@enrichlayer/el-linear 1.42.0 → 1.43.1

package/README.md

@@ -489,6 +489,22 @@ el-linear <command> --help       # detailed help for one command
 All `list` subcommands support `-l, --limit <n>`. All commands accept the
 top-level filters: `--format <json|summary>`, `--raw`, `--jq <expr>`, `--fields <list>`.
 
+`issues list` also accepts `--all` (equivalent to `--limit 0`) to fetch **every**
+matching issue. It paginates the full set in safe chunks under the hood, so
+enumerating a large team no longer trips Linear's GraphQL complexity ceiling
+(`Query too complex`) the way a single big `--limit` used to — no manual
+per-status / per-priority bucketing needed:
+
+```bash
+el-linear issues list --team DEV --all --format csv --fields identifier   # the whole open DEV backlog, one command
+```
+
+`issues search` intentionally has no `--all`: Linear's full-text search is a
+relevance-ranked candidate search whose results are filtered client-side, not
+an exhaustive enumeration. Its `--limit` reads at most 200 ranked candidates to
+keep the rich issue query below Linear's complexity ceiling. Use `issues list`
+with structured filters and `--all` when you need every matching issue.
+
 ### Open by default — `issues list` and `issues search` skip terminal states
 
 `el-linear issues list` and `el-linear issues search` **exclude issues in

package/dist/commands/issues/description.js

@@ -20,6 +20,7 @@ import { loadConfig } from "../../config/config.js";
 import { UPDATE_ISSUE_MUTATION } from "../../queries/issues.js";
 import { autoLinkReferences, } from "../../utils/auto-link-references.js";
 import { normalizeInlineTextInput } from "../../utils/inline-text-input.js";
+import { assertNotIssueEnvelope } from "../../utils/issue-envelope-guard.js";
 import { extractIssueReferences } from "../../utils/issue-reference-extractor.js";
 import { wrapIssueReferencesAsLinks } from "../../utils/issue-reference-wrapper.js";
 import { readTextInputFile } from "../../utils/text-input-file.js";
@@ -53,11 +54,19 @@ export function resolveDescription(options) {
         throw new Error("--template is mutually exclusive with --description / --description-file. " +
             "Pick one.");
     }
+    // Guard both user-supplied paths (file + inline) against being handed an
+    // issue's own JSON envelope, which would silently overwrite the real body
+    // (DEV-6315). Template bodies are config-authored, so they're not checked.
+    const allow = options.allowJsonDescription === true;
     if (hasFile) {
-        return readDescriptionFile(options.descriptionFile);
+        const body = readDescriptionFile(options.descriptionFile);
+        assertNotIssueEnvelope(body, { allow });
+        return body;
     }
     if (hasInline) {
-        return normalizeInlineTextInput(options.description);
+        const body = normalizeInlineTextInput(options.description);
+        assertNotIssueEnvelope(body, { allow });
+        return body;
     }
     if (hasTemplate) {
         const templates = loadConfig().descriptionTemplates ?? {};

package/dist/commands/issues.js

@@ -16,6 +16,7 @@ import { emitGateEvent } from "../utils/gate-telemetry.js";
 import { createGraphQLAttachmentsService } from "../utils/graphql-attachments-service.js";
 import { createGraphQLService, } from "../utils/graphql-service.js";
 import { normalizeInlineTextInput } from "../utils/inline-text-input.js";
+import { assertNotIssueEnvelope } from "../utils/issue-envelope-guard.js";
 import { createIssuesService } from "../utils/issues-service-bootstrap.js";
 import { createLinearService, } from "../utils/linear-service.js";
 import { logger } from "../utils/logger.js";
@@ -217,7 +218,11 @@ async function handleListIssues(options, command) {
         options.project ||
         options.project === false ||
         options.priority;
-    const limit = parsePositiveInt(options.limit, "--limit");
+    // DEV-6312: `--all` / `--limit 0` mean unlimited. Stored as `limit = 0`,
+    // which the service's chunked pagination interprets as "fetch the whole
+    // matching set in safe pages" — mirrors `projects list --all` (DEV-4175).
+    const unlimited = options.all === true || options.limit === "0";
+    const limit = unlimited ? 0 : parsePositiveInt(options.limit, "--limit");
     // Route through searchIssues whenever the CLI needs to control the GraphQL
     // state filter: any explicit filter, the default `excludeTerminalStates`,
     // OR an explicit `--include-closed`. The last case is load-bearing —
@@ -1100,6 +1105,18 @@ async function handleUpdateIssue(issueId, options, command) {
     if (typeof options.appendDescription === "string") {
         options.appendDescription = normalizeInlineTextInput(options.appendDescription);
     }
+    // Guard against overwriting this issue's body with its own JSON envelope
+    // (DEV-6315). The update path resolves description inline rather than via
+    // resolveDescription(), so the guard is applied here too; --description,
+    // --description-file (normalized above), and --append-description are all
+    // checked (append would corrupt just as badly).
+    {
+        const allow = options.allowJsonDescription === true;
+        assertNotIssueEnvelope(typeof options.description === "string" ? options.description : undefined, { allow, targetIssueRef: issueId });
+        assertNotIssueEnvelope(typeof options.appendDescription === "string"
+            ? options.appendDescription
+            : undefined, { allow, targetIssueRef: issueId });
+    }
     validateUpdateOptions(options);
     const rootOpts = getRootOpts(command);
     const { graphQLService, linearService, issuesService } = await createIssuesService(rootOpts);
@@ -1324,6 +1341,14 @@ async function handleMarkBranch(issueId, options, command) {
                 `Pass one explicitly: 'el-linear issues mark-branch DEV-123'.`);
         }
     }
+    const branchIdentifier = extractIssueIdentifierFromBranch(branch);
+    if (issueId &&
+        branchIdentifier &&
+        branchIdentifier !== identifier &&
+        options.allowBranchMismatch !== true) {
+        throw new Error(`Branch '${branch}' implies ${branchIdentifier}, but the requested marker is ${identifier}. ` +
+            "Run this command from the matching branch, or pass --allow-branch-mismatch for deliberate recovery.");
+    }
     const previous = getBranchLinearIssue(branch);
     setBranchLinearIssue(branch, identifier);
     let claim;
@@ -1381,6 +1406,7 @@ export function setupIssuesCommands(program) {
         .command("list")
         .description("List issues.")
         .option("-l, --limit <number>", "limit results", "25")
+        .option("--all", "fetch every matching issue (paginates fully in safe chunks). Equivalent to --limit 0; overrides --limit when both are given.")
         .option("--search <query>", "full-text search term; composes with list filters")
         .option("--team <team>", "filter by team key (EL: resolves names)")
         .option("--assignee <assignee>", "filter by assignee (name, alias, or ID)")
@@ -1412,7 +1438,7 @@ export function setupIssuesCommands(program) {
         .option("--sort <field>", "sort results (priority, status, created, updated)")
         .option("--format <format>", "output format (json, summary, table, md, csv)", "json")
         .option("--fields <fields>", "columns for table/csv output")
-        .option("-l, --limit <number>", "limit results", "10")
+        .option("-l, --limit <number>", "limit results (full-text search reads at most 200 ranked candidates)", "10")
         .action(handleAsyncCommand(handleSearchIssues));
     issues
         .command("create [title]")
@@ -1421,6 +1447,7 @@ export function setupIssuesCommands(program) {
         .option("-d, --description <desc>", "issue description")
         .option("--description-file <path>", "read description from file (use - for stdin)")
         .option("--template <name>", "use a named description template from config.descriptionTemplates")
+        .option("--allow-json-description", "allow a --description / --description-file body that looks like an issue's JSON envelope (normally blocked to prevent silently overwriting a body with 'issues get --format json' output — DEV-6315)")
         .option("--from-template <id>", "instantiate the issue from a Linear server-side template (UUID from `el-linear templates list`). Sets templateId on the underlying issueCreate mutation; Linear copies the template's title, description, labels, priority, etc. as the new issue's defaults. Override any field with the matching --title / --description / --labels flag.")
         .option("-a, --assignee <assignee>", "assign to user (name, alias, or UUID)")
         .option("--delegate <delegate>", "delegate implementation to an agent app user (name, alias, or UUID)")
@@ -1503,6 +1530,7 @@ export function setupIssuesCommands(program) {
         .option("-t, --title <title>", "new title")
         .option("-d, --description <desc>", "new description")
         .option("--description-file <path>", "read description from file (use - for stdin)")
+        .option("--allow-json-description", "allow a --description / --description-file body that looks like an issue's JSON envelope (normally blocked to prevent silently overwriting a body with 'issues get --format json' output — DEV-6315)")
         .option("--append-description <text>", "append text to the existing description")
         .option("-s, --status <status>", "new status name or ID")
         .option("--state <status>", "alias for --status (new status name or ID)")
@@ -1600,5 +1628,6 @@ export function setupIssuesCommands(program) {
         "Accepts a bare identifier (DEV-123), a branch-style token, or a Linear URL.\n" +
         "By default, also claims the issue (assignee = current Linear user; status = first started state). Pass --no-claim to only write git metadata.")
         .option("--no-claim", "only record git metadata; skip assigning the issue to the current Linear user and moving it to the first started state")
+        .option("--allow-branch-mismatch", "allow an explicit issue identifier that conflicts with the current branch name")
         .action(handleAsyncCommand(handleMarkBranch));
 }

package/dist/queries/issues-types.d.ts

@@ -147,10 +147,20 @@ export interface BatchGetIssuesResponse {
         nodes: IssueWithCommentsNode[];
     };
 }
+/**
+ * Cursor-pagination page metadata (DEV-6312). Present on the connection
+ * responses the list/search enumeration paths chunk through so a large
+ * `--limit` / `--all` never blows Linear's GraphQL complexity ceiling.
+ */
+export interface IssuePageInfo {
+    hasNextPage: boolean;
+    endCursor: string | null;
+}
 /** Response shape for `GET_ISSUES_QUERY`. */
 export interface GetIssuesResponse {
     issues: {
         nodes: IssueNode[];
+        pageInfo?: IssuePageInfo;
     };
 }
 /**
@@ -161,6 +171,7 @@ export interface TeamScopedFilteredIssuesResponse {
     team: {
         issues: {
             nodes: IssueNode[];
+            pageInfo?: IssuePageInfo;
         };
     } | null;
 }

package/dist/queries/issues.d.ts

@@ -1,6 +1,6 @@
-export declare const GET_ISSUES_QUERY = "\n  query GetIssues($first: Int!, $orderBy: PaginationOrderBy) {\n    issues(\n      first: $first\n      orderBy: $orderBy\n      filter: {\n        state: { type: { neq: \"completed\" } }\n      }\n    ) {\n      nodes {\n        \n  \n  id\n  identifier\n  title\n  description\n  summary { content generationStatus }\n  branchName\n  priority\n  estimate\n  dueDate\n  url\n  createdAt\n  updatedAt\n  completedAt\n\n  \n  state {\n    id\n    name\n    type\n  }\n\n  \n  assignee {\n    id\n    name\n    url\n  }\n\n  \n  delegate {\n    id\n    name\n    url\n  }\n\n  \n  team {\n    id\n    key\n    name\n  }\n\n  \n  project {\n    id\n    name\n  }\n\n  \n  labels {\n    nodes {\n      id\n      name\n    }\n  }\n\n  \n  cycle {\n    id\n    name\n    number\n  }\n\n  \n  projectMilestone {\n    id\n    name\n    targetDate\n  }\n\n  \n  parent {\n    id\n    identifier\n    title\n  }\n\n  \n  children {\n    nodes {\n      id\n      identifier\n      title\n    }\n  }\n\n\n      }\n    }\n  }\n";
+export declare const GET_ISSUES_QUERY = "\n  query GetIssues($first: Int!, $after: String, $orderBy: PaginationOrderBy) {\n    issues(\n      first: $first\n      after: $after\n      orderBy: $orderBy\n      filter: {\n        state: { type: { neq: \"completed\" } }\n      }\n    ) {\n      nodes {\n        \n  \n  id\n  identifier\n  title\n  description\n  summary { content generationStatus }\n  branchName\n  priority\n  estimate\n  dueDate\n  url\n  createdAt\n  updatedAt\n  completedAt\n\n  \n  state {\n    id\n    name\n    type\n  }\n\n  \n  assignee {\n    id\n    name\n    url\n  }\n\n  \n  delegate {\n    id\n    name\n    url\n  }\n\n  \n  team {\n    id\n    key\n    name\n  }\n\n  \n  project {\n    id\n    name\n  }\n\n  \n  labels {\n    nodes {\n      id\n      name\n    }\n  }\n\n  \n  cycle {\n    id\n    name\n    number\n  }\n\n  \n  projectMilestone {\n    id\n    name\n    targetDate\n  }\n\n  \n  parent {\n    id\n    identifier\n    title\n  }\n\n  \n  children {\n    nodes {\n      id\n      identifier\n      title\n    }\n  }\n\n\n      }\n      pageInfo {\n        hasNextPage\n        endCursor\n      }\n    }\n  }\n";
 export declare const SEARCH_ISSUES_QUERY = "\n  query SearchIssues($term: String!, $first: Int!) {\n    searchIssues(term: $term, first: $first, includeArchived: false) {\n      nodes {\n        \n  \n  id\n  identifier\n  title\n  description\n  summary { content generationStatus }\n  branchName\n  priority\n  estimate\n  dueDate\n  url\n  createdAt\n  updatedAt\n  completedAt\n\n  \n  state {\n    id\n    name\n    type\n  }\n\n  \n  assignee {\n    id\n    name\n    url\n  }\n\n  \n  delegate {\n    id\n    name\n    url\n  }\n\n  \n  team {\n    id\n    key\n    name\n  }\n\n  \n  project {\n    id\n    name\n  }\n\n  \n  labels {\n    nodes {\n      id\n      name\n    }\n  }\n\n  \n  cycle {\n    id\n    name\n    number\n  }\n\n  \n  projectMilestone {\n    id\n    name\n    targetDate\n  }\n\n  \n  parent {\n    id\n    identifier\n    title\n  }\n\n  \n  children {\n    nodes {\n      id\n      identifier\n      title\n    }\n  }\n\n\n      }\n    }\n  }\n";
-export declare const FILTERED_SEARCH_ISSUES_QUERY = "\n  query FilteredSearchIssues(\n    $first: Int!\n    $filter: IssueFilter\n    $orderBy: PaginationOrderBy\n  ) {\n    issues(\n      first: $first\n      filter: $filter\n      orderBy: $orderBy\n      includeArchived: false\n    ) {\n      nodes {\n        \n  \n  id\n  identifier\n  title\n  description\n  summary { content generationStatus }\n  branchName\n  priority\n  estimate\n  dueDate\n  url\n  createdAt\n  updatedAt\n  completedAt\n\n  \n  state {\n    id\n    name\n    type\n  }\n\n  \n  assignee {\n    id\n    name\n    url\n  }\n\n  \n  delegate {\n    id\n    name\n    url\n  }\n\n  \n  team {\n    id\n    key\n    name\n  }\n\n  \n  project {\n    id\n    name\n  }\n\n  \n  labels {\n    nodes {\n      id\n      name\n    }\n  }\n\n  \n  cycle {\n    id\n    name\n    number\n  }\n\n  \n  projectMilestone {\n    id\n    name\n    targetDate\n  }\n\n  \n  parent {\n    id\n    identifier\n    title\n  }\n\n  \n  children {\n    nodes {\n      id\n      identifier\n      title\n    }\n  }\n\n\n      }\n    }\n  }\n";
+export declare const FILTERED_SEARCH_ISSUES_QUERY = "\n  query FilteredSearchIssues(\n    $first: Int!\n    $after: String\n    $filter: IssueFilter\n    $orderBy: PaginationOrderBy\n  ) {\n    issues(\n      first: $first\n      after: $after\n      filter: $filter\n      orderBy: $orderBy\n      includeArchived: false\n    ) {\n      nodes {\n        \n  \n  id\n  identifier\n  title\n  description\n  summary { content generationStatus }\n  branchName\n  priority\n  estimate\n  dueDate\n  url\n  createdAt\n  updatedAt\n  completedAt\n\n  \n  state {\n    id\n    name\n    type\n  }\n\n  \n  assignee {\n    id\n    name\n    url\n  }\n\n  \n  delegate {\n    id\n    name\n    url\n  }\n\n  \n  team {\n    id\n    key\n    name\n  }\n\n  \n  project {\n    id\n    name\n  }\n\n  \n  labels {\n    nodes {\n      id\n      name\n    }\n  }\n\n  \n  cycle {\n    id\n    name\n    number\n  }\n\n  \n  projectMilestone {\n    id\n    name\n    targetDate\n  }\n\n  \n  parent {\n    id\n    identifier\n    title\n  }\n\n  \n  children {\n    nodes {\n      id\n      identifier\n      title\n    }\n  }\n\n\n      }\n      pageInfo {\n        hasNextPage\n        endCursor\n      }\n    }\n  }\n";
 /**
  * Team-scoped variant of `FILTERED_SEARCH_ISSUES_QUERY` (DEV-5578).
  *
@@ -19,7 +19,7 @@ export declare const FILTERED_SEARCH_ISSUES_QUERY = "\n  query FilteredSearchIss
  * (state / labels / assignee / priority / project) is applied on top of the
  * already-team-scoped connection.
  */
-export declare const TEAM_SCOPED_FILTERED_ISSUES_QUERY = "\n  query TeamScopedFilteredIssues(\n    $teamId: String!\n    $first: Int!\n    $filter: IssueFilter\n    $orderBy: PaginationOrderBy\n  ) {\n    team(id: $teamId) {\n      issues(\n        first: $first\n        filter: $filter\n        orderBy: $orderBy\n        includeArchived: false\n      ) {\n        nodes {\n          \n  \n  id\n  identifier\n  title\n  description\n  summary { content generationStatus }\n  branchName\n  priority\n  estimate\n  dueDate\n  url\n  createdAt\n  updatedAt\n  completedAt\n\n  \n  state {\n    id\n    name\n    type\n  }\n\n  \n  assignee {\n    id\n    name\n    url\n  }\n\n  \n  delegate {\n    id\n    name\n    url\n  }\n\n  \n  team {\n    id\n    key\n    name\n  }\n\n  \n  project {\n    id\n    name\n  }\n\n  \n  labels {\n    nodes {\n      id\n      name\n    }\n  }\n\n  \n  cycle {\n    id\n    name\n    number\n  }\n\n  \n  projectMilestone {\n    id\n    name\n    targetDate\n  }\n\n  \n  parent {\n    id\n    identifier\n    title\n  }\n\n  \n  children {\n    nodes {\n      id\n      identifier\n      title\n    }\n  }\n\n\n        }\n      }\n    }\n  }\n";
+export declare const TEAM_SCOPED_FILTERED_ISSUES_QUERY = "\n  query TeamScopedFilteredIssues(\n    $teamId: String!\n    $first: Int!\n    $after: String\n    $filter: IssueFilter\n    $orderBy: PaginationOrderBy\n  ) {\n    team(id: $teamId) {\n      issues(\n        first: $first\n        after: $after\n        filter: $filter\n        orderBy: $orderBy\n        includeArchived: false\n      ) {\n        nodes {\n          \n  \n  id\n  identifier\n  title\n  description\n  summary { content generationStatus }\n  branchName\n  priority\n  estimate\n  dueDate\n  url\n  createdAt\n  updatedAt\n  completedAt\n\n  \n  state {\n    id\n    name\n    type\n  }\n\n  \n  assignee {\n    id\n    name\n    url\n  }\n\n  \n  delegate {\n    id\n    name\n    url\n  }\n\n  \n  team {\n    id\n    key\n    name\n  }\n\n  \n  project {\n    id\n    name\n  }\n\n  \n  labels {\n    nodes {\n      id\n      name\n    }\n  }\n\n  \n  cycle {\n    id\n    name\n    number\n  }\n\n  \n  projectMilestone {\n    id\n    name\n    targetDate\n  }\n\n  \n  parent {\n    id\n    identifier\n    title\n  }\n\n  \n  children {\n    nodes {\n      id\n      identifier\n      title\n    }\n  }\n\n\n        }\n        pageInfo {\n          hasNextPage\n          endCursor\n        }\n      }\n    }\n  }\n";
 /**
  * Batch-resolves a search's team/project/assignee/delegate filter inputs.
  *

package/dist/queries/issues.js

@@ -1,8 +1,9 @@
 import { COMPLETE_ISSUE_FRAGMENT, COMPLETE_ISSUE_WITH_COMMENTS_FRAGMENT, } from "./common.js";
 export const GET_ISSUES_QUERY = `
-  query GetIssues($first: Int!, $orderBy: PaginationOrderBy) {
+  query GetIssues($first: Int!, $after: String, $orderBy: PaginationOrderBy) {
     issues(
       first: $first
+      after: $after
       orderBy: $orderBy
       filter: {
         state: { type: { neq: "completed" } }
@@ -11,6 +12,10 @@ export const GET_ISSUES_QUERY = `
       nodes {
         ${COMPLETE_ISSUE_FRAGMENT}
       }
+      pageInfo {
+        hasNextPage
+        endCursor
+      }
     }
   }
 `;
@@ -26,11 +31,13 @@ export const SEARCH_ISSUES_QUERY = `
 export const FILTERED_SEARCH_ISSUES_QUERY = `
   query FilteredSearchIssues(
     $first: Int!
+    $after: String
     $filter: IssueFilter
     $orderBy: PaginationOrderBy
   ) {
     issues(
       first: $first
+      after: $after
       filter: $filter
       orderBy: $orderBy
       includeArchived: false
@@ -38,6 +45,10 @@ export const FILTERED_SEARCH_ISSUES_QUERY = `
       nodes {
         ${COMPLETE_ISSUE_FRAGMENT}
       }
+      pageInfo {
+        hasNextPage
+        endCursor
+      }
     }
   }
 `;
@@ -63,12 +74,14 @@ export const TEAM_SCOPED_FILTERED_ISSUES_QUERY = `
   query TeamScopedFilteredIssues(
     $teamId: String!
     $first: Int!
+    $after: String
     $filter: IssueFilter
     $orderBy: PaginationOrderBy
   ) {
     team(id: $teamId) {
       issues(
         first: $first
+        after: $after
         filter: $filter
         orderBy: $orderBy
         includeArchived: false
@@ -76,6 +89,10 @@ export const TEAM_SCOPED_FILTERED_ISSUES_QUERY = `
         nodes {
           ${COMPLETE_ISSUE_FRAGMENT}
         }
+        pageInfo {
+          hasNextPage
+          endCursor
+        }
       }
     }
   }

package/dist/utils/graphql-issues-service.d.ts

@@ -183,6 +183,21 @@ export declare class GraphQLIssuesService {
     private readonly graphQLService;
     private readonly linearService;
     constructor(graphQLService: GraphQLService, linearService: LinearService);
+    /**
+     * Chunked cursor pagination shared by every issue-enumeration path
+     * (DEV-6312). Fetches successive pages of at most `SAFE_ISSUE_PAGE_SIZE`
+     * via `fetchPage(first, after)` until the target is met or the connection
+     * is exhausted, so a large `--limit` (or `--all`, passed as `target === 0`)
+     * never issues one oversized request that Linear rejects as "Query too
+     * complex".
+     *
+     * `target === 0` means unlimited (fetch the whole connection). A positive
+     * target caps the total and trims any final-page overshoot. `fetchPage`
+     * returns `null` when the connection root is absent (e.g. an unresolved
+     * team) — treated as an empty result. A page that claims `hasNextPage` but
+     * returns zero nodes terminates the loop rather than spinning forever.
+     */
+    private paginateIssueNodes;
     getIssues(limit?: number): Promise<LinearIssue[]>;
     getIssueById(issueId: string): Promise<LinearIssue>;
     /**

package/dist/utils/graphql-issues-service.js

@@ -12,6 +12,18 @@ import { parseIssueIdentifier, tryParseIssueIdentifier, } from "./identifier-par
 import { logger } from "./logger.js";
 import { isUuid } from "./uuid.js";
 const TEAM_KEY_REGEX = /^[A-Z0-9]+$/i;
+/**
+ * Per-page cap for the chunked issue-enumeration paths (DEV-6312).
+ *
+ * The list/search queries embed the rich `COMPLETE_ISSUE_FRAGMENT`, so a single
+ * page's GraphQL complexity scales with `first`. Linear rejects any query above
+ * complexity 10000; empirically `first: 500` measured ~10900, i.e. ~21.8 per
+ * issue. 200 keeps a page near ~4400 — comfortably under the ceiling with
+ * headroom for the fragment growing — while still being few enough round-trips
+ * for large teams. A big `--limit` (or `--all`) is fetched as successive pages
+ * of this size rather than one oversized request that would be rejected.
+ */
+const SAFE_ISSUE_PAGE_SIZE = 200;
 function extractSummaryText(summary) {
     if (summary.generationStatus !== "completed" || !summary.content) {
         return undefined;
@@ -62,12 +74,55 @@ export class GraphQLIssuesService {
         this.graphQLService = graphQLService;
         this.linearService = linearService;
     }
-    async getIssues(limit = 25) {
-        const result = await this.graphQLService.rawRequest(GET_ISSUES_QUERY, { first: limit, orderBy: "updatedAt" });
-        const nodes = result.issues?.nodes;
-        if (!nodes?.length) {
-            return [];
+    /**
+     * Chunked cursor pagination shared by every issue-enumeration path
+     * (DEV-6312). Fetches successive pages of at most `SAFE_ISSUE_PAGE_SIZE`
+     * via `fetchPage(first, after)` until the target is met or the connection
+     * is exhausted, so a large `--limit` (or `--all`, passed as `target === 0`)
+     * never issues one oversized request that Linear rejects as "Query too
+     * complex".
+     *
+     * `target === 0` means unlimited (fetch the whole connection). A positive
+     * target caps the total and trims any final-page overshoot. `fetchPage`
+     * returns `null` when the connection root is absent (e.g. an unresolved
+     * team) — treated as an empty result. A page that claims `hasNextPage` but
+     * returns zero nodes terminates the loop rather than spinning forever.
+     */
+    async paginateIssueNodes(target, fetchPage) {
+        const unlimited = target === 0;
+        const collected = [];
+        let after = null;
+        while (true) {
+            const remaining = unlimited
+                ? SAFE_ISSUE_PAGE_SIZE
+                : Math.min(target - collected.length, SAFE_ISSUE_PAGE_SIZE);
+            if (!unlimited && remaining <= 0) {
+                break;
+            }
+            const page = await fetchPage(remaining, after);
+            const nodes = page?.nodes ?? [];
+            collected.push(...nodes);
+            if (!unlimited && collected.length >= target) {
+                break;
+            }
+            const pageInfo = page?.pageInfo;
+            if (!pageInfo?.hasNextPage || !pageInfo.endCursor) {
+                break;
+            }
+            // Defensive: an empty page that still claims hasNextPage would loop
+            // forever on the same cursor. Stop instead.
+            if (nodes.length === 0) {
+                break;
+            }
+            after = pageInfo.endCursor;
         }
+        return unlimited ? collected : collected.slice(0, target);
+    }
+    async getIssues(limit = 25) {
+        const nodes = await this.paginateIssueNodes(limit, async (first, after) => {
+            const result = await this.graphQLService.rawRequest(GET_ISSUES_QUERY, { first, after, orderBy: "updatedAt" });
+            return result.issues ?? null;
+        });
         return nodes.map((issue) => this.transformIssueData(issue));
     }
     async getIssueById(issueId) {
@@ -381,7 +436,7 @@ export class GraphQLIssuesService {
             updateResult = await this.graphQLService.rawRequest(UPDATE_ISSUE_MUTATION, {
                 id: resolvedIssueId,
                 input: updateInput,
-            });
+            }, { retrySafeMutation: true });
         }
         catch (error) {
             const msg = error instanceof Error ? error.message : String(error);
@@ -579,9 +634,17 @@ export class GraphQLIssuesService {
                 : undefined;
         const limit = args.limit ?? 10;
         if (args.query) {
+            // Full-text search is relevance-ranked and then filtered client-side,
+            // so it cannot promise exhaustive `--all` semantics. Keep it to one
+            // bounded candidate page: the query embeds COMPLETE_ISSUE_FRAGMENT and
+            // an explicit large --limit would otherwise recreate the GraphQL
+            // complexity failure that chunking prevents on enumeration paths.
+            const fullTextLimit = limit === 0
+                ? SAFE_ISSUE_PAGE_SIZE
+                : Math.min(limit, SAFE_ISSUE_PAGE_SIZE);
             const searchResult = await this.graphQLService.rawRequest(SEARCH_ISSUES_QUERY, {
                 term: args.query,
-                first: limit,
+                first: fullTextLimit,
             });
             const nodes = searchResult.searchIssues?.nodes;
             if (!nodes?.length) {
@@ -618,28 +681,28 @@ export class GraphQLIssuesService {
         const filterArg = Object.keys(filter).length > 0 ? filter : undefined;
         const orderBy = args.orderBy ?? "updatedAt";
         if (finalTeamId) {
-            const teamScoped = await this.graphQLService.rawRequest(TEAM_SCOPED_FILTERED_ISSUES_QUERY, {
-                teamId: finalTeamId,
-                first: limit,
-                filter: filterArg,
-                orderBy,
+            const nodes = await this.paginateIssueNodes(limit, async (first, after) => {
+                const teamScoped = await this.graphQLService.rawRequest(TEAM_SCOPED_FILTERED_ISSUES_QUERY, {
+                    teamId: finalTeamId,
+                    first,
+                    after,
+                    filter: filterArg,
+                    orderBy,
+                });
+                return teamScoped.team?.issues ?? null;
             });
-            const nodes = teamScoped.team?.issues?.nodes;
-            if (!nodes?.length) {
-                return [];
-            }
             return nodes.map((issue) => this.transformIssueData(issue));
         }
-        const searchResult = await this.graphQLService.rawRequest(FILTERED_SEARCH_ISSUES_QUERY, {
-            first: limit,
-            filter: filterArg,
-            orderBy,
+        const nodes = await this.paginateIssueNodes(limit, async (first, after) => {
+            const searchResult = await this.graphQLService.rawRequest(FILTERED_SEARCH_ISSUES_QUERY, {
+                first,
+                after,
+                filter: filterArg,
+                orderBy,
+            });
+            return searchResult.issues ?? null;
         });
-        const filteredIssues = searchResult.issues;
-        if (!filteredIssues?.nodes) {
-            return [];
-        }
-        return filteredIssues.nodes.map((issue) => this.transformIssueData(issue));
+        return nodes.map((issue) => this.transformIssueData(issue));
     }
     // --- Private helper methods for field resolution ---
     async resolveTeamId(teamId, resolveResult) {

package/dist/utils/graphql-service.d.ts

@@ -1,6 +1,21 @@
 import type { LinearCredential } from "../auth/linear-credential.js";
 import type { GraphQLResponseData, GraphQLVariables } from "../types/linear.js";
 import type { AuthOptions } from "./auth.js";
+export interface GraphQLRequestOptions {
+    /**
+     * Retry only an operation whose mutation is safe to repeat. Callers must
+     * opt in; creates and comment writes intentionally retain one-shot
+     * semantics because a transport failure can leave their server-side result
+     * unknown.
+     */
+    retrySafeMutation?: boolean;
+}
+interface GraphQLServiceRuntimeOptions {
+    retryDelaysMs?: readonly number[];
+    sleep?: (ms: number) => Promise<void>;
+}
+/** True only for failures where retrying a known-idempotent request is useful. */
+export declare function isTransientGraphQLError(error: unknown): boolean;
 /**
  * Constructor arg for `GraphQLService`. Re-exported alias of the shared
  * `LinearCredential` union (`{ apiKey } | { oauthToken }`). Kept as a
@@ -15,7 +30,10 @@ import type { AuthOptions } from "./auth.js";
 export type GraphQLServiceAuth = LinearCredential;
 export declare class GraphQLService {
     private readonly graphQLClient;
-    constructor(auth: GraphQLServiceAuth);
-    rawRequest<T = GraphQLResponseData>(query: string, variables?: GraphQLVariables): Promise<T>;
+    private readonly retryDelaysMs;
+    private readonly sleep;
+    constructor(auth: GraphQLServiceAuth, options?: GraphQLServiceRuntimeOptions);
+    rawRequest<T = GraphQLResponseData>(query: string, variables?: GraphQLVariables, options?: GraphQLRequestOptions): Promise<T>;
 }
 export declare function createGraphQLService(options: AuthOptions): Promise<GraphQLService>;
+export {};

package/dist/utils/graphql-service.js

@@ -1,5 +1,20 @@
 import { LinearClient } from "@linear/sdk";
 import { getActiveAuth } from "../auth/token-resolver.js";
+const DEFAULT_SAFE_MUTATION_RETRY_DELAYS_MS = [150, 400];
+function errorMessage(error) {
+    return error instanceof Error ? error.message : String(error);
+}
+/** True only for failures where retrying a known-idempotent request is useful. */
+export function isTransientGraphQLError(error) {
+    const detail = error;
+    const status = detail.response?.status ?? detail.response?.statusCode;
+    if (status === 408 ||
+        status === 429 ||
+        (status !== undefined && status >= 500)) {
+        return true;
+    }
+    return /\b(?:408|429|500|502|503|504)\b|(?:ECONNRESET|ECONNREFUSED|ETIMEDOUT|fetch failed|network error|connection termination)/i.test(errorMessage(error));
+}
 function buildLinearClient(auth) {
     const baseHeaders = { "public-file-urls-expire-in": "3600" };
     if ("oauthToken" in auth) {
@@ -16,17 +31,38 @@ function buildLinearClient(auth) {
 }
 export class GraphQLService {
     graphQLClient;
-    constructor(auth) {
+    retryDelaysMs;
+    sleep;
+    constructor(auth, options = {}) {
         const client = buildLinearClient(auth);
         // LinearClient stores a private graphql-request client — access via escape hatch
         this.graphQLClient = client.client;
+        this.retryDelaysMs =
+            options.retryDelaysMs ?? DEFAULT_SAFE_MUTATION_RETRY_DELAYS_MS;
+        this.sleep =
+            options.sleep ??
+                ((ms) => new Promise((resolve) => setTimeout(resolve, ms)));
     }
     // Default type allows property access on raw GraphQL responses.
     // Callers can narrow with explicit type parameter: rawRequest<{ issues: { nodes: T[] } }>(...)
-    async rawRequest(query, variables) {
+    async rawRequest(query, variables, options = {}) {
+        let attempt = 0;
         try {
-            const response = await this.graphQLClient.rawRequest(query, variables);
-            return response.data;
+            while (true) {
+                try {
+                    const response = await this.graphQLClient.rawRequest(query, variables);
+                    return response.data;
+                }
+                catch (error) {
+                    if (!options.retrySafeMutation ||
+                        attempt >= this.retryDelaysMs.length ||
+                        !isTransientGraphQLError(error)) {
+                        throw error;
+                    }
+                    await this.sleep(this.retryDelaysMs[attempt]);
+                    attempt += 1;
+                }
+            }
         }
         catch (error) {
             const err = error;

package/dist/utils/issue-envelope-guard.d.ts

@@ -0,0 +1,50 @@
+/**
+ * Guard against overwriting an issue body with the issue's own JSON envelope.
+ *
+ * `issues get/read --format json` emits `JSON.stringify(transformIssueData(...))`
+ * — an object shaped `{ id, identifier, url, title, description, branchName,
+ * state, assignee, ... }`. Feeding that straight back into
+ * `issues update <ID> --description "$(... get <ID> --format json)"` (or the
+ * equivalent create) silently replaces the real markdown with the stringified
+ * envelope. Re-running on an already-corrupted issue re-wraps it, producing
+ * envelope-inside-envelope — so the damage deepens and recurs.
+ *
+ * This detector spots the envelope signature so the create/update path can
+ * block it with an actionable error. It is deliberately conservative: a plain
+ * markdown body never parses to an object carrying `identifier` plus an
+ * issue-only sibling key, so real descriptions pass untouched.
+ *
+ * See DEV-6315 (and the two victims it recovered, DEV-6092 / DEV-6042).
+ */
+export interface IssueEnvelopeMatch {
+    /** The `identifier` field carried by the detected envelope (e.g. "DEV-123"). */
+    identifier: string;
+    /** UUID carried by the envelope, when present. Used for self-match messages. */
+    id?: string;
+    /** Linear URL carried by the envelope, when present. */
+    url?: string;
+    /** True when the envelope's `description` is itself a nested envelope — the
+     * double-nesting signature of a re-corrupted body. */
+    nested: boolean;
+}
+/**
+ * Return a match when `text` parses as an issue-envelope JSON object, else null.
+ *
+ * An envelope is an object with a string `identifier` AND at least one of
+ * {@link ENVELOPE_SIBLING_KEYS}. Non-JSON text, JSON that isn't an object, and
+ * JSON objects without the signature all return null.
+ */
+export declare function detectIssueEnvelope(text: string): IssueEnvelopeMatch | null;
+/**
+ * Throw an actionable error when `text` looks like an issue's own JSON
+ * envelope being used as a description body. No-op otherwise, or when the
+ * caller passed the audited `--allow-json-description` override.
+ *
+ * `context` carries the audited override and, when known, the raw update target
+ * (identifier, UUID, or URL) so the message can flag the exact self-overwrite
+ * case without making a network request.
+ */
+export declare function assertNotIssueEnvelope(text: string | undefined, context?: {
+    allow?: boolean;
+    targetIssueRef?: string;
+}): void;

package/dist/utils/issue-envelope-guard.js

@@ -0,0 +1,110 @@
+/**
+ * Guard against overwriting an issue body with the issue's own JSON envelope.
+ *
+ * `issues get/read --format json` emits `JSON.stringify(transformIssueData(...))`
+ * — an object shaped `{ id, identifier, url, title, description, branchName,
+ * state, assignee, ... }`. Feeding that straight back into
+ * `issues update <ID> --description "$(... get <ID> --format json)"` (or the
+ * equivalent create) silently replaces the real markdown with the stringified
+ * envelope. Re-running on an already-corrupted issue re-wraps it, producing
+ * envelope-inside-envelope — so the damage deepens and recurs.
+ *
+ * This detector spots the envelope signature so the create/update path can
+ * block it with an actionable error. It is deliberately conservative: a plain
+ * markdown body never parses to an object carrying `identifier` plus an
+ * issue-only sibling key, so real descriptions pass untouched.
+ *
+ * See DEV-6315 (and the two victims it recovered, DEV-6092 / DEV-6042).
+ */
+/** Strong issue-envelope keys that, alongside `identifier`, distinguish the
+ * CLI output from unrelated ticket JSON. `description` is deliberately absent:
+ * `{ identifier, description }` is common enough outside Linear to avoid a
+ * false positive, while real `issues get` output always carries `url` and
+ * normally also `state` / `branchName`. */
+const ENVELOPE_SIBLING_KEYS = ["branchName", "state", "url"];
+/**
+ * Return a match when `text` parses as an issue-envelope JSON object, else null.
+ *
+ * An envelope is an object with a string `identifier` AND at least one of
+ * {@link ENVELOPE_SIBLING_KEYS}. Non-JSON text, JSON that isn't an object, and
+ * JSON objects without the signature all return null.
+ */
+export function detectIssueEnvelope(text) {
+    const trimmed = text.trim();
+    // Cheap prefilter: an envelope is a JSON object literal. Skips the parse for
+    // the overwhelmingly common markdown case.
+    if (!trimmed.startsWith("{")) {
+        return null;
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(trimmed);
+    }
+    catch {
+        return null;
+    }
+    if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed)) {
+        return null;
+    }
+    const obj = parsed;
+    if (typeof obj.identifier !== "string" || obj.identifier.length === 0) {
+        return null;
+    }
+    const hasSibling = ENVELOPE_SIBLING_KEYS.some((key) => key in obj);
+    if (!hasSibling) {
+        return null;
+    }
+    const nested = typeof obj.description === "string" &&
+        detectIssueEnvelope(obj.description) !== null;
+    return {
+        identifier: obj.identifier,
+        ...(typeof obj.id === "string" ? { id: obj.id } : {}),
+        ...(typeof obj.url === "string" ? { url: obj.url } : {}),
+        nested,
+    };
+}
+/** Whether a raw CLI target (identifier, UUID, or Linear URL) names `match`. */
+function isSameIssueTarget(match, targetIssueRef) {
+    if (!targetIssueRef) {
+        return false;
+    }
+    const target = targetIssueRef.toLowerCase();
+    if (target === match.identifier.toLowerCase() ||
+        (match.id !== undefined && target === match.id.toLowerCase()) ||
+        (match.url !== undefined && target === match.url.toLowerCase())) {
+        return true;
+    }
+    // Linear issue URLs carry the canonical identifier as a path segment.
+    return target.split(/[/?#]/).includes(match.identifier.toLowerCase());
+}
+/**
+ * Throw an actionable error when `text` looks like an issue's own JSON
+ * envelope being used as a description body. No-op otherwise, or when the
+ * caller passed the audited `--allow-json-description` override.
+ *
+ * `context` carries the audited override and, when known, the raw update target
+ * (identifier, UUID, or URL) so the message can flag the exact self-overwrite
+ * case without making a network request.
+ */
+export function assertNotIssueEnvelope(text, context = {}) {
+    if (!text || context.allow) {
+        return;
+    }
+    const match = detectIssueEnvelope(text);
+    if (!match) {
+        return;
+    }
+    const isSelf = isSameIssueTarget(match, context.targetIssueRef);
+    const selfNote = isSelf
+        ? ` This is ${match.identifier}'s own envelope — the update would overwrite its body with itself.`
+        : "";
+    const nestedNote = match.nested
+        ? " (It is already a doubly-nested envelope — a sign this body was corrupted by an earlier run.)"
+        : "";
+    throw new Error(`Refusing to write a description that looks like an issue's JSON envelope ` +
+        `(a "${match.identifier}" object with an issue-only field such as branchName/state/url).${selfNote}${nestedNote}\n` +
+        `This is almost always an "issues get --format json" output accidentally piped into --description — ` +
+        `which silently destroys the real body (DEV-6315). ` +
+        `Pass a markdown body via --description-file <path>, or, if you genuinely mean to store this JSON, ` +
+        `re-run with --allow-json-description.`);
+}

package/dist/utils/output.js

@@ -348,6 +348,12 @@ export function outputSuccess(data) {
  * current limit) so the agent doesn't have to derive it.
  */
 export function warnIfTruncated(count, limit) {
+    // limit <= 0 means unlimited (--all / --limit 0, DEV-6312): a fully
+    // paginated result set can't be truncated, so never warn — and never
+    // emit the nonsensical "--limit 0" hint on an empty unlimited fetch.
+    if (limit <= 0) {
+        return;
+    }
     if (count !== limit) {
         return;
     }

package/dist/utils/protected-ranges.d.ts

@@ -37,8 +37,8 @@ export interface ProtectedRange {
 }
 /**
  * Find ranges of `text` that should NOT have identifiers processed.
- * Covered: fenced code, inline backticks, existing markdown links,
- * Slack links, angle-bracket autolinks, bare URLs.
+ * Covered: fenced code, inline backticks, HTML comments, existing markdown
+ * links, Slack links, angle-bracket autolinks, bare URLs.
  *
  * The returned ranges may overlap; callers only test "is this position
  * inside any protected range" so overlap is harmless.

package/dist/utils/protected-ranges.js

@@ -22,6 +22,12 @@ const FENCED_CODE_BLOCK_REGEX = /(?:^|\n)([ \t]*)(?:```|~~~)[^\n]*\n[\s\S]*?\n\1
 // for spans containing backticks; we keep it simple and match
 // single-backtick spans, which covers the common case.
 const INLINE_CODE_REGEX = /`[^`\n]+?`/g;
+// HTML comments carry machine-readable metadata in Markdown documents (for
+// example, el-git's signed review and nit-disposition markers). They are not
+// rendered prose, so identifiers inside them must remain byte-for-byte stable.
+// Treat an unterminated comment as extending to EOF: preserving a malformed
+// marker is safer than inserting Markdown into its payload.
+const HTML_COMMENT_REGEX = /<!--[\s\S]*?(?:-->|$)/g;
 // Existing markdown links: [text](url). Both halves protected so
 // identifiers inside the URL or the text aren't reprocessed.
 const MARKDOWN_LINK_REGEX = /\[([^\]]*)\]\(([^)]*)\)/g;
@@ -116,8 +122,8 @@ function trimBareUrlTrailingPunct(url) {
 }
 /**
  * Find ranges of `text` that should NOT have identifiers processed.
- * Covered: fenced code, inline backticks, existing markdown links,
- * Slack links, angle-bracket autolinks, bare URLs.
+ * Covered: fenced code, inline backticks, HTML comments, existing markdown
+ * links, Slack links, angle-bracket autolinks, bare URLs.
  *
  * The returned ranges may overlap; callers only test "is this position
  * inside any protected range" so overlap is harmless.
@@ -127,6 +133,7 @@ export function findProtectedRanges(text) {
     for (const re of [
         FENCED_CODE_BLOCK_REGEX,
         INLINE_CODE_REGEX,
+        HTML_COMMENT_REGEX,
         MARKDOWN_LINK_REGEX,
         // Slack links must be considered before generic angle-bracket
         // autolinks — the autolink regex doesn't know about the `|label`

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@enrichlayer/el-linear",
-  "version": "1.42.0",
+  "version": "1.43.1",
   "description": "A pragmatic CLI for Linear.app — deterministic team/label/member resolution, structured issue validation, configurable term enforcement, and a GraphQL escape hatch.",
   "main": "dist/main.js",
   "types": "dist/main.d.ts",