@hasna/todos 0.11.34 → 0.11.35

package/dist/mcp/index.js

@@ -830,6 +830,22 @@ var init_migrations = __esm(() => {
   ALTER TABLE tasks ADD COLUMN cycle_id TEXT REFERENCES cycles(id) ON DELETE SET NULL;
   CREATE INDEX IF NOT EXISTS idx_tasks_cycle ON tasks(cycle_id) WHERE cycle_id IS NOT NULL;
   INSERT OR IGNORE INTO _migrations (id) VALUES (49);
+  `,
+    `
+  CREATE TABLE IF NOT EXISTS api_keys (
+    id TEXT PRIMARY KEY,
+    name TEXT NOT NULL,
+    key_hash TEXT NOT NULL UNIQUE,
+    prefix TEXT NOT NULL UNIQUE,
+    permissions TEXT NOT NULL DEFAULT '["*"]',
+    created_at TEXT NOT NULL DEFAULT (datetime('now')),
+    last_used_at TEXT,
+    expires_at TEXT,
+    revoked_at TEXT
+  );
+  CREATE INDEX IF NOT EXISTS idx_api_keys_prefix ON api_keys(prefix);
+  CREATE INDEX IF NOT EXISTS idx_api_keys_active ON api_keys(revoked_at, expires_at);
+  INSERT OR IGNORE INTO _migrations (id) VALUES (50);
   `
   ];
 });
@@ -1228,6 +1244,20 @@ function ensureSchema(db) {
   ensureIndex("CREATE INDEX IF NOT EXISTS idx_cycles_dates ON cycles(start_date, end_date)");
   ensureColumn("tasks", "cycle_id", "TEXT REFERENCES cycles(id) ON DELETE SET NULL");
   ensureIndex("CREATE INDEX IF NOT EXISTS idx_tasks_cycle ON tasks(cycle_id) WHERE cycle_id IS NOT NULL");
+  ensureTable("api_keys", `
+    CREATE TABLE api_keys (
+      id TEXT PRIMARY KEY,
+      name TEXT NOT NULL,
+      key_hash TEXT NOT NULL UNIQUE,
+      prefix TEXT NOT NULL UNIQUE,
+      permissions TEXT NOT NULL DEFAULT '["*"]',
+      created_at TEXT NOT NULL DEFAULT (datetime('now')),
+      last_used_at TEXT,
+      expires_at TEXT,
+      revoked_at TEXT
+    )`);
+  ensureIndex("CREATE INDEX IF NOT EXISTS idx_api_keys_prefix ON api_keys(prefix)");
+  ensureIndex("CREATE INDEX IF NOT EXISTS idx_api_keys_active ON api_keys(revoked_at, expires_at)");
 }
 function backfillTaskTags(db) {
   try {
@@ -12655,14 +12685,224 @@ See https://www.postgresql.org/docs/current/libpq-ssl.html for libpq SSL mode de
   init_adapter();
 });
 
+// src/db/agent-names.ts
+function normalizeAgentNameInput(name) {
+  return name.trim().toLowerCase();
+}
+function hasGeneratedNumericSuffix(name) {
+  return NUMERIC_SUFFIX_RE.test(normalizeAgentNameInput(name));
+}
+function isGenericAgentName(name) {
+  const normalized = normalizeAgentNameInput(name);
+  if (RESERVED_GENERIC_NAMES.has(normalized))
+    return true;
+  for (const generic of RESERVED_GENERIC_NAMES) {
+    if (normalized === `${generic}s`)
+      return true;
+    if (normalized.match(new RegExp(`^${generic}\\d+$`)))
+      return true;
+    if (normalized.match(new RegExp(`^${generic}[-_]\\d+$`)))
+      return true;
+  }
+  return false;
+}
+function isBlockedAgentName(name) {
+  const normalized = normalizeAgentNameInput(name);
+  return isGenericAgentName(normalized) || hasGeneratedNumericSuffix(normalized) || !ONE_WORD_NAME_RE.test(normalized);
+}
+function suggestAgentNames(existingNames = []) {
+  const existing = new Set([...existingNames].map(normalizeAgentNameInput));
+  return PREFERRED_AGENT_NAMES.filter((name) => !existing.has(name));
+}
+function validateAgentName(name, existingNames = []) {
+  const normalized = normalizeAgentNameInput(name);
+  const suggestions = suggestAgentNames(existingNames).slice(0, 5);
+  if (!normalized) {
+    throw new InvalidAgentNameError(name, "choose a real one-word name instead of an empty value", suggestions);
+  }
+  if (/\s/.test(normalized)) {
+    throw new InvalidAgentNameError(name, "use a single word, preferably a Roman or Greek name", suggestions);
+  }
+  if (normalized.length < 3) {
+    throw new InvalidAgentNameError(name, "use a more distinctive name with at least three characters", suggestions);
+  }
+  if (isGenericAgentName(normalized)) {
+    throw new InvalidAgentNameError(name, "generic names like agent, agent-1, assistant, or worker-2 are reserved", suggestions);
+  }
+  if (hasGeneratedNumericSuffix(normalized)) {
+    throw new InvalidAgentNameError(name, "numbered suffix names are not allowed; pick a distinct human-readable name", suggestions);
+  }
+  if (!ONE_WORD_NAME_RE.test(normalized)) {
+    throw new InvalidAgentNameError(name, "use one word made of letters only, preferably a Roman or Greek name", suggestions);
+  }
+  return normalized;
+}
+function tableHasColumn(db, table, column) {
+  try {
+    return db.query(`PRAGMA table_info(${table})`).all().some((row) => row.name === column);
+  } catch {
+    return false;
+  }
+}
+function updateReferences(db, oldName, newName) {
+  const refs = [
+    ["tasks", "assigned_to"],
+    ["tasks", "agent_id"],
+    ["tasks", "locked_by"],
+    ["tasks", "assigned_by"],
+    ["plans", "agent_id"],
+    ["sessions", "agent_id"],
+    ["task_comments", "agent_id"],
+    ["task_history", "agent_id"],
+    ["webhooks", "agent_id"],
+    ["task_files", "agent_id"],
+    ["task_time_logs", "agent_id"],
+    ["task_watchers", "agent_id"],
+    ["task_checkpoints", "agent_id"],
+    ["task_heartbeats", "agent_id"],
+    ["project_agent_roles", "agent_id"]
+  ];
+  let changed = 0;
+  for (const [table, column] of refs) {
+    if (!tableHasColumn(db, table, column))
+      continue;
+    try {
+      changed += db.run(`UPDATE ${table} SET ${column} = ? WHERE LOWER(${column}) = ?`, [newName, oldName]).changes;
+    } catch {}
+  }
+  return changed;
+}
+function normalizeGeneratedAgentNames(db) {
+  const rows = db.query("SELECT * FROM agents ORDER BY created_at, id").all();
+  const existing = new Set(rows.map((agent) => normalizeAgentNameInput(agent.name)));
+  const renamed = [];
+  for (const agent of rows) {
+    const oldName = normalizeAgentNameInput(agent.name);
+    if (!isBlockedAgentName(oldName))
+      continue;
+    const candidates = suggestAgentNames(existing);
+    const replacement = candidates[0];
+    if (!replacement) {
+      throw new Error("No safe agent names are available for normalization");
+    }
+    existing.delete(oldName);
+    existing.add(replacement);
+    db.run("UPDATE agents SET name = ?, last_seen_at = ? WHERE id = ?", [replacement, now(), agent.id]);
+    const referenceUpdates = updateReferences(db, oldName, replacement);
+    renamed.push({
+      id: agent.id,
+      old_name: oldName,
+      new_name: replacement,
+      reference_updates: referenceUpdates
+    });
+  }
+  return renamed;
+}
+var InvalidAgentNameError, ROMAN_AGENT_NAMES, GREEK_AGENT_NAMES, NICE_AGENT_NAMES, PREFERRED_AGENT_NAMES, RESERVED_GENERIC_NAMES, NUMERIC_SUFFIX_RE, ONE_WORD_NAME_RE;
+var init_agent_names = __esm(() => {
+  init_database();
+  InvalidAgentNameError = class InvalidAgentNameError extends Error {
+    suggestions;
+    constructor(name, reason, suggestions = []) {
+      super(`Invalid agent name "${name}": ${reason}${suggestions.length > 0 ? `. Try: ${suggestions.join(", ")}` : ""}`);
+      this.name = "InvalidAgentNameError";
+      this.suggestions = suggestions;
+    }
+  };
+  ROMAN_AGENT_NAMES = [
+    "caesar",
+    "augustus",
+    "marcus",
+    "brutus",
+    "cicero",
+    "cato",
+    "nero",
+    "claudius",
+    "tiberius",
+    "hadrian",
+    "trajan",
+    "vespasian",
+    "domitian",
+    "caligula",
+    "commodus",
+    "livia",
+    "julia",
+    "octavia",
+    "claudia",
+    "agrippina",
+    "cornelia",
+    "valeria",
+    "fulvia",
+    "hortensia",
+    "fabia"
+  ];
+  GREEK_AGENT_NAMES = [
+    "athena",
+    "apollo",
+    "artemis",
+    "hera",
+    "iris",
+    "hector",
+    "achilles",
+    "odysseus",
+    "theseus",
+    "pericles",
+    "solon",
+    "sophia",
+    "thalia",
+    "calliope",
+    "clio",
+    "phoebe",
+    "daphne",
+    "leonidas",
+    "andromeda",
+    "cassander"
+  ];
+  NICE_AGENT_NAMES = [
+    "atlas",
+    "aurora",
+    "ember",
+    "nova",
+    "orion",
+    "rhea",
+    "selene",
+    "sirius",
+    "vesper",
+    "zephyr"
+  ];
+  PREFERRED_AGENT_NAMES = [
+    ...ROMAN_AGENT_NAMES,
+    ...GREEK_AGENT_NAMES,
+    ...NICE_AGENT_NAMES
+  ];
+  RESERVED_GENERIC_NAMES = new Set([
+    "agent",
+    "agents",
+    "ai",
+    "assistant",
+    "bot",
+    "coder",
+    "default",
+    "helper",
+    "model",
+    "system",
+    "user",
+    "worker"
+  ]);
+  NUMERIC_SUFFIX_RE = /[-_]\d+$/;
+  ONE_WORD_NAME_RE = /^[a-z]+$/;
+});
+
 // src/db/agents.ts
 var exports_agents = {};
 __export(exports_agents, {
   updateAgentActivity: () => updateAgentActivity,
   updateAgent: () => updateAgent,
   unarchiveAgent: () => unarchiveAgent,
+  suggestAgentNames: () => suggestAgentNames,
   releaseAgent: () => releaseAgent,
   registerAgent: () => registerAgent,
+  normalizeGeneratedAgentNames: () => normalizeGeneratedAgentNames,
   matchCapabilities: () => matchCapabilities,
   listAgents: () => listAgents,
   isAgentConflict: () => isAgentConflict,
@@ -12674,7 +12914,8 @@ __export(exports_agents, {
   getAgent: () => getAgent,
   deleteAgent: () => deleteAgent,
   autoReleaseStaleAgents: () => autoReleaseStaleAgents,
-  archiveAgent: () => archiveAgent
+  archiveAgent: () => archiveAgent,
+  InvalidAgentNameError: () => InvalidAgentNameError
 });
 function getActiveWindowMs() {
   const env = process.env["TODOS_AGENT_TIMEOUT_MS"];
@@ -12697,7 +12938,7 @@ function getAvailableNamesFromPool(pool, db) {
   autoReleaseStaleAgents(db);
   const cutoff = new Date(Date.now() - getActiveWindowMs()).toISOString();
   const activeNames = new Set(db.query("SELECT name FROM agents WHERE status = 'active' AND last_seen_at > ?").all(cutoff).map((r) => r.name.toLowerCase()));
-  return pool.filter((name) => !activeNames.has(name.toLowerCase()));
+  return pool.map(normalizeAgentNameInput).filter((name) => !activeNames.has(name));
 }
 function shortUuid() {
   return crypto.randomUUID().slice(0, 8);
@@ -12713,7 +12954,8 @@ function rowToAgent(row) {
 }
 function registerAgent(input, db) {
   const d = db || getDatabase();
-  const normalizedName = input.name.trim().toLowerCase();
+  const existingNames = d.query("SELECT name FROM agents").all().map((row) => row.name);
+  const normalizedName = validateAgentName(input.name, existingNames);
   const existing = getAgentByName(normalizedName, d);
   if (existing) {
     const lastSeenMs = new Date(existing.last_seen_at).getTime();
@@ -12846,7 +13088,8 @@ function updateAgent(id, input, db) {
   const sets = ["last_seen_at = ?"];
   const params = [now()];
   if (input.name !== undefined) {
-    const newName = input.name.trim().toLowerCase();
+    const existingNames = d.query("SELECT name FROM agents WHERE id != ?").all(id).map((row) => row.name);
+    const newName = validateAgentName(input.name, existingNames);
     const holder = getAgentByName(newName, d);
     if (holder && holder.id !== id) {
       const lastSeenMs = new Date(holder.last_seen_at).getTime();
@@ -12957,6 +13200,7 @@ function getCapableAgents(capabilities, opts, db) {
 }
 var init_agents = __esm(() => {
   init_database();
+  init_agent_names();
 });
 
 // src/types/index.ts
@@ -25474,8 +25718,8 @@ function registerAgentTools(server, { shouldRegisterTool, resolveId, formatError
     });
   }
   if (shouldRegisterTool("register_agent")) {
-    server.tool("register_agent", "Register an agent. Any name is allowed \u2014 the configured pool is advisory, not enforced. Returns a conflict error if the name is held by a recently-active agent.", {
-      name: exports_external.string().describe("Agent name \u2014 any name is allowed. Use suggest_agent_name to see pool suggestions and avoid conflicts."),
+    server.tool("register_agent", "Register an agent with a distinctive one-word name. Generic/generated names like agent, agent-1, assistant, or worker-2 are rejected. Prefer Roman or Greek names from suggest_agent_name.", {
+      name: exports_external.string().describe("Distinctive one-word agent name. Use suggest_agent_name first; avoid agent, agent-1, and other numbered generated names."),
       description: exports_external.string().optional(),
       role: exports_external.string().optional(),
       title: exports_external.string().optional(),
@@ -25519,7 +25763,7 @@ Last seen: ${agent.last_seen_at}`
     });
   }
   if (shouldRegisterTool("suggest_agent_name")) {
-    server.tool("suggest_agent_name", "Get available agent names for a project. Shows configured pool, active agents, and suggestions. If no pool is configured, any name is allowed.", {
+    server.tool("suggest_agent_name", "Get available Roman/Greek-style agent names for a project. Use these instead of generic generated names.", {
       working_dir: exports_external.string().optional().describe("Your working directory \u2014 used to look up the project's allowed name pool from config")
     }, async ({ working_dir }) => {
       try {
@@ -25527,8 +25771,30 @@ Last seen: ${agent.last_seen_at}`
         const cutoff = new Date(Date.now() - 30 * 60 * 1000).toISOString();
         const allActive = listAgents().filter((a) => a.last_seen_at > cutoff);
         if (!pool) {
+          const suggestions = getAvailableNamesFromPool([
+            "caesar",
+            "augustus",
+            "marcus",
+            "brutus",
+            "cicero",
+            "cato",
+            "nero",
+            "claudius",
+            "tiberius",
+            "hadrian",
+            "athena",
+            "apollo",
+            "artemis",
+            "iris",
+            "hector",
+            "sophia",
+            "thalia",
+            "phoebe",
+            "daphne"
+          ], getDatabase());
           const lines2 = [
-            "No agent pool configured \u2014 any name is allowed.",
+            "No project pool configured. Use a distinctive one-word name; generic generated names are blocked.",
+            `Suggested names: ${suggestions.slice(0, 8).join(", ")}`,
             allActive.length > 0 ? `Active agents (avoid these names): ${allActive.map((a) => `${a.name} (seen ${Math.round((Date.now() - new Date(a.last_seen_at).getTime()) / 60000)}m ago)`).join(", ")}` : "No active agents.",
             `
 To restrict names, configure agent_pool or project_pools in ~/.hasna/todos/config.json`

package/dist/mcp/tools/agents.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agents.d.ts","sourceRoot":"","sources":["../../../src/mcp/tools/agents.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAMzE,UAAU,UAAU;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,KAAK,OAAO,GAAG;IACb,kBAAkB,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC;IAC9C,SAAS,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,KAAK,MAAM,CAAC;IAClD,WAAW,EAAE,CAAC,CAAC,EAAE,OAAO,KAAK,MAAM,CAAC;IACpC,aAAa,EAAE,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IACvC,aAAa,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,UAAU,GAAG,SAAS,CAAC;CAC5D,CAAC;AAEF,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,kBAAkB,EAAE,SAAS,EAAE,WAAW,EAAE,aAAa,EAAE,aAAa,EAAE,EAAE,OAAO,GAAG,IAAI,CAmbjJ"}
+{"version":3,"file":"agents.d.ts","sourceRoot":"","sources":["../../../src/mcp/tools/agents.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAMzE,UAAU,UAAU;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,KAAK,OAAO,GAAG;IACb,kBAAkB,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC;IAC9C,SAAS,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,KAAK,MAAM,CAAC;IAClD,WAAW,EAAE,CAAC,CAAC,EAAE,OAAO,KAAK,MAAM,CAAC;IACpC,aAAa,EAAE,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IACvC,aAAa,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,UAAU,GAAG,SAAS,CAAC;CAC5D,CAAC;AAEF,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,kBAAkB,EAAE,SAAS,EAAE,WAAW,EAAE,aAAa,EAAE,aAAa,EAAE,EAAE,OAAO,GAAG,IAAI,CAwbjJ"}