fix: resolve Linear team UUID

Author: brendan-kellam

.github/scripts/find-unlinked-cve-issues.sh

@@ -20,6 +20,22 @@ if [[ -z "${REPOSITORY:-}" ]]; then
   exit 1
 fi
 
+TEAM_QUERY='query ResolveTeam($teamId: String!) {
+  team(id: $teamId) { id }
+}'
+team_payload=$(jq -n \
+  --arg query "$TEAM_QUERY" \
+  --arg teamId "$LINEAR_TEAM_ID" \
+  '{query: $query, variables: {teamId: $teamId}}')
+team_response=$(LINEAR_API_KEY="$LINEAR_API_KEY" "$LINEAR_REQUEST" <<<"$team_payload")
+
+if jq -e 'has("errors") or (.data.team.id == null)' >/dev/null <<<"$team_response"; then
+  echo "Could not resolve LINEAR_TEAM_ID: $(jq -c '.errors // .' <<<"$team_response")" >&2
+  exit 1
+fi
+
+team_uuid=$(jq -r '.data.team.id' <<<"$team_response")
+
 QUERY='query OpenRepositoryCves($teamId: ID!, $titlePrefix: String!, $after: String) {
   issues(
     first: 100
@@ -50,7 +66,7 @@ all_issues='[]'
 
 while true; do
   variables=$(jq -n \
-    --arg teamId "$LINEAR_TEAM_ID" \
+    --arg teamId "$team_uuid" \
     --arg titlePrefix "$title_prefix" \
     --arg after "$after" \
     '{

.github/scripts/test-cve-remediation.sh

@@ -156,6 +156,12 @@ printf '%s\n' "$count" > "$FAKE_CURL_COUNT"
 printf '%s' "$payload" > "$FAKE_CURL_PAYLOAD_DIR/$count.json"
 
 if ((count == 1)); then
+  body='{
+    "data": {
+      "team": {"id": "resolved-team-uuid"}
+    }
+  }'
+elif ((count == 2)); then
   body='{
     "data": {
       "issues": {
@@ -217,7 +223,7 @@ DISCOVERED=$(
     FAKE_CURL_COUNT="$FAKE_CURL_COUNT" \
     FAKE_CURL_PAYLOAD_DIR="$FAKE_CURL_PAYLOAD_DIR" \
     LINEAR_API_KEY="test-key" \
-    LINEAR_TEAM_ID="team-id" \
+    LINEAR_TEAM_ID="team-key" \
     LINEAR_GRAPHQL_ATTEMPTS=1 \
     REPOSITORY="sourcebot-dev/example" \
     "$DISCOVERY_SCRIPT"
@@ -243,13 +249,17 @@ EXPECTED_DISCOVERED='[
   }
 ]'
 assert_json "paginates Linear results and filters before invoking Claude" "$DISCOVERED" "$EXPECTED_DISCOVERED"
+assert_json \
+  "resolves the configured Linear team identifier" \
+  "$(jq -c '.variables.teamId' "$FAKE_CURL_PAYLOAD_DIR/1.json")" \
+  '"team-key"'
 assert_json \
   "queries Linear with the current repository title prefix" \
-  "$(jq -c '.variables | {teamId, titlePrefix, after}' "$FAKE_CURL_PAYLOAD_DIR/1.json")" \
-  '{"teamId":"team-id","titlePrefix":"[sourcebot-dev/example]","after":null}'
+  "$(jq -c '.variables | {teamId, titlePrefix, after}' "$FAKE_CURL_PAYLOAD_DIR/2.json")" \
+  '{"teamId":"resolved-team-uuid","titlePrefix":"[sourcebot-dev/example]","after":null}'
 assert_json \
   "passes the Linear cursor to the next page" \
-  "$(jq -c '.variables.after' "$FAKE_CURL_PAYLOAD_DIR/2.json")" \
+  "$(jq -c '.variables.after' "$FAKE_CURL_PAYLOAD_DIR/3.json")" \
   '"next-page"'
 
 assert_workflow_contains \