specweave 0.28.67 → 0.29.0

package/dist/src/sync/github-sync-wrapper.js

@@ -0,0 +1,220 @@
+/**
+ * GitHub Sync Wrapper
+ *
+ * Wraps GitHub sync operations with the SyncInterceptor for permission checks
+ * and audit logging. This provides a consistent interface for all GitHub sync
+ * operations while ensuring they go through the permission enforcement layer.
+ *
+ * Usage:
+ * ```typescript
+ * const wrapper = new GitHubSyncWrapper({
+ *   client: GitHubClientV2.fromRepo(owner, repo),
+ *   interceptor,
+ *   logger
+ * });
+ *
+ * // All operations now go through permission enforcement
+ * const issue = await wrapper.createUserStoryIssue(params);
+ * ```
+ *
+ * @module sync/github-sync-wrapper
+ */
+import { GitHubClientV2 } from '../../plugins/specweave-github/lib/github-client-v2.js';
+import { consoleLogger } from '../utils/logger.js';
+/**
+ * GitHubSyncWrapper - Permission-enforced GitHub sync operations
+ *
+ * All GitHub sync operations pass through the SyncInterceptor which:
+ * 1. Checks permissions before execution
+ * 2. Logs all attempts (success, denied, error)
+ * 3. Provides consistent error handling
+ *
+ * This wrapper does NOT modify the underlying GitHubClientV2 - it provides
+ * a parallel interface that can be used when permission checking is needed.
+ */
+export class GitHubSyncWrapper {
+    constructor(options) {
+        this.client = options.client;
+        this.interceptor = options.interceptor;
+        this.logger = options.logger ?? consoleLogger;
+    }
+    /**
+     * Create a GitHub issue for a user story
+     *
+     * @param params - Issue creation parameters
+     * @returns Wrapped operation result
+     */
+    async createUserStoryIssue(params) {
+        const itemId = `${params.featureId}/${params.userStoryId}`;
+        const result = await this.interceptor.intercept('github', 'upsert-internal', itemId, 'internal', () => this.client.createUserStoryIssue({
+            featureId: params.featureId,
+            userStoryId: params.userStoryId,
+            title: params.title,
+            body: params.body,
+            labels: params.labels || [],
+            milestone: params.milestone ?? undefined,
+        }));
+        return this.toWrappedResult(result);
+    }
+    /**
+     * Create a generic epic/increment issue
+     *
+     * @param title - Issue title
+     * @param body - Issue body
+     * @param milestone - Optional milestone number or string
+     * @param labels - Issue labels
+     * @returns Wrapped operation result
+     */
+    async createEpicIssue(title, body, milestone, labels = []) {
+        // Extract item ID from title if possible
+        const match = title.match(/\[([^\]]+)\]/);
+        const itemId = match ? match[1] : 'unknown';
+        const result = await this.interceptor.intercept('github', 'upsert-internal', itemId, 'internal', () => this.client.createEpicIssue(title, body, milestone, labels));
+        return this.toWrappedResult(result);
+    }
+    /**
+     * Update a GitHub issue body
+     *
+     * @param issueNumber - Issue number
+     * @param body - New issue body
+     * @param origin - Item origin (internal or external)
+     * @returns Wrapped operation result
+     */
+    async updateIssueBody(issueNumber, body, origin = 'internal') {
+        const itemId = `issue-${issueNumber}`;
+        const operation = origin === 'external' ? 'upsert-external' : 'upsert-internal';
+        const result = await this.interceptor.intercept('github', operation, itemId, origin, () => this.client.updateIssueBody(issueNumber, body));
+        return this.toWrappedResult(result);
+    }
+    /**
+     * Close a GitHub issue
+     *
+     * @param issueNumber - Issue number
+     * @param comment - Optional closing comment
+     * @returns Wrapped operation result
+     */
+    async closeIssue(issueNumber, comment) {
+        const itemId = `issue-${issueNumber}`;
+        const result = await this.interceptor.interceptStatusUpdate('github', itemId, () => this.client.closeIssue(issueNumber, comment));
+        return this.toWrappedResult(result);
+    }
+    /**
+     * Reopen a GitHub issue
+     *
+     * @param issueNumber - Issue number
+     * @param comment - Optional reopening comment
+     * @returns Wrapped operation result
+     */
+    async reopenIssue(issueNumber, comment) {
+        const itemId = `issue-${issueNumber}`;
+        const result = await this.interceptor.interceptStatusUpdate('github', itemId, () => this.client.reopenIssue(issueNumber, comment));
+        return this.toWrappedResult(result);
+    }
+    /**
+     * Add a comment to a GitHub issue
+     *
+     * @param issueNumber - Issue number
+     * @param comment - Comment body
+     * @param origin - Item origin
+     * @returns Wrapped operation result
+     */
+    async addComment(issueNumber, comment, origin = 'internal') {
+        const itemId = `issue-${issueNumber}`;
+        const operation = origin === 'external' ? 'upsert-external' : 'upsert-internal';
+        const result = await this.interceptor.intercept('github', operation, itemId, origin, () => this.client.addComment(issueNumber, comment));
+        return this.toWrappedResult(result);
+    }
+    /**
+     * Add labels to a GitHub issue
+     *
+     * @param issueNumber - Issue number
+     * @param labels - Labels to add
+     * @returns Wrapped operation result
+     */
+    async addLabels(issueNumber, labels) {
+        const itemId = `issue-${issueNumber}`;
+        const result = await this.interceptor.interceptUpsert('github', itemId, () => this.client.addLabels(issueNumber, labels));
+        return this.toWrappedResult(result);
+    }
+    /**
+     * Get a GitHub issue (read-only, always allowed)
+     *
+     * @param issueNumber - Issue number
+     * @returns Wrapped operation result
+     */
+    async getIssue(issueNumber) {
+        const itemId = `issue-${issueNumber}`;
+        const result = await this.interceptor.interceptRead('github', itemId, () => this.client.getIssue(issueNumber));
+        return this.toWrappedResult(result);
+    }
+    /**
+     * Search for an issue by title (read-only, always allowed)
+     *
+     * @param title - Title to search for
+     * @returns Wrapped operation result
+     */
+    async searchIssueByTitle(title) {
+        const result = await this.interceptor.interceptRead('github', `search:${title}`, () => this.client.searchIssueByTitle(title));
+        return this.toWrappedResult(result);
+    }
+    /**
+     * Check if an operation would be allowed (pre-flight check)
+     *
+     * @param operation - Operation type
+     * @param itemId - Item ID
+     * @returns true if operation would be allowed
+     */
+    wouldAllow(operation, itemId) {
+        return this.interceptor.wouldAllow('github', operation, itemId);
+    }
+    /**
+     * Get the underlying client for operations that don't need interception
+     * (e.g., already-checked operations in bulk workflows)
+     */
+    getClient() {
+        return this.client;
+    }
+    /**
+     * Convert interceptor result to wrapped result
+     */
+    toWrappedResult(result) {
+        if (!result.allowed) {
+            return {
+                success: false,
+                result: null,
+                denialReason: result.permission.reason,
+                durationMs: result.durationMs,
+            };
+        }
+        if (result.error) {
+            return {
+                success: false,
+                result: null,
+                error: result.error.message,
+                durationMs: result.durationMs,
+            };
+        }
+        return {
+            success: true,
+            result: result.result,
+            durationMs: result.durationMs,
+        };
+    }
+}
+/**
+ * Factory function to create GitHubSyncWrapper
+ *
+ * @param owner - Repository owner
+ * @param repo - Repository name
+ * @param interceptor - Sync interceptor
+ * @param logger - Optional logger
+ */
+export function createGitHubSyncWrapper(owner, repo, interceptor, logger) {
+    const client = GitHubClientV2.fromRepo(owner, repo);
+    return new GitHubSyncWrapper({
+        client,
+        interceptor,
+        logger,
+    });
+}
+//# sourceMappingURL=github-sync-wrapper.js.map

package/dist/src/sync/github-sync-wrapper.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"github-sync-wrapper.js","sourceRoot":"","sources":["../../../src/sync/github-sync-wrapper.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAGH,OAAO,EAAE,cAAc,EAAE,MAAM,wDAAwD,CAAC;AAExF,OAAO,EAAU,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAgE3D;;;;;;;;;;GAUG;AACH,MAAM,OAAO,iBAAiB;IAK5B,YAAY,OAAiC;QAC3C,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC7B,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;QACvC,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,aAAa,CAAC;IAChD,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,oBAAoB,CACxB,MAAkC;QAElC,MAAM,MAAM,GAAG,GAAG,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;QAE3D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,SAAS,CAC7C,QAAQ,EACR,iBAAiB,EACjB,MAAM,EACN,UAAU,EACV,GAAG,EAAE,CACH,IAAI,CAAC,MAAM,CAAC,oBAAoB,CAAC;YAC/B,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE;YAC3B,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,SAAS;SACzC,CAAC,CACL,CAAC;QAEF,OAAO,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;IACtC,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,eAAe,CACnB,KAAa,EACb,IAAY,EACZ,SAA2B,EAC3B,SAAmB,EAAE;QAErB,yCAAyC;QACzC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;QAC1C,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAE5C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,SAAS,CAC7C,QAAQ,EACR,iBAAiB,EACjB,MAAM,EACN,UAAU,EACV,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC,CAClE,CAAC;QAEF,OAAO,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;IACtC,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,eAAe,CACnB,WAAmB,EACnB,IAAY,EACZ,SAAkC,UAAU;QAE5C,MAAM,MAAM,GAAG,SAAS,WAAW,EAAE,CAAC;QACtC,MAAM,SAAS,GAAG,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,iBAAiB,CAAC;QAEhF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,SAAS,CAC7C,QAAQ,EACR,SAAS,EACT,MAAM,EACN,MAAM,EACN,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,WAAW,EAAE,IAAI,CAAC,CACrD,CAAC;QAEF,OAAO,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;IACtC,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,UAAU,CACd,WAAmB,EACnB,OAAgB;QAEhB,MAAM,MAAM,GAAG,SAAS,WAAW,EAAE,CAAC;QAEtC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,qBAAqB,CACzD,QAAQ,EACR,MAAM,EACN,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,WAAW,EAAE,OAAO,CAAC,CACnD,CAAC;QAEF,OAAO,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;IACtC,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,WAAW,CACf,WAAmB,EACnB,OAAgB;QAEhB,MAAM,MAAM,GAAG,SAAS,WAAW,EAAE,CAAC;QAEtC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,qBAAqB,CACzD,QAAQ,EACR,MAAM,EACN,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,WAAW,EAAE,OAAO,CAAC,CACpD,CAAC;QAEF,OAAO,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;IACtC,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,UAAU,CACd,WAAmB,EACnB,OAAe,EACf,SAAkC,UAAU;QAE5C,MAAM,MAAM,GAAG,SAAS,WAAW,EAAE,CAAC;QACtC,MAAM,SAAS,GAAG,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,iBAAiB,CAAC;QAEhF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,SAAS,CAC7C,QAAQ,EACR,SAAS,EACT,MAAM,EACN,MAAM,EACN,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,WAAW,EAAE,OAAO,CAAC,CACnD,CAAC;QAEF,OAAO,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;IACtC,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,SAAS,CACb,WAAmB,EACnB,MAAgB;QAEhB,MAAM,MAAM,GAAG,SAAS,WAAW,EAAE,CAAC;QAEtC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,eAAe,CACnD,QAAQ,EACR,MAAM,EACN,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,WAAW,EAAE,MAAM,CAAC,CACjD,CAAC;QAEF,OAAO,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;IACtC,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,QAAQ,CAAC,WAAmB;QAChC,MAAM,MAAM,GAAG,SAAS,WAAW,EAAE,CAAC;QAEtC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,aAAa,CACjD,QAAQ,EACR,MAAM,EACN,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,CACxC,CAAC;QAEF,OAAO,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;IACtC,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,kBAAkB,CAAC,KAAa;QACpC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,aAAa,CACjD,QAAQ,EACR,UAAU,KAAK,EAAE,EACjB,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAC5C,CAAC;QAEF,OAAO,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;IACtC,CAAC;IAED;;;;;;OAMG;IACH,UAAU,CACR,SAA2E,EAC3E,MAAc;QAEd,OAAO,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;IAClE,CAAC;IAED;;;OAGG;IACH,SAAS;QACP,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED;;OAEG;IACK,eAAe,CAAI,MAA4B;QACrD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,IAAI;gBACZ,YAAY,EAAE,MAAM,CAAC,UAAU,CAAC,MAAM;gBACtC,UAAU,EAAE,MAAM,CAAC,UAAU;aAC9B,CAAC;QACJ,CAAC;QAED,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YACjB,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,IAAI;gBACZ,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO;gBAC3B,UAAU,EAAE,MAAM,CAAC,UAAU;aAC9B,CAAC;QACJ,CAAC;QAED,OAAO;YACL,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,UAAU,EAAE,MAAM,CAAC,UAAU;SAC9B,CAAC;IACJ,CAAC;CACF;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,uBAAuB,CACrC,KAAa,EACb,IAAY,EACZ,WAA4B,EAC5B,MAAe;IAEf,MAAM,MAAM,GAAG,cAAc,CAAC,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACpD,OAAO,IAAI,iBAAiB,CAAC;QAC3B,MAAM;QACN,WAAW;QACX,MAAM;KACP,CAAC,CAAC;AACL,CAAC"}

package/dist/src/sync/jira-sync-wrapper.d.ts

@@ -0,0 +1,155 @@
+/**
+ * JIRA Sync Wrapper
+ *
+ * Wraps JIRA sync operations with the SyncInterceptor for permission checks
+ * and audit logging. This provides a consistent interface for all JIRA sync
+ * operations while ensuring they go through the permission enforcement layer.
+ *
+ * Usage:
+ * ```typescript
+ * const wrapper = new JiraSyncWrapper({
+ *   client: new JiraClient({ baseUrl, credentials }),
+ *   projectKey: 'PROJ',
+ *   interceptor,
+ *   logger
+ * });
+ *
+ * // All operations now go through permission enforcement
+ * const issue = await wrapper.createIssue(params);
+ * ```
+ *
+ * @module sync/jira-sync-wrapper
+ */
+import { SyncInterceptor } from '../core/sync/sync-interceptor.js';
+import { JiraClient, JiraIssue, JiraIssueCreate, JiraIssueUpdate } from '../integrations/jira/jira-client.js';
+import { Logger } from '../utils/logger.js';
+/**
+ * Wrapper options
+ */
+export interface JiraSyncWrapperOptions {
+    /**
+     * JIRA client instance
+     */
+    client: JiraClient;
+    /**
+     * Default project key for operations
+     */
+    projectKey: string;
+    /**
+     * Sync interceptor for permission checking
+     */
+    interceptor: SyncInterceptor;
+    /**
+     * Logger instance
+     */
+    logger?: Logger;
+}
+/**
+ * Operation result with additional metadata
+ */
+export interface WrappedOperationResult<T> {
+    /**
+     * Whether the operation was allowed and succeeded
+     */
+    success: boolean;
+    /**
+     * The result of the operation (null if denied or failed)
+     */
+    result: T | null;
+    /**
+     * Reason for denial (if denied)
+     */
+    denialReason?: string;
+    /**
+     * Error message (if failed)
+     */
+    error?: string;
+    /**
+     * Duration of the operation in milliseconds
+     */
+    durationMs: number;
+}
+/**
+ * JiraSyncWrapper - Permission-enforced JIRA sync operations
+ *
+ * All JIRA sync operations pass through the SyncInterceptor which:
+ * 1. Checks permissions before execution
+ * 2. Logs all attempts (success, denied, error)
+ * 3. Provides consistent error handling
+ */
+export declare class JiraSyncWrapper {
+    private readonly client;
+    private readonly projectKey;
+    private readonly interceptor;
+    private readonly logger;
+    constructor(options: JiraSyncWrapperOptions);
+    /**
+     * Create a JIRA issue
+     *
+     * @param issue - Issue creation parameters
+     * @param origin - Item origin (internal or external)
+     * @returns Wrapped operation result
+     */
+    createIssue(issue: JiraIssueCreate, origin?: 'internal' | 'external'): Promise<WrappedOperationResult<JiraIssue>>;
+    /**
+     * Update a JIRA issue
+     *
+     * @param update - Issue update parameters
+     * @param origin - Item origin (internal or external)
+     * @returns Wrapped operation result
+     */
+    updateIssue(update: JiraIssueUpdate, origin?: 'internal' | 'external'): Promise<WrappedOperationResult<JiraIssue>>;
+    /**
+     * Update issue status (transition)
+     *
+     * @param issueKey - JIRA issue key
+     * @param targetStatus - Target status name
+     * @returns Wrapped operation result
+     */
+    updateStatus(issueKey: string, targetStatus: string): Promise<WrappedOperationResult<JiraIssue>>;
+    /**
+     * Get a JIRA issue (read-only, always allowed)
+     *
+     * @param issueKey - JIRA issue key
+     * @returns Wrapped operation result
+     */
+    getIssue(issueKey: string): Promise<WrappedOperationResult<JiraIssue>>;
+    /**
+     * Search issues with JQL filter (read-only, always allowed)
+     *
+     * @param jql - JQL query string
+     * @param maxResults - Maximum results to return
+     * @returns Wrapped operation result
+     */
+    searchIssues(jql: string, maxResults?: number): Promise<WrappedOperationResult<JiraIssue[]>>;
+    /**
+     * Add labels to a JIRA issue
+     *
+     * @param issueKey - JIRA issue key
+     * @param labels - Labels to add
+     * @param origin - Item origin
+     * @returns Wrapped operation result
+     */
+    addLabels(issueKey: string, labels: string[], origin?: 'internal' | 'external'): Promise<WrappedOperationResult<JiraIssue>>;
+    /**
+     * Check if an operation would be allowed (pre-flight check)
+     *
+     * @param operation - Operation type
+     * @param itemId - Item ID
+     * @returns true if operation would be allowed
+     */
+    wouldAllow(operation: 'upsert-internal' | 'upsert-external' | 'update-status' | 'read', itemId: string): boolean;
+    /**
+     * Get the underlying client for operations that don't need interception
+     */
+    getClient(): JiraClient;
+    /**
+     * Get the project key
+     */
+    getProjectKey(): string;
+    /**
+     * Convert interceptor result to wrapped result
+     */
+    private toWrappedResult;
+}
+//# sourceMappingURL=jira-sync-wrapper.d.ts.map

package/dist/src/sync/jira-sync-wrapper.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"jira-sync-wrapper.d.ts","sourceRoot":"","sources":["../../../src/sync/jira-sync-wrapper.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,EAAE,eAAe,EAAqB,MAAM,kCAAkC,CAAC;AACtF,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,qCAAqC,CAAC;AAC9G,OAAO,EAAE,MAAM,EAAiB,MAAM,oBAAoB,CAAC;AAE3D;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC;;OAEG;IACH,MAAM,EAAE,UAAU,CAAC;IAEnB;;OAEG;IACH,UAAU,EAAE,MAAM,CAAC;IAEnB;;OAEG;IACH,WAAW,EAAE,eAAe,CAAC;IAE7B;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;GAEG;AACH,MAAM,WAAW,sBAAsB,CAAC,CAAC;IACvC;;OAEG;IACH,OAAO,EAAE,OAAO,CAAC;IAEjB;;OAEG;IACH,MAAM,EAAE,CAAC,GAAG,IAAI,CAAC;IAEjB;;OAEG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IAEtB;;OAEG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IAEf;;OAEG;IACH,UAAU,EAAE,MAAM,CAAC;CACpB;AAED;;;;;;;GAOG;AACH,qBAAa,eAAe;IAC1B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAa;IACpC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAkB;IAC9C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;gBAEpB,OAAO,EAAE,sBAAsB;IAO3C;;;;;;OAMG;IACG,WAAW,CACf,KAAK,EAAE,eAAe,EACtB,MAAM,GAAE,UAAU,GAAG,UAAuB,GAC3C,OAAO,CAAC,sBAAsB,CAAC,SAAS,CAAC,CAAC;IAe7C;;;;;;OAMG;IACG,WAAW,CACf,MAAM,EAAE,eAAe,EACvB,MAAM,GAAE,UAAU,GAAG,UAAuB,GAC3C,OAAO,CAAC,sBAAsB,CAAC,SAAS,CAAC,CAAC;IAe7C;;;;;;OAMG;IACG,YAAY,CAChB,QAAQ,EAAE,MAAM,EAChB,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,sBAAsB,CAAC,SAAS,CAAC,CAAC;IAiB7C;;;;;OAKG;IACG,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,sBAAsB,CAAC,SAAS,CAAC,CAAC;IAU5E;;;;;;OAMG;IACG,YAAY,CAChB,GAAG,EAAE,MAAM,EACX,UAAU,GAAE,MAAW,GACtB,OAAO,CAAC,sBAAsB,CAAC,SAAS,EAAE,CAAC,CAAC;IAU/C;;;;;;;OAOG;IACG,SAAS,CACb,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,EAAE,EAChB,MAAM,GAAE,UAAU,GAAG,UAAuB,GAC3C,OAAO,CAAC,sBAAsB,CAAC,SAAS,CAAC,CAAC;IAwB7C;;;;;;OAMG;IACH,UAAU,CACR,SAAS,EAAE,iBAAiB,GAAG,iBAAiB,GAAG,eAAe,GAAG,MAAM,EAC3E,MAAM,EAAE,MAAM,GACb,OAAO;IAIV;;OAEG;IACH,SAAS,IAAI,UAAU;IAIvB;;OAEG;IACH,aAAa,IAAI,MAAM;IAIvB;;OAEG;IACH,OAAO,CAAC,eAAe;CAyBxB"}

package/dist/src/sync/jira-sync-wrapper.js

@@ -0,0 +1,175 @@
+/**
+ * JIRA Sync Wrapper
+ *
+ * Wraps JIRA sync operations with the SyncInterceptor for permission checks
+ * and audit logging. This provides a consistent interface for all JIRA sync
+ * operations while ensuring they go through the permission enforcement layer.
+ *
+ * Usage:
+ * ```typescript
+ * const wrapper = new JiraSyncWrapper({
+ *   client: new JiraClient({ baseUrl, credentials }),
+ *   projectKey: 'PROJ',
+ *   interceptor,
+ *   logger
+ * });
+ *
+ * // All operations now go through permission enforcement
+ * const issue = await wrapper.createIssue(params);
+ * ```
+ *
+ * @module sync/jira-sync-wrapper
+ */
+import { consoleLogger } from '../utils/logger.js';
+/**
+ * JiraSyncWrapper - Permission-enforced JIRA sync operations
+ *
+ * All JIRA sync operations pass through the SyncInterceptor which:
+ * 1. Checks permissions before execution
+ * 2. Logs all attempts (success, denied, error)
+ * 3. Provides consistent error handling
+ */
+export class JiraSyncWrapper {
+    constructor(options) {
+        this.client = options.client;
+        this.projectKey = options.projectKey;
+        this.interceptor = options.interceptor;
+        this.logger = options.logger ?? consoleLogger;
+    }
+    /**
+     * Create a JIRA issue
+     *
+     * @param issue - Issue creation parameters
+     * @param origin - Item origin (internal or external)
+     * @returns Wrapped operation result
+     */
+    async createIssue(issue, origin = 'internal') {
+        const itemId = `${this.projectKey}:${issue.summary.substring(0, 50)}`;
+        const operation = origin === 'external' ? 'upsert-external' : 'upsert-internal';
+        const result = await this.interceptor.intercept('jira', operation, itemId, origin, () => this.client.createIssue(issue, this.projectKey));
+        return this.toWrappedResult(result);
+    }
+    /**
+     * Update a JIRA issue
+     *
+     * @param update - Issue update parameters
+     * @param origin - Item origin (internal or external)
+     * @returns Wrapped operation result
+     */
+    async updateIssue(update, origin = 'internal') {
+        const itemId = update.key;
+        const operation = origin === 'external' ? 'upsert-external' : 'upsert-internal';
+        const result = await this.interceptor.intercept('jira', operation, itemId, origin, () => this.client.updateIssue(update));
+        return this.toWrappedResult(result);
+    }
+    /**
+     * Update issue status (transition)
+     *
+     * @param issueKey - JIRA issue key
+     * @param targetStatus - Target status name
+     * @returns Wrapped operation result
+     */
+    async updateStatus(issueKey, targetStatus) {
+        const result = await this.interceptor.interceptStatusUpdate('jira', issueKey, async () => {
+            // Update status via updateIssue which handles transitions
+            const updatedIssue = await this.client.updateIssue({
+                key: issueKey,
+                status: targetStatus,
+            });
+            return updatedIssue;
+        });
+        return this.toWrappedResult(result);
+    }
+    /**
+     * Get a JIRA issue (read-only, always allowed)
+     *
+     * @param issueKey - JIRA issue key
+     * @returns Wrapped operation result
+     */
+    async getIssue(issueKey) {
+        const result = await this.interceptor.interceptRead('jira', issueKey, () => this.client.getIssue(issueKey));
+        return this.toWrappedResult(result);
+    }
+    /**
+     * Search issues with JQL filter (read-only, always allowed)
+     *
+     * @param jql - JQL query string
+     * @param maxResults - Maximum results to return
+     * @returns Wrapped operation result
+     */
+    async searchIssues(jql, maxResults = 50) {
+        const result = await this.interceptor.interceptRead('jira', `jql:${jql.substring(0, 50)}`, () => this.client.searchIssues({ jql, maxResults }));
+        return this.toWrappedResult(result);
+    }
+    /**
+     * Add labels to a JIRA issue
+     *
+     * @param issueKey - JIRA issue key
+     * @param labels - Labels to add
+     * @param origin - Item origin
+     * @returns Wrapped operation result
+     */
+    async addLabels(issueKey, labels, origin = 'internal') {
+        const operation = origin === 'external' ? 'upsert-external' : 'upsert-internal';
+        const result = await this.interceptor.intercept('jira', operation, issueKey, origin, async () => {
+            // Get current labels and merge
+            const currentIssue = await this.client.getIssue(issueKey);
+            const currentLabels = currentIssue.fields.labels || [];
+            const mergedLabels = [...new Set([...currentLabels, ...labels])];
+            return this.client.updateIssue({
+                key: issueKey,
+                labels: mergedLabels,
+            });
+        });
+        return this.toWrappedResult(result);
+    }
+    /**
+     * Check if an operation would be allowed (pre-flight check)
+     *
+     * @param operation - Operation type
+     * @param itemId - Item ID
+     * @returns true if operation would be allowed
+     */
+    wouldAllow(operation, itemId) {
+        return this.interceptor.wouldAllow('jira', operation, itemId);
+    }
+    /**
+     * Get the underlying client for operations that don't need interception
+     */
+    getClient() {
+        return this.client;
+    }
+    /**
+     * Get the project key
+     */
+    getProjectKey() {
+        return this.projectKey;
+    }
+    /**
+     * Convert interceptor result to wrapped result
+     */
+    toWrappedResult(result) {
+        if (!result.allowed) {
+            return {
+                success: false,
+                result: null,
+                denialReason: result.permission.reason,
+                durationMs: result.durationMs,
+            };
+        }
+        if (result.error) {
+            return {
+                success: false,
+                result: null,
+                error: result.error.message,
+                durationMs: result.durationMs,
+            };
+        }
+        return {
+            success: true,
+            result: result.result,
+            durationMs: result.durationMs,
+        };
+    }
+}
+//# sourceMappingURL=jira-sync-wrapper.js.map

package/dist/src/sync/jira-sync-wrapper.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jira-sync-wrapper.js","sourceRoot":"","sources":["../../../src/sync/jira-sync-wrapper.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAIH,OAAO,EAAU,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAyD3D;;;;;;;GAOG;AACH,MAAM,OAAO,eAAe;IAM1B,YAAY,OAA+B;QACzC,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC7B,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;QACrC,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;QACvC,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,aAAa,CAAC;IAChD,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,WAAW,CACf,KAAsB,EACtB,SAAkC,UAAU;QAE5C,MAAM,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;QACtE,MAAM,SAAS,GAAG,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,iBAAiB,CAAC;QAEhF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,SAAS,CAC7C,MAAM,EACN,SAAS,EACT,MAAM,EACN,MAAM,EACN,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,KAAK,EAAE,IAAI,CAAC,UAAU,CAAC,CACtD,CAAC;QAEF,OAAO,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;IACtC,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,WAAW,CACf,MAAuB,EACvB,SAAkC,UAAU;QAE5C,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC;QAC1B,MAAM,SAAS,GAAG,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,iBAAiB,CAAC;QAEhF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,SAAS,CAC7C,MAAM,EACN,SAAS,EACT,MAAM,EACN,MAAM,EACN,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CACtC,CAAC;QAEF,OAAO,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;IACtC,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,YAAY,CAChB,QAAgB,EAChB,YAAoB;QAEpB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,qBAAqB,CACzD,MAAM,EACN,QAAQ,EACR,KAAK,IAAI,EAAE;YACT,0DAA0D;YAC1D,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC;gBACjD,GAAG,EAAE,QAAQ;gBACb,MAAM,EAAE,YAAY;aACrB,CAAC,CAAC;YACH,OAAO,YAAY,CAAC;QACtB,CAAC,CACF,CAAC;QAEF,OAAO,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;IACtC,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,QAAQ,CAAC,QAAgB;QAC7B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,aAAa,CACjD,MAAM,EACN,QAAQ,EACR,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CACrC,CAAC;QAEF,OAAO,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;IACtC,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,YAAY,CAChB,GAAW,EACX,aAAqB,EAAE;QAEvB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,aAAa,CACjD,MAAM,EACN,OAAO,GAAG,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,EAC7B,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC,CACpD,CAAC;QAEF,OAAO,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;IACtC,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,SAAS,CACb,QAAgB,EAChB,MAAgB,EAChB,SAAkC,UAAU;QAE5C,MAAM,SAAS,GAAG,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,iBAAiB,CAAC;QAEhF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,SAAS,CAC7C,MAAM,EACN,SAAS,EACT,QAAQ,EACR,MAAM,EACN,KAAK,IAAI,EAAE;YACT,+BAA+B;YAC/B,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAC1D,MAAM,aAAa,GAAG,YAAY,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC;YACvD,MAAM,YAAY,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,aAAa,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;YAEjE,OAAO,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC;gBAC7B,GAAG,EAAE,QAAQ;gBACb,MAAM,EAAE,YAAY;aACrB,CAAC,CAAC;QACL,CAAC,CACF,CAAC;QAEF,OAAO,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;IACtC,CAAC;IAED;;;;;;OAMG;IACH,UAAU,CACR,SAA2E,EAC3E,MAAc;QAEd,OAAO,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;IAChE,CAAC;IAED;;OAEG;IACH,SAAS;QACP,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED;;OAEG;IACH,aAAa;QACX,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;IAED;;OAEG;IACK,eAAe,CAAI,MAA4B;QACrD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,IAAI;gBACZ,YAAY,EAAE,MAAM,CAAC,UAAU,CAAC,MAAM;gBACtC,UAAU,EAAE,MAAM,CAAC,UAAU;aAC9B,CAAC;QACJ,CAAC;QAED,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YACjB,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,IAAI;gBACZ,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO;gBAC3B,UAAU,EAAE,MAAM,CAAC,UAAU;aAC9B,CAAC;QACJ,CAAC;QAED,OAAO;YACL,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,UAAU,EAAE,MAAM,CAAC,UAAU;SAC9B,CAAC;IACJ,CAAC;CACF"}

package/dist/src/utils/feature-id-derivation.d.ts

@@ -0,0 +1,58 @@
+/**
+ * Feature ID Derivation Utility
+ *
+ * Derives feature ID from increment ID using the 1:1 mapping principle:
+ * - Each increment maps to exactly one feature folder
+ * - Feature ID = FS-{increment_number}
+ *
+ * @example
+ * deriveFeatureId('0081-ado-repo-cloning') → 'FS-081'
+ * deriveFeatureId('0100-some-feature') → 'FS-100'
+ * deriveFeatureId('1000-future-feature') → 'FS-1000'
+ *
+ * @see ADR-0140 for the decision rationale
+ */
+/**
+ * Derive feature ID from increment ID
+ *
+ * The feature ID is derived directly from the increment number:
+ * - Extract leading digits from increment ID
+ * - Format as FS-XXX (minimum 3 digits, more if needed)
+ *
+ * This eliminates the need to store feature_id in metadata.json,
+ * as it's 100% derivable from the increment ID.
+ *
+ * @param incrementId - Increment ID (e.g., "0081-ado-repo-cloning")
+ * @returns Feature ID (e.g., "FS-081")
+ * @throws Error if increment ID format is invalid
+ */
+export declare function deriveFeatureId(incrementId: string): string;
+/**
+ * Extract increment number from increment ID
+ *
+ * @param incrementId - Increment ID (e.g., "0081-ado-repo-cloning")
+ * @returns Increment number (e.g., 81)
+ * @throws Error if increment ID format is invalid
+ */
+export declare function extractIncrementNumber(incrementId: string): number;
+/**
+ * Validate feature ID format
+ *
+ * Valid formats:
+ * - FS-XXX (internal, 3+ digits)
+ * - FS-XXXE (external, 3+ digits with E suffix)
+ *
+ * @param featureId - Feature ID to validate
+ * @returns true if valid, false otherwise
+ */
+export declare function isValidFeatureId(featureId: string): boolean;
+/**
+ * Check if feature ID is external (imported)
+ *
+ * External features have an 'E' suffix: FS-042E
+ *
+ * @param featureId - Feature ID to check
+ * @returns true if external, false if internal
+ */
+export declare function isExternalFeatureId(featureId: string): boolean;
+//# sourceMappingURL=feature-id-derivation.d.ts.map

package/dist/src/utils/feature-id-derivation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"feature-id-derivation.d.ts","sourceRoot":"","sources":["../../../src/utils/feature-id-derivation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH;;;;;;;;;;;;;GAaG;AACH,wBAAgB,eAAe,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAU3D;AAED;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAMlE;AAED;;;;;;;;;GASG;AACH,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAE3D;AAED;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAE9D"}