code-context-control 2.52.0__tar.gz → 2.54.0__tar.gz

{code_context_control-2.52.0 → code_context_control-2.54.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: code-context-control
-Version: 2.52.0
+Version: 2.54.0
 Summary: Local code-intelligence layer for AI coding tools (Claude Code, Codex, Copilot, Cursor, Antigravity). Retrieve less, read less, edit safer — and version the configs that shape your agent (CLAUDE.md, skills, hooks, MCP).
 Author-email: Dimitri Tselenchuk <dtselenc@gmail.com>
 License-Expression: Apache-2.0
@@ -275,7 +275,7 @@ C3 exposes 18 tools as a native MCP server. Your IDE calls them directly:
 | `c3_edits` | Edit-ledger queries + version diffs + restore points + per-branch filter |
 | `c3_bitbucket` | Bitbucket Data Center integration — PRs, branches, builds, repo admin (v2.30.0) |
 | `c3_project` | Cross-project — discover & operate on other c3-installed projects; guarded writes (v2.31.0) |
-| `c3_task` | Durable per-project tasks, milestones, and decision notes (v2.45.0) |
+| `c3_task` | Durable per-project PM — tasks with dependencies & subtasks, milestones, decision notes, event history, health reports, and auto+manual time tracking (v2.53.0) |
 | `c3_artifacts` | Agent-config tracking — version history, diff & restore for CLAUDE.md, settings/hooks, MCP configs, skills (v2.46.0) |
 
 On Windows, `c3_shell` uses Git Bash when available. Git Bash does not bundle

{code_context_control-2.52.0 → code_context_control-2.54.0}/README.md

@@ -212,7 +212,7 @@ C3 exposes 18 tools as a native MCP server. Your IDE calls them directly:
 | `c3_edits` | Edit-ledger queries + version diffs + restore points + per-branch filter |
 | `c3_bitbucket` | Bitbucket Data Center integration — PRs, branches, builds, repo admin (v2.30.0) |
 | `c3_project` | Cross-project — discover & operate on other c3-installed projects; guarded writes (v2.31.0) |
-| `c3_task` | Durable per-project tasks, milestones, and decision notes (v2.45.0) |
+| `c3_task` | Durable per-project PM — tasks with dependencies & subtasks, milestones, decision notes, event history, health reports, and auto+manual time tracking (v2.53.0) |
 | `c3_artifacts` | Agent-config tracking — version history, diff & restore for CLAUDE.md, settings/hooks, MCP configs, skills (v2.46.0) |
 
 On Windows, `c3_shell` uses Git Bash when available. Git Bash does not bundle

{code_context_control-2.52.0 → code_context_control-2.54.0}/cli/c3.py

@@ -92,7 +92,7 @@ console = Console() if HAS_RICH else None
 # Config
 CONFIG_DIR = ".c3"
 CONFIG_FILE = ".c3/config.json"
-__version__ = "2.52.0"
+__version__ = "2.54.0"
 
 
 def _command_deps() -> CommandDeps:
@@ -165,6 +165,7 @@ def _build_init_config(project_path: str) -> dict:
         "project_path": project_path,
         "version": __version__,
         "index_auto_update": True,
+        "index_max_files": 2000,
         "compression_mode": "smart",
         "mcp": {"mode": "direct"},
         "hybrid": deepcopy(HYBRID_DEFAULTS),
@@ -890,7 +891,7 @@ def _parse_cli_ide_arg(value: str) -> str:
     return normalized
 
 
-def _do_init(project_path: str, ide_name: str = None):
+def _do_init(project_path: str, ide_name: str = None, no_embed: bool = False):
     """Run the core init steps (shared by new install and re-init after clear/reset)."""
     config = _build_init_config(project_path)
     save_config(config, project_path)
@@ -898,10 +899,27 @@ def _do_init(project_path: str, ide_name: str = None):
     for subdir in _C3_INIT_SUBDIRS:
         (Path(project_path) / CONFIG_DIR / subdir).mkdir(parents=True, exist_ok=True)
 
+    import time as _t
+
+    from cli.progress import ProgressLine
+
     print("Building code index...")
+    _prog = ProgressLine()
+    _t0 = _t.perf_counter()
     indexer = CodeIndex(project_path)
-    result = indexer.build_index()
-    print(f"  Indexed {result['files_indexed']} files, {result['chunks_created']} chunks")
+    result = indexer.build_index(
+        on_progress=lambda entries, files, chunks: _prog.update(
+            f"  scanning: {entries:,} entries | {files:,} files | {chunks:,} chunks"))
+    _prog.done()
+    entries = result.get("entries_scanned", 0)
+    print(f"  Indexed {result['files_indexed']} files, {result['chunks_created']} chunks "
+          f"in {_t.perf_counter() - _t0:.1f}s ({entries:,} entries scanned)")
+    capped = result.get("files_capped", 0)
+    if capped:
+        total = result["files_indexed"] + capped
+        print(f"  [!] Indexed {result['files_indexed']} of {total} candidate files "
+              f"(cap: index_max_files={result.get('max_files')}).")
+        print("      Raise index_max_files in .c3/config.json for full coverage.")
 
     # Build embedding index if Ollama is available (non-blocking on failure)
     try:
@@ -912,13 +930,24 @@ def _do_init(project_path: str, ide_name: str = None):
         ollama = OllamaClient(ollama_url)
         embed_model = config.get("embed_model", "nomic-embed-text")
         ei = EmbeddingIndex(project_path, ollama, embed_model=embed_model)
-        if ei.ready:
+        if no_embed:
+            print("  Embedding index skipped (--no-embed)")
+        elif ei.probe()["ready"]:
+            # probe() initializes the lazy backends; checking .ready on a
+            # fresh instance is always False and silently skipped the build.
             print("Building embedding index...")
-            ei_result = ei.build(indexer)
+            _t0 = _t.perf_counter()
+            _eprog = ProgressLine()
+            ei_result = ei.build(
+                indexer,
+                on_progress=lambda done, total, chunks: _eprog.update(
+                    f"  embedding: file {done}/{total} | {chunks:,} chunks"))
+            _eprog.done()
             print(f"  Embedded {ei_result.get('chunks_embedded', 0)} chunks "
-                  f"({ei_result.get('files_processed', 0)} files)")
+                  f"({ei_result.get('files_processed', 0)} files) "
+                  f"in {_t.perf_counter() - _t0:.1f}s")
         else:
-            print("  Embedding index skipped (Ollama not available or model not pulled)")
+            print(f"  Embedding index skipped ({ei.unavailable_reason()})")
     except Exception:
         _log.debug("Embedding index build failed", exc_info=True)
 
@@ -926,15 +955,22 @@ def _do_init(project_path: str, ide_name: str = None):
     try:
         from services.doc_index import DocIndex
         print("Building doc index...")
+        _t0 = _t.perf_counter()
+        _dprog = ProgressLine()
         di = DocIndex(project_path)
-        di_result = di.build()
-        print(f"  Indexed {di_result['docs_indexed']} docs, {di_result['chunks_created']} chunks")
+        di_result = di.build(
+            on_progress=lambda done, total: _dprog.update(
+                f"  docs: {done}/{total}"))
+        _dprog.done()
+        print(f"  Indexed {di_result['docs_indexed']} docs, "
+              f"{di_result['chunks_created']} chunks in {_t.perf_counter() - _t0:.1f}s")
     except Exception:
         _log.debug("Doc index build failed", exc_info=True)
 
     print("Building compression dictionary...")
     protocol = CompressionProtocol(project_path)
-    new_terms = protocol.build_project_dictionary()
+    # Mine the in-memory index instead of re-reading the whole tree.
+    new_terms = protocol.build_project_dictionary(code_index=indexer)
     print(f"  Added {len(new_terms)} project-specific terms")
 
     from core.ide import detect_ide, load_ide_config
@@ -966,11 +1002,12 @@ def cmd_init(args):
     if requested_ide != "auto":
         requested_ide = normalize_ide_name(requested_ide)
     git_requested = getattr(args, "git", False)
+    no_embed = bool(getattr(args, "no_embed", False))
 
     # ── Brand-new install ──────────────────────────────────────
     if not c3_dir.exists() or not (c3_dir / "config.json").exists():
         print_header(f"Initializing C3 for: {project_path}")
-        _do_init(project_path, ide_name=requested_ide)
+        _do_init(project_path, ide_name=requested_ide, no_embed=no_embed)
         try:
             from services.project_manager import ProjectManager
             ProjectManager().add_project(project_path)
@@ -1123,7 +1160,7 @@ def cmd_init(args):
         ti_manifest = c3_dir / "transcript_index" / "manifest.json"
         if ti_manifest.exists():
             ti_manifest.write_text("{}", encoding="utf-8")
-        _do_init(project_path, ide_name=requested_ide)
+        _do_init(project_path, ide_name=requested_ide, no_embed=no_embed)
         if git_requested:
             _init_local_git_repo(project_path)
         _run_install_mcp(project_path, requested_ide, mcp_mode=getattr(args, "mcp_mode", "direct"), banner="Updating MCP tools...")
@@ -1152,7 +1189,7 @@ def cmd_init(args):
     # ── Non-interactive (--force) ──────────────────────────────
     if getattr(args, "force", False):
         print("\n[--force] Applying update...")
-        _do_init(project_path, ide_name=requested_ide)
+        _do_init(project_path, ide_name=requested_ide, no_embed=no_embed)
         if git_requested:
             _init_local_git_repo(project_path)
         _run_install_mcp(project_path, requested_ide, mcp_mode=getattr(args, "mcp_mode", "direct"), banner="Updating MCP tools...")
@@ -1176,7 +1213,7 @@ def cmd_init(args):
 
     if selected.startswith("Update"):
         print()
-        _do_init(project_path, ide_name=requested_ide)
+        _do_init(project_path, ide_name=requested_ide, no_embed=no_embed)
         if git_requested:
             _init_local_git_repo(project_path)
         _prompt_install_mcp(project_path, requested_ide, default_mode=getattr(args, "mcp_mode", "direct"), banner="Updating MCP tools...")
@@ -1192,7 +1229,7 @@ def cmd_init(args):
                 shutil.rmtree(target)
                 print(f"  Removed .c3/{subdir}/")
         print()
-        _do_init(project_path, ide_name=requested_ide)
+        _do_init(project_path, ide_name=requested_ide, no_embed=no_embed)
         if git_requested:
             _init_local_git_repo(project_path)
         _prompt_install_mcp(project_path, requested_ide, default_mode=getattr(args, "mcp_mode", "direct"), banner="Updating MCP tools...")
@@ -1209,7 +1246,7 @@ def cmd_init(args):
         shutil.rmtree(c3_dir)
         print("  Deleted .c3/")
         print()
-        _do_init(project_path, ide_name=requested_ide)
+        _do_init(project_path, ide_name=requested_ide, no_embed=no_embed)
         if git_requested:
             _init_local_git_repo(project_path)
         _prompt_install_mcp(project_path, requested_ide, default_mode=getattr(args, "mcp_mode", "direct"), banner="Re-installing MCP tools...")

{code_context_control-2.52.0 → code_context_control-2.54.0}/cli/commands/parser.py

@@ -24,6 +24,7 @@ def build_parser(version: str, parse_cli_ide_arg):
     p_init.add_argument("--ide", default="auto", type=parse_cli_ide_arg, metavar="{auto,claude,vscode,cursor,codex,antigravity}", help="Target IDE for MCP config (default: auto-detect)")
     p_init.add_argument("--mcp-mode", choices=["direct", "proxy"], default="direct", help="Default MCP mode if install is selected during init (default: direct)")
     p_init.add_argument("--git", action="store_true", help="Initialize a local Git repository during init/update")
+    p_init.add_argument("--no-embed", action="store_true", help="Skip building the semantic embedding index during init")
     p_init.add_argument("--permissions", choices=["read-only", "c3-strict", "standard", "permissive"], default=None, help="Apply Claude Code permission tier (Claude Code only, used with --force)")
     p_init.add_argument("--include-mcp-wildcard", action="store_true", help="Add mcp__* wildcard so non-C3 MCP servers don't prompt per-call")
 

{code_context_control-2.52.0 → code_context_control-2.54.0}/cli/hub_server.py

@@ -1027,8 +1027,10 @@ def api_run_component():
             ollama = OllamaClient(ollama_url)
             embed_model = cfg.get("embed_model", "nomic-embed-text")
             ei = EmbeddingIndex(resolved, ollama, embed_model=embed_model)
-            if not ei.ready:
-                return jsonify({"success": True, "output": "Embedding index skipped (Ollama not available or model not pulled)."})
+            # probe() initializes lazy backends; a fresh instance's .ready
+            # is always False and would skip the build unconditionally.
+            if not ei.probe()["ready"]:
+                return jsonify({"success": True, "output": f"Embedding index skipped ({ei.unavailable_reason()})."})
             indexer = CodeIndex(resolved)
             if not indexer.chunks:
                 indexer._load_index()
@@ -1770,21 +1772,20 @@ def api_pm_task():
         task_id = (data.get("id") or "").strip()
         if not task_id:
             return jsonify({"error": "id is required"}), 400
-        res = None
-        fields = data.get("fields") or {}
-        if fields:
-            res = store.update_task(task_id, **fields)
+        if data.get("restore"):
+            res = store.restore_task(task_id, actor="hub")
             if "error" in res:
                 return jsonify(res), 400
-        move = data.get("move") or {}
-        if move:
-            res = store.move_task(task_id, status=move.get("status"),
-                                  before_id=move.get("before_id"),
-                                  after_id=move.get("after_id"))
-            if "error" in res:
-                return jsonify(res), 400
-        if res is None:
+            _pm_audit(resolved, "task", "restore", res["id"])
+            return jsonify({"updated": True, "task": res})
+        if not (data.get("fields") or data.get("move")):
             return jsonify({"error": "fields or move required"}), 400
+        res = store.mutate_task(task_id, fields=data.get("fields"),
+                                move=data.get("move"),
+                                expected_rev=data.get("expected_rev"),
+                                actor="hub")
+        if "error" in res:
+            return jsonify(res), 409 if res.get("code") == "rev_conflict" else 400
         _pm_audit(resolved, "task", "update", res["id"])
         return jsonify({"updated": True, "task": res})
 
@@ -1796,7 +1797,7 @@ def api_pm_task():
     task_id = (data.get("id") or "").strip()
     if not task_id:
         return jsonify({"error": "id is required"}), 400
-    res = store.archive_task(task_id)
+    res = store.archive_task(task_id, actor="hub")
     if "error" in res:
         return jsonify(res), 400
     _pm_audit(resolved, "task", "archive", res["id"])
@@ -1825,9 +1826,10 @@ def api_pm_milestone():
         return jsonify({"error": "id is required"}), 400
 
     if request.method == "PUT":
-        res = store.update_milestone(ms_id, **(data.get("fields") or {}))
+        res = store.update_milestone(ms_id, expected_rev=data.get("expected_rev"),
+                                     **(data.get("fields") or {}))
         if "error" in res:
-            return jsonify(res), 400
+            return jsonify(res), 409 if res.get("code") == "rev_conflict" else 400
         _pm_audit(resolved, "milestone", "update", res["id"])
         return jsonify({"updated": True, "milestone": res})
 
@@ -1860,9 +1862,10 @@ def api_pm_note():
         return jsonify({"error": "id is required"}), 400
 
     if request.method == "PUT":
-        res = store.update_note(note_id, **(data.get("fields") or {}))
+        res = store.update_note(note_id, expected_rev=data.get("expected_rev"),
+                                **(data.get("fields") or {}))
         if "error" in res:
-            return jsonify(res), 400
+            return jsonify(res), 409 if res.get("code") == "rev_conflict" else 400
         _pm_audit(resolved, "note", "update", res["id"])
         return jsonify({"updated": True, "note": res})
 
@@ -1898,6 +1901,105 @@ def api_pm_link():
     return jsonify({"task": res})
 
 
+@app.route("/api/projects/pm/events", methods=["GET"])
+def api_pm_events():
+    """PM event history for one project, newest first.
+    Query: path, entity?, id?, op?, limit?"""
+    resolved, err = _pm_resolve((request.args.get("path") or "").strip())
+    if err:
+        return err
+    try:
+        limit = max(1, min(int(request.args.get("limit") or 50), 500))
+    except ValueError:
+        limit = 50
+    return jsonify({"path": str(resolved), "events": _pm_store(resolved).history(
+        entity=(request.args.get("entity") or None),
+        item_id=(request.args.get("id") or None),
+        op=(request.args.get("op") or None),
+        limit=limit)})
+
+
+@app.route("/api/projects/pm/deps", methods=["POST"])
+def api_pm_deps():
+    """Add/remove a blocked-by dependency: {path, id, blocker, op: add|remove}."""
+    data = request.get_json(force=True) or {}
+    resolved, err = _pm_resolve((data.get("path") or "").strip())
+    if err:
+        return err
+    task_id = (data.get("id") or "").strip()
+    blocker = (data.get("blocker") or "").strip()
+    op = (data.get("op") or "add").strip()
+    if not task_id or not blocker:
+        return jsonify({"error": "id and blocker are required"}), 400
+    if op not in ("add", "remove"):
+        return jsonify({"error": "op must be add|remove"}), 400
+    store = _pm_store(resolved)
+    res = (store.add_dependency(task_id, blocker, actor="hub") if op == "add"
+           else store.remove_dependency(task_id, blocker, actor="hub"))
+    if "error" in res:
+        return jsonify(res), 400
+    _pm_audit(resolved, "deps", op, res["id"])
+    return jsonify({"task": res})
+
+
+@app.route("/api/projects/pm/report", methods=["GET"])
+def api_pm_report():
+    """PM health report for one project. Query: path"""
+    resolved, err = _pm_resolve((request.args.get("path") or "").strip())
+    if err:
+        return err
+    return jsonify({"path": str(resolved),
+                    "report": _pm_store(resolved).report()})
+
+
+def _time_tracker(path):
+    from services.time_tracker import TimeTracker
+    return TimeTracker(str(path))
+
+
+@app.route("/api/projects/time", methods=["GET"])
+def api_projects_time():
+    """Time summary for one project. Query: path"""
+    resolved, err = _pm_resolve((request.args.get("path") or "").strip())
+    if err:
+        return err
+    tracker = _time_tracker(resolved)
+    return jsonify({"path": str(resolved), "summary": tracker.summary(),
+                    "sessions": tracker.sessions()[:20],
+                    "entries": tracker.list_entries(limit=100)})
+
+
+@app.route("/api/projects/time/entry", methods=["POST", "PUT", "DELETE"])
+def api_projects_time_entry():
+    data = request.get_json(force=True) or {}
+    resolved, err = _pm_resolve((data.get("path") or "").strip())
+    if err:
+        return err
+    tracker = _time_tracker(resolved)
+    if request.method == "POST":
+        res = tracker.add_entry(data.get("minutes"), note=data.get("note", ""),
+                                date=data.get("date") or None,
+                                task_id=data.get("task_id"), created_by="hub")
+        if "error" in res:
+            return jsonify(res), 400
+        _pm_audit(resolved, "time", "create", res["id"])
+        return jsonify({"created": True, "entry": res}), 201
+    entry_id = (data.get("id") or "").strip()
+    if not entry_id:
+        return jsonify({"error": "id is required"}), 400
+    if request.method == "PUT":
+        res = tracker.update_entry(entry_id, **(data.get("fields") or {}))
+        if "error" in res:
+            return jsonify(res), 400
+        _pm_audit(resolved, "time", "update", res["id"])
+        return jsonify({"updated": True, "entry": res})
+    res = tracker.delete_entry(entry_id)
+    if "error" in res:
+        return jsonify(res), 400
+    _pm_audit(resolved, "time", "delete", entry_id)
+    return jsonify(res)
+
+
 # ── Agent artifacts: config tracking (v2.46.0) ────────────────────────────
 # Direct ArtifactStore per request (load-per-op store — no runtime build
 # needed); every mutation audited to the target project's activity log.
@@ -2012,24 +2114,47 @@ def api_pm_global():
             skipped.append({"path": ppath, "reason": "not initialized"})
             continue
         try:
-            if status_filter and status_filter != "all":
-                rows = TaskStore(ppath).list_tasks(status=status_filter, limit=1000)
-            else:
-                rows = TaskStore(ppath).list_tasks(limit=1000)
-                if status_filter != "all":
-                    rows = [t for t in rows if t.get("status") != "done"]
+            everything = TaskStore(ppath).list_tasks(include_archived=True,
+                                                     limit=1000)
         except Exception as e:
             skipped.append({"path": ppath, "reason": str(e)})
             continue
+        active = [t for t in everything
+                  if t.get("lifecycle", "active") == "active"]
+        if status_filter and status_filter != "all":
+            rows = [t for t in active if t.get("status") == status_filter]
+        elif status_filter == "all":
+            rows = active
+        else:
+            rows = [t for t in active if t.get("status") != "done"]
         if not rows:
             continue
+        # Resolve blockers server-side: the aggregate ships only open tasks,
+        # so clients cannot tell a done/archived blocker from an open one.
+        by_id = {t["id"]: t for t in everything}
+        for t in rows:
+            deps = t.get("blocked_by") or []
+            if not deps:
+                continue
+            found = [(d, by_id.get(d)) for d in deps]
+            t["blockers_open"] = sum(
+                1 for _, b in found
+                if b is not None and b.get("lifecycle", "active") == "active"
+                and b.get("status") != "done")
+            t["blocker_titles"] = [
+                (b.get("title") or d[:8]) if b is not None else d[:8]
+                for d, b in found]
         proj_info = {"name": p.get("name"), "path": ppath}
         if p.get("parent_path"):
             proj_info["parent_path"] = p["parent_path"]
         for t in rows:
             t["project"] = proj_info
         tasks.extend(rows)
-        by_project[ppath] = {"name": p.get("name"), "open": len(rows)}
+        by_project[ppath] = {
+            "name": p.get("name"),
+            "open": sum(1 for t in rows if t.get("status") != "done"),
+            "shown": len(rows),
+        }
 
     # priority asc, due asc, updated desc (stable two-stage sort)
     tasks.sort(key=lambda t: t.get("updated_at") or "", reverse=True)

{code_context_control-2.52.0 → code_context_control-2.54.0}/cli/hub_ui/components/task_board.js

@@ -6,7 +6,9 @@
 // Shared PM primitives (PM_COLUMNS, PriorityDot, DueBadge, statusColor,
 // ...) come from ui/pm_shared.js, loaded earlier in the bundle.
 
-function TaskBoardCard({ task, mode, colTasks, index, onMoveStatus, onMoveRank, onOpenProject }) {
+let _pmDragTask = null;  // active drag payload (module-level; no useRef in this bundle)
+
+function TaskBoardCard({ task, mode, colTasks, index, onMoveStatus, onMoveRank, onOpenProject, onMoveTo, onDropOnCard, byId }) {
   const keys = PM_COLUMNS.map(c => c[0]);
   const ci = keys.indexOf(task.status);
   const navBtn = (label, title, onClick) => (
@@ -18,10 +20,15 @@ function TaskBoardCard({ task, mode, colTasks, index, onMoveStatus, onMoveRank,
     }}>{label}</button>
   );
   return (
-    <div className="fade-up" style={{
-      background: T.surface, border: `1px solid ${T.border}`, borderRadius: 8,
-      padding: '8px 10px', display: 'flex', flexDirection: 'column', gap: 6,
-    }}>
+    <div className="fade-up" draggable
+      onDragStart={() => { _pmDragTask = task; }}
+      onDragOver={e => e.preventDefault()}
+      onDrop={e => { e.preventDefault(); e.stopPropagation(); onDropOnCard(task); }}
+      style={{
+        background: T.surface, border: `1px solid ${T.border}`, borderRadius: 8,
+        padding: '8px 10px', display: 'flex', flexDirection: 'column', gap: 6,
+        cursor: 'grab',
+      }}>
       <div style={{ display: 'flex', alignItems: 'flex-start', gap: 6 }}>
         <span style={{ marginTop: 3, display: 'inline-flex', flexShrink: 0 }}>
           <PriorityDot priority={task.priority} />
@@ -37,10 +44,13 @@ function TaskBoardCard({ task, mode, colTasks, index, onMoveStatus, onMoveRank,
             <Badge color={T.purple}>{task.project.name || 'project'}</Badge>
           </span>
         )}
+        <DepsBadge task={task} byId={byId} />
         <DueBadge task={task} />
         {(task.tags || []).map(tag => <Badge key={tag} color={T.blue}>{tag}</Badge>)}
       </div>
       <div style={{ display: 'flex', alignItems: 'center', gap: 4 }}>
+        {isTaskReady(task, byId) &&
+          navBtn('✓', 'Unblocked — move to Backlog', () => onMoveTo(task, 'backlog'))}
         {ci > 0 && navBtn('◀', `Move to ${PM_COLUMNS[ci - 1][1]}`, () => onMoveStatus(task, -1))}
         {ci >= 0 && ci < keys.length - 1 &&
           navBtn('▶', `Move to ${PM_COLUMNS[ci + 1][1]}`, () => onMoveStatus(task, +1))}
@@ -61,6 +71,7 @@ function TaskBoard({ projects, onOpenDrill }) {
   const [msFilter, setMsFilter] = useState('');       // milestone id ('' = all)
   const [err, setErr] = useState('');
   const [newTitle, setNewTitle] = useState('');
+  const [timeData, setTimeData] = useState(null);
 
   const mode = scope === 'global' ? 'global' : 'project';
 
@@ -72,6 +83,10 @@ function TaskBoard({ projects, onOpenDrill }) {
         const q = msFilter ? `&milestone=${encodeURIComponent(msFilter)}` : '';
         const b = await api.get(`/api/projects/pm?path=${encodeURIComponent(scope)}${q}`);
         setBoardData(b);
+        try {
+          setTimeData(await api.get(
+            `/api/projects/time?path=${encodeURIComponent(scope)}`));
+        } catch (e2) { setTimeData(null); }
       }
       setErr('');
     } catch (e) {
@@ -85,7 +100,7 @@ function TaskBoard({ projects, onOpenDrill }) {
   }, [scope, msFilter]);
 
   // Reset per-project state when the scope changes (avoid stale board flash).
-  useEffect(() => { setBoardData(null); setMsFilter(''); setNewTitle(''); setErr(''); }, [scope]);
+  useEffect(() => { setBoardData(null); setMsFilter(''); setNewTitle(''); setErr(''); setTimeData(null); }, [scope]);
   useEffect(() => { load(); }, [load]);
   usePoll(load, 10000);
 
@@ -98,10 +113,19 @@ function TaskBoard({ projects, onOpenDrill }) {
     const path = mode === 'global' ? (task.project && task.project.path) : scope;
     if (!path) return;
     try {
-      await api.put('/api/projects/pm/task', { path, id: task.id, move: { status: next } });
+      const body = { path, id: task.id, move: { status: next } };
+      if (mode === 'project' && boardData && boardData.board && boardData.board.rev != null) {
+        body.expected_rev = boardData.board.rev;
+      }
+      await api.put('/api/projects/pm/task', body);
       notify(`Moved to ${PM_COLUMNS[ci + dir][1]}`);
       load();
-    } catch (e) { notify(e.message || 'Move failed', 'err'); }
+    } catch (e) {
+      if (e && e.status === 409) {
+        notify('Board changed elsewhere — refreshed', 'err');
+        load();
+      } else { notify(e.message || 'Move failed', 'err'); }
+    }
   };
 
   const moveRank = async (task, colTasks, index, dir) => {
@@ -109,10 +133,47 @@ function TaskBoard({ projects, onOpenDrill }) {
       ? { before_id: colTasks[index - 1].id }
       : { after_id: colTasks[index + 1].id };
     try {
-      await api.put('/api/projects/pm/task', { path: scope, id: task.id, move });
+      const body = { path: scope, id: task.id, move };
+      if (boardData && boardData.board && boardData.board.rev != null) {
+        body.expected_rev = boardData.board.rev;
+      }
+      await api.put('/api/projects/pm/task', body);
       notify(dir < 0 ? 'Moved up' : 'Moved down');
       load();
-    } catch (e) { notify(e.message || 'Reorder failed', 'err'); }
+    } catch (e) {
+      if (e && e.status === 409) {
+        notify('Board changed elsewhere — refreshed', 'err');
+        load();
+      } else { notify(e.message || 'Reorder failed', 'err'); }
+    }
+  };
+
+  const moveTo = async (task, status) => {
+    const path = mode === 'global' ? (task.project && task.project.path) : scope;
+    if (!path || task.status === status) return;
+    try {
+      await api.put('/api/projects/pm/task', { path, id: task.id, move: { status } });
+      notify(`Moved to ${(PM_COLUMNS.find(c => c[0] === status) || [status, status])[1]}`);
+      load();
+    } catch (e) { notify(e.message || 'Move failed', 'err'); }
+  };
+
+  const dropOnColumn = (key) => {
+    const t = _pmDragTask; _pmDragTask = null;
+    if (!t) return;
+    moveTo(t, key);
+  };
+
+  const dropOnCard = (target) => {
+    const t = _pmDragTask; _pmDragTask = null;
+    if (!t || t.id === target.id) return;
+    if (mode !== 'project') { moveTo(t, target.status); return; }
+    const move = t.status === target.status
+      ? { before_id: target.id }
+      : { status: target.status, before_id: target.id };
+    api.put('/api/projects/pm/task', { path: scope, id: t.id, move })
+      .then(() => { notify('Moved'); load(); })
+      .catch(e => notify(e.message || 'Move failed', 'err'));
   };
 
   const addTask = async () => {
@@ -145,7 +206,11 @@ function TaskBoard({ projects, onOpenDrill }) {
     const cols = (((boardData || {}).board) || {}).columns || {};
     PM_COLUMNS.forEach(([k]) => { columns[k] = cols[k] || []; });
   }
+  const boardById = {};
+  Object.values(columns).forEach(list =>
+    list.forEach(t => { boardById[t.id] = t; }));
   const milestones = (((boardData || {}).board) || {}).milestones || [];
+  const recovery = (((boardData || {}).board) || {}).recovery || null;
   const byProject = (globalData || {}).by_project || {};
   const projChips = Object.entries(byProject)
     .sort((a, b) => (b[1].open || 0) - (a[1].open || 0) ||
@@ -191,7 +256,16 @@ function TaskBoard({ projects, onOpenDrill }) {
         </div>
       )}
 
+      {mode === 'project' && timeData && timeData.summary && (
+        <div className="mono" style={{ fontSize: 11, color: T.textDim }}>
+          ⏱ {fmtMinutes(timeData.summary.today.total_min)} today
+          {' · '}{fmtMinutes(timeData.summary.last_7d.total_min)} last 7d
+          {' · '}{fmtMinutes(timeData.summary.last_30d.total_min)} last 30d
+          {' · '}{(timeData.entries || []).length} manual
+        </div>
+      )}
       {err && <div style={{ fontSize: 12, color: T.error }}>{err}</div>}
+      {mode === 'project' && <RecoveryBanner recovery={recovery} />}
 
       {/* Board */}
       {loadingBoard ? (
@@ -214,10 +288,13 @@ function TaskBoard({ projects, onOpenDrill }) {
                     {hiddenDone ? '—' : colTasks.length}
                   </span>
                 </div>
-                <div style={{
-                  display: 'flex', flexDirection: 'column', gap: 8,
-                  overflowY: 'auto', maxHeight: 'calc(100vh - 220px)', paddingRight: 2,
-                }}>
+                <div
+                  onDragOver={e => e.preventDefault()}
+                  onDrop={e => { e.preventDefault(); dropOnColumn(key); }}
+                  style={{
+                    display: 'flex', flexDirection: 'column', gap: 8,
+                    overflowY: 'auto', maxHeight: 'calc(100vh - 220px)', paddingRight: 2,
+                  }}>
                   {mode === 'project' && key === 'backlog' && (
                     <div style={{ display: 'flex', gap: 6 }}>
                       <input value={newTitle}
@@ -246,9 +323,10 @@ function TaskBoard({ projects, onOpenDrill }) {
                     <React.Fragment>
                       {colTasks.map((t, i) => (
                         <TaskBoardCard key={t.id} task={t} mode={mode}
-                          colTasks={colTasks} index={i}
+                          colTasks={colTasks} index={i} byId={boardById}
                           onMoveStatus={moveStatus} onMoveRank={moveRank}
-                          onOpenProject={openProject} />
+                          onOpenProject={openProject}
+                          onMoveTo={moveTo} onDropOnCard={dropOnCard} />
                       ))}
                       {colTasks.length === 0 && !(mode === 'project' && key === 'backlog') && (
                         <div style={{ fontSize: 11, color: T.textDim, fontStyle: 'italic', padding: '4px 2px' }}>