@skillrecordings/cli 0.16.0 → 0.17.0

package/dist/index.js

@@ -20,8 +20,9 @@ import {
   runPipeline,
   validate,
   validateSync
-} from "./chunk-A5RBWKVF.js";
+} from "./chunk-J4IC3GC3.js";
 import "./chunk-HK3PEWFD.js";
+import "./chunk-WYKL32C3.js";
 import {
   createFilterStats,
   formatFilterStats,
@@ -39,20 +40,26 @@ import {
   getApp,
   getOutcomeHistory,
   getRedis
-} from "./chunk-L6YTBYNV.js";
+} from "./chunk-IR6KG25Y.js";
 import "./chunk-KEV3QKXP.js";
-import "./chunk-ZNF7XD2S.js";
-import {
-  upsertVector
-} from "./chunk-H3D6VCME.js";
-import "./chunk-F4EM72IH.js";
-import "./chunk-WYKL32C3.js";
 import {
   MemoryService,
   VotingService,
   calculateConfidence
 } from "./chunk-MLNDSBZ4.js";
+import "./chunk-ZNF7XD2S.js";
+import {
+  upsertVector
+} from "./chunk-H3D6VCME.js";
 import "./chunk-MG37YDAK.js";
+import "./chunk-F4EM72IH.js";
+import {
+  addShellIntegration,
+  autoBootstrapKeychain,
+  getKeychainStatus,
+  isKeychainSupported,
+  storeInKeychain
+} from "./chunk-7SQU7KCI.js";
 import {
   OnePasswordProvider,
   SECRET_REFS,
@@ -74630,19 +74637,43 @@ async function decryptEnvFile(encryptedPath) {
   }
 }
 async function getAgeKeyFrom1Password() {
-  if (!process.env.OP_SERVICE_ACCOUNT_TOKEN) {
-    return null;
+  if (process.env.SKILL_AGE_KEY) {
+    return process.env.SKILL_AGE_KEY;
   }
   try {
-    const { OnePasswordProvider: OnePasswordProvider2 } = await import("./secrets-MGVPGMFJ.js");
-    const op = new OnePasswordProvider2();
-    if (!await op.isAvailable()) {
-      return null;
+    const { getFromKeychain, storeInKeychain: storeInKeychain2, autoBootstrapKeychain: autoBootstrapKeychain2 } = await import("./keychain-IEZHT5WN.js");
+    const fromKeychain = getFromKeychain("age-private-key");
+    if (fromKeychain) return fromKeychain;
+    let opToken = process.env.OP_SERVICE_ACCOUNT_TOKEN;
+    if (!opToken) {
+      opToken = autoBootstrapKeychain2() ?? void 0;
+    }
+    if (opToken) {
+      const originalEnv = process.env.OP_SERVICE_ACCOUNT_TOKEN;
+      process.env.OP_SERVICE_ACCOUNT_TOKEN = opToken;
+      try {
+        const { OnePasswordProvider: OnePasswordProvider2 } = await import("./secrets-MGVPGMFJ.js");
+        const op = new OnePasswordProvider2();
+        if (await op.isAvailable()) {
+          const key = await op.resolve(
+            "op://Support/skill-cli-age-key/private_key"
+          );
+          if (key) {
+            storeInKeychain2("age-private-key", key);
+            return key;
+          }
+        }
+      } finally {
+        if (originalEnv) {
+          process.env.OP_SERVICE_ACCOUNT_TOKEN = originalEnv;
+        } else {
+          delete process.env.OP_SERVICE_ACCOUNT_TOKEN;
+        }
+      }
     }
-    return await op.resolve("op://Support/skill-cli-age-key/private_key");
   } catch {
-    return null;
   }
+  return null;
 }
 async function loadShippedDefaults(cliRoot2) {
   const encryptedPath = resolve(cliRoot2, ".env.encrypted");
@@ -74719,19 +74750,19 @@ var ROOT_DESCRIPTIONS = {
   minimal: "Skill Recordings support agent CLI. Try: skill wizard, skill keys, skill front inbox, skill front triage. Use --help for details."
 };
 var FRONT_DESCRIPTIONS = {
-  full: "Front conversations, inboxes, tags, archival, and reporting.\n\n  Prerequisites:\n    FRONT_API_TOKEN must be set. Run: skill auth setup\n\n  Start here:\n    skill front inbox                    See unassigned conversations\n    skill front inbox support             List conversations in a specific inbox\n    skill front triage                    AI-powered categorization of inbox items\n\n  Investigate a conversation:\n    skill front conversation <id> -m      Full conversation with messages\n    skill front message <id>              Single message details + body\n\n  Take action:\n    skill front assign <id>               Assign to a teammate\n    skill front reply <id>                Draft a reply (HITL, never auto-sends)\n    skill front tag <id>                  Add a tag\n    skill front archive <id>              Archive a resolved conversation\n\n  Bulk operations:\n    skill front bulk-archive              Archive old/spam conversations\n    skill front report                    Volume + tag + sender forensics\n\n  All commands accept --json for HATEOAS-enriched output with _links and _actions.",
-  abbreviated: "Front API workflows for inbox triage and conversation actions.\n\n  Common:\n    skill front inbox\n    skill front triage\n    skill front conversation <id> -m\n    skill front reply <id>\n    skill front archive <id>\n\n  Requires FRONT_API_TOKEN (skill auth setup).",
-  minimal: "Front API commands (inbox, triage, assign, reply, archive). Requires FRONT_API_TOKEN."
+  full: "Front conversations, inboxes, tags, archival, and reporting.\n\n  Start here:\n    skill front inbox                    See unassigned conversations\n    skill front inbox support             List conversations in a specific inbox\n    skill front triage                    AI-powered categorization of inbox items\n\n  Investigate a conversation:\n    skill front conversation <id> -m      Full conversation with messages\n    skill front message <id>              Single message details + body\n\n  Take action:\n    skill front assign <id>               Assign to a teammate\n    skill front reply <id>                Draft a reply (HITL, never auto-sends)\n    skill front tag <id>                  Add a tag\n    skill front archive <id>              Archive a resolved conversation\n\n  Bulk operations:\n    skill front bulk-archive              Archive old/spam conversations\n    skill front report                    Volume + tag + sender forensics\n\n  All commands accept --json for HATEOAS-enriched output with _links and _actions.",
+  abbreviated: "Front API workflows for inbox triage and conversation actions.\n\n  Common:\n    skill front inbox\n    skill front triage\n    skill front conversation <id> -m\n    skill front reply <id>\n    skill front archive <id>",
+  minimal: "Front API commands (inbox, triage, assign, reply, archive)."
 };
 var AUTH_DESCRIPTIONS = {
-  full: "Manage CLI authentication and secrets.\n\n  First time? Start here:\n    skill auth setup          Interactive wizard \u2014 connects to 1Password vault,\n                              configures FRONT_API_TOKEN, DATABASE_URL, and more.\n                              Requires: `op` CLI installed (brew install 1password-cli)\n\n  Check your setup:\n    skill auth status          Shows which secrets are configured and which are missing\n    skill auth whoami          Verify your 1Password service account identity\n\n  All Skill Recordings employees have access to the Support vault in 1Password.\n  The setup wizard handles everything \u2014 no manual token pasting needed.",
-  abbreviated: "Manage CLI authentication and 1Password secrets.\n\n  Start:\n    skill auth setup\n    skill auth status\n    skill auth whoami\n\n  Requires the 1Password CLI (`op`).",
-  minimal: "Auth and 1Password setup commands."
+  full: "View CLI authentication status.\n\n  Check your setup:\n    skill auth status          Shows which secrets are loaded\n    skill auth whoami          Verify your 1Password service account identity\n\n  API keys ship with the CLI (encrypted). To override with personal keys:\n    skill keys                  Manage personal API key overrides",
+  abbreviated: "View CLI authentication status.\n\n  Commands:\n    skill auth status\n    skill auth whoami",
+  minimal: "Auth status commands (auth status, auth whoami)."
 };
 var INNGEST_DESCRIPTIONS = {
-  full: "Inngest event and workflow commands.\n\n  Debug pipeline runs:\n    skill inngest runs --status failed --after 1h    Recent failures\n    skill inngest events --after 12h                 Recent events\n    skill inngest investigate <run-id>                Deep-dive a specific run\n\n  Requires: INNGEST_SIGNING_KEY, INNGEST_EVENT_KEY in env",
-  abbreviated: "Inngest events and workflow runs.\n\n  Common:\n    skill inngest runs --status failed --after 1h\n    skill inngest events --after 12h\n    skill inngest investigate <run-id>\n\n  Requires INNGEST_SIGNING_KEY, INNGEST_EVENT_KEY.",
-  minimal: "Inngest events and runs debugging. Requires INNGEST_SIGNING_KEY and INNGEST_EVENT_KEY."
+  full: "Inngest event and workflow commands.\n\n  Debug pipeline runs:\n    skill inngest runs --status failed --after 1h    Recent failures\n    skill inngest events --after 12h                 Recent events\n    skill inngest investigate <run-id>                Deep-dive a specific run",
+  abbreviated: "Inngest events and workflow runs.\n\n  Common:\n    skill inngest runs --status failed --after 1h\n    skill inngest events --after 12h\n    skill inngest investigate <run-id>",
+  minimal: "Inngest events and runs debugging."
 };
 var GROUP_DESCRIPTIONS = {
   root: ROOT_DESCRIPTIONS,
@@ -75667,6 +75698,74 @@ function registerAuthCommands(program3, usageState2) {
 // src/commands/axiom/index.ts
 init_esm_shims();
 
+// src/core/spinner.ts
+init_esm_shims();
+var FRAMES = ["\u280B", "\u2819", "\u2839", "\u2838", "\u283C", "\u2834", "\u2826", "\u2827", "\u2807", "\u280F"];
+var INTERVAL = 80;
+function createSpinner() {
+  const isTTY = process.stderr.isTTY && !process.env.CI;
+  let interval = null;
+  let frameIndex = 0;
+  let currentMessage = "";
+  const clear = () => {
+    if (!isTTY) return;
+    process.stderr.write("\r\x1B[K");
+  };
+  const render3 = () => {
+    if (!isTTY) return;
+    const frame = FRAMES[frameIndex];
+    process.stderr.write(`\r${frame} ${currentMessage}`);
+    frameIndex = (frameIndex + 1) % FRAMES.length;
+  };
+  const start = (message = "Loading...") => {
+    if (!isTTY) return;
+    currentMessage = message;
+    frameIndex = 0;
+    render3();
+    interval = setInterval(render3, INTERVAL);
+  };
+  const update2 = (message) => {
+    currentMessage = message;
+    if (isTTY && !interval) {
+      render3();
+    }
+  };
+  const stop = () => {
+    if (interval) {
+      clearInterval(interval);
+      interval = null;
+    }
+    clear();
+  };
+  const succeed = (message) => {
+    stop();
+    if (isTTY && message) {
+      process.stderr.write(`\u2713 ${message}
+`);
+    }
+  };
+  const fail = (message) => {
+    stop();
+    if (isTTY && message) {
+      process.stderr.write(`\u2717 ${message}
+`);
+    }
+  };
+  return { start, update: update2, stop, succeed, fail };
+}
+async function withSpinner(message, fn) {
+  const spinner = createSpinner();
+  spinner.start(message);
+  try {
+    const result = await fn();
+    spinner.stop();
+    return result;
+  } catch (error) {
+    spinner.stop();
+    throw error;
+  }
+}
+
 // src/lib/axiom-client.ts
 init_esm_shims();
 import { Axiom } from "@axiomhq/js";
@@ -76365,10 +76464,13 @@ async function runQuery(ctx, apl, options) {
   const { startTime, endTime } = parseTimeRange(options.since ?? "24h");
   const outputJson = options.json === true || ctx.format === "json";
   try {
-    const result = await client.query(apl, {
-      startTime: startTime.toISOString(),
-      endTime: endTime.toISOString()
-    });
+    const result = await withSpinner(
+      "Running query...",
+      () => client.query(apl, {
+        startTime: startTime.toISOString(),
+        endTime: endTime.toISOString()
+      })
+    );
     if (outputJson) {
       ctx.output.data(result);
       return;
@@ -76412,10 +76514,13 @@ async function listAgentRuns(ctx, options) {
 | sort by _time desc
 | limit ${limit2}`;
   try {
-    const result = await client.query(apl, {
-      startTime: startTime.toISOString(),
-      endTime: endTime.toISOString()
-    });
+    const result = await withSpinner(
+      "Loading agent runs...",
+      () => client.query(apl, {
+        startTime: startTime.toISOString(),
+        endTime: endTime.toISOString()
+      })
+    );
     const matches = result.matches ?? [];
     if (outputJson) {
       ctx.output.data(matches.map((m) => m.data));
@@ -76469,10 +76574,13 @@ async function listErrors(ctx, options) {
 | sort by _time desc
 | limit ${limit2}`;
   try {
-    const result = await client.query(apl, {
-      startTime: startTime.toISOString(),
-      endTime: endTime.toISOString()
-    });
+    const result = await withSpinner(
+      "Loading errors...",
+      () => client.query(apl, {
+        startTime: startTime.toISOString(),
+        endTime: endTime.toISOString()
+      })
+    );
     const matches = result.matches ?? [];
     if (outputJson) {
       ctx.output.data(matches.map((m) => m.data));
@@ -76509,10 +76617,13 @@ async function getConversation(ctx, conversationId, options) {
 | where conversationId == '${conversationId}'
 | sort by _time asc`;
   try {
-    const result = await client.query(apl, {
-      startTime: startTime.toISOString(),
-      endTime: endTime.toISOString()
-    });
+    const result = await withSpinner(
+      "Loading conversation...",
+      () => client.query(apl, {
+        startTime: startTime.toISOString(),
+        endTime: endTime.toISOString()
+      })
+    );
     const matches = result.matches ?? [];
     if (outputJson) {
       ctx.output.data(
@@ -76568,10 +76679,13 @@ async function getClassificationStats(ctx, options) {
   apl += `
 | summarize count = count() by category, complexity`;
   try {
-    const result = await client.query(apl, {
-      startTime: startTime.toISOString(),
-      endTime: endTime.toISOString()
-    });
+    const result = await withSpinner(
+      "Loading classifications...",
+      () => client.query(apl, {
+        startTime: startTime.toISOString(),
+        endTime: endTime.toISOString()
+      })
+    );
     const buckets = result.buckets?.totals ?? [];
     if (outputJson) {
       ctx.output.data(buckets);
@@ -76631,10 +76745,13 @@ async function listWorkflowSteps(ctx, options) {
 | sort by _time desc
 | limit ${limit2}`;
   try {
-    const result = await client.query(apl, {
-      startTime: startTime.toISOString(),
-      endTime: endTime.toISOString()
-    });
+    const result = await withSpinner(
+      "Loading workflow steps...",
+      () => client.query(apl, {
+        startTime: startTime.toISOString(),
+        endTime: endTime.toISOString()
+      })
+    );
     const matches = result.matches ?? [];
     if (outputJson) {
       ctx.output.data(matches.map((m) => m.data));
@@ -76677,10 +76794,13 @@ async function listApprovals(ctx, options) {
 | sort by _time desc
 | limit ${limit2}`;
   try {
-    const result = await client.query(apl, {
-      startTime: startTime.toISOString(),
-      endTime: endTime.toISOString()
-    });
+    const result = await withSpinner(
+      "Loading approvals...",
+      () => client.query(apl, {
+        startTime: startTime.toISOString(),
+        endTime: endTime.toISOString()
+      })
+    );
     const matches = result.matches ?? [];
     if (outputJson) {
       ctx.output.data(matches.map((m) => m.data));
@@ -81226,7 +81346,7 @@ async function runValidateEval(ctx, scenarios, options) {
   return results;
 }
 async function runE2EEval(ctx, scenarios, options) {
-  const { runPipeline: runPipeline2 } = await import("./pipeline-FGI6ICWM.js");
+  const { runPipeline: runPipeline2 } = await import("./pipeline-TMFQSA7X.js");
   const concurrency = options.parallel || 1;
   let completed = 0;
   const outputJson = options.outputJson ?? false;
@@ -94707,7 +94827,10 @@ async function listInboxes(ctx, options) {
   const idsOnly = options.idsOnly === true;
   try {
     const front = getFrontClient(ctx);
-    const inboxList = await front.inboxes.list();
+    const inboxList = await withSpinner(
+      "Loading inboxes...",
+      () => front.inboxes.list()
+    );
     const inboxes = inboxList._results ?? [];
     if (idsOnly) {
       for (const inbox of inboxes) {
@@ -94771,7 +94894,10 @@ async function listConversations(ctx, inboxNameOrId, options) {
   const idsOnly = options.idsOnly === true;
   try {
     const front = getFrontClient(ctx);
-    const inbox = await findInbox(ctx, inboxNameOrId);
+    const inbox = await withSpinner(
+      "Finding inbox...",
+      () => findInbox(ctx, inboxNameOrId)
+    );
     if (!inbox) {
       throw new CLIError({
         userMessage: `Inbox not found: ${inboxNameOrId}`,
@@ -97235,7 +97361,10 @@ async function listEvents(ctx, options) {
       });
     }
     params.limit = limit2;
-    const response = await client.listEvents(params);
+    const response = await withSpinner(
+      "Loading events...",
+      () => client.listEvents(params)
+    );
     if (outputJson) {
       ctx.output.data(response.data);
     } else {
@@ -97258,10 +97387,10 @@ async function getEvent(ctx, id, options) {
   const outputJson = options.json === true || ctx.format === "json";
   try {
     const client = new InngestClient({ dev: options.dev });
-    const [event, runs] = await Promise.all([
-      client.getEvent(id),
-      client.getEventRuns(id)
-    ]);
+    const [event, runs] = await withSpinner(
+      "Loading event...",
+      () => Promise.all([client.getEvent(id), client.getEventRuns(id)])
+    );
     if (outputJson) {
       ctx.output.data({ event, runs });
     } else {
@@ -97691,7 +97820,7 @@ async function runCommand(ctx, id, options) {
   try {
     const isDev = options.dev ?? await detectDevServer();
     const client = new InngestClient({ dev: isDev });
-    const run3 = await client.getRun(id);
+    const run3 = await withSpinner("Loading run...", () => client.getRun(id));
     if (outputJson) {
       ctx.output.data(run3);
     } else {
@@ -114094,14 +114223,138 @@ function registerKeysCommands(program3) {
       }
     }
   });
+  keys.command("setup").description("Set up keychain + shell integration (tries everything)").option("--json", "Output as JSON").action(async (options, command) => {
+    const ctx = await buildContext4(command, options.json);
+    const outputJson = options.json || ctx.format === "json";
+    const OP_VAULT_LINK = "https://start.1password.com/open/i?a=GCTJE4MRGFHKRAYXCEXKZKCEFU&v=u3ujzar6l3nahlahsuzfvg7vcq&i=3e4ip354ps3mhq2wwt6vmtm2zu&h=egghead.1password.com";
+    const status = getKeychainStatus();
+    const steps = [];
+    const errors2 = [];
+    if (status.opTokenInKeychain && status.ageKeyInKeychain && status.shellIntegration) {
+      if (outputJson) {
+        ctx.output.data({ success: true, status: "configured" });
+      } else {
+        ctx.output.data("\u2713 Already configured");
+      }
+      return;
+    }
+    let opToken = null;
+    if (process.env.OP_SERVICE_ACCOUNT_TOKEN) {
+      opToken = process.env.OP_SERVICE_ACCOUNT_TOKEN;
+      steps.push("\u2713 OP token from env");
+    }
+    if (!opToken) {
+      const { getFromKeychain } = await import("./keychain-IEZHT5WN.js");
+      opToken = getFromKeychain("op-service-account-token");
+      if (opToken) steps.push("\u2713 OP token from keychain");
+    }
+    if (!opToken && status.opCliAvailable) {
+      opToken = autoBootstrapKeychain();
+      if (opToken) steps.push("\u2713 OP token from op CLI");
+    }
+    if (opToken && !status.opTokenInKeychain && isKeychainSupported()) {
+      if (storeInKeychain("op-service-account-token", opToken)) {
+        steps.push("\u2713 OP token \u2192 keychain");
+      } else {
+        errors2.push("Could not store OP token in keychain");
+      }
+    }
+    let ageKey = null;
+    if (process.env.SKILL_AGE_KEY) {
+      ageKey = process.env.SKILL_AGE_KEY;
+      steps.push("\u2713 Age key from env");
+    }
+    if (!ageKey) {
+      const { getFromKeychain } = await import("./keychain-IEZHT5WN.js");
+      ageKey = getFromKeychain("age-private-key");
+      if (ageKey) steps.push("\u2713 Age key from keychain");
+    }
+    if (!ageKey && opToken) {
+      const originalEnv = process.env.OP_SERVICE_ACCOUNT_TOKEN;
+      process.env.OP_SERVICE_ACCOUNT_TOKEN = opToken;
+      try {
+        const { OnePasswordProvider: OnePasswordProvider2 } = await import("./secrets-MGVPGMFJ.js");
+        const op = new OnePasswordProvider2();
+        if (await op.isAvailable()) {
+          ageKey = await op.resolve(
+            "op://Support/skill-cli-age-key/private_key"
+          );
+          if (ageKey) steps.push("\u2713 Age key from 1Password");
+        }
+      } catch {
+        errors2.push("1Password SDK failed");
+      } finally {
+        if (originalEnv) {
+          process.env.OP_SERVICE_ACCOUNT_TOKEN = originalEnv;
+        } else {
+          delete process.env.OP_SERVICE_ACCOUNT_TOKEN;
+        }
+      }
+    }
+    if (ageKey && !status.ageKeyInKeychain && isKeychainSupported()) {
+      if (storeInKeychain("age-private-key", ageKey)) {
+        steps.push("\u2713 Age key \u2192 keychain");
+      } else {
+        errors2.push("Could not store age key in keychain");
+      }
+    }
+    if (!status.shellIntegration && isKeychainSupported()) {
+      const r = addShellIntegration();
+      if (r.success) {
+        steps.push(`\u2713 Shell \u2192 ${r.path}`);
+      } else {
+        errors2.push(`Shell integration: ${r.error}`);
+      }
+    }
+    const finalStatus = getKeychainStatus();
+    const success = finalStatus.opTokenInKeychain && finalStatus.ageKeyInKeychain;
+    if (outputJson) {
+      ctx.output.data({ success, steps, errors: errors2, status: finalStatus });
+      return;
+    }
+    for (const s of steps) {
+      ctx.output.data(s);
+    }
+    if (success) {
+      ctx.output.data("");
+      ctx.output.data("\u2713 Done! Run: source ~/.zshrc");
+      return;
+    }
+    ctx.output.data("");
+    ctx.output.data("\u2500".repeat(50));
+    ctx.output.data("Could not complete automatic setup. Manual steps:");
+    ctx.output.data("");
+    if (!opToken) {
+      ctx.output.data("1. Get OP_SERVICE_ACCOUNT_TOKEN:");
+      ctx.output.data(`   open "${OP_VAULT_LINK}"`);
+      ctx.output.data('   Copy the "credential" field');
+      ctx.output.data("");
+      ctx.output.data("2. Add to ~/.zshrc:");
+      ctx.output.data('   export OP_SERVICE_ACCOUNT_TOKEN="<paste>"');
+      ctx.output.data("");
+    }
+    if (!ageKey) {
+      ctx.output.data("3. Get age key (requires OP token):");
+      ctx.output.data(
+        '   op read "op://Support/skill-cli-age-key/private_key"'
+      );
+      ctx.output.data("");
+      ctx.output.data("4. Add to ~/.zshrc:");
+      ctx.output.data('   export SKILL_AGE_KEY="<paste>"');
+      ctx.output.data("");
+    }
+    if (!isKeychainSupported()) {
+      ctx.output.data(
+        "Note: No keychain on this platform. Use env vars instead."
+      );
+    }
+    ctx.output.data("Then run: source ~/.zshrc");
+  });
 }
 
 // src/commands/linear/index.ts
 init_esm_shims();
 
-// src/commands/linear/assign.ts
-init_esm_shims();
-
 // src/core/write-gate.ts
 init_esm_shims();
 function requirePersonalKey(keyName) {
@@ -114117,6 +114370,9 @@ function requirePersonalKey(keyName) {
   });
 }
 
+// src/commands/linear/assign.ts
+init_esm_shims();
+
 // src/commands/linear/client.ts
 init_esm_shims();
 import { LinearClient } from "@linear/sdk";
@@ -115561,26 +115817,31 @@ async function listMyIssues(ctx, options = {}) {
   const limit2 = options.limit || 20;
   try {
     const client = getLinearClient();
-    const viewer = await client.viewer;
-    const filter4 = {
-      assignee: { id: { eq: viewer.id } },
-      state: {
-        type: {
-          nin: ["canceled", "completed"]
+    const { viewer, issues } = await withSpinner(
+      "Loading issues...",
+      async () => {
+        const viewer2 = await client.viewer;
+        const filter4 = {
+          assignee: { id: { eq: viewer2.id } },
+          state: {
+            type: {
+              nin: ["canceled", "completed"]
+            }
+          }
+        };
+        if (options.state) {
+          filter4.state = {
+            ...filter4.state || {},
+            name: { eqIgnoreCase: options.state }
+          };
         }
+        const response = await client.issues({
+          first: limit2,
+          filter: filter4
+        });
+        return { viewer: viewer2, issues: response.nodes || [] };
       }
-    };
-    if (options.state) {
-      filter4.state = {
-        ...filter4.state || {},
-        name: { eqIgnoreCase: options.state }
-      };
-    }
-    const response = await client.issues({
-      first: limit2,
-      filter: filter4
-    });
-    const issues = response.nodes || [];
+    );
     const issuesWithDetails = await Promise.all(
       issues.map(async (issue) => ({
         issue,
@@ -115759,9 +116020,12 @@ async function searchIssues(ctx, query, options = {}) {
   const limit2 = options.limit || 20;
   try {
     const client = getLinearClient();
-    const response = await client.searchIssues(query.trim(), {
-      first: limit2
-    });
+    const response = await withSpinner(
+      "Searching issues...",
+      () => client.searchIssues(query.trim(), {
+        first: limit2
+      })
+    );
     const issues = response.nodes || [];
     const issuesWithDetails = await Promise.all(
       issues.map(async (issue) => ({
@@ -116050,7 +116314,7 @@ init_esm_shims();
 async function listTeams(ctx, options = {}) {
   try {
     const client = getLinearClient();
-    const response = await client.teams();
+    const response = await withSpinner("Loading teams...", () => client.teams());
     const teams = response.nodes || [];
     if (ctx.format === "json") {
       ctx.output.data(
@@ -116318,7 +116582,9 @@ Quick start:
   skill linear create "Title"        Create issue
   skill linear search "query"        Search issues
 
-All commands support --json for machine-readable output.`
+All commands support --json for machine-readable output.
+
+\u26A0\uFE0F  Write operations require personal LINEAR_API_KEY (run 'skill keys add').`
   );
   linear.command("issues").description(
     `List issues with optional filters
@@ -116348,6 +116614,7 @@ Examples:
   skill linear my --state "In Progress"  Only in-progress
   skill linear my --limit 5           Just top 5`
   ).option("--limit <number>", "Maximum results (default: 20)", "20").option("--state <name>", "Filter by state name").option("--json", "Output as JSON with HATEOAS links").action(async (options, command) => {
+    requirePersonalKey("LINEAR_API_KEY");
     const ctx = await contextFromCommand2(command, options);
     await listMyIssues(ctx, {
       limit: parseInt(options.limit || "20", 10),
@@ -116392,6 +116659,7 @@ Priority: 0=Urgent, 1=High, 2=Medium, 3=Low, 4=None`
     (v, p) => [...p, v],
     []
   ).option("--project <name>", "Project name").option("--estimate <points>", "Estimate in points").option("--due-date <YYYY-MM-DD>", "Due date").option("--json", "Output as JSON with HATEOAS links").action(async (title, options, command) => {
+    requirePersonalKey("LINEAR_API_KEY");
     const ctx = await contextFromCommand2(command, options);
     await createIssue(ctx, title, {
       description: options.description,
@@ -116412,6 +116680,7 @@ Examples:
   skill linear update ENG-123 --priority 1 --estimate 3
   skill linear update ENG-123 --due-date 2024-03-15`
   ).argument("<id>", "Issue identifier").option("--title <text>", "New title").option("--description <text>", "New description").option("--priority <0-4>", "New priority").option("--estimate <points>", "New estimate").option("--due-date <YYYY-MM-DD>", "New due date").option("--project <name>", "Move to project").option("--json", "Output as JSON with HATEOAS links").action(async (id, options, command) => {
+    requirePersonalKey("LINEAR_API_KEY");
     const ctx = await contextFromCommand2(command, options);
     await updateIssue(ctx, id, {
       title: options.title,
@@ -116430,6 +116699,7 @@ Examples:
   skill linear assign ENG-123 --to me
   skill linear assign ENG-123 --unassign`
   ).argument("<id>", "Issue identifier").option("--to <email>", 'Assign to user email (or "me")').option("--unassign", "Remove assignee").option("--json", "Output as JSON with HATEOAS links").action(async (id, options, command) => {
+    requirePersonalKey("LINEAR_API_KEY");
     const ctx = await contextFromCommand2(command, options);
     await assignIssue(ctx, id, {
       to: options.to,
@@ -116445,6 +116715,7 @@ Examples:
 
 Use 'skill linear states <team>' to see available states.`
   ).argument("<id>", "Issue identifier").requiredOption("--state <name>", "Target state name").option("--json", "Output as JSON with HATEOAS links").action(async (id, options, command) => {
+    requirePersonalKey("LINEAR_API_KEY");
     const ctx = await contextFromCommand2(command, options);
     await changeState(ctx, id, { state: options.state });
   });
@@ -116455,6 +116726,7 @@ Examples:
   skill linear close ENG-123              Close as done
   skill linear close ENG-123 --canceled   Cancel the issue`
   ).argument("<id>", "Issue identifier").option("--canceled", "Close as canceled instead of done").option("--json", "Output as JSON with HATEOAS links").action(async (id, options, command) => {
+    requirePersonalKey("LINEAR_API_KEY");
     const ctx = await contextFromCommand2(command, options);
     await closeIssue(ctx, id, { canceled: options.canceled });
   });
@@ -116478,6 +116750,7 @@ Use 'skill linear labels <team>' to see available labels.`
     (v, p) => [...p, v],
     []
   ).option("--json", "Output as JSON with HATEOAS links").action(async (id, options, command) => {
+    requirePersonalKey("LINEAR_API_KEY");
     const ctx = await contextFromCommand2(command, options);
     await modifyLabels(ctx, id, {
       add: options.add,
@@ -116493,6 +116766,7 @@ Examples:
   skill linear link ENG-123 --related ENG-456
   skill linear link ENG-123 --duplicate ENG-456`
   ).argument("<id>", "Source issue identifier").option("--blocks <id>", "This issue blocks <id>").option("--blocked-by <id>", "This issue is blocked by <id>").option("--related <id>", "Related to <id>").option("--duplicate <id>", "Duplicate of <id>").option("--json", "Output as JSON with HATEOAS links").action(async (id, options, command) => {
+    requirePersonalKey("LINEAR_API_KEY");
     const ctx = await contextFromCommand2(command, options);
     await linkIssues(ctx, id, {
       blocks: options.blocks,
@@ -116508,6 +116782,7 @@ Examples:
   skill linear comment ENG-123 --body "Great work!"
   skill linear comment ENG-123 --body "## Update\\n- Item 1\\n- Item 2"`
   ).argument("<id>", "Issue identifier").requiredOption("--body <text>", "Comment text (supports markdown)").option("--json", "Output as JSON with HATEOAS links").action(async (id, options, command) => {
+    requirePersonalKey("LINEAR_API_KEY");
     const ctx = await contextFromCommand2(command, options);
     await addComment(ctx, id, { body: options.body });
   });
@@ -117593,7 +117868,7 @@ var handlePipelineError = (ctx, error, message, suggestion = "Verify inputs and
 async function runPipelineCommand(ctx, opts) {
   const outputJson = opts.json === true || ctx.format === "json";
   try {
-    const { runPipeline: runPipeline2 } = await import("./pipeline-FGI6ICWM.js");
+    const { runPipeline: runPipeline2 } = await import("./pipeline-TMFQSA7X.js");
     const result = await runPipeline2({
       message: {
         subject: opts.subject,
@@ -119209,9 +119484,6 @@ init_esm_shims();
 var DEFAULT_MAX_HINTS = 2;
 var getCommandCount = (state, command) => state.commands[command]?.count ?? 0;
 var hasCommand = (state, command) => getCommandCount(state, command) > 0;
-var hasCommandPrefix = (state, prefix) => Object.entries(state.commands).some(
-  ([name, entry]) => name.startsWith(prefix) && entry.count > 0
-);
 var hasMilestone = (state, milestone) => state.milestones[milestone]?.achieved ?? false;
 var shouldSuppressHints = (context) => context.quiet === true || context.format === "json";
 var resolveMaxHints = (context) => context.maxHints ?? DEFAULT_MAX_HINTS;
@@ -119220,79 +119492,76 @@ var toHint = (rule) => ({
   message: rule.message,
   audience: rule.audience
 });
+var isCommandGroup = (command, group) => command === group || command.startsWith(`${group}.`);
 var DEFAULT_HINT_RULES = [
+  // Front contextual hints
   {
-    id: "onboarding.wizard",
-    audience: "onboarding",
-    message: "New here? Run `skill wizard` to set up your first product.",
-    showWhen: (state) => state.totalRuns <= 2 && !hasCommand(state, "wizard"),
-    retireWhen: (state) => hasCommand(state, "wizard") || hasMilestone(state, "wizard_completed")
-  },
-  {
-    id: "onboarding.auth",
-    audience: "onboarding",
-    message: "Set up your own API keys with `skill keys`.",
-    showWhen: (state) => state.totalRuns >= 1 && !hasMilestone(state, "auth_configured"),
-    retireWhen: (state) => hasMilestone(state, "auth_configured")
-  },
-  {
-    id: "discovery.health",
-    audience: "discovery",
-    message: "Check integrations fast with `skill health <app-slug>`.",
-    showWhen: (state) => state.totalRuns >= 2 && !hasCommand(state, "health"),
-    retireWhen: (state) => hasCommand(state, "health")
+    id: "context.front.triage",
+    audience: "contextual",
+    postRun: true,
+    message: "Tip: `skill front triage` to auto-categorize unassigned threads.",
+    showWhen: (state, context) => context.command === "front.inbox" && !hasCommand(state, "front.triage"),
+    retireWhen: (state) => hasCommand(state, "front.triage")
   },
   {
-    id: "discovery.front.inbox",
-    audience: "discovery",
-    message: "List recent conversations via `skill front inbox <name-or-id>`.",
-    showWhen: (state) => state.totalRuns >= 1 && !hasCommand(state, "front.inbox"),
-    retireWhen: (state) => hasCommand(state, "front.inbox")
+    id: "context.front.conversation",
+    audience: "contextual",
+    postRun: true,
+    message: "Tip: `skill front conversation <id> -m` shows the full thread.",
+    showWhen: (state, context) => context.command === "front.message" && !hasCommand(state, "front.conversation"),
+    retireWhen: (state) => hasCommand(state, "front.conversation")
   },
   {
-    id: "discovery.inngest",
-    audience: "discovery",
-    message: "Inspect workflows with `skill inngest stats --after 1d`.",
-    showWhen: (state) => state.totalRuns >= 3 && !hasCommandPrefix(state, "inngest."),
-    retireWhen: (state) => hasCommandPrefix(state, "inngest.")
+    id: "context.front.reply",
+    audience: "contextual",
+    postRun: true,
+    message: "Tip: `skill front reply <id>` to draft a response.",
+    showWhen: (state, context) => context.command === "front.conversation" && !hasCommand(state, "front.reply"),
+    retireWhen: (state) => hasCommand(state, "front.reply")
   },
+  // Inngest contextual hints
   {
-    id: "discovery.axiom",
-    audience: "discovery",
-    message: 'Query logs quickly with `skill axiom query "<APL>" --since 24h`.',
-    showWhen: (state) => state.totalRuns >= 3 && !hasCommandPrefix(state, "axiom."),
-    retireWhen: (state) => hasCommandPrefix(state, "axiom.")
+    id: "context.inngest.run",
+    audience: "contextual",
+    postRun: true,
+    message: "Tip: `skill inngest run <id>` to inspect a specific run.",
+    showWhen: (state, context) => (context.command === "inngest.failures" || context.command === "inngest.runs") && !hasCommand(state, "inngest.run"),
+    retireWhen: (state) => hasCommand(state, "inngest.run")
   },
   {
-    id: "discovery.keys",
-    audience: "discovery",
-    message: "Override shared credentials with your own: `skill keys add`",
-    showWhen: (state) => state.totalRuns >= 3 && !hasCommand(state, "keys") && !hasMilestone(state, "auth_configured"),
-    retireWhen: (state) => hasCommand(state, "keys") || hasCommand(state, "keys.add") || hasMilestone(state, "auth_configured")
+    id: "context.inngest.trace",
+    audience: "contextual",
+    postRun: true,
+    message: "Tip: `skill inngest trace <run-id>` for full workflow trace.",
+    showWhen: (state, context) => context.command === "inngest.run" && !hasCommand(state, "inngest.trace"),
+    retireWhen: (state) => hasCommand(state, "inngest.trace")
   },
+  // Linear contextual hints
   {
-    id: "context.front.triage",
+    id: "context.linear.my",
     audience: "contextual",
     postRun: true,
-    message: "Tip: `skill front triage <inbox-id>` surfaces unassigned threads.",
-    showWhen: (state, context) => context.command === "front.inbox" && !hasCommand(state, "front.triage"),
-    retireWhen: (state) => hasCommand(state, "front.triage")
+    message: "Tip: `skill linear my` to see your assigned issues.",
+    showWhen: (state, context) => isCommandGroup(context.command, "linear") && context.command !== "linear.my" && !hasCommand(state, "linear.my"),
+    retireWhen: (state) => hasCommand(state, "linear.my")
   },
+  // Axiom contextual hints
   {
-    id: "context.front.conversation",
+    id: "context.axiom.errors",
     audience: "contextual",
     postRun: true,
-    message: "Tip: `skill front conversation <id> -m` shows the full thread.",
-    showWhen: (state, context) => context.command === "front.message" && !hasCommand(state, "front.conversation"),
-    retireWhen: (state) => hasCommand(state, "front.conversation")
+    message: "Tip: `skill axiom errors --since 1h` to see recent errors.",
+    showWhen: (state, context) => context.command === "axiom.query" && !hasCommand(state, "axiom.errors"),
+    retireWhen: (state) => hasCommand(state, "axiom.errors")
   },
+  // Keys hint - only when auth issues are likely
   {
-    id: "context.inngest.run",
+    id: "context.keys",
     audience: "contextual",
     postRun: true,
-    message: "Tip: drill in with `skill inngest run <id>` or `skill inngest trace <run-id>`.",
-    showWhen: (state, context) => context.command === "inngest.failures" && !hasCommand(state, "inngest.run") && !hasCommand(state, "inngest.trace"),
-    retireWhen: (state) => hasCommand(state, "inngest.run") || hasCommand(state, "inngest.trace")
+    message: "Tip: `skill keys setup` to configure keychain integration.",
+    showWhen: (state, context) => context.command === "auth.status" && !hasCommand(state, "keys.setup") && !hasMilestone(state, "auth_configured"),
+    retireWhen: (state) => hasCommand(state, "keys.setup") || hasMilestone(state, "auth_configured")
   }
 ];
 var HintEngine = class {
@@ -120076,8 +120345,8 @@ if (!envLoaded && !process.env.DATABASE_URL) {
   process.env.SKIP_ENV_VALIDATION = "1";
 }
 var runtimeTarget = `bun-${process.platform}-${process.arch}`;
-var buildVersion = "0.16.0".length > 0 ? "0.16.0" : "0.0.0-dev";
-var buildCommit = "d96a5e3".length > 0 ? "d96a5e3" : "dev";
+var buildVersion = "0.17.0".length > 0 ? "0.17.0" : "0.0.0-dev";
+var buildCommit = "e664abd".length > 0 ? "e664abd" : "dev";
 var buildTarget = "node".length > 0 ? "node" : runtimeTarget;
 var isDevBuild = buildVersion.includes("dev") || buildCommit === "dev";
 var versionLabel = `skill v${buildVersion} (${buildCommit}) ${buildTarget}`;
@@ -120091,7 +120360,6 @@ var usageState = await (async () => {
     return null;
   }
 })();
-var hintCounts = /* @__PURE__ */ new WeakMap();
 var commandStartTimes = /* @__PURE__ */ new WeakMap();
 var resolveCommandName = (command) => {
   const names = [];
@@ -120147,16 +120415,6 @@ program2.hook("preAction", (thisCommand, actionCommand) => {
 program2.hook("preAction", (_thisCommand, actionCommand) => {
   commandStartTimes.set(actionCommand, Date.now());
 });
-program2.hook("preAction", async (_thisCommand, actionCommand) => {
-  try {
-    const context = resolveHintContext(actionCommand);
-    const state = await usageTracker.getUsage();
-    const hints = hintEngine.getHints(state, context);
-    writeHints(hints, process.stderr);
-    hintCounts.set(actionCommand, hints.length);
-  } catch {
-  }
-});
 program2.hook("postAction", async (_thisCommand, actionCommand) => {
   try {
     const context = resolveHintContext(actionCommand);
@@ -120165,11 +120423,7 @@ program2.hook("postAction", async (_thisCommand, actionCommand) => {
     for (const milestone of milestones) {
       await usageTracker.setMilestone(milestone);
     }
-    const previouslyShown = hintCounts.get(actionCommand) ?? 0;
-    const postHint = hintEngine.getPostRunHint(state, {
-      ...context,
-      previouslyShown
-    });
+    const postHint = hintEngine.getPostRunHint(state, context);
     if (postHint) writeHints([postHint], process.stderr);
   } catch {
   }