@hasna/todos 0.9.19 → 0.9.21

package/dist/server/index.js

@@ -646,6 +646,33 @@ var init_projects = __esm(() => {
   init_database();
 });
 
+// src/db/audit.ts
+var exports_audit = {};
+__export(exports_audit, {
+  logTaskChange: () => logTaskChange,
+  getTaskHistory: () => getTaskHistory,
+  getRecentActivity: () => getRecentActivity
+});
+function logTaskChange(taskId, action, field, oldValue, newValue, agentId, db) {
+  const d = db || getDatabase();
+  const id = uuid();
+  const timestamp = now();
+  d.run(`INSERT INTO task_history (id, task_id, action, field, old_value, new_value, agent_id, created_at)
+     VALUES (?, ?, ?, ?, ?, ?, ?, ?)`, [id, taskId, action, field || null, oldValue ?? null, newValue ?? null, agentId || null, timestamp]);
+  return { id, task_id: taskId, action, field: field || null, old_value: oldValue ?? null, new_value: newValue ?? null, agent_id: agentId || null, created_at: timestamp };
+}
+function getTaskHistory(taskId, db) {
+  const d = db || getDatabase();
+  return d.query("SELECT * FROM task_history WHERE task_id = ? ORDER BY created_at DESC").all(taskId);
+}
+function getRecentActivity(limit = 50, db) {
+  const d = db || getDatabase();
+  return d.query("SELECT * FROM task_history ORDER BY created_at DESC LIMIT ?").all(limit);
+}
+var init_audit = __esm(() => {
+  init_database();
+});
+
 // src/db/agents.ts
 var exports_agents = {};
 __export(exports_agents, {
@@ -746,6 +773,124 @@ var init_agents = __esm(() => {
   init_database();
 });
 
+// src/db/webhooks.ts
+var exports_webhooks = {};
+__export(exports_webhooks, {
+  listWebhooks: () => listWebhooks,
+  getWebhook: () => getWebhook,
+  dispatchWebhook: () => dispatchWebhook,
+  deleteWebhook: () => deleteWebhook,
+  createWebhook: () => createWebhook
+});
+function rowToWebhook(row) {
+  return { ...row, events: JSON.parse(row.events || "[]"), active: !!row.active };
+}
+function createWebhook(input, db) {
+  const d = db || getDatabase();
+  const id = uuid();
+  d.run(`INSERT INTO webhooks (id, url, events, secret, created_at) VALUES (?, ?, ?, ?, ?)`, [id, input.url, JSON.stringify(input.events || []), input.secret || null, now()]);
+  return getWebhook(id, d);
+}
+function getWebhook(id, db) {
+  const d = db || getDatabase();
+  const row = d.query("SELECT * FROM webhooks WHERE id = ?").get(id);
+  return row ? rowToWebhook(row) : null;
+}
+function listWebhooks(db) {
+  const d = db || getDatabase();
+  return d.query("SELECT * FROM webhooks ORDER BY created_at DESC").all().map(rowToWebhook);
+}
+function deleteWebhook(id, db) {
+  const d = db || getDatabase();
+  return d.run("DELETE FROM webhooks WHERE id = ?", [id]).changes > 0;
+}
+async function dispatchWebhook(event, payload, db) {
+  const webhooks = listWebhooks(db).filter((w) => w.active && (w.events.length === 0 || w.events.includes(event)));
+  for (const wh of webhooks) {
+    try {
+      const body = JSON.stringify({ event, payload, timestamp: now() });
+      const headers = { "Content-Type": "application/json" };
+      if (wh.secret) {
+        const encoder = new TextEncoder;
+        const key = await crypto.subtle.importKey("raw", encoder.encode(wh.secret), { name: "HMAC", hash: "SHA-256" }, false, ["sign"]);
+        const sig = await crypto.subtle.sign("HMAC", key, encoder.encode(body));
+        headers["X-Webhook-Signature"] = Array.from(new Uint8Array(sig)).map((b) => b.toString(16).padStart(2, "0")).join("");
+      }
+      fetch(wh.url, { method: "POST", headers, body }).catch(() => {});
+    } catch {}
+  }
+}
+var init_webhooks = __esm(() => {
+  init_database();
+});
+
+// src/db/templates.ts
+var exports_templates = {};
+__export(exports_templates, {
+  taskFromTemplate: () => taskFromTemplate,
+  listTemplates: () => listTemplates,
+  getTemplate: () => getTemplate,
+  deleteTemplate: () => deleteTemplate,
+  createTemplate: () => createTemplate
+});
+function rowToTemplate(row) {
+  return {
+    ...row,
+    tags: JSON.parse(row.tags || "[]"),
+    metadata: JSON.parse(row.metadata || "{}"),
+    priority: row.priority || "medium"
+  };
+}
+function createTemplate(input, db) {
+  const d = db || getDatabase();
+  const id = uuid();
+  d.run(`INSERT INTO task_templates (id, name, title_pattern, description, priority, tags, project_id, plan_id, metadata, created_at)
+     VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`, [
+    id,
+    input.name,
+    input.title_pattern,
+    input.description || null,
+    input.priority || "medium",
+    JSON.stringify(input.tags || []),
+    input.project_id || null,
+    input.plan_id || null,
+    JSON.stringify(input.metadata || {}),
+    now()
+  ]);
+  return getTemplate(id, d);
+}
+function getTemplate(id, db) {
+  const d = db || getDatabase();
+  const row = d.query("SELECT * FROM task_templates WHERE id = ?").get(id);
+  return row ? rowToTemplate(row) : null;
+}
+function listTemplates(db) {
+  const d = db || getDatabase();
+  return d.query("SELECT * FROM task_templates ORDER BY name").all().map(rowToTemplate);
+}
+function deleteTemplate(id, db) {
+  const d = db || getDatabase();
+  return d.run("DELETE FROM task_templates WHERE id = ?", [id]).changes > 0;
+}
+function taskFromTemplate(templateId, overrides = {}, db) {
+  const t = getTemplate(templateId, db);
+  if (!t)
+    throw new Error(`Template not found: ${templateId}`);
+  return {
+    title: overrides.title || t.title_pattern,
+    description: overrides.description ?? t.description ?? undefined,
+    priority: overrides.priority ?? t.priority,
+    tags: overrides.tags ?? t.tags,
+    project_id: overrides.project_id ?? t.project_id ?? undefined,
+    plan_id: overrides.plan_id ?? t.plan_id ?? undefined,
+    metadata: overrides.metadata ?? t.metadata,
+    ...overrides
+  };
+}
+var init_templates = __esm(() => {
+  init_database();
+});
+
 // src/server/serve.ts
 import { existsSync as existsSync4 } from "fs";
 import { join as join3, dirname as dirname2, extname } from "path";
@@ -853,6 +998,7 @@ function checkCompletionGuard(task, agentId, db, configOverride) {
 }
 
 // src/db/tasks.ts
+init_audit();
 function rowToTask(row) {
   return {
     ...row,
@@ -1076,6 +1222,17 @@ function updateTask(id, input, db) {
   if (input.tags !== undefined) {
     replaceTaskTags(id, input.tags, d);
   }
+  const agentId = task.assigned_to || task.agent_id || null;
+  if (input.status !== undefined && input.status !== task.status)
+    logTaskChange(id, "update", "status", task.status, input.status, agentId, d);
+  if (input.priority !== undefined && input.priority !== task.priority)
+    logTaskChange(id, "update", "priority", task.priority, input.priority, agentId, d);
+  if (input.title !== undefined && input.title !== task.title)
+    logTaskChange(id, "update", "title", task.title, input.title, agentId, d);
+  if (input.assigned_to !== undefined && input.assigned_to !== task.assigned_to)
+    logTaskChange(id, "update", "assigned_to", task.assigned_to, input.assigned_to, agentId, d);
+  if (input.approved_by !== undefined)
+    logTaskChange(id, "approve", "approved_by", null, input.approved_by, agentId, d);
   return getTask(id, d);
 }
 function deleteTask(id, db) {
@@ -1097,6 +1254,7 @@ function startTask(id, agentId, db) {
       throw new LockError(id, current.locked_by);
     }
   }
+  logTaskChange(id, "start", "status", "pending", "in_progress", agentId, d);
   return getTask(id, d);
 }
 function completeTask(id, agentId, db) {
@@ -1111,6 +1269,7 @@ function completeTask(id, agentId, db) {
   const timestamp = now();
   d.run(`UPDATE tasks SET status = 'completed', locked_by = NULL, locked_at = NULL, completed_at = ?, version = version + 1, updated_at = ?
      WHERE id = ?`, [timestamp, timestamp, id]);
+  logTaskChange(id, "complete", "status", task.status, "completed", agentId || null, d);
   return getTask(id, d);
 }
 
@@ -1539,6 +1698,59 @@ Dashboard not found at: ${dashboardDir}`);
           return json({ error: e instanceof Error ? e.message : "Failed" }, 500, port);
         }
       }
+      if (path === "/api/activity" && method === "GET") {
+        const limit = parseInt(url.searchParams.get("limit") || "50", 10);
+        const { getRecentActivity: getRecentActivity2 } = await Promise.resolve().then(() => (init_audit(), exports_audit));
+        return json(getRecentActivity2(limit), 200, port);
+      }
+      const historyMatch = path.match(/^\/api\/tasks\/([^/]+)\/history$/);
+      if (historyMatch && method === "GET") {
+        const id = historyMatch[1];
+        const { getTaskHistory: getTaskHistory2 } = await Promise.resolve().then(() => (init_audit(), exports_audit));
+        return json(getTaskHistory2(id), 200, port);
+      }
+      if (path === "/api/webhooks" && method === "GET") {
+        const { listWebhooks: listWebhooks2 } = await Promise.resolve().then(() => (init_webhooks(), exports_webhooks));
+        return json(listWebhooks2(), 200, port);
+      }
+      if (path === "/api/webhooks" && method === "POST") {
+        try {
+          const body = await req.json();
+          if (!body.url)
+            return json({ error: "Missing url" }, 400, port);
+          const { createWebhook: createWebhook2 } = await Promise.resolve().then(() => (init_webhooks(), exports_webhooks));
+          return json(createWebhook2(body), 201, port);
+        } catch (e) {
+          return json({ error: e instanceof Error ? e.message : "Failed" }, 500, port);
+        }
+      }
+      const webhookMatch = path.match(/^\/api\/webhooks\/([^/]+)$/);
+      if (webhookMatch && method === "DELETE") {
+        const { deleteWebhook: deleteWebhook2 } = await Promise.resolve().then(() => (init_webhooks(), exports_webhooks));
+        const deleted = deleteWebhook2(webhookMatch[1]);
+        return json(deleted ? { success: true } : { error: "Not found" }, deleted ? 200 : 404, port);
+      }
+      if (path === "/api/templates" && method === "GET") {
+        const { listTemplates: listTemplates2 } = await Promise.resolve().then(() => (init_templates(), exports_templates));
+        return json(listTemplates2(), 200, port);
+      }
+      if (path === "/api/templates" && method === "POST") {
+        try {
+          const body = await req.json();
+          if (!body.name || !body.title_pattern)
+            return json({ error: "Missing name or title_pattern" }, 400, port);
+          const { createTemplate: createTemplate2 } = await Promise.resolve().then(() => (init_templates(), exports_templates));
+          return json(createTemplate2(body), 201, port);
+        } catch (e) {
+          return json({ error: e instanceof Error ? e.message : "Failed" }, 500, port);
+        }
+      }
+      const templateMatch = path.match(/^\/api\/templates\/([^/]+)$/);
+      if (templateMatch && method === "DELETE") {
+        const { deleteTemplate: deleteTemplate2 } = await Promise.resolve().then(() => (init_templates(), exports_templates));
+        const deleted = deleteTemplate2(templateMatch[1]);
+        return json(deleted ? { success: true } : { error: "Not found" }, deleted ? 200 : 404, port);
+      }
       if (path === "/api/plans" && method === "GET") {
         const projectId = url.searchParams.get("project_id") || undefined;
         const plans = listPlans(projectId);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hasna/todos",
-  "version": "0.9.19",
+  "version": "0.9.21",
   "description": "Universal task management for AI coding agents - CLI + MCP server + interactive TUI",
   "type": "module",
   "main": "dist/index.js",