@cat-factory/integrations 0.24.1 → 0.25.0

package/dist/modules/shared/linear.client.js

@@ -0,0 +1,192 @@
+// Shared Linear GraphQL transport. Linear exposes a single GraphQL endpoint, so
+// every Linear consumer (the document source, the task source, ticket filing and
+// PR writeback) talks to the SAME host with the SAME auth scheme — this module is
+// that one place. It is runtime-neutral (global `fetch`, present on both the
+// Cloudflare and Node facades) and host-pinned to `api.linear.app`, following the
+// per-hop redirect guard + capped body read the NotionProvider uses so a hostile
+// redirect can't leak the API key or OOM the isolate.
+//
+// OAuth-ready seam: auth is an opaque object today carrying a personal API key
+// (sent as the raw `authorization` value). When OAuth lands, a `{ token }` variant
+// emits `authorization: Bearer <token>` with no change to any caller — see
+// `linearAuthHeader`.
+export const LINEAR_GRAPHQL_URL = 'https://api.linear.app/graphql';
+const LINEAR_API_HOST = 'api.linear.app';
+const USER_AGENT = 'cat-factory';
+/** Bound the redirect chain so the fixed API host can't 302 us elsewhere. */
+const MAX_REDIRECTS = 5;
+/** Hard cap on the bytes read off any response body, to protect the isolate. */
+const MAX_RESPONSE_BYTES = 5_000_000;
+/** Build the `authorization` header for a Linear request (API key raw, OAuth `Bearer`). */
+export function linearAuthHeader(auth) {
+    return 'token' in auth ? `Bearer ${auth.token}` : auth.apiKey;
+}
+/** Carries the HTTP status so callers can surface a meaningful error. */
+export class LinearApiError extends Error {
+    status;
+    constructor(status, message) {
+        super(message);
+        this.status = status;
+        this.name = 'LinearApiError';
+    }
+}
+/**
+ * Validate a parsed GraphQL envelope and return its `data`. Pure (no I/O) so both
+ * the safe global-fetch client below and the FetchLike-driven tracker/writeback
+ * services share one error policy. Throws {@link LinearApiError} on a non-OK
+ * status, a top-level `errors[]`, or a missing `data`.
+ */
+export function unwrapLinearData(status, ok, parsed) {
+    const envelope = (parsed ?? {});
+    if (!ok) {
+        const detail = envelope.errors?.map((e) => e.message).join('; ');
+        throw new LinearApiError(status, `Linear GraphQL → ${status}${detail ? `: ${detail}` : ''}`);
+    }
+    if (Array.isArray(envelope.errors) && envelope.errors.length > 0) {
+        const detail = envelope.errors.map((e) => e.message ?? 'unknown error').join('; ');
+        throw new LinearApiError(status, `Linear GraphQL error: ${detail}`);
+    }
+    if (envelope.data == null) {
+        throw new LinearApiError(502, 'Linear GraphQL returned no data');
+    }
+    return envelope.data;
+}
+/** The header set every Linear GraphQL POST sends (API key raw, OAuth `Bearer`). */
+export function linearRequestHeaders(auth) {
+    return {
+        authorization: linearAuthHeader(auth),
+        accept: 'application/json',
+        'content-type': 'application/json',
+        'user-agent': USER_AGENT,
+    };
+}
+/**
+ * Run a Linear GraphQL operation through a caller-injected `fetch` (the write path:
+ * ticket filing + PR writeback), returning the validated `data`. This is the single
+ * place those services build the request + apply the {@link unwrapLinearData} error
+ * policy, so the header set and error handling can't drift between call sites. The
+ * read/import path uses {@link LinearGraphqlClient} instead (it additionally pins
+ * the host + caps the body on the real `fetch`). `fetchImpl` is injected so the
+ * services stay unit-testable with a fake transport (mirrors the Jira pattern).
+ */
+export async function postLinearGraphql(fetchImpl, auth, document, variables) {
+    const res = await fetchImpl(LINEAR_GRAPHQL_URL, {
+        method: 'POST',
+        headers: linearRequestHeaders(auth),
+        body: JSON.stringify({ query: document, variables }),
+    });
+    return unwrapLinearData(res.status, res.ok, await res.json().catch(() => null));
+}
+/**
+ * The Linear API host is fixed, so any redirect must stay on `api.linear.app`
+ * over https — a redirect off-host (e.g. to an internal address) is treated as an
+ * SSRF attempt and rejected. Mirrors the NotionProvider guard.
+ */
+function assertSafeLinearUrl(url) {
+    let parsed;
+    try {
+        parsed = new URL(url);
+    }
+    catch {
+        throw new LinearApiError(502, `Linear request URL is invalid: ${url}`);
+    }
+    if (parsed.protocol !== 'https:') {
+        throw new LinearApiError(502, 'Linear request must use https');
+    }
+    if (parsed.hostname.toLowerCase() !== LINEAR_API_HOST) {
+        throw new LinearApiError(502, `Linear redirect to a disallowed host: ${parsed.hostname}`);
+    }
+}
+/** `fetch` with redirects followed by hand so the host guard runs against EVERY hop. */
+async function safeFetch(url, init) {
+    let current = url;
+    for (let hop = 0;; hop++) {
+        assertSafeLinearUrl(current);
+        const res = await fetch(current, { ...init, redirect: 'manual' });
+        if (res.status >= 300 && res.status < 400) {
+            const location = res.headers.get('location');
+            if (!location)
+                return res;
+            if (hop >= MAX_REDIRECTS)
+                throw new LinearApiError(502, 'Linear returned too many redirects');
+            current = new URL(location, current).toString();
+            continue;
+        }
+        return res;
+    }
+}
+/** Read a response body with a running byte cap so a huge response can't OOM the isolate. */
+async function readCappedText(res, maxBytes) {
+    const declared = res.headers.get('content-length');
+    if (declared && Number(declared) > maxBytes) {
+        throw new LinearApiError(502, 'Linear response too large');
+    }
+    const body = res.body;
+    if (!body)
+        return '';
+    const reader = body.getReader();
+    const chunks = [];
+    let total = 0;
+    try {
+        for (;;) {
+            const { done, value } = await reader.read();
+            if (done)
+                break;
+            if (!value)
+                continue;
+            total += value.byteLength;
+            if (total > maxBytes) {
+                await reader.cancel();
+                throw new LinearApiError(502, 'Linear response too large');
+            }
+            chunks.push(value);
+        }
+    }
+    finally {
+        reader.releaseLock();
+    }
+    const merged = new Uint8Array(total);
+    let offset = 0;
+    for (const c of chunks) {
+        merged.set(c, offset);
+        offset += c.byteLength;
+    }
+    return new TextDecoder().decode(merged);
+}
+/**
+ * A thin, safe Linear GraphQL client used by the document + task providers (the
+ * read/import path). It runs the host-pinned redirect guard + capped read on the
+ * real `fetch`. The ticket-filing / writeback services do NOT use this class: they
+ * post through their own injected `FetchLike` (for testability, matching the Jira
+ * pattern) and share only the pure `unwrapLinearData` / `linearAuthHeader` helpers.
+ */
+export class LinearGraphqlClient {
+    auth;
+    constructor(auth) {
+        this.auth = auth;
+    }
+    /** Run a GraphQL document and return its validated `data`. */
+    async query(document, variables = {}) {
+        const res = await safeFetch(LINEAR_GRAPHQL_URL, {
+            method: 'POST',
+            headers: {
+                authorization: linearAuthHeader(this.auth),
+                accept: 'application/json',
+                'content-type': 'application/json',
+                'user-agent': USER_AGENT,
+            },
+            body: JSON.stringify({ query: document, variables }),
+        });
+        const text = await readCappedText(res, MAX_RESPONSE_BYTES).catch(() => '');
+        const parsed = (() => {
+            try {
+                return JSON.parse(text);
+            }
+            catch {
+                return null;
+            }
+        })();
+        return unwrapLinearData(res.status, res.ok, parsed);
+    }
+}
+//# sourceMappingURL=linear.client.js.map

package/dist/modules/shared/linear.client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"linear.client.js","sourceRoot":"","sources":["../../../src/modules/shared/linear.client.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,iFAAiF;AACjF,kFAAkF;AAClF,6EAA6E;AAC7E,kFAAkF;AAClF,iFAAiF;AACjF,sDAAsD;AACtD,EAAE;AACF,+EAA+E;AAC/E,mFAAmF;AACnF,2EAA2E;AAC3E,sBAAsB;AAEtB,MAAM,CAAC,MAAM,kBAAkB,GAAG,gCAAgC,CAAA;AAClE,MAAM,eAAe,GAAG,gBAAgB,CAAA;AACxC,MAAM,UAAU,GAAG,aAAa,CAAA;AAChC,6EAA6E;AAC7E,MAAM,aAAa,GAAG,CAAC,CAAA;AACvB,gFAAgF;AAChF,MAAM,kBAAkB,GAAG,SAAS,CAAA;AAUpC,2FAA2F;AAC3F,MAAM,UAAU,gBAAgB,CAAC,IAAgB;IAC/C,OAAO,OAAO,IAAI,IAAI,CAAC,CAAC,CAAC,UAAU,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAA;AAC/D,CAAC;AAED,yEAAyE;AACzE,MAAM,OAAO,cAAe,SAAQ,KAAK;IAE5B,MAAM;IADjB,YACW,MAAc,EACvB,OAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAA;sBAHL,MAAM;QAIf,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAA;IAC9B,CAAC;CACF;AAkBD;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAI,MAAc,EAAE,EAAW,EAAE,MAAe;IAC9E,MAAM,QAAQ,GAAG,CAAC,MAAM,IAAI,EAAE,CAAuB,CAAA;IACrD,IAAI,CAAC,EAAE,EAAE,CAAC;QACR,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAChE,MAAM,IAAI,cAAc,CAAC,MAAM,EAAE,oBAAoB,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;IAC9F,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACjE,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,IAAI,eAAe,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAClF,MAAM,IAAI,cAAc,CAAC,MAAM,EAAE,yBAAyB,MAAM,EAAE,CAAC,CAAA;IACrE,CAAC;IACD,IAAI,QAAQ,CAAC,IAAI,IAAI,IAAI,EAAE,CAAC;QAC1B,MAAM,IAAI,cAAc,CAAC,GAAG,EAAE,iCAAiC,CAAC,CAAA;IAClE,CAAC;IACD,OAAO,QAAQ,CAAC,IAAI,CAAA;AACtB,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,oBAAoB,CAAC,IAAgB;IACnD,OAAO;QACL,aAAa,EAAE,gBAAgB,CAAC,IAAI,CAAC;QACrC,MAAM,EAAE,kBAAkB;QAC1B,cAAc,EAAE,kBAAkB;QAClC,YAAY,EAAE,UAAU;KACzB,CAAA;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,SAGuE,EACvE,IAAgB,EAChB,QAAgB,EAChB,SAAkC;IAElC,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,kBAAkB,EAAE;QAC9C,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,oBAAoB,CAAC,IAAI,CAAC;QACnC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;KACrD,CAAC,CAAA;IACF,OAAO,gBAAgB,CAAI,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,CAAA;AACpF,CAAC;AAED;;;;GAIG;AACH,SAAS,mBAAmB,CAAC,GAAW;IACtC,IAAI,MAAW,CAAA;IACf,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAA;IACvB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,cAAc,CAAC,GAAG,EAAE,kCAAkC,GAAG,EAAE,CAAC,CAAA;IACxE,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACjC,MAAM,IAAI,cAAc,CAAC,GAAG,EAAE,+BAA+B,CAAC,CAAA;IAChE,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,eAAe,EAAE,CAAC;QACtD,MAAM,IAAI,cAAc,CAAC,GAAG,EAAE,yCAAyC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAA;IAC3F,CAAC;AACH,CAAC;AAED,wFAAwF;AACxF,KAAK,UAAU,SAAS,CAAC,GAAW,EAAE,IAAiB;IACrD,IAAI,OAAO,GAAG,GAAG,CAAA;IACjB,KAAK,IAAI,GAAG,GAAG,CAAC,GAAI,GAAG,EAAE,EAAE,CAAC;QAC1B,mBAAmB,CAAC,OAAO,CAAC,CAAA;QAC5B,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,OAAO,EAAE,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAA;QACjE,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;YAC1C,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;YAC5C,IAAI,CAAC,QAAQ;gBAAE,OAAO,GAAG,CAAA;YACzB,IAAI,GAAG,IAAI,aAAa;gBAAE,MAAM,IAAI,cAAc,CAAC,GAAG,EAAE,oCAAoC,CAAC,CAAA;YAC7F,OAAO,GAAG,IAAI,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAA;YAC/C,SAAQ;QACV,CAAC;QACD,OAAO,GAAG,CAAA;IACZ,CAAC;AACH,CAAC;AAED,6FAA6F;AAC7F,KAAK,UAAU,cAAc,CAAC,GAAa,EAAE,QAAgB;IAC3D,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAA;IAClD,IAAI,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,QAAQ,EAAE,CAAC;QAC5C,MAAM,IAAI,cAAc,CAAC,GAAG,EAAE,2BAA2B,CAAC,CAAA;IAC5D,CAAC;IACD,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAA;IACrB,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,CAAA;IACpB,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,CAAA;IAC/B,MAAM,MAAM,GAAiB,EAAE,CAAA;IAC/B,IAAI,KAAK,GAAG,CAAC,CAAA;IACb,IAAI,CAAC;QACH,SAAS,CAAC;YACR,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAA;YAC3C,IAAI,IAAI;gBAAE,MAAK;YACf,IAAI,CAAC,KAAK;gBAAE,SAAQ;YACpB,KAAK,IAAI,KAAK,CAAC,UAAU,CAAA;YACzB,IAAI,KAAK,GAAG,QAAQ,EAAE,CAAC;gBACrB,MAAM,MAAM,CAAC,MAAM,EAAE,CAAA;gBACrB,MAAM,IAAI,cAAc,CAAC,GAAG,EAAE,2BAA2B,CAAC,CAAA;YAC5D,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACpB,CAAC;IACH,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,WAAW,EAAE,CAAA;IACtB,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,CAAA;IACpC,IAAI,MAAM,GAAG,CAAC,CAAA;IACd,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,CAAA;QACrB,MAAM,IAAI,CAAC,CAAC,UAAU,CAAA;IACxB,CAAC;IACD,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;AACzC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,OAAO,mBAAmB;IACD,IAAI;IAAjC,YAA6B,IAAgB;oBAAhB,IAAI;IAAe,CAAC;IAEjD,8DAA8D;IAC9D,KAAK,CAAC,KAAK,CAAI,QAAgB,EAAE,SAAS,GAA4B,EAAE;QACtE,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,kBAAkB,EAAE;YAC9C,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,aAAa,EAAE,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC;gBAC1C,MAAM,EAAE,kBAAkB;gBAC1B,cAAc,EAAE,kBAAkB;gBAClC,YAAY,EAAE,UAAU;aACzB;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;SACrD,CAAC,CAAA;QACF,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAA;QAC1E,MAAM,MAAM,GAAG,CAAC,GAAG,EAAE;YACnB,IAAI,CAAC;gBACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;YACzB,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,IAAI,CAAA;YACb,CAAC;QACH,CAAC,CAAC,EAAE,CAAA;QACJ,OAAO,gBAAgB,CAAI,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,CAAA;IACxD,CAAC;CACF"}

package/dist/modules/tasks/GitHubIssuesProvider.d.ts

@@ -8,7 +8,7 @@ export declare class GitHubIssuesProvider implements TaskSourceProvider {
     private readonly deps;
     readonly kind: 'github';
     readonly descriptor: {
-        source: "github" | "jira";
+        source: "github" | "jira" | "linear";
         label: string;
         icon: string;
         credentialFields: {

package/dist/modules/tasks/JiraProvider.d.ts

@@ -7,7 +7,7 @@ export declare class JiraApiError extends Error {
 export declare class JiraProvider implements TaskSourceProvider {
     readonly kind: 'jira';
     readonly descriptor: {
-        source: "github" | "jira";
+        source: "github" | "jira" | "linear";
         label: string;
         icon: string;
         credentialFields: {

package/dist/modules/tasks/LinearTaskProvider.d.ts

@@ -0,0 +1,33 @@
+import { type TaskContent, type TaskCredentials, type TaskSearchResult, type TaskSourceDiagnostic, type TaskSourceProvider, type NormalizedTaskConnection } from '@cat-factory/kernel';
+export declare class LinearTaskProvider implements TaskSourceProvider {
+    readonly kind: 'linear';
+    readonly descriptor: {
+        source: "github" | "jira" | "linear";
+        label: string;
+        icon: string;
+        credentialFields: {
+            key: string;
+            label: string;
+            help?: string | undefined;
+            placeholder?: string | undefined;
+            secret?: boolean | undefined;
+        }[];
+        refLabel: string;
+        refPlaceholder: string;
+        searchable?: boolean | undefined;
+    };
+    normalizeConnection(input: TaskCredentials): NormalizedTaskConnection;
+    parseRef(input: string): string | null;
+    fetchTask(credentials: TaskCredentials, externalId: string): Promise<TaskContent>;
+    search(credentials: TaskCredentials, query: string): Promise<TaskSearchResult[]>;
+    /**
+     * Live setup check: read `viewer` (the cheapest authenticated query) with the
+     * stored key. A 401/403 from Linear's GraphQL surfaces as auth_failed/forbidden;
+     * a thrown fetch (DNS/network) ⇒ unreachable. Resolves (never rejects), per the port.
+     */
+    diagnose(input: {
+        workspaceId: string;
+        credentials: TaskCredentials | null;
+    }): Promise<TaskSourceDiagnostic>;
+}
+//# sourceMappingURL=LinearTaskProvider.d.ts.map

package/dist/modules/tasks/LinearTaskProvider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"LinearTaskProvider.d.ts","sourceRoot":"","sources":["../../../src/modules/tasks/LinearTaskProvider.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,WAAW,EAChB,KAAK,eAAe,EACpB,KAAK,gBAAgB,EACrB,KAAK,oBAAoB,EACzB,KAAK,kBAAkB,EACvB,KAAK,wBAAwB,EAC9B,MAAM,qBAAqB,CAAA;AAuB5B,qBAAa,kBAAmB,YAAW,kBAAkB;IAC3D,QAAQ,CAAC,IAAI,EAAG,QAAQ,CAAS;IACjC,QAAQ,CAAC,UAAU;;;;;;;;;;;;;;MAAyB;IAE5C,mBAAmB,CAAC,KAAK,EAAE,eAAe,GAAG,wBAAwB,CAMpE;IAED,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAErC;IAEK,SAAS,CAAC,WAAW,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CAMtF;IAEK,MAAM,CAAC,WAAW,EAAE,eAAe,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAOrF;IAED;;;;OAIG;IACG,QAAQ,CAAC,KAAK,EAAE;QACpB,WAAW,EAAE,MAAM,CAAA;QACnB,WAAW,EAAE,eAAe,GAAG,IAAI,CAAA;KACpC,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAqDhC;CACF"}

package/dist/modules/tasks/LinearTaskProvider.js

@@ -0,0 +1,99 @@
+import { ValidationError, } from '@cat-factory/kernel';
+import { LinearApiError, LinearGraphqlClient } from '../shared/linear.client.js';
+import { LINEAR_ISSUE_QUERY, LINEAR_SEARCH_ISSUES_QUERY, LINEAR_TASK_DESCRIPTOR, LINEAR_VIEWER_QUERY, mapLinearIssue, mapLinearSearchResults, parseLinearRef, } from './linear.logic.js';
+// LinearTaskProvider: the task-source provider for Linear. It authenticates with a
+// personal API key against Linear's single GraphQL endpoint (via the shared
+// host-pinned, redirect-safe client) and maps an issue onto the structured
+// {@link TaskContent} — status / assignee / priority / labels + the Markdown
+// description, comments, parent/sub-issues and dependency relations. All
+// Linear-specific pure logic (ref parsing, mapping, the GraphQL documents) lives in
+// `linear.logic` so it is unit-testable; this class is the thin transport.
+//
+// Runtime-neutral: it depends only on the kernel ports + the shared client (global
+// `fetch`), so the Cloudflare and Node facades compose the SAME class.
+export class LinearTaskProvider {
+    kind = 'linear';
+    descriptor = LINEAR_TASK_DESCRIPTOR;
+    normalizeConnection(input) {
+        const apiKey = input.apiKey?.trim();
+        if (!apiKey) {
+            throw new ValidationError('Linear requires a personal API key');
+        }
+        return { credentials: { apiKey }, label: 'Linear workspace' };
+    }
+    parseRef(input) {
+        return parseLinearRef(input);
+    }
+    async fetchTask(credentials, externalId) {
+        const client = new LinearGraphqlClient({ apiKey: credentials.apiKey });
+        const data = await client.query(LINEAR_ISSUE_QUERY, {
+            id: externalId,
+        });
+        return mapLinearIssue(data);
+    }
+    async search(credentials, query) {
+        const client = new LinearGraphqlClient({ apiKey: credentials.apiKey });
+        const data = await client.query(LINEAR_SEARCH_ISSUES_QUERY, { term: query });
+        return mapLinearSearchResults(data);
+    }
+    /**
+     * Live setup check: read `viewer` (the cheapest authenticated query) with the
+     * stored key. A 401/403 from Linear's GraphQL surfaces as auth_failed/forbidden;
+     * a thrown fetch (DNS/network) ⇒ unreachable. Resolves (never rejects), per the port.
+     */
+    async diagnose(input) {
+        const apiKey = input.credentials?.apiKey;
+        if (!apiKey) {
+            return {
+                source: 'linear',
+                ok: false,
+                status: 'not_connected',
+                message: 'Linear has no stored credentials. Connect it with a personal API key.',
+            };
+        }
+        try {
+            const client = new LinearGraphqlClient({ apiKey });
+            const data = await client.query(LINEAR_VIEWER_QUERY);
+            return {
+                source: 'linear',
+                ok: true,
+                status: 'ready',
+                message: 'Authenticated to Linear.',
+                detail: data.viewer?.name ? `Signed in as ${data.viewer.name}.` : null,
+            };
+        }
+        catch (err) {
+            if (err instanceof LinearApiError) {
+                if (err.status === 401) {
+                    return {
+                        source: 'linear',
+                        ok: false,
+                        status: 'auth_failed',
+                        message: 'Linear rejected the API key (401). Generate a fresh personal API key and reconnect.',
+                    };
+                }
+                if (err.status === 403) {
+                    return {
+                        source: 'linear',
+                        ok: false,
+                        status: 'forbidden',
+                        message: 'Linear authenticated the key but denied access (403). Check its scopes.',
+                    };
+                }
+                return {
+                    source: 'linear',
+                    ok: false,
+                    status: 'error',
+                    message: err.message,
+                };
+            }
+            return {
+                source: 'linear',
+                ok: false,
+                status: 'unreachable',
+                message: "Couldn't reach Linear. Check network connectivity, then re-check.",
+            };
+        }
+    }
+}
+//# sourceMappingURL=LinearTaskProvider.js.map

package/dist/modules/tasks/LinearTaskProvider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"LinearTaskProvider.js","sourceRoot":"","sources":["../../../src/modules/tasks/LinearTaskProvider.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,eAAe,GAOhB,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAA;AAChF,OAAO,EACL,kBAAkB,EAClB,0BAA0B,EAC1B,sBAAsB,EACtB,mBAAmB,EACnB,cAAc,EACd,sBAAsB,EACtB,cAAc,GACf,MAAM,mBAAmB,CAAA;AAE1B,mFAAmF;AACnF,4EAA4E;AAC5E,2EAA2E;AAC3E,6EAA6E;AAC7E,yEAAyE;AACzE,oFAAoF;AACpF,2EAA2E;AAC3E,EAAE;AACF,mFAAmF;AACnF,uEAAuE;AAEvE,MAAM,OAAO,kBAAkB;IACpB,IAAI,GAAG,QAAiB,CAAA;IACxB,UAAU,GAAG,sBAAsB,CAAA;IAE5C,mBAAmB,CAAC,KAAsB;QACxC,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,CAAA;QACnC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,eAAe,CAAC,oCAAoC,CAAC,CAAA;QACjE,CAAC;QACD,OAAO,EAAE,WAAW,EAAE,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAA;IAC/D,CAAC;IAED,QAAQ,CAAC,KAAa;QACpB,OAAO,cAAc,CAAC,KAAK,CAAC,CAAA;IAC9B,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,WAA4B,EAAE,UAAkB;QAC9D,MAAM,MAAM,GAAG,IAAI,mBAAmB,CAAC,EAAE,MAAM,EAAE,WAAW,CAAC,MAAO,EAAE,CAAC,CAAA;QACvE,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,KAAK,CAAuC,kBAAkB,EAAE;YACxF,EAAE,EAAE,UAAU;SACf,CAAC,CAAA;QACF,OAAO,cAAc,CAAC,IAAI,CAAC,CAAA;IAC7B,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,WAA4B,EAAE,KAAa;QACtD,MAAM,MAAM,GAAG,IAAI,mBAAmB,CAAC,EAAE,MAAM,EAAE,WAAW,CAAC,MAAO,EAAE,CAAC,CAAA;QACvE,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,KAAK,CAC7B,0BAA0B,EAC1B,EAAE,IAAI,EAAE,KAAK,EAAE,CAChB,CAAA;QACD,OAAO,sBAAsB,CAAC,IAAI,CAAC,CAAA;IACrC,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,QAAQ,CAAC,KAGd;QACC,MAAM,MAAM,GAAG,KAAK,CAAC,WAAW,EAAE,MAAM,CAAA;QACxC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO;gBACL,MAAM,EAAE,QAAQ;gBAChB,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,eAAe;gBACvB,OAAO,EAAE,uEAAuE;aACjF,CAAA;QACH,CAAC;QACD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,mBAAmB,CAAC,EAAE,MAAM,EAAE,CAAC,CAAA;YAClD,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,KAAK,CAAiC,mBAAmB,CAAC,CAAA;YACpF,OAAO;gBACL,MAAM,EAAE,QAAQ;gBAChB,EAAE,EAAE,IAAI;gBACR,MAAM,EAAE,OAAO;gBACf,OAAO,EAAE,0BAA0B;gBACnC,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,gBAAgB,IAAI,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI;aACvE,CAAA;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,cAAc,EAAE,CAAC;gBAClC,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;oBACvB,OAAO;wBACL,MAAM,EAAE,QAAQ;wBAChB,EAAE,EAAE,KAAK;wBACT,MAAM,EAAE,aAAa;wBACrB,OAAO,EACL,qFAAqF;qBACxF,CAAA;gBACH,CAAC;gBACD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;oBACvB,OAAO;wBACL,MAAM,EAAE,QAAQ;wBAChB,EAAE,EAAE,KAAK;wBACT,MAAM,EAAE,WAAW;wBACnB,OAAO,EAAE,yEAAyE;qBACnF,CAAA;gBACH,CAAC;gBACD,OAAO;oBACL,MAAM,EAAE,QAAQ;oBAChB,EAAE,EAAE,KAAK;oBACT,MAAM,EAAE,OAAO;oBACf,OAAO,EAAE,GAAG,CAAC,OAAO;iBACrB,CAAA;YACH,CAAC;YACD,OAAO;gBACL,MAAM,EAAE,QAAQ;gBAChB,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,aAAa;gBACrB,OAAO,EAAE,mEAAmE;aAC7E,CAAA;QACH,CAAC;IACH,CAAC;CACF"}

package/dist/modules/tasks/linear.logic.d.ts

@@ -0,0 +1,105 @@
+import type { TaskContent, TaskDependencyLink, TaskSearchResult, TaskSourceDescriptor } from '@cat-factory/kernel';
+/** What the connect UI renders, and which credentials the provider needs. */
+export declare const LINEAR_TASK_DESCRIPTOR: TaskSourceDescriptor;
+/**
+ * Fetch a single issue with everything the structured {@link TaskContent} needs.
+ * Linear's `issue(id:)` resolves the human identifier (`ENG-123`) as well as the
+ * UUID, so the stored external id is a valid argument.
+ */
+export declare const LINEAR_ISSUE_QUERY = "query Issue($id: String!) {\n  issue(id: $id) {\n    identifier\n    title\n    description\n    url\n    priorityLabel\n    state { name type }\n    assignee { name }\n    labels { nodes { name } }\n    parent { identifier }\n    children { nodes { identifier } }\n    comments { nodes { user { name } createdAt body } }\n    relations { nodes { type relatedIssue { identifier } } }\n    inverseRelations { nodes { type issue { identifier } } }\n  }\n}";
+/** Free-text issue search (used to populate the import picker). */
+export declare const LINEAR_SEARCH_ISSUES_QUERY = "query SearchIssues($term: String!) {\n  searchIssues(term: $term, first: 20) {\n    nodes { identifier title url state { name } }\n  }\n}";
+/** Cheapest authenticated read, for the live "check setup" probe. */
+export declare const LINEAR_VIEWER_QUERY = "query Viewer { viewer { name } }";
+interface LinearIssueNode {
+    identifier?: string;
+    title?: string;
+    description?: string | null;
+    url?: string;
+    priorityLabel?: string | null;
+    state?: {
+        name?: string;
+        type?: string;
+    } | null;
+    assignee?: {
+        name?: string;
+    } | null;
+    labels?: {
+        nodes?: {
+            name?: string;
+        }[];
+    };
+    parent?: {
+        identifier?: string;
+    } | null;
+    children?: {
+        nodes?: {
+            identifier?: string;
+        }[];
+    };
+    comments?: {
+        nodes?: LinearCommentNode[];
+    };
+    relations?: {
+        nodes?: {
+            type?: string;
+            relatedIssue?: {
+                identifier?: string;
+            };
+        }[];
+    };
+    inverseRelations?: {
+        nodes?: {
+            type?: string;
+            issue?: {
+                identifier?: string;
+            };
+        }[];
+    };
+}
+interface LinearCommentNode {
+    user?: {
+        name?: string;
+    };
+    createdAt?: string;
+    body?: string | null;
+}
+/**
+ * Resolve a Linear issue identifier from raw user input: a bare identifier
+ * (`ENG-123`), or a `linear.app/.../issue/ENG-123` URL. The identifier is
+ * upper-cased (Linear keys are canonically upper-case). A URL is only accepted
+ * when it is hosted on `linear.app` — mirroring `parseLinearDocRef`, so a foreign
+ * URL that merely contains an `/issue/<key>`-looking path can't be mistaken for a
+ * Linear reference. Returns null when nothing parses.
+ */
+export declare function parseLinearRef(input: string): string | null;
+/**
+ * Map an issue's `relations` + `inverseRelations` onto normalized
+ * {@link TaskDependencyLink}s. Linear models a "blocks" dependency as a single
+ * relation with a direction: in `relations` THIS issue is the source (it `blocks`
+ * the related issue); in `inverseRelations` it is the target (so it is `blockedBy`
+ * the other issue). Non-blocking relation types (`related`/`duplicate`/`similar`)
+ * are recorded as `relates` (the importer skips those for sequencing). Lenient:
+ * malformed entries are dropped, and duplicates are de-duped.
+ */
+export declare function mapLinearRelations(issue: LinearIssueNode): TaskDependencyLink[];
+/** Map an `issue` GraphQL payload onto the structured {@link TaskContent}. */
+export declare function mapLinearIssue(data: {
+    issue?: LinearIssueNode | null;
+}): TaskContent;
+interface LinearSearchNode {
+    identifier?: string;
+    title?: string;
+    url?: string;
+    state?: {
+        name?: string;
+    } | null;
+}
+/** Map a `searchIssues` payload onto lean {@link TaskSearchResult} hits. */
+export declare function mapLinearSearchResults(data: {
+    searchIssues?: {
+        nodes?: LinearSearchNode[];
+    };
+}): TaskSearchResult[];
+export {};
+//# sourceMappingURL=linear.logic.d.ts.map

package/dist/modules/tasks/linear.logic.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"linear.logic.d.ts","sourceRoot":"","sources":["../../../src/modules/tasks/linear.logic.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAEV,WAAW,EACX,kBAAkB,EAClB,gBAAgB,EAChB,oBAAoB,EACrB,MAAM,qBAAqB,CAAA;AAQ5B,6EAA6E;AAC7E,eAAO,MAAM,sBAAsB,EAAE,oBAgBpC,CAAA;AAID;;;;GAIG;AACH,eAAO,MAAM,kBAAkB,0cAgB7B,CAAA;AAEF,mEAAmE;AACnE,eAAO,MAAM,0BAA0B,8IAIrC,CAAA;AAEF,qEAAqE;AACrE,eAAO,MAAM,mBAAmB,qCAAqC,CAAA;AAIrE,UAAU,eAAe;IACvB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC7B,KAAK,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAA;IAC/C,QAAQ,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAA;IACnC,MAAM,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE;YAAE,IAAI,CAAC,EAAE,MAAM,CAAA;SAAE,EAAE,CAAA;KAAE,CAAA;IACxC,MAAM,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAA;IACvC,QAAQ,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE;YAAE,UAAU,CAAC,EAAE,MAAM,CAAA;SAAE,EAAE,CAAA;KAAE,CAAA;IAChD,QAAQ,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,iBAAiB,EAAE,CAAA;KAAE,CAAA;IAC1C,SAAS,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE;YAAE,IAAI,CAAC,EAAE,MAAM,CAAC;YAAC,YAAY,CAAC,EAAE;gBAAE,UAAU,CAAC,EAAE,MAAM,CAAA;aAAE,CAAA;SAAE,EAAE,CAAA;KAAE,CAAA;IACnF,gBAAgB,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE;YAAE,IAAI,CAAC,EAAE,MAAM,CAAC;YAAC,KAAK,CAAC,EAAE;gBAAE,UAAU,CAAC,EAAE,MAAM,CAAA;aAAE,CAAA;SAAE,EAAE,CAAA;KAAE,CAAA;CACpF;AAED,UAAU,iBAAiB;IACzB,IAAI,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;IACxB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CACrB;AAED;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAe3D;AAUD;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,eAAe,GAAG,kBAAkB,EAAE,CAqB/E;AAED,8EAA8E;AAC9E,wBAAgB,cAAc,CAAC,IAAI,EAAE;IAAE,KAAK,CAAC,EAAE,eAAe,GAAG,IAAI,CAAA;CAAE,GAAG,WAAW,CA6BpF;AAED,UAAU,gBAAgB;IACxB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,KAAK,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAA;CACjC;AAED,4EAA4E;AAC5E,wBAAgB,sBAAsB,CAAC,IAAI,EAAE;IAC3C,YAAY,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,gBAAgB,EAAE,CAAA;KAAE,CAAA;CAC9C,GAAG,gBAAgB,EAAE,CAerB"}

package/dist/modules/tasks/linear.logic.js

@@ -0,0 +1,176 @@
+// Linear-specific pure logic, kept out of the provider so it is unit-testable
+// without a live API: the connect-form descriptor, parsing an issue identifier out
+// of user input, the GraphQL documents, and mapping an issue onto the structured
+// {@link TaskContent}. Linear descriptions / comment bodies are already Markdown,
+// so there is no ADF-style conversion (unlike Jira) — fields pass through normalized.
+/** What the connect UI renders, and which credentials the provider needs. */
+export const LINEAR_TASK_DESCRIPTOR = {
+    source: 'linear',
+    label: 'Linear',
+    icon: 'i-lucide-square-kanban',
+    credentialFields: [
+        {
+            key: 'apiKey',
+            label: 'Personal API key',
+            secret: true,
+            placeholder: 'lin_api_…',
+            help: 'Create one at linear.app → Settings → Security & access → Personal API keys',
+        },
+    ],
+    refLabel: 'Issue identifier or URL',
+    refPlaceholder: 'ENG-123  or  https://linear.app/acme/issue/ENG-123',
+    searchable: true,
+};
+// ---- GraphQL operations ----------------------------------------------------
+/**
+ * Fetch a single issue with everything the structured {@link TaskContent} needs.
+ * Linear's `issue(id:)` resolves the human identifier (`ENG-123`) as well as the
+ * UUID, so the stored external id is a valid argument.
+ */
+export const LINEAR_ISSUE_QUERY = `query Issue($id: String!) {
+  issue(id: $id) {
+    identifier
+    title
+    description
+    url
+    priorityLabel
+    state { name type }
+    assignee { name }
+    labels { nodes { name } }
+    parent { identifier }
+    children { nodes { identifier } }
+    comments { nodes { user { name } createdAt body } }
+    relations { nodes { type relatedIssue { identifier } } }
+    inverseRelations { nodes { type issue { identifier } } }
+  }
+}`;
+/** Free-text issue search (used to populate the import picker). */
+export const LINEAR_SEARCH_ISSUES_QUERY = `query SearchIssues($term: String!) {
+  searchIssues(term: $term, first: 20) {
+    nodes { identifier title url state { name } }
+  }
+}`;
+/** Cheapest authenticated read, for the live "check setup" probe. */
+export const LINEAR_VIEWER_QUERY = `query Viewer { viewer { name } }`;
+/**
+ * Resolve a Linear issue identifier from raw user input: a bare identifier
+ * (`ENG-123`), or a `linear.app/.../issue/ENG-123` URL. The identifier is
+ * upper-cased (Linear keys are canonically upper-case). A URL is only accepted
+ * when it is hosted on `linear.app` — mirroring `parseLinearDocRef`, so a foreign
+ * URL that merely contains an `/issue/<key>`-looking path can't be mistaken for a
+ * Linear reference. Returns null when nothing parses.
+ */
+export function parseLinearRef(input) {
+    const trimmed = input.trim();
+    const KEY = /[A-Za-z][A-Za-z0-9]*-\d+/;
+    // A bare identifier (anything that is exactly a Linear key).
+    if (new RegExp(`^${KEY.source}$`).test(trimmed))
+        return trimmed.toUpperCase();
+    // Otherwise it must be a linear.app URL whose path carries an `/issue/<key>`.
+    let url;
+    try {
+        url = new URL(trimmed);
+    }
+    catch {
+        return null;
+    }
+    if (url.hostname.toLowerCase() !== 'linear.app')
+        return null;
+    const issue = url.pathname.match(new RegExp(`/issue/(${KEY.source})`));
+    return issue ? issue[1].toUpperCase() : null;
+}
+/** Collapse runaway blank lines in already-Markdown prose. */
+function normalizeMarkdown(text) {
+    return (text ?? '')
+        .replace(/\r\n/g, '\n')
+        .replace(/\n{3,}/g, '\n\n')
+        .trim();
+}
+/**
+ * Map an issue's `relations` + `inverseRelations` onto normalized
+ * {@link TaskDependencyLink}s. Linear models a "blocks" dependency as a single
+ * relation with a direction: in `relations` THIS issue is the source (it `blocks`
+ * the related issue); in `inverseRelations` it is the target (so it is `blockedBy`
+ * the other issue). Non-blocking relation types (`related`/`duplicate`/`similar`)
+ * are recorded as `relates` (the importer skips those for sequencing). Lenient:
+ * malformed entries are dropped, and duplicates are de-duped.
+ */
+export function mapLinearRelations(issue) {
+    const out = [];
+    const seen = new Set();
+    const push = (type, externalId) => {
+        if (!externalId)
+            return;
+        const key = `${type}:${externalId.toUpperCase()}`;
+        if (seen.has(key))
+            return;
+        seen.add(key);
+        out.push({ type, externalId: externalId.toUpperCase() });
+    };
+    for (const rel of issue.relations?.nodes ?? []) {
+        const id = rel.relatedIssue?.identifier;
+        if (rel.type === 'blocks')
+            push('blocks', id);
+        else
+            push('relates', id);
+    }
+    for (const rel of issue.inverseRelations?.nodes ?? []) {
+        const id = rel.issue?.identifier;
+        if (rel.type === 'blocks')
+            push('blockedBy', id);
+        else
+            push('relates', id);
+    }
+    return out;
+}
+/** Map an `issue` GraphQL payload onto the structured {@link TaskContent}. */
+export function mapLinearIssue(data) {
+    const issue = data.issue;
+    if (!issue?.identifier)
+        throw new Error('Linear returned no issue for the requested identifier');
+    const childExternalIds = (issue.children?.nodes ?? [])
+        .map((c) => c.identifier)
+        .filter((id) => !!id);
+    const isEpic = childExternalIds.length > 0;
+    const comments = (issue.comments?.nodes ?? []).map((c) => ({
+        author: c.user?.name ?? '',
+        createdAt: c.createdAt ?? '',
+        body: normalizeMarkdown(c.body),
+    }));
+    return {
+        externalId: issue.identifier,
+        url: issue.url ?? `https://linear.app/issue/${issue.identifier}`,
+        title: issue.title ?? '(untitled)',
+        status: issue.state?.name ?? '',
+        // Linear has no distinct "issue type"; surface epic vs. plain issue.
+        type: isEpic ? 'Epic' : 'Issue',
+        assignee: issue.assignee?.name ?? null,
+        priority: issue.priorityLabel ?? null,
+        labels: (issue.labels?.nodes ?? []).map((l) => l.name ?? '').filter(Boolean),
+        description: normalizeMarkdown(issue.description),
+        comments,
+        isEpic,
+        parentExternalId: issue.parent?.identifier ?? null,
+        childExternalIds,
+        links: mapLinearRelations(issue),
+    };
+}
+/** Map a `searchIssues` payload onto lean {@link TaskSearchResult} hits. */
+export function mapLinearSearchResults(data) {
+    const nodes = data.searchIssues?.nodes ?? [];
+    const out = [];
+    for (const node of nodes) {
+        if (!node.identifier)
+            continue;
+        out.push({
+            source: 'linear',
+            externalId: node.identifier,
+            title: node.title ?? '(untitled)',
+            url: node.url ?? `https://linear.app/issue/${node.identifier}`,
+            status: node.state?.name ?? '',
+            excerpt: '',
+        });
+    }
+    return out;
+}
+//# sourceMappingURL=linear.logic.js.map