taskops-cli 0.2.0__tar.gz → 0.3.1__tar.gz

taskops_cli-0.3.1/.claude/settings.json

@@ -0,0 +1,36 @@
+{
+  "hooks": {
+    "PostToolUse": [
+      {
+        "hooks": [
+          {
+            "type": "command",
+            "command": "\"/Users/berna/.local/share/uv/tools/taskops-cli/bin/python\" -m taskops.cli hook claude"
+          }
+        ],
+        "matcher": "*"
+      }
+    ],
+    "UserPromptSubmit": [
+      {
+        "hooks": [
+          {
+            "type": "command",
+            "command": "\"/Users/berna/.local/share/uv/tools/taskops-cli/bin/python\" -m taskops.cli hook claude"
+          }
+        ]
+      }
+    ],
+    "PreToolUse": [
+      {
+        "matcher": "Bash",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "c=$(jq -r '.tool_input.command // \"\"'); printf '%s' \"$c\" | grep -qE 'python[0-9.]*[[:space:]]+-(c|[[:space:]]|$)' && printf '%s' \"$c\" | grep -qE 'open_board|board[.]call|taskops[.]mcp|taskops[.]board|gitmoves' && printf '%s' '{\"hookSpecificOutput\":{\"hookEventName\":\"PreToolUse\",\"permissionDecision\":\"deny\",\"permissionDecisionReason\":\"REFUSED: the board is driven through the taskops_* MCP tools, never through the shell. Use taskops_board, taskops_card, taskops_take, taskops_update, taskops_comment, taskops_assign, taskops_merge, taskops_review or taskops_plan, each with repo_path= and actor=. Why this is hard and not a preference: the MCP tool is the ONLY door that runs both halves. taskops_assign cuts the worktrees that the plain assign verb does not, and taskops_merge runs the git merge that the plain merged verb does not, so driving a verb from the shell records board state about git that never happened. A shelled call also skips the pulse line, so you stop being told what the board is waiting for. The taskops CLI stays fine for what it owns: join, remote add, ui, serve, invite, revoke, tidy, and board create/ls/push.\"}}'; exit 0"
+          }
+        ]
+      }
+    ]
+  }
+}

taskops_cli-0.3.1/.gitattributes

@@ -0,0 +1,22 @@
+# The built dashboard is a GENERATED artifact that is committed on purpose —
+# that is what makes `pip install taskops` serve a dashboard with no node
+# toolchain (CLAUDE.md, "The dashboard is built, not hand-written"). Its source
+# is `ui/`; `node build.mjs` from there writes these three files.
+#
+# `-merge` uses git's BUILT-IN refusal to text-merge a file: no `git config`,
+# no custom driver, nothing a fresh clone has to install. On a merge git leaves
+# our copy whole (never a conflict marker inside minified JavaScript) and marks
+# the path conflicted. The resolution is not a hunk, it is a rebuild:
+#
+#     cd ui && node build.mjs && git add ../src/taskops/ui && git commit --no-edit
+#
+# Measured, 2026-08-08: without this, two branches that changed DIFFERENT
+# regions of the bundle auto-merge SILENTLY into a file no build ever produced
+# — a bundle that is neither side's. That is the failure this line exists to
+# make loud. See docs/fan-out.md §11.
+#
+# `-diff` keeps a 190kb single-purpose artifact out of every diff and every
+# `git log -p`; the rebuild is the change, the bytes are not reviewable.
+src/taskops/ui/app.js      -diff -merge linguist-generated=true
+src/taskops/ui/style.css   -diff -merge linguist-generated=true
+src/taskops/ui/index.html  -diff -merge linguist-generated=true

taskops_cli-0.3.1/.github/workflows/ci.yml

@@ -0,0 +1,29 @@
+name: ci
+
+on:
+  push:
+    branches: [main, master]
+  pull_request:
+  workflow_call: # release.yml runs these same gates on the tag — no second copy
+
+jobs:
+  gates:
+    runs-on: ubuntu-latest
+    strategy:
+      matrix:
+        python: ["3.11", "3.13"]
+    steps:
+      - uses: actions/checkout@v4
+      - uses: astral-sh/setup-uv@v5
+        with:
+          python-version: ${{ matrix.python }}
+      - uses: actions/setup-node@v4
+        with:
+          node-version: "22"
+          cache: npm
+          cache-dependency-path: ui/package-lock.json
+      - run: npm ci
+        working-directory: ui
+      - run: uv run ruff check src tests
+      - run: uv run pyright
+      - run: uv run pytest

taskops_cli-0.3.1/.github/workflows/workflow.yml

@@ -0,0 +1,54 @@
+name: release
+
+on:
+  push:
+    tags: ["v*"]
+  workflow_dispatch: # rehearse without burning a version: publish stays skipped
+
+jobs:
+  guard:
+    # PyPI versions are permanent — an artifact whose name lies cannot be undone.
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - name: the tag must be the version the source declares
+        if: github.ref_type == 'tag'
+        run: |
+          declared=$(grep -o '__version__ = "[^"]*"' src/taskops/_version.py | cut -d'"' -f2)
+          test "${GITHUB_REF_NAME#v}" = "$declared" || {
+            echo "tag $GITHUB_REF_NAME != declared $declared"; exit 1; }
+
+  gates:
+    # A tag push does not match ci.yml's `push: branches` — without this call
+    # the release path would have no gate at all.
+    uses: ./.github/workflows/ci.yml
+
+  build:
+    runs-on: ubuntu-latest
+    needs: [guard]
+    steps:
+      - uses: actions/checkout@v4
+      - uses: astral-sh/setup-uv@v5
+      - run: uv build
+      - uses: actions/upload-artifact@v4
+        with:
+          name: dist
+          path: dist/
+
+  publish:
+    # Trusted Publishing (OIDC, no token) — must live top-level, never in a
+    # reusable workflow. Publisher registered on pypi.org for `taskops-cli`.
+    if: github.ref_type == 'tag'
+    runs-on: ubuntu-latest
+    needs: [guard, gates, build]
+    environment: pypi
+    permissions:
+      id-token: write
+    steps:
+      - uses: actions/download-artifact@v4
+        with:
+          name: dist
+          path: dist/
+      - uses: pypa/gh-action-pypi-publish@release/v1
+        with:
+          skip-existing: true

taskops_cli-0.3.1/.gitignore

@@ -0,0 +1,23 @@
+__pycache__/
+*.pyc
+.venv/
+dist/
+*.egg-info/
+.pytest_cache/
+.ruff_cache/
+
+# ui dev project
+ui/node_modules/
+# the smoke section index is DISCOVERED, never committed (ui/smoke/sections.mjs):
+# a hand-edited list is the appendix that made every parallel UI card conflict.
+ui/smoke/sections/index.generated.ts
+
+# taskops
+.taskops/remote.json
+.taskops/pending.jsonl
+.taskops/trees/
+.taskops/hook-seen.json
+.taskops/ui.json
+
+.taskops/live.sqlite*
+.taskops/board.local-*/

taskops_cli-0.3.1/.mcp.json

@@ -0,0 +1,14 @@
+{
+  "mcpServers": {
+    "taskops": {
+      "command": "/Users/berna/.local/share/uv/tools/taskops-cli/bin/python",
+      "args": [
+        "-m",
+        "taskops.mcp"
+      ],
+      "env": {
+        "TASKOPS_ACTOR": "dev:berna"
+      }
+    }
+  }
+}