airbyte-internal-ops 0.2.1__tar.gz → 0.2.2__tar.gz

{airbyte_internal_ops-0.2.1 → airbyte_internal_ops-0.2.2}/.github/release-drafter.yml

@@ -64,4 +64,5 @@ autolabeler:
       - '/^build\(deps\)\:/i'
   - label: "breaking"
     title:
-      - '/!:\s*$/i'
+      # Match conventional commit breaking change syntax: feat!: or fix!: etc.
+      - '/^[a-zA-Z]+(\([^)]+\))?!:/i'

{airbyte_internal_ops-0.2.1 → airbyte_internal_ops-0.2.2}/.github/workflows/autofix-command.yml

@@ -20,10 +20,9 @@ jobs:
   run-autofix-command:
     runs-on: ubuntu-latest
     steps:
-      - name: Authenticate as GitHub App (if available)
+      - name: Authenticate as GitHub App
         uses: actions/create-github-app-token@v2
         id: get-app-token
-        continue-on-error: true
         with:
           app-id: ${{ secrets.OCTAVIA_BOT_APP_ID }}
           private-key: ${{ secrets.OCTAVIA_BOT_PRIVATE_KEY }}
@@ -33,5 +32,5 @@ jobs:
         with:
           pr: ${{ github.event.inputs.pr }}
           comment-id: ${{ github.event.inputs.comment-id }}
-          github-token: ${{ steps.get-app-token.outputs.token || secrets.GITHUB_TOKEN }}
+          github-token: ${{ steps.get-app-token.outputs.token }}
           command: autofix

{airbyte_internal_ops-0.2.1 → airbyte_internal_ops-0.2.2}/.github/workflows/connector-regression-test.yml

@@ -175,7 +175,7 @@ jobs:
             ARGS+=(--skip-compare)
 
             if [ -n "${{ inputs.override_test_image }}" ]; then
-              ARGS+=(--connector-image "${{ inputs.override_test_image }}")
+              ARGS+=(--test-image "${{ inputs.override_test_image }}")
             fi
           else
             # Comparison mode (default): run target vs control

{airbyte_internal_ops-0.2.1 → airbyte_internal_ops-0.2.2}/.github/workflows/lock-command.yml

@@ -20,10 +20,9 @@ jobs:
   run-lock-command:
     runs-on: ubuntu-latest
     steps:
-      - name: Authenticate as GitHub App (if available)
+      - name: Authenticate as GitHub App
         uses: actions/create-github-app-token@v2
         id: get-app-token
-        continue-on-error: true
         with:
           app-id: ${{ secrets.OCTAVIA_BOT_APP_ID }}
           private-key: ${{ secrets.OCTAVIA_BOT_PRIVATE_KEY }}
@@ -33,5 +32,5 @@ jobs:
         with:
           pr: ${{ github.event.inputs.pr }}
           comment-id: ${{ github.event.inputs.comment-id }}
-          github-token: ${{ steps.get-app-token.outputs.token || secrets.GITHUB_TOKEN }}
+          github-token: ${{ steps.get-app-token.outputs.token }}
           command: lock

{airbyte_internal_ops-0.2.1 → airbyte_internal_ops-0.2.2}/.github/workflows/poe-command.yml

@@ -18,10 +18,9 @@ jobs:
   run-poe-command:
     runs-on: ubuntu-latest
     steps:
-      - name: Authenticate as GitHub App (if available)
+      - name: Authenticate as GitHub App
         uses: actions/create-github-app-token@v2
         id: get-app-token
-        continue-on-error: true
         with:
           app-id: ${{ secrets.OCTAVIA_BOT_APP_ID }}
           private-key: ${{ secrets.OCTAVIA_BOT_PRIVATE_KEY }}
@@ -31,4 +30,4 @@ jobs:
         with:
           pr: ${{ github.event.inputs.pr }}
           comment-id: ${{ github.event.inputs.comment-id }}
-          github-token: ${{ steps.get-app-token.outputs.token || secrets.GITHUB_TOKEN }}
+          github-token: ${{ steps.get-app-token.outputs.token }}

airbyte_internal_ops-0.2.2/.github/workflows/release-drafter.yml

@@ -0,0 +1,23 @@
+name: Release Drafter
+
+on:
+  push:
+    branches:
+      - main
+
+concurrency:
+  group: release-drafter
+  cancel-in-progress: false
+
+jobs:
+  update_release_draft:
+    permissions:
+      contents: write
+      pull-requests: write
+    runs-on: ubuntu-latest
+    steps:
+      - uses: release-drafter/release-drafter@v6.0.0
+        with:
+          config-name: release-drafter.yml
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

airbyte_internal_ops-0.2.2/.github/workflows/semantic-pr-check.yml

@@ -0,0 +1,103 @@
+# Semantic PR Title Validation
+#
+# This workflow validates PR titles follow conventional commit format and applies
+# labels automatically based on the title.
+#
+# Jobs:
+# 1. validate-pr-title - Ensures PR titles follow semantic format (feat:, fix:, etc.)
+# 2. autolabel - Uses Release Drafter's autolabeler to apply labels based on title
+#    (e.g., "feat:" -> enhancement -> minor, "fix:" -> bug -> patch)
+#
+# Note: The autolabeler uses the same release-drafter.yml config but only applies
+# labels when triggered from PR events (it doesn't create/update draft releases).
+
+name: Semantic PR Title Validation
+
+on:
+  pull_request:
+    types: [opened, edited, ready_for_review]
+
+permissions:
+  contents: read
+  pull-requests: write
+
+jobs:
+  autolabel:
+    name: Auto-label PR
+    # Apply labels based on PR title using Release Drafter's autolabeler.
+    # Skip if 'edited' event but the title wasn't changed (e.g., only description was edited).
+    # Skipping unnecessary runs reduces unlabel-relabel spam on the PR.
+    # Some notification triggers run upon label additions, so this also prevents notification spam.
+    if: >
+      github.event.action != 'edited'
+      || (
+        github.event.changes.title &&
+        github.event.changes.title.from != ''
+      )
+    runs-on: ubuntu-latest
+    steps:
+      # Remove title-derived labels first to make autolabeler idempotent
+      # (e.g., if PR title changes from "fix:" to "ci:", remove old "bug" label)
+      - name: Remove title-derived labels
+        uses: actions-ecosystem/action-remove-labels@v1
+        with:
+          labels: |
+            bug
+            enhancement
+            chore
+            ci
+            docs
+            testing
+            security
+            dependencies
+            breaking
+
+      # Run release-drafter with disable-releaser to only apply labels (not create releases)
+      - uses: release-drafter/release-drafter@v6
+        with:
+          config-name: release-drafter.yml
+          disable-releaser: true
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+
+  validate-pr-title:
+    name: Validate PR Title
+    # Skip if 'edited' event but the title wasn't changed (e.g., only description was edited)
+    if: >
+      github.event.action != 'edited'
+      || (
+        github.event.changes.title &&
+        github.event.changes.title.from != ''
+      )
+    runs-on: ubuntu-latest
+    steps:
+      - name: Check semantic PR title
+        uses: amannn/action-semantic-pull-request@v5
+        if: ${{ github.event.pull_request.draft == false }}
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        with:
+          # Configure which types are allowed (newline-delimited).
+          # Comparison is case-insensitive, so only lowercase variants are needed.
+          # See: https://github.com/commitizen/conventional-commit-types/blob/master/index.json
+          types: |
+            fix
+            feat
+            docs
+            ci
+            chore
+            build
+            test
+            refactor
+            perf
+            style
+
+      - name: Check for "do not merge" in PR title
+        if: ${{ github.event.pull_request.draft == false }}
+        uses: actions/github-script@v7
+        with:
+          script: |
+            const title = context.payload.pull_request.title.toLowerCase();
+            if (title.includes('do not merge') || title.includes('do-not-merge')) {
+              core.setFailed('PR title contains "do not merge" or "do-not-merge". Please remove this before merging.');
+            }

{airbyte_internal_ops-0.2.1 → airbyte_internal_ops-0.2.2}/.github/workflows/sentry-apply-command.yml

@@ -73,10 +73,9 @@ jobs:
           fi
         working-directory: .
 
-      - name: Authenticate as GitHub App (if available)
+      - name: Authenticate as GitHub App
         uses: actions/create-github-app-token@v2
         id: get-app-token
-        continue-on-error: true
         with:
           app-id: ${{ secrets.OCTAVIA_BOT_APP_ID }}
           private-key: ${{ secrets.OCTAVIA_BOT_PRIVATE_KEY }}
@@ -108,7 +107,7 @@ jobs:
         uses: actions/checkout@v4
         with:
           ref: ${{ steps.pr-info.outputs.ref || github.ref }}
-          token: ${{ steps.get-app-token.outputs.token || secrets.GITHUB_TOKEN }}
+          token: ${{ steps.get-app-token.outputs.token }}
 
       - name: Append comment with job run link
         if: github.event.inputs.comment-id

{airbyte_internal_ops-0.2.1 → airbyte_internal_ops-0.2.2}/.github/workflows/slash-command-dispatch.yml

@@ -16,10 +16,9 @@ jobs:
     if: ${{ github.event.issue.pull_request }}
     runs-on: ubuntu-latest
     steps:
-      - name: Authenticate as GitHub App (if available)
+      - name: Authenticate as GitHub App
         uses: actions/create-github-app-token@v2
         id: get-app-token
-        continue-on-error: true
         with:
           app-id: ${{ secrets.OCTAVIA_BOT_APP_ID }}
           private-key: ${{ secrets.OCTAVIA_BOT_PRIVATE_KEY }}
@@ -29,7 +28,7 @@ jobs:
         uses: peter-evans/slash-command-dispatch@v5
         with:
           repository: ${{ github.repository }}
-          token: ${{ steps.get-app-token.outputs.token || secrets.GITHUB_TOKEN }}
+          token: ${{ steps.get-app-token.outputs.token }}
           dispatch-type: workflow
           issue-type: pull-request
           commands: |

{airbyte_internal_ops-0.2.1 → airbyte_internal_ops-0.2.2}/CONTRIBUTING.md

@@ -99,11 +99,28 @@ gcloud secrets get-iam-policy projects/587336813068/secrets/CONNECTION_RETRIEVER
 
 When running outside of the VPC (without Tailscale), use the Cloud SQL Auth Proxy:
 
+**Option A: Using the CLI (Recommended)**
+
+Pre-install the CLI tool:
+```bash
+uv tool install airbyte-internal-ops
+airbyte-ops cloud db start-proxy --port=5433
+```
+
+Or use as a single-step command:
+```bash
+uvx --from=airbyte-internal-ops airbyte-ops cloud db start-proxy --port=5433
+```
+
+**Option B: Manual startup**
+
 ```bash
-# Start the proxy (use a non-conflicting port if 5432 is in use)
+# Start the proxy on port 5433 (avoids conflicts with default PostgreSQL port 5432)
 cloud-sql-proxy prod-ab-cloud-proj:us-west3:prod-pgsql-replica --port=5433
+```
 
-# Set environment variables for your application
+Then set environment variables for your application:
+```bash
 export USE_CLOUD_SQL_PROXY=1
 export DB_PORT=5433
 export GOOGLE_APPLICATION_CREDENTIALS=/path/to/service-account-key.json

{airbyte_internal_ops-0.2.1 → airbyte_internal_ops-0.2.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: airbyte-internal-ops
-Version: 0.2.1
+Version: 0.2.2
 Summary: MCP and API interfaces that let the agents do the admin work
 Author-email: Aaron Steers <aj@airbyte.io>
 Keywords: admin,airbyte,api,mcp
@@ -121,7 +121,23 @@ Some tools (like `list_org_connections_by_source_type_db`) require access to the
    gcloud auth application-default login
    ```
 
-2. Start Cloud SQL Proxy:
+2. Start Cloud SQL Proxy using one of the following methods:
+
+   **Option A: Using the CLI (Recommended)**
+   
+   Pre-install the CLI tool:
+   ```bash
+   uv tool install airbyte-internal-ops
+   airbyte-ops cloud db start-proxy --port=15432
+   ```
+   
+   Or use as a single-step command:
+   ```bash
+   uvx --from=airbyte-internal-ops airbyte-ops cloud db start-proxy --port=15432
+   ```
+
+   **Option B: Manual startup**
+   
    ```bash
    cloud-sql-proxy prod-ab-cloud-proj:us-west3:prod-pgsql-replica --port=15432
    ```

{airbyte_internal_ops-0.2.1 → airbyte_internal_ops-0.2.2}/README.md

@@ -82,7 +82,23 @@ Some tools (like `list_org_connections_by_source_type_db`) require access to the
    gcloud auth application-default login
    ```
 
-2. Start Cloud SQL Proxy:
+2. Start Cloud SQL Proxy using one of the following methods:
+
+   **Option A: Using the CLI (Recommended)**
+   
+   Pre-install the CLI tool:
+   ```bash
+   uv tool install airbyte-internal-ops
+   airbyte-ops cloud db start-proxy --port=15432
+   ```
+   
+   Or use as a single-step command:
+   ```bash
+   uvx --from=airbyte-internal-ops airbyte-ops cloud db start-proxy --port=15432
+   ```
+
+   **Option B: Manual startup**
+   
    ```bash
    cloud-sql-proxy prod-ab-cloud-proj:us-west3:prod-pgsql-replica --port=15432
    ```

{airbyte_internal_ops-0.2.1 → airbyte_internal_ops-0.2.2}/src/airbyte_ops_mcp/constants.py

@@ -3,7 +3,9 @@
 
 from __future__ import annotations
 
-from enum import Enum
+from enum import Enum, StrEnum
+
+from airbyte.exceptions import PyAirbyteInputError
 
 MCP_SERVER_NAME = "airbyte-internal-ops"
 """The name of the MCP server."""
@@ -59,6 +61,64 @@ CLOUD_REGISTRY_URL = (
 )
 """URL for the Airbyte Cloud connector registry."""
 
+# =============================================================================
+# Organization ID Aliases
+# =============================================================================
+
+
+class OrganizationAliasEnum(StrEnum):
+    """Organization ID aliases that can be used in place of UUIDs.
+
+    Each member's name is the alias (e.g., "@airbyte-internal") and its value
+    is the actual organization UUID. Use `OrganizationAliasEnum.resolve()` to
+    resolve aliases to actual IDs.
+    """
+
+    AIRBYTE_INTERNAL = "664c690e-5263-49ba-b01f-4a6759b3330a"
+    """The Airbyte internal organization for testing and internal operations.
+
+    Alias: @airbyte-internal
+    """
+
+    @classmethod
+    def resolve(cls, org_id: str | None) -> str | None:
+        """Resolve an organization ID alias to its actual UUID.
+
+        Accepts either an alias string (e.g., "@airbyte-internal") or an
+        OrganizationAliasEnum enum member, and returns the actual UUID.
+
+        Returns:
+            The resolved organization ID (UUID), or None if input is None.
+            If the input doesn't start with "@", it is returned unchanged.
+
+        Raises:
+            PyAirbyteInputError: If the input starts with "@" but is not a recognized alias.
+        """
+        if org_id is None:
+            return None
+
+        # Handle OrganizationAliasEnum enum members directly
+        if isinstance(org_id, cls):
+            return org_id.value
+
+        # If it doesn't look like an alias, return as-is (assume it's a UUID)
+        if not org_id.startswith("@"):
+            return org_id
+
+        # Handle alias strings or raise an error if invalid
+        alias_mapping = {
+            "@airbyte-internal": cls.AIRBYTE_INTERNAL.value,
+        }
+        if org_id not in alias_mapping:
+            raise PyAirbyteInputError(
+                message=f"Unknown organization alias: {org_id}",
+                context={
+                    "valid_aliases": list(alias_mapping.keys()),
+                },
+            )
+        return alias_mapping[org_id]
+
+
 CONNECTION_RETRIEVER_PG_CONNECTION_DETAILS_SECRET_ID = (
     "projects/587336813068/secrets/CONNECTION_RETRIEVER_PG_CONNECTION_DETAILS"
 )

{airbyte_internal_ops-0.2.1 → airbyte_internal_ops-0.2.2}/src/airbyte_ops_mcp/mcp/prerelease.py

@@ -228,17 +228,17 @@ def publish_connector_to_airbyte_registry(
     # Guard: Check for required token
     token = resolve_github_token(PRERELEASE_TOKEN_ENV_VARS)
 
-    # Get the PR's head ref and SHA
+    # Get the PR's head SHA for computing the docker image tag
+    # Note: We no longer pass gitref to the workflow - it derives the ref from PR number
     head_info = _get_pr_head_info(
         DEFAULT_REPO_OWNER, DEFAULT_REPO_NAME, pr_number, token
     )
 
     # Prepare workflow inputs
-    # The workflow expects these inputs from slash-command-dispatch
+    # The workflow uses refs/pull/{pr}/head directly - no gitref needed
     # Note: The workflow auto-detects modified connectors from the PR
     workflow_inputs = {
         "repo": f"{DEFAULT_REPO_OWNER}/{DEFAULT_REPO_NAME}",
-        "gitref": head_info.ref,
         "pr": str(pr_number),
     }