@critical-path/svelte 0.15.9 → 0.16.1

package/CHANGELOG.md

@@ -1,5 +1,60 @@
 # @critical-path/svelte
 
+## 0.16.1
+
+### Patch Changes
+
+- b243a37: Fix correctness and safety issues found in a code audit.
+  
+  **@critical-path/core**
+  - `SQLiteStore` now loads `node:sqlite` via `process.getBuiltinModule`, fixing `require is not defined` when constructed from a filename in plain Node ESM.
+  - Removed the unused `better-sqlite3` runtime dependency.
+  - `engine.addDependency` now detects indirect cycles (e.g. A → B → C → D → A), not just cycles between direct neighbours.
+  - Fixed `generateKeyBetween` returning out-of-range, duplicate keys after repeated inserts after the same item. It now throws a `RangeError` when `a >= b`.
+  - Added `engine.deleteProject(id)`, which deletes a project's tasks through `deleteTask` and publishes a new `project.deleted` event and webhook.
+  - Added exported `ValidationError` and `NotFoundError` classes. `logTime` now rejects non-numeric hours.
+  
+  **@critical-path/server**
+  - `DELETE /projects/:id`, `POST /tasks/:id/dependencies` and `POST /time-entries` now go through the engine, so cycle checks, hour validation, roll-ups, events and webhooks apply.
+  - Added `PATCH /projects/:id`.
+  - `DELETE` on a resource that does not exist now returns `404` instead of `200 { success: false }`.
+  - Malformed JSON returns `400`, validation errors `400`, `NotFoundError` `404`, and dependency cycles `409`. Unexpected errors return a generic `500` message outside development.
+  - `OPTIONS` preflight requests return `204` with CORS headers.
+  - New router/adapter options: `onError(error, request)` to report unexpected errors or return a custom response, and `exposeErrors` to include real messages in 500 responses (defaults to on only when `NODE_ENV === 'development'`).
+  - `createNextHandler` returns a callable handler that also exposes per-method properties, so `export { handler as GET }` works as documented.
+  
+  **@critical-path/mcp**
+  - Tools excluded via the `tools` option can no longer be called by name.
+  - Tool arguments are validated with each tool's zod schema; undeclared fields are stripped.
+  - Tool listings include `title` and MCP `readOnlyHint` / `destructiveHint` annotations.
+  
+  **@critical-path/svelte**
+  - Rebuilt with the bundled `@critical-path/mcp` WebMCP argument validation.
+  
+  **@critical-path/client**
+  - Delete methods resolve to `false` when the server returns `404`, keeping their boolean contract with the new server behaviour.
+- Updated dependencies [b243a37]
+  - @critical-path/core@0.22.0
+  - @critical-path/mcp@0.7.0
+  - @critical-path/client@0.14.7
+
+## 0.16.0
+
+### Minor Changes
+
+- f3301bf: - Added comprehensive task lifecycle and semantic status predicates (`isDraftTask`, `isArchivedTask`, `isTrashedTask`, `isTrashedOrArchivedTask`, `isWorkflowTask`, `getTaskSemanticStatus`, `isTaskCompleted`, `isTaskInProgress`, `isTaskNotStarted`, `isTaskCanceled`, `isTaskActive`, `isTaskUnassigned`).
+  - Hardened mention extraction with markdown code suppression (`stripMarkdownCode`) to prevent code blocks, inline code, HTML elements, and URLs from triggering false positive mentions while preserving rich-text mention nodes.
+  - Added Base-62 fractional indexing utilities (`generateKeyBetween`, `generateNKeysBetween`) for zero-cost lexical task/item reordering without array shifting or bulk database rewrites.
+  - Added `completedAt` lifecycle timestamp tracking alongside `actualEndDate`, automatic timestamp assignment upon entering `completed` or `canceled`, and timestamp + progress reset upon reopening to `not_started` or `in_progress`.
+  - Added `isTempTaskId` utility and hardened optimistic temporary task handling in `@critical-path/svelte` (`TaskState`) and `@critical-path/react` (`useTasks`) with in-flight creation resolution and ID mapping to prevent 404 errors during rapid optimistic updates and deletions.
+
+### Patch Changes
+
+- Updated dependencies [f3301bf]
+  - @critical-path/core@0.21.0
+  - @critical-path/client@0.14.6
+  - @critical-path/mcp@0.6.9
+
 ## 0.15.9
 
 ### Patch Changes