replicas-cli 0.2.617 → 0.2.619

package/dist/index.cjs

@@ -23575,18 +23575,24 @@ var GITLAB_ABILITY = {
 
 // ../shared/src/default-skills/replicas-agent/abilities/linear.ts
 var SECTION5 = `### Linear
-Fetch issues, update state, add comments, and search through the workspace-scoped TypeScript SDK.
+Create tickets, fetch issues, update state, add comments, and search through \`replicas.linear.graphql\` in \`@replicas/sdk\`. This works without a Linear MCP server and refreshes authentication automatically.
 
 **Reference:** \`references/LINEAR.md\`
 
 Use this when:
+- You need to create a Linear ticket or issue
 - You encounter a Linear issue link and need to understand the task
 - You need to update an issue's state or add a comment
-- You need to search Linear issues`;
+- You need to search Linear issues
+- A Linear request failed with an authentication error`;
 var REFERENCE5 = `# Linear Integration
 
 Use \`@replicas/sdk\`; never request or handle a Linear OAuth token. Replicas refreshes the organization credential behind the gateway.
 
+In gateway-enabled workspaces, Linear credentials stay on the Replicas server and the workspace receives only connection metadata. Older workspaces can still carry a legacy token snapshot, but should use the gateway when the SDK is available. A missing Linear MCP server does not prevent SDK access.
+
+Download protected attachments with \`await replicas.linear.download(url)\`; this returns a \`Response\` without exposing the provider token.
+
 ## Check access
 
 \`\`\`ts
@@ -23596,6 +23602,25 @@ const { native } = await replicas.integrations.list();
 if (!native.linear) throw new Error('Connect Linear in Replicas organization integrations first.');
 \`\`\`
 
+\`native.linear\` checks whether an organization credential exists. To diagnose authentication, make a read-only request through \`replicas.linear.graphql({ query: 'query { viewer { id } }' })\`; the gateway refreshes expired credentials and retries authentication failures once.
+
+Personal \u2192 Connections links a person's Linear identity for agent defaults and attribution. Its disconnected state does not mean the organization's Linear integration is disconnected, and connecting it does not refresh the organization's token. Only recommend reconnecting under Organization \u2192 Integrations when the gateway reports missing credentials or an unrecoverable OAuth failure. Report transient failures without asking the user to disconnect.
+
+## Create a ticket
+
+Fetch \`query { teams { nodes { id name key } } }\` and choose the requested team's ID. Look up IDs for any requested assignee, state, cycle, or labels rather than inventing them.
+
+\`\`\`ts
+const created = await replicas.linear.graphql({
+  query: \`mutation($input: IssueCreateInput!) {
+    issueCreate(input: $input) { success issue { id identifier title url } }
+  }\`,
+  variables: { input: { teamId, title, description } },
+});
+\`\`\`
+
+Responses retain Linear's GraphQL \`data\` and \`errors\` fields. Check \`errors\` and \`data.issueCreate.success\` before reporting creation, then return the issue URL. After an ambiguous timeout, search for the issue before retrying creation to avoid duplicates.
+
 ## Fetch an issue
 
 \`\`\`ts
@@ -23629,12 +23654,24 @@ await replicas.linear.graphql({
 
 Search with \`containsIgnoreCase: $query\` filters, for example on both \`title\` and \`description\`. Batch independent queries with \`Promise.all\` to save round trips.
 
+## Older workspaces without the SDK
+
+If \`@replicas/sdk\` cannot be imported, use the same refresh-capable gateway with workspace authentication. Send the GraphQL JSON request on stdin:
+
+\`\`\`bash
+curl -sS --fail-with-body -X POST "$REPLICAS_MONOLITH_URL/v1/engine/linear/graphql" \\
+  -H "Authorization: Bearer $REPLICAS_ENGINE_SECRET" \\
+  -H "X-Workspace-Id: $REPLICAS_WORKSPACE_ID" \\
+  -H "Content-Type: application/json" \\
+  --data-binary @-
+\`\`\`
+
 For screenshots, recordings, diagrams, or other media, read \`references/MEDIA.md\` before adding it to an issue or comment. It is the single source of truth for uploading the Replicas copy and the raw file to Linear; a dashboard link alone is not an inline attachment.
 `;
 var LINEAR_ABILITY = {
   label: "Linear",
-  description: "Fetch issues, comment, and update state through @replicas/sdk.",
-  bullet: "- Interacting with Linear (fetching issues, updating state, commenting, etc.)",
+  description: "Create tickets, fetch issues, comment, and update state through @replicas/sdk.",
+  bullet: "- Interacting with Linear (creating tickets, fetching issues, updating state, commenting, or troubleshooting authentication): use replicas.linear.graphql from @replicas/sdk, which refreshes tokens automatically and needs no Linear MCP server. Read references/LINEAR.md before treating a rejected workspace token as a disconnected integration.",
   section: SECTION5,
   referenceFile: { name: "LINEAR.md", content: REFERENCE5 }
 };
@@ -23797,36 +23834,25 @@ A Slack message that just contains a \`replicas.dev\` link is not acceptable whe
 
 Slack deprecated the single-shot \`files.upload\` endpoint. The raw HTTP replacement is a 3-step flow: reserve an upload URL with \`files.getUploadURLExternal\`, POST the bytes to it, then share into the channel/thread with \`files.completeUploadExternal\`. (\`files.uploadV2\` is **only** an SDK convenience wrapper \u2014 it is NOT a real Web API HTTP endpoint and \`POST https://slack.com/api/files.uploadV2\` will return \`unknown_method\`.)
 
-\`\`\`bash
-FILE=/abs/path/to/screenshot.png
-FILENAME=$(basename "$FILE")
-LENGTH=$(stat -c%s "$FILE" 2>/dev/null || stat -f%z "$FILE")
-
-# 1. Reserve an upload URL + file ID.
-RESERVE=$(curl -s -G "https://slack.com/api/files.getUploadURLExternal" \\
-  -H "Authorization: Bearer \${REPLICAS_SLACK_BOT_TOKEN:-$SLACK_BOT_TOKEN}" \\
-  --data-urlencode "filename=$FILENAME" \\
-  --data-urlencode "length=$LENGTH")
-UPLOAD_URL=$(echo "$RESERVE" | jq -r '.upload_url')
-FILE_ID=$(echo "$RESERVE" | jq -r '.file_id')
-
-# 2. POST the raw bytes to the reserved URL.
-#    Do not use -F / multipart here \u2014 the presigned URL expects the bytes
-#    directly in the request body.
-curl -s -X POST "$UPLOAD_URL" \\
-  -H "Content-Type: application/octet-stream" \\
-  --data-binary @"$FILE"
+\`\`\`ts
+import { replicas } from '@replicas/sdk';
 
-# 3. Complete the upload, sharing it into the channel/thread with the dashboard link.
-curl -s -X POST "https://slack.com/api/files.completeUploadExternal" \\
-  -H "Authorization: Bearer \${REPLICAS_SLACK_BOT_TOKEN:-$SLACK_BOT_TOKEN}" \\
-  -H "Content-Type: application/json; charset=utf-8" \\
-  -d "{
-    \\"files\\": [{\\"id\\": \\"$FILE_ID\\", \\"title\\": \\"Screenshot\\"}],
-    \\"channel_id\\": \\"CHANNEL_ID\\",
-    \\"thread_ts\\": \\"THREAD_TS\\",
-    \\"initial_comment\\": \\"<https://replicas.dev/workspaces/<workspace-id>?media=<media-id>|View in Replicas>\\"
-  }"
+const file = Bun.file('/abs/path/to/screenshot.png');
+const reservation = await replicas.slack.call<{ upload_url: string; file_id: string }>(
+  'files.getUploadURLExternal', { filename: 'screenshot.png', length: file.size },
+);
+const uploaded = await fetch(reservation.upload_url, {
+  method: 'POST',
+  headers: { 'Content-Type': 'application/octet-stream' },
+  body: file,
+});
+if (!uploaded.ok) throw new Error('Slack file upload failed');
+await replicas.slack.call('files.completeUploadExternal', {
+  files: [{ id: reservation.file_id, title: 'Screenshot' }],
+  channel_id: 'CHANNEL_ID',
+  thread_ts: 'THREAD_TS',
+  initial_comment: '<https://replicas.dev/workspaces/<workspace-id>?media=<media-id>|View in Replicas>',
+});
 \`\`\`
 
 Notes:
@@ -27174,7 +27200,7 @@ var headlessFilesystemAgentResultSchema = external_exports.object({
 });
 
 // ../shared/src/cli-version.ts
-var CLI_VERSION = "0.2.617";
+var CLI_VERSION = "0.2.619";
 
 // ../shared/src/version.ts
 function compareVersions(v1, v2) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "replicas-cli",
-  "version": "0.2.617",
+  "version": "0.2.619",
   "description": "CLI for managing Replicas workspaces - SSH into cloud dev environments with automatic port forwarding",
   "main": "dist/index.cjs",
   "bin": {