runline 0.33.0 → 0.35.0

package/dist/plugins/linear/src/labels.js

@@ -1,5 +1,5 @@
 import * as t from "typebox";
-import { bindGetAction, bindListAction, gql, key, LABEL_FIELDS, requireUnscoped, withScopedNote, } from "./shared.js";
+import { bindGetAction, bindListAction, gql, LABEL_FIELDS, requireUnscoped, withScopedNote, } from "./shared.js";
 export function registerLabelActions(rl) {
     const listAction = bindListAction(rl);
     const getAction = bindGetAction(rl);
@@ -32,7 +32,7 @@ export function registerLabelActions(rl) {
         async execute(input, ctx) {
             requireUnscoped(ctx, "label.create");
             const { replaceTeamLabels, ...fields } = input;
-            const data = await gql(key(ctx), `mutation($input: IssueLabelCreateInput!, $replaceTeamLabels: Boolean) { issueLabelCreate(input: $input, replaceTeamLabels: $replaceTeamLabels) { success issueLabel { ${LABEL_FIELDS} } } }`, { input: fields, replaceTeamLabels: replaceTeamLabels ?? null });
+            const data = await gql(ctx, `mutation($input: IssueLabelCreateInput!, $replaceTeamLabels: Boolean) { issueLabelCreate(input: $input, replaceTeamLabels: $replaceTeamLabels) { success issueLabel { ${LABEL_FIELDS} } } }`, { input: fields, replaceTeamLabels: replaceTeamLabels ?? null });
             return data.issueLabelCreate?.issueLabel;
         },
     });
@@ -56,7 +56,7 @@ export function registerLabelActions(rl) {
         async execute(input, ctx) {
             requireUnscoped(ctx, "label.update");
             const { id, replaceTeamLabels, ...fields } = input;
-            const data = await gql(key(ctx), `mutation($id: String!, $input: IssueLabelUpdateInput!, $replaceTeamLabels: Boolean) { issueLabelUpdate(id: $id, input: $input, replaceTeamLabels: $replaceTeamLabels) { success issueLabel { ${LABEL_FIELDS} } } }`, { id, input: fields, replaceTeamLabels: replaceTeamLabels ?? null });
+            const data = await gql(ctx, `mutation($id: String!, $input: IssueLabelUpdateInput!, $replaceTeamLabels: Boolean) { issueLabelUpdate(id: $id, input: $input, replaceTeamLabels: $replaceTeamLabels) { success issueLabel { ${LABEL_FIELDS} } } }`, { id, input: fields, replaceTeamLabels: replaceTeamLabels ?? null });
             return data.issueLabelUpdate?.issueLabel;
         },
     });
@@ -68,7 +68,7 @@ export function registerLabelActions(rl) {
         }),
         async execute(input, ctx) {
             requireUnscoped(ctx, "label.delete");
-            const data = await gql(key(ctx), `mutation($id: String!) { issueLabelDelete(id: $id) { success } }`, { id: input.id });
+            const data = await gql(ctx, `mutation($id: String!) { issueLabelDelete(id: $id) { success } }`, { id: input.id });
             return data.issueLabelDelete;
         },
     });
@@ -80,7 +80,7 @@ export function registerLabelActions(rl) {
         }),
         async execute(input, ctx) {
             requireUnscoped(ctx, "label.retire");
-            const data = await gql(key(ctx), `mutation($id: String!) { issueLabelRetire(id: $id) { success issueLabel { ${LABEL_FIELDS} } } }`, { id: input.id });
+            const data = await gql(ctx, `mutation($id: String!) { issueLabelRetire(id: $id) { success issueLabel { ${LABEL_FIELDS} } } }`, { id: input.id });
             return data.issueLabelRetire?.issueLabel;
         },
     });
@@ -92,7 +92,7 @@ export function registerLabelActions(rl) {
         }),
         async execute(input, ctx) {
             requireUnscoped(ctx, "label.restore");
-            const data = await gql(key(ctx), `mutation($id: String!) { issueLabelRestore(id: $id) { success issueLabel { ${LABEL_FIELDS} } } }`, { id: input.id });
+            const data = await gql(ctx, `mutation($id: String!) { issueLabelRestore(id: $id) { success issueLabel { ${LABEL_FIELDS} } } }`, { id: input.id });
             return data.issueLabelRestore?.issueLabel;
         },
     });

package/dist/plugins/linear/src/organization.js

@@ -1,5 +1,5 @@
 import * as t from "typebox";
-import { gql, key, ORG_FIELDS, requireUnscoped, withScopedNote, } from "./shared.js";
+import { gql, ORG_FIELDS, requireUnscoped, withScopedNote } from "./shared.js";
 export function registerOrganizationActions(rl) {
     rl.registerAction("org.get", {
         access: "read",
@@ -7,7 +7,7 @@ export function registerOrganizationActions(rl) {
         inputSchema: t.Object({}),
         async execute(_input, ctx) {
             requireUnscoped(ctx, "org.get");
-            const data = await gql(key(ctx), `query { organization { ${ORG_FIELDS} } }`);
+            const data = await gql(ctx, `query { organization { ${ORG_FIELDS} } }`);
             return data.organization;
         },
     });

package/dist/plugins/linear/src/projects.js

@@ -1,5 +1,5 @@
 import * as t from "typebox";
-import { bindGetAction, bindListAction, gql, key, MILESTONE_FIELDS, PROJECT_FIELDS, PROJECT_UPDATE_FIELDS, requireUnscoped, withScopedNote, } from "./shared.js";
+import { bindGetAction, bindListAction, gql, MILESTONE_FIELDS, PROJECT_FIELDS, PROJECT_UPDATE_FIELDS, requireUnscoped, withScopedNote, } from "./shared.js";
 export function registerProjectActions(rl) {
     const listAction = bindListAction(rl);
     const getAction = bindGetAction(rl);
@@ -62,7 +62,7 @@ export function registerProjectActions(rl) {
         async execute(input, ctx) {
             requireUnscoped(ctx, "projects.*");
             const { slackChannelName, ...fields } = input;
-            const data = await gql(key(ctx), `mutation($input: ProjectCreateInput!, $slackChannelName: String) { projectCreate(input: $input, slackChannelName: $slackChannelName) { success project { ${PROJECT_FIELDS} } } }`, { input: fields, slackChannelName: slackChannelName ?? null });
+            const data = await gql(ctx, `mutation($input: ProjectCreateInput!, $slackChannelName: String) { projectCreate(input: $input, slackChannelName: $slackChannelName) { success project { ${PROJECT_FIELDS} } } }`, { input: fields, slackChannelName: slackChannelName ?? null });
             return data.projectCreate?.project;
         },
     });
@@ -120,7 +120,7 @@ export function registerProjectActions(rl) {
         async execute(input, ctx) {
             requireUnscoped(ctx, "projects.*");
             const { id, ...fields } = input;
-            const data = await gql(key(ctx), `mutation($id: String!, $input: ProjectUpdateInput!) { projectUpdate(id: $id, input: $input) { success project { ${PROJECT_FIELDS} } } }`, { id, input: fields });
+            const data = await gql(ctx, `mutation($id: String!, $input: ProjectUpdateInput!) { projectUpdate(id: $id, input: $input) { success project { ${PROJECT_FIELDS} } } }`, { id, input: fields });
             return data.projectUpdate?.project;
         },
     });
@@ -132,7 +132,7 @@ export function registerProjectActions(rl) {
         }),
         async execute(input, ctx) {
             requireUnscoped(ctx, "projects.*");
-            const data = await gql(key(ctx), `mutation($id: String!) { projectDelete(id: $id) { success } }`, { id: input.id });
+            const data = await gql(ctx, `mutation($id: String!) { projectDelete(id: $id) { success } }`, { id: input.id });
             return data.projectDelete;
         },
     });
@@ -146,7 +146,7 @@ export function registerProjectActions(rl) {
         }),
         async execute(input, ctx) {
             requireUnscoped(ctx, "projects.*");
-            const data = await gql(key(ctx), `mutation($id: String!) { projectUnarchive(id: $id) { success } }`, { id: input.id });
+            const data = await gql(ctx, `mutation($id: String!) { projectUnarchive(id: $id) { success } }`, { id: input.id });
             return data.projectUnarchive;
         },
     });
@@ -166,7 +166,7 @@ export function registerProjectActions(rl) {
         async execute(input, ctx) {
             requireUnscoped(ctx, "projects.*");
             const opts = input;
-            const data = await gql(key(ctx), `query($term: String!, $first: Int, $includeComments: Boolean, $teamId: String) {
+            const data = await gql(ctx, `query($term: String!, $first: Int, $includeComments: Boolean, $teamId: String) {
           searchProjects(term: $term, first: $first, includeComments: $includeComments, teamId: $teamId) {
             nodes { ${PROJECT_FIELDS} }
             totalCount
@@ -206,7 +206,7 @@ export function registerProjectActions(rl) {
         }),
         async execute(input, ctx) {
             requireUnscoped(ctx, "projects.*");
-            const data = await gql(key(ctx), `mutation($input: ProjectMilestoneCreateInput!) { projectMilestoneCreate(input: $input) { success projectMilestone { ${MILESTONE_FIELDS} } } }`, { input: input });
+            const data = await gql(ctx, `mutation($input: ProjectMilestoneCreateInput!) { projectMilestoneCreate(input: $input) { success projectMilestone { ${MILESTONE_FIELDS} } } }`, { input: input });
             return data.projectMilestoneCreate
                 ?.projectMilestone;
         },
@@ -235,7 +235,7 @@ export function registerProjectActions(rl) {
         async execute(input, ctx) {
             requireUnscoped(ctx, "projects.*");
             const { id, ...fields } = input;
-            const data = await gql(key(ctx), `mutation($id: String!, $input: ProjectMilestoneUpdateInput!) { projectMilestoneUpdate(id: $id, input: $input) { success projectMilestone { ${MILESTONE_FIELDS} } } }`, { id, input: fields });
+            const data = await gql(ctx, `mutation($id: String!, $input: ProjectMilestoneUpdateInput!) { projectMilestoneUpdate(id: $id, input: $input) { success projectMilestone { ${MILESTONE_FIELDS} } } }`, { id, input: fields });
             return data.projectMilestoneUpdate
                 ?.projectMilestone;
         },
@@ -250,7 +250,7 @@ export function registerProjectActions(rl) {
         }),
         async execute(input, ctx) {
             requireUnscoped(ctx, "projects.*");
-            const data = await gql(key(ctx), `mutation($id: String!) { projectMilestoneDelete(id: $id) { success } }`, { id: input.id });
+            const data = await gql(ctx, `mutation($id: String!) { projectMilestoneDelete(id: $id) { success } }`, { id: input.id });
             return data.projectMilestoneDelete;
         },
     });
@@ -278,7 +278,7 @@ export function registerProjectActions(rl) {
         }),
         async execute(input, ctx) {
             requireUnscoped(ctx, "projects.*");
-            const data = await gql(key(ctx), `mutation($input: ProjectUpdateCreateInput!) { projectUpdateCreate(input: $input) { success projectUpdate { ${PROJECT_UPDATE_FIELDS} } } }`, { input: input });
+            const data = await gql(ctx, `mutation($input: ProjectUpdateCreateInput!) { projectUpdateCreate(input: $input) { success projectUpdate { ${PROJECT_UPDATE_FIELDS} } } }`, { input: input });
             return data.projectUpdateCreate
                 ?.projectUpdate;
         },
@@ -303,7 +303,7 @@ export function registerProjectActions(rl) {
         async execute(input, ctx) {
             requireUnscoped(ctx, "projects.*");
             const { id, ...fields } = input;
-            const data = await gql(key(ctx), `mutation($id: String!, $input: ProjectUpdateUpdateInput!) { projectUpdateUpdate(id: $id, input: $input) { success projectUpdate { ${PROJECT_UPDATE_FIELDS} } } }`, { id, input: fields });
+            const data = await gql(ctx, `mutation($id: String!, $input: ProjectUpdateUpdateInput!) { projectUpdateUpdate(id: $id, input: $input) { success projectUpdate { ${PROJECT_UPDATE_FIELDS} } } }`, { id, input: fields });
             return data.projectUpdateUpdate
                 ?.projectUpdate;
         },
@@ -318,7 +318,7 @@ export function registerProjectActions(rl) {
         }),
         async execute(input, ctx) {
             requireUnscoped(ctx, "projects.*");
-            const data = await gql(key(ctx), `mutation($id: String!) { projectUpdateArchive(id: $id) { success } }`, { id: input.id });
+            const data = await gql(ctx, `mutation($id: String!) { projectUpdateArchive(id: $id) { success } }`, { id: input.id });
             return data.projectUpdateArchive;
         },
     });

package/dist/plugins/linear/src/shared.js

@@ -1,26 +1,21 @@
 import { createHash } from "node:crypto";
 import * as t from "typebox";
-import { authedFetch } from "../../_shared/authedFetch.js";
-const GQL_URL = "https://api.linear.app/graphql";
-export async function gql(apiKey, query, variables) {
+import { credentialJson, graphqlFailed } from "../../_shared/credentials.js";
+import { linearCredential } from "./credentials.js";
+export async function gql(ctx, query, variables) {
     const body = { query };
     if (variables)
         body.variables = variables;
-    const res = await authedFetch(GQL_URL, {
+    const data = (await credentialJson(ctx, linearCredential, "linear", {
+        target: "gql",
+        path: "graphql",
         method: "POST",
-        headers: { Authorization: apiKey, "Content-Type": "application/json" },
-        body: JSON.stringify(body),
-    });
-    if (!res.ok)
-        throw new Error(`Linear API error ${res.status}: ${await res.text()}`);
-    const data = (await res.json());
+        json: body,
+    }));
     if (data.errors)
-        throw new Error(`Linear GraphQL error: ${JSON.stringify(data.errors)}`);
+        throw graphqlFailed("linear", data.errors);
     return data.data;
 }
-export function key(ctx) {
-    return ctx.connection.config.apiKey;
-}
 /**
  * The configured scope values, verbatim. Each is either a label UUID or a
  * label name — `resolveScopeLabelIds` turns the latter into the former.
@@ -41,22 +36,28 @@ export function scopeLabelValues(ctx) {
 }
 const UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
 /**
- * The workspace's labels, per API key. Linear rejects a non-UUID in
+ * The workspace's labels. Linear rejects a non-UUID in
  * `labels: { id: { in: [...] } }` with "each value in in must be a UUID",
  * so a human-written scope value like `requester:yosi` breaks every issue
  * query (SHFT-1644) unless it is resolved to an id first. The directory is
- * fetched once per key and re-read on a miss, so a label created later
- * still resolves.
+ * fetched once per locally signed connection and re-read on a miss, so a
+ * label created later still resolves.
  *
- * Keyed by digest, so a long-lived Map never holds the API key itself.
+ * Keyed by a digest of the connection config, API key included, so a
+ * long-lived Map never holds the key itself. A brokered connection's config
+ * holds no key: two people's connections can be identical, and only the
+ * broker knows whose workspace answers. Brokered calls read their own
+ * directory every time and cache nothing.
  */
 const labelDirectories = new Map();
-const directoryKey = (apiKey) => createHash("sha256").update(apiKey).digest("hex");
-async function fetchLabelDirectory(apiKey) {
+const directoryKey = (ctx) => createHash("sha256")
+    .update(JSON.stringify(ctx.connection.config))
+    .digest("hex");
+async function fetchLabelDirectory(ctx) {
     const byName = new Map();
     let after = null;
     for (;;) {
-        const data = await gql(apiKey, `query($after: String) { issueLabels(first: 250, after: $after) { nodes { id name team { key } } pageInfo { hasNextPage endCursor } } }`, { after });
+        const data = await gql(ctx, `query($after: String) { issueLabels(first: 250, after: $after) { nodes { id name team { key } } pageInfo { hasNextPage endCursor } } }`, { after });
         const conn = data.issueLabels;
         for (const node of conn?.nodes ?? []) {
             const name = String(node.name);
@@ -84,12 +85,14 @@ async function fetchLabelDirectory(apiKey) {
     }
     return byName;
 }
-function labelDirectory(apiKey, { refresh = false } = {}) {
-    const cacheKey = directoryKey(apiKey);
+function labelDirectory(ctx, { refresh = false } = {}) {
+    if (ctx.credentials)
+        return fetchLabelDirectory(ctx);
+    const cacheKey = directoryKey(ctx);
     const cached = refresh ? undefined : labelDirectories.get(cacheKey);
     if (cached)
         return cached;
-    const pending = fetchLabelDirectory(apiKey);
+    const pending = fetchLabelDirectory(ctx);
     labelDirectories.set(cacheKey, pending);
     // A failed lookup must not be cached as the answer for this key.
     pending.catch(() => {
@@ -124,14 +127,13 @@ export async function resolveScopeLabelIds(ctx) {
         return [];
     if (values.every((v) => UUID_RE.test(v)))
         return values;
-    const apiKey = key(ctx);
     const missing = (directory) => values.some((v) => !UUID_RE.test(v) && !directory.has(v.toLowerCase()));
-    let directory = await labelDirectory(apiKey);
+    let directory = await labelDirectory(ctx);
     // A label created after the directory was cached would otherwise stay
     // unresolvable for the lifetime of the process: re-read once before
     // declaring a name unknown.
     if (missing(directory))
-        directory = await labelDirectory(apiKey, { refresh: true });
+        directory = await labelDirectory(ctx, { refresh: true });
     return values.map((value) => {
         if (UUID_RE.test(value))
             return value;
@@ -164,7 +166,7 @@ export async function issueHasScope(ctx, issue) {
         labels.some((label) => ids.has(String(label.id))));
 }
 export async function getIssueForScope(ctx, issueId) {
-    const data = await gql(key(ctx), `query($id: String!) { issue(id: $id) { id identifier labels { nodes { id name } } } }`, { id: issueId });
+    const data = await gql(ctx, `query($id: String!) { issue(id: $id) { id identifier labels { nodes { id name } } } }`, { id: issueId });
     return data.issue ?? null;
 }
 export async function assertIssueInScope(ctx, issueId) {
@@ -178,7 +180,7 @@ export async function assertIssueInScope(ctx, issueId) {
 export async function assertCommentInScope(ctx, commentId) {
     if (!isScoped(ctx))
         return;
-    const data = await gql(key(ctx), `query($id: String!) { comment(id: $id) { id issue { id identifier labels { nodes { id name } } } } }`, { id: commentId });
+    const data = await gql(ctx, `query($id: String!) { comment(id: $id) { id issue { id identifier labels { nodes { id name } } } } }`, { id: commentId });
     const issue = data.comment?.issue;
     if (!issue || !(await issueHasScope(ctx, issue)))
         throw new Error("Linear comment is not available to this scoped connection");
@@ -186,7 +188,7 @@ export async function assertCommentInScope(ctx, commentId) {
 export async function assertAttachmentInScope(ctx, attachmentId) {
     if (!isScoped(ctx))
         return;
-    const data = await gql(key(ctx), `query($id: String!) { attachment(id: $id) { id issue { id identifier labels { nodes { id name } } } } }`, { id: attachmentId });
+    const data = await gql(ctx, `query($id: String!) { attachment(id: $id) { id issue { id identifier labels { nodes { id name } } } } }`, { id: attachmentId });
     const issue = data.attachment?.issue;
     if (!issue || !(await issueHasScope(ctx, issue)))
         throw new Error("Linear attachment is not available to this scoped connection");
@@ -353,7 +355,7 @@ export function registerListAction(rl, name, description, rootField, filterTypeN
             requireRootFieldAvailable(ctx, name, rootField);
             const opts = (input ?? {});
             const { argsDecl, argsCall, vars } = buildConnArgs(opts, filterTypeName);
-            const data = await gql(key(ctx), `query${argsDecl} { ${rootField}${argsCall} { nodes { ${selection} } pageInfo { hasNextPage endCursor } } }`, vars);
+            const data = await gql(ctx, `query${argsDecl} { ${rootField}${argsCall} { nodes { ${selection} } pageInfo { hasNextPage endCursor } } }`, vars);
             const conn = data[rootField];
             return { nodes: conn.nodes, pageInfo: conn.pageInfo };
         },
@@ -370,7 +372,7 @@ export function registerGetAction(rl, name, description, rootField, selection) {
         }),
         async execute(input, ctx) {
             requireRootFieldAvailable(ctx, name, rootField);
-            const data = await gql(key(ctx), `query($id: String!) { ${rootField}(id: $id) { ${selection} } }`, { id: input.id });
+            const data = await gql(ctx, `query($id: String!) { ${rootField}(id: $id) { ${selection} } }`, { id: input.id });
             return data[rootField];
         },
     });

package/dist/plugins/linear/src/states.js

@@ -1,5 +1,5 @@
 import * as t from "typebox";
-import { bindGetAction, bindListAction, gql, key, requireUnscoped, STATE_FIELDS, withScopedNote, } from "./shared.js";
+import { bindGetAction, bindListAction, gql, requireUnscoped, STATE_FIELDS, withScopedNote, } from "./shared.js";
 export function registerStateActions(rl) {
     const listAction = bindListAction(rl);
     const getAction = bindGetAction(rl);
@@ -25,7 +25,7 @@ export function registerStateActions(rl) {
         }),
         async execute(input, ctx) {
             requireUnscoped(ctx, "state.create");
-            const data = await gql(key(ctx), `mutation($input: WorkflowStateCreateInput!) { workflowStateCreate(input: $input) { success workflowState { ${STATE_FIELDS} } } }`, { input: input });
+            const data = await gql(ctx, `mutation($input: WorkflowStateCreateInput!) { workflowStateCreate(input: $input) { success workflowState { ${STATE_FIELDS} } } }`, { input: input });
             return data.workflowStateCreate
                 ?.workflowState;
         },
@@ -43,7 +43,7 @@ export function registerStateActions(rl) {
         async execute(input, ctx) {
             requireUnscoped(ctx, "state.update");
             const { id, ...fields } = input;
-            const data = await gql(key(ctx), `mutation($id: String!, $input: WorkflowStateUpdateInput!) { workflowStateUpdate(id: $id, input: $input) { success workflowState { ${STATE_FIELDS} } } }`, { id, input: fields });
+            const data = await gql(ctx, `mutation($id: String!, $input: WorkflowStateUpdateInput!) { workflowStateUpdate(id: $id, input: $input) { success workflowState { ${STATE_FIELDS} } } }`, { id, input: fields });
             return data.workflowStateUpdate
                 ?.workflowState;
         },

package/dist/plugins/linear/src/teams.js

@@ -1,5 +1,5 @@
 import * as t from "typebox";
-import { bindGetAction, bindListAction, gql, key, requireUnscoped, TEAM_FIELDS, USER_FIELDS, withScopedNote, } from "./shared.js";
+import { bindGetAction, bindListAction, gql, requireUnscoped, TEAM_FIELDS, USER_FIELDS, withScopedNote, } from "./shared.js";
 export function registerTeamActions(rl) {
     const listAction = bindListAction(rl);
     const getAction = bindGetAction(rl);
@@ -42,7 +42,7 @@ export function registerTeamActions(rl) {
         async execute(input, ctx) {
             requireUnscoped(ctx, "team.create");
             const { copySettingsFromTeamId, ...fields } = input;
-            const data = await gql(key(ctx), `mutation($input: TeamCreateInput!, $copySettingsFromTeamId: String) { teamCreate(input: $input, copySettingsFromTeamId: $copySettingsFromTeamId) { success team { ${TEAM_FIELDS} } } }`, {
+            const data = await gql(ctx, `mutation($input: TeamCreateInput!, $copySettingsFromTeamId: String) { teamCreate(input: $input, copySettingsFromTeamId: $copySettingsFromTeamId) { success team { ${TEAM_FIELDS} } } }`, {
                 input: fields,
                 copySettingsFromTeamId: copySettingsFromTeamId ?? null,
             });
@@ -80,7 +80,7 @@ export function registerTeamActions(rl) {
         async execute(input, ctx) {
             requireUnscoped(ctx, "team.update");
             const { id, ...fields } = input;
-            const data = await gql(key(ctx), `mutation($id: String!, $input: TeamUpdateInput!) { teamUpdate(id: $id, input: $input) { success team { ${TEAM_FIELDS} } } }`, { id, input: fields });
+            const data = await gql(ctx, `mutation($id: String!, $input: TeamUpdateInput!) { teamUpdate(id: $id, input: $input) { success team { ${TEAM_FIELDS} } } }`, { id, input: fields });
             return data.teamUpdate?.team;
         },
     });
@@ -95,7 +95,7 @@ export function registerTeamActions(rl) {
             // Team membership is workspace metadata, like user.list: readable
             // under a scoped connection (SHFT-1644).
             const { teamId, limit } = input;
-            const data = await gql(key(ctx), `query($id: String!, $first: Int) {
+            const data = await gql(ctx, `query($id: String!, $first: Int) {
           team(id: $id) { members(first: $first) { nodes { ${USER_FIELDS} } } }
         }`, { id: teamId, first: limit ?? 50 });
             return data.team?.members?.nodes;

package/dist/plugins/linear/src/users.js

@@ -1,5 +1,5 @@
 import * as t from "typebox";
-import { bindGetAction, bindListAction, gql, key, requireUnscoped, USER_FIELDS, withScopedNote, } from "./shared.js";
+import { bindGetAction, bindListAction, gql, requireUnscoped, USER_FIELDS, withScopedNote, } from "./shared.js";
 export function registerUserActions(rl) {
     const listAction = bindListAction(rl);
     const getAction = bindGetAction(rl);
@@ -10,7 +10,7 @@ export function registerUserActions(rl) {
         description: "Get the authenticated user. Use this to resolve 'me' before filtering issues by assignee.",
         inputSchema: t.Object({}),
         async execute(_input, ctx) {
-            const data = await gql(key(ctx), `query { viewer { ${USER_FIELDS} } }`);
+            const data = await gql(ctx, `query { viewer { ${USER_FIELDS} } }`);
             return data.viewer;
         },
     });
@@ -36,7 +36,7 @@ export function registerUserActions(rl) {
         async execute(input, ctx) {
             requireUnscoped(ctx, "user.update");
             const { id, ...fields } = input;
-            const data = await gql(key(ctx), `mutation($id: String!, $input: UserUpdateInput!) { userUpdate(id: $id, input: $input) { success user { ${USER_FIELDS} } } }`, { id, input: fields });
+            const data = await gql(ctx, `mutation($id: String!, $input: UserUpdateInput!) { userUpdate(id: $id, input: $input) { success user { ${USER_FIELDS} } } }`, { id, input: fields });
             return data.userUpdate?.user;
         },
     });

package/dist/plugins/linear/src/views.js

@@ -1,5 +1,5 @@
 import * as t from "typebox";
-import { bindGetAction, bindListAction, buildConnArgs, CUSTOM_VIEW_FIELDS, FEED_ITEM_FIELDS, gql, INITIATIVE_FIELDS, ISSUE_LITE, key, LIST_INPUT_SCHEMA, mergeIssueScopeFilter, PROJECT_FIELDS, requireUnscoped, withScopedNote, } from "./shared.js";
+import { bindGetAction, bindListAction, buildConnArgs, CUSTOM_VIEW_FIELDS, FEED_ITEM_FIELDS, gql, INITIATIVE_FIELDS, ISSUE_LITE, LIST_INPUT_SCHEMA, mergeIssueScopeFilter, PROJECT_FIELDS, requireUnscoped, withScopedNote, } from "./shared.js";
 const ISSUE_FILTER_DESCRIPTION = "IssueFilter payload. Examples: label { labels: { id: { in: ['label-id'] } } }; project { project: { id: { eq: 'project-id' } } }; assignee { assignee: { id: { eq: 'user-id' } } }; state { state: { id: { eq: 'state-id' } } }; priority { priority: { eq: 1 } }; due window { dueDate: { gte: '2026-06-09', lte: '2026-06-16' } }; combine with and/or arrays.";
 export function registerViewActions(rl) {
     const listAction = bindListAction(rl);
@@ -36,7 +36,7 @@ export function registerViewActions(rl) {
                     callParts.push("includeSubTeams: $includeSubTeams");
                     vars.includeSubTeams = opts.includeSubTeams;
                 }
-                const data = await gql(key(ctx), `query(${declParts.join(", ")}) {
+                const data = await gql(ctx, `query(${declParts.join(", ")}) {
             customView(id: $id) { ${connectionField}(${callParts.join(", ")}) { nodes { ${selection} } pageInfo { hasNextPage endCursor } } }
           }`, { id: opts.viewId, ...vars });
                 const conn = (data.customView?.[connectionField] ?? {});
@@ -73,7 +73,7 @@ export function registerViewActions(rl) {
         }),
         async execute(input, ctx) {
             requireUnscoped(ctx, "view.create");
-            const data = await gql(key(ctx), `mutation($input: CustomViewCreateInput!) { customViewCreate(input: $input) { success customView { ${CUSTOM_VIEW_FIELDS} } } }`, { input: input });
+            const data = await gql(ctx, `mutation($input: CustomViewCreateInput!) { customViewCreate(input: $input) { success customView { ${CUSTOM_VIEW_FIELDS} } } }`, { input: input });
             return data.customViewCreate?.customView;
         },
     });
@@ -105,7 +105,7 @@ export function registerViewActions(rl) {
         async execute(input, ctx) {
             requireUnscoped(ctx, "view.update");
             const { id, ...fields } = input;
-            const data = await gql(key(ctx), `mutation($id: String!, $input: CustomViewUpdateInput!) { customViewUpdate(id: $id, input: $input) { success customView { ${CUSTOM_VIEW_FIELDS} } } }`, { id, input: fields });
+            const data = await gql(ctx, `mutation($id: String!, $input: CustomViewUpdateInput!) { customViewUpdate(id: $id, input: $input) { success customView { ${CUSTOM_VIEW_FIELDS} } } }`, { id, input: fields });
             return data.customViewUpdate?.customView;
         },
     });
@@ -119,7 +119,7 @@ export function registerViewActions(rl) {
         }),
         async execute(input, ctx) {
             requireUnscoped(ctx, "view.delete");
-            const data = await gql(key(ctx), `mutation($id: String!) { customViewDelete(id: $id) { success } }`, { id: input.id });
+            const data = await gql(ctx, `mutation($id: String!) { customViewDelete(id: $id) { success } }`, { id: input.id });
             return data.customViewDelete;
         },
     });

package/dist/plugins/linear/src/webhooks.js

@@ -1,5 +1,5 @@
 import * as t from "typebox";
-import { bindGetAction, bindListAction, gql, key, requireUnscoped, WEBHOOK_FIELDS, withScopedNote, } from "./shared.js";
+import { bindGetAction, bindListAction, gql, requireUnscoped, WEBHOOK_FIELDS, withScopedNote, } from "./shared.js";
 export function registerWebhookActions(rl) {
     const listAction = bindListAction(rl);
     const getAction = bindGetAction(rl);
@@ -34,7 +34,7 @@ export function registerWebhookActions(rl) {
         }),
         async execute(input, ctx) {
             requireUnscoped(ctx, "webhooks.*");
-            const data = await gql(key(ctx), `mutation($input: WebhookCreateInput!) { webhookCreate(input: $input) { success webhook { ${WEBHOOK_FIELDS} } } }`, { input: input });
+            const data = await gql(ctx, `mutation($input: WebhookCreateInput!) { webhookCreate(input: $input) { success webhook { ${WEBHOOK_FIELDS} } } }`, { input: input });
             return data.webhookCreate?.webhook;
         },
     });
@@ -58,7 +58,7 @@ export function registerWebhookActions(rl) {
         async execute(input, ctx) {
             requireUnscoped(ctx, "webhooks.*");
             const { id, ...fields } = input;
-            const data = await gql(key(ctx), `mutation($id: String!, $input: WebhookUpdateInput!) { webhookUpdate(id: $id, input: $input) { success webhook { ${WEBHOOK_FIELDS} } } }`, { id, input: fields });
+            const data = await gql(ctx, `mutation($id: String!, $input: WebhookUpdateInput!) { webhookUpdate(id: $id, input: $input) { success webhook { ${WEBHOOK_FIELDS} } } }`, { id, input: fields });
             return data.webhookUpdate?.webhook;
         },
     });
@@ -70,7 +70,7 @@ export function registerWebhookActions(rl) {
         }),
         async execute(input, ctx) {
             requireUnscoped(ctx, "webhooks.*");
-            const data = await gql(key(ctx), `mutation($id: String!) { webhookDelete(id: $id) { success } }`, { id: input.id });
+            const data = await gql(ctx, `mutation($id: String!) { webhookDelete(id: $id) { success } }`, { id: input.id });
             return data.webhookDelete;
         },
     });
@@ -84,7 +84,7 @@ export function registerWebhookActions(rl) {
         }),
         async execute(input, ctx) {
             requireUnscoped(ctx, "webhooks.*");
-            const data = await gql(key(ctx), `mutation($id: String!) { webhookRotateSecret(id: $id) { success secret } }`, { id: input.id });
+            const data = await gql(ctx, `mutation($id: String!) { webhookRotateSecret(id: $id) { success secret } }`, { id: input.id });
             return data.webhookRotateSecret;
         },
     });

package/dist/plugins/lingvanex/src/credentials.js

@@ -0,0 +1,13 @@
+import { staticCredential } from "../../_shared/credentials.js";
+/** An API key as a bearer to Lingvanex's one translate endpoint. */
+export const lingvanexCredential = staticCredential({
+    id: "lingvanex",
+    auth: { kind: "bearer" },
+    local: { secret: "apiKey" },
+    targets: {
+        api: {
+            baseUrl: "https://api-b2b.backenster.com/b1/api/v3/",
+            methods: ["POST"],
+        },
+    },
+});

package/dist/plugins/lingvanex/src/index.js

@@ -1,6 +1,9 @@
+import { credentialJson } from "../../_shared/credentials.js";
+import { lingvanexCredential } from "./credentials.js";
 export default function lingvanex(rl) {
     rl.setName("lingvanex");
     rl.setVersion("0.1.0");
+    rl.setCredential(lingvanexCredential);
     rl.setConnectionSchema({
         apiKey: {
             type: "string",
@@ -46,17 +49,12 @@ export default function lingvanex(rl) {
                 body.from = src;
             if (translateMode)
                 body.translateMode = translateMode;
-            const res = await fetch("https://api-b2b.backenster.com/b1/api/v3/translate", {
+            return credentialJson(ctx, lingvanexCredential, "lingvanex", {
+                target: "api",
+                path: "translate",
                 method: "POST",
-                headers: {
-                    Authorization: `Bearer ${ctx.connection.config.apiKey}`,
-                    "Content-Type": "application/json",
-                },
-                body: JSON.stringify(body),
+                json: body,
             });
-            if (!res.ok)
-                throw new Error(`Lingvanex error ${res.status}: ${await res.text()}`);
-            return res.json();
         },
     });
 }

package/dist/plugins/linkedin/src/credentials.js

@@ -0,0 +1,17 @@
+import { staticCredential } from "../../_shared/credentials.js";
+/**
+ * An OAuth2 access token, sent as a bearer to LinkedIn's versioned REST
+ * origin, with the public Restli protocol and API version headers.
+ */
+export const linkedinCredential = staticCredential({
+    id: "linkedin",
+    auth: { kind: "bearer" },
+    local: { secret: "accessToken" },
+    targets: {
+        api: {
+            baseUrl: "https://api.linkedin.com/rest/",
+            methods: ["POST"],
+            allowedHeaders: ["X-Restli-Protocol-Version", "LinkedIn-Version"],
+        },
+    },
+});

package/dist/plugins/linkedin/src/index.js

@@ -1,28 +1,24 @@
-const BASE_URL = "https://api.linkedin.com";
-async function apiRequest(token, method, endpoint, body) {
-    const isAbsolute = endpoint.startsWith("http");
-    const url = isAbsolute ? endpoint : `${BASE_URL}/rest${endpoint}`;
-    const opts = {
+import { credentialOk, jsonAnswer } from "../../_shared/credentials.js";
+import { linkedinCredential } from "./credentials.js";
+async function apiRequest(ctx, method, path, body) {
+    const res = await credentialOk(ctx, linkedinCredential, "linkedin", {
+        target: "api",
+        path,
         method,
         headers: {
-            Authorization: `Bearer ${token}`,
-            Accept: "application/json",
             "X-Restli-Protocol-Version": "2.0.0",
             "LinkedIn-Version": "202504",
-            "Content-Type": "application/json",
         },
-    };
-    if (body && Object.keys(body).length > 0 && method !== "GET")
-        opts.body = JSON.stringify(body);
-    const res = await fetch(url, opts);
+        ...(body && Object.keys(body).length > 0 && method !== "GET"
+            ? { json: body }
+            : {}),
+    });
     if (res.status === 201) {
         return { urn: res.headers.get("x-restli-id") };
     }
-    if (!res.ok)
-        throw new Error(`LinkedIn API error ${res.status}: ${await res.text()}`);
     if (res.status === 204)
         return { success: true };
-    return res.json();
+    return jsonAnswer(res);
 }
 // LinkedIn "little text" format escaping
 function escapeText(text) {
@@ -31,6 +27,7 @@ function escapeText(text) {
 export default function linkedin(rl) {
     rl.setName("linkedin");
     rl.setVersion("0.1.0");
+    rl.setCredential(linkedinCredential);
     rl.setConnectionSchema({
         accessToken: {
             type: "string",
@@ -39,7 +36,6 @@ export default function linkedin(rl) {
             env: "LINKEDIN_ACCESS_TOKEN",
         },
     });
-    const tok = (ctx) => ctx.connection.config.accessToken;
     rl.registerAction("post.create", {
         access: "write",
         description: "Create a post on LinkedIn. Supports text-only, article shares, and text with commentary. Image uploads require binary data and are not supported in this plugin.",
@@ -104,7 +100,7 @@ export default function linkedin(rl) {
             else {
                 body.commentary = escapedText;
             }
-            return apiRequest(tok(ctx), "POST", "/posts", body);
+            return apiRequest(ctx, "POST", "posts", body);
         },
     });
 }

package/dist/plugins/lonescale/src/credentials.js

@@ -0,0 +1,13 @@
+import { staticCredential } from "../../_shared/credentials.js";
+/** An API key, sent as the X-API-KEY header to LoneScale's public API. */
+export const lonescaleCredential = staticCredential({
+    id: "lonescale",
+    auth: { kind: "apiKey", header: "X-API-KEY" },
+    local: { secret: "apiKey" },
+    targets: {
+        api: {
+            baseUrl: "https://public-api.lonescale.com/",
+            methods: ["GET", "POST"],
+        },
+    },
+});