@meetquinn/animactl 0.1.34 → 0.1.35-canary.700.1.c3ddd85

package/dist/server/agents/agent-config-ops.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agent-config-ops.d.ts","sourceRoot":"","sources":["../../../server/agents/agent-config-ops.ts"],"names":[],"mappings":"AAIA,OAAO,EAML,KAAK,WAAW,EAChB,KAAK,kBAAkB,EACvB,KAAK,0BAA0B,EAChC,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAQL,KAAK,2BAA2B,EACjC,MAAM,kCAAkC,CAAC;AAI1C,qBAAa,gBAAiB,SAAQ,KAAK;IACzC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;gBAEhB,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM;CAIhD;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAQ3D;AAQD,wBAAgB,0BAA0B,CACxC,KAAK,EAAE,kBAAkB,EACzB,QAAQ,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GAC7C,WAAW,CAuBb;AAED,wBAAgB,6BAA6B,CAC3C,OAAO,EAAE,WAAW,EACpB,MAAM,EAAE,0BAA0B;AAClC,uFAAuF;AACvF,YAAY,CAAC,EAAE,2BAA2B,GACzC,WAAW,CAOb;AA2HD,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,WAAW,GAAG,WAAW,CAOjE;AAqBD,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,GAAG,WAAW,CAMrF;AAED,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAI3F;AAED,wBAAsB,mBAAmB,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAM3E;AAED,wBAAsB,2BAA2B,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAKnF;AAqCD,wBAAsB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAU3E;AAED,wBAAsB,uBAAuB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAK7E;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,WAAW,GAAG,MAAM,CAE/D"}
+{"version":3,"file":"agent-config-ops.d.ts","sourceRoot":"","sources":["../../../server/agents/agent-config-ops.ts"],"names":[],"mappings":"AAIA,OAAO,EAML,KAAK,WAAW,EAChB,KAAK,kBAAkB,EACvB,KAAK,0BAA0B,EAChC,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAQL,KAAK,2BAA2B,EACjC,MAAM,kCAAkC,CAAC;AAI1C,qBAAa,gBAAiB,SAAQ,KAAK;IACzC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;gBAEhB,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM;CAIhD;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAS3D;AAQD,wBAAgB,0BAA0B,CACxC,KAAK,EAAE,kBAAkB,EACzB,QAAQ,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GAC7C,WAAW,CAuBb;AAED,wBAAgB,6BAA6B,CAC3C,OAAO,EAAE,WAAW,EACpB,MAAM,EAAE,0BAA0B;AAClC,uFAAuF;AACvF,YAAY,CAAC,EAAE,2BAA2B,GACzC,WAAW,CAOb;AA2HD,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,WAAW,GAAG,WAAW,CAOjE;AAqBD,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,GAAG,WAAW,CAMrF;AAED,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAI3F;AAED,wBAAsB,mBAAmB,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAM3E;AAED,wBAAsB,2BAA2B,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAKnF;AAqCD,wBAAsB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAU3E;AAED,wBAAsB,uBAAuB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAK7E;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,WAAW,GAAG,MAAM,CAE/D"}

package/dist/server/agents/agent-config-ops.js

@@ -15,7 +15,8 @@ export class AgentConfigError extends Error {
 export function isAgentRunnable(agent) {
     return Boolean(agent.provider
         && ((agent.slack.connected && agent.slack.appToken && agent.slack.botToken)
-            || agent.feishu.connected));
+            || agent.feishu.connected
+            || agent.linear?.connected === true));
 }
 // ---------------------------------------------------------------------------
 // Construction

package/dist/server/agents/agent-feishu.service.d.ts

@@ -26,6 +26,24 @@ export declare class AgentFeishuService {
     private readonly deps;
     constructor(agentId: string, deps?: AgentFeishuServiceDeps);
     connect(input: AgentConnectFeishuRequest): Promise<{
+        slack: {
+            appToken: string;
+            botToken: string;
+            connected: boolean;
+            manifestVersion: number;
+            teamId: string;
+            workspaceIconUrl: string;
+            workspaceName: string;
+            appId?: string | undefined;
+            avatarUrl?: string | undefined;
+            botHandle?: string | undefined;
+            botName?: string | undefined;
+            botProfileSyncedAt?: string | undefined;
+            botUserId?: string | undefined;
+        };
+        homePath: string;
+        teamId: string;
+        linear?: import("../../shared/linear.js").LinearConfig;
         provider: {
             kind: "codex-cli";
             env?: Record<string, string> | undefined;
@@ -101,23 +119,6 @@ export declare class AgentFeishuService {
             ownerOpenId?: string | undefined;
             ownerTenantBrand?: "feishu" | "lark" | undefined;
         };
-        slack: {
-            appToken: string;
-            botToken: string;
-            connected: boolean;
-            manifestVersion: number;
-            teamId: string;
-            workspaceIconUrl: string;
-            workspaceName: string;
-            appId?: string | undefined;
-            avatarUrl?: string | undefined;
-            botHandle?: string | undefined;
-            botName?: string | undefined;
-            botProfileSyncedAt?: string | undefined;
-            botUserId?: string | undefined;
-        };
-        homePath: string;
-        teamId: string;
         owner?: {
             slackUserId: string;
             displayName: string;

package/dist/server/agents/agent-feishu.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agent-feishu.service.d.ts","sourceRoot":"","sources":["../../../server/agents/agent-feishu.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAIL,KAAK,WAAW,EAChB,KAAK,yBAAyB,EAC9B,KAAK,6BAA6B,EAGlC,KAAK,qBAAqB,EAC1B,KAAK,sBAAsB,EAC5B,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAKL,iBAAiB,EACjB,KAAK,aAAa,EAEnB,MAAM,qBAAqB,CAAC;AAO7B,KAAK,iBAAiB,GAAG,OAAO,iBAAiB,CAAC;AAClD,KAAK,gBAAgB,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,QAAQ,CAAC,KAAK,OAAO,CAAC,aAAa,CAAC,CAAC;AAClF,KAAK,kBAAkB,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,QAAQ,CAAC,KAAK,OAAO,CAAC,qBAAqB,EAAE,CAAC,CAAC;AAE9F,MAAM,MAAM,0BAA0B,GAClC,UAAU,GACV,SAAS,GACT,WAAW,GACX,iBAAiB,GACjB,WAAW,GACX,QAAQ,CAAC;AAEb,MAAM,WAAW,2BAA2B;IAC1C,KAAK,CAAC,EAAE,OAAO,CAAC,UAAU,CAAC,kBAAkB,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IAC3D,KAAK,CAAC,EAAE;QACN,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,OAAO,CAAC,EAAE,MAAM,CAAC;KAClB,CAAC;IACF,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,KAAK,EAAE,0BAA0B,CAAC;IAClC,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AASD,UAAU,sBAAsB;IAC9B,kBAAkB,CAAC,EAAE,kBAAkB,CAAC;IACxC,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IACpC,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;CACvC;AAED,qBAAa,kBAAkB;IACjB,OAAO,CAAC,QAAQ,CAAC,OAAO;IAAU,OAAO,CAAC,QAAQ,CAAC,IAAI;gBAAtC,OAAO,EAAE,MAAM,EAAmB,IAAI,GAAE,sBAA2B;IAE1F,OAAO,CAAC,KAAK,EAAE,yBAAyB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IA2BxC,eAAe,IAAI,OAAO,CAAC,WAAW,CAAC;IAKvC,sBAAsB,CAAC,OAAO,EAAE;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,OAAO,CAAA;KAAE,CAAC;IAQhF,cAAc,IAAI,OAAO,CAAC,sBAAsB,CAAC;IA4DjD,oBAAoB,CAAC,KAAK,GAAE,6BAAkC,GAAG,OAAO,CAAC,2BAA2B,CAAC;IA8DrG,kBAAkB,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,2BAA2B,CAAC;IAQtF,OAAO,CAAC,uBAAuB;YAUjB,oBAAoB;IAWlC,OAAO,CAAC,2BAA2B;YAKrB,oBAAoB;YA0CpB,uBAAuB;IAerC,OAAO,CAAC,gBAAgB;YAIV,2BAA2B;CA4B1C;AAED,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,MAAM,GAAG,kBAAkB,CAE9E"}
+{"version":3,"file":"agent-feishu.service.d.ts","sourceRoot":"","sources":["../../../server/agents/agent-feishu.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAIL,KAAK,WAAW,EAChB,KAAK,yBAAyB,EAC9B,KAAK,6BAA6B,EAGlC,KAAK,qBAAqB,EAC1B,KAAK,sBAAsB,EAC5B,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAKL,iBAAiB,EACjB,KAAK,aAAa,EAEnB,MAAM,qBAAqB,CAAC;AAO7B,KAAK,iBAAiB,GAAG,OAAO,iBAAiB,CAAC;AAClD,KAAK,gBAAgB,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,QAAQ,CAAC,KAAK,OAAO,CAAC,aAAa,CAAC,CAAC;AAClF,KAAK,kBAAkB,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,QAAQ,CAAC,KAAK,OAAO,CAAC,qBAAqB,EAAE,CAAC,CAAC;AAE9F,MAAM,MAAM,0BAA0B,GAClC,UAAU,GACV,SAAS,GACT,WAAW,GACX,iBAAiB,GACjB,WAAW,GACX,QAAQ,CAAC;AAEb,MAAM,WAAW,2BAA2B;IAC1C,KAAK,CAAC,EAAE,OAAO,CAAC,UAAU,CAAC,kBAAkB,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IAC3D,KAAK,CAAC,EAAE;QACN,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,OAAO,CAAC,EAAE,MAAM,CAAC;KAClB,CAAC;IACF,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,KAAK,EAAE,0BAA0B,CAAC;IAClC,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AASD,UAAU,sBAAsB;IAC9B,kBAAkB,CAAC,EAAE,kBAAkB,CAAC;IACxC,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IACpC,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;CACvC;AAED,qBAAa,kBAAkB;IACjB,OAAO,CAAC,QAAQ,CAAC,OAAO;IAAU,OAAO,CAAC,QAAQ,CAAC,IAAI;gBAAtC,OAAO,EAAE,MAAM,EAAmB,IAAI,GAAE,sBAA2B;IAE1F,OAAO,CAAC,KAAK,EAAE,yBAAyB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IA2BxC,eAAe,IAAI,OAAO,CAAC,WAAW,CAAC;IAKvC,sBAAsB,CAAC,OAAO,EAAE;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,OAAO,CAAA;KAAE,CAAC;IAQhF,cAAc,IAAI,OAAO,CAAC,sBAAsB,CAAC;IA4DjD,oBAAoB,CAAC,KAAK,GAAE,6BAAkC,GAAG,OAAO,CAAC,2BAA2B,CAAC;IA8DrG,kBAAkB,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,2BAA2B,CAAC;IAQtF,OAAO,CAAC,uBAAuB;YAUjB,oBAAoB;IAWlC,OAAO,CAAC,2BAA2B;YAKrB,oBAAoB;YA0CpB,uBAAuB;IAerC,OAAO,CAAC,gBAAgB;YAIV,2BAA2B;CA4B1C;AAED,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,MAAM,GAAG,kBAAkB,CAE9E"}

package/dist/server/cli/anima.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"anima.d.ts","sourceRoot":"","sources":["../../../server/cli/anima.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAiBpC,wBAAgB,gBAAgB,IAAI,OAAO,CAqB1C"}
+{"version":3,"file":"anima.d.ts","sourceRoot":"","sources":["../../../server/cli/anima.ts"],"names":[],"mappings":";AAEA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAiBpC,wBAAgB,gBAAgB,IAAI,OAAO,CAsB1C"}

package/dist/server/cli/anima.js

@@ -1,4 +1,5 @@
 #!/usr/bin/env node
+import { registerLinearCommands } from '../tools/linear-cli.js';
 import { Command } from 'commander';
 import { registerAskCommands } from '../tools/ask.js';
 import { registerEnvCommands } from '../tools/env-cli.js';
@@ -23,6 +24,7 @@ export function createCliProgram() {
         .configureHelp({ sortSubcommands: true })
         .configureOutput({ writeErr: () => undefined });
     registerMessageCommands(program);
+    registerLinearCommands(program);
     registerMessageHistoryCommands(program);
     registerOrientationCommands(program);
     registerEnvCommands(program);

package/dist/server/linear/client.d.ts

@@ -0,0 +1,19 @@
+import { z } from 'zod';
+export declare class LinearApiError extends Error {
+    readonly revoked: boolean;
+    constructor(message: string, revoked?: boolean);
+}
+declare const Tokens: z.ZodObject<{
+    access_token: z.ZodString;
+    refresh_token: z.ZodString;
+    expires_in: z.ZodNumber;
+}, z.core.$strip>;
+type LinearTokens = z.infer<typeof Tokens>;
+export declare class LinearClient {
+    private readonly fetcher;
+    constructor(fetcher?: typeof fetch);
+    token(form: Record<string, string>): Promise<LinearTokens>;
+    graphql<T>(token: string, query: string, variables: Record<string, unknown>, schema: z.ZodType<T>): Promise<T>;
+}
+export {};
+//# sourceMappingURL=client.d.ts.map

package/dist/server/linear/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../../server/linear/client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,qBAAa,cAAe,SAAQ,KAAK;IACV,QAAQ,CAAC,OAAO;gBAAjC,OAAO,EAAE,MAAM,EAAW,OAAO,UAAQ;CACtD;AACD,QAAA,MAAM,MAAM;;;;iBAAqH,CAAC;AAClI,KAAK,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,MAAM,CAAC,CAAC;AAC3C,qBAAa,YAAY;IACX,OAAO,CAAC,QAAQ,CAAC,OAAO;gBAAP,OAAO,GAAE,OAAO,KAAa;IAEpD,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,YAAY,CAAC;IAa1D,OAAO,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;CAiBrH"}

package/dist/server/linear/client.js

@@ -0,0 +1,61 @@
+import { z } from 'zod';
+export class LinearApiError extends Error {
+    revoked;
+    constructor(message, revoked = false) {
+        super(message);
+        this.revoked = revoked;
+    }
+}
+const Tokens = z.object({ access_token: z.string().min(1), refresh_token: z.string().min(1), expires_in: z.number().positive() });
+export class LinearClient {
+    fetcher;
+    constructor(fetcher = fetch) {
+        this.fetcher = fetcher;
+    }
+    async token(form) {
+        let response;
+        try {
+            response = await this.fetcher('https://api.linear.app/oauth/token', {
+                method: 'POST', headers: { 'content-type': 'application/x-www-form-urlencoded' },
+                body: new URLSearchParams(form), signal: AbortSignal.timeout(10_000), redirect: 'error',
+            });
+        }
+        catch {
+            throw new LinearApiError('Linear token request failed; retry installation or inspect the connection.');
+        }
+        if (!response.ok)
+            throw new LinearApiError('Linear token request was rejected.', response.status === 400 || response.status === 401);
+        try {
+            return Tokens.parse(await response.json());
+        }
+        catch {
+            throw new LinearApiError('Linear returned an invalid token response.');
+        }
+    }
+    async graphql(token, query, variables, schema) {
+        const mutation = query.trimStart().startsWith('mutation');
+        let response;
+        try {
+            response = await this.fetcher('https://api.linear.app/graphql', {
+                method: 'POST', headers: { authorization: `Bearer ${token}`, 'content-type': 'application/json' },
+                body: JSON.stringify({ query, variables }), signal: AbortSignal.timeout(10_000), redirect: 'error',
+            });
+        }
+        catch {
+            throw new LinearApiError(mutation ? 'Linear result is unknown; inspect the session before retrying.' : 'Linear read failed.');
+        }
+        if (response.status === 401)
+            throw new LinearApiError('Linear authorization was revoked.', true);
+        if (!response.ok)
+            throw new LinearApiError('Linear request failed.');
+        try {
+            const body = z.object({ data: z.unknown(), errors: z.array(z.unknown()).optional() }).parse(await response.json());
+            if (body.errors?.length)
+                throw new Error('GraphQL error');
+            return schema.parse(body.data);
+        }
+        catch {
+            throw new LinearApiError('Linear returned an invalid or rejected result.');
+        }
+    }
+}

package/dist/server/linear/identity.service.d.ts

@@ -0,0 +1,22 @@
+import { z } from 'zod';
+import { LinearInstallRequest, type LinearStatus } from '../../shared/linear.js';
+import { LinearStore } from '../storage/schema/linear.store.js';
+import { LinearClient } from './client.js';
+export declare class LinearIdentityService {
+    readonly agentId: string;
+    readonly client: LinearClient;
+    readonly store: LinearStore;
+    constructor(agentId: string, client?: LinearClient, store?: LinearStore);
+    static finishCallback(state: string, code: string, binding: string): Promise<void>;
+    status(): Promise<LinearStatus>;
+    begin(input: LinearInstallRequest, binding: string): Promise<{
+        authorizationUrl: string;
+    }>;
+    private beginLocked;
+    finish(state: string, code: string, binding: string): Promise<void>;
+    remove(): Promise<void>;
+    revoke(id: string): Promise<void>;
+    accessToken(id: string): Promise<string>;
+    graphql<T>(installationId: string, query: string, variables: Record<string, unknown>, schema: z.ZodType<T>): Promise<T>;
+}
+//# sourceMappingURL=identity.service.d.ts.map

package/dist/server/linear/identity.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity.service.d.ts","sourceRoot":"","sources":["../../../server/linear/identity.service.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAAE,oBAAoB,EAAE,KAAK,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAIjF,OAAO,EAAE,WAAW,EAA2B,MAAM,mCAAmC,CAAC;AAEzF,OAAO,EAAkB,YAAY,EAAE,MAAM,aAAa,CAAC;AAM3D,qBAAa,qBAAqB;IAEpB,QAAQ,CAAC,OAAO,EAAE,MAAM;IAAE,QAAQ,CAAC,MAAM;IADrD,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC;gBACP,OAAO,EAAE,MAAM,EAAW,MAAM,eAAqB,EAAE,KAAK,cAA2B;WAI/F,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAUlF,MAAM,IAAI,OAAO,CAAC,YAAY,CAAC;IAqB/B,KAAK,CAAC,KAAK,EAAE,oBAAoB,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,gBAAgB,EAAE,MAAM,CAAA;KAAE,CAAC;YAIlF,WAAW;IAmCnB,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IA4BnE,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC;IAOvB,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAYjC,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAqBxC,OAAO,CAAC,CAAC,EAAE,cAAc,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;CAmB9H"}

package/dist/server/linear/identity.service.js

@@ -0,0 +1,202 @@
+import { createHash, randomBytes, randomUUID } from 'node:crypto';
+import { z } from 'zod';
+import { join } from 'node:path';
+import { withFileLock } from '../storage/lock.js';
+import { LinearInstallRequest } from '../../shared/linear.js';
+import { defaultAgentRegistryService } from '../agents/agent.service.js';
+import { AgentStore } from '../storage/schema/agent.store.js';
+import { serverConfigStore } from '../storage/schema/server.store.js';
+import { LinearStore } from '../storage/schema/linear.store.js';
+import { LinearDiagnosticsStore } from '../storage/schema/linear-diagnostics.store.js';
+import { LinearApiError, LinearClient } from './client.js';
+const Identity = z.object({ viewer: z.object({ id: z.string().uuid(), app: z.literal(true) }), organization: z.object({ id: z.string().uuid() }),
+    applicationInfo: z.object({ clientId: z.string() }),
+});
+export class LinearIdentityService {
+    agentId;
+    client;
+    store;
+    constructor(agentId, client = new LinearClient(), store = new LinearStore(agentId)) {
+        this.agentId = agentId;
+        this.client = client;
+        this.store = store;
+    }
+    static async finishCallback(state, code, binding) {
+        for (const agent of await defaultAgentRegistryService.listAgentConfigs()) {
+            if ((await new LinearStore(agent.id).read()).pending?.id === state) {
+                await new LinearIdentityService(agent.id).finish(state, code, binding);
+                return;
+            }
+        }
+        throw new Error('Linear installation expired or was removed.');
+    }
+    async status() {
+        await defaultAgentRegistryService.serviceFor(this.agentId).getConfig();
+        const file = await this.store.read();
+        const diagnostics = await new LinearDiagnosticsStore(this.agentId, this.store.animaHome).read();
+        const result = {
+            state: file.installation ? (file.installation.revoked ? 'revoked' : 'connected') : file.pending && file.pending.expiresAt > Date.now() ? 'installing' : 'not_configured',
+            signatureFailures: diagnostics.installationId === file.installation?.id ? diagnostics.signatureFailures : 0,
+        };
+        if (file.installation) {
+            result.clientId = file.installation.clientId;
+            result.organizationId = file.installation.organizationId;
+            result.appUserId = file.installation.appUserId;
+        }
+        else if (file.pending)
+            result.clientId = file.pending.clientId;
+        if (file.lastSignedWebhookAt)
+            result.lastSignedWebhookAt = file.lastSignedWebhookAt;
+        if (file.lastError)
+            result.lastError = file.lastError;
+        else if (file.pending && file.pending.expiresAt <= Date.now())
+            result.lastError = 'Installation expired or is being completed. Remove it and prepare again if authorization did not finish.';
+        const listener = (await serverConfigStore.read()).linearWebhook;
+        if (listener)
+            result.listener = listener;
+        return result;
+    }
+    async begin(input, binding) {
+        return withFileLock(join(this.store.animaHome, 'linear-installation'), this.store.animaHome, () => this.beginLocked(input, binding));
+    }
+    async beginLocked(input, binding) {
+        const request = LinearInstallRequest.parse(input);
+        await defaultAgentRegistryService.serviceFor(this.agentId).getConfig();
+        const agents = await defaultAgentRegistryService.listAgentConfigs();
+        for (const agent of agents) {
+            if (agent.id === this.agentId)
+                continue;
+            const file = await new LinearStore(agent.id).read();
+            if (file.installation?.clientId === request.clientId || file.pending?.clientId === request.clientId) {
+                throw new Error('Use a separate Linear app for each agent.');
+            }
+        }
+        const config = await serverConfigStore.read();
+        if (request.listener.port === (config.dashboardPort ?? 4174))
+            throw new Error('Webhook port must differ from the dashboard port.');
+        if (config.linearWebhook && JSON.stringify(config.linearWebhook) !== JSON.stringify(request.listener)
+            && agents.some((agent) => agent.linear?.connected))
+            throw new Error('All installed agents share one webhook listener; keep its existing host and port.');
+        const pending = {
+            id: randomBytes(32).toString('base64url'), clientId: request.clientId,
+            signingSecret: request.signingSecret, callbackUrl: request.callbackUrl,
+            verifier: randomBytes(32).toString('base64url'), binding, expiresAt: Date.now() + 10 * 60_000,
+        };
+        await this.store.update((file) => {
+            if (file.installation && !file.installation.revoked)
+                throw new Error('Remove the installed identity before replacing it.');
+            return { ...file, pending, lastError: undefined };
+        });
+        await serverConfigStore.update((current) => ({ ...current, linearWebhook: request.listener }));
+        const url = new URL('https://linear.app/oauth/authorize');
+        url.search = new URLSearchParams({
+            client_id: pending.clientId, redirect_uri: pending.callbackUrl, response_type: 'code',
+            actor: 'app', scope: 'read,write,app:assignable,app:mentionable',
+            state: pending.id, code_challenge_method: 'S256',
+            code_challenge: createHash('sha256').update(pending.verifier).digest('base64url'),
+        }).toString();
+        return { authorizationUrl: url.toString() };
+    }
+    async finish(state, code, binding) {
+        const file = await this.store.read();
+        const pending = file.pending;
+        if (!pending || pending.id !== state || pending.binding !== binding || pending.expiresAt <= Date.now())
+            throw new Error('Linear installation expired or does not belong to this dashboard session.');
+        // Consume before exchange. Removal/replacement changes this nonce; completion cannot restore it.
+        await this.store.update((current) => {
+            if (current.pending?.id !== state || current.pending.expiresAt <= Date.now())
+                throw new Error('Linear installation changed.');
+            return { ...current, pending: { ...pending, expiresAt: 0 } };
+        });
+        const tokens = await this.client.token({ grant_type: 'authorization_code', client_id: pending.clientId,
+            redirect_uri: pending.callbackUrl, code_verifier: pending.verifier, code });
+        const identity = await this.client.graphql(tokens.access_token, 'query($clientId:String!) { viewer { id app } organization { id } applicationInfo(clientId:$clientId) { clientId } }', { clientId: pending.clientId }, Identity);
+        if (identity.applicationInfo.clientId !== pending.clientId)
+            throw new Error('Linear application identity mismatch.');
+        const installation = {
+            id: randomUUID(), clientId: pending.clientId, signingSecret: pending.signingSecret,
+            organizationId: identity.organization.id, appUserId: identity.viewer.id,
+            accessToken: tokens.access_token, refreshToken: tokens.refresh_token,
+            expiresAt: Date.now() + tokens.expires_in * 1000, revoked: false,
+        };
+        await this.store.update(async (current) => {
+            if (current.pending?.id !== state || current.pending.expiresAt !== 0)
+                throw new Error('Linear installation was removed or replaced.');
+            await new AgentStore(this.agentId).update((agent) => ({ ...agent, linear: {
+                    connected: true, clientId: installation.clientId, organizationId: installation.organizationId, appUserId: installation.appUserId,
+                } }));
+            return { ...current, installation, pending: undefined, receipts: {}, operations: {}, lastError: undefined, lastSignedWebhookAt: undefined };
+        });
+    }
+    async remove() {
+        await this.store.update(async () => {
+            await new AgentStore(this.agentId).update((agent) => ({ ...agent, linear: undefined }));
+            return { receipts: {}, operations: {} };
+        });
+    }
+    async revoke(id) {
+        await this.store.update(async (file) => {
+            if (file.installation?.id !== id)
+                return file;
+            await new AgentStore(this.agentId).update((agent) => {
+                if (!agent.linear)
+                    return agent;
+                return { ...agent, linear: { ...agent.linear, connected: false } };
+            });
+            return { ...file, installation: { ...file.installation, revoked: true, accessToken: '', refreshToken: '', signingSecret: '' },
+                lastError: 'Linear authorization was revoked; remove and reinstall the app.' };
+        });
+    }
+    async accessToken(id) {
+        let token = '';
+        let revoked = false;
+        await this.store.update(async (file) => {
+            const install = file.installation;
+            if (!install || install.id !== id || install.revoked)
+                throw new Error('Linear identity is not authorized.');
+            if (install.expiresAt > Date.now() + 60_000) {
+                token = install.accessToken;
+                return file;
+            }
+            try {
+                const tokens = await this.client.token({ grant_type: 'refresh_token', client_id: install.clientId, refresh_token: install.refreshToken });
+                token = tokens.access_token;
+                return { ...file, installation: { ...install, accessToken: token, refreshToken: tokens.refresh_token, expiresAt: Date.now() + tokens.expires_in * 1000 } };
+            }
+            catch (error) {
+                if (!(error instanceof LinearApiError) || !error.revoked)
+                    throw error;
+                revoked = true;
+                return { ...file, installation: { ...install, revoked: true, accessToken: '', refreshToken: '', signingSecret: '' }, lastError: 'Linear authorization was revoked; reinstall the app.' };
+            }
+        });
+        if (revoked) {
+            await this.revoke(id);
+            throw new Error('Linear authorization was revoked.');
+        }
+        return token;
+    }
+    async graphql(installationId, query, variables, schema) {
+        try {
+            const agent = await new AgentStore(this.agentId).read();
+            if (!agent.enabled || !agent.linear?.connected)
+                throw new Error('Linear agent is disabled or disconnected.');
+            const current = await this.store.read();
+            if (!current.installation || current.installation.id !== installationId || current.installation.revoked
+                || current.installation.clientId !== agent.linear.clientId || current.installation.organizationId !== agent.linear.organizationId
+                || current.installation.appUserId !== agent.linear.appUserId)
+                throw new Error('Linear identity is not authorized.');
+            const token = await this.accessToken(installationId);
+            const latest = await new AgentStore(this.agentId).read();
+            const latestFile = await this.store.read();
+            if (!latest.enabled || !latest.linear?.connected || latestFile.installation?.id !== installationId || latestFile.installation.revoked)
+                throw new Error('Linear identity changed before the request.');
+            return await this.client.graphql(token, query, variables, schema);
+        }
+        catch (error) {
+            if (error instanceof LinearApiError && error.revoked)
+                await this.revoke(installationId);
+            throw error;
+        }
+    }
+}

package/dist/server/linear/session.service.d.ts

@@ -0,0 +1,51 @@
+import type { LinearActivityKind } from '../../shared/linear.js';
+import type { LinearInboxItem, InboxItem } from '../../shared/inbox.js';
+import type { LinearInstallation } from '../storage/schema/linear.store.js';
+import { LinearIdentityService } from './identity.service.js';
+import type { LinearWebhook } from './webhook.js';
+export declare class LinearSessionService {
+    readonly identity: LinearIdentityService;
+    private readonly pendingOwners;
+    constructor(identity: LinearIdentityService);
+    get agentId(): string;
+    receive(event: LinearWebhook, install: LinearInstallation): Promise<void>;
+    assertRunnable(item: LinearInboxItem): Promise<void>;
+    markStarted(item: InboxItem, runItemId: string): Promise<void>;
+    markSettled(item: InboxItem): Promise<void>;
+    stop(sessionId: string): Promise<void>;
+    finishRun(runItemId: string, body: string): Promise<void>;
+    completeRun(runItemId: string): Promise<void>;
+    read(sessionId: string): Promise<{
+        id: string;
+        appUser: {
+            id: string;
+        };
+        activities: {
+            nodes: {
+                id: string;
+                content: unknown;
+                createdAt: string;
+            }[];
+        };
+    }>;
+    respond(sessionId: string, kind: LinearActivityKind, body: string, runItemId?: string, terminal?: 'stopped' | 'failed'): Promise<{
+        activityId: string;
+        bookkeeping: 'recorded' | 'degraded';
+    }>;
+    attach(sessionId: string, url: string, runItemId?: string): Promise<{
+        bookkeeping: 'recorded' | 'degraded';
+    }>;
+    tick(): Promise<void>;
+    private publish;
+    private ownerFor;
+    private acknowledge;
+    private setAcknowledgement;
+    private updateSessionTimes;
+    private saveOperation;
+    private acceptOperation;
+    private confirmActivity;
+    private createActivity;
+    private knownSession;
+    private sessionLock;
+}
+//# sourceMappingURL=session.service.d.ts.map

package/dist/server/linear/session.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.service.d.ts","sourceRoot":"","sources":["../../../server/linear/session.service.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AACjE,OAAO,KAAK,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAIxE,OAAO,KAAK,EAAE,kBAAkB,EAAkC,MAAM,mCAAmC,CAAC;AAC5G,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAC9D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAelD,qBAAa,oBAAoB;IAInB,QAAQ,CAAC,QAAQ,EAAE,qBAAqB;IADpD,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAoE;gBAC7E,QAAQ,EAAE,qBAAqB;IACpD,IAAI,OAAO,IAAI,MAAM,CAAkC;IAEjD,OAAO,CAAC,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC;IAuCzE,cAAc,CAAC,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC;IAOpD,WAAW,CAAC,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAuB9D,WAAW,CAAC,IAAI,EAAE,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC;IAgB3C,IAAI,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAsBtC,SAAS,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAiBzD,WAAW,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAM7C,IAAI,CAAC,SAAS,EAAE,MAAM;;;;;;;;;;;;;IAetB,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,kBAAkB,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,SAAS,GAAG,QAAQ,GAAG,OAAO,CAAC;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,UAAU,GAAG,UAAU,CAAA;KAAE,CAAC;IAmC9L,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,WAAW,EAAE,UAAU,GAAG,UAAU,CAAA;KAAE,CAAC;IA8B7G,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;YAmCb,OAAO;YAIP,QAAQ;YASR,WAAW;YAiBX,kBAAkB;YAYlB,kBAAkB;YASlB,aAAa;YAOb,eAAe;YASf,eAAe;YAMf,cAAc;YAMd,YAAY;IAK1B,OAAO,CAAC,WAAW;CAKpB"}