@allocator-one/harness-cli 1.6.0 → 1.8.0

package/README.md

@@ -53,7 +53,9 @@ the browser login attributes writes to the real user.
 
 `harness mcp` runs a stdio MCP server exposing every operation as a typed
 tool — issue_list, issue_show, issue_create, issue_update, issue_claim,
-issue_close, issue_comment, relation_add/rm, link_list/add/rm,
+issue_close, issue_comment, issue_comment_edit, issue_comment_delete,
+relation_list/create/update/delete, relation_add/rm (blocking shorthand),
+link_list/add/update/rm,
 project_list/show/create/update, milestone_list/create,
 document_list/show/create/update, label_list/create, team_list,
 team_create, workflow_states, user_list, stats, upload. Read-only tools carry
@@ -69,6 +71,27 @@ Example tool call: `issue_list` with `{"ready": true, "team": "ALL"}`
 returns the ready queue as JSON; `issue_claim` with `{"id": "IO-123"}`
 claims atomically (a conflict means someone else holds it).
 
+Typed issue relations are available without losing the concise blocking
+workflow. `harness dep add|rm` and the `relation_add`/`relation_rm` MCP tools
+remain the blocker-first shorthand; the full surface is:
+
+```sh
+harness relation list IO-123
+harness relation add IO-123 IO-456 --type related
+harness relation update IO-123 IO-456 --type blocks
+harness relation rm IO-123 IO-456
+```
+
+Relation update and removal accept either the relation id from `relation list`
+or a unique related issue identifier. If the same pair has more than one
+relation, the CLI refuses to guess and requires the relation id. Link updates
+use the same safe lookup rule by id or exact URL; the existing `link rm`
+command keeps its first-match behavior for backward compatibility:
+
+```sh
+harness link update IO-123 https://example.com/old --url https://example.com/new --title "Runbook"
+```
+
 Issue creation resolves `--label` names within the target team first, then at
 workspace scope. Missing names are created at workspace scope before the issue
 is filed, and the final label ids travel in the single issue-create request, so

package/dist/{chunk-DQDNAG5E.js → chunk-NQVQNKMC.js}

@@ -538,6 +538,10 @@ var STATUS_STATE_TYPES = {
 };
 var READY_CLAIM_ATTEMPTS = 10;
 var IDENTIFIER_FORMAT = /^[A-Za-z][A-Za-z0-9]*-\d+$/;
+var UUID_FORMAT = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+function isUuid(value) {
+  return UUID_FORMAT.test(value);
+}
 function requireIdentifiers(identifiers) {
   const bad = identifiers.filter((identifier) => !IDENTIFIER_FORMAT.test(identifier));
   if (bad.length > 0) {
@@ -786,8 +790,9 @@ async function comments(ctx, identifier) {
   if (body.data.length === 0) return { json: body.data, human: "No comments.\n" };
   const human = body.data.map((comment2) => {
     const author = clean((comment2["author"] ?? {})["name"] ?? "unknown");
+    const id = clean(comment2["id"] ?? "unknown id");
     const text = cleanMultiline(str2(comment2["body"])).split("\n").map((line) => "  " + line).join("\n");
-    return `[${str2(comment2["inserted_at"])}] ${author}:
+    return `[${str2(comment2["inserted_at"])}] ${author} (${id}):
 ${text}
 `;
   }).join("\n");
@@ -815,6 +820,76 @@ async function dep(ctx, verb, issue, blocker) {
   }
   throw new UsageError("usage: harness dep add|rm <issue> <blocker>  (the blocker blocks the issue)");
 }
+var RELATION_CREATE_TYPES = [
+  "blocks",
+  "blocked_by",
+  "related",
+  "duplicate",
+  "duplicate_of",
+  "duplicated_by"
+];
+var RELATION_UPDATE_TYPES = ["blocks", "blocked_by", "related", "duplicate_of"];
+function requireRelationType(type, allowed, operation) {
+  if (!allowed.includes(type)) {
+    throw new UsageError(`relation ${operation} type must be one of: ${allowed.join(", ")}`);
+  }
+}
+async function findRelation(ctx, issue, idOrIssue) {
+  const response = await ctx.client.get(`/api/v1/issues/${issue}/relations`);
+  const idMatch = response.data.find((candidate) => candidate["id"] === idOrIssue);
+  if (idMatch !== void 0) return idMatch;
+  const issueMatches = response.data.filter((candidate) => candidate["other_issue"] === idOrIssue);
+  if (issueMatches.length > 1) {
+    throw new CommandError(`multiple relations on ${issue} match ${idOrIssue}; use a relation id`);
+  }
+  if (issueMatches.length === 0) {
+    throw new CommandError(`no relation on ${issue} matches ${idOrIssue} (by id or related issue)`);
+  }
+  return issueMatches[0];
+}
+async function resolveRelationId(ctx, issue, idOrIssue) {
+  if (isUuid(idOrIssue)) return idOrIssue.toLowerCase();
+  const relation = await findRelation(ctx, issue, idOrIssue);
+  return String(relation["id"]);
+}
+async function relationList(ctx, issue) {
+  requireIdentifiers([issue]);
+  const response = await ctx.client.get(`/api/v1/issues/${issue}/relations`);
+  const human = response.data.length === 0 ? "No relations.\n" : table(
+    ["ID", "DIRECTION", "ISSUE"],
+    response.data.map((relation) => [
+      String(relation["id"] ?? ""),
+      String(relation["direction"] ?? ""),
+      String(relation["other_issue"] ?? "")
+    ])
+  );
+  return { json: response.data, human };
+}
+async function relationAdd(ctx, issue, relatedIssue, type) {
+  requireIdentifiers([issue, relatedIssue]);
+  requireRelationType(type, RELATION_CREATE_TYPES, "add");
+  const response = await ctx.client.post(`/api/v1/issues/${issue}/relations`, {
+    type,
+    related_issue: relatedIssue
+  });
+  return { json: response.data, human: `Related ${issue} to ${relatedIssue} as ${type}
+` };
+}
+async function relationUpdate(ctx, issue, idOrIssue, type) {
+  requireIdentifiers([issue]);
+  requireRelationType(type, RELATION_UPDATE_TYPES, "update");
+  const id = await resolveRelationId(ctx, issue, idOrIssue);
+  const response = await ctx.client.patch(`/api/v1/issues/${issue}/relations/${id}`, { type });
+  return { json: response.data, human: `Updated relation ${id} on ${issue} to ${type}
+` };
+}
+async function relationRm(ctx, issue, idOrIssue) {
+  requireIdentifiers([issue]);
+  const id = await resolveRelationId(ctx, issue, idOrIssue);
+  await ctx.client.delete(`/api/v1/issues/${issue}/relations/${id}`);
+  return { json: { deleted: id }, human: `Removed relation ${id} from ${issue}
+` };
+}
 async function comment(ctx, identifier, textWords, mentions) {
   requireIdentifiers([identifier]);
   if (textWords.length === 0) {
@@ -826,6 +901,40 @@ async function comment(ctx, identifier, textWords, mentions) {
   return { json: response.data, human: `Commented on ${identifier}
 ` };
 }
+async function editComment(ctx, identifier, commentId, textWords) {
+  requireIdentifiers([identifier]);
+  requireCommentId(commentId);
+  const body = textWords.join(" ");
+  if (body.trim() === "") {
+    throw new UsageError("the comment text is empty \u2014 nothing to edit");
+  }
+  const response = await ctx.client.patch(
+    `/api/v1/issues/${identifier}/comments/${commentId}`,
+    { body }
+  );
+  return {
+    json: response.data,
+    human: `Edited comment ${commentId} on ${identifier}
+`
+  };
+}
+async function deleteComment(ctx, identifier, commentId) {
+  requireIdentifiers([identifier]);
+  requireCommentId(commentId);
+  const response = await ctx.client.delete(
+    `/api/v1/issues/${identifier}/comments/${commentId}`
+  );
+  return {
+    json: response.data,
+    human: `Deleted comment ${commentId} from ${identifier}
+`
+  };
+}
+function requireCommentId(commentId) {
+  if (!UUID_FORMAT.test(commentId)) {
+    throw new UsageError(`not a comment id: ${commentId} (expected a UUID)`);
+  }
+}
 var MAX_ATTACHMENT_BYTES2 = 25e6;
 async function attachImage(ctx, path2) {
   attachableFile(path2);
@@ -910,7 +1019,6 @@ function validateType(type) {
     throw new UsageError(`not an issue type: ${type} (expected ${ISSUE_TYPES.join(", ")})`);
   }
 }
-var UUID_FORMAT = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
 function requestedLabelNames(names) {
   const unique = /* @__PURE__ */ new Map();
   for (const name of requestedLabelInputs(names)) {
@@ -1068,6 +1176,8 @@ function listParams(ctx, opts) {
   params = putParam(params, "label", opts.label);
   params = putParam(params, "scope", opts.scope);
   params = putParam(params, "assignee", opts.assignee);
+  params = putParam(params, "created_by", opts.createdBy);
+  params = putParam(params, "involved", opts.involved);
   if (opts.type !== void 0) params = putParam(params, "label", `type/${opts.type}`);
   if (opts.status !== void 0) {
     const stateTypes = Object.hasOwn(STATUS_STATE_TYPES, opts.status) ? STATUS_STATE_TYPES[opts.status] : void 0;
@@ -1349,13 +1459,36 @@ async function linkAdd(ctx, issue, url, title) {
   return { json: response.data, human: `Linked ${clean(url)} to ${issue}
 ` };
 }
-async function linkRm(ctx, issue, idOrUrl) {
-  requireIdentifiers([issue]);
+async function findLink(ctx, issue, idOrUrl, allowDuplicateUrl = false) {
   const body = await ctx.client.get(`/api/v1/issues/${issue}/links`);
-  const link = body.data.find((candidate) => candidate["id"] === idOrUrl || candidate["url"] === idOrUrl);
-  if (link === void 0) {
+  const idMatch = body.data.find((candidate) => candidate["id"] === idOrUrl);
+  if (idMatch !== void 0) return idMatch;
+  const urlMatches = body.data.filter((candidate) => candidate["url"] === idOrUrl);
+  if (urlMatches.length > 1 && !allowDuplicateUrl) {
+    throw new CommandError(`multiple links on ${issue} match ${idOrUrl}; use a link id`);
+  }
+  if (urlMatches.length === 0) {
     throw new CommandError(`no link on ${issue} matches ${idOrUrl} (by id or exact URL)`);
   }
+  return urlMatches[0];
+}
+async function linkUpdate(ctx, issue, idOrUrl, opts) {
+  requireIdentifiers([issue]);
+  let patch = {};
+  patch = putOpt2(patch, "url", opts.url);
+  patch = putOpt2(patch, "title", opts.title);
+  if (Object.keys(patch).length === 0) {
+    throw new UsageError("usage: harness link update <issue> <link-id-or-url> --url <url> | --title <title>");
+  }
+  const id = isUuid(idOrUrl) ? idOrUrl.toLowerCase() : str3((await findLink(ctx, issue, idOrUrl))["id"]);
+  if (!isUuid(idOrUrl)) patch["expected_url"] = idOrUrl;
+  const response = await ctx.client.patch(`/api/v1/issues/${issue}/links/${id}`, patch);
+  return { json: response.data, human: `Updated link ${clean(response.data["url"])} on ${issue}
+` };
+}
+async function linkRm(ctx, issue, idOrUrl) {
+  requireIdentifiers([issue]);
+  const link = await findLink(ctx, issue, idOrUrl, true);
   await ctx.client.delete(`/api/v1/issues/${issue}/links/${str3(link["id"])}`);
   return { json: { deleted: link["id"] }, human: `Removed ${clean(link["url"])} from ${issue}
 ` };
@@ -1827,7 +1960,16 @@ export {
   archive,
   comments,
   dep,
+  RELATION_CREATE_TYPES,
+  RELATION_UPDATE_TYPES,
+  relationList,
+  relationAdd,
+  relationUpdate,
+  relationRm,
   comment,
+  editComment,
+  deleteComment,
+  requireCommentId,
   attachImage,
   projectList,
   projectShow,
@@ -1841,6 +1983,7 @@ export {
   docUpdate,
   linkList,
   linkAdd,
+  linkUpdate,
   linkRm,
   labelList,
   labelCreate,

package/dist/cli.js

@@ -6,6 +6,8 @@ import {
   DEFAULT_BASE_URL,
   HttpError,
   LocalError,
+  RELATION_CREATE_TYPES,
+  RELATION_UPDATE_TYPES,
   TransportError,
   UpgradeRequiredError,
   UsageError,
@@ -18,12 +20,14 @@ import {
   comments,
   create,
   defaultCredentialsPath,
+  deleteComment,
   deleteCredentials,
   dep,
   docCreate,
   docList,
   docShow,
   docUpdate,
+  editComment,
   findRepoConfig,
   isHostTrusted,
   json,
@@ -34,6 +38,7 @@ import {
   linkAdd,
   linkList,
   linkRm,
+  linkUpdate,
   list,
   loginHelp,
   memberAdd,
@@ -48,6 +53,11 @@ import {
   projectUpdate,
   readCredentials,
   ready,
+  relationAdd,
+  relationList,
+  relationRm,
+  relationUpdate,
+  requireCommentId,
   requireIdentifiers,
   resolveCacheHome,
   resolveConfig,
@@ -70,7 +80,7 @@ import {
   version,
   workflowStates,
   writeCredentials
-} from "./chunk-DQDNAG5E.js";
+} from "./chunk-NQVQNKMC.js";
 
 // src/cli.ts
 import { createInterface as createInterface2 } from "readline";
@@ -1000,6 +1010,23 @@ function integer(value) {
 function collect(value, previous) {
   return [...previous, value];
 }
+function resolvedCommentBody(text, bodyFile, action = "post") {
+  if (bodyFile !== void 0 && text.length > 0) {
+    throw new UsageError(
+      "comment text and --body-file both given \u2014 pass one; there is no precedence between them"
+    );
+  }
+  const fromFile = resolveTextSources([
+    { name: "body", inline: void 0, file: bodyFile }
+  ]).body;
+  const body = fromFile === void 0 ? text : [fromFile];
+  if (body.join(" ").trim() === "") {
+    throw new UsageError(
+      bodyFile === void 0 ? `the comment text is empty \u2014 nothing to ${action}` : `--body-file ${bodyFile} produced an empty comment \u2014 nothing to ${action}`
+    );
+  }
+  return body;
+}
 var requireIdentifiers2 = requireIdentifiers;
 function interactive() {
   const ci = process.env["CI"];
@@ -1132,6 +1159,9 @@ program.command("blocked").description("issues waiting on a blocker").option("--
 program.command("list").description("list issues with filters").option("--status <status>", "open | in_progress | closed").option(
   "--assignee <who>",
   'me, a user id, an email, or a full name; "" for unassigned'
+).option("--created-by <who>", "me or a creator user id").option(
+  "--involved <who>",
+  "me for issues created by, assigned to, or mentioning you"
 ).option("--priority <name>", "urgent | high | medium | low | none").option("--label <name>", "label filter").option("--type <type>", "task | bug | feature | epic").option("--search <query>", "full-text search").option("--team <key>", "team filter").option("--parent <id>", "children of an epic").option("--scope <scope>", "all | archived").option("--limit <n>", "page size", integer).option("--page <n>", "page number", integer).option("--all", "follow every page").option("--json", "emit JSON").action(async (opts) => {
   await withConfig(
     opts.json === true,
@@ -1313,7 +1343,42 @@ program.command("dep").description("blocking dependencies: dep add|rm <issue> <b
     });
   }
 );
-program.command("comment").description("comment on an issue").argument("[id]").argument("[text...]").option("--body-file <path>", 'read the comment body from a file ("-" for stdin)').option("--mention <name>", "notify a person (repeatable)", collect, []).option("--json", "emit JSON").action(
+var relation = program.command("relation").description("typed issue relations; dep remains the blocking-dependency shorthand");
+relation.command("list").argument("[issue]").option("--json", "emit JSON").action(async (issue, opts) => {
+  await withConfig(opts.json === true, false, (ctx) => {
+    if (issue === void 0) throw new UsageError("usage: harness relation list <issue>");
+    return relationList(ctx, issue);
+  });
+});
+relation.command("add").argument("[issue]").argument("[related-issue]").requiredOption("--type <type>", `relation type: ${RELATION_CREATE_TYPES.join(", ")}`).option("--json", "emit JSON").action(
+  async (issue, relatedIssue, opts) => {
+    await withConfig(opts.json === true, true, (ctx) => {
+      if (issue === void 0 || relatedIssue === void 0) {
+        throw new UsageError("usage: harness relation add <issue> <related-issue> --type <type>");
+      }
+      return relationAdd(ctx, issue, relatedIssue, opts.type);
+    });
+  }
+);
+relation.command("update").argument("[issue]").argument("[id-or-issue]").requiredOption("--type <type>", `relation type: ${RELATION_UPDATE_TYPES.join(", ")}`).option("--json", "emit JSON").action(
+  async (issue, idOrIssue, opts) => {
+    await withConfig(opts.json === true, true, (ctx) => {
+      if (issue === void 0 || idOrIssue === void 0) {
+        throw new UsageError("usage: harness relation update <issue> <relation-id-or-issue> --type <type>");
+      }
+      return relationUpdate(ctx, issue, idOrIssue, opts.type);
+    });
+  }
+);
+relation.command("rm").argument("[issue]").argument("[id-or-issue]").option("--json", "emit JSON").action(async (issue, idOrIssue, opts) => {
+  await withConfig(opts.json === true, true, (ctx) => {
+    if (issue === void 0 || idOrIssue === void 0) {
+      throw new UsageError("usage: harness relation rm <issue> <relation-id-or-issue>");
+    }
+    return relationRm(ctx, issue, idOrIssue);
+  });
+});
+var commentCommand = program.command("comment").description("comment on an issue").argument("[id]").argument("[text...]").option("--body-file <path>", 'read the comment body from a file ("-" for stdin)').option("--mention <name>", "notify a person (repeatable)", collect, []).option("--json", "emit JSON").action(
   async (id, text, opts) => {
     await withConfig(opts.json === true, true, (ctx) => {
       if (id === void 0 || opts.bodyFile === void 0 && text.length === 0) {
@@ -1322,25 +1387,39 @@ program.command("comment").description("comment on an issue").argument("[id]").a
         );
       }
       requireIdentifiers2([id]);
-      if (opts.bodyFile !== void 0 && text.length > 0) {
-        throw new UsageError(
-          "comment text and --body-file both given \u2014 pass one; there is no precedence between them"
-        );
-      }
-      const fromFile = resolveTextSources([
-        { name: "body", inline: void 0, file: opts.bodyFile }
-      ]).body;
-      const body = fromFile === void 0 ? text : [fromFile];
-      if (body.join(" ").trim() === "") {
+      const body = resolvedCommentBody(text, opts.bodyFile);
+      const mentions = opts.mention.filter((name) => name.trim() !== "");
+      return comment(ctx, id, body, mentions);
+    });
+  }
+);
+commentCommand.command("edit").description("edit one of your issue comments").argument("[issue]").argument("[comment-id]").argument("[text...]").option("--body-file <path>", 'read the replacement body from a file ("-" for stdin)').option("--json", "emit JSON").action(
+  async (issue, commentId, text, opts) => {
+    const parentOpts = commentCommand.opts();
+    const bodyFile = opts.bodyFile ?? parentOpts.bodyFile;
+    await withConfig(opts.json === true || parentOpts.json === true, true, (ctx) => {
+      if (issue === void 0 || commentId === void 0 || bodyFile === void 0 && text.length === 0) {
         throw new UsageError(
-          opts.bodyFile === void 0 ? "the comment text is empty \u2014 nothing to post" : `--body-file ${opts.bodyFile} produced an empty comment \u2014 nothing to post`
+          "usage: harness comment edit <issue> <comment-id> <text> | harness comment edit <issue> <comment-id> --body-file <path>"
         );
       }
-      const mentions = opts.mention.filter((name) => name.trim() !== "");
-      return comment(ctx, id, body, mentions);
+      requireIdentifiers2([issue]);
+      requireCommentId(commentId);
+      return editComment(ctx, issue, commentId, resolvedCommentBody(text, bodyFile, "edit"));
     });
   }
 );
+commentCommand.command("delete").alias("rm").description("delete one of your issue comments").argument("[issue]").argument("[comment-id]").option("--json", "emit JSON").action(async (issue, commentId, opts) => {
+  const parentOpts = commentCommand.opts();
+  await withConfig(opts.json === true || parentOpts.json === true, true, (ctx) => {
+    if (issue === void 0 || commentId === void 0) {
+      throw new UsageError("usage: harness comment delete <issue> <comment-id>");
+    }
+    requireIdentifiers2([issue]);
+    requireCommentId(commentId);
+    return deleteComment(ctx, issue, commentId);
+  });
+});
 program.command("attach-image").description("upload an image; prints markdown to reference it").argument("[path]").option("--json", "emit JSON").action(async (path, opts) => {
   await withConfig(opts.json === true, true, (ctx) => {
     if (path === void 0) {
@@ -1454,6 +1533,18 @@ link.command("add").argument("[issue]").argument("[url]").option("--title <title
     });
   }
 );
+link.command("update").argument("[issue]").argument("[id-or-url]").option("--url <url>", "replacement URL").option("--title <title>", "replacement title; pass an empty value to clear").option("--json", "emit JSON").action(
+  async (issue, idOrUrl, opts) => {
+    await withConfig(opts.json === true, true, (ctx) => {
+      if (issue === void 0 || idOrUrl === void 0) {
+        throw new UsageError(
+          "usage: harness link update <issue> <link-id-or-url> --url <url> | --title <title>"
+        );
+      }
+      return linkUpdate(ctx, issue, idOrUrl, opts);
+    });
+  }
+);
 link.command("rm").argument("[issue]").argument("[id-or-url]").option("--json", "emit JSON").action(
   async (issue, idOrUrl, opts) => {
     await withConfig(opts.json === true, true, (ctx) => {
@@ -1567,7 +1658,7 @@ program.command("upload").description("upload a file; prints markdown to referen
   });
 });
 program.command("mcp").description("run the MCP server over stdio (for agents)").action(async () => {
-  const { startMcpServer } = await import("./server-WBZ5OPHK.js");
+  const { startMcpServer } = await import("./server-FWNT3HMX.js");
   await startMcpServer();
 });
 program.command("login").description("sign in via the browser (infra.one session)").option("--url <url>", "host to sign in to").option("--no-browser", "print the URL and prompt for a pasted token instead").option(

package/dist/{server-WBZ5OPHK.js → server-FWNT3HMX.js}

@@ -3,6 +3,8 @@ import {
   CLI_VERSION,
   Client,
   HttpError,
+  RELATION_CREATE_TYPES,
+  RELATION_UPDATE_TYPES,
   TransportError,
   UsageError,
   archive,
@@ -11,11 +13,13 @@ import {
   comment,
   comments,
   create,
+  deleteComment,
   dep,
   docCreate,
   docList,
   docShow,
   docUpdate,
+  editComment,
   labelCreate,
   labelDelete,
   labelList,
@@ -23,6 +27,7 @@ import {
   linkAdd,
   linkList,
   linkRm,
+  linkUpdate,
   list,
   memberAdd,
   memberList,
@@ -34,6 +39,10 @@ import {
   projectShow,
   projectUpdate,
   ready,
+  relationAdd,
+  relationList,
+  relationRm,
+  relationUpdate,
   resolveConfig,
   search,
   show,
@@ -50,7 +59,7 @@ import {
   upload,
   userList,
   workflowStates
-} from "./chunk-DQDNAG5E.js";
+} from "./chunk-NQVQNKMC.js";
 
 // src/mcp/server.ts
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
@@ -98,6 +107,7 @@ var page = {
   all: z.boolean().optional().describe("follow every page")
 };
 var identifier = z.string().describe("issue identifier, e.g. IO-123");
+var commentId = z.string().uuid().describe("comment UUID from issue_show or comment_list");
 var dateField = z.string().optional().describe('YYYY-MM-DD; "" clears the date');
 var TOOLS = [
   // ── Issues ──
@@ -111,6 +121,8 @@ var TOOLS = [
       blocked: z.boolean().optional(),
       status: z.enum(["open", "in_progress", "closed"]).optional(),
       assignee: z.string().optional().describe('me, a user id, an email, or a full name; "" for unassigned'),
+      created_by: z.string().optional().describe("me or a creator user id"),
+      involved: z.literal("me").optional().describe("issues created by, assigned to, or mentioning the caller"),
       priority: z.enum(["urgent", "high", "medium", "low", "none"]).optional(),
       label: z.string().optional(),
       type: z.enum(["task", "bug", "feature", "epic"]).optional(),
@@ -123,9 +135,10 @@ var TOOLS = [
       if (args["ready"] === true && args["blocked"] === true) {
         throw new UsageError("ready and blocked are mutually exclusive \u2014 pass one, not both");
       }
-      if (args["ready"] === true) return ready(ctx, args);
-      if (args["blocked"] === true) return blocked(ctx, args);
-      return list(ctx, args);
+      const opts = { ...args, createdBy: args["created_by"] };
+      if (args["ready"] === true) return ready(ctx, opts);
+      if (args["blocked"] === true) return blocked(ctx, opts);
+      return list(ctx, opts);
     }
   },
   {
@@ -231,6 +244,27 @@ var TOOLS = [
     },
     handler: (ctx, args) => comment(ctx, args["id"], [args["body"]], args["mentions"] ?? [])
   },
+  {
+    name: "issue_comment_edit",
+    description: "Edit one of your issue comments within its edit window.",
+    readOnly: false,
+    shape: {
+      id: identifier,
+      comment_id: commentId,
+      body: z.string().min(1).refine((body) => body.trim() !== "", "comment body must not be blank")
+    },
+    handler: (ctx, args) => editComment(ctx, args["id"], args["comment_id"], [args["body"]])
+  },
+  {
+    name: "issue_comment_delete",
+    description: "Delete one of your issue comments.",
+    readOnly: false,
+    shape: {
+      id: identifier,
+      comment_id: commentId
+    },
+    handler: (ctx, args) => deleteComment(ctx, args["id"], args["comment_id"])
+  },
   {
     name: "issue_archive",
     description: "Archive issues (or restore them with restore=true). Archived issues show up under scope=archived.",
@@ -245,7 +279,7 @@ var TOOLS = [
     shape: { id: identifier },
     handler: (ctx, args) => comments(ctx, args["id"])
   },
-  // ── Relations (blocking dependencies) ──
+  // ── Relations ──
   {
     name: "relation_add",
     description: "Add a blocking dependency: blocker blocks issue.",
@@ -260,6 +294,42 @@ var TOOLS = [
     shape: { issue: identifier, blocker: identifier },
     handler: (ctx, args) => dep(ctx, "rm", args["issue"], args["blocker"])
   },
+  {
+    name: "relation_list",
+    description: "List every typed relation on an issue, including stable relation ids.",
+    readOnly: true,
+    shape: { issue: identifier },
+    handler: (ctx, args) => relationList(ctx, args["issue"])
+  },
+  {
+    name: "relation_create",
+    description: "Create a typed relation between two issues.",
+    readOnly: false,
+    shape: {
+      issue: identifier,
+      related_issue: identifier,
+      type: z.enum(RELATION_CREATE_TYPES)
+    },
+    handler: (ctx, args) => relationAdd(ctx, args["issue"], args["related_issue"], args["type"])
+  },
+  {
+    name: "relation_update",
+    description: "Change a relation's direction, resolving it by relation id or unique related issue.",
+    readOnly: false,
+    shape: {
+      issue: identifier,
+      id_or_issue: z.string(),
+      type: z.enum(RELATION_UPDATE_TYPES)
+    },
+    handler: (ctx, args) => relationUpdate(ctx, args["issue"], args["id_or_issue"], args["type"])
+  },
+  {
+    name: "relation_delete",
+    description: "Remove a typed relation by relation id or unique related issue.",
+    readOnly: false,
+    shape: { issue: identifier, id_or_issue: z.string() },
+    handler: (ctx, args) => relationRm(ctx, args["issue"], args["id_or_issue"])
+  },
   // ── Links (URLs on an issue) ──
   {
     name: "link_list",
@@ -275,6 +345,20 @@ var TOOLS = [
     shape: { issue: identifier, url: z.string(), title: z.string().optional() },
     handler: (ctx, args) => linkAdd(ctx, args["issue"], args["url"], args["title"])
   },
+  {
+    name: "link_update",
+    description: "Edit a link by link id or exact URL.",
+    readOnly: false,
+    shape: {
+      issue: identifier,
+      id_or_url: z.string(),
+      change: z.union([
+        z.object({ url: z.string(), title: z.string().optional() }),
+        z.object({ title: z.string(), url: z.string().optional() })
+      ])
+    },
+    handler: (ctx, args) => linkUpdate(ctx, args["issue"], args["id_or_url"], args["change"])
+  },
   {
     name: "link_rm",
     description: "Remove a link from an issue, by link id or exact URL.",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@allocator-one/harness-cli",
-  "version": "1.6.0",
+  "version": "1.8.0",
   "description": "CLI and MCP server for Harness, allocator.one's issue tracker",
   "type": "module",
   "license": "MIT",

package/spec/openapi.json

@@ -288,6 +288,7 @@
                     "type": "string"
                   },
                   "name": {
+                    "description": "Unique within its workspace or team after trimming Unicode boundary whitespace and Unicode-aware lowercasing. Interior whitespace and Unicode normalization forms remain distinct.",
                     "maxLength": 255,
                     "type": "string"
                   },
@@ -382,7 +383,9 @@
               "schema": {
                 "properties": {
                   "label_ids": {
+                    "description": "The complete replacement set. Every label must belong to this workspace and be workspace-scoped or owned by the issue's team; the update is rejected atomically otherwise.",
                     "items": {
+                      "format": "uuid",
                       "type": "string"
                     },
                     "type": "array"
@@ -564,6 +567,15 @@
               "type": "string"
             }
           },
+          {
+            "description": "\"me\" keeps issues created by, assigned to, or mentioning the token owner",
+            "in": "query",
+            "name": "involved",
+            "required": false,
+            "schema": {
+              "type": "string"
+            }
+          },
           {
             "description": "Filter by priority (0-4)",
             "in": "query",
@@ -1361,7 +1373,7 @@
       "get": {
         "callbacks": {},
         "deprecated": false,
-        "description": "Requires the `harness:read` scope AND Harness administrator standing in the organization the credential is bound to — this is a settings write, gated exactly as the settings UI is. Everyone who can reach this organization's tracker: its harness grant holders plus its own admins, who get staff standing without a grant. Each entry carries both `role` (the grant rank, null when none) and `standing` — they differ, and the difference is the point: an org admin holds no rank and is still staff. Distinct from GET /users, which is the deployment-wide assignee picker and never lists a collaborator.",
+        "description": "Requires the `harness:read` scope AND Harness administrator standing in the organization the credential is bound to — this is a settings write, gated exactly as the settings UI is. Everyone who can reach this organization's tracker: its harness grant holders plus its own admins, who get staff standing without a grant. Each entry carries both `role` (the grant rank, null when none) and `standing` — they differ, and the difference is the point: an org admin holds no rank and is still staff. Pending invitations appear with `standing: \"invited\"` and a null user id. Distinct from GET /users, which is the deployment-wide assignee picker and never lists a collaborator.",
         "parameters": [],
         "responses": {
           "200": {
@@ -1389,7 +1401,7 @@
       "post": {
         "callbacks": {},
         "deprecated": false,
-        "description": "Requires the `harness:write` scope AND Harness administrator standing in the organization the credential is bound to — this is a settings write, gated exactly as the settings UI is. Mints the organization membership when the person has none, so joining the tracker does not detour through the organization's own people page. The account must already exist: an unknown email is refused with 422 naming that, since the fix is for them to register. Email matching is case-insensitive.",
+        "description": "Requires the `harness:write` scope AND Harness administrator standing in the organization the credential is bound to — this is a settings write, gated exactly as the settings UI is. Mints the organization membership when the person has none, so joining the tracker does not detour through the organization's own people page. An address with no account is INVITED instead of refused (IO-10955): the response is the same member shape with `standing: \"invited\"`, and the rank applies when the invitation is accepted. Email matching is case-insensitive.",
         "parameters": [],
         "requestBody": {
           "content": {
@@ -2158,6 +2170,7 @@
                     "type": "string"
                   },
                   "name": {
+                    "description": "Unique within its workspace or team after trimming Unicode boundary whitespace and Unicode-aware lowercasing. Interior whitespace and Unicode normalization forms remain distinct.",
                     "maxLength": 255,
                     "type": "string"
                   }
@@ -2281,6 +2294,302 @@
         "tags": []
       }
     },
+    "/api/v1/issues/{identifier}/comments/{comment_id}": {
+      "delete": {
+        "callbacks": {},
+        "deprecated": false,
+        "description": "Requires the `harness:write` scope. Only the underlying authenticated author may soft-delete a comment, and must also retain issue-comment capability, matching the UI. Missing, deleted, cross-issue, cross-organization, and other authors' comments all answer 404.",
+        "parameters": [
+          {
+            "description": "Issue identifier, e.g. ALL-4901 or CLI-12 (issues minted before team-prefixed numbering carry IO-)",
+            "in": "path",
+            "name": "identifier",
+            "required": true,
+            "schema": {
+              "type": "string"
+            }
+          },
+          {
+            "description": "Comment UUID",
+            "in": "path",
+            "name": "comment_id",
+            "required": true,
+            "schema": {
+              "format": "uuid",
+              "type": "string"
+            }
+          }
+        ],
+        "responses": {
+          "200": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "properties": {
+                    "data": {
+                      "properties": {
+                        "deleted": {
+                          "type": "boolean"
+                        }
+                      },
+                      "required": [
+                        "deleted"
+                      ],
+                      "type": "object"
+                    }
+                  },
+                  "required": [
+                    "data"
+                  ],
+                  "type": "object"
+                }
+              }
+            },
+            "description": "Success"
+          },
+          "400": {
+            "description": "Bad request"
+          },
+          "401": {
+            "description": "Missing or invalid token"
+          },
+          "403": {
+            "description": "Token not permitted (org-scoped, non-admin, or missing scope)"
+          },
+          "404": {
+            "description": "Not found"
+          },
+          "422": {
+            "description": "Validation error"
+          }
+        },
+        "summary": "Delete an issue comment",
+        "tags": []
+      },
+      "patch": {
+        "callbacks": {},
+        "deprecated": false,
+        "description": "Requires the `harness:write` scope. Only the underlying authenticated author may edit a comment, within 15 minutes of creation. The author must also retain issue-comment capability, matching the UI. The body changes; attribution, metadata, reply target, mentions, and creation time do not. `actor` is accepted for CLI compatibility but ignored for ownership and attribution.",
+        "parameters": [
+          {
+            "description": "Issue identifier, e.g. ALL-4901 or CLI-12 (issues minted before team-prefixed numbering carry IO-)",
+            "in": "path",
+            "name": "identifier",
+            "required": true,
+            "schema": {
+              "type": "string"
+            }
+          },
+          {
+            "description": "Comment UUID",
+            "in": "path",
+            "name": "comment_id",
+            "required": true,
+            "schema": {
+              "format": "uuid",
+              "type": "string"
+            }
+          }
+        ],
+        "requestBody": {
+          "content": {
+            "application/json": {
+              "schema": {
+                "anyOf": [
+                  {
+                    "properties": {
+                      "actor": {
+                        "description": "Accepted for CLI compatibility; ignored because editing never changes attribution",
+                        "type": "string"
+                      },
+                      "body": {
+                        "description": "Replacement comment body; takes precedence when content is also present",
+                        "minLength": 1,
+                        "type": "string"
+                      },
+                      "content": {
+                        "description": "Alias for body",
+                        "minLength": 1,
+                        "type": "string"
+                      }
+                    },
+                    "required": [
+                      "body"
+                    ],
+                    "type": "object"
+                  },
+                  {
+                    "properties": {
+                      "actor": {
+                        "description": "Accepted for CLI compatibility; ignored because editing never changes attribution",
+                        "type": "string"
+                      },
+                      "body": {
+                        "description": "Replacement comment body; takes precedence when content is also present",
+                        "minLength": 1,
+                        "type": "string"
+                      },
+                      "content": {
+                        "description": "Alias for body",
+                        "minLength": 1,
+                        "type": "string"
+                      }
+                    },
+                    "required": [
+                      "content"
+                    ],
+                    "type": "object"
+                  }
+                ]
+              }
+            }
+          },
+          "required": true
+        },
+        "responses": {
+          "200": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "properties": {
+                    "data": {
+                      "properties": {
+                        "author": {
+                          "nullable": true,
+                          "properties": {
+                            "email": {
+                              "nullable": true,
+                              "type": "string"
+                            },
+                            "id": {
+                              "format": "uuid",
+                              "nullable": true,
+                              "type": "string"
+                            },
+                            "name": {
+                              "nullable": true,
+                              "type": "string"
+                            }
+                          },
+                          "required": [
+                            "id",
+                            "name",
+                            "email"
+                          ],
+                          "type": "object"
+                        },
+                        "body": {
+                          "type": "string"
+                        },
+                        "deleted": {
+                          "type": "boolean"
+                        },
+                        "id": {
+                          "format": "uuid",
+                          "type": "string"
+                        },
+                        "inserted_at": {
+                          "format": "date-time",
+                          "type": "string"
+                        },
+                        "mentions": {
+                          "items": {
+                            "properties": {
+                              "email": {
+                                "nullable": true,
+                                "type": "string"
+                              },
+                              "name": {
+                                "nullable": true,
+                                "type": "string"
+                              },
+                              "user_id": {
+                                "format": "uuid",
+                                "nullable": true,
+                                "type": "string"
+                              }
+                            },
+                            "required": [
+                              "user_id",
+                              "name",
+                              "email"
+                            ],
+                            "type": "object"
+                          },
+                          "type": "array"
+                        },
+                        "reactions": {
+                          "items": {
+                            "properties": {
+                              "count": {
+                                "type": "integer"
+                              },
+                              "emoji": {
+                                "type": "string"
+                              },
+                              "reacted_by_current_actor": {
+                                "type": "boolean"
+                              }
+                            },
+                            "required": [
+                              "emoji",
+                              "count",
+                              "reacted_by_current_actor"
+                            ],
+                            "type": "object"
+                          },
+                          "type": "array"
+                        },
+                        "updated_at": {
+                          "format": "date-time",
+                          "type": "string"
+                        }
+                      },
+                      "required": [
+                        "id",
+                        "body",
+                        "deleted",
+                        "author",
+                        "mentions",
+                        "reactions",
+                        "inserted_at",
+                        "updated_at"
+                      ],
+                      "type": "object"
+                    }
+                  },
+                  "required": [
+                    "data"
+                  ],
+                  "type": "object"
+                }
+              }
+            },
+            "description": "Success"
+          },
+          "400": {
+            "description": "Bad request"
+          },
+          "401": {
+            "description": "Missing or invalid token"
+          },
+          "403": {
+            "description": "Token not permitted (org-scoped, non-admin, or missing scope)"
+          },
+          "404": {
+            "description": "Not found"
+          },
+          "409": {
+            "description": "The 15-minute edit window has closed"
+          },
+          "422": {
+            "description": "Validation error"
+          }
+        },
+        "summary": "Edit an issue comment",
+        "tags": []
+      }
+    },
     "/api/v1/model-keys": {
       "get": {
         "callbacks": {},
@@ -2510,6 +2819,144 @@
         },
         "summary": "Delete a relation",
         "tags": []
+      },
+      "patch": {
+        "callbacks": {},
+        "deprecated": false,
+        "description": "Requires the `harness:write` scope.",
+        "parameters": [
+          {
+            "description": "Issue identifier, e.g. ALL-4901 or CLI-12 (issues minted before team-prefixed numbering carry IO-)",
+            "in": "path",
+            "name": "identifier",
+            "required": true,
+            "schema": {
+              "type": "string"
+            }
+          },
+          {
+            "description": "Resource id",
+            "in": "path",
+            "name": "id",
+            "required": true,
+            "schema": {
+              "type": "string"
+            }
+          }
+        ],
+        "requestBody": {
+          "content": {
+            "application/json": {
+              "schema": {
+                "properties": {
+                  "type": {
+                    "description": "Direction from the issue in the request path",
+                    "enum": [
+                      "blocks",
+                      "blocked_by",
+                      "related",
+                      "duplicate_of"
+                    ],
+                    "type": "string"
+                  }
+                },
+                "required": [
+                  "type"
+                ],
+                "type": "object"
+              }
+            }
+          },
+          "required": true
+        },
+        "responses": {
+          "200": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "properties": {
+                    "data": {
+                      "properties": {
+                        "direction": {
+                          "enum": [
+                            "blocks",
+                            "blocked_by",
+                            "related",
+                            "duplicate_of",
+                            "duplicated_by"
+                          ],
+                          "type": "string"
+                        },
+                        "id": {
+                          "format": "uuid",
+                          "type": "string"
+                        },
+                        "inserted_at": {
+                          "format": "date-time",
+                          "type": "string"
+                        },
+                        "issue": {
+                          "type": "string"
+                        },
+                        "other_issue": {
+                          "type": "string"
+                        },
+                        "related_issue": {
+                          "type": "string"
+                        },
+                        "type": {
+                          "enum": [
+                            "blocks",
+                            "related",
+                            "duplicate"
+                          ],
+                          "type": "string"
+                        },
+                        "updated_at": {
+                          "format": "date-time",
+                          "type": "string"
+                        }
+                      },
+                      "required": [
+                        "id",
+                        "type",
+                        "issue",
+                        "related_issue",
+                        "direction",
+                        "other_issue",
+                        "inserted_at",
+                        "updated_at"
+                      ],
+                      "type": "object"
+                    }
+                  },
+                  "required": [
+                    "data"
+                  ],
+                  "type": "object"
+                }
+              }
+            },
+            "description": "Success"
+          },
+          "400": {
+            "description": "Bad request"
+          },
+          "401": {
+            "description": "Missing or invalid token"
+          },
+          "403": {
+            "description": "Token not permitted (org-scoped, non-admin, or missing scope)"
+          },
+          "404": {
+            "description": "Not found"
+          },
+          "422": {
+            "description": "Validation error"
+          }
+        },
+        "summary": "Update a relation",
+        "tags": []
       }
     },
     "/api/v1/issues/{identifier}/links/{id}": {
@@ -2559,6 +3006,127 @@
         },
         "summary": "Delete a link",
         "tags": []
+      },
+      "patch": {
+        "callbacks": {},
+        "deprecated": false,
+        "description": "Requires the `harness:write` scope.",
+        "parameters": [
+          {
+            "description": "Issue identifier, e.g. ALL-4901 or CLI-12 (issues minted before team-prefixed numbering carry IO-)",
+            "in": "path",
+            "name": "identifier",
+            "required": true,
+            "schema": {
+              "type": "string"
+            }
+          },
+          {
+            "description": "Resource id",
+            "in": "path",
+            "name": "id",
+            "required": true,
+            "schema": {
+              "type": "string"
+            }
+          }
+        ],
+        "requestBody": {
+          "content": {
+            "application/json": {
+              "schema": {
+                "properties": {
+                  "expected_url": {
+                    "description": "Optional optimistic precondition; mismatch returns 409",
+                    "type": "string"
+                  },
+                  "title": {
+                    "type": "string"
+                  },
+                  "url": {
+                    "description": "http(s) URL",
+                    "type": "string"
+                  }
+                },
+                "type": "object"
+              }
+            }
+          },
+          "required": true
+        },
+        "responses": {
+          "200": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "properties": {
+                    "data": {
+                      "properties": {
+                        "id": {
+                          "format": "uuid",
+                          "type": "string"
+                        },
+                        "inserted_at": {
+                          "format": "date-time",
+                          "type": "string"
+                        },
+                        "issue_id": {
+                          "format": "uuid",
+                          "type": "string"
+                        },
+                        "title": {
+                          "nullable": true,
+                          "type": "string"
+                        },
+                        "updated_at": {
+                          "format": "date-time",
+                          "type": "string"
+                        },
+                        "url": {
+                          "type": "string"
+                        }
+                      },
+                      "required": [
+                        "id",
+                        "url",
+                        "title",
+                        "issue_id",
+                        "inserted_at",
+                        "updated_at"
+                      ],
+                      "type": "object"
+                    }
+                  },
+                  "required": [
+                    "data"
+                  ],
+                  "type": "object"
+                }
+              }
+            },
+            "description": "Success"
+          },
+          "400": {
+            "description": "Bad request"
+          },
+          "401": {
+            "description": "Missing or invalid token"
+          },
+          "403": {
+            "description": "Token not permitted (org-scoped, non-admin, or missing scope)"
+          },
+          "404": {
+            "description": "Not found"
+          },
+          "409": {
+            "description": "The link URL changed after the client resolved it"
+          },
+          "422": {
+            "description": "Validation error"
+          }
+        },
+        "summary": "Update a link",
+        "tags": []
       }
     },
     "/api/v1/issues/{identifier}/relations": {