patchrelay 0.57.0 → 0.59.0

package/dist/agent-session-plan.js

@@ -15,7 +15,7 @@ function implementationPlan() {
     return [
         { content: "Prepare workspace", status: "pending" },
         { content: "Implementing", status: "pending" },
-        { content: "Awaiting verification", status: "pending" },
+        { content: "Fresh head pushed", status: "pending" },
         { content: "Merge", status: "pending" },
     ];
 }
@@ -30,8 +30,8 @@ function orchestrationPlan() {
 function reviewFixPlan() {
     return [
         { content: "Prepare workspace", status: "completed" },
-        { content: "Addressing review feedback", status: "pending" },
-        { content: "Awaiting re-verification", status: "pending" },
+        { content: "Addressing requested changes", status: "pending" },
+        { content: "Fresh head pushed", status: "pending" },
         { content: "Merge", status: "pending" },
     ];
 }
@@ -39,7 +39,7 @@ function branchUpkeepPlan() {
     return [
         { content: "Prepare workspace", status: "completed" },
         { content: "Repairing branch upkeep", status: "pending" },
-        { content: "Awaiting re-verification", status: "pending" },
+        { content: "Fresh head pushed", status: "pending" },
         { content: "Merge", status: "pending" },
     ];
 }
@@ -55,7 +55,7 @@ function mainRepairPlan(attempt) {
     return [
         { content: "Inspect main failure", status: "pending" },
         { content: `Repairing main (${attemptLabel(attempt)})`, status: "pending" },
-        { content: "Awaiting re-verification", status: "pending" },
+        { content: "Fresh head pushed", status: "pending" },
         { content: "Priority merge", status: "pending" },
     ];
 }
@@ -152,7 +152,12 @@ export function buildAgentSessionPlan(params) {
                 ? mainRepairPlan(params.ciRepairAttempts ?? 1)
                 : planForRunType("implementation", params), ["completed", "inProgress", "pending", "pending"]);
         case "pr_open":
-            return setStatuses(implementationPlan(), ["completed", "completed", "inProgress", "pending"]);
+            return setStatuses([
+                { content: "Prepare workspace", status: "completed" },
+                { content: "Implementing", status: "completed" },
+                { content: prOpenGateLabel(params), status: "inProgress" },
+                { content: "Merge", status: "pending" },
+            ], ["completed", "completed", "inProgress", "pending"]);
         case "changes_requested":
             return setStatuses(reviewFixPlan(), ["completed", "inProgress", "pending", "pending"]);
         case "repairing_ci":
@@ -160,9 +165,9 @@ export function buildAgentSessionPlan(params) {
         case "awaiting_queue":
             return setStatuses([
                 { content: "Prepare workspace", status: "completed" },
-                { content: "Implementing", status: "completed" },
+                { content: "Fresh head pushed", status: "completed" },
                 { content: "Verification passed", status: "completed" },
-                { content: "Awaiting merge", status: "inProgress" },
+                { content: "Awaiting queue", status: "inProgress" },
             ], ["completed", "completed", "completed", "inProgress"]);
         case "repairing_queue":
             return setStatuses(queueRepairPlan(params.queueRepairAttempts ?? 1), ["completed", "completed", "completed", "inProgress"]);
@@ -175,12 +180,41 @@ export function buildAgentSessionPlan(params) {
         case "done":
             return setStatuses([
                 { content: "Prepare workspace", status: "completed" },
-                { content: "Implementing", status: "completed" },
+                { content: "Fresh head pushed", status: "completed" },
                 { content: "Verification passed", status: "completed" },
                 { content: "Merged", status: "completed" },
             ], ["completed", "completed", "completed", "completed"]);
     }
 }
+function prOpenGateLabel(params) {
+    const reviewState = normalizeState(params.prReviewState);
+    const checkStatus = normalizeState(params.prCheckStatus);
+    if (isPendingCheckStatus(checkStatus)) {
+        return "Awaiting checks";
+    }
+    if (isAwaitingReviewState(reviewState)) {
+        return "Awaiting review";
+    }
+    if (isApprovedReviewState(reviewState) && isPassedCheckStatus(checkStatus)) {
+        return "Awaiting queue";
+    }
+    return "Fresh head pushed";
+}
+function isAwaitingReviewState(value) {
+    return value === "review_required" || value === "commented" || value === "changes_requested";
+}
+function isApprovedReviewState(value) {
+    return value === "approved";
+}
+function isPendingCheckStatus(value) {
+    return value === "pending" || value === "queued" || value === "in_progress" || value === "waiting";
+}
+function isPassedCheckStatus(value) {
+    return value === "success" || value === "passed";
+}
+function normalizeState(value) {
+    return (value ?? "").trim().toLowerCase().replace(/[-/\s]+/g, "_");
+}
 function planForRunType(runType, params) {
     switch (runType) {
         case "main_repair":
@@ -206,6 +240,8 @@ export function buildAgentSessionPlanForIssue(issue, options) {
         ...(issue.issueClass ? { issueClass: issue.issueClass } : {}),
         ...(issue.orchestrationSettleUntil ? { orchestrationSettleUntil: issue.orchestrationSettleUntil } : {}),
         ...(issue.pendingRunType ? { pendingRunType: issue.pendingRunType } : {}),
+        ...(issue.prReviewState ? { prReviewState: issue.prReviewState } : {}),
+        ...(issue.prCheckStatus ? { prCheckStatus: issue.prCheckStatus } : {}),
         ...(options?.activeRunType ? { activeRunType: options.activeRunType } : {}),
     });
 }

package/dist/agent-session-presentation.js

@@ -2,19 +2,13 @@ import { buildSessionStatusUrl, createSessionStatusToken, deriveSessionStatusSig
 const SESSION_STATUS_TTL_SECONDS = 60 * 60 * 24 * 7;
 export function buildAgentSessionExternalUrls(config, params) {
     const urls = [];
-    if (params.issueKey && config.server.publicBaseUrl) {
-        const token = createSessionStatusToken({
-            issueKey: params.issueKey,
-            secret: deriveSessionStatusSigningSecret(config.linear.tokenEncryptionKey),
-            ttlSeconds: SESSION_STATUS_TTL_SECONDS,
-        });
+    const statusUrl = params.issueKey && config.server.publicBaseUrl
+        ? buildPublicStatusUrl(config, params.issueKey)
+        : undefined;
+    if (statusUrl) {
         urls.push({
             label: "PatchRelay status",
-            url: buildSessionStatusUrl({
-                publicBaseUrl: config.server.publicBaseUrl,
-                issueKey: params.issueKey,
-                token: token.token,
-            }),
+            url: statusUrl,
         });
     }
     if (params.prUrl) {
@@ -23,5 +17,98 @@ export function buildAgentSessionExternalUrls(config, params) {
             url: params.prUrl,
         });
     }
+    const reviewQuillUrl = buildReviewQuillUrl(params);
+    if (reviewQuillUrl) {
+        urls.push({
+            label: "Review-quill status",
+            url: reviewQuillUrl,
+        });
+    }
+    const mergeStewardUrl = buildMergeStewardUrl(params);
+    if (mergeStewardUrl) {
+        urls.push({
+            label: "Merge-steward queue",
+            url: mergeStewardUrl,
+        });
+    }
+    if (statusUrl && params.activeRunId !== undefined) {
+        urls.push({
+            label: "Active run",
+            url: withFragment(statusUrl, "current-view"),
+        });
+    }
     return urls.length > 0 ? urls : undefined;
 }
+function buildPublicStatusUrl(config, issueKey) {
+    if (!config.server.publicBaseUrl)
+        return undefined;
+    const token = createSessionStatusToken({
+        issueKey,
+        secret: deriveSessionStatusSigningSecret(config.linear.tokenEncryptionKey),
+        ttlSeconds: SESSION_STATUS_TTL_SECONDS,
+    });
+    return buildSessionStatusUrl({
+        publicBaseUrl: config.server.publicBaseUrl,
+        issueKey,
+        token: token.token,
+    });
+}
+function buildReviewQuillUrl(params) {
+    if (isReviewQuillCheck(params.lastGitHubFailureCheckName) && params.lastGitHubFailureCheckUrl) {
+        return params.lastGitHubFailureCheckUrl;
+    }
+    if (!params.prUrl || !hasReviewQuillContext(params)) {
+        return undefined;
+    }
+    return `${trimTrailingSlash(params.prUrl)}/checks`;
+}
+function buildMergeStewardUrl(params) {
+    const incidentUrl = parseQueueIncidentUrl(params.lastQueueIncidentJson);
+    if (incidentUrl)
+        return incidentUrl;
+    if (params.lastGitHubFailureSource === "queue_eviction"
+        || isMergeStewardCheck(params.lastGitHubFailureCheckName)) {
+        return params.lastGitHubFailureCheckUrl;
+    }
+    return undefined;
+}
+function hasReviewQuillContext(params) {
+    if (isReviewQuillCheck(params.lastGitHubFailureCheckName))
+        return true;
+    const reviewState = normalizeState(params.prReviewState);
+    if (reviewState === "review_required" || reviewState === "changes_requested" || reviewState === "commented") {
+        return true;
+    }
+    return normalizeState(params.prCheckStatus).includes("review");
+}
+function isReviewQuillCheck(checkName) {
+    return normalizeState(checkName).includes("review_quill");
+}
+function isMergeStewardCheck(checkName) {
+    return normalizeState(checkName).includes("merge_steward");
+}
+function parseQueueIncidentUrl(value) {
+    if (!value)
+        return undefined;
+    try {
+        const parsed = JSON.parse(value);
+        if (!parsed || typeof parsed !== "object")
+            return undefined;
+        const incidentUrl = parsed.incidentUrl;
+        return typeof incidentUrl === "string" && incidentUrl.trim() ? incidentUrl.trim() : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+function withFragment(url, fragment) {
+    const parsed = new URL(url);
+    parsed.hash = fragment;
+    return parsed.toString();
+}
+function trimTrailingSlash(value) {
+    return value.replace(/\/+$/, "");
+}
+function normalizeState(value) {
+    return (value ?? "").trim().toLowerCase().replace(/[-/\s]+/g, "_");
+}

package/dist/build-info.json

@@ -1,6 +1,6 @@
 {
   "service": "patchrelay",
-  "version": "0.57.0",
-  "commit": "d67134a3b377",
-  "builtAt": "2026-05-01T22:45:14.762Z"
+  "version": "0.59.0",
+  "commit": "34953d2c9399",
+  "builtAt": "2026-05-02T22:05:57.144Z"
 }

package/dist/cli/commands/linear.js

@@ -28,7 +28,11 @@ export async function handleLinearCommand(params) {
                         ? "No Linear workspaces connected.\n"
                         : `${result.workspaces.map((workspace) => {
                             const name = workspace.installation.workspaceKey ?? workspace.installation.workspaceName ?? `installation-${workspace.installation.id}`;
-                            return `${name}  repos=${workspace.linkedRepos.length} teams=${workspace.teams.length} projects=${workspace.projects.length}`;
+                            const health = workspace.installation.healthStatus && workspace.installation.healthStatus !== "ok"
+                                ? ` health=${workspace.installation.healthStatus}`
+                                : "";
+                            const reason = workspace.installation.healthReason ? ` ${workspace.installation.healthReason}` : "";
+                            return `${name}  repos=${workspace.linkedRepos.length} teams=${workspace.teams.length} projects=${workspace.projects.length}${health}${reason}`;
                         }).join("\n")}\n`);
                 return 0;
             }

package/dist/db/linear-installation-store.js

@@ -24,20 +24,24 @@ export class LinearInstallationStore {
               scopes_json = ?,
               token_type = COALESCE(?, token_type),
               expires_at = COALESCE(?, expires_at),
+              health_status = 'ok',
+              health_reason = NULL,
+              health_updated_at = ?,
               updated_at = ?
           WHERE id = ?
           `)
-                .run(params.workspaceName ?? null, params.workspaceKey ?? null, params.actorId ?? null, params.actorName ?? null, params.accessTokenCiphertext, params.refreshTokenCiphertext ?? null, params.scopesJson, params.tokenType ?? null, params.expiresAt ?? null, now, existing.id);
+                .run(params.workspaceName ?? null, params.workspaceKey ?? null, params.actorId ?? null, params.actorName ?? null, params.accessTokenCiphertext, params.refreshTokenCiphertext ?? null, params.scopesJson, params.tokenType ?? null, params.expiresAt ?? null, now, now, existing.id);
             return this.getLinearInstallation(existing.id);
         }
         const result = this.connection
             .prepare(`
         INSERT INTO linear_installations (
           workspace_id, workspace_name, workspace_key, actor_id, actor_name,
-          access_token_ciphertext, refresh_token_ciphertext, scopes_json, token_type, expires_at, created_at, updated_at
-        ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
+          access_token_ciphertext, refresh_token_ciphertext, scopes_json, token_type, expires_at,
+          health_status, health_reason, health_updated_at, created_at, updated_at
+        ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, 'ok', NULL, ?, ?, ?)
         `)
-            .run(params.workspaceId ?? null, params.workspaceName ?? null, params.workspaceKey ?? null, params.actorId ?? null, params.actorName ?? null, params.accessTokenCiphertext, params.refreshTokenCiphertext ?? null, params.scopesJson, params.tokenType ?? null, params.expiresAt ?? null, now, now);
+            .run(params.workspaceId ?? null, params.workspaceName ?? null, params.workspaceKey ?? null, params.actorId ?? null, params.actorName ?? null, params.accessTokenCiphertext, params.refreshTokenCiphertext ?? null, params.scopesJson, params.tokenType ?? null, params.expiresAt ?? null, now, now, now);
         return this.getLinearInstallation(Number(result.lastInsertRowid));
     }
     saveLinearInstallation(params) {
@@ -67,6 +71,20 @@ export class LinearInstallationStore {
          WHERE id = ?`)
             .run(params.workspaceName ?? null, params.workspaceKey ?? null, isoNow(), id);
     }
+    updateLinearInstallationHealth(id, params) {
+        const healthUpdatedAt = params.healthUpdatedAt ?? isoNow();
+        this.connection
+            .prepare(`
+        UPDATE linear_installations
+        SET health_status = ?,
+            health_reason = ?,
+            health_updated_at = ?,
+            updated_at = ?
+        WHERE id = ?
+        `)
+            .run(params.healthStatus, params.healthReason ?? null, healthUpdatedAt, healthUpdatedAt, id);
+        return this.getLinearInstallation(id);
+    }
     getLinearInstallation(id) {
         const row = this.connection
             .prepare("SELECT * FROM linear_installations WHERE id = ?")
@@ -252,6 +270,9 @@ function mapLinearInstallation(row) {
         scopesJson: String(row.scopes_json),
         ...(row.token_type === null ? {} : { tokenType: String(row.token_type) }),
         ...(row.expires_at === null ? {} : { expiresAt: String(row.expires_at) }),
+        ...(row.health_status === null || row.health_status === undefined ? {} : { healthStatus: row.health_status }),
+        ...(row.health_reason === null || row.health_reason === undefined ? {} : { healthReason: String(row.health_reason) }),
+        ...(row.health_updated_at === null || row.health_updated_at === undefined ? {} : { healthUpdatedAt: String(row.health_updated_at) }),
         createdAt: String(row.created_at),
         updatedAt: String(row.updated_at),
     };

package/dist/db/migrations.js

@@ -141,6 +141,9 @@ CREATE TABLE IF NOT EXISTS linear_installations (
   scopes_json TEXT NOT NULL,
   token_type TEXT,
   expires_at TEXT,
+  health_status TEXT NOT NULL DEFAULT 'ok',
+  health_reason TEXT,
+  health_updated_at TEXT,
   created_at TEXT NOT NULL,
   updated_at TEXT NOT NULL
 );
@@ -330,6 +333,9 @@ export function runPatchRelayMigrations(connection) {
     addColumnIfMissing(connection, "issues", "last_attempted_failure_head_sha", "TEXT");
     addColumnIfMissing(connection, "issues", "last_attempted_failure_signature", "TEXT");
     addColumnIfMissing(connection, "issues", "last_attempted_failure_at", "TEXT");
+    addColumnIfMissing(connection, "linear_installations", "health_status", "TEXT NOT NULL DEFAULT 'ok'");
+    addColumnIfMissing(connection, "linear_installations", "health_reason", "TEXT");
+    addColumnIfMissing(connection, "linear_installations", "health_updated_at", "TEXT");
     removeRetiredIssueColumnsIfPresent(connection);
 }
 function addColumnIfMissing(connection, table, column, definition) {

package/dist/github-linear-session-sync.js

@@ -43,6 +43,13 @@ export async function syncGitHubLinearSession(params) {
         const externalUrls = buildAgentSessionExternalUrls(config, {
             ...(issue.issueKey ? { issueKey: issue.issueKey } : {}),
             ...(issue.prUrl ? { prUrl: issue.prUrl } : {}),
+            ...(issue.activeRunId !== undefined ? { activeRunId: issue.activeRunId } : {}),
+            ...(issue.prReviewState ? { prReviewState: issue.prReviewState } : {}),
+            ...(issue.prCheckStatus ? { prCheckStatus: issue.prCheckStatus } : {}),
+            ...(issue.lastGitHubFailureSource ? { lastGitHubFailureSource: issue.lastGitHubFailureSource } : {}),
+            ...(issue.lastGitHubFailureCheckName ? { lastGitHubFailureCheckName: issue.lastGitHubFailureCheckName } : {}),
+            ...(issue.lastGitHubFailureCheckUrl ? { lastGitHubFailureCheckUrl: issue.lastGitHubFailureCheckUrl } : {}),
+            ...(issue.lastQueueIncidentJson ? { lastQueueIncidentJson: issue.lastQueueIncidentJson } : {}),
         });
         await linear.updateAgentSession({
             agentSessionId: issue.agentSessionId,

package/dist/http.js

@@ -578,7 +578,7 @@ function renderAgentSessionStatusPage(params) {
         <span class="chip"><strong>Latest:</strong> ${latestStage}</span>
         <span class="chip"><strong>Thread:</strong> ${threadInfo}</span>
       </div>
-      <div class="section">
+      <div id="current-view" class="section">
         <h2>Current View</h2>
         <table>
           <tbody>
@@ -600,7 +600,7 @@ function renderAgentSessionStatusPage(params) {
         <span class="chip"><strong>CI repairs:</strong> ${escapeHtml(String(ciAttempts))}</span>
         <span class="chip"><strong>Steward repairs:</strong> ${escapeHtml(String(queueAttempts))}</span>
       </div>
-      <div class="section">
+      <div id="recent-stages" class="section">
         <h2>Recent Stages</h2>
         <table>
           <thead>

package/dist/linear-agent-session-client.js

@@ -75,6 +75,13 @@ export class LinearAgentSessionClient {
         const externalUrls = buildAgentSessionExternalUrls(this.config, {
             ...(issue.issueKey ? { issueKey: issue.issueKey } : {}),
             ...(issue.prUrl ? { prUrl: issue.prUrl } : {}),
+            ...(issue.activeRunId !== undefined ? { activeRunId: issue.activeRunId } : {}),
+            ...(issue.prReviewState ? { prReviewState: issue.prReviewState } : {}),
+            ...(issue.prCheckStatus ? { prCheckStatus: issue.prCheckStatus } : {}),
+            ...(issue.lastGitHubFailureSource ? { lastGitHubFailureSource: issue.lastGitHubFailureSource } : {}),
+            ...(issue.lastGitHubFailureCheckName ? { lastGitHubFailureCheckName: issue.lastGitHubFailureCheckName } : {}),
+            ...(issue.lastGitHubFailureCheckUrl ? { lastGitHubFailureCheckUrl: issue.lastGitHubFailureCheckUrl } : {}),
+            ...(issue.lastQueueIncidentJson ? { lastQueueIncidentJson: issue.lastQueueIncidentJson } : {}),
         });
         await linear.updateAgentSession({
             agentSessionId: issue.agentSessionId,

package/dist/linear-client.js

@@ -528,13 +528,34 @@ export class DatabaseBackedLinearClientProvider {
         if (!installation) {
             return undefined;
         }
+        if (installation.healthStatus === "revoked") {
+            this.logger.warn({
+                installationId: installation.id,
+                workspaceName: installation.workspaceName,
+                workspaceKey: installation.workspaceKey,
+                healthReason: installation.healthReason,
+            }, "Linear installation is revoked; reconnect before using it");
+            return undefined;
+        }
         const encryptionKey = this.config.linear.tokenEncryptionKey;
         let accessToken = decryptSecret(installation.accessTokenCiphertext, encryptionKey);
         const refreshToken = installation.refreshTokenCiphertext
             ? decryptSecret(installation.refreshTokenCiphertext, encryptionKey)
             : undefined;
         if (shouldRefreshToken(installation.expiresAt) && refreshToken) {
-            const refreshed = await refreshLinearOAuthToken(this.config, refreshToken);
+            let refreshed;
+            try {
+                refreshed = await refreshLinearOAuthToken(this.config, refreshToken);
+            }
+            catch (error) {
+                const healthReason = `Linear OAuth token refresh failed: ${error instanceof Error ? error.message : String(error)}`;
+                this.db.linearInstallations.updateLinearInstallationHealth(installation.id, {
+                    healthStatus: "auth_error",
+                    healthReason,
+                });
+                this.logger.error({ installationId: installation.id, workspaceName: installation.workspaceName, error: healthReason }, "Linear OAuth token refresh failed; reconnect this installation");
+                throw error;
+            }
             accessToken = refreshed.accessToken;
             this.db.linearInstallations.updateLinearInstallationTokens(installation.id, {
                 accessTokenCiphertext: encryptSecret(refreshed.accessToken, encryptionKey),
@@ -544,6 +565,12 @@ export class DatabaseBackedLinearClientProvider {
                 scopesJson: JSON.stringify(refreshed.scopes),
                 ...(refreshed.expiresAt ? { expiresAt: refreshed.expiresAt } : {}),
             });
+            if (installation.healthStatus === "auth_error") {
+                this.db.linearInstallations.updateLinearInstallationHealth(installation.id, {
+                    healthStatus: "ok",
+                    healthReason: null,
+                });
+            }
         }
         return new LinearGraphqlClient({
             accessToken,

package/dist/linear-oauth-service.js

@@ -133,9 +133,20 @@ export class LinearOAuthService {
                     ...(identity.workspaceKey ? { workspaceKey: identity.workspaceKey } : {}),
                 });
             }
+            if (installation.healthStatus === "auth_error") {
+                this.stores.linearInstallations.updateLinearInstallationHealth(installation.id, {
+                    healthStatus: "ok",
+                    healthReason: null,
+                });
+            }
         }
         catch (error) {
-            this.logger.debug({ installationId: installation.id, error: error instanceof Error ? error.message : String(error) }, "Failed to refresh installation identity (non-blocking)");
+            const healthReason = `Linear viewer lookup failed: ${error instanceof Error ? error.message : String(error)}`;
+            this.stores.linearInstallations.updateLinearInstallationHealth(installation.id, {
+                healthStatus: "auth_error",
+                healthReason,
+            });
+            this.logger.debug({ installationId: installation.id, error: healthReason }, "Failed to refresh installation identity (non-blocking)");
         }
     }
     getInstallationSummary(installation) {
@@ -146,6 +157,9 @@ export class LinearOAuthService {
             ...(installation.actorName ? { actorName: installation.actorName } : {}),
             ...(installation.actorId ? { actorId: installation.actorId } : {}),
             ...(installation.expiresAt ? { expiresAt: installation.expiresAt } : {}),
+            healthStatus: installation.healthStatus ?? "ok",
+            ...(installation.healthReason ? { healthReason: installation.healthReason } : {}),
+            ...(installation.healthUpdatedAt ? { healthUpdatedAt: installation.healthUpdatedAt } : {}),
         };
     }
 }

package/dist/service.js

@@ -87,7 +87,18 @@ export class PatchRelayService {
                     anyLinearConnected = true;
                 }
                 else {
-                    this.logger.warn({ projectId: project.id }, "No Linear installation linked — run 'patchrelay linear connect' and then 'patchrelay repo link' to authorize");
+                    const installation = this.db.linearInstallations.getLinearInstallationForProject(project.id);
+                    if (installation?.healthStatus && installation.healthStatus !== "ok") {
+                        this.logger.warn({
+                            projectId: project.id,
+                            installationId: installation.id,
+                            healthStatus: installation.healthStatus,
+                            healthReason: installation.healthReason,
+                        }, "Linear installation is unhealthy — run 'patchrelay linear connect' to re-authorize before processing this project");
+                    }
+                    else {
+                        this.logger.warn({ projectId: project.id }, "No Linear installation linked — run 'patchrelay linear connect' and then 'patchrelay repo link' to authorize");
+                    }
                 }
             }
             catch (error) {

package/dist/webhook-handler.js

@@ -35,7 +35,7 @@ export class WebhookHandler {
         this.enqueueIssue = enqueueIssue;
         this.logger = logger;
         this.feed = feed;
-        this.installationHandler = new InstallationWebhookHandler(config, { linearInstallations: db.linearInstallations }, logger);
+        this.installationHandler = new InstallationWebhookHandler(config, { linearInstallations: db.linearInstallations }, logger, feed);
         this.issueRemovalHandler = new IssueRemovalHandler(db, feed);
         this.commentWakeHandler = new CommentWakeHandler(db, codex, logger, feed);
         this.agentSessionHandler = new AgentSessionHandler(config, db, linearProvider, codex, logger, feed);

package/dist/webhook-installation-handler.js

@@ -2,20 +2,18 @@ export class InstallationWebhookHandler {
     config;
     stores;
     logger;
-    constructor(config, stores, logger) {
+    feed;
+    constructor(config, stores, logger, feed) {
         this.config = config;
         this.stores = stores;
         this.logger = logger;
+        this.feed = feed;
     }
     handle(normalized) {
         if (!normalized.installation)
             return;
         if (normalized.triggerEvent === "installationPermissionsChanged") {
-            const matchingInstallations = normalized.installation.appUserId
-                ? this.stores.linearInstallations
-                    .listLinearInstallations()
-                    .filter((installation) => installation.actorId === normalized.installation?.appUserId)
-                : [];
+            const matchingInstallations = this.findMatchingInstallations(normalized.installation);
             const links = this.stores.linearInstallations.listProjectInstallations();
             const impactedProjects = matchingInstallations.flatMap((installation) => links
                 .filter((link) => link.installationId === installation.id)
@@ -25,6 +23,23 @@ export class InstallationWebhookHandler {
                 const addedMatches = normalized.installation?.addedTeamIds.some((teamId) => project?.linearTeamIds.includes(teamId)) ?? false;
                 return { projectId: link.projectId, removedMatches, addedMatches };
             }));
+            const impactedProjectIds = impactedProjects
+                .filter((project) => project.removedMatches)
+                .map((project) => project.projectId);
+            const healthReason = buildPermissionHealthReason(normalized.installation, impactedProjectIds);
+            for (const installation of matchingInstallations) {
+                this.stores.linearInstallations.updateLinearInstallationHealth(installation.id, {
+                    healthStatus: "permissions_changed",
+                    healthReason,
+                });
+            }
+            this.feed?.publish({
+                level: "warn",
+                kind: "linear",
+                status: "permissions_changed",
+                summary: "Linear app permissions changed",
+                detail: healthReason,
+            });
             this.logger.warn({
                 appUserId: normalized.installation.appUserId,
                 addedTeamIds: normalized.installation.addedTeamIds,
@@ -35,9 +50,25 @@ export class InstallationWebhookHandler {
             return;
         }
         if (normalized.triggerEvent === "installationRevoked") {
+            const matchingInstallations = this.findMatchingInstallations(normalized.installation, { allowOauthClientFallback: true });
+            const healthReason = "Linear OAuth app installation was revoked. Reconnect the affected workspace before PatchRelay can update Linear.";
+            for (const installation of matchingInstallations) {
+                this.stores.linearInstallations.updateLinearInstallationHealth(installation.id, {
+                    healthStatus: "revoked",
+                    healthReason,
+                });
+            }
+            this.feed?.publish({
+                level: "error",
+                kind: "linear",
+                status: "revoked",
+                summary: "Linear OAuth app installation was revoked",
+                detail: healthReason,
+            });
             this.logger.warn({
                 organizationId: normalized.installation.organizationId,
                 oauthClientId: normalized.installation.oauthClientId,
+                installationIds: matchingInstallations.map((installation) => installation.id),
             }, "Linear OAuth app installation was revoked; reconnect affected projects");
             return;
         }
@@ -49,4 +80,32 @@ export class InstallationWebhookHandler {
             }, "Received Linear app-user notification webhook");
         }
     }
+    findMatchingInstallations(metadata, options) {
+        const installations = this.stores.linearInstallations.listLinearInstallations();
+        const specificMatches = installations.filter((installation) => Boolean((metadata.appUserId && installation.actorId === metadata.appUserId) ||
+            (metadata.organizationId && installation.workspaceId === metadata.organizationId)));
+        if (specificMatches.length > 0) {
+            return specificMatches;
+        }
+        if (options?.allowOauthClientFallback &&
+            metadata.oauthClientId &&
+            metadata.oauthClientId === this.config.linear.oauth?.clientId) {
+            return installations;
+        }
+        return [];
+    }
+}
+function buildPermissionHealthReason(metadata, impactedProjectIds) {
+    const accessChange = metadata.removedTeamIds.length > 0
+        ? `removed team access: ${metadata.removedTeamIds.join(", ")}`
+        : metadata.addedTeamIds.length > 0
+            ? `added team access: ${metadata.addedTeamIds.join(", ")}`
+            : "team access changed";
+    const allPublicTeams = metadata.canAccessAllPublicTeams === false
+        ? " App no longer has access to all public teams."
+        : "";
+    const impactedProjects = impactedProjectIds.length > 0
+        ? ` Impacted PatchRelay projects: ${impactedProjectIds.join(", ")}.`
+        : " Verify routed teams and reconnect if updates start failing.";
+    return `Linear app permissions changed (${accessChange}).${allPublicTeams}${impactedProjects}`;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "patchrelay",
-  "version": "0.57.0",
+  "version": "0.59.0",
   "license": "MIT",
   "type": "module",
   "repository": {