@hasna/todos 0.13.0 → 0.13.2

package/dist/lib/dependency-graph.d.ts

@@ -3,7 +3,12 @@
  * Local-only; machine-readable JSON for MCP and CLI.
  */
 import type { Database } from "bun:sqlite";
+import type { Task } from "../types/index.js";
 export declare const DEPENDENCY_GRAPH_SCHEMA = "todos.dependency_graph.v1";
+/** Machine-readable edge read for a single task (`todos deps <id> --json`). */
+export declare const TASK_DEPENDENCY_EDGES_SCHEMA = "todos.task_dependency_edges.v1";
+/** Machine-readable whole-project graph (`todos deps --project <ref> --json`). */
+export declare const PROJECT_DEPENDENCY_GRAPH_SCHEMA = "todos.project_dependency_graph.v1";
 export interface DependencyNode {
     id: string;
     short_id: string | null;
@@ -13,6 +18,63 @@ export interface DependencyNode {
     plan_id: string | null;
     project_id: string | null;
 }
+/**
+ * A single dependency edge: `task_id` depends on `depends_on` (the prerequisite
+ * must complete before the dependent can run). Same orientation as the
+ * `task_dependencies` table and the cloud `/v1/tasks/:id/dependencies` payload.
+ */
+export interface DependencyEdge {
+    task_id: string;
+    depends_on: string;
+}
+/**
+ * A task's direct dependency edges, resolved to nodes with id + status so a
+ * scheduler can honor ordering without a second lookup and without scraping
+ * human output.
+ *
+ * Field orientation — every name means exactly what it says (regression
+ * 4599ef37: `blocked_by` used to carry the DEPENDENTS, so schedulers consuming
+ * it by name gated the wrong side and deadlocked the upstream task of every
+ * chain):
+ *   - `dependencies` = this task's PREREQUISITES (upstream). This task depends
+ *     on them; they must complete first.
+ *   - `blocked_by` = the subset of `dependencies` that is still incomplete —
+ *     the tasks blocking this one RIGHT NOW. Empty means dispatchable. A
+ *     completed or cancelled prerequisite no longer blocks (same rule as
+ *     `getBlockedTasks`/`getBlockingDeps`).
+ *   - `blocks` = this task's DEPENDENTS (downstream). They depend on this
+ *     task; this task blocks THEM. Matches the human `Blocks:` output.
+ * A scheduler gating "is this runnable" cares about `blocked_by`.
+ */
+export interface TaskDependencyEdges {
+    schema_version: typeof TASK_DEPENDENCY_EDGES_SCHEMA;
+    task_id: string;
+    /**
+     * The root task's short id when the caller already holds the row (local
+     * store); `null` from a self-hosted authority, where surfacing it would cost
+     * an extra round trip and consumers key on `task_id` anyway.
+     */
+    short_id: string | null;
+    dependencies: DependencyNode[];
+    blocked_by: DependencyNode[];
+    blocks: DependencyNode[];
+}
+/**
+ * The full dependency graph for a project in one read: every in-scope task as a
+ * node (with status) plus the adjacency list, so a scheduler can compute a
+ * runnable order and detect cycles in a single call. `edges` are the edges
+ * whose dependent (`task_id`) is one of `nodes`; a `depends_on` may reference a
+ * task outside `nodes` (a cross-project prerequisite). `cycles` are computed
+ * over exactly the returned `edges`.
+ */
+export interface ProjectDependencyGraph {
+    schema_version: typeof PROJECT_DEPENDENCY_GRAPH_SCHEMA;
+    generated_at: string;
+    project_id: string | null;
+    nodes: DependencyNode[];
+    edges: DependencyEdge[];
+    cycles: string[][];
+}
 export interface BlockedTaskReport {
     schema_version: typeof DEPENDENCY_GRAPH_SCHEMA;
     task: DependencyNode;
@@ -63,6 +125,18 @@ export interface GraphFilter {
     status?: string[];
     limit?: number;
 }
+/**
+ * Project a full task row down to the compact {@link DependencyNode} used by the
+ * machine-readable dependency reads. Exported so callers that already hold task
+ * rows (e.g. the cloud CLI path hydrating remote edges) emit the same shape.
+ */
+export declare function toDependencyNode(task: Task): DependencyNode;
+/**
+ * Detect dependency cycles over an explicit edge list (`task_id -> depends_on`).
+ * A `depends_on` that never appears as a `task_id` is a leaf (no outgoing
+ * edges), so a cycle is only reported when it is fully contained in `edges`.
+ */
+export declare function detectCyclesFromEdges(edges: DependencyEdge[]): string[][];
 export declare function getReadyTasks(filter?: GraphFilter, db?: Database): ReadyTaskReport[];
 export declare function getBlockedTaskReports(filter?: GraphFilter, db?: Database): BlockedTaskReport[];
 export declare function getCriticalPath(filter?: GraphFilter, db?: Database): CriticalPathEntry[];
@@ -70,4 +144,38 @@ export declare function getUnlockImpact(taskId: string, db?: Database): UnlockIm
 export declare function analyzeDependencyGraph(filter?: GraphFilter, db?: Database): DependencyGraphAnalysis;
 export declare function getDependents(taskId: string, db?: Database): DependencyNode[];
 export declare function getBlockers(taskId: string, db?: Database): BlockedTaskReport | null;
+export { isBlockingDependencyStatus } from "../types/index.js";
+/**
+ * Assemble a {@link TaskDependencyEdges} payload from already-resolved task
+ * rows. Pure (no DB access) so both the local reader below and the cloud CLI
+ * path — which hydrates remote edges via `cloudGetTaskRelations` — emit the
+ * identical versioned shape. `blocked_by` is derived here from the incomplete
+ * prerequisites so no caller can reintroduce the inverted orientation
+ * (regression 4599ef37).
+ */
+export declare function buildTaskDependencyEdges(task: {
+    id: string;
+    short_id: string | null;
+}, dependencies: Task[], blocks: Task[]): TaskDependencyEdges;
+/**
+ * Read a single task's direct dependency edges as a machine-readable,
+ * versioned payload (`todos deps <id> --json`). Returns `null` when the task
+ * does not exist. Edges whose target row is missing (a dangling dependency) are
+ * skipped here; use {@link analyzeDependencyGraph} for missing-edge reporting.
+ */
+export declare function getTaskDependencyEdges(taskId: string, db?: Database): TaskDependencyEdges | null;
+/**
+ * Assemble a {@link ProjectDependencyGraph} from resolved nodes and edges.
+ * Pure (no DB access) so the local reader and the cloud CLI path share one
+ * shape. `edges` are filtered to those whose dependent (`task_id`) is a node;
+ * cycles are detected over that filtered set.
+ */
+export declare function buildProjectDependencyGraph(projectId: string | null, tasks: Task[], edges: DependencyEdge[], generatedAt?: string): ProjectDependencyGraph;
+/**
+ * Read a whole project's dependency graph in one call (`todos deps --project
+ * <ref> --json`): every in-scope task as a node plus the adjacency list and any
+ * cycles. `filter.project_id` scopes the nodes; an absent scope reads every
+ * task in the local store.
+ */
+export declare function getProjectDependencyGraph(filter?: GraphFilter, db?: Database): ProjectDependencyGraph;
 //# sourceMappingURL=dependency-graph.d.ts.map

package/dist/lib/dependency-graph.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"dependency-graph.d.ts","sourceRoot":"","sources":["../../src/lib/dependency-graph.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAO3C,eAAO,MAAM,uBAAuB,8BAA8B,CAAC;AAEnE,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED,MAAM,WAAW,iBAAiB;IAChC,cAAc,EAAE,OAAO,uBAAuB,CAAC;IAC/C,IAAI,EAAE,cAAc,CAAC;IACrB,QAAQ,EAAE,cAAc,EAAE,CAAC;IAC3B,cAAc,EAAE,cAAc,EAAE,CAAC;IACjC,oBAAoB,EAAE,MAAM,EAAE,CAAC;CAChC;AAED,MAAM,WAAW,eAAe;IAC9B,cAAc,EAAE,OAAO,uBAAuB,CAAC;IAC/C,IAAI,EAAE,cAAc,CAAC;IACrB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,iBAAiB;IAChC,cAAc,EAAE,OAAO,uBAAuB,CAAC;IAC/C,IAAI,EAAE,cAAc,CAAC;IACrB,gBAAgB,EAAE,MAAM,CAAC;IACzB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,kBAAkB;IACjC,cAAc,EAAE,OAAO,uBAAuB,CAAC;IAC/C,OAAO,EAAE,MAAM,CAAC;IAChB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,YAAY,EAAE,cAAc,EAAE,CAAC;IAC/B,mBAAmB,EAAE,cAAc,EAAE,CAAC;CACvC;AAED,MAAM,WAAW,uBAAuB;IACtC,cAAc,EAAE,OAAO,uBAAuB,CAAC;IAC/C,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC;IACnB,oBAAoB,EAAE,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,cAAc,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACzE,cAAc,EAAE,iBAAiB,EAAE,CAAC;IACpC,WAAW,EAAE,eAAe,EAAE,CAAC;IAC/B,aAAa,EAAE,iBAAiB,EAAE,CAAC;IACnC,aAAa,EAAE,iBAAiB,EAAE,CAAC;CACpC;AAED,MAAM,WAAW,WAAW;IAC1B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AA6FD,wBAAgB,aAAa,CAAC,MAAM,GAAE,WAAgB,EAAE,EAAE,CAAC,EAAE,QAAQ,GAAG,eAAe,EAAE,CAmBxF;AAED,wBAAgB,qBAAqB,CAAC,MAAM,GAAE,WAAgB,EAAE,EAAE,CAAC,EAAE,QAAQ,GAAG,iBAAiB,EAAE,CA2BlG;AAkCD,wBAAgB,eAAe,CAAC,MAAM,GAAE,WAAgB,EAAE,EAAE,CAAC,EAAE,QAAQ,GAAG,iBAAiB,EAAE,CAgB5F;AAED,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC,EAAE,QAAQ,GAAG,kBAAkB,CAyBjF;AAED,wBAAgB,sBAAsB,CAAC,MAAM,GAAE,WAAgB,EAAE,EAAE,CAAC,EAAE,QAAQ,GAAG,uBAAuB,CAoBvG;AAED,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC,EAAE,QAAQ,GAAG,cAAc,EAAE,CAM7E;AAED,wBAAgB,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC,EAAE,QAAQ,GAAG,iBAAiB,GAAG,IAAI,CAenF"}
+{"version":3,"file":"dependency-graph.d.ts","sourceRoot":"","sources":["../../src/lib/dependency-graph.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAM3C,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,mBAAmB,CAAC;AAE9C,eAAO,MAAM,uBAAuB,8BAA8B,CAAC;AAEnE,+EAA+E;AAC/E,eAAO,MAAM,4BAA4B,mCAAmC,CAAC;AAE7E,kFAAkF;AAClF,eAAO,MAAM,+BAA+B,sCAAsC,CAAC;AAEnF,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED;;;;GAIG;AACH,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,WAAW,mBAAmB;IAClC,cAAc,EAAE,OAAO,4BAA4B,CAAC;IACpD,OAAO,EAAE,MAAM,CAAC;IAChB;;;;OAIG;IACH,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,YAAY,EAAE,cAAc,EAAE,CAAC;IAC/B,UAAU,EAAE,cAAc,EAAE,CAAC;IAC7B,MAAM,EAAE,cAAc,EAAE,CAAC;CAC1B;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,sBAAsB;IACrC,cAAc,EAAE,OAAO,+BAA+B,CAAC;IACvD,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,KAAK,EAAE,cAAc,EAAE,CAAC;IACxB,KAAK,EAAE,cAAc,EAAE,CAAC;IACxB,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC;CACpB;AAED,MAAM,WAAW,iBAAiB;IAChC,cAAc,EAAE,OAAO,uBAAuB,CAAC;IAC/C,IAAI,EAAE,cAAc,CAAC;IACrB,QAAQ,EAAE,cAAc,EAAE,CAAC;IAC3B,cAAc,EAAE,cAAc,EAAE,CAAC;IACjC,oBAAoB,EAAE,MAAM,EAAE,CAAC;CAChC;AAED,MAAM,WAAW,eAAe;IAC9B,cAAc,EAAE,OAAO,uBAAuB,CAAC;IAC/C,IAAI,EAAE,cAAc,CAAC;IACrB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,iBAAiB;IAChC,cAAc,EAAE,OAAO,uBAAuB,CAAC;IAC/C,IAAI,EAAE,cAAc,CAAC;IACrB,gBAAgB,EAAE,MAAM,CAAC;IACzB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,kBAAkB;IACjC,cAAc,EAAE,OAAO,uBAAuB,CAAC;IAC/C,OAAO,EAAE,MAAM,CAAC;IAChB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,YAAY,EAAE,cAAc,EAAE,CAAC;IAC/B,mBAAmB,EAAE,cAAc,EAAE,CAAC;CACvC;AAED,MAAM,WAAW,uBAAuB;IACtC,cAAc,EAAE,OAAO,uBAAuB,CAAC;IAC/C,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC;IACnB,oBAAoB,EAAE,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,cAAc,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACzE,cAAc,EAAE,iBAAiB,EAAE,CAAC;IACpC,WAAW,EAAE,eAAe,EAAE,CAAC;IAC/B,aAAa,EAAE,iBAAiB,EAAE,CAAC;IACnC,aAAa,EAAE,iBAAiB,EAAE,CAAC;CACpC;AAED,MAAM,WAAW,WAAW;IAC1B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAcD;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,IAAI,GAAG,cAAc,CAE3D;AAqCD;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,cAAc,EAAE,GAAG,MAAM,EAAE,EAAE,CAoCzE;AAYD,wBAAgB,aAAa,CAAC,MAAM,GAAE,WAAgB,EAAE,EAAE,CAAC,EAAE,QAAQ,GAAG,eAAe,EAAE,CAmBxF;AAED,wBAAgB,qBAAqB,CAAC,MAAM,GAAE,WAAgB,EAAE,EAAE,CAAC,EAAE,QAAQ,GAAG,iBAAiB,EAAE,CA2BlG;AAkCD,wBAAgB,eAAe,CAAC,MAAM,GAAE,WAAgB,EAAE,EAAE,CAAC,EAAE,QAAQ,GAAG,iBAAiB,EAAE,CAgB5F;AAED,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC,EAAE,QAAQ,GAAG,kBAAkB,CAyBjF;AAED,wBAAgB,sBAAsB,CAAC,MAAM,GAAE,WAAgB,EAAE,EAAE,CAAC,EAAE,QAAQ,GAAG,uBAAuB,CAoBvG;AAED,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC,EAAE,QAAQ,GAAG,cAAc,EAAE,CAM7E;AAED,wBAAgB,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC,EAAE,QAAQ,GAAG,iBAAiB,GAAG,IAAI,CAenF;AAED,OAAO,EAAE,0BAA0B,EAAE,MAAM,mBAAmB,CAAC;AAE/D;;;;;;;GAOG;AACH,wBAAgB,wBAAwB,CACtC,IAAI,EAAE;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,EAC7C,YAAY,EAAE,IAAI,EAAE,EACpB,MAAM,EAAE,IAAI,EAAE,GACb,mBAAmB,CASrB;AAED;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC,EAAE,QAAQ,GAAG,mBAAmB,GAAG,IAAI,CAahG;AAED;;;;;GAKG;AACH,wBAAgB,2BAA2B,CACzC,SAAS,EAAE,MAAM,GAAG,IAAI,EACxB,KAAK,EAAE,IAAI,EAAE,EACb,KAAK,EAAE,cAAc,EAAE,EACvB,WAAW,GAAE,MAAiC,GAC7C,sBAAsB,CAaxB;AAED;;;;;GAKG;AACH,wBAAgB,yBAAyB,CAAC,MAAM,GAAE,WAAgB,EAAE,EAAE,CAAC,EAAE,QAAQ,GAAG,sBAAsB,CAKzG"}

package/dist/lib/redaction.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"redaction.d.ts","sourceRoot":"","sources":["../../src/lib/redaction.ts"],"names":[],"mappings":"AAAA,OAAO,EAA0B,KAAK,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAE9E,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;CACf;AAkED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAUxD;AAED,wBAAgB,WAAW,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,CAAC,CAe1C;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,aAAa,EAAE,CAOjE;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAExD;AAED,wBAAgB,qBAAqB,IAAI,kBAAkB,CAK1D;AAED,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,kBAAkB,GAAG,kBAAkB,CAQtF"}
+{"version":3,"file":"redaction.d.ts","sourceRoot":"","sources":["../../src/lib/redaction.ts"],"names":[],"mappings":"AAAA,OAAO,EAA0B,KAAK,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAE9E,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;CACf;AA6FD,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAUxD;AAED,wBAAgB,WAAW,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,CAAC,CAe1C;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,aAAa,EAAE,CAOjE;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAExD;AAED,wBAAgB,qBAAqB,IAAI,kBAAkB,CAK1D;AAED,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,kBAAkB,GAAG,kBAAkB,CAQtF"}

package/dist/mcp/index.js

@@ -41,6 +41,9 @@ var __esm = (fn, res) => () => (fn && (res = fn(fn = 0)), res);
 var __require = import.meta.require;
 
 // src/types/index.ts
+function isBlockingDependencyStatus(status) {
+  return status !== "completed" && status !== "cancelled";
+}
 var TASK_STATUSES, VersionConflictError, TaskNotFoundError, ProjectNotFoundError, ResourceConflictError, PlanNotFoundError, LockError, AgentNotFoundError, IdentityAliasAmbiguousError, IdentityIdImmutableError, TaskListNotFoundError, DependencyCycleError, CompletionGuardError, DispatchNotFoundError;
 var init_types = __esm(() => {
   TASK_STATUSES = [
@@ -4131,8 +4134,8 @@ function ensureDir(filePath) {
 function openDatabase(path) {
   ensureDir(path);
   const db = new Database(path);
-  db.run("PRAGMA journal_mode = WAL");
   db.run("PRAGMA busy_timeout = 5000");
+  db.run("PRAGMA journal_mode = WAL");
   db.run("PRAGMA foreign_keys = ON");
   runMigrations(db);
   ensureAgentIdentitySchema(db);
@@ -9107,11 +9110,15 @@ function secretPatterns() {
   return [...customPatterns(), ...DEFAULT_SECRET_PATTERNS];
 }
 function isRedactionPlaceholderMatch(match) {
-  const placeholder = String.raw`\[REDACTED(?:_[A-Z_]+)?\]`;
   const trimmed = match.trim();
-  return new RegExp(`^${placeholder}$`).test(trimmed) || new RegExp(`=\\s*['"]?${placeholder}['"]?$`).test(trimmed);
+  return new RegExp(`^${REDACTION_PLACEHOLDER}$`).test(trimmed) || new RegExp(`=\\s*['"]?${REDACTION_PLACEHOLDER}['"]?$`).test(trimmed);
+}
+function isRedactionPlaceholderKey(key) {
+  return new RegExp(`^${REDACTION_PLACEHOLDER}$`).test(key.trim());
 }
 function isSecretKey(key) {
+  if (isRedactionPlaceholderKey(key))
+    return false;
   if (NON_SECRET_USAGE_KEYS.has(key.toLowerCase()))
     return false;
   if (DEFAULT_SECRET_KEY_PATTERN.test(key))
@@ -9169,7 +9176,7 @@ function upsertSecretSafetyConfig(input) {
   saveConfig({ ...config, secret_safety: next });
   return next;
 }
-var DEFAULT_SECRET_PATTERNS, DEFAULT_SECRET_KEY_PATTERN, NON_SECRET_USAGE_KEYS;
+var DEFAULT_SECRET_PATTERNS, DEFAULT_SECRET_KEY_PATTERN, NON_SECRET_USAGE_KEYS, REDACTION_PLACEHOLDER;
 var init_redaction = __esm(() => {
   init_config2();
   DEFAULT_SECRET_PATTERNS = [
@@ -9193,6 +9200,7 @@ var init_redaction = __esm(() => {
     "completion_tokens",
     "cost_tokens"
   ]);
+  REDACTION_PLACEHOLDER = String.raw`\[REDACTED(?:_[A-Z_]+)?\]`;
 });
 
 // src/lib/secret-redaction.ts
@@ -9228,7 +9236,7 @@ function scanTextForSecrets(text, options = {}) {
   };
 }
 function redactText(text, options = {}) {
-  const placeholder = options.placeholder ?? REDACTION_PLACEHOLDER;
+  const placeholder = options.placeholder ?? REDACTION_PLACEHOLDER2;
   let out = text;
   for (const { pattern, allowlist_ok } of DEFAULT_PATTERNS) {
     out = out.replace(new RegExp(pattern.source, pattern.flags), (match) => {
@@ -9255,7 +9263,7 @@ function redactExportRecord(record) {
   }
   return base;
 }
-var SECRET_REDACTION_SCHEMA, REDACTION_PLACEHOLDER = "[REDACTED]", DEFAULT_PATTERNS, DEFAULT_ALLOWLIST, customRedactors;
+var SECRET_REDACTION_SCHEMA, REDACTION_PLACEHOLDER2 = "[REDACTED]", DEFAULT_PATTERNS, DEFAULT_ALLOWLIST, customRedactors;
 var init_secret_redaction = __esm(() => {
   init_redaction();
   SECRET_REDACTION_SCHEMA = ["todos", "secret_redaction", "v1"].join(".");
@@ -13420,10 +13428,11 @@ function getTaskWithRelations(id, db) {
        JOIN task_dependencies td ON td.depends_on = t.id
        WHERE td.task_id = ?`).all(id);
   const dependencies = depRows.map(rowToTask);
-  const blockedByRows = d.query(`SELECT t.* FROM tasks t
+  const blocked_by = dependencies.filter((dep) => isBlockingDependencyStatus(dep.status));
+  const blocksRows = d.query(`SELECT t.* FROM tasks t
        JOIN task_dependencies td ON td.task_id = t.id
        WHERE td.depends_on = ?`).all(id);
-  const blocked_by = blockedByRows.map(rowToTask);
+  const blocks = blocksRows.map(rowToTask);
   const comments = d.query("SELECT * FROM task_comments WHERE task_id = ? ORDER BY created_at").all(id);
   const parent = task.parent_id ? getTask(task.parent_id, d) : null;
   const checklist = getChecklist(id, d);
@@ -13432,6 +13441,7 @@ function getTaskWithRelations(id, db) {
     subtasks,
     dependencies,
     blocked_by,
+    blocks,
     comments,
     parent,
     checklist
@@ -20421,6 +20431,7 @@ async function cloudResolveTaskListRef(client, ref, projectId) {
 }
 var UUID_RE, CLOUD_MODES, VALID_STORAGE_MODES, completionCapabilityCache;
 var init_cloud_router = __esm(() => {
+  init_types();
   init_redaction();
   init_http_client();
   UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
@@ -34187,7 +34198,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "@hasna/todos",
-    version: "0.13.0",
+    version: "0.13.2",
     description: "Universal task management for AI coding agents - CLI + MCP server + interactive TUI",
     type: "module",
     main: "dist/index.js",
@@ -34239,7 +34250,7 @@ var init_package = __esm(() => {
       "backfill:comment-redaction": "bun run src/server/index.ts redact-comments",
       "generate:sdk": "bun run scripts/generate-sdk.ts",
       "build:dashboard": "cd dashboard && bun install --frozen-lockfile && bun run build",
-      typecheck: "tsc --noEmit",
+      typecheck: "tsc --noEmit -p tsconfig.typecheck.json",
       test: "bun test",
       "test:no-cloud": "bun test src/no-cloud-boundary.test.ts src/local-first.test.ts src/lib/public-release-gate.test.ts",
       "dev:cli": "bun run src/cli/index.tsx",
@@ -45832,9 +45843,11 @@ async function removeDependency2(taskId, dependsOn, store) {
 }
 async function listDependencies(taskId, store) {
   const edges = await store.list("dependencies");
+  const incoming = edges.filter((edge) => edge.depends_on === taskId).map((edge) => ({ task_id: edge.task_id, depends_on: edge.depends_on }));
   return {
     dependencies: edges.filter((edge) => edge.task_id === taskId).map((edge) => ({ task_id: edge.task_id, depends_on: edge.depends_on })),
-    blocked_by: edges.filter((edge) => edge.depends_on === taskId).map((edge) => ({ task_id: edge.task_id, depends_on: edge.depends_on }))
+    blocks: incoming,
+    blocked_by: incoming
   };
 }
 async function addVerification(input, store, context) {
@@ -51489,7 +51502,7 @@ Dashboard not found at: ${dashboardDir}`);
       const path = url.pathname;
       const method = req.method;
       const reqOrigin = req.headers.get("origin") || undefined;
-      const corsHeaders = reqOrigin && (reqOrigin === `http://localhost:${port}` || reqOrigin === "http://localhost:0") ? {
+      const corsHeaders = reqOrigin && reqOrigin === `http://localhost:${ctx.port}` ? {
         "Access-Control-Allow-Origin": reqOrigin,
         "Access-Control-Allow-Methods": "GET, POST, PATCH, DELETE, OPTIONS",
         "Access-Control-Allow-Headers": "Content-Type, X-API-Key, Authorization",
@@ -51777,7 +51790,9 @@ Dashboard not found at: ${dashboardDir}`);
   };
   process.on("SIGINT", shutdown);
   process.on("SIGTERM", shutdown);
-  const serverUrl = `http://localhost:${port}`;
+  const boundPort = server.port ?? port;
+  ctx.port = boundPort;
+  const serverUrl = `http://localhost:${boundPort}`;
   console.log(`Todos Dashboard running at ${serverUrl}`);
   if (shouldOpen) {
     try {

package/dist/mcp.js

@@ -41,7 +41,7 @@ var __require = import.meta.require;
 // package.json
 var package_default = {
   name: "@hasna/todos",
-  version: "0.13.0",
+  version: "0.13.2",
   description: "Universal task management for AI coding agents - CLI + MCP server + interactive TUI",
   type: "module",
   main: "dist/index.js",
@@ -93,7 +93,7 @@ var package_default = {
     "backfill:comment-redaction": "bun run src/server/index.ts redact-comments",
     "generate:sdk": "bun run scripts/generate-sdk.ts",
     "build:dashboard": "cd dashboard && bun install --frozen-lockfile && bun run build",
-    typecheck: "tsc --noEmit",
+    typecheck: "tsc --noEmit -p tsconfig.typecheck.json",
     test: "bun test",
     "test:no-cloud": "bun test src/no-cloud-boundary.test.ts src/local-first.test.ts src/lib/public-release-gate.test.ts",
     "dev:cli": "bun run src/cli/index.tsx",

package/dist/registry.js

@@ -3424,6 +3424,9 @@ var init_machines = __esm(() => {
 });
 
 // src/types/index.ts
+function isBlockingDependencyStatus(status) {
+  return status !== "completed" && status !== "cancelled";
+}
 var TASK_STATUSES, TASK_PRIORITIES, PLAN_STATUSES, VersionConflictError, TaskNotFoundError, ProjectNotFoundError, ResourceConflictError, PlanNotFoundError, LockError, AgentNotFoundError, IdentityAliasAmbiguousError, IdentityIdImmutableError, TaskListNotFoundError, DependencyCycleError, CompletionGuardError, DISPATCH_STATUSES, DispatchNotFoundError;
 var init_types = __esm(() => {
   TASK_STATUSES = [
@@ -4123,8 +4126,8 @@ function ensureDir(filePath) {
 function openDatabase(path) {
   ensureDir(path);
   const db = new Database(path);
-  db.run("PRAGMA journal_mode = WAL");
   db.run("PRAGMA busy_timeout = 5000");
+  db.run("PRAGMA journal_mode = WAL");
   db.run("PRAGMA foreign_keys = ON");
   runMigrations(db);
   ensureAgentIdentitySchema(db);
@@ -4955,11 +4958,15 @@ function secretPatterns() {
   return [...customPatterns(), ...DEFAULT_SECRET_PATTERNS];
 }
 function isRedactionPlaceholderMatch(match) {
-  const placeholder = String.raw`\[REDACTED(?:_[A-Z_]+)?\]`;
   const trimmed = match.trim();
-  return new RegExp(`^${placeholder}$`).test(trimmed) || new RegExp(`=\\s*['"]?${placeholder}['"]?$`).test(trimmed);
+  return new RegExp(`^${REDACTION_PLACEHOLDER}$`).test(trimmed) || new RegExp(`=\\s*['"]?${REDACTION_PLACEHOLDER}['"]?$`).test(trimmed);
+}
+function isRedactionPlaceholderKey(key) {
+  return new RegExp(`^${REDACTION_PLACEHOLDER}$`).test(key.trim());
 }
 function isSecretKey(key) {
+  if (isRedactionPlaceholderKey(key))
+    return false;
   if (NON_SECRET_USAGE_KEYS.has(key.toLowerCase()))
     return false;
   if (DEFAULT_SECRET_KEY_PATTERN.test(key))
@@ -5020,7 +5027,7 @@ function upsertSecretSafetyConfig(input) {
   saveConfig({ ...config, secret_safety: next });
   return next;
 }
-var DEFAULT_SECRET_PATTERNS, DEFAULT_SECRET_KEY_PATTERN, NON_SECRET_USAGE_KEYS;
+var DEFAULT_SECRET_PATTERNS, DEFAULT_SECRET_KEY_PATTERN, NON_SECRET_USAGE_KEYS, REDACTION_PLACEHOLDER;
 var init_redaction = __esm(() => {
   init_config2();
   DEFAULT_SECRET_PATTERNS = [
@@ -5044,6 +5051,7 @@ var init_redaction = __esm(() => {
     "completion_tokens",
     "cost_tokens"
   ]);
+  REDACTION_PLACEHOLDER = String.raw`\[REDACTED(?:_[A-Z_]+)?\]`;
 });
 
 // src/lib/workspace-trust.ts
@@ -6683,7 +6691,7 @@ function scanTextForSecrets(text, options = {}) {
   };
 }
 function redactText(text, options = {}) {
-  const placeholder = options.placeholder ?? REDACTION_PLACEHOLDER;
+  const placeholder = options.placeholder ?? REDACTION_PLACEHOLDER2;
   let out = text;
   for (const { pattern, allowlist_ok } of DEFAULT_PATTERNS) {
     out = out.replace(new RegExp(pattern.source, pattern.flags), (match) => {
@@ -6744,7 +6752,7 @@ function redactExportRecord(record) {
 function getDefaultSecretPatterns() {
   return DEFAULT_PATTERNS.map((p) => ({ name: p.name, source: p.pattern.source }));
 }
-var SECRET_REDACTION_SCHEMA, REDACTION_PLACEHOLDER = "[REDACTED]", DEFAULT_PATTERNS, DEFAULT_ALLOWLIST, customRedactors;
+var SECRET_REDACTION_SCHEMA, REDACTION_PLACEHOLDER2 = "[REDACTED]", DEFAULT_PATTERNS, DEFAULT_ALLOWLIST, customRedactors;
 var init_secret_redaction = __esm(() => {
   init_redaction();
   SECRET_REDACTION_SCHEMA = ["todos", "secret_redaction", "v1"].join(".");
@@ -8801,10 +8809,11 @@ function getTaskWithRelations(id, db) {
        JOIN task_dependencies td ON td.depends_on = t.id
        WHERE td.task_id = ?`).all(id);
   const dependencies = depRows.map(rowToTask);
-  const blockedByRows = d.query(`SELECT t.* FROM tasks t
+  const blocked_by = dependencies.filter((dep) => isBlockingDependencyStatus(dep.status));
+  const blocksRows = d.query(`SELECT t.* FROM tasks t
        JOIN task_dependencies td ON td.task_id = t.id
        WHERE td.depends_on = ?`).all(id);
-  const blocked_by = blockedByRows.map(rowToTask);
+  const blocks = blocksRows.map(rowToTask);
   const comments = d.query("SELECT * FROM task_comments WHERE task_id = ? ORDER BY created_at").all(id);
   const parent = task.parent_id ? getTask(task.parent_id, d) : null;
   const checklist = getChecklist(id, d);
@@ -8813,6 +8822,7 @@ function getTaskWithRelations(id, db) {
     subtasks,
     dependencies,
     blocked_by,
+    blocks,
     comments,
     parent,
     checklist
@@ -11823,7 +11833,7 @@ var init_tasks = __esm(() => {
 // package.json
 var package_default = {
   name: "@hasna/todos",
-  version: "0.13.0",
+  version: "0.13.2",
   description: "Universal task management for AI coding agents - CLI + MCP server + interactive TUI",
   type: "module",
   main: "dist/index.js",
@@ -11875,7 +11885,7 @@ var package_default = {
     "backfill:comment-redaction": "bun run src/server/index.ts redact-comments",
     "generate:sdk": "bun run scripts/generate-sdk.ts",
     "build:dashboard": "cd dashboard && bun install --frozen-lockfile && bun run build",
-    typecheck: "tsc --noEmit",
+    typecheck: "tsc --noEmit -p tsconfig.typecheck.json",
     test: "bun test",
     "test:no-cloud": "bun test src/no-cloud-boundary.test.ts src/local-first.test.ts src/lib/public-release-gate.test.ts",
     "dev:cli": "bun run src/cli/index.tsx",

package/dist/release-provenance.json

@@ -1,9 +1,9 @@
 {
   "packageName": "@hasna/todos",
-  "packageVersion": "0.13.0",
+  "packageVersion": "0.13.2",
   "repository": "https://github.com/hasna/todos.git",
-  "gitCommit": "f1e13ecb6f374dacff6905a78e7dbd60a92883bb",
-  "gitTree": "e6d133cf8c25a83c7085b7edf52cb8a7e7745fdb",
-  "sourceTreeSha256": "fa93e1e4b62bdd70bd753daf4e86b47ec2aa92a1e6a6f091a2924c30649391f4",
-  "generatedAt": "2026-07-25T17:29:55.000Z"
+  "gitCommit": "cb914c5f9ccfabb39983b5156f4c1cec78e00c1f",
+  "gitTree": "3693d6d0fd8f3bdd2581fc915e91264caf08760d",
+  "sourceTreeSha256": "4a1b890d4a3b4ffc73d605e7aa3ccbcba2deb6c72d3604a1db733b57c0c25e00",
+  "generatedAt": "2026-07-28T15:00:57.000Z"
 }