added`, `comment_updated`, `attachment_added`, `attachment_removed`, `link_added`, `link_removed`
 
+### Worklog Management
+
+Log time against issues with full CRUD support:
+
+```bash
+jira-ai issue worklog add PROJ-123 --time 2h
+```
+
+Add a comment and specify when the work started:
+
+```bash
+jira-ai issue worklog add PROJ-123 --time 1d2h30m --comment "Backend refactor" --started "2026-04-15T09:00:00+02:00"
+```
+
+The `--started` flag accepts any standard ISO 8601 timestamp. Timezone offsets are automatically normalized to Jira's required format (`yyyy-MM-dd'T'HH:mm:ss.SSS±HHMM`):
+
+- `2026-04-15T07:00:00Z` → `2026-04-15T07:00:00.000+0000`
+- `2026-04-15T10:00:00+03:00` → `2026-04-15T10:00:00.000+0300`
+- `2026-04-15T07:00:00-05:30` → `2026-04-15T07:00:00.000-0530`
+
+When omitted, `--started` defaults to the current time.
+
+Log time with estimate adjustment (`--adjust-estimate` accepts `auto`, `new`, `leave`, or `manual`):
+
+```bash
+jira-ai issue worklog add PROJ-123 --time 4h --adjust-estimate new --new-estimate 2d
+```
+
+Use `--reduce-by` with `--adjust-estimate manual` to decrease the remaining estimate:
+
+```bash
+jira-ai issue worklog add PROJ-123 --time 3h --adjust-estimate manual --reduce-by 2h
+```
+
+List worklogs for an issue:
+
+```bash
+jira-ai issue worklog list PROJ-123
+```
+
+Filter by time range or author:
+
+```bash
+jira-ai issue worklog list PROJ-123 --started-after 1713139200000 --started-before 1715731200000
+jira-ai issue worklog list PROJ-123 --author-account-id 557058:abc123-def456-ghi789
+```
+
+Update an existing worklog:
+
+```bash
+jira-ai issue worklog update PROJ-123 --id 12345 --time 3h --comment "Updated after review"
+```
+
+Delete a worklog (use `--increase-by` with `--adjust-estimate manual` to restore estimate):
+
+```bash
+jira-ai issue worklog delete PROJ-123 --id 12345
+jira-ai issue worklog delete PROJ-123 --id 12345 --adjust-estimate manual --increase-by 2h
+```
+
+Preview any write operation with `--dry-run`:
+
+```bash
+jira-ai issue worklog add PROJ-123 --time 2h --dry-run
+```
+
+Duration format uses Jira-style notation: `1w` (5 working days), `1d` (8 hours), `1h`, `30m`, or combinations like `1d2h30m`.
+
 ## Service Account Authentication
 
 Atlassian service accounts use scoped API tokens that must authenticate through the `api.atlassian.com` gateway rather than direct site URLs.
@@ -296,15 +365,134 @@ jira-ai issue search --query overdue-tasks --limit 10
 
 Saved queries are mutually exclusive with raw JQL — you cannot provide both a positional JQL argument and `--query` at the same time.
 
+## Presets
+
+Predefined configuration presets let you quickly set up permission levels without manually editing `settings.yaml`. Presets configure `allowed-commands`, `allowed-jira-projects`, and `allowed-confluence-spaces` in one step.
+
+The `--preset`, `--list-presets`, `--detect-preset`, `--apply`, `--validate`, and `--reset` flags are mutually exclusive — only one can be used at a time.
+
+### Available Presets
+
+| Preset | Description |
+| :--- | :--- |
+| `read-only` | AI can only observe. No create, update, delete, or transition operations. |
+| `standard` | AI can perform common productive actions but cannot do destructive operations (delete, sprint management). |
+| `my-tasks` | AI has full command access but is restricted to issues where the current user participated (assignee, reporter, commenter, or watcher). |
+| `yolo` | Unrestricted access. The AI can do everything. The name explicitly signals risk. |
+
+#### What each preset allows
+
+- **`read-only`** — `issue get/search/stats/comments/activity/tree/worklog.list/link.list/link.types/attach/list`, `project list/statuses/types/fields`, `user me/search/worklog`, `confl get/spaces/pages/search`, `epic list/get/issues/progress`, `board list/get/config/issues`, `sprint list/get/issues/tree`
+- **`standard`** — Everything in `read-only`, plus `issue create/update/transition/comment/assign/label.add/label.remove/link.create/attach.upload/attach.download/worklog.add/worklog.update`, `confl create/comment/update`, `epic create/update/link/unlink`, `sprint update`
+- **`my-tasks`** — All commands across all domains (`issue`, `project`, `user`, `confl`, `epic`, `board`, `sprint`, `backlog`), but issue visibility is filtered to those where the user participated (see [globalParticipationFilter](#globalparticipationfilter) below)
+- **`yolo`** — All commands, all projects, all Confluence spaces. No restrictions.
+
+### Usage
+
+Apply a preset:
+
+```bash
+jira-ai settings --preset read-only
+jira-ai settings --preset standard
+jira-ai settings --preset my-tasks
+jira-ai settings --preset yolo
+```
+
+List all available presets with their full configuration details:
+
+```bash
+jira-ai settings --list-presets
+```
+
+Detect which preset (if any) your current settings match:
+
+```bash
+jira-ai settings --detect-preset
+```
+
+If your settings don't match any preset exactly, `--detect-preset` reports `custom` and shows the closest match with a diff of added/removed commands.
+
+Reset settings to defaults:
+
+```bash
+jira-ai settings --reset
+```
+
+Validate a settings file without applying it:
+
+```bash
+jira-ai settings --validate my-settings.yaml
+```
+
+Apply a settings file:
+
+```bash
+jira-ai settings --apply my-settings.yaml
+```
+
+View current settings:
+
+```bash
+jira-ai settings
+```
+
+After applying a preset, you can further customize permissions by editing `~/.jira-ai/settings.yaml`. Saved queries are preserved when switching presets.
+
+### globalParticipationFilter
+
+The `my-tasks` preset sets a `globalParticipationFilter` in `settings.yaml` that restricts which issues the AI can see and interact with. Only issues where the current user matches at least one participation criterion are accessible:
+
+```yaml
+defaults:
+  globalParticipationFilter:
+    was_assignee: true
+    was_reporter: true
+    was_commenter: true
+    is_watcher: true
+```
+
+| Field | JQL equivalent | Meaning |
+| :--- | :--- | :--- |
+| `was_assignee` | `assignee was currentUser()` | User was ever assigned to the issue |
+| `was_reporter` | `reporter = currentUser()` | User is the issue reporter |
+| `was_commenter` | `issue in issueHistory()` | User commented on the issue |
+| `is_watcher` | `issue in watchedIssues()` | User is watching the issue |
+
+The filter applies to both search queries (JQL is automatically wrapped) and direct issue access (per-issue validation). You can customize the filter after applying a preset by editing `~/.jira-ai/settings.yaml` — set individual fields to `false` to relax that criterion.
+
 ## Configuration & Restrictions
 
 Tool allows you to have very complex configutations of what Projects/Jira commands/Issue types you would have acess to thought the tool.
-Use this command to start setup: 
+
+### Quick setup with presets
+
+The fastest way to configure permissions is with a preset (see [Presets](#presets) above):
+
+```bash
+jira-ai settings --preset standard
+```
+
+### Manual setup
+
+Use this command to start setup:
 
 ```bash
 jira-ai settings --help
 ```
 
+You can also validate or apply settings from a YAML file:
+
+```bash
+jira-ai settings --validate my-settings.yaml
+jira-ai settings --apply my-settings.yaml
+```
+
+To revert to default settings:
+
+```bash
+jira-ai settings --reset
+```
+
 All avalible commands: [https://github.com/festoinc/jira-ai/blob/main/all_avaliable_commands.md](https://github.com/festoinc/jira-ai/blob/main/all_avaliable_commands.md)
 
 ## Links

package/dist/cli.js

@@ -33,6 +33,7 @@ import { sprintListCommand, sprintGetCommand, sprintCreateCommand, sprintStartCo
 import { backlogMoveCommand } from './commands/backlog.js';
 import { issueCommentsCommand } from './commands/issue-comments.js';
 import { issueActivityCommand } from './commands/issue-activity.js';
+import { issueWorklogListCommand, issueWorklogAddCommand, issueWorklogUpdateCommand, issueWorklogDeleteCommand, } from './commands/issue-worklog.js';
 import { aboutCommand } from './commands/about.js';
 import { authCommand } from './commands/auth.js';
 import { settingsCommand } from './commands/settings.js';
@@ -245,6 +246,88 @@ issue
 }, {
     validateArgs: (args) => validateOptions(IssueKeySchema, args[0])
 }));
+// Issue worklog subcommands
+const worklog = issue
+    .command('worklog')
+    .description('Manage worklogs for a Jira issue');
+worklog
+    .command('list <issue-id>')
+    .description('List all worklogs for a Jira issue.')
+    .option('--started-after <timestamp>', 'Only return worklogs started at or after this UNIX timestamp (ms)')
+    .option('--started-before <timestamp>', 'Only return worklogs started before this UNIX timestamp (ms)')
+    .option('--author-account-id <accountId>', 'Filter by author account ID')
+    .action(withPermission('issue.worklog.list', (issueKey, options) => {
+    return issueWorklogListCommand({
+        issueKey,
+        startedAfter: options.startedAfter ? parseInt(options.startedAfter, 10) : undefined,
+        startedBefore: options.startedBefore ? parseInt(options.startedBefore, 10) : undefined,
+        authorAccountId: options.authorAccountId,
+    });
+}, {
+    validateArgs: (args) => validateOptions(IssueKeySchema, args[0])
+}));
+worklog
+    .command('add <issue-id>')
+    .description('Log time against a Jira issue.')
+    .requiredOption('--time <duration>', 'Time to log (e.g. 1h, 30m, 1d2h30m, 1w)')
+    .option('--comment <text>', 'Optional comment for this worklog entry')
+    .option('--started <datetime>', 'When the work started (ISO 8601, defaults to now). Timezone offsets are auto-normalized.')
+    .option('--adjust-estimate <method>', 'Estimate adjustment: auto, new, leave, manual')
+    .option('--new-estimate <duration>', 'New remaining estimate (use with --adjust-estimate new or manual)')
+    .option('--reduce-by <duration>', 'Reduce remaining estimate by this amount (use with --adjust-estimate manual)')
+    .action(withPermission('issue.worklog.add', (issueKey, options) => {
+    return issueWorklogAddCommand({
+        issueKey,
+        time: options.time,
+        comment: options.comment,
+        started: options.started,
+        adjustEstimate: options.adjustEstimate,
+        newEstimate: options.newEstimate,
+        reduceBy: options.reduceBy,
+    });
+}, {
+    validateArgs: (args) => validateOptions(IssueKeySchema, args[0])
+}));
+worklog
+    .command('update <issue-id>')
+    .description('Update an existing worklog entry.')
+    .requiredOption('--id <worklog-id>', 'ID of the worklog to update')
+    .option('--time <duration>', 'New time spent (e.g. 1h, 30m, 1d)')
+    .option('--comment <text>', 'New comment for this worklog')
+    .option('--started <datetime>', 'New start time (ISO 8601). Timezone offsets are auto-normalized.')
+    .option('--adjust-estimate <method>', 'Estimate adjustment: auto, new, leave, manual')
+    .option('--new-estimate <duration>', 'New remaining estimate')
+    .action(withPermission('issue.worklog.update', (issueKey, options) => {
+    return issueWorklogUpdateCommand({
+        issueKey,
+        id: options.id,
+        time: options.time,
+        comment: options.comment,
+        started: options.started,
+        adjustEstimate: options.adjustEstimate,
+        newEstimate: options.newEstimate,
+    });
+}, {
+    validateArgs: (args) => validateOptions(IssueKeySchema, args[0])
+}));
+worklog
+    .command('delete <issue-id>')
+    .description('Delete a worklog entry from a Jira issue.')
+    .requiredOption('--id <worklog-id>', 'ID of the worklog to delete')
+    .option('--adjust-estimate <method>', 'Estimate adjustment: auto, new, leave, manual')
+    .option('--new-estimate <duration>', 'New remaining estimate (use with --adjust-estimate new)')
+    .option('--increase-by <duration>', 'Increase remaining estimate by this amount')
+    .action(withPermission('issue.worklog.delete', (issueKey, options) => {
+    return issueWorklogDeleteCommand({
+        issueKey,
+        id: options.id,
+        adjustEstimate: options.adjustEstimate,
+        newEstimate: options.newEstimate,
+        increaseBy: options.increaseBy,
+    });
+}, {
+    validateArgs: (args) => validateOptions(IssueKeySchema, args[0])
+}));
 issue
     .command('stats <issue-ids>')
     .description('Calculate time-based metrics for one or more issues (comma-separated). Shows time logged, estimates, and status breakdown.')
@@ -680,12 +763,19 @@ program
     .option('--apply <path>', 'Validate and apply settings from a YAML file')
     .option('--validate <path>', 'Perform schema and deep validation of a settings YAML file')
     .option('--reset', 'Revert settings to default')
+    .option('--preset <name>', 'Apply a predefined configuration preset (read-only, standard, my-tasks, yolo)')
+    .option('--list-presets', 'List all available predefined presets with their details')
+    .option('--detect-preset', 'Detect which preset (if any) matches current settings')
     .addHelpText('after', `
 Examples:
   $ jira-ai settings
   $ jira-ai settings --validate my-settings.yaml
   $ jira-ai settings --apply my-settings.yaml
   $ jira-ai settings --reset
+  $ jira-ai settings --preset read-only
+  $ jira-ai settings --preset standard
+  $ jira-ai settings --list-presets
+  $ jira-ai settings --detect-preset
 
 Settings File Structure:
   defaults:

package/dist/commands/issue-worklog.js

@@ -0,0 +1,162 @@
+import { getIssueWorklogsList, addWorklogEntry, updateWorklogEntry, deleteWorklogEntry, } from '../lib/jira-client.js';
+import { CommandError } from '../lib/errors.js';
+import { outputResult } from '../lib/json-mode.js';
+import { isDryRun, formatDryRunResult } from '../lib/dry-run.js';
+import { parseDuration, normalizeJiraTimestamp } from '../lib/utils.js';
+export async function issueWorklogListCommand(options) {
+    const { issueKey, startedAfter, startedBefore, authorAccountId } = options;
+    const filterOptions = {};
+    if (startedAfter !== undefined)
+        filterOptions.startedAfter = startedAfter;
+    if (startedBefore !== undefined)
+        filterOptions.startedBefore = startedBefore;
+    if (authorAccountId !== undefined)
+        filterOptions.authorAccountId = authorAccountId;
+    try {
+        const result = await getIssueWorklogsList(issueKey, filterOptions);
+        outputResult(result);
+    }
+    catch (error) {
+        if (error instanceof CommandError)
+            throw error;
+        const errorMsg = error.message?.toLowerCase() || '';
+        const hints = [];
+        if (errorMsg.includes('404')) {
+            hints.push('Check that the issue key is correct');
+        }
+        else if (errorMsg.includes('403')) {
+            hints.push('You may not have permission to view worklogs on this issue');
+        }
+        throw new CommandError(`Failed to list worklogs: ${error.message}`, { hints });
+    }
+}
+export async function issueWorklogAddCommand(options) {
+    const { issueKey, time, comment, started, adjustEstimate, newEstimate, reduceBy } = options;
+    const timeSpentSeconds = parseDuration(time);
+    if (timeSpentSeconds === null) {
+        throw new CommandError(`Invalid duration: "${time}". Use Jira format e.g. 1h, 30m, 1d2h30m, 1w.`, { hints: ['Examples: 1h, 30m, 1d, 1w, 1d2h30m'] });
+    }
+    if (adjustEstimate === 'new' && !newEstimate) {
+        throw new CommandError('--new-estimate is required when --adjust-estimate is "new"', {
+            hints: ['Example: --adjust-estimate new --new-estimate 5h']
+        });
+    }
+    if (adjustEstimate === 'manual' && !newEstimate && !reduceBy) {
+        throw new CommandError('--new-estimate or --reduce-by is required when --adjust-estimate is "manual"', {
+            hints: ['Example: --adjust-estimate manual --reduce-by 1h']
+        });
+    }
+    if (isDryRun()) {
+        formatDryRunResult('issue worklog add', issueKey, { timeSpentSeconds, comment, started, adjustEstimate, newEstimate, reduceBy });
+        return;
+    }
+    try {
+        const result = await addWorklogEntry(issueKey, {
+            timeSpentSeconds,
+            comment,
+            started: started !== undefined ? normalizeJiraTimestamp(started) : undefined,
+            adjustEstimate,
+            newEstimate,
+            reduceBy,
+        });
+        outputResult(result);
+    }
+    catch (error) {
+        if (error instanceof CommandError)
+            throw error;
+        const errorMsg = error.message?.toLowerCase() || '';
+        const hints = [];
+        if (errorMsg.includes('404')) {
+            hints.push('Check that the issue key is correct');
+        }
+        else if (errorMsg.includes('403')) {
+            hints.push('You may not have permission to log work on this issue');
+        }
+        throw new CommandError(`Failed to add worklog: ${error.message}`, { hints });
+    }
+}
+export async function issueWorklogUpdateCommand(options) {
+    const { issueKey, id, time, comment, started, adjustEstimate, newEstimate } = options;
+    if (time === undefined && comment === undefined && started === undefined) {
+        throw new CommandError('At least one of --time, --comment, or --started must be provided.');
+    }
+    let timeSpentSeconds;
+    if (time !== undefined) {
+        const parsed = parseDuration(time);
+        if (parsed === null) {
+            throw new CommandError(`Invalid duration: "${time}". Use Jira format e.g. 1h, 30m, 1d2h30m, 1w.`, { hints: ['Examples: 1h, 30m, 1d, 1w, 1d2h30m'] });
+        }
+        timeSpentSeconds = parsed;
+    }
+    if (adjustEstimate === 'new' && !newEstimate) {
+        throw new CommandError('--new-estimate is required when --adjust-estimate is "new"', {
+            hints: ['Example: --adjust-estimate new --new-estimate 5h']
+        });
+    }
+    if (adjustEstimate === 'manual' && !newEstimate) {
+        throw new CommandError('--new-estimate is required when --adjust-estimate is "manual"', {
+            hints: ['Example: --adjust-estimate manual --new-estimate 5h']
+        });
+    }
+    if (isDryRun()) {
+        formatDryRunResult('issue worklog update', `${issueKey} / worklog ${id}`, { timeSpentSeconds, comment, started, adjustEstimate, newEstimate });
+        return;
+    }
+    try {
+        const result = await updateWorklogEntry(issueKey, id, {
+            timeSpentSeconds,
+            comment,
+            started: started !== undefined ? normalizeJiraTimestamp(started) : undefined,
+            adjustEstimate,
+            newEstimate,
+        });
+        outputResult(result);
+    }
+    catch (error) {
+        if (error instanceof CommandError)
+            throw error;
+        const errorMsg = error.message?.toLowerCase() || '';
+        const hints = [];
+        if (errorMsg.includes('404')) {
+            hints.push('Check that the issue key and worklog ID are correct');
+        }
+        else if (errorMsg.includes('403')) {
+            hints.push('You may not have permission to update this worklog');
+        }
+        throw new CommandError(`Failed to update worklog: ${error.message}`, { hints });
+    }
+}
+export async function issueWorklogDeleteCommand(options) {
+    const { issueKey, id, adjustEstimate, newEstimate, increaseBy } = options;
+    if (adjustEstimate === 'new' && !newEstimate) {
+        throw new CommandError('--new-estimate is required when --adjust-estimate is "new"', {
+            hints: ['Example: --adjust-estimate new --new-estimate 5h']
+        });
+    }
+    if (adjustEstimate === 'manual' && !newEstimate && !increaseBy) {
+        throw new CommandError('--new-estimate or --increase-by is required when --adjust-estimate is "manual"', {
+            hints: ['Example: --adjust-estimate manual --increase-by 1h']
+        });
+    }
+    if (isDryRun()) {
+        formatDryRunResult('issue worklog delete', `${issueKey} / worklog ${id}`, { id, adjustEstimate, newEstimate, increaseBy });
+        return;
+    }
+    try {
+        await deleteWorklogEntry(issueKey, id, { adjustEstimate, newEstimate, increaseBy });
+        outputResult({ deleted: true, issueKey, id });
+    }
+    catch (error) {
+        if (error instanceof CommandError)
+            throw error;
+        const errorMsg = error.message?.toLowerCase() || '';
+        const hints = [];
+        if (errorMsg.includes('404')) {
+            hints.push('Check that the issue key and worklog ID are correct');
+        }
+        else if (errorMsg.includes('403')) {
+            hints.push('You may not have permission to delete this worklog');
+        }
+        throw new CommandError(`Failed to delete worklog: ${error.message}`, { hints });
+    }
+}

package/dist/commands/settings.js

@@ -1,12 +1,40 @@
 import fs from 'fs';
 import yaml from 'js-yaml';
-import { loadSettings, saveSettings, DEFAULT_SETTINGS, migrateSettings } from '../lib/settings.js';
+import { loadSettings, saveSettings, DEFAULT_SETTINGS, migrateSettings, __resetCache__, } from '../lib/settings.js';
 import { SettingsSchema } from '../lib/validation.js';
 import { getProjects } from '../lib/jira-client.js';
 import { CommandError } from '../lib/errors.js';
 import { validateEnvVars } from '../lib/utils.js';
 import { outputResult } from '../lib/json-mode.js';
+import { getPreset, listPresets, detectPreset } from '../lib/presets.js';
 export async function settingsCommand(options) {
+    const presetFlags = [options.preset, options.listPresets, options.detectPreset].filter(Boolean).length;
+    const exclusiveFlags = presetFlags + (options.reset ? 1 : 0) + (options.apply ? 1 : 0) + (options.validate ? 1 : 0);
+    if (exclusiveFlags > 1) {
+        throw new CommandError('--preset, --list-presets, --detect-preset, --reset, --apply, and --validate are mutually exclusive');
+    }
+    if (options.listPresets) {
+        outputResult({ presets: listPresets() });
+        return;
+    }
+    if (options.detectPreset) {
+        const settings = loadSettings();
+        const defaults = settings.defaults || DEFAULT_SETTINGS.defaults;
+        outputResult(detectPreset(defaults));
+        return;
+    }
+    if (options.preset) {
+        const preset = getPreset(options.preset);
+        __resetCache__();
+        const current = loadSettings();
+        const newSettings = {
+            defaults: { ...preset.defaults, ...(preset.globalParticipationFilter ? { globalParticipationFilter: preset.globalParticipationFilter } : {}) },
+            savedQueries: current.savedQueries,
+        };
+        saveSettings(newSettings);
+        outputResult({ success: true, preset: options.preset, message: `Preset applied. Edit ~/.jira-ai/settings.yaml to customize.` });
+        return;
+    }
     if (options.reset) {
         try {
             saveSettings(DEFAULT_SETTINGS);

package/dist/lib/jira-client.js

@@ -1,4 +1,5 @@
 import { Version3Client } from 'jira.js';
+import { markdownToAdf } from 'marklassian';
 import { calculateStatusStatistics, convertADFToMarkdown } from './utils.js';
 import { loadCredentials } from './auth-storage.js';
 import { applyGlobalFilters, isProjectAllowed, isCommandAllowed, validateIssueAgainstFilters, getAllowedProjects } from './settings.js';
@@ -1228,3 +1229,140 @@ export async function deleteAttachment(issueKey, attachmentId) {
     const client = getJiraClient();
     await client.issueAttachments.removeAttachment(attachmentId);
 }
+const WORKLOG_PAGE_SIZE = 5000;
+/**
+ * List all worklogs for an issue (returns structured result).
+ * Paginates automatically through all pages and supports optional filtering.
+ */
+export async function getIssueWorklogsList(issueIdOrKey, options = {}) {
+    const { startedAfter, startedBefore, authorAccountId } = options;
+    const client = getJiraClient();
+    const allWorklogs = [];
+    let startAt = 0;
+    while (true) {
+        const params = { issueIdOrKey, startAt, maxResults: WORKLOG_PAGE_SIZE };
+        if (startedAfter !== undefined)
+            params.startedAfter = startedAfter;
+        if (startedBefore !== undefined)
+            params.startedBefore = startedBefore;
+        const response = await client.issueWorklogs.getIssueWorklog(params);
+        const page = (response.worklogs || []).map((w) => ({
+            id: w.id || '',
+            author: {
+                accountId: w.author?.accountId || '',
+                displayName: w.author?.displayName || 'Unknown',
+                emailAddress: w.author?.emailAddress,
+            },
+            comment: convertADFToMarkdown(w.comment),
+            created: w.created || '',
+            updated: w.updated || '',
+            started: w.started || '',
+            timeSpent: w.timeSpent || '',
+            timeSpentSeconds: w.timeSpentSeconds || 0,
+            issueKey: issueIdOrKey,
+        }));
+        allWorklogs.push(...page);
+        const totalOnServer = typeof response.total === 'number' ? response.total : page.length;
+        if (allWorklogs.length >= totalOnServer || page.length < WORKLOG_PAGE_SIZE)
+            break;
+        startAt += page.length;
+    }
+    const filtered = authorAccountId
+        ? allWorklogs.filter(w => w.author.accountId === authorAccountId)
+        : allWorklogs;
+    return {
+        issueKey: issueIdOrKey,
+        worklogs: filtered,
+        total: filtered.length,
+    };
+}
+/**
+ * Add a worklog entry to an issue
+ */
+export async function addWorklogEntry(issueIdOrKey, options) {
+    const client = getJiraClient();
+    const { timeSpentSeconds, comment, started, adjustEstimate, newEstimate, reduceBy } = options;
+    const params = {
+        issueIdOrKey,
+        timeSpentSeconds,
+        comment: comment ? markdownToAdf(comment) : undefined,
+        started: started || new Date().toISOString().replace('Z', '+0000'),
+    };
+    if (adjustEstimate)
+        params.adjustEstimate = adjustEstimate;
+    if (newEstimate)
+        params.newEstimate = newEstimate;
+    if (reduceBy)
+        params.reduceBy = reduceBy;
+    const w = await client.issueWorklogs.addWorklog(params);
+    return {
+        id: w.id || '',
+        author: {
+            accountId: w.author?.accountId || '',
+            displayName: w.author?.displayName || 'Unknown',
+            emailAddress: w.author?.emailAddress,
+        },
+        comment: convertADFToMarkdown(w.comment),
+        created: w.created || '',
+        updated: w.updated || '',
+        started: w.started || '',
+        timeSpent: w.timeSpent || '',
+        timeSpentSeconds: w.timeSpentSeconds || 0,
+        issueKey: issueIdOrKey,
+    };
+}
+/**
+ * Update an existing worklog entry
+ */
+export async function updateWorklogEntry(issueIdOrKey, worklogId, options) {
+    const client = getJiraClient();
+    const { timeSpentSeconds, comment, started, adjustEstimate, newEstimate } = options;
+    const params = {
+        issueIdOrKey,
+        id: worklogId,
+    };
+    if (timeSpentSeconds !== undefined)
+        params.timeSpentSeconds = timeSpentSeconds;
+    if (comment !== undefined)
+        params.comment = markdownToAdf(comment);
+    if (started !== undefined)
+        params.started = started;
+    if (adjustEstimate)
+        params.adjustEstimate = adjustEstimate;
+    if (newEstimate)
+        params.newEstimate = newEstimate;
+    const w = await client.issueWorklogs.updateWorklog(params);
+    return {
+        id: w.id || worklogId,
+        author: {
+            accountId: w.author?.accountId || '',
+            displayName: w.author?.displayName || 'Unknown',
+            emailAddress: w.author?.emailAddress,
+        },
+        comment: convertADFToMarkdown(w.comment),
+        created: w.created || '',
+        updated: w.updated || '',
+        started: w.started || '',
+        timeSpent: w.timeSpent || '',
+        timeSpentSeconds: w.timeSpentSeconds || 0,
+        issueKey: issueIdOrKey,
+    };
+}
+/**
+ * Delete a worklog entry
+ */
+export async function deleteWorklogEntry(issueIdOrKey, worklogId, options = {}) {
+    const client = getJiraClient();
+    const { adjustEstimate, newEstimate, increaseBy } = options;
+    const params = {
+        issueIdOrKey,
+        id: worklogId,
+    };
+    if (adjustEstimate)
+        params.adjustEstimate = adjustEstimate;
+    if (newEstimate)
+        params.newEstimate = newEstimate;
+    if (increaseBy)
+        params.increaseBy = increaseBy;
+    await client.issueWorklogs.deleteWorklog(params);
+}

package/dist/lib/presets.js

@@ -0,0 +1,213 @@
+export const PRESETS = {
+    'read-only': {
+        description: 'AI can only observe. No create, update, delete, or transition operations.',
+        defaults: {
+            'allowed-jira-projects': ['all'],
+            'allowed-commands': [
+                'issue.get',
+                'issue.search',
+                'issue.stats',
+                'issue.comments',
+                'issue.activity',
+                'issue.tree',
+                'issue.worklog.list',
+                'issue.link.list',
+                'issue.link.types',
+                'issue.attach.list',
+                'project.list',
+                'project.statuses',
+                'project.types',
+                'project.fields',
+                'user.me',
+                'user.search',
+                'user.worklog',
+                'confl.get',
+                'confl.spaces',
+                'confl.pages',
+                'confl.search',
+                'epic.list',
+                'epic.get',
+                'epic.issues',
+                'epic.progress',
+                'board.list',
+                'board.get',
+                'board.config',
+                'board.issues',
+                'sprint.list',
+                'sprint.get',
+                'sprint.issues',
+                'sprint.tree',
+            ],
+            'allowed-confluence-spaces': ['all'],
+        },
+    },
+    'standard': {
+        description: 'AI can perform common productive actions but cannot do destructive operations.',
+        defaults: {
+            'allowed-jira-projects': ['all'],
+            'allowed-commands': [
+                'issue.get',
+                'issue.create',
+                'issue.search',
+                'issue.transition',
+                'issue.update',
+                'issue.comment',
+                'issue.stats',
+                'issue.assign',
+                'issue.label.add',
+                'issue.label.remove',
+                'issue.link.list',
+                'issue.link.create',
+                'issue.link.types',
+                'issue.attach.upload',
+                'issue.attach.list',
+                'issue.attach.download',
+                'issue.comments',
+                'issue.activity',
+                'issue.tree',
+                'issue.worklog.list',
+                'issue.worklog.add',
+                'issue.worklog.update',
+                'project.list',
+                'project.statuses',
+                'project.types',
+                'project.fields',
+                'user.me',
+                'user.search',
+                'user.worklog',
+                'confl.get',
+                'confl.spaces',
+                'confl.pages',
+                'confl.create',
+                'confl.comment',
+                'confl.update',
+                'confl.search',
+                'epic.list',
+                'epic.get',
+                'epic.create',
+                'epic.update',
+                'epic.issues',
+                'epic.link',
+                'epic.unlink',
+                'epic.progress',
+                'board.list',
+                'board.get',
+                'board.config',
+                'board.issues',
+                'sprint.list',
+                'sprint.get',
+                'sprint.issues',
+                'sprint.tree',
+                'sprint.update',
+            ],
+            'allowed-confluence-spaces': ['all'],
+        },
+    },
+    'my-tasks': {
+        description: 'AI has full command access but restricted to issues where the current user participated.',
+        defaults: {
+            'allowed-jira-projects': ['all'],
+            'allowed-commands': [
+                'issue',
+                'project',
+                'user',
+                'confl',
+                'epic',
+                'board',
+                'sprint',
+                'backlog',
+            ],
+            'allowed-confluence-spaces': ['all'],
+        },
+        globalParticipationFilter: {
+            was_assignee: true,
+            was_reporter: true,
+            was_commenter: true,
+            is_watcher: true,
+        },
+    },
+    'yolo': {
+        description: 'Unrestricted access. The AI can do everything. The name explicitly signals risk.',
+        defaults: {
+            'allowed-jira-projects': ['all'],
+            'allowed-commands': ['all'],
+            'allowed-confluence-spaces': ['all'],
+        },
+    },
+};
+export function getPreset(name) {
+    const preset = PRESETS[name];
+    if (!preset) {
+        const available = Object.keys(PRESETS).join(', ');
+        throw new Error(`Unknown preset "${name}". Available presets: ${available}`);
+    }
+    return preset;
+}
+export function listPresets() {
+    const result = {};
+    for (const [name, preset] of Object.entries(PRESETS)) {
+        result[name] = {
+            description: preset.description,
+            'allowed-commands': preset.defaults['allowed-commands'],
+            'allowed-jira-projects': preset.defaults['allowed-jira-projects'],
+            'allowed-confluence-spaces': preset.defaults['allowed-confluence-spaces'],
+            ...(preset.globalParticipationFilter !== undefined && { globalParticipationFilter: preset.globalParticipationFilter }),
+        };
+    }
+    return result;
+}
+export function detectPreset(settings) {
+    for (const [name, preset] of Object.entries(PRESETS)) {
+        if (settingsMatchPreset(settings, preset.defaults, preset.globalParticipationFilter)) {
+            return {
+                current: name,
+                description: `Your settings match the '${name}' preset.`,
+            };
+        }
+    }
+    // Find closest match
+    let closestMatch;
+    let minDiff = Infinity;
+    for (const [name, preset] of Object.entries(PRESETS)) {
+        const currentCmds = new Set(settings['allowed-commands']);
+        const presetCmds = new Set(preset.defaults['allowed-commands']);
+        const added = [...currentCmds].filter(c => !presetCmds.has(c));
+        const removed = [...presetCmds].filter(c => !currentCmds.has(c));
+        const diff = added.length + removed.length;
+        if (diff < minDiff) {
+            minDiff = diff;
+            closestMatch = name;
+        }
+    }
+    const closestPreset = closestMatch ? PRESETS[closestMatch] : undefined;
+    const currentCmds = new Set(settings['allowed-commands']);
+    const presetCmds = closestPreset ? new Set(closestPreset.defaults['allowed-commands']) : new Set();
+    const addedCommands = [...currentCmds].filter(c => !presetCmds.has(c));
+    const removedCommands = [...presetCmds].filter(c => !currentCmds.has(c));
+    return {
+        current: 'custom',
+        description: 'Your settings do not match any predefined preset.',
+        closestMatch,
+        differences: {
+            addedCommands,
+            removedCommands,
+        },
+    };
+}
+function settingsMatchPreset(settings, presetDefaults, presetGlobalFilter) {
+    const settingsCmds = [...settings['allowed-commands']].sort();
+    const presetCmds = [...presetDefaults['allowed-commands']].sort();
+    if (JSON.stringify(settingsCmds) !== JSON.stringify(presetCmds))
+        return false;
+    const settingsProjects = [...settings['allowed-jira-projects']].map(p => typeof p === 'string' ? p : JSON.stringify(p)).sort();
+    const presetProjects = [...presetDefaults['allowed-jira-projects']].map(p => typeof p === 'string' ? p : JSON.stringify(p)).sort();
+    if (JSON.stringify(settingsProjects) !== JSON.stringify(presetProjects))
+        return false;
+    const settingsSpaces = [...settings['allowed-confluence-spaces']].sort();
+    const presetSpaces = [...presetDefaults['allowed-confluence-spaces']].sort();
+    if (JSON.stringify(settingsSpaces) !== JSON.stringify(presetSpaces))
+        return false;
+    if (JSON.stringify(settings.globalParticipationFilter ?? null) !== JSON.stringify(presetGlobalFilter ?? null))
+        return false;
+    return true;
+}

package/dist/lib/settings.js

@@ -249,12 +249,41 @@ export function getAllowedConfluenceSpaces() {
     const settings = getEffectiveSettings();
     return settings ? settings['allowed-confluence-spaces'] : ['all'];
 }
+function buildParticipationJql(filter) {
+    const parts = [];
+    if (filter.was_assignee)
+        parts.push('assignee was currentUser()');
+    if (filter.was_reporter)
+        parts.push('reporter = currentUser()');
+    if (filter.was_commenter)
+        parts.push('issue in issueHistory()');
+    if (filter.is_watcher)
+        parts.push('issue in watchedIssues()');
+    return parts.join(' OR ');
+}
 export function applyGlobalFilters(jql) {
     const settings = getEffectiveSettings();
     if (!settings)
         return jql;
     const allAllowed = settings['allowed-jira-projects'].some(p => p === 'all');
     if (allAllowed) {
+        // When globalParticipationFilter is set, inject participation-based JQL so
+        // issue.search is restricted to issues the user participated in (not just individual
+        // issue actions which validateIssueAgainstFilters already gates).
+        if (settings.globalParticipationFilter) {
+            const participationJql = buildParticipationJql(settings.globalParticipationFilter);
+            if (participationJql) {
+                let filterPart = jql;
+                let orderByPart = '';
+                const orderByMatch = jql.match(/(.*)\bORDER BY\b(.*)/i);
+                if (orderByMatch) {
+                    filterPart = orderByMatch[1].trim();
+                    orderByPart = ` ORDER BY ${orderByMatch[2].trim()}`;
+                }
+                const filterJql = filterPart.trim() ? ` AND (${filterPart})` : '';
+                return `(${participationJql})${filterJql}${orderByPart}`;
+            }
+        }
         return jql;
     }
     // Handle ORDER BY
@@ -297,8 +326,23 @@ export function validateIssueAgainstFilters(issue, currentUserId) {
     if (!project) {
         return false;
     }
-    if (typeof project === 'string')
+    if (typeof project === 'string') {
+        // Apply global participation filter when project is 'all' and globalParticipationFilter is set
+        if (project === 'all' && settings.globalParticipationFilter) {
+            const participated = settings.globalParticipationFilter;
+            let hasParticipated = false;
+            if (participated.was_assignee && issue.assignee?.accountId === currentUserId)
+                hasParticipated = true;
+            if (participated.was_reporter && issue.reporter?.accountId === currentUserId)
+                hasParticipated = true;
+            if (participated.was_commenter && issue.comments?.some((c) => c.author?.accountId === currentUserId))
+                hasParticipated = true;
+            if (participated.is_watcher && issue.watchers?.includes('CURRENT_USER'))
+                hasParticipated = true;
+            return hasParticipated;
+        }
         return true;
+    }
     if (project.filters?.participated) {
         const { participated } = project.filters;
         let hasParticipated = false;

package/dist/lib/utils.js

@@ -152,3 +152,42 @@ export function parseTimeframe(timeframe) {
 export function formatDateForJql(date) {
     return date.toISOString().split('T')[0];
 }
+/**
+ * Normalize an ISO-8601 timestamp to the format Jira accepts: yyyy-MM-dd'T'HH:mm:ss.SSSZ
+ * - No colon in timezone offset, no Z suffix, milliseconds always present.
+ * - "2026-04-15T07:00:00.000Z"     → "2026-04-15T07:00:00.000+0000"
+ * - "2026-04-15T10:00:00+03:00"    → "2026-04-15T10:00:00.000+0300"
+ * - "2026-04-15T07:00:00Z"         → "2026-04-15T07:00:00.000+0000"
+ * - "2026-04-15T07:00:00.000+0000" → unchanged
+ */
+export function normalizeJiraTimestamp(timestamp) {
+    // Replace Z suffix with +0000
+    let normalized = timestamp.replace(/Z$/, '+0000');
+    // Remove colon from timezone offset: +HH:MM → +HHMM or -HH:MM → -HHMM
+    normalized = normalized.replace(/([+-])(\d{2}):(\d{2})$/, '$1$2$3');
+    // Add .000 milliseconds if missing (before the timezone offset)
+    normalized = normalized.replace(/(\d{2}:\d{2}:\d{2})([+-]\d{4})$/, '$1.000$2');
+    return normalized;
+}
+/**
+ * Parse a Jira-style duration string into total seconds.
+ * Supports: 1w, 2d, 3h, 30m and combinations like 1d2h30m.
+ * Conversion: 1w = 5d, 1d = 8h.
+ * Returns null for invalid input.
+ */
+export function parseDuration(duration) {
+    const match = duration.match(/^(?:(\d+)w)?(?:(\d+)d)?(?:(\d+)h)?(?:(\d+)m)?$/);
+    if (!match || match[0] === '')
+        return null;
+    const weeks = parseInt(match[1] || '0', 10);
+    const days = parseInt(match[2] || '0', 10);
+    const hours = parseInt(match[3] || '0', 10);
+    const minutes = parseInt(match[4] || '0', 10);
+    const totalSeconds = weeks * 5 * 8 * 3600 +
+        days * 8 * 3600 +
+        hours * 3600 +
+        minutes * 60;
+    if (totalSeconds === 0)
+        return null;
+    return totalSeconds;
+}

package/dist/lib/validation.js

@@ -158,6 +158,12 @@ export const OrganizationSettingsSchema = z.object({
     'allowed-jira-projects': z.array(ProjectSettingSchema).nullish().transform(val => val || ['all']),
     'allowed-commands': z.array(z.string()).nullish().transform(val => val || DEFAULT_ALLOWED_COMMANDS),
     'allowed-confluence-spaces': z.array(z.string()).nullish().transform(val => val || ['all']),
+    globalParticipationFilter: z.object({
+        was_assignee: z.boolean().optional(),
+        was_reporter: z.boolean().optional(),
+        was_commenter: z.boolean().optional(),
+        is_watcher: z.boolean().optional(),
+    }).optional(),
 });
 export const SavedQueryNameSchema = z.string().regex(/^[a-z0-9][a-z0-9-]*[a-z0-9]$|^[a-z0-9]$/, 'Query name must be lowercase alphanumeric with hyphens (e.g., "my-query"), cannot start or end with a hyphen');
 export const SettingsSchema = z.object({
@@ -271,3 +277,40 @@ export const ActivityFeedSchema = z.object({
     author: z.string().optional(),
     compact: z.boolean().optional(),
 });
+// =============================================================================
+// WORKLOG SCHEMAS
+// =============================================================================
+export const DurationSchema = z
+    .string()
+    .regex(/^(?:(\d+)w)?(?:(\d+)d)?(?:(\d+)h)?(?:(\d+)m)?$/, 'Duration must be in Jira format: e.g. 1h, 30m, 1d2h30m, 1w');
+export const WorklogListSchema = z.object({
+    issueKey: z.string().trim().min(1, 'Issue key is required').pipe(IssueKeySchema),
+    startedAfter: z.number().int().positive().optional(),
+    startedBefore: z.number().int().positive().optional(),
+    authorAccountId: z.string().optional(),
+});
+export const WorklogAddSchema = z.object({
+    issueKey: z.string().trim().min(1, 'Issue key is required').pipe(IssueKeySchema),
+    time: DurationSchema,
+    comment: z.string().optional(),
+    started: z.string().optional(),
+    adjustEstimate: z.enum(['auto', 'new', 'leave', 'manual']).optional(),
+    newEstimate: z.string().optional(),
+    reduceBy: z.string().optional(),
+});
+export const WorklogUpdateSchema = z.object({
+    issueKey: z.string().trim().min(1, 'Issue key is required').pipe(IssueKeySchema),
+    id: z.string().min(1, 'Worklog ID is required'),
+    time: DurationSchema.optional(),
+    comment: z.string().optional(),
+    started: z.string().optional(),
+    adjustEstimate: z.enum(['auto', 'new', 'leave', 'manual']).optional(),
+    newEstimate: z.string().optional(),
+});
+export const WorklogDeleteSchema = z.object({
+    issueKey: z.string().trim().min(1, 'Issue key is required').pipe(IssueKeySchema),
+    id: z.string().min(1, 'Worklog ID is required'),
+    adjustEstimate: z.enum(['auto', 'new', 'leave', 'manual']).optional(),
+    newEstimate: z.string().optional(),
+    increaseBy: z.string().optional(),
+});

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "jira-ai",
-  "version": "1.5.0",
+  "version": "1.7.1",
   "description": "AI friendly Jira CLI to save context",
   "type": "module",
   "main": "dist/cli.js",
@@ -48,12 +48,13 @@
     "node": ">=18.0.0"
   },
   "dependencies": {
+    "@modelcontextprotocol/sdk": "^1.28.0",
     "adf-to-markdown": "^1.0.1",
     "commander": "^11.0.0",
     "confluence.js": "^2.1.0",
     "dotenv": "^17.2.3",
     "html-entities": "^2.6.0",
-"jira.js": "^5.2.2",
+    "jira.js": "^5.2.2",
     "js-yaml": "^4.1.1",
     "marklassian": "^1.0.0",
     "zod": "^4.3.5"