@phamvuhoang/otto-core 0.3.0 → 0.4.1

package/dist/linear-api.js

@@ -0,0 +1,296 @@
+import { homedir } from "node:os";
+import { join } from "node:path";
+import { readFileSync } from "node:fs";
+// A Linear issue identifier: team key (letter then letters/digits) + "-" +
+// positive number (no leading zero — mirrors parseIssueRef strictness).
+const IDENTIFIER_RE = /^[A-Za-z][A-Za-z0-9]*-[1-9]\d*$/;
+// Issue UUID (RFC-4122 shape; we don't validate the version nibble).
+const UUID_RE = /^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$/;
+// `https://linear.app/<workspace>/issue/<IDENTIFIER>[/<slug>...]` — the
+// identifier is the path segment after `/issue/`. Anchored to the linear.app
+// host so an arbitrary URL merely *containing* `/issue/ENG-1/` (e.g.
+// `https://evil.example/issue/ENG-1/`) does not silently resolve to a ref.
+const URL_IDENTIFIER_RE = /^https?:\/\/linear\.app\/[^/]+\/issue\/([A-Za-z][A-Za-z0-9]*-[1-9]\d*)(?:[/?#]|$)/;
+/**
+ * Normalize a user-supplied Linear issue reference to a {@link LinearRef}.
+ * Accepts a Linear identifier (`ENG-123`), an issue UUID, or a Linear issue
+ * URL (`https://linear.app/acme/issue/ENG-123/slug`). Team keys are uppercased
+ * to Linear's canonical form; UUIDs are lowercased. Throws on anything else.
+ *
+ * SECURITY: like {@link parseIssueRef} in cli-help.ts, the normalized value is
+ * the only part of a ref that may reach a shell (via a static template command
+ * reading an env var). The identifier/UUID regexes admit only `[A-Za-z0-9-]`,
+ * so a value like `$(rm -rf ~)` can never survive parsing.
+ */
+export function parseLinearRef(raw) {
+    const s = raw.trim();
+    const urlMatch = s.match(URL_IDENTIFIER_RE);
+    if (urlMatch) {
+        return { kind: "identifier", identifier: urlMatch[1].toUpperCase() };
+    }
+    if (UUID_RE.test(s)) {
+        return { kind: "uuid", uuid: s.toLowerCase() };
+    }
+    if (IDENTIFIER_RE.test(s)) {
+        return { kind: "identifier", identifier: s.toUpperCase() };
+    }
+    throw new Error(`--issue must be a Linear identifier (ENG-123), an issue UUID, or a Linear issue URL, got: ${JSON.stringify(raw)}`);
+}
+/**
+ * Parse + canonicalize a `--issue` value to the single shell-safe string Otto
+ * exports as `OTTO_ISSUE` for the Linear single-issue template. Identifiers are
+ * uppercased, UUIDs lowercased; both admit only `[A-Za-z0-9-]`, so the result is
+ * safe to interpolate into the static `otto-linear view "$OTTO_ISSUE"` command.
+ * Throws (via {@link parseLinearRef}) on anything malformed.
+ */
+export function parseLinearIssueArg(raw) {
+    const ref = parseLinearRef(raw);
+    return ref.kind === "uuid" ? ref.uuid : ref.identifier;
+}
+/** Canonical location of the stored Linear API key (outside any repo). */
+export function linearConfigPath(home) {
+    return join(home, ".config", "otto", "linear.json");
+}
+const defaultAuthDeps = {
+    env: process.env,
+    readFile: (p) => {
+        try {
+            return readFileSync(p, "utf8");
+        }
+        catch {
+            return null;
+        }
+    },
+    home: homedir(),
+};
+/**
+ * Resolve a Linear API key with precedence `OTTO_LINEAR_API_KEY` →
+ * `LINEAR_API_KEY` → `~/.config/otto/linear.json` (`{ "type": "apiKey",
+ * "token": "..." }`). Returns the token and its source, or null when no source
+ * yields a usable (non-empty) token. The config shape is kept extensible for a
+ * future OAuth `type`.
+ */
+export function resolveLinearAuth(deps = defaultAuthDeps) {
+    const { env, readFile, home } = deps;
+    for (const name of ["OTTO_LINEAR_API_KEY", "LINEAR_API_KEY"]) {
+        const token = env[name]?.trim();
+        if (token)
+            return { token, source: name };
+    }
+    const path = linearConfigPath(home);
+    const raw = readFile(path);
+    if (raw != null) {
+        try {
+            const token = JSON.parse(raw).token;
+            if (typeof token === "string" && token.trim()) {
+                return { token: token.trim(), source: path };
+            }
+        }
+        catch {
+            // malformed config → no credential from this source
+        }
+    }
+    return null;
+}
+// ---------------------------------------------------------------------------
+// GraphQL client
+// ---------------------------------------------------------------------------
+/** Linear's GraphQL endpoint. */
+const LINEAR_ENDPOINT = "https://api.linear.app/graphql";
+/** A typed Linear API failure carrying a {@link LinearErrorKind}. */
+export class LinearApiError extends Error {
+    kind;
+    status;
+    constructor(message, kind, status) {
+        super(message);
+        this.name = "LinearApiError";
+        this.kind = kind;
+        this.status = status;
+    }
+}
+function isAuthError(status, errors) {
+    if (status === 401 || status === 403)
+        return true;
+    return errors.some((e) => /authenticat/i.test(e?.message ?? "") ||
+        /^AUTHENTICATION/i.test(e?.extensions?.code ?? ""));
+}
+const ISSUE_FIELDS = `id identifier title url description state { name type }`;
+const COMMENT_FIELDS = `comments { nodes { body createdAt user { name } } }`;
+function mapDetail(raw) {
+    return {
+        id: raw.id,
+        identifier: raw.identifier,
+        title: raw.title,
+        url: raw.url,
+        description: raw.description ?? "",
+        state: raw.state.name,
+        comments: (raw.comments?.nodes ?? []).map((c) => ({
+            author: c.user?.name ?? "unknown",
+            body: c.body,
+            createdAt: c.createdAt,
+        })),
+    };
+}
+/**
+ * Build a Linear GraphQL client bound to one API key. Each method issues a
+ * single GraphQL request over injectable `fetch`, authenticating with the
+ * personal-API-key scheme (`Authorization: <key>`, no `Bearer`). Failures throw
+ * a {@link LinearApiError} classified as `auth`/`request`/`network`.
+ *
+ * Ref→id resolution beyond {@link viewIssue} (e.g. resolving a done-state id)
+ * is intentionally left to higher layers; these ops stay thin and 1:1 with the
+ * underlying GraphQL operations so they are trivial to mock and reason about.
+ */
+export function createLinearClient(deps) {
+    const fetchImpl = deps.fetch ?? fetch;
+    const endpoint = deps.endpoint ?? LINEAR_ENDPOINT;
+    const token = deps.token;
+    async function request(query, variables) {
+        let res;
+        try {
+            res = await fetchImpl(endpoint, {
+                method: "POST",
+                headers: {
+                    "content-type": "application/json",
+                    authorization: token,
+                },
+                body: JSON.stringify({ query, variables }),
+            });
+        }
+        catch (e) {
+            throw new LinearApiError(`Linear request failed: ${e.message}`, "network");
+        }
+        let json;
+        try {
+            json = (await res.json());
+        }
+        catch {
+            json = undefined;
+        }
+        const errors = json?.errors ?? [];
+        if (!res.ok || errors.length > 0) {
+            const kind = isAuthError(res.status, errors) ? "auth" : "request";
+            const msg = errors[0]?.message ?? `HTTP ${res.status}`;
+            throw new LinearApiError(`Linear GraphQL error: ${msg}`, kind, res.status);
+        }
+        return json.data;
+    }
+    return {
+        async whoami() {
+            const data = await request(`query { viewer { id name email } }`, {});
+            return data.viewer;
+        },
+        async listIssues({ label, team, limit }) {
+            const filter = {
+                labels: { some: { name: { eq: label } } },
+                state: { type: { nin: ["completed", "canceled"] } },
+            };
+            if (team)
+                filter.team = { key: { eq: team } };
+            const data = await request(`query ListIssues($filter: IssueFilter!, $first: Int!) {
+           issues(filter: $filter, first: $first) {
+             nodes { id identifier title url state { name type } }
+           }
+         }`, { filter, first: limit });
+            return data.issues.nodes.map((n) => ({
+                id: n.id,
+                identifier: n.identifier,
+                title: n.title,
+                url: n.url,
+                state: n.state.name,
+            }));
+        },
+        async viewIssue(ref) {
+            if (ref.kind === "uuid") {
+                const data = await request(`query ViewIssue($id: String!) {
+             issue(id: $id) { ${ISSUE_FIELDS} ${COMMENT_FIELDS} }
+           }`, { id: ref.uuid });
+                if (!data.issue) {
+                    throw new LinearApiError(`Linear issue not found: ${ref.uuid}`, "request");
+                }
+                return mapDetail(data.issue);
+            }
+            const [, team, num] = ref.identifier.match(/^([A-Za-z][A-Za-z0-9]*)-([1-9]\d*)$/);
+            const data = await request(`query FindIssue($team: String!, $number: Float!) {
+           issues(filter: { team: { key: { eq: $team } }, number: { eq: $number } }, first: 1) {
+             nodes { ${ISSUE_FIELDS} ${COMMENT_FIELDS} }
+           }
+         }`, { team, number: Number(num) });
+            const node = data.issues.nodes[0];
+            if (!node) {
+                throw new LinearApiError(`Linear issue not found: ${ref.identifier}`, "request");
+            }
+            return mapDetail(node);
+        },
+        async addComment(issueId, body) {
+            const data = await request(`mutation AddComment($issueId: String!, $body: String!) {
+           commentCreate(input: { issueId: $issueId, body: $body }) {
+             success comment { id }
+           }
+         }`, { issueId, body });
+            if (!data.commentCreate.success || !data.commentCreate.comment) {
+                throw new LinearApiError(`Linear refused to add comment on ${issueId} (success=${data.commentCreate.success})`, "request");
+            }
+            return { id: data.commentCreate.comment.id };
+        },
+        async listWorkflowStates(team) {
+            const data = await request(`query WorkflowStates($team: String!) {
+           workflowStates(filter: { team: { key: { eq: $team } } }, first: 100) {
+             nodes { id name type position }
+           }
+         }`, { team });
+            return data.workflowStates.nodes.map((n) => ({
+                id: n.id,
+                name: n.name,
+                type: n.type,
+                position: n.position,
+            }));
+        },
+        async moveToDone(issueId, stateId) {
+            const data = await request(`mutation MoveToDone($id: String!, $stateId: String!) {
+           issueUpdate(id: $id, input: { stateId: $stateId }) {
+             success issue { id state { name type } }
+           }
+         }`, { id: issueId, stateId });
+            if (!data.issueUpdate.success || !data.issueUpdate.issue) {
+                throw new LinearApiError(`Linear refused to move ${issueId} (success=${data.issueUpdate.success})`, "request");
+            }
+            return { id: data.issueUpdate.issue.id, state: data.issueUpdate.issue.state.name };
+        },
+    };
+}
+/**
+ * Resolve which workflow state a completed issue should move to, given a team's
+ * states and an optional preferred state name (`OTTO_LINEAR_DONE_STATE`):
+ *
+ *  1. If `preferredName` is set, the state whose name matches it
+ *     (case-insensitively) wins; if none matches the result is `ambiguous` — we
+ *     never silently pick a different state than the user named.
+ *  2. Otherwise the first `type: "completed"` state by ascending `position`.
+ *  3. If neither yields a state the result is `ambiguous`; callers should
+ *     comment on the issue and leave a human to move it rather than guess.
+ */
+export function resolveDoneState(states, preferredName) {
+    const wanted = preferredName?.trim();
+    if (wanted) {
+        const match = states.find((s) => s.name.toLowerCase() === wanted.toLowerCase());
+        if (match)
+            return { kind: "resolved", state: match };
+        const names = states.map((s) => s.name).join(", ") || "none";
+        return {
+            kind: "ambiguous",
+            reason: `no workflow state named "${wanted}" (have: ${names})`,
+        };
+    }
+    const completed = states
+        .filter((s) => s.type === "completed")
+        .sort((a, b) => a.position - b.position);
+    if (completed.length === 0) {
+        return {
+            kind: "ambiguous",
+            reason: 'no workflow state of type "completed"',
+        };
+    }
+    return { kind: "resolved", state: completed[0] };
+}
+//# sourceMappingURL=linear-api.js.map

package/dist/linear-api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"linear-api.js","sourceRoot":"","sources":["../src/linear-api.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAUvC,2EAA2E;AAC3E,wEAAwE;AACxE,MAAM,aAAa,GAAG,iCAAiC,CAAC;AACxD,qEAAqE;AACrE,MAAM,OAAO,GACX,+EAA+E,CAAC;AAClF,wEAAwE;AACxE,6EAA6E;AAC7E,qEAAqE;AACrE,2EAA2E;AAC3E,MAAM,iBAAiB,GACrB,mFAAmF,CAAC;AAEtF;;;;;;;;;;GAUG;AACH,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IAErB,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;IAC5C,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;IACvE,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QACpB,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;IACjD,CAAC;IACD,IAAI,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1B,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,UAAU,EAAE,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;IAC7D,CAAC;IACD,MAAM,IAAI,KAAK,CACb,6FAA6F,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CACnH,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAW;IAC7C,MAAM,GAAG,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;IAChC,OAAO,GAAG,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC;AACzD,CAAC;AAiBD,0EAA0E;AAC1E,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,OAAO,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,aAAa,CAAC,CAAC;AACtD,CAAC;AAED,MAAM,eAAe,GAAmB;IACtC,GAAG,EAAE,OAAO,CAAC,GAAG;IAChB,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE;QACd,IAAI,CAAC;YACH,OAAO,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QACjC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IACD,IAAI,EAAE,OAAO,EAAE;CAChB,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAC/B,OAAuB,eAAe;IAEtC,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC;IAErC,KAAK,MAAM,IAAI,IAAI,CAAC,qBAAqB,EAAE,gBAAgB,CAAU,EAAE,CAAC;QACtE,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC;QAChC,IAAI,KAAK;YAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAC5C,CAAC;IAED,MAAM,IAAI,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACpC,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC3B,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAChB,IAAI,CAAC;YACH,MAAM,KAAK,GAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAyB,CAAC,KAAK,CAAC;YAC7D,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;gBAC9C,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;YAC/C,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,oDAAoD;QACtD,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,8EAA8E;AAC9E,iBAAiB;AACjB,8EAA8E;AAE9E,iCAAiC;AACjC,MAAM,eAAe,GAAG,gCAAgC,CAAC;AASzD,qEAAqE;AACrE,MAAM,OAAO,cAAe,SAAQ,KAAK;IAC9B,IAAI,CAAkB;IACtB,MAAM,CAAU;IACzB,YAAY,OAAe,EAAE,IAAqB,EAAE,MAAe;QACjE,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;QAC7B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;CACF;AA6DD,SAAS,WAAW,CAAC,MAAc,EAAE,MAAsB;IACzD,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC;IAClD,OAAO,MAAM,CAAC,IAAI,CAChB,CAAC,CAAC,EAAE,EAAE,CACJ,cAAc,CAAC,IAAI,CAAC,CAAC,EAAE,OAAO,IAAI,EAAE,CAAC;QACrC,kBAAkB,CAAC,IAAI,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,CACrD,CAAC;AACJ,CAAC;AAED,MAAM,YAAY,GAAG,yDAAyD,CAAC;AAC/E,MAAM,cAAc,GAAG,qDAAqD,CAAC;AAa7E,SAAS,SAAS,CAAC,GAAa;IAC9B,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,GAAG,EAAE,GAAG,CAAC,GAAG;QACZ,WAAW,EAAE,GAAG,CAAC,WAAW,IAAI,EAAE;QAClC,KAAK,EAAE,GAAG,CAAC,KAAK,CAAC,IAAI;QACrB,QAAQ,EAAE,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAChD,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,IAAI,SAAS;YACjC,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,SAAS,EAAE,CAAC,CAAC,SAAS;SACvB,CAAC,CAAC;KACJ,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAsB;IACvD,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC;IACtC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,eAAe,CAAC;IAClD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;IAEzB,KAAK,UAAU,OAAO,CACpB,KAAa,EACb,SAAkC;QAElC,IAAI,GAAa,CAAC;QAClB,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,SAAS,CAAC,QAAQ,EAAE;gBAC9B,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,cAAc,EAAE,kBAAkB;oBAClC,aAAa,EAAE,KAAK;iBACrB;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;aAC3C,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,IAAI,cAAc,CACtB,0BAA2B,CAAW,CAAC,OAAO,EAAE,EAChD,SAAS,CACV,CAAC;QACJ,CAAC;QAED,IAAI,IAAuD,CAAC;QAC5D,IAAI,CAAC;YACH,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAgB,CAAC;QAC3C,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,GAAG,SAAS,CAAC;QACnB,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,EAAE,MAAM,IAAI,EAAE,CAAC;QAClC,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACjC,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,IAAI,QAAQ,GAAG,CAAC,MAAM,EAAE,CAAC;YACvD,MAAM,IAAI,cAAc,CAAC,yBAAyB,GAAG,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;QAC7E,CAAC;QACD,OAAO,IAAK,CAAC,IAAS,CAAC;IACzB,CAAC;IAED,OAAO;QACL,KAAK,CAAC,MAAM;YACV,MAAM,IAAI,GAAG,MAAM,OAAO,CACxB,oCAAoC,EACpC,EAAE,CACH,CAAC;YACF,OAAO,IAAI,CAAC,MAAM,CAAC;QACrB,CAAC;QAED,KAAK,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE;YACrC,MAAM,MAAM,GAA4B;gBACtC,MAAM,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;gBACzC,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,CAAC,WAAW,EAAE,UAAU,CAAC,EAAE,EAAE;aACpD,CAAC;YACF,IAAI,IAAI;gBAAE,MAAM,CAAC,IAAI,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC;YAC9C,MAAM,IAAI,GAAG,MAAM,OAAO,CAGxB;;;;WAIG,EACH,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,CACzB,CAAC;YACF,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACnC,EAAE,EAAE,CAAC,CAAC,EAAE;gBACR,UAAU,EAAE,CAAC,CAAC,UAAU;gBACxB,KAAK,EAAE,CAAC,CAAC,KAAK;gBACd,GAAG,EAAE,CAAC,CAAC,GAAG;gBACV,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI;aACpB,CAAC,CAAC,CAAC;QACN,CAAC;QAED,KAAK,CAAC,SAAS,CAAC,GAAG;YACjB,IAAI,GAAG,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;gBACxB,MAAM,IAAI,GAAG,MAAM,OAAO,CACxB;gCACsB,YAAY,IAAI,cAAc;aACjD,EACH,EAAE,EAAE,EAAE,GAAG,CAAC,IAAI,EAAE,CACjB,CAAC;gBACF,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;oBAChB,MAAM,IAAI,cAAc,CACtB,2BAA2B,GAAG,CAAC,IAAI,EAAE,EACrC,SAAS,CACV,CAAC;gBACJ,CAAC;gBACD,OAAO,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC/B,CAAC;YACD,MAAM,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,GAAG,GAAG,CAAC,UAAU,CAAC,KAAK,CACxC,qCAAqC,CACrC,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,OAAO,CACxB;;uBAEe,YAAY,IAAI,cAAc;;WAE1C,EACH,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAC9B,CAAC;YACF,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAClC,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,MAAM,IAAI,cAAc,CACtB,2BAA2B,GAAG,CAAC,UAAU,EAAE,EAC3C,SAAS,CACV,CAAC;YACJ,CAAC;YACD,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC;QACzB,CAAC;QAED,KAAK,CAAC,UAAU,CAAC,OAAO,EAAE,IAAI;YAC5B,MAAM,IAAI,GAAG,MAAM,OAAO,CAGxB;;;;WAIG,EACH,EAAE,OAAO,EAAE,IAAI,EAAE,CAClB,CAAC;YACF,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,CAAC;gBAC/D,MAAM,IAAI,cAAc,CACtB,oCAAoC,OAAO,aAAa,IAAI,CAAC,aAAa,CAAC,OAAO,GAAG,EACrF,SAAS,CACV,CAAC;YACJ,CAAC;YACD,OAAO,EAAE,EAAE,EAAE,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;QAC/C,CAAC;QAED,KAAK,CAAC,kBAAkB,CAAC,IAAI;YAC3B,MAAM,IAAI,GAAG,MAAM,OAAO,CAGxB;;;;WAIG,EACH,EAAE,IAAI,EAAE,CACT,CAAC;YACF,OAAO,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC3C,EAAE,EAAE,CAAC,CAAC,EAAE;gBACR,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,QAAQ,EAAE,CAAC,CAAC,QAAQ;aACrB,CAAC,CAAC,CAAC;QACN,CAAC;QAED,KAAK,CAAC,UAAU,CAAC,OAAO,EAAE,OAAO;YAC/B,MAAM,IAAI,GAAG,MAAM,OAAO,CAGxB;;;;WAIG,EACH,EAAE,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,CACzB,CAAC;YACF,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC;gBACzD,MAAM,IAAI,cAAc,CACtB,0BAA0B,OAAO,aAAa,IAAI,CAAC,WAAW,CAAC,OAAO,GAAG,EACzE,SAAS,CACV,CAAC;YACJ,CAAC;YACD,OAAO,EAAE,EAAE,EAAE,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QACrF,CAAC;KACF,CAAC;AACJ,CAAC;AAOD;;;;;;;;;;GAUG;AACH,MAAM,UAAU,gBAAgB,CAC9B,MAA6B,EAC7B,aAAsB;IAEtB,MAAM,MAAM,GAAG,aAAa,EAAE,IAAI,EAAE,CAAC;IACrC,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CACvB,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,WAAW,EAAE,CACrD,CAAC;QACF,IAAI,KAAK;YAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;QACrD,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC;QAC7D,OAAO;YACL,IAAI,EAAE,WAAW;YACjB,MAAM,EAAE,4BAA4B,MAAM,YAAY,KAAK,GAAG;SAC/D,CAAC;IACJ,CAAC;IACD,MAAM,SAAS,GAAG,MAAM;SACrB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC;SACrC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC;IAC3C,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,OAAO;YACL,IAAI,EAAE,WAAW;YACjB,MAAM,EAAE,uCAAuC;SAChD,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;AACnD,CAAC"}

package/dist/linear-auth.d.ts

@@ -0,0 +1,44 @@
+import { type LinearViewer } from "./linear-api.js";
+/**
+ * Injectable host surface for {@link runLinearAuth} so the credential tool stays
+ * pure-ish and unit-testable without touching the real home dir, stdin, or the
+ * network. {@link defaultLinearAuthDeps} wires up the host.
+ */
+export type LinearAuthCliDeps = {
+    env: NodeJS.ProcessEnv;
+    /** Home directory holding the credential file. */
+    home: string;
+    /** Read a file's contents, or null if it is absent/unreadable. */
+    readFile: (path: string) => string | null;
+    /** Write `contents` to `path`, creating parent dirs, with the given mode. */
+    writeFile: (path: string, contents: string, mode: number) => void;
+    /** Delete `path`; return true if a file was actually removed. */
+    removeFile: (path: string) => boolean;
+    /** Read the API key the user pastes on stdin (login). */
+    readStdin: () => Promise<string>;
+    /** Whether stdin is an interactive TTY (gates the paste/Ctrl-D hint). */
+    stdinIsTTY: boolean;
+    /** Print one line to stdout. */
+    out: (msg: string) => void;
+    /** Print one line to stderr. */
+    err: (msg: string) => void;
+    /** Live credential check for `status --verify-live`; injectable for tests. */
+    verify: (token: string) => Promise<LinearViewer>;
+};
+/** Host-wired defaults for {@link runLinearAuth}. */
+export declare const defaultLinearAuthDeps: LinearAuthCliDeps;
+/**
+ * Drive the `otto-linear-auth` credential tool. Resolves to the process exit
+ * code so the thin bin wrapper can `process.exit(code)`.
+ *
+ * - `login`  — read a Linear personal API key from stdin and store it at
+ *   `~/.config/otto/linear.json` (`0600`, outside any repo). The secret is
+ *   never echoed back.
+ * - `status` — report whether a credential resolves (and from where, via
+ *   {@link resolveLinearAuth}) without printing the token; `--verify-live`
+ *   additionally calls the Linear API to confirm the key works.
+ * - `logout` — delete the stored credential file; warns if an env-var key
+ *   still takes precedence.
+ */
+export declare function runLinearAuth(argv: string[], deps?: LinearAuthCliDeps): Promise<number>;
+//# sourceMappingURL=linear-auth.d.ts.map

package/dist/linear-auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"linear-auth.d.ts","sourceRoot":"","sources":["../src/linear-auth.ts"],"names":[],"mappings":"AAUA,OAAO,EAKL,KAAK,YAAY,EAClB,MAAM,iBAAiB,CAAC;AAEzB;;;;GAIG;AACH,MAAM,MAAM,iBAAiB,GAAG;IAC9B,GAAG,EAAE,MAAM,CAAC,UAAU,CAAC;IACvB,kDAAkD;IAClD,IAAI,EAAE,MAAM,CAAC;IACb,kEAAkE;IAClE,QAAQ,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;IAC1C,6EAA6E;IAC7E,SAAS,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAClE,iEAAiE;IACjE,UAAU,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC;IACtC,yDAAyD;IACzD,SAAS,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;IACjC,yEAAyE;IACzE,UAAU,EAAE,OAAO,CAAC;IACpB,gCAAgC;IAChC,GAAG,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;IAC3B,gCAAgC;IAChC,GAAG,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;IAC3B,8EAA8E;IAC9E,MAAM,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,YAAY,CAAC,CAAC;CAClD,CAAC;AAUF,qDAAqD;AACrD,eAAO,MAAM,qBAAqB,EAAE,iBA2CnC,CAAC;AAKF;;;;;;;;;;;;GAYG;AACH,wBAAsB,aAAa,CACjC,IAAI,EAAE,MAAM,EAAE,EACd,IAAI,GAAE,iBAAyC,GAC9C,OAAO,CAAC,MAAM,CAAC,CA+EjB"}

package/dist/linear-auth.js

@@ -0,0 +1,145 @@
+import { homedir } from "node:os";
+import { dirname } from "node:path";
+import { mkdirSync, readFileSync, renameSync, unlinkSync, writeFileSync, } from "node:fs";
+import { createLinearClient, linearConfigPath, resolveLinearAuth, LinearApiError, } from "./linear-api.js";
+async function readAllStdin() {
+    const chunks = [];
+    for await (const chunk of process.stdin) {
+        chunks.push(Buffer.from(chunk));
+    }
+    return Buffer.concat(chunks).toString("utf8");
+}
+/** Host-wired defaults for {@link runLinearAuth}. */
+export const defaultLinearAuthDeps = {
+    env: process.env,
+    home: homedir(),
+    readFile: (p) => {
+        try {
+            return readFileSync(p, "utf8");
+        }
+        catch {
+            return null;
+        }
+    },
+    writeFile: (p, contents, mode) => {
+        mkdirSync(dirname(p), { recursive: true, mode: 0o700 });
+        // Write to a fresh temp sibling (so `mode` applies on creation) and rename
+        // it into place. Writing the secret straight to `p` would (a) leave a
+        // pre-existing, possibly looser-permissioned file briefly world-readable
+        // before a chmod could tighten it, and (b) risk truncating a valid prior
+        // token if the process crashed mid-write. rename() is atomic on the same fs.
+        const tmp = `${p}.${process.pid}.tmp`;
+        writeFileSync(tmp, contents, { mode });
+        try {
+            renameSync(tmp, p);
+        }
+        catch (e) {
+            try {
+                unlinkSync(tmp);
+            }
+            catch {
+                // best-effort cleanup of the temp file
+            }
+            throw e;
+        }
+    },
+    removeFile: (p) => {
+        try {
+            unlinkSync(p);
+            return true;
+        }
+        catch {
+            return false;
+        }
+    },
+    readStdin: readAllStdin,
+    stdinIsTTY: Boolean(process.stdin.isTTY),
+    out: (m) => process.stdout.write(`${m}\n`),
+    err: (m) => process.stderr.write(`${m}\n`),
+    verify: (token) => createLinearClient({ token }).whoami(),
+};
+const USAGE = "Usage: otto-linear-auth <login|status [--verify-live]|logout>";
+/**
+ * Drive the `otto-linear-auth` credential tool. Resolves to the process exit
+ * code so the thin bin wrapper can `process.exit(code)`.
+ *
+ * - `login`  — read a Linear personal API key from stdin and store it at
+ *   `~/.config/otto/linear.json` (`0600`, outside any repo). The secret is
+ *   never echoed back.
+ * - `status` — report whether a credential resolves (and from where, via
+ *   {@link resolveLinearAuth}) without printing the token; `--verify-live`
+ *   additionally calls the Linear API to confirm the key works.
+ * - `logout` — delete the stored credential file; warns if an env-var key
+ *   still takes precedence.
+ */
+export async function runLinearAuth(argv, deps = defaultLinearAuthDeps) {
+    const [sub, ...rest] = argv;
+    const path = linearConfigPath(deps.home);
+    switch (sub) {
+        case "login": {
+            // A key on the command line would silently hang (login reads stdin, not
+            // argv) and leak into shell history / `ps` — reject it with guidance.
+            if (rest.length > 0) {
+                deps.err("login reads the API key from stdin, not an argument " +
+                    "(a key on the command line leaks into shell history and `ps`).\n" +
+                    "Run `otto-linear-auth login` and paste your key, then press Ctrl-D — " +
+                    "or pipe it: printf '%s' <key> | otto-linear-auth login");
+                return 2;
+            }
+            // On an interactive terminal stdin blocks until EOF with no output, which
+            // looks frozen; tell the user to paste then send EOF (Ctrl-D).
+            if (deps.stdinIsTTY) {
+                deps.err("Paste your Linear personal API key, then press Ctrl-D:");
+            }
+            const token = (await deps.readStdin()).trim();
+            if (!token) {
+                deps.err("No API key provided. Paste your Linear personal API key.");
+                return 1;
+            }
+            const body = JSON.stringify({ type: "apiKey", token }, null, 2);
+            deps.writeFile(path, `${body}\n`, 0o600);
+            deps.out(`Stored Linear API key at ${path} (0600).`);
+            return 0;
+        }
+        case "status": {
+            const auth = resolveLinearAuth({
+                env: deps.env,
+                readFile: deps.readFile,
+                home: deps.home,
+            });
+            if (!auth) {
+                deps.out("Linear auth: not found — run `otto-linear-auth login`.");
+                return 1;
+            }
+            deps.out(`Linear auth: found (source: ${auth.source}).`);
+            if (rest.includes("--verify-live")) {
+                try {
+                    const me = await deps.verify(auth.token);
+                    deps.out(`Verified live as ${me.name} <${me.email}>.`);
+                }
+                catch (e) {
+                    const kind = e instanceof LinearApiError ? ` (${e.kind})` : "";
+                    deps.err(`Live verification failed${kind}: ${e.message}`);
+                    return 1;
+                }
+            }
+            return 0;
+        }
+        case "logout": {
+            const removed = deps.removeFile(path);
+            deps.out(removed
+                ? `Removed stored Linear credential at ${path}.`
+                : `No stored credential at ${path}; nothing to remove.`);
+            for (const name of ["OTTO_LINEAR_API_KEY", "LINEAR_API_KEY"]) {
+                if (deps.env[name]?.trim()) {
+                    deps.out(`Note: ${name} is still set and takes precedence over the file.`);
+                }
+            }
+            return 0;
+        }
+        default:
+            deps.err(USAGE);
+            return 2;
+    }
+}
+//# sourceMappingURL=linear-auth.js.map

package/dist/linear-auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"linear-auth.js","sourceRoot":"","sources":["../src/linear-auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EACL,SAAS,EACT,YAAY,EACZ,UAAU,EACV,UAAU,EACV,aAAa,GACd,MAAM,SAAS,CAAC;AAEjB,OAAO,EACL,kBAAkB,EAClB,gBAAgB,EAChB,iBAAiB,EACjB,cAAc,GAEf,MAAM,iBAAiB,CAAC;AA6BzB,KAAK,UAAU,YAAY;IACzB,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QACxC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IAClC,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AAChD,CAAC;AAED,qDAAqD;AACrD,MAAM,CAAC,MAAM,qBAAqB,GAAsB;IACtD,GAAG,EAAE,OAAO,CAAC,GAAG;IAChB,IAAI,EAAE,OAAO,EAAE;IACf,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE;QACd,IAAI,CAAC;YACH,OAAO,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QACjC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IACD,SAAS,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE;QAC/B,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACxD,2EAA2E;QAC3E,sEAAsE;QACtE,yEAAyE;QACzE,yEAAyE;QACzE,6EAA6E;QAC7E,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,OAAO,CAAC,GAAG,MAAM,CAAC;QACtC,aAAa,CAAC,GAAG,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QACvC,IAAI,CAAC;YACH,UAAU,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACrB,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,CAAC;gBACH,UAAU,CAAC,GAAG,CAAC,CAAC;YAClB,CAAC;YAAC,MAAM,CAAC;gBACP,uCAAuC;YACzC,CAAC;YACD,MAAM,CAAC,CAAC;QACV,CAAC;IACH,CAAC;IACD,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE;QAChB,IAAI,CAAC;YACH,UAAU,CAAC,CAAC,CAAC,CAAC;YACd,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IACD,SAAS,EAAE,YAAY;IACvB,UAAU,EAAE,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC;IACxC,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC;IAC1C,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC;IAC1C,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,kBAAkB,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;CAC1D,CAAC;AAEF,MAAM,KAAK,GACT,+DAA+D,CAAC;AAElE;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,IAAc,EACd,OAA0B,qBAAqB;IAE/C,MAAM,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC;IAC5B,MAAM,IAAI,GAAG,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEzC,QAAQ,GAAG,EAAE,CAAC;QACZ,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,wEAAwE;YACxE,sEAAsE;YACtE,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACpB,IAAI,CAAC,GAAG,CACN,sDAAsD;oBACpD,kEAAkE;oBAClE,uEAAuE;oBACvE,wDAAwD,CAC3D,CAAC;gBACF,OAAO,CAAC,CAAC;YACX,CAAC;YACD,0EAA0E;YAC1E,+DAA+D;YAC/D,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;gBACpB,IAAI,CAAC,GAAG,CAAC,wDAAwD,CAAC,CAAC;YACrE,CAAC;YACD,MAAM,KAAK,GAAG,CAAC,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YAC9C,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,IAAI,CAAC,GAAG,CAAC,0DAA0D,CAAC,CAAC;gBACrE,OAAO,CAAC,CAAC;YACX,CAAC;YACD,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;YAChE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,GAAG,IAAI,IAAI,EAAE,KAAK,CAAC,CAAC;YACzC,IAAI,CAAC,GAAG,CAAC,4BAA4B,IAAI,UAAU,CAAC,CAAC;YACrD,OAAO,CAAC,CAAC;QACX,CAAC;QAED,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,MAAM,IAAI,GAAG,iBAAiB,CAAC;gBAC7B,GAAG,EAAE,IAAI,CAAC,GAAG;gBACb,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,IAAI,EAAE,IAAI,CAAC,IAAI;aAChB,CAAC,CAAC;YACH,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,IAAI,CAAC,GAAG,CAAC,wDAAwD,CAAC,CAAC;gBACnE,OAAO,CAAC,CAAC;YACX,CAAC;YACD,IAAI,CAAC,GAAG,CAAC,+BAA+B,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC;YAEzD,IAAI,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;gBACnC,IAAI,CAAC;oBACH,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;oBACzC,IAAI,CAAC,GAAG,CAAC,oBAAoB,EAAE,CAAC,IAAI,KAAK,EAAE,CAAC,KAAK,IAAI,CAAC,CAAC;gBACzD,CAAC;gBAAC,OAAO,CAAC,EAAE,CAAC;oBACX,MAAM,IAAI,GAAG,CAAC,YAAY,cAAc,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC/D,IAAI,CAAC,GAAG,CAAC,2BAA2B,IAAI,KAAM,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC;oBACrE,OAAO,CAAC,CAAC;gBACX,CAAC;YACH,CAAC;YACD,OAAO,CAAC,CAAC;QACX,CAAC;QAED,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;YACtC,IAAI,CAAC,GAAG,CACN,OAAO;gBACL,CAAC,CAAC,uCAAuC,IAAI,GAAG;gBAChD,CAAC,CAAC,2BAA2B,IAAI,sBAAsB,CAC1D,CAAC;YACF,KAAK,MAAM,IAAI,IAAI,CAAC,qBAAqB,EAAE,gBAAgB,CAAU,EAAE,CAAC;gBACtE,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC;oBAC3B,IAAI,CAAC,GAAG,CACN,SAAS,IAAI,mDAAmD,CACjE,CAAC;gBACJ,CAAC;YACH,CAAC;YACD,OAAO,CAAC,CAAC;QACX,CAAC;QAED;YACE,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YAChB,OAAO,CAAC,CAAC;IACb,CAAC;AACH,CAAC"}

package/dist/linear-cli.d.ts

@@ -0,0 +1,37 @@
+import { type LinearClient } from "./linear-api.js";
+/**
+ * Injectable host surface for {@link runLinear} so the bundled `linear` helper
+ * stays pure-ish and unit-testable without touching the real home dir or the
+ * network. {@link defaultLinearCliDeps} wires up the host.
+ */
+export type LinearCliDeps = {
+    env: NodeJS.ProcessEnv;
+    /** Home directory holding the credential file. */
+    home: string;
+    /** Read a file's contents, or null if it is absent/unreadable. */
+    readFile: (path: string) => string | null;
+    /** Print one line to stdout. */
+    out: (msg: string) => void;
+    /** Print one line to stderr. */
+    err: (msg: string) => void;
+    /** Build a Linear client for a resolved token; injectable for tests. */
+    makeClient: (token: string) => LinearClient;
+};
+/** Host-wired defaults for {@link runLinear}. */
+export declare const defaultLinearCliDeps: LinearCliDeps;
+/**
+ * Drive the bundled `linear` helper CLI — Otto's thin Linear counterpart to the
+ * system `gh`, used by the Linear templates and the agent. Resolves to the
+ * process exit code so the bin wrapper can `process.exit(code)`.
+ *
+ * - `list`    — print labelled open issues (identifier/title/state/url).
+ * - `dump`    — emit a JSON array of full issue detail (bodies + comments), for
+ *   spilling into a prompt (parallel to `gh issue list --json …,body,comments`).
+ * - `view`    — print one issue's full detail as JSON.
+ * - `comment` — add a comment to an issue from `--body-file`.
+ * - `done`    — move an issue to a completed workflow state, resolved via
+ *   `OTTO_LINEAR_DONE_STATE` (by name) else the team's first `completed`-type
+ *   state; exits non-zero (no move) when the target state is ambiguous.
+ */
+export declare function runLinear(argv: string[], deps?: LinearCliDeps): Promise<number>;
+//# sourceMappingURL=linear-cli.d.ts.map

package/dist/linear-cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"linear-cli.d.ts","sourceRoot":"","sources":["../src/linear-cli.ts"],"names":[],"mappings":"AAGA,OAAO,EAML,KAAK,YAAY,EAClB,MAAM,iBAAiB,CAAC;AAEzB;;;;GAIG;AACH,MAAM,MAAM,aAAa,GAAG;IAC1B,GAAG,EAAE,MAAM,CAAC,UAAU,CAAC;IACvB,kDAAkD;IAClD,IAAI,EAAE,MAAM,CAAC;IACb,kEAAkE;IAClE,QAAQ,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;IAC1C,gCAAgC;IAChC,GAAG,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;IAC3B,gCAAgC;IAChC,GAAG,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;IAC3B,wEAAwE;IACxE,UAAU,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,YAAY,CAAC;CAC7C,CAAC;AAEF,iDAAiD;AACjD,eAAO,MAAM,oBAAoB,EAAE,aAalC,CAAC;AAqCF;;;;;;;;;;;;;GAaG;AACH,wBAAsB,SAAS,CAC7B,IAAI,EAAE,MAAM,EAAE,EACd,IAAI,GAAE,aAAoC,GACzC,OAAO,CAAC,MAAM,CAAC,CAoIjB"}