@hasna/loops 0.4.5 → 0.4.7

package/CHANGELOG.md

@@ -5,6 +5,46 @@ documented in this file. Version entries are generated from the
 conventional-commit git history; one commit maps to one released patch version
 unless noted.
 
+## 0.4.7 (2026-07-04)
+
+Routing hardening for PR merge/drain automation.
+
+### Fixed
+
+- **Todos drain:** admit registered repo-project task sources while pinning
+  routed work to the scanned source project, preventing task-controlled nested
+  route paths from moving worker execution into another repository.
+- **PR lifecycle routing:** propagate PR author and reviewer evidence into
+  reviewer and merger lifecycle prompts so merge routing can select a valid
+  non-author reviewer and keep reviewer/merger steps separate.
+
+## 0.4.6 (2026-07-03)
+
+Reliability hardening from a full audit of the runtime, control surfaces, and
+todos routing integration.
+
+### Fixed
+
+- **Runtime:** repair a due slot that holds a terminal run (idempotent
+  `advanceLoop`) so a daemon death between `finalizeRun` and `advanceLoop` can no
+  longer wedge a loop into never running again.
+- **Workflow runs:** recover dead-pid steps on resumed idempotent runs and wrap
+  the step loop so an unexpected error finalizes the run `failed` instead of
+  leaving it `running` forever.
+- **Runner:** abort execution after repeated heartbeat failures on a lost lease.
+- **Daemon:** `stopDaemon` terminates a live pidfile process even when its lease
+  is expired/mismatched; startup inline-owner check verifies kernel start time.
+- **Store:** `deleteLoop` removes child run history; `finalizeRun` guards
+  `status='running'`; ambiguous-name resolution ignores archived namesakes;
+  rerunning a terminal manual goal creates a fresh goal.
+- **CLI/API/SDK/MCP:** add `daemon logs --tail`; `PATCH /v1/loops/:id` no longer
+  wipes schedule fields or 500s; resume-from-stopped recomputes `nextRunAt` so the
+  loop is actually due; mutation paths reject ambiguous names; numeric flags are
+  validated.
+- **Routing:** honor the `route:enabled` opt-in tag; surface fatal drain errors
+  (non-zero exit, `fatal` count) instead of a green route-nothing run; tag routed
+  failure tasks `loops` and emit the correct `todos task upsert` command.
+
 ## 0.4.5 (2026-07-03)
 
 Upgrade-path fix for existing `0.4.1`-era local stores.

package/README.md

@@ -882,11 +882,11 @@ On Linux this writes a user systemd service. On macOS it writes a LaunchAgent pl
 The adapters intentionally use provider command surfaces instead of pretending every agent has one SDK:
 
 - Claude uses `claude -p --output-format json` and safe-mode/local setting sources by default.
-- Codewith uses durable `codewith --ask-for-approval never agent start` background-agent runs by default, then polls `codewith agent read` until the run is terminal and records compact status/event evidence. Remote Codewith agent steps fail closed until remote durable readback is implemented, so workflows do not advance immediately after enqueue. OpenLoops rejects Codewith `extraArgs` that try to force `exec`, `--ephemeral`, or other non-durable exec-only flags for task-lifecycle, planner, worker, verifier, reviewer, release, or other long-running agentic work.
+- Codewith uses durable `codewith --ask-for-approval never agent start` background-agent runs by default, then polls `codewith agent read` until the run is terminal. While the step is running, OpenLoops records bounded agent id/status updates as `step_progress` workflow events and as the running step's compact stdout; on terminal completion it records compact status/event evidence. Remote Codewith agent steps fail closed until remote durable readback is implemented, so workflows do not advance immediately after enqueue. OpenLoops rejects Codewith `extraArgs` that try to force `exec`, `--ephemeral`, or other non-durable exec-only flags for task-lifecycle, planner, worker, verifier, reviewer, release, or other long-running agentic work.
 - AI Copilot and OpenCode use `run --format json --pure`. OpenCode requires an explicit provider/model id because ambient OpenCode config is machine-specific.
 - Cursor is CLI-first for now via the standalone `agent -p` binary. OpenLoops no longer falls back to `cursor agent`; install the standalone Cursor Agent CLI so preflight and scheduled runs use the same executable.
 - Codex uses `codex --ask-for-approval never exec --json --ephemeral --skip-git-repo-check`, with `--add-dir` for explicit extra writable directories where supported.
-- Agent prompts are sent through child stdin instead of argv where the provider supports stdin. Codewith durable background agents currently accept prompts as native `agent start` arguments, so OpenLoops stores only bounded status/event evidence and omits raw Codewith event payloads from workflow stdout.
+- Agent prompts are sent through child stdin instead of argv where the provider supports stdin. Codewith durable background agents currently accept prompts as native `agent start` arguments, so OpenLoops stores only bounded status/event evidence and omits raw Codewith prompt text and raw event payloads from workflow stdout.
 - When `--account` or a step `account` is set, OpenLoops resolves `accounts env <profile> --tool <tool>` before spawning the target, strips inherited tool home/API-key variables, and applies the selected profile only to that process. Missing account profiles fail before the provider binary receives the prompt.
 - `--auth-profile` and step `authProfile` are provider-native auth selectors. They currently apply to Codewith and are passed to Codewith as `--auth-profile <name>` before `agent start/read/logs`; they do not call OpenAccounts.
 - `--sandbox` maps to provider-native sandbox flags. Codewith/Codex accept `read-only`, `workspace-write`, or `danger-full-access`; Cursor accepts `enabled` or `disabled`.

package/dist/api/index.js

@@ -3,7 +3,7 @@
 // package.json
 var package_default = {
   name: "@hasna/loops",
-  version: "0.4.5",
+  version: "0.4.7",
   description: "Persistent local loop and workflow runner for deterministic commands and headless AI coding agents",
   type: "module",
   main: "dist/index.js",
@@ -889,12 +889,16 @@ async function handleLoopsRequest(ctx, segments) {
   }
   if (segments.length === 1 && ctx.request.method === "PATCH") {
     const body = await readJsonBody(ctx.request, ctx.bodyLimitBytes);
-    const loop = await storage.updateLoop(id, {
-      status: body.status,
-      nextRunAt: body.nextRunAt === null ? undefined : body.nextRunAt,
-      retryScheduledFor: body.retryScheduledFor === null ? undefined : body.retryScheduledFor,
-      expiresAt: body.expiresAt === null ? undefined : body.expiresAt
-    });
+    const patch = {};
+    if ("status" in body && body.status !== undefined)
+      patch.status = body.status;
+    if ("nextRunAt" in body)
+      patch.nextRunAt = body.nextRunAt === null ? undefined : body.nextRunAt;
+    if ("retryScheduledFor" in body)
+      patch.retryScheduledFor = body.retryScheduledFor === null ? undefined : body.retryScheduledFor;
+    if ("expiresAt" in body)
+      patch.expiresAt = body.expiresAt === null ? undefined : body.expiresAt;
+    const loop = await storage.updateLoop(id, patch);
     return ok({ loop: publicLoop(loop) });
   }
   if (segments.length === 1 && ctx.request.method === "DELETE") {
@@ -923,15 +927,20 @@ async function handleRunsRequest(ctx, segments) {
   if (segments.length === 2 && id && segments[1] === "recover" && ctx.request.method === "POST") {
     const storage2 = requireStorage(ctx.storage);
     const now = ctx.now();
+    const target = await storage2.getRun(id);
+    if (!target)
+      return fail("run_not_found", 404);
     const recovered = await storage2.recoverExpiredRunLeasesDetailed(now);
-    for (const run of recovered.abandoned) {
+    const abandoned = recovered.abandoned.filter((run) => run.id === id);
+    const deferred = recovered.deferred.filter((run) => run.id === id);
+    for (const run of abandoned) {
       const loop = await storage2.getLoop(run.loopId);
       if (loop)
         await advanceLoopAfterRun(storage2, loop, run, new Date(run.finishedAt ?? now), false);
     }
     return ok({
-      abandoned: recovered.abandoned.map((run) => publicRun(run, false, { redactError: true })),
-      deferred: recovered.deferred.map((run) => publicRun(run, false, { redactError: true }))
+      abandoned: abandoned.map((run) => publicRun(run, false, { redactError: true })),
+      deferred: deferred.map((run) => publicRun(run, false, { redactError: true }))
     });
   }
   const storage = requireStorage(ctx.storage);