add-linear · diff

git:20260705.40b6552 to git:20260710.c2e5b14

65 added, 97 removed. Audit A to A.

---
name: add-linear
description: Add Linear channel integration via Chat SDK. Issue comment threads as conversations.
---
# Add Linear Channel
- Adds Linear support via the Chat SDK bridge. The agent participates in issue
- comment threads. Every comment on a Linear issue triggers the agent — no
- @-mention needed. NanoClaw doesn't ship channels in trunk — this skill copies the
- Linear adapter in from the `channels` branch.
-
- The mechanical steps under **Apply** carry `nc:` directive fences: an agent reads
- the prose and applies them, and a parser can apply them deterministically from
- the same document. Every directive is idempotent, so the whole skill is safe to
- re-run; anything a parser can't apply falls back to the prose beside it.
+ Adds Linear support via the Chat SDK bridge. The agent participates in issue comment threads. Every comment on a Linear issue triggers the agent — no @-mention needed.
## Prerequisites
**Recommended:** Create a Linear **OAuth application** so the agent posts as an app identity, not as you. This prevents the adapter from filtering your own comments as self-messages.
1. Go to [Linear Settings > API > OAuth Applications](https://linear.app/settings/api/applications/new)
2. Create an app (e.g. "NanoClaw Bot")
- Developer URL: your repo URL (e.g. `https://github.com/your-org/nanoclaw`)
- Callback URL: `http://localhost`
3. After creating, click the app and enable **Client credentials** under grant types
4. Copy the **Client ID** and **Client Secret**
**Alternative:** Use a Personal API Key (`LINEAR_API_KEY`) for simpler setup. The agent will post as you, and your own comments will be filtered (other team members' comments still work).
- ## Apply
+ ## Install
- Linear OAuth apps post and read comments under an app identity that can't be
- @-mentioned, so when you wire the channel in `/manage-channels`, pick an engage
- mode that responds to plain comments rather than mention-only.
+ NanoClaw doesn't ship channels in trunk. This skill copies the Linear adapter in from the `channels` branch and wires it into the channel registry. Linear OAuth apps post and read comments under an app identity that can't be @-mentioned, so when you wire the channel in `/manage-channels`, pick an engage mode that responds to plain comments rather than mention-only.
- ### 1. Copy the adapter and its registration test
+ ### Pre-flight (idempotent)
- Fetch the `channels` branch and copy the Linear adapter and its registration
- test into `src/channels/` (overwrite — the branch is canonical):
+ Skip to **Credentials** if all of these are already in place:
- ```nc:copy from-branch:channels
- src/channels/linear.ts
- src/channels/linear-registration.test.ts
- ```
+ - `src/channels/linear.ts` exists
+ - `src/channels/linear-registration.test.ts` exists
+ - `src/channels/index.ts` contains `import './linear.js';`
+ - `@chat-adapter/linear` is listed in `package.json` dependencies
- ### 2. Register the adapter
+ Otherwise continue. Every step below is safe to re-run.
- Append the self-registration import to the channel barrel (skipped if the line
- is already present). This one line is the skill's only reach-in into the channel
- registry:
+ ### 1. Fetch the channels branch
- ```nc:append to:src/channels/index.ts
- import './linear.js';
+ ```bash
+ git fetch origin channels
```
- ### 3. Install the adapter package
+ ### 2. Copy the adapter and its registration test
- Pinned to an exact version — the supply-chain policy rejects ranges and `latest`:
+ ```bash
+ git show origin/channels:src/channels/linear.ts > src/channels/linear.ts
+ git show origin/channels:src/channels/linear-registration.test.ts > src/channels/linear-registration.test.ts
+ ```
- ```nc:dep
- @chat-adapter/linear@4.29.0
+ ### 3. Append the self-registration import
+
+ Append to `src/channels/index.ts` (skip if the line is already present):
+
+ ```typescript
+ import './linear.js';
```
- ### 4. Build and validate
+ ### 4. Install the adapter package (pinned)
- Build first: it guards the typed `createChatSdkBridge(...)` core call and proves
- the dependency is installed. Then run the one integration test.
+ ```bash
+ pnpm install @chat-adapter/linear@4.29.0
+ ```
- ```nc:run effect:build
+ ### 5. Build and validate
+
+ ```bash
pnpm run build
- ```
- ```nc:run effect:test
pnpm exec vitest run src/channels/linear-registration.test.ts
```
- Both must be clean before proceeding. `linear-registration.test.ts` imports the
- real channel barrel and asserts the registry contains `linear`. It goes red if
- the `import './linear.js';` line is deleted or drifts, if the barrel fails to
- evaluate, or if `@chat-adapter/linear` isn't installed (the import throws) — so
- it also covers the dependency from step 3. End-to-end message delivery against a
- real Linear workspace is verified manually once the service is running — see
- Wiring and Next Steps.
+ Both must be clean before proceeding. `linear-registration.test.ts` is the one integration test: it imports the real channel barrel and asserts the registry contains `linear`. It goes red if the `import './linear.js';` line is deleted or drifts, if the barrel fails to evaluate, or if `@chat-adapter/linear` isn't installed (the import throws) — so it also implicitly verifies the dependency from step 4. The adapter calls core's `createChatSdkBridge(...)`; that typed core-API consumption is guarded by `pnpm run build`.
- ## Credentials
+ End-to-end message delivery against a real Linear workspace is verified manually once the service is running — see Wiring and Next Steps.
- Linear app and webhook setup is human and interactive — these steps are prose
- (no parser can click through the Linear UI), except the final env write.
+ ## Credentials
### 1. Set up a webhook
1. Go to **Linear Settings** > **API** > **Webhooks** > **New webhook**
2. Label: `NanoClaw`
3. URL: `https://your-domain/webhook/linear` (the shared webhook server, default port 3000)
4. Team: select the team you want to monitor
5. Events: check **Comment**
6. Save — copy the **signing secret**
Note: Linear webhook delivery may be delayed 1-5 minutes for new webhooks. This is normal.
- ### 2. Store the credentials
+ ### 2. Configure environment
- Capture the values, then write them. `prompt` only *asks* and binds the answer
- to a name; a separate directive consumes it. Here they go to `.env`
- (set-if-absent — a value you've already filled in is never overwritten) and sync
- to the container.
+ Add to `.env`:
- Use **either** the OAuth app credentials (recommended) **or** a Personal API key.
- For the API-key path, paste `none` at the OAuth prompts and set `LINEAR_API_KEY`
- in `.env` by hand (commented in the template below). `LINEAR_BOT_USERNAME` is the
- display name for the bot, used for self-message detection when using a Personal
- API Key. `LINEAR_TEAM_KEY` is the Linear team key (e.g. `ENG`, `NAN`) — find it
- in Linear under Settings > Teams; all issues in this team route to one messaging
- group.
+ ```bash
+ # OAuth app (recommended)
+ LINEAR_CLIENT_ID=your-client-id
+ LINEAR_CLIENT_SECRET=your-client-secret
- ```nc:prompt linear_client_id secret
- Paste the OAuth Client ID — Linear Settings > API > OAuth Applications. Paste `none` if using a Personal API key instead.
- ```
- ```nc:prompt linear_client_secret secret
- Paste the OAuth Client Secret. Paste `none` if using a Personal API key instead.
- ```
- ```nc:prompt linear_webhook_secret secret
- Paste the webhook signing secret from the webhook you just created.
- ```
- ```nc:prompt linear_team_key
- Enter the Linear team key (e.g. `ENG`, `NAN`) — Settings > Teams.
- ```
- ```nc:prompt linear_bot_username
- Enter the bot display name (e.g. `NanoClaw Bot`).
- ```
- ```nc:env-set
- LINEAR_CLIENT_ID={{linear_client_id}}
- LINEAR_CLIENT_SECRET={{linear_client_secret}}
- LINEAR_WEBHOOK_SECRET={{linear_webhook_secret}}
- LINEAR_TEAM_KEY={{linear_team_key}}
- LINEAR_BOT_USERNAME={{linear_bot_username}}
- ```
- If you went the Personal API key route, add this line to `.env` instead of the
- OAuth pair (agent posts as you, your own comments are filtered):
+ # OR Personal API key (simpler, but agent posts as you)
+ # LINEAR_API_KEY=lin_api_...
- ```bash
- LINEAR_API_KEY=lin_api_...
+ LINEAR_WEBHOOK_SECRET=your-webhook-signing-secret
+ LINEAR_BOT_USERNAME=NanoClaw Bot
+ LINEAR_TEAM_KEY=ENG
```
+ - `LINEAR_BOT_USERNAME`: display name for the bot (used for self-message detection when using a Personal API Key)
+ - `LINEAR_TEAM_KEY`: the Linear team key (e.g. `ENG`, `NAN`). Find it in Linear under Settings > Teams. All issues in this team route to one messaging group.
+
+ Sync to container: `mkdir -p data/env && cp .env data/env/env`
+
## Wiring
- Linear is team-routed: the assistant watches one team and answers *every* comment
- on its issues (it can't be @-mentioned). Wire the team you set up to an agent —
- pick which one should answer (`ncl groups list` shows their folders):
+ Ask the user: **Is this a private or public Linear workspace?**
- ```nc:prompt agent_folder
- Which agent should answer Linear comments? Enter its folder (run `ncl groups list`).
- ```
- ```nc:run effect:wire
- ncl messaging-groups create --channel-type linear --platform-id linear:{{linear_team_key}} --is-group 1 --unknown-sender-policy public --name {{linear_team_key}}
- ncl wirings create --channel-type linear --platform-id linear:{{linear_team_key}} --agent-group {{agent_folder}} --engage-mode pattern --engage-pattern . --session-mode per-thread
+ - **Private workspace** — use `unknown_sender_policy: 'public'`. Only workspace members can comment.
+ - **Public workspace** — use `unknown_sender_policy: 'strict'` and add trusted members (see GitHub skill for member registration example).
+
+ Run `/manage-channels` to wire the Linear channel to an agent group, or insert manually:
+
+ ```sql
+ -- Create messaging group (one per team)
+ INSERT INTO messaging_groups (id, channel_type, platform_id, instance, name, is_group, unknown_sender_policy, created_at)
+ VALUES ('mg-linear-eng', 'linear', 'linear:ENG', 'linear', 'Engineering', 1, 'public', strftime('%Y-%m-%dT%H:%M:%fZ','now'));
+
+ -- Wire to agent group
+ INSERT INTO messaging_group_agents (id, messaging_group_id, agent_group_id, trigger_rules, response_scope, session_mode, priority, created_at)
+ VALUES ('mga-linear-eng', 'mg-linear-eng', '<your-agent-group-id>', '', 'all', 'per-thread', 10, strftime('%Y-%m-%dT%H:%M:%fZ','now'));
```
- Each issue thread becomes its own conversation. There's no welcome — Linear has
- no direct message, so the assistant greets people when it first answers a comment.
- For a public-internet workspace, restrict it to people you've registered with
- `--unknown-sender-policy strict` (see the GitHub skill for adding members).
+ The `platform_id` must be `linear:<TEAM_KEY>` matching the `LINEAR_TEAM_KEY` env var. Use `per-thread` session mode so each issue comment thread gets its own agent session.
## Next Steps
If you're in the middle of `/setup`, return to the setup flow now.
Otherwise, restart the service to pick up the new channel.
Run from your NanoClaw project root:
```bash
source setup/lib/install-slug.sh
launchctl kickstart -k gui/$(id -u)/$(launchd_label) # macOS
systemctl --user restart $(systemd_unit) # Linux
```
## Channel Info
- **type**: `linear`
- **terminology**: Linear has "teams" containing "issues." Each issue's comment thread is a separate conversation.
- **how-to-find-id**: The platform ID is `linear:<TEAM_KEY>` (e.g. `linear:ENG`). Find your team key in Linear under Settings > Teams. Each issue becomes its own thread automatically.
- **supports-threads**: yes (issue comment threads are native conversations)
- **typical-use**: Webhook-driven — the agent receives all issue comment events and responds automatically. No @-mention needed (Linear OAuth apps can't be @-mentioned).
- **default-isolation**: Use `per-thread` session mode. Each issue comment thread gets its own isolated agent session.