@elnora-ai/linear 1.0.1 → 1.1.0

package/dist/commands/agent-sessions.js

@@ -0,0 +1,132 @@
+// `elnora-linear agent-sessions` — Linear agent framework session lifecycle.
+//
+// Sessions are auto-created by Linear when an agent is @mentioned or assigned
+// an issue. The CLI can also create them explicitly for testing the activity
+// emitter.
+import { getClient } from "../client/index.js";
+import { handleAsyncCommand, outputSuccess } from "../output/index.js";
+import { CliError, findIssueByIdentifier, parseLimit } from "../utils/index.js";
+async function formatSession(s) {
+    const [appUser, creator, issue, comment] = await Promise.all([s.appUser, s.creator, s.issue, s.comment]);
+    return {
+        id: s.id,
+        appUser: appUser?.name ?? null,
+        creator: creator?.name ?? null,
+        issue: issue?.identifier ?? null,
+        comment: comment?.id ?? null,
+        type: s.type ?? null,
+        status: s.status ?? null,
+        startedAt: s.startedAt ?? null,
+        endedAt: s.endedAt ?? null,
+        dismissedAt: s.dismissedAt ?? null,
+        externalLink: s.externalLink ?? null,
+        createdAt: s.createdAt,
+    };
+}
+export function setupAgentSessionsCommand(program) {
+    const sessions = program.command("agent-sessions").description("Manage Linear agent sessions (agent framework)");
+    sessions
+        .command("list")
+        .description("List agent sessions, newest first")
+        .option("--limit <n>", "Max results", "50")
+        .action(handleAsyncCommand(async (opts) => {
+        const client = await getClient();
+        const conn = await client.agentSessions({ first: parseLimit(opts.limit) });
+        const items = await Promise.all(conn.nodes.map(formatSession));
+        outputSuccess({ sessions: items, count: items.length });
+    }));
+    sessions
+        .command("get <id>")
+        .description("Get details of a single agent session")
+        .action(handleAsyncCommand(async (id) => {
+        const client = await getClient();
+        const session = await client.agentSession(id);
+        outputSuccess(await formatSession(session));
+    }));
+    sessions
+        .command("create-on-issue <issueId>")
+        .description("Create an agent session on an issue (issueId can be ENG-123 or UUID)")
+        .option("--external-link <url>", "External agent-hosted page URL")
+        .action(handleAsyncCommand(async (issueId, opts) => {
+        const client = await getClient();
+        const issue = await findIssueByIdentifier(client, issueId);
+        const input = { issueId: issue.id };
+        if (opts.externalLink)
+            input.externalLink = opts.externalLink;
+        const payload = await client.agentSessionCreateOnIssue(input);
+        if (!payload.success)
+            throw new CliError("Failed to create agent session");
+        const session = await payload.agentSession;
+        outputSuccess({
+            created: true,
+            session: session ? await formatSession(session) : null,
+        });
+    }));
+    sessions
+        .command("create-on-comment <commentId>")
+        .description("Create an agent session on a comment thread (commentId is a UUID)")
+        .option("--external-link <url>", "External agent-hosted page URL")
+        .action(handleAsyncCommand(async (commentId, opts) => {
+        const client = await getClient();
+        const input = { commentId };
+        if (opts.externalLink)
+            input.externalLink = opts.externalLink;
+        const payload = await client.agentSessionCreateOnComment(input);
+        if (!payload.success)
+            throw new CliError("Failed to create agent session");
+        const session = await payload.agentSession;
+        outputSuccess({
+            created: true,
+            session: session ? await formatSession(session) : null,
+        });
+    }));
+    sessions
+        .command("update <id>")
+        .description("Update an agent session (replace plan, externalLink, etc — owner-app only)")
+        .option("--external-link <url>", "Replace external link")
+        .option("--plan <jsonString>", "Replace plan (JSON object as string)")
+        .action(handleAsyncCommand(async (id, opts) => {
+        const client = await getClient();
+        const update = {};
+        if (opts.externalLink)
+            update.externalLink = opts.externalLink;
+        if (opts.plan) {
+            try {
+                update.plan = JSON.parse(opts.plan);
+            }
+            catch (e) {
+                const msg = e instanceof Error ? e.message : String(e);
+                throw new CliError(`Invalid --plan JSON: ${msg}`);
+            }
+        }
+        const payload = await client.updateAgentSession(id, update);
+        if (!payload.success)
+            throw new CliError("Failed to update agent session");
+        const session = await payload.agentSession;
+        outputSuccess({
+            updated: true,
+            session: session ? await formatSession(session) : null,
+        });
+    }));
+    sessions
+        .command("update-external-url <id>")
+        .description("Add/remove/replace external URLs on a session")
+        .option("--external-link <url>", "Replace primary external link")
+        .option("--add <url>", "Add a single external URL (label = url)")
+        .option("--remove <url>", "Remove a single external URL by URL string")
+        .action(handleAsyncCommand(async (id, opts) => {
+        const client = await getClient();
+        const input = {};
+        if (opts.externalLink)
+            input.externalLink = opts.externalLink;
+        if (opts.add)
+            input.addedExternalUrls = [{ url: opts.add, label: opts.add }];
+        if (opts.remove)
+            input.removedExternalUrls = [opts.remove];
+        const payload = await client.agentSessionUpdateExternalUrl(id, input);
+        if (!payload.success)
+            throw new CliError("Failed to update external URL");
+        outputSuccess({ updated: true, id });
+    }));
+}
+//# sourceMappingURL=agent-sessions.js.map

package/dist/commands/agent-sessions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-sessions.js","sourceRoot":"","sources":["../../src/commands/agent-sessions.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,EAAE;AACF,8EAA8E;AAC9E,6EAA6E;AAC7E,WAAW;AAIX,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,kBAAkB,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACvE,OAAO,EAAE,QAAQ,EAAE,qBAAqB,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAOhF,KAAK,UAAU,aAAa,CAAC,CAAe;IAC3C,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IACzG,OAAO;QACN,EAAE,EAAE,CAAC,CAAC,EAAE;QACR,OAAO,EAAE,OAAO,EAAE,IAAI,IAAI,IAAI;QAC9B,OAAO,EAAE,OAAO,EAAE,IAAI,IAAI,IAAI;QAC9B,KAAK,EAAE,KAAK,EAAE,UAAU,IAAI,IAAI;QAChC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,IAAI;QAC5B,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,IAAI;QACpB,MAAM,EAAE,CAAC,CAAC,MAAM,IAAI,IAAI;QACxB,SAAS,EAAE,CAAC,CAAC,SAAS,IAAI,IAAI;QAC9B,OAAO,EAAE,CAAC,CAAC,OAAO,IAAI,IAAI;QAC1B,WAAW,EAAE,CAAC,CAAC,WAAW,IAAI,IAAI;QAClC,YAAY,EAAE,CAAC,CAAC,YAAY,IAAI,IAAI;QACpC,SAAS,EAAE,CAAC,CAAC,SAAS;KACtB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,OAAgB;IACzD,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,WAAW,CAAC,gDAAgD,CAAC,CAAC;IAEjH,QAAQ;SACN,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,mCAAmC,CAAC;SAChD,MAAM,CAAC,aAAa,EAAE,aAAa,EAAE,IAAI,CAAC;SAC1C,MAAM,CACN,kBAAkB,CAAC,KAAK,EAAE,IAA4B,EAAE,EAAE;QACzD,MAAM,MAAM,GAAG,MAAM,SAAS,EAAE,CAAC;QACjC,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,EAAE,KAAK,EAAE,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC3E,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC;QAC/D,aAAa,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;IACzD,CAAC,CAAC,CACF,CAAC;IAEH,QAAQ;SACN,OAAO,CAAC,UAAU,CAAC;SACnB,WAAW,CAAC,uCAAuC,CAAC;SACpD,MAAM,CACN,kBAAkB,CAAC,KAAK,EAAE,EAAU,EAAE,EAAE;QACvC,MAAM,MAAM,GAAG,MAAM,SAAS,EAAE,CAAC;QACjC,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;QAC9C,aAAa,CAAC,MAAM,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC;IAC7C,CAAC,CAAC,CACF,CAAC;IAEH,QAAQ;SACN,OAAO,CAAC,2BAA2B,CAAC;SACpC,WAAW,CAAC,sEAAsE,CAAC;SACnF,MAAM,CAAC,uBAAuB,EAAE,gCAAgC,CAAC;SACjE,MAAM,CACN,kBAAkB,CAAC,KAAK,EAAE,OAAe,EAAE,IAA4B,EAAE,EAAE;QAC1E,MAAM,MAAM,GAAG,MAAM,SAAS,EAAE,CAAC;QACjC,MAAM,KAAK,GAAG,MAAM,qBAAqB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC3D,MAAM,KAAK,GAA8B,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC;QAC/D,IAAI,IAAI,CAAC,YAAY;YAAE,KAAK,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC;QAC9D,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,yBAAyB,CAAC,KAAK,CAAC,CAAC;QAC9D,IAAI,CAAC,OAAO,CAAC,OAAO;YAAE,MAAM,IAAI,QAAQ,CAAC,gCAAgC,CAAC,CAAC;QAC3E,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC;QAC3C,aAAa,CAAC;YACb,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI;SACtD,CAAC,CAAC;IACJ,CAAC,CAAC,CACF,CAAC;IAEH,QAAQ;SACN,OAAO,CAAC,+BAA+B,CAAC;SACxC,WAAW,CAAC,mEAAmE,CAAC;SAChF,MAAM,CAAC,uBAAuB,EAAE,gCAAgC,CAAC;SACjE,MAAM,CACN,kBAAkB,CAAC,KAAK,EAAE,SAAiB,EAAE,IAA4B,EAAE,EAAE;QAC5E,MAAM,MAAM,GAAG,MAAM,SAAS,EAAE,CAAC;QACjC,MAAM,KAAK,GAAgC,EAAE,SAAS,EAAE,CAAC;QACzD,IAAI,IAAI,CAAC,YAAY;YAAE,KAAK,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC;QAC9D,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,2BAA2B,CAAC,KAAK,CAAC,CAAC;QAChE,IAAI,CAAC,OAAO,CAAC,OAAO;YAAE,MAAM,IAAI,QAAQ,CAAC,gCAAgC,CAAC,CAAC;QAC3E,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC;QAC3C,aAAa,CAAC;YACb,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI;SACtD,CAAC,CAAC;IACJ,CAAC,CAAC,CACF,CAAC;IAEH,QAAQ;SACN,OAAO,CAAC,aAAa,CAAC;SACtB,WAAW,CAAC,4EAA4E,CAAC;SACzF,MAAM,CAAC,uBAAuB,EAAE,uBAAuB,CAAC;SACxD,MAAM,CAAC,qBAAqB,EAAE,sCAAsC,CAAC;SACrE,MAAM,CACN,kBAAkB,CAAC,KAAK,EAAE,EAAU,EAAE,IAA4B,EAAE,EAAE;QACrE,MAAM,MAAM,GAAG,MAAM,SAAS,EAAE,CAAC;QACjC,MAAM,MAAM,GAA4B,EAAE,CAAC;QAC3C,IAAI,IAAI,CAAC,YAAY;YAAE,MAAM,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC;QAC/D,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACf,IAAI,CAAC;gBACJ,MAAM,CAAC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACrC,CAAC;YAAC,OAAO,CAAU,EAAE,CAAC;gBACrB,MAAM,GAAG,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;gBACvD,MAAM,IAAI,QAAQ,CAAC,wBAAwB,GAAG,EAAE,CAAC,CAAC;YACnD,CAAC;QACF,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QAC5D,IAAI,CAAC,OAAO,CAAC,OAAO;YAAE,MAAM,IAAI,QAAQ,CAAC,gCAAgC,CAAC,CAAC;QAC3E,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC;QAC3C,aAAa,CAAC;YACb,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI;SACtD,CAAC,CAAC;IACJ,CAAC,CAAC,CACF,CAAC;IAEH,QAAQ;SACN,OAAO,CAAC,0BAA0B,CAAC;SACnC,WAAW,CAAC,+CAA+C,CAAC;SAC5D,MAAM,CAAC,uBAAuB,EAAE,+BAA+B,CAAC;SAChE,MAAM,CAAC,aAAa,EAAE,yCAAyC,CAAC;SAChE,MAAM,CAAC,gBAAgB,EAAE,4CAA4C,CAAC;SACtE,MAAM,CACN,kBAAkB,CAAC,KAAK,EAAE,EAAU,EAAE,IAA4B,EAAE,EAAE;QACrE,MAAM,MAAM,GAAG,MAAM,SAAS,EAAE,CAAC;QACjC,MAAM,KAAK,GAAuC,EAAE,CAAC;QACrD,IAAI,IAAI,CAAC,YAAY;YAAE,KAAK,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC;QAC9D,IAAI,IAAI,CAAC,GAAG;YAAE,KAAK,CAAC,iBAAiB,GAAG,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QAC7E,IAAI,IAAI,CAAC,MAAM;YAAE,KAAK,CAAC,mBAAmB,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC3D,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,6BAA6B,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QACtE,IAAI,CAAC,OAAO,CAAC,OAAO;YAAE,MAAM,IAAI,QAAQ,CAAC,+BAA+B,CAAC,CAAC;QAC1E,aAAa,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;IACtC,CAAC,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/commands/attachments.d.ts

@@ -0,0 +1,3 @@
+import type { Command } from "commander";
+export declare function setupAttachmentsCommand(program: Command): void;
+//# sourceMappingURL=attachments.d.ts.map

package/dist/commands/attachments.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"attachments.d.ts","sourceRoot":"","sources":["../../src/commands/attachments.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAmCzC,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAgQ9D"}

package/dist/commands/attachments.js

@@ -0,0 +1,265 @@
+// `elnora-linear attachments` — manage issue attachments + integration links.
+//
+// `upload` enforces a path safety check: --file must resolve (via realpathSync)
+// under the configured upload root (default $LINEAR_UPLOAD_ROOT or cwd).
+// Symlinks pointing out of the root are rejected. A prompt-injected agent
+// cannot use `attachments upload` to exfiltrate ~/.ssh/id_rsa, ~/.aws/creds,
+// etc.
+import { readFileSync, realpathSync } from "node:fs";
+import { sep as pathSep, resolve as resolvePath } from "node:path";
+import { getClient } from "../client/index.js";
+import { handleAsyncCommand, outputSuccess } from "../output/index.js";
+import { CliError, findIssueByIdentifier, requireYes, ValidationError } from "../utils/index.js";
+function resolveUploadPath(filePath, allowRoot) {
+    const root = resolvePath(allowRoot ?? process.env.LINEAR_UPLOAD_ROOT ?? process.cwd());
+    const resolvedFile = resolvePath(filePath);
+    let realFile;
+    let realRoot;
+    try {
+        realFile = realpathSync(resolvedFile);
+    }
+    catch (e) {
+        const msg = e instanceof Error ? e.message : String(e);
+        throw new CliError(`Cannot resolve file "${filePath}": ${msg}`, {
+            suggestion: "Check that the file path is correct and you have read permission.",
+        });
+    }
+    try {
+        realRoot = realpathSync(root);
+    }
+    catch (e) {
+        const msg = e instanceof Error ? e.message : String(e);
+        throw new CliError(`Upload root "${root}" does not exist: ${msg}`);
+    }
+    if (realFile !== realRoot && !realFile.startsWith(realRoot + pathSep)) {
+        throw new ValidationError(`File "${filePath}" resolves to "${realFile}" which is outside the allowed upload root "${realRoot}".`, "Move the file under the allowed root, set LINEAR_UPLOAD_ROOT, or pass --allow-root <path>.");
+    }
+    return realFile;
+}
+export function setupAttachmentsCommand(program) {
+    const attachments = program.command("attachments").description("Manage issue attachments");
+    attachments
+        .command("get <id>")
+        .description("Get attachment details by ID")
+        .action(handleAsyncCommand(async (id) => {
+        const client = await getClient();
+        const attachment = await client.attachment(id);
+        outputSuccess({
+            id: attachment.id,
+            title: attachment.title ?? null,
+            subtitle: attachment.subtitle ?? null,
+            url: attachment.url,
+            metadata: attachment.metadata ?? null,
+            createdAt: attachment.createdAt,
+        });
+    }));
+    attachments
+        .command("list <issueId>")
+        .description("List attachments on an issue")
+        .action(handleAsyncCommand(async (issueId) => {
+        const client = await getClient();
+        const issue = await findIssueByIdentifier(client, issueId);
+        const result = await issue.attachments();
+        const items = result.nodes.map((a) => ({
+            id: a.id,
+            title: a.title ?? null,
+            subtitle: a.subtitle ?? null,
+            url: a.url,
+            createdAt: a.createdAt,
+        }));
+        outputSuccess({ attachments: items, count: items.length });
+    }));
+    attachments
+        .command("create <issueId>")
+        .description("Create an attachment on an issue")
+        .requiredOption("--url <url>", "Attachment URL")
+        .requiredOption("--title <title>", "Attachment title")
+        .option("--subtitle <subtitle>", "Attachment subtitle")
+        .option("--icon <icon>", "Icon URL or emoji")
+        .action(handleAsyncCommand(async (issueId, opts) => {
+        const client = await getClient();
+        const issue = await findIssueByIdentifier(client, issueId);
+        const input = { issueId: issue.id, url: opts.url, title: opts.title };
+        if (opts.subtitle)
+            input.subtitle = opts.subtitle;
+        if (opts.icon)
+            input.iconUrl = opts.icon;
+        const payload = await client.createAttachment(input);
+        if (!payload.success)
+            throw new CliError("Failed to create attachment");
+        const attachment = await payload.attachment;
+        outputSuccess({
+            created: true,
+            attachment: attachment ? { id: attachment.id, title: attachment.title, url: attachment.url } : null,
+        });
+    }));
+    attachments
+        .command("upload <issueId>")
+        .description("Upload a file as attachment. File must live under the allowed root (default: cwd).")
+        .requiredOption("--file <path>", "Local file path (must be under allowed root)")
+        .option("--filename <name>", "Filename (e.g., screenshot.png) — required")
+        .option("--content-type <mime>", "MIME type (e.g., image/png) — required")
+        .option("--title <title>", "Attachment title")
+        .option("--allow-root <path>", "Override allowed upload root (default: $LINEAR_UPLOAD_ROOT or cwd)")
+        .action(handleAsyncCommand(async (issueId, opts) => {
+        const filePath = resolveUploadPath(opts.file, opts.allowRoot);
+        if (!opts.filename)
+            throw new ValidationError("--filename is required.");
+        if (!opts.contentType)
+            throw new ValidationError("--content-type is required.");
+        const client = await getClient();
+        const issue = await findIssueByIdentifier(client, issueId);
+        let fileContent;
+        try {
+            fileContent = readFileSync(filePath);
+        }
+        catch (e) {
+            const msg = e instanceof Error ? e.message : String(e);
+            throw new CliError(`Cannot read file "${opts.file}": ${msg}`, {
+                suggestion: "Check that the file path is correct and you have read permission.",
+            });
+        }
+        const MAX_UPLOAD_SIZE = 100 * 1024 * 1024;
+        if (fileContent.length > MAX_UPLOAD_SIZE) {
+            throw new CliError(`File too large (${fileContent.length} bytes, max ${MAX_UPLOAD_SIZE})`);
+        }
+        const uploadPayload = await client.fileUpload(opts.contentType, opts.filename, fileContent.length);
+        if (!uploadPayload.success)
+            throw new CliError("Failed to get upload URL");
+        const uploadFile = uploadPayload.uploadFile;
+        if (!uploadFile)
+            throw new CliError("No upload URL returned");
+        if (!uploadFile.uploadUrl.startsWith("https://")) {
+            throw new CliError("Upload URL must use HTTPS");
+        }
+        const allowedHeaderKeys = new Set([
+            "content-type",
+            "content-disposition",
+            "cache-control",
+            "x-amz-acl",
+            "x-goog-content-length-range",
+            "x-goog-acl",
+        ]);
+        const headers = { "Content-Type": opts.contentType };
+        for (const header of uploadFile.headers) {
+            if (allowedHeaderKeys.has(header.key.toLowerCase())) {
+                headers[header.key] = header.value;
+            }
+        }
+        const uploadBody = Uint8Array.from(fileContent);
+        // Bound the upload to UPLOAD_TIMEOUT_MS so a hung S3/GCS PUT can't
+        // stall the CLI indefinitely. 100MB max body / 5 min ≈ 280 KB/s,
+        // safely below the slowest plausible connection we'd want to wait on.
+        const UPLOAD_TIMEOUT_MS = 5 * 60 * 1000;
+        let response;
+        try {
+            response = await fetch(uploadFile.uploadUrl, {
+                method: "PUT",
+                headers,
+                body: uploadBody,
+                signal: AbortSignal.timeout(UPLOAD_TIMEOUT_MS),
+            });
+        }
+        catch (err) {
+            const msg = err instanceof Error ? err.message : String(err);
+            throw new CliError(`Upload failed: ${msg}`);
+        }
+        if (!response.ok)
+            throw new CliError(`Upload failed: ${response.statusText}`);
+        const attachInput = {
+            issueId: issue.id,
+            url: uploadFile.assetUrl,
+            title: opts.title ?? opts.filename,
+        };
+        const attachPayload = await client.createAttachment(attachInput);
+        if (!attachPayload.success) {
+            throw new CliError("File was uploaded but could not be attached to the issue.", {
+                suggestion: `The file is available at ${uploadFile.assetUrl}. Try creating the attachment manually.`,
+            });
+        }
+        outputSuccess({ uploaded: true, url: uploadFile.assetUrl });
+    }));
+    attachments
+        .command("delete <id>")
+        .description("Permanently delete an attachment (irreversible — requires --yes)")
+        .option("--yes", "Confirm permanent deletion")
+        .action(handleAsyncCommand(async (id, opts) => {
+        requireYes(opts, `permanently delete attachment ${id}`);
+        const client = await getClient();
+        const payload = await client.deleteAttachment(id);
+        outputSuccess({ deleted: payload.success });
+    }));
+    async function outputLinkResult(payload, integration) {
+        if (!payload.success)
+            throw new CliError(`Failed to link ${integration} attachment`);
+        const attachment = await payload.attachment;
+        outputSuccess({
+            linked: true,
+            integration,
+            attachment: attachment ? { id: attachment.id, title: attachment.title, url: attachment.url } : null,
+        });
+    }
+    attachments
+        .command("link-github-pr <issueId>")
+        .description("Link a GitHub pull request as an integration-aware attachment")
+        .requiredOption("--url <url>", "GitHub pull request URL")
+        .action(handleAsyncCommand(async (issueId, opts) => {
+        const client = await getClient();
+        const issue = await findIssueByIdentifier(client, issueId);
+        const payload = await client.attachmentLinkGitHubPR(issue.id, opts.url);
+        await outputLinkResult(payload, "github-pr");
+    }));
+    attachments
+        .command("link-slack <issueId>")
+        .description("Link a Slack message as an integration-aware attachment")
+        .requiredOption("--url <url>", "Slack permalink (https://*.slack.com/archives/...)")
+        .action(handleAsyncCommand(async (issueId, opts) => {
+        const client = await getClient();
+        const issue = await findIssueByIdentifier(client, issueId);
+        const payload = await client.attachmentLinkSlack(issue.id, opts.url);
+        await outputLinkResult(payload, "slack");
+    }));
+    attachments
+        .command("link-jira <issueId>")
+        .description("Link a Jira issue as an integration-aware attachment")
+        .requiredOption("--jira-issue-id <id>", "Jira issue ID")
+        .action(handleAsyncCommand(async (issueId, opts) => {
+        const client = await getClient();
+        const issue = await findIssueByIdentifier(client, issueId);
+        const payload = await client.attachmentLinkJiraIssue(issue.id, opts.jiraIssueId);
+        await outputLinkResult(payload, "jira");
+    }));
+    attachments
+        .command("link-url <issueId>")
+        .description("Link an arbitrary URL as an integration-aware attachment (dedup on issueId+url)")
+        .requiredOption("--url <url>", "URL to link")
+        .action(handleAsyncCommand(async (issueId, opts) => {
+        const client = await getClient();
+        const issue = await findIssueByIdentifier(client, issueId);
+        const payload = await client.attachmentLinkURL(issue.id, opts.url);
+        await outputLinkResult(payload, "url");
+    }));
+    attachments
+        .command("link-discord <issueId>")
+        .description("Link a Discord message as an integration-aware attachment")
+        .requiredOption("--channel-id <id>", "Discord channel ID")
+        .requiredOption("--message-id <id>", "Discord message ID")
+        .requiredOption("--url <url>", "Discord message URL")
+        .action(handleAsyncCommand(async (issueId, opts) => {
+        const client = await getClient();
+        const issue = await findIssueByIdentifier(client, issueId);
+        const payload = await client.attachmentLinkDiscord(opts.channelId, issue.id, opts.messageId, opts.url);
+        await outputLinkResult(payload, "discord");
+    }));
+    attachments
+        .command("link-zendesk <issueId>")
+        .description("Link a Zendesk ticket as an integration-aware attachment")
+        .requiredOption("--ticket-id <id>", "Zendesk ticket ID")
+        .action(handleAsyncCommand(async (issueId, opts) => {
+        const client = await getClient();
+        const issue = await findIssueByIdentifier(client, issueId);
+        const payload = await client.attachmentLinkZendesk(issue.id, opts.ticketId);
+        await outputLinkResult(payload, "zendesk");
+    }));
+}
+//# sourceMappingURL=attachments.js.map

package/dist/commands/attachments.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"attachments.js","sourceRoot":"","sources":["../../src/commands/attachments.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,EAAE;AACF,gFAAgF;AAChF,yEAAyE;AACzE,0EAA0E;AAC1E,6EAA6E;AAC7E,OAAO;AAEP,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACrD,OAAO,EAAE,GAAG,IAAI,OAAO,EAAE,OAAO,IAAI,WAAW,EAAE,MAAM,WAAW,CAAC;AAGnE,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,kBAAkB,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACvE,OAAO,EAAE,QAAQ,EAAE,qBAAqB,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAEjG,SAAS,iBAAiB,CAAC,QAAgB,EAAE,SAA6B;IACzE,MAAM,IAAI,GAAG,WAAW,CAAC,SAAS,IAAI,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IACvF,MAAM,YAAY,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;IAC3C,IAAI,QAAgB,CAAC;IACrB,IAAI,QAAgB,CAAC;IACrB,IAAI,CAAC;QACJ,QAAQ,GAAG,YAAY,CAAC,YAAY,CAAC,CAAC;IACvC,CAAC;IAAC,OAAO,CAAU,EAAE,CAAC;QACrB,MAAM,GAAG,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACvD,MAAM,IAAI,QAAQ,CAAC,wBAAwB,QAAQ,MAAM,GAAG,EAAE,EAAE;YAC/D,UAAU,EAAE,mEAAmE;SAC/E,CAAC,CAAC;IACJ,CAAC;IACD,IAAI,CAAC;QACJ,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC;IAAC,OAAO,CAAU,EAAE,CAAC;QACrB,MAAM,GAAG,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACvD,MAAM,IAAI,QAAQ,CAAC,gBAAgB,IAAI,qBAAqB,GAAG,EAAE,CAAC,CAAC;IACpE,CAAC;IACD,IAAI,QAAQ,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,QAAQ,GAAG,OAAO,CAAC,EAAE,CAAC;QACvE,MAAM,IAAI,eAAe,CACxB,SAAS,QAAQ,kBAAkB,QAAQ,+CAA+C,QAAQ,IAAI,EACtG,4FAA4F,CAC5F,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AACjB,CAAC;AAID,MAAM,UAAU,uBAAuB,CAAC,OAAgB;IACvD,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,WAAW,CAAC,0BAA0B,CAAC,CAAC;IAE3F,WAAW;SACT,OAAO,CAAC,UAAU,CAAC;SACnB,WAAW,CAAC,8BAA8B,CAAC;SAC3C,MAAM,CACN,kBAAkB,CAAC,KAAK,EAAE,EAAU,EAAE,EAAE;QACvC,MAAM,MAAM,GAAG,MAAM,SAAS,EAAE,CAAC;QACjC,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;QAC/C,aAAa,CAAC;YACb,EAAE,EAAE,UAAU,CAAC,EAAE;YACjB,KAAK,EAAE,UAAU,CAAC,KAAK,IAAI,IAAI;YAC/B,QAAQ,EAAE,UAAU,CAAC,QAAQ,IAAI,IAAI;YACrC,GAAG,EAAE,UAAU,CAAC,GAAG;YACnB,QAAQ,EAAE,UAAU,CAAC,QAAQ,IAAI,IAAI;YACrC,SAAS,EAAE,UAAU,CAAC,SAAS;SAC/B,CAAC,CAAC;IACJ,CAAC,CAAC,CACF,CAAC;IAEH,WAAW;SACT,OAAO,CAAC,gBAAgB,CAAC;SACzB,WAAW,CAAC,8BAA8B,CAAC;SAC3C,MAAM,CACN,kBAAkB,CAAC,KAAK,EAAE,OAAe,EAAE,EAAE;QAC5C,MAAM,MAAM,GAAG,MAAM,SAAS,EAAE,CAAC;QACjC,MAAM,KAAK,GAAG,MAAM,qBAAqB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC3D,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,WAAW,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAa,EAAE,EAAE,CAAC,CAAC;YAClD,EAAE,EAAE,CAAC,CAAC,EAAE;YACR,KAAK,EAAE,CAAC,CAAC,KAAK,IAAI,IAAI;YACtB,QAAQ,EAAE,CAAC,CAAC,QAAQ,IAAI,IAAI;YAC5B,GAAG,EAAE,CAAC,CAAC,GAAG;YACV,SAAS,EAAE,CAAC,CAAC,SAAS;SACtB,CAAC,CAAC,CAAC;QACJ,aAAa,CAAC,EAAE,WAAW,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;IAC5D,CAAC,CAAC,CACF,CAAC;IAEH,WAAW;SACT,OAAO,CAAC,kBAAkB,CAAC;SAC3B,WAAW,CAAC,kCAAkC,CAAC;SAC/C,cAAc,CAAC,aAAa,EAAE,gBAAgB,CAAC;SAC/C,cAAc,CAAC,iBAAiB,EAAE,kBAAkB,CAAC;SACrD,MAAM,CAAC,uBAAuB,EAAE,qBAAqB,CAAC;SACtD,MAAM,CAAC,eAAe,EAAE,mBAAmB,CAAC;SAC5C,MAAM,CACN,kBAAkB,CAAC,KAAK,EAAE,OAAe,EAAE,IAA4B,EAAE,EAAE;QAC1E,MAAM,MAAM,GAAG,MAAM,SAAS,EAAE,CAAC;QACjC,MAAM,KAAK,GAAG,MAAM,qBAAqB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC3D,MAAM,KAAK,GAA0B,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;QAC7F,IAAI,IAAI,CAAC,QAAQ;YAAE,KAAK,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;QAClD,IAAI,IAAI,CAAC,IAAI;YAAE,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC;QACzC,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;QACrD,IAAI,CAAC,OAAO,CAAC,OAAO;YAAE,MAAM,IAAI,QAAQ,CAAC,6BAA6B,CAAC,CAAC;QACxE,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC;QAC5C,aAAa,CAAC;YACb,OAAO,EAAE,IAAI;YACb,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,UAAU,CAAC,EAAE,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK,EAAE,GAAG,EAAE,UAAU,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI;SACnG,CAAC,CAAC;IACJ,CAAC,CAAC,CACF,CAAC;IAEH,WAAW;SACT,OAAO,CAAC,kBAAkB,CAAC;SAC3B,WAAW,CAAC,oFAAoF,CAAC;SACjG,cAAc,CAAC,eAAe,EAAE,8CAA8C,CAAC;SAC/E,MAAM,CAAC,mBAAmB,EAAE,4CAA4C,CAAC;SACzE,MAAM,CAAC,uBAAuB,EAAE,wCAAwC,CAAC;SACzE,MAAM,CAAC,iBAAiB,EAAE,kBAAkB,CAAC;SAC7C,MAAM,CAAC,qBAAqB,EAAE,oEAAoE,CAAC;SACnG,MAAM,CACN,kBAAkB,CAAC,KAAK,EAAE,OAAe,EAAE,IAA4B,EAAE,EAAE;QAC1E,MAAM,QAAQ,GAAG,iBAAiB,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QAE9D,IAAI,CAAC,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,eAAe,CAAC,yBAAyB,CAAC,CAAC;QACzE,IAAI,CAAC,IAAI,CAAC,WAAW;YAAE,MAAM,IAAI,eAAe,CAAC,6BAA6B,CAAC,CAAC;QAEhF,MAAM,MAAM,GAAG,MAAM,SAAS,EAAE,CAAC;QACjC,MAAM,KAAK,GAAG,MAAM,qBAAqB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAE3D,IAAI,WAAmB,CAAC;QACxB,IAAI,CAAC;YACJ,WAAW,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;QACtC,CAAC;QAAC,OAAO,CAAU,EAAE,CAAC;YACrB,MAAM,GAAG,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YACvD,MAAM,IAAI,QAAQ,CAAC,qBAAqB,IAAI,CAAC,IAAI,MAAM,GAAG,EAAE,EAAE;gBAC7D,UAAU,EAAE,mEAAmE;aAC/E,CAAC,CAAC;QACJ,CAAC;QAED,MAAM,eAAe,GAAG,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC;QAC1C,IAAI,WAAW,CAAC,MAAM,GAAG,eAAe,EAAE,CAAC;YAC1C,MAAM,IAAI,QAAQ,CAAC,mBAAmB,WAAW,CAAC,MAAM,eAAe,eAAe,GAAG,CAAC,CAAC;QAC5F,CAAC;QAED,MAAM,aAAa,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;QACnG,IAAI,CAAC,aAAa,CAAC,OAAO;YAAE,MAAM,IAAI,QAAQ,CAAC,0BAA0B,CAAC,CAAC;QAC3E,MAAM,UAAU,GAAG,aAAa,CAAC,UAAU,CAAC;QAC5C,IAAI,CAAC,UAAU;YAAE,MAAM,IAAI,QAAQ,CAAC,wBAAwB,CAAC,CAAC;QAC9D,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAClD,MAAM,IAAI,QAAQ,CAAC,2BAA2B,CAAC,CAAC;QACjD,CAAC;QACD,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC;YACjC,cAAc;YACd,qBAAqB;YACrB,eAAe;YACf,WAAW;YACX,6BAA6B;YAC7B,YAAY;SACZ,CAAC,CAAC;QACH,MAAM,OAAO,GAA2B,EAAE,cAAc,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC;QAC7E,KAAK,MAAM,MAAM,IAAI,UAAU,CAAC,OAAO,EAAE,CAAC;YACzC,IAAI,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;gBACrD,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC;YACpC,CAAC;QACF,CAAC;QACD,MAAM,UAAU,GAAG,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAChD,mEAAmE;QACnE,iEAAiE;QACjE,sEAAsE;QACtE,MAAM,iBAAiB,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;QACxC,IAAI,QAAkB,CAAC;QACvB,IAAI,CAAC;YACJ,QAAQ,GAAG,MAAM,KAAK,CAAC,UAAU,CAAC,SAAS,EAAE;gBAC5C,MAAM,EAAE,KAAK;gBACb,OAAO;gBACP,IAAI,EAAE,UAAU;gBAChB,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,iBAAiB,CAAC;aAC9C,CAAC,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,MAAM,IAAI,QAAQ,CAAC,kBAAkB,GAAG,EAAE,CAAC,CAAC;QAC7C,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,MAAM,IAAI,QAAQ,CAAC,kBAAkB,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;QAC9E,MAAM,WAAW,GAA0B;YAC1C,OAAO,EAAE,KAAK,CAAC,EAAE;YACjB,GAAG,EAAE,UAAU,CAAC,QAAQ;YACxB,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,QAAQ;SAClC,CAAC;QACF,MAAM,aAAa,GAAG,MAAM,MAAM,CAAC,gBAAgB,CAAC,WAAW,CAAC,CAAC;QACjE,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,CAAC;YAC5B,MAAM,IAAI,QAAQ,CAAC,2DAA2D,EAAE;gBAC/E,UAAU,EAAE,4BAA4B,UAAU,CAAC,QAAQ,yCAAyC;aACpG,CAAC,CAAC;QACJ,CAAC;QACD,aAAa,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,EAAE,UAAU,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC7D,CAAC,CAAC,CACF,CAAC;IAEH,WAAW;SACT,OAAO,CAAC,aAAa,CAAC;SACtB,WAAW,CAAC,kEAAkE,CAAC;SAC/E,MAAM,CAAC,OAAO,EAAE,4BAA4B,CAAC;SAC7C,MAAM,CACN,kBAAkB,CAAC,KAAK,EAAE,EAAU,EAAE,IAAsC,EAAE,EAAE;QAC/E,UAAU,CAAC,IAAI,EAAE,iCAAiC,EAAE,EAAE,CAAC,CAAC;QACxD,MAAM,MAAM,GAAG,MAAM,SAAS,EAAE,CAAC;QACjC,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC;QAClD,aAAa,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;IAC7C,CAAC,CAAC,CACF,CAAC;IAEH,KAAK,UAAU,gBAAgB,CAC9B,OAA+D,EAC/D,WAAmB;QAEnB,IAAI,CAAC,OAAO,CAAC,OAAO;YAAE,MAAM,IAAI,QAAQ,CAAC,kBAAkB,WAAW,aAAa,CAAC,CAAC;QACrF,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC;QAC5C,aAAa,CAAC;YACb,MAAM,EAAE,IAAI;YACZ,WAAW;YACX,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,UAAU,CAAC,EAAE,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK,EAAE,GAAG,EAAE,UAAU,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI;SACnG,CAAC,CAAC;IACJ,CAAC;IAED,WAAW;SACT,OAAO,CAAC,0BAA0B,CAAC;SACnC,WAAW,CAAC,+DAA+D,CAAC;SAC5E,cAAc,CAAC,aAAa,EAAE,yBAAyB,CAAC;SACxD,MAAM,CACN,kBAAkB,CAAC,KAAK,EAAE,OAAe,EAAE,IAA4B,EAAE,EAAE;QAC1E,MAAM,MAAM,GAAG,MAAM,SAAS,EAAE,CAAC;QACjC,MAAM,KAAK,GAAG,MAAM,qBAAqB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC3D,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,sBAAsB,CAAC,KAAK,CAAC,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;QACxE,MAAM,gBAAgB,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IAC9C,CAAC,CAAC,CACF,CAAC;IAEH,WAAW;SACT,OAAO,CAAC,sBAAsB,CAAC;SAC/B,WAAW,CAAC,yDAAyD,CAAC;SACtE,cAAc,CAAC,aAAa,EAAE,oDAAoD,CAAC;SACnF,MAAM,CACN,kBAAkB,CAAC,KAAK,EAAE,OAAe,EAAE,IAA4B,EAAE,EAAE;QAC1E,MAAM,MAAM,GAAG,MAAM,SAAS,EAAE,CAAC;QACjC,MAAM,KAAK,GAAG,MAAM,qBAAqB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC3D,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,mBAAmB,CAAC,KAAK,CAAC,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;QACrE,MAAM,gBAAgB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC1C,CAAC,CAAC,CACF,CAAC;IAEH,WAAW;SACT,OAAO,CAAC,qBAAqB,CAAC;SAC9B,WAAW,CAAC,sDAAsD,CAAC;SACnE,cAAc,CAAC,sBAAsB,EAAE,eAAe,CAAC;SACvD,MAAM,CACN,kBAAkB,CAAC,KAAK,EAAE,OAAe,EAAE,IAA4B,EAAE,EAAE;QAC1E,MAAM,MAAM,GAAG,MAAM,SAAS,EAAE,CAAC;QACjC,MAAM,KAAK,GAAG,MAAM,qBAAqB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC3D,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,uBAAuB,CAAC,KAAK,CAAC,EAAE,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;QACjF,MAAM,gBAAgB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACzC,CAAC,CAAC,CACF,CAAC;IAEH,WAAW;SACT,OAAO,CAAC,oBAAoB,CAAC;SAC7B,WAAW,CAAC,iFAAiF,CAAC;SAC9F,cAAc,CAAC,aAAa,EAAE,aAAa,CAAC;SAC5C,MAAM,CACN,kBAAkB,CAAC,KAAK,EAAE,OAAe,EAAE,IAA4B,EAAE,EAAE;QAC1E,MAAM,MAAM,GAAG,MAAM,SAAS,EAAE,CAAC;QACjC,MAAM,KAAK,GAAG,MAAM,qBAAqB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC3D,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,iBAAiB,CAAC,KAAK,CAAC,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;QACnE,MAAM,gBAAgB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACxC,CAAC,CAAC,CACF,CAAC;IAEH,WAAW;SACT,OAAO,CAAC,wBAAwB,CAAC;SACjC,WAAW,CAAC,2DAA2D,CAAC;SACxE,cAAc,CAAC,mBAAmB,EAAE,oBAAoB,CAAC;SACzD,cAAc,CAAC,mBAAmB,EAAE,oBAAoB,CAAC;SACzD,cAAc,CAAC,aAAa,EAAE,qBAAqB,CAAC;SACpD,MAAM,CACN,kBAAkB,CAAC,KAAK,EAAE,OAAe,EAAE,IAA4B,EAAE,EAAE;QAC1E,MAAM,MAAM,GAAG,MAAM,SAAS,EAAE,CAAC;QACjC,MAAM,KAAK,GAAG,MAAM,qBAAqB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC3D,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,qBAAqB,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,EAAE,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;QACvG,MAAM,gBAAgB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IAC5C,CAAC,CAAC,CACF,CAAC;IAEH,WAAW;SACT,OAAO,CAAC,wBAAwB,CAAC;SACjC,WAAW,CAAC,0DAA0D,CAAC;SACvE,cAAc,CAAC,kBAAkB,EAAE,mBAAmB,CAAC;SACvD,MAAM,CACN,kBAAkB,CAAC,KAAK,EAAE,OAAe,EAAE,IAA4B,EAAE,EAAE;QAC1E,MAAM,MAAM,GAAG,MAAM,SAAS,EAAE,CAAC;QACjC,MAAM,KAAK,GAAG,MAAM,qBAAqB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC3D,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,qBAAqB,CAAC,KAAK,CAAC,EAAE,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC5E,MAAM,gBAAgB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IAC5C,CAAC,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/commands/audit.d.ts

@@ -0,0 +1,3 @@
+import type { Command } from "commander";
+export declare function setupAuditCommand(program: Command): void;
+//# sourceMappingURL=audit.d.ts.map

package/dist/commands/audit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.d.ts","sourceRoot":"","sources":["../../src/commands/audit.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAQzC,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CA8ExD"}

package/dist/commands/audit.js

@@ -0,0 +1,73 @@
+// `elnora-linear audit` — read-only access to Linear's audit log.
+//
+// Useful for SOC 2 / compliance evidence pulls. IPs and key IDs/labels redacted
+// by default; opt in via `--unsafe-include-pii` and treat the output as
+// confidential.
+import { getClient } from "../client/index.js";
+import { handleAsyncCommand, outputSuccess, redactAuditEntry } from "../output/index.js";
+import { parseLimit, ValidationError } from "../utils/index.js";
+export function setupAuditCommand(program) {
+    const audit = program.command("audit").description("Read Linear audit log entries (compliance / SOC 2 evidence)");
+    audit
+        .command("entries")
+        .description("List audit entries, newest first. IPs and key IDs redacted by default.")
+        .option("--limit <n>", "Max results", "50")
+        .option("--since <iso>", "Only entries created after this ISO timestamp")
+        .option("--type <type>", "Filter by audit entry type (see `audit types`)")
+        .option("--unsafe-include-pii", "Return raw IPs, API key IDs/labels, and OAuth client names. Treat output as confidential.")
+        .action(handleAsyncCommand(async (opts) => {
+        const client = await getClient();
+        const filter = {};
+        if (opts.since) {
+            const d = new Date(String(opts.since));
+            if (Number.isNaN(d.getTime())) {
+                throw new ValidationError(`Invalid --since: "${opts.since}". Use an ISO timestamp.`);
+            }
+            filter.createdAt = { gt: d };
+        }
+        if (opts.type) {
+            filter.type = { eq: String(opts.type) };
+        }
+        const vars = {
+            first: parseLimit(typeof opts.limit === "string" ? opts.limit : undefined),
+        };
+        if (Object.keys(filter).length > 0) {
+            vars.filter = filter;
+        }
+        const conn = await client.auditEntries(vars);
+        const entries = await Promise.all(conn.nodes.map(async (e) => {
+            const actor = await e.actor;
+            return {
+                id: e.id,
+                type: e.type,
+                actor: actor?.name ?? null,
+                actorId: e.actorId ?? null,
+                countryCode: e.countryCode ?? null,
+                ip: e.ip ?? null,
+                createdAt: e.createdAt,
+                metadata: e.metadata ?? null,
+            };
+        }));
+        if (opts.unsafeIncludePii) {
+            process.stderr.write("Warning: --unsafe-include-pii is on; output contains IPs and API key IDs. Treat as confidential.\n");
+            outputSuccess({ entries, count: entries.length });
+            return;
+        }
+        const redacted = entries.map((e) => redactAuditEntry(e));
+        outputSuccess({ entries: redacted, count: redacted.length });
+    }));
+    audit
+        .command("types")
+        .description("List available audit entry types")
+        .option("--prefix <str>", "Filter types by case-sensitive prefix")
+        .action(handleAsyncCommand(async (opts) => {
+        const client = await getClient();
+        const types = await client.auditEntryTypes;
+        const filtered = opts.prefix ? types.filter((t) => t.type.startsWith(opts.prefix)) : types;
+        outputSuccess({
+            types: filtered.map((t) => ({ type: t.type, description: t.description })),
+            count: filtered.length,
+        });
+    }));
+}
+//# sourceMappingURL=audit.js.map

package/dist/commands/audit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.js","sourceRoot":"","sources":["../../src/commands/audit.ts"],"names":[],"mappings":"AAAA,kEAAkE;AAClE,EAAE;AACF,gFAAgF;AAChF,wEAAwE;AACxE,gBAAgB;AAIhB,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,kBAAkB,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACzF,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAKhE,MAAM,UAAU,iBAAiB,CAAC,OAAgB;IACjD,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,WAAW,CAAC,6DAA6D,CAAC,CAAC;IAElH,KAAK;SACH,OAAO,CAAC,SAAS,CAAC;SAClB,WAAW,CAAC,wEAAwE,CAAC;SACrF,MAAM,CAAC,aAAa,EAAE,aAAa,EAAE,IAAI,CAAC;SAC1C,MAAM,CAAC,eAAe,EAAE,+CAA+C,CAAC;SACxE,MAAM,CAAC,eAAe,EAAE,gDAAgD,CAAC;SACzE,MAAM,CACN,sBAAsB,EACtB,2FAA2F,CAC3F;SACA,MAAM,CACN,kBAAkB,CAAC,KAAK,EAAE,IAAsC,EAAE,EAAE;QACnE,MAAM,MAAM,GAAG,MAAM,SAAS,EAAE,CAAC;QACjC,MAAM,MAAM,GAAqB,EAAE,CAAC;QACpC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAChB,MAAM,CAAC,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;YACvC,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;gBAC/B,MAAM,IAAI,eAAe,CAAC,qBAAqB,IAAI,CAAC,KAAK,0BAA0B,CAAC,CAAC;YACtF,CAAC;YACD,MAAM,CAAC,SAAS,GAAG,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC;QAC9B,CAAC;QACD,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACf,MAAM,CAAC,IAAI,GAAG,EAAE,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACzC,CAAC;QACD,MAAM,IAAI,GAA+B;YACxC,KAAK,EAAE,UAAU,CAAC,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;SAC1E,CAAC;QACF,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACtB,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;QAC7C,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAChC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE;YAC1B,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,KAAK,CAAC;YAC5B,OAAO;gBACN,EAAE,EAAE,CAAC,CAAC,EAAE;gBACR,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,KAAK,EAAE,KAAK,EAAE,IAAI,IAAI,IAAI;gBAC1B,OAAO,EAAE,CAAC,CAAC,OAAO,IAAI,IAAI;gBAC1B,WAAW,EAAE,CAAC,CAAC,WAAW,IAAI,IAAI;gBAClC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,IAAI;gBAChB,SAAS,EAAE,CAAC,CAAC,SAAS;gBACtB,QAAQ,EAAE,CAAC,CAAC,QAAQ,IAAI,IAAI;aAC5B,CAAC;QACH,CAAC,CAAC,CACF,CAAC;QAEF,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC3B,OAAO,CAAC,MAAM,CAAC,KAAK,CACnB,oGAAoG,CACpG,CAAC;YACF,aAAa,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;YAClD,OAAO;QACR,CAAC;QAED,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC;QACzD,aAAa,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IAC9D,CAAC,CAAC,CACF,CAAC;IAEH,KAAK;SACH,OAAO,CAAC,OAAO,CAAC;SAChB,WAAW,CAAC,kCAAkC,CAAC;SAC/C,MAAM,CAAC,gBAAgB,EAAE,uCAAuC,CAAC;SACjE,MAAM,CACN,kBAAkB,CAAC,KAAK,EAAE,IAA4B,EAAE,EAAE;QACzD,MAAM,MAAM,GAAG,MAAM,SAAS,EAAE,CAAC;QACjC,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC;QAC3C,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;QAC3F,aAAa,CAAC;YACb,KAAK,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;YAC1E,KAAK,EAAE,QAAQ,CAAC,MAAM;SACtB,CAAC,CAAC;IACJ,CAAC,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/commands/comments.d.ts

@@ -0,0 +1,3 @@
+import type { Command } from "commander";
+export declare function setupCommentsCommand(program: Command): void;
+//# sourceMappingURL=comments.d.ts.map

package/dist/commands/comments.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"comments.d.ts","sourceRoot":"","sources":["../../src/commands/comments.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AASzC,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CA0H3D"}

package/dist/commands/comments.js

@@ -0,0 +1,107 @@
+// `elnora-linear comments` — manage issue comments.
+//
+// `list` uses raw GraphQL with an embedded user{name} subquery to avoid N+1
+// round-trips when rendering threads.
+import { getClient } from "../client/index.js";
+import { gqlRequest } from "../lib/bulk-graphql.js";
+import { handleAsyncCommand, outputSuccess } from "../output/index.js";
+import { CliError, findIssueByIdentifier, NotFoundError, requireYes } from "../utils/index.js";
+export function setupCommentsCommand(program) {
+    const comments = program.command("comments").description("Manage issue comments");
+    comments
+        .command("list <issueId>")
+        .description("List comments on an issue")
+        .action(handleAsyncCommand(async (issueId) => {
+        const m = issueId.match(/^([A-Z]+)-(\d+)$/);
+        const filter = m
+            ? { team: { key: { eq: m[1] } }, number: { eq: parseInt(m[2], 10) } }
+            : { id: { eq: issueId } };
+        const res = await gqlRequest(`query($filter: IssueFilter!) {
+            issues(first: 1, filter: $filter) {
+              nodes {
+                comments(first: 100) {
+                  nodes { id body createdAt updatedAt user { name } }
+                }
+              }
+            }
+          }`, { filter });
+        if (res.errors) {
+            throw new CliError(`comments list: ${res.errors.map((e) => e.message).join("; ")}`);
+        }
+        const issue = res.data?.issues.nodes[0];
+        if (!issue)
+            throw new NotFoundError("Issue", issueId);
+        const rows = issue.comments.nodes.map((c) => ({
+            id: c.id,
+            author: c.user?.name ?? null,
+            body: c.body,
+            createdAt: c.createdAt,
+            updatedAt: c.updatedAt,
+        }));
+        outputSuccess({ comments: rows, count: rows.length });
+    }));
+    comments
+        .command("create <issueId>")
+        .description("Add a comment to an issue")
+        .requiredOption("--body <text>", "Comment text (markdown)")
+        .action(handleAsyncCommand(async (issueId, opts) => {
+        const client = await getClient();
+        const issue = await findIssueByIdentifier(client, issueId);
+        const input = { issueId: issue.id, body: opts.body };
+        const payload = await client.createComment(input);
+        if (!payload.success)
+            throw new CliError("Failed to create comment");
+        const comment = await payload.comment;
+        outputSuccess({
+            created: true,
+            comment: comment ? { id: comment.id, body: comment.body } : null,
+        });
+    }));
+    comments
+        .command("update <commentId>")
+        .description("Update an existing comment")
+        .requiredOption("--body <text>", "New comment text (markdown)")
+        .action(handleAsyncCommand(async (commentId, opts) => {
+        const client = await getClient();
+        const update = { body: opts.body };
+        const payload = await client.updateComment(commentId, update);
+        if (!payload.success)
+            throw new CliError("Failed to update comment");
+        const comment = await payload.comment;
+        outputSuccess({
+            updated: true,
+            comment: comment ? { id: comment.id, body: comment.body } : null,
+        });
+    }));
+    comments
+        .command("delete <commentId>")
+        .description("Permanently delete a comment (irreversible — requires --yes)")
+        .option("--yes", "Confirm permanent deletion")
+        .action(handleAsyncCommand(async (commentId, opts) => {
+        requireYes(opts, `permanently delete comment ${commentId}`);
+        const client = await getClient();
+        const payload = await client.deleteComment(commentId);
+        outputSuccess({ deleted: payload.success });
+    }));
+    comments
+        .command("resolve <commentId>")
+        .description("Mark a comment thread as resolved")
+        .action(handleAsyncCommand(async (commentId) => {
+        const client = await getClient();
+        const payload = await client.commentResolve(commentId);
+        if (!payload.success)
+            throw new CliError("Failed to resolve comment");
+        outputSuccess({ resolved: true, id: commentId });
+    }));
+    comments
+        .command("unresolve <commentId>")
+        .description("Reopen a resolved comment thread")
+        .action(handleAsyncCommand(async (commentId) => {
+        const client = await getClient();
+        const payload = await client.commentUnresolve(commentId);
+        if (!payload.success)
+            throw new CliError("Failed to unresolve comment");
+        outputSuccess({ unresolved: true, id: commentId });
+    }));
+}
+//# sourceMappingURL=comments.js.map