feat(kiloclaw): add Linear CLI integration by evanjacobson · Pull Request #1407 · Kilo-Org/cloud

evanjacobson · 2026-03-23T15:29:03Z

Summary

Adds Linear CLI (@schpet/linear-cli) as a tool available in KiloClaw instances, letting agents manage Linear issues directly from the terminal.

Dockerfile: Installs @schpet/linear-cli@1.11.1 in both production and local images; defers xz-utils cleanup until after the install
- This package uses the ISC license. The license is bundled with the package itself, satisfying its requirement.
Secret catalog: Adds LINEAR_API_KEY field with lin_api_ validation pattern, icon, and help link to Linear security settings
Bootstrap: New configureLinear step that wires up the env var; updateToolsMdLinearSection appends/removes a bounded reference section in TOOLS.md so the agent knows how to use the CLI (flags, gotchas, config file)
Credential cleanup: When LINEAR_API_KEY is removed, configureLinear deletes ~/.config/linear/ and ~/.linear.toml from the persistent /root volume to prevent stale credentials from surviving across redeploys. Each removal is independently try/caught so both are always attempted.
Dashboard UI: Adds Linear to the "Developer Tools" section in SettingsTab, new LinearIcon SVG component, and secret-ui-adapter wiring (icon map + description)
Tests: Full coverage for configureLinear, updateToolsMdLinearSection, and updated catalog/route assertions

Verification

pnpm vitest — bootstrap, secret-catalog, and route tests pass
Dockerfile builds with linear binary available
E2E test documented in the Loom linked below

Visual Changes

Kilo team only: https://www.loom.com/share/29c1f94d887b466880a2ba670df47c91

Reviewer Notes

The TOOLS.md section uses  /  markers, same pattern as the other tool sections
xz-utils purge was moved to a later Dockerfile stage because the Linear CLI npm install needs it

Follow-up

Bump @schpet/linear-cli once schpet/linear-cli#194 (dependency security fix) merges

Install @schpet/linear-cli in the container image and wire up LINEAR_API_KEY through the secret catalog, bootstrap, and dashboard settings UI — following the same pattern used for GitHub.

…w-linear-cli

…ntegration (Bootstrap)

Reorder Linear entry to order 5 (last in tools), add a proper LinearIcon component with the official logo SVG, and fix the icon map to use the 'linear' key instead of 'list-checks'.

…ttings toast

…w-linear-cli

evanjacobson · 2026-03-26T06:04:33Z

kiloclaw/packages/secret-catalog/src/catalog.ts

+        validationPattern: '^lin_api_[a-zA-Z0-9_-]{40}$',
+        validationMessage:
+          'Linear API keys start with lin_api_ followed by 40 alphanumeric, underscore, or hyphen characters.',
+        maxLength: 100,


this can be shortened to 50 safely (or 48 exactly), however the other entries in this catalog also pad their keys substantially, and it arguably provides a better UX when matched with the regex (for example, if whitespace was copied in addition to the key)

evanjacobson · 2026-03-26T06:04:59Z

kiloclaw/Dockerfile

+RUN npm install -g @schpet/linear-cli@1.11.1
+
+# Clean up xz-utils now that Node.js and linear-cli are installed
+RUN apt-get purge -y xz-utils \


linear-cli requires node for install

evanjacobson · 2026-03-26T06:10:28Z

kiloclaw/Dockerfile

 RUN npm install -g @kilocode/cli@7.0.46

+# Install Linear CLI (issue tracker)
+RUN npm install -g @schpet/linear-cli@1.11.1


There are security vulnerabilities on a dependency of this package. I have posted a PR to fix them.

I will bump the version to the latest release after it merges.

There are security vulnerabilities on a dependency of this package. I have posted a PR to fix them.

I will bump the version to the latest release after it merges.

I am still discussing the changes with the repo owner. This may need to be a follow-up. The vulnerabilities are not exposed in linear-cli regardless.

kiloclaw/controller/src/bootstrap.ts

kilo-code-bot · 2026-03-26T06:52:07Z

Code Review Summary

Status: 1 Issues Found | Recommendation: Address before merge

Overview

Severity	Count
CRITICAL	0
WARNING	1
SUGGESTION	0

Fix these issues in Kilo Cloud

Issue Details (click to expand)

WARNING

File	Line	Issue
`kiloclaw/Dockerfile.local`	60	Local image still installs the known vulnerable `@schpet/linear-cli@1.11.1` release

Other Observations (not in diff)

N/A

Files Reviewed (11 files)

kiloclaw/Dockerfile - 0 new issues
kiloclaw/Dockerfile.local - 1 issue
kiloclaw/controller/src/bootstrap.test.ts - 0 new issues
kiloclaw/controller/src/bootstrap.ts - 0 new issues
kiloclaw/packages/secret-catalog/src/__tests__/catalog.test.ts - 0 new issues
kiloclaw/packages/secret-catalog/src/catalog.ts - 0 new issues
kiloclaw/packages/secret-catalog/src/types.ts - 0 new issues
kiloclaw/src/routes/kiloclaw.test.ts - 0 new issues
src/app/(app)/claw/components/SettingsTab.tsx - 0 new issues
src/app/(app)/claw/components/icons/LinearIcon.tsx - 0 new issues
src/app/(app)/claw/components/secret-ui-adapter.ts - 0 new issues

_{Reviewed by gpt-5.4-20260305 · 2,340,145 tokens}

The /root volume persists across redeploys, so `linear auth login --plaintext` leaves credentials on disk that survive after LINEAR_API_KEY is removed from env. Now configureLinear() removes ~/.config/linear/ (credentials.toml + linear.toml) when no API key is set, matching the cleanup pattern used by configureGitHub().

These files store API secrets, so credential cleanup failures should not be silently swallowed. Split the two rm calls into independent try/catch blocks so both are always attempted, and surface the error message in warnings since rm -rf/-f already exit 0 for absent targets.

Cover the second rm failure, both rm calls failing simultaneously, and non-Error thrown values exercising the instanceof fallback.

evanjacobson · 2026-03-26T07:23:32Z

kiloclaw/controller/src/bootstrap.ts

+    // Remove any previously stored credentials from the persistent volume.
+    // The CLI recreates ~/.config/linear/ via ensureDir on next auth login.
+    try {
+      deps.execFileSync('rm', ['-rf', '/root/.config/linear'], { stdio: 'pipe' });


https://github.com/schpet/linear-cli/blob/b8a7e54854e4bfab7dea5064529e605f9f537f45/src/credentials.ts#L26-L42

evanjacobson · 2026-03-26T17:08:56Z

kiloclaw/controller/src/bootstrap.ts

+    // The CLI recreates ~/.config/linear/ via ensureDir on next auth login.
+    try {
+      deps.execFileSync('rm', ['-rf', '/root/.config/linear'], { stdio: 'pipe' });
+      deps.execFileSync('rm', ['-f', '/root/.linear.toml'], { stdio: 'pipe' });


https://github.com/schpet/linear-cli/blob/430ac0402d99c4252a7b81f1e0c6d9fedddc6d26/src/commands/config.ts#L116-L142

evanjacobson · 2026-03-26T18:30:35Z

kiloclaw/controller/src/bootstrap.ts

+    // The CLI recreates ~/.config/linear/ via ensureDir on next auth login.
+    // rm -rf/-f exit 0 when the target is absent, so errors here are
+    // genuine failures (permissions, I/O) worth surfacing.
+    try {


separately trying each file delete operation out of an abundance of caution — if one fails, the other one is still tried.

evanjacobson · 2026-03-26T18:31:50Z

kiloclaw/controller/src/bootstrap.ts

+      deps.execFileSync('rm', ['-rf', '/root/.config/linear'], { stdio: 'pipe' });
+    } catch (err) {
+      console.warn(
+        `WARNING: failed to remove /root/.config/linear: ${err instanceof Error ? err.message : err}`


Other warnings logged after a catch in this file do not contain the error, but these are intentionally included, as these files contain credentials and need to be deleted

Cc: line 364

kiloclaw/Dockerfile.local

evanjacobson added 14 commits March 23, 2026 07:53

feat(kiloclaw): add Linear CLI integration

e36411a

Install @schpet/linear-cli in the container image and wire up LINEAR_API_KEY through the secret catalog, bootstrap, and dashboard settings UI — following the same pattern used for GitHub.

style: format bootstrap test array

573d2b8

Merge branch 'main' of github.com:Kilo-Org/cloud into feature/kilocla…

fb36afa

…w-linear-cli

Use the official Linear logo as the icon. Add missing pieces of the i…

24753c7

…ntegration (Bootstrap)

Move Linear to end of tool catalog and use dedicated SVG icon

6104be8

Reorder Linear entry to order 5 (last in tools), add a proper LinearIcon component with the official logo SVG, and fix the icon map to use the 'linear' key instead of 'list-checks'.

Linear API key validation correction, add redeploy trigger to save se…

43a3aca

…ttings toast

Make Linear icon more visible

1a4d5d4

Update Dockerfile to keep xz-utils until after linear install

8c79231

Optimize the Linear bootstrap in TOOLS.md

a280237

Add more details to the TOOLS.md linear section

f3c1b8c

Change --status to --state

e916293

Format svg

d7b3ae7

Final pass at the TOOLS.md bootstrap

3f7035a

Merge branch 'main' of github.com:Kilo-Org/cloud into feature/kilocla…

4a9670e

…w-linear-cli

evanjacobson commented Mar 26, 2026

View reviewed changes

evanjacobson changed the title ~~Feature/kiloclaw linear cli~~ feat(kiloclaw): add Linear CLI integration Mar 26, 2026

evanjacobson commented Mar 26, 2026

View reviewed changes

evanjacobson marked this pull request as ready for review March 26, 2026 06:46

kilo-code-bot bot reviewed Mar 26, 2026

View reviewed changes

kiloclaw/controller/src/bootstrap.ts Show resolved Hide resolved

evanjacobson added 8 commits March 26, 2026 00:59

Fix API key regex and improve the short description for Linear

ade1b4e

Format bootstrap test file

eb2418b

Also remove ~/.linear.toml when LINEAR_API_KEY is unset

b410d4d

Add tests for remaining Linear credential cleanup failure paths

dc6785b

Cover the second rm failure, both rm calls failing simultaneously, and non-Error thrown values exercising the instanceof fallback.

Format files

b3fe47b

Add missing test

b466318

evanjacobson commented Mar 26, 2026

View reviewed changes

jeanduplessis approved these changes Mar 26, 2026

View reviewed changes

evanjacobson self-assigned this Mar 26, 2026

kilo-code-bot bot reviewed Mar 27, 2026

View reviewed changes

kiloclaw/Dockerfile.local Show resolved Hide resolved

evanjacobson force-pushed the feature/kiloclaw-linear-cli branch from e811161 to b466318 Compare March 27, 2026 02:32

evanjacobson mentioned this pull request Mar 27, 2026

refactor(kiloclaw): replace Linear CLI with Linear MCP server #1635

Open

4 tasks

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

feat(kiloclaw): add Linear CLI integration#1407

feat(kiloclaw): add Linear CLI integration#1407
evanjacobson wants to merge 22 commits intomainfrom
feature/kiloclaw-linear-cli

evanjacobson commented Mar 23, 2026 •

edited

Loading

Uh oh!

evanjacobson Mar 26, 2026

Uh oh!

evanjacobson Mar 26, 2026

Uh oh!

evanjacobson Mar 26, 2026

Uh oh!

evanjacobson Mar 26, 2026

Uh oh!

Uh oh!

kilo-code-bot bot commented Mar 26, 2026 •

edited

Loading

WARNING

Uh oh!

evanjacobson Mar 26, 2026

Uh oh!

evanjacobson Mar 26, 2026

Uh oh!

evanjacobson Mar 26, 2026

Uh oh!

evanjacobson Mar 26, 2026 •

edited

Loading

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Conversation

evanjacobson commented Mar 23, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Summary

Verification

Visual Changes

Reviewer Notes

Follow-up

Uh oh!

evanjacobson Mar 26, 2026

Choose a reason for hiding this comment

Uh oh!

evanjacobson Mar 26, 2026

Choose a reason for hiding this comment

Uh oh!

evanjacobson Mar 26, 2026

Choose a reason for hiding this comment

Uh oh!

evanjacobson Mar 26, 2026

Choose a reason for hiding this comment

Uh oh!

Uh oh!

kilo-code-bot bot commented Mar 26, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Code Review Summary

Overview

WARNING

Uh oh!

evanjacobson Mar 26, 2026

Choose a reason for hiding this comment

Uh oh!

evanjacobson Mar 26, 2026

Choose a reason for hiding this comment

Uh oh!

evanjacobson Mar 26, 2026

Choose a reason for hiding this comment

Uh oh!

evanjacobson Mar 26, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

evanjacobson commented Mar 23, 2026 •

edited

Loading

kilo-code-bot bot commented Mar 26, 2026 •

edited

Loading

evanjacobson Mar 26, 2026 •

edited

Loading