@critical-path/svelte 0.16.3 → 0.17.0

package/CHANGELOG.md

@@ -1,5 +1,41 @@
 # @critical-path/svelte
 
+## 0.17.0
+
+### Minor Changes
+
+- fd79762: **BREAKING:** strict request bodies, no identity in payloads, and CORS off by default.
+  
+  **@critical-path/core**
+  - Request schemas are strict: unknown keys, server-assigned fields and identity fields are rejected instead of stripped.
+  - Identity is never read from payloads. `updateTask` no longer reads `actorId`/`actorName`/`actorType`/`actor` from the update object; pass them as the third `options` argument or use `withActor`. `addComment`, `addCommentReaction`, `removeCommentReaction` and `createAttachment` take the actor from `withActor`, falling back to an optional `authorId`/`userId`/`uploaderId`, then `'system'`.
+  - Schemas export request body types (`CreateTaskBody`, `UpdateTaskBody`, ...).
+  
+  **@critical-path/server**
+  - Bodies containing unknown, server-assigned or identity fields return `400`.
+  - Every request runs as the `getContext` user, or `ANONYMOUS_ACTOR` (`anonymous`). Authors of comments, reactions, attachments and time entries are no longer accepted from bodies.
+  - `DELETE /comments/:id/reactions` takes `?emoji=` only.
+  - CORS is off by default (`cors: false`). Pass `cors: { origins: [...] }` to allow cross-origin browsers.
+  
+  **@critical-path/client**
+  - Method parameters use the server's body types, so identity fields no longer type-check. `addCommentReaction`/`removeCommentReaction` take `{ emoji }`; `addTodo`/`toggleTodo` drop the actor options argument.
+  - New `updateProject`, `deleteProject` and `addDependency`. `uploadAttachmentFile` base64-encodes binary data (previously it sent unusable JSON for `Uint8Array`/`ArrayBuffer`).
+  - CLI: `--author`, `--actor-id`, `--actor-name`, `--agent-name` and `CRITICAL_PATH_AUTHOR_ID`/`ACTOR_ID`/`AGENT_NAME` are removed; identity comes from the `--key` token via the server's `getContext`.
+  
+  **@critical-path/mcp**
+  - Tool arguments are strict: undeclared arguments return an `isError` result.
+  - `add_comment` no longer takes `authorId`. With an `engine`, writes are attributed to the new `actor` server option (default `DEFAULT_MCP_ACTOR`).
+  
+  **@critical-path/react / @critical-path/svelte**
+  - `addReaction`/`removeReaction` take `(commentId, emoji)`; comment and attachment inputs no longer accept `authorId`/`uploaderId`. Task, comment and deliverable update parameters use the schema body types.
+
+### Patch Changes
+
+- Updated dependencies [fd79762]
+  - @critical-path/core@0.25.0
+  - @critical-path/client@0.15.0
+  - @critical-path/mcp@0.10.0
+
 ## 0.16.3
 
 ### Patch Changes

package/README.md

@@ -102,8 +102,8 @@ Combines threaded comments with inline attachments (`attachment.commentId === co
 
   async function handleSend(text: string, fileUrl?: string) {
     await activityState.addComment(
-      { content: text, authorId: 'user_1', authorType: 'user' },
-      fileUrl ? [{ filename: 'upload.png', url: fileUrl, uploaderId: 'user_1', mimeType: 'image/png', sizeBytes: 1024 }] : []
+      { content: text },
+      fileUrl ? [{ filename: 'upload.png', url: fileUrl, mimeType: 'image/png', sizeBytes: 1024 }] : []
     );
   }
 </script>
@@ -123,8 +123,8 @@ Combines threaded comments with inline attachments (`attachment.commentId === co
 
     <!-- Emoji Reactions -->
     <div class="reactions">
-      <button on:click={() => activityState.addReaction(thread.id, '👍', 'user_1')}>👍</button>
-      <button on:click={() => activityState.addReaction(thread.id, '🚀', 'user_1')}>🚀</button>
+      <button on:click={() => activityState.addReaction(thread.id, '👍')}>👍</button>
+      <button on:click={() => activityState.addReaction(thread.id, '🚀')}>🚀</button>
       <span>{thread.reactions?.length || 0} reactions</span>
     </div>
 

package/dist/activity-state.svelte.d.ts

@@ -1,3 +1,4 @@
+import type { CreateAttachmentBody, CreateCommentBody } from '@critical-path/core/schemas';
 import type { CriticalPathClient } from '@critical-path/client';
 import type { Comment, Attachment } from '@critical-path/core';
 export interface ThreadedCommentWithAttachments extends Comment {
@@ -15,21 +16,15 @@ export declare class TaskActivityState {
     standaloneAttachments: Attachment[];
     constructor(client: CriticalPathClient, taskId?: string | undefined);
     fetch(taskId?: string): Promise<void>;
-    addComment(input: Omit<Comment, 'id' | 'taskId' | 'createdAt' | 'updatedAt'>, attachmentInputs?: Array<Omit<Attachment, 'id' | 'taskId' | 'commentId' | 'createdAt' | 'updatedAt'>>): Promise<{
+    addComment(input: Omit<CreateCommentBody, 'taskId'>, attachmentInputs?: Array<Omit<CreateAttachmentBody, 'taskId' | 'commentId'>>): Promise<{
         comment: Comment;
         attachments: Attachment[];
     }>;
     addAttachment(input: Omit<Attachment, 'id' | 'taskId' | 'createdAt' | 'updatedAt'>): Promise<Attachment>;
     deleteComment(id: string): Promise<void>;
     deleteAttachment(id: string): Promise<void>;
-    addReaction(commentId: string, reactionOrEmoji: {
-        emoji: string;
-        userId: string;
-    } | string, maybeUserId?: string): Promise<Comment>;
-    removeReaction(commentId: string, reactionOrEmoji: {
-        emoji: string;
-        userId: string;
-    } | string, maybeUserId?: string): Promise<Comment>;
+    addReaction(commentId: string, emoji: string): Promise<Comment>;
+    removeReaction(commentId: string, emoji: string): Promise<Comment>;
 }
 export declare function createTaskActivityState(client: CriticalPathClient, taskId?: string): TaskActivityState;
 //# sourceMappingURL=activity-state.svelte.d.ts.map

package/dist/activity-state.svelte.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"activity-state.svelte.d.ts","sourceRoot":"","sources":["../src/activity-state.svelte.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAE/D,MAAM,WAAW,8BAA+B,SAAQ,OAAO;IAC7D,WAAW,EAAE,UAAU,EAAE,CAAC;IAC1B,OAAO,EAAE,8BAA8B,EAAE,CAAC;CAC3C;AAED,qBAAa,iBAAiB;IA6ChB,OAAO,CAAC,MAAM;IAA6B,MAAM,CAAC,EAAE,MAAM;IA5CtE,QAAQ,YAAyB;IACjC,WAAW,eAA4B;IACvC,OAAO,UAA0B;IACjC,KAAK,eAA8B;IAEnC,OAAO,mCAiCJ;IAEH,qBAAqB,eAElB;gBAEiB,MAAM,EAAE,kBAAkB,EAAS,MAAM,CAAC,EAAE,MAAM,YAAA;IAEhE,KAAK,CAAC,MAAM,CAAC,EAAE,MAAM;IAwBrB,UAAU,CACd,KAAK,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,GAAG,QAAQ,GAAG,WAAW,GAAG,WAAW,CAAC,EACjE,gBAAgB,CAAC,EAAE,KAAK,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,GAAG,QAAQ,GAAG,WAAW,GAAG,WAAW,GAAG,WAAW,CAAC,CAAC;;;;IAiCjG,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,GAAG,QAAQ,GAAG,WAAW,GAAG,WAAW,CAAC;IAelF,aAAa,CAAC,EAAE,EAAE,MAAM;IAaxB,gBAAgB,CAAC,EAAE,EAAE,MAAM;IAa3B,WAAW,CACf,SAAS,EAAE,MAAM,EACjB,eAAe,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,MAAM,EAC3D,WAAW,CAAC,EAAE,MAAM;IAiBhB,cAAc,CAClB,SAAS,EAAE,MAAM,EACjB,eAAe,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,MAAM,EAC3D,WAAW,CAAC,EAAE,MAAM;CAgBvB;AAED,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,kBAAkB,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,iBAAiB,CAEtG"}
+{"version":3,"file":"activity-state.svelte.d.ts","sourceRoot":"","sources":["../src/activity-state.svelte.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAC3F,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAE/D,MAAM,WAAW,8BAA+B,SAAQ,OAAO;IAC7D,WAAW,EAAE,UAAU,EAAE,CAAC;IAC1B,OAAO,EAAE,8BAA8B,EAAE,CAAC;CAC3C;AAED,qBAAa,iBAAiB;IA6ChB,OAAO,CAAC,MAAM;IAA6B,MAAM,CAAC,EAAE,MAAM;IA5CtE,QAAQ,YAAyB;IACjC,WAAW,eAA4B;IACvC,OAAO,UAA0B;IACjC,KAAK,eAA8B;IAEnC,OAAO,mCAiCJ;IAEH,qBAAqB,eAElB;gBAEiB,MAAM,EAAE,kBAAkB,EAAS,MAAM,CAAC,EAAE,MAAM,YAAA;IAEhE,KAAK,CAAC,MAAM,CAAC,EAAE,MAAM;IAwBrB,UAAU,CACd,KAAK,EAAE,IAAI,CAAC,iBAAiB,EAAE,QAAQ,CAAC,EACxC,gBAAgB,CAAC,EAAE,KAAK,CAAC,IAAI,CAAC,oBAAoB,EAAE,QAAQ,GAAG,WAAW,CAAC,CAAC;;;;IAiCxE,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,GAAG,QAAQ,GAAG,WAAW,GAAG,WAAW,CAAC;IAelF,aAAa,CAAC,EAAE,EAAE,MAAM;IAaxB,gBAAgB,CAAC,EAAE,EAAE,MAAM;IAa3B,WAAW,CACf,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM;IAcT,cAAc,CAClB,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM;CAahB;AAED,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,kBAAkB,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,iBAAiB,CAEtG"}

package/dist/comment-state.svelte.d.ts

@@ -1,3 +1,4 @@
+import type { CreateCommentBody, UpdateCommentBody } from '@critical-path/core/schemas';
 import type { CriticalPathClient } from '@critical-path/client';
 import type { Comment } from '@critical-path/core';
 export interface ThreadedComment extends Comment {
@@ -12,17 +13,11 @@ export declare class CommentState {
     threads: ThreadedComment[];
     constructor(client: CriticalPathClient, taskId?: string | undefined);
     fetch(taskId?: string): Promise<void>;
-    addComment(input: Omit<Comment, 'id' | 'taskId' | 'createdAt' | 'updatedAt'>): Promise<Comment>;
-    updateComment(id: string, updates: Partial<Comment>): Promise<Comment>;
+    addComment(input: Omit<CreateCommentBody, 'taskId'>): Promise<Comment>;
+    updateComment(id: string, updates: UpdateCommentBody): Promise<Comment>;
     deleteComment(id: string): Promise<void>;
-    addReaction(commentId: string, reactionOrEmoji: {
-        emoji: string;
-        userId: string;
-    } | string, maybeUserId?: string): Promise<Comment>;
-    removeReaction(commentId: string, reactionOrEmoji: {
-        emoji: string;
-        userId: string;
-    } | string, maybeUserId?: string): Promise<Comment>;
+    addReaction(commentId: string, emoji: string): Promise<Comment>;
+    removeReaction(commentId: string, emoji: string): Promise<Comment>;
 }
 export declare function createCommentState(client: CriticalPathClient, taskId?: string): CommentState;
 //# sourceMappingURL=comment-state.svelte.d.ts.map

package/dist/comment-state.svelte.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"comment-state.svelte.d.ts","sourceRoot":"","sources":["../src/comment-state.svelte.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAEnD,MAAM,WAAW,eAAgB,SAAQ,OAAO;IAC9C,OAAO,EAAE,eAAe,EAAE,CAAC;CAC5B;AAED,qBAAa,YAAY;IAyBX,OAAO,CAAC,MAAM;IAA6B,MAAM,CAAC,EAAE,MAAM;IAxBtE,IAAI,YAAyB;IAC7B,OAAO,UAA0B;IACjC,KAAK,eAA8B;IAEnC,OAAO,oBAkBJ;gBAEiB,MAAM,EAAE,kBAAkB,EAAS,MAAM,CAAC,EAAE,MAAM,YAAA;IAEhE,KAAK,CAAC,MAAM,CAAC,EAAE,MAAM;IAkBrB,UAAU,CAAC,KAAK,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,GAAG,QAAQ,GAAG,WAAW,GAAG,WAAW,CAAC;IAe5E,aAAa,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC;IAYnD,aAAa,CAAC,EAAE,EAAE,MAAM;IAaxB,WAAW,CACf,SAAS,EAAE,MAAM,EACjB,eAAe,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,MAAM,EAC3D,WAAW,CAAC,EAAE,MAAM;IAiBhB,cAAc,CAClB,SAAS,EAAE,MAAM,EACjB,eAAe,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,MAAM,EAC3D,WAAW,CAAC,EAAE,MAAM;CAgBvB;AAED,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,kBAAkB,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,YAAY,CAE5F"}
+{"version":3,"file":"comment-state.svelte.d.ts","sourceRoot":"","sources":["../src/comment-state.svelte.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AACxF,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAEnD,MAAM,WAAW,eAAgB,SAAQ,OAAO;IAC9C,OAAO,EAAE,eAAe,EAAE,CAAC;CAC5B;AAED,qBAAa,YAAY;IAyBX,OAAO,CAAC,MAAM;IAA6B,MAAM,CAAC,EAAE,MAAM;IAxBtE,IAAI,YAAyB;IAC7B,OAAO,UAA0B;IACjC,KAAK,eAA8B;IAEnC,OAAO,oBAkBJ;gBAEiB,MAAM,EAAE,kBAAkB,EAAS,MAAM,CAAC,EAAE,MAAM,YAAA;IAEhE,KAAK,CAAC,MAAM,CAAC,EAAE,MAAM;IAkBrB,UAAU,CAAC,KAAK,EAAE,IAAI,CAAC,iBAAiB,EAAE,QAAQ,CAAC;IAenD,aAAa,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,iBAAiB;IAYpD,aAAa,CAAC,EAAE,EAAE,MAAM;IAaxB,WAAW,CACf,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM;IAcT,cAAc,CAClB,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM;CAahB;AAED,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,kBAAkB,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,YAAY,CAE5F"}

package/dist/deliverable-state.svelte.d.ts

@@ -1,3 +1,4 @@
+import type { UpdateDeliverableBody } from '@critical-path/core/schemas';
 import type { CriticalPathClient } from '@critical-path/client';
 import type { Deliverable, DeliverableSummary, CreateDeliverableInput } from '@critical-path/core';
 export declare class DeliverableState {
@@ -9,7 +10,7 @@ export declare class DeliverableState {
     constructor(client: CriticalPathClient, projectId?: string | undefined);
     fetch(projectId?: string): Promise<void>;
     createDeliverable(input: CreateDeliverableInput): Promise<Deliverable>;
-    updateDeliverable(id: string, updates: Partial<Deliverable>): Promise<Deliverable>;
+    updateDeliverable(id: string, updates: UpdateDeliverableBody): Promise<Deliverable>;
     deleteDeliverable(id: string): Promise<void>;
     getSummary(deliverableId: string): Promise<DeliverableSummary>;
 }

package/dist/deliverable-state.svelte.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"deliverable-state.svelte.d.ts","sourceRoot":"","sources":["../src/deliverable-state.svelte.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,KAAK,EAAE,WAAW,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAC;AAEnG,qBAAa,gBAAgB;IAKf,OAAO,CAAC,MAAM;IAA6B,SAAS,CAAC,EAAE,MAAM;IAJzE,IAAI,gBAA6B;IACjC,OAAO,UAA0B;IACjC,KAAK,eAA8B;gBAEf,MAAM,EAAE,kBAAkB,EAAS,SAAS,CAAC,EAAE,MAAM,YAAA;IAEnE,KAAK,CAAC,SAAS,CAAC,EAAE,MAAM;IAiBxB,iBAAiB,CAAC,KAAK,EAAE,sBAAsB;IAY/C,iBAAiB,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,WAAW,CAAC;IAe3D,iBAAiB,CAAC,EAAE,EAAE,MAAM;IAa5B,UAAU,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC;CAGrE;AAED,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,kBAAkB,EAAE,gBAAgB,CAAC,EAAE,MAAM,GAAG,gBAAgB,CAE9G"}
+{"version":3,"file":"deliverable-state.svelte.d.ts","sourceRoot":"","sources":["../src/deliverable-state.svelte.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AACzE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,KAAK,EAAE,WAAW,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAC;AAEnG,qBAAa,gBAAgB;IAKf,OAAO,CAAC,MAAM;IAA6B,SAAS,CAAC,EAAE,MAAM;IAJzE,IAAI,gBAA6B;IACjC,OAAO,UAA0B;IACjC,KAAK,eAA8B;gBAEf,MAAM,EAAE,kBAAkB,EAAS,SAAS,CAAC,EAAE,MAAM,YAAA;IAEnE,KAAK,CAAC,SAAS,CAAC,EAAE,MAAM;IAiBxB,iBAAiB,CAAC,KAAK,EAAE,sBAAsB;IAY/C,iBAAiB,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,qBAAqB;IAe5D,iBAAiB,CAAC,EAAE,EAAE,MAAM;IAa5B,UAAU,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC;CAGrE;AAED,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,kBAAkB,EAAE,gBAAgB,CAAC,EAAE,MAAM,GAAG,gBAAgB,CAE9G"}

package/dist/index.js

@@ -103,6 +103,8 @@ var o = class {
 	async createTask(e) {
 		let t = `temp_${Date.now()}_${Math.random().toString(36).substring(2, 7)}`, n = (/* @__PURE__ */ new Date()).toISOString(), r = {
 			...e,
+			status: e.status ?? "todo",
+			priority: e.priority ?? "medium",
 			id: t,
 			createdAt: n,
 			updatedAt: n
@@ -359,25 +361,19 @@ var te = class {
 			throw this.error = n, n;
 		}
 	}
-	async addReaction(e, t, n) {
+	async addReaction(e, t) {
 		try {
-			let r = typeof t == "string" ? {
-				emoji: t,
-				userId: n
-			} : t, i = await this.client.addCommentReaction(e, r);
-			return this.data = this.data.map((t) => t.id === e ? i : t), i;
+			let n = { emoji: t }, r = await this.client.addCommentReaction(e, n);
+			return this.data = this.data.map((t) => t.id === e ? r : t), r;
 		} catch (e) {
 			let t = e instanceof Error ? e : Error(String(e));
 			throw this.error = t, t;
 		}
 	}
-	async removeReaction(e, t, n) {
+	async removeReaction(e, t) {
 		try {
-			let r = typeof t == "string" ? {
-				emoji: t,
-				userId: n
-			} : t, i = await this.client.removeCommentReaction(e, r);
-			return this.data = this.data.map((t) => t.id === e ? i : t), i;
+			let n = { emoji: t }, r = await this.client.removeCommentReaction(e, n);
+			return this.data = this.data.map((t) => t.id === e ? r : t), r;
 		} catch (e) {
 			let t = e instanceof Error ? e : Error(String(e));
 			throw this.error = t, t;
@@ -584,25 +580,19 @@ var ae = class {
 			throw this.error = n, n;
 		}
 	}
-	async addReaction(e, t, n) {
+	async addReaction(e, t) {
 		try {
-			let r = typeof t == "string" ? {
-				emoji: t,
-				userId: n
-			} : t, i = await this.client.addCommentReaction(e, r);
-			return this.comments = this.comments.map((t) => t.id === e ? i : t), i;
+			let n = { emoji: t }, r = await this.client.addCommentReaction(e, n);
+			return this.comments = this.comments.map((t) => t.id === e ? r : t), r;
 		} catch (e) {
 			let t = e instanceof Error ? e : Error(String(e));
 			throw this.error = t, t;
 		}
 	}
-	async removeReaction(e, t, n) {
+	async removeReaction(e, t) {
 		try {
-			let r = typeof t == "string" ? {
-				emoji: t,
-				userId: n
-			} : t, i = await this.client.removeCommentReaction(e, r);
-			return this.comments = this.comments.map((t) => t.id === e ? i : t), i;
+			let n = { emoji: t }, r = await this.client.removeCommentReaction(e, n);
+			return this.comments = this.comments.map((t) => t.id === e ? r : t), r;
 		} catch (e) {
 			let t = e instanceof Error ? e : Error(String(e));
 			throw this.error = t, t;
@@ -4493,7 +4483,7 @@ var gn = class extends Error {
 	}
 };
 function _n(e, t) {
-	let n = e.zodSchema.safeParse(t ?? {});
+	let n = e.zodSchema.strict().safeParse(t ?? {});
 	if (!n.success) {
 		let t = n.error.issues.map((e) => `${e.path.join(".") || "(root)"}: ${e.message}`).join("; ");
 		throw new gn(e.name, t);
@@ -4681,16 +4671,14 @@ var vn = [
 	$({
 		name: "add_comment",
 		title: "Add Comment",
-		description: "Add a comment to a task.",
+		description: "Add a comment to a task. The comment is attributed to the identity this MCP server runs as.",
 		zodSchema: G({
 			taskId: W().describe("The task ID"),
-			content: W().describe("Comment body/markdown"),
-			authorId: W().describe("Author user ID")
+			content: W().describe("Comment body/markdown")
 		}),
 		execute: async (e, t) => t.addComment({
 			taskId: e.taskId,
-			content: e.content,
-			authorId: e.authorId
+			content: e.content
 		})
 	}),
 	$({

package/dist/kanban-state.svelte.d.ts

@@ -1,3 +1,4 @@
+import type { CreateTaskBody } from '@critical-path/core/schemas';
 import type { CriticalPathClient } from '@critical-path/client';
 import type { Task, TaskStatus, StatusDefinition } from '@critical-path/core';
 export interface KanbanStateOptions {
@@ -15,7 +16,7 @@ export declare class KanbanState {
     columns: Record<string, Task[]>;
     constructor(client: CriticalPathClient, projectId?: string | undefined, options?: KanbanStateOptions);
     fetch(): Promise<void>;
-    createTask(input: Omit<Task, 'id' | 'createdAt' | 'updatedAt'>): Promise<Task>;
+    createTask(input: CreateTaskBody): Promise<Task>;
     moveTask(taskId: string, targetStatus: TaskStatus): Promise<Task>;
     updateTaskStatus(taskId: string, status: TaskStatus): Promise<Task>;
     deleteTask(taskId: string): Promise<void>;

package/dist/kanban-state.svelte.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"kanban-state.svelte.d.ts","sourceRoot":"","sources":["../src/kanban-state.svelte.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,gBAAgB,EAAkB,MAAM,qBAAqB,CAAC;AAI9F,MAAM,WAAW,kBAAkB;IACjC,OAAO,CAAC,EAAE,UAAU,GAAG,UAAU,CAAC;IAClC,iBAAiB,CAAC,EAAE,gBAAgB,EAAE,CAAC;CACxC;AAED,qBAAa,WAAW;IAmEb,SAAS,CAAC,EAAE,MAAM;IAClB,OAAO,EAAE,kBAAkB;IAnEpC,OAAO,CAAC,SAAS,CAAY;IAE7B,IAAI,IAAI,IAAI,IAAI,EAAE,CAEjB;IAED,IAAI,KAAK,IAAI,IAAI,EAAE,CAElB;IAED,IAAI,OAAO,IAAI,OAAO,CAErB;IAED,IAAI,KAAK,IAAI,KAAK,GAAG,IAAI,CAExB;IAED,OAAO,yBA4CJ;gBAGD,MAAM,EAAE,kBAAkB,EACnB,SAAS,CAAC,EAAE,MAAM,YAAA,EAClB,OAAO,GAAE,kBAAuB;IAKnC,KAAK;IAIL,UAAU,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,GAAG,WAAW,GAAG,WAAW,CAAC;IAI9D,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,UAAU;IAIjD,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU;IAInD,UAAU,CAAC,MAAM,EAAE,MAAM;CAGhC;AAED,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,kBAAkB,EAC1B,SAAS,CAAC,EAAE,MAAM,EAClB,OAAO,CAAC,EAAE,kBAAkB,GAC3B,WAAW,CAEb"}
+{"version":3,"file":"kanban-state.svelte.d.ts","sourceRoot":"","sources":["../src/kanban-state.svelte.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,gBAAgB,EAAkB,MAAM,qBAAqB,CAAC;AAI9F,MAAM,WAAW,kBAAkB;IACjC,OAAO,CAAC,EAAE,UAAU,GAAG,UAAU,CAAC;IAClC,iBAAiB,CAAC,EAAE,gBAAgB,EAAE,CAAC;CACxC;AAED,qBAAa,WAAW;IAmEb,SAAS,CAAC,EAAE,MAAM;IAClB,OAAO,EAAE,kBAAkB;IAnEpC,OAAO,CAAC,SAAS,CAAY;IAE7B,IAAI,IAAI,IAAI,IAAI,EAAE,CAEjB;IAED,IAAI,KAAK,IAAI,IAAI,EAAE,CAElB;IAED,IAAI,OAAO,IAAI,OAAO,CAErB;IAED,IAAI,KAAK,IAAI,KAAK,GAAG,IAAI,CAExB;IAED,OAAO,yBA4CJ;gBAGD,MAAM,EAAE,kBAAkB,EACnB,SAAS,CAAC,EAAE,MAAM,YAAA,EAClB,OAAO,GAAE,kBAAuB;IAKnC,KAAK;IAIL,UAAU,CAAC,KAAK,EAAE,cAAc;IAIhC,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,UAAU;IAIjD,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU;IAInD,UAAU,CAAC,MAAM,EAAE,MAAM;CAGhC;AAED,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,kBAAkB,EAC1B,SAAS,CAAC,EAAE,MAAM,EAClB,OAAO,CAAC,EAAE,kBAAkB,GAC3B,WAAW,CAEb"}

package/dist/task-state.svelte.d.ts

@@ -1,3 +1,4 @@
+import type { CreateTaskBody, UpdateTaskBody } from '@critical-path/core/schemas';
 import type { CriticalPathClient } from '@critical-path/client';
 import { type Task, type TaskStatus } from '@critical-path/core';
 export declare class TaskState {
@@ -10,8 +11,8 @@ export declare class TaskState {
     private tempToRealIdMap;
     constructor(client: CriticalPathClient, projectId?: string | undefined);
     fetch(): Promise<void>;
-    createTask(input: Omit<Task, 'id' | 'createdAt' | 'updatedAt'>): Promise<Task>;
-    updateTask(taskId: string, updates: Partial<Task>): Promise<Task>;
+    createTask(input: CreateTaskBody): Promise<Task>;
+    updateTask(taskId: string, updates: UpdateTaskBody): Promise<Task>;
     updateTaskStatus(taskId: string, status: TaskStatus): Promise<Task>;
     deleteTask(taskId: string): Promise<void>;
 }

package/dist/task-state.svelte.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"task-state.svelte.d.ts","sourceRoot":"","sources":["../src/task-state.svelte.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,EAAE,KAAK,IAAI,EAAE,KAAK,UAAU,EAAgB,MAAM,qBAAqB,CAAC;AAE/E,qBAAa,SAAS;IASlB,OAAO,CAAC,MAAM;IACP,SAAS,CAAC,EAAE,MAAM;IAT3B,IAAI,SAAsB;IAC1B,OAAO,UAA0B;IACjC,KAAK,eAA8B;IAEnC,OAAO,CAAC,gBAAgB,CAAoC;IAC5D,OAAO,CAAC,eAAe,CAA6B;gBAG1C,MAAM,EAAE,kBAAkB,EAC3B,SAAS,CAAC,EAAE,MAAM,YAAA;IAGrB,KAAK;IAYL,UAAU,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,GAAG,WAAW,GAAG,WAAW,CAAC;IAiC9D,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC;IAyEjD,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU;IAInD,UAAU,CAAC,MAAM,EAAE,MAAM;CA4ChC;AAED,wBAAgB,eAAe,CAC7B,MAAM,EAAE,kBAAkB,EAC1B,SAAS,CAAC,EAAE,MAAM,GACjB,SAAS,CAEX"}
+{"version":3,"file":"task-state.svelte.d.ts","sourceRoot":"","sources":["../src/task-state.svelte.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAClF,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,EAAE,KAAK,IAAI,EAAE,KAAK,UAAU,EAAgB,MAAM,qBAAqB,CAAC;AAE/E,qBAAa,SAAS;IASlB,OAAO,CAAC,MAAM;IACP,SAAS,CAAC,EAAE,MAAM;IAT3B,IAAI,SAAsB;IAC1B,OAAO,UAA0B;IACjC,KAAK,eAA8B;IAEnC,OAAO,CAAC,gBAAgB,CAAoC;IAC5D,OAAO,CAAC,eAAe,CAA6B;gBAG1C,MAAM,EAAE,kBAAkB,EAC3B,SAAS,CAAC,EAAE,MAAM,YAAA;IAGrB,KAAK;IAYL,UAAU,CAAC,KAAK,EAAE,cAAc;IAoChC,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,cAAc;IAyElD,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU;IAInD,UAAU,CAAC,MAAM,EAAE,MAAM;CA4ChC;AAED,wBAAgB,eAAe,CAC7B,MAAM,EAAE,kBAAkB,EAC1B,SAAS,CAAC,EAAE,MAAM,GACjB,SAAS,CAEX"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@critical-path/svelte",
-  "version": "0.16.3",
+  "version": "0.17.0",
   "description": "Svelte 5 Runes state and reactive integrations for Critical Path headless project management framework",
   "author": "Jack James",
   "license": "MIT",
@@ -18,9 +18,9 @@
     }
   },
   "dependencies": {
-    "@critical-path/client": "0.14.9",
-    "@critical-path/core": "0.24.0",
-    "@critical-path/mcp": "0.9.0"
+    "@critical-path/mcp": "0.10.0",
+    "@critical-path/client": "0.15.0",
+    "@critical-path/core": "0.25.0"
   },
   "peerDependencies": {
     "svelte": "^5.0.0"

package/src/activity-state.svelte.ts

@@ -1,4 +1,5 @@
 /// <reference types="svelte" />
+import type { CreateAttachmentBody, CreateCommentBody } from '@critical-path/core/schemas';
 import type { CriticalPathClient } from '@critical-path/client';
 import type { Comment, Attachment } from '@critical-path/core';
 
@@ -79,8 +80,8 @@ export class TaskActivityState {
   }
 
   async addComment(
-    input: Omit<Comment, 'id' | 'taskId' | 'createdAt' | 'updatedAt'>,
-    attachmentInputs?: Array<Omit<Attachment, 'id' | 'taskId' | 'commentId' | 'createdAt' | 'updatedAt'>>
+    input: Omit<CreateCommentBody, 'taskId'>,
+    attachmentInputs?: Array<Omit<CreateAttachmentBody, 'taskId' | 'commentId'>>
   ) {
     if (!this.taskId) {
       throw new Error('TaskActivityState requires a taskId to add comments.');
@@ -156,14 +157,10 @@ export class TaskActivityState {
 
   async addReaction(
     commentId: string,
-    reactionOrEmoji: { emoji: string; userId: string } | string,
-    maybeUserId?: string
+    emoji: string
   ) {
     try {
-      const payload =
-        typeof reactionOrEmoji === 'string'
-          ? { emoji: reactionOrEmoji, userId: maybeUserId! }
-          : reactionOrEmoji;
+      const payload = { emoji };
       const updated = await this.client.addCommentReaction(commentId, payload);
       this.comments = this.comments.map((c) => (c.id === commentId ? updated : c));
       return updated;
@@ -176,14 +173,10 @@ export class TaskActivityState {
 
   async removeReaction(
     commentId: string,
-    reactionOrEmoji: { emoji: string; userId: string } | string,
-    maybeUserId?: string
+    emoji: string
   ) {
     try {
-      const payload =
-        typeof reactionOrEmoji === 'string'
-          ? { emoji: reactionOrEmoji, userId: maybeUserId! }
-          : reactionOrEmoji;
+      const payload = { emoji };
       const updated = await this.client.removeCommentReaction(commentId, payload);
       this.comments = this.comments.map((c) => (c.id === commentId ? updated : c));
       return updated;

package/src/comment-state.svelte.ts

@@ -1,4 +1,5 @@
 /// <reference types="svelte" />
+import type { CreateCommentBody, UpdateCommentBody } from '@critical-path/core/schemas';
 import type { CriticalPathClient } from '@critical-path/client';
 import type { Comment } from '@critical-path/core';
 
@@ -51,7 +52,7 @@ export class CommentState {
     }
   }
 
-  async addComment(input: Omit<Comment, 'id' | 'taskId' | 'createdAt' | 'updatedAt'>) {
+  async addComment(input: Omit<CreateCommentBody, 'taskId'>) {
     if (!this.taskId) {
       throw new Error('CommentState requires a taskId to add comments.');
     }
@@ -66,7 +67,7 @@ export class CommentState {
     }
   }
 
-  async updateComment(id: string, updates: Partial<Comment>) {
+  async updateComment(id: string, updates: UpdateCommentBody) {
     try {
       const updated = await this.client.updateComment(id, updates);
       this.data = this.data.map((c) => (c.id === id ? updated : c));
@@ -93,14 +94,10 @@ export class CommentState {
 
   async addReaction(
     commentId: string,
-    reactionOrEmoji: { emoji: string; userId: string } | string,
-    maybeUserId?: string
+    emoji: string
   ) {
     try {
-      const payload =
-        typeof reactionOrEmoji === 'string'
-          ? { emoji: reactionOrEmoji, userId: maybeUserId! }
-          : reactionOrEmoji;
+      const payload = { emoji };
       const updated = await this.client.addCommentReaction(commentId, payload);
       this.data = this.data.map((c) => (c.id === commentId ? updated : c));
       return updated;
@@ -113,14 +110,10 @@ export class CommentState {
 
   async removeReaction(
     commentId: string,
-    reactionOrEmoji: { emoji: string; userId: string } | string,
-    maybeUserId?: string
+    emoji: string
   ) {
     try {
-      const payload =
-        typeof reactionOrEmoji === 'string'
-          ? { emoji: reactionOrEmoji, userId: maybeUserId! }
-          : reactionOrEmoji;
+      const payload = { emoji };
       const updated = await this.client.removeCommentReaction(commentId, payload);
       this.data = this.data.map((c) => (c.id === commentId ? updated : c));
       return updated;

package/src/deliverable-state.svelte.ts

@@ -1,4 +1,5 @@
 /// <reference types="svelte" />
+import type { UpdateDeliverableBody } from '@critical-path/core/schemas';
 import type { CriticalPathClient } from '@critical-path/client';
 import type { Deliverable, DeliverableSummary, CreateDeliverableInput } from '@critical-path/core';
 
@@ -38,7 +39,7 @@ export class DeliverableState {
     }
   }
 
-  async updateDeliverable(id: string, updates: Partial<Deliverable>) {
+  async updateDeliverable(id: string, updates: UpdateDeliverableBody) {
     const previous = this.data;
     this.data = this.data.map((d) => (d.id === id ? { ...d, ...updates } : d));
     try {

package/src/index.test.ts

@@ -335,11 +335,11 @@ describe('@critical-path/svelte Svelte 5 Runes Test Suite', () => {
       await commentState.updateComment('cmt_1', { content: 'Updated comment' });
       expect(commentState.data[0].content).toBe('Updated comment');
 
-      await commentState.addReaction('cmt_1', '🔥', 'u2');
+      await commentState.addReaction('cmt_1', '🔥');
       expect(commentState.data[0].reactions).toHaveLength(1);
       expect(commentState.data[0].reactions?.[0].emoji).toBe('🔥');
 
-      await commentState.removeReaction('cmt_1', '🔥', 'u2');
+      await commentState.removeReaction('cmt_1', '🔥');
       expect(commentState.data[0].reactions).toBeUndefined();
 
       await commentState.deleteComment('cmt_1');

package/src/kanban-state.svelte.ts

@@ -1,4 +1,5 @@
 /// <reference types="svelte" />
+import type { CreateTaskBody } from '@critical-path/core/schemas';
 import type { CriticalPathClient } from '@critical-path/client';
 import type { Task, TaskStatus, StatusDefinition, SemanticStatus } from '@critical-path/core';
 import { resolveStatusDefinition } from '@critical-path/core';
@@ -86,7 +87,7 @@ export class KanbanState {
     return this.taskState.fetch();
   }
 
-  async createTask(input: Omit<Task, 'id' | 'createdAt' | 'updatedAt'>) {
+  async createTask(input: CreateTaskBody) {
     return this.taskState.createTask(input);
   }
 

package/src/task-state.svelte.ts

@@ -1,4 +1,5 @@
 /// <reference types="svelte" />
+import type { CreateTaskBody, UpdateTaskBody } from '@critical-path/core/schemas';
 import type { CriticalPathClient } from '@critical-path/client';
 import { type Task, type TaskStatus, isTempTaskId } from '@critical-path/core';
 
@@ -27,11 +28,14 @@ export class TaskState {
     }
   }
 
-  async createTask(input: Omit<Task, 'id' | 'createdAt' | 'updatedAt'>) {
+  async createTask(input: CreateTaskBody) {
     const tempId = `temp_${Date.now()}_${Math.random().toString(36).substring(2, 7)}`;
     const now = new Date().toISOString();
     const tempTask: Task = {
       ...input,
+      // Placeholders until the server responds with the workflow's real defaults
+      status: input.status ?? 'todo',
+      priority: input.priority ?? 'medium',
       id: tempId,
       createdAt: now,
       updatedAt: now
@@ -60,7 +64,7 @@ export class TaskState {
     }
   }
 
-  async updateTask(taskId: string, updates: Partial<Task>) {
+  async updateTask(taskId: string, updates: UpdateTaskBody) {
     let targetId = taskId;
     if (this.tempToRealIdMap.has(taskId)) {
       targetId = this.tempToRealIdMap.get(taskId)!;