@hasna/todos 0.15.24 → 0.15.26

package/dist/contracts.js

@@ -12658,7 +12658,7 @@ var init_tasks = __esm(() => {
 // package.json
 var package_default = {
   name: "@hasna/todos",
-  version: "0.15.24",
+  version: "0.15.26",
   description: "Universal task management for AI coding agents - CLI + MCP server + interactive TUI",
   type: "module",
   main: "dist/index.js",
@@ -12707,7 +12707,8 @@ var package_default = {
     }
   },
   workspaces: [
-    "dashboard"
+    "dashboard",
+    "ai"
   ],
   files: [
     "dist",
@@ -12730,6 +12731,8 @@ var package_default = {
     "dev:serve": "bun run src/server/index.ts",
     "verify:release": "bun run scripts/verify-public-release.ts --mode=review",
     "verify:release-review": "bun run scripts/verify-npm-release-agent-review.ts",
+    "verify:attested-container-candidate": "bun run scripts/attested-container-candidate.ts verify",
+    "test:attested-container-candidate": "bun test scripts/attested-container-candidate.test.ts",
     "issue:release-review": "bun run scripts/issue-npm-release-agent-review.ts",
     prepublishOnly: "bun run scripts/verify-public-release.ts --mode=publish",
     postinstall: "mkdir -p $HOME/.hasna/todos $HOME/.hasna/todos/training 2>/dev/null || true"
@@ -12776,12 +12779,14 @@ var package_default = {
     zod: "^3.24.2"
   },
   overrides: {
+    ajv: "8.20.0",
     "fast-uri": "3.1.2"
   },
   devDependencies: {
     "@types/bun": "^1.2.4",
     "@types/react": "^18.3.18",
     "bun-types": "1.3.9",
+    "hasna-deployment-contracts": "npm:@hasna/contracts@0.10.4",
     typescript: "^5.7.3"
   }
 };

package/dist/index.js

@@ -12771,7 +12771,7 @@ var init_dispatches = __esm(() => {
 // package.json
 var package_default = {
   name: "@hasna/todos",
-  version: "0.15.24",
+  version: "0.15.26",
   description: "Universal task management for AI coding agents - CLI + MCP server + interactive TUI",
   type: "module",
   main: "dist/index.js",
@@ -12820,7 +12820,8 @@ var package_default = {
     }
   },
   workspaces: [
-    "dashboard"
+    "dashboard",
+    "ai"
   ],
   files: [
     "dist",
@@ -12843,6 +12844,8 @@ var package_default = {
     "dev:serve": "bun run src/server/index.ts",
     "verify:release": "bun run scripts/verify-public-release.ts --mode=review",
     "verify:release-review": "bun run scripts/verify-npm-release-agent-review.ts",
+    "verify:attested-container-candidate": "bun run scripts/attested-container-candidate.ts verify",
+    "test:attested-container-candidate": "bun test scripts/attested-container-candidate.test.ts",
     "issue:release-review": "bun run scripts/issue-npm-release-agent-review.ts",
     prepublishOnly: "bun run scripts/verify-public-release.ts --mode=publish",
     postinstall: "mkdir -p $HOME/.hasna/todos $HOME/.hasna/todos/training 2>/dev/null || true"
@@ -12889,12 +12892,14 @@ var package_default = {
     zod: "^3.24.2"
   },
   overrides: {
+    ajv: "8.20.0",
     "fast-uri": "3.1.2"
   },
   devDependencies: {
     "@types/bun": "^1.2.4",
     "@types/react": "^18.3.18",
     "bun-types": "1.3.9",
+    "hasna-deployment-contracts": "npm:@hasna/contracts@0.10.4",
     typescript: "^5.7.3"
   }
 };
@@ -40423,6 +40428,12 @@ function parseTodosTaskManifestBindingLookup(input) {
   return parsed.data;
 }
 
+// src/task-manifest/plan-slug.ts
+function taskManifestPlanSlug(manifest, planId) {
+  const base = normalizeSlug(manifest.plan.key) || normalizeSlug(manifest.plan.name) || "plan";
+  return `${base}-${planId}`;
+}
+
 // src/task-manifest/backend.ts
 var UUID_PATTERN2 = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
 function validateTaskManifestBindingLookupRows(rows, tenantId, planId) {
@@ -40773,7 +40784,7 @@ class SqliteTodosTaskManifestBackend {
         }
       }
       this.db.query(`INSERT INTO plans (id, project_id, name, description, status, task_list_id, slug, created_at, updated_at)
-        VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)`).run(input.graph.plan_id, manifest.project_id, manifest.plan.name, manifest.plan.description ?? null, manifest.plan.status ?? "active", manifest.task_list_id ?? null, null, input.now, input.now);
+        VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)`).run(input.graph.plan_id, manifest.project_id, manifest.plan.name, manifest.plan.description ?? null, manifest.plan.status ?? "active", manifest.task_list_id ?? null, taskManifestPlanSlug(manifest, input.graph.plan_id), input.now, input.now);
       fault(faults, "after_plan_write");
       for (const task3 of manifest.tasks) {
         const taskId = input.graph.task_ids[task3.key];
@@ -40996,7 +41007,7 @@ class SqliteTodosTaskManifestBackend {
         throw new TodosTaskManifestError("TODOS_TASK_MANIFEST_COMPENSATION_REFUSED", "Compensation refused: graph changed since apply", { actualReadback });
       }
       const plan = this.db.query("SELECT project_id, name, description, status, task_list_id, slug FROM plans WHERE id = ? LIMIT 1").get(applyResult.graph.plan_id);
-      if (!plan || plan["project_id"] !== manifest.project_id || plan["name"] !== manifest.plan.name || plan["description"] !== (manifest.plan.description ?? null) || plan["status"] !== (manifest.plan.status ?? "active") || plan["task_list_id"] !== (manifest.task_list_id ?? null) || plan["slug"] !== null) {
+      if (!plan || plan["project_id"] !== manifest.project_id || plan["name"] !== manifest.plan.name || plan["description"] !== (manifest.plan.description ?? null) || plan["status"] !== (manifest.plan.status ?? "active") || plan["task_list_id"] !== (manifest.task_list_id ?? null) || plan["slug"] !== taskManifestPlanSlug(manifest, applyResult.graph.plan_id)) {
         throw new TodosTaskManifestError("TODOS_TASK_MANIFEST_COMPENSATION_REFUSED", "Compensation refused: plan changed since apply");
       }
       for (const task3 of manifest.tasks) {
@@ -41194,7 +41205,7 @@ function taskPayload2(manifest, task3, taskId, planId, now4) {
 function planPayload(input) {
   return {
     id: input.graph.plan_id,
-    slug: null,
+    slug: taskManifestPlanSlug(input.manifest, input.graph.plan_id),
     project_id: input.manifest.project_id,
     task_list_id: input.manifest.task_list_id ?? null,
     agent_id: null,
@@ -43178,11 +43189,14 @@ function resolveAdapter(options) {
   const client = getTodosCloudClient(options.env);
   return client ? createHttpTodosAiReadAdapter(client) : createLocalTodosAiReadAdapter(options.database);
 }
-function resolvePermission(options) {
+function resolvePermission(options, profile) {
   if (options.workspacePermission)
     return options.workspacePermission;
   const path = options.workspacePath ?? process.cwd();
-  return (permission) => checkWorkspacePermission({ path, tool: permission }).allowed;
+  return (permission, tool) => {
+    const check = checkWorkspacePermission({ path, tool: permission });
+    return check.allowed || profile === "minimal" && tool === "get_task" && permission === "read" && check.status.matched_root === null && check.status.profile.preset === "restricted";
+  };
 }
 function configuredProfileIsKnown(value) {
   if (value === undefined || value.trim() === "")
@@ -43194,7 +43208,7 @@ function createTodosAiToolSource(options = {}) {
   const adapter = resolveAdapter(options);
   const configuredProfile = options.env ? options.env["TODOS_PROFILE"] : process.env["TODOS_PROFILE"];
   const profile = options.accessProfile ?? resolveAccessProfile(configuredProfile ?? "minimal");
-  const permission = resolvePermission(options);
+  const permission = resolvePermission(options, profile);
   const enabled = new Set(TODOS_AI_READ_TOOL_NAMES.filter((name) => shouldRegisterToolForProfile2(name, profile) && permission(name === "get_task" ? "read" : "list", name)));
   const hostAllowsUpdate = (options.accessProfile !== undefined || configuredProfileIsKnown(configuredProfile)) && shouldRegisterToolForProfile2("update_task", profile) && permission("write", "update_task");
   const approvalVerifier = options.approvalVerifier ?? adapter.verifyApproval;

package/dist/mcp/index.js

@@ -35803,7 +35803,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "@hasna/todos",
-    version: "0.15.24",
+    version: "0.15.26",
     description: "Universal task management for AI coding agents - CLI + MCP server + interactive TUI",
     type: "module",
     main: "dist/index.js",
@@ -35852,7 +35852,8 @@ var init_package = __esm(() => {
       }
     },
     workspaces: [
-      "dashboard"
+      "dashboard",
+      "ai"
     ],
     files: [
       "dist",
@@ -35875,6 +35876,8 @@ var init_package = __esm(() => {
       "dev:serve": "bun run src/server/index.ts",
       "verify:release": "bun run scripts/verify-public-release.ts --mode=review",
       "verify:release-review": "bun run scripts/verify-npm-release-agent-review.ts",
+      "verify:attested-container-candidate": "bun run scripts/attested-container-candidate.ts verify",
+      "test:attested-container-candidate": "bun test scripts/attested-container-candidate.test.ts",
       "issue:release-review": "bun run scripts/issue-npm-release-agent-review.ts",
       prepublishOnly: "bun run scripts/verify-public-release.ts --mode=publish",
       postinstall: "mkdir -p $HOME/.hasna/todos $HOME/.hasna/todos/training 2>/dev/null || true"
@@ -35921,12 +35924,14 @@ var init_package = __esm(() => {
       zod: "^3.24.2"
     },
     overrides: {
+      ajv: "8.20.0",
       "fast-uri": "3.1.2"
     },
     devDependencies: {
       "@types/bun": "^1.2.4",
       "@types/react": "^18.3.18",
       "bun-types": "1.3.9",
+      "hasna-deployment-contracts": "npm:@hasna/contracts@0.10.4",
       typescript: "^5.7.3"
     }
   };
@@ -51825,6 +51830,13 @@ var init_schema2 = __esm(() => {
   }).strict();
 });
 
+// src/task-manifest/plan-slug.ts
+function taskManifestPlanSlug(manifest, planId) {
+  const base = normalizeSlug(manifest.plan.key) || normalizeSlug(manifest.plan.name) || "plan";
+  return `${base}-${planId}`;
+}
+var init_plan_slug = () => {};
+
 // src/task-manifest/backend.ts
 function validateTaskManifestBindingLookupRows(rows, tenantId, planId) {
   if (rows.length === 0) {
@@ -51961,6 +51973,7 @@ function postgresTodosTaskManifestSchemaSql(tenantId = "default") {
 var sqliteTails;
 var init_sqlite2 = __esm(() => {
   init_canonical();
+  init_plan_slug();
   init_backend();
   init_types5();
   sqliteTails = new WeakMap;
@@ -52061,7 +52074,7 @@ function taskPayload2(manifest, task3, taskId, planId, now4) {
 function planPayload(input) {
   return {
     id: input.graph.plan_id,
-    slug: null,
+    slug: taskManifestPlanSlug(input.manifest, input.graph.plan_id),
     project_id: input.manifest.project_id,
     task_list_id: input.manifest.task_list_id ?? null,
     agent_id: null,
@@ -52610,6 +52623,7 @@ class PostgresTodosTaskManifestBackend {
 }
 var init_postgres3 = __esm(() => {
   init_canonical();
+  init_plan_slug();
   init_backend();
   init_postgres_sync();
   init_types5();

package/dist/mcp.js

@@ -41,7 +41,7 @@ var __require = import.meta.require;
 // package.json
 var package_default = {
   name: "@hasna/todos",
-  version: "0.15.24",
+  version: "0.15.26",
   description: "Universal task management for AI coding agents - CLI + MCP server + interactive TUI",
   type: "module",
   main: "dist/index.js",
@@ -90,7 +90,8 @@ var package_default = {
     }
   },
   workspaces: [
-    "dashboard"
+    "dashboard",
+    "ai"
   ],
   files: [
     "dist",
@@ -113,6 +114,8 @@ var package_default = {
     "dev:serve": "bun run src/server/index.ts",
     "verify:release": "bun run scripts/verify-public-release.ts --mode=review",
     "verify:release-review": "bun run scripts/verify-npm-release-agent-review.ts",
+    "verify:attested-container-candidate": "bun run scripts/attested-container-candidate.ts verify",
+    "test:attested-container-candidate": "bun test scripts/attested-container-candidate.test.ts",
     "issue:release-review": "bun run scripts/issue-npm-release-agent-review.ts",
     prepublishOnly: "bun run scripts/verify-public-release.ts --mode=publish",
     postinstall: "mkdir -p $HOME/.hasna/todos $HOME/.hasna/todos/training 2>/dev/null || true"
@@ -159,12 +162,14 @@ var package_default = {
     zod: "^3.24.2"
   },
   overrides: {
+    ajv: "8.20.0",
     "fast-uri": "3.1.2"
   },
   devDependencies: {
     "@types/bun": "^1.2.4",
     "@types/react": "^18.3.18",
     "bun-types": "1.3.9",
+    "hasna-deployment-contracts": "npm:@hasna/contracts@0.10.4",
     typescript: "^5.7.3"
   }
 };

package/dist/project-registration.js

@@ -12661,7 +12661,7 @@ import { createHash as createHash6 } from "crypto";
 // package.json
 var package_default = {
   name: "@hasna/todos",
-  version: "0.15.24",
+  version: "0.15.26",
   description: "Universal task management for AI coding agents - CLI + MCP server + interactive TUI",
   type: "module",
   main: "dist/index.js",
@@ -12710,7 +12710,8 @@ var package_default = {
     }
   },
   workspaces: [
-    "dashboard"
+    "dashboard",
+    "ai"
   ],
   files: [
     "dist",
@@ -12733,6 +12734,8 @@ var package_default = {
     "dev:serve": "bun run src/server/index.ts",
     "verify:release": "bun run scripts/verify-public-release.ts --mode=review",
     "verify:release-review": "bun run scripts/verify-npm-release-agent-review.ts",
+    "verify:attested-container-candidate": "bun run scripts/attested-container-candidate.ts verify",
+    "test:attested-container-candidate": "bun test scripts/attested-container-candidate.test.ts",
     "issue:release-review": "bun run scripts/issue-npm-release-agent-review.ts",
     prepublishOnly: "bun run scripts/verify-public-release.ts --mode=publish",
     postinstall: "mkdir -p $HOME/.hasna/todos $HOME/.hasna/todos/training 2>/dev/null || true"
@@ -12779,12 +12782,14 @@ var package_default = {
     zod: "^3.24.2"
   },
   overrides: {
+    ajv: "8.20.0",
     "fast-uri": "3.1.2"
   },
   devDependencies: {
     "@types/bun": "^1.2.4",
     "@types/react": "^18.3.18",
     "bun-types": "1.3.9",
+    "hasna-deployment-contracts": "npm:@hasna/contracts@0.10.4",
     typescript: "^5.7.3"
   }
 };

package/dist/registry.js

@@ -12658,7 +12658,7 @@ var init_tasks = __esm(() => {
 // package.json
 var package_default = {
   name: "@hasna/todos",
-  version: "0.15.24",
+  version: "0.15.26",
   description: "Universal task management for AI coding agents - CLI + MCP server + interactive TUI",
   type: "module",
   main: "dist/index.js",
@@ -12707,7 +12707,8 @@ var package_default = {
     }
   },
   workspaces: [
-    "dashboard"
+    "dashboard",
+    "ai"
   ],
   files: [
     "dist",
@@ -12730,6 +12731,8 @@ var package_default = {
     "dev:serve": "bun run src/server/index.ts",
     "verify:release": "bun run scripts/verify-public-release.ts --mode=review",
     "verify:release-review": "bun run scripts/verify-npm-release-agent-review.ts",
+    "verify:attested-container-candidate": "bun run scripts/attested-container-candidate.ts verify",
+    "test:attested-container-candidate": "bun test scripts/attested-container-candidate.test.ts",
     "issue:release-review": "bun run scripts/issue-npm-release-agent-review.ts",
     prepublishOnly: "bun run scripts/verify-public-release.ts --mode=publish",
     postinstall: "mkdir -p $HOME/.hasna/todos $HOME/.hasna/todos/training 2>/dev/null || true"
@@ -12776,12 +12779,14 @@ var package_default = {
     zod: "^3.24.2"
   },
   overrides: {
+    ajv: "8.20.0",
     "fast-uri": "3.1.2"
   },
   devDependencies: {
     "@types/bun": "^1.2.4",
     "@types/react": "^18.3.18",
     "bun-types": "1.3.9",
+    "hasna-deployment-contracts": "npm:@hasna/contracts@0.10.4",
     typescript: "^5.7.3"
   }
 };

package/dist/release-provenance.json

@@ -1,9 +1,9 @@
 {
   "packageName": "@hasna/todos",
-  "packageVersion": "0.15.24",
+  "packageVersion": "0.15.26",
   "repository": "https://github.com/hasna/todos.git",
-  "gitCommit": "0615d8cf75416fa0cd8846dd95394574d25c82bf",
-  "gitTree": "cca883ccd7d6844e682869d38d4e9b588f256281",
-  "sourceTreeSha256": "a806a5f6d99bdfcb9aa142ea45c024dca2d11877310ed8e65c0f594184315cf7",
-  "generatedAt": "2026-08-10T15:43:01.000Z"
+  "gitCommit": "34751c1061a1947a6744a6258edc3a35e2c44e5f",
+  "gitTree": "c475638e8e15e320c77788bb801751180b96360a",
+  "sourceTreeSha256": "86687d0033f4f9f66be50d537891bbf47cfeee33518b064df796d1c04b42c987",
+  "generatedAt": "2026-08-10T21:23:08.000Z"
 }