feat(server): POST/PUT /todo endpoints for plugin todo management

Adds create (POST) and bulk-update (PUT) routes for session todos.
The new Todo.add() provides O(1) single-item insertion instead of the
previous delete-all + insert-all pattern. Todo.update() is exported
for the PUT bulk-replace route. Old todo routes (at the end of the
chain) are replaced with improved versions placed after the GET route.

Author: micuintus

packages/opencode/src/server/routes/session.ts

@@ -214,6 +214,51 @@ export const SessionRoutes = lazy(() =>
         return c.json(todos)
       },
     )
+    .post(
+      "/:sessionID/todo",
+      describeRoute({
+        summary: "Create session todo",
+        description: "Create a new todo item for the session.",
+        operationId: "session.todo.create",
+        responses: {
+          200: { description: "Created todo", content: { "application/json": { schema: resolver(Todo.Info) } } },
+          ...errors(400, 404),
+        },
+      }),
+      validator("param", z.object({ sessionID: SessionID.zod })),
+      validator(
+        "json",
+        z.object({ content: z.string(), status: z.string().optional(), priority: z.string().optional() }),
+      ),
+      async (c) => {
+        const sessionID = c.req.valid("param").sessionID
+        const body = c.req.valid("json")
+        const todo = Todo.add(sessionID, body)
+        return c.json(todo)
+      },
+    )
+    .put(
+      "/:sessionID/todo",
+      describeRoute({
+        summary: "Update session todos",
+        description: "Replace all todos for a session (bulk update).",
+        operationId: "session.todo.update",
+        responses: {
+          200: {
+            description: "Updated todos",
+            content: { "application/json": { schema: resolver(Todo.Info.array()) } },
+          },
+          ...errors(400, 404),
+        },
+      }),
+      validator("param", z.object({ sessionID: SessionID.zod })),
+      validator("json", z.object({ todos: z.array(Todo.Info) })),
+      async (c) => {
+        const sessionID = c.req.valid("param").sessionID
+        const body = c.req.valid("json")
+        await Todo.update({ sessionID, todos: body.todos })
+        return c.json(body.todos)
+      },
     )
     .post(
       "/",
@@ -1348,54 +1393,5 @@ export const SessionRoutes = lazy(() =>
           }
         })
       },
-    )
-    // Todo CRUD — create and bulk update
-    .post(
-      "/:sessionID/todo",
-      describeRoute({
-        summary: "Create session todo",
-        operationId: "session.todo.create",
-        responses: {
-          200: {
-            description: "Updated todo list",
-            content: { "application/json": { schema: resolver(Todo.Info.array()) } },
-          },
-          ...errors(400, 404),
-        },
-      }),
-      validator("param", z.object({ sessionID: SessionID.zod })),
-      validator("json", Todo.Info),
-      async (c) => {
-        const sessionID = c.req.valid("param").sessionID
-        await Session.get(sessionID)
-        const todo = c.req.valid("json")
-        const existing = await Todo.get(sessionID)
-        const todos = [...existing, todo]
-        await Todo.update({ sessionID, todos })
-        return c.json(todos)
-      },
-    )
-    .put(
-      "/:sessionID/todo",
-      describeRoute({
-        summary: "Update session todos",
-        operationId: "session.todo.update",
-        responses: {
-          200: {
-            description: "Updated todo list",
-            content: { "application/json": { schema: resolver(Todo.Info.array()) } },
-          },
-          ...errors(400, 404),
-        },
-      }),
-      validator("param", z.object({ sessionID: SessionID.zod })),
-      validator("json", z.object({ todos: Todo.Info.array() })),
-      async (c) => {
-        const sessionID = c.req.valid("param").sessionID
-        await Session.get(sessionID)
-        const body = c.req.valid("json")
-        await Todo.update({ sessionID, todos: body.todos })
-        return c.json(body.todos)
-      },
     ),
 )

packages/opencode/src/session/todo.ts

@@ -88,4 +88,41 @@ export namespace Todo {
   export async function get(sessionID: SessionID) {
     return runPromise((svc) => svc.get(sessionID))
   }
+
+  export async function update(input: { sessionID: SessionID; todos: Info[] }) {
+    return runPromise((svc) => svc.update(input))
+  }
+
+  /** O(1) add — direct INSERT instead of delete-all + insert-all */
+  export function add(sessionID: SessionID, todo: Partial<Info> & { content: string }) {
+    const current = Database.use((db) =>
+      db.select().from(TodoTable).where(eq(TodoTable.session_id, sessionID)).orderBy(asc(TodoTable.position)).all(),
+    )
+    const newTodo: Info = {
+      content: todo.content,
+      status: todo.status ?? "pending",
+      priority: todo.priority ?? "medium",
+    }
+    Database.use((db) => {
+      db.insert(TodoTable)
+        .values({
+          session_id: sessionID,
+          content: newTodo.content,
+          status: newTodo.status,
+          priority: newTodo.priority,
+          position: current.length,
+        })
+        .run()
+    })
+    const updated = [
+      ...current.map((row) => ({
+        content: row.content,
+        status: row.status,
+        priority: row.priority,
+      })),
+      newTodo,
+    ]
+    void Bus.publish(Event.Updated, { sessionID, todos: updated })
+    return newTodo
+  }
 }