@atlassian-dc-mcp/common 0.16.0 → 0.17.1

package/build/setup-cli.js

@@ -0,0 +1,215 @@
+import { confirm as inquirerConfirm, input as inquirerInput, password as inquirerPassword } from '@inquirer/prompts';
+import { buildDefaultRegistry } from './config/registry.js';
+import { getProductRuntimeConfig } from './config/runtime-config.js';
+import { HomeFileSource, getHomeFilePath } from './config/sources/home-file.js';
+import { MacosKeychainSource } from './config/sources/macos-keychain.js';
+const FALLBACK_PAGE_SIZE = 25;
+const DEFAULT_PROMPTS = {
+    input: (opts) => inquirerInput(opts),
+    password: (opts) => inquirerPassword(opts),
+    confirm: (opts) => inquirerConfirm(opts),
+};
+export async function runSetup(product, deps = {}) {
+    const registry = deps.registry ?? buildDefaultRegistry();
+    const log = deps.log ?? ((message) => process.stdout.write(`${message}\n`));
+    const exit = deps.exit ?? ((code) => { process.exit(code); });
+    const prompts = deps.prompts ?? DEFAULT_PROMPTS;
+    registry.initialize();
+    log(`Atlassian DC MCP setup — ${product.id}`);
+    log('');
+    const current = getProductRuntimeConfig(product);
+    printCurrent(log, registry, product, current);
+    let answers;
+    try {
+        answers = await promptForValues(prompts, product, current);
+    }
+    catch (error) {
+        if (isUserCancel(error)) {
+            exit(130);
+            return;
+        }
+        throw error;
+    }
+    const homeFile = requireHomeFile(registry);
+    writeNonSecretFields(registry, product, answers, homeFile, log);
+    const tokenWriter = await writeToken(registry, product, answers.token, homeFile, log, prompts);
+    printSummary(log, product, answers, tokenWriter);
+}
+function requireHomeFile(registry) {
+    const homeFile = registry.getWritableSource((s) => s instanceof HomeFileSource);
+    if (!homeFile) {
+        throw new Error('No writable source available for non-secret fields');
+    }
+    return homeFile;
+}
+function printCurrent(log, registry, product, current) {
+    const keys = ['host', 'apiBasePath', 'token', 'defaultPageSize'];
+    for (const key of keys) {
+        const primary = registry.locate(product, key)[0];
+        const label = displayLabel(key);
+        const displayValue = key === 'token' ? maskToken(current.token) : readable(current[key]);
+        const origin = primary ? `from ${primary.detail ?? primary.sourceId}` : 'not set';
+        log(`Current ${label}: ${displayValue} (${origin})`);
+    }
+    log('');
+}
+async function promptForValues(prompts, product, current) {
+    const host = await prompts.input({
+        message: 'Host (e.g. jira.example.com):',
+        default: current.host ?? '',
+    });
+    const apiBasePath = await prompts.input({
+        message: 'API base path:',
+        default: current.apiBasePath ?? product.defaultApiBasePath ?? '',
+    });
+    const defaultPageSize = await prompts.input({
+        message: 'Default page size:',
+        default: String(current.defaultPageSize ?? FALLBACK_PAGE_SIZE),
+        validate: (raw) => /^\d+$/.test(raw.trim()) && Number.parseInt(raw.trim(), 10) > 0
+            ? true
+            : 'Enter a positive integer',
+    });
+    const token = await promptForToken(prompts, current.token);
+    return { host: host.trim(), apiBasePath: apiBasePath.trim(), defaultPageSize: defaultPageSize.trim(), token };
+}
+async function promptForToken(prompts, existing) {
+    const entered = await prompts.password({ message: 'API token:', mask: '*' });
+    const trimmed = entered.trim();
+    if (trimmed.length > 0) {
+        return trimmed;
+    }
+    if (!existing) {
+        return undefined;
+    }
+    await prompts.confirm({ message: 'Keep existing token?', default: true });
+    return undefined;
+}
+function writeNonSecretFields(registry, product, answers, homeFile, log) {
+    for (const key of ['host', 'apiBasePath', 'defaultPageSize']) {
+        warnIfShadowed(registry, product, key, homeFile, log);
+        const value = answers[key];
+        if (value.length > 0) {
+            homeFile.write(product, key, value);
+        }
+    }
+}
+async function writeToken(registry, product, token, homeFile, log, prompts) {
+    if (!token) {
+        return undefined;
+    }
+    const keychain = registry.getWritableSource((s) => s instanceof MacosKeychainSource);
+    const candidates = [];
+    if (keychain?.isAvailable()) {
+        candidates.push(keychain);
+    }
+    candidates.push(homeFile);
+    warnIfShadowed(registry, product, 'token', candidates[0], log);
+    for (const writer of candidates) {
+        const written = await tryWrite(writer, product, token, log, prompts);
+        if (written) {
+            if (writer instanceof MacosKeychainSource) {
+                homeFile.clear(product, 'token');
+            }
+            return writer;
+        }
+    }
+    throw new Error('No writable source succeeded for token');
+}
+async function tryWrite(writer, product, token, log, prompts) {
+    try {
+        writer.write(product, 'token', token);
+        return true;
+    }
+    catch (error) {
+        const stderr = error.stderr?.toString() ?? '';
+        log(`Failed to write token to ${writer.describe()}: ${error.message}`);
+        if (stderr) {
+            log(stderr.trim());
+        }
+        if (writer instanceof MacosKeychainSource) {
+            const fallback = await prompts.confirm({
+                message: 'Fall back to plaintext home file with mode 0600?',
+                default: false,
+            });
+            return !fallback;
+        }
+        return false;
+    }
+}
+function warnIfShadowed(registry, product, key, target, log) {
+    const shadowing = registry
+        .locate(product, key)
+        .filter((loc) => priorityOf(registry, loc.sourceId) > target.priority);
+    if (shadowing.length === 0) {
+        return;
+    }
+    const envVar = product.envVars[key];
+    for (const loc of shadowing) {
+        if (loc.sourceId === 'process-env') {
+            log(`Warning: process.env[${envVar}] is set — runtime will prefer it over the value you're saving to ${target.describe()}. Unset it to use the new value.`);
+        }
+        else {
+            log(`Warning: ${loc.detail ?? loc.sourceId} provides ${envVar} — runtime will prefer it over the value you're saving to ${target.describe()}.`);
+        }
+    }
+}
+function priorityOf(registry, sourceId) {
+    const match = registry.sources.find((s) => s.id === sourceId);
+    return match?.priority ?? 0;
+}
+function printSummary(log, product, answers, tokenWriter) {
+    log('');
+    log('Saved configuration:');
+    log(`  host: ${answers.host || '(unchanged)'}`);
+    log(`  apiBasePath: ${answers.apiBasePath || '(unchanged)'}`);
+    log(`  defaultPageSize: ${answers.defaultPageSize || '(unchanged)'}`);
+    if (tokenWriter) {
+        log(`  token: ${maskToken(answers.token)} (stored in ${describeWriter(tokenWriter, product)})`);
+    }
+    else {
+        log('  token: (unchanged)');
+    }
+    log(`Home file: ${getHomeFilePath(product)}`);
+}
+function describeWriter(writer, product) {
+    if (writer instanceof MacosKeychainSource) {
+        return `macOS Keychain (service atlassian-dc-mcp, account ${product.id}-token)`;
+    }
+    if (writer instanceof HomeFileSource) {
+        return writer.describeForProduct(product);
+    }
+    return writer.describe();
+}
+function displayLabel(key) {
+    switch (key) {
+        case 'host':
+            return 'host';
+        case 'apiBasePath':
+            return 'API base path';
+        case 'token':
+            return 'token';
+        case 'defaultPageSize':
+            return 'page size';
+    }
+}
+function readable(value) {
+    if (value === undefined || value === '') {
+        return '(not set)';
+    }
+    return String(value);
+}
+function maskToken(token) {
+    if (!token) {
+        return '(not set)';
+    }
+    const last4 = token.slice(-4);
+    return `••••${last4}`;
+}
+function isUserCancel(error) {
+    if (!error || typeof error !== 'object') {
+        return false;
+    }
+    const err = error;
+    return err.name === 'ExitPromptError' || /force closed/i.test(err.message ?? '');
+}
+//# sourceMappingURL=setup-cli.js.map

package/build/setup-cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup-cli.js","sourceRoot":"","sources":["../src/setup-cli.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,IAAI,eAAe,EAAE,KAAK,IAAI,aAAa,EAAE,QAAQ,IAAI,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrH,OAAO,EAAE,oBAAoB,EAAuB,MAAM,sBAAsB,CAAC;AACjF,OAAO,EAAE,uBAAuB,EAAE,MAAM,4BAA4B,CAAC;AAMrE,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAChF,OAAO,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAC;AAEzE,MAAM,kBAAkB,GAAG,EAAE,CAAC;AAsB9B,MAAM,eAAe,GAAiB;IACpC,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,aAAa,CAAC,IAAW,CAAC;IAC3C,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,gBAAgB,CAAC,IAAW,CAAC;IACjD,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,eAAe,CAAC,IAAW,CAAC;CAChD,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,OAA0B,EAAE,OAAkB,EAAE;IAC7E,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,oBAAoB,EAAE,CAAC;IACzD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,OAAe,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,OAAO,IAAI,CAAC,CAAC,CAAC;IACpF,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,IAAY,EAAE,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACtE,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,eAAe,CAAC;IAEhD,QAAQ,CAAC,UAAU,EAAE,CAAC;IAEtB,GAAG,CAAC,4BAA4B,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;IAC9C,GAAG,CAAC,EAAE,CAAC,CAAC;IAER,MAAM,OAAO,GAAG,uBAAuB,CAAC,OAAO,CAAC,CAAC;IACjD,YAAY,CAAC,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IAE9C,IAAI,OAAqB,CAAC;IAC1B,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,eAAe,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IAC7D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC;YACxB,IAAI,CAAC,GAAG,CAAC,CAAC;YACV,OAAO;QACT,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;IAED,MAAM,QAAQ,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;IAC3C,oBAAoB,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC;IAChE,MAAM,WAAW,GAAG,MAAM,UAAU,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,KAAK,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;IAC/F,YAAY,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;AACnD,CAAC;AAED,SAAS,eAAe,CAAC,QAAwB;IAC/C,MAAM,QAAQ,GAAG,QAAQ,CAAC,iBAAiB,CACzC,CAAC,CAAC,EAAuB,EAAE,CAAC,CAAC,YAAY,cAAc,CACxD,CAAC;IACF,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACxE,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,YAAY,CACnB,GAA8B,EAC9B,QAAwB,EACxB,OAA0B,EAC1B,OAAmD;IAEnD,MAAM,IAAI,GAAgB,CAAC,MAAM,EAAE,aAAa,EAAE,OAAO,EAAE,iBAAiB,CAAC,CAAC;IAC9E,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACjD,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;QAChC,MAAM,YAAY,GAAG,GAAG,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;QACzF,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,QAAQ,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QAClF,GAAG,CAAC,WAAW,KAAK,KAAK,YAAY,KAAK,MAAM,GAAG,CAAC,CAAC;IACvD,CAAC;IACD,GAAG,CAAC,EAAE,CAAC,CAAC;AACV,CAAC;AAED,KAAK,UAAU,eAAe,CAC5B,OAAqB,EACrB,OAA0B,EAC1B,OAAmD;IAEnD,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC;QAC/B,OAAO,EAAE,+BAA+B;QACxC,OAAO,EAAE,OAAO,CAAC,IAAI,IAAI,EAAE;KAC5B,CAAC,CAAC;IACH,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC;QACtC,OAAO,EAAE,gBAAgB;QACzB,OAAO,EAAE,OAAO,CAAC,WAAW,IAAI,OAAO,CAAC,kBAAkB,IAAI,EAAE;KACjE,CAAC,CAAC;IACH,MAAM,eAAe,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC;QAC1C,OAAO,EAAE,oBAAoB;QAC7B,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,eAAe,IAAI,kBAAkB,CAAC;QAC9D,QAAQ,EAAE,CAAC,GAAG,EAAE,EAAE,CAChB,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC;YAC7D,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,0BAA0B;KACjC,CAAC,CAAC;IACH,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IAC3D,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,WAAW,EAAE,WAAW,CAAC,IAAI,EAAE,EAAE,eAAe,EAAE,eAAe,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC;AAChH,CAAC;AAED,KAAK,UAAU,cAAc,CAC3B,OAAqB,EACrB,QAA4B;IAE5B,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;IAC7E,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAC/B,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,OAAO,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,sBAAsB,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1E,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,oBAAoB,CAC3B,QAAwB,EACxB,OAA0B,EAC1B,OAAqB,EACrB,QAAwB,EACxB,GAA8B;IAE9B,KAAK,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,aAAa,EAAE,iBAAiB,CAAU,EAAE,CAAC;QACtE,cAAc,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC;QACtD,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;QAC3B,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACrB,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;QACtC,CAAC;IACH,CAAC;AACH,CAAC;AAED,KAAK,UAAU,UAAU,CACvB,QAAwB,EACxB,OAA0B,EAC1B,KAAyB,EACzB,QAAwB,EACxB,GAA8B,EAC9B,OAAqB;IAErB,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,QAAQ,GAAG,QAAQ,CAAC,iBAAiB,CACzC,CAAC,CAAC,EAA4B,EAAE,CAAC,CAAC,YAAY,mBAAmB,CAClE,CAAC;IACF,MAAM,UAAU,GAAqB,EAAE,CAAC;IACxC,IAAI,QAAQ,EAAE,WAAW,EAAE,EAAE,CAAC;QAC5B,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC5B,CAAC;IACD,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAE1B,cAAc,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAE/D,KAAK,MAAM,MAAM,IAAI,UAAU,EAAE,CAAC;QAChC,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;QACrE,IAAI,OAAO,EAAE,CAAC;YACZ,IAAI,MAAM,YAAY,mBAAmB,EAAE,CAAC;gBAC1C,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACnC,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC;IACH,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;AAC5D,CAAC;AAED,KAAK,UAAU,QAAQ,CACrB,MAAsB,EACtB,OAA0B,EAC1B,KAAa,EACb,GAA8B,EAC9B,OAAqB;IAErB,IAAI,CAAC;QACH,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;QACtC,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,MAAM,GAAI,KAAsC,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;QAChF,GAAG,CAAC,4BAA4B,MAAM,CAAC,QAAQ,EAAE,KAAM,KAAe,CAAC,OAAO,EAAE,CAAC,CAAC;QAClF,IAAI,MAAM,EAAE,CAAC;YACX,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QACrB,CAAC;QACD,IAAI,MAAM,YAAY,mBAAmB,EAAE,CAAC;YAC1C,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC;gBACrC,OAAO,EAAE,kDAAkD;gBAC3D,OAAO,EAAE,KAAK;aACf,CAAC,CAAC;YACH,OAAO,CAAC,QAAQ,CAAC;QACnB,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CACrB,QAAwB,EACxB,OAA0B,EAC1B,GAAc,EACd,MAAsB,EACtB,GAA8B;IAE9B,MAAM,SAAS,GAAG,QAAQ;SACvB,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC;SACpB,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC,QAAQ,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;IACzE,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,OAAO;IACT,CAAC;IACD,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACpC,KAAK,MAAM,GAAG,IAAI,SAAS,EAAE,CAAC;QAC5B,IAAI,GAAG,CAAC,QAAQ,KAAK,aAAa,EAAE,CAAC;YACnC,GAAG,CAAC,wBAAwB,MAAM,qEAAqE,MAAM,CAAC,QAAQ,EAAE,kCAAkC,CAAC,CAAC;QAC9J,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,YAAY,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,QAAQ,aAAa,MAAM,6DAA6D,MAAM,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QAClJ,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,QAAwB,EAAE,QAAgB;IAC5D,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC;IAC9D,OAAO,KAAK,EAAE,QAAQ,IAAI,CAAC,CAAC;AAC9B,CAAC;AAED,SAAS,YAAY,CACnB,GAA8B,EAC9B,OAA0B,EAC1B,OAAqB,EACrB,WAAuC;IAEvC,GAAG,CAAC,EAAE,CAAC,CAAC;IACR,GAAG,CAAC,sBAAsB,CAAC,CAAC;IAC5B,GAAG,CAAC,WAAW,OAAO,CAAC,IAAI,IAAI,aAAa,EAAE,CAAC,CAAC;IAChD,GAAG,CAAC,kBAAkB,OAAO,CAAC,WAAW,IAAI,aAAa,EAAE,CAAC,CAAC;IAC9D,GAAG,CAAC,sBAAsB,OAAO,CAAC,eAAe,IAAI,aAAa,EAAE,CAAC,CAAC;IACtE,IAAI,WAAW,EAAE,CAAC;QAChB,GAAG,CAAC,YAAY,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,eAAe,cAAc,CAAC,WAAW,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;IAClG,CAAC;SAAM,CAAC;QACN,GAAG,CAAC,sBAAsB,CAAC,CAAC;IAC9B,CAAC;IACD,GAAG,CAAC,cAAc,eAAe,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;AAChD,CAAC;AAED,SAAS,cAAc,CAAC,MAAsB,EAAE,OAA0B;IACxE,IAAI,MAAM,YAAY,mBAAmB,EAAE,CAAC;QAC1C,OAAO,qDAAqD,OAAO,CAAC,EAAE,SAAS,CAAC;IAClF,CAAC;IACD,IAAI,MAAM,YAAY,cAAc,EAAE,CAAC;QACrC,OAAO,MAAM,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAC5C,CAAC;IACD,OAAO,MAAM,CAAC,QAAQ,EAAE,CAAC;AAC3B,CAAC;AAED,SAAS,YAAY,CAAC,GAAc;IAClC,QAAQ,GAAG,EAAE,CAAC;QACZ,KAAK,MAAM;YACT,OAAO,MAAM,CAAC;QAChB,KAAK,aAAa;YAChB,OAAO,eAAe,CAAC;QACzB,KAAK,OAAO;YACV,OAAO,OAAO,CAAC;QACjB,KAAK,iBAAiB;YACpB,OAAO,WAAW,CAAC;IACvB,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,KAAkC;IAClD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;QACxC,OAAO,WAAW,CAAC;IACrB,CAAC;IACD,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;AACvB,CAAC;AAED,SAAS,SAAS,CAAC,KAAyB;IAC1C,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,WAAW,CAAC;IACrB,CAAC;IACD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9B,OAAO,OAAO,KAAK,EAAE,CAAC;AACxB,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACxC,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,GAAG,GAAG,KAA4C,CAAC;IACzD,OAAO,GAAG,CAAC,IAAI,KAAK,iBAAiB,IAAI,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;AACnF,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@atlassian-dc-mcp/common",
-  "version": "0.16.0",
+  "version": "0.17.1",
   "main": "build/index.js",
   "type": "module",
   "private": false,
@@ -26,9 +26,10 @@
     "dev": "nodemon --exec ts-node --esm src/index.ts"
   },
   "dependencies": {
+    "@inquirer/prompts": "7.10.1",
     "@modelcontextprotocol/sdk": "^1.27.1",
-    "dotenv": "^16.4.7",
-    "zod": "^3.24.2"
+    "dotenv": "16.4.7",
+    "zod": "3.25.76"
   },
   "devDependencies": {
     "@types/node": "^22.13.5",
@@ -38,5 +39,5 @@
   "publishConfig": {
     "access": "public"
   },
-  "gitHead": "eb8394fc8317b2d986b03de9853edf47aa77566a"
+  "gitHead": "eb8dccc2a1ba6eebf65925209f23ed269fec3550"
 }

package/src/__tests__/runtime-config.test.ts

@@ -1,20 +1,66 @@
 import fs from 'node:fs';
 import os from 'node:os';
 import path from 'node:path';
-
-describe('runtime config loader', () => {
+import type { ProductDefinition } from '../config/source.js';
+
+const JIRA: ProductDefinition = {
+  id: 'jira',
+  envVars: {
+    host: 'JIRA_HOST',
+    apiBasePath: 'JIRA_API_BASE_PATH',
+    token: 'JIRA_API_TOKEN',
+    defaultPageSize: 'JIRA_DEFAULT_PAGE_SIZE',
+  },
+};
+
+const CONFLUENCE: ProductDefinition = {
+  id: 'confluence',
+  envVars: {
+    host: 'CONFLUENCE_HOST',
+    apiBasePath: 'CONFLUENCE_API_BASE_PATH',
+    token: 'CONFLUENCE_API_TOKEN',
+    defaultPageSize: 'CONFLUENCE_DEFAULT_PAGE_SIZE',
+  },
+};
+
+const BITBUCKET: ProductDefinition = {
+  id: 'bitbucket',
+  envVars: {
+    host: 'BITBUCKET_HOST',
+    apiBasePath: 'BITBUCKET_API_BASE_PATH',
+    token: 'BITBUCKET_API_TOKEN',
+    defaultPageSize: 'BITBUCKET_DEFAULT_PAGE_SIZE',
+  },
+};
+
+describe('runtime config facade', () => {
   const originalEnv = process.env;
   let tempDir: string;
+  let tempHome: string;
+  let homedirSpy: jest.SpyInstance;
 
   beforeEach(() => {
     jest.resetModules();
     process.env = { ...originalEnv };
     delete process.env.ATLASSIAN_DC_MCP_CONFIG_FILE;
+    delete process.env.JIRA_HOST;
+    delete process.env.JIRA_API_TOKEN;
+    delete process.env.JIRA_API_BASE_PATH;
+    delete process.env.JIRA_DEFAULT_PAGE_SIZE;
+    delete process.env.CONFLUENCE_HOST;
+    delete process.env.CONFLUENCE_API_TOKEN;
+    delete process.env.CONFLUENCE_DEFAULT_PAGE_SIZE;
+    delete process.env.BITBUCKET_HOST;
+    delete process.env.BITBUCKET_API_TOKEN;
     tempDir = fs.mkdtempSync(path.join(os.tmpdir(), 'atlassian-dc-mcp-config-'));
+    tempHome = fs.mkdtempSync(path.join(os.tmpdir(), 'atlassian-dc-mcp-home-'));
+    homedirSpy = jest.spyOn(os, 'homedir').mockReturnValue(tempHome);
   });
 
   afterEach(() => {
+    homedirSpy.mockRestore();
     fs.rmSync(tempDir, { recursive: true, force: true });
+    fs.rmSync(tempHome, { recursive: true, force: true });
   });
 
   afterAll(() => {
@@ -26,11 +72,9 @@ describe('runtime config loader', () => {
     fs.writeFileSync(sharedConfigPath, 'JIRA_HOST=file-host\nJIRA_API_TOKEN=file-token\n');
     process.env.ATLASSIAN_DC_MCP_CONFIG_FILE = sharedConfigPath;
 
-    const { getProductRuntimeConfig, initializeRuntimeConfig } = await import('../runtime-config.js');
-
+    const { getProductRuntimeConfig, initializeRuntimeConfig } = await import('../index.js');
     initializeRuntimeConfig({ cwd: tempDir });
-
-    expect(getProductRuntimeConfig('jira')).toEqual({
+    expect(getProductRuntimeConfig(JIRA)).toEqual({
       host: 'file-host',
       apiBasePath: undefined,
       token: 'file-token',
@@ -40,9 +84,7 @@ describe('runtime config loader', () => {
 
   it('throws when the explicit shared config file is missing', async () => {
     process.env.ATLASSIAN_DC_MCP_CONFIG_FILE = path.join(tempDir, 'missing.env');
-
-    const { initializeRuntimeConfig } = await import('../runtime-config.js');
-
+    const { initializeRuntimeConfig } = await import('../index.js');
     expect(() => initializeRuntimeConfig({ cwd: tempDir })).toThrow(
       `ATLASSIAN_DC_MCP_CONFIG_FILE points to a missing file: ${path.join(tempDir, 'missing.env')}`,
     );
@@ -50,26 +92,22 @@ describe('runtime config loader', () => {
 
   it('requires an absolute shared config file path', async () => {
     process.env.ATLASSIAN_DC_MCP_CONFIG_FILE = 'relative/shared.env';
-
-    const { initializeRuntimeConfig } = await import('../runtime-config.js');
-
+    const { initializeRuntimeConfig } = await import('../index.js');
     expect(() => initializeRuntimeConfig({ cwd: tempDir })).toThrow(
       'ATLASSIAN_DC_MCP_CONFIG_FILE must be an absolute path: relative/shared.env',
     );
   });
 
-  it('keeps environment variables higher priority than file values', async () => {
+  it('keeps env variables higher priority than file values', async () => {
     const sharedConfigPath = path.join(tempDir, 'shared.env');
     fs.writeFileSync(sharedConfigPath, 'JIRA_HOST=file-host\nJIRA_API_TOKEN=file-token\nJIRA_DEFAULT_PAGE_SIZE=50\n');
     process.env.ATLASSIAN_DC_MCP_CONFIG_FILE = sharedConfigPath;
     process.env.JIRA_API_TOKEN = 'env-token';
     process.env.JIRA_DEFAULT_PAGE_SIZE = '10';
 
-    const { getProductRuntimeConfig, initializeRuntimeConfig } = await import('../runtime-config.js');
-
+    const { getProductRuntimeConfig, initializeRuntimeConfig } = await import('../index.js');
     initializeRuntimeConfig({ cwd: tempDir });
-
-    expect(getProductRuntimeConfig('jira')).toEqual({
+    expect(getProductRuntimeConfig(JIRA)).toEqual({
       host: 'file-host',
       apiBasePath: undefined,
       token: 'env-token',
@@ -77,17 +115,14 @@ describe('runtime config loader', () => {
     });
   });
 
-  it('falls back to the cwd .env file when no explicit shared file is configured', async () => {
+  it('falls back to cwd/.env when no explicit shared file is configured', async () => {
     fs.writeFileSync(
       path.join(tempDir, '.env'),
       'CONFLUENCE_HOST=cwd-host\nCONFLUENCE_API_TOKEN=cwd-token\nCONFLUENCE_DEFAULT_PAGE_SIZE=30\n',
     );
-
-    const { getProductRuntimeConfig, initializeRuntimeConfig } = await import('../runtime-config.js');
-
+    const { getProductRuntimeConfig, initializeRuntimeConfig } = await import('../index.js');
     initializeRuntimeConfig({ cwd: tempDir });
-
-    expect(getProductRuntimeConfig('confluence')).toEqual({
+    expect(getProductRuntimeConfig(CONFLUENCE)).toEqual({
       host: 'cwd-host',
       apiBasePath: undefined,
       token: 'cwd-token',
@@ -102,15 +137,28 @@ describe('runtime config loader', () => {
     fs.utimesSync(sharedConfigPath, initialTime, initialTime);
     process.env.ATLASSIAN_DC_MCP_CONFIG_FILE = sharedConfigPath;
 
-    const { getProductRuntimeConfig, initializeRuntimeConfig } = await import('../runtime-config.js');
-
+    const { getProductRuntimeConfig, initializeRuntimeConfig } = await import('../index.js');
     initializeRuntimeConfig({ cwd: tempDir });
-    expect(getProductRuntimeConfig('bitbucket').token).toBe('token-a');
+    expect(getProductRuntimeConfig(BITBUCKET).token).toBe('token-a');
 
     fs.writeFileSync(sharedConfigPath, 'BITBUCKET_HOST=file-host\nBITBUCKET_API_TOKEN=token-b\n');
     const updatedTime = new Date('2026-01-01T00:00:01.000Z');
     fs.utimesSync(sharedConfigPath, updatedTime, updatedTime);
 
-    expect(getProductRuntimeConfig('bitbucket').token).toBe('token-b');
+    expect(getProductRuntimeConfig(BITBUCKET).token).toBe('token-b');
+  });
+
+  it('reads the home file when env and env-file are empty', async () => {
+    fs.mkdirSync(path.join(tempHome, '.atlassian-dc-mcp'), { recursive: true });
+    fs.writeFileSync(
+      path.join(tempHome, '.atlassian-dc-mcp', 'jira.env'),
+      'JIRA_HOST=home-host\nJIRA_API_TOKEN=home-token\n',
+      { mode: 0o600 },
+    );
+    const { getProductRuntimeConfig, initializeRuntimeConfig } = await import('../index.js');
+    initializeRuntimeConfig({ cwd: tempDir });
+    const config = getProductRuntimeConfig(JIRA);
+    expect(config.host).toBe('home-host');
+    expect(config.token).toBe('home-token');
   });
 });

package/src/__tests__/setup-cli.test.ts

@@ -0,0 +1,175 @@
+import { DefaultConfigRegistry } from '../config/registry.js';
+import { HomeFileSource } from '../config/sources/home-file.js';
+import { MacosKeychainSource, type KeychainDeps } from '../config/sources/macos-keychain.js';
+import { ProcessEnvSource } from '../config/sources/process-env.js';
+import { runSetup, type SetupPrompts } from '../setup-cli.js';
+import type { ConfigKey, ProductDefinition } from '../config/source.js';
+
+const JIRA: ProductDefinition = {
+  id: 'jira',
+  envVars: {
+    host: 'JIRA_HOST',
+    apiBasePath: 'JIRA_API_BASE_PATH',
+    token: 'JIRA_API_TOKEN',
+    defaultPageSize: 'JIRA_DEFAULT_PAGE_SIZE',
+  },
+  defaultApiBasePath: '/rest/api/2',
+};
+
+class FakeKeychain extends MacosKeychainSource {
+  available = true;
+  store: string | undefined;
+  writeCalls = 0;
+  clearCalls = 0;
+  constructor() {
+    const deps: Partial<KeychainDeps> = {
+      execFileSync: (() => '') as unknown as KeychainDeps['execFileSync'],
+      existsSync: () => true,
+      getPlatform: () => 'darwin' as NodeJS.Platform,
+    };
+    super(deps);
+  }
+  override isAvailable(): boolean {
+    return this.available;
+  }
+  override read(_p: ProductDefinition, key: ConfigKey): string | undefined {
+    return key === 'token' ? this.store : undefined;
+  }
+  override write(_p: ProductDefinition, _k: ConfigKey, v: string): void {
+    this.writeCalls++;
+    this.store = v;
+  }
+  override clear(_p: ProductDefinition, _k: ConfigKey): void {
+    this.clearCalls++;
+    this.store = undefined;
+  }
+}
+
+class FakeHomeFile extends HomeFileSource {
+  values: Record<string, Partial<Record<ConfigKey, string>>> = {
+    jira: {},
+    confluence: {},
+    bitbucket: {},
+  };
+  writes: Array<[string, ConfigKey, string]> = [];
+  clears: Array<[string, ConfigKey]> = [];
+  override read(product: ProductDefinition, key: ConfigKey): string | undefined {
+    return this.values[product.id]?.[key];
+  }
+  override write(product: ProductDefinition, key: ConfigKey, value: string): void {
+    this.values[product.id] = this.values[product.id] ?? {};
+    this.values[product.id][key] = value;
+    this.writes.push([product.id, key, value]);
+  }
+  override clear(product: ProductDefinition, key: ConfigKey): void {
+    if (this.values[product.id]) {
+      delete this.values[product.id][key];
+    }
+    this.clears.push([product.id, key]);
+  }
+  override describeForProduct(product: ProductDefinition): string {
+    return `home-file-fake(${product.id})`;
+  }
+}
+
+function makeRegistry(keychain: FakeKeychain, home: FakeHomeFile) {
+  return new DefaultConfigRegistry([new ProcessEnvSource(), home, keychain]);
+}
+
+function makePrompts(overrides: Partial<SetupPrompts> = {}): SetupPrompts {
+  return {
+    input: async (opts) => opts.default ?? '',
+    password: async () => '',
+    confirm: async (opts) => opts.default ?? false,
+    ...overrides,
+  };
+}
+
+describe('runSetup', () => {
+  const originalEnv = process.env;
+  let keychain: FakeKeychain;
+  let home: FakeHomeFile;
+  let logs: string[];
+
+  beforeEach(() => {
+    process.env = { ...originalEnv };
+    delete process.env.JIRA_API_TOKEN;
+    delete process.env.JIRA_HOST;
+    keychain = new FakeKeychain();
+    home = new FakeHomeFile();
+    logs = [];
+  });
+
+  afterAll(() => {
+    process.env = originalEnv;
+  });
+
+  it('writes the token to keychain first on darwin and clears home file token', async () => {
+    const prompts = makePrompts({
+      input: async (opts) => {
+        if (opts.message.startsWith('Host')) return 'j-host';
+        if (opts.message.startsWith('API base path')) return '/rest/api/2';
+        return '25';
+      },
+      password: async () => 'secret',
+    });
+    const registry = makeRegistry(keychain, home);
+    await runSetup(JIRA, { registry, log: (m) => logs.push(m), exit: () => undefined, prompts });
+
+    expect(keychain.writeCalls).toBe(1);
+    expect(keychain.store).toBe('secret');
+    expect(home.clears).toContainEqual(['jira', 'token']);
+    expect(home.values.jira.host).toBe('j-host');
+  });
+
+  it('falls back to home file when keychain is unavailable', async () => {
+    keychain.available = false;
+    const prompts = makePrompts({
+      input: async (opts) => {
+        if (opts.message.startsWith('Host')) return 'j-host';
+        if (opts.message.startsWith('API base path')) return '/rest/api/2';
+        return '25';
+      },
+      password: async () => 'secret',
+    });
+    const registry = makeRegistry(keychain, home);
+    await runSetup(JIRA, { registry, log: (m) => logs.push(m), exit: () => undefined, prompts });
+
+    expect(keychain.writeCalls).toBe(0);
+    const tokenWrites = home.writes.filter(([, k]) => k === 'token');
+    expect(tokenWrites).toHaveLength(1);
+  });
+
+  it('prints shadowing warning when env var is set higher than target', async () => {
+    process.env.JIRA_API_TOKEN = 'shadow';
+    const prompts = makePrompts({
+      input: async (opts) => {
+        if (opts.message.startsWith('Host')) return 'j-host';
+        if (opts.message.startsWith('API base path')) return '/rest/api/2';
+        return '25';
+      },
+      password: async () => 'secret',
+    });
+    const registry = makeRegistry(keychain, home);
+    await runSetup(JIRA, { registry, log: (m) => logs.push(m), exit: () => undefined, prompts });
+
+    expect(logs.some((l) => l.includes('JIRA_API_TOKEN') && l.includes('Warning'))).toBe(true);
+  });
+
+  it('exits 130 on SIGINT cancellation before any write', async () => {
+    const exitErr: Error & { name: string } = Object.assign(new Error('closed'), {
+      name: 'ExitPromptError',
+    });
+    const prompts = makePrompts({
+      input: async () => {
+        throw exitErr;
+      },
+    });
+    const exitFn = jest.fn();
+    const registry = makeRegistry(keychain, home);
+    await runSetup(JIRA, { registry, log: (m) => logs.push(m), exit: exitFn, prompts });
+    expect(exitFn).toHaveBeenCalledWith(130);
+    expect(keychain.writeCalls).toBe(0);
+    expect(home.writes).toHaveLength(0);
+  });
+});