@hasna/todos 0.13.12 → 0.15.1

package/dist/mcp/index.js

@@ -44,7 +44,10 @@ var __require = import.meta.require;
 function isBlockingDependencyStatus(status) {
   return status !== "completed" && status !== "cancelled";
 }
-var TASK_STATUSES, VersionConflictError, TaskNotFoundError, TaskNotStartableError, TaskReferenceAmbiguousError, ProjectNotFoundError, ResourceConflictError, PlanNotFoundError, LockError, AgentNotFoundError, IdentityAliasAmbiguousError, IdentityIdImmutableError, TaskListNotFoundError, DependencyCycleError, CompletionGuardError, DispatchNotFoundError;
+function isTerminalStatus(status) {
+  return status === "completed" || status === "failed" || status === "cancelled";
+}
+var TASK_STATUSES, TASK_PRIORITIES, VersionConflictError, TaskNotFoundError, TaskNotStartableError, TaskReferenceAmbiguousError, ProjectNotFoundError, ResourceConflictError, PlanNotFoundError, LockError, AgentNotFoundError, IdentityAliasAmbiguousError, IdentityIdImmutableError, TaskListNotFoundError, DependencyCycleError, CompletionGuardError, DispatchNotFoundError;
 var init_types = __esm(() => {
   TASK_STATUSES = [
     "pending",
@@ -53,6 +56,12 @@ var init_types = __esm(() => {
     "failed",
     "cancelled"
   ];
+  TASK_PRIORITIES = [
+    "low",
+    "medium",
+    "high",
+    "critical"
+  ];
   VersionConflictError = class VersionConflictError extends Error {
     taskId;
     expectedVersion;
@@ -3795,6 +3804,41 @@ var init_identity_mapping = __esm(() => {
   });
 });
 
+// src/lib/sync-utils.ts
+import { existsSync as existsSync2, mkdirSync, readFileSync, readdirSync, statSync, writeFileSync } from "fs";
+import { homedir } from "os";
+import { join } from "path";
+function getHomeDir() {
+  return process.env["HOME"] || process.env["USERPROFILE"] || homedir();
+}
+function getTodosGlobalDir() {
+  return join(getHomeDir(), ".hasna", "todos");
+}
+function ensureDir(dir) {
+  if (!existsSync2(dir))
+    mkdirSync(dir, { recursive: true });
+}
+function readJsonFile(path) {
+  try {
+    return JSON.parse(readFileSync(path, "utf-8"));
+  } catch {
+    return null;
+  }
+}
+function writeJsonFile(path, data) {
+  writeFileSync(path, JSON.stringify(data, null, 2) + `
+`);
+}
+function appendSyncConflict(metadata, conflict, limit = 5) {
+  const current = Array.isArray(metadata["sync_conflicts"]) ? metadata["sync_conflicts"] : [];
+  const next = [conflict, ...current].slice(0, limit);
+  return { ...metadata, sync_conflicts: next };
+}
+var HOME;
+var init_sync_utils = __esm(() => {
+  HOME = getHomeDir();
+});
+
 // src/storage/config.ts
 var exports_config = {};
 __export(exports_config, {
@@ -4125,8 +4169,8 @@ __export(exports_database, {
   LOCK_EXPIRY_MINUTES: () => LOCK_EXPIRY_MINUTES
 });
 import { Database } from "bun:sqlite";
-import { existsSync as existsSync2, mkdirSync } from "fs";
-import { dirname, join, resolve as resolve2 } from "path";
+import { existsSync as existsSync3, mkdirSync as mkdirSync2 } from "fs";
+import { dirname, join as join2, resolve as resolve2 } from "path";
 function isInMemoryDb(path) {
   return path === ":memory:" || path.startsWith("file::memory:");
 }
@@ -4135,8 +4179,8 @@ function findNearestProjectDb(startDir) {
   const stopAt = gitRoot ? resolve2(gitRoot) : resolve2(startDir);
   let dir = resolve2(startDir);
   while (true) {
-    const candidate = join(dir, ".hasna", "todos", "todos.db");
-    if (existsSync2(candidate))
+    const candidate = join2(dir, ".hasna", "todos", "todos.db");
+    if (existsSync3(candidate))
       return candidate;
     if (dir === stopAt)
       break;
@@ -4150,7 +4194,7 @@ function findNearestProjectDb(startDir) {
 function findGitRoot(startDir) {
   let dir = resolve2(startDir);
   while (true) {
-    if (existsSync2(join(dir, ".git")))
+    if (existsSync3(join2(dir, ".git")))
       return dir;
     const parent = dirname(dir);
     if (parent === dir)
@@ -4160,8 +4204,7 @@ function findGitRoot(startDir) {
   return null;
 }
 function getGlobalDbPath() {
-  const home = process.env["HOME"] || process.env["USERPROFILE"] || "~";
-  return join(home, ".hasna", "todos", "todos.db");
+  return join2(getHomeDir(), ".hasna", "todos", "todos.db");
 }
 function hasExplicitProjectArg(args = process.argv.slice(2)) {
   return args.some((arg) => arg === "--project" || arg.startsWith("--project="));
@@ -4199,7 +4242,7 @@ function getDbPath() {
   if (process.env["TODOS_DB_SCOPE"] === "project") {
     const gitRoot = findGitRoot(cwd);
     if (gitRoot && canCreateScopedProjectDb()) {
-      return join(gitRoot, ".hasna", "todos", "todos.db");
+      return join2(gitRoot, ".hasna", "todos", "todos.db");
     }
   }
   return getGlobalDbPath();
@@ -4207,16 +4250,16 @@ function getDbPath() {
 function getDatabasePath() {
   return getDbPath();
 }
-function ensureDir(filePath) {
+function ensureDir2(filePath) {
   if (isInMemoryDb(filePath))
     return;
   const dir = dirname(resolve2(filePath));
-  if (!existsSync2(dir)) {
-    mkdirSync(dir, { recursive: true });
+  if (!existsSync3(dir)) {
+    mkdirSync2(dir, { recursive: true });
   }
 }
 function openDatabase(path) {
-  ensureDir(path);
+  ensureDir2(path);
   const db = new Database(path);
   db.run("PRAGMA busy_timeout = 5000");
   db.run("PRAGMA journal_mode = WAL");
@@ -4383,6 +4426,7 @@ var init_database = __esm(() => {
   init_machines();
   init_identity_mapping();
   init_types();
+  init_sync_utils();
   ALLOWED_TABLES = new Set(["tasks", "projects", "agents", "plans", "task_lists", "task_templates", "project_knowledge_records", "project_risks", "local_retrospectives"]);
 });
 
@@ -9126,40 +9170,6 @@ var init_zod = __esm(() => {
   init_external();
 });
 
-// src/lib/sync-utils.ts
-import { existsSync as existsSync3, mkdirSync as mkdirSync2, readFileSync, readdirSync, statSync, writeFileSync } from "fs";
-import { join as join2 } from "path";
-function getHomeDir() {
-  return process.env["HOME"] || process.env["USERPROFILE"] || "~";
-}
-function getTodosGlobalDir() {
-  return join2(getHomeDir(), ".hasna", "todos");
-}
-function ensureDir2(dir) {
-  if (!existsSync3(dir))
-    mkdirSync2(dir, { recursive: true });
-}
-function readJsonFile(path) {
-  try {
-    return JSON.parse(readFileSync(path, "utf-8"));
-  } catch {
-    return null;
-  }
-}
-function writeJsonFile(path, data) {
-  writeFileSync(path, JSON.stringify(data, null, 2) + `
-`);
-}
-function appendSyncConflict(metadata, conflict, limit = 5) {
-  const current = Array.isArray(metadata["sync_conflicts"]) ? metadata["sync_conflicts"] : [];
-  const next = [conflict, ...current].slice(0, limit);
-  return { ...metadata, sync_conflicts: next };
-}
-var HOME;
-var init_sync_utils = __esm(() => {
-  HOME = process.env["HOME"] || process.env["USERPROFILE"] || "~";
-});
-
 // src/lib/config.ts
 import { existsSync as existsSync4 } from "fs";
 import { dirname as dirname2, join as join3 } from "path";
@@ -9182,7 +9192,7 @@ function loadConfig() {
 }
 function saveConfig(config) {
   const configPath = getConfigPath();
-  ensureDir2(dirname2(configPath));
+  ensureDir(dirname2(configPath));
   writeJsonFile(configPath, config);
   cached = config;
   return config;
@@ -10737,7 +10747,7 @@ var init_event_hooks = __esm(() => {
 // node_modules/.bun/@hasna+events@0.1.11/node_modules/@hasna/events/dist/index.js
 import { chmod, mkdir, readFile, rename, writeFile } from "fs/promises";
 import { existsSync as existsSync5 } from "fs";
-import { homedir } from "os";
+import { homedir as homedir2 } from "os";
 import { join as join4 } from "path";
 import { createHmac, timingSafeEqual } from "crypto";
 import { randomUUID as randomUUID2 } from "crypto";
@@ -10839,7 +10849,7 @@ function channelMatchesEvent(channel, event) {
   return channel.filters.some((filter) => eventMatchesFilter(event, filter));
 }
 function getEventsDataDir(override) {
-  return override || process.env[HASNA_EVENTS_DIR_ENV] || process.env[HASNA_EVENTS_HOME_ENV] || join4(homedir(), ".hasna", "events");
+  return override || process.env[HASNA_EVENTS_DIR_ENV] || process.env[HASNA_EVENTS_HOME_ENV] || join4(homedir2(), ".hasna", "events");
 }
 
 class JsonEventsStore {
@@ -13927,11 +13937,13 @@ function updateTask(id, input, db) {
     }
     sets.push("status = ?");
     params.push(input.status);
+    if (isTerminalStatus(input.status)) {
+      sets.push("locked_by = NULL");
+      sets.push("locked_at = NULL");
+    }
     if (input.status === "completed") {
       sets.push("completed_at = ?");
       params.push(completionTimestamp);
-      sets.push("locked_by = NULL");
-      sets.push("locked_at = NULL");
     } else if (task.status === "completed" && input.completed_at === undefined) {
       sets.push("completed_at = NULL");
     }
@@ -14055,6 +14067,7 @@ function updateTask(id, input, db) {
     logTaskChange(id, "approve", "approved_by", null, input.approved_by, agentId, d);
   const reopened = input.status !== undefined && input.status !== "completed" && task.status === "completed" && input.completed_at === undefined;
   const completedNow = input.status === "completed";
+  const terminalNow = input.status !== undefined && isTerminalStatus(input.status);
   const updatedTask = {
     ...task,
     ...Object.fromEntries(Object.entries(input).filter(([, v]) => v !== undefined)),
@@ -14062,8 +14075,8 @@ function updateTask(id, input, db) {
     metadata: input.metadata ?? task.metadata,
     version: task.version + 1,
     updated_at: timestamp2,
-    locked_by: completedNow ? null : task.locked_by,
-    locked_at: completedNow ? null : task.locked_at,
+    locked_by: terminalNow ? null : task.locked_by,
+    locked_at: terminalNow ? null : task.locked_at,
     completed_at: completedNow ? completionTimestamp : reopened ? null : input.completed_at !== undefined ? input.completed_at : task.completed_at,
     sla_minutes: input.sla_minutes !== undefined ? input.sla_minutes : task.sla_minutes,
     actual_minutes: input.actual_minutes ?? task.actual_minutes,
@@ -17990,10 +18003,10 @@ var init_token_utils = __esm(() => {
 
 // src/lib/assignee-validation.ts
 import { readFileSync as readFileSync3 } from "fs";
-import { homedir as homedir2 } from "os";
+import { homedir as homedir3 } from "os";
 import { join as join7 } from "path";
 function defaultSeatRosterPath() {
-  return process.env["TODOS_SEAT_ROSTER_PATH"] || join7(homedir2(), ".hasna", "identities", "hasna-seats.roster.json");
+  return process.env["TODOS_SEAT_ROSTER_PATH"] || join7(homedir3(), ".hasna", "identities", "hasna-seats.roster.json");
 }
 function loadSeatSlugs(path = defaultSeatRosterPath()) {
   try {
@@ -20821,7 +20834,7 @@ async function validateMcpAssignee(value, allowSeat) {
   return verdict.assignee;
 }
 function registerTaskCrudTools(server, ctx) {
-  const { shouldRegisterTool, resolveId, formatError, formatTask } = ctx;
+  const { shouldRegisterTool, resolveId, formatError, formatTask, applyFocus } = ctx;
   function mutationTaskResponse(task) {
     const compact = compactTask(task, 240);
     compact["version"] = task.version;
@@ -20897,6 +20910,7 @@ function registerTaskCrudTools(server, ctx) {
             payload.max_retries = retry_count;
           if (deadline)
             payload.due_at = deadline;
+          applyFocus(payload, router.agent_id || undefined);
           const created = await cloudCreateTask(cloud, payload);
           return { content: [{ type: "text", text: mutationTaskResponse(created) }] };
         }
@@ -20923,6 +20937,7 @@ function registerTaskCrudTools(server, ctx) {
           resolved.max_retries = retry_count;
         if (deadline)
           resolved.due_at = deadline;
+        applyFocus(resolved, router.agent_id || undefined);
         const task = createTask(resolved);
         return { content: [{ type: "text", text: mutationTaskResponse(task) }] };
       } catch (e) {
@@ -26049,7 +26064,8 @@ __export(exports_saved_search_views, {
   normalizeScope: () => normalizeScope,
   listSearchViews: () => listSearchViews,
   getSearchView: () => getSearchView,
-  deleteSearchView: () => deleteSearchView
+  deleteSearchView: () => deleteSearchView,
+  SAVED_SEARCH_SCOPES: () => SAVED_SEARCH_SCOPES
 });
 function parseFilters(value) {
   if (!value)
@@ -26069,10 +26085,8 @@ function rowToSavedSearchView(row) {
   };
 }
 function normalizeScope(scope) {
-  if (scope === "all" || scope === "tasks" || scope === "projects" || scope === "plans" || scope === "runs" || scope === "comments") {
-    return scope;
-  }
-  return "tasks";
+  const candidate = (scope ?? "").trim().toLowerCase();
+  return SAVED_SEARCH_SCOPES.includes(candidate) ? candidate : "tasks";
 }
 function normalizeName4(name) {
   const normalized = name.trim();
@@ -26375,10 +26389,12 @@ function runSearchView(idOrName, db) {
     throw new Error(`Saved search view not found: ${idOrName}`);
   return { ...runSavedSearch(view.filters, view.scope, d), view };
 }
+var SAVED_SEARCH_SCOPES;
 var init_saved_search_views = __esm(() => {
   init_database();
   init_local_fields();
   init_search();
+  SAVED_SEARCH_SCOPES = ["all", "tasks", "projects", "plans", "runs", "comments"];
 });
 
 // src/mcp/tools/task-project-tools.ts
@@ -30194,10 +30210,23 @@ function registerTaskAutoTools(server, ctx) {
           return { content: [{ type: "text", text: "No active agents available for rebalancing." }] };
         const activeTasks = listTasks3({ project_id: resolvedProjectId, status: ["pending", "in_progress"], limit: 1000 }, undefined);
         const agentKeyByAlias = new Map;
+        const ambiguousAgentAliases = new Set;
+        const indexAgentAlias = (alias, agentId) => {
+          const normalizedAlias2 = alias.toLowerCase();
+          if (ambiguousAgentAliases.has(normalizedAlias2))
+            return;
+          const existingAgentId = agentKeyByAlias.get(normalizedAlias2);
+          if (existingAgentId !== undefined && existingAgentId !== agentId) {
+            agentKeyByAlias.delete(normalizedAlias2);
+            ambiguousAgentAliases.add(normalizedAlias2);
+            return;
+          }
+          agentKeyByAlias.set(normalizedAlias2, agentId);
+        };
         for (const agent of agents) {
-          agentKeyByAlias.set(String(agent.id).toLowerCase(), agent.id);
+          indexAgentAlias(String(agent.id), agent.id);
           if (agent.name)
-            agentKeyByAlias.set(String(agent.name).toLowerCase(), agent.id);
+            indexAgentAlias(String(agent.name), agent.id);
         }
         const canonicalAgentKey = (assignedTo) => assignedTo ? agentKeyByAlias.get(assignedTo.toLowerCase()) : undefined;
         const load = new Map(agents.map((agent) => [agent.id, activeTasks.filter((t) => canonicalAgentKey(t.assigned_to) === agent.id).length]));
@@ -34886,7 +34915,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "@hasna/todos",
-    version: "0.13.12",
+    version: "0.15.1",
     description: "Universal task management for AI coding agents - CLI + MCP server + interactive TUI",
     type: "module",
     main: "dist/index.js",
@@ -42865,9 +42894,16 @@ ${text2}` }] };
           return { content: [{ type: "text", text: `Agent not found: ${id || name}` }], isError: true };
         }
         const oldName = agent.name;
-        const updated = updateAgent(agent.id, { name: new_name });
         const db = getDatabase();
-        const tasksResult = db.run("UPDATE tasks SET assigned_to = ? WHERE LOWER(assigned_to) = LOWER(?)", [new_name, oldName]);
+        let oldNameUniquelyIdentifiesAgent = false;
+        try {
+          oldNameUniquelyIdentifiesAgent = resolvePartialId(db, "agents", oldName) === agent.id;
+        } catch (error) {
+          if (!(error instanceof IdentityAliasAmbiguousError))
+            throw error;
+        }
+        const updated = updateAgent(agent.id, { name: new_name });
+        const tasksResult = db.run(oldNameUniquelyIdentifiesAgent ? "UPDATE tasks SET assigned_to = ? WHERE LOWER(assigned_to) = LOWER(?)" : "UPDATE tasks SET assigned_to = ? WHERE assigned_to = ?", [new_name, oldName]);
         const taskNote = tasksResult.changes > 0 ? `
 Updated assigned_to on ${tasksResult.changes} task(s).` : "";
         return {
@@ -43051,6 +43087,7 @@ var init_agents2 = __esm(() => {
   init_agents();
   init_config2();
   init_database();
+  init_types();
   init_cloud_router();
 });
 
@@ -43819,7 +43856,7 @@ function captureEnvironmentSnapshot(input = {}) {
 }
 function writeEnvironmentSnapshot(snapshot, outputPath) {
   const path = outputPath ? resolve15(outputPath) : join14(defaultSnapshotDir(), `${snapshot.id}.json`);
-  ensureDir2(dirname8(path));
+  ensureDir(dirname8(path));
   writeJsonFile(path, snapshot);
   return path;
 }
@@ -46459,9 +46496,11 @@ async function updateTask2(id, input, store) {
     throw new Error(`Task ${id} version conflict: expected ${existing.version}, got ${input.version}`);
   }
   const reopened = existing.status === "completed" && input.status !== undefined && input.status !== "completed" && input.completed_at === undefined;
+  const terminalNow = input.status !== undefined && isTerminalStatus(input.status);
   const task2 = {
     ...existing,
     ...definedPatch(input),
+    ...terminalNow ? { locked_by: null, locked_at: null } : {},
     version: existing.version + 1,
     updated_at: new Date().toISOString(),
     tags: input.tags ?? existing.tags,
@@ -48034,6 +48073,103 @@ var init_auth_posture = __esm(() => {
   LOOPBACK_HOSTNAMES = new Set(["localhost", "127.0.0.1", "::1", "[::1]", "ip6-localhost"]);
 });
 
+// src/lib/enum-vocabulary.ts
+function editDistance(a, b) {
+  if (a === b)
+    return 0;
+  if (!a.length)
+    return b.length;
+  if (!b.length)
+    return a.length;
+  let previous = Array.from({ length: b.length + 1 }, (_, i) => i);
+  for (let i = 1;i <= a.length; i += 1) {
+    const current = [i];
+    for (let j = 1;j <= b.length; j += 1) {
+      current[j] = Math.min(previous[j] + 1, current[j - 1] + 1, previous[j - 1] + (a[i - 1] === b[j - 1] ? 0 : 1));
+    }
+    previous = current;
+  }
+  return previous[b.length];
+}
+function suggestVocabularyMatches(value, vocabulary, limit = 3) {
+  const needle = value.trim().toLowerCase();
+  if (!needle)
+    return [];
+  const scored = [];
+  for (const member of vocabulary) {
+    const candidate = member.toLowerCase();
+    if (candidate.startsWith(needle) || needle.startsWith(candidate)) {
+      scored.push({ member, score: 0 });
+      continue;
+    }
+    if (candidate.includes(needle) || needle.includes(candidate)) {
+      scored.push({ member, score: 1 });
+      continue;
+    }
+    const distance = editDistance(needle, candidate);
+    if (distance <= Math.max(1, Math.floor(candidate.length / 3))) {
+      scored.push({ member, score: 1 + distance });
+    }
+  }
+  return scored.sort((a, b) => a.score - b.score || a.member.localeCompare(b.member)).slice(0, limit).map((entry2) => entry2.member);
+}
+function resolveEnumVocabulary(raw, spec) {
+  const allowList = spec.allowList !== false;
+  const rawElements = (allowList ? raw.split(",") : [raw]).map((element) => element.trim());
+  if (rawElements.every((element) => element.length === 0)) {
+    return {
+      ok: false,
+      message: `${spec.name} requires a value. Allowed values: ${spec.vocabulary.join(", ")}.`,
+      invalid: []
+    };
+  }
+  if (rawElements.some((element) => element.length === 0)) {
+    return {
+      ok: false,
+      message: `${spec.name} has an empty value in "${raw}" \u2014 remove the stray comma. ` + `Allowed values: ${spec.vocabulary.join(", ")}.`,
+      invalid: []
+    };
+  }
+  const normalized = rawElements.map((element) => spec.normalize ? spec.normalize(element) : element);
+  const allowed = new Set(spec.vocabulary);
+  const invalid2 = [];
+  for (let i = 0;i < normalized.length; i += 1) {
+    if (!allowed.has(normalized[i]))
+      invalid2.push(rawElements[i]);
+  }
+  if (invalid2.length === 0) {
+    return { ok: true, values: [...new Set(normalized)] };
+  }
+  const label = invalid2.length === 1 ? "value" : "values";
+  const parts = [
+    `Invalid ${spec.name} ${label}: ${invalid2.join(", ")}.`,
+    `Allowed values: ${spec.vocabulary.join(", ")}.`
+  ];
+  const hints = new Set;
+  const suggestions = new Set;
+  for (let i = 0;i < normalized.length; i += 1) {
+    const canonical = normalized[i];
+    if (allowed.has(canonical))
+      continue;
+    const hint = spec.hints?.[canonical.toLowerCase()];
+    if (hint) {
+      hints.add(hint);
+      continue;
+    }
+    for (const match of suggestVocabularyMatches(canonical, spec.vocabulary)) {
+      suggestions.add(match);
+    }
+  }
+  if (suggestions.size > 0)
+    parts.push(`Did you mean ${[...suggestions].join(", ")}?`);
+  for (const hint of hints)
+    parts.push(hint);
+  return { ok: false, message: parts.join(" "), invalid: invalid2 };
+}
+function collapseEnumValues(values) {
+  return values.length === 1 ? values[0] : values;
+}
+
 // src/db/orgs.ts
 function rowToOrg(row) {
   return { ...row, metadata: JSON.parse(row.metadata || "{}") };
@@ -48334,8 +48470,19 @@ function handleStats(_ctx, json2) {
     recurring_tasks: countRecurringTasks()
   });
 }
+function taskStatusQueryParam(url) {
+  const raw = url.searchParams.get("status");
+  if (!raw)
+    return { ok: true, value: undefined };
+  const result = resolveEnumVocabulary(raw, { name: "status", vocabulary: TASK_STATUSES });
+  if (!result.ok)
+    return { ok: false, message: result.message };
+  return { ok: true, value: collapseEnumValues(result.values) };
+}
 async function handleListTasks(_req, url, _ctx, json2, taskToSummary2) {
-  const status = url.searchParams.get("status") || undefined;
+  const statusParam = taskStatusQueryParam(url);
+  if (!statusParam.ok)
+    return json2({ error: statusParam.message }, 400);
   const projectId = url.searchParams.get("project_id") || undefined;
   const sessionId = url.searchParams.get("session_id") || undefined;
   const agentId = url.searchParams.get("agent_id") || undefined;
@@ -48343,7 +48490,7 @@ async function handleListTasks(_req, url, _ctx, json2, taskToSummary2) {
   const offsetParam = url.searchParams.get("offset");
   const fields = parseFieldsParam(url);
   const tasks = listTasks({
-    status,
+    status: statusParam.value,
     project_id: projectId,
     session_id: sessionId,
     agent_id: agentId,
@@ -48408,9 +48555,19 @@ async function handleUpsertTask(req, ctx, json2, taskToSummary2) {
 }
 function handleTasksExport(_req, url, _ctx, _json, taskToSummary2) {
   const format = url.searchParams.get("format") || "json";
-  const status = url.searchParams.get("status") || undefined;
+  const statusParam = taskStatusQueryParam(url);
+  if (!statusParam.ok) {
+    return new Response(JSON.stringify({ error: statusParam.message }), {
+      status: 400,
+      headers: { "Content-Type": "application/json" }
+    });
+  }
   const projectId = url.searchParams.get("project_id") || undefined;
-  const tasks = listTasks({ status, project_id: projectId, limit: 1e4 });
+  const tasks = listTasks({
+    status: statusParam.value,
+    project_id: projectId,
+    limit: 1e4
+  });
   const summaries = tasks.map((t) => taskToSummary2(t));
   if (format === "csv") {
     const headers = ["id", "short_id", "title", "status", "priority", "project_id", "assigned_to", "agent_id", "created_at", "updated_at", "completed_at", "due_at"];
@@ -48992,6 +49149,7 @@ var init_routes = __esm(() => {
   init_tasks();
   init_database();
   init_types();
+  init_types();
   init_projects();
   init_agents();
   init_plans();
@@ -49945,8 +50103,38 @@ function buildV1OpenApiDocument(version = getPackageVersion()) {
           operationId: "listTasks",
           summary: "List tasks",
           parameters: [
-            { name: "status", in: "query", schema: { type: "string" } },
-            { name: "priority", in: "query", schema: { type: "string" } },
+            {
+              name: "status",
+              in: "query",
+              description: `Task status, or a comma-separated list of statuses. Allowed values: ${TASK_STATUSES.join(", ")}.`,
+              style: "form",
+              explode: false,
+              schema: {
+                oneOf: [
+                  { type: "string", enum: [...TASK_STATUSES] },
+                  {
+                    type: "array",
+                    items: { type: "string", enum: [...TASK_STATUSES] }
+                  }
+                ]
+              }
+            },
+            {
+              name: "priority",
+              in: "query",
+              description: `Task priority, or a comma-separated list of priorities. Allowed values: ${TASK_PRIORITIES.join(", ")}.`,
+              style: "form",
+              explode: false,
+              schema: {
+                oneOf: [
+                  { type: "string", enum: [...TASK_PRIORITIES] },
+                  {
+                    type: "array",
+                    items: { type: "string", enum: [...TASK_PRIORITIES] }
+                  }
+                ]
+              }
+            },
             { name: "project_id", in: "query", schema: { type: "string" } },
             { name: "parent_id", in: "query", schema: { type: "string", nullable: true } },
             { name: "include_subtasks", in: "query", schema: { type: "boolean" } },
@@ -50458,6 +50646,7 @@ function buildV1OpenApiDocument(version = getPackageVersion()) {
 var taskSchema, projectSchema, taskListSchema, taskCommentSchema, planSchema, templateTaskSchema, templateSchema, templateVariableSchema, createTemplateTaskInputSchema;
 var init_openapi = __esm(() => {
   init_package_version();
+  init_types();
   taskSchema = {
     type: "object",
     properties: {
@@ -50725,6 +50914,15 @@ function json3(body, status = 200) {
 function error(status, message, extra) {
   return json3({ error: message, ...extra ?? {} }, status);
 }
+function enumQueryParam(url, name, vocabulary) {
+  const raw = url.searchParams.get(name);
+  if (raw === null || raw === "")
+    return { ok: true, value: undefined };
+  const result = resolveEnumVocabulary(raw, { name, vocabulary });
+  if (!result.ok)
+    return { ok: false, response: error(400, result.message) };
+  return { ok: true, value: collapseEnumValues(result.values) };
+}
 function validateTaskCompletion(value) {
   if (!value || typeof value !== "object" || Array.isArray(value))
     return { ok: false, message: "completion body must be an object" };
@@ -51145,14 +51343,16 @@ async function handleV1Request(req, url, dependencies = {}) {
             return error(400, "include_subtasks must be true or false");
           }
           const hasParentFilter = url.searchParams.has("parent_id");
+          const statusParam = enumQueryParam(url, "status", TASK_STATUSES);
+          if (!statusParam.ok)
+            return statusParam.response;
+          const priorityParam = enumQueryParam(url, "priority", TASK_PRIORITIES);
+          if (!priorityParam.ok)
+            return priorityParam.response;
           const filter = {
             ...url.searchParams.get("q") ? { query: url.searchParams.get("q") } : {},
-            ...url.searchParams.get("status") ? {
-              status: url.searchParams.get("status").includes(",") ? url.searchParams.get("status").split(",") : url.searchParams.get("status")
-            } : {},
-            ...url.searchParams.get("priority") ? {
-              priority: url.searchParams.get("priority").includes(",") ? url.searchParams.get("priority").split(",") : url.searchParams.get("priority")
-            } : {},
+            ...statusParam.value !== undefined ? { status: statusParam.value } : {},
+            ...priorityParam.value !== undefined ? { priority: priorityParam.value } : {},
             ...url.searchParams.get("project_id") ? { project_id: url.searchParams.get("project_id") } : {},
             ...hasParentFilter ? { parent_id: url.searchParams.get("parent_id") || null, include_subtasks: true } : includeSubtasks !== null ? { include_subtasks: includeSubtasks === "true" } : {},
             ...url.searchParams.get("plan_id") ? { plan_id: url.searchParams.get("plan_id") } : {},
@@ -51786,7 +51986,13 @@ async function handleV1Request(req, url, dependencies = {}) {
         return error(405, `method ${method} not allowed on /v1/refs/:ref`);
       if (!store.gitRefs)
         return error(501, "git ref links are not supported by this storage backend");
-      const refs = await store.gitRefs.find(id);
+      let decodedRef;
+      try {
+        decodedRef = decodeURIComponent(id);
+      } catch {
+        return error(400, "ref path segment has invalid percent encoding");
+      }
+      const refs = await store.gitRefs.find(decodedRef);
       return json3({ refs, count: refs.length });
     }
     if (resource === "next" && !id) {
@@ -52892,7 +53098,8 @@ function buildServer() {
     formatError,
     formatTask,
     formatTaskDetail,
-    getAgentFocus
+    getAgentFocus,
+    applyFocus
   };
   registerTaskCrudTools(server, toolContext);
   registerTaskProjectTools(server, toolContext);

package/dist/mcp/tools/agents.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agents.d.ts","sourceRoot":"","sources":["../../../src/mcp/tools/agents.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAOzE,UAAU,UAAU;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,KAAK,OAAO,GAAG;IACb,kBAAkB,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC;IAC9C,SAAS,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,KAAK,MAAM,CAAC;IAClD,WAAW,EAAE,CAAC,CAAC,EAAE,OAAO,KAAK,MAAM,CAAC;IACpC,aAAa,EAAE,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IACvC,aAAa,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,UAAU,GAAG,SAAS,CAAC;CAC5D,CAAC;AAEF,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,kBAAkB,EAAE,SAAS,EAAE,WAAW,EAAE,aAAa,EAAE,aAAa,EAAE,EAAE,OAAO,GAAG,IAAI,CAqfjJ"}
+{"version":3,"file":"agents.d.ts","sourceRoot":"","sources":["../../../src/mcp/tools/agents.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAQzE,UAAU,UAAU;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,KAAK,OAAO,GAAG;IACb,kBAAkB,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC;IAC9C,SAAS,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,KAAK,MAAM,CAAC;IAClD,WAAW,EAAE,CAAC,CAAC,EAAE,OAAO,KAAK,MAAM,CAAC;IACpC,aAAa,EAAE,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IACvC,aAAa,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,UAAU,GAAG,SAAS,CAAC;CAC5D,CAAC;AAEF,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,kBAAkB,EAAE,SAAS,EAAE,WAAW,EAAE,aAAa,EAAE,aAAa,EAAE,EAAE,OAAO,GAAG,IAAI,CA4fjJ"}