@unbrained/pm-web 2026.6.2-1 → 2026.6.4

package/CHANGELOG.md

@@ -1,6 +1,12 @@
 # Changelog
 
-## 2026.6.2-1 - 2026-06-02
+## 2026.6.4 - 2026-06-04
+
+### Added
+
+- Add light/auto theme toggle, URL-state item filters, and iCal \(.ics\) calendar export ([pm-web-b6eo](https://github.com/unbraind/pm-web/blob/main/.agents/pm/tasks/pm-web-b6eo.toon))
+
+## 2026.06.02-1 - 2026-06-02
 
 ### Added
 

package/README.md

@@ -166,6 +166,49 @@ extensions):
   search over id, title, tags and body.
 - `GET /api/projects/:projectId/pm/schema` — runtime types/statuses (existing).
 - `GET /api/projects/:projectId/pm/graph` — dependency graph (existing).
+- `GET /api/projects/:projectId/pm/calendar.ics` — RFC 5545 iCalendar feed of
+  item deadlines (see below).
 
 The pure grouping/search helpers live in `src/board.ts` and are unit-tested
 independently of the database.
+
+## UI features
+
+### Theme (dark / light / auto)
+
+The web UI supports three themes — **dark** (default), **light**, and **auto**
+(follows the OS `prefers-color-scheme`). Toggle with the button in the top nav
+or the `t` keyboard shortcut; the choice is persisted to `localStorage`. The
+palette is driven entirely by CSS variables (`public/styles.css`); the toggle
+logic lives in `public/src/theme.ts`.
+
+### Shareable filtered views
+
+The Items view mirrors its filters into the URL query string, so a filtered
+view is shareable and bookmarkable:
+
+```
+/items?status=open&type=Feature&priority=1&assignee=alice&tag=release
+```
+
+Filterable dimensions: `status`, `type`, `priority`, `sprint`, `release`,
+`assignee`, `tag`. Opening such a URL restores the filters; use the **Copy
+link** button to copy the current filtered view. The pure (de)serialization
+helpers live in `public/src/filters.ts` and are unit-tested.
+
+### Calendar export (iCal / .ics)
+
+`GET /api/projects/:projectId/pm/calendar.ics` returns an RFC 5545 `VCALENDAR`
+with a `VEVENT` per item that has a deadline, suitable for **subscribing** in
+Google Calendar, Outlook, or Apple Calendar. Date-only deadlines become all-day
+events; items without a deadline are skipped. Use the **Export .ics** button on
+the Calendar view to download, or subscribe to the feed URL. Because calendar
+clients cannot send cookies, the feed also accepts the JWT via a `?token=<jwt>`
+query parameter (in addition to the usual `Authorization: Bearer` header /
+cookie). The pure generator lives in `src/ical.ts` and is unit-tested.
+
+### Keyboard shortcuts
+
+Press `?` for the in-app shortcuts overlay. Highlights: `Ctrl/⌘+K` global
+search, `/` focus search, `n`/`c` new item, `t` cycle theme, `a` activity,
+`g i` items, `g g` graph, `g s` search, `g c` calendar, `Esc` close modal.

package/dist/auth.js

@@ -15,6 +15,12 @@ export function extractToken(req) {
     const cookie = req.cookies?.pm_token;
     if (cookie)
         return cookie;
+    // Allow a `?token=` query param. Calendar clients subscribing to an .ics
+    // feed cannot send cookies or an Authorization header, so the feed URL
+    // carries the JWT directly. Additive — header/cookie still take precedence.
+    const queryToken = req.query?.["token"];
+    if (typeof queryToken === "string" && queryToken)
+        return queryToken;
     return null;
 }
 //# sourceMappingURL=auth.js.map

package/dist/auth.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth.js","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAAA,OAAO,GAAG,MAAM,cAAc,CAAC;AAG/B,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,kCAAkC,CAAC;AAChF,MAAM,WAAW,GAAG,KAAK,CAAC;AAO1B,MAAM,UAAU,SAAS,CAAC,OAAmB;IAC3C,OAAO,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,EAAE,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC,CAAC;AACnE,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,KAAa;IACvC,OAAO,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,UAAU,CAAe,CAAC;AACrD,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,GAAY;IACvC,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC;IAC7C,IAAI,UAAU,EAAE,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QACtC,OAAO,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC7B,CAAC;IACD,MAAM,MAAM,GAAI,GAAsD,CAAC,OAAO,EAAE,QAAQ,CAAC;IACzF,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAC1B,OAAO,IAAI,CAAC;AACd,CAAC"}
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAAA,OAAO,GAAG,MAAM,cAAc,CAAC;AAG/B,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,kCAAkC,CAAC;AAChF,MAAM,WAAW,GAAG,KAAK,CAAC;AAO1B,MAAM,UAAU,SAAS,CAAC,OAAmB;IAC3C,OAAO,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,EAAE,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC,CAAC;AACnE,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,KAAa;IACvC,OAAO,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,UAAU,CAAe,CAAC;AACrD,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,GAAY;IACvC,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC;IAC7C,IAAI,UAAU,EAAE,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QACtC,OAAO,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC7B,CAAC;IACD,MAAM,MAAM,GAAI,GAAsD,CAAC,OAAO,EAAE,QAAQ,CAAC;IACzF,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAC1B,yEAAyE;IACzE,uEAAuE;IACvE,4EAA4E;IAC5E,MAAM,UAAU,GAAI,GAAG,CAAC,KAA6C,EAAE,CAAC,OAAO,CAAC,CAAC;IACjF,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU;QAAE,OAAO,UAAU,CAAC;IACpE,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/ical.js

@@ -0,0 +1,141 @@
+// Pure, dependency-free RFC 5545 (iCalendar) generation for pm items.
+//
+// Kept in its own module (no db/express/neo4j imports) so it is unit-testable
+// without booting the server or a database. The pm route layer reads items via
+// the pm CLI and hands the relevant fields here.
+// Escape a text value per RFC 5545 §3.3.11 (TEXT): backslash, semicolon,
+// comma and newlines must be escaped.
+export function icsEscapeText(value) {
+    return value
+        .replace(/\\/g, "\\\\")
+        .replace(/;/g, "\\;")
+        .replace(/,/g, "\\,")
+        .replace(/\r\n|\r|\n/g, "\\n");
+}
+// Fold long content lines to 75 octets per RFC 5545 §3.1. Continuation lines
+// begin with a single space. We fold on character boundaries which is safe for
+// the ASCII-dominant content pm produces.
+export function foldLine(line) {
+    if (line.length <= 75)
+        return line;
+    const parts = [];
+    let remaining = line;
+    parts.push(remaining.slice(0, 75));
+    remaining = remaining.slice(75);
+    while (remaining.length > 0) {
+        // 74 chars + 1 leading space = 75 octets per continuation line.
+        parts.push(" " + remaining.slice(0, 74));
+        remaining = remaining.slice(74);
+    }
+    return parts.join("\r\n");
+}
+// Format a Date as a UTC timestamp: YYYYMMDDTHHMMSSZ (RFC 5545 form 2).
+export function formatUtcTimestamp(d) {
+    const p = (n, w = 2) => String(n).padStart(w, "0");
+    return (`${d.getUTCFullYear()}${p(d.getUTCMonth() + 1)}${p(d.getUTCDate())}` +
+        `T${p(d.getUTCHours())}${p(d.getUTCMinutes())}${p(d.getUTCSeconds())}Z`);
+}
+// Format a Date as an all-day DATE value: YYYYMMDD (RFC 5545 §3.3.4).
+export function formatDateValue(d) {
+    const p = (n) => String(n).padStart(2, "0");
+    return `${d.getUTCFullYear()}${p(d.getUTCMonth() + 1)}${p(d.getUTCDate())}`;
+}
+// A pm deadline may be a date-only string (YYYY-MM-DD) or a full ISO datetime.
+// Returns null for anything unparseable so callers can skip the item.
+function parseDeadline(raw) {
+    const trimmed = raw.trim();
+    if (!trimmed)
+        return null;
+    const dateOnly = /^\d{4}-\d{2}-\d{2}$/.test(trimmed);
+    const d = new Date(dateOnly ? `${trimmed}T00:00:00Z` : trimmed);
+    if (Number.isNaN(d.getTime()))
+        return null;
+    // pm normalizes date-only deadlines to a midnight-UTC ISO timestamp
+    // (e.g. "2026-06-10T00:00:00.000Z"). Treat any exact-midnight-UTC value as
+    // an all-day event, which renders far better in calendar clients than a
+    // zero-length event at 00:00.
+    const isMidnightUtc = d.getUTCHours() === 0 &&
+        d.getUTCMinutes() === 0 &&
+        d.getUTCSeconds() === 0 &&
+        d.getUTCMilliseconds() === 0;
+    return { date: d, allDay: dateOnly || isMidnightUtc };
+}
+// Build a single VEVENT for a pm item with a deadline. Returns null when the
+// item has no usable deadline.
+export function itemToVevent(item, opts) {
+    if (!item.deadline)
+        return null;
+    const parsed = parseDeadline(item.deadline);
+    if (!parsed)
+        return null;
+    const lines = ["BEGIN:VEVENT"];
+    lines.push(`UID:${item.id}@${opts.uidDomain}`);
+    lines.push(`DTSTAMP:${opts.dtstamp}`);
+    if (parsed.allDay) {
+        // All-day event: DTSTART/DTEND use VALUE=DATE, DTEND is the next day
+        // (exclusive end) per RFC 5545.
+        const end = new Date(parsed.date.getTime() + 24 * 60 * 60 * 1000);
+        lines.push(`DTSTART;VALUE=DATE:${formatDateValue(parsed.date)}`);
+        lines.push(`DTEND;VALUE=DATE:${formatDateValue(end)}`);
+    }
+    else {
+        lines.push(`DTSTART:${formatUtcTimestamp(parsed.date)}`);
+        lines.push(`DTEND:${formatUtcTimestamp(parsed.date)}`);
+    }
+    const summaryPrefix = item.type ? `[${item.type}] ` : "";
+    lines.push(`SUMMARY:${icsEscapeText(summaryPrefix + (item.title ?? item.id))}`);
+    const descParts = [`pm item ${item.id}`];
+    if (item.status)
+        descParts.push(`Status: ${item.status}`);
+    if (item.assignee)
+        descParts.push(`Assignee: ${item.assignee}`);
+    if (item.priority !== undefined && item.priority !== null)
+        descParts.push(`Priority: P${item.priority}`);
+    if (item.tags && item.tags.length)
+        descParts.push(`Tags: ${item.tags.join(", ")}`);
+    // Join with real newlines; icsEscapeText turns them into the RFC 5545 "\n"
+    // escape sequence (escaping here directly would double-escape).
+    lines.push(`DESCRIPTION:${icsEscapeText(descParts.join("\n"))}`);
+    // Map pm priority (0 highest .. 4 lowest) onto the iCal 1..9 scale where 1
+    // is highest. Leave unset when no priority is present.
+    if (typeof item.priority === "number" && item.priority >= 0 && item.priority <= 4) {
+        const icalPriority = Math.min(9, Math.max(1, item.priority * 2 + 1));
+        lines.push(`PRIORITY:${icalPriority}`);
+    }
+    if (item.tags && item.tags.length) {
+        lines.push(`CATEGORIES:${item.tags.map(icsEscapeText).join(",")}`);
+    }
+    // Closed/canceled items are recorded as CANCELLED so subscribers can hide
+    // them; everything else is CONFIRMED.
+    const cancelled = item.status === "closed" || item.status === "canceled";
+    lines.push(`STATUS:${cancelled ? "CANCELLED" : "CONFIRMED"}`);
+    lines.push("END:VEVENT");
+    return lines.map(foldLine).join("\r\n");
+}
+// Build a complete VCALENDAR document from pm items. Items without a usable
+// deadline are skipped. Output uses CRLF line endings per RFC 5545 §3.1.
+export function buildIcsCalendar(items, opts = {}) {
+    const now = opts.now ?? new Date();
+    const dtstamp = formatUtcTimestamp(now);
+    const uidDomain = (opts.uidDomain ?? "pm-web").replace(/[^A-Za-z0-9._-]/g, "-");
+    const calName = opts.calendarName ?? "pm-web";
+    const head = [
+        "BEGIN:VCALENDAR",
+        "VERSION:2.0",
+        "PRODID:-//pm-web//pm-cli calendar//EN",
+        "CALSCALE:GREGORIAN",
+        "METHOD:PUBLISH",
+        `X-WR-CALNAME:${icsEscapeText(calName)}`,
+        `NAME:${icsEscapeText(calName)}`,
+    ];
+    const events = [];
+    for (const item of items) {
+        const vevent = itemToVevent(item, { uidDomain, dtstamp });
+        if (vevent)
+            events.push(vevent);
+    }
+    const all = [...head.map(foldLine), ...events, "END:VCALENDAR"];
+    // Trailing CRLF is conventional and accepted by all major parsers.
+    return all.join("\r\n") + "\r\n";
+}
+//# sourceMappingURL=ical.js.map

package/dist/ical.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ical.js","sourceRoot":"","sources":["../src/ical.ts"],"names":[],"mappings":"AAAA,sEAAsE;AACtE,EAAE;AACF,8EAA8E;AAC9E,+EAA+E;AAC/E,iDAAiD;AAwBjD,yEAAyE;AACzE,sCAAsC;AACtC,MAAM,UAAU,aAAa,CAAC,KAAa;IACzC,OAAO,KAAK;SACT,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC;SACtB,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC;SACpB,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC;SACpB,OAAO,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;AACnC,CAAC;AAED,6EAA6E;AAC7E,+EAA+E;AAC/E,0CAA0C;AAC1C,MAAM,UAAU,QAAQ,CAAC,IAAY;IACnC,IAAI,IAAI,CAAC,MAAM,IAAI,EAAE;QAAE,OAAO,IAAI,CAAC;IACnC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,SAAS,GAAG,IAAI,CAAC;IACrB,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IACnC,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAChC,OAAO,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5B,gEAAgE;QAChE,KAAK,CAAC,IAAI,CAAC,GAAG,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QACzC,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAClC,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AAC5B,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,kBAAkB,CAAC,CAAO;IACxC,MAAM,CAAC,GAAG,CAAC,CAAS,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC3D,OAAO,CACL,GAAG,CAAC,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,EAAE;QACpE,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC,GAAG,CACxE,CAAC;AACJ,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,eAAe,CAAC,CAAO;IACrC,MAAM,CAAC,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACpD,OAAO,GAAG,CAAC,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,EAAE,CAAC;AAC9E,CAAC;AAED,+EAA+E;AAC/E,sEAAsE;AACtE,SAAS,aAAa,CAAC,GAAW;IAChC,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IAC3B,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC1B,MAAM,QAAQ,GAAG,qBAAqB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACrD,MAAM,CAAC,GAAG,IAAI,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,OAAO,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IAChE,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3C,oEAAoE;IACpE,2EAA2E;IAC3E,wEAAwE;IACxE,8BAA8B;IAC9B,MAAM,aAAa,GACjB,CAAC,CAAC,WAAW,EAAE,KAAK,CAAC;QACrB,CAAC,CAAC,aAAa,EAAE,KAAK,CAAC;QACvB,CAAC,CAAC,aAAa,EAAE,KAAK,CAAC;QACvB,CAAC,CAAC,kBAAkB,EAAE,KAAK,CAAC,CAAC;IAC/B,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,QAAQ,IAAI,aAAa,EAAE,CAAC;AACxD,CAAC;AAED,6EAA6E;AAC7E,+BAA+B;AAC/B,MAAM,UAAU,YAAY,CAC1B,IAAkB,EAClB,IAA4C;IAE5C,IAAI,CAAC,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAChC,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC5C,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IAEzB,MAAM,KAAK,GAAa,CAAC,cAAc,CAAC,CAAC;IACzC,KAAK,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;IAC/C,KAAK,CAAC,IAAI,CAAC,WAAW,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;IAEtC,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAClB,qEAAqE;QACrE,gCAAgC;QAChC,MAAM,GAAG,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAClE,KAAK,CAAC,IAAI,CAAC,sBAAsB,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACjE,KAAK,CAAC,IAAI,CAAC,oBAAoB,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACzD,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,IAAI,CAAC,WAAW,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACzD,KAAK,CAAC,IAAI,CAAC,SAAS,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACzD,CAAC;IAED,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IACzD,KAAK,CAAC,IAAI,CAAC,WAAW,aAAa,CAAC,aAAa,GAAG,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;IAEhF,MAAM,SAAS,GAAa,CAAC,WAAW,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;IACnD,IAAI,IAAI,CAAC,MAAM;QAAE,SAAS,CAAC,IAAI,CAAC,WAAW,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IAC1D,IAAI,IAAI,CAAC,QAAQ;QAAE,SAAS,CAAC,IAAI,CAAC,aAAa,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;IAChE,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI;QAAE,SAAS,CAAC,IAAI,CAAC,cAAc,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;IACzG,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM;QAAE,SAAS,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACnF,2EAA2E;IAC3E,gEAAgE;IAChE,KAAK,CAAC,IAAI,CAAC,eAAe,aAAa,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC;IAEjE,2EAA2E;IAC3E,uDAAuD;IACvD,IAAI,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,IAAI,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,IAAI,CAAC,EAAE,CAAC;QAClF,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,QAAQ,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACrE,KAAK,CAAC,IAAI,CAAC,YAAY,YAAY,EAAE,CAAC,CAAC;IACzC,CAAC;IAED,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;QAClC,KAAK,CAAC,IAAI,CAAC,cAAc,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACrE,CAAC;IAED,0EAA0E;IAC1E,sCAAsC;IACtC,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,UAAU,CAAC;IACzE,KAAK,CAAC,IAAI,CAAC,UAAU,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;IAE9D,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACzB,OAAO,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AAC1C,CAAC;AAED,4EAA4E;AAC5E,yEAAyE;AACzE,MAAM,UAAU,gBAAgB,CAAC,KAAqB,EAAE,OAAmB,EAAE;IAC3E,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC;IACnC,MAAM,OAAO,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;IACxC,MAAM,SAAS,GAAG,CAAC,IAAI,CAAC,SAAS,IAAI,QAAQ,CAAC,CAAC,OAAO,CAAC,kBAAkB,EAAE,GAAG,CAAC,CAAC;IAChF,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,IAAI,QAAQ,CAAC;IAE9C,MAAM,IAAI,GAAG;QACX,iBAAiB;QACjB,aAAa;QACb,uCAAuC;QACvC,oBAAoB;QACpB,gBAAgB;QAChB,gBAAgB,aAAa,CAAC,OAAO,CAAC,EAAE;QACxC,QAAQ,aAAa,CAAC,OAAO,CAAC,EAAE;KACjC,CAAC;IAEF,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC;QAC1D,IAAI,MAAM;YAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAClC,CAAC;IAED,MAAM,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,GAAG,MAAM,EAAE,eAAe,CAAC,CAAC;IAChE,mEAAmE;IACnE,OAAO,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC;AACnC,CAAC"}

package/dist/routes/pm.js

@@ -2,6 +2,7 @@ import { Router } from "express";
 import { requireAuth } from "../middleware/auth.js";
 import { ensureGraphExtension, runPm } from "../services/pm-runner.js";
 import { boardColumns, filterItemsByQuery } from "../board.js";
+import { buildIcsCalendar } from "../ical.js";
 import { verifyProjectAccess } from "./projects.js";
 import { addSSEClient, broadcastProjectEvent, setupSSEHeaders, broadcastPresence, updateClientView, getProjectPresence } from "../services/sse.js";
 import { v4 as uuidv4 } from "uuid";
@@ -822,6 +823,48 @@ router.get("/calendar", async (req, res) => {
     });
     res.json(result.ok ? (result.parsed || {}) : { events: [] });
 });
+// GET /api/projects/:projectId/pm/calendar.ics
+// RFC 5545 iCalendar feed of item deadlines, for subscribing in Google
+// Calendar / Outlook / Apple Calendar. Reuses the same list-all read as the
+// calendar view. Auth works via the usual token (header/cookie) or a
+// `?token=` query param, since calendar clients cannot send cookies.
+router.get("/calendar.ics", async (req, res) => {
+    const project = await verifyProject(req.user.userId, req.params["projectId"]);
+    if (!project) {
+        res.status(404).json({ error: "Project not found" });
+        return;
+    }
+    const listed = runPm({
+        args: ["list-all", "--json"],
+        userId: project.ownerUserId,
+        slug: project.slug,
+        jsonOutput: true,
+    });
+    if (!listed.ok) {
+        res.status(502).json({ error: listed.stderr || "Failed to load items" });
+        return;
+    }
+    const items = itemsFromListAll(listed.parsed)
+        .filter((i) => Boolean(i.deadline))
+        .map((i) => ({
+        id: i.id,
+        title: i.title,
+        type: i.type,
+        status: i.status,
+        priority: i.priority,
+        deadline: i.deadline,
+        assignee: i.assignee,
+        tags: i.tags,
+    }));
+    const ics = buildIcsCalendar(items, {
+        calendarName: `pm · ${project.slug}`,
+        uidDomain: `${project.slug}.pm-web`,
+    });
+    res.setHeader("Content-Type", "text/calendar; charset=utf-8");
+    res.setHeader("Content-Disposition", `attachment; filename="pm-${project.slug}.ics"`);
+    res.setHeader("Cache-Control", "no-cache");
+    res.send(ics);
+});
 // GET /api/projects/:projectId/pm/health
 router.get("/health", async (req, res) => {
     const project = await verifyProject(req.user.userId, req.params["projectId"]);