@hasna/todos 0.11.75 → 0.11.81

package/README.md

@@ -477,6 +477,14 @@ version, compact workflow pointers, and an `automation` object containing only
 boolean routing gates such as `no_auto`, `manual_required`,
 `requires_approval`, and `approval_required`.
 
+When running route smokes or tests with an explicit temp/in-memory task database
+through `TODOS_DB_PATH` or `HASNA_TODOS_DB_PATH`, also set `HASNA_EVENTS_DIR` or
+`HASNA_EVENTS_HOME` to a temp event store. Without an explicit event directory,
+Todos suppresses shared event emission for temp task databases so route-enabled
+scratch tasks cannot trigger global OpenLoops workers. Set
+`HASNA_TODOS_ALLOW_GLOBAL_EVENTS_FROM_TEMP_DB=1` only for deliberate integration
+tests that must exercise the global event bus.
+
 Production task-created routes should fail closed:
 
 - Require one explicit opt-in, either task metadata `route_enabled=true` or an

package/dist/cli/cloud-router.d.ts

@@ -0,0 +1,71 @@
+/**
+ * Client-side self_hosted cloud routing for the `todos` CLI.
+ *
+ * THE MISSING PIECE (B2): historically the CLI always read/wrote the local
+ * SQLite store even when a machine was flipped to `self_hosted` — there was
+ * ZERO `/v1` / bearer / API-URL code on the client, so `HASNA_TODOS_*` env had
+ * no effect. This module wires the CLI's task data path to the cloud HTTP API
+ * (`https://todos.hasna.xyz/v1`) via the LOCKED `@hasna/contracts` HTTP storage
+ * client whenever the client-flip contract resolves to `cloud-http`:
+ *
+ *   mode = self_hosted (or cloud)  AND  HASNA_TODOS_API_URL  AND  HASNA_TODOS_API_KEY
+ *
+ * When those are set, ALL task reads and writes go to the cloud with the bearer
+ * key — NOT local, NOT a DSN. When they are unset, the client falls straight
+ * back to the local SQLite store. Misconfigured cloud (mode set but URL/key
+ * missing) THROWS via the contracts resolver so we never silently drift back to
+ * the wrong dataset.
+ *
+ * SAFETY: reversible by construction (unset the two env vars -> local). Never
+ * logs or embeds the API key (it lives only inside the transport). No DSN, no
+ * subnet routing — pure API-client path per the locked architecture.
+ */
+import { type HasnaStorageClient } from "@hasna/contracts/client/storage";
+import type { Task, TaskFilter } from "../types/index.js";
+type Env = Record<string, string | undefined>;
+/**
+ * Resolve the todos cloud storage client from the environment. Returns a ready
+ * client when the flip resolves to `cloud-http`, or `null` for local. Throws
+ * when cloud is requested (mode=self_hosted/cloud) but the URL or key is missing
+ * — no silent local fallback for a misconfigured cloud request.
+ */
+export declare function getTodosCloudClient(env?: Env): HasnaStorageClient | null;
+/** True when the CLI should route task reads/writes to the cloud API. */
+export declare function isCloudRouting(env?: Env): boolean;
+/** Test hook: clear the memoized client (e.g. after mutating env in a test). */
+export declare function resetTodosCloudClient(): void;
+/** List tasks from the cloud (`GET /v1/tasks`). Returns the `tasks` array. */
+export declare function cloudListTasks(client: HasnaStorageClient, filter?: TaskFilter): Promise<Task[]>;
+/** Fetch one task by id (`GET /v1/tasks/:id`); `null` on 404. */
+export declare function cloudGetTask(client: HasnaStorageClient, id: string): Promise<Task | null>;
+/** Create a task (`POST /v1/tasks`, retry-safe idempotency key). */
+export declare function cloudCreateTask(client: HasnaStorageClient, input: Record<string, unknown>): Promise<Task>;
+/** Update a task (`PATCH /v1/tasks/:id`). */
+export declare function cloudUpdateTask(client: HasnaStorageClient, id: string, patch: Record<string, unknown>): Promise<Task>;
+/** Delete a task (`DELETE /v1/tasks/:id`); resolves for 2xx and 404. */
+export declare function cloudDeleteTask(client: HasnaStorageClient, id: string): Promise<boolean>;
+/** Run a task lifecycle action (`POST /v1/tasks/:id/{start|complete|fail|claim}`). */
+export declare function cloudTaskAction(client: HasnaStorageClient, id: string, action: "start" | "complete" | "fail" | "claim", body?: Record<string, unknown>): Promise<Task>;
+/** Queue status summary from the cloud (`GET /v1/stats`). */
+export interface CloudStats {
+    tasks: number;
+    tasks_all?: number;
+    subtasks?: number;
+    projects?: number;
+    [key: string]: unknown;
+}
+/**
+ * Fetch the cloud queue summary (`GET /v1/stats`). Used by the MCP `get_status`
+ * tool so a flipped machine reports the shared cloud totals rather than its
+ * local SQLite island.
+ */
+export declare function cloudGetStats(client: HasnaStorageClient): Promise<CloudStats>;
+/**
+ * Count tasks matching a filter. The `/v1/tasks` list response now returns a
+ * SQL-side `total` (full match count, independent of limit/offset), so we ask for
+ * a single row and read `total` instead of pulling the whole result set into the
+ * client (which previously loaded every matching task over HTTP just to count).
+ */
+export declare function cloudCountTasks(client: HasnaStorageClient, filter?: TaskFilter): Promise<number>;
+export {};
+//# sourceMappingURL=cloud-router.d.ts.map

package/dist/cli/cloud-router.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloud-router.d.ts","sourceRoot":"","sources":["../../src/cli/cloud-router.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,OAAO,EAAwB,KAAK,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AAChG,OAAO,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAE1D,KAAK,GAAG,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;AAI9C;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,GAAE,GAAwB,GAAG,kBAAkB,GAAG,IAAI,CAiB5F;AAED,yEAAyE;AACzE,wBAAgB,cAAc,CAAC,GAAG,GAAE,GAAwB,GAAG,OAAO,CAErE;AAED,gFAAgF;AAChF,wBAAgB,qBAAqB,IAAI,IAAI,CAE5C;AAwBD,8EAA8E;AAC9E,wBAAsB,cAAc,CAAC,MAAM,EAAE,kBAAkB,EAAE,MAAM,GAAE,UAAe,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,CAIzG;AAED,iEAAiE;AACjE,wBAAsB,YAAY,CAAC,MAAM,EAAE,kBAAkB,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,CAG/F;AAED,oEAAoE;AACpE,wBAAsB,eAAe,CAAC,MAAM,EAAE,kBAAkB,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAE/G;AAED,6CAA6C;AAC7C,wBAAsB,eAAe,CAAC,MAAM,EAAE,kBAAkB,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAE3H;AAED,wEAAwE;AACxE,wBAAsB,eAAe,CAAC,MAAM,EAAE,kBAAkB,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAG9F;AAED,sFAAsF;AACtF,wBAAsB,eAAe,CACnC,MAAM,EAAE,kBAAkB,EAC1B,EAAE,EAAE,MAAM,EACV,MAAM,EAAE,OAAO,GAAG,UAAU,GAAG,MAAM,GAAG,OAAO,EAC/C,IAAI,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,GACjC,OAAO,CAAC,IAAI,CAAC,CAGf;AAED,6DAA6D;AAC7D,MAAM,WAAW,UAAU;IACzB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED;;;;GAIG;AACH,wBAAsB,aAAa,CAAC,MAAM,EAAE,kBAAkB,GAAG,OAAO,CAAC,UAAU,CAAC,CAGnF;AAED;;;;;GAKG;AACH,wBAAsB,eAAe,CAAC,MAAM,EAAE,kBAAkB,EAAE,MAAM,GAAE,UAAe,GAAG,OAAO,CAAC,MAAM,CAAC,CAQ1G"}

package/dist/cli/commands/project-commands.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"project-commands.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/project-commands.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAkIzC,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,OAAO,QAq2BvD"}
+{"version":3,"file":"project-commands.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/project-commands.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAoJzC,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,OAAO,QA24BvD"}

package/dist/cli/commands/storage-commands.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"storage-commands.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/storage-commands.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AA8EzC,wBAAgB,oBAAoB,CAAC,GAAG,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAe;;;;EAazF;AAYD,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,OAAO,QAyGvD"}
+{"version":3,"file":"storage-commands.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/storage-commands.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AA2HzC,wBAAgB,oBAAoB,CAAC,GAAG,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAe;;;;EAazF;AAYD,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,OAAO,QA6LvD"}

package/dist/cli/commands/task-commands.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"task-commands.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/task-commands.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AA+LzC,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,OAAO,QAs8BpD"}
+{"version":3,"file":"task-commands.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/task-commands.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAwMzC,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,OAAO,QA+jCpD"}

package/dist/cli/helpers.d.ts

@@ -2,8 +2,30 @@ import { getPackageVersion } from "../lib/package-version.js";
 import type { Project, Task } from "../types/index.js";
 export { getPackageVersion };
 export declare function handleError(e: unknown): never;
+/**
+ * Resolve a user-supplied task reference (full UUID, id prefix, or short_id) to a
+ * canonical task id, CONSISTENTLY across every `todos` subcommand.
+ *
+ * Two rules make this safe whether the machine is `local` or flipped to the shared
+ * `self_hosted` cloud store:
+ *
+ *  1. A full task UUID is authoritative on its own — it is returned verbatim and is
+ *     NEVER required to exist in this box's local SQLite mirror. On a flipped
+ *     machine the task lives in the cloud and may have never synced down; the
+ *     downstream read/write (cloud `GET/PATCH/POST /v1/tasks/:id` or a local query)
+ *     is the single source of truth for existence and reports a precise not-found.
+ *     This is what previously broke: resolver-based commands (comment, inspect,
+ *     lock, deps, …) demanded the row be present locally, so they failed on
+ *     cloud-only tasks even with a valid full UUID, while raw-id commands (show,
+ *     update, start, done) worked — the reported inconsistency.
+ *
+ *  2. A short prefix / short_id is expanded against the local mirror, the only
+ *     prefix index available client-side (the `/v1` API has no prefix lookup).
+ *     Ambiguous or unknown prefixes fail loudly with actionable guidance.
+ */
 export declare function resolveTaskId(partialId: string): string;
 export declare function detectGitRoot(): string | null;
+export declare function shouldSkipAutoProjectForGitRoot(gitRoot: string): boolean;
 /**
  * Resolve an explicitly provided project reference by registered path, exact or
  * partial ID, task list ID, slug, or name. An unresolvable reference is a hard

package/dist/cli/helpers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"helpers.d.ts","sourceRoot":"","sources":["../../src/cli/helpers.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,mBAAmB,CAAC;AAEvD,OAAO,EAAE,iBAAiB,EAAE,CAAC;AAK7B,wBAAgB,WAAW,CAAC,CAAC,EAAE,OAAO,GAAG,KAAK,CAG7C;AAED,wBAAgB,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAcvD;AAED,wBAAgB,aAAa,IAAI,MAAM,GAAG,IAAI,CAM7C;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAgC7D;AAED,wBAAgB,iBAAiB,CAAC,IAAI,EAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,GAAG,SAAS,CAUjF;AAMD,wBAAgB,WAAW,CAAC,IAAI,EAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,GAAG,SAAS,CAE1E;AAED,4EAA4E;AAC5E,wBAAgB,eAAe,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAUjD;AAED,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,MAAM,GAAG,MAAM,EAAE,CAGlF;AA0BD,wBAAgB,SAAS,CAAC,IAAI,EAAE,OAAO,GAAG,IAAI,CAE7C;AAED,wBAAgB,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,GAAG,IAAI,CAI7D;AAED,eAAO,MAAM,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK,MAAM,CAM9D,CAAC;AAEF,eAAO,MAAM,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK,MAAM,CAKhE,CAAC;AAEF,wBAAgB,cAAc,CAAC,CAAC,EAAE,IAAI,GAAG,MAAM,CAQ9C"}
+{"version":3,"file":"helpers.d.ts","sourceRoot":"","sources":["../../src/cli/helpers.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,mBAAmB,CAAC;AAEvD,OAAO,EAAE,iBAAiB,EAAE,CAAC;AAK7B,wBAAgB,WAAW,CAAC,CAAC,EAAE,OAAO,GAAG,KAAK,CAG7C;AAKD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CA8BvD;AAED,wBAAgB,aAAa,IAAI,MAAM,GAAG,IAAI,CAM7C;AAQD,wBAAgB,+BAA+B,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAMxE;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAgC7D;AAED,wBAAgB,iBAAiB,CAAC,IAAI,EAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,GAAG,SAAS,CAWjF;AAMD,wBAAgB,WAAW,CAAC,IAAI,EAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,GAAG,SAAS,CAE1E;AAED,4EAA4E;AAC5E,wBAAgB,eAAe,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAUjD;AAED,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,MAAM,GAAG,MAAM,EAAE,CAGlF;AA0BD,wBAAgB,SAAS,CAAC,IAAI,EAAE,OAAO,GAAG,IAAI,CAE7C;AAED,wBAAgB,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,GAAG,IAAI,CAI7D;AAED,eAAO,MAAM,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK,MAAM,CAM9D,CAAC;AAEF,eAAO,MAAM,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK,MAAM,CAKhE,CAAC;AAEF,wBAAgB,cAAc,CAAC,CAAC,EAAE,IAAI,GAAG,MAAM,CAQ9C"}