@pome-sh/cli 0.3.0 → 0.4.0

package/node_modules/@pome-sh/twin-linear/dist/src/webhooks/dispatch.d.ts

@@ -0,0 +1,30 @@
+import type { LinearOrganization, LinearTeam, LinearUser, LinearWebhook } from "../types.js";
+export type LinearWebhookEvent = {
+    type: string;
+    action: string;
+    data: unknown;
+    actor?: LinearUser | null;
+    teamId?: string | null;
+    url?: string | null;
+    updatedFrom?: Record<string, unknown>;
+};
+/** Structural host for webhook delivery — avoids a domain ↔ dispatch import cycle. */
+export type LinearWebhookHost = {
+    getOrganization(): LinearOrganization | null;
+    listWebhooks(): LinearWebhook[];
+    getTeam(ref: string): LinearTeam | null;
+    nextId(namespace?: string): string;
+    now(): string;
+    recordWebhookDelivery(input: {
+        id: string;
+        webhookId: string;
+        event: string;
+        action: string;
+        url: string;
+        status: number | null;
+        error: string | null;
+        payload: unknown;
+        headers: Record<string, string>;
+    }): void;
+};
+export declare function dispatchLinearWebhook(commands: LinearWebhookHost, event: LinearWebhookEvent): Promise<void>;

package/node_modules/@pome-sh/twin-linear/dist/src/webhooks/dispatch.js

@@ -0,0 +1,93 @@
+// SPDX-License-Identifier: Apache-2.0
+import { createHmac } from "node:crypto";
+import { webhookDestinationBlocked } from "../webhook-policy.js";
+export async function dispatchLinearWebhook(commands, event) {
+    const organization = commands.getOrganization();
+    const webhooks = commands.listWebhooks().filter((webhook) => matchesWebhook(commands, webhook, event));
+    for (const webhook of webhooks) {
+        // Deterministic delivery id from the shared logical counter — a random id
+        // would leak into /_pome/state and break run-to-run determinism.
+        const deliveryId = commands.nextId("webhook_delivery");
+        const payload = {
+            action: event.action,
+            type: event.type,
+            actor: event.actor
+                ? {
+                    id: event.actor.id,
+                    name: event.actor.name,
+                    displayName: event.actor.displayName,
+                    email: event.actor.email,
+                }
+                : null,
+            data: event.data,
+            url: event.url ?? null,
+            createdAt: commands.now(),
+            organizationId: organization?.id ?? null,
+            webhookTimestamp: Date.parse(commands.now()),
+            webhookId: webhook.id,
+            ...(event.updatedFrom ? { updatedFrom: event.updatedFrom } : {}),
+        };
+        const body = JSON.stringify(payload);
+        const headers = {
+            "Accept-Charset": "utf-8",
+            "Content-Type": "application/json; charset=utf-8",
+            "Linear-Delivery": deliveryId,
+            "Linear-Event": event.type,
+            "User-Agent": "Linear-Webhook",
+        };
+        if (webhook.secret) {
+            headers["Linear-Signature"] = createHmac("sha256", webhook.secret).update(body).digest("hex");
+        }
+        let status = null;
+        let error = null;
+        // Default-deny SSRF guard: refuse loopback/private/link-local (incl. cloud
+        // metadata) destinations before any request leaves the process. redirect:"error"
+        // only covers redirect-based bypasses; this covers the initial request too.
+        if (await webhookDestinationBlocked(webhook.url)) {
+            error = "blocked_destination";
+        }
+        else {
+            try {
+                const res = await fetch(webhook.url, {
+                    method: "POST",
+                    headers,
+                    body,
+                    redirect: "error",
+                    signal: AbortSignal.timeout(10_000),
+                });
+                status = res.status;
+            }
+            catch (err) {
+                // Normalize to a stable classification — raw fetch error messages are
+                // platform/Node-version specific and would make exported state non-deterministic.
+                error = err instanceof Error && err.name === "TimeoutError" ? "timeout" : "delivery_failed";
+            }
+        }
+        commands.recordWebhookDelivery({
+            id: deliveryId,
+            webhookId: webhook.id,
+            event: event.type,
+            action: event.action,
+            url: webhook.url,
+            status,
+            error,
+            payload,
+            headers,
+        });
+    }
+}
+function matchesWebhook(commands, webhook, event) {
+    if (!webhook.enabled)
+        return false;
+    if (!webhook.resourceTypes.includes(event.type) && !webhook.resourceTypes.includes("*")) {
+        return false;
+    }
+    if (webhook.allPublicTeams) {
+        if (!event.teamId)
+            return true;
+        const team = commands.getTeam(event.teamId);
+        return team ? !team.private : true;
+    }
+    return webhook.teamId === event.teamId;
+}
+//# sourceMappingURL=dispatch.js.map

package/node_modules/@pome-sh/twin-linear/dist/src/webhooks/dispatch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dispatch.js","sourceRoot":"","sources":["../../../src/webhooks/dispatch.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,yBAAyB,EAAE,MAAM,sBAAsB,CAAC;AAgCjE,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,QAA2B,EAC3B,KAAyB;IAEzB,MAAM,YAAY,GAAG,QAAQ,CAAC,eAAe,EAAE,CAAC;IAChD,MAAM,QAAQ,GAAG,QAAQ,CAAC,YAAY,EAAE,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,cAAc,CAAC,QAAQ,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;IAEvG,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,0EAA0E;QAC1E,iEAAiE;QACjE,MAAM,UAAU,GAAG,QAAQ,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC;QACvD,MAAM,OAAO,GAAG;YACd,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,KAAK,EAAE,KAAK,CAAC,KAAK;gBAChB,CAAC,CAAC;oBACE,EAAE,EAAE,KAAK,CAAC,KAAK,CAAC,EAAE;oBAClB,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,IAAI;oBACtB,WAAW,EAAE,KAAK,CAAC,KAAK,CAAC,WAAW;oBACpC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,KAAK;iBACzB;gBACH,CAAC,CAAC,IAAI;YACR,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,GAAG,EAAE,KAAK,CAAC,GAAG,IAAI,IAAI;YACtB,SAAS,EAAE,QAAQ,CAAC,GAAG,EAAE;YACzB,cAAc,EAAE,YAAY,EAAE,EAAE,IAAI,IAAI;YACxC,gBAAgB,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC;YAC5C,SAAS,EAAE,OAAO,CAAC,EAAE;YACrB,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACjE,CAAC;QACF,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QACrC,MAAM,OAAO,GAA2B;YACtC,gBAAgB,EAAE,OAAO;YACzB,cAAc,EAAE,iCAAiC;YACjD,iBAAiB,EAAE,UAAU;YAC7B,cAAc,EAAE,KAAK,CAAC,IAAI;YAC1B,YAAY,EAAE,gBAAgB;SAC/B,CAAC;QACF,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnB,OAAO,CAAC,kBAAkB,CAAC,GAAG,UAAU,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAChG,CAAC;QAED,IAAI,MAAM,GAAkB,IAAI,CAAC;QACjC,IAAI,KAAK,GAAkB,IAAI,CAAC;QAChC,2EAA2E;QAC3E,iFAAiF;QACjF,4EAA4E;QAC5E,IAAI,MAAM,yBAAyB,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YACjD,KAAK,GAAG,qBAAqB,CAAC;QAChC,CAAC;aAAM,CAAC;YACN,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE;oBACnC,MAAM,EAAE,MAAM;oBACd,OAAO;oBACP,IAAI;oBACJ,QAAQ,EAAE,OAAO;oBACjB,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;iBACpC,CAAC,CAAC;gBACH,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;YACtB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,sEAAsE;gBACtE,kFAAkF;gBAClF,KAAK,GAAG,GAAG,YAAY,KAAK,IAAI,GAAG,CAAC,IAAI,KAAK,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,iBAAiB,CAAC;YAC9F,CAAC;QACH,CAAC;QAED,QAAQ,CAAC,qBAAqB,CAAC;YAC7B,EAAE,EAAE,UAAU;YACd,SAAS,EAAE,OAAO,CAAC,EAAE;YACrB,KAAK,EAAE,KAAK,CAAC,IAAI;YACjB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,MAAM;YACN,KAAK;YACL,OAAO;YACP,OAAO;SACR,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CACrB,QAA2B,EAC3B,OAAsB,EACtB,KAAyB;IAEzB,IAAI,CAAC,OAAO,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IACnC,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACxF,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;QAC3B,IAAI,CAAC,KAAK,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QAC/B,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC5C,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;IACrC,CAAC;IACD,OAAO,OAAO,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,CAAC;AACzC,CAAC"}

package/node_modules/@pome-sh/twin-linear/fidelity.inventory.json

@@ -0,0 +1,249 @@
+{
+  "twin": "linear",
+  "package": "@pome-sh/twin-linear",
+  "updated": "2026-07-22",
+  "notes": "Wave 4 Gate-1: 22-tool MCP set (Gate 0 18 + delete_comment + documents). save_issue estimate/parentId/append-only relations; save_comment parentId; projects/cycles/agent sessions promoted to semantic where SQLite-backed.",
+  "evidenceCodes": {
+    "TC:issue-triage": "List/get/update issues and statuses for agent triage",
+    "TC:issue-create": "Create issues with team/assignee/label context",
+    "TC:comment": "List/create/delete issue comments (incl. threads)",
+    "TC:documents": "List/get/create workspace documents",
+    "TC:webhook-integrate": "Webhook CRUD and delivery log",
+    "TC:oauth-app": "OAuth authorize/token/revoke for app installs"
+  },
+  "tools": [
+    {
+      "name": "list_issues",
+      "heat": "hot",
+      "fidelity": "semantic",
+      "justification": "MCP:list_issues; TC:issue-triage. Launch set frozen in fixtures/mcp-tools-list.canonical.json.",
+      "defer": "Implemented by LinearDomain."
+    },
+    {
+      "name": "get_issue",
+      "heat": "hot",
+      "fidelity": "semantic",
+      "justification": "MCP:get_issue; TC:issue-triage. Returns estimate/parentId/relations.",
+      "defer": "Implemented by LinearDomain."
+    },
+    {
+      "name": "save_issue",
+      "heat": "hot",
+      "fidelity": "semantic",
+      "justification": "MCP:save_issue; TC:issue-create|issue-triage. Gate-1: estimate, parentId, append-only relations.",
+      "defer": "Implemented by LinearDomain."
+    },
+    {
+      "name": "list_comments",
+      "heat": "hot",
+      "fidelity": "semantic",
+      "justification": "MCP:list_comments; TC:comment.",
+      "defer": "Implemented by LinearDomain."
+    },
+    {
+      "name": "save_comment",
+      "heat": "hot",
+      "fidelity": "semantic",
+      "justification": "MCP:save_comment; TC:comment. Gate-1 threaded parentId.",
+      "defer": "Implemented by LinearDomain."
+    },
+    {
+      "name": "delete_comment",
+      "heat": "warm",
+      "fidelity": "semantic",
+      "justification": "MCP:delete_comment; GraphQL commentDelete parity; TC:comment.",
+      "defer": "Implemented by LinearDomain."
+    },
+    {
+      "name": "list_teams",
+      "heat": "hot",
+      "fidelity": "semantic",
+      "justification": "MCP:list_teams; TC:issue-create.",
+      "defer": "Implemented by LinearDomain."
+    },
+    {
+      "name": "get_team",
+      "heat": "warm",
+      "fidelity": "shape",
+      "justification": "MCP:get_team.",
+      "defer": "Implemented by LinearDomain."
+    },
+    {
+      "name": "list_users",
+      "heat": "hot",
+      "fidelity": "semantic",
+      "justification": "MCP:list_users; TC:issue-create.",
+      "defer": "Implemented by LinearDomain."
+    },
+    {
+      "name": "get_user",
+      "heat": "warm",
+      "fidelity": "shape",
+      "justification": "MCP:get_user.",
+      "defer": "Implemented by LinearDomain."
+    },
+    {
+      "name": "list_issue_statuses",
+      "heat": "hot",
+      "fidelity": "semantic",
+      "justification": "MCP:list_issue_statuses; TC:issue-triage.",
+      "defer": "Implemented by LinearDomain."
+    },
+    {
+      "name": "get_issue_status",
+      "heat": "warm",
+      "fidelity": "shape",
+      "justification": "MCP:get_issue_status.",
+      "defer": "Implemented by LinearDomain."
+    },
+    {
+      "name": "list_issue_labels",
+      "heat": "hot",
+      "fidelity": "semantic",
+      "justification": "MCP:list_issue_labels; TC:issue-triage.",
+      "defer": "Implemented by LinearDomain."
+    },
+    {
+      "name": "create_issue_label",
+      "heat": "warm",
+      "fidelity": "shape",
+      "justification": "MCP:create_issue_label.",
+      "defer": "Implemented by LinearDomain."
+    },
+    {
+      "name": "list_projects",
+      "heat": "warm",
+      "fidelity": "semantic",
+      "justification": "MCP:list_projects; SQLite project rows + issue projectId linkage.",
+      "defer": "Implemented by LinearDomain."
+    },
+    {
+      "name": "get_project",
+      "heat": "warm",
+      "fidelity": "semantic",
+      "justification": "MCP:get_project; SQLite project lookup.",
+      "defer": "Implemented by LinearDomain."
+    },
+    {
+      "name": "save_project",
+      "heat": "warm",
+      "fidelity": "semantic",
+      "justification": "MCP:save_project; SQLite create/update (no project webhooks — see REFERENCE-DIVERGENCES).",
+      "defer": "Implemented by LinearDomain."
+    },
+    {
+      "name": "list_cycles",
+      "heat": "warm",
+      "fidelity": "semantic",
+      "justification": "MCP:list_cycles; SQLite cycles + issue cycleId linkage.",
+      "defer": "Implemented by LinearDomain."
+    },
+    {
+      "name": "search_documentation",
+      "heat": "cold",
+      "fidelity": "shape",
+      "justification": "MCP:search_documentation — static/empty twin product docs (not workspace documents).",
+      "defer": "Returns deterministic empty/static docs in the twin."
+    },
+    {
+      "name": "list_documents",
+      "heat": "warm",
+      "fidelity": "semantic",
+      "justification": "MCP:list_documents; TC:documents. Gate-1 SQLite documents.",
+      "defer": "Implemented by LinearDomain."
+    },
+    {
+      "name": "get_document",
+      "heat": "warm",
+      "fidelity": "semantic",
+      "justification": "MCP:get_document; TC:documents.",
+      "defer": "Implemented by LinearDomain."
+    },
+    {
+      "name": "save_document",
+      "heat": "warm",
+      "fidelity": "semantic",
+      "justification": "MCP:save_document; TC:documents. One parent: project|team|issue|cycle.",
+      "defer": "Implemented by LinearDomain."
+    }
+  ],
+  "graphql": [
+    { "name": "viewer", "heat": "hot", "fidelity": "semantic", "justification": "Session actor for GraphQL chains." },
+    { "name": "organization", "heat": "warm", "fidelity": "shape", "justification": "Org context for workspace reads." },
+    { "name": "users", "heat": "hot", "fidelity": "semantic", "justification": "TC:issue-create assignee context." },
+    { "name": "user", "heat": "warm", "fidelity": "shape", "justification": "Single-user lookup." },
+    { "name": "teams", "heat": "hot", "fidelity": "semantic", "justification": "TC:issue-create team context." },
+    { "name": "team", "heat": "warm", "fidelity": "shape", "justification": "Single-team lookup." },
+    { "name": "workflowStates", "heat": "hot", "fidelity": "semantic", "justification": "TC:issue-triage status context." },
+    { "name": "workflowState", "heat": "warm", "fidelity": "shape", "justification": "Single workflow state lookup." },
+    { "name": "issues", "heat": "hot", "fidelity": "semantic", "justification": "TC:issue-triage|issue-create." },
+    { "name": "issue", "heat": "hot", "fidelity": "semantic", "justification": "TC:issue-triage|issue-create; estimate/parent." },
+    { "name": "comments", "heat": "hot", "fidelity": "semantic", "justification": "TC:comment." },
+    { "name": "comment", "heat": "hot", "fidelity": "semantic", "justification": "TC:comment; parent thread." },
+    { "name": "issueLabels", "heat": "hot", "fidelity": "semantic", "justification": "TC:issue-triage labels." },
+    { "name": "issueLabel", "heat": "warm", "fidelity": "shape", "justification": "Single label lookup." },
+    { "name": "projects", "heat": "warm", "fidelity": "semantic", "justification": "SQLite projects + issue linkage." },
+    { "name": "project", "heat": "warm", "fidelity": "semantic", "justification": "SQLite projects + issue linkage." },
+    { "name": "cycles", "heat": "warm", "fidelity": "semantic", "justification": "SQLite cycles + issue linkage." },
+    { "name": "cycle", "heat": "warm", "fidelity": "semantic", "justification": "SQLite cycles + issue linkage." },
+    { "name": "webhooks", "heat": "hot", "fidelity": "semantic", "justification": "TC:webhook-integrate." },
+    { "name": "webhook", "heat": "hot", "fidelity": "semantic", "justification": "TC:webhook-integrate." },
+    { "name": "agentSessions", "heat": "warm", "fidelity": "semantic", "justification": "SQLite agent sessions + activities; MCP-absent." },
+    { "name": "agentSession", "heat": "warm", "fidelity": "semantic", "justification": "SQLite agent sessions + activities; MCP-absent." },
+    { "name": "issueCreate", "heat": "hot", "fidelity": "semantic", "justification": "TC:issue-create; estimate/parentId." },
+    { "name": "issueUpdate", "heat": "hot", "fidelity": "semantic", "justification": "TC:issue-triage; estimate/parentId." },
+    { "name": "issueDelete", "heat": "warm", "fidelity": "shape", "justification": "Issue lifecycle mutation." },
+    { "name": "issueArchive", "heat": "warm", "fidelity": "shape", "justification": "Issue lifecycle mutation." },
+    { "name": "issueUnarchive", "heat": "warm", "fidelity": "shape", "justification": "Issue lifecycle mutation." },
+    { "name": "commentCreate", "heat": "hot", "fidelity": "semantic", "justification": "TC:comment; parentId threads." },
+    { "name": "commentUpdate", "heat": "warm", "fidelity": "shape", "justification": "Comment lifecycle mutation." },
+    { "name": "commentDelete", "heat": "warm", "fidelity": "semantic", "justification": "Comment delete; MCP delete_comment parity." },
+    { "name": "issueLabelCreate", "heat": "hot", "fidelity": "semantic", "justification": "TC:issue-triage labels." },
+    { "name": "issueLabelUpdate", "heat": "warm", "fidelity": "shape", "justification": "Label lifecycle mutation." },
+    { "name": "issueLabelDelete", "heat": "warm", "fidelity": "shape", "justification": "Label lifecycle mutation." },
+    { "name": "issueAddLabel", "heat": "hot", "fidelity": "semantic", "justification": "TC:issue-triage labels." },
+    { "name": "issueRemoveLabel", "heat": "hot", "fidelity": "semantic", "justification": "TC:issue-triage labels." },
+    { "name": "webhookCreate", "heat": "hot", "fidelity": "semantic", "justification": "TC:webhook-integrate." },
+    { "name": "webhookDelete", "heat": "hot", "fidelity": "semantic", "justification": "TC:webhook-integrate." },
+    { "name": "agentSessionCreateOnIssue", "heat": "warm", "fidelity": "semantic", "justification": "SQLite agent session create; MCP-absent." },
+    { "name": "agentSessionCreateOnComment", "heat": "warm", "fidelity": "semantic", "justification": "SQLite agent session create; MCP-absent." },
+    { "name": "agentSessionUpdate", "heat": "warm", "fidelity": "semantic", "justification": "SQLite agent session update; MCP-absent." },
+    { "name": "agentActivityCreate", "heat": "warm", "fidelity": "semantic", "justification": "SQLite agent activity create; MCP-absent." },
+    { "name": "GET /oauth/authorize", "heat": "hot", "fidelity": "semantic", "justification": "TC:oauth-app." },
+    { "name": "POST /oauth/authorize/callback", "heat": "hot", "fidelity": "semantic", "justification": "TC:oauth-app." },
+    { "name": "POST /oauth/token", "heat": "hot", "fidelity": "semantic", "justification": "TC:oauth-app." },
+    { "name": "POST /oauth/revoke", "heat": "hot", "fidelity": "semantic", "justification": "TC:oauth-app." }
+  ],
+  "doc_drift": [
+    {
+      "item": "document_initiative_parent",
+      "detail": "Official save_document accepts initiative parents; twin Gate-1 accepts project/team/issue/cycle only."
+    }
+  ],
+  "performanceBudgets": {
+    "note": "Pinned from LIMITS.md; enforced by seed/GraphQL/MCP/state export.",
+    "maxIssueTitleBytes": 512,
+    "maxIssueBodyBytes": 65536,
+    "maxCommentBodyBytes": 65536,
+    "maxGraphqlQueryBytes": 100000,
+    "maxGraphqlSelectionDepth": 20,
+    "maxSeedUsers": 500,
+    "maxSeedTeams": 50,
+    "maxSeedIssues": 5000,
+    "maxSeedLabels": 500,
+    "maxSeedProjects": 200,
+    "maxSeedCycles": 200,
+    "maxSeedDocuments": 500,
+    "maxSeedOauthApps": 20,
+    "maxSeedTokens": 50,
+    "maxSeedWebhooks": 50,
+    "maxMcpPageSize": 250,
+    "defaultMcpPageSize": 50,
+    "maxRelayPageSize": 250,
+    "defaultRelayPageSize": 50,
+    "maxStateExportCollectionRows": 2000,
+    "oauthCodeTtlSeconds": 600,
+    "accessTokenTtlSeconds": 3600,
+    "packagedBootSeconds": 3
+  }
+}

package/node_modules/@pome-sh/twin-linear/fixtures/README.md

@@ -0,0 +1,10 @@
+# Linear twin fixtures (Gate 0 / Gate-1 oracles)
+
+Immutable upstream captures / freezes for `@pome-sh/twin-linear`.
+
+| Path | Role |
+| --- | --- |
+| `mcp-tools-list.canonical.json` | Launch 22-tool MCP listing oracle (Gate-1 Wave 4) |
+| `graphql-surface.json` | Frozen GraphQL query/mutation operation inventory |
+
+Normal tests must not require Linear credentials. Refresh MCP schemas only with a new Gate ruling.

package/node_modules/@pome-sh/twin-linear/fixtures/graphql-surface.json

@@ -0,0 +1,59 @@
+{
+  "source": "emulate_linear_checklist_x_linear_public_docs",
+  "updated": "2026-07-21",
+  "queries": [
+    "viewer",
+    "organization",
+    "users",
+    "user",
+    "teams",
+    "team",
+    "workflowStates",
+    "workflowState",
+    "issues",
+    "issue",
+    "comments",
+    "comment",
+    "issueLabels",
+    "issueLabel",
+    "projects",
+    "project",
+    "cycles",
+    "cycle",
+    "webhooks",
+    "webhook",
+    "agentSessions",
+    "agentSession"
+  ],
+  "mutations": [
+    "issueCreate",
+    "issueUpdate",
+    "issueDelete",
+    "issueArchive",
+    "issueUnarchive",
+    "commentCreate",
+    "commentUpdate",
+    "commentDelete",
+    "issueLabelCreate",
+    "issueLabelUpdate",
+    "issueLabelDelete",
+    "issueAddLabel",
+    "issueRemoveLabel",
+    "webhookCreate",
+    "webhookDelete",
+    "agentSessionCreateOnIssue",
+    "agentSessionCreateOnComment",
+    "agentSessionUpdate",
+    "agentActivityCreate"
+  ],
+  "authRoutes": [
+    "GET /oauth/authorize",
+    "POST /oauth/authorize/callback",
+    "POST /oauth/token",
+    "POST /oauth/revoke"
+  ],
+  "notes": [
+    "GraphQL surface is the Emulate Linear operation floor rewritten against SQLite commands.",
+    "Relay connections use nodes/edges/pageInfo; omit endCursor when exhausted."
+  ]
+}