managed-deepagents 0.9.6-dev.19 → 0.9.6-dev.20

package/dist/channels/linear/app-setup.js

@@ -0,0 +1,102 @@
+import { validateChannelIconPath } from "../../runtime/channel-icon.js";
+import { definedFields, handledEventKeys } from "../http/provider.js";
+/** The webhook resource type that delivers each event. */
+const EVENT_RESOURCE_TYPES = {
+    "Issue.create": "Issue",
+    "Issue.update": "Issue",
+    "Comment.create": "Comment",
+    "AgentSessionEvent.created": "AgentSessionEvent",
+    "AgentSessionEvent.prompted": "AgentSessionEvent",
+};
+const SESSION_EVENTS = [
+    "AgentSessionEvent.created",
+    "AgentSessionEvent.prompted",
+];
+/** A revoked install, so the runtime can say why events stopped. */
+const ALWAYS_SUBSCRIBED = ["OAuthAuthorization"];
+/** Reading the workspace, and writing comments and agent activities. */
+const BASE_SCOPES = ["read", "write"];
+/** Mentioning the app and delegating issues to it, which open agent sessions. */
+const SESSION_SCOPES = ["app:mentionable", "app:assignable"];
+/**
+ * Scopes Linear can grant along with `write` without being asked. Agent Auth
+ * refuses a grant beyond the allowed scopes, so they are allowed.
+ */
+const IMPLIED_SCOPES = [
+    "customer:read",
+    "customer:write",
+    "initiative:read",
+    "initiative:write",
+];
+const APP_OPTIONS = ["name", "description", "icon", "teams"];
+const MAX_TEAMS = 100;
+const TEAM_KEY = /^[A-Za-z0-9]{1,16}$/;
+/**
+ * The app the channel's handlers and options need. The CLI reads it from the
+ * channel's manifest instead of working it out; the Python runtime mirrors
+ * these rules in `linear_app_setup.py`.
+ */
+export function linearAppSetup(handlers, app, options) {
+    checkAppOptions(app);
+    const events = [
+        ...new Set([
+            ...handledEventKeys(handlers),
+            ...(options.sessions ? SESSION_EVENTS : []),
+        ]),
+    ]
+        .filter(isLinearEventKey)
+        .sort();
+    // A session event handler answers sessions even with `sessions: false`.
+    const sessions = events.some((key) => SESSION_EVENTS.includes(key));
+    const scopes = sessions ? [...BASE_SCOPES, ...SESSION_SCOPES] : BASE_SCOPES;
+    return {
+        events,
+        sessions,
+        webhookResourceTypes: [
+            ...new Set([
+                ...ALWAYS_SUBSCRIBED,
+                ...events.map((key) => EVENT_RESOURCE_TYPES[key]),
+                // A change to the app's team access changes which sessions reach it.
+                ...(sessions ? ["PermissionChange"] : []),
+            ]),
+        ].sort(),
+        scopes,
+        allowedScopes: [...scopes, ...IMPLIED_SCOPES],
+        ...(app && {
+            app: definedFields({
+                name: app.name?.trim(),
+                description: app.description?.trim(),
+                icon: app.icon && validateChannelIconPath(app.icon, "Linear app.icon"),
+            }),
+        }),
+    };
+}
+function isLinearEventKey(key) {
+    return Object.hasOwn(EVENT_RESOURCE_TYPES, key);
+}
+/** Check the app options against Linear's rules before deploy sends them. */
+function checkAppOptions(app) {
+    if (!app)
+        return;
+    // A misspelled option would silently widen what starts runs.
+    const unknown = Object.keys(app).filter((key) => !APP_OPTIONS.includes(key));
+    if (unknown.length)
+        throw new TypeError(`unknown Linear app option ${unknown.join(", ")}; use ${APP_OPTIONS.join(", ")}`);
+    const name = app.name?.trim();
+    if (name !== undefined &&
+        (name.length < 2 || name.length > 80 || /linear|https?:\/\//i.test(name)))
+        throw new TypeError('Linear app.name must be 2-80 characters, without "Linear" or a URL');
+    const description = app.description?.trim();
+    if (description !== undefined && (!description || description.length > 1000))
+        throw new TypeError("Linear app.description must be 1-1000 characters");
+    if (app.teams === undefined)
+        return;
+    if (app.teams.length === 0)
+        throw new TypeError("Linear app.teams must list team keys; omit it to allow every team");
+    if (app.teams.length > MAX_TEAMS)
+        throw new TypeError(`Linear app.teams must list at most ${MAX_TEAMS} teams`);
+    for (const team of app.teams)
+        if (!TEAM_KEY.test(team.trim()))
+            throw new TypeError(`Linear app.teams has an invalid team key '${team.trim()}'; use keys such as ENG`);
+}
+//# sourceMappingURL=app-setup.js.map

package/dist/channels/linear/app-setup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"app-setup.js","sourceRoot":"","sources":["../../../src/channels/linear/app-setup.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,+BAA+B,CAAC;AACxE,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAGtE,0DAA0D;AAC1D,MAAM,oBAAoB,GAAG;IAC3B,cAAc,EAAE,OAAO;IACvB,cAAc,EAAE,OAAO;IACvB,gBAAgB,EAAE,SAAS;IAC3B,2BAA2B,EAAE,mBAAmB;IAChD,4BAA4B,EAAE,mBAAmB;CACA,CAAC;AAEpD,MAAM,cAAc,GAAqB;IACvC,2BAA2B;IAC3B,4BAA4B;CAC7B,CAAC;AAEF,oEAAoE;AACpE,MAAM,iBAAiB,GAAG,CAAC,oBAAoB,CAAC,CAAC;AACjD,wEAAwE;AACxE,MAAM,WAAW,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AACtC,iFAAiF;AACjF,MAAM,cAAc,GAAG,CAAC,iBAAiB,EAAE,gBAAgB,CAAC,CAAC;AAC7D;;;GAGG;AACH,MAAM,cAAc,GAAG;IACrB,eAAe;IACf,gBAAgB;IAChB,iBAAiB;IACjB,kBAAkB;CACnB,CAAC;AAEF,MAAM,WAAW,GAAG,CAAC,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;AAC7D,MAAM,SAAS,GAAG,GAAG,CAAC;AACtB,MAAM,QAAQ,GAAG,qBAAqB,CAAC;AAkBvC;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAC5B,QAAgB,EAChB,GAAiC,EACjC,OAA8B;IAE9B,eAAe,CAAC,GAAG,CAAC,CAAC;IACrB,MAAM,MAAM,GAAG;QACb,GAAG,IAAI,GAAG,CAAC;YACT,GAAG,gBAAgB,CAAC,QAAQ,CAAC;YAC7B,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC;SAC5C,CAAC;KACH;SACE,MAAM,CAAC,gBAAgB,CAAC;SACxB,IAAI,EAAE,CAAC;IACV,wEAAwE;IACxE,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,cAAc,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;IACpE,MAAM,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,WAAW,EAAE,GAAG,cAAc,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC;IAC5E,OAAO;QACL,MAAM;QACN,QAAQ;QACR,oBAAoB,EAAE;YACpB,GAAG,IAAI,GAAG,CAAC;gBACT,GAAG,iBAAiB;gBACpB,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC;gBACjD,qEAAqE;gBACrE,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;aAC1C,CAAC;SACH,CAAC,IAAI,EAAE;QACR,MAAM;QACN,aAAa,EAAE,CAAC,GAAG,MAAM,EAAE,GAAG,cAAc,CAAC;QAC7C,GAAG,CAAC,GAAG,IAAI;YACT,GAAG,EAAE,aAAa,CAAC;gBACjB,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE;gBACtB,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,IAAI,EAAE;gBACpC,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,uBAAuB,CAAC,GAAG,CAAC,IAAI,EAAE,iBAAiB,CAAC;aACvE,CAAC;SACH,CAAC;KACH,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAW;IACnC,OAAO,MAAM,CAAC,MAAM,CAAC,oBAAoB,EAAE,GAAG,CAAC,CAAC;AAClD,CAAC;AAED,6EAA6E;AAC7E,SAAS,eAAe,CAAC,GAAiC;IACxD,IAAI,CAAC,GAAG;QAAE,OAAO;IACjB,6DAA6D;IAC7D,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7E,IAAI,OAAO,CAAC,MAAM;QAChB,MAAM,IAAI,SAAS,CACjB,6BAA6B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACjF,CAAC;IACJ,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC;IAC9B,IACE,IAAI,KAAK,SAAS;QAClB,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,EAAE,IAAI,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEzE,MAAM,IAAI,SAAS,CACjB,oEAAoE,CACrE,CAAC;IACJ,MAAM,WAAW,GAAG,GAAG,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC;IAC5C,IAAI,WAAW,KAAK,SAAS,IAAI,CAAC,CAAC,WAAW,IAAI,WAAW,CAAC,MAAM,GAAG,IAAI,CAAC;QAC1E,MAAM,IAAI,SAAS,CAAC,kDAAkD,CAAC,CAAC;IAC1E,IAAI,GAAG,CAAC,KAAK,KAAK,SAAS;QAAE,OAAO;IACpC,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC;QACxB,MAAM,IAAI,SAAS,CACjB,mEAAmE,CACpE,CAAC;IACJ,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS;QAC9B,MAAM,IAAI,SAAS,CACjB,sCAAsC,SAAS,QAAQ,CACxD,CAAC;IACJ,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK;QAC1B,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YAC7B,MAAM,IAAI,SAAS,CACjB,6CAA6C,IAAI,CAAC,IAAI,EAAE,yBAAyB,CAClF,CAAC;AACR,CAAC"}

package/dist/channels/linear/connections.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Reserved agent connection for the deployment's Linear app: reading it
+ * returns the app's access token, which Agent Auth renews.
+ */
+export declare const LINEAR_TOKEN_SLUG = "mda/linear-token";
+/**
+ * The deployment's Linear app connection, or one of the app values stored
+ * beside it (`webhook-secret`) when `suffix` is given.
+ */
+export declare function linearAppConnectionSlug(deploymentId: string, suffix?: string): string;
+//# sourceMappingURL=connections.d.ts.map

package/dist/channels/linear/connections.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"connections.d.ts","sourceRoot":"","sources":["../../../src/channels/linear/connections.ts"],"names":[],"mappings":"AAEA;;;GAGG;AACH,eAAO,MAAM,iBAAiB,qBAAqB,CAAC;AAEpD;;;GAGG;AACH,wBAAgB,uBAAuB,CACrC,YAAY,EAAE,MAAM,EACpB,MAAM,CAAC,EAAE,MAAM,GACd,MAAM,CAER"}

package/dist/channels/linear/connections.js

@@ -0,0 +1,14 @@
+import { appConnectionSlug } from "../http/provider.js";
+/**
+ * Reserved agent connection for the deployment's Linear app: reading it
+ * returns the app's access token, which Agent Auth renews.
+ */
+export const LINEAR_TOKEN_SLUG = "mda/linear-token";
+/**
+ * The deployment's Linear app connection, or one of the app values stored
+ * beside it (`webhook-secret`) when `suffix` is given.
+ */
+export function linearAppConnectionSlug(deploymentId, suffix) {
+    return appConnectionSlug("linear", deploymentId, suffix);
+}
+//# sourceMappingURL=connections.js.map

package/dist/channels/linear/connections.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"connections.js","sourceRoot":"","sources":["../../../src/channels/linear/connections.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAExD;;;GAGG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,kBAAkB,CAAC;AAEpD;;;GAGG;AACH,MAAM,UAAU,uBAAuB,CACrC,YAAoB,EACpB,MAAe;IAEf,OAAO,iBAAiB,CAAC,QAAQ,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC;AAC3D,CAAC"}

package/dist/channels/linear/graphql.d.ts

@@ -0,0 +1,57 @@
+import { z } from "zod";
+/** Linear refused a request for exceeding its rate limit. */
+export declare class LinearRateLimitError extends Error {
+    constructor();
+}
+/** Forget the cached app token; for tests. */
+export declare function resetLinearToken(): void;
+/**
+ * Run a GraphQL operation as the app. `query` is a constant; everything that
+ * varies goes in `variables`. A rejected token is read again once. Returns
+ * the response's `data`, checked against `schema`.
+ */
+export declare function linearRequest<T>(query: string, variables: Record<string, unknown>, schema: z.ZodType<T>): Promise<T>;
+/** The Linear user the app acts as. */
+export type LinearAppUser = {
+    id: string;
+    displayName: string;
+};
+export declare function linearAppUser(): Promise<LinearAppUser>;
+/** Forget the cached app user; for tests. */
+export declare function resetLinearAppUser(): void;
+/**
+ * Comment on an issue as the app, threaded under `parentId` when given.
+ * Returns the comment's id and URL.
+ */
+export declare function createLinearComment(input: {
+    issueId: string;
+    body: string;
+    parentId?: string;
+}): Promise<{
+    id: string;
+    url?: string;
+}>;
+/** Whether a comment belongs to an agent session's thread. */
+export declare function commentInAgentSession(commentId: string): Promise<boolean>;
+/** What the app says in an agent session. */
+export type LinearActivityContent = {
+    type: "thought" | "response" | "error" | "elicitation";
+    body: string;
+};
+/**
+ * Post an activity to an agent session as the app. An `ephemeral` thought is
+ * replaced by the next activity.
+ */
+export declare function createLinearActivity(input: {
+    agentSessionId: string;
+    content: LinearActivityContent;
+    ephemeral?: boolean;
+}): Promise<{
+    id: string;
+}>;
+/** Link an agent session to a page about it, such as its Studio thread. */
+export declare function addLinearSessionUrl(agentSessionId: string, link: {
+    label: string;
+    url: string;
+}): Promise<void>;
+//# sourceMappingURL=graphql.d.ts.map

package/dist/channels/linear/graphql.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"graphql.d.ts","sourceRoot":"","sources":["../../../src/channels/linear/graphql.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAiCxB,6DAA6D;AAC7D,qBAAa,oBAAqB,SAAQ,KAAK;IAC7C,cAGC;CACF;AAQD,8CAA8C;AAC9C,wBAAgB,gBAAgB,IAAI,IAAI,CAEvC;AAWD;;;;GAIG;AACH,wBAAsB,aAAa,CAAC,CAAC,EACnC,KAAK,EAAE,MAAM,EACb,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAClC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GACnB,OAAO,CAAC,CAAC,CAAC,CA4BZ;AAoBD,uCAAuC;AACvC,MAAM,MAAM,aAAa,GAAG;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,CAAC;AAahE,wBAAgB,aAAa,IAAI,OAAO,CAAC,aAAa,CAAC,CAEtD;AAED,6CAA6C;AAC7C,wBAAgB,kBAAkB,IAAI,IAAI,CAEzC;AAYD;;;GAGG;AACH,wBAAsB,mBAAmB,CAAC,KAAK,EAAE;IAC/C,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,GAAG,OAAO,CAAC;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAKxC;AAWD,8DAA8D;AAC9D,wBAAsB,qBAAqB,CACzC,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,OAAO,CAAC,CAOlB;AAED,6CAA6C;AAC7C,MAAM,MAAM,qBAAqB,GAAG;IAClC,IAAI,EAAE,SAAS,GAAG,UAAU,GAAG,OAAO,GAAG,aAAa,CAAC;IACvD,IAAI,EAAE,MAAM,CAAC;CACd,CAAC;AAYF;;;GAGG;AACH,wBAAsB,oBAAoB,CAAC,KAAK,EAAE;IAChD,cAAc,EAAE,MAAM,CAAC;IACvB,OAAO,EAAE,qBAAqB,CAAC;IAC/B,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB,GAAG,OAAO,CAAC;IAAE,EAAE,EAAE,MAAM,CAAA;CAAE,CAAC,CAS1B;AASD,2EAA2E;AAC3E,wBAAsB,mBAAmB,CACvC,cAAc,EAAE,MAAM,EACtB,IAAI,EAAE;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GACnC,OAAO,CAAC,IAAI,CAAC,CAMf"}

package/dist/channels/linear/graphql.js

@@ -0,0 +1,167 @@
+import { z } from "zod";
+import { connections } from "../../connections.js";
+import { CachedRead } from "../http/provider.js";
+import { nonblankStringSchema } from "../message-schema.js";
+import { LINEAR_TOKEN_SLUG } from "./connections.js";
+const LINEAR_GRAPHQL_URL = "https://api.linear.app/graphql";
+const LINEAR_API_TIMEOUT_MS = 10_000;
+/** The largest Linear response body read. */
+const LINEAR_RESPONSE_MAX_CHARS = 1_000_000;
+/** How long the app token read from Agent Auth is reused. */
+const TOKEN_TTL_MS = 5 * 60_000;
+/**
+ * How long the app's user is reused. It changes only when the app is
+ * installed anew, which a long-lived process should notice too.
+ */
+const APP_USER_TTL_MS = 60 * 60_000;
+/**
+ * Where GraphQL requests go: Linear's API, or under `mda dev`
+ * (`MDA_LOCAL_DEV=1`) the stand-in `MDA_LINEAR_API_URL` names, so local
+ * tests never reach Linear. A deployment always uses Linear's API.
+ */
+function graphqlUrl(env = process.env) {
+    const override = env.MDA_LINEAR_API_URL?.trim();
+    if (env.MDA_LOCAL_DEV !== "1" || !override)
+        return LINEAR_GRAPHQL_URL;
+    const url = new URL(override);
+    if (url.protocol !== "http:" && url.protocol !== "https:")
+        throw new TypeError("MDA_LINEAR_API_URL must be an http(s) URL");
+    return url.toString();
+}
+/** Linear refused a request for exceeding its rate limit. */
+export class LinearRateLimitError extends Error {
+    constructor() {
+        super("Linear rate limit exceeded");
+        this.name = "LinearRateLimitError";
+    }
+}
+/** The app's access token, read from Agent Auth at most every few minutes. */
+const appToken = new CachedRead(() => connections.resolveDeploymentSecret(LINEAR_TOKEN_SLUG), () => TOKEN_TTL_MS);
+/** Forget the cached app token; for tests. */
+export function resetLinearToken() {
+    appToken.reset();
+}
+function errorCodes(body) {
+    return (body.errors ?? []).flatMap((error) => typeof error.extensions?.code === "string" ? [error.extensions.code] : []);
+}
+/**
+ * Run a GraphQL operation as the app. `query` is a constant; everything that
+ * varies goes in `variables`. A rejected token is read again once. Returns
+ * the response's `data`, checked against `schema`.
+ */
+export async function linearRequest(query, variables, schema) {
+    const send = async () => fetch(graphqlUrl(), {
+        method: "POST",
+        headers: {
+            Authorization: `Bearer ${await appToken.get()}`,
+            "Content-Type": "application/json",
+        },
+        body: JSON.stringify({ query, variables }),
+        signal: AbortSignal.timeout(LINEAR_API_TIMEOUT_MS),
+    });
+    let response = await send();
+    let body = await readBody(response);
+    if (response.status === 401 ||
+        errorCodes(body).includes("AUTHENTICATION_ERROR")) {
+        appToken.reset();
+        response = await send();
+        body = await readBody(response);
+    }
+    if (errorCodes(body).includes("RATELIMITED"))
+        throw new LinearRateLimitError();
+    if (!response.ok || body.errors?.length || body.data === undefined)
+        throw new Error(`Linear refused the request (HTTP ${response.status})`);
+    const data = schema.safeParse(body.data);
+    if (!data.success)
+        throw new Error("Linear answered in an unexpected shape");
+    return data.data;
+}
+async function readBody(response) {
+    const text = await response.text();
+    if (text.length > LINEAR_RESPONSE_MAX_CHARS)
+        return {};
+    try {
+        const parsed = JSON.parse(text);
+        return parsed && typeof parsed === "object" && !Array.isArray(parsed)
+            ? parsed
+            : {};
+    }
+    catch {
+        return {};
+    }
+}
+const VIEWER_QUERY = "query MdaLinearViewer { viewer { id displayName } }";
+const viewerSchema = z.object({
+    viewer: z.object({ id: nonblankStringSchema, displayName: z.string() }),
+});
+/**
+ * The Linear user the app acts as, read at most hourly: its own comments and
+ * changes are ignored, and a comment mentioning its `displayName` starts an
+ * agent session.
+ */
+const appUser = new CachedRead(async () => (await linearRequest(VIEWER_QUERY, {}, viewerSchema)).viewer, () => APP_USER_TTL_MS);
+export function linearAppUser() {
+    return appUser.get();
+}
+/** Forget the cached app user; for tests. */
+export function resetLinearAppUser() {
+    appUser.reset();
+}
+const COMMENT_CREATE_MUTATION = `mutation MdaLinearCommentCreate($input: CommentCreateInput!) {
+  commentCreate(input: $input) { success comment { id url } }
+}`;
+const commentCreateSchema = z.object({
+    commentCreate: z.object({
+        success: z.literal(true),
+        comment: z.object({ id: nonblankStringSchema, url: z.string().nullish() }),
+    }),
+});
+/**
+ * Comment on an issue as the app, threaded under `parentId` when given.
+ * Returns the comment's id and URL.
+ */
+export async function createLinearComment(input) {
+    const { comment } = (await linearRequest(COMMENT_CREATE_MUTATION, { input }, commentCreateSchema)).commentCreate;
+    return { id: comment.id, ...(comment.url && { url: comment.url }) };
+}
+const COMMENT_SESSION_QUERY = `query MdaLinearCommentSession($id: String!) {
+  comment(id: $id) { agentSession { id } }
+}`;
+const commentSessionSchema = z.object({
+    comment: z
+        .object({ agentSession: z.object({ id: nonblankStringSchema }).nullable() })
+        .nullable(),
+});
+/** Whether a comment belongs to an agent session's thread. */
+export async function commentInAgentSession(commentId) {
+    const { comment } = await linearRequest(COMMENT_SESSION_QUERY, { id: commentId }, commentSessionSchema);
+    return Boolean(comment?.agentSession);
+}
+const ACTIVITY_CREATE_MUTATION = `mutation MdaLinearActivityCreate($input: AgentActivityCreateInput!) {
+  agentActivityCreate(input: $input) { success agentActivity { id } }
+}`;
+const activityCreateSchema = z.object({
+    agentActivityCreate: z.object({
+        success: z.literal(true),
+        agentActivity: z.object({ id: nonblankStringSchema }),
+    }),
+});
+/**
+ * Post an activity to an agent session as the app. An `ephemeral` thought is
+ * replaced by the next activity.
+ */
+export async function createLinearActivity(input) {
+    const { agentActivity } = (await linearRequest(ACTIVITY_CREATE_MUTATION, { input }, activityCreateSchema)).agentActivityCreate;
+    return { id: agentActivity.id };
+}
+const SESSION_UPDATE_MUTATION = `mutation MdaLinearSessionUpdate($id: String!, $input: AgentSessionUpdateInput!) {
+  agentSessionUpdate(id: $id, input: $input) { success }
+}`;
+const sessionUpdateSchema = z.object({
+    agentSessionUpdate: z.object({ success: z.literal(true) }),
+});
+/** Link an agent session to a page about it, such as its Studio thread. */
+export async function addLinearSessionUrl(agentSessionId, link) {
+    await linearRequest(SESSION_UPDATE_MUTATION, { id: agentSessionId, input: { addedExternalUrls: [link] } }, sessionUpdateSchema);
+}
+//# sourceMappingURL=graphql.js.map

package/dist/channels/linear/graphql.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"graphql.js","sourceRoot":"","sources":["../../../src/channels/linear/graphql.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACjD,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAErD,MAAM,kBAAkB,GAAG,gCAAgC,CAAC;AAC5D,MAAM,qBAAqB,GAAG,MAAM,CAAC;AACrC,6CAA6C;AAC7C,MAAM,yBAAyB,GAAG,SAAS,CAAC;AAC5C,6DAA6D;AAC7D,MAAM,YAAY,GAAG,CAAC,GAAG,MAAM,CAAC;AAChC;;;GAGG;AACH,MAAM,eAAe,GAAG,EAAE,GAAG,MAAM,CAAC;AAEpC;;;;GAIG;AACH,SAAS,UAAU,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG;IACnC,MAAM,QAAQ,GAAG,GAAG,CAAC,kBAAkB,EAAE,IAAI,EAAE,CAAC;IAChD,IAAI,GAAG,CAAC,aAAa,KAAK,GAAG,IAAI,CAAC,QAAQ;QAAE,OAAO,kBAAkB,CAAC;IACtE,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC9B,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ;QACvD,MAAM,IAAI,SAAS,CAAC,2CAA2C,CAAC,CAAC;IACnE,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC;AACxB,CAAC;AAED,6DAA6D;AAC7D,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IAC7C;QACE,KAAK,CAAC,4BAA4B,CAAC,CAAC;QACpC,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;IACrC,CAAC;CACF;AAED,8EAA8E;AAC9E,MAAM,QAAQ,GAAG,IAAI,UAAU,CAC7B,GAAG,EAAE,CAAC,WAAW,CAAC,uBAAuB,CAAC,iBAAiB,CAAC,EAC5D,GAAG,EAAE,CAAC,YAAY,CACnB,CAAC;AAEF,8CAA8C;AAC9C,MAAM,UAAU,gBAAgB;IAC9B,QAAQ,CAAC,KAAK,EAAE,CAAC;AACnB,CAAC;AAKD,SAAS,UAAU,CAAC,IAAqB;IACvC,OAAO,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAC3C,OAAO,KAAK,CAAC,UAAU,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAC1E,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,KAAa,EACb,SAAkC,EAClC,MAAoB;IAEpB,MAAM,IAAI,GAAG,KAAK,IAAI,EAAE,CACtB,KAAK,CAAC,UAAU,EAAE,EAAE;QAClB,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,aAAa,EAAE,UAAU,MAAM,QAAQ,CAAC,GAAG,EAAE,EAAE;YAC/C,cAAc,EAAE,kBAAkB;SACnC;QACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;QAC1C,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,qBAAqB,CAAC;KACnD,CAAC,CAAC;IACL,IAAI,QAAQ,GAAG,MAAM,IAAI,EAAE,CAAC;IAC5B,IAAI,IAAI,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACpC,IACE,QAAQ,CAAC,MAAM,KAAK,GAAG;QACvB,UAAU,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,sBAAsB,CAAC,EACjD,CAAC;QACD,QAAQ,CAAC,KAAK,EAAE,CAAC;QACjB,QAAQ,GAAG,MAAM,IAAI,EAAE,CAAC;QACxB,IAAI,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAClC,CAAC;IACD,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC;QAC1C,MAAM,IAAI,oBAAoB,EAAE,CAAC;IACnC,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,MAAM,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS;QAChE,MAAM,IAAI,KAAK,CAAC,oCAAoC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;IAC1E,MAAM,IAAI,GAAG,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACzC,IAAI,CAAC,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC7E,OAAO,IAAI,CAAC,IAAI,CAAC;AACnB,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,QAAkB;IACxC,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IACnC,IAAI,IAAI,CAAC,MAAM,GAAG,yBAAyB;QAAE,OAAO,EAAE,CAAC;IACvD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,CAAC;QAC3C,OAAO,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YACnE,CAAC,CAAE,MAA0B;YAC7B,CAAC,CAAC,EAAE,CAAC;IACT,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,MAAM,YAAY,GAAG,qDAAqD,CAAC;AAC3E,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5B,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,oBAAoB,EAAE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;CACxE,CAAC,CAAC;AAKH;;;;GAIG;AACH,MAAM,OAAO,GAAG,IAAI,UAAU,CAC5B,KAAK,IAA4B,EAAE,CACjC,CAAC,MAAM,aAAa,CAAC,YAAY,EAAE,EAAE,EAAE,YAAY,CAAC,CAAC,CAAC,MAAM,EAC9D,GAAG,EAAE,CAAC,eAAe,CACtB,CAAC;AAEF,MAAM,UAAU,aAAa;IAC3B,OAAO,OAAO,CAAC,GAAG,EAAE,CAAC;AACvB,CAAC;AAED,6CAA6C;AAC7C,MAAM,UAAU,kBAAkB;IAChC,OAAO,CAAC,KAAK,EAAE,CAAC;AAClB,CAAC;AAED,MAAM,uBAAuB,GAAG;;EAE9B,CAAC;AACH,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,aAAa,EAAE,CAAC,CAAC,MAAM,CAAC;QACtB,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;QACxB,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,oBAAoB,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC;KAC3E,CAAC;CACH,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,KAIzC;IACC,MAAM,EAAE,OAAO,EAAE,GAAG,CAClB,MAAM,aAAa,CAAC,uBAAuB,EAAE,EAAE,KAAK,EAAE,EAAE,mBAAmB,CAAC,CAC7E,CAAC,aAAa,CAAC;IAChB,OAAO,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,GAAG,CAAC,OAAO,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC;AACtE,CAAC;AAED,MAAM,qBAAqB,GAAG;;EAE5B,CAAC;AACH,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,OAAO,EAAE,CAAC;SACP,MAAM,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,oBAAoB,EAAE,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC;SAC3E,QAAQ,EAAE;CACd,CAAC,CAAC;AAEH,8DAA8D;AAC9D,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,SAAiB;IAEjB,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,aAAa,CACrC,qBAAqB,EACrB,EAAE,EAAE,EAAE,SAAS,EAAE,EACjB,oBAAoB,CACrB,CAAC;IACF,OAAO,OAAO,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;AACxC,CAAC;AAQD,MAAM,wBAAwB,GAAG;;EAE/B,CAAC;AACH,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,mBAAmB,EAAE,CAAC,CAAC,MAAM,CAAC;QAC5B,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;QACxB,aAAa,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,oBAAoB,EAAE,CAAC;KACtD,CAAC;CACH,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,KAI1C;IACC,MAAM,EAAE,aAAa,EAAE,GAAG,CACxB,MAAM,aAAa,CACjB,wBAAwB,EACxB,EAAE,KAAK,EAAE,EACT,oBAAoB,CACrB,CACF,CAAC,mBAAmB,CAAC;IACtB,OAAO,EAAE,EAAE,EAAE,aAAa,CAAC,EAAE,EAAE,CAAC;AAClC,CAAC;AAED,MAAM,uBAAuB,GAAG;;EAE9B,CAAC;AACH,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,kBAAkB,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;CAC3D,CAAC,CAAC;AAEH,2EAA2E;AAC3E,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,cAAsB,EACtB,IAAoC;IAEpC,MAAM,aAAa,CACjB,uBAAuB,EACvB,EAAE,EAAE,EAAE,cAAc,EAAE,KAAK,EAAE,EAAE,iBAAiB,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,EAC5D,mBAAmB,CACpB,CAAC;AACJ,CAAC"}

package/dist/channels/linear/index.d.ts

@@ -0,0 +1,13 @@
+import { type HttpChannel } from "../http/index.js";
+import type { LinearChannelOptions } from "./types.js";
+export type { LinearAppOptions, LinearChannelOptions, LinearChannelThread, LinearEvent, LinearEventCallback, LinearEventKey, LinearEventResult, LinearPayloadFor, } from "./types.js";
+export { LinearRateLimitError } from "./graphql.js";
+/**
+ * Adapt verified Linear webhooks into HTTP channel messages or skips.
+ *
+ * @experimental The Linear channel may change in a minor release.
+ */
+export declare function linearChannel(options?: LinearChannelOptions): HttpChannel;
+/** Forget the cached webhook secret; for tests. */
+export declare function resetLinearWebhookSecret(): void;
+//# sourceMappingURL=index.d.ts.map

package/dist/channels/linear/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/channels/linear/index.ts"],"names":[],"mappings":"AAEA,OAAO,EAIL,KAAK,WAAW,EAOjB,MAAM,kBAAkB,CAAC;AA2C1B,OAAO,KAAK,EACV,oBAAoB,EAIrB,MAAM,YAAY,CAAC;AAIpB,YAAY,EACV,gBAAgB,EAChB,oBAAoB,EACpB,mBAAmB,EACnB,WAAW,EACX,mBAAmB,EACnB,cAAc,EACd,iBAAiB,EACjB,gBAAgB,GACjB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AAwBpD;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,OAAO,GAAE,oBAAyB,GAAG,WAAW,CAuD7E;AAgBD,mDAAmD;AACnD,wBAAgB,wBAAwB,IAAI,IAAI,CAE/C"}