@enrichlayer/el-linear 1.4.0 → 1.6.0

package/dist/commands/cycles.js

@@ -2,6 +2,7 @@ import { resolveTeam } from "../config/resolver.js";
 import { invalidParameterError, notFoundError, requiresParameterError, } from "../utils/error-messages.js";
 import { createLinearService } from "../utils/linear-service.js";
 import { handleAsyncCommand, outputSuccess } from "../utils/output.js";
+import { getRootOpts } from "../utils/root-opts.js";
 export function setupCyclesCommands(program) {
     const cycles = program
         .command("cycles")
@@ -19,9 +20,9 @@ export function setupCyclesCommands(program) {
         if (options.aroundActive && !options.team) {
             throw requiresParameterError("--around-active", "--team");
         }
-        const rootOpts = command.parent.parent.opts();
+        const rootOpts = getRootOpts(command);
         const teamFilter = options.team ? resolveTeam(options.team) : undefined;
-        const linearService = createLinearService(rootOpts);
+        const linearService = await createLinearService(rootOpts);
         const allCycles = await linearService.getCycles(teamFilter, options.active || undefined, Number.parseInt(options.limit, 10));
         if (options.aroundActive) {
             const n = Number.parseInt(options.aroundActive, 10);
@@ -51,11 +52,11 @@ export function setupCyclesCommands(program) {
         .option("--team <team>", "team key, name, or ID to scope name lookup")
         .option("--issues-first <n>", "how many issues to fetch (default 50)", "50")
         .action(handleAsyncCommand(async (cycleIdOrName, options, command) => {
-        const rootOpts = command.parent.parent.opts();
+        const rootOpts = getRootOpts(command);
         const teamFilter = options.team
             ? resolveTeam(options.team)
             : undefined;
-        const linearService = createLinearService(rootOpts);
+        const linearService = await createLinearService(rootOpts);
         const cycleId = await linearService.resolveCycleId(cycleIdOrName, teamFilter);
         const cycle = await linearService.getCycleById(cycleId, Number.parseInt(options.issuesFirst || "50", 10));
         outputSuccess(cycle);

package/dist/commands/documents.js

@@ -2,6 +2,7 @@ import { createGraphQLAttachmentsService } from "../utils/graphql-attachments-se
 import { createGraphQLDocumentsService } from "../utils/graphql-documents-service.js";
 import { createLinearService } from "../utils/linear-service.js";
 import { handleAsyncCommand, outputSuccess } from "../utils/output.js";
+import { getRootOpts } from "../utils/root-opts.js";
 function extractDocumentIdFromUrl(url) {
     try {
         const parsed = new URL(url);
@@ -25,9 +26,9 @@ function extractDocumentIdFromUrl(url) {
     }
 }
 async function handleCreateDocument(options, command) {
-    const rootOpts = command.parent.parent.opts();
-    const documentsService = createGraphQLDocumentsService(rootOpts);
-    const linearService = createLinearService(rootOpts);
+    const rootOpts = getRootOpts(command);
+    const documentsService = await createGraphQLDocumentsService(rootOpts);
+    const linearService = await createLinearService(rootOpts);
     const document = await documentsService.createDocument({
         title: options.title,
         content: options.content,
@@ -44,7 +45,7 @@ async function handleCreateDocument(options, command) {
         color: options.color,
     });
     if (options.attachTo) {
-        const attachmentsService = createGraphQLAttachmentsService(rootOpts);
+        const attachmentsService = await createGraphQLAttachmentsService(rootOpts);
         const issueId = await linearService.resolveIssueId(options.attachTo);
         try {
             await attachmentsService.createAttachment({
@@ -66,15 +67,15 @@ async function handleListDocuments(options, command) {
     if (options.project && options.issue) {
         throw new Error("Cannot use --project and --issue together. Choose one filter.");
     }
-    const rootOpts = command.parent.parent.opts();
-    const documentsService = createGraphQLDocumentsService(rootOpts);
-    const linearService = createLinearService(rootOpts);
+    const rootOpts = getRootOpts(command);
+    const documentsService = await createGraphQLDocumentsService(rootOpts);
+    const linearService = await createLinearService(rootOpts);
     const limit = Number.parseInt(options.limit || "50", 10);
     if (Number.isNaN(limit) || limit < 1) {
         throw new Error(`Invalid limit "${options.limit}": must be a positive number`);
     }
     if (options.issue) {
-        const attachmentsService = createGraphQLAttachmentsService(rootOpts);
+        const attachmentsService = await createGraphQLAttachmentsService(rootOpts);
         const issueId = await linearService.resolveIssueId(options.issue);
         const attachments = await attachmentsService.listAttachments(issueId);
         const documentSlugIds = [
@@ -129,9 +130,9 @@ export function setupDocumentsCommands(program) {
         .option("--icon <icon>", "document icon")
         .option("--color <color>", "icon color")
         .action(handleAsyncCommand(async (documentId, options, command) => {
-        const rootOpts = command.parent.parent.opts();
-        const documentsService = createGraphQLDocumentsService(rootOpts);
-        const linearService = createLinearService(rootOpts);
+        const rootOpts = getRootOpts(command);
+        const documentsService = await createGraphQLDocumentsService(rootOpts);
+        const linearService = await createLinearService(rootOpts);
         const input = {};
         if (options.title) {
             input.title = options.title;
@@ -154,8 +155,9 @@ export function setupDocumentsCommands(program) {
         .command("read <documentId>")
         .description("Read a document")
         .action(handleAsyncCommand(async (documentId, _options, command) => {
-        const rootOpts = command.parent.parent.opts();
-        outputSuccess(await createGraphQLDocumentsService(rootOpts).getDocument(documentId));
+        const rootOpts = getRootOpts(command);
+        const documentsService = await createGraphQLDocumentsService(rootOpts);
+        outputSuccess(await documentsService.getDocument(documentId));
     }));
     documents
         .command("list")
@@ -168,8 +170,9 @@ export function setupDocumentsCommands(program) {
         .command("delete <documentId>")
         .description("Delete (trash) a document")
         .action(handleAsyncCommand(async (documentId, _options, command) => {
-        const rootOpts = command.parent.parent.opts();
-        await createGraphQLDocumentsService(rootOpts).deleteDocument(documentId);
+        const rootOpts = getRootOpts(command);
+        const documentsService = await createGraphQLDocumentsService(rootOpts);
+        await documentsService.deleteDocument(documentId);
         outputSuccess({ success: true, message: "Document moved to trash" });
     }));
 }

package/dist/commands/embeds.js

@@ -1,6 +1,6 @@
-import { getApiToken } from "../utils/auth.js";
-import { FileService } from "../utils/file-service.js";
+import { createFileService } from "../utils/file-service.js";
 import { handleAsyncCommand, outputSuccess } from "../utils/output.js";
+import { getRootOpts } from "../utils/root-opts.js";
 export function setupEmbedsCommands(program) {
     const embeds = program
         .command("embeds")
@@ -12,8 +12,7 @@ export function setupEmbedsCommands(program) {
         .option("--output <path>", "output file path")
         .option("--overwrite", "overwrite existing file", false)
         .action(handleAsyncCommand(async (url, options, command) => {
-        const apiToken = getApiToken(command.parent.parent.opts());
-        const fileService = new FileService(apiToken);
+        const fileService = await createFileService(getRootOpts(command));
         const result = await fileService.downloadFile(url, {
             output: options.output,
             overwrite: options.overwrite,
@@ -40,8 +39,7 @@ export function setupEmbedsCommands(program) {
         .command("upload <file>")
         .description("Upload a file to Linear storage.")
         .action(handleAsyncCommand(async (filePath, _options, command) => {
-        const apiToken = getApiToken(command.parent.parent.opts());
-        const fileService = new FileService(apiToken);
+        const fileService = await createFileService(getRootOpts(command));
         const result = await fileService.uploadFile(filePath);
         if (result.success) {
             outputSuccess({

package/dist/commands/graphql.js

@@ -2,6 +2,7 @@ import fs from "node:fs";
 import { INTROSPECT_ROOT_QUERY, INTROSPECT_TYPE_QUERY, } from "../queries/introspect.js";
 import { createGraphQLService } from "../utils/graphql-service.js";
 import { handleAsyncCommand, outputSuccess } from "../utils/output.js";
+import { getRootOpts } from "../utils/root-opts.js";
 async function executeQuery(query, options, command) {
     let finalQuery = query;
     if (options.file) {
@@ -22,8 +23,8 @@ async function executeQuery(query, options, command) {
             throw new Error(`Invalid JSON in --variables: ${options.variables}`);
         }
     }
-    const rootOpts = command.parent.opts();
-    const graphQLService = createGraphQLService(rootOpts);
+    const rootOpts = getRootOpts(command);
+    const graphQLService = await createGraphQLService(rootOpts);
     const result = await graphQLService.rawRequest(finalQuery, variables);
     outputSuccess(result);
 }
@@ -41,8 +42,8 @@ export function setupGraphQLCommands(program) {
         .description("Introspect the Linear GraphQL schema. Without args lists root query fields; with a type name shows its fields and args.")
         .option("--filter <pattern>", "filter fields by name (case-insensitive substring match)")
         .action(handleAsyncCommand(async (typeName, options, command) => {
-        const rootOpts = command.parent.opts();
-        const graphQLService = createGraphQLService(rootOpts);
+        const rootOpts = getRootOpts(command);
+        const graphQLService = await createGraphQLService(rootOpts);
         if (typeName) {
             const result = await graphQLService.rawRequest(INTROSPECT_TYPE_QUERY, { typeName });
             const typeInfo = result.__type;

package/dist/commands/init/aliases.js

@@ -159,13 +159,11 @@ export async function runAliasesStep(token, existing, options = {}) {
             default: false,
         });
     if (!proceed) {
-        // biome-ignore lint/suspicious/noConsole: wizard
         console.log("  Skipped — run `el-linear init aliases` to add or edit aliases later.");
         return new Map();
     }
     const allUsers = await fetchAllUsers(token);
     if (allUsers.length === 0) {
-        // biome-ignore lint/suspicious/noConsole: wizard
         console.log("  No active users visible to this token.");
         return new Map();
     }
@@ -176,25 +174,20 @@ export async function runAliasesStep(token, existing, options = {}) {
     const collisions = findDisplayNameCollisions(allUsers);
     const collidingIds = new Set();
     if (collisions.size > 0) {
-        // biome-ignore lint/suspicious/noConsole: wizard
         console.log(`  ⚠ ${collisions.size} display name(s) are shared by multiple active users — skipping those to avoid alias corruption:`);
         for (const [name, group] of collisions) {
-            // biome-ignore lint/suspicious/noConsole: wizard
             console.log(`    "${name}" — ${group.map((u) => u.email ?? u.id).join(", ")}`);
             for (const u of group)
                 collidingIds.add(u.id);
         }
-        // biome-ignore lint/suspicious/noConsole: wizard
         console.log("    (Add aliases manually in ~/.config/el-linear/config.json for now; schema migration in 1.3.0.)");
     }
     const users = allUsers.filter((u) => !collidingIds.has(u.id));
     if (users.length === 0) {
-        // biome-ignore lint/suspicious/noConsole: wizard
         console.log("  No safe-to-alias users remain after collision filter.");
         return new Map();
     }
     const startIdx = await resolveResumePoint(users);
-    // biome-ignore lint/suspicious/noConsole: wizard
     console.log(`  Walking ${users.length - startIdx}/${users.length} users. Type 'q' at any prompt to stop and save progress.`);
     const updates = new Map();
     let lastCompletedIdx = startIdx - 1;
@@ -213,7 +206,6 @@ export async function runAliasesStep(token, existing, options = {}) {
             const update = await promptForUser(i + 1, users.length, u, existing);
             if (update === "quit") {
                 await saveProgress();
-                // biome-ignore lint/suspicious/noConsole: wizard
                 console.log(`  Saved progress at ${lastCompletedIdx + 1}/${users.length}. Resume with \`el-linear init aliases\`.`);
                 return updates;
             }
@@ -225,7 +217,6 @@ export async function runAliasesStep(token, existing, options = {}) {
             lastCompletedIdx = i;
         }
         await clearAliasesProgress();
-        // biome-ignore lint/suspicious/noConsole: wizard
         console.log(`  ✓ Walked all ${users.length} users.`);
         return updates;
     }
@@ -253,7 +244,6 @@ async function resolveResumePoint(users) {
         return 0;
     const idx = users.findIndex((u) => u.id === progress.lastCompletedUserId);
     if (idx < 0) {
-        // biome-ignore lint/suspicious/noConsole: wizard
         console.log("  Saved progress points at a user no longer in the workspace. Starting over.");
         await clearAliasesProgress();
         return 0;
@@ -272,18 +262,14 @@ async function promptForUser(index, total, user, existing) {
     const currentAliases = currentAliasesFor(existing, fullName);
     const currentGithub = currentHandleFor(existing, "github", fullName);
     const currentGitlab = currentHandleFor(existing, "gitlab", fullName);
-    // biome-ignore lint/suspicious/noConsole: wizard
     console.log(`\n  [${index}/${total}] ${fullName}${user.email ? ` <${user.email}>` : ""}`);
     if (currentAliases.length > 0) {
-        // biome-ignore lint/suspicious/noConsole: wizard
         console.log(`    Current aliases: ${currentAliases.join(", ")}`);
     }
     if (currentGithub) {
-        // biome-ignore lint/suspicious/noConsole: wizard
         console.log(`    Current GitHub:  ${currentGithub}`);
     }
     if (currentGitlab) {
-        // biome-ignore lint/suspicious/noConsole: wizard
         console.log(`    Current GitLab:  ${currentGitlab}`);
     }
     const action = await select({

package/dist/commands/init/defaults.js

@@ -19,7 +19,6 @@ export async function runDefaultsStep(existing) {
     };
     // ── Default labels ────────────────────────────────────────────────
     const currentLabels = existing.defaultLabels ?? [];
-    // biome-ignore lint/suspicious/noConsole: wizard
     console.log(`  Current default labels: ${currentLabels.length > 0 ? currentLabels.join(", ") : "(none)"}`);
     const editLabels = await confirm({
         message: "Change default labels for new issues?",
@@ -35,7 +34,6 @@ export async function runDefaultsStep(existing) {
     }
     // ── Status defaults ────────────────────────────────────────────────
     const cur = existing.statusDefaults;
-    // biome-ignore lint/suspicious/noConsole: wizard
     console.log(`  Current status defaults: noProject=${cur?.noProject ?? STATUS_FALLBACK.noProject}, ` +
         `withAssigneeAndProject=${cur?.withAssigneeAndProject ?? STATUS_FALLBACK.withAssigneeAndProject}`);
     const editStatus = await confirm({
@@ -58,10 +56,8 @@ export async function runDefaultsStep(existing) {
     }
     // ── Term enforcement ───────────────────────────────────────────────
     const currentTerms = existing.terms ?? [];
-    // biome-ignore lint/suspicious/noConsole: wizard
     console.log(`  Current term-enforcement rules: ${currentTerms.length}`);
     for (const t of currentTerms) {
-        // biome-ignore lint/suspicious/noConsole: wizard
         console.log(`    "${t.canonical}" rejects: ${t.reject.join(", ")}`);
     }
     const editTerms = await confirm({
@@ -77,7 +73,6 @@ export async function runDefaultsStep(existing) {
 }
 async function collectTermsInteractively(initial) {
     const terms = [...initial];
-    // biome-ignore lint/suspicious/noConsole: wizard
     console.log("  Term enforcement catches misspellings of brand or product names in issue titles " +
         "and descriptions. Define the canonical form and a list of rejected variants.");
     if (terms.length > 0) {
@@ -102,7 +97,6 @@ async function collectTermsInteractively(initial) {
         });
         const reject = parseCsvList(rejectRaw);
         if (reject.length === 0) {
-            // biome-ignore lint/suspicious/noConsole: wizard
             console.log("  No variants given — skipping this rule.");
             continue;
         }

package/dist/commands/init/index.js

@@ -16,6 +16,7 @@
  */
 import { mergeAliasesIntoConfig, runAliasesImport, runAliasesStep, } from "./aliases.js";
 import { runDefaultsStep } from "./defaults.js";
+import { runOAuthRevoke, runOAuthStep } from "./oauth.js";
 import { assignDefined, printStep, readConfig, writeConfig, } from "./shared.js";
 import { runTokenStep } from "./token.js";
 import { runWorkspaceStep } from "./workspace.js";
@@ -32,7 +33,6 @@ function withCleanExit(fn) {
         }
         catch (err) {
             if (err instanceof Error && err.name === "ExitPromptError") {
-                // biome-ignore lint/suspicious/noConsole: wizard
                 console.log("\n  Cancelled.");
                 process.exit(130);
             }
@@ -56,6 +56,27 @@ export function setupInitCommands(program) {
         printStep("token", "Linear API token");
         await runTokenStep({ force: options.force ?? false });
     }));
+    init
+        .command("oauth")
+        .description("Authorize via OAuth 2.0 (PKCE) — alternative to a personal API token")
+        .option("--force", "ignore existing tokens; re-authorize unconditionally")
+        .option("--revoke", "revoke and remove the stored OAuth tokens")
+        .option("--no-browser", "skip the browser-open + localhost listener; paste the code manually")
+        .option("--port <port>", "localhost callback port (default 8765)", (value) => Number.parseInt(value, 10))
+        .action(withCleanExit(async (options) => {
+        printStep("oauth", "Linear OAuth (PKCE)");
+        if (options.revoke) {
+            const result = await runOAuthRevoke();
+            console.log(`  ${result.message}`);
+            return;
+        }
+        await runOAuthStep({
+            force: options.force ?? false,
+            // commander's `--no-browser` produces `browser: false`.
+            noBrowser: options.browser === false,
+            port: options.port,
+        });
+    }));
     init
         .command("workspace")
         .description("Set the default team and refresh team UUID cache")
@@ -72,7 +93,6 @@ export function setupInitCommands(program) {
             workspaceUrlKey: existing.workspaceUrlKey ?? ws.workspaceUrlKey,
         });
         await writeConfig(merged);
-        // biome-ignore lint/suspicious/noConsole: wizard
         console.log("  ✓ Workspace defaults saved.");
     }));
     init
@@ -89,7 +109,6 @@ export function setupInitCommands(program) {
             const result = await runAliasesImport(tokenResult.token, options.import);
             updates = result.updates;
             if (result.skipped.length > 0) {
-                // biome-ignore lint/suspicious/noConsole: wizard
                 console.log(`  Skipped ${result.skipped.length} unmatched email(s): ${result.skipped.join(", ")}`);
             }
         }
@@ -99,13 +118,11 @@ export function setupInitCommands(program) {
             });
         }
         if (updates.size === 0) {
-            // biome-ignore lint/suspicious/noConsole: wizard
             console.log("  No alias changes — config unchanged.");
             return;
         }
         const merged = mergeAliasesIntoConfig(existing, updates);
         await writeConfig(merged);
-        // biome-ignore lint/suspicious/noConsole: wizard
         console.log(`  ✓ Updated aliases for ${updates.size} user(s).`);
     }));
     init
@@ -121,7 +138,6 @@ export function setupInitCommands(program) {
             terms: result.terms,
         });
         await writeConfig(merged);
-        // biome-ignore lint/suspicious/noConsole: wizard
         console.log("  ✓ Defaults saved.");
     }));
 }
@@ -134,9 +150,7 @@ export async function runFullWizard(options = {}) {
     await runFullWizardImpl(opts);
 }
 async function runFullWizardImpl(options) {
-    // biome-ignore lint/suspicious/noConsole: wizard
     console.log("Welcome to el-linear. This wizard will set up your config.");
-    // biome-ignore lint/suspicious/noConsole: wizard
     console.log("Skip is the default at every prompt; only the API token is required.\n");
     const existing = await readConfig();
     // Step 1: token (required)
@@ -175,12 +189,8 @@ async function runFullWizardImpl(options) {
         merged = mergeAliasesIntoConfig(merged, aliasUpdates);
     }
     await writeConfig(merged);
-    // biome-ignore lint/suspicious/noConsole: wizard
     console.log("\n✓ Setup complete.");
-    // biome-ignore lint/suspicious/noConsole: wizard
     console.log("  Token:  ~/.config/el-linear/token (mode 0600)");
-    // biome-ignore lint/suspicious/noConsole: wizard
     console.log("  Config: ~/.config/el-linear/config.json");
-    // biome-ignore lint/suspicious/noConsole: wizard
     console.log("\nTry: el-linear teams list");
 }

package/dist/commands/init/oauth.d.ts

@@ -0,0 +1,85 @@
+/**
+ * Wizard step for OAuth 2.0 (PKCE flow) authorization.
+ *
+ * Flow:
+ *   1. Present a "what is this?" intro pointing the user at Linear's OAuth
+ *      app registration page. (Until we ship a shared OAuth client_id,
+ *      every user registers their own app.)
+ *   2. Prompt for `client_id`, optional `client_secret`, port, scopes.
+ *   3. Generate PKCE verifier + state, build the authorize URL.
+ *   4. Try to open the system browser; fall back to printing the URL.
+ *   5. Spin a localhost listener (or fall back to pasted-code prompt) to
+ *      receive the redirect.
+ *   6. Exchange code for tokens.
+ *   7. Validate by calling `viewer { ... }` with the new bearer token.
+ *   8. Persist `oauth.json` to the active profile.
+ *
+ * Idempotent: if a fresh `oauth.json` already exists, offer keep / re-auth /
+ * revoke before doing anything else.
+ */
+import { runLocalhostCallback } from "../../auth/oauth-callback.js";
+import { type OAuthState } from "../../auth/oauth-storage.js";
+import { type FetchLike } from "../../auth/oauth-token.js";
+interface ViewerResponse {
+    viewer: {
+        id: string;
+        name: string;
+        email: string;
+        displayName: string;
+        organization: {
+            urlKey: string;
+            name: string;
+        };
+    };
+}
+export interface OAuthStepOptions {
+    /** Force re-authorization even if existing state is valid. */
+    force?: boolean;
+    /** Skip the localhost listener; use the headless code-paste prompt. */
+    noBrowser?: boolean;
+    /** Override the localhost port. Default 8765. */
+    port?: number;
+    /** Test seam for the OAuth token endpoint. */
+    fetchImpl?: FetchLike;
+    /**
+     * Test seam for the localhost listener. Default uses the real one.
+     */
+    runLocalhostCallbackImpl?: typeof runLocalhostCallback;
+    /** Test seam for the system-browser opener. Default uses spawn. */
+    openBrowser?: (url: string) => Promise<void>;
+    /** Test seam for `viewer` validation against the new bearer token. */
+    validateViewer?: (oauthToken: string) => Promise<ViewerResponse["viewer"]>;
+}
+export interface OAuthStepResult {
+    state: OAuthState;
+    viewer: ViewerResponse["viewer"];
+}
+/**
+ * Open `url` in the system browser. Forks per-platform:
+ *   - darwin → `open <url>`
+ *   - win32  → `start "" "<url>"` (cmd builtin)
+ *   - other  → `xdg-open <url>` (Linux / BSD with desktop env)
+ *
+ * Returns once the spawn call succeeds — does NOT wait for the browser to
+ * actually load. Throws on spawn failure (e.g. xdg-open not installed in
+ * a barebones container).
+ */
+export declare function openSystemBrowser(url: string): Promise<void>;
+/**
+ * Run the OAuth step. Returns the final stored state + viewer info.
+ *
+ * If the user opts to keep their existing tokens, returns the existing
+ * state unchanged (no network calls).
+ */
+export declare function runOAuthStep(options?: OAuthStepOptions): Promise<OAuthStepResult>;
+/**
+ * `init oauth --revoke`: revoke the active profile's tokens and remove
+ * `oauth.json`. Best-effort on the network call.
+ */
+export declare function runOAuthRevoke(options?: {
+    fetchImpl?: FetchLike;
+}): Promise<{
+    revoked: boolean;
+    message: string;
+}>;
+export {};