esedre 0.1.6 → 0.1.8

package/dist/esedre.mjs

@@ -9,7 +9,7 @@ import fs3 from "node:fs";
 import path3 from "node:path";
 
 // src/types.ts
-var CURRENT_ESEDRE_VERSION = "0.1.6";
+var CURRENT_ESEDRE_VERSION = "0.1.8";
 var EsedreConflictError = class extends Error {
   constructor(ticketId, currentHash, lastHash) {
     super(
@@ -30,8 +30,8 @@ import fs from "node:fs";
 import path from "node:path";
 import os from "node:os";
 var DEFAULT_ESEDRE_PORT = 5674;
-var MAX_PROJECT_CODE_LENGTH = 7;
-var PROJECT_CODE_REGEX = /^[a-zA-Z0-9]{1,7}$/;
+var MAX_PROJECT_CODE_LENGTH = 8;
+var PROJECT_CODE_REGEX = /^[a-zA-Z0-9]{1,8}$/;
 var MAX_PROJECT_NAME_LENGTH = 48;
 function resolvePorts(config, overrides) {
   const globalConfig = readGlobalConfig();
@@ -244,9 +244,11 @@ function removeLocationFromGlobalConfig(identifier) {
   if (current.dataDir) {
     const currentDataDirs = Array.isArray(current.dataDir) ? current.dataDir : [current.dataDir];
     const initialLen = currentDataDirs.length;
-    const remaining = currentDataDirs.filter(
-      (d) => path.resolve(expandHome(d)).toLowerCase() !== path.resolve(expandHome(trimmed)).toLowerCase()
-    );
+    const remaining = currentDataDirs.filter((d) => {
+      const matchPath = path.resolve(expandHome(d)).toLowerCase() === path.resolve(expandHome(trimmed)).toLowerCase();
+      const matchBasename = path.basename(d).toLowerCase() === trimmed.toLowerCase();
+      return !matchPath && !matchBasename;
+    });
     if (remaining.length !== initialLen) {
       current.dataDir = remaining.length === 0 ? void 0 : remaining.length === 1 ? remaining[0] : remaining;
       writeGlobalConfig(current);
@@ -537,12 +539,12 @@ async function generateProjectSnapshot(storage, projectCode, outputDir) {
 }
 
 // src/storage/filesystem.ts
-function isProjectMatch(code, slug, filter) {
+function isProjectMatch(code, filter) {
+  if (!code || !filter) return false;
   const f = filter.trim().toLowerCase();
   const c = code.trim().toLowerCase();
-  const s = slug.trim().toLowerCase();
-  if (c === f || s === f) return true;
-  if ((f === "prof" || f === "core" || f === "pasrc") && (c === "prof" || c === "core")) return true;
+  if (c === f) return true;
+  if ((f === "profe" || f === "prof" || f === "core" || f === "pasrc") && (c === "profe" || c === "prof" || c === "core")) return true;
   if ((f === "esedre" || f === "ese" || f === "docs") && (c === "esedre" || c === "docs")) return true;
   if ((f === "alce" || f === "web") && (c === "alce" || c === "web")) return true;
   return false;
@@ -570,17 +572,51 @@ function writeSafeFile(filePath, content) {
 var FilesystemStorageAdapter = class {
   workspaceRoot;
   config;
+  isConfigExplicit = false;
+  lastConfigCheck = 0;
+  configTtlMs = 3e3;
+  duplicateProjectWarnings = [];
+  getDuplicateProjectWarnings() {
+    this.resolveProjectLocations();
+    return [...this.duplicateProjectWarnings];
+  }
   constructor(workspaceRoot, config) {
     this.workspaceRoot = workspaceRoot || this.resolveWorkspaceRoot();
     if (config) {
       this.config = config;
+      this.isConfigExplicit = true;
+      this.lastConfigCheck = Date.now();
     } else {
-      try {
-        const discovered = findEsedreConfig(this.workspaceRoot);
-        this.config = discovered.config || {};
-      } catch {
-        this.config = {};
+      this.config = {};
+      this.refreshConfig();
+    }
+  }
+  refreshConfig() {
+    try {
+      const discovered = findEsedreConfig(this.workspaceRoot);
+      this.config = discovered.config || {};
+    } catch {
+      this.config = {};
+    }
+    this.lastConfigCheck = Date.now();
+  }
+  ensureFreshConfig() {
+    if (this.isConfigExplicit && this.config.allowedProjects?.includes("*")) {
+      if (Date.now() - this.lastConfigCheck > this.configTtlMs) {
+        try {
+          const discovered = findEsedreConfig(this.workspaceRoot, { fallbackToGlobal: true });
+          this.config = {
+            ...discovered.config,
+            allowedProjects: ["*"]
+          };
+        } catch {
+        }
+        this.lastConfigCheck = Date.now();
       }
+      return;
+    }
+    if (!this.isConfigExplicit && Date.now() - this.lastConfigCheck > this.configTtlMs) {
+      this.refreshConfig();
     }
   }
   resolveWorkspaceRoot() {
@@ -599,8 +635,11 @@ var FilesystemStorageAdapter = class {
     return process.cwd();
   }
   resolveProjectLocations() {
+    this.ensureFreshConfig();
     const locations = [];
     const seenCodes = /* @__PURE__ */ new Set();
+    const codeToSource = /* @__PURE__ */ new Map();
+    this.duplicateProjectWarnings = [];
     const rawDataDirs = Array.isArray(this.config.dataDir) ? [...this.config.dataDir] : this.config.dataDir ? [this.config.dataDir] : [];
     if (rawDataDirs.length === 0) {
       const candidateHubDirs = [
@@ -640,9 +679,6 @@ var FilesystemStorageAdapter = class {
           if (fs3.existsSync(pJsonPath)) {
             try {
               desc = JSON.parse(fs3.readFileSync(pJsonPath, "utf-8"));
-              if (desc && !desc.slug) {
-                desc.slug = (desc.code || ent.name).toLowerCase();
-              }
             } catch {
             }
           }
@@ -654,7 +690,7 @@ var FilesystemStorageAdapter = class {
                 try {
                   const hubProjs = JSON.parse(fs3.readFileSync(f, "utf-8"));
                   desc = hubProjs.find(
-                    (p) => p.code.toLowerCase() === ent.name.toLowerCase() || p.slug.toLowerCase() === ent.name.toLowerCase()
+                    (p) => p.code.toLowerCase() === ent.name.toLowerCase()
                   );
                   if (desc) break;
                 } catch {
@@ -666,20 +702,32 @@ var FilesystemStorageAdapter = class {
             desc = {
               id: locations.length + 1,
               code: ent.name,
-              slug: ent.name.toLowerCase(),
               name: ent.name,
               description: `${ent.name} project`
             };
           }
           const codeKey = desc.code.toLowerCase();
+          const sourceName = resolvedHub;
           if (!seenCodes.has(codeKey)) {
             seenCodes.add(codeKey);
+            codeToSource.set(codeKey, sourceName);
             locations.push({
               project: desc,
               ticketsDir: projectTicketsDir,
               sourceType: "hub",
               hubDir: resolvedHub
             });
+          } else {
+            const firstSource = codeToSource.get(codeKey) || "configured location";
+            if (firstSource.toLowerCase() !== sourceName.toLowerCase()) {
+              if (!this.duplicateProjectWarnings.some((w) => w.code.toLowerCase() === codeKey && w.duplicateHub.toLowerCase() === sourceName.toLowerCase())) {
+                this.duplicateProjectWarnings.push({
+                  code: desc.code,
+                  firstHub: firstSource,
+                  duplicateHub: sourceName
+                });
+              }
+            }
           }
         }
       } else {
@@ -705,7 +753,6 @@ var FilesystemStorageAdapter = class {
           descs = [{
             id: 1,
             code: pCode,
-            slug: pCode.toLowerCase(),
             name: pCode,
             description: `${pCode} project`
           }];
@@ -713,8 +760,10 @@ var FilesystemStorageAdapter = class {
         const isShared = descs.length > 1;
         for (const desc of descs) {
           const codeKey = desc.code.toLowerCase();
+          const sourceName = resolvedHub;
           if (!seenCodes.has(codeKey)) {
             seenCodes.add(codeKey);
+            codeToSource.set(codeKey, sourceName);
             locations.push({
               project: desc,
               ticketsDir: actualTicketsDir,
@@ -722,6 +771,17 @@ var FilesystemStorageAdapter = class {
               hubDir: resolvedHub,
               isSharedDir: isShared
             });
+          } else {
+            const firstSource = codeToSource.get(codeKey) || "configured location";
+            if (firstSource.toLowerCase() !== sourceName.toLowerCase()) {
+              if (!this.duplicateProjectWarnings.some((w) => w.code.toLowerCase() === codeKey && w.duplicateHub.toLowerCase() === sourceName.toLowerCase())) {
+                this.duplicateProjectWarnings.push({
+                  code: desc.code,
+                  firstHub: firstSource,
+                  duplicateHub: sourceName
+                });
+              }
+            }
           }
         }
       }
@@ -747,9 +807,6 @@ var FilesystemStorageAdapter = class {
           if (fs3.existsSync(cand)) {
             try {
               desc = JSON.parse(fs3.readFileSync(cand, "utf-8"));
-              if (desc && !desc.slug) {
-                desc.slug = (desc.code || code).toLowerCase();
-              }
               break;
             } catch {
             }
@@ -759,19 +816,31 @@ var FilesystemStorageAdapter = class {
           desc = {
             id: locations.length + 1,
             code,
-            slug: code.toLowerCase(),
             name: code,
             description: `${code} project`
           };
         }
         const codeKey = desc.code.toLowerCase();
+        const sourceName = projectDir;
         if (!seenCodes.has(codeKey)) {
           seenCodes.add(codeKey);
+          codeToSource.set(codeKey, sourceName);
           locations.push({
             project: desc,
             ticketsDir: actualTicketsDir,
             sourceType: "federated"
           });
+        } else {
+          const firstSource = codeToSource.get(codeKey) || "configured location";
+          if (firstSource.toLowerCase() !== sourceName.toLowerCase()) {
+            if (!this.duplicateProjectWarnings.some((w) => w.code.toLowerCase() === codeKey && w.duplicateHub.toLowerCase() === sourceName.toLowerCase())) {
+              this.duplicateProjectWarnings.push({
+                code: desc.code,
+                firstHub: firstSource,
+                duplicateHub: sourceName
+              });
+            }
+          }
         }
       }
     }
@@ -814,7 +883,6 @@ var FilesystemStorageAdapter = class {
           descs = [{
             id: 1,
             code: this.config.projectCode,
-            slug: this.config.projectCode.toLowerCase(),
             name: pName,
             description: `${pName} project`
           }];
@@ -846,7 +914,7 @@ var FilesystemStorageAdapter = class {
     const cleanCode = rawCode;
     const cleanName = input.name?.trim() || cleanCode;
     const cleanDesc = input.description?.trim() || `${cleanName} project`;
-    const slug = cleanCode.toLowerCase();
+    const cleanLower = cleanCode.toLowerCase();
     const colors2 = input.colors || {
       badge: "border-cyan-500/30 bg-cyan-500/10 text-cyan-300",
       dot: "bg-cyan-400",
@@ -872,17 +940,91 @@ var FilesystemStorageAdapter = class {
         }
       }
     }
-    let targetHub = null;
+    const existingHubs = [];
     for (const dDir of rawDataDirs) {
       const resolved = path3.resolve(this.workspaceRoot, expandHome(dDir));
-      if (fs3.existsSync(resolved)) {
-        targetHub = resolved;
-        break;
+      if (fs3.existsSync(resolved) && !existingHubs.includes(resolved)) {
+        existingHubs.push(resolved);
+      }
+    }
+    let targetHub = null;
+    if (input.hub) {
+      const targetQuery = input.hub.trim();
+      const resolvedQuery = path3.resolve(this.workspaceRoot, expandHome(targetQuery)).toLowerCase();
+      const isPathLike = targetQuery.includes("/") || targetQuery.includes("\\");
+      const basenameMatches = existingHubs.filter(
+        (h) => path3.basename(h).toLowerCase() === targetQuery.toLowerCase()
+      );
+      if (!isPathLike && basenameMatches.length > 1) {
+        const list = basenameMatches.map((h) => `  \u2022 ${h}`).join("\n");
+        throw new Error(
+          `Hub name collision: Multiple configured data hubs share basename "${targetQuery}". Please specify by unambiguous path:
+${list}`
+        );
+      } else if (basenameMatches.length === 1 && !isPathLike) {
+        targetHub = basenameMatches[0];
+      } else {
+        const exactPathMatch = existingHubs.find((h) => h.toLowerCase() === resolvedQuery);
+        if (exactPathMatch) {
+          targetHub = exactPathMatch;
+        } else if (basenameMatches.length === 1) {
+          targetHub = basenameMatches[0];
+        } else {
+          const directHubPath = path3.resolve(this.workspaceRoot, expandHome(targetQuery));
+          if (fs3.existsSync(directHubPath) && (fs3.existsSync(path3.join(directHubPath, "projects")) || fs3.existsSync(path3.join(directHubPath, "projects.json")))) {
+            targetHub = directHubPath;
+          } else {
+            const available = existingHubs.map((h) => `${path3.basename(h)} (${h})`).join(", ");
+            throw new Error(
+              `Hub "${targetQuery}" not found. Configured data hubs: ${available || "(none)"}`
+            );
+          }
+        }
+      }
+    } else {
+      if (existingHubs.length === 1) {
+        targetHub = existingHubs[0];
+      } else if (existingHubs.length > 1) {
+        const basenames = existingHubs.map((h) => path3.basename(h));
+        const hasCollision = new Set(basenames.map((b) => b.toLowerCase())).size < basenames.length;
+        const formattedList = existingHubs.map((h) => `  \u2022 ${path3.basename(h)} (${h})`).join("\n");
+        throw new Error(
+          `Multiple data hubs configured. Please specify --hub <name${hasCollision ? "|path" : ""}>:
+${formattedList}`
+        );
       }
     }
     if (targetHub) {
+      const normalizedTargetHub = path3.resolve(targetHub).toLowerCase();
+      const existingLocations = this.resolveProjectLocations();
+      const existingConflict = existingLocations.find((l) => {
+        if (l.project.code.toLowerCase() !== cleanLower) return false;
+        if (l.sourceType === "hub" && l.hubDir) {
+          return path3.resolve(l.hubDir).toLowerCase() !== normalizedTargetHub;
+        }
+        return false;
+      });
+      if (existingConflict && existingConflict.hubDir) {
+        const conflictLoc = path3.basename(existingConflict.hubDir);
+        throw new Error(
+          `Project code "${cleanCode}" already exists in another data hub (${conflictLoc}). Duplicate project codes across hubs are not supported.`
+        );
+      }
       const hubProjectsDir = path3.join(targetHub, "projects");
-      const projectDir = path3.join(hubProjectsDir, cleanCode);
+      let resolvedDirName = cleanCode;
+      if (fs3.existsSync(hubProjectsDir)) {
+        try {
+          const entries = fs3.readdirSync(hubProjectsDir, { withFileTypes: true });
+          const matchedDir = entries.find(
+            (e) => e.isDirectory() && e.name.toLowerCase() === cleanLower
+          );
+          if (matchedDir) {
+            resolvedDirName = matchedDir.name;
+          }
+        } catch {
+        }
+      }
+      const projectDir = path3.join(hubProjectsDir, resolvedDirName);
       const ticketsDir2 = path3.join(projectDir, "tickets");
       if (!fs3.existsSync(ticketsDir2)) {
         fs3.mkdirSync(ticketsDir2, { recursive: true });
@@ -895,13 +1037,13 @@ var FilesystemStorageAdapter = class {
         } catch {
         }
       }
+      const resolvedCode2 = existingPJson2?.code || resolvedDirName || cleanCode;
       const existingProjects = await this.getProjects();
       const maxId = existingProjects.reduce((max, p) => Math.max(max, p.id || 0), 0);
       const id2 = existingPJson2?.id || maxId + 1;
       const projectDesc2 = {
         id: id2,
-        code: cleanCode,
-        slug,
+        code: resolvedCode2,
         name: cleanName,
         description: cleanDesc,
         colors: colors2
@@ -911,7 +1053,7 @@ var FilesystemStorageAdapter = class {
       if (fs3.existsSync(hubProjectsFile)) {
         try {
           const arr = JSON.parse(fs3.readFileSync(hubProjectsFile, "utf-8"));
-          const idx = arr.findIndex((p) => p.code.toLowerCase() === slug);
+          const idx = arr.findIndex((p) => p.code.toLowerCase() === cleanLower);
           if (idx >= 0) {
             arr[idx] = projectDesc2;
           } else {
@@ -936,11 +1078,11 @@ var FilesystemStorageAdapter = class {
       } catch {
       }
     }
+    const resolvedCode = existingPJson?.code && existingPJson.code.toLowerCase() === cleanLower ? existingPJson.code : cleanCode;
     const id = existingPJson?.id || 1;
     const projectDesc = {
       id,
-      code: cleanCode,
-      slug,
+      code: resolvedCode,
       name: cleanName,
       description: cleanDesc,
       colors: colors2
@@ -950,7 +1092,7 @@ var FilesystemStorageAdapter = class {
     if (fs3.existsSync(projectsJsonPath)) {
       try {
         const arr = JSON.parse(fs3.readFileSync(projectsJsonPath, "utf-8"));
-        const idx = arr.findIndex((p) => p.code.toLowerCase() === slug);
+        const idx = arr.findIndex((p) => p.code.toLowerCase() === cleanLower);
         if (idx >= 0) {
           arr[idx] = projectDesc;
         } else {
@@ -966,11 +1108,11 @@ var FilesystemStorageAdapter = class {
     const locations = this.resolveProjectLocations();
     if (locations.length === 0) return null;
     const strId = String(id).trim();
-    const prefixMatch = strId.match(/^([a-zA-Z0-9]{1,7})[-_:](\d+)$/i);
+    const prefixMatch = strId.match(/^([a-zA-Z0-9]{1,8})[-_:](\d+)$/i);
     if (prefixMatch) {
       const code = prefixMatch[1].toLowerCase();
       const num2 = parseInt(prefixMatch[2], 10);
-      const loc = locations.find((l) => isProjectMatch(l.project.code, l.project.slug, code));
+      const loc = locations.find((l) => isProjectMatch(l.project.code, code));
       if (!loc) return null;
       const ticketDir = path3.join(loc.ticketsDir, String(num2));
       const metaPath = path3.join(ticketDir, "meta.json");
@@ -982,7 +1124,7 @@ var FilesystemStorageAdapter = class {
             meta.type = meta.type || meta.category || "Feature";
             meta.category = meta.type;
             const mProj = (meta.project || "").toLowerCase();
-            if (mProj && mProj !== code && mProj !== loc.project.slug.toLowerCase()) {
+            if (mProj && mProj !== code && mProj !== loc.project.code.toLowerCase()) {
               return null;
             }
           } catch {
@@ -1007,7 +1149,7 @@ var FilesystemStorageAdapter = class {
           const metaRaw = fs3.readFileSync(metaPath, "utf-8");
           const meta = JSON.parse(metaRaw);
           const matchedLoc = locations.find(
-            (l) => meta.projectId !== void 0 && l.project.id === meta.projectId || meta.project && (l.project.code.toLowerCase() === meta.project.toLowerCase() || l.project.slug.toLowerCase() === meta.project.toLowerCase())
+            (l) => meta.projectId !== void 0 && l.project.id === meta.projectId || meta.project && l.project.code.toLowerCase() === meta.project.toLowerCase()
           ) || loc;
           matches.push({ loc: matchedLoc, ticketDir, id: num });
         } catch {
@@ -1020,7 +1162,7 @@ var FilesystemStorageAdapter = class {
     if (this.config.projectCode) {
       const prefLower = this.config.projectCode.toLowerCase();
       const preferredMatch = matches.find(
-        (m) => m.loc.project.code.toLowerCase() === prefLower || m.loc.project.slug.toLowerCase() === prefLower
+        (m) => m.loc.project.code.toLowerCase() === prefLower
       );
       if (preferredMatch) return preferredMatch;
     }
@@ -1042,7 +1184,7 @@ var FilesystemStorageAdapter = class {
     for (const loc of locations) {
       if (filter?.project && filter.project !== "all") {
         const pLower = filter.project.toLowerCase();
-        if (!isProjectMatch(loc.project.code, loc.project.slug, filter.project)) {
+        if (!isProjectMatch(loc.project.code, filter.project)) {
           continue;
         }
       }
@@ -1074,7 +1216,7 @@ var FilesystemStorageAdapter = class {
           let effectiveLoc = loc;
           if (loc.isSharedDir) {
             const found = locations.find(
-              (l) => meta.projectId !== void 0 && l.project.id === meta.projectId || meta.project && (l.project.code.toLowerCase() === meta.project.toLowerCase() || l.project.slug.toLowerCase() === meta.project.toLowerCase())
+              (l) => meta.projectId !== void 0 && l.project.id === meta.projectId || meta.project && l.project.code.toLowerCase() === meta.project.toLowerCase()
             );
             if (found) effectiveLoc = found;
           }
@@ -1082,7 +1224,7 @@ var FilesystemStorageAdapter = class {
           meta.projectId = effectiveLoc.project.id;
           if (filter?.project && filter.project !== "all") {
             const pLower = filter.project.toLowerCase();
-            if (!isProjectMatch(meta.project, effectiveLoc.project.slug, filter.project)) {
+            if (!isProjectMatch(meta.project, filter.project)) {
               continue;
             }
           }
@@ -1249,7 +1391,7 @@ var FilesystemStorageAdapter = class {
     if (requestedIdentifier) {
       const lower = String(requestedIdentifier).trim().toLowerCase();
       targetLoc = locations.find(
-        (l) => l.project.code?.toLowerCase() === lower || l.project.slug?.toLowerCase() === lower || String(l.project.id) === lower || l.project.name?.toLowerCase() === lower
+        (l) => l.project.code?.toLowerCase() === lower || String(l.project.id) === lower || l.project.name?.toLowerCase() === lower
       );
       if (!targetLoc) {
         throw new Error(`Project '${requestedIdentifier}' is invalid or not registered in this workspace.`);
@@ -1333,6 +1475,7 @@ ${input.summary || "Summary to be defined."}
       ...existing.meta,
       ...updates,
       id: locInfo.id,
+      project: locInfo.loc.project.code,
       updatedAt: now,
       completedAt,
       revision
@@ -1433,6 +1576,9 @@ var SecurityFilter = class {
   }
   target;
   config;
+  getDuplicateProjectWarnings() {
+    return this.target.getDuplicateProjectWarnings ? this.target.getDuplicateProjectWarnings() : [];
+  }
   async getProjects() {
     const projs = await this.target.getProjects();
     if (!this.config.allowedProjects || this.config.allowedProjects.length === 0) {
@@ -2451,11 +2597,13 @@ async function startDaemon(options = {}) {
   if (!pid) {
     throw new Error("Failed to spawn Esedre daemon background process.");
   }
+  const timeoutMs = process.platform === "win32" ? 1e4 : 5e3;
+  const pingTimeout = process.platform === "win32" ? 500 : 300;
   const startTime = Date.now();
   let ready = false;
-  while (Date.now() - startTime < 3500) {
-    await new Promise((r) => setTimeout(r, 100));
-    const ping = await pingDaemon(port, 150);
+  while (Date.now() - startTime < timeoutMs) {
+    await new Promise((r) => setTimeout(r, 150));
+    const ping = await pingDaemon(port, pingTimeout);
     if (ping.responding && ping.isEsedre) {
       ready = true;
       break;
@@ -3056,7 +3204,10 @@ function configureWorkspace(targetDir, options = {}) {
     }
   }
   let config;
-  const projectCode = options.projectCode || existingRaw?.projectCode;
+  let projectCode = options.projectCode || existingRaw?.projectCode;
+  if (existingRaw?.projectCode && options.projectCode && existingRaw.projectCode.toLowerCase() === options.projectCode.toLowerCase()) {
+    projectCode = existingRaw.projectCode;
+  }
   const projectName = options.projectName || existingRaw?.projectName || (projectCode ? projectCode : void 0);
   const dataDir = options.dataDir !== void 0 ? options.dataDir : existingRaw?.dataDir;
   if (existingRaw) {
@@ -3097,7 +3248,6 @@ function configureWorkspace(targetDir, options = {}) {
       const projDesc = {
         id: 1,
         code: projectCode.toUpperCase(),
-        slug: projectCode.toLowerCase(),
         name: projectName || projectCode.toUpperCase(),
         description: `${projectName || projectCode.toUpperCase()} project`,
         colors: {
@@ -3270,16 +3420,30 @@ function sendJson(res, status, data) {
     "Content-Type": "application/json; charset=utf-8",
     "Access-Control-Allow-Origin": "*",
     "Access-Control-Allow-Methods": "GET, POST, PATCH, OPTIONS",
-    "Access-Control-Allow-Headers": "Content-Type, Authorization"
+    "Access-Control-Allow-Headers": "Content-Type, Authorization, x-esedre-allowed-projects"
   });
   res.end(JSON.stringify(data));
 }
-var cachedAllData = null;
-var cachedAllTimestamp = 0;
+var cachedAllData = /* @__PURE__ */ new Map();
 var CACHE_TTL_MS = 5e3;
 function invalidateApiCache() {
-  cachedAllData = null;
-  cachedAllTimestamp = 0;
+  cachedAllData.clear();
+}
+function getRequestStorage(baseStorage, req, url) {
+  const headerAllowed = req.headers["x-esedre-allowed-projects"];
+  const queryAllowed = url.searchParams.get("allowedProjects");
+  const rawAllowed = (typeof headerAllowed === "string" ? headerAllowed : Array.isArray(headerAllowed) ? headerAllowed[0] : null) || queryAllowed;
+  if (rawAllowed && typeof rawAllowed === "string") {
+    const list = rawAllowed.split(",").map((s) => s.trim()).filter(Boolean);
+    if (list.length > 0 && !list.includes("*")) {
+      const sortedKey = [...list].sort().join(",");
+      return {
+        storage: new SecurityFilter(baseStorage, { allowedProjects: list }),
+        cacheKey: sortedKey
+      };
+    }
+  }
+  return { storage: baseStorage, cacheKey: "*" };
 }
 function createApiHandler(storage, workspaceRoot) {
   return async (req, res) => {
@@ -3305,6 +3469,7 @@ function createApiHandler(storage, workspaceRoot) {
     if (pathname.startsWith("/esedre/api")) {
       pathname = pathname.slice("/esedre".length);
     }
+    const { storage: reqStorage, cacheKey } = getRequestStorage(storage, req, url);
     try {
       if (req.method === "GET") {
         if (pathname === "/api/ping") {
@@ -3312,7 +3477,7 @@ function createApiHandler(storage, workspaceRoot) {
           return true;
         }
         if (pathname === "/api/planning/projects") {
-          const projects = await storage.getProjects();
+          const projects = await reqStorage.getProjects();
           sendJson(res, 200, projects);
           return true;
         }
@@ -3322,7 +3487,7 @@ function createApiHandler(storage, workspaceRoot) {
           const type = url.searchParams.get("type") || url.searchParams.get("category") || void 0;
           const category = type;
           const search = url.searchParams.get("search") || void 0;
-          const tickets = await storage.listTickets({
+          const tickets = await reqStorage.listTickets({
             project: project === "all" ? void 0 : project,
             status,
             type,
@@ -3334,11 +3499,11 @@ function createApiHandler(storage, workspaceRoot) {
         }
         if (pathname.startsWith("/api/planning/ticket/")) {
           const idStr = pathname.slice("/api/planning/ticket/".length);
-          if (!idStr || !/^([a-zA-Z0-9]{1,7}-)?\d+$/.test(idStr)) {
+          if (!idStr || !/^([a-zA-Z0-9]{1,8}-)?\d+$/.test(idStr)) {
             sendJson(res, 400, { error: "Invalid ticket ID" });
             return true;
           }
-          const ticket = await storage.getTicket(idStr);
+          const ticket = await reqStorage.getTicket(idStr);
           if (!ticket) {
             sendJson(res, 400, { error: "Ticket not found" });
             return true;
@@ -3348,11 +3513,12 @@ function createApiHandler(storage, workspaceRoot) {
         }
         if (pathname === "/api/planning/all") {
           const now = Date.now();
-          if (cachedAllData && now - cachedAllTimestamp < CACHE_TTL_MS) {
-            sendJson(res, 200, cachedAllData);
+          const cached = cachedAllData.get(cacheKey);
+          if (cached && now - cached.timestamp < CACHE_TTL_MS) {
+            sendJson(res, 200, cached.data);
             return true;
           }
-          const tickets = await storage.listTickets({});
+          const tickets = await reqStorage.listTickets({});
           const metasMap = {};
           const detailsMap = {};
           const plansMap = {};
@@ -3382,7 +3548,7 @@ function createApiHandler(storage, workspaceRoot) {
               }
             }
           }
-          const projects = await storage.getProjects();
+          const projects = await reqStorage.getProjects();
           const responsePayload = {
             success: true,
             projects,
@@ -3395,13 +3561,12 @@ function createApiHandler(storage, workspaceRoot) {
             planHistory: {},
             ticketHistory: {}
           };
-          cachedAllData = responsePayload;
-          cachedAllTimestamp = now;
+          cachedAllData.set(cacheKey, { data: responsePayload, timestamp: now });
           sendJson(res, 200, responsePayload);
           return true;
         }
         if (pathname === "/api/planning/metas") {
-          const tickets = await storage.listTickets({});
+          const tickets = await reqStorage.listTickets({});
           const metasMap = {};
           for (const t of tickets) {
             metasMap[String(t.meta.id)] = t.meta;
@@ -3410,7 +3575,7 @@ function createApiHandler(storage, workspaceRoot) {
           return true;
         }
         if (pathname === "/api/planning/details") {
-          const tickets = await storage.listTickets({});
+          const tickets = await reqStorage.listTickets({});
           const detailsMap = {};
           for (const t of tickets) {
             if (t.detail?.raw) {
@@ -3421,7 +3586,7 @@ function createApiHandler(storage, workspaceRoot) {
           return true;
         }
         if (pathname === "/api/planning/plans") {
-          const tickets = await storage.listTickets({});
+          const tickets = await reqStorage.listTickets({});
           const plansMap = {};
           for (const t of tickets) {
             if (t.planMarkdown) {
@@ -3432,7 +3597,7 @@ function createApiHandler(storage, workspaceRoot) {
           return true;
         }
         if (pathname === "/api/planning/comments") {
-          const tickets = await storage.listTickets({});
+          const tickets = await reqStorage.listTickets({});
           const commentsMap = {};
           for (const t of tickets) {
             commentsMap[String(t.meta.id)] = t.comments || [];
@@ -3462,7 +3627,7 @@ function createApiHandler(storage, workspaceRoot) {
             sendJson(res, 400, { error: "Project query parameter is required for snapshot generation (no default fallback)." });
             return true;
           }
-          const snapshot = await generateProjectSnapshot(storage, projectCode, workspaceRoot);
+          const snapshot = await generateProjectSnapshot(reqStorage, projectCode, workspaceRoot);
           sendJson(res, 200, snapshot);
           return true;
         }
@@ -3471,12 +3636,12 @@ function createApiHandler(storage, workspaceRoot) {
         const body = await readJsonBody(req);
         if (pathname === "/api/planning/tickets") {
           invalidateApiCache();
-          const created = await storage.createTicket(body);
+          const created = await reqStorage.createTicket(body);
           sendJson(res, 201, { ticketId: String(created.meta.id), meta: created.meta });
           return true;
         }
         if (pathname === "/api/planning/create-project") {
-          const { code, name, description, colors: colors2 } = body;
+          const { code, name, description, colors: colors2, hub } = body;
           if (!code || !name) {
             sendJson(res, 400, { error: "Both code and name are required to register a project." });
             return true;
@@ -3492,11 +3657,12 @@ function createApiHandler(storage, workspaceRoot) {
             return true;
           }
           invalidateApiCache();
-          const project = await storage.registerProject({
+          const project = await reqStorage.registerProject({
             code,
             name,
             description,
-            colors: colors2
+            colors: colors2,
+            hub
           });
           sendJson(res, 201, project);
           return true;
@@ -3504,27 +3670,27 @@ function createApiHandler(storage, workspaceRoot) {
         if (pathname === "/api/planning/plans") {
           const { ticketId, planMarkdown, lastHash } = body;
           invalidateApiCache();
-          await storage.savePlan(ticketId, planMarkdown, lastHash);
+          await reqStorage.savePlan(ticketId, planMarkdown, lastHash);
           sendJson(res, 200, { success: true });
           return true;
         }
         if (pathname === "/api/planning/comments") {
           const { ticketId, text, author } = body;
           invalidateApiCache();
-          await storage.addComment(ticketId, { author: author || "Developer", text });
-          const ticket = await storage.getTicket(ticketId);
+          await reqStorage.addComment(ticketId, { author: author || "Developer", text });
+          const ticket = await reqStorage.getTicket(ticketId);
           sendJson(res, 200, { comments: ticket?.comments || [] });
           return true;
         }
         if (pathname === "/api/planning/update-meta") {
           const { ticketId, updates, lastHash } = body;
-          const updated = await storage.updateTicket(ticketId, updates, lastHash);
+          const updated = await reqStorage.updateTicket(ticketId, updates, lastHash);
           sendJson(res, 200, { meta: updated.meta });
           return true;
         }
         if (pathname === "/api/planning/toggle-flag") {
           const { ticketId, flagged } = body;
-          const updated = await storage.updateTicket(ticketId, {
+          const updated = await reqStorage.updateTicket(ticketId, {
             featureFlag: flagged ? "chat_enhanced" : ""
           });
           sendJson(res, 200, { meta: updated.meta });
@@ -3533,7 +3699,7 @@ function createApiHandler(storage, workspaceRoot) {
         if (pathname === "/api/planning/details") {
           const { ticketId, detailMarkdown, metaUpdates } = body;
           if (metaUpdates) {
-            await storage.updateTicket(ticketId, metaUpdates);
+            await reqStorage.updateTicket(ticketId, metaUpdates);
           }
           sendJson(res, 200, { success: true, detail: detailMarkdown });
           return true;
@@ -3542,6 +3708,10 @@ function createApiHandler(storage, workspaceRoot) {
       sendJson(res, 404, { error: `Endpoint not found: ${pathname}` });
       return true;
     } catch (err) {
+      if (err.name === "EsedreAuthorizationError" || err.message?.includes("outside this workspace's authorized scope") || err.message?.includes("Access Denied")) {
+        sendJson(res, 403, { error: err.message });
+        return true;
+      }
       console.error("[Esedre API Error]:", err);
       sendJson(res, 500, { error: err.message });
       return true;
@@ -3744,12 +3914,14 @@ ${colors.bold}SERVICE DAEMON COMMANDS:${colors.reset}
   ${colors.bold}mcp${colors.reset}         Start the Model Context Protocol (MCP) JSON-RPC 2.0 stdio server for autonomous LLM coding agents.
 
 ${colors.bold}DEVELOPER ADMINISTRATION (Human Setup & Configuration):${colors.reset}
-  ${colors.bold}init${colors.reset}        [<path>] [--project <code>] [-n|--name <name>] [--allow <c1,c2>] [--port <n>] [--hub] [--proxy] [--no-proxy] [-y|--yes] [--json]
-               Bring a project repository online (.esedre footprint, wrappers, snapshot) or bootstrap a data hub (--hub).
+  ${colors.bold}init${colors.reset}        [<path>] [--project <code>] [-n|--name <name>] [--hub <name|path>] [--allow <c1,c2>] [--port <n>] [-y|--yes] [--json]
+               Bring a project repository online (.esedre footprint, wrappers, snapshot), bootstrap a data hub (--hub), or register a project directly into an Esedre ticket data hub (--project <code>).
+               \u2022 In-repo workspace: ese init (creates .esedre/esedre.json in current directory)
+               \u2022 Data hub project:  ese init --project <code> --name "<name>" (creates project in configured dataDir hub)
 
   ${colors.bold}configure${colors.reset}   [add <path> | remove <code|path> | set <key> <val> | get <key>] [--json]
                Inspect or mutate central Esedre configuration (~/.esedre/config.json).
-               \u2022 add <path>       Smart-detect and link a data hub or project repository
+               \u2022 add <path>       Link an external project repository (federated projects map) or register a data hub (dataDir)
                \u2022 remove <target>  Unlink a project or data hub
                \u2022 set <key> <val>  Update a central configuration setting
 
@@ -3829,6 +4001,15 @@ function parseArgs(rawArgs) {
   if (flags["f"] && !flags["foreground"]) flags["foreground"] = flags["f"];
   return { command, positionals, flags };
 }
+function printDuplicateProjectWarnings(storage, isJson) {
+  if (isJson) return;
+  const warnings = storage.getDuplicateProjectWarnings ? storage.getDuplicateProjectWarnings() : [];
+  for (const warn of warnings) {
+    console.error(
+      `${colors.yellow}\u26A0\uFE0F  Warning: Duplicate project code '${warn.code}' detected across multiple data hubs (${path9.basename(warn.firstHub)} and ${path9.basename(warn.duplicateHub)}). Duplicate project codes across hubs are not supported; only '${path9.basename(warn.firstHub)}' is active.${colors.reset}`
+    );
+  }
+}
 async function main() {
   const rawArgs = process.argv.slice(2);
   const { command, positionals, flags } = parseArgs(rawArgs);
@@ -3855,9 +4036,12 @@ async function main() {
   try {
     switch (command) {
       case "init": {
-        const targetDir = positionals[0] ? path9.resolve(positionals[0]) : discovered.workspaceRoot;
-        const isHub = Boolean(flags["hub"]);
-        if (isHub) {
+        const rawTarget = positionals[0];
+        const targetDir = rawTarget ? path9.resolve(rawTarget) : discovered.workspaceRoot;
+        const rawHubFlag = flags["hub"];
+        const hubArg = typeof rawHubFlag === "string" ? rawHubFlag : void 0;
+        const isHubRequested = Boolean(rawHubFlag);
+        if (isHubRequested && !flags["project"] && !flags["p"]) {
           const hubRes = initHub(targetDir);
           try {
             addLocationToGlobalConfig(targetDir);
@@ -3932,26 +4116,66 @@ ${colors.bold}Next Steps:${colors.reset}`);
           console.error(`${colors.red}Error: ${nameVal.error}${colors.reset}`);
           process.exit(1);
         }
-        const existingProjects = await storage.getProjects();
-        const existing = existingProjects.find(
-          (p) => p.code.toLowerCase() === projectCode.toLowerCase()
-        );
+        const isTargetHub = fs9.existsSync(path9.join(targetDir, "projects.json")) || fs9.existsSync(path9.join(targetDir, "projects")) && !fs9.existsSync(path9.join(targetDir, ".esedre", "esedre.json"));
+        const isWorkspaceless = isHubRequested || isTargetHub || Boolean(discovered.config?.projectCode) && !rawTarget && discovered.config?.projectCode?.toLowerCase() !== projectCode.toLowerCase();
         let projectNewlyRegistered = false;
         let registeredProj;
-        if (!existing) {
-          registeredProj = await rawStorage.registerProject({
-            code: projectCode,
-            name: projectName
-          });
-          projectNewlyRegistered = true;
-        } else {
-          registeredProj = existing;
-          if (flags["name"] || flags["n"]) {
+        try {
+          const existingProjects = await storage.getProjects();
+          const existing = existingProjects.find(
+            (p) => p.code.toLowerCase() === projectCode.toLowerCase()
+          );
+          if (!existing) {
             registeredProj = await rawStorage.registerProject({
               code: projectCode,
-              name: projectName
+              name: projectName,
+              hub: hubArg
             });
+            projectNewlyRegistered = true;
+          } else {
+            registeredProj = existing;
+            if (flags["name"] || flags["n"]) {
+              registeredProj = await rawStorage.registerProject({
+                code: projectCode,
+                name: projectName,
+                hub: hubArg
+              });
+            }
           }
+        } catch (err) {
+          console.error(`${colors.red}Error: ${err.message}${colors.reset}`);
+          process.exit(1);
+        }
+        if (isWorkspaceless) {
+          if (isJson) {
+            console.log(JSON.stringify({
+              project: registeredProj,
+              projectNewlyRegistered,
+              registeredInHub: true,
+              commands: {
+                create: `ese create --title "..." --project ${registeredProj.code}`,
+                list: `ese list --project ${registeredProj.code}`
+              }
+            }, null, 2));
+          } else {
+            if (projectNewlyRegistered) {
+              console.log(`${colors.bold}${colors.green}\u2714 Registered project '${registeredProj.code}' (${registeredProj.name}) in Esedre data hub!${colors.reset}`);
+            } else {
+              console.log(`${colors.bold}${colors.green}\u2714 Verified project '${registeredProj.code}' (${registeredProj.name}) in Esedre data hub!${colors.reset}`);
+            }
+            console.log(`  \u2022 Code: ${registeredProj.code}`);
+            console.log(`  \u2022 Name: ${registeredProj.name}`);
+            if (registeredProj.description) {
+              console.log(`  \u2022 Description: ${registeredProj.description}`);
+            }
+            console.log(`
+${colors.bold}Next Steps:${colors.reset}`);
+            console.log(`  1. Create your first ticket:`);
+            console.log(`     ${colors.cyan}ese create --title "First feature" --type Feature --project ${registeredProj.code}${colors.reset}`);
+            console.log(`  2. Inspect roadmap & tickets:`);
+            console.log(`     ${colors.cyan}ese list --project ${registeredProj.code}${colors.reset}`);
+          }
+          return;
         }
         const allowedProjects = allowArg ? allowArg.split(",").map((s) => s.trim()) : discovered.config?.allowedProjects || [projectCode];
         let setupProxy = void 0;
@@ -4186,10 +4410,12 @@ ${colors.bold}Linked Projects (projects):${colors.reset}`);
         }
         console.log(`
 ${colors.bold}Commands:${colors.reset}`);
-        console.log(`  \u2022 Link a hub or project:   ${colors.cyan}ese configure add <path>${colors.reset}`);
-        console.log(`  \u2022 Unlink a project or hub: ${colors.cyan}ese configure remove <code|path>${colors.reset}`);
-        console.log(`  \u2022 Set setting value:       ${colors.cyan}ese configure set <key> <value>${colors.reset}`);
-        console.log(`  \u2022 Bring new repo online:   ${colors.cyan}ese init [path]${colors.reset}`);
+        console.log(`  \u2022 Link external repository: ${colors.cyan}ese configure add <repoPath>${colors.reset}`);
+        console.log(`  \u2022 Register a data hub:      ${colors.cyan}ese configure add <hubPath>${colors.reset}`);
+        console.log(`  \u2022 Create hub project:       ${colors.cyan}ese init --project <code> --name "<name>"${colors.reset}`);
+        console.log(`  \u2022 Unlink a project or hub:  ${colors.cyan}ese configure remove <code|path>${colors.reset}`);
+        console.log(`  \u2022 Set setting value:        ${colors.cyan}ese configure set <key> <value>${colors.reset}`);
+        console.log(`  \u2022 Bring new repo online:    ${colors.cyan}ese init [path]${colors.reset}`);
         return;
       }
       case "upgrade": {
@@ -4251,12 +4477,18 @@ ${colors.bold}Commands:${colors.reset}`);
         const ports = resolvePorts(discovered.config, { port: flagPort });
         const port = ports.gateway;
         const isForeground = Boolean(flags["foreground"] || flags["f"]);
+        const serverConfig = {
+          ...discovered.config,
+          allowedProjects: ["*"]
+        };
+        const serverStorage = new FilesystemStorageAdapter(discovered.workspaceRoot, serverConfig);
+        printDuplicateProjectWarnings(serverStorage, isJson);
         if (isForeground) {
           const cluster = startGatewayCluster({
             gatewayPort: ports.gateway,
             uiPort: ports.ui,
             apiPort: ports.api,
-            storage,
+            storage: serverStorage,
             workspaceRoot: discovered.workspaceRoot
           });
           console.log(`${colors.bold}${colors.green}\u2714 Esedre Server active on http://localhost:${ports.gateway}${colors.reset}`);
@@ -4291,6 +4523,7 @@ ${colors.dim}Shutting down Esedre cluster...${colors.reset}`);
         return;
       }
       case "status": {
+        printDuplicateProjectWarnings(storage, isJson);
         const flagPort = flags["port"] ? parseInt(String(flags["port"]), 10) : void 0;
         const port = resolvePorts(discovered.config, { port: flagPort }).gateway;
         const status = await getDaemonStatus({ port, workspaceRoot: discovered.workspaceRoot });
@@ -4328,6 +4561,7 @@ ${colors.yellow}\u26A0\uFE0F  Warning: Daemon is running v${status.version}, but
         return;
       }
       case "projects": {
+        printDuplicateProjectWarnings(storage, isJson);
         const projects = await storage.getProjects();
         if (isJson) {
           console.log(JSON.stringify(projects, null, 2));
@@ -4340,6 +4574,7 @@ ${colors.yellow}\u26A0\uFE0F  Warning: Daemon is running v${status.version}, but
         return;
       }
       case "list": {
+        printDuplicateProjectWarnings(storage, isJson);
         const rawProject = flags["project"];
         const project = rawProject === "all" ? void 0 : rawProject || discovered.config?.projectCode || void 0;
         const status = flags["status"] || void 0;