replicas-cli 0.2.307 → 0.2.308

package/dist/index.mjs

@@ -8521,41 +8521,59 @@ This guide covers how to interact with Linear from within your Replicas workspac
 
 ## Prerequisites
 
-Check if the \`LINEAR_ACCESS_TOKEN\` environment variable is set:
+Check that the workspace has the Replicas engine credentials needed to proxy Linear requests:
 
 \`\`\`bash
-echo "\${LINEAR_ACCESS_TOKEN:+set}"
+test -n "$MONOLITH_URL" && test -n "$REPLICAS_ENGINE_SECRET" && test -n "$WORKSPACE_ID" && echo set
 \`\`\`
 
-- If **set**: Your workspace has Linear access. You can use the Linear GraphQL API as described below.
-- If **not set**: Linear has not been configured for this workspace. The user needs to connect Linear in the [Replicas dashboard](https://replicas.dev) under their organization's integration settings. Let the user know and do not attempt Linear operations.
+- If **set**: Use the Replicas Linear proxy below. It refreshes Linear OAuth tokens for you.
+- If **not set**: The workspace cannot authenticate to Replicas. Let the user know and do not attempt Linear operations.
+
+Then verify Linear is connected:
+
+\`\`\`bash
+curl -fsS -X POST "$MONOLITH_URL/v1/engine/linear/refresh-token" \\
+  -H "Authorization: Bearer $REPLICAS_ENGINE_SECRET" \\
+  -H "X-Workspace-Id: $WORKSPACE_ID" \\
+  -H "Content-Type: application/json" \\
+  -d '{}' >/dev/null
+\`\`\`
+
+If this fails because no Linear credential is connected, the user needs to connect Linear in the [Replicas dashboard](https://replicas.dev) under their organization's integration settings.
 
 ## Using the Linear API
 
-Linear uses a GraphQL API at \`https://api.linear.app/graphql\`. All requests use the \`$LINEAR_ACCESS_TOKEN\` for authentication.
+Linear uses a GraphQL API. Always call it through Replicas so the access token stays fresh:
+
+\`\`\`bash
+linear_graphql() {
+  curl -sS -X POST "$MONOLITH_URL/v1/engine/linear/graphql" \\
+    -H "Authorization: Bearer $REPLICAS_ENGINE_SECRET" \\
+    -H "X-Workspace-Id: $WORKSPACE_ID" \\
+    -H "Content-Type: application/json" \\
+    --data-binary @-
+}
+\`\`\`
 
 ### Fetching an Issue
 
 If you encounter a Linear issue link (e.g. \`https://linear.app/team/issue/ENG-123\`), the identifier is the last path segment (\`ENG-123\`).
 
 \`\`\`bash
-curl -s -X POST https://api.linear.app/graphql \\
-  -H "Authorization: Bearer $LINEAR_ACCESS_TOKEN" \\
-  -H "Content-Type: application/json" \\
-  -d '{
-    "query": "query { issues(filter: { identifier: { eq: \\"ENG-123\\" } }) { nodes { id identifier title description state { name } assignee { name } parent { identifier title description } } } }"
-  }'
+jq -n --arg identifier "ENG-123" '{
+  query: "query($identifier: String!) { issues(filter: { identifier: { eq: $identifier } }) { nodes { id identifier title description state { name } assignee { name } parent { identifier title description } } } }",
+  variables: { identifier: $identifier }
+}' | linear_graphql
 \`\`\`
 
 ### Updating Issue State
 
 \`\`\`bash
-curl -s -X POST https://api.linear.app/graphql \\
-  -H "Authorization: Bearer $LINEAR_ACCESS_TOKEN" \\
-  -H "Content-Type: application/json" \\
-  -d '{
-    "query": "mutation { issueUpdate(id: \\"ISSUE_UUID\\", input: { stateId: \\"STATE_UUID\\" }) { success issue { identifier state { name } } } }"
-  }'
+jq -n --arg issueId "ISSUE_UUID" --arg stateId "STATE_UUID" '{
+  query: "mutation($issueId: String!, $stateId: String!) { issueUpdate(id: $issueId, input: { stateId: $stateId }) { success issue { identifier state { name } } } }",
+  variables: { issueId: $issueId, stateId: $stateId }
+}' | linear_graphql
 \`\`\`
 
 To find available states, query: \`query { workflowStates { nodes { id name } } }\`
@@ -8563,23 +8581,19 @@ To find available states, query: \`query { workflowStates { nodes { id name } }
 ### Adding a Comment
 
 \`\`\`bash
-curl -s -X POST https://api.linear.app/graphql \\
-  -H "Authorization: Bearer $LINEAR_ACCESS_TOKEN" \\
-  -H "Content-Type: application/json" \\
-  -d '{
-    "query": "mutation { commentCreate(input: { issueId: \\"ISSUE_UUID\\", body: \\"Your comment here\\" }) { success comment { id } } }"
-  }'
+jq -n --arg issueId "ISSUE_UUID" --arg body "Your comment here" '{
+  query: "mutation($issueId: String!, $body: String!) { commentCreate(input: { issueId: $issueId, body: $body }) { success comment { id } } }",
+  variables: { issueId: $issueId, body: $body }
+}' | linear_graphql
 \`\`\`
 
 ### Searching Issues
 
 \`\`\`bash
-curl -s -X POST https://api.linear.app/graphql \\
-  -H "Authorization: Bearer $LINEAR_ACCESS_TOKEN" \\
-  -H "Content-Type: application/json" \\
-  -d '{
-    "query": "query { issueSearch(query: \\"search terms\\", first: 10) { nodes { identifier title state { name } } } }"
-  }'
+jq -n --arg query "search terms" '{
+  query: "query($query: String!) { issueSearch(query: $query, first: 10) { nodes { identifier title state { name } } } }",
+  variables: { query: $query }
+}' | linear_graphql
 \`\`\`
 
 ### Other Operations
@@ -8747,21 +8761,25 @@ FILENAME=$(basename "$FILE")
 SIZE=$(stat -c%s "$FILE" 2>/dev/null || stat -f%z "$FILE")
 CONTENT_TYPE=image/png
 ISSUE_UUID=...           # the Linear issue's UUID
-WORKSPACE_ID=...         # the Replicas workspace ID
 MEDIA_ID=...             # the media ID printed by \`replicas media upload\`
 
+linear_graphql() {
+  curl -sS -X POST "$MONOLITH_URL/v1/engine/linear/graphql" \\
+    -H "Authorization: Bearer $REPLICAS_ENGINE_SECRET" \\
+    -H "X-Workspace-Id: $WORKSPACE_ID" \\
+    -H "Content-Type: application/json" \\
+    --data-binary @-
+}
+
 # 1. Ask Linear for an upload URL + assetUrl.
-RESERVE=$(curl -s -X POST https://api.linear.app/graphql \\
-  -H "Authorization: Bearer $LINEAR_ACCESS_TOKEN" \\
-  -H "Content-Type: application/json" \\
-  -d "$(jq -n \\
+RESERVE=$(jq -n \\
     --argjson size "$SIZE" \\
     --arg contentType "$CONTENT_TYPE" \\
     --arg filename "$FILENAME" \\
     '{
       query: "mutation($size: Int!, $contentType: String!, $filename: String!) { fileUpload(size: $size, contentType: $contentType, filename: $filename) { uploadFile { uploadUrl assetUrl headers { key value } } } }",
       variables: { size: $size, contentType: $contentType, filename: $filename }
-    }')")
+    }' | linear_graphql)
 UPLOAD_URL=$(echo "$RESERVE" | jq -r '.data.fileUpload.uploadFile.uploadUrl')
 ASSET_URL=$(echo "$RESERVE" | jq -r '.data.fileUpload.uploadFile.assetUrl')
 
@@ -8781,16 +8799,13 @@ curl -s -X PUT "$UPLOAD_URL" \\
 BODY=$(printf '![screenshot](%s)\\n\\n[View in Replicas](https://tryreplicas.com/workspaces/%s?mode=media&media=%s)' \\
   "$ASSET_URL" "$WORKSPACE_ID" "$MEDIA_ID")
 
-curl -s -X POST https://api.linear.app/graphql \\
-  -H "Authorization: Bearer $LINEAR_ACCESS_TOKEN" \\
-  -H "Content-Type: application/json" \\
-  -d "$(jq -n \\
+jq -n \\
     --arg issueId "$ISSUE_UUID" \\
     --arg body "$BODY" \\
     '{
       query: "mutation($issueId: String!, $body: String!) { commentCreate(input: { issueId: $issueId, body: $body }) { success } }",
       variables: { issueId: $issueId, body: $body }
-    }')"
+    }' | linear_graphql
 \`\`\`
 
 The same flow works for issue bodies (use \`issueCreate\` / \`issueUpdate\` with the same markdown body).
@@ -9345,7 +9360,7 @@ var HOOK_EXEC_MAX_BUFFER_BYTES = 10 * 1024 * 1024;
 var REPLICAS_CONFIG_FILENAMES = ["replicas.json", "replicas.yaml", "replicas.yml"];
 
 // ../shared/src/cli-version.ts
-var CLI_VERSION = "0.2.307";
+var CLI_VERSION = "0.2.308";
 
 // ../shared/src/engine/environment.ts
 var DESKTOP_NOVNC_PORT = 6080;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "replicas-cli",
-  "version": "0.2.307",
+  "version": "0.2.308",
   "description": "CLI for managing Replicas workspaces - SSH into cloud dev environments with automatic port forwarding",
   "main": "dist/index.mjs",
   "bin": {