@hasna/todos 0.11.43 → 0.11.45

package/dist/server/index.js

@@ -994,6 +994,152 @@ var init_migrations = __esm(() => {
   );
   CREATE INDEX IF NOT EXISTS idx_saved_search_views_scope ON saved_search_views(scope);
   INSERT OR IGNORE INTO _migrations (id) VALUES (55);
+  `,
+    `
+  ALTER TABLE task_time_logs ADD COLUMN run_id TEXT;
+  ALTER TABLE task_time_logs ADD COLUMN focus_session_id TEXT;
+  CREATE INDEX IF NOT EXISTS idx_task_time_logs_run ON task_time_logs(run_id);
+  CREATE INDEX IF NOT EXISTS idx_task_time_logs_focus_session ON task_time_logs(focus_session_id);
+  CREATE TABLE IF NOT EXISTS focus_sessions (
+    id TEXT PRIMARY KEY,
+    task_id TEXT REFERENCES tasks(id) ON DELETE SET NULL,
+    plan_id TEXT REFERENCES plans(id) ON DELETE SET NULL,
+    run_id TEXT,
+    agent_id TEXT,
+    title TEXT,
+    status TEXT NOT NULL DEFAULT 'active' CHECK(status IN ('active', 'paused', 'completed', 'cancelled')),
+    started_at TEXT NOT NULL,
+    last_resumed_at TEXT,
+    paused_at TEXT,
+    ended_at TEXT,
+    actual_minutes INTEGER NOT NULL DEFAULT 0,
+    idle_after_minutes INTEGER,
+    notes TEXT,
+    metadata TEXT DEFAULT '{}',
+    created_at TEXT NOT NULL DEFAULT (datetime('now')),
+    updated_at TEXT NOT NULL DEFAULT (datetime('now'))
+  );
+  CREATE INDEX IF NOT EXISTS idx_focus_sessions_task ON focus_sessions(task_id);
+  CREATE INDEX IF NOT EXISTS idx_focus_sessions_plan ON focus_sessions(plan_id);
+  CREATE INDEX IF NOT EXISTS idx_focus_sessions_run ON focus_sessions(run_id);
+  CREATE INDEX IF NOT EXISTS idx_focus_sessions_agent ON focus_sessions(agent_id);
+  CREATE INDEX IF NOT EXISTS idx_focus_sessions_status ON focus_sessions(status);
+  INSERT OR IGNORE INTO _migrations (id) VALUES (56);
+  `,
+    `
+  CREATE TABLE IF NOT EXISTS task_boards (
+    id TEXT PRIMARY KEY,
+    name TEXT NOT NULL UNIQUE,
+    scope TEXT NOT NULL DEFAULT 'tasks' CHECK(scope IN ('tasks', 'plans')),
+    project_id TEXT REFERENCES projects(id) ON DELETE SET NULL,
+    task_list_id TEXT REFERENCES task_lists(id) ON DELETE SET NULL,
+    plan_id TEXT REFERENCES plans(id) ON DELETE SET NULL,
+    agent_id TEXT,
+    lanes TEXT NOT NULL DEFAULT '[]',
+    filters TEXT NOT NULL DEFAULT '{}',
+    created_at TEXT NOT NULL DEFAULT (datetime('now')),
+    updated_at TEXT NOT NULL DEFAULT (datetime('now'))
+  );
+  CREATE INDEX IF NOT EXISTS idx_task_boards_scope ON task_boards(scope);
+  CREATE INDEX IF NOT EXISTS idx_task_boards_project ON task_boards(project_id);
+  CREATE INDEX IF NOT EXISTS idx_task_boards_plan ON task_boards(plan_id);
+  INSERT OR IGNORE INTO _migrations (id) VALUES (57);
+  `,
+    `
+  CREATE TABLE IF NOT EXISTS local_calendar_items (
+    id TEXT PRIMARY KEY,
+    kind TEXT NOT NULL CHECK(kind IN ('task_due', 'task_sla', 'task_reminder', 'milestone', 'work_block', 'run', 'imported')),
+    title TEXT NOT NULL,
+    description TEXT,
+    starts_at TEXT NOT NULL,
+    ends_at TEXT,
+    timezone TEXT,
+    project_id TEXT REFERENCES projects(id) ON DELETE SET NULL,
+    task_id TEXT REFERENCES tasks(id) ON DELETE SET NULL,
+    plan_id TEXT REFERENCES plans(id) ON DELETE SET NULL,
+    run_id TEXT,
+    recurrence_rule TEXT,
+    metadata TEXT DEFAULT '{}',
+    created_at TEXT NOT NULL DEFAULT (datetime('now')),
+    updated_at TEXT NOT NULL DEFAULT (datetime('now'))
+  );
+  CREATE INDEX IF NOT EXISTS idx_local_calendar_items_time ON local_calendar_items(starts_at, ends_at);
+  CREATE INDEX IF NOT EXISTS idx_local_calendar_items_task ON local_calendar_items(task_id);
+  CREATE INDEX IF NOT EXISTS idx_local_calendar_items_project ON local_calendar_items(project_id);
+  CREATE INDEX IF NOT EXISTS idx_local_calendar_items_kind ON local_calendar_items(kind);
+  INSERT OR IGNORE INTO _migrations (id) VALUES (58);
+  `,
+    `
+  CREATE TABLE IF NOT EXISTS project_knowledge_records (
+    id TEXT PRIMARY KEY,
+    record_type TEXT NOT NULL CHECK(record_type IN ('decision','architecture_note','tradeoff','context_snapshot')),
+    title TEXT NOT NULL,
+    content TEXT,
+    decision TEXT,
+    rationale TEXT,
+    alternatives TEXT DEFAULT '[]',
+    task_id TEXT REFERENCES tasks(id) ON DELETE SET NULL,
+    project_id TEXT REFERENCES projects(id) ON DELETE SET NULL,
+    plan_id TEXT REFERENCES plans(id) ON DELETE SET NULL,
+    agent_id TEXT,
+    snapshot_id TEXT REFERENCES context_snapshots(id) ON DELETE SET NULL,
+    tags TEXT DEFAULT '[]',
+    metadata TEXT DEFAULT '{}',
+    created_at TEXT NOT NULL DEFAULT (datetime('now')),
+    updated_at TEXT NOT NULL DEFAULT (datetime('now'))
+  );
+  CREATE INDEX IF NOT EXISTS idx_project_knowledge_type ON project_knowledge_records(record_type);
+  CREATE INDEX IF NOT EXISTS idx_project_knowledge_project ON project_knowledge_records(project_id);
+  CREATE INDEX IF NOT EXISTS idx_project_knowledge_task ON project_knowledge_records(task_id);
+  CREATE INDEX IF NOT EXISTS idx_project_knowledge_plan ON project_knowledge_records(plan_id);
+  CREATE INDEX IF NOT EXISTS idx_project_knowledge_agent ON project_knowledge_records(agent_id);
+  CREATE INDEX IF NOT EXISTS idx_project_knowledge_snapshot ON project_knowledge_records(snapshot_id);
+  INSERT OR IGNORE INTO _migrations (id) VALUES (59);
+  `,
+    `
+  CREATE TABLE IF NOT EXISTS project_risks (
+    id TEXT PRIMARY KEY,
+    title TEXT NOT NULL,
+    description TEXT,
+    status TEXT NOT NULL DEFAULT 'open' CHECK(status IN ('open','mitigating','resolved','accepted')),
+    severity TEXT NOT NULL DEFAULT 'medium' CHECK(severity IN ('low','medium','high','critical')),
+    probability TEXT NOT NULL DEFAULT 'medium' CHECK(probability IN ('low','medium','high')),
+    owner TEXT,
+    mitigation TEXT,
+    due_at TEXT,
+    project_id TEXT REFERENCES projects(id) ON DELETE SET NULL,
+    plan_id TEXT REFERENCES plans(id) ON DELETE SET NULL,
+    task_id TEXT REFERENCES tasks(id) ON DELETE SET NULL,
+    tags TEXT DEFAULT '[]',
+    metadata TEXT DEFAULT '{}',
+    created_at TEXT NOT NULL DEFAULT (datetime('now')),
+    updated_at TEXT NOT NULL DEFAULT (datetime('now')),
+    closed_at TEXT
+  );
+  CREATE INDEX IF NOT EXISTS idx_project_risks_status ON project_risks(status);
+  CREATE INDEX IF NOT EXISTS idx_project_risks_severity ON project_risks(severity);
+  CREATE INDEX IF NOT EXISTS idx_project_risks_project ON project_risks(project_id);
+  CREATE INDEX IF NOT EXISTS idx_project_risks_plan ON project_risks(plan_id);
+  CREATE INDEX IF NOT EXISTS idx_project_risks_task ON project_risks(task_id);
+  CREATE INDEX IF NOT EXISTS idx_project_risks_due ON project_risks(due_at);
+  INSERT OR IGNORE INTO _migrations (id) VALUES (60);
+  `,
+    `
+  CREATE TABLE IF NOT EXISTS local_retrospectives (
+    id TEXT PRIMARY KEY,
+    title TEXT NOT NULL,
+    scope TEXT NOT NULL CHECK(scope IN ('project','plan')),
+    project_id TEXT REFERENCES projects(id) ON DELETE SET NULL,
+    plan_id TEXT REFERENCES plans(id) ON DELETE SET NULL,
+    agent_id TEXT,
+    report_json TEXT NOT NULL,
+    created_at TEXT NOT NULL DEFAULT (datetime('now')),
+    updated_at TEXT NOT NULL DEFAULT (datetime('now'))
+  );
+  CREATE INDEX IF NOT EXISTS idx_local_retrospectives_project ON local_retrospectives(project_id);
+  CREATE INDEX IF NOT EXISTS idx_local_retrospectives_plan ON local_retrospectives(plan_id);
+  CREATE INDEX IF NOT EXISTS idx_local_retrospectives_agent ON local_retrospectives(agent_id);
+  INSERT OR IGNORE INTO _migrations (id) VALUES (61);
   `
   ];
 });
@@ -1181,6 +1327,89 @@ function ensureSchema(db) {
       updated_at TEXT NOT NULL DEFAULT (datetime('now'))
     )`);
   ensureIndex("CREATE INDEX IF NOT EXISTS idx_saved_search_views_scope ON saved_search_views(scope)");
+  ensureTable("context_snapshots", `
+    CREATE TABLE context_snapshots (
+      id TEXT PRIMARY KEY,
+      agent_id TEXT,
+      task_id TEXT REFERENCES tasks(id) ON DELETE SET NULL,
+      project_id TEXT REFERENCES projects(id) ON DELETE SET NULL,
+      snapshot_type TEXT NOT NULL CHECK(snapshot_type IN ('interrupt','complete','handoff','checkpoint')),
+      plan_summary TEXT,
+      files_open TEXT DEFAULT '[]',
+      attempts TEXT DEFAULT '[]',
+      blockers TEXT DEFAULT '[]',
+      next_steps TEXT,
+      metadata TEXT DEFAULT '{}',
+      created_at TEXT NOT NULL DEFAULT (datetime('now'))
+    )`);
+  ensureIndex("CREATE INDEX IF NOT EXISTS idx_snapshots_agent ON context_snapshots(agent_id)");
+  ensureIndex("CREATE INDEX IF NOT EXISTS idx_snapshots_task ON context_snapshots(task_id)");
+  ensureTable("project_knowledge_records", `
+    CREATE TABLE project_knowledge_records (
+      id TEXT PRIMARY KEY,
+      record_type TEXT NOT NULL CHECK(record_type IN ('decision','architecture_note','tradeoff','context_snapshot')),
+      title TEXT NOT NULL,
+      content TEXT,
+      decision TEXT,
+      rationale TEXT,
+      alternatives TEXT DEFAULT '[]',
+      task_id TEXT REFERENCES tasks(id) ON DELETE SET NULL,
+      project_id TEXT REFERENCES projects(id) ON DELETE SET NULL,
+      plan_id TEXT REFERENCES plans(id) ON DELETE SET NULL,
+      agent_id TEXT,
+      snapshot_id TEXT REFERENCES context_snapshots(id) ON DELETE SET NULL,
+      tags TEXT DEFAULT '[]',
+      metadata TEXT DEFAULT '{}',
+      created_at TEXT NOT NULL DEFAULT (datetime('now')),
+      updated_at TEXT NOT NULL DEFAULT (datetime('now'))
+    )`);
+  ensureIndex("CREATE INDEX IF NOT EXISTS idx_project_knowledge_type ON project_knowledge_records(record_type)");
+  ensureIndex("CREATE INDEX IF NOT EXISTS idx_project_knowledge_project ON project_knowledge_records(project_id)");
+  ensureIndex("CREATE INDEX IF NOT EXISTS idx_project_knowledge_task ON project_knowledge_records(task_id)");
+  ensureIndex("CREATE INDEX IF NOT EXISTS idx_project_knowledge_plan ON project_knowledge_records(plan_id)");
+  ensureIndex("CREATE INDEX IF NOT EXISTS idx_project_knowledge_agent ON project_knowledge_records(agent_id)");
+  ensureIndex("CREATE INDEX IF NOT EXISTS idx_project_knowledge_snapshot ON project_knowledge_records(snapshot_id)");
+  ensureTable("project_risks", `
+    CREATE TABLE project_risks (
+      id TEXT PRIMARY KEY,
+      title TEXT NOT NULL,
+      description TEXT,
+      status TEXT NOT NULL DEFAULT 'open' CHECK(status IN ('open','mitigating','resolved','accepted')),
+      severity TEXT NOT NULL DEFAULT 'medium' CHECK(severity IN ('low','medium','high','critical')),
+      probability TEXT NOT NULL DEFAULT 'medium' CHECK(probability IN ('low','medium','high')),
+      owner TEXT,
+      mitigation TEXT,
+      due_at TEXT,
+      project_id TEXT REFERENCES projects(id) ON DELETE SET NULL,
+      plan_id TEXT REFERENCES plans(id) ON DELETE SET NULL,
+      task_id TEXT REFERENCES tasks(id) ON DELETE SET NULL,
+      tags TEXT DEFAULT '[]',
+      metadata TEXT DEFAULT '{}',
+      created_at TEXT NOT NULL DEFAULT (datetime('now')),
+      updated_at TEXT NOT NULL DEFAULT (datetime('now')),
+      closed_at TEXT
+    )`);
+  ensureIndex("CREATE INDEX IF NOT EXISTS idx_project_risks_status ON project_risks(status)");
+  ensureIndex("CREATE INDEX IF NOT EXISTS idx_project_risks_severity ON project_risks(severity)");
+  ensureIndex("CREATE INDEX IF NOT EXISTS idx_project_risks_project ON project_risks(project_id)");
+  ensureIndex("CREATE INDEX IF NOT EXISTS idx_project_risks_plan ON project_risks(plan_id)");
+  ensureIndex("CREATE INDEX IF NOT EXISTS idx_project_risks_task ON project_risks(task_id)");
+  ensureIndex("CREATE INDEX IF NOT EXISTS idx_project_risks_due ON project_risks(due_at)");
+  ensureTable("local_retrospectives", `
+    CREATE TABLE local_retrospectives (
+      id TEXT PRIMARY KEY,
+      title TEXT NOT NULL,
+      scope TEXT NOT NULL CHECK(scope IN ('project','plan')),
+      project_id TEXT REFERENCES projects(id) ON DELETE SET NULL,
+      plan_id TEXT REFERENCES plans(id) ON DELETE SET NULL,
+      agent_id TEXT,
+      report_json TEXT NOT NULL,
+      created_at TEXT NOT NULL DEFAULT (datetime('now')),
+      updated_at TEXT NOT NULL DEFAULT (datetime('now'))
+    )`);
+  ensureIndex("CREATE INDEX IF NOT EXISTS idx_local_retrospectives_project ON local_retrospectives(project_id)");
+  ensureIndex("CREATE INDEX IF NOT EXISTS idx_local_retrospectives_plan ON local_retrospectives(plan_id)");
+  ensureIndex("CREATE INDEX IF NOT EXISTS idx_local_retrospectives_agent ON local_retrospectives(agent_id)");
   ensureTable("task_relationships", `
     CREATE TABLE task_relationships (
       id TEXT PRIMARY KEY,
@@ -1517,6 +1746,8 @@ function ensureSchema(db) {
     CREATE TABLE task_time_logs (
       id TEXT PRIMARY KEY,
       task_id TEXT NOT NULL REFERENCES tasks(id) ON DELETE CASCADE,
+      run_id TEXT,
+      focus_session_id TEXT,
       agent_id TEXT,
       started_at TEXT,
       ended_at TEXT,
@@ -1524,9 +1755,77 @@ function ensureSchema(db) {
       notes TEXT,
       created_at TEXT NOT NULL DEFAULT (datetime('now'))
     )`);
+  ensureColumn("task_time_logs", "run_id", "TEXT");
+  ensureColumn("task_time_logs", "focus_session_id", "TEXT");
   ensureIndex("CREATE INDEX IF NOT EXISTS idx_task_time_logs_task ON task_time_logs(task_id)");
   ensureIndex("CREATE INDEX IF NOT EXISTS idx_task_time_logs_agent ON task_time_logs(agent_id)");
+  ensureIndex("CREATE INDEX IF NOT EXISTS idx_task_time_logs_run ON task_time_logs(run_id)");
+  ensureIndex("CREATE INDEX IF NOT EXISTS idx_task_time_logs_focus_session ON task_time_logs(focus_session_id)");
   ensureColumn("tasks", "actual_minutes", "INTEGER");
+  ensureTable("focus_sessions", `
+    CREATE TABLE focus_sessions (
+      id TEXT PRIMARY KEY,
+      task_id TEXT REFERENCES tasks(id) ON DELETE SET NULL,
+      plan_id TEXT REFERENCES plans(id) ON DELETE SET NULL,
+      run_id TEXT,
+      agent_id TEXT,
+      title TEXT,
+      status TEXT NOT NULL DEFAULT 'active' CHECK(status IN ('active', 'paused', 'completed', 'cancelled')),
+      started_at TEXT NOT NULL,
+      last_resumed_at TEXT,
+      paused_at TEXT,
+      ended_at TEXT,
+      actual_minutes INTEGER NOT NULL DEFAULT 0,
+      idle_after_minutes INTEGER,
+      notes TEXT,
+      metadata TEXT DEFAULT '{}',
+      created_at TEXT NOT NULL DEFAULT (datetime('now')),
+      updated_at TEXT NOT NULL DEFAULT (datetime('now'))
+    )`);
+  ensureIndex("CREATE INDEX IF NOT EXISTS idx_focus_sessions_task ON focus_sessions(task_id)");
+  ensureIndex("CREATE INDEX IF NOT EXISTS idx_focus_sessions_plan ON focus_sessions(plan_id)");
+  ensureIndex("CREATE INDEX IF NOT EXISTS idx_focus_sessions_run ON focus_sessions(run_id)");
+  ensureIndex("CREATE INDEX IF NOT EXISTS idx_focus_sessions_agent ON focus_sessions(agent_id)");
+  ensureIndex("CREATE INDEX IF NOT EXISTS idx_focus_sessions_status ON focus_sessions(status)");
+  ensureTable("task_boards", `
+    CREATE TABLE task_boards (
+      id TEXT PRIMARY KEY,
+      name TEXT NOT NULL UNIQUE,
+      scope TEXT NOT NULL DEFAULT 'tasks' CHECK(scope IN ('tasks', 'plans')),
+      project_id TEXT REFERENCES projects(id) ON DELETE SET NULL,
+      task_list_id TEXT REFERENCES task_lists(id) ON DELETE SET NULL,
+      plan_id TEXT REFERENCES plans(id) ON DELETE SET NULL,
+      agent_id TEXT,
+      lanes TEXT NOT NULL DEFAULT '[]',
+      filters TEXT NOT NULL DEFAULT '{}',
+      created_at TEXT NOT NULL DEFAULT (datetime('now')),
+      updated_at TEXT NOT NULL DEFAULT (datetime('now'))
+    )`);
+  ensureIndex("CREATE INDEX IF NOT EXISTS idx_task_boards_scope ON task_boards(scope)");
+  ensureIndex("CREATE INDEX IF NOT EXISTS idx_task_boards_project ON task_boards(project_id)");
+  ensureIndex("CREATE INDEX IF NOT EXISTS idx_task_boards_plan ON task_boards(plan_id)");
+  ensureTable("local_calendar_items", `
+    CREATE TABLE local_calendar_items (
+      id TEXT PRIMARY KEY,
+      kind TEXT NOT NULL CHECK(kind IN ('task_due', 'task_sla', 'task_reminder', 'milestone', 'work_block', 'run', 'imported')),
+      title TEXT NOT NULL,
+      description TEXT,
+      starts_at TEXT NOT NULL,
+      ends_at TEXT,
+      timezone TEXT,
+      project_id TEXT REFERENCES projects(id) ON DELETE SET NULL,
+      task_id TEXT REFERENCES tasks(id) ON DELETE SET NULL,
+      plan_id TEXT REFERENCES plans(id) ON DELETE SET NULL,
+      run_id TEXT,
+      recurrence_rule TEXT,
+      metadata TEXT DEFAULT '{}',
+      created_at TEXT NOT NULL DEFAULT (datetime('now')),
+      updated_at TEXT NOT NULL DEFAULT (datetime('now'))
+    )`);
+  ensureIndex("CREATE INDEX IF NOT EXISTS idx_local_calendar_items_time ON local_calendar_items(starts_at, ends_at)");
+  ensureIndex("CREATE INDEX IF NOT EXISTS idx_local_calendar_items_task ON local_calendar_items(task_id)");
+  ensureIndex("CREATE INDEX IF NOT EXISTS idx_local_calendar_items_project ON local_calendar_items(project_id)");
+  ensureIndex("CREATE INDEX IF NOT EXISTS idx_local_calendar_items_kind ON local_calendar_items(kind)");
   ensureTable("task_watchers", `
     CREATE TABLE task_watchers (
       id TEXT PRIMARY KEY,
@@ -1606,12 +1905,22 @@ var init_schema = __esm(() => {
 });
 
 // src/db/machines.ts
-import { hostname as osHostname, platform as osPlatform } from "os";
+import { hostname as osHostname, platform as osPlatform, arch as osArch } from "os";
+function parseMetadata(value) {
+  if (!value)
+    return {};
+  try {
+    const parsed = JSON.parse(value);
+    return parsed && typeof parsed === "object" && !Array.isArray(parsed) ? parsed : {};
+  } catch {
+    return {};
+  }
+}
 function rowToMachine(row) {
   return {
     ...row,
     is_primary: !!row.is_primary,
-    metadata: row.metadata ? JSON.parse(row.metadata) : {}
+    metadata: parseMetadata(row.metadata)
   };
 }
 function getOrCreateLocalMachine(db) {
@@ -1830,7 +2139,7 @@ var LOCK_EXPIRY_MINUTES = 30, _db = null, ALLOWED_TABLES;
 var init_database = __esm(() => {
   init_schema();
   init_machines();
-  ALLOWED_TABLES = new Set(["tasks", "projects", "agents", "plans", "task_lists", "task_templates"]);
+  ALLOWED_TABLES = new Set(["tasks", "projects", "agents", "plans", "task_lists", "task_templates", "project_knowledge_records", "project_risks", "local_retrospectives"]);
 });
 
 // src/lib/recurrence.ts
@@ -2622,8 +2931,45 @@ import { dirname as dirname4, resolve as resolve4 } from "path";
 import { createConnection } from "net";
 
 // src/lib/redaction.ts
+var DEFAULT_SECRET_PATTERNS = [
+  { name: "aws-access-key", regex: /\b(AKIA|ASIA)[0-9A-Z]{16}\b/g, replacement: "[REDACTED_AWS_KEY]" },
+  { name: "private-key", regex: /-----BEGIN (?:RSA |EC |OPENSSH |)PRIVATE KEY-----[\s\S]*?-----END (?:RSA |EC |OPENSSH |)PRIVATE KEY-----/g, replacement: "[REDACTED_PRIVATE_KEY]" },
+  { name: "openai-token", regex: /\bsk-[A-Za-z0-9_-]{12,}\b/g, replacement: "[REDACTED_TOKEN]" },
+  { name: "env-secret-assignment", regex: /\b([A-Za-z0-9_]*(?:API_KEY|TOKEN|SECRET|PASSWORD)[A-Za-z0-9_]*)\s*=\s*['"]?[^'"\s]{8,}/gi, replacement: "$1=[REDACTED]" },
+  { name: "bearer-token", regex: /\b(bearer)\s+[A-Za-z0-9._~+/=-]{12,}/gi, replacement: "$1 [REDACTED]" }
+];
+var DEFAULT_SECRET_KEY_PATTERN = /api[_-]?key|token|secret|password/i;
+function unique(values) {
+  return Array.from(new Set((values || []).map((value) => value.trim()).filter(Boolean)));
+}
+function cloneRegex(regex) {
+  return new RegExp(regex.source, regex.flags.includes("g") ? regex.flags : `${regex.flags}g`);
+}
+function customPatterns() {
+  return unique(loadConfig().secret_safety?.redaction_patterns).flatMap((pattern) => {
+    try {
+      return [{ name: `custom:${pattern}`, regex: new RegExp(pattern, "g") }];
+    } catch {
+      return [];
+    }
+  });
+}
+function secretPatterns() {
+  return [...customPatterns(), ...DEFAULT_SECRET_PATTERNS];
+}
+function isSecretKey(key) {
+  if (DEFAULT_SECRET_KEY_PATTERN.test(key))
+    return true;
+  return unique(loadConfig().secret_safety?.redaction_keys).some((pattern) => key.toLowerCase().includes(pattern.toLowerCase()));
+}
 function redactEvidenceText(value) {
-  return value.replace(/\b(AKIA|ASIA)[0-9A-Z]{16}\b/g, "[REDACTED_AWS_KEY]").replace(/-----BEGIN (?:RSA |EC |OPENSSH |)PRIVATE KEY-----[\s\S]*?-----END (?:RSA |EC |OPENSSH |)PRIVATE KEY-----/g, "[REDACTED_PRIVATE_KEY]").replace(/\bsk-[A-Za-z0-9_-]{12,}\b/g, "[REDACTED_TOKEN]").replace(/\b([A-Za-z0-9_]*(?:API_KEY|TOKEN|SECRET|PASSWORD)[A-Za-z0-9_]*)\s*=\s*['"]?[^'"\s]{8,}/gi, "$1=[REDACTED]").replace(/\b(bearer)\s+[A-Za-z0-9._~+/=-]{12,}/gi, "$1 [REDACTED]");
+  let redacted = value;
+  for (const pattern of secretPatterns()) {
+    const regex = cloneRegex(pattern.regex);
+    const replacement = pattern.replacement ?? "[REDACTED]";
+    redacted = typeof replacement === "string" ? redacted.replace(regex, replacement) : redacted.replace(regex, replacement);
+  }
+  return redacted;
 }
 function redactValue(value) {
   if (typeof value === "string")
@@ -2633,7 +2979,7 @@ function redactValue(value) {
   if (value && typeof value === "object") {
     const redacted = {};
     for (const [key, child] of Object.entries(value)) {
-      if (/api[_-]?key|token|secret|password/i.test(key)) {
+      if (isSecretKey(key)) {
         redacted[key] = "[REDACTED]";
       } else {
         redacted[key] = redactValue(child);
@@ -2696,7 +3042,7 @@ var PRESET_DEFAULTS = {
 function normalizePath(path) {
   return resolve2(path);
 }
-function unique(values) {
+function unique2(values) {
   return Array.from(new Set((values || []).map((value) => value.trim()).filter(Boolean)));
 }
 function defaultProfile(root, preset) {
@@ -2749,7 +3095,7 @@ function writeAllowed(profile, root, writePath) {
 function redactedEnvKeys(profile, env) {
   if (!env)
     return [];
-  const patterns = unique([...DEFAULT_ENV_REDACTIONS, ...profile.env_redactions]).map((item) => item.toUpperCase());
+  const patterns = unique2([...DEFAULT_ENV_REDACTIONS, ...profile.env_redactions]).map((item) => item.toUpperCase());
   return Object.keys(env).filter((key) => patterns.some((pattern) => key.toUpperCase().includes(pattern)));
 }
 function checkWorkspacePermission(input = {}) {
@@ -2788,7 +3134,7 @@ var DEFAULT_ENV_REDACTIONS2 = ["API_KEY", "TOKEN", "SECRET", "PASSWORD", "AUTH"]
 function normalizePath2(path) {
   return resolve3(path);
 }
-function unique2(values) {
+function unique3(values) {
   return Array.from(new Set((values || []).map((value) => value.trim()).filter(Boolean)));
 }
 function configuredProfiles2(config = loadConfig()) {
@@ -2844,7 +3190,7 @@ function profileByName(name, path) {
 function redactedEnvKeys2(profile, env) {
   if (!env)
     return [];
-  const patterns = unique2([...DEFAULT_ENV_REDACTIONS2, ...profile.env_redactions]).map((item) => item.toUpperCase());
+  const patterns = unique3([...DEFAULT_ENV_REDACTIONS2, ...profile.env_redactions]).map((item) => item.toUpperCase());
   return Object.keys(env).filter((key) => patterns.some((pattern) => key.toUpperCase().includes(pattern)));
 }
 function omittedEnvKeys(profile, env) {
@@ -2896,7 +3242,7 @@ function checkRunnerSandbox(input = {}) {
   const redacted = redactedEnvKeys2(profile, input.env);
   const omitted = omittedEnvKeys(profile, input.env);
   const effective = Object.keys(input.env || {}).filter((key) => !omitted.includes(key));
-  const uniqueReasons = unique2(reasons);
+  const uniqueReasons = unique3(reasons);
   const allowed = uniqueReasons.length === 0;
   return {
     allowed,
@@ -3333,8 +3679,8 @@ function createTask(input, db) {
   let id = uuid();
   for (let attempt = 0;attempt < 3; attempt++) {
     try {
-      d.run(`INSERT INTO tasks (id, short_id, project_id, parent_id, plan_id, task_list_id, cycle_id, title, description, status, priority, agent_id, assigned_to, session_id, working_dir, tags, metadata, version, created_at, updated_at, due_at, estimated_minutes, confidence, retry_count, max_retries, retry_after, requires_approval, approved_by, approved_at, recurrence_rule, recurrence_parent_id, spawns_template_id, reason, spawned_from_session, assigned_by, assigned_from_project, task_type)
-         VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, 1, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`, [
+      d.run(`INSERT INTO tasks (id, short_id, project_id, parent_id, plan_id, task_list_id, cycle_id, title, description, status, priority, agent_id, assigned_to, session_id, working_dir, tags, metadata, version, created_at, updated_at, due_at, estimated_minutes, sla_minutes, confidence, retry_count, max_retries, retry_after, requires_approval, approved_by, approved_at, recurrence_rule, recurrence_parent_id, spawns_template_id, reason, spawned_from_session, assigned_by, assigned_from_project, task_type)
+         VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, 1, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`, [
         id,
         null,
         input.project_id || null,
@@ -3356,6 +3702,7 @@ function createTask(input, db) {
         timestamp,
         input.due_at || null,
         input.estimated_minutes || null,
+        input.sla_minutes ?? null,
         input.confidence ?? null,
         input.retry_count ?? 0,
         input.max_retries ?? 3,
@@ -3635,6 +3982,10 @@ function updateTask(id, input, db) {
     sets.push("estimated_minutes = ?");
     params.push(input.estimated_minutes);
   }
+  if (input.sla_minutes !== undefined) {
+    sets.push("sla_minutes = ?");
+    params.push(input.sla_minutes);
+  }
   if (input.actual_minutes !== undefined) {
     sets.push("actual_minutes = ?");
     params.push(input.actual_minutes);
@@ -3716,6 +4067,7 @@ function updateTask(id, input, db) {
     version: task.version + 1,
     updated_at: timestamp,
     completed_at: input.status === "completed" ? completionTimestamp : input.completed_at !== undefined ? input.completed_at : task.completed_at,
+    sla_minutes: input.sla_minutes !== undefined ? input.sla_minutes : task.sla_minutes,
     actual_minutes: input.actual_minutes ?? task.actual_minutes,
     confidence: input.confidence !== undefined ? input.confidence : task.confidence,
     retry_count: input.retry_count ?? task.retry_count,
@@ -3957,7 +4309,7 @@ function completeTask(id, agentId, db, options) {
   emitLocalEventHooksQuiet({ type: "task.completed", payload: { id, agent_id: agentId, title: task.title, completed_at: timestamp } });
   let spawnedTask = null;
   if (task.recurrence_rule && !options?.skip_recurrence) {
-    spawnedTask = spawnNextRecurrence(task, d);
+    spawnedTask = spawnNextRecurrence(task, d, timestamp);
   }
   let spawnedFromTemplate = null;
   if (task.spawns_template_id) {
@@ -4176,8 +4528,9 @@ function getStaleTasks(staleQuery = 30, filters, db) {
   const rows = d.query(`SELECT * FROM tasks WHERE ${where} ORDER BY updated_at ASC`).all(...params);
   return rows.map(rowToTask);
 }
-function spawnNextRecurrence(completedTask, db) {
-  const dueAt = nextOccurrence(completedTask.recurrence_rule, new Date);
+function spawnNextRecurrence(completedTask, db, completedAt) {
+  const recurrenceBase = completedTask.due_at ? new Date(completedTask.due_at) : new Date(completedAt);
+  const dueAt = nextOccurrence(completedTask.recurrence_rule, recurrenceBase);
   let title = completedTask.title;
   if (completedTask.short_id && title.startsWith(completedTask.short_id + ": ")) {
     title = title.slice(completedTask.short_id.length + 2);
@@ -4194,6 +4547,7 @@ function spawnNextRecurrence(completedTask, db) {
     tags: completedTask.tags,
     metadata: completedTask.metadata,
     estimated_minutes: completedTask.estimated_minutes ?? undefined,
+    sla_minutes: completedTask.sla_minutes ?? undefined,
     recurrence_rule: completedTask.recurrence_rule,
     recurrence_parent_id: recurrenceParentId,
     due_at: dueAt
@@ -4285,6 +4639,130 @@ function getTaskStats(filters, db) {
 }
 // src/db/task-relations.ts
 init_database();
+// src/db/boards.ts
+init_database();
+
+// src/db/plans.ts
+init_database();
+function createPlan(input, db) {
+  const d = db || getDatabase();
+  const id = uuid();
+  const timestamp = now();
+  d.run(`INSERT INTO plans (id, project_id, task_list_id, agent_id, name, description, status, created_at, updated_at)
+     VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)`, [
+    id,
+    input.project_id || null,
+    input.task_list_id || null,
+    input.agent_id || null,
+    input.name,
+    input.description || null,
+    input.status || "active",
+    timestamp,
+    timestamp
+  ]);
+  return getPlan(id, d);
+}
+function getPlan(id, db) {
+  const d = db || getDatabase();
+  const row = d.query("SELECT * FROM plans WHERE id = ?").get(id);
+  return row;
+}
+function listPlans(projectId, db) {
+  const d = db || getDatabase();
+  if (projectId) {
+    return d.query("SELECT * FROM plans WHERE project_id = ? ORDER BY created_at DESC").all(projectId);
+  }
+  return d.query("SELECT * FROM plans ORDER BY created_at DESC").all();
+}
+function updatePlan(id, input, db) {
+  const d = db || getDatabase();
+  const plan = getPlan(id, d);
+  if (!plan)
+    throw new PlanNotFoundError(id);
+  const sets = ["updated_at = ?"];
+  const params = [now()];
+  if (input.name !== undefined) {
+    sets.push("name = ?");
+    params.push(input.name);
+  }
+  if (input.description !== undefined) {
+    sets.push("description = ?");
+    params.push(input.description);
+  }
+  if (input.status !== undefined) {
+    sets.push("status = ?");
+    params.push(input.status);
+  }
+  if (input.task_list_id !== undefined) {
+    sets.push("task_list_id = ?");
+    params.push(input.task_list_id);
+  }
+  if (input.agent_id !== undefined) {
+    sets.push("agent_id = ?");
+    params.push(input.agent_id);
+  }
+  params.push(id);
+  d.run(`UPDATE plans SET ${sets.join(", ")} WHERE id = ?`, params);
+  const updated = getPlan(id, d);
+  emitLocalEventHooksQuiet({
+    type: "plan.updated",
+    payload: { id, old_status: plan.status, new_status: updated.status, name: updated.name, project_id: updated.project_id }
+  });
+  return updated;
+}
+function deletePlan(id, db) {
+  const d = db || getDatabase();
+  const result = d.run("DELETE FROM plans WHERE id = ?", [id]);
+  return result.changes > 0;
+}
+// src/db/calendar.ts
+init_database();
+
+// src/lib/artifact-store.ts
+init_database();
+
+// src/db/comments.ts
+init_database();
+function addComment(input, db) {
+  const d = db || getDatabase();
+  if (!getTask(input.task_id, d)) {
+    throw new TaskNotFoundError(input.task_id);
+  }
+  const id = uuid();
+  const timestamp = now();
+  d.run(`INSERT INTO task_comments (id, task_id, agent_id, session_id, content, type, progress_pct, created_at)
+     VALUES (?, ?, ?, ?, ?, ?, ?, ?)`, [
+    id,
+    input.task_id,
+    input.agent_id || null,
+    input.session_id || null,
+    redactEvidenceText(input.content),
+    input.type || "comment",
+    input.progress_pct ?? null,
+    timestamp
+  ]);
+  return getComment(id, d);
+}
+function logProgress(taskId, message, pct, agentId, db) {
+  return addComment({ task_id: taskId, content: message, type: "progress", progress_pct: pct, agent_id: agentId }, db);
+}
+function getComment(id, db) {
+  const d = db || getDatabase();
+  return d.query("SELECT * FROM task_comments WHERE id = ?").get(id);
+}
+function listComments(taskId, db) {
+  const d = db || getDatabase();
+  return d.query("SELECT * FROM task_comments WHERE task_id = ? ORDER BY created_at").all(taskId);
+}
+
+// src/db/task-runs.ts
+init_database();
+
+// src/db/task-files.ts
+init_database();
+
+// src/db/task-commits.ts
+init_database();
 // src/db/agents.ts
 init_database();
 
@@ -4686,80 +5164,6 @@ function getOrgChart(db) {
   return buildTree(null);
 }
 
-// src/db/plans.ts
-init_database();
-function createPlan(input, db) {
-  const d = db || getDatabase();
-  const id = uuid();
-  const timestamp = now();
-  d.run(`INSERT INTO plans (id, project_id, task_list_id, agent_id, name, description, status, created_at, updated_at)
-     VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)`, [
-    id,
-    input.project_id || null,
-    input.task_list_id || null,
-    input.agent_id || null,
-    input.name,
-    input.description || null,
-    input.status || "active",
-    timestamp,
-    timestamp
-  ]);
-  return getPlan(id, d);
-}
-function getPlan(id, db) {
-  const d = db || getDatabase();
-  const row = d.query("SELECT * FROM plans WHERE id = ?").get(id);
-  return row;
-}
-function listPlans(projectId, db) {
-  const d = db || getDatabase();
-  if (projectId) {
-    return d.query("SELECT * FROM plans WHERE project_id = ? ORDER BY created_at DESC").all(projectId);
-  }
-  return d.query("SELECT * FROM plans ORDER BY created_at DESC").all();
-}
-function updatePlan(id, input, db) {
-  const d = db || getDatabase();
-  const plan = getPlan(id, d);
-  if (!plan)
-    throw new PlanNotFoundError(id);
-  const sets = ["updated_at = ?"];
-  const params = [now()];
-  if (input.name !== undefined) {
-    sets.push("name = ?");
-    params.push(input.name);
-  }
-  if (input.description !== undefined) {
-    sets.push("description = ?");
-    params.push(input.description);
-  }
-  if (input.status !== undefined) {
-    sets.push("status = ?");
-    params.push(input.status);
-  }
-  if (input.task_list_id !== undefined) {
-    sets.push("task_list_id = ?");
-    params.push(input.task_list_id);
-  }
-  if (input.agent_id !== undefined) {
-    sets.push("agent_id = ?");
-    params.push(input.agent_id);
-  }
-  params.push(id);
-  d.run(`UPDATE plans SET ${sets.join(", ")} WHERE id = ?`, params);
-  const updated = getPlan(id, d);
-  emitLocalEventHooksQuiet({
-    type: "plan.updated",
-    payload: { id, old_status: plan.status, new_status: updated.status, name: updated.name, project_id: updated.project_id }
-  });
-  return updated;
-}
-function deletePlan(id, db) {
-  const d = db || getDatabase();
-  const result = d.run("DELETE FROM plans WHERE id = ?", [id]);
-  return result.changes > 0;
-}
-
 // src/db/orgs.ts
 init_database();
 function rowToOrg(row) {
@@ -4809,40 +5213,6 @@ function deleteOrg(id, db) {
   return d.run("DELETE FROM orgs WHERE id = ?", [id]).changes > 0;
 }
 
-// src/db/comments.ts
-init_database();
-function addComment(input, db) {
-  const d = db || getDatabase();
-  if (!getTask(input.task_id, d)) {
-    throw new TaskNotFoundError(input.task_id);
-  }
-  const id = uuid();
-  const timestamp = now();
-  d.run(`INSERT INTO task_comments (id, task_id, agent_id, session_id, content, type, progress_pct, created_at)
-     VALUES (?, ?, ?, ?, ?, ?, ?, ?)`, [
-    id,
-    input.task_id,
-    input.agent_id || null,
-    input.session_id || null,
-    input.content,
-    input.type || "comment",
-    input.progress_pct ?? null,
-    timestamp
-  ]);
-  return getComment(id, d);
-}
-function logProgress(taskId, message, pct, agentId, db) {
-  return addComment({ task_id: taskId, content: message, type: "progress", progress_pct: pct, agent_id: agentId }, db);
-}
-function getComment(id, db) {
-  const d = db || getDatabase();
-  return d.query("SELECT * FROM task_comments WHERE id = ?").get(id);
-}
-function listComments(taskId, db) {
-  const d = db || getDatabase();
-  return d.query("SELECT * FROM task_comments WHERE task_id = ? ORDER BY created_at").all(taskId);
-}
-
 // src/server/routes.ts
 import { join as join5, resolve as resolve5, sep } from "path";
 function parseFieldsParam(url) {