@getpipher/armory-todo 0.5.1 → 0.5.2

package/extensions/todo.ts

@@ -42,6 +42,7 @@ import { autoPruneOnSessionStart } from "../src/auto-prune";
 import { loadConfig } from "../src/config";
 import { projectsOverview } from "../src/projects";
 import { renameProject } from "../src/registry";
+import { readAndClearWipeAlert } from "../src/backup";
 
 const ACTIONS = ["list", "add", "update", "get", "complete", "delete", "clear", "park", "prune", "restore", "health", "projects", "project_rename"] as const;
 
@@ -79,6 +80,16 @@ export default function (pi: ExtensionAPI) {
   // Warm + report on session start (every new/resume/fork/reload).
   pi.on("session_start", async (_event, ctx) => {
     try {
+      // v0.5.2: surface a pending wipe-alert sentinel FIRST (most prominent).
+      let wipeMsg = "";
+      try {
+        const alert = readAndClearWipeAlert();
+        if (alert) {
+          wipeMsg = `⚠ WIPE RECOVERED: ${alert.before}→${alert.after} at ${alert.at}${alert.snap ? `, snap=${alert.snap}` : ""} — check ~/.pi/agent/todo/todo-audit.log + run \`ps aux | grep -iE 'tsx|pi'\` to catch the wiper live`;
+        }
+      } catch {
+        // alert optional
+      }
       let autoMsg = "";
       let ageDays = 7;
       try {
@@ -101,7 +112,7 @@ export default function (pi: ExtensionAPI) {
       } catch {
         // health check optional
       }
-      if (ctx.hasUI) ctx.ui.notify(msg, "info");
+      if (ctx.hasUI) ctx.ui.notify((wipeMsg ? wipeMsg + "\n" : "") + msg, "info");
     } catch {
       // store unavailable — never crash the session
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@getpipher/armory-todo",
-  "version": "0.5.1",
+  "version": "0.5.2",
   "description": "Global, cross-session TODO for pi \u2014 persists across all sessions and is auto-injected into every prompt. The disk-backed counterpart to branch-scoped pi todo extensions.",
   "keywords": [
     "pi-package",

package/src/backup.ts

@@ -14,7 +14,7 @@
 //
 // Pure fs helpers (no pi imports) so they're unit-testable in isolation.
 
-import { chmodSync, copyFileSync, existsSync, mkdirSync, appendFileSync, statSync, readFileSync } from "node:fs";
+import { chmodSync, copyFileSync, existsSync, mkdirSync, appendFileSync, statSync, readFileSync, writeFileSync, unlinkSync } from "node:fs";
 import { dirname, join } from "node:path";
 import { getTodoDir } from "./paths.ts";
 
@@ -80,4 +80,44 @@ export function countTodosInFile(path: string): number {
 
 function readJson(path: string): any {
   return JSON.parse(readFileSync(path, "utf8"));
+}
+
+// --- v0.5.2 wipe alert (one-shot sentinel) ---
+const WIPE_ALERT_PATH = join(getTodoDir(), ".wipe-alert");
+
+/** On a drop, write a one-shot sentinel at <TODO_DIR>/.wipe-alert so the next
+ *  pi session_start can surface the recovery prominently. Overwritten by each
+ *  new drop (the latest wins). The session_start handler reads + deletes it. */
+export function writeWipeAlert(before: number, after: number, snap: string | null): void {
+  try {
+    const dir = getTodoDir();
+    mkdirSync(dir, { recursive: true });
+    const path = join(dir, ".wipe-alert");
+    const payload = {
+      at: new Date().toISOString(),
+      before,
+      after,
+      snap: snap ? snap.split("/").pop() : null,
+      snapPath: snap,
+    };
+    writeFileSync(path, JSON.stringify(payload, null, 2) + "\n", { encoding: "utf8", mode: 0o600 });
+    try { chmodSync(path, 0o600); } catch { /* fs may ignore mode */ }
+  } catch {
+    // best-effort; alert must not block the write
+  }
+}
+
+/** Read + delete the wipe-alert sentinel (one-shot). Returns the payload if a
+ *  pending alert exists, else null. The caller surfaces it in session_start
+ *  then it's gone (until the next drop). */
+export function readAndClearWipeAlert(): { at: string; before: number; after: number; snap: string | null; snapPath: string | null } | null {
+  try {
+    const path = join(getTodoDir(), ".wipe-alert");
+    if (!existsSync(path)) return null;
+    const payload = JSON.parse(readFileSync(path, "utf8"));
+    try { unlinkSync(path); } catch { /* best-effort clear */ }
+    return payload;
+  } catch {
+    return null;
+  }
 }

package/src/todo-store.ts

@@ -22,7 +22,7 @@ import { migrateIfNeeded, migrateV2ToV3 } from "./migrate.ts";
 import { loadConfig } from "./config.ts";
 import { loadRegistry, getProjectEntry } from "./registry.ts";
 import { checkNotesCap, checkProjectCap, overBudgetProjects } from "./caps.ts";
-import { backupFile, snapshotOnDrop, appendAudit, countTodosInFile } from "./backup.ts";
+import { backupFile, snapshotOnDrop, appendAudit, countTodosInFile, writeWipeAlert } from "./backup.ts";
 
 export type Priority = "low" | "med" | "high" | "critical";
 export type Status = "open" | "in_progress" | "parked" | "done" | "cancelled";
@@ -168,6 +168,7 @@ export function saveStore(store: Store): void {
   }
   renameSync(tmp, path);
   appendAudit("todo", before, after, dropSnap);
+  if (after < before) writeWipeAlert(before, after, dropSnap);
 }
 
 function assertPriority(p: unknown): asserts p is Priority {