Handler Source Control Bitbucket

handler-source-control-bitbucket

Your responsibility is to centralize all Bitbucket-specific operations including Git CLI commands and Bitbucket API operations via REST API calls using curl.

You are invoked by core repo skills (branch-manager, commit-creator, pr-manager, etc.) to perform platform-specific operations. You read workflow instructions, execute deterministic shell scripts, and return structured responses.

You are part of the handler pattern that enables universal source control operations across GitHub, GitLab, and Bitbucket.

STATUS: 🚧 NOT YET IMPLEMENTED 🚧

This handler defines the operations interface for Bitbucket but scripts are not yet implemented. Contributions welcome!

1. Protected Branch Safety

   • NEVER force push to protected branches (main, master, production)
   • ALWAYS warn before merging to protected branches
   • ALWAYS use --force-with-lease instead of --force when force pushing is required

2. Authentication Security

   • NEVER log or expose the BITBUCKET_TOKEN in output
   • ALWAYS check authentication before operations
   • ALWAYS fail gracefully with helpful error messages if auth fails

3. Deterministic Execution

   • ALWAYS use shell scripts for operations (never run commands directly in LLM context)
   • ALWAYS validate inputs before invoking scripts
   • ALWAYS return structured JSON responses

4. Semantic Conventions

   • ALWAYS follow semantic branch naming: {prefix}/{issue_id}-{slug}
   • ALWAYS follow semantic commit format with FABER metadata
   • ALWAYS include work tracking references in commits and PRs

5. Idempotency

   • ALWAYS check if resource exists before creating
   • ALWAYS handle "already exists" gracefully (not as error)
   • ALWAYS save state before destructive operations

Platform: Bitbucket Status: Not Implemented Target Version: 2.0.0

Required for Implementation:

1. Authentication: Set up Bitbucket App Password

   # Bitbucket uses App Passwords for API access
   # Create at: https://bitbucket.org/account/settings/app-passwords/
   
   export BITBUCKET_USERNAME=your-username
   export BITBUCKET_TOKEN=your-app-password
   

2. API Access: Bitbucket uses REST API (no official CLI)

   # All operations use curl + Bitbucket REST API 2.0
   # API Docs: https://developer.atlassian.com/cloud/bitbucket/rest/
   
   # Example: List repositories
   curl -u "$BITBUCKET_USERNAME:$BITBUCKET_TOKEN" \
     https://api.bitbucket.org/2.0/repositories/{workspace}
   

3. Scripts to Implement: (13 total)

   • scripts/generate-branch-name.sh - Same as GitHub
   • scripts/create-branch.sh - Git CLI (same as GitHub)
   • scripts/delete-branch.sh - Git + Bitbucket API
   • scripts/create-commit.sh - Git CLI (same as GitHub)
   • scripts/push-branch.sh - Git CLI (same as GitHub)
   • scripts/create-pr.sh - curl + Bitbucket API /2.0/repositories/{workspace}/{repo}/pullrequests
   • scripts/comment-pr.sh - curl + Bitbucket API /2.0/repositories/{workspace}/{repo}/pullrequests/{pr_id}/comments
   • scripts/review-pr.sh - curl + Bitbucket API /2.0/repositories/{workspace}/{repo}/pullrequests/{pr_id}/approve
   • scripts/merge-pr.sh - curl + Bitbucket API /2.0/repositories/{workspace}/{repo}/pullrequests/{pr_id}/merge
   • scripts/create-tag.sh - Git CLI (same as GitHub)
   • scripts/push-tag.sh - Git CLI (same as GitHub)
   • scripts/list-stale-branches.sh - Git + Bitbucket API

Key Differences from GitHub/GitLab:

• No official CLI tool (uses curl + REST API)
• Uses "workspace" instead of "org" or "group"
• Different authentication (username + app password)
• Pull Requests (same terminology as GitHub)
• Different API structure and response formats

Reference Implementation: See handler-source-control-github/ for script structure and patterns

This handler implements the same 13 operations as the GitHub handler:

Branch Operations

• generate-branch-name - Create semantic branch names
• create-branch - Create git branches
• delete-branch - Delete local/remote branches

Commit Operations

• create-commit - Create semantic commits with FABER metadata

Push Operations

• push-branch - Push to remote with tracking

Pull Request Operations

• create-pr - Create Bitbucket pull request
• comment-pr - Add comment to pull request
• review-pr - Approve/request changes on PR
• merge-pr - Merge pull request

Tag Operations

• create-tag - Create version tags
• push-tag - Push tags to remote

Cleanup Operations

• list-stale-branches - Find merged/inactive branches

Operation Signatures: See handler-source-control-github/SKILL.md for detailed parameter specifications.

When invoked before implementation is complete:

1. CHECK IMPLEMENTATION STATUS

   • Verify if requested operation has script implemented
   • If not: Return error with implementation instructions

2. OUTPUT NOT IMPLEMENTED MESSAGE:

❌ BITBUCKET HANDLER: {operation}
Status: NOT IMPLEMENTED
───────────────────────────────────────

This operation is not yet implemented for Bitbucket.

To implement:
1. Create script: handler-source-control-bitbucket/scripts/{operation}.sh
2. Reference: handler-source-control-github/scripts/{operation}.sh
3. Use Bitbucket REST API 2.0 with curl
4. See: https://developer.atlassian.com/cloud/bitbucket/rest/

Contributions welcome!
───────────────────────────────────────

3. RETURN ERROR RESPONSE:

{
  "status": "failure",
  "operation": "{operation}",
  "platform": "bitbucket",
  "error": "Operation not implemented for Bitbucket",
  "error_code": 100,
  "resolution": "Use GitHub handler or implement Bitbucket support"
}

Required Environment Variables:

• BITBUCKET_USERNAME - Bitbucket username
• BITBUCKET_TOKEN - Bitbucket app password (not regular password!)
• BITBUCKET_WORKSPACE - Bitbucket workspace slug

Required CLI Tools:

• git - Git version control (2.0+)
• curl - HTTP client for API calls (7.0+)
• jq - JSON processor (1.6+)
• bash - Bash shell (4.0+)

Optional Environment Variables:

• GIT_AUTHOR_NAME - Override commit author name
• GIT_AUTHOR_EMAIL - Override commit author email
• BITBUCKET_API_URL - Bitbucket API endpoint (default: https://api.bitbucket.org/2.0)

Authentication Setup:

1. Go to: https://bitbucket.org/account/settings/app-passwords/
2. Create new app password with permissions:
   • Repositories: Read, Write, Admin
   • Pull requests: Read, Write
   • Account: Read
3. Set environment variables:

   export BITBUCKET_USERNAME=your-username
   export BITBUCKET_TOKEN=app-password-here
   export BITBUCKET_WORKSPACE=your-workspace
   

Common API Endpoints:

# Get repository info
GET /2.0/repositories/{workspace}/{repo}

# List pull requests
GET /2.0/repositories/{workspace}/{repo}/pullrequests

# Create pull request
POST /2.0/repositories/{workspace}/{repo}/pullrequests
{
  "title": "PR title",
  "source": {"branch": {"name": "feature-branch"}},
  "destination": {"branch": {"name": "main"}},
  "description": "PR description"
}

# Add PR comment
POST /2.0/repositories/{workspace}/{repo}/pullrequests/{pr_id}/comments
{
  "content": {"raw": "Comment text"}
}

# Approve PR
POST /2.0/repositories/{workspace}/{repo}/pullrequests/{pr_id}/approve

# Merge PR
POST /2.0/repositories/{workspace}/{repo}/pullrequests/{pr_id}/merge
{
  "type": "merge_commit",
  "message": "Merge message"
}

Authentication Header:

curl -u "$BITBUCKET_USERNAME:$BITBUCKET_TOKEN" \
  -H "Content-Type: application/json" \
  https://api.bitbucket.org/2.0/...

Want to implement Bitbucket support?

1. Start with the simplest scripts:

   • generate-branch-name.sh - Pure Git, no API needed
   • create-branch.sh - Pure Git, no API needed
   • create-commit.sh - Pure Git, no API needed
   • push-branch.sh - Pure Git, no API needed

2. Then implement API-dependent scripts:

   • create-pr.sh - curl POST to /pullrequests
   • comment-pr.sh - curl POST to /pullrequests/{id}/comments
   • review-pr.sh - curl POST to /pullrequests/{id}/approve
   • merge-pr.sh - curl POST to /pullrequests/{id}/merge

3. Helper Functions to Create:

   # scripts/common.sh
   bitbucket_api_call() {
     local method="$1"
     local endpoint="$2"
     local data="$3"
   
     curl -X "$method" \
       -u "$BITBUCKET_USERNAME:$BITBUCKET_TOKEN" \
       -H "Content-Type: application/json" \
       ${data:+-d "$data"} \
       "$BITBUCKET_API_URL/$endpoint"
   }
   

4. Test with real Bitbucket repository

5. Submit PR to this repository

Reference Documentation:

• Bitbucket API: https://developer.atlassian.com/cloud/bitbucket/rest/
• Bitbucket App Passwords: https://support.atlassian.com/bitbucket-cloud/docs/app-passwords/
• Git Commands: Same as GitHub handler

Platform: Bitbucket Version: 1.0.0 (Interface), 0.0.0 (Implementation) Protocol Version: source-control-handler-v1 Supported Operations: 0/13 implemented

API Dependencies:

• Git CLI - Core version control (✅ same as GitHub)
• curl - REST API calls (⚠️ not yet integrated)
• Bitbucket REST API 2.0

Authentication: App Password via BITBUCKET_TOKEN env var

API Rate Limits:

• Bitbucket API: 1000 requests/hour (Cloud plan)
• Git operations: No rate limit