@knpkv/atlassian-common 1.5.0 → 1.7.0

package/dist/cli-auth/authCommand.js

@@ -0,0 +1,127 @@
+/**
+ * The `auth` command group every Atlassian CLI exposes, built once over its {@link AtlassianCliAuth}.
+ *
+ * **Mental model**
+ *
+ * - **One descriptor, two readers.** The CLI passes the same {@link AtlassianCliDescriptor} it built
+ *   its auth from, so the setup instructions list exactly the scopes `auth login` requests. A second,
+ *   hand-written list is how a setup that cannot log in happens: Atlassian rejects an authorization
+ *   request naming a scope the app lacks.
+ * - **Only presentation is configured.** The heading the product's scopes sit under in the
+ *   developer console, and what to call a site in `--site`.
+ * - **A browser that does not open is an error.** The URL is printed first, so a headless or SSH
+ *   user can still finish by hand; the exit code just stops claiming it worked.
+ *
+ * @module
+ */
+import { Argument, Command, Flag, Prompt } from "effect/cli";
+import * as Console from "effect/Console";
+import * as Effect from "effect/Effect";
+import * as Option from "effect/Option";
+import { openBrowser } from "./openBrowser.js";
+const CREATE_APP_URL = "https://developer.atlassian.com/console/myapps/create-3lo-app/";
+const CONSOLE_APPS_URL = "https://developer.atlassian.com/console/myapps/";
+const CALLBACK_URL = "http://localhost:8585/callback";
+/**
+ * The scopes to enable on the OAuth app, by console section. `read:me` is a User Identity scope;
+ * `offline_access` is requested at authorize time but is not an app permission, so it is omitted.
+ */
+export const scopeInstructions = (descriptor, apiSection) => {
+    const section = (heading, scopes) => scopes.length === 0 ? [] : [`   - ${heading}:`, ...scopes.map((scope) => `       ${scope}`)];
+    const permissions = descriptor.scopes.filter((scope) => scope !== "offline_access");
+    return [
+        ...section(apiSection, permissions.filter((scope) => scope !== "read:me")),
+        ...section("User Identity API", permissions.filter((scope) => scope === "read:me"))
+    ].join("\n");
+};
+/** Print the URL, then try to open it; a browser that never opened fails the command. */
+const visit = (url) => Console.log(`Opening ${url}`).pipe(Effect.andThen(openBrowser(url)));
+/** Build `<cli> auth` with create, manage, configure, login, logout, status, profiles, use, remove. */
+export const makeAuthCommand = (service, descriptor, options) => {
+    const withAuth = (f) => Effect.flatMap(Effect.service(service), f);
+    const loginHint = `${descriptor.commandName} auth login`;
+    const create = Command.make("create", {}, () => Effect.gen(function* () {
+        yield* Console.log(`
+Creating OAuth app in Atlassian Developer Console...
+
+1. Browser will open to create a new OAuth 2.0 (3LO) app
+2. Enter app name (e.g., "${descriptor.productName} CLI")
+3. After creation, go to "Permissions" and add:
+${scopeInstructions(descriptor, options.apiSection)}
+4. Go to "Authorization" and set callback URL:
+   ${CALLBACK_URL}
+5. Go to "Settings" and copy Client ID and Secret
+6. Run: ${descriptor.commandName} auth configure --client-id <ID> --client-secret <SECRET>
+`);
+        yield* visit(CREATE_APP_URL);
+    })).pipe(Command.withDescription("Create OAuth app in Atlassian Developer Console"));
+    // Opens the app list, not the app: the console addresses an app by an id that is not the OAuth
+    // client id, and the client id is the only app identifier the CLI stores.
+    const manage = Command.make("manage", {}, () => Effect.gen(function* () {
+        yield* Console.log(`
+Opening the Atlassian Developer Console app list...
+
+Select your OAuth app, then under "Permissions" make sure every scope below is
+enabled. \`${loginHint}\` requests all of them, and Atlassian rejects an
+authorization request naming a scope the app does not have — so a missing scope
+here fails the login itself, not just the command that needed it.
+
+${scopeInstructions(descriptor, options.apiSection)}
+
+Under "Authorization", the callback URL must be:
+   ${CALLBACK_URL}
+
+After adding scopes, run: ${loginHint}
+`);
+        yield* visit(CONSOLE_APPS_URL);
+    })).pipe(Command.withDescription("Open the Atlassian Developer Console to edit the OAuth app's scopes"));
+    const configure = Command.make("configure", {
+        clientId: Flag.String("client-id").pipe(Flag.withDescription("OAuth client ID from Atlassian Developer Console"), Flag.optional),
+        clientSecret: Flag.String("client-secret").pipe(Flag.withDescription("OAuth client secret"), Flag.optional)
+    }, ({ clientId, clientSecret }) => withAuth((auth) => Effect.gen(function* () {
+        const id = Option.isSome(clientId)
+            ? clientId.value
+            : yield* Prompt.String({ message: "Enter OAuth client ID:" });
+        const secret = Option.isSome(clientSecret)
+            ? clientSecret.value
+            : yield* Prompt.String({ message: "Enter OAuth client secret:" });
+        yield* auth.configure({ clientId: id, clientSecret: secret });
+        yield* Console.log(`OAuth configured. Run '${loginHint}' to authenticate.`);
+    }))).pipe(Command.withDescription("Configure OAuth client credentials"));
+    const login = Command.make("login", {
+        site: Flag.String("site").pipe(Flag.withDescription(`${descriptor.productName} site URL to use (for accounts with multiple sites)`), Flag.optional)
+    }, ({ site }) => withAuth((auth) => Effect.gen(function* () {
+        const sites = yield* auth.login(Option.isSome(site) ? { siteUrl: site.value } : undefined);
+        if (Array.isArray(sites) && sites.length > 0) {
+            yield* Console.log("\nRe-run with --site to select a specific site.");
+        }
+    }))).pipe(Command.withDescription("Authenticate with Atlassian via OAuth"));
+    const logout = Command.make("logout", {}, () => withAuth((auth) => auth.logout().pipe(Effect.andThen(Console.log("Logged out"))))).pipe(Command.withDescription("Remove stored authentication"));
+    const status = Command.make("status", {}, () => withAuth((auth) => Effect.gen(function* () {
+        const profile = yield* auth.getActiveProfile();
+        if (profile === null) {
+            return yield* Console.log(`Not logged in. Use '${loginHint}' to authenticate.`);
+        }
+        const user = profile.token.user;
+        yield* Console.log(`Active profile: ${profile.name}`);
+        yield* Console.log(`Account: ${user !== undefined ? `${user.name} (${user.email})` : "unknown user"}`);
+        yield* Console.log(`Site: ${profile.token.site_url}`);
+        yield* Console.log(`Profile ID: ${profile.id}`);
+    }))).pipe(Command.withDescription("Show authentication status"));
+    const profiles = Command.make("profiles", {}, () => withAuth((auth) => Effect.gen(function* () {
+        const [stored, active] = yield* Effect.all([auth.listProfiles(), auth.getActiveProfile()]);
+        if (stored.length === 0) {
+            return yield* Console.log(`No auth profiles. Use '${loginHint}' to authenticate.`);
+        }
+        for (const profile of stored) {
+            yield* Console.log(`${active?.id === profile.id ? "*" : " "} ${profile.id}`);
+            yield* Console.log(`    ${profile.name}`);
+            yield* Console.log(`    ${profile.token.site_url}`);
+        }
+    }))).pipe(Command.withDescription("List stored auth profiles"));
+    const profile = Argument.String("profile").pipe(Argument.withDescription("Profile ID, name, site URL, cloud ID, or account ID"));
+    const use = Command.make("use", { profile }, ({ profile }) => withAuth((auth) => Effect.flatMap(auth.switchProfile(profile), (selected) => Console.log(selected === null ? `Profile not found: ${profile}` : `Active profile: ${selected.name}`)))).pipe(Command.withDescription("Switch active auth profile"));
+    const remove = Command.make("remove", { profile }, ({ profile }) => withAuth((auth) => Effect.flatMap(auth.removeProfile(profile), (removed) => Console.log(removed === null ? `Profile not found: ${profile}` : `Removed profile: ${removed.name}`)))).pipe(Command.withDescription("Remove stored auth profile"));
+    return Command.make("auth").pipe(Command.withDescription("Manage OAuth authentication"), Command.withSubcommands([create, manage, configure, login, logout, status, profiles, use, remove]));
+};
+//# sourceMappingURL=authCommand.js.map

package/dist/cli-auth/authCommand.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authCommand.js","sourceRoot":"","sources":["../../src/cli-auth/authCommand.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,YAAY,CAAA;AAC5D,OAAO,KAAK,OAAO,MAAM,gBAAgB,CAAA;AAEzC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AACvC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AAEvC,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA;AAE9C,MAAM,cAAc,GAAG,gEAAgE,CAAA;AACvF,MAAM,gBAAgB,GAAG,iDAAiD,CAAA;AAC1E,MAAM,YAAY,GAAG,gCAAgC,CAAA;AAoBrD;;;GAGG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,UAAkC,EAAE,UAAkB,EAAU,EAAE;IAClG,MAAM,OAAO,GAAG,CAAC,OAAe,EAAE,MAA6B,EAAyB,EAAE,CACxF,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,OAAO,GAAG,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,UAAU,KAAK,EAAE,CAAC,CAAC,CAAA;IAC9F,MAAM,WAAW,GAAG,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,gBAAgB,CAAC,CAAA;IACnF,OAAO;QACL,GAAG,OAAO,CAAC,UAAU,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC;QAC1E,GAAG,OAAO,CAAC,mBAAmB,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC;KACpF,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACd,CAAC,CAAA;AAED,yFAAyF;AACzF,MAAM,KAAK,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;AAEnG,uGAAuG;AACvG,MAAM,CAAC,MAAM,eAAe,GAAG,CAC7B,OAA0B,EAC1B,UAAkC,EAClC,OAA2B,EAC3B,EAAE;IACF,MAAM,QAAQ,GAAG,CAAY,CAAwC,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAA;IACpH,MAAM,SAAS,GAAG,GAAG,UAAU,CAAC,WAAW,aAAa,CAAA;IAExD,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,EAAE,GAAG,EAAE,CAC7C,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClB,KAAK,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC;;;;4BAIG,UAAU,CAAC,WAAW;;EAEhD,iBAAiB,CAAC,UAAU,EAAE,OAAO,CAAC,UAAU,CAAC;;KAE9C,YAAY;;UAEP,UAAU,CAAC,WAAW;CAC/B,CAAC,CAAA;QACI,KAAK,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAA;IAC9B,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,iDAAiD,CAAC,CAAC,CAAA;IAEtF,+FAA+F;IAC/F,0EAA0E;IAC1E,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,EAAE,GAAG,EAAE,CAC7C,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClB,KAAK,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC;;;;aAIZ,SAAS;;;;EAIpB,iBAAiB,CAAC,UAAU,EAAE,OAAO,CAAC,UAAU,CAAC;;;KAG9C,YAAY;;4BAEW,SAAS;CACpC,CAAC,CAAA;QACI,KAAK,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAA;IAChC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,qEAAqE,CAAC,CAAC,CAAA;IAE1G,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAC5B,WAAW,EACX;QACE,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,IAAI,CACrC,IAAI,CAAC,eAAe,CAAC,kDAAkD,CAAC,EACxE,IAAI,CAAC,QAAQ,CACd;QACD,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,qBAAqB,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC;KAC5G,EACD,CAAC,EAAE,QAAQ,EAAE,YAAY,EAAE,EAAE,EAAE,CAC7B,QAAQ,CAAC,CAAC,IAAI,EAAE,EAAE,CAChB,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClB,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC;YAChC,CAAC,CAAC,QAAQ,CAAC,KAAK;YAChB,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,wBAAwB,EAAE,CAAC,CAAA;QAC/D,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC;YACxC,CAAC,CAAC,YAAY,CAAC,KAAK;YACpB,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,4BAA4B,EAAE,CAAC,CAAA;QACnE,KAAK,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC,CAAA;QAC7D,KAAK,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,0BAA0B,SAAS,oBAAoB,CAAC,CAAA;IAC7E,CAAC,CAAC,CACH,CACJ,CAAC,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,oCAAoC,CAAC,CAAC,CAAA;IAErE,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CACxB,OAAO,EACP;QACE,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAC5B,IAAI,CAAC,eAAe,CAAC,GAAG,UAAU,CAAC,WAAW,qDAAqD,CAAC,EACpG,IAAI,CAAC,QAAQ,CACd;KACF,EACD,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CACX,QAAQ,CAAC,CAAC,IAAI,EAAE,EAAE,CAChB,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClB,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAA;QAC1F,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7C,KAAK,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,iDAAiD,CAAC,CAAA;QACvE,CAAC;IACH,CAAC,CAAC,CACH,CACJ,CAAC,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,uCAAuC,CAAC,CAAC,CAAA;IAExE,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CACzB,QAAQ,EACR,EAAE,EACF,GAAG,EAAE,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CACxF,CAAC,IAAI,CACJ,OAAO,CAAC,eAAe,CAAC,8BAA8B,CAAC,CACxD,CAAA;IAED,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,EAAE,GAAG,EAAE,CAC7C,QAAQ,CAAC,CAAC,IAAI,EAAE,EAAE,CAChB,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClB,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAA;QAC9C,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YACrB,OAAO,KAAK,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,uBAAuB,SAAS,oBAAoB,CAAC,CAAA;QACjF,CAAC;QACD,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAA;QAC/B,KAAK,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,OAAO,CAAC,IAAI,EAAE,CAAC,CAAA;QACrD,KAAK,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,cAAc,EAAE,CAAC,CAAA;QACtG,KAAK,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,OAAO,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAA;QACrD,KAAK,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,OAAO,CAAC,EAAE,EAAE,CAAC,CAAA;IACjD,CAAC,CAAC,CACH,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,4BAA4B,CAAC,CAAC,CAAA;IAEhE,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,EAAE,GAAG,EAAE,CACjD,QAAQ,CAAC,CAAC,IAAI,EAAE,EAAE,CAChB,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClB,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,IAAI,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAA;QAC1F,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxB,OAAO,KAAK,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,0BAA0B,SAAS,oBAAoB,CAAC,CAAA;QACpF,CAAC;QACD,KAAK,MAAM,OAAO,IAAI,MAAM,EAAE,CAAC;YAC7B,KAAK,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,MAAM,EAAE,EAAE,KAAK,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,OAAO,CAAC,EAAE,EAAE,CAAC,CAAA;YAC5E,KAAK,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,OAAO,CAAC,IAAI,EAAE,CAAC,CAAA;YACzC,KAAK,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,OAAO,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAA;QACrD,CAAC;IACH,CAAC,CAAC,CACH,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,2BAA2B,CAAC,CAAC,CAAA;IAE/D,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAC7C,QAAQ,CAAC,eAAe,CAAC,qDAAqD,CAAC,CAChF,CAAA;IAED,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CACtB,KAAK,EACL,EAAE,OAAO,EAAE,EACX,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CACd,QAAQ,CAAC,CAAC,IAAI,EAAE,EAAE,CAChB,MAAM,CAAC,OAAO,CACZ,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,EAC3B,CAAC,QAAQ,EAAE,EAAE,CACX,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,sBAAsB,OAAO,EAAE,CAAC,CAAC,CAAC,mBAAmB,QAAQ,CAAC,IAAI,EAAE,CAAC,CACxG,CACF,CACJ,CAAC,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,4BAA4B,CAAC,CAAC,CAAA;IAE7D,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CACzB,QAAQ,EACR,EAAE,OAAO,EAAE,EACX,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CACd,QAAQ,CAAC,CAAC,IAAI,EAAE,EAAE,CAChB,MAAM,CAAC,OAAO,CACZ,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,EAC3B,CAAC,OAAO,EAAE,EAAE,CACV,OAAO,CAAC,GAAG,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,sBAAsB,OAAO,EAAE,CAAC,CAAC,CAAC,oBAAoB,OAAO,CAAC,IAAI,EAAE,CAAC,CACvG,CACF,CACJ,CAAC,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,4BAA4B,CAAC,CAAC,CAAA;IAE7D,OAAO,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAC9B,OAAO,CAAC,eAAe,CAAC,6BAA6B,CAAC,EACtD,OAAO,CAAC,eAAe,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC,CACnG,CAAA;AACH,CAAC,CAAA"}

package/dist/cli-auth/index.d.ts

@@ -0,0 +1,14 @@
+/**
+ * OAuth2 login and token refresh for Atlassian command-line tools.
+ *
+ * Separate from `./auth` because it carries a Node callback server and a
+ * browser launcher; `./auth` stays platform-neutral for server-side consumers.
+ *
+ * @module
+ */
+export { type AccessibleSite, type AtlassianCliAuth, type AtlassianCliAuthOptions, type AtlassianCliDescriptor, type LoginOptions, makeAtlassianCliAuth } from "./AtlassianCliAuth.js";
+export { type AuthCommandOptions, type AuthCommandService, makeAuthCommand, scopeInstructions } from "./authCommand.js";
+export { HttpServerFactoryLive, NodeCliAuthLive } from "./internal/NodeLayers.js";
+export { type HttpServerFactory, HttpServerFactoryTag, makeHttpServerFactory } from "./internal/oauthServer.js";
+export { BrowserOpenError, openBrowser } from "./openBrowser.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/cli-auth/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/cli-auth/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EACL,KAAK,cAAc,EACnB,KAAK,gBAAgB,EACrB,KAAK,uBAAuB,EAC5B,KAAK,sBAAsB,EAC3B,KAAK,YAAY,EACjB,oBAAoB,EACrB,MAAM,uBAAuB,CAAA;AAC9B,OAAO,EAAE,KAAK,kBAAkB,EAAE,KAAK,kBAAkB,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAA;AACvH,OAAO,EAAE,qBAAqB,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAA;AACjF,OAAO,EAAE,KAAK,iBAAiB,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAA;AAC/G,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA"}

package/dist/cli-auth/index.js

@@ -0,0 +1,14 @@
+/**
+ * OAuth2 login and token refresh for Atlassian command-line tools.
+ *
+ * Separate from `./auth` because it carries a Node callback server and a
+ * browser launcher; `./auth` stays platform-neutral for server-side consumers.
+ *
+ * @module
+ */
+export { makeAtlassianCliAuth } from "./AtlassianCliAuth.js";
+export { makeAuthCommand, scopeInstructions } from "./authCommand.js";
+export { HttpServerFactoryLive, NodeCliAuthLive } from "./internal/NodeLayers.js";
+export { HttpServerFactoryTag, makeHttpServerFactory } from "./internal/oauthServer.js";
+export { BrowserOpenError, openBrowser } from "./openBrowser.js";
+//# sourceMappingURL=index.js.map

package/dist/cli-auth/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/cli-auth/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAML,oBAAoB,EACrB,MAAM,uBAAuB,CAAA;AAC9B,OAAO,EAAoD,eAAe,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAA;AACvH,OAAO,EAAE,qBAAqB,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAA;AACjF,OAAO,EAA0B,oBAAoB,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAA;AAC/G,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA"}

package/dist/cli-auth/internal/NodeLayers.d.ts

@@ -0,0 +1,5 @@
+import * as Layer from "effect/Layer";
+export declare const HttpServerFactoryLive: Layer.Layer<import("./oauthServer.js").HttpServerFactoryTag, never, never>;
+/** Everything `makeAtlassianCliAuth` needs on Node besides HTTP client, spawner and Crypto. */
+export declare const NodeCliAuthLive: Layer.Layer<import("effect/FileSystem").FileSystem | import("../../config/ConfigPaths.js").HomeDirectoryTag | import("./oauthServer.js").HttpServerFactoryTag | import("effect/Path").Path, never, never>;
+//# sourceMappingURL=NodeLayers.d.ts.map

package/dist/cli-auth/internal/NodeLayers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"NodeLayers.d.ts","sourceRoot":"","sources":["../../../src/cli-auth/internal/NodeLayers.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,KAAK,MAAM,cAAc,CAAA;AAKrC,eAAO,MAAM,qBAAqB,4EAEjC,CAAA;AAED,+FAA+F;AAC/F,eAAO,MAAM,eAAe,2MAK3B,CAAA"}

package/dist/cli-auth/internal/NodeLayers.js

@@ -0,0 +1,17 @@
+/**
+ * Node.js adapters for cli-auth: the OAuth callback server and token storage — the
+ * only cli-auth file importing `@effect/platform-node`.
+ *
+ * @internal
+ */
+import * as NodeFileSystem from "@effect/platform-node/NodeFileSystem";
+import * as NodeHttpServer from "@effect/platform-node/NodeHttpServer";
+import * as NodePath from "@effect/platform-node/NodePath";
+import * as Layer from "effect/Layer";
+import { createServer } from "node:http";
+import { HomeDirectoryLive } from "../../config/ConfigPaths.js";
+import { makeHttpServerFactory } from "./oauthServer.js";
+export const HttpServerFactoryLive = makeHttpServerFactory((options) => NodeHttpServer.layerServer(createServer, options));
+/** Everything `makeAtlassianCliAuth` needs on Node besides HTTP client, spawner and Crypto. */
+export const NodeCliAuthLive = Layer.mergeAll(HttpServerFactoryLive, NodeFileSystem.layer, NodePath.layer, HomeDirectoryLive);
+//# sourceMappingURL=NodeLayers.js.map

package/dist/cli-auth/internal/NodeLayers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"NodeLayers.js","sourceRoot":"","sources":["../../../src/cli-auth/internal/NodeLayers.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,KAAK,cAAc,MAAM,sCAAsC,CAAA;AACtE,OAAO,KAAK,cAAc,MAAM,sCAAsC,CAAA;AACtE,OAAO,KAAK,QAAQ,MAAM,gCAAgC,CAAA;AAC1D,OAAO,KAAK,KAAK,MAAM,cAAc,CAAA;AACrC,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAA;AACxC,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAA;AAC/D,OAAO,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAA;AAExD,MAAM,CAAC,MAAM,qBAAqB,GAAG,qBAAqB,CACxD,CAAC,OAAO,EAAE,EAAE,CAAC,cAAc,CAAC,WAAW,CAAC,YAAY,EAAE,OAAO,CAAC,CAC/D,CAAA;AAED,+FAA+F;AAC/F,MAAM,CAAC,MAAM,eAAe,GAAG,KAAK,CAAC,QAAQ,CAC3C,qBAAqB,EACrB,cAAc,CAAC,KAAK,EACpB,QAAQ,CAAC,KAAK,EACd,iBAAiB,CAClB,CAAA"}

package/dist/cli-auth/internal/oauthServer.d.ts

@@ -0,0 +1,54 @@
+/**
+ * Local HTTP callback server for OAuth2 authorization code capture.
+ *
+ * **Mental model**
+ *
+ * - **Scope-owned lifecycle**: {@link startCallbackServer} returns a `codePromise`
+ *   (Deferred). The server validates the CSRF `state` parameter, resolves the
+ *   Deferred with the authorization code, and stops when its enclosing scope closes.
+ * - **Port auto-discovery**: Tries default port 8585, increments on conflict up to 8594.
+ * - **Ready before return**: the handler is installed before the port is handed back,
+ *   so the caller never advertises a callback URL nothing answers.
+ *
+ * @internal
+ */
+import * as Context from "effect/Context";
+import * as Effect from "effect/Effect";
+import { HttpServer } from "effect/http";
+import type * as HttpServerError from "effect/http/HttpServerError";
+import * as Layer from "effect/Layer";
+import * as Scope from "effect/Scope";
+import { OAuthError } from "../../auth/OAuthErrors.js";
+/**
+ * Creates the platform HTTP server for one listen attempt. The Node adapter is
+ * {@link HttpServerFactoryLive}; tests substitute ephemeral or failing servers.
+ */
+export interface HttpServerFactory {
+    readonly createServerLayer: (options: CallbackServerListenOptions) => Layer.Layer<HttpServer.HttpServer, HttpServerError.ServeError, never>;
+}
+export interface CallbackServerListenOptions {
+    readonly host: "localhost";
+    readonly port: number;
+}
+export declare const callbackServerListenOptions: (port: number) => CallbackServerListenOptions;
+export declare const callbackUrl: (port: number) => string;
+declare const HttpServerFactoryTag_base: Context.ServiceClass<HttpServerFactoryTag, "@knpkv/atlassian-common/cli-auth/HttpServerFactory", HttpServerFactory>;
+export declare class HttpServerFactoryTag extends HttpServerFactoryTag_base {
+}
+/** Builds a {@link HttpServerFactoryTag} layer from a per-attempt server layer. */
+export declare const makeHttpServerFactory: (createLayerFn: (options: CallbackServerListenOptions) => Layer.Layer<HttpServer.HttpServer, HttpServerError.ServeError, never>) => Layer.Layer<HttpServerFactoryTag>;
+export interface CallbackServerResult {
+    /** Resolves with the authorization code, or fails with the provider's error. */
+    readonly codePromise: Effect.Effect<string, OAuthError>;
+    /** The port the server is listening on */
+    readonly port: number;
+}
+/**
+ * Start a local HTTP server to receive the OAuth callback for `expectedState`.
+ *
+ * Fails with one `OAuthError` (step `authorize`) when no port in range can be
+ * bound; the server stops when the enclosing scope closes.
+ */
+export declare const startCallbackServer: (expectedState: string) => Effect.Effect<CallbackServerResult, OAuthError, HttpServerFactoryTag | Scope.Scope>;
+export {};
+//# sourceMappingURL=oauthServer.d.ts.map

package/dist/cli-auth/internal/oauthServer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauthServer.d.ts","sourceRoot":"","sources":["../../../src/cli-auth/internal/oauthServer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,KAAK,OAAO,MAAM,gBAAgB,CAAA;AAEzC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AACvC,OAAO,EAAc,UAAU,EAAyC,MAAM,aAAa,CAAA;AAC3F,OAAO,KAAK,KAAK,eAAe,MAAM,6BAA6B,CAAA;AACnE,OAAO,KAAK,KAAK,MAAM,cAAc,CAAA;AAGrC,OAAO,KAAK,KAAK,MAAM,cAAc,CAAA;AACrC,OAAO,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAA;AAMtD;;;GAGG;AACH,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,iBAAiB,EAAE,CAAC,OAAO,EAAE,2BAA2B,KAAK,KAAK,CAAC,KAAK,CAC/E,UAAU,CAAC,UAAU,EACrB,eAAe,CAAC,UAAU,EAC1B,KAAK,CACN,CAAA;CACF;AAED,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAA;IAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CACtB;AAED,eAAO,MAAM,2BAA2B,SAAU,MAAM,KAAG,2BAGzD,CAAA;AAEF,eAAO,MAAM,WAAW,SAAU,MAAM,KAAG,MAA6C,CAAA;;AAExF,qBAAa,oBAAqB,SAAQ,yBAGe;CAAG;AAE5D,mFAAmF;AACnF,eAAO,MAAM,qBAAqB,kBACjB,CACb,OAAO,EAAE,2BAA2B,KACjC,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,UAAU,EAAE,eAAe,CAAC,UAAU,EAAE,KAAK,CAAC,KACzE,KAAK,CAAC,KAAK,CAAC,oBAAoB,CAG/B,CAAA;AAEJ,MAAM,WAAW,oBAAoB;IACnC,gFAAgF;IAChF,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAA;IACvD,0CAA0C;IAC1C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CACtB;AAWD;;;;;GAKG;AACH,eAAO,MAAM,mBAAmB,kBACf,MAAM,KACpB,MAAM,CAAC,MAAM,CAAC,oBAAoB,EAAE,UAAU,EAAE,oBAAoB,GAAG,KAAK,CAAC,KAAK,CA2EjF,CAAA"}

package/dist/cli-auth/internal/oauthServer.js

@@ -0,0 +1,94 @@
+/**
+ * Local HTTP callback server for OAuth2 authorization code capture.
+ *
+ * **Mental model**
+ *
+ * - **Scope-owned lifecycle**: {@link startCallbackServer} returns a `codePromise`
+ *   (Deferred). The server validates the CSRF `state` parameter, resolves the
+ *   Deferred with the authorization code, and stops when its enclosing scope closes.
+ * - **Port auto-discovery**: Tries default port 8585, increments on conflict up to 8594.
+ * - **Ready before return**: the handler is installed before the port is handed back,
+ *   so the caller never advertises a callback URL nothing answers.
+ *
+ * @internal
+ */
+import * as Context from "effect/Context";
+import * as Deferred from "effect/Deferred";
+import * as Effect from "effect/Effect";
+import { HttpRouter, HttpServer, HttpServerRequest, HttpServerResponse } from "effect/http";
+import * as Layer from "effect/Layer";
+import { NetAddress } from "effect/net";
+import * as Schema from "effect/Schema";
+import * as Scope from "effect/Scope";
+import { OAuthError } from "../../auth/OAuthErrors.js";
+const DEFAULT_PORT = 8585;
+const MAX_PORT = 8594;
+export const callbackServerListenOptions = (port) => ({
+    host: "localhost",
+    port
+});
+export const callbackUrl = (port) => `http://localhost:${port}/callback`;
+export class HttpServerFactoryTag extends Context.Service()("@knpkv/atlassian-common/cli-auth/HttpServerFactory") {
+}
+/** Builds a {@link HttpServerFactoryTag} layer from a per-attempt server layer. */
+export const makeHttpServerFactory = (createLayerFn) => Layer.succeed(HttpServerFactoryTag, {
+    createServerLayer: createLayerFn
+});
+const AddressInUseCause = Schema.Struct({
+    code: Schema.Literal("EADDRINUSE")
+});
+const isAddressInUse = (error) => Schema.is(AddressInUseCause)(error.cause);
+const page = (heading, body) => HttpServerResponse.html(`<html><body><h1>${heading}</h1><p>${body}</p></body></html>`);
+/**
+ * Start a local HTTP server to receive the OAuth callback for `expectedState`.
+ *
+ * Fails with one `OAuthError` (step `authorize`) when no port in range can be
+ * bound; the server stops when the enclosing scope closes.
+ */
+export const startCallbackServer = (expectedState) => Effect.gen(function* () {
+    const factory = yield* HttpServerFactoryTag;
+    const deferred = yield* Deferred.make();
+    const scope = yield* Effect.scope;
+    // Map to OAuthError once, outside the retry, so a run of occupied ports
+    // does not nest one OAuthError inside another.
+    const buildServer = (port) => Layer.build(factory.createServerLayer(callbackServerListenOptions(port))).pipe(Scope.provide(scope), Effect.map((context) => Context.get(context, HttpServer.HttpServer)), Effect.catchIf((error) => isAddressInUse(error) && port < MAX_PORT, () => buildServer(port + 1)));
+    const server = yield* buildServer(DEFAULT_PORT).pipe(Effect.mapError((cause) => new OAuthError({ step: "authorize", cause })));
+    if (!NetAddress.isInetAddress(server.address)) {
+        return yield* new OAuthError({ step: "authorize", cause: "OAuth callback server must listen on a TCP port" });
+    }
+    const port = server.address.port;
+    const router = yield* HttpRouter.make;
+    yield* router.add("GET", "/callback", Effect.gen(function* () {
+        const req = yield* HttpServerRequest.HttpServerRequest;
+        const url = new URL(req.url, callbackUrl(port));
+        const code = url.searchParams.get("code");
+        const state = url.searchParams.get("state");
+        const error = url.searchParams.get("error");
+        const errorDescription = url.searchParams.get("error_description");
+        if (state !== expectedState) {
+            return page("Security Error", "State verification failed.").pipe(HttpServerResponse.setStatus(403));
+        }
+        if (error !== null && error !== "") {
+            // An empty description is no description: report the error code instead.
+            yield* Deferred.fail(deferred, new OAuthError({
+                step: "authorize",
+                cause: errorDescription === null || errorDescription === "" ? error : errorDescription
+            }));
+            return page("Authorization Failed", "You can close this window.");
+        }
+        if (code === null || code === "") {
+            yield* Deferred.fail(deferred, new OAuthError({ step: "authorize", cause: "No authorization code received" }));
+            return page("Error", "No authorization code received.");
+        }
+        yield* Deferred.succeed(deferred, code);
+        return page("Success!", "You can close this window and return to the terminal.");
+    }));
+    // Installs the handler in this scope and returns; a failure to install
+    // surfaces here rather than leaving the caller waiting on a dead server.
+    yield* HttpServer.serveEffect(router.asHttpEffect()).pipe(Effect.provideService(HttpServer.HttpServer, server));
+    return {
+        codePromise: Deferred.await(deferred),
+        port
+    };
+});
+//# sourceMappingURL=oauthServer.js.map

package/dist/cli-auth/internal/oauthServer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauthServer.js","sourceRoot":"","sources":["../../../src/cli-auth/internal/oauthServer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,KAAK,OAAO,MAAM,gBAAgB,CAAA;AACzC,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAA;AAC3C,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AACvC,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAA;AAE3F,OAAO,KAAK,KAAK,MAAM,cAAc,CAAA;AACrC,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA;AACvC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AACvC,OAAO,KAAK,KAAK,MAAM,cAAc,CAAA;AACrC,OAAO,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAA;AAEtD,MAAM,YAAY,GAAG,IAAI,CAAA;AACzB,MAAM,QAAQ,GAAG,IAAI,CAAA;AAoBrB,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,IAAY,EAA+B,EAAE,CAAC,CAAC;IACzF,IAAI,EAAE,WAAW;IACjB,IAAI;CACL,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,oBAAoB,IAAI,WAAW,CAAA;AAExF,MAAM,OAAO,oBAAqB,SAAQ,OAAO,CAAC,OAAO,EAGtD,CAAC,oDAAoD,CAAC;CAAG;AAE5D,mFAAmF;AACnF,MAAM,CAAC,MAAM,qBAAqB,GAAG,CACnC,aAE0E,EACvC,EAAE,CACrC,KAAK,CAAC,OAAO,CAAC,oBAAoB,EAAE;IAClC,iBAAiB,EAAE,aAAa;CACjC,CAAC,CAAA;AASJ,MAAM,iBAAiB,GAAG,MAAM,CAAC,MAAM,CAAC;IACtC,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC;CACnC,CAAC,CAAA;AAEF,MAAM,cAAc,GAAG,CAAC,KAAiC,EAAW,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,iBAAiB,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;AAEhH,MAAM,IAAI,GAAG,CAAC,OAAe,EAAE,IAAY,EAAE,EAAE,CAC7C,kBAAkB,CAAC,IAAI,CAAC,mBAAmB,OAAO,WAAW,IAAI,oBAAoB,CAAC,CAAA;AAExF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CACjC,aAAqB,EACgE,EAAE,CACvF,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,oBAAoB,CAAA;IAC3C,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAsB,CAAA;IAC3D,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAA;IAEjC,wEAAwE;IACxE,+CAA+C;IAC/C,MAAM,WAAW,GAAG,CAAC,IAAY,EAAiE,EAAE,CAClG,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,iBAAiB,CAAC,2BAA2B,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAC5E,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EACpB,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,UAAU,CAAC,UAAU,CAAC,CAAC,EACpE,MAAM,CAAC,OAAO,CACZ,CAAC,KAAK,EAAE,EAAE,CAAC,cAAc,CAAC,KAAK,CAAC,IAAI,IAAI,GAAG,QAAQ,EACnD,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,GAAG,CAAC,CAAC,CAC5B,CACF,CAAA;IAEH,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC,IAAI,CAClD,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,UAAU,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC,CACzE,CAAA;IAED,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QAC9C,OAAO,KAAK,CAAC,CAAC,IAAI,UAAU,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,iDAAiD,EAAE,CAAC,CAAA;IAC/G,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAA;IAEhC,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,IAAI,CAAA;IACrC,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CACf,KAAK,EACL,WAAW,EACX,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClB,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,iBAAiB,CAAC,iBAAiB,CAAA;QACtD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,WAAW,CAAC,IAAI,CAAC,CAAC,CAAA;QAC/C,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;QACzC,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;QAC3C,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;QAC3C,MAAM,gBAAgB,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAA;QAElE,IAAI,KAAK,KAAK,aAAa,EAAE,CAAC;YAC5B,OAAO,IAAI,CAAC,gBAAgB,EAAE,4BAA4B,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAA;QACrG,CAAC;QAED,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;YACnC,yEAAyE;YACzE,KAAK,CAAC,CAAC,QAAQ,CAAC,IAAI,CAClB,QAAQ,EACR,IAAI,UAAU,CAAC;gBACb,IAAI,EAAE,WAAW;gBACjB,KAAK,EAAE,gBAAgB,KAAK,IAAI,IAAI,gBAAgB,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,gBAAgB;aACvF,CAAC,CACH,CAAA;YACD,OAAO,IAAI,CAAC,sBAAsB,EAAE,4BAA4B,CAAC,CAAA;QACnE,CAAC;QAED,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,EAAE,EAAE,CAAC;YACjC,KAAK,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,UAAU,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,gCAAgC,EAAE,CAAC,CAAC,CAAA;YAC9G,OAAO,IAAI,CAAC,OAAO,EAAE,iCAAiC,CAAC,CAAA;QACzD,CAAC;QAED,KAAK,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAA;QACvC,OAAO,IAAI,CAAC,UAAU,EAAE,uDAAuD,CAAC,CAAA;IAClF,CAAC,CAAC,CACH,CAAA;IAED,uEAAuE;IACvE,yEAAyE;IACzE,KAAK,CAAC,CAAC,UAAU,CAAC,WAAW,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC,IAAI,CACvD,MAAM,CAAC,cAAc,CAAC,UAAU,CAAC,UAAU,EAAE,MAAM,CAAC,CACrD,CAAA;IAED,OAAO;QACL,WAAW,EAAE,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC;QACrC,IAAI;KACL,CAAA;AACH,CAAC,CAAC,CAAA"}

package/dist/cli-auth/openBrowser.d.ts

@@ -0,0 +1,16 @@
+import * as Effect from "effect/Effect";
+import type * as PlatformError from "effect/PlatformError";
+import { ChildProcessSpawner } from "effect/process";
+declare const BrowserOpenError_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
+    readonly _tag: "BrowserOpenError";
+} & Readonly<A>;
+/** A launcher ran but reported failure (for example `xdg-open` with no browser on a headless host). */
+export declare class BrowserOpenError extends BrowserOpenError_base<{
+    readonly command: string;
+    readonly exitCode: number;
+}> {
+}
+/** Open `url` in the user's browser. */
+export declare const openBrowser: (url: string) => Effect.Effect<void, BrowserOpenError | PlatformError.PlatformError, ChildProcessSpawner.ChildProcessSpawner>;
+export {};
+//# sourceMappingURL=openBrowser.d.ts.map

package/dist/cli-auth/openBrowser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"openBrowser.d.ts","sourceRoot":"","sources":["../../src/cli-auth/openBrowser.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AACvC,OAAO,KAAK,KAAK,aAAa,MAAM,sBAAsB,CAAA;AAC1D,OAAO,EAAgB,mBAAmB,EAAE,MAAM,gBAAgB,CAAA;;;;AAElE,uGAAuG;AACvG,qBAAa,gBAAiB,SAAQ,sBAAqC;IACzE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;CAC1B,CAAC;CAAG;AAoBL,wCAAwC;AACxC,eAAO,MAAM,WAAW,QACjB,MAAM,KACV,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,gBAAgB,GAAG,aAAa,CAAC,aAAa,EAAE,mBAAmB,CAAC,mBAAmB,CAI3G,CAAA"}

package/dist/cli-auth/openBrowser.js

@@ -0,0 +1,30 @@
+/**
+ * Cross-platform browser launcher backed by Effect child process services.
+ *
+ * Tries `open`, then `xdg-open`, then `rundll32.exe`, stopping at the first that
+ * exits 0. A launcher that is missing or exits non-zero falls through to the next;
+ * when none succeeds the last failure is reported, typed, so the caller decides
+ * whether a browser that never opened is fatal.
+ *
+ * @module
+ */
+import * as Data from "effect/Data";
+import * as Effect from "effect/Effect";
+import { ChildProcess, ChildProcessSpawner } from "effect/process";
+/** A launcher ran but reported failure (for example `xdg-open` with no browser on a headless host). */
+export class BrowserOpenError extends Data.TaggedError("BrowserOpenError") {
+}
+const run = (command, args) => Effect.gen(function* () {
+    const spawner = yield* ChildProcessSpawner.ChildProcessSpawner;
+    const exitCode = yield* spawner.exitCode(ChildProcess.make(command, args, {
+        stdin: "ignore",
+        stdout: "ignore",
+        stderr: "ignore"
+    }));
+    if (exitCode !== 0) {
+        return yield* new BrowserOpenError({ command, exitCode });
+    }
+});
+/** Open `url` in the user's browser. */
+export const openBrowser = (url) => run("open", [url]).pipe(Effect.catch(() => run("xdg-open", [url])), Effect.catch(() => run("rundll32.exe", ["url.dll,FileProtocolHandler", url])));
+//# sourceMappingURL=openBrowser.js.map

package/dist/cli-auth/openBrowser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"openBrowser.js","sourceRoot":"","sources":["../../src/cli-auth/openBrowser.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,KAAK,IAAI,MAAM,aAAa,CAAA;AACnC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AAEvC,OAAO,EAAE,YAAY,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAA;AAElE,uGAAuG;AACvG,MAAM,OAAO,gBAAiB,SAAQ,IAAI,CAAC,WAAW,CAAC,kBAAkB,CAGvE;CAAG;AAEL,MAAM,GAAG,GAAG,CACV,OAAe,EACf,IAA2B,EACmF,EAAE,CAChH,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,mBAAmB,CAAC,mBAAmB,CAAA;IAC9D,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,QAAQ,CACtC,YAAY,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE;QAC/B,KAAK,EAAE,QAAQ;QACf,MAAM,EAAE,QAAQ;QAChB,MAAM,EAAE,QAAQ;KACjB,CAAC,CACH,CAAA;IACD,IAAI,QAAQ,KAAK,CAAC,EAAE,CAAC;QACnB,OAAO,KAAK,CAAC,CAAC,IAAI,gBAAgB,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAA;IAC3D,CAAC;AACH,CAAC,CAAC,CAAA;AAEJ,wCAAwC;AACxC,MAAM,CAAC,MAAM,WAAW,GAAG,CACzB,GAAW,EACmG,EAAE,CAChH,GAAG,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CACrB,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAC1C,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,cAAc,EAAE,CAAC,6BAA6B,EAAE,GAAG,CAAC,CAAC,CAAC,CAC9E,CAAA"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@knpkv/atlassian-common",
-  "version": "1.5.0",
+  "version": "1.7.0",
   "description": "Shared utilities for Atlassian tools (AST, serializers, auth, config)",
   "license": "MIT",
   "author": "knpkv",
@@ -42,6 +42,10 @@
       "import": "./dist/auth/index.js",
       "types": "./dist/auth/index.d.ts"
     },
+    "./cli-auth": {
+      "import": "./dist/cli-auth/index.js",
+      "types": "./dist/cli-auth/index.d.ts"
+    },
     "./config": {
       "import": "./dist/config/index.js",
       "types": "./dist/config/index.d.ts"