@co0ontty/wand 4.60.0 → 4.61.0

package/dist/server-task-routes.js

@@ -1,11 +1,13 @@
 import { getDefaultModelForProvider } from "./config.js";
 import { asyncRoute } from "./express-async.js";
 import { getErrorMessage } from "./error-utils.js";
+import { bodyObject, sendRouteError, text } from "./server-request.js";
 import { parseWandTaskAgent } from "./storage.js";
 import { generateWandTaskTitle, provisionalTaskTitleFromDescription, TASK_TITLE_MAX_LENGTH } from "./task-title.js";
 import { resolveSystemAiContext } from "./session-ai-context.js";
-import { archiveBoardTask, syncUngroupedSessionsToBoard } from "./wand-task-sync.js";
-const STATUSES = new Set(["todo", "doing", "done"]);
+import { WAND_MILESTONE_NAME_MAX_LENGTH } from "./task-types.js";
+import { archiveBoardTask, syncClosedBoardTask, syncUngroupedSessionsToBoard } from "./wand-task-sync.js";
+const STATUSES = new Set(["todo", "doing", "done", "archived"]);
 const PRIORITIES = new Set(["none", "low", "medium", "high", "urgent"]);
 const AGENT_PROVIDERS = new Set(["claude", "codex", "opencode", "grok", "qoder", "pi"]);
 const AGENT_EFFORTS = new Set(["off", "standard", "deep", "max"]);
@@ -42,19 +44,29 @@ function dateValue(value) {
     }
     return value.trim();
 }
-function bodyObject(value) {
-    if (!value || typeof value !== "object" || Array.isArray(value))
-        throw new Error("请求体必须是对象。");
-    return value;
-}
-function text(value) {
-    return typeof value === "string" ? value.trim() : "";
-}
 function labelsFrom(value) {
     if (!Array.isArray(value))
         return [];
     return value.filter((item) => typeof item === "string").map((item) => item.trim()).filter(Boolean).slice(0, 20);
 }
+/** 里程碑名：必填、去首尾空白、限长。 */
+function milestoneNameFrom(value) {
+    const name = text(value).slice(0, WAND_MILESTONE_NAME_MAX_LENGTH);
+    if (!name)
+        throw new Error("请填写里程碑名称。");
+    return name;
+}
+/** 只有已存在的里程碑才能挂到任务上；null / 空串表示解绑。 */
+function milestoneIdFrom(storage, value) {
+    if (value === null || value === undefined)
+        return null;
+    const id = text(value);
+    if (!id)
+        return null;
+    if (!storage.getWandMilestone(id))
+        throw new Error("未找到该里程碑。");
+    return id;
+}
 /** 任务派发配置：provider / model / thinkingEffort 三者必须同时给出且合法。 */
 export function parseTaskAgent(value) {
     if (value === null)
@@ -78,6 +90,7 @@ function taskDto({ storage, sessions }, task) {
         return null;
     const workspace = task.workspaceId ? storage.getWorkspace(task.workspaceId) : null;
     const sessionIds = storage.listWandTaskSessionIds(task.id);
+    const milestone = task.milestoneId ? storage.getWandMilestone(task.milestoneId) : null;
     return {
         ...task,
         sessionIds,
@@ -88,6 +101,8 @@ function taskDto({ storage, sessions }, task) {
         workspace: workspace
             ? { id: workspace.id, name: workspace.name, cwd: workspace.cwd }
             : null,
+        // 卡片上要显示里程碑名字，直接在这里解出，免去前端再查一次列表。
+        milestone: milestone ? { id: milestone.id, name: milestone.name } : null,
     };
 }
 function taskSessionSummary(session) {
@@ -103,7 +118,7 @@ function taskSessionSummary(session) {
     };
 }
 function sendTaskError(res, error, fallback) {
-    res.status(400).json({ error: getErrorMessage(error, fallback) });
+    sendRouteError(res, error, fallback);
 }
 /**
  * 用户没写标题时，先用描述首行当占位标题，再由后台模型总结一个更好的。
@@ -167,11 +182,68 @@ export function registerTaskRoutes(app, deps, sessionsLegacy, requireAdminLegacy
             console.error("[WandTask] Failed to sync ungrouped sessions onto the board:", getErrorMessage(error));
         }
         const workspaceId = typeof req.query.workspaceId === "string" ? req.query.workspaceId : undefined;
+        // 数组顺序即展示顺序：created_at 倒序，新创建的在上面。
         res.json(storage.listWandTasks(workspaceId).map((task) => dto(task)));
     });
     app.get("/api/wand-task-agent-defaults", guard, (_req, res) => {
         res.json(readTaskBoardLastAgent(storage));
     });
+    // ── 里程碑：跨项目全局列表，所有任务面板的「新建任务」共用 ──
+    app.get("/api/wand-milestones", guard, (_req, res) => {
+        const counts = storage.countWandTasksByMilestone();
+        res.json({
+            milestones: storage.listWandMilestones().map((milestone) => ({
+                ...milestone,
+                taskCount: counts[milestone.id] ?? 0,
+            })),
+        });
+    });
+    app.post("/api/wand-milestones", guard, (req, res) => {
+        try {
+            const body = bodyObject(req.body);
+            const name = milestoneNameFrom(body.name);
+            const duplicate = storage.listWandMilestones()
+                .find((milestone) => milestone.name.toLowerCase() === name.toLowerCase());
+            if (duplicate)
+                throw new Error(`里程碑「${duplicate.name}」已存在。`);
+            const created = storage.createWandMilestone({ name, dueDate: dateValue(body.dueDate) ?? null });
+            res.status(201).json({ ...created, taskCount: 0 });
+        }
+        catch (error) {
+            sendTaskError(res, error, "无法创建里程碑。");
+        }
+    });
+    app.patch("/api/wand-milestones/:id", guard, (req, res) => {
+        try {
+            const body = bodyObject(req.body);
+            const current = storage.getWandMilestone(req.params.id);
+            if (!current) {
+                res.status(404).json({ error: "未找到该里程碑。" });
+                return;
+            }
+            const patch = {};
+            if (body.name !== undefined) {
+                const name = milestoneNameFrom(body.name);
+                const duplicate = storage.listWandMilestones()
+                    .find((milestone) => milestone.id !== current.id && milestone.name.toLowerCase() === name.toLowerCase());
+                if (duplicate)
+                    throw new Error(`里程碑「${duplicate.name}」已存在。`);
+                patch.name = name;
+            }
+            if (body.dueDate !== undefined)
+                patch.dueDate = dateValue(body.dueDate) ?? null;
+            const updated = storage.updateWandMilestone(current.id, patch);
+            res.json({ ...updated, taskCount: storage.countWandTasksByMilestone()[current.id] ?? 0 });
+        }
+        catch (error) {
+            sendTaskError(res, error, "无法更新里程碑。");
+        }
+    });
+    app.delete("/api/wand-milestones/:id", guard, (req, res) => {
+        // 只解绑任务，不删任务；已经删过的 id 幂等返回 ok。
+        storage.deleteWandMilestone(req.params.id);
+        res.json({ ok: true });
+    });
     app.put("/api/wand-task-agent-defaults", guard, (req, res) => {
         try {
             const agent = parseTaskAgent(req.body);
@@ -202,6 +274,9 @@ export function registerTaskRoutes(app, deps, sessionsLegacy, requireAdminLegacy
             const agent = body.agent === undefined ? null : parseTaskAgent(body.agent);
             if (agent)
                 writeTaskBoardLastAgent(storage, agent);
+            const labels = labelsFrom(body.labels);
+            const dueDate = dateValue(body.dueDate) ?? null;
+            const milestoneId = milestoneIdFrom(storage, body.milestoneId);
             const task = storage.createWandTask({
                 workspaceId,
                 title,
@@ -209,8 +284,9 @@ export function registerTaskRoutes(app, deps, sessionsLegacy, requireAdminLegacy
                 description,
                 status,
                 priority,
-                labels: labelsFrom(body.labels),
-                dueDate: dateValue(body.dueDate) ?? null,
+                labels,
+                dueDate,
+                milestoneId,
                 agent,
             });
             if (titleSource === "auto") {
@@ -254,6 +330,8 @@ export function registerTaskRoutes(app, deps, sessionsLegacy, requireAdminLegacy
                 patch.labels = labelsFrom(body.labels);
             if (body.dueDate !== undefined)
                 patch.dueDate = dateValue(body.dueDate) ?? null;
+            if (body.milestoneId !== undefined)
+                patch.milestoneId = milestoneIdFrom(storage, body.milestoneId);
             if (body.workspaceId !== undefined) {
                 const workspaceId = body.workspaceId === null ? null : text(body.workspaceId);
                 if (workspaceId && !storage.getWorkspace(workspaceId))
@@ -273,8 +351,8 @@ export function registerTaskRoutes(app, deps, sessionsLegacy, requireAdminLegacy
                 res.status(404).json({ error: "未找到该任务。" });
                 return;
             }
-            if (task.status === "done")
-                archiveBoardTask(storage, task.id);
+            if (task.status === "done" || task.status === "archived")
+                syncClosedBoardTask(storage, task);
             res.json(dto(storage.getWandTask(task.id) ?? task));
         }
         catch (error) {

package/dist/server-update-routes.js

@@ -2,6 +2,7 @@ import { Readable } from "node:stream";
 import { pipeline } from "node:stream/promises";
 import { getErrorMessage } from "./error-utils.js";
 import { asyncRoute } from "./express-async.js";
+import { sendRouteError, stringQuery } from "./server-request.js";
 import { checkProviderCliUpdates, updateProviderClis, verifyProviderCliUpdateResults, } from "./provider-cli-updater.js";
 import { absoluteUrl, buildIosInstallPage, buildIosOtaManifest, buildItmsServicesUrl, collectIosOtaBlockers, formatIosAssetSize, inspectIpa, normalizePublicOrigin, publicOriginFromRequest, } from "./ios-ota.js";
 import { streamFileWithRange } from "./server-file-routes.js";
@@ -48,13 +49,23 @@ async function proxyGitHubApk(_req, res, asset, fetchImpl = fetch) {
         res.destroy();
     }
 }
+/**
+ * 三个 update 检查接口都要求 `currentVersion`。缺参数是客户端 bug，不是服务端异常，
+ * 用 400 + 固定的英文文案（老客户端按字符串匹配）。
+ */
+function requireCurrentVersion(req, res) {
+    const currentVersion = stringQuery(req.query.currentVersion);
+    if (!currentVersion) {
+        res.status(400).json({ error: "Missing currentVersion query parameter." });
+        return null;
+    }
+    return currentVersion;
+}
 export function registerPublicUpdateRoutes(app, deps) {
     app.get("/api/android-apk-update", asyncRoute(async (req, res) => {
-        const currentVersion = typeof req.query.currentVersion === "string" ? req.query.currentVersion.trim() : "";
-        if (!currentVersion) {
-            res.status(400).json({ error: "Missing currentVersion query parameter." });
+        const currentVersion = requireCurrentVersion(req, res);
+        if (currentVersion === null)
             return;
-        }
         const channel = req.query.channel === "beta" ? "beta" : "stable";
         const latest = await deps.resolveLatestApk(channel);
         if (!latest) {
@@ -126,11 +137,9 @@ export function registerPublicUpdateRoutes(app, deps) {
         });
     }));
     app.get("/api/macos-dmg-update", asyncRoute(async (req, res) => {
-        const currentVersion = typeof req.query.currentVersion === "string" ? req.query.currentVersion.trim() : "";
-        if (!currentVersion) {
-            res.status(400).json({ error: "Missing currentVersion query parameter." });
+        const currentVersion = requireCurrentVersion(req, res);
+        if (currentVersion === null)
             return;
-        }
         const latest = await deps.resolveLatestDmg();
         if (!latest) {
             res.json({ updateAvailable: false, currentVersion, latestVersion: null, downloadUrl: null, source: null });
@@ -162,11 +171,9 @@ export function registerPublicUpdateRoutes(app, deps) {
         });
     }));
     app.get("/api/ios-ipa-update", asyncRoute(async (req, res) => {
-        const currentVersion = typeof req.query.currentVersion === "string" ? req.query.currentVersion.trim() : "";
-        if (!currentVersion) {
-            res.status(400).json({ error: "Missing currentVersion query parameter." });
+        const currentVersion = requireCurrentVersion(req, res);
+        if (currentVersion === null)
             return;
-        }
         const payload = await resolveIosOtaPayload(req, deps);
         if (!payload) {
             res.json({
@@ -344,7 +351,7 @@ export function registerAdminUpdateRoutes(app, deps) {
             });
         }
         catch (error) {
-            res.status(500).json({ error: getErrorMessage(error, "检查 CLI 更新失败。") });
+            sendRouteError(res, error, "检查 CLI 更新失败。", 500);
         }
     }));
     app.post("/api/provider-cli-updates", requireAdmin, asyncRoute(async (req, res) => {
@@ -369,7 +376,7 @@ export function registerAdminUpdateRoutes(app, deps) {
             res.json({ ok: results.every((item) => item.ok), results, ...after, autoUpdate: storage.getConfigValue("autoUpdateProviderClis") === "true" });
         }
         catch (error) {
-            res.status(500).json({ error: getErrorMessage(error, "更新 CLI 失败。") });
+            sendRouteError(res, error, "更新 CLI 失败。", 500);
         }
         finally {
             state.providerCliUpdateInFlight = false;
@@ -387,7 +394,7 @@ export function registerAdminUpdateRoutes(app, deps) {
             });
         }
         catch (error) {
-            res.status(500).json({ error: getErrorMessage(error, "检查更新失败。") });
+            sendRouteError(res, error, "检查更新失败。", 500);
         }
     }));
     app.post("/api/update", requireAdmin, asyncRoute(async (_req, res) => {
@@ -437,7 +444,7 @@ export function registerAdminUpdateRoutes(app, deps) {
             });
         }
         catch (error) {
-            res.status(500).json({ error: getErrorMessage(error, "更新失败。") });
+            sendRouteError(res, error, "更新失败。", 500);
         }
         finally {
             state.updateInFlight = false;

package/dist/server-vault-routes.d.ts

@@ -0,0 +1,16 @@
+/**
+ * 浏览器扩展密码库 HTTP 路由（`/api/browser-extension/*`）。
+ *
+ * 挂在 `requireAuth` + `requirePasswordVault` scope 之后，因此这里的 handler
+ * 不再自己鉴权。原来它们挤在 `server.ts` 组合根中间，把启动逻辑切成了两半；
+ * 独立成模块后组合根只剩下顺序清晰的装配。
+ */
+import type { Express } from "express";
+import type { WandStorage } from "./storage.js";
+import type { WandConfig } from "./types.js";
+export interface VaultRoutesDependencies {
+    storage: WandStorage;
+    config: WandConfig;
+    useHttps: boolean;
+}
+export declare function registerVaultRoutes(app: Express, deps: VaultRoutesDependencies): void;

package/dist/server-vault-routes.js

@@ -0,0 +1,125 @@
+/**
+ * 浏览器扩展密码库 HTTP 路由（`/api/browser-extension/*`）。
+ *
+ * 挂在 `requireAuth` + `requirePasswordVault` scope 之后，因此这里的 handler
+ * 不再自己鉴权。原来它们挤在 `server.ts` 组合根中间，把启动逻辑切成了两半；
+ * 独立成模块后组合根只剩下顺序清晰的装配。
+ */
+import { buildPasswordSecurityReport, generatePassword, generateTotpCode, normalizePasswordItemType, } from "./password-manager.js";
+import { firstQueryStringValue, sendRouteError } from "./server-request.js";
+import { resolveRequestServerUrl } from "./server-app-connect.js";
+export function registerVaultRoutes(app, deps) {
+    const { storage, config, useHttps } = deps;
+    app.get("/api/browser-extension/status", (req, res) => {
+        res.json({
+            ok: true,
+            serverUrl: resolveRequestServerUrl(req, config, useHttps),
+            features: {
+                loginAutofill: true,
+                saveLogins: true,
+                federatedLoginMemory: true,
+                passwordGenerator: true,
+                totp: true,
+                cardsAndIdentities: true,
+                vaults: true,
+                securityReport: true,
+                passkeys: "webauthn-proxy",
+            },
+        });
+    });
+    app.get("/api/browser-extension/vaults", (_req, res) => {
+        res.json({ vaults: storage.listPasswordVaults() });
+    });
+    app.post("/api/browser-extension/vaults", (req, res) => {
+        try {
+            const vault = storage.createPasswordVault(req.body.name);
+            res.status(201).json({ vault });
+        }
+        catch (error) {
+            sendRouteError(res, error, "无法创建 vault。");
+        }
+    });
+    app.get("/api/browser-extension/items", (req, res) => {
+        const filter = {
+            q: firstQueryStringValue(req.query.q),
+            url: firstQueryStringValue(req.query.url),
+            vaultId: firstQueryStringValue(req.query.vaultId),
+            type: req.query.type ? normalizePasswordItemType(firstQueryStringValue(req.query.type)) : undefined,
+            limit: req.query.limit ? Number(firstQueryStringValue(req.query.limit)) : undefined,
+        };
+        res.json({ items: storage.listPasswordItems(filter) });
+    });
+    app.post("/api/browser-extension/items", (req, res) => {
+        try {
+            const item = storage.createPasswordItem(req.body);
+            res.status(201).json({ item });
+        }
+        catch (error) {
+            sendRouteError(res, error, "无法保存条目。");
+        }
+    });
+    app.get("/api/browser-extension/items/:id", (req, res) => {
+        const item = storage.getPasswordItem(req.params.id);
+        if (!item) {
+            res.status(404).json({ error: "条目不存在。" });
+            return;
+        }
+        res.json({ item });
+    });
+    app.put("/api/browser-extension/items/:id", (req, res) => {
+        try {
+            const item = storage.updatePasswordItem(req.params.id, req.body);
+            if (!item) {
+                res.status(404).json({ error: "条目不存在。" });
+                return;
+            }
+            res.json({ item });
+        }
+        catch (error) {
+            sendRouteError(res, error, "无法更新条目。");
+        }
+    });
+    app.delete("/api/browser-extension/items/:id", (req, res) => {
+        if (!storage.deletePasswordItem(req.params.id)) {
+            res.status(404).json({ error: "条目不存在。" });
+            return;
+        }
+        res.json({ ok: true });
+    });
+    app.post("/api/browser-extension/items/:id/use", (req, res) => {
+        const item = storage.touchPasswordItem(req.params.id);
+        if (!item) {
+            res.status(404).json({ error: "条目不存在。" });
+            return;
+        }
+        res.json({ item });
+    });
+    app.get("/api/browser-extension/generator/password", (req, res) => {
+        res.json({
+            password: generatePassword({
+                length: Number(firstQueryStringValue(req.query.length)),
+                digits: firstQueryStringValue(req.query.digits) !== "false",
+                symbols: firstQueryStringValue(req.query.symbols) !== "false",
+            }),
+        });
+    });
+    app.post("/api/browser-extension/totp/preview", (req, res) => {
+        try {
+            const { secret, digits, period } = req.body;
+            if (!secret) {
+                res.status(400).json({ error: "缺少 TOTP secret。" });
+                return;
+            }
+            res.json({
+                code: generateTotpCode(secret, Date.now(), digits ?? 6, period ?? 30),
+                period: period ?? 30,
+            });
+        }
+        catch (error) {
+            sendRouteError(res, error, "无法生成 TOTP。");
+        }
+    });
+    app.get("/api/browser-extension/security-report", (_req, res) => {
+        res.json({ report: buildPasswordSecurityReport(storage.listPasswordItems({ includeArchived: false, limit: 200 })) });
+    });
+}

package/dist/server-workspace-routes.js

@@ -2,13 +2,14 @@ import path from "node:path";
 import crypto from "node:crypto";
 import { existsSync, statSync } from "node:fs";
 import { asyncRoute } from "./express-async.js";
+import { sendRouteError } from "./server-request.js";
 import { getErrorMessage } from "./error-utils.js";
 import { expandHomePath } from "./middleware/path-safety.js";
 import { checkSessionWorktreeMergeabilityAsync, cleanupWorktreeSync, prepareSessionWorktree, resolveWorktreeTargetBranchAsync, } from "./git-worktree.js";
 import { collectSessionTopicBlocklist } from "./session-topic.js";
 import { resolveSessionDisplayTitle } from "./session-transport.js";
 import { GLOBAL_WORKSPACE_ID } from "./types.js";
-import { attachUnboundSessionsToWorkspace, backfillSessionWorkspaces, normalizeProjectCwd, projectCwdForSession, } from "./workspace-binding.js";
+import { attachUnboundSessionsToWorkspace, backfillSessionWorkspaces, normalizeProjectCwd, projectCwdForSession, syncDirectoryNameForWorkspace, } from "./workspace-binding.js";
 import { archiveBoardTaskForWorkspaceTask, ensureBoardTaskForWorkspaceTask } from "./wand-task-sync.js";
 const PROVIDERS = new Set(["claude", "codex", "opencode", "grok", "qoder", "pi"]);
 function workspaceSessionTitle(session, names = {}) {
@@ -104,6 +105,12 @@ function taskRuntimeCwd(task, workspace) {
 function createTaskForWorkspace(storage, workspace, body) {
     const name = typeof body.name === "string" ? body.name.trim() : "";
     const taskName = name || "未命名任务";
+    // 里程碑是全局列表；建任务时可选，非法 id 直接报错而不是静默丢掉。
+    const requestedMilestoneId = typeof body.milestoneId === "string" ? body.milestoneId.trim() : "";
+    if (requestedMilestoneId && !storage.getWandMilestone(requestedMilestoneId)) {
+        throw new Error("未找到该里程碑。");
+    }
+    const milestoneId = requestedMilestoneId || null;
     let mountedCwd;
     if (body.cwd !== undefined && body.cwd !== null && String(body.cwd).trim()) {
         mountedCwd = resolveWorkspaceCwd(body.cwd);
@@ -140,6 +147,7 @@ function createTaskForWorkspace(storage, workspace, body) {
         name: taskName,
         cwd: storedCwd,
         worktree,
+        milestoneId,
     });
     ensureBoardTaskForWorkspaceTask(storage, task, workspace);
     return {
@@ -289,11 +297,13 @@ export function registerWorkspaceRoutes(app, storage, sessions) {
             cwd = resolveWorkspaceCwd(body.cwd);
         }
         catch (error) {
-            res.status(400).json({ error: getErrorMessage(error, "目录无效。") });
+            sendRouteError(res, error, "目录无效。");
             return;
         }
         const defaultProvider = parseDefaultProvider(body.defaultProvider);
         const workspace = storage.createWorkspace({ name, cwd, defaultProvider });
+        // 项目名就是工作区显示名：目录自定义名一起写，保证各端显示一致。
+        storage.setSessionDirectoryName(cwd, name);
         const attached = attachUnboundSessionsToWorkspace(storage, workspace);
         res.status(201).json({ ...workspace, worktreeCount: 0, sessionCount: attached });
     }));
@@ -321,6 +331,11 @@ export function registerWorkspaceRoutes(app, storage, sessions) {
             return;
         }
         const body = req.body;
+        // 全局任务空间不是用户目录，不允许改名。
+        if (isGlobalWorkspace(existing) && typeof body.name === "string" && body.name.trim()) {
+            res.status(400).json({ error: "不能重命名全局任务空间。" });
+            return;
+        }
         const patch = {};
         if (typeof body.name === "string" && body.name.trim())
             patch.name = body.name.trim();
@@ -329,7 +344,7 @@ export function registerWorkspaceRoutes(app, storage, sessions) {
                 patch.cwd = resolveWorkspaceCwd(body.cwd);
             }
             catch (error) {
-                res.status(400).json({ error: getErrorMessage(error, "目录无效。") });
+                sendRouteError(res, error, "目录无效。");
                 return;
             }
         }
@@ -343,6 +358,9 @@ export function registerWorkspaceRoutes(app, storage, sessions) {
         }
         storage.updateWorkspace(existing.id, patch);
         const updated = storage.getWorkspace(existing.id);
+        // 改名时同步目录自定义名，否则其它端（会话列表 / 项目视图）仍是旧名字。
+        if (updated)
+            syncDirectoryNameForWorkspace(storage, updated);
         res.json(updated ? workspaceWithCounts(storage, updated) : null);
     });
     // 删除项目；cascade=true 连带删会话，否则仅解绑
@@ -404,7 +422,7 @@ export function registerWorkspaceRoutes(app, storage, sessions) {
             });
         }
         catch (error) {
-            res.status(400).json({ error: getErrorMessage(error, "创建任务失败。") });
+            sendRouteError(res, error, "创建任务失败。");
         }
     }));
     // 目录组为一级容器的任务聚合列表，供侧栏「任务」视图一次拉全。
@@ -430,6 +448,12 @@ export function registerWorkspaceRoutes(app, storage, sessions) {
         backfillSessionWorkspaces(storage);
         const workspaces = storage.listWorkspaces();
         const summarize = (session, names = {}) => workspaceSessionSummary(session, names, sessions);
+        // 目录自定义名（工作区名称）：没有项目实体的合成目录也按这个名字显示。
+        const directoryNames = storage.listSessionDirectoryNames();
+        const customNameForCwd = (cwd) => {
+            const name = directoryNames.get(normalizeProjectCwd(cwd))?.trim();
+            return name || undefined;
+        };
         const visibleWorkspaces = workspaceFilter
             ? workspaces.filter((workspace) => workspace.id === workspaceFilter)
             : workspaces;
@@ -458,7 +482,9 @@ export function registerWorkspaceRoutes(app, storage, sessions) {
                 return existing;
             const created = {
                 workspaceId: id,
-                workspaceName: normalized.split("/").filter(Boolean).at(-1) || normalized,
+                workspaceName: customNameForCwd(normalized)
+                    ?? normalized.split("/").filter(Boolean).at(-1)
+                    ?? normalized,
                 workspaceCwd: normalized,
                 synthetic: true,
                 tasks: [],
@@ -529,7 +555,9 @@ export function registerWorkspaceRoutes(app, storage, sessions) {
                 if (!synthetic) {
                     synthetic = {
                         workspaceId: id,
-                        workspaceName: resolved.split("/").filter(Boolean).at(-1) || resolved,
+                        workspaceName: customNameForCwd(resolved)
+                            ?? resolved.split("/").filter(Boolean).at(-1)
+                            ?? resolved,
                         workspaceCwd: resolved,
                         synthetic: true,
                         tasks: [],
@@ -594,7 +622,7 @@ export function registerWorkspaceRoutes(app, storage, sessions) {
             target = await resolveWorktreeTargetBranchAsync(workspace.cwd);
         }
         catch (error) {
-            res.status(400).json({ error: getErrorMessage(error, "无法识别项目默认分支。") });
+            sendRouteError(res, error, "无法识别项目默认分支。");
             return;
         }
         const worktrees = await Promise.all(tasks.map(async (task) => {
@@ -671,7 +699,7 @@ export function registerWorkspaceRoutes(app, storage, sessions) {
             });
         }
         catch (error) {
-            res.status(400).json({ error: getErrorMessage(error, "创建任务失败。") });
+            sendRouteError(res, error, "创建任务失败。");
         }
     }));
     // 任务详情：meta + 该任务下的会话；访问即更新 lastOpenedAt
@@ -708,6 +736,14 @@ export function registerWorkspaceRoutes(app, storage, sessions) {
             patch.name = body.name.trim();
         if (body.status === "active" || body.status === "done")
             patch.status = body.status;
+        if (body.milestoneId !== undefined) {
+            const milestoneId = typeof body.milestoneId === "string" ? body.milestoneId.trim() : "";
+            if (milestoneId && !storage.getWandMilestone(milestoneId)) {
+                sendRouteError(res, new Error("未找到该里程碑。"), "无法更新任务。");
+                return;
+            }
+            patch.milestoneId = milestoneId || null;
+        }
         storage.updateWorkspaceTask(existing.id, patch);
         if (patch.status === "done")
             archiveBoardTaskForWorkspaceTask(storage, existing.id);