@ameshkin/ticket-mate 0.1.20

package/public/server/auth/account-provisioning.js

@@ -0,0 +1,109 @@
+import { prisma } from "@/lib/prisma";
+/**
+ * Ensures that a user has at least one active TenantAccount (via AccountUser).
+ * If not, creates a default "Personal Team" account and links the user as OWNER.
+ *
+ * @param userId - The internal Prisma User ID
+ * @param email - User's email (used for generating account name/slug)
+ * @param name - User's name (optional, used for account name)
+ * @returns The accountId of the primary account
+ */
+export async function ensureAccountForUser(userId, email, name) {
+    // 1. Check if user already has an active account
+    const existingLink = await prisma.accountUser.findFirst({
+        where: {
+            userId,
+            active: true,
+        },
+        select: {
+            accountId: true,
+        },
+        orderBy: {
+            createdAt: "asc", // Prefer oldest account (primary)
+        },
+    });
+    if (existingLink) {
+        return existingLink.accountId;
+    }
+    // 1.5. Ensure User Exists (Handle DB Reset / Stale Session)
+    // If the user record is missing (e.g. DB reset), recreate it to avoid FK errors
+    // This is critical for dev environments where DB is often reset but cookies persist
+    const userExists = await prisma.user.findUnique({ where: { id: userId } });
+    if (!userExists) {
+        console.warn(`[account-provisioning] ⚠️ User ${userId} missing from DB (stale session?). Recreating...`);
+        try {
+            await prisma.user.create({
+                data: {
+                    id: userId,
+                    email: email || `user-${userId}@example.com`,
+                    name: name || "Recovered User",
+                    subscription: "free",
+                },
+            });
+            console.log(`[account-provisioning] ✅ Recreated user ${userId}`);
+        }
+        catch (err) {
+            console.error(`[account-provisioning] ❌ Failed to recreate user:`, err);
+            throw new Error(`User ${userId} does not exist and could not be recreated.`);
+        }
+    }
+    // 2. No account found - Provision a new one
+    console.log(`[account-provisioning] 👤 User ${userId} has no account. Provisioning default...`);
+    const safeEmail = email || "user";
+    const safeName = name || safeEmail.split("@")[0];
+    const accountName = `${safeName}'s Team`;
+    const slugBase = safeName.toLowerCase().replace(/[^a-z0-9]/g, "-");
+    const uniqueSlug = `${slugBase}-${Math.random()
+        .toString(36)
+        .substring(2, 7)}`;
+    try {
+        // Transaction to ensure atomicity
+        const newAccount = await prisma.$transaction(async (tx) => {
+            // Create TenantAccount
+            const account = await tx.tenantAccount.create({
+                data: {
+                    name: accountName,
+                    slug: uniqueSlug,
+                    plan: "free", // Default to free
+                    maxSeats: 1,
+                },
+            });
+            // Link User as OWNER
+            await tx.accountUser.create({
+                data: {
+                    userId,
+                    accountId: account.id,
+                    role: "OWNER",
+                    active: true,
+                },
+            });
+            return account;
+        });
+        console.log(`[account-provisioning] ✅ Created default account "${newAccount.name}" (${newAccount.id})`);
+        return newAccount.id;
+    }
+    catch (error) {
+        console.error("[account-provisioning] ❌ Failed to provision account:", error);
+        throw new Error("Failed to provision default account");
+    }
+}
+/**
+ * Gets the primary account ID for a user.
+ * Useful for session callbacks to populate session.user.accountId.
+ */
+export async function getPrimaryAccountId(userId) {
+    const link = await prisma.accountUser.findFirst({
+        where: {
+            userId,
+            active: true,
+        },
+        select: {
+            accountId: true,
+        },
+        orderBy: {
+            createdAt: "asc",
+        },
+    });
+    return link ? link.accountId : null;
+}
+//# sourceMappingURL=account-provisioning.js.map

package/public/server/auth/account-provisioning.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-provisioning.js","sourceRoot":"","sources":["../../../src/server/auth/account-provisioning.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAEtC;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,MAAc,EACd,KAAoB,EACpB,IAAmB;IAEnB,iDAAiD;IACjD,MAAM,YAAY,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC;QACtD,KAAK,EAAE;YACL,MAAM;YACN,MAAM,EAAE,IAAI;SACb;QACD,MAAM,EAAE;YACN,SAAS,EAAE,IAAI;SAChB;QACD,OAAO,EAAE;YACP,SAAS,EAAE,KAAK,EAAE,kCAAkC;SACrD;KACF,CAAC,CAAC;IAEH,IAAI,YAAY,EAAE,CAAC;QACjB,OAAO,YAAY,CAAC,SAAS,CAAC;IAChC,CAAC;IAED,4DAA4D;IAC5D,gFAAgF;IAChF,oFAAoF;IACpF,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;IAC3E,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO,CAAC,IAAI,CAAC,kCAAkC,MAAM,kDAAkD,CAAC,CAAC;QAEzG,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;gBACvB,IAAI,EAAE;oBACJ,EAAE,EAAE,MAAM;oBACV,KAAK,EAAE,KAAK,IAAI,QAAQ,MAAM,cAAc;oBAC5C,IAAI,EAAE,IAAI,IAAI,gBAAgB;oBAC9B,YAAY,EAAE,MAAM;iBACrB;aACF,CAAC,CAAC;YACH,OAAO,CAAC,GAAG,CAAC,2CAA2C,MAAM,EAAE,CAAC,CAAC;QACnE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,mDAAmD,EAAE,GAAG,CAAC,CAAC;YACxE,MAAM,IAAI,KAAK,CAAC,QAAQ,MAAM,6CAA6C,CAAC,CAAC;QAC/E,CAAC;IACH,CAAC;IAED,4CAA4C;IAC5C,OAAO,CAAC,GAAG,CACT,kCAAkC,MAAM,0CAA0C,CACnF,CAAC;IAEF,MAAM,SAAS,GAAG,KAAK,IAAI,MAAM,CAAC;IAClC,MAAM,QAAQ,GAAG,IAAI,IAAI,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACjD,MAAM,WAAW,GAAG,GAAG,QAAQ,SAAS,CAAC;IACzC,MAAM,QAAQ,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC;IACnE,MAAM,UAAU,GAAG,GAAG,QAAQ,IAAI,IAAI,CAAC,MAAM,EAAE;SAC5C,QAAQ,CAAC,EAAE,CAAC;SACZ,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;IAErB,IAAI,CAAC;QACH,kCAAkC;QAClC,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;YACxD,uBAAuB;YACvB,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,aAAa,CAAC,MAAM,CAAC;gBAC5C,IAAI,EAAE;oBACJ,IAAI,EAAE,WAAW;oBACjB,IAAI,EAAE,UAAU;oBAChB,IAAI,EAAE,MAAM,EAAE,kBAAkB;oBAChC,QAAQ,EAAE,CAAC;iBACZ;aACF,CAAC,CAAC;YAEH,qBAAqB;YACrB,MAAM,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC;gBAC1B,IAAI,EAAE;oBACJ,MAAM;oBACN,SAAS,EAAE,OAAO,CAAC,EAAE;oBACrB,IAAI,EAAE,OAAO;oBACb,MAAM,EAAE,IAAI;iBACb;aACF,CAAC,CAAC;YAEH,OAAO,OAAO,CAAC;QACjB,CAAC,CAAC,CAAC;QAEH,OAAO,CAAC,GAAG,CACT,qDAAqD,UAAU,CAAC,IAAI,MAAM,UAAU,CAAC,EAAE,GAAG,CAC3F,CAAC;QACF,OAAO,UAAU,CAAC,EAAE,CAAC;IACvB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CACX,uDAAuD,EACvD,KAAK,CACN,CAAC;QACF,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACzD,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,MAAc;IAEd,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC;QAC9C,KAAK,EAAE;YACL,MAAM;YACN,MAAM,EAAE,IAAI;SACb;QACD,MAAM,EAAE;YACN,SAAS,EAAE,IAAI;SAChB;QACD,OAAO,EAAE;YACP,SAAS,EAAE,KAAK;SACjB;KACF,CAAC,CAAC;IAEH,OAAO,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;AACtC,CAAC"}

package/public/server/auth/atlassian-user-mapping.d.ts

@@ -0,0 +1,36 @@
+/**
+ * Atlassian User Mapping
+ *
+ * Maps Atlassian account IDs to internal user IDs
+ *
+ * Note: atlassianAccountId field doesn't exist in simplified User schema
+ * This service uses email-based matching instead
+ */
+export interface AtlassianProfile {
+    accountId: string;
+    email: string;
+    name?: string | null;
+    picture?: string | null;
+    avatarUrl?: string | null;
+}
+/**
+ * Upsert user from Atlassian profile
+ * Note: atlassianAccountId field doesn't exist - uses email matching instead
+ */
+export declare function upsertUserFromAtlassianProfile(profile: AtlassianProfile): Promise<string>;
+/**
+ * Get or create user ID for an Atlassian account ID
+ * Note: atlassianAccountId field doesn't exist - return null or create new user
+ */
+export declare function getOrCreateUserIdForAtlassianAccount(accountId: string, email?: string): Promise<string | null>;
+/**
+ * Update user's Atlassian account ID
+ * Note: atlassianAccountId field doesn't exist - no-op
+ */
+export declare function updateUserAtlassianAccountId(userId: string, accountId: string): Promise<string>;
+/**
+ * Check if user has Atlassian account linked
+ * Note: atlassianAccountId field doesn't exist - return false
+ */
+export declare function hasAtlassianAccount(userId: string): Promise<boolean>;
+//# sourceMappingURL=atlassian-user-mapping.d.ts.map

package/public/server/auth/atlassian-user-mapping.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"atlassian-user-mapping.d.ts","sourceRoot":"","sources":["../../../src/server/auth/atlassian-user-mapping.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED;;;GAGG;AACH,wBAAsB,8BAA8B,CAClD,OAAO,EAAE,gBAAgB,GACxB,OAAO,CAAC,MAAM,CAAC,CAsCjB;AAED;;;GAGG;AACH,wBAAsB,oCAAoC,CACxD,SAAS,EAAE,MAAM,EACjB,KAAK,CAAC,EAAE,MAAM,GACb,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CA2BxB;AAED;;;GAGG;AACH,wBAAsB,4BAA4B,CAChD,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,MAAM,CAAC,CAIjB;AAED;;;GAGG;AACH,wBAAsB,mBAAmB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAQ1E"}

package/public/server/auth/atlassian-user-mapping.js

@@ -0,0 +1,97 @@
+/**
+ * Atlassian User Mapping
+ *
+ * Maps Atlassian account IDs to internal user IDs
+ *
+ * Note: atlassianAccountId field doesn't exist in simplified User schema
+ * This service uses email-based matching instead
+ */
+import { prisma } from '@/lib/prisma';
+/**
+ * Upsert user from Atlassian profile
+ * Note: atlassianAccountId field doesn't exist - uses email matching instead
+ */
+export async function upsertUserFromAtlassianProfile(profile) {
+    const { accountId, email, name } = profile;
+    if (!email) {
+        throw new Error('Atlassian profile must have email');
+    }
+    // Try to find existing user by email
+    let user = await prisma.user.findUnique({
+        where: { email },
+    });
+    if (user) {
+        // Update existing user with latest profile data
+        // Note: atlassianAccountId field doesn't exist - just update name if provided
+        if (name && name !== user.name) {
+            user = await prisma.user.update({
+                where: { id: user.id },
+                data: {
+                    name: name || user.name,
+                },
+            });
+        }
+        return user.id; // User.id is String in schema
+    }
+    // Create new user with Atlassian profile
+    const { randomUUID } = await import('crypto');
+    const newUser = await prisma.user.create({
+        data: {
+            id: randomUUID(),
+            email,
+            name: name || null,
+            subscription: 'free',
+        },
+    });
+    return newUser.id; // User.id is String in schema
+}
+/**
+ * Get or create user ID for an Atlassian account ID
+ * Note: atlassianAccountId field doesn't exist - return null or create new user
+ */
+export async function getOrCreateUserIdForAtlassianAccount(accountId, email) {
+    // Note: atlassianAccountId field doesn't exist in simplified User schema
+    // Try to find user by email instead
+    if (email) {
+        const user = await prisma.user.findUnique({
+            where: { email },
+        });
+        if (user) {
+            return user.id; // User.id is String in schema
+        }
+        // Create new user if email provided
+        const { randomUUID } = await import('crypto');
+        const newUser = await prisma.user.create({
+            data: {
+                id: randomUUID(),
+                email,
+                subscription: 'free',
+            },
+        });
+        return newUser.id;
+    }
+    // No email provided and no atlassianAccountId field - return null
+    return null;
+}
+/**
+ * Update user's Atlassian account ID
+ * Note: atlassianAccountId field doesn't exist - no-op
+ */
+export async function updateUserAtlassianAccountId(userId, accountId) {
+    // Note: atlassianAccountId field doesn't exist in simplified User schema
+    // No-op - just return userId
+    return userId;
+}
+/**
+ * Check if user has Atlassian account linked
+ * Note: atlassianAccountId field doesn't exist - return false
+ */
+export async function hasAtlassianAccount(userId) {
+    // Note: atlassianAccountId field doesn't exist in simplified User schema
+    // Check JiraCredential instead
+    const credential = await prisma.jiraCredential.findUnique({
+        where: { userId },
+    });
+    return !!credential;
+}
+//# sourceMappingURL=atlassian-user-mapping.js.map

package/public/server/auth/atlassian-user-mapping.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"atlassian-user-mapping.js","sourceRoot":"","sources":["../../../src/server/auth/atlassian-user-mapping.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAUtC;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAClD,OAAyB;IAEzB,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC;IAE3C,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACvD,CAAC;IAED,qCAAqC;IACrC,IAAI,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC;QACtC,KAAK,EAAE,EAAE,KAAK,EAAE;KACjB,CAAC,CAAC;IAEH,IAAI,IAAI,EAAE,CAAC;QACT,gDAAgD;QAChD,8EAA8E;QAC9E,IAAI,IAAI,IAAI,IAAI,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC;YAC/B,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;gBAC9B,KAAK,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE;gBACtB,IAAI,EAAE;oBACJ,IAAI,EAAE,IAAI,IAAI,IAAI,CAAC,IAAI;iBACxB;aACF,CAAC,CAAC;QACL,CAAC;QACD,OAAO,IAAI,CAAC,EAAE,CAAC,CAAC,8BAA8B;IAChD,CAAC;IAED,yCAAyC;IACzC,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC9C,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;QACvC,IAAI,EAAE;YACJ,EAAE,EAAE,UAAU,EAAE;YAChB,KAAK;YACL,IAAI,EAAE,IAAI,IAAI,IAAI;YAClB,YAAY,EAAE,MAAM;SACrB;KACF,CAAC,CAAC;IAEH,OAAO,OAAO,CAAC,EAAE,CAAC,CAAC,8BAA8B;AACnD,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,oCAAoC,CACxD,SAAiB,EACjB,KAAc;IAEd,yEAAyE;IACzE,oCAAoC;IACpC,IAAI,KAAK,EAAE,CAAC;QACV,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC;YACxC,KAAK,EAAE,EAAE,KAAK,EAAE;SACjB,CAAC,CAAC;QAEH,IAAI,IAAI,EAAE,CAAC;YACT,OAAO,IAAI,CAAC,EAAE,CAAC,CAAC,8BAA8B;QAChD,CAAC;QAED,oCAAoC;QACpC,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC9C,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;YACvC,IAAI,EAAE;gBACJ,EAAE,EAAE,UAAU,EAAE;gBAChB,KAAK;gBACL,YAAY,EAAE,MAAM;aACrB;SACF,CAAC,CAAC;QAEH,OAAO,OAAO,CAAC,EAAE,CAAC;IACpB,CAAC;IAED,kEAAkE;IAClE,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,MAAc,EACd,SAAiB;IAEjB,yEAAyE;IACzE,6BAA6B;IAC7B,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,MAAc;IACtD,yEAAyE;IACzE,+BAA+B;IAC/B,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,UAAU,CAAC;QACxD,KAAK,EAAE,EAAE,MAAM,EAAE;KAClB,CAAC,CAAC;IAEH,OAAO,CAAC,CAAC,UAAU,CAAC;AACtB,CAAC"}

package/public/server/auth.d.ts

@@ -0,0 +1,14 @@
+import { authOptions } from "@/lib/auth/options";
+export { authOptions };
+export declare function getCurrentUser(): Promise<{
+    id: string;
+    email: string;
+    subscription: string;
+} | null>;
+/**
+ * Get userId from session as a string
+ * Returns null if no session or userId
+ * Note: User.id is String in schema, so this returns string
+ */
+export declare function getUserId(): Promise<string | null>;
+//# sourceMappingURL=auth.d.ts.map

package/public/server/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/server/auth.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,WAAW,EAAE,CAAC;AAGvB,wBAAsB,cAAc;;;;UAiBnC;AAED;;;;GAIG;AACH,wBAAsB,SAAS,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CASxD"}

package/public/server/auth.js

@@ -0,0 +1,35 @@
+import { getServerSession } from "next-auth";
+import { authOptions } from "@/lib/auth/options";
+export { authOptions };
+import { prisma } from "@/lib/prisma";
+export async function getCurrentUser() {
+    const session = await getServerSession(authOptions);
+    if (!session || !session.userId) {
+        return null;
+    }
+    const userId = session.userId;
+    const user = await prisma.user.findUnique({
+        where: { id: userId },
+        select: {
+            id: true,
+            email: true,
+            subscription: true, // Note: role and status fields don't exist in simplified schema
+        },
+    });
+    return user;
+}
+/**
+ * Get userId from session as a string
+ * Returns null if no session or userId
+ * Note: User.id is String in schema, so this returns string
+ */
+export async function getUserId() {
+    const session = await getServerSession(authOptions);
+    if (!session || !session.userId) {
+        return null;
+    }
+    const userId = session.userId;
+    // User.id is String in schema, so keep as string
+    return typeof userId === "string" ? userId : String(userId);
+}
+//# sourceMappingURL=auth.js.map

package/public/server/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../src/server/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,WAAW,EAAE,CAAC;AACvB,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAEtC,MAAM,CAAC,KAAK,UAAU,cAAc;IAClC,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,WAAW,CAAC,CAAC;IACpD,IAAI,CAAC,OAAO,IAAI,CAAE,OAAe,CAAC,MAAM,EAAE,CAAC;QACzC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,MAAM,GAAI,OAAe,CAAC,MAAM,CAAC;IACvC,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC;QACxC,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE;QACrB,MAAM,EAAE;YACN,EAAE,EAAE,IAAI;YACR,KAAK,EAAE,IAAI;YACX,YAAY,EAAE,IAAI,EAAE,gEAAgE;SACrF;KACF,CAAC,CAAC;IAEH,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS;IAC7B,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,WAAW,CAAC,CAAC;IACpD,IAAI,CAAC,OAAO,IAAI,CAAE,OAAe,CAAC,MAAM,EAAE,CAAC;QACzC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,MAAM,GAAI,OAAe,CAAC,MAAM,CAAC;IACvC,iDAAiD;IACjD,OAAO,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAC9D,CAAC"}

package/public/server/jira/client.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Per-User Jira Client Factory
+ *
+ * Creates ticket-mate clients using per-user OAuth tokens
+ */
+import type { JiraAuthContext } from '../../types';
+/**
+ * Get Jira client for a specific user
+ * Uses the user's OAuth tokens from the database
+ */
+export declare function getJiraClientForUser(userId: string | number): Promise<JiraAuthContext>;
+/**
+ * Get Jira auth context from legacy config (for background jobs)
+ * Uses global API token from environment variables
+ */
+export declare function getJiraClientFromConfig(): Promise<JiraAuthContext>;
+//# sourceMappingURL=client.d.ts.map

package/public/server/jira/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../../src/server/jira/client.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAGnD;;;GAGG;AACH,wBAAsB,oBAAoB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,CAoB5F;AAED;;;GAGG;AACH,wBAAsB,uBAAuB,IAAI,OAAO,CAAC,eAAe,CAAC,CAuBxE"}

package/public/server/jira/client.js

@@ -0,0 +1,55 @@
+/**
+ * Per-User Jira Client Factory
+ *
+ * Creates ticket-mate clients using per-user OAuth tokens
+ */
+import { refreshJiraTokenIfNeeded } from './tokens';
+/**
+ * Get Jira client for a specific user
+ * Uses the user's OAuth tokens from the database
+ */
+export async function getJiraClientForUser(userId) {
+    // User.id is String in schema, keep as string
+    const userIdString = typeof userId === 'string' ? userId : String(userId);
+    if (!userIdString) {
+        throw new Error('Invalid user ID format.');
+    }
+    // Refresh token if needed
+    const credential = await refreshJiraTokenIfNeeded(userIdString);
+    // Build OAuth auth context
+    const authContext = {
+        mode: 'oauth',
+        cloudId: credential.cloudId,
+        accessToken: credential.accessToken,
+        useCloudApi: true, // Always use cloud API for OAuth
+        // Optional fields can be added from user preferences or defaults
+    };
+    return authContext;
+}
+/**
+ * Get Jira auth context from legacy config (for background jobs)
+ * Uses global API token from environment variables
+ */
+export async function getJiraClientFromConfig() {
+    const { getJiraConfig } = await import('../../config/config');
+    const config = getJiraConfig();
+    // Convert JiraConfig to JiraAuthContext (token mode)
+    const authContext = {
+        mode: 'token',
+        host: config.baseUrl.replace(/^https?:\/\//, ''),
+        email: config.email,
+        apiToken: config.apiToken,
+        cloudId: config.cloudId,
+        useCloudApi: config.useCloudApi,
+        projectKey: config.projectKey,
+        epicKey: config.epicKey,
+        label: config.label,
+        webhookSecret: config.webhookSecret,
+        epicLinkFieldId: config.epicLinkFieldId,
+        acceptanceCriteriaFieldId: config.acceptanceCriteriaFieldId,
+        transitions: config.transitions,
+        ai: config.ai,
+    };
+    return authContext;
+}
+//# sourceMappingURL=client.js.map

package/public/server/jira/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../../../src/server/jira/client.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EAAE,wBAAwB,EAAE,MAAM,UAAU,CAAC;AAEpD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,MAAuB;IAChE,8CAA8C;IAC9C,MAAM,YAAY,GAAG,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC1E,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;IAC7C,CAAC;IAED,0BAA0B;IAC1B,MAAM,UAAU,GAAG,MAAM,wBAAwB,CAAC,YAAY,CAAC,CAAC;IAEhE,2BAA2B;IAC3B,MAAM,WAAW,GAAoB;QACnC,IAAI,EAAE,OAAO;QACb,OAAO,EAAE,UAAU,CAAC,OAAO;QAC3B,WAAW,EAAE,UAAU,CAAC,WAAW;QACnC,WAAW,EAAE,IAAI,EAAE,iCAAiC;QACpD,iEAAiE;KAClE,CAAC;IAEF,OAAO,WAAW,CAAC;AACrB,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB;IAC3C,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,MAAM,CAAC,qBAAqB,CAAC,CAAC;IAC9D,MAAM,MAAM,GAAG,aAAa,EAAE,CAAC;IAE/B,qDAAqD;IACrD,MAAM,WAAW,GAAoB;QACnC,IAAI,EAAE,OAAO;QACb,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC;QAChD,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,aAAa,EAAE,MAAM,CAAC,aAAa;QACnC,eAAe,EAAE,MAAM,CAAC,eAAe;QACvC,yBAAyB,EAAE,MAAM,CAAC,yBAAyB;QAC3D,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,EAAE,EAAE,MAAM,CAAC,EAAE;KACd,CAAC;IAEF,OAAO,WAAW,CAAC;AACrB,CAAC"}

package/public/server/jira/cloudInfo.d.ts

@@ -0,0 +1,30 @@
+/**
+ * Jira Cloud Info Discovery
+ *
+ * Discovers Jira base URL and Cloud ID from various sources:
+ * 1. Environment variables (ATLASSIAN_BASE_URL, ATLASSIAN_CLOUD_ID)
+ * 2. Database (jiraCredential.cloudId)
+ * 3. Auto-discovery via OAuth accessible-resources API
+ */
+export type JiraCloudInfo = {
+    baseUrl: string | null;
+    cloudId: string | null;
+    authMode: 'OAUTH' | 'PAT' | 'UNKNOWN';
+    source: {
+        baseUrl: 'env' | 'db' | 'auto' | 'unknown';
+        cloudId: 'env' | 'db' | 'auto' | 'unknown';
+    };
+};
+/**
+ * Discover Jira Cloud information for a user
+ *
+ * Priority:
+ * 1. Environment variables
+ * 2. Database (jiraCredential)
+ * 3. Auto-discovery via OAuth accessible-resources API
+ *
+ * @param userId - User ID to discover info for
+ * @returns JiraCloudInfo with sources
+ */
+export declare function discoverJiraCloudInfo(userId: string): Promise<JiraCloudInfo>;
+//# sourceMappingURL=cloudInfo.d.ts.map

package/public/server/jira/cloudInfo.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloudInfo.d.ts","sourceRoot":"","sources":["../../../src/server/jira/cloudInfo.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAMH,MAAM,MAAM,aAAa,GAAG;IAC1B,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,QAAQ,EAAE,OAAO,GAAG,KAAK,GAAG,SAAS,CAAC;IACtC,MAAM,EAAE;QACN,OAAO,EAAE,KAAK,GAAG,IAAI,GAAG,MAAM,GAAG,SAAS,CAAC;QAC3C,OAAO,EAAE,KAAK,GAAG,IAAI,GAAG,MAAM,GAAG,SAAS,CAAC;KAC5C,CAAC;CACH,CAAC;AAEF;;;;;;;;;;GAUG;AACH,wBAAsB,qBAAqB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,CAkJlF"}

package/public/server/jira/cloudInfo.js

@@ -0,0 +1,152 @@
+/**
+ * Jira Cloud Info Discovery
+ *
+ * Discovers Jira base URL and Cloud ID from various sources:
+ * 1. Environment variables (ATLASSIAN_BASE_URL, ATLASSIAN_CLOUD_ID)
+ * 2. Database (jiraCredential.cloudId)
+ * 3. Auto-discovery via OAuth accessible-resources API
+ */
+import { prisma } from '@/lib/prisma';
+import { getUserJiraCredential } from './tokens';
+import { logger } from '../../utils/logger';
+/**
+ * Discover Jira Cloud information for a user
+ *
+ * Priority:
+ * 1. Environment variables
+ * 2. Database (jiraCredential)
+ * 3. Auto-discovery via OAuth accessible-resources API
+ *
+ * @param userId - User ID to discover info for
+ * @returns JiraCloudInfo with sources
+ */
+export async function discoverJiraCloudInfo(userId) {
+    const baseFromEnv = process.env.ATLASSIAN_BASE_URL || null;
+    const cloudFromEnv = process.env.ATLASSIAN_CLOUD_ID || null;
+    let baseUrl = baseFromEnv;
+    let cloudId = cloudFromEnv;
+    let baseSource = baseFromEnv ? 'env' : 'unknown';
+    let cloudSource = cloudFromEnv ? 'env' : 'unknown';
+    let authMode = 'UNKNOWN';
+    // Try to load jiraCredential for this user
+    let cred;
+    try {
+        cred = await getUserJiraCredential(userId);
+    }
+    catch {
+        // No credential found, continue with PAT check
+    }
+    if (cred?.accessToken) {
+        authMode = 'OAUTH';
+        // If we have cloudId stored on credential, prefer it over env (unless env is set)
+        if (!cloudFromEnv && cred.cloudId) {
+            cloudId = cred.cloudId;
+            cloudSource = 'db';
+        }
+        // If we have jiraBaseUrl stored on credential, prefer it over env (unless env is set)
+        if (!baseFromEnv && cred.jiraBaseUrl) {
+            baseUrl = cred.jiraBaseUrl;
+            baseSource = 'db';
+        }
+        // If still no cloudId, call accessible-resources once and persist
+        if (!cloudId) {
+            try {
+                logger.debug('[CloudInfo] Attempting auto-discovery via accessible-resources API');
+                const res = await fetch('https://api.atlassian.com/oauth/token/accessible-resources', {
+                    method: 'GET',
+                    headers: {
+                        Authorization: `Bearer ${cred.accessToken}`,
+                        Accept: 'application/json',
+                    },
+                });
+                if (res.ok) {
+                    const resources = (await res.json());
+                    // Find Jira site (has read:jira-work scope or contains .atlassian.net)
+                    const jiraSite = resources.find((r) => r.scopes?.includes('read:jira-work') ||
+                        r.url?.includes('.atlassian.net') ||
+                        r.name?.toLowerCase().includes('jira'));
+                    if (jiraSite) {
+                        const discoveredCloudId = jiraSite.id || jiraSite.idOrKey || null;
+                        const discoveredBaseUrl = jiraSite.url || null;
+                        if (discoveredCloudId) {
+                            cloudId = discoveredCloudId;
+                            cloudSource = 'auto';
+                            // Persist cloudId on credential for next time
+                            try {
+                                await prisma.jiraCredential.update({
+                                    where: { userId },
+                                    data: { cloudId: discoveredCloudId },
+                                });
+                                logger.info('[CloudInfo] Auto-discovered and persisted cloudId', {
+                                    userId,
+                                    cloudId: discoveredCloudId,
+                                });
+                            }
+                            catch (updateError) {
+                                logger.warn('[CloudInfo] Failed to persist cloudId', {
+                                    userId,
+                                    error: updateError instanceof Error ? updateError.message : String(updateError),
+                                });
+                            }
+                        }
+                        if (discoveredBaseUrl && !baseFromEnv) {
+                            baseUrl = discoveredBaseUrl;
+                            baseSource = 'auto';
+                            // Persist jiraBaseUrl on credential for next time
+                            try {
+                                await prisma.jiraCredential.update({
+                                    where: { userId },
+                                    data: { jiraBaseUrl: discoveredBaseUrl },
+                                });
+                                logger.info('[CloudInfo] Auto-discovered and persisted jiraBaseUrl', {
+                                    userId,
+                                    jiraBaseUrl: discoveredBaseUrl,
+                                });
+                            }
+                            catch (updateError) {
+                                logger.warn('[CloudInfo] Failed to persist jiraBaseUrl', {
+                                    userId,
+                                    error: updateError instanceof Error ? updateError.message : String(updateError),
+                                });
+                            }
+                        }
+                    }
+                    else {
+                        logger.warn('[CloudInfo] No Jira site found in accessible-resources', {
+                            userId,
+                            resourcesCount: resources.length,
+                        });
+                    }
+                }
+                else {
+                    const errorText = await res.text();
+                    logger.warn('[CloudInfo] accessible-resources API failed', {
+                        userId,
+                        status: res.status,
+                        statusText: res.statusText,
+                        error: errorText.substring(0, 200),
+                    });
+                }
+            }
+            catch (e) {
+                logger.error('[CloudInfo] Failed to auto-discover cloud info', {
+                    userId,
+                    error: e instanceof Error ? e.message : String(e),
+                });
+            }
+        }
+    }
+    else if (process.env.ATLASSIAN_API_KEY && process.env.ATLASSIAN_EMAIL) {
+        authMode = 'PAT';
+    }
+    return {
+        baseUrl,
+        cloudId,
+        authMode,
+        source: {
+            baseUrl: baseSource,
+            cloudId: cloudSource,
+        },
+    };
+}
+//# sourceMappingURL=cloudInfo.js.map

package/public/server/jira/cloudInfo.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloudInfo.js","sourceRoot":"","sources":["../../../src/server/jira/cloudInfo.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AACtC,OAAO,EAAE,qBAAqB,EAAE,MAAM,UAAU,CAAC;AACjD,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAY5C;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,MAAc;IACxD,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,IAAI,CAAC;IAC3D,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,IAAI,CAAC;IAE5D,IAAI,OAAO,GAAkB,WAAW,CAAC;IACzC,IAAI,OAAO,GAAkB,YAAY,CAAC;IAC1C,IAAI,UAAU,GAAuC,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IACrF,IAAI,WAAW,GAAuC,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IAEvF,IAAI,QAAQ,GAA8B,SAAS,CAAC;IAEpD,2CAA2C;IAC3C,IAAI,IAAI,CAAC;IACT,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,qBAAqB,CAAC,MAAM,CAAC,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,+CAA+C;IACjD,CAAC;IAED,IAAI,IAAI,EAAE,WAAW,EAAE,CAAC;QACtB,QAAQ,GAAG,OAAO,CAAC;QAEnB,kFAAkF;QAClF,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAClC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;YACvB,WAAW,GAAG,IAAI,CAAC;QACrB,CAAC;QAED,sFAAsF;QACtF,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACrC,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC;YAC3B,UAAU,GAAG,IAAI,CAAC;QACpB,CAAC;QAED,kEAAkE;QAClE,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,IAAI,CAAC;gBACH,MAAM,CAAC,KAAK,CAAC,oEAAoE,CAAC,CAAC;gBAEnF,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,4DAA4D,EAAE;oBACpF,MAAM,EAAE,KAAK;oBACb,OAAO,EAAE;wBACP,aAAa,EAAE,UAAU,IAAI,CAAC,WAAW,EAAE;wBAC3C,MAAM,EAAE,kBAAkB;qBAC3B;iBACF,CAAC,CAAC;gBAEH,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC;oBACX,MAAM,SAAS,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAMjC,CAAC;oBAEH,uEAAuE;oBACvE,MAAM,QAAQ,GAAG,SAAS,CAAC,IAAI,CAC7B,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAC,gBAAgB,CAAC;wBACpC,CAAC,CAAC,GAAG,EAAE,QAAQ,CAAC,gBAAgB,CAAC;wBACjC,CAAC,CAAC,IAAI,EAAE,WAAW,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CACzC,CAAC;oBAEF,IAAI,QAAQ,EAAE,CAAC;wBACb,MAAM,iBAAiB,GAAG,QAAQ,CAAC,EAAE,IAAI,QAAQ,CAAC,OAAO,IAAI,IAAI,CAAC;wBAClE,MAAM,iBAAiB,GAAG,QAAQ,CAAC,GAAG,IAAI,IAAI,CAAC;wBAE/C,IAAI,iBAAiB,EAAE,CAAC;4BACtB,OAAO,GAAG,iBAAiB,CAAC;4BAC5B,WAAW,GAAG,MAAM,CAAC;4BAErB,8CAA8C;4BAC9C,IAAI,CAAC;gCACH,MAAM,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC;oCACjC,KAAK,EAAE,EAAE,MAAM,EAAE;oCACjB,IAAI,EAAE,EAAE,OAAO,EAAE,iBAAiB,EAAE;iCACrC,CAAC,CAAC;gCACH,MAAM,CAAC,IAAI,CAAC,mDAAmD,EAAE;oCAC/D,MAAM;oCACN,OAAO,EAAE,iBAAiB;iCAC3B,CAAC,CAAC;4BACL,CAAC;4BAAC,OAAO,WAAW,EAAE,CAAC;gCACrB,MAAM,CAAC,IAAI,CAAC,uCAAuC,EAAE;oCACnD,MAAM;oCACN,KAAK,EAAE,WAAW,YAAY,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC;iCAChF,CAAC,CAAC;4BACL,CAAC;wBACH,CAAC;wBAED,IAAI,iBAAiB,IAAI,CAAC,WAAW,EAAE,CAAC;4BACtC,OAAO,GAAG,iBAAiB,CAAC;4BAC5B,UAAU,GAAG,MAAM,CAAC;4BAEpB,kDAAkD;4BAClD,IAAI,CAAC;gCACH,MAAM,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC;oCACjC,KAAK,EAAE,EAAE,MAAM,EAAE;oCACjB,IAAI,EAAE,EAAE,WAAW,EAAE,iBAAiB,EAAE;iCACzC,CAAC,CAAC;gCACH,MAAM,CAAC,IAAI,CAAC,uDAAuD,EAAE;oCACnE,MAAM;oCACN,WAAW,EAAE,iBAAiB;iCAC/B,CAAC,CAAC;4BACL,CAAC;4BAAC,OAAO,WAAW,EAAE,CAAC;gCACrB,MAAM,CAAC,IAAI,CAAC,2CAA2C,EAAE;oCACvD,MAAM;oCACN,KAAK,EAAE,WAAW,YAAY,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC;iCAChF,CAAC,CAAC;4BACL,CAAC;wBACH,CAAC;oBACH,CAAC;yBAAM,CAAC;wBACN,MAAM,CAAC,IAAI,CAAC,wDAAwD,EAAE;4BACpE,MAAM;4BACN,cAAc,EAAE,SAAS,CAAC,MAAM;yBACjC,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;qBAAM,CAAC;oBACN,MAAM,SAAS,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;oBACnC,MAAM,CAAC,IAAI,CAAC,6CAA6C,EAAE;wBACzD,MAAM;wBACN,MAAM,EAAE,GAAG,CAAC,MAAM;wBAClB,UAAU,EAAE,GAAG,CAAC,UAAU;wBAC1B,KAAK,EAAE,SAAS,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC;qBACnC,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,MAAM,CAAC,KAAK,CAAC,gDAAgD,EAAE;oBAC7D,MAAM;oBACN,KAAK,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;iBAClD,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;SAAM,IAAI,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,CAAC;QACxE,QAAQ,GAAG,KAAK,CAAC;IACnB,CAAC;IAED,OAAO;QACL,OAAO;QACP,OAAO;QACP,QAAQ;QACR,MAAM,EAAE;YACN,OAAO,EAAE,UAAU;YACnB,OAAO,EAAE,WAAW;SACrB;KACF,CAAC;AACJ,CAAC"}

package/public/server/jira/ensure-user.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Utility to ensure a User exists before creating JiraCredential
+ *
+ * This prevents P2025 errors (record not found) when creating credentials.
+ * The User must exist before creating any JiraCredential that references it.
+ */
+/**
+ * Ensure a User exists by userId
+ * If the user doesn't exist, throws an error (should not create users here)
+ */
+export declare function ensureUserExists(userId: string): Promise<void>;
+/**
+ * Ensure a User exists by email (creates if missing in DEV only)
+ * This is a fallback for cases where we have an email but no userId yet
+ */
+export declare function ensureUserByEmail(email: string, options?: {
+    name?: string;
+    createIfMissing?: boolean;
+}): Promise<string>;
+//# sourceMappingURL=ensure-user.d.ts.map

package/public/server/jira/ensure-user.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ensure-user.d.ts","sourceRoot":"","sources":["../../../src/server/jira/ensure-user.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAKH;;;GAGG;AACH,wBAAsB,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAepE;AAED;;;GAGG;AACH,wBAAsB,iBAAiB,CACrC,KAAK,EAAE,MAAM,EACb,OAAO,GAAE;IACP,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,eAAe,CAAC,EAAE,OAAO,CAAC;CACtB,GACL,OAAO,CAAC,MAAM,CAAC,CAuCjB"}