@shipfox/api-integration-linear 2.0.0

package/.turbo/turbo-build.log

@@ -0,0 +1,2 @@
+$ shipfox-swc
+Successfully compiled: 23 files with swc (45ms)

package/.turbo/turbo-type$colon$emit.log

@@ -0,0 +1 @@
+$ shipfox-tsc-emit

package/.turbo/turbo-type.log

@@ -0,0 +1 @@
+$ shipfox-tsc-check

package/CHANGELOG.md

@@ -0,0 +1,89 @@
+# @shipfox/api-integration-linear
+
+## 2.0.0
+
+### Minor Changes
+
+- 1b0d344: Publishes the complete API runtime closure with packed-consumer-safe internal imports and records its exact package set in application releases.
+
+### Patch Changes
+
+- Updated dependencies [c31a7e0]
+- Updated dependencies [1b0d344]
+- Updated dependencies [521e006]
+  - @shipfox/api-workspaces@2.0.0
+  - @shipfox/api-auth-context@2.0.0
+  - @shipfox/api-integration-core-dto@2.0.0
+  - @shipfox/api-integration-linear-dto@2.0.0
+  - @shipfox/api-secrets@2.0.0
+  - @shipfox/config@1.2.1
+  - @shipfox/node-drizzle@0.2.1
+  - @shipfox/node-fastify@0.2.1
+  - @shipfox/node-opentelemetry@0.5.0
+  - @shipfox/node-postgres@0.4.1
+
+## 1.0.2
+
+### Patch Changes
+
+- @shipfox/api-secrets@0.1.2
+- @shipfox/api-workspaces@0.1.2
+
+## 1.0.1
+
+### Patch Changes
+
+- Updated dependencies [ec75cd5]
+- Updated dependencies [6a1fb54]
+  - @shipfox/node-drizzle@0.2.0
+  - @shipfox/node-postgres@0.4.0
+  - @shipfox/api-secrets@0.1.1
+  - @shipfox/api-workspaces@0.1.1
+
+## 1.0.0
+
+### Patch Changes
+
+- 43d7996: Adds the Linear OAuth connect experience to workspace integration settings.
+- 0948b67: Scaffolds the Linear integration provider, package pair, config, and installation store behind the core provider flag.
+- 8958753: Adds Linear OAuth client and token custody primitives for storing and refreshing workspace connection tokens.
+- 6297b06: Adds the curated Linear agent tool catalog with broad workspace tool metadata for authoring validation and future audit.
+- Updated dependencies [0948b67]
+- Updated dependencies [34ba284]
+- Updated dependencies [3b45d86]
+- Updated dependencies [5707d6d]
+- Updated dependencies [b9c3f32]
+- Updated dependencies [d02c5fd]
+- Updated dependencies [a81b68c]
+- Updated dependencies [115655e]
+- Updated dependencies [c0a883c]
+- Updated dependencies [72ce351]
+- Updated dependencies [e47f8da]
+- Updated dependencies [ce062a9]
+- Updated dependencies [7b175f5]
+- Updated dependencies [f3614ae]
+- Updated dependencies [f92122b]
+- Updated dependencies [f8f339a]
+- Updated dependencies [857fd73]
+- Updated dependencies [f66f606]
+- Updated dependencies [e51d464]
+- Updated dependencies [b8e49ff]
+- Updated dependencies [d6d4862]
+- Updated dependencies [c0a883c]
+- Updated dependencies [6077301]
+- Updated dependencies [82d22e4]
+- Updated dependencies [01be723]
+- Updated dependencies [27770eb]
+- Updated dependencies [2933c33]
+- Updated dependencies [6181819]
+- Updated dependencies [3ddde91]
+  - @shipfox/api-integration-linear-dto@0.0.1
+  - @shipfox/node-fastify@0.2.0
+  - @shipfox/api-secrets@0.1.0
+  - @shipfox/node-drizzle@0.1.0
+  - @shipfox/api-workspaces@0.1.0
+  - @shipfox/api-auth-context@0.1.0
+  - @shipfox/api-integration-core-dto@0.1.0
+  - @shipfox/node-opentelemetry@0.4.2
+  - @shipfox/node-postgres@0.3.2
+  - @shipfox/config@1.2.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Shipfox
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,88 @@
+# Shipfox API Integration Linear
+
+Shipfox API Integration Linear provides the Linear provider foundation, OAuth
+routes, signed webhook ingestion, hosted MCP adapter, and agent tool catalog. It
+is currently enabled behind `INTEGRATIONS_ENABLE_LINEAR_PROVIDER`.
+
+## OAuth callback
+
+Set `LINEAR_OAUTH_REDIRECT_URL` to the public client callback, for example
+`https://shipfox.example.com/integrations/linear/callback`. The client forwards
+the signed callback query to the authenticated API endpoint, while the API uses
+the same configured URL during the server-side token exchange.
+
+## Webhooks
+
+Linear sends OAuth application webhooks to:
+
+```text
+POST /webhooks/integrations/linear
+```
+
+The receiver requires `LINEAR_WEBHOOK_SIGNING_SECRET` to match the signing secret
+configured on the Linear app. It verifies `Linear-Signature` against the raw
+request body before parsing JSON, rejects signed payloads whose
+`webhookTimestamp` is more than 60 seconds from the API server clock, and uses
+the `Linear-Delivery` header as the integration delivery id.
+
+The OAuth app manifest is the canonical webhook configuration. Configure its
+initial webhook resource types as `Issue`, `Comment`, `IssueLabel`, `Project`,
+`Cycle`, and `AgentSessionEvent`; Linear applies that app-level configuration
+when an organization authorizes the app. Shipfox does not issue a runtime
+`webhookCreate` mutation, and there are no earlier installed organizations to
+migrate. See [Linear's OAuth app manifests](https://linear.app/developers/oauth-app-manifests).
+
+Supported data webhook events are `Issue`, `Comment`, `IssueLabel`, `Project`,
+and `Cycle` with `create`, `update`, or `remove` actions. They publish
+`integrations.event.received` with `provider: "linear"`, `source:
+connection.slug`, and event names such as `Issue.create`.
+
+`AgentSessionEvent.created` publishes `agentSession.created` for both an
+assignment and a comment mention. The raw payload is preserved, including
+`agentSession.commentId` and `agentSession.sourceCommentId`, so workflow filters
+can distinguish the context. Authors can get the Linear app user id from an
+observed event or the Linear app identity, then compare it with `appUserId` in a
+filter literal. `AgentSessionEvent.prompted` publishes `agentSession.prompted`;
+it can start a subscribed workflow or reach an explicitly configured job listener,
+but never automatically resumes a run from its AgentSession. The module does not
+acknowledge sessions or emit Linear agent activities. See [Linear's agent-session
+behavior](https://linear.app/developers/agent-interaction).
+
+Signed but unsupported webhook shapes are recorded and dropped with a 200
+response so Linear does not retry or disable the webhook endpoint.
+## Agent Tool Catalog
+
+The v1 Linear agent tool catalog is a broad workspace catalog over Linear's
+hosted MCP tool ids. It includes read tools for issues, comments, projects,
+documents, teams, users, cycles, releases, release notes, release pipelines,
+agent skills, diffs, documentation search, and attachments. It also includes
+write tools for issue and comment workflows plus project, document, milestone,
+release, release note, label, status update, comment, and attachment mutation.
+
+Tool ids intentionally match Linear's hosted MCP server exactly. The catalog is
+the local source of truth for authoring validation, write-safety metadata, and
+future audit behavior; the provider advertises `agent_tools` and proxies calls
+to Linear's hosted MCP server with the connection's stored Linear token.
+
+Sensitivity policy:
+
+- `save_issue` is explicitly `sensitive: false`. It is still a write tool and
+  requires `allow_write`, but the v1 product choice treats normal issue triage as
+  an ordinary write.
+- `save_comment` is `sensitive: false`.
+- Destructive or workspace-shaping writes are `sensitive: true`, including
+  upload and delete tools, status update mutation, project/document/milestone
+  saves, release/release-note saves, and label creation.
+- Attachment upload tools are included with their native hosted-MCP names:
+  `prepare_attachment_upload`, `create_attachment_from_upload`, and the
+  deprecated tiny-file fallback `create_attachment`.
+
+## Development
+
+Run checks for this package:
+
+```sh
+turbo check --filter=@shipfox/api-integration-linear
+turbo type --filter=@shipfox/api-integration-linear
+turbo test --filter=@shipfox/api-integration-linear
+```

package/dist/api/client.d.ts

@@ -0,0 +1,29 @@
+export interface LinearAuthorization {
+    accessToken: string;
+    refreshToken?: string | undefined;
+    expiresAt?: Date | undefined;
+    scopes: string[];
+}
+export interface LinearIdentity {
+    appUserId: string;
+    organizationId: string;
+    organizationName: string;
+    organizationUrlKey: string;
+}
+export interface LinearApiClient {
+    exchangeAuthorizationCode(input: {
+        code: string;
+    }): Promise<LinearAuthorization>;
+    refreshAccessToken(input: {
+        refreshToken: string;
+    }): Promise<LinearAuthorization>;
+    revokeToken(input: {
+        token: string;
+        tokenTypeHint: 'access_token' | 'refresh_token';
+    }): Promise<void>;
+    getIdentity(input: {
+        accessToken: string;
+    }): Promise<LinearIdentity>;
+}
+export declare function createLinearApiClient(): LinearApiClient;
+//# sourceMappingURL=client.d.ts.map

package/dist/api/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/api/client.ts"],"names":[],"mappings":"AAwBA,MAAM,WAAW,mBAAmB;IAClC,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC,SAAS,CAAC,EAAE,IAAI,GAAG,SAAS,CAAC;IAC7B,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAED,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,gBAAgB,EAAE,MAAM,CAAC;IACzB,kBAAkB,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,eAAe;IAC9B,yBAAyB,CAAC,KAAK,EAAE;QAAC,IAAI,EAAE,MAAM,CAAA;KAAC,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAC/E,kBAAkB,CAAC,KAAK,EAAE;QAAC,YAAY,EAAE,MAAM,CAAA;KAAC,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAChF,WAAW,CAAC,KAAK,EAAE;QACjB,KAAK,EAAE,MAAM,CAAC;QACd,aAAa,EAAE,cAAc,GAAG,eAAe,CAAC;KACjD,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClB,WAAW,CAAC,KAAK,EAAE;QAAC,WAAW,EAAE,MAAM,CAAA;KAAC,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;CACpE;AA2BD,wBAAgB,qBAAqB,IAAI,eAAe,CAuFvD"}

package/dist/api/client.js

@@ -0,0 +1,189 @@
+import { logger } from '@shipfox/node-opentelemetry';
+import ky, { HTTPError, TimeoutError } from 'ky';
+import { config } from '#config.js';
+import { LinearIntegrationProviderError } from '#core/errors.js';
+const LINEAR_OAUTH_TOKEN_URL = 'https://api.linear.app/oauth/token';
+const LINEAR_OAUTH_REVOKE_URL = 'https://api.linear.app/oauth/revoke';
+const LINEAR_GRAPHQL_URL = 'https://api.linear.app/graphql';
+const LINEAR_API_TIMEOUT_MS = 10_000;
+const SCOPE_SEPARATOR_RE = /[,\s]+/;
+const IDENTITY_QUERY = `
+  query ShipfoxLinearIdentity {
+    viewer {
+      id
+    }
+    organization {
+      id
+      name
+      urlKey
+    }
+  }
+`;
+export function createLinearApiClient() {
+    return {
+        async exchangeAuthorizationCode (input) {
+            const body = await mapLinearError('exchange-authorization-code', ()=>ky.post(LINEAR_OAUTH_TOKEN_URL, {
+                    body: new URLSearchParams({
+                        grant_type: 'authorization_code',
+                        client_id: config.LINEAR_OAUTH_CLIENT_ID,
+                        client_secret: config.LINEAR_OAUTH_CLIENT_SECRET,
+                        code: input.code,
+                        redirect_uri: config.LINEAR_OAUTH_REDIRECT_URL
+                    }),
+                    timeout: LINEAR_API_TIMEOUT_MS
+                }).json());
+            return parseTokenResponse(body);
+        },
+        async refreshAccessToken (input) {
+            const body = await mapLinearError('refresh-access-token', ()=>ky.post(LINEAR_OAUTH_TOKEN_URL, {
+                    body: new URLSearchParams({
+                        grant_type: 'refresh_token',
+                        client_id: config.LINEAR_OAUTH_CLIENT_ID,
+                        client_secret: config.LINEAR_OAUTH_CLIENT_SECRET,
+                        refresh_token: input.refreshToken
+                    }),
+                    timeout: LINEAR_API_TIMEOUT_MS
+                }).json());
+            return parseTokenResponse(body);
+        },
+        async revokeToken (input) {
+            await mapLinearError('revoke-token', async ()=>{
+                await ky.post(LINEAR_OAUTH_REVOKE_URL, {
+                    body: new URLSearchParams({
+                        client_id: config.LINEAR_OAUTH_CLIENT_ID,
+                        client_secret: config.LINEAR_OAUTH_CLIENT_SECRET,
+                        token: input.token,
+                        token_type_hint: input.tokenTypeHint
+                    }),
+                    timeout: LINEAR_API_TIMEOUT_MS
+                });
+            });
+        },
+        async getIdentity (input) {
+            const body = await mapLinearError('get-identity', ()=>ky.post(LINEAR_GRAPHQL_URL, {
+                    headers: {
+                        authorization: `Bearer ${input.accessToken}`
+                    },
+                    json: {
+                        query: IDENTITY_QUERY
+                    },
+                    timeout: LINEAR_API_TIMEOUT_MS
+                }).json(), {
+                classifyHttp4xx: classifyGraphqlHttp4xx
+            });
+            const data = graphqlData('get-identity', body);
+            const appUserId = data.viewer?.id;
+            const organizationId = data.organization?.id;
+            const organizationName = data.organization?.name;
+            const organizationUrlKey = data.organization?.urlKey;
+            if (typeof appUserId !== 'string' || typeof organizationId !== 'string' || typeof organizationName !== 'string' || typeof organizationUrlKey !== 'string') {
+                throw new LinearIntegrationProviderError('malformed-provider-response', 'Linear identity response did not include the app user and organization');
+            }
+            return {
+                appUserId,
+                organizationId,
+                organizationName,
+                organizationUrlKey
+            };
+        }
+    };
+}
+function parseTokenResponse(body) {
+    if (typeof body.access_token !== 'string' || body.access_token.length === 0) {
+        throw new LinearIntegrationProviderError('malformed-provider-response', 'Linear authorization response did not include an access token');
+    }
+    const scopes = parseScopes(body.scope);
+    const expiresAt = parseExpiresAt(body.expires_in);
+    const refreshToken = typeof body.refresh_token === 'string' ? body.refresh_token : undefined;
+    return {
+        accessToken: body.access_token,
+        refreshToken,
+        expiresAt,
+        scopes
+    };
+}
+function parseScopes(scope) {
+    if (typeof scope === 'string') {
+        return scope.split(SCOPE_SEPARATOR_RE).map((value)=>value.trim()).filter(Boolean);
+    }
+    if (Array.isArray(scope) && scope.every((value)=>typeof value === 'string')) return scope;
+    if (scope === undefined) return [];
+    throw new LinearIntegrationProviderError('malformed-provider-response', 'Linear authorization response included malformed scopes');
+}
+function parseExpiresAt(expiresIn) {
+    if (expiresIn === undefined) return undefined;
+    if (typeof expiresIn !== 'number' || !Number.isFinite(expiresIn) || expiresIn <= 0) {
+        throw new LinearIntegrationProviderError('malformed-provider-response', 'Linear authorization response included a malformed expiry');
+    }
+    return new Date(Date.now() + expiresIn * 1000);
+}
+function graphqlData(operation, body) {
+    if (hasGraphqlErrors(body)) {
+        const reason = hasAuthGraphqlError(body.errors) ? 'access-denied' : 'malformed-provider-response';
+        logger().warn({
+            operation
+        }, 'Linear GraphQL request returned errors');
+        throw new LinearIntegrationProviderError(reason, 'Linear GraphQL request failed');
+    }
+    if (!body.data) {
+        throw new LinearIntegrationProviderError('malformed-provider-response', 'Linear GraphQL response did not include data');
+    }
+    return body.data;
+}
+function hasGraphqlErrors(body) {
+    return Array.isArray(body.errors) && body.errors.length > 0;
+}
+function hasAuthGraphqlError(errors) {
+    return errors?.some((error)=>{
+        const type = error.extensions?.type;
+        return typeof type === 'string' && [
+            'authentication',
+            'authorization'
+        ].includes(type.toLowerCase());
+    }) ?? false;
+}
+async function mapLinearError(operation, request, options = {}) {
+    try {
+        return await request();
+    } catch (error) {
+        if (error instanceof LinearIntegrationProviderError) throw error;
+        if (error instanceof HTTPError) {
+            const { status, statusText, headers } = error.response;
+            logger().warn({
+                operation,
+                status,
+                statusText
+            }, 'Linear API request rejected');
+            if (status === 429) {
+                throw new LinearIntegrationProviderError('rate-limited', 'Linear request was rate limited', retryAfterSeconds(headers));
+            }
+            if (status >= 500) {
+                throw new LinearIntegrationProviderError('provider-unavailable', 'Linear request failed');
+            }
+            const reason = options.classifyHttp4xx?.(status) ?? 'access-denied';
+            throw new LinearIntegrationProviderError(reason, 'Linear request was rejected');
+        }
+        if (error instanceof TimeoutError) {
+            logger().warn({
+                operation
+            }, 'Linear API request timed out');
+            throw new LinearIntegrationProviderError('timeout', 'Linear request timed out');
+        }
+        logger().warn({
+            operation,
+            errName: error instanceof Error ? error.name : typeof error
+        }, 'Linear API request failed');
+        throw new LinearIntegrationProviderError('provider-unavailable', 'Linear request failed');
+    }
+}
+function classifyGraphqlHttp4xx(status) {
+    return status === 401 || status === 403 ? 'access-denied' : 'malformed-provider-response';
+}
+function retryAfterSeconds(headers) {
+    const retryAfter = headers.get('retry-after');
+    if (!retryAfter) return undefined;
+    const parsed = Number.parseInt(retryAfter, 10);
+    return Number.isNaN(parsed) ? undefined : parsed;
+}
+
+//# sourceMappingURL=client.js.map

package/dist/api/client.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/api/client.ts"],"sourcesContent":["import {logger} from '@shipfox/node-opentelemetry';\nimport ky, {HTTPError, TimeoutError} from 'ky';\nimport {config} from '#config.js';\nimport {LinearIntegrationProviderError} from '#core/errors.js';\n\nconst LINEAR_OAUTH_TOKEN_URL = 'https://api.linear.app/oauth/token';\nconst LINEAR_OAUTH_REVOKE_URL = 'https://api.linear.app/oauth/revoke';\nconst LINEAR_GRAPHQL_URL = 'https://api.linear.app/graphql';\nconst LINEAR_API_TIMEOUT_MS = 10_000;\nconst SCOPE_SEPARATOR_RE = /[,\\s]+/;\n\nconst IDENTITY_QUERY = `\n  query ShipfoxLinearIdentity {\n    viewer {\n      id\n    }\n    organization {\n      id\n      name\n      urlKey\n    }\n  }\n`;\n\nexport interface LinearAuthorization {\n  accessToken: string;\n  refreshToken?: string | undefined;\n  expiresAt?: Date | undefined;\n  scopes: string[];\n}\n\nexport interface LinearIdentity {\n  appUserId: string;\n  organizationId: string;\n  organizationName: string;\n  organizationUrlKey: string;\n}\n\nexport interface LinearApiClient {\n  exchangeAuthorizationCode(input: {code: string}): Promise<LinearAuthorization>;\n  refreshAccessToken(input: {refreshToken: string}): Promise<LinearAuthorization>;\n  revokeToken(input: {\n    token: string;\n    tokenTypeHint: 'access_token' | 'refresh_token';\n  }): Promise<void>;\n  getIdentity(input: {accessToken: string}): Promise<LinearIdentity>;\n}\n\ninterface LinearTokenResponse {\n  access_token?: unknown;\n  refresh_token?: unknown;\n  expires_in?: unknown;\n  scope?: unknown;\n}\n\ninterface LinearGraphqlResponse<Data> {\n  data?: Data | null;\n  errors?: LinearGraphqlError[] | undefined;\n}\n\ninterface LinearGraphqlError {\n  extensions?: {type?: unknown} | undefined;\n}\n\ninterface LinearIdentityData {\n  viewer?: {id?: unknown} | null;\n  organization?: {id?: unknown; name?: unknown; urlKey?: unknown} | null;\n}\n\ninterface MapLinearErrorOptions {\n  classifyHttp4xx?(status: number): 'access-denied' | 'malformed-provider-response';\n}\n\nexport function createLinearApiClient(): LinearApiClient {\n  return {\n    async exchangeAuthorizationCode(input) {\n      const body = await mapLinearError('exchange-authorization-code', () =>\n        ky\n          .post(LINEAR_OAUTH_TOKEN_URL, {\n            body: new URLSearchParams({\n              grant_type: 'authorization_code',\n              client_id: config.LINEAR_OAUTH_CLIENT_ID,\n              client_secret: config.LINEAR_OAUTH_CLIENT_SECRET,\n              code: input.code,\n              redirect_uri: config.LINEAR_OAUTH_REDIRECT_URL,\n            }),\n            timeout: LINEAR_API_TIMEOUT_MS,\n          })\n          .json<LinearTokenResponse>(),\n      );\n\n      return parseTokenResponse(body);\n    },\n\n    async refreshAccessToken(input) {\n      const body = await mapLinearError('refresh-access-token', () =>\n        ky\n          .post(LINEAR_OAUTH_TOKEN_URL, {\n            body: new URLSearchParams({\n              grant_type: 'refresh_token',\n              client_id: config.LINEAR_OAUTH_CLIENT_ID,\n              client_secret: config.LINEAR_OAUTH_CLIENT_SECRET,\n              refresh_token: input.refreshToken,\n            }),\n            timeout: LINEAR_API_TIMEOUT_MS,\n          })\n          .json<LinearTokenResponse>(),\n      );\n\n      return parseTokenResponse(body);\n    },\n\n    async revokeToken(input) {\n      await mapLinearError('revoke-token', async () => {\n        await ky.post(LINEAR_OAUTH_REVOKE_URL, {\n          body: new URLSearchParams({\n            client_id: config.LINEAR_OAUTH_CLIENT_ID,\n            client_secret: config.LINEAR_OAUTH_CLIENT_SECRET,\n            token: input.token,\n            token_type_hint: input.tokenTypeHint,\n          }),\n          timeout: LINEAR_API_TIMEOUT_MS,\n        });\n      });\n    },\n\n    async getIdentity(input) {\n      const body = await mapLinearError(\n        'get-identity',\n        () =>\n          ky\n            .post(LINEAR_GRAPHQL_URL, {\n              headers: {authorization: `Bearer ${input.accessToken}`},\n              json: {query: IDENTITY_QUERY},\n              timeout: LINEAR_API_TIMEOUT_MS,\n            })\n            .json<LinearGraphqlResponse<LinearIdentityData>>(),\n        {classifyHttp4xx: classifyGraphqlHttp4xx},\n      );\n      const data = graphqlData('get-identity', body);\n      const appUserId = data.viewer?.id;\n      const organizationId = data.organization?.id;\n      const organizationName = data.organization?.name;\n      const organizationUrlKey = data.organization?.urlKey;\n\n      if (\n        typeof appUserId !== 'string' ||\n        typeof organizationId !== 'string' ||\n        typeof organizationName !== 'string' ||\n        typeof organizationUrlKey !== 'string'\n      ) {\n        throw new LinearIntegrationProviderError(\n          'malformed-provider-response',\n          'Linear identity response did not include the app user and organization',\n        );\n      }\n\n      return {appUserId, organizationId, organizationName, organizationUrlKey};\n    },\n  };\n}\n\nfunction parseTokenResponse(body: LinearTokenResponse): LinearAuthorization {\n  if (typeof body.access_token !== 'string' || body.access_token.length === 0) {\n    throw new LinearIntegrationProviderError(\n      'malformed-provider-response',\n      'Linear authorization response did not include an access token',\n    );\n  }\n\n  const scopes = parseScopes(body.scope);\n  const expiresAt = parseExpiresAt(body.expires_in);\n  const refreshToken = typeof body.refresh_token === 'string' ? body.refresh_token : undefined;\n  return {accessToken: body.access_token, refreshToken, expiresAt, scopes};\n}\n\nfunction parseScopes(scope: unknown): string[] {\n  if (typeof scope === 'string') {\n    return scope\n      .split(SCOPE_SEPARATOR_RE)\n      .map((value) => value.trim())\n      .filter(Boolean);\n  }\n  if (Array.isArray(scope) && scope.every((value) => typeof value === 'string')) return scope;\n  if (scope === undefined) return [];\n  throw new LinearIntegrationProviderError(\n    'malformed-provider-response',\n    'Linear authorization response included malformed scopes',\n  );\n}\n\nfunction parseExpiresAt(expiresIn: unknown): Date | undefined {\n  if (expiresIn === undefined) return undefined;\n  if (typeof expiresIn !== 'number' || !Number.isFinite(expiresIn) || expiresIn <= 0) {\n    throw new LinearIntegrationProviderError(\n      'malformed-provider-response',\n      'Linear authorization response included a malformed expiry',\n    );\n  }\n  return new Date(Date.now() + expiresIn * 1000);\n}\n\nfunction graphqlData<Data>(operation: string, body: LinearGraphqlResponse<Data>): Data {\n  if (hasGraphqlErrors(body)) {\n    const reason = hasAuthGraphqlError(body.errors)\n      ? 'access-denied'\n      : 'malformed-provider-response';\n    logger().warn({operation}, 'Linear GraphQL request returned errors');\n    throw new LinearIntegrationProviderError(reason, 'Linear GraphQL request failed');\n  }\n  if (!body.data) {\n    throw new LinearIntegrationProviderError(\n      'malformed-provider-response',\n      'Linear GraphQL response did not include data',\n    );\n  }\n  return body.data;\n}\n\nfunction hasGraphqlErrors(body: LinearGraphqlResponse<unknown>): boolean {\n  return Array.isArray(body.errors) && body.errors.length > 0;\n}\n\nfunction hasAuthGraphqlError(errors: LinearGraphqlError[] | undefined): boolean {\n  return (\n    errors?.some((error) => {\n      const type = error.extensions?.type;\n      return (\n        typeof type === 'string' && ['authentication', 'authorization'].includes(type.toLowerCase())\n      );\n    }) ?? false\n  );\n}\n\nasync function mapLinearError<T>(\n  operation: string,\n  request: () => Promise<T>,\n  options: MapLinearErrorOptions = {},\n): Promise<T> {\n  try {\n    return await request();\n  } catch (error) {\n    if (error instanceof LinearIntegrationProviderError) throw error;\n    if (error instanceof HTTPError) {\n      const {status, statusText, headers} = error.response;\n      logger().warn({operation, status, statusText}, 'Linear API request rejected');\n      if (status === 429) {\n        throw new LinearIntegrationProviderError(\n          'rate-limited',\n          'Linear request was rate limited',\n          retryAfterSeconds(headers),\n        );\n      }\n      if (status >= 500) {\n        throw new LinearIntegrationProviderError('provider-unavailable', 'Linear request failed');\n      }\n      const reason = options.classifyHttp4xx?.(status) ?? 'access-denied';\n      throw new LinearIntegrationProviderError(reason, 'Linear request was rejected');\n    }\n    if (error instanceof TimeoutError) {\n      logger().warn({operation}, 'Linear API request timed out');\n      throw new LinearIntegrationProviderError('timeout', 'Linear request timed out');\n    }\n    logger().warn(\n      {operation, errName: error instanceof Error ? error.name : typeof error},\n      'Linear API request failed',\n    );\n    throw new LinearIntegrationProviderError('provider-unavailable', 'Linear request failed');\n  }\n}\n\nfunction classifyGraphqlHttp4xx(status: number): 'access-denied' | 'malformed-provider-response' {\n  return status === 401 || status === 403 ? 'access-denied' : 'malformed-provider-response';\n}\n\nfunction retryAfterSeconds(headers: Headers): number | undefined {\n  const retryAfter = headers.get('retry-after');\n  if (!retryAfter) return undefined;\n  const parsed = Number.parseInt(retryAfter, 10);\n  return Number.isNaN(parsed) ? undefined : parsed;\n}\n"],"names":["logger","ky","HTTPError","TimeoutError","config","LinearIntegrationProviderError","LINEAR_OAUTH_TOKEN_URL","LINEAR_OAUTH_REVOKE_URL","LINEAR_GRAPHQL_URL","LINEAR_API_TIMEOUT_MS","SCOPE_SEPARATOR_RE","IDENTITY_QUERY","createLinearApiClient","exchangeAuthorizationCode","input","body","mapLinearError","post","URLSearchParams","grant_type","client_id","LINEAR_OAUTH_CLIENT_ID","client_secret","LINEAR_OAUTH_CLIENT_SECRET","code","redirect_uri","LINEAR_OAUTH_REDIRECT_URL","timeout","json","parseTokenResponse","refreshAccessToken","refresh_token","refreshToken","revokeToken","token","token_type_hint","tokenTypeHint","getIdentity","headers","authorization","accessToken","query","classifyHttp4xx","classifyGraphqlHttp4xx","data","graphqlData","appUserId","viewer","id","organizationId","organization","organizationName","name","organizationUrlKey","urlKey","access_token","length","scopes","parseScopes","scope","expiresAt","parseExpiresAt","expires_in","undefined","split","map","value","trim","filter","Boolean","Array","isArray","every","expiresIn","Number","isFinite","Date","now","operation","hasGraphqlErrors","reason","hasAuthGraphqlError","errors","warn","some","error","type","extensions","includes","toLowerCase","request","options","status","statusText","response","retryAfterSeconds","errName","Error","retryAfter","get","parsed","parseInt","isNaN"],"mappings":"AAAA,SAAQA,MAAM,QAAO,8BAA8B;AACnD,OAAOC,MAAKC,SAAS,EAAEC,YAAY,QAAO,KAAK;AAC/C,SAAQC,MAAM,QAAO,aAAa;AAClC,SAAQC,8BAA8B,QAAO,kBAAkB;AAE/D,MAAMC,yBAAyB;AAC/B,MAAMC,0BAA0B;AAChC,MAAMC,qBAAqB;AAC3B,MAAMC,wBAAwB;AAC9B,MAAMC,qBAAqB;AAE3B,MAAMC,iBAAiB,CAAC;;;;;;;;;;;AAWxB,CAAC;AAmDD,OAAO,SAASC;IACd,OAAO;QACL,MAAMC,2BAA0BC,KAAK;YACnC,MAAMC,OAAO,MAAMC,eAAe,+BAA+B,IAC/Df,GACGgB,IAAI,CAACX,wBAAwB;oBAC5BS,MAAM,IAAIG,gBAAgB;wBACxBC,YAAY;wBACZC,WAAWhB,OAAOiB,sBAAsB;wBACxCC,eAAelB,OAAOmB,0BAA0B;wBAChDC,MAAMV,MAAMU,IAAI;wBAChBC,cAAcrB,OAAOsB,yBAAyB;oBAChD;oBACAC,SAASlB;gBACX,GACCmB,IAAI;YAGT,OAAOC,mBAAmBd;QAC5B;QAEA,MAAMe,oBAAmBhB,KAAK;YAC5B,MAAMC,OAAO,MAAMC,eAAe,wBAAwB,IACxDf,GACGgB,IAAI,CAACX,wBAAwB;oBAC5BS,MAAM,IAAIG,gBAAgB;wBACxBC,YAAY;wBACZC,WAAWhB,OAAOiB,sBAAsB;wBACxCC,eAAelB,OAAOmB,0BAA0B;wBAChDQ,eAAejB,MAAMkB,YAAY;oBACnC;oBACAL,SAASlB;gBACX,GACCmB,IAAI;YAGT,OAAOC,mBAAmBd;QAC5B;QAEA,MAAMkB,aAAYnB,KAAK;YACrB,MAAME,eAAe,gBAAgB;gBACnC,MAAMf,GAAGgB,IAAI,CAACV,yBAAyB;oBACrCQ,MAAM,IAAIG,gBAAgB;wBACxBE,WAAWhB,OAAOiB,sBAAsB;wBACxCC,eAAelB,OAAOmB,0BAA0B;wBAChDW,OAAOpB,MAAMoB,KAAK;wBAClBC,iBAAiBrB,MAAMsB,aAAa;oBACtC;oBACAT,SAASlB;gBACX;YACF;QACF;QAEA,MAAM4B,aAAYvB,KAAK;YACrB,MAAMC,OAAO,MAAMC,eACjB,gBACA,IACEf,GACGgB,IAAI,CAACT,oBAAoB;oBACxB8B,SAAS;wBAACC,eAAe,CAAC,OAAO,EAAEzB,MAAM0B,WAAW,EAAE;oBAAA;oBACtDZ,MAAM;wBAACa,OAAO9B;oBAAc;oBAC5BgB,SAASlB;gBACX,GACCmB,IAAI,IACT;gBAACc,iBAAiBC;YAAsB;YAE1C,MAAMC,OAAOC,YAAY,gBAAgB9B;YACzC,MAAM+B,YAAYF,KAAKG,MAAM,EAAEC;YAC/B,MAAMC,iBAAiBL,KAAKM,YAAY,EAAEF;YAC1C,MAAMG,mBAAmBP,KAAKM,YAAY,EAAEE;YAC5C,MAAMC,qBAAqBT,KAAKM,YAAY,EAAEI;YAE9C,IACE,OAAOR,cAAc,YACrB,OAAOG,mBAAmB,YAC1B,OAAOE,qBAAqB,YAC5B,OAAOE,uBAAuB,UAC9B;gBACA,MAAM,IAAIhD,+BACR,+BACA;YAEJ;YAEA,OAAO;gBAACyC;gBAAWG;gBAAgBE;gBAAkBE;YAAkB;QACzE;IACF;AACF;AAEA,SAASxB,mBAAmBd,IAAyB;IACnD,IAAI,OAAOA,KAAKwC,YAAY,KAAK,YAAYxC,KAAKwC,YAAY,CAACC,MAAM,KAAK,GAAG;QAC3E,MAAM,IAAInD,+BACR,+BACA;IAEJ;IAEA,MAAMoD,SAASC,YAAY3C,KAAK4C,KAAK;IACrC,MAAMC,YAAYC,eAAe9C,KAAK+C,UAAU;IAChD,MAAM9B,eAAe,OAAOjB,KAAKgB,aAAa,KAAK,WAAWhB,KAAKgB,aAAa,GAAGgC;IACnF,OAAO;QAACvB,aAAazB,KAAKwC,YAAY;QAAEvB;QAAc4B;QAAWH;IAAM;AACzE;AAEA,SAASC,YAAYC,KAAc;IACjC,IAAI,OAAOA,UAAU,UAAU;QAC7B,OAAOA,MACJK,KAAK,CAACtD,oBACNuD,GAAG,CAAC,CAACC,QAAUA,MAAMC,IAAI,IACzBC,MAAM,CAACC;IACZ;IACA,IAAIC,MAAMC,OAAO,CAACZ,UAAUA,MAAMa,KAAK,CAAC,CAACN,QAAU,OAAOA,UAAU,WAAW,OAAOP;IACtF,IAAIA,UAAUI,WAAW,OAAO,EAAE;IAClC,MAAM,IAAI1D,+BACR,+BACA;AAEJ;AAEA,SAASwD,eAAeY,SAAkB;IACxC,IAAIA,cAAcV,WAAW,OAAOA;IACpC,IAAI,OAAOU,cAAc,YAAY,CAACC,OAAOC,QAAQ,CAACF,cAAcA,aAAa,GAAG;QAClF,MAAM,IAAIpE,+BACR,+BACA;IAEJ;IACA,OAAO,IAAIuE,KAAKA,KAAKC,GAAG,KAAKJ,YAAY;AAC3C;AAEA,SAAS5B,YAAkBiC,SAAiB,EAAE/D,IAAiC;IAC7E,IAAIgE,iBAAiBhE,OAAO;QAC1B,MAAMiE,SAASC,oBAAoBlE,KAAKmE,MAAM,IAC1C,kBACA;QACJlF,SAASmF,IAAI,CAAC;YAACL;QAAS,GAAG;QAC3B,MAAM,IAAIzE,+BAA+B2E,QAAQ;IACnD;IACA,IAAI,CAACjE,KAAK6B,IAAI,EAAE;QACd,MAAM,IAAIvC,+BACR,+BACA;IAEJ;IACA,OAAOU,KAAK6B,IAAI;AAClB;AAEA,SAASmC,iBAAiBhE,IAAoC;IAC5D,OAAOuD,MAAMC,OAAO,CAACxD,KAAKmE,MAAM,KAAKnE,KAAKmE,MAAM,CAAC1B,MAAM,GAAG;AAC5D;AAEA,SAASyB,oBAAoBC,MAAwC;IACnE,OACEA,QAAQE,KAAK,CAACC;QACZ,MAAMC,OAAOD,MAAME,UAAU,EAAED;QAC/B,OACE,OAAOA,SAAS,YAAY;YAAC;YAAkB;SAAgB,CAACE,QAAQ,CAACF,KAAKG,WAAW;IAE7F,MAAM;AAEV;AAEA,eAAezE,eACb8D,SAAiB,EACjBY,OAAyB,EACzBC,UAAiC,CAAC,CAAC;IAEnC,IAAI;QACF,OAAO,MAAMD;IACf,EAAE,OAAOL,OAAO;QACd,IAAIA,iBAAiBhF,gCAAgC,MAAMgF;QAC3D,IAAIA,iBAAiBnF,WAAW;YAC9B,MAAM,EAAC0F,MAAM,EAAEC,UAAU,EAAEvD,OAAO,EAAC,GAAG+C,MAAMS,QAAQ;YACpD9F,SAASmF,IAAI,CAAC;gBAACL;gBAAWc;gBAAQC;YAAU,GAAG;YAC/C,IAAID,WAAW,KAAK;gBAClB,MAAM,IAAIvF,+BACR,gBACA,mCACA0F,kBAAkBzD;YAEtB;YACA,IAAIsD,UAAU,KAAK;gBACjB,MAAM,IAAIvF,+BAA+B,wBAAwB;YACnE;YACA,MAAM2E,SAASW,QAAQjD,eAAe,GAAGkD,WAAW;YACpD,MAAM,IAAIvF,+BAA+B2E,QAAQ;QACnD;QACA,IAAIK,iBAAiBlF,cAAc;YACjCH,SAASmF,IAAI,CAAC;gBAACL;YAAS,GAAG;YAC3B,MAAM,IAAIzE,+BAA+B,WAAW;QACtD;QACAL,SAASmF,IAAI,CACX;YAACL;YAAWkB,SAASX,iBAAiBY,QAAQZ,MAAMjC,IAAI,GAAG,OAAOiC;QAAK,GACvE;QAEF,MAAM,IAAIhF,+BAA+B,wBAAwB;IACnE;AACF;AAEA,SAASsC,uBAAuBiD,MAAc;IAC5C,OAAOA,WAAW,OAAOA,WAAW,MAAM,kBAAkB;AAC9D;AAEA,SAASG,kBAAkBzD,OAAgB;IACzC,MAAM4D,aAAa5D,QAAQ6D,GAAG,CAAC;IAC/B,IAAI,CAACD,YAAY,OAAOnC;IACxB,MAAMqC,SAAS1B,OAAO2B,QAAQ,CAACH,YAAY;IAC3C,OAAOxB,OAAO4B,KAAK,CAACF,UAAUrC,YAAYqC;AAC5C"}

package/dist/config.d.ts

@@ -0,0 +1,8 @@
+export declare const config: Readonly<{
+    LINEAR_OAUTH_CLIENT_ID: string;
+    LINEAR_OAUTH_CLIENT_SECRET: string;
+    LINEAR_WEBHOOK_SIGNING_SECRET: string;
+    LINEAR_OAUTH_REDIRECT_URL: string;
+    LINEAR_MCP_ENDPOINT: string;
+} & import("@shipfox/config").CleanedEnvAccessors>;
+//# sourceMappingURL=config.d.ts.map

package/dist/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAqBA,eAAO,MAAM,MAAM;;;;;;kDAAmC,CAAC"}

package/dist/config.js

@@ -0,0 +1,22 @@
+import { createConfig, str, url } from '@shipfox/config';
+const linearConfigSchema = {
+    LINEAR_OAUTH_CLIENT_ID: str({
+        desc: 'OAuth client ID of the Linear app, used to start and complete the Linear connect flow. Required.'
+    }),
+    LINEAR_OAUTH_CLIENT_SECRET: str({
+        desc: 'OAuth client secret of the Linear app, used to exchange authorization codes for workspace tokens. Required.'
+    }),
+    LINEAR_WEBHOOK_SIGNING_SECRET: str({
+        desc: 'Secret used to verify incoming Linear webhooks. Must match the signing secret configured on the Linear app. Required.'
+    }),
+    LINEAR_OAUTH_REDIRECT_URL: url({
+        desc: 'Public client callback URL Linear redirects to after OAuth authorization, such as https://shipfox.example.com/integrations/linear/callback. Required.'
+    }),
+    LINEAR_MCP_ENDPOINT: url({
+        desc: 'Streamable HTTP endpoint used for Linear MCP tool calls. Set this only when routing Linear tools through a compatible proxy or test server.',
+        default: 'https://mcp.linear.app/mcp'
+    })
+};
+export const config = createConfig(linearConfigSchema);
+
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/config.ts"],"sourcesContent":["import {createConfig, str, url} from '@shipfox/config';\n\nconst linearConfigSchema = {\n  LINEAR_OAUTH_CLIENT_ID: str({\n    desc: 'OAuth client ID of the Linear app, used to start and complete the Linear connect flow. Required.',\n  }),\n  LINEAR_OAUTH_CLIENT_SECRET: str({\n    desc: 'OAuth client secret of the Linear app, used to exchange authorization codes for workspace tokens. Required.',\n  }),\n  LINEAR_WEBHOOK_SIGNING_SECRET: str({\n    desc: 'Secret used to verify incoming Linear webhooks. Must match the signing secret configured on the Linear app. Required.',\n  }),\n  LINEAR_OAUTH_REDIRECT_URL: url({\n    desc: 'Public client callback URL Linear redirects to after OAuth authorization, such as https://shipfox.example.com/integrations/linear/callback. Required.',\n  }),\n  LINEAR_MCP_ENDPOINT: url({\n    desc: 'Streamable HTTP endpoint used for Linear MCP tool calls. Set this only when routing Linear tools through a compatible proxy or test server.',\n    default: 'https://mcp.linear.app/mcp',\n  }),\n};\n\nexport const config = createConfig(linearConfigSchema);\n"],"names":["createConfig","str","url","linearConfigSchema","LINEAR_OAUTH_CLIENT_ID","desc","LINEAR_OAUTH_CLIENT_SECRET","LINEAR_WEBHOOK_SIGNING_SECRET","LINEAR_OAUTH_REDIRECT_URL","LINEAR_MCP_ENDPOINT","default","config"],"mappings":"AAAA,SAAQA,YAAY,EAAEC,GAAG,EAAEC,GAAG,QAAO,kBAAkB;AAEvD,MAAMC,qBAAqB;IACzBC,wBAAwBH,IAAI;QAC1BI,MAAM;IACR;IACAC,4BAA4BL,IAAI;QAC9BI,MAAM;IACR;IACAE,+BAA+BN,IAAI;QACjCI,MAAM;IACR;IACAG,2BAA2BN,IAAI;QAC7BG,MAAM;IACR;IACAI,qBAAqBP,IAAI;QACvBG,MAAM;QACNK,SAAS;IACX;AACF;AAEA,OAAO,MAAMC,SAASX,aAAaG,oBAAoB"}

package/dist/core/agent-tools-provider.d.ts

@@ -0,0 +1,32 @@
+import { type CallToolResult } from '@modelcontextprotocol/sdk/types.js';
+import type { AgentToolCallInput, AgentToolSession, AgentToolsProvider, IntegrationConnection, OpenAgentToolsSessionInput } from '@shipfox/api-integration-core-dto';
+import { type LinearAgentToolRequiredScope } from '#core/agent-tools.js';
+import type { LinearTokenStore } from '#core/tokens.js';
+type LinearIntegrationConnection = IntegrationConnection<'linear'>;
+interface LinearMcpClient {
+    callTool(input: AgentToolCallInput, timeoutMs: number): Promise<CallToolResult>;
+    close(): Promise<void>;
+}
+interface CreateLinearMcpClientParams {
+    endpoint: URL;
+    accessToken: string;
+}
+type CreateLinearMcpClient = (params: CreateLinearMcpClientParams) => Promise<LinearMcpClient>;
+export interface LinearAgentToolsProviderOptions {
+    tokenStore: Pick<LinearTokenStore, 'getAccessToken'>;
+    endpoint?: string | URL | undefined;
+    callTimeoutMs?: number | undefined;
+    createClient?: CreateLinearMcpClient | undefined;
+}
+export declare class LinearAgentToolsProvider implements AgentToolsProvider<LinearIntegrationConnection, LinearAgentToolRequiredScope> {
+    private readonly options;
+    private readonly endpoint;
+    private readonly callTimeoutMs;
+    private readonly createClient;
+    constructor(options: LinearAgentToolsProviderOptions);
+    catalog(): readonly [import("#core/agent-tools.js").LinearAgentToolCatalogEntry, import("#core/agent-tools.js").LinearAgentToolCatalogEntry, import("#core/agent-tools.js").LinearAgentToolCatalogEntry, import("#core/agent-tools.js").LinearAgentToolCatalogEntry, import("#core/agent-tools.js").LinearAgentToolCatalogEntry, import("#core/agent-tools.js").LinearAgentToolCatalogEntry, import("#core/agent-tools.js").LinearAgentToolCatalogEntry, import("#core/agent-tools.js").LinearAgentToolCatalogEntry, import("#core/agent-tools.js").LinearAgentToolCatalogEntry, import("#core/agent-tools.js").LinearAgentToolCatalogEntry, import("#core/agent-tools.js").LinearAgentToolCatalogEntry, import("#core/agent-tools.js").LinearAgentToolCatalogEntry, import("#core/agent-tools.js").LinearAgentToolCatalogEntry, import("#core/agent-tools.js").LinearAgentToolCatalogEntry, import("#core/agent-tools.js").LinearAgentToolCatalogEntry, import("#core/agent-tools.js").LinearAgentToolCatalogEntry, import("#core/agent-tools.js").LinearAgentToolCatalogEntry, import("#core/agent-tools.js").LinearAgentToolCatalogEntry, import("#core/agent-tools.js").LinearAgentToolCatalogEntry, import("#core/agent-tools.js").LinearAgentToolCatalogEntry, import("#core/agent-tools.js").LinearAgentToolCatalogEntry, import("#core/agent-tools.js").LinearAgentToolCatalogEntry, import("#core/agent-tools.js").LinearAgentToolCatalogEntry, import("#core/agent-tools.js").LinearAgentToolCatalogEntry, import("#core/agent-tools.js").LinearAgentToolCatalogEntry, import("#core/agent-tools.js").LinearAgentToolCatalogEntry, import("#core/agent-tools.js").LinearAgentToolCatalogEntry, import("#core/agent-tools.js").LinearAgentToolCatalogEntry, import("#core/agent-tools.js").LinearAgentToolCatalogEntry, import("#core/agent-tools.js").LinearAgentToolCatalogEntry, import("#core/agent-tools.js").LinearAgentToolCatalogEntry, import("#core/agent-tools.js").LinearAgentToolCatalogEntry, import("#core/agent-tools.js").LinearAgentToolCatalogEntry, import("#core/agent-tools.js").LinearAgentToolCatalogEntry, import("#core/agent-tools.js").LinearAgentToolCatalogEntry, import("#core/agent-tools.js").LinearAgentToolCatalogEntry, import("#core/agent-tools.js").LinearAgentToolCatalogEntry, import("#core/agent-tools.js").LinearAgentToolCatalogEntry, import("#core/agent-tools.js").LinearAgentToolCatalogEntry, import("#core/agent-tools.js").LinearAgentToolCatalogEntry, import("#core/agent-tools.js").LinearAgentToolCatalogEntry, import("#core/agent-tools.js").LinearAgentToolCatalogEntry, import("#core/agent-tools.js").LinearAgentToolCatalogEntry, import("#core/agent-tools.js").LinearAgentToolCatalogEntry, import("#core/agent-tools.js").LinearAgentToolCatalogEntry, import("#core/agent-tools.js").LinearAgentToolCatalogEntry, import("#core/agent-tools.js").LinearAgentToolCatalogEntry];
+    selectionCatalog(): import("@shipfox/api-integration-core-dto").AgentToolSelectionCatalog;
+    openSession(input: OpenAgentToolsSessionInput<LinearIntegrationConnection, LinearAgentToolRequiredScope>): Promise<AgentToolSession<CallToolResult>>;
+}
+export {};
+//# sourceMappingURL=agent-tools-provider.d.ts.map

package/dist/core/agent-tools-provider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-tools-provider.d.ts","sourceRoot":"","sources":["../../src/core/agent-tools-provider.ts"],"names":[],"mappings":"AAGA,OAAO,EAAC,KAAK,cAAc,EAAuB,MAAM,oCAAoC,CAAC;AAC7F,OAAO,KAAK,EACV,kBAAkB,EAClB,gBAAgB,EAChB,kBAAkB,EAClB,qBAAqB,EACrB,0BAA0B,EAC3B,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EACL,KAAK,4BAA4B,EAGlC,MAAM,sBAAsB,CAAC;AAC9B,OAAO,KAAK,EAAC,gBAAgB,EAAC,MAAM,iBAAiB,CAAC;AAKtD,KAAK,2BAA2B,GAAG,qBAAqB,CAAC,QAAQ,CAAC,CAAC;AAEnE,UAAU,eAAe;IACvB,QAAQ,CAAC,KAAK,EAAE,kBAAkB,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IAChF,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAED,UAAU,2BAA2B;IACnC,QAAQ,EAAE,GAAG,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,KAAK,qBAAqB,GAAG,CAAC,MAAM,EAAE,2BAA2B,KAAK,OAAO,CAAC,eAAe,CAAC,CAAC;AAE/F,MAAM,WAAW,+BAA+B;IAC9C,UAAU,EAAE,IAAI,CAAC,gBAAgB,EAAE,gBAAgB,CAAC,CAAC;IACrD,QAAQ,CAAC,EAAE,MAAM,GAAG,GAAG,GAAG,SAAS,CAAC;IACpC,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,YAAY,CAAC,EAAE,qBAAqB,GAAG,SAAS,CAAC;CAClD;AAED,qBAAa,wBACX,YAAW,kBAAkB,CAAC,2BAA2B,EAAE,4BAA4B,CAAC;IAM5E,OAAO,CAAC,QAAQ,CAAC,OAAO;IAJpC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAM;IAC/B,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAS;IACvC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAwB;gBAExB,OAAO,EAAE,+BAA+B;IAMrE,OAAO;IAIP,gBAAgB;IAIV,WAAW,CACf,KAAK,EAAE,0BAA0B,CAAC,2BAA2B,EAAE,4BAA4B,CAAC,GAC3F,OAAO,CAAC,gBAAgB,CAAC,cAAc,CAAC,CAAC;CAW7C"}

package/dist/core/agent-tools-provider.js

@@ -0,0 +1,63 @@
+import { Client } from '@modelcontextprotocol/sdk/client/index.js';
+import { StreamableHTTPClientTransport } from '@modelcontextprotocol/sdk/client/streamableHttp.js';
+import { CallToolResultSchema } from '@modelcontextprotocol/sdk/types.js';
+import { linearAgentToolCatalog, linearAgentToolSelectionCatalog } from '#core/agent-tools.js';
+const LINEAR_MCP_ENDPOINT = 'https://mcp.linear.app/mcp';
+const LINEAR_MCP_CALL_TIMEOUT_MS = 30_000;
+export class LinearAgentToolsProvider {
+    constructor(options){
+        this.options = options;
+        this.endpoint = new URL(options.endpoint ?? LINEAR_MCP_ENDPOINT);
+        this.callTimeoutMs = options.callTimeoutMs ?? LINEAR_MCP_CALL_TIMEOUT_MS;
+        this.createClient = options.createClient ?? createSdkLinearMcpClient;
+    }
+    catalog() {
+        return linearAgentToolCatalog;
+    }
+    selectionCatalog() {
+        return linearAgentToolSelectionCatalog;
+    }
+    async openSession(input) {
+        const accessToken = await this.options.tokenStore.getAccessToken({
+            connectionId: input.connection.id
+        });
+        const client = await this.createClient({
+            endpoint: this.endpoint,
+            accessToken
+        });
+        return {
+            call: (call)=>client.callTool(call, this.callTimeoutMs),
+            close: ()=>client.close()
+        };
+    }
+}
+async function createSdkLinearMcpClient(params) {
+    const client = new Client({
+        name: 'shipfox-linear-tools',
+        version: '0.0.0'
+    });
+    const transport = new StreamableHTTPClientTransport(params.endpoint, {
+        requestInit: {
+            headers: {
+                authorization: `Bearer ${params.accessToken}`
+            }
+        }
+    });
+    await client.connect(transport);
+    return {
+        callTool: async (input, timeoutMs)=>{
+            const result = await client.callTool({
+                name: input.toolId,
+                arguments: input.arguments
+            }, CallToolResultSchema, {
+                timeout: timeoutMs
+            });
+            return result;
+        },
+        close: async ()=>{
+            await client.close();
+        }
+    };
+}
+
+//# sourceMappingURL=agent-tools-provider.js.map

package/dist/core/agent-tools-provider.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/core/agent-tools-provider.ts"],"sourcesContent":["import {Client} from '@modelcontextprotocol/sdk/client/index.js';\nimport {StreamableHTTPClientTransport} from '@modelcontextprotocol/sdk/client/streamableHttp.js';\nimport type {Transport} from '@modelcontextprotocol/sdk/shared/transport.js';\nimport {type CallToolResult, CallToolResultSchema} from '@modelcontextprotocol/sdk/types.js';\nimport type {\n  AgentToolCallInput,\n  AgentToolSession,\n  AgentToolsProvider,\n  IntegrationConnection,\n  OpenAgentToolsSessionInput,\n} from '@shipfox/api-integration-core-dto';\nimport {\n  type LinearAgentToolRequiredScope,\n  linearAgentToolCatalog,\n  linearAgentToolSelectionCatalog,\n} from '#core/agent-tools.js';\nimport type {LinearTokenStore} from '#core/tokens.js';\n\nconst LINEAR_MCP_ENDPOINT = 'https://mcp.linear.app/mcp';\nconst LINEAR_MCP_CALL_TIMEOUT_MS = 30_000;\n\ntype LinearIntegrationConnection = IntegrationConnection<'linear'>;\n\ninterface LinearMcpClient {\n  callTool(input: AgentToolCallInput, timeoutMs: number): Promise<CallToolResult>;\n  close(): Promise<void>;\n}\n\ninterface CreateLinearMcpClientParams {\n  endpoint: URL;\n  accessToken: string;\n}\n\ntype CreateLinearMcpClient = (params: CreateLinearMcpClientParams) => Promise<LinearMcpClient>;\n\nexport interface LinearAgentToolsProviderOptions {\n  tokenStore: Pick<LinearTokenStore, 'getAccessToken'>;\n  endpoint?: string | URL | undefined;\n  callTimeoutMs?: number | undefined;\n  createClient?: CreateLinearMcpClient | undefined;\n}\n\nexport class LinearAgentToolsProvider\n  implements AgentToolsProvider<LinearIntegrationConnection, LinearAgentToolRequiredScope>\n{\n  private readonly endpoint: URL;\n  private readonly callTimeoutMs: number;\n  private readonly createClient: CreateLinearMcpClient;\n\n  constructor(private readonly options: LinearAgentToolsProviderOptions) {\n    this.endpoint = new URL(options.endpoint ?? LINEAR_MCP_ENDPOINT);\n    this.callTimeoutMs = options.callTimeoutMs ?? LINEAR_MCP_CALL_TIMEOUT_MS;\n    this.createClient = options.createClient ?? createSdkLinearMcpClient;\n  }\n\n  catalog() {\n    return linearAgentToolCatalog;\n  }\n\n  selectionCatalog() {\n    return linearAgentToolSelectionCatalog;\n  }\n\n  async openSession(\n    input: OpenAgentToolsSessionInput<LinearIntegrationConnection, LinearAgentToolRequiredScope>,\n  ): Promise<AgentToolSession<CallToolResult>> {\n    const accessToken = await this.options.tokenStore.getAccessToken({\n      connectionId: input.connection.id,\n    });\n    const client = await this.createClient({endpoint: this.endpoint, accessToken});\n\n    return {\n      call: (call) => client.callTool(call, this.callTimeoutMs),\n      close: () => client.close(),\n    };\n  }\n}\n\nasync function createSdkLinearMcpClient(\n  params: CreateLinearMcpClientParams,\n): Promise<LinearMcpClient> {\n  const client = new Client({name: 'shipfox-linear-tools', version: '0.0.0'});\n  const transport = new StreamableHTTPClientTransport(params.endpoint, {\n    requestInit: {\n      headers: {authorization: `Bearer ${params.accessToken}`},\n    },\n  });\n\n  await client.connect(transport as unknown as Transport);\n\n  return {\n    callTool: async (input, timeoutMs) => {\n      const result = await client.callTool(\n        {name: input.toolId, arguments: input.arguments},\n        CallToolResultSchema,\n        {\n          timeout: timeoutMs,\n        },\n      );\n      return result as CallToolResult;\n    },\n    close: async () => {\n      await client.close();\n    },\n  };\n}\n"],"names":["Client","StreamableHTTPClientTransport","CallToolResultSchema","linearAgentToolCatalog","linearAgentToolSelectionCatalog","LINEAR_MCP_ENDPOINT","LINEAR_MCP_CALL_TIMEOUT_MS","LinearAgentToolsProvider","options","endpoint","URL","callTimeoutMs","createClient","createSdkLinearMcpClient","catalog","selectionCatalog","openSession","input","accessToken","tokenStore","getAccessToken","connectionId","connection","id","client","call","callTool","close","params","name","version","transport","requestInit","headers","authorization","connect","timeoutMs","result","toolId","arguments","timeout"],"mappings":"AAAA,SAAQA,MAAM,QAAO,4CAA4C;AACjE,SAAQC,6BAA6B,QAAO,qDAAqD;AAEjG,SAA6BC,oBAAoB,QAAO,qCAAqC;AAQ7F,SAEEC,sBAAsB,EACtBC,+BAA+B,QAC1B,uBAAuB;AAG9B,MAAMC,sBAAsB;AAC5B,MAAMC,6BAA6B;AAuBnC,OAAO,MAAMC;IAOX,YAAY,AAAiBC,OAAwC,CAAE;aAA1CA,UAAAA;QAC3B,IAAI,CAACC,QAAQ,GAAG,IAAIC,IAAIF,QAAQC,QAAQ,IAAIJ;QAC5C,IAAI,CAACM,aAAa,GAAGH,QAAQG,aAAa,IAAIL;QAC9C,IAAI,CAACM,YAAY,GAAGJ,QAAQI,YAAY,IAAIC;IAC9C;IAEAC,UAAU;QACR,OAAOX;IACT;IAEAY,mBAAmB;QACjB,OAAOX;IACT;IAEA,MAAMY,YACJC,KAA4F,EACjD;QAC3C,MAAMC,cAAc,MAAM,IAAI,CAACV,OAAO,CAACW,UAAU,CAACC,cAAc,CAAC;YAC/DC,cAAcJ,MAAMK,UAAU,CAACC,EAAE;QACnC;QACA,MAAMC,SAAS,MAAM,IAAI,CAACZ,YAAY,CAAC;YAACH,UAAU,IAAI,CAACA,QAAQ;YAAES;QAAW;QAE5E,OAAO;YACLO,MAAM,CAACA,OAASD,OAAOE,QAAQ,CAACD,MAAM,IAAI,CAACd,aAAa;YACxDgB,OAAO,IAAMH,OAAOG,KAAK;QAC3B;IACF;AACF;AAEA,eAAed,yBACbe,MAAmC;IAEnC,MAAMJ,SAAS,IAAIxB,OAAO;QAAC6B,MAAM;QAAwBC,SAAS;IAAO;IACzE,MAAMC,YAAY,IAAI9B,8BAA8B2B,OAAOnB,QAAQ,EAAE;QACnEuB,aAAa;YACXC,SAAS;gBAACC,eAAe,CAAC,OAAO,EAAEN,OAAOV,WAAW,EAAE;YAAA;QACzD;IACF;IAEA,MAAMM,OAAOW,OAAO,CAACJ;IAErB,OAAO;QACLL,UAAU,OAAOT,OAAOmB;YACtB,MAAMC,SAAS,MAAMb,OAAOE,QAAQ,CAClC;gBAACG,MAAMZ,MAAMqB,MAAM;gBAAEC,WAAWtB,MAAMsB,SAAS;YAAA,GAC/CrC,sBACA;gBACEsC,SAASJ;YACX;YAEF,OAAOC;QACT;QACAV,OAAO;YACL,MAAMH,OAAOG,KAAK;QACpB;IACF;AACF"}