gitasks 0.3.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Gitasks contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,174 @@
+# Gitasks
+
+A lightweight local task protocol for humans and coding agents, powered entirely by GitHub Issues.
+
+Gitasks is a small, development-only CLI. GitHub Issues remain the single source of truth: there is no local task database, hosted backend, SaaS account, or additional credential store.
+
+## Requirements
+
+- Node.js 20 or newer
+- Git
+- [GitHub CLI](https://cli.github.com/) (`gh`)
+- A repository whose `origin` points to `github.com`
+
+Authenticate once with GitHub CLI:
+
+```bash
+gh auth login
+```
+
+Gitasks uses that existing authentication. It never asks for or stores a personal access token.
+
+## Installation
+
+```bash
+npm install -D gitasks
+npx gitasks init
+```
+
+`gitasks init` detects the current GitHub repository, verifies `gh` authentication, creates missing `status:*` labels, and adds the following files without replacing existing content or modifying issues:
+
+```text
+.gitasks/
+  config.json
+  protocol.md
+AGENTS.md
+```
+
+If `AGENTS.md` already exists, Gitasks appends a clearly marked task-management section. An existing `.gitasks/protocol.md` is never replaced. Re-running `init` is safe.
+
+## Local task board
+
+Start the lightweight local board from anywhere inside the target Git repository:
+
+```bash
+npx gitasks ui
+```
+
+The default address is `http://127.0.0.1:4317`. Choose another port when needed:
+
+```bash
+npx gitasks ui --port 4400
+```
+
+The board keeps the six Gitasks status columns and shows issues without a recognized status in a separate **Unclassified issues** section. Its **Open / Closed / All** filter defaults to **Open**; GitHub issue state remains independent from task status, so a manually closed `IN PROGRESS` issue stays `IN PROGRESS` under **Closed** or **All**. Search covers every issue loaded for the selected state scope. All pages are fetched, so the board does not silently truncate results. Pull requests are excluded.
+
+The server listens only on `127.0.0.1`, validates the request host and origin, and requires a per-process CSRF token for mutations. Stop it with `Ctrl+C`.
+
+Current limitations: one repository per server process, manual refresh only, no drag-and-drop, no comments or PR management, and no offline mode.
+
+## Commands
+
+```bash
+gitasks list
+gitasks ui
+gitasks ui --port 4400
+gitasks list --status in-progress
+gitasks list --status unclassified
+gitasks list --state closed
+gitasks list --state all
+gitasks create "Implement login"
+gitasks create "Implement login" --status todo
+gitasks create "Implement login" --body "Add email/password authentication."
+gitasks backlog 42
+gitasks todo 42
+gitasks start 42
+gitasks review 42
+gitasks done 42
+gitasks block 42
+```
+
+Issue numbers may be written as `42` or `#42`.
+
+### Task lifecycle
+
+```text
+BACKLOG → TODO → IN PROGRESS → REVIEW → DONE
+                         ↘ BLOCKED
+```
+
+| Command | Result |
+| --- | --- |
+| `backlog` | Moves the issue to `BACKLOG` |
+| `todo` | Moves the issue to `TODO` |
+| `start` | Moves the issue to `IN PROGRESS` |
+| `review` | Moves the issue to `REVIEW` |
+| `done` | Moves the issue to `DONE` and closes it |
+| `block` | Moves the issue to `BLOCKED` |
+
+Moving a completed task back to an active state reopens its GitHub Issue. Assigning any of the six statuses to an unclassified issue adds the title prefix and canonical label at that explicit point; reading, refreshing, opening the board, and `init` never classify or otherwise mutate existing issues. Transitions add and remove only `status:*` labels instead of replacing the complete label collection, so unrelated labels added concurrently are preserved.
+
+## Issue protocol
+
+Each task has one canonical status label and a matching title:
+
+```text
+status:backlog       [BACKLOG] Implement login
+status:todo          [TODO] Implement login
+status:in-progress   [IN PROGRESS] Implement login
+status:review        [REVIEW] Implement login
+status:done          [DONE] Implement login
+status:blocked       [BLOCKED] Implement login
+```
+
+Labels are machine-readable and canonical. Titles mirror them for humans. If a manually created issue has no status label, Gitasks infers a recognized title prefix. If neither exists, the issue is **unclassified**—not a seventh task status—and remains unchanged until a user explicitly assigns one of the six statuses. New tasks created through Gitasks still default to `BACKLOG`.
+
+If multiple status labels conflict, a matching title prefix wins. Without a matching prefix, Gitasks resolves the first status in lifecycle definition order: `BACKLOG`, `TODO`, `IN PROGRESS`, `REVIEW`, `DONE`, then `BLOCKED`. The next explicit transition removes all conflicting `status:*` labels.
+
+`gitasks list` defaults to all open issues and prints task status (or `UNCLASSIFIED`) separately from GitHub `OPEN`/`CLOSED` state. Use `--state open`, `--state closed`, or `--state all` to choose the issue scope, and combine it with any `--status` filter. Gitasks fetches every REST page and excludes pull requests; results are not silently capped.
+
+## Coding agents
+
+Run `gitasks init`, then point coding agents to `AGENTS.md` and `.gitasks/protocol.md`. The generated protocol requires agents to:
+
+1. search existing issues for the same work before opening a new issue;
+2. reuse the relevant GitHub Issue when one exists;
+3. explicitly classify an unclassified issue when appropriate;
+4. move it to `IN PROGRESS` before implementation;
+5. move completed implementation to `REVIEW`;
+6. use `BLOCKED` when an external dependency prevents progress;
+7. avoid marking work `DONE` unless completion is explicit and appropriate.
+
+Because every transition updates GitHub directly, humans and agents share one task state.
+
+Within one local UI server process, Gitasks serializes complete status-transition attempts per issue number, including the GitHub update and the recovery read after a failure. Different issues, separate CLI/server processes, task creation, and read-only requests are not part of that queue.
+
+### Ambiguous create recovery
+
+If GitHub may have accepted a create request but `gh` returned no usable response, Gitasks does not offer a blind create retry. Run `gitasks list --state all` or open the repository's Issues page, search for the exact proposed title, and reuse the issue if it exists. Retry creation only after confirming that it does not.
+
+## Repository detection
+
+Gitasks works from any directory inside a Git worktree. It reads `origin` and supports common GitHub remote forms:
+
+```text
+https://github.com/owner/repo.git
+git@github.com:owner/repo.git
+```
+
+No repository configuration is stored locally.
+
+## Development
+
+```bash
+npm install
+npm run typecheck
+npm test
+npm run build
+npm pack --dry-run
+node dist/cli.js --help
+node dist/cli.js ui
+```
+
+To run this checkout without confusing it with any registry package, use `node dist/cli.js <command>` after `npm run build`, or install the exact local tarball produced by `npm pack`:
+
+```bash
+npm install -D C:/path/to/gitasks/gitasks-<version>.tgz
+npx gitasks --version
+```
+
+The production bundle contains the executable Node.js shebang and targets Node.js 20+ ESM. `npm pack` and `npm publish` run the `prepack` build automatically, so a clean checkout does not require a committed `dist/` directory.
+
+## License
+
+[MIT](LICENSE)

package/dist/cli.js

@@ -0,0 +1,132 @@
+#!/usr/bin/env node
+import{Command as Xt}from"commander";var a=class extends Error{exitCode;constructor(e,s=1){super(e),this.name="UserError",this.exitCode=s}},S=class extends a{issue;constructor(e,s){super(e),this.name="PartialCreateError",this.issue=s}},C=class extends a{title;recoveryUrl;constructor(e,s,r){super(e),this.name="AmbiguousCreateError",this.title=s,this.recoveryUrl=r}},b=class extends Error{command;exitCode;stdout;stderr;causeCode;constructor(e){let s=e.stderr.trim()||e.stdout.trim();super(s||`Command failed: ${e.command}`),this.name="CommandError",this.command=e.command,this.exitCode=e.exitCode,this.stdout=e.stdout,this.stderr=e.stderr,e.causeCode!==void 0&&(this.causeCode=e.causeCode)}};function m(t){return t instanceof Error?t.message:String(t)}var y=[{name:"BACKLOG",slug:"backlog",label:"status:backlog",color:"BFD4F2"},{name:"TODO",slug:"todo",label:"status:todo",color:"FBCA04"},{name:"IN PROGRESS",slug:"in-progress",label:"status:in-progress",color:"1D76DB"},{name:"REVIEW",slug:"review",label:"status:review",color:"A371F7"},{name:"DONE",slug:"done",label:"status:done",color:"0E8A16"},{name:"BLOCKED",slug:"blocked",label:"status:blocked",color:"D73A4A"}],V=y.map(({name:t})=>t);function W(t){return t.trim().toLowerCase().replace(/[\s_]+/g,"-")}function D(t){let e=W(t);return y.find(({name:s,slug:r,label:n})=>e===W(s)||e===r||e===n)?.name}function w(t){let e=D(t);if(e===void 0)throw new a(`Invalid status: ${t}
+
+Valid statuses:
+${y.map(({slug:s})=>`- ${s}`).join(`
+`)}`);return e}function wt(t){return y.find(({name:e})=>e===t)}function F(t){return wt(t).label}function X(t){return y.find(({label:e})=>e.toLowerCase()===t.trim().toLowerCase())?.name}function I(t){return t.trim().toLowerCase().startsWith("status:")}var kt=/^\s*\[\s*([^\]]+?)\s*\]\s*/;function q(t){let e=kt.exec(t);if(e===null)return{title:t.trim()};let s=e[1];if(s===void 0)return{title:t.trim()};let r=D(s);return r===void 0?{title:t.trim()}:{status:r,title:t.slice(e[0].length).trim()}}function $(t){let e=t.trim();for(;;){let s=q(e);if(s.status===void 0)return e;e=s.title}}function j(t,e){let s=$(t);return s.length===0?`[${e}]`:`[${e}] ${s}`}function Y(t,e){let s=[];for(let n of t){let o=X(n);o!==void 0&&!s.includes(o)&&s.push(o)}let r=q(e).status;return s.length===0||r!==void 0&&s.includes(r)?r:y.find(({name:n})=>s.includes(n)).name}function Tt(t){let e=/^#?([1-9]\d*)$/.exec(t.trim());if(e?.[1]===void 0)throw new a(`Invalid issue number: ${t}
+
+Use a positive number such as 42 or #42.`);return Number(e[1])}function G(t){return $(t.title)}function O(t){return Y(t.labels,t.title)}function R(t){let e=t.trim().toLowerCase();if(e==="open"||e==="closed"||e==="all")return e;throw new a(`Invalid issue state: ${t}
+
+Valid states:
+- open
+- closed
+- all`)}async function P(t,e,s){let r=$(e);if(r.length===0)throw new a("Task title cannot be empty.");let n=w(s.status??"backlog");return t.createIssue({title:j(r,n),body:s.body??"",label:F(n),state:n==="DONE"?"closed":"open"})}async function L(t,e,s){let r=Tt(e),n=await t.getIssue(r),o=j(n.title,s);return t.transitionIssue(r,{title:o,previousStatusLabels:n.labels.filter(I),nextStatusLabel:F(s),state:s==="DONE"?"closed":"open"})}async function Q(t,e,s){let r=await P(t,e,s);return`Created task #${r.number}
+${r.title}
+${r.url}`}import{mkdir as St,readFile as Ct,writeFile as B}from"fs/promises";import{join as H}from"path";var et="<!-- gitasks:start -->",It="<!-- gitasks:end -->",xt=`# Gitasks Task Protocol
+
+GitHub Issues are this repository's task management source of truth. Do not create or maintain a separate task database.
+
+## Rules
+
+- Every development task should have a GitHub Issue.
+- Before opening a new issue, search existing issues for the same work and reuse a suitable issue when one exists.
+- Issue titles and labels must follow the Gitasks status protocol.
+- Before starting a task, run \`gitasks start <issue-number>\` to move it to \`IN PROGRESS\`.
+- When implementation is complete and ready for review, run \`gitasks review <issue-number>\`.
+- Move a task to \`DONE\` only when the work is truly complete.
+- If progress depends on missing information or an external dependency, run \`gitasks block <issue-number>\`.
+- Do not silently change issue status outside this protocol.
+- Preserve unrelated issue labels during status changes.
+- If an issue has conflicting status labels, its matching title prefix wins; otherwise Gitasks uses the first status in protocol order.
+- Issues without a recognized status label or title prefix are unclassified; assign a status explicitly before starting them.
+- GitHub open/closed state is separate from task status. Lists default to open issues; use \`--state closed\` or \`--state all\` to change scope.
+
+## Statuses
+
+\`BACKLOG\` \u2192 \`TODO\` \u2192 \`IN PROGRESS\` \u2192 \`REVIEW\` \u2192 \`DONE\`
+
+Use \`BLOCKED\` when work cannot continue. A blocked task may return to any active status when its blocker is removed.
+
+## Commands
+
+\`\`\`bash
+gitasks list
+gitasks list --status unclassified
+gitasks list --state all
+gitasks create "Describe the task"
+gitasks todo 42
+gitasks start 42
+gitasks review 42
+gitasks done 42
+gitasks block 42
+gitasks backlog 42
+\`\`\`
+
+Gitasks synchronizes each issue's \`status:*\` label, title prefix, and open/closed state. GitHub remains authoritative.
+`,Z=`${et}
+## Gitasks Task Management
+
+This repository uses GitHub Issues as its task management source of truth.
+
+Before starting development work:
+
+1. Read \`.gitasks/protocol.md\`.
+2. Run \`gitasks list\` and search existing issues for the same work.
+3. Reuse the relevant issue, or create one only when none exists.
+4. Run \`gitasks start <issue-number>\`.
+
+When implementation is ready for review, run:
+
+\`gitasks review <issue-number>\`
+
+Do not mark tasks as \`DONE\` automatically unless the work is truly complete and doing so is explicitly appropriate. If an external dependency prevents progress, move the task to \`BLOCKED\`.
+${It}
+`;async function tt(t,e){try{return await B(t,e,{encoding:"utf8",flag:"wx"}),!0}catch(s){if(s.code==="EEXIST")return!1;throw s}}async function Et(t){let e;try{e=await Ct(t,"utf8")}catch(r){if(r.code==="ENOENT")return await B(t,`${Z}
+`,"utf8"),"created";throw r}if(e.includes(et))return"unchanged";let s=e.length===0||e.endsWith(`
+
+`)?"":e.endsWith(`
+`)?`
+`:`
+
+`;return await B(t,`${e}${s}${Z}
+`,"utf8"),"updated"}async function st(t,e){let s=await t.ensureStatusLabels(),r=H(e,".gitasks");await St(r,{recursive:!0});let n=`${JSON.stringify({version:1,statuses:V},null,2)}
+`,o=[];await tt(H(r,"config.json"),n)&&o.push(".gitasks/config.json"),await tt(H(r,"protocol.md"),xt)&&o.push(".gitasks/protocol.md");let i=await Et(H(e,"AGENTS.md")),u=[];return i==="created"?o.push("AGENTS.md"):i==="updated"&&u.push("AGENTS.md"),{createdLabels:s,createdFiles:o,updatedFiles:u}}async function rt(t,e){let s=e.status===void 0?void 0:e.status.trim().toLowerCase()==="unclassified"?null:w(e.status),r=R(e.state??"open"),o=(await t.listIssues(r)).map(c=>({issue:c,status:O(c)??null,title:G(c)})).filter(({status:c})=>s===void 0||c===s);if(o.length===0)return"No tasks found.";let i=Math.max(...o.map(({issue:c})=>`#${c.number}`.length)),u=14;return o.map(({issue:c,status:l,title:f})=>`${`#${c.number}`.padEnd(i)}  ${`[${l??"UNCLASSIFIED"}]`.padEnd(u)}  [${c.state}]  ${f}`).join(`
+`)}async function nt(t,e,s){let r=await L(t,e,s);return`Task #${r.number} moved to ${s}
+${r.title}`}import{once as Wt}from"events";function x(t){return{number:t.number,title:t.title,state:t.state.toUpperCase()==="CLOSED"?"CLOSED":"OPEN",labels:t.labels.map(({name:e})=>e),url:t.html_url??t.url??"",body:t.body??"",assignees:t.assignees?.map(({login:e})=>e)??[]}}var N=class{constructor(e,s){this.repository=e;this.runner=s}repository;runner;async run(e,s){try{return(await this.runner("gh",e)).stdout}catch(r){throw new a(`${s}
+
+${m(r)}`)}}async runJson(e,s){let r=await this.run(e,s);try{return JSON.parse(r)}catch{throw new a(`${s}
+
+GitHub CLI returned an unexpected response.`)}}async removeLabel(e,s){try{await this.runner("gh",["api","--method","DELETE",`repos/${this.repository}/issues/${e}/labels/${encodeURIComponent(s)}`])}catch(r){let n=m(r);if(/\b404\b|label does not exist/i.test(n))return;throw new a(`Could not remove status label ${s} from issue #${e}.
+
+${n}`)}}async ensureStatusLabels(){let e=await this.runJson(["label","list","--repo",this.repository,"--limit","1000","--json","name"],"Could not read repository labels."),s=new Set(e.map(({name:n})=>n.toLowerCase())),r=[];for(let n of y)s.has(n.label)||(await this.run(["label","create",n.label,"--repo",this.repository,"--color",n.color,"--description",`Gitasks status: ${n.name}`],`Could not create label ${n.label}.`),r.push(n.label));return r}async listIssues(e){return(await this.runJson(["api",`repos/${this.repository}/issues?state=${e}&per_page=100`,"--paginate","--slurp"],"Could not list GitHub issues.")).flat().filter(r=>r.pull_request===void 0&&(e==="all"||r.state.toLowerCase()===e)).map(x)}async getIssue(e){let s=await this.runJson(["api",`repos/${this.repository}/issues/${e}`],`Could not load issue #${e}. Make sure it exists and is accessible.`);if(s.pull_request!==void 0)throw new a(`#${e} is a pull request, not an issue.`);return x(s)}async createIssue(e){let s=["api","--method","POST",`repos/${this.repository}/issues`,"--raw-field",`title=${e.title}`,"--raw-field",`body=${e.body}`,"--raw-field",`labels[]=${e.label}`],r;try{r=(await this.runner("gh",s)).stdout}catch(o){let i=m(o);throw o instanceof b&&o.causeCode==="ENOENT"||/\bHTTP\s+4\d\d\b|\b(400|401|403|404|409|410|422|429)\b/.test(i)?new a(`Could not create the GitHub issue.
+
+${i}`):this.ambiguousCreateError(e.title,i)}let n;try{let o=JSON.parse(r);if(!Number.isSafeInteger(o.number)||typeof o.title!="string"||typeof o.state!="string"||!Array.isArray(o.labels))throw new Error("Invalid issue response.");n=o}catch{throw this.ambiguousCreateError(e.title,"GitHub CLI returned an unexpected response.")}if(e.state==="open")return x(n);try{let o=await this.runJson(["api","--method","PATCH",`repos/${this.repository}/issues/${n.number}`,"--raw-field","state=closed"],`Created issue #${n.number} but could not close it.`);return x(o)}catch(o){throw new S(m(o),x(n))}}ambiguousCreateError(e,s){let r=`https://github.com/${this.repository}/issues`;return new C(`Could not confirm whether GitHub created "${e}". Do not retry yet: run \`gitasks list --state all\` or open ${r} and search for the exact title. Reuse it if found; retry only after confirming it does not exist.
+
+${s}`,e,r)}async transitionIssue(e,s){await this.runJson(["api","--method","POST",`repos/${this.repository}/issues/${e}/labels`,"--raw-field",`labels[]=${s.nextStatusLabel}`],`Could not add status label ${s.nextStatusLabel} to issue #${e}.`),await this.runJson(["api","--method","PATCH",`repos/${this.repository}/issues/${e}`,"--raw-field",`title=${s.title}`,"--raw-field",`state=${s.state}`],`Could not update issue #${e}.`);for(let o of s.previousStatusLabels)o.toLowerCase()!==s.nextStatusLabel.toLowerCase()&&await this.removeLabel(e,o);let r=await this.getIssue(e),n=r.labels.filter(o=>I(o)&&o.toLowerCase()!==s.nextStatusLabel.toLowerCase());for(let o of n)await this.removeLabel(e,o);return n.length>0&&(r=await this.getIssue(e)),r}};async function vt(t){try{await t("gh",["--version"])}catch(e){throw e instanceof b&&e.causeCode==="ENOENT"?new a(`GitHub CLI is not installed.
+
+Install it from:
+https://cli.github.com/`):new a(`GitHub CLI could not be executed.
+
+Install or repair it using:
+https://cli.github.com/`)}}async function $t(t){try{await t("gh",["auth","status","--hostname","github.com"])}catch{throw new a(`GitHub authentication not found.
+
+Run:
+gh auth login`)}}async function ot(t){await vt(t),await $t(t)}function Gt(t){let e=t.trim(),s=[/^https?:\/\/github\.com\/([^/\s]+)\/([^/\s]+?)(?:\.git)?\/?$/i,/^git@github\.com:([^/\s]+)\/([^/\s]+?)(?:\.git)?$/i,/^ssh:\/\/git@github\.com\/([^/\s]+)\/([^/\s]+?)(?:\.git)?\/?$/i];for(let r of s){let n=r.exec(e);if(n?.[1]!==void 0&&n[2]!==void 0)return`${n[1]}/${n[2]}`}}async function it(t,e=process.cwd()){try{let{stdout:n}=await t("git",["rev-parse","--is-inside-work-tree"],{cwd:e});if(n.trim()!=="true")throw new a("Not inside a git repository.")}catch(n){throw n instanceof a?n:n instanceof b&&n.causeCode==="ENOENT"?new a("Git is not installed or is not available on PATH."):new a("Not inside a git repository.")}let s;try{s=(await t("git",["remote","get-url","origin"],{cwd:e})).stdout}catch{throw new a(`No origin remote found.
+
+Add a GitHub remote, for example:
+git remote add origin https://github.com/owner/repo.git`)}let r=Gt(s);if(r===void 0)throw new a(`The origin remote is not a supported GitHub URL:
+${s.trim()}
+
+Expected an HTTPS or SSH github.com remote.`);return r}import{execFile as Ot}from"child_process";import{promisify as Rt}from"util";var Pt=Rt(Ot),at=async(t,e,s={})=>{try{let{stdout:r,stderr:n}=await Pt(t,[...e],{...s,encoding:"utf8",maxBuffer:10485760,windowsHide:!0});return{stdout:r,stderr:n}}catch(r){let n=r,o=typeof n.code=="string"?n.code:void 0;throw new b({command:[t,...e].join(" "),exitCode:typeof n.code=="number"?n.code:null,stdout:n.stdout??"",stderr:n.stderr??"",...o===void 0?{}:{causeCode:o}})}};async function E(t=process.cwd(),e=at){let s=await it(e,t);return await ot(e),{repository:s,client:new N(s,e)}}import{randomBytes as Lt,timingSafeEqual as Ht}from"crypto";import{once as ut}from"events";import{existsSync as Nt}from"fs";import{readFile as _}from"fs/promises";import{createServer as At}from"http";import{dirname as Ut,join as v}from"path";import{fileURLToPath as Dt}from"url";function k(t){return{number:t.number,status:O(t)??null,title:G(t),fullTitle:t.title,body:t.body,state:t.state,labels:t.labels.filter(e=>!I(e)),assignees:t.assignees,url:t.url}}var dt=4317,ct="127.0.0.1",mt=64*1024,pt="__GITASKS_CSRF_TOKEN__",d=class extends Error{constructor(s,r){super(r);this.statusCode=s;this.name="HttpError"}statusCode};function ft(t){if(!/^\d+$/.test(t))throw new a(`Invalid port: ${t}
+
+Use an integer between 1 and 65535.`);let e=Number(t);if(!Number.isSafeInteger(e)||e<1||e>65535)throw new a(`Invalid port: ${t}
+
+Use an integer between 1 and 65535.`);return e}function Ft(){let t=Ut(Dt(import.meta.url)),e=v(t,"ui");return Nt(e)?e:v(t,"..","..","dist","ui")}async function jt(t){try{let[e,s,r]=await Promise.all([_(v(t,"index.html"),"utf8"),_(v(t,"app.js")),_(v(t,"styles.css"))]);if(!e.includes(pt))throw new Error("index.html is missing its CSRF placeholder");return{html:e,javascript:s,css:r}}catch(e){throw new a(`Gitasks UI assets could not be loaded from ${t}.
+
+Run:
+npm run build
+
+${m(e)}`)}}function M(t){t.setHeader("Content-Security-Policy","default-src 'self'; script-src 'self'; style-src 'self'; img-src 'self' data:; connect-src 'self'; object-src 'none'; base-uri 'none'; form-action 'self'; frame-ancestors 'none'"),t.setHeader("Referrer-Policy","no-referrer"),t.setHeader("X-Content-Type-Options","nosniff"),t.setHeader("X-Frame-Options","DENY")}function h(t,e,s){let r=JSON.stringify(s);M(t),t.writeHead(e,{"Cache-Control":"no-store","Content-Type":"application/json; charset=utf-8","Content-Length":Buffer.byteLength(r)}),t.end(r)}function J(t,e,s,r,n){M(t),t.writeHead(e,{"Cache-Control":n,"Content-Type":s,"Content-Length":Buffer.byteLength(r)}),t.end(r)}function A(t,e){let s=t.headers[e];return Array.isArray(s)?s[0]:s}function Bt(t,e){if(t===void 0)return!1;let s=Buffer.from(t),r=Buffer.from(e);return s.length===r.length&&Ht(s,r)}function _t(t,e,s){if(A(t,"host")?.toLowerCase()!==e)throw new d(403,"Request host is not allowed.");let r=A(t,"origin"),n=`http://${e}`;if(r!==void 0&&r!==n)throw new d(403,"Cross-origin requests are not allowed.");if(t.method!=="GET"&&t.method!=="HEAD"){if(r!==n)throw new d(403,"Mutating requests require the local UI origin.");if(!Bt(A(t,"x-gitasks-csrf"),s))throw new d(403,"Invalid or missing CSRF token.")}}async function lt(t){if(A(t,"content-type")?.split(";",1)[0]?.trim()!=="application/json")throw new d(415,"Content-Type must be application/json.");let s=[],r=0;for await(let o of t){let i=Buffer.isBuffer(o)?o:Buffer.from(o);if(r+=i.length,r>mt)throw new d(413,"Request body is too large.");s.push(i)}let n;try{n=JSON.parse(Buffer.concat(s).toString("utf8"))}catch{throw new d(400,"Request body must contain valid JSON.")}if(n===null||typeof n!="object"||Array.isArray(n))throw new d(400,"Request body must be a JSON object.");return n}function gt(t,e){let s=Object.keys(t).find(r=>!e.includes(r));if(s!==void 0)throw new d(400,`Unknown field: ${s}`)}function Jt(t){if(gt(t,["title","body","status"]),typeof t.title!="string"||t.title.trim().length===0)throw new d(400,"Task title is required.");if(t.title.trim().length>256)throw new d(400,"Task title must be 256 characters or fewer.");if(t.body!==void 0&&typeof t.body!="string")throw new d(400,"Task description must be a string.");if(typeof t.body=="string"&&Buffer.byteLength(t.body)>mt)throw new d(400,"Task description is too large.");if(t.status!==void 0&&typeof t.status!="string")throw new d(400,"Task status must be a string.");let e=typeof t.status=="string"?t.status:"backlog";try{w(e)}catch(s){throw new d(400,m(s))}return{title:t.title.trim(),body:typeof t.body=="string"?t.body:"",status:e}}function Mt(t){if(gt(t,["status"]),typeof t.status!="string")throw new d(400,"Task status is required.");try{return w(t.status)}catch(e){throw new d(400,m(e))}}function zt(t,e,s){return{repository:t,state:e,scope:`${e==="all"?"Open and closed":e==="open"?"Open":"Closed"} GitHub Issues; search covers every loaded issue; pull requests excluded`,complete:!0,statuses:y.map(({name:r,slug:n,color:o})=>({name:r,slug:n,color:o})),tasks:s.map(k)}}function Kt(t,e,s,r){let n=new Map,o=(i,u)=>{let l=(n.get(i)??Promise.resolve()).then(u),f=l.then(()=>{},()=>{});return n.set(i,f),l.finally(()=>{n.get(i)===f&&n.delete(i)})};return async(i,u)=>{try{_t(i,r(),s);let c=new URL(i.url??"/",`http://${r()}`),l=c.pathname;if(i.method==="GET"&&l==="/api/board"){let g;try{g=R(c.searchParams.get("state")??"open")}catch(T){throw new d(400,m(T))}let p=await t.gateway.listIssues(g);h(u,200,zt(t.repository,g,p));return}let f=/^\/api\/issues\/([1-9]\d*)$/.exec(l);if(i.method==="GET"&&f?.[1]!==void 0){let g=await t.gateway.getIssue(Number(f[1]));h(u,200,{task:k(g)});return}if(i.method==="POST"&&l==="/api/issues"){let g=Jt(await lt(i));try{let p=await P(t.gateway,g.title,{body:g.body,status:g.status});h(u,201,{task:k(p)})}catch(p){p instanceof S?h(u,502,{error:{message:p.message,retryable:!0},task:k(p.issue),repair:{issueNumber:p.issue.number,status:"DONE"}}):p instanceof C?h(u,502,{error:{message:p.message,retryable:!1},recovery:{kind:"ambiguous-create",title:p.title,issuesUrl:p.recoveryUrl}}):h(u,502,{error:{message:m(p),retryable:!0}})}return}let K=/^\/api\/issues\/([1-9]\d*)\/status$/.exec(l);if(i.method==="POST"&&K?.[1]!==void 0){let g=Number(K[1]),p=Mt(await lt(i));await o(g,async()=>{try{let T=await L(t.gateway,String(g),p);h(u,200,{task:k(T)})}catch(T){try{let bt=await t.gateway.getIssue(g);h(u,502,{error:{message:m(T),retryable:!0,stateVerified:!0},task:k(bt)})}catch{h(u,502,{error:{message:m(T),retryable:!0,stateVerified:!1}})}}});return}if(i.method==="GET"&&(l==="/"||l==="/index.html")){J(u,200,"text/html; charset=utf-8",e.html.replace(pt,s),"no-store");return}if(i.method==="GET"&&l==="/app.js"){J(u,200,"text/javascript; charset=utf-8",e.javascript,"no-cache");return}if(i.method==="GET"&&l==="/styles.css"){J(u,200,"text/css; charset=utf-8",e.css,"no-cache");return}if(i.method==="GET"&&l==="/favicon.ico"){M(u),u.writeHead(204,{"Cache-Control":"no-store"}),u.end();return}h(u,404,{error:{message:"Not found."}})}catch(c){if(c instanceof d){h(u,c.statusCode,{error:{message:c.message}});return}if(c instanceof a){h(u,502,{error:{message:c.message,retryable:!0}});return}h(u,500,{error:{message:`Unexpected server error: ${m(c)}`}})}}}async function ht(t){let e=t.assetDirectory??Ft(),s=await jt(e),r=t.csrfToken??Lt(24).toString("hex"),n="",o=Kt(t,s,r,()=>n),i=At((l,f)=>{o(l,f)});i.on("clientError",(l,f)=>{f.end(`HTTP/1.1 400 Bad Request\r
+Connection: close\r
+\r
+`)});let u=ut(i,"listening");i.listen(t.port,ct);try{await u}catch(l){let f=l.code;throw f==="EADDRINUSE"?new a(`Port ${t.port} is already in use.
+
+Choose another port:
+gitasks ui --port ${t.port+1}`):f==="EACCES"?new a(`Permission denied while binding to port ${t.port}.`):new a(`Could not start the local UI server.
+
+${m(l)}`)}let c=i.address();if(c===null||typeof c=="string")throw i.close(),new a("Could not determine the local UI address.");return n=`${ct}:${c.port}`,{server:i,port:c.port,url:`http://${n}`,csrfToken:r,async close(){if(!i.listening)return;let l=ut(i,"close");i.close(),await l}}}async function Vt(t,e,s){let r=ft(e),n=await ht({repository:t.repository,gateway:t.client,port:r});s(`Gitasks UI running at ${n.url}`),s(`Repository: ${t.repository}`),s("Press Ctrl+C to stop.");let o=Wt(n.server,"close"),i=!1,u=()=>{i||(i=!0,s("Stopping Gitasks UI..."),n.close())};process.once("SIGINT",u),process.once("SIGTERM",u);try{await o}finally{process.removeListener("SIGINT",u),process.removeListener("SIGTERM",u)}}function yt(t){t.command("ui").description("Start the local Gitasks task board").option("-p, --port <port>","local server port",String(dt)).action(async e=>{let s=await E();await Vt(s,e.port,r=>{process.stdout.write(`${r}
+`)})})}var qt="0.3.0";function U(t){process.stdout.write(`${t}
+`)}async function z(t){let e=await E();return t(e)}function Yt(t){t.command("init").description("Initialize Gitasks labels and agent protocol files").action(async()=>{let e=await E(),s=await st(e.client,process.cwd()),r=[`Initialized Gitasks for ${e.repository}`];r.push(s.createdLabels.length>0?`Created labels: ${s.createdLabels.join(", ")}`:"Status labels already exist."),s.createdFiles.length>0&&r.push(`Created files: ${s.createdFiles.join(", ")}`),s.updatedFiles.length>0&&r.push(`Updated files: ${s.updatedFiles.join(", ")}`),s.createdFiles.length===0&&s.updatedFiles.length===0&&r.push("Protocol files already exist; nothing was overwritten."),U(r.join(`
+`))})}function Qt(t){t.command("list").description("List GitHub Issues as Gitasks tasks").option("-s, --status <status>","filter by backlog, todo, in-progress, review, done, blocked, or unclassified").option("--state <state>","GitHub issue state: open, closed, or all","open").action(async e=>{U(await z(({client:s})=>rt(s,e)))})}function Zt(t){t.command("create <title>").description("Create a standardized GitHub Issue task").option("-s, --status <status>","initial task status","backlog").option("-b, --body <body>","issue body","").action(async(e,s)=>{U(await z(({client:r})=>Q(r,e,s)))})}function te(t){let e=[{command:"backlog",status:"BACKLOG",description:"Move a task to BACKLOG"},{command:"todo",status:"TODO",description:"Move a task to TODO"},{command:"start",status:"IN PROGRESS",description:"Move a task to IN PROGRESS"},{command:"review",status:"REVIEW",description:"Move a task to REVIEW"},{command:"done",status:"DONE",description:"Move a task to DONE and close it"},{command:"block",status:"BLOCKED",description:"Move a task to BLOCKED"}];for(let s of e)t.command(`${s.command} <issue>`).description(s.description).action(async r=>{U(await z(({client:n})=>nt(n,r,s.status)))})}async function ee(){let t=new Xt().name("gitasks").description("Lightweight task management for humans and coding agents, powered by GitHub Issues").version(qt).showHelpAfterError();Yt(t),Qt(t),Zt(t),te(t),yt(t),await t.parseAsync(process.argv)}try{await ee()}catch(t){t instanceof a?(process.stderr.write(`${t.message}
+`),process.exitCode=t.exitCode):(process.stderr.write(`Unexpected error: ${m(t)}
+`),process.exitCode=1)}

package/dist/ui/app.js

@@ -0,0 +1 @@
+"use strict";var GitasksUi=(()=>{var le=Object.defineProperty;var ce=(e,t,n)=>t in e?le(e,t,{enumerable:!0,configurable:!0,writable:!0,value:n}):e[t]=n;var X=(e,t,n)=>ce(e,typeof t!="symbol"?t+"":t,n);var h=class extends Error{constructor(n,s={}){super(n);X(this,"payload");this.name="ApiRequestError",this.payload=s}};function a(e){let t=document.getElementById(e);if(t===null)throw new Error(`Missing UI element: ${e}`);return t}var ee=document.querySelector('meta[name="gitasks-csrf"]')?.content;if(!ee)throw new Error("Missing Gitasks CSRF token.");var de=ee,L=a("board"),R=a("loading-state"),ue=a("search-empty"),me=a("repository"),fe=a("scope-text"),pe=a("status-message"),C=a("state-filter"),z=a("refresh-time"),U=a("unclassified-panel"),F=a("unclassified-list"),ge=a("unclassified-count"),j=a("refresh-button"),H=a("search-input"),Y=a("connection-error"),Ee=a("connection-error-message"),E=a("create-dialog"),M=a("create-form"),k=a("create-submit"),B=a("create-error"),K=a("task-status"),u=a("detail-dialog"),he=a("detail-number"),Te=a("detail-title"),$=a("detail-content"),p=a("toast"),te=a("toast-message"),J=a("toast-retry"),ne=a("toast-title"),b=[],f=[],se="",N="open",y,S=new Set,O;async function P(e,t){let n=new Headers(t?.headers);t?.body!==void 0&&n.set("Content-Type","application/json"),t?.method!==void 0&&t.method!=="GET"&&n.set("X-Gitasks-CSRF",de);let s;try{s=await fetch(e,{...t,headers:n})}catch(r){throw new h(r instanceof Error?r.message:"Could not reach the local Gitasks server.")}let o;try{o=await s.json()}catch{throw new h(`The local server returned HTTP ${s.status}.`)}if(!s.ok){let r=o;throw new h(r.error?.message??`Request failed with HTTP ${s.status}.`,r)}return o}function _(e){let t=b.map(n=>{let s=document.createElement("option");return s.value=n.name,s.textContent=n.name,s.selected=n.name===e,s});if(e===null){let n=document.createElement("option");n.value="",n.textContent="Assign status\u2026",n.selected=!0,n.disabled=!0,t.unshift(n)}return t}function be(e){return`#${b.find(({name:t})=>t===e)?.color??"667085"}`}function x(e){let t=f.findIndex(({number:n})=>n===e.number);t===-1?f.unshift(e):f[t]=e}function D(e,t){p.classList.remove("success"),ne.textContent="Action failed",te.textContent=e,O=t,J.hidden=t===void 0,(u.open?u:E.open?E:document.body).append(p),p.hidden=!1}function ye(e){p.classList.add("success"),ne.textContent="Success",te.textContent=e,O=void 0,J.hidden=!0,document.body.append(p),p.hidden=!1}function w(){p.hidden=!0,O=void 0,p.parentElement!==document.body&&document.body.append(p)}function oe(e){let t=document.createElement("div");t.className="label-list";for(let n of e){let s=document.createElement("span");s.className="label-chip",s.textContent=n,t.append(s)}return t}function Le(e,t){let n=document.querySelector(`[data-issue="${e}"]`);n?.classList.toggle("is-pending",t);for(let s of n?.querySelectorAll("button, select")??[])s.disabled=t;y===e&&$.querySelector("#detail-status-select")?.toggleAttribute("disabled",t)}function Z(e){let t=document.createElement("article");t.className="task-card",t.dataset.issue=String(e.number),t.style.setProperty("--status-color",be(e.status));let n=S.has(e.number);t.classList.toggle("is-pending",n);let s=document.createElement("div");s.className="card-topline";let o=document.createElement("span");o.className="issue-number",o.textContent=`#${e.number}`;let r=document.createElement("span");r.className=`state-badge ${e.state==="CLOSED"?"closed":""}`,r.textContent=e.state,s.append(o,r);let i=document.createElement("button");if(i.className="card-title-button",i.type="button",i.disabled=n,i.textContent=e.title||"Untitled task",i.addEventListener("click",()=>{ae(e.number)}),t.append(s,i),e.assignees.length>0){let l=document.createElement("p");l.className="assignee",l.textContent=`Assigned to ${e.assignees.map(T=>`@${T}`).join(", ")}`,t.append(l)}e.labels.length>0&&t.append(oe(e.labels));let m=document.createElement("div");m.className="card-footer";let g=document.createElement("label");g.textContent="Move to";let d=document.createElement("select");d.setAttribute("aria-label",`Change status for issue #${e.number}`),d.disabled=n,d.append(..._(e.status)),d.addEventListener("change",()=>{I(e.number,d.value)}),g.append(d);let c=document.createElement("a");return c.className="github-link",c.href=e.url,c.target="_blank",c.rel="noreferrer",c.textContent="Open in GitHub \u2197",m.append(g,c),t.append(m),t}function ve(){let e=f.filter(s=>N==="all"||s.state.toLowerCase()===N),t=H.value.trim().toLowerCase();if(t.length===0)return e;let n=t.startsWith("#")?t.slice(1):t;return e.filter(s=>s.title.toLowerCase().includes(t)||s.fullTitle.toLowerCase().includes(t)||String(s.number)===n)}function v(){let e=ve();L.replaceChildren();for(let n of b){let s=document.createElement("section");s.className="column",s.style.setProperty("--status-color",`#${n.color}`),s.setAttribute("aria-labelledby",`column-${n.slug}`);let o=document.createElement("header");o.className="column-header";let r=document.createElement("div");r.className="column-title";let i=document.createElement("span");i.className="status-dot",i.setAttribute("aria-hidden","true");let m=document.createElement("h2");m.id=`column-${n.slug}`,m.textContent=n.name,r.append(i,m);let g=e.filter(l=>l.status===n.name),d=document.createElement("span");d.className="count",d.textContent=String(g.length),o.append(r,d);let c=document.createElement("div");if(c.className="card-list",g.length===0){let l=document.createElement("p");l.className="column-empty",l.textContent=H.value.trim()?"No matches":"No tasks",c.append(l)}else c.append(...g.map(Z));s.append(o,c),L.append(s)}let t=e.filter(n=>n.status===null);if(ge.textContent=String(t.length),F.replaceChildren(),t.length===0){let n=document.createElement("p");n.className="column-empty",n.textContent=H.value.trim()?"No matches":"No unclassified issues",F.append(n)}else F.append(...t.map(Z));U.hidden=!1,ue.hidden=H.value.trim().length===0||e.length>0,fe.textContent=`${se} \xB7 ${f.length} issue${f.length===1?"":"s"}`}function V(e){he.textContent=`Issue #${e.number}`,Te.textContent=e.fullTitle,$.replaceChildren();let t=document.createElement("section");t.className="detail-section";let n=document.createElement("h3");n.textContent="Overview",t.append(n);let s=[["Task status",e.status??"Unclassified"],["GitHub state",e.state],["Assignee",e.assignees.length>0?e.assignees.map(q=>`@${q}`).join(", "):"Unassigned"]];for(let[q,ie]of s){let G=document.createElement("div");G.className="detail-row";let Q=document.createElement("span");Q.textContent=q;let W=document.createElement("strong");W.textContent=ie,G.append(Q,W),t.append(G)}let o=document.createElement("section");o.className="detail-section";let r=document.createElement("h3");r.textContent="Description";let i=document.createElement("p");i.className="detail-body",i.textContent=e.body.trim()||"No description provided.",o.append(r,i);let m=document.createElement("section");m.className="detail-section";let g=document.createElement("h3");g.textContent="Labels",m.append(g),m.append(e.labels.length>0?oe(e.labels):document.createTextNode("No additional labels."));let d=document.createElement("section");d.className="detail-status";let c=document.createElement("label");c.htmlFor="detail-status-select",c.textContent="Change task status";let l=document.createElement("select");l.id="detail-status-select",l.disabled=S.has(e.number),l.append(..._(e.status)),l.addEventListener("change",()=>{I(e.number,l.value)}),d.append(c,l);let T=document.createElement("a");T.className="button secondary detail-link",T.href=e.url,T.target="_blank",T.rel="noreferrer",T.textContent="Open in GitHub \u2197",$.append(t,o,m,d,T)}async function ae(e){y=e;let t=f.find(({number:n})=>n===e);t!==void 0&&V(t),u.open||(u.showModal(),u.querySelector(".icon-button")?.focus());try{let{task:n}=await P(`/api/issues/${e}`);x(n),y===e&&u.open&&V(n)}catch(n){D(n instanceof Error?n.message:"Could not load issue details.",()=>{ae(e)})}}async function I(e,t){if(S.has(e))return;let n=y===e&&u.open,s=!1;S.add(e),Le(e,!0);try{let{task:o}=await P(`/api/issues/${e}/status`,{method:"POST",body:JSON.stringify({status:t})});x(o),s=!0}catch(o){o instanceof h&&o.payload.task!==void 0&&x(o.payload.task);let r=o instanceof h&&o.payload.error?.stateVerified===!1,i=`${o instanceof Error?o.message:"Status change failed."}${r?" The issue state could not be verified; refresh before continuing.":""}`;D(i,()=>{I(e,t)})}finally{S.delete(e),v();let o=f.find(({number:r})=>r===e);if(y===e&&o!==void 0&&u.open?(V(o),n&&$.querySelector("#detail-status-select")?.focus()):document.querySelector(`[data-issue="${e}"] .card-title-button`)?.focus(),s){pe.textContent=`Issue #${e} moved to ${t}.`;let r=f.find(({number:i})=>i===e);t==="DONE"&&r?.state==="CLOSED"&&N==="open"&&ye(`Issue #${e} moved to DONE and closed. It is hidden by the Open filter.`)}}}async function A(){j.disabled=!0,C.disabled=!0,Y.hidden=!0,f.length===0&&(R.hidden=!1,L.hidden=!0,U.hidden=!0);try{let e=C.value,t=await P(`/api/board?state=${encodeURIComponent(e)}`);b=t.statuses,f=t.tasks,se=t.scope,N=t.state,C.value=t.state,me.textContent=t.repository;let n=new Date;z.dateTime=n.toISOString(),z.textContent=n.toLocaleTimeString([],{hour:"2-digit",minute:"2-digit",second:"2-digit"}),K.replaceChildren(..._(b[0]?.name??"BACKLOG")),L.hidden=!1,R.hidden=!0,v()}catch(e){R.hidden=!0,f.length===0&&(L.hidden=!0,U.hidden=!0),Ee.textContent=e instanceof Error?e.message:"Could not read GitHub Issues.",Y.hidden=!1}finally{j.disabled=!1,C.disabled=!1}}async function re(){if(!M.reportValidity())return;let e=new FormData(M),t={title:String(e.get("title")??"").trim(),body:String(e.get("body")??""),status:String(e.get("status")??"BACKLOG")};k.disabled=!0,k.textContent="Creating\u2026",B.hidden=!0;try{let{task:n}=await P("/api/issues",{method:"POST",body:JSON.stringify(t)});x(n),v(),E.close(),M.reset(),K.value=b[0]?.name??"BACKLOG"}catch(n){let s=n instanceof Error?n.message:"Task creation failed.";if(n instanceof h&&n.payload.task!==void 0&&n.payload.repair!==void 0){let{task:o,repair:r}=n.payload;x(o),v(),E.close(),M.reset(),K.value=b[0]?.name??"BACKLOG",D(s,()=>{I(r.issueNumber,r.status)})}else{B.textContent=s,B.hidden=!1;let o=!(n instanceof h)||n.payload.error?.retryable!==!1;D(s,o?()=>{re()}:void 0)}}finally{k.disabled=!1,k.textContent="Create task"}}j.addEventListener("click",()=>{A()});C.addEventListener("change",()=>{A()});a("connection-retry").addEventListener("click",()=>{A()});a("new-task-button").addEventListener("click",()=>{B.hidden=!0,E.showModal()});H.addEventListener("input",v);M.addEventListener("submit",e=>{e.preventDefault(),re()});for(let e of document.querySelectorAll("[data-close]"))e.addEventListener("click",()=>{let t=e.dataset.close;t!==void 0&&a(t).close()});for(let e of[E,u])e.addEventListener("click",t=>{t.target===e&&e.close()});u.addEventListener("close",()=>{let e=y;y=void 0,p.parentElement===u&&w(),v(),e!==void 0&&window.setTimeout(()=>{L.querySelector(`[data-issue="${e}"] .card-title-button`)?.focus()},0)});E.addEventListener("close",()=>{p.parentElement===E&&w()});J.addEventListener("click",()=>{let e=O;w(),e?.()});a("toast-dismiss").addEventListener("click",w);document.addEventListener("keydown",e=>{e.key==="Escape"&&(w(),u.open?u.close():E.open&&E.close())});A();})();

package/dist/ui/index.html

@@ -0,0 +1,142 @@
+<!doctype html>
+<html lang="en">
+<head>
+  <meta charset="utf-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1">
+  <meta name="gitasks-csrf" content="__GITASKS_CSRF_TOKEN__">
+  <meta name="color-scheme" content="light">
+  <title>Gitasks</title>
+  <link rel="stylesheet" href="/styles.css">
+  <script src="/app.js" defer></script>
+</head>
+<body>
+  <div class="app-shell">
+    <header class="app-header">
+      <div class="brand-block">
+        <div class="brand-mark" aria-hidden="true">G</div>
+        <div>
+          <p class="eyebrow">Local task board</p>
+          <h1>Gitasks</h1>
+        </div>
+      </div>
+      <div class="repo-block">
+        <span class="repo-label">Repository</span>
+        <strong id="repository">Connecting…</strong>
+      </div>
+    </header>
+
+    <section class="toolbar" aria-label="Board controls">
+      <label class="search-field" for="search-input">
+        <span class="visually-hidden">Search by title or issue number</span>
+        <svg aria-hidden="true" viewBox="0 0 20 20"><path d="m14.4 13.2 3.2 3.2-1.2 1.2-3.2-3.2a6.5 6.5 0 1 1 1.2-1.2ZM9.5 14.3a4.8 4.8 0 1 0 0-9.6 4.8 4.8 0 0 0 0 9.6Z"/></svg>
+        <input id="search-input" type="search" placeholder="Search title or #issue" autocomplete="off">
+      </label>
+      <div class="toolbar-actions">
+        <label class="state-filter" for="state-filter">
+          <span>GitHub state</span>
+          <select id="state-filter">
+            <option value="open" selected>Open</option>
+            <option value="closed">Closed</option>
+            <option value="all">All</option>
+          </select>
+        </label>
+        <button id="refresh-button" class="button secondary" type="button">
+          <svg aria-hidden="true" viewBox="0 0 20 20"><path d="M15.7 6.2A6.5 6.5 0 1 0 16 13l-1.6-.8a4.7 4.7 0 1 1-.2-4.8h-2.5V5.7h5.5v5.5h-1.7V7.6l.2-1.4Z"/></svg>
+          Refresh
+        </button>
+        <button id="new-task-button" class="button primary" type="button">
+          <span aria-hidden="true">＋</span>
+          New task
+        </button>
+      </div>
+    </section>
+
+    <section class="board-meta" aria-live="polite">
+      <p id="scope-text">Loading issue scope…</p>
+      <p>Last refreshed <time id="refresh-time">—</time></p>
+    </section>
+    <p id="status-message" class="visually-hidden" role="status" aria-live="polite"></p>
+
+    <section id="connection-error" class="state-panel error-panel" role="alert" hidden>
+      <div>
+        <strong>Could not load the board</strong>
+        <p id="connection-error-message">Check your internet connection and GitHub CLI authentication.</p>
+      </div>
+      <button id="connection-retry" class="button secondary" type="button">Retry</button>
+    </section>
+
+    <main>
+      <p id="board-scroll-hint" class="visually-hidden">Scroll the board horizontally and vertically to view every status column and task.</p>
+      <section id="loading-state" class="state-panel loading-panel" aria-live="polite">
+        <span class="loading-dot" aria-hidden="true"></span>
+        Reading GitHub Issues…
+      </section>
+      <section id="search-empty" class="state-panel" hidden>
+        <strong>No matching tasks</strong>
+        <p>Try a different title or issue number.</p>
+      </section>
+      <section id="unclassified-panel" class="unclassified-panel" aria-labelledby="unclassified-title" hidden>
+        <header class="unclassified-header">
+          <div>
+            <h2 id="unclassified-title">Unclassified issues</h2>
+            <p>No recognized Gitasks status label or title prefix. Assigning a status updates GitHub.</p>
+          </div>
+          <span id="unclassified-count" class="count">0</span>
+        </header>
+        <div id="unclassified-list" class="unclassified-list"></div>
+      </section>
+      <div id="board" class="board" tabindex="0" aria-label="Gitasks status board" aria-describedby="board-scroll-hint" hidden></div>
+    </main>
+  </div>
+
+  <dialog id="create-dialog" class="modal" aria-labelledby="create-dialog-title">
+    <form id="create-form" method="dialog">
+      <header class="dialog-header">
+        <div>
+          <p class="eyebrow">GitHub Issue</p>
+          <h2 id="create-dialog-title">Create a task</h2>
+        </div>
+        <button class="icon-button" type="button" data-close="create-dialog" aria-label="Close create task form">×</button>
+      </header>
+      <div class="form-body">
+        <label for="task-title">Title</label>
+        <input id="task-title" name="title" type="text" maxlength="256" required autofocus placeholder="What needs to be done?">
+
+        <label for="task-body">Description <span>optional</span></label>
+        <textarea id="task-body" name="body" rows="7" placeholder="Add context, acceptance criteria, or implementation notes."></textarea>
+
+        <label for="task-status">Initial status</label>
+        <select id="task-status" name="status"></select>
+        <p class="form-note">Creates a GitHub Issue immediately.</p>
+        <p id="create-error" class="inline-error" role="alert" hidden></p>
+      </div>
+      <footer class="dialog-footer">
+        <button class="button secondary" type="button" data-close="create-dialog">Cancel</button>
+        <button id="create-submit" class="button primary" type="submit">Create task</button>
+      </footer>
+    </form>
+  </dialog>
+
+  <dialog id="detail-dialog" class="drawer" aria-labelledby="detail-title">
+    <article>
+      <header class="dialog-header detail-header">
+        <div>
+          <p id="detail-number" class="eyebrow">Issue</p>
+          <h2 id="detail-title">Task details</h2>
+        </div>
+        <button class="icon-button" type="button" data-close="detail-dialog" aria-label="Close task details">×</button>
+      </header>
+      <div id="detail-content" class="detail-content"></div>
+    </article>
+  </dialog>
+
+  <div id="toast" class="toast" role="alert" hidden>
+    <div>
+      <strong id="toast-title">Action failed</strong>
+      <p id="toast-message"></p>
+    </div>
+    <button id="toast-retry" class="button compact" type="button" hidden>Retry</button>
+    <button id="toast-dismiss" class="icon-button" type="button" aria-label="Dismiss message">×</button>
+  </div>
+</body>
+</html>

package/dist/ui/styles.css

@@ -0,0 +1,426 @@
+:root {
+  color-scheme: light;
+  font-family: Inter, ui-sans-serif, -apple-system, BlinkMacSystemFont, "Segoe UI", sans-serif;
+  color: #172033;
+  background: #f4f6f8;
+  font-synthesis: none;
+  --ink: #172033;
+  --muted: #697386;
+  --line: #dfe4ea;
+  --surface: #ffffff;
+  --surface-subtle: #f8fafb;
+  --accent: #246bfd;
+  --accent-strong: #1854cc;
+  --danger: #b42318;
+  --danger-bg: #fff3f2;
+  --shadow: 0 12px 34px rgba(27, 39, 61, 0.12);
+}
+
+* { box-sizing: border-box; }
+
+body {
+  margin: 0;
+  min-width: 320px;
+  min-height: 100vh;
+  background: #f4f6f8;
+}
+
+button, input, textarea, select { font: inherit; }
+button, select { cursor: pointer; }
+button:disabled, select:disabled { cursor: not-allowed; opacity: 0.55; }
+a { color: inherit; }
+
+:focus-visible {
+  outline: 2px solid var(--accent-strong);
+  outline-offset: 2px;
+}
+
+.visually-hidden {
+  position: absolute;
+  width: 1px;
+  height: 1px;
+  padding: 0;
+  margin: -1px;
+  overflow: hidden;
+  clip: rect(0, 0, 0, 0);
+  white-space: nowrap;
+  border: 0;
+}
+
+.app-shell {
+  height: 100vh;
+  display: flex;
+  flex-direction: column;
+  overflow: hidden;
+}
+
+.app-header {
+  min-height: 78px;
+  padding: 18px 28px;
+  display: flex;
+  align-items: center;
+  justify-content: space-between;
+  gap: 24px;
+  background: var(--surface);
+  border-bottom: 1px solid var(--line);
+}
+
+.brand-block, .repo-block, .toolbar, .toolbar-actions, .board-meta,
+.card-topline, .card-footer, .label-list, .detail-row, .toast {
+  display: flex;
+  align-items: center;
+}
+
+.brand-block { gap: 12px; }
+.brand-mark {
+  width: 40px;
+  height: 40px;
+  display: grid;
+  place-items: center;
+  border-radius: 10px;
+  color: #fff;
+  background: #172033;
+  font-weight: 750;
+  letter-spacing: -0.04em;
+}
+
+h1, h2, h3, p { margin: 0; }
+h1 { font-size: 20px; line-height: 1.1; letter-spacing: -0.025em; }
+h2 { font-size: 20px; line-height: 1.25; letter-spacing: -0.02em; }
+.eyebrow, .repo-label {
+  margin-bottom: 3px;
+  color: var(--muted);
+  font-size: 11px;
+  font-weight: 700;
+  letter-spacing: 0.08em;
+  text-transform: uppercase;
+}
+
+.repo-block {
+  align-items: flex-end;
+  flex-direction: column;
+  min-width: 0;
+}
+.repo-block strong {
+  max-width: min(50vw, 420px);
+  overflow: hidden;
+  color: #33405a;
+  font-family: ui-monospace, SFMono-Regular, Consolas, monospace;
+  font-size: 13px;
+  text-overflow: ellipsis;
+  white-space: nowrap;
+}
+
+.toolbar {
+  padding: 20px 28px 10px;
+  justify-content: space-between;
+  gap: 16px;
+}
+.toolbar-actions { gap: 10px; }
+.state-filter {
+  min-height: 40px;
+  display: flex;
+  align-items: center;
+  gap: 8px;
+  padding: 0 8px 0 12px;
+  border: 1px solid #cfd6df;
+  border-radius: 8px;
+  color: var(--muted);
+  background: var(--surface);
+  font-size: 11px;
+  font-weight: 700;
+  text-transform: uppercase;
+}
+.state-filter select {
+  border: 0;
+  outline: 0;
+  color: var(--ink);
+  background: transparent;
+  font-weight: 650;
+  text-transform: none;
+}
+.search-field {
+  width: min(440px, 52vw);
+  min-height: 42px;
+  display: flex;
+  align-items: center;
+  gap: 10px;
+  padding: 0 13px;
+  border: 1px solid #cfd6df;
+  border-radius: 9px;
+  background: var(--surface);
+}
+.search-field:focus-within { border-color: var(--accent); box-shadow: 0 0 0 3px rgba(36, 107, 253, 0.12); }
+.search-field svg, .button svg { width: 18px; height: 18px; fill: currentColor; flex: 0 0 auto; }
+.search-field svg { color: #8992a2; }
+.search-field input {
+  width: 100%;
+  border: 0;
+  outline: 0;
+  color: var(--ink);
+  background: transparent;
+}
+.search-field input::placeholder { color: var(--muted); }
+
+.button, .icon-button {
+  border: 1px solid transparent;
+  border-radius: 8px;
+  font-weight: 650;
+}
+.button {
+  min-height: 40px;
+  padding: 0 15px;
+  display: inline-flex;
+  align-items: center;
+  justify-content: center;
+  gap: 8px;
+}
+.button.primary { color: #fff; background: var(--accent); border-color: var(--accent); }
+.button.primary:hover:not(:disabled) { background: var(--accent-strong); }
+.button.secondary { color: #344054; background: var(--surface); border-color: #cfd6df; }
+.button.secondary:hover:not(:disabled) { background: #f8fafb; }
+.button.compact { min-height: 32px; padding: 0 10px; color: #fff; background: transparent; border-color: rgba(255,255,255,.45); }
+.icon-button {
+  width: 34px;
+  height: 34px;
+  padding: 0;
+  color: #667085;
+  background: transparent;
+  font-size: 24px;
+  line-height: 1;
+}
+.icon-button:hover { background: #f0f2f5; color: var(--ink); }
+
+.board-meta {
+  min-height: 34px;
+  padding: 0 28px 12px;
+  justify-content: space-between;
+  gap: 16px;
+  color: var(--muted);
+  font-size: 12px;
+}
+
+.state-panel {
+  margin: 14px 28px;
+  padding: 18px;
+  border: 1px dashed #cfd6df;
+  border-radius: 10px;
+  color: var(--muted);
+  background: rgba(255,255,255,.65);
+  text-align: center;
+}
+.state-panel strong { display: block; margin-bottom: 4px; color: var(--ink); }
+.error-panel { display: flex; justify-content: space-between; text-align: left; border-style: solid; border-color: #f2b8b5; background: var(--danger-bg); }
+.error-panel strong, .inline-error { color: var(--danger); }
+.loading-panel { display: flex; justify-content: center; align-items: center; gap: 10px; }
+.loading-dot { width: 9px; height: 9px; border-radius: 50%; background: var(--accent); box-shadow: 14px 0 #9bb9fb, -14px 0 #d4e1ff; }
+
+main { min-width: 0; min-height: 0; flex: 1; display: flex; flex-direction: column; overflow: hidden; }
+.board {
+  min-height: 0;
+  flex: 1;
+  display: grid;
+  grid-auto-flow: column;
+  grid-auto-columns: minmax(286px, 1fr);
+  gap: 14px;
+  min-width: 100%;
+  padding: 2px 28px 30px;
+  overflow: auto;
+  overscroll-behavior: contain;
+}
+.board:focus-visible { outline-offset: -2px; }
+.column {
+  min-height: 100%;
+  padding: 10px;
+  border: 1px solid var(--line);
+  border-radius: 11px;
+  background: #eef1f4;
+}
+.column-header {
+  position: sticky;
+  top: 0;
+  z-index: 1;
+  background: #eef1f4;
+  display: flex;
+  align-items: center;
+  justify-content: space-between;
+  min-height: 42px;
+  padding: 0 3px 10px;
+}
+.column-title { display: flex; align-items: center; gap: 8px; }
+.status-dot { width: 9px; height: 9px; border-radius: 50%; background: var(--status-color); }
+.column h2 { font-size: 12px; letter-spacing: 0.045em; }
+.count {
+  min-width: 24px;
+  padding: 3px 7px;
+  border: 1px solid #d5dbe3;
+  border-radius: 999px;
+  color: #667085;
+  background: rgba(255,255,255,.72);
+  font-size: 11px;
+  font-weight: 700;
+  text-align: center;
+}
+.card-list { display: grid; gap: 9px; }
+.column-empty { padding: 22px 10px; color: #596579; font-size: 12px; text-align: center; }
+
+.unclassified-panel {
+  flex: 0 0 auto;
+  max-height: min(260px, 38vh);
+  margin: 2px 28px 16px;
+  padding: 12px;
+  border: 1px solid #cfd6df;
+  border-left: 3px solid #667085;
+  border-radius: 11px;
+  background: #eef1f4;
+  overflow: auto;
+}
+.unclassified-header {
+  position: sticky;
+  top: -12px;
+  z-index: 1;
+  display: flex;
+  align-items: flex-start;
+  justify-content: space-between;
+  gap: 16px;
+  margin: -12px -12px 10px;
+  padding: 12px;
+  background: #eef1f4;
+}
+.unclassified-header h2 { font-size: 13px; }
+.unclassified-header p { margin-top: 3px; color: var(--muted); font-size: 11px; }
+.unclassified-list {
+  display: grid;
+  grid-template-columns: repeat(auto-fill, minmax(270px, 1fr));
+  gap: 9px;
+}
+
+.task-card {
+  position: relative;
+  padding: 13px;
+  border: 1px solid #d9dee6;
+  border-left: 3px solid var(--status-color);
+  border-radius: 9px;
+  background: var(--surface);
+  box-shadow: 0 1px 2px rgba(16, 24, 40, .035);
+}
+.task-card.is-pending { background: #f7f9fb; }
+.card-topline { justify-content: space-between; gap: 8px; margin-bottom: 8px; }
+.issue-number { color: #667085; font-family: ui-monospace, SFMono-Regular, Consolas, monospace; font-size: 11px; font-weight: 700; }
+.state-badge { padding: 2px 6px; border-radius: 5px; color: #596579; background: #edf0f3; font-size: 10px; font-weight: 750; letter-spacing: .04em; }
+.state-badge.closed { color: #7a271a; background: #fee4e2; }
+.card-title-button {
+  width: 100%;
+  padding: 0;
+  border: 0;
+  color: var(--ink);
+  background: transparent;
+  font-weight: 680;
+  line-height: 1.42;
+  text-align: left;
+  overflow-wrap: anywhere;
+}
+.card-title-button:hover { color: var(--accent-strong); text-decoration: underline; text-underline-offset: 2px; }
+.assignee { margin-top: 9px; color: #657086; font-size: 12px; overflow-wrap: anywhere; }
+.label-list { flex-wrap: wrap; gap: 5px; margin-top: 10px; }
+.label-chip { max-width: 100%; padding: 3px 7px; border-radius: 999px; color: #4d5a70; background: #edf1f5; font-size: 10px; font-weight: 650; overflow: hidden; text-overflow: ellipsis; white-space: nowrap; }
+.card-footer { align-items: flex-end; justify-content: space-between; gap: 8px; margin-top: 12px; }
+.card-footer label { flex: 1; color: var(--muted); font-size: 10px; font-weight: 700; text-transform: uppercase; }
+.card-footer select { width: 100%; min-height: 32px; margin-top: 4px; padding: 0 28px 0 8px; border: 1px solid #d1d7e0; border-radius: 7px; color: #344054; background: #fff; font-size: 11px; font-weight: 650; }
+.github-link { padding: 7px 2px; color: #4f5c71; font-size: 11px; font-weight: 650; text-decoration: none; }
+.github-link:hover { color: var(--accent-strong); text-decoration: underline; }
+
+[hidden] { display: none !important; }
+
+dialog {
+  padding: 0;
+  border: 0;
+  color: var(--ink);
+  background: var(--surface);
+  box-shadow: var(--shadow);
+}
+dialog::backdrop { background: rgba(18, 27, 43, .38); }
+.modal { width: min(560px, calc(100vw - 32px)); border-radius: 13px; }
+.modal form { margin: 0; }
+.dialog-header { display: flex; align-items: flex-start; justify-content: space-between; gap: 20px; padding: 20px 22px; border-bottom: 1px solid var(--line); }
+.form-body { display: grid; padding: 20px 22px; }
+.form-body label { margin: 14px 0 7px; color: #344054; font-size: 12px; font-weight: 700; }
+.form-body label:first-child { margin-top: 0; }
+.form-body label span { color: var(--muted); font-weight: 500; }
+.form-body input, .form-body textarea, .form-body select {
+  width: 100%;
+  border: 1px solid #cfd6df;
+  border-radius: 8px;
+  color: var(--ink);
+  background: #fff;
+}
+.form-body input, .form-body select { min-height: 42px; padding: 0 11px; }
+.form-body textarea { padding: 10px 11px; resize: vertical; line-height: 1.45; }
+.form-note { margin-top: 9px; color: var(--muted); font-size: 11px; }
+.inline-error { margin-top: 12px; padding: 10px; border-radius: 7px; background: var(--danger-bg); font-size: 12px; }
+.dialog-footer { display: flex; justify-content: flex-end; gap: 9px; padding: 15px 22px; border-top: 1px solid var(--line); background: var(--surface-subtle); }
+
+.drawer {
+  position: fixed;
+  inset: 0 0 0 auto;
+  z-index: 10;
+  border-left: 1px solid var(--line);
+  width: min(520px, 100vw);
+  max-width: none;
+  height: 100vh;
+  max-height: none;
+  margin: 0 0 0 auto;
+  overflow-y: auto;
+}
+.drawer article { min-height: 100%; }
+.detail-header { position: sticky; top: 0; z-index: 1; background: #fff; }
+.detail-header h2 { max-width: 410px; overflow-wrap: anywhere; }
+.detail-content { display: grid; gap: 22px; padding: 22px; }
+.detail-section h3 { margin-bottom: 8px; color: #667085; font-size: 11px; letter-spacing: .07em; text-transform: uppercase; }
+.detail-body { max-height: 42vh; overflow: auto; padding: 13px; border: 1px solid var(--line); border-radius: 8px; background: var(--surface-subtle); color: #344054; font-family: inherit; font-size: 13px; line-height: 1.55; overflow-wrap: anywhere; white-space: pre-wrap; }
+.detail-row { justify-content: space-between; gap: 18px; padding: 9px 0; border-bottom: 1px solid #edf0f3; font-size: 13px; }
+.detail-row span:first-child { color: var(--muted); }
+.detail-row strong { text-align: right; overflow-wrap: anywhere; }
+.detail-status label { display: block; margin-bottom: 7px; color: var(--muted); font-size: 11px; font-weight: 700; text-transform: uppercase; }
+.detail-status select { width: 100%; min-height: 42px; padding: 0 10px; border: 1px solid #cfd6df; border-radius: 8px; background: #fff; }
+.detail-link { width: 100%; }
+
+.toast {
+  position: fixed;
+  right: 20px;
+  bottom: 20px;
+  z-index: 20;
+  max-width: min(520px, calc(100vw - 40px));
+  align-items: flex-start;
+  gap: 14px;
+  padding: 14px 14px 14px 16px;
+  border-radius: 10px;
+  color: #fff;
+  background: #712018;
+  box-shadow: var(--shadow);
+}
+.toast > div { flex: 1; }
+.toast p { margin-top: 3px; color: #fddbd8; font-size: 12px; line-height: 1.4; }
+.toast .icon-button { color: #fff; }
+.toast .icon-button:hover { background: rgba(255,255,255,.1); }
+.toast.success { background: #067647; }
+.toast.success p { color: #d1fadf; }
+
+@media (max-width: 720px) {
+  .app-header, .toolbar, .board-meta { padding-left: 16px; padding-right: 16px; }
+  .app-header { align-items: flex-start; }
+  .repo-block { align-items: flex-start; }
+  .toolbar { align-items: stretch; flex-direction: column; }
+  .search-field { width: 100%; }
+  .toolbar-actions { flex-wrap: wrap; justify-content: flex-end; }
+  .state-filter { margin-right: auto; }
+  .board-meta { align-items: flex-start; flex-direction: column; gap: 4px; }
+  .board { grid-auto-columns: minmax(274px, 84vw); padding-left: 16px; padding-right: 16px; }
+  .unclassified-panel { margin-left: 16px; margin-right: 16px; }
+  .unclassified-list { grid-template-columns: minmax(0, 1fr); }
+  .state-panel { margin-left: 16px; margin-right: 16px; }
+}
+
+@media (prefers-reduced-motion: reduce) {
+  *, *::before, *::after { scroll-behavior: auto !important; }
+}

package/package.json

@@ -0,0 +1,49 @@
+{
+  "name": "gitasks",
+  "version": "0.3.0",
+  "description": "A lightweight local task protocol for humans and coding agents, powered entirely by GitHub Issues.",
+  "type": "module",
+  "bin": {
+    "gitasks": "./dist/cli.js"
+  },
+  "engines": {
+    "node": ">=20"
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE"
+  ],
+  "scripts": {
+    "build": "tsup src/cli.ts --format esm --platform node --target node20 --clean --minify --no-sourcemap && tsup src/ui/client/app.ts --format iife --platform browser --target es2020 --out-dir dist/ui --minify --no-sourcemap --global-name GitasksUi && node scripts/copy-ui-assets.mjs",
+    "dev": "tsx src/cli.ts",
+    "test": "tsx --test test/index.test.ts test/ui.test.ts",
+    "typecheck": "tsc --noEmit",
+    "prepack": "npm run build",
+    "prepublishOnly": "npm run typecheck && npm test"
+  },
+  "keywords": [
+    "github-issues",
+    "task-management",
+    "cli",
+    "coding-agents"
+  ],
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/bilalnrts/gitasks.git"
+  },
+  "bugs": {
+    "url": "https://github.com/bilalnrts/gitasks/issues"
+  },
+  "homepage": "https://github.com/bilalnrts/gitasks#readme",
+  "dependencies": {
+    "commander": "^14.0.1"
+  },
+  "devDependencies": {
+    "@types/node": "^24.3.0",
+    "tsup": "^8.5.0",
+    "tsx": "^4.20.5",
+    "typescript": "^5.9.2"
+  }
+}