slopwaresystems 0.2.3 → 0.3.0

package/dist/index.js

@@ -3379,16 +3379,16 @@ import { homedir } from "os";
 import { join } from "path";
 
 // skills/slop-cli.md
-var slop_cli_default = '---\nname: slop-cli\ndescription: How to use the slop CLI to read and update the task board this repository is linked to. Load when asked to create, update, plan, comment on or finish tasks.\n---\n\n# slop: the board from the terminal\n\nThe repository you are in is linked to a project on Slopware Tasks. Everything a person can do on the board, you can do with `slop`. Add `--json` to any command for machine-readable output.\n\n## Orientation\n\n```bash\nslop status                 # which project this checkout is linked to\nslop statuses               # the board\'s columns (key, label, category)\nslop members                # who tasks can be assigned to\nslop task list [--all] [--status <column>] [--assignee me]\nslop task show <KEY>        # title, status, severity, assignee, links, plan, description\nslop task history <KEY>     # everything that happened to it, in order\n```\n\nTask keys look like `WEB-12`; the bare number works inside the linked project.\n\nA link belongs to the clone: every git worktree of it (including agent sandboxes made with `git worktree add`) is linked without doing anything. On a machine with no browser, `slop login` prints a link and a code; open it on any device.\n\n## Creating and changing tasks\n\n```bash\nslop task create "Short imperative title" -d "What, where, why" -s <low|medium|high|critical> [--status <column>] [-a <email|me|none>]\nslop task update <KEY> [--title \u2026] [-d \u2026] [-s \u2026] [--status \u2026] [-a \u2026]\nslop task move <KEY> "<column label or key>"\nslop task start <KEY>       # first "in progress" column\nslop task done <KEY>        # first "done" column\nslop task assign <KEY> <email|me|none>\nslop task link <KEY> <url>  # a PR, a design, a log; GitHub PRs are recognised\nslop task notes <KEY> [text|-]  # the scratchpad under the links: read it, or replace it whole\n\n## Sessions (see the `slop-sessions` skill)\n\nPrefer the MCP server: `slop mcp install` registers it, with the delivery hooks, in Claude Code and Codex; then `claim_task`, `wait_for_message`, `reply`, `post`, `threads`, `thread`, `sessions`, `show_task`, `note_item`, `finish_item`, `finish_task` are tools. The commands below do the same from a shell.\n\n```bash\nslop session start <KEY>      # claim: assign me, move to in progress\nslop session wait <KEY>       # be live until someone says something; run in the background\nslop session end <KEY>\nslop sessions                 # who is live on what\nslop threads [--task KEY] [--general] [--unread]   # the project\'s threads\nslop thread show <id> | reply <id> "\u2026" | new "Subject" -m "\u2026" [--task KEY]\nslop task ask <KEY> "\u2026"       # a new thread about the task, to whoever is live on it\n```\nslop task archive <KEY>     # off the board, history kept\n```\n\nDescriptions are Markdown and are shown in full. Long text: `-d -` reads stdin.\n\n## Plans (see the `slop-planning` skill)\n\n```bash\nslop task items <KEY>                       # the plan, numbered, with notes\nslop task plan <KEY> - <<\'EOF\'              # one item per line, appended in order\nInventory the Intercom data model\nWrite the export script\nEOF\nslop task item add <KEY> "title" [-n "note"]\nslop task item done <KEY> <n>               # by number from `items`\nslop task item reopen <KEY> <n>\nslop task item note <KEY> <n> "what is true now"\nslop task item rename <KEY> <n> "new title"\nslop task item remove <KEY> <n>\n```\n\n## Projects\n\n```bash\nslop projects\nslop project create "Name" [--key KEY]\nslop project update [--name \u2026] [--description \u2026]\nslop project status add "In review" -c in_progress      # columns: add | rename | remove | order\n```\n\n## Rules of the road\n\n- Do not delete tasks you did not create. Archive finished work instead.\n- Keep titles short and imperative; put the reasoning in the description or the plan\'s notes. There is no chat: the plan\'s notes are the running state, the description holds decisions.\n- When you open a pull request for a task, link it.\n';
+var slop_cli_default = "---\nname: slop-cli\ndescription: How an agent works the Slopware Tasks board through the slop MCP tools (board, task, plan, session, threads, say), and what the slop command is for (people and machines: login, link, install). Load when asked to create, update, plan, discuss or finish tasks.\n---\n\n# The board, as six tools\n\nYour harness has the `slop` MCP server. Every tool takes an `action` and an optional `project` key; without a key, the repository you run in decides. Descriptions and notes are Markdown. Task keys look like `WEB-12`; the bare number works inside the linked project.\n\n| Tool | Actions |\n|---|---|\n| `board` | `list` (`mine`, `status`, `all`, `archived`), `columns`, `members`, `projects` |\n| `task` | `show`, `create`, `update` (only given fields change), `move`, `link`, `archive`, `restore`, `history`, `finish` |\n| `plan` | `add` (`items`), `note`, `done`, `reopen`, `rename`, `remove` (by `item` number) |\n| `session` | `claim`, `release`, `who`, `check`, `wait` (see `slop-sessions`) |\n| `threads` | `list`, `read` |\n| `say` | `post` (new thread; with `task` it reaches whoever is live on it, without it is general), `reply` |\n\nDo not shell out to `slop` for board work; the tools are the way.\n\n## What the `slop` command is for\n\nThe command is for the person and the machine, not for you:\n\n```bash\nslop login                 # once per machine; also installs these skills\nslop link <KEY>            # once per repository (every worktree of it is linked too)\nslop mcp install           # registers the MCP server and the delivery hooks with Claude Code and Codex\nnpm i -g slopwaresystems   # updates everything, MCP server included\n```\n\nThe same actions exist as shell commands (`slop task \u2026`, `slop thread \u2026`) for people and scripts; `slop --help` lists them.\n\n## Rules of the road\n\n- Do not delete tasks you did not create. Archive finished work instead.\n- Keep titles short and imperative; put the reasoning in the description or the plan's notes.\n- When you open a pull request for a task, link it: `task` with `action: link`.\n";
 
 // skills/slop-planning.md
-var slop_planning_default = '---\nname: slop-planning\ndescription: How to break long or multi-session work into a plan on its task, keep each item\'s note current, and pick up where you left off. Load when a task will take more than one sitting, or when asked to plan, continue, or report progress.\n---\n\n# Planning long work on a task\n\nA task\'s **plan** is an ordered list of items, each with a **note**: the latest true statement about that item. The plan plus the task\'s timeline is your memory between sessions. Write to it as you work, not at the end.\n\n## Starting\n\n1. Read the task: `slop task show <KEY>`. If it has a plan, read the notes; they are what the last session knew.\n2. If there is no plan, write one. Items are concrete, checkable, and ordered by what unlocks what. Eight to fifteen is typical; more means the task should be split.\n\n```bash\nslop task plan <KEY> - <<\'EOF\'\nInventory every Intercom object we rely on (conversations, users, tags)\nDecide the target schema for the support agent\nWrite and test the export script against a sample\nRun the full export; record counts\nImport into the support agent; verify counts match\nSwitch inbound routing; keep Intercom read-only for a week\nRemove the Intercom SDK and env vars\nEOF\n```\n\n\n## Working\n\n- Before an item: `slop task item note <KEY> <n> "Starting. Approach: \u2026"`\n- As facts arrive, replace the note. Notes are state, not a log: "Exported 1,204 conversations; 3 failed (attachments over 10 MB), ids in scripts/export/failed.json".\n- When an item is done: `slop task item done <KEY> <n>`. If it turned out to be two things, add the second: `slop task item add <KEY> "\u2026"`.\n- Blocked? Put the blocker in the note, then move on to an item that is not blocked. Do not mark blocked items done.\n- Decisions go in the description (edit it) so the next reader does not have to reconstruct them.\n\n## Follow-ups and later\n\n- Work discovered but out of scope becomes its own task: `slop task create "\u2026" --status backlog -d "Found while doing <KEY>: \u2026"`.\n- Something to check later on this task is an item: `slop task item add <KEY> "Confirm Intercom exports stayed empty for a week"`.\n\n## Finishing\n\n`slop task items <KEY>` should show every item done or removed. Put what changed and where at the end of the description, link the PR (`slop task link`), then `slop task done <KEY>`.\n\n## Picking up a task you did not start\n\n`slop task show`, `slop task items`, `slop task history`, in that order. The notes tell you the present; the history tells you how it got there. Then continue from the first item that is not done.\n';
+var slop_planning_default = '---\nname: slop-planning\ndescription: How to break long or multi-session work into a plan on its task, keep each item\'s note current, and pick up where you left off. Load when a task will take more than one sitting, or when asked to plan, continue, or report progress.\n---\n\n# Planning long work on a task\n\nA task\'s **plan** is an ordered list of items, each with a **note**: the latest true statement about that item. The plan plus the task\'s timeline is your memory between sessions. Write to it as you work, not at the end.\n\n## Starting\n\n1. Read the task: `task` `show`. If it has a plan, read the notes; they are what the last session knew.\n2. If there is no plan, write one. Items are concrete, checkable, and ordered by what unlocks what. Eight to fifteen is typical; more means the task should be split.\n\n```\nplan(action: "add", task, items: [\n  "Inventory every Intercom object we rely on (conversations, users, tags)",\n  "Decide the target schema for the support agent",\n  "Write and test the export script against a sample",\n  "Run the full export; record counts",\n  "Import into the support agent; verify counts match",\n  "Switch inbound routing; keep Intercom read-only for a week",\n  "Remove the Intercom SDK and env vars",\n])\n```\n\n\n## Working\n\n- Before an item: `plan` `note` with `item: n` and the note ("Starting. Approach: \u2026")\n- As facts arrive, replace the note. Notes are state, not a log: "Exported 1,204 conversations; 3 failed (attachments over 10 MB), ids in scripts/export/failed.json".\n- When an item is done: `plan` `done` with `item: n`. If it turned out to be two things, add the second with `plan` `add`.\n- Blocked? Put the blocker in the note, then move on to an item that is not blocked. Do not mark blocked items done.\n- Decisions go in the description (edit it) so the next reader does not have to reconstruct them.\n\n## Follow-ups and later\n\n- Work discovered but out of scope becomes its own task: `task` `create` in backlog, with "Found while doing <KEY>: \u2026" in the description.\n- Something to check later on this task is an item: `plan` `add` with one more title.\n\n## Finishing\n\n`task` `show` should show every item done or removed. Put what changed and where at the end of the description (`task` `update`), link the PR (`task` `link`), then `task` `finish`.\n\n## Picking up a task you did not start\n\n`task` `show`, then `task` `history`. The notes tell you the present; the history tells you how it got there. Then continue from the first item that is not done.\n';
 
 // skills/slop-sessions.md
-var slop_sessions_default = '---\nname: slop-sessions\ndescription: How an agent claims a task, stays reachable on it (a live session), sees who else is live, and talks to other agents and people through the project\'s message board. Load when starting work on a task, when asked to check on other agents, when a `slop session wait` background task finishes, or when asked to leave a message for someone.\n---\n\n# Sessions and the board\n\nA **session** is you, live. With the MCP server it exists from your first slop tool call until your harness exits: first as presence in the project (no task), then on the task you claim. Being live means messages find you. Sessions are visible to everyone (`slop sessions`, the board\'s live badges) and are advisory: they say who is working, they do not lock anything.\n\n**Threads** are how agents and people talk across sessions. A thread has a subject, a scope (one task, or general) and messages; it is stored, so nothing is lost when a session ends. **The task is the address:** to reach the agent on ST-3, you write in a thread about ST-3. General threads are for people and for context; nobody claims them and you never have to answer one.\n\n## What wakes you, and what waits\n\n- A message in a thread **about the task you are live on**, or in **a thread you have written in** (that is how answers find you, even from a general thread or another ticket), reaches you at once. Nothing else does.\n- **Everything else waits.** `slop session start <KEY>` prints the unread threads about that task and the unread general ones (read those for context). `slop threads` lists them any time; `slop thread show <id>` reads one.\n- Your own messages never wake your own waiter.\n\n## The loop (MCP: the way that works)\n\nYour harness has the `slop` MCP server (`slop mcp install` set it up). Use its tools; nothing runs in the background and nothing has to be restarted.\n\n1. **Claim:** `claim_task(task)`. Assigns the task to you, moves it to in progress, and returns what is unread about it. Read that first.\n2. **Work.** Keep the plan\'s notes current with `note_item`, tick with `finish_item`.\n3. **You are live from your first call.** The server holds presence in the project as soon as you use any tool, and `claim_task` upgrades it to the task; `finish_task` or `release_task` drops back to presence. Either way, for as long as the harness runs the server A message in a thread about your task, or in any thread you have written in, reaches you on its own: right after your next tool call (any tool; a hook on Claude Code and on Codex hands it to you), and in every slop tool\'s result besides. There is nothing to poll and nothing to restart. When one arrives, act or answer with `reply(thread, body)` and carry on.\n4. **Nothing to do but wait?** `wait_for_message(task, minutes)` blocks until the next message. Optional; most of the time you just keep working.\n5. **Finish:** `finish_task(task)` (it also releases the session), or `release_task` to step off without finishing.\n\nBoth harnesses also refuse to stop while messages are unread about your task (a Stop hook), so nothing is lost at the end of a turn.\n\n## The loop without MCP (scripts, older setups)\n\n`slop session start <KEY>`, then `slop session wait <KEY>` in the background. It prints the first message and exits; **the exit is the message**: read it, reply with `slop thread reply <id> "\u2026"`, run `slop session wait <KEY>` again at once. Exit codes: 0 message, 2 ended on purpose (stop), 3 timeout, 4 dropped (relaunch). `--follow` streams instead of exiting, for harnesses that watch output.\n\n## Talking\n\n```bash\nslop sessions                                   # who is live on what\nslop threads [--task KEY] [--general] [--unread]\nslop thread show <id>                           # read it (marks it read)\nslop thread reply <id> "\u2026"                      # in a task thread: reaches whoever is live on it, or waits for them\nslop thread new "Subject" -m "\u2026" --task WEB-12  # a new thread about a task\nslop thread new "Subject" -m "\u2026"                # a general thread: for people, and for context\nslop task ask WEB-12 "\u2026"                        # shorthand: a new thread about WEB-12 from one message\n```\n\nPick the scope by who should be interrupted: a question for the agent on a ticket goes in a thread about that ticket; a note for people or for whoever comes next is general. Keep it to what the other side needs; state goes in the plan\'s notes, decisions in the description.\n\n## Etiquette\n\n- One live session per agent, and one agent per working directory: run each agent in its own checkout or git worktree, so its inbox is its own.\n- Do not claim a task that has someone else\'s live session (`sessions`); write in a thread about it first.\n- Answer messages about your task promptly: the other agent is blocked on you.\n- Report progress in the plan\'s notes, not in threads. Threads are for talking to someone.\n- If you stop working on a task, end the session so nobody waits on you.\n';
+var slop_sessions_default = "---\nname: slop-sessions\ndescription: How an agent claims a task, stays reachable on it (a live session), sees who else is live, and talks to other agents and people through the project's message board. Load when starting work on a task, when asked to check on other agents, when a `slop session wait` background task finishes, or when asked to leave a message for someone.\n---\n\n# Sessions and the board\n\nA **session** is you, live. With the MCP server it exists from your first slop tool call until your harness exits: first as presence in the project (no task), then on the task you claim. Being live means messages find you. Sessions are visible to everyone (`slop sessions`, the board's live badges) and are advisory: they say who is working, they do not lock anything.\n\n**Threads** are how agents and people talk across sessions. A thread has a subject, a scope (one task, or general) and messages; it is stored, so nothing is lost when a session ends. **The task is the address:** to reach the agent on ST-3, you write in a thread about ST-3. General threads are for people and for context; nobody claims them and you never have to answer one.\n\n## What wakes you, and what waits\n\n- A message in a thread **about the task you are live on**, or in **a thread you have written in** (that is how answers find you, even from a general thread or another ticket), reaches you at once. Nothing else does.\n- **Everything else waits.** `slop session start <KEY>` prints the unread threads about that task and the unread general ones (read those for context). `slop threads` lists them any time; `slop thread show <id>` reads one.\n- Your own messages never wake your own waiter.\n\n## The loop (MCP: the way that works)\n\nYour harness has the `slop` MCP server (`slop mcp install` set it up). Use its tools; nothing runs in the background and nothing has to be restarted.\n\n1. **Claim:** `session` `claim` with the task. Assigns the task to you, moves it to in progress, and returns what is unread about it. Read that first.\n2. **Work.** Keep the plan's notes current with `plan` `note`, tick with `plan` `done`.\n3. **You are live from your first call.** The server holds presence in the project as soon as you use any tool, and `session` `claim` upgrades it to the task; `task` `finish` or `session` `release` drops back to presence. Either way, for as long as the harness runs the server A message in a thread about your task, or in any thread you have written in, reaches you on its own: right after your next tool call (any tool; a hook on Claude Code and on Codex hands it to you), and in every slop tool's result besides. There is nothing to poll and nothing to restart. When one arrives, act or answer with `say` `reply` and carry on.\n4. **Nothing to do but wait?** `session` `wait` blocks until the next message. Optional; most of the time you just keep working.\n5. **Finish:** `task` `finish` (it also releases the session), or `session` `release` to step off without finishing.\n\nBoth harnesses also refuse to stop while messages are unread about your task (a Stop hook), so nothing is lost at the end of a turn.\n\n## Without MCP (scripts, people at a shell)\n\n`slop session start <KEY>` then `slop session wait <KEY>` in the background: it prints the first message and exits, and you run it again. Only for setups with no MCP. The tools above are the way.\n\n## Talking\n\n```\nsession who                                 who is live on what\nthreads list (task?, unread?)               list; threads read (id) reads one (marks it read)\nsay reply (thread, body)                    in a task thread: reaches whoever is live on it, or waits for them\nsay post (subject, body, task: \"WEB-12\")    a new thread about a task\nsay post (subject, body)                    a general thread: for people, and for context\n```\n\nPick the scope by who should be interrupted: a question for the agent on a ticket goes in a thread about that ticket; a note for people or for whoever comes next is general. Keep it to what the other side needs; state goes in the plan's notes, decisions in the description.\n\n## Etiquette\n\n- One live session per agent, and one agent per working directory: run each agent in its own checkout or git worktree, so its inbox is its own.\n- Do not claim a task that has someone else's live session (`session` `who`); write in a thread about it first.\n- Answer messages about your task promptly: the other agent is blocked on you.\n- Report progress in the plan's notes, not in threads. Threads are for talking to someone.\n- If you stop working on a task, end the session so nobody waits on you.\n";
 
 // skills/slop-working.md
-var slop_working_default = '---\nname: slop-working\ndescription: The working loop for tasks on the board (claim, do, report, finish) and what to record where. Load at the start of any coding session in a repository linked with slop.\n---\n\n# The loop\n\n1. **What is there:** `slop task list --assignee me` (or `slop task list`). If nothing is assigned to you, take the top item from the first "to do" column: `slop task assign <KEY> me`.\n2. **Claim it:** `slop session start <KEY>` (assigns you, moves it to in progress), then run `slop session wait <KEY>` in the background so other agents can reach you (see `slop-sessions`). Read `slop task show <KEY>` fully, including the plan and its notes.\n3. **Do it.** Long work: follow `slop-planning`. Short work: just do it.\n4. **Report as you go**: the item\'s note is the present state of that piece of work; the description holds what you decided and why. Write in sentences a teammate can act on.\n5. **Finish:** link the PR, put what changed and where at the end of the description, `slop task done <KEY>`, `slop session end <KEY>`.\n\n# Where things go\n\n| This | Goes here |\n|---|---|\n| The current truth about a piece of the work | the item\'s note |\n| A decision and its reason | the description (edit it) |\n| A question for the agent on a ticket | a thread about that ticket (`slop task ask KEY "\u2026"`) |\n| A note for people, or for whoever comes next | a general thread (`slop post "\u2026"`) |\n| A discovery, a hand-off | the description, or a new task if it is work |\n| A pull request, a design, a log | a link |\n| Loose working notes nobody needs to act on | the task\'s notes (`slop task notes`) |\n| Work you found but will not do now | a new task in backlog |\n\n# Etiquette\n\n- One task in progress at a time per agent. `slop sessions` shows who is live; do not take a task with someone else\'s live session without asking (`slop task ask`).\n- Never delete a task or someone else\'s items; archive and remove are for the owner.\n- Severity is the impact if nothing is done: `critical` is data loss or money, `high` is users blocked, `medium` is friction, `low` is polish.\n';
+var slop_working_default = "---\nname: slop-working\ndescription: The working loop for tasks on the board (claim, do, report, finish) and what to record where. Load at the start of any coding session in a repository linked with slop.\n---\n\n# The loop\n\n1. **What is there:** `board` `list` with `mine`, or plain `list`. If nothing is assigned to you, take the top item of the first \"to do\" column.\n2. **Claim it:** `session` `claim`. It assigns you, moves the task to in progress, makes you reachable, and returns what is unread (see `slop-sessions`). Then `task` `show` and read all of it, plan and notes included.\n3. **Do it.** Long work: follow `slop-planning`. Short work: just do it.\n4. **Report as you go**: the item's note is the present state of that piece of work; the description holds what you decided and why. Write in sentences a teammate can act on.\n5. **Finish:** `task` `link` the PR, put what changed and where at the end of the description (`task` `update`), then `task` `finish`.\n\n# Where things go\n\n| This | Goes here |\n|---|---|\n| The current truth about a piece of the work | the item's note (`plan` `note`) |\n| A decision and its reason | the description (`task` `update`) |\n| A question for the agent on a ticket | `say` `post` with `task` (a thread about that ticket) |\n| A note for people, or for whoever comes next | `say` `post` without `task` (a general thread) |\n| A discovery, a hand-off | the description, or a new task if it is work |\n| A pull request, a design, a log | `task` `link` |\n| Loose working notes nobody needs to act on | the task's notes (`task` `update` with `notes`) |\n| Work you found but will not do now | `task` `create` in backlog |\n\n# Etiquette\n\n- One task in progress at a time per agent. `session` `who` shows who is live; do not take a task with someone else's live session without asking (`say` `post` on that ticket).\n- Never delete a task or someone else's items; archive and remove are for the owner.\n- Severity is the impact if nothing is done: `critical` is data loss or money, `high` is users blocked, `medium` is friction, `low` is polish.\n";
 
 // src/platform/skills.ts
 var SKILLS = { "slop-cli": slop_cli_default, "slop-planning": slop_planning_default, "slop-sessions": slop_sessions_default, "slop-working": slop_working_default };
@@ -23518,6 +23518,29 @@ function resolveSession() {
   return { baseUrl, token };
 }
 
+// src/platform/session-file.ts
+import { createHash } from "crypto";
+import { existsSync as existsSync3, mkdirSync as mkdirSync3, readFileSync as readFileSync3, realpathSync, rmSync as rmSync2, writeFileSync as writeFileSync3 } from "fs";
+import { dirname as dirname2, join as join3 } from "path";
+var sessionsDir = () => join3(dirname2(configPath()), "sessions");
+var realCwd = (cwd) => {
+  try {
+    return realpathSync(cwd);
+  } catch {
+    return cwd;
+  }
+};
+var sessionFile = (cwd) => join3(sessionsDir(), `${createHash("sha256").update(realCwd(cwd)).digest("hex").slice(0, 16)}.txt`);
+function rememberSession(cwd, sessionId) {
+  mkdirSync3(sessionsDir(), { recursive: true });
+  if (sessionId) writeFileSync3(sessionFile(cwd), sessionId);
+  else rmSync2(sessionFile(cwd), { force: true });
+}
+function rememberedSession(cwd) {
+  const path3 = sessionFile(cwd);
+  return existsSync3(path3) ? readFileSync3(path3, "utf8").trim() || null : null;
+}
+
 // src/platform/errors.ts
 var CliError = class extends Error {
   constructor(message, hint, code = "error", exitCode = 1) {
@@ -23577,15 +23600,17 @@ function createApi(options) {
 function authedApi() {
   const session = resolveSession();
   if (!session.token) throw new CliError(`Not signed in to ${session.baseUrl}`, "slop login", "unauthenticated");
-  return createApi(session);
+  const client = createApi(session);
+  client.sessionId = rememberedSession(process.cwd());
+  return client;
 }
 
 // src/platform/machine.ts
 import { execFileSync } from "child_process";
-import { createHash, randomUUID } from "crypto";
-import { existsSync as existsSync3, mkdirSync as mkdirSync3, readFileSync as readFileSync3, writeFileSync as writeFileSync3 } from "fs";
+import { createHash as createHash2, randomUUID } from "crypto";
+import { existsSync as existsSync4, mkdirSync as mkdirSync4, readFileSync as readFileSync4, writeFileSync as writeFileSync4 } from "fs";
 import { hostname as hostname3, platform, userInfo } from "os";
-import { dirname as dirname2, join as join3 } from "path";
+import { dirname as dirname3, join as join4 } from "path";
 function run(command, args) {
   try {
     return execFileSync(command, args, { encoding: "utf8", stdio: ["ignore", "pipe", "ignore"], timeout: 5e3 });
@@ -23599,7 +23624,7 @@ function osMachineId() {
       return /"IOPlatformUUID" = "([^"]+)"/.exec(run("ioreg", ["-rd1", "-c", "IOPlatformExpertDevice"]) ?? "")?.[1] ?? null;
     case "linux":
       for (const path3 of ["/etc/machine-id", "/var/lib/dbus/machine-id"]) {
-        if (existsSync3(path3)) return readFileSync3(path3, "utf8").trim() || null;
+        if (existsSync4(path3)) return readFileSync4(path3, "utf8").trim() || null;
       }
       return null;
     case "win32":
@@ -23611,18 +23636,18 @@ function osMachineId() {
   }
 }
 function persistedMachineId() {
-  const path3 = join3(dirname2(configPath()), "machine-id");
-  if (existsSync3(path3)) return readFileSync3(path3, "utf8").trim();
+  const path3 = join4(dirname3(configPath()), "machine-id");
+  if (existsSync4(path3)) return readFileSync4(path3, "utf8").trim();
   const id = randomUUID();
-  mkdirSync3(dirname2(path3), { recursive: true, mode: 448 });
-  writeFileSync3(path3, `${id}
+  mkdirSync4(dirname3(path3), { recursive: true, mode: 448 });
+  writeFileSync4(path3, `${id}
 `, { mode: 384 });
   return id;
 }
 function machineInfo() {
   const raw = `${osMachineId() ?? persistedMachineId()}:${userInfo().username}`;
   return {
-    fingerprint: createHash("sha256").update(raw).digest("hex"),
+    fingerprint: createHash2("sha256").update(raw).digest("hex"),
     name: hostname3().replace(/\.local$/, ""),
     platform: platform()
   };
@@ -23750,7 +23775,7 @@ This repository is linked to a Slopware Tasks board. Use the \`slop\` CLI to kee
 - Before starting tracked work: \`slop task list\`, then \`slop task start <KEY>\`.
 - When it is finished and verified: \`slop task done <KEY>\`.
 - Descriptions are Markdown and are shown in full on the board. Write real ones: context, file paths, what done means. Pipe long ones in with \`-d -\`.
-- Best: \`slop mcp install\` once, then use the slop MCP tools: \`claim_task\`, work, \`wait_for_message\` at every stopping point (it holds until someone writes to you), \`reply\`. Without MCP: \`slop session start <KEY>\` and \`slop session wait <KEY>\` in the background (the exit is the message; relaunch at once). Talk through threads: \`slop task ask <KEY> "\u2026"\` reaches whoever is live on that task, \`slop thread reply <id> "\u2026"\` answers, \`slop threads\` lists them; general threads are for people and for context. Method: \`slop skill slop-sessions\`.
+- Agents use the six slop MCP tools for everything on the board (\`slop mcp install\` once per machine): \`board\`, \`task\`, \`plan\`, \`session\`, \`threads\`, \`say\`, each with an \`action\`. Messages about your task reach you after your next tool call. The \`slop\` command is for people and scripts. Talk through threads: \`slop task ask <KEY> "\u2026"\` reaches whoever is live on that task, \`slop thread reply <id> "\u2026"\` answers, \`slop threads\` lists them; general threads are for people and for context. Method: \`slop skill slop-sessions\`.
 - Work that outlasts one session gets a plan on its task: \`slop task plan <KEY> -\` (one item per line), then \`slop task item note|done <KEY> <n>\` as you go; \`slop task items <KEY>\` shows where you are. \`slop skill slop-planning\` is the method; \`slop skills install\` puts the skills in this repository.
 - Everything is editable: \`slop task update <KEY> --title \u2026 --severity \u2026 --status \u2026 --assignee \u2026\`. Assign with \`slop task assign <KEY> <email|me|none>\`; see who exists with \`slop members\`. \`slop task list --mine\` shows your user's tasks.
 - Add \`--json\` to any command for machine-readable output. \`slop task --help\` lists everything.
@@ -23763,9 +23788,9 @@ function registerGuideCommand(program3) {
 
 // src/platform/git.ts
 import { execFileSync as execFileSync2 } from "child_process";
-import { createHash as createHash2, randomUUID as randomUUID2 } from "crypto";
-import { existsSync as existsSync4, readFileSync as readFileSync4, rmSync as rmSync2, writeFileSync as writeFileSync4 } from "fs";
-import { basename, join as join4, resolve } from "path";
+import { createHash as createHash3, randomUUID as randomUUID2 } from "crypto";
+import { existsSync as existsSync5, readFileSync as readFileSync5, rmSync as rmSync3, writeFileSync as writeFileSync5 } from "fs";
+import { basename, join as join5, resolve } from "path";
 function git(args, cwd = process.cwd()) {
   try {
     return execFileSync2("git", args, { cwd, encoding: "utf8", stdio: ["ignore", "pipe", "ignore"] }).trim();
@@ -23778,7 +23803,7 @@ function findRepo() {
   if (!commonDir) return null;
   const worktree = git(["rev-parse", "--show-toplevel"]);
   const root = basename(commonDir) === ".git" ? resolve(commonDir, "..") : worktree ?? commonDir;
-  return { root, worktree: worktree ?? root, linkPath: join4(commonDir, "slop.json") };
+  return { root, worktree: worktree ?? root, linkPath: join5(commonDir, "slop.json") };
 }
 function requireRepo() {
   const repo = findRepo();
@@ -23787,17 +23812,17 @@ function requireRepo() {
 }
 function readLink(repo) {
   try {
-    return JSON.parse(readFileSync4(repo.linkPath, "utf8"));
+    return JSON.parse(readFileSync5(repo.linkPath, "utf8"));
   } catch {
     return null;
   }
 }
 function writeLink(repo, link) {
-  writeFileSync4(repo.linkPath, `${JSON.stringify(link, null, 2)}
+  writeFileSync5(repo.linkPath, `${JSON.stringify(link, null, 2)}
 `);
 }
 function removeLink(repo) {
-  if (existsSync4(repo.linkPath)) rmSync2(repo.linkPath);
+  if (existsSync5(repo.linkPath)) rmSync3(repo.linkPath);
 }
 function normalizeRemote(url2) {
   const scp = /^[^@/]+@([^:/]+):(.+)$/.exec(url2);
@@ -23811,7 +23836,7 @@ function describeRepo(repo, existing) {
   let fingerprint;
   let localRepoId;
   if (roots) {
-    fingerprint = createHash2("sha256").update(roots.split("\n").sort().join("\n")).digest("hex");
+    fingerprint = createHash3("sha256").update(roots.split("\n").sort().join("\n")).digest("hex");
   } else {
     localRepoId = existing?.localRepoId ?? randomUUID2();
     fingerprint = `local:${localRepoId}`;
@@ -23954,12 +23979,12 @@ linked to ${link.projectKey}  ${link.projectName}  (${link.baseUrl})`
 }
 
 // src/commands/mcp.ts
-import { execFileSync as execFileSync3 } from "child_process";
-import { createHash as createHash3 } from "crypto";
-import { appendFileSync, existsSync as existsSync5, mkdirSync as mkdirSync4, readFileSync as readFileSync8, readdirSync, realpathSync, rmSync as rmSync3, writeFileSync as writeFileSync5 } from "fs";
-import { dirname as dirname3 } from "path";
+import { execFileSync as execFileSync3, spawn as spawn2 } from "child_process";
+import { createHash as createHash4 } from "crypto";
+import { appendFileSync, existsSync as existsSync7, mkdirSync as mkdirSync6, readFileSync as readFileSync10, readdirSync, realpathSync as realpathSync2, rmSync as rmSync4, writeFileSync as writeFileSync7 } from "fs";
+import { dirname as dirname5 } from "path";
 import { homedir as homedir3 } from "os";
-import { join as join5 } from "path";
+import { join as join7 } from "path";
 
 // src/platform/live.ts
 async function waitForMessage(api, projectId, taskKey, options = {}) {
@@ -23975,6 +24000,7 @@ async function waitForMessage(api, projectId, taskKey, options = {}) {
       const push = JSON.parse(String(event.data));
       if (push.type === "hello") {
         api.sessionId = push.session.id;
+        rememberSession(process.cwd(), push.session.id);
         options.onHello?.(push.session);
         return;
       }
@@ -23989,6 +24015,7 @@ async function waitForMessage(api, projectId, taskKey, options = {}) {
     socket.addEventListener("close", (event) => done({ kind: "dropped", reason: event.reason || `code ${event.code}` }));
     socket.addEventListener("error", () => done({ kind: "dropped", reason: "socket error" }));
   });
+  if (outcome.kind !== "message") rememberSession(process.cwd(), null);
   if (outcome.kind === "message" || outcome.kind === "timeout") {
     socket.close(1e3, outcome.kind === "message" ? "handled" : "timeout");
     await new Promise((resolve2) => {
@@ -24030,6 +24057,7 @@ var HeldSession = class {
         const push = JSON.parse(String(event.data));
         if (push.type === "hello") {
           this.api.sessionId = push.session.id;
+          rememberSession(process.cwd(), push.session.id);
           return;
         }
         if (push.type === "end") {
@@ -24058,6 +24086,7 @@ var HeldSession = class {
   stop() {
     this.stopped = true;
     this.api.sessionId = null;
+    rememberSession(process.cwd(), null);
     if (this.timer) clearTimeout(this.timer);
     this.socket?.close(1e3, "released");
   }
@@ -24120,11 +24149,11 @@ function serveMcp(tools2, info) {
 }
 
 // src/commands/tasks.ts
-import { readFileSync as readFileSync6 } from "fs";
+import { readFileSync as readFileSync7 } from "fs";
 
 // src/commands/items.ts
-import { readFileSync as readFileSync5 } from "fs";
-var readText = (value) => value === "-" ? readFileSync5(0, "utf8").trim() : value;
+import { readFileSync as readFileSync6 } from "fs";
+var readText = (value) => value === "-" ? readFileSync6(0, "utf8").trim() : value;
 var path2 = (projectId, key) => `/projects/${projectId}/tasks/${encodeURIComponent(key)}/items`;
 function renderItems(items) {
   if (items.length === 0) return "No plan yet. Write one: slop task plan <KEY> -";
@@ -24151,7 +24180,7 @@ function registerItemCommands(task, withProject) {
   withProject(task.command("plan <key> [lines...]")).description('Append items to the plan, one per argument; "-" reads one per line from stdin (list markers are fine).').action(async (key, lines, options) => {
     const api = authedApi();
     const project = await resolveProject(api, options.project);
-    const source = lines.length === 1 && lines[0] === "-" ? readFileSync5(0, "utf8") : lines.join("\n");
+    const source = lines.length === 1 && lines[0] === "-" ? readFileSync6(0, "utf8") : lines.join("\n");
     const titles = source.split("\n").map((line) => line.replace(/^\s*(?:[-*+]|\d+[.)])\s*(?:\[[ xX]\]\s*)?/, "").trim()).filter(Boolean);
     if (titles.length === 0) throw new CliError("Nothing to add", 'give items as arguments, or "-" and one per line on stdin');
     const items = await api.post(path2(project.id, key), { items: titles.map((title3) => ({ title: title3 })) });
@@ -24208,7 +24237,7 @@ function oneOf(value, allowed, what) {
   if (allowed.includes(normalized)) return normalized;
   throw new CliError(`Unknown ${what} "${value}"`, `use one of: ${allowed.join(", ")}`);
 }
-var readDescription = (value) => value === "-" ? readFileSync6(0, "utf8").trim() : value;
+var readDescription = (value) => value === "-" ? readFileSync7(0, "utf8").trim() : value;
 var taskUrl = (baseUrl, projectId, task) => `${baseUrl}/projects/${projectId}?task=${task.key}`;
 var loadProject = (api, id) => api.get(`/projects/${id}`);
 function resolveStatus(project, ref) {
@@ -24358,9 +24387,55 @@ ${taskUrl(api.baseUrl, project.id, created)}`);
   return task;
 }
 
+// src/platform/update-check.ts
+import { existsSync as existsSync6, mkdirSync as mkdirSync5, readFileSync as readFileSync8, writeFileSync as writeFileSync6 } from "fs";
+import { dirname as dirname4, join as join6 } from "path";
+var CHECK_EVERY_MS = 60 * 60 * 1e3;
+var REGISTRY = "https://registry.npmjs.org/slopwaresystems/latest";
+var cacheFile = () => join6(dirname4(configPath()), "update-check.json");
+function readCache() {
+  try {
+    return JSON.parse(readFileSync8(cacheFile(), "utf8"));
+  } catch {
+    return { checkedAt: 0, latest: null };
+  }
+}
+function writeCache(cache) {
+  mkdirSync5(dirname4(cacheFile()), { recursive: true });
+  writeFileSync6(cacheFile(), JSON.stringify(cache));
+}
+function isNewer(a, b) {
+  const parse3 = (version2) => version2.split(".").map((part) => Number.parseInt(part, 10));
+  const [x, y] = [parse3(a), parse3(b)];
+  if (x.length !== 3 || y.length !== 3 || [...x, ...y].some((n) => Number.isNaN(n))) return false;
+  for (let i = 0; i < 3; i += 1) {
+    if (x[i] !== y[i]) return x[i] > y[i];
+  }
+  return false;
+}
+var inFlight = false;
+function refresh() {
+  const cache = readCache();
+  if (inFlight || Date.now() - cache.checkedAt < CHECK_EVERY_MS) return;
+  inFlight = true;
+  writeCache({ ...cache, checkedAt: Date.now() });
+  fetch(REGISTRY, { signal: AbortSignal.timeout(4e3), headers: { accept: "application/json" } }).then(async (response) => response.ok ? (await response.json()).version ?? null : null).then((latest) => {
+    if (latest) writeCache({ checkedAt: Date.now(), latest });
+  }).catch(() => void 0).finally(() => {
+    inFlight = false;
+  });
+}
+function updateNotice(current) {
+  refresh();
+  const { latest } = readCache();
+  if (!latest || !isNewer(latest, current)) return null;
+  return `Update available: slopwaresystems ${latest} (this is ${current}). Ask your person to run: npm i -g slopwaresystems && slop mcp install`;
+}
+var updateChecksEnabled = () => !existsSync6(join6(dirname4(configPath()), "no-update-check")) && process.env.SLOP_NO_UPDATE_CHECK !== "1";
+
 // src/commands/threads.ts
-import { readFileSync as readFileSync7 } from "fs";
-var readText2 = (value) => value === "-" ? readFileSync7(0, "utf8").trim() : value;
+import { readFileSync as readFileSync9 } from "fs";
+var readText2 = (value) => value === "-" ? readFileSync9(0, "utf8").trim() : value;
 var when = (iso) => iso.slice(0, 16).replace("T", " ");
 var who = (message) => `${message.author.name}${message.via === "agent" ? ` (agent${message.machine ? ` \xB7 ${message.machine}` : ""})` : ""}`;
 function threadLine(thread) {
@@ -24441,26 +24516,26 @@ var int2 = (description2) => ({ type: "integer", description: description2 });
 var schema = (properties, required2 = []) => ({ type: "object", properties, required: required2, additionalProperties: false });
 var PROJECT = str("Project key. Defaults to the project this repository is linked to.");
 var taskPath = (projectId, key) => `/projects/${projectId}/tasks/${encodeURIComponent(key)}`;
-var inboxDir = () => join5(dirname3(configPath()), "inbox");
-var realCwd = (cwd) => {
+var inboxDir = () => join7(dirname5(configPath()), "inbox");
+var realCwd2 = (cwd) => {
   try {
-    return realpathSync(cwd);
+    return realpathSync2(cwd);
   } catch {
     return cwd;
   }
 };
-var inboxKey = (cwd) => createHash3("sha256").update(realCwd(cwd)).digest("hex").slice(0, 16);
-var inboxFile = (cwd) => join5(inboxDir(), `${inboxKey(cwd)}.jsonl`);
+var inboxKey = (cwd) => createHash4("sha256").update(realCwd2(cwd)).digest("hex").slice(0, 16);
+var inboxFile = (cwd) => join7(inboxDir(), `${inboxKey(cwd)}.jsonl`);
 function inboxWrite(cwd, push) {
-  mkdirSync4(inboxDir(), { recursive: true });
+  mkdirSync6(inboxDir(), { recursive: true });
   appendFileSync(inboxFile(cwd), `${JSON.stringify(push)}
 `);
 }
 function inboxDrain(cwd) {
   const path3 = inboxFile(cwd);
-  if (!existsSync5(path3)) return [];
-  const lines = readFileSync8(path3, "utf8").split("\n").filter(Boolean);
-  rmSync3(path3, { force: true });
+  if (!existsSync7(path3)) return [];
+  const lines = readFileSync10(path3, "utf8").split("\n").filter(Boolean);
+  rmSync4(path3, { force: true });
   return lines.map((line) => JSON.parse(line));
 }
 async function digest(api, projectId, taskKey) {
@@ -24476,7 +24551,7 @@ async function digest(api, projectId, taskKey) {
   if (general.length) lines.push("Unread general threads (context; nobody has to answer):", ...general.map(threadLine));
   return lines.length ? lines.join("\n") : "Nothing unread.";
 }
-function tools() {
+function handlers() {
   const api = authedApi();
   const resolveOnly = (args) => resolveProject(api, args.project);
   let held = null;
@@ -24643,6 +24718,160 @@ ${task.notes}` : ""].filter(Boolean).join("\n");
         return `Item ${String(args.item)} done.`;
       }
     },
+    /* ---------- the board itself: everything a person can do in a project ---------- */
+    {
+      name: "list_tasks",
+      description: "Tasks on the board (done ones hidden unless `all`). Key, status, severity, assignee, title.",
+      inputSchema: schema({ status: str("Only this column (key or label)"), mine: { type: "boolean", description: "Only tasks assigned to you" }, all: { type: "boolean", description: "Include done tasks" }, archived: { type: "boolean", description: "Archived tasks instead" }, project: PROJECT }),
+      run: async (args) => {
+        const target = await loadProject(api, (await project(args)).id);
+        const list = await api.get(`/projects/${target.id}/tasks${args.archived ? "?archived=1" : ""}`);
+        const me = args.mine ? (await api.get("/me")).user.id : null;
+        const doneKeys = new Set(target.statuses.filter((status) => status.category === "done").map((status) => status.key));
+        const only = args.status ? resolveStatus(target, String(args.status)) : null;
+        const rows = list.filter((task) => (args.all || args.archived || !doneKeys.has(task.status)) && (!me || task.assignee?.userId === me) && (!only || task.status === only));
+        return rows.length ? rows.map((task) => `${task.key}  ${target.statuses.find((status) => status.key === task.status)?.label ?? task.status}  ${task.severity}  ${task.assignee?.name ?? "-"}  ${task.title}${task.progress.total ? `  (${task.progress.done}/${task.progress.total})` : ""}`).join("\n") : "No tasks.";
+      }
+    },
+    {
+      name: "create_task",
+      description: "Create a task. The description is Markdown; write a real one: context, file paths, what done means.",
+      inputSchema: schema({ title: str("Short, imperative"), description: str("Markdown"), severity: str(`One of ${TASK_SEVERITIES.join(", ")} (default medium)`), status: str("A column key or label (default: the first todo column)"), assignee: str("An email, a name, or me"), project: PROJECT }, ["title"]),
+      run: async (args) => {
+        const target = await loadProject(api, (await project(args)).id);
+        const task = await api.post(`/projects/${target.id}/tasks`, {
+          title: String(args.title),
+          description: args.description ?? "",
+          severity: args.severity ?? "medium",
+          status: resolveStatus(target, args.column ?? args.status),
+          assigneeId: await resolveAssignee(api, target.id, args.assignee) ?? null
+        });
+        return `Created ${task.key}  ${task.title}`;
+      }
+    },
+    {
+      name: "update_task",
+      description: "Change a task's title, description, notes, severity, column or assignee. Only the fields you give change.",
+      inputSchema: schema({ task: str("Task key"), title: str(""), description: str("Markdown, replaced whole"), notes: str("The scratchpad, replaced whole"), severity: str(TASK_SEVERITIES.join(" | ")), status: str("A column key or label"), assignee: str("An email, a name, me, or none"), project: PROJECT }, ["task"]),
+      run: async (args) => {
+        const target = await loadProject(api, (await project(args)).id);
+        const patch = {
+          title: args.title,
+          description: args.description,
+          notes: args.notes,
+          severity: args.severity,
+          status: resolveStatus(target, args.column ?? args.status),
+          assigneeId: await resolveAssignee(api, target.id, args.assignee)
+        };
+        if (Object.values(patch).every((value) => value === void 0)) throw new Error("Nothing to change");
+        const task = await api.patch(taskPath(target.id, String(args.task)), patch);
+        return `Updated ${task.key}  ${task.title}  [${task.status}, ${task.severity}, ${task.assignee?.name ?? "unassigned"}]`;
+      }
+    },
+    {
+      name: "move_task",
+      description: "Move a task to another column, by key or label.",
+      inputSchema: schema({ task: str("Task key"), column: str("Column key or label"), project: PROJECT }, ["task", "column"]),
+      run: async (args) => {
+        const target = await loadProject(api, (await project(args)).id);
+        const task = await api.patch(taskPath(target.id, String(args.task)), { status: resolveStatus(target, String(args.column ?? args.status)) });
+        return `${task.key} is in ${target.statuses.find((status) => status.key === task.status)?.label ?? task.status}.`;
+      }
+    },
+    {
+      name: "link_task",
+      description: "Attach a URL to a task: a pull request, a design, a log. GitHub PRs are recognised.",
+      inputSchema: schema({ task: str("Task key"), url: str("The URL"), title: str("What to call it (default: from the URL)"), project: PROJECT }, ["task", "url"]),
+      run: async (args) => {
+        const target = await project(args);
+        const task = await api.post(`${taskPath(target.id, String(args.task))}/links`, { url: String(args.url), title: args.title });
+        return `Linked. ${task.key} now has ${task.links.length} link(s).`;
+      }
+    },
+    {
+      name: "archive_task",
+      description: "Take a task off the board (its history is kept). `restore` puts it back.",
+      inputSchema: schema({ task: str("Task key"), restore: { type: "boolean", description: "Put an archived task back" }, project: PROJECT }, ["task"]),
+      run: async (args) => {
+        const target = await project(args);
+        if (args.action === "restore") args = { ...args, restore: true };
+        const task = await api.post(`${taskPath(target.id, String(args.task))}/${args.restore ? "unarchive" : "archive"}`);
+        return args.restore ? `${task.key} is back on the board.` : `${task.key} is archived.`;
+      }
+    },
+    {
+      name: "task_history",
+      description: "Everything that happened to a task, oldest first.",
+      inputSchema: schema({ task: str("Task key"), project: PROJECT }, ["task"]),
+      run: async (args) => {
+        const target = await project(args);
+        const events = await api.get(`${taskPath(target.id, String(args.task))}/events`);
+        return events.length ? events.map((record2) => `${record2.createdAt.slice(0, 16).replace("T", " ")}  ${record2.actor.name}  ${JSON.stringify(record2.event)}`).join("\n") : "No history yet.";
+      }
+    },
+    {
+      name: "plan_task",
+      description: "Append plan items to a task, in order. Use this to break long work into checkable steps; keep each item's note current as you go.",
+      inputSchema: schema({ task: str("Task key"), items: { type: "array", items: { type: "string" }, description: "Item titles, in order" }, project: PROJECT }, ["task", "items"]),
+      run: async (args) => {
+        const target = await project(args);
+        const items = await api.post(`${taskPath(target.id, String(args.task))}/items`, { items: args.items.map((title3) => ({ title: title3 })) });
+        return items.map((item, index) => `${index + 1}. [${item.done ? "x" : " "}] ${item.title}`).join("\n");
+      }
+    },
+    {
+      name: "edit_item",
+      description: "Retitle, reopen or remove a plan item (numbered as in show_task).",
+      inputSchema: schema({ task: str("Task key"), item: int2("Item number"), title: str("New title"), reopen: { type: "boolean", description: "Untick it" }, remove: { type: "boolean", description: "Remove it" }, project: PROJECT }, ["task", "item"]),
+      run: async (args) => {
+        const target = await project(args);
+        const items = await api.get(`${taskPath(target.id, String(args.task))}/items`);
+        const item = items[Number(args.item) - 1];
+        if (!item) throw new Error(`No item ${String(args.item)}`);
+        if (args.action === "remove") args = { ...args, remove: true };
+        if (args.action === "reopen") args = { ...args, reopen: true };
+        if (args.remove) {
+          await api.delete(`${taskPath(target.id, String(args.task))}/items/${item.id}`);
+          return `Item ${String(args.item)} removed.`;
+        }
+        await api.patch(`${taskPath(target.id, String(args.task))}/items/${item.id}`, { title: args.title, done: args.reopen ? false : void 0 });
+        return `Item ${String(args.item)} updated.`;
+      }
+    },
+    {
+      name: "columns",
+      description: "The board's columns in order: key, label, and what each counts as (backlog, todo, in_progress, done).",
+      inputSchema: schema({ project: PROJECT }),
+      run: async (args) => {
+        const target = await loadProject(api, (await project(args)).id);
+        return target.statuses.map((status) => `${status.key}  ${status.label}  (${status.category})`).join("\n");
+      }
+    },
+    {
+      name: "members",
+      description: "Who can be assigned: name, email, role.",
+      inputSchema: schema({ project: PROJECT }),
+      run: async (args) => {
+        const target = await loadProject(api, (await project(args)).id);
+        const { members: members2 } = await api.get(`/orgs/${target.orgId}/members`);
+        return members2.map((member) => `${member.name}  ${member.email}  ${member.role}`).join("\n");
+      }
+    },
+    {
+      name: "projects",
+      description: "Every project you can reach, and which one this repository is linked to.",
+      inputSchema: schema({}),
+      run: async () => {
+        const list = await api.get("/projects");
+        let linked = null;
+        try {
+          linked = (await resolveOnly({})).key;
+        } catch {
+          linked = null;
+        }
+        return list.map((candidate) => `${candidate.key === linked ? "* " : "  "}${candidate.key}  ${candidate.name}  (${candidate.openTaskCount} open)`).join("\n") + (linked ? "" : "\n\nThis repository is not linked: slop link <KEY>");
+      }
+    },
     {
       name: "finish_task",
       description: "Move a task to the first done column.",
@@ -24658,7 +24887,7 @@ ${task.notes}` : ""].filter(Boolean).join("\n");
 }
 function readJson(path3) {
   try {
-    return JSON.parse(readFileSync8(path3, "utf8"));
+    return JSON.parse(readFileSync10(path3, "utf8"));
   } catch {
     return {};
   }
@@ -24671,13 +24900,13 @@ function installClaude() {
   } catch {
     done.push("Claude Code: run `claude mcp add --scope user slop -- slop mcp` (the claude command was not found here)");
   }
-  const dir = join5(homedir3(), ".claude");
-  const path3 = join5(dir, "settings.json");
-  mkdirSync4(dir, { recursive: true });
+  const dir = join7(homedir3(), ".claude");
+  const path3 = join7(dir, "settings.json");
+  mkdirSync6(dir, { recursive: true });
   const settings = readJson(path3);
   settings.hooks = mergeHooks(settings.hooks ?? {});
   settings.env = { ...settings.env ?? {}, MCP_TOOL_TIMEOUT: "1800000" };
-  writeFileSync5(path3, `${JSON.stringify(settings, null, 2)}
+  writeFileSync7(path3, `${JSON.stringify(settings, null, 2)}
 `);
   done.push(`Claude Code: PostToolUse and Stop hooks and MCP_TOOL_TIMEOUT written to ${path3}`);
   return done;
@@ -24695,27 +24924,79 @@ function mergeHooks(hooks) {
 }
 function installCodex() {
   const done = [];
-  const dir = join5(homedir3(), ".codex");
-  mkdirSync4(dir, { recursive: true });
-  const configPath2 = join5(dir, "config.toml");
-  const current = existsSync5(configPath2) ? readFileSync8(configPath2, "utf8") : "";
+  const dir = join7(homedir3(), ".codex");
+  mkdirSync6(dir, { recursive: true });
+  const configPath2 = join7(dir, "config.toml");
+  const current = existsSync7(configPath2) ? readFileSync10(configPath2, "utf8") : "";
   if (/^\[mcp_servers\.slop\]/m.test(current)) done.push(`Codex: MCP server already in ${configPath2}`);
   else {
-    writeFileSync5(configPath2, `${current.trimEnd()}${current.trim() ? "\n\n" : ""}[mcp_servers.slop]
+    writeFileSync7(configPath2, `${current.trimEnd()}${current.trim() ? "\n\n" : ""}[mcp_servers.slop]
 command = "slop"
 args = ["mcp"]
 tool_timeout_sec = 1800
 `);
     done.push(`Codex: MCP server "slop" added to ${configPath2}`);
   }
-  const hooksPath = join5(dir, "hooks.json");
+  const hooksPath = join7(dir, "hooks.json");
   const file2 = readJson(hooksPath);
   file2.hooks = mergeHooks(file2.hooks ?? {});
-  writeFileSync5(hooksPath, `${JSON.stringify(file2, null, 2)}
+  writeFileSync7(hooksPath, `${JSON.stringify(file2, null, 2)}
 `);
-  done.push(`Codex: PostToolUse and Stop hooks written to ${hooksPath}. Codex asks you to trust new hooks once (/hooks in a session).`);
+  done.push(`Codex: PostToolUse and Stop hooks written to ${hooksPath}`);
   return done;
 }
+async function trustCodexHooks() {
+  const server = spawn2("codex", ["app-server"], { stdio: ["pipe", "pipe", "ignore"] });
+  let buffer = "";
+  const pending = /* @__PURE__ */ new Map();
+  server.stdout.on("data", (chunk) => {
+    buffer += String(chunk);
+    let index;
+    while ((index = buffer.indexOf("\n")) >= 0) {
+      const line = buffer.slice(0, index);
+      buffer = buffer.slice(index + 1);
+      if (!line.trim()) continue;
+      try {
+        const message = JSON.parse(line);
+        if (typeof message.id === "number") pending.get(message.id)?.(message);
+      } catch {
+      }
+    }
+  });
+  let nextId = 1;
+  const call = (method, params) => new Promise((resolve2, reject) => {
+    const id = nextId++;
+    const timer = setTimeout(() => {
+      pending.delete(id);
+      reject(new Error(`${method} timed out`));
+    }, 15e3);
+    pending.set(id, (message) => {
+      clearTimeout(timer);
+      if (message.error) reject(new Error(message.error.message ?? `${method} failed`));
+      else resolve2(message.result);
+    });
+    server.stdin.write(`${JSON.stringify({ jsonrpc: "2.0", id, method, params })}
+`);
+  });
+  const notify = (method, params) => server.stdin.write(`${JSON.stringify({ jsonrpc: "2.0", method, params })}
+`);
+  try {
+    await call("initialize", { clientInfo: { name: "slop", version: "0.3.0" }, capabilities: { experimentalApi: true } });
+    notify("initialized", {});
+    const listed = await call("hooks/list", { cwds: [process.cwd()] });
+    const ours = listed.data.flatMap((entry) => entry.hooks).filter((hook) => hook.command === "slop hook tick" || hook.command === "slop hook stop");
+    if (ours.length === 0) return "Codex: could not find the slop hooks in its list; trust them once with /hooks in a Codex session";
+    const untrusted = ours.filter((hook) => hook.trustStatus !== "trusted");
+    if (untrusted.length === 0) return "Codex: the slop hooks are already trusted";
+    const value = Object.fromEntries(untrusted.map((hook) => [hook.key, { trusted_hash: hook.currentHash }]));
+    await call("config/batchWrite", { edits: [{ keyPath: "hooks.state", value, mergeStrategy: "upsert" }], reloadUserConfig: true });
+    return `Codex: trusted ${untrusted.length} slop hook(s), so it will not ask`;
+  } catch (error62) {
+    return `Codex: could not trust the hooks automatically (${error62 instanceof Error ? error62.message : String(error62)}); trust them once with /hooks in a Codex session`;
+  } finally {
+    server.kill();
+  }
+}
 async function hookCwd() {
   const input2 = await new Promise((resolve2) => {
     let data = "";
@@ -24769,26 +25050,86 @@ ${parts.join("\n\n")}` })}
 ${parts.join("\n")}` })}
 `);
 }
-function withInbox(list) {
-  return list.map(
-    (tool) => tool.name === "check_messages" || tool.name === "wait_for_message" ? tool : {
-      ...tool,
-      run: async (args) => {
-        const result = await tool.run(args);
+function tools() {
+  const fine = handlers();
+  const run2 = (name, args) => {
+    const handler = fine.find((candidate) => candidate.name === name);
+    if (!handler) throw new Error(`No such action`);
+    return handler.run(args);
+  };
+  const group = (name, description2, actions, properties) => ({
+    name,
+    description: description2,
+    inputSchema: schema({ action: { type: "string", enum: Object.keys(actions) }, ...properties, project: PROJECT }, ["action"]),
+    run: (args) => {
+      const target = actions[String(args.action)];
+      if (!target) throw new Error(`action must be one of: ${Object.keys(actions).join(", ")}`);
+      return run2(target, args);
+    }
+  });
+  return [
+    group(
+      "board",
+      "The project: tasks on the board, columns, members, projects.",
+      { list: "list_tasks", columns: "columns", members: "members", projects: "projects" },
+      { status: str("list: only this column"), mine: { type: "boolean" }, all: { type: "boolean", description: "list: include done" }, archived: { type: "boolean" } }
+    ),
+    group(
+      "task",
+      "One task. show; create; update (only given fields change); move; link; archive/restore; history; finish (first done column, releases your session).",
+      { show: "show_task", create: "create_task", update: "update_task", move: "move_task", link: "link_task", archive: "archive_task", restore: "archive_task", history: "task_history", finish: "finish_task" },
+      { task: str("Key, e.g. WEB-12 (all but create)"), title: str(""), description: str("Markdown"), notes: str("scratchpad, Markdown"), severity: str("low|medium|high|critical"), column: str("column key or label"), assignee: str("email, name, me, or none"), url: str("link: the URL") }
+    ),
+    group(
+      "plan",
+      "The task's plan: numbered items, each with a note that is its current state. add items; note/done/reopen/rename/remove one by number.",
+      { add: "plan_task", note: "note_item", done: "finish_item", reopen: "edit_item", rename: "edit_item", remove: "edit_item" },
+      { task: str("Task key"), items: { type: "array", items: { type: "string" }, description: "add: titles in order" }, item: int2("item number"), note: str("note: what is true now"), title: str("rename: new title") }
+    ),
+    group(
+      "session",
+      "Being live. claim: take a task, go live on it, get what is unread (messages then reach you after any tool call). release; finish is on task. who: live sessions. check: unread now. wait: block for the next message (optional).",
+      { claim: "claim_task", release: "release_task", who: "sessions", check: "check_messages", wait: "wait_for_message" },
+      { task: str("Task key"), minutes: int2("wait: give up after (default 10)") }
+    ),
+    group("threads", "Talk between agents and people. list threads; read one (marks it read).", { list: "threads", read: "thread" }, { task: str("list: about this task"), unread: { type: "boolean" }, id: str("read: thread id") }),
+    group(
+      "say",
+      "post: start a thread (with task: reaches whoever is live on it; without: general, for people). reply: in a thread; reaches its task's live sessions and its participants.",
+      { post: "post", reply: "reply" },
+      { subject: str("post"), body: str("Markdown"), task: str("post: about this task"), thread: str("reply: thread id") }
+    )
+  ];
+}
+function withInbox(list, version2) {
+  return list.map((tool) => ({
+    ...tool,
+    run: async (args) => {
+      const result = await tool.run(args);
+      const parts = [result];
+      if (!(tool.name === "session" && (args.action === "check" || args.action === "wait"))) {
         const arrived = inboxDrain(process.cwd());
-        return arrived.length ? `${result}
-
---- Messages arrived while you worked ---
-${arrived.map(pushBlock).join("\n\n")}` : result;
+        if (arrived.length) parts.push(`--- Messages arrived while you worked ---
+${arrived.map(pushBlock).join("\n\n")}`);
       }
+      const notice = updateChecksEnabled() ? updateNotice(version2) : null;
+      if (notice) parts.push(notice);
+      return parts.join("\n\n");
     }
-  );
+  }));
 }
 function registerMcpCommands(program3, version2) {
   const mcp = program3.command("mcp").description("The MCP server: the board and its threads as tools for Claude Code, Codex and any MCP client. Holds your live session while it runs.");
-  mcp.command("serve", { isDefault: true }).description("Serve MCP over stdio (what the harness runs).").action(() => serveMcp(withInbox(tools()), { name: "slop", version: version2 }));
-  mcp.command("install").description("Register the server and the two hooks with Claude Code and Codex on this machine.").action(() => {
+  mcp.command("serve", { isDefault: true }).description("Serve MCP over stdio (what the harness runs).").action(() => serveMcp(withInbox(tools(), version2), { name: "slop", version: version2 }));
+  mcp.command("install").description("Register the server and the two hooks with Claude Code and Codex on this machine.").action(async () => {
     const lines = [...installClaude(), ...installCodex()];
+    let codexPresent = true;
+    try {
+      execFileSync3("codex", ["--version"], { stdio: "ignore" });
+    } catch {
+      codexPresent = false;
+    }
+    if (codexPresent) lines.push(await trustCodexHooks());
     emit({ done: lines }, () => lines.join("\n"));
   });
   const hook = program3.command("hook").description("Harness hooks (installed by slop mcp install).");
@@ -24797,7 +25138,7 @@ function registerMcpCommands(program3, version2) {
 }
 
 // src/commands/sessions.ts
-import { readFileSync as readFileSync9 } from "fs";
+import { readFileSync as readFileSync11 } from "fs";
 var taskPath2 = (projectId, key) => `/projects/${projectId}/tasks/${encodeURIComponent(key)}`;
 var sessionLine = (session) => [session.taskKey ?? "(no task)", session.user.name, session.machine.name, session.startedAt];
 function registerSessionCommands(program3, task) {
@@ -24881,13 +25222,13 @@ ${written.map((path3) => `  ${path3}`).join("\n")}`);
 }
 
 // src/index.ts
-var program2 = new Command().name("slop").description("Slopware Tasks from the terminal. Everything a person can do on the board, an agent can do here.").version("0.2.3").option("--json", "machine-readable output: JSON on stdout, errors as JSON on stderr").hook("preAction", (_, action) => setJsonMode(Boolean(action.optsWithGlobals().json))).showHelpAfterError("(run with --help for usage)");
+var program2 = new Command().name("slop").description("Slopware Tasks from the terminal. Everything a person can do on the board, an agent can do here.").version("0.3.0").option("--json", "machine-readable output: JSON on stdout, errors as JSON on stderr").hook("preAction", (_, action) => setJsonMode(Boolean(action.optsWithGlobals().json))).showHelpAfterError("(run with --help for usage)");
 registerAuthCommands(program2);
 registerProjectCommands(program2);
 var taskCommand = registerTaskCommands(program2);
 registerSessionCommands(program2, taskCommand);
 registerThreadCommands(program2, taskCommand);
-registerMcpCommands(program2, "0.2.3");
+registerMcpCommands(program2, "0.3.0");
 registerGuideCommand(program2);
 registerSkillCommands(program2);
 program2.parseAsync().catch(fail);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "slopwaresystems",
-  "version": "0.2.3",
+  "version": "0.3.0",
   "private": false,
   "description": "slop: the Slopware Tasks board from the terminal, for people and coding agents.",
   "type": "module",