@atlassian-dc-mcp/common 0.16.0 → 0.17.0

package/build/config/sources/env-file.d.ts

@@ -0,0 +1,16 @@
+import type { ConfigKey, ProductDefinition, ReadableSource, SourceId } from '../source.js';
+export declare const ATLASSIAN_DC_MCP_CONFIG_FILE_ENV_VAR = "ATLASSIAN_DC_MCP_CONFIG_FILE";
+export declare class EnvFileSource implements ReadableSource {
+    readonly id: SourceId;
+    readonly priority = 80;
+    private cwd;
+    private cache;
+    initialize(options?: {
+        cwd?: string;
+    }): void;
+    read(product: ProductDefinition, key: ConfigKey): string | undefined;
+    describe(): string;
+    private getExplicitFilePath;
+    private loadFile;
+}
+//# sourceMappingURL=env-file.d.ts.map

package/build/config/sources/env-file.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"env-file.d.ts","sourceRoot":"","sources":["../../../src/config/sources/env-file.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAE,iBAAiB,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAQ3F,eAAO,MAAM,oCAAoC,iCAAiC,CAAC;AAEnF,qBAAa,aAAc,YAAW,cAAc;IAClD,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAc;IACnC,QAAQ,CAAC,QAAQ,MAAM;IAEvB,OAAO,CAAC,GAAG,CAAyB;IACpC,OAAO,CAAC,KAAK,CAAyB;IAEtC,UAAU,CAAC,OAAO,CAAC,EAAE;QAAE,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI;IAK5C,IAAI,CAAC,OAAO,EAAE,iBAAiB,EAAE,GAAG,EAAE,SAAS,GAAG,MAAM,GAAG,SAAS;IAKpE,QAAQ,IAAI,MAAM;IAIlB,OAAO,CAAC,mBAAmB;IAW3B,OAAO,CAAC,QAAQ;CAiBjB"}

package/build/config/sources/env-file.js

@@ -0,0 +1,48 @@
+import path from 'node:path';
+import { getNonEmptyValue } from '../source.js';
+import { DotenvFileCache, DotenvFileNotFoundError, } from './dotenv-file-cache.js';
+export const ATLASSIAN_DC_MCP_CONFIG_FILE_ENV_VAR = 'ATLASSIAN_DC_MCP_CONFIG_FILE';
+export class EnvFileSource {
+    id = 'env-file';
+    priority = 80;
+    cwd = process.cwd();
+    cache = new DotenvFileCache();
+    initialize(options) {
+        this.cwd = options?.cwd ?? process.cwd();
+        this.loadFile();
+    }
+    read(product, key) {
+        const values = this.loadFile();
+        return getNonEmptyValue(values[product.envVars[key]]);
+    }
+    describe() {
+        return this.cache.filePath ? `env-file (${this.cache.filePath})` : 'env-file';
+    }
+    getExplicitFilePath() {
+        const filePath = getNonEmptyValue(process.env[ATLASSIAN_DC_MCP_CONFIG_FILE_ENV_VAR]);
+        if (!filePath) {
+            return undefined;
+        }
+        if (!path.isAbsolute(filePath)) {
+            throw new Error(`${ATLASSIAN_DC_MCP_CONFIG_FILE_ENV_VAR} must be an absolute path: ${filePath}`);
+        }
+        return filePath;
+    }
+    loadFile() {
+        const explicitFilePath = this.getExplicitFilePath();
+        const filePath = explicitFilePath ?? path.join(this.cwd, '.env');
+        try {
+            return this.cache.load(filePath);
+        }
+        catch (error) {
+            if (error instanceof DotenvFileNotFoundError) {
+                if (explicitFilePath) {
+                    throw new Error(`${ATLASSIAN_DC_MCP_CONFIG_FILE_ENV_VAR} points to a missing file: ${error.filePath}`);
+                }
+                return {};
+            }
+            throw error;
+        }
+    }
+}
+//# sourceMappingURL=env-file.js.map

package/build/config/sources/env-file.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"env-file.js","sourceRoot":"","sources":["../../../src/config/sources/env-file.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,EACL,eAAe,EACf,uBAAuB,GAExB,MAAM,wBAAwB,CAAC;AAEhC,MAAM,CAAC,MAAM,oCAAoC,GAAG,8BAA8B,CAAC;AAEnF,MAAM,OAAO,aAAa;IACf,EAAE,GAAa,UAAU,CAAC;IAC1B,QAAQ,GAAG,EAAE,CAAC;IAEf,GAAG,GAAW,OAAO,CAAC,GAAG,EAAE,CAAC;IAC5B,KAAK,GAAG,IAAI,eAAe,EAAE,CAAC;IAEtC,UAAU,CAAC,OAA0B;QACnC,IAAI,CAAC,GAAG,GAAG,OAAO,EAAE,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;QACzC,IAAI,CAAC,QAAQ,EAAE,CAAC;IAClB,CAAC;IAED,IAAI,CAAC,OAA0B,EAAE,GAAc;QAC7C,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC/B,OAAO,gBAAgB,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACxD,CAAC;IAED,QAAQ;QACN,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,aAAa,IAAI,CAAC,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC;IAChF,CAAC;IAEO,mBAAmB;QACzB,MAAM,QAAQ,GAAG,gBAAgB,CAAC,OAAO,CAAC,GAAG,CAAC,oCAAoC,CAAC,CAAC,CAAC;QACrF,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CAAC,GAAG,oCAAoC,8BAA8B,QAAQ,EAAE,CAAC,CAAC;QACnG,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAEO,QAAQ;QACd,MAAM,gBAAgB,GAAG,IAAI,CAAC,mBAAmB,EAAE,CAAC;QACpD,MAAM,QAAQ,GAAG,gBAAgB,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACjE,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACnC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,uBAAuB,EAAE,CAAC;gBAC7C,IAAI,gBAAgB,EAAE,CAAC;oBACrB,MAAM,IAAI,KAAK,CACb,GAAG,oCAAoC,8BAA8B,KAAK,CAAC,QAAQ,EAAE,CACtF,CAAC;gBACJ,CAAC;gBACD,OAAO,EAAE,CAAC;YACZ,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;CACF"}

package/build/config/sources/home-file.d.ts

@@ -0,0 +1,19 @@
+import type { ConfigKey, ProductDefinition, SourceId, WritableSource } from '../source.js';
+declare const HOME_DIR_NAME = ".atlassian-dc-mcp";
+declare function getHomeFilePath(product: ProductDefinition | string): string;
+export declare class HomeFileSource implements WritableSource {
+    readonly id: SourceId;
+    readonly priority = 60;
+    private cache;
+    isAvailable(): boolean;
+    read(product: ProductDefinition, key: ConfigKey): string | undefined;
+    describe(): string;
+    describeForProduct(product: ProductDefinition): string;
+    write(product: ProductDefinition, key: ConfigKey, value: string): void;
+    clear(product: ProductDefinition, key: ConfigKey): void;
+    private loadFile;
+    private readFileIgnoringErrors;
+    private persist;
+}
+export { getHomeFilePath, HOME_DIR_NAME };
+//# sourceMappingURL=home-file.d.ts.map

package/build/config/sources/home-file.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"home-file.d.ts","sourceRoot":"","sources":["../../../src/config/sources/home-file.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,SAAS,EAAE,iBAAiB,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAQ3F,QAAA,MAAM,aAAa,sBAAsB,CAAC;AAE1C,iBAAS,eAAe,CAAC,OAAO,EAAE,iBAAiB,GAAG,MAAM,GAAG,MAAM,CAGpE;AAqBD,qBAAa,cAAe,YAAW,cAAc;IACnD,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAe;IACpC,QAAQ,CAAC,QAAQ,MAAM;IAEvB,OAAO,CAAC,KAAK,CAAyB;IAEtC,WAAW,IAAI,OAAO;IAItB,IAAI,CAAC,OAAO,EAAE,iBAAiB,EAAE,GAAG,EAAE,SAAS,GAAG,MAAM,GAAG,SAAS;IAKpE,QAAQ,IAAI,MAAM;IAIlB,kBAAkB,CAAC,OAAO,EAAE,iBAAiB,GAAG,MAAM;IAItD,KAAK,CAAC,OAAO,EAAE,iBAAiB,EAAE,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI;IAOtE,KAAK,CAAC,OAAO,EAAE,iBAAiB,EAAE,GAAG,EAAE,SAAS,GAAG,IAAI;IAUvD,OAAO,CAAC,QAAQ;IAYhB,OAAO,CAAC,sBAAsB;IAQ9B,OAAO,CAAC,OAAO;CAoBhB;AAED,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,CAAC"}

package/build/config/sources/home-file.js

@@ -0,0 +1,102 @@
+import crypto from 'node:crypto';
+import fs from 'node:fs';
+import os from 'node:os';
+import path from 'node:path';
+import { getNonEmptyValue } from '../source.js';
+import { DotenvFileCache, DotenvFileNotFoundError, } from './dotenv-file-cache.js';
+const HOME_DIR_NAME = '.atlassian-dc-mcp';
+function getHomeFilePath(product) {
+    const id = typeof product === 'string' ? product : product.id;
+    return path.join(os.homedir(), HOME_DIR_NAME, `${id}.env`);
+}
+function needsQuoting(value) {
+    return /[\s#'"]/.test(value);
+}
+function serializeValue(value) {
+    if (!needsQuoting(value)) {
+        return value;
+    }
+    return `"${value.replace(/\\/g, '\\\\').replace(/"/g, '\\"')}"`;
+}
+function serialize(values) {
+    const lines = [];
+    for (const [key, raw] of Object.entries(values)) {
+        lines.push(`${key}=${serializeValue(raw)}`);
+    }
+    return lines.length > 0 ? `${lines.join('\n')}\n` : '';
+}
+export class HomeFileSource {
+    id = 'home-file';
+    priority = 60;
+    cache = new DotenvFileCache();
+    isAvailable() {
+        return true;
+    }
+    read(product, key) {
+        const values = this.loadFile(product);
+        return getNonEmptyValue(values[product.envVars[key]]);
+    }
+    describe() {
+        return `home-file (~/${HOME_DIR_NAME}/<product>.env)`;
+    }
+    describeForProduct(product) {
+        return `home-file (${getHomeFilePath(product)})`;
+    }
+    write(product, key, value) {
+        const envVar = product.envVars[key];
+        const existing = this.readFileIgnoringErrors(product);
+        existing[envVar] = value;
+        this.persist(product, existing);
+    }
+    clear(product, key) {
+        const envVar = product.envVars[key];
+        const existing = this.readFileIgnoringErrors(product);
+        if (!(envVar in existing)) {
+            return;
+        }
+        delete existing[envVar];
+        this.persist(product, existing);
+    }
+    loadFile(product) {
+        const filePath = getHomeFilePath(product);
+        try {
+            return this.cache.load(filePath);
+        }
+        catch (error) {
+            if (error instanceof DotenvFileNotFoundError) {
+                return {};
+            }
+            throw error;
+        }
+    }
+    readFileIgnoringErrors(product) {
+        try {
+            return { ...this.loadFile(product) };
+        }
+        catch {
+            return {};
+        }
+    }
+    persist(product, values) {
+        const filePath = getHomeFilePath(product);
+        const dir = path.dirname(filePath);
+        fs.mkdirSync(dir, { recursive: true, mode: 0o700 });
+        const tmpPath = `${filePath}.tmp-${process.pid}-${crypto.randomBytes(4).toString('hex')}`;
+        try {
+            fs.writeFileSync(tmpPath, serialize(values), { mode: 0o600 });
+            fs.renameSync(tmpPath, filePath);
+        }
+        catch (error) {
+            try {
+                fs.unlinkSync(tmpPath);
+            }
+            catch {
+                // best-effort cleanup
+            }
+            throw error;
+        }
+        this.cache.invalidate();
+    }
+}
+export { getHomeFilePath, HOME_DIR_NAME };
+//# sourceMappingURL=home-file.js.map

package/build/config/sources/home-file.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"home-file.js","sourceRoot":"","sources":["../../../src/config/sources/home-file.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,EACL,eAAe,EACf,uBAAuB,GAExB,MAAM,wBAAwB,CAAC;AAEhC,MAAM,aAAa,GAAG,mBAAmB,CAAC;AAE1C,SAAS,eAAe,CAAC,OAAmC;IAC1D,MAAM,EAAE,GAAG,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC9D,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,aAAa,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;AAC7D,CAAC;AAED,SAAS,YAAY,CAAC,KAAa;IACjC,OAAO,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC/B,CAAC;AAED,SAAS,cAAc,CAAC,KAAa;IACnC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC;AAClE,CAAC;AAED,SAAS,SAAS,CAAC,MAAyB;IAC1C,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAChD,KAAK,CAAC,IAAI,CAAC,GAAG,GAAG,IAAI,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;AACzD,CAAC;AAED,MAAM,OAAO,cAAc;IAChB,EAAE,GAAa,WAAW,CAAC;IAC3B,QAAQ,GAAG,EAAE,CAAC;IAEf,KAAK,GAAG,IAAI,eAAe,EAAE,CAAC;IAEtC,WAAW;QACT,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,CAAC,OAA0B,EAAE,GAAc;QAC7C,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QACtC,OAAO,gBAAgB,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACxD,CAAC;IAED,QAAQ;QACN,OAAO,gBAAgB,aAAa,iBAAiB,CAAC;IACxD,CAAC;IAED,kBAAkB,CAAC,OAA0B;QAC3C,OAAO,cAAc,eAAe,CAAC,OAAO,CAAC,GAAG,CAAC;IACnD,CAAC;IAED,KAAK,CAAC,OAA0B,EAAE,GAAc,EAAE,KAAa;QAC7D,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACpC,MAAM,QAAQ,GAAG,IAAI,CAAC,sBAAsB,CAAC,OAAO,CAAC,CAAC;QACtD,QAAQ,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC;QACzB,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAClC,CAAC;IAED,KAAK,CAAC,OAA0B,EAAE,GAAc;QAC9C,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACpC,MAAM,QAAQ,GAAG,IAAI,CAAC,sBAAsB,CAAC,OAAO,CAAC,CAAC;QACtD,IAAI,CAAC,CAAC,MAAM,IAAI,QAAQ,CAAC,EAAE,CAAC;YAC1B,OAAO;QACT,CAAC;QACD,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC;QACxB,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAClC,CAAC;IAEO,QAAQ,CAAC,OAA0B;QACzC,MAAM,QAAQ,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;QAC1C,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACnC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,uBAAuB,EAAE,CAAC;gBAC7C,OAAO,EAAE,CAAC;YACZ,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAEO,sBAAsB,CAAC,OAA0B;QACvD,IAAI,CAAC;YACH,OAAO,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QACvC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAEO,OAAO,CAAC,OAA0B,EAAE,MAAyB;QACnE,MAAM,QAAQ,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;QAC1C,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACnC,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAEpD,MAAM,OAAO,GAAG,GAAG,QAAQ,QAAQ,OAAO,CAAC,GAAG,IAAI,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1F,IAAI,CAAC;YACH,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,SAAS,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YAC9D,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QACnC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC;gBACH,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;YACzB,CAAC;YAAC,MAAM,CAAC;gBACP,sBAAsB;YACxB,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;QAED,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC;IAC1B,CAAC;CACF;AAED,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,CAAC"}

package/build/config/sources/macos-keychain.d.ts

@@ -0,0 +1,26 @@
+import { execFileSync as nodeExecFileSync } from 'node:child_process';
+import { existsSync as nodeExistsSync } from 'node:fs';
+import type { ConfigKey, ProductDefinition, SourceId, WritableSource } from '../source.js';
+export declare const SECURITY_BINARY = "/usr/bin/security";
+export declare const KEYCHAIN_SERVICE = "atlassian-dc-mcp";
+export declare const NOT_FOUND_STATUS = 44;
+export type KeychainDeps = {
+    execFileSync: typeof nodeExecFileSync;
+    existsSync: typeof nodeExistsSync;
+    getPlatform: () => NodeJS.Platform;
+};
+export declare class MacosKeychainSource implements WritableSource {
+    readonly id: SourceId;
+    readonly priority = 40;
+    private cache;
+    private cacheWarmed;
+    private readonly deps;
+    constructor(deps?: Partial<KeychainDeps>);
+    isAvailable(): boolean;
+    read(product: ProductDefinition, key: ConfigKey): string | undefined;
+    describe(): string;
+    write(product: ProductDefinition, key: ConfigKey, value: string): void;
+    clear(product: ProductDefinition, key: ConfigKey): void;
+    private findPassword;
+}
+//# sourceMappingURL=macos-keychain.d.ts.map

package/build/config/sources/macos-keychain.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"macos-keychain.d.ts","sourceRoot":"","sources":["../../../src/config/sources/macos-keychain.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,IAAI,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtE,OAAO,EAAE,UAAU,IAAI,cAAc,EAAE,MAAM,SAAS,CAAC;AACvD,OAAO,KAAK,EAAE,SAAS,EAAE,iBAAiB,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAO3F,eAAO,MAAM,eAAe,sBAAsB,CAAC;AACnD,eAAO,MAAM,gBAAgB,qBAAqB,CAAC;AAEnD,eAAO,MAAM,gBAAgB,KAAK,CAAC;AAEnC,MAAM,MAAM,YAAY,GAAG;IACzB,YAAY,EAAE,OAAO,gBAAgB,CAAC;IACtC,UAAU,EAAE,OAAO,cAAc,CAAC;IAClC,WAAW,EAAE,MAAM,MAAM,CAAC,QAAQ,CAAC;CACpC,CAAC;AAYF,qBAAa,mBAAoB,YAAW,cAAc;IACxD,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAoB;IACzC,QAAQ,CAAC,QAAQ,MAAM;IAEvB,OAAO,CAAC,KAAK,CAAyC;IACtD,OAAO,CAAC,WAAW,CAAqB;IACxC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAe;gBAExB,IAAI,GAAE,OAAO,CAAC,YAAY,CAAM;IAI5C,WAAW,IAAI,OAAO;IAItB,IAAI,CAAC,OAAO,EAAE,iBAAiB,EAAE,GAAG,EAAE,SAAS,GAAG,MAAM,GAAG,SAAS;IAapE,QAAQ,IAAI,MAAM;IAIlB,KAAK,CAAC,OAAO,EAAE,iBAAiB,EAAE,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI;IAsBtE,KAAK,CAAC,OAAO,EAAE,iBAAiB,EAAE,GAAG,EAAE,SAAS,GAAG,IAAI;IAiBvD,OAAO,CAAC,YAAY;CAcrB"}

package/build/config/sources/macos-keychain.js

@@ -0,0 +1,88 @@
+import { execFileSync as nodeExecFileSync } from 'node:child_process';
+import { existsSync as nodeExistsSync } from 'node:fs';
+// We pass the token via `-w <value>` on write. `security add-generic-password`
+// has no stdin-password mode, so the token is visible in argv to same-user
+// processes. A same-user attacker already has keychain access via `security`
+// itself; this does not widen the attack surface.
+export const SECURITY_BINARY = '/usr/bin/security';
+export const KEYCHAIN_SERVICE = 'atlassian-dc-mcp';
+const KEYCHAIN_TIMEOUT_MS = 5000;
+export const NOT_FOUND_STATUS = 44;
+function accountFor(product) {
+    return `${product.id}-token`;
+}
+const DEFAULT_DEPS = {
+    execFileSync: nodeExecFileSync,
+    existsSync: nodeExistsSync,
+    getPlatform: () => process.platform,
+};
+export class MacosKeychainSource {
+    id = 'macos-keychain';
+    priority = 40;
+    cache = new Map();
+    cacheWarmed = new Set();
+    deps;
+    constructor(deps = {}) {
+        this.deps = { ...DEFAULT_DEPS, ...deps };
+    }
+    isAvailable() {
+        return this.deps.getPlatform() === 'darwin' && this.deps.existsSync(SECURITY_BINARY);
+    }
+    read(product, key) {
+        if (key !== 'token' || !this.isAvailable()) {
+            return undefined;
+        }
+        if (this.cacheWarmed.has(product.id)) {
+            return this.cache.get(product.id);
+        }
+        const value = this.findPassword(product);
+        this.cache.set(product.id, value);
+        this.cacheWarmed.add(product.id);
+        return value;
+    }
+    describe() {
+        return 'macOS Keychain';
+    }
+    write(product, key, value) {
+        if (key !== 'token') {
+            throw new Error('macOS Keychain only stores the token key');
+        }
+        if (!this.isAvailable()) {
+            throw new Error('macOS Keychain is not available on this platform');
+        }
+        this.deps.execFileSync(SECURITY_BINARY, [
+            'add-generic-password',
+            '-U',
+            '-s', KEYCHAIN_SERVICE,
+            '-a', accountFor(product),
+            '-w', value,
+        ], { stdio: ['ignore', 'pipe', 'pipe'], encoding: 'utf8', timeout: KEYCHAIN_TIMEOUT_MS });
+        this.cache.set(product.id, value);
+        this.cacheWarmed.add(product.id);
+    }
+    clear(product, key) {
+        if (key !== 'token' || !this.isAvailable()) {
+            return;
+        }
+        try {
+            this.deps.execFileSync(SECURITY_BINARY, ['delete-generic-password', '-s', KEYCHAIN_SERVICE, '-a', accountFor(product)], { stdio: ['ignore', 'pipe', 'pipe'], encoding: 'utf8', timeout: KEYCHAIN_TIMEOUT_MS });
+        }
+        catch {
+            // absent / already cleared — non-fatal
+        }
+        this.cache.set(product.id, undefined);
+        this.cacheWarmed.add(product.id);
+    }
+    findPassword(product) {
+        try {
+            const stdout = this.deps.execFileSync(SECURITY_BINARY, ['find-generic-password', '-s', KEYCHAIN_SERVICE, '-a', accountFor(product), '-w'], { stdio: ['ignore', 'pipe', 'pipe'], encoding: 'utf8', timeout: KEYCHAIN_TIMEOUT_MS });
+            return String(stdout).replace(/\n$/, '');
+        }
+        catch {
+            // exit 44 = not found; any other failure (locked keychain, etc.) is
+            // treated as absent so the resolver continues down the chain.
+            return undefined;
+        }
+    }
+}
+//# sourceMappingURL=macos-keychain.js.map

package/build/config/sources/macos-keychain.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"macos-keychain.js","sourceRoot":"","sources":["../../../src/config/sources/macos-keychain.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,IAAI,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtE,OAAO,EAAE,UAAU,IAAI,cAAc,EAAE,MAAM,SAAS,CAAC;AAGvD,+EAA+E;AAC/E,2EAA2E;AAC3E,6EAA6E;AAC7E,kDAAkD;AAElD,MAAM,CAAC,MAAM,eAAe,GAAG,mBAAmB,CAAC;AACnD,MAAM,CAAC,MAAM,gBAAgB,GAAG,kBAAkB,CAAC;AACnD,MAAM,mBAAmB,GAAG,IAAI,CAAC;AACjC,MAAM,CAAC,MAAM,gBAAgB,GAAG,EAAE,CAAC;AAQnC,SAAS,UAAU,CAAC,OAA0B;IAC5C,OAAO,GAAG,OAAO,CAAC,EAAE,QAAQ,CAAC;AAC/B,CAAC;AAED,MAAM,YAAY,GAAiB;IACjC,YAAY,EAAE,gBAAgB;IAC9B,UAAU,EAAE,cAAc;IAC1B,WAAW,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,QAAQ;CACpC,CAAC;AAEF,MAAM,OAAO,mBAAmB;IACrB,EAAE,GAAa,gBAAgB,CAAC;IAChC,QAAQ,GAAG,EAAE,CAAC;IAEf,KAAK,GAAG,IAAI,GAAG,EAA8B,CAAC;IAC9C,WAAW,GAAG,IAAI,GAAG,EAAU,CAAC;IACvB,IAAI,CAAe;IAEpC,YAAY,OAA8B,EAAE;QAC1C,IAAI,CAAC,IAAI,GAAG,EAAE,GAAG,YAAY,EAAE,GAAG,IAAI,EAAE,CAAC;IAC3C,CAAC;IAED,WAAW;QACT,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC;IACvF,CAAC;IAED,IAAI,CAAC,OAA0B,EAAE,GAAc;QAC7C,IAAI,GAAG,KAAK,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;YAC3C,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,IAAI,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC;YACrC,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACpC,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QACzC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QAClC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACjC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,QAAQ;QACN,OAAO,gBAAgB,CAAC;IAC1B,CAAC;IAED,KAAK,CAAC,OAA0B,EAAE,GAAc,EAAE,KAAa;QAC7D,IAAI,GAAG,KAAK,OAAO,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;QAC9D,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;QACtE,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,YAAY,CACpB,eAAe,EACf;YACE,sBAAsB;YACtB,IAAI;YACJ,IAAI,EAAE,gBAAgB;YACtB,IAAI,EAAE,UAAU,CAAC,OAAO,CAAC;YACzB,IAAI,EAAE,KAAK;SACZ,EACD,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,mBAAmB,EAAE,CACtF,CAAC;QACF,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QAClC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACnC,CAAC;IAED,KAAK,CAAC,OAA0B,EAAE,GAAc;QAC9C,IAAI,GAAG,KAAK,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;YAC3C,OAAO;QACT,CAAC;QACD,IAAI,CAAC;YACH,IAAI,CAAC,IAAI,CAAC,YAAY,CACpB,eAAe,EACf,CAAC,yBAAyB,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC,EAC9E,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,mBAAmB,EAAE,CACtF,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,uCAAuC;QACzC,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;QACtC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACnC,CAAC;IAEO,YAAY,CAAC,OAA0B;QAC7C,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,CACnC,eAAe,EACf,CAAC,uBAAuB,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,UAAU,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,EAClF,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,mBAAmB,EAAE,CACtF,CAAC;YACF,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC3C,CAAC;QAAC,MAAM,CAAC;YACP,oEAAoE;YACpE,8DAA8D;YAC9D,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;CACF"}

package/build/config/sources/process-env.d.ts

@@ -0,0 +1,8 @@
+import type { ConfigKey, ProductDefinition, ReadableSource, SourceId } from '../source.js';
+export declare class ProcessEnvSource implements ReadableSource {
+    readonly id: SourceId;
+    readonly priority = 100;
+    read(product: ProductDefinition, key: ConfigKey): string | undefined;
+    describe(): string;
+}
+//# sourceMappingURL=process-env.d.ts.map

package/build/config/sources/process-env.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"process-env.d.ts","sourceRoot":"","sources":["../../../src/config/sources/process-env.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,iBAAiB,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAG3F,qBAAa,gBAAiB,YAAW,cAAc;IACrD,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAiB;IACtC,QAAQ,CAAC,QAAQ,OAAO;IAExB,IAAI,CAAC,OAAO,EAAE,iBAAiB,EAAE,GAAG,EAAE,SAAS,GAAG,MAAM,GAAG,SAAS;IAIpE,QAAQ,IAAI,MAAM;CAGnB"}

package/build/config/sources/process-env.js

@@ -0,0 +1,12 @@
+import { getNonEmptyValue } from '../source.js';
+export class ProcessEnvSource {
+    id = 'process-env';
+    priority = 100;
+    read(product, key) {
+        return getNonEmptyValue(process.env[product.envVars[key]]);
+    }
+    describe() {
+        return 'process env';
+    }
+}
+//# sourceMappingURL=process-env.js.map

package/build/config/sources/process-env.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"process-env.js","sourceRoot":"","sources":["../../../src/config/sources/process-env.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAEhD,MAAM,OAAO,gBAAgB;IAClB,EAAE,GAAa,aAAa,CAAC;IAC7B,QAAQ,GAAG,GAAG,CAAC;IAExB,IAAI,CAAC,OAA0B,EAAE,GAAc;QAC7C,OAAO,gBAAgB,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAC7D,CAAC;IAED,QAAQ;QACN,OAAO,aAAa,CAAC;IACvB,CAAC;CACF"}

package/build/index.d.ts

@@ -1,6 +1,7 @@
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 export * from './api-error-handler.js';
-export * from './runtime-config.js';
+export * from './config/index.js';
+export { runSetup } from './setup-cli.js';
 export declare const formatToolResponse: (result: unknown) => {
     content: {
         type: "text";

package/build/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAGpE,cAAc,wBAAwB,CAAA;AACtC,cAAc,qBAAqB,CAAC;AAGpC,eAAO,MAAM,kBAAkB,GAAI,QAAQ,OAAO;;;;;CAKhD,CAAC;AAGH,eAAO,MAAM,WAAW,GAAI,OAAO,KAAK,UAGvC,CAAC;AAGF,wBAAgB,eAAe,CAAC,OAAO,EAAE;IACvC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB,aAKA;AAED,wBAAsB,aAAa,CAAC,MAAM,EAAE,SAAS,sBAkCpD"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAGpE,cAAc,wBAAwB,CAAA;AACtC,cAAc,mBAAmB,CAAC;AAClC,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAG1C,eAAO,MAAM,kBAAkB,GAAI,QAAQ,OAAO;;;;;CAKhD,CAAC;AAGH,eAAO,MAAM,WAAW,GAAI,OAAO,KAAK,UAGvC,CAAC;AAGF,wBAAgB,eAAe,CAAC,OAAO,EAAE;IACvC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB,aAKA;AAED,wBAAsB,aAAa,CAAC,MAAM,EAAE,SAAS,sBAkCpD"}

package/build/index.js

@@ -1,7 +1,8 @@
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
 export * from './api-error-handler.js';
-export * from './runtime-config.js';
+export * from './config/index.js';
+export { runSetup } from './setup-cli.js';
 // Helper function to format tool responses
 export const formatToolResponse = (result) => ({
     content: [{

package/build/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAEpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,cAAc,wBAAwB,CAAA;AACtC,cAAc,qBAAqB,CAAC;AAEpC,2CAA2C;AAC3C,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,MAAe,EAAE,EAAE,CAAC,CAAC;IACtD,OAAO,EAAE,CAAC;YACR,IAAI,EAAE,MAAe;YACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;SAC7B,CAAC;CACH,CAAC,CAAC;AAEH,uBAAuB;AACvB,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,KAAY,EAAE,EAAE;IAC1C,OAAO,CAAC,KAAK,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC;IACtC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC;AAEF,sCAAsC;AACtC,MAAM,UAAU,eAAe,CAAC,OAG/B;IACC,OAAO,IAAI,SAAS,CAAC;QACnB,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,OAAO,EAAE,OAAO,CAAC,OAAO;KACzB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,MAAiB;IACnD,0DAA0D;IAC1D,yBAAyB;IACzB,iDAAiD;IACjD,EAAE;IACF,wCAAwC;IACxC,0DAA0D;IAC1D,qCAAqC;IACrC,MAAM;IACN,EAAE;IACF,8CAA8C;IAC9C,kDAAkD;IAClD,MAAM;IACN,EAAE;IACF,mDAAmD;IACnD,sCAAsC;IACtC,2CAA2C;IAC3C,kDAAkD;IAClD,2CAA2C;IAC3C,4CAA4C;IAC5C,mBAAmB;IACnB,uBAAuB;IACvB,gBAAgB;IAChB,QAAQ;IACR,EAAE;IACF,uDAAuD;IACvD,qBAAqB;IACrB,QAAQ;IACR,MAAM;IAGN,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAChC,OAAO,MAAM,CAAC;AAChB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAEpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,cAAc,wBAAwB,CAAA;AACtC,cAAc,mBAAmB,CAAC;AAClC,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAE1C,2CAA2C;AAC3C,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,MAAe,EAAE,EAAE,CAAC,CAAC;IACtD,OAAO,EAAE,CAAC;YACR,IAAI,EAAE,MAAe;YACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;SAC7B,CAAC;CACH,CAAC,CAAC;AAEH,uBAAuB;AACvB,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,KAAY,EAAE,EAAE;IAC1C,OAAO,CAAC,KAAK,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC;IACtC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC;AAEF,sCAAsC;AACtC,MAAM,UAAU,eAAe,CAAC,OAG/B;IACC,OAAO,IAAI,SAAS,CAAC;QACnB,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,OAAO,EAAE,OAAO,CAAC,OAAO;KACzB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,MAAiB;IACnD,0DAA0D;IAC1D,yBAAyB;IACzB,iDAAiD;IACjD,EAAE;IACF,wCAAwC;IACxC,0DAA0D;IAC1D,qCAAqC;IACrC,MAAM;IACN,EAAE;IACF,8CAA8C;IAC9C,kDAAkD;IAClD,MAAM;IACN,EAAE;IACF,mDAAmD;IACnD,sCAAsC;IACtC,2CAA2C;IAC3C,kDAAkD;IAClD,2CAA2C;IAC3C,4CAA4C;IAC5C,mBAAmB;IACnB,uBAAuB;IACvB,gBAAgB;IAChB,QAAQ;IACR,EAAE;IACF,uDAAuD;IACvD,qBAAqB;IACrB,QAAQ;IACR,MAAM;IAGN,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAChC,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/build/setup-cli.d.ts

@@ -0,0 +1,25 @@
+import { type ConfigRegistry } from './config/registry.js';
+import type { ProductDefinition } from './config/source.js';
+export type SetupPrompts = {
+    input: (opts: {
+        message: string;
+        default?: string;
+        validate?: (raw: string) => true | string;
+    }) => Promise<string>;
+    password: (opts: {
+        message: string;
+        mask?: string;
+    }) => Promise<string>;
+    confirm: (opts: {
+        message: string;
+        default?: boolean;
+    }) => Promise<boolean>;
+};
+export type SetupDeps = {
+    registry?: ConfigRegistry;
+    log?: (message: string) => void;
+    exit?: (code: number) => void;
+    prompts?: SetupPrompts;
+};
+export declare function runSetup(product: ProductDefinition, deps?: SetupDeps): Promise<void>;
+//# sourceMappingURL=setup-cli.d.ts.map

package/build/setup-cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup-cli.d.ts","sourceRoot":"","sources":["../src/setup-cli.ts"],"names":[],"mappings":"AACA,OAAO,EAAwB,KAAK,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAEjF,OAAO,KAAK,EAEV,iBAAiB,EAElB,MAAM,oBAAoB,CAAC;AAa5B,MAAM,MAAM,YAAY,GAAG;IACzB,KAAK,EAAE,CAAC,IAAI,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,GAAG,MAAM,CAAA;KAAE,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IACnH,QAAQ,EAAE,CAAC,IAAI,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IACxE,OAAO,EAAE,CAAC,IAAI,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,OAAO,CAAA;KAAE,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;CAC7E,CAAC;AAEF,MAAM,MAAM,SAAS,GAAG;IACtB,QAAQ,CAAC,EAAE,cAAc,CAAC;IAC1B,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IAChC,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC9B,OAAO,CAAC,EAAE,YAAY,CAAC;CACxB,CAAC;AAQF,wBAAsB,QAAQ,CAAC,OAAO,EAAE,iBAAiB,EAAE,IAAI,GAAE,SAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CA6B9F"}

package/build/setup-cli.js

@@ -0,0 +1,215 @@
+import { confirm as inquirerConfirm, input as inquirerInput, password as inquirerPassword } from '@inquirer/prompts';
+import { buildDefaultRegistry } from './config/registry.js';
+import { getProductRuntimeConfig } from './config/runtime-config.js';
+import { HomeFileSource, getHomeFilePath } from './config/sources/home-file.js';
+import { MacosKeychainSource } from './config/sources/macos-keychain.js';
+const FALLBACK_PAGE_SIZE = 25;
+const DEFAULT_PROMPTS = {
+    input: (opts) => inquirerInput(opts),
+    password: (opts) => inquirerPassword(opts),
+    confirm: (opts) => inquirerConfirm(opts),
+};
+export async function runSetup(product, deps = {}) {
+    const registry = deps.registry ?? buildDefaultRegistry();
+    const log = deps.log ?? ((message) => process.stdout.write(`${message}\n`));
+    const exit = deps.exit ?? ((code) => { process.exit(code); });
+    const prompts = deps.prompts ?? DEFAULT_PROMPTS;
+    registry.initialize();
+    log(`Atlassian DC MCP setup — ${product.id}`);
+    log('');
+    const current = getProductRuntimeConfig(product);
+    printCurrent(log, registry, product, current);
+    let answers;
+    try {
+        answers = await promptForValues(prompts, product, current);
+    }
+    catch (error) {
+        if (isUserCancel(error)) {
+            exit(130);
+            return;
+        }
+        throw error;
+    }
+    const homeFile = requireHomeFile(registry);
+    writeNonSecretFields(registry, product, answers, homeFile, log);
+    const tokenWriter = await writeToken(registry, product, answers.token, homeFile, log, prompts);
+    printSummary(log, product, answers, tokenWriter);
+}
+function requireHomeFile(registry) {
+    const homeFile = registry.getWritableSource((s) => s instanceof HomeFileSource);
+    if (!homeFile) {
+        throw new Error('No writable source available for non-secret fields');
+    }
+    return homeFile;
+}
+function printCurrent(log, registry, product, current) {
+    const keys = ['host', 'apiBasePath', 'token', 'defaultPageSize'];
+    for (const key of keys) {
+        const primary = registry.locate(product, key)[0];
+        const label = displayLabel(key);
+        const displayValue = key === 'token' ? maskToken(current.token) : readable(current[key]);
+        const origin = primary ? `from ${primary.detail ?? primary.sourceId}` : 'not set';
+        log(`Current ${label}: ${displayValue} (${origin})`);
+    }
+    log('');
+}
+async function promptForValues(prompts, product, current) {
+    const host = await prompts.input({
+        message: 'Host (e.g. jira.example.com):',
+        default: current.host ?? '',
+    });
+    const apiBasePath = await prompts.input({
+        message: 'API base path:',
+        default: current.apiBasePath ?? product.defaultApiBasePath ?? '',
+    });
+    const defaultPageSize = await prompts.input({
+        message: 'Default page size:',
+        default: String(current.defaultPageSize ?? FALLBACK_PAGE_SIZE),
+        validate: (raw) => /^\d+$/.test(raw.trim()) && Number.parseInt(raw.trim(), 10) > 0
+            ? true
+            : 'Enter a positive integer',
+    });
+    const token = await promptForToken(prompts, current.token);
+    return { host: host.trim(), apiBasePath: apiBasePath.trim(), defaultPageSize: defaultPageSize.trim(), token };
+}
+async function promptForToken(prompts, existing) {
+    const entered = await prompts.password({ message: 'API token:', mask: '*' });
+    const trimmed = entered.trim();
+    if (trimmed.length > 0) {
+        return trimmed;
+    }
+    if (!existing) {
+        return undefined;
+    }
+    await prompts.confirm({ message: 'Keep existing token?', default: true });
+    return undefined;
+}
+function writeNonSecretFields(registry, product, answers, homeFile, log) {
+    for (const key of ['host', 'apiBasePath', 'defaultPageSize']) {
+        warnIfShadowed(registry, product, key, homeFile, log);
+        const value = answers[key];
+        if (value.length > 0) {
+            homeFile.write(product, key, value);
+        }
+    }
+}
+async function writeToken(registry, product, token, homeFile, log, prompts) {
+    if (!token) {
+        return undefined;
+    }
+    const keychain = registry.getWritableSource((s) => s instanceof MacosKeychainSource);
+    const candidates = [];
+    if (keychain?.isAvailable()) {
+        candidates.push(keychain);
+    }
+    candidates.push(homeFile);
+    warnIfShadowed(registry, product, 'token', candidates[0], log);
+    for (const writer of candidates) {
+        const written = await tryWrite(writer, product, token, log, prompts);
+        if (written) {
+            if (writer instanceof MacosKeychainSource) {
+                homeFile.clear(product, 'token');
+            }
+            return writer;
+        }
+    }
+    throw new Error('No writable source succeeded for token');
+}
+async function tryWrite(writer, product, token, log, prompts) {
+    try {
+        writer.write(product, 'token', token);
+        return true;
+    }
+    catch (error) {
+        const stderr = error.stderr?.toString() ?? '';
+        log(`Failed to write token to ${writer.describe()}: ${error.message}`);
+        if (stderr) {
+            log(stderr.trim());
+        }
+        if (writer instanceof MacosKeychainSource) {
+            const fallback = await prompts.confirm({
+                message: 'Fall back to plaintext home file with mode 0600?',
+                default: false,
+            });
+            return !fallback;
+        }
+        return false;
+    }
+}
+function warnIfShadowed(registry, product, key, target, log) {
+    const shadowing = registry
+        .locate(product, key)
+        .filter((loc) => priorityOf(registry, loc.sourceId) > target.priority);
+    if (shadowing.length === 0) {
+        return;
+    }
+    const envVar = product.envVars[key];
+    for (const loc of shadowing) {
+        if (loc.sourceId === 'process-env') {
+            log(`Warning: process.env[${envVar}] is set — runtime will prefer it over the value you're saving to ${target.describe()}. Unset it to use the new value.`);
+        }
+        else {
+            log(`Warning: ${loc.detail ?? loc.sourceId} provides ${envVar} — runtime will prefer it over the value you're saving to ${target.describe()}.`);
+        }
+    }
+}
+function priorityOf(registry, sourceId) {
+    const match = registry.sources.find((s) => s.id === sourceId);
+    return match?.priority ?? 0;
+}
+function printSummary(log, product, answers, tokenWriter) {
+    log('');
+    log('Saved configuration:');
+    log(`  host: ${answers.host || '(unchanged)'}`);
+    log(`  apiBasePath: ${answers.apiBasePath || '(unchanged)'}`);
+    log(`  defaultPageSize: ${answers.defaultPageSize || '(unchanged)'}`);
+    if (tokenWriter) {
+        log(`  token: ${maskToken(answers.token)} (stored in ${describeWriter(tokenWriter, product)})`);
+    }
+    else {
+        log('  token: (unchanged)');
+    }
+    log(`Home file: ${getHomeFilePath(product)}`);
+}
+function describeWriter(writer, product) {
+    if (writer instanceof MacosKeychainSource) {
+        return `macOS Keychain (service atlassian-dc-mcp, account ${product.id}-token)`;
+    }
+    if (writer instanceof HomeFileSource) {
+        return writer.describeForProduct(product);
+    }
+    return writer.describe();
+}
+function displayLabel(key) {
+    switch (key) {
+        case 'host':
+            return 'host';
+        case 'apiBasePath':
+            return 'API base path';
+        case 'token':
+            return 'token';
+        case 'defaultPageSize':
+            return 'page size';
+    }
+}
+function readable(value) {
+    if (value === undefined || value === '') {
+        return '(not set)';
+    }
+    return String(value);
+}
+function maskToken(token) {
+    if (!token) {
+        return '(not set)';
+    }
+    const last4 = token.slice(-4);
+    return `••••${last4}`;
+}
+function isUserCancel(error) {
+    if (!error || typeof error !== 'object') {
+        return false;
+    }
+    const err = error;
+    return err.name === 'ExitPromptError' || /force closed/i.test(err.message ?? '');
+}
+//# sourceMappingURL=setup-cli.js.map