hoja-cli 0.21.4__py3-none-any.whl

hoja_server/schema.graphql

@@ -0,0 +1,477 @@
+# Linear-compatible GraphQL SDL — the subset hoja actually uses.
+# Field names are EXACT camelCase; hoja's Pydantic models alias to these.
+
+scalar DateTime
+scalar TimelessDate
+scalar JSON
+
+type Organization {
+  id: ID!
+  name: String!
+  urlKey: String!
+}
+
+type ApiKey {
+  id: ID!
+  label: String
+  access: String
+  hint: String
+  expiresAt: DateTime
+  lastUsedAt: DateTime
+  createdAt: DateTime
+  revokedAt: DateTime
+}
+
+type ApiKeyPayload {
+  success: Boolean!
+  apiKey: ApiKey
+  secret: String
+}
+
+type UserPreferencesPayload {
+  success: Boolean!
+  theme: String
+  fontSize: String
+}
+
+
+type NotificationPreferencesPayload {
+  success: Boolean!
+  issueCreated: Boolean!
+  issueUpdated: Boolean!
+}
+
+type WorkspaceMembership {
+  id: ID!
+  organizationId: ID!
+  name: String!
+  urlKey: String!
+  role: String!
+}
+
+type OrganizationPayload {
+  success: Boolean!
+  organization: Organization
+}
+
+type UserPayload {
+  success: Boolean!
+  user: User
+  apiKey: String
+  inviteCode: String
+}
+
+input InitiativeCreateInput { name: String! summary: String status: String priority: Int ownerId: String targetDate: TimelessDate projectIds: [String!] }
+input InitiativeUpdateInput { name: String summary: String status: String priority: Int ownerId: String targetDate: TimelessDate projectIds: [String!] }
+
+input WorkspaceUpdateInput {
+  name: String
+  urlKey: String
+}
+
+input WorkspaceCreateInput {
+  name: String!
+  urlKey: String!
+}
+
+input MemberInviteInput {
+  email: String!
+  name: String!
+  admin: Boolean = false
+  teamIds: [String!]
+}
+
+type Query {
+  viewer: User
+  myApiKeys: [ApiKey!]!
+  myPreferences: UserPreferencesPayload!
+  myNotificationPreferences: NotificationPreferencesPayload!
+  issueLabelSettings: [IssueLabel!]!
+  myWorkspaces: [WorkspaceMembership!]!
+  organizationMembers(first: Int = 100): UserConnection
+  pendingMembershipInvitations: [PendingMembershipInvitation!]!
+  workspace: Organization
+  teams(first: Int = 50, after: String, filter: TeamFilter): TeamConnection
+  team(id: String!): Team
+  issues(filter: IssueFilter, first: Int = 50, after: String, orderBy: PaginationOrderBy): IssueConnection
+  issue(id: String!): Issue
+  myIssueActivity(first: Int = 50, after: String): MyIssueActivityConnection
+  inboxNotifications(first: Int = 50, after: String, unreadOnly: Boolean = false, archived: Boolean = false): InboxNotificationConnection
+  inboxUnreadCount: Int!
+  projects(filter: ProjectFilter, first: Int = 50, after: String): ProjectConnection
+  initiatives(first: Int = 50, after: String, status: String): InitiativeConnection
+  initiative(id: String!): Initiative
+  projectUpdates(first: Int = 50, after: String, filter: ProjectUpdateFilter): ProjectUpdateConnection
+  project(id: String!): Project
+  workflowStates(filter: WorkflowStateFilter, first: Int = 100, after: String): WorkflowStateConnection
+  cycles(filter: CycleFilter, first: Int = 100, after: String): CycleConnection
+  cycle(id: String!): Cycle
+  teamCycleCadence(teamId: String!): TeamCycleCadence!
+  issueLabels(filter: IssueLabelFilter, first: Int = 100, after: String): IssueLabelConnection
+  searchIssues(term: String!, first: Int = 20): IssueConnection
+  rateLimitStatus: RateLimitPayload
+}
+
+type Mutation {
+  apiKeyCreate(label: String!, access: String = "read_write", expiresAt: DateTime): ApiKeyPayload
+  apiKeyRevoke(id: String!): Boolean!
+  userPreferenceSet(key: String!, value: String!): UserPreferencesPayload!
+  profileNameUpdate(name: String!): UserPayload
+  notificationPreferenceSet(kind: String!, enabled: Boolean!): NotificationPreferencesPayload!
+  workspaceCreate(input: WorkspaceCreateInput!): OrganizationPayload
+  teamCreate(input: TeamCreateInput!): TeamPayload
+  teamUpdate(id: String!, input: TeamUpdateInput!): TeamPayload
+  teamArchive(id: String!): DeletePayload
+  teamDelete(id: String!, deleteIssues: Boolean = false): DeletePayload
+  workspaceSwitch(organizationId: String!): OrganizationPayload
+  membershipInvitationCreate(userId: String!): UserPayload
+  membershipInvitationAccept(code: String!, inviteePassword: String!): OrganizationPayload
+  membershipInvitationRevoke(userId: String!): DeletePayload
+  memberDeactivate(userId: String!): UserPayload
+  memberReactivate(userId: String!): UserPayload
+  workspaceUpdate(input: WorkspaceUpdateInput!): OrganizationPayload
+  memberInvite(input: MemberInviteInput!): UserPayload
+  memberRoleUpdate(userId: String!, admin: Boolean!): UserPayload
+  teamMemberAdd(teamId: String!, userId: String!, role: String = "member"): UserPayload
+  teamMemberRemove(teamId: String!, userId: String!): UserPayload
+  issueCreate(input: IssueCreateInput!): IssuePayload
+  issueUpdate(id: String!, input: IssueUpdateInput!): IssuePayload
+  notificationMarkRead(id: String!): Boolean!
+  notificationArchive(id: String!): Boolean!
+  notificationMarkAllRead: Boolean!
+  issueDelete(id: String!): DeletePayload
+  issueArchive(id: String!): DeletePayload
+  issueSubscribe(id: String!): Boolean!
+  issueUnsubscribe(id: String!): Boolean!
+  commentCreate(input: CommentCreateInput!): CommentPayload
+  commentUpdate(id: String!, input: CommentUpdateInput!): CommentPayload
+  commentDelete(id: String!): DeletePayload
+  issueLabelCreate(input: IssueLabelCreateInput!): IssueLabelPayload
+  issueLabelDelete(id: String!): DeletePayload
+  issueLabelUpdate(id: String!, input: IssueLabelUpdateInput!): IssueLabelPayload
+  projectCreate(input: ProjectCreateInput!): ProjectPayload
+  projectUpdate(id: String!, input: ProjectUpdateInput!): ProjectPayload
+  projectUpdateCreate(input: ProjectUpdateCreateInput!): ProjectUpdatePayload
+  projectArchive(id: String!): DeletePayload
+  teamCycleCadenceEnable(teamId: String!, weekday: Int!): TeamCycleCadence!
+  cycleUpdate(id: String!, input: CycleUpdateInput!): CyclePayload
+  initiativeCreate(input: InitiativeCreateInput!): InitiativePayload
+  initiativeUpdate(id: String!, input: InitiativeUpdateInput!): InitiativePayload
+  initiativeArchive(id: String!): DeletePayload
+  attachmentCreate(input: AttachmentCreateInput!): AttachmentPayload
+}
+
+enum PaginationOrderBy { createdAt updatedAt }
+
+type PageInfo {
+  hasNextPage: Boolean!
+  hasPreviousPage: Boolean!
+  startCursor: String
+  endCursor: String
+}
+
+type InboxNotification {
+  id: ID!
+  issue: Issue!
+  actor: User
+  kind: String!
+  createdAt: DateTime!
+  readAt: DateTime
+  archivedAt: DateTime
+}
+type InboxNotificationConnection { nodes: [InboxNotification!]! pageInfo: PageInfo! }
+
+type User {
+  id: ID!
+  name: String
+  displayName: String
+  email: String
+  active: Boolean
+  isMe: Boolean
+  admin: Boolean
+  avatarUrl: String
+  url: String
+  timezone: String
+  statusEmoji: String
+  statusLabel: String
+  createdAt: DateTime
+  updatedAt: DateTime
+}
+
+type Team {
+  id: ID!
+  name: String!
+  key: String!
+  description: String
+  color: String
+  icon: String
+  visibility: String!
+  parentTeamId: ID
+  parent: Team
+  children(first: Int = 100): TeamConnection
+  timezone: String
+  createdAt: DateTime
+  updatedAt: DateTime
+  states(first: Int = 100): WorkflowStateConnection
+  members(first: Int = 100): UserConnection
+  cycles(first: Int = 50): CycleConnection
+  activeCycle: Cycle
+  autoAddStarted: Boolean
+  autoAddCompleted: Boolean
+  autoAddBacklog: Boolean
+}
+
+type WorkflowState {
+  id: ID!
+  name: String!
+  color: String
+  description: String
+  position: Float
+  type: String!
+  createdAt: DateTime
+  updatedAt: DateTime
+  team: Team
+}
+
+type IssueLabel {
+  id: ID!
+  name: String!
+  color: String
+  description: String
+  createdAt: DateTime
+  updatedAt: DateTime
+}
+
+type TeamCycleCadence { enabled: Boolean! weekday: Int timezone: String! policyVersion: Int! activeCycle: Cycle upcomingCycles: [Cycle!]! }
+
+type Cycle {
+  id: ID!
+  name: String
+  description: String
+  number: Int
+  startsAt: DateTime
+  endsAt: DateTime
+  completedAt: DateTime
+  progress: Float
+  createdAt: DateTime
+  updatedAt: DateTime
+  team: Team
+}
+
+type Project {
+  id: ID!
+  name: String!
+  description: String
+  slugId: String
+  icon: String
+  color: String
+  state: String
+  progress: Float
+  startDate: TimelessDate
+  targetDate: TimelessDate
+  url: String
+  lead: User
+  creator: User
+  members(first: Int = 100): UserConnection
+  teams(first: Int = 100): TeamConnection
+  "Events on this project's issues (created, updated, comments, archived), newest first."
+  activity(first: Int = 50, after: String, eventTypes: [String!]): MyIssueActivityConnection
+  health: String
+  createdAt: DateTime
+  updatedAt: DateTime
+}
+
+input ProjectUpdateFilter { project: ProjectFilter }
+
+type ProjectUpdate {
+  id: ID!
+  project: Project!
+  status: String
+  body: String!
+  createdAt: DateTime!
+  actor: User
+  progress: Float
+  health: String
+}
+type ProjectUpdatePayload { success: Boolean! projectUpdate: ProjectUpdate }
+
+type Comment {
+  id: ID!
+  body: String!
+  url: String
+  user: User
+  createdAt: DateTime
+  updatedAt: DateTime
+  "When the author last changed the body; null if never edited."
+  editedAt: DateTime
+  "Whether the viewer may edit this comment (author only)."
+  canEdit: Boolean!
+  "Whether the viewer may delete this comment (author or workspace admin)."
+  canDelete: Boolean!
+}
+
+type Issue {
+  id: ID!
+  identifier: String!
+  title: String!
+  description: String
+  priority: Int
+  priorityLabel: String
+  estimate: Float
+  url: String
+  branchName: String
+  number: Int
+  createdAt: DateTime
+  updatedAt: DateTime
+  dueDate: DateTime
+  completedAt: DateTime
+  canceledAt: DateTime
+  startedAt: DateTime
+  stateChangedAt: DateTime
+  snoozedUntilAt: DateTime
+  state: WorkflowState
+  assignee: User
+  creator: User
+  team: Team
+  project: Project
+  cycle: Cycle
+  parent: Issue
+  children(first: Int = 50, after: String): IssueConnection
+  labels(first: Int = 50): IssueLabelConnection
+  subscribers(first: Int = 50): UserConnection
+  comments(first: Int = 50): CommentConnection
+  attachments(first: Int = 50): AttachmentConnection
+  activity(first: Int = 50, after: String): IssueActivityConnection
+}
+
+type UserConnection { nodes: [User!]! pageInfo: PageInfo! }
+type TeamPayload { success: Boolean! team: Team }
+type TeamConnection { nodes: [Team!]! pageInfo: PageInfo! }
+type WorkflowStateConnection { nodes: [WorkflowState!]! pageInfo: PageInfo! }
+type IssueConnection { nodes: [Issue!]! pageInfo: PageInfo! }
+type IssueLabelConnection { nodes: [IssueLabel!]! pageInfo: PageInfo! }
+type ProjectConnection { nodes: [Project!]! pageInfo: PageInfo! }
+type InitiativeConnection { nodes: [Initiative!]! pageInfo: PageInfo! }
+type Initiative { id: ID! name: String! summary: String status: String! priority: Int! owner: User creator: User targetDate: TimelessDate createdAt: DateTime! updatedAt: DateTime! projects: ProjectConnection! }
+type InitiativePayload { success: Boolean! initiative: Initiative }
+type ProjectUpdateConnection { nodes: [ProjectUpdate!]! pageInfo: PageInfo! }
+type CycleConnection { nodes: [Cycle!]! pageInfo: PageInfo! }
+type CommentConnection { nodes: [Comment!]! pageInfo: PageInfo! }
+type IssueActivity { id: ID! eventType: String! actor: User changes: JSON createdAt: DateTime! }
+type IssueActivityConnection { nodes: [IssueActivity!]! pageInfo: PageInfo! }
+type MyIssueActivity { id: ID! issue: Issue! eventType: String! actor: User changes: JSON createdAt: DateTime! }
+type MyIssueActivityConnection { nodes: [MyIssueActivity!]! pageInfo: PageInfo! }
+
+type IssuePayload { success: Boolean! issue: Issue }
+type CommentPayload { success: Boolean! comment: Comment }
+type IssueLabelPayload { success: Boolean! issueLabel: IssueLabel }
+type ProjectPayload { success: Boolean! project: Project }
+type DeletePayload { success: Boolean! }
+type PendingMembershipInvitation { userId: ID! name: String email: String expiresAt: DateTime }
+type AttachmentPayload { success: Boolean! attachment: Attachment }
+type AttachmentConnection { nodes: [Attachment!]! pageInfo: PageInfo! }
+type Attachment {
+  id: ID!
+  url: String!
+  title: String!
+  subtitle: String
+  issue: Issue
+  createdAt: DateTime
+}
+
+type RateLimitPayload {
+  identifier: String
+  kind: String
+  limit: Int
+  remaining: Int
+  requestsPerHour: Int
+  resetsAt: DateTime
+}
+
+# ---- Filter inputs (comparators hoja emits) ----
+input StringComparator {
+  eq: String
+  neq: String
+  in: [String!]
+  nin: [String!]
+  contains: String
+  containsIgnoreCase: String
+  eqIgnoreCase: String
+}
+input IDComparator { eq: ID in: [ID!] neq: ID }
+input NumberComparator { eq: Float neq: Float gt: Float lt: Float gte: Float lte: Float in: [Float!] }
+input DateComparator { eq: DateTime neq: DateTime gt: DateTime lt: DateTime gte: DateTime lte: DateTime }
+input BooleanComparator { eq: Boolean neq: Boolean }
+
+input TeamFilter { key: StringComparator id: IDComparator name: StringComparator }
+input UserFilter { id: IDComparator email: StringComparator displayName: StringComparator name: StringComparator }
+input WorkflowStateFilter { name: StringComparator type: StringComparator team: TeamFilter }
+input CycleFilter { id: IDComparator name: StringComparator team: TeamFilter isActive: BooleanComparator isNext: BooleanComparator }
+input ProjectRelFilter { id: IDComparator name: StringComparator }
+input LabelRelFilter { name: StringComparator }
+
+input IssueFilter {
+  identifier: StringComparator
+  team: TeamFilter
+  state: WorkflowStateFilter
+  assignee: UserFilter
+  creator: UserFilter
+  project: ProjectRelFilter
+  cycle: CycleFilter
+  parent: IssueParentFilter
+  labels: LabelRelFilter
+  priority: NumberComparator
+  number: NumberComparator
+  title: StringComparator
+  description: StringComparator
+  updatedAt: DateComparator
+  createdAt: DateComparator
+  dueDate: DateComparator
+  and: [IssueFilter!]
+  or: [IssueFilter!]
+}
+
+input ProjectFilter { id: IDComparator slugId: StringComparator name: StringComparator state: StringComparator team: TeamFilter }
+input IssueParentFilter { id: IDComparator }
+input IssueLabelFilter { team: TeamFilter name: StringComparator }
+
+# ---- Mutation inputs ----
+input TeamUpdateInput { name: String key: String description: String autoAddStarted: Boolean autoAddCompleted: Boolean autoAddBacklog: Boolean visibility: String parentTeamId: String }
+input CycleUpdateInput { name: String description: String startsAt: DateTime endsAt: DateTime }
+type CyclePayload { success: Boolean! cycle: Cycle }
+input TeamCreateInput { name: String! key: String! description: String color: String icon: String visibility: String parentTeamId: String timezone: String memberIds: [String!] }
+input IssueCreateInput {
+  title: String!
+  teamId: String!
+  description: String
+  priority: Int
+  stateId: String
+  assigneeId: String
+  projectId: String
+  cycleId: String
+  parentId: String
+  estimate: Float
+  dueDate: DateTime
+  labelIds: [String!]
+}
+input IssueUpdateInput {
+  title: String
+  description: String
+  priority: Int
+  stateId: String
+  assigneeId: String
+  projectId: String
+  cycleId: String
+  parentId: String
+  estimate: Float
+  dueDate: DateTime
+  labelIds: [String!]
+}
+input CommentCreateInput { issueId: String! body: String! }
+input CommentUpdateInput { body: String }
+input IssueLabelUpdateInput { name: String color: String description: String }
+input IssueLabelCreateInput { name: String! teamId: String color: String description: String }
+input ProjectCreateInput { name: String! description: String teamIds: [String!] leadId: String state: String color: String icon: String startDate: TimelessDate targetDate: TimelessDate }
+input ProjectUpdateInput { name: String description: String leadId: String state: String color: String icon: String startDate: TimelessDate targetDate: TimelessDate teamIds: [String!] }
+input ProjectUpdateCreateInput { projectId: String! body: String! status: String }
+input AttachmentCreateInput { issueId: String! url: String! title: String! subtitle: String }

hoja_server/schema_sdl.py

@@ -0,0 +1,8 @@
+"""Hoja GraphQL schema text, exposed to the agent so it can discover fields."""
+
+from pathlib import Path
+
+from hoja_server.agent_conversations import SDL as CONVERSATION_SDL
+from hoja_server.model_providers import SDL as PROVIDER_SDL
+
+SCHEMA_SDL = (Path(__file__).parent / "schema.graphql").read_text() + "\n" + PROVIDER_SDL + "\n" + CONVERSATION_SDL

hoja_server/secrets_box.py

@@ -0,0 +1,39 @@
+"""Encrypt provider credentials at rest with a server-held master key."""
+
+from __future__ import annotations
+
+import base64
+import hashlib
+import os
+import secrets
+
+from cryptography.hazmat.primitives.ciphers.aead import AESGCM
+
+KEY_ENV = "HOJA_SECRET_KEY"
+_NONCE_BYTES = 12
+
+
+class SecretBoxError(RuntimeError):
+    pass
+
+
+def _master_key() -> bytes:
+    raw = os.environ.get(KEY_ENV, "")
+    if not raw:
+        raise SecretBoxError(f"{KEY_ENV} must be set to store provider credentials.")
+    return hashlib.sha256(raw.encode()).digest()
+
+
+def encrypt_secret(plaintext: str) -> str:
+    nonce = secrets.token_bytes(_NONCE_BYTES)
+    sealed = AESGCM(_master_key()).encrypt(nonce, plaintext.encode(), None)
+    return base64.b64encode(nonce + sealed).decode()
+
+
+def decrypt_secret(token: str) -> str:
+    blob = base64.b64decode(token)
+    nonce, sealed = blob[:_NONCE_BYTES], blob[_NONCE_BYTES:]
+    try:
+        return AESGCM(_master_key()).decrypt(nonce, sealed, None).decode()
+    except Exception as exc:
+        raise SecretBoxError("Stored provider credential could not be decrypted.") from exc