@h-rig/standard-plugin 0.0.6-alpha.13 → 0.0.6-alpha.130

package/dist/src/files-source.d.ts

@@ -0,0 +1,18 @@
+import type { RegisteredTaskSource } from "@rig/contracts";
+export interface FilesTaskSourceOptions {
+    /**
+     * Directory containing one JSON file per task. Use either `path` (matches
+     * the `taskSource.path` field in rig.config.ts) or `dir` (back-compat).
+     */
+    path?: string;
+    dir?: string;
+    pattern?: RegExp;
+    /**
+     * Root a relative `path`/`dir` resolves against. The serving process's cwd
+     * is NOT the project (workspace-spawned servers run from the engine
+     * checkout), so without this a relative path silently reads the WRONG
+     * repo's tasks. Defaults to cwd for direct programmatic use.
+     */
+    projectRoot?: string;
+}
+export declare function createFilesTaskSource(opts: FilesTaskSourceOptions): RegisteredTaskSource;

package/dist/src/files-source.js

@@ -1,7 +1,7 @@
 // @bun
 // packages/standard-plugin/src/files-source.ts
 import { readFileSync, readdirSync, existsSync, statSync, writeFileSync } from "fs";
-import { join, basename } from "path";
+import { join, basename, isAbsolute, resolve } from "path";
 var DEFAULT_PATTERN = /\.(task\.)?json$/;
 function readTaskFile(file, pattern) {
   const raw = JSON.parse(readFileSync(file, "utf-8"));
@@ -22,10 +22,11 @@ function readTaskFile(file, pattern) {
 }
 function createFilesTaskSource(opts) {
   const pattern = opts.pattern ?? DEFAULT_PATTERN;
-  const directory = opts.path ?? opts.dir;
-  if (!directory) {
+  const configured = opts.path ?? opts.dir;
+  if (!configured) {
     throw new Error("createFilesTaskSource: either `path` or `dir` must be provided");
   }
+  const directory = isAbsolute(configured) ? configured : resolve(opts.projectRoot ?? process.cwd(), configured);
   const findTaskFile = (id) => {
     if (!existsSync(directory))
       return;

package/dist/src/github-issues-source.d.ts

@@ -0,0 +1,78 @@
+import { spawnSync } from "node:child_process";
+import type { RegisteredTaskSource, TaskRecord } from "@rig/contracts";
+export type GitHubCredentialPurpose = "selected-repo" | "admin-fallback";
+export type GitHubIssueUpdatesMode = "lifecycle" | "minimal" | "off";
+export interface GitHubCredentialProvider {
+    resolveGitHubToken(input: {
+        owner: string;
+        repo: string;
+        workspaceId: string;
+        userId?: string;
+        purpose: GitHubCredentialPurpose;
+    }): Promise<{
+        token: string;
+        source: "signed-in-user" | "host-admin-fallback";
+    }>;
+}
+export type GitHubProjectLifecycleStatus = "todo" | "running" | "prOpen" | "ciFixing" | "merging" | "done" | "needsAttention";
+export interface GitHubProjectsOptions {
+    enabled?: boolean;
+    projectId?: string;
+    statusFieldId?: string;
+    statuses?: Partial<Record<GitHubProjectLifecycleStatus, string>>;
+}
+export interface GitHubIssuesOptions {
+    owner: string;
+    repo: string;
+    labels?: readonly string[];
+    state?: "open" | "closed" | "all";
+    assignee?: string;
+    ghBinary?: string;
+    workspaceId?: string;
+    userId?: string;
+    credentialProvider?: GitHubCredentialProvider;
+    issueUpdates?: GitHubIssueUpdatesMode;
+    /** Timeout for every gh CLI call. Defaults to 15 seconds. */
+    timeoutMs?: number;
+    /** Maximum issue-list rows before Rig fails loudly instead of silently truncating. Defaults to 1,000. */
+    listLimit?: number;
+    /** @internal — for testing. Override the spawnSync used by the adapter. */
+    spawn?: typeof spawnSync;
+    /** Notify the host that issue-backed task state changed and snapshots should refresh. */
+    onTaskChanged?: (event: {
+        repo: string;
+        id: string;
+        status?: string;
+        reason: "github-issue-updated";
+    }) => void;
+    /** Optional GitHub Projects (v2) status-field sync mapped from Rig task status. */
+    projects?: GitHubProjectsOptions;
+}
+export interface GitHubIssueCreateInput {
+    title: string;
+    body?: string;
+    labels?: readonly string[];
+}
+export interface GitHubIssuesTaskSource extends RegisteredTaskSource {
+    addLabels(id: string, labels: readonly string[]): Promise<void>;
+    removeLabels(id: string, labels: readonly string[]): Promise<void>;
+    createIssue(input: GitHubIssueCreateInput): Promise<TaskRecord>;
+    getIssueBody(id: string): Promise<string | undefined>;
+}
+export declare function createEnvGitHubCredentialProvider(): GitHubCredentialProvider;
+export declare function createStateGitHubCredentialProvider(options?: {
+    stateFile?: string;
+    stateDir?: string;
+}): GitHubCredentialProvider;
+export declare const RIG_STATUS_COMMENT_MARKER = "<!-- rig:status-comment -->";
+export declare const RIG_METADATA_START = "<!-- rig:metadata:start -->";
+export declare const RIG_METADATA_END = "<!-- rig:metadata:end -->";
+export declare function updateRigOwnedMetadataBlock(body: string, metadata: Record<string, unknown>): string;
+export declare function buildRigStickyStatusComment(input: {
+    status: "running" | "prOpen" | "ciFixing" | "done" | "needsAttention" | string;
+    summary: string;
+    runId?: string;
+    prUrl?: string;
+    details?: readonly string[];
+}): string;
+export declare function createGitHubIssuesTaskSource(opts: GitHubIssuesOptions): GitHubIssuesTaskSource;

package/dist/src/github-issues-source.js

@@ -11,9 +11,9 @@ function createEnvGitHubCredentialProvider() {
   return {
     async resolveGitHubToken(input) {
       if (input.purpose === "selected-repo") {
-        return { token: cleanToken(process.env.RIG_GITHUB_SELECTED_TOKEN ?? null) ?? "", source: "signed-in-user" };
+        return { token: cleanToken(process.env.RIG_GITHUB_SELECTED_TOKEN ?? process.env.RIG_GITHUB_TOKEN ?? null) ?? "", source: "signed-in-user" };
       }
-      const token = cleanToken(process.env.GH_TOKEN ?? process.env.GITHUB_TOKEN ?? null);
+      const token = cleanToken(process.env.RIG_GITHUB_TOKEN ?? process.env.GH_TOKEN ?? process.env.GITHUB_TOKEN ?? null);
       if (!token) {
         throw new Error("No host GitHub token is configured for admin fallback.");
       }
@@ -22,34 +22,40 @@ function createEnvGitHubCredentialProvider() {
   };
 }
 function createStateGitHubCredentialProvider(options = {}) {
-  const resolveStateFile = () => {
+  const stateFileCandidates = () => {
+    const candidates = [];
     const explicitFile = options.stateFile ?? process.env.RIG_GITHUB_AUTH_STATE_FILE;
     if (explicitFile?.trim())
-      return resolve(explicitFile.trim());
-    const stateDir = options.stateDir ?? process.env.RIG_STATE_DIR;
-    return stateDir?.trim() ? resolve(stateDir.trim(), "github-auth.json") : null;
+      candidates.push(resolve(explicitFile.trim()));
+    for (const dir of [options.stateDir, process.env.RIG_STATE_DIR]) {
+      if (dir?.trim())
+        candidates.push(resolve(dir.trim(), "github-auth.json"));
+    }
+    return candidates;
   };
   const readToken = () => {
-    const stateFile = resolveStateFile();
-    if (!stateFile || !existsSync(stateFile))
-      return null;
-    try {
-      const parsed = JSON.parse(readFileSync(stateFile, "utf8"));
-      return typeof parsed.token === "string" ? cleanToken(parsed.token) : null;
-    } catch {
-      return null;
+    for (const stateFile of stateFileCandidates()) {
+      if (!existsSync(stateFile))
+        continue;
+      try {
+        const parsed = JSON.parse(readFileSync(stateFile, "utf8"));
+        const token = typeof parsed.token === "string" ? cleanToken(parsed.token) : null;
+        if (token)
+          return token;
+      } catch {}
     }
+    return null;
   };
   return {
     async resolveGitHubToken(input) {
       const token = readToken();
       if (input.purpose === "selected-repo") {
-        return { token: token ?? "", source: "signed-in-user" };
+        return { token: token ?? cleanToken(process.env.RIG_GITHUB_SELECTED_TOKEN ?? process.env.RIG_GITHUB_TOKEN ?? null) ?? "", source: "signed-in-user" };
       }
       if (token) {
         return { token, source: "signed-in-user" };
       }
-      const fallback = cleanToken(process.env.GH_TOKEN ?? process.env.GITHUB_TOKEN ?? null);
+      const fallback = cleanToken(process.env.RIG_GITHUB_TOKEN ?? process.env.GH_TOKEN ?? process.env.GITHUB_TOKEN ?? null);
       if (!fallback) {
         throw new Error("No signed-in GitHub token is stored for Rig and no host admin fallback token is configured.");
       }
@@ -183,13 +189,21 @@ function isRigStickyStatusComment(body) {
   return body.includes(RIG_STATUS_COMMENT_MARKER);
 }
 function ghSpawnOptions(extraEnv, timeoutMs) {
-  if (!extraEnv)
-    return { encoding: "utf-8", timeout: timeoutMs };
-  return { encoding: "utf-8", timeout: timeoutMs, env: { ...process.env, ...extraEnv } };
+  return {
+    encoding: "utf-8",
+    timeout: timeoutMs,
+    env: {
+      ...process.env,
+      ...process.env.GH_TOKEN !== undefined ? { GH_TOKEN: process.env.GH_TOKEN } : {},
+      ...process.env.GITHUB_TOKEN !== undefined ? { GITHUB_TOKEN: process.env.GITHUB_TOKEN } : {},
+      ...process.env.RIG_GITHUB_TOKEN !== undefined ? { RIG_GITHUB_TOKEN: process.env.RIG_GITHUB_TOKEN } : {},
+      ...extraEnv ?? {}
+    }
+  };
 }
 function credentialEnv(token) {
   const clean = token?.trim() ?? "";
-  return { GH_TOKEN: clean, GITHUB_TOKEN: clean };
+  return { GH_TOKEN: clean, GITHUB_TOKEN: clean, RIG_GITHUB_TOKEN: clean };
 }
 async function resolveCredentialEnv(opts, purpose) {
   if (!opts.credentialProvider)
@@ -204,28 +218,239 @@ async function resolveCredentialEnv(opts, purpose) {
   const resolved = await opts.credentialProvider.resolveGitHubToken(input);
   return credentialEnv(resolved.token);
 }
+function tokenDiagnostic(value) {
+  const clean = value?.trim() ?? "";
+  return clean ? `present(len=${clean.length})` : "missing";
+}
 function runGh(bin, args, spawn, extraEnv, timeoutMs) {
-  const res = spawn(bin, [...args], ghSpawnOptions(extraEnv, timeoutMs));
-  assertGhSuccess(args, res);
+  const options = ghSpawnOptions(extraEnv, timeoutMs);
+  const res = spawn(bin, [...args], options);
+  assertGhSuccess(args, res, options.env);
   if (!res.stdout || res.stdout.trim() === "")
     return [];
   return JSON.parse(res.stdout);
 }
 function runGhVoid(bin, args, spawn, extraEnv, timeoutMs) {
-  const res = spawn(bin, [...args], ghSpawnOptions(extraEnv, timeoutMs));
-  assertGhSuccess(args, res);
+  const options = ghSpawnOptions(extraEnv, timeoutMs);
+  const res = spawn(bin, [...args], options);
+  assertGhSuccess(args, res, options.env);
 }
-function assertGhSuccess(args, res) {
+function assertGhSuccess(args, res, env) {
   if (res.error) {
     const msg = res.error.message ?? String(res.error);
     throw new Error(`gh CLI not available \u2014 install gh (brew install gh / apt install gh): ${msg}`);
   }
   if (res.status !== 0) {
-    throw new Error(`gh ${args.join(" ")} failed (exit ${res.status}): ${res.stderr}`);
+    throw new Error(`gh ${args.join(" ")} failed (exit ${res.status}): ${res.stderr}
+[rig gh env:standard-plugin] GH_TOKEN=${tokenDiagnostic(env.GH_TOKEN)} GITHUB_TOKEN=${tokenDiagnostic(env.GITHUB_TOKEN)} RIG_GITHUB_TOKEN=${tokenDiagnostic(env.RIG_GITHUB_TOKEN)}`);
+  }
+}
+var DEFAULT_PROJECT_STATUSES = {
+  todo: "Todo",
+  running: "In Progress",
+  prOpen: "In Review",
+  ciFixing: "In Review",
+  merging: "In Review",
+  done: "Done",
+  needsAttention: "Needs Attention"
+};
+function asProjectRecord(value) {
+  return value && typeof value === "object" && !Array.isArray(value) ? value : null;
+}
+function projectString(value) {
+  return typeof value === "string" && value.trim().length > 0 ? value.trim() : null;
+}
+function projectLifecycleStatusForTaskStatus(status) {
+  const normalized = status?.trim().toLowerCase().replace(/[-\s]+/g, "_");
+  switch (normalized) {
+    case "draft":
+    case "open":
+    case "queued":
+    case "ready":
+      return "todo";
+    case "running":
+    case "in_progress":
+      return "running";
+    case "under_review":
+    case "review":
+    case "pr_open":
+      return "prOpen";
+    case "ci_fixing":
+    case "fixing":
+      return "ciFixing";
+    case "merging":
+    case "merge":
+      return "merging";
+    case "closed":
+    case "completed":
+    case "done":
+      return "done";
+    case "blocked":
+    case "cancelled":
+    case "failed":
+    case "needs_attention":
+      return "needsAttention";
+    default:
+      return null;
   }
 }
+function ghGraphQLFetch(bin, spawnFn, extraEnv, timeoutMs) {
+  return async (query, variables) => {
+    const args = ["api", "graphql", "-f", `query=${query}`];
+    for (const [key, value] of Object.entries(variables)) {
+      if (value === undefined || value === null)
+        continue;
+      args.push("-f", `${key}=${String(value)}`);
+    }
+    const response = runGh(bin, args, spawnFn, extraEnv, timeoutMs);
+    return asProjectRecord(response)?.data ?? response;
+  };
+}
+function projectStatusFieldFrom(data, projectId) {
+  const fields = asProjectRecord(asProjectRecord(asProjectRecord(data)?.node)?.fields)?.nodes;
+  for (const node of Array.isArray(fields) ? fields : []) {
+    const record = asProjectRecord(node);
+    if (projectString(record?.name)?.toLowerCase() !== "status")
+      continue;
+    const id = projectString(record?.id);
+    if (!id)
+      continue;
+    const options = Array.isArray(record?.options) ? record.options.flatMap((option) => {
+      const optionRecord = asProjectRecord(option);
+      const optionId = projectString(optionRecord?.id);
+      const name = projectString(optionRecord?.name);
+      return optionId && name ? [{ id: optionId, name }] : [];
+    }) : [];
+    return { id, name: "Status", options };
+  }
+  throw new Error(`GitHub Project ${projectId} does not expose a Status single-select field.`);
+}
+async function resolveProjectStatusField(input) {
+  const query = `
+    query RigProjectStatusField($projectId: ID!) {
+      node(id: $projectId) {
+        ... on ProjectV2 {
+          fields(first: 50) {
+            nodes {
+              ... on ProjectV2FieldCommon { id name }
+              ... on ProjectV2SingleSelectField { id name options { id name } }
+            }
+          }
+        }
+      }
+    }
+  `;
+  return projectStatusFieldFrom(await input.fetchGraphQL(query, { projectId: input.projectId }, input.token), input.projectId);
+}
+async function ensureIssueProjectItem(input) {
+  const query = `
+    query RigFindProjectIssueItem($projectId: ID!) {
+      node(id: $projectId) {
+        ... on ProjectV2 {
+          items(first: 100) { nodes { id content { ... on Issue { id } } } }
+        }
+      }
+    }
+  `;
+  const data = await input.fetchGraphQL(query, { projectId: input.projectId }, input.token);
+  const nodes = asProjectRecord(asProjectRecord(asProjectRecord(data)?.node)?.items)?.nodes;
+  for (const node of Array.isArray(nodes) ? nodes : []) {
+    const record = asProjectRecord(node);
+    const content = asProjectRecord(record?.content);
+    if (projectString(content?.id) === input.issueNodeId) {
+      const id2 = projectString(record?.id);
+      if (id2)
+        return { id: id2, created: false };
+    }
+  }
+  const mutation = `
+    mutation RigAddIssueToProject($projectId: ID!, $contentId: ID!) {
+      addProjectV2ItemById(input: { projectId: $projectId, contentId: $contentId }) { item { id } }
+    }
+  `;
+  const created = await input.fetchGraphQL(mutation, { projectId: input.projectId, contentId: input.issueNodeId }, input.token);
+  const addResult = asProjectRecord(asProjectRecord(created)?.addProjectV2ItemById);
+  const id = projectString(asProjectRecord(addResult?.item)?.id);
+  if (!id)
+    throw new Error("GitHub Project item creation did not return an item id.");
+  return { id, created: true };
+}
+async function updateIssueProjectStatus(input) {
+  const mutation = `
+    mutation RigUpdateProjectStatus($projectId: ID!, $itemId: ID!, $fieldId: ID!, $optionId: String!) {
+      updateProjectV2ItemFieldValue(input: {
+        projectId: $projectId,
+        itemId: $itemId,
+        fieldId: $fieldId,
+        value: { singleSelectOptionId: $optionId }
+      }) { projectV2Item { id } }
+    }
+  `;
+  await input.fetchGraphQL(mutation, {
+    projectId: input.projectId,
+    itemId: input.itemId,
+    fieldId: input.fieldId,
+    optionId: input.optionId
+  }, input.token);
+}
+function fetchIssueNodeId(bin, repo, spawnFn, id, extraEnv, timeoutMs) {
+  const issue = runGh(bin, ["issue", "view", String(id), "--repo", repo, "--json", "id"], spawnFn, extraEnv, timeoutMs);
+  return projectString(issue.id) ?? projectString(issue.nodeId) ?? projectString(issue.node_id);
+}
+async function syncGitHubProjectStatus(bin, repo, spawnFn, id, status, projects, extraEnv, timeoutMs) {
+  if (!projects?.enabled)
+    return;
+  const projectId = projectString(projects.projectId);
+  if (!projectId)
+    throw new Error("GitHub Projects status sync is enabled but projectId is missing.");
+  const lifecycleStatus = projectLifecycleStatusForTaskStatus(status);
+  if (!lifecycleStatus)
+    return;
+  const issueNodeId = fetchIssueNodeId(bin, repo, spawnFn, id, extraEnv, timeoutMs);
+  if (!issueNodeId)
+    throw new Error(`GitHub issue ${repo}#${id} did not expose a node id for Projects status sync.`);
+  const projectStatus = projectString(projects.statuses?.[lifecycleStatus]) ?? DEFAULT_PROJECT_STATUSES[lifecycleStatus];
+  const fetchGraphQL = ghGraphQLFetch(bin, spawnFn, extraEnv, timeoutMs);
+  const field = await resolveProjectStatusField({ projectId, token: "gh-cli", fetchGraphQL });
+  const option = field.options.find((candidate) => candidate.name.toLowerCase() === projectStatus.toLowerCase() || candidate.id === projectStatus);
+  if (!option)
+    throw new Error(`GitHub Project ${projectId} Status field does not contain option "${projectStatus}".`);
+  const item = await ensureIssueProjectItem({ projectId, issueNodeId, token: "gh-cli", fetchGraphQL });
+  await updateIssueProjectStatus({
+    projectId,
+    itemId: item.id,
+    fieldId: projectString(projects.statusFieldId) ?? field.id,
+    optionId: option.id,
+    token: "gh-cli",
+    fetchGraphQL
+  });
+}
+var TERMINAL_TASK_STATUSES = new Set(["closed", "completed", "merged", "cancelled", "resolved", "done"]);
+function normalizeTaskStatusToken(status) {
+  return status?.trim().toLowerCase().replace(/[-\s]+/g, "_") ?? "";
+}
+function issueUpdatesMode(value) {
+  return value === "off" || value === "minimal" || value === "lifecycle" ? value : "lifecycle";
+}
+function isTerminalTaskStatus(status) {
+  return TERMINAL_TASK_STATUSES.has(normalizeTaskStatusToken(status));
+}
+function shouldWriteIssueUpdate(mode, status) {
+  if (mode === "off")
+    return false;
+  if (mode === "lifecycle")
+    return true;
+  return isTerminalTaskStatus(status);
+}
+function isRunningStatus(status) {
+  return normalizeTaskStatusToken(status) === "running";
+}
+function assignRunningIssue(bin, repo, spawnFn, id, assignee, extraEnv, timeoutMs) {
+  runGhVoid(bin, ["issue", "edit", String(id), "--repo", repo, "--add-assignee", assignee?.trim() || "@me"], spawnFn, extraEnv, timeoutMs);
+}
 function statusLabelFor(status) {
   switch (status) {
+    case "running":
     case "in_progress":
       return "in-progress";
     case "blocked":
@@ -244,6 +469,8 @@ function statusLabelFor(status) {
       return "under-review";
     case "needs_attention":
       return "blocked";
+    case "closed":
+    case "completed":
     case "open":
       return null;
     default:
@@ -252,11 +479,13 @@ function statusLabelFor(status) {
 }
 function rigStatusLabelFor(status) {
   switch (status) {
+    case "running":
     case "in_progress":
       return "rig:running";
     case "under_review":
       return "rig:pr-open";
     case "closed":
+    case "completed":
       return "rig:done";
     case "ci_fixing":
       return "rig:ci-fixing";
@@ -274,9 +503,10 @@ function rigStatusLabelFor(status) {
       return null;
   }
 }
-function applyIssueStatus(bin, repo, spawnFn, id, status, extraEnv, timeoutMs) {
-  const targetLabel = status === "closed" ? null : statusLabelFor(status);
+async function applyIssueStatus(bin, repo, spawnFn, id, status, projects, runningAssignee, issueUpdates, extraEnv, timeoutMs) {
+  const targetLabel = status === "closed" || status === "completed" ? null : statusLabelFor(status);
   const targetRigLabel = rigStatusLabelFor(status);
+  const shouldSyncLifecycle = shouldWriteIssueUpdate(issueUpdates, status);
   for (const l of [...STATUS_LABELS, ...RIG_STATUS_LABELS]) {
     if (targetLabel !== null && l === targetLabel)
       continue;
@@ -298,7 +528,19 @@ function applyIssueStatus(bin, repo, spawnFn, id, status, extraEnv, timeoutMs) {
       runGhVoid(bin, ["issue", "edit", String(id), "--repo", repo, "--add-label", label], spawnFn, extraEnv, timeoutMs);
     }
   }
-  if (status === "closed") {
+  if (isRunningStatus(status)) {
+    assignRunningIssue(bin, repo, spawnFn, id, runningAssignee, extraEnv, timeoutMs);
+    if (shouldSyncLifecycle) {
+      upsertRigStickyComment(bin, repo, spawnFn, String(id), buildRigStickyStatusComment({
+        status: "running",
+        summary: "Rig run started."
+      }), extraEnv, timeoutMs);
+    }
+  }
+  if (shouldSyncLifecycle) {
+    await syncGitHubProjectStatus(bin, repo, spawnFn, id, status, projects, extraEnv, timeoutMs);
+  }
+  if (status === "closed" || status === "completed") {
     runGhVoid(bin, ["issue", "close", String(id), "--repo", repo], spawnFn, extraEnv, timeoutMs);
   }
 }
@@ -368,11 +610,11 @@ function applyLabels(bin, repo, spawnFn, id, labels, action, extraEnv, timeoutMs
     } catch {}
   }
 }
-function applyIssueUpdate(bin, repo, spawnFn, id, update, extraEnv, timeoutMs) {
+async function applyIssueUpdate(bin, repo, spawnFn, id, update, projects, runningAssignee, issueUpdates, extraEnv, timeoutMs) {
   if (update.status) {
-    applyIssueStatus(bin, repo, spawnFn, id, update.status, extraEnv, timeoutMs);
+    await applyIssueStatus(bin, repo, spawnFn, id, update.status, projects, runningAssignee, issueUpdates, extraEnv, timeoutMs);
   }
-  if (update.comment?.trim()) {
+  if (update.comment?.trim() && shouldWriteIssueUpdate(issueUpdates, update.status)) {
     if (isRigStickyStatusComment(update.comment)) {
       upsertRigStickyComment(bin, repo, spawnFn, String(id), update.comment, extraEnv, timeoutMs);
     } else {
@@ -398,6 +640,7 @@ function createGitHubIssuesTaskSource(opts) {
   const spawnFn = opts.spawn ?? spawnSync;
   const timeoutMs = Math.max(1000, Math.trunc(opts.timeoutMs ?? DEFAULT_GH_TIMEOUT_MS));
   const listLimit = Math.max(1, Math.trunc(opts.listLimit ?? DEFAULT_GITHUB_ISSUE_LIST_LIMIT));
+  const issueUpdates = issueUpdatesMode(opts.issueUpdates);
   return {
     id: "std:github-issues",
     kind: "github-issues",
@@ -427,9 +670,10 @@ function createGitHubIssuesTaskSource(opts) {
       return issues.map((i) => issueToTask(i, repo));
     },
     async get(id) {
+      const env = await resolveCredentialEnv(opts, "selected-repo");
+      let issue;
       try {
-        const env = await resolveCredentialEnv(opts, "selected-repo");
-        const issue = runGh(bin, [
+        issue = runGh(bin, [
           "issue",
           "view",
           String(id),
@@ -438,19 +682,23 @@ function createGitHubIssuesTaskSource(opts) {
           "--json",
           "number,title,body,labels,state,url,assignees,id"
         ], spawnFn, env, timeoutMs);
-        return issueToTask(issue, repo);
-      } catch {
-        return;
+      } catch (error) {
+        const detail = error instanceof Error ? error.message : String(error);
+        if (/could not resolve to (an? )?(issue|pullrequest)|no issues? (found|matched)|404 not found|gh: not found/i.test(detail)) {
+          return;
+        }
+        throw new Error(`Failed to read task ${id} from GitHub repo ${repo}: ${detail}`);
       }
+      return issueToTask(issue, repo);
     },
     async updateStatus(id, status) {
       const env = await resolveCredentialEnv(opts, "selected-repo");
-      applyIssueStatus(bin, repo, spawnFn, id, status, env, timeoutMs);
+      await applyIssueStatus(bin, repo, spawnFn, id, status, opts.projects, opts.assignee, issueUpdates, env, timeoutMs);
       notifyTaskChanged(opts.onTaskChanged, repo, id, status);
     },
     async updateTask(id, update) {
       const env = await resolveCredentialEnv(opts, "selected-repo");
-      applyIssueUpdate(bin, repo, spawnFn, id, update, env, timeoutMs);
+      await applyIssueUpdate(bin, repo, spawnFn, id, update, opts.projects, opts.assignee, issueUpdates, env, timeoutMs);
       notifyTaskChanged(opts.onTaskChanged, repo, id, update.status);
     },
     async addLabels(id, labels) {

package/dist/src/index.d.ts

@@ -0,0 +1,14 @@
+import { type RigPluginWithRuntime } from "@rig/core";
+import { createEnvGitHubCredentialProvider, createStateGitHubCredentialProvider, createGitHubIssuesTaskSource, type GitHubCredentialProvider, type GitHubIssuesOptions } from "./github-issues-source";
+import { createFilesTaskSource } from "./files-source";
+export { createGitHubIssuesTaskSource, createEnvGitHubCredentialProvider, createStateGitHubCredentialProvider, createFilesTaskSource };
+export type { GitHubIssuesOptions } from "./github-issues-source";
+export type { FilesTaskSourceOptions } from "./files-source";
+export interface StandardPluginOptions {
+    githubCredentialProvider?: GitHubCredentialProvider;
+    githubWorkspaceId?: string;
+    githubUserId?: string;
+    githubSpawn?: GitHubIssuesOptions["spawn"];
+    onGitHubTaskChanged?: GitHubIssuesOptions["onTaskChanged"];
+}
+export default function standardPlugin(opts?: StandardPluginOptions): RigPluginWithRuntime;

package/dist/src/index.js

@@ -1,5 +1,6 @@
 // @bun
 // packages/standard-plugin/src/index.ts
+import { resolve as resolve3 } from "path";
 import { definePlugin } from "@rig/core";
 
 // packages/standard-plugin/src/github-issues-source.ts
@@ -14,9 +15,9 @@ function createEnvGitHubCredentialProvider() {
   return {
     async resolveGitHubToken(input) {
       if (input.purpose === "selected-repo") {
-        return { token: cleanToken(process.env.RIG_GITHUB_SELECTED_TOKEN ?? null) ?? "", source: "signed-in-user" };
+        return { token: cleanToken(process.env.RIG_GITHUB_SELECTED_TOKEN ?? process.env.RIG_GITHUB_TOKEN ?? null) ?? "", source: "signed-in-user" };
       }
-      const token = cleanToken(process.env.GH_TOKEN ?? process.env.GITHUB_TOKEN ?? null);
+      const token = cleanToken(process.env.RIG_GITHUB_TOKEN ?? process.env.GH_TOKEN ?? process.env.GITHUB_TOKEN ?? null);
       if (!token) {
         throw new Error("No host GitHub token is configured for admin fallback.");
       }
@@ -25,34 +26,40 @@ function createEnvGitHubCredentialProvider() {
   };
 }
 function createStateGitHubCredentialProvider(options = {}) {
-  const resolveStateFile = () => {
+  const stateFileCandidates = () => {
+    const candidates = [];
     const explicitFile = options.stateFile ?? process.env.RIG_GITHUB_AUTH_STATE_FILE;
     if (explicitFile?.trim())
-      return resolve(explicitFile.trim());
-    const stateDir = options.stateDir ?? process.env.RIG_STATE_DIR;
-    return stateDir?.trim() ? resolve(stateDir.trim(), "github-auth.json") : null;
+      candidates.push(resolve(explicitFile.trim()));
+    for (const dir of [options.stateDir, process.env.RIG_STATE_DIR]) {
+      if (dir?.trim())
+        candidates.push(resolve(dir.trim(), "github-auth.json"));
+    }
+    return candidates;
   };
   const readToken = () => {
-    const stateFile = resolveStateFile();
-    if (!stateFile || !existsSync(stateFile))
-      return null;
-    try {
-      const parsed = JSON.parse(readFileSync(stateFile, "utf8"));
-      return typeof parsed.token === "string" ? cleanToken(parsed.token) : null;
-    } catch {
-      return null;
+    for (const stateFile of stateFileCandidates()) {
+      if (!existsSync(stateFile))
+        continue;
+      try {
+        const parsed = JSON.parse(readFileSync(stateFile, "utf8"));
+        const token = typeof parsed.token === "string" ? cleanToken(parsed.token) : null;
+        if (token)
+          return token;
+      } catch {}
     }
+    return null;
   };
   return {
     async resolveGitHubToken(input) {
       const token = readToken();
       if (input.purpose === "selected-repo") {
-        return { token: token ?? "", source: "signed-in-user" };
+        return { token: token ?? cleanToken(process.env.RIG_GITHUB_SELECTED_TOKEN ?? process.env.RIG_GITHUB_TOKEN ?? null) ?? "", source: "signed-in-user" };
       }
       if (token) {
         return { token, source: "signed-in-user" };
       }
-      const fallback = cleanToken(process.env.GH_TOKEN ?? process.env.GITHUB_TOKEN ?? null);
+      const fallback = cleanToken(process.env.RIG_GITHUB_TOKEN ?? process.env.GH_TOKEN ?? process.env.GITHUB_TOKEN ?? null);
       if (!fallback) {
         throw new Error("No signed-in GitHub token is stored for Rig and no host admin fallback token is configured.");
       }
@@ -166,17 +173,41 @@ ${rendered}
 ` : `${rendered}
 `;
 }
+function buildRigStickyStatusComment(input) {
+  const lines = [
+    RIG_STATUS_COMMENT_MARKER,
+    `### Rig status: ${input.status}`,
+    "",
+    input.summary
+  ];
+  if (input.runId)
+    lines.push("", `- Run: ${input.runId}`);
+  if (input.prUrl)
+    lines.push(`- PR: ${input.prUrl}`);
+  for (const detail of input.details ?? [])
+    lines.push(`- ${detail}`);
+  return lines.join(`
+`);
+}
 function isRigStickyStatusComment(body) {
   return body.includes(RIG_STATUS_COMMENT_MARKER);
 }
 function ghSpawnOptions(extraEnv, timeoutMs) {
-  if (!extraEnv)
-    return { encoding: "utf-8", timeout: timeoutMs };
-  return { encoding: "utf-8", timeout: timeoutMs, env: { ...process.env, ...extraEnv } };
+  return {
+    encoding: "utf-8",
+    timeout: timeoutMs,
+    env: {
+      ...process.env,
+      ...process.env.GH_TOKEN !== undefined ? { GH_TOKEN: process.env.GH_TOKEN } : {},
+      ...process.env.GITHUB_TOKEN !== undefined ? { GITHUB_TOKEN: process.env.GITHUB_TOKEN } : {},
+      ...process.env.RIG_GITHUB_TOKEN !== undefined ? { RIG_GITHUB_TOKEN: process.env.RIG_GITHUB_TOKEN } : {},
+      ...extraEnv ?? {}
+    }
+  };
 }
 function credentialEnv(token) {
   const clean = token?.trim() ?? "";
-  return { GH_TOKEN: clean, GITHUB_TOKEN: clean };
+  return { GH_TOKEN: clean, GITHUB_TOKEN: clean, RIG_GITHUB_TOKEN: clean };
 }
 async function resolveCredentialEnv(opts, purpose) {
   if (!opts.credentialProvider)
@@ -191,28 +222,239 @@ async function resolveCredentialEnv(opts, purpose) {
   const resolved = await opts.credentialProvider.resolveGitHubToken(input);
   return credentialEnv(resolved.token);
 }
+function tokenDiagnostic(value) {
+  const clean = value?.trim() ?? "";
+  return clean ? `present(len=${clean.length})` : "missing";
+}
 function runGh(bin, args, spawn, extraEnv, timeoutMs) {
-  const res = spawn(bin, [...args], ghSpawnOptions(extraEnv, timeoutMs));
-  assertGhSuccess(args, res);
+  const options = ghSpawnOptions(extraEnv, timeoutMs);
+  const res = spawn(bin, [...args], options);
+  assertGhSuccess(args, res, options.env);
   if (!res.stdout || res.stdout.trim() === "")
     return [];
   return JSON.parse(res.stdout);
 }
 function runGhVoid(bin, args, spawn, extraEnv, timeoutMs) {
-  const res = spawn(bin, [...args], ghSpawnOptions(extraEnv, timeoutMs));
-  assertGhSuccess(args, res);
+  const options = ghSpawnOptions(extraEnv, timeoutMs);
+  const res = spawn(bin, [...args], options);
+  assertGhSuccess(args, res, options.env);
 }
-function assertGhSuccess(args, res) {
+function assertGhSuccess(args, res, env) {
   if (res.error) {
     const msg = res.error.message ?? String(res.error);
     throw new Error(`gh CLI not available \u2014 install gh (brew install gh / apt install gh): ${msg}`);
   }
   if (res.status !== 0) {
-    throw new Error(`gh ${args.join(" ")} failed (exit ${res.status}): ${res.stderr}`);
+    throw new Error(`gh ${args.join(" ")} failed (exit ${res.status}): ${res.stderr}
+[rig gh env:standard-plugin] GH_TOKEN=${tokenDiagnostic(env.GH_TOKEN)} GITHUB_TOKEN=${tokenDiagnostic(env.GITHUB_TOKEN)} RIG_GITHUB_TOKEN=${tokenDiagnostic(env.RIG_GITHUB_TOKEN)}`);
+  }
+}
+var DEFAULT_PROJECT_STATUSES = {
+  todo: "Todo",
+  running: "In Progress",
+  prOpen: "In Review",
+  ciFixing: "In Review",
+  merging: "In Review",
+  done: "Done",
+  needsAttention: "Needs Attention"
+};
+function asProjectRecord(value) {
+  return value && typeof value === "object" && !Array.isArray(value) ? value : null;
+}
+function projectString(value) {
+  return typeof value === "string" && value.trim().length > 0 ? value.trim() : null;
+}
+function projectLifecycleStatusForTaskStatus(status) {
+  const normalized = status?.trim().toLowerCase().replace(/[-\s]+/g, "_");
+  switch (normalized) {
+    case "draft":
+    case "open":
+    case "queued":
+    case "ready":
+      return "todo";
+    case "running":
+    case "in_progress":
+      return "running";
+    case "under_review":
+    case "review":
+    case "pr_open":
+      return "prOpen";
+    case "ci_fixing":
+    case "fixing":
+      return "ciFixing";
+    case "merging":
+    case "merge":
+      return "merging";
+    case "closed":
+    case "completed":
+    case "done":
+      return "done";
+    case "blocked":
+    case "cancelled":
+    case "failed":
+    case "needs_attention":
+      return "needsAttention";
+    default:
+      return null;
   }
 }
+function ghGraphQLFetch(bin, spawnFn, extraEnv, timeoutMs) {
+  return async (query, variables) => {
+    const args = ["api", "graphql", "-f", `query=${query}`];
+    for (const [key, value] of Object.entries(variables)) {
+      if (value === undefined || value === null)
+        continue;
+      args.push("-f", `${key}=${String(value)}`);
+    }
+    const response = runGh(bin, args, spawnFn, extraEnv, timeoutMs);
+    return asProjectRecord(response)?.data ?? response;
+  };
+}
+function projectStatusFieldFrom(data, projectId) {
+  const fields = asProjectRecord(asProjectRecord(asProjectRecord(data)?.node)?.fields)?.nodes;
+  for (const node of Array.isArray(fields) ? fields : []) {
+    const record = asProjectRecord(node);
+    if (projectString(record?.name)?.toLowerCase() !== "status")
+      continue;
+    const id = projectString(record?.id);
+    if (!id)
+      continue;
+    const options = Array.isArray(record?.options) ? record.options.flatMap((option) => {
+      const optionRecord = asProjectRecord(option);
+      const optionId = projectString(optionRecord?.id);
+      const name = projectString(optionRecord?.name);
+      return optionId && name ? [{ id: optionId, name }] : [];
+    }) : [];
+    return { id, name: "Status", options };
+  }
+  throw new Error(`GitHub Project ${projectId} does not expose a Status single-select field.`);
+}
+async function resolveProjectStatusField(input) {
+  const query = `
+    query RigProjectStatusField($projectId: ID!) {
+      node(id: $projectId) {
+        ... on ProjectV2 {
+          fields(first: 50) {
+            nodes {
+              ... on ProjectV2FieldCommon { id name }
+              ... on ProjectV2SingleSelectField { id name options { id name } }
+            }
+          }
+        }
+      }
+    }
+  `;
+  return projectStatusFieldFrom(await input.fetchGraphQL(query, { projectId: input.projectId }, input.token), input.projectId);
+}
+async function ensureIssueProjectItem(input) {
+  const query = `
+    query RigFindProjectIssueItem($projectId: ID!) {
+      node(id: $projectId) {
+        ... on ProjectV2 {
+          items(first: 100) { nodes { id content { ... on Issue { id } } } }
+        }
+      }
+    }
+  `;
+  const data = await input.fetchGraphQL(query, { projectId: input.projectId }, input.token);
+  const nodes = asProjectRecord(asProjectRecord(asProjectRecord(data)?.node)?.items)?.nodes;
+  for (const node of Array.isArray(nodes) ? nodes : []) {
+    const record = asProjectRecord(node);
+    const content = asProjectRecord(record?.content);
+    if (projectString(content?.id) === input.issueNodeId) {
+      const id2 = projectString(record?.id);
+      if (id2)
+        return { id: id2, created: false };
+    }
+  }
+  const mutation = `
+    mutation RigAddIssueToProject($projectId: ID!, $contentId: ID!) {
+      addProjectV2ItemById(input: { projectId: $projectId, contentId: $contentId }) { item { id } }
+    }
+  `;
+  const created = await input.fetchGraphQL(mutation, { projectId: input.projectId, contentId: input.issueNodeId }, input.token);
+  const addResult = asProjectRecord(asProjectRecord(created)?.addProjectV2ItemById);
+  const id = projectString(asProjectRecord(addResult?.item)?.id);
+  if (!id)
+    throw new Error("GitHub Project item creation did not return an item id.");
+  return { id, created: true };
+}
+async function updateIssueProjectStatus(input) {
+  const mutation = `
+    mutation RigUpdateProjectStatus($projectId: ID!, $itemId: ID!, $fieldId: ID!, $optionId: String!) {
+      updateProjectV2ItemFieldValue(input: {
+        projectId: $projectId,
+        itemId: $itemId,
+        fieldId: $fieldId,
+        value: { singleSelectOptionId: $optionId }
+      }) { projectV2Item { id } }
+    }
+  `;
+  await input.fetchGraphQL(mutation, {
+    projectId: input.projectId,
+    itemId: input.itemId,
+    fieldId: input.fieldId,
+    optionId: input.optionId
+  }, input.token);
+}
+function fetchIssueNodeId(bin, repo, spawnFn, id, extraEnv, timeoutMs) {
+  const issue = runGh(bin, ["issue", "view", String(id), "--repo", repo, "--json", "id"], spawnFn, extraEnv, timeoutMs);
+  return projectString(issue.id) ?? projectString(issue.nodeId) ?? projectString(issue.node_id);
+}
+async function syncGitHubProjectStatus(bin, repo, spawnFn, id, status, projects, extraEnv, timeoutMs) {
+  if (!projects?.enabled)
+    return;
+  const projectId = projectString(projects.projectId);
+  if (!projectId)
+    throw new Error("GitHub Projects status sync is enabled but projectId is missing.");
+  const lifecycleStatus = projectLifecycleStatusForTaskStatus(status);
+  if (!lifecycleStatus)
+    return;
+  const issueNodeId = fetchIssueNodeId(bin, repo, spawnFn, id, extraEnv, timeoutMs);
+  if (!issueNodeId)
+    throw new Error(`GitHub issue ${repo}#${id} did not expose a node id for Projects status sync.`);
+  const projectStatus = projectString(projects.statuses?.[lifecycleStatus]) ?? DEFAULT_PROJECT_STATUSES[lifecycleStatus];
+  const fetchGraphQL = ghGraphQLFetch(bin, spawnFn, extraEnv, timeoutMs);
+  const field = await resolveProjectStatusField({ projectId, token: "gh-cli", fetchGraphQL });
+  const option = field.options.find((candidate) => candidate.name.toLowerCase() === projectStatus.toLowerCase() || candidate.id === projectStatus);
+  if (!option)
+    throw new Error(`GitHub Project ${projectId} Status field does not contain option "${projectStatus}".`);
+  const item = await ensureIssueProjectItem({ projectId, issueNodeId, token: "gh-cli", fetchGraphQL });
+  await updateIssueProjectStatus({
+    projectId,
+    itemId: item.id,
+    fieldId: projectString(projects.statusFieldId) ?? field.id,
+    optionId: option.id,
+    token: "gh-cli",
+    fetchGraphQL
+  });
+}
+var TERMINAL_TASK_STATUSES = new Set(["closed", "completed", "merged", "cancelled", "resolved", "done"]);
+function normalizeTaskStatusToken(status) {
+  return status?.trim().toLowerCase().replace(/[-\s]+/g, "_") ?? "";
+}
+function issueUpdatesMode(value) {
+  return value === "off" || value === "minimal" || value === "lifecycle" ? value : "lifecycle";
+}
+function isTerminalTaskStatus(status) {
+  return TERMINAL_TASK_STATUSES.has(normalizeTaskStatusToken(status));
+}
+function shouldWriteIssueUpdate(mode, status) {
+  if (mode === "off")
+    return false;
+  if (mode === "lifecycle")
+    return true;
+  return isTerminalTaskStatus(status);
+}
+function isRunningStatus(status) {
+  return normalizeTaskStatusToken(status) === "running";
+}
+function assignRunningIssue(bin, repo, spawnFn, id, assignee, extraEnv, timeoutMs) {
+  runGhVoid(bin, ["issue", "edit", String(id), "--repo", repo, "--add-assignee", assignee?.trim() || "@me"], spawnFn, extraEnv, timeoutMs);
+}
 function statusLabelFor(status) {
   switch (status) {
+    case "running":
     case "in_progress":
       return "in-progress";
     case "blocked":
@@ -231,6 +473,8 @@ function statusLabelFor(status) {
       return "under-review";
     case "needs_attention":
       return "blocked";
+    case "closed":
+    case "completed":
     case "open":
       return null;
     default:
@@ -239,11 +483,13 @@ function statusLabelFor(status) {
 }
 function rigStatusLabelFor(status) {
   switch (status) {
+    case "running":
     case "in_progress":
       return "rig:running";
     case "under_review":
       return "rig:pr-open";
     case "closed":
+    case "completed":
       return "rig:done";
     case "ci_fixing":
       return "rig:ci-fixing";
@@ -261,9 +507,10 @@ function rigStatusLabelFor(status) {
       return null;
   }
 }
-function applyIssueStatus(bin, repo, spawnFn, id, status, extraEnv, timeoutMs) {
-  const targetLabel = status === "closed" ? null : statusLabelFor(status);
+async function applyIssueStatus(bin, repo, spawnFn, id, status, projects, runningAssignee, issueUpdates, extraEnv, timeoutMs) {
+  const targetLabel = status === "closed" || status === "completed" ? null : statusLabelFor(status);
   const targetRigLabel = rigStatusLabelFor(status);
+  const shouldSyncLifecycle = shouldWriteIssueUpdate(issueUpdates, status);
   for (const l of [...STATUS_LABELS, ...RIG_STATUS_LABELS]) {
     if (targetLabel !== null && l === targetLabel)
       continue;
@@ -285,7 +532,19 @@ function applyIssueStatus(bin, repo, spawnFn, id, status, extraEnv, timeoutMs) {
       runGhVoid(bin, ["issue", "edit", String(id), "--repo", repo, "--add-label", label], spawnFn, extraEnv, timeoutMs);
     }
   }
-  if (status === "closed") {
+  if (isRunningStatus(status)) {
+    assignRunningIssue(bin, repo, spawnFn, id, runningAssignee, extraEnv, timeoutMs);
+    if (shouldSyncLifecycle) {
+      upsertRigStickyComment(bin, repo, spawnFn, String(id), buildRigStickyStatusComment({
+        status: "running",
+        summary: "Rig run started."
+      }), extraEnv, timeoutMs);
+    }
+  }
+  if (shouldSyncLifecycle) {
+    await syncGitHubProjectStatus(bin, repo, spawnFn, id, status, projects, extraEnv, timeoutMs);
+  }
+  if (status === "closed" || status === "completed") {
     runGhVoid(bin, ["issue", "close", String(id), "--repo", repo], spawnFn, extraEnv, timeoutMs);
   }
 }
@@ -355,11 +614,11 @@ function applyLabels(bin, repo, spawnFn, id, labels, action, extraEnv, timeoutMs
     } catch {}
   }
 }
-function applyIssueUpdate(bin, repo, spawnFn, id, update, extraEnv, timeoutMs) {
+async function applyIssueUpdate(bin, repo, spawnFn, id, update, projects, runningAssignee, issueUpdates, extraEnv, timeoutMs) {
   if (update.status) {
-    applyIssueStatus(bin, repo, spawnFn, id, update.status, extraEnv, timeoutMs);
+    await applyIssueStatus(bin, repo, spawnFn, id, update.status, projects, runningAssignee, issueUpdates, extraEnv, timeoutMs);
   }
-  if (update.comment?.trim()) {
+  if (update.comment?.trim() && shouldWriteIssueUpdate(issueUpdates, update.status)) {
     if (isRigStickyStatusComment(update.comment)) {
       upsertRigStickyComment(bin, repo, spawnFn, String(id), update.comment, extraEnv, timeoutMs);
     } else {
@@ -385,6 +644,7 @@ function createGitHubIssuesTaskSource(opts) {
   const spawnFn = opts.spawn ?? spawnSync;
   const timeoutMs = Math.max(1000, Math.trunc(opts.timeoutMs ?? DEFAULT_GH_TIMEOUT_MS));
   const listLimit = Math.max(1, Math.trunc(opts.listLimit ?? DEFAULT_GITHUB_ISSUE_LIST_LIMIT));
+  const issueUpdates = issueUpdatesMode(opts.issueUpdates);
   return {
     id: "std:github-issues",
     kind: "github-issues",
@@ -414,9 +674,10 @@ function createGitHubIssuesTaskSource(opts) {
       return issues.map((i) => issueToTask(i, repo));
     },
     async get(id) {
+      const env = await resolveCredentialEnv(opts, "selected-repo");
+      let issue;
       try {
-        const env = await resolveCredentialEnv(opts, "selected-repo");
-        const issue = runGh(bin, [
+        issue = runGh(bin, [
           "issue",
           "view",
           String(id),
@@ -425,19 +686,23 @@ function createGitHubIssuesTaskSource(opts) {
           "--json",
           "number,title,body,labels,state,url,assignees,id"
         ], spawnFn, env, timeoutMs);
-        return issueToTask(issue, repo);
-      } catch {
-        return;
+      } catch (error) {
+        const detail = error instanceof Error ? error.message : String(error);
+        if (/could not resolve to (an? )?(issue|pullrequest)|no issues? (found|matched)|404 not found|gh: not found/i.test(detail)) {
+          return;
+        }
+        throw new Error(`Failed to read task ${id} from GitHub repo ${repo}: ${detail}`);
       }
+      return issueToTask(issue, repo);
     },
     async updateStatus(id, status) {
       const env = await resolveCredentialEnv(opts, "selected-repo");
-      applyIssueStatus(bin, repo, spawnFn, id, status, env, timeoutMs);
+      await applyIssueStatus(bin, repo, spawnFn, id, status, opts.projects, opts.assignee, issueUpdates, env, timeoutMs);
       notifyTaskChanged(opts.onTaskChanged, repo, id, status);
     },
     async updateTask(id, update) {
       const env = await resolveCredentialEnv(opts, "selected-repo");
-      applyIssueUpdate(bin, repo, spawnFn, id, update, env, timeoutMs);
+      await applyIssueUpdate(bin, repo, spawnFn, id, update, opts.projects, opts.assignee, issueUpdates, env, timeoutMs);
       notifyTaskChanged(opts.onTaskChanged, repo, id, update.status);
     },
     async addLabels(id, labels) {
@@ -476,7 +741,7 @@ function createGitHubIssuesTaskSource(opts) {
 
 // packages/standard-plugin/src/files-source.ts
 import { readFileSync as readFileSync2, readdirSync, existsSync as existsSync2, statSync, writeFileSync } from "fs";
-import { join, basename } from "path";
+import { join, basename, isAbsolute, resolve as resolve2 } from "path";
 var DEFAULT_PATTERN = /\.(task\.)?json$/;
 function readTaskFile(file, pattern) {
   const raw = JSON.parse(readFileSync2(file, "utf-8"));
@@ -497,10 +762,11 @@ function readTaskFile(file, pattern) {
 }
 function createFilesTaskSource(opts) {
   const pattern = opts.pattern ?? DEFAULT_PATTERN;
-  const directory = opts.path ?? opts.dir;
-  if (!directory) {
+  const configured = opts.path ?? opts.dir;
+  if (!configured) {
     throw new Error("createFilesTaskSource: either `path` or `dir` must be provided");
   }
+  const directory = isAbsolute(configured) ? configured : resolve2(opts.projectRoot ?? process.cwd(), configured);
   const findTaskFile = (id) => {
     if (!existsSync2(directory))
       return;
@@ -585,6 +851,40 @@ function requireStringField(config, field, kind) {
   }
   return value;
 }
+function isRecord(value) {
+  return Boolean(value && typeof value === "object" && !Array.isArray(value));
+}
+function optionalString(value) {
+  return typeof value === "string" && value.trim().length > 0 ? value.trim() : undefined;
+}
+function parseGitHubProjectsOptions(value) {
+  if (!isRecord(value))
+    return;
+  const statusesSource = isRecord(value.statuses) ? value.statuses : undefined;
+  const statuses = {};
+  for (const key of ["todo", "running", "prOpen", "ciFixing", "merging", "done", "needsAttention"]) {
+    const status = optionalString(statusesSource?.[key]);
+    if (status)
+      statuses[key] = status;
+  }
+  const parsed = {};
+  if (typeof value.enabled === "boolean")
+    parsed.enabled = value.enabled;
+  const projectId = optionalString(value.projectId);
+  if (projectId)
+    parsed.projectId = projectId;
+  const statusFieldId = optionalString(value.statusFieldId);
+  if (statusFieldId)
+    parsed.statusFieldId = statusFieldId;
+  if (Object.keys(statuses).length > 0)
+    parsed.statuses = statuses;
+  return parsed;
+}
+function githubProjectsOptionsFromConfig(config, context) {
+  const rigConfig = isRecord(context?.rigConfig) ? context.rigConfig : undefined;
+  const github = isRecord(rigConfig?.github) ? rigConfig.github : undefined;
+  return parseGitHubProjectsOptions(config.options?.projects) ?? parseGitHubProjectsOptions(github?.projects);
+}
 function standardPlugin(opts = {}) {
   return definePlugin({
     name: "rig-standard",
@@ -609,13 +909,13 @@ function standardPlugin(opts = {}) {
         id: "std:github-issues",
         kind: "github-issues",
         description: "GitHub Issues via gh CLI",
-        factory(config) {
+        factory(config, context) {
           const options = {
             owner: requireStringField(config, "owner", "github-issues"),
             repo: requireStringField(config, "repo", "github-issues")
           };
-          if (opts.githubCredentialProvider)
-            options.credentialProvider = opts.githubCredentialProvider;
+          const credentialProviderOptions = context?.projectRoot ? { stateDir: resolve3(context.projectRoot, ".rig", "state") } : {};
+          options.credentialProvider = opts.githubCredentialProvider ?? createStateGitHubCredentialProvider(credentialProviderOptions);
           if (opts.githubWorkspaceId)
             options.workspaceId = opts.githubWorkspaceId;
           if (opts.githubUserId)
@@ -637,6 +937,9 @@ function standardPlugin(opts = {}) {
           const listLimit = typeof config.options?.listLimit === "number" ? config.options.listLimit : undefined;
           if (listLimit !== undefined)
             options.listLimit = listLimit;
+          const projects = githubProjectsOptionsFromConfig(config, context);
+          if (projects)
+            options.projects = projects;
           return createGitHubIssuesTaskSource(options);
         }
       },
@@ -644,9 +947,10 @@ function standardPlugin(opts = {}) {
         id: "std:files",
         kind: "files",
         description: "JSON files in a local directory",
-        factory(config) {
+        factory(config, context) {
           return createFilesTaskSource({
-            path: requireStringField(config, "path", "files")
+            path: requireStringField(config, "path", "files"),
+            ...context?.projectRoot ? { projectRoot: context.projectRoot } : {}
           });
         }
       }

package/package.json

@@ -1,8 +1,8 @@
 {
   "name": "@h-rig/standard-plugin",
-  "version": "0.0.6-alpha.13",
+  "version": "0.0.6-alpha.130",
   "type": "module",
-  "description": "Rig package",
+  "description": "First-party contribution bundle for Rig's OMP extension plugin graph; not a standalone plugin runtime.",
   "license": "UNLICENSED",
   "files": [
     "dist",
@@ -10,6 +10,7 @@
   ],
   "exports": {
     ".": {
+      "types": "./dist/src/index.d.ts",
       "import": "./dist/src/index.js"
     }
   },
@@ -18,9 +19,10 @@
   },
   "main": "./dist/src/index.js",
   "module": "./dist/src/index.js",
+  "types": "./dist/src/index.d.ts",
   "dependencies": {
-    "@rig/contracts": "npm:@h-rig/contracts@0.0.6-alpha.13",
-    "@rig/core": "npm:@h-rig/core@0.0.6-alpha.13",
+    "@rig/contracts": "npm:@h-rig/contracts@0.0.6-alpha.130",
+    "@rig/core": "npm:@h-rig/core@0.0.6-alpha.130",
     "effect": "4.0.0-beta.78"
   }
 }