@knpkv/atlassian-common 1.6.0 → 1.8.0

package/CHANGELOG.md

@@ -1,5 +1,23 @@
 # @knpkv/atlassian-common
 
+## 1.8.0
+
+### Minor Changes
+
+- [#475](https://github.com/knpkv/npm/pull/475) [`08c62b7`](https://github.com/knpkv/npm/commit/08c62b787c649d8f78753515be6faf317791d62b) Thanks [@konopkov](https://github.com/konopkov)! - `auth use <profile>` and `auth remove <profile>` now fail with a typed `ProfileNotFoundError` (exported from `@knpkv/atlassian-common/cli-auth`) and exit non-zero when no stored profile matches. The failure names the profile (`Profile not found: <profile>`, on stderr through each CLI's error handler); previously the line went to stdout and the command exited 0, so a script could not tell a typo from a switch.
+
+## 1.7.0
+
+### Minor Changes
+
+- [#472](https://github.com/knpkv/npm/pull/472) [`d12c336`](https://github.com/knpkv/npm/commit/d12c3364e56abb7cfd32aa693c5406788a67e3f5) Thanks [@konopkov](https://github.com/konopkov)! - One shared `auth` command group for jira and confluence: `makeAuthCommand(service, descriptor, options)` in `@knpkv/atlassian-common/cli-auth`. Each CLI exports one descriptor (`jiraCliDescriptor`, `confluenceCliDescriptor`: command name, product name, login scopes) that feeds both its auth and its `auth` commands.
+
+  - `jira auth create` lists every scope `jira auth login` requests. It previously listed three of five (missing `write:jira-work` and `manage:jira-project`), so an app set up from its instructions could not log in.
+  - `jira auth manage` is new: it opens the developer console with the scope and callback checklist.
+  - `confluence auth profiles`, `auth use <profile>` and `auth remove <profile>` are new; the docs already described them.
+  - `confluence auth status` prints the active profile, account, site and profile ID.
+  - `auth create` and `auth manage` print the URL first and exit non-zero when no browser opens (jira's `create` used to ignore that).
+
 ## 1.6.0
 
 ### Minor Changes

package/dist/cli-auth/AtlassianCliAuth.d.ts

@@ -55,6 +55,14 @@ export interface AccessibleSite {
     readonly name: string;
     readonly url: string;
 }
+/**
+ * Who an Atlassian CLI is: the part of {@link AtlassianCliAuthOptions} its `auth` commands also read.
+ * A CLI defines it once and passes the same value to both, so the setup text lists exactly the
+ * scopes `login` requests.
+ *
+ * @category Types
+ */
+export type AtlassianCliDescriptor = Pick<AtlassianCliAuthOptions<never>, "commandName" | "productName" | "scopes">;
 /**
  * The auth operations an Atlassian CLI exposes.
  *

package/dist/cli-auth/AtlassianCliAuth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"AtlassianCliAuth.d.ts","sourceRoot":"","sources":["../../src/cli-auth/AtlassianCliAuth.ts"],"names":[],"mappings":"AA2BA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AAEvC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AACvC,OAAO,KAAK,UAAU,MAAM,mBAAmB,CAAA;AAC/C,OAAO,KAAK,UAAU,MAAM,wBAAwB,CAAA;AAEpD,OAAO,KAAK,IAAI,MAAM,aAAa,CAAA;AACnC,OAAO,KAAK,KAAK,aAAa,MAAM,sBAAsB,CAAA;AAC1D,OAAO,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAA;AACpD,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAA;AAG3C,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAA;AAUnD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAA;AAU5D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAA;AAClE,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAA;AAC3D,OAAO,KAAK,EAAE,WAAW,EAAc,SAAS,EAAE,MAAM,2BAA2B,CAAA;AACnF,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAA;AAEhE,OAAO,EAAe,oBAAoB,EAAuB,MAAM,2BAA2B,CAAA;AAGlG,KAAK,YAAY,GAAG,eAAe,GAAG,kBAAkB,GAAG,aAAa,CAAC,aAAa,CAAA;AAEtF;;;;GAIG;AACH,MAAM,WAAW,uBAAuB,CAAC,YAAY;IACnD,0EAA0E;IAC1E,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,iEAAiE;IACjE,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,mEAAmE;IACnE,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,uCAAuC;IACvC,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC,MAAM,CAAC,CAAA;IACtC,+EAA+E;IAC/E,QAAQ,CAAC,WAAW,EAAE,MAAM,YAAY,CAAA;IACxC;;;OAGG;IACH,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC,MAAM,CACxC,WAAW,GAAG,IAAI,EAClB,eAAe,GAAG,kBAAkB,EACpC,UAAU,CAAC,UAAU,GAAG,IAAI,CAAC,IAAI,GAAG,gBAAgB,CACrD,CAAA;CACF;AAED;;;;GAIG;AACH,MAAM,WAAW,YAAY;IAC3B,4DAA4D;IAC5D,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAC1B;AAED;;;;GAIG;AACH,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;CACrB;AAED;;;;GAIG;AACH,MAAM,WAAW,gBAAgB,CAAC,YAAY;IAC5C,yCAAyC;IACzC,QAAQ,CAAC,SAAS,EAAE,CAAC,MAAM,EAAE,WAAW,KAAK,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,YAAY,CAAC,CAAA;IAC9E,mCAAmC;IACnC,QAAQ,CAAC,YAAY,EAAE,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,YAAY,CAAC,CAAA;IACjE,mGAAmG;IACnG,QAAQ,CAAC,KAAK,EAAE,CACd,OAAO,CAAC,EAAE,YAAY,KACnB,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,cAAc,CAAC,GAAG,IAAI,EAAE,UAAU,GAAG,YAAY,CAAC,CAAA;IACnF,4DAA4D;IAC5D,QAAQ,CAAC,MAAM,EAAE,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,UAAU,GAAG,YAAY,CAAC,CAAA;IACrE,6CAA6C;IAC7C,QAAQ,CAAC,cAAc,EAAE,MAAM,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,GAAG,UAAU,GAAG,YAAY,CAAC,CAAA;IACjH,qCAAqC;IACrC,QAAQ,CAAC,UAAU,EAAE,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,YAAY,GAAG,YAAY,CAAC,CAAA;IAC7E,qCAAqC;IACrC,QAAQ,CAAC,UAAU,EAAE,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,YAAY,GAAG,YAAY,CAAC,CAAA;IAC7E,8CAA8C;IAC9C,QAAQ,CAAC,cAAc,EAAE,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,GAAG,IAAI,EAAE,YAAY,CAAC,CAAA;IAC5E,8BAA8B;IAC9B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,MAAM,CAAC,MAAM,CAAC,WAAW,GAAG,IAAI,EAAE,YAAY,CAAC,CAAA;IAChF,gCAAgC;IAChC,QAAQ,CAAC,YAAY,EAAE,MAAM,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,WAAW,CAAC,EAAE,YAAY,CAAC,CAAA;IACpF,2EAA2E;IAC3E,QAAQ,CAAC,aAAa,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,MAAM,CAAC,MAAM,CAAC,WAAW,GAAG,IAAI,EAAE,YAAY,CAAC,CAAA;IAC7F,2EAA2E;IAC3E,QAAQ,CAAC,aAAa,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,MAAM,CAAC,MAAM,CAAC,WAAW,GAAG,IAAI,EAAE,YAAY,CAAC,CAAA;IAC7F,iCAAiC;IACjC,QAAQ,CAAC,UAAU,EAAE,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,YAAY,CAAC,CAAA;CAChE;AA8BD;;;;;;;;GAQG;AACH,eAAO,MAAM,oBAAoB,GAAuC,YAAY,wQAmVnF,CAAA"}
+{"version":3,"file":"AtlassianCliAuth.d.ts","sourceRoot":"","sources":["../../src/cli-auth/AtlassianCliAuth.ts"],"names":[],"mappings":"AA2BA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AAEvC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AACvC,OAAO,KAAK,UAAU,MAAM,mBAAmB,CAAA;AAC/C,OAAO,KAAK,UAAU,MAAM,wBAAwB,CAAA;AAEpD,OAAO,KAAK,IAAI,MAAM,aAAa,CAAA;AACnC,OAAO,KAAK,KAAK,aAAa,MAAM,sBAAsB,CAAA;AAC1D,OAAO,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAA;AACpD,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAA;AAG3C,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAA;AAUnD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAA;AAU5D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAA;AAClE,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAA;AAC3D,OAAO,KAAK,EAAE,WAAW,EAAc,SAAS,EAAE,MAAM,2BAA2B,CAAA;AACnF,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAA;AAEhE,OAAO,EAAe,oBAAoB,EAAuB,MAAM,2BAA2B,CAAA;AAGlG,KAAK,YAAY,GAAG,eAAe,GAAG,kBAAkB,GAAG,aAAa,CAAC,aAAa,CAAA;AAEtF;;;;GAIG;AACH,MAAM,WAAW,uBAAuB,CAAC,YAAY;IACnD,0EAA0E;IAC1E,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,iEAAiE;IACjE,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,mEAAmE;IACnE,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,uCAAuC;IACvC,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC,MAAM,CAAC,CAAA;IACtC,+EAA+E;IAC/E,QAAQ,CAAC,WAAW,EAAE,MAAM,YAAY,CAAA;IACxC;;;OAGG;IACH,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC,MAAM,CACxC,WAAW,GAAG,IAAI,EAClB,eAAe,GAAG,kBAAkB,EACpC,UAAU,CAAC,UAAU,GAAG,IAAI,CAAC,IAAI,GAAG,gBAAgB,CACrD,CAAA;CACF;AAED;;;;GAIG;AACH,MAAM,WAAW,YAAY;IAC3B,4DAA4D;IAC5D,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAC1B;AAED;;;;GAIG;AACH,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;CACrB;AAED;;;;;;GAMG;AACH,MAAM,MAAM,sBAAsB,GAAG,IAAI,CAAC,uBAAuB,CAAC,KAAK,CAAC,EAAE,aAAa,GAAG,aAAa,GAAG,QAAQ,CAAC,CAAA;AAEnH;;;;GAIG;AACH,MAAM,WAAW,gBAAgB,CAAC,YAAY;IAC5C,yCAAyC;IACzC,QAAQ,CAAC,SAAS,EAAE,CAAC,MAAM,EAAE,WAAW,KAAK,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,YAAY,CAAC,CAAA;IAC9E,mCAAmC;IACnC,QAAQ,CAAC,YAAY,EAAE,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,YAAY,CAAC,CAAA;IACjE,mGAAmG;IACnG,QAAQ,CAAC,KAAK,EAAE,CACd,OAAO,CAAC,EAAE,YAAY,KACnB,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,cAAc,CAAC,GAAG,IAAI,EAAE,UAAU,GAAG,YAAY,CAAC,CAAA;IACnF,4DAA4D;IAC5D,QAAQ,CAAC,MAAM,EAAE,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,UAAU,GAAG,YAAY,CAAC,CAAA;IACrE,6CAA6C;IAC7C,QAAQ,CAAC,cAAc,EAAE,MAAM,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,GAAG,UAAU,GAAG,YAAY,CAAC,CAAA;IACjH,qCAAqC;IACrC,QAAQ,CAAC,UAAU,EAAE,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,YAAY,GAAG,YAAY,CAAC,CAAA;IAC7E,qCAAqC;IACrC,QAAQ,CAAC,UAAU,EAAE,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,YAAY,GAAG,YAAY,CAAC,CAAA;IAC7E,8CAA8C;IAC9C,QAAQ,CAAC,cAAc,EAAE,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,GAAG,IAAI,EAAE,YAAY,CAAC,CAAA;IAC5E,8BAA8B;IAC9B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,MAAM,CAAC,MAAM,CAAC,WAAW,GAAG,IAAI,EAAE,YAAY,CAAC,CAAA;IAChF,gCAAgC;IAChC,QAAQ,CAAC,YAAY,EAAE,MAAM,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,WAAW,CAAC,EAAE,YAAY,CAAC,CAAA;IACpF,2EAA2E;IAC3E,QAAQ,CAAC,aAAa,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,MAAM,CAAC,MAAM,CAAC,WAAW,GAAG,IAAI,EAAE,YAAY,CAAC,CAAA;IAC7F,2EAA2E;IAC3E,QAAQ,CAAC,aAAa,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,MAAM,CAAC,MAAM,CAAC,WAAW,GAAG,IAAI,EAAE,YAAY,CAAC,CAAA;IAC7F,iCAAiC;IACjC,QAAQ,CAAC,UAAU,EAAE,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,YAAY,CAAC,CAAA;CAChE;AA8BD;;;;;;;;GAQG;AACH,eAAO,MAAM,oBAAoB,GAAuC,YAAY,wQAmVnF,CAAA"}

package/dist/cli-auth/AtlassianCliAuth.js.map

@@ -1 +1 @@
-{"version":3,"file":"AtlassianCliAuth.js","sourceRoot":"","sources":["../../src/cli-auth/AtlassianCliAuth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,OAAO,KAAK,KAAK,MAAM,cAAc,CAAA;AACrC,OAAO,KAAK,OAAO,MAAM,gBAAgB,CAAA;AACzC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AACvC,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAA;AAC3C,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AACvC,OAAO,KAAK,UAAU,MAAM,mBAAmB,CAAA;AAC/C,OAAO,KAAK,UAAU,MAAM,wBAAwB,CAAA;AACpD,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AACvC,OAAO,KAAK,IAAI,MAAM,aAAa,CAAA;AAEnC,OAAO,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAA;AACpD,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAA;AAC3C,OAAO,KAAK,GAAG,MAAM,YAAY,CAAA;AACjC,OAAO,EAAE,YAAY,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAA;AACpG,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAA;AACnD,OAAO,EACL,iBAAiB,EACjB,qBAAqB,EACrB,sBAAsB,EACtB,WAAW,EACX,YAAY,EACZ,WAAW,EACZ,MAAM,4BAA4B,CAAA;AACnC,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA;AAE9C,OAAO,EACL,mBAAmB,EACnB,uBAAuB,EACvB,iBAAiB,EACjB,sBAAsB,EACtB,YAAY,EACZ,gBAAgB,EAChB,0BAA0B,EAC3B,MAAM,2BAA2B,CAAA;AAElC,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAA;AAG3D,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAA;AAC9F,OAAO,EAAE,WAAW,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAA;AAClG,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA;AA0F9C,+EAA+E;AAC/E,+EAA+E;AAC/E,0EAA0E;AAC1E,8EAA8E;AAC9E,sCAAsC;AACtC,EAAE;AACF,yEAAyE;AACzE,4EAA4E;AAC5E,kEAAkE;AAClE,EAAE;AACF,yEAAyE;AACzE,gFAAgF;AAChF,+EAA+E;AAC/E,8DAA8D;AAC9D,2EAA2E;AAC3E,+EAA+E;AAC/E,kDAAkD;AAClD,EAAE;AACF,+EAA+E;AAC/E,+EAA+E;AAC/E,gFAAgF;AAChF,iFAAiF;AACjF,uEAAuE;AACvE,8BAA8B;AAC9B,MAAM,eAAe,GAAG,YAAY,CAAA;AAEpC;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,MAAM,CAAC,EAAE,CAAC,uBAAuB,CAAC,CAAC,CACrE,OAA8C,EAW9C,EAAE,CACF,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,EAAE,WAAW,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAA;IAC3E,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,UAAU,CAAA;IAC/C,MAAM,mBAAmB,GAAG,KAAK,CAAC,CAAC,mBAAmB,CAAC,mBAAmB,CAAA;IAC1E,MAAM,aAAa,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,MAAM,CAAA;IAC1C,MAAM,aAAa,GAAG,KAAK,CAAC,CAAC,oBAAoB,CAAA;IAEjD,MAAM,QAAQ,GAAG,MAAM,CAAC,cAAc,CAAC,UAAU,CAAC,UAAU,EAAE,UAAU,CAAC,CAAA;IACzE,MAAM,UAAU,GAAG,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAA;IACtE,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,UAAU,CAAA;IAC/C,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAA;IAC7B,MAAM,aAAa,GAAG,KAAK,CAAC,CAAC,gBAAgB,CAAA;IAC7C,MAAM,WAAW,GAAG,CAAU,MAA8B,EAAE,EAAE,CAC9D,MAAM,CAAC,IAAI,CACT,MAAM,CAAC,cAAc,CAAC,UAAU,CAAC,UAAU,EAAE,UAAU,CAAC,EACxD,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,EACtC,MAAM,CAAC,cAAc,CAAC,gBAAgB,EAAE,aAAa,CAAC,CACvD,CAAA;IAEH,MAAM,SAAS,GAAG,GAAG,EAAE,CAAC,sBAAsB,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;IAC1E,MAAM,SAAS,GAAG,CAAC,KAAiB,EAAE,EAAE,CAAC,gBAAgB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;IAC5F,MAAM,WAAW,GAAG,GAAG,EAAE,CAAC,mBAAmB,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;IACzE,MAAM,UAAU,GAAG,CAAC,MAAmB,EAAE,EAAE,CAAC,eAAe,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;IAC/F,MAAM,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,CAAA;IACnD,MAAM,UAAU,GAAG,MAAM,CAAC,EAAE,CAAC,6BAA6B,CAAC,CAAC,GAAG,EAAE,CAC/D,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClB,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAA;QAC/C,IAAI,MAAM,KAAK,IAAI,IAAI,iBAAiB,KAAK,SAAS;YAAE,OAAO,MAAM,CAAA;QACrE,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,iBAAiB,CAAA;QACvC,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YACpB,KAAK,CAAC,CAAC,eAAe,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAA;QAC1C,CAAC;QACD,OAAO,MAAM,CAAA;IACf,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CACrB,CAAA;IAED,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,IAAI,CAAiC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAA;IAElF,0EAA0E;IAC1E,oDAAoD;IACpD,MAAM,iBAAiB,GAAG,MAAM,CAAC,EAAE,CAAC,oCAAoC,CAAC,CAAC,CAAC,GAAW,EAAuB,EAAE,CAC7G,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,CACnB,MAAM,CAAC,cAAc,CAAC,mBAAmB,CAAC,mBAAmB,EAAE,mBAAmB,CAAC,EACnF,MAAM,CAAC,SAAS,CAAC;QACf,gBAAgB,EAAE,CAAC,KAAK,EAAE,EAAE,CAC1B,OAAO,CAAC,KAAK,CAAC,6BAA6B,KAAK,CAAC,OAAO,WAAW,KAAK,CAAC,QAAQ,yBAAyB,CAAC;QAC7G,aAAa,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,gDAAgD,CAAC;KACrF,CAAC,CACH,CACF,CAAA;IAED,MAAM,SAAS,GAAG,MAAM,CAAC,EAAE,CAAC,4BAA4B,CAAC,CAAC,GAGxD,EAAE,CACF,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClB,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,UAAU,EAAE,CAAA;QAClC,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YACpB,OAAO,KAAK,CAAC,CAAC,IAAI,UAAU,CAAC;gBAC3B,IAAI,EAAE,WAAW;gBACjB,KAAK,EAAE,8BAA8B,WAAW,yBAAyB;aAC1E,CAAC,CAAA;QACJ,CAAC;QACD,OAAO,MAAM,CAAA;IACf,CAAC,CAAC,CACH,CAAA;IAED,MAAM,iBAAiB,GAAG,MAAM,CAAC,EAAE,CAAC,oCAAoC,CAAC,CAAC,CACxE,KAAiB,EACjB,MAAmB,EACmC,EAAE,CACxD,MAAM,CAAC,eAAe,CACpB,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClB,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,IAAI,CACrD,QAAQ,EACR,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,EAC/B,MAAM,CAAC,QAAQ,CACb,cAAc,EACd,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,sBAAsB,eAAe,EAAE,EAAE,CAAC,CAAC,CACvG,CACF,CAAA;QACD,KAAK,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAA;QACzB,OAAO,OAAO,CAAA;IAChB,CAAC,CAAC,CACH,CACF,CAAA;IAED,MAAM,YAAY,GAAG,MAAM,CAAC,EAAE,CAAC,+BAA+B,CAAC,CAAC,GAAG,EAAE,CACnE,UAAU,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAC3D,CAAA;IAED,MAAM,KAAK,GAAG,MAAM,CAAC,EAAE,CAAC,wBAAwB,CAAC,CAAC,CAChD,YAA2B,EACqD,EAAE,CAClF,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClB,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,SAAS,EAAE,CAAA;QACjC,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,YAAY,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;QACpD,MAAM,YAAY,GAAG,KAAK,CAAC,CAAC,oBAAoB,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;QACnE,MAAM,aAAa,GAAG,KAAK,CAAC,CAAC,oBAAoB,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;QAEhF,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,MAAM,CACzC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;YAClB,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC,IAAI,CAClE,MAAM,CAAC,cAAc,CAAC,oBAAoB,EAAE,aAAa,CAAC,CAC3D,CAAA;YACD,MAAM,OAAO,GAAG,YAAY,CAAC;gBAC3B,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,KAAK;gBACL,IAAI;gBACJ,WAAW,EAAE,WAAW,CAAC,IAAI,CAAC;gBAC9B,MAAM,EAAE,CAAC,GAAG,MAAM,CAAC;gBACnB,aAAa;aACd,CAAC,CAAA;YAEF,KAAK,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,yDAAyD,IAAI,MAAM,CAAC,CAAA;YACvF,KAAK,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,mCAAmC,OAAO,EAAE,CAAC,CAAA;YAChE,KAAK,CAAC,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAA;YACjC,KAAK,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,uDAAuD,CAAC,CAAA;YAE3E,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,WAAW,CAAC,IAAI,CAClC,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,EAC3B,MAAM,CAAC,QAAQ,CACb,cAAc,EACd,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC,CAAC,CAC3F,CACF,CAAA;YACD,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA;QACvB,CAAC,CAAC,CACH,CAAA;QAED,KAAK,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,+BAA+B,CAAC,CAAA;QACnD,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,qBAAqB,CAAC,IAAI,EAAE,MAAM,EAAE;YACxD,IAAI;YACJ,WAAW,EAAE,WAAW,CAAC,IAAI,CAAC;YAC9B,YAAY;SACb,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QAEjB,KAAK,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAA;QAClD,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,sBAAsB,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QAE/E,MAAM,CAAC,KAAK,EAAE,GAAG,MAAM,CAAC,GAAG,KAAK,CAAA;QAChC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO,KAAK,CAAC,CAAC,IAAI,UAAU,CAAC;gBAC3B,IAAI,EAAE,WAAW;gBACjB,KAAK,EAAE,MAAM,WAAW,+BAA+B;aACxD,CAAC,CAAA;QACJ,CAAC;QAED,IAAI,IAAI,GAAG,KAAK,CAAA;QAChB,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtB,MAAM,OAAO,GAAG,YAAY,EAAE,OAAO,CAAA;YACrC,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,EAAE,EAAE,CAAC;gBAC5C,KAAK,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,WAAW,kCAAkC,CAAC,CAAA;gBAC7E,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;oBACtB,KAAK,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,GAAG,EAAE,CAAC,CAAA;gBAC/C,CAAC;gBACD,KAAK,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,WAAW,4CAA4C,CAAC,CAAA;gBACrF,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAA;YACnE,CAAC;YACD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,OAAO,CAAC,CAAA;YACpD,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC1B,MAAM,SAAS,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;gBACxE,OAAO,KAAK,CAAC,CAAC,IAAI,UAAU,CAAC;oBAC3B,IAAI,EAAE,WAAW;oBACjB,KAAK,EAAE,SAAS,OAAO,kCAAkC,SAAS,EAAE;iBACrE,CAAC,CAAA;YACJ,CAAC;YACD,IAAI,GAAG,OAAO,CAAA;QAChB,CAAC;QAED,KAAK,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAA;QAC3C,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QAEnE,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAA;QAC5C,KAAK,CAAC,CAAC,SAAS,CAAC,iBAAiB,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAA;QAC9D,KAAK,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,KAAK,GAAG,CAAC,CAAA;QAC/D,OAAO,SAAS,CAAA;IAClB,CAAC,CAAC,CACH,CAAA;IAED,MAAM,MAAM,GAAG,MAAM,CAAC,EAAE,CAAC,yBAAyB,CAAC,CAAC,GAAmD,EAAE,CACvG,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClB,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,SAAS,EAAE,CAAA;QAChC,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YACnB,KAAK,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAA;YACnC,OAAM;QACR,CAAC;QAED,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,UAAU,EAAE,CAAA;QAClC,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YACpB,KAAK,CAAC,CAAC,WAAW,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,IAAI,CACpC,QAAQ,EACR,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAC,EAC5D,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,oCAAoC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CACzF,CAAA;QACH,CAAC;QAED,KAAK,CAAC,CAAC,WAAW,EAAE,CAAA;IACtB,CAAC,CAAC,CACH,CAAA;IAED,MAAM,cAAc,GAAG,MAAM,CAAC,EAAE,CAAC,iCAAiC,CAAC,CAAC,GAGlE,EAAE,CACF,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClB,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,SAAS,EAAE,CAAA;QAChC,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YACnB,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAA;QAC1C,CAAC;QAED,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAA;QAC5C,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC;YACpC,OAAO,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAA;QAC1C,CAAC;QAED,8DAA8D;QAC9D,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAyC,CAAA;QAC9E,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,OAAO,EAAE,EAAE,CAC1D,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC;YACpB,CAAC,CAAE,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAuE;YACjG,CAAC,CAAE,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAuE,CAAC,CAAA;QAE/G,8DAA8D;QAC9D,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAC1B,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;YACjD,OAAO,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,CAAA;QAC9C,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;YAClC,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,SAAS,EAAE,CAAA;YACjC,uEAAuE;YACvE,uEAAuE;YACvE,gEAAgE;YAChE,uEAAuE;YACvE,KAAK,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAA;YACpD,OAAO,KAAK,CAAC,CAAC,iBAAiB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAA;QAChD,CAAC,CAAC,CAAC,IAAI,CACL,MAAM,CAAC,QAAQ,CAAC,YAAY,EAAE,CAAC,KAAK,EAAE,EAAE;YACtC,sEAAsE;YACtE,mEAAmE;YACnE,kEAAkE;YAClE,qEAAqE;YACrE,sEAAsE;YACtE,oEAAoE;YACpE,6DAA6D;YAC7D,EAAE;YACF,sEAAsE;YACtE,sEAAsE;YACtE,gEAAgE;YAChE,sEAAsE;YACtE,gEAAgE;YAChE,EAAE;YACF,oEAAoE;YACpE,sEAAsE;YACtE,oEAAoE;YACpE,uEAAuE;YACvE,8DAA8D;YAC9D,sEAAsE;YACtE,sEAAsE;YACtE,sEAAsE;YACtE,uEAAuE;YACvE,sBAAsB;YACtB,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,KAAK,CAAA;YACnC,MAAM,QAAQ,GAAG,SAAS,KAAK,eAAe,IAAI,CAAC,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,CAAC,CAAA;YACpF,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,QAAQ,EAAE,CAAC;gBACzC,OAAO,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;oBACzB,KAAK,CAAC,CAAC,WAAW,EAAE,CAAA;oBACpB,OAAO,KAAK,CAAC,CAAC,IAAI,UAAU,CAAC;wBAC3B,IAAI,EAAE,SAAS;wBACf,KAAK,EAAE,sCAAsC,WAAW,kCAAkC;wBAC1F,MAAM;wBACN,SAAS;qBACV,CAAC,CAAA;gBACJ,CAAC,CAAC,CAAA;YACJ,CAAC;YACD,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAC3B,CAAC,CAAC,CACH,CAAA;QAED,mEAAmE;QACnE,sEAAsE;QACtE,6DAA6D;QAC7D,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAChC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CACrB,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,CACxF,CACF,CAAA;QAED,OAAO,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,CAAA;IAC3C,CAAC,CAAC,CACH,CAAA;IAED,MAAM,gBAAgB,GAAG,CAAI,IAA8B,EAAE,EAAE,CAAC,GAAkD,EAAE,CAClH,SAAS,EAAE,CAAC,IAAI,CACd,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CACrG,CAAA;IAEH,OAAO;QACL,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC,4BAA4B,CAAC,CAAC,UAAU,CAAC;QAC9D,YAAY;QACZ,KAAK;QACL,MAAM;QACN,cAAc;QACd,UAAU,EAAE,MAAM,CAAC,EAAE,CAAC,6BAA6B,CAAC,CAAC,gBAAgB,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACjG,UAAU,EAAE,MAAM,CAAC,EAAE,CAAC,6BAA6B,CAAC,CAAC,gBAAgB,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACjG,cAAc,EAAE,MAAM,CAAC,EAAE,CAAC,iCAAiC,CAAC,CAAC,GAAG,EAAE,CAChE,SAAS,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,EAAE,IAAI,IAAI,IAAI,CAAC,CAAC,CAC7D;QACD,gBAAgB,EAAE,MAAM,CAAC,EAAE,CAAC,mCAAmC,CAAC,CAAC,GAAG,EAAE,CACpE,iBAAiB,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAC9C;QACD,YAAY,EAAE,MAAM,CAAC,EAAE,CAAC,+BAA+B,CAAC,CAAC,GAAG,EAAE,CAC5D,YAAY,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,WAAW,CAAC,CAChF;QACD,aAAa,EAAE,MAAM,CAAC,EAAE,CAAC,gCAAgC,CAAC,CAAC,CAAC,QAAQ,EAAE,EAAE,CACtE,0BAA0B,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CACjE;QACD,aAAa,EAAE,MAAM,CAAC,EAAE,CAAC,gCAAgC,CAAC,CAAC,CAAC,QAAQ,EAAE,EAAE,CACtE,uBAAuB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAC9D;QACD,UAAU,EAAE,MAAM,CAAC,EAAE,CAAC,6BAA6B,CAAC,CAAC,GAAG,EAAE,CACxD,SAAS,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CACxD;KACF,CAAA;AACH,CAAC,CAAC,CACH,CAAA"}
+{"version":3,"file":"AtlassianCliAuth.js","sourceRoot":"","sources":["../../src/cli-auth/AtlassianCliAuth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,OAAO,KAAK,KAAK,MAAM,cAAc,CAAA;AACrC,OAAO,KAAK,OAAO,MAAM,gBAAgB,CAAA;AACzC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AACvC,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAA;AAC3C,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AACvC,OAAO,KAAK,UAAU,MAAM,mBAAmB,CAAA;AAC/C,OAAO,KAAK,UAAU,MAAM,wBAAwB,CAAA;AACpD,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AACvC,OAAO,KAAK,IAAI,MAAM,aAAa,CAAA;AAEnC,OAAO,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAA;AACpD,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAA;AAC3C,OAAO,KAAK,GAAG,MAAM,YAAY,CAAA;AACjC,OAAO,EAAE,YAAY,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAA;AACpG,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAA;AACnD,OAAO,EACL,iBAAiB,EACjB,qBAAqB,EACrB,sBAAsB,EACtB,WAAW,EACX,YAAY,EACZ,WAAW,EACZ,MAAM,4BAA4B,CAAA;AACnC,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA;AAE9C,OAAO,EACL,mBAAmB,EACnB,uBAAuB,EACvB,iBAAiB,EACjB,sBAAsB,EACtB,YAAY,EACZ,gBAAgB,EAChB,0BAA0B,EAC3B,MAAM,2BAA2B,CAAA;AAElC,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAA;AAG3D,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAA;AAC9F,OAAO,EAAE,WAAW,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAA;AAClG,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA;AAmG9C,+EAA+E;AAC/E,+EAA+E;AAC/E,0EAA0E;AAC1E,8EAA8E;AAC9E,sCAAsC;AACtC,EAAE;AACF,yEAAyE;AACzE,4EAA4E;AAC5E,kEAAkE;AAClE,EAAE;AACF,yEAAyE;AACzE,gFAAgF;AAChF,+EAA+E;AAC/E,8DAA8D;AAC9D,2EAA2E;AAC3E,+EAA+E;AAC/E,kDAAkD;AAClD,EAAE;AACF,+EAA+E;AAC/E,+EAA+E;AAC/E,gFAAgF;AAChF,iFAAiF;AACjF,uEAAuE;AACvE,8BAA8B;AAC9B,MAAM,eAAe,GAAG,YAAY,CAAA;AAEpC;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,MAAM,CAAC,EAAE,CAAC,uBAAuB,CAAC,CAAC,CACrE,OAA8C,EAW9C,EAAE,CACF,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,EAAE,WAAW,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAA;IAC3E,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,UAAU,CAAA;IAC/C,MAAM,mBAAmB,GAAG,KAAK,CAAC,CAAC,mBAAmB,CAAC,mBAAmB,CAAA;IAC1E,MAAM,aAAa,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,MAAM,CAAA;IAC1C,MAAM,aAAa,GAAG,KAAK,CAAC,CAAC,oBAAoB,CAAA;IAEjD,MAAM,QAAQ,GAAG,MAAM,CAAC,cAAc,CAAC,UAAU,CAAC,UAAU,EAAE,UAAU,CAAC,CAAA;IACzE,MAAM,UAAU,GAAG,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAA;IACtE,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,UAAU,CAAA;IAC/C,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAA;IAC7B,MAAM,aAAa,GAAG,KAAK,CAAC,CAAC,gBAAgB,CAAA;IAC7C,MAAM,WAAW,GAAG,CAAU,MAA8B,EAAE,EAAE,CAC9D,MAAM,CAAC,IAAI,CACT,MAAM,CAAC,cAAc,CAAC,UAAU,CAAC,UAAU,EAAE,UAAU,CAAC,EACxD,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,EACtC,MAAM,CAAC,cAAc,CAAC,gBAAgB,EAAE,aAAa,CAAC,CACvD,CAAA;IAEH,MAAM,SAAS,GAAG,GAAG,EAAE,CAAC,sBAAsB,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;IAC1E,MAAM,SAAS,GAAG,CAAC,KAAiB,EAAE,EAAE,CAAC,gBAAgB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;IAC5F,MAAM,WAAW,GAAG,GAAG,EAAE,CAAC,mBAAmB,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;IACzE,MAAM,UAAU,GAAG,CAAC,MAAmB,EAAE,EAAE,CAAC,eAAe,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;IAC/F,MAAM,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,CAAA;IACnD,MAAM,UAAU,GAAG,MAAM,CAAC,EAAE,CAAC,6BAA6B,CAAC,CAAC,GAAG,EAAE,CAC/D,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClB,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAA;QAC/C,IAAI,MAAM,KAAK,IAAI,IAAI,iBAAiB,KAAK,SAAS;YAAE,OAAO,MAAM,CAAA;QACrE,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,iBAAiB,CAAA;QACvC,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YACpB,KAAK,CAAC,CAAC,eAAe,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAA;QAC1C,CAAC;QACD,OAAO,MAAM,CAAA;IACf,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CACrB,CAAA;IAED,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,IAAI,CAAiC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAA;IAElF,0EAA0E;IAC1E,oDAAoD;IACpD,MAAM,iBAAiB,GAAG,MAAM,CAAC,EAAE,CAAC,oCAAoC,CAAC,CAAC,CAAC,GAAW,EAAuB,EAAE,CAC7G,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,CACnB,MAAM,CAAC,cAAc,CAAC,mBAAmB,CAAC,mBAAmB,EAAE,mBAAmB,CAAC,EACnF,MAAM,CAAC,SAAS,CAAC;QACf,gBAAgB,EAAE,CAAC,KAAK,EAAE,EAAE,CAC1B,OAAO,CAAC,KAAK,CAAC,6BAA6B,KAAK,CAAC,OAAO,WAAW,KAAK,CAAC,QAAQ,yBAAyB,CAAC;QAC7G,aAAa,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,gDAAgD,CAAC;KACrF,CAAC,CACH,CACF,CAAA;IAED,MAAM,SAAS,GAAG,MAAM,CAAC,EAAE,CAAC,4BAA4B,CAAC,CAAC,GAGxD,EAAE,CACF,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClB,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,UAAU,EAAE,CAAA;QAClC,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YACpB,OAAO,KAAK,CAAC,CAAC,IAAI,UAAU,CAAC;gBAC3B,IAAI,EAAE,WAAW;gBACjB,KAAK,EAAE,8BAA8B,WAAW,yBAAyB;aAC1E,CAAC,CAAA;QACJ,CAAC;QACD,OAAO,MAAM,CAAA;IACf,CAAC,CAAC,CACH,CAAA;IAED,MAAM,iBAAiB,GAAG,MAAM,CAAC,EAAE,CAAC,oCAAoC,CAAC,CAAC,CACxE,KAAiB,EACjB,MAAmB,EACmC,EAAE,CACxD,MAAM,CAAC,eAAe,CACpB,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClB,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,IAAI,CACrD,QAAQ,EACR,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,EAC/B,MAAM,CAAC,QAAQ,CACb,cAAc,EACd,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,sBAAsB,eAAe,EAAE,EAAE,CAAC,CAAC,CACvG,CACF,CAAA;QACD,KAAK,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAA;QACzB,OAAO,OAAO,CAAA;IAChB,CAAC,CAAC,CACH,CACF,CAAA;IAED,MAAM,YAAY,GAAG,MAAM,CAAC,EAAE,CAAC,+BAA+B,CAAC,CAAC,GAAG,EAAE,CACnE,UAAU,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAC3D,CAAA;IAED,MAAM,KAAK,GAAG,MAAM,CAAC,EAAE,CAAC,wBAAwB,CAAC,CAAC,CAChD,YAA2B,EACqD,EAAE,CAClF,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClB,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,SAAS,EAAE,CAAA;QACjC,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,YAAY,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;QACpD,MAAM,YAAY,GAAG,KAAK,CAAC,CAAC,oBAAoB,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;QACnE,MAAM,aAAa,GAAG,KAAK,CAAC,CAAC,oBAAoB,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;QAEhF,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,MAAM,CACzC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;YAClB,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC,IAAI,CAClE,MAAM,CAAC,cAAc,CAAC,oBAAoB,EAAE,aAAa,CAAC,CAC3D,CAAA;YACD,MAAM,OAAO,GAAG,YAAY,CAAC;gBAC3B,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,KAAK;gBACL,IAAI;gBACJ,WAAW,EAAE,WAAW,CAAC,IAAI,CAAC;gBAC9B,MAAM,EAAE,CAAC,GAAG,MAAM,CAAC;gBACnB,aAAa;aACd,CAAC,CAAA;YAEF,KAAK,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,yDAAyD,IAAI,MAAM,CAAC,CAAA;YACvF,KAAK,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,mCAAmC,OAAO,EAAE,CAAC,CAAA;YAChE,KAAK,CAAC,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAA;YACjC,KAAK,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,uDAAuD,CAAC,CAAA;YAE3E,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,WAAW,CAAC,IAAI,CAClC,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,EAC3B,MAAM,CAAC,QAAQ,CACb,cAAc,EACd,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC,CAAC,CAC3F,CACF,CAAA;YACD,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA;QACvB,CAAC,CAAC,CACH,CAAA;QAED,KAAK,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,+BAA+B,CAAC,CAAA;QACnD,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,qBAAqB,CAAC,IAAI,EAAE,MAAM,EAAE;YACxD,IAAI;YACJ,WAAW,EAAE,WAAW,CAAC,IAAI,CAAC;YAC9B,YAAY;SACb,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QAEjB,KAAK,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAA;QAClD,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,sBAAsB,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QAE/E,MAAM,CAAC,KAAK,EAAE,GAAG,MAAM,CAAC,GAAG,KAAK,CAAA;QAChC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO,KAAK,CAAC,CAAC,IAAI,UAAU,CAAC;gBAC3B,IAAI,EAAE,WAAW;gBACjB,KAAK,EAAE,MAAM,WAAW,+BAA+B;aACxD,CAAC,CAAA;QACJ,CAAC;QAED,IAAI,IAAI,GAAG,KAAK,CAAA;QAChB,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtB,MAAM,OAAO,GAAG,YAAY,EAAE,OAAO,CAAA;YACrC,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,EAAE,EAAE,CAAC;gBAC5C,KAAK,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,WAAW,kCAAkC,CAAC,CAAA;gBAC7E,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;oBACtB,KAAK,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,GAAG,EAAE,CAAC,CAAA;gBAC/C,CAAC;gBACD,KAAK,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,WAAW,4CAA4C,CAAC,CAAA;gBACrF,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAA;YACnE,CAAC;YACD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,OAAO,CAAC,CAAA;YACpD,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC1B,MAAM,SAAS,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;gBACxE,OAAO,KAAK,CAAC,CAAC,IAAI,UAAU,CAAC;oBAC3B,IAAI,EAAE,WAAW;oBACjB,KAAK,EAAE,SAAS,OAAO,kCAAkC,SAAS,EAAE;iBACrE,CAAC,CAAA;YACJ,CAAC;YACD,IAAI,GAAG,OAAO,CAAA;QAChB,CAAC;QAED,KAAK,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAA;QAC3C,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QAEnE,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAA;QAC5C,KAAK,CAAC,CAAC,SAAS,CAAC,iBAAiB,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAA;QAC9D,KAAK,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,KAAK,GAAG,CAAC,CAAA;QAC/D,OAAO,SAAS,CAAA;IAClB,CAAC,CAAC,CACH,CAAA;IAED,MAAM,MAAM,GAAG,MAAM,CAAC,EAAE,CAAC,yBAAyB,CAAC,CAAC,GAAmD,EAAE,CACvG,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClB,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,SAAS,EAAE,CAAA;QAChC,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YACnB,KAAK,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAA;YACnC,OAAM;QACR,CAAC;QAED,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,UAAU,EAAE,CAAA;QAClC,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YACpB,KAAK,CAAC,CAAC,WAAW,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,IAAI,CACpC,QAAQ,EACR,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAC,EAC5D,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,oCAAoC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CACzF,CAAA;QACH,CAAC;QAED,KAAK,CAAC,CAAC,WAAW,EAAE,CAAA;IACtB,CAAC,CAAC,CACH,CAAA;IAED,MAAM,cAAc,GAAG,MAAM,CAAC,EAAE,CAAC,iCAAiC,CAAC,CAAC,GAGlE,EAAE,CACF,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClB,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,SAAS,EAAE,CAAA;QAChC,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YACnB,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAA;QAC1C,CAAC;QAED,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAA;QAC5C,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC;YACpC,OAAO,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAA;QAC1C,CAAC;QAED,8DAA8D;QAC9D,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAyC,CAAA;QAC9E,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,OAAO,EAAE,EAAE,CAC1D,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC;YACpB,CAAC,CAAE,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAuE;YACjG,CAAC,CAAE,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAuE,CAAC,CAAA;QAE/G,8DAA8D;QAC9D,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAC1B,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;YACjD,OAAO,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,CAAA;QAC9C,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;YAClC,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,SAAS,EAAE,CAAA;YACjC,uEAAuE;YACvE,uEAAuE;YACvE,gEAAgE;YAChE,uEAAuE;YACvE,KAAK,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAA;YACpD,OAAO,KAAK,CAAC,CAAC,iBAAiB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAA;QAChD,CAAC,CAAC,CAAC,IAAI,CACL,MAAM,CAAC,QAAQ,CAAC,YAAY,EAAE,CAAC,KAAK,EAAE,EAAE;YACtC,sEAAsE;YACtE,mEAAmE;YACnE,kEAAkE;YAClE,qEAAqE;YACrE,sEAAsE;YACtE,oEAAoE;YACpE,6DAA6D;YAC7D,EAAE;YACF,sEAAsE;YACtE,sEAAsE;YACtE,gEAAgE;YAChE,sEAAsE;YACtE,gEAAgE;YAChE,EAAE;YACF,oEAAoE;YACpE,sEAAsE;YACtE,oEAAoE;YACpE,uEAAuE;YACvE,8DAA8D;YAC9D,sEAAsE;YACtE,sEAAsE;YACtE,sEAAsE;YACtE,uEAAuE;YACvE,sBAAsB;YACtB,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,KAAK,CAAA;YACnC,MAAM,QAAQ,GAAG,SAAS,KAAK,eAAe,IAAI,CAAC,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,CAAC,CAAA;YACpF,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,QAAQ,EAAE,CAAC;gBACzC,OAAO,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;oBACzB,KAAK,CAAC,CAAC,WAAW,EAAE,CAAA;oBACpB,OAAO,KAAK,CAAC,CAAC,IAAI,UAAU,CAAC;wBAC3B,IAAI,EAAE,SAAS;wBACf,KAAK,EAAE,sCAAsC,WAAW,kCAAkC;wBAC1F,MAAM;wBACN,SAAS;qBACV,CAAC,CAAA;gBACJ,CAAC,CAAC,CAAA;YACJ,CAAC;YACD,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAC3B,CAAC,CAAC,CACH,CAAA;QAED,mEAAmE;QACnE,sEAAsE;QACtE,6DAA6D;QAC7D,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAChC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CACrB,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,CACxF,CACF,CAAA;QAED,OAAO,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,CAAA;IAC3C,CAAC,CAAC,CACH,CAAA;IAED,MAAM,gBAAgB,GAAG,CAAI,IAA8B,EAAE,EAAE,CAAC,GAAkD,EAAE,CAClH,SAAS,EAAE,CAAC,IAAI,CACd,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CACrG,CAAA;IAEH,OAAO;QACL,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC,4BAA4B,CAAC,CAAC,UAAU,CAAC;QAC9D,YAAY;QACZ,KAAK;QACL,MAAM;QACN,cAAc;QACd,UAAU,EAAE,MAAM,CAAC,EAAE,CAAC,6BAA6B,CAAC,CAAC,gBAAgB,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACjG,UAAU,EAAE,MAAM,CAAC,EAAE,CAAC,6BAA6B,CAAC,CAAC,gBAAgB,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACjG,cAAc,EAAE,MAAM,CAAC,EAAE,CAAC,iCAAiC,CAAC,CAAC,GAAG,EAAE,CAChE,SAAS,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,EAAE,IAAI,IAAI,IAAI,CAAC,CAAC,CAC7D;QACD,gBAAgB,EAAE,MAAM,CAAC,EAAE,CAAC,mCAAmC,CAAC,CAAC,GAAG,EAAE,CACpE,iBAAiB,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAC9C;QACD,YAAY,EAAE,MAAM,CAAC,EAAE,CAAC,+BAA+B,CAAC,CAAC,GAAG,EAAE,CAC5D,YAAY,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,WAAW,CAAC,CAChF;QACD,aAAa,EAAE,MAAM,CAAC,EAAE,CAAC,gCAAgC,CAAC,CAAC,CAAC,QAAQ,EAAE,EAAE,CACtE,0BAA0B,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CACjE;QACD,aAAa,EAAE,MAAM,CAAC,EAAE,CAAC,gCAAgC,CAAC,CAAC,CAAC,QAAQ,EAAE,EAAE,CACtE,uBAAuB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAC9D;QACD,UAAU,EAAE,MAAM,CAAC,EAAE,CAAC,6BAA6B,CAAC,CAAC,GAAG,EAAE,CACxD,SAAS,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CACxD;KACF,CAAA;AACH,CAAC,CAAC,CACH,CAAA"}

package/dist/cli-auth/authCommand.d.ts

@@ -0,0 +1,43 @@
+/**
+ * The `auth` command group every Atlassian CLI exposes, built once over its {@link AtlassianCliAuth}.
+ *
+ * **Mental model**
+ *
+ * - **One descriptor, two readers.** The CLI passes the same {@link AtlassianCliDescriptor} it built
+ *   its auth from, so the setup instructions list exactly the scopes `auth login` requests. A second,
+ *   hand-written list is how a setup that cannot log in happens: Atlassian rejects an authorization
+ *   request naming a scope the app lacks.
+ * - **Only presentation is configured.** The heading the product's scopes sit under in the
+ *   developer console, and what to call a site in `--site`.
+ * - **A browser that does not open is an error.** The URL is printed first, so a headless or SSH
+ *   user can still finish by hand; the exit code just stops claiming it worked.
+ *
+ * @module
+ */
+import { Command, Prompt } from "effect/cli";
+import type * as Context from "effect/Context";
+import * as Schema from "effect/Schema";
+import type { AtlassianCliAuth, AtlassianCliDescriptor } from "./AtlassianCliAuth.js";
+/** The part of an Atlassian CLI's auth the `auth` commands drive. */
+export type AuthCommandService = Pick<AtlassianCliAuth<never>, "configure" | "login" | "logout" | "getActiveProfile" | "listProfiles" | "switchProfile" | "removeProfile">;
+/** What only the product decides about how its `auth` commands read. */
+export interface AuthCommandOptions {
+    /** Developer-console heading the product's scopes live under, e.g. `"Jira API"`. */
+    readonly apiSection: string;
+}
+/**
+ * The scopes to enable on the OAuth app, by console section. `read:me` is a User Identity scope;
+ * `offline_access` is requested at authorize time but is not an app permission, so it is omitted.
+ */
+export declare const scopeInstructions: (descriptor: AtlassianCliDescriptor, apiSection: string) => string;
+declare const ProfileNotFoundError_base: Schema.Class<ProfileNotFoundError, Schema.TaggedStruct<"ProfileNotFoundError", {
+    readonly selector: Schema.String;
+    readonly message: Schema.String;
+}>, import("effect/Cause").YieldableError>;
+/** `auth use` or `auth remove` named no stored profile. The CLI prints the message and exits non-zero. */
+export declare class ProfileNotFoundError extends ProfileNotFoundError_base {
+}
+/** Build `<cli> auth` with create, manage, configure, login, logout, status, profiles, use, remove. */
+export declare const makeAuthCommand: <I, S extends AuthCommandService>(service: Context.Key<I, S>, descriptor: AtlassianCliDescriptor, options: AuthCommandOptions) => Command.Command<"auth", {}, {}, import("./openBrowser.js").BrowserOpenError | import("../index.ts").OAuthError | ProfileNotFoundError | import("effect/Terminal").QuitError | (import("../index.ts").FileSystemError | import("../index.ts").HomeDirectoryError | import("effect/PlatformError").PlatformError), import("effect/process/ChildProcessSpawner").ChildProcessSpawner | Exclude<Exclude<I, "effect/cli/GlobalFlag/log-level">, Command.CommandContext<"auth">> | Prompt.Environment>;
+export {};
+//# sourceMappingURL=authCommand.d.ts.map

package/dist/cli-auth/authCommand.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authCommand.d.ts","sourceRoot":"","sources":["../../src/cli-auth/authCommand.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,EAAY,OAAO,EAAQ,MAAM,EAAE,MAAM,YAAY,CAAA;AAE5D,OAAO,KAAK,KAAK,OAAO,MAAM,gBAAgB,CAAA;AAG9C,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AACvC,OAAO,KAAK,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAA;AAOrF,qEAAqE;AACrE,MAAM,MAAM,kBAAkB,GAAG,IAAI,CACnC,gBAAgB,CAAC,KAAK,CAAC,EACrB,WAAW,GACX,OAAO,GACP,QAAQ,GACR,kBAAkB,GAClB,cAAc,GACd,eAAe,GACf,eAAe,CAClB,CAAA;AAED,wEAAwE;AACxE,MAAM,WAAW,kBAAkB;IACjC,oFAAoF;IACpF,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;CAC5B;AAED;;;GAGG;AACH,eAAO,MAAM,iBAAiB,eAAgB,sBAAsB,cAAc,MAAM,KAAG,MAQ1F,CAAA;;;;;AAED,0GAA0G;AAC1G,qBAAa,oBAAqB,SAAQ,yBAGxC;CAAG;AAQL,uGAAuG;AACvG,eAAO,MAAM,eAAe,GAAI,CAAC,EAAE,CAAC,SAAS,kBAAkB,WACpD,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,cACd,sBAAsB,WACzB,kBAAkB,qeA+J5B,CAAA"}

package/dist/cli-auth/authCommand.js

@@ -0,0 +1,135 @@
+/**
+ * The `auth` command group every Atlassian CLI exposes, built once over its {@link AtlassianCliAuth}.
+ *
+ * **Mental model**
+ *
+ * - **One descriptor, two readers.** The CLI passes the same {@link AtlassianCliDescriptor} it built
+ *   its auth from, so the setup instructions list exactly the scopes `auth login` requests. A second,
+ *   hand-written list is how a setup that cannot log in happens: Atlassian rejects an authorization
+ *   request naming a scope the app lacks.
+ * - **Only presentation is configured.** The heading the product's scopes sit under in the
+ *   developer console, and what to call a site in `--site`.
+ * - **A browser that does not open is an error.** The URL is printed first, so a headless or SSH
+ *   user can still finish by hand; the exit code just stops claiming it worked.
+ *
+ * @module
+ */
+import { Argument, Command, Flag, Prompt } from "effect/cli";
+import * as Console from "effect/Console";
+import * as Effect from "effect/Effect";
+import * as Option from "effect/Option";
+import * as Schema from "effect/Schema";
+import { openBrowser } from "./openBrowser.js";
+const CREATE_APP_URL = "https://developer.atlassian.com/console/myapps/create-3lo-app/";
+const CONSOLE_APPS_URL = "https://developer.atlassian.com/console/myapps/";
+const CALLBACK_URL = "http://localhost:8585/callback";
+/**
+ * The scopes to enable on the OAuth app, by console section. `read:me` is a User Identity scope;
+ * `offline_access` is requested at authorize time but is not an app permission, so it is omitted.
+ */
+export const scopeInstructions = (descriptor, apiSection) => {
+    const section = (heading, scopes) => scopes.length === 0 ? [] : [`   - ${heading}:`, ...scopes.map((scope) => `       ${scope}`)];
+    const permissions = descriptor.scopes.filter((scope) => scope !== "offline_access");
+    return [
+        ...section(apiSection, permissions.filter((scope) => scope !== "read:me")),
+        ...section("User Identity API", permissions.filter((scope) => scope === "read:me"))
+    ].join("\n");
+};
+/** `auth use` or `auth remove` named no stored profile. The CLI prints the message and exits non-zero. */
+export class ProfileNotFoundError extends Schema.TaggedError()("ProfileNotFoundError", {
+    selector: Schema.String,
+    message: Schema.String
+}) {
+}
+const profileNotFound = (selector) => new ProfileNotFoundError({ selector, message: `Profile not found: ${selector}` });
+/** Print the URL, then try to open it; a browser that never opened fails the command. */
+const visit = (url) => Console.log(`Opening ${url}`).pipe(Effect.andThen(openBrowser(url)));
+/** Build `<cli> auth` with create, manage, configure, login, logout, status, profiles, use, remove. */
+export const makeAuthCommand = (service, descriptor, options) => {
+    const withAuth = (f) => Effect.flatMap(Effect.service(service), f);
+    const loginHint = `${descriptor.commandName} auth login`;
+    const create = Command.make("create", {}, () => Effect.gen(function* () {
+        yield* Console.log(`
+Creating OAuth app in Atlassian Developer Console...
+
+1. Browser will open to create a new OAuth 2.0 (3LO) app
+2. Enter app name (e.g., "${descriptor.productName} CLI")
+3. After creation, go to "Permissions" and add:
+${scopeInstructions(descriptor, options.apiSection)}
+4. Go to "Authorization" and set callback URL:
+   ${CALLBACK_URL}
+5. Go to "Settings" and copy Client ID and Secret
+6. Run: ${descriptor.commandName} auth configure --client-id <ID> --client-secret <SECRET>
+`);
+        yield* visit(CREATE_APP_URL);
+    })).pipe(Command.withDescription("Create OAuth app in Atlassian Developer Console"));
+    // Opens the app list, not the app: the console addresses an app by an id that is not the OAuth
+    // client id, and the client id is the only app identifier the CLI stores.
+    const manage = Command.make("manage", {}, () => Effect.gen(function* () {
+        yield* Console.log(`
+Opening the Atlassian Developer Console app list...
+
+Select your OAuth app, then under "Permissions" make sure every scope below is
+enabled. \`${loginHint}\` requests all of them, and Atlassian rejects an
+authorization request naming a scope the app does not have — so a missing scope
+here fails the login itself, not just the command that needed it.
+
+${scopeInstructions(descriptor, options.apiSection)}
+
+Under "Authorization", the callback URL must be:
+   ${CALLBACK_URL}
+
+After adding scopes, run: ${loginHint}
+`);
+        yield* visit(CONSOLE_APPS_URL);
+    })).pipe(Command.withDescription("Open the Atlassian Developer Console to edit the OAuth app's scopes"));
+    const configure = Command.make("configure", {
+        clientId: Flag.String("client-id").pipe(Flag.withDescription("OAuth client ID from Atlassian Developer Console"), Flag.optional),
+        clientSecret: Flag.String("client-secret").pipe(Flag.withDescription("OAuth client secret"), Flag.optional)
+    }, ({ clientId, clientSecret }) => withAuth((auth) => Effect.gen(function* () {
+        const id = Option.isSome(clientId)
+            ? clientId.value
+            : yield* Prompt.String({ message: "Enter OAuth client ID:" });
+        const secret = Option.isSome(clientSecret)
+            ? clientSecret.value
+            : yield* Prompt.String({ message: "Enter OAuth client secret:" });
+        yield* auth.configure({ clientId: id, clientSecret: secret });
+        yield* Console.log(`OAuth configured. Run '${loginHint}' to authenticate.`);
+    }))).pipe(Command.withDescription("Configure OAuth client credentials"));
+    const login = Command.make("login", {
+        site: Flag.String("site").pipe(Flag.withDescription(`${descriptor.productName} site URL to use (for accounts with multiple sites)`), Flag.optional)
+    }, ({ site }) => withAuth((auth) => Effect.gen(function* () {
+        const sites = yield* auth.login(Option.isSome(site) ? { siteUrl: site.value } : undefined);
+        if (Array.isArray(sites) && sites.length > 0) {
+            yield* Console.log("\nRe-run with --site to select a specific site.");
+        }
+    }))).pipe(Command.withDescription("Authenticate with Atlassian via OAuth"));
+    const logout = Command.make("logout", {}, () => withAuth((auth) => auth.logout().pipe(Effect.andThen(Console.log("Logged out"))))).pipe(Command.withDescription("Remove stored authentication"));
+    const status = Command.make("status", {}, () => withAuth((auth) => Effect.gen(function* () {
+        const profile = yield* auth.getActiveProfile();
+        if (profile === null) {
+            return yield* Console.log(`Not logged in. Use '${loginHint}' to authenticate.`);
+        }
+        const user = profile.token.user;
+        yield* Console.log(`Active profile: ${profile.name}`);
+        yield* Console.log(`Account: ${user !== undefined ? `${user.name} (${user.email})` : "unknown user"}`);
+        yield* Console.log(`Site: ${profile.token.site_url}`);
+        yield* Console.log(`Profile ID: ${profile.id}`);
+    }))).pipe(Command.withDescription("Show authentication status"));
+    const profiles = Command.make("profiles", {}, () => withAuth((auth) => Effect.gen(function* () {
+        const [stored, active] = yield* Effect.all([auth.listProfiles(), auth.getActiveProfile()]);
+        if (stored.length === 0) {
+            return yield* Console.log(`No auth profiles. Use '${loginHint}' to authenticate.`);
+        }
+        for (const profile of stored) {
+            yield* Console.log(`${active?.id === profile.id ? "*" : " "} ${profile.id}`);
+            yield* Console.log(`    ${profile.name}`);
+            yield* Console.log(`    ${profile.token.site_url}`);
+        }
+    }))).pipe(Command.withDescription("List stored auth profiles"));
+    const profile = Argument.String("profile").pipe(Argument.withDescription("Profile ID, name, site URL, cloud ID, or account ID"));
+    const use = Command.make("use", { profile }, ({ profile }) => withAuth((auth) => Effect.flatMap(auth.switchProfile(profile), (selected) => selected === null ? Effect.fail(profileNotFound(profile)) : Console.log(`Active profile: ${selected.name}`)))).pipe(Command.withDescription("Switch active auth profile"));
+    const remove = Command.make("remove", { profile }, ({ profile }) => withAuth((auth) => Effect.flatMap(auth.removeProfile(profile), (removed) => removed === null ? Effect.fail(profileNotFound(profile)) : Console.log(`Removed profile: ${removed.name}`)))).pipe(Command.withDescription("Remove stored auth profile"));
+    return Command.make("auth").pipe(Command.withDescription("Manage OAuth authentication"), Command.withSubcommands([create, manage, configure, login, logout, status, profiles, use, remove]));
+};
+//# sourceMappingURL=authCommand.js.map

package/dist/cli-auth/authCommand.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authCommand.js","sourceRoot":"","sources":["../../src/cli-auth/authCommand.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,YAAY,CAAA;AAC5D,OAAO,KAAK,OAAO,MAAM,gBAAgB,CAAA;AAEzC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AACvC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AACvC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AAEvC,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA;AAE9C,MAAM,cAAc,GAAG,gEAAgE,CAAA;AACvF,MAAM,gBAAgB,GAAG,iDAAiD,CAAA;AAC1E,MAAM,YAAY,GAAG,gCAAgC,CAAA;AAoBrD;;;GAGG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,UAAkC,EAAE,UAAkB,EAAU,EAAE;IAClG,MAAM,OAAO,GAAG,CAAC,OAAe,EAAE,MAA6B,EAAyB,EAAE,CACxF,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,OAAO,GAAG,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,UAAU,KAAK,EAAE,CAAC,CAAC,CAAA;IAC9F,MAAM,WAAW,GAAG,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,gBAAgB,CAAC,CAAA;IACnF,OAAO;QACL,GAAG,OAAO,CAAC,UAAU,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC;QAC1E,GAAG,OAAO,CAAC,mBAAmB,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC;KACpF,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACd,CAAC,CAAA;AAED,0GAA0G;AAC1G,MAAM,OAAO,oBAAqB,SAAQ,MAAM,CAAC,WAAW,EAAwB,CAAC,sBAAsB,EAAE;IAC3G,QAAQ,EAAE,MAAM,CAAC,MAAM;IACvB,OAAO,EAAE,MAAM,CAAC,MAAM;CACvB,CAAC;CAAG;AAEL,MAAM,eAAe,GAAG,CAAC,QAAgB,EAAE,EAAE,CAC3C,IAAI,oBAAoB,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,sBAAsB,QAAQ,EAAE,EAAE,CAAC,CAAA;AAEnF,yFAAyF;AACzF,MAAM,KAAK,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;AAEnG,uGAAuG;AACvG,MAAM,CAAC,MAAM,eAAe,GAAG,CAC7B,OAA0B,EAC1B,UAAkC,EAClC,OAA2B,EAC3B,EAAE;IACF,MAAM,QAAQ,GAAG,CAAY,CAAwC,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAA;IACpH,MAAM,SAAS,GAAG,GAAG,UAAU,CAAC,WAAW,aAAa,CAAA;IAExD,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,EAAE,GAAG,EAAE,CAC7C,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClB,KAAK,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC;;;;4BAIG,UAAU,CAAC,WAAW;;EAEhD,iBAAiB,CAAC,UAAU,EAAE,OAAO,CAAC,UAAU,CAAC;;KAE9C,YAAY;;UAEP,UAAU,CAAC,WAAW;CAC/B,CAAC,CAAA;QACI,KAAK,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAA;IAC9B,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,iDAAiD,CAAC,CAAC,CAAA;IAEtF,+FAA+F;IAC/F,0EAA0E;IAC1E,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,EAAE,GAAG,EAAE,CAC7C,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClB,KAAK,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC;;;;aAIZ,SAAS;;;;EAIpB,iBAAiB,CAAC,UAAU,EAAE,OAAO,CAAC,UAAU,CAAC;;;KAG9C,YAAY;;4BAEW,SAAS;CACpC,CAAC,CAAA;QACI,KAAK,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAA;IAChC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,qEAAqE,CAAC,CAAC,CAAA;IAE1G,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAC5B,WAAW,EACX;QACE,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,IAAI,CACrC,IAAI,CAAC,eAAe,CAAC,kDAAkD,CAAC,EACxE,IAAI,CAAC,QAAQ,CACd;QACD,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,qBAAqB,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC;KAC5G,EACD,CAAC,EAAE,QAAQ,EAAE,YAAY,EAAE,EAAE,EAAE,CAC7B,QAAQ,CAAC,CAAC,IAAI,EAAE,EAAE,CAChB,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClB,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC;YAChC,CAAC,CAAC,QAAQ,CAAC,KAAK;YAChB,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,wBAAwB,EAAE,CAAC,CAAA;QAC/D,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC;YACxC,CAAC,CAAC,YAAY,CAAC,KAAK;YACpB,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,4BAA4B,EAAE,CAAC,CAAA;QACnE,KAAK,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC,CAAA;QAC7D,KAAK,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,0BAA0B,SAAS,oBAAoB,CAAC,CAAA;IAC7E,CAAC,CAAC,CACH,CACJ,CAAC,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,oCAAoC,CAAC,CAAC,CAAA;IAErE,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CACxB,OAAO,EACP;QACE,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAC5B,IAAI,CAAC,eAAe,CAAC,GAAG,UAAU,CAAC,WAAW,qDAAqD,CAAC,EACpG,IAAI,CAAC,QAAQ,CACd;KACF,EACD,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CACX,QAAQ,CAAC,CAAC,IAAI,EAAE,EAAE,CAChB,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClB,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAA;QAC1F,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7C,KAAK,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,iDAAiD,CAAC,CAAA;QACvE,CAAC;IACH,CAAC,CAAC,CACH,CACJ,CAAC,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,uCAAuC,CAAC,CAAC,CAAA;IAExE,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CACzB,QAAQ,EACR,EAAE,EACF,GAAG,EAAE,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CACxF,CAAC,IAAI,CACJ,OAAO,CAAC,eAAe,CAAC,8BAA8B,CAAC,CACxD,CAAA;IAED,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,EAAE,GAAG,EAAE,CAC7C,QAAQ,CAAC,CAAC,IAAI,EAAE,EAAE,CAChB,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClB,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAA;QAC9C,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YACrB,OAAO,KAAK,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,uBAAuB,SAAS,oBAAoB,CAAC,CAAA;QACjF,CAAC;QACD,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAA;QAC/B,KAAK,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,OAAO,CAAC,IAAI,EAAE,CAAC,CAAA;QACrD,KAAK,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,cAAc,EAAE,CAAC,CAAA;QACtG,KAAK,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,OAAO,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAA;QACrD,KAAK,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,OAAO,CAAC,EAAE,EAAE,CAAC,CAAA;IACjD,CAAC,CAAC,CACH,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,4BAA4B,CAAC,CAAC,CAAA;IAEhE,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,EAAE,GAAG,EAAE,CACjD,QAAQ,CAAC,CAAC,IAAI,EAAE,EAAE,CAChB,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClB,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,IAAI,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAA;QAC1F,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxB,OAAO,KAAK,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,0BAA0B,SAAS,oBAAoB,CAAC,CAAA;QACpF,CAAC;QACD,KAAK,MAAM,OAAO,IAAI,MAAM,EAAE,CAAC;YAC7B,KAAK,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,MAAM,EAAE,EAAE,KAAK,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,OAAO,CAAC,EAAE,EAAE,CAAC,CAAA;YAC5E,KAAK,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,OAAO,CAAC,IAAI,EAAE,CAAC,CAAA;YACzC,KAAK,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,OAAO,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAA;QACrD,CAAC;IACH,CAAC,CAAC,CACH,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,2BAA2B,CAAC,CAAC,CAAA;IAE/D,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAC7C,QAAQ,CAAC,eAAe,CAAC,qDAAqD,CAAC,CAChF,CAAA;IAED,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CACtB,KAAK,EACL,EAAE,OAAO,EAAE,EACX,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CACd,QAAQ,CAAC,CAAC,IAAI,EAAE,EAAE,CAChB,MAAM,CAAC,OAAO,CACZ,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,EAC3B,CAAC,QAAQ,EAAE,EAAE,CACX,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,QAAQ,CAAC,IAAI,EAAE,CAAC,CAC9G,CACF,CACJ,CAAC,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,4BAA4B,CAAC,CAAC,CAAA;IAE7D,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CACzB,QAAQ,EACR,EAAE,OAAO,EAAE,EACX,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CACd,QAAQ,CAAC,CAAC,IAAI,EAAE,EAAE,CAChB,MAAM,CAAC,OAAO,CACZ,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,EAC3B,CAAC,OAAO,EAAE,EAAE,CACV,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,OAAO,CAAC,IAAI,EAAE,CAAC,CAC7G,CACF,CACJ,CAAC,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,4BAA4B,CAAC,CAAC,CAAA;IAE7D,OAAO,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAC9B,OAAO,CAAC,eAAe,CAAC,6BAA6B,CAAC,EACtD,OAAO,CAAC,eAAe,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC,CACnG,CAAA;AACH,CAAC,CAAA"}

package/dist/cli-auth/index.d.ts

@@ -6,7 +6,8 @@
  *
  * @module
  */
-export { type AccessibleSite, type AtlassianCliAuth, type AtlassianCliAuthOptions, type LoginOptions, makeAtlassianCliAuth } from "./AtlassianCliAuth.js";
+export { type AccessibleSite, type AtlassianCliAuth, type AtlassianCliAuthOptions, type AtlassianCliDescriptor, type LoginOptions, makeAtlassianCliAuth } from "./AtlassianCliAuth.js";
+export { type AuthCommandOptions, type AuthCommandService, makeAuthCommand, ProfileNotFoundError, scopeInstructions } from "./authCommand.js";
 export { HttpServerFactoryLive, NodeCliAuthLive } from "./internal/NodeLayers.js";
 export { type HttpServerFactory, HttpServerFactoryTag, makeHttpServerFactory } from "./internal/oauthServer.js";
 export { BrowserOpenError, openBrowser } from "./openBrowser.js";

package/dist/cli-auth/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/cli-auth/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EACL,KAAK,cAAc,EACnB,KAAK,gBAAgB,EACrB,KAAK,uBAAuB,EAC5B,KAAK,YAAY,EACjB,oBAAoB,EACrB,MAAM,uBAAuB,CAAA;AAC9B,OAAO,EAAE,qBAAqB,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAA;AACjF,OAAO,EAAE,KAAK,iBAAiB,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAA;AAC/G,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/cli-auth/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EACL,KAAK,cAAc,EACnB,KAAK,gBAAgB,EACrB,KAAK,uBAAuB,EAC5B,KAAK,sBAAsB,EAC3B,KAAK,YAAY,EACjB,oBAAoB,EACrB,MAAM,uBAAuB,CAAA;AAC9B,OAAO,EACL,KAAK,kBAAkB,EACvB,KAAK,kBAAkB,EACvB,eAAe,EACf,oBAAoB,EACpB,iBAAiB,EAClB,MAAM,kBAAkB,CAAA;AACzB,OAAO,EAAE,qBAAqB,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAA;AACjF,OAAO,EAAE,KAAK,iBAAiB,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAA;AAC/G,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA"}

package/dist/cli-auth/index.js

@@ -7,6 +7,7 @@
  * @module
  */
 export { makeAtlassianCliAuth } from "./AtlassianCliAuth.js";
+export { makeAuthCommand, ProfileNotFoundError, scopeInstructions } from "./authCommand.js";
 export { HttpServerFactoryLive, NodeCliAuthLive } from "./internal/NodeLayers.js";
 export { HttpServerFactoryTag, makeHttpServerFactory } from "./internal/oauthServer.js";
 export { BrowserOpenError, openBrowser } from "./openBrowser.js";

package/dist/cli-auth/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/cli-auth/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAKL,oBAAoB,EACrB,MAAM,uBAAuB,CAAA;AAC9B,OAAO,EAAE,qBAAqB,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAA;AACjF,OAAO,EAA0B,oBAAoB,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAA;AAC/G,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/cli-auth/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAML,oBAAoB,EACrB,MAAM,uBAAuB,CAAA;AAC9B,OAAO,EAGL,eAAe,EACf,oBAAoB,EACpB,iBAAiB,EAClB,MAAM,kBAAkB,CAAA;AACzB,OAAO,EAAE,qBAAqB,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAA;AACjF,OAAO,EAA0B,oBAAoB,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAA;AAC/G,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@knpkv/atlassian-common",
-  "version": "1.6.0",
+  "version": "1.8.0",
   "description": "Shared utilities for Atlassian tools (AST, serializers, auth, config)",
   "license": "MIT",
   "author": "knpkv",

package/src/cli-auth/AtlassianCliAuth.ts

@@ -115,6 +115,15 @@ export interface AccessibleSite {
   readonly url: string
 }
 
+/**
+ * Who an Atlassian CLI is: the part of {@link AtlassianCliAuthOptions} its `auth` commands also read.
+ * A CLI defines it once and passes the same value to both, so the setup text lists exactly the
+ * scopes `login` requests.
+ *
+ * @category Types
+ */
+export type AtlassianCliDescriptor = Pick<AtlassianCliAuthOptions<never>, "commandName" | "productName" | "scopes">
+
 /**
  * The auth operations an Atlassian CLI exposes.
  *

package/src/cli-auth/authCommand.ts

@@ -0,0 +1,237 @@
+/**
+ * The `auth` command group every Atlassian CLI exposes, built once over its {@link AtlassianCliAuth}.
+ *
+ * **Mental model**
+ *
+ * - **One descriptor, two readers.** The CLI passes the same {@link AtlassianCliDescriptor} it built
+ *   its auth from, so the setup instructions list exactly the scopes `auth login` requests. A second,
+ *   hand-written list is how a setup that cannot log in happens: Atlassian rejects an authorization
+ *   request naming a scope the app lacks.
+ * - **Only presentation is configured.** The heading the product's scopes sit under in the
+ *   developer console, and what to call a site in `--site`.
+ * - **A browser that does not open is an error.** The URL is printed first, so a headless or SSH
+ *   user can still finish by hand; the exit code just stops claiming it worked.
+ *
+ * @module
+ */
+import { Argument, Command, Flag, Prompt } from "effect/cli"
+import * as Console from "effect/Console"
+import type * as Context from "effect/Context"
+import * as Effect from "effect/Effect"
+import * as Option from "effect/Option"
+import * as Schema from "effect/Schema"
+import type { AtlassianCliAuth, AtlassianCliDescriptor } from "./AtlassianCliAuth.js"
+import { openBrowser } from "./openBrowser.js"
+
+const CREATE_APP_URL = "https://developer.atlassian.com/console/myapps/create-3lo-app/"
+const CONSOLE_APPS_URL = "https://developer.atlassian.com/console/myapps/"
+const CALLBACK_URL = "http://localhost:8585/callback"
+
+/** The part of an Atlassian CLI's auth the `auth` commands drive. */
+export type AuthCommandService = Pick<
+  AtlassianCliAuth<never>,
+  | "configure"
+  | "login"
+  | "logout"
+  | "getActiveProfile"
+  | "listProfiles"
+  | "switchProfile"
+  | "removeProfile"
+>
+
+/** What only the product decides about how its `auth` commands read. */
+export interface AuthCommandOptions {
+  /** Developer-console heading the product's scopes live under, e.g. `"Jira API"`. */
+  readonly apiSection: string
+}
+
+/**
+ * The scopes to enable on the OAuth app, by console section. `read:me` is a User Identity scope;
+ * `offline_access` is requested at authorize time but is not an app permission, so it is omitted.
+ */
+export const scopeInstructions = (descriptor: AtlassianCliDescriptor, apiSection: string): string => {
+  const section = (heading: string, scopes: ReadonlyArray<string>): ReadonlyArray<string> =>
+    scopes.length === 0 ? [] : [`   - ${heading}:`, ...scopes.map((scope) => `       ${scope}`)]
+  const permissions = descriptor.scopes.filter((scope) => scope !== "offline_access")
+  return [
+    ...section(apiSection, permissions.filter((scope) => scope !== "read:me")),
+    ...section("User Identity API", permissions.filter((scope) => scope === "read:me"))
+  ].join("\n")
+}
+
+/** `auth use` or `auth remove` named no stored profile. The CLI prints the message and exits non-zero. */
+export class ProfileNotFoundError extends Schema.TaggedError<ProfileNotFoundError>()("ProfileNotFoundError", {
+  selector: Schema.String,
+  message: Schema.String
+}) {}
+
+const profileNotFound = (selector: string) =>
+  new ProfileNotFoundError({ selector, message: `Profile not found: ${selector}` })
+
+/** Print the URL, then try to open it; a browser that never opened fails the command. */
+const visit = (url: string) => Console.log(`Opening ${url}`).pipe(Effect.andThen(openBrowser(url)))
+
+/** Build `<cli> auth` with create, manage, configure, login, logout, status, profiles, use, remove. */
+export const makeAuthCommand = <I, S extends AuthCommandService>(
+  service: Context.Key<I, S>,
+  descriptor: AtlassianCliDescriptor,
+  options: AuthCommandOptions
+) => {
+  const withAuth = <A, Err, R>(f: (auth: S) => Effect.Effect<A, Err, R>) => Effect.flatMap(Effect.service(service), f)
+  const loginHint = `${descriptor.commandName} auth login`
+
+  const create = Command.make("create", {}, () =>
+    Effect.gen(function*() {
+      yield* Console.log(`
+Creating OAuth app in Atlassian Developer Console...
+
+1. Browser will open to create a new OAuth 2.0 (3LO) app
+2. Enter app name (e.g., "${descriptor.productName} CLI")
+3. After creation, go to "Permissions" and add:
+${scopeInstructions(descriptor, options.apiSection)}
+4. Go to "Authorization" and set callback URL:
+   ${CALLBACK_URL}
+5. Go to "Settings" and copy Client ID and Secret
+6. Run: ${descriptor.commandName} auth configure --client-id <ID> --client-secret <SECRET>
+`)
+      yield* visit(CREATE_APP_URL)
+    })).pipe(Command.withDescription("Create OAuth app in Atlassian Developer Console"))
+
+  // Opens the app list, not the app: the console addresses an app by an id that is not the OAuth
+  // client id, and the client id is the only app identifier the CLI stores.
+  const manage = Command.make("manage", {}, () =>
+    Effect.gen(function*() {
+      yield* Console.log(`
+Opening the Atlassian Developer Console app list...
+
+Select your OAuth app, then under "Permissions" make sure every scope below is
+enabled. \`${loginHint}\` requests all of them, and Atlassian rejects an
+authorization request naming a scope the app does not have — so a missing scope
+here fails the login itself, not just the command that needed it.
+
+${scopeInstructions(descriptor, options.apiSection)}
+
+Under "Authorization", the callback URL must be:
+   ${CALLBACK_URL}
+
+After adding scopes, run: ${loginHint}
+`)
+      yield* visit(CONSOLE_APPS_URL)
+    })).pipe(Command.withDescription("Open the Atlassian Developer Console to edit the OAuth app's scopes"))
+
+  const configure = Command.make(
+    "configure",
+    {
+      clientId: Flag.String("client-id").pipe(
+        Flag.withDescription("OAuth client ID from Atlassian Developer Console"),
+        Flag.optional
+      ),
+      clientSecret: Flag.String("client-secret").pipe(Flag.withDescription("OAuth client secret"), Flag.optional)
+    },
+    ({ clientId, clientSecret }) =>
+      withAuth((auth) =>
+        Effect.gen(function*() {
+          const id = Option.isSome(clientId)
+            ? clientId.value
+            : yield* Prompt.String({ message: "Enter OAuth client ID:" })
+          const secret = Option.isSome(clientSecret)
+            ? clientSecret.value
+            : yield* Prompt.String({ message: "Enter OAuth client secret:" })
+          yield* auth.configure({ clientId: id, clientSecret: secret })
+          yield* Console.log(`OAuth configured. Run '${loginHint}' to authenticate.`)
+        })
+      )
+  ).pipe(Command.withDescription("Configure OAuth client credentials"))
+
+  const login = Command.make(
+    "login",
+    {
+      site: Flag.String("site").pipe(
+        Flag.withDescription(`${descriptor.productName} site URL to use (for accounts with multiple sites)`),
+        Flag.optional
+      )
+    },
+    ({ site }) =>
+      withAuth((auth) =>
+        Effect.gen(function*() {
+          const sites = yield* auth.login(Option.isSome(site) ? { siteUrl: site.value } : undefined)
+          if (Array.isArray(sites) && sites.length > 0) {
+            yield* Console.log("\nRe-run with --site to select a specific site.")
+          }
+        })
+      )
+  ).pipe(Command.withDescription("Authenticate with Atlassian via OAuth"))
+
+  const logout = Command.make(
+    "logout",
+    {},
+    () => withAuth((auth) => auth.logout().pipe(Effect.andThen(Console.log("Logged out"))))
+  ).pipe(
+    Command.withDescription("Remove stored authentication")
+  )
+
+  const status = Command.make("status", {}, () =>
+    withAuth((auth) =>
+      Effect.gen(function*() {
+        const profile = yield* auth.getActiveProfile()
+        if (profile === null) {
+          return yield* Console.log(`Not logged in. Use '${loginHint}' to authenticate.`)
+        }
+        const user = profile.token.user
+        yield* Console.log(`Active profile: ${profile.name}`)
+        yield* Console.log(`Account: ${user !== undefined ? `${user.name} (${user.email})` : "unknown user"}`)
+        yield* Console.log(`Site: ${profile.token.site_url}`)
+        yield* Console.log(`Profile ID: ${profile.id}`)
+      })
+    )).pipe(Command.withDescription("Show authentication status"))
+
+  const profiles = Command.make("profiles", {}, () =>
+    withAuth((auth) =>
+      Effect.gen(function*() {
+        const [stored, active] = yield* Effect.all([auth.listProfiles(), auth.getActiveProfile()])
+        if (stored.length === 0) {
+          return yield* Console.log(`No auth profiles. Use '${loginHint}' to authenticate.`)
+        }
+        for (const profile of stored) {
+          yield* Console.log(`${active?.id === profile.id ? "*" : " "} ${profile.id}`)
+          yield* Console.log(`    ${profile.name}`)
+          yield* Console.log(`    ${profile.token.site_url}`)
+        }
+      })
+    )).pipe(Command.withDescription("List stored auth profiles"))
+
+  const profile = Argument.String("profile").pipe(
+    Argument.withDescription("Profile ID, name, site URL, cloud ID, or account ID")
+  )
+
+  const use = Command.make(
+    "use",
+    { profile },
+    ({ profile }) =>
+      withAuth((auth) =>
+        Effect.flatMap(
+          auth.switchProfile(profile),
+          (selected) =>
+            selected === null ? Effect.fail(profileNotFound(profile)) : Console.log(`Active profile: ${selected.name}`)
+        )
+      )
+  ).pipe(Command.withDescription("Switch active auth profile"))
+
+  const remove = Command.make(
+    "remove",
+    { profile },
+    ({ profile }) =>
+      withAuth((auth) =>
+        Effect.flatMap(
+          auth.removeProfile(profile),
+          (removed) =>
+            removed === null ? Effect.fail(profileNotFound(profile)) : Console.log(`Removed profile: ${removed.name}`)
+        )
+      )
+  ).pipe(Command.withDescription("Remove stored auth profile"))
+
+  return Command.make("auth").pipe(
+    Command.withDescription("Manage OAuth authentication"),
+    Command.withSubcommands([create, manage, configure, login, logout, status, profiles, use, remove])
+  )
+}

package/src/cli-auth/index.ts

@@ -10,9 +10,17 @@ export {
   type AccessibleSite,
   type AtlassianCliAuth,
   type AtlassianCliAuthOptions,
+  type AtlassianCliDescriptor,
   type LoginOptions,
   makeAtlassianCliAuth
 } from "./AtlassianCliAuth.js"
+export {
+  type AuthCommandOptions,
+  type AuthCommandService,
+  makeAuthCommand,
+  ProfileNotFoundError,
+  scopeInstructions
+} from "./authCommand.js"
 export { HttpServerFactoryLive, NodeCliAuthLive } from "./internal/NodeLayers.js"
 export { type HttpServerFactory, HttpServerFactoryTag, makeHttpServerFactory } from "./internal/oauthServer.js"
 export { BrowserOpenError, openBrowser } from "./openBrowser.js"

package/test/ApiUpdateWorkflows.test.ts

@@ -107,6 +107,40 @@ const changesetPathDiagnostics = (source: string): ReadonlyArray<string> =>
       : [`Generated changeset ${changesetPath ?? ""} must be unique per workflow run`]
   )
 
+// A regenerated-client-only diff is generator churn, not an upstream change: the
+// detection step must compare only the workflow's own client `specsDir`, and the
+// pull request must be gated on it.
+const specOnlyGuardDiagnostics = (source: string, specsDir: string): ReadonlyArray<string> => {
+  const workflow: unknown = parse(source)
+  if (!isRecord(workflow) || !isRecord(workflow.jobs)) return ["API update workflow could not be inspected"]
+
+  return Object.values(workflow.jobs).flatMap((job) => {
+    if (!isRecord(job) || !Array.isArray(job.steps)) return []
+    const steps = job.steps.filter(isRecord)
+    const detection = steps.find((step) => Predicate.isString(step.run) && step.run.includes("updated=true"))
+    if (detection === undefined || !Predicate.isString(detection.id) || !Predicate.isString(detection.run)) {
+      return ["API update workflow must detect upstream spec changes"]
+    }
+    const pathspecs = detection.run.replace(/\\\n\s*/gu, " ").match(/git diff --quiet -- ([^;\n]+)/u)?.[1]
+      ?.trim().split(/\s+/u) ?? []
+    const pathspecDiagnostics = pathspecs.length === 0
+      ? ["API update workflow must compare spec paths with git diff --quiet"]
+      : pathspecs.flatMap((pathspec) =>
+        pathspec === specsDir || pathspec.startsWith(`${specsDir}/`)
+          ? []
+          : [`API update workflow must open a pull request only for spec changes, not ${pathspec}`]
+      )
+    const gate = `steps.${detection.id}.outputs.updated == 'true'`
+    const pullRequestDiagnostics = steps.flatMap((step) =>
+      Predicate.isString(step.uses) && step.uses.startsWith("peter-evans/create-pull-request@")
+        && !(Predicate.isString(step.if) && step.if.includes(gate))
+        ? ["API update pull request must be gated on the spec-change detection step"]
+        : []
+    )
+    return [...pathspecDiagnostics, ...pullRequestDiagnostics]
+  })
+}
+
 const releaseWorkflow = (name: string, release: string, guidance = "Review the generated API.") => `
 jobs:
   update:
@@ -321,6 +355,50 @@ jobs:
       }
     }))
 
+  it("rejects generated-code detection and accepts a spec-only gate", () => {
+    const workflow = (pathspecs: string, gate: string) => `
+jobs:
+  update:
+    steps:
+      - name: Detect spec changes
+        id: check
+        run: |
+          if git diff --quiet -- \\
+            ${pathspecs}; then
+            echo "updated=false" >> "$GITHUB_OUTPUT"
+          else
+            echo "updated=true" >> "$GITHUB_OUTPUT"
+          fi
+      - name: Create pull request
+        if: ${gate}
+        uses: peter-evans/create-pull-request@5f6978faf089d4d20b00c7766989d076bb2fc7f1
+`
+    const gate = "steps.check.outputs.updated == 'true'"
+    const specs = "packages/x/.specs"
+    expect(specOnlyGuardDiagnostics(workflow("packages/x/.specs packages/x/src/generated", gate), specs)).toEqual([
+      "API update workflow must open a pull request only for spec changes, not packages/x/src/generated"
+    ])
+    expect(specOnlyGuardDiagnostics(workflow("packages/y/.specs", gate), specs)).toEqual([
+      "API update workflow must open a pull request only for spec changes, not packages/y/.specs"
+    ])
+    expect(specOnlyGuardDiagnostics(workflow("packages/x/.specs-old", gate), specs)).toEqual([
+      "API update workflow must open a pull request only for spec changes, not packages/x/.specs-old"
+    ])
+    expect(specOnlyGuardDiagnostics(workflow("packages/x/.specs", "always()"), specs)).toEqual([
+      "API update pull request must be gated on the spec-change detection step"
+    ])
+    expect(specOnlyGuardDiagnostics(workflow("packages/x/.specs/x-v1.json", gate), specs)).toEqual([])
+    expect(specOnlyGuardDiagnostics(workflow("packages/x/.specs", gate), specs)).toEqual([])
+  })
+
+  it.effect("opens API update pull requests only for spec changes", () =>
+    Effect.gen(function*() {
+      for (const client of ["clockify", "jira", "confluence"]) {
+        const source = yield* loadWorkflow(`${client}-api-update.yml`)
+        expect(specOnlyGuardDiagnostics(source, `packages/${client}-api-client/.specs`)).toEqual([])
+      }
+    }))
+
   it("rejects a bare consumer build and accepts a dependency-closed build", () => {
     const invalid = `
 jobs:

package/test/cliAuth.authCommand.test.ts

@@ -0,0 +1,161 @@
+/** @effect-diagnostics strictEffectProvide:skip-file */
+/**
+ * The shared `auth` command group: its setup text lists exactly the scopes the service logs in
+ * with, a browser that never opens fails the command after the URL is printed, and the profile
+ * commands read the same store for every product.
+ */
+import { NodeServices } from "@effect/platform-node"
+import { describe, expect, it } from "@effect/vitest"
+import * as Cause from "effect/Cause"
+import { Command } from "effect/cli"
+import * as Console from "effect/Console"
+import * as Context from "effect/Context"
+import * as Effect from "effect/Effect"
+import * as Exit from "effect/Exit"
+import * as Layer from "effect/Layer"
+import * as PlatformError from "effect/PlatformError"
+import { ChildProcessSpawner } from "effect/process"
+import * as Sink from "effect/Sink"
+import * as Stream from "effect/Stream"
+import { type AuthCommandService, makeAuthCommand, scopeInstructions } from "../src/cli-auth/index.js"
+import type { AuthProfile } from "../src/config/index.js"
+
+class TestAuth extends Context.Service<TestAuth, AuthCommandService>()("test/TestAuth") {}
+
+const SCOPES = [
+  "read:jira-work",
+  "write:jira-work",
+  "manage:jira-project",
+  "read:jira-user",
+  "read:me",
+  "offline_access"
+]
+
+const descriptor = { commandName: "jira", productName: "Jira", scopes: SCOPES }
+
+const profile: AuthProfile = {
+  id: "cloud-1:account-1",
+  name: "User 1 @ site-1",
+  token: {
+    access_token: "access-1",
+    refresh_token: "refresh-1",
+    expires_at: 0,
+    scope: "read:me",
+    cloud_id: "cloud-1",
+    site_url: "https://site-1.atlassian.net",
+    user: { account_id: "account-1", name: "User 1", email: "user-1@example.com" }
+  },
+  created_at: "2026-10-05T00:00:00.000Z",
+  updated_at: "2026-10-05T00:00:00.000Z"
+}
+
+const fakeAuth = (active: AuthProfile | null): AuthCommandService => ({
+  configure: () => Effect.void,
+  login: () => Effect.void,
+  logout: () => Effect.void,
+  getActiveProfile: () => Effect.succeed(active),
+  listProfiles: () => Effect.succeed(active === null ? [] : [active]),
+  switchProfile: () => Effect.succeed(null),
+  removeProfile: () => Effect.succeed(null)
+})
+
+// `opens` decides whether `open` exits 0; every other launcher is missing.
+const launchers = (opens: boolean) =>
+  Layer.succeed(
+    ChildProcessSpawner.ChildProcessSpawner,
+    ChildProcessSpawner.make((command) =>
+      command._tag === "StandardCommand" && command.command === "open"
+        ? Effect.succeed(ChildProcessSpawner.makeHandle({
+          all: Stream.empty,
+          exitCode: Effect.succeed(ChildProcessSpawner.ExitCode(opens ? 0 : 1)),
+          getInputFd: () => Sink.drain,
+          getOutputFd: () => Stream.empty,
+          isRunning: Effect.succeed(false),
+          kill: () => Effect.void,
+          pid: ChildProcessSpawner.ProcessId(1),
+          reref: Effect.void,
+          stderr: Stream.empty,
+          stdin: Sink.drain,
+          stdout: Stream.empty,
+          unref: Effect.succeed(Effect.void)
+        }))
+        : Effect.fail(PlatformError.systemError({ _tag: "NotFound", module: "ChildProcess", method: "spawn" }))
+    )
+  )
+
+const run = (
+  args: ReadonlyArray<string>,
+  options: { readonly active?: AuthProfile | null; readonly opens?: boolean }
+) =>
+  Effect.gen(function*() {
+    const lines: Array<string> = []
+    const capture: Console.Console = Object.assign(Object.create(console), {
+      log: (...parts: ReadonlyArray<unknown>) => lines.push(parts.join(" "))
+    })
+    const cli = Command.runWith(
+      Command.make("jira").pipe(
+        Command.withSubcommands([makeAuthCommand(TestAuth, descriptor, { apiSection: "Jira API" })])
+      ),
+      { version: "0.0.0-test" }
+    )
+    const exit = yield* cli(["auth", ...args]).pipe(
+      Effect.provideService(Console.Console, capture),
+      Effect.provide(Layer.mergeAll(
+        NodeServices.layer,
+        launchers(options.opens ?? true),
+        Layer.succeed(TestAuth, fakeAuth(options.active ?? null))
+      )),
+      Effect.exit
+    )
+    return { exit, output: lines.join("\n") }
+  })
+
+describe("makeAuthCommand", () => {
+  it("lists every login scope except offline_access, read:me under User Identity", () => {
+    const text = scopeInstructions(descriptor, "Jira API")
+    for (const scope of SCOPES.filter((scope) => scope !== "offline_access")) expect(text).toContain(scope)
+    expect(text).not.toContain("offline_access")
+    expect(text.indexOf("User Identity API")).toBeLessThan(text.indexOf("read:me"))
+    expect(text.indexOf("Jira API")).toBeLessThan(text.indexOf("read:jira-work"))
+  })
+
+  it.effect("create prints the service's scopes and its own command name, then opens the console", () =>
+    Effect.gen(function*() {
+      const { exit, output } = yield* run(["create"], {})
+      expect(exit._tag).toBe("Success")
+      for (const scope of ["write:jira-work", "manage:jira-project"]) expect(output).toContain(scope)
+      expect(output).toContain("jira auth configure --client-id")
+      expect(output).toContain("Opening https://developer.atlassian.com/console/myapps/create-3lo-app/")
+    }))
+
+  it.effect("create and manage fail when no browser opens, after printing the URL", () =>
+    Effect.gen(function*() {
+      for (const subcommand of ["create", "manage"]) {
+        const { exit, output } = yield* run([subcommand], { opens: false })
+        expect(exit._tag, subcommand).toBe("Failure")
+        expect(output, subcommand).toContain("Opening https://developer.atlassian.com/console/myapps/")
+      }
+    }))
+
+  it.effect("status prints the active profile, or how to log in", () =>
+    Effect.gen(function*() {
+      const active = yield* run(["status"], { active: profile })
+      expect(active.output).toContain("Active profile: User 1 @ site-1")
+      expect(active.output).toContain("Account: User 1 (user-1@example.com)")
+      expect(active.output).toContain("Site: https://site-1.atlassian.net")
+      expect((yield* run(["status"], {})).output).toContain("Not logged in. Use 'jira auth login' to authenticate.")
+    }))
+
+  it.effect("profiles marks the active one; use and remove fail typed on an unknown selector", () =>
+    Effect.gen(function*() {
+      expect((yield* run(["profiles"], { active: profile })).output).toContain("* cloud-1:account-1")
+      for (const subcommand of ["use", "remove"]) {
+        const { exit } = yield* run([subcommand, "nope"], {})
+        expect(Exit.isFailure(exit) && Cause.squash(exit.cause), subcommand).toMatchObject({
+          _tag: "ProfileNotFoundError",
+          message: "Profile not found: nope",
+          selector: "nope"
+        })
+      }
+    }))
+})

package/test/cliAuth.login.test.ts

@@ -137,9 +137,17 @@ const observedServerFactory = (stopped: Ref.Ref<boolean>) =>
     )
   )
 
-const captureConsole = (lines: Array<string>): Console.Console =>
+const captureConsole = (lines: Array<string>, waiting?: Deferred.Deferred<void>): Console.Console =>
   Object.assign(Object.create(console), {
-    log: (...args: ReadonlyArray<unknown>) => lines.push(args.join(" ")),
+    log: (...args: ReadonlyArray<unknown>) => {
+      const line = args.join(" ")
+      lines.push(line)
+      // Login prints this right before it starts its authorization deadline,
+      // without suspending in between.
+      if (waiting !== undefined && line.startsWith("Waiting for authorization")) {
+        Deferred.doneUnsafe(waiting, Effect.void)
+      }
+    },
     error: (...args: ReadonlyArray<unknown>) => lines.push(`stderr: ${args.join(" ")}`)
   })
 
@@ -235,6 +243,7 @@ describe("Atlassian CLI login", () => {
       const attempts = yield* Ref.make<ReadonlyArray<string>>([])
       const lines: Array<string> = []
       const stopped = yield* Ref.make(false)
+      const waiting = yield* Deferred.make<void>()
 
       const login = yield* makeAtlassianCliAuth(authOptions).pipe(
         Effect.flatMap((auth) => auth.login()),
@@ -245,18 +254,14 @@ describe("Atlassian CLI login", () => {
           failingLaunchers(launched, attempts),
           observedServerFactory(stopped)
         )),
-        Effect.provideService(Console.Console, captureConsole(lines)),
+        Effect.provideService(Console.Console, captureConsole(lines, waiting)),
         Effect.flip,
         Effect.forkChild({ startImmediately: true })
       )
 
-      yield* Deferred.await(launched)
-      // The deadline is registered just after the launch; step the clock past it
-      // in increments so it fires wherever in that window it was set.
-      for (let minute = 0; minute < 10; minute++) {
-        yield* TestClock.adjust("1 minute")
-        yield* Effect.yieldNow
-      }
+      // The login fiber has started its five-minute deadline by the time this resumes.
+      yield* Deferred.await(waiting)
+      yield* TestClock.adjust("5 minutes")
       const error = yield* Fiber.join(login)
 
       expect(error._tag).toBe("OAuthError")