@urateam/cli 0.1.40 → 0.1.42

package/dist/__tests__/env-file.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=env-file.test.d.ts.map

package/dist/__tests__/env-file.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"env-file.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/env-file.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/env-file.test.js

@@ -0,0 +1,89 @@
+import { describe, it, expect, beforeEach, afterEach } from "vitest";
+import { mkdtempSync, rmSync, readFileSync, writeFileSync, existsSync, } from "node:fs";
+import { join } from "node:path";
+import { tmpdir } from "node:os";
+import { upsertEnvFile, readEnvFile } from "../lib/env-file.js";
+describe("upsertEnvFile", () => {
+    let tmp;
+    let path;
+    beforeEach(() => {
+        tmp = mkdtempSync(join(tmpdir(), "ura-env-"));
+        path = join(tmp, ".env");
+    });
+    afterEach(() => {
+        rmSync(tmp, { recursive: true, force: true });
+    });
+    it("creates the file when it does not exist", () => {
+        upsertEnvFile(path, { LINEAR_API_KEY: "lin_oauth_abc" });
+        const raw = readFileSync(path, "utf8");
+        expect(raw).toContain("LINEAR_API_KEY=lin_oauth_abc");
+    });
+    it("merges into an existing file preserving unrelated keys", () => {
+        writeFileSync(path, [
+            "ANTHROPIC_API_KEY=sk-ant-xyz",
+            "DASHBOARD_USER=admin",
+            "LINEAR_API_KEY=lin_api_old",
+            "",
+        ].join("\n"));
+        upsertEnvFile(path, { LINEAR_API_KEY: "lin_oauth_new" });
+        const raw = readFileSync(path, "utf8");
+        expect(raw).toContain("ANTHROPIC_API_KEY=sk-ant-xyz");
+        expect(raw).toContain("DASHBOARD_USER=admin");
+        expect(raw).toContain("LINEAR_API_KEY=lin_oauth_new");
+        expect(raw).not.toContain("lin_api_old");
+    });
+    it("preserves comments and blank lines around modified keys", () => {
+        writeFileSync(path, [
+            "# Linear",
+            "",
+            "LINEAR_API_KEY=lin_api_old",
+            "# Anthropic",
+            "ANTHROPIC_API_KEY=sk-ant-xyz",
+            "",
+        ].join("\n"));
+        upsertEnvFile(path, { LINEAR_API_KEY: "lin_oauth_new" });
+        const raw = readFileSync(path, "utf8");
+        expect(raw).toMatch(/^# Linear/m);
+        expect(raw).toMatch(/^# Anthropic/m);
+    });
+    it("appends new keys at the end when not already present", () => {
+        writeFileSync(path, "ANTHROPIC_API_KEY=sk-ant-xyz\n");
+        upsertEnvFile(path, { LINEAR_API_KEY: "lin_oauth_new" });
+        const lines = readFileSync(path, "utf8").split("\n");
+        const idx = lines.findIndex((l) => l.startsWith("LINEAR_API_KEY="));
+        const anthropicIdx = lines.findIndex((l) => l.startsWith("ANTHROPIC_API_KEY="));
+        expect(idx).toBeGreaterThan(anthropicIdx);
+    });
+    it("can upsert multiple keys in one call", () => {
+        upsertEnvFile(path, {
+            LINEAR_API_KEY: "lin_oauth_new",
+            LINEAR_WORKSPACE_ID: "ws_abc",
+        });
+        const raw = readFileSync(path, "utf8");
+        expect(raw).toContain("LINEAR_API_KEY=lin_oauth_new");
+        expect(raw).toContain("LINEAR_WORKSPACE_ID=ws_abc");
+    });
+    it("leaves no .env.tmp behind after a successful upsert", () => {
+        upsertEnvFile(path, { LINEAR_API_KEY: "lin_oauth_new" });
+        expect(existsSync(`${path}.tmp`)).toBe(false);
+    });
+});
+describe("readEnvFile", () => {
+    let tmp;
+    let path;
+    beforeEach(() => {
+        tmp = mkdtempSync(join(tmpdir(), "ura-env-"));
+        path = join(tmp, ".env");
+    });
+    afterEach(() => {
+        rmSync(tmp, { recursive: true, force: true });
+    });
+    it("returns an empty object when the file is absent", () => {
+        expect(readEnvFile(path)).toEqual({});
+    });
+    it("parses KEY=value lines, ignoring comments and blanks", () => {
+        writeFileSync(path, ["# comment", "", "FOO=bar", "BAZ=qux quux"].join("\n"));
+        expect(readEnvFile(path)).toEqual({ FOO: "bar", BAZ: "qux quux" });
+    });
+});
+//# sourceMappingURL=env-file.test.js.map

package/dist/__tests__/env-file.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"env-file.test.js","sourceRoot":"","sources":["../../src/__tests__/env-file.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACrE,OAAO,EACL,WAAW,EACX,MAAM,EACN,YAAY,EACZ,aAAa,EACb,UAAU,GACX,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAEhE,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;IAC7B,IAAI,GAAW,CAAC;IAChB,IAAI,IAAY,CAAC;IACjB,UAAU,CAAC,GAAG,EAAE;QACd,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,UAAU,CAAC,CAAC,CAAC;QAC9C,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAC3B,CAAC,CAAC,CAAC;IACH,SAAS,CAAC,GAAG,EAAE;QACb,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;QACjD,aAAa,CAAC,IAAI,EAAE,EAAE,cAAc,EAAE,eAAe,EAAE,CAAC,CAAC;QACzD,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACvC,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,8BAA8B,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wDAAwD,EAAE,GAAG,EAAE;QAChE,aAAa,CACX,IAAI,EACJ;YACE,8BAA8B;YAC9B,sBAAsB;YACtB,4BAA4B;YAC5B,EAAE;SACH,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;QACF,aAAa,CAAC,IAAI,EAAE,EAAE,cAAc,EAAE,eAAe,EAAE,CAAC,CAAC;QACzD,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACvC,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,8BAA8B,CAAC,CAAC;QACtD,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,sBAAsB,CAAC,CAAC;QAC9C,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,8BAA8B,CAAC,CAAC;QACtD,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yDAAyD,EAAE,GAAG,EAAE;QACjE,aAAa,CACX,IAAI,EACJ;YACE,UAAU;YACV,EAAE;YACF,4BAA4B;YAC5B,aAAa;YACb,8BAA8B;YAC9B,EAAE;SACH,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;QACF,aAAa,CAAC,IAAI,EAAE,EAAE,cAAc,EAAE,eAAe,EAAE,CAAC,CAAC;QACzD,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACvC,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QAClC,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE,GAAG,EAAE;QAC9D,aAAa,CAAC,IAAI,EAAE,gCAAgC,CAAC,CAAC;QACtD,aAAa,CAAC,IAAI,EAAE,EAAE,cAAc,EAAE,eAAe,EAAE,CAAC,CAAC;QACzD,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACrD,MAAM,GAAG,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC,CAAC;QACpE,MAAM,YAAY,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CACzC,CAAC,CAAC,UAAU,CAAC,oBAAoB,CAAC,CACnC,CAAC;QACF,MAAM,CAAC,GAAG,CAAC,CAAC,eAAe,CAAC,YAAY,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;QAC9C,aAAa,CAAC,IAAI,EAAE;YAClB,cAAc,EAAE,eAAe;YAC/B,mBAAmB,EAAE,QAAQ;SAC9B,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACvC,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,8BAA8B,CAAC,CAAC;QACtD,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,4BAA4B,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qDAAqD,EAAE,GAAG,EAAE;QAC7D,aAAa,CAAC,IAAI,EAAE,EAAE,cAAc,EAAE,eAAe,EAAE,CAAC,CAAC;QACzD,MAAM,CAAC,UAAU,CAAC,GAAG,IAAI,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,aAAa,EAAE,GAAG,EAAE;IAC3B,IAAI,GAAW,CAAC;IAChB,IAAI,IAAY,CAAC;IACjB,UAAU,CAAC,GAAG,EAAE;QACd,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,UAAU,CAAC,CAAC,CAAC;QAC9C,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAC3B,CAAC,CAAC,CAAC;IACH,SAAS,CAAC,GAAG,EAAE;QACb,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;QACzD,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE,GAAG,EAAE;QAC9D,aAAa,CACX,IAAI,EACJ,CAAC,WAAW,EAAE,EAAE,EAAE,SAAS,EAAE,cAAc,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CACxD,CAAC;QACF,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC,CAAC;IACrE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/linear-oauth.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=linear-oauth.test.d.ts.map

package/dist/__tests__/linear-oauth.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"linear-oauth.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/linear-oauth.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/linear-oauth.test.js

@@ -0,0 +1,162 @@
+import { describe, it, expect, vi } from "vitest";
+import { runLinearOAuth } from "../lib/linear-oauth.js";
+function makeDeps(overrides = {}) {
+    return {
+        clientId: "linear-client-id",
+        clientSecret: "linear-client-secret",
+        scope: "read,write",
+        timeoutMs: 1000,
+        // 0 = bind a random free port. Tests inspect the resulting redirect_uri to
+        // discover the actual port — production callers pass a fixed port.
+        port: 0,
+        openBrowser: vi.fn(async (_url) => { }),
+        fetchTokenEndpoint: vi.fn(async (_body) => ({
+            access_token: "lin_oauth_token_123",
+            token_type: "Bearer",
+            expires_in: 31536000,
+            scope: "read,write",
+        })),
+        fetchViewer: vi.fn(async (_token) => ({
+            workspaceId: "ws_abc",
+            workspaceName: "Acme",
+        })),
+        ...overrides,
+    };
+}
+async function postCallback(port, params) {
+    const qs = new URLSearchParams(params).toString();
+    return fetch(`http://127.0.0.1:${port}/callback?${qs}`);
+}
+describe("runLinearOAuth", () => {
+    it("happy path: returns token + workspace metadata after a valid callback", async () => {
+        const deps = makeDeps();
+        let capturedPort = 0;
+        let capturedState = "";
+        deps.openBrowser = vi.fn(async (url) => {
+            const parsed = new URL(url);
+            capturedState = parsed.searchParams.get("state");
+            const redirectUri = parsed.searchParams.get("redirect_uri");
+            capturedPort = Number(new URL(redirectUri).port);
+            await postCallback(capturedPort, {
+                code: "test-code",
+                state: capturedState,
+            });
+        });
+        const result = await runLinearOAuth(deps);
+        expect(result.accessToken).toBe("lin_oauth_token_123");
+        expect(result.workspaceId).toBe("ws_abc");
+        expect(result.workspaceName).toBe("Acme");
+        expect(deps.fetchTokenEndpoint).toHaveBeenCalledWith(expect.objectContaining({
+            code: "test-code",
+            client_id: "linear-client-id",
+            client_secret: "linear-client-secret",
+            grant_type: "authorization_code",
+        }));
+    });
+    it("rejects state mismatch", async () => {
+        const deps = makeDeps();
+        deps.openBrowser = vi.fn(async (url) => {
+            const parsed = new URL(url);
+            const redirectUri = parsed.searchParams.get("redirect_uri");
+            const port = Number(new URL(redirectUri).port);
+            await postCallback(port, {
+                code: "test-code",
+                state: "ATTACKER-STATE",
+            });
+        });
+        await expect(runLinearOAuth(deps)).rejects.toThrow(/state mismatch/i);
+    });
+    it("times out when the callback never arrives", async () => {
+        const deps = makeDeps({
+            timeoutMs: 100,
+            openBrowser: vi.fn(async () => { }),
+        });
+        await expect(runLinearOAuth(deps)).rejects.toThrow(/timed out/i);
+    });
+    it("surfaces Linear API errors during token exchange", async () => {
+        const deps = makeDeps({
+            fetchTokenEndpoint: vi.fn(async () => {
+                throw new Error("400: invalid_grant");
+            }),
+        });
+        deps.openBrowser = vi.fn(async (url) => {
+            const parsed = new URL(url);
+            const state = parsed.searchParams.get("state");
+            const redirectUri = parsed.searchParams.get("redirect_uri");
+            const port = Number(new URL(redirectUri).port);
+            await postCallback(port, { code: "bad-code", state });
+        });
+        await expect(runLinearOAuth(deps)).rejects.toThrow(/invalid_grant/);
+    });
+    it("never returns the token via the openBrowser URL or the callback response body", async () => {
+        const deps = makeDeps();
+        let urlPassedToBrowser = "";
+        let callbackBody = "";
+        deps.openBrowser = vi.fn(async (url) => {
+            urlPassedToBrowser = url;
+            const parsed = new URL(url);
+            const state = parsed.searchParams.get("state");
+            const redirectUri = parsed.searchParams.get("redirect_uri");
+            const port = Number(new URL(redirectUri).port);
+            const res = await postCallback(port, { code: "test-code", state });
+            callbackBody = await res.text();
+        });
+        await runLinearOAuth(deps);
+        expect(urlPassedToBrowser).not.toContain("lin_oauth_token_123");
+        expect(callbackBody).not.toContain("lin_oauth_token_123");
+    });
+    it("still returns the token when fetchViewer fails (operator already authorized)", async () => {
+        // Critical contract: a Linear GraphQL hiccup after a successful token
+        // exchange must NOT discard the access token. The operator already
+        // clicked "Authorize"; making them redo the flow because the metadata
+        // fetch hiccuped is hostile UX. Implementation renders SUCCESS_HTML
+        // BEFORE the viewer fetch so the browser shows success regardless.
+        const deps = makeDeps({
+            fetchViewer: vi.fn(async () => {
+                throw new Error("Linear GraphQL hiccup");
+            }),
+        });
+        deps.openBrowser = vi.fn(async (url) => {
+            const parsed = new URL(url);
+            const state = parsed.searchParams.get("state");
+            const redirectUri = parsed.searchParams.get("redirect_uri");
+            const port = Number(new URL(redirectUri).port);
+            // Fire-and-forget — we don't need the response body in this test.
+            // The OAuth orchestrator's promise resolution is what we assert.
+            void postCallback(port, { code: "test-code", state }).catch(() => { });
+        });
+        const result = await runLinearOAuth(deps);
+        expect(result.accessToken).toBe("lin_oauth_token_123");
+        expect(result.workspaceId).toBe("unknown");
+        expect(result.workspaceName).toBeUndefined();
+        expect(deps.fetchViewer).toHaveBeenCalled();
+    });
+    it("authorize URL contains the matching redirect_uri (port consistency)", async () => {
+        const deps = makeDeps();
+        let urlSeen = "";
+        deps.openBrowser = vi.fn(async (url) => {
+            urlSeen = url;
+            const parsed = new URL(url);
+            const state = parsed.searchParams.get("state");
+            const redirectUri = parsed.searchParams.get("redirect_uri");
+            const port = Number(new URL(redirectUri).port);
+            await postCallback(port, { code: "test-code", state });
+        });
+        await runLinearOAuth(deps);
+        const parsed = new URL(urlSeen);
+        const redirectUri = parsed.searchParams.get("redirect_uri");
+        expect(deps.fetchTokenEndpoint).toHaveBeenCalledWith(expect.objectContaining({ redirect_uri: redirectUri }));
+    });
+    it("rejects callback without a code", async () => {
+        const deps = makeDeps();
+        deps.openBrowser = vi.fn(async (url) => {
+            const parsed = new URL(url);
+            const state = parsed.searchParams.get("state");
+            const redirectUri = parsed.searchParams.get("redirect_uri");
+            const port = Number(new URL(redirectUri).port);
+            await postCallback(port, { state });
+        });
+        await expect(runLinearOAuth(deps)).rejects.toThrow(/missing code/i);
+    });
+});
+//# sourceMappingURL=linear-oauth.test.js.map

package/dist/__tests__/linear-oauth.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"linear-oauth.test.js","sourceRoot":"","sources":["../../src/__tests__/linear-oauth.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAClD,OAAO,EAAE,cAAc,EAAwB,MAAM,wBAAwB,CAAC;AAE9E,SAAS,QAAQ,CAAC,YAAsC,EAAE;IACxD,OAAO;QACL,QAAQ,EAAE,kBAAkB;QAC5B,YAAY,EAAE,sBAAsB;QACpC,KAAK,EAAE,YAAY;QACnB,SAAS,EAAE,IAAI;QACf,2EAA2E;QAC3E,mEAAmE;QACnE,IAAI,EAAE,CAAC;QACP,WAAW,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,IAAY,EAAE,EAAE,GAAE,CAAC,CAAC;QAC9C,kBAAkB,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;YAC1C,YAAY,EAAE,qBAAqB;YACnC,UAAU,EAAE,QAAQ;YACpB,UAAU,EAAE,QAAQ;YACpB,KAAK,EAAE,YAAY;SACpB,CAAC,CAAC;QACH,WAAW,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;YACpC,WAAW,EAAE,QAAQ;YACrB,aAAa,EAAE,MAAM;SACtB,CAAC,CAAC;QACH,GAAG,SAAS;KACb,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,IAAY,EAAE,MAA8B;IACtE,MAAM,EAAE,GAAG,IAAI,eAAe,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC;IAClD,OAAO,KAAK,CAAC,oBAAoB,IAAI,aAAa,EAAE,EAAE,CAAC,CAAC;AAC1D,CAAC;AAED,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;IAC9B,EAAE,CAAC,uEAAuE,EAAE,KAAK,IAAI,EAAE;QACrF,MAAM,IAAI,GAAG,QAAQ,EAAE,CAAC;QACxB,IAAI,YAAY,GAAG,CAAC,CAAC;QACrB,IAAI,aAAa,GAAG,EAAE,CAAC;QACvB,IAAI,CAAC,WAAW,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,GAAW,EAAE,EAAE;YAC7C,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;YAC5B,aAAa,GAAG,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAE,CAAC;YAClD,MAAM,WAAW,GAAG,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,CAAE,CAAC;YAC7D,YAAY,GAAG,MAAM,CAAC,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC;YACjD,MAAM,YAAY,CAAC,YAAY,EAAE;gBAC/B,IAAI,EAAE,WAAW;gBACjB,KAAK,EAAE,aAAa;aACrB,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,CAAC;QAC1C,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;QACvD,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC1C,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC1C,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,oBAAoB,CAClD,MAAM,CAAC,gBAAgB,CAAC;YACtB,IAAI,EAAE,WAAW;YACjB,SAAS,EAAE,kBAAkB;YAC7B,aAAa,EAAE,sBAAsB;YACrC,UAAU,EAAE,oBAAoB;SACjC,CAAC,CACH,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wBAAwB,EAAE,KAAK,IAAI,EAAE;QACtC,MAAM,IAAI,GAAG,QAAQ,EAAE,CAAC;QACxB,IAAI,CAAC,WAAW,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,GAAW,EAAE,EAAE;YAC7C,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;YAC5B,MAAM,WAAW,GAAG,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,CAAE,CAAC;YAC7D,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC;YAC/C,MAAM,YAAY,CAAC,IAAI,EAAE;gBACvB,IAAI,EAAE,WAAW;gBACjB,KAAK,EAAE,gBAAgB;aACxB,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QACH,MAAM,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACxE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,KAAK,IAAI,EAAE;QACzD,MAAM,IAAI,GAAG,QAAQ,CAAC;YACpB,SAAS,EAAE,GAAG;YACd,WAAW,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,GAAE,CAAC,CAAC;SACnC,CAAC,CAAC;QACH,MAAM,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IACnE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kDAAkD,EAAE,KAAK,IAAI,EAAE;QAChE,MAAM,IAAI,GAAG,QAAQ,CAAC;YACpB,kBAAkB,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE;gBACnC,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;YACxC,CAAC,CAAC;SACH,CAAC,CAAC;QACH,IAAI,CAAC,WAAW,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,GAAW,EAAE,EAAE;YAC7C,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;YAC5B,MAAM,KAAK,GAAG,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAE,CAAC;YAChD,MAAM,WAAW,GAAG,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,CAAE,CAAC;YAC7D,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC;YAC/C,MAAM,YAAY,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC;QACxD,CAAC,CAAC,CAAC;QACH,MAAM,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;IACtE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+EAA+E,EAAE,KAAK,IAAI,EAAE;QAC7F,MAAM,IAAI,GAAG,QAAQ,EAAE,CAAC;QACxB,IAAI,kBAAkB,GAAG,EAAE,CAAC;QAC5B,IAAI,YAAY,GAAG,EAAE,CAAC;QACtB,IAAI,CAAC,WAAW,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,GAAW,EAAE,EAAE;YAC7C,kBAAkB,GAAG,GAAG,CAAC;YACzB,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;YAC5B,MAAM,KAAK,GAAG,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAE,CAAC;YAChD,MAAM,WAAW,GAAG,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,CAAE,CAAC;YAC7D,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC;YAC/C,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC;YACnE,YAAY,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAClC,CAAC,CAAC,CAAC;QACH,MAAM,cAAc,CAAC,IAAI,CAAC,CAAC;QAC3B,MAAM,CAAC,kBAAkB,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,qBAAqB,CAAC,CAAC;QAChE,MAAM,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,qBAAqB,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8EAA8E,EAAE,KAAK,IAAI,EAAE;QAC5F,sEAAsE;QACtE,mEAAmE;QACnE,sEAAsE;QACtE,oEAAoE;QACpE,mEAAmE;QACnE,MAAM,IAAI,GAAG,QAAQ,CAAC;YACpB,WAAW,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE;gBAC5B,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;YAC3C,CAAC,CAAC;SACH,CAAC,CAAC;QACH,IAAI,CAAC,WAAW,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,GAAW,EAAE,EAAE;YAC7C,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;YAC5B,MAAM,KAAK,GAAG,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAE,CAAC;YAChD,MAAM,WAAW,GAAG,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,CAAE,CAAC;YAC7D,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC;YAC/C,kEAAkE;YAClE,iEAAiE;YACjE,KAAK,YAAY,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACxE,CAAC,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,CAAC;QAC1C,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;QACvD,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC3C,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,aAAa,EAAE,CAAC;QAC7C,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,gBAAgB,EAAE,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qEAAqE,EAAE,KAAK,IAAI,EAAE;QACnF,MAAM,IAAI,GAAG,QAAQ,EAAE,CAAC;QACxB,IAAI,OAAO,GAAG,EAAE,CAAC;QACjB,IAAI,CAAC,WAAW,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,GAAW,EAAE,EAAE;YAC7C,OAAO,GAAG,GAAG,CAAC;YACd,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;YAC5B,MAAM,KAAK,GAAG,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAE,CAAC;YAChD,MAAM,WAAW,GAAG,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,CAAE,CAAC;YAC7D,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC;YAC/C,MAAM,YAAY,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC;QACzD,CAAC,CAAC,CAAC;QACH,MAAM,cAAc,CAAC,IAAI,CAAC,CAAC;QAC3B,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;QAChC,MAAM,WAAW,GAAG,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,CAAE,CAAC;QAC7D,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,oBAAoB,CAClD,MAAM,CAAC,gBAAgB,CAAC,EAAE,YAAY,EAAE,WAAW,EAAE,CAAC,CACvD,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iCAAiC,EAAE,KAAK,IAAI,EAAE;QAC/C,MAAM,IAAI,GAAG,QAAQ,EAAE,CAAC;QACxB,IAAI,CAAC,WAAW,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,GAAW,EAAE,EAAE;YAC7C,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;YAC5B,MAAM,KAAK,GAAG,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAE,CAAC;YAChD,MAAM,WAAW,GAAG,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,CAAE,CAAC;YAC7D,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC;YAC/C,MAAM,YAAY,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QACtC,CAAC,CAAC,CAAC;QACH,MAAM,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;IACtE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/oauth-state.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=oauth-state.test.d.ts.map

package/dist/__tests__/oauth-state.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-state.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/oauth-state.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/oauth-state.test.js

@@ -0,0 +1,40 @@
+import { describe, it, expect } from "vitest";
+import { signState, verifyState, newNonce } from "../lib/oauth-state.js";
+describe("OAuth state HMAC", () => {
+    it("round-trips a nonce", () => {
+        const secret = "fixed-secret-for-test";
+        const signed = signState(secret, "nonce-abc");
+        expect(verifyState(secret, signed)).toBe("nonce-abc");
+    });
+    it("rejects a tampered nonce", () => {
+        const secret = "fixed-secret-for-test";
+        const signed = signState(secret, "nonce-abc");
+        const [nonce, sig] = signed.split(".");
+        const tampered = `${nonce}-tampered.${sig}`;
+        expect(verifyState(secret, tampered)).toBeNull();
+    });
+    it("rejects a state signed with a different secret", () => {
+        const signed = signState("secret-a", "nonce-abc");
+        expect(verifyState("secret-b", signed)).toBeNull();
+    });
+    it("rejects malformed input", () => {
+        expect(verifyState("any-secret", "")).toBeNull();
+        expect(verifyState("any-secret", "no-dot")).toBeNull();
+        expect(verifyState("any-secret", "too.many.dots")).toBeNull();
+    });
+    it("rejects same-length-but-wrong sig without throwing", () => {
+        const signed = signState("secret", "nonce");
+        const [nonce] = signed.split(".");
+        const wrongButSameLen = `${nonce}.${"f".repeat(64)}`;
+        expect(() => verifyState("secret", wrongButSameLen)).not.toThrow();
+        expect(verifyState("secret", wrongButSameLen)).toBeNull();
+    });
+    it("newNonce produces unique 32-char hex values", () => {
+        const a = newNonce();
+        const b = newNonce();
+        expect(a).toMatch(/^[0-9a-f]{32}$/);
+        expect(b).toMatch(/^[0-9a-f]{32}$/);
+        expect(a).not.toBe(b);
+    });
+});
+//# sourceMappingURL=oauth-state.test.js.map

package/dist/__tests__/oauth-state.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-state.test.js","sourceRoot":"","sources":["../../src/__tests__/oauth-state.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AAEzE,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;IAChC,EAAE,CAAC,qBAAqB,EAAE,GAAG,EAAE;QAC7B,MAAM,MAAM,GAAG,uBAAuB,CAAC;QACvC,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;QAC9C,MAAM,CAAC,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0BAA0B,EAAE,GAAG,EAAE;QAClC,MAAM,MAAM,GAAG,uBAAuB,CAAC;QACvC,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;QAC9C,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACvC,MAAM,QAAQ,GAAG,GAAG,KAAK,aAAa,GAAG,EAAE,CAAC;QAC5C,MAAM,CAAC,WAAW,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;QACxD,MAAM,MAAM,GAAG,SAAS,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;QAClD,MAAM,CAAC,WAAW,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IACrD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yBAAyB,EAAE,GAAG,EAAE;QACjC,MAAM,CAAC,WAAW,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;QACjD,MAAM,CAAC,WAAW,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;QACvD,MAAM,CAAC,WAAW,CAAC,YAAY,EAAE,eAAe,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IAChE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;QAC5D,MAAM,MAAM,GAAG,SAAS,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC5C,MAAM,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAClC,MAAM,eAAe,GAAG,GAAG,KAAK,IAAI,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;QACrD,MAAM,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;QACnE,MAAM,CAAC,WAAW,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC5D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;QACrD,MAAM,CAAC,GAAG,QAAQ,EAAE,CAAC;QACrB,MAAM,CAAC,GAAG,QAAQ,EAAE,CAAC;QACrB,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;QACpC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;QACpC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACxB,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/self-auth-linear.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=self-auth-linear.test.d.ts.map

package/dist/__tests__/self-auth-linear.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"self-auth-linear.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/self-auth-linear.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/self-auth-linear.test.js

@@ -0,0 +1,92 @@
+import { describe, it, expect, beforeEach, afterEach, vi } from "vitest";
+import { mkdtempSync, rmSync, readFileSync, writeFileSync, mkdirSync, } from "node:fs";
+import { join } from "node:path";
+import { tmpdir } from "node:os";
+// Drive the OAuth flow by hijacking `defaultBrowserOpen` to post the simulated
+// provider callback at the server the real `runLinearOAuth` opens; mock the
+// token + viewer fetches so no network is touched.
+vi.mock("../lib/linear-oauth-deps.js", async () => {
+    return {
+        defaultBrowserOpen: async (url) => {
+            const parsed = new URL(url);
+            const state = parsed.searchParams.get("state");
+            const redirectUri = parsed.searchParams.get("redirect_uri");
+            const port = Number(new URL(redirectUri).port);
+            const qs = new URLSearchParams({ code: "fake-code", state }).toString();
+            await fetch(`http://127.0.0.1:${port}/callback?${qs}`);
+        },
+        defaultFetchTokenEndpoint: async () => ({
+            access_token: "lin_oauth_TOKEN",
+            token_type: "Bearer",
+            expires_in: 31536000,
+            scope: "read,write",
+        }),
+        defaultFetchViewer: async () => ({
+            workspaceId: "ws_test",
+            workspaceName: "Test Workspace",
+        }),
+    };
+});
+const { selfAuthLinearCommand } = await import("../commands/self-auth-linear.js");
+describe("ura self-auth-linear", () => {
+    let tmp;
+    beforeEach(() => {
+        tmp = mkdtempSync(join(tmpdir(), "ura-oauth-"));
+        process.env.URATEAM_HOME = tmp;
+        mkdirSync(tmp, { recursive: true });
+        process.env.LINEAR_CLIENT_ID = "client-abc";
+        process.env.LINEAR_CLIENT_SECRET = "secret-xyz";
+    });
+    afterEach(() => {
+        delete process.env.URATEAM_HOME;
+        delete process.env.LINEAR_CLIENT_ID;
+        delete process.env.LINEAR_CLIENT_SECRET;
+        rmSync(tmp, { recursive: true, force: true });
+    });
+    it("writes LINEAR_API_KEY to ~/.urateam/.env on success", async () => {
+        await selfAuthLinearCommand.parseAsync(["--port", "0"], { from: "user" });
+        const raw = readFileSync(join(tmp, ".env"), "utf8");
+        expect(raw).toContain("LINEAR_API_KEY=lin_oauth_TOKEN");
+    });
+    it("preserves unrelated keys in an existing .env", async () => {
+        writeFileSync(join(tmp, ".env"), "ANTHROPIC_API_KEY=sk-ant-xyz\nLINEAR_API_KEY=lin_api_old\n");
+        await selfAuthLinearCommand.parseAsync(["--port", "0"], { from: "user" });
+        const raw = readFileSync(join(tmp, ".env"), "utf8");
+        expect(raw).toContain("ANTHROPIC_API_KEY=sk-ant-xyz");
+        expect(raw).toContain("LINEAR_API_KEY=lin_oauth_TOKEN");
+        expect(raw).not.toContain("lin_api_old");
+    });
+    it("never logs the token to console", async () => {
+        const spy = vi.spyOn(console, "log").mockImplementation(() => { });
+        await selfAuthLinearCommand.parseAsync(["--port", "0"], { from: "user" });
+        const out = spy.mock.calls.flat().join("\n");
+        expect(out).not.toContain("lin_oauth_TOKEN");
+        spy.mockRestore();
+    });
+    it("logs the workspace name on success (operator-friendly confirmation)", async () => {
+        const spy = vi.spyOn(console, "log").mockImplementation(() => { });
+        await selfAuthLinearCommand.parseAsync(["--port", "0"], { from: "user" });
+        const out = spy.mock.calls.flat().join("\n");
+        expect(out).toMatch(/Test Workspace/);
+        spy.mockRestore();
+    });
+    it("fails when LINEAR_CLIENT_ID is missing", async () => {
+        delete process.env.LINEAR_CLIENT_ID;
+        await expect(selfAuthLinearCommand.parseAsync([], { from: "user" })).rejects.toThrow(/LINEAR_CLIENT_ID/);
+    });
+    it("fails when LINEAR_CLIENT_SECRET is missing", async () => {
+        delete process.env.LINEAR_CLIENT_SECRET;
+        await expect(selfAuthLinearCommand.parseAsync([], { from: "user" })).rejects.toThrow(/LINEAR_CLIENT_SECRET/);
+    });
+    it("rejects an out-of-range --port", async () => {
+        await expect(selfAuthLinearCommand.parseAsync(["--port", "999999"], { from: "user" })).rejects.toThrow(/--port must be an integer between 0 and 65535/);
+        await expect(selfAuthLinearCommand.parseAsync(["--port", "not-a-number"], {
+            from: "user",
+        })).rejects.toThrow(/--port must be an integer/);
+    });
+    it("fails when URATEAM_HOME does not exist (operator forgot 'ura init')", async () => {
+        rmSync(tmp, { recursive: true, force: true });
+        await expect(selfAuthLinearCommand.parseAsync([], { from: "user" })).rejects.toThrow(/ura init/i);
+    });
+});
+//# sourceMappingURL=self-auth-linear.test.js.map

package/dist/__tests__/self-auth-linear.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"self-auth-linear.test.js","sourceRoot":"","sources":["../../src/__tests__/self-auth-linear.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AACzE,OAAO,EACL,WAAW,EACX,MAAM,EACN,YAAY,EACZ,aAAa,EACb,SAAS,GACV,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAEjC,+EAA+E;AAC/E,4EAA4E;AAC5E,mDAAmD;AACnD,EAAE,CAAC,IAAI,CAAC,6BAA6B,EAAE,KAAK,IAAI,EAAE;IAChD,OAAO;QACL,kBAAkB,EAAE,KAAK,EAAE,GAAW,EAAE,EAAE;YACxC,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;YAC5B,MAAM,KAAK,GAAG,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAE,CAAC;YAChD,MAAM,WAAW,GAAG,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,CAAE,CAAC;YAC7D,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC;YAC/C,MAAM,EAAE,GAAG,IAAI,eAAe,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;YACxE,MAAM,KAAK,CAAC,oBAAoB,IAAI,aAAa,EAAE,EAAE,CAAC,CAAC;QACzD,CAAC;QACD,yBAAyB,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;YACtC,YAAY,EAAE,iBAAiB;YAC/B,UAAU,EAAE,QAAQ;YACpB,UAAU,EAAE,QAAQ;YACpB,KAAK,EAAE,YAAY;SACpB,CAAC;QACF,kBAAkB,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;YAC/B,WAAW,EAAE,SAAS;YACtB,aAAa,EAAE,gBAAgB;SAChC,CAAC;KACH,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,MAAM,EAAE,qBAAqB,EAAE,GAAG,MAAM,MAAM,CAC5C,iCAAiC,CAClC,CAAC;AAEF,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;IACpC,IAAI,GAAW,CAAC;IAChB,UAAU,CAAC,GAAG,EAAE;QACd,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,YAAY,CAAC,CAAC,CAAC;QAChD,OAAO,CAAC,GAAG,CAAC,YAAY,GAAG,GAAG,CAAC;QAC/B,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACpC,OAAO,CAAC,GAAG,CAAC,gBAAgB,GAAG,YAAY,CAAC;QAC5C,OAAO,CAAC,GAAG,CAAC,oBAAoB,GAAG,YAAY,CAAC;IAClD,CAAC,CAAC,CAAC;IACH,SAAS,CAAC,GAAG,EAAE;QACb,OAAO,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC;QAChC,OAAO,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;QACpC,OAAO,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC;QACxC,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;QACnE,MAAM,qBAAqB,CAAC,UAAU,CAAC,CAAC,QAAQ,EAAE,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QAC1E,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC;QACpD,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,gCAAgC,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;QAC5D,aAAa,CACX,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,EACjB,4DAA4D,CAC7D,CAAC;QACF,MAAM,qBAAqB,CAAC,UAAU,CAAC,CAAC,QAAQ,EAAE,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QAC1E,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC;QACpD,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,8BAA8B,CAAC,CAAC;QACtD,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,gCAAgC,CAAC,CAAC;QACxD,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iCAAiC,EAAE,KAAK,IAAI,EAAE;QAC/C,MAAM,GAAG,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAClE,MAAM,qBAAqB,CAAC,UAAU,CAAC,CAAC,QAAQ,EAAE,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QAC1E,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7C,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC;QAC7C,GAAG,CAAC,WAAW,EAAE,CAAC;IACpB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qEAAqE,EAAE,KAAK,IAAI,EAAE;QACnF,MAAM,GAAG,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAClE,MAAM,qBAAqB,CAAC,UAAU,CAAC,CAAC,QAAQ,EAAE,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QAC1E,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7C,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;QACtC,GAAG,CAAC,WAAW,EAAE,CAAC;IACpB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wCAAwC,EAAE,KAAK,IAAI,EAAE;QACtD,OAAO,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;QACpC,MAAM,MAAM,CACV,qBAAqB,CAAC,UAAU,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CACvD,CAAC,OAAO,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4CAA4C,EAAE,KAAK,IAAI,EAAE;QAC1D,OAAO,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC;QACxC,MAAM,MAAM,CACV,qBAAqB,CAAC,UAAU,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CACvD,CAAC,OAAO,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gCAAgC,EAAE,KAAK,IAAI,EAAE;QAC9C,MAAM,MAAM,CACV,qBAAqB,CAAC,UAAU,CAAC,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CACzE,CAAC,OAAO,CAAC,OAAO,CAAC,+CAA+C,CAAC,CAAC;QACnE,MAAM,MAAM,CACV,qBAAqB,CAAC,UAAU,CAAC,CAAC,QAAQ,EAAE,cAAc,CAAC,EAAE;YAC3D,IAAI,EAAE,MAAM;SACb,CAAC,CACH,CAAC,OAAO,CAAC,OAAO,CAAC,2BAA2B,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qEAAqE,EAAE,KAAK,IAAI,EAAE;QACnF,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9C,MAAM,MAAM,CACV,qBAAqB,CAAC,UAAU,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CACvD,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/service-unit.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=service-unit.test.d.ts.map

package/dist/__tests__/service-unit.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"service-unit.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/service-unit.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/service-unit.test.js

@@ -0,0 +1,65 @@
+import { describe, it, expect } from "vitest";
+import { renderLaunchdPlist, renderSystemdUserUnit, } from "../lib/service-unit.js";
+const FIXTURE = {
+    binaryPath: "/usr/local/bin/ura",
+    urateamHome: "/Users/x/.urateam",
+    envFilePath: "/Users/x/.urateam/.env",
+    stdoutPath: "/Users/x/.urateam/data/daemon.log",
+    stderrPath: "/Users/x/.urateam/data/daemon.err.log",
+};
+describe("renderLaunchdPlist", () => {
+    it("includes the binary path under ProgramArguments", () => {
+        const out = renderLaunchdPlist(FIXTURE);
+        expect(out).toContain("<string>/usr/local/bin/ura</string>");
+        expect(out).toContain("<string>start</string>");
+    });
+    it("propagates URATEAM_HOME via EnvironmentVariables", () => {
+        const out = renderLaunchdPlist(FIXTURE);
+        expect(out).toContain("<key>URATEAM_HOME</key>");
+        expect(out).toContain("<string>/Users/x/.urateam</string>");
+    });
+    it("sets RunAtLoad and KeepAlive", () => {
+        const out = renderLaunchdPlist(FIXTURE);
+        expect(out).toMatch(/<key>RunAtLoad<\/key>\s*<true\/>/);
+        expect(out).toMatch(/<key>KeepAlive<\/key>\s*<true\/>/);
+    });
+    it("emits stdout and stderr log paths", () => {
+        const out = renderLaunchdPlist(FIXTURE);
+        expect(out).toContain("/Users/x/.urateam/data/daemon.log");
+        expect(out).toContain("/Users/x/.urateam/data/daemon.err.log");
+    });
+    it("starts with the XML declaration", () => {
+        expect(renderLaunchdPlist(FIXTURE).startsWith('<?xml version="1.0"')).toBe(true);
+    });
+    it("is deterministic — same input produces byte-for-byte same output", () => {
+        expect(renderLaunchdPlist(FIXTURE)).toBe(renderLaunchdPlist(FIXTURE));
+    });
+    it("matches the canonical snapshot", () => {
+        expect(renderLaunchdPlist(FIXTURE)).toMatchSnapshot();
+    });
+});
+describe("renderSystemdUserUnit", () => {
+    it("uses simple service type", () => {
+        expect(renderSystemdUserUnit(FIXTURE)).toContain("Type=simple");
+    });
+    it("sets ExecStart to the binary + 'start'", () => {
+        expect(renderSystemdUserUnit(FIXTURE)).toContain("ExecStart=/usr/local/bin/ura start");
+    });
+    it("propagates URATEAM_HOME via Environment", () => {
+        const out = renderSystemdUserUnit(FIXTURE);
+        expect(out).toContain("Environment=URATEAM_HOME=/Users/x/.urateam");
+    });
+    it("sets EnvironmentFile to the resolved .env path", () => {
+        expect(renderSystemdUserUnit(FIXTURE)).toContain("EnvironmentFile=/Users/x/.urateam/.env");
+    });
+    it("uses WantedBy=default.target so user-mode systemd picks it up", () => {
+        expect(renderSystemdUserUnit(FIXTURE)).toContain("WantedBy=default.target");
+    });
+    it("sets Restart=always", () => {
+        expect(renderSystemdUserUnit(FIXTURE)).toContain("Restart=always");
+    });
+    it("matches the canonical snapshot", () => {
+        expect(renderSystemdUserUnit(FIXTURE)).toMatchSnapshot();
+    });
+});
+//# sourceMappingURL=service-unit.test.js.map

package/dist/__tests__/service-unit.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"service-unit.test.js","sourceRoot":"","sources":["../../src/__tests__/service-unit.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EACL,kBAAkB,EAClB,qBAAqB,GAEtB,MAAM,wBAAwB,CAAC;AAEhC,MAAM,OAAO,GAAqB;IAChC,UAAU,EAAE,oBAAoB;IAChC,WAAW,EAAE,mBAAmB;IAChC,WAAW,EAAE,wBAAwB;IACrC,UAAU,EAAE,mCAAmC;IAC/C,UAAU,EAAE,uCAAuC;CACpD,CAAC;AAEF,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;IAClC,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;QACzD,MAAM,GAAG,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;QACxC,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,qCAAqC,CAAC,CAAC;QAC7D,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,wBAAwB,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAC1D,MAAM,GAAG,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;QACxC,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,yBAAyB,CAAC,CAAC;QACjD,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,oCAAoC,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8BAA8B,EAAE,GAAG,EAAE;QACtC,MAAM,GAAG,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;QACxC,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,kCAAkC,CAAC,CAAC;QACxD,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,kCAAkC,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mCAAmC,EAAE,GAAG,EAAE;QAC3C,MAAM,GAAG,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;QACxC,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,mCAAmC,CAAC,CAAC;QAC3D,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,uCAAuC,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iCAAiC,EAAE,GAAG,EAAE;QACzC,MAAM,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC,UAAU,CAAC,qBAAqB,CAAC,CAAC,CAAC,IAAI,CACxE,IAAI,CACL,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kEAAkE,EAAE,GAAG,EAAE;QAC1E,MAAM,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC;IACxE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gCAAgC,EAAE,GAAG,EAAE;QACxC,MAAM,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC;IACxD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE;IACrC,EAAE,CAAC,0BAA0B,EAAE,GAAG,EAAE;QAClC,MAAM,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;IAClE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;QAChD,MAAM,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAC9C,oCAAoC,CACrC,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;QACjD,MAAM,GAAG,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;QAC3C,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,4CAA4C,CAAC,CAAC;IACtE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;QACxD,MAAM,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAC9C,wCAAwC,CACzC,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+DAA+D,EAAE,GAAG,EAAE;QACvE,MAAM,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,yBAAyB,CAAC,CAAC;IAC9E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qBAAqB,EAAE,GAAG,EAAE;QAC7B,MAAM,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;IACrE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gCAAgC,EAAE,GAAG,EAAE;QACxC,MAAM,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC;IAC3D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/service.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=service.test.d.ts.map

package/dist/__tests__/service.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/service.test.ts"],"names":[],"mappings":""}