atlass 1.12.0 → 1.13.0

package/dist/{build-2A5pjMrK.mjs → build-BblaPBOA.mjs}

@@ -1,33 +1,60 @@
 import { Command } from "commander";
-import { checkbox, confirm, editor, input, password, search, select } from "@inquirer/prompts";
 import { mkdir, readFile, rm, stat, writeFile } from "node:fs/promises";
-import { homedir } from "node:os";
 import { basename, dirname, isAbsolute, join, resolve } from "node:path";
 import { Entry } from "@napi-rs/keyring";
-import kleur from "kleur";
+import { homedir } from "node:os";
+import { spawn } from "node:child_process";
 import { stripVTControlCharacters } from "node:util";
+import { checkbox, confirm, editor, input, password, search, select } from "@inquirer/prompts";
+import kleur from "kleur";
 import { marked } from "marked";
 import { randomUUID } from "node:crypto";
 import { common, createLowlight } from "lowlight";
-import { spawn } from "node:child_process";
-//#region src/cli/run.ts
-const SIGINT_EXIT_CODE = 130;
-function run(fn) {
-	return async (...args) => {
-		try {
-			await fn(...args);
-		} catch (err) {
-			fail(err);
-		}
-	};
+//#region src/api/http-error.ts
+var HttpError = class extends Error {
+	status;
+	jira;
+	constructor(status, message, jira = {
+		errorMessages: [],
+		errors: {}
+	}) {
+		super(message);
+		this.status = status;
+		this.jira = jira;
+		this.name = "HttpError";
+	}
+};
+function httpError(status, path, body, loginHint) {
+	if (status === 401 || status === 403) return new HttpError(status, `Authentication failed (401/403). Run \`${loginHint}\` to update your token.`);
+	if (status === 404) return new HttpError(status, `Not found (404): ${path}`);
+	if (status === 409) return new HttpError(status, `Conflict (409): ${extractErrorMessage(body) || "the page changed on the server"}`);
+	if (status === 413) return new HttpError(status, "Payload too large (413): the page or an attachment exceeds the size limit.");
+	if (status === 400) return new HttpError(status, `Bad request (400): ${extractErrorMessage(body) || path}`, jiraErrors(body));
+	return new HttpError(status, `Request failed (${status}): ${extractErrorMessage(body) || path}`, jiraErrors(body));
 }
-function fail(err) {
-	if (isPromptInterrupt(err)) process.exit(SIGINT_EXIT_CODE);
-	console.error(`Error: ${err instanceof Error ? err.message : String(err)}`);
-	process.exit(1);
+function extractErrorMessage(body) {
+	if (!body) return "";
+	const json = tryParseJson(body);
+	const { errorMessages, errors } = jiraErrors(body);
+	const fromJira = [...errorMessages, ...Object.entries(errors).map(([f, m]) => `${f}: ${m}`)];
+	if (fromJira.length) return fromJira.join("; ");
+	if (json?.message) return json.message;
+	if (json?.error?.message) return json.error.message;
+	return body.slice(0, 300);
 }
-function isPromptInterrupt(err) {
-	return err instanceof Error && err.name === "ExitPromptError";
+function jiraErrors(body) {
+	const json = tryParseJson(body);
+	return {
+		errorMessages: json?.errorMessages ?? [],
+		errors: json?.errors ?? {}
+	};
+}
+function tryParseJson(text) {
+	try {
+		return JSON.parse(text);
+	} catch {
+		return null;
+	}
 }
 //#endregion
 //#region src/api/client.ts
@@ -35,10 +62,12 @@ const DISABLE_XSRF_CHECK = { "X-Atlassian-Token": "nocheck" };
 var AtlassianClient = class {
 	site;
 	authHeader;
-	constructor(auth) {
-		this.site = auth.site;
-		const basic = Buffer.from(`${auth.email}:${auth.token}`).toString("base64");
+	loginHint;
+	constructor(credentials, loginHint) {
+		this.site = credentials.site;
+		const basic = Buffer.from(`${credentials.email}:${credentials.token}`).toString("base64");
 		this.authHeader = `Basic ${basic}`;
+		this.loginHint = loginHint;
 	}
 	async request(path, init) {
 		const res = await fetch(`${this.site}${path}`, {
@@ -51,7 +80,7 @@ var AtlassianClient = class {
 		});
 		if (!res.ok) {
 			const body = await res.text().catch(() => "");
-			throw httpError(res.status, path, body);
+			throw httpError(res.status, path, body, this.loginHint);
 		}
 		return res;
 	}
@@ -111,204 +140,512 @@ function pathAndQuery(absoluteUrl) {
 	const u = new URL(absoluteUrl);
 	return u.pathname + u.search;
 }
-var HttpError = class extends Error {
-	status;
-	jira;
-	constructor(status, message, jira = {
-		errorMessages: [],
-		errors: {}
-	}) {
-		super(message);
-		this.status = status;
-		this.jira = jira;
-		this.name = "HttpError";
+//#endregion
+//#region src/api/session.ts
+const BITBUCKET_ORIGIN = "https://api.bitbucket.org";
+const ATLASSIAN_LOGIN = "atlass auth login";
+const BITBUCKET_LOGIN = "atlass bitbucket login";
+var BitbucketClient = class extends AtlassianClient {
+	workspace;
+	defaultRepo;
+	uuid;
+	constructor(email, token, bitbucket) {
+		super({
+			site: BITBUCKET_ORIGIN,
+			email,
+			token
+		}, BITBUCKET_LOGIN);
+		this.workspace = bitbucket.workspace;
+		this.defaultRepo = bitbucket.defaultRepo;
+		this.uuid = bitbucket.uuid;
 	}
 };
-function httpError(status, path, body = "") {
-	if (status === 401 || status === 403) return new HttpError(status, "Authentication failed (401/403). Run `atlass auth login` to update your token.");
-	if (status === 404) return new HttpError(status, `Not found (404): ${path}`);
-	if (status === 409) return new HttpError(status, `Conflict (409): ${extractErrorMessage(body) || "the page changed on the server"}`);
-	if (status === 413) return new HttpError(status, "Payload too large (413): the page or an attachment exceeds the size limit.");
-	if (status === 400) return new HttpError(status, `Bad request (400): ${extractErrorMessage(body) || path}`, jiraErrors(body));
-	return new HttpError(status, `Request failed (${status}): ${extractErrorMessage(body) || path}`, jiraErrors(body));
+function sessionFor(credentials) {
+	return new AtlassianClient(credentials, ATLASSIAN_LOGIN);
 }
-function extractErrorMessage(body) {
-	if (!body) return "";
-	const json = tryParseJson(body);
-	const { errorMessages, errors } = jiraErrors(body);
-	const fromJira = [...errorMessages, ...Object.entries(errors).map(([f, m]) => `${f}: ${m}`)];
-	if (fromJira.length) return fromJira.join("; ");
-	if (json?.message) return json.message;
-	if (json?.error?.message) return json.error.message;
-	return body.slice(0, 300);
+function bitbucketSessionFor(email, token, bitbucket) {
+	return new BitbucketClient(email, token, bitbucket);
 }
-function jiraErrors(body) {
-	const json = tryParseJson(body);
+async function openSession(profile) {
+	const config = await profile.read();
+	if (!config?.site || !config.email) throw new Error("Not logged in. Run `atlass auth login` first.");
+	const token = await profile.token(config.email, "atlassian");
+	if (!token) throw new Error("No API token found in keyring. Run `atlass auth login` again.");
+	return sessionFor({
+		site: config.site,
+		email: config.email,
+		token
+	});
+}
+async function openBitbucketSession(profile) {
+	const config = await profile.read();
+	if (!config?.email || !config.bitbucket?.workspace) throw new Error("Not logged in to Bitbucket. Run `atlass bitbucket login` first.");
+	const token = await profile.token(config.email, "bitbucket");
+	if (!token) throw new Error("No Bitbucket API token found in keyring. Run `atlass bitbucket login` again.");
+	return bitbucketSessionFor(config.email, token, config.bitbucket);
+}
+//#endregion
+//#region src/files/disk.ts
+async function makeRoom(path) {
+	await mkdir(dirname(path), { recursive: true });
+}
+function diskFiles() {
 	return {
-		errorMessages: json?.errorMessages ?? [],
-		errors: json?.errors ?? {}
+		async readText(path) {
+			return readFile(path, "utf8");
+		},
+		async readBytes(path) {
+			const buffer = await readFile(path);
+			return new Uint8Array(buffer.buffer, buffer.byteOffset, buffer.byteLength);
+		},
+		async size(path) {
+			return (await stat(path)).size;
+		},
+		async writeText(path, text) {
+			await makeRoom(path);
+			await writeFile(path, text, "utf8");
+		},
+		async writeBytes(path, bytes) {
+			await makeRoom(path);
+			await writeFile(path, bytes);
+		}
 	};
 }
-function tryParseJson(text) {
-	try {
-		return JSON.parse(text);
-	} catch {
-		return null;
-	}
-}
 //#endregion
-//#region src/config.ts
+//#region src/profile/disk.ts
+const SERVICE = "atlass";
 function configDir() {
-	return join(process.env.XDG_CONFIG_HOME || join(homedir(), ".config"), "atlass");
+	const base = process.env.XDG_CONFIG_HOME || join(homedir(), ".config");
+	return join(base, "atlass");
 }
 function configPath() {
 	return join(configDir(), "config.json");
 }
-async function readConfig() {
-	try {
-		const raw = await readFile(configPath(), "utf8");
-		const parsed = JSON.parse(raw);
-		return {
-			site: parsed.site,
-			email: parsed.email,
-			bitbucket: parsed.bitbucket
-		};
-	} catch {
-		return null;
-	}
+function entry(email, kind) {
+	return new Entry(SERVICE, kind === "bitbucket" ? `${email}:bitbucket` : email);
 }
-async function writeConfig(config) {
-	await mkdir(configDir(), { recursive: true });
-	await writeFile(configPath(), `${JSON.stringify(config, null, 2)}\n`, "utf8");
+function diskProfile() {
+	return {
+		async read() {
+			try {
+				const parsed = JSON.parse(await readFile(configPath(), "utf8"));
+				return {
+					site: parsed.site,
+					email: parsed.email,
+					bitbucket: parsed.bitbucket
+				};
+			} catch {
+				return null;
+			}
+		},
+		async write(config) {
+			await mkdir(configDir(), { recursive: true });
+			await writeFile(configPath(), `${JSON.stringify(config, null, 2)}\n`, "utf8");
+		},
+		async clear() {
+			await rm(configPath(), { force: true });
+		},
+		async token(email, kind) {
+			return entry(email, kind).getPassword();
+		},
+		async setToken(email, kind, token) {
+			entry(email, kind).setPassword(token);
+		},
+		async deleteToken(email, kind) {
+			try {
+				entry(email, kind).deleteCredential();
+			} catch {
+				return;
+			}
+		}
+	};
 }
-async function clearConfig() {
-	await rm(configPath(), { force: true });
+//#endregion
+//#region src/terminal/pager.ts
+const DEFAULT_ROWS = 24;
+const DEFAULT_COLUMNS = 80;
+const DEFAULT_PAGER = "less";
+const DEFAULT_LESS = "FRX";
+function renderedHeight(text, columns) {
+	const width = Math.max(1, columns);
+	return text.split("\n").map((line) => Math.max(1, Math.ceil(stripVTControlCharacters(line).length / width))).reduce((sum, rows) => sum + rows, 0);
 }
-function siteOrigin(input) {
-	let value = input.trim();
-	if (!/^https?:\/\//i.test(value)) value = `https://${value}`;
-	return new URL(value).origin;
+function shouldPage(text, screen) {
+	if (!screen.isTTY) return false;
+	const rows = screen.rows ?? DEFAULT_ROWS;
+	return renderedHeight(text, screen.columns ?? DEFAULT_COLUMNS) > rows;
 }
-//#endregion
-//#region src/credentials.ts
-const SERVICE = "atlass";
-const BITBUCKET_ORIGIN = "https://api.bitbucket.org";
-function entry(key) {
-	return new Entry(SERVICE, key);
+function pagerCommand(env) {
+	const [command = DEFAULT_PAGER, ...args] = (env["PAGER"] ?? "").trim().split(/\s+/).filter(Boolean);
+	return {
+		command,
+		args,
+		env: {
+			...env,
+			LESS: env["LESS"] ?? DEFAULT_LESS
+		}
+	};
 }
-function deleteEntryIfPresent(key) {
-	try {
-		entry(key).deleteCredential();
-	} catch {
-		return;
+async function tryPager(text, options = {}) {
+	if (!shouldPage(text, options.screen ?? process.stdout)) return false;
+	return pipeToPager(text, pagerCommand(options.env ?? process.env));
+}
+function pipeToPager(text, pager) {
+	return new Promise((resolve) => {
+		const child = spawn(pager.command, pager.args, {
+			stdio: [
+				"pipe",
+				"inherit",
+				"inherit"
+			],
+			env: pager.env
+		});
+		child.once("error", () => resolve(false));
+		child.once("close", () => resolve(true));
+		child.stdin.once("error", () => {});
+		child.stdin.end(`${text}\n`);
+	});
+}
+//#endregion
+//#region src/terminal.ts
+var NotInteractiveError = class extends Error {
+	constructor(spec) {
+		super(spec.flag ? `Cannot prompt without a terminal. Pass ${spec.flag}.` : `Cannot prompt without a terminal: ${spec.message}`);
+		this.name = "NotInteractiveError";
 	}
+};
+//#endregion
+//#region src/terminal/prompts.ts
+const inquirerPrompts = {
+	text: (spec) => input({
+		message: spec.message,
+		required: spec.required,
+		default: spec.default,
+		validate: spec.validate
+	}),
+	secret: (spec) => password({
+		message: spec.message,
+		mask: spec.mask
+	}),
+	confirm: (spec) => confirm({
+		message: spec.message,
+		default: spec.default
+	}),
+	pick: (spec) => select({
+		message: spec.message,
+		choices: spec.choices,
+		default: spec.default,
+		pageSize: spec.pageSize
+	}),
+	pickMany: (spec) => checkbox({
+		message: spec.message,
+		choices: spec.choices,
+		required: spec.required,
+		pageSize: spec.pageSize
+	}),
+	edit: (spec) => editor({
+		message: spec.message,
+		postfix: spec.postfix,
+		default: spec.default,
+		validate: spec.validate
+	}),
+	searchPick: (spec) => search({
+		message: spec.message,
+		source: (term) => spec.source(term),
+		pageSize: spec.pageSize
+	})
+};
+async function refuse(spec) {
+	throw new NotInteractiveError(spec);
+}
+const refusingPrompts = {
+	text: refuse,
+	secret: refuse,
+	confirm: refuse,
+	pick: refuse,
+	pickMany: refuse,
+	edit: refuse,
+	searchPick: refuse
+};
+//#endregion
+//#region src/terminal/tty.ts
+const DEFAULT_WIDTH = 80;
+function ttyTerminal(interactive = true) {
+	return {
+		interactive,
+		out(value) {
+			if (Array.isArray(value) && value.length === 0) return;
+			console.log(Array.isArray(value) ? value.join("\n") : value);
+		},
+		err(value) {
+			console.error(value);
+		},
+		json(value) {
+			console.log(JSON.stringify(value, null, 2));
+		},
+		async page(text, options = {}) {
+			if (options.pager !== false && await tryPager(text)) return;
+			console.log(text);
+		},
+		get width() {
+			return process.stdout.columns ?? DEFAULT_WIDTH;
+		},
+		ask: interactive ? inquirerPrompts : refusingPrompts
+	};
 }
-function saveToken(email, token) {
-	entry(email).setPassword(token);
+//#endregion
+//#region src/terminal/open.ts
+function openTerminal(args, stdin) {
+	return ttyTerminal(stdin.isTTY === true && !refusedInput(args.at(-1)));
 }
-function readToken(email) {
-	return entry(email).getPassword();
+function refusedInput(last) {
+	for (let command = asCommand(last); command; command = command.parent) if (command.opts()["input"] === false) return true;
+	return false;
 }
-function deleteToken(email) {
-	deleteEntryIfPresent(email);
+function asCommand(value) {
+	const command = value;
+	return typeof command?.opts === "function" ? command : null;
 }
-function bitbucketKey(email) {
-	return `${email}:bitbucket`;
+//#endregion
+//#region src/cli/run.ts
+const SIGINT_EXIT_CODE = 130;
+function bareAction(fn) {
+	return guarded((env, args) => fn(env, ...args));
+}
+function jiraAction(fn) {
+	return guarded(async (env, args) => fn({
+		...env,
+		session: await openSession(env.profile)
+	}, ...args));
+}
+function bitbucketAction(fn) {
+	return guarded(async (env, args) => fn({
+		...env,
+		session: await openBitbucketSession(env.profile)
+	}, ...args));
+}
+function guarded(fn) {
+	return async (...args) => {
+		try {
+			await fn({
+				term: openTerminal(args, process.stdin),
+				files: diskFiles(),
+				profile: diskProfile()
+			}, args);
+		} catch (err) {
+			fail(err);
+		}
+	};
 }
-function saveBitbucketToken(email, token) {
-	entry(bitbucketKey(email)).setPassword(token);
+function fail(err) {
+	if (isPromptInterrupt(err)) process.exit(SIGINT_EXIT_CODE);
+	ttyTerminal().err(`Error: ${err instanceof Error ? err.message : String(err)}`);
+	process.exit(1);
 }
-function readBitbucketToken(email) {
-	return entry(bitbucketKey(email)).getPassword();
+function isPromptInterrupt(err) {
+	return err instanceof Error && err.name === "ExitPromptError";
 }
-function deleteBitbucketToken(email) {
-	deleteEntryIfPresent(bitbucketKey(email));
+//#endregion
+//#region src/util/parse.ts
+function parseIssueKey(input) {
+	const match = input.toUpperCase().match(/[A-Z][A-Z0-9]+-\d+/);
+	return match ? match[0] : null;
 }
-async function requireAuth() {
-	const config = await readConfig();
-	if (!config || !config.site || !config.email) throw new Error("Not logged in. Run `atlass auth login` first.");
-	const token = readToken(config.email);
-	if (!token) throw new Error("No API token found in keyring. Run `atlass auth login` again.");
-	return {
-		site: config.site,
-		email: config.email,
-		token
-	};
+function parsePageId(input) {
+	const trimmed = input.trim();
+	if (/^\d+$/.test(trimmed)) return trimmed;
+	const fromPath = trimmed.match(/\/pages\/(\d+)/);
+	if (fromPath) return fromPath[1];
+	const fromQuery = trimmed.match(/[?&]pageId=(\d+)/);
+	if (fromQuery) return fromQuery[1];
+	return null;
 }
-async function requireBitbucketAuth() {
-	const config = await readConfig();
-	if (!config || !config.email || !config.bitbucket?.workspace) throw new Error("Not logged in to Bitbucket. Run `atlass bitbucket login` first.");
-	const token = readBitbucketToken(config.email);
-	if (!token) throw new Error("No Bitbucket API token found in keyring. Run `atlass bitbucket login` again.");
-	return {
-		site: BITBUCKET_ORIGIN,
-		email: config.email,
-		token,
-		workspace: config.bitbucket.workspace,
-		defaultRepo: config.bitbucket.defaultRepo,
-		uuid: config.bitbucket.uuid
+function isExternalHref(href) {
+	return /^[a-z][a-z0-9+.-]*:\/\//i.test(href);
+}
+function resolveRepo(flag, config) {
+	if (flag) {
+		if (flag.includes("/")) {
+			const parts = flag.split("/");
+			const [workspace, repo] = parts;
+			if (parts.length !== 2 || !workspace || !repo) throw new Error(`Invalid --repo "${flag}". Expected "workspace/slug" or "slug".`);
+			return {
+				workspace,
+				repo
+			};
+		}
+		if (!config.workspace) throw new Error(`No Bitbucket workspace configured. Pass --repo workspace/slug or run \`atlass bitbucket login\`.`);
+		return {
+			workspace: config.workspace,
+			repo: flag
+		};
+	}
+	if (config.workspace && config.defaultRepo) return {
+		workspace: config.workspace,
+		repo: config.defaultRepo
 	};
+	throw new Error(`No repo given. Pass --repo workspace/slug (or a bare slug), or set a default repo at \`atlass bitbucket login\`.`);
+}
+const DEFAULT_LIMIT = 25;
+const MAX_LIMIT = 100;
+function parseLimit(value) {
+	if (!value) return DEFAULT_LIMIT;
+	const n = Number.parseInt(value, 10);
+	if (!Number.isFinite(n) || n < 1) throw new Error(`Invalid --limit "${value}".`);
+	return Math.min(n, MAX_LIMIT);
+}
+function siteOrigin(input) {
+	let value = input.trim();
+	if (!/^https?:\/\//i.test(value)) value = `https://${value}`;
+	return new URL(value).origin;
 }
 //#endregion
 //#region src/commands/auth.ts
-async function login() {
-	const site = siteOrigin(await input({
+async function login({ term, profile }) {
+	const site = siteOrigin(await term.ask.text({
 		message: "Atlassian site (e.g. acme.atlassian.net):",
 		required: true
 	}));
-	const email = await input({
+	const email = await term.ask.text({
 		message: "Account email:",
 		required: true
 	});
-	const token = await password({
+	const token = await term.ask.secret({
 		message: "API token (from id.atlassian.com/manage-profile/security/api-tokens):",
 		mask: true
 	});
-	const me = await new AtlassianClient({
+	const me = await sessionFor({
 		site,
 		email,
 		token
 	}).getJson("/rest/api/3/myself");
-	await writeConfig({
-		...await readConfig() ?? {},
+	const existing = await profile.read() ?? {};
+	await profile.write({
+		...existing,
 		site,
 		email
 	});
-	saveToken(email, token);
-	console.log(`Logged in as ${me.displayName} on ${site}.`);
+	await profile.setToken(email, "atlassian", token);
+	term.out(`Logged in as ${me.displayName} on ${site}.`);
 }
-async function logout() {
-	const config = await readConfig();
-	if (config?.email) deleteToken(config.email);
+async function logout({ term, profile }) {
+	const config = await profile.read();
+	if (config?.email) await profile.deleteToken(config.email, "atlassian");
 	const bitbucketLogin = config?.bitbucket && config.email ? {
 		email: config.email,
 		bitbucket: config.bitbucket
 	} : null;
-	if (bitbucketLogin) await writeConfig(bitbucketLogin);
-	else await clearConfig();
-	console.log("Logged out. Credentials removed.");
+	if (bitbucketLogin) await profile.write(bitbucketLogin);
+	else await profile.clear();
+	term.out("Logged out. Credentials removed.");
 }
-async function status() {
-	const config = await readConfig();
+async function status({ term, profile }) {
+	const config = await profile.read();
 	if (!config || !config.site || !config.email) {
-		console.log("Not logged in. Run `atlass auth login`.");
+		term.out("Not logged in. Run `atlass auth login`.");
 		return;
 	}
-	const hasToken = readToken(config.email) !== null;
-	console.log(`Site:  ${config.site}`);
-	console.log(`Email: ${config.email}`);
-	console.log(`Token: ${hasToken ? "stored in keyring" : "MISSING (run `atlass auth login`)"}`);
+	const hasToken = await profile.token(config.email, "atlassian") !== null;
+	term.out([
+		`Site:  ${config.site}`,
+		`Email: ${config.email}`,
+		`Token: ${hasToken ? "stored in keyring" : "MISSING (run `atlass auth login`)"}`
+	]);
 }
 //#endregion
 //#region src/cli/auth.ts
 function registerAuth(auth) {
 	auth.description("Manage Atlassian credentials");
-	auth.command("login").description("Store site, email, and API token").action(run(login));
-	auth.command("logout").description("Remove stored credentials").action(run(logout));
-	auth.command("status").description("Show the current login").action(run(status));
+	auth.command("login").description("Store site, email, and API token").action(bareAction(login));
+	auth.command("logout").description("Remove stored credentials").action(bareAction(logout));
+	auth.command("status").description("Show the current login").action(bareAction(status));
 	return auth;
 }
 //#endregion
+//#region src/api/bitbucket-user.ts
+async function fetchCurrentUserUuid(client) {
+	const user = await client.getJson("/2.0/user");
+	if (!user.uuid) throw new Error("Bitbucket did not return an account uuid for the current user.");
+	return user.uuid;
+}
+//#endregion
+//#region src/commands/bitbucket-auth.ts
+async function bitbucketLogin({ term, profile }) {
+	const existing = await profile.read() ?? {};
+	const email = existing.email ?? await term.ask.text({
+		message: "Account email:",
+		required: true
+	});
+	const workspace = (await term.ask.text({
+		message: "Bitbucket workspace (e.g. acme):",
+		required: true
+	})).trim();
+	const defaultRepo = (await term.ask.text({ message: "Default repo slug (optional):" })).trim() || void 0;
+	const token = await term.ask.secret({
+		message: "Bitbucket API token (needs pipeline, pull request, account, and workspace read scopes):",
+		mask: true
+	});
+	const session = bitbucketSessionFor(email, token, { workspace });
+	const ws = await verifyWorkspace(session, workspace);
+	const uuid = await fetchCurrentUserUuid(session).catch(() => void 0);
+	await profile.write({
+		...existing,
+		email,
+		bitbucket: {
+			workspace,
+			...defaultRepo ? { defaultRepo } : {},
+			...uuid ? { uuid } : {}
+		}
+	});
+	await profile.setToken(email, "bitbucket", token);
+	term.out(`Logged in to Bitbucket workspace ${ws.name ?? workspace} as ${email}.`);
+}
+async function bitbucketLogout({ term, profile }) {
+	const config = await profile.read();
+	if (config?.email) await profile.deleteToken(config.email, "bitbucket");
+	const jiraLogin = config?.site && config.email ? {
+		site: config.site,
+		email: config.email
+	} : null;
+	if (jiraLogin) await profile.write(jiraLogin);
+	else await profile.clear();
+	term.out("Logged out of Bitbucket. Credentials removed.");
+}
+async function bitbucketStatus({ term, profile }) {
+	const config = await profile.read();
+	if (!config?.email || !config.bitbucket?.workspace) {
+		term.out("Not logged in to Bitbucket. Run `atlass bitbucket login`.");
+		return;
+	}
+	const hasToken = await profile.token(config.email, "bitbucket") !== null;
+	term.out([
+		`Workspace:    ${config.bitbucket.workspace}`,
+		`Email:        ${config.email}`,
+		`Default repo: ${config.bitbucket.defaultRepo ?? "(none)"}`,
+		`Token:        ${hasToken ? "stored in keyring" : "MISSING (run `atlass bitbucket login`)"}`
+	]);
+}
+async function rememberBitbucketUuid(profile, uuid) {
+	const config = await profile.read();
+	if (!config?.bitbucket) return;
+	await profile.write({
+		...config,
+		bitbucket: {
+			...config.bitbucket,
+			uuid
+		}
+	});
+}
+async function verifyWorkspace(transport, workspace) {
+	try {
+		return await transport.getJson(`/2.0/workspaces/${encodeURIComponent(workspace)}`);
+	} catch (err) {
+		if (err instanceof HttpError && (err.status === 401 || err.status === 403)) throw new Error(`Could not verify Bitbucket workspace "${workspace}" (401/403). Check the token and that it has workspace read + read:pipeline:bitbucket scopes.`);
+		if (err instanceof HttpError && err.status === 404) throw new Error(`Bitbucket workspace "${workspace}" not found (404). Check the slug.`);
+		throw err;
+	}
+}
+//#endregion
 //#region src/api/bitbucket-repo.ts
 const BITBUCKET_WEB_ORIGIN = "https://bitbucket.org";
 function repoPath(ref, resource) {
@@ -403,13 +740,6 @@ async function listPullRequests(client, ref, params) {
 	return collectPages(client, `${repoPath(ref, "pullrequests")}?${pullRequestsQuery(params)}`, params.limit, (value) => toPullRequestSummary(ref, value));
 }
 //#endregion
-//#region src/api/bitbucket-user.ts
-async function fetchCurrentUserUuid(client) {
-	const user = await client.getJson("/2.0/user");
-	if (!user.uuid) throw new Error("Bitbucket did not return an account uuid for the current user.");
-	return user.uuid;
-}
-//#endregion
 //#region src/api/bitbucket-pipelines.ts
 const BUILD_NUMBER_SCAN_LIMIT = 1e3;
 function pipelineStatus(state) {
@@ -513,7 +843,7 @@ function formatDateTime(iso) {
 	return date.toISOString().replace("T", " ").slice(0, 16);
 }
 const MINUTE = 60;
-const HOUR = 60 * MINUTE;
+const HOUR = 3600;
 const DAY = 24 * HOUR;
 function relativeTime(iso, nowMs) {
 	if (!iso) return "-";
@@ -559,43 +889,43 @@ function alignedRows(items, nowMs, cells) {
 		json: row.json
 	}));
 }
-function printRows(rows, options) {
-	if (options.json) {
-		console.log(JSON.stringify(rows.map((r) => r.json), null, 2));
-		return;
-	}
-	if (rows.length === 0) {
-		console.log(options.empty);
-		return;
-	}
-	for (const row of rows) console.log(formatRow(row));
-	if (options.footer) console.log(options.footer);
+function formatRows(rows, options) {
+	if (rows.length === 0) return [options.empty];
+	const lines = rows.map((row) => formatRow(row, options.width));
+	return options.footer ? [...lines, options.footer] : lines;
+}
+function writeRows(term, rows, options) {
+	if (options.json) term.json(rows.map((r) => r.json));
+	else term.out(formatRows(rows, {
+		...options,
+		width: term.width
+	}));
 }
 const COPY_CONCURRENCY = 5;
-async function runSearch(rows, options, noun, copyOne) {
+async function runSearch(term, rows, options, noun, copyOne) {
 	if (!(options.copy && !options.json && rows.length > 0)) {
-		printRows(rows, options);
+		writeRows(term, rows, options);
 		return;
 	}
 	if (options.out?.endsWith(".md")) throw new Error("--out must be a directory when using --copy; a .md file path would overwrite each selection.");
-	await copySelected(rows, noun, copyOne);
+	await copySelected(term, rows, noun, copyOne);
 }
 function searchFooter(limit) {
 	return `
 Showing first ${limit}; refine with flags or raise --limit.`;
 }
-async function copySelected(rows, noun, copyOne) {
-	if (!process.stdin.isTTY) throw new Error("--copy requires an interactive terminal.");
-	const selected = await checkbox({
+async function copySelected(term, rows, noun, copyOne) {
+	if (!term.interactive) throw new Error("--copy requires an interactive terminal.");
+	const selected = await term.ask.pickMany({
 		message: `Select ${noun.plural} to copy:`,
 		choices: rows.map((r) => ({
-			name: formatRow(r),
+			name: formatRow(r, term.width),
 			value: r.id
 		})),
 		pageSize: 20
 	});
 	if (selected.length === 0) {
-		console.log("Nothing selected.");
+		term.out("Nothing selected.");
 		return;
 	}
 	let copied = 0;
@@ -611,10 +941,10 @@ async function copySelected(rows, noun, copyOne) {
 	}
 	await Promise.all(Array.from({ length: Math.min(COPY_CONCURRENCY, selected.length) }, worker));
 	const summary = `Copied ${copied} ${copied === 1 ? noun.singular : noun.plural}`;
-	if (failures.length === 0) console.log(summary);
-	else console.log(`${summary}, failed ${failures.length}: ${failures.join(", ")}`);
+	if (failures.length === 0) term.out(summary);
+	else term.out(`${summary}, failed ${failures.length}: ${failures.join(", ")}`);
 }
-function formatRow(row, width = process.stdout.columns ?? 80) {
+function formatRow(row, width) {
 	const room = width - stripVTControlCharacters(row.fixedColumns).length - 2;
 	const text = room > 0 ? truncate(row.freeText, room) : "";
 	const columns = hyperlink(row.id, row.url) + row.fixedColumns.slice(row.id.length);
@@ -625,141 +955,21 @@ function truncate(text, max) {
 	return clean.length <= max ? clean : `${clean.slice(0, Math.max(0, max - 3))}...`;
 }
 //#endregion
-//#region src/util/parse.ts
-function parseIssueKey(input) {
-	const match = input.toUpperCase().match(/[A-Z][A-Z0-9]+-\d+/);
-	return match ? match[0] : null;
-}
-function parsePageId(input) {
-	const trimmed = input.trim();
-	if (/^\d+$/.test(trimmed)) return trimmed;
-	const fromPath = trimmed.match(/\/pages\/(\d+)/);
-	if (fromPath) return fromPath[1];
-	const fromQuery = trimmed.match(/[?&]pageId=(\d+)/);
-	if (fromQuery) return fromQuery[1];
-	return null;
-}
-function isExternalHref(href) {
-	return /^[a-z][a-z0-9+.-]*:\/\//i.test(href);
-}
-function resolveRepo(flag, config) {
-	if (flag) {
-		if (flag.includes("/")) {
-			const parts = flag.split("/");
-			const [workspace, repo] = parts;
-			if (parts.length !== 2 || !workspace || !repo) throw new Error(`Invalid --repo "${flag}". Expected "workspace/slug" or "slug".`);
-			return {
-				workspace,
-				repo
-			};
-		}
-		if (!config.workspace) throw new Error(`No Bitbucket workspace configured. Pass --repo workspace/slug or run \`atlass bitbucket login\`.`);
-		return {
-			workspace: config.workspace,
-			repo: flag
-		};
-	}
-	if (config.workspace && config.defaultRepo) return {
-		workspace: config.workspace,
-		repo: config.defaultRepo
-	};
-	throw new Error(`No repo given. Pass --repo workspace/slug (or a bare slug), or set a default repo at \`atlass bitbucket login\`.`);
-}
-const DEFAULT_LIMIT = 25;
-const MAX_LIMIT = 100;
-function parseLimit(value) {
-	if (!value) return DEFAULT_LIMIT;
-	const n = Number.parseInt(value, 10);
-	if (!Number.isFinite(n) || n < 1) throw new Error(`Invalid --limit "${value}".`);
-	return Math.min(n, MAX_LIMIT);
-}
-//#endregion
 //#region src/commands/bitbucket.ts
-async function bitbucketLogin() {
-	const existing = await readConfig() ?? {};
-	const email = existing.email ?? await input({
-		message: "Account email:",
-		required: true
-	});
-	const workspace = (await input({
-		message: "Bitbucket workspace (e.g. acme):",
-		required: true
-	})).trim();
-	const defaultRepo = (await input({ message: "Default repo slug (optional):" })).trim() || void 0;
-	const token = await password({
-		message: "Bitbucket API token (needs pipeline, pull request, account, and workspace read scopes):",
-		mask: true
-	});
-	const client = new AtlassianClient({
-		site: BITBUCKET_ORIGIN,
-		email,
-		token
-	});
-	const ws = await verifyWorkspace(client, workspace);
-	const uuid = await fetchCurrentUserUuid(client).catch(() => void 0);
-	await writeConfig({
-		...existing,
-		email,
-		bitbucket: {
-			workspace,
-			...defaultRepo ? { defaultRepo } : {},
-			...uuid ? { uuid } : {}
-		}
-	});
-	saveBitbucketToken(email, token);
-	console.log(`Logged in to Bitbucket workspace ${ws.name ?? workspace} as ${email}.`);
-}
-async function rememberBitbucketUuid(uuid) {
-	const config = await readConfig();
-	if (!config?.bitbucket) return;
-	await writeConfig({
-		...config,
-		bitbucket: {
-			...config.bitbucket,
-			uuid
-		}
-	});
-}
-async function bitbucketLogout() {
-	const config = await readConfig();
-	if (config?.email) deleteBitbucketToken(config.email);
-	const jiraLogin = config?.site && config.email ? {
-		site: config.site,
-		email: config.email
-	} : null;
-	if (jiraLogin) await writeConfig(jiraLogin);
-	else await clearConfig();
-	console.log("Logged out of Bitbucket. Credentials removed.");
-}
-async function bitbucketStatus() {
-	const config = await readConfig();
-	if (!config?.email || !config.bitbucket?.workspace) {
-		console.log("Not logged in to Bitbucket. Run `atlass bitbucket login`.");
-		return;
-	}
-	const hasToken = readBitbucketToken(config.email) !== null;
-	console.log(`Workspace:    ${config.bitbucket.workspace}`);
-	console.log(`Email:        ${config.email}`);
-	console.log(`Default repo: ${config.bitbucket.defaultRepo ?? "(none)"}`);
-	console.log(`Token:        ${hasToken ? "stored in keyring" : "MISSING (run `atlass bitbucket login`)"}`);
-}
-async function bitbucketPipelines(options) {
-	const auth = await requireBitbucketAuth();
-	const ref = resolveRepo(options.repo, auth);
-	const client = new AtlassianClient(auth);
+async function bitbucketPipelines({ session, term }, options) {
+	const ref = resolveRepo(options.repo, session);
 	const limit = parseLimit(options.limit);
-	printRows(pipelineRows(await withScopeHint(PIPELINE_SCOPE, () => listPipelines(client, ref, limit)), Date.now()), {
+	writeRows(term, pipelineRows(await withScopeHint(PIPELINE_SCOPE, () => listPipelines(session, ref, limit)), Date.now()), {
 		json: options.json,
 		empty: "No pipelines found."
 	});
 }
-async function bitbucketPipeline(arg, options) {
+async function bitbucketPipeline({ session, term }, arg, options) {
 	const buildNumber = parseBuildNumber(arg);
-	const auth = await requireBitbucketAuth();
-	const ref = resolveRepo(options.repo, auth);
-	const client = new AtlassianClient(auth);
-	const detail = await withScopeHint(PIPELINE_SCOPE, () => getPipeline(client, ref, buildNumber));
-	printPipelineDetail(detail, await withScopeHint(PIPELINE_SCOPE, () => listSteps(client, ref, detail.uuid)), Date.now());
+	const ref = resolveRepo(options.repo, session);
+	const detail = await withScopeHint(PIPELINE_SCOPE, () => getPipeline(session, ref, buildNumber));
+	const steps = await withScopeHint(PIPELINE_SCOPE, () => listSteps(session, ref, detail.uuid));
+	term.out(formatPipelineDetail(detail, steps, Date.now()));
 }
 function pipelineRows(pipelines, nowMs) {
 	return alignedRows(pipelines, nowMs, (p) => ({
@@ -798,33 +1008,26 @@ function formatStepRows(steps) {
 	const ws = Math.max(...rows.map((r) => r.status.length));
 	return rows.map((r) => `  ${r.name.padEnd(wn)}  ${r.status.padEnd(ws)}  ${r.dur}`);
 }
-function printPipelineDetail(detail, steps, nowMs) {
-	console.log(`Pipeline #${detail.buildNumber}  ${detail.status || "-"}`);
-	if (detail.repo) console.log(`Repo:     ${detail.repo}`);
-	console.log(`Ref:      ${refWithCommit(detail)}`);
-	if (detail.trigger) console.log(`Trigger:  ${detail.trigger}`);
-	console.log(`Duration: ${formatDuration(detail.durationSeconds)}`);
+function formatPipelineDetail(detail, steps, nowMs) {
 	const by = detail.creator ? ` by ${detail.creator}` : "";
-	console.log(`Created:  ${relativeTime(detail.createdOn, nowMs)}${by}`);
-	if (steps.length > 0) {
-		console.log("");
-		console.log("Steps:");
-		for (const line of formatStepRows(steps)) console.log(line);
-	}
+	return [
+		`Pipeline #${detail.buildNumber}  ${detail.status || "-"}`,
+		...detail.repo ? [`Repo:     ${detail.repo}`] : [],
+		`Ref:      ${refWithCommit(detail)}`,
+		...detail.trigger ? [`Trigger:  ${detail.trigger}`] : [],
+		`Duration: ${formatDuration(detail.durationSeconds)}`,
+		`Created:  ${relativeTime(detail.createdOn, nowMs)}${by}`,
+		...steps.length > 0 ? [
+			"",
+			"Steps:",
+			...formatStepRows(steps)
+		] : []
+	];
 }
 function refWithCommit(pipeline) {
 	if (!pipeline.ref) return pipeline.commit || "-";
 	return pipeline.commit ? `${pipeline.ref} (${pipeline.commit})` : pipeline.ref;
 }
-async function verifyWorkspace(client, workspace) {
-	try {
-		return await client.getJson(`/2.0/workspaces/${encodeURIComponent(workspace)}`);
-	} catch (err) {
-		if (err instanceof HttpError && (err.status === 401 || err.status === 403)) throw new Error(`Could not verify Bitbucket workspace "${workspace}" (401/403). Check the token and that it has workspace read + read:pipeline:bitbucket scopes.`);
-		if (err instanceof HttpError && err.status === 404) throw new Error(`Bitbucket workspace "${workspace}" not found (404). Check the slug.`);
-		throw err;
-	}
-}
 function parseBuildNumber(arg) {
 	const raw = (arg ?? "").replace(/^#/, "").trim();
 	if (!/^\d+$/.test(raw)) throw new Error(`Invalid pipeline number "${arg ?? ""}". Expected a build number, e.g. 123.`);
@@ -843,23 +1046,21 @@ async function withScopeHint(scope, fn) {
 //#region src/commands/bitbucket-prs.ts
 const PULL_REQUEST_SCOPE = "read:pullrequest:bitbucket";
 const ACCOUNT_SCOPE = "read:account";
-async function bitbucketPrs(options) {
+async function bitbucketPrs({ session, term, profile }, options) {
 	if (options.query && (options.author || options.reviewer)) throw new Error("--query cannot be combined with --author or --reviewer.");
 	const states = pullRequestStates(options);
-	const auth = await requireBitbucketAuth();
-	const ref = resolveRepo(options.repo, auth);
-	const client = new AtlassianClient(auth);
+	const ref = resolveRepo(options.repo, session);
 	const limit = parseLimit(options.limit);
 	const query = pullRequestQuery({
-		...await resolvePrincipals(client, auth, options),
+		...await resolvePrincipals(session, profile, options),
 		query: options.query
 	});
-	const prs = await withScopeHint(PULL_REQUEST_SCOPE, () => listPullRequests(client, ref, {
+	const prs = await withScopeHint(PULL_REQUEST_SCOPE, () => listPullRequests(session, ref, {
 		limit,
 		states,
 		query
 	}));
-	printRows(pullRequestRows(prs, Date.now()), {
+	writeRows(term, pullRequestRows(prs, Date.now()), {
 		json: options.json,
 		empty: emptyMessage(options),
 		footer: prs.length === limit ? searchFooter(limit) : void 0
@@ -883,8 +1084,8 @@ function pullRequestRows(prs, nowMs) {
 		};
 	});
 }
-async function resolvePrincipals(client, auth, options) {
-	const mine = isMe(options.author) || isMe(options.reviewer) ? await currentUuid(client, auth) : void 0;
+async function resolvePrincipals(session, profile, options) {
+	const mine = isMe(options.author) || isMe(options.reviewer) ? await currentUuid(session, profile) : void 0;
 	return {
 		author: isMe(options.author) ? mine : options.author,
 		reviewer: isMe(options.reviewer) ? mine : options.reviewer
@@ -893,10 +1094,10 @@ async function resolvePrincipals(client, auth, options) {
 function isMe(value) {
 	return value?.toLowerCase() === "me";
 }
-async function currentUuid(client, auth) {
-	if (auth.uuid) return auth.uuid;
-	const uuid = await withScopeHint(ACCOUNT_SCOPE, () => fetchCurrentUserUuid(client));
-	await rememberBitbucketUuid(uuid);
+async function currentUuid(session, profile) {
+	if (session.uuid) return session.uuid;
+	const uuid = await withScopeHint(ACCOUNT_SCOPE, () => fetchCurrentUserUuid(session));
+	await rememberBitbucketUuid(profile, uuid);
 	return uuid;
 }
 function emptyMessage(options) {
@@ -906,12 +1107,12 @@ function emptyMessage(options) {
 //#region src/cli/bitbucket.ts
 function registerBitbucket(bitbucket) {
 	bitbucket.description("Bitbucket commands");
-	bitbucket.command("login").description("Store Bitbucket workspace and API token").action(run(bitbucketLogin));
-	bitbucket.command("logout").description("Remove stored Bitbucket credentials").action(run(bitbucketLogout));
-	bitbucket.command("status").description("Show the current Bitbucket login").action(run(bitbucketStatus));
-	bitbucket.command("pipelines").description("List recent pipeline runs for a repo").option("-r, --repo <repo>", "workspace/slug, or a bare slug (defaults to config)").option("-l, --limit <n>", "max results (default 25, max 100)").option("--json", "output results as JSON").action(run(bitbucketPipelines));
-	bitbucket.command("prs").description("List pull requests for a repo").option("-r, --repo <repo>", "workspace/slug, or a bare slug (defaults to config)").option("-s, --state <state...>", "open, merged, declined, or superseded").option("--all", "include every state").option("-a, --author <who>", "limit to an author ('me', an account id, or a uuid)").option("--reviewer <who>", "limit to a reviewer ('me', an account id, or a uuid)").option("-q, --query <bbql>", "raw Bitbucket query (not for use with --author or --reviewer)").option("-l, --limit <n>", "max results (default 25, max 100)").option("--json", "output results as JSON").action(run(bitbucketPrs));
-	bitbucket.command("pipeline <number>").description("Show one pipeline run and its steps").option("-r, --repo <repo>", "workspace/slug, or a bare slug (defaults to config)").action(run(bitbucketPipeline));
+	bitbucket.command("login").description("Store Bitbucket workspace and API token").action(bareAction(bitbucketLogin));
+	bitbucket.command("logout").description("Remove stored Bitbucket credentials").action(bareAction(bitbucketLogout));
+	bitbucket.command("status").description("Show the current Bitbucket login").action(bareAction(bitbucketStatus));
+	bitbucket.command("pipelines").description("List recent pipeline runs for a repo").option("-r, --repo <repo>", "workspace/slug, or a bare slug (defaults to config)").option("-l, --limit <n>", "max results (default 25, max 100)").option("--json", "output results as JSON").action(bitbucketAction(bitbucketPipelines));
+	bitbucket.command("prs").description("List pull requests for a repo").option("-r, --repo <repo>", "workspace/slug, or a bare slug (defaults to config)").option("-s, --state <state...>", "open, merged, declined, or superseded").option("--all", "include every state").option("-a, --author <who>", "limit to an author ('me', an account id, or a uuid)").option("--reviewer <who>", "limit to a reviewer ('me', an account id, or a uuid)").option("-q, --query <bbql>", "raw Bitbucket query (not for use with --author or --reviewer)").option("-l, --limit <n>", "max results (default 25, max 100)").option("--json", "output results as JSON").action(bitbucketAction(bitbucketPrs));
+	bitbucket.command("pipeline <number>").description("Show one pipeline run and its steps").option("-r, --repo <repo>", "workspace/slug, or a bare slug (defaults to config)").action(bitbucketAction(bitbucketPipeline));
 	return bitbucket;
 }
 //#endregion
@@ -1303,9 +1504,10 @@ function cqlStringLiteral(value) {
 }
 //#endregion
 //#region src/commands/resolve-ref.ts
-async function resolveRef(arg, kind) {
-	const raw = arg ?? await input({
+async function resolveRef(ask, arg, kind) {
+	const raw = arg ?? await ask.text({
 		message: kind.message,
+		flag: kind.flag,
 		required: true
 	});
 	const ref = kind.parse(raw);
@@ -1368,7 +1570,6 @@ function applyMarks(text, marks) {
 			if (typeof value === "string") href = value;
 			break;
 		}
-		default: break;
 	}
 	if (href) out = `[${out}](${href})`;
 	return out;
@@ -1446,7 +1647,8 @@ const PANEL_LABELS = {
 	error: "Error"
 };
 function renderPanel(node, ctx, indent) {
-	return prefixLines(`**${PANEL_LABELS[typeof node.attrs?.["panelType"] === "string" ? node.attrs["panelType"] : "info"] ?? "Note"}**\n\n${renderBlocks(node.content ?? [], ctx, "")}`, `${indent}> `);
+	const type = typeof node.attrs?.["panelType"] === "string" ? node.attrs["panelType"] : "info";
+	return prefixLines(`**${PANEL_LABELS[type] ?? "Note"}**\n\n${renderBlocks(node.content ?? [], ctx, "")}`, `${indent}> `);
 }
 function renderExpand(node, ctx, indent) {
 	return `${indent}<details><summary>${typeof node.attrs?.["title"] === "string" ? node.attrs["title"] : "Details"}</summary>\n\n${renderBlocks(node.content ?? [], ctx, "")}\n\n${indent}</details>`;
@@ -1732,9 +1934,10 @@ function scalarString(value) {
 }
 function frontmatter(fields) {
 	const lines = ["---"];
-	for (const [key, value] of Object.entries(fields)) if (Array.isArray(value)) if (value.length === 0) lines.push(`${key}: []`);
-	else lines.push(`${key}:`, ...value.map((v) => `  - ${quote(v)}`));
-	else if (typeof value === "number") lines.push(`${key}: ${value}`);
+	for (const [key, value] of Object.entries(fields)) if (Array.isArray(value)) {
+		if (value.length === 0) lines.push(`${key}: []`);
+		else lines.push(`${key}:`, ...value.map((v) => `  - ${quote(v)}`));
+	} else if (typeof value === "number") lines.push(`${key}: ${value}`);
 	else lines.push(`${key}: ${quote(value)}`);
 	lines.push("---");
 	return lines.join("\n");
@@ -1780,21 +1983,23 @@ function leadingH1(lines) {
 }
 function commentsSection(comments) {
 	if (comments.length === 0) return "";
+	const blocks = comments.map((c) => {
+		const heading = `### ${c.author || "Unknown"}${c.created ? ` - ${formatDateTime(c.created)}` : ""}`;
+		return c.body ? `${heading}\n\n${c.body}` : heading;
+	});
 	return [
 		COMMENTS_HEADING,
 		"",
-		comments.map((c) => {
-			const heading = `### ${c.author || "Unknown"}${c.created ? ` - ${formatDateTime(c.created)}` : ""}`;
-			return c.body ? `${heading}\n\n${c.body}` : heading;
-		}).join("\n\n")
+		blocks.join("\n\n")
 	].join("\n");
 }
 function attachmentsSection(attachments) {
 	if (attachments.length === 0) return "";
+	const items = attachments.map((a) => `- [${a.filename}](${a.relativePath})`);
 	return [
 		ATTACHMENTS_HEADING,
 		"",
-		...attachments.map((a) => `- [${a.filename}](${a.relativePath})`)
+		...items
 	].join("\n");
 }
 //#endregion
@@ -1859,7 +2064,6 @@ function planCopy(source, out) {
 	return {
 		...content,
 		filePath: target.filePath,
-		assetsDir: target.assetsDir,
 		downloads: planDownloads(attachments, target)
 	};
 }
@@ -1905,21 +2109,18 @@ function numberedName(name, suffix) {
 }
 //#endregion
 //#region src/copy/run.ts
-async function runCopy(plan, fetchBytes) {
-	const landed = await download(plan, fetchBytes);
-	await mkdir(dirname(plan.filePath), { recursive: true });
-	await writeFile(plan.filePath, renderCopy(plan, landed), "utf8");
-	console.log(wroteLine(plan.filePath, landed.length));
-}
-async function download(plan, fetchBytes) {
-	if (plan.downloads.length === 0) return [];
-	await mkdir(plan.assetsDir, { recursive: true });
+async function runCopy(env, plan) {
+	const landed = await download(env, plan);
+	await env.files.writeText(plan.filePath, renderCopy(plan, landed));
+	env.term.out(wroteLine(plan.filePath, landed.length));
+}
+async function download({ term, files, session }, plan) {
 	const landed = [];
 	for (const { path, ...attachment } of plan.downloads) try {
-		await writeFile(path, await fetchBytes(attachment.url));
+		await files.writeBytes(path, await session.getBinary(attachment.url));
 		landed.push(attachment);
 	} catch (err) {
-		console.warn(`  ! could not download ${attachment.filename}: ${err.message}`);
+		term.err(`  ! could not download ${attachment.filename}: ${err.message}`);
 	}
 	return landed;
 }
@@ -2136,80 +2337,31 @@ function withUploadedId(node, ids) {
 }
 //#endregion
 //#region src/update/run.ts
-async function runPlan(plan, options, push) {
+async function runPlan(term, plan, options, push) {
 	if (options.dryRun) {
-		for (const line of formatPlan(plan)) console.log(line);
+		term.out(formatPlan(plan));
 		return;
 	}
 	const verdict = plan.verdict;
 	if (verdict.kind === "refuse") throw new Error(verdict.message);
 	if (verdict.kind === "confirm") {
-		if (!await confirm({
+		if (!await term.ask.confirm({
 			message: verdict.message,
+			flag: "--force",
 			default: false
 		})) {
-			console.log("Aborted.");
+			term.out("Aborted.");
 			return;
 		}
 	}
 	await push();
 }
 //#endregion
-//#region src/util/pager.ts
-const DEFAULT_ROWS = 24;
-const DEFAULT_COLUMNS = 80;
-const DEFAULT_PAGER = "less";
-const DEFAULT_LESS = "FRX";
-function renderedHeight(text, columns) {
-	const width = Math.max(1, columns);
-	return text.split("\n").map((line) => Math.max(1, Math.ceil(stripVTControlCharacters(line).length / width))).reduce((sum, rows) => sum + rows, 0);
-}
-function shouldPage(text, term) {
-	if (!term.isTTY) return false;
-	const rows = term.rows ?? DEFAULT_ROWS;
-	return renderedHeight(text, term.columns ?? DEFAULT_COLUMNS) > rows;
-}
-function pagerCommand(env) {
-	const [command = DEFAULT_PAGER, ...args] = (env["PAGER"] ?? "").trim().split(/\s+/).filter(Boolean);
-	return {
-		command,
-		args,
-		env: {
-			...env,
-			LESS: env["LESS"] ?? DEFAULT_LESS
-		}
-	};
-}
-async function printPaged(text, options = {}) {
-	const term = options.term ?? process.stdout;
-	if (options.pager === false || !shouldPage(text, term)) {
-		console.log(text);
-		return;
-	}
-	if (!await pipeToPager(text, pagerCommand(options.env ?? process.env))) console.log(text);
-}
-function pipeToPager(text, pager) {
-	return new Promise((resolve) => {
-		const child = spawn(pager.command, pager.args, {
-			stdio: [
-				"pipe",
-				"inherit",
-				"inherit"
-			],
-			env: pager.env
-		});
-		child.once("error", () => resolve(false));
-		child.once("close", () => resolve(true));
-		child.stdin.once("error", () => {});
-		child.stdin.end(`${text}\n`);
-	});
-}
-//#endregion
 //#region src/commands/confluence.ts
-async function confluenceView(arg, options) {
-	const auth = await requireAuth();
-	const id = await resolveRef(arg, PAGE_REF);
-	await printPaged(formatPageView(await fetchPage(new AtlassianClient(auth), auth.site, id), Date.now(), options.allComments ?? false).join("\n"), { pager: options.pager });
+async function confluenceView({ session, term }, arg, options) {
+	const id = await resolveRef(term.ask, arg, PAGE_REF);
+	const lines = formatPageView(await fetchPage(session, session.site, id), Date.now(), options.allComments ?? false);
+	await term.page(lines.join("\n"), { pager: options.pager });
 }
 function formatPageView(page, nowMs, allComments) {
 	return [
@@ -2228,37 +2380,35 @@ function formatPageView(page, nowMs, allComments) {
 		...attachmentSection(page.attachments)
 	];
 }
-async function confluenceCopy(arg, options) {
-	const auth = await requireAuth();
-	const id = await resolveRef(arg, PAGE_REF);
-	await copyPage(new AtlassianClient(auth), auth.site, id, options.out);
+async function confluenceCopy(env, arg, options) {
+	await copyPage(env, await resolveRef(env.term.ask, arg, PAGE_REF), options.out);
 }
-async function confluenceUpdate(arg, options) {
-	const file = arg ?? await input({
+async function confluenceUpdate({ session, term, files }, arg, options) {
+	const file = arg ?? await term.ask.text({
 		message: "Path to the page Markdown file:",
+		flag: "[file]",
 		required: true
 	});
-	const src = parsePageSource(await readFile(file, "utf8"));
-	const client = new AtlassianClient(await requireAuth());
-	const state = await fetchPageState(client, src.id);
-	const plan = planPageUpdate(src, state, await listAttachments(client, src.id), await statLocalImages(dirname(resolve(file)), src.body), options);
-	await runPlan(plan, options, async () => {
+	const src = parsePageSource(await files.readText(file));
+	const state = await fetchPageState(session, src.id);
+	const plan = planPageUpdate(src, state, await listAttachments(session, src.id), await statLocalImages(files, dirname(resolve(file)), src.body), options);
+	await runPlan(term, plan, options, async () => {
 		const ids = /* @__PURE__ */ new Map();
 		for (const upload of plan.uploads) {
-			console.log(`Uploading ${upload.filename} ...`);
-			const bytes = await readFile(upload.path);
-			ids.set(upload.href, await uploadAttachment(client, src.id, upload.filename, bytes));
+			term.err(`Uploading ${upload.filename} ...`);
+			const bytes = await files.readBytes(upload.path);
+			ids.set(upload.href, await uploadAttachment(session, src.id, upload.filename, bytes));
 		}
-		const version = await updatePage(client, src.id, {
+		const version = await updatePage(session, src.id, {
 			title: plan.headline.next,
 			nextVersion: state.version + 1,
 			body: withUploadedIds(plan.body, ids),
 			message: options.message ?? "Updated via atlass"
 		});
-		console.log(`Updated page ${src.id} to version ${version}.`);
+		term.out(`Updated page ${src.id} to version ${version}.`);
 	});
 }
-async function statLocalImages(dir, md) {
+async function statLocalImages(files, dir, md) {
 	const hrefs = imageHrefs(md).filter((href) => !isExternalHref(href));
 	return Promise.all(hrefs.map(async (href) => {
 		const path = isAbsolute(href) ? href : resolve(dir, href);
@@ -2266,47 +2416,46 @@ async function statLocalImages(dir, md) {
 			href,
 			path,
 			filename: basename(path),
-			...await fileSize(path)
+			...await fileSize(files, path)
 		};
 	}));
 }
-async function fileSize(path) {
+async function fileSize(files, path) {
 	try {
-		return { size: (await stat(path)).size };
+		return { size: await files.size(path) };
 	} catch {
 		return {};
 	}
 }
-async function confluenceSearch(query, options) {
+async function confluenceSearch(env, query, options) {
 	if (options.cql && (query || options.space)) throw new Error("--cql cannot be combined with a text query or --space.");
-	await listPages({
+	await listPages(env, {
 		text: query,
 		space: options.space,
 		cql: options.cql
 	}, "No matching pages.", options);
 }
-async function confluenceList(options) {
-	await listPages({
+async function confluenceList(env, options) {
+	await listPages(env, {
 		starred: true,
 		space: options.space
 	}, options.space ? `No starred pages in ${options.space}.` : "No starred pages.", options);
 }
-async function listPages(filter, empty, options) {
+async function listPages(env, filter, empty, options) {
+	const { session, term } = env;
 	if (options.json && options.copy) throw new Error("--json and --copy cannot be used together.");
-	const auth = await requireAuth();
-	const client = new AtlassianClient(auth);
 	const limit = parseLimit(options.limit);
-	const { pages, hasMore } = await searchPages(client, auth.site, {
+	const { pages, hasMore } = await searchPages(session, session.site, {
 		...filter,
 		limit
 	});
-	await runSearch(formatPageRows(pages, Date.now()), {
+	await runSearch(term, formatPageRows(pages, Date.now()), {
 		json: options.json,
 		copy: options.copy,
 		out: options.out,
 		empty,
 		footer: hasMore ? searchFooter(limit) : void 0
-	}, PAGE_NOUN, (id) => copyPage(client, auth.site, id, options.out));
+	}, PAGE_NOUN, (id) => copyPage(env, id, options.out));
 }
 function formatPageRows(pages, nowMs) {
 	return alignedRows(pages, nowMs, (p) => ({
@@ -2334,12 +2483,13 @@ const PAGE_NOUN = {
 	singular: "page",
 	plural: "pages"
 };
-async function copyPage(client, site, id, out) {
-	console.log(`Fetching page ${id} ...`);
-	await runCopy(planPageCopy(await fetchPage(client, site, id), out), (url) => client.getBinary(url));
+async function copyPage(env, id, out) {
+	env.term.err(`Fetching page ${id} ...`);
+	await runCopy(env, planPageCopy(await fetchPage(env.session, env.session.site, id), out));
 }
 const PAGE_REF = {
 	message: "Confluence page id or URL:",
+	flag: "[page]",
 	parse: parsePageId,
 	notFound: (raw) => `Could not find a page id in "${raw}".`
 };
@@ -2347,11 +2497,11 @@ const PAGE_REF = {
 //#region src/cli/confluence.ts
 function registerConfluence(confluence) {
 	confluence.description("Confluence commands");
-	confluence.command("view [page]").description("Show a Confluence page (id or URL) in the terminal").option("--all-comments", "show all comments instead of the last 5").option("--no-pager", "print directly instead of paging long output").action(run(confluenceView));
-	confluence.command("copy [page]").description("Copy a Confluence page (id or URL) to a Markdown file").option("-o, --out <path>", "output file or directory").action(run(confluenceCopy));
-	confluence.command("update [file]").description("Update a Confluence page from an edited Markdown file").option("--title", "also push the H1 as the page title").option("-m, --message <text>", "version message (default 'Updated via atlass')").option("-f, --force", "skip the stale-version and data-loss checks").option("--dry-run", "show what would change without writing").action(run(confluenceUpdate));
-	confluence.command("list").description("List pages you starred").option("-s, --space <key>", "limit to a space").option("-l, --limit <n>", "max results (default 25, max 100)").option("--json", "output results as JSON").option("-c, --copy", "pick results to copy to Markdown").option("-o, --out <dir>", "output directory for --copy").action(run(confluenceList));
-	confluence.command("search [query]").description("Search Confluence pages (text query, --space, or --cql)").option("-s, --space <key>", "limit to a space").option("--cql <cql>", "raw CQL query (ignores other filters)").option("-l, --limit <n>", "max results (default 25, max 100)").option("--json", "output results as JSON").option("-c, --copy", "pick results to copy to Markdown").option("-o, --out <dir>", "output directory for --copy").action(run(confluenceSearch));
+	confluence.command("view [page]").description("Show a Confluence page (id or URL) in the terminal").option("--all-comments", "show all comments instead of the last 5").option("--no-pager", "print directly instead of paging long output").action(jiraAction(confluenceView));
+	confluence.command("copy [page]").description("Copy a Confluence page (id or URL) to a Markdown file").option("-o, --out <path>", "output file or directory").action(jiraAction(confluenceCopy));
+	confluence.command("update [file]").description("Update a Confluence page from an edited Markdown file").option("--title", "also push the H1 as the page title").option("-m, --message <text>", "version message (default 'Updated via atlass')").option("-f, --force", "skip the stale-version and data-loss checks").option("--dry-run", "show what would change without writing").action(jiraAction(confluenceUpdate));
+	confluence.command("list").description("List pages you starred").option("-s, --space <key>", "limit to a space").option("-l, --limit <n>", "max results (default 25, max 100)").option("--json", "output results as JSON").option("-c, --copy", "pick results to copy to Markdown").option("-o, --out <dir>", "output directory for --copy").action(jiraAction(confluenceList));
+	confluence.command("search [query]").description("Search Confluence pages (text query, --space, or --cql)").option("-s, --space <key>", "limit to a space").option("--cql <cql>", "raw CQL query (ignores other filters)").option("-l, --limit <n>", "max results (default 25, max 100)").option("--json", "output results as JSON").option("-c, --copy", "pick results to copy to Markdown").option("-o, --out <dir>", "output directory for --copy").action(jiraAction(confluenceSearch));
 	return confluence;
 }
 //#endregion
@@ -2462,10 +2612,10 @@ function projectSearchQuery(query, startAt) {
 }
 //#endregion
 //#region src/commands/jira-create-resolve.ts
-async function resolveProject(client, site, arg, strict) {
+async function resolveProject(ask, client, site, arg, strict) {
 	if (arg) return arg.toUpperCase();
 	if (strict) throw new Error("A project key is required, e.g. `jira create BSC Bug --summary ...`.");
-	return search({
+	return ask.searchPick({
 		message: "Project:",
 		source: async (term) => (await listProjects(client, site, term)).map((p) => ({
 			name: `${p.key}  ${p.name}`,
@@ -2474,7 +2624,7 @@ async function resolveProject(client, site, arg, strict) {
 		pageSize: 15
 	});
 }
-async function resolveType(project, types, arg, strict) {
+async function resolveType(ask, project, types, arg, strict) {
 	if (types.length === 0) throw new Error(`You cannot create issues in ${project}.`);
 	if (arg) {
 		const found = matchType(types, arg);
@@ -2483,7 +2633,7 @@ async function resolveType(project, types, arg, strict) {
 		throw new Error(`${project} has no issue type "${arg}"; available: ${names}.`);
 	}
 	if (strict) throw new Error(`An issue type is required; ${project} has: ${types.map((t) => t.name).join(", ")}.`);
-	return select({
+	return ask.pick({
 		message: "Issue type:",
 		choices: types.map((t) => ({
 			name: t.name,
@@ -2548,7 +2698,7 @@ function matchCascading(field, value) {
 }
 //#endregion
 //#region src/create/encode.ts
-const SERVER_FILLED = new Set([
+const SERVER_FILLED = /* @__PURE__ */ new Set([
 	"project",
 	"issuetype",
 	"reporter"
@@ -2628,7 +2778,7 @@ async function encodeField(field, values, resolveUser) {
 }
 const DATE = /^\d{4}-\d{2}-\d{2}$/;
 const DATETIME = /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}(?::\d{2}(?:\.\d+)?)?(?:Z|[+-]\d{2}:?\d{2})?$/i;
-const NAMED_TYPES = new Set([
+const NAMED_TYPES = /* @__PURE__ */ new Set([
 	"priority",
 	"version",
 	"component",
@@ -2809,16 +2959,16 @@ function formatIssueTypeRows(types) {
 //#endregion
 //#region src/create/prompt.ts
 const PROMPT_SOURCE = "prompt";
-async function walkFields(meta, deps) {
+async function walkFields(ask, meta, deps) {
 	const firstPass = meta.filter((f) => f.required && !SERVER_FILLED.has(f.fieldId));
 	const inputs = [];
 	for (const field of firstPass) {
-		const answer = await promptField(field, deps, true);
+		const answer = await promptField(ask, field, deps, true);
 		if (answer) inputs.push(answer);
 	}
 	const optional = meta.filter((f) => !firstPass.includes(f) && !SERVER_FILLED.has(f.fieldId));
 	if (optional.length === 0) return inputs;
-	const chosen = await checkbox({
+	const chosen = await ask.pickMany({
 		message: "Set any optional fields?",
 		choices: optional.map((f) => ({
 			name: `${f.name}  (${fieldTypeLabel(f.schema)})`,
@@ -2827,13 +2977,13 @@ async function walkFields(meta, deps) {
 		pageSize: 15
 	});
 	for (const field of optional.filter((f) => chosen.includes(f.fieldId))) {
-		const answer = await promptField(field, deps, false);
+		const answer = await promptField(ask, field, deps, false);
 		if (answer) inputs.push(answer);
 	}
 	return inputs;
 }
-async function promptField(field, deps, required) {
-	const answer = await askValues(field, deps, required);
+async function promptField(ask, field, deps, required) {
+	const answer = await askValues(ask, field, deps, required);
 	if (answer.values.length === 0) return void 0;
 	return {
 		name: field.fieldId,
@@ -2846,14 +2996,14 @@ const SKIP = {
 	name: "(skip)",
 	value: ""
 };
-async function askValues(field, deps, required) {
+async function askValues(ask, field, deps, required) {
 	const { schema } = field;
 	const message = `${field.name}:`;
 	const options = field.allowedValues ?? [];
-	if (schema.type === "option-with-child") return askCascading(field, required);
+	if (schema.type === "option-with-child") return askCascading(ask, field, required);
 	if (options.length > 0 && schema.type === "array") {
 		const defaults = new Set(defaultIds(field));
-		return { values: await checkbox({
+		return { values: await ask.pickMany({
 			message,
 			choices: options.map((v) => ({
 				...choice(v),
@@ -2865,7 +3015,7 @@ async function askValues(field, deps, required) {
 	}
 	if (options.length > 0) {
 		const choices = options.map(choice);
-		const picked = await select({
+		const picked = await ask.pick({
 			message,
 			choices: required ? choices : [SKIP, ...choices],
 			default: defaultIds(field)[0],
@@ -2873,9 +3023,9 @@ async function askValues(field, deps, required) {
 		});
 		return { values: picked ? [picked] : [] };
 	}
-	if (schema.type === "user") return askUser(field, deps, required);
+	if (schema.type === "user") return askUser(ask, field, deps, required);
 	if (isMultiLine(schema)) {
-		const text = await editor({
+		const text = await ask.edit({
 			message: `${field.name} (opens your editor, Markdown):`,
 			postfix: ".md",
 			default: primitiveDefault(field),
@@ -2884,7 +3034,7 @@ async function askValues(field, deps, required) {
 		return { values: text.trim() ? [text] : [] };
 	}
 	const hint = inputHint(field);
-	const text = await input({
+	const text = await ask.text({
 		message: hint ? `${field.name} (${hint}):` : message,
 		default: primitiveDefault(field),
 		validate: async (v) => {
@@ -2922,10 +3072,10 @@ function primitiveDefault(field) {
 	if (!field.hasDefaultValue || d == null) return void 0;
 	return typeof d === "string" || typeof d === "number" ? String(d) : void 0;
 }
-async function askCascading(field, required) {
+async function askCascading(ask, field, required) {
 	const options = field.allowedValues ?? [];
 	const parentChoices = options.map(choice);
-	const parentId = await select({
+	const parentId = await ask.pick({
 		message: `${field.name}:`,
 		choices: required ? parentChoices : [SKIP, ...parentChoices],
 		pageSize: 15
@@ -2934,7 +3084,7 @@ async function askCascading(field, required) {
 	const parent = options.find((v) => v.id === parentId);
 	const children = parent?.children ?? [];
 	if (children.length === 0) return { values: [parentId] };
-	const childId = await select({
+	const childId = await ask.pick({
 		message: `${field.name} > ${allowedLabel(parent)}:`,
 		choices: [{
 			name: "(none)",
@@ -2952,10 +3102,10 @@ const UNASSIGNED = {
 	name: "(unassigned)",
 	value: ""
 };
-async function askUser(field, deps, required) {
+async function askUser(ask, field, deps, required) {
 	const fixed = required ? [ME] : [ME, UNASSIGNED];
 	const seen = /* @__PURE__ */ new Map();
-	const picked = await search({
+	const picked = await ask.searchPick({
 		message: `${field.name} (type to search):`,
 		source: async (term) => {
 			if (!term) return fixed;
@@ -2997,7 +3147,7 @@ function summarizeText(text) {
 }
 //#endregion
 //#region src/commands/jira-create.ts
-async function flagInputs(options) {
+async function flagInputs(files, options) {
 	const inputs = [];
 	const one = (name, value, source) => {
 		if (value !== void 0) inputs.push({
@@ -3010,7 +3160,7 @@ async function flagInputs(options) {
 	one("description", options.description, "--description");
 	if (options.descriptionFile !== void 0) {
 		if (options.description !== void 0) throw new Error("--description and --description-file cannot be used together.");
-		one("description", await readFile(options.descriptionFile, "utf8"), "--description-file");
+		one("description", await files.readText(options.descriptionFile), "--description-file");
 	}
 	one("assignee", options.assignee, "--assignee");
 	one("priority", options.priority, "--priority");
@@ -3037,17 +3187,16 @@ function parseFieldFlag(raw) {
 		source: "--field"
 	};
 }
-async function jiraCreate(projectArg, typeArg, options) {
-	const inputs = await flagInputs(options);
-	const strict = inputs.length > 0 || options.input === false || !process.stdin.isTTY;
-	const auth = await requireAuth();
-	const client = new AtlassianClient(auth);
-	const project = await resolveProject(client, auth.site, projectArg, strict);
-	const type = await resolveType(project, await fetchCreateIssueTypes(client, project), typeArg, strict);
-	const meta = await fetchCreateFields(client, project, type.id);
-	const resolveUser = userResolver(client, project);
-	if (!strict) inputs.push(...await walkFields(meta, {
-		searchUsers: (query) => searchAssignableUsers(client, project, query),
+async function jiraCreate({ session, term, files }, projectArg, typeArg, options) {
+	const inputs = await flagInputs(files, options);
+	const strict = inputs.length > 0 || !term.interactive;
+	const project = await resolveProject(term.ask, session, session.site, projectArg, strict);
+	const types = await fetchCreateIssueTypes(session, project);
+	const type = await resolveType(term.ask, project, types, typeArg, strict);
+	const meta = await fetchCreateFields(session, project, type.id);
+	const resolveUser = userResolver(session, project);
+	if (!strict) inputs.push(...await walkFields(term.ask, meta, {
+		searchUsers: (query) => searchAssignableUsers(session, project, query),
 		validate: async (field, value) => {
 			return (await encodeCreate([field], [{
 				name: field.fieldId,
@@ -3065,23 +3214,23 @@ async function jiraCreate(projectArg, typeArg, options) {
 		...result.fields
 	};
 	if (options.dryRun) {
-		console.log(JSON.stringify({ fields }, null, 2));
+		term.json({ fields });
 		return;
 	}
 	if (!strict) {
-		for (const line of formatReview(meta, inputs)) console.log(line);
-		if (!await confirm({
+		term.out(formatReview(meta, inputs));
+		if (!await term.ask.confirm({
 			message: `Create ${project} ${type.name}?`,
 			default: true
 		})) {
-			console.log("Aborted.");
+			term.out("Aborted.");
 			return;
 		}
 	}
 	try {
-		const created = await createIssue(client, auth.site, fields);
-		if (options.json) console.log(JSON.stringify(created, null, 2));
-		else console.log(`Created ${created.key}  ${created.url}`);
+		const created = await createIssue(session, session.site, fields);
+		if (options.json) term.json(created);
+		else term.out(`Created ${created.key}  ${created.url}`);
 	} catch (err) {
 		throw describeRejection(err, meta);
 	}
@@ -3107,19 +3256,18 @@ function describeRejection(err, meta) {
 		...perField
 	].join("\n"));
 }
-async function jiraFields(projectArg, typeArg, options) {
-	const client = new AtlassianClient(await requireAuth());
+async function jiraFields({ session, term }, projectArg, typeArg, options) {
 	const project = projectArg.toUpperCase();
-	const types = await fetchCreateIssueTypes(client, project);
+	const types = await fetchCreateIssueTypes(session, project);
 	if (!typeArg) {
-		if (options.json) console.log(JSON.stringify(types, null, 2));
-		else if (types.length === 0) console.log(`You cannot create issues in ${project}.`);
-		else for (const line of formatIssueTypeRows(types)) console.log(line);
+		if (options.json) term.json(types);
+		else if (types.length === 0) term.out(`You cannot create issues in ${project}.`);
+		else term.out(formatIssueTypeRows(types));
 		return;
 	}
-	const fields = await fetchCreateFields(client, project, (await resolveType(project, types, typeArg, true)).id);
-	if (options.json) console.log(JSON.stringify(fields, null, 2));
-	else for (const line of formatFieldRows(fields)) console.log(line);
+	const fields = await fetchCreateFields(session, project, (await resolveType(term.ask, project, types, typeArg, true)).id);
+	if (options.json) term.json(fields);
+	else term.out(formatFieldRows(fields));
 }
 //#endregion
 //#region src/api/jira-search.ts
@@ -3295,47 +3443,34 @@ function dedupeAndSortStatuses(statuses) {
 }
 //#endregion
 //#region src/commands/jira.ts
-async function jiraProjects(query, options) {
-	const auth = await requireAuth();
-	const projects = await listProjects(new AtlassianClient(auth), auth.site, query);
-	if (options.json) {
-		console.log(JSON.stringify(projects, null, 2));
-		return;
-	}
-	if (projects.length === 0) {
-		console.log("No matching projects.");
-		return;
-	}
-	for (const line of formatProjectRows(projects)) console.log(line);
+async function jiraProjects({ session, term }, query, options) {
+	const projects = await listProjects(session, session.site, query);
+	if (options.json) term.json(projects);
+	else if (projects.length === 0) term.out("No matching projects.");
+	else term.out(formatProjectRows(projects));
 }
 function formatProjectRows(projects) {
 	const width = Math.max(...projects.map((p) => p.key.length));
 	return projects.map((p) => `${p.key.padEnd(width)}  ${p.name}`);
 }
-async function jiraStatuses(query, options) {
-	let statuses = await listStatuses(new AtlassianClient(await requireAuth()), options.project);
+async function jiraStatuses({ session, term }, query, options) {
+	let statuses = await listStatuses(session, options.project);
 	if (query) {
 		const needle = query.toLowerCase();
 		statuses = statuses.filter((s) => s.name.toLowerCase().includes(needle));
 	}
-	if (options.json) {
-		console.log(JSON.stringify(statuses, null, 2));
-		return;
-	}
-	if (statuses.length === 0) {
-		console.log("No matching statuses.");
-		return;
-	}
-	for (const line of formatStatusRows(statuses)) console.log(line);
+	if (options.json) term.json(statuses);
+	else if (statuses.length === 0) term.out("No matching statuses.");
+	else term.out(formatStatusRows(statuses));
 }
 function formatStatusRows(statuses) {
 	const width = Math.max(...statuses.map((s) => s.name.length));
 	return statuses.map((s) => `${s.name.padEnd(width)}  ${s.category}`);
 }
-async function jiraView(arg, options) {
-	const auth = await requireAuth();
-	const key = await resolveRef(arg, ISSUE_REF);
-	await printPaged(formatIssueView(await fetchIssue(new AtlassianClient(auth), auth.site, key), Date.now(), options.allComments ?? false).join("\n"), { pager: options.pager });
+async function jiraView({ session, term }, arg, options) {
+	const key = await resolveRef(term.ask, arg, ISSUE_REF);
+	const lines = formatIssueView(await fetchIssue(session, session.site, key), Date.now(), options.allComments ?? false);
+	await term.page(lines.join("\n"), { pager: options.pager });
 }
 const CATEGORY_COLORS = {
 	new: kleur.cyan,
@@ -3365,46 +3500,44 @@ function formatIssueView(issue, nowMs, allComments) {
 		...attachmentSection(issue.attachments)
 	];
 }
-async function jiraCopy(arg, options) {
-	const auth = await requireAuth();
-	const key = await resolveRef(arg, ISSUE_REF);
-	await copyIssue(new AtlassianClient(auth), auth.site, key, options.out);
+async function jiraCopy(env, arg, options) {
+	await copyIssue(env, await resolveRef(env.term.ask, arg, ISSUE_REF), options.out);
 }
-async function jiraUpdate(arg, options) {
-	const src = parseIssueSource(await readFile(arg ?? await input({
+async function jiraUpdate({ session, term, files }, arg, options) {
+	const file = arg ?? await term.ask.text({
 		message: "Path to the issue Markdown file:",
+		flag: "[file]",
 		required: true
-	}), "utf8"));
-	const auth = await requireAuth();
-	const client = new AtlassianClient(auth);
-	const plan = planIssueUpdate(src, await fetchIssue(client, auth.site, src.key), options);
-	await runPlan(plan, options, async () => {
+	});
+	const src = parseIssueSource(await files.readText(file));
+	const plan = planIssueUpdate(src, await fetchIssue(session, session.site, src.key), options);
+	await runPlan(term, plan, options, async () => {
 		const { current, next } = plan.headline;
-		await updateIssue(client, src.key, {
+		await updateIssue(session, src.key, {
 			description: plan.body,
 			summary: next !== current ? next : void 0
 		});
-		console.log(`Updated ${src.key}.`);
+		term.out(`Updated ${src.key}.`);
 	});
 }
-async function copyIssue(client, site, key, out) {
-	console.log(`Fetching ${key} ...`);
-	await runCopy(planIssueCopy(await fetchIssue(client, site, key), out), (url) => client.getBinary(url));
+async function copyIssue(env, key, out) {
+	env.term.err(`Fetching ${key} ...`);
+	await runCopy(env, planIssueCopy(await fetchIssue(env.session, env.session.site, key), out));
 }
 const ISSUE_REF = {
 	message: "Jira issue key or URL:",
+	flag: "[issue]",
 	parse: parseIssueKey,
 	notFound: (raw) => `Could not find an issue key in "${raw}" (expected e.g. PROJ-123).`
 };
 //#endregion
 //#region src/commands/jira-search.ts
-async function jiraSearch(query, options) {
+async function jiraSearch(env, query, options) {
+	const { session, term } = env;
 	if (options.jql && (query || options.project || options.assignee || options.status)) throw new Error("--jql cannot be combined with a text query or other filters.");
 	if (options.json && options.copy) throw new Error("--json and --copy cannot be used together.");
-	const auth = await requireAuth();
-	const client = new AtlassianClient(auth);
 	const limit = parseLimit(options.limit);
-	const issues = await searchIssues(client, auth.site, {
+	const issues = await searchIssues(session, session.site, {
 		text: query,
 		project: options.project,
 		assignee: options.assignee,
@@ -3412,29 +3545,28 @@ async function jiraSearch(query, options) {
 		jql: options.jql,
 		limit
 	});
-	await runSearch(formatIssueRows(issues, Date.now()), {
+	await runSearch(term, formatIssueRows(issues, Date.now()), {
 		json: options.json,
 		copy: options.copy,
 		out: options.out,
 		empty: "No matching issues.",
 		footer: issues.length === limit ? searchFooter(limit) : void 0
-	}, ISSUE_NOUN, (key) => copyIssue(client, auth.site, key, options.out));
+	}, ISSUE_NOUN, (key) => copyIssue(env, key, options.out));
 }
-async function jiraList(options) {
+async function jiraList(env, options) {
+	const { session, term } = env;
 	if (options.json && options.copy) throw new Error("--json and --copy cannot be used together.");
-	const auth = await requireAuth();
-	const client = new AtlassianClient(auth);
-	const { issues, truncated } = await listAssignedIssues(client, auth.site, {
+	const { issues, truncated } = await listAssignedIssues(session, session.site, {
 		all: options.all,
 		project: options.project
 	});
-	await runSearch(formatIssueRows(sortByCategoryThenUpdated(issues), Date.now()), {
+	await runSearch(term, formatIssueRows(sortByCategoryThenUpdated(issues), Date.now()), {
 		json: options.json,
 		copy: options.copy,
 		out: options.out,
 		empty: options.all ? "No issues assigned to you." : "No open issues assigned to you.",
 		footer: truncated ? `\nShowing the first ${issues.length}; narrow with --project.` : void 0
-	}, ISSUE_NOUN, (key) => copyIssue(client, auth.site, key, options.out));
+	}, ISSUE_NOUN, (key) => copyIssue(env, key, options.out));
 }
 function formatIssueRows(issues, nowMs) {
 	return alignedRows(issues, nowMs, (i) => ({
@@ -3457,20 +3589,20 @@ function collect(value, previous = []) {
 }
 function registerJira(jira) {
 	jira.description("Jira commands");
-	jira.command("projects [query]").description("List projects (optionally filtered by key or name)").option("--json", "output results as JSON").action(run(jiraProjects));
-	jira.command("statuses [query]").description("List statuses (optionally filtered by name, scoped with --project)").option("-p, --project <key>", "limit to statuses used by a project").option("--json", "output results as JSON").action(run(jiraStatuses));
-	jira.command("create [project] [type]").description("Create a Jira issue, prompting for fields or taking them all as flags").option("-s, --summary <text>", "issue summary").option("-d, --description <markdown>", "description as Markdown").option("--description-file <path>", "read the description from a Markdown file").option("-a, --assignee <who>", "assignee: me, an account id, or a name to look up").option("--priority <name>", "priority name").option("-l, --label <label>", "label (repeatable, or comma separated)", collect).option("-c, --component <name>", "component (repeatable, or comma separated)", collect).option("--parent <key>", "parent issue key for subtasks").option("-f, --field <name=value>", "any other create-screen field (repeatable)", collect).option("--no-input", "never prompt; fail if a required field is missing").option("--dry-run", "print the resolved payload instead of creating").option("--json", "print the created issue as JSON").action(run(jiraCreate));
-	jira.command("fields <project> [type]").description("Show the issue types you can create in a project, or the create form for one type").option("--json", "output results as JSON").action(run(jiraFields));
-	jira.command("view [issue]").description("Show a Jira issue (key or URL) in the terminal").option("--all-comments", "show all comments instead of the last 5").option("--no-pager", "print directly instead of paging long output").action(run(jiraView));
-	jira.command("copy [issue]").description("Copy a Jira issue (key or URL) to a Markdown file").option("-o, --out <path>", "output file or directory").action(run(jiraCopy));
-	jira.command("update [file]").description("Update a Jira issue description from an edited Markdown file").option("--summary", "also push the H1 as the issue summary").option("-f, --force", "skip the stale-issue and data-loss checks").option("--dry-run", "show what would change without writing").action(run(jiraUpdate));
-	jira.command("list").description("List open issues assigned to you").option("-p, --project <key>", "limit to a project").option("-a, --all", "include Done issues updated in the last 30 days").option("--json", "output results as JSON").option("-c, --copy", "pick results to copy to Markdown").option("-o, --out <dir>", "output directory for --copy").action(run(jiraList));
-	jira.command("search [query]").description("Search Jira issues (text query, filters, or --jql)").option("-p, --project <key>", "limit to a project").option("-a, --assignee <who>", "limit to an assignee (or 'me')").option("-s, --status <status>", "limit to a status").option("--jql <jql>", "raw JQL query (ignores other filters)").option("-l, --limit <n>", "max results (default 25, max 100)").option("--json", "output results as JSON").option("-c, --copy", "pick results to copy to Markdown").option("-o, --out <dir>", "output directory for --copy").action(run(jiraSearch));
+	jira.command("projects [query]").description("List projects (optionally filtered by key or name)").option("--json", "output results as JSON").action(jiraAction(jiraProjects));
+	jira.command("statuses [query]").description("List statuses (optionally filtered by name, scoped with --project)").option("-p, --project <key>", "limit to statuses used by a project").option("--json", "output results as JSON").action(jiraAction(jiraStatuses));
+	jira.command("create [project] [type]").description("Create a Jira issue, prompting for fields or taking them all as flags").option("-s, --summary <text>", "issue summary").option("-d, --description <markdown>", "description as Markdown").option("--description-file <path>", "read the description from a Markdown file").option("-a, --assignee <who>", "assignee: me, an account id, or a name to look up").option("--priority <name>", "priority name").option("-l, --label <label>", "label (repeatable, or comma separated)", collect).option("-c, --component <name>", "component (repeatable, or comma separated)", collect).option("--parent <key>", "parent issue key for subtasks").option("-f, --field <name=value>", "any other create-screen field (repeatable)", collect).option("--dry-run", "print the resolved payload instead of creating").option("--json", "print the created issue as JSON").action(jiraAction(jiraCreate));
+	jira.command("fields <project> [type]").description("Show the issue types you can create in a project, or the create form for one type").option("--json", "output results as JSON").action(jiraAction(jiraFields));
+	jira.command("view [issue]").description("Show a Jira issue (key or URL) in the terminal").option("--all-comments", "show all comments instead of the last 5").option("--no-pager", "print directly instead of paging long output").action(jiraAction(jiraView));
+	jira.command("copy [issue]").description("Copy a Jira issue (key or URL) to a Markdown file").option("-o, --out <path>", "output file or directory").action(jiraAction(jiraCopy));
+	jira.command("update [file]").description("Update a Jira issue description from an edited Markdown file").option("--summary", "also push the H1 as the issue summary").option("-f, --force", "skip the stale-issue and data-loss checks").option("--dry-run", "show what would change without writing").action(jiraAction(jiraUpdate));
+	jira.command("list").description("List open issues assigned to you").option("-p, --project <key>", "limit to a project").option("-a, --all", "include Done issues updated in the last 30 days").option("--json", "output results as JSON").option("-c, --copy", "pick results to copy to Markdown").option("-o, --out <dir>", "output directory for --copy").action(jiraAction(jiraList));
+	jira.command("search [query]").description("Search Jira issues (text query, filters, or --jql)").option("-p, --project <key>", "limit to a project").option("-a, --assignee <who>", "limit to an assignee (or 'me')").option("-s, --status <status>", "limit to a status").option("--jql <jql>", "raw JQL query (ignores other filters)").option("-l, --limit <n>", "max results (default 25, max 100)").option("--json", "output results as JSON").option("-c, --copy", "pick results to copy to Markdown").option("-o, --out <dir>", "output directory for --copy").action(jiraAction(jiraSearch));
 	return jira;
 }
 //#endregion
 //#region package.json
-var version = "1.12.0";
+var version = "1.13.0";
 //#endregion
 //#region src/cli/build.ts
 const PRODUCTS = {
@@ -3478,16 +3610,22 @@ const PRODUCTS = {
 	confluence: registerConfluence,
 	bitbucket: registerBitbucket
 };
+const NO_INPUT = "never prompt; fail if a required value is missing";
+function withNoInput(command) {
+	command.option("--no-input", NO_INPUT);
+	for (const sub of command.commands) withNoInput(sub);
+	return command;
+}
 function buildAtlass() {
 	const program = new Command().name("atlass").description("Copy Jira issues and Confluence pages to Markdown.").version(version);
 	registerAuth(program.command("auth"));
 	registerJira(program.command("jira"));
 	registerConfluence(program.command("confluence").alias("conf"));
 	registerBitbucket(program.command("bitbucket").alias("bb"));
-	return program;
+	return withNoInput(program);
 }
 function buildStandalone(product) {
-	return PRODUCTS[product](new Command().name(product).version(version));
+	return withNoInput(PRODUCTS[product](new Command().name(product).version(version)));
 }
 //#endregion
 export { buildStandalone as n, fail as r, buildAtlass as t };