@sleep2agi/commhub-server 0.9.0-preview.64 → 0.9.0-preview.65

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sleep2agi/commhub-server",
-  "version": "0.9.0-preview.64",
+  "version": "0.9.0-preview.65",
   "description": "CommHub Server — AI Agent communication hub with MCP protocol, multi-network isolation, user auth, and MCP tools (17 collaboration-core + node/provider ops tools; authoritative list: docs-site/docs/api/mcp-tools.md).",
   "type": "module",
   "main": "src/index.ts",

package/src/requirements-http.test.ts

@@ -187,6 +187,51 @@ describe("requirements stay on the hub", () => {
     expect(bad.status).toBe(400);
   });
 
+  test("an existing card can change its text without dropping omitted fields", async () => {
+    const { db } = await import("./db.js");
+    const ownerId = db.get<{ owner_id: string }>("SELECT owner_id FROM networks WHERE network_id=?1", ownerNetwork)!.owner_id;
+    const created = await api(ownerToken, "/api/requirements", {
+      method: "POST",
+      body: JSON.stringify({
+        name: "旧标题",
+        priority: "low",
+        assignee: "node-a",
+        due: "2026-10-01",
+        column: "doing",
+        owner: { kind: "user", id: ownerId },
+      }),
+    });
+    expect(created.status).toBe(201);
+    const id = created.body.requirement.id;
+    const renamed = await api(ownerToken, `/api/requirements/${id}`, {
+      method: "PATCH",
+      body: JSON.stringify({ name: "新标题" }),
+    });
+    expect(renamed.status).toBe(200);
+    expect(renamed.body.requirement.name).toBe("新标题");
+    expect(renamed.body.requirement.priority).toBe("low");
+    expect(renamed.body.requirement.assignee).toBe("node-a");
+    expect(renamed.body.requirement.due).toBe("2026-10-01");
+    expect(renamed.body.requirement.column).toBe("doing");
+    expect(renamed.body.requirement.owner).toEqual({ kind: "user", id: ownerId });
+    const cleared = await api(ownerToken, `/api/requirements/${id}`, {
+      method: "PATCH",
+      body: JSON.stringify({ due: "", assignee: "", priority: "high" }),
+    });
+    expect(cleared.status).toBe(200);
+    expect(cleared.body.requirement.name).toBe("新标题");
+    expect(cleared.body.requirement.due).toBe("");
+    expect(cleared.body.requirement.assignee).toBe("");
+    expect(cleared.body.requirement.priority).toBe("high");
+    expect(cleared.body.requirement.owner).toEqual({ kind: "user", id: ownerId });
+    expect((await api(ownerToken, `/api/requirements/${id}`, { method: "PATCH", body: JSON.stringify({ name: "  " }) })).status).toBe(400);
+    expect((await api(ownerToken, `/api/requirements/${id}`, { method: "PATCH", body: JSON.stringify({ due: "2026-13-01" }) })).status).toBe(400);
+    expect((await api(viewerToken, `/api/requirements/${id}`, { method: "PATCH", body: JSON.stringify({ name: "越权" }) })).status).toBe(403);
+    expect((await api(otherToken, `/api/requirements/${id}`, { method: "PATCH", body: JSON.stringify({ name: "别人的" }) })).status).toBe(404);
+    const listed = await api(ownerToken, "/api/requirements");
+    expect(listed.body.requirements.find((row: { id: string }) => row.id === id).name).toBe("新标题");
+  });
+
   test("empty name and a bad date are rejected", async () => {
     const empty = await api(ownerToken, "/api/requirements", { method: "POST", body: JSON.stringify({ name: "  " }) });
     expect(empty.status).toBe(400);

package/src/requirements.ts

@@ -234,7 +234,11 @@ export async function handleRequirementsRequest(ctx: RequirementsRequestContext)
   try { body = await bodyObject(req); } catch { return jsonError("invalid_json", 400); }
   const hasColumn = 'column' in body;
   const hasIssues = Object.prototype.hasOwnProperty.call(body, "issues");
-  if (!hasColumn && !hasIssues && !('owner' in body) && !('participants' in body)) return jsonError('empty_patch', 400);
+  const hasName = 'name' in body;
+  const hasPriority = 'priority' in body;
+  const hasDue = 'due' in body;
+  const hasAssignee = 'assignee' in body;
+  if (!hasColumn && !hasIssues && !hasName && !hasPriority && !hasDue && !hasAssignee && !('owner' in body) && !('participants' in body)) return jsonError('empty_patch', 400);
   if (hasColumn && !COLUMNS.has(String(body.column))) return jsonError("invalid_column", 400);
   const issues = hasIssues ? normalizeIssues(body.issues) : null;
   if (hasIssues && issues === null) return jsonError("invalid_issues", 400);
@@ -244,12 +248,33 @@ export async function handleRequirementsRequest(ctx: RequirementsRequestContext)
   const row = db.get<Row>(sql, ...params);
   if (!row) return jsonError("requirement_not_found", 404);
   if (!canWrite(ctx, row.network_id)) return jsonError("permission_denied", 403);
+  let name = row.title;
+  if (hasName) {
+    name = typeof body.name === "string" ? body.name.trim() : "";
+    if (!name || name.length > 80) return jsonError("invalid_name", 400);
+  }
+  let priority = row.priority;
+  if (hasPriority) {
+    if (typeof body.priority !== "string" || !PRIORITIES.has(body.priority)) return jsonError("invalid_priority", 400);
+    priority = body.priority;
+  }
+  let due = row.due_on || "";
+  if (hasDue) {
+    if (typeof body.due !== "string") return jsonError("invalid_due", 400);
+    due = body.due.trim();
+    if (due && !dueOk(due)) return jsonError("invalid_due", 400);
+  }
+  let assignee = row.assignee || "";
+  if (hasAssignee) {
+    if (typeof body.assignee !== "string") return jsonError("invalid_assignee", 400);
+    assignee = body.assignee.trim().slice(0, 80);
+  }
   let people;
   try { people = assignments(body, row.network_id, row); } catch (e) { return jsonError((e as Error).message, 400); }
   const updatedAt = new Date().toISOString();
   db.run(
-    "UPDATE requirements SET column_name = ?1, updated_at = ?2, owner_json = ?4, participants_json = ?5, issues_json = ?6 WHERE requirement_id = ?3",
-    [hasColumn ? body.column : row.column_name, updatedAt, row.requirement_id, people.ownerJson, people.participantsJson, hasIssues ? JSON.stringify(issues) : row.issues_json],
+    "UPDATE requirements SET column_name = ?1, updated_at = ?2, title = ?7, priority = ?8, due_on = ?9, assignee = ?10, owner_json = ?4, participants_json = ?5, issues_json = ?6 WHERE requirement_id = ?3",
+    [hasColumn ? body.column : row.column_name, updatedAt, row.requirement_id, people.ownerJson, people.participantsJson, hasIssues ? JSON.stringify(issues) : row.issues_json, name, priority, due || null, assignee],
   );
   const updated = db.get<Row>(`SELECT ${SELECT} FROM requirements WHERE requirement_id = ?1`, row.requirement_id)!;
   return Response.json({ ok: true, requirement: toPublic(updated) });