@vheins/local-memory-mcp 0.18.8 → 0.18.10

package/dist/{chunk-PXTBSGN4.js → chunk-YACQ3MHF.js}

@@ -81,8 +81,8 @@ function loadServerInstructions() {
 // src/mcp/capabilities.ts
 var __dirname2 = path2.dirname(fileURLToPath2(import.meta.url));
 var pkgVersion = "0.1.0";
-if ("0.18.8") {
-  pkgVersion = "0.18.8";
+if ("0.18.10") {
+  pkgVersion = "0.18.10";
 } else {
   let searchDir = __dirname2;
   for (let i = 0; i < 5; i++) {
@@ -367,7 +367,6 @@ var MigrationManager = class {
       );
 
       CREATE INDEX IF NOT EXISTS idx_tasks_repo ON tasks(repo);
-      CREATE INDEX IF NOT EXISTS idx_tasks_code ON tasks(task_code);
       CREATE INDEX IF NOT EXISTS idx_tasks_status ON tasks(status);
       CREATE INDEX IF NOT EXISTS idx_tasks_phase ON tasks(phase);
       CREATE INDEX IF NOT EXISTS idx_tasks_priority ON tasks(priority);
@@ -666,44 +665,32 @@ var MigrationManager = class {
       CREATE INDEX IF NOT EXISTS idx_memories_is_global ON memories(is_global);
       CREATE INDEX IF NOT EXISTS idx_coding_standards_hit_count ON coding_standards(hit_count);
     `);
-    try {
-      this.exec(`CREATE UNIQUE INDEX IF NOT EXISTS idx_tasks_code_owner_repo ON tasks(owner, repo, task_code);`);
-    } catch {
-      const dupRows = this.all(`
-				SELECT task_code, owner, repo, COUNT(*) as cnt
-				FROM tasks
-				GROUP BY owner, repo, task_code
-				HAVING cnt > 1
-			`);
-      if (dupRows.length > 0) {
-        console.log(`Found ${dupRows.length} duplicate task_code(s). Deduplicating...`);
-        for (const dup of dupRows) {
-          const idsToDelete = this.all(
-            `SELECT t1.id FROM tasks t1
-						 WHERE t1.owner = ? AND t1.repo = ? AND t1.task_code = ?
-						 AND t1.id != (
-							 SELECT t2.id FROM tasks t2
-							 WHERE t2.owner = ? AND t2.repo = ? AND t2.task_code = ?
-							 ORDER BY t2.updated_at DESC
-							 LIMIT 1
-						 )`,
-            dup.owner,
-            dup.repo,
-            dup.task_code,
-            dup.owner,
-            dup.repo,
-            dup.task_code
-          );
-          for (const row of idsToDelete) {
-            this.run("DELETE FROM task_comments WHERE task_id = ?", row.id);
-            this.run("DELETE FROM tasks WHERE id = ?", row.id);
-          }
-          console.log(`  Deduplicated ${dup.task_code}: kept 1, removed ${idsToDelete.length}`);
+    const dupRows = this.all(`
+			SELECT owner, repo, task_code, COUNT(*) as cnt
+			FROM tasks
+			GROUP BY owner, repo, task_code
+			HAVING cnt > 1
+		`);
+    if (dupRows.length > 0) {
+      console.log(`Found ${dupRows.length} duplicate task_code(s). Deduplicating by suffix...`);
+      for (const dup of dupRows) {
+        const rows = this.all(
+          `SELECT id, task_code, created_at FROM tasks
+					 WHERE owner = ? AND repo = ? AND task_code = ?
+					 ORDER BY created_at ASC, id ASC`,
+          dup.owner,
+          dup.repo,
+          dup.task_code
+        );
+        for (let i = 1; i < rows.length; i++) {
+          const newCode = `${dup.task_code}-${i + 1}`;
+          this.run("UPDATE tasks SET task_code = ? WHERE id = ?", newCode, rows[i].id);
         }
+        console.log(`  Deduplicated ${dup.task_code}: kept 1 (${rows[0].id}), renamed ${rows.length - 1} rows`);
       }
-      this.exec(`CREATE UNIQUE INDEX IF NOT EXISTS idx_tasks_code_owner_repo ON tasks(owner, repo, task_code);`);
-      console.log("UNIQUE INDEX on (owner, repo, task_code) created after deduplication.");
     }
+    this.exec(`CREATE UNIQUE INDEX IF NOT EXISTS idx_tasks_code_owner_repo ON tasks(owner, repo, task_code);`);
+    this.exec("DROP INDEX IF EXISTS idx_tasks_code;");
     try {
       this.run("UPDATE tasks SET task_code = substr(id, 1, 8) WHERE task_code IS NULL");
     } catch {
@@ -1332,8 +1319,14 @@ var MemoryEntity = class extends BaseEntity {
     const row = this.get("SELECT * FROM memories WHERE id = ?", [id]);
     return row ? this.rowToMemoryEntry(row) : null;
   }
-  getByCode(code) {
-    const row = this.get("SELECT * FROM memories WHERE code = ?", [code]);
+  getByCode(code, owner, repo) {
+    let sql = "SELECT * FROM memories WHERE code = ?";
+    const params = [code];
+    if (owner && repo) {
+      sql += " AND owner = ? AND repo = ?";
+      params.push(owner, repo);
+    }
+    const row = this.get(sql, params);
     return row ? this.rowToMemoryEntry(row) : null;
   }
   getByIdWithStats(id) {
@@ -2099,10 +2092,27 @@ var TaskEntity = class extends BaseEntity {
     );
     return new Set(rows.map((r) => r.task_code));
   }
+  /**
+   * Bulk inserts tasks into the database within a single transaction.
+   * Pre-deduplicates against existing task_codes before the transaction.
+   * Rows whose task_code already exists in the DB are silently skipped (skip-and-continue).
+   * The per-row INSERT has no try/catch since all rows are pre-validated.
+   *
+   * @param tasks - Array of tasks to insert
+   * @returns Number of tasks actually inserted (excluding skipped duplicates)
+   */
   bulkInsertTasks(tasks) {
+    if (tasks.length === 0) return 0;
+    const owner = tasks[0].owner || "";
+    const repo = tasks[0].repo;
+    const codes = tasks.map((t) => t.task_code);
+    const existingCodes = this.getExistingTaskCodes(owner, repo, codes);
     return this.transaction(() => {
       let count = 0;
       for (const task of tasks) {
+        if (existingCodes.has(task.task_code)) {
+          continue;
+        }
         this.run(
           `INSERT INTO tasks (
 						id, repo, owner, task_code, phase, title, description, status, priority,
@@ -2753,8 +2763,14 @@ var StandardEntity = class extends BaseEntity {
     const row = this.get("SELECT * FROM coding_standards WHERE id = ?", [id]);
     return row ? this.rowToEntry(row) : null;
   }
-  getByCode(code) {
-    const row = this.get("SELECT * FROM coding_standards WHERE code = ?", [code]);
+  getByCode(code, owner, repo) {
+    let sql = "SELECT * FROM coding_standards WHERE code = ?";
+    const params = [code];
+    if (owner && repo) {
+      sql += " AND owner = ? AND repo = ?";
+      params.push(owner, repo);
+    }
+    const row = this.get(sql, params);
     return row ? this.rowToEntry(row) : null;
   }
   search(options) {
@@ -3642,6 +3658,8 @@ var MemoryStoreSchema = z.object({
 var MemoryUpdateSchema = z.object({
   id: z.string().uuid().optional(),
   code: z.string().max(20).optional(),
+  owner: z.string().min(1),
+  repo: z.string().min(1).transform(normalizeRepo),
   type: MemoryTypeSchema.optional(),
   title: z.string().min(3).max(255).optional(),
   content: z.string().min(10).optional(),
@@ -3680,6 +3698,8 @@ var MemorySearchSchema = z.object({
 var MemoryAcknowledgeSchema = z.object({
   memory_id: z.string().uuid().optional(),
   code: z.string().max(20).optional(),
+  owner: z.string().min(1),
+  repo: z.string().min(1).transform(normalizeRepo),
   status: z.enum(["used", "irrelevant", "contradictory"]),
   application_context: z.string().min(10).optional(),
   structured: z.boolean().default(false)
@@ -3694,8 +3714,8 @@ var MemoryRecapSchema = z.object({
   structured: z.boolean().default(false)
 });
 var MemoryDeleteSchema = z.object({
-  owner: z.string().optional().default(""),
-  repo: z.string().min(1).transform(normalizeRepo).optional(),
+  owner: z.string().min(1),
+  repo: z.string().min(1).transform(normalizeRepo),
   id: z.string().uuid().optional(),
   ids: z.array(z.string().uuid()).min(1).optional(),
   code: z.string().max(20).optional(),
@@ -3854,10 +3874,20 @@ var TaskUpdateSchema = z.object({
 }).refine((data) => Object.keys(data).length > 2, {
   message: "At least one field besides repo and id/ids must be provided for update"
 });
+var TaskStatusValues = TaskStatusSchema.options;
+var TaskStatusListSchema = z.string().refine(
+  (val) => {
+    if (val === "all") return true;
+    const parts = val.split(",").map((s) => s.trim()).filter(Boolean);
+    if (parts.length === 0) return false;
+    return parts.every((p) => TaskStatusValues.includes(p));
+  },
+  { message: "status must be 'all' or a comma-separated list of valid TaskStatus values" }
+);
 var TaskListSchema = z.object({
   owner: z.string().min(1),
   repo: z.string().min(1).transform(normalizeRepo),
-  status: z.string().optional(),
+  status: TaskStatusListSchema.default("backlog,pending,in_progress,blocked"),
   phase: z.string().optional(),
   query: z.string().optional(),
   limit: z.number().min(1).max(100).default(15),
@@ -3888,6 +3918,8 @@ var TaskDeleteSchema = z.object({
 var MemoryDetailSchema = z.object({
   id: z.string().uuid().optional(),
   code: z.string().max(20).optional(),
+  owner: z.string().min(1),
+  repo: z.string().min(1).transform(normalizeRepo),
   structured: z.boolean().default(false)
 }).refine((data) => data.id !== void 0 || data.code !== void 0, {
   message: "Either id or code must be provided"
@@ -3895,13 +3927,15 @@ var MemoryDetailSchema = z.object({
 var StandardDetailSchema = z.object({
   id: z.string().uuid().optional(),
   code: z.string().max(20).optional(),
+  owner: z.string().min(1),
+  repo: z.string().min(1).transform(normalizeRepo),
   structured: z.boolean().default(false)
 }).refine((data) => data.id !== void 0 || data.code !== void 0, {
   message: "Either id or code must be provided"
 });
 var StandardDeleteSchema = z.object({
-  owner: z.string().optional().default(""),
-  repo: z.string().min(1).transform(normalizeRepo).optional(),
+  owner: z.string().min(1),
+  repo: z.string().min(1).transform(normalizeRepo),
   id: z.string().uuid().optional(),
   ids: z.array(z.string().uuid()).min(1).optional(),
   code: z.string().max(20).optional(),
@@ -4028,8 +4062,8 @@ var StandardUpdateSchema = z.object({
   version: z.string().optional(),
   language: z.string().optional(),
   stack: z.array(z.string().min(1)).min(1).optional(),
-  owner: z.string().optional().default(""),
-  repo: z.string().transform(normalizeRepo).optional(),
+  owner: z.string().min(1),
+  repo: z.string().transform(normalizeRepo),
   is_global: z.boolean().optional(),
   tags: z.array(z.string().min(1)).min(1).optional(),
   metadata: z.record(z.string(), z.any()).refine((value) => Object.keys(value).length > 0, { message: "metadata must contain at least one key" }).optional(),
@@ -4076,7 +4110,7 @@ var TOOL_DEFINITIONS = [
       properties: {
         owner: {
           type: "string",
-          description: "GitHub repository owner (username or organization). For repo 'vheins/my-repo', owner='vheins'. CRITICAL: this is the GitHub owner, NOT the agent name. Do NOT use the calling agent's name."
+          description: "Organization/namespace (e.g., GitHub org or username)"
         },
         repo: { type: "string", description: "Repository/project name. Optional when a single MCP root is active." },
         objective: { type: "string", minLength: 5, description: "Question or synthesis objective." },
@@ -4124,10 +4158,7 @@ var TOOL_DEFINITIONS = [
     inputSchema: {
       type: "object",
       properties: {
-        owner: {
-          type: "string",
-          description: "GitHub repository owner (username or organization). For repo 'vheins/my-repo', owner='vheins'. CRITICAL: this is the GitHub owner, NOT the agent name. Do NOT use the calling agent's name."
-        },
+        owner: { type: "string", description: "Organization/namespace (e.g., GitHub org or username)" },
         repo: {
           type: "string",
           description: "Repository name. Optional when it can be inferred from MCP roots or elicited from the user."
@@ -4200,10 +4231,7 @@ var TOOL_DEFINITIONS = [
     inputSchema: {
       type: "object",
       properties: {
-        owner: {
-          type: "string",
-          description: "GitHub repository owner (username or organization). For repo 'vheins/my-repo', owner='vheins'. CRITICAL: this is the GitHub owner, NOT the agent name. Do NOT use the calling agent's name."
-        },
+        owner: { type: "string", description: "Organization/namespace (e.g., GitHub org or username)" },
         repo: { type: "string", description: "Repository name" },
         id: { type: "string", format: "uuid", description: "Task ID (optional if task_code is provided)" },
         task_code: { type: "string", description: "Task code (e.g. TASK-001) (optional if id is provided)" },
@@ -4266,10 +4294,7 @@ var TOOL_DEFINITIONS = [
         scope: {
           type: "object",
           properties: {
-            owner: {
-              type: "string",
-              description: "GitHub repository owner (username or organization). For repo 'vheins/my-repo', owner='vheins'. CRITICAL: this is the GitHub owner, NOT the agent name. Do NOT use the calling agent's name."
-            },
+            owner: { type: "string", description: "Organization/namespace (e.g., GitHub org or username)" },
             repo: { type: "string", description: "Repository/project name" },
             branch: { type: "string", description: "Git branch this memory relates to" },
             folder: { type: "string", description: "Subdirectory within the repo" },
@@ -4318,10 +4343,7 @@ var TOOL_DEFINITIONS = [
               scope: {
                 type: "object",
                 properties: {
-                  owner: {
-                    type: "string",
-                    description: "GitHub repository owner (username or organization). For repo 'vheins/my-repo', owner='vheins'. CRITICAL: this is the GitHub owner, NOT the agent name. Do NOT use the calling agent's name."
-                  },
+                  owner: { type: "string", description: "Organization/namespace (e.g., GitHub org or username)" },
                   repo: { type: "string", description: "Repository/project name" },
                   branch: { type: "string", description: "Git branch this memory relates to" },
                   folder: { type: "string", description: "Subdirectory within the repo" },
@@ -4462,10 +4484,7 @@ var TOOL_DEFINITIONS = [
           description: "Search keyword to match against memory titles and content"
         },
         prompt: { type: "string", description: "Natural language prompt for semantic search" },
-        owner: {
-          type: "string",
-          description: "GitHub repository owner (username or organization). For repo 'vheins/my-repo', owner='vheins'. CRITICAL: this is the GitHub owner, NOT the agent name. Do NOT use the calling agent's name."
-        },
+        owner: { type: "string", description: "Organization/namespace (e.g., GitHub org or username)" },
         repo: { type: "string", description: "Repository/project name" },
         current_tags: {
           type: "array",
@@ -4493,10 +4512,7 @@ var TOOL_DEFINITIONS = [
         scope: {
           type: "object",
           properties: {
-            owner: {
-              type: "string",
-              description: "GitHub repository owner (username or organization). For repo 'vheins/my-repo', owner='vheins'. CRITICAL: this is the GitHub owner, NOT the agent name. Do NOT use the calling agent's name."
-            },
+            owner: { type: "string", description: "Organization/namespace (e.g., GitHub org or username)" },
             repo: { type: "string", description: "Repository/project name" },
             branch: { type: "string", description: "Git branch filter" },
             folder: { type: "string", description: "Subdirectory filter" },
@@ -4552,10 +4568,7 @@ var TOOL_DEFINITIONS = [
     inputSchema: {
       type: "object",
       properties: {
-        owner: {
-          type: "string",
-          description: "GitHub repository owner (username or organization). For repo 'vheins/my-repo', owner='vheins'. CRITICAL: this is the GitHub owner, NOT the agent name. Do NOT use the calling agent's name."
-        },
+        owner: { type: "string", description: "Organization/namespace (e.g., GitHub org or username)" },
         repo: { type: "string", description: "Repository/project name" },
         signals: {
           type: "array",
@@ -4684,10 +4697,7 @@ var TOOL_DEFINITIONS = [
     inputSchema: {
       type: "object",
       properties: {
-        owner: {
-          type: "string",
-          description: "GitHub repository owner (username or organization). For repo 'vheins/my-repo', owner='vheins'. CRITICAL: this is the GitHub owner, NOT the agent name. Do NOT use the calling agent's name."
-        },
+        owner: { type: "string", description: "Organization/namespace (e.g., GitHub org or username)" },
         repo: { type: "string", description: "Repository/project name (required)" },
         limit: {
           type: "number",
@@ -4761,10 +4771,7 @@ var TOOL_DEFINITIONS = [
     inputSchema: {
       type: "object",
       properties: {
-        owner: {
-          type: "string",
-          description: "GitHub repository owner (username or organization). For repo 'vheins/my-repo', owner='vheins'. CRITICAL: this is the GitHub owner, NOT the agent name. Do NOT use the calling agent's name."
-        },
+        owner: { type: "string", description: "Organization/namespace (e.g., GitHub org or username)" },
         repo: { type: "string", description: "Repository/project name" },
         task_code: { type: "string", description: "Unique task code (e.g. TASK-001) (Required for single task)" },
         phase: { type: "string", description: "Project phase (Required for single task)" },
@@ -4877,10 +4884,7 @@ var TOOL_DEFINITIONS = [
     inputSchema: {
       type: "object",
       properties: {
-        owner: {
-          type: "string",
-          description: "GitHub repository owner (username or organization). For repo 'vheins/my-repo', owner='vheins'. CRITICAL: this is the GitHub owner, NOT the agent name. Do NOT use the calling agent's name."
-        },
+        owner: { type: "string", description: "Organization/namespace (e.g., GitHub org or username)" },
         repo: { type: "string", description: "Repository name" },
         id: { type: "string", format: "uuid", description: "Task ID (for single update)" },
         ids: { type: "array", items: { type: "string", format: "uuid" }, description: "Task IDs (for bulk update)" },
@@ -4973,10 +4977,7 @@ var TOOL_DEFINITIONS = [
     inputSchema: {
       type: "object",
       properties: {
-        owner: {
-          type: "string",
-          description: "GitHub repository owner (username or organization). For repo 'vheins/my-repo', owner='vheins'. CRITICAL: this is the GitHub owner, NOT the agent name. Do NOT use the calling agent's name."
-        },
+        owner: { type: "string", description: "Organization/namespace (e.g., GitHub org or username)" },
         repo: { type: "string", description: "Repository name" },
         id: {
           type: "string",
@@ -5005,7 +5006,7 @@ var TOOL_DEFINITIONS = [
   {
     name: "task-list",
     title: "Task List",
-    description: "PRIMARY navigation and search tool for tasks. Returns a compact tabular list of tasks (id, task_code, title, status, priority, updated_at, comments_count). Defaults to in_progress and pending tasks. Use 'query' to filter by code, title, or description. Use 'status' (comma-separated) for specific filters, or 'all' for all statuses. AGENTS: call this once at start, pick ONE task, then call task-detail.",
+    description: "PRIMARY navigation and search tool for tasks. Returns a compact tabular list of tasks (id, task_code, title, status, priority, updated_at, comments_count). Defaults to backlog, pending, in_progress, and blocked tasks. Use 'status' (comma-separated) to override or 'all' for all statuses. AGENTS: call this once at start, pick ONE task, then call task-detail.",
     annotations: {
       readOnlyHint: true,
       idempotentHint: true,
@@ -5014,17 +5015,14 @@ var TOOL_DEFINITIONS = [
     inputSchema: {
       type: "object",
       properties: {
-        owner: {
-          type: "string",
-          description: "GitHub repository owner (username or organization). For repo 'vheins/my-repo', owner='vheins'. CRITICAL: this is the GitHub owner, NOT the agent name. Do NOT use the calling agent's name."
-        },
+        owner: { type: "string", description: "Organization/namespace (e.g., GitHub org or username)" },
         repo: {
           type: "string",
           description: "Repository/project name (required)"
         },
         status: {
           type: "string",
-          default: "in_progress,pending",
+          default: "backlog,pending,in_progress,blocked",
           description: "Comma-separated status filter (backlog, pending, in_progress, completed, canceled, blocked) or 'all' for all statuses. Defaults to 'backlog,pending,in_progress,blocked'."
         },
         phase: {
@@ -5094,10 +5092,7 @@ var TOOL_DEFINITIONS = [
     inputSchema: {
       type: "object",
       properties: {
-        owner: {
-          type: "string",
-          description: "GitHub repository owner (username or organization). For repo 'vheins/my-repo', owner='vheins'. CRITICAL: this is the GitHub owner, NOT the agent name. Do NOT use the calling agent's name."
-        },
+        owner: { type: "string", description: "Organization/namespace (e.g., GitHub org or username)" },
         repo: { type: "string", description: "Repository/project name" },
         query: {
           type: "string",
@@ -5155,10 +5150,7 @@ var TOOL_DEFINITIONS = [
     inputSchema: {
       type: "object",
       properties: {
-        owner: {
-          type: "string",
-          description: "GitHub repository owner (username or organization). For repo 'vheins/my-repo', owner='vheins'. CRITICAL: this is the GitHub owner, NOT the agent name. Do NOT use the calling agent's name."
-        },
+        owner: { type: "string", description: "Organization/namespace (e.g., GitHub org or username)" },
         repo: { type: "string", description: "Repository/project name" },
         from_agent: { type: "string", description: "Agent creating the handoff" },
         to_agent: { type: "string", description: "Optional target agent" },
@@ -5233,10 +5225,7 @@ var TOOL_DEFINITIONS = [
     inputSchema: {
       type: "object",
       properties: {
-        owner: {
-          type: "string",
-          description: "GitHub repository owner (username or organization). For repo 'vheins/my-repo', owner='vheins'. CRITICAL: this is the GitHub owner, NOT the agent name. Do NOT use the calling agent's name."
-        },
+        owner: { type: "string", description: "Organization/namespace (e.g., GitHub org or username)" },
         repo: { type: "string", description: "Repository/project name" },
         status: { type: "string", enum: ["pending", "accepted", "rejected", "expired"] },
         from_agent: { type: "string" },
@@ -5286,10 +5275,7 @@ var TOOL_DEFINITIONS = [
     inputSchema: {
       type: "object",
       properties: {
-        owner: {
-          type: "string",
-          description: "GitHub repository owner (username or organization). For repo 'vheins/my-repo', owner='vheins'. CRITICAL: this is the GitHub owner, NOT the agent name. Do NOT use the calling agent's name."
-        },
+        owner: { type: "string", description: "Organization/namespace (e.g., GitHub org or username)" },
         repo: { type: "string", description: "Repository/project name" },
         task_id: {
           type: "string",
@@ -5333,10 +5319,7 @@ var TOOL_DEFINITIONS = [
     inputSchema: {
       type: "object",
       properties: {
-        owner: {
-          type: "string",
-          description: "GitHub repository owner (username or organization). For repo 'vheins/my-repo', owner='vheins'. CRITICAL: this is the GitHub owner, NOT the agent name. Do NOT use the calling agent's name."
-        },
+        owner: { type: "string", description: "Organization/namespace (e.g., GitHub org or username)" },
         repo: { type: "string", description: "Repository/project name" },
         agent: { type: "string", description: "Optional agent filter" },
         active_only: { type: "boolean", description: "When true, return only unreleased claims" },
@@ -5385,10 +5368,7 @@ var TOOL_DEFINITIONS = [
     inputSchema: {
       type: "object",
       properties: {
-        owner: {
-          type: "string",
-          description: "GitHub repository owner (username or organization). For repo 'vheins/my-repo', owner='vheins'. CRITICAL: this is the GitHub owner, NOT the agent name. Do NOT use the calling agent's name."
-        },
+        owner: { type: "string", description: "Organization/namespace (e.g., GitHub org or username)" },
         repo: { type: "string", description: "Repository name" },
         task_id: {
           type: "string",
@@ -5426,10 +5406,7 @@ var TOOL_DEFINITIONS = [
     inputSchema: {
       type: "object",
       properties: {
-        owner: {
-          type: "string",
-          description: "GitHub repository owner (username or organization). For repo 'vheins/my-repo', owner='vheins'. CRITICAL: this is the GitHub owner, NOT the agent name. Do NOT use the calling agent's name."
-        },
+        owner: { type: "string", description: "Organization/namespace (e.g., GitHub org or username)" },
         name: { type: "string", minLength: 3, maxLength: 255, description: "Human-readable standard name" },
         content: {
           type: "string",
@@ -6413,7 +6390,7 @@ async function handleTaskClaim(args, storage) {
   const { owner, repo, task_id, task_code, agent, role, metadata, structured } = validated;
   let taskId = task_id;
   let resolvedTaskCode;
-  let task = null;
+  let task;
   if (taskId) {
     task = storage.tasks.getTaskById(taskId);
     if (!task || task.repo !== repo) {

package/dist/dashboard/server.js

@@ -16,7 +16,7 @@ import {
   handleTaskClaim,
   listResources,
   logger
-} from "../chunk-PXTBSGN4.js";
+} from "../chunk-YACQ3MHF.js";
 
 // src/dashboard/server.ts
 import express from "express";
@@ -726,9 +726,9 @@ var TasksController = class {
     try {
       await db.refresh();
       const attributes = getAttributes(req);
-      const { repo, task_code, title } = attributes;
+      const { repo, task_code, title, owner } = attributes;
       if (!repo || !task_code || !title) return res.status(400).json(jsonApiError("Required fields missing", 400));
-      if (db.tasks.isTaskCodeDuplicate("", repo, task_code))
+      if (db.tasks.isTaskCodeDuplicate(owner || "", repo, task_code))
         return res.status(400).json(jsonApiError("Duplicate task_code", 400));
       const id = randomUUID2();
       await db.withWrite(() => {
@@ -1320,7 +1320,8 @@ try {
 } catch {
 }
 var app = express();
-var PORT = process.env.PORT || 3456;
+var PORT = Number(process.env.PORT) || 3456;
+var HOST = process.env.DASHBOARD_HOST || "127.0.0.1";
 app.use(express.json({ limit: process.env.DASHBOARD_JSON_LIMIT || "50mb" }));
 app.use((req, res, next) => {
   const start = Date.now();
@@ -1399,8 +1400,17 @@ if (process.env.DASHBOARD_ENABLE_MCP === "true") {
   mcpClient.start().catch((e) => logger.error("MCP Client failed", { error: e.message }));
 }
 function startServer() {
-  const server = app.listen(PORT, () => {
-    console.log(`${(/* @__PURE__ */ new Date()).toISOString()} DASHBOARD_STARTING v${pkg2.version} on port ${PORT}`);
+  const server = app.listen(PORT, HOST, () => {
+    const addr = server.address();
+    const bindAddr = typeof addr === "string" ? addr : addr?.address ?? HOST;
+    if (bindAddr !== "127.0.0.1" && bindAddr !== "::1") {
+      logger.warn("Dashboard bound to non-loopback address \u2014 access is exposed on the network", {
+        address: bindAddr,
+        port: PORT,
+        suggestion: "Set DASHBOARD_HOST=127.0.0.1 to restrict to localhost"
+      });
+    }
+    console.log(`${(/* @__PURE__ */ new Date()).toISOString()} DASHBOARD_STARTING v${pkg2.version} on ${bindAddr}:${PORT}`);
   });
   server.on("error", (err) => {
     if (err.code === "EADDRINUSE") {

package/dist/mcp/server.js

@@ -63,7 +63,7 @@ import {
   toContextSlug,
   updateSessionFromInitialize,
   updateSessionRoots
-} from "../chunk-PXTBSGN4.js";
+} from "../chunk-YACQ3MHF.js";
 
 // src/mcp/server.ts
 import readline from "readline";
@@ -230,10 +230,10 @@ function hasMetadataLikeTitle(title) {
   const normalized = title.trim();
   return /^\[[^\]]{0,200}(agent:|role:|model:|\d{4}-\d{2}-\d{2}|source_)[^\]]*\]/i.test(normalized);
 }
-function resolveMemorySupersedes(value, db2) {
+function resolveMemorySupersedes(value, db2, owner, repo) {
   if (!value) return null;
   if (UUID_REGEX.test(value)) return value;
-  const memory = db2.memories.getByCode(value);
+  const memory = db2.memories.getByCode(value, owner, repo);
   if (!memory) throw new Error(`supersedes: memory with code '${value}' not found`);
   return memory.id;
 }
@@ -246,7 +246,7 @@ async function storeSingleMemory(params, db2, vectors2) {
   const now = (/* @__PURE__ */ new Date()).toISOString();
   const createdAtTime = new Date(now).getTime();
   const expires_at = params.ttlDays != null ? new Date(createdAtTime + params.ttlDays * 864e5).toISOString() : null;
-  const resolvedSupersedes = resolveMemorySupersedes(params.supersedes, db2);
+  const resolvedSupersedes = resolveMemorySupersedes(params.supersedes, db2, params.scope.owner, params.scope.repo);
   if (!resolvedSupersedes && params.type !== "task_archive") {
     const conflict = await db2.memoryVectors.checkConflicts(
       params.content,
@@ -341,7 +341,7 @@ async function handleMemoryStore(params, db2, vectors2) {
       }
       const createdAtTime = new Date(now).getTime();
       const expires_at = mem.ttlDays != null ? new Date(createdAtTime + mem.ttlDays * 864e5).toISOString() : null;
-      const resolvedSupersedes = resolveMemorySupersedes(mem.supersedes, db2);
+      const resolvedSupersedes = resolveMemorySupersedes(mem.supersedes, db2, mem.scope.owner, mem.scope.repo);
       if (!resolvedSupersedes && mem.type !== "task_archive") {
         const conflict = await db2.memoryVectors.checkConflicts(
           mem.content,
@@ -451,10 +451,10 @@ function hasMetadataLikeTitle2(title) {
   const normalized = title.trim();
   return /^\[[^\]]{0,200}(agent:|role:|model:|\d{4}-\d{2}-\d{2}|source_)[^\]]*\]/i.test(normalized);
 }
-function resolveMemorySupersedes2(value, db2) {
+function resolveMemorySupersedes2(value, db2, owner, repo) {
   if (!value) return null;
   if (UUID_REGEX2.test(value)) return value;
-  const memory = db2.memories.getByCode(value);
+  const memory = db2.memories.getByCode(value, owner, repo);
   if (!memory) throw new Error(`supersedes: memory with code '${value}' not found`);
   return memory.id;
 }
@@ -462,7 +462,7 @@ async function handleMemoryUpdate(params, db2, vectors2) {
   const validated = MemoryUpdateSchema.parse(params);
   let resolvedId = validated.id;
   if (!resolvedId && validated.code) {
-    const byCode = db2.memories.getByCode(validated.code);
+    const byCode = db2.memories.getByCode(validated.code, validated.owner, validated.repo);
     if (!byCode) throw new Error(`Memory not found: ${validated.code}`);
     resolvedId = byCode.id;
   } else if (!resolvedId) {
@@ -491,7 +491,8 @@ async function handleMemoryUpdate(params, db2, vectors2) {
   if (validated.agent !== void 0) updates.agent = validated.agent;
   if (validated.role !== void 0) updates.role = validated.role;
   if (validated.status !== void 0) updates.status = validated.status;
-  if (validated.supersedes !== void 0) updates.supersedes = resolveMemorySupersedes2(validated.supersedes, db2);
+  if (validated.supersedes !== void 0)
+    updates.supersedes = resolveMemorySupersedes2(validated.supersedes, db2, existing.scope.owner, existing.scope.repo);
   if (validated.tags !== void 0) updates.tags = validated.tags;
   if (validated.metadata !== void 0) updates.metadata = validated.metadata;
   if (validated.is_global !== void 0) updates.is_global = validated.is_global;
@@ -941,16 +942,7 @@ Comments & History:
 }
 async function handleTaskList(args, storage) {
   const validated = TaskListSchema.parse(args);
-  const {
-    owner,
-    repo,
-    status = "backlog,pending,in_progress,blocked",
-    phase,
-    query,
-    limit,
-    offset,
-    structured: isStructuredRequest = false
-  } = validated;
+  const { owner, repo, status, phase, query, limit, offset, structured: isStructuredRequest = false } = validated;
   let statuses = [];
   if (status !== "all") {
     statuses = status.split(",").map((s) => s.trim()).filter(Boolean);
@@ -1685,18 +1677,18 @@ async function executeSamplingTool(toolName, rawInput, db2, vectors2, owner) {
 // src/mcp/tools/memory.delete.ts
 async function handleMemoryDelete(params, db2, vectors2, onProgress) {
   const validated = MemoryDeleteSchema.parse(params);
-  const { id, ids, code, codes, repo, structured } = validated;
+  const { id, ids, code, codes, owner, repo, structured } = validated;
   const resolvedIds = [];
   if (ids) resolvedIds.push(...ids);
   if (id) resolvedIds.push(id);
   if (code) {
-    const entry = db2.memories.getByCode(code);
+    const entry = db2.memories.getByCode(code, owner, repo);
     if (!entry) throw new Error(`Memory not found: ${code}`);
     resolvedIds.push(entry.id);
   }
   if (codes) {
     for (const c of codes) {
-      const entry = db2.memories.getByCode(c);
+      const entry = db2.memories.getByCode(c, owner, repo);
       if (!entry) throw new Error(`Memory not found: ${c}`);
       resolvedIds.push(entry.id);
     }
@@ -1760,7 +1752,7 @@ async function handleMemoryAcknowledge(params, db2) {
   const validated = MemoryAcknowledgeSchema.parse(params);
   let memoryId = validated.memory_id;
   if (!memoryId && validated.code) {
-    const byCode = db2.memories.getByCode(validated.code);
+    const byCode = db2.memories.getByCode(validated.code, validated.owner, validated.repo);
     if (!byCode) throw new Error(`Memory not found: ${validated.code}`);
     memoryId = byCode.id;
   } else if (!memoryId) {
@@ -1798,12 +1790,12 @@ async function handleMemoryAcknowledge(params, db2) {
 // src/mcp/tools/memory.detail.ts
 async function handleMemoryDetail(args, storage) {
   const validated = MemoryDetailSchema.parse(args);
-  const { id, code } = validated;
+  const { id, code, owner, repo } = validated;
   let memory;
   if (id) {
     memory = storage.memories.getById(id);
   } else if (code) {
-    memory = storage.memories.getByCode(code);
+    memory = storage.memories.getByCode(code, owner, repo);
   }
   if (!memory) {
     throw new Error(`Memory not found: ${id || code}`);
@@ -1832,10 +1824,10 @@ async function handleMemoryDetail(args, storage) {
 // src/mcp/tools/standard.store.ts
 import { randomUUID as randomUUID3 } from "crypto";
 var UUID_REGEX4 = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
-function resolveStandardParentId(value, db2) {
+function resolveStandardParentId(value, db2, owner, repo) {
   if (!value) return null;
   if (UUID_REGEX4.test(value)) return value;
-  const standard = db2.standards.getByCode(value);
+  const standard = db2.standards.getByCode(value, owner, repo);
   if (!standard) throw new Error(`parent_id: standard with code '${value}' not found`);
   return standard.id;
 }
@@ -1877,7 +1869,7 @@ async function storeSingleStandard(params, db2, vectors2) {
     code: generateNextCode(params.owner, params.repo || "__global__", "standard", db2),
     title: params.name,
     content: params.content,
-    parent_id: resolveStandardParentId(params.parent_id, db2),
+    parent_id: resolveStandardParentId(params.parent_id, db2, params.owner, params.repo),
     context: toContextSlug(params.context || "general"),
     version: params.version || "1.0.0",
     language: params.language || null,
@@ -1960,7 +1952,7 @@ async function handleStandardStore(params, db2, vectors2) {
         code,
         title: std.name,
         content: std.content,
-        parent_id: resolveStandardParentId(std.parent_id, db2),
+        parent_id: resolveStandardParentId(std.parent_id, db2, validated.owner, validated.repo),
         context: toContextSlug(std.context || "general"),
         version: std.version || "1.0.0",
         language: std.language || null,
@@ -2242,10 +2234,10 @@ async function handleStandardSearch(params, db2, vectors2) {
 
 // src/mcp/tools/standard.update.ts
 var UUID_REGEX5 = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
-function resolveStandardParentId2(value, db2) {
+function resolveStandardParentId2(value, db2, owner, repo) {
   if (!value) return null;
   if (UUID_REGEX5.test(value)) return value;
-  const standard = db2.standards.getByCode(value);
+  const standard = db2.standards.getByCode(value, owner, repo);
   if (!standard) throw new Error(`parent_id: standard with code '${value}' not found`);
   return standard.id;
 }
@@ -2253,7 +2245,7 @@ async function handleStandardUpdate(params, db2, vectors2) {
   const validated = StandardUpdateSchema.parse(params);
   let resolvedId = validated.id;
   if (!resolvedId && validated.code) {
-    const byCode = db2.standards.getByCode(validated.code);
+    const byCode = db2.standards.getByCode(validated.code, validated.owner, validated.repo);
     if (!byCode) throw new Error(`Coding standard not found: ${validated.code}`);
     resolvedId = byCode.id;
   } else if (!resolvedId) {
@@ -2266,7 +2258,8 @@ async function handleStandardUpdate(params, db2, vectors2) {
   const updates = {};
   if (validated.name !== void 0) updates.title = validated.name;
   if (validated.content !== void 0) updates.content = validated.content;
-  if (validated.parent_id !== void 0) updates.parent_id = resolveStandardParentId2(validated.parent_id, db2);
+  if (validated.parent_id !== void 0)
+    updates.parent_id = resolveStandardParentId2(validated.parent_id, db2, existing.owner, existing.repo ?? void 0);
   if (validated.context !== void 0) updates.context = validated.context;
   if (validated.version !== void 0) updates.version = validated.version;
   if (validated.language !== void 0) updates.language = validated.language;
@@ -2308,7 +2301,7 @@ async function handleStandardUpdate(params, db2, vectors2) {
 // src/mcp/tools/standard.detail.ts
 async function handleStandardDetail(args, storage) {
   const validated = StandardDetailSchema.parse(args);
-  const standard = validated.id ? storage.standards.getById(validated.id) : storage.standards.getByCode(validated.code);
+  const standard = validated.id ? storage.standards.getById(validated.id) : storage.standards.getByCode(validated.code, validated.owner, validated.repo);
   if (!standard) {
     const identifier = validated.id ?? validated.code;
     throw new Error(`Coding standard not found: ${identifier}`);
@@ -2342,18 +2335,18 @@ async function handleStandardDetail(args, storage) {
 // src/mcp/tools/standard.delete.ts
 async function handleStandardDelete(params, db2, vectors2) {
   const validated = StandardDeleteSchema.parse(params);
-  const { id, ids, code, codes, repo, structured } = validated;
+  const { id, ids, code, codes, owner, repo, structured } = validated;
   const resolvedIds = [];
   if (ids) resolvedIds.push(...ids);
   if (id) resolvedIds.push(id);
   if (code) {
-    const entry = db2.standards.getByCode(code);
+    const entry = db2.standards.getByCode(code, owner, repo);
     if (!entry) throw new Error(`Coding standard not found: ${code}`);
     resolvedIds.push(entry.id);
   }
   if (codes) {
     for (const c of codes) {
-      const entry = db2.standards.getByCode(c);
+      const entry = db2.standards.getByCode(c, owner, repo);
       if (!entry) throw new Error(`Coding standard not found: ${c}`);
       resolvedIds.push(entry.id);
     }

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@vheins/local-memory-mcp",
-	"version": "0.18.8",
+	"version": "0.18.10",
 	"description": "MCP Local Memory Service for coding copilot agents",
 	"mcpName": "io.github.vheins/local-memory-mcp",
 	"type": "module",