code-context-control 2.28.3__tar.gz → 2.30.0__tar.gz

{code_context_control-2.28.3 → code_context_control-2.30.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: code-context-control
-Version: 2.28.3
+Version: 2.30.0
 Summary: Local code-intelligence layer for AI coding tools (Claude Code, Codex, Gemini, Copilot). Retrieve less, read less, edit safer.
 Author-email: Dimitri Tselenchuk <dtselenc@gmail.com>
 License-Expression: Apache-2.0
@@ -41,6 +41,7 @@ Requires-Dist: flask>=3.0.0
 Requires-Dist: rich>=13.0.0
 Requires-Dist: click>=8.0.0
 Requires-Dist: pyyaml>=6.0.0
+Requires-Dist: keyring>=24.0
 Provides-Extra: vector
 Requires-Dist: scikit-learn>=1.3.0; extra == "vector"
 Requires-Dist: numpy>=1.24.0; extra == "vector"
@@ -147,13 +148,9 @@ C3 ships with two web UIs (no electron, no install — pure Flask + vanilla JS):
   <img src="https://raw.githubusercontent.com/drknowhow/code-context-control/main/docs/screenshots/hub_projects.png" alt="C3 Project Hub - all projects" width="900">
 </p>
 
-Every C3-initialized project on your machine appears here. Group them by tag, filter by active/idle, see which IDE each project uses, jump straight into your IDE with one click, and monitor session activity at a glance. Each project card shows live status, version, MCP wiring mode, port, and last activity.
+Every C3-initialized project on your machine appears here automatically — `c3 init` registers the project with the hub on first run, no extra step. Group them by tag, filter by active/idle, see which IDE each project uses, jump straight into your IDE with one click, and monitor session activity at a glance. Each project card shows live status, version, MCP wiring mode, port, and last activity.
 
-Same data, grid layout:
-
-<p align="center">
-  <img src="https://raw.githubusercontent.com/drknowhow/code-context-control/main/docs/screenshots/hub_projects_grid.png" alt="C3 Project Hub - grid view" width="900">
-</p>
+Per-card actions cover the full lifecycle: launch the IDE, open the per-project UI, edit name / tags / notes, transfer the registration to a new path, **merge** another project's memory + conversation history + edit ledger into this one (with optional source cleanup), or remove it from the registry.
 
 **Open in your IDE of choice** — C3 auto-detects which CLIs you have installed and gives you one-click launchers:
 
@@ -231,7 +228,7 @@ Per-project knobs for everything: budget thresholds, feature flag mode, edit led
 
 ## The MCP tool suite
 
-C3 exposes 14 tools as a native MCP server. Your IDE calls them directly:
+C3 exposes 15 tools as a native MCP server. Your IDE calls them directly:
 
 | Tool | What it does |
 |---|---|
@@ -249,8 +246,39 @@ C3 exposes 14 tools as a native MCP server. Your IDE calls them directly:
 | `c3_delegate` | Offload heavy work to local Ollama / Codex / Gemini / etc. |
 | `c3_agent` | Multi-step agentic workflows (review, investigate, refactor) |
 | `c3_edits` | Edit-ledger queries + version diffs + restore points |
+| `c3_bitbucket` | Bitbucket Data Center integration — PRs, branches, builds, repo admin (v2.30.0) |
+
+Every tool is **read-only safe in plan mode** (except `c3_edit`, `c3_shell`, and write actions on `c3_bitbucket`).
+
+### Bitbucket Data Center / Server (v2.30.0)
+
+`c3_bitbucket` connects to self-hosted enterprise Bitbucket via REST + Personal
+Access Token. Tokens live in the **OS keyring** (Windows Credential Manager,
+macOS Keychain, Linux Secret Service) — never in `.c3/config.json`.
+
+```bash
+# One-time login per server
+c3 bitbucket login --url https://bitbucket.example.com
+#  → prompts for username + PAT (masked)
+
+# Pin defaults so subsequent calls don't need project/repo
+c3 bitbucket set-default --project PROJ --repo my-service
+
+# Inspect status
+c3 bitbucket status
+```
 
-Every tool is **read-only safe in plan mode** (except `c3_edit` and `c3_shell`).
+The MCP tool dispatches by `action`. Read-only actions: `status`, `whoami`,
+`list_projects`, `list_repos`, `get_repo`, `list_prs`, `get_pr`, `get_pr_diff`,
+`get_pr_activities`, `list_branches`, `list_commits`, `list_activity`,
+`build_status`, `repo_settings`, `list_webhooks`, `list_permissions`. Write
+actions: `create_pr`, `comment_pr`, `approve_pr`, `unapprove_pr`, `decline_pr`,
+`merge_pr`, `create_branch`, `delete_branch`, `update_repo_settings`,
+`create_webhook`, `delete_webhook`. PR merges and branch deletes are recorded
+to the C3 edit ledger so the audit trail covers platform-side changes too.
+
+The **Hub UI** (per-project) gains a "Bitbucket" tab with sub-views for
+Overview / Pull Requests / Branches / Activity / Admin.
 
 ---
 

{code_context_control-2.28.3 → code_context_control-2.30.0}/README.md

@@ -86,13 +86,9 @@ C3 ships with two web UIs (no electron, no install — pure Flask + vanilla JS):
   <img src="https://raw.githubusercontent.com/drknowhow/code-context-control/main/docs/screenshots/hub_projects.png" alt="C3 Project Hub - all projects" width="900">
 </p>
 
-Every C3-initialized project on your machine appears here. Group them by tag, filter by active/idle, see which IDE each project uses, jump straight into your IDE with one click, and monitor session activity at a glance. Each project card shows live status, version, MCP wiring mode, port, and last activity.
+Every C3-initialized project on your machine appears here automatically — `c3 init` registers the project with the hub on first run, no extra step. Group them by tag, filter by active/idle, see which IDE each project uses, jump straight into your IDE with one click, and monitor session activity at a glance. Each project card shows live status, version, MCP wiring mode, port, and last activity.
 
-Same data, grid layout:
-
-<p align="center">
-  <img src="https://raw.githubusercontent.com/drknowhow/code-context-control/main/docs/screenshots/hub_projects_grid.png" alt="C3 Project Hub - grid view" width="900">
-</p>
+Per-card actions cover the full lifecycle: launch the IDE, open the per-project UI, edit name / tags / notes, transfer the registration to a new path, **merge** another project's memory + conversation history + edit ledger into this one (with optional source cleanup), or remove it from the registry.
 
 **Open in your IDE of choice** — C3 auto-detects which CLIs you have installed and gives you one-click launchers:
 
@@ -170,7 +166,7 @@ Per-project knobs for everything: budget thresholds, feature flag mode, edit led
 
 ## The MCP tool suite
 
-C3 exposes 14 tools as a native MCP server. Your IDE calls them directly:
+C3 exposes 15 tools as a native MCP server. Your IDE calls them directly:
 
 | Tool | What it does |
 |---|---|
@@ -188,8 +184,39 @@ C3 exposes 14 tools as a native MCP server. Your IDE calls them directly:
 | `c3_delegate` | Offload heavy work to local Ollama / Codex / Gemini / etc. |
 | `c3_agent` | Multi-step agentic workflows (review, investigate, refactor) |
 | `c3_edits` | Edit-ledger queries + version diffs + restore points |
+| `c3_bitbucket` | Bitbucket Data Center integration — PRs, branches, builds, repo admin (v2.30.0) |
+
+Every tool is **read-only safe in plan mode** (except `c3_edit`, `c3_shell`, and write actions on `c3_bitbucket`).
+
+### Bitbucket Data Center / Server (v2.30.0)
+
+`c3_bitbucket` connects to self-hosted enterprise Bitbucket via REST + Personal
+Access Token. Tokens live in the **OS keyring** (Windows Credential Manager,
+macOS Keychain, Linux Secret Service) — never in `.c3/config.json`.
+
+```bash
+# One-time login per server
+c3 bitbucket login --url https://bitbucket.example.com
+#  → prompts for username + PAT (masked)
+
+# Pin defaults so subsequent calls don't need project/repo
+c3 bitbucket set-default --project PROJ --repo my-service
+
+# Inspect status
+c3 bitbucket status
+```
 
-Every tool is **read-only safe in plan mode** (except `c3_edit` and `c3_shell`).
+The MCP tool dispatches by `action`. Read-only actions: `status`, `whoami`,
+`list_projects`, `list_repos`, `get_repo`, `list_prs`, `get_pr`, `get_pr_diff`,
+`get_pr_activities`, `list_branches`, `list_commits`, `list_activity`,
+`build_status`, `repo_settings`, `list_webhooks`, `list_permissions`. Write
+actions: `create_pr`, `comment_pr`, `approve_pr`, `unapprove_pr`, `decline_pr`,
+`merge_pr`, `create_branch`, `delete_branch`, `update_repo_settings`,
+`create_webhook`, `delete_webhook`. PR merges and branch deletes are recorded
+to the C3 edit ledger so the audit trail covers platform-side changes too.
+
+The **Hub UI** (per-project) gains a "Bitbucket" tab with sub-views for
+Overview / Pull Requests / Branches / Activity / Admin.
 
 ---
 

{code_context_control-2.28.3 → code_context_control-2.30.0}/cli/c3.py

@@ -60,7 +60,7 @@ from cli.commands.common import cmd_stats as common_cmd_stats
 from cli.commands.common import cmd_ui as common_cmd_ui
 from cli.commands.parser import build_parser
 from core import count_tokens, format_token_count
-from core.config import AGENT_DEFAULTS, DELEGATE_DEFAULTS, PROXY_DEFAULTS, load_delegate_config
+from core.config import AGENT_DEFAULTS, BITBUCKET_DEFAULTS, DELEGATE_DEFAULTS, PROXY_DEFAULTS, load_delegate_config
 from core.config import DEFAULTS as HYBRID_DEFAULTS
 from core.ide import PROFILES, detect_ide, get_profile, load_ide_config, normalize_ide_name
 from services.compressor import CodeCompressor
@@ -85,7 +85,7 @@ console = Console() if HAS_RICH else None
 # Config
 CONFIG_DIR = ".c3"
 CONFIG_FILE = ".c3/config.json"
-__version__ = "2.28.3"
+__version__ = "2.30.0"
 
 
 def _command_deps() -> CommandDeps:
@@ -164,6 +164,7 @@ def _build_init_config(project_path: str) -> dict:
         "proxy": deepcopy(PROXY_DEFAULTS),
         "delegate": deepcopy(DELEGATE_DEFAULTS),
         "agents": deepcopy(AGENT_DEFAULTS),
+        "bitbucket": deepcopy(BITBUCKET_DEFAULTS),
     }
     merged = _deep_merge_dict(defaults, existing if isinstance(existing, dict) else {})
     # Always persist current path/version on init/update.
@@ -237,7 +238,7 @@ _C3_MCP_ALLOW = [
     "mcp__c3__c3_session", "mcp__c3__c3_status", "mcp__c3__c3_filter",
     "mcp__c3__c3_memory", "mcp__c3__c3_validate", "mcp__c3__c3_edit",
     "mcp__c3__c3_agent", "mcp__c3__c3_delegate", "mcp__c3__c3_edits",
-    "mcp__c3__c3_impact", "mcp__c3__c3_shell",
+    "mcp__c3__c3_impact", "mcp__c3__c3_shell", "mcp__c3__c3_bitbucket",
 ]
 
 # Obsolete MCP tool names from earlier C3 versions. `c3 permissions clean`
@@ -563,6 +564,25 @@ def _check_c3_health(project_path: str) -> dict:
     facts_dir = c3_dir / "facts"
     info["facts"] = len(list(facts_dir.glob("*.json"))) if facts_dir.exists() else 0
 
+    # Bitbucket integration (v2.30.0+) — informational
+    bb_section = config.get("bitbucket") if isinstance(config, dict) else None
+    if isinstance(bb_section, dict):
+        active = bb_section.get("active") or {}
+        accounts = bb_section.get("accounts") or []
+        info["bitbucket_accounts"] = len(accounts) if isinstance(accounts, list) else 0
+        info["bitbucket_active_account"] = (
+            f"{active.get('username', '')}@{active.get('base_url', '')}"
+            if active.get("base_url") and active.get("username") else ""
+        )
+        info["bitbucket_default_repo"] = (
+            f"{bb_section.get('default_project', '')}/{bb_section.get('default_repo', '')}"
+            if bb_section.get("default_project") and bb_section.get("default_repo") else ""
+        )
+    else:
+        info["bitbucket_accounts"] = 0
+        info["bitbucket_active_account"] = ""
+        info["bitbucket_default_repo"] = ""
+
     info["issues"] = issues
     info["healthy"] = len(issues) == 0
     return info
@@ -827,6 +847,11 @@ def cmd_init(args):
     if not c3_dir.exists() or not (c3_dir / "config.json").exists():
         print_header(f"Initializing C3 for: {project_path}")
         _do_init(project_path, ide_name=requested_ide)
+        try:
+            from services.project_manager import ProjectManager
+            ProjectManager().add_project(project_path)
+        except Exception as _e:
+            print(f"  [warn] Could not register project with hub: {_e}")
         if getattr(args, "force", False):
             if git_requested:
                 _init_local_git_repo(project_path)
@@ -941,6 +966,15 @@ def cmd_init(args):
     except Exception:
         print("  Gemini: unknown")
 
+    # Bitbucket integration (v2.30.0+)
+    bb_n = int(health.get("bitbucket_accounts") or 0)
+    if bb_n:
+        active = health.get("bitbucket_active_account") or "(no active)"
+        repo = health.get("bitbucket_default_repo") or "(no default repo)"
+        print(f"  Bitbkt: {bb_n} account(s), active={active}, repo={repo}")
+    else:
+        print("  Bitbkt: not configured (run 'c3 bitbucket login --url <URL>')")
+
     if health["healthy"]:
         print("\n  Status: healthy — no issues detected.")
     else:
@@ -4457,6 +4491,7 @@ back to native tools as the task progresses.
 - **Shell**: `c3_shell(cmd, timeout=60)` — structured shell exec (tests/git/build). Auto-filters output, logs git mutations to the ledger. Native Bash for interactive/TTY only
 - **Memory**: `c3_memory(action='recall')` — full recall. `index` + `fetch` for token-efficient two-step retrieval
 - **Delegate**: `c3_delegate(task, backend='ollama|codex|gemini|claude|auto')` — offload to other models
+- **Bitbucket** (v2.30.0+, when `c3 bitbucket login` has run): `c3_bitbucket(action='list_prs|get_pr|merge_pr|...')` — self-hosted Bitbucket Data Center / Server. Token in OS keyring; mutating actions auto-log to the edit ledger.
 
 ## Self-Check
 If you haven't called a c3_* tool in several turns during active development, re-engage
@@ -5383,6 +5418,144 @@ def cmd_hub(args):
     run_hub(port=port, open_browser=open_browser, silent=silent, quiet=quiet)
 
 
+def cmd_bitbucket(args):
+    """Bitbucket Data Center / Server credential + workspace management."""
+    sub = getattr(args, "bitbucket_cmd", None)
+    if not sub:
+        print("Usage: c3 bitbucket {login,logout,status,use,set-default} [args]")
+        return
+
+    project_path = getattr(args, "project_path", ".") or "."
+
+    if sub == "login":
+        _bb_cmd_login(args, project_path)
+    elif sub == "logout":
+        _bb_cmd_logout(args, project_path)
+    elif sub == "status":
+        _bb_cmd_status(args, project_path)
+    elif sub == "use":
+        _bb_cmd_use(args, project_path)
+    elif sub == "set-default":
+        _bb_cmd_set_default(args, project_path)
+    else:
+        print(f"Unknown bitbucket subcommand: {sub}")
+
+
+def _bb_cmd_login(args, project_path: str) -> None:
+    import getpass
+
+    from services import bitbucket_credentials as bb_creds
+    from services.bitbucket_client import BitbucketDataCenterClient, BitbucketError
+
+    base_url = (args.url or "").rstrip("/")
+    username = args.username or input(f"Username for {base_url}: ").strip()
+    if not username:
+        print("Login cancelled — username required.")
+        return
+    token = args.token or getpass.getpass(f"Personal Access Token for {username}: ").strip()
+    if not token:
+        print("Login cancelled — token required.")
+        return
+
+    try:
+        bb_creds.save_credentials(
+            base_url, username, token,
+            project_path=project_path,
+            set_active=not getattr(args, "no_set_active", False),
+        )
+    except bb_creds.BitbucketCredentialError as exc:
+        print(f"[error] {exc}")
+        return
+
+    if getattr(args, "insecure", False):
+        bb_creds.set_verify_tls(False, project_path=project_path)
+
+    print(f"[OK] Stored credentials for {username}@{base_url}")
+
+    # Connection probe — non-fatal if it fails (token might be valid but
+    # network blocked at this moment).
+    try:
+        client = BitbucketDataCenterClient(
+            base_url=base_url, token=token,
+            verify_tls=not getattr(args, "insecure", False),
+        )
+        props = client.application_properties()
+        version = props.get("version", "?")
+        user = client.whoami()
+        print(f"     Server: {version} ({base_url})")
+        print(f"     Auth as: {user.get('displayName', username)} <{user.get('emailAddress', '?')}>")
+    except BitbucketError as exc:
+        print(f"[warn] Connection probe failed: {exc}")
+        print("       Token saved anyway — re-test with `c3 bitbucket status`.")
+
+
+def _bb_cmd_logout(args, project_path: str) -> None:
+    from services import bitbucket_credentials as bb_creds
+
+    base_url = (getattr(args, "url", "") or "").rstrip("/")
+    username = getattr(args, "username", "") or ""
+    if not base_url or not username:
+        active = bb_creds.get_active_account(project_path)
+        base_url = base_url or active.get("base_url", "")
+        username = username or active.get("username", "")
+    if not base_url or not username:
+        print("[error] No account specified and no active account configured.")
+        return
+    removed = bb_creds.delete_credentials(base_url, username, project_path=project_path)
+    if removed:
+        print(f"[OK] Removed {username}@{base_url}")
+    else:
+        print(f"[warn] Nothing to remove for {username}@{base_url}")
+
+
+def _bb_cmd_status(args, project_path: str) -> None:
+    from core.config import load_bitbucket_config
+    from services import bitbucket_credentials as bb_creds
+    from services.bitbucket_client import BitbucketDataCenterClient, BitbucketError
+
+    cfg = load_bitbucket_config(project_path)
+    active = cfg.get("active") or {}
+    accounts = cfg.get("accounts") or []
+
+    print("[bitbucket:status]")
+    print(f"  Active  : {active.get('username') or '-'}@{active.get('base_url') or '-'}")
+    print(f"  Defaults: project={cfg.get('default_project') or '-'} repo={cfg.get('default_repo') or '-'}")
+    print(f"  Verify TLS: {cfg.get('verify_tls', True)}")
+    print(f"  Accounts ({len(accounts)}):")
+    for a in accounts:
+        marker = "*" if a == active else " "
+        print(f"    {marker} {a.get('username','?')}@{a.get('base_url','?')}")
+
+    if not active.get("base_url") or not active.get("username"):
+        print("  Connection: (no active account)")
+        return
+    token = bb_creds.load_token(active["base_url"], active["username"])
+    if not token:
+        print("  Connection: FAIL — no token in keyring")
+        return
+    try:
+        client = BitbucketDataCenterClient(
+            base_url=active["base_url"], token=token,
+            verify_tls=bool(cfg.get("verify_tls", True)),
+        )
+        props = client.application_properties()
+        print(f"  Connection: OK (version {props.get('version','?')})")
+    except BitbucketError as exc:
+        print(f"  Connection: FAIL — {exc}")
+
+
+def _bb_cmd_use(args, project_path: str) -> None:
+    from services import bitbucket_credentials as bb_creds
+    bb_creds.set_active_account(args.url, args.username, project_path=project_path)
+    print(f"[OK] Active account: {args.username}@{args.url.rstrip('/')}")
+
+
+def _bb_cmd_set_default(args, project_path: str) -> None:
+    from services import bitbucket_credentials as bb_creds
+    bb_creds.set_default_repo(args.project, args.repo, project_path=project_path)
+    print(f"[OK] Default repo: {args.project}/{args.repo}")
+
+
 def cmd_projects(args):
     """Manage the global C3 project registry."""
     from services.project_manager import ProjectManager
@@ -6134,6 +6307,7 @@ def main():
         "ui": cmd_ui,
         "projects": cmd_projects,
         "hub": cmd_hub,
+        "bitbucket": cmd_bitbucket,
     }
 
     cmd_func = commands.get(args.command)

{code_context_control-2.28.3 → code_context_control-2.30.0}/cli/commands/parser.py

@@ -283,4 +283,43 @@ def build_parser(version: str, parse_cli_ide_arg):
     p_bext.add_argument("--dry-run", action="store_true",
         help="Validate setup (CLIs, datasets) without running the agent")
 
+    # ── Bitbucket Data Center / Server (v2.30.0) ─────────────────────────
+    p_bitbucket = subparsers.add_parser(
+        "bitbucket",
+        help="Bitbucket Data Center / Server credential + workspace management",
+    )
+    bb_subs = p_bitbucket.add_subparsers(dest="bitbucket_cmd")
+
+    bb_login = bb_subs.add_parser(
+        "login",
+        help="Authenticate with a Bitbucket Data Center server (interactive PAT prompt)",
+    )
+    bb_login.add_argument("--url", required=True, help="Bitbucket server base URL (e.g. https://bitbucket.example.com)")
+    bb_login.add_argument("--username", help="Bitbucket username (prompted if omitted)")
+    bb_login.add_argument("--token", help="Personal Access Token (prompted via getpass if omitted — preferred)")
+    bb_login.add_argument("--no-set-active", action="store_true", help="Do not switch the active account to this one")
+    bb_login.add_argument("--insecure", action="store_true", help="Disable TLS verification (self-signed certs)")
+    bb_login.add_argument("project_path", nargs="?", default=".")
+
+    bb_logout = bb_subs.add_parser("logout", help="Remove a Bitbucket account from keyring + config")
+    bb_logout.add_argument("--url", help="Bitbucket server base URL (defaults to active account)")
+    bb_logout.add_argument("--username", help="Username to log out (defaults to active account)")
+    bb_logout.add_argument("project_path", nargs="?", default=".")
+
+    bb_status = bb_subs.add_parser("status", help="Show configured Bitbucket accounts and connectivity")
+    bb_status.add_argument("project_path", nargs="?", default=".")
+
+    bb_use = bb_subs.add_parser("use", help="Switch the active Bitbucket account")
+    bb_use.add_argument("--url", required=True)
+    bb_use.add_argument("--username", required=True)
+    bb_use.add_argument("project_path", nargs="?", default=".")
+
+    bb_default = bb_subs.add_parser(
+        "set-default",
+        help="Set the default project key + repo slug for this C3 project",
+    )
+    bb_default.add_argument("--project", required=True, help="Bitbucket project key (e.g. PROJ)")
+    bb_default.add_argument("--repo", required=True, help="Repository slug")
+    bb_default.add_argument("project_path", nargs="?", default=".")
+
     return parser

{code_context_control-2.28.3 → code_context_control-2.30.0}/cli/docs.html

@@ -751,6 +751,7 @@
 
       <div class="sidebar-section">MCP Server</div>
       <a href="#mcp-tools">MCP Tools</a>
+      <a href="#bitbucket-tool">Bitbucket Integration</a>
       <a href="#context-tools">Context Manager</a>
       <a href="#claudemd-tools">Instructions Tools</a>
       <a href="#agent-tools">Background Agents</a>
@@ -1147,7 +1148,7 @@ python cli/c3.py install-mcp . gemini</code></pre>
 
       <!-- ─── MCP Tools ───────────────────── -->
       <h2 id="mcp-tools">MCP Tools Reference</h2>
-      <p>C3 exposes 9 MCP tools. All core tools work without Ollama; delegate requires it.</p>
+      <p>C3 exposes 15 MCP tools. All core tools work without Ollama; delegate requires it. The Bitbucket integration is optional and activated via <code>c3 bitbucket login</code>.</p>
 
       <h3>Discovery &amp; Compression</h3>
       <table>
@@ -1298,6 +1299,41 @@ python cli/c3.py install-mcp . gemini</code></pre>
         View the full timeline at <code>/edits</code>.
       </div>
 
+      <!-- Bitbucket Integration (v2.30.0) -->
+      <h2 id="bitbucket-tool">Bitbucket Data Center / Server</h2>
+      <p>C3 v2.30.0 ships a dedicated <code>c3_bitbucket</code> tool for self-hosted enterprise Bitbucket. It supports read browsing (PRs, branches, builds, activity), PR write actions (create / comment / approve / decline / merge), branch writes, and repository administration (settings, webhooks, permissions). PATs are stored in the OS keyring — never in <code>.c3/config.json</code>.</p>
+
+      <table>
+        <tr><th>Surface</th><th>What it provides</th></tr>
+        <tr><td><code>c3_bitbucket</code> MCP tool</td><td>Action-dispatched Bitbucket calls from Claude Code (27 actions across read / PR-write / branch / admin)</td></tr>
+        <tr><td><code>c3 bitbucket {login,logout,status,use,set-default}</code></td><td>CLI for credential and default-repo management. Login uses <code>getpass</code> for masked PAT entry.</td></tr>
+        <tr><td>Hub UI Bitbucket tab</td><td>Per-project visual browser: Overview, Pull Requests, Branches, Activity, Admin</td></tr>
+        <tr><td><code>/api/bitbucket/*</code> REST endpoints</td><td>Project session-server endpoints proxying to <code>BitbucketDataCenterClient</code></td></tr>
+      </table>
+
+      <div class="tip">
+        <div class="tip-title">Where the token lives</div>
+        Tokens are stored exclusively in the <strong>OS keyring</strong> (Windows Credential Manager / macOS Keychain / Linux Secret Service) under service <code>c3-bitbucket</code>. Only a non-secret index of <code>(base_url, username)</code> pairs and the active-account pointer is written to <code>.c3/config.json</code>. <code>.c3/</code> is gitignored.
+      </div>
+
+      <p><strong>Quick start</strong></p>
+      <pre><code>c3 bitbucket login --url https://bitbucket.example.com
+c3 bitbucket set-default --project PROJ --repo my-service
+c3 bitbucket status</code></pre>
+
+      <p>From Claude Code:</p>
+      <pre><code>c3_bitbucket(action='list_prs', state='OPEN')
+c3_bitbucket(action='get_pr', pr_id=42)
+c3_bitbucket(action='approve_pr', pr_id=42)
+c3_bitbucket(action='merge_pr', pr_id=42)  # version auto-fetched</code></pre>
+
+      <div class="tip">
+        <div class="tip-title">Audit trail</div>
+        PR merges, branch deletes, webhook writes, and other mutating actions are appended to the C3 edit ledger under the virtual path <code>bitbucket://&lt;project&gt;/&lt;repo&gt;</code> so the local audit trail covers platform-side state changes too. Token text is stripped from logged kwargs before persisting.
+      </div>
+
+      <p>Full reference (action tables, security model, configuration shape, examples, troubleshooting): <a href="/guide/bitbucket.html">Bitbucket integration guide</a>. Currently <strong>Bitbucket Cloud</strong> (<code>bitbucket.org</code>) is not supported — only Data Center / Server.</p>
+
       <h3 id="agent-tools">Background Agents</h3>
       <p>C3 runs 9 autonomous daemon threads that perform periodic analysis and surface findings via a notification
         queue. Notifications are automatically prepended to the next MCP tool response so Claude sees them naturally.

{code_context_control-2.28.3 → code_context_control-2.30.0}/cli/hook_ghost_files.py

@@ -35,6 +35,16 @@ _PYTHON_TYPE_NAMES = {
     "Awaitable", "Coroutine", "AsyncIterator", "AsyncGenerator",
 }
 
+# Common heredoc / here-string end-markers that leak as filenames when
+# Bash or PowerShell misparses a `<<EOF` / `@'...'@` block. Match is
+# size-agnostic: a non-empty `EOF` file is still a ghost.
+_HEREDOC_MARKERS = {
+    "EOF", "EOM", "EOL", "END", "STOP", "DONE",
+    "MARK", "MARKER", "DELIM", "DELIMITER",
+    "INPUT", "OUTPUT", "DATA", "BLOCK", "HEREDOC",
+    "'@", "@'",  # PowerShell here-string fragments
+}
+
 # Max file size to consider a ghost (bytes). Genuine files are usually larger.
 _MAX_GHOST_SIZE = 4096
 
@@ -108,6 +118,10 @@ def _is_ghost_file(path: Path) -> bool:
     if name in _PYTHON_TYPE_NAMES:
         return True
 
+    # HEREDOC end-marker leaked as filename (e.g., "EOF", "'@", "END")
+    if name in _HEREDOC_MARKERS and not real_suffix:
+        return True
+
     # Partial type annotation (e.g., "tuple[float", "dict[str")
     if "[" in name and not real_suffix:
         return True
@@ -154,7 +168,9 @@ def scan_ghost_files(project_root: Path) -> list[dict]:
             name = entry.name
 
             # Determine reason
-            if name in _PYTHON_TYPE_NAMES:
+            if name in _HEREDOC_MARKERS:
+                reason = "heredoc end-marker leak"
+            elif name in _PYTHON_TYPE_NAMES:
                 reason = "Python type name"
             elif "[" in name:
                 reason = "partial type annotation"