@shipfox/api-integration-jira 4.0.0 → 5.0.0

package/.turbo/turbo-build.log

@@ -1,2 +1,2 @@
 $ shipfox-swc
-Successfully compiled: 9 files with swc (49.37ms)
+Successfully compiled: 20 files with swc (321.85ms)

package/CHANGELOG.md

@@ -1,5 +1,26 @@
 # @shipfox/api-integration-jira
 
+## 5.0.0
+
+### Patch Changes
+
+- bb037af: Resolves workspace packages from source during development while published consumers continue to use compiled output.
+- 43d8e66: Adds Jira OAuth connection support with site selection and rotating access tokens.
+- Updated dependencies [2875241]
+- Updated dependencies [bb037af]
+- Updated dependencies [43d8e66]
+- Updated dependencies [fb70438]
+  - @shipfox/api-integration-core-dto@5.0.0
+  - @shipfox/api-auth-context@5.0.0
+  - @shipfox/api-integration-jira-dto@5.0.0
+  - @shipfox/api-secrets@5.0.0
+  - @shipfox/api-workspaces@5.0.0
+  - @shipfox/config@1.2.2
+  - @shipfox/node-drizzle@0.3.1
+  - @shipfox/node-fastify@0.2.3
+  - @shipfox/node-opentelemetry@0.5.2
+  - @shipfox/node-postgres@0.4.2
+
 ## 4.0.0
 
 ### Patch Changes

package/dist/api/client.d.ts

@@ -0,0 +1,33 @@
+export interface JiraAuthorization {
+    accessToken: string;
+    refreshToken?: string | undefined;
+    expiresAt?: Date | undefined;
+    scopes: string[];
+}
+export interface JiraAccessibleResource {
+    cloudId: string;
+    name: string;
+    url: string;
+    scopes: string[];
+}
+export interface JiraIdentity {
+    accountId: string;
+}
+export interface JiraApiClient {
+    exchangeAuthorizationCode(input: {
+        code: string;
+    }): Promise<JiraAuthorization>;
+    refreshAccessToken(input: {
+        refreshToken: string;
+    }): Promise<JiraAuthorization>;
+    getAccessibleResources(input: {
+        accessToken: string;
+    }): Promise<JiraAccessibleResource[]>;
+    getMyself(input: {
+        accessToken: string;
+        cloudId: string;
+    }): Promise<JiraIdentity>;
+}
+export declare function createJiraApiClient(): JiraApiClient;
+export declare function mapJiraError<T>(operation: string, request: () => Promise<T>): Promise<T>;
+//# sourceMappingURL=client.d.ts.map

package/dist/api/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/api/client.ts"],"names":[],"mappings":"AAQA,MAAM,WAAW,iBAAiB;IAChC,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC,SAAS,CAAC,EAAE,IAAI,GAAG,SAAS,CAAC;IAC7B,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAED,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAED,MAAM,WAAW,YAAY;IAC3B,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,aAAa;IAC5B,yBAAyB,CAAC,KAAK,EAAE;QAAC,IAAI,EAAE,MAAM,CAAA;KAAC,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAC7E,kBAAkB,CAAC,KAAK,EAAE;QAAC,YAAY,EAAE,MAAM,CAAA;KAAC,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAC9E,sBAAsB,CAAC,KAAK,EAAE;QAAC,WAAW,EAAE,MAAM,CAAA;KAAC,GAAG,OAAO,CAAC,sBAAsB,EAAE,CAAC,CAAC;IACxF,SAAS,CAAC,KAAK,EAAE;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAC,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;CACjF;AAoBD,wBAAgB,mBAAmB,IAAI,aAAa,CAmEnD;AAmDD,wBAAsB,YAAY,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAgC9F"}

package/dist/api/client.js

@@ -0,0 +1,143 @@
+import { logger } from '@shipfox/node-opentelemetry';
+import ky, { HTTPError, TimeoutError } from 'ky';
+import { config } from '#config.js';
+import { JiraIntegrationProviderError } from '#core/errors.js';
+const JIRA_API_TIMEOUT_MS = 10_000;
+const SCOPE_SEPARATOR_RE = /[,\s]+/;
+export function createJiraApiClient() {
+    return {
+        async exchangeAuthorizationCode (input) {
+            const body = await mapJiraError('exchange-authorization-code', ()=>ky.post(`${config.JIRA_AUTH_BASE_URL}/oauth/token`, {
+                    body: new URLSearchParams({
+                        grant_type: 'authorization_code',
+                        client_id: config.JIRA_OAUTH_CLIENT_ID,
+                        client_secret: config.JIRA_OAUTH_CLIENT_SECRET,
+                        code: input.code,
+                        redirect_uri: config.JIRA_OAUTH_REDIRECT_URL
+                    }),
+                    timeout: JIRA_API_TIMEOUT_MS
+                }).json());
+            return parseAuthorization(body);
+        },
+        async refreshAccessToken (input) {
+            const body = await mapJiraError('refresh-access-token', ()=>ky.post(`${config.JIRA_AUTH_BASE_URL}/oauth/token`, {
+                    body: new URLSearchParams({
+                        grant_type: 'refresh_token',
+                        client_id: config.JIRA_OAUTH_CLIENT_ID,
+                        client_secret: config.JIRA_OAUTH_CLIENT_SECRET,
+                        refresh_token: input.refreshToken
+                    }),
+                    timeout: JIRA_API_TIMEOUT_MS
+                }).json());
+            return parseAuthorization(body);
+        },
+        async getAccessibleResources (input) {
+            const body = await mapJiraError('get-accessible-resources', ()=>ky.get(`${config.JIRA_API_BASE_URL}/oauth/token/accessible-resources`, {
+                    headers: {
+                        authorization: `Bearer ${input.accessToken}`
+                    },
+                    timeout: JIRA_API_TIMEOUT_MS
+                }).json());
+            if (!Array.isArray(body)) {
+                throw malformed('Jira accessible-resources response was not an array');
+            }
+            return body.map(parseAccessibleResource);
+        },
+        async getMyself (input) {
+            const body = await mapJiraError('get-myself', ()=>ky.get(`${config.JIRA_API_BASE_URL}/ex/jira/${input.cloudId}/rest/api/3/myself`, {
+                    headers: {
+                        authorization: `Bearer ${input.accessToken}`
+                    },
+                    timeout: JIRA_API_TIMEOUT_MS
+                }).json());
+            if (typeof body.accountId !== 'string' || body.accountId.length === 0) {
+                throw malformed('Jira identity response did not include an accountId');
+            }
+            return {
+                accountId: body.accountId
+            };
+        }
+    };
+}
+function parseAuthorization(body) {
+    if (typeof body.access_token !== 'string' || body.access_token.length === 0) {
+        throw malformed('Jira authorization response did not include an access token');
+    }
+    return {
+        accessToken: body.access_token,
+        refreshToken: typeof body.refresh_token === 'string' ? body.refresh_token : undefined,
+        expiresAt: parseExpiresAt(body.expires_in),
+        scopes: parseScopes(body.scope)
+    };
+}
+function parseAccessibleResource(value) {
+    if (!value || typeof value !== 'object') throw malformed('Jira site response was malformed');
+    const { id, name, url, scopes } = value;
+    if (typeof id !== 'string' || id.length === 0 || typeof name !== 'string' || name.length === 0 || typeof url !== 'string' || url.length === 0 || !Array.isArray(scopes) || !scopes.every((scope)=>typeof scope === 'string')) {
+        throw malformed('Jira site response did not include a valid cloud id, name, URL, and scopes');
+    }
+    return {
+        cloudId: id,
+        name,
+        url,
+        scopes
+    };
+}
+function parseScopes(scope) {
+    if (typeof scope === 'string') return scope.split(SCOPE_SEPARATOR_RE).map((value)=>value.trim()).filter(Boolean);
+    if (Array.isArray(scope) && scope.every((value)=>typeof value === 'string')) return scope;
+    if (scope === undefined) return [];
+    throw malformed('Jira authorization response included malformed scopes');
+}
+function parseExpiresAt(expiresIn) {
+    if (expiresIn === undefined) return undefined;
+    if (typeof expiresIn !== 'number' || !Number.isFinite(expiresIn) || expiresIn <= 0) {
+        throw malformed('Jira authorization response included a malformed expiry');
+    }
+    return new Date(Date.now() + expiresIn * 1000);
+}
+export async function mapJiraError(operation, request) {
+    try {
+        return await request();
+    } catch (error) {
+        if (error instanceof JiraIntegrationProviderError) throw error;
+        if (error instanceof HTTPError) {
+            const { status, statusText, headers } = error.response;
+            logger().warn({
+                operation,
+                status,
+                statusText
+            }, 'Jira API request rejected');
+            if (status === 429) {
+                throw new JiraIntegrationProviderError('rate-limited', 'Jira request was rate limited', retryAfterSeconds(headers));
+            }
+            if (status >= 500) throw new JiraIntegrationProviderError('provider-unavailable', 'Jira request failed');
+            if (status === 401 || status === 403) {
+                throw new JiraIntegrationProviderError('access-denied', 'Jira request was rejected');
+            }
+            throw malformed('Jira request was rejected');
+        }
+        if (error instanceof TimeoutError) {
+            logger().warn({
+                operation
+            }, 'Jira API request timed out');
+            throw new JiraIntegrationProviderError('timeout', 'Jira request timed out');
+        }
+        logger().warn({
+            operation,
+            errName: error instanceof Error ? error.name : typeof error
+        }, 'Jira API request failed');
+        throw new JiraIntegrationProviderError('provider-unavailable', 'Jira request failed');
+    }
+}
+function malformed(message) {
+    return new JiraIntegrationProviderError('malformed-provider-response', message);
+}
+function retryAfterSeconds(headers) {
+    const value = headers.get('retry-after');
+    if (!value) return undefined;
+    const parsed = Number.parseInt(value, 10);
+    return Number.isNaN(parsed) ? undefined : parsed;
+}
+
+//# sourceMappingURL=client.js.map

package/dist/api/client.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/api/client.ts"],"sourcesContent":["import {logger} from '@shipfox/node-opentelemetry';\nimport ky, {HTTPError, TimeoutError} from 'ky';\nimport {config} from '#config.js';\nimport {JiraIntegrationProviderError} from '#core/errors.js';\n\nconst JIRA_API_TIMEOUT_MS = 10_000;\nconst SCOPE_SEPARATOR_RE = /[,\\s]+/;\n\nexport interface JiraAuthorization {\n  accessToken: string;\n  refreshToken?: string | undefined;\n  expiresAt?: Date | undefined;\n  scopes: string[];\n}\n\nexport interface JiraAccessibleResource {\n  cloudId: string;\n  name: string;\n  url: string;\n  scopes: string[];\n}\n\nexport interface JiraIdentity {\n  accountId: string;\n}\n\nexport interface JiraApiClient {\n  exchangeAuthorizationCode(input: {code: string}): Promise<JiraAuthorization>;\n  refreshAccessToken(input: {refreshToken: string}): Promise<JiraAuthorization>;\n  getAccessibleResources(input: {accessToken: string}): Promise<JiraAccessibleResource[]>;\n  getMyself(input: {accessToken: string; cloudId: string}): Promise<JiraIdentity>;\n}\n\ninterface JiraTokenResponse {\n  access_token?: unknown;\n  refresh_token?: unknown;\n  expires_in?: unknown;\n  scope?: unknown;\n}\n\ninterface JiraResourceResponse {\n  id?: unknown;\n  name?: unknown;\n  url?: unknown;\n  scopes?: unknown;\n}\n\ninterface JiraMyselfResponse {\n  accountId?: unknown;\n}\n\nexport function createJiraApiClient(): JiraApiClient {\n  return {\n    async exchangeAuthorizationCode(input) {\n      const body = await mapJiraError('exchange-authorization-code', () =>\n        ky\n          .post(`${config.JIRA_AUTH_BASE_URL}/oauth/token`, {\n            body: new URLSearchParams({\n              grant_type: 'authorization_code',\n              client_id: config.JIRA_OAUTH_CLIENT_ID,\n              client_secret: config.JIRA_OAUTH_CLIENT_SECRET,\n              code: input.code,\n              redirect_uri: config.JIRA_OAUTH_REDIRECT_URL,\n            }),\n            timeout: JIRA_API_TIMEOUT_MS,\n          })\n          .json<JiraTokenResponse>(),\n      );\n      return parseAuthorization(body);\n    },\n\n    async refreshAccessToken(input) {\n      const body = await mapJiraError('refresh-access-token', () =>\n        ky\n          .post(`${config.JIRA_AUTH_BASE_URL}/oauth/token`, {\n            body: new URLSearchParams({\n              grant_type: 'refresh_token',\n              client_id: config.JIRA_OAUTH_CLIENT_ID,\n              client_secret: config.JIRA_OAUTH_CLIENT_SECRET,\n              refresh_token: input.refreshToken,\n            }),\n            timeout: JIRA_API_TIMEOUT_MS,\n          })\n          .json<JiraTokenResponse>(),\n      );\n      return parseAuthorization(body);\n    },\n\n    async getAccessibleResources(input) {\n      const body = await mapJiraError('get-accessible-resources', () =>\n        ky\n          .get(`${config.JIRA_API_BASE_URL}/oauth/token/accessible-resources`, {\n            headers: {authorization: `Bearer ${input.accessToken}`},\n            timeout: JIRA_API_TIMEOUT_MS,\n          })\n          .json<unknown>(),\n      );\n      if (!Array.isArray(body)) {\n        throw malformed('Jira accessible-resources response was not an array');\n      }\n      return body.map(parseAccessibleResource);\n    },\n\n    async getMyself(input) {\n      const body = await mapJiraError('get-myself', () =>\n        ky\n          .get(`${config.JIRA_API_BASE_URL}/ex/jira/${input.cloudId}/rest/api/3/myself`, {\n            headers: {authorization: `Bearer ${input.accessToken}`},\n            timeout: JIRA_API_TIMEOUT_MS,\n          })\n          .json<JiraMyselfResponse>(),\n      );\n      if (typeof body.accountId !== 'string' || body.accountId.length === 0) {\n        throw malformed('Jira identity response did not include an accountId');\n      }\n      return {accountId: body.accountId};\n    },\n  };\n}\n\nfunction parseAuthorization(body: JiraTokenResponse): JiraAuthorization {\n  if (typeof body.access_token !== 'string' || body.access_token.length === 0) {\n    throw malformed('Jira authorization response did not include an access token');\n  }\n  return {\n    accessToken: body.access_token,\n    refreshToken: typeof body.refresh_token === 'string' ? body.refresh_token : undefined,\n    expiresAt: parseExpiresAt(body.expires_in),\n    scopes: parseScopes(body.scope),\n  };\n}\n\nfunction parseAccessibleResource(value: unknown): JiraAccessibleResource {\n  if (!value || typeof value !== 'object') throw malformed('Jira site response was malformed');\n  const {id, name, url, scopes} = value as JiraResourceResponse;\n  if (\n    typeof id !== 'string' ||\n    id.length === 0 ||\n    typeof name !== 'string' ||\n    name.length === 0 ||\n    typeof url !== 'string' ||\n    url.length === 0 ||\n    !Array.isArray(scopes) ||\n    !scopes.every((scope) => typeof scope === 'string')\n  ) {\n    throw malformed('Jira site response did not include a valid cloud id, name, URL, and scopes');\n  }\n  return {cloudId: id, name, url, scopes};\n}\n\nfunction parseScopes(scope: unknown): string[] {\n  if (typeof scope === 'string')\n    return scope\n      .split(SCOPE_SEPARATOR_RE)\n      .map((value) => value.trim())\n      .filter(Boolean);\n  if (Array.isArray(scope) && scope.every((value) => typeof value === 'string')) return scope;\n  if (scope === undefined) return [];\n  throw malformed('Jira authorization response included malformed scopes');\n}\n\nfunction parseExpiresAt(expiresIn: unknown): Date | undefined {\n  if (expiresIn === undefined) return undefined;\n  if (typeof expiresIn !== 'number' || !Number.isFinite(expiresIn) || expiresIn <= 0) {\n    throw malformed('Jira authorization response included a malformed expiry');\n  }\n  return new Date(Date.now() + expiresIn * 1000);\n}\n\nexport async function mapJiraError<T>(operation: string, request: () => Promise<T>): Promise<T> {\n  try {\n    return await request();\n  } catch (error) {\n    if (error instanceof JiraIntegrationProviderError) throw error;\n    if (error instanceof HTTPError) {\n      const {status, statusText, headers} = error.response;\n      logger().warn({operation, status, statusText}, 'Jira API request rejected');\n      if (status === 429) {\n        throw new JiraIntegrationProviderError(\n          'rate-limited',\n          'Jira request was rate limited',\n          retryAfterSeconds(headers),\n        );\n      }\n      if (status >= 500)\n        throw new JiraIntegrationProviderError('provider-unavailable', 'Jira request failed');\n      if (status === 401 || status === 403) {\n        throw new JiraIntegrationProviderError('access-denied', 'Jira request was rejected');\n      }\n      throw malformed('Jira request was rejected');\n    }\n    if (error instanceof TimeoutError) {\n      logger().warn({operation}, 'Jira API request timed out');\n      throw new JiraIntegrationProviderError('timeout', 'Jira request timed out');\n    }\n    logger().warn(\n      {operation, errName: error instanceof Error ? error.name : typeof error},\n      'Jira API request failed',\n    );\n    throw new JiraIntegrationProviderError('provider-unavailable', 'Jira request failed');\n  }\n}\n\nfunction malformed(message: string): JiraIntegrationProviderError {\n  return new JiraIntegrationProviderError('malformed-provider-response', message);\n}\n\nfunction retryAfterSeconds(headers: Headers): number | undefined {\n  const value = headers.get('retry-after');\n  if (!value) return undefined;\n  const parsed = Number.parseInt(value, 10);\n  return Number.isNaN(parsed) ? undefined : parsed;\n}\n"],"names":["logger","ky","HTTPError","TimeoutError","config","JiraIntegrationProviderError","JIRA_API_TIMEOUT_MS","SCOPE_SEPARATOR_RE","createJiraApiClient","exchangeAuthorizationCode","input","body","mapJiraError","post","JIRA_AUTH_BASE_URL","URLSearchParams","grant_type","client_id","JIRA_OAUTH_CLIENT_ID","client_secret","JIRA_OAUTH_CLIENT_SECRET","code","redirect_uri","JIRA_OAUTH_REDIRECT_URL","timeout","json","parseAuthorization","refreshAccessToken","refresh_token","refreshToken","getAccessibleResources","get","JIRA_API_BASE_URL","headers","authorization","accessToken","Array","isArray","malformed","map","parseAccessibleResource","getMyself","cloudId","accountId","length","access_token","undefined","expiresAt","parseExpiresAt","expires_in","scopes","parseScopes","scope","value","id","name","url","every","split","trim","filter","Boolean","expiresIn","Number","isFinite","Date","now","operation","request","error","status","statusText","response","warn","retryAfterSeconds","errName","Error","message","parsed","parseInt","isNaN"],"mappings":"AAAA,SAAQA,MAAM,QAAO,8BAA8B;AACnD,OAAOC,MAAKC,SAAS,EAAEC,YAAY,QAAO,KAAK;AAC/C,SAAQC,MAAM,QAAO,aAAa;AAClC,SAAQC,4BAA4B,QAAO,kBAAkB;AAE7D,MAAMC,sBAAsB;AAC5B,MAAMC,qBAAqB;AA6C3B,OAAO,SAASC;IACd,OAAO;QACL,MAAMC,2BAA0BC,KAAK;YACnC,MAAMC,OAAO,MAAMC,aAAa,+BAA+B,IAC7DX,GACGY,IAAI,CAAC,GAAGT,OAAOU,kBAAkB,CAAC,YAAY,CAAC,EAAE;oBAChDH,MAAM,IAAII,gBAAgB;wBACxBC,YAAY;wBACZC,WAAWb,OAAOc,oBAAoB;wBACtCC,eAAef,OAAOgB,wBAAwB;wBAC9CC,MAAMX,MAAMW,IAAI;wBAChBC,cAAclB,OAAOmB,uBAAuB;oBAC9C;oBACAC,SAASlB;gBACX,GACCmB,IAAI;YAET,OAAOC,mBAAmBf;QAC5B;QAEA,MAAMgB,oBAAmBjB,KAAK;YAC5B,MAAMC,OAAO,MAAMC,aAAa,wBAAwB,IACtDX,GACGY,IAAI,CAAC,GAAGT,OAAOU,kBAAkB,CAAC,YAAY,CAAC,EAAE;oBAChDH,MAAM,IAAII,gBAAgB;wBACxBC,YAAY;wBACZC,WAAWb,OAAOc,oBAAoB;wBACtCC,eAAef,OAAOgB,wBAAwB;wBAC9CQ,eAAelB,MAAMmB,YAAY;oBACnC;oBACAL,SAASlB;gBACX,GACCmB,IAAI;YAET,OAAOC,mBAAmBf;QAC5B;QAEA,MAAMmB,wBAAuBpB,KAAK;YAChC,MAAMC,OAAO,MAAMC,aAAa,4BAA4B,IAC1DX,GACG8B,GAAG,CAAC,GAAG3B,OAAO4B,iBAAiB,CAAC,iCAAiC,CAAC,EAAE;oBACnEC,SAAS;wBAACC,eAAe,CAAC,OAAO,EAAExB,MAAMyB,WAAW,EAAE;oBAAA;oBACtDX,SAASlB;gBACX,GACCmB,IAAI;YAET,IAAI,CAACW,MAAMC,OAAO,CAAC1B,OAAO;gBACxB,MAAM2B,UAAU;YAClB;YACA,OAAO3B,KAAK4B,GAAG,CAACC;QAClB;QAEA,MAAMC,WAAU/B,KAAK;YACnB,MAAMC,OAAO,MAAMC,aAAa,cAAc,IAC5CX,GACG8B,GAAG,CAAC,GAAG3B,OAAO4B,iBAAiB,CAAC,SAAS,EAAEtB,MAAMgC,OAAO,CAAC,kBAAkB,CAAC,EAAE;oBAC7ET,SAAS;wBAACC,eAAe,CAAC,OAAO,EAAExB,MAAMyB,WAAW,EAAE;oBAAA;oBACtDX,SAASlB;gBACX,GACCmB,IAAI;YAET,IAAI,OAAOd,KAAKgC,SAAS,KAAK,YAAYhC,KAAKgC,SAAS,CAACC,MAAM,KAAK,GAAG;gBACrE,MAAMN,UAAU;YAClB;YACA,OAAO;gBAACK,WAAWhC,KAAKgC,SAAS;YAAA;QACnC;IACF;AACF;AAEA,SAASjB,mBAAmBf,IAAuB;IACjD,IAAI,OAAOA,KAAKkC,YAAY,KAAK,YAAYlC,KAAKkC,YAAY,CAACD,MAAM,KAAK,GAAG;QAC3E,MAAMN,UAAU;IAClB;IACA,OAAO;QACLH,aAAaxB,KAAKkC,YAAY;QAC9BhB,cAAc,OAAOlB,KAAKiB,aAAa,KAAK,WAAWjB,KAAKiB,aAAa,GAAGkB;QAC5EC,WAAWC,eAAerC,KAAKsC,UAAU;QACzCC,QAAQC,YAAYxC,KAAKyC,KAAK;IAChC;AACF;AAEA,SAASZ,wBAAwBa,KAAc;IAC7C,IAAI,CAACA,SAAS,OAAOA,UAAU,UAAU,MAAMf,UAAU;IACzD,MAAM,EAACgB,EAAE,EAAEC,IAAI,EAAEC,GAAG,EAAEN,MAAM,EAAC,GAAGG;IAChC,IACE,OAAOC,OAAO,YACdA,GAAGV,MAAM,KAAK,KACd,OAAOW,SAAS,YAChBA,KAAKX,MAAM,KAAK,KAChB,OAAOY,QAAQ,YACfA,IAAIZ,MAAM,KAAK,KACf,CAACR,MAAMC,OAAO,CAACa,WACf,CAACA,OAAOO,KAAK,CAAC,CAACL,QAAU,OAAOA,UAAU,WAC1C;QACA,MAAMd,UAAU;IAClB;IACA,OAAO;QAACI,SAASY;QAAIC;QAAMC;QAAKN;IAAM;AACxC;AAEA,SAASC,YAAYC,KAAc;IACjC,IAAI,OAAOA,UAAU,UACnB,OAAOA,MACJM,KAAK,CAACnD,oBACNgC,GAAG,CAAC,CAACc,QAAUA,MAAMM,IAAI,IACzBC,MAAM,CAACC;IACZ,IAAIzB,MAAMC,OAAO,CAACe,UAAUA,MAAMK,KAAK,CAAC,CAACJ,QAAU,OAAOA,UAAU,WAAW,OAAOD;IACtF,IAAIA,UAAUN,WAAW,OAAO,EAAE;IAClC,MAAMR,UAAU;AAClB;AAEA,SAASU,eAAec,SAAkB;IACxC,IAAIA,cAAchB,WAAW,OAAOA;IACpC,IAAI,OAAOgB,cAAc,YAAY,CAACC,OAAOC,QAAQ,CAACF,cAAcA,aAAa,GAAG;QAClF,MAAMxB,UAAU;IAClB;IACA,OAAO,IAAI2B,KAAKA,KAAKC,GAAG,KAAKJ,YAAY;AAC3C;AAEA,OAAO,eAAelD,aAAgBuD,SAAiB,EAAEC,OAAyB;IAChF,IAAI;QACF,OAAO,MAAMA;IACf,EAAE,OAAOC,OAAO;QACd,IAAIA,iBAAiBhE,8BAA8B,MAAMgE;QACzD,IAAIA,iBAAiBnE,WAAW;YAC9B,MAAM,EAACoE,MAAM,EAAEC,UAAU,EAAEtC,OAAO,EAAC,GAAGoC,MAAMG,QAAQ;YACpDxE,SAASyE,IAAI,CAAC;gBAACN;gBAAWG;gBAAQC;YAAU,GAAG;YAC/C,IAAID,WAAW,KAAK;gBAClB,MAAM,IAAIjE,6BACR,gBACA,iCACAqE,kBAAkBzC;YAEtB;YACA,IAAIqC,UAAU,KACZ,MAAM,IAAIjE,6BAA6B,wBAAwB;YACjE,IAAIiE,WAAW,OAAOA,WAAW,KAAK;gBACpC,MAAM,IAAIjE,6BAA6B,iBAAiB;YAC1D;YACA,MAAMiC,UAAU;QAClB;QACA,IAAI+B,iBAAiBlE,cAAc;YACjCH,SAASyE,IAAI,CAAC;gBAACN;YAAS,GAAG;YAC3B,MAAM,IAAI9D,6BAA6B,WAAW;QACpD;QACAL,SAASyE,IAAI,CACX;YAACN;YAAWQ,SAASN,iBAAiBO,QAAQP,MAAMd,IAAI,GAAG,OAAOc;QAAK,GACvE;QAEF,MAAM,IAAIhE,6BAA6B,wBAAwB;IACjE;AACF;AAEA,SAASiC,UAAUuC,OAAe;IAChC,OAAO,IAAIxE,6BAA6B,+BAA+BwE;AACzE;AAEA,SAASH,kBAAkBzC,OAAgB;IACzC,MAAMoB,QAAQpB,QAAQF,GAAG,CAAC;IAC1B,IAAI,CAACsB,OAAO,OAAOP;IACnB,MAAMgC,SAASf,OAAOgB,QAAQ,CAAC1B,OAAO;IACtC,OAAOU,OAAOiB,KAAK,CAACF,UAAUhC,YAAYgC;AAC5C"}

package/dist/core/disconnect.d.ts

@@ -0,0 +1,18 @@
+export interface DisconnectJiraInstallationParams<Tx = unknown> {
+    connectionId: string;
+    getConnection(connectionId: string): Promise<{
+        workspaceId: string;
+    } | undefined>;
+    deleteSecrets(params: {
+        workspaceId: string;
+        namespace: string;
+    }): Promise<number>;
+    transaction<T>(fn: (tx: Tx) => Promise<T>): Promise<T>;
+    deleteConnection(params: {
+        connectionId: string;
+    }, options: {
+        tx: Tx;
+    }): Promise<boolean>;
+}
+export declare function disconnectJiraInstallation<Tx = unknown>(params: DisconnectJiraInstallationParams<Tx>): Promise<void>;
+//# sourceMappingURL=disconnect.d.ts.map

package/dist/core/disconnect.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"disconnect.d.ts","sourceRoot":"","sources":["../../src/core/disconnect.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,gCAAgC,CAAC,EAAE,GAAG,OAAO;IAC5D,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAC,GAAG,SAAS,CAAC,CAAC;IAChF,aAAa,CAAC,MAAM,EAAE;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAC,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACjF,WAAW,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IACvD,gBAAgB,CAAC,MAAM,EAAE;QAAC,YAAY,EAAE,MAAM,CAAA;KAAC,EAAE,OAAO,EAAE;QAAC,EAAE,EAAE,EAAE,CAAA;KAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACvF;AAED,wBAAsB,0BAA0B,CAAC,EAAE,GAAG,OAAO,EAC3D,MAAM,EAAE,gCAAgC,CAAC,EAAE,CAAC,GAC3C,OAAO,CAAC,IAAI,CAAC,CAWf"}

package/dist/core/disconnect.js

@@ -0,0 +1,21 @@
+import { deleteJiraInstallationByConnectionId } from '#db/installations.js';
+import { jiraSecretsNamespace } from './tokens.js';
+export async function disconnectJiraInstallation(params) {
+    const connection = await params.getConnection(params.connectionId);
+    if (connection) await params.deleteSecrets({
+        workspaceId: connection.workspaceId,
+        namespace: jiraSecretsNamespace(params.connectionId)
+    });
+    await params.transaction(async (tx)=>{
+        await deleteJiraInstallationByConnectionId(params.connectionId, {
+            tx
+        });
+        await params.deleteConnection({
+            connectionId: params.connectionId
+        }, {
+            tx
+        });
+    });
+}
+
+//# sourceMappingURL=disconnect.js.map

package/dist/core/disconnect.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/core/disconnect.ts"],"sourcesContent":["import {deleteJiraInstallationByConnectionId} from '#db/installations.js';\nimport {jiraSecretsNamespace} from './tokens.js';\n\nexport interface DisconnectJiraInstallationParams<Tx = unknown> {\n  connectionId: string;\n  getConnection(connectionId: string): Promise<{workspaceId: string} | undefined>;\n  deleteSecrets(params: {workspaceId: string; namespace: string}): Promise<number>;\n  transaction<T>(fn: (tx: Tx) => Promise<T>): Promise<T>;\n  deleteConnection(params: {connectionId: string}, options: {tx: Tx}): Promise<boolean>;\n}\n\nexport async function disconnectJiraInstallation<Tx = unknown>(\n  params: DisconnectJiraInstallationParams<Tx>,\n): Promise<void> {\n  const connection = await params.getConnection(params.connectionId);\n  if (connection)\n    await params.deleteSecrets({\n      workspaceId: connection.workspaceId,\n      namespace: jiraSecretsNamespace(params.connectionId),\n    });\n  await params.transaction(async (tx) => {\n    await deleteJiraInstallationByConnectionId(params.connectionId, {tx});\n    await params.deleteConnection({connectionId: params.connectionId}, {tx});\n  });\n}\n"],"names":["deleteJiraInstallationByConnectionId","jiraSecretsNamespace","disconnectJiraInstallation","params","connection","getConnection","connectionId","deleteSecrets","workspaceId","namespace","transaction","tx","deleteConnection"],"mappings":"AAAA,SAAQA,oCAAoC,QAAO,uBAAuB;AAC1E,SAAQC,oBAAoB,QAAO,cAAc;AAUjD,OAAO,eAAeC,2BACpBC,MAA4C;IAE5C,MAAMC,aAAa,MAAMD,OAAOE,aAAa,CAACF,OAAOG,YAAY;IACjE,IAAIF,YACF,MAAMD,OAAOI,aAAa,CAAC;QACzBC,aAAaJ,WAAWI,WAAW;QACnCC,WAAWR,qBAAqBE,OAAOG,YAAY;IACrD;IACF,MAAMH,OAAOO,WAAW,CAAC,OAAOC;QAC9B,MAAMX,qCAAqCG,OAAOG,YAAY,EAAE;YAACK;QAAE;QACnE,MAAMR,OAAOS,gBAAgB,CAAC;YAACN,cAAcH,OAAOG,YAAY;QAAA,GAAG;YAACK;QAAE;IACxE;AACF"}

package/dist/core/errors.d.ts

@@ -1,3 +1,4 @@
+import { IntegrationProviderError } from '@shipfox/api-integration-core-dto';
 export declare class JiraConnectionNotFoundError extends Error {
     constructor(connectionId: string);
 }
@@ -7,4 +8,40 @@ export declare class JiraAccessTokenMissingError extends Error {
 export declare class JiraInstallationSiteMismatchError extends Error {
     constructor(connectionId: string, cloudId: string);
 }
+export declare class JiraIntegrationProviderError extends IntegrationProviderError {
+}
+export declare class JiraInstallStateError extends Error {
+    constructor(message?: string);
+}
+export declare class JiraInstallStateActorMismatchError extends Error {
+    constructor();
+}
+export declare class JiraOAuthCallbackError extends Error {
+    readonly providerError: string;
+    readonly providerDescription: string | undefined;
+    constructor(providerError: string, providerDescription: string | undefined);
+}
+export declare class JiraAuthorizationScopeMismatchError extends Error {
+    readonly missingScopes: string[];
+    constructor(missingScopes: string[]);
+}
+export declare class JiraOfflineAccessNotGrantedError extends Error {
+    constructor();
+}
+export declare class JiraInstallationAlreadyLinkedError extends Error {
+    constructor(cloudId: string);
+}
+export declare class JiraConnectionAlreadyLinkedError extends Error {
+    constructor(connectionId: string);
+}
+export declare class JiraTokenUnrefreshableError extends Error {
+    readonly connectionId: string;
+    constructor(connectionId: string);
+}
+export declare class JiraSiteSelectionMismatchError extends Error {
+    constructor(cloudId: string);
+}
+export declare class JiraPendingSelectionNotFoundError extends Error {
+    constructor();
+}
 //# sourceMappingURL=errors.d.ts.map

package/dist/core/errors.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/core/errors.ts"],"names":[],"mappings":"AAAA,qBAAa,2BAA4B,SAAQ,KAAK;gBACxC,YAAY,EAAE,MAAM;CAIjC;AAED,qBAAa,2BAA4B,SAAQ,KAAK;gBACxC,YAAY,EAAE,MAAM;CAIjC;AAED,qBAAa,iCAAkC,SAAQ,KAAK;gBAC9C,YAAY,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM;CAMlD"}
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/core/errors.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,wBAAwB,EAAC,MAAM,mCAAmC,CAAC;AAE3E,qBAAa,2BAA4B,SAAQ,KAAK;gBACxC,YAAY,EAAE,MAAM;CAIjC;AAED,qBAAa,2BAA4B,SAAQ,KAAK;gBACxC,YAAY,EAAE,MAAM;CAIjC;AAED,qBAAa,iCAAkC,SAAQ,KAAK;gBAC9C,YAAY,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM;CAMlD;AAED,qBAAa,4BAA6B,SAAQ,wBAAwB;CAAG;AAE7E,qBAAa,qBAAsB,SAAQ,KAAK;gBAClC,OAAO,SAA+B;CAInD;AAED,qBAAa,kCAAmC,SAAQ,KAAK;;CAK5D;AAED,qBAAa,sBAAuB,SAAQ,KAAK;aAE7B,aAAa,EAAE,MAAM;aACrB,mBAAmB,EAAE,MAAM,GAAG,SAAS;gBADvC,aAAa,EAAE,MAAM,EACrB,mBAAmB,EAAE,MAAM,GAAG,SAAS;CAK1D;AAED,qBAAa,mCAAoC,SAAQ,KAAK;aAChC,aAAa,EAAE,MAAM,EAAE;gBAAvB,aAAa,EAAE,MAAM,EAAE;CAIpD;AAED,qBAAa,gCAAiC,SAAQ,KAAK;;CAO1D;AAED,qBAAa,kCAAmC,SAAQ,KAAK;gBAC/C,OAAO,EAAE,MAAM;CAI5B;AAED,qBAAa,gCAAiC,SAAQ,KAAK;gBAC7C,YAAY,EAAE,MAAM;CAIjC;AAED,qBAAa,2BAA4B,SAAQ,KAAK;aACxB,YAAY,EAAE,MAAM;gBAApB,YAAY,EAAE,MAAM;CAIjD;AAED,qBAAa,8BAA+B,SAAQ,KAAK;gBAC3C,OAAO,EAAE,MAAM;CAI5B;AAED,qBAAa,iCAAkC,SAAQ,KAAK;;CAK3D"}

package/dist/core/errors.js

@@ -1,3 +1,4 @@
+import { IntegrationProviderError } from '@shipfox/api-integration-core-dto';
 export class JiraConnectionNotFoundError extends Error {
     constructor(connectionId){
         super(`Jira integration connection was not found: ${connectionId}`);
@@ -16,5 +17,67 @@ export class JiraInstallationSiteMismatchError extends Error {
         this.name = 'JiraInstallationSiteMismatchError';
     }
 }
+export class JiraIntegrationProviderError extends IntegrationProviderError {
+}
+export class JiraInstallStateError extends Error {
+    constructor(message = 'Invalid Jira install state'){
+        super(message);
+        this.name = 'JiraInstallStateError';
+    }
+}
+export class JiraInstallStateActorMismatchError extends Error {
+    constructor(){
+        super('Jira install state was created by a different user');
+        this.name = 'JiraInstallStateActorMismatchError';
+    }
+}
+export class JiraOAuthCallbackError extends Error {
+    constructor(providerError, providerDescription){
+        super(providerDescription ?? `Jira OAuth callback failed: ${providerError}`), this.providerError = providerError, this.providerDescription = providerDescription;
+        this.name = 'JiraOAuthCallbackError';
+    }
+}
+export class JiraAuthorizationScopeMismatchError extends Error {
+    constructor(missingScopes){
+        super(`Jira authorization is missing usable site scopes: ${missingScopes.join(', ')}`), this.missingScopes = missingScopes;
+        this.name = 'JiraAuthorizationScopeMismatchError';
+    }
+}
+export class JiraOfflineAccessNotGrantedError extends Error {
+    constructor(){
+        super('Jira authorization did not grant offline access; reconnect and approve the requested scopes');
+        this.name = 'JiraOfflineAccessNotGrantedError';
+    }
+}
+export class JiraInstallationAlreadyLinkedError extends Error {
+    constructor(cloudId){
+        super(`Jira site is already linked to another Shipfox workspace: ${cloudId}`);
+        this.name = 'JiraInstallationAlreadyLinkedError';
+    }
+}
+export class JiraConnectionAlreadyLinkedError extends Error {
+    constructor(connectionId){
+        super(`Integration connection is already linked to another Jira site: ${connectionId}`);
+        this.name = 'JiraConnectionAlreadyLinkedError';
+    }
+}
+export class JiraTokenUnrefreshableError extends Error {
+    constructor(connectionId){
+        super(`Jira token cannot be refreshed; reconnect is required: ${connectionId}`), this.connectionId = connectionId;
+        this.name = 'JiraTokenUnrefreshableError';
+    }
+}
+export class JiraSiteSelectionMismatchError extends Error {
+    constructor(cloudId){
+        super(`Jira site was not included in the authorized site selection: ${cloudId}`);
+        this.name = 'JiraSiteSelectionMismatchError';
+    }
+}
+export class JiraPendingSelectionNotFoundError extends Error {
+    constructor(){
+        super('The Jira site selection expired or has already been completed; start over');
+        this.name = 'JiraPendingSelectionNotFoundError';
+    }
+}
 
 //# sourceMappingURL=errors.js.map

package/dist/core/errors.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/core/errors.ts"],"sourcesContent":["export class JiraConnectionNotFoundError extends Error {\n  constructor(connectionId: string) {\n    super(`Jira integration connection was not found: ${connectionId}`);\n    this.name = 'JiraConnectionNotFoundError';\n  }\n}\n\nexport class JiraAccessTokenMissingError extends Error {\n  constructor(connectionId: string) {\n    super(`Jira access token is missing for connection: ${connectionId}`);\n    this.name = 'JiraAccessTokenMissingError';\n  }\n}\n\nexport class JiraInstallationSiteMismatchError extends Error {\n  constructor(connectionId: string, cloudId: string) {\n    super(\n      `Jira connection is already linked to a different site: ${connectionId} (attempted ${cloudId})`,\n    );\n    this.name = 'JiraInstallationSiteMismatchError';\n  }\n}\n"],"names":["JiraConnectionNotFoundError","Error","connectionId","name","JiraAccessTokenMissingError","JiraInstallationSiteMismatchError","cloudId"],"mappings":"AAAA,OAAO,MAAMA,oCAAoCC;IAC/C,YAAYC,YAAoB,CAAE;QAChC,KAAK,CAAC,CAAC,2CAA2C,EAAEA,cAAc;QAClE,IAAI,CAACC,IAAI,GAAG;IACd;AACF;AAEA,OAAO,MAAMC,oCAAoCH;IAC/C,YAAYC,YAAoB,CAAE;QAChC,KAAK,CAAC,CAAC,6CAA6C,EAAEA,cAAc;QACpE,IAAI,CAACC,IAAI,GAAG;IACd;AACF;AAEA,OAAO,MAAME,0CAA0CJ;IACrD,YAAYC,YAAoB,EAAEI,OAAe,CAAE;QACjD,KAAK,CACH,CAAC,uDAAuD,EAAEJ,aAAa,YAAY,EAAEI,QAAQ,CAAC,CAAC;QAEjG,IAAI,CAACH,IAAI,GAAG;IACd;AACF"}
+{"version":3,"sources":["../../src/core/errors.ts"],"sourcesContent":["import {IntegrationProviderError} from '@shipfox/api-integration-core-dto';\n\nexport class JiraConnectionNotFoundError extends Error {\n  constructor(connectionId: string) {\n    super(`Jira integration connection was not found: ${connectionId}`);\n    this.name = 'JiraConnectionNotFoundError';\n  }\n}\n\nexport class JiraAccessTokenMissingError extends Error {\n  constructor(connectionId: string) {\n    super(`Jira access token is missing for connection: ${connectionId}`);\n    this.name = 'JiraAccessTokenMissingError';\n  }\n}\n\nexport class JiraInstallationSiteMismatchError extends Error {\n  constructor(connectionId: string, cloudId: string) {\n    super(\n      `Jira connection is already linked to a different site: ${connectionId} (attempted ${cloudId})`,\n    );\n    this.name = 'JiraInstallationSiteMismatchError';\n  }\n}\n\nexport class JiraIntegrationProviderError extends IntegrationProviderError {}\n\nexport class JiraInstallStateError extends Error {\n  constructor(message = 'Invalid Jira install state') {\n    super(message);\n    this.name = 'JiraInstallStateError';\n  }\n}\n\nexport class JiraInstallStateActorMismatchError extends Error {\n  constructor() {\n    super('Jira install state was created by a different user');\n    this.name = 'JiraInstallStateActorMismatchError';\n  }\n}\n\nexport class JiraOAuthCallbackError extends Error {\n  constructor(\n    public readonly providerError: string,\n    public readonly providerDescription: string | undefined,\n  ) {\n    super(providerDescription ?? `Jira OAuth callback failed: ${providerError}`);\n    this.name = 'JiraOAuthCallbackError';\n  }\n}\n\nexport class JiraAuthorizationScopeMismatchError extends Error {\n  constructor(public readonly missingScopes: string[]) {\n    super(`Jira authorization is missing usable site scopes: ${missingScopes.join(', ')}`);\n    this.name = 'JiraAuthorizationScopeMismatchError';\n  }\n}\n\nexport class JiraOfflineAccessNotGrantedError extends Error {\n  constructor() {\n    super(\n      'Jira authorization did not grant offline access; reconnect and approve the requested scopes',\n    );\n    this.name = 'JiraOfflineAccessNotGrantedError';\n  }\n}\n\nexport class JiraInstallationAlreadyLinkedError extends Error {\n  constructor(cloudId: string) {\n    super(`Jira site is already linked to another Shipfox workspace: ${cloudId}`);\n    this.name = 'JiraInstallationAlreadyLinkedError';\n  }\n}\n\nexport class JiraConnectionAlreadyLinkedError extends Error {\n  constructor(connectionId: string) {\n    super(`Integration connection is already linked to another Jira site: ${connectionId}`);\n    this.name = 'JiraConnectionAlreadyLinkedError';\n  }\n}\n\nexport class JiraTokenUnrefreshableError extends Error {\n  constructor(public readonly connectionId: string) {\n    super(`Jira token cannot be refreshed; reconnect is required: ${connectionId}`);\n    this.name = 'JiraTokenUnrefreshableError';\n  }\n}\n\nexport class JiraSiteSelectionMismatchError extends Error {\n  constructor(cloudId: string) {\n    super(`Jira site was not included in the authorized site selection: ${cloudId}`);\n    this.name = 'JiraSiteSelectionMismatchError';\n  }\n}\n\nexport class JiraPendingSelectionNotFoundError extends Error {\n  constructor() {\n    super('The Jira site selection expired or has already been completed; start over');\n    this.name = 'JiraPendingSelectionNotFoundError';\n  }\n}\n"],"names":["IntegrationProviderError","JiraConnectionNotFoundError","Error","connectionId","name","JiraAccessTokenMissingError","JiraInstallationSiteMismatchError","cloudId","JiraIntegrationProviderError","JiraInstallStateError","message","JiraInstallStateActorMismatchError","JiraOAuthCallbackError","providerError","providerDescription","JiraAuthorizationScopeMismatchError","missingScopes","join","JiraOfflineAccessNotGrantedError","JiraInstallationAlreadyLinkedError","JiraConnectionAlreadyLinkedError","JiraTokenUnrefreshableError","JiraSiteSelectionMismatchError","JiraPendingSelectionNotFoundError"],"mappings":"AAAA,SAAQA,wBAAwB,QAAO,oCAAoC;AAE3E,OAAO,MAAMC,oCAAoCC;IAC/C,YAAYC,YAAoB,CAAE;QAChC,KAAK,CAAC,CAAC,2CAA2C,EAAEA,cAAc;QAClE,IAAI,CAACC,IAAI,GAAG;IACd;AACF;AAEA,OAAO,MAAMC,oCAAoCH;IAC/C,YAAYC,YAAoB,CAAE;QAChC,KAAK,CAAC,CAAC,6CAA6C,EAAEA,cAAc;QACpE,IAAI,CAACC,IAAI,GAAG;IACd;AACF;AAEA,OAAO,MAAME,0CAA0CJ;IACrD,YAAYC,YAAoB,EAAEI,OAAe,CAAE;QACjD,KAAK,CACH,CAAC,uDAAuD,EAAEJ,aAAa,YAAY,EAAEI,QAAQ,CAAC,CAAC;QAEjG,IAAI,CAACH,IAAI,GAAG;IACd;AACF;AAEA,OAAO,MAAMI,qCAAqCR;AAA0B;AAE5E,OAAO,MAAMS,8BAA8BP;IACzC,YAAYQ,UAAU,4BAA4B,CAAE;QAClD,KAAK,CAACA;QACN,IAAI,CAACN,IAAI,GAAG;IACd;AACF;AAEA,OAAO,MAAMO,2CAA2CT;IACtD,aAAc;QACZ,KAAK,CAAC;QACN,IAAI,CAACE,IAAI,GAAG;IACd;AACF;AAEA,OAAO,MAAMQ,+BAA+BV;IAC1C,YACE,AAAgBW,aAAqB,EACrC,AAAgBC,mBAAuC,CACvD;QACA,KAAK,CAACA,uBAAuB,CAAC,4BAA4B,EAAED,eAAe,QAH3DA,gBAAAA,oBACAC,sBAAAA;QAGhB,IAAI,CAACV,IAAI,GAAG;IACd;AACF;AAEA,OAAO,MAAMW,4CAA4Cb;IACvD,YAAY,AAAgBc,aAAuB,CAAE;QACnD,KAAK,CAAC,CAAC,kDAAkD,EAAEA,cAAcC,IAAI,CAAC,OAAO,QAD3DD,gBAAAA;QAE1B,IAAI,CAACZ,IAAI,GAAG;IACd;AACF;AAEA,OAAO,MAAMc,yCAAyChB;IACpD,aAAc;QACZ,KAAK,CACH;QAEF,IAAI,CAACE,IAAI,GAAG;IACd;AACF;AAEA,OAAO,MAAMe,2CAA2CjB;IACtD,YAAYK,OAAe,CAAE;QAC3B,KAAK,CAAC,CAAC,0DAA0D,EAAEA,SAAS;QAC5E,IAAI,CAACH,IAAI,GAAG;IACd;AACF;AAEA,OAAO,MAAMgB,yCAAyClB;IACpD,YAAYC,YAAoB,CAAE;QAChC,KAAK,CAAC,CAAC,+DAA+D,EAAEA,cAAc;QACtF,IAAI,CAACC,IAAI,GAAG;IACd;AACF;AAEA,OAAO,MAAMiB,oCAAoCnB;IAC/C,YAAY,AAAgBC,YAAoB,CAAE;QAChD,KAAK,CAAC,CAAC,uDAAuD,EAAEA,cAAc,QADpDA,eAAAA;QAE1B,IAAI,CAACC,IAAI,GAAG;IACd;AACF;AAEA,OAAO,MAAMkB,uCAAuCpB;IAClD,YAAYK,OAAe,CAAE;QAC3B,KAAK,CAAC,CAAC,6DAA6D,EAAEA,SAAS;QAC/E,IAAI,CAACH,IAAI,GAAG;IACd;AACF;AAEA,OAAO,MAAMmB,0CAA0CrB;IACrD,aAAc;QACZ,KAAK,CAAC;QACN,IAAI,CAACE,IAAI,GAAG;IACd;AACF"}

package/dist/core/install.d.ts

@@ -0,0 +1,55 @@
+import type { UserContextMembership } from '@shipfox/api-auth-context';
+import type { IntegrationConnection } from '@shipfox/api-integration-core-dto';
+import type { JiraAccessibleResource, JiraApiClient } from '#api/client.js';
+import type { JiraPendingSelectionStore } from '#core/pending.js';
+import type { JiraTokenStore } from '#core/tokens.js';
+export interface ConnectJiraInstallationInput {
+    workspaceId: string;
+    cloudId: string;
+    siteUrl: string;
+    siteName: string;
+    authorizingAccountId: string;
+    scopes: string[];
+    tokenExpiresAt: Date | null;
+    displayName: string;
+}
+export interface HandleJiraCallbackParams {
+    jira: JiraApiClient;
+    tokenStore: Pick<JiraTokenStore, 'storeTokens'>;
+    pendingStore: Pick<JiraPendingSelectionStore, 'save' | 'load' | 'clear'>;
+    code: string;
+    state: string;
+    sessionUserId: string;
+    sessionMemberships: ReadonlyArray<UserContextMembership>;
+    requireWorkspaceMembership(input: {
+        workspaceId: string;
+        userId: string;
+        memberships: ReadonlyArray<UserContextMembership>;
+    }): Promise<unknown>;
+    getExistingJiraConnection(input: {
+        cloudId: string;
+    }): Promise<IntegrationConnection<'jira'> | undefined>;
+    connectJiraInstallation(input: ConnectJiraInstallationInput): Promise<IntegrationConnection<'jira'>>;
+    disconnectJiraInstallation(input: {
+        connectionId: string;
+    }): Promise<void>;
+}
+export declare function handleJiraCallback(params: HandleJiraCallbackParams): Promise<IntegrationConnection<'jira'> | {
+    sites: JiraAccessibleResource[];
+}>;
+export declare function handleJiraSiteSelection(params: Omit<HandleJiraCallbackParams, 'code'> & {
+    cloudId: string;
+}): Promise<IntegrationConnection<'jira'>>;
+export declare function handleJiraOAuthCallbackError(params: {
+    state: string;
+    error: string;
+    errorDescription?: string | undefined;
+    sessionUserId: string;
+    sessionMemberships: ReadonlyArray<UserContextMembership>;
+    requireWorkspaceMembership(input: {
+        workspaceId: string;
+        userId: string;
+        memberships: ReadonlyArray<UserContextMembership>;
+    }): Promise<unknown>;
+}): Promise<never>;
+//# sourceMappingURL=install.d.ts.map

package/dist/core/install.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"install.d.ts","sourceRoot":"","sources":["../../src/core/install.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAC,qBAAqB,EAAC,MAAM,2BAA2B,CAAC;AACrE,OAAO,KAAK,EAAC,qBAAqB,EAAC,MAAM,mCAAmC,CAAC;AAE7E,OAAO,KAAK,EAAC,sBAAsB,EAAE,aAAa,EAAoB,MAAM,gBAAgB,CAAC;AAC7F,OAAO,KAAK,EAAC,yBAAyB,EAAC,MAAM,kBAAkB,CAAC;AAChE,OAAO,KAAK,EAAC,cAAc,EAAC,MAAM,iBAAiB,CAAC;AAapD,MAAM,WAAW,4BAA4B;IAC3C,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,cAAc,EAAE,IAAI,GAAG,IAAI,CAAC;IAC5B,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,aAAa,CAAC;IACpB,UAAU,EAAE,IAAI,CAAC,cAAc,EAAE,aAAa,CAAC,CAAC;IAChD,YAAY,EAAE,IAAI,CAAC,yBAAyB,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,CAAC;IACzE,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,aAAa,EAAE,MAAM,CAAC;IACtB,kBAAkB,EAAE,aAAa,CAAC,qBAAqB,CAAC,CAAC;IACzD,0BAA0B,CAAC,KAAK,EAAE;QAChC,WAAW,EAAE,MAAM,CAAC;QACpB,MAAM,EAAE,MAAM,CAAC;QACf,WAAW,EAAE,aAAa,CAAC,qBAAqB,CAAC,CAAC;KACnD,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACrB,yBAAyB,CAAC,KAAK,EAAE;QAC/B,OAAO,EAAE,MAAM,CAAC;KACjB,GAAG,OAAO,CAAC,qBAAqB,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC,CAAC;IACvD,uBAAuB,CACrB,KAAK,EAAE,4BAA4B,GAClC,OAAO,CAAC,qBAAqB,CAAC,MAAM,CAAC,CAAC,CAAC;IAC1C,0BAA0B,CAAC,KAAK,EAAE;QAAC,YAAY,EAAE,MAAM,CAAA;KAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC1E;AAED,wBAAsB,kBAAkB,CACtC,MAAM,EAAE,wBAAwB,GAC/B,OAAO,CAAC,qBAAqB,CAAC,MAAM,CAAC,GAAG;IAAC,KAAK,EAAE,sBAAsB,EAAE,CAAA;CAAC,CAAC,CA4B5E;AAED,wBAAsB,uBAAuB,CAC3C,MAAM,EAAE,IAAI,CAAC,wBAAwB,EAAE,MAAM,CAAC,GAAG;IAAC,OAAO,EAAE,MAAM,CAAA;CAAC,GACjE,OAAO,CAAC,qBAAqB,CAAC,MAAM,CAAC,CAAC,CAkBxC;AAED,wBAAsB,4BAA4B,CAAC,MAAM,EAAE;IACzD,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,gBAAgB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC,aAAa,EAAE,MAAM,CAAC;IACtB,kBAAkB,EAAE,aAAa,CAAC,qBAAqB,CAAC,CAAC;IACzD,0BAA0B,CAAC,KAAK,EAAE;QAChC,WAAW,EAAE,MAAM,CAAC;QACpB,MAAM,EAAE,MAAM,CAAC;QACf,WAAW,EAAE,aAAa,CAAC,qBAAqB,CAAC,CAAC;KACnD,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACtB,GAAG,OAAO,CAAC,KAAK,CAAC,CAGjB"}

package/dist/core/install.js

@@ -0,0 +1,121 @@
+import { logger } from '@shipfox/node-opentelemetry';
+import { JiraInstallationAlreadyLinkedError, JiraInstallStateActorMismatchError, JiraIntegrationProviderError, JiraOAuthCallbackError, JiraOfflineAccessNotGrantedError, JiraPendingSelectionNotFoundError, JiraSiteSelectionMismatchError } from './errors.js';
+import { assertJiraAuthorizationScopes } from './scopes.js';
+import { verifyJiraInstallState } from './state.js';
+export async function handleJiraCallback(params) {
+    const claims = await verifyClaims(params, params.state);
+    const authorization = await params.jira.exchangeAuthorizationCode({
+        code: params.code
+    });
+    if (!authorization.refreshToken) throw new JiraOfflineAccessNotGrantedError();
+    const sites = await params.jira.getAccessibleResources({
+        accessToken: authorization.accessToken
+    });
+    if (sites.length === 0) throw new JiraIntegrationProviderError('access-denied', 'Jira authorization did not grant access to a site');
+    if (sites.length > 1) {
+        await params.pendingStore.save({
+            workspaceId: claims.workspaceId,
+            state: params.state,
+            authorization,
+            sites
+        });
+        return {
+            sites
+        };
+    }
+    const site = sites[0];
+    if (!site) {
+        throw new JiraIntegrationProviderError('malformed-provider-response', 'Jira accessible-resources response did not contain a selected site');
+    }
+    assertJiraAuthorizationScopes(site.scopes);
+    return resolveJiraSite({
+        ...params,
+        authorization,
+        site,
+        claims
+    });
+}
+export async function handleJiraSiteSelection(params) {
+    const claims = await verifyClaims(params, params.state);
+    const pending = await params.pendingStore.load({
+        workspaceId: claims.workspaceId,
+        state: params.state
+    });
+    if (!pending) throw new JiraPendingSelectionNotFoundError();
+    const site = pending.sites.find((candidate)=>candidate.cloudId === params.cloudId);
+    if (!site) throw new JiraSiteSelectionMismatchError(params.cloudId);
+    assertJiraAuthorizationScopes(site.scopes);
+    const connection = await resolveJiraSite({
+        ...params,
+        authorization: pending.authorization,
+        site,
+        claims
+    });
+    await params.pendingStore.clear({
+        workspaceId: claims.workspaceId,
+        state: params.state
+    });
+    return connection;
+}
+export async function handleJiraOAuthCallbackError(params) {
+    await verifyClaims(params, params.state);
+    throw new JiraOAuthCallbackError(params.error, params.errorDescription);
+}
+async function verifyClaims(params, state) {
+    const claims = verifyJiraInstallState(state);
+    if (claims.userId !== params.sessionUserId) throw new JiraInstallStateActorMismatchError();
+    await params.requireWorkspaceMembership({
+        workspaceId: claims.workspaceId,
+        userId: claims.userId,
+        memberships: params.sessionMemberships
+    });
+    return claims;
+}
+async function resolveJiraSite(params) {
+    const existing = await params.getExistingJiraConnection({
+        cloudId: params.site.cloudId
+    });
+    if (existing && existing.workspaceId !== params.claims.workspaceId) throw new JiraInstallationAlreadyLinkedError(params.site.cloudId);
+    let connectionId;
+    try {
+        const identity = await params.jira.getMyself({
+            accessToken: params.authorization.accessToken,
+            cloudId: params.site.cloudId
+        });
+        const connection = await params.connectJiraInstallation({
+            workspaceId: params.claims.workspaceId,
+            cloudId: params.site.cloudId,
+            siteUrl: params.site.url,
+            siteName: params.site.name,
+            authorizingAccountId: identity.accountId,
+            scopes: params.site.scopes,
+            tokenExpiresAt: params.authorization.expiresAt ?? null,
+            displayName: `Jira ${params.site.name}`
+        });
+        connectionId = connection.id;
+        await params.tokenStore.storeTokens({
+            connectionId: connection.id,
+            accessToken: params.authorization.accessToken,
+            refreshToken: params.authorization.refreshToken,
+            editedBy: params.claims.userId
+        });
+        return connection;
+    } catch (error) {
+        if (connectionId && !existing) await bestEffortDisconnect(params, connectionId);
+        throw error;
+    }
+}
+async function bestEffortDisconnect(params, connectionId) {
+    try {
+        await params.disconnectJiraInstallation({
+            connectionId
+        });
+    } catch (error) {
+        logger().warn({
+            err: error,
+            connectionId
+        }, 'Jira connect compensation failed after token storage rejection');
+    }
+}
+
+//# sourceMappingURL=install.js.map