ticketlens 0.27.0 → 0.31.0

package/skills/jtb/scripts/lib/config.mjs

@@ -42,10 +42,13 @@ export function getPackageMeta() {
   };
 }
 
-/** Human-readable relative time from an ISO date string. */
-export function timeAgo(dateStr) {
+/**
+ * Human-readable relative time from an ISO date string.
+ * @param {{ now?: () => Date }} [opts] - injectable clock, for deterministic tests only
+ */
+export function timeAgo(dateStr, { now = () => new Date() } = {}) {
   if (!dateStr) return '';
-  const diff = Date.now() - new Date(dateStr).getTime();
+  const diff = now().getTime() - new Date(dateStr).getTime();
   const mins = Math.floor(diff / 60000);
   if (mins < 60) return `${mins}m ago`;
   const hours = Math.floor(mins / 60);

package/skills/jtb/scripts/lib/confirm.mjs

@@ -0,0 +1,29 @@
+/**
+ * Interactive y/N confirmation gate for destructive, unrecoverable actions
+ * (deleting a Recall note, removing a stored cloud-provider key, etc).
+ * Enter with no input aborts — an accidental keystroke never destroys data.
+ * Non-interactive callers must pass forceYes explicitly (--yes/-y at the CLI).
+ */
+export async function confirmDestructive(action, opts = {}) {
+  const { stdin = process.stdin, stream = process.stderr, forceYes = false } = opts;
+
+  if (forceYes) return true;
+
+  if (!stdin.isTTY || !stdin.setRawMode) {
+    stream.write('  ✖ Non-interactive mode: pass --yes to confirm without a prompt.\n');
+    return false;
+  }
+
+  stream.write(`  ${action} — this cannot be restored. Continue?  y/N  `);
+  return new Promise(resolve => {
+    stdin.setRawMode(true);
+    stdin.resume();
+    stdin.once('data', buf => {
+      stdin.setRawMode(false);
+      stdin.pause();
+      const confirmed = buf.toString().toLowerCase() === 'y';
+      stream.write(confirmed ? 'y\n' : 'N\n');
+      resolve(confirmed);
+    });
+  });
+}

package/skills/jtb/scripts/lib/help.mjs

@@ -53,12 +53,14 @@ export function printHelp({ stream = process.stdout } = {}) {
     `    ${s.brand('ticketlens')} recall ${s.dim('<query|TICKET-KEY>')}   Search your saved Recall notes  ${s.dim('[Pro]')}`,
     `    ${s.brand('ticketlens')} recall sync                 Retry any notes stuck in the local queue  ${s.dim('[Team+]')}`,
     `    ${s.brand('ticketlens')} recall settings             Show effective retry-queue settings, fetched live  ${s.dim('[Team+]')}`,
-    `    ${s.brand('ticketlens')} mcp                         Start the MCP stdio server for Recall  ${s.dim('[Pro]')}`,
+    `    ${s.brand('ticketlens')} mcp                         Start the MCP stdio server (Recall + ticket writes)  ${s.dim('[Pro]')}`,
     `    ${s.brand('ticketlens')} comment ${s.dim('<TICKET-KEY> --body=...')}  Post a comment to the tracker  ${s.dim('[Pro]')}`,
     `    ${s.brand('ticketlens')} transition ${s.dim('<TICKET-KEY> [--target=... --confirm]')}  Move ticket status  ${s.dim('[Pro]')}`,
     `    ${s.brand('ticketlens')} assign ${s.dim('<TICKET-KEY> --to=me')}      Assign a ticket to yourself  ${s.dim('[Pro]')}`,
     `    ${s.brand('ticketlens')} duplicates ${s.dim('<TICKET-KEY> [--threshold=N]')}  Find likely duplicate tickets  ${s.dim('[Pro]')}`,
     `    ${s.brand('ticketlens')} link ${s.dim('<SOURCE> <TARGET> [--type=... --confirm]')}  Link two tickets  ${s.dim('[Pro]')}`,
+    `    ${s.brand('ticketlens')} update ${s.dim('<TICKET-KEY> [--title=... --description=... --priority=... --add-labels=... --remove-labels=...]')}  Update fields  ${s.dim('[Pro]')}`,
+    `    ${s.brand('ticketlens')} create ${s.dim('--project=... [--type=...] --summary=... [--description=...]')}  Create a new ticket  ${s.dim('[Pro]')}`,
     '',
     `    ${s.brand('ticketlens')} delete ${s.dim('<PROFILE-NAME>')}       Remove a profile`,
     `    ${s.brand('ticketlens')} activate ${s.dim('<KEY>')}              Activate a license key`,
@@ -179,6 +181,7 @@ export function printFetchHelp({ stream = process.stdout } = {}) {
     `    ${s.brand('--cloud')}            Route AI request through TicketLens API ${s.dim('[Pro]')}`,
     `    ${s.brand('--provider')}=${s.dim('NAME')}    Force AI provider ${s.dim('(anthropic|openai|groq)')}`,
     `    ${s.brand('--template')}=${s.dim('SLUG')}    Apply a brief template ${s.dim('(full|quick|code-review, or custom [Team])')}`,
+    `    ${s.brand('--budget')}=${s.dim('N')}         Trim brief to fit a token budget  ${s.dim('[Pro]')}`,
     `    ${s.brand('-h')}, ${s.brand('--help')}         Show this help`,
     '',
     `  ${s.bold('EXAMPLES')}`,
@@ -194,6 +197,32 @@ export function printFetchHelp({ stream = process.stdout } = {}) {
   stream.write(lines.join('\n') + '\n');
 }
 
+export function printHistoryHelp({ stream = process.stdout } = {}) {
+  const s = createStyler({ isTTY: stream.isTTY });
+  const lines = [
+    '',
+    `  ${s.bold(s.brand('ticketlens'))} ${s.bold('history')} ${s.dim('TICKET-KEY')}  ${s.dim('[Pro]')}`,
+    '',
+    `  Show this ticket's urgency timeline from your local triage history — ${s.dim('[Pro]')}`,
+    `  every prior triage scan that surfaced it, with the urgency level and reason`,
+    `  computed at that point in time. Read-only, entirely local — no network call.`,
+    '',
+    `  ${s.bold('ARGUMENTS')}`,
+    '',
+    `    ${s.brand('TICKET-KEY')}   The ticket to show history for ${s.dim('(required)')}`,
+    '',
+    `  ${s.bold('OPTIONS')}`,
+    '',
+    `    ${s.brand('-h')}, ${s.brand('--help')}   Show this help`,
+    '',
+    `  ${s.bold('EXAMPLES')}`,
+    '',
+    `    ${s.dim('$')} ticketlens history PROJ-123`,
+    '',
+  ];
+  stream.write(lines.join('\n') + '\n');
+}
+
 const ANSI_RE_HELP = /\x1b\[[0-9;]*m/g;
 function padRightVis(str, len) {
   const vis = str.replace(ANSI_RE_HELP, '').length;
@@ -545,11 +574,12 @@ export function printNoteHelp({ stream = process.stdout } = {}) {
     `  Code session — not typically invoked by hand. Every note it writes gets the`,
     `  same structural and secret-scan checks ${s.brand('note add')} applies to user input.`,
     '',
-    `  ${s.bold('ticketlens note delete')} ${s.dim('--id="..." [--ticket=KEY]')}  ${s.dim('[Pro]')}`,
+    `  ${s.bold('ticketlens note delete')} ${s.dim('--id="..." [--ticket=KEY] [--yes]')}  ${s.dim('[Pro]')}`,
     '',
     `  Removes a note from your local vault. Local only — if this note was already`,
     `  pushed to a team, teammates who pulled it keep their copy; deleting it there`,
-    `  too is a manager action from the Console (Admin > Recall).`,
+    `  too is a manager action from the Console (Admin > Recall). In TTY mode,`,
+    `  prompts for confirmation before deleting. Pass ${s.cyan('--yes')} (or ${s.cyan('-y')}) to skip the prompt.`,
     '',
   ];
   stream.write(lines.join('\n') + '\n');
@@ -599,13 +629,16 @@ export function printMcpHelp({ stream = process.stdout } = {}) {
     '',
     `  Start an MCP (Model Context Protocol) stdio server exposing Recall and`,
     `  ticket writes as native tools — ${s.cyan('recall_add')}, ${s.cyan('recall_search')}, ${s.cyan('ticket_comment')},`,
-    `  ${s.cyan('ticket_transition')}, ${s.cyan('ticket_assign')}, ${s.cyan('ticket_duplicates')}, ${s.cyan('ticket_link')} — for any MCP-compatible`,
-    `  AI harness, not just Claude Code. Thin adapter over the same code as`,
-    `  ${s.cyan('note add')}/${s.cyan('recall')}/${s.cyan('comment')}/${s.cyan('transition')}/${s.cyan('assign')}/${s.cyan('duplicates')}/${s.cyan('link')} above: same Pro gate,`,
-    `  same local vault/tracker writes, same team sync. ${s.cyan('ticket_transition')} is destructive`,
-    `  when called with \`target\`+\`confirm: true\`; ${s.cyan('ticket_assign')} is currently self-assign`,
-    `  only; ${s.cyan('ticket_duplicates')} is read-only; ${s.cyan('ticket_link')} on GitHub closes the source`,
-    `  issue as a duplicate — different semantics than Jira/Linear's relationship-only add.`,
+    `  ${s.cyan('ticket_transition')}, ${s.cyan('ticket_assign')}, ${s.cyan('ticket_duplicates')}, ${s.cyan('ticket_link')}, ${s.cyan('ticket_update')}, ${s.cyan('ticket_create')} — for any`,
+    `  MCP-compatible AI harness, not just Claude Code. Thin adapter over the same`,
+    `  code as ${s.cyan('note add')}/${s.cyan('recall')}/${s.cyan('comment')}/${s.cyan('transition')}/${s.cyan('assign')}/${s.cyan('duplicates')}/${s.cyan('link')}/${s.cyan('update')}/${s.cyan('create')} above:`,
+    `  same Pro gate, same local vault/tracker writes, same team sync. ${s.cyan('ticket_transition')} is`,
+    `  destructive when called with \`target\`+\`confirm: true\`; ${s.cyan('ticket_assign')} is currently`,
+    `  self-assign only; ${s.cyan('ticket_duplicates')} is read-only; ${s.cyan('ticket_link')} on GitHub closes the`,
+    `  source issue as a duplicate — different semantics than Jira/Linear's relationship-only`,
+    `  add; ${s.cyan('ticket_update')} has no priority field on GitHub and can partially succeed;`,
+    `  ${s.cyan('ticket_create')} has no ticket key to target — --profile/the default profile picks the`,
+    `  tracker, and it fabricates a real item, the highest blast radius of this family.`,
     `  Long-running — exits when the client closes stdin.`,
     '',
     `  ${s.bold('OPTIONS')}`,
@@ -765,6 +798,81 @@ export function printLinkHelp({ stream = process.stdout } = {}) {
   stream.write(lines.join('\n') + '\n');
 }
 
+export function printUpdateHelp({ stream = process.stdout } = {}) {
+  const s = createStyler({ isTTY: stream.isTTY });
+  const lines = [
+    '',
+    `  ${s.bold(s.brand('ticketlens'))} ${s.bold('update')} ${s.dim('TICKET-KEY [--title=...] [--description=...] [--add-labels=a,b] [--remove-labels=c] [--priority=...]')}  ${s.dim('[Pro]')}`,
+    '',
+    `  Update a narrow, named field set on a ticket (Jira/GitHub/Linear). ${s.dim('[Pro]')}`,
+    `  At least one field is required. Labels are add/remove, never a wholesale`,
+    `  replace — an unnamed label is left alone, not dropped.`,
+    '',
+    `  ${s.bold('GitHub has no priority field')}: passing ${s.brand('--priority')} against a GitHub-tracked`,
+    `  ticket is refused up front rather than silently ignored.`,
+    '',
+    `  A write can partially succeed (e.g. title updates but a label doesn't`,
+    `  resolve) — the result always reports exactly what landed.`,
+    '',
+    `  ${s.bold('OPTIONS')}`,
+    '',
+    `    ${s.brand('--title')}=${s.dim('TEXT')}         New title/summary`,
+    `    ${s.brand('--description')}=${s.dim('TEXT')}   New description`,
+    `    ${s.brand('--add-labels')}=${s.dim('a,b')}      Labels to add ${s.dim('(comma-separated)')}`,
+    `    ${s.brand('--remove-labels')}=${s.dim('c')}     Labels to remove ${s.dim('(comma-separated)')}`,
+    `    ${s.brand('--priority')}=${s.dim('NAME')}       New priority ${s.dim('(not supported on GitHub)')}`,
+    `    ${s.brand('--profile')}=${s.dim('NAME')}        Connection profile to use ${s.dim('(optional)')}`,
+    `    ${s.brand('-h')}, ${s.brand('--help')}          Show this help`,
+    '',
+    `  ${s.bold('EXAMPLES')}`,
+    '',
+    `    ${s.dim('$')} ticketlens update PROD-123 --title="Fix login on mobile"`,
+    `    ${s.dim('$')} ticketlens update PROD-123 --add-labels=urgent,backend --remove-labels=stale`,
+    `    ${s.dim('$')} ticketlens update PROD-123 --priority="High"`,
+    '',
+  ];
+  stream.write(lines.join('\n') + '\n');
+}
+
+export function printCreateHelp({ stream = process.stdout } = {}) {
+  const s = createStyler({ isTTY: stream.isTTY });
+  const lines = [
+    '',
+    `  ${s.bold(s.brand('ticketlens'))} ${s.bold('create')} ${s.dim('--project=... [--type=...] --summary=... [--description=...]')}  ${s.dim('[Pro]')}`,
+    '',
+    `  Create a new ticket in a tracker (Jira/GitHub/Linear) with a fixed minimal`,
+    `  field set — no arbitrary custom fields. ${s.dim('[Pro]')} Unlike every other ticket-write`,
+    `  command, there is no existing ticket to operate on — the target tracker is`,
+    `  picked by ${s.brand('--profile')} (or your default profile), not a ticket key.`,
+    '',
+    `  ${s.bold('--project is tracker-specific')}: the Jira project key or Linear team key.`,
+    `  Required for Jira/Linear. GitHub ignores it — its target repo is already`,
+    `  fixed by the profile.`,
+    '',
+    `  ${s.bold('--type is Jira-only')}: the issue type, e.g. "Task" or "Bug". Required for`,
+    `  Jira. GitHub/Linear have no equivalent concept and ignore it if given.`,
+    '',
+    `  This is the highest-blast-radius command in the ticket-write family — a bad`,
+    `  ${s.brand('--project')}/${s.brand('--type')} fabricates a real, hard-to-walk-back item in a live tracker.`,
+    '',
+    `  ${s.bold('OPTIONS')}`,
+    '',
+    `    ${s.brand('--project')}=${s.dim('KEY')}     Project key (Jira) or team key (Linear) ${s.dim('(required, except GitHub)')}`,
+    `    ${s.brand('--type')}=${s.dim('NAME')}       Issue type ${s.dim('(Jira only, required there)')}`,
+    `    ${s.brand('--summary')}=${s.dim('TEXT')}    Ticket title/summary ${s.dim('(required)')}`,
+    `    ${s.brand('--description')}=${s.dim('TEXT')}  Ticket description`,
+    `    ${s.brand('--profile')}=${s.dim('NAME')}     Connection profile to use ${s.dim('(optional)')}`,
+    `    ${s.brand('-h')}, ${s.brand('--help')}       Show this help`,
+    '',
+    `  ${s.bold('EXAMPLES')}`,
+    '',
+    `    ${s.dim('$')} ticketlens create --project=PROD --type="Task" --summary="Fix login on mobile"`,
+    `    ${s.dim('$')} ticketlens create --project=ENG --summary="New Linear issue" --profile=linear-team`,
+    '',
+  ];
+  stream.write(lines.join('\n') + '\n');
+}
+
 export function printSwitchHelp({ stream = process.stdout } = {}) {
   const s = createStyler({ isTTY: stream.isTTY });
   const lines = [
@@ -1156,7 +1264,7 @@ export function printCloudKeysHelp({ stream = process.stdout } = {}) {
     '',
     `    ${s.brand('list')}                          List configured providers`,
     `    ${s.brand('add')} ${s.dim('<provider> <key>')}         Add or replace an API key`,
-    `    ${s.brand('remove')} ${s.dim('<provider>')}            Remove a provider's key`,
+    `    ${s.brand('remove')} ${s.dim('<provider>')} ${s.dim('[--yes]')}   Remove a provider's key — prompts for confirmation`,
     `    ${s.brand('test')} ${s.dim('<provider>')}              Send a test request through the provider`,
     `    ${s.brand('priority')} ${s.dim('<provider> <N>')}      Set priority (lower = tried first)`,
     `    ${s.brand('timeout')} ${s.dim('<provider> <seconds>')} Set per-request timeout`,
@@ -1164,6 +1272,7 @@ export function printCloudKeysHelp({ stream = process.stdout } = {}) {
     `  ${s.bold('OPTIONS')}`,
     '',
     `    ${s.brand('--timeout')}=${s.dim('N')}   Timeout in seconds when adding a key  ${s.dim('(default: 5)')}`,
+    `    ${s.brand('--yes')}, ${s.brand('-y')}   Skip the confirmation prompt when removing a key`,
     `    ${s.brand('-h')}, ${s.brand('--help')}  Show this help`,
     '',
     `  ${s.bold('PROVIDERS')}`,

package/skills/jtb/scripts/lib/jira-client.mjs

@@ -587,6 +587,134 @@ export async function assignIssue(ticketKey, assignee, opts = {}) {
   }
 }
 
+/**
+ * Updates a narrow, named field set on an issue. `fields` (summary,
+ * description, priority) uses plain SET semantics — the same shape Jira's
+ * own GET returns, same convention as assignIssue/postIssueLink. Labels use
+ * a separate verb-based `update.labels` array (`{add}`/`{remove}`) — Jira's
+ * REST API has no plain-replace shape for multi-value fields, only ADD/SET/
+ * REMOVE operations, a genuinely different mechanic from fields. Both keys
+ * can coexist in one request as long as a given field only appears in one
+ * of them — never both — which callers naturally satisfy since labels only
+ * ever go through `update`.
+ */
+export async function updateIssue(ticketKey, { summary, description, priority, addLabels, removeLabels } = {}, opts = {}) {
+  const { env = process.env, fetcher = globalThis.fetch, lookup = defaultLookupFor(fetcher), apiVersion = 2, timeoutMs = 10_000, allowPrivateIp = false } = opts;
+  validateBaseUrl(env.JIRA_BASE_URL, allowPrivateIp);
+  const baseUrl = env.JIRA_BASE_URL.replace(/\/$/, '');
+  const url = `${baseUrl}/rest/api/${apiVersion}/issue/${encodeURIComponent(ticketKey)}`;
+
+  const fields = {};
+  if (summary !== undefined) fields.summary = summary;
+  if (description !== undefined) fields.description = apiVersion === 3 ? textToAdf(description) : description;
+  if (priority !== undefined) fields.priority = { name: priority };
+
+  const labelOps = [
+    ...(addLabels ?? []).map(label => ({ add: label })),
+    ...(removeLabels ?? []).map(label => ({ remove: label })),
+  ];
+
+  const body = {};
+  if (Object.keys(fields).length > 0) body.fields = fields;
+  if (labelOps.length > 0) body.update = { labels: labelOps };
+
+  const fetchOpts = {
+    method: 'PUT',
+    headers: { ...buildAuthHeader(env), 'Content-Type': 'application/json' },
+    body: JSON.stringify(body),
+  };
+  if (timeoutMs) fetchOpts.signal = AbortSignal.timeout(timeoutMs);
+
+  const response = await guardedFetch(url, fetchOpts, { fetcher, lookup, allowPrivateIp });
+  if (!response.ok) {
+    let details;
+    try { details = await response.json(); } catch { /* body not JSON — fall through with no details */ }
+    const err = new Error(`Jira API error ${response.status} updating ${ticketKey}`);
+    err.status = response.status;
+    err.details = details;
+    throw err;
+  }
+}
+
+/**
+ * Discovers the issue types actually configured for a project — used only
+ * to enrich a ticket_create failure message with real, current options,
+ * never as a client-side pre-validation step (issuetype validity is still
+ * surfaced via the tracker's own 400, same design choice as createIssue
+ * itself). A single, unpaginated call: real-world Jira projects rarely
+ * exceed a handful to a few dozen issue types (well under the endpoint's
+ * own default maxResults=50), and a truncated list here would only ever
+ * under-inform an error message, never break the actual write path — full
+ * pagination (as fetchProjects needs, since an org's total project count
+ * has no such natural ceiling) would be disproportionate complexity for
+ * an enrichment-only feature.
+ *
+ * v2 (Server/DC) and v3 (Cloud) return genuinely different response
+ * envelopes for this same resource — confirmed directly against
+ * Atlassian's own Cloud OpenAPI spec and a live-downloaded Server/DC WADL,
+ * not assumed just because the URL pattern matches: v3 nests results under
+ * `issueTypes`, v2 under `values` (same distinction fetchProjects already
+ * makes for its own project-listing endpoint, for the same underlying
+ * reason — the two API generations were never response-shape-compatible).
+ */
+export async function fetchIssueTypes(projectKey, opts = {}) {
+  const { env = process.env, fetcher = globalThis.fetch, lookup = defaultLookupFor(fetcher), apiVersion = 2, timeoutMs = 10_000, allowPrivateIp = false } = opts;
+  validateBaseUrl(env.JIRA_BASE_URL, allowPrivateIp);
+  const baseUrl = env.JIRA_BASE_URL.replace(/\/$/, '');
+  const headers = { ...buildAuthHeader(env), 'Content-Type': 'application/json' };
+
+  const url = `${baseUrl}/rest/api/${apiVersion}/issue/createmeta/${encodeURIComponent(projectKey)}/issuetypes`;
+  const fetchOpts = { headers };
+  if (timeoutMs) fetchOpts.signal = AbortSignal.timeout(timeoutMs);
+  const response = await guardedFetch(url, fetchOpts, { fetcher, lookup, allowPrivateIp });
+
+  if (!response.ok) {
+    const err = new Error(`Jira API error ${response.status} fetching issue types for ${projectKey}`);
+    err.status = response.status;
+    throw err;
+  }
+
+  const raw = await response.json();
+  const values = apiVersion >= 3 ? (raw.issueTypes ?? []) : (raw.values ?? []);
+  return values.map(t => ({ id: t.id, name: t.name }));
+}
+
+/**
+ * Creates a new issue. `project`/`type` are passed straight through as
+ * Jira's own {key}/{name} references — issue types are project-configurable,
+ * so validity is never pre-checked here; an invalid one surfaces Jira's own
+ * 400 with details, same design choice already made for updateIssue's
+ * priority field. No separate discovery call, no client-side field list.
+ */
+export async function createIssue({ project, type, summary, description } = {}, opts = {}) {
+  const { env = process.env, fetcher = globalThis.fetch, lookup = defaultLookupFor(fetcher), apiVersion = 2, timeoutMs = 10_000, allowPrivateIp = false } = opts;
+  validateBaseUrl(env.JIRA_BASE_URL, allowPrivateIp);
+  const baseUrl = env.JIRA_BASE_URL.replace(/\/$/, '');
+  const url = `${baseUrl}/rest/api/${apiVersion}/issue`;
+
+  const fields = { project: { key: project }, issuetype: { name: type }, summary };
+  if (description !== undefined) fields.description = apiVersion === 3 ? textToAdf(description) : description;
+
+  const fetchOpts = {
+    method: 'POST',
+    headers: { ...buildAuthHeader(env), 'Content-Type': 'application/json' },
+    body: JSON.stringify({ fields }),
+  };
+  if (timeoutMs) fetchOpts.signal = AbortSignal.timeout(timeoutMs);
+
+  const response = await guardedFetch(url, fetchOpts, { fetcher, lookup, allowPrivateIp });
+  if (!response.ok) {
+    let details;
+    try { details = await response.json(); } catch { /* body not JSON — fall through with no details */ }
+    const err = new Error(`Jira API error ${response.status} creating an issue in ${project}`);
+    err.status = response.status;
+    err.details = details;
+    throw err;
+  }
+  const raw = await response.json();
+  return { key: raw.key, id: raw.id, url: raw.self ?? null };
+}
+
 export async function fetchTicket(ticketKey, opts = {}) {
   const { env = process.env, fetcher = globalThis.fetch, lookup = defaultLookupFor(fetcher), depth = 1, apiVersion = 2, timeoutMs = 10_000, expandChangelog = false, allowPrivateIp = false, _visited = new Set(), _currentDepth = 0 } = opts;
   validateBaseUrl(env.JIRA_BASE_URL, allowPrivateIp);

package/skills/jtb/scripts/lib/mcp-server.mjs

@@ -23,7 +23,7 @@ import readline from 'node:readline';
 import { DEFAULT_CONFIG_DIR, getVersion } from './config.mjs';
 import { runNoteAdd } from './note-command.mjs';
 import { runRecall } from './recall-command.mjs';
-import { runTicketComment, runTicketTransitionList, runTicketTransition, runTicketAssign, runTicketDuplicates, runTicketLinkList, runTicketLink } from './ticket-command.mjs';
+import { runTicketComment, runTicketTransitionList, runTicketTransition, runTicketAssign, runTicketDuplicates, runTicketLinkList, runTicketLink, runTicketUpdate, runTicketCreate } from './ticket-command.mjs';
 
 const PROTOCOL_VERSION = '2025-11-25';
 
@@ -36,7 +36,7 @@ const TOOLS = [
       properties: {
         title: { type: 'string', description: 'Short one-line title.' },
         ticket: { type: 'string', description: 'Optional ticket key, e.g. PROJ-123.' },
-        tags: { type: 'array', items: { type: 'string' }, description: 'Optional tags.' },
+        tags: { type: 'array', items: { type: 'string' }, description: 'Optional tags derived from this note\'s actual content — the specific technology, error type, root cause, or affected component (e.g. "retry-backoff", "null-pointer", "auth-middleware"). Never the project name or a generic category word like "gotcha" or "bug" — those provide no search signal to someone else looking for this note later.' },
         body: { type: 'string', description: 'The note body — one or more paragraphs.' },
       },
       required: ['title', 'body'],
@@ -116,6 +116,36 @@ const TOOLS = [
       required: ['ticket', 'target'],
     },
   },
+  {
+    name: 'ticket_update',
+    description: 'Update a narrow, named field set on a ticket in its tracker (Jira/GitHub/Linear) — title, description, labels, priority. Labels are add/remove, never a wholesale replace: an unnamed existing label is left alone. No discovery step and no confirm required — these are reversible metadata edits, not workflow-state changes. GitHub has no priority field; passing `priority` for a GitHub-tracked ticket is refused. A call can partially succeed (e.g. title updates but a label does not resolve) — the result reports exactly what landed. Requires a TicketLens Pro license.',
+    inputSchema: {
+      type: 'object',
+      properties: {
+        ticket: { type: 'string', description: 'Ticket key, e.g. PROJ-123.' },
+        title: { type: 'string', description: 'New title/summary. Omit to leave unchanged.' },
+        description: { type: 'string', description: 'New description. Omit to leave unchanged.' },
+        addLabels: { type: 'array', items: { type: 'string' }, description: 'Labels to add. Existing labels not named here are left alone.' },
+        removeLabels: { type: 'array', items: { type: 'string' }, description: 'Labels to remove.' },
+        priority: { type: 'string', description: 'New priority name, e.g. "High". Not supported on GitHub.' },
+      },
+      required: ['ticket'],
+    },
+  },
+  {
+    name: 'ticket_create',
+    description: 'Create a new ticket in a tracker (Jira/GitHub/Linear) with a fixed minimal field set — no arbitrary custom fields. Architecturally unlike every other ticket-write tool: there is no existing ticket to target, so the target tracker/project is picked by the connection profile rather than a ticket key. `project` is the Jira project key or Linear team key — required for both, ignored on GitHub (its repo is fixed by the profile). `type` is the Jira issue type — required for Jira only, ignored elsewhere. Highest blast radius of the ticket-write family: a bad project/type fabricates a real, hard-to-walk-back item in a live tracker. Requires a TicketLens Pro license.',
+    inputSchema: {
+      type: 'object',
+      properties: {
+        project: { type: 'string', description: 'Jira project key or Linear team key. Required for Jira/Linear; ignored on GitHub.' },
+        type: { type: 'string', description: 'Jira issue type, e.g. "Task" or "Bug". Required for Jira only; ignored on GitHub/Linear.' },
+        summary: { type: 'string', description: 'Ticket title/summary.' },
+        description: { type: 'string', description: 'Ticket description. Omit for none.' },
+      },
+      required: ['summary'],
+    },
+  },
 ];
 
 function jsonRpcResult(id, result) {
@@ -273,6 +303,66 @@ async function callTicketLink(args, { configDir, runTicketLinkListFn, runTicketL
   return ok ? { content } : { isError: true, content };
 }
 
+/**
+ * `title`/`description`/`priority` each become one opaque cmdArgs element,
+ * same reasoning as buildNoteAddArgs/callTicketComment above. `addLabels`/
+ * `removeLabels` arrive as arrays per the MCP schema and are comma-joined
+ * into a single element (same convention buildNoteAddArgs already uses for
+ * `tags`) — parsed back apart by ticket-command.mjs's existing split(',')
+ * handling, never by re-splitting a string this function builds itself.
+ */
+function buildTicketUpdateArgs(args) {
+  const cmdArgs = [args.ticket];
+  if (args.title !== undefined) cmdArgs.push(`--title=${args.title}`);
+  if (args.description !== undefined) cmdArgs.push(`--description=${args.description}`);
+  if (args.priority !== undefined) cmdArgs.push(`--priority=${args.priority}`);
+  if (Array.isArray(args.addLabels) && args.addLabels.length > 0) cmdArgs.push(`--add-labels=${args.addLabels.join(',')}`);
+  if (Array.isArray(args.removeLabels) && args.removeLabels.length > 0) cmdArgs.push(`--remove-labels=${args.removeLabels.join(',')}`);
+  return cmdArgs;
+}
+
+/**
+ * No list-then-act split, unlike ticket_transition/ticket_link — update has
+ * no discovery step, so there is exactly one dispatch path. Whether at
+ * least one field was actually given is runTicketUpdateFn's own concern
+ * (same "don't pre-empt the underlying command" principle as ticket_link's
+ * --confirm check).
+ */
+async function callTicketUpdate(args, { configDir, runTicketUpdateFn }) {
+  if (!args.ticket) {
+    return { isError: true, content: [{ type: 'text', text: 'Missing required argument: ticket' }] };
+  }
+  const capture = capturingStream();
+  const { ok } = await runTicketUpdateFn(buildTicketUpdateArgs(args), { configDir, stream: capture });
+  const content = [{ type: 'text', text: capture.text }];
+  return ok ? { content } : { isError: true, content };
+}
+
+/**
+ * `project`/`type`/`description` each become one opaque cmdArgs element,
+ * same reasoning as buildNoteAddArgs/callTicketComment above. Unlike every
+ * other ticket-write tool, there is no `ticket` argument — creation has no
+ * existing ticket to target.
+ */
+function buildTicketCreateArgs(args) {
+  const cmdArgs = [];
+  if (args.project !== undefined) cmdArgs.push(`--project=${args.project}`);
+  if (args.type !== undefined) cmdArgs.push(`--type=${args.type}`);
+  cmdArgs.push(`--summary=${args.summary}`);
+  if (args.description !== undefined) cmdArgs.push(`--description=${args.description}`);
+  return cmdArgs;
+}
+
+async function callTicketCreate(args, { configDir, runTicketCreateFn }) {
+  if (!args.summary) {
+    return { isError: true, content: [{ type: 'text', text: 'Missing required argument: summary' }] };
+  }
+  const capture = capturingStream();
+  const { ok } = await runTicketCreateFn(buildTicketCreateArgs(args), { configDir, stream: capture });
+  const content = [{ type: 'text', text: capture.text }];
+  return ok ? { content } : { isError: true, content };
+}
+
 async function handleToolsCall(params, deps) {
   const { name, arguments: args = {} } = params ?? {};
   if (name === 'recall_add') return callRecallAdd(args, deps);
@@ -282,10 +372,12 @@ async function handleToolsCall(params, deps) {
   if (name === 'ticket_assign') return callTicketAssign(args, deps);
   if (name === 'ticket_duplicates') return callTicketDuplicates(args, deps);
   if (name === 'ticket_link') return callTicketLink(args, deps);
+  if (name === 'ticket_update') return callTicketUpdate(args, deps);
+  if (name === 'ticket_create') return callTicketCreate(args, deps);
   return { isError: true, content: [{ type: 'text', text: `Unknown tool: ${name}` }] };
 }
 
-async function handleMessage(raw, { configDir, runNoteAddFn, runRecallFn, runTicketCommentFn, runTicketTransitionListFn, runTicketTransitionFn, runTicketAssignFn, runTicketDuplicatesFn, runTicketLinkListFn, runTicketLinkFn }) {
+async function handleMessage(raw, { configDir, runNoteAddFn, runRecallFn, runTicketCommentFn, runTicketTransitionListFn, runTicketTransitionFn, runTicketAssignFn, runTicketDuplicatesFn, runTicketLinkListFn, runTicketLinkFn, runTicketUpdateFn, runTicketCreateFn }) {
   let msg;
   try {
     msg = JSON.parse(raw);
@@ -315,7 +407,7 @@ async function handleMessage(raw, { configDir, runNoteAddFn, runRecallFn, runTic
 
   if (method === 'tools/call') {
     try {
-      const result = await handleToolsCall(params, { configDir, runNoteAddFn, runRecallFn, runTicketCommentFn, runTicketTransitionListFn, runTicketTransitionFn, runTicketAssignFn, runTicketDuplicatesFn, runTicketLinkListFn, runTicketLinkFn });
+      const result = await handleToolsCall(params, { configDir, runNoteAddFn, runRecallFn, runTicketCommentFn, runTicketTransitionListFn, runTicketTransitionFn, runTicketAssignFn, runTicketDuplicatesFn, runTicketLinkListFn, runTicketLinkFn, runTicketUpdateFn, runTicketCreateFn });
       return jsonRpcResult(id, result);
     } catch (err) {
       return jsonRpcError(id ?? null, -32603, `Internal error: ${err.message}`);
@@ -345,6 +437,8 @@ export function runMcpServer({
   runTicketDuplicatesFn = runTicketDuplicates,
   runTicketLinkListFn = runTicketLinkList,
   runTicketLinkFn = runTicketLink,
+  runTicketUpdateFn = runTicketUpdate,
+  runTicketCreateFn = runTicketCreate,
 } = {}) {
   // A client can disconnect mid-write (EPIPE) at any time on a long-lived
   // process — an unhandled 'error' event on either stream would otherwise
@@ -364,7 +458,7 @@ export function runMcpServer({
     // never resolving (a dropped rejection isn't a resolution) — the
     // server would hang on shutdown instead of exiting.
     queue = queue.then(async () => {
-      const response = await handleMessage(line, { configDir, runNoteAddFn, runRecallFn, runTicketCommentFn, runTicketTransitionListFn, runTicketTransitionFn, runTicketAssignFn, runTicketDuplicatesFn, runTicketLinkListFn, runTicketLinkFn });
+      const response = await handleMessage(line, { configDir, runNoteAddFn, runRecallFn, runTicketCommentFn, runTicketTransitionListFn, runTicketTransitionFn, runTicketAssignFn, runTicketDuplicatesFn, runTicketLinkListFn, runTicketLinkFn, runTicketUpdateFn, runTicketCreateFn });
       if (response) stdout.write(response);
     }).catch(() => {});
   });

package/skills/jtb/scripts/lib/note-command.mjs

@@ -19,6 +19,7 @@ import { incrementDraftKept, incrementDraftDeleted } from './activity-counter.mj
 import { extractText } from './attachment-text.mjs';
 import { TICKET_KEY_PATTERN } from './cli.mjs';
 import { createStyler } from './ansi.mjs';
+import { confirmDestructive } from './confirm.mjs';
 
 function defaultListAttachments(configDir, ticketKey) {
   const cacheDir = path.join(configDir, 'cache', ticketKey);
@@ -226,8 +227,10 @@ export async function runNotePatch(cmdArgs, {
 export async function runNoteDelete(cmdArgs, {
   configDir = DEFAULT_CONFIG_DIR,
   stream = process.stderr,
+  stdin = process.stdin,
   isLicensedFn = isLicensed,
   deleteNoteFn = deleteNote,
+  confirmFn = confirmDestructive,
 } = {}) {
   if (!isLicensedFn('pro', configDir)) {
     showUpgradePrompt('pro', 'ticketlens note', { stream });
@@ -236,7 +239,7 @@ export async function runNoteDelete(cmdArgs, {
 
   const id = parseFlag(cmdArgs, 'id');
   if (!id) {
-    stream.write('Usage: ticketlens note delete --id="..." [--ticket=KEY]\n');
+    stream.write('Usage: ticketlens note delete --id="..." [--ticket=KEY] [--yes|-y]\n');
     return { deleted: false };
   }
 
@@ -246,6 +249,13 @@ export async function runNoteDelete(cmdArgs, {
     return { deleted: false };
   }
 
+  const forceYes = cmdArgs.includes('--yes') || cmdArgs.includes('-y');
+  const confirmed = await confirmFn(`Delete note (${id})`, { stdin, stream, forceYes });
+  if (!confirmed) {
+    stream.write('  Aborted — note was not deleted.\n');
+    return { deleted: false };
+  }
+
   const { deleted } = deleteNoteFn({ external_id: id, tickets: ticketKey ? [ticketKey] : [] }, { configDir });
   stream.write(deleted
     ? `  Deleted note (${id}) — local vault only; see help for team-synced notes.\n`

package/skills/jtb/scripts/lib/recall-vault.mjs

@@ -14,7 +14,7 @@
 import fs from 'node:fs';
 import path from 'node:path';
 import { randomBytes } from 'node:crypto';
-import { DEFAULT_CONFIG_DIR, escapeLeadingHeading } from './config.mjs';
+import { DEFAULT_CONFIG_DIR, escapeLeadingHeading, timeAgo } from './config.mjs';
 import { TICKET_KEY_PATTERN } from './cli.mjs';
 import { parseFrontmatter, serializeFrontmatter } from './frontmatter.mjs';
 
@@ -348,7 +348,7 @@ export function rebuildIndex(prefix, { configDir = DEFAULT_CONFIG_DIR } = {}) {
     // content is lower trust than a user's own local notes, so it needs the same
     // heading-injection guard already applied in brief-assembler.mjs/styled-assembler.mjs.
     const ticketList = n.tickets.length > 0 ? ` — ${escapeLeadingHeading(n.tickets.join(', '))}` : '';
-    lines.push(`- [[${escapeLeadingHeading(n.title)}]]${ticketList} — ${n.created.split('T')[0]}`);
+    lines.push(`- [[${escapeLeadingHeading(n.title)}]]${ticketList} — ${timeAgo(n.created)}`);
   }
 
   writeFileAtomically(indexPath, lines.join('\n') + '\n');

package/skills/jtb/scripts/lib/run-collisions.mjs

@@ -71,3 +71,12 @@ export async function runCollisions(args = [], opts = {}) {
     return { ok: false };
   }
 }
+
+// Run if invoked directly
+const isMain = process.argv[1] && import.meta.url.endsWith(process.argv[1].replace(/.*\//, ''));
+if (isMain) {
+  runCollisions(process.argv.slice(2)).catch(err => {
+    process.stderr.write(`Error: ${err.message}\n`);
+    process.exitCode = 1;
+  });
+}

package/skills/jtb/scripts/lib/styled-assembler.mjs

@@ -115,7 +115,7 @@ export function styleRecallResults(digests, opts = {}) {
   if (!styled) {
     const entries = digests.map(d => {
       const ticketList = d.tickets?.length > 0 ? ` (${escapeLeadingHeading(d.tickets.join(', '))})` : '';
-      const summary = `${escapeLeadingHeading(d.title)}${ticketList} — ${d.created.split('T')[0]}  [${d.id}]`;
+      const summary = `${escapeLeadingHeading(d.title)}${ticketList} — ${timeAgo(d.created)}  [${d.id}]`;
       return full ? `${summary}\n${escapeLeadingHeading(d.body)}` : summary;
     });
     return entries.join(full ? '\n\n' : '\n');
@@ -124,9 +124,9 @@ export function styleRecallResults(digests, opts = {}) {
   const s = createStyler({ forceColor: true });
   const entries = digests.map(d => {
     const ticketList = d.tickets?.length > 0 ? ` ${s.dim(`(${escapeLeadingHeading(d.tickets.join(', '))})`)}` : '';
-    const date = s.dim(d.created.split('T')[0]);
+    const ago = s.dim(timeAgo(d.created));
     const id = s.dim(`[${d.id}]`);
-    const summary = `${s.brand('●')} ${s.bold(escapeLeadingHeading(d.title))}${ticketList} ${s.dim('—')} ${date}  ${id}`;
+    const summary = `${s.brand('●')} ${s.bold(escapeLeadingHeading(d.title))}${ticketList} ${s.dim('—')} ${ago}  ${id}`;
     return full ? `${summary}\n${escapeLeadingHeading(d.body)}` : summary;
   });
   return entries.join(full ? '\n\n' : '\n');