@plandesk/api 1.0.0-beta.8 → 1.0.2

package/dist/services/tasks.d.ts

@@ -109,7 +109,7 @@ export declare function createTaskService(deps: TaskServiceDeps): {
         updated_at: string;
     } | undefined>;
     delete(id: string): Promise<boolean>;
-    claim(taskId: string, agentRef: string): Promise<ClaimTaskResult>;
+    claim(taskId: string, agentRef: string): Promise<ClaimTaskResult | undefined>;
     nextActionable(projectId: string, filter?: {
         goalId?: string;
         tags?: string[];

package/dist/services/tasks.js

@@ -43,6 +43,15 @@ export function createTaskService(deps) {
             if (!task) {
                 return undefined;
             }
+            try {
+                await assertProjectInOrg(db, task.projectId, resolveOrgId(deps));
+            }
+            catch (error) {
+                if (error instanceof ProjectNotInOrgError) {
+                    return undefined;
+                }
+                throw error;
+            }
             return serializeTask(task, await listTagsForTask(db, id));
         },
         async listByProject(projectId, filter = {}, pagination = {}) {
@@ -166,6 +175,19 @@ export function createTaskService(deps) {
         },
         async claim(taskId, agentRef) {
             assertPermission(deps, 'task', 'update');
+            const existing = await getTask(db, taskId);
+            if (!existing) {
+                return undefined;
+            }
+            try {
+                await assertProjectInOrg(db, existing.projectId, resolveOrgId(deps));
+            }
+            catch (error) {
+                if (error instanceof ProjectNotInOrgError) {
+                    return undefined;
+                }
+                throw error;
+            }
             const row = await claimTask(db, taskId, resolveOrgId(deps), agentRef);
             if (!row) {
                 return { claimed: false, reason: 'taken_or_not_actionable' };

package/dist/test-helpers.d.ts

@@ -16,6 +16,7 @@ type ProjectResponse = {
     id: string;
     name: string;
     description: string | null;
+    workspace_id: string;
     created_at: string;
     updated_at: string;
 };

package/dist/test-helpers.js

@@ -1,15 +1,29 @@
 import { randomUUID } from 'node:crypto';
 import { createDb, DEFAULT_ORG_ID, migrate } from '@plandesk/db';
 import { createApp } from './server.js';
+import { createBetterAuth, runBetterAuthMigrations } from './better-auth.js';
+import { ensureLocalBetterAuthOrganization } from './identity.js';
+const TEST_SECRET = 'test-secret-not-a-real-one-0123456789abcdef';
+const TEST_BASE_URL = 'http://localhost:3000';
 export async function createTestApp(opts) {
     const db = await createDb(':memory:');
     await migrate(db);
+    const auth = createBetterAuth({
+        client: db.$client,
+        secret: TEST_SECRET,
+        baseURL: TEST_BASE_URL,
+    });
+    if (auth !== undefined) {
+        await runBetterAuthMigrations(auth);
+        await ensureLocalBetterAuthOrganization(db, auth);
+    }
     return {
         app: createApp({
             db,
             authPassword: opts?.authPassword,
             bindHost: opts?.bindHost ?? '127.0.0.1',
             github: opts?.github,
+            betterAuth: { secret: TEST_SECRET, baseURL: TEST_BASE_URL },
         }),
         db,
         orgId: DEFAULT_ORG_ID,

package/dist/vercel.js

@@ -9,6 +9,7 @@ import { createApp } from './server.js';
 import { createServices } from './services/index.js';
 import { githubConfigFromEnv } from './github.js';
 import { createStorageAdapter } from './storage/index.js';
+import { createBetterAuth } from './better-auth.js';
 import { hostedMisconfigResponse, resolveHostedBetterAuth } from './hosted-auth.js';
 let appPromise;
 function vercelBaseUrlFallback() {
@@ -32,9 +33,16 @@ async function getApp() {
             PLANDESK_BASE_URL: process.env.PLANDESK_BASE_URL ?? vercelBaseUrlFallback(),
         });
         const db = await createDb(url, process.env.PLANDESK_DB_TOKEN);
+        const auth = createBetterAuth({
+            client: db.$client,
+            db,
+            secret: betterAuth.secret,
+            baseURL: betterAuth.baseURL,
+            github: githubConfigFromEnv(process.env),
+        });
         // Select s3 via PLANDESK_STORAGE=s3 (+ S3_* env); local remains default when unset.
         const storage = createStorageAdapter({ db, env: process.env });
-        const services = createServices({ db, storage });
+        const services = createServices({ db, auth, storage });
         return createApp({
             db,
             services,

package/dist/worker.js

@@ -112,7 +112,7 @@ export default {
         // Storage is optional: prefer R2 binding, then S3 creds, else unavailable
         // (file uploads/artifacts off — no crash). Mirrors `plandesk serve`.
         const storage = resolveWorkerStorage(env, db);
-        const services = createServices({ db, ...(storage !== undefined ? { storage } : {}) });
+        const services = createServices({ db, auth: authInstance, ...(storage !== undefined ? { storage } : {}) });
         const app = createApp({
             db,
             services,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@plandesk/api",
-  "version": "1.0.0-beta.8",
+  "version": "1.0.2",
   "type": "module",
   "exports": {
     ".": {
@@ -26,7 +26,7 @@
     "@libsql/kysely-libsql": "^0.4.1",
     "better-auth": "1.6.23",
     "hono": "^4.12.23",
-    "@plandesk/db": "1.0.0-beta.8"
+    "@plandesk/db": "1.0.0"
   },
   "description": "Plan Desk REST + SSE API and service layer (local-first planning workspace).",
   "license": "MIT",
@@ -48,7 +48,7 @@
     "tasks"
   ],
   "scripts": {
-    "build": "rm -rf dist && tsc -p tsconfig.json",
+    "build": "rm -rf dist && tsc -p tsconfig.build.json",
     "test": "vitest run",
     "lint": "eslint src"
   }