@cat-factory/app 0.47.11 → 0.48.0

package/app/components/layout/AccountDeploymentSettings.vue

@@ -15,8 +15,10 @@ const toast = useToast()
 const { t } = useI18n()
 
 const slack = reactive({ clientId: '', clientSecret: '', redirectUrl: '' })
+const linear = reactive({ clientId: '', clientSecret: '', redirectUrl: '' })
 const web = reactive({ braveApiKey: '', searxngUrl: '', searxngApiKey: '' })
 const savingSlack = ref(false)
+const savingLinear = ref(false)
 const savingWeb = ref(false)
 
 const summary = computed(() => store.view?.summary ?? null)
@@ -200,6 +202,61 @@ async function clearSlack() {
   }
 }
 
+async function saveLinear() {
+  if (!linear.clientId.trim() || !linear.clientSecret.trim() || !linear.redirectUrl.trim()) {
+    toast.add({ title: t('layout.accountDeployment.linear.validation'), color: 'error' })
+    return
+  }
+  savingLinear.value = true
+  try {
+    await store.save(props.accountId, {
+      secrets: {
+        linearOAuth: {
+          clientId: linear.clientId.trim(),
+          clientSecret: linear.clientSecret.trim(),
+          redirectUrl: linear.redirectUrl.trim(),
+        },
+      },
+    })
+    linear.clientId = ''
+    linear.clientSecret = ''
+    linear.redirectUrl = ''
+    toast.add({
+      title: t('layout.accountDeployment.linear.saved'),
+      icon: 'i-lucide-check',
+      color: 'success',
+    })
+  } catch (e) {
+    toast.add({
+      title: t('layout.accountDeployment.linear.saveFailed'),
+      description: e instanceof Error ? e.message : String(e),
+      color: 'error',
+    })
+  } finally {
+    savingLinear.value = false
+  }
+}
+
+async function clearLinear() {
+  savingLinear.value = true
+  try {
+    await store.save(props.accountId, { secrets: { linearOAuth: null } })
+    toast.add({
+      title: t('layout.accountDeployment.linear.cleared'),
+      icon: 'i-lucide-check',
+      color: 'success',
+    })
+  } catch (e) {
+    toast.add({
+      title: t('layout.accountDeployment.linear.clearFailed'),
+      description: e instanceof Error ? e.message : String(e),
+      color: 'error',
+    })
+  } finally {
+    savingLinear.value = false
+  }
+}
+
 async function saveWeb() {
   const brave = web.braveApiKey.trim()
   const searxng = web.searxngUrl.trim()
@@ -329,6 +386,68 @@ async function clearWeb() {
       </div>
     </section>
 
+    <!-- Linear app OAuth -->
+    <section class="space-y-2 border-t border-slate-800 pt-6">
+      <div class="flex items-center gap-2">
+        <h4 class="text-sm font-semibold text-slate-200">
+          {{ t('layout.accountDeployment.linear.title') }}
+        </h4>
+        <UBadge
+          :color="summary?.linearOAuthConfigured ? 'success' : 'neutral'"
+          variant="subtle"
+          size="xs"
+        >
+          {{
+            summary?.linearOAuthConfigured
+              ? t('layout.accountDeployment.configured')
+              : t('layout.accountDeployment.notSet')
+          }}
+        </UBadge>
+      </div>
+      <p class="text-[11px] text-slate-400">
+        {{ t('layout.accountDeployment.linear.description') }}
+      </p>
+      <div class="grid grid-cols-1 gap-2 sm:grid-cols-3">
+        <UInput
+          v-model="linear.clientId"
+          :placeholder="t('layout.accountDeployment.linear.clientId')"
+          size="sm"
+        />
+        <UInput
+          v-model="linear.clientSecret"
+          type="password"
+          :placeholder="t('layout.accountDeployment.linear.clientSecret')"
+          size="sm"
+        />
+        <UInput
+          v-model="linear.redirectUrl"
+          :placeholder="t('layout.accountDeployment.linear.redirectUrl')"
+          size="sm"
+        />
+      </div>
+      <div class="flex gap-2">
+        <UButton
+          color="primary"
+          size="xs"
+          icon="i-lucide-save"
+          :loading="savingLinear"
+          @click="saveLinear"
+        >
+          {{ t('common.save') }}
+        </UButton>
+        <UButton
+          v-if="summary?.linearOAuthConfigured"
+          color="neutral"
+          variant="ghost"
+          size="xs"
+          :loading="savingLinear"
+          @click="clearLinear"
+        >
+          {{ t('layout.accountDeployment.clear') }}
+        </UButton>
+      </div>
+    </section>
+
     <!-- Web search keys -->
     <section class="space-y-2 border-t border-slate-800 pt-6">
       <div class="flex items-center gap-2">

package/app/components/settings/IssueTrackerPanel.vue

@@ -68,6 +68,39 @@ const canSave = computed(() => {
   return true
 })
 
+// Linear team picker: load the connected workspace's teams so filing offers a
+// dropdown instead of a raw team-id paste. Falls back to the text input if the
+// teams can't be loaded (a broken connection shouldn't block configuration).
+const teamsLoading = ref(false)
+const teamsError = ref(false)
+const teamOptions = computed(() =>
+  tracker.linearTeams.map((tm) => ({
+    label: tm.key ? `${tm.name} (${tm.key})` : tm.name,
+    value: tm.id,
+  })),
+)
+async function loadLinearTeams() {
+  if (!linearConnected.value) return
+  teamsLoading.value = true
+  teamsError.value = false
+  try {
+    await tracker.loadLinearTeams()
+  } catch {
+    teamsError.value = true
+  } finally {
+    teamsLoading.value = false
+  }
+}
+watch(
+  () => [trackerKind.value, linearConnected.value] as const,
+  ([kind, connected]) => {
+    if (kind === 'linear' && connected && tracker.linearTeams.length === 0 && !teamsError.value) {
+      void loadLinearTeams()
+    }
+  },
+  { immediate: true },
+)
+
 async function save() {
   if (!canSave.value) return
   saving.value = true
@@ -284,7 +317,21 @@ const STATUS_UI: Record<
         :label="t('settings.issueTracker.filing.linearTeamId')"
         class="w-64"
       >
-        <UInput v-model="linearTeamId" placeholder="team_…" size="sm" class="w-full" />
+        <!-- Typeahead combobox when the connection's teams loaded (built-in client-side
+             filter over the option labels — a large org's team list is too long for a
+             plain dropdown); raw-id fallback otherwise. Mirrors the repo picker. -->
+        <UInputMenu
+          v-if="linearConnected && !teamsError && teamOptions.length > 0"
+          v-model="linearTeamId"
+          :items="teamOptions"
+          value-key="value"
+          :loading="teamsLoading"
+          icon="i-lucide-search"
+          :placeholder="t('settings.issueTracker.filing.linearTeamSearchPlaceholder')"
+          size="sm"
+          class="w-full"
+        />
+        <UInput v-else v-model="linearTeamId" placeholder="team_…" size="sm" class="w-full" />
         <template #help>
           <span class="text-[11px] text-slate-500">
             {{ t('settings.issueTracker.filing.linearTeamIdHelp') }}

package/app/components/tasks/TaskSourceConnectModal.vue

@@ -24,6 +24,9 @@ const connection = computed(() => (source.value ? tasks.connectionFor(source.val
 const connected = computed(() => connection.value !== undefined)
 // A credentialless source (GitHub Issues) reuses the installed GitHub App: no form.
 const credentialless = computed(() => (descriptor.value?.credentialFields.length ?? 0) === 0)
+// An OAuth source (Linear) offers a "Connect with X" button alongside the manual fields.
+const oauth = computed(() => descriptor.value?.oauth ?? false)
+const oauthStarting = ref(false)
 // Usable right now: a credentialed source is connected; GitHub Issues' App is installed.
 const available = computed(() => descriptor.value?.available ?? false)
 
@@ -77,6 +80,23 @@ async function submit() {
   }
 }
 
+async function startOAuth() {
+  if (!source.value) return
+  oauthStarting.value = true
+  try {
+    // Only Linear wires an OAuth flow today; the browser navigates away on success.
+    if (source.value === 'linear') await tasks.startLinearOAuth()
+  } catch (e) {
+    toast.add({
+      title: t('tasks.connect.connectFailed'),
+      description: e instanceof Error ? e.message : String(e),
+      icon: 'i-lucide-triangle-alert',
+      color: 'error',
+    })
+    oauthStarting.value = false
+  }
+}
+
 async function disconnect() {
   if (!source.value) return
   await tasks.disconnect(source.value)
@@ -129,8 +149,23 @@ async function toggleEnabled(enabled: boolean) {
           </p>
         </template>
 
-        <!-- Credentialed source (Jira): the connect form, shown until connected. -->
+        <!-- Credentialed source (Jira/Linear): the connect form, shown until connected. -->
         <div v-else-if="!connected" class="space-y-3">
+          <!-- OAuth source (Linear): the redirect button, with the manual key form below. -->
+          <template v-if="oauth">
+            <UButton
+              block
+              color="primary"
+              icon="i-lucide-plug"
+              :loading="oauthStarting"
+              @click="startOAuth"
+            >
+              {{ t('tasks.connect.oauthButton', { label: descriptor.label }) }}
+            </UButton>
+            <p class="text-center text-[11px] text-slate-500">
+              {{ t('tasks.connect.oauthOr') }}
+            </p>
+          </template>
           <UFormField
             v-for="field in descriptor.credentialFields"
             :key="field.key"

package/app/composables/api/tasks.ts

@@ -3,9 +3,11 @@ import {
   createTaskFromIssueContract,
   diagnoseTaskSourceContract,
   disconnectTaskSourceContract,
+  getLinearInstallUrlContract,
   getTrackerSettingsContract,
   importTaskContract,
   linkTaskContract,
+  listLinearTeamsContract,
   listTaskConnectionsContract,
   listTaskSourcesContract,
   listTasksContract,
@@ -95,6 +97,15 @@ export function tasksApi({ send, ws }: ApiContext) {
       body: { ref: string; containerId: string; position?: { x: number; y: number } },
     ) => send(spawnEpicContract, { pathPrefix: ws(workspaceId), pathParams: { source }, body }),
 
+    // ---- Linear-specific --------------------------------------------------
+    // The connection's Linear teams, for the ticket-filing team picker.
+    listLinearTeams: (workspaceId: string) =>
+      send(listLinearTeamsContract, { pathPrefix: ws(workspaceId) }),
+
+    // The "Connect with Linear" OAuth authorize URL (the browser is redirected to it).
+    getLinearInstallUrl: (workspaceId: string) =>
+      send(getLinearInstallUrlContract, { pathPrefix: ws(workspaceId) }),
+
     // ---- issue-tracker selection (workspace-level) ------------------------
     getTrackerSettings: (workspaceId: string) =>
       send(getTrackerSettingsContract, { pathPrefix: ws(workspaceId) }),

package/app/stores/tasks.ts

@@ -90,6 +90,17 @@ export const useTasksStore = defineStore('tasks', () => {
     available.value = true
   }
 
+  /**
+   * Start the "Connect with Linear" OAuth flow by navigating the browser to the
+   * authorize URL the backend mints (carrying a signed `state`). Linear redirects
+   * back to the public callback, which stores the token; the settings panel's
+   * `probe()` on return then reflects the new connection.
+   */
+  async function startLinearOAuth() {
+    const { url } = await api.getLinearInstallUrl(workspace.requireId())
+    window.location.href = url
+  }
+
   /** Disconnect the workspace from a source. */
   async function disconnect(source: TaskSourceKind) {
     await api.disconnectTaskSource(workspace.requireId(), source)
@@ -203,6 +214,7 @@ export const useTasksStore = defineStore('tasks', () => {
     probe,
     checkSetup,
     connect,
+    startLinearOAuth,
     disconnect,
     setEnabled,
     loadTasks,

package/app/stores/tracker.ts

@@ -1,5 +1,6 @@
 import { defineStore } from 'pinia'
 import { ref } from 'vue'
+import type { LinearTeam } from '~/types/domain'
 import type { PutTrackerSettingsInput, TrackerSettings } from '~/types/tracker'
 import { useWorkspaceStore } from '~/stores/workspace'
 
@@ -20,6 +21,9 @@ export const useTrackerStore = defineStore('tracker', () => {
     updatedAt: 0,
   })
 
+  /** The connected Linear workspace's teams, for the filing team picker (lazily loaded). */
+  const linearTeams = ref<LinearTeam[]>([])
+
   function hydrate(value: TrackerSettings | undefined) {
     settings.value = value ?? {
       tracker: null,
@@ -37,5 +41,12 @@ export const useTrackerStore = defineStore('tracker', () => {
     return settings.value
   }
 
-  return { settings, hydrate, save }
+  /** Load the connected Linear workspace's teams for the filing team picker. */
+  async function loadLinearTeams() {
+    const ws = useWorkspaceStore()
+    const { teams } = await api.listLinearTeams(ws.requireId())
+    linearTeams.value = teams
+  }
+
+  return { settings, linearTeams, hydrate, save, loadLinearTeams }
 })

package/app/types/tasks.ts

@@ -19,4 +19,5 @@ export type {
   SourceTask,
   TaskSearchResult,
   CredentialField,
+  LinearTeam,
 } from '@cat-factory/contracts'

package/i18n/locales/en.json

@@ -828,6 +828,18 @@
         "cleared": "Slack OAuth cleared",
         "clearFailed": "Could not clear Slack OAuth"
       },
+      "linear": {
+        "title": "Linear app (OAuth)",
+        "description": "Enables the \"Connect with Linear\" OAuth flow. Without it, workspaces can still connect Linear by pasting a personal API key.",
+        "clientId": "Client ID",
+        "clientSecret": "Client secret",
+        "redirectUrl": "Redirect URL",
+        "validation": "Enter the client id, secret and redirect URL",
+        "saved": "Linear OAuth saved",
+        "saveFailed": "Could not save Linear OAuth",
+        "cleared": "Linear OAuth cleared",
+        "clearFailed": "Could not clear Linear OAuth"
+      },
       "web": {
         "title": "Container web search",
         "description": "The search upstream container agents reach through the backend proxy. Set a Brave key (recommended), or a self-hosted SearXNG URL (with an optional bearer key).",
@@ -1340,7 +1352,8 @@
         "jiraProjectKey": "Jira project key",
         "jiraProjectKeyHelp": "New tickets are filed under this project.",
         "linearTeamId": "Linear team id",
-        "linearTeamIdHelp": "New issues are created under this team (Linear requires a team to create an issue)."
+        "linearTeamIdHelp": "New issues are created under this team (Linear requires a team to create an issue).",
+        "linearTeamSearchPlaceholder": "Search teams…"
       },
       "vendor": {
         "github": "GitHub Issues",
@@ -2168,7 +2181,9 @@
       "offerHint": "When off, {label} is hidden from import and linking.",
       "disconnect": "Disconnect",
       "updateConnection": "Update connection",
-      "connect": "Connect"
+      "connect": "Connect",
+      "oauthButton": "Connect with {label}",
+      "oauthOr": "or connect with an API key"
     }
   },
   "pipeline": {

package/i18n/locales/es.json

@@ -789,6 +789,18 @@
         "cleared": "OAuth de Slack borrado",
         "clearFailed": "No se pudo borrar el OAuth de Slack"
       },
+      "linear": {
+        "title": "Aplicación de Linear (OAuth)",
+        "description": "Habilita el flujo de OAuth \"Conectar con Linear\". Sin ello, los espacios de trabajo aún pueden conectar Linear pegando una clave de API personal.",
+        "clientId": "ID de cliente",
+        "clientSecret": "Secreto de cliente",
+        "redirectUrl": "URL de redirección",
+        "validation": "Introduce el id de cliente, el secreto y la URL de redirección",
+        "saved": "OAuth de Linear guardado",
+        "saveFailed": "No se pudo guardar OAuth de Linear",
+        "cleared": "OAuth de Linear borrado",
+        "clearFailed": "No se pudo borrar OAuth de Linear"
+      },
       "web": {
         "title": "Búsqueda web del contenedor",
         "description": "El proveedor de búsqueda al que los agentes del contenedor acceden a través del proxy del backend. Define una clave de Brave (recomendado) o una URL de SearXNG autoalojada (con una clave bearer opcional).",
@@ -1298,7 +1310,8 @@
         "jiraProjectKey": "Clave de proyecto de Jira",
         "jiraProjectKeyHelp": "Los nuevos tickets se registran en este proyecto.",
         "linearTeamId": "Id de equipo de Linear",
-        "linearTeamIdHelp": "Las nuevas incidencias se crean en este equipo (Linear requiere un equipo para crear una incidencia)."
+        "linearTeamIdHelp": "Las nuevas incidencias se crean en este equipo (Linear requiere un equipo para crear una incidencia).",
+        "linearTeamSearchPlaceholder": "Buscar equipos…"
       },
       "vendor": {
         "github": "GitHub Issues",
@@ -2111,7 +2124,9 @@
       "offerHint": "Cuando está desactivada, {label} se oculta de la importación y la vinculación.",
       "disconnect": "Desconectar",
       "updateConnection": "Actualizar conexión",
-      "connect": "Conectar"
+      "connect": "Conectar",
+      "oauthButton": "Conectar con {label}",
+      "oauthOr": "o conecta con una clave API"
     }
   },
   "pipeline": {

package/i18n/locales/fr.json

@@ -789,6 +789,18 @@
         "cleared": "OAuth Slack effacé",
         "clearFailed": "Impossible d'effacer l'OAuth Slack"
       },
+      "linear": {
+        "title": "Application Linear (OAuth)",
+        "description": "Active le flux OAuth « Se connecter avec Linear ». Sans cela, les espaces de travail peuvent toujours connecter Linear en collant une clé API personnelle.",
+        "clientId": "ID client",
+        "clientSecret": "Secret client",
+        "redirectUrl": "URL de redirection",
+        "validation": "Saisissez l'id client, le secret et l'URL de redirection",
+        "saved": "OAuth Linear enregistré",
+        "saveFailed": "Impossible d'enregistrer OAuth Linear",
+        "cleared": "OAuth Linear effacé",
+        "clearFailed": "Impossible d'effacer OAuth Linear"
+      },
       "web": {
         "title": "Recherche web du conteneur",
         "description": "Le fournisseur de recherche que les agents en conteneur atteignent via le proxy du backend. Définissez une clé Brave (recommandé) ou une URL SearXNG auto-hébergée (avec une clé bearer facultative).",
@@ -1298,7 +1310,8 @@
         "jiraProjectKey": "Clé de projet Jira",
         "jiraProjectKeyHelp": "Les nouveaux tickets sont créés dans ce projet.",
         "linearTeamId": "Id d'équipe Linear",
-        "linearTeamIdHelp": "Les nouveaux tickets sont créés dans cette équipe (Linear exige une équipe pour créer un ticket)."
+        "linearTeamIdHelp": "Les nouveaux tickets sont créés dans cette équipe (Linear exige une équipe pour créer un ticket).",
+        "linearTeamSearchPlaceholder": "Rechercher des équipes…"
       },
       "vendor": {
         "github": "GitHub Issues",
@@ -2111,7 +2124,9 @@
       "offerHint": "Lorsqu'elle est désactivée, {label} est masquée de l'importation et de la liaison.",
       "disconnect": "Déconnecter",
       "updateConnection": "Mettre à jour la connexion",
-      "connect": "Connecter"
+      "connect": "Connecter",
+      "oauthButton": "Se connecter avec {label}",
+      "oauthOr": "ou connectez-vous avec une clé API"
     }
   },
   "pipeline": {

package/i18n/locales/pl.json

@@ -789,6 +789,18 @@
         "cleared": "Wyczyszczono OAuth Slacka",
         "clearFailed": "Nie udało się wyczyścić OAuth Slacka"
       },
+      "linear": {
+        "title": "Aplikacja Linear (OAuth)",
+        "description": "Włącza przepływ OAuth „Połącz z Linear”. Bez niego przestrzenie robocze nadal mogą połączyć Linear, wklejając osobisty klucz API.",
+        "clientId": "Identyfikator klienta",
+        "clientSecret": "Sekret klienta",
+        "redirectUrl": "Adres URL przekierowania",
+        "validation": "Podaj identyfikator klienta, sekret i adres URL przekierowania",
+        "saved": "Zapisano OAuth Linear",
+        "saveFailed": "Nie udało się zapisać OAuth Linear",
+        "cleared": "Wyczyszczono OAuth Linear",
+        "clearFailed": "Nie udało się wyczyścić OAuth Linear"
+      },
       "web": {
         "title": "Wyszukiwanie w sieci w kontenerze",
         "description": "Dostawca wyszukiwania, do którego agenci w kontenerze sięgają przez proxy backendu. Ustaw klucz Brave (zalecane) lub własny adres URL SearXNG (z opcjonalnym kluczem bearer).",
@@ -1298,7 +1310,8 @@
         "jiraProjectKey": "Klucz projektu Jira",
         "jiraProjectKeyHelp": "Nowe zgłoszenia są rejestrowane w tym projekcie.",
         "linearTeamId": "Identyfikator zespołu Linear",
-        "linearTeamIdHelp": "Nowe zgłoszenia są tworzone w tym zespole (Linear wymaga zespołu do utworzenia zgłoszenia)."
+        "linearTeamIdHelp": "Nowe zgłoszenia są tworzone w tym zespole (Linear wymaga zespołu do utworzenia zgłoszenia).",
+        "linearTeamSearchPlaceholder": "Szukaj zespołów…"
       },
       "vendor": {
         "github": "GitHub Issues",
@@ -2111,7 +2124,9 @@
       "offerHint": "Po wyłączeniu {label} jest ukryte przed importem i powiązywaniem.",
       "disconnect": "Rozłącz",
       "updateConnection": "Zaktualizuj połączenie",
-      "connect": "Połącz"
+      "connect": "Połącz",
+      "oauthButton": "Połącz z {label}",
+      "oauthOr": "lub połącz za pomocą klucza API"
     }
   },
   "pipeline": {

package/i18n/locales/uk.json

@@ -789,6 +789,18 @@
         "cleared": "OAuth Slack очищено",
         "clearFailed": "Не вдалося очистити OAuth Slack"
       },
+      "linear": {
+        "title": "Застосунок Linear (OAuth)",
+        "description": "Вмикає потік OAuth «Підключити через Linear». Без нього робочі простори все одно можуть підключити Linear, вставивши особистий ключ API.",
+        "clientId": "ID клієнта",
+        "clientSecret": "Секрет клієнта",
+        "redirectUrl": "URL перенаправлення",
+        "validation": "Введіть ID клієнта, секрет і URL перенаправлення",
+        "saved": "OAuth Linear збережено",
+        "saveFailed": "Не вдалося зберегти OAuth Linear",
+        "cleared": "OAuth Linear очищено",
+        "clearFailed": "Не вдалося очистити OAuth Linear"
+      },
       "web": {
         "title": "Вебпошук контейнера",
         "description": "Постачальник пошуку, до якого агенти в контейнері звертаються через проксі бекенду. Задайте ключ Brave (рекомендовано) або власний URL SearXNG (з необов'язковим ключем bearer).",
@@ -1298,7 +1310,8 @@
         "jiraProjectKey": "Ключ проєкту Jira",
         "jiraProjectKeyHelp": "Нові тикети реєструються в цьому проєкті.",
         "linearTeamId": "Ідентифікатор команди Linear",
-        "linearTeamIdHelp": "Нові тикети створюються в цій команді (Linear вимагає команду для створення тикета)."
+        "linearTeamIdHelp": "Нові тикети створюються в цій команді (Linear вимагає команду для створення тикета).",
+        "linearTeamSearchPlaceholder": "Пошук команд…"
       },
       "vendor": {
         "github": "GitHub Issues",
@@ -2111,7 +2124,9 @@
       "offerHint": "Коли вимкнено, {label} приховано з імпорту та прив'язування.",
       "disconnect": "Відключити",
       "updateConnection": "Оновити підключення",
-      "connect": "Підключити"
+      "connect": "Підключити",
+      "oauthButton": "Підключити через {label}",
+      "oauthOr": "або підключіться за допомогою ключа API"
     }
   },
   "pipeline": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cat-factory/app",
-  "version": "0.47.11",
+  "version": "0.48.0",
   "description": "Reusable Nuxt layer for the Agent Architecture Board SPA (components, stores, composables, pages). Consume it from a thin deployment app via `extends: ['@cat-factory/app']` and point it at your backend with NUXT_PUBLIC_API_BASE. See deploy/frontend for an example.",
   "repository": {
     "type": "git",
@@ -34,7 +34,7 @@
     "valibot": "^1.4.2",
     "vue": "^3.5.39",
     "wretch": "^3.0.9",
-    "@cat-factory/contracts": "0.45.1"
+    "@cat-factory/contracts": "0.46.0"
   },
   "devDependencies": {
     "@toad-contracts/testing": "0.3.2",