@hasna/todos 0.15.28 → 0.15.29

package/dist/server/index.js

@@ -70,7 +70,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "@hasna/todos",
-    version: "0.15.28",
+    version: "0.15.29",
     description: "Universal task management for AI coding agents - CLI + MCP server + interactive TUI",
     type: "module",
     main: "dist/index.js",
@@ -6612,6 +6612,12 @@ function sqliteTodosProjectRegistrationSchemaSql() {
         authority_id, tenant_id, corpus_id, operation_id, step_id,
         resource_kind, direction, idempotency_key
       );
+    CREATE INDEX IF NOT EXISTS idx_todos_project_registration_receipts_source_identity
+      ON todos_project_registration_receipts (
+        authority_id, tenant_id, corpus_id, route, package_version,
+        operation_id, step_id, resource_kind, direction, idempotency_key,
+        target_selector
+      );
     CREATE INDEX IF NOT EXISTS idx_todos_project_registration_receipts_step
       ON todos_project_registration_receipts (
         authority_id, tenant_id, corpus_id, operation_id, step_id,
@@ -6711,6 +6717,12 @@ function postgresTodosProjectRegistrationSchemaSql() {
         authority_id, tenant_id, corpus_id, operation_id, step_id,
         resource_kind, direction, idempotency_key
       )`,
+    `CREATE INDEX IF NOT EXISTS todos_project_registration_receipts_source_identity_idx
+      ON todos_project_registration_receipts (
+        authority_id, tenant_id, corpus_id, route, package_version,
+        operation_id, step_id, resource_kind, direction, idempotency_key,
+        target_selector
+      )`,
     `CREATE INDEX IF NOT EXISTS todos_project_registration_receipts_step_idx
       ON todos_project_registration_receipts (
         authority_id, tenant_id, corpus_id, operation_id, step_id,
@@ -6852,8 +6864,9 @@ class PostgresTodosProjectRegistrationTransaction {
     const result = await this.client.query(`
       SELECT * FROM todos_project_registration_receipts
       WHERE authority_id = $1 AND tenant_id = $2 AND corpus_id = $3
-        AND operation_id = $4 AND step_id = $5 AND resource_kind = $6
-        AND direction = $7 AND idempotency_key = $8 AND target_selector = $9
+        AND route = $4 AND package_version = $5
+        AND operation_id = $6 AND step_id = $7 AND resource_kind = $8
+        AND direction = $9 AND idempotency_key = $10 AND target_selector = $11
       ORDER BY CASE outcome
         WHEN 'terminal_nonacceptance' THEN 0
         WHEN 'duplicate_of_accepted' THEN 1
@@ -6864,6 +6877,8 @@ class PostgresTodosProjectRegistrationTransaction {
       identity.authority_id,
       identity.tenant_id,
       identity.corpus_id,
+      identity.route,
+      identity.package_version,
       identity.operation_id,
       identity.step_id,
       identity.resource_kind,
@@ -20463,6 +20478,7 @@ class SqliteTodosProjectRegistrationTransaction {
     const row = this.db.query(`
       SELECT * FROM todos_project_registration_receipts
       WHERE authority_id = ? AND tenant_id = ? AND corpus_id = ?
+        AND route = ? AND package_version = ?
         AND operation_id = ? AND step_id = ? AND resource_kind = ?
         AND direction = ? AND idempotency_key = ? AND target_selector = ?
       ORDER BY CASE outcome
@@ -20471,7 +20487,7 @@ class SqliteTodosProjectRegistrationTransaction {
         ELSE 2
       END, created_at DESC, receipt_id DESC
       LIMIT 1
-    `).get(identity.authority_id, identity.tenant_id, identity.corpus_id, identity.operation_id, identity.step_id, identity.resource_kind, identity.direction, identity.idempotency_key, identity.target_selector);
+    `).get(identity.authority_id, identity.tenant_id, identity.corpus_id, identity.route, identity.package_version, identity.operation_id, identity.step_id, identity.resource_kind, identity.direction, identity.idempotency_key, identity.target_selector);
     return row ? receiptFromRow2(row) : null;
   }
   async getReceiptById(receiptId) {
@@ -20625,7 +20641,7 @@ class StagedSqliteTodosProjectRegistrationTransaction {
   }
   async lockStep(_identity) {}
   async getReceiptForLookup(identity) {
-    const staged = [...this.receipts.values()].filter((receipt) => receipt.authority_id === identity.authority_id && receipt.tenant_id === identity.tenant_id && receipt.corpus_id === identity.corpus_id && receipt.operation_id === identity.operation_id && receipt.step_id === identity.step_id && receipt.resource_kind === identity.resource_kind && receipt.direction === identity.direction && receipt.idempotency_key === identity.idempotency_key && receipt.target_selector === identity.target_selector);
+    const staged = [...this.receipts.values()].filter((receipt) => receipt.authority_id === identity.authority_id && receipt.tenant_id === identity.tenant_id && receipt.corpus_id === identity.corpus_id && receipt.route === identity.route && receipt.package_version === identity.package_version && receipt.operation_id === identity.operation_id && receipt.step_id === identity.step_id && receipt.resource_kind === identity.resource_kind && receipt.direction === identity.direction && receipt.idempotency_key === identity.idempotency_key && receipt.target_selector === identity.target_selector);
     const stored = await this.direct.getReceiptForLookup(identity);
     if (stored)
       staged.push(stored);
@@ -21460,6 +21476,8 @@ class PackageOwnedTodosProjectRegistrationAuthority {
   async existingForwardResolution(transaction, request, callDigest) {
     const exact = await transaction.getReceiptForLookup({
       ...authorityScope(this.capabilityValue),
+      route: this.capabilityValue.route,
+      package_version: this.capabilityValue.package_version,
       operation_id: request.operation_id,
       step_id: request.step_id,
       resource_kind: request.resource_kind,
@@ -21612,6 +21630,8 @@ class PackageOwnedTodosProjectRegistrationAuthority {
       });
       const exact = await transaction.getReceiptForLookup({
         ...authorityScope(this.capabilityValue),
+        route: this.capabilityValue.route,
+        package_version: this.capabilityValue.package_version,
         operation_id: request.operation_id,
         step_id: request.step_id,
         resource_kind: request.resource_kind,
@@ -21662,9 +21682,18 @@ class PackageOwnedTodosProjectRegistrationAuthority {
     if (request.max_items !== 1) {
       throw new TodosProjectRegistrationError("TODOS_PROJECT_REGISTRATION_INVALID_BOUNDS", "max_items must be exactly 1 for terminal receipt lookup");
     }
-    if (request.authority !== "todos" || request.authority_route !== this.capabilityValue.route || request.package_version !== this.capabilityValue.package_version || request.authority_id !== this.capabilityValue.authority_id || request.tenant_id !== this.capabilityValue.tenant_id || request.corpus_id !== this.capabilityValue.corpus_id) {
+    if (request.authority !== "todos" || request.authority_id !== this.capabilityValue.authority_id || request.tenant_id !== this.capabilityValue.tenant_id || request.corpus_id !== this.capabilityValue.corpus_id) {
       throw new TodosProjectRegistrationError("TODOS_PROJECT_REGISTRATION_CAPABILITY_MISMATCH", "receipt lookup does not match this authority capability identity");
     }
+    requireString(request.authority_route, "authority_route", {
+      min: 3,
+      max: 128,
+      pattern: AUTHORITY_ROUTE_PATTERN
+    });
+    requireString(request.package_version, "package_version", {
+      max: 128,
+      pattern: PACKAGE_VERSION_PATTERN
+    });
     requireString(request.operation_id, "operation_id", {
       min: 8,
       max: 128,
@@ -21686,6 +21715,8 @@ class PackageOwnedTodosProjectRegistrationAuthority {
     }
     const receipt = await this.backend.getReceiptForLookup({
       ...authorityScope(this.capabilityValue),
+      route: request.authority_route,
+      package_version: request.package_version,
       operation_id: request.operation_id,
       step_id: request.step_id,
       resource_kind: request.resource_kind,
@@ -21724,6 +21755,8 @@ class PackageOwnedTodosProjectRegistrationAuthority {
         });
         const exact = await transaction.getReceiptForLookup({
           ...authorityScope(this.capabilityValue),
+          route: this.capabilityValue.route,
+          package_version: this.capabilityValue.package_version,
           operation_id: request.operation_id,
           step_id: request.step_id,
           resource_kind: request.resource_kind,
@@ -21818,6 +21851,8 @@ class PackageOwnedTodosProjectRegistrationAuthority {
     await this.storedAcceptedReceipt(request, accepted);
     const receipt = await this.backend.getReceiptForLookup({
       ...authorityScope(this.capabilityValue),
+      route: this.capabilityValue.route,
+      package_version: this.capabilityValue.package_version,
       operation_id: request.operation_id,
       step_id: request.step_id,
       resource_kind: request.resource_kind,
@@ -21862,7 +21897,7 @@ function createPostgresTodosProjectRegistrationAuthority(client, options = {}) {
     cursorTableName
   }), authorityOptions);
 }
-var UUID_PATTERN, WORKSPACE_ID_PATTERN, OPERATION_PATTERN, STEP_PATTERN, SHA256_PATTERN, IDEMPOTENCY_PATTERN, WriteBoundaryError;
+var UUID_PATTERN, WORKSPACE_ID_PATTERN, OPERATION_PATTERN, STEP_PATTERN, AUTHORITY_ROUTE_PATTERN, PACKAGE_VERSION_PATTERN, SHA256_PATTERN, IDEMPOTENCY_PATTERN, WriteBoundaryError;
 var init_authority = __esm(() => {
   init_package_version();
   init_postgres2();
@@ -21872,6 +21907,8 @@ var init_authority = __esm(() => {
   WORKSPACE_ID_PATTERN = /^wks_[A-Za-z0-9][A-Za-z0-9_-]{11,}$/;
   OPERATION_PATTERN = /^[A-Za-z0-9][A-Za-z0-9._:-]{7,127}$/;
   STEP_PATTERN = /^[A-Za-z0-9][A-Za-z0-9._:-]{2,127}$/;
+  AUTHORITY_ROUTE_PATTERN = /^[A-Za-z0-9][A-Za-z0-9._:-]{2,127}$/;
+  PACKAGE_VERSION_PATTERN = /^[A-Za-z0-9][A-Za-z0-9._+-]{0,127}$/;
   SHA256_PATTERN = /^[0-9a-f]{64}$/;
   IDEMPOTENCY_PATTERN = /^prk_[0-9a-f]{48}$/;
   WriteBoundaryError = class WriteBoundaryError extends Error {

package/dist/storage.js

@@ -520,6 +520,12 @@ function sqliteTodosProjectRegistrationSchemaSql() {
         authority_id, tenant_id, corpus_id, operation_id, step_id,
         resource_kind, direction, idempotency_key
       );
+    CREATE INDEX IF NOT EXISTS idx_todos_project_registration_receipts_source_identity
+      ON todos_project_registration_receipts (
+        authority_id, tenant_id, corpus_id, route, package_version,
+        operation_id, step_id, resource_kind, direction, idempotency_key,
+        target_selector
+      );
     CREATE INDEX IF NOT EXISTS idx_todos_project_registration_receipts_step
       ON todos_project_registration_receipts (
         authority_id, tenant_id, corpus_id, operation_id, step_id,
@@ -619,6 +625,12 @@ function postgresTodosProjectRegistrationSchemaSql() {
         authority_id, tenant_id, corpus_id, operation_id, step_id,
         resource_kind, direction, idempotency_key
       )`,
+    `CREATE INDEX IF NOT EXISTS todos_project_registration_receipts_source_identity_idx
+      ON todos_project_registration_receipts (
+        authority_id, tenant_id, corpus_id, route, package_version,
+        operation_id, step_id, resource_kind, direction, idempotency_key,
+        target_selector
+      )`,
     `CREATE INDEX IF NOT EXISTS todos_project_registration_receipts_step_idx
       ON todos_project_registration_receipts (
         authority_id, tenant_id, corpus_id, operation_id, step_id,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hasna/todos",
-  "version": "0.15.28",
+  "version": "0.15.29",
   "description": "Universal task management for AI coding agents - CLI + MCP server + interactive TUI",
   "type": "module",
   "main": "dist/index.js",