replicas-engine 0.1.754 → 0.1.756

package/dist/src/{asp-host-OB2X6EIN.js → asp-host-RF22WMSU.js}

@@ -5,11 +5,11 @@ import {
   getCodexAspHost,
   restartCodexAspHost,
   restartCodexAspHostIfRunning
-} from "./chunk-2PJZNPYN.js";
-import "./chunk-EYRVU2KX.js";
-import "./chunk-UEL4VSCX.js";
+} from "./chunk-QJJE6MBM.js";
+import "./chunk-D7K5M3NA.js";
+import "./chunk-KO62WDEE.js";
 import "./chunk-UZSNFLDQ.js";
-import "./chunk-GQFXO5TG.js";
+import "./chunk-CRFPCWWZ.js";
 import "./chunk-VEQXQN22.js";
 export {
   getCodexAspHost,

package/dist/src/{chunk-HJWLVQZ6.js → chunk-AGAAN5SZ.js}

@@ -3,12 +3,12 @@ import { createRequire as __createRequire } from 'node:module';
 const require = __createRequire(import.meta.url);
 import {
   monolithRequest
-} from "./chunk-EYRVU2KX.js";
+} from "./chunk-D7K5M3NA.js";
 import {
   extractCommandProtectionCommandText,
   findGitCommitSignals,
   findPrMergeSignals
-} from "./chunk-GQFXO5TG.js";
+} from "./chunk-CRFPCWWZ.js";
 
 // src/services/command-protection-service.ts
 var DEFAULT_COMMAND_PROTECTION_BLOCK_MESSAGE = "Blocked by Replicas command protection.";

package/dist/src/{chunk-GQFXO5TG.js → chunk-CRFPCWWZ.js}

@@ -2176,18 +2176,24 @@ var GITLAB_ABILITY = {
 
 // ../shared/src/default-skills/replicas-agent/abilities/linear.ts
 var SECTION5 = `### Linear
-Fetch issues, update state, add comments, and search through the workspace-scoped TypeScript SDK.
+Create tickets, fetch issues, update state, add comments, and search through \`replicas.linear.graphql\` in \`@replicas/sdk\`. This works without a Linear MCP server and refreshes authentication automatically.
 
 **Reference:** \`references/LINEAR.md\`
 
 Use this when:
+- You need to create a Linear ticket or issue
 - You encounter a Linear issue link and need to understand the task
 - You need to update an issue's state or add a comment
-- You need to search Linear issues`;
+- You need to search Linear issues
+- A Linear request failed with an authentication error`;
 var REFERENCE5 = `# Linear Integration
 
 Use \`@replicas/sdk\`; never request or handle a Linear OAuth token. Replicas refreshes the organization credential behind the gateway.
 
+In gateway-enabled workspaces, Linear credentials stay on the Replicas server and the workspace receives only connection metadata. Older workspaces can still carry a legacy token snapshot, but should use the gateway when the SDK is available. A missing Linear MCP server does not prevent SDK access.
+
+Download protected attachments with \`await replicas.linear.download(url)\`; this returns a \`Response\` without exposing the provider token.
+
 ## Check access
 
 \`\`\`ts
@@ -2197,6 +2203,25 @@ const { native } = await replicas.integrations.list();
 if (!native.linear) throw new Error('Connect Linear in Replicas organization integrations first.');
 \`\`\`
 
+\`native.linear\` checks whether an organization credential exists. To diagnose authentication, make a read-only request through \`replicas.linear.graphql({ query: 'query { viewer { id } }' })\`; the gateway refreshes expired credentials and retries authentication failures once.
+
+Personal \u2192 Connections links a person's Linear identity for agent defaults and attribution. Its disconnected state does not mean the organization's Linear integration is disconnected, and connecting it does not refresh the organization's token. Only recommend reconnecting under Organization \u2192 Integrations when the gateway reports missing credentials or an unrecoverable OAuth failure. Report transient failures without asking the user to disconnect.
+
+## Create a ticket
+
+Fetch \`query { teams { nodes { id name key } } }\` and choose the requested team's ID. Look up IDs for any requested assignee, state, cycle, or labels rather than inventing them.
+
+\`\`\`ts
+const created = await replicas.linear.graphql({
+  query: \`mutation($input: IssueCreateInput!) {
+    issueCreate(input: $input) { success issue { id identifier title url } }
+  }\`,
+  variables: { input: { teamId, title, description } },
+});
+\`\`\`
+
+Responses retain Linear's GraphQL \`data\` and \`errors\` fields. Check \`errors\` and \`data.issueCreate.success\` before reporting creation, then return the issue URL. After an ambiguous timeout, search for the issue before retrying creation to avoid duplicates.
+
 ## Fetch an issue
 
 \`\`\`ts
@@ -2230,12 +2255,24 @@ await replicas.linear.graphql({
 
 Search with \`containsIgnoreCase: $query\` filters, for example on both \`title\` and \`description\`. Batch independent queries with \`Promise.all\` to save round trips.
 
+## Older workspaces without the SDK
+
+If \`@replicas/sdk\` cannot be imported, use the same refresh-capable gateway with workspace authentication. Send the GraphQL JSON request on stdin:
+
+\`\`\`bash
+curl -sS --fail-with-body -X POST "$REPLICAS_MONOLITH_URL/v1/engine/linear/graphql" \\
+  -H "Authorization: Bearer $REPLICAS_ENGINE_SECRET" \\
+  -H "X-Workspace-Id: $REPLICAS_WORKSPACE_ID" \\
+  -H "Content-Type: application/json" \\
+  --data-binary @-
+\`\`\`
+
 For screenshots, recordings, diagrams, or other media, read \`references/MEDIA.md\` before adding it to an issue or comment. It is the single source of truth for uploading the Replicas copy and the raw file to Linear; a dashboard link alone is not an inline attachment.
 `;
 var LINEAR_ABILITY = {
   label: "Linear",
-  description: "Fetch issues, comment, and update state through @replicas/sdk.",
-  bullet: "- Interacting with Linear (fetching issues, updating state, commenting, etc.)",
+  description: "Create tickets, fetch issues, comment, and update state through @replicas/sdk.",
+  bullet: "- Interacting with Linear (creating tickets, fetching issues, updating state, commenting, or troubleshooting authentication): use replicas.linear.graphql from @replicas/sdk, which refreshes tokens automatically and needs no Linear MCP server. Read references/LINEAR.md before treating a rejected workspace token as a disconnected integration.",
   section: SECTION5,
   referenceFile: { name: "LINEAR.md", content: REFERENCE5 }
 };
@@ -2398,36 +2435,25 @@ A Slack message that just contains a \`replicas.dev\` link is not acceptable whe
 
 Slack deprecated the single-shot \`files.upload\` endpoint. The raw HTTP replacement is a 3-step flow: reserve an upload URL with \`files.getUploadURLExternal\`, POST the bytes to it, then share into the channel/thread with \`files.completeUploadExternal\`. (\`files.uploadV2\` is **only** an SDK convenience wrapper \u2014 it is NOT a real Web API HTTP endpoint and \`POST https://slack.com/api/files.uploadV2\` will return \`unknown_method\`.)
 
-\`\`\`bash
-FILE=/abs/path/to/screenshot.png
-FILENAME=$(basename "$FILE")
-LENGTH=$(stat -c%s "$FILE" 2>/dev/null || stat -f%z "$FILE")
-
-# 1. Reserve an upload URL + file ID.
-RESERVE=$(curl -s -G "https://slack.com/api/files.getUploadURLExternal" \\
-  -H "Authorization: Bearer \${REPLICAS_SLACK_BOT_TOKEN:-$SLACK_BOT_TOKEN}" \\
-  --data-urlencode "filename=$FILENAME" \\
-  --data-urlencode "length=$LENGTH")
-UPLOAD_URL=$(echo "$RESERVE" | jq -r '.upload_url')
-FILE_ID=$(echo "$RESERVE" | jq -r '.file_id')
-
-# 2. POST the raw bytes to the reserved URL.
-#    Do not use -F / multipart here \u2014 the presigned URL expects the bytes
-#    directly in the request body.
-curl -s -X POST "$UPLOAD_URL" \\
-  -H "Content-Type: application/octet-stream" \\
-  --data-binary @"$FILE"
+\`\`\`ts
+import { replicas } from '@replicas/sdk';
 
-# 3. Complete the upload, sharing it into the channel/thread with the dashboard link.
-curl -s -X POST "https://slack.com/api/files.completeUploadExternal" \\
-  -H "Authorization: Bearer \${REPLICAS_SLACK_BOT_TOKEN:-$SLACK_BOT_TOKEN}" \\
-  -H "Content-Type: application/json; charset=utf-8" \\
-  -d "{
-    \\"files\\": [{\\"id\\": \\"$FILE_ID\\", \\"title\\": \\"Screenshot\\"}],
-    \\"channel_id\\": \\"CHANNEL_ID\\",
-    \\"thread_ts\\": \\"THREAD_TS\\",
-    \\"initial_comment\\": \\"<https://replicas.dev/workspaces/<workspace-id>?media=<media-id>|View in Replicas>\\"
-  }"
+const file = Bun.file('/abs/path/to/screenshot.png');
+const reservation = await replicas.slack.call<{ upload_url: string; file_id: string }>(
+  'files.getUploadURLExternal', { filename: 'screenshot.png', length: file.size },
+);
+const uploaded = await fetch(reservation.upload_url, {
+  method: 'POST',
+  headers: { 'Content-Type': 'application/octet-stream' },
+  body: file,
+});
+if (!uploaded.ok) throw new Error('Slack file upload failed');
+await replicas.slack.call('files.completeUploadExternal', {
+  files: [{ id: reservation.file_id, title: 'Screenshot' }],
+  channel_id: 'CHANNEL_ID',
+  thread_ts: 'THREAD_TS',
+  initial_comment: '<https://replicas.dev/workspaces/<workspace-id>?media=<media-id>|View in Replicas>',
+});
 \`\`\`
 
 Notes:

package/dist/src/{chunk-EYRVU2KX.js → chunk-D7K5M3NA.js}

@@ -15,7 +15,7 @@ import {
   isValidRelayBaseProvider,
   parsePosixEnvFile,
   readReplicasRuntimeEnv
-} from "./chunk-GQFXO5TG.js";
+} from "./chunk-CRFPCWWZ.js";
 
 // src/engine-env.ts
 import { readFileSync as readFileSync2 } from "fs";
@@ -125,6 +125,8 @@ function loadEngineEnv() {
     REPLICAS_LINEAR_SESSION_ID: readReplicasRuntimeEnv(readEnv, REPLICAS_RUNTIME_ENV_ALIASES.linearSessionId),
     REPLICAS_LINEAR_ACCESS_TOKEN: readReplicasRuntimeEnv(readEnv, REPLICAS_RUNTIME_ENV_ALIASES.linearAccessToken),
     REPLICAS_SLACK_BOT_TOKEN: readReplicasRuntimeEnv(readEnv, REPLICAS_RUNTIME_ENV_ALIASES.slackBotToken),
+    REPLICAS_LINEAR_ACCESS_CONFIGURED: readEnv("REPLICAS_LINEAR_ACCESS_CONFIGURED") === "true",
+    REPLICAS_SLACK_ACCESS_CONFIGURED: readEnv("REPLICAS_SLACK_ACCESS_CONFIGURED") === "true",
     REPLICAS_SLACK_CHANNEL_ID: readReplicasRuntimeEnv(readEnv, REPLICAS_RUNTIME_ENV_ALIASES.slackChannelId),
     REPLICAS_SLACK_THREAD_TS: readReplicasRuntimeEnv(readEnv, REPLICAS_RUNTIME_ENV_ALIASES.slackThreadTs),
     ANTHROPIC_API_KEY: readEnv("ANTHROPIC_API_KEY"),

package/dist/src/{chunk-LAK7IDRF.js → chunk-KERIK6MD.js}

@@ -3,7 +3,7 @@ import { createRequire as __createRequire } from 'node:module';
 const require = __createRequire(import.meta.url);
 import {
   mayCreatePullRequest
-} from "./chunk-GQFXO5TG.js";
+} from "./chunk-CRFPCWWZ.js";
 
 // src/services/post-tool-pr-notifier.ts
 async function notifyPostToolUse(toolName, toolInput) {

package/dist/src/{chunk-UEL4VSCX.js → chunk-KO62WDEE.js}

@@ -4,7 +4,7 @@ const require = __createRequire(import.meta.url);
 import {
   HOOK_EXEC_MAX_BUFFER_BYTES,
   isVersionBelow
-} from "./chunk-GQFXO5TG.js";
+} from "./chunk-CRFPCWWZ.js";
 
 // src/utils/codex-agent-env.ts
 function buildCodexAgentEnv(source = process.env) {
@@ -241,7 +241,7 @@ var DEFAULT_CODEX_ARGS = [
 var MIN_CODEX_CLI_VERSION = "0.153.3";
 var CODEX_UPGRADE_TIMEOUT_MS = 12e4;
 var codexCliVersionEnsured = null;
-var ENGINE_PACKAGE_VERSION = "0.1.754";
+var ENGINE_PACKAGE_VERSION = "0.1.756";
 var INITIALIZE_METHOD = "initialize";
 var INITIALIZED_NOTIFICATION = "initialized";
 var ACCOUNT_LOGIN_START_METHOD = "account/login/start";

package/dist/src/{chunk-2PJZNPYN.js → chunk-QJJE6MBM.js}

@@ -5,18 +5,18 @@ import {
   ENGINE_ENV,
   monolithRequest,
   setAgentCredentialSnapshot
-} from "./chunk-EYRVU2KX.js";
+} from "./chunk-D7K5M3NA.js";
 import {
   AppServerProcess,
   buildCodexAgentEnv
-} from "./chunk-UEL4VSCX.js";
+} from "./chunk-KO62WDEE.js";
 import {
   CODEX_AUTH_ENV_KEYS,
   CODEX_AUTH_ENV_KEYS_BY_METHOD,
   codexAuthEnvFromResponse,
   createErrorResult,
   createSuccessResult
-} from "./chunk-GQFXO5TG.js";
+} from "./chunk-CRFPCWWZ.js";
 
 // src/managers/codex-token-manager.ts
 import { promises as fs } from "fs";
@@ -232,7 +232,7 @@ var CodexTokenManager = class extends BaseRefreshManager {
     const data = await response.json();
     await this.applyCredentialsResponse(data);
     if (restartOnChange && CODEX_AUTH_ENV_KEYS.some((key, index) => process.env[key] !== previousEnv[index])) {
-      const { restartCodexAspHostIfRunning: restartCodexAspHostIfRunning2 } = await import("./asp-host-OB2X6EIN.js");
+      const { restartCodexAspHostIfRunning: restartCodexAspHostIfRunning2 } = await import("./asp-host-RF22WMSU.js");
       await restartCodexAspHostIfRunning2();
     }
     if (data.scope) {

package/dist/src/command-protection-hook.js

@@ -3,12 +3,12 @@ import { createRequire as __createRequire } from 'node:module';
 const require = __createRequire(import.meta.url);
 import {
   evaluateCommandProtection
-} from "./chunk-HJWLVQZ6.js";
-import "./chunk-EYRVU2KX.js";
+} from "./chunk-AGAAN5SZ.js";
+import "./chunk-D7K5M3NA.js";
 import {
   isRecord
 } from "./chunk-UZSNFLDQ.js";
-import "./chunk-GQFXO5TG.js";
+import "./chunk-CRFPCWWZ.js";
 import "./chunk-VEQXQN22.js";
 
 // src/command-protection-hook.ts

package/dist/src/deepseek-command-protection-plugin.js

@@ -3,13 +3,13 @@ import { createRequire as __createRequire } from 'node:module';
 const require = __createRequire(import.meta.url);
 import {
   evaluateCommandProtection
-} from "./chunk-HJWLVQZ6.js";
+} from "./chunk-AGAAN5SZ.js";
 import {
   notifyPostToolUse
-} from "./chunk-LAK7IDRF.js";
-import "./chunk-EYRVU2KX.js";
+} from "./chunk-KERIK6MD.js";
+import "./chunk-D7K5M3NA.js";
 import "./chunk-UZSNFLDQ.js";
-import "./chunk-GQFXO5TG.js";
+import "./chunk-CRFPCWWZ.js";
 import "./chunk-VEQXQN22.js";
 
 // src/deepseek-command-protection-plugin.ts

package/dist/src/headless-agent.js

@@ -8,12 +8,12 @@ import {
 import {
   AppServerProcess,
   buildCodexAgentEnv
-} from "./chunk-UEL4VSCX.js";
+} from "./chunk-KO62WDEE.js";
 import {
   AGENT,
   getMemoryOutputSafetyViolation,
   headlessAgentRequestSchema
-} from "./chunk-GQFXO5TG.js";
+} from "./chunk-CRFPCWWZ.js";
 import "./chunk-VEQXQN22.js";
 
 // src/headless-agent.ts

package/dist/src/index.js

@@ -91,7 +91,7 @@ import {
   evaluateCommandProtection,
   extractToolCommand,
   reportCommandProtectionBlock
-} from "./chunk-HJWLVQZ6.js";
+} from "./chunk-AGAAN5SZ.js";
 import {
   ACCOUNT_RATE_LIMITS_UPDATED_METHOD,
   AGENT_MESSAGE_DELTA_METHOD,
@@ -124,20 +124,20 @@ import {
   recordCredentialFallback,
   recordExhaustedCredential,
   restartCodexAspHost
-} from "./chunk-2PJZNPYN.js";
+} from "./chunk-QJJE6MBM.js";
 import {
   ENGINE_ENV,
   IS_WARMING_MODE,
   monolithRequest,
   monolithService,
   setAgentCredentialSnapshot
-} from "./chunk-EYRVU2KX.js";
+} from "./chunk-D7K5M3NA.js";
 import {
   AspClient,
   SUBPROCESS_MAX_BUFFER,
   execAsync,
   execFileAsync
-} from "./chunk-UEL4VSCX.js";
+} from "./chunk-KO62WDEE.js";
 import {
   isRecord as isRecord2
 } from "./chunk-UZSNFLDQ.js";
@@ -330,7 +330,7 @@ import {
   spawnRelaySubagentRequestSchema,
   stripAgentDiagnosticErrors,
   withTimeout
-} from "./chunk-GQFXO5TG.js";
+} from "./chunk-CRFPCWWZ.js";
 import {
   __commonJS,
   __export,
@@ -9890,9 +9890,11 @@ var EnvironmentDetailsService = class {
     details.gitlabAccessConfigured = gitlabAccessConfigured;
     details.gitlabCredentialsConfigured = gitlabAccessConfigured;
     details.linearAccessConfigured = Boolean(
-      ENGINE_ENV.REPLICAS_LINEAR_SESSION_ID || ENGINE_ENV.REPLICAS_LINEAR_ACCESS_TOKEN
+      ENGINE_ENV.REPLICAS_LINEAR_SESSION_ID || ENGINE_ENV.REPLICAS_LINEAR_ACCESS_TOKEN || ENGINE_ENV.REPLICAS_LINEAR_ACCESS_CONFIGURED
+    );
+    details.slackAccessConfigured = Boolean(
+      ENGINE_ENV.REPLICAS_SLACK_BOT_TOKEN || ENGINE_ENV.REPLICAS_SLACK_ACCESS_CONFIGURED
     );
-    details.slackAccessConfigured = Boolean(ENGINE_ENV.REPLICAS_SLACK_BOT_TOKEN);
     const freshRepos = repositories.map((repo) => ({
       repositoryName: repo.name,
       warmHookCompleted: "n/a",
@@ -11211,39 +11213,10 @@ function inferMediaType(url3, contentType) {
   if (urlLower.includes(".webp")) return "image/webp";
   return "image/jpeg";
 }
-async function getLinearAccessToken() {
-  try {
-    const response = await monolithRequest("/v1/engine/linear/refresh-token");
-    if (!response.ok) {
-      console.warn(`[ImageUtils] Failed to refresh Linear token: ${response.status} ${await response.text()}`);
-      return ENGINE_ENV.REPLICAS_LINEAR_ACCESS_TOKEN;
-    }
-    const data = await response.json();
-    return data.token;
-  } catch (error) {
-    console.warn("[ImageUtils] Failed to refresh Linear token:", error);
-    return ENGINE_ENV.REPLICAS_LINEAR_ACCESS_TOKEN;
-  }
-}
-function isLinearUploadUrl(url3) {
-  return new URL(url3).hostname === "uploads.linear.app";
-}
-async function fetchImageAsBase64(url3, linearAccessToken) {
-  const headers = {};
+async function fetchImageAsBase64(url3) {
   const hostname = new URL(url3).hostname;
-  if (hostname === "uploads.linear.app") {
-    if (linearAccessToken) {
-      headers["Authorization"] = `Bearer ${linearAccessToken}`;
-    }
-  }
-  if (hostname === "files.slack.com") {
-    const token = ENGINE_ENV.REPLICAS_SLACK_BOT_TOKEN;
-    if (!token) {
-      throw new Error(`Cannot fetch Slack file from ${url3}: REPLICAS_SLACK_BOT_TOKEN is not configured`);
-    }
-    headers["Authorization"] = `Bearer ${token}`;
-  }
-  const response = await fetch(url3, { headers, redirect: "follow" });
+  const provider = hostname === "uploads.linear.app" ? "linear" : hostname === "files.slack.com" ? "slack" : null;
+  const response = provider ? await monolithRequest(`/v1/engine/${provider}/download`, { body: { url: url3 } }) : await fetch(url3, { redirect: "follow" });
   if (!response.ok) {
     throw new Error(`Failed to fetch image from ${url3}: ${response.status} ${response.statusText}`);
   }
@@ -11268,8 +11241,6 @@ async function fetchImageAsBase64(url3, linearAccessToken) {
 }
 async function normalizeImages(images) {
   const normalized = [];
-  let linearAccessToken;
-  let linearAccessTokenLoaded = false;
   for (const image of images) {
     if (image.source.type === "base64") {
       normalized.push({
@@ -11277,11 +11248,7 @@ async function normalizeImages(images) {
         source: image.source
       });
     } else if (image.source.type === "url") {
-      if (!linearAccessTokenLoaded && isLinearUploadUrl(image.source.url)) {
-        linearAccessToken = await getLinearAccessToken();
-        linearAccessTokenLoaded = true;
-      }
-      const base64Source = await fetchImageAsBase64(image.source.url, linearAccessToken);
+      const base64Source = await fetchImageAsBase64(image.source.url);
       normalized.push({
         type: "image",
         source: base64Source

package/dist/src/post-tool-pr-hook.js

@@ -3,11 +3,11 @@ import { createRequire as __createRequire } from 'node:module';
 const require = __createRequire(import.meta.url);
 import {
   notifyPostToolUse
-} from "./chunk-LAK7IDRF.js";
+} from "./chunk-KERIK6MD.js";
 import {
   isRecord
 } from "./chunk-UZSNFLDQ.js";
-import "./chunk-GQFXO5TG.js";
+import "./chunk-CRFPCWWZ.js";
 import "./chunk-VEQXQN22.js";
 
 // src/post-tool-pr-hook.ts

package/dist/src/relay-mcp.js

@@ -4,7 +4,7 @@ const require = __createRequire(import.meta.url);
 import {
   messageRelaySubagentRequestSchema,
   spawnRelaySubagentRequestSchema
-} from "./chunk-GQFXO5TG.js";
+} from "./chunk-CRFPCWWZ.js";
 import "./chunk-VEQXQN22.js";
 
 // src/relay-mcp.ts

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "replicas-engine",
-  "version": "0.1.754",
+  "version": "0.1.756",
   "description": "Lightweight API server for Replicas workspaces",
   "type": "module",
   "main": "dist/src/index.js",

package/workspace-sdk/index.js

@@ -79,6 +79,10 @@ const plugins = {
 };
 
 const linear = {
+  download: (url) => requestResponse('/v1/engine/linear/download', {
+    method: 'POST',
+    body: { url },
+  }),
   graphql: ({ query, variables, operationName }) =>
     request('/v1/engine/linear/graphql', {
       method: 'POST',

package/workspace-sdk/index.test.ts

@@ -57,7 +57,10 @@ describe('@replicas/sdk', () => {
     await expect(replicas.plugins.list()).rejects.toThrow('missing Replicas workspace credentials');
   });
 
-  test('downloads Slack files through the authenticated workspace gateway', async () => {
+  test.each([
+    ['slack', 'https://files.slack.com/files-pri/example.mov'],
+    ['linear', 'https://uploads.linear.app/example.mov'],
+  ] as const)('downloads %s files through the authenticated workspace gateway', async (provider, url) => {
     let observed: { path: string; authorization: string | null; body: unknown } | null = null;
     const server = Bun.serve({
       port: 0,
@@ -74,11 +77,11 @@ describe('@replicas/sdk', () => {
     process.env.REPLICAS_ENGINE_SECRET = 'engine-secret';
     process.env.REPLICAS_WORKSPACE_ID = 'workspace-1';
     try {
-      const response = await replicas.slack.download('https://files.slack.com/files-pri/example.mov');
+      const response = await replicas[provider].download(url);
       expect(observed).toEqual({
-        path: '/v1/engine/slack/download',
+        path: `/v1/engine/${provider}/download`,
         authorization: 'Bearer engine-secret',
-        body: { url: 'https://files.slack.com/files-pri/example.mov' },
+        body: { url },
       });
       expect(response.headers.get('content-type')).toBe('video/quicktime');
       expect(await response.text()).toBe('video-bytes');

package/workspace-sdk/shared/workspace-sdk.d.ts

@@ -18,6 +18,7 @@ export interface ReplicasSdk {
         }>;
     };
     linear: {
+        download(url: string): Promise<Response>;
         graphql<T = unknown>(input: {
             query: string;
             variables?: Record<string, unknown> | null;