openfox 2.0.113 → 2.0.115

package/dist/{chunk-5VYSKVZT.js → chunk-JFK4GKQD.js}

@@ -4,7 +4,7 @@ import {
   getEnabledSkillMetadata,
   isSkillEnabled,
   loadAllSkills
-} from "./chunk-FF2EKUQO.js";
+} from "./chunk-2FCLCUVR.js";
 import {
   TurnMetrics,
   consumeStreamGenerator,
@@ -14,15 +14,15 @@ import {
   createToolCallEvent,
   createToolResultEvent,
   streamLLMPure
-} from "./chunk-JR54MDZI.js";
+} from "./chunk-YX3OQBNX.js";
 import {
   COMPACTION_PROMPT,
   buildBasePrompt,
   computeEffectiveTools
-} from "./chunk-HKD4IMOE.js";
+} from "./chunk-27NABDXB.js";
 import {
   startInspectProxy
-} from "./chunk-R2MTWC7C.js";
+} from "./chunk-M6X6AIEG.js";
 import {
   checkAborted,
   createProcess,
@@ -36,7 +36,7 @@ import {
   spawnShellProcess,
   startProcessCommand,
   stopProcess
-} from "./chunk-EC5T5A6O.js";
+} from "./chunk-ZTOG6LJD.js";
 import {
   getMaxPerSession,
   getSessionProcessCount,
@@ -52,36 +52,41 @@ import {
   getGitBranch,
   isGitRepository,
   listWorkspaces
-} from "./chunk-VGRVPYZ5.js";
+} from "./chunk-O6DU226D.js";
+import {
+  getGateConfig,
+  isTaskConflictError,
+  isTaskGateError
+} from "./chunk-6RGACY4E.js";
 import {
   getSessionDisabledServers
-} from "./chunk-SNLLOXCM.js";
+} from "./chunk-OCSTEGK7.js";
 import {
   PathAccessDeniedError,
   extractAbsolutePathsFromCommand,
   extractSensitivePathsFromCommand,
   registerPathConfirmation,
   requestPathAccess
-} from "./chunk-6UPBZ2ZR.js";
+} from "./chunk-6KPJLELC.js";
 import {
   getCurrentContextWindowId,
   getCurrentWindowMessageOptions,
   getEventStore
-} from "./chunk-CP44U7BT.js";
+} from "./chunk-ERNWAKUB.js";
 import {
   createChatDoneMessage,
   createChatMessageMessage,
   createChatMessageUpdatedMessage,
   createChatPathConfirmationMessage,
   createQueueStateMessage
-} from "./chunk-4NMGX5F2.js";
+} from "./chunk-I7FY2LTR.js";
 import {
   AskUserInterrupt,
   askUserTool
 } from "./chunk-JURM3RPZ.js";
 import {
   resolveLLMClientForAgent
-} from "./chunk-Y64PEWKP.js";
+} from "./chunk-JLAR2CMV.js";
 import {
   buildContextMessagesFromEventHistory,
   foldContextState,
@@ -91,13 +96,13 @@ import {
   handleToolResult,
   reorderToolMessages,
   stripOrphanedToolCalls
-} from "./chunk-YB6WYVNY.js";
+} from "./chunk-3KBRMBTP.js";
 import {
   findAgentById,
   getRuntimeConfig,
   getSubAgents,
   loadAllAgentsDefault
-} from "./chunk-BYSUSSSC.js";
+} from "./chunk-LNNBLB6G.js";
 import {
   modelSupportsVision
 } from "./chunk-V4IE7HJY.js";
@@ -111,11 +116,11 @@ import {
   formatPdfErrorMessage,
   isPdfBuffer,
   processPdfContent
-} from "./chunk-L737Y63F.js";
+} from "./chunk-TOKQ2UVG.js";
 import {
   SETTINGS_KEYS,
   getSetting
-} from "./chunk-WWTYWLDM.js";
+} from "./chunk-HD6Y77RO.js";
 import {
   logger
 } from "./chunk-K44MW7JJ.js";
@@ -129,7 +134,7 @@ import {
 
 // src/server/tools/read.ts
 import { readFile as readFile2, stat, readdir } from "fs/promises";
-import { extname, join } from "path";
+import { extname, join, relative as relative2 } from "path";
 
 // src/server/tools/tool-helpers.ts
 import { randomUUID } from "crypto";
@@ -139,7 +144,7 @@ async function requestUserConfirmation(context, toolLabel, desc) {
   if (context.dangerLevel === "dangerous") return Promise.resolve(true);
   if (toolLabel === "workspace" || toolLabel === "command") {
     try {
-      const { getSetting: getSetting2, SETTINGS_KEYS: SETTINGS_KEYS2 } = await import("./settings-BNRNX6IW.js");
+      const { getSetting: getSetting2, SETTINGS_KEYS: SETTINGS_KEYS2 } = await import("./settings-2AHDKCD7.js");
       if (getSetting2(SETTINGS_KEYS2.CONFIRM_ON_WORKSPACE_ACTIONS) !== "true") {
         return Promise.resolve(true);
       }
@@ -268,7 +273,7 @@ function createTool(name, definition, handler2) {
 // src/server/tools/file-tracker.ts
 import { createHash } from "crypto";
 import { readFile } from "fs/promises";
-import { resolve as resolve2 } from "path";
+import { relative, resolve as resolve2 } from "path";
 var FileNotReadError = class extends Error {
   constructor(path) {
     super(`File "${path}" must be read before writing. Use read_file first.`);
@@ -296,26 +301,35 @@ async function computeFileHash(filePath) {
     throw error;
   }
 }
-async function validateFileForWrite(filePath, readFiles) {
+async function validateFileForWrite(filePath, readFiles, baseDir) {
   const normalizedPath = resolve2(filePath);
   const currentHash = await computeFileHash(normalizedPath);
   if (currentHash === null) {
     return { valid: true };
   }
   const readEntry = readFiles[normalizedPath];
-  if (!readEntry) {
-    return {
-      valid: false,
-      error: new FileNotReadError(filePath)
-    };
+  if (readEntry) {
+    if (readEntry.hash !== currentHash) {
+      return {
+        valid: false,
+        error: new FileChangedExternallyError(filePath)
+      };
+    }
+    return { valid: true };
   }
-  if (readEntry.hash !== currentHash) {
-    return {
-      valid: false,
-      error: new FileChangedExternallyError(filePath)
-    };
+  if (baseDir) {
+    const relPath = relative(baseDir, normalizedPath);
+    if (!relPath.startsWith("..")) {
+      const relMatches = Object.values(readFiles).filter((entry) => entry.relPath === relPath);
+      if (relMatches.some((entry) => entry.hash === currentHash)) {
+        return { valid: true };
+      }
+    }
   }
-  return { valid: true };
+  return {
+    valid: false,
+    error: new FileNotReadError(filePath)
+  };
 }
 function isNodeError(error) {
   return error instanceof Error && "code" in error;
@@ -604,7 +618,12 @@ var readFileTool = createTool(
       const dataUrl = `data:${mimeType};base64,${base64Data}`;
       const contentHash3 = await computeFileHash(fullPath);
       if (contentHash3) {
-        context.sessionManager.recordFileRead(context.sessionId, fullPath, contentHash3);
+        context.sessionManager.recordFileRead(
+          context.sessionId,
+          fullPath,
+          contentHash3,
+          relative2(context.workdir, fullPath)
+        );
       }
       return helpers.success(`[Image: ${args.path} (${mimeType}, ${rawBuffer.length} bytes)]`, false, {
         metadata: {
@@ -622,7 +641,12 @@ var readFileTool = createTool(
         const { output: output2, truncated: truncated2, isScanned } = processPdfContent(text, OUTPUT_LIMITS.read_file.maxBytes);
         const contentHash3 = await computeFileHash(fullPath);
         if (contentHash3) {
-          context.sessionManager.recordFileRead(context.sessionId, fullPath, contentHash3);
+          context.sessionManager.recordFileRead(
+            context.sessionId,
+            fullPath,
+            contentHash3,
+            relative2(context.workdir, fullPath)
+          );
         }
         if (isScanned) {
           return helpers.success(
@@ -673,7 +697,12 @@ var readFileTool = createTool(
     }
     const contentHash2 = await computeFileHash(fullPath);
     if (contentHash2) {
-      context.sessionManager.recordFileRead(context.sessionId, fullPath, contentHash2);
+      context.sessionManager.recordFileRead(
+        context.sessionId,
+        fullPath,
+        contentHash2,
+        relative2(context.workdir, fullPath)
+      );
     }
     return helpers.success(output, truncated, {
       metadata: {
@@ -690,7 +719,7 @@ var readFileTool = createTool(
 
 // src/server/tools/write.ts
 import { writeFile, mkdir } from "fs/promises";
-import { dirname } from "path";
+import { dirname, relative as relative3 } from "path";
 
 // src/server/tools/diagnostics.ts
 function formatDiagnosticsForLLM(diagnostics) {
@@ -757,7 +786,7 @@ var writeFileTool = createTool(
     const fullPath = helpers.resolvePath(args.path);
     await helpers.checkPathAccess([fullPath]);
     const readFiles = context.sessionManager.getReadFiles(context.sessionId);
-    const validation = await validateFileForWrite(fullPath, readFiles);
+    const validation = await validateFileForWrite(fullPath, readFiles, context.workdir);
     if (!validation.valid) {
       return helpers.error(validation.error?.message ?? "File validation failed");
     }
@@ -777,7 +806,7 @@ var writeFileTool = createTool(
     }
     const newHash = await computeFileHash(fullPath);
     if (newHash) {
-      context.sessionManager.updateFileHash(context.sessionId, fullPath, newHash);
+      context.sessionManager.updateFileHash(context.sessionId, fullPath, newHash, relative3(context.workdir, fullPath));
     }
     return helpers.success(output, false, {
       ...diagnostics.length > 0 && { diagnostics },
@@ -788,6 +817,7 @@ var writeFileTool = createTool(
 
 // src/server/tools/edit.ts
 import { readFile as readFile3, writeFile as writeFile2 } from "fs/promises";
+import { relative as relative4 } from "path";
 
 // src/server/tools/edit-context.ts
 var CONTEXT_LINES = 4;
@@ -953,7 +983,7 @@ var editFileTool = createTool(
     return withFileLock(fullPath, async () => {
       const replaceAll = args.replace_all ?? false;
       const readFiles = context.sessionManager.getReadFiles(context.sessionId);
-      const validation = await validateFileForWrite(fullPath, readFiles);
+      const validation = await validateFileForWrite(fullPath, readFiles, context.workdir);
       if (!validation.valid) {
         return helpers.error(validation.error?.message ?? "File validation failed");
       }
@@ -1037,7 +1067,7 @@ Make sure whitespace and indentation match exactly.`
       }
       const newHash = await computeFileHash(fullPath);
       if (newHash) {
-        context.sessionManager.updateFileHash(context.sessionId, fullPath, newHash);
+        context.sessionManager.updateFileHash(context.sessionId, fullPath, newHash, relative4(context.workdir, fullPath));
       }
       return helpers.success(output, false, {
         ...diagnostics.length > 0 && { diagnostics },
@@ -1517,10 +1547,10 @@ var INTERRUPTED_ERROR = "Tool execution was interrupted by user";
 function extractSubAgentPrompt(args) {
   return args["prompt"] || args["query"] || args["task"] || "";
 }
-async function transformSubAgentAliases(toolCalls, toolRegistry) {
+async function transformSubAgentAliases(toolCalls, toolRegistry, projectDir) {
   const hasCallSubAgent = toolRegistry.tools.some((t) => t.name === "call_sub_agent");
   if (!hasCallSubAgent) return;
-  const agents = await loadAllAgentsDefault();
+  const agents = await loadAllAgentsDefault(projectDir);
   for (const tc of toolCalls) {
     const agentDef = findAgentById(tc.name, agents);
     if (!agentDef?.metadata.subagent) continue;
@@ -1545,7 +1575,7 @@ async function executeTools(assistantMsgId, toolCalls, ctx, append) {
   if (ctx.signal?.aborted) {
     throw new Error("Aborted");
   }
-  await transformSubAgentAliases(toolCalls, ctx.toolRegistry);
+  await transformSubAgentAliases(toolCalls, ctx.toolRegistry, ctx.sessionManager.getProjectWorkdir(ctx.sessionId));
   for (const toolCall of toolCalls) {
     append(createToolCallEvent(assistantMsgId, toolCall));
   }
@@ -1779,7 +1809,7 @@ async function runTopLevelAgentLoop(config, turnMetrics) {
       const session2 = sessionManager.requireSession(sessionId);
       const runtimeConfig2 = getRuntimeConfig();
       const configDir2 = getGlobalConfigDir(runtimeConfig2.mode ?? "production");
-      const skills2 = await getEnabledSkillMetadata(configDir2, sessionManager.getEffectiveWorkdir(sessionId));
+      const skills2 = await getEnabledSkillMetadata(configDir2, sessionManager.getProjectWorkdir(sessionId));
       const { content: instructionContent2 } = await getAllInstructions(session2.workdir, session2.projectId);
       const toolRegistry2 = config.getToolRegistry();
       const assembledRequest2 = await config.assembleRequest({
@@ -1834,7 +1864,7 @@ ${CONTINUE_PROMPT}` : CONTINUE_PROMPT;
     }
     const runtimeConfig = getRuntimeConfig();
     const configDir = getGlobalConfigDir(runtimeConfig.mode ?? "production");
-    const skills = await getEnabledSkillMetadata(configDir, sessionManager.getEffectiveWorkdir(sessionId));
+    const skills = await getEnabledSkillMetadata(configDir, sessionManager.getProjectWorkdir(sessionId));
     if (signal?.aborted) throw new Error("Aborted");
     const assembledRequest = await config.assembleRequest({
       workdir: session.workdir,
@@ -1861,7 +1891,7 @@ ${CONTINUE_PROMPT}` : CONTINUE_PROMPT;
       const requestedMaxTokens = modelSettings.maxTokens ?? 16384;
       modelSettings = { ...modelSettings, maxTokens: Math.min(requestedMaxTokens, availableForOutput) };
     }
-    const allAgents = await loadAllAgentsDefault();
+    const allAgents = await loadAllAgentsDefault(sessionManager.getProjectWorkdir(sessionId));
     const subAgentAliases = new Set(getSubAgents(allAgents).map((a) => a.metadata.id));
     const streamGen = streamLLMPure({
       messageId: assistantMsgId,
@@ -1935,7 +1965,7 @@ ${CONTINUE_PROMPT}` : CONTINUE_PROMPT;
     );
     if (!compacting) {
       const contextState2 = sessionManager.getContextState(sessionId);
-      const { shouldCompact, appendCompactionPrompt } = await import("./compactor-ZBNKANHV.js");
+      const { shouldCompact, appendCompactionPrompt } = await import("./compactor-SKVC2VNL.js");
       if (shouldCompact(
         contextState2.currentTokens,
         contextState2.maxTokens,
@@ -2653,8 +2683,8 @@ function buildSubAgentResult(returnValueContent, returnValueResult) {
     ...returnValueResult !== null && returnValueResult !== void 0 ? { result: returnValueResult } : {}
   };
 }
-async function resolveAgentDef(agentId) {
-  const allAgents = await loadAllAgentsDefault();
+async function resolveAgentDef(agentId, projectDir) {
+  const allAgents = await loadAllAgentsDefault(projectDir);
   const def = findAgentById(agentId, allAgents);
   if (!def) throw new Error(`Unknown sub-agent type: ${agentId}`);
   if (!def.metadata.subagent) throw new Error(`Agent '${agentId}' is not a sub-agent`);
@@ -2705,7 +2735,7 @@ async function executeSubAgent(options) {
     signal,
     onMessage
   } = options;
-  const agentDef = await resolveAgentDef(subAgentType);
+  const agentDef = await resolveAgentDef(subAgentType, sessionManager.getProjectWorkdir(sessionId));
   const eventStore = getEventStore();
   const subAgentId = crypto.randomUUID();
   const session = sessionManager.requireSession(sessionId);
@@ -2809,7 +2839,7 @@ async function executeSubAgent(options) {
   const { content: instructionContent } = await getAllInstructions(effectiveWorkdir, session.projectId);
   const config = getRuntimeConfig();
   const configDir = getGlobalConfigDir(config.mode ?? "production");
-  const skills = await getEnabledSkillMetadata(configDir, effectiveWorkdir);
+  const skills = await getEnabledSkillMetadata(configDir, session.workdir);
   const hasRunCommand = agentDef.metadata.allowedTools?.includes("run_command") ?? false;
   const gitignoreSection = hasRunCommand ? await loadGitIgnoreRules(effectiveWorkdir) : "";
   const systemPrompt = buildBasePrompt(effectiveWorkdir, void 0, skills.length > 0 ? skills : void 0, llmClient.getModel()) + "\n\n" + agentDef.prompt + (gitignoreSection ? "\n\n" + gitignoreSection : "") + RETURN_VALUE_INSTRUCTION;
@@ -2923,7 +2953,7 @@ var callSubAgentTool = {
       };
     }
     try {
-      const { getToolRegistryForAgent: getToolRegistryForAgent2 } = await import("./tools-2B363F7L.js");
+      const { getToolRegistryForAgent: getToolRegistryForAgent2 } = await import("./tools-QYYNFMGU.js");
       const toolRegistry = getToolRegistryForAgent2(agentDef);
       const turnMetrics = new TurnMetrics();
       const result = await executeSubAgent({
@@ -2979,7 +3009,7 @@ var handler = async (args, context, helpers) => {
   }
   const config = getRuntimeConfig();
   const configDir = getGlobalConfigDir(config.mode ?? "production");
-  const allSkills = await loadAllSkills(configDir, context.workdir);
+  const allSkills = await loadAllSkills(configDir, context.sessionManager.getProjectWorkdir(context.sessionId));
   const skill = findSkillById(skillId, allSkills);
   if (!skill) {
     const available = allSkills.map((s) => s.metadata.id).join(", ");
@@ -3945,7 +3975,7 @@ var mcpConfigTool = createTool(
       mcpNotifyChanged?.(sessionId);
     }
     async function rebuildTools() {
-      const { setMcpTools: setMcpTools2 } = await import("./tools-2B363F7L.js");
+      const { setMcpTools: setMcpTools2 } = await import("./tools-QYYNFMGU.js");
       const mcpTools = createMcpTools(mcpManagerForTools);
       setMcpTools2(mcpTools);
     }
@@ -4359,6 +4389,241 @@ Actions:
   }
 );
 
+// src/server/tools/project-tasks.ts
+var tasksService = null;
+function setTasksService(service) {
+  tasksService = service;
+}
+function getTasksService() {
+  if (!tasksService) {
+    throw new Error("Project tasks service not initialized");
+  }
+  return tasksService;
+}
+var VALID_ACTIONS = [
+  "list",
+  "get",
+  "create",
+  "edit",
+  "move",
+  "set_gate_value",
+  "set_gates",
+  "duplicate",
+  "delete",
+  "reorder"
+];
+var projectTasksTool = createTool(
+  "project_tasks",
+  {
+    type: "function",
+    function: {
+      name: "project_tasks",
+      description: "Work with the project task board \u2014 the kanban of tasks owned by this project. Provides full parity with the human UI: list, get, create, edit, move, fill gate values, set gate configuration, duplicate, delete, and reorder.\n\nRules:\n- Moving a task to in_progress binds it to YOUR current session (you never create a new session for it).\n- Entering 'done' is blocked by unmet column gates (definition of done). When blocked, the error lists the missing fields; set them with action=set_gate_value (filling proof/evidence as part of your work), then retry the move.\n- All transitions are serialized server-side. If another actor changed the task, you get a CONFLICT error: re-list and retry.\n\nActions:\n- list: list all tasks (with gate values, status, queue position, bound session, audit trail)\n- get: fetch a single task (taskId)\n- create: create a task in To Do (prompt must contain text or an attachment)\n- edit: update prompt/attachments/agent/model (taskId + any fields)\n- move: change state \u2014 to: 'todo' | 'in_progress' | 'done' (optional reason for reverts)\n- set_gate_value: fill a gate field (taskId, gateId, value)\n- set_gates: replace the project gate configuration (gates: array of {id, name, description, required, variant})\n- duplicate: copy a task into To Do (taskId)\n- delete: permanently delete a task (taskId). Sessions stay untouched.\n- reorder: move a task to an index within its column (taskId, status, index)",
+      parameters: {
+        type: "object",
+        properties: {
+          action: { type: "string", enum: VALID_ACTIONS, description: "The action to perform" },
+          taskId: {
+            type: "string",
+            description: "Target task id (get, edit, move, set_gate_value, duplicate, delete, reorder)"
+          },
+          prompt: { type: "string", description: "The prompt/instruction executed when the task launches" },
+          attachments: { type: "array", description: "Optional attachments (same shape as chat attachments)" },
+          agentId: { type: "string", description: "Selected agent id" },
+          providerId: { type: "string", description: "Provider id used when a session is spawned" },
+          model: { type: "string", description: "Model label used when a session is spawned" },
+          to: { type: "string", enum: ["todo", "in_progress", "done"], description: "Destination column for move" },
+          reason: { type: "string", description: "Optional short reason (recorded in the audit trail) for reverts" },
+          gateId: { type: "string", description: "Gate field id for set_gate_value" },
+          value: { type: "string", description: "Proof/evidence value for set_gate_value" },
+          gates: {
+            type: "array",
+            description: "Full replacement gate config: [{id, name, description, required, variant}]"
+          },
+          status: { type: "string", enum: ["todo", "in_progress", "done"], description: "Column for reorder" },
+          index: { type: "number", description: "Zero-based target index within the column (reorder)" },
+          expectedVersion: {
+            type: "number",
+            description: "Optimistic concurrency guard \u2014 pass the task version you saw; stale writes fail with CONFLICT"
+          }
+        },
+        required: ["action"]
+      }
+    }
+  },
+  async (args, context, helpers) => {
+    const action = args.action;
+    const permError = validateActionWithPermission(action, VALID_ACTIONS, "project_tasks", context.permittedActions);
+    if (permError) return permError;
+    const session = context.sessionManager.getSession(context.sessionId);
+    if (!session) return helpers.error("Session not found");
+    const projectId = session.projectId;
+    const svc = getTasksService();
+    const actor = { actor: "agent", actorName: "agent" };
+    try {
+      switch (action) {
+        case "list": {
+          const tasks = svc.list(projectId);
+          const gates = getGateConfig(projectId);
+          return helpers.success(JSON.stringify({ gates, tasks: tasks.map((t) => taskForAgent(t)) }, null, 2));
+        }
+        case "get": {
+          if (!args.taskId) return helpers.error('Parameter "taskId" is required for action=get');
+          const task = svc.get(projectId, args.taskId);
+          if (!task) return helpers.error(`Task not found: ${args.taskId}`);
+          return helpers.success(JSON.stringify(taskForAgent(task), null, 2));
+        }
+        case "create": {
+          const task = svc.create(
+            projectId,
+            {
+              prompt: args.prompt ?? "",
+              ...args.attachments ? { attachments: sanitizeAttachments(args.attachments) } : {},
+              ...args.agentId ? { agentId: args.agentId } : {},
+              ...args.providerId ? { providerId: args.providerId } : {},
+              ...args.model ? { model: args.model } : {}
+            },
+            actor
+          );
+          return helpers.success(JSON.stringify(taskForAgent(task), null, 2));
+        }
+        case "edit": {
+          if (!args.taskId) return helpers.error('Parameter "taskId" is required for action=edit');
+          const result = await svc.update(
+            projectId,
+            args.taskId,
+            {
+              ...args.prompt !== void 0 ? { prompt: args.prompt } : {},
+              ...args.attachments ? { attachments: sanitizeAttachments(args.attachments) } : {},
+              ...args.agentId !== void 0 ? { agentId: args.agentId } : {},
+              ...args.providerId !== void 0 ? { providerId: args.providerId } : {},
+              ...args.model !== void 0 ? { model: args.model } : {}
+            },
+            actor,
+            args.expectedVersion
+          );
+          return helpers.success(JSON.stringify(taskForAgent(result.task), null, 2));
+        }
+        case "move": {
+          if (!args.taskId) return helpers.error('Parameter "taskId" is required for action=move');
+          if (!args.to)
+            return helpers.error('Parameter "to" is required for action=move ("todo" | "in_progress" | "done")');
+          const result = await svc.move(projectId, args.taskId, args.to, {
+            actor: "agent",
+            actorName: "agent",
+            sessionId: context.sessionId,
+            ...args.reason ? { reason: args.reason } : {},
+            ...args.expectedVersion ? { expectedVersion: args.expectedVersion } : {}
+          });
+          return helpers.success(JSON.stringify(taskForAgent(result.task), null, 2));
+        }
+        case "set_gate_value": {
+          if (!args.taskId) return helpers.error('Parameter "taskId" is required for action=set_gate_value');
+          if (!args.gateId) return helpers.error('Parameter "gateId" is required for action=set_gate_value');
+          if (args.value === void 0) return helpers.error('Parameter "value" is required for action=set_gate_value');
+          const result = await svc.setGateValue(
+            projectId,
+            args.taskId,
+            args.gateId,
+            args.value,
+            actor,
+            context.sessionId,
+            args.expectedVersion
+          );
+          return helpers.success(JSON.stringify(taskForAgent(result.task), null, 2));
+        }
+        case "set_gates": {
+          if (!Array.isArray(args.gates)) {
+            return helpers.error('Parameter "gates" (array) is required for action=set_gates');
+          }
+          const gates = sanitizeGates(args.gates);
+          svc.setGateConfig(projectId, gates, actor);
+          return helpers.success(JSON.stringify({ gates }, null, 2));
+        }
+        case "duplicate": {
+          if (!args.taskId) return helpers.error('Parameter "taskId" is required for action=duplicate');
+          const task = svc.duplicate(projectId, args.taskId, actor);
+          return helpers.success(JSON.stringify(taskForAgent(task), null, 2));
+        }
+        case "delete": {
+          if (!args.taskId) return helpers.error('Parameter "taskId" is required for action=delete');
+          const task = svc.get(projectId, args.taskId);
+          if (!task) return helpers.error(`Task not found: ${args.taskId}`);
+          await svc.remove(projectId, args.taskId, actor);
+          return helpers.success(
+            JSON.stringify(
+              { message: `Deleted: ${task.prompt.split("\n")[0]}`, taskId: task.id, prompt: task.prompt },
+              null,
+              2
+            )
+          );
+        }
+        case "reorder": {
+          if (!args.taskId) return helpers.error('Parameter "taskId" is required for action=reorder');
+          if (!args.status || args.index === void 0) {
+            return helpers.error('Parameters "status" and "index" are required for action=reorder');
+          }
+          const task = svc.reorder(projectId, args.taskId, args.status, args.index);
+          return helpers.success(JSON.stringify(taskForAgent(task), null, 2));
+        }
+        default:
+          return helpers.error(`Unknown action: ${String(action)}`);
+      }
+    } catch (error) {
+      if (isTaskGateError(error)) {
+        const missing = error.missing.map((m) => `'${m.name}' (${m.gateId}): ${m.description}`).join("; ");
+        return helpers.error(
+          `Move blocked by column gates. Missing required gate fields: ${missing}. Fill them with action=set_gate_value (taskId, gateId, value=<acceptable proof>) and then call move again. You set these values as part of your work \u2014 this is the intended loop, not a dead end.`
+        );
+      }
+      if (isTaskConflictError(error)) {
+        return helpers.error(
+          `Task changed, refresh and retry. Another actor modified this task since your last read. Re-list and retry with the latest updatedAt.`
+        );
+      }
+      throw error;
+    }
+  }
+);
+function taskForAgent(task) {
+  return {
+    id: task.id,
+    prompt: task.prompt,
+    status: task.status,
+    ...task.runState ? { runState: task.runState } : {},
+    ...task.queuePosition ? { queuePosition: task.queuePosition } : {},
+    ...task.activeSessionId ? { boundSession: task.activeSessionId } : {},
+    ...task.model ? { model: task.model } : {},
+    version: task.version,
+    attachments: task.attachments.length,
+    gateValues: task.gateValues.map((v) => ({ [v.gateId]: v.value, actor: v.actor, timestamp: v.timestamp })),
+    auditTrail: task.auditTrail.map((a) => ({
+      action: a.action,
+      actor: a.actor,
+      detail: a.detail,
+      timestamp: a.timestamp
+    })),
+    updatedAt: task.updatedAt
+  };
+}
+function sanitizeAttachments(raw) {
+  return raw.filter(
+    (a) => typeof a === "object" && a !== null && typeof a.id === "string" && typeof a.filename === "string"
+  );
+}
+function sanitizeGates(raw) {
+  return raw.map((g, i) => {
+    const gate = g;
+    return {
+      id: typeof gate.id === "string" && gate.id ? gate.id : `gate_${i}`,
+      name: typeof gate.name === "string" && gate.name ? gate.name : `Gate ${i + 1}`,
+      description: typeof gate.description === "string" ? gate.description : "",
+      required: gate.required !== false,
+      variant: gate.variant === "ready" ? "ready" : "done"
+    };
+  });
+}
+
 // src/server/tools/index.ts
 var _builtInTools;
 function getBuiltInTools() {
@@ -4379,7 +4644,8 @@ function getBuiltInTools() {
       stepDoneTool,
       backgroundProcessTool,
       mcpConfigTool,
-      workspaceTool
+      workspaceTool,
+      projectTasksTool
     ];
   }
   return _builtInTools;
@@ -4628,6 +4894,7 @@ export {
   setMcpConfigMode,
   setMcpConfigPath,
   setNotifyMcpServersChanged,
+  setTasksService,
   getBuiltInToolNames,
   parseToolPermissions,
   getToolPermissions,
@@ -4638,4 +4905,4 @@ export {
   getToolRegistryForAgent,
   createToolRegistry
 };
-//# sourceMappingURL=chunk-5VYSKVZT.js.map
+//# sourceMappingURL=chunk-JFK4GKQD.js.map

package/dist/{chunk-43M7QZMX.js → chunk-JGWHRYWG.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-V4IE7HJY.js";
 import {
   getBackendCapabilities
-} from "./chunk-YHEQTVFV.js";
+} from "./chunk-AZHWLLPP.js";
 import {
   ensureVersionPrefix
 } from "./chunk-HNCM3D7Y.js";
@@ -13,11 +13,11 @@ import {
   getThinking,
   mapFinishReason,
   parseToolArguments
-} from "./chunk-L737Y63F.js";
+} from "./chunk-TOKQ2UVG.js";
 import {
   LLMError,
   OpenAIHttpClient
-} from "./chunk-V4664YKR.js";
+} from "./chunk-LTYL6ZGH.js";
 import {
   logger
 } from "./chunk-K44MW7JJ.js";
@@ -310,4 +310,4 @@ function createLLMClient(config, initialBackend = "unknown") {
 export {
   createLLMClient
 };
-//# sourceMappingURL=chunk-43M7QZMX.js.map
+//# sourceMappingURL=chunk-JGWHRYWG.js.map