@knpkv/jira-cli 1.4.1 → 1.5.1

package/CHANGELOG.md

@@ -1,5 +1,33 @@
 # @knpkv/jira-cli
 
+## 1.5.1
+
+### Patch Changes
+
+- [#477](https://github.com/knpkv/npm/pull/477) [`b4a69a0`](https://github.com/knpkv/npm/commit/b4a69a056ce3e2575df70d7aaea1a202f49b6a56) Thanks [@konopkov](https://github.com/konopkov)! - `JiraAuthService` and `ConfluenceAuthService` are now derived from atlassian-common's `AtlassianCliAuth` instead of re-spelling it, and `LoginOptions` / `AccessibleSite` are re-exported from there. The types are unchanged: a type-equality check against the previous hand-written interfaces passed before the switch. `ConfluenceAuthService` keeps its one real difference, a string access token and no `getSiteUrl`.
+
+- [#475](https://github.com/knpkv/npm/pull/475) [`08c62b7`](https://github.com/knpkv/npm/commit/08c62b787c649d8f78753515be6faf317791d62b) Thanks [@konopkov](https://github.com/konopkov)! - `auth use <profile>` and `auth remove <profile>` now fail with a typed `ProfileNotFoundError` (exported from `@knpkv/atlassian-common/cli-auth`) and exit non-zero when no stored profile matches. The failure names the profile (`Profile not found: <profile>`, on stderr through each CLI's error handler); previously the line went to stdout and the command exited 0, so a script could not tell a typo from a switch.
+- Updated dependencies [[`08c62b7`](https://github.com/knpkv/npm/commit/08c62b787c649d8f78753515be6faf317791d62b)]:
+  - @knpkv/atlassian-common@1.8.0
+
+## 1.5.0
+
+### Minor Changes
+
+- [#472](https://github.com/knpkv/npm/pull/472) [`d12c336`](https://github.com/knpkv/npm/commit/d12c3364e56abb7cfd32aa693c5406788a67e3f5) Thanks [@konopkov](https://github.com/konopkov)! - One shared `auth` command group for jira and confluence: `makeAuthCommand(service, descriptor, options)` in `@knpkv/atlassian-common/cli-auth`. Each CLI exports one descriptor (`jiraCliDescriptor`, `confluenceCliDescriptor`: command name, product name, login scopes) that feeds both its auth and its `auth` commands.
+
+  - `jira auth create` lists every scope `jira auth login` requests. It previously listed three of five (missing `write:jira-work` and `manage:jira-project`), so an app set up from its instructions could not log in.
+  - `jira auth manage` is new: it opens the developer console with the scope and callback checklist.
+  - `confluence auth profiles`, `auth use <profile>` and `auth remove <profile>` are new; the docs already described them.
+  - `confluence auth status` prints the active profile, account, site and profile ID.
+  - `auth create` and `auth manage` print the URL first and exit non-zero when no browser opens (jira's `create` used to ignore that).
+
+### Patch Changes
+
+- Updated dependencies [[`d12c336`](https://github.com/knpkv/npm/commit/d12c3364e56abb7cfd32aa693c5406788a67e3f5)]:
+  - @knpkv/atlassian-common@1.7.0
+  - @knpkv/agent-skills@0.3.3
+
 ## 1.4.1
 
 ### Patch Changes

package/README.md

@@ -22,7 +22,9 @@ cd packages/jira-cli && pnpm link --global
 jira auth create
 ```
 
-Opens Atlassian Developer Console. Create a new OAuth 2.0 (3LO) app with:
+Prints the URL and opens the Atlassian Developer Console (the command fails if no browser
+opens; finish from the printed URL). Create a new OAuth 2.0 (3LO) app with the scopes it
+prints, which are exactly the ones `jira auth login` requests:
 
 **Permissions:**
 
@@ -252,6 +254,7 @@ set, including surplus copies of a URL that _is_ desired. Other categories are n
 
 ```bash
 jira auth create     # Open Atlassian console to create OAuth app
+jira auth manage     # Open the console to edit the app's scopes
 jira auth configure  # Set client ID and secret
 jira auth login      # Authenticate via OAuth
 jira auth profiles   # List stored accounts/sites

package/dist/JiraAuth.d.ts

@@ -16,65 +16,18 @@
  *
  * @module
  */
-import type { OAuthError } from "@knpkv/atlassian-common/auth";
-import type { AuthProfile, FileSystemError, HomeDirectoryError, OAuthConfig, OAuthUser } from "@knpkv/atlassian-common/config";
+import { type AtlassianCliAuth, type AtlassianCliDescriptor } from "@knpkv/atlassian-common/cli-auth";
 import * as Context from "effect/Context";
-import type * as Effect from "effect/Effect";
 import * as Layer from "effect/Layer";
-import type * as PlatformError from "effect/PlatformError";
-import type * as Redacted from "effect/Redacted";
 import type { AuthMissingError } from "./JiraCliError.js";
+export type { AccessibleSite, LoginOptions } from "@knpkv/atlassian-common/cli-auth";
 /**
- * Options for the login method.
- *
- * @category Types
- */
-export interface LoginOptions {
-    /** Site URL to select (for accounts with multiple sites) */
-    readonly siteUrl?: string;
-}
-/**
- * Information about an accessible Jira site.
- *
- * @category Types
- */
-export interface AccessibleSite {
-    readonly id: string;
-    readonly name: string;
-    readonly url: string;
-}
-/**
- * JiraAuth service interface.
+ * JiraAuth service interface: the shared Atlassian CLI auth, failing with Jira's own
+ * {@link AuthMissingError} when nobody is logged in.
  *
  * @category Services
  */
-export interface JiraAuthService {
-    /** Configure OAuth client credentials */
-    readonly configure: (config: OAuthConfig) => Effect.Effect<void, FileSystemError | HomeDirectoryError | PlatformError.PlatformError>;
-    /** Check if OAuth is configured */
-    readonly isConfigured: () => Effect.Effect<boolean, FileSystemError | HomeDirectoryError | PlatformError.PlatformError>;
-    /** Start OAuth login flow. Returns list of sites if multiple are available. */
-    readonly login: (options?: LoginOptions) => Effect.Effect<ReadonlyArray<AccessibleSite> | void, OAuthError | FileSystemError | HomeDirectoryError | PlatformError.PlatformError>;
-    /** Remove stored authentication */
-    readonly logout: () => Effect.Effect<void, OAuthError | FileSystemError | HomeDirectoryError | PlatformError.PlatformError>;
-    /** Get access token, refreshing if needed */
-    readonly getAccessToken: () => Effect.Effect<Redacted.Redacted<string>, AuthMissingError | OAuthError | FileSystemError | HomeDirectoryError | PlatformError.PlatformError>;
-    /** Get cloud ID from stored token */
-    readonly getCloudId: () => Effect.Effect<string, AuthMissingError | FileSystemError | HomeDirectoryError | PlatformError.PlatformError>;
-    /** Get site URL from stored token */
-    readonly getSiteUrl: () => Effect.Effect<string, AuthMissingError | FileSystemError | HomeDirectoryError | PlatformError.PlatformError>;
-    /** Get current user info from stored token */
-    readonly getCurrentUser: () => Effect.Effect<OAuthUser | null, FileSystemError | HomeDirectoryError | PlatformError.PlatformError>;
-    /** Get active auth profile */
-    readonly getActiveProfile: () => Effect.Effect<AuthProfile | null, FileSystemError | HomeDirectoryError | PlatformError.PlatformError>;
-    /** List stored auth profiles */
-    readonly listProfiles: () => Effect.Effect<ReadonlyArray<AuthProfile>, FileSystemError | HomeDirectoryError | PlatformError.PlatformError>;
-    /** Switch active profile by ID, name, site URL, cloud ID, or account ID */
-    readonly switchProfile: (selector: string) => Effect.Effect<AuthProfile | null, FileSystemError | HomeDirectoryError | PlatformError.PlatformError>;
-    /** Remove stored profile by ID, name, site URL, cloud ID, or account ID */
-    readonly removeProfile: (selector: string) => Effect.Effect<AuthProfile | null, FileSystemError | HomeDirectoryError | PlatformError.PlatformError>;
-    /** Check if user is logged in */
-    readonly isLoggedIn: () => Effect.Effect<boolean, FileSystemError | HomeDirectoryError | PlatformError.PlatformError>;
+export interface JiraAuthService extends AtlassianCliAuth<AuthMissingError> {
 }
 declare const JiraAuth_base: Context.ServiceClass<JiraAuth, "@knpkv/jira-cli/JiraAuth", JiraAuthService>;
 /**
@@ -98,11 +51,12 @@ declare const JiraAuth_base: Context.ServiceClass<JiraAuth, "@knpkv/jira-cli/Jir
  */
 export declare class JiraAuth extends JiraAuth_base {
 }
+/** Who the Jira CLI is: shared by its auth and its `auth` commands, so both name the same scopes. */
+export declare const jiraCliDescriptor: AtlassianCliDescriptor;
 /**
  * Layer for JiraAuth service.
  *
  * @category Layers
  */
 export declare const layer: Layer.Layer<JiraAuth, never, import("effect/process/ChildProcessSpawner").ChildProcessSpawner | import("effect/Crypto").Crypto | import("effect/http/HttpClient").HttpClient>;
-export {};
 //# sourceMappingURL=JiraAuth.d.ts.map

package/dist/JiraAuth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"JiraAuth.d.ts","sourceRoot":"","sources":["../src/JiraAuth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,8BAA8B,CAAA;AAE9D,OAAO,KAAK,EACV,WAAW,EACX,eAAe,EACf,kBAAkB,EAClB,WAAW,EACX,SAAS,EACV,MAAM,gCAAgC,CAAA;AACvC,OAAO,KAAK,OAAO,MAAM,gBAAgB,CAAA;AACzC,OAAO,KAAK,KAAK,MAAM,MAAM,eAAe,CAAA;AAC5C,OAAO,KAAK,KAAK,MAAM,cAAc,CAAA;AACrC,OAAO,KAAK,KAAK,aAAa,MAAM,sBAAsB,CAAA;AAC1D,OAAO,KAAK,KAAK,QAAQ,MAAM,iBAAiB,CAAA;AAChD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAA;AAqBzD;;;;GAIG;AACH,MAAM,WAAW,YAAY;IAC3B,4DAA4D;IAC5D,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAC1B;AAED;;;;GAIG;AACH,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;CACrB;AAED;;;;GAIG;AACH,MAAM,WAAW,eAAe;IAC9B,yCAAyC;IACzC,QAAQ,CAAC,SAAS,EAAE,CAClB,MAAM,EAAE,WAAW,KAChB,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,eAAe,GAAG,kBAAkB,GAAG,aAAa,CAAC,aAAa,CAAC,CAAA;IAC5F,mCAAmC;IACnC,QAAQ,CAAC,YAAY,EAAE,MAAM,MAAM,CAAC,MAAM,CACxC,OAAO,EACP,eAAe,GAAG,kBAAkB,GAAG,aAAa,CAAC,aAAa,CACnE,CAAA;IACD,+EAA+E;IAC/E,QAAQ,CAAC,KAAK,EAAE,CACd,OAAO,CAAC,EAAE,YAAY,KACnB,MAAM,CAAC,MAAM,CAChB,aAAa,CAAC,cAAc,CAAC,GAAG,IAAI,EACpC,UAAU,GAAG,eAAe,GAAG,kBAAkB,GAAG,aAAa,CAAC,aAAa,CAChF,CAAA;IACD,mCAAmC;IACnC,QAAQ,CAAC,MAAM,EAAE,MAAM,MAAM,CAAC,MAAM,CAClC,IAAI,EACJ,UAAU,GAAG,eAAe,GAAG,kBAAkB,GAAG,aAAa,CAAC,aAAa,CAChF,CAAA;IACD,6CAA6C;IAC7C,QAAQ,CAAC,cAAc,EAAE,MAAM,MAAM,CAAC,MAAM,CAC1C,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,EACzB,gBAAgB,GAAG,UAAU,GAAG,eAAe,GAAG,kBAAkB,GAAG,aAAa,CAAC,aAAa,CACnG,CAAA;IACD,qCAAqC;IACrC,QAAQ,CAAC,UAAU,EAAE,MAAM,MAAM,CAAC,MAAM,CACtC,MAAM,EACN,gBAAgB,GAAG,eAAe,GAAG,kBAAkB,GAAG,aAAa,CAAC,aAAa,CACtF,CAAA;IACD,qCAAqC;IACrC,QAAQ,CAAC,UAAU,EAAE,MAAM,MAAM,CAAC,MAAM,CACtC,MAAM,EACN,gBAAgB,GAAG,eAAe,GAAG,kBAAkB,GAAG,aAAa,CAAC,aAAa,CACtF,CAAA;IACD,8CAA8C;IAC9C,QAAQ,CAAC,cAAc,EAAE,MAAM,MAAM,CAAC,MAAM,CAC1C,SAAS,GAAG,IAAI,EAChB,eAAe,GAAG,kBAAkB,GAAG,aAAa,CAAC,aAAa,CACnE,CAAA;IACD,8BAA8B;IAC9B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,MAAM,CAAC,MAAM,CAC5C,WAAW,GAAG,IAAI,EAClB,eAAe,GAAG,kBAAkB,GAAG,aAAa,CAAC,aAAa,CACnE,CAAA;IACD,gCAAgC;IAChC,QAAQ,CAAC,YAAY,EAAE,MAAM,MAAM,CAAC,MAAM,CACxC,aAAa,CAAC,WAAW,CAAC,EAC1B,eAAe,GAAG,kBAAkB,GAAG,aAAa,CAAC,aAAa,CACnE,CAAA;IACD,2EAA2E;IAC3E,QAAQ,CAAC,aAAa,EAAE,CACtB,QAAQ,EAAE,MAAM,KACb,MAAM,CAAC,MAAM,CAAC,WAAW,GAAG,IAAI,EAAE,eAAe,GAAG,kBAAkB,GAAG,aAAa,CAAC,aAAa,CAAC,CAAA;IAC1G,2EAA2E;IAC3E,QAAQ,CAAC,aAAa,EAAE,CACtB,QAAQ,EAAE,MAAM,KACb,MAAM,CAAC,MAAM,CAAC,WAAW,GAAG,IAAI,EAAE,eAAe,GAAG,kBAAkB,GAAG,aAAa,CAAC,aAAa,CAAC,CAAA;IAC1G,iCAAiC;IACjC,QAAQ,CAAC,UAAU,EAAE,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,eAAe,GAAG,kBAAkB,GAAG,aAAa,CAAC,aAAa,CAAC,CAAA;CACtH;;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,qBAAa,QAAS,SAAQ,aAGC;CAAG;AAElC;;;;GAIG;AACH,eAAO,MAAM,KAAK,+KASoB,CAAA"}
+{"version":3,"file":"JiraAuth.d.ts","sourceRoot":"","sources":["../src/JiraAuth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,EACL,KAAK,gBAAgB,EACrB,KAAK,sBAAsB,EAG5B,MAAM,kCAAkC,CAAA;AACzC,OAAO,KAAK,OAAO,MAAM,gBAAgB,CAAA;AACzC,OAAO,KAAK,KAAK,MAAM,cAAc,CAAA;AACrC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAA;AAqBzD,YAAY,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,kCAAkC,CAAA;AAEpF;;;;;GAKG;AACH,MAAM,WAAW,eAAgB,SAAQ,gBAAgB,CAAC,gBAAgB,CAAC;CAAG;;AAE9E;;;;;;;;;;;;;;;;;;GAkBG;AACH,qBAAa,QAAS,SAAQ,aAGC;CAAG;AAElC,qGAAqG;AACrG,eAAO,MAAM,iBAAiB,EAAE,sBAI/B,CAAA;AAED;;;;GAIG;AACH,eAAO,MAAM,KAAK,+KAOoB,CAAA"}

package/dist/JiraAuth.js

@@ -1,3 +1,21 @@
+/**
+ * OAuth2 authentication service for Jira CLI with token refresh and concurrency locking.
+ *
+ * **Mental model**
+ *
+ * - **Service pattern**: {@link JiraAuth} is a `Context.Tag` whose layer requires `HttpClient`,
+ *   `ChildProcessSpawner` and `Crypto`. The flow — refresh lock, rotating-token persistence,
+ *   browser login, profiles — is `@knpkv/atlassian-common/cli-auth`'s, bound to the
+ *   `"jira-cli"` storage namespace, Jira's scopes and Jira's names.
+ *
+ * **Common tasks**
+ *
+ * - Get a valid access token: `auth.getAccessToken()` (auto-refreshes if expired)
+ * - Full login flow: `auth.login()`
+ * - Check auth state: `auth.isLoggedIn()`
+ *
+ * @module
+ */
 import { makeAtlassianCliAuth, NodeCliAuthLive } from "@knpkv/atlassian-common/cli-auth";
 import * as Context from "effect/Context";
 import * as Layer from "effect/Layer";
@@ -40,16 +58,20 @@ const JIRA_CLI_SCOPES = [
  */
 export class JiraAuth extends Context.Service()("@knpkv/jira-cli/JiraAuth") {
 }
+/** Who the Jira CLI is: shared by its auth and its `auth` commands, so both name the same scopes. */
+export const jiraCliDescriptor = {
+    commandName: "jira",
+    productName: "Jira",
+    scopes: JIRA_CLI_SCOPES
+};
 /**
  * Layer for JiraAuth service.
  *
  * @category Layers
  */
 export const layer = Layer.effect(JiraAuth, makeAtlassianCliAuth({
+    ...jiraCliDescriptor,
     toolName: "jira-cli",
-    commandName: "jira",
-    productName: "Jira",
-    scopes: JIRA_CLI_SCOPES,
     authMissing
 })).pipe(Layer.provide(NodeCliAuthLive));
 //# sourceMappingURL=JiraAuth.js.map

package/dist/JiraAuth.js.map

@@ -1 +1 @@
-{"version":3,"file":"JiraAuth.js","sourceRoot":"","sources":["../src/JiraAuth.ts"],"names":[],"mappings":"AAmBA,OAAO,EAAE,oBAAoB,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAA;AAQxF,OAAO,KAAK,OAAO,MAAM,gBAAgB,CAAA;AAEzC,OAAO,KAAK,KAAK,MAAM,cAAc,CAAA;AAIrC,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAA;AAE/C,+GAA+G;AAC/G,MAAM,eAAe,GAAG;IACtB,0CAA0C;IAC1C,gBAAgB;IAChB,kCAAkC;IAClC,iBAAiB;IACjB,oEAAoE;IACpE,sEAAsE;IACtE,iEAAiE;IACjE,qBAAqB;IACrB,0EAA0E;IAC1E,gBAAgB;IAChB,oEAAoE;IACpE,SAAS;IACT,gEAAgE;IAChE,gBAAgB;CACjB,CAAA;AA4FD;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,OAAO,QAAS,SAAQ,OAAO,CAAC,OAAO,EAG1C,CAAC,0BAA0B,CAAC;CAAG;AAElC;;;;GAIG;AACH,MAAM,CAAC,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAC/B,QAAQ,EACR,oBAAoB,CAAC;IACnB,QAAQ,EAAE,UAAU;IACpB,WAAW,EAAE,MAAM;IACnB,WAAW,EAAE,MAAM;IACnB,MAAM,EAAE,eAAe;IACvB,WAAW;CACZ,CAAC,CACH,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAA"}
+{"version":3,"file":"JiraAuth.js","sourceRoot":"","sources":["../src/JiraAuth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,EAGL,oBAAoB,EACpB,eAAe,EAChB,MAAM,kCAAkC,CAAA;AACzC,OAAO,KAAK,OAAO,MAAM,gBAAgB,CAAA;AACzC,OAAO,KAAK,KAAK,MAAM,cAAc,CAAA;AAErC,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAA;AAE/C,+GAA+G;AAC/G,MAAM,eAAe,GAAG;IACtB,0CAA0C;IAC1C,gBAAgB;IAChB,kCAAkC;IAClC,iBAAiB;IACjB,oEAAoE;IACpE,sEAAsE;IACtE,iEAAiE;IACjE,qBAAqB;IACrB,0EAA0E;IAC1E,gBAAgB;IAChB,oEAAoE;IACpE,SAAS;IACT,gEAAgE;IAChE,gBAAgB;CACjB,CAAA;AAYD;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,OAAO,QAAS,SAAQ,OAAO,CAAC,OAAO,EAG1C,CAAC,0BAA0B,CAAC;CAAG;AAElC,qGAAqG;AACrG,MAAM,CAAC,MAAM,iBAAiB,GAA2B;IACvD,WAAW,EAAE,MAAM;IACnB,WAAW,EAAE,MAAM;IACnB,MAAM,EAAE,eAAe;CACxB,CAAA;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAC/B,QAAQ,EACR,oBAAoB,CAAC;IACnB,GAAG,iBAAiB;IACpB,QAAQ,EAAE,UAAU;IACpB,WAAW;CACZ,CAAC,CACH,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAA"}

package/dist/commands/auth.d.ts

@@ -1,4 +1,3 @@
-import { Command, Prompt } from "effect/cli";
 import { JiraAuth } from "../JiraAuth.js";
-export declare const authCommand: Command.Command<"auth", {}, {}, import("@knpkv/atlassian-common/config").FileSystemError | import("@knpkv/atlassian-common/config").HomeDirectoryError | import("@knpkv/atlassian-common/auth").OAuthError | import("effect/PlatformError").PlatformError | import("effect/Terminal").QuitError, import("effect/process/ChildProcessSpawner").ChildProcessSpawner | JiraAuth | Prompt.Environment>;
+export declare const authCommand: import("effect/cli/Command").Command<"auth", {}, {}, import("@knpkv/atlassian-common/cli-auth").BrowserOpenError | import("@knpkv/atlassian-common").FileSystemError | import("@knpkv/atlassian-common").HomeDirectoryError | import("@knpkv/atlassian-common").OAuthError | import("effect/PlatformError").PlatformError | import("@knpkv/atlassian-common/cli-auth").ProfileNotFoundError | import("effect/Terminal").QuitError, import("effect/process/ChildProcessSpawner").ChildProcessSpawner | JiraAuth | import("effect/cli/Prompt").Environment>;
 //# sourceMappingURL=auth.d.ts.map

package/dist/commands/auth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/commands/auth.ts"],"names":[],"mappings":"AAWA,OAAO,EAAoB,OAAO,EAAmB,MAAM,EAAE,MAAM,YAAY,CAAA;AAI/E,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAA;AAgJzC,eAAO,MAAM,WAAW,oYAYvB,CAAA"}
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/commands/auth.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,QAAQ,EAAqB,MAAM,gBAAgB,CAAA;AAE5D,eAAO,MAAM,WAAW,2hBAA2E,CAAA"}

package/dist/commands/auth.js

@@ -1,133 +1,9 @@
 /**
- * Auth subcommands: create, configure, login, logout, status.
- *
- * **Mental model**
- *
- * - Each command is a standalone `Command.make` that yields into `JiraAuth` service methods.
- * - `create` opens the Atlassian Developer Console; `configure` prompts for client ID/secret.
+ * `jira auth`: the shared Atlassian auth commands over {@link JiraAuth}.
  *
  * @internal
  */
-import { openBrowser } from "@knpkv/atlassian-common/cli-auth";
-import { Argument as Args, Command, Flag as Options, Prompt } from "effect/cli";
-import * as Console from "effect/Console";
-import * as Effect from "effect/Effect";
-import * as Option from "effect/Option";
-import { JiraAuth } from "../JiraAuth.js";
-// === Auth create command ===
-const createCommand = Command.make("create", {}, () => Effect.gen(function* () {
-    yield* Console.log(`
-Creating OAuth app in Atlassian Developer Console...
-
-1. Browser will open to create a new OAuth 2.0 (3LO) app
-2. Enter app name (e.g., "Jira CLI")
-3. After creation, go to "Permissions" and add:
-
-   Jira API:
-   - read:jira-work    Search and read issues, comments, attachments
-   - read:jira-user    Read user info for assignee/reporter fields
-
-   User Identity API:
-   - read:me           Get your account ID and email for auth
-
-4. Go to "Authorization" and set callback URL:
-   http://localhost:8585/callback
-5. Go to "Settings" and copy Client ID and Secret
-6. Run: jira auth configure --client-id <ID> --client-secret <SECRET>
-`);
-    const url = "https://developer.atlassian.com/console/myapps/create-3lo-app/";
-    yield* openBrowser(url).pipe(Effect.catch(() => Effect.void));
-})).pipe(Command.withDescription("Create OAuth app in Atlassian Developer Console"));
-// === Auth configure command ===
-const clientIdOption = Options.String("client-id").pipe(Options.withDescription("OAuth client ID from Atlassian Developer Console"), Options.optional);
-const clientSecretOption = Options.String("client-secret").pipe(Options.withDescription("OAuth client secret"), Options.optional);
-const configureCommand = Command.make("configure", { clientId: clientIdOption, clientSecret: clientSecretOption }, ({ clientId, clientSecret }) => Effect.gen(function* () {
-    const auth = yield* JiraAuth;
-    const rawClientId = Option.isSome(clientId)
-        ? clientId.value
-        : yield* Prompt.String({ message: "Enter OAuth client ID:" });
-    const rawClientSecret = Option.isSome(clientSecret)
-        ? clientSecret.value
-        : yield* Prompt.String({ message: "Enter OAuth client secret:" });
-    yield* auth.configure({ clientId: rawClientId, clientSecret: rawClientSecret });
-    yield* Console.log("OAuth configured. Run 'jira auth login' to authenticate.");
-})).pipe(Command.withDescription("Configure OAuth client credentials"));
-// === Auth login command ===
-const siteOption = Options.String("site").pipe(Options.withDescription("Jira site URL to use (for accounts with multiple sites)"), Options.optional);
-const loginCommand = Command.make("login", { site: siteOption }, ({ site }) => Effect.gen(function* () {
-    const auth = yield* JiraAuth;
-    const result = yield* auth.login(Option.isSome(site) ? { siteUrl: site.value } : undefined);
-    if (Array.isArray(result) && result.length > 0) {
-        yield* Console.log("\nRe-run with --site to select a specific site.");
-    }
-})).pipe(Command.withDescription("Authenticate with Atlassian via OAuth"));
-// === Auth logout command ===
-const logoutCommand = Command.make("logout", {}, () => Effect.gen(function* () {
-    const auth = yield* JiraAuth;
-    yield* auth.logout();
-    yield* Console.log("Logged out");
-})).pipe(Command.withDescription("Remove stored authentication"));
-// === Auth status command ===
-const statusCommand = Command.make("status", {}, () => Effect.gen(function* () {
-    const auth = yield* JiraAuth;
-    const profile = yield* auth.getActiveProfile();
-    if (profile) {
-        const user = profile.token.user;
-        const account = user ? `${user.name} (${user.email})` : "unknown user";
-        yield* Console.log(`Active profile: ${profile.name}`);
-        yield* Console.log(`Account: ${account}`);
-        yield* Console.log(`Site: ${profile.token.site_url}`);
-        yield* Console.log(`Profile ID: ${profile.id}`);
-    }
-    else {
-        yield* Console.log("Not logged in. Use 'jira auth login' to authenticate.");
-    }
-})).pipe(Command.withDescription("Show authentication status"));
-// === Auth profiles command ===
-const profilesCommand = Command.make("profiles", {}, () => Effect.gen(function* () {
-    const auth = yield* JiraAuth;
-    const [profiles, active] = yield* Effect.all([auth.listProfiles(), auth.getActiveProfile()]);
-    if (profiles.length === 0) {
-        yield* Console.log("No auth profiles. Use 'jira auth login' to authenticate.");
-        return;
-    }
-    for (const profile of profiles) {
-        const marker = active?.id === profile.id ? "*" : " ";
-        yield* Console.log(`${marker} ${profile.id}`);
-        yield* Console.log(`    ${profile.name}`);
-        yield* Console.log(`    ${profile.token.site_url}`);
-    }
-})).pipe(Command.withDescription("List stored auth profiles"));
-const profileArg = Args.String("profile").pipe(Args.withDescription("Profile ID, name, site URL, cloud ID, or account ID"));
-// === Auth use command ===
-const useCommand = Command.make("use", { profile: profileArg }, ({ profile }) => Effect.gen(function* () {
-    const auth = yield* JiraAuth;
-    const selected = yield* auth.switchProfile(profile);
-    if (!selected) {
-        yield* Console.log(`Profile not found: ${profile}`);
-        return;
-    }
-    yield* Console.log(`Active profile: ${selected.name}`);
-})).pipe(Command.withDescription("Switch active auth profile"));
-// === Auth remove command ===
-const removeCommand = Command.make("remove", { profile: profileArg }, ({ profile }) => Effect.gen(function* () {
-    const auth = yield* JiraAuth;
-    const removed = yield* auth.removeProfile(profile);
-    if (!removed) {
-        yield* Console.log(`Profile not found: ${profile}`);
-        return;
-    }
-    yield* Console.log(`Removed profile: ${removed.name}`);
-})).pipe(Command.withDescription("Remove stored auth profile"));
-// === Auth command group ===
-export const authCommand = Command.make("auth").pipe(Command.withDescription("Manage OAuth authentication"), Command.withSubcommands([
-    createCommand,
-    configureCommand,
-    loginCommand,
-    logoutCommand,
-    statusCommand,
-    profilesCommand,
-    useCommand,
-    removeCommand
-]));
+import { makeAuthCommand } from "@knpkv/atlassian-common/cli-auth";
+import { JiraAuth, jiraCliDescriptor } from "../JiraAuth.js";
+export const authCommand = makeAuthCommand(JiraAuth, jiraCliDescriptor, { apiSection: "Jira API" });
 //# sourceMappingURL=auth.js.map

package/dist/commands/auth.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../src/commands/auth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAAE,WAAW,EAAE,MAAM,kCAAkC,CAAA;AAC9D,OAAO,EAAE,QAAQ,IAAI,IAAI,EAAE,OAAO,EAAE,IAAI,IAAI,OAAO,EAAE,MAAM,EAAE,MAAM,YAAY,CAAA;AAC/E,OAAO,KAAK,OAAO,MAAM,gBAAgB,CAAA;AACzC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AACvC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AACvC,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAA;AAEzC,8BAA8B;AAC9B,MAAM,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,EAAE,GAAG,EAAE,CACpD,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,KAAK,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;;;;;;;;;CAkBtB,CAAC,CAAA;IACE,MAAM,GAAG,GAAG,gEAAgE,CAAA;IAC5E,KAAK,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAA;AAC/D,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,iDAAiD,CAAC,CAAC,CAAA;AAEtF,iCAAiC;AACjC,MAAM,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,IAAI,CACrD,OAAO,CAAC,eAAe,CAAC,kDAAkD,CAAC,EAC3E,OAAO,CAAC,QAAQ,CACjB,CAAA;AACD,MAAM,kBAAkB,GAAG,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,IAAI,CAC7D,OAAO,CAAC,eAAe,CAAC,qBAAqB,CAAC,EAC9C,OAAO,CAAC,QAAQ,CACjB,CAAA;AAED,MAAM,gBAAgB,GAAG,OAAO,CAAC,IAAI,CACnC,WAAW,EACX,EAAE,QAAQ,EAAE,cAAc,EAAE,YAAY,EAAE,kBAAkB,EAAE,EAC9D,CAAC,EAAE,QAAQ,EAAE,YAAY,EAAE,EAAE,EAAE,CAC7B,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAA;IAE5B,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC;QACzC,CAAC,CAAC,QAAQ,CAAC,KAAK;QAChB,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,wBAAwB,EAAE,CAAC,CAAA;IAC/D,MAAM,eAAe,GAAG,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC;QACjD,CAAC,CAAC,YAAY,CAAC,KAAK;QACpB,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,4BAA4B,EAAE,CAAC,CAAA;IAEnE,KAAK,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,WAAW,EAAE,YAAY,EAAE,eAAe,EAAE,CAAC,CAAA;IAC/E,KAAK,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,0DAA0D,CAAC,CAAA;AAChF,CAAC,CAAC,CACL,CAAC,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,oCAAoC,CAAC,CAAC,CAAA;AAErE,6BAA6B;AAC7B,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAC5C,OAAO,CAAC,eAAe,CAAC,yDAAyD,CAAC,EAClF,OAAO,CAAC,QAAQ,CACjB,CAAA;AAED,MAAM,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAC5E,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAA;IAC5B,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAA;IAC3F,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/C,KAAK,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,iDAAiD,CAAC,CAAA;IACvE,CAAC;AACH,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,uCAAuC,CAAC,CAAC,CAAA;AAE5E,8BAA8B;AAC9B,MAAM,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,EAAE,GAAG,EAAE,CACpD,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAA;IAC5B,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,CAAA;IACpB,KAAK,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAA;AAClC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,8BAA8B,CAAC,CAAC,CAAA;AAEnE,8BAA8B;AAC9B,MAAM,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,EAAE,GAAG,EAAE,CACpD,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAA;IAC5B,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAA;IAC9C,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAA;QAC/B,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,cAAc,CAAA;QACtE,KAAK,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,OAAO,CAAC,IAAI,EAAE,CAAC,CAAA;QACrD,KAAK,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,OAAO,EAAE,CAAC,CAAA;QACzC,KAAK,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,OAAO,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAA;QACrD,KAAK,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,OAAO,CAAC,EAAE,EAAE,CAAC,CAAA;IACjD,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,uDAAuD,CAAC,CAAA;IAC7E,CAAC;AACH,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,4BAA4B,CAAC,CAAC,CAAA;AAEjE,gCAAgC;AAChC,MAAM,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,EAAE,GAAG,EAAE,CACxD,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAA;IAC5B,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,IAAI,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAA;IAC5F,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,KAAK,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,0DAA0D,CAAC,CAAA;QAC9E,OAAM;IACR,CAAC;IAED,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,MAAM,MAAM,GAAG,MAAM,EAAE,EAAE,KAAK,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAA;QACpD,KAAK,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,MAAM,IAAI,OAAO,CAAC,EAAE,EAAE,CAAC,CAAA;QAC7C,KAAK,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,OAAO,CAAC,IAAI,EAAE,CAAC,CAAA;QACzC,KAAK,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,OAAO,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAA;IACrD,CAAC;AACH,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,2BAA2B,CAAC,CAAC,CAAA;AAEhE,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAC5C,IAAI,CAAC,eAAe,CAAC,qDAAqD,CAAC,CAC5E,CAAA;AAED,2BAA2B;AAC3B,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAC9E,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAA;IAC5B,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAA;IACnD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,KAAK,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB,OAAO,EAAE,CAAC,CAAA;QACnD,OAAM;IACR,CAAC;IACD,KAAK,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAA;AACxD,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,4BAA4B,CAAC,CAAC,CAAA;AAEjE,8BAA8B;AAC9B,MAAM,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CACpF,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAA;IAC5B,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAA;IAClD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,KAAK,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB,OAAO,EAAE,CAAC,CAAA;QACnD,OAAM;IACR,CAAC;IACD,KAAK,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,OAAO,CAAC,IAAI,EAAE,CAAC,CAAA;AACxD,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,4BAA4B,CAAC,CAAC,CAAA;AAEjE,6BAA6B;AAC7B,MAAM,CAAC,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAClD,OAAO,CAAC,eAAe,CAAC,6BAA6B,CAAC,EACtD,OAAO,CAAC,eAAe,CAAC;IACtB,aAAa;IACb,gBAAgB;IAChB,YAAY;IACZ,aAAa;IACb,aAAa;IACb,eAAe;IACf,UAAU;IACV,aAAa;CACd,CAAC,CACH,CAAA"}
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../src/commands/auth.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAA;AAClE,OAAO,EAAE,QAAQ,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAA;AAE5D,MAAM,CAAC,MAAM,WAAW,GAAG,eAAe,CAAC,QAAQ,EAAE,iBAAiB,EAAE,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC,CAAA"}

package/dist/commands/layers.d.ts

@@ -11,7 +11,7 @@ import { VersionService } from "../VersionService.js";
  *
  * @category Layers
  */
-export declare const AppLayer: Layer.Layer<AttachmentService | import("effect/http/HttpClient").HttpClient | IssueService | JiraApiClient | JiraAuth | MarkdownWriter | SiteUrl | VersionService | NodeServices.NodeServices, import("../JiraCliError.js").AuthMissingError | import("@knpkv/atlassian-common/config").FileSystemError | import("@knpkv/atlassian-common/config").HomeDirectoryError | import("@knpkv/atlassian-common/auth").OAuthError | import("effect/PlatformError").PlatformError, never>;
+export declare const AppLayer: Layer.Layer<AttachmentService | import("effect/http/HttpClient").HttpClient | IssueService | JiraApiClient | JiraAuth | MarkdownWriter | SiteUrl | VersionService | NodeServices.NodeServices, import("../JiraCliError.js").AuthMissingError | import("@knpkv/atlassian-common").OAuthError | (import("@knpkv/atlassian-common").FileSystemError | import("@knpkv/atlassian-common").HomeDirectoryError | import("effect/PlatformError").PlatformError), never>;
 /**
  * Auth-only layer for auth commands.
  *

package/dist/commands/layers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"layers.d.ts","sourceRoot":"","sources":["../../src/commands/layers.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,YAAY,MAAM,oCAAoC,CAAA;AAClE,OAAO,EAAE,aAAa,EAAiB,MAAM,wBAAwB,CAAA;AAErE,OAAO,KAAK,KAAK,MAAM,cAAc,CAAA;AACrC,OAAO,EAAE,iBAAiB,EAAmC,MAAM,yBAAyB,CAAA;AAC5F,OAAO,EAAE,YAAY,EAA8B,OAAO,EAAE,MAAM,oBAAoB,CAAA;AACtF,OAAO,EAAE,QAAQ,EAA0B,MAAM,gBAAgB,CAAA;AACjE,OAAO,EAAgC,cAAc,EAAE,MAAM,sBAAsB,CAAA;AACnF,OAAO,EAAgC,cAAc,EAAE,MAAM,sBAAsB,CAAA;AA+FnF;;;;GAIG;AACH,eAAO,MAAM,QAAQ,kdASpB,CAAA;AAED;;;;GAIG;AACH,eAAO,MAAM,aAAa,oLAOzB,CAAA;AAED;;;;GAIG;AACH,eAAO,MAAM,YAAY,sIAMxB,CAAA;AAED;;;;GAIG;AACH,eAAO,MAAM,YAAY,SAAU,aAAa,CAAC,MAAM,CAAC,KAAG,MAAM,GAAG,MAAM,GAAG,SAkB5E,CAAA"}
+{"version":3,"file":"layers.d.ts","sourceRoot":"","sources":["../../src/commands/layers.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,YAAY,MAAM,oCAAoC,CAAA;AAClE,OAAO,EAAE,aAAa,EAAiB,MAAM,wBAAwB,CAAA;AAErE,OAAO,KAAK,KAAK,MAAM,cAAc,CAAA;AACrC,OAAO,EAAE,iBAAiB,EAAmC,MAAM,yBAAyB,CAAA;AAC5F,OAAO,EAAE,YAAY,EAA8B,OAAO,EAAE,MAAM,oBAAoB,CAAA;AACtF,OAAO,EAAE,QAAQ,EAA0B,MAAM,gBAAgB,CAAA;AACjE,OAAO,EAAgC,cAAc,EAAE,MAAM,sBAAsB,CAAA;AACnF,OAAO,EAAgC,cAAc,EAAE,MAAM,sBAAsB,CAAA;AA+FnF;;;;GAIG;AACH,eAAO,MAAM,QAAQ,icASpB,CAAA;AAED;;;;GAIG;AACH,eAAO,MAAM,aAAa,oLAOzB,CAAA;AAED;;;;GAIG;AACH,eAAO,MAAM,YAAY,sIAMxB,CAAA;AAED;;;;GAIG;AACH,eAAO,MAAM,YAAY,SAAU,aAAa,CAAC,MAAM,CAAC,KAAG,MAAM,GAAG,MAAM,GAAG,SAkB5E,CAAA"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@knpkv/jira-cli",
-  "version": "1.4.1",
+  "version": "1.5.1",
   "description": "CLI tool to fetch Jira tickets and export to markdown",
   "license": "MIT",
   "author": "knpkv",
@@ -60,8 +60,8 @@
     "@effect/platform-node": "4.0.0",
     "gray-matter": "^4.0.3",
     "js-yaml": "5.4.2",
-    "@knpkv/agent-skills": "^0.3.2",
-    "@knpkv/atlassian-common": "1.6.0",
+    "@knpkv/agent-skills": "^0.3.3",
+    "@knpkv/atlassian-common": "1.8.0",
     "@knpkv/jira-api-client": "2.0.0"
   },
   "devDependencies": {

package/skills/jira/SKILL.md

@@ -21,6 +21,7 @@ Use the `jira` binary for Jira Cloud issue export and release-version workflows.
 ```bash
 jira auth status
 jira auth create
+jira auth manage
 jira auth configure --client-id <id> --client-secret <secret>
 jira auth login
 jira auth login --site https://example.atlassian.net

package/src/JiraAuth.ts

@@ -16,20 +16,14 @@
  *
  * @module
  */
-import type { OAuthError } from "@knpkv/atlassian-common/auth"
-import { makeAtlassianCliAuth, NodeCliAuthLive } from "@knpkv/atlassian-common/cli-auth"
-import type {
-  AuthProfile,
-  FileSystemError,
-  HomeDirectoryError,
-  OAuthConfig,
-  OAuthUser
-} from "@knpkv/atlassian-common/config"
+import {
+  type AtlassianCliAuth,
+  type AtlassianCliDescriptor,
+  makeAtlassianCliAuth,
+  NodeCliAuthLive
+} from "@knpkv/atlassian-common/cli-auth"
 import * as Context from "effect/Context"
-import type * as Effect from "effect/Effect"
 import * as Layer from "effect/Layer"
-import type * as PlatformError from "effect/PlatformError"
-import type * as Redacted from "effect/Redacted"
 import type { AuthMissingError } from "./JiraCliError.js"
 import { authMissing } from "./JiraCliError.js"
 
@@ -51,95 +45,15 @@ const JIRA_CLI_SCOPES = [
   "offline_access"
 ]
 
-/**
- * Options for the login method.
- *
- * @category Types
- */
-export interface LoginOptions {
-  /** Site URL to select (for accounts with multiple sites) */
-  readonly siteUrl?: string
-}
-
-/**
- * Information about an accessible Jira site.
- *
- * @category Types
- */
-export interface AccessibleSite {
-  readonly id: string
-  readonly name: string
-  readonly url: string
-}
+export type { AccessibleSite, LoginOptions } from "@knpkv/atlassian-common/cli-auth"
 
 /**
- * JiraAuth service interface.
+ * JiraAuth service interface: the shared Atlassian CLI auth, failing with Jira's own
+ * {@link AuthMissingError} when nobody is logged in.
  *
  * @category Services
  */
-export interface JiraAuthService {
-  /** Configure OAuth client credentials */
-  readonly configure: (
-    config: OAuthConfig
-  ) => Effect.Effect<void, FileSystemError | HomeDirectoryError | PlatformError.PlatformError>
-  /** Check if OAuth is configured */
-  readonly isConfigured: () => Effect.Effect<
-    boolean,
-    FileSystemError | HomeDirectoryError | PlatformError.PlatformError
-  >
-  /** Start OAuth login flow. Returns list of sites if multiple are available. */
-  readonly login: (
-    options?: LoginOptions
-  ) => Effect.Effect<
-    ReadonlyArray<AccessibleSite> | void,
-    OAuthError | FileSystemError | HomeDirectoryError | PlatformError.PlatformError
-  >
-  /** Remove stored authentication */
-  readonly logout: () => Effect.Effect<
-    void,
-    OAuthError | FileSystemError | HomeDirectoryError | PlatformError.PlatformError
-  >
-  /** Get access token, refreshing if needed */
-  readonly getAccessToken: () => Effect.Effect<
-    Redacted.Redacted<string>,
-    AuthMissingError | OAuthError | FileSystemError | HomeDirectoryError | PlatformError.PlatformError
-  >
-  /** Get cloud ID from stored token */
-  readonly getCloudId: () => Effect.Effect<
-    string,
-    AuthMissingError | FileSystemError | HomeDirectoryError | PlatformError.PlatformError
-  >
-  /** Get site URL from stored token */
-  readonly getSiteUrl: () => Effect.Effect<
-    string,
-    AuthMissingError | FileSystemError | HomeDirectoryError | PlatformError.PlatformError
-  >
-  /** Get current user info from stored token */
-  readonly getCurrentUser: () => Effect.Effect<
-    OAuthUser | null,
-    FileSystemError | HomeDirectoryError | PlatformError.PlatformError
-  >
-  /** Get active auth profile */
-  readonly getActiveProfile: () => Effect.Effect<
-    AuthProfile | null,
-    FileSystemError | HomeDirectoryError | PlatformError.PlatformError
-  >
-  /** List stored auth profiles */
-  readonly listProfiles: () => Effect.Effect<
-    ReadonlyArray<AuthProfile>,
-    FileSystemError | HomeDirectoryError | PlatformError.PlatformError
-  >
-  /** Switch active profile by ID, name, site URL, cloud ID, or account ID */
-  readonly switchProfile: (
-    selector: string
-  ) => Effect.Effect<AuthProfile | null, FileSystemError | HomeDirectoryError | PlatformError.PlatformError>
-  /** Remove stored profile by ID, name, site URL, cloud ID, or account ID */
-  readonly removeProfile: (
-    selector: string
-  ) => Effect.Effect<AuthProfile | null, FileSystemError | HomeDirectoryError | PlatformError.PlatformError>
-  /** Check if user is logged in */
-  readonly isLoggedIn: () => Effect.Effect<boolean, FileSystemError | HomeDirectoryError | PlatformError.PlatformError>
-}
+export interface JiraAuthService extends AtlassianCliAuth<AuthMissingError> {}
 
 /**
  * JiraAuth service tag.
@@ -165,6 +79,13 @@ export class JiraAuth extends Context.Service<
   JiraAuthService
 >()("@knpkv/jira-cli/JiraAuth") {}
 
+/** Who the Jira CLI is: shared by its auth and its `auth` commands, so both name the same scopes. */
+export const jiraCliDescriptor: AtlassianCliDescriptor = {
+  commandName: "jira",
+  productName: "Jira",
+  scopes: JIRA_CLI_SCOPES
+}
+
 /**
  * Layer for JiraAuth service.
  *
@@ -173,10 +94,8 @@ export class JiraAuth extends Context.Service<
 export const layer = Layer.effect(
   JiraAuth,
   makeAtlassianCliAuth({
+    ...jiraCliDescriptor,
     toolName: "jira-cli",
-    commandName: "jira",
-    productName: "Jira",
-    scopes: JIRA_CLI_SCOPES,
     authMissing
   })
 ).pipe(Layer.provide(NodeCliAuthLive))

package/src/commands/auth.ts

@@ -1,172 +1,9 @@
 /**
- * Auth subcommands: create, configure, login, logout, status.
- *
- * **Mental model**
- *
- * - Each command is a standalone `Command.make` that yields into `JiraAuth` service methods.
- * - `create` opens the Atlassian Developer Console; `configure` prompts for client ID/secret.
+ * `jira auth`: the shared Atlassian auth commands over {@link JiraAuth}.
  *
  * @internal
  */
-import { openBrowser } from "@knpkv/atlassian-common/cli-auth"
-import { Argument as Args, Command, Flag as Options, Prompt } from "effect/cli"
-import * as Console from "effect/Console"
-import * as Effect from "effect/Effect"
-import * as Option from "effect/Option"
-import { JiraAuth } from "../JiraAuth.js"
-
-// === Auth create command ===
-const createCommand = Command.make("create", {}, () =>
-  Effect.gen(function*() {
-    yield* Console.log(`
-Creating OAuth app in Atlassian Developer Console...
-
-1. Browser will open to create a new OAuth 2.0 (3LO) app
-2. Enter app name (e.g., "Jira CLI")
-3. After creation, go to "Permissions" and add:
-
-   Jira API:
-   - read:jira-work    Search and read issues, comments, attachments
-   - read:jira-user    Read user info for assignee/reporter fields
-
-   User Identity API:
-   - read:me           Get your account ID and email for auth
-
-4. Go to "Authorization" and set callback URL:
-   http://localhost:8585/callback
-5. Go to "Settings" and copy Client ID and Secret
-6. Run: jira auth configure --client-id <ID> --client-secret <SECRET>
-`)
-    const url = "https://developer.atlassian.com/console/myapps/create-3lo-app/"
-    yield* openBrowser(url).pipe(Effect.catch(() => Effect.void))
-  })).pipe(Command.withDescription("Create OAuth app in Atlassian Developer Console"))
-
-// === Auth configure command ===
-const clientIdOption = Options.String("client-id").pipe(
-  Options.withDescription("OAuth client ID from Atlassian Developer Console"),
-  Options.optional
-)
-const clientSecretOption = Options.String("client-secret").pipe(
-  Options.withDescription("OAuth client secret"),
-  Options.optional
-)
-
-const configureCommand = Command.make(
-  "configure",
-  { clientId: clientIdOption, clientSecret: clientSecretOption },
-  ({ clientId, clientSecret }) =>
-    Effect.gen(function*() {
-      const auth = yield* JiraAuth
-
-      const rawClientId = Option.isSome(clientId)
-        ? clientId.value
-        : yield* Prompt.String({ message: "Enter OAuth client ID:" })
-      const rawClientSecret = Option.isSome(clientSecret)
-        ? clientSecret.value
-        : yield* Prompt.String({ message: "Enter OAuth client secret:" })
-
-      yield* auth.configure({ clientId: rawClientId, clientSecret: rawClientSecret })
-      yield* Console.log("OAuth configured. Run 'jira auth login' to authenticate.")
-    })
-).pipe(Command.withDescription("Configure OAuth client credentials"))
-
-// === Auth login command ===
-const siteOption = Options.String("site").pipe(
-  Options.withDescription("Jira site URL to use (for accounts with multiple sites)"),
-  Options.optional
-)
-
-const loginCommand = Command.make("login", { site: siteOption }, ({ site }) =>
-  Effect.gen(function*() {
-    const auth = yield* JiraAuth
-    const result = yield* auth.login(Option.isSome(site) ? { siteUrl: site.value } : undefined)
-    if (Array.isArray(result) && result.length > 0) {
-      yield* Console.log("\nRe-run with --site to select a specific site.")
-    }
-  })).pipe(Command.withDescription("Authenticate with Atlassian via OAuth"))
-
-// === Auth logout command ===
-const logoutCommand = Command.make("logout", {}, () =>
-  Effect.gen(function*() {
-    const auth = yield* JiraAuth
-    yield* auth.logout()
-    yield* Console.log("Logged out")
-  })).pipe(Command.withDescription("Remove stored authentication"))
-
-// === Auth status command ===
-const statusCommand = Command.make("status", {}, () =>
-  Effect.gen(function*() {
-    const auth = yield* JiraAuth
-    const profile = yield* auth.getActiveProfile()
-    if (profile) {
-      const user = profile.token.user
-      const account = user ? `${user.name} (${user.email})` : "unknown user"
-      yield* Console.log(`Active profile: ${profile.name}`)
-      yield* Console.log(`Account: ${account}`)
-      yield* Console.log(`Site: ${profile.token.site_url}`)
-      yield* Console.log(`Profile ID: ${profile.id}`)
-    } else {
-      yield* Console.log("Not logged in. Use 'jira auth login' to authenticate.")
-    }
-  })).pipe(Command.withDescription("Show authentication status"))
-
-// === Auth profiles command ===
-const profilesCommand = Command.make("profiles", {}, () =>
-  Effect.gen(function*() {
-    const auth = yield* JiraAuth
-    const [profiles, active] = yield* Effect.all([auth.listProfiles(), auth.getActiveProfile()])
-    if (profiles.length === 0) {
-      yield* Console.log("No auth profiles. Use 'jira auth login' to authenticate.")
-      return
-    }
-
-    for (const profile of profiles) {
-      const marker = active?.id === profile.id ? "*" : " "
-      yield* Console.log(`${marker} ${profile.id}`)
-      yield* Console.log(`    ${profile.name}`)
-      yield* Console.log(`    ${profile.token.site_url}`)
-    }
-  })).pipe(Command.withDescription("List stored auth profiles"))
-
-const profileArg = Args.String("profile").pipe(
-  Args.withDescription("Profile ID, name, site URL, cloud ID, or account ID")
-)
-
-// === Auth use command ===
-const useCommand = Command.make("use", { profile: profileArg }, ({ profile }) =>
-  Effect.gen(function*() {
-    const auth = yield* JiraAuth
-    const selected = yield* auth.switchProfile(profile)
-    if (!selected) {
-      yield* Console.log(`Profile not found: ${profile}`)
-      return
-    }
-    yield* Console.log(`Active profile: ${selected.name}`)
-  })).pipe(Command.withDescription("Switch active auth profile"))
-
-// === Auth remove command ===
-const removeCommand = Command.make("remove", { profile: profileArg }, ({ profile }) =>
-  Effect.gen(function*() {
-    const auth = yield* JiraAuth
-    const removed = yield* auth.removeProfile(profile)
-    if (!removed) {
-      yield* Console.log(`Profile not found: ${profile}`)
-      return
-    }
-    yield* Console.log(`Removed profile: ${removed.name}`)
-  })).pipe(Command.withDescription("Remove stored auth profile"))
+import { makeAuthCommand } from "@knpkv/atlassian-common/cli-auth"
+import { JiraAuth, jiraCliDescriptor } from "../JiraAuth.js"
 
-// === Auth command group ===
-export const authCommand = Command.make("auth").pipe(
-  Command.withDescription("Manage OAuth authentication"),
-  Command.withSubcommands([
-    createCommand,
-    configureCommand,
-    loginCommand,
-    logoutCommand,
-    statusCommand,
-    profilesCommand,
-    useCommand,
-    removeCommand
-  ])
-)
+export const authCommand = makeAuthCommand(JiraAuth, jiraCliDescriptor, { apiSection: "Jira API" })

package/test/authCommand.test.ts

@@ -0,0 +1,54 @@
+/** @effect-diagnostics strictEffectProvide:skip-file */
+/**
+ * `jira auth create` must list every scope `jira auth login` requests: Atlassian rejects an
+ * authorization request naming a scope the app lacks, so a shorter list is a setup that cannot log in.
+ */
+import { NodeServices } from "@effect/platform-node"
+import { expect, it } from "@effect/vitest"
+import { Command } from "effect/cli"
+import * as Console from "effect/Console"
+import * as Effect from "effect/Effect"
+import { FetchHttpClient } from "effect/http"
+import * as Layer from "effect/Layer"
+import { ChildProcessSpawner } from "effect/process"
+import * as Sink from "effect/Sink"
+import * as Stream from "effect/Stream"
+import { authCommand } from "../src/commands/auth.js"
+import { jiraCliDescriptor, layer } from "../src/JiraAuth.js"
+
+const browserOpens = ChildProcessSpawner.make(() =>
+  Effect.succeed(ChildProcessSpawner.makeHandle({
+    all: Stream.empty,
+    exitCode: Effect.succeed(ChildProcessSpawner.ExitCode(0)),
+    getInputFd: () => Sink.drain,
+    getOutputFd: () => Stream.empty,
+    isRunning: Effect.succeed(false),
+    kill: () => Effect.void,
+    pid: ChildProcessSpawner.ProcessId(1),
+    reref: Effect.void,
+    stderr: Stream.empty,
+    stdin: Sink.drain,
+    stdout: Stream.empty,
+    unref: Effect.succeed(Effect.void)
+  }))
+)
+
+it.effect("auth create lists every scope JiraAuth logs in with", () =>
+  Effect.gen(function*() {
+    const lines: Array<string> = []
+    const capture: Console.Console = Object.assign(Object.create(console), {
+      log: (...parts: ReadonlyArray<unknown>) => lines.push(parts.join(" "))
+    })
+    const cli = Command.runWith(Command.make("jira").pipe(Command.withSubcommands([authCommand])), { version: "0" })
+    const exit = yield* cli(["auth", "create"]).pipe(Effect.provideService(Console.Console, capture), Effect.exit)
+    expect(exit._tag).toBe("Success")
+    const output = lines.join("\n")
+    const permissions = jiraCliDescriptor.scopes.filter((scope) => scope !== "offline_access")
+    expect(permissions.length).toBeGreaterThan(2)
+    for (const scope of permissions) expect(output).toContain(scope)
+    expect(output).toContain("jira auth configure")
+  }).pipe(
+    // The command's browser launch sees the fake; the auth layer is built over real platform services.
+    Effect.provideService(ChildProcessSpawner.ChildProcessSpawner, browserOpens),
+    Effect.provide(layer.pipe(Layer.provideMerge(Layer.mergeAll(FetchHttpClient.layer, NodeServices.layer))))
+  ))