@bragduck/cli 2.38.1 → 2.38.2

package/dist/bin/bragduck.js

@@ -63,7 +63,7 @@ var init_constants = __esm({
       CLIENT_ID: "kJlsd66DLTnENE8p7Ru2JwqZg1Sie4yZ",
       AUTH_URL: "https://auth.atlassian.com/authorize",
       AUDIENCE: "api.atlassian.com",
-      SCOPES: "read:jira-work read:jira-user read:page:confluence read:confluence-user offline_access read:me",
+      SCOPES: "read:jira-work read:jira-user read:confluence-content.all read:confluence-user offline_access",
       ACCESSIBLE_RESOURCES_URL: "https://api.atlassian.com/oauth/token/accessible-resources",
       API_GATEWAY_URL: "https://api.atlassian.com"
     };
@@ -1891,6 +1891,19 @@ var AtlassianAuthService = class {
       callbackResult = await resultPromise;
     } catch (error) {
       storageService.deleteOAuthState();
+      const rawMessage = error?.message ?? String(error);
+      if (/invalid_scope/i.test(rawMessage)) {
+        throw new AtlassianError(
+          "Atlassian rejected the requested scopes. The app must list all of these classic scopes: read:jira-work, read:jira-user, read:confluence-content.all, read:confluence-user, offline_access.",
+          { originalError: rawMessage }
+        );
+      }
+      if (/redirect_uri|invalid_request/i.test(rawMessage)) {
+        throw new AtlassianError(
+          "Atlassian rejected the redirect URI. All of http://127.0.0.1:8000/callback through http://127.0.0.1:8004/callback must be registered in the Atlassian app callback URL list.",
+          { originalError: rawMessage }
+        );
+      }
       throw error;
     }
     storageService.deleteOAuthState();