drafted 1.19.3 → 1.19.5

package/mcp/server.mjs

@@ -257,7 +257,7 @@ export function splitOrgScope(raw) {
   if (!/^\/o\//.test(raw || '')) return { path: raw, org: null };
   const m = String(raw).match(/^\/o\/([^/]+)(?:\/(.*))?$/);
   if (!m || !m[1]) {
-    return { error: `Invalid org-scoped path: ${raw} — expected /o/<org>/<root>/... where <root> is wiki, skills, or projects` };
+    return { error: `Invalid org-scoped path: ${raw} — expected /o/<org>/<root>/... where <root> is wiki, skills, tasks, or projects` };
   }
   return { path: m[2] ? `/${m[2]}` : '/', org: decodeURIComponent(m[1]) };
 }
@@ -2793,6 +2793,7 @@ server.resource('info', 'drafted://info', {
         roots: {
           wiki: '/o/<org>/wiki/<path>',
           skills: '/o/<org>/skills/<slug>',
+          tasks: '/o/<org>/tasks/<lane?>/<file>',
           projects: '/o/<org>/projects/<folder?>/<project>/<layer>/<lane>/<file>',
         },
         tools: ['fs (ls/read/write/edit/mv/rm/mkdir/search)', 'whoami', 'auth', 'session', 'trigger', 'focus', 'tour', 'screenshot', 'minion'],
@@ -2801,9 +2802,9 @@ server.resource('info', 'drafted://info', {
   };
 });
 
-tool('fs', 'Navigate Drafted like a local filesystem. An org is the top folder: `fs(ls, path="/")` lists the orgs you can address, then `/o/<org>/<root>/...` addresses one of them — the org is part of the path, there is no org switching:\n\n- `/o/<org>/wiki/<path>` — org knowledge pages (markdown, OKF; free nesting; `index.md` at any level is synthesized and read-only)\n- `/o/<org>/skills/<slug>` — reusable procedures (flat: one dir per skill slug, `SKILL.md` + supporting files inside)\n- `/o/<org>/projects/<folder?>/<project>/<layer>/<lane>/<file>` — producible frames (folder optional; then exactly layer → lane → file)\n\n(Bare `/wiki`, `/skills`, `/projects` roots still resolve via the session\'s working org.)\n\nVerbs: `ls` (list a directory), `read` (file content — hashline-annotated for text so `edit` stays surgical), `write` (create/overwrite; extension + layer classify the type: .html design, .md document, .excalidraw diagram, .xlsx/.docx office, images/videos media, .pdf asset, .google-doc/.google-sheet/.google-slide create native Google Workspace files), `edit` (hashline ops for text, element ops for excalidraw, structured ops for office), `mv` (rename/move, cross-project), `rm` (delete), `search` (frames are searched by label AND content, with the matching line returned as a snippet; `fs(search, path="/")` or `path="/o/<org>"` fans out across wiki + skills + projects in one call). `mkdir` creates a project only: use `/projects/<project>` or `/projects/<folder>/<project>`, never a layer path. To create a layer, write its first frame at `/projects/<project>/<new-layer>/<lane>/<file>`.\n\nThe project is resolved from the path itself — no separate "open" step. Guardrails are server-side and unchanged: the org in the path must be the project\'s own org (project paths under /o/<org>/ validate it), the G1 wiki-search gate fires before project mutations, attached-skill gates fire on mutations, anchored frames must be read before editing a layer, `.skillinstall/` is stripped on skill push.', {
+tool('fs', 'Navigate Drafted like a local filesystem. An org is the top folder: `fs(ls, path="/")` lists the orgs you can address, then `/o/<org>/<root>/...` addresses one of them — the org is part of the path, there is no org switching:\n\n- `/o/<org>/wiki/<path>` — org knowledge pages (markdown, OKF; free nesting; `index.md` at any level is synthesized and read-only)\n- `/o/<org>/skills/<slug>` — reusable procedures (flat: one dir per skill slug, `SKILL.md` + supporting files inside)\n- `/o/<org>/tasks/<lane?>/<file>` — work items. A task IS a frame: `read` renders its `drafted:status:`/`drafted:assignee:` as front matter and `write`/`edit` parse them back into columns, so they are never stored in the body. The keys are namespaced so an ordinary `status:` in your own front matter is left alone. Valid statuses: open, in_progress, scheduled, needs_review, needs_decision, done, failed (an empty `drafted:status:` clears it). Status is a column, not a location — a task moved out of /tasks stays a task.\n- `/o/<org>/projects/<folder?>/<project>/<layer>/<lane>/<file>` — producible frames (folder optional; then exactly layer → lane → file)\n\n(Bare `/wiki`, `/skills`, `/tasks`, `/projects` roots still resolve via the session\'s working org.)\n\nVerbs: `ls` (list a directory), `read` (file content — hashline-annotated for text so `edit` stays surgical), `write` (create/overwrite; extension + layer classify the type: .html design, .md document, .excalidraw diagram, .xlsx/.docx office, images/videos media, .pdf asset, .google-doc/.google-sheet/.google-slide create native Google Workspace files), `edit` (hashline ops for text, element ops for excalidraw, structured ops for office), `mv` (rename/move, cross-project), `rm` (delete), `search` (frames are searched by label AND content, with the matching line returned as a snippet; `fs(search, path="/")` or `path="/o/<org>"` fans out across wiki + skills + projects in one call). `mkdir` creates a project only: use `/projects/<project>` or `/projects/<folder>/<project>`, never a layer path. To create a layer, write its first frame at `/projects/<project>/<new-layer>/<lane>/<file>`.\n\nThe project is resolved from the path itself — no separate "open" step. Guardrails are server-side and unchanged: the org in the path must be the project\'s own org (project paths under /o/<org>/ validate it), the G1 wiki-search gate fires before project mutations, attached-skill gates fire on mutations, anchored frames must be read before editing a layer, `.skillinstall/` is stripped on skill push.', {
   action: z.enum(['ls', 'read', 'write', 'edit', 'mv', 'rm', 'mkdir', 'search']).describe('Filesystem verb.'),
-  path: z.string().describe('Drafted path: /o/<org>/wiki/... | /o/<org>/skills/... | /o/<org>/projects/... (bare /wiki, /skills, /projects also work; for mv: source)'),
+  path: z.string().describe('Drafted path: /o/<org>/wiki/... | /o/<org>/skills/... | /o/<org>/tasks/... | /o/<org>/projects/... (bare /wiki, /skills, /tasks, /projects also work; for mv: source)'),
   to: z.string().optional().describe('[mv] destination path'),
   query: z.string().optional().describe('[search] term to match against names/content'),
   content: z.string().optional().describe('[write] inline HTML/markdown/text'),
@@ -2910,12 +2911,13 @@ tool('fs', 'Navigate Drafted like a local filesystem. An org is the top folder:
 
       return ok(`Search "${q}"${orgFromPath ? ` in /o/${orgFromPath}` : ''}\n\n${out.join('\n\n')}`);
     }
-    if (action !== 'ls') return err(new Error('read/write/edit/mv/rm require a path under /o/<org>/wiki, /o/<org>/skills, or /o/<org>/projects'));
+    if (action !== 'ls') return err(new Error('read/write/edit/mv/rm require a path under /o/<org>/wiki, /o/<org>/skills, /o/<org>/tasks, or /o/<org>/projects'));
     if (orgFromPath) {
-      // ls /o/<org> → that org's three roots
+      // ls /o/<org> → that org's roots
       return ok([
         { name: 'wiki', type: 'directory', path: `/o/${orgFromPath}/wiki`, hint: 'org knowledge pages (markdown, OKF)' },
         { name: 'skills', type: 'directory', path: `/o/${orgFromPath}/skills`, hint: 'reusable procedures (flat: one dir per skill slug)' },
+        { name: 'tasks', type: 'directory', path: `/o/${orgFromPath}/tasks`, hint: 'work items — a task is a frame; status/assignee are front matter on read' },
         { name: 'projects', type: 'directory', path: `/o/${orgFromPath}/projects`, hint: '<folder?>/<project>/<layer>/<lane>/<file>' },
       ]);
     }
@@ -3149,6 +3151,44 @@ tool('fs', 'Navigate Drafted like a local filesystem. An org is the top folder:
     }
   }
 
+  // ── Root: /tasks/... ───────────────────────────────────────────
+  // /tasks is an ADDRESS, not a fourth store. It resolves to a per-org system
+  // project holding a single `tasks` layer, so every verb below is the ordinary
+  // /projects machinery and a task frame has a real project id and a real path.
+  // status/assignee live in COLUMNS (projected as front matter by read/write),
+  // so a task moved out of here stays a task.
+  const isTasksPath = (x) => x === '/tasks' || x === '/tasks/' || String(x || '').startsWith('/tasks/');
+  if (isTasksPath(p) || isTasksPath(to)) {
+    if (['write', 'edit', 'mv', 'rm'].includes(action)) {
+      // Project-less: the org cannot be guessed (same guard as /wiki and /skills).
+      await requireBoundOrgForProjectlessMutation(org || orgFromPath);
+    }
+    if ((action === 'rm' || action === 'mv') && (p === '/tasks' || p === '/tasks/')) {
+      return err(new Error('/tasks is the org task root — it cannot be moved or deleted. Address a task: /o/<org>/tasks/<file> or /o/<org>/tasks/<lane>/<file>'));
+    }
+    // A READ never creates. Resolving the tasks root is a project create, and on
+    // an unbound multi-org session the org here is an inherited cursor — so
+    // `fs(ls, path="/tasks")` creating one would put a real "Tasks" project in
+    // an org the agent never named (DRAFT-36: org is an address, not a guess).
+    // Writes are guarded above and may create; reads say "nothing here yet".
+    const readOnly = !['write', 'edit', 'mv', 'rm'].includes(action);
+    const sys = await api('POST', '/api/tasks/project', readOnly ? { create: false } : {}, orgHeader)
+      .catch((e) => (readOnly && e.status === 404 ? null : Promise.reject(e)));
+    if (!sys?.id) {
+      if (action === 'ls' || action === 'search') {
+        return ok({ path: p, entries: [], totalAvailable: 0, note: 'This org has no tasks yet — writing a task under /tasks creates the root.' });
+      }
+      if (readOnly) return err(new Error(`Not found: ${p} — this org has no tasks yet.`));
+      return err(new Error('could not resolve the tasks project for this org'));
+    }
+    // Seed the cache by id so the /projects branch resolves it without a lookup
+    // (its /api/projects listing is not org-scoped).
+    projectRefCache.set(sys.id, { id: sys.id, slug: sys.slug, name: sys.name, orgId: sys.orgId, orgSlug: sys.orgSlug });
+    const rewrite = (x) => `/projects/${sys.id}/tasks${x === '/tasks' || x === '/tasks/' ? '' : x.slice('/tasks'.length)}`;
+    if (isTasksPath(p)) p = rewrite(p);
+    if (isTasksPath(to)) to = rewrite(to);
+  }
+
   // ── Root: /projects/... ────────────────────────────────────────
   if (p.startsWith('/projects')) {
     const parts = p.replace(/^\/projects\/?/, '').split('/').filter(Boolean);
@@ -3471,7 +3511,7 @@ tool('fs', 'Navigate Drafted like a local filesystem. An org is the top folder:
     return meta ? withProjectOverride(meta, run) : run();
   }
 
-  return err(new Error(`unknown fs path: ${rawPath} — expected /o/<org>/wiki/..., /o/<org>/skills/..., or /o/<org>/projects/... (bare /wiki, /skills, /projects still work)`));
+  return err(new Error(`unknown fs path: ${rawPath} — expected /o/<org>/wiki/..., /o/<org>/skills/..., /o/<org>/tasks/..., or /o/<org>/projects/... (bare /wiki, /skills, /tasks, /projects still work)`));
 });
 
 // ── repo tool: registered git repos (org substrate, Phase 4) ──────────

package/mcp/test-org-guards.mjs

@@ -153,6 +153,8 @@ assert.deepEqual(splitOrgScope('/o/acme/projects/design/beoflow/wireframes/x.htm
 assert.deepEqual(splitOrgScope('/o/acme'), { path: '/', org: 'acme' }, 'ls /o/<org> lists that org\'s roots');
 assert.deepEqual(splitOrgScope('/o/acme/'), { path: '/', org: 'acme' }, 'trailing slash on the org root is harmless');
 assert.deepEqual(splitOrgScope('/o/acme%20brand/skills'), { path: '/skills', org: 'acme brand' }, 'org segment is URL-decoded');
+assert.deepEqual(splitOrgScope('/o/acme/tasks'), { path: '/tasks', org: 'acme' }, 'the tasks root is a root like any other');
+assert.deepEqual(splitOrgScope('/o/acme/tasks/sprint-1/ship-it.md'), { path: '/tasks/sprint-1/ship-it.md', org: 'acme' }, 'a lane + file under /tasks strips to the bare root + org');
 assert.deepEqual(splitOrgScope('/wiki/engineering'), { path: '/wiki/engineering', org: null }, 'bare root paths pass through untouched');
 assert.deepEqual(splitOrgScope('/projects/x/y/z.html'), { path: '/projects/x/y/z.html', org: null }, 'bare project paths pass through untouched');
 assert.ok(splitOrgScope('/o/').error, 'a bare /o/ is an invalid org-scoped path');

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "drafted",
-  "version": "1.19.3",
+  "version": "1.19.5",
   "description": "Drafted — visual thinking surface for humans and AI agents. Renders HTML, markdown, images, and code as frames on a zoomable canvas, with MCP tools for AI agents and real-time sync for humans.",
   "type": "module",
   "files": [