Using Hopya

Hopya stores work on your operator’s instance. Early implementation: report errors with action/time, never a password or token.

Sign In

Organize Work

1. Open Work (/app), create/select a workspace. First created workspace selects automatically.
2. Use + beside Structure to add a project or standalone list.
3. Add tasks to lists; select a list, project/folder descendants, or All tasks.

Workspaces are permission boundaries. Site admin status does not expose all workspace work.

Documents and pages

Peer pages/subpages have distinct indentation/collapse behavior. Existing task-page links and tasks remain preserved.

Tables

Finish/cancel edits before view changes/Refresh. A changed/new empty record may leave filtered view; clear filters first. Preferences persist while Table stays open; Refresh resolves externally changed page position. Wide grids scroll; batches load explicitly; Cancel/Escape returns cell focus. Conflicts retain drafts and offer reload.

Deletion has no undo. Column deletion needs Table write + delete and removes that value everywhere; record/Table deletion is permanent. Write-only roles can create columns/empty records on a create-only page, but need read permission to see/enter existing values.

Create And Edit

1. Choose New task, a destination list, and title. Starting from a list fixes/hides destination; project/folder creation defaults inside that location.
2. Add optional fields/body, then save. If location has no list, use Add a list here when allowed or ask manager.
3. Open saved task to edit; explicit save persists work. Existing edits retain actual list; assistant review can choose any authorized workspace list.

Clear filters before deciding a task disappeared. Failed/pending image files have retry controls across composer reopen but bytes do not survive reload; unsaved uploads expire in 24 hours.

Version conflict: draft stays open. Reload current task asks before replacing it; cancel keeps draft, failed reload preserves it. Reapply only intended changes; never silently retry stale writes. Deletion has separate permission/confirmation, no promised trash/undo.

Mentions and discussion

Views

Changing views never copies/moves tasks. Workspace/hierarchy/search/status carry across; Calendar/Timeline edit through task dialog, not mandatory dragging.

Display bounds do not truncate search/totals/exports. Task loading uses bounded pages/progress; incomplete loads are not called complete, and failure offers retry. Each view shows complete totals/reveal-more after successful loading. Expanded batches survive save/refresh, reset on view/filter/month changes. Browser holds full dataset, so expanding all rows can be expensive.

View navigation, hierarchy, and keyboard controls

• List sections follow actual nested/empty lists, each with unambiguous Add task. Board/List/Timeline scroll internally when wide; Gallery responds. Project description appears under title.
• Sidebar branches collapse/expand, persisted per browser/workspace. Heading icon opens shared searchable icon picker; title renames. Project/Folder/List need structure management; Document/Table use own write permissions. Shared metadata/colors visible to members.
• Narrow screens use navigation toggle and horizontal scroll for wide grids/boards/calendars. Tab traverses controls; view tabs support arrows/Home/End. Keyboard opens cards; Move to changes status; dialogs support focus/Escape. Save before closing.

Settings

Open sidebar account menu (keyboard activation/Escape supported).

Appearance has dark-mode control and Use system theme reset, remembered in browser and on login. Credential changes require current password and revoke other sessions/tokens/pending reset links; reconnect clients.

Delete workspace is permanent: Owner enters exact name; tasks, Documents, Tables, hierarchy, members, fields, automation history removed. Export important data before deleting field definitions or workspace.

Project and Standalone List Fields

1. Select project/list → List Add fields (also task options without losing draft). All tasks asks for explicit target.
2. Select catalog/custom or optional built-ins → Apply fields, or Create field and add.
3. Configure statuses/date presentation for selected field owner/list.

Inline editing, filtering, selection, and shortcuts

Project and Standalone List Fields: reference table

Control	Behavior
Text/number cell	Click selects; Enter/F2/double-click edits
Choice/checkbox/date cell	Opens directly
Tab / another cell / outside grid	Save and move, or save/clear selection
Escape / error	Cancel; failed draft retained; conflict needs explicit discard/reload
Columns	Order/visibility; per-account/workspace/project saved settings and sorting
Filter & group	AND filters or group within each list by any built-in/custom field, including hidden columns
Row checkboxes	Currently displayed tasks; permission-aware Archive/Delete; parents need selected subtasks
Archive	Removes ordinary views; complete workspace exports retain records
Unmodified C	Outside inputs/dialogs, create task in selected/first available list

Formula Examples

Exact field names, not spreadsheet addresses; function names case-insensitive, leading equals optional.

=SUM({{Estimate}}, {{Buffer}})
=IF({{Qty}}>0, ROUND({{Qty}}*{{Price}}, 2), 0)
=CONCAT("Task: ", {{Reference}})

Owner cannot be removed last; delegated roles cannot escalate. Ask Owner to review access rather than trying another UI/token; API enforces same boundary.

Workspace JSON export

Keep file private. Wait for stream to finish; interrupted/revoked/slow/excess downloads are failed, not complete exports. Close redundant downloads/retry while authorized. Operator needs full backup.

Account Settings

Personal Tokens

1. Account settings → Personal access tokens → recognizable name → create.
2. Store one-time value in script/MCP client’s private environment. It acts as you with current permissions.
3. Lost value cannot be revealed again; replace it. Revoke stops its clients immediately.

Never share in chat, commit, or put in URLs. MCP client—not ordinary terminal conversation—launches stdio. Admin may enable bearer-auth SSE /api/v1/mcp/sse. Writes default off; process HOPYA_MCP_ALLOW_WRITES=true only exposes tools, and each mutation still needs human approval. See MCP setup.

Attachments And AI

Remote cancellation/billing/context retraction is not guaranteed; API stops HTTP when disconnect reaches it. AI can be wrong/unavailable.

Administration

Integrations And Automations

Former workspace managers initially received both new management rights; Owners should review delegation.

Webhooks and graph workflow

Publisher access is checked before every node. Removed publisher/task-read access fails run; Update task targets only triggering task as publisher, with immediate read/write check. Nested depth ≤5, no same-automation re-entry. Later node failure never undoes originating action.

Run monitoring, profiles, OAuth, and destination restrictions

• Run monitor filters status/automation, refreshes active work, expands node/legacy-step results; unselected branches skipped. Durable versions/runs, bounded sanitized output/logs; never add secrets.
• Expired graph/linear/webhook leases fail without replay. A successful remote action may precede local failure/timeout; inspect destination before retry.
• Profiles: bearer/API-key/basic/custom headers/OAuth, workspace-scoped/write-only, exact origin/optional path. Replace supplies full new secret/version; Revoke can break published nodes. Authorization/cookie/API-key/hop-by-hop headers belong in profiles, not public headers.
• Connect/reconnect uses encrypted authorization-code PKCE S256; external consent/token/revocation unverified. Missing automation keyring explicitly fails credential work, not ordinary tasks.
• Credentials dispatch only to exact scheme/host/port/path or descendant. RFC1918/ULA private allowed; special addresses blocked; public authenticated destination HTTPS, no redirects; exact-origin operator exception never bypasses credential binding.
• Instance /api/v1/openapi.json and API docs have method/category/search controls. See graph REST reference; browser/OAuth-provider behavior not certified here.

Field Management

1. Open account menu → Field management.
2. Pick workspace, filter kind/path tree, select target; summary confirms.
3. Right panel shares assignment/create/status/concurrency rules and permission notice. Folder targets resolve to owner project; lists retain status overrides.

Import And Export

Table keyboard editing and whole-data calculations

• Row numbers/sticky compact headers/type badges; column letters in menu. Click selects, arrows navigate, Enter/F2/double-click edits; touch selected cell edits; typing replaces text/number draft.
• Enter saves vertically; Tab saves text-like editor/moves; Escape cancels; single text/number cell copy/paste; explicit Save/Cancel. Failed/conflicting drafts stay. Refresh latest; Load more extends grid.
• Calculate: Count filled/Count all/Empty; numbers Sum/Average/Min/Max; dates Earliest/Latest; checkboxes Checked/Unchecked. All matching loaded/unloaded/live rows; no filter means whole Table. Null/missing/empty are empty, zero/unchecked filled.
• Results refresh after saves/imports/filters/Refresh; None clears, selection lasts open Table. Failure shows retry, never partial total.

Live cells write immediately to existing source rows. Primary/generated/unsupported fields read-only; source insert/delete/schema via database tools. Removing link leaves source intact; changed schema requires reconnect, conflict keeps draft/offers reload. See live deployment.

OIDC identity management

Admin chooses intended account, verifies exact trusted issuer/subject (never email), then confirms link. Provider subjects differ; supplied Ory uses public Kratos identity ID subjects.

Unlink revokes every session/token. Local password survives; passwordless account must retain identity for current exact issuer/configured SSO. Inactive issuer/disabled SSO is not recovery. Verify new sign-in first; API cannot prove linked subject exists. Self-unlink signs out; quarantine by disabling Hopya/upstream account and reviewing provisioning, not unlink alone.

Troubleshooting