@ameshkin/ticket-mate 0.1.20

package/public/cli/project-list.js

@@ -0,0 +1,37 @@
+#!/usr/bin/env node
+/**
+ * CLI command to list projects from ticket-mate.json
+ *
+ * Usage:
+ *   ticket-mate-projects [project-root]
+ */
+import { resolve } from "path";
+import { loadJiraMateConfig } from "../config/loadJiraMateConfig";
+import { logger } from '../utils/logger';
+import { getErrorMessage } from "../types/common";
+function main() {
+    try {
+        const fromDir = process.argv[2] ? resolve(process.argv[2]) : process.cwd();
+        const config = loadJiraMateConfig(fromDir);
+        console.log(`Jira: ${config.jiraBaseUrl}`);
+        console.log(`Default issue type: ${config.defaultIssueType}`);
+        console.log("");
+        config.projects.forEach((project) => {
+            console.log(`- ${project.displayName} [${project.jiraProjectKey}]`);
+            console.log(`  slug: ${project.slug}`);
+            console.log(`  repoPath: ${project.repoPath}`);
+            console.log(`  progress root: ${project.orchestrator.root}`);
+            console.log(`  epics file: ${project.orchestrator.epicsFile}`);
+            console.log(`  stories dir: ${project.orchestrator.storiesDir}`);
+            console.log(`  bugs file: ${project.orchestrator.bugsFile}`);
+            console.log("");
+        });
+    }
+    catch (error) {
+        logger.error("Failed to list projects", { error: getErrorMessage(error) });
+        console.error(`Error: ${getErrorMessage(error)}`);
+        process.exit(1);
+    }
+}
+main();
+//# sourceMappingURL=project-list.js.map

package/public/cli/project-list.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"project-list.js","sourceRoot":"","sources":["../../src/cli/project-list.ts"],"names":[],"mappings":";AACA;;;;;GAKG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAC/B,OAAO,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AAClE,OAAO,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AACzC,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAElD,SAAS,IAAI;IACX,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;QAE3E,MAAM,MAAM,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;QAE3C,OAAO,CAAC,GAAG,CAAC,SAAS,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;QAC3C,OAAO,CAAC,GAAG,CAAC,uBAAuB,MAAM,CAAC,gBAAgB,EAAE,CAAC,CAAC;QAC9D,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAEhB,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,OAAiL,EAAE,EAAE;YAC5M,OAAO,CAAC,GAAG,CAAC,KAAK,OAAO,CAAC,WAAW,KAAK,OAAO,CAAC,cAAc,GAAG,CAAC,CAAC;YACpE,OAAO,CAAC,GAAG,CAAC,WAAW,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;YACvC,OAAO,CAAC,GAAG,CAAC,eAAe,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;YAC/C,OAAO,CAAC,GAAG,CAAC,oBAAoB,OAAO,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC;YAC7D,OAAO,CAAC,GAAG,CAAC,iBAAiB,OAAO,CAAC,YAAY,CAAC,SAAS,EAAE,CAAC,CAAC;YAC/D,OAAO,CAAC,GAAG,CAAC,kBAAkB,OAAO,CAAC,YAAY,CAAC,UAAU,EAAE,CAAC,CAAC;YACjE,OAAO,CAAC,GAAG,CAAC,gBAAgB,OAAO,CAAC,YAAY,CAAC,QAAQ,EAAE,CAAC,CAAC;YAC7D,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAClB,CAAC,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,MAAM,CAAC,KAAK,CAAC,yBAAyB,EAAE,EAAE,KAAK,EAAE,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC3E,OAAO,CAAC,KAAK,CAAC,UAAU,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAClD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED,IAAI,EAAE,CAAC"}

package/public/cli/utils/auth-helper.d.ts

@@ -0,0 +1,28 @@
+/**
+ * CLI Authentication Helper
+ * Determines which credentials to use based on environment
+ */
+export interface CliAuthResult {
+    mode: 'apikey' | 'oauth';
+    token: string;
+    email: string;
+    baseUrl: string;
+    cloudId?: string;
+    userId?: string;
+    debugInfo?: {
+        isLocalDev: boolean;
+        tokenLength: number;
+        source: 'env' | 'session' | 'database';
+    };
+}
+/**
+ * Get authentication credentials for CLI commands
+ */
+export declare function getCliAuth(options?: {
+    verbose?: boolean;
+}): Promise<CliAuthResult>;
+/**
+ * Validate that credentials are working
+ */
+export declare function validateAuth(auth: CliAuthResult): Promise<boolean>;
+//# sourceMappingURL=auth-helper.d.ts.map

package/public/cli/utils/auth-helper.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-helper.d.ts","sourceRoot":"","sources":["../../../src/cli/utils/auth-helper.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAMH,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,QAAQ,GAAG,OAAO,CAAC;IACzB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE;QACV,UAAU,EAAE,OAAO,CAAC;QACpB,WAAW,EAAE,MAAM,CAAC;QACpB,MAAM,EAAE,KAAK,GAAG,SAAS,GAAG,UAAU,CAAC;KACxC,CAAC;CACH;AAED;;GAEG;AACH,wBAAsB,UAAU,CAAC,OAAO,GAAE;IAAE,OAAO,CAAC,EAAE,OAAO,CAAA;CAAO,GAAG,OAAO,CAAC,aAAa,CAAC,CAoE5F;AAED;;GAEG;AACH,wBAAsB,YAAY,CAAC,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC,CAaxE"}

package/public/cli/utils/auth-helper.js

@@ -0,0 +1,83 @@
+/**
+ * CLI Authentication Helper
+ * Determines which credentials to use based on environment
+ */
+import { getAuthConfig } from '../../config/auth-mode';
+import { getJiraConfig } from '../../config/config';
+import { getJiraApiKey } from '../../config/jiraCredentials';
+/**
+ * Get authentication credentials for CLI commands
+ */
+export async function getCliAuth(options = {}) {
+    const authConfig = getAuthConfig();
+    const config = getJiraConfig();
+    // Local dev: use API key from environment
+    if (authConfig.isLocalDev && authConfig.useApiKey) {
+        const token = getJiraApiKey() || config.apiToken; // Uses centralized resolver
+        const email = config.email;
+        if (!token || !email) {
+            throw new Error('Missing ATLASSIAN_API_KEY or ATLASSIAN_EMAIL in .env.local\n' +
+                'For local development, set:\n' +
+                '  ATLASSIAN_API_KEY=your-192-character-token\n' +
+                '  ATLASSIAN_EMAIL=your-email@example.com\n' +
+                '  ATLASSIAN_BASE_URL=https://your-domain.atlassian.net');
+        }
+        if (options.verbose) {
+            console.log('✅ Using API key authentication (local dev mode)');
+        }
+        return {
+            mode: 'apikey',
+            token,
+            email,
+            baseUrl: config.baseUrl,
+            debugInfo: {
+                isLocalDev: true,
+                tokenLength: token.length,
+                source: 'env',
+            },
+        };
+    }
+    // Production: use OAuth token from JiraWorkspace
+    if (authConfig.useOAuth) {
+        const { getOAuthTokenForCli } = await import('./oauth-cli-helper');
+        const oauthAuth = await getOAuthTokenForCli();
+        if (!oauthAuth) {
+            const { getLoginInstructions } = await import('./oauth-cli-helper');
+            throw new Error('No Jira workspace connected.\n' +
+                getLoginInstructions());
+        }
+        return {
+            mode: 'oauth',
+            token: oauthAuth.accessToken,
+            email: oauthAuth.email,
+            baseUrl: oauthAuth.baseUrl,
+            cloudId: oauthAuth.cloudId,
+            userId: String(oauthAuth.userId),
+            debugInfo: {
+                isLocalDev: false,
+                tokenLength: oauthAuth.accessToken.length,
+                source: 'database',
+            },
+        };
+    }
+    throw new Error('No authentication configured.\n' +
+        'Please set ATLASSIAN_API_KEY and ATLASSIAN_EMAIL in .env.local for local development.');
+}
+/**
+ * Validate that credentials are working
+ */
+export async function validateAuth(auth) {
+    try {
+        const response = await fetch(`${auth.baseUrl}/rest/api/3/myself`, {
+            headers: {
+                'Authorization': `Basic ${Buffer.from(`${auth.email}:${auth.token}`).toString('base64')}`,
+                'Accept': 'application/json',
+            },
+        });
+        return response.ok;
+    }
+    catch {
+        return false;
+    }
+}
+//# sourceMappingURL=auth-helper.js.map

package/public/cli/utils/auth-helper.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-helper.js","sourceRoot":"","sources":["../../../src/cli/utils/auth-helper.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAgB7D;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,UAAiC,EAAE;IAClE,MAAM,UAAU,GAAG,aAAa,EAAE,CAAC;IACnC,MAAM,MAAM,GAAG,aAAa,EAAE,CAAC;IAE/B,0CAA0C;IAC1C,IAAI,UAAU,CAAC,UAAU,IAAI,UAAU,CAAC,SAAS,EAAE,CAAC;QAClD,MAAM,KAAK,GAAG,aAAa,EAAE,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,4BAA4B;QAC9E,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;QAE3B,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,EAAE,CAAC;YACrB,MAAM,IAAI,KAAK,CACb,8DAA8D;gBAC9D,+BAA+B;gBAC/B,gDAAgD;gBAChD,4CAA4C;gBAC5C,wDAAwD,CACzD,CAAC;QACJ,CAAC;QAED,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,CAAC,GAAG,CAAC,iDAAiD,CAAC,CAAC;QACjE,CAAC;QAED,OAAO;YACL,IAAI,EAAE,QAAQ;YACd,KAAK;YACL,KAAK;YACL,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,SAAS,EAAE;gBACT,UAAU,EAAE,IAAI;gBAChB,WAAW,EAAE,KAAK,CAAC,MAAM;gBACzB,MAAM,EAAE,KAAK;aACd;SACF,CAAC;IACJ,CAAC;IAED,iDAAiD;IACjD,IAAI,UAAU,CAAC,QAAQ,EAAE,CAAC;QACxB,MAAM,EAAE,mBAAmB,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;QACnE,MAAM,SAAS,GAAG,MAAM,mBAAmB,EAAE,CAAC;QAE9C,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,EAAE,oBAAoB,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;YACpE,MAAM,IAAI,KAAK,CACb,gCAAgC;gBAChC,oBAAoB,EAAE,CACvB,CAAC;QACJ,CAAC;QAED,OAAO;YACL,IAAI,EAAE,OAAO;YACb,KAAK,EAAE,SAAS,CAAC,WAAW;YAC5B,KAAK,EAAE,SAAS,CAAC,KAAK;YACtB,OAAO,EAAE,SAAS,CAAC,OAAO;YAC1B,OAAO,EAAE,SAAS,CAAC,OAAO;YAC1B,MAAM,EAAE,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC;YAChC,SAAS,EAAE;gBACT,UAAU,EAAE,KAAK;gBACjB,WAAW,EAAE,SAAS,CAAC,WAAW,CAAC,MAAM;gBACzC,MAAM,EAAE,UAAU;aACnB;SACF,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,KAAK,CACb,iCAAiC;QACjC,uFAAuF,CACxF,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,IAAmB;IACpD,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,OAAO,oBAAoB,EAAE;YAChE,OAAO,EAAE;gBACP,eAAe,EAAE,SAAS,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE;gBACzF,QAAQ,EAAE,kBAAkB;aAC7B;SACF,CAAC,CAAC;QAEH,OAAO,QAAQ,CAAC,EAAE,CAAC;IACrB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}

package/public/cli/utils/get-cli-client.d.ts

@@ -0,0 +1,13 @@
+import type { JiraClient } from "@/server/jira/jiraClient";
+/**
+ * Get authenticated JiraClient for CLI commands
+ * Automatically handles OAuth vs PAT fallback logic
+ *
+ * @param options.verbose - Show verbose debug output
+ * @param options.jiraBaseUrl - Optional Jira base URL to use specific OAuth credentials
+ */
+export declare function getCliJiraClient(options?: {
+    verbose?: boolean;
+    jiraBaseUrl?: string;
+}): Promise<JiraClient | undefined>;
+//# sourceMappingURL=get-cli-client.d.ts.map

package/public/cli/utils/get-cli-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-cli-client.d.ts","sourceRoot":"","sources":["../../../src/cli/utils/get-cli-client.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AAE3D;;;;;;GAMG;AACH,wBAAsB,gBAAgB,CACpC,OAAO,GAAE;IAAE,OAAO,CAAC,EAAE,OAAO,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAAO,GACxD,OAAO,CAAC,UAAU,GAAG,SAAS,CAAC,CAwFjC"}

package/public/cli/utils/get-cli-client.js

@@ -0,0 +1,81 @@
+// Use path aliases since this file is imported by Next.js API routes (bundled context)
+import { getJiraConfig } from "@/config/config";
+import { getAuthConfig, isDebugMode } from "@/config/auth-mode";
+import { getOAuthTokenForCli, isOAuthConfigured, } from "@/cli/utils/oauth-cli-helper";
+import { createJiraOAuthClient, createJiraPatClient, } from "@/server/jira/jiraClient";
+/**
+ * Get authenticated JiraClient for CLI commands
+ * Automatically handles OAuth vs PAT fallback logic
+ *
+ * @param options.verbose - Show verbose debug output
+ * @param options.jiraBaseUrl - Optional Jira base URL to use specific OAuth credentials
+ */
+export async function getCliJiraClient(options = {}) {
+    const authConfig = getAuthConfig();
+    const debug = isDebugMode() || options.verbose;
+    // Check DATABASE_URL first
+    const hasDatabase = !!process.env.DATABASE_URL;
+    if (debug) {
+        console.log(`\n🔑 DEBUG - Authentication Mode:`);
+        console.log(`   Environment: ${authConfig.isLocalDev ? "🏠 LOCAL DEV" : "🌐 PRODUCTION"}`);
+        console.log(`   DATABASE_URL: ${hasDatabase ? "✅ SET" : "❌ NOT SET"}`);
+    }
+    const hasOAuth = hasDatabase ? await isOAuthConfigured() : false;
+    if (debug) {
+        console.log(`   OAuth Configured: ${hasOAuth ? "✅ YES" : "❌ NO"}`);
+        if (!hasDatabase) {
+            console.log(`   💡 OAuth requires DATABASE_URL to be set`);
+            console.log(`   💡 Set DATABASE_URL in .env.local or environment to use OAuth`);
+        }
+        else if (!hasOAuth) {
+            console.log(`   💡 No Jira OAuth credentials found in database`);
+            console.log(`   💡 To set up OAuth:`);
+            console.log(`      1. Start dev server: npm run dev`);
+            console.log(`      2. Visit: http://localhost:4000/admin/settings/integrations/jira`);
+            console.log(`      3. Sign in and connect your Jira workspace`);
+        }
+    }
+    // 1. Try OAuth first (pass jiraBaseUrl if provided)
+    if (hasOAuth || options.jiraBaseUrl) {
+        const oauthToken = await getOAuthTokenForCli(undefined, undefined, options.jiraBaseUrl);
+        if (oauthToken) {
+            if (debug) {
+                console.log(`   Auth Mode: OAUTH`);
+                console.log(`   User: ${oauthToken.email}`);
+                console.log(`   Jira Instance: ${oauthToken.baseUrl}`);
+                console.log(`   Cloud ID: ${oauthToken.cloudId}`);
+                console.log(`\n   ✅ Using OAuth credentials from web session\n`);
+            }
+            else {
+                // Show brief success message even without verbose
+                console.log(`✅ Using OAuth as ${oauthToken.email}\n`);
+            }
+            return createJiraOAuthClient({
+                baseUrl: oauthToken.baseUrl,
+                accessToken: oauthToken.accessToken,
+            });
+        }
+    }
+    // 2. Fallback to API key (PAT) if OAuth not configured
+    // Note: We return undefined if no PAT is configured either, letting the caller decide how to handle it
+    // (though legacy code usually falls back to global config object)
+    const config = getJiraConfig();
+    if (config.email && config.apiToken) {
+        if (debug) {
+            console.log(`   Auth Mode: API KEY (Legacy/PAT)`);
+            console.log(`\n   💡 Using API key from environment\n`);
+        }
+        // Always show warning when using PAT fallback (not just in debug mode)
+        const baseUrlHost = config.baseUrl
+            .replace("https://", "")
+            .replace("http://", "");
+        console.log(`⚠️  Temporarily using ${baseUrlHost}, should be using OAuth\n`);
+        return createJiraPatClient({
+            baseUrl: config.baseUrl,
+            email: config.email,
+            apiToken: config.apiToken,
+        });
+    }
+    return undefined;
+}
+//# sourceMappingURL=get-cli-client.js.map

package/public/cli/utils/get-cli-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-cli-client.js","sourceRoot":"","sources":["../../../src/cli/utils/get-cli-client.ts"],"names":[],"mappings":"AAAA,uFAAuF;AACvF,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAChE,OAAO,EACL,mBAAmB,EACnB,iBAAiB,GAClB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,qBAAqB,EACrB,mBAAmB,GACpB,MAAM,0BAA0B,CAAC;AAGlC;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,UAAuD,EAAE;IAEzD,MAAM,UAAU,GAAG,aAAa,EAAE,CAAC;IACnC,MAAM,KAAK,GAAG,WAAW,EAAE,IAAI,OAAO,CAAC,OAAO,CAAC;IAE/C,2BAA2B;IAC3B,MAAM,WAAW,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC;IAC/C,IAAI,KAAK,EAAE,CAAC;QACV,OAAO,CAAC,GAAG,CAAC,mCAAmC,CAAC,CAAC;QACjD,OAAO,CAAC,GAAG,CACT,mBACE,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,eAC3C,EAAE,CACH,CAAC;QACF,OAAO,CAAC,GAAG,CAAC,oBAAoB,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;IACzE,CAAC;IAED,MAAM,QAAQ,GAAG,WAAW,CAAC,CAAC,CAAC,MAAM,iBAAiB,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;IAEjE,IAAI,KAAK,EAAE,CAAC;QACV,OAAO,CAAC,GAAG,CAAC,wBAAwB,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;QACnE,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,OAAO,CAAC,GAAG,CAAC,6CAA6C,CAAC,CAAC;YAC3D,OAAO,CAAC,GAAG,CACT,kEAAkE,CACnE,CAAC;QACJ,CAAC;aAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;YACrB,OAAO,CAAC,GAAG,CAAC,mDAAmD,CAAC,CAAC;YACjE,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;YACtC,OAAO,CAAC,GAAG,CAAC,wCAAwC,CAAC,CAAC;YACtD,OAAO,CAAC,GAAG,CACT,wEAAwE,CACzE,CAAC;YACF,OAAO,CAAC,GAAG,CAAC,kDAAkD,CAAC,CAAC;QAClE,CAAC;IACH,CAAC;IAED,oDAAoD;IACpD,IAAI,QAAQ,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;QACpC,MAAM,UAAU,GAAG,MAAM,mBAAmB,CAC1C,SAAS,EACT,SAAS,EACT,OAAO,CAAC,WAAW,CACpB,CAAC;QACF,IAAI,UAAU,EAAE,CAAC;YACf,IAAI,KAAK,EAAE,CAAC;gBACV,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;gBACnC,OAAO,CAAC,GAAG,CAAC,YAAY,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC;gBAC5C,OAAO,CAAC,GAAG,CAAC,qBAAqB,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC;gBACvD,OAAO,CAAC,GAAG,CAAC,gBAAgB,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC;gBAClD,OAAO,CAAC,GAAG,CAAC,mDAAmD,CAAC,CAAC;YACnE,CAAC;iBAAM,CAAC;gBACN,kDAAkD;gBAClD,OAAO,CAAC,GAAG,CAAC,oBAAoB,UAAU,CAAC,KAAK,IAAI,CAAC,CAAC;YACxD,CAAC;YAED,OAAO,qBAAqB,CAAC;gBAC3B,OAAO,EAAE,UAAU,CAAC,OAAO;gBAC3B,WAAW,EAAE,UAAU,CAAC,WAAW;aACpC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,uDAAuD;IACvD,uGAAuG;IACvG,kEAAkE;IAClE,MAAM,MAAM,GAAG,aAAa,EAAE,CAAC;IAC/B,IAAI,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACpC,IAAI,KAAK,EAAE,CAAC;YACV,OAAO,CAAC,GAAG,CAAC,oCAAoC,CAAC,CAAC;YAClD,OAAO,CAAC,GAAG,CAAC,0CAA0C,CAAC,CAAC;QAC1D,CAAC;QAED,uEAAuE;QACvE,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO;aAC/B,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC;aACvB,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;QAC1B,OAAO,CAAC,GAAG,CACT,yBAAyB,WAAW,2BAA2B,CAChE,CAAC;QAEF,OAAO,mBAAmB,CAAC;YACzB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,QAAQ,EAAE,MAAM,CAAC,QAAQ;SAC1B,CAAC,CAAC;IACL,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/public/cli/utils/oauth-cli-helper.d.ts

@@ -0,0 +1,32 @@
+/**
+ * OAuth CLI Helper
+ * Gets user's OAuth token for CLI commands
+ * Updated to use JiraWorkspace model (supports multiple workspaces per user)
+ */
+export interface OAuthCliAuth {
+    accessToken: string;
+    email: string;
+    baseUrl: string;
+    cloudId: string;
+    userId: string;
+    workspaceId?: string;
+}
+/**
+ * Get OAuth token for CLI
+ * Uses JiraCredential for the first user (or specified userId/jiraBaseUrl)
+ *
+ * @param userId - Optional user ID (String). If not provided, uses first user with a credential
+ * @param workspaceId - Optional credential ID (ignored - only one credential per user)
+ * @param jiraBaseUrl - Optional Jira base URL to filter credentials (e.g., 'https://proveoautomation-team.atlassian.net')
+ */
+export declare function getOAuthTokenForCli(userId?: string, workspaceId?: string, jiraBaseUrl?: string): Promise<OAuthCliAuth | null>;
+/**
+ * Check if user is logged in with OAuth
+ * Checks for session-based credentials first, then falls back to any credentials
+ */
+export declare function isOAuthConfigured(): Promise<boolean>;
+/**
+ * Get login instructions
+ */
+export declare function getLoginInstructions(): string;
+//# sourceMappingURL=oauth-cli-helper.d.ts.map

package/public/cli/utils/oauth-cli-helper.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-cli-helper.d.ts","sourceRoot":"","sources":["../../../src/cli/utils/oauth-cli-helper.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAqCH,MAAM,WAAW,YAAY;IAC3B,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;;;;;;GAOG;AACH,wBAAsB,mBAAmB,CACvC,MAAM,CAAC,EAAE,MAAM,EACf,WAAW,CAAC,EAAE,MAAM,EACpB,WAAW,CAAC,EAAE,MAAM,GACnB,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAoK9B;AAED;;;GAGG;AACH,wBAAsB,iBAAiB,IAAI,OAAO,CAAC,OAAO,CAAC,CAI1D;AAED;;GAEG;AACH,wBAAgB,oBAAoB,IAAI,MAAM,CA2B7C"}

package/public/cli/utils/oauth-cli-helper.js

@@ -0,0 +1,226 @@
+/**
+ * OAuth CLI Helper
+ * Gets user's OAuth token for CLI commands
+ * Updated to use JiraWorkspace model (supports multiple workspaces per user)
+ */
+// Use centralized Prisma client with validation
+// In CLI context, we need to use relative path or ensure path aliases work
+let prismaClient = null;
+async function getPrisma() {
+    if (prismaClient) {
+        return prismaClient;
+    }
+    try {
+        // Import Prisma - use path aliases since this file is imported by Next.js API routes (bundled context)
+        const prismaModule = await import("@/lib/prisma");
+        prismaClient = prismaModule.prisma;
+        // Validate DATABASE_URL is set
+        if (!process.env.DATABASE_URL) {
+            console.warn("⚠️  DATABASE_URL not set - OAuth credentials cannot be loaded from database");
+            return null;
+        }
+        return prismaClient;
+    }
+    catch (error) {
+        // Log error for debugging
+        if (process.env.DEBUG || process.env.VERBOSE) {
+            console.error("❌ Failed to load Prisma client:", error.message);
+            console.error("   This is expected if DATABASE_URL is not set or database is not accessible");
+        }
+        return null;
+    }
+}
+/**
+ * Get OAuth token for CLI
+ * Uses JiraCredential for the first user (or specified userId/jiraBaseUrl)
+ *
+ * @param userId - Optional user ID (String). If not provided, uses first user with a credential
+ * @param workspaceId - Optional credential ID (ignored - only one credential per user)
+ * @param jiraBaseUrl - Optional Jira base URL to filter credentials (e.g., 'https://proveoautomation-team.atlassian.net')
+ */
+export async function getOAuthTokenForCli(userId, workspaceId, jiraBaseUrl) {
+    const prisma = await getPrisma();
+    if (!prisma) {
+        // Prisma not available (DATABASE_URL not set or connection failed)
+        // This is expected in some CLI contexts - fall back to API key
+        return null;
+    }
+    try {
+        // Note: Schema only has JiraCredential (one per user), not multiple workspaces
+        let credential;
+        // 1. Try to get userId from session if not provided
+        if (!userId && !jiraBaseUrl) {
+            try {
+                const { getCliSession } = await import("./session-reader");
+                const session = await getCliSession();
+                if (session?.userId) {
+                    userId = session.userId;
+                    if (process.env.DEBUG || process.env.VERBOSE) {
+                        console.log(`[CLI] 🔐 Using session user: ${session.email}`);
+                    }
+                }
+            }
+            catch (error) {
+                // Session reading failed, continue with other methods
+                if (process.env.DEBUG || process.env.VERBOSE) {
+                    console.log("[CLI] Session not found, trying other methods...");
+                }
+            }
+        }
+        // 2. Look up by userId (from session or parameter)
+        if (userId) {
+            // Get credential for specified user
+            credential = await prisma.jiraCredential.findUnique({
+                where: { userId },
+            });
+        }
+        else if (jiraBaseUrl) {
+            // Find credential by jiraBaseUrl (supports multiple users)
+            // Normalize URL: remove protocol and trailing slash
+            const normalizedUrl = jiraBaseUrl
+                .replace(/^https?:\/\//, "")
+                .replace(/\/$/, "");
+            credential = await prisma.jiraCredential.findFirst({
+                where: {
+                    jiraBaseUrl: {
+                        contains: normalizedUrl,
+                    },
+                },
+                include: {
+                    user: true,
+                },
+            });
+            if (credential && credential.user) {
+                userId = credential.user.id;
+            }
+        }
+        else {
+            // Fallback: get first user's credential
+            // Try direct query on JiraCredential table instead of relation
+            credential = await prisma.jiraCredential.findFirst({
+                include: {
+                    user: true,
+                },
+            });
+            if (credential && credential.user) {
+                userId = credential.user.id;
+            }
+            else {
+                // No credentials found in database
+                if (process.env.DEBUG || process.env.VERBOSE) {
+                    console.log("ℹ️  No Jira OAuth credentials found in database");
+                    console.log("   To set up OAuth:");
+                    console.log("   1. Start dev server: npm run dev");
+                    console.log("   2. Visit: http://localhost:4000/admin/settings/integrations/jira");
+                    console.log("   3. Connect your Jira workspace");
+                }
+                return null;
+            }
+        }
+        if (!credential || !userId) {
+            return null;
+        }
+        // Check if token is expired
+        if (new Date(credential.expiresAt) < new Date()) {
+            // TODO: Implement token refresh for JiraWorkspace
+            // For now, return null to trigger re-authentication
+            console.warn("⚠️  Jira workspace token expired. Please reconnect in the web UI.");
+            return null;
+        }
+        // Get user email
+        const user = await prisma.user.findUnique({
+            where: { id: userId },
+            select: { email: true },
+        });
+        // Decrypt tokens if they are encrypted (they should be stored encrypted in the database)
+        // Import decrypt function for token decryption
+        // Use path aliases since this file is imported by Next.js API routes (bundled context)
+        const { decrypt } = await import("@/lib/encryption");
+        /**
+         * Check if a string is encrypted (has the format: iv:salt:tag:encryptedData)
+         */
+        function isEncrypted(value) {
+            return value.split(":").length === 4;
+        }
+        /**
+         * Decrypt token if it's encrypted, otherwise return as-is (for backward compatibility)
+         */
+        function decryptTokenIfNeeded(encryptedToken) {
+            try {
+                if (isEncrypted(encryptedToken)) {
+                    return decrypt(encryptedToken);
+                }
+                // Not encrypted (legacy data or plain text) - return as-is
+                return encryptedToken;
+            }
+            catch (error) {
+                // If decryption fails, assume it's plain text (backward compatibility)
+                if (process.env.DEBUG || process.env.VERBOSE) {
+                    console.warn("⚠️  Token decryption failed, assuming plain text:", error);
+                }
+                return encryptedToken;
+            }
+        }
+        const decryptedAccessToken = decryptTokenIfNeeded(credential.accessToken);
+        return {
+            accessToken: decryptedAccessToken,
+            email: user?.email || process.env.ATLASSIAN_EMAIL || "",
+            baseUrl: credential.jiraBaseUrl || `https://${credential.cloudId}.atlassian.net`,
+            cloudId: credential.cloudId,
+            userId, // User.id is String in schema
+            workspaceId: credential.id,
+        };
+    }
+    catch (error) {
+        // Log error for debugging if verbose mode
+        if (process.env.DEBUG || process.env.VERBOSE) {
+            console.error("❌ Error loading OAuth token from database:", error.message);
+            console.error("   Error details:", error);
+        }
+        // Silently fail if OAuth/Prisma not configured
+        // This allows CLI to fall back to API key mode
+        return null;
+    }
+    // Note: Don't disconnect Prisma here - it's a singleton that should stay connected
+}
+/**
+ * Check if user is logged in with OAuth
+ * Checks for session-based credentials first, then falls back to any credentials
+ */
+export async function isOAuthConfigured() {
+    // Try session-based detection first
+    const token = await getOAuthTokenForCli();
+    return token !== null;
+}
+/**
+ * Get login instructions
+ */
+export function getLoginInstructions() {
+    return `
+❌ Not authenticated with Jira OAuth
+
+To use the CLI, you need to connect a Jira workspace first:
+
+1. Start the dev server:
+   npm run dev
+
+2. Open in browser:
+   http://localhost:4000/admin/settings/integrations/jira
+
+3. Sign in with Atlassian (if not already signed in)
+
+4. Click "Connect Jira Workspace" button
+
+5. Select your Jira Cloud site and authorize
+
+6. Set it as default workspace (if you have multiple)
+
+7. Come back and run your command again
+
+This stores your OAuth token securely in the database.
+The CLI will use YOUR Jira workspace (not a shared API key).
+
+Note: You can have multiple Jira workspaces connected. The CLI uses your default workspace.
+`;
+}
+//# sourceMappingURL=oauth-cli-helper.js.map

package/public/cli/utils/oauth-cli-helper.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-cli-helper.js","sourceRoot":"","sources":["../../../src/cli/utils/oauth-cli-helper.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,gDAAgD;AAChD,2EAA2E;AAC3E,IAAI,YAAY,GAAQ,IAAI,CAAC;AAE7B,KAAK,UAAU,SAAS;IACtB,IAAI,YAAY,EAAE,CAAC;QACjB,OAAO,YAAY,CAAC;IACtB,CAAC;IAED,IAAI,CAAC;QACH,uGAAuG;QACvG,MAAM,YAAY,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,CAAC;QAClD,YAAY,GAAG,YAAY,CAAC,MAAM,CAAC;QAEnC,+BAA+B;QAC/B,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC;YAC9B,OAAO,CAAC,IAAI,CACV,6EAA6E,CAC9E,CAAC;YACF,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,YAAY,CAAC;IACtB,CAAC;IAAC,OAAO,KAAU,EAAE,CAAC;QACpB,0BAA0B;QAC1B,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;YAC7C,OAAO,CAAC,KAAK,CAAC,iCAAiC,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;YAChE,OAAO,CAAC,KAAK,CACX,8EAA8E,CAC/E,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAWD;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,MAAe,EACf,WAAoB,EACpB,WAAoB;IAEpB,MAAM,MAAM,GAAG,MAAM,SAAS,EAAE,CAAC;IAEjC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,mEAAmE;QACnE,+DAA+D;QAC/D,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,CAAC;QACH,+EAA+E;QAC/E,IAAI,UAAU,CAAC;QAEf,oDAAoD;QACpD,IAAI,CAAC,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;YAC5B,IAAI,CAAC;gBACH,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;gBAC3D,MAAM,OAAO,GAAG,MAAM,aAAa,EAAE,CAAC;gBACtC,IAAI,OAAO,EAAE,MAAM,EAAE,CAAC;oBACpB,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;oBACxB,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;wBAC7C,OAAO,CAAC,GAAG,CAAC,gCAAgC,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;oBAC/D,CAAC;gBACH,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,sDAAsD;gBACtD,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;oBAC7C,OAAO,CAAC,GAAG,CAAC,kDAAkD,CAAC,CAAC;gBAClE,CAAC;YACH,CAAC;QACH,CAAC;QAED,mDAAmD;QACnD,IAAI,MAAM,EAAE,CAAC;YACX,oCAAoC;YACpC,UAAU,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,UAAU,CAAC;gBAClD,KAAK,EAAE,EAAE,MAAM,EAAE;aAClB,CAAC,CAAC;QACL,CAAC;aAAM,IAAI,WAAW,EAAE,CAAC;YACvB,2DAA2D;YAC3D,oDAAoD;YACpD,MAAM,aAAa,GAAG,WAAW;iBAC9B,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC;iBAC3B,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YAEtB,UAAU,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,SAAS,CAAC;gBACjD,KAAK,EAAE;oBACL,WAAW,EAAE;wBACX,QAAQ,EAAE,aAAa;qBACxB;iBACF;gBACD,OAAO,EAAE;oBACP,IAAI,EAAE,IAAI;iBACX;aACF,CAAC,CAAC;YAEH,IAAI,UAAU,IAAI,UAAU,CAAC,IAAI,EAAE,CAAC;gBAClC,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9B,CAAC;QACH,CAAC;aAAM,CAAC;YACN,wCAAwC;YACxC,+DAA+D;YAC/D,UAAU,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,SAAS,CAAC;gBACjD,OAAO,EAAE;oBACP,IAAI,EAAE,IAAI;iBACX;aACF,CAAC,CAAC;YAEH,IAAI,UAAU,IAAI,UAAU,CAAC,IAAI,EAAE,CAAC;gBAClC,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9B,CAAC;iBAAM,CAAC;gBACN,mCAAmC;gBACnC,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;oBAC7C,OAAO,CAAC,GAAG,CAAC,iDAAiD,CAAC,CAAC;oBAC/D,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;oBACnC,OAAO,CAAC,GAAG,CAAC,qCAAqC,CAAC,CAAC;oBACnD,OAAO,CAAC,GAAG,CACT,qEAAqE,CACtE,CAAC;oBACF,OAAO,CAAC,GAAG,CAAC,mCAAmC,CAAC,CAAC;gBACnD,CAAC;gBACD,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QAED,IAAI,CAAC,UAAU,IAAI,CAAC,MAAM,EAAE,CAAC;YAC3B,OAAO,IAAI,CAAC;QACd,CAAC;QAED,4BAA4B;QAC5B,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,GAAG,IAAI,IAAI,EAAE,EAAE,CAAC;YAChD,kDAAkD;YAClD,oDAAoD;YACpD,OAAO,CAAC,IAAI,CACV,mEAAmE,CACpE,CAAC;YACF,OAAO,IAAI,CAAC;QACd,CAAC;QAED,iBAAiB;QACjB,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC;YACxC,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE;YACrB,MAAM,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE;SACxB,CAAC,CAAC;QAEH,yFAAyF;QACzF,+CAA+C;QAC/C,uFAAuF;QACvF,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;QAErD;;WAEG;QACH,SAAS,WAAW,CAAC,KAAa;YAChC,OAAO,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC;QACvC,CAAC;QAED;;WAEG;QACH,SAAS,oBAAoB,CAAC,cAAsB;YAClD,IAAI,CAAC;gBACH,IAAI,WAAW,CAAC,cAAc,CAAC,EAAE,CAAC;oBAChC,OAAO,OAAO,CAAC,cAAc,CAAC,CAAC;gBACjC,CAAC;gBACD,2DAA2D;gBAC3D,OAAO,cAAc,CAAC;YACxB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,uEAAuE;gBACvE,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;oBAC7C,OAAO,CAAC,IAAI,CACV,mDAAmD,EACnD,KAAK,CACN,CAAC;gBACJ,CAAC;gBACD,OAAO,cAAc,CAAC;YACxB,CAAC;QACH,CAAC;QAED,MAAM,oBAAoB,GAAG,oBAAoB,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;QAE1E,OAAO;YACL,WAAW,EAAE,oBAAoB;YACjC,KAAK,EAAE,IAAI,EAAE,KAAK,IAAI,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,EAAE;YACvD,OAAO,EACL,UAAU,CAAC,WAAW,IAAI,WAAW,UAAU,CAAC,OAAO,gBAAgB;YACzE,OAAO,EAAE,UAAU,CAAC,OAAO;YAC3B,MAAM,EAAE,8BAA8B;YACtC,WAAW,EAAE,UAAU,CAAC,EAAE;SAC3B,CAAC;IACJ,CAAC;IAAC,OAAO,KAAU,EAAE,CAAC;QACpB,0CAA0C;QAC1C,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;YAC7C,OAAO,CAAC,KAAK,CACX,4CAA4C,EAC5C,KAAK,CAAC,OAAO,CACd,CAAC;YACF,OAAO,CAAC,KAAK,CAAC,mBAAmB,EAAE,KAAK,CAAC,CAAC;QAC5C,CAAC;QACD,+CAA+C;QAC/C,+CAA+C;QAC/C,OAAO,IAAI,CAAC;IACd,CAAC;IACD,mFAAmF;AACrF,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB;IACrC,oCAAoC;IACpC,MAAM,KAAK,GAAG,MAAM,mBAAmB,EAAE,CAAC;IAC1C,OAAO,KAAK,KAAK,IAAI,CAAC;AACxB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,oBAAoB;IAClC,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;CAyBR,CAAC;AACF,CAAC"}

package/public/cli/utils/session-reader.d.ts

@@ -0,0 +1,14 @@
+/**
+ * CLI Session Reader
+ * Reads NextAuth session to identify the logged-in user for CLI commands
+ */
+export interface CliSession {
+    userId: string;
+    email: string;
+}
+/**
+ * Get the current logged-in user from NextAuth session
+ * This works by checking the database for the most recent session
+ */
+export declare function getCliSession(): Promise<CliSession | null>;
+//# sourceMappingURL=session-reader.d.ts.map

package/public/cli/utils/session-reader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-reader.d.ts","sourceRoot":"","sources":["../../../src/cli/utils/session-reader.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;CACf;AAED;;;GAGG;AACH,wBAAsB,aAAa,IAAI,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAsChE"}

package/public/cli/utils/session-reader.js

@@ -0,0 +1,48 @@
+/**
+ * CLI Session Reader
+ * Reads NextAuth session to identify the logged-in user for CLI commands
+ */
+import { prisma } from "@/lib/prisma";
+/**
+ * Get the current logged-in user from NextAuth session
+ * This works by checking the database for the most recent session
+ */
+export async function getCliSession() {
+    try {
+        // Find the most recent active session
+        // NextAuth stores sessions in the Session table
+        const session = await prisma.session.findFirst({
+            where: {
+                expires: {
+                    gt: new Date(), // Not expired
+                },
+            },
+            orderBy: {
+                expires: "desc", // Most recent
+            },
+            include: {
+                user: {
+                    select: {
+                        id: true,
+                        email: true,
+                    },
+                },
+            },
+        });
+        if (!session?.user?.id || !session?.user?.email) {
+            return null;
+        }
+        return {
+            userId: session.user.id,
+            email: session.user.email,
+        };
+    }
+    catch (error) {
+        // Silently fail - this is expected if database is not accessible
+        if (process.env.DEBUG || process.env.VERBOSE) {
+            console.error("[CLI] Failed to read session:", error);
+        }
+        return null;
+    }
+}
+//# sourceMappingURL=session-reader.js.map

package/public/cli/utils/session-reader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-reader.js","sourceRoot":"","sources":["../../../src/cli/utils/session-reader.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAOtC;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa;IACjC,IAAI,CAAC;QACH,sCAAsC;QACtC,gDAAgD;QAChD,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC;YAC7C,KAAK,EAAE;gBACL,OAAO,EAAE;oBACP,EAAE,EAAE,IAAI,IAAI,EAAE,EAAE,cAAc;iBAC/B;aACF;YACD,OAAO,EAAE;gBACP,OAAO,EAAE,MAAM,EAAE,cAAc;aAChC;YACD,OAAO,EAAE;gBACP,IAAI,EAAE;oBACJ,MAAM,EAAE;wBACN,EAAE,EAAE,IAAI;wBACR,KAAK,EAAE,IAAI;qBACZ;iBACF;aACF;SACF,CAAC,CAAC;QAEH,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;YAChD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO;YACL,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE;YACvB,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,KAAK;SAC1B,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,iEAAiE;QACjE,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;YAC7C,OAAO,CAAC,KAAK,CAAC,+BAA+B,EAAE,KAAK,CAAC,CAAC;QACxD,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/public/cli/utils/table.d.ts

@@ -0,0 +1,35 @@
+/**
+ * CLI Table Rendering Utility
+ *
+ * Provides consistent ASCII table formatting for CLI output.
+ * Supports column alignment, truncation, and optional styling.
+ */
+export interface TableColumn<T = any> {
+    key: string;
+    header: string;
+    width?: number;
+    align?: 'left' | 'right' | 'center';
+    truncate?: boolean;
+    render?: (item: T, index: number) => string;
+    minWidth?: number;
+    maxWidth?: number;
+}
+export interface TableOptions {
+    compact?: boolean;
+    border?: boolean;
+    header?: boolean;
+    separator?: string;
+    headerSeparator?: string;
+}
+/**
+ * Render a table from an array of data
+ */
+export declare function renderTable<T extends Record<string, any>>(data: T[], columns: TableColumn<T>[], options?: TableOptions): string;
+/**
+ * Simple table renderer for backward compatibility
+ * Creates a table with minimal configuration
+ */
+export declare function simpleTable(headers: string[], rows: string[][], options?: {
+    compact?: boolean;
+}): string;
+//# sourceMappingURL=table.d.ts.map