cyrus-edge-worker 0.2.15 → 0.2.17

package/dist/EdgeWorker.d.ts

@@ -34,6 +34,8 @@ export declare class EdgeWorker extends EventEmitter {
     private activeWebhookCount;
     /** Handler for AskUserQuestion tool invocations via Linear select signal */
     private askUserQuestionHandler;
+    /** User access control for whitelisting/blacklisting Linear users */
+    private userAccessControl;
     constructor(config: EdgeWorkerConfig);
     /**
      * Start the edge worker
@@ -133,6 +135,33 @@ export declare class EdgeWorker extends EventEmitter {
      * Handle issue unassignment webhook
      */
     private handleIssueUnassignedWebhook;
+    /**
+     * Handle issue content update webhook (title, description, or attachments).
+     *
+     * When the title, description, or attachments of an issue are updated, this handler feeds
+     * the changes into any active session for that issue, allowing the AI to
+     * compare old vs new values and decide whether to take action.
+     *
+     * The prompt uses XML-style formatting to clearly show what changed:
+     * - <issue_update> wrapper with timestamp and issue identifier
+     * - <title_change> with <old_title> and <new_title> if title changed
+     * - <description_change> with <old_description> and <new_description> if description changed
+     * - <attachments_change> with <old_attachments> and <new_attachments> if attachments changed
+     * - <guidance> section instructing the agent to evaluate whether changes affect its work
+     *
+     * @see https://studio.apollographql.com/public/Linear-Webhooks/variant/current/schema/reference/objects/EntityWebhookPayload
+     * @see https://studio.apollographql.com/public/Linear-Webhooks/variant/current/schema/reference/objects/IssueWebhookPayload
+     * @see https://studio.apollographql.com/public/Linear-Webhooks/variant/current/schema/reference/unions/DataWebhookPayload
+     */
+    private handleIssueContentUpdate;
+    /**
+     * Build an XML-formatted prompt for issue content updates (title, description, attachments).
+     *
+     * The prompt clearly shows what fields changed by comparing old vs new values,
+     * and includes guidance for the agent to evaluate whether these changes affect
+     * its current implementation or action plan.
+     */
+    private buildIssueUpdatePrompt;
     /**
      * Get issue tracker for a workspace by finding first repository with that workspace ID
      */
@@ -509,6 +538,21 @@ export declare class EdgeWorker extends EventEmitter {
      * Get Agent Sessions for an issue
      */
     getAgentSessionsForIssue(issueId: string, repositoryId: string): any[];
+    /**
+     * Check if the user who triggered the webhook is allowed to interact.
+     * @param webhook The webhook containing user information
+     * @param repository The repository configuration
+     * @returns Access check result with allowed status and user name
+     */
+    private checkUserAccess;
+    /**
+     * Handle blocked user according to configured behavior.
+     * Posts a response activity to end the session.
+     * @param webhook The webhook that triggered the blocked access
+     * @param repository The repository configuration
+     * @param _reason The reason for blocking (for logging)
+     */
+    private handleBlockedUser;
     /**
      * Load persisted EdgeWorker state for all repositories
      */

package/dist/EdgeWorker.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"EdgeWorker.d.ts","sourceRoot":"","sources":["../src/EdgeWorker.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAwB3C,OAAO,KAAK,EAMX,iBAAiB,EACjB,gBAAgB,EAIhB,KAAK,EAGL,gBAAgB,EAChB,2BAA2B,EAO3B,MAAM,YAAY,CAAC;AAqBpB,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAgB/D,OAAO,EACN,gBAAgB,EAEhB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,KAAK,EAAoB,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAErE,MAAM,CAAC,OAAO,WAAW,UAAU;IAClC,EAAE,CAAC,CAAC,SAAS,MAAM,gBAAgB,EAClC,KAAK,EAAE,CAAC,EACR,QAAQ,EAAE,gBAAgB,CAAC,CAAC,CAAC,GAC3B,IAAI,CAAC;IACR,IAAI,CAAC,CAAC,SAAS,MAAM,gBAAgB,EACpC,KAAK,EAAE,CAAC,EACR,GAAG,IAAI,EAAE,UAAU,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,GACtC,OAAO,CAAC;CACX;AAED;;;;;GAKG;AACH,qBAAa,UAAW,SAAQ,YAAY;IAC3C,OAAO,CAAC,MAAM,CAAmB;IACjC,OAAO,CAAC,YAAY,CAA4C;IAChE,OAAO,CAAC,oBAAoB,CAA+C;IAC3E,OAAO,CAAC,aAAa,CAAgD;IACrE,OAAO,CAAC,oBAAoB,CAAqC;IACjE,OAAO,CAAC,YAAY,CAA6B;IACjD,OAAO,CAAC,aAAa,CAA8B;IACnD,OAAO,CAAC,kBAAkB,CAAqB;IAC/C,OAAO,CAAC,uBAAuB,CAA0B;IACzD,OAAO,CAAC,SAAS,CAAS;IAC1B,OAAO,CAAC,yBAAyB,CAAkC;IACnE,OAAO,CAAC,iBAAiB,CAAoB;IAC7C,OAAO,CAAC,aAAa,CAAC,CAAY;IAClC,OAAO,CAAC,UAAU,CAAC,CAAS;IAC5B,2CAA2C;IACpC,gBAAgB,EAAE,gBAAgB,CAAC;IAC1C,OAAO,CAAC,UAAU,CAAa;IAC/B,OAAO,CAAC,kBAAkB,CAAK;IAC/B,4EAA4E;IAC5E,OAAO,CAAC,sBAAsB,CAAyB;gBAE3C,MAAM,EAAE,gBAAgB;IAsOpC;;OAEG;IACG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAgB5B;;OAEG;YACW,oBAAoB;IA0HlC;;;OAGG;IACH,OAAO,CAAC,sBAAsB;IAY9B;;;OAGG;IACH,OAAO,CAAC,uBAAuB;IAa/B;;;OAGG;IACH,OAAO,CAAC,aAAa;IAmBrB;;OAEG;IACG,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IA2C3B;;OAEG;IACH,aAAa,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI;IAIvC;;;;OAIG;YACW,yBAAyB;IAgIvC;;;OAGG;YACW,0BAA0B;IAoExC;;OAEG;YACW,yBAAyB;IAmCvC;;OAEG;YACW,yBAAyB;IAqDvC;;OAEG;IACH,OAAO,CAAC,kBAAkB;IA2B1B;;OAEG;YACW,kBAAkB;IAoChC;;OAEG;YACW,gBAAgB;IAyD9B;;OAEG;IACH,OAAO,CAAC,uBAAuB;IAkC/B;;OAEG;IACH,OAAO,CAAC,SAAS;IAIjB;;OAEG;YACW,kBAAkB;IA+HhC;;OAEG;YACW,0BAA0B;IAiExC;;OAEG;YACW,yBAAyB;IAoEvC;;OAEG;IACH,OAAO,CAAC,WAAW;IAKnB;;OAEG;IACH,OAAO,CAAC,mBAAmB;IAO3B;;OAEG;YACW,aAAa;IAmD3B;;OAEG;YACW,4BAA4B;IAiC1C;;OAEG;IACH,OAAO,CAAC,2BAA2B;IAWnC;;;;;;;OAOG;YACW,wBAAwB;IAoFtC;;;;;OAKG;YACW,gCAAgC;IAqF9C;;;;;;;;;;;OAWG;YACW,qBAAqB;IAgXnC;;;;;;;OAOG;YACW,gBAAgB;IA+C9B;;;;;;;OAOG;YACW,iCAAiC;IAiE/C;;;;;OAKG;YACW,6BAA6B;IA0C3C;;;OAGG;YACW,4BAA4B;IAsN1C;;;;;;;;OAQG;YACW,+BAA+B;IAqD7C;;;;OAIG;YACW,qBAAqB;IAwCnC;;OAEG;YACW,mBAAmB;IAejC;;;OAGG;YACW,iBAAiB;IAiB/B;;OAEG;YACW,gBAAgB;IAa9B;;;;;;;;;OASG;IACH,OAAO,CAAC,yBAAyB;IA2FjC;;OAEG;YACW,+BAA+B;IA+L7C;;;;;;;OAOG;YACW,qBAAqB;IAkKnC;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,sBAAsB;IA6E9B;;;;;;;;OAQG;YACW,kBAAkB;IAoDhC;;;;OAIG;IACH,OAAO,CAAC,iBAAiB;IAUzB;;;;OAIG;IACH,OAAO,CAAC,mBAAmB;IAwB3B;;;;;;;;OAQG;YACW,mBAAmB;IAgGjC;;OAEG;IACH,OAAO,CAAC,wBAAwB;IAUhC;;;;;;;;;;;;;;;OAeG;YACW,mBAAmB;IAoCjC;;;;;;OAMG;YACW,gBAAgB;IAW9B;;;;OAIG;YACW,oBAAoB;IAmFlC;;;;;;;;OAQG;YACW,uBAAuB;IA2LrC;;OAEG;IACH,mBAAmB,IAAI,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC;IAY3C;;;OAGG;IACH,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,GAAG;IAKtC;;OAEG;IACG,cAAc,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;QAChD,WAAW,EAAE,MAAM,CAAC;QACpB,iBAAiB,EAAE,MAAM,CAAC;QAC1B,mBAAmB,EAAE,MAAM,CAAC;KAC5B,CAAC;IAKF;;OAEG;IACH,aAAa,IAAI,MAAM;IAIvB;;OAEG;IACH,mBAAmB,IAAI,MAAM;IAI7B;;;;OAIG;YAEW,uBAAuB;IA+ErC;;OAEG;IAeH;;OAEG;YACW,WAAW;IAqBzB;;OAEG;IASH;;OAEG;IACH,OAAO,CAAC,qBAAqB;IAY7B;;;;;OAKG;YACW,wBAAwB;IAwJtC;;OAEG;YACW,kBAAkB;IAuDhC;;;;;;OAMG;YACW,0BAA0B;IAwFxC;;OAEG;YACW,mBAAmB;IASjC;;OAEG;IACH,OAAO,CAAC,6BAA6B;IA8CrC;;OAEG;IACH,OAAO,CAAC,0BAA0B;IAoFlC;;OAEG;IACH,OAAO,CAAC,cAAc;IAsLtB;;OAEG;IACH,OAAO,CAAC,iBAAiB;IAoBzB;;;;;;;;;;;OAWG;YACW,kBAAkB;IAsChC;;;OAGG;YACW,cAAc;IAiB5B;;OAEG;IACH,OAAO,CAAC,oBAAoB;IAuB5B;;OAEG;YACW,qBAAqB;IAuGnC;;OAEG;IACH,OAAO,CAAC,uBAAuB;IAmC/B;;OAEG;IACH,OAAO,CAAC,mBAAmB;IAgB3B;;;OAGG;YACW,oBAAoB;IAyClC;;OAEG;YACW,sBAAsB;IAsBpC;;OAEG;YACW,gCAAgC;IAW9C;;OAEG;YACW,kCAAkC;IA2ChD;;;;OAIG;IACH,OAAO,CAAC,sBAAsB;IAuL9B;;;;;;;OAOG;IACH,OAAO,CAAC,6BAA6B;IAgBrC;;OAEG;IACH,OAAO,CAAC,oBAAoB;IA2D5B;;;;;;OAMG;IACH,OAAO,CAAC,8BAA8B;IAuBtC;;OAEG;IACH,OAAO,CAAC,iBAAiB;IAkEzB;;OAEG;IACI,wBAAwB,CAC9B,OAAO,EAAE,MAAM,EACf,YAAY,EAAE,MAAM,GAClB,GAAG,EAAE;IASR;;OAEG;YACW,kBAAkB;IAchC;;OAEG;YACW,kBAAkB;IAYhC;;OAEG;IACI,iBAAiB,IAAI,2BAA2B;IAoCvD;;OAEG;IACI,eAAe,CAAC,KAAK,EAAE,2BAA2B,GAAG,IAAI;IA6ChE;;OAEG;YACW,yBAAyB;IAwCvC;;OAEG;YACW,8BAA8B;IAwC5C;;;OAGG;YACW,+BAA+B;IAqE7C;;;OAGG;YACW,0BAA0B;IAoGxC;;;;;;;;;;;;;;;;;;OAkBG;YACW,8BAA8B;IA2E5C;;OAEG;YACW,gCAAgC;IA2G9C;;;;;;;;;;OAUG;IACG,kBAAkB,CACvB,OAAO,EAAE,iBAAiB,EAC1B,UAAU,EAAE,gBAAgB,EAC5B,4BAA4B,EAAE,MAAM,EACpC,mBAAmB,EAAE,mBAAmB,EACxC,UAAU,EAAE,MAAM,EAClB,kBAAkB,GAAE,MAAW,EAC/B,YAAY,GAAE,OAAe,EAC7B,4BAA4B,GAAE,MAAM,EAAO,EAC3C,QAAQ,CAAC,EAAE,MAAM,EACjB,aAAa,CAAC,EAAE,MAAM,EACtB,gBAAgB,CAAC,EAAE,MAAM,GACvB,OAAO,CAAC,IAAI,CAAC;IAgKhB;;OAEG;YACW,iCAAiC;IA6C/C;;OAEG;IACU,qBAAqB,CACjC,OAAO,EAAE,MAAM,EACf,YAAY,EAAE,MAAM,GAClB,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC;IA0CxB;;;OAGG;IACH,OAAO,CAAC,gBAAgB;IAgDxB;;OAEG;YACW,eAAe;CAsC7B"}
+{"version":3,"file":"EdgeWorker.d.ts","sourceRoot":"","sources":["../src/EdgeWorker.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAwB3C,OAAO,KAAK,EAMX,iBAAiB,EACjB,gBAAgB,EAIhB,KAAK,EAIL,gBAAgB,EAChB,2BAA2B,EAO3B,MAAM,YAAY,CAAC;AAsBpB,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAgB/D,OAAO,EACN,gBAAgB,EAEhB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,KAAK,EAAoB,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAGrE,MAAM,CAAC,OAAO,WAAW,UAAU;IAClC,EAAE,CAAC,CAAC,SAAS,MAAM,gBAAgB,EAClC,KAAK,EAAE,CAAC,EACR,QAAQ,EAAE,gBAAgB,CAAC,CAAC,CAAC,GAC3B,IAAI,CAAC;IACR,IAAI,CAAC,CAAC,SAAS,MAAM,gBAAgB,EACpC,KAAK,EAAE,CAAC,EACR,GAAG,IAAI,EAAE,UAAU,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,GACtC,OAAO,CAAC;CACX;AAED;;;;;GAKG;AACH,qBAAa,UAAW,SAAQ,YAAY;IAC3C,OAAO,CAAC,MAAM,CAAmB;IACjC,OAAO,CAAC,YAAY,CAA4C;IAChE,OAAO,CAAC,oBAAoB,CAA+C;IAC3E,OAAO,CAAC,aAAa,CAAgD;IACrE,OAAO,CAAC,oBAAoB,CAAqC;IACjE,OAAO,CAAC,YAAY,CAA6B;IACjD,OAAO,CAAC,aAAa,CAA8B;IACnD,OAAO,CAAC,kBAAkB,CAAqB;IAC/C,OAAO,CAAC,uBAAuB,CAA0B;IACzD,OAAO,CAAC,SAAS,CAAS;IAC1B,OAAO,CAAC,yBAAyB,CAAkC;IACnE,OAAO,CAAC,iBAAiB,CAAoB;IAC7C,OAAO,CAAC,aAAa,CAAC,CAAY;IAClC,OAAO,CAAC,UAAU,CAAC,CAAS;IAC5B,2CAA2C;IACpC,gBAAgB,EAAE,gBAAgB,CAAC;IAC1C,OAAO,CAAC,UAAU,CAAa;IAC/B,OAAO,CAAC,kBAAkB,CAAK;IAC/B,4EAA4E;IAC5E,OAAO,CAAC,sBAAsB,CAAyB;IACvD,qEAAqE;IACrE,OAAO,CAAC,iBAAiB,CAAoB;gBAEjC,MAAM,EAAE,gBAAgB;IAqPpC;;OAEG;IACG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAgB5B;;OAEG;YACW,oBAAoB;IA0HlC;;;OAGG;IACH,OAAO,CAAC,sBAAsB;IAY9B;;;OAGG;IACH,OAAO,CAAC,uBAAuB;IAa/B;;;OAGG;IACH,OAAO,CAAC,aAAa;IAmBrB;;OAEG;IACG,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IA2C3B;;OAEG;IACH,aAAa,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI;IAIvC;;;;OAIG;YACW,yBAAyB;IAgIvC;;;OAGG;YACW,0BAA0B;IAoExC;;OAEG;YACW,yBAAyB;IAmCvC;;OAEG;YACW,yBAAyB;IAqDvC;;OAEG;IACH,OAAO,CAAC,kBAAkB;IA2B1B;;OAEG;YACW,kBAAkB;IAoChC;;OAEG;YACW,gBAAgB;IA4D9B;;OAEG;IACH,OAAO,CAAC,uBAAuB;IAkC/B;;OAEG;IACH,OAAO,CAAC,SAAS;IAIjB;;OAEG;YACW,kBAAkB;IA+HhC;;OAEG;YACW,0BAA0B;IAiExC;;OAEG;YACW,yBAAyB;IAoEvC;;OAEG;IACH,OAAO,CAAC,WAAW;IAKnB;;OAEG;IACH,OAAO,CAAC,mBAAmB;IAO3B;;OAEG;YACW,aAAa;IAsD3B;;OAEG;YACW,4BAA4B;IAiC1C;;;;;;;;;;;;;;;;;OAiBG;YACW,wBAAwB;IA+KtC;;;;;;OAMG;IACH,OAAO,CAAC,sBAAsB;IAgF9B;;OAEG;IACH,OAAO,CAAC,2BAA2B;IAWnC;;;;;;;OAOG;YACW,wBAAwB;IAoFtC;;;;;OAKG;YACW,gCAAgC;IA+F9C;;;;;;;;;;;OAWG;YACW,qBAAqB;IAgXnC;;;;;;;OAOG;YACW,gBAAgB;IA+C9B;;;;;;;OAOG;YACW,iCAAiC;IAiE/C;;;;;OAKG;YACW,6BAA6B;IA0C3C;;;OAGG;YACW,4BAA4B;IAsN1C;;;;;;;;OAQG;YACW,+BAA+B;IA+D7C;;;;OAIG;YACW,qBAAqB;IAwCnC;;OAEG;YACW,mBAAmB;IAejC;;;OAGG;YACW,iBAAiB;IAiB/B;;OAEG;YACW,gBAAgB;IAa9B;;;;;;;;;OASG;IACH,OAAO,CAAC,yBAAyB;IA2FjC;;OAEG;YACW,+BAA+B;IA+L7C;;;;;;;OAOG;YACW,qBAAqB;IAkKnC;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,sBAAsB;IA6E9B;;;;;;;;OAQG;YACW,kBAAkB;IAoDhC;;;;OAIG;IACH,OAAO,CAAC,iBAAiB;IAUzB;;;;OAIG;IACH,OAAO,CAAC,mBAAmB;IAwB3B;;;;;;;;OAQG;YACW,mBAAmB;IAgGjC;;OAEG;IACH,OAAO,CAAC,wBAAwB;IAUhC;;;;;;;;;;;;;;;OAeG;YACW,mBAAmB;IAoCjC;;;;;;OAMG;YACW,gBAAgB;IAW9B;;;;OAIG;YACW,oBAAoB;IAmFlC;;;;;;;;OAQG;YACW,uBAAuB;IAyLrC;;OAEG;IACH,mBAAmB,IAAI,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC;IAY3C;;;OAGG;IACH,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,GAAG;IAKtC;;OAEG;IACG,cAAc,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;QAChD,WAAW,EAAE,MAAM,CAAC;QACpB,iBAAiB,EAAE,MAAM,CAAC;QAC1B,mBAAmB,EAAE,MAAM,CAAC;KAC5B,CAAC;IAKF;;OAEG;IACH,aAAa,IAAI,MAAM;IAIvB;;OAEG;IACH,mBAAmB,IAAI,MAAM;IAI7B;;;;OAIG;YAEW,uBAAuB;IA+ErC;;OAEG;IAeH;;OAEG;YACW,WAAW;IAqBzB;;OAEG;IASH;;OAEG;IACH,OAAO,CAAC,qBAAqB;IAY7B;;;;;OAKG;YACW,wBAAwB;IAwJtC;;OAEG;YACW,kBAAkB;IAuDhC;;;;;;OAMG;YACW,0BAA0B;IAwFxC;;OAEG;YACW,mBAAmB;IASjC;;OAEG;IACH,OAAO,CAAC,6BAA6B;IA8CrC;;OAEG;IACH,OAAO,CAAC,0BAA0B;IAoFlC;;OAEG;IACH,OAAO,CAAC,cAAc;IAsLtB;;OAEG;IACH,OAAO,CAAC,iBAAiB;IAoBzB;;;;;;;;;;;OAWG;YACW,kBAAkB;IAsChC;;;OAGG;YACW,cAAc;IAiB5B;;OAEG;IACH,OAAO,CAAC,oBAAoB;IAuB5B;;OAEG;YACW,qBAAqB;IAuGnC;;OAEG;IACH,OAAO,CAAC,uBAAuB;IAmC/B;;OAEG;IACH,OAAO,CAAC,mBAAmB;IAgB3B;;;OAGG;YACW,oBAAoB;IAyClC;;OAEG;YACW,sBAAsB;IAsBpC;;OAEG;YACW,gCAAgC;IAW9C;;OAEG;YACW,kCAAkC;IA2ChD;;;;OAIG;IACH,OAAO,CAAC,sBAAsB;IAuL9B;;;;;;;OAOG;IACH,OAAO,CAAC,6BAA6B;IAgBrC;;OAEG;IACH,OAAO,CAAC,oBAAoB;IA2D5B;;;;;;OAMG;IACH,OAAO,CAAC,8BAA8B;IAuBtC;;OAEG;IACH,OAAO,CAAC,iBAAiB;IAkEzB;;OAEG;IACI,wBAAwB,CAC9B,OAAO,EAAE,MAAM,EACf,YAAY,EAAE,MAAM,GAClB,GAAG,EAAE;IAaR;;;;;OAKG;IACH,OAAO,CAAC,eAAe;IAqBvB;;;;;;OAMG;YACW,iBAAiB;IA+C/B;;OAEG;YACW,kBAAkB;IAchC;;OAEG;YACW,kBAAkB;IAYhC;;OAEG;IACI,iBAAiB,IAAI,2BAA2B;IAoCvD;;OAEG;IACI,eAAe,CAAC,KAAK,EAAE,2BAA2B,GAAG,IAAI;IA6ChE;;OAEG;YACW,yBAAyB;IAwCvC;;OAEG;YACW,8BAA8B;IAwC5C;;;OAGG;YACW,+BAA+B;IAqE7C;;;OAGG;YACW,0BAA0B;IAoGxC;;;;;;;;;;;;;;;;;;OAkBG;YACW,8BAA8B;IA2E5C;;OAEG;YACW,gCAAgC;IA2G9C;;;;;;;;;;OAUG;IACG,kBAAkB,CACvB,OAAO,EAAE,iBAAiB,EAC1B,UAAU,EAAE,gBAAgB,EAC5B,4BAA4B,EAAE,MAAM,EACpC,mBAAmB,EAAE,mBAAmB,EACxC,UAAU,EAAE,MAAM,EAClB,kBAAkB,GAAE,MAAW,EAC/B,YAAY,GAAE,OAAe,EAC7B,4BAA4B,GAAE,MAAM,EAAO,EAC3C,QAAQ,CAAC,EAAE,MAAM,EACjB,aAAa,CAAC,EAAE,MAAM,EACtB,gBAAgB,CAAC,EAAE,MAAM,GACvB,OAAO,CAAC,IAAI,CAAC;IAgKhB;;OAEG;YACW,iCAAiC;IA6C/C;;OAEG;IACU,qBAAqB,CACjC,OAAO,EAAE,MAAM,EACf,YAAY,EAAE,MAAM,GAClB,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC;IA0CxB;;;OAGG;IACH,OAAO,CAAC,gBAAgB;IAgDxB;;OAEG;YACW,eAAe;CAsC7B"}

package/dist/EdgeWorker.js

@@ -6,7 +6,7 @@ import { LinearClient } from "@linear/sdk";
 import { watch as chokidarWatch } from "chokidar";
 import { ClaudeRunner, createCyrusToolsServer, createImageToolsServer, createSoraToolsServer, getAllTools, getCoordinatorTools, getReadOnlyTools, getSafeTools, } from "cyrus-claude-runner";
 import { ConfigUpdater } from "cyrus-config-updater";
-import { CLIIssueTrackerService, CLIRPCServer, DEFAULT_PROXY_URL, isAgentSessionCreatedWebhook, isAgentSessionPromptedWebhook, isIssueAssignedWebhook, isIssueCommentMentionWebhook, isIssueNewCommentWebhook, isIssueUnassignedWebhook, PersistenceManager, resolvePath, } from "cyrus-core";
+import { CLIIssueTrackerService, CLIRPCServer, DEFAULT_PROXY_URL, isAgentSessionCreatedWebhook, isAgentSessionPromptedWebhook, isIssueAssignedWebhook, isIssueCommentMentionWebhook, isIssueNewCommentWebhook, isIssueTitleOrDescriptionUpdateWebhook, isIssueUnassignedWebhook, PersistenceManager, resolvePath, } from "cyrus-core";
 import { GeminiRunner } from "cyrus-gemini-runner";
 import { LinearEventTransport, LinearIssueTrackerService, } from "cyrus-linear-event-transport";
 import { fileTypeFromBuffer } from "file-type";
@@ -16,6 +16,7 @@ import { GitService } from "./GitService.js";
 import { ProcedureAnalyzer, } from "./procedures/index.js";
 import { RepositoryRouter, } from "./RepositoryRouter.js";
 import { SharedApplicationServer } from "./SharedApplicationServer.js";
+import { UserAccessControl } from "./UserAccessControl.js";
 /**
  * Unified edge worker that **orchestrates**
  *   capturing Linear webhooks,
@@ -43,6 +44,8 @@ export class EdgeWorker extends EventEmitter {
     activeWebhookCount = 0; // Track number of webhooks currently being processed
     /** Handler for AskUserQuestion tool invocations via Linear select signal */
     askUserQuestionHandler;
+    /** User access control for whitelisting/blacklisting Linear users */
+    userAccessControl;
     constructor(config) {
         super();
         this.config = config;
@@ -181,6 +184,14 @@ export class EdgeWorker extends EventEmitter {
                 this.agentSessionManagers.set(repo.id, agentSessionManager);
             }
         }
+        // Initialize user access control with global and per-repository configs
+        const repoAccessConfigs = new Map();
+        for (const repo of config.repositories) {
+            if (repo.isActive !== false) {
+                repoAccessConfigs.set(repo.id, repo.userAccessControl);
+            }
+        }
+        this.userAccessControl = new UserAccessControl(config.userAccessControl, repoAccessConfigs);
         // Components will be initialized and registered in start() method before server starts
     }
     /**
@@ -620,6 +631,8 @@ export class EdgeWorker extends EventEmitter {
                 defaultAllowedTools: parsedConfig.defaultAllowedTools || this.config.defaultAllowedTools,
                 defaultDisallowedTools: parsedConfig.defaultDisallowedTools ||
                     this.config.defaultDisallowedTools,
+                // Issue update trigger: use parsed value if explicitly set, otherwise keep current or default to true
+                issueUpdateTrigger: parsedConfig.issueUpdateTrigger ?? this.config.issueUpdateTrigger,
             };
             // Basic validation
             if (!Array.isArray(newConfig.repositories)) {
@@ -898,6 +911,10 @@ export class EdgeWorker extends EventEmitter {
             else if (isAgentSessionPromptedWebhook(webhook)) {
                 await this.handleUserPromptedAgentActivity(webhook);
             }
+            else if (isIssueTitleOrDescriptionUpdateWebhook(webhook)) {
+                // Handle issue title/description/attachments updates - feed changes into active session
+                await this.handleIssueContentUpdate(webhook);
+            }
             else {
                 if (process.env.CYRUS_WEBHOOK_DEBUG === "true") {
                     console.log(`[handleWebhook] Unhandled webhook type: ${webhook.action}`);
@@ -936,6 +953,180 @@ export class EdgeWorker extends EventEmitter {
         // console.log('=== END WEBHOOK PAYLOAD ===')
         await this.handleIssueUnassigned(webhook.notification.issue, repository);
     }
+    /**
+     * Handle issue content update webhook (title, description, or attachments).
+     *
+     * When the title, description, or attachments of an issue are updated, this handler feeds
+     * the changes into any active session for that issue, allowing the AI to
+     * compare old vs new values and decide whether to take action.
+     *
+     * The prompt uses XML-style formatting to clearly show what changed:
+     * - <issue_update> wrapper with timestamp and issue identifier
+     * - <title_change> with <old_title> and <new_title> if title changed
+     * - <description_change> with <old_description> and <new_description> if description changed
+     * - <attachments_change> with <old_attachments> and <new_attachments> if attachments changed
+     * - <guidance> section instructing the agent to evaluate whether changes affect its work
+     *
+     * @see https://studio.apollographql.com/public/Linear-Webhooks/variant/current/schema/reference/objects/EntityWebhookPayload
+     * @see https://studio.apollographql.com/public/Linear-Webhooks/variant/current/schema/reference/objects/IssueWebhookPayload
+     * @see https://studio.apollographql.com/public/Linear-Webhooks/variant/current/schema/reference/unions/DataWebhookPayload
+     */
+    async handleIssueContentUpdate(webhook) {
+        // Check if issue update trigger is enabled (defaults to true if not set)
+        if (this.config.issueUpdateTrigger === false) {
+            if (process.env.CYRUS_WEBHOOK_DEBUG === "true") {
+                console.log("[EdgeWorker] Issue update trigger is disabled, skipping issue content update");
+            }
+            return;
+        }
+        const issueData = webhook.data;
+        const issueId = issueData.id;
+        const issueIdentifier = issueData.identifier;
+        const updatedFrom = webhook.updatedFrom;
+        if (!updatedFrom) {
+            console.warn(`[EdgeWorker] Issue update webhook for ${issueIdentifier} has no updatedFrom data`);
+            return;
+        }
+        // Get cached repository (updates should only be processed for issues with active sessions)
+        const repository = this.getCachedRepository(issueId);
+        if (!repository) {
+            if (process.env.CYRUS_WEBHOOK_DEBUG === "true") {
+                console.log(`[EdgeWorker] No cached repository for issue update webhook ${issueIdentifier} (no active sessions to notify)`);
+            }
+            return;
+        }
+        // Determine what changed for logging
+        const changedFields = [];
+        if ("title" in updatedFrom)
+            changedFields.push("title");
+        if ("description" in updatedFrom)
+            changedFields.push("description");
+        if ("attachments" in updatedFrom)
+            changedFields.push("attachments");
+        console.log(`[EdgeWorker] Handling issue content update: ${issueIdentifier} (changed: ${changedFields.join(", ")})`);
+        // Get agent session manager for this repository
+        const agentSessionManager = this.agentSessionManagers.get(repository.id);
+        if (!agentSessionManager) {
+            console.log(`[EdgeWorker] No agent session manager for repository ${repository.id}`);
+            return;
+        }
+        // Find session(s) for this issue (may be running or paused between subroutines)
+        const sessions = agentSessionManager.getSessionsByIssueId(issueId);
+        if (sessions.length === 0) {
+            if (process.env.CYRUS_WEBHOOK_DEBUG === "true") {
+                console.log(`[EdgeWorker] No sessions found for issue ${issueIdentifier} to receive update`);
+            }
+            return;
+        }
+        // Process attachments from the updated description if description changed
+        let attachmentManifest = "";
+        if ("description" in updatedFrom && issueData.description) {
+            const firstSession = sessions[0];
+            if (!firstSession) {
+                console.log(`[EdgeWorker] No sessions found for issue ${issueIdentifier}`);
+                return;
+            }
+            const workspaceFolderName = basename(firstSession.workspace.path);
+            const attachmentsDir = join(this.cyrusHome, workspaceFolderName, "attachments");
+            try {
+                // Ensure directory exists
+                await mkdir(attachmentsDir, { recursive: true });
+                // Count existing attachments
+                const existingFiles = await readdir(attachmentsDir).catch(() => []);
+                const existingAttachmentCount = existingFiles.filter((file) => file.startsWith("attachment_") || file.startsWith("image_")).length;
+                // Download attachments from the new description
+                const downloadResult = await this.downloadCommentAttachments(issueData.description, attachmentsDir, repository.linearToken, existingAttachmentCount);
+                if (downloadResult.totalNewAttachments > 0) {
+                    attachmentManifest =
+                        this.generateNewAttachmentManifest(downloadResult);
+                    console.log(`[EdgeWorker] Downloaded ${downloadResult.totalNewAttachments} attachments from updated description`);
+                }
+            }
+            catch (error) {
+                console.error("[EdgeWorker] Failed to process attachments from updated description:", error);
+            }
+        }
+        // Build the XML-formatted prompt showing old vs new values
+        const promptBody = this.buildIssueUpdatePrompt(issueIdentifier, issueData, updatedFrom);
+        // Feed the update into each active session
+        for (const session of sessions) {
+            const linearAgentActivitySessionId = session.linearAgentActivitySessionId;
+            // Check if runner is actively running and supports streaming input
+            const existingRunner = session.agentRunner;
+            const isRunning = existingRunner?.isRunning() || false;
+            // Combine prompt body with attachment manifest
+            let fullPrompt = promptBody;
+            if (attachmentManifest) {
+                fullPrompt = `${promptBody}\n\n${attachmentManifest}`;
+            }
+            if (isRunning &&
+                existingRunner?.supportsStreamingInput &&
+                existingRunner.addStreamMessage) {
+                // Add to existing stream
+                console.log(`[EdgeWorker] Adding issue update to existing stream for ${linearAgentActivitySessionId}`);
+                existingRunner.addStreamMessage(fullPrompt);
+            }
+            else if (isRunning) {
+                // Runner is running but doesn't support streaming input - log and skip
+                console.log(`[EdgeWorker] Session ${linearAgentActivitySessionId} is running but doesn't support streaming input, skipping issue update`);
+            }
+            else {
+                // Session exists but runner is not running - resume with the update
+                console.log(`[EdgeWorker] Resuming session ${linearAgentActivitySessionId} with issue update`);
+                await this.handlePromptWithStreamingCheck(session, repository, linearAgentActivitySessionId, agentSessionManager, promptBody, attachmentManifest, false, // Not a new session
+                [], // No additional allowed directories
+                "issue content update", undefined, // No comment author
+                undefined);
+            }
+        }
+    }
+    /**
+     * Build an XML-formatted prompt for issue content updates (title, description, attachments).
+     *
+     * The prompt clearly shows what fields changed by comparing old vs new values,
+     * and includes guidance for the agent to evaluate whether these changes affect
+     * its current implementation or action plan.
+     */
+    buildIssueUpdatePrompt(issueIdentifier, issueData, updatedFrom) {
+        const timestamp = new Date().toISOString();
+        const parts = [];
+        parts.push(`<issue_update>`);
+        parts.push(`  <identifier>${issueIdentifier}</identifier>`);
+        parts.push(`  <timestamp>${timestamp}</timestamp>`);
+        // Add title change if title was updated
+        if ("title" in updatedFrom) {
+            parts.push(`  <title_change>`);
+            parts.push(`    <old_title>${updatedFrom.title ?? ""}</old_title>`);
+            parts.push(`    <new_title>${issueData.title}</new_title>`);
+            parts.push(`  </title_change>`);
+        }
+        // Add description change if description was updated
+        if ("description" in updatedFrom) {
+            parts.push(`  <description_change>`);
+            parts.push(`    <old_description>${updatedFrom.description ?? ""}</old_description>`);
+            parts.push(`    <new_description>${issueData.description ?? ""}</new_description>`);
+            parts.push(`  </description_change>`);
+        }
+        // Add attachments change if attachments were updated
+        if ("attachments" in updatedFrom) {
+            parts.push(`  <attachments_change>`);
+            parts.push(`    <old_attachments>${JSON.stringify(updatedFrom.attachments ?? null)}</old_attachments>`);
+            parts.push(`    <new_attachments>${JSON.stringify(issueData.attachments ?? null)}</new_attachments>`);
+            parts.push(`  </attachments_change>`);
+        }
+        parts.push(`</issue_update>`);
+        // Add guidance for the agent on how to respond to this update
+        parts.push(``);
+        parts.push(`<guidance>`);
+        parts.push(`  The issue has been updated while you are working on it. Please evaluate whether these changes`);
+        parts.push(`  affect your current implementation or action plan. Consider the following:`);
+        parts.push(`  - Does the updated content change the requirements or scope of your work?`);
+        parts.push(`  - Are there new details, clarifications, or attachments that should inform your approach?`);
+        parts.push(`  - Should you adjust your implementation strategy based on this update?`);
+        parts.push(`  If the changes are relevant, incorporate them into your work. If not, you may continue as planned.`);
+        parts.push(`</guidance>`);
+        return parts.join("\n");
+    }
     /**
      * Get issue tracker for a workspace by finding first repository with that workspace ID
      */
@@ -1050,6 +1241,13 @@ export class EdgeWorker extends EventEmitter {
             console.warn("[EdgeWorker] Agent session created webhook missing issue");
             return;
         }
+        // User access control check
+        const accessResult = this.checkUserAccess(webhook, repository);
+        if (!accessResult.allowed) {
+            console.log(`[EdgeWorker] User ${accessResult.userName} blocked from delegating: ${accessResult.reason}`);
+            await this.handleBlockedUser(webhook, repository, accessResult.reason);
+            return;
+        }
         console.log(`[EdgeWorker] Handling agent session created: ${webhook.agentSession.issue.identifier}`);
         const { agentSession, guidance } = webhook;
         const commentBody = agentSession.comment?.body;
@@ -1565,6 +1763,13 @@ export class EdgeWorker extends EventEmitter {
             console.warn(`[EdgeWorker] No cached repository found for prompted webhook ${agentSessionId}`);
             return;
         }
+        // User access control check for mid-session prompts
+        const accessResult = this.checkUserAccess(webhook, repository);
+        if (!accessResult.allowed) {
+            console.log(`[EdgeWorker] User ${accessResult.userName} blocked from prompting: ${accessResult.reason}`);
+            await this.handleBlockedUser(webhook, repository, accessResult.reason);
+            return;
+        }
         await this.handleNormalPromptedActivity(webhook, repository);
     }
     /**
@@ -2332,9 +2537,8 @@ ${reply.body}
     async buildIssueContextPrompt(issue, repository, newComment, attachmentManifest = "", guidance) {
         console.log(`[EdgeWorker] buildIssueContextPrompt called for issue ${issue.identifier}${newComment ? " with new comment" : ""}`);
         try {
-            // Use custom template if provided (repository-specific takes precedence)
-            let templatePath = repository.promptTemplatePath ||
-                this.config.features?.promptTemplatePath;
+            // Use custom template if provided (repository-specific)
+            let templatePath = repository.promptTemplatePath;
             // If no custom template, use the standard issue assigned user prompt template
             if (!templatePath) {
                 const __filename = fileURLToPath(import.meta.url);
@@ -3645,6 +3849,69 @@ ${input.userComment}
         }
         return agentSessionManager.getSessionsByIssueId(issueId);
     }
+    // ========================================================================
+    // User Access Control
+    // ========================================================================
+    /**
+     * Check if the user who triggered the webhook is allowed to interact.
+     * @param webhook The webhook containing user information
+     * @param repository The repository configuration
+     * @returns Access check result with allowed status and user name
+     */
+    checkUserAccess(webhook, repository) {
+        const creator = webhook.agentSession.creator;
+        const userId = creator?.id;
+        const userEmail = creator?.email;
+        const userName = creator?.name || userId || "Unknown";
+        const result = this.userAccessControl.checkAccess(userId, userEmail, repository.id);
+        if (!result.allowed) {
+            return { allowed: false, reason: result.reason, userName };
+        }
+        return { allowed: true };
+    }
+    /**
+     * Handle blocked user according to configured behavior.
+     * Posts a response activity to end the session.
+     * @param webhook The webhook that triggered the blocked access
+     * @param repository The repository configuration
+     * @param _reason The reason for blocking (for logging)
+     */
+    async handleBlockedUser(webhook, repository, _reason) {
+        const issueTracker = this.issueTrackers.get(repository.id);
+        const agentSessionId = webhook.agentSession.id;
+        const behavior = this.userAccessControl.getBlockBehavior(repository.id);
+        if (!issueTracker) {
+            return;
+        }
+        if (behavior === "comment") {
+            // Get user info for templating
+            const creator = webhook.agentSession.creator;
+            const userName = creator?.name || "User";
+            const userId = creator?.id || "";
+            // Get the message template and replace variables
+            // Supported variables:
+            // - {{userName}} - The user's display name
+            // - {{userId}} - The user's Linear ID
+            let message = this.userAccessControl.getBlockMessage(repository.id);
+            message = message
+                .replace(/\{\{userName\}\}/g, userName)
+                .replace(/\{\{userId\}\}/g, userId);
+            try {
+                await issueTracker.createAgentActivity({
+                    agentSessionId,
+                    content: {
+                        type: "response",
+                        body: message,
+                    },
+                });
+            }
+            catch (error) {
+                console.error("[EdgeWorker] Failed to post blocked user message:", error);
+            }
+        }
+        // For "silent" behavior, we don't post any activity.
+        // The session will remain in "Working" state until manually stopped or timed out.
+    }
     /**
      * Load persisted EdgeWorker state for all repositories
      */