@agentrific/server 0.3.0 → 0.5.0

package/index.js

@@ -455,6 +455,7 @@ var RunPreparationSchema = z2.object({
 var SessionSchema = z2.object({
   id: z2.string(),
   taskId: z2.string().nullable().optional(),
+  kind: z2.enum(["task", "repo_chat"]).optional(),
   projectId: z2.string(),
   title: z2.string(),
   status: SessionStatusSchema,
@@ -585,11 +586,25 @@ var ConnectionsStatusSchema = z2.object({
   githubCli: z2.object({ installed: z2.boolean(), authenticated: z2.boolean() })
 });
 var UpdateSettingsSchema = z2.object({ projectsRoot: z2.string().trim().min(1).max(4096) });
+var RepositoryIdentitySchema = z2.object({
+  key: z2.string(),
+  display: z2.string()
+});
+var ProjectGitStatusSchema = z2.object({
+  observedAt: z2.string().datetime(),
+  state: z2.enum(["available", "unavailable"]),
+  repository: RepositoryIdentitySchema.nullable(),
+  head: z2.string().nullable(),
+  branch: z2.string().nullable(),
+  trackedChanges: z2.number().int().nonnegative(),
+  untrackedChanges: z2.number().int().nonnegative()
+});
 var ProjectSchema = z2.object({
   id: z2.string(),
   name: z2.string(),
   path: z2.string(),
-  available: z2.boolean().default(true)
+  available: z2.boolean().default(true),
+  repository: RepositoryIdentitySchema.nullable().optional()
 });
 var TaskStatusSchema = z2.enum(["backlog", "needs_user_input", "running", "done"]);
 var TaskSchema = z2.object({
@@ -608,6 +623,7 @@ var TaskSchema = z2.object({
   deletedAt: z2.string().datetime().optional()
 });
 var CreateTaskSchema = z2.object({
+  clientTaskId: z2.string().min(1).max(128).regex(/^[a-zA-Z0-9_-]+$/).optional(),
   projectId: z2.string().min(1),
   title: z2.string().trim().min(1).max(120),
   prompt: z2.string().trim().max(2e4).default(""),
@@ -869,9 +885,9 @@ var Attachments = class extends Context.Service()(
 };
 
 // src/index.ts
-import { randomUUID as randomUUID8 } from "node:crypto";
-import { execFile as execFile2 } from "node:child_process";
-import { promisify as promisify2 } from "node:util";
+import { randomUUID as randomUUID9 } from "node:crypto";
+import { execFile as execFile3 } from "node:child_process";
+import { promisify as promisify3 } from "node:util";
 import { realpath as realpath2 } from "node:fs/promises";
 import { homedir as homedir2 } from "node:os";
 import path9 from "node:path";
@@ -1096,7 +1112,7 @@ async function startControl(directory, security2, status, maintenance2) {
 // package.json
 var package_default = {
   name: "@agentrific/server",
-  version: "0.3.0",
+  version: "0.5.0",
   description: "Self-hosted control plane for long-running coding agents",
   keywords: [
     "agentrific",
@@ -1482,7 +1498,7 @@ var UpdateDiscovery = class {
 };
 
 // src/index.ts
-import { Effect as Effect16, ManagedRuntime } from "effect";
+import { Effect as Effect17, ManagedRuntime } from "effect";
 import { z as z17 } from "zod";
 
 // src/automation.ts
@@ -1570,7 +1586,9 @@ async function boardTasks(store2, projectId) {
       status: taskStatusForSession(session.status, session)
     };
   });
-  const legacyTasks = sessions.filter((session) => !session.taskId && !linkedSessionIds.has(session.id)).filter((session) => !projectId || session.projectId === projectId).map(sessionTask);
+  const legacyTasks = sessions.filter(
+    (session) => session.kind !== "repo_chat" && !session.taskId && !linkedSessionIds.has(session.id)
+  ).filter((session) => !projectId || session.projectId === projectId).map(sessionTask);
   return [...linkedTasks, ...legacyTasks].map((task) => TaskSchema.parse(task)).sort((left, right) => right.updatedAt.localeCompare(left.updatedAt));
 }
 async function findTask(store2, id) {
@@ -1605,7 +1623,7 @@ function editTask(store2, id, input, resolveAttachments) {
   });
 }
 function deleteTask(store2, id, cleanup = async () => {
-}) {
+}, unrunUpdatedAt) {
   return withTaskLock(id, async () => {
     const task = await findTask(store2, id);
     const sessions = await Effect6.runPromise(store2.list());
@@ -1616,6 +1634,8 @@ function deleteTask(store2, id, cleanup = async () => {
     const associated = sessions.filter(
       (session) => session.taskId === task.id || session.id === task.sessionId
     );
+    if (unrunUpdatedAt !== void 0 && (task.updatedAt !== unrunUpdatedAt || task.sessionId || associated.length || task.status !== "backlog"))
+      throw new TaskActionError("This task changed or has already run. It cannot be moved.", 409);
     for (const session of associated) await cleanup(session);
     await Effect6.runPromise(
       store2.purgeTask(
@@ -2024,7 +2044,7 @@ var exec = promisify(execFile);
 function workflowLog(text) {
   return stripVTControlCharacters(text).slice(-32e3);
 }
-async function workflowCommand(cwd, command, args, signal, managedPreparation = false) {
+function workflowEnvironment() {
   const env = { ...process.env };
   for (const name of [
     "GIT_DIR",
@@ -2044,6 +2064,10 @@ async function workflowCommand(cwd, command, args, signal, managedPreparation =
     "GIT_REPLACE_REF_BASE"
   ])
     delete env[name];
+  return env;
+}
+async function workflowCommand(cwd, command, args, signal, managedPreparation = false) {
+  const env = workflowEnvironment();
   if (managedPreparation) env.AGENTRIFIC_MANAGED_PREPARATION = "1";
   const result = await exec(command, args, {
     cwd,
@@ -3208,6 +3232,106 @@ function reconnectProject(root, id, input, store2) {
   }).pipe(projectLock(store2).withPermit);
 }
 
+// src/project-git.ts
+import { execFile as execFile2 } from "node:child_process";
+import { promisify as promisify2 } from "node:util";
+var execute = promisify2(execFile2);
+function repositoryIdentity(remote) {
+  const input = remote.trim();
+  if (!input || input.startsWith("/") || input.startsWith(".")) return null;
+  const scp = /^(?:[^@/\s]+@)?([^/:\s]+):([^\s]+)$/.exec(input);
+  let url;
+  try {
+    url = new URL(scp && !input.includes("://") ? `ssh://${scp[1]}/${scp[2]}` : input);
+  } catch {
+    return null;
+  }
+  if (!["https:", "http:", "ssh:", "git:"].includes(url.protocol)) return null;
+  if (url.search || url.hash || url.port) return null;
+  const host2 = url.hostname.toLowerCase();
+  let path10 = url.pathname.replace(/^\/+|\/+$/g, "").replace(/\.git$/, "");
+  if (!host2 || !path10 || path10.includes("%") || path10.includes("//")) return null;
+  if (["github.com", "bitbucket.org"].includes(host2)) path10 = path10.toLowerCase();
+  const key = `${host2}/${path10}`;
+  return { key, display: key };
+}
+async function git(directory, args) {
+  const { stdout } = await execute("git", ["-C", directory, ...args], {
+    timeout: 3e3,
+    maxBuffer: 1024 * 1024,
+    env: { ...workflowEnvironment(), GIT_OPTIONAL_LOCKS: "0", GIT_TERMINAL_PROMPT: "0" }
+  });
+  return stdout.trim();
+}
+async function readRepositoryIdentity(directory) {
+  try {
+    const remotes = (await git(directory, ["remote"])).split("\n").filter(Boolean);
+    const remote = remotes.includes("origin") ? "origin" : remotes.length === 1 ? remotes[0] : null;
+    if (!remote) return null;
+    return repositoryIdentity(await git(directory, ["remote", "get-url", remote]));
+  } catch {
+    return null;
+  }
+}
+async function inspect(directory) {
+  const observedAt = (/* @__PURE__ */ new Date()).toISOString();
+  try {
+    const [repository, head, branch, status] = await Promise.all([
+      readRepositoryIdentity(directory),
+      git(directory, ["rev-parse", "--verify", "HEAD"]),
+      git(directory, ["symbolic-ref", "--quiet", "--short", "HEAD"]).catch(() => null),
+      // NUL-separated records avoid ambiguous filenames/newlines. --no-renames
+      // keeps each entry one record, so we only need its two status characters.
+      execute(
+        "git",
+        [
+          "-C",
+          directory,
+          "status",
+          "--porcelain=v1",
+          "-z",
+          "--no-renames",
+          "--untracked-files=normal"
+        ],
+        {
+          timeout: 3e3,
+          maxBuffer: 1024 * 1024,
+          env: { ...workflowEnvironment(), GIT_OPTIONAL_LOCKS: "0" }
+        }
+      )
+    ]);
+    const records = status.stdout.split("\0").filter(Boolean);
+    return {
+      observedAt,
+      state: "available",
+      repository,
+      head,
+      branch,
+      trackedChanges: records.filter((record) => !record.startsWith("??")).length,
+      untrackedChanges: records.filter((record) => record.startsWith("??")).length
+    };
+  } catch {
+    return {
+      observedAt,
+      state: "unavailable",
+      repository: null,
+      head: null,
+      branch: null,
+      trackedChanges: 0,
+      untrackedChanges: 0
+    };
+  }
+}
+var observations = /* @__PURE__ */ new Map();
+function projectGitStatus(directory) {
+  const cached = observations.get(directory);
+  if (cached && cached.expires > Date.now()) return cached.value;
+  if (observations.size >= 200) observations.delete(observations.keys().next().value);
+  const value = inspect(directory);
+  observations.set(directory, { expires: Date.now() + 15e3, value });
+  return value;
+}
+
 // src/store.ts
 import { chmodSync, existsSync as existsSync2, mkdirSync as mkdirSync2 } from "node:fs";
 import path7 from "node:path";
@@ -3735,6 +3859,38 @@ async function removeRunFiles(dataRoot2, sessionId) {
   await rm2(path8.join(dataRoot2, "pi", sessionId), { recursive: true, force: true });
 }
 
+// src/repo-chat.ts
+import { randomUUID as randomUUID8 } from "node:crypto";
+import { Effect as Effect16 } from "effect";
+function openRepoChat(store2, projectId, workspacePath, defaultModel, reset = false) {
+  return withTaskLock(`repo-chat:${projectId}`, async () => {
+    const existing = (await Effect16.runPromise(store2.list())).filter((session2) => session2.projectId === projectId && session2.kind === "repo_chat").sort((a, b) => b.createdAt.localeCompare(a.createdAt))[0];
+    if (existing && !reset) return existing;
+    if (existing?.status === "running")
+      throw new Error("Wait for the current reply before resetting chat.");
+    const model = await defaultModel();
+    if (!model) throw new Error("Choose an available default model in Settings before chatting.");
+    const now = new Date(
+      Math.max(Date.now(), existing ? Date.parse(existing.createdAt) + 1 : 0)
+    ).toISOString();
+    const session = {
+      id: randomUUID8(),
+      projectId,
+      kind: "repo_chat",
+      title: workspacePath.split("/").at(-1) ?? projectId,
+      status: "waiting_for_input",
+      agent: "pi",
+      model,
+      branch: null,
+      workspacePath,
+      createdAt: now,
+      updatedAt: now
+    };
+    await Effect16.runPromise(store2.append({ type: "session.updated", session }));
+    return session;
+  });
+}
+
 // src/index.ts
 var host = process.env.AGENTRIFIC_HOST ?? "127.0.0.1";
 var port = Number(process.env.AGENTRIFIC_PORT ?? 4318);
@@ -3742,7 +3898,7 @@ var defaultProjectsRoot = path9.resolve(process.env.AGENTRIFIC_PROJECTS_DIR ?? "
 var worktreesRoot = path9.resolve(
   process.env.AGENTRIFIC_WORKTREES_DIR ?? path9.join(homedir2(), ".agentrific", "workspaces")
 );
-var execFileAsync = promisify2(execFile2);
+var execFileAsync = promisify3(execFile3);
 if (host !== "127.0.0.1" && host !== "::1")
   throw new Error("Bind Agentrific to loopback and expose it with Tailscale Serve or cloudflared.");
 var app = Fastify({
@@ -3767,7 +3923,7 @@ var dataRoot = path9.resolve(process.env.AGENTRIFIC_DATA_DIR ?? "./data");
 var releaseLock = await acquireServerLock(dataRoot);
 var effects = ManagedRuntime.make(SessionStore.layer(path9.join(dataRoot, "sessions.sqlite")));
 var store = await effects.runPromise(SessionStore);
-var security = new ServerSecurity(store, await Effect16.runPromise(store.serverIdentity()));
+var security = new ServerSecurity(store, await Effect17.runPromise(store.serverIdentity()));
 var testPushUrl = process.env.AGENTRIFIC_PUSH_TEST_URL;
 if (testPushUrl && (process.env.AGENTRIFIC_TEST_MODE !== "1" || !new URL(testPushUrl).hostname.endsWith(".ts.net") || new URL(testPushUrl).protocol !== "https:"))
   throw new Error("Test relay requires explicit test mode and Tailscale HTTPS.");
@@ -3790,10 +3946,10 @@ var attachmentEffects = ManagedRuntime.make(
   Attachments.layer(path9.join(dataRoot, "attachments"), store)
 );
 var attachments = await attachmentEffects.runPromise(Attachments);
-await Effect16.runPromise(attachments.cleanup());
+await Effect17.runPromise(attachments.cleanup());
 var attachmentCleanup = setInterval(
   () => {
-    void Effect16.runPromise(attachments.cleanup()).catch((error) => app.log.error(error));
+    void Effect17.runPromise(attachments.cleanup()).catch((error) => app.log.error(error));
   },
   60 * 60 * 1e3
 );
@@ -3804,14 +3960,14 @@ await app.register(multipart, {
 app.post(
   "/api/projects/:projectId/attachments",
   async (request, reply) => {
-    const root = await Effect16.runPromise(store.projectsRoot(defaultProjectsRoot));
-    const projects = await Effect16.runPromise(discoverProjects(root, store));
+    const root = await Effect17.runPromise(store.projectsRoot(defaultProjectsRoot));
+    const projects = await Effect17.runPromise(discoverProjects(root, store));
     if (!projects.some((project) => project.id === request.params.projectId && project.available))
       return reply.code(404).send({ error: "Project not found." });
     try {
       const file = await request.file();
       if (!file) return reply.code(400).send({ error: "Choose a file to upload." });
-      return reply.code(201).send(await Effect16.runPromise(attachments.upload(request.params.projectId, file)));
+      return reply.code(201).send(await Effect17.runPromise(attachments.upload(request.params.projectId, file)));
     } catch (error) {
       return reply.code(400).send({ error: error instanceof Error ? error.message : "Upload failed." });
     }
@@ -3820,7 +3976,7 @@ app.post(
 app.get(
   "/api/projects/:projectId/attachments/:id/content",
   async (request, reply) => {
-    const attachment = await Effect16.runPromise(store.getAttachment(request.params.id));
+    const attachment = await Effect17.runPromise(store.getAttachment(request.params.id));
     if (!attachment || attachment.projectId !== request.params.projectId)
       return reply.code(404).send({ error: "Attachment not found." });
     const preview = request.query.preview === "1" && attachment.kind === "image";
@@ -3834,7 +3990,7 @@ app.get(
   }
 );
 function publish(event, workflowUpdate = false) {
-  const previous = event.type === "session.updated" ? Effect16.runSync(store.get(event.session.id)) : void 0;
+  const previous = event.type === "session.updated" ? Effect17.runSync(store.get(event.session.id)) : void 0;
   const emittedEvent = event.type === "session.updated" && previous && !workflowUpdate ? {
     type: "session.updated",
     session: {
@@ -3844,7 +4000,7 @@ function publish(event, workflowUpdate = false) {
     }
   } : event;
   const notification = emittedEvent.type === "session.updated" ? push.pending(emittedEvent.session, previous) : void 0;
-  const record = Effect16.runSync(store.append(emittedEvent, notification));
+  const record = Effect17.runSync(store.append(emittedEvent, notification));
   const message = JSON.stringify({ type: "event", record });
   for (const client of security.sockets.keys()) {
     if (!(client instanceof WebSocket) || client.readyState !== WebSocket.OPEN) continue;
@@ -3857,8 +4013,8 @@ var delivery = new DeliveryCoordinator(store, {
   publish: (event) => publish(event, true),
   draft: deliveryWriter(models),
   projectPath: async (session) => {
-    const projectsRoot = await Effect16.runPromise(store.projectsRoot(defaultProjectsRoot));
-    const project = (await Effect16.runPromise(discoverProjects(projectsRoot, store))).find(
+    const projectsRoot = await Effect17.runPromise(store.projectsRoot(defaultProjectsRoot));
+    const project = (await Effect17.runPromise(discoverProjects(projectsRoot, store))).find(
       (item) => item.id === session.projectId && item.available
     );
     if (!project) throw new Error("Reconnect the project folder before delivering changes.");
@@ -3872,7 +4028,7 @@ var agentEffects = ManagedRuntime.make(
     publish,
     worktreesRoot,
     path9.join(dataRoot, "pi"),
-    (sessionId, messageId) => Effect16.runSync(store.hasMessage(sessionId, messageId)),
+    (sessionId, messageId) => Effect17.runSync(store.hasMessage(sessionId, messageId)),
     (session) => delivery.settled(session.id)
   )
 );
@@ -3907,7 +4063,7 @@ var stopUpdateDiscovery = updates.start(
   () => maintenance.ready(),
   (error) => app.log.error(error)
 );
-for (const session of await Effect16.runPromise(store.list())) {
+for (const session of await Effect17.runPromise(store.list())) {
   if (session.gitDelivery?.status === "pending") {
     publish(
       {
@@ -3951,7 +4107,7 @@ async function githubCliStatus() {
 }
 app.get("/api/connections", async () => githubCliStatus());
 app.get("/api/settings", async () => ({
-  projectsRoot: await Effect16.runPromise(store.projectsRoot(defaultProjectsRoot)),
+  projectsRoot: await Effect17.runPromise(store.projectsRoot(defaultProjectsRoot)),
   defaultModel: await models.defaultIdentity()
 }));
 app.get("/api/models", async (_request, reply) => {
@@ -3979,7 +4135,7 @@ app.post("/api/settings/model", async (request, reply) => {
   try {
     const defaultModel = await models.setDefault(parsed.data);
     return {
-      projectsRoot: await Effect16.runPromise(store.projectsRoot(defaultProjectsRoot)),
+      projectsRoot: await Effect17.runPromise(store.projectsRoot(defaultProjectsRoot)),
       defaultModel
     };
   } catch {
@@ -3992,13 +4148,13 @@ app.post(
   "/api/sessions/:id/model",
   async (request, reply) => withSessionTaskLock(request.params.id, async () => {
     const parsed = ModelReferenceSchema.safeParse(request.body);
-    const session = await Effect16.runPromise(store.get(request.params.id));
+    const session = await Effect17.runPromise(store.get(request.params.id));
     if (!session) return reply.code(404).send({ error: "Session not found." });
     if (!parsed.success)
       return reply.code(400).send({ error: "Choose a model from the server catalogue." });
     try {
       await models.resolve(parsed.data);
-      return await Effect16.runPromise(runtime.setModel(session, parsed.data));
+      return await Effect17.runPromise(runtime.setModel(session, parsed.data));
     } catch {
       return reply.code(409).send({
         error: "Could not change the model. Wait for the current reply to finish and choose an available model."
@@ -4009,21 +4165,38 @@ app.post(
 app.post("/api/settings", async (request, reply) => {
   const parsed = UpdateSettingsSchema.safeParse(request.body);
   if (!parsed.success) return reply.code(400).send({ error: "Enter a projects folder." });
-  const result = await Effect16.runPromise(
-    resolveProjectsRoot(parsed.data.projectsRoot).pipe(Effect16.result)
+  const result = await Effect17.runPromise(
+    resolveProjectsRoot(parsed.data.projectsRoot).pipe(Effect17.result)
   );
   if (result._tag === "Failure") return reply.code(400).send({ error: result.failure.message });
-  return Effect16.runPromise(store.setProjectsRoot(result.success));
+  return Effect17.runPromise(store.setProjectsRoot(result.success));
 });
 app.get("/api/projects", async (_request, reply) => {
-  const root = await Effect16.runPromise(store.projectsRoot(defaultProjectsRoot));
-  const result = await Effect16.runPromise(discoverProjects(root, store).pipe(Effect16.result));
+  const root = await Effect17.runPromise(store.projectsRoot(defaultProjectsRoot));
+  const result = await Effect17.runPromise(discoverProjects(root, store).pipe(Effect17.result));
   if (result._tag === "Failure") return reply.code(400).send({ error: result.failure.message });
-  return result.success;
+  return Effect17.runPromise(
+    Effect17.forEach(
+      result.success,
+      (project) => Effect17.promise(async () => ({
+        ...project,
+        repository: project.available ? await readRepositoryIdentity(project.path) : null
+      })),
+      { concurrency: 4 }
+    )
+  );
+});
+app.get("/api/projects/:id/git-status", async (request, reply) => {
+  const root = await Effect17.runPromise(store.projectsRoot(defaultProjectsRoot));
+  const projects = await Effect17.runPromise(discoverProjects(root, store));
+  const project = projects.find((item) => item.id === request.params.id);
+  if (!project?.available)
+    return reply.code(404).send({ error: "Project folder unavailable on this server." });
+  return projectGitStatus(project.path);
 });
 app.get("/api/projects/:id", async (request, reply) => {
-  const root = await Effect16.runPromise(store.projectsRoot(defaultProjectsRoot));
-  const result = await Effect16.runPromise(discoverProjects(root, store).pipe(Effect16.result));
+  const root = await Effect17.runPromise(store.projectsRoot(defaultProjectsRoot));
+  const result = await Effect17.runPromise(discoverProjects(root, store).pipe(Effect17.result));
   if (result._tag === "Failure") return reply.code(400).send({ error: result.failure.message });
   const project = result.success.find((item) => item.id === request.params.id);
   return project ?? reply.code(404).send({ error: "Project not found on this server." });
@@ -4032,50 +4205,62 @@ app.post("/api/projects/:id/reconnect", async (request, reply) => {
   const parsed = z17.object({ path: z17.string().trim().min(1).max(4096) }).safeParse(request.body);
   if (!parsed.success)
     return reply.code(400).send({ error: "Enter the project's new folder path." });
-  const root = await Effect16.runPromise(store.projectsRoot(defaultProjectsRoot));
-  const result = await Effect16.runPromise(
-    reconnectProject(root, request.params.id, parsed.data.path, store).pipe(Effect16.result)
+  const root = await Effect17.runPromise(store.projectsRoot(defaultProjectsRoot));
+  const result = await Effect17.runPromise(
+    reconnectProject(root, request.params.id, parsed.data.path, store).pipe(Effect17.result)
   );
   return result._tag === "Failure" ? reply.code(400).send({ error: result.failure.message }) : result.success;
 });
-app.get("/api/sessions", () => Effect16.runPromise(store.list()));
+app.get("/api/sessions", () => Effect17.runPromise(store.list()));
 app.get(
   "/api/tasks",
   (request) => boardTasks(store, request.query.projectId)
 );
+app.get("/api/task-moves", () => ({ supported: true }));
 app.post("/api/tasks", async (request, reply) => {
   const parsed = CreateTaskSchema.safeParse(request.body);
   if (!parsed.success) return reply.code(400).send({ error: "Enter a task title." });
-  if (parsed.data.gitFlow?.delivery === "pull_request") {
-    const github = await githubCliStatus();
-    if (!github.githubCli.authenticated)
-      return reply.code(400).send({ error: "GitHub CLI must be authenticated on the server to open a PR." });
-  }
-  const projectsRoot = await Effect16.runPromise(store.projectsRoot(defaultProjectsRoot));
-  const projects = await Effect16.runPromise(
-    discoverProjects(projectsRoot, store).pipe(Effect16.result)
-  );
-  if (projects._tag === "Failure" || !projects.success.some((project) => project.id === parsed.data.projectId && project.available))
-    return reply.code(404).send({ error: "Project not found in the server's projects folder." });
-  let files;
-  try {
-    files = await Effect16.runPromise(
-      attachments.resolve(parsed.data.projectId, parsed.data.attachmentIds ?? [])
+  const save = async () => {
+    if (parsed.data.clientTaskId) {
+      const existing = await Effect17.runPromise(store.getTask(parsed.data.clientTaskId));
+      if (existing) {
+        if (existing.deletedAt || existing.projectId !== parsed.data.projectId || existing.title !== parsed.data.title || existing.prompt !== parsed.data.prompt || JSON.stringify(existing.gitFlow) !== JSON.stringify(parsed.data.gitFlow) || JSON.stringify(existing.model) !== JSON.stringify(parsed.data.model))
+          return reply.code(409).send({ error: "This task creation request has already been used." });
+        return reply.code(201).send(existing);
+      }
+    }
+    if (parsed.data.gitFlow?.delivery === "pull_request") {
+      const github = await githubCliStatus();
+      if (!github.githubCli.authenticated)
+        return reply.code(400).send({ error: "GitHub CLI must be authenticated on the server to open a PR." });
+    }
+    const projectsRoot = await Effect17.runPromise(store.projectsRoot(defaultProjectsRoot));
+    const projects = await Effect17.runPromise(
+      discoverProjects(projectsRoot, store).pipe(Effect17.result)
     );
-  } catch (error) {
-    return reply.code(400).send({ error: String(error) });
-  }
-  const now = (/* @__PURE__ */ new Date()).toISOString();
-  const task = TaskSchema.parse({
-    id: randomUUID8(),
-    ...parsed.data,
-    attachments: files,
-    status: "backlog",
-    sessionId: null,
-    createdAt: now,
-    updatedAt: now
-  });
-  return reply.code(201).send(await Effect16.runPromise(store.saveTask(task)));
+    if (projects._tag === "Failure" || !projects.success.some((project) => project.id === parsed.data.projectId && project.available))
+      return reply.code(404).send({ error: "Project not found in the server's projects folder." });
+    let files;
+    try {
+      files = await Effect17.runPromise(
+        attachments.resolve(parsed.data.projectId, parsed.data.attachmentIds ?? [])
+      );
+    } catch (error) {
+      return reply.code(400).send({ error: String(error) });
+    }
+    const now = (/* @__PURE__ */ new Date()).toISOString();
+    const task = TaskSchema.parse({
+      id: parsed.data.clientTaskId ?? randomUUID9(),
+      ...parsed.data,
+      attachments: files,
+      status: "backlog",
+      sessionId: null,
+      createdAt: now,
+      updatedAt: now
+    });
+    return reply.code(201).send(await Effect17.runPromise(store.saveTask(task)));
+  };
+  return parsed.data.clientTaskId ? withTaskLock(`create-task:${parsed.data.clientTaskId}`, save) : save();
 });
 app.patch("/api/tasks/:id", async (request, reply) => {
   const parsed = UpdateTaskSchema.safeParse(request.body);
@@ -4090,8 +4275,8 @@ app.patch("/api/tasks/:id", async (request, reply) => {
         return reply.code(400).send({ error: "GitHub CLI must be authenticated on the server to open a PR." });
     }
     return await editTask(store, request.params.id, parsed.data, async (projectId, ids) => {
-      const result = await Effect16.runPromise(
-        attachments.resolve(projectId, ids).pipe(Effect16.result)
+      const result = await Effect17.runPromise(
+        attachments.resolve(projectId, ids).pipe(Effect17.result)
       );
       if (result._tag === "Failure") throw new TaskActionError(result.failure.message, 400);
       return result.success;
@@ -4102,14 +4287,26 @@ app.patch("/api/tasks/:id", async (request, reply) => {
     throw error;
   }
 });
+app.post("/api/tasks/:id/discard-unrun", async (request, reply) => {
+  const parsed = z17.object({ updatedAt: z17.string().datetime() }).safeParse(request.body);
+  if (!parsed.success) return reply.code(400).send({ error: "The task revision is required." });
+  try {
+    await deleteTask(store, request.params.id, void 0, parsed.data.updatedAt);
+    return reply.code(204).send();
+  } catch (error) {
+    if (error instanceof TaskActionError)
+      return reply.code(error.status).send({ error: error.message });
+    throw error;
+  }
+});
 app.delete("/api/tasks/:id", async (request, reply) => {
   try {
     await deleteTask(store, request.params.id, async (session) => {
-      await Effect16.runPromise(runtime.forget(session.id));
+      await Effect17.runPromise(runtime.forget(session.id));
       await worktreeCleanup.remove(session);
       await removeRunFiles(dataRoot, session.id);
     });
-    await Effect16.runPromise(attachments.cleanup());
+    await Effect17.runPromise(attachments.cleanup());
     return reply.code(204).send();
   } catch (error) {
     if (error instanceof TaskActionError)
@@ -4118,14 +4315,14 @@ app.delete("/api/tasks/:id", async (request, reply) => {
   }
 });
 app.get("/api/sessions/:id", async (request, reply) => {
-  const session = await Effect16.runPromise(store.get(request.params.id));
+  const session = await Effect17.runPromise(store.get(request.params.id));
   if (!session) return reply.code(404).send({ error: "Session not found." });
   return session;
 });
 app.post(
   "/api/sessions/:id/delivery",
   async (request, reply) => withSessionTaskLock(request.params.id, async () => {
-    const session = await Effect16.runPromise(store.get(request.params.id));
+    const session = await Effect17.runPromise(store.get(request.params.id));
     if (!session) return reply.code(404).send({ error: "Session not found." });
     try {
       const result = await delivery.retry(session.id);
@@ -4142,10 +4339,10 @@ app.post(
     try {
       const prepared = await preparation.retry(request.params.id);
       preparedSession = prepared.session;
-      const files = await Effect16.runPromise(
+      const files = await Effect17.runPromise(
         attachments.resolve(prepared.session.projectId, prepared.input.attachmentIds ?? [])
       );
-      await Effect16.runPromise(runtime.send(prepared.session, prepared.input.prompt, files));
+      await Effect17.runPromise(runtime.send(prepared.session, prepared.input.prompt, files));
       return reply.code(202).send(prepared.session);
     } catch (error) {
       if (preparedSession) {
@@ -4168,9 +4365,9 @@ var HistoryQuery = z17.object({
 app.get("/api/sessions/:id/events", async (request, reply) => {
   const query = HistoryQuery.safeParse(request.query);
   if (!query.success) return reply.code(400).send({ error: "Invalid history cursor or limit." });
-  const session = await Effect16.runPromise(store.get(request.params.id));
+  const session = await Effect17.runPromise(store.get(request.params.id));
   if (!session) return reply.code(404).send({ error: "Session not found." });
-  return Effect16.runPromise(store.history(session.id, query.data.after, query.data.limit));
+  return Effect17.runPromise(store.history(session.id, query.data.after, query.data.limit));
 });
 async function selectSessionModel(input, hasImages) {
   try {
@@ -4190,8 +4387,8 @@ async function selectSessionModel(input, hasImages) {
   }
 }
 async function resolveSessionProject(projectId) {
-  const projectsRoot = await Effect16.runPromise(store.projectsRoot(defaultProjectsRoot));
-  const project = (await Effect16.runPromise(discoverProjects(projectsRoot, store))).find(
+  const projectsRoot = await Effect17.runPromise(store.projectsRoot(defaultProjectsRoot));
+  const project = (await Effect17.runPromise(discoverProjects(projectsRoot, store))).find(
     (item) => item.id === projectId && item.available
   );
   if (!project)
@@ -4233,7 +4430,7 @@ async function createAndStartSession(input) {
   const projectPath = location.projectPath;
   let files;
   try {
-    files = await Effect16.runPromise(
+    files = await Effect17.runPromise(
       attachments.resolve(input.projectId, input.attachmentIds ?? [])
     );
   } catch (error) {
@@ -4246,11 +4443,11 @@ async function createAndStartSession(input) {
   if (selection.error !== void 0) return { error: selection.error, status: selection.status };
   const selectedModel = selection.model;
   const now = (/* @__PURE__ */ new Date()).toISOString();
-  const task = input.taskId ? await Effect16.runPromise(store.getTask(input.taskId)) : void 0;
+  const task = input.taskId ? await Effect17.runPromise(store.getTask(input.taskId)) : void 0;
   if (input.taskId && sessionTaskUnavailable(task, input.projectId))
     return { error: "Task not found.", status: 404 };
   const session = SessionSchema.parse({
-    id: randomUUID8(),
+    id: randomUUID9(),
     taskId: input.taskId ?? null,
     projectId: input.projectId,
     title: task?.title ?? input.prompt.slice(0, 80),
@@ -4276,7 +4473,7 @@ async function createAndStartSession(input) {
     );
   } catch (error) {
     if (task)
-      await Effect16.runPromise(
+      await Effect17.runPromise(
         store.saveTask({ ...task, sessionId: session.id, updatedAt: (/* @__PURE__ */ new Date()).toISOString() })
       );
     return {
@@ -4285,7 +4482,7 @@ async function createAndStartSession(input) {
     };
   }
   try {
-    await Effect16.runPromise(runtime.send(running, input.prompt, files));
+    await Effect17.runPromise(runtime.send(running, input.prompt, files));
   } catch (error) {
     publish({
       type: "session.updated",
@@ -4294,8 +4491,27 @@ async function createAndStartSession(input) {
     publish({ type: "error", sessionId: session.id, message: String(error) });
     return { error: "Could not start the agent session.", status: 500 };
   }
-  return { session: await Effect16.runPromise(store.get(session.id)), status: 201 };
+  return { session: await Effect17.runPromise(store.get(session.id)), status: 201 };
 }
+app.post("/api/projects/:id/chat", async (request, reply) => {
+  maintenance.assertReady();
+  const location = await resolveSessionProject(request.params.id);
+  if (location.error !== void 0)
+    return reply.code(location.status).send({ error: location.error });
+  const parsed = z17.object({ reset: z17.boolean().optional() }).safeParse(request.body ?? {});
+  if (!parsed.success) return reply.code(400).send({ error: parsed.error.flatten() });
+  try {
+    return await openRepoChat(
+      store,
+      request.params.id,
+      location.projectPath,
+      () => models.defaultIdentity(),
+      parsed.data.reset
+    );
+  } catch (error) {
+    return reply.code(409).send({ error: String(error) });
+  }
+});
 app.post("/api/sessions", async (request, reply) => {
   const parsed = CreateSessionSchema.safeParse(request.body);
   if (!parsed.success) return reply.code(400).send({ error: parsed.error.flatten() });
@@ -4312,11 +4528,11 @@ function startTask(id, instructionsOverride, automated = false) {
     "agent-dispatch",
     () => withTaskLock(id, async () => {
       maintenance.assertReady();
-      const task = await Effect16.runPromise(store.getTask(id));
+      const task = await Effect17.runPromise(store.getTask(id));
       if (!task || task.deletedAt) throw new TaskActionError("Task not found.", 404);
       if (automated) {
-        const state = await Effect16.runPromise(store.automation());
-        if (activeAgents(await Effect16.runPromise(store.list())) >= state.config.parallelism) return;
+        const state = await Effect17.runPromise(store.automation());
+        if (activeAgents(await Effect17.runPromise(store.list())) >= state.config.parallelism) return;
         const backlog = await boardTasks(store);
         if (!backlog.some((item) => item.id === id && item.status === "backlog")) return;
       }
@@ -4324,7 +4540,7 @@ function startTask(id, instructionsOverride, automated = false) {
       const prompt = instructions ? `${task.title}
 
 ${instructions}` : task.title;
-      const linkedSession = task.sessionId ? await Effect16.runPromise(store.get(task.sessionId)) : void 0;
+      const linkedSession = task.sessionId ? await Effect17.runPromise(store.get(task.sessionId)) : void 0;
       if (linkedSession && (["starting", "running", "queued"].includes(linkedSession.status) || linkedSession.gitDelivery?.status === "pending"))
         throw new TaskActionError("This task already has a running agent.", 409);
       const result = await createAndStartSession({
@@ -4338,7 +4554,7 @@ ${instructions}` : task.title;
       });
       if (!result.session)
         throw new TaskActionError(result.error ?? "Could not start task.", result.status);
-      const updatedTask = await Effect16.runPromise(
+      const updatedTask = await Effect17.runPromise(
         store.saveTask({
           ...task,
           status: taskStatusForSession(result.session.status, result.session),
@@ -4373,8 +4589,8 @@ app.patch("/api/automation", async (request, reply) => {
   const parsed = AutomationConfigSchema.safeParse(request.body);
   if (!parsed.success)
     return reply.code(400).send({ error: parsed.error.issues.map((issue) => issue.message).join(" ") });
-  const root = await Effect16.runPromise(store.projectsRoot(defaultProjectsRoot));
-  const projects = await Effect16.runPromise(discoverProjects(root, store));
+  const root = await Effect17.runPromise(store.projectsRoot(defaultProjectsRoot));
+  const projects = await Effect17.runPromise(discoverProjects(root, store));
   if (parsed.data.projectIds.some(
     (id) => !projects.some((project) => project.id === id && project.available)
   ))
@@ -4402,7 +4618,7 @@ automationTimer.unref();
 app.post(
   "/api/sessions/:id/messages",
   async (request, reply) => withSessionTaskLock(request.params.id, async () => {
-    const session = await Effect16.runPromise(store.get(request.params.id));
+    const session = await Effect17.runPromise(store.get(request.params.id));
     if (!session) return reply.code(404).send({ error: "Session not found." });
     const parsed = SendMessageSchema.safeParse(request.body);
     if (!parsed.success) return reply.code(400).send({ error: parsed.error.flatten() });
@@ -4410,10 +4626,10 @@ app.post(
       await delivery.assertCanWork(session.id);
       if (session.preparation && session.preparation.status !== "ready")
         throw new Error("Retry workspace preparation before sending a message.");
-      const files = await Effect16.runPromise(
+      const files = await Effect17.runPromise(
         attachments.resolve(session.projectId, parsed.data.attachmentIds ?? [])
       );
-      await Effect16.runPromise(
+      await Effect17.runPromise(
         runtime.send(
           session,
           parsed.data.message,
@@ -4429,22 +4645,22 @@ app.post(
   })
 );
 async function withSessionTaskLock(id, operation) {
-  const session = await Effect16.runPromise(store.get(id));
+  const session = await Effect17.runPromise(store.get(id));
   const lockId = session ? await sessionTaskLockId(store, session) : `session-${id}`;
   return withTaskLock(lockId, operation);
 }
 app.post(
   "/api/sessions/:id/stop",
   async (request, reply) => withSessionTaskLock(request.params.id, async () => {
-    const session = await Effect16.runPromise(store.get(request.params.id));
+    const session = await Effect17.runPromise(store.get(request.params.id));
     if (!session) return reply.code(404).send({ error: "Session not found." });
-    await Effect16.runPromise(runtime.stop(session));
+    await Effect17.runPromise(runtime.stop(session));
     return reply.code(202).send({ accepted: true });
   })
 );
 attachEventServer(app, security, allowedOrigins, () => ({
   type: "snapshot",
-  sessions: Effect16.runSync(store.list())
+  sessions: Effect17.runSync(store.list())
 }));
 var closeControl = await startControl(
   dataRoot,
@@ -4456,7 +4672,7 @@ var closeControl = await startControl(
     connectedDevices: new Set(security.sockets.values()).size,
     connectedSockets: security.sockets.size,
     memory: process.memoryUsage().rss,
-    activeRuns: activeAgents(Effect16.runSync(store.list())),
+    activeRuns: activeAgents(Effect17.runSync(store.list())),
     maintenance: maintenance.status()
   }),
   maintenance
@@ -4474,7 +4690,7 @@ app.addHook("onClose", async () => {
   clearInterval(automationTimer);
   await withTaskLock("automation", async () => {
   });
-  await Effect16.runPromise(runtime.close());
+  await Effect17.runPromise(runtime.close());
   await agentEffects.dispose();
   await attachmentEffects.dispose();
   await effects.dispose();