@zaclinley/dsh-mailharbor 0.4.1 → 0.5.0

package/lib/index.js

@@ -469,11 +469,13 @@ var init_imap = __esm({
 
 // src/host/api.ts
 init_address();
-import { randomUUID as randomUUID2 } from "node:crypto";
+import { randomUUID as randomUUID3 } from "node:crypto";
 
 // src/host/config.ts
 import { createHash, randomUUID } from "node:crypto";
 import { existsSync, mkdirSync, readFileSync, renameSync, writeFileSync } from "node:fs";
+import { homedir as homedir2 } from "node:os";
+import { join as join2 } from "node:path";
 
 // src/host/paths.ts
 import { homedir } from "node:os";
@@ -484,6 +486,14 @@ var ACCOUNTS_DIR = join(DATA_ROOT, "accounts");
 var STATE_DIR = join(DATA_ROOT, "state");
 var REPORTS_DIR = join(DATA_ROOT, "reports");
 var LOGS_DIR = join(DATA_ROOT, "logs");
+function resolveUserPath(value, label) {
+  const text2 = value.trim();
+  if (text2 === "") throw new Error(`${label}\u4E0D\u80FD\u4E3A\u7A7A`);
+  if (text2.length > 4096) throw new Error(`${label}\u8FC7\u957F`);
+  const expanded = text2 === "~" ? homedir() : text2.startsWith("~/") ? join(homedir(), text2.slice(2)) : text2;
+  if (!isAbsolute(expanded)) throw new Error(`${label}\u5FC5\u987B\u662F\u7EDD\u5BF9\u8DEF\u5F84`);
+  return expanded;
+}
 function accountRoot(id) {
   const safe = id.replace(/[^A-Za-z0-9_-]/g, "_") || "unknown";
   return join(ACCOUNTS_DIR, safe);
@@ -512,6 +522,7 @@ var DEFAULTS = {
   },
   read: { markOnOpen: true, pollSeconds: 60 },
   render: { listLimit: 40 },
+  projects: { root: join2(homedir2(), "work", "projects") },
   oauth: {
     google: { clientId: "", redirectPort: 8765, scopes: ["https://mail.google.com/"] },
     microsoft: {
@@ -625,6 +636,7 @@ function loadConfig() {
   const aiRaw = file.ai ?? {};
   const readRaw = file.read ?? {};
   const renderRaw = file.render ?? {};
+  const projectsRaw = file.projects ?? {};
   const oauthRaw = file.oauth ?? {};
   const googleRaw = oauthRaw.google ?? {};
   const microsoftRaw = oauthRaw.microsoft ?? {};
@@ -648,6 +660,9 @@ function loadConfig() {
     render: {
       listLimit: intOr(renderRaw.listLimit, DEFAULTS.render.listLimit, 10, 200)
     },
+    projects: {
+      root: stringOr(projectsRaw.root, DEFAULTS.projects.root)
+    },
     oauth: {
       google: {
         clientId: stringOr(googleRaw.clientId, DEFAULTS.oauth.google.clientId),
@@ -731,7 +746,7 @@ function activeAccount(config) {
 init_address();
 import { createHash as createHash2 } from "node:crypto";
 import { existsSync as existsSync3, mkdirSync as mkdirSync2, writeFileSync as writeFileSync2 } from "node:fs";
-import { join as join2 } from "node:path";
+import { join as join3 } from "node:path";
 import { ImapFlow } from "imapflow";
 import { simpleParser } from "mailparser";
 import { DatabaseSync as DatabaseSync2 } from "node:sqlite";
@@ -961,6 +976,14 @@ var MailDatabase = class {
       data
     };
   }
+  /** Locate a local row by Message-ID, for links from tasks and projects. */
+  findByMessageId(messageId) {
+    const id = messageId.trim().replace(/^<|>$/g, "");
+    if (id === "") return void 0;
+    const row = this.open().prepare("SELECT id, mailbox FROM emails WHERE message_id = ? LIMIT 1").get(id);
+    if (row === void 0) return void 0;
+    return { id: Number(row.id), mailbox: String(row.mailbox ?? "") };
+  }
   /** Whether the backup already holds a message with this Message-ID. */
   hasMessageId(messageId) {
     const id = messageId.trim().replace(/^<|>$/g, "");
@@ -1058,8 +1081,8 @@ function normalizeId(value) {
 function stamp(value) {
   const date = value instanceof Date ? value : value === void 0 || value === null ? void 0 : new Date(String(value));
   if (!(date instanceof Date) || Number.isNaN(date.getTime())) return "";
-  const pad = (number) => String(number).padStart(2, "0");
-  return `${String(date.getFullYear())}-${pad(date.getMonth() + 1)}-${pad(date.getDate())} ${pad(date.getHours())}:${pad(date.getMinutes())}:${pad(date.getSeconds())}`;
+  const pad2 = (number) => String(number).padStart(2, "0");
+  return `${String(date.getFullYear())}-${pad2(date.getMonth() + 1)}-${pad2(date.getDate())} ${pad2(date.getHours())}:${pad2(date.getMinutes())}:${pad2(date.getSeconds())}`;
 }
 function abortIfNeeded(signal) {
   if (signal?.aborted === true) {
@@ -1090,8 +1113,8 @@ var BackupEngine = class {
   }
   writeAttachment(data) {
     const hash = sha256(data);
-    const dir = join2(this.attachmentsDir(), hash.slice(0, 2), hash.slice(2, 4));
-    const file = join2(dir, hash);
+    const dir = join3(this.attachmentsDir(), hash.slice(0, 2), hash.slice(2, 4));
+    const file = join3(dir, hash);
     mkdirSync2(dir, { recursive: true });
     if (!existsSync3(file)) writeFileSync2(file, data, { mode: 384 });
     return { hash, size: data.length };
@@ -1469,7 +1492,7 @@ var Router = class {
 
 // src/host/ai.ts
 import { existsSync as existsSync4, mkdirSync as mkdirSync3, readFileSync as readFileSync3, renameSync as renameSync2, writeFileSync as writeFileSync3 } from "node:fs";
-import { dirname, join as join3 } from "node:path";
+import { dirname, join as join4 } from "node:path";
 var TIMEOUT_MS = 9e4;
 var MAX_PROMPT_CHARS = 4e4;
 var SUMMARY_SYSTEM = `\u4F60\u662F\u90AE\u4EF6\u52A9\u7406\uFF0C\u670D\u52A1\u4E8E\u4E2D\u6587\u7528\u6237\u3002\u8BF7\u7528\u7B80\u4F53\u4E2D\u6587\u603B\u7ED3\u90AE\u4EF6\uFF0C\u4E25\u683C\u6309\u4E0B\u9762\u56DB\u6BB5\u8F93\u51FA\uFF0C\u4F7F\u7528\u7ED9\u5B9A\u7684\u5C0F\u6807\u9898\uFF0C\u4E0D\u8981\u8F93\u51FA\u5176\u4ED6\u5185\u5BB9\uFF1A
@@ -1534,11 +1557,21 @@ ${shared}${styleLine}`;
 \u8981\u6C42\uFF1A
 ${shared}${styleLine}`;
 };
+var TASK_SYSTEM = `\u4F60\u662F\u4EFB\u52A1\u63D0\u53D6\u52A9\u624B\u3002\u4ECE\u90AE\u4EF6\u4E2D\u63D0\u53D6\u9700\u8981\u7528\u6237\u5904\u7406\u7684\u5177\u4F53\u4E8B\u9879\u3002
+
+\u53EA\u8F93\u51FA\u4E00\u4E2A JSON \u6570\u7EC4\uFF0C\u4E0D\u8981\u8F93\u51FA\u89E3\u91CA\u3001Markdown \u6216\u4EE3\u7801\u5757\u6807\u8BB0\u3002\u6BCF\u4E2A\u5143\u7D20\uFF1A
+{"title": "\u4EFB\u52A1\u6807\u9898\uFF08\u52A8\u8BCD\u5F00\u5934\uFF0C\u5C3D\u91CF\u5177\u4F53\uFF09", "due": "YYYY-MM-DD \u6216\u7A7A\u5B57\u7B26\u4E32", "priority": 0 \u5230 9 \u7684\u6574\u6570, "owner": "\u8D1F\u8D23\u4EBA\u6216\u7A7A\u5B57\u7B26\u4E32", "notes": "\u4E00\u53E5\u6765\u6E90\u4F9D\u636E"}
+
+\u89C4\u5219\uFF1A
+- \u53EA\u63D0\u53D6\u90AE\u4EF6\u91CC\u660E\u786E\u8981\u6C42\u3001\u6216\u660E\u663E\u9700\u8981\u8DDF\u8FDB\u7684\u4E8B\u9879
+- \u622A\u6B62\u65F6\u95F4\u80FD\u786E\u5B9A\u624D\u586B\uFF0C\u5426\u5219\u7559\u7A7A
+- \u6CA1\u6709\u53EF\u6267\u884C\u4E8B\u9879\u65F6\u8F93\u51FA []
+- \u4E0D\u8981\u7F16\u9020\u90AE\u4EF6\u91CC\u6CA1\u6709\u7684\u4FE1\u606F`;
 var STYLE_SYSTEM = `\u4F60\u662F\u5199\u4F5C\u98CE\u683C\u5206\u6790\u5E08\u3002\u9605\u8BFB\u7528\u6237\u6700\u8FD1\u53D1\u51FA\u7684\u90AE\u4EF6\uFF0C\u7528\u7B80\u4F53\u4E2D\u6587\u5199\u4E00\u6BB5 150-300 \u5B57\u7684\u5199\u4F5C\u98CE\u683C\u6863\u6848\uFF0C\u8986\u76D6\uFF1A
 \u5E38\u7528\u79F0\u547C\u3001\u5F00\u5934\u65B9\u5F0F\u3001\u7ED3\u5C3E\u4E0E\u7F72\u540D\u3001\u8BED\u6C14\uFF08\u6B63\u5F0F/\u4EB2\u5207/\u76F4\u63A5\uFF09\u3001\u53E5\u5B50\u957F\u77ED\u3001\u5E38\u7528\u8868\u8FBE\u6216\u53E3\u5934\u7985\u3002
 \u53EA\u8F93\u51FA\u6863\u6848\u6B63\u6587\uFF0C\u4E0D\u8981\u8F93\u51FA\u6807\u9898\u3001\u5217\u8868\u7B26\u53F7\u6216\u5206\u6790\u8FC7\u7A0B\u3002`;
 function stylePath(root) {
-  return join3(root, "style.json");
+  return join4(root, "style.json");
 }
 function readStyle(root) {
   try {
@@ -1710,6 +1743,11 @@ ${clip(item, 4e3)}`).join("\n\n");
     ].join("\n");
     return this.complete(ASK_SYSTEM, user, signal);
   }
+  /** Extract actionable tasks from one mail. */
+  async extractTasks(message, signal) {
+    const text2 = await this.complete(TASK_SYSTEM, contextOf(message), signal);
+    return parseTaskJson(text2);
+  }
   /** Compose-body assistance: draft from points, polish, or shorten. */
   async compose(account, options, signal) {
     const style = this.style(account)?.profile ?? "";
@@ -1768,6 +1806,33 @@ function normalizeTranslated(value) {
 function htmlToPlain(html) {
   return html.replace(/<style[\s\S]*?<\/style>/gi, "").replace(/<script[\s\S]*?<\/script>/gi, "").replace(/<br\s*\/?>/gi, "\n").replace(/<\/(p|div|li|tr|h[1-6])>/gi, "\n").replace(/<[^>]+>/g, "").replace(/&nbsp;/g, " ").replace(/&amp;/g, "&").replace(/&lt;/g, "<").replace(/&gt;/g, ">").replace(/\n{3,}/g, "\n\n").trim();
 }
+function parseTaskJson(text2) {
+  const start = text2.indexOf("[");
+  const end = text2.lastIndexOf("]");
+  if (start < 0 || end <= start) return [];
+  let parsed;
+  try {
+    parsed = JSON.parse(text2.slice(start, end + 1));
+  } catch {
+    return [];
+  }
+  if (!Array.isArray(parsed)) return [];
+  const result = [];
+  for (const item of parsed) {
+    if (item === null || typeof item !== "object") continue;
+    const value = item;
+    const title = String(value.title ?? "").trim();
+    if (title === "") continue;
+    result.push({
+      title: title.slice(0, 300),
+      due: /^\d{4}-\d{2}-\d{2}/.test(String(value.due ?? "")) ? String(value.due).slice(0, 10) : "",
+      priority: Math.max(0, Math.min(9, Number(value.priority ?? 0) || 0)),
+      owner: String(value.owner ?? "").slice(0, 120),
+      notes: String(value.notes ?? "").slice(0, 1e3)
+    });
+  }
+  return result.slice(0, 30);
+}
 function summaryBlocks(text2) {
   const blocks = [];
   let current = { title: "", lines: [] };
@@ -1794,8 +1859,578 @@ function textToHtml(text2) {
   ).join("");
 }
 
+// src/host/ics.ts
+var CRLF = "\r\n";
+function escapeText(value) {
+  return String(value ?? "").replaceAll("\\", "\\\\").replaceAll(";", "\\;").replaceAll(",", "\\,").replaceAll("\r\n", "\\n").replaceAll("\n", "\\n").replaceAll("\r", "\\n");
+}
+function unescapeText(value) {
+  return String(value ?? "").replaceAll("\\n", "\n").replaceAll("\\N", "\n").replaceAll("\\,", ",").replaceAll("\\;", ";").replaceAll("\\\\", "\\");
+}
+function fold(line2) {
+  const text2 = String(line2);
+  if (text2.length <= 74) return text2;
+  const chunks = [];
+  let rest = text2;
+  while (rest.length > 74) {
+    chunks.push(rest.slice(0, 74));
+    rest = ` ${rest.slice(74)}`;
+  }
+  chunks.push(rest);
+  return chunks.join(CRLF);
+}
+function utcStamp(date) {
+  const pad2 = (value) => String(value).padStart(2, "0");
+  return `${String(date.getUTCFullYear())}${pad2(date.getUTCMonth() + 1)}${pad2(date.getUTCDate())}T${pad2(date.getUTCHours())}${pad2(date.getUTCMinutes())}${pad2(date.getUTCSeconds())}Z`;
+}
+function pad(value) {
+  return String(value).padStart(2, "0");
+}
+function dueProperty(due) {
+  const text2 = String(due ?? "").trim();
+  if (text2 === "") return null;
+  if (/^\d{4}-\d{2}-\d{2}$/.test(text2)) return `DUE;VALUE=DATE:${text2.replaceAll("-", "")}`;
+  const parsed = new Date(text2);
+  if (Number.isNaN(parsed.getTime())) return null;
+  return `DUE:${utcStamp(parsed)}`;
+}
+function serializeTodos(tasks) {
+  const lines = [
+    "BEGIN:VCALENDAR",
+    "VERSION:2.0",
+    "PRODID:-//dsh-mailharbor//VTODO//EN",
+    "CALSCALE:GREGORIAN"
+  ];
+  for (const task of tasks) {
+    lines.push("BEGIN:VTODO");
+    lines.push(`UID:${String(task.uid ?? task.id ?? "")}`);
+    lines.push(`DTSTAMP:${utcStamp(/* @__PURE__ */ new Date())}`);
+    lines.push(`SUMMARY:${escapeText(task.title ?? "(\u65E0\u6807\u9898)")}`);
+    if (task.notes !== void 0 && task.notes !== null && String(task.notes) !== "") {
+      lines.push(`DESCRIPTION:${escapeText(task.notes)}`);
+    }
+    const due = dueProperty(String(task.due ?? ""));
+    if (due !== null) lines.push(due);
+    lines.push(`STATUS:${String(task.status ?? "NEEDS-ACTION").toUpperCase()}`);
+    if (Number(task.priority ?? 0) > 0)
+      lines.push(`PRIORITY:${String(Math.max(0, Math.min(9, Number(task.priority))))}`);
+    if (String(task.status ?? "").toUpperCase() === "COMPLETED") {
+      const completed = task.completedAt === void 0 || task.completedAt === null ? /* @__PURE__ */ new Date() : new Date(task.completedAt);
+      if (!Number.isNaN(completed.getTime())) lines.push(`COMPLETED:${utcStamp(completed)}`);
+    }
+    lines.push("END:VTODO");
+  }
+  lines.push("END:VCALENDAR");
+  return `${lines.map(fold).join(CRLF)}${CRLF}`;
+}
+function unfold(text2) {
+  return String(text2 ?? "").replace(/\r?\n[ \t]/g, "");
+}
+function decodeDue(value, params) {
+  const text2 = String(value ?? "").trim();
+  if (params.includes("VALUE=DATE") || /^\d{8}$/.test(text2)) {
+    if (/^\d{8}$/.test(text2)) return `${text2.slice(0, 4)}-${text2.slice(4, 6)}-${text2.slice(6, 8)}`;
+    return "";
+  }
+  const match = /^(\d{4})(\d{2})(\d{2})T(\d{2})(\d{2})(\d{2})Z$/.exec(text2);
+  if (match !== null) {
+    const date = new Date(
+      Date.UTC(
+        Number(match[1]),
+        Number(match[2]) - 1,
+        Number(match[3]),
+        Number(match[4]),
+        Number(match[5]),
+        Number(match[6])
+      )
+    );
+    return `${String(date.getFullYear())}-${pad(date.getMonth() + 1)}-${pad(date.getDate())}T${pad(date.getHours())}:${pad(date.getMinutes())}`;
+  }
+  return "";
+}
+function parseTodos(ics) {
+  const lines = unfold(ics).split(/\r?\n/);
+  const todos = [];
+  let current = null;
+  for (const line2 of lines) {
+    const trimmed = line2.trim();
+    if (trimmed === "BEGIN:VTODO") {
+      current = {};
+      continue;
+    }
+    if (trimmed === "END:VTODO") {
+      if (current !== null && String(current.uid ?? "") !== "") {
+        todos.push({
+          uid: String(current.uid),
+          title: String(current.title ?? "(\u65E0\u6807\u9898)"),
+          notes: String(current.notes ?? ""),
+          due: String(current.due ?? ""),
+          status: String(current.status ?? "NEEDS-ACTION"),
+          priority: Number(current.priority ?? 0),
+          completedAt: current.completedAt ?? null
+        });
+      }
+      current = null;
+      continue;
+    }
+    if (current === null) continue;
+    const colon = trimmed.indexOf(":");
+    if (colon < 0) continue;
+    const left = trimmed.slice(0, colon);
+    const value = trimmed.slice(colon + 1);
+    const semicolon = left.indexOf(";");
+    const name2 = (semicolon < 0 ? left : left.slice(0, semicolon)).toUpperCase();
+    const params = semicolon < 0 ? "" : left.slice(semicolon + 1).toUpperCase();
+    if (name2 === "UID") current.uid = unescapeText(value).trim();
+    else if (name2 === "SUMMARY") current.title = unescapeText(value);
+    else if (name2 === "DESCRIPTION") current.notes = unescapeText(value);
+    else if (name2 === "STATUS") current.status = value.trim().toUpperCase();
+    else if (name2 === "PRIORITY") current.priority = Number(value) || 0;
+    else if (name2 === "DUE") current.due = decodeDue(value, params);
+    else if (name2 === "COMPLETED") {
+      const match = /^(\d{4})(\d{2})(\d{2})T(\d{2})(\d{2})(\d{2})Z$/.exec(value.trim());
+      if (match !== null) {
+        current.completedAt = new Date(
+          Date.UTC(
+            Number(match[1]),
+            Number(match[2]) - 1,
+            Number(match[3]),
+            Number(match[4]),
+            Number(match[5]),
+            Number(match[6])
+          )
+        ).toISOString();
+      }
+    }
+  }
+  return todos;
+}
+
+// src/host/caldav.ts
+function decodeXml(value) {
+  return String(value ?? "").replaceAll("&lt;", "<").replaceAll("&gt;", ">").replaceAll("&quot;", '"').replaceAll("&apos;", "'").replaceAll("&amp;", "&");
+}
+function tagValue(xml, name2) {
+  const pattern = new RegExp(`<(?:[\\w-]+:)?${name2}\\b[^>]*>([\\s\\S]*?)</(?:[\\w-]+:)?${name2}>`, "i");
+  const match = pattern.exec(String(xml ?? ""));
+  return match === null ? "" : decodeXml(match[1] ?? "");
+}
+function responseBlocks(xml) {
+  return [
+    ...String(xml ?? "").matchAll(/<(?:[\w-]+:)?response\b[^>]*>([\s\S]*?)<\/(?:[\w-]+:)?response>/gi)
+  ].map((match) => match[1] ?? "");
+}
+function resolveHref(base, href) {
+  const text2 = String(href ?? "").trim();
+  if (text2 === "") return "";
+  return new URL(text2, base).href;
+}
+function withSlash(url) {
+  return url.endsWith("/") ? url : `${url}/`;
+}
+var PROPFIND_ROOT = `<?xml version="1.0" encoding="utf-8"?>
+<d:propfind xmlns:d="DAV:" xmlns:c="urn:ietf:params:xml:ns:caldav">
+  <d:prop><d:current-user-principal/><c:calendar-home-set/></d:prop>
+</d:propfind>`;
+var PROPFIND_HOME = `<?xml version="1.0" encoding="utf-8"?>
+<d:propfind xmlns:d="DAV:" xmlns:c="urn:ietf:params:xml:ns:caldav">
+  <d:prop><d:resourcetype/><d:displayname/><c:supported-calendar-component-set/></d:prop>
+</d:propfind>`;
+var REPORT_TODOS = `<?xml version="1.0" encoding="utf-8"?>
+<c:calendar-query xmlns:d="DAV:" xmlns:c="urn:ietf:params:xml:ns:caldav">
+  <d:prop><d:getetag/><c:calendar-data/></d:prop>
+  <c:filter><c:comp-filter name="VCALENDAR"><c:comp-filter name="VTODO"/></c:comp-filter></c:filter>
+</c:calendar-query>`;
+var CalDavClient = class {
+  url;
+  username;
+  password;
+  calendarHref;
+  constructor(config, password) {
+    this.url = withSlash(String(config.url ?? "").trim());
+    this.username = String(config.username ?? "");
+    this.password = String(password ?? "");
+    this.calendarHref = String(config.calendarHref ?? "").trim();
+  }
+  headers(extra = {}) {
+    const auth = Buffer.from(`${this.username}:${this.password}`, "utf8").toString("base64");
+    return { Authorization: `Basic ${auth}`, ...extra };
+  }
+  async request(method, url, options = {}) {
+    if (this.url === "") throw new Error("CalDAV \u5730\u5740\u672A\u914D\u7F6E");
+    const controller = new AbortController();
+    const timer = setTimeout(() => {
+      controller.abort();
+    }, 2e4);
+    let response;
+    try {
+      response = await fetch(url, {
+        method,
+        headers: this.headers({
+          ...options.depth === void 0 ? {} : { Depth: String(options.depth) },
+          ...options.body === void 0 ? {} : { "Content-Type": "application/xml; charset=utf-8" },
+          ...options.headers ?? {}
+        }),
+        body: options.body,
+        signal: controller.signal,
+        redirect: "follow"
+      });
+    } catch (error) {
+      if (error instanceof Error && error.name === "AbortError") throw new Error("CalDAV \u8FDE\u63A5\u8D85\u65F6");
+      throw new Error(`CalDAV \u8FDE\u63A5\u5931\u8D25\uFF1A${error instanceof Error ? error.message : String(error)}`);
+    } finally {
+      clearTimeout(timer);
+    }
+    const text2 = await response.text();
+    if (response.status === 401 || response.status === 403)
+      throw new Error("CalDAV \u8BA4\u8BC1\u5931\u8D25\uFF0C\u8BF7\u68C0\u67E5\u7528\u6237\u540D\u548C\u5E94\u7528\u5BC6\u7801");
+    if (response.status === 404) throw new Error("CalDAV \u5730\u5740\u6216\u65E5\u5386\u4E0D\u5B58\u5728");
+    if (response.status === 412) throw new Error("CalDAV \u4EFB\u52A1\u5DF2\u88AB\u5176\u4ED6\u5BA2\u6237\u7AEF\u4FEE\u6539\uFF0C\u8BF7\u5148\u540C\u6B65");
+    if (!response.ok && response.status !== 207) {
+      throw new Error(`CalDAV \u8FD4\u56DE ${String(response.status)}${text2 === "" ? "" : `\uFF1A${text2.slice(0, 160)}`}`);
+    }
+    return { status: response.status, text: text2, headers: response.headers };
+  }
+  async discover() {
+    if (this.calendarHref !== "") return this.calendarHref;
+    const root = await this.request("PROPFIND", this.url, { body: PROPFIND_ROOT, depth: 0 });
+    const principalBlock = tagValue(root.text, "current-user-principal");
+    const principal = tagValue(principalBlock, "href") || (principalBlock.trim().startsWith("/") ? principalBlock.trim() : "");
+    const homeBlock = tagValue(root.text, "calendar-home-set");
+    let home = tagValue(homeBlock, "href") || (homeBlock.trim().startsWith("/") ? homeBlock.trim() : "");
+    if (home === "") {
+      if (principal === "") throw new Error("CalDAV \u670D\u52A1\u6CA1\u6709\u8FD4\u56DE calendar-home-set");
+      const principalUrl = resolveHref(this.url, principal);
+      const principalResponse = await this.request("PROPFIND", principalUrl, {
+        body: PROPFIND_ROOT,
+        depth: 0
+      });
+      const principalHome = tagValue(principalResponse.text, "calendar-home-set");
+      home = tagValue(principalHome, "href") || (principalHome.trim().startsWith("/") ? principalHome.trim() : "");
+      if (home === "") throw new Error("CalDAV \u670D\u52A1\u6CA1\u6709\u8FD4\u56DE\u65E5\u5386\u76EE\u5F55");
+    }
+    const homeUrl = withSlash(resolveHref(this.url, home));
+    const listing = await this.request("PROPFIND", homeUrl, { body: PROPFIND_HOME, depth: 1 });
+    const calendars = [];
+    for (const block of responseBlocks(listing.text)) {
+      const href = tagValue(block, "href");
+      if (href === "") continue;
+      if (!/calendar/i.test(tagValue(block, "resourcetype"))) continue;
+      const supported = tagValue(block, "supported-calendar-component-set");
+      if (supported !== "" && !/VTODO/i.test(supported)) continue;
+      calendars.push({
+        href: withSlash(resolveHref(homeUrl, href)),
+        displayName: tagValue(block, "displayname") || href
+      });
+    }
+    if (calendars.length === 0) throw new Error("\u6CA1\u6709\u627E\u5230\u652F\u6301 VTODO \u7684\u4EFB\u52A1\u65E5\u5386");
+    this.calendarHref = calendars[0]?.href ?? "";
+    return this.calendarHref;
+  }
+  async listCalendars() {
+    if (this.calendarHref !== "") return [{ href: this.calendarHref, displayName: "" }];
+    const root = await this.request("PROPFIND", this.url, { body: PROPFIND_ROOT, depth: 0 });
+    const homeBlock = tagValue(root.text, "calendar-home-set");
+    const home = tagValue(homeBlock, "href") || (homeBlock.trim().startsWith("/") ? homeBlock.trim() : "");
+    if (home === "") throw new Error("CalDAV \u670D\u52A1\u6CA1\u6709\u8FD4\u56DE\u65E5\u5386\u76EE\u5F55");
+    const homeUrl = withSlash(resolveHref(this.url, home));
+    const listing = await this.request("PROPFIND", homeUrl, { body: PROPFIND_HOME, depth: 1 });
+    return responseBlocks(listing.text).filter((block) => /calendar/i.test(tagValue(block, "resourcetype"))).map((block) => ({
+      href: withSlash(resolveHref(homeUrl, tagValue(block, "href"))),
+      displayName: tagValue(block, "displayname")
+    }));
+  }
+  async fetchTodos(collectionHref) {
+    const collection = withSlash(resolveHref(this.url, collectionHref));
+    const response = await this.request("REPORT", collection, { body: REPORT_TODOS, depth: 1 });
+    const items = [];
+    for (const block of responseBlocks(response.text)) {
+      const href = tagValue(block, "href");
+      if (href === "") continue;
+      const etag = tagValue(block, "getetag") || null;
+      const data = tagValue(block, "calendar-data");
+      if (data === "") continue;
+      for (const todo of parseTodos(data)) {
+        if (todo.uid === "") continue;
+        items.push({ href: resolveHref(collection, href), etag, todo });
+      }
+    }
+    return items;
+  }
+  async putTodo(collectionHref, task) {
+    const collection = withSlash(resolveHref(this.url, collectionHref));
+    const href = task.href !== null && task.href !== "" ? task.href : new URL(`${encodeURIComponent(task.uid)}.ics`, collection).href;
+    const headers = { "Content-Type": "text/calendar; charset=utf-8" };
+    if (task.etag !== null && task.etag !== "") headers["If-Match"] = task.etag;
+    else headers["If-None-Match"] = "*";
+    const response = await this.request("PUT", href, { body: serializeTodos([task]), headers });
+    return { href, etag: response.headers.get("etag") ?? task.etag, uid: task.uid };
+  }
+  async deleteTodo(href, etag) {
+    const headers = {};
+    if (etag !== null && etag !== "") headers["If-Match"] = etag;
+    await this.request("DELETE", resolveHref(this.url, href), { headers });
+  }
+  /** Pull remote VTODOs, then push local dirty/tombstoned tasks. */
+  async sync(store, accountId) {
+    const collection = await this.discover();
+    const remote = await this.fetchTodos(collection);
+    let pulled = 0;
+    for (const item of remote) {
+      store.applyRemote({
+        accountId,
+        calendarHref: collection,
+        href: item.href,
+        etag: item.etag,
+        todo: item.todo
+      });
+      pulled += 1;
+    }
+    const removed = store.pruneMissingRemote(
+      accountId,
+      collection,
+      remote.map((item) => item.href)
+    );
+    let pushed = 0;
+    let deleted = 0;
+    for (const task of store.pending(accountId)) {
+      if (task.deleted) {
+        if (task.href !== null && task.href !== "") {
+          await this.deleteTodo(task.href, task.etag);
+          deleted += 1;
+        }
+        store.purge(task.id);
+        continue;
+      }
+      const result = await this.putTodo(
+        task.calendarHref !== null && task.calendarHref !== "" ? task.calendarHref : collection,
+        task
+      );
+      store.markPushed(task.id, result);
+      pushed += 1;
+    }
+    store.setCalendarState(accountId, {
+      calendarHref: collection,
+      lastSync: (/* @__PURE__ */ new Date()).toISOString(),
+      error: null
+    });
+    return { pulled, pushed, deleted, removed, calendarHref: collection, total: remote.length };
+  }
+};
+
+// src/host/projects.ts
+import { randomUUID as randomUUID2 } from "node:crypto";
+import { existsSync as existsSync5, mkdirSync as mkdirSync4, readFileSync as readFileSync4, renameSync as renameSync3, writeFileSync as writeFileSync4 } from "node:fs";
+import { join as join5 } from "node:path";
+var ProjectStore = class {
+  file;
+  cache = null;
+  constructor(file) {
+    this.file = file;
+  }
+  load() {
+    if (this.cache !== null) return this.cache;
+    let parsed = null;
+    try {
+      if (existsSync5(this.file)) parsed = JSON.parse(readFileSync4(this.file, "utf8"));
+    } catch {
+      parsed = null;
+    }
+    const projects = parsed !== null && typeof parsed === "object" && Array.isArray(parsed.projects) ? parsed.projects : [];
+    this.cache = { version: 1, projects: projects.filter(isProject) };
+    return this.cache;
+  }
+  flush() {
+    const data = this.load();
+    mkdirSync4(join5(this.file, ".."), { recursive: true });
+    const temp = `${this.file}.${String(process.pid)}.tmp`;
+    writeFileSync4(temp, `${JSON.stringify(data, null, 2)}
+`, { mode: 384 });
+    renameSync3(temp, this.file);
+  }
+  list() {
+    return [...this.load().projects].sort((left, right) => right.updatedAt.localeCompare(left.updatedAt));
+  }
+  get(id) {
+    return this.load().projects.find((project) => project.id === id);
+  }
+  findByMessage(accountId, key) {
+    return this.load().projects.find(
+      (project) => project.messages.some((message) => message.accountId === accountId && message.key === key)
+    );
+  }
+  create(record) {
+    const data = this.load();
+    data.projects.push(record);
+    this.flush();
+    return record;
+  }
+  update(id, patch) {
+    const project = this.get(id);
+    if (project === void 0) return void 0;
+    Object.assign(project, patch, { updatedAt: (/* @__PURE__ */ new Date()).toISOString() });
+    this.flush();
+    return project;
+  }
+  addMessage(id, message) {
+    const project = this.get(id);
+    if (project === void 0) return void 0;
+    const exists = project.messages.some(
+      (item) => item.accountId === message.accountId && item.key === message.key
+    );
+    if (!exists) project.messages.push(message);
+    if (!project.accountIds.includes(message.accountId)) project.accountIds.push(message.accountId);
+    project.updatedAt = (/* @__PURE__ */ new Date()).toISOString();
+    this.flush();
+    return project;
+  }
+  removeMessage(id, accountId, key) {
+    const project = this.get(id);
+    if (project === void 0) return void 0;
+    project.messages = project.messages.filter((item) => !(item.accountId === accountId && item.key === key));
+    project.updatedAt = (/* @__PURE__ */ new Date()).toISOString();
+    this.flush();
+    return project;
+  }
+  addThread(id, thread) {
+    const project = this.get(id);
+    if (project === void 0) return void 0;
+    if (!project.threads.some((item) => item.accountId === thread.accountId && item.key === thread.key)) {
+      project.threads.push(thread);
+    }
+    project.updatedAt = (/* @__PURE__ */ new Date()).toISOString();
+    this.flush();
+    return project;
+  }
+};
+function isProject(value) {
+  return value !== null && typeof value === "object" && typeof value.id === "string" && typeof value.path === "string";
+}
+function slugify(name2) {
+  const text2 = name2.trim().toLowerCase().replace(/[^\p{L}\p{N}]+/gu, "-").replace(/^-+|-+$/g, "");
+  return text2 === "" ? "project" : text2.slice(0, 60);
+}
+async function createProject(options) {
+  const { store, input } = options;
+  const name2 = input.name.trim();
+  if (name2 === "") throw new Error("\u9879\u76EE\u540D\u79F0\u4E0D\u80FD\u4E3A\u7A7A");
+  if (name2.length > 120) throw new Error("\u9879\u76EE\u540D\u79F0\u8FC7\u957F");
+  const root = input.root.trim();
+  if (root === "") throw new Error("\u9879\u76EE\u76EE\u5F55\u4E0D\u80FD\u4E3A\u7A7A");
+  const warnings = [];
+  const id = `prj_${randomUUID2().slice(0, 8)}`;
+  const base = slugify(name2);
+  let path = join5(root, base);
+  let attempt = 2;
+  while (existsSync5(path)) {
+    path = join5(root, `${base}-${String(attempt)}`);
+    attempt += 1;
+  }
+  mkdirSync4(path, { recursive: true });
+  const created = (/* @__PURE__ */ new Date()).toISOString();
+  const brief = renderBrief(name2, input);
+  writeFileSync4(join5(path, "BRIEF.md"), brief, { mode: 384 });
+  writeFileSync4(join5(path, "CONVERSATION.md"), renderConversation(input.conversation, created), {
+    mode: 384
+  });
+  let workspaceId = "";
+  if (options.registry !== void 0) {
+    try {
+      const workspace = await options.registry.create(path, name2);
+      workspaceId = String(workspace?.id ?? "");
+    } catch (error) {
+      warnings.push(`\u5DE5\u4F5C\u7A7A\u95F4\u6CE8\u518C\u5931\u8D25\uFF1A${error instanceof Error ? error.message : String(error)}`);
+    }
+  } else {
+    warnings.push("\u5F53\u524D DSH \u7EC4\u5408\u6CA1\u6709 workspaceRegistry\uFF0C\u9879\u76EE\u76EE\u5F55\u5DF2\u521B\u5EFA\u4F46\u6CA1\u6709\u6CE8\u518C\u5230\u4FA7\u680F");
+  }
+  let sessionId = "";
+  if (options.sessions !== void 0) {
+    try {
+      sessionId = randomUUID2();
+      const session = options.sessions.create(sessionId, { meta: { cwd: path } });
+      session.append(
+        "user/message",
+        {
+          role: "user",
+          content: [{ type: "text", text: `\u6211\u521B\u5EFA\u4E86\u4E00\u4E2A\u90AE\u4EF6\u9879\u76EE\u300C${name2}\u300D\u3002
+
+${brief}` }],
+          source: { kind: "user" }
+        },
+        { surfaceOp: "append" }
+      );
+    } catch (error) {
+      warnings.push(`\u4F1A\u8BDD\u521B\u5EFA\u5931\u8D25\uFF1A${error instanceof Error ? error.message : String(error)}`);
+      sessionId = "";
+    }
+  } else {
+    warnings.push("\u5F53\u524D DSH \u7EC4\u5408\u6CA1\u6709 sessions \u670D\u52A1\uFF0C\u672A\u521B\u5EFA\u9879\u76EE\u4F1A\u8BDD");
+  }
+  const project = {
+    id,
+    name: name2,
+    path,
+    workspaceId,
+    sessionId,
+    accountIds: [input.accountId],
+    messages: input.message === void 0 ? [] : [input.message],
+    threads: input.thread === void 0 ? [] : [input.thread],
+    createdAt: created,
+    updatedAt: created
+  };
+  writeFileSync4(
+    join5(path, "project.json"),
+    `${JSON.stringify({ ...project, conversation: void 0 }, null, 2)}
+`,
+    {
+      mode: 384
+    }
+  );
+  store.create(project);
+  return { project, warnings };
+}
+function appendConversation(project, conversation) {
+  const stamp3 = (/* @__PURE__ */ new Date()).toISOString();
+  const file = join5(project.path, "CONVERSATION.md");
+  const block = `
+
+## \u8FFD\u52A0\u8BB0\u5F55 \xB7 ${stamp3}
+
+${conversation.trim()}
+`;
+  writeFileSync4(file, block, { flag: "a", mode: 384 });
+  return file;
+}
+function renderBrief(name2, input) {
+  const lines = [`# ${name2}`, "", `- \u521B\u5EFA\u65F6\u95F4\uFF1A${(/* @__PURE__ */ new Date()).toISOString()}`, `- \u6765\u6E90\u8D26\u53F7\uFF1A${input.accountId}`];
+  if (input.message !== void 0) {
+    lines.push(`- \u6765\u6E90\u90AE\u4EF6\uFF1A${input.message.subject}\uFF08${input.message.date}\uFF09`);
+  }
+  lines.push(
+    "",
+    "## \u80CC\u666F",
+    "",
+    "\u7531 MailHarbor \u4ECE\u90AE\u4EF6\u751F\u6210\u3002\u4EE5\u4E0B\u662F\u5F53\u65F6 AI \u5DE5\u4F5C\u53F0\u7684\u8BB0\u5F55\u3002",
+    "",
+    "## AI \u5DE5\u4F5C\u53F0\u8BB0\u5F55",
+    "",
+    input.conversation.trim(),
+    ""
+  );
+  return lines.join("\n");
+}
+function renderConversation(conversation, created) {
+  return `# AI \u5DE5\u4F5C\u53F0\u8BB0\u5F55
+
+- \u8F6C\u79FB\u5230\u9879\u76EE\uFF1A${created}
+
+${conversation.trim()}
+`;
+}
+
 // src/host/version.ts
-var VERSION = "0.4.1";
+var VERSION = "0.5.0";
 
 // src/host/api.ts
 init_smtp();
@@ -1901,6 +2536,22 @@ function buildRouter(runtime) {
     const page = runtime.database(account).list({ mailbox: mailbox === "" ? "all" : mailbox, query, offset, limit });
     return { ...page, items: page.items.map((item) => localSummary(runtime, account, item)) };
   });
+  router.get("/messages/lookup", ({ url }) => {
+    const account = accountFromPayload(runtime, { accountId: url.searchParams.get("accountId") ?? void 0 });
+    const key = url.searchParams.get("key") ?? "";
+    if (key.startsWith("local:")) {
+      const id = Number(key.slice(6));
+      const detail = runtime.database(account).get(id);
+      if (detail === void 0) throw new HttpError(404, "\u90AE\u4EF6\u4E0D\u5B58\u5728");
+      return { id: String(id), mailbox: detail.mailbox, subject: detail.subject };
+    }
+    if (key.startsWith("mid:")) {
+      const found = runtime.database(account).findByMessageId(key.slice(4));
+      if (found === void 0) throw new HttpError(404, "\u672C\u5730\u5907\u4EFD\u91CC\u627E\u4E0D\u5230\u8FD9\u5C01\u90AE\u4EF6");
+      return { id: String(found.id), mailbox: found.mailbox, subject: "" };
+    }
+    throw new HttpError(400, "\u65E0\u6CD5\u5B9A\u4F4D\u8FD9\u5C01\u90AE\u4EF6");
+  });
   router.get("/messages/:id", async ({ url, params }) => {
     const { account } = accountFrom(runtime, url);
     const source = sourceOf(url);
@@ -2160,7 +2811,7 @@ function buildRouter(runtime) {
         output = await ai.ask(detail, instruction, earlier);
       }
       const card = {
-        id: randomUUID2(),
+        id: randomUUID3(),
         kind,
         instruction,
         output,
@@ -2274,6 +2925,192 @@ function buildRouter(runtime) {
       throw aiHttpError(error);
     }
   });
+  router.get("/tasks", ({ url }) => {
+    const account = accountFromPayload(runtime, { accountId: url.searchParams.get("accountId") ?? void 0 });
+    const items = runtime.tasks().list({
+      accountId: account.id,
+      status: url.searchParams.get("status") ?? "",
+      projectId: url.searchParams.get("projectId") ?? "",
+      query: url.searchParams.get("query") ?? ""
+    });
+    return { items: items.map(taskView), calendar: runtime.tasks().calendarState(account.id) };
+  });
+  router.post("/tasks", async ({ body }) => {
+    const payload = await body();
+    const account = accountFromPayload(runtime, payload);
+    const task = runtime.tasks().create({
+      accountId: account.id,
+      title: String(payload.title ?? ""),
+      notes: typeof payload.notes === "string" ? payload.notes : "",
+      due: typeof payload.due === "string" ? payload.due : "",
+      status: typeof payload.status === "string" ? payload.status : "NEEDS-ACTION",
+      priority: Number(payload.priority ?? 0),
+      owner: typeof payload.owner === "string" ? payload.owner : "",
+      projectId: typeof payload.projectId === "string" ? payload.projectId : null,
+      messageKey: typeof payload.messageKey === "string" ? payload.messageKey : "",
+      messageSubject: typeof payload.messageSubject === "string" ? payload.messageSubject : ""
+    });
+    return { task: taskView(task) };
+  });
+  router.patch("/tasks/:id", async ({ params, body }) => {
+    const payload = await body();
+    const task = runtime.tasks().update(String(params.id ?? ""), {
+      ...typeof payload.title === "string" ? { title: payload.title } : {},
+      ...typeof payload.notes === "string" ? { notes: payload.notes } : {},
+      ...typeof payload.due === "string" ? { due: payload.due } : {},
+      ...typeof payload.status === "string" ? { status: payload.status } : {},
+      ...typeof payload.priority === "number" ? { priority: payload.priority } : {},
+      ...typeof payload.owner === "string" ? { owner: payload.owner } : {},
+      ...payload.projectId === null || typeof payload.projectId === "string" ? { projectId: payload.projectId } : {}
+    });
+    return { task: taskView(task) };
+  });
+  router.delete("/tasks/:id", ({ params }) => {
+    const removed = runtime.tasks().remove(String(params.id ?? ""));
+    if (!removed) throw new HttpError(404, "\u4EFB\u52A1\u4E0D\u5B58\u5728");
+    return { ok: true };
+  });
+  router.post("/tasks/extract", async ({ body }) => {
+    const payload = await body();
+    const account = accountFromPayload(runtime, payload);
+    const detail = await loadDetail(
+      runtime,
+      account,
+      sourceOfPayload(payload),
+      String(payload.id ?? ""),
+      mailboxOfPayload(payload)
+    );
+    try {
+      const suggestions = await runtime.ai().extractTasks(detail);
+      return { suggestions };
+    } catch (error) {
+      throw aiHttpError(error);
+    }
+  });
+  router.get("/tasks/caldav", ({ url }) => {
+    const account = accountFromPayload(runtime, { accountId: url.searchParams.get("accountId") ?? void 0 });
+    return {
+      caldav: account.caldav,
+      calendar: runtime.tasks().calendarState(account.id),
+      hasPassword: runtime.credentials.readSecret(`${account.keychainService}:caldav`, account.email) !== void 0
+    };
+  });
+  router.put("/tasks/caldav", async ({ body }) => {
+    const payload = await body();
+    const account = accountFromPayload(runtime, payload);
+    const url = String(payload.url ?? "").trim();
+    const username = String(payload.username ?? "").trim();
+    const calendarHref = String(payload.calendarHref ?? "").trim();
+    const caldav = url === "" ? null : { url, username, ...calendarHref === "" ? {} : { calendarHref } };
+    const accounts = runtime.current.accounts.map(
+      (item) => item.id === account.id ? { ...item, caldav } : item
+    );
+    saveAccounts(accounts, runtime.current.activeAccountId);
+    if (typeof payload.password === "string" && payload.password !== "") {
+      runtime.credentials.writeSecret(`${account.keychainService}:caldav`, account.email, payload.password);
+    }
+    runtime.refresh();
+    const updated = runtime.current.accounts.find((item) => item.id === account.id) ?? account;
+    return {
+      caldav: updated.caldav,
+      title: "",
+      hasPassword: runtime.credentials.readSecret(`${updated.keychainService}:caldav`, updated.email) !== void 0
+    };
+  });
+  router.post("/tasks/sync", async ({ body }) => {
+    const payload = await body();
+    const account = accountFromPayload(runtime, payload);
+    const caldav = account.caldav;
+    if (caldav === null) throw new HttpError(400, "\u8BF7\u5148\u914D\u7F6E CalDAV \u5730\u5740\u548C\u8D26\u53F7");
+    const password = runtime.credentials.readSecret(`${account.keychainService}:caldav`, account.email);
+    if (password === void 0 || password === "") throw new HttpError(400, "\u8BF7\u5148\u4FDD\u5B58 CalDAV \u5E94\u7528\u5BC6\u7801");
+    try {
+      const client = new CalDavClient(caldav, password);
+      const result = await runtime.tasks().sync(account.id, client);
+      if (result.calendarHref !== "" && result.calendarHref !== (caldav.calendarHref ?? "")) {
+        const accounts = runtime.current.accounts.map(
+          (item) => item.id === account.id ? { ...item, caldav: { ...caldav, calendarHref: result.calendarHref } } : item
+        );
+        saveAccounts(accounts, runtime.current.activeAccountId);
+        runtime.refresh();
+      }
+      return { result, calendar: runtime.tasks().calendarState(account.id) };
+    } catch (error) {
+      throw new HttpError(400, error instanceof Error ? error.message : String(error));
+    }
+  });
+  router.get("/projects", () => ({ items: runtime.projects().list().map(projectView) }));
+  router.get("/projects/for", ({ url }) => {
+    const account = accountFromPayload(runtime, { accountId: url.searchParams.get("accountId") ?? void 0 });
+    const key = url.searchParams.get("key") ?? "";
+    return {
+      project: key === "" ? null : (() => {
+        const found = runtime.projects().findByMessage(account.id, key);
+        return found === void 0 ? null : projectView(found);
+      })()
+    };
+  });
+  router.post("/projects", async ({ body }) => {
+    const payload = await body();
+    const account = accountFromPayload(runtime, payload);
+    const name2 = String(payload.name ?? "").trim();
+    const root = String(payload.root ?? "").trim() || runtime.current.projects.root;
+    const conversation = typeof payload.conversation === "string" ? payload.conversation : "";
+    const message = asObject(payload.message);
+    const key = typeof message.key === "string" ? message.key : "";
+    const result = await createProject({
+      store: runtime.projects(),
+      input: {
+        name: name2,
+        root,
+        conversation,
+        accountId: account.id,
+        ...key === "" ? {} : {
+          message: {
+            accountId: account.id,
+            key,
+            subject: String(message.subject ?? ""),
+            date: String(message.date ?? "")
+          }
+        },
+        ...key === "" ? {} : { thread: { accountId: account.id, key } }
+      },
+      registry: runtime.workspaceRegistry,
+      sessions: runtime.sessions
+    });
+    return { project: projectView(result.project), warnings: result.warnings };
+  });
+  router.post("/projects/:id/messages", async ({ params, body }) => {
+    const payload = await body();
+    const account = accountFromPayload(runtime, payload);
+    const project = runtime.projects().addMessage(String(params.id ?? ""), {
+      accountId: account.id,
+      key: String(payload.key ?? ""),
+      subject: String(payload.subject ?? ""),
+      date: String(payload.date ?? "")
+    });
+    if (project === void 0) throw new HttpError(404, "\u9879\u76EE\u4E0D\u5B58\u5728");
+    return { project: projectView(project) };
+  });
+  router.delete("/projects/:id/messages", ({ params, url }) => {
+    const account = accountFromPayload(runtime, { accountId: url.searchParams.get("accountId") ?? void 0 });
+    const key = url.searchParams.get("key") ?? "";
+    const project = runtime.projects().removeMessage(String(params.id ?? ""), account.id, key);
+    if (project === void 0) throw new HttpError(404, "\u9879\u76EE\u4E0D\u5B58\u5728");
+    return { project: projectView(project) };
+  });
+  router.post("/projects/:id/transfer", async ({ params, body }) => {
+    const payload = await body();
+    const account = accountFromPayload(runtime, payload);
+    const project = runtime.projects().get(String(params.id ?? ""));
+    if (project === void 0) throw new HttpError(404, "\u9879\u76EE\u4E0D\u5B58\u5728");
+    const conversation = typeof payload.conversation === "string" ? payload.conversation : "";
+    if (conversation.trim() === "") throw new HttpError(400, "\u6CA1\u6709\u53EF\u8F6C\u79FB\u7684 AI \u8BB0\u5F55");
+    appendConversation(project, conversation);
+    const key = typeof payload.key === "string" ? payload.key : "";
+    const updated = key === "" ? runtime.projects().update(project.id, {}) : runtime.projects().addThread(project.id, { accountId: account.id, key });
+    return { project: projectView(updated ?? project) };
+  });
   router.get("/settings", () => settingsView(runtime.current));
   router.patch("/settings", async ({ body }) => {
     const payload = await body();
@@ -2282,6 +3119,11 @@ function buildRouter(runtime) {
     if (payload.ai !== void 0) patch.ai = asObject(payload.ai);
     if (payload.read !== void 0) patch.read = asObject(payload.read);
     if (payload.render !== void 0) patch.render = asObject(payload.render);
+    if (payload.projects !== void 0) {
+      const root = String(asObject(payload.projects).root ?? "").trim();
+      if (root === "") throw new HttpError(400, "\u9879\u76EE\u76EE\u5F55\u4E0D\u80FD\u4E3A\u7A7A");
+      patch.projects = { root: resolveUserPath(root, "\u9879\u76EE\u76EE\u5F55") };
+    }
     saveSettings(patch);
     runtime.refresh();
     return { settings: settingsView(runtime.current) };
@@ -2423,7 +3265,41 @@ function settingsView(config) {
       styleSampleCount: config.ai.styleSampleCount
     },
     read: { markOnOpen: config.read.markOnOpen, pollSeconds: config.read.pollSeconds },
-    render: { listLimit: config.render.listLimit }
+    render: { listLimit: config.render.listLimit },
+    projects: { root: config.projects.root }
+  };
+}
+function taskView(task) {
+  return {
+    id: task.id,
+    accountId: task.accountId,
+    projectId: task.projectId,
+    title: task.title,
+    notes: task.notes,
+    due: task.due,
+    status: task.status,
+    priority: task.priority,
+    owner: task.owner,
+    messageKey: task.messageKey,
+    messageSubject: task.messageSubject,
+    dirty: task.dirty,
+    createdAt: task.createdAt,
+    updatedAt: task.updatedAt,
+    completedAt: task.completedAt
+  };
+}
+function projectView(project) {
+  return {
+    id: project.id,
+    name: project.name,
+    path: project.path,
+    workspaceId: project.workspaceId,
+    sessionId: project.sessionId,
+    accountIds: [...project.accountIds],
+    messages: project.messages.map((message) => ({ ...message })),
+    threads: project.threads.map((thread) => ({ ...thread })),
+    createdAt: project.createdAt,
+    updatedAt: project.updatedAt
   };
 }
 function localSummary(runtime, account, row) {
@@ -2577,7 +3453,7 @@ ${signature}`;
 
 // src/host/runtime.ts
 import { statSync } from "node:fs";
-import { join as join5 } from "node:path";
+import { join as join7 } from "node:path";
 
 // src/host/secrets.ts
 import { spawnSync } from "node:child_process";
@@ -2746,6 +3622,16 @@ var CredentialManager = class {
     this.session.delete(account.id);
     this.secrets.delete(account.keychainService, account.email);
   }
+  /** Read an arbitrary secret (for example a CalDAV app password). */
+  readSecret(service, account) {
+    return this.secrets.read(service, account);
+  }
+  writeSecret(service, account, secret) {
+    return this.secrets.write(service, account, secret);
+  }
+  deleteSecret(service, account) {
+    return this.secrets.delete(service, account);
+  }
   status(account) {
     const resolved = this.resolve(account);
     return {
@@ -2757,7 +3643,7 @@ var CredentialManager = class {
 };
 
 // src/host/ai-store.ts
-import { existsSync as existsSync5, mkdirSync as mkdirSync4, readFileSync as readFileSync4, renameSync as renameSync3, writeFileSync as writeFileSync4 } from "node:fs";
+import { existsSync as existsSync6, mkdirSync as mkdirSync5, readFileSync as readFileSync5, renameSync as renameSync4, writeFileSync as writeFileSync5 } from "node:fs";
 import { dirname as dirname2 } from "node:path";
 var MAX_THREADS = 50;
 var MAX_CARDS_PER_THREAD = 50;
@@ -2772,7 +3658,7 @@ var AiThreadStore = class {
     if (this.cache !== null) return this.cache;
     let parsed = null;
     try {
-      if (existsSync5(this.file)) parsed = JSON.parse(readFileSync4(this.file, "utf8"));
+      if (existsSync6(this.file)) parsed = JSON.parse(readFileSync5(this.file, "utf8"));
     } catch {
       parsed = null;
     }
@@ -2785,10 +3671,10 @@ var AiThreadStore = class {
     prune(data);
     const text2 = `${JSON.stringify(data, null, 2)}
 `;
-    mkdirSync4(dirname2(this.file), { recursive: true });
+    mkdirSync5(dirname2(this.file), { recursive: true });
     const temp = `${this.file}.${String(process.pid)}.tmp`;
-    writeFileSync4(temp, text2, { mode: 384 });
-    renameSync3(temp, this.file);
+    writeFileSync5(temp, text2, { mode: 384 });
+    renameSync4(temp, this.file);
   }
   get(key) {
     const thread = this.load().threads[key];
@@ -2796,7 +3682,7 @@ var AiThreadStore = class {
   }
   appendCard(input) {
     const data = this.load();
-    const now = (/* @__PURE__ */ new Date()).toISOString();
+    const now2 = (/* @__PURE__ */ new Date()).toISOString();
     const existing = data.threads[input.key];
     const thread = existing ?? {
       key: input.key,
@@ -2804,13 +3690,13 @@ var AiThreadStore = class {
       subject: input.subject,
       messageId: input.messageId ?? "",
       cards: [],
-      updatedAt: now
+      updatedAt: now2
     };
     thread.accountId = input.accountId;
     thread.subject = input.subject;
     if (input.messageId !== void 0 && input.messageId !== "") thread.messageId = input.messageId;
     thread.cards.push(input.card);
-    thread.updatedAt = now;
+    thread.updatedAt = now2;
     data.threads[input.key] = thread;
     this.flush();
     return { ...thread, cards: [...thread.cards] };
@@ -2896,10 +3782,330 @@ function prune(data) {
   }
 }
 
+// src/host/tasks.ts
+import { randomUUID as randomUUID4 } from "node:crypto";
+import { mkdirSync as mkdirSync6 } from "node:fs";
+import { dirname as dirname3 } from "node:path";
+import { DatabaseSync as DatabaseSync3 } from "node:sqlite";
+var STATUSES = /* @__PURE__ */ new Set(["NEEDS-ACTION", "IN-PROCESS", "COMPLETED", "CANCELLED"]);
+function now() {
+  return (/* @__PURE__ */ new Date()).toISOString();
+}
+function rowToTask(row) {
+  if (row === void 0) return void 0;
+  return {
+    id: String(row.id),
+    accountId: String(row.account_id),
+    projectId: row.project_id === null || row.project_id === void 0 ? null : String(row.project_id),
+    calendarHref: row.calendar_href === null || row.calendar_href === void 0 ? null : String(row.calendar_href),
+    href: row.href === null || row.href === void 0 ? null : String(row.href),
+    etag: row.etag === null || row.etag === void 0 ? null : String(row.etag),
+    uid: String(row.uid),
+    title: String(row.title),
+    notes: String(row.notes ?? ""),
+    due: String(row.due ?? ""),
+    status: String(row.status ?? "NEEDS-ACTION"),
+    priority: Number(row.priority ?? 0),
+    owner: String(row.owner ?? ""),
+    messageKey: String(row.message_key ?? ""),
+    messageSubject: String(row.message_subject ?? ""),
+    completedAt: row.completed_at === null || row.completed_at === void 0 ? null : String(row.completed_at),
+    dirty: Number(row.dirty) === 1,
+    deleted: Number(row.deleted) === 1,
+    createdAt: String(row.created_at ?? ""),
+    updatedAt: String(row.updated_at ?? "")
+  };
+}
+function statusOf(value) {
+  const text2 = String(value ?? "NEEDS-ACTION").toUpperCase();
+  return STATUSES.has(text2) ? text2 : "NEEDS-ACTION";
+}
+var TaskStore = class {
+  file;
+  db = null;
+  constructor(file) {
+    this.file = file;
+  }
+  close() {
+    if (this.db !== null) {
+      this.db.close();
+      this.db = null;
+    }
+  }
+  open() {
+    if (this.db !== null) return this.db;
+    mkdirSync6(dirname3(this.file), { recursive: true });
+    const db = new DatabaseSync3(this.file);
+    db.exec("PRAGMA journal_mode=WAL");
+    db.exec("PRAGMA busy_timeout=10000");
+    db.exec(`
+      CREATE TABLE IF NOT EXISTS tasks (
+        id TEXT PRIMARY KEY,
+        account_id TEXT NOT NULL,
+        project_id TEXT,
+        calendar_href TEXT,
+        href TEXT,
+        etag TEXT,
+        uid TEXT NOT NULL,
+        title TEXT NOT NULL,
+        notes TEXT,
+        due TEXT,
+        status TEXT NOT NULL DEFAULT 'NEEDS-ACTION',
+        priority INTEGER NOT NULL DEFAULT 0,
+        owner TEXT,
+        message_key TEXT,
+        message_subject TEXT,
+        completed_at TEXT,
+        dirty INTEGER NOT NULL DEFAULT 1,
+        deleted INTEGER NOT NULL DEFAULT 0,
+        created_at TEXT NOT NULL,
+        updated_at TEXT NOT NULL
+      );
+      CREATE INDEX IF NOT EXISTS tasks_account_due ON tasks (account_id, deleted, status, due);
+      CREATE INDEX IF NOT EXISTS tasks_project ON tasks (project_id);
+      CREATE TABLE IF NOT EXISTS calendar_state (
+        account_id TEXT PRIMARY KEY,
+        calendar_href TEXT,
+        display_name TEXT,
+        ctag TEXT,
+        last_sync TEXT,
+        error TEXT
+      );
+    `);
+    this.db = db;
+    return db;
+  }
+  list(options) {
+    const db = this.open();
+    const where = ["account_id = ?", "deleted = 0"];
+    const params = [options.accountId];
+    if (options.status !== void 0 && options.status !== "") {
+      where.push("status = ?");
+      params.push(statusOf(options.status));
+    }
+    if (options.projectId !== void 0 && options.projectId !== "") {
+      where.push("project_id = ?");
+      params.push(options.projectId);
+    }
+    const text2 = String(options.query ?? "").trim();
+    if (text2 !== "") {
+      where.push("(title LIKE ? OR notes LIKE ? OR owner LIKE ?)");
+      const like = `%${text2}%`;
+      params.push(like, like, like);
+    }
+    const rows = db.prepare(
+      `SELECT * FROM tasks WHERE ${where.join(" AND ")}
+         ORDER BY CASE WHEN completed_at IS NOT NULL THEN 1 ELSE 0 END,
+                  CASE WHEN due IS NULL OR due = '' THEN 1 ELSE 0 END, due ASC, created_at DESC
+         LIMIT ?`
+    ).all(...params, Math.max(1, Math.min(1e3, options.limit ?? 500)));
+    return rows.map((row) => rowToTask(row)).filter((task) => task !== void 0);
+  }
+  get(id) {
+    return rowToTask(
+      this.open().prepare("SELECT * FROM tasks WHERE id = ?").get(id)
+    );
+  }
+  create(input) {
+    const title = String(input.title ?? "").trim();
+    if (title === "") throw new Error("\u4EFB\u52A1\u6807\u9898\u4E0D\u80FD\u4E3A\u7A7A");
+    if (title.length > 300) throw new Error("\u4EFB\u52A1\u6807\u9898\u8FC7\u957F");
+    const status = statusOf(input.status);
+    const id = `task_${randomUUID4()}`;
+    const stamp3 = now();
+    this.open().prepare(
+      `INSERT INTO tasks (id, account_id, project_id, uid, title, notes, due, status, priority, owner,
+                            message_key, message_subject, completed_at, dirty, deleted, created_at, updated_at)
+         VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, 1, 0, ?, ?)`
+    ).run(
+      id,
+      input.accountId,
+      input.projectId ?? null,
+      `${randomUUID4()}@dsh-mailharbor`,
+      title,
+      String(input.notes ?? ""),
+      String(input.due ?? ""),
+      status,
+      Math.max(0, Math.min(9, Number(input.priority ?? 0))),
+      String(input.owner ?? ""),
+      String(input.messageKey ?? ""),
+      String(input.messageSubject ?? ""),
+      status === "COMPLETED" ? stamp3 : null,
+      stamp3,
+      stamp3
+    );
+    const task = this.get(id);
+    if (task === void 0) throw new Error("\u4EFB\u52A1\u521B\u5EFA\u5931\u8D25");
+    return task;
+  }
+  update(id, fields) {
+    const current = this.get(id);
+    if (current === void 0) throw new Error("\u4EFB\u52A1\u4E0D\u5B58\u5728");
+    const next = {
+      title: fields.title === void 0 ? current.title : String(fields.title).trim(),
+      notes: fields.notes === void 0 ? current.notes : String(fields.notes ?? ""),
+      due: fields.due === void 0 ? current.due : String(fields.due ?? ""),
+      status: fields.status === void 0 ? current.status : statusOf(fields.status),
+      priority: fields.priority === void 0 ? current.priority : Number(fields.priority),
+      owner: fields.owner === void 0 ? current.owner : String(fields.owner ?? ""),
+      projectId: fields.projectId === void 0 ? current.projectId : fields.projectId,
+      messageKey: fields.messageKey === void 0 ? current.messageKey : String(fields.messageKey),
+      messageSubject: fields.messageSubject === void 0 ? current.messageSubject : String(fields.messageSubject)
+    };
+    if (next.title === "") throw new Error("\u4EFB\u52A1\u6807\u9898\u4E0D\u80FD\u4E3A\u7A7A");
+    const stamp3 = now();
+    const completedAt = next.status === "COMPLETED" ? current.completedAt ?? stamp3 : null;
+    this.open().prepare(
+      `UPDATE tasks SET title = ?, notes = ?, due = ?, status = ?, priority = ?, owner = ?, project_id = ?,
+                message_key = ?, message_subject = ?, completed_at = ?, dirty = 1, updated_at = ? WHERE id = ?`
+    ).run(
+      next.title,
+      next.notes,
+      next.due,
+      next.status,
+      Math.max(0, Math.min(9, Number(next.priority) || 0)),
+      next.owner,
+      next.projectId,
+      next.messageKey,
+      next.messageSubject,
+      completedAt,
+      stamp3,
+      id
+    );
+    const task = this.get(id);
+    if (task === void 0) throw new Error("\u4EFB\u52A1\u66F4\u65B0\u5931\u8D25");
+    return task;
+  }
+  remove(id) {
+    const current = this.get(id);
+    if (current === void 0) return false;
+    if (current.href !== null && current.href !== "") {
+      this.open().prepare("UPDATE tasks SET deleted = 1, dirty = 1, updated_at = ? WHERE id = ?").run(now(), id);
+    } else {
+      this.open().prepare("DELETE FROM tasks WHERE id = ?").run(id);
+    }
+    return true;
+  }
+  /** Apply a VTODO fetched from CalDAV; local pending edits win over remote. */
+  applyRemote(input) {
+    const db = this.open();
+    const existing = db.prepare("SELECT * FROM tasks WHERE account_id = ? AND href = ?").get(input.accountId, input.href) ?? db.prepare("SELECT * FROM tasks WHERE account_id = ? AND uid = ?").get(input.accountId, input.todo.uid);
+    const status = statusOf(input.todo.status);
+    const completedAt = status === "COMPLETED" ? input.todo.completedAt ?? now() : null;
+    if (existing !== void 0) {
+      if (Number(existing.dirty) === 1) return rowToTask(existing);
+      db.prepare(
+        `UPDATE tasks SET calendar_href = ?, href = ?, etag = ?, title = ?, notes = ?, due = ?, status = ?, priority = ?,
+                completed_at = ?, dirty = 0, deleted = 0, updated_at = ? WHERE id = ?`
+      ).run(
+        input.calendarHref,
+        input.href,
+        input.etag,
+        String(input.todo.title || existing.title),
+        String(input.todo.notes ?? ""),
+        String(input.todo.due ?? ""),
+        status,
+        Math.max(0, Math.min(9, Number(input.todo.priority) || 0)),
+        completedAt,
+        now(),
+        String(existing.id)
+      );
+      return this.get(String(existing.id));
+    }
+    const id = `task_${randomUUID4()}`;
+    const stamp3 = now();
+    db.prepare(
+      `INSERT INTO tasks (id, account_id, calendar_href, href, etag, uid, title, notes, due, status, priority,
+                          completed_at, dirty, deleted, created_at, updated_at)
+       VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, 0, 0, ?, ?)`
+    ).run(
+      id,
+      input.accountId,
+      input.calendarHref,
+      input.href,
+      input.etag,
+      input.todo.uid || `${randomUUID4()}@dsh-mailharbor`,
+      String(input.todo.title || "(\u65E0\u6807\u9898)"),
+      String(input.todo.notes ?? ""),
+      String(input.todo.due ?? ""),
+      status,
+      Math.max(0, Math.min(9, Number(input.todo.priority) || 0)),
+      completedAt,
+      stamp3,
+      stamp3
+    );
+    return this.get(id);
+  }
+  pending(accountId) {
+    return this.open().prepare("SELECT * FROM tasks WHERE account_id = ? AND dirty = 1").all(accountId).map((row) => rowToTask(row)).filter((task) => task !== void 0);
+  }
+  markPushed(id, result) {
+    this.open().prepare(
+      "UPDATE tasks SET href = ?, etag = ?, uid = ?, dirty = 0, deleted = 0, updated_at = ? WHERE id = ?"
+    ).run(result.href, result.etag, result.uid, now(), id);
+    return this.get(id);
+  }
+  purge(id) {
+    this.open().prepare("DELETE FROM tasks WHERE id = ?").run(id);
+  }
+  /** Remove local copies whose remote VTODO disappeared (not dirty, not tombstoned). */
+  pruneMissingRemote(accountId, calendarHref, hrefs) {
+    const db = this.open();
+    const present = new Set(hrefs);
+    const rows = db.prepare(
+      `SELECT id, href FROM tasks
+         WHERE account_id = ? AND dirty = 0 AND deleted = 0 AND href IS NOT NULL
+           AND (calendar_href = ? OR calendar_href IS NULL OR calendar_href = '')`
+    ).all(accountId, calendarHref);
+    let removed = 0;
+    for (const row of rows) {
+      if (present.has(String(row.href))) continue;
+      db.prepare("DELETE FROM tasks WHERE id = ?").run(String(row.id));
+      removed += 1;
+    }
+    return removed;
+  }
+  calendarState(accountId) {
+    const row = this.open().prepare("SELECT * FROM calendar_state WHERE account_id = ?").get(accountId);
+    if (row === void 0) return null;
+    return {
+      calendarHref: String(row.calendar_href ?? ""),
+      lastSync: String(row.last_sync ?? ""),
+      error: String(row.error ?? "")
+    };
+  }
+  setCalendarState(accountId, state) {
+    this.open().prepare(
+      `INSERT INTO calendar_state (account_id, calendar_href, display_name, ctag, last_sync, error)
+         VALUES (?, ?, NULL, NULL, ?, ?)
+         ON CONFLICT(account_id) DO UPDATE SET calendar_href = excluded.calendar_href,
+           last_sync = excluded.last_sync, error = excluded.error`
+    ).run(accountId, state.calendarHref ?? null, state.lastSync ?? null, state.error ?? null);
+  }
+  /** Pull remote tasks, push local edits, and record the sync result. */
+  async sync(accountId, client) {
+    try {
+      const result = await client.sync(this, accountId);
+      this.setCalendarState(accountId, {
+        calendarHref: result.calendarHref,
+        lastSync: (/* @__PURE__ */ new Date()).toISOString(),
+        error: null
+      });
+      return result;
+    } catch (error) {
+      this.setCalendarState(accountId, {
+        lastSync: (/* @__PURE__ */ new Date()).toISOString(),
+        error: error instanceof Error ? error.message : String(error)
+      });
+      throw error;
+    }
+  }
+};
+
 // src/host/drafts.ts
-import { randomUUID as randomUUID3 } from "node:crypto";
-import { mkdirSync as mkdirSync5, readFileSync as readFileSync5, renameSync as renameSync4, writeFileSync as writeFileSync5 } from "node:fs";
-import { dirname as dirname3, join as join4 } from "node:path";
+import { randomUUID as randomUUID5 } from "node:crypto";
+import { mkdirSync as mkdirSync7, readFileSync as readFileSync6, renameSync as renameSync5, writeFileSync as writeFileSync6 } from "node:fs";
+import { dirname as dirname4, join as join6 } from "node:path";
 function text(value) {
   return value === void 0 || value === null ? "" : String(value);
 }
@@ -2910,7 +4116,7 @@ function isDraft(value) {
   return value !== null && typeof value === "object" && typeof value.id === "string";
 }
 function draftPath(root) {
-  return join4(root, "drafts.json");
+  return join6(root, "drafts.json");
 }
 var DraftStore = class {
   file;
@@ -2923,18 +4129,18 @@ var DraftStore = class {
   }
   load() {
     try {
-      const parsed = JSON.parse(readFileSync5(this.file, "utf8"));
+      const parsed = JSON.parse(readFileSync6(this.file, "utf8"));
       this.items = Array.isArray(parsed) ? parsed.filter(isDraft) : [];
     } catch {
       this.items = [];
     }
   }
   flush() {
-    mkdirSync5(dirname3(this.file), { recursive: true });
+    mkdirSync7(dirname4(this.file), { recursive: true });
     const temp = `${this.file}.${String(process.pid)}.${String(Date.now())}.tmp`;
-    writeFileSync5(temp, `${JSON.stringify(this.items, null, 2)}
+    writeFileSync6(temp, `${JSON.stringify(this.items, null, 2)}
 `, { encoding: "utf8", mode: 384 });
-    renameSync4(temp, this.file);
+    renameSync5(temp, this.file);
   }
   list() {
     return [...this.items].sort((left, right) => right.updatedAt.localeCompare(left.updatedAt)).map((draft) => ({ ...draft }));
@@ -2944,7 +4150,7 @@ var DraftStore = class {
     return found === void 0 ? void 0 : { ...found };
   }
   save(input) {
-    const now = (/* @__PURE__ */ new Date()).toISOString();
+    const now2 = (/* @__PURE__ */ new Date()).toISOString();
     const existing = input.id === void 0 ? void 0 : this.items.find((draft2) => draft2.id === input.id);
     const fields = {
       to: text(input.to),
@@ -2961,15 +4167,15 @@ var DraftStore = class {
       references: text(input.references)
     };
     if (existing !== void 0) {
-      Object.assign(existing, fields, { updatedAt: now });
+      Object.assign(existing, fields, { updatedAt: now2 });
       this.flush();
       return { ...existing };
     }
     const draft = {
-      id: randomUUID3(),
+      id: randomUUID5(),
       accountId: this.accountId,
       ...fields,
-      updatedAt: now
+      updatedAt: now2
     };
     this.items.push(draft);
     this.flush();
@@ -2991,8 +4197,8 @@ var DraftStore = class {
 init_imap();
 
 // src/host/read-state.ts
-import { mkdirSync as mkdirSync6, readFileSync as readFileSync6, renameSync as renameSync5, writeFileSync as writeFileSync6 } from "node:fs";
-import { dirname as dirname4 } from "node:path";
+import { mkdirSync as mkdirSync8, readFileSync as readFileSync7, renameSync as renameSync6, writeFileSync as writeFileSync7 } from "node:fs";
+import { dirname as dirname5 } from "node:path";
 var ReadStateStore = class {
   file;
   keys = null;
@@ -3002,7 +4208,7 @@ var ReadStateStore = class {
   load() {
     if (this.keys !== null) return this.keys;
     try {
-      const parsed = JSON.parse(readFileSync6(this.file, "utf8"));
+      const parsed = JSON.parse(readFileSync7(this.file, "utf8"));
       const list = Array.isArray(parsed) ? parsed : Array.isArray(parsed?.unread) ? parsed.unread : [];
       this.keys = new Set(list.filter((key) => typeof key === "string" && key !== ""));
     } catch {
@@ -3011,14 +4217,14 @@ var ReadStateStore = class {
     return this.keys;
   }
   flush() {
-    mkdirSync6(dirname4(this.file), { recursive: true });
+    mkdirSync8(dirname5(this.file), { recursive: true });
     const temp = `${this.file}.${String(process.pid)}.tmp`;
-    writeFileSync6(temp, `${JSON.stringify({ unread: [...this.load()] }, null, 2)}
+    writeFileSync7(temp, `${JSON.stringify({ unread: [...this.load()] }, null, 2)}
 `, {
       encoding: "utf8",
       mode: 384
     });
-    renameSync5(temp, this.file);
+    renameSync6(temp, this.file);
   }
   isUnread(key) {
     return key !== "" && this.load().has(key);
@@ -3077,12 +4283,30 @@ var MailHarborRuntime = class {
   aiStores = /* @__PURE__ */ new Map();
   backups = /* @__PURE__ */ new Map();
   llmProvider;
+  workspaceRegistry;
+  sessions;
   aiService = null;
+  projectStore = null;
+  taskStore = null;
   disposed = false;
   constructor(options = {}) {
     this.config = loadConfig();
     this.credentials = options.credentials ?? new CredentialManager();
     this.llmProvider = options.llm ?? (() => void 0);
+    this.workspaceRegistry = options.workspaceRegistry;
+    this.sessions = options.sessions;
+  }
+  projects() {
+    if (this.projectStore === null) {
+      this.projectStore = new ProjectStore(join7(this.config.dataDir, "projects.json"));
+    }
+    return this.projectStore;
+  }
+  tasks() {
+    if (this.taskStore === null) {
+      this.taskStore = new TaskStore(join7(this.config.dataDir, "state", "state.db"));
+    }
+    return this.taskStore;
   }
   /** The Host model service, when the composition provides one. */
   llm() {
@@ -3208,7 +4432,7 @@ var MailHarborRuntime = class {
     return created;
   }
   aiThreads(account) {
-    const file = join5(this.paths(account).root, "ai-threads.json");
+    const file = join7(this.paths(account).root, "ai-threads.json");
     const existing = this.aiStores.get(account.id);
     if (existing !== void 0 && existing.signature === file) return existing.value;
     const created = new AiThreadStore(file);
@@ -3216,7 +4440,7 @@ var MailHarborRuntime = class {
     return created;
   }
   readState(account) {
-    const file = join5(this.paths(account).root, "read-state.json");
+    const file = join7(this.paths(account).root, "read-state.json");
     const existing = this.readStores.get(account.id);
     if (existing !== void 0 && existing.signature === file) return existing.value;
     const created = new ReadStateStore(file);
@@ -3295,6 +4519,7 @@ var MailHarborRuntime = class {
     this.providers.clear();
     for (const db of this.databases.values()) db.value.close();
     this.databases.clear();
+    this.taskStore?.close();
   }
 };
 
@@ -3677,8 +4902,22 @@ ${page.items.map(
 var name = "mailharbor";
 var inject = ["webServer", "tools"];
 var ROUTE = "/mail-plugin";
+function optionalService(ctx, name2) {
+  try {
+    const direct = ctx[name2];
+    if (direct !== void 0 && direct !== null) return direct;
+  } catch {
+  }
+  try {
+    return ctx.get?.(name2) ?? void 0;
+  } catch {
+    return void 0;
+  }
+}
 function apply(ctx) {
   const runtime = new MailHarborRuntime({
+    workspaceRegistry: optionalService(ctx, "workspaceRegistry"),
+    sessions: optionalService(ctx, "sessions"),
     llm: () => {
       if (typeof ctx.get !== "function") return void 0;
       try {