@gitkraken/core-gitlens 0.5.116 → 0.7.0

package/dist/plus/integrations/authentication/integrationAuthenticationService.js

@@ -1,126 +1,102 @@
-var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
+import { debug } from "../../../utils/decorators/log.js";
+import __decorate from "../../../_virtual/@oxc-project+runtime/helpers/esm/decorate.js";
+import { gate } from "../../../utils/decorators/gate.js";
+import "../constants.js";
+import { supportedIntegrationIds } from "../utils/integration.utils.js";
+import { CloudIntegrationAuthenticationProvider } from "./integrationAuthenticationProvider.js";
+//#region ../plus/integrations/src/authentication/integrationAuthenticationService.ts
+var IntegrationAuthenticationService = class {
+	configuredIntegrationService;
+	ctx;
+	getIntegrationService;
+	cloudIntegrations;
+	providers = /* @__PURE__ */ new Map();
+	constructor(configuredIntegrationService, ctx, getIntegrationService, cloudIntegrations) {
+		this.configuredIntegrationService = configuredIntegrationService;
+		this.ctx = ctx;
+		this.getIntegrationService = getIntegrationService;
+		this.cloudIntegrations = cloudIntegrations;
+	}
+	dispose() {
+		this.providers.forEach((p) => p.dispose());
+		this.providers.clear();
+	}
+	/**
+	* Initiates the cloud-integration connect flow on the owning service. Cloud auth providers call
+	* this when they need a session that doesn't exist yet (see
+	* {@link CloudIntegrationAuthenticationProvider}).
+	*/
+	connectCloudIntegrations(connect, source) {
+		return this.getIntegrationService().connectCloudIntegrations(connect, source);
+	}
+	/**
+	* Resolves the connected git-host integration for a `GitRemote`, via the owning service. Lets
+	* package-internal callers (e.g. the Bitbucket provider) resolve a remote's integration without a
+	* host round-trip.
+	*/
+	getByRemote(remote) {
+		return this.getIntegrationService().getByRemote(remote);
+	}
+	/** Resolves the per-integration `ignoreSSLErrors` flag via the owning service (host-config-backed). */
+	ignoreSSLErrors(integration) {
+		return this.getIntegrationService().ignoreSSLErrors(integration);
+	}
+	/** The package-built per-provider API clients, via the owning service (built once + memoized there). */
+	get apis() {
+		return this.getIntegrationService().apis;
+	}
+	async get(providerId) {
+		return this.ensureProvider(providerId);
+	}
+	async reset() {
+		await Promise.allSettled(supportedIntegrationIds.map(async (providerId) => (await this.ensureProvider(providerId)).deleteAllSessions()));
+	}
+	supports(providerId) {
+		switch (providerId) {
+			case "azureDevOps":
+			case "azure-devops-server":
+			case "bitbucket":
+			case "gitlab":
+			case "jira":
+			case "jira-server":
+			case "linear":
+			case "trello":
+			case "github": return true;
+			default: return false;
+		}
+	}
+	async ensureProvider(providerId) {
+		let provider = this.providers.get(providerId);
+		if (provider != null) return provider;
+		const hostProvider = await this.ctx.hooks?.createAuthenticationProvider?.({ id: providerId });
+		if (hostProvider != null) {
+			this.providers.set(providerId, hostProvider);
+			return hostProvider;
+		}
+		switch (providerId) {
+			case "github":
+			case "cloud-github-enterprise":
+			case "gitlab":
+			case "cloud-gitlab-self-hosted":
+			case "azureDevOps":
+			case "azure-devops-server":
+			case "bitbucket":
+			case "bitbucket-server":
+			case "jira":
+			case "jira-server":
+			case "linear":
+			case "trello":
+				provider = new CloudIntegrationAuthenticationProvider(this, this.configuredIntegrationService, providerId);
+				break;
+			default: throw new Error(`No authentication provider registered for integration '${String(providerId)}'`);
+		}
+		this.providers.set(providerId, provider);
+		return provider;
+	}
 };
-import { gate } from '../../../utils/decorators/gate.js';
-import { debug } from '../../../utils/decorators/log.js';
-import { GitCloudHostIntegrationId, GitSelfManagedHostIntegrationId, IssuesCloudHostIntegrationId, } from '../constants.js';
-import { supportedIntegrationIds } from '../utils/integration.utils.js';
-import { CloudIntegrationAuthenticationProvider } from './integrationAuthenticationProvider.js';
-export class IntegrationAuthenticationService {
-    configuredIntegrationService;
-    ctx;
-    getIntegrationService;
-    cloudIntegrations;
-    providers = new Map();
-    constructor(configuredIntegrationService, ctx, 
-    /**
-     * Lazy accessor for the owning {@link IntegrationService}. Injected by the composition root
-     * ({@link createIntegrationManager}) to break the auth↔service construction cycle without a
-     * mutable setter or a host round-trip; only resolved at runtime (long after construction).
-     */
-    getIntegrationService, 
-    /** The package's cloud token-exchange client, constructed by the composition root. */
-    cloudIntegrations) {
-        this.configuredIntegrationService = configuredIntegrationService;
-        this.ctx = ctx;
-        this.getIntegrationService = getIntegrationService;
-        this.cloudIntegrations = cloudIntegrations;
-    }
-    dispose() {
-        this.providers.forEach(p => p.dispose());
-        this.providers.clear();
-    }
-    /**
-     * Initiates the cloud-integration connect flow on the owning service. Cloud auth providers call
-     * this when they need a session that doesn't exist yet (see
-     * {@link CloudIntegrationAuthenticationProvider}).
-     */
-    connectCloudIntegrations(connect, source) {
-        return this.getIntegrationService().connectCloudIntegrations(connect, source);
-    }
-    /**
-     * Resolves the connected git-host integration for a `GitRemote`, via the owning service. Lets
-     * package-internal callers (e.g. the Bitbucket provider) resolve a remote's integration without a
-     * host round-trip.
-     */
-    getByRemote(remote) {
-        return this.getIntegrationService().getByRemote(remote);
-    }
-    /** Resolves the per-integration `ignoreSSLErrors` flag via the owning service (host-config-backed). */
-    ignoreSSLErrors(integration) {
-        return this.getIntegrationService().ignoreSSLErrors(integration);
-    }
-    /** The package-built per-provider API clients, via the owning service (built once + memoized there). */
-    get apis() {
-        return this.getIntegrationService().apis;
-    }
-    async get(providerId) {
-        return this.ensureProvider(providerId);
-    }
-    async reset() {
-        // TODO: This really isn't ideal, since it will only work for "cloud" providers as we won't have any more specific descriptors
-        await Promise.allSettled(supportedIntegrationIds.map(async (providerId) => (await this.ensureProvider(providerId)).deleteAllSessions()));
-    }
-    supports(providerId) {
-        // Linear and Trello are cloud-backed issue integrations (same as Jira): `ensureProvider` registers a
-        // cloud auth provider for them, so a disconnect must offer to sign out of the cloud token too —
-        // otherwise the backend token and configured connection survive the disable.
-        switch (providerId) {
-            case GitCloudHostIntegrationId.AzureDevOps:
-            case GitSelfManagedHostIntegrationId.AzureDevOpsServer:
-            case GitCloudHostIntegrationId.Bitbucket:
-            case GitCloudHostIntegrationId.GitLab:
-            case IssuesCloudHostIntegrationId.Jira:
-            case IssuesCloudHostIntegrationId.Linear:
-            case IssuesCloudHostIntegrationId.Trello:
-            case GitCloudHostIntegrationId.GitHub:
-                return true;
-            default:
-                return false;
-        }
-    }
-    async ensureProvider(providerId) {
-        let provider = this.providers.get(providerId);
-        if (provider != null)
-            return provider;
-        // Optional consumer override for custom auth (e.g. a manual-token provider). GitLens omits it —
-        // the package constructs its own cloud providers below (so GitLens's cloud auth needs no host hook).
-        const hostProvider = await this.ctx.hooks?.createAuthenticationProvider?.({
-            id: providerId,
-        });
-        if (hostProvider != null) {
-            this.providers.set(providerId, hostProvider);
-            return hostProvider;
-        }
-        // Every cloud integration shares one provider, parameterized by id (cloud-only).
-        switch (providerId) {
-            case GitCloudHostIntegrationId.GitHub:
-            case GitSelfManagedHostIntegrationId.CloudGitHubEnterprise:
-            case GitCloudHostIntegrationId.GitLab:
-            case GitSelfManagedHostIntegrationId.CloudGitLabSelfHosted:
-            case GitCloudHostIntegrationId.AzureDevOps:
-            case GitSelfManagedHostIntegrationId.AzureDevOpsServer:
-            case GitCloudHostIntegrationId.Bitbucket:
-            case GitSelfManagedHostIntegrationId.BitbucketServer:
-            case IssuesCloudHostIntegrationId.Jira:
-            case IssuesCloudHostIntegrationId.Linear:
-            case IssuesCloudHostIntegrationId.Trello:
-                provider = new CloudIntegrationAuthenticationProvider(this, this.configuredIntegrationService, providerId);
-                break;
-            default:
-                throw new Error(`No authentication provider registered for integration '${String(providerId)}'`);
-        }
-        this.providers.set(providerId, provider);
-        return provider;
-    }
-}
-__decorate([
-    debug()
-], IntegrationAuthenticationService.prototype, "reset", null);
-__decorate([
-    gate()
-], IntegrationAuthenticationService.prototype, "ensureProvider", null);
+__decorate([debug()], IntegrationAuthenticationService.prototype, "reset", null);
+__decorate([gate()], IntegrationAuthenticationService.prototype, "ensureProvider", null);
+//#endregion
+export { IntegrationAuthenticationService };
+
 //# sourceMappingURL=integrationAuthenticationService.js.map

package/dist/plus/integrations/authentication/integrationAuthenticationService.js.map

@@ -1 +1 @@
-{"version":3,"file":"integrationAuthenticationService.js","sourceRoot":"","sources":["../../../../src/plus/integrations/authentication/integrationAuthenticationService.ts"],"names":[],"mappings":";;;;;;AACA,OAAO,EAAE,IAAI,EAAE,MAAM,mCAAmC,CAAC;AACzD,OAAO,EAAE,KAAK,EAAE,MAAM,kCAAkC,CAAC;AAGzD,OAAO,EACN,yBAAyB,EACzB,+BAA+B,EAC/B,4BAA4B,GAC5B,MAAM,iBAAiB,CAAC;AAMzB,OAAO,EAAE,uBAAuB,EAAE,MAAM,+BAA+B,CAAC;AAIxE,OAAO,EAAE,sCAAsC,EAAE,MAAM,wCAAwC,CAAC;AAEhG,MAAM,OAAO,gCAAgC;IAI1B,4BAA4B;IACpC,GAAG;IAMK,qBAAqB;IAE7B,iBAAiB;IAZV,SAAS,GAAG,IAAI,GAAG,EAAqD,CAAC;IAE1F,YACkB,4BAA0D,EAClE,GAA8B;IACvC;;;;OAIG;IACc,qBAA+C;IAChE,sFAAsF;IAC7E,iBAA0C;4CATlC,4BAA4B;mBACpC,GAAG;qCAMK,qBAAqB;iCAE7B,iBAAiB;IACxB,CAAC;IAEJ,OAAO;QACN,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;QACzC,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;IACxB,CAAC;IAED;;;;OAIG;IACH,wBAAwB,CACvB,OAA6G,EAC7G,MAAe;QAEf,OAAO,IAAI,CAAC,qBAAqB,EAAE,CAAC,wBAAwB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC/E,CAAC;IAED;;;;OAIG;IACH,WAAW,CAAC,MAAiB;QAC5B,OAAO,IAAI,CAAC,qBAAqB,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IACzD,CAAC;IAED,uGAAuG;IACvG,eAAe,CAAC,WAAyE;QACxF,OAAO,IAAI,CAAC,qBAAqB,EAAE,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC;IAClE,CAAC;IAED,wGAAwG;IACxG,IAAI,IAAI;QACP,OAAO,IAAI,CAAC,qBAAqB,EAAE,CAAC,IAAI,CAAC;IAC1C,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,UAA0B;QACnC,OAAO,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC;IACxC,CAAC;IAGK,AAAN,KAAK,CAAC,KAAK;QACV,8HAA8H;QAC9H,MAAM,OAAO,CAAC,UAAU,CACvB,uBAAuB,CAAC,GAAG,CAAC,KAAK,EAAC,UAAU,EAAC,EAAE,CAC9C,CAAC,MAAM,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC,CAAC,iBAAiB,EAAE,CAC3D,CACD,CAAC;IACH,CAAC;IAED,QAAQ,CAAC,UAAkB;QAC1B,qGAAqG;QACrG,gGAAgG;QAChG,6EAA6E;QAC7E,QAAQ,UAAU,EAAE,CAAC;YACpB,KAAK,yBAAyB,CAAC,WAAW,CAAC;YAC3C,KAAK,+BAA+B,CAAC,iBAAiB,CAAC;YACvD,KAAK,yBAAyB,CAAC,SAAS,CAAC;YACzC,KAAK,yBAAyB,CAAC,MAAM,CAAC;YACtC,KAAK,4BAA4B,CAAC,IAAI,CAAC;YACvC,KAAK,4BAA4B,CAAC,MAAM,CAAC;YACzC,KAAK,4BAA4B,CAAC,MAAM,CAAC;YACzC,KAAK,yBAAyB,CAAC,MAAM;gBACpC,OAAO,IAAI,CAAC;YACb;gBACC,OAAO,KAAK,CAAC;QACf,CAAC;IACF,CAAC;IAGa,AAAN,KAAK,CAAC,cAAc,CAAC,UAA0B;QACtD,IAAI,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC9C,IAAI,QAAQ,IAAI,IAAI;YAAE,OAAO,QAAQ,CAAC;QAEtC,gGAAgG;QAChG,qGAAqG;QACrG,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,4BAA4B,EAAE,CAAC;YACzE,EAAE,EAAE,UAAU;SACd,CAAC,CAAC;QACH,IAAI,YAAY,IAAI,IAAI,EAAE,CAAC;YAC1B,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;YAC7C,OAAO,YAAY,CAAC;QACrB,CAAC;QAED,iFAAiF;QACjF,QAAQ,UAAU,EAAE,CAAC;YACpB,KAAK,yBAAyB,CAAC,MAAM,CAAC;YACtC,KAAK,+BAA+B,CAAC,qBAAqB,CAAC;YAC3D,KAAK,yBAAyB,CAAC,MAAM,CAAC;YACtC,KAAK,+BAA+B,CAAC,qBAAqB,CAAC;YAC3D,KAAK,yBAAyB,CAAC,WAAW,CAAC;YAC3C,KAAK,+BAA+B,CAAC,iBAAiB,CAAC;YACvD,KAAK,yBAAyB,CAAC,SAAS,CAAC;YACzC,KAAK,+BAA+B,CAAC,eAAe,CAAC;YACrD,KAAK,4BAA4B,CAAC,IAAI,CAAC;YACvC,KAAK,4BAA4B,CAAC,MAAM,CAAC;YACzC,KAAK,4BAA4B,CAAC,MAAM;gBACvC,QAAQ,GAAG,IAAI,sCAAsC,CACpD,IAAI,EACJ,IAAI,CAAC,4BAA4B,EACjC,UAAU,CACV,CAAC;gBACF,MAAM;YACP;gBACC,MAAM,IAAI,KAAK,CAAC,0DAA0D,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QACnG,CAAC;QAED,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QACzC,OAAO,QAAQ,CAAC;IACjB,CAAC;CACD;AArEM;IADL,KAAK,EAAE;6DAQP;AAsBa;IADb,IAAI,EAAE;sEAwCN"}
+{"version":3,"file":"integrationAuthenticationService.js","names":[],"sources":["../../../../../plus/integrations/src/authentication/integrationAuthenticationService.ts"],"sourcesContent":["import type { GitRemote } from '@gitlens/git/models/remote.js';\nimport { gate } from '@gitlens/utils/decorators/gate.js';\nimport { debug } from '@gitlens/utils/decorators/log.js';\nimport type { Disposable } from '@gitlens/utils/disposable.js';\nimport type { IntegrationIds, SupportedCloudIntegrationIds } from '../constants.js';\nimport {\n\tGitCloudHostIntegrationId,\n\tGitSelfManagedHostIntegrationId,\n\tIssuesCloudHostIntegrationId,\n\tIssuesSelfManagedHostIntegrationId,\n} from '../constants.js';\nimport type { IntegrationServiceContext } from '../context.js';\nimport type { IntegrationService } from '../integrationService.js';\nimport type { GitHostIntegration } from '../models/gitHostIntegration.js';\nimport type { ApiClients } from '../providers/apiClients.js';\nimport type { Source } from '../telemetry.js';\nimport { supportedIntegrationIds } from '../utils/integration.utils.js';\nimport type { CloudIntegrationService } from './cloudIntegrationService.js';\nimport type { ConfiguredIntegrationService } from './configuredIntegrationService.js';\nimport type { IntegrationAuthenticationProvider } from './integrationAuthenticationProvider.js';\nimport { CloudIntegrationAuthenticationProvider } from './integrationAuthenticationProvider.js';\n\nexport class IntegrationAuthenticationService implements Disposable {\n\tprivate readonly providers = new Map<IntegrationIds, IntegrationAuthenticationProvider>();\n\n\tconstructor(\n\t\tprivate readonly configuredIntegrationService: ConfiguredIntegrationService,\n\t\treadonly ctx: IntegrationServiceContext,\n\t\t/**\n\t\t * Lazy accessor for the owning {@link IntegrationService}. Injected by the composition root\n\t\t * ({@link createIntegrationManager}) to break the auth↔service construction cycle without a\n\t\t * mutable setter or a host round-trip; only resolved at runtime (long after construction).\n\t\t */\n\t\tprivate readonly getIntegrationService: () => IntegrationService,\n\t\t/** The package's cloud token-exchange client, constructed by the composition root. */\n\t\treadonly cloudIntegrations: CloudIntegrationService,\n\t) {}\n\n\tdispose(): void {\n\t\tthis.providers.forEach(p => p.dispose());\n\t\tthis.providers.clear();\n\t}\n\n\t/**\n\t * Initiates the cloud-integration connect flow on the owning service. Cloud auth providers call\n\t * this when they need a session that doesn't exist yet (see\n\t * {@link CloudIntegrationAuthenticationProvider}).\n\t */\n\tconnectCloudIntegrations(\n\t\tconnect: { integrationIds: SupportedCloudIntegrationIds[]; skipIfConnected?: boolean; skipPreSync?: boolean },\n\t\tsource?: Source,\n\t): Promise<boolean> {\n\t\treturn this.getIntegrationService().connectCloudIntegrations(connect, source);\n\t}\n\n\t/**\n\t * Resolves the connected git-host integration for a `GitRemote`, via the owning service. Lets\n\t * package-internal callers (e.g. the Bitbucket provider) resolve a remote's integration without a\n\t * host round-trip.\n\t */\n\tgetByRemote(remote: GitRemote): Promise<GitHostIntegration | undefined> {\n\t\treturn this.getIntegrationService().getByRemote(remote);\n\t}\n\n\t/** Resolves the per-integration `ignoreSSLErrors` flag via the owning service (host-config-backed). */\n\tignoreSSLErrors(integration: GitHostIntegration | { id: IntegrationIds; domain?: string }): boolean | 'force' {\n\t\treturn this.getIntegrationService().ignoreSSLErrors(integration);\n\t}\n\n\t/** The package-built per-provider API clients, via the owning service (built once + memoized there). */\n\tget apis(): ApiClients {\n\t\treturn this.getIntegrationService().apis;\n\t}\n\n\tasync get(providerId: IntegrationIds): Promise<IntegrationAuthenticationProvider> {\n\t\treturn this.ensureProvider(providerId);\n\t}\n\n\t@debug()\n\tasync reset(): Promise<void> {\n\t\t// TODO: This really isn't ideal, since it will only work for \"cloud\" providers as we won't have any more specific descriptors\n\t\tawait Promise.allSettled(\n\t\t\tsupportedIntegrationIds.map(async providerId =>\n\t\t\t\t(await this.ensureProvider(providerId)).deleteAllSessions(),\n\t\t\t),\n\t\t);\n\t}\n\n\tsupports(providerId: string): boolean {\n\t\t// Linear and Trello are cloud-backed issue integrations (same as Jira): `ensureProvider` registers a\n\t\t// cloud auth provider for them, so a disconnect must offer to sign out of the cloud token too —\n\t\t// otherwise the backend token and configured connection survive the disable.\n\t\tswitch (providerId) {\n\t\t\tcase GitCloudHostIntegrationId.AzureDevOps:\n\t\t\tcase GitSelfManagedHostIntegrationId.AzureDevOpsServer:\n\t\t\tcase GitCloudHostIntegrationId.Bitbucket:\n\t\t\tcase GitCloudHostIntegrationId.GitLab:\n\t\t\tcase IssuesCloudHostIntegrationId.Jira:\n\t\t\tcase IssuesSelfManagedHostIntegrationId.JiraServer:\n\t\t\tcase IssuesCloudHostIntegrationId.Linear:\n\t\t\tcase IssuesCloudHostIntegrationId.Trello:\n\t\t\tcase GitCloudHostIntegrationId.GitHub:\n\t\t\t\treturn true;\n\t\t\tdefault:\n\t\t\t\treturn false;\n\t\t}\n\t}\n\n\t@gate()\n\tprivate async ensureProvider(providerId: IntegrationIds): Promise<IntegrationAuthenticationProvider> {\n\t\tlet provider = this.providers.get(providerId);\n\t\tif (provider != null) return provider;\n\n\t\t// Optional consumer override for custom auth (e.g. a manual-token provider). GitLens omits it —\n\t\t// the package constructs its own cloud providers below (so GitLens's cloud auth needs no host hook).\n\t\tconst hostProvider = await this.ctx.hooks?.createAuthenticationProvider?.({\n\t\t\tid: providerId,\n\t\t});\n\t\tif (hostProvider != null) {\n\t\t\tthis.providers.set(providerId, hostProvider);\n\t\t\treturn hostProvider;\n\t\t}\n\n\t\t// Every cloud integration shares one provider, parameterized by id (cloud-only).\n\t\tswitch (providerId) {\n\t\t\tcase GitCloudHostIntegrationId.GitHub:\n\t\t\tcase GitSelfManagedHostIntegrationId.CloudGitHubEnterprise:\n\t\t\tcase GitCloudHostIntegrationId.GitLab:\n\t\t\tcase GitSelfManagedHostIntegrationId.CloudGitLabSelfHosted:\n\t\t\tcase GitCloudHostIntegrationId.AzureDevOps:\n\t\t\tcase GitSelfManagedHostIntegrationId.AzureDevOpsServer:\n\t\t\tcase GitCloudHostIntegrationId.Bitbucket:\n\t\t\tcase GitSelfManagedHostIntegrationId.BitbucketServer:\n\t\t\tcase IssuesCloudHostIntegrationId.Jira:\n\t\t\tcase IssuesSelfManagedHostIntegrationId.JiraServer:\n\t\t\tcase IssuesCloudHostIntegrationId.Linear:\n\t\t\tcase IssuesCloudHostIntegrationId.Trello:\n\t\t\t\tprovider = new CloudIntegrationAuthenticationProvider(\n\t\t\t\t\tthis,\n\t\t\t\t\tthis.configuredIntegrationService,\n\t\t\t\t\tproviderId,\n\t\t\t\t);\n\t\t\t\tbreak;\n\t\t\tdefault:\n\t\t\t\tthrow new Error(`No authentication provider registered for integration '${String(providerId)}'`);\n\t\t}\n\n\t\tthis.providers.set(providerId, provider);\n\t\treturn provider;\n\t}\n}\n"],"mappings":";;;;;;;AAsBA,IAAa,mCAAb,MAAoE;CAIjD;CACR;CAMQ;CAER;CAZV,4BAA6B,IAAI,IAAuD;CAExF,YACC,8BACA,KAMA,uBAEA,mBACC;EAVgB,KAAA,+BAAA;EACR,KAAA,MAAA;EAMQ,KAAA,wBAAA;EAER,KAAA,oBAAA;CACP;CAEH,UAAgB;EACf,KAAK,UAAU,SAAQ,MAAK,EAAE,QAAQ,CAAC;EACvC,KAAK,UAAU,MAAM;CACtB;;;;;;CAOA,yBACC,SACA,QACmB;EACnB,OAAO,KAAK,sBAAsB,CAAC,CAAC,yBAAyB,SAAS,MAAM;CAC7E;;;;;;CAOA,YAAY,QAA4D;EACvE,OAAO,KAAK,sBAAsB,CAAC,CAAC,YAAY,MAAM;CACvD;;CAGA,gBAAgB,aAA8F;EAC7G,OAAO,KAAK,sBAAsB,CAAC,CAAC,gBAAgB,WAAW;CAChE;;CAGA,IAAI,OAAmB;EACtB,OAAO,KAAK,sBAAsB,CAAC,CAAC;CACrC;CAEA,MAAM,IAAI,YAAwE;EACjF,OAAO,KAAK,eAAe,UAAU;CACtC;CAEA,MACM,QAAuB;EAE5B,MAAM,QAAQ,WACb,wBAAwB,IAAI,OAAM,gBAChC,MAAM,KAAK,eAAe,UAAU,EAAA,CAAG,kBAAkB,CAC3D,CACD;CACD;CAEA,SAAS,YAA6B;EAIrC,QAAQ,YAAR;GACC,KAAA;GACA,KAAA;GACA,KAAA;GACA,KAAA;GACA,KAAA;GACA,KAAA;GACA,KAAA;GACA,KAAA;GACA,KAAA,UACC,OAAO;GACR,SACC,OAAO;EACT;CACD;CAEA,MACc,eAAe,YAAwE;EACpG,IAAI,WAAW,KAAK,UAAU,IAAI,UAAU;EAC5C,IAAI,YAAY,MAAM,OAAO;EAI7B,MAAM,eAAe,MAAM,KAAK,IAAI,OAAO,+BAA+B,EACzE,IAAI,WACL,CAAC;EACD,IAAI,gBAAgB,MAAM;GACzB,KAAK,UAAU,IAAI,YAAY,YAAY;GAC3C,OAAO;EACR;EAGA,QAAQ,YAAR;GACC,KAAA;GACA,KAAA;GACA,KAAA;GACA,KAAA;GACA,KAAA;GACA,KAAA;GACA,KAAA;GACA,KAAA;GACA,KAAA;GACA,KAAA;GACA,KAAA;GACA,KAAA;IACC,WAAW,IAAI,uCACd,MACA,KAAK,8BACL,UACD;IACA;GACD,SACC,MAAM,IAAI,MAAM,0DAA0D,OAAO,UAAU,EAAE,EAAE;EACjG;EAEA,KAAK,UAAU,IAAI,YAAY,QAAQ;EACvC,OAAO;CACR;AACD;AAxEE,WAAA,CAAA,MAAM,CAAA,GAAA,iCAAA,WAAA,SAAA,IAAA;AA8BN,WAAA,CAAA,KAAK,CAAA,GAAA,iCAAA,WAAA,kBAAA,IAAA"}

package/dist/plus/integrations/authentication/manualTokenProvider.d.ts

@@ -1,16 +1,18 @@
-import type { IntegrationIds } from '../constants.js';
-import type { IntegrationAuthenticationProvider } from './integrationAuthenticationProvider.js';
+import { IntegrationIds } from "../constants.js";
+import { IntegrationAuthenticationProvider } from "./integrationAuthenticationProvider.js";
+//#region ../plus/integrations/src/authentication/manualTokenProvider.d.ts
 export interface ManualTokenAuthProviderOptions {
-    readonly id: IntegrationIds;
-    readonly token: string;
-    readonly account: {
-        readonly id: string;
-        readonly label: string;
-    };
-    readonly scopes?: readonly string[];
-    readonly domain?: string;
-    readonly cloud?: boolean;
-    readonly appKey?: string;
+  readonly id: IntegrationIds;
+  readonly token: string;
+  readonly account: {
+    readonly id: string;
+    readonly label: string;
+  };
+  readonly scopes?: readonly string[];
+  readonly domain?: string;
+  readonly cloud?: boolean;
+  readonly appKey?: string;
 }
 export declare function createManualTokenAuthProvider(options: ManualTokenAuthProviderOptions): IntegrationAuthenticationProvider;
+//#endregion
 //# sourceMappingURL=manualTokenProvider.d.ts.map

package/dist/plus/integrations/authentication/manualTokenProvider.js

@@ -1,53 +1,28 @@
-// Convenience for "manual token" auth — when a consumer already has an access
-// token (CLI flag, env var, secret manager) and just wants the package to use
-// it without an OAuth dance. Wire it into the manager via the
-// `createAuthenticationProvider` hook:
-//
-//   const manager = createIntegrationManager({
-//       ...runtime,
-//       hooks: {
-//           createAuthenticationProvider: async ({ id }) =>
-//               id === GitCloudHostIntegrationId.GitHub
-//                   ? createManualTokenAuthProvider({
-//                         id: id,
-//                         token: process.env.GITHUB_TOKEN!,
-//                         account: { id: 'me', label: 'CLI Token' },
-//                     })
-//                   : undefined,
-//       },
-//   });
-//
-// The provider is intentionally minimal — sessions are non-cancellable, never
-// expire, and persist for the lifetime of the manager. For OAuth flows or
-// refreshable tokens, implement `IntegrationAuthenticationProvider` yourself.
-import { Emitter } from '../../../utils/event.js';
-export function createManualTokenAuthProvider(options) {
-    const onDidChange = new Emitter();
-    const session = {
-        id: `manual:${options.id}`,
-        accessToken: options.token,
-        account: options.account,
-        scopes: options.scopes ?? [],
-        cloud: options.cloud ?? true,
-        type: undefined,
-        domain: options.domain ?? '',
-        appKey: options.appKey,
-    };
-    return {
-        get onDidChange() {
-            return onDidChange.event;
-        },
-        getSession: (descriptor, options) => 
-        // A manual token represents only the implicit primary connection. It cannot prove that an
-        // arbitrary connection selector owns the token, so fail closed instead of leaking it across
-        // accounts. Empty legacy selectors still resolve as primary.
-        //
-        // It also can't be refreshed; on a forced new session, return undefined rather than handing
-        // back the same likely-rejected token and looping a reauthenticate-on-failure flow.
-        Promise.resolve(options?.forceNewSession || (descriptor.connectionId?.length ?? 0) > 0 ? undefined : session),
-        deleteSession: () => Promise.resolve(),
-        deleteAllSessions: () => Promise.resolve(),
-        dispose: () => onDidChange.dispose(),
-    };
+import { Emitter } from "../../../utils/event.js";
+//#region ../plus/integrations/src/authentication/manualTokenProvider.ts
+function createManualTokenAuthProvider(options) {
+	const onDidChange = new Emitter();
+	const session = {
+		id: `manual:${options.id}`,
+		accessToken: options.token,
+		account: options.account,
+		scopes: options.scopes ?? [],
+		cloud: options.cloud ?? true,
+		type: void 0,
+		domain: options.domain ?? "",
+		appKey: options.appKey
+	};
+	return {
+		get onDidChange() {
+			return onDidChange.event;
+		},
+		getSession: (descriptor, options) => Promise.resolve(options?.forceNewSession || (descriptor.connectionId?.length ?? 0) > 0 ? void 0 : session),
+		deleteSession: () => Promise.resolve(),
+		deleteAllSessions: () => Promise.resolve(),
+		dispose: () => onDidChange.dispose()
+	};
 }
+//#endregion
+export { createManualTokenAuthProvider };
+
 //# sourceMappingURL=manualTokenProvider.js.map

package/dist/plus/integrations/authentication/manualTokenProvider.js.map

@@ -1 +1 @@
-{"version":3,"file":"manualTokenProvider.js","sourceRoot":"","sources":["../../../../src/plus/integrations/authentication/manualTokenProvider.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,8EAA8E;AAC9E,8DAA8D;AAC9D,uCAAuC;AACvC,EAAE;AACF,+CAA+C;AAC/C,oBAAoB;AACpB,iBAAiB;AACjB,4DAA4D;AAC5D,wDAAwD;AACxD,sDAAsD;AACtD,kCAAkC;AAClC,4DAA4D;AAC5D,qEAAqE;AACrE,yBAAyB;AACzB,iCAAiC;AACjC,WAAW;AACX,QAAQ;AACR,EAAE;AACF,8EAA8E;AAC9E,0EAA0E;AAC1E,8EAA8E;AAG9E,OAAO,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AAkBlD,MAAM,UAAU,6BAA6B,CAC5C,OAAuC;IAEvC,MAAM,WAAW,GAAG,IAAI,OAAO,EAAQ,CAAC;IACxC,MAAM,OAAO,GAAkC;QAC9C,EAAE,EAAE,UAAU,OAAO,CAAC,EAAE,EAAE;QAC1B,WAAW,EAAE,OAAO,CAAC,KAAK;QAC1B,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,EAAE;QAC5B,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,IAAI;QAC5B,IAAI,EAAE,SAAS;QACf,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,EAAE;QAC5B,MAAM,EAAE,OAAO,CAAC,MAAM;KACtB,CAAC;IAEF,OAAO;QACN,IAAI,WAAW;YACd,OAAO,WAAW,CAAC,KAAK,CAAC;QAC1B,CAAC;QACD,UAAU,EAAE,CACX,UAAsD,EACtD,OAAwE,EACvE,EAAE;QACH,0FAA0F;QAC1F,4FAA4F;QAC5F,6DAA6D;QAC7D,EAAE;QACF,4FAA4F;QAC5F,oFAAoF;QACpF,OAAO,CAAC,OAAO,CACd,OAAO,EAAE,eAAe,IAAI,CAAC,UAAU,CAAC,YAAY,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAC5F;QACF,aAAa,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE;QACtC,iBAAiB,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE;QAC1C,OAAO,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,OAAO,EAAE;KACpC,CAAC;AACH,CAAC"}
+{"version":3,"file":"manualTokenProvider.js","names":[],"sources":["../../../../../plus/integrations/src/authentication/manualTokenProvider.ts"],"sourcesContent":["// Convenience for \"manual token\" auth — when a consumer already has an access\n// token (CLI flag, env var, secret manager) and just wants the package to use\n// it without an OAuth dance. Wire it into the manager via the\n// `createAuthenticationProvider` hook:\n//\n//   const manager = createIntegrationManager({\n//       ...runtime,\n//       hooks: {\n//           createAuthenticationProvider: async ({ id }) =>\n//               id === GitCloudHostIntegrationId.GitHub\n//                   ? createManualTokenAuthProvider({\n//                         id: id,\n//                         token: process.env.GITHUB_TOKEN!,\n//                         account: { id: 'me', label: 'CLI Token' },\n//                     })\n//                   : undefined,\n//       },\n//   });\n//\n// The provider is intentionally minimal — sessions are non-cancellable, never\n// expire, and persist for the lifetime of the manager. For OAuth flows or\n// refreshable tokens, implement `IntegrationAuthenticationProvider` yourself.\n\nimport type { Event } from '@gitlens/utils/event.js';\nimport { Emitter } from '@gitlens/utils/event.js';\nimport type { IntegrationIds } from '../constants.js';\nimport type {\n\tIntegrationAuthenticationProvider,\n\tIntegrationAuthenticationSessionDescriptor,\n} from './integrationAuthenticationProvider.js';\nimport type { ProviderAuthenticationSession } from './models.js';\n\nexport interface ManualTokenAuthProviderOptions {\n\treadonly id: IntegrationIds;\n\treadonly token: string;\n\treadonly account: { readonly id: string; readonly label: string };\n\treadonly scopes?: readonly string[];\n\treadonly domain?: string;\n\treadonly cloud?: boolean;\n\treadonly appKey?: string;\n}\n\nexport function createManualTokenAuthProvider(\n\toptions: ManualTokenAuthProviderOptions,\n): IntegrationAuthenticationProvider {\n\tconst onDidChange = new Emitter<void>();\n\tconst session: ProviderAuthenticationSession = {\n\t\tid: `manual:${options.id}`,\n\t\taccessToken: options.token,\n\t\taccount: options.account,\n\t\tscopes: options.scopes ?? [],\n\t\tcloud: options.cloud ?? true,\n\t\ttype: undefined,\n\t\tdomain: options.domain ?? '',\n\t\tappKey: options.appKey,\n\t};\n\n\treturn {\n\t\tget onDidChange(): Event<void> {\n\t\t\treturn onDidChange.event;\n\t\t},\n\t\tgetSession: (\n\t\t\tdescriptor: IntegrationAuthenticationSessionDescriptor,\n\t\t\toptions?: Parameters<IntegrationAuthenticationProvider['getSession']>[1],\n\t\t) =>\n\t\t\t// A manual token represents only the implicit primary connection. It cannot prove that an\n\t\t\t// arbitrary connection selector owns the token, so fail closed instead of leaking it across\n\t\t\t// accounts. Empty legacy selectors still resolve as primary.\n\t\t\t//\n\t\t\t// It also can't be refreshed; on a forced new session, return undefined rather than handing\n\t\t\t// back the same likely-rejected token and looping a reauthenticate-on-failure flow.\n\t\t\tPromise.resolve(\n\t\t\t\toptions?.forceNewSession || (descriptor.connectionId?.length ?? 0) > 0 ? undefined : session,\n\t\t\t),\n\t\tdeleteSession: () => Promise.resolve(),\n\t\tdeleteAllSessions: () => Promise.resolve(),\n\t\tdispose: () => onDidChange.dispose(),\n\t};\n}\n"],"mappings":";;AA0CA,SAAgB,8BACf,SACoC;CACpC,MAAM,cAAc,IAAI,QAAc;CACtC,MAAM,UAAyC;EAC9C,IAAI,UAAU,QAAQ;EACtB,aAAa,QAAQ;EACrB,SAAS,QAAQ;EACjB,QAAQ,QAAQ,UAAU,CAAC;EAC3B,OAAO,QAAQ,SAAS;EACxB,MAAM,KAAA;EACN,QAAQ,QAAQ,UAAU;EAC1B,QAAQ,QAAQ;CACjB;CAEA,OAAO;EACN,IAAI,cAA2B;GAC9B,OAAO,YAAY;EACpB;EACA,aACC,YACA,YAQA,QAAQ,QACP,SAAS,oBAAoB,WAAW,cAAc,UAAU,KAAK,IAAI,KAAA,IAAY,OACtF;EACD,qBAAqB,QAAQ,QAAQ;EACrC,yBAAyB,QAAQ,QAAQ;EACzC,eAAe,YAAY,QAAQ;CACpC;AACD"}

package/dist/plus/integrations/authentication/models.d.ts

@@ -1,109 +1,129 @@
-import type { IntegrationIds, SupportedCloudIntegrationIds } from '../constants.js';
-import { IssuesCloudHostIntegrationId } from '../constants.js';
+import { IntegrationIds, IssuesCloudHostIntegrationId, SupportedCloudIntegrationIds } from "../constants.js";
+//#region ../plus/integrations/src/authentication/models.d.ts
 /**
  * Mirrors the shape of `vscode.AuthenticationSession` so the integrations
  * package can stay vscode-free. Host adapters bridge VS Code sessions to
  * this shape via {@link AuthenticationProvider}.
  */
 export interface AuthenticationSessionLike {
+  readonly id: string;
+  readonly accessToken: string;
+  readonly account: {
     readonly id: string;
-    readonly accessToken: string;
-    readonly account: {
-        readonly id: string;
-        readonly label: string;
-    };
-    readonly scopes: readonly string[];
+    readonly label: string;
+  };
+  readonly scopes: readonly string[];
 }
 export interface ProviderAuthenticationSession extends AuthenticationSessionLike {
-    readonly cloud: boolean;
-    readonly type: CloudIntegrationAuthType | undefined;
-    readonly expiresAt?: Date;
-    readonly domain: string;
-    readonly protocol?: string;
-    /** The provider app key paired with the token for providers whose client needs one (e.g. Trello). */
-    readonly appKey?: string;
+  readonly cloud: boolean;
+  readonly type: CloudIntegrationAuthType | undefined;
+  readonly expiresAt?: Date;
+  readonly domain: string;
+  /**
+   * The connection's address exactly as it was configured, path and all, when that differs from
+   * {@link domain}.
+   *
+   * `domain` is the IDENTITY a self-managed connection is keyed by, so it is normalized to a bare host
+   * (`hostFromDomain`) and one host cannot key two connections. An instance mounted below a context path —
+   * Jira Data Center's `/jira`, a reverse-proxied GitLab or Bitbucket — still has to be ADDRESSED at that
+   * path, and normalizing it away is what made every request go to the root. Absent when the backend
+   * reported nothing beyond the host, which is the common case.
+   */
+  readonly baseUrl?: string;
+  readonly protocol?: string;
+  /** The provider app key paired with the token for providers whose client needs one (e.g. Trello). */
+  readonly appKey?: string;
 }
 export interface TokenInfo<T extends IntegrationIds | 'gitkraken' = IntegrationIds | 'gitkraken'> {
-    readonly providerId: T;
-    /**
-     * The first 3 characters of the md5 hash of the token.
-     * It's a very obfuscated representation of the token that we can use in logs
-     * to see whether the token survives refreshing or gets updated.
-     */
-    readonly microHash: string | undefined;
-    readonly cloud: boolean;
-    readonly type: CloudIntegrationAuthType | undefined;
-    readonly scopes: readonly string[] | undefined;
-    readonly expiresAt?: Date;
+  readonly providerId: T;
+  /**
+   * The first 3 characters of the md5 hash of the token.
+   * It's a very obfuscated representation of the token that we can use in logs
+   * to see whether the token survives refreshing or gets updated.
+   */
+  readonly microHash: string | undefined;
+  readonly cloud: boolean;
+  readonly type: CloudIntegrationAuthType | undefined;
+  readonly scopes: readonly string[] | undefined;
+  readonly expiresAt?: Date;
 }
 export interface TokenWithInfo<T extends IntegrationIds = IntegrationIds> extends TokenInfo<T> {
-    readonly accessToken: string;
+  readonly accessToken: string;
 }
 export declare function toTokenInfo<T extends IntegrationIds | 'gitkraken'>(providerId: T, accessToken: string | undefined, info: {
-    cloud: boolean;
-    type: CloudIntegrationAuthType | undefined;
-    scopes?: readonly string[];
-    expiresAt?: Date;
+  cloud: boolean;
+  type: CloudIntegrationAuthType | undefined;
+  scopes?: readonly string[];
+  expiresAt?: Date;
 }): TokenInfo<T>;
 export declare function toTokenWithInfo<T extends IntegrationIds>(providerId: T, session: ProviderAuthenticationSession, altToken?: string): TokenWithInfo<T>;
 export type TokenOptInfo<T extends IntegrationIds = IntegrationIds> = TokenWithInfo<T> | {
-    providerId: T;
-    accessToken?: undefined;
-    connectionId?: string;
+  providerId: T;
+  accessToken?: undefined;
+  connectionId?: string;
 };
 export interface ConfiguredIntegrationDescriptor {
-    /**
-     * Stable per-connection identifier, distinct from the domain, so multiple accounts can be
-     * connected to the same provider+domain simultaneously. For legacy/migrated single connections
-     * this is the domain (self-managed) or the provider's canonical domain (cloud), which keeps the
-     * existing secret key (`integration.auth[.cloud]:{id}|{domain}`) valid with zero migration.
-     */
-    readonly id: string;
-    /**
-     * Whether this is the connection used by default for the provider. Optional: when no descriptor
-     * for a provider+domain carries an explicit flag, the first one is treated as primary. Only
-     * {@link ConfiguredIntegrationService.setPrimaryConnection} sets the flag (and clears it on siblings).
-     */
-    readonly primary?: boolean;
-    /** The connection's auth type (`oauth`/`pat`), when known. */
-    readonly type?: CloudIntegrationAuthType;
-    /**
-     * Human-readable account handle for this connection (e.g. the GitHub login). Resolved from the
-     * provider API (the token backend doesn't expose it); absent until resolved or if the lookup fails.
-     */
-    readonly accountName?: string;
-    readonly cloud: boolean;
-    readonly integrationId: IntegrationIds;
-    readonly scopes: string;
-    readonly domain?: string;
-    readonly expiresAt?: string | Date;
+  /**
+   * Stable per-connection identifier, distinct from the domain, so multiple accounts can be
+   * connected to the same provider+domain simultaneously. For legacy/migrated single connections
+   * this is the domain (self-managed) or the provider's canonical domain (cloud), which keeps the
+   * existing secret key (`integration.auth[.cloud]:{id}|{domain}`) valid with zero migration.
+   */
+  readonly id: string;
+  /**
+   * Whether this is the connection used by default for the provider. Optional: when no descriptor
+   * for a provider+domain carries an explicit flag, the first one is treated as primary. Only
+   * {@link ConfiguredIntegrationService.setPrimaryConnection} sets the flag (and clears it on siblings).
+   */
+  readonly primary?: boolean;
+  /** The connection's auth type (`oauth`/`pat`), when known. */
+  readonly type?: CloudIntegrationAuthType;
+  /**
+   * Human-readable account handle for this connection (e.g. the GitHub login). Resolved from the
+   * provider API (the token backend doesn't expose it); absent until resolved or if the lookup fails.
+   */
+  readonly accountName?: string;
+  readonly cloud: boolean;
+  readonly integrationId: IntegrationIds;
+  readonly scopes: string;
+  readonly domain?: string;
+  /**
+   * The address this connection was configured with, path included — see
+   * {@link ProviderAuthenticationSession.baseUrl}.
+   *
+   * Mirrored onto the descriptor so reconciliation can tell a re-pointed connection from an unchanged one
+   * without reading its secret: {@link domain} is normalized to a bare host, so a backend connection moved
+   * from one context path to another on the SAME host looks identical by domain alone.
+   */
+  readonly baseUrl?: string;
+  readonly expiresAt?: string | Date;
 }
 export interface CloudIntegrationAuthenticationSession {
-    type: CloudIntegrationAuthType;
-    accessToken: string;
-    domain: string;
-    expiresIn: number;
-    scopes: string;
-    /** Backend per-connection token identifier, when the provider-tokens backend supports multi-account. */
-    id?: string;
-    /** Provider app key paired with the token (e.g. Trello app key), when the backend supplies one. */
-    appKey?: string;
+  type: CloudIntegrationAuthType;
+  accessToken: string;
+  domain: string;
+  expiresIn: number;
+  scopes: string;
+  /** Backend per-connection token identifier, when the provider-tokens backend supports multi-account. */
+  id?: string;
+  /** Provider app key paired with the token (e.g. Trello app key), when the backend supplies one. */
+  appKey?: string;
 }
 export interface CloudIntegrationAuthorization {
-    url: string;
+  url: string;
 }
 export interface CloudIntegrationConnection {
-    type: CloudIntegrationAuthType;
-    provider: CloudIntegrationType;
-    domain: string;
-    /** Backend per-connection token identifier, when the provider-tokens backend supports multi-account. */
-    id?: string;
-    /** Whether the backend marks this connection as the primary/default for the provider. */
-    primary?: boolean;
-    /** Human-readable account handle, when the backend provides it on the connection (may be absent). */
-    accountName?: string;
+  type: CloudIntegrationAuthType;
+  provider: CloudIntegrationType;
+  domain: string;
+  /** Backend per-connection token identifier, when the provider-tokens backend supports multi-account. */
+  id?: string;
+  /** Whether the backend marks this connection as the primary/default for the provider. */
+  primary?: boolean;
+  /** Human-readable account handle, when the backend provides it on the connection (may be absent). */
+  accountName?: string;
 }
-export type CloudIntegrationType = 'jira' | 'linear' | 'trello' | 'gitlab' | 'github' | 'bitbucket' | 'bitbucketServer' | 'azure' | 'azureDevopsServer' | 'githubEnterprise' | 'gitlabSelfHosted';
+export type CloudIntegrationType = 'jira' | 'jiraServer' | 'linear' | 'trello' | 'gitlab' | 'github' | 'bitbucket' | 'bitbucketServer' | 'azure' | 'azureDevopsServer' | 'githubEnterprise' | 'gitlabSelfHosted';
 export type CloudIntegrationAuthType = 'oauth' | 'pat';
 export declare const CloudIntegrationAuthenticationUriPathPrefix = "did-authenticate-cloud-integration";
 /** Returns all supported cloud integration ids. */
@@ -111,10 +131,7 @@ export declare function getSupportedCloudIntegrationIds(): readonly SupportedClo
 /** Whether `id` is a supported cloud integration id. */
 export declare function isSupportedCloudIntegrationId(id: string): id is SupportedCloudIntegrationIds;
 export declare function isIssueCloudIntegrationId(id: string): id is IssuesCloudHostIntegrationId;
-export declare const toIntegrationId: {
-    [key in CloudIntegrationType]: IntegrationIds;
-};
-export declare const toCloudIntegrationType: {
-    [key in IntegrationIds]: CloudIntegrationType | undefined;
-};
+export declare const toIntegrationId: { [key in CloudIntegrationType]: IntegrationIds; };
+export declare const toCloudIntegrationType: { [key in IntegrationIds]: CloudIntegrationType | undefined; };
+//#endregion
 //# sourceMappingURL=models.d.ts.map